November 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:2960-1: Recommended update for iperf
by maintenance＠opensuse.org 09 Nov '17

09 Nov '17

openSUSE Recommended Update: Recommended update for iperf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2960-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for iperf to version 3.2 fixes the following issues: - Authentication mechanism added - New --dscp option allows specifying the DSCP value - various bug fixes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1256=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): iperf-3.2-9.1 iperf-devel-3.2-9.1 libiperf0-3.2-9.1 References:

1 0

openSUSE-OU-2017:2959-1: moderate: Optional update adding go1.8 to the SUSE PackageHub
by maintenance＠opensuse.org 09 Nov '17

09 Nov '17

openSUSE Optional Update: Optional update adding go1.8 to the SUSE PackageHub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:2959-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update adds go1.8 to the SUSE PackageHub. Go is a compiled, garbage-collected, concurrent programming language. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1254=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): go1.8-1.8.5-2.1 go1.8-debuginfo-1.8.5-2.1 go1.8-debugsource-1.8.5-2.1 go1.8-doc-1.8.5-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): go1.8-race-1.8.5-2.1 References:

1 0

openSUSE-RU-2017:2955-1: moderate: Recommended update for singularity
by maintenance＠opensuse.org 08 Nov '17

08 Nov '17

openSUSE Recommended Update: Recommended update for singularity ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2955-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for singularity fixes the following issues: - Restrict permissions file version to a version which has the required singularity entries to ensure a smooth install experience. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1253=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libsingularity1-2.3.2-8.1 libsingularity1-debuginfo-2.3.2-8.1 singularity-2.3.2-8.1 singularity-debuginfo-2.3.2-8.1 singularity-debugsource-2.3.2-8.1 singularity-devel-2.3.2-8.1 References:

1 0

openSUSE-SU-2017:2953-1: important: Security update for chromium
by opensuse-security＠opensuse.org 08 Nov '17

08 Nov '17

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2953-1 Rating: important References: #1066851 Cross-References: CVE-2017-15398 CVE-2017-15399 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for Chromium to version 62.0.3202.89 fixes the following vulnerabilities (boo#1066851): - CVE-2017-15398: Stack buffer overflow in QUIC - CVE-2017-15399: Use after free in V8 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1252=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1252=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): chromedriver-62.0.3202.89-124.1 chromedriver-debuginfo-62.0.3202.89-124.1 chromium-62.0.3202.89-124.1 chromium-debuginfo-62.0.3202.89-124.1 chromium-debugsource-62.0.3202.89-124.1 - openSUSE Leap 42.2 (x86_64): chromedriver-62.0.3202.89-104.38.1 chromedriver-debuginfo-62.0.3202.89-104.38.1 chromium-62.0.3202.89-104.38.1 chromium-debuginfo-62.0.3202.89-104.38.1 chromium-debugsource-62.0.3202.89-104.38.1 References: https://www.suse.com/security/cve/CVE-2017-15398.html https://www.suse.com/security/cve/CVE-2017-15399.html https://bugzilla.suse.com/1066851

1 0

openSUSE-RU-2017:2944-1: Recommended update for clamav-database
by maintenance＠opensuse.org 07 Nov '17

07 Nov '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2944-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh Nov 6th 2017. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1245=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201711060008-54.100.1 References:

1 0

openSUSE-SU-2017:2943-1: important: Security update for libwpd
by opensuse-security＠opensuse.org 07 Nov '17

07 Nov '17

openSUSE Security Update: Security update for libwpd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2943-1 Rating: important References: #1058025 Cross-References: CVE-2017-14226 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libwpd fixes the following issues: Security issue fixed: - CVE-2017-14226: WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1 mishandle iterators, which allows remote attackers to cause a denial of service (heap-based buffer over-read in the WPXTableList class in WPXTable.cpp). This vulnerability can be triggered in LibreOffice before 5.3.7. It may lead to suffering a remote attack against a LibreOffice application. (bnc#1058025) Bugfixes: - Fix various crashes, leaks and hangs when reading damaged files found by oss-fuzz. - Fix crash when NULL is passed as input stream. - Use symbol visibility on Linux. The library only exports public functions now. - Avoid infinite loop. (libwpd#3) - Remove bashism. (libwpd#5) - Fix various crashes and hangs when reading broken files found with the help of american-fuzzy-lop. - Make --help output of all command line tools more help2man-friendly. - Miscellaneous fixes and cleanups. - Generate manpages for the libwpd-tools This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1247=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1247=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): libwpd-devel-doc-0.10.2-8.1 - openSUSE Leap 42.3 (x86_64): libwpd-0_10-10-0.10.2-8.1 libwpd-0_10-10-debuginfo-0.10.2-8.1 libwpd-debugsource-0.10.2-8.1 libwpd-devel-0.10.2-8.1 libwpd-tools-0.10.2-8.1 libwpd-tools-debuginfo-0.10.2-8.1 - openSUSE Leap 42.2 (i586 x86_64): libwpd-0_10-10-0.10.2-5.3.1 libwpd-0_10-10-debuginfo-0.10.2-5.3.1 libwpd-debugsource-0.10.2-5.3.1 libwpd-devel-0.10.2-5.3.1 libwpd-tools-0.10.2-5.3.1 libwpd-tools-debuginfo-0.10.2-5.3.1 - openSUSE Leap 42.2 (noarch): libwpd-devel-doc-0.10.2-5.3.1 References: https://www.suse.com/security/cve/CVE-2017-14226.html https://bugzilla.suse.com/1058025

