November 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2017:2943-1: important: Security update for libwpd
by opensuse-security＠opensuse.org 07 Nov '17

07 Nov '17

openSUSE Security Update: Security update for libwpd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2943-1 Rating: important References: #1058025 Cross-References: CVE-2017-14226 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libwpd fixes the following issues: Security issue fixed: - CVE-2017-14226: WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1 mishandle iterators, which allows remote attackers to cause a denial of service (heap-based buffer over-read in the WPXTableList class in WPXTable.cpp). This vulnerability can be triggered in LibreOffice before 5.3.7. It may lead to suffering a remote attack against a LibreOffice application. (bnc#1058025) Bugfixes: - Fix various crashes, leaks and hangs when reading damaged files found by oss-fuzz. - Fix crash when NULL is passed as input stream. - Use symbol visibility on Linux. The library only exports public functions now. - Avoid infinite loop. (libwpd#3) - Remove bashism. (libwpd#5) - Fix various crashes and hangs when reading broken files found with the help of american-fuzzy-lop. - Make --help output of all command line tools more help2man-friendly. - Miscellaneous fixes and cleanups. - Generate manpages for the libwpd-tools This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1247=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1247=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): libwpd-devel-doc-0.10.2-8.1 - openSUSE Leap 42.3 (x86_64): libwpd-0_10-10-0.10.2-8.1 libwpd-0_10-10-debuginfo-0.10.2-8.1 libwpd-debugsource-0.10.2-8.1 libwpd-devel-0.10.2-8.1 libwpd-tools-0.10.2-8.1 libwpd-tools-debuginfo-0.10.2-8.1 - openSUSE Leap 42.2 (i586 x86_64): libwpd-0_10-10-0.10.2-5.3.1 libwpd-0_10-10-debuginfo-0.10.2-5.3.1 libwpd-debugsource-0.10.2-5.3.1 libwpd-devel-0.10.2-5.3.1 libwpd-tools-0.10.2-5.3.1 libwpd-tools-debuginfo-0.10.2-5.3.1 - openSUSE Leap 42.2 (noarch): libwpd-devel-doc-0.10.2-5.3.1 References: https://www.suse.com/security/cve/CVE-2017-14226.html https://bugzilla.suse.com/1058025

1 0

openSUSE-SU-2017:2942-1: moderate: Security update for sssd
by opensuse-security＠opensuse.org 07 Nov '17

