October 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2017:2713-1: moderate: Security update for samba
by opensuse-security＠opensuse.org 11 Oct '17

11 Oct '17

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2713-1 Rating: moderate References: #1042419 #1044084 #1050707 #1058565 #1058622 #1058624 Cross-References: CVE-2017-12150 CVE-2017-12151 CVE-2017-12163 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has three fixes is now available. Description: This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client (bsc#1058624). - CVE-2017-12150: Always enforce smb signing when it is configured (bsc#1058622). - CVE-2017-12151: Keep required encryption across SMB3 dfs redirects (bsc#1058565). These non-security issues were fixed: - Fixed error where short name length was read as 2 bytes, should be 1 (bsc#1042419) - Fixed GUID string format on GetPrinter to prevent published printers from disappearing 7 (bsc#1050707). - Halt endless forest trust scan to prevent winbind from running out of memory (bsc#1044084). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1146=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ctdb-4.4.2-11.12.1 ctdb-debuginfo-4.4.2-11.12.1 ctdb-tests-4.4.2-11.12.1 ctdb-tests-debuginfo-4.4.2-11.12.1 libdcerpc-binding0-4.4.2-11.12.1 libdcerpc-binding0-debuginfo-4.4.2-11.12.1 libdcerpc-devel-4.4.2-11.12.1 libdcerpc-samr-devel-4.4.2-11.12.1 libdcerpc-samr0-4.4.2-11.12.1 libdcerpc-samr0-debuginfo-4.4.2-11.12.1 libdcerpc0-4.4.2-11.12.1 libdcerpc0-debuginfo-4.4.2-11.12.1 libndr-devel-4.4.2-11.12.1 libndr-krb5pac-devel-4.4.2-11.12.1 libndr-krb5pac0-4.4.2-11.12.1 libndr-krb5pac0-debuginfo-4.4.2-11.12.1 libndr-nbt-devel-4.4.2-11.12.1 libndr-nbt0-4.4.2-11.12.1 libndr-nbt0-debuginfo-4.4.2-11.12.1 libndr-standard-devel-4.4.2-11.12.1 libndr-standard0-4.4.2-11.12.1 libndr-standard0-debuginfo-4.4.2-11.12.1 libndr0-4.4.2-11.12.1 libndr0-debuginfo-4.4.2-11.12.1 libnetapi-devel-4.4.2-11.12.1 libnetapi0-4.4.2-11.12.1 libnetapi0-debuginfo-4.4.2-11.12.1 libsamba-credentials-devel-4.4.2-11.12.1 libsamba-credentials0-4.4.2-11.12.1 libsamba-credentials0-debuginfo-4.4.2-11.12.1 libsamba-errors-devel-4.4.2-11.12.1 libsamba-errors0-4.4.2-11.12.1 libsamba-errors0-debuginfo-4.4.2-11.12.1 libsamba-hostconfig-devel-4.4.2-11.12.1 libsamba-hostconfig0-4.4.2-11.12.1 libsamba-hostconfig0-debuginfo-4.4.2-11.12.1 libsamba-passdb-devel-4.4.2-11.12.1 libsamba-passdb0-4.4.2-11.12.1 libsamba-passdb0-debuginfo-4.4.2-11.12.1 libsamba-policy-devel-4.4.2-11.12.1 libsamba-policy0-4.4.2-11.12.1 libsamba-policy0-debuginfo-4.4.2-11.12.1 libsamba-util-devel-4.4.2-11.12.1 libsamba-util0-4.4.2-11.12.1 libsamba-util0-debuginfo-4.4.2-11.12.1 libsamdb-devel-4.4.2-11.12.1 libsamdb0-4.4.2-11.12.1 libsamdb0-debuginfo-4.4.2-11.12.1 libsmbclient-devel-4.4.2-11.12.1 libsmbclient0-4.4.2-11.12.1 libsmbclient0-debuginfo-4.4.2-11.12.1 libsmbconf-devel-4.4.2-11.12.1 libsmbconf0-4.4.2-11.12.1 libsmbconf0-debuginfo-4.4.2-11.12.1 libsmbldap-devel-4.4.2-11.12.1 