January 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:0258-1: Recommended update for bash-completion
by maintenance＠opensuse.org 23 Jan '17

23 Jan '17

openSUSE Recommended Update: Recommended update for bash-completion ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0258-1 Rating: low References: #1012212 #995045 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for bash-completion fixes the following issues: - Allow mixed long and short tar(1) options. (bsc#1012212) - Only remove completion for umount/mount for older SUSE versions. (bsc#995045) - Disable html documentation by default to avoid build loops. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-135=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): bash-completion-2.1-10.12.1 References: https://bugzilla.suse.com/1012212 https://bugzilla.suse.com/995045

1 0

openSUSE-RU-2017:0257-1: moderate: Recommended update for rubygem-cfa_grub2
by maintenance＠opensuse.org 23 Jan '17

23 Jan '17

openSUSE Recommended Update: Recommended update for rubygem-cfa_grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0257-1 Rating: moderate References: #1012503 #877047 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for rubygem-cfa_grub2 provides the following fixes: - Use correct configuration file for Xen kernel parameters. (bsc#1012503) - Fix YaST performance problems when /etc/hosts includes many records. (bsc#877047) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-133=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ruby2.1-rubygem-cfa_grub2-0.5.3-3.1 ruby2.1-rubygem-cfa_grub2-doc-0.5.3-3.1 References: https://bugzilla.suse.com/1012503 https://bugzilla.suse.com/877047

1 0

openSUSE-SU-2017:0252-1: moderate: Security update for perl-DBD-mysql
by opensuse-security＠opensuse.org 23 Jan '17

23 Jan '17

openSUSE Security Update: Security update for perl-DBD-mysql ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0252-1 Rating: moderate References: #1002626 #1010457 #1012546 Cross-References: CVE-2016-1246 CVE-2016-1249 CVE-2016-1251 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for perl-DBD-mysql fixes the following issues: - CVE-2016-1251: A use-after-free when used with mysql_server_prepare=1 (bsc#1012546). - CVE-2016-1246: Buffer overflow allowed context-dependent attackers to cause a denial of service (crash) via vectors related to an error message (bsc#1002626). - CVE-2016-1249: Out-of-bounds read when using server-side prepared statement support (bsc#1010457). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-130=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-130=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): perl-DBD-mysql-4.021-14.1 perl-DBD-mysql-debuginfo-4.021-14.1 perl-DBD-mysql-debugsource-4.021-14.1 - openSUSE Leap 42.1 (i586 x86_64): perl-DBD-mysql-4.021-13.1 perl-DBD-mysql-debuginfo-4.021-13.1 perl-DBD-mysql-debugsource-4.021-13.1 References: https://www.suse.com/security/cve/CVE-2016-1246.html https://www.suse.com/security/cve/CVE-2016-1249.html https://www.suse.com/security/cve/CVE-2016-1251.html https://bugzilla.suse.com/1002626 https://bugzilla.suse.com/1010457 https://bugzilla.suse.com/1012546

1 0

openSUSE-SU-2017:0251-1: moderate: Security update for xtrabackup
by opensuse-security＠opensuse.org 23 Jan '17

23 Jan '17

openSUSE Security Update: Security update for xtrabackup ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0251-1 Rating: moderate References: #1019858 Cross-References: CVE-2016-6225 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xtrabackup fixes the following issues: - CVE-2016-6225: xbcrypt encryption IV not being set properly (boo#1019858) In addition, XtraBackup was updated to 2.3.6 to include the following improvements: - now supports SHA256 passwords - new supports command options for secure connections The following bugs were fixed: - intermittent assertion failures when not correctly identifying server version - Safe slave backup algorithm performed too short delays between retries which could cause backups to fail on a busy servers - fix compilation warnings with gcc6 - Backup would still succeed even if xtrabackup would fail to write the metadata - xbcloud now supports EMC ECS Swift API Authorization requests - backup failed with MariaDB 10.2 with the unsupported server version error message Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-132=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): xtrabackup-2.3.6-3.1 xtrabackup-debuginfo-2.3.6-3.1 xtrabackup-debugsource-2.3.6-3.1 xtrabackup-test-2.3.6-3.1 References: https://www.suse.com/security/cve/CVE-2016-6225.html https://bugzilla.suse.com/1019858

1 0

openSUSE-SU-2017:0250-1: moderate: Security update for xtrabackup
by opensuse-security＠opensuse.org 23 Jan '17

23 Jan '17

openSUSE Security Update: Security update for xtrabackup ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0250-1 Rating: moderate References: #1019858 Cross-References: CVE-2016-6225 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xtrabackup fixes the following issues: - CVE-2016-6225: xbcrypt encryption IV not being set properly (boo#1019858) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-131=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xtrabackup-2.2.12-8.1 xtrabackup-debuginfo-2.2.12-8.1 xtrabackup-debugsource-2.2.12-8.1 xtrabackup-test-2.2.12-8.1 References: https://www.suse.com/security/cve/CVE-2016-6225.html https://bugzilla.suse.com/1019858

1 0

openSUSE-SU-2017:0223-1: moderate: Security update for squid
by opensuse-security＠opensuse.org 19 Jan '17