1 0

openSUSE-SU-2017:2942-1: moderate: Security update for sssd
by opensuse-security＠opensuse.org 07 Nov '17

07 Nov '17

openSUSE Security Update: Security update for sssd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2942-1 Rating: moderate References: #1039567 #1055123 #1061832 Cross-References: CVE-2017-12173 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for sssd provides the following fixes: Security issues fixed: - CVE-2017-12173: Fixed unsanitized input when searching in local cache database (bsc#1061832). Non security issues fixed: - Fixed a segfault issue in ldap_rfc_2307_fallback_to_local_users. (bsc#1055123) - Install /var/lib/sss/mc directory to correct sssd cache invalidation behaviour. (bsc#1039567) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1251=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1251=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libipa_hbac-devel-1.13.4-9.1 libipa_hbac0-1.13.4-9.1 libipa_hbac0-debuginfo-1.13.4-9.1 libsss_idmap-devel-1.13.4-9.1 libsss_idmap0-1.13.4-9.1 libsss_idmap0-debuginfo-1.13.4-9.1 libsss_nss_idmap-devel-1.13.4-9.1 libsss_nss_idmap0-1.13.4-9.1 libsss_nss_idmap0-debuginfo-1.13.4-9.1 libsss_sudo-1.13.4-9.1 libsss_sudo-debuginfo-1.13.4-9.1 python-ipa_hbac-1.13.4-9.1 python-ipa_hbac-debuginfo-1.13.4-9.1 python-sss_nss_idmap-1.13.4-9.1 python-sss_nss_idmap-debuginfo-1.13.4-9.1 python-sssd-config-1.13.4-9.1 python-sssd-config-debuginfo-1.13.4-9.1 sssd-1.13.4-9.1 sssd-ad-1.13.4-9.1 sssd-ad-debuginfo-1.13.4-9.1 sssd-debuginfo-1.13.4-9.1 sssd-debugsource-1.13.4-9.1 sssd-ipa-1.13.4-9.1 sssd-ipa-debuginfo-1.13.4-9.1 sssd-krb5-1.13.4-9.1 sssd-krb5-common-1.13.4-9.1 sssd-krb5-common-debuginfo-1.13.4-9.1 sssd-krb5-debuginfo-1.13.4-9.1 sssd-ldap-1.13.4-9.1 sssd-ldap-debuginfo-1.13.4-9.1 sssd-proxy-1.13.4-9.1 sssd-proxy-debuginfo-1.13.4-9.1 sssd-tools-1.13.4-9.1 sssd-tools-debuginfo-1.13.4-9.1 - openSUSE Leap 42.3 (x86_64): sssd-32bit-1.13.4-9.1 sssd-debuginfo-32bit-1.13.4-9.1 - openSUSE Leap 42.2 (i586 x86_64): libipa_hbac-devel-1.13.4-5.6.1 libipa_hbac0-1.13.4-5.6.1 libipa_hbac0-debuginfo-1.13.4-5.6.1 libsss_idmap-devel-1.13.4-5.6.1 libsss_idmap0-1.13.4-5.6.1 libsss_idmap0-debuginfo-1.13.4-5.6.1 libsss_nss_idmap-devel-1.13.4-5.6.1 libsss_nss_idmap0-1.13.4-5.6.1 libsss_nss_idmap0-debuginfo-1.13.4-5.6.1 libsss_sudo-1.13.4-5.6.1 libsss_sudo-debuginfo-1.13.4-5.6.1 python-ipa_hbac-1.13.4-5.6.1 python-ipa_hbac-debuginfo-1.13.4-5.6.1 python-sss_nss_idmap-1.13.4-5.6.1 python-sss_nss_idmap-debuginfo-1.13.4-5.6.1 python-sssd-config-1.13.4-5.6.1 python-sssd-config-debuginfo-1.13.4-5.6.1 sssd-1.13.4-5.6.1 sssd-ad-1.13.4-5.6.1 sssd-ad-debuginfo-1.13.4-5.6.1 sssd-debuginfo-1.13.4-5.6.1 sssd-debugsource-1.13.4-5.6.1 sssd-ipa-1.13.4-5.6.1 sssd-ipa-debuginfo-1.13.4-5.6.1 sssd-krb5-1.13.4-5.6.1 sssd-krb5-common-1.13.4-5.6.1 sssd-krb5-common-debuginfo-1.13.4-5.6.1 sssd-krb5-debuginfo-1.13.4-5.6.1 sssd-ldap-1.13.4-5.6.1 sssd-ldap-debuginfo-1.13.4-5.6.1 sssd-proxy-1.13.4-5.6.1 sssd-proxy-debuginfo-1.13.4-5.6.1 sssd-tools-1.13.4-5.6.1 sssd-tools-debuginfo-1.13.4-5.6.1 - openSUSE Leap 42.2 (x86_64): sssd-32bit-1.13.4-5.6.1 sssd-debuginfo-32bit-1.13.4-5.6.1 References: https://www.suse.com/security/cve/CVE-2017-12173.html https://bugzilla.suse.com/1039567 https://bugzilla.suse.com/1055123 https://bugzilla.suse.com/1061832