libsmbldap0-4.4.2-11.12.1 libsmbldap0-debuginfo-4.4.2-11.12.1 libtevent-util-devel-4.4.2-11.12.1 libtevent-util0-4.4.2-11.12.1 libtevent-util0-debuginfo-4.4.2-11.12.1 libwbclient-devel-4.4.2-11.12.1 libwbclient0-4.4.2-11.12.1 libwbclient0-debuginfo-4.4.2-11.12.1 samba-4.4.2-11.12.1 samba-client-4.4.2-11.12.1 samba-client-debuginfo-4.4.2-11.12.1 samba-core-devel-4.4.2-11.12.1 samba-debuginfo-4.4.2-11.12.1 samba-debugsource-4.4.2-11.12.1 samba-libs-4.4.2-11.12.1 samba-libs-debuginfo-4.4.2-11.12.1 samba-pidl-4.4.2-11.12.1 samba-python-4.4.2-11.12.1 samba-python-debuginfo-4.4.2-11.12.1 samba-test-4.4.2-11.12.1 samba-test-debuginfo-4.4.2-11.12.1 samba-winbind-4.4.2-11.12.1 samba-winbind-debuginfo-4.4.2-11.12.1 - openSUSE Leap 42.2 (x86_64): libdcerpc-binding0-32bit-4.4.2-11.12.1 libdcerpc-binding0-debuginfo-32bit-4.4.2-11.12.1 libdcerpc-samr0-32bit-4.4.2-11.12.1 libdcerpc-samr0-debuginfo-32bit-4.4.2-11.12.1 libdcerpc0-32bit-4.4.2-11.12.1 libdcerpc0-debuginfo-32bit-4.4.2-11.12.1 libndr-krb5pac0-32bit-4.4.2-11.12.1 libndr-krb5pac0-debuginfo-32bit-4.4.2-11.12.1 libndr-nbt0-32bit-4.4.2-11.12.1 libndr-nbt0-debuginfo-32bit-4.4.2-11.12.1 libndr-standard0-32bit-4.4.2-11.12.1 libndr-standard0-debuginfo-32bit-4.4.2-11.12.1 libndr0-32bit-4.4.2-11.12.1 libndr0-debuginfo-32bit-4.4.2-11.12.1 libnetapi0-32bit-4.4.2-11.12.1 libnetapi0-debuginfo-32bit-4.4.2-11.12.1 libsamba-credentials0-32bit-4.4.2-11.12.1 libsamba-credentials0-debuginfo-32bit-4.4.2-11.12.1 libsamba-errors0-32bit-4.4.2-11.12.1 libsamba-errors0-debuginfo-32bit-4.4.2-11.12.1 libsamba-hostconfig0-32bit-4.4.2-11.12.1 libsamba-hostconfig0-debuginfo-32bit-4.4.2-11.12.1 libsamba-passdb0-32bit-4.4.2-11.12.1 libsamba-passdb0-debuginfo-32bit-4.4.2-11.12.1 libsamba-policy0-32bit-4.4.2-11.12.1 libsamba-policy0-debuginfo-32bit-4.4.2-11.12.1 libsamba-util0-32bit-4.4.2-11.12.1 libsamba-util0-debuginfo-32bit-4.4.2-11.12.1 libsamdb0-32bit-4.4.2-11.12.1 libsamdb0-debuginfo-32bit-4.4.2-11.12.1 libsmbclient0-32bit-4.4.2-11.12.1 libsmbclient0-debuginfo-32bit-4.4.2-11.12.1 libsmbconf0-32bit-4.4.2-11.12.1 libsmbconf0-debuginfo-32bit-4.4.2-11.12.1 libsmbldap0-32bit-4.4.2-11.12.1 libsmbldap0-debuginfo-32bit-4.4.2-11.12.1 libtevent-util0-32bit-4.4.2-11.12.1 libtevent-util0-debuginfo-32bit-4.4.2-11.12.1 libwbclient0-32bit-4.4.2-11.12.1 libwbclient0-debuginfo-32bit-4.4.2-11.12.1 samba-client-32bit-4.4.2-11.12.1 samba-client-debuginfo-32bit-4.4.2-11.12.1 samba-libs-32bit-4.4.2-11.12.1 samba-libs-debuginfo-32bit-4.4.2-11.12.1 samba-winbind-32bit-4.4.2-11.12.1 samba-winbind-debuginfo-32bit-4.4.2-11.12.1 - openSUSE Leap 42.2 (noarch): samba-doc-4.4.2-11.12.1 References: https://www.suse.com/security/cve/CVE-2017-12150.html https://www.suse.com/security/cve/CVE-2017-12151.html https://www.suse.com/security/cve/CVE-2017-12163.html https://bugzilla.suse.com/1042419 https://bugzilla.suse.com/1044084 https://bugzilla.suse.com/1050707 https://bugzilla.suse.com/1058565 https://bugzilla.suse.com/1058622 https://bugzilla.suse.com/1058624

