February 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2017:0580-1: Security update for gstreamer
by opensuse-security＠opensuse.org 28 Feb '17

28 Feb '17

openSUSE Security Update: Security update for gstreamer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0580-1 Rating: low References: #1024051 Cross-References: CVE-2017-5838 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gstreamer fixes the following security issues: - A crafted AVI file could have caused an invalid memory read, possibly causing DoS or corruption (bsc#1024051, CVE-2017-5838) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-302=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gstreamer-1.4.5-5.1 gstreamer-debuginfo-1.4.5-5.1 gstreamer-debugsource-1.4.5-5.1 gstreamer-devel-1.4.5-5.1 gstreamer-doc-1.4.5-5.1 gstreamer-utils-1.4.5-5.1 gstreamer-utils-debuginfo-1.4.5-5.1 libgstreamer-1_0-0-1.4.5-5.1 libgstreamer-1_0-0-debuginfo-1.4.5-5.1 typelib-1_0-Gst-1_0-1.4.5-5.1 - openSUSE Leap 42.1 (noarch): gstreamer-lang-1.4.5-5.1 - openSUSE Leap 42.1 (x86_64): gstreamer-32bit-1.4.5-5.1 gstreamer-debuginfo-32bit-1.4.5-5.1 libgstreamer-1_0-0-32bit-1.4.5-5.1 libgstreamer-1_0-0-debuginfo-32bit-1.4.5-5.1 References: https://www.suse.com/security/cve/CVE-2017-5838.html https://bugzilla.suse.com/1024051

1 0

openSUSE-RU-2017:0579-1: moderate: Recommended update for libvirt
by maintenance＠opensuse.org 28 Feb '17

28 Feb '17

openSUSE Recommended Update: Recommended update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0579-1 Rating: moderate References: #1003379 #1017762 #1019969 #987002 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This recommended update for libvirt fixes the following issues: - libxl: more fixes for dom0 maxmem setting boo#1017762 - libxl: fix reporting of domain maximum memory and vcpus boo#1017762 - libxl: fix build when treating warnings as error - libxl: set disk format to raw if not specified and fix disk detach boo#1003379 - libxl: fix timer configurations boo#1019969 - libxl: always enable pae for x86_64 HVM boo#987002 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-297=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libvirt-1.2.18.4-23.1 libvirt-client-1.2.18.4-23.1 libvirt-client-debuginfo-1.2.18.4-23.1 libvirt-daemon-1.2.18.4-23.1 libvirt-daemon-config-network-1.2.18.4-23.1 libvirt-daemon-config-nwfilter-1.2.18.4-23.1 libvirt-daemon-debuginfo-1.2.18.4-23.1 libvirt-daemon-driver-interface-1.2.18.4-23.1 libvirt-daemon-driver-interface-debuginfo-1.2.18.4-23.1 libvirt-daemon-driver-lxc-1.2.18.4-23.1 libvirt-daemon-driver-lxc-debuginfo-1.2.18.4-23.1 libvirt-daemon-driver-network-1.2.18.4-23.1 libvirt-daemon-driver-network-debuginfo-1.2.18.4-23.1 libvirt-daemon-driver-nodedev-1.2.18.4-23.1 libvirt-daemon-driver-nodedev-debuginfo-1.2.18.4-23.1 libvirt-daemon-driver-nwfilter-1.2.18.4-23.1 libvirt-daemon-driver-nwfilter-debuginfo-1.2.18.4-23.1 libvirt-daemon-driver-qemu-1.2.18.4-23.1 libvirt-daemon-driver-qemu-debuginfo-1.2.18.4-23.1 libvirt-daemon-driver-secret-1.2.18.4-23.1 libvirt-daemon-driver-secret-debuginfo-1.2.18.4-23.1 libvirt-daemon-driver-storage-1.2.18.4-23.1 libvirt-daemon-driver-storage-debuginfo-1.2.18.4-23.1 libvirt-daemon-driver-uml-1.2.18.4-23.1 libvirt-daemon-driver-uml-debuginfo-1.2.18.4-23.1 libvirt-daemon-driver-vbox-1.2.18.4-23.1 libvirt-daemon-driver-vbox-debuginfo-1.2.18.4-23.1 libvirt-daemon-lxc-1.2.18.4-23.1 libvirt-daemon-qemu-1.2.18.4-23.1 libvirt-daemon-uml-1.2.18.4-23.1 libvirt-daemon-vbox-1.2.18.4-23.1 libvirt-debugsource-1.2.18.4-23.1 libvirt-devel-1.2.18.4-23.1 libvirt-doc-1.2.18.4-23.1 libvirt-lock-sanlock-1.2.18.4-23.1 libvirt-lock-sanlock-debuginfo-1.2.18.4-23.1 libvirt-login-shell-1.2.18.4-23.1 libvirt-login-shell-debuginfo-1.2.18.4-23.1 - openSUSE Leap 42.1 (x86_64): libvirt-client-32bit-1.2.18.4-23.1 libvirt-client-debuginfo-32bit-1.2.18.4-23.1 libvirt-daemon-driver-libxl-1.2.18.4-23.1 libvirt-daemon-driver-libxl-debuginfo-1.2.18.4-23.1 libvirt-daemon-xen-1.2.18.4-23.1 libvirt-devel-32bit-1.2.18.4-23.1 References: https://bugzilla.suse.com/1003379 https://bugzilla.suse.com/1017762 https://bugzilla.suse.com/1019969 https://bugzilla.suse.com/987002

1 0

openSUSE-RU-2017:0576-1: moderate: Recommended update for libvirt
by maintenance＠opensuse.org 28 Feb '17

28 Feb '17

openSUSE Recommended Update: Recommended update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0576-1 Rating: moderate References: #1003379 #1013991 #1016253 #1017086 #1017762 #1018189 #1019969 #1023436 #959297 #987002 #999070 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 11 recommended fixes can now be installed. Description: This update for libvirt provides the following fixes: - apparmor: Don't fail on non-apparmor seclabel (bsc#1023436) - libxl: Fix reporting of domain maximum memory (bsc#1017762) - libxl: Set disk format to raw if not specified and fix disk detach (bsc#1003379) - libxl: Fix timer configurations (bsc#1019969) - Fix loop on usb entries in libxl driver (bsc#1018189) - Always enable PAE for x86_64 HVM (bsc#987002) - Implement virDomainGetMaxVcpus in libxl (bsc#1017762) - Option --postcopy is mandatory with --postcopy-after-precopy in "virsh migrate" (bsc#1017086) - Ignore domain-0 in libvirt-guests service (bsc#1016253) - Avoid libvirtd crash when transient lxc domain fails to start (bsc#1013991) - Fix libvirtd crash when destroying lxc domains (bsc#1013991) - Explicitly set qemu-bridge-helper path to /usr/lib/ (bsc#999070) - Package org.libvirt.api.policy polkit file (bsc#959297) - Mark /etc/libvirt/nwfilter/*.xml files as config files. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-298=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libvirt-2.0.0-11.1 libvirt-client-2.0.0-11.1 libvirt-client-debuginfo-2.0.0-11.1 libvirt-daemon-2.0.0-11.1 libvirt-daemon-config-network-2.0.0-11.1 libvirt-daemon-config-nwfilter-2.0.0-11.1 libvirt-daemon-debuginfo-2.0.0-11.1 libvirt-daemon-driver-interface-2.0.0-11.1 libvirt-daemon-driver-interface-debuginfo-2.0.0-11.1 libvirt-daemon-driver-lxc-2.0.0-11.1 libvirt-daemon-driver-lxc-debuginfo-2.0.0-11.1 libvirt-daemon-driver-network-2.0.0-11.1 libvirt-daemon-driver-network-debuginfo-2.0.0-11.1 libvirt-daemon-driver-nodedev-2.0.0-11.1 libvirt-daemon-driver-nodedev-debuginfo-2.0.0-11.1 libvirt-daemon-driver-nwfilter-2.0.0-11.1 libvirt-daemon-driver-nwfilter-debuginfo-2.0.0-11.1 libvirt-daemon-driver-qemu-2.0.0-11.1 libvirt-daemon-driver-qemu-debuginfo-2.0.0-11.1 libvirt-daemon-driver-secret-2.0.0-11.1 libvirt-daemon-driver-secret-debuginfo-2.0.0-11.1 libvirt-daemon-driver-storage-2.0.0-11.1 libvirt-daemon-driver-storage-debuginfo-2.0.0-11.1 libvirt-daemon-driver-uml-2.0.0-11.1 libvirt-daemon-driver-uml-debuginfo-2.0.0-11.1 libvirt-daemon-driver-vbox-2.0.0-11.1 libvirt-daemon-driver-vbox-debuginfo-2.0.0-11.1 libvirt-daemon-lxc-2.0.0-11.1 libvirt-daemon-qemu-2.0.0-11.1 libvirt-daemon-uml-2.0.0-11.1 libvirt-daemon-vbox-2.0.0-11.1 libvirt-debugsource-2.0.0-11.1 libvirt-devel-2.0.0-11.1 libvirt-doc-2.0.0-11.1 libvirt-lock-sanlock-2.0.0-11.1 libvirt-lock-sanlock-debuginfo-2.0.0-11.1 libvirt-nss-2.0.0-11.1 libvirt-nss-debuginfo-2.0.0-11.1 - openSUSE Leap 42.2 (x86_64): libvirt-client-32bit-2.0.0-11.1 libvirt-client-debuginfo-32bit-2.0.0-11.1 libvirt-daemon-driver-libxl-2.0.0-11.1 libvirt-daemon-driver-libxl-debuginfo-2.0.0-11.1 libvirt-daemon-xen-2.0.0-11.1 libvirt-devel-32bit-2.0.0-11.1 References: https://bugzilla.suse.com/1003379 https://bugzilla.suse.com/1013991 https://bugzilla.suse.com/1016253 https://bugzilla.suse.com/1017086 https://bugzilla.suse.com/1017762 https://bugzilla.suse.com/1018189 https://bugzilla.suse.com/1019969 https://bugzilla.suse.com/1023436 https://bugzilla.suse.com/959297 https://bugzilla.suse.com/987002 https://bugzilla.suse.com/999070

1 0

openSUSE-SU-2017:0574-1: Security update for gstreamer-plugins-base
by opensuse-security＠opensuse.org 28 Feb '17

28 Feb '17

openSUSE Security Update: Security update for gstreamer-plugins-base ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0574-1 Rating: low References: #1024041 #1024047 #1024076 #1024079 Cross-References: CVE-2017-5837 CVE-2017-5839 CVE-2017-5842 CVE-2017-5844 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for gstreamer-plugins-base fixes the following security issues: - A crafted AVI file could have caused a floating point exception leading to DoS (bsc#1024076, CVE-2017-5837, bsc#1024079, CVE-2017-5844) - A crafted AVI file could have caused a stack overflow leading to DoS (bsc#1024047, CVE-2017-5839) - A crafted SAMI subtitle file could have caused an invalid memory access possibly leading to DoS or corruption (bsc#1024041, CVE-2017-5842) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-301=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gstreamer-plugins-base-1.4.5-8.1 gstreamer-plugins-base-debuginfo-1.4.5-8.1 gstreamer-plugins-base-debugsource-1.4.5-8.1 gstreamer-plugins-base-devel-1.4.5-8.1 gstreamer-plugins-base-doc-1.4.5-8.1 libgstallocators-1_0-0-1.4.5-8.1 libgstallocators-1_0-0-debuginfo-1.4.5-8.1 libgstapp-1_0-0-1.4.5-8.1 libgstapp-1_0-0-debuginfo-1.4.5-8.1 libgstaudio-1_0-0-1.4.5-8.1 libgstaudio-1_0-0-debuginfo-1.4.5-8.1 libgstfft-1_0-0-1.4.5-8.1 libgstfft-1_0-0-debuginfo-1.4.5-8.1 libgstpbutils-1_0-0-1.4.5-8.1 libgstpbutils-1_0-0-debuginfo-1.4.5-8.1 libgstriff-1_0-0-1.4.5-8.1 libgstriff-1_0-0-debuginfo-1.4.5-8.1 libgstrtp-1_0-0-1.4.5-8.1 libgstrtp-1_0-0-debuginfo-1.4.5-8.1 libgstrtsp-1_0-0-1.4.5-8.1 libgstrtsp-1_0-0-debuginfo-1.4.5-8.1 libgstsdp-1_0-0-1.4.5-8.1 libgstsdp-1_0-0-debuginfo-1.4.5-8.1 libgsttag-1_0-0-1.4.5-8.1 libgsttag-1_0-0-debuginfo-1.4.5-8.1 libgstvideo-1_0-0-1.4.5-8.1 libgstvideo-1_0-0-debuginfo-1.4.5-8.1 typelib-1_0-GstAllocators-1_0-1.4.5-8.1 typelib-1_0-GstApp-1_0-1.4.5-8.1 typelib-1_0-GstAudio-1_0-1.4.5-8.1 typelib-1_0-GstFft-1_0-1.4.5-8.1 typelib-1_0-GstPbutils-1_0-1.4.5-8.1 typelib-1_0-GstRiff-1_0-1.4.5-8.1 typelib-1_0-GstRtp-1_0-1.4.5-8.1 typelib-1_0-GstRtsp-1_0-1.4.5-8.1 typelib-1_0-GstSdp-1_0-1.4.5-8.1 typelib-1_0-GstTag-1_0-1.4.5-8.1 typelib-1_0-GstVideo-1_0-1.4.5-8.1 - openSUSE Leap 42.1 (x86_64): gstreamer-plugins-base-32bit-1.4.5-8.1 gstreamer-plugins-base-debuginfo-32bit-1.4.5-8.1 libgstallocators-1_0-0-32bit-1.4.5-8.1 libgstallocators-1_0-0-debuginfo-32bit-1.4.5-8.1 libgstapp-1_0-0-32bit-1.4.5-8.1 libgstapp-1_0-0-debuginfo-32bit-1.4.5-8.1 libgstaudio-1_0-0-32bit-1.4.5-8.1 libgstaudio-1_0-0-debuginfo-32bit-1.4.5-8.1 libgstfft-1_0-0-32bit-1.4.5-8.1 libgstfft-1_0-0-debuginfo-32bit-1.4.5-8.1 libgstpbutils-1_0-0-32bit-1.4.5-8.1 libgstpbutils-1_0-0-debuginfo-32bit-1.4.5-8.1 libgstriff-1_0-0-32bit-1.4.5-8.1 libgstriff-1_0-0-debuginfo-32bit-1.4.5-8.1 libgstrtp-1_0-0-32bit-1.4.5-8.1 libgstrtp-1_0-0-debuginfo-32bit-1.4.5-8.1 libgstrtsp-1_0-0-32bit-1.4.5-8.1 libgstrtsp-1_0-0-debuginfo-32bit-1.4.5-8.1 libgstsdp-1_0-0-32bit-1.4.5-8.1 libgstsdp-1_0-0-debuginfo-32bit-1.4.5-8.1 libgsttag-1_0-0-32bit-1.4.5-8.1 libgsttag-1_0-0-debuginfo-32bit-1.4.5-8.1 libgstvideo-1_0-0-32bit-1.4.5-8.1 libgstvideo-1_0-0-debuginfo-32bit-1.4.5-8.1 - openSUSE Leap 42.1 (noarch): gstreamer-plugins-base-lang-1.4.5-8.1 References: https://www.suse.com/security/cve/CVE-2017-5837.html https://www.suse.com/security/cve/CVE-2017-5839.html https://www.suse.com/security/cve/CVE-2017-5842.html https://www.suse.com/security/cve/CVE-2017-5844.html https://bugzilla.suse.com/1024041 https://bugzilla.suse.com/1024047 https://bugzilla.suse.com/1024076 https://bugzilla.suse.com/1024079

1 0

openSUSE-RU-2017:0573-1: Recommended update for mpv
by maintenance＠opensuse.org 28 Feb '17

28 Feb '17

openSUSE Recommended Update: Recommended update for mpv ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0573-1 Rating: low References: #1022427 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mpv fixes the following issues: - boo#1022427: mpv lacked shell completion The following additional changes are included: - use system waf Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-299=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): libmpv1-0.22.0-6.1 libmpv1-debuginfo-0.22.0-6.1 mpv-0.22.0-6.1 mpv-debuginfo-0.22.0-6.1 mpv-devel-0.22.0-6.1 - openSUSE Leap 42.2 (noarch): mpv-bash-completion-3.3.8-6.1 mpv-zsh-completion-0.22.0-6.1 References: https://bugzilla.suse.com/1022427

1 0

openSUSE-RU-2017:0572-1: Recommended update for dirmngr
by maintenance＠opensuse.org 28 Feb '17

28 Feb '17

openSUSE Recommended Update: Recommended update for dirmngr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0572-1 Rating: low References: #1019276 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dirmngr fixes the following issues: - Initialize the dirmngr tmpfilesd files right away and not just during reboot - Own the /usr/lib/tmpfiles.d/ folder as it is needed in older systemds (bsc#1019276) - Require logrotate as we need it for the dirmngr configs This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-300=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dirmngr-1.1.1-14.1 dirmngr-debuginfo-1.1.1-14.1 dirmngr-debugsource-1.1.1-14.1 - openSUSE Leap 42.2 (noarch): dirmngr-lang-1.1.1-14.1 References: https://bugzilla.suse.com/1019276

1 0

openSUSE-OU-2017:0567-1: moderate: Add KDE Applications 16.08.2 to the SUSE Package Hub
by maintenance＠opensuse.org 27 Feb '17