07 Nov '17

openSUSE Security Update: Security update for sssd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2942-1 Rating: moderate References: #1039567 #1055123 #1061832 Cross-References: CVE-2017-12173 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for sssd provides the following fixes: Security issues fixed: - CVE-2017-12173: Fixed unsanitized input when searching in local cache database (bsc#1061832). Non security issues fixed: - Fixed a segfault issue in ldap_rfc_2307_fallback_to_local_users. (bsc#1055123) - Install /var/lib/sss/mc directory to correct sssd cache invalidation behaviour. (bsc#1039567) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1251=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1251=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libipa_hbac-devel-1.13.4-9.1 libipa_hbac0-1.13.4-9.1 libipa_hbac0-debuginfo-1.13.4-9.1 libsss_idmap-devel-1.13.4-9.1 libsss_idmap0-1.13.4-9.1 libsss_idmap0-debuginfo-1.13.4-9.1 libsss_nss_idmap-devel-1.13.4-9.1 libsss_nss_idmap0-1.13.4-9.1 libsss_nss_idmap0-debuginfo-1.13.4-9.1 libsss_sudo-1.13.4-9.1 libsss_sudo-debuginfo-1.13.4-9.1 python-ipa_hbac-1.13.4-9.1 python-ipa_hbac-debuginfo-1.13.4-9.1 python-sss_nss_idmap-1.13.4-9.1 python-sss_nss_idmap-debuginfo-1.13.4-9.1 python-sssd-config-1.13.4-9.1 python-sssd-config-debuginfo-1.13.4-9.1 sssd-1.13.4-9.1 sssd-ad-1.13.4-9.1 sssd-ad-debuginfo-1.13.4-9.1 sssd-debuginfo-1.13.4-9.1 sssd-debugsource-1.13.4-9.1 sssd-ipa-1.13.4-9.1 sssd-ipa-debuginfo-1.13.4-9.1 sssd-krb5-1.13.4-9.1 sssd-krb5-common-1.13.4-9.1 sssd-krb5-common-debuginfo-1.13.4-9.1 sssd-krb5-debuginfo-1.13.4-9.1 sssd-ldap-1.13.4-9.1 sssd-ldap-debuginfo-1.13.4-9.1 sssd-proxy-1.13.4-9.1 sssd-proxy-debuginfo-1.13.4-9.1 sssd-tools-1.13.4-9.1 sssd-tools-debuginfo-1.13.4-9.1 - openSUSE Leap 42.3 (x86_64): sssd-32bit-1.13.4-9.1 sssd-debuginfo-32bit-1.13.4-9.1 - openSUSE Leap 42.2 (i586 x86_64): libipa_hbac-devel-1.13.4-5.6.1 libipa_hbac0-1.13.4-5.6.1 libipa_hbac0-debuginfo-1.13.4-5.6.1 libsss_idmap-devel-1.13.4-5.6.1 libsss_idmap0-1.13.4-5.6.1 libsss_idmap0-debuginfo-1.13.4-5.6.1 libsss_nss_idmap-devel-1.13.4-5.6.1 libsss_nss_idmap0-1.13.4-5.6.1 libsss_nss_idmap0-debuginfo-1.13.4-5.6.1 libsss_sudo-1.13.4-5.6.1 libsss_sudo-debuginfo-1.13.4-5.6.1 python-ipa_hbac-1.13.4-5.6.1 python-ipa_hbac-debuginfo-1.13.4-5.6.1 python-sss_nss_idmap-1.13.4-5.6.1 python-sss_nss_idmap-debuginfo-1.13.4-5.6.1 python-sssd-config-1.13.4-5.6.1 python-sssd-config-debuginfo-1.13.4-5.6.1 sssd-1.13.4-5.6.1 sssd-ad-1.13.4-5.6.1 sssd-ad-debuginfo-1.13.4-5.6.1 sssd-debuginfo-1.13.4-5.6.1 sssd-debugsource-1.13.4-5.6.1 sssd-ipa-1.13.4-5.6.1 sssd-ipa-debuginfo-1.13.4-5.6.1 sssd-krb5-1.13.4-5.6.1 sssd-krb5-common-1.13.4-5.6.1 sssd-krb5-common-debuginfo-1.13.4-5.6.1 sssd-krb5-debuginfo-1.13.4-5.6.1 sssd-ldap-1.13.4-5.6.1 sssd-ldap-debuginfo-1.13.4-5.6.1 sssd-proxy-1.13.4-5.6.1 sssd-proxy-debuginfo-1.13.4-5.6.1 sssd-tools-1.13.4-5.6.1 sssd-tools-debuginfo-1.13.4-5.6.1 - openSUSE Leap 42.2 (x86_64): sssd-32bit-1.13.4-5.6.1 sssd-debuginfo-32bit-1.13.4-5.6.1 References: https://www.suse.com/security/cve/CVE-2017-12173.html https://bugzilla.suse.com/1039567 https://bugzilla.suse.com/1055123 https://bugzilla.suse.com/1061832

1 0

openSUSE-SU-2017:2941-1: important: Security update for qemu
by opensuse-security＠opensuse.org 07 Nov '17