19 Jan '17

openSUSE Security Update: Security update for squid ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0223-1 Rating: moderate References: #1016168 #949942 Cross-References: CVE-2014-9749 CVE-2016-10002 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for squid fixes the following issues: - CVE-2016-10002: Fixed incorrect processing of responses to If-None-Modified HTTP conditional requests. This allowed responses containing private data to clients it should not have reached (bsc#1016168) - CVE-2014-9749: Prevent nonce replay in Digest authentication, preventing the reuse of stale auth tokens (bsc#949942) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-127=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): squid-3.3.14-12.1 squid-debuginfo-3.3.14-12.1 squid-debugsource-3.3.14-12.1 References: https://www.suse.com/security/cve/CVE-2014-9749.html https://www.suse.com/security/cve/CVE-2016-10002.html https://bugzilla.suse.com/1016168 https://bugzilla.suse.com/949942

1 0

openSUSE-OU-2017:0222-1: moderate: Optional update for fwts
by maintenance＠opensuse.org 19 Jan '17

19 Jan '17

openSUSE Optional Update: Optional update for fwts ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0222-1 Rating: moderate References: #1017763 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update to fwts 16.12.00 brings the following improvements: - updated acpica - improved support for secureboot - improved support for ppc64le - support for building on s390x The update also contains a number of upstream bug fixes and miscellaneous improvements. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-125=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): fwts-16.12.00-11.1 fwts-debuginfo-16.12.00-11.1 fwts-debugsource-16.12.00-11.1 References: https://bugzilla.suse.com/1017763

1 0

openSUSE-SU-2017:0221-1: moderate: Security update for pdns-recursor
by opensuse-security＠opensuse.org 19 Jan '17

19 Jan '17

openSUSE Security Update: Security update for pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0221-1 Rating: moderate References: #1018326 Cross-References: CVE-2016-7068 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pdns-recursor fixes the following issue: - CVE-2016-7068: Crafted queries could have caused abnormal CPU usage (bsc#1018326) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-129=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-129=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): pdns-recursor-3.7.3-7.1 pdns-recursor-debuginfo-3.7.3-7.1 pdns-recursor-debugsource-3.7.3-7.1 - openSUSE Leap 42.1 (i586 x86_64): pdns-recursor-3.7.3-6.1 pdns-recursor-debuginfo-3.7.3-6.1 pdns-recursor-debugsource-3.7.3-6.1 References: https://www.suse.com/security/cve/CVE-2016-7068.html https://bugzilla.suse.com/1018326

1 0

openSUSE-RU-2017:0220-1: moderate: Recommended update for znc
by maintenance＠opensuse.org 19 Jan '17

19 Jan '17

openSUSE Recommended Update: Recommended update for znc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0220-1 Rating: moderate References: #1017182 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update contains znc 1.6.4 and fixes a number of bugs: - segfault after cloning a user - segfault when deleting a user or network which is waiting for DNS during connection - segfault which could be triggered using alias module - error in controlpanel module when setting the bindhost of another user - route_replies caused client to disconnect by timeout - compatibility with the Gitter IRC bridge Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-126=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): znc-1.6.4-17.1 znc-devel-1.6.4-17.1 znc-perl-1.6.4-17.1 znc-python3-1.6.4-17.1 znc-tcl-1.6.4-17.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le x86_64): znc-debuginfo-1.6.4-17.1 znc-debugsource-1.6.4-17.1 znc-perl-debuginfo-1.6.4-17.1 znc-python3-debuginfo-1.6.4-17.1 znc-tcl-debuginfo-1.6.4-17.1 References: https://bugzilla.suse.com/1017182

1 0

openSUSE-RU-2017:0219-1: moderate: Recommended update for znc
by maintenance＠opensuse.org 19 Jan '17

19 Jan '17

openSUSE Recommended Update: Recommended update for znc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0219-1 Rating: moderate References: #1017182 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update contains znc 1.6.4 and fixes a number of bugs: - segfault after cloning a user - segfault when deleting a user or network which is waiting for DNS during connection - segfault which could be triggered using alias module - error in controlpanel module when setting the bindhost of another user - route_replies caused client to disconnect by timeout - compatibility with the Gitter IRC bridge Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-126=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-126=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): znc-1.6.4-16.1 znc-debuginfo-1.6.4-16.1 znc-debugsource-1.6.4-16.1 znc-devel-1.6.4-16.1 znc-perl-1.6.4-16.1 znc-perl-debuginfo-1.6.4-16.1 znc-python3-1.6.4-16.1 znc-python3-debuginfo-1.6.4-16.1 znc-tcl-1.6.4-16.1 znc-tcl-debuginfo-1.6.4-16.1 - openSUSE Leap 42.1 (i586 x86_64): znc-1.6.4-16.1 znc-debuginfo-1.6.4-16.1 znc-debugsource-1.6.4-16.1 znc-devel-1.6.4-16.1 znc-perl-1.6.4-16.1 znc-perl-debuginfo-1.6.4-16.1 znc-python3-1.6.4-16.1 znc-python3-debuginfo-1.6.4-16.1 znc-tcl-1.6.4-16.1 znc-tcl-debuginfo-1.6.4-16.1 References: https://bugzilla.suse.com/1017182

1 0