1 0

openSUSE-SU-2017:2712-1: moderate: Security update for krb5
by opensuse-security＠opensuse.org 11 Oct '17

11 Oct '17

openSUSE Security Update: Security update for krb5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2712-1 Rating: moderate References: #1032680 #1054028 #1056995 #903543 Cross-References: CVE-2017-11462 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for krb5 fixes several issues. This security issue was fixed: - CVE-2017-11462: Prevent automatic security context deletion to prevent double-free (bsc#1056995) These non-security issues were fixed: - Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf in order to improve client security in handling service principle names. (bsc#1054028) - Prevent kadmind.service startup failure caused by absence of LDAP service. (bsc#903543) - Remove main package's dependency on systemd (bsc#1032680) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1145=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1145=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): krb5-1.12.5-9.1 krb5-client-1.12.5-9.1 krb5-client-debuginfo-1.12.5-9.1 krb5-debuginfo-1.12.5-9.1 krb5-debugsource-1.12.5-9.1 krb5-devel-1.12.5-9.1 krb5-doc-1.12.5-9.1 krb5-mini-1.12.5-9.1 krb5-mini-debuginfo-1.12.5-9.1 krb5-mini-debugsource-1.12.5-9.1 krb5-mini-devel-1.12.5-9.1 krb5-plugin-kdb-ldap-1.12.5-9.1 krb5-plugin-kdb-ldap-debuginfo-1.12.5-9.1 krb5-plugin-preauth-otp-1.12.5-9.1 krb5-plugin-preauth-otp-debuginfo-1.12.5-9.1 krb5-plugin-preauth-pkinit-1.12.5-9.1 krb5-plugin-preauth-pkinit-debuginfo-1.12.5-9.1 krb5-server-1.12.5-9.1 krb5-server-debuginfo-1.12.5-9.1 - openSUSE Leap 42.3 (x86_64): krb5-32bit-1.12.5-9.1 krb5-debuginfo-32bit-1.12.5-9.1 krb5-devel-32bit-1.12.5-9.1 - openSUSE Leap 42.2 (i586 x86_64): krb5-1.12.5-6.3.1 krb5-client-1.12.5-6.3.1 krb5-client-debuginfo-1.12.5-6.3.1 krb5-debuginfo-1.12.5-6.3.1 krb5-debugsource-1.12.5-6.3.1 krb5-devel-1.12.5-6.3.1 krb5-doc-1.12.5-6.3.1 krb5-mini-1.12.5-6.3.1 krb5-mini-debuginfo-1.12.5-6.3.1 krb5-mini-debugsource-1.12.5-6.3.1 krb5-mini-devel-1.12.5-6.3.1 krb5-plugin-kdb-ldap-1.12.5-6.3.1 krb5-plugin-kdb-ldap-debuginfo-1.12.5-6.3.1 krb5-plugin-preauth-otp-1.12.5-6.3.1 krb5-plugin-preauth-otp-debuginfo-1.12.5-6.3.1 krb5-plugin-preauth-pkinit-1.12.5-6.3.1 krb5-plugin-preauth-pkinit-debuginfo-1.12.5-6.3.1 krb5-server-1.12.5-6.3.1 krb5-server-debuginfo-1.12.5-6.3.1 - openSUSE Leap 42.2 (x86_64): krb5-32bit-1.12.5-6.3.1 krb5-debuginfo-32bit-1.12.5-6.3.1 krb5-devel-32bit-1.12.5-6.3.1 References: https://www.suse.com/security/cve/CVE-2017-11462.html https://bugzilla.suse.com/1032680 https://bugzilla.suse.com/1054028 https://bugzilla.suse.com/1056995 https://bugzilla.suse.com/903543

1 0

openSUSE-RU-2017:2711-1: Recommended update for google-cloud-sdk
by maintenance＠opensuse.org 11 Oct '17

11 Oct '17

openSUSE Recommended Update: Recommended update for google-cloud-sdk ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2711-1 Rating: low References: #1054930 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for google-cloud-sdk fixes the following issues: - Install VERSION and CHECKSUM files into the right place to fix gsutil. (bsc#1054930) - Remove the "gsutil test" command. The test command depends on third_party test implementation and is invoked during "regular" operation such as cp and ls. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1148=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1148=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): google-cloud-sdk-140.0.0-13.1 - openSUSE Leap 42.2 (noarch): google-cloud-sdk-140.0.0-4.9.1 References: https://bugzilla.suse.com/1054930

1 0

openSUSE-SU-2017:2710-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 11 Oct '17