07 Nov '17

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2941-1 Rating: important References: #1043176 #1043808 #1046636 #1047674 #1048902 #1049381 #1054724 #1056334 #1057378 #1057585 #1057966 #1059369 #1062069 #1062942 #1063122 #997358 Cross-References: CVE-2017-10664 CVE-2017-10806 CVE-2017-10911 CVE-2017-11334 CVE-2017-11434 CVE-2017-12809 CVE-2017-13672 CVE-2017-14167 CVE-2017-15038 CVE-2017-15268 CVE-2017-15289 CVE-2017-9524 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves 12 vulnerabilities and has four fixes is now available. Description: This update for qemu fixes several issues. These security issues were fixed: - CVE-2017-15268: Qemu allowed remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c (bsc#1062942). - CVE-2017-9524: The qemu-nbd server when built with the Network Block Device (NBD) Server support allowed remote attackers to cause a denial of service (segmentation fault and server crash) by leveraging failure to ensure that all initialization occurs talking to a client in the nbd_negotiate function (bsc#1043808). - CVE-2017-15289: The mode4and5 write functions allowed local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation (bsc#1063122) - CVE-2017-15038: Race condition in the v9fs_xattrwalk function local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes (bsc#1062069) - CVE-2017-10911: The make_response function in the Linux kernel allowed guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interface response structures (bsc#1057378) - CVE-2017-12809: The IDE disk and CD/DVD-ROM Emulator support allowed local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by flushing an empty CDROM device drive (bsc#1054724) - CVE-2017-10664: qemu-nbd did not ignore SIGPIPE, which allowed remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt (bsc#1046636) - CVE-2017-10806: Stack-based buffer overflow allowed local guest OS users to cause a denial of service (QEMU process crash) via vectors related to logging debug messages (bsc#1047674) - CVE-2017-14167: Integer overflow in the load_multiboot function allowed local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, which trigger an out-of-bounds write (bsc#1057585) - CVE-2017-11434: The dhcp_decode function in slirp/bootp.c allowed local guest OS users to cause a denial of service (out-of-bounds read) via a crafted DHCP options string (bsc#1049381) - CVE-2017-11334: The address_space_write_continue function allowed local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area (bsc#1048902) - CVE-2017-13672: The VGA display emulator support allowed local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update (bsc#1056334) These