February 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:0451-1: Recommended update for geany, geany-plugins
by maintenance＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Recommended Update: Recommended update for geany, geany-plugins ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0451-1 Rating: low References: #1022222 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for geany, geany-plugins fixes the following issues: - boo#1022222: The integrated terminal was not available In addition, the Geany IDE was updated to 1.29, with the following upstream changes: - UI fixes related to GTK - Fix focusing the message window when the Terminal tab is active - Add support for keeping the cursor a number of lines from the edges to always show some context - Allow to configure keybinding for "Delete to beginning of line" - Performance improvements with many duplicate symbols - Allow to configure the error indicator color - Fix highlighting of Haxe preprocessor - Add `.exp` extension to TCL The following changes are included in geany-plugins: - Rename plugin GeanyLipsum to Lipsum - Addons: Add a function to deselect marked words with one click - Commander: Add keybindings for triggering a particular filter type - Git-Changebar: Fix an issue access the git repository in combination with libgit2 0.24.2 - Git-Changebar: Fix an off-by-one issue in tooltip hunk width calculation cropping 1px on the right - Fix handling of documents starting with a BOM - Spellcheck: Strip single quotes from words' beginning and end - Spellcheck: Fix a memory leak on duplicate dictionaries - Treebrowser: Fix a typo in configuration parsing causing option for "open new files" have not being save/restored correctly Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-240=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): geany-1.29-3.1 geany-debuginfo-1.29-3.1 geany-debugsource-1.29-3.1 geany-devel-1.29-3.1 geany-doc-1.29-3.1 geany-plugins-1.29-3.2 geany-plugins-debuginfo-1.29-3.2 geany-plugins-debugsource-1.29-3.2 libgeany0-1.29-3.1 libgeany0-debuginfo-1.29-3.1 - openSUSE Leap 42.2 (noarch): geany-lang-1.29-3.1 geany-plugins-lang-1.29-3.2 References: https://bugzilla.suse.com/1022222

1 0

openSUSE-RU-2017:0450-1: moderate: Recommended update for kiconthemes
by maintenance＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Recommended Update: Recommended update for kiconthemes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0450-1 Rating: moderate References: #1000519 #1006651 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for kiconthemes fixes the following issues: - boo#1006651: icons would appear blurry with with non-integer scale factors - boo#1000519: applications would not detect a change in the configured icon theme while running Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-238=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): kiconthemes-debugsource-5.26.0-3.1 kiconthemes-devel-5.26.0-3.1 kiconthemes-devel-debuginfo-5.26.0-3.1 libKF5IconThemes5-5.26.0-3.1 libKF5IconThemes5-debuginfo-5.26.0-3.1 - openSUSE Leap 42.2 (x86_64): kiconthemes-devel-32bit-5.26.0-3.1 kiconthemes-devel-debuginfo-32bit-5.26.0-3.1 libKF5IconThemes5-32bit-5.26.0-3.1 libKF5IconThemes5-debuginfo-32bit-5.26.0-3.1 - openSUSE Leap 42.2 (noarch): libKF5IconThemes5-lang-5.26.0-3.1 References: https://bugzilla.suse.com/1000519 https://bugzilla.suse.com/1006651

1 0

openSUSE-RU-2017:0449-1: moderate: Recommended update for jsoncpp
by maintenance＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Recommended Update: Recommended update for jsoncpp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0449-1 Rating: moderate References: #1015761 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update to jsoncpp fixes the following issues: - boo#1015761: pkgconf script was broken Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-242=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): jsoncpp-debugsource-1.7.4-3.1 jsoncpp-devel-1.7.4-3.1 libjsoncpp1-1.7.4-3.1 libjsoncpp1-debuginfo-1.7.4-3.1 References: https://bugzilla.suse.com/1015761

