December 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:3209-1: Recommended update for openvswitch
by maintenance＠opensuse.org 03 Dec '17

03 Dec '17

openSUSE Recommended Update: Recommended update for openvswitch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3209-1 Rating: low References: #1002734 #1009682 #1050896 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for openvswitch provides the following fixes: - Strip off encapsulation offload indications when packets are decapsulated. (bsc#1009682) - Do not restart the openvswitch service after a package update. Restarting it may interrupt connectivity so let the user decide when is the best time for such action. (bsc#1002734) - Do not stop the systemd service on package removals as this can break networking. Moreover, this allows easier updates to more recent openvswitch releases without connectivity problems. (bsc#1050896) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1338=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): openvswitch-2.5.1-2.3.1 openvswitch-debuginfo-2.5.1-2.3.1 openvswitch-debugsource-2.5.1-2.3.1 openvswitch-devel-2.5.1-2.3.1 openvswitch-dpdk-2.5.1-2.3.1 openvswitch-dpdk-debuginfo-2.5.1-2.3.1 openvswitch-dpdk-debugsource-2.5.1-2.3.1 openvswitch-dpdk-devel-2.5.1-2.3.1 openvswitch-dpdk-ovn-2.5.1-2.3.1 openvswitch-dpdk-ovn-debuginfo-2.5.1-2.3.1 openvswitch-dpdk-pki-2.5.1-2.3.1 openvswitch-dpdk-switch-2.5.1-2.3.1 openvswitch-dpdk-switch-debuginfo-2.5.1-2.3.1 openvswitch-dpdk-test-2.5.1-2.3.1 openvswitch-dpdk-test-debuginfo-2.5.1-2.3.1 openvswitch-dpdk-vtep-2.5.1-2.3.1 openvswitch-dpdk-vtep-debuginfo-2.5.1-2.3.1 openvswitch-ovn-2.5.1-2.3.1 openvswitch-ovn-debuginfo-2.5.1-2.3.1 openvswitch-pki-2.5.1-2.3.1 openvswitch-switch-2.5.1-2.3.1 openvswitch-switch-debuginfo-2.5.1-2.3.1 openvswitch-test-2.5.1-2.3.1 openvswitch-test-debuginfo-2.5.1-2.3.1 openvswitch-vtep-2.5.1-2.3.1 openvswitch-vtep-debuginfo-2.5.1-2.3.1 python-openvswitch-2.5.1-2.3.1 python-openvswitch-test-2.5.1-2.3.1 References: https://bugzilla.suse.com/1002734 https://bugzilla.suse.com/1009682 https://bugzilla.suse.com/1050896

1 0

openSUSE-RU-2017:3208-1: Recommended update for libtool
by maintenance＠opensuse.org 02 Dec '17

02 Dec '17

openSUSE Recommended Update: Recommended update for libtool ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3208-1 Rating: low References: #1056381 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libtool provides the following fix: - Add missing dependencies and provides to baselibs.conf to make sure libltdl libraries are properly installed. (bsc#1056381) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1329=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1329=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libltdl7-2.4.2-22.1 libltdl7-debuginfo-2.4.2-22.1 libtool-2.4.2-22.1 libtool-debugsource-2.4.2-22.1 - openSUSE Leap 42.3 (x86_64): libltdl7-32bit-2.4.2-22.1 libltdl7-debuginfo-32bit-2.4.2-22.1 libtool-32bit-2.4.2-22.1 - openSUSE Leap 42.2 (i586 x86_64): libltdl7-2.4.2-18.6.1 libltdl7-debuginfo-2.4.2-18.6.1 libtool-2.4.2-18.6.1 libtool-debugsource-2.4.2-18.6.1 - openSUSE Leap 42.2 (x86_64): libltdl7-32bit-2.4.2-18.6.1 libltdl7-debuginfo-32bit-2.4.2-18.6.1 libtool-32bit-2.4.2-18.6.1 References: https://bugzilla.suse.com/1056381

1 0

openSUSE-RU-2017:3207-1: moderate: Recommended update for open-vm-tools
by maintenance＠opensuse.org 02 Dec '17

02 Dec '17

openSUSE Recommended Update: Recommended update for open-vm-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3207-1 Rating: moderate References: #1051627 #1051977 #1052129 #1054800 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update provides open-vm-tools 10.1.10, bringing the following fixes and enhancements: - Fix setting the screen resolution under Wayland environments. (bsc#1054800) - Map certain PAM errors to VGAUTH_E_AUTHENTICATION_DENIED. - Fix timesync state to be uncalibrated when adjustment is larger than 60ms. - Fix a crash when the VSS provider is not installed. - Add support for the new copy and paste selection target named "text/rtf". - Previously Common Agent Framework (CAF) builds were linking against specific versions of PCRE and libiconv. That restriction has been removed. - Reverts a fix that was causing intermittent hangs during soft reboots of some Linux VMs. - Fix a problem that was causing VMs to freeze during snapshots. (bsc#1051627) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1334=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): libvmtools-devel-10.1.10-4.1 libvmtools0-10.1.10-4.1 libvmtools0-debuginfo-10.1.10-4.1 open-vm-tools-10.1.10-4.1 open-vm-tools-debuginfo-10.1.10-4.1 open-vm-tools-debugsource-10.1.10-4.1 open-vm-tools-desktop-10.1.10-4.1 open-vm-tools-desktop-debuginfo-10.1.10-4.1 References: https://bugzilla.suse.com/1051627 https://bugzilla.suse.com/1051977 https://bugzilla.suse.com/1052129 https://bugzilla.suse.com/1054800

