January 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:0315-1: moderate: Recommended update for yast2, yast2-network
by maintenance＠opensuse.org 28 Jan '17

28 Jan '17

openSUSE Recommended Update: Recommended update for yast2, yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0315-1 Rating: moderate References: #1001454 #1005721 #1007172 #1011869 #1012581 #1016004 #962824 #966413 #984890 #996879 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update provides fixes and enhancements for yast2 and yast2-network. yast2: - Add-on module: Do not escape characters like ":" in the path string. (bsc#966413) - Added method to adapt old configuration of enslaved network interfaces. (bsc#962824) - Use canonical path in save_y2logs. (bsc#1001454) - Fix replacement of workflow modules. (bsc#1011869) - Add a method to read the ID property from the /etc/os-release file. (bsc#1016004) yast2-network: - When an interface is enslaved in a bond the udev rule is modified using the bus_id instead of the mac address but some multi-port cards could use the same bus_id. In such cases also the dev_port is needed. Taking this in account the dev_port will be added always when a udev rule based on bus_id is written. (bsc#1007172, bsc#1005721) - Bridge handling has been improved: (bsc#962824) - "NONE" is shown instead of 0.0.0.0 for old bridge configuration. - The bridge master is shown in the enslaved interface. - The interfaces overview is updated after a bridge is modified. - The interfaces enslaved are not lost when save in a different tab. - Do not crash with internal error stating undefined method when switching to "Hostname / DNS" tab when the system contains incorrect configuration of DHCLIENT_SET_HOSTNAME. (bsc#1012581) - New implementation of setting hostname via DHCP. User is allowed to set hostname via particular interface or set a reasonable default value for all interfaces. (bsc#984890) - Fixed the assignment of udev rules to Lan Items when a previous one does not exist. (bsc#996879) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-174=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): yast2-3.1.211-3.1 yast2-network-3.1.172-3.1 References: https://bugzilla.suse.com/1001454 https://bugzilla.suse.com/1005721 https://bugzilla.suse.com/1007172 https://bugzilla.suse.com/1011869 https://bugzilla.suse.com/1012581 https://bugzilla.suse.com/1016004 https://bugzilla.suse.com/962824 https://bugzilla.suse.com/966413 https://bugzilla.suse.com/984890 https://bugzilla.suse.com/996879

1 0

openSUSE-RU-2017:0314-1: moderate: Recommended update for smplayer
by maintenance＠opensuse.org 28 Jan '17

28 Jan '17

openSUSE Recommended Update: Recommended update for smplayer ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0314-1 Rating: moderate References: #1020640 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for smplayer fixes the following issues: - Remove forcing of PulseAudio; if "Default" is selected, leave the choice to the backend. (boo#1020640) - Add a popup menu with the load/save options for playlists. - Store the playlist filename and display "*" in the title when the playlist is modified and not saved. - Add a 'save as' button. (Playlist) - Add an option in the Interface preferences to play the next file automatically or not. - Add the option 'Start playback after loading a playlist' in the Playlist preferences. - Add the option 'Auto sort' in the Playlist preferences. - Fix when the additional options for mpv contains quotes. - Add option 'Case sensitive search' in the Playlist preferences. - Remove the option to add black borders on fullscreen. - New option 'Add black borders for subtitles by default in the General preferences. - New option 'Show info on OSD' in View - OSD (Shift + I) for displaying info about the current media on the OSD. - If a playlist file is dropped to the playlist window, load it. - Pass the alpha component of the subtitles' colours to mpv. - Remove desktop entry categories redefinition: default ones are fine. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-161=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): smplayer-16.11.0-3.1 smplayer-debuginfo-16.11.0-3.1 smplayer-debugsource-16.11.0-3.1 - openSUSE Leap 42.2 (noarch): smplayer-lang-16.11.0-3.1 References: https://bugzilla.suse.com/1020640

1 0

openSUSE-RU-2017:0313-1: Recommended update for dirmngr
by maintenance＠opensuse.org 28 Jan '17