1 0

openSUSE-SU-2017:2941-1: important: Security update for qemu
by opensuse-security＠opensuse.org 07 Nov '17

07 Nov '17

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2941-1 Rating: important References: #1043176 #1043808 #1046636 #1047674 #1048902 #1049381 #1054724 #1056334 #1057378 #1057585 #1057966 #1059369 #1062069 #1062942 #1063122 #997358 Cross-References: CVE-2017-10664 CVE-2017-10806 CVE-2017-10911 CVE-2017-11334 CVE-2017-11434 CVE-2017-12809 CVE-2017-13672 CVE-2017-14167 CVE-2017-15038 CVE-2017-15268 CVE-2017-15289 CVE-2017-9524 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves 12 vulnerabilities and has four fixes is now available. Description: This update for qemu fixes several issues. These security issues were fixed: - CVE-2017-15268: Qemu allowed remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c (bsc#1062942). - CVE-2017-9524: The qemu-nbd server when built with the Network Block Device (NBD) Server support allowed remote attackers to cause a denial of service (segmentation fault and server crash) by leveraging failure to ensure that all initialization occurs talking to a client in the nbd_negotiate function (bsc#1043808). - CVE-2017-15289: The mode4and5 write functions allowed local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation (bsc#1063122) - CVE-2017-15038: Race condition in the v9fs_xattrwalk function local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes (bsc#1062069) - CVE-2017-10911: The make_response function in the Linux kernel allowed guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interface response structures (bsc#1057378) - CVE-2017-12809: The IDE disk and CD/DVD-ROM Emulator support allowed local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by flushing an empty CDROM device drive (bsc#1054724) - CVE-2017-10664: qemu-nbd did not ignore SIGPIPE, which allowed remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt (bsc#1046636) - CVE-2017-10806: Stack-based buffer overflow allowed local guest OS users to cause a denial of service (QEMU process crash) via vectors related to logging debug messages (bsc#1047674) - CVE-2017-14167: Integer overflow in the load_multiboot function allowed local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, which trigger an out-of-bounds write (bsc#1057585) - CVE-2017-11434: The dhcp_decode function in slirp/bootp.c allowed local guest OS users to cause a denial of service (out-of-bounds read) via a crafted DHCP options string (bsc#1049381) - CVE-2017-11334: The address_space_write_continue function allowed local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area (bsc#1048902) - CVE-2017-13672: The VGA display emulator support allowed local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update (bsc#1056334) These non-security issues were fixed: - Fixed not being able to build from rpm sources due to undefined macro (bsc#1057966) - Fixed wrong permissions for kvm_stat.1 file - Fixed KVM lun resize not working as expected on SLES12 SP2 HV (bsc#1043176) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1249=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): qemu-2.6.2-31.9.1 qemu-arm-2.6.2-31.9.1 qemu-arm-debuginfo-2.6.2-31.9.1 qemu-block-curl-2.6.2-31.9.1 qemu-block-curl-debuginfo-2.6.2-31.9.1 qemu-block-dmg-2.6.2-31.9.1 qemu-block-dmg-debuginfo-2.6.2-31.9.1 qemu-block-iscsi-2.6.2-31.9.1 qemu-block-iscsi-debuginfo-2.6.2-31.9.1 qemu-block-ssh-2.6.2-31.9.1 qemu-block-ssh-debuginfo-2.6.2-31.9.1 qemu-debugsource-2.6.2-31.9.1 qemu-extra-2.6.2-31.9.1 qemu-extra-debuginfo-2.6.2-31.9.1 qemu-guest-agent-2.6.2-31.9.1 qemu-guest-agent-debuginfo-2.6.2-31.9.1 qemu-kvm-2.6.2-31.9.1 qemu-lang-2.6.2-31.9.1 qemu-linux-user-2.6.2-31.9.1 qemu-linux-user-debuginfo-2.6.2-31.9.1 qemu-linux-user-debugsource-2.6.2-31.9.1 qemu-ppc-2.6.2-31.9.1 qemu-ppc-debuginfo-2.6.2-31.9.1 qemu-s390-2.6.2-31.9.1 qemu-s390-debuginfo-2.6.2-31.9.1 qemu-testsuite-2.6.2-31.9.2 qemu-tools-2.6.2-31.9.1 qemu-tools-debuginfo-2.6.2-31.9.1 qemu-x86-2.6.2-31.9.1 qemu-x86-debuginfo-2.6.2-31.9.1 - openSUSE Leap 42.2 (noarch): qemu-ipxe-1.0.0-31.9.1 qemu-seabios-1.9.1-31.9.1 qemu-sgabios-8-31.9.1 qemu-vgabios-1.9.1-31.9.1 - openSUSE Leap 42.2 (x86_64): qemu-block-rbd-2.6.2-31.9.1 qemu-block-rbd-debuginfo-2.6.2-31.9.1 References: https://www.suse.com/security/cve/CVE-2017-10664.html https://www.suse.com/security/cve/CVE-2017-10806.html https://www.suse.com/security/cve/CVE-2017-10911.html https://www.suse.com/security/cve/CVE-2017-11334.html https://www.suse.com/security/cve/CVE-2017-11434.html https://www.suse.com/security/cve/CVE-2017-12809.html https://www.suse.com/security/cve/CVE-2017-13672.html https://www.suse.com/security/cve/CVE-2017-14167.html https://www.suse.com/security/cve/CVE-2017-15038.html https://www.suse.com/security/cve/CVE-2017-15268.html https://www.suse.com/security/cve/CVE-2017-15289.html https://www.suse.com/security/cve/CVE-2017-9524.html https://bugzilla.suse.com/1043176 https://bugzilla.suse.com/1043808 https://bugzilla.suse.com/1046636 https://bugzilla.suse.com/1047674 https://bugzilla.suse.com/1048902 https://bugzilla.suse.com/1049381 https://bugzilla.suse.com/1054724 https://bugzilla.suse.com/1056334 https://bugzilla.suse.com/1057378 https://bugzilla.suse.com/1057585 https://bugzilla.suse.com/1057966 https://bugzilla.suse.com/1059369 https://bugzilla.suse.com/1062069 https://bugzilla.suse.com/1062942 https://bugzilla.suse.com/1063122 https://bugzilla.suse.com/997358