27 Feb '17

openSUSE Optional Update: Add KDE Applications 16.08.2 to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0567-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update provides KDE Applications 16.08.2 for the SUSE Package Hub. The following packages and versions are included: akonadi-calendar 16.08.2 akonadi-contact 16.08.2 akonadi-mime 16.08.2 akonadi-notes 16.08.2 akonadi-runtime 1.13.0 akonadi-search 16.08.2 akonadi-server 16.08.2 ark 16.08.2 artikulate 16.08.2 baloo5-widgets 16.08.2 blinken 16.08.2 bomber 16.08.2 bovo 16.08.2 calendarsupport 16.08.2 cervisia 16.08.2 dolphin 16.08.2 dolphin-plugins 16.08.2 dragonplayer 16.08.2 eventviews 16.08.2 ffmpeg 3.1.3 ffmpegthumbs 16.08.2 filelight 16.08.2 gpgmepp5 16.08.2 granatier 16.08.2 grantlee5 5.1.0 grantleetheme 16.08.2 gwenview5 16.08.2 incidenceeditor 16.08.2 jovie 16.08.2 jsoncpp 1.7.3 juk 16.08.2 kaccessible 16.08.2 kaccounts-integration 16.08.2 kaccounts-providers 16.08.2 kalarmcal 16.08.2 kamera 16.08.2 kanagram 16.08.2 kapman 16.08.2 kapptemplate 16.08.2 kate 16.08.2 kate4-parts 4.14.3 katomic 16.08.2 kblackbox 16.08.2 kblocks 16.08.2 kblog 16.08.2 kbounce 16.08.2 kbreakout 16.08.2 kbruch 16.08.2 kcachegrind 16.08.2 kcalc 16.08.2 kcalcore 16.08.2 kcalutils 16.08.2 kcharselect 16.08.2 kcolorchooser 16.08.2 kcontacts 16.08.2 kcron 16.08.2 kde-dev-utils 16.08.2 kde-l10n 16.08.2 kde-print-manager 16.08.2 kdebase4 16.08.2 kdebase4-runtime 16.08.2 kdebugsettings 16.08.2 kdeedu-data 16.08.2 kdegraphics-thumbnailers 16.08.2 kdelibs4 4.14.25 kdelibs4-apidocs unknown kdenetwork4-filesharing 16.08.2 kdepim 16.08.2 kdepim-addons 16.08.2 kdepim-apps-libs 16.08.2 kdepim-runtime 16.08.2 kdepimlibs4 4.14.10 kdesdk-thumbnailers 16.08.2 kdesdk4-scripts 16.08.2 kdewebdev4 16.08.2 kdf 16.08.2 kdgantt2 16.08.2 kdiamond 16.08.2 kdnssd 16.08.2 kfloppy 16.08.2 kfourinline 16.08.2 kgeography 16.08.2 kgoldrunner 16.08.2 kgpg 16.12.0 khangman 16.08.2 khelpcenter5 16.08.2 kholidays 16.08.2 kidentitymanagement 16.08.2 kig 16.08.2 kigo 16.08.2 killbots 16.08.2 kimap 16.08.2 kio-extras5 16.08.2 kio_audiocd 16.08.2 kiriki 16.08.2 kiten 16.08.2 kjots 5.0.1 kjumpingcube 16.08.2 kldap 16.08.2 kleopatra5 16.08.2 klettres 16.08.2 klickety 16.08.2 klines 16.08.2 kmag 16.08.2 kmahjongg 16.08.2 kmailtransport 16.08.2 kmbox 16.08.2 kmime 16.08.2 kmines 16.08.2 kmix 16.08.2 kmousetool 16.08.2 kmouth 16.08.2 kmplot 16.08.2 knavalbattle 16.08.2 knetwalk 16.08.2 kolf 16.08.2 kollision 16.08.2 kolourpaint 16.08.2 kompare 16.08.2 konquest 16.08.2 konsole 16.08.2 konsole4-part 4.14.3 kontactinterface 16.08.2 kopete 16.08.2 kpat 16.08.2 kpimtextedit 16.08.2 kppp 16.08.2 kqtquickcharts 16.08.2 krdc 16.08.2 kremotecontrol 16.08.2 kreversi 16.08.2 krfb 16.08.2 kross-interpreters 16.08.2 kruler 16.08.2 kscd 16.08.2 kshisen 16.08.2 ksirk 16.08.2 ksnakeduel 16.08.2 kspaceduel 16.08.2 ksquares 16.08.2 ksudoku 16.08.2 ksystemlog 16.08.2 kteatime 16.08.2 ktimer 16.08.2 ktnef 16.08.2 ktouch 16.08.2 ktp-accounts-kcm 16.08.2 ktp-approver 16.08.2 ktp-auth-handler 16.08.2 ktp-common-internals 16.08.2 ktp-contact-list 16.08.2 ktp-contact-runner 16.08.2 ktp-desktop-applets 16.08.2 ktp-filetransfer-handler 16.08.2 ktp-kded-module 16.08.2 ktp-send-file 16.08.2 ktp-text-ui 16.08.2 ktuberling 16.08.2 kturtle 16.08.2 kubrick 16.08.2 kuser 16.08.2 kwalletmanager 15.04.3 kwalletmanager5 16.08.2 kwebkitpart 1.3.4 kwordquiz 16.08.2 libaccounts-glib 1.21 libaccounts-qt5 1.13 libgravatar 16.08.2 libkcddb4 16.08.2 libkcompactdisc4 16.08.1 libkdcraw 16.08.2 libkdegames 16.08.2 libkdegames4 14.12.3 libkdepim 16.08.2 libkeduvocdocument 16.08.2 libkexiv2 16.08.2 libkgapi 5.3.1 libkgeomap 16.08.2 libkipi 16.08.2 libkleo 16.08.2 libkmahjongg 16.08.2 libkmahjongg4 14.12.3 libkolab-qt5 1.0.2 libkolabxml 1.1.2 libkomparediff2 16.08.2 libksane 16.08.2 libksieve 16.08.2 libmlt 6.2.0 libsignon-glib 1.13+16.04.20151209.1 lokalize 16.08.2 lskat 16.08.2 mailcommon 16.08.2 mailimporter 16.08.2 marble 16.08.2 messagelib 16.08.2 mobipocket 16.08.2 okteta 16.08.2 okular 16.08.2 palapeli 16.08.2 parley 16.08.2 picmi 16.08.2 pimcommon 16.08.2 rocs 16.08.2 signon 8.57 signon-kwallet-extension 16.08.2 signon-plugin-oauth2 0.20 signon-ui 0.15 spectacle 16.08.2 svgpart 16.08.2 sweeper 16.08.2 syndication 16.08.2 telepathy-accounts-signon 1.0 telepathy-logger-qt5 15.04.0 umbrello 16.08.2 Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-251=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): akonadi-calendar-debugsource-16.08.2-2.2 akonadi-calendar-devel-16.08.2-2.2 akonadi-contact-16.08.2-2.2 akonadi-contact-debuginfo-16.08.2-2.2 akonadi-contact-debugsource-16.08.2-2.2 akonadi-contact-devel-16.08.2-2.2 akonadi-mime-16.08.2-2.2 akonadi-mime-debugsource-16.08.2-2.2 akonadi-mime-devel-16.08.2-2.2 akonadi-notes-debugsource-16.08.2-2.2 akonadi-notes-devel-16.08.2-2.2 akonadi-runtime-1.13.0-2.2 akonadi-runtime-debuginfo-1.13.0-2.2 akonadi-runtime-debugsource-1.13.0-2.2 akonadi-search-16.08.2-2.2 akonadi-search-debuginfo-16.08.2-2.2 akonadi-search-debugsource-16.08.2-2.2 akonadi-search-devel-16.08.2-2.2 akonadi-server-16.08.2-2.43 akonadi-server-debuginfo-16.08.2-2.43 akonadi-server-debugsource-16.08.2-2.43 akonadi-server-devel-16.08.2-2.43 akonadi-server-devel-debuginfo-16.08.2-2.43 akonadi_resources-16.08.2-2.4 akonadi_resources-debuginfo-16.08.2-2.4 akregator5-16.08.2-2.4 akregator5-debuginfo-16.08.2-2.4 ark-16.08.2-2.12 ark-debuginfo-16.08.2-2.12 ark-debugsource-16.08.2-2.12 artikulate-16.08.2-2.52 artikulate-debuginfo-16.08.2-2.52 artikulate-debugsource-16.08.2-2.52 baloo5-widgets-16.08.2-2.10 baloo5-widgets-debuginfo-16.08.2-2.10 baloo5-widgets-debugsource-16.08.2-2.10 baloo5-widgets-devel-16.08.2-2.10 blinken-16.08.2-2.2 blinken-debuginfo-16.08.2-2.2 blinken-debugsource-16.08.2-2.2 blogilo5-16.08.2-2.4 blogilo5-debuginfo-16.08.2-2.4 bomber-16.08.2-2.2 bomber-debuginfo-16.08.2-2.2 bomber-debugsource-16.08.2-2.2 bovo-16.08.2-2.36 bovo-debuginfo-16.08.2-2.36 bovo-debugsource-16.08.2-2.36 calendarsupport-16.08.2-2.2 calendarsupport-debugsource-16.08.2-2.2 calendarsupport-devel-16.08.2-2.2 cervisia-16.08.2-2.55 cervisia-debuginfo-16.08.2-2.55 cervisia-debugsource-16.08.2-2.55 dolphin-16.08.2-2.18 dolphin-debuginfo-16.08.2-2.18 dolphin-debugsource-16.08.2-2.18 dolphin-devel-16.08.2-2.18 dolphin-part-16.08.2-2.18 dolphin-part-debuginfo-16.08.2-2.18 dolphin-plugins-16.08.2-2.2 dolphin-plugins-debuginfo-16.08.2-2.2 dolphin-plugins-debugsource-16.08.2-2.2 dragonplayer-16.08.2-2.10 dragonplayer-debuginfo-16.08.2-2.10 dragonplayer-debugsource-16.08.2-2.10 eventviews-16.08.2-2.2 eventviews-debugsource-16.08.2-2.2 eventviews-devel-16.08.2-2.2 ffmpeg-3.1.3-2.2 ffmpeg-debuginfo-3.1.3-2.2 ffmpeg-debugsource-3.1.3-2.2 ffmpegthumbs-16.08.2-2.2 ffmpegthumbs-debuginfo-16.08.2-2.2 ffmpegthumbs-debugsource-16.08.2-2.2 filelight-16.08.2-2.8 filelight-debuginfo-16.08.2-2.8 filelight-debugsource-16.08.2-2.8 gpgmepp5-16.08.2-2.2 gpgmepp5-debuginfo-16.08.2-2.2 gpgmepp5-debugsource-16.08.2-2.2 gpgmepp5-devel-16.08.2-2.2 granatier-16.08.2-2.35 granatier-debuginfo-16.08.2-2.35 granatier-debugsource-16.08.2-2.35 grantlee5-5.1.0-2.2 grantlee5-debuginfo-5.1.0-2.2 grantlee5-debugsource-5.1.0-2.2 grantlee5-devel-5.1.0-2.2 grantleetheme-16.08.2-2.2 grantleetheme-debuginfo-16.08.2-2.2 grantleetheme-debugsource-16.08.2-2.2 grantleetheme-devel-16.08.2-2.2 gwenview5-16.08.2-2.45 gwenview5-debuginfo-16.08.2-2.45 gwenview5-debugsource-16.08.2-2.45 incidenceeditor-16.08.2-2.2 incidenceeditor-debugsource-16.08.2-2.2 incidenceeditor-devel-16.08.2-2.2 java-libkolabxml1-1.1.2-2.3 jovie-16.08.2-2.13 jovie-debuginfo-16.08.2-2.13 jovie-debugsource-16.08.2-2.13 jsoncpp-debugsource-1.7.3-2.2 jsoncpp-devel-1.7.3-2.2 juk-16.08.2-2.2 juk-debuginfo-16.08.2-2.2 juk-debugsource-16.08.2-2.2 kaccessible-16.08.2-2.2 kaccessible-debuginfo-16.08.2-2.2 kaccessible-debugsource-16.08.2-2.2 kaccounts-integration-16.08.2-2.2 kaccounts-integration-debuginfo-16.08.2-2.2 kaccounts-integration-debugsource-16.08.2-2.2 kaccounts-integration-devel-16.08.2-2.2 kaccounts-providers-16.08.2-2.2 kaccounts-providers-debuginfo-16.08.2-2.2 kaccounts-providers-debugsource-16.08.2-2.2 kaddressbook5-16.08.2-2.4 kaddressbook5-debuginfo-16.08.2-2.4 kalarm5-16.08.2-2.4 kalarm5-debuginfo-16.08.2-2.4 kalarmcal-debugsource-16.08.2-2.2 kalarmcal-devel-16.08.2-2.2 kamera-debugsource-16.08.2-2.2 kanagram-16.08.2-2.2 kanagram-debuginfo-16.08.2-2.2 kanagram-debugsource-16.08.2-2.2 kapman-16.08.2-2.36 kapman-debuginfo-16.08.2-2.36 kapman-debugsource-16.08.2-2.36 kapptemplate-16.08.2-2.2 kapptemplate-debuginfo-16.08.2-2.2 kapptemplate-debugsource-16.08.2-2.2 kate-16.08.2-2.9 kate-debuginfo-16.08.2-2.9 kate-debugsource-16.08.2-2.9 kate-plugins-16.08.2-2.9 kate-plugins-debuginfo-16.08.2-2.9 kate4-parts-4.14.3-2.2 kate4-parts-debuginfo-4.14.3-2.2 kate4-parts-debugsource-4.14.3-2.2 katomic-16.08.2-2.37 katomic-debuginfo-16.08.2-2.37 katomic-debugsource-16.08.2-2.37 kblackbox-16.08.2-2.36 kblackbox-debuginfo-16.08.2-2.36 kblackbox-debugsource-16.08.2-2.36 kblocks-16.08.2-2.34 kblocks-debuginfo-16.08.2-2.34 kblocks-debugsource-16.08.2-2.34 kblog-debugsource-16.08.2-2.2 kblog-devel-16.08.2-2.2 kbounce-16.08.2-2.35 kbounce-debuginfo-16.08.2-2.35 kbounce-debugsource-16.08.2-2.35 kbreakout-16.08.2-2.29 kbreakout-debuginfo-16.08.2-2.29 kbreakout-debugsource-16.08.2-2.29 kbruch-16.08.2-2.10 kbruch-debuginfo-16.08.2-2.10 kbruch-debugsource-16.08.2-2.10 kcachegrind-16.08.2-2.2 kcachegrind-debuginfo-16.08.2-2.2 kcachegrind-debugsource-16.08.2-2.2 kcalc-16.08.2-2.52 kcalc-debuginfo-16.08.2-2.52 kcalc-debugsource-16.08.2-2.52 kcalcore-debugsource-16.08.2-2.2 kcalcore-devel-16.08.2-2.2 kcalutils-16.08.2-2.2 kcalutils-debuginfo-16.08.2-2.2 kcalutils-debugsource-16.08.2-2.2 kcalutils-devel-16.08.2-2.2 kcharselect-16.08.2-2.14 kcharselect-debuginfo-16.08.2-2.14 kcharselect-debugsource-16.08.2-2.14 kcolorchooser-16.08.2-2.2 kcolorchooser-debuginfo-16.08.2-2.2 kcolorchooser-debugsource-16.08.2-2.2 kcontacts-debugsource-16.08.2-2.2 kcontacts-devel-16.08.2-2.2 kcron-16.08.2-2.58 kcron-debuginfo-16.08.2-2.58 kcron-debugsource-16.08.2-2.58 kde-dev-utils-debugsource-16.08.2-2.2 kde-print-manager-16.08.2-2.2 kde-print-manager-debuginfo-16.08.2-2.2 kde-print-manager-debugsource-16.08.2-2.2 kdebase4-debugsource-16.08.2-2.11 kdebase4-libkonq-16.08.2-2.11 kdebase4-libkonq-debuginfo-16.08.2-2.11 kdebase4-nsplugin-16.08.2-2.11 kdebase4-nsplugin-debuginfo-16.08.2-2.11 kdebase4-runtime-16.08.2-2.13 kdebase4-runtime-debuginfo-16.08.2-2.13 kdebase4-runtime-debugsource-16.08.2-2.13 kdebase4-runtime-devel-16.08.2-2.13 kdebugsettings-16.08.2-2.10 kdebugsettings-debuginfo-16.08.2-2.10 kdebugsettings-debugsource-16.08.2-2.10 kdegraphics-thumbnailers-16.08.2-2.2 kdegraphics-thumbnailers-debuginfo-16.08.2-2.2 kdegraphics-thumbnailers-debugsource-16.08.2-2.2 kdenetwork4-filesharing-16.08.2-2.2 kdenetwork4-filesharing-debuginfo-16.08.2-2.2 kdenetwork4-filesharing-debugsource-16.08.2-2.2 kdepasswd-16.08.2-2.11 kdepasswd-debuginfo-16.08.2-2.11 kdepim-16.08.2-2.4 kdepim-addons-16.08.2-2.2 kdepim-addons-debuginfo-16.08.2-2.2 kdepim-addons-debugsource-16.08.2-2.2 kdepim-apps-libs-16.08.2-2.2 kdepim-apps-libs-debuginfo-16.08.2-2.2 kdepim-apps-libs-debugsource-16.08.2-2.2 kdepim-apps-libs-devel-16.08.2-2.2 kdepim-debuginfo-16.08.2-2.4 kdepim-debugsource-16.08.2-2.4 kdepim-runtime-16.08.2-2.2 kdepim-runtime-debuginfo-16.08.2-2.2 kdepim-runtime-debugsource-16.08.2-2.2 kdepimlibs4-4.14.10-2.2 kdepimlibs4-debuginfo-4.14.10-2.2 kdepimlibs4-debugsource-4.14.10-2.2 kdesdk-thumbnailers-16.08.2-2.2 kdesdk-thumbnailers-debuginfo-16.08.2-2.2 kdesdk-thumbnailers-debugsource-16.08.2-2.2 kdesdk4-scripts-16.08.2-2.2 kdewebdev4-debugsource-16.08.2-2.2 kdf-16.08.2-2.21 kdf-debuginfo-16.08.2-2.21 kdf-debugsource-16.08.2-2.21 kdgantt2-16.08.2-2.2 kdgantt2-debugsource-16.08.2-2.2 kdgantt2-devel-16.08.2-2.2 kdialog-16.08.2-2.11 kdialog-debuginfo-16.08.2-2.11 kdiamond-16.08.2-2.36 kdiamond-debuginfo-16.08.2-2.36 kdiamond-debugsource-16.08.2-2.36 kdnssd-16.08.2-2.2 kdnssd-debuginfo-16.08.2-2.2 kdnssd-debugsource-16.08.2-2.2 keditbookmarks-16.08.2-2.11 keditbookmarks-debuginfo-16.08.2-2.11 kfilereplace-16.08.2-2.2 kfilereplace-debuginfo-16.08.2-2.2 kfind-16.08.2-2.11 kfind-debuginfo-16.08.2-2.11 kfloppy-16.08.2-2.69 kfloppy-debuginfo-16.08.2-2.69 kfloppy-debugsource-16.08.2-2.69 kfourinline-16.08.2-2.33 kfourinline-debuginfo-16.08.2-2.33 kfourinline-debugsource-16.08.2-2.33 kgeography-16.08.2-2.41 kgeography-debuginfo-16.08.2-2.41 kgeography-debugsource-16.08.2-2.41 kgoldrunner-16.08.2-2.2 kgoldrunner-debuginfo-16.08.2-2.2 kgoldrunner-debugsource-16.08.2-2.2 kgpg-16.12.0-2.15 kgpg-debuginfo-16.12.0-2.15 kgpg-debugsource-16.12.0-2.15 khangman-16.08.2-2.2 khangman-debuginfo-16.08.2-2.2 khangman-debugsource-16.08.2-2.2 khelpcenter5-16.08.2-2.29 khelpcenter5-debuginfo-16.08.2-2.29 khelpcenter5-debugsource-16.08.2-2.29 kholidays-16.08.2-2.2 kholidays-debugsource-16.08.2-2.2 kholidays-devel-16.08.2-2.2 kidentitymanagement-debugsource-16.08.2-2.2 kidentitymanagement-devel-16.08.2-2.2 kig-16.08.2-2.17 kig-debuginfo-16.08.2-2.17 kig-debugsource-16.08.2-2.17 kigo-16.08.2-2.2 kigo-debuginfo-16.08.2-2.2 kigo-debugsource-16.08.2-2.2 killbots-16.08.2-2.35 killbots-debuginfo-16.08.2-2.35 killbots-debugsource-16.08.2-2.35 kimagemapeditor-16.08.2-2.2 kimagemapeditor-debuginfo-16.08.2-2.2 kimap-debugsource-16.08.2-2.2 kimap-devel-16.08.2-2.2 kio-extras5-16.08.2-2.13 kio-extras5-debuginfo-16.08.2-2.13 kio-extras5-debugsource-16.08.2-2.13 kio_audiocd-16.08.2-2.2 kio_audiocd-debuginfo-16.08.2-2.2 kio_audiocd-debugsource-16.08.2-2.2 kio_kamera-16.08.2-2.2 kio_kamera-debuginfo-16.08.2-2.2 kiriki-16.08.2-2.35 kiriki-debuginfo-16.08.2-2.35 kiriki-debugsource-16.08.2-2.35 kiten-16.08.2-2.49 kiten-debuginfo-16.08.2-2.49 kiten-debugsource-16.08.2-2.49 kiten-devel-16.08.2-2.49 kjots-5.0.1-2.2 kjots-debuginfo-5.0.1-2.2 kjots-debugsource-5.0.1-2.2 kjumpingcube-16.08.2-2.36 kjumpingcube-debuginfo-16.08.2-2.36 kjumpingcube-debugsource-16.08.2-2.36 kldap-16.08.2-2.2 kldap-debuginfo-16.08.2-2.2 kldap-debugsource-16.08.2-2.2 kldap-devel-16.08.2-2.2 kleopatra5-16.08.2-2.35 kleopatra5-debuginfo-16.08.2-2.35 kleopatra5-debugsource-16.08.2-2.35 klettres-16.08.2-2.68 klettres-debuginfo-16.08.2-2.68 klettres-debugsource-16.08.2-2.68 klickety-16.08.2-2.35 klickety-debuginfo-16.08.2-2.35 klickety-debugsource-16.08.2-2.35 klines-16.08.2-2.35 klines-debuginfo-16.08.2-2.35 klines-debugsource-16.08.2-2.35 klinkstatus-16.08.2-2.2 klinkstatus-debuginfo-16.08.2-2.2 kmag-16.08.2-2.2 kmag-debuginfo-16.08.2-2.2 kmag-debugsource-16.08.2-2.2 kmahjongg-16.08.2-2.29 kmahjongg-debuginfo-16.08.2-2.29 kmahjongg-debugsource-16.08.2-2.29 kmail5-16.08.2-2.4 kmail5-debuginfo-16.08.2-2.4 kmailtransport-16.08.2-2.2 kmailtransport-debuginfo-16.08.2-2.2 kmailtransport-debugsource-16.08.2-2.2 kmailtransport-devel-16.08.2-2.2 kmbox-debugsource-16.08.2-2.2 kmbox-devel-16.08.2-2.2 kmime-debugsource-16.08.2-2.2 kmime-devel-16.08.2-2.2 kmines-16.08.2-2.36 kmines-debuginfo-16.08.2-2.36 kmines-debugsource-16.08.2-2.36 kmix-16.08.2-2.7 kmix-debuginfo-16.08.2-2.7 kmix-debugsource-16.08.2-2.7 kmousetool-16.08.2-2.2 kmousetool-debuginfo-16.08.2-2.2 kmousetool-debugsource-16.08.2-2.2 kmouth-16.08.2-2.2 kmouth-debuginfo-16.08.2-2.2 kmouth-debugsource-16.08.2-2.2 kmplot-16.08.2-2.65 kmplot-debuginfo-16.08.2-2.65 kmplot-debugsource-16.08.2-2.65 kmtrace-16.08.2-2.2 knavalbattle-16.08.2-2.34 knavalbattle-debuginfo-16.08.2-2.34 knavalbattle-debugsource-16.08.2-2.34 knetwalk-16.08.2-2.29 knetwalk-debuginfo-16.08.2-2.29 knetwalk-debugsource-16.08.2-2.29 knotes5-16.08.2-2.4 knotes5-debuginfo-16.08.2-2.4 kolf-16.08.2-2.2 kolf-debuginfo-16.08.2-2.2 kolf-debugsource-16.08.2-2.2 kollision-16.08.2-2.35 kollision-debuginfo-16.08.2-2.35 kollision-debugsource-16.08.2-2.35 kolourpaint-16.08.2-2.29 kolourpaint-debuginfo-16.08.2-2.29 kolourpaint-debugsource-16.08.2-2.29 kommander-runtime-16.08.2-2.2 kommander-runtime-debuginfo-16.08.2-2.2 kommander-runtime-devel-16.08.2-2.2 kompare-16.08.2-2.13 kompare-debuginfo-16.08.2-2.13 kompare-debugsource-16.08.2-2.13 kompare-devel-16.08.2-2.13 konqueror-16.08.2-2.11 konqueror-debuginfo-16.08.2-2.11 konqueror-plugins-16.08.2-2.11 konqueror-plugins-debuginfo-16.08.2-2.11 konquest-16.08.2-2.2 konquest-debuginfo-16.08.2-2.2 konquest-debugsource-16.08.2-2.2 konsole-16.08.2-4.2 konsole-debuginfo-16.08.2-4.2 konsole-debugsource-16.08.2-4.2 konsole-part-16.08.2-4.2 konsole-part-debuginfo-16.08.2-4.2 konsole4-part-4.14.3-2.2 konsole4-part-debuginfo-4.14.3-2.2 konsole4-part-debugsource-4.14.3-2.2 kontact5-16.08.2-2.4 kontact5-debuginfo-16.08.2-2.4 kontactinterface-debugsource-16.08.2-2.2 kontactinterface-devel-16.08.2-2.2 kopete-16.08.2-2.2 kopete-debuginfo-16.08.2-2.2 kopete-debugsource-16.08.2-2.2 korganizer5-16.08.2-2.4 korganizer5-debuginfo-16.08.2-2.4 kpartloader-16.08.2-2.2 kpartloader-debuginfo-16.08.2-2.2 kpat-16.08.2-2.35 kpat-debuginfo-16.08.2-2.35 kpat-debugsource-16.08.2-2.35 kpimtextedit-debugsource-16.08.2-2.19 kpimtextedit-devel-16.08.2-2.19 kpimtextedit-devel-debuginfo-16.08.2-2.19 kppp-16.08.2-2.2 kppp-debuginfo-16.08.2-2.2 kppp-debugsource-16.08.2-2.2 kprofilemethod-16.08.2-2.2 kqtquickcharts-16.08.2-2.2 kqtquickcharts-debuginfo-16.08.2-2.2 kqtquickcharts-debugsource-16.08.2-2.2 krdc-16.08.2-2.21 krdc-debuginfo-16.08.2-2.21 krdc-debugsource-16.08.2-2.21 krdc-devel-16.08.2-2.21 kremotecontrol-16.08.2-2.2 kremotecontrol-debuginfo-16.08.2-2.2 kremotecontrol-debugsource-16.08.2-2.2 kremotecontrol-devel-16.08.2-2.2 kreversi-16.08.2-2.2 kreversi-debuginfo-16.08.2-2.2 kreversi-debugsource-16.08.2-2.2 krfb-16.08.2-2.2 krfb-debuginfo-16.08.2-2.2 krfb-debugsource-16.08.2-2.2 kross-interpreters-debugsource-16.08.2-2.8 kross-python-16.08.2-2.8 kross-python-debuginfo-16.08.2-2.8 kruler-16.08.2-2.2 kruler-debuginfo-16.08.2-2.2 kruler-debugsource-16.08.2-2.2 kscd-16.08.2-2.2 kscd-debuginfo-16.08.2-2.2 