28 Jan '17

openSUSE Recommended Update: Recommended update for dirmngr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0313-1 Rating: low References: #994794 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dirmngr enables support for daemon mode. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-158=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): dirmngr-1.1.1-8.1 dirmngr-debuginfo-1.1.1-8.1 dirmngr-debugsource-1.1.1-8.1 - openSUSE Leap 42.1 (noarch): dirmngr-lang-1.1.1-8.1 References: https://bugzilla.suse.com/994794

1 0

openSUSE-RU-2017:0312-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 28 Jan '17

28 Jan '17

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0312-1 Rating: moderate References: #1015599 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for grub2 provides the following fixes: - Ensure that the path starts with / and has no //. (bsc#1015599) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-176=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): grub2-2.02~beta2-92.1 grub2-branding-upstream-2.02~beta2-92.1 grub2-debuginfo-2.02~beta2-92.1 grub2-debugsource-2.02~beta2-92.1 grub2-i386-pc-2.02~beta2-92.1 - openSUSE Leap 42.2 (noarch): grub2-snapper-plugin-2.02~beta2-92.1 grub2-systemd-sleep-plugin-2.02~beta2-92.1 - openSUSE Leap 42.2 (x86_64): grub2-x86_64-efi-2.02~beta2-92.1 grub2-x86_64-xen-2.02~beta2-92.1 - openSUSE Leap 42.2 (i586): grub2-i386-efi-2.02~beta2-92.1 References: https://bugzilla.suse.com/1015599

1 0

openSUSE-SU-2017:0311-1: moderate: Security update for gstreamer-plugins-base
by opensuse-security＠opensuse.org 28 Jan '17

28 Jan '17

openSUSE Security Update: Security update for gstreamer-plugins-base ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0311-1 Rating: moderate References: #1013669 Cross-References: CVE-2016-9811 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gstreamer-plugins-base fixes the following issues: * CVE-2016-9811: Malicious file could could cause an invalid read leading to crash [bsc#1013669] This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-168=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gstreamer-plugins-base-1.8.3-3.1 gstreamer-plugins-base-debuginfo-1.8.3-3.1 gstreamer-plugins-base-debugsource-1.8.3-3.1 gstreamer-plugins-base-devel-1.8.3-3.1 gstreamer-plugins-base-doc-1.8.3-3.1 libgstallocators-1_0-0-1.8.3-3.1 libgstallocators-1_0-0-debuginfo-1.8.3-3.1 libgstapp-1_0-0-1.8.3-3.1 libgstapp-1_0-0-debuginfo-1.8.3-3.1 libgstaudio-1_0-0-1.8.3-3.1 libgstaudio-1_0-0-debuginfo-1.8.3-3.1 libgstfft-1_0-0-1.8.3-3.1 libgstfft-1_0-0-debuginfo-1.8.3-3.1 libgstpbutils-1_0-0-1.8.3-3.1 libgstpbutils-1_0-0-debuginfo-1.8.3-3.1 libgstriff-1_0-0-1.8.3-3.1 libgstriff-1_0-0-debuginfo-1.8.3-3.1 libgstrtp-1_0-0-1.8.3-3.1 libgstrtp-1_0-0-debuginfo-1.8.3-3.1 libgstrtsp-1_0-0-1.8.3-3.1 libgstrtsp-1_0-0-debuginfo-1.8.3-3.1 libgstsdp-1_0-0-1.8.3-3.1 libgstsdp-1_0-0-debuginfo-1.8.3-3.1 libgsttag-1_0-0-1.8.3-3.1 libgsttag-1_0-0-debuginfo-1.8.3-3.1 libgstvideo-1_0-0-1.8.3-3.1 libgstvideo-1_0-0-debuginfo-1.8.3-3.1 typelib-1_0-GstAllocators-1_0-1.8.3-3.1 typelib-1_0-GstApp-1_0-1.8.3-3.1 typelib-1_0-GstAudio-1_0-1.8.3-3.1 typelib-1_0-GstFft-1_0-1.8.3-3.1 typelib-1_0-GstPbutils-1_0-1.8.3-3.1 typelib-1_0-GstRtp-1_0-1.8.3-3.1 typelib-1_0-GstRtsp-1_0-1.8.3-3.1 typelib-1_0-GstSdp-1_0-1.8.3-3.1 typelib-1_0-GstTag-1_0-1.8.3-3.1 typelib-1_0-GstVideo-1_0-1.8.3-3.1 - openSUSE Leap 42.2 (noarch): gstreamer-plugins-base-lang-1.8.3-3.1 - openSUSE Leap 42.2 (x86_64): gstreamer-plugins-base-32bit-1.8.3-3.1 gstreamer-plugins-base-debuginfo-32bit-1.8.3-3.1 gstreamer-plugins-base-devel-32bit-1.8.3-3.1 libgstallocators-1_0-0-32bit-1.8.3-3.1 libgstallocators-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstapp-1_0-0-32bit-1.8.3-3.1 libgstapp-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstaudio-1_0-0-32bit-1.8.3-3.1 libgstaudio-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstfft-1_0-0-32bit-1.8.3-3.1 libgstfft-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstpbutils-1_0-0-32bit-1.8.3-3.1 libgstpbutils-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstriff-1_0-0-32bit-1.8.3-3.1 libgstriff-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstrtp-1_0-0-32bit-1.8.3-3.1 libgstrtp-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstrtsp-1_0-0-32bit-1.8.3-3.1 libgstrtsp-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstsdp-1_0-0-32bit-1.8.3-3.1 libgstsdp-1_0-0-debuginfo-32bit-1.8.3-3.1 libgsttag-1_0-0-32bit-1.8.3-3.1 libgsttag-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstvideo-1_0-0-32bit-1.8.3-3.1 libgstvideo-1_0-0-debuginfo-32bit-1.8.3-3.1 References: https://www.suse.com/security/cve/CVE-2016-9811.html https://bugzilla.suse.com/1013669