11 Oct '17

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2710-1 Rating: important References: #1060445 Cross-References: CVE-2017-7793 CVE-2017-7805 CVE-2017-7810 CVE-2017-7814 CVE-2017-7818 CVE-2017-7819 CVE-2017-7823 CVE-2017-7824 CVE-2017-7825 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: Mozilla Thunderbird was updated to 52.4.0 (boo#1060445) * new behavior was introduced for replies to mailing list posts: "When replying to a mailing list, reply will be sent to address in From header ignoring Reply-to header". A new preference mail.override_list_reply_to allows to restore the previous behavior. * Under certain circumstances (image attachment and non-image attachment), attached images were shown truncated in messages stored in IMAP folders not synchronised for offline use. * IMAP UIDs > 0x7FFFFFFF now handled properly Security fixes from Gecko 52.4esr * CVE-2017-7793 (bmo#1371889) Use-after-free with Fetch API * CVE-2017-7818 (bmo#1363723) Use-after-free during ARIA array manipulation * CVE-2017-7819 (bmo#1380292) Use-after-free while resizing images in design mode * CVE-2017-7824 (bmo#1398381) Buffer overflow when drawing and validating elements with ANGLE * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement) Use-after-free in TLS 1.2 generating handshake hashes * CVE-2017-7814 (bmo#1376036) Blob and data URLs bypass phishing and malware protection warnings * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only) OS X fonts render some Tibetan and Arabic unicode characters as spaces * CVE-2017-7823 (bmo#1396320) CSP sandbox directive did not create a unique origin * CVE-2017-7810 Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4 - Add alsa-devel BuildRequires: we care for ALSA support to be built and thus need to ensure we get the dependencies in place. In the past, alsa-devel was pulled in by accident: we buildrequire libgnome-devel. This required esound-devel and that in turn pulled in alsa-devel for us. libgnome is being fixed to no longer require esound-devel. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1144=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1144=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): MozillaThunderbird-52.4.0-47.1 MozillaThunderbird-buildsymbols-52.4.0-47.1 MozillaThunderbird-debuginfo-52.4.0-47.1 MozillaThunderbird-debugsource-52.4.0-47.1 MozillaThunderbird-devel-52.4.0-47.1 MozillaThunderbird-translations-common-52.4.0-47.1 MozillaThunderbird-translations-other-52.4.0-47.1 - openSUSE Leap 42.2 (i586 x86_64): MozillaThunderbird-52.4.0-41.18.1 MozillaThunderbird-buildsymbols-52.4.0-41.18.1 MozillaThunderbird-debuginfo-52.4.0-41.18.1 MozillaThunderbird-debugsource-52.4.0-41.18.1 MozillaThunderbird-devel-52.4.0-41.18.1 MozillaThunderbird-translations-common-52.4.0-41.18.1 MozillaThunderbird-translations-other-52.4.0-41.18.1 References: https://www.suse.com/security/cve/CVE-2017-7793.html https://www.suse.com/security/cve/CVE-2017-7805.html https://www.suse.com/security/cve/CVE-2017-7810.html https://www.suse.com/security/cve/CVE-2017-7814.html https://www.suse.com/security/cve/CVE-2017-7818.html https://www.suse.com/security/cve/CVE-2017-7819.html https://www.suse.com/security/cve/CVE-2017-7823.html https://www.suse.com/security/cve/CVE-2017-7824.html https://www.suse.com/security/cve/CVE-2017-7825.html https://bugzilla.suse.com/1060445

1 0

openSUSE-RU-2017:2709-1: moderate: Recommended update for GNUHealth
by maintenance＠opensuse.org 11 Oct '17

11 Oct '17

openSUSE Recommended Update: Recommended update for GNUHealth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2709-1 Rating: moderate References: #1043757 #1047498 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update provides the latest version of GNUHealth and it's dependencies. gnuhealth: - health_services: Fix issues related to invoice type and domain when creating the service invoice. - health_disability: Rename and fix Amputation model description from Amputation to Prosthesis. - health: Include duration frequency selections strings for translation in prescription report. - health, health_qrcodes : Fix traceback due to obsolete unicode method in reports (bsc#1043757) tryton: - Updated to 4.2.7 bugfix-release. trytond_account: - Updated to 4.2.3 bugfix-release. trytond_stock: - Updated to 4.2.4 bugfix-release. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1150=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): gnuhealth-3.2.5-29.1 tryton-4.2.7-16.1 trytond_account-4.2.3-6.1 trytond_stock-4.2.4-6.1 References: https://bugzilla.suse.com/1043757 https://bugzilla.suse.com/1047498

1 0

openSUSE-SU-2017:2708-1: moderate: Security update for libvirt
by opensuse-security＠opensuse.org 11 Oct '17