kscd-debugsource-16.08.2-2.2 kshisen-16.08.2-2.30 kshisen-debuginfo-16.08.2-2.30 kshisen-debugsource-16.08.2-2.30 ksirk-16.08.2-2.2 ksirk-debuginfo-16.08.2-2.2 ksirk-debugsource-16.08.2-2.2 ksnakeduel-16.08.2-2.2 ksnakeduel-debuginfo-16.08.2-2.2 ksnakeduel-debugsource-16.08.2-2.2 kspaceduel-16.08.2-2.2 kspaceduel-debuginfo-16.08.2-2.2 kspaceduel-debugsource-16.08.2-2.2 ksquares-16.08.2-2.34 ksquares-debuginfo-16.08.2-2.34 ksquares-debugsource-16.08.2-2.34 kstartperf-16.08.2-2.2 ksudoku-16.08.2-2.2 ksudoku-debuginfo-16.08.2-2.2 ksudoku-debugsource-16.08.2-2.2 ksystemlog-16.08.2-2.60 ksystemlog-debuginfo-16.08.2-2.60 ksystemlog-debugsource-16.08.2-2.60 kteatime-16.08.2-2.10 kteatime-debuginfo-16.08.2-2.10 kteatime-debugsource-16.08.2-2.10 ktimer-16.08.2-2.2 ktimer-debuginfo-16.08.2-2.2 ktimer-debugsource-16.08.2-2.2 ktnef-debugsource-16.08.2-2.2 ktnef-devel-16.08.2-2.2 ktnef5-16.08.2-2.4 ktnef5-debuginfo-16.08.2-2.4 ktouch-16.08.2-2.2 ktouch-debuginfo-16.08.2-2.2 ktouch-debugsource-16.08.2-2.2 ktp-accounts-kcm-16.08.2-2.2 ktp-accounts-kcm-debuginfo-16.08.2-2.2 ktp-accounts-kcm-debugsource-16.08.2-2.2 ktp-approver-16.08.2-2.2 ktp-approver-debuginfo-16.08.2-2.2 ktp-approver-debugsource-16.08.2-2.2 ktp-auth-handler-16.08.2-2.2 ktp-auth-handler-debuginfo-16.08.2-2.2 ktp-auth-handler-debugsource-16.08.2-2.2 ktp-common-internals-16.08.2-2.2 ktp-common-internals-debuginfo-16.08.2-2.2 ktp-common-internals-debugsource-16.08.2-2.2 ktp-common-internals-devel-16.08.2-2.2 ktp-contact-list-16.08.2-2.2 ktp-contact-list-debuginfo-16.08.2-2.2 ktp-contact-list-debugsource-16.08.2-2.2 ktp-contact-runner-16.08.2-2.2 ktp-contact-runner-debuginfo-16.08.2-2.2 ktp-contact-runner-debugsource-16.08.2-2.2 ktp-desktop-applets-16.08.2-2.2 ktp-desktop-applets-debuginfo-16.08.2-2.2 ktp-desktop-applets-debugsource-16.08.2-2.2 ktp-filetransfer-handler-16.08.2-2.2 ktp-filetransfer-handler-debuginfo-16.08.2-2.2 ktp-filetransfer-handler-debugsource-16.08.2-2.2 ktp-icons-16.08.2-2.2 ktp-kded-module-16.08.2-2.2 ktp-kded-module-debuginfo-16.08.2-2.2 ktp-kded-module-debugsource-16.08.2-2.2 ktp-send-file-16.08.2-2.2 ktp-send-file-debuginfo-16.08.2-2.2 ktp-send-file-debugsource-16.08.2-2.2 ktp-text-ui-16.08.2-2.10 ktp-text-ui-debuginfo-16.08.2-2.10 ktp-text-ui-debugsource-16.08.2-2.10 ktuberling-16.08.2-2.35 ktuberling-debuginfo-16.08.2-2.35 ktuberling-debugsource-16.08.2-2.35 kturtle-16.08.2-2.63 kturtle-debuginfo-16.08.2-2.63 kturtle-debugsource-16.08.2-2.63 kubrick-16.08.2-2.2 kubrick-debuginfo-16.08.2-2.2 kubrick-debugsource-16.08.2-2.2 kuiviewer-16.08.2-2.2 kuiviewer-debuginfo-16.08.2-2.2 kuser-16.08.2-2.2 kuser-debuginfo-16.08.2-2.2 kuser-debugsource-16.08.2-2.2 kwalletmanager-15.04.3-2.2 kwalletmanager-debuginfo-15.04.3-2.2 kwalletmanager-debugsource-15.04.3-2.2 kwalletmanager5-16.08.2-2.27 kwalletmanager5-debuginfo-16.08.2-2.27 kwalletmanager5-debugsource-16.08.2-2.27 kwebkitpart-1.3.4-2.2 kwebkitpart-debuginfo-1.3.4-2.2 kwebkitpart-debugsource-1.3.4-2.2 kwikdisk-16.08.2-2.21 kwikdisk-debuginfo-16.08.2-2.21 kwordquiz-16.08.2-2.19 kwordquiz-debuginfo-16.08.2-2.19 kwordquiz-debugsource-16.08.2-2.19 kwrite-16.08.2-2.9 kwrite-debuginfo-16.08.2-2.9 libKEduVocDocument5-16.08.2-2.2 libKEduVocDocument5-debuginfo-16.08.2-2.2 libKF5AkonadiAgentBase5-16.08.2-2.43 libKF5AkonadiAgentBase5-debuginfo-16.08.2-2.43 libKF5AkonadiCalendar5-16.08.2-2.2 libKF5AkonadiCalendar5-debuginfo-16.08.2-2.2 libKF5AkonadiContact5-16.08.2-2.2 libKF5AkonadiContact5-debuginfo-16.08.2-2.2 libKF5AkonadiCore5-16.08.2-2.43 libKF5AkonadiCore5-debuginfo-16.08.2-2.43 libKF5AkonadiMime5-16.08.2-2.2 libKF5AkonadiMime5-debuginfo-16.08.2-2.2 libKF5AkonadiNotes5-16.08.2-2.2 libKF5AkonadiNotes5-debuginfo-16.08.2-2.2 libKF5AkonadiPrivate5-16.08.2-2.43 libKF5AkonadiPrivate5-debuginfo-16.08.2-2.43 libKF5AkonadiSearch-16.08.2-2.2 libKF5AkonadiSearch-debuginfo-16.08.2-2.2 libKF5AkonadiWidgets5-16.08.2-2.43 libKF5AkonadiWidgets5-debuginfo-16.08.2-2.43 libKF5AkonadiXml5-16.08.2-2.43 libKF5AkonadiXml5-debuginfo-16.08.2-2.43 libKF5AlarmCalendar5-16.08.2-2.2 libKF5AlarmCalendar5-debuginfo-16.08.2-2.2 libKF5Blog5-16.08.2-2.2 libKF5Blog5-debuginfo-16.08.2-2.2 libKF5CalendarCore5-16.08.2-2.2 libKF5CalendarCore5-debuginfo-16.08.2-2.2 libKF5CalendarSupport5-16.08.2-2.2 libKF5CalendarSupport5-debuginfo-16.08.2-2.2 libKF5CalendarUtils5-16.08.2-2.2 libKF5CalendarUtils5-debuginfo-16.08.2-2.2 libKF5Contacts5-16.08.2-2.2 libKF5Contacts5-debuginfo-16.08.2-2.2 libKF5EventViews5-16.08.2-2.2 libKF5EventViews5-debuginfo-16.08.2-2.2 libKF5GAPIBlogger5-5.3.1-2.2 libKF5GAPIBlogger5-debuginfo-5.3.1-2.2 libKF5GAPICalendar5-5.3.1-2.2 libKF5GAPICalendar5-debuginfo-5.3.1-2.2 libKF5GAPIContacts5-5.3.1-2.2 libKF5GAPIContacts5-debuginfo-5.3.1-2.2 libKF5GAPICore5-5.3.1-2.2 libKF5GAPICore5-debuginfo-5.3.1-2.2 libKF5GAPIDrive5-5.3.1-2.2 libKF5GAPIDrive5-debuginfo-5.3.1-2.2 libKF5GAPILatitude5-5.3.1-2.2 libKF5GAPILatitude5-debuginfo-5.3.1-2.2 libKF5GAPIMaps5-5.3.1-2.2 libKF5GAPIMaps5-debuginfo-5.3.1-2.2 libKF5GAPITasks5-5.3.1-2.2 libKF5GAPITasks5-debuginfo-5.3.1-2.2 libKF5GrantleeTheme5-16.08.2-2.2 libKF5GrantleeTheme5-debuginfo-16.08.2-2.2 libKF5Gravatar5-16.08.2-2.2 libKF5Gravatar5-debuginfo-16.08.2-2.2 libKF5Holidays5-16.08.2-2.2 libKF5Holidays5-debuginfo-16.08.2-2.2 libKF5IMAP5-16.08.2-2.2 libKF5IMAP5-debuginfo-16.08.2-2.2 libKF5IdentityManagement5-16.08.2-2.2 libKF5IdentityManagement5-debuginfo-16.08.2-2.2 libKF5IncidenceEditor5-16.08.2-2.2 libKF5IncidenceEditor5-debuginfo-16.08.2-2.2 libKF5KDGantt2-5-16.08.2-2.2 libKF5KDGantt2-5-debuginfo-16.08.2-2.2 libKF5KDcraw5-16.08.2-2.2 libKF5KDcraw5-debuginfo-16.08.2-2.2 libKF5KExiv2-15_0_0-16.08.2-2.2 libKF5KExiv2-15_0_0-debuginfo-16.08.2-2.2 libKF5KGeoMap10_0_0-16.08.2-2.2 libKF5KGeoMap10_0_0-debuginfo-16.08.2-2.2 libKF5KMahjongglib5-16.08.2-2.21 libKF5KMahjongglib5-debuginfo-16.08.2-2.21 libKF5Kipi31_0_0-16.08.2-2.2 libKF5Kipi31_0_0-debuginfo-16.08.2-2.2 libKF5KontactInterface5-16.08.2-2.2 libKF5KontactInterface5-debuginfo-16.08.2-2.2 libKF5Ldap5-16.08.2-2.2 libKF5Ldap5-debuginfo-16.08.2-2.2 libKF5Libkdepim5-16.08.2-2.7 libKF5Libkdepim5-debuginfo-16.08.2-2.7 libKF5Libkleo5-16.08.2-2.5 libKF5Libkleo5-debuginfo-16.08.2-2.5 libKF5MailCommon5-16.08.2-2.2 libKF5MailCommon5-debuginfo-16.08.2-2.2 libKF5MailImporter5-16.08.2-2.2 libKF5MailImporter5-debuginfo-16.08.2-2.2 libKF5Mbox5-16.08.2-2.2 libKF5Mbox5-debuginfo-16.08.2-2.2 libKF5Mime5-16.08.2-2.2 libKF5Mime5-debuginfo-16.08.2-2.2 libKF5PimCommon5-16.08.2-2.6 libKF5PimCommon5-debuginfo-16.08.2-2.6 libKF5PimTextEdit5-16.08.2-2.19 libKF5PimTextEdit5-debuginfo-16.08.2-2.19 libKF5QGpgme5-16.08.2-2.2 libKF5QGpgme5-debuginfo-16.08.2-2.2 libKF5Sane5-16.08.2-2.2 libKF5Sane5-debuginfo-16.08.2-2.2 libKF5Syndication5-16.08.2-2.2 libKF5Syndication5-debuginfo-16.08.2-2.2 libKF5Tnef5-16.08.2-2.2 libKF5Tnef5-debuginfo-16.08.2-2.2 libaccounts-glib-debugsource-1.21-2.2 libaccounts-glib-devel-1.21-2.2 libaccounts-glib-devel-debuginfo-1.21-2.2 libaccounts-glib-tools-1.21-2.2 libaccounts-glib-tools-debuginfo-1.21-2.2 libaccounts-glib0-1.21-2.2 libaccounts-glib0-debuginfo-1.21-2.2 libaccounts-qt5-1-1.13-2.2 libaccounts-qt5-1-debuginfo-1.13-2.2 libaccounts-qt5-debugsource-1.13-2.2 libaccounts-qt5-devel-1.13-2.2 libaccounts-qt5-tools-1.13-2.2 libaccounts-qt5-tools-debuginfo-1.13-2.2 libakonadi4-4.14.10-2.2 libakonadi4-debuginfo-4.14.10-2.2 libakonadiprotocolinternals-devel-1.13.0-2.2 libakonadiprotocolinternals1-1.13.0-2.2 libakonadiprotocolinternals1-debuginfo-1.13.0-2.2 libastro1-16.08.2-2.21 libastro1-debuginfo-16.08.2-2.21 libavcodec-devel-3.1.3-2.2 libavcodec57-3.1.3-2.2 libavcodec57-debuginfo-3.1.3-2.2 libavdevice-devel-3.1.3-2.2 libavdevice57-3.1.3-2.2 libavdevice57-debuginfo-3.1.3-2.2 libavfilter-devel-3.1.3-2.2 libavfilter6-3.1.3-2.2 libavfilter6-debuginfo-3.1.3-2.2 libavformat-devel-3.1.3-2.2 libavformat57-3.1.3-2.2 libavformat57-debuginfo-3.1.3-2.2 libavresample-devel-3.1.3-2.2 libavresample3-3.1.3-2.2 libavresample3-debuginfo-3.1.3-2.2 libavutil-devel-3.1.3-2.2 libavutil55-3.1.3-2.2 libavutil55-debuginfo-3.1.3-2.2 libdolphinvcs5-16.08.2-2.18 libdolphinvcs5-debuginfo-16.08.2-2.18 libgravatar-16.08.2-2.2 libgravatar-debugsource-16.08.2-2.2 libgravatar-devel-16.08.2-2.2 libjsoncpp1-1.7.3-2.2 libjsoncpp1-debuginfo-1.7.3-2.2 libkaccounts1-16.08.2-2.2 libkaccounts1-debuginfo-16.08.2-2.2 libkatepartinterfaces4-4.14.3-2.2 libkatepartinterfaces4-debuginfo-4.14.3-2.2 libkcddb4-16.08.2-2.2 libkcddb4-debuginfo-16.08.2-2.2 libkcddb4-debugsource-16.08.2-2.2 libkcddb4-devel-16.08.2-2.2 libkcompactdisc4-16.08.1-2.2 libkcompactdisc4-debuginfo-16.08.1-2.2 libkcompactdisc4-debugsource-16.08.1-2.2 libkcompactdisc4-devel-16.08.1-2.2 libkdcraw-debugsource-16.08.2-2.2 libkdcraw-devel-16.08.2-2.2 libkdegames-16.08.2-2.13 libkdegames-debugsource-16.08.2-2.13 libkdegames-devel-16.08.2-2.13 libkdegames4-14.12.3-2.6 libkdegames4-debugsource-14.12.3-2.6 libkdegames4-devel-14.12.3-2.6 libkdegames6-14.12.3-2.6 libkdegames6-debuginfo-14.12.3-2.6 libkdepim-16.08.2-2.7 libkdepim-debuginfo-16.08.2-2.7 libkdepim-debugsource-16.08.2-2.7 libkdepim-devel-16.08.2-2.7 libkdepimlibs4-4.14.10-2.2 libkdepimlibs4-debuginfo-4.14.10-2.2 libkdepimlibs4-devel-4.14.10-2.2 libkdepimlibs4-devel-debuginfo-4.14.10-2.2 libkeduvocdocument-debugsource-16.08.2-2.2 libkeduvocdocument-devel-16.08.2-2.2 libkerfuffle16-16.08.2-2.12 libkerfuffle16-debuginfo-16.08.2-2.12 libkexiv2-debugsource-16.08.2-2.2 libkexiv2-devel-16.08.2-2.2 libkf5kdegames6-16.08.2-2.13 libkf5kdegames6-debuginfo-16.08.2-2.13 libkgapi-debugsource-5.3.1-2.2 libkgapi-devel-5.3.1-2.2 libkgeomap-16.08.2-2.2 libkgeomap-debugsource-16.08.2-2.2 libkgeomap-devel-16.08.2-2.2 libkipi-data-16.08.2-2.2 libkipi-debugsource-16.08.2-2.2 libkipi-devel-16.08.2-2.2 libkleo-16.08.2-2.5 libkleo-debugsource-16.08.2-2.5 libkleo-devel-16.08.2-2.5 libkmahjongg-16.08.2-2.21 libkmahjongg-debugsource-16.08.2-2.21 libkmahjongg-devel-16.08.2-2.21 libkmahjongg4-14.12.3-2.7 libkmahjongg4-debugsource-14.12.3-2.7 libkmahjongg4-devel-14.12.3-2.7 libkmahjongglib4-14.12.3-2.7 libkmahjongglib4-debuginfo-14.12.3-2.7 libkolab-qt5-debugsource-1.0.2-2.2 libkolab-qt5-devel-1.0.2-2.2 libkolab1-1.0.2-2.2 libkolab1-debuginfo-1.0.2-2.2 libkolabxml-debugsource-1.1.2-2.3 libkolabxml-devel-1.1.2-2.3 libkolabxml1-1.1.2-2.3 libkolabxml1-debuginfo-1.1.2-2.3 libkomparediff2-5-16.08.2-2.2 libkomparediff2-5-debuginfo-16.08.2-2.2 libkomparediff2-debugsource-16.08.2-2.2 libkomparediff2-devel-16.08.2-2.2 libkonq-devel-16.08.2-2.11 libkonq5-16.08.2-2.11 libkonq5-debuginfo-16.08.2-2.11 libksane-debugsource-16.08.2-2.2 libksane-devel-16.08.2-2.2 libksieve-16.08.2-2.2 libksieve-debuginfo-16.08.2-2.2 libksieve-debugsource-16.08.2-2.2 libksieve-devel-16.08.2-2.2 libktpaccountskcminternal9-16.08.2-2.2 libktpaccountskcminternal9-debuginfo-16.08.2-2.2 liblibkremotecontrol1-16.08.2-2.2 liblibkremotecontrol1-debuginfo-16.08.2-2.2 libmarblewidget-qt5-25-16.08.2-2.21 libmarblewidget-qt5-25-debuginfo-16.08.2-2.21 libmlt++-devel-6.2.0-2.2 libmlt++3-6.2.0-2.2 libmlt++3-debuginfo-6.2.0-2.2 libmlt-debugsource-6.2.0-2.2 libmlt-devel-6.2.0-2.2 libmlt6-6.2.0-2.2 libmlt6-debuginfo-6.2.0-2.2 libmlt6-modules-6.2.0-2.2 libmlt6-modules-debuginfo-6.2.0-2.2 libpostproc-devel-3.1.3-2.2 libpostproc54-3.1.3-2.2 libpostproc54-debuginfo-3.1.3-2.2 librocsgraphtheory0-16.08.2-2.25 librocsgraphtheory0-debuginfo-16.08.2-2.25 libsignon-glib-debugsource-1.13+16.04.20151209.1-2.2 libsignon-glib-devel-1.13+16.04.20151209.1-2.2 libsignon-glib1-1.13+16.04.20151209.1-2.2 libsignon-glib1-debuginfo-1.13+16.04.20151209.1-2.2 libsignon-qt5-1-8.57-2.7 libsignon-qt5-1-debuginfo-8.57-2.7 libsignon-qt5-devel-8.57-2.7 libswresample-devel-3.1.3-2.2 libswresample2-3.1.3-2.2 libswresample2-debuginfo-3.1.3-2.2 libswscale-devel-3.1.3-2.2 libswscale4-3.1.3-2.2 libswscale4-debuginfo-3.1.3-2.2 libtelepathy-logger-qt5-15.04.0-2.2 libtelepathy-logger-qt5-debuginfo-15.04.0-2.2 lokalize-16.08.2-2.12 lokalize-debuginfo-16.08.2-2.12 lokalize-debugsource-16.08.2-2.12 lskat-16.08.2-2.2 lskat-debuginfo-16.08.2-2.2 lskat-debugsource-16.08.2-2.2 mailcommon-16.08.2-2.2 mailcommon-debugsource-16.08.2-2.2 mailcommon-devel-16.08.2-2.2 mailcommon-devel-debuginfo-16.08.2-2.2 mailimporter-16.08.2-2.2 mailimporter-debugsource-16.08.2-2.2 mailimporter-devel-16.08.2-2.2 marble-16.08.2-2.21 marble-debuginfo-16.08.2-2.21 marble-devel-16.08.2-2.21 marble-kde-16.08.2-2.21 marble-kde-debuginfo-16.08.2-2.21 marble-qt-16.08.2-2.21 marble-qt-debuginfo-16.08.2-2.21 melt-6.2.0-2.2 melt6-6.2.0-2.2 melt6-debuginfo-6.2.0-2.2 messagelib-16.08.2-2.2 messagelib-debuginfo-16.08.2-2.2 messagelib-debugsource-16.08.2-2.2 messagelib-devel-16.08.2-2.2 mobipocket-16.08.2-2.2 mobipocket-debuginfo-16.08.2-2.2 mobipocket-debugsource-16.08.2-2.2 mobipocket-devel-16.08.2-2.2 okteta-16.08.2-2.20 okteta-debuginfo-16.08.2-2.20 okteta-debugsource-16.08.2-2.20 okteta-devel-16.08.2-2.20 okular-16.08.2-2.2 okular-debuginfo-16.08.2-2.2 okular-debugsource-16.08.2-2.2 okular-devel-16.08.2-2.2 palapeli-16.08.2-2.2 palapeli-debuginfo-16.08.2-2.2 palapeli-debugsource-16.08.2-2.2 palapeli-devel-16.08.2-2.2 parley-16.08.2-2.15 parley-debuginfo-16.08.2-2.15 parley-debugsource-16.08.2-2.15 php-libkolab1-1.0.2-2.2 php-libkolab1-debuginfo-1.0.2-2.2 php-libkolabxml1-1.1.2-2.3 php-libkolabxml1-debuginfo-1.1.2-2.3 picmi-16.08.2-2.20 picmi-debuginfo-16.08.2-2.20 picmi-debugsource-16.08.2-2.20 pimcommon-16.08.2-2.6 pimcommon-debugsource-16.08.2-2.6 pimcommon-devel-16.08.2-2.6 pimcommon-devel-debuginfo-16.08.2-2.6 plasma-theme-oxygen-16.08.2-2.13 python-libaccounts-1.21-2.2 python-libkolab1-1.0.2-2.2 python-libkolab1-debuginfo-1.0.2-2.2 python-libkolabxml1-1.1.2-2.3 python-libkolabxml1-debuginfo-1.1.2-2.3 python-mlt-6.2.0-2.2 python-mlt-debuginfo-6.2.0-2.2 python3-libaccounts-1.21-2.2 rocs-16.08.2-2.25 rocs-debuginfo-16.08.2-2.25 rocs-debugsource-16.08.2-2.25 rocs-devel-16.08.2-2.25 signon-debugsource-8.57-2.7 signon-kwallet-extension-16.08.2-2.2 signon-kwallet-extension-debuginfo-16.08.2-2.2 signon-kwallet-extension-debugsource-16.08.2-2.2 signon-plugin-oauth2-0.20-2.4 signon-plugin-oauth2-debuginfo-0.20-2.4 signon-plugin-oauth2-debugsource-0.20-2.4 signon-plugin-oauth2-devel-0.20-2.4 signon-plugins-8.57-2.7 signon-plugins-debuginfo-8.57-2.7 signon-plugins-devel-8.57-2.7 signon-ui-0.15-2.4 signon-ui-debuginfo-0.15-2.4 signon-ui-debugsource-0.15-2.4 signond-8.57-2.7 signond-debuginfo-8.57-2.7 signond-libs-8.57-2.7 signond-libs-debuginfo-8.57-2.7 signond-libs-devel-8.57-2.7 spectacle-16.08.2-2.19 spectacle-debuginfo-16.08.2-2.19 spectacle-debugsource-16.08.2-2.19 spectacle-doc-16.08.2-2.19 svgpart-16.08.2-2.2 svgpart-debuginfo-16.08.2-2.2 svgpart-debugsource-16.08.2-2.2 sweeper-16.08.2-2.2 sweeper-debuginfo-16.08.2-2.2 sweeper-debugsource-16.08.2-2.2 syndication-debugsource-16.08.2-2.2 syndication-devel-16.08.2-2.2 telepathy-accounts-signon-1.0-2.2 telepathy-accounts-signon-debuginfo-1.0-2.2 telepathy-logger-qt5-debugsource-15.04.0-2.2 telepathy-logger-qt5-devel-15.04.0-2.2 typelib-1_0-Accounts-1_0-1.21-2.2 typelib-1_0-Signon-1_0-1.13+16.04.20151209.1-2.2 umbrello-16.08.2-2.2 umbrello-debuginfo-16.08.2-2.2 umbrello-debugsource-16.08.2-2.2 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): fonts-KanjiStrokeOrders-16.08.2-2.49 kde-l10n-ar-16.08.2-2.11 kde-l10n-ast-16.08.2-2.11 kde-l10n-bg-16.08.2-2.11 kde-l10n-bs-16.08.2-2.11 kde-l10n-ca-16.08.2-2.11 kde-l10n-caValencia-16.08.2-2.11 kde-l10n-cs-16.08.2-2.11 kde-l10n-da-16.08.2-2.11 kde-l10n-da-data-16.08.2-2.11 kde-l10n-da-doc-16.08.2-2.11 kde-l10n-de-16.08.2-2.11 kde-l10n-de-data-16.08.2-2.11 kde-l10n-de-doc-16.08.2-2.11 kde-l10n-el-16.08.2-2.11 kde-l10n-en_GB-16.08.2-2.11 kde-l10n-en_GB-data-16.08.2-2.11 kde-l10n-en_GB-doc-16.08.2-2.11 kde-l10n-eo-16.08.2-2.11 kde-l10n-es-16.08.2-2.11 kde-l10n-es-data-16.08.2-2.11 kde-l10n-es-doc-16.08.2-2.11 kde-l10n-et-16.08.2-2.11 kde-l10n-et-data-16.08.2-2.11 kde-l10n-et-doc-16.08.2-2.11 kde-l10n-eu-16.08.2-2.11 kde-l10n-fa-16.08.2-2.11 kde-l10n-fi-16.08.2-2.11 kde-l10n-fr-16.08.2-2.11 kde-l10n-fr-data-16.08.2-2.11 kde-l10n-fr-doc-16.08.2-2.11 kde-l10n-ga-16.08.2-2.11 kde-l10n-gl-16.08.2-2.11 kde-l10n-he-16.08.2-2.11 kde-l10n-hi-16.08.2-2.11 kde-l10n-hr-16.08.2-2.11 kde-l10n-hu-16.08.2-2.11 kde-l10n-ia-16.08.2-2.11 kde-l10n-id-16.08.2-2.11 kde-l10n-is-16.08.2-2.11 kde-l10n-it-16.08.2-2.11 kde-l10n-it-data-16.08.2-2.11 kde-l10n-it-doc-16.08.2-2.11 kde-l10n-ja-16.08.2-2.11 kde-l10n-kk-16.08.2-2.11 kde-l10n-km-16.08.2-2.11 kde-l10n-ko-16.08.2-2.11 kde-l10n-lt-16.08.2-2.11 kde-l10n-lv-16.08.2-2.11 kde-l10n-mr-16.08.2-2.11 kde-l10n-nb-16.08.2-2.11 kde-l10n-nds-16.08.2-2.11 kde-l10n-nl-16.08.2-2.11 kde-l10n-nl-data-16.08.2-2.11 kde-l10n-nl-doc-16.08.2-2.11 kde-l10n-nn-16.08.2-2.11 kde-l10n-pa-16.08.2-2.11 kde-l10n-pl-16.08.2-2.11 kde-l10n-pl-data-16.08.2-2.11 kde-l10n-pl-doc-16.08.2-2.11 kde-l10n-pt-16.08.2-2.11 kde-l10n-pt_BR-16.08.2-2.11 kde-l10n-pt_BR-data-16.08.2-2.11 kde-l10n-pt_BR-doc-16.08.2-2.11 kde-l10n-ro-16.08.2-2.11 kde-l10n-ru-16.08.2-2.11 kde-l10n-ru-data-16.08.2-2.11 kde-l10n-ru-doc-16.08.2-2.11 kde-l10n-sk-16.08.2-2.11 kde-l10n-sl-16.08.2-2.11 kde-l10n-sr-16.08.2-2.11 kde-l10n-sv-16.08.2-2.11 kde-l10n-sv-data-16.08.2-2.11 kde-l10n-sv-doc-16.08.2-2.11 kde-l10n-tr-16.08.2-2.11 kde-l10n-ug-16.08.2-2.11 kde-l10n-uk-16.08.2-2.11 kde-l10n-uk-data-16.08.2-2.11 kde-l10n-uk-doc-16.08.2-2.11 kde-l10n-wa-16.08.2-2.11 kde-l10n-zh_CN-16.08.2-2.11 kde-l10n-zh_TW-16.08.2-2.11 kdeedu-data-16.08.2-2.2 kdegames-carddecks-default-16.08.2-2.13 kdegames-carddecks-other-16.08.2-2.13 kdegames4-carddecks-default-14.12.3-2.6 kdegames4-carddecks-other-14.12.3-2.6 kjots-lang-5.0.1-2.2 kwebkitpart-lang-1.3.4-2.2 libaccounts-glib-docs-1.21-2.2 libaccounts-qt5-doc-1.13-2.2 libkgapi-lang-5.3.1-2.2 libmlt6-data-6.2.0-2.2 libsignon-qt5-docs-8.57-2.7 marble-data-16.08.2-2.21 marble-doc-16.08.2-2.21 palapeli-data-16.08.2-2.2 signon-plugins-docs-8.57-2.7 signond-docs-8.57-2.7 References:

1 0

openSUSE-OU-2017:0566-1: moderate: Add extra KDE packages to the SUSE Package Hub
by maintenance＠opensuse.org 27 Feb '17

27 Feb '17

openSUSE Optional Update: Add extra KDE packages to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0566-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update adds the following extra KDE packages to the SUSE Package Hub: amarok 2.8.0 google-noto-fonts 20151215 k3b 2.0.3 kdeconnect-kde 1.0.1 kdevelop5 5.0.1 kdevelop5-pg-qt 2.0.0 kdevelop5-plugin-php 5.0.1 kdevplatform 5.0.1 krusader 2.5.0 ktorrent 5.0.1 libktorrent 2.0.1 yakuake 3.0.2 Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-252=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): amarok-lang-2.8.0-2.7 google-noto-fonts-doc-20151215-2.2 k3b-lang-2.0.3-2.7 kdeconnect-kde-lang-1.0.1-2.8 kdevelop5-lang-5.0.1-2.4 kdevelop5-plugin-php-lang-5.0.1-2.7 kdevplatform-lang-5.0.1-2.2 ktorrent-lang-5.0.1-2.10 libktorrent6-lang-2.0.1-2.2 noto-coloremoji-fonts-20151215-2.2 noto-emoji-fonts-20151215-2.2 noto-kufiarabic-fonts-20151215-2.2 noto-naskharabic-fonts-20151215-2.2 noto-nastaliqurdu-fonts-20151215-2.2 noto-sans-armenian-fonts-20151215-2.2 noto-sans-avestan-fonts-20151215-2.2 noto-sans-balinese-fonts-20151215-2.2 noto-sans-bamum-fonts-20151215-2.2 noto-sans-batak-fonts-20151215-2.2 noto-sans-bengali-fonts-20151215-2.2 noto-sans-brahmi-fonts-20151215-2.2 noto-sans-buginese-fonts-20151215-2.2 noto-sans-buhid-fonts-20151215-2.2 noto-sans-canadianaboriginal-fonts-20151215-2.2 noto-sans-carian-fonts-20151215-2.2 noto-sans-cham-fonts-20151215-2.2 noto-sans-cherokee-fonts-20151215-2.2 noto-sans-cjk-fonts-20151215-2.2 noto-sans-coptic-fonts-20151215-2.2 noto-sans-cuneiform-fonts-20151215-2.2 noto-sans-cypriot-fonts-20151215-2.2 noto-sans-deseret-fonts-20151215-2.2 noto-sans-devanagari-fonts-20151215-2.2 noto-sans-egyptianhieroglyphs-fonts-20151215-2.2 noto-sans-ethiopic-fonts-20151215-2.2 noto-sans-fonts-20151215-2.2 noto-sans-georgian-fonts-20151215-2.2 noto-sans-glagolitic-fonts-20151215-2.2 noto-sans-gothic-fonts-20151215-2.2 noto-sans-gujarati-fonts-20151215-2.2 noto-sans-gurmukhi-fonts-20151215-2.2 noto-sans-hanunoo-fonts-20151215-2.2 noto-sans-hebrew-fonts-20151215-2.2 noto-sans-imperialaramaic-fonts-20151215-2.2 noto-sans-inscriptionalpahlavi-fonts-20151215-2.2 noto-sans-inscriptionalparthian-fonts-20151215-2.2 noto-sans-javanese-fonts-20151215-2.2 noto-sans-kaithi-fonts-20151215-2.2 noto-sans-kannada-fonts-20151215-2.2 noto-sans-kayahli-fonts-20151215-2.2 noto-sans-kharoshthi-fonts-20151215-2.2 noto-sans-khmer-fonts-20151215-2.2 noto-sans-lao-fonts-20151215-2.2 noto-sans-lepcha-fonts-20151215-2.2 noto-sans-limbu-fonts-20151215-2.2 noto-sans-linearb-fonts-20151215-2.2 noto-sans-lisu-fonts-20151215-2.2 noto-sans-lycian-fonts-20151215-2.2 noto-sans-lydian-fonts-20151215-2.2 noto-sans-malayalam-fonts-20151215-2.2 noto-sans-mandaic-fonts-20151215-2.2 noto-sans-meeteimayek-fonts-20151215-2.2 noto-sans-mongolian-fonts-20151215-2.2 noto-sans-myanmar-fonts-20151215-2.2 noto-sans-newtailue-fonts-20151215-2.2 noto-sans-nko-fonts-20151215-2.2 noto-sans-ogham-fonts-20151215-2.2 noto-sans-olchiki-fonts-20151215-2.2 noto-sans-olditalic-fonts-20151215-2.2 noto-sans-oldpersian-fonts-20151215-2.2 noto-sans-oldsoutharabian-fonts-20151215-2.2 noto-sans-oldturkic-fonts-20151215-2.2 noto-sans-oriya-fonts-20151215-2.2 noto-sans-osmanya-fonts-20151215-2.2 noto-sans-phagspa-fonts-20151215-2.2 noto-sans-phoenician-fonts-20151215-2.2 noto-sans-rejang-fonts-20151215-2.2 noto-sans-runic-fonts-20151215-2.2 noto-sans-samaritan-fonts-20151215-2.2 noto-sans-saurashtra-fonts-20151215-2.2 noto-sans-shavian-fonts-20151215-2.2 noto-sans-sinhala-fonts-20151215-2.2 noto-sans-sundanese-fonts-20151215-2.2 noto-sans-sylotinagri-fonts-20151215-2.2 noto-sans-symbols-fonts-20151215-2.2 noto-sans-syriaceastern-fonts-20151215-2.2 noto-sans-syriacestrangela-fonts-20151215-2.2 noto-sans-syriacwestern-fonts-20151215-2.2 noto-sans-tagalog-fonts-20151215-2.2 noto-sans-tagbanwa-fonts-20151215-2.2 noto-sans-taile-fonts-20151215-2.2 noto-sans-taitham-fonts-20151215-2.2 noto-sans-taiviet-fonts-20151215-2.2 noto-sans-tamil-fonts-20151215-2.2 noto-sans-telugu-fonts-20151215-2.2 noto-sans-thaana-fonts-20151215-2.2 noto-sans-thai-fonts-20151215-2.2 noto-sans-tibetan-fonts-20151215-2.2 noto-sans-tifinagh-fonts-20151215-2.2 noto-sans-ugaritic-fonts-20151215-2.2 noto-sans-vai-fonts-20151215-2.2 noto-sans-yi-fonts-20151215-2.2 noto-serif-armenian-fonts-20151215-2.2 noto-serif-fonts-20151215-2.2 noto-serif-georgian-fonts-20151215-2.2 noto-serif-khmer-fonts-20151215-2.2 noto-serif-lao-fonts-20151215-2.2 noto-serif-thai-fonts-20151215-2.2 yakuake-lang-3.0.2-2.32 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): amarok-2.8.0-2.7 amarok-debuginfo-2.8.0-2.7 amarok-debugsource-2.8.0-2.7 k3b-2.0.3-2.7 k3b-debuginfo-2.0.3-2.7 k3b-debugsource-2.0.3-2.7 k3b-devel-2.0.3-2.7 kdeconnect-kde-1.0.1-2.8 kdeconnect-kde-debuginfo-1.0.1-2.8 kdeconnect-kde-debugsource-1.0.1-2.8 kdevelop5-5.0.1-2.4 kdevelop5-debuginfo-5.0.1-2.4 kdevelop5-debugsource-5.0.1-2.4 kdevelop5-pg-qt-2.0.0-2.2 kdevelop5-pg-qt-debuginfo-2.0.0-2.2 kdevelop5-pg-qt-debugsource-2.0.0-2.2 kdevelop5-plugin-php-5.0.1-2.7 kdevelop5-plugin-php-debuginfo-5.0.1-2.7 kdevelop5-plugin-php-debugsource-5.0.1-2.7 kdevplatform-5.0.1-2.2 kdevplatform-debuginfo-5.0.1-2.2 kdevplatform-debugsource-5.0.1-2.2 kdevplatform-devel-5.0.1-2.2 kio_iso-2.5.0-2.18 kio_iso-debuginfo-2.5.0-2.18 krusader-2.5.0-2.18 krusader-debuginfo-2.5.0-2.18 krusader-debugsource-2.5.0-2.18 krusader-doc-2.5.0-2.18 ktorrent-5.0.1-2.10 ktorrent-debuginfo-5.0.1-2.10 ktorrent-debugsource-5.0.1-2.10 libkdevplatform10-5.0.1-2.2 libkdevplatform10-debuginfo-5.0.1-2.2 libktorrent-debugsource-2.0.1-2.2 libktorrent-devel-2.0.1-2.2 libktorrent6-2.0.1-2.2 libktorrent6-debuginfo-2.0.1-2.2 yakuake-3.0.2-2.32 yakuake-debuginfo-3.0.2-2.32 yakuake-debugsource-3.0.2-2.32 References:

1 0

openSUSE-SU-2017:0565-1: important: Security update of chromium
by opensuse-security＠opensuse.org 27 Feb '17

27 Feb '17

openSUSE Security Update: Security update of chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0565-1 Rating: important References: #1022049 Cross-References: CVE-2017-5006 CVE-2017-5007 CVE-2017-5008 CVE-2017-5009 CVE-2017-5010 CVE-2017-5011 CVE-2017-5012 CVE-2017-5013 CVE-2017-5014 CVE-2017-5015 CVE-2017-5016 CVE-2017-5017 CVE-2017-5018 CVE-2017-5019 CVE-2017-5020 CVE-2017-5021 CVE-2017-5022 CVE-2017-5023 CVE-2017-5024 CVE-2017-5025 CVE-2017-5026 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: Google chromium was updated to 56.0.2924.87: * Various small fixes * Disabled option to enable/disable plugins in the chrome://plugins - Changed the build requirement of libavformat to library version 57.41.100, as included in ffmpeg 3.1.1, as only this version properly supports the public AVStream API 'codecpar'. It also contains the version update to 56.0.2924.76 (bsc#1022049): - CVE-2017-5007: Universal XSS in Blink - CVE-2017-5006: Universal XSS in Blink - CVE-2017-5008: Universal XSS in Blink - CVE-2017-5010: Universal XSS in Blink - CVE-2017-5011: Unauthorised file access in Devtools - CVE-2017-5009: Out of bounds memory access in WebRTC - CVE-2017-5012: Heap overflow in V8 - CVE-2017-5013: Address spoofing in Omnibox - CVE-2017-5014: Heap overflow in Skia - CVE-2017-5015: Address spoofing in Omnibox - CVE-2017-5019: Use after free in Renderer - CVE-2017-5016: UI spoofing in Blink - CVE-2017-5017: Uninitialised memory access in webm video - CVE-2017-5018: Universal XSS in chrome://apps - CVE-2017-5020: Universal XSS in chrome://downloads - CVE-2017-5021: Use after free in Extensions - CVE-2017-5022: Bypass of Content Security Policy in Blink - CVE-2017-5023: Type confusion in metrics - CVE-2017-5024: Heap overflow in FFmpeg - CVE-2017-5025: Heap overflow in FFmpeg - CVE-2017-5026: UI spoofing. Credit to Ronni Skansing - Enable VAAPI hardware accelerated video decoding. - Chromium 55.0.2883.87: * various fixes for crashes and specific wesites * update Google pinned certificates Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-272=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-56.0.2924.87-5.1 chromium-56.0.2924.87-5.1 References: https://www.suse.com/security/cve/CVE-2017-5006.html https://www.suse.com/security/cve/CVE-2017-5007.html https://www.suse.com/security/cve/CVE-2017-5008.html https://www.suse.com/security/cve/CVE-2017-5009.html https://www.suse.com/security/cve/CVE-2017-5010.html https://www.suse.com/security/cve/CVE-2017-5011.html https://www.suse.com/security/cve/CVE-2017-5012.html https://www.suse.com/security/cve/CVE-2017-5013.html https://www.suse.com/security/cve/CVE-2017-5014.html https://www.suse.com/security/cve/CVE-2017-5015.html https://www.suse.com/security/cve/CVE-2017-5016.html https://www.suse.com/security/cve/CVE-2017-5017.html https://www.suse.com/security/cve/CVE-2017-5018.html https://www.suse.com/security/cve/CVE-2017-5019.html https://www.suse.com/security/cve/CVE-2017-5020.html https://www.suse.com/security/cve/CVE-2017-5021.html https://www.suse.com/security/cve/CVE-2017-5022.html https://www.suse.com/security/cve/CVE-2017-5023.html https://www.suse.com/security/cve/CVE-2017-5024.html https://www.suse.com/security/cve/CVE-2017-5025.html https://www.suse.com/security/cve/CVE-2017-5026.html https://bugzilla.suse.com/1022049

1 0

openSUSE-OU-2017:0564-1: moderate: Add KDE Frameworks 5.26 to the SUSE Package Hub
by maintenance＠opensuse.org 27 Feb '17