1 0

openSUSE-RU-2017:0310-1: moderate: Recommended update for python-gst
by maintenance＠opensuse.org 28 Jan '17

28 Jan '17

openSUSE Recommended Update: Recommended update for python-gst ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0310-1 Rating: moderate References: #1017473 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-gst fixes the following issues: - Add gobject-introspection BuildRequires as it is needed in order to get automatic typelib() Requires. (boo#1017473) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-173=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gstreamer-plugin-python-1.8.3-3.1 gstreamer-plugin-python-debuginfo-1.8.3-3.1 python-gst-1.8.3-3.1 python-gst-debuginfo-1.8.3-3.1 python-gst-debugsource-1.8.3-3.1 python3-gst-1.8.3-3.1 python3-gst-debuginfo-1.8.3-3.1 python3-gst-debugsource-1.8.3-3.1 References: https://bugzilla.suse.com/1017473

1 0

openSUSE-RU-2017:0309-1: Recommended update for gnome-control-center
by maintenance＠opensuse.org 28 Jan '17

28 Jan '17

openSUSE Recommended Update: Recommended update for gnome-control-center ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0309-1 Rating: low References: #997832 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-control-center fixes the On/Off switch button in the Mobile Broadband page of the Network panel. (bsc #997832) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-159=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): gnome-control-center-lang-3.20.1-12.1 - openSUSE Leap 42.2 (x86_64): gnome-control-center-3.20.1-12.1 gnome-control-center-color-3.20.1-12.1 gnome-control-center-debuginfo-3.20.1-12.1 gnome-control-center-debugsource-3.20.1-12.1 gnome-control-center-devel-3.20.1-12.1 gnome-control-center-goa-3.20.1-12.1 gnome-control-center-user-faces-3.20.1-12.1 References: https://bugzilla.suse.com/997832

1 0

openSUSE-RU-2017:0308-1: moderate: Recommended update for mailcommon
by maintenance＠opensuse.org 28 Jan '17

28 Jan '17

openSUSE Recommended Update: Recommended update for mailcommon ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0308-1 Rating: moderate References: #1020161 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mailcommon fixes the following issues: - Fix a crash when the "Add Tag" dialog is opened. (boo#1020161) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-170=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): libKF5MailCommon5-16.08.2-3.1 libKF5MailCommon5-debuginfo-16.08.2-3.1 mailcommon-16.08.2-3.1 mailcommon-debugsource-16.08.2-3.1 mailcommon-devel-16.08.2-3.1 mailcommon-devel-debuginfo-16.08.2-3.1 References: https://bugzilla.suse.com/1020161