11 Oct '17

openSUSE Security Update: Security update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2708-1 Rating: moderate References: #1012143 #1017189 #1031056 #1036785 #1048783 #1049505 #1051017 #1052151 #1053600 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for libvirt fixes several issues. This security issue was fixed: - bsc#1053600: Escape ssh commed line to prevent interpreting malicious hostname as arguments, allowing for command execution These non-security issues were fixed: - bsc#1049505, bsc#1051017: Security manager: Don't autogenerate seclabels of type 'none' when AppArmor is inactive - bsc#1052151: Moved /usr/share/libvirt/libvirtLogo.png symlink from client to doc subpackage, where its target resides - bsc#1048783: Ignore newlines in libvirt-guests.sh guest list - bsc#1031056: Add default controllers for USB devices - bsc#1012143: Define path to parted using autoconf cache variable. parted is used for management of disk-based storage pools - bsc#1036785: Prevent output of null target in domxml-to-native This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1149=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libvirt-2.0.0-13.9.1 libvirt-client-2.0.0-13.9.1 libvirt-client-debuginfo-2.0.0-13.9.1 libvirt-daemon-2.0.0-13.9.1 libvirt-daemon-config-network-2.0.0-13.9.1 libvirt-daemon-config-nwfilter-2.0.0-13.9.1 libvirt-daemon-debuginfo-2.0.0-13.9.1 libvirt-daemon-driver-interface-2.0.0-13.9.1 libvirt-daemon-driver-interface-debuginfo-2.0.0-13.9.1 libvirt-daemon-driver-lxc-2.0.0-13.9.1 libvirt-daemon-driver-lxc-debuginfo-2.0.0-13.9.1 libvirt-daemon-driver-network-2.0.0-13.9.1 libvirt-daemon-driver-network-debuginfo-2.0.0-13.9.1 libvirt-daemon-driver-nodedev-2.0.0-13.9.1 libvirt-daemon-driver-nodedev-debuginfo-2.0.0-13.9.1 libvirt-daemon-driver-nwfilter-2.0.0-13.9.1 libvirt-daemon-driver-nwfilter-debuginfo-2.0.0-13.9.1 libvirt-daemon-driver-qemu-2.0.0-13.9.1 libvirt-daemon-driver-qemu-debuginfo-2.0.0-13.9.1 libvirt-daemon-driver-secret-2.0.0-13.9.1 libvirt-daemon-driver-secret-debuginfo-2.0.0-13.9.1 libvirt-daemon-driver-storage-2.0.0-13.9.1 libvirt-daemon-driver-storage-debuginfo-2.0.0-13.9.1 libvirt-daemon-driver-uml-2.0.0-13.9.1 libvirt-daemon-driver-uml-debuginfo-2.0.0-13.9.1 libvirt-daemon-driver-vbox-2.0.0-13.9.1 libvirt-daemon-driver-vbox-debuginfo-2.0.0-13.9.1 libvirt-daemon-lxc-2.0.0-13.9.1 libvirt-daemon-qemu-2.0.0-13.9.1 libvirt-daemon-uml-2.0.0-13.9.1 libvirt-daemon-vbox-2.0.0-13.9.1 libvirt-debugsource-2.0.0-13.9.1 libvirt-devel-2.0.0-13.9.1 libvirt-doc-2.0.0-13.9.1 libvirt-lock-sanlock-2.0.0-13.9.1 libvirt-lock-sanlock-debuginfo-2.0.0-13.9.1 libvirt-nss-2.0.0-13.9.1 libvirt-nss-debuginfo-2.0.0-13.9.1 - openSUSE Leap 42.2 (x86_64): libvirt-client-32bit-2.0.0-13.9.1 libvirt-client-debuginfo-32bit-2.0.0-13.9.1 libvirt-daemon-driver-libxl-2.0.0-13.9.1 libvirt-daemon-driver-libxl-debuginfo-2.0.0-13.9.1 libvirt-daemon-xen-2.0.0-13.9.1 libvirt-devel-32bit-2.0.0-13.9.1 References: https://bugzilla.suse.com/1012143 https://bugzilla.suse.com/1017189 https://bugzilla.suse.com/1031056 https://bugzilla.suse.com/1036785 https://bugzilla.suse.com/1048783 https://bugzilla.suse.com/1049505 https://bugzilla.suse.com/1051017 https://bugzilla.suse.com/1052151 https://bugzilla.suse.com/1053600

1 0

openSUSE-SU-2017:2707-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 11 Oct '17