non-security issues were fixed: - Fixed not being able to build from rpm sources due to undefined macro (bsc#1057966) - Fixed wrong permissions for kvm_stat.1 file - Fixed KVM lun resize not working as expected on SLES12 SP2 HV (bsc#1043176) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1249=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): qemu-2.6.2-31.9.1 qemu-arm-2.6.2-31.9.1 qemu-arm-debuginfo-2.6.2-31.9.1 qemu-block-curl-2.6.2-31.9.1 qemu-block-curl-debuginfo-2.6.2-31.9.1 qemu-block-dmg-2.6.2-31.9.1 qemu-block-dmg-debuginfo-2.6.2-31.9.1 qemu-block-iscsi-2.6.2-31.9.1 qemu-block-iscsi-debuginfo-2.6.2-31.9.1 qemu-block-ssh-2.6.2-31.9.1 qemu-block-ssh-debuginfo-2.6.2-31.9.1 qemu-debugsource-2.6.2-31.9.1 qemu-extra-2.6.2-31.9.1 qemu-extra-debuginfo-2.6.2-31.9.1 qemu-guest-agent-2.6.2-31.9.1 qemu-guest-agent-debuginfo-2.6.2-31.9.1 qemu-kvm-2.6.2-31.9.1 qemu-lang-2.6.2-31.9.1 qemu-linux-user-2.6.2-31.9.1 qemu-linux-user-debuginfo-2.6.2-31.9.1 qemu-linux-user-debugsource-2.6.2-31.9.1 qemu-ppc-2.6.2-31.9.1 qemu-ppc-debuginfo-2.6.2-31.9.1 qemu-s390-2.6.2-31.9.1 qemu-s390-debuginfo-2.6.2-31.9.1 qemu-testsuite-2.6.2-31.9.2 qemu-tools-2.6.2-31.9.1 qemu-tools-debuginfo-2.6.2-31.9.1 qemu-x86-2.6.2-31.9.1 qemu-x86-debuginfo-2.6.2-31.9.1 - openSUSE Leap 42.2 (noarch): qemu-ipxe-1.0.0-31.9.1 qemu-seabios-1.9.1-31.9.1 qemu-sgabios-8-31.9.1 qemu-vgabios-1.9.1-31.9.1 - openSUSE Leap 42.2 (x86_64): qemu-block-rbd-2.6.2-31.9.1 qemu-block-rbd-debuginfo-2.6.2-31.9.1 References: https://www.suse.com/security/cve/CVE-2017-10664.html https://www.suse.com/security/cve/CVE-2017-10806.html https://www.suse.com/security/cve/CVE-2017-10911.html https://www.suse.com/security/cve/CVE-2017-11334.html https://www.suse.com/security/cve/CVE-2017-11434.html https://www.suse.com/security/cve/CVE-2017-12809.html https://www.suse.com/security/cve/CVE-2017-13672.html https://www.suse.com/security/cve/CVE-2017-14167.html https://www.suse.com/security/cve/CVE-2017-15038.html https://www.suse.com/security/cve/CVE-2017-15268.html https://www.suse.com/security/cve/CVE-2017-15289.html https://www.suse.com/security/cve/CVE-2017-9524.html https://bugzilla.suse.com/1043176 https://bugzilla.suse.com/1043808 https://bugzilla.suse.com/1046636 https://bugzilla.suse.com/1047674 https://bugzilla.suse.com/1048902 https://bugzilla.suse.com/1049381 https://bugzilla.suse.com/1054724 https://bugzilla.suse.com/1056334 https://bugzilla.suse.com/1057378 https://bugzilla.suse.com/1057585 https://bugzilla.suse.com/1057966 https://bugzilla.suse.com/1059369 https://bugzilla.suse.com/1062069 https://bugzilla.suse.com/1062942 https://bugzilla.suse.com/1063122 https://bugzilla.suse.com/997358