1 0

openSUSE-SU-2017:2940-1: moderate: Security update for SuSEfirewall2
by opensuse-security＠opensuse.org 07 Nov '17

07 Nov '17

openSUSE Security Update: Security update for SuSEfirewall2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2940-1 Rating: moderate References: #1064127 Cross-References: CVE-2017-15638 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for SuSEfirewall2 fixes the following issues: - CVE-2017-15638: Fixed a security issue with too open implicit portmapper rules (bsc#1064127): A source net restriction for _rpc_ services was not taken into account for the implicitly added rules for port 111, making the portmap service accessible to everyone in the affected zone. This update was imported from the SUSE:SLE-12:Update and SUSE:SLE-12-SP3:Update update projects. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1246=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1246=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): SuSEfirewall2-3.6.312.333-7.1 - openSUSE Leap 42.2 (noarch): SuSEfirewall2-3.6.312-5.9.1 References: https://www.suse.com/security/cve/CVE-2017-15638.html https://bugzilla.suse.com/1064127

1 0

openSUSE-SU-2017:2939-1: moderate: Security update for libsass
by opensuse-security＠opensuse.org 07 Nov '17

07 Nov '17

openSUSE Security Update: Security update for libsass ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2939-1 Rating: moderate References: #1050148 #1050149 #1050150 #1050151 #1050380 Cross-References: CVE-2017-11554 CVE-2017-11555 CVE-2017-11556 CVE-2017-11605 CVE-2017-11608 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for libsass fixes the following DoS vulnerabilities: - CVE-2017-11554: Stack consumption vulnerability allowed remote DoS via crafted input (1050148) - CVE-2017-11555: Illegal address access in Eval::operator allowed remote DoS via crafted input (boo#1050149) - CVE-2017-11556: Stack consumption vulnerability allowed remote DoS via crafted input (boo#1050150) - CVE-2017-11605: Heap based buffer over-read allowed remote DoS via crafted input (boo#1050151) - CVE-2017-11608: Heap-based buffer over-read allowed remote DoS via crafted input (boo#1050380) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1250=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1250=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libsass-3_3_2-0-3.3.2-5.1 libsass-3_3_2-0-debuginfo-3.3.2-5.1 libsass-debugsource-3.3.2-5.1 libsass-devel-3.3.2-5.1 - openSUSE Leap 42.2 (i586 x86_64): libsass-3_3_2-0-3.3.2-2.3.1 libsass-3_3_2-0-debuginfo-3.3.2-2.3.1 libsass-debugsource-3.3.2-2.3.1 libsass-devel-3.3.2-2.3.1 References: https://www.suse.com/security/cve/CVE-2017-11554.html https://www.suse.com/security/cve/CVE-2017-11555.html https://www.suse.com/security/cve/CVE-2017-11556.html https://www.suse.com/security/cve/CVE-2017-11605.html https://www.suse.com/security/cve/CVE-2017-11608.html https://bugzilla.suse.com/1050148 https://bugzilla.suse.com/1050149 https://bugzilla.suse.com/1050150 https://bugzilla.suse.com/1050151 https://bugzilla.suse.com/1050380