1 0

openSUSE-SU-2017:0306-1: important: Security update for rabbitmq-server
by opensuse-security＠opensuse.org 27 Jan '17

27 Jan '17

openSUSE Security Update: Security update for rabbitmq-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0306-1 Rating: important References: #1017642 Cross-References: CVE-2016-9877 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rabbitmq-server fixes the following issue: - CVE-2016-9877: An issue in Pivotal RabbitMQ caused connection authentication with a username/password pair to succeed if an existing username was provided but the password is omitted from the connection request. Connections that use TLS with a client-provided certificate were not affected (bsc#1017642). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-156=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): erlang-rabbitmq-client-3.5.8-3.2 rabbitmq-server-3.5.8-3.2 rabbitmq-server-plugins-3.5.8-3.2 References: https://www.suse.com/security/cve/CVE-2016-9877.html https://bugzilla.suse.com/1017642

1 0

openSUSE-SU-2017:0298-1: important: Security update for gstreamer-0_10-plugins-good
by opensuse-security＠opensuse.org 27 Jan '17

27 Jan '17

openSUSE Security Update: Security update for gstreamer-0_10-plugins-good ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0298-1 Rating: important References: #1012102 #1012103 #1012104 #1013653 #1013655 #1013663 Cross-References: CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9807 CVE-2016-9808 CVE-2016-9810 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for gstreamer-0_10-plugins-good fixes the following issues: - CVE-2016-9634: Invalid FLIC files could have caused and an out-of-bounds write (bsc#1012102) - CVE-2016-9635: Invalid FLIC files could have caused and an out-of-bounds write (bsc#1012103) - CVE-2016-9636: Prevent maliciously crafted flic files from causing invalid memory writes (bsc#1012104) - CVE-2016-9807: Prevent the reading of invalid memory in flx_decode_chunks, leading to DoS (bsc#1013655) - CVE-2016-9808: Prevent maliciously crafted flic files from causing invalid memory accesses (bsc#1013653) - CVE-2016-9810: Invalid files can be used to extraneous unreferences, leading to invalid memory access and DoS (bsc#1013663) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-153=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gstreamer-0_10-plugin-esd-0.10.31-16.1 gstreamer-0_10-plugin-esd-debuginfo-0.10.31-16.1 gstreamer-0_10-plugins-good-0.10.31-16.1 gstreamer-0_10-plugins-good-debuginfo-0.10.31-16.1 gstreamer-0_10-plugins-good-debugsource-0.10.31-16.1 gstreamer-0_10-plugins-good-doc-0.10.31-16.1 gstreamer-0_10-plugins-good-extra-0.10.31-16.1 gstreamer-0_10-plugins-good-extra-debuginfo-0.10.31-16.1 - openSUSE Leap 42.1 (noarch): gstreamer-0_10-plugins-good-lang-0.10.31-16.1 - openSUSE Leap 42.1 (x86_64): gstreamer-0_10-plugin-esd-32bit-0.10.31-16.1 gstreamer-0_10-plugin-esd-debuginfo-32bit-0.10.31-16.1 gstreamer-0_10-plugins-good-32bit-0.10.31-16.1 gstreamer-0_10-plugins-good-debuginfo-32bit-0.10.31-16.1 gstreamer-0_10-plugins-good-extra-32bit-0.10.31-16.1 gstreamer-0_10-plugins-good-extra-debuginfo-32bit-0.10.31-16.1 References: https://www.suse.com/security/cve/CVE-2016-9634.html https://www.suse.com/security/cve/CVE-2016-9635.html https://www.suse.com/security/cve/CVE-2016-9636.html https://www.suse.com/security/cve/CVE-2016-9807.html https://www.suse.com/security/cve/CVE-2016-9808.html https://www.suse.com/security/cve/CVE-2016-9810.html https://bugzilla.suse.com/1012102 https://bugzilla.suse.com/1012103 https://bugzilla.suse.com/1012104 https://bugzilla.suse.com/1013653 https://bugzilla.suse.com/1013655 https://bugzilla.suse.com/1013663

1 0