October 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2017:2832-1: moderate: Security update for irssi
by opensuse-security＠opensuse.org 23 Oct '17

23 Oct '17

openSUSE Security Update: Security update for irssi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2832-1 Rating: moderate References: #1064540 Cross-References: CVE-2017-15227 CVE-2017-15228 CVE-2017-15721 CVE-2017-15722 CVE-2017-15723 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This security update for irssi to version 1.0.5 addresses the following security issues: * CVE-2017-15228: When installing themes with unterminated colour formatting sequences, Irssi may access data beyond the end of the string. This issue could have resulted in denial of service (remote crash) when installing a malicious or broken theme file. * CVE-2017-15227: While waiting for the channel synchronisation, Irssi may incorrectly fail to remove destroyed channels from the query list, resulting in use after free conditions when updating the state later on. This issue could have caused denial of service (remote crash) when connecting to a malicious or broken ircd. * CVE-2017-15721: Certain incorrectly formatted DCC CTCP messages could cause NULL pointer dereference. This issue could have caused denial of service (remote crash) when connecting to a malicious or broken ircd. * CVE-2017-15723: Overlong nicks or targets may result in a NULL pointer dereference while splitting the message. This issue could have caused denial of service (remote crash) when connecting to a malicious or broken ircd. * CVE-2017-15722: In certain cases Irssi may fail to verify that a Safe channel ID is long enough, causing reads beyond the end of the string. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1189=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1189=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): irssi-1.0.5-17.1 irssi-debuginfo-1.0.5-17.1 irssi-debugsource-1.0.5-17.1 irssi-devel-1.0.5-17.1 - openSUSE Leap 42.2 (i586 x86_64): irssi-1.0.5-14.14.1 irssi-debuginfo-1.0.5-14.14.1 irssi-debugsource-1.0.5-14.14.1 irssi-devel-1.0.5-14.14.1 References: https://www.suse.com/security/cve/CVE-2017-15227.html https://www.suse.com/security/cve/CVE-2017-15228.html https://www.suse.com/security/cve/CVE-2017-15721.html https://www.suse.com/security/cve/CVE-2017-15722.html https://www.suse.com/security/cve/CVE-2017-15723.html https://bugzilla.suse.com/1064540

1 0

openSUSE-OU-2017:2830-1: moderate: Optional update adding docker-compose to the SUSE PackageHub
by maintenance＠opensuse.org 22 Oct '17

22 Oct '17

openSUSE Optional Update: Optional update adding docker-compose to the SUSE PackageHub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:2830-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update adds docker-compose to the SUSE PackageHub. docker-compose is a utility to define and run complex applications using Docker. This version is adapted to work with the run-time dependencies available on SLE 12. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1188=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): docker-compose-1.2.0-2.1 References:

1 0

openSUSE-RU-2017:2829-1: moderate: Recommended update for gnuhealth
by maintenance＠opensuse.org 22 Oct '17

22 Oct '17

openSUSE Recommended Update: Recommended update for gnuhealth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2829-1 Rating: moderate References: #1026334 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnuhealth fixes the following issues: - Fix issue that would cause files not to be found in backup (bsc#1026334) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1187=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): gnuhealth-3.2.5-32.1 References: https://bugzilla.suse.com/1026334

1 0

openSUSE-RU-2017:2828-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 22 Oct '17

22 Oct '17

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2828-1 Rating: moderate References: #1047991 #1048288 #1051913 #1053621 #1055017 #1056635 #1059314 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for resource-agents provides the following fixes: - galera: Honor "safe_to_bootstrap" flag in grastate.dat to make sure galera clusters are boostrapped correctly. (bsc#1055017) - galera: Fix instance name in master_exists() so that operations (like start, stop, etc) work correctly on a galera/mysql instance. (bsc#1056635) - aws-vpc-route53: Add agent for AWS Route 53. (fate#322781, bsc#1059314) - sg_persist: Read empty values when there are no attributes yet. (bsc#1048288) - Raid1: Add support for named md devices by handling the case of mddev being a symlink. (bsc#1047991) - ocf-shellfuncs: Avoid printing empty INFO messages. (bsc#1053621) - SAPInstance: Mention monitor support in documentation. (bsc#1051913) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1186=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): ldirectord-4.0.1+git.1495055229.643177f1-6.1 resource-agents-4.0.1+git.1495055229.643177f1-6.1 resource-agents-debuginfo-4.0.1+git.1495055229.643177f1-6.1 resource-agents-debugsource-4.0.1+git.1495055229.643177f1-6.1 - openSUSE Leap 42.3 (noarch): monitoring-plugins-metadata-4.0.1+git.1495055229.643177f1-6.1 References: https://bugzilla.suse.com/1047991 https://bugzilla.suse.com/1048288 https://bugzilla.suse.com/1051913 https://bugzilla.suse.com/1053621 https://bugzilla.suse.com/1055017 https://bugzilla.suse.com/1056635 https://bugzilla.suse.com/1059314