1 0

openSUSE-SU-2017:2938-1: important: Security update for qemu
by opensuse-security＠opensuse.org 07 Nov '17

07 Nov '17

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2938-1 Rating: important References: #1054724 #1055587 #1056291 #1056334 #1057378 #1057585 #1057966 #1062069 #1062942 #1063122 Cross-References: CVE-2017-10911 CVE-2017-12809 CVE-2017-13672 CVE-2017-13711 CVE-2017-14167 CVE-2017-15038 CVE-2017-15268 CVE-2017-15289 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has two fixes is now available. Description: This update for qemu to version 2.9.1 fixes several issues. It also announces that the qed storage format will be no longer supported in Leap 15.0. These security issues were fixed: - CVE-2017-15268: Qemu allowed remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c (bsc#1062942) - CVE-2017-15289: The mode4and5 write functions allowed local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation (bsc#1063122) - CVE-2017-15038: Race condition in the v9fs_xattrwalk function local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes (bsc#1062069) - CVE-2017-10911: The make_response function in the Linux kernel allowed guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interface response structures (bsc#1057378) - CVE-2017-12809: The IDE disk and CD/DVD-ROM Emulator support allowed local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by flushing an empty CDROM device drive (bsc#1054724) - CVE-2017-14167: Integer overflow in the load_multiboot function allowed local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, which trigger an out-of-bounds write (bsc#1057585) - CVE-2017-13672: The VGA display emulator support allowed local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update (bsc#1056334) - CVE-2017-13711: Use-after-free vulnerability allowed attackers to cause a denial of service (QEMU instance crash) by leveraging failure to properly clear ifq_so from pending packets (bsc#1056291). These non-security issues were fixed: - Fixed not being able to build from rpm sources due to undefined macro (bsc#1057966) - Fiedx package build failure against new glibc (bsc#1055587) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1248=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): qemu-linux-user-2.9.1-35.1 qemu-linux-user-debuginfo-2.9.1-35.1 qemu-linux-user-debugsource-2.9.1-35.1 - openSUSE Leap 42.3 (x86_64): qemu-2.9.1-35.1 qemu-arm-2.9.1-35.1 qemu-arm-debuginfo-2.9.1-35.1 qemu-block-curl-2.9.1-35.1 qemu-block-curl-debuginfo-2.9.1-35.1 qemu-block-dmg-2.9.1-35.1 qemu-block-dmg-debuginfo-2.9.1-35.1 qemu-block-iscsi-2.9.1-35.1 qemu-block-iscsi-debuginfo-2.9.1-35.1 qemu-block-rbd-2.9.1-35.1 qemu-block-rbd-debuginfo-2.9.1-35.1 qemu-block-ssh-2.9.1-35.1 qemu-block-ssh-debuginfo-2.9.1-35.1 qemu-debugsource-2.9.1-35.1 qemu-extra-2.9.1-35.1 qemu-extra-debuginfo-2.9.1-35.1 qemu-guest-agent-2.9.1-35.1 qemu-guest-agent-debuginfo-2.9.1-35.1 qemu-ksm-2.9.1-35.1 qemu-kvm-2.9.1-35.1 qemu-lang-2.9.1-35.1 qemu-ppc-2.9.1-35.1 qemu-ppc-debuginfo-2.9.1-35.1 qemu-s390-2.9.1-35.1 qemu-s390-debuginfo-2.9.1-35.1 qemu-testsuite-2.9.1-35.1 qemu-tools-2.9.1-35.1 qemu-tools-debuginfo-2.9.1-35.1 qemu-x86-2.9.1-35.1 qemu-x86-debuginfo-2.9.1-35.1 - openSUSE Leap 42.3 (noarch): qemu-ipxe-1.0.0-35.1 qemu-seabios-1.10.2-35.1 qemu-sgabios-8-35.1 qemu-vgabios-1.10.2-35.1 References: https://www.suse.com/security/cve/CVE-2017-10911.html https://www.suse.com/security/cve/CVE-2017-12809.html https://www.suse.com/security/cve/CVE-2017-13672.html https://www.suse.com/security/cve/CVE-2017-13711.html https://www.suse.com/security/cve/CVE-2017-14167.html https://www.suse.com/security/cve/CVE-2017-15038.html https://www.suse.com/security/cve/CVE-2017-15268.html https://www.suse.com/security/cve/CVE-2017-15289.html https://bugzilla.suse.com/1054724 https://bugzilla.suse.com/1055587 https://bugzilla.suse.com/1056291 https://bugzilla.suse.com/1056334 https://bugzilla.suse.com/1057378 https://bugzilla.suse.com/1057585 https://bugzilla.suse.com/1057966 https://bugzilla.suse.com/1062069 https://bugzilla.suse.com/1062942 https://bugzilla.suse.com/1063122

