October 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:2763-1: Recommended update for audit
by maintenance＠opensuse.org 19 Oct '17

19 Oct '17

openSUSE Recommended Update: Recommended update for audit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2763-1 Rating: low References: #1042781 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for audit provides the following fix: - Make auditd start by forking the systemd service to fix some initialization failures. (bsc#1042781) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1169=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1169=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): audit-2.3.6-8.1 audit-audispd-plugins-2.3.6-8.1 audit-audispd-plugins-debuginfo-2.3.6-8.1 audit-debuginfo-2.3.6-8.1 audit-debugsource-2.3.6-8.1 audit-devel-2.3.6-8.1 audit-libs-python-2.3.6-8.1 audit-libs-python-debuginfo-2.3.6-8.1 audit-secondary-debugsource-2.3.6-8.1 libaudit1-2.3.6-8.1 libaudit1-debuginfo-2.3.6-8.1 libauparse0-2.3.6-8.1 libauparse0-debuginfo-2.3.6-8.1 - openSUSE Leap 42.3 (x86_64): audit-devel-32bit-2.3.6-8.1 libaudit1-32bit-2.3.6-8.1 libaudit1-debuginfo-32bit-2.3.6-8.1 libauparse0-32bit-2.3.6-8.1 libauparse0-debuginfo-32bit-2.3.6-8.1 - openSUSE Leap 42.2 (i586 x86_64): audit-2.3.6-5.3.1 audit-audispd-plugins-2.3.6-5.3.1 audit-audispd-plugins-debuginfo-2.3.6-5.3.1 audit-debuginfo-2.3.6-5.3.1 audit-debugsource-2.3.6-5.3.1 audit-devel-2.3.6-5.3.1 audit-libs-python-2.3.6-5.3.1 audit-libs-python-debuginfo-2.3.6-5.3.1 audit-secondary-debugsource-2.3.6-5.3.1 libaudit1-2.3.6-5.3.1 libaudit1-debuginfo-2.3.6-5.3.1 libauparse0-2.3.6-5.3.1 libauparse0-debuginfo-2.3.6-5.3.1 - openSUSE Leap 42.2 (x86_64): audit-devel-32bit-2.3.6-5.3.1 libaudit1-32bit-2.3.6-5.3.1 libaudit1-debuginfo-32bit-2.3.6-5.3.1 libauparse0-32bit-2.3.6-5.3.1 libauparse0-debuginfo-32bit-2.3.6-5.3.1 References: https://bugzilla.suse.com/1042781

1 0

openSUSE-RU-2017:2762-1: Recommended update for netcat-openbsd
by maintenance＠opensuse.org 19 Oct '17

19 Oct '17

openSUSE Recommended Update: Recommended update for netcat-openbsd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2762-1 Rating: low References: #1061165 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for netcat-openbsd provides the following fix: - Fix a logic error that would prevent netcat from sending out UDP packets. (bsc#1061165) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1168=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1168=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): netcat-openbsd-1.89-99.1 netcat-openbsd-debuginfo-1.89-99.1 netcat-openbsd-debugsource-1.89-99.1 - openSUSE Leap 42.2 (i586 x86_64): netcat-openbsd-1.89-96.3.1 netcat-openbsd-debuginfo-1.89-96.3.1 netcat-openbsd-debugsource-1.89-96.3.1 References: https://bugzilla.suse.com/1061165

1 0

openSUSE-OU-2017:2761-1: moderate: Optional update to add libtxc_dxtn to the distribution
by maintenance＠opensuse.org 18 Oct '17

18 Oct '17

openSUSE Optional Update: Optional update to add libtxc_dxtn to the distribution ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:2761-1 Rating: moderate References: #1063424 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update adds libtxc_dxtn to the distribution. libtxc_dxtn is an S3TC implementation for mesa with full S3TC compression and decompression support. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1165=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1165=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libtxc_dxtn-1.0.1-3.1 libtxc_dxtn-debuginfo-1.0.1-3.1 libtxc_dxtn-debugsource-1.0.1-3.1 libtxc_dxtn-devel-1.0.1-3.1 - openSUSE Leap 42.3 (x86_64): libtxc_dxtn-32bit-1.0.1-3.1 libtxc_dxtn-debuginfo-32bit-1.0.1-3.1 - openSUSE Leap 42.2 (i586 x86_64): libtxc_dxtn-1.0.1-2.1 libtxc_dxtn-debuginfo-1.0.1-2.1 libtxc_dxtn-debugsource-1.0.1-2.1 libtxc_dxtn-devel-1.0.1-2.1 - openSUSE Leap 42.2 (x86_64): libtxc_dxtn-32bit-1.0.1-2.1 libtxc_dxtn-debuginfo-32bit-1.0.1-2.1 References: https://bugzilla.suse.com/1063424