11 Oct '17

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2707-1 Rating: important References: #1060445 Cross-References: CVE-2017-7793 CVE-2017-7805 CVE-2017-7810 CVE-2017-7814 CVE-2017-7818 CVE-2017-7819 CVE-2017-7823 CVE-2017-7824 CVE-2017-7825 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: Mozilla Thunderbird was updated to 52.4.0 (boo#1060445) * new behavior was introduced for replies to mailing list posts: "When replying to a mailing list, reply will be sent to address in From header ignoring Reply-to header". A new preference mail.override_list_reply_to allows to restore the previous behavior. * Under certain circumstances (image attachment and non-image attachment), attached images were shown truncated in messages stored in IMAP folders not synchronised for offline use. * IMAP UIDs > 0x7FFFFFFF now handled properly Security fixes from Gecko 52.4esr * CVE-2017-7793 (bmo#1371889) Use-after-free with Fetch API * CVE-2017-7818 (bmo#1363723) Use-after-free during ARIA array manipulation * CVE-2017-7819 (bmo#1380292) Use-after-free while resizing images in design mode * CVE-2017-7824 (bmo#1398381) Buffer overflow when drawing and validating elements with ANGLE * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement) Use-after-free in TLS 1.2 generating handshake hashes * CVE-2017-7814 (bmo#1376036) Blob and data URLs bypass phishing and malware protection warnings * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only) OS X fonts render some Tibetan and Arabic unicode characters as spaces * CVE-2017-7823 (bmo#1396320) CSP sandbox directive did not create a unique origin * CVE-2017-7810 Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4 - Add alsa-devel BuildRequires: we care for ALSA support to be built and thus need to ensure we get the dependencies in place. In the past, alsa-devel was pulled in by accident: we buildrequire libgnome-devel. This required esound-devel and that in turn pulled in alsa-devel for us. libgnome is being fixed to no longer require esound-devel. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1144=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): MozillaThunderbird-52.4.0-45.1 MozillaThunderbird-buildsymbols-52.4.0-45.1 MozillaThunderbird-debuginfo-52.4.0-45.1 MozillaThunderbird-debugsource-52.4.0-45.1 MozillaThunderbird-devel-52.4.0-45.1 MozillaThunderbird-translations-common-52.4.0-45.1 MozillaThunderbird-translations-other-52.4.0-45.1 References: https://www.suse.com/security/cve/CVE-2017-7793.html https://www.suse.com/security/cve/CVE-2017-7805.html https://www.suse.com/security/cve/CVE-2017-7810.html https://www.suse.com/security/cve/CVE-2017-7814.html https://www.suse.com/security/cve/CVE-2017-7818.html https://www.suse.com/security/cve/CVE-2017-7819.html https://www.suse.com/security/cve/CVE-2017-7823.html https://www.suse.com/security/cve/CVE-2017-7824.html https://www.suse.com/security/cve/CVE-2017-7825.html https://bugzilla.suse.com/1060445

1 0

openSUSE-SU-2017:2706-1: moderate: Security update for samba
by opensuse-security＠opensuse.org 11 Oct '17