1 0

openSUSE-RU-2017:2934-1: moderate: Recommended update for singularity
by maintenance＠opensuse.org 06 Nov '17

06 Nov '17

openSUSE Recommended Update: Recommended update for singularity ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2934-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for singularity fixes the following issues: - Recent changes to the Docker registry RESTful API broke compatibility with Singularity - Upgrade to version 2.3.2, which also includes a number of other minor fixes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1244=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libsingularity1-2.3.2-5.1 singularity-2.3.2-5.1 singularity-devel-2.3.2-5.1 References:

1 0

openSUSE-RU-2017:2930-1: Recommended update for gnome-keyring, libsecret
by maintenance＠opensuse.org 05 Nov '17

05 Nov '17

openSUSE Recommended Update: Recommended update for gnome-keyring, libsecret ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2930-1 Rating: low References: #1043861 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-keyring and libsecret provides the following fix: - Ensure that generated secret occupies the same number of bytes as prime. Eliminates random errors while libsecret tries to communicate with gnome-keyring. (bsc#1043861) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1242=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1242=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): gnome-keyring-3.20.0-7.1 gnome-keyring-debuginfo-3.20.0-7.1 gnome-keyring-debugsource-3.20.0-7.1 gnome-keyring-pam-3.20.0-7.1 gnome-keyring-pam-debuginfo-3.20.0-7.1 libgck-modules-gnome-keyring-3.20.0-7.1 libgck-modules-gnome-keyring-debuginfo-3.20.0-7.1 libsecret-1-0-0.18.5-6.1 libsecret-1-0-debuginfo-0.18.5-6.1 libsecret-debugsource-0.18.5-6.1 libsecret-devel-0.18.5-6.1 libsecret-tools-0.18.5-6.1 libsecret-tools-debuginfo-0.18.5-6.1 typelib-1_0-Secret-1-0.18.5-6.1 - openSUSE Leap 42.3 (noarch): gnome-keyring-lang-3.20.0-7.1 libsecret-lang-0.18.5-6.1 - openSUSE Leap 42.3 (x86_64): gnome-keyring-32bit-3.20.0-7.1 gnome-keyring-debuginfo-32bit-3.20.0-7.1 gnome-keyring-pam-32bit-3.20.0-7.1 gnome-keyring-pam-debuginfo-32bit-3.20.0-7.1 libsecret-1-0-32bit-0.18.5-6.1 libsecret-1-0-debuginfo-32bit-0.18.5-6.1 - openSUSE Leap 42.2 (i586 x86_64): gnome-keyring-3.20.0-4.3.1 gnome-keyring-debuginfo-3.20.0-4.3.1 gnome-keyring-debugsource-3.20.0-4.3.1 gnome-keyring-pam-3.20.0-4.3.1 gnome-keyring-pam-debuginfo-3.20.0-4.3.1 libgck-modules-gnome-keyring-3.20.0-4.3.1 libgck-modules-gnome-keyring-debuginfo-3.20.0-4.3.1 libsecret-1-0-0.18.5-3.3.1 libsecret-1-0-debuginfo-0.18.5-3.3.1 libsecret-debugsource-0.18.5-3.3.1 libsecret-devel-0.18.5-3.3.1 libsecret-tools-0.18.5-3.3.1 libsecret-tools-debuginfo-0.18.5-3.3.1 typelib-1_0-Secret-1-0.18.5-3.3.1 - openSUSE Leap 42.2 (noarch): gnome-keyring-lang-3.20.0-4.3.1 libsecret-lang-0.18.5-3.3.1 - openSUSE Leap 42.2 (x86_64): gnome-keyring-32bit-3.20.0-4.3.1 gnome-keyring-debuginfo-32bit-3.20.0-4.3.1 gnome-keyring-pam-32bit-3.20.0-4.3.1 gnome-keyring-pam-debuginfo-32bit-3.20.0-4.3.1 libsecret-1-0-32bit-0.18.5-3.3.1 libsecret-1-0-debuginfo-32bit-0.18.5-3.3.1 References: https://bugzilla.suse.com/1043861

1 0

openSUSE-RU-2017:2929-1: moderate: Recommended update of libktorrent
by maintenance＠opensuse.org 05 Nov '17

05 Nov '17

openSUSE Recommended Update: Recommended update of libktorrent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2929-1 Rating: moderate References: #1065559 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libktorrent fixes a crash in ktorrent that would occur when using Webseeds Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1243=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): libktorrent6-lang-2.0.1-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): libktorrent-debugsource-2.0.1-5.1 libktorrent-devel-2.0.1-5.1 libktorrent6-2.0.1-5.1 libktorrent6-debuginfo-2.0.1-5.1 References: https://bugzilla.suse.com/1065559

1 0

openSUSE-RU-2017:2928-1: moderate: Recommended update of libktorrent
by maintenance＠opensuse.org 05 Nov '17