1 0

openSUSE-SU-2017:2940-1: moderate: Security update for SuSEfirewall2
by opensuse-security＠opensuse.org 07 Nov '17

07 Nov '17

openSUSE Security Update: Security update for SuSEfirewall2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2940-1 Rating: moderate References: #1064127 Cross-References: CVE-2017-15638 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for SuSEfirewall2 fixes the following issues: - CVE-2017-15638: Fixed a security issue with too open implicit portmapper rules (bsc#1064127): A source net restriction for _rpc_ services was not taken into account for the implicitly added rules for port 111, making the portmap service accessible to everyone in the affected zone. This update was imported from the SUSE:SLE-12:Update and SUSE:SLE-12-SP3:Update update projects. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1246=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1246=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): SuSEfirewall2-3.6.312.333-7.1 - openSUSE Leap 42.2 (noarch): SuSEfirewall2-3.6.312-5.9.1 References: https://www.suse.com/security/cve/CVE-2017-15638.html https://bugzilla.suse.com/1064127

1 0

openSUSE-SU-2017:2939-1: moderate: Security update for libsass
by opensuse-security＠opensuse.org 07 Nov '17

07 Nov '17

openSUSE Security Update: Security update for libsass ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2939-1 Rating: moderate References: #1050148 #1050149 #1050150 #1050151 #1050380 Cross-References: CVE-2017-11554 CVE-2017-11555 CVE-2017-11556 CVE-2017-11605 CVE-2017-11608 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for libsass fixes the following DoS vulnerabilities: - CVE-2017-11554: Stack consumption vulnerability allowed remote DoS via crafted input (1050148) - CVE-2017-11555: Illegal address access in Eval::operator allowed remote DoS via crafted input (boo#1050149) - CVE-2017-11556: Stack consumption vulnerability allowed remote DoS via crafted input (boo#1050150) - CVE-2017-11605: Heap based buffer over-read allowed remote DoS via crafted input (boo#1050151) - CVE-2017-11608: Heap-based buffer over-read allowed remote DoS via crafted input (boo#1050380) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1250=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1250=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libsass-3_3_2-0-3.3.2-5.1 libsass-3_3_2-0-debuginfo-3.3.2-5.1 libsass-debugsource-3.3.2-5.1 libsass-devel-3.3.2-5.1 - openSUSE Leap 42.2 (i586 x86_64): libsass-3_3_2-0-3.3.2-2.3.1 libsass-3_3_2-0-debuginfo-3.3.2-2.3.1 libsass-debugsource-3.3.2-2.3.1 libsass-devel-3.3.2-2.3.1 References: https://www.suse.com/security/cve/CVE-2017-11554.html https://www.suse.com/security/cve/CVE-2017-11555.html https://www.suse.com/security/cve/CVE-2017-11556.html https://www.suse.com/security/cve/CVE-2017-11605.html https://www.suse.com/security/cve/CVE-2017-11608.html https://bugzilla.suse.com/1050148 https://bugzilla.suse.com/1050149 https://bugzilla.suse.com/1050150 https://bugzilla.suse.com/1050151 https://bugzilla.suse.com/1050380

1 0

openSUSE-SU-2017:2938-1: important: Security update for qemu
by opensuse-security＠opensuse.org 07 Nov '17

07 Nov '17