1 0

openSUSE-RU-2017:2760-1: Recommended update for yast2-packager
by maintenance＠opensuse.org 18 Oct '17

18 Oct '17

openSUSE Recommended Update: Recommended update for yast2-packager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2760-1 Rating: low References: #1032523 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-packager provides the following fix: - Fix configuring the EULA acceptance in AutoYaST of add-on products present in the media of the base product. (bsc#1032523) This update was imported from the SUSE:SLE-12-SP2:Update and SUSE:SLE-12-SP2:Update update projects. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1166=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1166=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): yast2-packager-3.2.25-3.1 - openSUSE Leap 42.2 (i586 x86_64): yast2-packager-3.1.123-5.6.1 References: https://bugzilla.suse.com/1032523

1 0

openSUSE-RU-2017:2759-1: moderate: Recommended update for plasma5-workspace
by maintenance＠opensuse.org 18 Oct '17

18 Oct '17

openSUSE Recommended Update: Recommended update for plasma5-workspace ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2759-1 Rating: moderate References: #1008844 #1026999 #974513 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for plasma5-workspace fixes the following issues: - provide an option to display application names instead of the generic names in the desktop containment's application launcher mouse action (kde#358423, boo#974513) - fix clicking on systemtray icons of certain applications, mainly GTK3 and Java (boo#1026999) - make logout dialog respect the "Offer shutdown options" setting and hide "Reboot" and "Shutdown" if disabled (boo#1008844) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1164=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): drkonqi5-5.8.6-10.3.1 drkonqi5-debuginfo-5.8.6-10.3.1 plasma5-workspace-5.8.6-10.3.1 plasma5-workspace-debuginfo-5.8.6-10.3.1 plasma5-workspace-debugsource-5.8.6-10.3.1 plasma5-workspace-devel-5.8.6-10.3.1 plasma5-workspace-libs-5.8.6-10.3.1 plasma5-workspace-libs-debuginfo-5.8.6-10.3.1 - openSUSE Leap 42.2 (noarch): plasma5-defaults-openSUSE-42.1.1-14.3.1 plasma5-openSUSE-42.1.1-14.3.1 plasma5-theme-openSUSE-42.1.1-14.3.1 plasma5-workspace-branding-openSUSE-42.1.1-14.3.1 plasma5-workspace-lang-5.8.6-10.3.1 sddm-theme-openSUSE-42.1.1-14.3.1 - openSUSE Leap 42.2 (x86_64): plasma5-workspace-libs-32bit-5.8.6-10.3.1 plasma5-workspace-libs-debuginfo-32bit-5.8.6-10.3.1 References: https://bugzilla.suse.com/1008844 https://bugzilla.suse.com/1026999 https://bugzilla.suse.com/974513

1 0

openSUSE-RU-2017:2758-1: moderate: Recommended update for plasma5-workspace
by maintenance＠opensuse.org 18 Oct '17

18 Oct '17

openSUSE Recommended Update: Recommended update for plasma5-workspace ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2758-1 Rating: moderate References: #1008844 #1026999 #974513 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for plasma5-workspace fixes the following issues: - provide an option to display application names instead of the generic names in the desktop containment's application launcher mouse action (kde#358423, boo#974513) - fix clicking on systemtray icons of certain applications, mainly GTK3 and Java (boo#1026999) - make logout dialog respect the "Offer shutdown options" setting and hide "Reboot" and "Shutdown" if disabled (boo#1008844) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1164=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): drkonqi5-5.8.6-8.1 drkonqi5-debuginfo-5.8.6-8.1 plasma5-workspace-5.8.6-8.1 plasma5-workspace-debuginfo-5.8.6-8.1 plasma5-workspace-debugsource-5.8.6-8.1 plasma5-workspace-devel-5.8.6-8.1 plasma5-workspace-libs-5.8.6-8.1 plasma5-workspace-libs-debuginfo-5.8.6-8.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): plasma5-SLE-42.1.1-11.1 plasma5-defaults-SLE-42.1.1-11.1 plasma5-theme-SLE-42.1.1-11.1 plasma5-workspace-branding-SLE-42.1.1-11.1 plasma5-workspace-lang-5.8.6-8.1 sddm-theme-SLE-42.1.1-11.1 References: https://bugzilla.suse.com/1008844 https://bugzilla.suse.com/1026999 https://bugzilla.suse.com/974513

1 0

openSUSE-SU-2017:2757-1: important: Security update for git
by opensuse-security＠opensuse.org 18 Oct '17