1 0

openSUSE-RU-2017:0448-1: Recommended update for apparmor
by maintenance＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Recommended Update: Recommended update for apparmor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0448-1 Rating: low References: #1000201 #1009964 #1014463 #1015249 #1016259 #1017260 #980081 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update provides apparmor 2.10.2 and brings many fixes and improvements: The AppArmor 2.10.2 maintenance release includes lots of bugfixes and profile updates, see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details. (including fixes for boo#1000201, boo#1009964 and boo1014463) Additional fixes: - Add missing apparmor.service. (boo#1017260) Note: If you manually disabled AppArmor, this change will re-enable it. - Change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/. (boo#1015249, boo#980081, bsc#1016259) - Add dependency on var-lib.mount to apparmor.service as safety net. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-237=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_apparmor-2.10.2-10.1 apache2-mod_apparmor-debuginfo-2.10.2-10.1 apparmor-debugsource-2.10.2-10.1 apparmor-parser-2.10.2-10.1 apparmor-parser-debuginfo-2.10.2-10.1 libapparmor-devel-2.10.2-10.1 libapparmor1-2.10.2-10.1 libapparmor1-debuginfo-2.10.2-10.1 pam_apparmor-2.10.2-10.1 pam_apparmor-debuginfo-2.10.2-10.1 perl-apparmor-2.10.2-10.1 perl-apparmor-debuginfo-2.10.2-10.1 python3-apparmor-2.10.2-10.1 python3-apparmor-debuginfo-2.10.2-10.1 ruby-apparmor-2.10.2-10.1 ruby-apparmor-debuginfo-2.10.2-10.1 - openSUSE Leap 42.2 (noarch): apparmor-abstractions-2.10.2-10.1 apparmor-docs-2.10.2-10.1 apparmor-parser-lang-2.10.2-10.1 apparmor-profiles-2.10.2-10.1 apparmor-utils-2.10.2-10.1 apparmor-utils-lang-2.10.2-10.1 - openSUSE Leap 42.2 (x86_64): libapparmor1-32bit-2.10.2-10.1 libapparmor1-debuginfo-32bit-2.10.2-10.1 pam_apparmor-32bit-2.10.2-10.1 pam_apparmor-debuginfo-32bit-2.10.2-10.1 References: https://bugzilla.suse.com/1000201 https://bugzilla.suse.com/1009964 https://bugzilla.suse.com/1014463 https://bugzilla.suse.com/1015249 https://bugzilla.suse.com/1016259 https://bugzilla.suse.com/1017260 https://bugzilla.suse.com/980081

1 0

openSUSE-SU-2017:0447-1: moderate: Security update for irssi
by opensuse-security＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Security Update: Security update for irssi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0447-1 Rating: moderate References: #1023637 #1023638 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: The IRC textmode client irssi was updated to version 1.0.1 to fix bugs and security issues. irssi 1.0.1: * Fix Perl compilation in object dir * Fix incorrect HELP SERVER example * Correct memory leak in /OP and /VOICE * Fix regression that broke second level completion * Correct missing NULL termination in perl_parse boo#1023638 * Sync broken mail.pl script * Prevent a memory leak during the processing of the SASL response boo#1023637 irssi 1.0.0: * irssiproxy can now forward all tags through a single port. * The kill buffer now remembers consecutive kills. New bindings were added: yank_next_cutbuffer and append_next_kill. * autolog_ignore_targets and activity_hide_targets learn a new syntax tag/* and * to ignore whole networks or everything. * hilight got a -matchcase flag to hilight case sensitively. * Display TLS connection information upon connect. You can disable this by setting tls_verbose_connect to FALSE * Certificate pinning for TLS certificates * /names and $[…] now uses utf8 string operations. * New setting completion_nicks_match_case * /channel /server /network now support modify subcommand. * New option sasl_disconnect_on_failure to disconnect when SASL log-in failed. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-241=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-241=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): irssi-1.0.1-12.1 irssi-debuginfo-1.0.1-12.1 irssi-debugsource-1.0.1-12.1 irssi-devel-1.0.1-12.1 - openSUSE Leap 42.1 (i586 x86_64): irssi-1.0.1-12.1 irssi-debuginfo-1.0.1-12.1 irssi-debugsource-1.0.1-12.1 irssi-devel-1.0.1-12.1 References: https://bugzilla.suse.com/1023637 https://bugzilla.suse.com/1023638