27 Feb '17

openSUSE Optional Update: Add KDE Frameworks 5.26 to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0564-1 Rating: moderate References: #1020597 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update provides KDE Frameworks 5.26 for the SUSE Package Hub. The following packages and versions are included: AppStream 0.10.0 PackageKit-Qt 0.9.5 PackageKit-Qt5 unknown attica-qt5 5.26.0 baloo5 5.26.0 bluedevil5 5.8.2 bluez-qt 5.26.0 breeze 5.8.3 breeze-gtk 5.8.2 breeze4-style 5.8.3 breeze5-icons 5.26.0 discover 5.8.3 extra-cmake-modules 5.26.0 frameworkintegration 5.26.0 hack-fonts 2.020 kactivities-stats 5.26.0 kactivities5 5.26.0 kactivitymanagerd 5.8.2 kapidox 5.25.0 karchive 5.26.0 kauth 5.26.0 kbookmarks 5.26.0 kcm_sddm 5.8.2 kcmutils 5.26.0 kcodecs 5.26.0 kcompletion 5.26.0 kconfig 5.26.0 kconfigwidgets 5.26.0 kcoreaddons 5.26.0 kcrash 5.26.0 kdbusaddons 5.26.0 kde-cli-tools5 5.8.2 kde-gtk-config5 5.8.2 kde-oxygen-fonts 0.4.0 kde-user-manager 5.8.3 kdeclarative 5.26.0 kded 5.26.0 kdelibs4 4.14.26 kdelibs4support 5.26.0 kdesignerplugin 5.26.0 kdesu 5.26.0 kdewebkit 5.26.0 kdnssd-framework 5.26.0 kdoctools 5.26.0 kemoticons 5.26.0 kf5-filesystem 20160807 kfilemetadata5 5.26.0 kgamma5 5.8.2 kglobalaccel 5.26.0 kguiaddons 5.26.0 khotkeys5 5.8.2 khtml 5.26.0 ki18n 5.26.0 kiconthemes 5.26.0 kidletime 5.26.0 kimageformats 5.26.0 kinfocenter5 5.8.2 kinit 5.26.0 kio 5.26.0 kirigami 1.1.0 kitemmodels 5.26.0 kitemviews 5.26.0 kjobwidgets 5.26.0 kjs 5.26.0 kjsembed 5.26.0 kmediaplayer 5.26.0 kmenuedit5 5.8.2 knewstuff 5.26.0 knotifications 5.26.0 knotifyconfig 5.26.0 kpackage 5.26.0 kparts 5.26.0 kpeople5 5.26.0 kplotting 5.26.0 kpty 5.26.0 kross 5.26.0 krunner 5.26.0 kscreen5 5.8.2 kscreenlocker 5.8.2 kservice 5.26.0 ksshaskpass5 5.8.2 ksysguard5 5.8.2 ktexteditor 5.26.0 ktextwidgets 5.26.0 kunitconversion 5.26.0 kwallet 5.26.0 kwayland 5.26.0 kwayland-integration 5.8.2 kwidgetsaddons 5.26.0 kwin5 5.8.3 kwindowsystem 5.26.0 kwrited5 5.8.2 kxmlgui 5.26.0 kxmlrpcclient5 5.26.0 libKF5ModemManagerQt 5.26.0 libKF5NetworkManagerQt 5.26.0 libkdecoration2 5.8.2 libkscreen2 5.8.2 libksysguard5 5.8.2 milou5 5.8.2 oxygen5 5.8.2 oxygen5-icon-theme 5.26.0 patterns-SLE-kde5 20150918 phonon4qt5 4.9.0 phonon4qt5-backend-gstreamer 4.9.0 plasma-framework 5.27.0~20160928~b115ea1.git plasma-nm5 5.8.2 plasma5-SLE 42.1.1 plasma5-addons 5.8.3 plasma5-desktop 5.8.3 plasma5-integration 5.8.2 plasma5-pa 5.8.3 plasma5-sdk 5.8.2 plasma5-session 5.8.3 plasma5-workspace 5.8.3 plasma5-workspace-wallpapers 5.7.3 polkit-kde-agent-5 5.8.2 powerdevil5 5.8.3 sddm 0.13.0 solid 5.26.0 sonnet 5.26.0 systemsettings5 5.8.2 threadweaver 5.26.0 Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-250=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): AppStream-0.10.0-3.2 AppStream-debuginfo-0.10.0-3.2 AppStream-debugsource-0.10.0-3.2 AppStream-devel-0.10.0-3.2 PackageKit-Qt-debugsource-0.9.5-3.2 PackageKit-Qt-devel-0.9.5-3.2 PackageKit-Qt5-debugsource-0.9.5-3.2 PackageKit-Qt5-devel-0.9.5-3.2 attica-qt5-debugsource-5.26.0-3.2 attica-qt5-devel-5.26.0-3.2 baloo5-5.26.0-3.2 baloo5-debugsource-5.26.0-3.2 baloo5-devel-5.26.0-3.2 baloo5-file-5.26.0-3.2 baloo5-file-debuginfo-5.26.0-3.2 baloo5-imports-5.26.0-3.2 baloo5-imports-debuginfo-5.26.0-3.2 baloo5-kioslaves-5.26.0-3.2 baloo5-kioslaves-debuginfo-5.26.0-3.2 baloo5-tools-5.26.0-3.2 baloo5-tools-debuginfo-5.26.0-3.2 bluedevil5-5.8.2-3.2 bluedevil5-debuginfo-5.8.2-3.2 bluedevil5-debugsource-5.8.2-3.2 bluez-qt-debugsource-5.26.0-3.2 bluez-qt-devel-5.26.0-3.2 bluez-qt-imports-5.26.0-3.2 bluez-qt-imports-debuginfo-5.26.0-3.2 bluez-qt-udev-5.26.0-3.2 breeze-5.8.3-3.2 breeze-debugsource-5.8.3-3.2 breeze-gtk-debugsource-5.8.2-3.2 breeze4-style-5.8.3-3.2 breeze4-style-debuginfo-5.8.3-3.2 breeze4-style-debugsource-5.8.3-3.2 breeze5-decoration-5.8.3-3.2 breeze5-decoration-debuginfo-5.8.3-3.2 breeze5-style-5.8.3-3.2 breeze5-style-debuginfo-5.8.3-3.2 discover-5.8.3-3.3 discover-debuginfo-5.8.3-3.3 discover-debugsource-5.8.3-3.3 discover-plasmoid-5.8.3-3.3 drkonqi5-5.8.3-2.4 drkonqi5-debuginfo-5.8.3-2.4 extra-cmake-modules-5.26.0-3.2 frameworkintegration-debugsource-5.26.0-3.2 frameworkintegration-devel-5.26.0-3.2 frameworkintegration-plugin-5.26.0-3.2 frameworkintegration-plugin-debuginfo-5.26.0-3.2 kactivities-stats-debugsource-5.26.0-3.2 kactivities-stats-devel-5.26.0-3.2 kactivities5-debugsource-5.26.0-3.2 kactivities5-devel-5.26.0-3.2 kactivities5-imports-5.26.0-3.2 kactivities5-imports-debuginfo-5.26.0-3.2 kactivities5-tools-5.26.0-3.2 kactivities5-tools-debuginfo-5.26.0-3.2 kactivitymanagerd-5.8.2-3.2 kactivitymanagerd-debuginfo-5.8.2-3.2 kactivitymanagerd-debugsource-5.8.2-3.2 kactivitymanagerd-lang-5.8.2-3.2 kapidox-5.25.0-3.2 karchive-debugsource-5.26.0-3.2 karchive-devel-5.26.0-3.2 kauth-debugsource-5.26.0-3.2 kauth-devel-5.26.0-3.2 kbookmarks-debugsource-5.26.0-3.2 kbookmarks-devel-5.26.0-3.2 kcm_sddm-5.8.2-3.2 kcm_sddm-debuginfo-5.8.2-3.2 kcm_sddm-debugsource-5.8.2-3.2 kcmutils-debugsource-5.26.0-3.2 kcmutils-devel-5.26.0-3.2 kcodecs-debugsource-5.26.0-3.2 kcodecs-devel-5.26.0-3.2 kcompletion-debugsource-5.26.0-3.2 kcompletion-devel-5.26.0-3.2 kconf_update5-5.26.0-3.2 kconf_update5-debuginfo-5.26.0-3.2 kconfig-debugsource-5.26.0-3.2 kconfig-devel-5.26.0-3.2 kconfig-devel-debuginfo-5.26.0-3.2 kconfigwidgets-debugsource-5.26.0-3.2 kconfigwidgets-devel-5.26.0-3.2 kcoreaddons-5.26.0-3.2 kcoreaddons-debugsource-5.26.0-3.2 kcoreaddons-devel-5.26.0-3.2 kcoreaddons-devel-debuginfo-5.26.0-3.2 kcrash-debugsource-5.26.0-3.2 kcrash-devel-5.26.0-3.2 kdbusaddons-debugsource-5.26.0-3.2 kdbusaddons-devel-5.26.0-3.2 kdbusaddons-tools-5.26.0-3.2 kdbusaddons-tools-debuginfo-5.26.0-3.2 kde-cli-tools5-5.8.2-3.2 kde-cli-tools5-debuginfo-5.8.2-3.2 kde-cli-tools5-debugsource-5.8.2-3.2 kde-gtk-config5-5.8.2-3.2 kde-gtk-config5-debuginfo-5.8.2-3.2 kde-gtk-config5-debugsource-5.8.2-3.2 kde-user-manager-5.8.3-3.2 kde-user-manager-debuginfo-5.8.3-3.2 kde-user-manager-debugsource-5.8.3-3.2 kdeclarative-components-5.26.0-3.2 kdeclarative-components-debuginfo-5.26.0-3.2 kdeclarative-debugsource-5.26.0-3.2 kdeclarative-devel-5.26.0-3.2 kdeclarative-tools-5.26.0-3.2 kdeclarative-tools-debuginfo-5.26.0-3.2 kded-5.26.0-3.2 kded-debuginfo-5.26.0-3.2 kded-debugsource-5.26.0-3.2 kded-devel-5.26.0-3.2 kdelibs4-4.14.25-2.7 kdelibs4-branding-upstream-4.14.25-2.7 kdelibs4-core-4.14.25-2.7 kdelibs4-core-debuginfo-4.14.25-2.7 kdelibs4-debuginfo-4.14.25-2.7 kdelibs4-debugsource-4.14.25-2.7 kdelibs4-doc-4.14.25-2.7 kdelibs4-doc-debuginfo-4.14.25-2.7 kdelibs4support-5.26.0-2.10 kdelibs4support-debuginfo-5.26.0-2.10 kdelibs4support-debugsource-5.26.0-2.10 kdelibs4support-devel-5.26.0-2.10 kdesignerplugin-5.26.0-2.11 kdesignerplugin-debuginfo-5.26.0-2.11 kdesignerplugin-debugsource-5.26.0-2.11 kdesignerplugin-devel-5.26.0-2.11 kdesu-debugsource-5.26.0-2.6 kdesu-devel-5.26.0-2.6 kdewebkit-debugsource-5.26.0-2.5 kdewebkit-devel-5.26.0-2.5 kdnssd-framework-debugsource-5.26.0-2.6 kdnssd-framework-devel-5.26.0-2.6 kdoctools-5.26.0-2.7 kdoctools-debuginfo-5.26.0-2.7 kdoctools-debugsource-5.26.0-2.7 kdoctools-devel-5.26.0-2.7 kemoticons-debugsource-5.26.0-2.6 kemoticons-devel-5.26.0-2.6 kf5-filesystem-20160807-2.6 kfilemetadata5-5.26.0-2.6 kfilemetadata5-debuginfo-5.26.0-2.6 kfilemetadata5-debugsource-5.26.0-2.6 kfilemetadata5-devel-5.26.0-2.6 kgamma5-5.8.2-2.6 kgamma5-debuginfo-5.8.2-2.6 kgamma5-debugsource-5.8.2-2.6 kglobalaccel-debugsource-5.26.0-2.6 kglobalaccel-devel-5.26.0-2.6 kglobalaccel5-5.26.0-2.6 kglobalaccel5-debuginfo-5.26.0-2.6 kguiaddons-debugsource-5.26.0-2.6 kguiaddons-devel-5.26.0-2.6 khotkeys5-5.8.2-2.7 khotkeys5-debuginfo-5.8.2-2.7 khotkeys5-debugsource-5.8.2-2.7 khotkeys5-devel-5.8.2-2.7 khtml-debugsource-5.26.0-2.5 khtml-devel-5.26.0-2.5 ki18n-debugsource-5.26.0-2.6 ki18n-devel-5.26.0-2.6 kiconthemes-debugsource-5.26.0-2.6 kiconthemes-devel-5.26.0-2.6 kiconthemes-devel-debuginfo-5.26.0-2.6 kidletime-debugsource-5.26.0-2.6 kidletime-devel-5.26.0-2.6 kimageformats-5.26.0-2.6 kimageformats-debuginfo-5.26.0-2.6 kimageformats-debugsource-5.26.0-2.6 kinfocenter5-5.8.2-2.5 kinfocenter5-debuginfo-5.8.2-2.5 kinfocenter5-debugsource-5.8.2-2.5 kinit-5.26.0-2.5 kinit-debuginfo-5.26.0-2.5 kinit-debugsource-5.26.0-2.5 kinit-devel-5.26.0-2.5 kio-5.26.0-2.9 kio-core-5.26.0-2.9 kio-core-debuginfo-5.26.0-2.9 kio-debuginfo-5.26.0-2.9 kio-debugsource-5.26.0-2.9 kio-devel-5.26.0-2.9 kio-devel-debuginfo-5.26.0-2.9 kirigami-1.1.0-2.5 kirigami-debuginfo-1.1.0-2.5 kirigami-debugsource-1.1.0-2.5 kirigami-devel-1.1.0-2.5 kitemmodels-debugsource-5.26.0-2.6 kitemmodels-devel-5.26.0-2.6 kitemviews-debugsource-5.26.0-2.6 kitemviews-devel-5.26.0-2.6 kjobwidgets-debugsource-5.26.0-2.6 kjobwidgets-devel-5.26.0-2.6 kjs-debugsource-5.26.0-2.6 kjs-devel-5.26.0-2.6 kjs-devel-debuginfo-5.26.0-2.6 kjsembed-debugsource-5.26.0-2.6 kjsembed-devel-5.26.0-2.6 kjsembed-devel-debuginfo-5.26.0-2.6 kmediaplayer-debugsource-5.26.0-2.5 kmediaplayer-devel-5.26.0-2.5 kmenuedit5-5.8.2-2.10 kmenuedit5-debuginfo-5.8.2-2.10 kmenuedit5-debugsource-5.8.2-2.10 knewstuff-debugsource-5.26.0-2.5 knewstuff-devel-5.26.0-2.5 knotifications-debugsource-5.26.0-2.6 knotifications-devel-5.26.0-2.6 knotifyconfig-debugsource-5.26.0-2.5 knotifyconfig-devel-5.26.0-2.5 kpackage-5.26.0-2.6 kpackage-debuginfo-5.26.0-2.6 kpackage-debugsource-5.26.0-2.6 kpackage-devel-5.26.0-2.6 kparts-debugsource-5.26.0-2.5 kparts-devel-5.26.0-2.5 kpeople5-5.26.0-2.6 kpeople5-debuginfo-5.26.0-2.6 kpeople5-debugsource-5.26.0-2.6 kpeople5-devel-5.26.0-2.6 kplotting-debugsource-5.26.0-2.6 kplotting-devel-5.26.0-2.6 kpty-debugsource-5.26.0-2.6 kpty-devel-5.26.0-2.6 kross-5.26.0-2.5 kross-debuginfo-5.26.0-2.5 kross-debugsource-5.26.0-2.5 kross-devel-5.26.0-2.5 kross-devel-debuginfo-5.26.0-2.5 krunner-debugsource-5.26.0-2.5 krunner-devel-5.26.0-2.5 kscreen5-5.8.2-2.6 kscreen5-debuginfo-5.8.2-2.6 kscreen5-debugsource-5.8.2-2.6 kscreenlocker-5.8.2-2.5 kscreenlocker-debuginfo-5.8.2-2.5 kscreenlocker-debugsource-5.8.2-2.5 kscreenlocker-devel-5.8.2-2.5 kservice-5.26.0-2.6 kservice-debuginfo-5.26.0-2.6 kservice-debugsource-5.26.0-2.6 kservice-devel-5.26.0-2.6 ksshaskpass5-5.8.2-2.6 ksshaskpass5-debuginfo-5.8.2-2.6 ksshaskpass5-debugsource-5.8.2-2.6 kssl-5.26.0-2.10 kssl-debuginfo-5.26.0-2.10 ksysguard5-5.8.2-2.5 ksysguard5-debuginfo-5.8.2-2.5 ksysguard5-debugsource-5.8.2-2.5 ktexteditor-5.26.0-2.6 ktexteditor-debuginfo-5.26.0-2.6 ktexteditor-debugsource-5.26.0-2.6 ktexteditor-devel-5.26.0-2.6 ktextwidgets-debugsource-5.26.0-2.6 ktextwidgets-devel-5.26.0-2.6 kunitconversion-debugsource-5.26.0-2.6 kunitconversion-devel-5.26.0-2.6 kwallet-debugsource-5.26.0-2.6 kwallet-devel-5.26.0-2.6 kwallet-tools-5.26.0-2.6 kwallet-tools-debuginfo-5.26.0-2.6 kwallet-tools-lang-5.26.0-2.6 kwalletd5-5.26.0-2.6 kwalletd5-debuginfo-5.26.0-2.6 kwayland-5.26.0-2.6 kwayland-debuginfo-5.26.0-2.6 kwayland-debugsource-5.26.0-2.6 kwayland-devel-5.26.0-2.6 kwayland-devel-debuginfo-5.26.0-2.6 kwayland-integration-5.8.2-2.6 kwayland-integration-debuginfo-5.8.2-2.6 kwayland-integration-debugsource-5.8.2-2.6 kwidgetsaddons-debugsource-5.26.0-2.6 kwidgetsaddons-devel-5.26.0-2.6 kwin5-5.8.3-2.6 kwin5-debuginfo-5.8.3-2.6 kwin5-debugsource-5.8.3-2.6 kwin5-devel-5.8.3-2.6 kwindowsystem-debugsource-5.26.0-2.6 kwindowsystem-devel-5.26.0-2.6 kwrited5-5.8.2-2.6 kwrited5-debuginfo-5.8.2-2.6 kwrited5-debugsource-5.8.2-2.6 kxmlgui-debugsource-5.26.0-2.6 kxmlgui-devel-5.26.0-2.6 kxmlrpcclient5-debugsource-5.26.0-2.5 kxmlrpcclient5-devel-5.26.0-2.5 libAppstreamQt-devel-0.10.0-3.2 libAppstreamQt1-0.10.0-3.2 libAppstreamQt1-debuginfo-0.10.0-3.2 libKF5Activities5-5.26.0-3.2 libKF5Activities5-debuginfo-5.26.0-3.2 libKF5ActivitiesStats1-5.26.0-3.2 libKF5ActivitiesStats1-debuginfo-5.26.0-3.2 libKF5Archive5-5.26.0-3.2 libKF5Archive5-debuginfo-5.26.0-3.2 libKF5Attica5-5.26.0-3.2 libKF5Attica5-debuginfo-5.26.0-3.2 libKF5Auth5-5.26.0-3.2 libKF5Auth5-debuginfo-5.26.0-3.2 libKF5Baloo5-5.26.0-3.2 libKF5Baloo5-debuginfo-5.26.0-3.2 libKF5BalooEngine5-5.26.0-3.2 libKF5BalooEngine5-debuginfo-5.26.0-3.2 libKF5BluezQt6-5.26.0-3.2 libKF5BluezQt6-debuginfo-5.26.0-3.2 libKF5Bookmarks5-5.26.0-3.2 libKF5Bookmarks5-debuginfo-5.26.0-3.2 libKF5CalendarEvents5-5.26.0-3.2 libKF5CalendarEvents5-debuginfo-5.26.0-3.2 libKF5Codecs5-5.26.0-3.2 libKF5Codecs5-debuginfo-5.26.0-3.2 libKF5Completion5-5.26.0-3.2 libKF5Completion5-debuginfo-5.26.0-3.2 libKF5ConfigCore5-5.26.0-3.2 libKF5ConfigCore5-debuginfo-5.26.0-3.2 libKF5ConfigGui5-5.26.0-3.2 libKF5ConfigGui5-debuginfo-5.26.0-3.2 libKF5ConfigWidgets5-5.26.0-3.2 libKF5ConfigWidgets5-debuginfo-5.26.0-3.2 libKF5CoreAddons5-5.26.0-3.2 libKF5CoreAddons5-debuginfo-5.26.0-3.2 libKF5Crash5-5.26.0-3.2 libKF5Crash5-debuginfo-5.26.0-3.2 libKF5DBusAddons5-5.26.0-3.2 libKF5DBusAddons5-debuginfo-5.26.0-3.2 libKF5DNSSD5-5.26.0-2.6 libKF5DNSSD5-debuginfo-5.26.0-2.6 libKF5Declarative5-5.26.0-3.2 libKF5Declarative5-debuginfo-5.26.0-3.2 libKF5Emoticons5-5.26.0-2.6 libKF5Emoticons5-debuginfo-5.26.0-2.6 libKF5GlobalAccel5-5.26.0-2.6 libKF5GlobalAccel5-debuginfo-5.26.0-2.6 libKF5GlobalAccelPrivate5-5.26.0-2.6 libKF5GlobalAccelPrivate5-debuginfo-5.26.0-2.6 libKF5GuiAddons5-5.26.0-2.6 libKF5GuiAddons5-debuginfo-5.26.0-2.6 libKF5I18n5-5.26.0-2.6 libKF5I18n5-debuginfo-5.26.0-2.6 libKF5IconThemes5-5.26.0-2.6 libKF5IconThemes5-debuginfo-5.26.0-2.6 libKF5IdleTime5-5.26.0-2.6 libKF5IdleTime5-debuginfo-5.26.0-2.6 libKF5ItemModels5-5.26.0-2.6 libKF5ItemModels5-debuginfo-5.26.0-2.6 libKF5ItemViews5-5.26.0-2.6 libKF5ItemViews5-debuginfo-5.26.0-2.6 libKF5JS5-5.26.0-2.6 libKF5JS5-debuginfo-5.26.0-2.6 libKF5JSApi5-5.26.0-2.6 libKF5JSApi5-debuginfo-5.26.0-2.6 libKF5JobWidgets5-5.26.0-2.6 libKF5JobWidgets5-debuginfo-5.26.0-2.6 libKF5JsEmbed5-5.26.0-2.6 libKF5JsEmbed5-debuginfo-5.26.0-2.6 libKF5KCMUtils5-5.26.0-3.2 libKF5KCMUtils5-debuginfo-5.26.0-3.2 libKF5KDELibs4Support5-5.26.0-2.10 libKF5KDELibs4Support5-debuginfo-5.26.0-2.10 libKF5KHtml5-5.26.0-2.5 libKF5KHtml5-debuginfo-5.26.0-2.5 libKF5MediaPlayer5-5.26.0-2.5 libKF5MediaPlayer5-debuginfo-5.26.0-2.5 libKF5ModemManagerQt-debugsource-5.26.0-2.6 libKF5ModemManagerQt-devel-5.26.0-2.6 libKF5ModemManagerQt6-5.26.0-2.6 libKF5ModemManagerQt6-debuginfo-5.26.0-2.6 libKF5NetworkManagerQt-debugsource-5.26.0-2.6 libKF5NetworkManagerQt-devel-5.26.0-2.6 libKF5NetworkManagerQt6-5.26.0-2.6 libKF5NetworkManagerQt6-debuginfo-5.26.0-2.6 libKF5NewStuff5-5.26.0-2.5 libKF5NewStuff5-debuginfo-5.26.0-2.5 libKF5Notifications5-5.26.0-2.6 libKF5Notifications5-debuginfo-5.26.0-2.6 libKF5NotifyConfig5-5.26.0-2.5 libKF5NotifyConfig5-debuginfo-5.26.0-2.5 libKF5Parts5-5.26.0-2.5 libKF5Parts5-debuginfo-5.26.0-2.5 libKF5Plotting5-5.26.0-2.6 libKF5Plotting5-debuginfo-5.26.0-2.6 libKF5Pty5-5.26.0-2.6 libKF5Pty5-debuginfo-5.26.0-2.6 libKF5QuickAddons5-5.26.0-3.2 libKF5QuickAddons5-debuginfo-5.26.0-3.2 libKF5Runner5-5.26.0-2.5 libKF5Runner5-debuginfo-5.26.0-2.5 libKF5Screen7-5.8.2-2.7 libKF5Screen7-debuginfo-5.8.2-2.7 libKF5Solid5-5.26.0-2.6 libKF5Solid5-debuginfo-5.26.0-2.6 libKF5SonnetCore5-5.26.0-2.10 libKF5SonnetCore5-debuginfo-5.26.0-2.10 libKF5SonnetUi5-5.26.0-2.10 libKF5SonnetUi5-debuginfo-5.26.0-2.10 libKF5Style5-5.26.0-3.2 libKF5Style5-debuginfo-5.26.0-3.2 libKF5Su5-5.26.0-2.6 libKF5Su5-debuginfo-5.26.0-2.6 libKF5TextWidgets5-5.26.0-2.6 libKF5TextWidgets5-debuginfo-5.26.0-2.6 libKF5ThreadWeaver5-5.26.0-2.6 libKF5ThreadWeaver5-debuginfo-5.26.0-2.6 libKF5UnitConversion5-5.26.0-2.6 libKF5UnitConversion5-debuginfo-5.26.0-2.6 libKF5Wallet5-5.26.0-2.6 libKF5Wallet5-debuginfo-5.26.0-2.6 libKF5WebKit5-5.26.0-2.5 libKF5WebKit5-debuginfo-5.26.0-2.5 libKF5WidgetsAddons5-5.26.0-2.6 libKF5WidgetsAddons5-debuginfo-5.26.0-2.6 libKF5WindowSystem5-5.26.0-2.6 libKF5WindowSystem5-debuginfo-5.26.0-2.6 libKF5XmlGui5-5.26.0-2.6 libKF5XmlGui5-debuginfo-5.26.0-2.6 libKF5XmlRpcClient5-5.26.0-2.5 libKF5XmlRpcClient5-debuginfo-5.26.0-2.5 libKScreenLocker5-5.8.2-2.5 libKScreenLocker5-debuginfo-5.8.2-2.5 libappstream4-0.10.0-3.2 libappstream4-debuginfo-0.10.0-3.2 libkde4-4.14.25-2.7 libkde4-debuginfo-4.14.25-2.7 libkde4-devel-4.14.25-2.7 libkdecoration2-debugsource-5.8.2-2.6 libkdecoration2-devel-5.8.2-2.6 libkdecorations2-5-5.8.2-2.6 libkdecorations2-5-debuginfo-5.8.2-2.6 libkdecorations2private5-5.8.2-2.6 libkdecorations2private5-debuginfo-5.8.2-2.6 libkdecore4-4.14.25-2.7 libkdecore4-debuginfo-4.14.25-2.7 libkdecore4-devel-4.14.25-2.7 libkdecore4-devel-debuginfo-4.14.25-2.7 libkscreen2-debugsource-5.8.2-2.7 libkscreen2-devel-5.8.2-2.7 libkscreen2-plugin-5.8.2-2.7 libkscreen2-plugin-debuginfo-5.8.2-2.7 libksuseinstall-devel-4.14.25-2.7 libksuseinstall1-4.14.25-2.7 libksuseinstall1-debuginfo-4.14.25-2.7 libksysguard5-5.8.2-2.5 libksysguard5-debuginfo-5.8.2-2.5 libksysguard5-debugsource-5.8.2-2.5 libksysguard5-devel-5.8.2-2.5 libksysguard5-helper-5.8.2-2.5 libksysguard5-helper-debuginfo-5.8.2-2.5 libkwalletbackend5-5-5.26.0-2.6 libkwalletbackend5-5-debuginfo-5.26.0-2.6 libpackagekitqt4-0-0.9.5-3.2 libpackagekitqt4-0-debuginfo-0.9.5-3.2 libpackagekitqt5-0-0.9.5-3.2 libpackagekitqt5-0-debuginfo-0.9.5-3.2 libphonon4qt5-4.9.0-2.17 libphonon4qt5-debuginfo-4.9.0-2.17 metatheme-breeze-common-5.8.2-3.2 metatheme-breeze-common-debuginfo-5.8.2-3.2 milou5-5.8.2-2.6 milou5-debuginfo-5.8.2-2.6 milou5-debugsource-5.8.2-2.6 oxygen5-5.8.2-2.5 oxygen5-cursors-5.8.2-2.5 oxygen5-debugsource-5.8.2-2.5 oxygen5-decoration-5.8.2-2.5 oxygen5-decoration-debuginfo-5.8.2-2.5 oxygen5-devel-5.8.2-2.5 oxygen5-sounds-5.8.2-2.5 oxygen5-style-5.8.2-2.5 oxygen5-style-debuginfo-5.8.2-2.5 patterns-SLE-plasma5-devel_kde-20150918-2.6 patterns-SLE-plasma5-devel_kde_frameworks-20150918-2.6 patterns-SLE-plasma5-devel_qt5-20150918-2.6 patterns-SLE-plasma5-kde-20150918-2.6 patterns-SLE-plasma5-kde_edutainment-20150918-2.6 patterns-SLE-plasma5-kde_games-20150918-2.6 patterns-SLE-plasma5-kde_ide-20150918-2.6 patterns-SLE-plasma5-kde_imaging-20150918-2.6 patterns-SLE-plasma5-kde_internet-20150918-2.6 patterns-SLE-plasma5-kde_multimedia-20150918-2.6 patterns-SLE-plasma5-kde_office-20150918-2.6 patterns-SLE-plasma5-kde_plasma-20150918-2.6 patterns-SLE-plasma5-kde_telepathy-20150918-2.6 patterns-SLE-plasma5-kde_utilities-20150918-2.6 patterns-SLE-plasma5-kde_utilities_opt-20150918-2.6 patterns-SLE-plasma5-kde_yast-20150918-2.6 phonon4qt5-backend-gstreamer-4.9.0-2.6 phonon4qt5-backend-gstreamer-debuginfo-4.9.0-2.6 phonon4qt5-backend-gstreamer-debugsource-4.9.0-2.6 phonon4qt5-debugsource-4.9.0-2.17 phonon4qt5-devel-4.9.0-2.17 phonon4qt5-devel-debuginfo-4.9.0-2.17 plasma-framework-5.27.0~20160928~b115ea1.git-2.5 plasma-framework-components-5.27.0~20160928~b115ea1.git-2.5 plasma-framework-components-debuginfo-5.27.0~20160928~b115ea1.git-2.5 plasma-framework-debuginfo-5.27.0~20160928~b115ea1.git-2.5 plasma-framework-debugsource-5.27.0~20160928~b115ea1.git-2.5 plasma-framework-devel-5.27.0~20160928~b115ea1.git-2.5 plasma-framework-private-5.27.0~20160928~b115ea1.git-2.5 plasma-framework-private-debuginfo-5.27.0~20160928~b115ea1.git-2.5 plasma-nm5-5.8.2-2.5 plasma-nm5-debuginfo-5.8.2-2.5 plasma-nm5-debugsource-5.8.2-2.5 plasma-nm5-l2tp-5.8.2-2.5 plasma-nm5-l2tp-debuginfo-5.8.2-2.5 plasma-nm5-openconnect-5.8.2-2.5 plasma-nm5-openconnect-debuginfo-5.8.2-2.5 plasma-nm5-openswan-5.8.2-2.5 plasma-nm5-openswan-debuginfo-5.8.2-2.5 plasma-nm5-openvpn-5.8.2-2.5 plasma-nm5-openvpn-debuginfo-5.8.2-2.5 plasma-nm5-pptp-5.8.2-2.5 plasma-nm5-pptp-debuginfo-5.8.2-2.5 plasma-nm5-ssh-5.8.2-2.5 plasma-nm5-ssh-debuginfo-5.8.2-2.5 plasma-nm5-sstp-5.8.2-2.5 plasma-nm5-sstp-debuginfo-5.8.2-2.5 plasma-nm5-strongswan-5.8.2-2.5 plasma-nm5-strongswan-debuginfo-5.8.2-2.5 plasma-nm5-vpnc-5.8.2-2.5 plasma-nm5-vpnc-debuginfo-5.8.2-2.5 plasma5-addons-5.8.3-2.5 plasma5-addons-debuginfo-5.8.3-2.5 plasma5-addons-debugsource-5.8.3-2.5 plasma5-desktop-5.8.3-2.5 plasma5-desktop-debuginfo-5.8.3-2.5 plasma5-desktop-debugsource-5.8.3-2.5 plasma5-integration-debugsource-5.8.2-2.5 plasma5-integration-plugin-5.8.2-2.5 plasma5-integration-plugin-debuginfo-5.8.2-2.5 plasma5-pa-5.8.3-2.5 plasma5-pa-debuginfo-5.8.3-2.5 plasma5-pa-debugsource-5.8.3-2.5 plasma5-sdk-5.8.2-2.5 plasma5-sdk-debuginfo-5.8.2-2.5 plasma5-sdk-debugsource-5.8.2-2.5 plasma5-workspace-5.8.3-2.4 plasma5-workspace-debuginfo-5.8.3-2.4 plasma5-workspace-debugsource-5.8.3-2.4 plasma5-workspace-devel-5.8.3-2.4 plasma5-workspace-libs-5.8.3-2.4 plasma5-workspace-libs-debuginfo-5.8.3-2.4 plasmaengineexplorer5-5.8.2-2.5 plasmaengineexplorer5-debuginfo-5.8.2-2.5 polkit-kde-agent-5-5.8.2-2.6 polkit-kde-agent-5-debuginfo-5.8.2-2.6 polkit-kde-agent-5-debugsource-5.8.2-2.6 powerdevil5-5.8.3-2.4 powerdevil5-debuginfo-5.8.3-2.4 powerdevil5-debugsource-5.8.3-2.4 sddm-0.13.0-2.15 sddm-branding-openSUSE-0.13.0-2.15 sddm-branding-upstream-0.13.0-2.15 sddm-debuginfo-0.13.0-2.15 sddm-debugsource-0.13.0-2.15 solid-debugsource-5.26.0-2.6 solid-devel-5.26.0-2.6 solid-imports-5.26.0-2.6 solid-imports-debuginfo-5.26.0-2.6 solid-tools-5.26.0-2.6 solid-tools-debuginfo-5.26.0-2.6 sonnet-debugsource-5.26.0-2.10 sonnet-devel-5.26.0-2.10 sonnet-devel-debuginfo-5.26.0-2.10 systemsettings5-5.8.2-2.5 systemsettings5-debuginfo-5.8.2-2.5 systemsettings5-debugsource-5.8.2-2.5 systemsettings5-devel-5.8.2-2.5 threadweaver-debugsource-5.26.0-2.6 threadweaver-devel-5.26.0-2.6 typelib-1_0-AppStream-1.0-0.10.0-3.2 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): AppStream-lang-0.10.0-3.2 baloo5-lang-5.26.0-3.2 bluedevil5-lang-5.8.2-3.2 breeze5-cursors-5.8.3-3.2 breeze5-icons-5.26.0-3.4 breeze5-style-lang-5.8.3-3.2 breeze5-wallpapers-5.8.3-3.2 discover-lang-5.8.3-3.3 gtk2-metatheme-breeze-5.8.2-3.2 gtk3-metatheme-breeze-5.8.2-3.2 hack-fonts-2.020-3.2 kcm_sddm-lang-5.8.2-3.2 kcoreaddons-lang-5.26.0-3.2 kde-cli-tools5-lang-5.8.2-3.2 kde-gtk-config5-lang-5.8.2-3.2 kde-oxygen-fonts-0.4.0-3.3 kde-user-manager-lang-5.8.3-3.2 kded-lang-5.26.0-3.2 kdelibs4-apidocs-4.14.25-2.2 kdelibs4support-lang-5.26.0-2.10 kdesignerplugin-lang-5.26.0-2.11 kdoctools-lang-5.26.0-2.7 kfilemetadata5-lang-5.26.0-2.6 kgamma5-lang-5.8.2-2.6 khotkeys5-lang-5.8.2-2.7 kinfocenter5-lang-5.8.2-2.5 kinit-lang-5.26.0-2.5 kio-lang-5.26.0-2.9 kirigami-lang-1.1.0-2.5 kjs-devel-lang-5.26.0-2.6 kmenuedit5-lang-5.8.2-2.10 kpackage-lang-5.26.0-2.6 kpeople5-lang-5.26.0-2.6 kross-lang-5.26.0-2.5 kscreen5-lang-5.8.2-2.6 kscreenlocker-lang-5.8.2-2.5 kservice-lang-5.26.0-2.6 ksshaskpass5-lang-5.8.2-2.6 ksysguard5-lang-5.8.2-2.5 ktexteditor-lang-5.26.0-2.6 kwalletd5-lang-5.26.0-2.6 kwin5-lang-5.8.3-2.6 libKF5Auth5-lang-5.26.0-3.2 libKF5Bookmarks5-lang-5.26.0-3.2 libKF5Codecs5-lang-5.26.0-3.2 libKF5Completion5-lang-5.26.0-3.2 libKF5ConfigCore5-lang-5.26.0-3.2 libKF5ConfigWidgets5-lang-5.26.0-3.2 libKF5DBusAddons5-lang-5.26.0-3.2 libKF5DNSSD5-lang-5.26.0-2.6 libKF5Declarative5-lang-5.26.0-3.2 libKF5GlobalAccel5-lang-5.26.0-2.6 libKF5I18n5-lang-5.26.0-2.6 libKF5IconThemes5-lang-5.26.0-2.6 libKF5ItemViews5-lang-5.26.0-2.6 libKF5JobWidgets5-lang-5.26.0-2.6 libKF5JsEmbed5-lang-5.26.0-2.6 libKF5KCMUtils5-lang-5.26.0-3.2 libKF5KHtml5-lang-5.26.0-2.5 libKF5NewStuff5-lang-5.26.0-2.5 libKF5Notifications5-lang-5.26.0-2.6 libKF5NotifyConfig5-lang-5.26.0-2.5 libKF5Parts5-lang-5.26.0-2.5 libKF5Pty5-lang-5.26.0-2.6 libKF5Solid5-lang-5.26.0-2.6 libKF5SonnetCore5-lang-5.26.0-2.10 libKF5Su5-lang-5.26.0-2.6 libKF5TextWidgets5-lang-5.26.0-2.6 libKF5UnitConversion5-lang-5.26.0-2.6 libKF5WidgetsAddons5-lang-5.26.0-2.6 libKF5WindowSystem5-lang-5.26.0-2.6 libKF5XmlGui5-lang-5.26.0-2.6 libKF5XmlRpcClient5-lang-5.26.0-2.5 libksysguard5-lang-5.8.2-2.5 milou5-lang-5.8.2-2.6 oxygen5-icon-theme-5.26.0-2.6 oxygen5-icon-theme-large-5.26.0-2.6 oxygen5-icon-theme-scalable-5.26.0-2.6 oxygen5-lang-5.8.2-2.5 plasma-framework-lang-5.27.0~20160928~b115ea1.git-2.5 plasma-nm5-lang-5.8.2-2.5 plasma5-SLE-42.1.1-2.5 plasma5-addons-lang-5.8.3-2.5 plasma5-defaults-SLE-42.1.1-2.5 plasma5-desktop-lang-5.8.3-2.5 plasma5-integration-plugin-lang-5.8.2-2.5 plasma5-pa-lang-5.8.3-2.5 plasma5-sdk-lang-5.8.2-2.5 plasma5-session-5.8.3-2.6 plasma5-theme-SLE-42.1.1-2.5 plasma5-workspace-branding-SLE-42.1.1-2.5 plasma5-workspace-lang-5.8.3-2.4 plasma5-workspace-wallpapers-5.7.3-2.6 polkit-kde-agent-5-lang-5.8.2-2.6 powerdevil5-lang-5.8.3-2.4 sddm-theme-SLE-42.1.1-2.5 systemsettings5-lang-5.8.2-2.5 References: https://bugzilla.suse.com/1020597