1 0

openSUSE-RU-2017:3206-1: Recommended update for zip
by maintenance＠opensuse.org 02 Dec '17

02 Dec '17

openSUSE Recommended Update: Recommended update for zip ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3206-1 Rating: low References: #1068346 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for zip provides the following fix: - Fix memory leaks when appending files (bsc#1068346) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1331=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1331=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): zip-3.0-22.1 zip-debuginfo-3.0-22.1 zip-debugsource-3.0-22.1 - openSUSE Leap 42.2 (i586 x86_64): zip-3.0-19.3.1 zip-debuginfo-3.0-19.3.1 zip-debugsource-3.0-19.3.1 References: https://bugzilla.suse.com/1068346

1 0

openSUSE-RU-2017:3205-1: Recommended update for cryptctl
by maintenance＠opensuse.org 02 Dec '17

02 Dec '17

openSUSE Recommended Update: Recommended update for cryptctl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3205-1 Rating: low References: #1056082 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update of cryptctl to version 2.3 provides the following enhancement: - Allow system administrators to issue mount/umount commands to client computers via key server. (bsc#1056082, fate#322292) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1335=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): cryptctl-2.3-3.1 cryptctl-debuginfo-2.3-3.1 cryptctl-debugsource-2.3-3.1 References: https://bugzilla.suse.com/1056082

1 0

openSUSE-RU-2017:3204-1: moderate: Recommended update for open-vm-tools
by maintenance＠opensuse.org 02 Dec '17

02 Dec '17

openSUSE Recommended Update: Recommended update for open-vm-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3204-1 Rating: moderate References: #1027987 #1028866 #1031968 #1051627 #1051977 #1052129 #1054800 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update provides open-vm-tools 10.1.10, bringing the following fixes and enhancements: - Fix setting the screen resolution under Wayland environments. (bsc#1054800) - Map certain PAM errors to VGAUTH_E_AUTHENTICATION_DENIED. - Fix timesync state to be uncalibrated when adjustment is larger than 60ms. - Fix a crash when the VSS provider is not installed. - Add support for the new copy and paste selection target named "text/rtf". - Previously Common Agent Framework (CAF) builds were linking against specific versions of PCRE and libiconv. That restriction has been removed. - Reverts a fix that was causing intermittent hangs during soft reboots of some Linux VMs. - Fix a problem that was causing VMs to freeze during snapshots. (bsc#1051627) - Fix unowned /var/lib/vmware directory, which was causing the vgauthd service initialization to fail. (bsc#1028866) - Fix a package dependency for open-vm-tools on libvmtools0. (bsc#1031968) - Fix a build failure caused by an upstream glibc change requiring the explicit inclusion of sys/sysmacros.h - Fix reporting authentication failures. - Make it possible to backup virtual machines with active Docker containers. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1333=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): libvmtools-devel-10.1.10-2.6.1 libvmtools0-10.1.10-2.6.1 libvmtools0-debuginfo-10.1.10-2.6.1 open-vm-tools-10.1.10-2.6.1 open-vm-tools-debuginfo-10.1.10-2.6.1 open-vm-tools-debugsource-10.1.10-2.6.1 open-vm-tools-desktop-10.1.10-2.6.1 open-vm-tools-desktop-debuginfo-10.1.10-2.6.1 References: https://bugzilla.suse.com/1027987 https://bugzilla.suse.com/1028866 https://bugzilla.suse.com/1031968 https://bugzilla.suse.com/1051627 https://bugzilla.suse.com/1051977 https://bugzilla.suse.com/1052129 https://bugzilla.suse.com/1054800

1 0

openSUSE-SU-2017:3203-1: moderate: Security update for tor
by opensuse-security＠opensuse.org 02 Dec '17

02 Dec '17

openSUSE Security Update: Security update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:3203-1 Rating: moderate References: #1070849 Cross-References: CVE-2017-8819 CVE-2017-8820 CVE-2017-8821 CVE-2017-8822 CVE-2017-8823 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for tor fixes vulnerabilities that allowed some traffic confirmation, DoS and other attacks (bsc#1070849): - CVE-2017-8819: Replay-cache ineffective for v2 onion services - CVE-2017-8820: Remote DoS attack against directory authorities - CVE-2017-8821: An attacker can make Tor ask for a password - CVE-2017-8822: Relays can pick themselves in a circuit path - CVE-2017-8823: Use-after-free in onion service v2 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1336=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1336=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): tor-0.3.0.13-9.1 tor-debuginfo-0.3.0.13-9.1 tor-debugsource-0.3.0.13-9.1 - openSUSE Leap 42.2 (i586 x86_64): tor-0.2.9.14-8.12.1 tor-debuginfo-0.2.9.14-8.12.1 tor-debugsource-0.2.9.14-8.12.1 References: https://www.suse.com/security/cve/CVE-2017-8819.html https://www.suse.com/security/cve/CVE-2017-8820.html https://www.suse.com/security/cve/CVE-2017-8821.html https://www.suse.com/security/cve/CVE-2017-8822.html https://www.suse.com/security/cve/CVE-2017-8823.html https://bugzilla.suse.com/1070849