1 0

openSUSE-RU-2017:2827-1: moderate: Recommended update for yast2 and yast2-network
by maintenance＠opensuse.org 22 Oct '17

22 Oct '17

openSUSE Recommended Update: Recommended update for yast2 and yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2827-1 Rating: moderate References: #1026027 #1036440 #1037214 #1037727 #1038717 #1050986 #932331 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for yast2 and yast2-network provides the following fixes: - Fix udev rules export when more than one device is configured. (bsc#1050986) - Avoid creating duplicate udev rules in AutoYaST installation. (bsc#1038717) - Fix device name recognition during AutoYaST installation. (bsc#1037727) - Change dhclient configuration warning messages to not block AutoYaST. (bsc#1037727) - Improve the logic to report if SuSEfirewall2 is selected or installed when installing OES using integrated media to make sure it gets properly activated. The problem would happen once the product is registered and manual network configuration is selected. (bnc#1037214) - Fix a problem that was causing warning messages to open a UI dialog in command-line mode and wait for user input. (bsc#1036440). - Remove the usage and the dependency on insserv as it is not really necessary. (bsc#1026027) - Fix some tests to work with the latest yast2-core package. (bsc#932331) - Add a CWM::ReplacePoint widget. - Add a generic CWM widget for keyboard layout. (FATE#321754) - Fix error popup when replacing widget with CWM::ReplacePoint. (FATE#322328) - When skipping storing of widget values, skip also its validation. (FATE#322328) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1184=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): yast2-3.1.217-5.6.1 yast2-network-3.1.181-5.9.1 References: https://bugzilla.suse.com/1026027 https://bugzilla.suse.com/1036440 https://bugzilla.suse.com/1037214 https://bugzilla.suse.com/1037727 https://bugzilla.suse.com/1038717 https://bugzilla.suse.com/1050986 https://bugzilla.suse.com/932331

1 0

openSUSE-RU-2017:2826-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 22 Oct '17

22 Oct '17

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2826-1 Rating: moderate References: #1035470 #1047991 #1048170 #1048288 #1051913 #1053207 #1055017 #1056635 #1059314 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: This update for resource-agents provides the following fixes: - galera: Honor "safe_to_bootstrap" flag in grastate.dat to make sure galera clusters are boostrapped correctly. (bsc#1055017) - galera: Fix instance name in master_exists() so that operations (like start, stop, etc) work correctly on a galera/mysql instance. (bsc#1056635) - aws-vpc-route53: Add agent for AWS Route 53. (fate#322781, bsc#1059314) - sg_persist: Read empty values when there are no attributes yet. (bsc#1048288) - sg_persist: Fix matching of hexadecimal node IDs, making sure only the actual ID numbers are matched and not other numbers from the same input line. (bsc#1048170) - DB2: Fix HADR support for DB2 V98+ (bsc#1035470) - Raid1: Fix using named md devices by handling the case of mddev being a symlink. (bsc#1047991) - SAPInstance: Mention monitor support in documentation. (bsc#1051913) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1185=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ldirectord-3.9.7+git.1461938976.cb7c36a-6.7.1 monitoring-plugins-metadata-3.9.7+git.1461938976.cb7c36a-6.7.1 resource-agents-3.9.7+git.1461938976.cb7c36a-6.7.1 resource-agents-debuginfo-3.9.7+git.1461938976.cb7c36a-6.7.1 resource-agents-debugsource-3.9.7+git.1461938976.cb7c36a-6.7.1 References: https://bugzilla.suse.com/1035470 https://bugzilla.suse.com/1047991 https://bugzilla.suse.com/1048170 https://bugzilla.suse.com/1048288 https://bugzilla.suse.com/1051913 https://bugzilla.suse.com/1053207 https://bugzilla.suse.com/1055017 https://bugzilla.suse.com/1056635 https://bugzilla.suse.com/1059314

1 0

openSUSE-SU-2017:2825-1: moderate: Security update for xerces-j2
by opensuse-security＠opensuse.org 20 Oct '17