18 Oct '17

openSUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2757-1 Rating: important References: #1061041 Cross-References: CVE-2017-14867 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for git fixes the following issues: This security issue was fixed: - CVE-2017-14867: Git used unsafe Perl scripts to support subcommands such as cvsserver, which allowed attackers to execute arbitrary OS commands via shell metacharacters in a module name (bsc#1061041). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1167=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): git-doc-2.12.3-5.14.1 - openSUSE Leap 42.2 (x86_64): git-2.12.3-5.14.1 git-arch-2.12.3-5.14.1 git-core-2.12.3-5.14.1 git-core-debuginfo-2.12.3-5.14.1 git-credential-gnome-keyring-2.12.3-5.14.1 git-credential-gnome-keyring-debuginfo-2.12.3-5.14.1 git-cvs-2.12.3-5.14.1 git-daemon-2.12.3-5.14.1 git-daemon-debuginfo-2.12.3-5.14.1 git-debugsource-2.12.3-5.14.1 git-email-2.12.3-5.14.1 git-gui-2.12.3-5.14.1 git-svn-2.12.3-5.14.1 git-svn-debuginfo-2.12.3-5.14.1 git-web-2.12.3-5.14.1 gitk-2.12.3-5.14.1 References: https://www.suse.com/security/cve/CVE-2017-14867.html https://bugzilla.suse.com/1061041

1 0

openSUSE-SU-2017:2755-1: important: Security update for wpa_supplicant
by opensuse-security＠opensuse.org 18 Oct '17

18 Oct '17

openSUSE Security Update: Security update for wpa_supplicant ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2755-1 Rating: important References: #1056061 Cross-References: CVE-2017-13078 CVE-2017-13079 CVE-2017-13080 CVE-2017-13081 CVE-2017-13087 CVE-2017-13088 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for wpa_supplicant fixes the security issues: - Several vulnerabilities in standard conforming implementations of the WPA2 protocol have been discovered and published under the code name KRACK. This update remedies those issues in a backwards compatible manner, i.e. the updated wpa_supplicant can interface properly with both vulnerable and patched implementations of WPA2, but an attacker won't be able to exploit the KRACK weaknesses in those connections anymore even if the other party is still vulnerable. [bsc#1056061, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1163=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1163=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): wpa_supplicant-2.2-13.1 wpa_supplicant-debuginfo-2.2-13.1 wpa_supplicant-debugsource-2.2-13.1 wpa_supplicant-gui-2.2-13.1 wpa_supplicant-gui-debuginfo-2.2-13.1 - openSUSE Leap 42.2 (i586 x86_64): wpa_supplicant-2.2-9.3.1 wpa_supplicant-debuginfo-2.2-9.3.1 wpa_supplicant-debugsource-2.2-9.3.1 wpa_supplicant-gui-2.2-9.3.1 wpa_supplicant-gui-debuginfo-2.2-9.3.1 References: https://www.suse.com/security/cve/CVE-2017-13078.html https://www.suse.com/security/cve/CVE-2017-13079.html https://www.suse.com/security/cve/CVE-2017-13080.html https://www.suse.com/security/cve/CVE-2017-13081.html https://www.suse.com/security/cve/CVE-2017-13087.html https://www.suse.com/security/cve/CVE-2017-13088.html https://bugzilla.suse.com/1056061

1 0

openSUSE-RU-2017:2754-1: Recommended update for clamav-database
by maintenance＠opensuse.org 17 Oct '17

17 Oct '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2754-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh October 16th 2017. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1161=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201710160008-54.91.1 References:

1 0

openSUSE-RU-2017:2753-1: Recommended update for libqt5-qtwebengine
by maintenance＠opensuse.org 17 Oct '17

17 Oct '17

openSUSE Recommended Update: Recommended update for libqt5-qtwebengine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2753-1 Rating: low References: #1043338 #1043375 #1061344 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for libqt5-qtwebengine provides the following fixes: - Enable the use of proprietary codecs when configuring webengine so it uses the system ffmpeg binary thus allowing to reproduce html5 videos. (bsc#1043375) - Fix a compatibility issue in font rendering when using newer versions of FreeType. (bsc#1061344) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1162=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libqt5-qtwebengine-5.6.2-6.2 libqt5-qtwebengine-debuginfo-5.6.2-6.2 libqt5-qtwebengine-debugsource-5.6.2-6.2 libqt5-qtwebengine-devel-5.6.2-6.2 libqt5-qtwebengine-examples-5.6.2-6.2 libqt5-qtwebengine-examples-debuginfo-5.6.2-6.2 - openSUSE Leap 42.3 (x86_64): libqt5-qtwebengine-32bit-5.6.2-6.2 libqt5-qtwebengine-debuginfo-32bit-5.6.2-6.2 libqt5-qtwebengine-devel-32bit-5.6.2-6.2 - openSUSE Leap 42.3 (noarch): libqt5-qtwebengine-private-headers-devel-5.6.2-6.2 References: https://bugzilla.suse.com/1043338 https://bugzilla.suse.com/1043375 https://bugzilla.suse.com/1061344

1 0