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2938-1 Rating: important References: #1054724 #1055587 #1056291 #1056334 #1057378 #1057585 #1057966 #1062069 #1062942 #1063122 Cross-References: CVE-2017-10911 CVE-2017-12809 CVE-2017-13672 CVE-2017-13711 CVE-2017-14167 CVE-2017-15038 CVE-2017-15268 CVE-2017-15289 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has two fixes is now available. Description: This update for qemu to version 2.9.1 fixes several issues. It also announces that the qed storage format will be no longer supported in Leap 15.0. These security issues were fixed: - CVE-2017-15268: Qemu allowed remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c (bsc#1062942) - CVE-2017-15289: The mode4and5 write functions allowed local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation (bsc#1063122) - CVE-2017-15038: Race condition in the v9fs_xattrwalk function local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes (bsc#1062069) - CVE-2017-10911: The make_response function in the Linux kernel allowed guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interface response structures (bsc#1057378) - CVE-2017-12809: The IDE disk and CD/DVD-ROM Emulator support allowed local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by flushing an empty CDROM device drive (bsc#1054724) - CVE-2017-14167: Integer overflow in the load_multiboot function allowed local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, which trigger an out-of-bounds write (bsc#1057585) - CVE-2017-13672: The VGA display emulator support allowed local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update (bsc#1056334) - CVE-2017-13711: Use-after-free vulnerability allowed attackers to cause a denial of service (QEMU instance crash) by leveraging failure to properly clear ifq_so from pending packets (bsc#1056291). These non-security issues were fixed: - Fixed not being able to build from rpm sources due to undefined macro (bsc#1057966) - Fiedx package build failure against new glibc (bsc#1055587) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1248=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): qemu-linux-user-2.9.1-35.1 qemu-linux-user-debuginfo-2.9.1-35.1 qemu-linux-user-debugsource-2.9.1-35.1 - openSUSE Leap 42.3 (x86_64): qemu-2.9.1-35.1 qemu-arm-2.9.1-35.1 qemu-arm-debuginfo-2.9.1-35.1 qemu-block-curl-2.9.1-35.1 qemu-block-curl-debuginfo-2.9.1-35.1 qemu-block-dmg-2.9.1-35.1 qemu-block-dmg-debuginfo-2.9.1-35.1 qemu-block-iscsi-2.9.1-35.1 qemu-block-iscsi-debuginfo-2.9.1-35.1 qemu-block-rbd-2.9.1-35.1 qemu-block-rbd-debuginfo-2.9.1-35.1 qemu-block-ssh-2.9.1-35.1 qemu-block-ssh-debuginfo-2.9.1-35.1 qemu-debugsource-2.9.1-35.1 qemu-extra-2.9.1-35.1 qemu-extra-debuginfo-2.9.1-35.1 qemu-guest-agent-2.9.1-35.1 qemu-guest-agent-debuginfo-2.9.1-35.1 qemu-ksm-2.9.1-35.1 qemu-kvm-2.9.1-35.1 qemu-lang-2.9.1-35.1 qemu-ppc-2.9.1-35.1 qemu-ppc-debuginfo-2.9.1-35.1 qemu-s390-2.9.1-35.1 qemu-s390-debuginfo-2.9.1-35.1 qemu-testsuite-2.9.1-35.1 qemu-tools-2.9.1-35.1 qemu-tools-debuginfo-2.9.1-35.1 qemu-x86-2.9.1-35.1 qemu-x86-debuginfo-2.9.1-35.1 - openSUSE Leap 42.3 (noarch): qemu-ipxe-1.0.0-35.1 qemu-seabios-1.10.2-35.1 qemu-sgabios-8-35.1 qemu-vgabios-1.10.2-35.1 References: https://www.suse.com/security/cve/CVE-2017-10911.html https://www.suse.com/security/cve/CVE-2017-12809.html https://www.suse.com/security/cve/CVE-2017-13672.html https://www.suse.com/security/cve/CVE-2017-13711.html https://www.suse.com/security/cve/CVE-2017-14167.html https://www.suse.com/security/cve/CVE-2017-15038.html https://www.suse.com/security/cve/CVE-2017-15268.html https://www.suse.com/security/cve/CVE-2017-15289.html https://bugzilla.suse.com/1054724 https://bugzilla.suse.com/1055587 https://bugzilla.suse.com/1056291 https://bugzilla.suse.com/1056334 https://bugzilla.suse.com/1057378 https://bugzilla.suse.com/1057585 https://bugzilla.suse.com/1057966 https://bugzilla.suse.com/1062069 https://bugzilla.suse.com/1062942 https://bugzilla.suse.com/1063122

