October 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2017:2614-1: moderate: Security update for git
by opensuse-security＠opensuse.org 02 Oct '17

02 Oct '17

openSUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2614-1 Rating: moderate References: #1061041 Cross-References: CVE-2017-14867 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for git to version 2.13.6 fixes the following issues: * CVE-2017-14867: Various Perl scripts did not use safe_pipe_capture() instead of backticks, leaving them susceptible to end-user input (boo#1061041) As an additional measure, "git cvsserver" no longer is invoked by "git daemon" by default. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1115=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): git-2.13.6-7.1 git-arch-2.13.6-7.1 git-core-2.13.6-7.1 git-core-debuginfo-2.13.6-7.1 git-credential-gnome-keyring-2.13.6-7.1 git-credential-gnome-keyring-debuginfo-2.13.6-7.1 git-cvs-2.13.6-7.1 git-daemon-2.13.6-7.1 git-daemon-debuginfo-2.13.6-7.1 git-debugsource-2.13.6-7.1 git-email-2.13.6-7.1 git-gui-2.13.6-7.1 git-svn-2.13.6-7.1 git-svn-debuginfo-2.13.6-7.1 git-web-2.13.6-7.1 gitk-2.13.6-7.1 - openSUSE Leap 42.3 (noarch): git-doc-2.13.6-7.1 References: https://www.suse.com/security/cve/CVE-2017-14867.html https://bugzilla.suse.com/1061041

1 0

openSUSE-RU-2017:2613-1: Recommended update for tcmu-runner
by maintenance＠opensuse.org 02 Oct '17

02 Oct '17

openSUSE Recommended Update: Recommended update for tcmu-runner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2613-1 Rating: low References: #1052795 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tcmu-runner provides the following fix: - Fix the path where tcmu-runner searches for plugins so that starting it from systemd works as expected. (bsc#1052795) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1113=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libtcmu-devel-1.2.0-6.1 libtcmu1-1.2.0-6.1 libtcmu1-debuginfo-1.2.0-6.1 tcmu-runner-1.2.0-6.1 tcmu-runner-debuginfo-1.2.0-6.1 tcmu-runner-debugsource-1.2.0-6.1 tcmu-runner-devel-1.2.0-6.1 - openSUSE Leap 42.3 (x86_64): tcmu-runner-handler-rbd-1.2.0-6.1 tcmu-runner-handler-rbd-debuginfo-1.2.0-6.1 References: https://bugzilla.suse.com/1052795

1 0

openSUSE-RU-2017:2612-1: important: Recommended update for xinetd
by maintenance＠opensuse.org 02 Oct '17

02 Oct '17

openSUSE Recommended Update: Recommended update for xinetd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2612-1 Rating: important References: #1060432 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xinetd fixes a regression that could cause a crash when an 'IPv6' flag was specified without a 'bind' option (bsc#1060432) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1112=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1112=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): xinetd-2.3.15-17.2 xinetd-debuginfo-2.3.15-17.2 xinetd-debugsource-2.3.15-17.2 - openSUSE Leap 42.2 (i586 x86_64): xinetd-2.3.15-10.7.2 xinetd-debuginfo-2.3.15-10.7.2 xinetd-debugsource-2.3.15-10.7.2 References: https://bugzilla.suse.com/1060432

1 0