1 0

openSUSE-SU-2017:3202-1: Security update for wireshark
by opensuse-security＠opensuse.org 02 Dec '17

02 Dec '17

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:3202-1 Rating: low References: #1070727 Cross-References: CVE-2017-17083 CVE-2017-17084 CVE-2017-17085 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for wireshark to version 2.2.11 fixes the following issues: Minor vulnerabilities that could be used to trigger dissector crashes by making Wireshark read specially crafted packages from the network or capture files (boo#1070727): - CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47) - CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48) - CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49) This update also fixes further bugs and updates protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-2.2.11.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1337=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1337=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): wireshark-2.2.11-28.1 wireshark-debuginfo-2.2.11-28.1 wireshark-debugsource-2.2.11-28.1 wireshark-devel-2.2.11-28.1 wireshark-ui-gtk-2.2.11-28.1 wireshark-ui-gtk-debuginfo-2.2.11-28.1 wireshark-ui-qt-2.2.11-28.1 wireshark-ui-qt-debuginfo-2.2.11-28.1 - openSUSE Leap 42.2 (x86_64): wireshark-2.2.11-14.20.1 wireshark-debuginfo-2.2.11-14.20.1 wireshark-debugsource-2.2.11-14.20.1 wireshark-devel-2.2.11-14.20.1 wireshark-ui-gtk-2.2.11-14.20.1 wireshark-ui-gtk-debuginfo-2.2.11-14.20.1 wireshark-ui-qt-2.2.11-14.20.1 wireshark-ui-qt-debuginfo-2.2.11-14.20.1 References: https://www.suse.com/security/cve/CVE-2017-17083.html https://www.suse.com/security/cve/CVE-2017-17084.html https://www.suse.com/security/cve/CVE-2017-17085.html https://bugzilla.suse.com/1070727

1 0

openSUSE-SU-2017:3201-1: moderate: Security update for tor
by opensuse-security＠opensuse.org 02 Dec '17

02 Dec '17

openSUSE Security Update: Security update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:3201-1 Rating: moderate References: #1070849 Cross-References: CVE-2017-8819 CVE-2017-8820 CVE-2017-8821 CVE-2017-8822 CVE-2017-8823 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for tor fixes vulnerabilities that allowed some traffic confirmation, DoS and other attacks (bsc#1070849): - CVE-2017-8819: Replay-cache ineffective for v2 onion services - CVE-2017-8820: Remote DoS attack against directory authorities - CVE-2017-8821: An attacker can make Tor ask for a password - CVE-2017-8822: Relays can pick themselves in a circuit path - CVE-2017-8823: Use-after-free in onion service v2 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1336=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): tor-0.3.1.9-8.1 tor-debuginfo-0.3.1.9-8.1 tor-debugsource-0.3.1.9-8.1 References: https://www.suse.com/security/cve/CVE-2017-8819.html https://www.suse.com/security/cve/CVE-2017-8820.html https://www.suse.com/security/cve/CVE-2017-8821.html https://www.suse.com/security/cve/CVE-2017-8822.html https://www.suse.com/security/cve/CVE-2017-8823.html https://bugzilla.suse.com/1070849

1 0

openSUSE-RU-2017:3200-1: Recommended update for coreutils
by maintenance＠opensuse.org 02 Dec '17

02 Dec '17

openSUSE Recommended Update: Recommended update for coreutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3200-1 Rating: low References: #1026567 #1043059 #965780 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for coreutils provides the following fixes: - Fix df(1) to no longer interact with excluded file system types, so for example specifying -x nfs no longer hangs with problematic nfs mounts. (bsc#1026567) - Ensure df -l no longer interacts with dummy file system types, so for example no longer hangs with problematic NFS mounted via system.automount(5). (bsc#1043059) - Significantly speed up df(1) for huge mount lists. (bsc#965780) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1328=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1328=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): coreutils-8.25-5.1 coreutils-debuginfo-8.25-5.1 coreutils-debugsource-8.25-5.1 - openSUSE Leap 42.3 (noarch): coreutils-lang-8.25-5.1 - openSUSE Leap 42.3 (x86_64): coreutils-testsuite-8.25-5.1 - openSUSE Leap 42.2 (i586 x86_64): coreutils-8.25-2.3.1 coreutils-debuginfo-8.25-2.3.1 coreutils-debugsource-8.25-2.3.1 - openSUSE Leap 42.2 (noarch): coreutils-lang-8.25-2.3.1 - openSUSE Leap 42.2 (x86_64): coreutils-testsuite-8.25-2.3.1 References: https://bugzilla.suse.com/1026567 https://bugzilla.suse.com/1043059 https://bugzilla.suse.com/965780

1 0