11 Oct '17

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2706-1 Rating: moderate References: #1050707 #1058565 #1058622 #1058624 Cross-References: CVE-2017-12150 CVE-2017-12151 CVE-2017-12163 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client (bsc#1058624) - CVE-2017-12150: Always enforce smb signing when it is configured (bsc#1058622) - CVE-2017-12151: Keep required encryption across SMB3 dfs redirects (bsc#1058565) The following non-security issue was fixed: - Fix GUID string format on GetPrinter info request. (bsc#1050707) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1147=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): ctdb-4.6.7+git.51.327af8d0a11-6.1 ctdb-debuginfo-4.6.7+git.51.327af8d0a11-6.1 ctdb-tests-4.6.7+git.51.327af8d0a11-6.1 ctdb-tests-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libdcerpc-binding0-4.6.7+git.51.327af8d0a11-6.1 libdcerpc-binding0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libdcerpc-devel-4.6.7+git.51.327af8d0a11-6.1 libdcerpc-samr-devel-4.6.7+git.51.327af8d0a11-6.1 libdcerpc-samr0-4.6.7+git.51.327af8d0a11-6.1 libdcerpc-samr0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libdcerpc0-4.6.7+git.51.327af8d0a11-6.1 libdcerpc0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libndr-devel-4.6.7+git.51.327af8d0a11-6.1 libndr-krb5pac-devel-4.6.7+git.51.327af8d0a11-6.1 libndr-krb5pac0-4.6.7+git.51.327af8d0a11-6.1 libndr-krb5pac0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libndr-nbt-devel-4.6.7+git.51.327af8d0a11-6.1 libndr-nbt0-4.6.7+git.51.327af8d0a11-6.1 libndr-nbt0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libndr-standard-devel-4.6.7+git.51.327af8d0a11-6.1 libndr-standard0-4.6.7+git.51.327af8d0a11-6.1 libndr-standard0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libndr0-4.6.7+git.51.327af8d0a11-6.1 libndr0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libnetapi-devel-4.6.7+git.51.327af8d0a11-6.1 libnetapi0-4.6.7+git.51.327af8d0a11-6.1 libnetapi0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libsamba-credentials-devel-4.6.7+git.51.327af8d0a11-6.1 libsamba-credentials0-4.6.7+git.51.327af8d0a11-6.1 libsamba-credentials0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libsamba-errors-devel-4.6.7+git.51.327af8d0a11-6.1 libsamba-errors0-4.6.7+git.51.327af8d0a11-6.1 libsamba-errors0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libsamba-hostconfig-devel-4.6.7+git.51.327af8d0a11-6.1 libsamba-hostconfig0-4.6.7+git.51.327af8d0a11-6.1 libsamba-hostconfig0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libsamba-passdb-devel-4.6.7+git.51.327af8d0a11-6.1 libsamba-passdb0-4.6.7+git.51.327af8d0a11-6.1 libsamba-passdb0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libsamba-policy-devel-4.6.7+git.51.327af8d0a11-6.1 libsamba-policy0-4.6.7+git.51.327af8d0a11-6.1 libsamba-policy0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libsamba-util-devel-4.6.7+git.51.327af8d0a11-6.1 libsamba-util0-4.6.7+git.51.327af8d0a11-6.1 libsamba-util0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libsamdb-devel-4.6.7+git.51.327af8d0a11-6.1 libsamdb0-4.6.7+git.51.327af8d0a11-6.1 libsamdb0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libsmbclient-devel-4.6.7+git.51.327af8d0a11-6.1 libsmbclient0-4.6.7+git.51.327af8d0a11-6.1 libsmbclient0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libsmbconf-devel-4.6.7+git.51.327af8d0a11-6.1 libsmbconf0-4.6.7+git.51.327af8d0a11-6.1 libsmbconf0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libsmbldap-devel-4.6.7+git.51.327af8d0a11-6.1 libsmbldap0-4.6.7+git.51.327af8d0a11-6.1 libsmbldap0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libtevent-util-devel-4.6.7+git.51.327af8d0a11-6.1 libtevent-util0-4.6.7+git.51.327af8d0a11-6.1 libtevent-util0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 libwbclient-devel-4.6.7+git.51.327af8d0a11-6.1 libwbclient0-4.6.7+git.51.327af8d0a11-6.1 libwbclient0-debuginfo-4.6.7+git.51.327af8d0a11-6.1 samba-4.6.7+git.51.327af8d0a11-6.1 samba-client-4.6.7+git.51.327af8d0a11-6.1 samba-client-debuginfo-4.6.7+git.51.327af8d0a11-6.1 samba-core-devel-4.6.7+git.51.327af8d0a11-6.1 samba-debuginfo-4.6.7+git.51.327af8d0a11-6.1 samba-debugsource-4.6.7+git.51.327af8d0a11-6.1 samba-libs-4.6.7+git.51.327af8d0a11-6.1 samba-libs-debuginfo-4.6.7+git.51.327af8d0a11-6.1 samba-pidl-4.6.7+git.51.327af8d0a11-6.1 samba-python-4.6.7+git.51.327af8d0a11-6.1 samba-python-debuginfo-4.6.7+git.51.327af8d0a11-6.1 samba-test-4.6.7+git.51.327af8d0a11-6.1 samba-test-debuginfo-4.6.7+git.51.327af8d0a11-6.1 samba-winbind-4.6.7+git.51.327af8d0a11-6.1 samba-winbind-debuginfo-4.6.7+git.51.327af8d0a11-6.1 - openSUSE Leap 42.3 (x86_64): libdcerpc-binding0-32bit-4.6.7+git.51.327af8d0a11-6.1 libdcerpc-binding0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libdcerpc-samr0-32bit-4.6.7+git.51.327af8d0a11-6.1 libdcerpc-samr0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libdcerpc0-32bit-4.6.7+git.51.327af8d0a11-6.1 libdcerpc0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libndr-krb5pac0-32bit-4.6.7+git.51.327af8d0a11-6.1 libndr-krb5pac0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libndr-nbt0-32bit-4.6.7+git.51.327af8d0a11-6.1 libndr-nbt0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libndr-standard0-32bit-4.6.7+git.51.327af8d0a11-6.1 libndr-standard0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libndr0-32bit-4.6.7+git.51.327af8d0a11-6.1 libndr0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libnetapi0-32bit-4.6.7+git.51.327af8d0a11-6.1 libnetapi0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libsamba-credentials0-32bit-4.6.7+git.51.327af8d0a11-6.1 libsamba-credentials0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libsamba-errors0-32bit-4.6.7+git.51.327af8d0a11-6.1 libsamba-errors0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libsamba-hostconfig0-32bit-4.6.7+git.51.327af8d0a11-6.1 libsamba-hostconfig0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libsamba-passdb0-32bit-4.6.7+git.51.327af8d0a11-6.1 libsamba-passdb0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libsamba-policy0-32bit-4.6.7+git.51.327af8d0a11-6.1 libsamba-policy0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libsamba-util0-32bit-4.6.7+git.51.327af8d0a11-6.1 libsamba-util0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libsamdb0-32bit-4.6.7+git.51.327af8d0a11-6.1 libsamdb0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libsmbclient0-32bit-4.6.7+git.51.327af8d0a11-6.1 libsmbclient0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libsmbconf0-32bit-4.6.7+git.51.327af8d0a11-6.1 libsmbconf0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libsmbldap0-32bit-4.6.7+git.51.327af8d0a11-6.1 libsmbldap0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libtevent-util0-32bit-4.6.7+git.51.327af8d0a11-6.1 libtevent-util0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 libwbclient0-32bit-4.6.7+git.51.327af8d0a11-6.1 libwbclient0-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 samba-ceph-4.6.7+git.51.327af8d0a11-6.1 samba-ceph-debuginfo-4.6.7+git.51.327af8d0a11-6.1 samba-client-32bit-4.6.7+git.51.327af8d0a11-6.1 samba-client-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 samba-libs-32bit-4.6.7+git.51.327af8d0a11-6.1 samba-libs-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 samba-winbind-32bit-4.6.7+git.51.327af8d0a11-6.1 samba-winbind-debuginfo-32bit-4.6.7+git.51.327af8d0a11-6.1 - openSUSE Leap 42.3 (noarch): samba-doc-4.6.7+git.51.327af8d0a11-6.1 References: https://www.suse.com/security/cve/CVE-2017-12150.html https://www.suse.com/security/cve/CVE-2017-12151.html https://www.suse.com/security/cve/CVE-2017-12163.html https://bugzilla.suse.com/1050707 https://bugzilla.suse.com/1058565 https://bugzilla.suse.com/1058622 https://bugzilla.suse.com/1058624