05 Nov '17

openSUSE Recommended Update: Recommended update of libktorrent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2928-1 Rating: moderate References: #1065559 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libktorrent fixes a crash in ktorrent that would occur when using Webseeds Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1243=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1243=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libktorrent-debugsource-2.0.1-5.1 libktorrent-devel-2.0.1-5.1 libktorrent6-2.0.1-5.1 libktorrent6-debuginfo-2.0.1-5.1 - openSUSE Leap 42.3 (noarch): libktorrent6-lang-2.0.1-5.1 - openSUSE Leap 42.2 (i586 x86_64): libktorrent-debugsource-2.0.1-2.3.1 libktorrent-devel-2.0.1-2.3.1 libktorrent6-2.0.1-2.3.1 libktorrent6-debuginfo-2.0.1-2.3.1 - openSUSE Leap 42.2 (noarch): libktorrent6-lang-2.0.1-2.3.1 References: https://bugzilla.suse.com/1065559

1 0

openSUSE-OU-2017:2919-1: moderate: Optional update to add singularity to the SUSE PackageHub
by maintenance＠opensuse.org 02 Nov '17

02 Nov '17

openSUSE Optional Update: Optional update to add singularity to the SUSE PackageHub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:2919-1 Rating: moderate References: #1028304 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update adds singularity to the SUSE PackageHub. Singularity is used for application and environment virtualization for HPC environments. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1241=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libsingularity1-2.3.1-2.1 singularity-2.3.1-2.1 singularity-devel-2.3.1-2.1 References: https://bugzilla.suse.com/1028304

1 0

openSUSE-OU-2017:2918-1: moderate: Optional update to add robinhood to the SUSE PackageHub
by maintenance＠opensuse.org 02 Nov '17

02 Nov '17

openSUSE Optional Update: Optional update to add robinhood to the SUSE PackageHub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:2918-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update adds robinhood to the SUSE PackageHub. Robinhood is a policy engine and reporting tool for large filesystems. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1240=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): robinhood-3.1-2.1 robinhood-tests-3.1-2.1 robinhood-tools-3.1-2.1 robinhood-webgui-3.1-2.1 References:

1 0

openSUSE-SU-2017:2916-1: important: Security update for xen
by opensuse-security＠opensuse.org 01 Nov '17

01 Nov '17

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2916-1 Rating: important References: #1027519 #1057358 #1059777 #1061076 #1061077 #1061080 #1061081 #1061082 #1061084 #1061086 #1061087 Cross-References: CVE-2017-15588 CVE-2017-15589 CVE-2017-15590 CVE-2017-15591 CVE-2017-15592 CVE-2017-15593 CVE-2017-15594 CVE-2017-15595 CVE-2017-5526 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves 9 vulnerabilities and has two fixes is now available. Description: This update for xen fixes several issues: These security issues were fixed: - CVE-2017-5526: The ES1370 audio device emulation support was vulnerable to a memory leakage issue allowing a privileged user inside the guest to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1059777) - CVE-2017-15593: Missing cleanup in the page type system allowed a malicious or buggy PV guest to cause DoS (XSA-242 bsc#1061084) - CVE-2017-15592: A problem in the shadow pagetable code allowed a malicious or buggy HVM guest to cause DoS or cause hypervisor memory corruption potentially allowing the guest to escalate its privilege (XSA-243 bsc#1061086) - CVE-2017-15594: Problematic handling of the selector fields in the Interrupt Descriptor Table (IDT) allowed a malicious or buggy x86 PV guest to escalate its privileges or cause DoS (XSA-244 bsc#1061087) - CVE-2017-15591: Missing checks in the handling of DMOPs allowed malicious or buggy stub domain kernels or tool stacks otherwise living outside of Domain0 to cause a DoS (XSA-238 bsc#1061077) - CVE-2017-15589: Intercepted I/O write operations with less than a full machine word's worth of data were not properly handled, which allowed a malicious unprivileged x86 HVM guest to obtain sensitive information from the host or other guests (XSA-239 bsc#1061080) - CVE-2017-15595: In certain configurations of linear page tables a stack overflow might have occured that allowed a malicious or buggy PV guest to cause DoS and potentially privilege escalation and information leaks (XSA-240 bsc#1061081) - CVE-2017-15588: Under certain conditions x86 PV guests could have caused the hypervisor to miss a necessary TLB flush for a page. This allowed a malicious x86 PV guest to access all of system memory, allowing for privilege escalation, DoS, and information leaks (XSA-241 bsc#1061082) - CVE-2017-15590: Multiple issues existed with the setup of PCI MSI interrupts that allowed a malicious or buggy guest to cause DoS and potentially privilege escalation and information leaks (XSA-237 bsc#1061076) This non-security issue was fixed: - bsc#1057358: Fixed boot when secure boot is enabled This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1239=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xen-debugsource-4.7.3_06-11.18.1 xen-devel-4.7.3_06-11.18.1 xen-libs-4.7.3_06-11.18.1 xen-libs-debuginfo-4.7.3_06-11.18.1 xen-tools-domU-4.7.3_06-11.18.1 xen-tools-domU-debuginfo-4.7.3_06-11.18.1 - openSUSE Leap 42.2 (x86_64): xen-4.7.3_06-11.18.1 xen-doc-html-4.7.3_06-11.18.1 xen-libs-32bit-4.7.3_06-11.18.1 xen-libs-debuginfo-32bit-4.7.3_06-11.18.1 xen-tools-4.7.3_06-11.18.1 xen-tools-debuginfo-4.7.3_06-11.18.1 References: https://www.suse.com/security/cve/CVE-2017-15588.html https://www.suse.com/security/cve/CVE-2017-15589.html https://www.suse.com/security/cve/CVE-2017-15590.html https://www.suse.com/security/cve/CVE-2017-15591.html https://www.suse.com/security/cve/CVE-2017-15592.html https://www.suse.com/security/cve/CVE-2017-15593.html https://www.suse.com/security/cve/CVE-2017-15594.html https://www.suse.com/security/cve/CVE-2017-15595.html https://www.suse.com/security/cve/CVE-2017-5526.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1057358 https://bugzilla.suse.com/1059777 https://bugzilla.suse.com/1061076 https://bugzilla.suse.com/1061077 https://bugzilla.suse.com/1061080 https://bugzilla.suse.com/1061081 https://bugzilla.suse.com/1061082 https://bugzilla.suse.com/1061084 https://bugzilla.suse.com/1061086 https://bugzilla.suse.com/1061087

