January 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:0135-1: Recommended update for xf86-video-amdgpu
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for xf86-video-amdgpu ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0135-1 Rating: low References: #1018406 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xf86-video-amdgpu contains the following changes: - Address AMD graphic issues (GUI flickers) by enablinng amdgpu.ids which lists all supported PCI Id for server in general, but disable it by default for any PCI ID (bnc#1018406) This update syncs the package with SUSE:SLE-12-SP2:GA/xf86-video-amdgpu. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-80=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xf86-video-amdgpu-1.1.0-3.1 xf86-video-amdgpu-debuginfo-1.1.0-3.1 xf86-video-amdgpu-debugsource-1.1.0-3.1 References: https://bugzilla.suse.com/1018406

1 0

openSUSE-RU-2017:0134-1: Recommended update for kshutdown
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for kshutdown ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0134-1 Rating: low References: #1018729 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kshutdown contains various minor fixes and improvements: - Use the standard Ctrl+Q shortcut instead of Ctrl+Shift+Q - Support "--version" command line option, ignore "/?" option - translation updates - Make menu titles less distractive and less annoying - Disable incorrectly positioned tool tips in System Tray menu - Adjust the desktop file, including no longer running kshutdown as root Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-77=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): kshutdown-4.0-3.1 kshutdown-debuginfo-4.0-3.1 kshutdown-debugsource-4.0-3.1 References: https://bugzilla.suse.com/1018729

1 0

openSUSE-RU-2017:0133-1: moderate: Recommended update for ModemManager
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for ModemManager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0133-1 Rating: moderate References: #1017734 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ModemManager fixes the following issues: - ModemManager now recommends libmbim as it uses mbim-proxy (boo#1017734) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-76=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-76=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ModemManager-1.4.14-4.1 ModemManager-debuginfo-1.4.14-4.1 ModemManager-debugsource-1.4.14-4.1 ModemManager-devel-1.4.14-4.1 libmm-glib0-1.4.14-4.1 libmm-glib0-debuginfo-1.4.14-4.1 typelib-1_0-ModemManager-1_0-1.4.14-4.1 - openSUSE Leap 42.2 (noarch): ModemManager-lang-1.4.14-4.1 - openSUSE Leap 42.1 (i586 x86_64): ModemManager-1.4.10-5.1 ModemManager-debuginfo-1.4.10-5.1 ModemManager-debugsource-1.4.10-5.1 ModemManager-devel-1.4.10-5.1 libmm-glib0-1.4.10-5.1 libmm-glib0-debuginfo-1.4.10-5.1 typelib-1_0-ModemManager-1_0-1.4.10-5.1 - openSUSE Leap 42.1 (noarch): ModemManager-lang-1.4.10-5.1 References: https://bugzilla.suse.com/1017734

1 0

openSUSE-RU-2017:0132-1: important: Recommended update for iodine
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for iodine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0132-1 Rating: important References: #1017236 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for iodine fixes the following issues: - The Iodined.service could not be started due to unbalanced quotes in service files (boo#1017236) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-74=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-74=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): iodine-0.7.0-7.1 iodine-debuginfo-0.7.0-7.1 iodine-debugsource-0.7.0-7.1 - openSUSE Leap 42.1 (i586 x86_64): iodine-0.7.0-6.1 iodine-debuginfo-0.7.0-6.1 iodine-debugsource-0.7.0-6.1 References: https://bugzilla.suse.com/1017236

1 0

openSUSE-RU-2017:0131-1: moderate: Recommended update for libmateweather
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for libmateweather ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0131-1 Rating: moderate References: #1016856 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libmateweather fixes the following issues: - The applet would not load weather data (boo#1016856) Time zone and location information was also updated. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-75=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libmateweather-debugsource-1.10.0-4.1 libmateweather-devel-1.10.0-4.1 libmateweather1-1.10.0-4.1 libmateweather1-debuginfo-1.10.0-4.1 python-mateweather-1.10.0-4.1 python-mateweather-debuginfo-1.10.0-4.1 - openSUSE Leap 42.1 (x86_64): libmateweather1-32bit-1.10.0-4.1 libmateweather1-debuginfo-32bit-1.10.0-4.1 - openSUSE Leap 42.1 (noarch): libmateweather-lang-1.10.0-4.1 mateweather-common-1.10.0-4.1 References: https://bugzilla.suse.com/1016856

1 0

openSUSE-OU-2017:0125-1: moderate: Add ctemplate to SUSE Package Hub
by maintenance＠opensuse.org 13 Jan '17

13 Jan '17

openSUSE Optional Update: Add ctemplate to SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0125-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update makes ctemplate available in the SUSE Package Hub. CTemplate is a simple but powerful template language for C++. It emphasizes separating logic from presentation: it is impossible to embed application logic in this template language. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-73=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libctemplate-devel-2.3-2.1 libctemplate3-2.3-2.1 References:

1 0

openSUSE-OU-2017:0124-1: moderate: Add mtr to SUSE Package Hub
by maintenance＠opensuse.org 13 Jan '17

13 Jan '17

openSUSE Optional Update: Add mtr to SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0124-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update makes mtr available in the SUSE Package Hub. Mtr is a network diagnostic tool that combines Ping and Traceroute into one program. This package contains the mtr version with an ncurses interface, in other words, the text mode version is usable in a shell (telnet or SSH session, for example). Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-72=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): mtr-0.87-2.1 mtr-gtk-0.87-2.1 References:

1 0

openSUSE-SU-2017:0107-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 11 Jan '17

11 Jan '17

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0107-1 Rating: important References: #1019129 Cross-References: CVE-2017-2925 CVE-2017-2926 CVE-2017-2927 CVE-2017-2928 CVE-2017-2930 CVE-2017-2931 CVE-2017-2932 CVE-2017-2933 CVE-2017-2934 CVE-2017-2935 CVE-2017-2936 CVE-2017-2937 CVE-2017-2938 Affected Products: openSUSE 13.2 NonFree ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update to Adobe Flash 24.0.0.194 fixes the following vulnerabilities advised under APSB17-02: - security bypass vulnerability that could lead to information disclosure (CVE-2017-2938) - use-after-free vulnerabilities that could lead to code execution (CVE-2017-2932, CVE-2017-2936, CVE-2017-2937) - heap buffer overflow vulnerabilities that could lead to code execution (CVE-2017-2927, CVE-2017-2933, CVE-2017-2934, CVE-2017-2935) - memory corruption vulnerabilities that could lead to code execution (CVE-2017-2925, CVE-2017-2926, CVE-2017-2928, CVE-2017-2930, CVE-2017-2931) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2 NonFree: zypper in -t patch openSUSE-2017-71=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 NonFree (i586 x86_64): flash-player-24.0.0.194-2.124.1 flash-player-gnome-24.0.0.194-2.124.1 flash-player-kde4-24.0.0.194-2.124.1 References: https://www.suse.com/security/cve/CVE-2017-2925.html https://www.suse.com/security/cve/CVE-2017-2926.html https://www.suse.com/security/cve/CVE-2017-2927.html https://www.suse.com/security/cve/CVE-2017-2928.html https://www.suse.com/security/cve/CVE-2017-2930.html https://www.suse.com/security/cve/CVE-2017-2931.html https://www.suse.com/security/cve/CVE-2017-2932.html https://www.suse.com/security/cve/CVE-2017-2933.html https://www.suse.com/security/cve/CVE-2017-2934.html https://www.suse.com/security/cve/CVE-2017-2935.html https://www.suse.com/security/cve/CVE-2017-2936.html https://www.suse.com/security/cve/CVE-2017-2937.html https://www.suse.com/security/cve/CVE-2017-2938.html https://bugzilla.suse.com/1019129

1 0

openSUSE-SU-2017:0101-1: important: Security update for jasper
by opensuse-security＠opensuse.org 10 Jan '17

10 Jan '17

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0101-1 Rating: important References: #1010977 #1010979 #1011830 #1012530 #1015993 Cross-References: CVE-2016-8654 CVE-2016-9395 CVE-2016-9398 CVE-2016-9560 CVE-2016-9591 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for jasper fixes the following issues: - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec. (bsc#1012530) - CVE-2016-9395: Invalid jasper files could lead to abort of the library caused by attacker provided image. (bsc#1010977) - CVE-2016-9398: Invalid jasper files could lead to abort of the library caused by attacker provided image. (bsc#1010979) - CVE-2016-9560: Stack-based buffer overflow in jpc_tsfb_getbands2. (bsc#1011830) - CVE-2016-9591: Use-after-free on heap in jas_matrix_destroy. (bsc#1015993) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-70=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-70=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): jasper-1.900.14-170.1 jasper-debuginfo-1.900.14-170.1 jasper-debugsource-1.900.14-170.1 libjasper-devel-1.900.14-170.1 libjasper1-1.900.14-170.1 libjasper1-debuginfo-1.900.14-170.1 - openSUSE Leap 42.2 (x86_64): libjasper1-32bit-1.900.14-170.1 libjasper1-debuginfo-32bit-1.900.14-170.1 - openSUSE Leap 42.1 (i586 x86_64): jasper-1.900.14-170.1 jasper-debuginfo-1.900.14-170.1 jasper-debugsource-1.900.14-170.1 libjasper-devel-1.900.14-170.1 libjasper1-1.900.14-170.1 libjasper1-debuginfo-1.900.14-170.1 - openSUSE Leap 42.1 (x86_64): libjasper1-32bit-1.900.14-170.1 libjasper1-debuginfo-32bit-1.900.14-170.1 References: https://www.suse.com/security/cve/CVE-2016-8654.html https://www.suse.com/security/cve/CVE-2016-9395.html https://www.suse.com/security/cve/CVE-2016-9398.html https://www.suse.com/security/cve/CVE-2016-9560.html https://www.suse.com/security/cve/CVE-2016-9591.html https://bugzilla.suse.com/1010977 https://bugzilla.suse.com/1010979 https://bugzilla.suse.com/1011830 https://bugzilla.suse.com/1012530 https://bugzilla.suse.com/1015993

1 0

openSUSE-RU-2017:0095-1: moderate: Recommended update for clamav-database
by maintenance＠opensuse.org 09 Jan '17

09 Jan '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0095-1 Rating: moderate References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update refreshes the clamav-database. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-68=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-68=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201701090005-25.1 - openSUSE Leap 42.1 (noarch): clamav-database-201701090005-204.1 References:

1 0