20 Oct '17

openSUSE Security Update: Security update for xerces-j2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2825-1 Rating: moderate References: #1047536 #814241 #879138 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: xerces-j2 was updated to fix several issues. This security issue was fixed: - bsc#814241: Prevent possible DoS through very long attribute names This non-security issue was fixed: - Prevent StackOverflowError when applying a pattern restriction on long strings while trying to validate an XML file against a schema (bsc#1047536, bsc#879138) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1179=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1179=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): xerces-j2-2.8.1-9.1 xerces-j2-demo-2.8.1-9.1 xerces-j2-scripts-2.8.1-9.1 xerces-j2-xml-apis-2.8.1-9.1 xerces-j2-xml-resolver-2.8.1-9.1 - openSUSE Leap 42.2 (noarch): xerces-j2-2.8.1-6.3.1 xerces-j2-demo-2.8.1-6.3.1 xerces-j2-scripts-2.8.1-6.3.1 xerces-j2-xml-apis-2.8.1-6.3.1 xerces-j2-xml-resolver-2.8.1-6.3.1 References: https://bugzilla.suse.com/1047536 https://bugzilla.suse.com/814241 https://bugzilla.suse.com/879138

1 0

openSUSE-SU-2017:2824-1: moderate: Security update for salt
by opensuse-security＠opensuse.org 20 Oct '17

20 Oct '17

openSUSE Security Update: Security update for salt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2824-1 Rating: moderate References: #1042749 #1052264 #1059758 #1061407 #1062462 #1062464 #985112 Cross-References: CVE-2017-14695 CVE-2017-14696 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has 5 fixes is now available. Description: Salt was updated to 2017.7.2 and also to fix various bugs and security issues. See https://docs.saltstack.com/en/develop/topics/releases/2017.7.2.html for full changelog. Security issues fixed: - CVE-2017-14695: A directory traversal during minion id validation was fixed. (boo#1062462) - CVE-2017-14696: A remote denial of service attack with a specially crafted authentication request was fixed. (boo#1062464) Non security issues fixed: - Add possibility to generate _version.py at the build time for raw builds: https://github.com/saltstack/salt/pull/43955 - Fix salt target-type field returns "String" for existing jids but an empty "Array" for non existing jids. (issue #1711) - Fixed minion resource exhaustion when many functions are being executed in parallel (boo#1059758) - Remove 'TasksTask' attribute from salt-master.service in older versions of systemd (boo#985112) - Provide custom SUSE salt-master.service file. - Fix wrong version reported by Salt (boo#1061407) - list_pkgs: add parameter for returned attribute selection (boo#1052264) - Adding the leftover for zypper and yum list_pkgs functionality. - Use $HOME to get the user home directory instead using '~' char (boo#1042749) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1182=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): salt-bash-completion-2017.7.2-14.1 salt-fish-completion-2017.7.2-14.1 salt-zsh-completion-2017.7.2-14.1 - openSUSE Leap 42.3 (x86_64): salt-2017.7.2-14.1 salt-api-2017.7.2-14.1 salt-cloud-2017.7.2-14.1 salt-doc-2017.7.2-14.1 salt-master-2017.7.2-14.1 salt-minion-2017.7.2-14.1 salt-proxy-2017.7.2-14.1 salt-ssh-2017.7.2-14.1 salt-syndic-2017.7.2-14.1 References: https://www.suse.com/security/cve/CVE-2017-14695.html https://www.suse.com/security/cve/CVE-2017-14696.html https://bugzilla.suse.com/1042749 https://bugzilla.suse.com/1052264 https://bugzilla.suse.com/1059758 https://bugzilla.suse.com/1061407 https://bugzilla.suse.com/1062462 https://bugzilla.suse.com/1062464 https://bugzilla.suse.com/985112

1 0

openSUSE-SU-2017:2823-1: moderate: Security update for xorg-x11-server
by opensuse-security＠opensuse.org 20 Oct '17