1 0

openSUSE-SU-2017:0446-1: moderate: Security update for libxml2
by opensuse-security＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0446-1 Rating: moderate References: #1005544 #1010675 #1013930 #1014873 #1017497 Cross-References: CVE-2016-4658 CVE-2016-9318 CVE-2016-9597 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: This update for libxml2 fixes the following issues: * CVE-2016-4658: use-after-free error could lead to crash [bsc#1005544] * Fix NULL dereference in xpointer.c when in recovery mode [bsc#1014873] * CVE-2016-9597: An XML document with many opening tags could have caused a overflow of the stack not detected by the recursion limits, allowing for DoS (bsc#1017497). For CVE-2016-9318 we decided not to ship a fix since it can break existing setups. Please take appropriate actions if you parse untrusted XML files and use the new -noxxe flag if possible (bnc#1010675, bnc#1013930). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-244=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libxml2-2-2.9.4-3.1 libxml2-2-debuginfo-2.9.4-3.1 libxml2-debugsource-2.9.4-3.1 libxml2-devel-2.9.4-3.1 libxml2-tools-2.9.4-3.1 libxml2-tools-debuginfo-2.9.4-3.1 python-libxml2-2.9.4-3.1 python-libxml2-debuginfo-2.9.4-3.1 python-libxml2-debugsource-2.9.4-3.1 - openSUSE Leap 42.2 (noarch): libxml2-doc-2.9.4-3.1 - openSUSE Leap 42.2 (x86_64): libxml2-2-32bit-2.9.4-3.1 libxml2-2-debuginfo-32bit-2.9.4-3.1 libxml2-devel-32bit-2.9.4-3.1 References: https://www.suse.com/security/cve/CVE-2016-4658.html https://www.suse.com/security/cve/CVE-2016-9318.html https://www.suse.com/security/cve/CVE-2016-9597.html https://bugzilla.suse.com/1005544 https://bugzilla.suse.com/1010675 https://bugzilla.suse.com/1013930 https://bugzilla.suse.com/1014873 https://bugzilla.suse.com/1017497

1 0

openSUSE-RU-2017:0445-1: Recommended update for patterns-openSUSE
by maintenance＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Recommended Update: Recommended update for patterns-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0445-1 Rating: low References: #1010202 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for patterns-openSUSE fixes the following issues: - Remove gsynaptics Recommends from XFCE and LXDE patterns. This drags xf86-input-synaptics and blocks the libinput usage as a consequence although we've already wanted to move to libinput. (boo#1010202) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-235=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): patterns-openSUSE-lxde_laptop-20150918-27.1 patterns-openSUSE-xfce_laptop-20150918-27.1 References: https://bugzilla.suse.com/1010202

1 0

openSUSE-SU-2017:0444-1: important: Security update for tigervnc
by opensuse-security＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Security Update: Security update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0444-1 Rating: important References: #1022432 #1023012 Cross-References: CVE-2016-10207 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for tigervnc fixes the following issues: This security issue was fixed: - CVE-2016-10207: Prevent crash caused by failed TLS connection (bnc#1023012) This non-security issue was fixed: * Fix random client disconnections (boo#1022432) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-243=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-243=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libXvnc-devel-1.6.0-11.1 libXvnc1-1.6.0-11.1 libXvnc1-debuginfo-1.6.0-11.1 tigervnc-1.6.0-11.1 tigervnc-debuginfo-1.6.0-11.1 tigervnc-debugsource-1.6.0-11.1 xorg-x11-Xvnc-1.6.0-11.1 xorg-x11-Xvnc-debuginfo-1.6.0-11.1 - openSUSE Leap 42.1 (i586 x86_64): tigervnc-1.5.0-32.1 tigervnc-debuginfo-1.5.0-32.1 tigervnc-debugsource-1.5.0-32.1 xorg-x11-Xvnc-1.5.0-32.1 xorg-x11-Xvnc-debuginfo-1.5.0-32.1 References: https://www.suse.com/security/cve/CVE-2016-10207.html https://bugzilla.suse.com/1022432 https://bugzilla.suse.com/1023012