1 0

openSUSE-SU-2017:0563-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 27 Feb '17

27 Feb '17

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0563-1 Rating: important References: #1013236 Cross-References: CVE-2016-5203 CVE-2016-5204 CVE-2016-5205 CVE-2016-5206 CVE-2016-5207 CVE-2016-5208 CVE-2016-5209 CVE-2016-5210 CVE-2016-5211 CVE-2016-5212 CVE-2016-5213 CVE-2016-5214 CVE-2016-5215 CVE-2016-5216 CVE-2016-5217 CVE-2016-5218 CVE-2016-5219 CVE-2016-5220 CVE-2016-5221 CVE-2016-5222 CVE-2016-5223 CVE-2016-5224 CVE-2016-5225 CVE-2016-5226 CVE-2016-9650 CVE-2016-9651 CVE-2016-9652 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 27 vulnerabilities is now available. Description: This update to Chromium 55.0.2883.75 fixes the following vulnerabilities: - CVE-2016-9651: Private property access in V8 - CVE-2016-5208: Universal XSS in Blink - CVE-2016-5207: Universal XSS in Blink - CVE-2016-5206: Same-origin bypass in PDFium - CVE-2016-5205: Universal XSS in Blink - CVE-2016-5204: Universal XSS in Blink - CVE-2016-5209: Out of bounds write in Blink - CVE-2016-5203: Use after free in PDFium - CVE-2016-5210: Out of bounds write in PDFium - CVE-2016-5212: Local file disclosure in DevTools - CVE-2016-5211: Use after free in PDFium - CVE-2016-5213: Use after free in V8 - CVE-2016-5214: File download protection bypass - CVE-2016-5216: Use after free in PDFium - CVE-2016-5215: Use after free in Webaudio - CVE-2016-5217: Use of unvalidated data in PDFium - CVE-2016-5218: Address spoofing in Omnibox - CVE-2016-5219: Use after free in V8 - CVE-2016-5221: Integer overflow in ANGLE - CVE-2016-5220: Local file access in PDFium - CVE-2016-5222: Address spoofing in Omnibox - CVE-2016-9650: CSP Referrer disclosure - CVE-2016-5223: Integer overflow in PDFium - CVE-2016-5226: Limited XSS in Blink - CVE-2016-5225: CSP bypass in Blink - CVE-2016-5224: Same-origin bypass in SVG - CVE-2016-9652: Various fixes from internal audits, fuzzing and other initiatives The default bookmarks override was removed. The following packaging changes are included: - Switch to system libraries: harfbuzz, zlib, ffmpeg, where available. - Chromium now requires harfbuzz >= 1.3.0 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-1496=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-55.0.2883.75-2.1 chromium-55.0.2883.75-2.1 References: https://www.suse.com/security/cve/CVE-2016-5203.html https://www.suse.com/security/cve/CVE-2016-5204.html https://www.suse.com/security/cve/CVE-2016-5205.html https://www.suse.com/security/cve/CVE-2016-5206.html https://www.suse.com/security/cve/CVE-2016-5207.html https://www.suse.com/security/cve/CVE-2016-5208.html https://www.suse.com/security/cve/CVE-2016-5209.html https://www.suse.com/security/cve/CVE-2016-5210.html https://www.suse.com/security/cve/CVE-2016-5211.html https://www.suse.com/security/cve/CVE-2016-5212.html https://www.suse.com/security/cve/CVE-2016-5213.html https://www.suse.com/security/cve/CVE-2016-5214.html https://www.suse.com/security/cve/CVE-2016-5215.html https://www.suse.com/security/cve/CVE-2016-5216.html https://www.suse.com/security/cve/CVE-2016-5217.html https://www.suse.com/security/cve/CVE-2016-5218.html https://www.suse.com/security/cve/CVE-2016-5219.html https://www.suse.com/security/cve/CVE-2016-5220.html https://www.suse.com/security/cve/CVE-2016-5221.html https://www.suse.com/security/cve/CVE-2016-5222.html https://www.suse.com/security/cve/CVE-2016-5223.html https://www.suse.com/security/cve/CVE-2016-5224.html https://www.suse.com/security/cve/CVE-2016-5225.html https://www.suse.com/security/cve/CVE-2016-5226.html https://www.suse.com/security/cve/CVE-2016-9650.html https://www.suse.com/security/cve/CVE-2016-9651.html https://www.suse.com/security/cve/CVE-2016-9652.html https://bugzilla.suse.com/1013236

1 0

openSUSE-RU-2017:0144-2: moderate: Recommended update for sysdig
by maintenance＠opensuse.org 27 Feb '17

27 Feb '17

openSUSE Recommended Update: Recommended update for sysdig ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0144-2 Rating: moderate References: #1017181 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sysdig fixes the following issues: - Update to version 0.13.0 (boo#1017181): - Add ability to open concatenated capture files. - evtin.* fields can be used also for displaying now. - Fix driver for Kernel 4.9. - Fix on IPv4 mapped IPv6 parsing. - Fix memory leak #694. - Fix issue #687 about connecting to an K8s API server via HTTPS. - Fix compilation issues when using non-bundled OpenSSL #672. - Fix compilation issues under S390 architecture. - Fix various issues on k8s parsing. - Fix stale thread info when parsing processes within containers. (#665) - Avoid getting cwd from driver, causes issues on Kernel 4.8. - Add new filters container.mount.* to match container mount points. - Add new filter container.privileged to match containers running in privileged mode. - Add support for latest kubernetes features: k8s.deployment.* and k8s.rs.* filters are now available. - Added glob operator for strings, works as classic shell glob path matcher. - Added pmatch operator. - Add less package on docker image. - Enable building on s390x. - Use current macros for KMP building. - Drop sysdig-kmp-preamble. - Use exclusivearch instead of excluding architectures. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-90=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (s390x x86_64): sysdig-0.13.0-2.1 sysdig-debuginfo-0.13.0-2.1 sysdig-debugsource-0.13.0-2.1 sysdig-kmp-default-0.13.0_k3.12.49_11-2.1 sysdig-kmp-default-debuginfo-0.13.0_k3.12.49_11-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): sysdig-kmp-xen-0.13.0_k3.12.49_11-2.1 sysdig-kmp-xen-debuginfo-0.13.0_k3.12.49_11-2.1 References: https://bugzilla.suse.com/1017181

1 0

openSUSE-RU-2017:0562-1: moderate: Recommended update for wwwoffle
by maintenance＠opensuse.org 25 Feb '17

25 Feb '17

openSUSE Recommended Update: Recommended update for wwwoffle ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0562-1 Rating: moderate References: #1026023 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for wwwoffle fixes the following issues: - boo#1026023: Browser connections to wwwoffle hit SYN flood detection limit In addition, the following upstream changes are included: - crypto key length tweaks Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-295=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-295=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): wwwoffle-2.9j-11.1 wwwoffle-debuginfo-2.9j-11.1 wwwoffle-debugsource-2.9j-11.1 - openSUSE Leap 42.1 (i586 x86_64): wwwoffle-2.9j-10.1 wwwoffle-debuginfo-2.9j-10.1 wwwoffle-debugsource-2.9j-10.1 References: https://bugzilla.suse.com/1026023

1 0

openSUSE-RU-2017:0561-1: moderate: Recommended update for gnuhealth, tryton, trytond, trytond_account_invoice
by maintenance＠opensuse.org 25 Feb '17

25 Feb '17

openSUSE Recommended Update: Recommended update for gnuhealth, tryton, trytond, trytond_account_invoice ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0561-1 Rating: moderate References: #1025542 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnuhealth fixes a number of bugs. Fixes in GNU Health 3.06: - Traceback when assigning a new meal order - Traceback when displaying patient critical info in non-english languages - Wrong widget for mealtime field - Remove readonly from patient meal order warning, to correctly save state of the field The dependencies tryton, trytond, trytond_account_invoice were updated for minor bug fixes. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-296=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): gnuhealth-3.0.6-6.1 tryton-3.8.13-8.1 trytond-3.8.9-7.1 trytond_account_invoice-3.8.5-6.2 References: https://bugzilla.suse.com/1025542

1 0

openSUSE-RU-2017:0560-1: Recommended update for clamav-database
by maintenance＠opensuse.org 25 Feb '17

25 Feb '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0560-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh February 20th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-294=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-294=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201702200005-43.1 - openSUSE Leap 42.1 (noarch): clamav-database-201702200005-222.1 References:

1 0

openSUSE-RU-2017:0559-1: important: Recommended update for tigervnc
by maintenance＠opensuse.org 24 Feb '17

24 Feb '17

openSUSE Recommended Update: Recommended update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0559-1 Rating: important References: #1024929 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tigervnc fixes the following issues: - reconnection to tigervnc session would fail (boo#1024929) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-293=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-293=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libXvnc-devel-1.6.0-14.1 libXvnc1-1.6.0-14.1 libXvnc1-debuginfo-1.6.0-14.1 tigervnc-1.6.0-14.1 tigervnc-debuginfo-1.6.0-14.1 tigervnc-debugsource-1.6.0-14.1 xorg-x11-Xvnc-1.6.0-14.1 xorg-x11-Xvnc-debuginfo-1.6.0-14.1 - openSUSE Leap 42.1 (i586 x86_64): tigervnc-1.5.0-35.1 tigervnc-debuginfo-1.5.0-35.1 tigervnc-debugsource-1.5.0-35.1 xorg-x11-Xvnc-1.5.0-35.1 xorg-x11-Xvnc-debuginfo-1.5.0-35.1 References: https://bugzilla.suse.com/1024929

1 0

openSUSE-RU-2017:0558-1: important: Recommended update for pidgin-sipe
by maintenance＠opensuse.org 23 Feb '17

23 Feb '17

openSUSE Recommended Update: Recommended update for pidgin-sipe ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0558-1 Rating: important References: #965323 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pidgin-sipe fixes the following issues: - bsc#965323: support newer versions of Skype for Business Pidgin-sipe was also updated to 1.22.0, including the following improvements: - Support for Lync Autodiscover - Application Sharing Viewer - Improve desktop sharing - Audio functionality improvements Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-291=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-291=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): libpurple-plugin-sipe-lang-1.22.0-3.1 pidgin-plugin-sipe-1.22.0-3.1 - openSUSE Leap 42.2 (x86_64): libpurple-plugin-sipe-1.22.0-3.1 libpurple-plugin-sipe-debuginfo-1.22.0-3.1 pidgin-sipe-debugsource-1.22.0-3.1 telepathy-sipe-1.22.0-3.1 telepathy-sipe-debuginfo-1.22.0-3.1 - openSUSE Leap 42.1 (i586 x86_64): libpurple-plugin-sipe-1.22.0-6.1 libpurple-plugin-sipe-debuginfo-1.22.0-6.1 pidgin-sipe-debugsource-1.22.0-6.1 telepathy-sipe-1.22.0-6.1 telepathy-sipe-debuginfo-1.22.0-6.1 - openSUSE Leap 42.1 (noarch): libpurple-plugin-sipe-lang-1.22.0-6.1 pidgin-plugin-sipe-1.22.0-6.1 References: https://bugzilla.suse.com/965323

1 0

openSUSE-SU-2017:0557-1: moderate: Security update for libXpm
by opensuse-security＠opensuse.org 23 Feb '17

23 Feb '17

openSUSE Security Update: Security update for libXpm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0557-1 Rating: moderate References: #1021315 Cross-References: CVE-2016-10164 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libXpm fixes the following issues: - A heap overflow in XPM handling could be used by attackers supplying XPM files to crash or potentially execute code. (bsc#1021315) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-292=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-292=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libXpm-debugsource-3.5.11-8.1 libXpm-devel-3.5.11-8.1 libXpm-tools-3.5.11-8.1 libXpm-tools-debuginfo-3.5.11-8.1 libXpm4-3.5.11-8.1 libXpm4-debuginfo-3.5.11-8.1 - openSUSE Leap 42.2 (x86_64): libXpm-devel-32bit-3.5.11-8.1 libXpm4-32bit-3.5.11-8.1 libXpm4-debuginfo-32bit-3.5.11-8.1 - openSUSE Leap 42.1 (i586 x86_64): libXpm-debugsource-3.5.11-7.1 libXpm-devel-3.5.11-7.1 libXpm-tools-3.5.11-7.1 libXpm-tools-debuginfo-3.5.11-7.1 libXpm4-3.5.11-7.1 libXpm4-debuginfo-3.5.11-7.1 - openSUSE Leap 42.1 (x86_64): libXpm-devel-32bit-3.5.11-7.1 libXpm4-32bit-3.5.11-7.1 libXpm4-debuginfo-32bit-3.5.11-7.1 References: https://www.suse.com/security/cve/CVE-2016-10164.html https://bugzilla.suse.com/1021315

1 0

openSUSE-SU-2017:0552-1: moderate: Security update for libquicktime
by opensuse-security＠opensuse.org 22 Feb '17

22 Feb '17

openSUSE Security Update: Security update for libquicktime ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0552-1 Rating: moderate References: #1022805 Cross-References: CVE-2016-2399 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libquicktime fixes the following issues: - CVE-2016-2399: A Integer overflow in the quicktime_read_pascal function in libquicktime allowed remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom [boo#1022805] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-288=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-288=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libquicktime-debugsource-1.2.4cvs20150223-6.1 libquicktime-devel-1.2.4cvs20150223-6.1 libquicktime-tools-1.2.4cvs20150223-6.1 libquicktime-tools-debuginfo-1.2.4cvs20150223-6.1 libquicktime0-1.2.4cvs20150223-6.1 libquicktime0-debuginfo-1.2.4cvs20150223-6.1 - openSUSE Leap 42.2 (x86_64): libquicktime0-32bit-1.2.4cvs20150223-6.1 libquicktime0-debuginfo-32bit-1.2.4cvs20150223-6.1 - openSUSE Leap 42.1 (i586 x86_64): libquicktime-debugsource-1.2.4cvs20150223-4.1 libquicktime-devel-1.2.4cvs20150223-4.1 libquicktime-tools-1.2.4cvs20150223-4.1 libquicktime-tools-debuginfo-1.2.4cvs20150223-4.1 libquicktime0-1.2.4cvs20150223-4.1 libquicktime0-debuginfo-1.2.4cvs20150223-4.1 - openSUSE Leap 42.1 (x86_64): libquicktime0-32bit-1.2.4cvs20150223-4.1 libquicktime0-debuginfo-32bit-1.2.4cvs20150223-4.1 References: https://www.suse.com/security/cve/CVE-2016-2399.html https://bugzilla.suse.com/1022805

1 0

openSUSE-SU-2017:0548-1: moderate: Security update for gd
by opensuse-security＠opensuse.org 22 Feb '17

22 Feb '17

openSUSE Security Update: Security update for gd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0548-1 Rating: moderate References: #1022263 #1022264 #1022265 #1022283 #1022284 #1022553 Cross-References: CVE-2016-10166 CVE-2016-10167 CVE-2016-10168 CVE-2016-6906 CVE-2016-6912 CVE-2016-9317 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for gd fixes the following security issues: - CVE-2016-6906: An out-of-bounds read in TGA decompression was fixed which could have lead to crashes. (bsc#1022553) - CVE-2016-6912: Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) allowed remote attackers to have unspecified impact via large width and height values. (bsc#1022284) - CVE-2016-9317: The gdImageCreate function in the GD Graphics Library (aka libgd) allowed remote attackers to cause a denial of service (system hang) via an oversized image. (bsc#1022283) - CVE-2016-10166: A potential unsigned underflow in gd interpolation functions could lead to memory corruption in the GD Graphics Library (aka libgd) (bsc#1022263) - CVE-2016-10167: A denial of service problem in gdImageCreateFromGd2Ctx() could lead to libgd running out of memory even on small files. (bsc#1022264) - CVE-2016-10168: A signed integer overflow in the GD Graphics Library (aka libgd) could lead to memory corruption (bsc#1022265) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-289=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-289=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gd-2.1.0-16.1 gd-debuginfo-2.1.0-16.1 gd-debugsource-2.1.0-16.1 gd-devel-2.1.0-16.1 - openSUSE Leap 42.2 (x86_64): gd-32bit-2.1.0-16.1 gd-debuginfo-32bit-2.1.0-16.1 - openSUSE Leap 42.1 (i586 x86_64): gd-2.1.0-19.1 gd-debuginfo-2.1.0-19.1 gd-debugsource-2.1.0-19.1 gd-devel-2.1.0-19.1 - openSUSE Leap 42.1 (x86_64): gd-32bit-2.1.0-19.1 gd-debuginfo-32bit-2.1.0-19.1 References: https://www.suse.com/security/cve/CVE-2016-10166.html https://www.suse.com/security/cve/CVE-2016-10167.html https://www.suse.com/security/cve/CVE-2016-10168.html https://www.suse.com/security/cve/CVE-2016-6906.html https://www.suse.com/security/cve/CVE-2016-6912.html https://www.suse.com/security/cve/CVE-2016-9317.html https://bugzilla.suse.com/1022263 https://bugzilla.suse.com/1022264 https://bugzilla.suse.com/1022265 https://bugzilla.suse.com/1022283 https://bugzilla.suse.com/1022284 https://bugzilla.suse.com/1022553