20 Oct '17

openSUSE Security Update: Security update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2823-1 Rating: moderate References: #1063034 #1063035 #1063037 #1063038 #1063039 #1063040 #1063041 Cross-References: CVE-2017-12176 CVE-2017-12177 CVE-2017-12178 CVE-2017-12179 CVE-2017-12180 CVE-2017-12181 CVE-2017-12182 CVE-2017-12183 CVE-2017-12184 CVE-2017-12185 CVE-2017-12186 CVE-2017-12187 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for xorg-x11-server fixes the following vulnerabilities: * CVE-2017-12176: Unvalidated extra length in ProcEstablishConnection (bsc#1063041) * CVE-2017-12177: dbe: Unvalidated variable-length request in ProcDbeGetVisualInfo (bsc#1063040) * CVE-2017-12178: Xi: fix wrong extra length check in ProcXIChangeHierarchy (bsc#1063039) * CVE-2017-12179: Xi: integer overflow and unvalidated length in (S)ProcXIBarrierReleasePointer (bsc#1063038) * CVE-2017-12180,CVE-2017-12181,CVE-2017-12182: Unvalidated lengths in XFree86-VidMode/XFree86-DGA/XFree86-DRI extension (bsc#1063037) * CVE-2017-12183: Unvalidated lengths in XFIXES extension (bsc#1063035) * CVE-2017-12184,CVE-2017-12185,CVE-2017-12186,CVE-2017-12187: Unvalidated lengths in multiple extensions (bsc#1063034) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1177=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1177=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): xorg-x11-server-7.6_1.18.3-28.1 xorg-x11-server-debuginfo-7.6_1.18.3-28.1 xorg-x11-server-debugsource-7.6_1.18.3-28.1 xorg-x11-server-extra-7.6_1.18.3-28.1 xorg-x11-server-extra-debuginfo-7.6_1.18.3-28.1 xorg-x11-server-sdk-7.6_1.18.3-28.1 xorg-x11-server-source-7.6_1.18.3-28.1 - openSUSE Leap 42.2 (i586 x86_64): xorg-x11-server-7.6_1.18.3-12.26.1 xorg-x11-server-debuginfo-7.6_1.18.3-12.26.1 xorg-x11-server-debugsource-7.6_1.18.3-12.26.1 xorg-x11-server-extra-7.6_1.18.3-12.26.1 xorg-x11-server-extra-debuginfo-7.6_1.18.3-12.26.1 xorg-x11-server-sdk-7.6_1.18.3-12.26.1 xorg-x11-server-source-7.6_1.18.3-12.26.1 References: https://www.suse.com/security/cve/CVE-2017-12176.html https://www.suse.com/security/cve/CVE-2017-12177.html https://www.suse.com/security/cve/CVE-2017-12178.html https://www.suse.com/security/cve/CVE-2017-12179.html https://www.suse.com/security/cve/CVE-2017-12180.html https://www.suse.com/security/cve/CVE-2017-12181.html https://www.suse.com/security/cve/CVE-2017-12182.html https://www.suse.com/security/cve/CVE-2017-12183.html https://www.suse.com/security/cve/CVE-2017-12184.html https://www.suse.com/security/cve/CVE-2017-12185.html https://www.suse.com/security/cve/CVE-2017-12186.html https://www.suse.com/security/cve/CVE-2017-12187.html https://bugzilla.suse.com/1063034 https://bugzilla.suse.com/1063035 https://bugzilla.suse.com/1063037 https://bugzilla.suse.com/1063038 https://bugzilla.suse.com/1063039 https://bugzilla.suse.com/1063040 https://bugzilla.suse.com/1063041

1 0

openSUSE-SU-2017:2822-1: moderate: Security update for salt
by opensuse-security＠opensuse.org 20 Oct '17