1 0

openSUSE-RU-2017:2934-1: moderate: Recommended update for singularity
by maintenance＠opensuse.org 06 Nov '17

06 Nov '17

openSUSE Recommended Update: Recommended update for singularity ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2934-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for singularity fixes the following issues: - Recent changes to the Docker registry RESTful API broke compatibility with Singularity - Upgrade to version 2.3.2, which also includes a number of other minor fixes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1244=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libsingularity1-2.3.2-5.1 singularity-2.3.2-5.1 singularity-devel-2.3.2-5.1 References:

1 0

openSUSE-RU-2017:2930-1: Recommended update for gnome-keyring, libsecret
by maintenance＠opensuse.org 05 Nov '17

05 Nov '17

openSUSE Recommended Update: Recommended update for gnome-keyring, libsecret ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2930-1 Rating: low References: #1043861 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-keyring and libsecret provides the following fix: - Ensure that generated secret occupies the same number of bytes as prime. Eliminates random errors while libsecret tries to communicate with gnome-keyring. (bsc#1043861) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1242=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1242=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): gnome-keyring-3.20.0-7.1 gnome-keyring-debuginfo-3.20.0-7.1 gnome-keyring-debugsource-3.20.0-7.1 gnome-keyring-pam-3.20.0-7.1 gnome-keyring-pam-debuginfo-3.20.0-7.1 libgck-modules-gnome-keyring-3.20.0-7.1 libgck-modules-gnome-keyring-debuginfo-3.20.0-7.1 libsecret-1-0-0.18.5-6.1 libsecret-1-0-debuginfo-0.18.5-6.1 libsecret-debugsource-0.18.5-6.1 libsecret-devel-0.18.5-6.1 libsecret-tools-0.18.5-6.1 libsecret-tools-debuginfo-0.18.5-6.1 typelib-1_0-Secret-1-0.18.5-6.1 - openSUSE Leap 42.3 (noarch): gnome-keyring-lang-3.20.0-7.1 libsecret-lang-0.18.5-6.1 - openSUSE Leap 42.3 (x86_64): gnome-keyring-32bit-3.20.0-7.1 gnome-keyring-debuginfo-32bit-3.20.0-7.1 gnome-keyring-pam-32bit-3.20.0-7.1 gnome-keyring-pam-debuginfo-32bit-3.20.0-7.1 libsecret-1-0-32bit-0.18.5-6.1 libsecret-1-0-debuginfo-32bit-0.18.5-6.1 - openSUSE Leap 42.2 (i586 x86_64): gnome-keyring-3.20.0-4.3.1 gnome-keyring-debuginfo-3.20.0-4.3.1 gnome-keyring-debugsource-3.20.0-4.3.1 gnome-keyring-pam-3.20.0-4.3.1 gnome-keyring-pam-debuginfo-3.20.0-4.3.1 libgck-modules-gnome-keyring-3.20.0-4.3.1 libgck-modules-gnome-keyring-debuginfo-3.20.0-4.3.1 libsecret-1-0-0.18.5-3.3.1 libsecret-1-0-debuginfo-0.18.5-3.3.1 libsecret-debugsource-0.18.5-3.3.1 libsecret-devel-0.18.5-3.3.1 libsecret-tools-0.18.5-3.3.1 libsecret-tools-debuginfo-0.18.5-3.3.1 typelib-1_0-Secret-1-0.18.5-3.3.1 - openSUSE Leap 42.2 (noarch): gnome-keyring-lang-3.20.0-4.3.1 libsecret-lang-0.18.5-3.3.1 - openSUSE Leap 42.2 (x86_64): gnome-keyring-32bit-3.20.0-4.3.1 gnome-keyring-debuginfo-32bit-3.20.0-4.3.1 gnome-keyring-pam-32bit-3.20.0-4.3.1 gnome-keyring-pam-debuginfo-32bit-3.20.0-4.3.1 libsecret-1-0-32bit-0.18.5-3.3.1 libsecret-1-0-debuginfo-32bit-0.18.5-3.3.1 References: https://bugzilla.suse.com/1043861

1 0

openSUSE-RU-2017:2929-1: moderate: Recommended update of libktorrent
by maintenance＠opensuse.org 05 Nov '17

05 Nov '17

openSUSE Recommended Update: Recommended update of libktorrent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2929-1 Rating: moderate References: #1065559 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libktorrent fixes a crash in ktorrent that would occur when using Webseeds Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1243=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): libktorrent6-lang-2.0.1-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): libktorrent-debugsource-2.0.1-5.1 libktorrent-devel-2.0.1-5.1 libktorrent6-2.0.1-5.1 libktorrent6-debuginfo-2.0.1-5.1 References: https://bugzilla.suse.com/1065559

1 0

openSUSE-RU-2017:2928-1: moderate: Recommended update of libktorrent
by maintenance＠opensuse.org 05 Nov '17

05 Nov '17

openSUSE Recommended Update: Recommended update of libktorrent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2928-1 Rating: moderate References: #1065559 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libktorrent fixes a crash in ktorrent that would occur when using Webseeds Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1243=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1243=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libktorrent-debugsource-2.0.1-5.1 libktorrent-devel-2.0.1-5.1 libktorrent6-2.0.1-5.1 libktorrent6-debuginfo-2.0.1-5.1 - openSUSE Leap 42.3 (noarch): libktorrent6-lang-2.0.1-5.1 - openSUSE Leap 42.2 (i586 x86_64): libktorrent-debugsource-2.0.1-2.3.1 libktorrent-devel-2.0.1-2.3.1 libktorrent6-2.0.1-2.3.1 libktorrent6-debuginfo-2.0.1-2.3.1 - openSUSE Leap 42.2 (noarch): libktorrent6-lang-2.0.1-2.3.1 References: https://bugzilla.suse.com/1065559

1 0