1 0

openSUSE-SU-2017:0547-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 22 Feb '17

22 Feb '17

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0547-1 Rating: important References: #1005666 #1015787 #1018100 #1023762 #1023888 #1024081 #1024234 #1024508 #1024938 #1025047 #1025048 #1025049 #1025050 #1025051 #1025053 #1025055 #1025057 #1025058 #1025059 #1025060 #1025061 #1025062 #1025063 #1025064 #1025065 #1025066 #1025067 #1025069 #1025070 #1025071 #1025072 #1025073 #1025074 #1025075 #1025076 #1025077 #1025079 #1025080 #1025081 #1025235 #1026024 #865869 #904489 #927455 #929871 #935087 #935088 #936445 #937609 #937612 #937616 #938550 #938891 #938892 #942512 #942685 #942925 #944001 #945649 #946057 #946902 #949440 #949472 #951615 #951844 #957805 #960300 #963193 #965344 #966278 #966910 #968230 #972844 #972951 #972993 #973855 #975596 #977685 #981038 #981709 #983087 #984779 #985562 #985850 #987192 #989953 #990384 #992712 #993841 #994881 Cross-References: CVE-2017-5897 CVE-2017-5970 CVE-2017-5986 CVE-2017-6074 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves four vulnerabilities and has 86 fixes is now available. Description: The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-6074: The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel mishandled DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allowed local users to cause a denial of service (invalid free) or possibly have unspecified other impact via an application that made an IPV6_RECVPKTINFO setsockopt system call (bnc#1026024). - CVE-2017-5986: Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel allowed local users to cause a denial of service (assertion failure and panic) via a multithreaded application that peels off an association in a certain buffer-full state (bnc#1025235). - CVE-2017-5970: The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel allowed attackers to cause a denial of service (system crash) via (1) an application that made crafted system calls or possibly (2) IPv4 traffic with invalid IP options (bnc#1024938). - CVE-2017-5897: A potential remote denial of service within the IPv6 GRE protocol was fixed. (bsc#1023762) The following non-security bugs were fixed: - btrfs: support NFSv2 export (bnc#929871). - btrfs: Direct I/O: Fix space accounting (bsc#1025058). - btrfs: add RAID 5/6 BTRFS_RBIO_REBUILD_MISSING operation (bsc#1025069). - btrfs: bail out if block group has different mixed flag (bsc#1025072). - btrfs: be more precise on errors when getting an inode from disk (bsc#981038). - btrfs: check pending chunks when shrinking fs to avoid corruption (bnc#936445). - btrfs: check prepare_uptodate_page() error code earlier (bnc#966910). - btrfs: do not BUG() during drop snapshot (bsc#1025076). - btrfs: do not collect ordered extents when logging that inode exists (bsc#977685). - btrfs: do not initialize a space info as full to prevent ENOSPC (bnc#944001). - btrfs: do not leak reloc root nodes on error (bsc#1025074). - btrfs: fix block group ->space_info null pointer dereference (bnc#935088). - btrfs: fix chunk allocation regression leading to transaction abort (bnc#938550). - btrfs: fix crash on close_ctree() if cleaner starts new transaction (bnc#938891). - btrfs: fix deadlock between direct IO reads and buffered writes (bsc#973855). - btrfs: fix deadlock between direct IO write and defrag/readpages (bnc#965344). - btrfs: fix device replace of a missing RAID 5/6 device (bsc#1025057). - btrfs: fix empty symlink after creating symlink and fsync parent dir (bsc#977685). - btrfs: fix extent accounting for partial direct IO writes (bsc#1025062). - btrfs: fix file corruption after cloning inline extents (bnc#942512). - btrfs: fix file loss on log replay after renaming a file and fsync (bsc#977685). - btrfs: fix file read corruption after extent cloning and fsync (bnc#946902). - btrfs: fix fitrim discarding device area reserved for boot loader's use (bsc#904489). - btrfs: fix for incorrect directory entries after fsync log replay (bsc#957805, bsc#977685). - btrfs: fix hang when failing to submit bio of directIO (bnc#942685). - btrfs: fix incremental send failure caused by balance (bsc#985850). - btrfs: fix invalid page accesses in extent_same (dedup) ioctl (bnc#968230). - btrfs: fix listxattrs not listing all xattrs packed in the same item (bsc#1025063). - btrfs: fix loading of orphan roots leading to BUG_ON (bsc#972844). - btrfs: fix memory corruption on failure to submit bio for direct IO (bnc#942685). - btrfs: fix memory leak in do_walk_down (bsc#1025075). - btrfs: fix memory leak in reading btree blocks (bsc#1025071). - btrfs: fix order by which delayed references are run (bnc#949440). - btrfs: fix page reading in extent_same ioctl leading to csum errors (bnc#968230). - btrfs: fix qgroup rescan worker initialization (bsc#1025077). - btrfs: fix qgroup sanity tests (bnc#951615). - btrfs: fix race between balance and unused block group deletion (bnc#938892). - btrfs: fix race between fsync and lockless direct IO writes (bsc#977685). - btrfs: fix race waiting for qgroup rescan worker (bnc#960300). - btrfs: fix regression running delayed references when using qgroups (bnc#951615). - btrfs: fix regression when running delayed references (bnc#951615). - btrfs: fix relocation incorrectly dropping data references (bsc#990384). - btrfs: fix shrinking truncate when the no_holes feature is enabled (bsc#1025053). - btrfs: fix sleeping inside atomic context in qgroup rescan worker (bnc#960300). - btrfs: fix stale dir entries after removing a link and fsync (bnc#942925). - btrfs: fix unreplayable log after snapshot delete + parent dir fsync (bsc#977685). - btrfs: fix warning in backref walking (bnc#966278). - btrfs: fix warning of bytes_may_use (bsc#1025065). - btrfs: fix wrong check for btrfs_force_chunk_alloc() (bnc#938550). - btrfs: handle quota reserve failure properly (bsc#1005666). - btrfs: incremental send, check if orphanized dir inode needs delayed rename (bsc#1025049). - btrfs: incremental send, do not delay directory renames unnecessarily (bsc#1025048). - btrfs: incremental send, fix clone operations for compressed extents (fate#316463). - btrfs: incremental send, fix premature rmdir operations (bsc#1025064). - btrfs: keep dropped roots in cache until transaction commit (bnc#935087, bnc#945649, bnc#951615). - btrfs: remove misleading handling of missing device scrub (bsc#1025055). - btrfs: remove unnecessary locking of cleaner_mutex to avoid deadlock (bsc#904489). - btrfs: return gracefully from balance if fs tree is corrupted (bsc#1025073). - btrfs: send, do not bug on inconsistent snapshots (bsc#985850). - btrfs: send, fix corner case for reference overwrite detection (bsc#1025080). - btrfs: send, fix file corruption due to incorrect cloning operations (bsc#1025060). - btrfs: set UNWRITTEN for prealloc'ed extents in fiemap (bsc#1025047). - btrfs: test_check_exists: Fix infinite loop when searching for free space entries (bsc#987192). - btrfs: use btrfs_get_fs_root in resolve_indirect_ref (bnc#935087, bnc#945649). - btrfs: use received_uuid of parent during send (bsc#1025051). - btrfs: wake up extent state waiters on unlock through clear_extent_bits (bsc#1025050). - btrfs: Add handler for invalidate page (bsc#963193). - btrfs: Add qgroup tracing (bnc#935087, bnc#945649). - btrfs: Avoid truncate tailing page if fallocate range does not exceed inode size (bsc#1025059). - btrfs: Continue write in case of can_not_nocow (bsc#1025070). - btrfs: Ensure proper sector alignment for btrfs_free_reserved_data_space (bsc#1005666). - btrfs: Export and move leaf/subtree qgroup helpers to qgroup.c (bsc#983087). - btrfs: Fix a data space underflow warning (bsc#985562, bsc#975596, bsc#984779). - btrfs: Handle unaligned length in extent_same (bsc#937609). - btrfs: abort transaction on btrfs_reloc_cow_block() (bsc#1025081). - btrfs: add missing discards when unpinning extents with -o discard (bsc#904489). - btrfs: advertise which crc32c implementation is being used on mount (bsc#946057). - btrfs: allow dedupe of same inode (bsc#1025067). - btrfs: backref: Add special time_seq == (u64)-1 case for btrfs_find_all_roots() (bnc#935087, bnc#945649). - btrfs: backref: Do not merge refs which are not for same block (bnc#935087, bnc#945649). - btrfs: btrfs_issue_discard ensure offset/length are aligned to sector boundaries (bsc#904489). - btrfs: change max_inline default to 2048 (bsc#949472). - btrfs: delayed-ref: Cleanup the unneeded functions (bnc#935087, bnc#945649). - btrfs: delayed-ref: Use list to replace the ref_root in ref_head (bnc#935087, bnc#945649). - btrfs: delayed-ref: double free in btrfs_add_delayed_tree_ref() (bsc#1025079). - btrfs: delayed_ref: Add new function to record reserved space into delayed ref (bsc#963193). - btrfs: delayed_ref: release and free qgroup reserved at proper timing (bsc#963193). - btrfs: disable defrag of tree roots. - btrfs: do not create or leak aliased root while cleaning up orphans (bsc#994881). - btrfs: do not update mtime/ctime on deduped inodes (bsc#937616). - btrfs: explictly delete unused block groups in close_ctree and ro-remount (bsc#904489). - btrfs: extent-tree: Add new version of btrfs_check_data_free_space and btrfs_free_reserved_data_space (bsc#963193). - btrfs: extent-tree: Add new version of btrfs_delalloc_reserve/release_space (bsc#963193). - btrfs: extent-tree: Switch to new check_data_free_space and free_reserved_data_space (bsc#963193). - btrfs: extent-tree: Switch to new delalloc space reserve and release (bsc#963193). - btrfs: extent-tree: Use ref_node to replace unneeded parameters in __inc_extent_ref() and __free_extent() (bnc#935087, bnc#945649). - btrfs: extent_io: Introduce needed structure for recoding set/clear bits (bsc#963193). - btrfs: extent_io: Introduce new function clear_record_extent_bits() (bsc#963193). - btrfs: extent_io: Introduce new function set_record_extent_bits (bsc#963193). - btrfs: fallocate: Add support to accurate qgroup reserve (bsc#963193). - btrfs: fix btrfs_compat_ioctl failures on non-compat ioctls (bsc#1018100). - btrfs: fix clone / extent-same deadlocks (bsc#937612). - btrfs: fix deadlock with extent-same and readpage (bsc#937612). - btrfs: fix resending received snapshot with parent (bsc#1025061). - btrfs: handle non-fatal errors in btrfs_qgroup_inherit() (bsc#972951). - btrfs: increment ctx->pos for every emitted or skipped dirent in readdir (bsc#981709). - btrfs: iterate over unused chunk space in FITRIM (bsc#904489). - btrfs: make btrfs_issue_discard return bytes discarded (bsc#904489). - btrfs: make file clone aware of fatal signals (bsc#1015787). - btrfs: pass unaligned length to btrfs_cmp_data() (bsc#937609). - btrfs: properly track when rescan worker is running (bsc#989953). - btrfs: provide super_operations->inode_get_dev (bsc#927455). - btrfs: qgroup: Add function qgroup_update_counters() (bnc#935087, bnc#945649). - btrfs: qgroup: Add function qgroup_update_refcnt() (bnc#935087, bnc#945649). - btrfs: qgroup: Add handler for NOCOW and inline (bsc#963193). - btrfs: qgroup: Add new function to record old_roots (bnc#935087, bnc#945649). - btrfs: qgroup: Add new qgroup calculation function btrfs_qgroup_account_extents() (bnc#935087, bnc#945649). - btrfs: qgroup: Add new trace point for qgroup data reserve (bsc#963193). - btrfs: qgroup: Add the ability to skip given qgroup for old/new_roots (bnc#935087, bnc#945649). - btrfs: qgroup: Avoid calling btrfs_free_reserved_data_space in clear_bit_hook (bsc#963193). - btrfs: qgroup: Check if qgroup reserved space leaked (bsc#963193). - btrfs: qgroup: Cleanup old inaccurate facilities (bsc#963193). - btrfs: qgroup: Cleanup open-coded old/new_refcnt update and read (bnc#935087, bnc#945649). - btrfs: qgroup: Cleanup the old ref_node-oriented mechanism (bnc#935087, bnc#945649). - btrfs: qgroup: Do not copy extent buffer to do qgroup rescan (bnc#960300). - btrfs: qgroup: Fix a race in delayed_ref which leads to abort trans (bsc#963193). - btrfs: qgroup: Fix a rebase bug which will cause qgroup double free (bsc#963193). - btrfs: qgroup: Fix a regression in qgroup reserved space (bnc#935087, bnc#945649). - btrfs: qgroup: Fix qgroup accounting when creating snapshot (bsc#972993). - btrfs: qgroup: Fix qgroup data leaking by using subtree tracing (bsc#983087). - btrfs: qgroup: Introduce btrfs_qgroup_reserve_data function (bsc#963193). - btrfs: qgroup: Introduce functions to release/free qgroup reserve data space (bsc#963193). - btrfs: qgroup: Introduce new functions to reserve/free metadata (bsc#963193). - btrfs: qgroup: Make snapshot accounting work with new extent-oriented qgroup (bnc#935087, bnc#945649). - btrfs: qgroup: Record possible quota-related extent for qgroup (bnc#935087, bnc#945649). - btrfs: qgroup: Switch rescan to new mechanism (bnc#935087, bnc#945649). - btrfs: qgroup: Switch self test to extent-oriented qgroup mechanism (bnc#935087, bnc#945649). - btrfs: qgroup: Switch to new extent-oriented qgroup mechanism (bnc#935087, bnc#945649). - btrfs: qgroup: Use new metadata reservation (bsc#963193). - btrfs: qgroup: account shared subtree during snapshot delete (bnc#935087, bnc#945649). - btrfs: qgroup: exit the rescan worker during umount (bnc#960300). - btrfs: qgroup: fix quota disable during rescan (bnc#960300). - btrfs: remove old tree_root dirent processing in btrfs_real_readdir() (bsc#981709). - btrfs: serialize subvolume mounts with potentially mismatching rw flags (bsc#951844). - btrfs: skip superblocks during discard (bsc#904489). - btrfs: syslog when quota is disabled. - btrfs: syslog when quota is enabled - btrfs: ulist: Add ulist_del() function (bnc#935087, bnc#945649). - btrfs: use the new VFS super_block_dev (bnc#865869). - btrfs: waiting on qgroup rescan should not always be interruptible (bsc#992712). - fs/super.c: add new super block sub devices super_block_dev (bnc#865869). - fs/super.c: fix race between freeze_super() and thaw_super() (bsc#1025066). - kabi: only use sops->get_inode_dev with proper fsflag (bsc#927455). - qgroup: Prevent qgroup->reserved from going subzero (bsc#993841). - vfs: add super_operations->get_inode_dev (bsc#927455). - xfs: do not allow di_size with high bit set (bsc#1024234). - xfs: exclude never-released buffers from buftarg I/O accounting (bsc#1024508). - xfs: fix broken multi-fsb buffer logging (bsc#1024081). - xfs: fix up xfs_swap_extent_forks inline extent handling (bsc#1023888). - xfs: track and serialize in-flight async buffers against unmount - kABI (bsc#1024508). - xfs: track and serialize in-flight async buffers against unmount (bsc#1024508). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-287=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kernel-default-4.1.38-50.1 kernel-default-base-4.1.38-50.1 kernel-default-base-debuginfo-4.1.38-50.1 kernel-default-debuginfo-4.1.38-50.1 kernel-default-debugsource-4.1.38-50.1 kernel-default-devel-4.1.38-50.1 kernel-obs-build-4.1.38-50.2 kernel-obs-build-debugsource-4.1.38-50.2 kernel-obs-qa-4.1.38-50.1 kernel-syms-4.1.38-50.1 - openSUSE Leap 42.1 (i686 x86_64): kernel-debug-4.1.38-50.1 kernel-debug-base-4.1.38-50.1 kernel-debug-base-debuginfo-4.1.38-50.1 kernel-debug-debuginfo-4.1.38-50.1 kernel-debug-debugsource-4.1.38-50.1 kernel-debug-devel-4.1.38-50.1 kernel-debug-devel-debuginfo-4.1.38-50.1 kernel-ec2-4.1.38-50.1 kernel-ec2-base-4.1.38-50.1 kernel-ec2-base-debuginfo-4.1.38-50.1 kernel-ec2-debuginfo-4.1.38-50.1 kernel-ec2-debugsource-4.1.38-50.1 kernel-ec2-devel-4.1.38-50.1 kernel-pv-4.1.38-50.1 kernel-pv-base-4.1.38-50.1 kernel-pv-base-debuginfo-4.1.38-50.1 kernel-pv-debuginfo-4.1.38-50.1 kernel-pv-debugsource-4.1.38-50.1 kernel-pv-devel-4.1.38-50.1 kernel-vanilla-4.1.38-50.1 kernel-vanilla-debuginfo-4.1.38-50.1 kernel-vanilla-debugsource-4.1.38-50.1 kernel-vanilla-devel-4.1.38-50.1 kernel-xen-4.1.38-50.1 kernel-xen-base-4.1.38-50.1 kernel-xen-base-debuginfo-4.1.38-50.1 kernel-xen-debuginfo-4.1.38-50.1 kernel-xen-debugsource-4.1.38-50.1 kernel-xen-devel-4.1.38-50.1 - openSUSE Leap 42.1 (noarch): kernel-devel-4.1.38-50.1 kernel-docs-4.1.38-50.3 kernel-docs-html-4.1.38-50.3 kernel-docs-pdf-4.1.38-50.3 kernel-macros-4.1.38-50.1 kernel-source-4.1.38-50.1 kernel-source-vanilla-4.1.38-50.1 - openSUSE Leap 42.1 (i686): kernel-pae-4.1.38-50.1 kernel-pae-base-4.1.38-50.1 kernel-pae-base-debuginfo-4.1.38-50.1 kernel-pae-debuginfo-4.1.38-50.1 kernel-pae-debugsource-4.1.38-50.1 kernel-pae-devel-4.1.38-50.1 References: https://www.suse.com/security/cve/CVE-2017-5897.html https://www.suse.com/security/cve/CVE-2017-5970.html https://www.suse.com/security/cve/CVE-2017-5986.html https://www.suse.com/security/cve/CVE-2017-6074.html https://bugzilla.suse.com/1005666 https://bugzilla.suse.com/1015787 https://bugzilla.suse.com/1018100 https://bugzilla.suse.com/1023762 https://bugzilla.suse.com/1023888 https://bugzilla.suse.com/1024081 https://bugzilla.suse.com/1024234 https://bugzilla.suse.com/1024508 https://bugzilla.suse.com/1024938 https://bugzilla.suse.com/1025047 https://bugzilla.suse.com/1025048 https://bugzilla.suse.com/1025049 https://bugzilla.suse.com/1025050 https://bugzilla.suse.com/1025051 https://bugzilla.suse.com/1025053 https://bugzilla.suse.com/1025055 https://bugzilla.suse.com/1025057 https://bugzilla.suse.com/1025058 https://bugzilla.suse.com/1025059 https://bugzilla.suse.com/1025060 https://bugzilla.suse.com/1025061 https://bugzilla.suse.com/1025062 https://bugzilla.suse.com/1025063 https://bugzilla.suse.com/1025064 https://bugzilla.suse.com/1025065 https://bugzilla.suse.com/1025066 https://bugzilla.suse.com/1025067 https://bugzilla.suse.com/1025069 https://bugzilla.suse.com/1025070 https://bugzilla.suse.com/1025071 https://bugzilla.suse.com/1025072 https://bugzilla.suse.com/1025073 https://bugzilla.suse.com/1025074 https://bugzilla.suse.com/1025075 https://bugzilla.suse.com/1025076 https://bugzilla.suse.com/1025077 https://bugzilla.suse.com/1025079 https://bugzilla.suse.com/1025080 https://bugzilla.suse.com/1025081 https://bugzilla.suse.com/1025235 https://bugzilla.suse.com/1026024 https://bugzilla.suse.com/865869 https://bugzilla.suse.com/904489 https://bugzilla.suse.com/927455 https://bugzilla.suse.com/929871 https://bugzilla.suse.com/935087 https://bugzilla.suse.com/935088 https://bugzilla.suse.com/936445 https://bugzilla.suse.com/937609 https://bugzilla.suse.com/937612 https://bugzilla.suse.com/937616 https://bugzilla.suse.com/938550 https://bugzilla.suse.com/938891 https://bugzilla.suse.com/938892 https://bugzilla.suse.com/942512 https://bugzilla.suse.com/942685 https://bugzilla.suse.com/942925 https://bugzilla.suse.com/944001 https://bugzilla.suse.com/945649 https://bugzilla.suse.com/946057 https://bugzilla.suse.com/946902 https://bugzilla.suse.com/949440 https://bugzilla.suse.com/949472 https://bugzilla.suse.com/951615 https://bugzilla.suse.com/951844 https://bugzilla.suse.com/957805 https://bugzilla.suse.com/960300 https://bugzilla.suse.com/963193 https://bugzilla.suse.com/965344 https://bugzilla.suse.com/966278 https://bugzilla.suse.com/966910 https://bugzilla.suse.com/968230 https://bugzilla.suse.com/972844 https://bugzilla.suse.com/972951 https://bugzilla.suse.com/972993 https://bugzilla.suse.com/973855 https://bugzilla.suse.com/975596 https://bugzilla.suse.com/977685 https://bugzilla.suse.com/981038 https://bugzilla.suse.com/981709 https://bugzilla.suse.com/983087 https://bugzilla.suse.com/984779 https://bugzilla.suse.com/985562 https://bugzilla.suse.com/985850 https://bugzilla.suse.com/987192 https://bugzilla.suse.com/989953 https://bugzilla.suse.com/990384 https://bugzilla.suse.com/992712 https://bugzilla.suse.com/993841 https://bugzilla.suse.com/994881

1 0

openSUSE-RU-2017:0546-1: moderate: Recommended update for opera
by maintenance＠opensuse.org 22 Feb '17

22 Feb '17

openSUSE Recommended Update: Recommended update for opera ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0546-1 Rating: moderate References: Affected Products: openSUSE Leap 42.2:NonFree openSUSE Leap 42.1:NonFree ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for opera to version 43.0.2442.991 fixes the following issues: Hi, Today, we have a Stable Opera update with fixes for: – QUIC memory leak – Layout issues on Mac older than 10.12 Chromium is also updated to version 56.0.2924.87. Please see: https://www.opera.com/blogs/desktop/2017/02/opera-stable-43-0-2442-991-upda te/ Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2:NonFree: zypper in -t patch openSUSE-2017-290=1 - openSUSE Leap 42.1:NonFree: zypper in -t patch openSUSE-2017-290=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2:NonFree (x86_64): opera-43.0.2442.991-24.1 - openSUSE Leap 42.1:NonFree (x86_64): opera-43.0.2442.991-61.1 References:

1 0

openSUSE-SU-2017:0541-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 22 Feb '17