20 Oct '17

openSUSE Security Update: Security update for salt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2822-1 Rating: moderate References: #1020831 #1022562 #1022841 #1023535 #1027722 #1030009 #1030073 #1032213 #1032452 #1032931 #1035914 #1036125 #1038855 #1040886 #1042749 #1043111 #1052264 #1053955 #1059758 #1061407 #1062462 #1062464 #985112 Cross-References: CVE-2017-12791 CVE-2017-14695 CVE-2017-14696 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has 20 fixes is now available. Description: Salt was updated to 2017.7.2 and also to fix various bugs and security issues. See the following resources for the full changelog: https://docs.saltstack.com/en/develop/topics/releases/2017.7.2.html https://docs.saltstack.com/en/develop/topics/releases/2017.7.1.html https://docs.saltstack.com/en/develop/topics/releases/2017.7.0.html Security issues fixed: - CVE-2017-14695: A directory traversal during minion id validation was fixed. (boo#1062462) - CVE-2017-14696: A remote denial of service attack with a specially crafted authentication request was fixed. (boo#1062464) - CVE-2017-12791: crafted minion ID could lead directory traversal on the Salt-master (boo#1053955) Non security issues fixed: - Add possibility to generate _version.py at the build time for raw builds: https://github.com/saltstack/salt/pull/43955 - Fix salt target-type field returns "String" for existing jids but an empty "Array" for non existing jids. (issue #1711) - Fixed minion resource exhaustion when many functions are being executed in parallel (boo#1059758) - Remove 'TasksTask' attribute from salt-master.service in older versions of systemd (boo#985112) - Provide custom SUSE salt-master.service file. - Fix wrong version reported by Salt (boo#1061407) - list_pkgs: add parameter for returned attribute selection (boo#1052264) - Adding the leftover for zypper and yum list_pkgs functionality. - Use $HOME to get the user home directory instead using '~' char (boo#1042749) - fix ownership for whole master cache directory (boo#1035914) - fix setting the language on SUSE systems (boo#1038855) - wrong os_family grains on SUSE - fix unittests (boo#1038855) - speed-up cherrypy by removing sleep call - Disable 3rd party runtime packages to be explicitly recommended. (boo#1040886) - fix format error (boo#1043111) - Add a salt-minion watchdog for RHEL6 and SLES11 systems (sysV) to restart salt-minion in case of crashes during upgrade. - Add procps as dependency. - Bugfix: jobs scheduled to run at a future time stay pending for Salt minions (boo#1036125) - Wrong os_family grains on SUSE - fix unittests. (boo#1038855) - Fix setting the language on SUSE systems. (boo#1038855) - Bugfix: unable to use hostname for minion ID as '127'. (upstream) - Bugfix: remove sleep call in CheppryPy API handler. (upstream) - Fix core grains constants for timezone. (boo#1032931) - Prevents zero length error on Python 2.6. - Fixes zypper test error after backporting. - Refactoring on Zypper and Yum execution and state modules to allow installation of patches/errata. - Allows to set 'timeout' and 'gather_job_timeout' via kwargs. - Add missing bootstrap script for Salt Cloud. (boo#1032452) - raet protocol is no longer supported. (boo#1020831) - Fix: add missing /var/cache/salt/cloud directory. (boo#1032213) - Cleanup salt user environment preparation. (boo#1027722) - Fix: race condition on cache directory creation. - Fix: /var/log/salt/minion fails logrotate. (boo#1030009) - Fix: Result of master_tops extension is mutually overwritten. (boo#1030073) - Allows to set custom timeouts for 'manage.up' and 'manage.status'. - Keep fix for migrating salt home directory. (boo#1022562) - Fix salt-minion update on RHEL. (boo#1022841) - Prevents 'OSError' exception in case certain job cache path doesn't exist. (boo#1023535) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1183=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): salt-2017.7.2-5.3.1 salt-api-2017.7.2-5.3.1 salt-cloud-2017.7.2-5.3.1 salt-doc-2017.7.2-5.3.1 salt-master-2017.7.2-5.3.1 salt-minion-2017.7.2-5.3.1 salt-proxy-2017.7.2-5.3.1 salt-ssh-2017.7.2-5.3.1 salt-syndic-2017.7.2-5.3.1 - openSUSE Leap 42.2 (noarch): salt-bash-completion-2017.7.2-5.3.1 salt-fish-completion-2017.7.2-5.3.1 salt-zsh-completion-2017.7.2-5.3.1 References: https://www.suse.com/security/cve/CVE-2017-12791.html https://www.suse.com/security/cve/CVE-2017-14695.html https://www.suse.com/security/cve/CVE-2017-14696.html https://bugzilla.suse.com/1020831 https://bugzilla.suse.com/1022562 https://bugzilla.suse.com/1022841 https://bugzilla.suse.com/1023535 https://bugzilla.suse.com/1027722 https://bugzilla.suse.com/1030009 https://bugzilla.suse.com/1030073 https://bugzilla.suse.com/1032213 https://bugzilla.suse.com/1032452 https://bugzilla.suse.com/1032931 https://bugzilla.suse.com/1035914 https://bugzilla.suse.com/1036125 https://bugzilla.suse.com/1038855 https://bugzilla.suse.com/1040886 https://bugzilla.suse.com/1042749 https://bugzilla.suse.com/1043111 https://bugzilla.suse.com/1052264 https://bugzilla.suse.com/1053955 https://bugzilla.suse.com/1059758 https://bugzilla.suse.com/1061407 https://bugzilla.suse.com/1062462 https://bugzilla.suse.com/1062464 https://bugzilla.suse.com/985112

1 0