1 0

openSUSE-RU-2017:2705-1: Recommended update for aws-cli, python-botocore
by maintenance＠opensuse.org 11 Oct '17

11 Oct '17

openSUSE Recommended Update: Recommended update for aws-cli, python-botocore ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2705-1 Rating: low References: #1044370 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides aws-cli 1.11.104, which brings many fixes and enhancements. aws-cli (update to version 1.11.104): - https://github.com/aws/aws-cli/blob/1.11.104/CHANGELOG.rst python-botocore (update to version 1.5.67): - https://github.com/boto/botocore/blob/1.5.67/CHANGELOG.rst python-jmespath (update to 0.9.2): - Raise LexerError on invalid numbers - Add support for custom functions - Fix ZeroDivisionError for built-in function avg() on empty lists - Properly handle non numerical ordering operators - Add support for new lines with tokens in an expression - Add support for JEP 9 which introduces "and", "unary", "not" and "paren" expressions - Improve lexing performance - Fix parsing error for multiselect lists - Fix issue with escaping single quotes in literal strings - Add support for providing your own dict cls to support ordered dictionaries - Add map() function python-s3transfer (update to version 0.1.10): - Expose ability to use own executor class for TransferManager This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1151=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1151=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): aws-cli-1.11.104-20.1 python-boto3-1.4.4-12.1 python-botocore-1.5.67-12.1 python-jmespath-0.9.2-7.1 python-s3transfer-0.1.10-9.1 - openSUSE Leap 42.2 (noarch): aws-cli-1.11.104-11.4.1 python-boto3-1.4.4-8.4.1 python-botocore-1.5.67-8.4.1 python-jmespath-0.9.2-3.4.1 python-s3transfer-0.1.10-5.4.1 References: https://bugzilla.suse.com/1044370

1 0

openSUSE-RU-2017:2692-1: Recommended update for kexec-tools
by maintenance＠opensuse.org 10 Oct '17

10 Oct '17

openSUSE Recommended Update: Recommended update for kexec-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2692-1 Rating: low References: #1033599 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kexec-tools fixes the kexec-bootloader with separate /boot partition. This update was imported from the SUSE:SLE-12-SP2:Update and SUSE:SLE-12-SP3:Update update projects. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1143=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1143=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): kexec-tools-2.0.12-6.1 kexec-tools-debuginfo-2.0.12-6.1 kexec-tools-debugsource-2.0.12-6.1 - openSUSE Leap 42.2 (i586 x86_64): kexec-tools-2.0.12-2.3.1 kexec-tools-debuginfo-2.0.12-2.3.1 kexec-tools-debugsource-2.0.12-2.3.1 References: https://bugzilla.suse.com/1033599

1 0