1 0

openSUSE-RU-2017:0443-1: Recommended update for apparmor
by maintenance＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Recommended Update: Recommended update for apparmor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0443-1 Rating: low References: #1000201 #1009964 #1014463 #1015249 #1016259 #1017260 #980081 #980596 #987607 #990006 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update provides apparmor 2.10.2 and brings many fixes and improvements: The AppArmor 2.10.2 maintenance release includes lots of bugfixes and profile updates, see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details. (including fixes for boo#1000201, boo#1009964 and boo1014463) Additional fixes: - Add missing apparmor.service. (boo#1017260) Note: If you manually disabled AppArmor, this change will re-enable it. - Change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/. (boo#1015249, boo#980081, bsc#1016259) - Add dependency on var-lib.mount to apparmor.service as safety net. - Allow dac_override in winbindd profile and mr for /usr/lib*/lbd/*.so in samba abstractions. (boo#990006) - Fix python LibAppArmor import failures with swig > 3.0.8. (boo#987607) - Updated ping profile. (boo#980596) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-236=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): apache2-mod_apparmor-2.10.2-9.1 apache2-mod_apparmor-debuginfo-2.10.2-9.1 apparmor-debugsource-2.10.2-9.1 apparmor-parser-2.10.2-9.1 apparmor-parser-debuginfo-2.10.2-9.1 libapparmor-devel-2.10.2-9.1 libapparmor1-2.10.2-9.1 libapparmor1-debuginfo-2.10.2-9.1 pam_apparmor-2.10.2-9.1 pam_apparmor-debuginfo-2.10.2-9.1 perl-apparmor-2.10.2-9.1 perl-apparmor-debuginfo-2.10.2-9.1 python3-apparmor-2.10.2-9.1 python3-apparmor-debuginfo-2.10.2-9.1 ruby-apparmor-2.10.2-9.1 ruby-apparmor-debuginfo-2.10.2-9.1 - openSUSE Leap 42.1 (x86_64): libapparmor1-32bit-2.10.2-9.1 libapparmor1-debuginfo-32bit-2.10.2-9.1 pam_apparmor-32bit-2.10.2-9.1 pam_apparmor-debuginfo-32bit-2.10.2-9.1 - openSUSE Leap 42.1 (noarch): apparmor-abstractions-2.10.2-9.1 apparmor-docs-2.10.2-9.1 apparmor-parser-lang-2.10.2-9.1 apparmor-profiles-2.10.2-9.1 apparmor-utils-2.10.2-9.1 apparmor-utils-lang-2.10.2-9.1 References: https://bugzilla.suse.com/1000201 https://bugzilla.suse.com/1009964 https://bugzilla.suse.com/1014463 https://bugzilla.suse.com/1015249 https://bugzilla.suse.com/1016259 https://bugzilla.suse.com/1017260 https://bugzilla.suse.com/980081 https://bugzilla.suse.com/980596 https://bugzilla.suse.com/987607 https://bugzilla.suse.com/990006

1 0

openSUSE-RU-2017:0442-1: moderate: Recommended update for konsole
by maintenance＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Recommended Update: Recommended update for konsole ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0442-1 Rating: moderate References: #1018087 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update to konsole fixes some regressions in the parsing of command line arguments that caused compatibility issues with previous versions: - restore proper handling of the -e command line option (boo#1018087, kde#366793) - re-add the --nofork option for compatibility (kde#367672) It also removes some debug output that got introduced by mistake in the previous update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-239=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): konsole-16.08.2-6.1 konsole-debuginfo-16.08.2-6.1 konsole-debugsource-16.08.2-6.1 konsole-part-16.08.2-6.1 konsole-part-debuginfo-16.08.2-6.1 References: https://bugzilla.suse.com/1018087

1 0