1 0

openSUSE-RU-2017:2915-1: Recommended update for tor
by maintenance＠opensuse.org 01 Nov '17

01 Nov '17

openSUSE Recommended Update: Recommended update for tor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2915-1 Rating: low References: #1065582 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tor fixes the following issues: - Add "Bastet" as a ninth directory authority to the default list - The directory authority "Longclaw" has changed its IP address - Fix a timing-based assertion failure (bsc#1065582) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1238=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1238=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): tor-0.3.0.12-6.1 tor-debuginfo-0.3.0.12-6.1 tor-debugsource-0.3.0.12-6.1 - openSUSE Leap 42.2 (i586 x86_64): tor-0.2.9.13-8.9.1 tor-debuginfo-0.2.9.13-8.9.1 tor-debugsource-0.2.9.13-8.9.1 References: https://bugzilla.suse.com/1065582

1 0

openSUSE-RU-2017:2914-1: Recommended update for tor
by maintenance＠opensuse.org 01 Nov '17

01 Nov '17

openSUSE Recommended Update: Recommended update for tor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2914-1 Rating: low References: #1065582 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tor fixes the following issues: - Add "Bastet" as a ninth directory authority to the default list - The directory authority "Longclaw" has changed its IP address - Fix a timing-based assertion failure (bsc#1065582) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1238=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): tor-0.3.1.8-5.1 tor-debuginfo-0.3.1.8-5.1 tor-debugsource-0.3.1.8-5.1 References: https://bugzilla.suse.com/1065582

1 0

openSUSE-OU-2017:2913-1: moderate: Optional update for gkrellm-cpufreq, adding gkrellm-cpupower
by maintenance＠opensuse.org 01 Nov '17

01 Nov '17

openSUSE Optional Update: Optional update for gkrellm-cpufreq, adding gkrellm-cpupower ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:2913-1 Rating: moderate References: #1062808 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for gkrellm-cpufreq fixes the following issues: - discontinue discuntional gkrellm-cpufreq and recommend gkrellm-cpupower instead [boo#1062808] This update provides the package gkrellm-cpupower as a functional replacement. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1237=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1237=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): gkrellm-cpufreq-0.6.4.1-8.1 - openSUSE Leap 42.3 (x86_64): gkrellm-cpupower-0.2-2.1 - openSUSE Leap 42.2 (i586 x86_64): gkrellm-cpufreq-0.6.4.1-5.3.1 - openSUSE Leap 42.2 (x86_64): gkrellm-cpupower-0.2-2.1 References: https://bugzilla.suse.com/1062808

1 0

openSUSE-RU-2017:2912-1: Recommended update for clamav-database
by maintenance＠opensuse.org 01 Nov '17

01 Nov '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2912-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh October 30th 2017. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1235=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201710300007-54.97.1 References:

1 0

openSUSE-RU-2017:2911-1: moderate: Recommended update for gnuhealth
by maintenance＠opensuse.org 01 Nov '17

01 Nov '17

openSUSE Recommended Update: Recommended update for gnuhealth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2911-1 Rating: moderate References: #1065671 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnuhealth to version 3.2.6 fixes the following issues: - fix Traceback generating an invoice from service with an insurance policy plan - fix Traceback when creating a free slot in appointments or work schedule The following packaging changes are included: - dependency on python3-pymongo removed Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1236=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): gnuhealth-3.2.6-35.1 References: https://bugzilla.suse.com/1065671

1 0