22 Feb '17

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0541-1 Rating: important References: #1012382 #1018100 #1019168 #1020048 #1021082 #1022181 #1022304 #1023762 #1023884 #1023888 #1024081 #1024234 #1024508 #1024938 #1025235 #1026024 #969479 #982783 #989056 #998106 Cross-References: CVE-2017-5897 CVE-2017-5970 CVE-2017-5986 CVE-2017-6074 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves four vulnerabilities and has 16 fixes is now available. Description: The openSUSE Leap 42.2 kernel was updated to 4.4.49 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5986: A userlevel triggerable BUG_ON on sctp_wait_for_sndbuf was fixed. (bsc#1025235) - CVE-2017-5970: The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel allowed attackers to cause a denial of service (system crash) via (1) an application that made crafted system calls or possibly (2) IPv4 traffic with invalid IP options (bnc#1024938). - CVE-2017-5897: A potential remote denial of service within the IPv6 GRE protocol was fixed. (bsc#1023762) - CVE-2017-6074: The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel mishandled DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allowed local users to cause a denial of service (invalid free) or possibly have unspecified other impact via an application that makes an IPV6_RECVPKTINFO setsockopt system call. (bsc#1026024). The following non-security bugs were fixed: - btrfs: fix btrfs_compat_ioctl failures on non-compat ioctls (bsc#1018100). - iwlwifi: Expose the default fallback ucode API to module info (boo#1021082, boo#1023884). - kabi: protect struct tcp_fastopen_cookie (kabi). - md: ensure md devices are freed before module is unloaded (bsc#1022304). - md: Fix a regression reported by bsc#1020048 in patches.fixes/0003-md-lockless-I-O-submission-for-RAID1.patch (bsc#982783,bsc#998106,bsc#1020048). - net: ethtool: Initialize buffer when querying device channel settings (bsc#969479 FATE#320634). - net: implement netif_cond_dbg macro (bsc#1019168). - sfc: reduce severity of PIO buffer alloc failures (bsc#1019168). - sfc: refactor debug-or-warnings printks (bsc#1019168). - xfs_dmapi: fix the debug compilation of xfs_dmapi (bsc#989056). - xfs: do not allow di_size with high bit set (bsc#1024234). - xfs: exclude never-released buffers from buftarg I/O accounting (bsc#1024508). - xfs: fix broken multi-fsb buffer logging (bsc#1024081). - xfs: fix buffer overflow dm_get_dirattrs/dm_get_dirattrs2 (bsc#989056). - xfs: fix up xfs_swap_extent_forks inline extent handling (bsc#1023888). - xfs: track and serialize in-flight async buffers against unmount (bsc#1024508). - xfs: track and serialize in-flight async buffers against unmount - kABI (bsc#1024508). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-286=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): kernel-devel-4.4.49-16.1 kernel-docs-4.4.49-16.2 kernel-docs-html-4.4.49-16.2 kernel-docs-pdf-4.4.49-16.2 kernel-macros-4.4.49-16.1 kernel-source-4.4.49-16.1 kernel-source-vanilla-4.4.49-16.1 - openSUSE Leap 42.2 (x86_64): kernel-debug-4.4.49-16.1 kernel-debug-base-4.4.49-16.1 kernel-debug-base-debuginfo-4.4.49-16.1 kernel-debug-debuginfo-4.4.49-16.1 kernel-debug-debugsource-4.4.49-16.1 kernel-debug-devel-4.4.49-16.1 kernel-debug-devel-debuginfo-4.4.49-16.1 kernel-default-4.4.49-16.1 kernel-default-base-4.4.49-16.1 kernel-default-base-debuginfo-4.4.49-16.1 kernel-default-debuginfo-4.4.49-16.1 kernel-default-debugsource-4.4.49-16.1 kernel-default-devel-4.4.49-16.1 kernel-obs-build-4.4.49-16.1 kernel-obs-build-debugsource-4.4.49-16.1 kernel-obs-qa-4.4.49-16.1 kernel-syms-4.4.49-16.1 kernel-vanilla-4.4.49-16.1 kernel-vanilla-base-4.4.49-16.1 kernel-vanilla-base-debuginfo-4.4.49-16.1 kernel-vanilla-debuginfo-4.4.49-16.1 kernel-vanilla-debugsource-4.4.49-16.1 kernel-vanilla-devel-4.4.49-16.1 References: https://www.suse.com/security/cve/CVE-2017-5897.html https://www.suse.com/security/cve/CVE-2017-5970.html https://www.suse.com/security/cve/CVE-2017-5986.html https://www.suse.com/security/cve/CVE-2017-6074.html https://bugzilla.suse.com/1012382 https://bugzilla.suse.com/1018100 https://bugzilla.suse.com/1019168 https://bugzilla.suse.com/1020048 https://bugzilla.suse.com/1021082 https://bugzilla.suse.com/1022181 https://bugzilla.suse.com/1022304 https://bugzilla.suse.com/1023762 https://bugzilla.suse.com/1023884 https://bugzilla.suse.com/1023888 https://bugzilla.suse.com/1024081 https://bugzilla.suse.com/1024234 https://bugzilla.suse.com/1024508 https://bugzilla.suse.com/1024938 https://bugzilla.suse.com/1025235 https://bugzilla.suse.com/1026024 https://bugzilla.suse.com/969479 https://bugzilla.suse.com/982783 https://bugzilla.suse.com/989056 https://bugzilla.suse.com/998106

1 0

openSUSE-SU-2017:0531-1: moderate: Security update for profanity
by opensuse-security＠opensuse.org 21 Feb '17

21 Feb '17

openSUSE Security Update: Security update for profanity ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0531-1 Rating: moderate References: #1024696 Cross-References: CVE-2017-5592 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for profanity fixes the following issues: Changes in profanity: - CVE-2017-5592: The incorrect message carbons implementation that could allow user impersonification was fixed (boo#1024696) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-285=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-285=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): profanity-0.5.0-4.1 profanity-debuginfo-0.5.0-4.1 profanity-debugsource-0.5.0-4.1 profanity-mini-0.5.0-4.1 profanity-mini-debuginfo-0.5.0-4.1 profanity-standard-0.5.0-4.1 profanity-standard-debuginfo-0.5.0-4.1 - openSUSE Leap 42.1 (i586 x86_64): profanity-0.4.7-3.1 profanity-debuginfo-0.4.7-3.1 profanity-debugsource-0.4.7-3.1 References: https://www.suse.com/security/cve/CVE-2017-5592.html https://bugzilla.suse.com/1024696

1 0

openSUSE-SU-2017:0528-1: moderate: Security update for libplist
by opensuse-security＠opensuse.org 20 Feb '17

20 Feb '17

openSUSE Security Update: Security update for libplist ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0528-1 Rating: moderate References: #1019531 #1023807 #1023822 #1023848 Cross-References: CVE-2017-5209 CVE-2017-5834 CVE-2017-5835 CVE-2017-5836 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for libplist fixes the following issues: - CVE-2017-5209: The base64decode function in libplist allowed attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data (bsc#1019531). - CVE-2017-5834: A heap-buffer overflow in parse_dict_node was fixed (bsc#1023848) - CVE-2017-5835: A memory allocation error leading to DoS was fixed. (bsc#1023822) - CVE-2017-5836: A type inconsistency in bplist.c was fixed. (bsc#1023807) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-283=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libplist++-devel-1.12-7.1 libplist++3-1.12-7.1 libplist++3-debuginfo-1.12-7.1 libplist-debugsource-1.12-7.1 libplist-devel-1.12-7.1 libplist3-1.12-7.1 libplist3-debuginfo-1.12-7.1 plistutil-1.12-7.1 plistutil-debuginfo-1.12-7.1 python-plist-1.12-7.1 python-plist-debuginfo-1.12-7.1 - openSUSE Leap 42.1 (x86_64): libplist++3-32bit-1.12-7.1 libplist++3-debuginfo-32bit-1.12-7.1 libplist3-32bit-1.12-7.1 libplist3-debuginfo-32bit-1.12-7.1 References: https://www.suse.com/security/cve/CVE-2017-5209.html https://www.suse.com/security/cve/CVE-2017-5834.html https://www.suse.com/security/cve/CVE-2017-5835.html https://www.suse.com/security/cve/CVE-2017-5836.html https://bugzilla.suse.com/1019531 https://bugzilla.suse.com/1023807 https://bugzilla.suse.com/1023822 https://bugzilla.suse.com/1023848

1 0

openSUSE-SU-2017:0527-1: moderate: Security update for nodejs
by opensuse-security＠opensuse.org 20 Feb '17

20 Feb '17

openSUSE Security Update: Security update for nodejs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0527-1 Rating: moderate References: #1009528 #1022085 #1022086 Cross-References: CVE-2016-7055 CVE-2017-3731 CVE-2017-3732 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: nodejs was updated to LTS release 4.7.3 to fix the following issues: * deps: upgrade embedded openssl sources to 1.0.2k (CVE-2017-3731, CVE-2017-3732, CVE-2016-7055, boo#1022085, boo#1022086, boo#1009528) Changes in LTS release 4.7.1: * build: shared library support is now working for AIX builds * repl: passing options to the repl will no longer overwrite defaults * timers: recanceling a cancelled timers will no longer throw Changes in LTS release 4.7.0: * build: introduce the configure --shared option for embedders * debugger: make listen address configurable in debugger server * dgram: generalized send queue to handle close, fixing a potential throw when dgram socket is closed in the listening event handler * http: introduce the 451 status code "Unavailable For Legal Reasons" * gtest: the test reporter now outputs tap comments as yamlish * tls: introduce secureContext for tls.connect (useful for caching client certificates, key, and CA certificates) * tls: fix memory leak when writing data to TLSWrap instance during handshake * src: node no longer aborts when c-ares initialization fails Changes in LTS release 4.6.2: * build: it is now possible to build the documentation from the release tarball * buffer: Buffer.alloc() will no longer incorrectly return a zero filled buffer when an encoding is passed * deps/npm: upgrade npm in LTS to 2.15.11 * repl: enable tab completion for global properties * url: url.format() will now encode all "#" in search Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-284=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): nodejs-4.7.3-39.1 nodejs-debuginfo-4.7.3-39.1 nodejs-debugsource-4.7.3-39.1 nodejs-devel-4.7.3-39.1 npm-4.7.3-39.1 - openSUSE Leap 42.1 (noarch): nodejs-docs-4.7.3-39.1 References: https://www.suse.com/security/cve/CVE-2016-7055.html https://www.suse.com/security/cve/CVE-2017-3731.html https://www.suse.com/security/cve/CVE-2017-3732.html https://bugzilla.suse.com/1009528 https://bugzilla.suse.com/1022085 https://bugzilla.suse.com/1022086

1 0

openSUSE-SU-2017:0515-1: moderate: Security update for mcabber
by opensuse-security＠opensuse.org 20 Feb '17

20 Feb '17

openSUSE Security Update: Security update for mcabber ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0515-1 Rating: moderate References: #1024690 Cross-References: CVE-2017-5589 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: mcabber was updated to 1.0.5 to fix the following issues: * Much better performances with huge rosters. * Fix an issue with carbons (CVE-2017-5589, boo#1024690). * Fix a small memory leak. * contrib/vim: Support reloading filetype detection. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-282=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): mcabber-1.0.5-6.1 mcabber-debuginfo-1.0.5-6.1 mcabber-debugsource-1.0.5-6.1 mcabber-devel-1.0.5-6.1 References: https://www.suse.com/security/cve/CVE-2017-5589.html https://bugzilla.suse.com/1024690

1 0

openSUSE-SU-2017:0514-1: moderate: Security update for firebird
by opensuse-security＠opensuse.org 19 Feb '17

19 Feb '17

openSUSE Security Update: Security update for firebird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0514-1 Rating: moderate References: #1023990 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for firebird fixes the following issues: - security vulnerability fix for bypassing 'Restrict UDF' value of UdfAccess config directive (boo#1023990) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-279=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-279=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): firebird-2.5.6.27020-10.1 firebird-classic-2.5.6.27020-10.1 firebird-classic-debuginfo-2.5.6.27020-10.1 firebird-classic-debugsource-2.5.6.27020-10.1 firebird-debuginfo-2.5.6.27020-10.1 firebird-debugsource-2.5.6.27020-10.1 firebird-devel-2.5.6.27020-10.1 firebird-superserver-2.5.6.27020-10.1 firebird-superserver-debuginfo-2.5.6.27020-10.1 libfbclient2-2.5.6.27020-10.1 libfbclient2-debuginfo-2.5.6.27020-10.1 libfbclient2-devel-2.5.6.27020-10.1 libfbembed-devel-2.5.6.27020-10.1 libfbembed2_5-2.5.6.27020-10.1 libfbembed2_5-debuginfo-2.5.6.27020-10.1 - openSUSE Leap 42.2 (noarch): firebird-doc-2.5.6.27020-10.1 - openSUSE Leap 42.2 (x86_64): firebird-32bit-2.5.6.27020-10.1 firebird-debuginfo-32bit-2.5.6.27020-10.1 libfbclient2-32bit-2.5.6.27020-10.1 libfbclient2-debuginfo-32bit-2.5.6.27020-10.1 libfbembed2_5-32bit-2.5.6.27020-10.1 libfbembed2_5-debuginfo-32bit-2.5.6.27020-10.1 - openSUSE Leap 42.1 (i586 x86_64): firebird-2.5.6.27020-10.1 firebird-classic-2.5.6.27020-10.1 firebird-classic-debuginfo-2.5.6.27020-10.1 firebird-classic-debugsource-2.5.6.27020-10.1 firebird-debuginfo-2.5.6.27020-10.1 firebird-debugsource-2.5.6.27020-10.1 firebird-devel-2.5.6.27020-10.1 firebird-superserver-2.5.6.27020-10.1 firebird-superserver-debuginfo-2.5.6.27020-10.1 libfbclient2-2.5.6.27020-10.1 libfbclient2-debuginfo-2.5.6.27020-10.1 libfbclient2-devel-2.5.6.27020-10.1 libfbembed-devel-2.5.6.27020-10.1 libfbembed2_5-2.5.6.27020-10.1 libfbembed2_5-debuginfo-2.5.6.27020-10.1 - openSUSE Leap 42.1 (noarch): firebird-doc-2.5.6.27020-10.1 - openSUSE Leap 42.1 (x86_64): firebird-32bit-2.5.6.27020-10.1 firebird-debuginfo-32bit-2.5.6.27020-10.1 libfbclient2-32bit-2.5.6.27020-10.1 libfbclient2-debuginfo-32bit-2.5.6.27020-10.1 libfbembed2_5-32bit-2.5.6.27020-10.1 libfbembed2_5-debuginfo-32bit-2.5.6.27020-10.1 References: https://bugzilla.suse.com/1023990

1 0

openSUSE-SU-2017:0513-1: important: Security update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 19 Feb '17

19 Feb '17

openSUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0513-1 Rating: important References: #1020905 Cross-References: CVE-2016-2183 CVE-2016-5546 CVE-2016-5547 CVE-2016-5548 CVE-2016-5549 CVE-2016-5552 CVE-2017-3231 CVE-2017-3241 CVE-2017-3252 CVE-2017-3253 CVE-2017-3259 CVE-2017-3260 CVE-2017-3261 CVE-2017-3272 CVE-2017-3289 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: This update for java-1_7_0-openjdk fixes the following issues: - Oracle Critical Patch Update of January 2017 to OpenJDK 7u131 (bsc#1020905): * Security Fixes - S8138725: Add options for Javadoc generation - S8140353: Improve signature checking - S8151934, CVE-2017-3231: Resolve class resolution - S8156804, CVE-2017-3241: Better constraint checking - S8158406: Limited Parameter Processing - S8158997: JNDI Protocols Switch - S8159507: RuntimeVisibleAnnotation validation - S8161218: Better bytecode loading - S8161743, CVE-2017-3252: Provide proper login context - S8162577: Standardize logging levels - S8162973: Better component components - S8164143, CVE-2017-3260: Improve components for menu items - S8164147, CVE-2017-3261: Improve streaming socket output - S8165071, CVE-2016-2183: Expand TLS support - S8165344, CVE-2017-3272: Update concurrency support - S8166988, CVE-2017-3253: Improve image processing performance - S8167104, CVE-2017-3289: Additional class construction refinements - S8167223, CVE-2016-5552: URL handling improvements - S8168705, CVE-2016-5547: Better ObjectIdentifier validation - S8168714, CVE-2016-5546: Tighten ECDSA validation - S8168728, CVE-2016-5548: DSA signing improvments - S8168724, CVE-2016-5549: ECDSA signing improvments - S6253144: Long narrowing conversion should describe the algorithm used and implied "risks" - S6328537: Improve javadocs for Socket class by adding references to SocketOptions - S6978886: javadoc shows stacktrace after print error resulting from disk full - S6995421: Eliminate the static dependency to sun.security.ec.ECKeyFactory - S6996372: synchronizing handshaking hash - S7027045: (doc) java/awt/Window.java has several typos in javadoc - S7054969: Null-check-in-finally pattern in java/security documentation - S7072353: JNDI libraries do not build with javac -Xlint:all -Werror - S7075563: Broken link in "javax.swing.SwingWorker" - S7077672: jdk8_tl nightly fail in step-2 build on 8/10/11 - S7088502: Security libraries don't build with javac -Werror - S7092447: Clarify the default locale used in each locale sensitive operation - S7093640: Enable client-side TLS 1.2 by default - S7103570: AtomicIntegerFieldUpdater does not work when SecurityManager is installed - S7117360: Warnings in java.util.concurrent.atomic package - S7117465: Warning cleanup for IMF classes - S7187144: JavaDoc for ScriptEngineFactory.getProgram() contains an error - S8000418: javadoc should used a standard "generated by javadoc" string - S8000666: javadoc should write directly to Writer instead of composing strings - S8000673: remove dead code from HtmlWriter and subtypes - S8000970: break out auxiliary classes that will prevent multi-core compilation of the JDK - S8001669: javadoc internal DocletAbortException should set cause when appropriate - S8008949: javadoc stopped copying doc-files - S8011402: Move blacklisting certificate logic from hard code to data - S8011547: Update XML Signature implementation to Apache Santuario 1.5.4 - S8012288: XML DSig API allows wrong tag names and extra elements in SignedInfo - S8016217: More javadoc warnings - S8017325: Cleanup of the javadoc <code> tag in java.security.cert - S8017326: Cleanup of the javadoc <code> tag in java.security.spec - S8019772: Fix doclint issues in javax.crypto and javax.security subpackages - S8020557: javadoc cleanup in javax.security - S8020688: Broken links in documentation at http://docs.oracle.com/javase/6/docs/api/index. - S8021108: Clean up doclint warnings and errors in java.text package - S8021417: Fix doclint issues in java.util.concurrent - S8021833: javadoc cleanup in java.net - S8022120: JCK test api/javax_xml/crypto/dsig/TransformService/index_ParamMethods fails - S8022175: Fix doclint warnings in javax.print - S8022406: Fix doclint issues in java.beans - S8022746: List of spelling errors in API doc - S8024779: [macosx] SwingNode crashes on exit - S8025085: [javadoc] some errors in javax/swing - S8025218: [javadoc] some errors in java/awt classes - S8025249: [javadoc] fix some javadoc errors in javax/swing/ - S8025409: Fix javadoc comments errors and warning reported by doclint report - S8026021: more fix of javadoc errors and warnings reported by doclint, see the description - S8037099: [macosx] Remove all references to GC from native OBJ-C code - S8038184: XMLSignature throws StringIndexOutOfBoundsException if ID attribute value is empty String - S8038349: Signing XML with DSA throws Exception when key is larger than 1024 bits - S8049244: XML Signature performance issue caused by unbuffered signature data - S8049432: New tests for TLS property jdk.tls.client.protocols - S8050893: (smartcardio) Invert reset argument in tests in sun/security/smartcardio - S8059212: Modify regression tests so that they do not just fail if no cardreader found - S8068279: (typo in the spec) javax.script.ScriptEngineFactory.getLanguageName - S8068491: Update the protocol for references of docs.oracle.com to HTTPS. - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs to be updated for JDK-8061210 - S8076369: Introduce the jdk.tls.client.protocols system property for JDK 7u - S8139565: Restrict certificates with DSA keys less than 1024 bits - S8140422: Add mechanism to allow non default root CAs to be not subject to algorithm restrictions - S8140587: Atomic*FieldUpdaters should use Class.isInstance instead of direct class check - S8143959: Certificates requiring blacklisting - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks - S8148516: Improve the default strength of EC in JDK - S8149029: Secure validation of XML based digital signature always enabled when checking wrapping attacks - S8151893: Add security property to configure XML Signature secure validation mode - S8155760: Implement Serialization Filtering - S8156802: Better constraint checking - S8161228: URL objects with custom protocol handlers have port changed after deserializing - S8161571: Verifying ECDSA signatures permits trailing bytes - S8163304: jarsigner -verbose -verify should print the algorithms used to sign the jar - S8164908: ReflectionFactory support for IIOP and custom serialization - S8165230: RMIConnection addNotificationListeners failing with specific inputs - S8166393: disabledAlgorithms property should not be strictly parsed - S8166591: [macos 10.12] Trackpad scrolling of text on OS X 10.12 Sierra is very fast (Trackpad, Retina only) - S8166739: Improve extensibility of ObjectInputFilter information passed to the filter - S8166875: (tz) Support tzdata2016g - S8166878: Connection reset during TLS handshake - S8167356: Follow up fix for jdk8 backport of 8164143. Changes for CMenuComponent.m were missed - S8167459: Add debug output for indicating if a chosen ciphersuite was legacy - S8167472: Chrome interop regression with JDK-8148516 - S8167591: Add MD5 to signed JAR restrictions - S8168861: AnchorCertificates uses hardcoded password for cacerts keystore - S8168993: JDK8u121 L10n resource file update - S8169191: (tz) Support tzdata2016i - S8169688: Backout (remove) MD5 from jdk.jar.disabledAlgorithms for January CPU - S8169911: Enhanced tests for jarsigner -verbose -verify after JDK-8163304 - S8170131: Certificates not being blocked by jdk.tls.disabledAlgorithms property - S8170268: 8u121 L10n resource file update - msgdrop 20 - S8173622: Backport of 7180907 is incomplete - S8173849: Fix use of java.util.Base64 in test cases - S8173854: [TEST] Update DHEKeySizing test case following 8076328 & 8081760 - CVE-2017-3259 Vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. * Backports - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on __APPLE__and _LLP64 systems. - S8000351, PR3316, RH1390708: Tenuring threshold should be unsigned - S8153711, PR3315, RH1284948: [REDO] GlobalRefs never deleted when processing invokeMethod command - S8170888, PR3316, RH1390708: [linux] support for cgroup memory limits in container (ie Docker) environments * Bug fixes - PR3318: Replace 'infinality' with 'improved font rendering' (--enable-improved-font-rendering) - PR3318: Fix compatibility with vanilla Fontconfig - PR3318: Fix glyph y advance - PR3318: Always round glyph advance in 26.6 space - PR3318: Simplify glyph advance handling - PR3324: Fix NSS_LIBDIR substitution in make_generic_profile.sh broken by PR1989 * AArch64 port - S8165673, PR3320: AArch64: Fix JNI floating point argument handling This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-278=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-278=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): java-1_7_0-openjdk-1.7.0.131-40.1 java-1_7_0-openjdk-accessibility-1.7.0.131-40.1 java-1_7_0-openjdk-bootstrap-1.7.0.131-40.1 java-1_7_0-openjdk-bootstrap-debuginfo-1.7.0.131-40.1 java-1_7_0-openjdk-bootstrap-debugsource-1.7.0.131-40.1 java-1_7_0-openjdk-bootstrap-devel-1.7.0.131-40.1 java-1_7_0-openjdk-bootstrap-devel-debuginfo-1.7.0.131-40.1 java-1_7_0-openjdk-bootstrap-headless-1.7.0.131-40.1 java-1_7_0-openjdk-bootstrap-headless-debuginfo-1.7.0.131-40.1 java-1_7_0-openjdk-debuginfo-1.7.0.131-40.1 java-1_7_0-openjdk-debugsource-1.7.0.131-40.1 java-1_7_0-openjdk-demo-1.7.0.131-40.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.131-40.1 java-1_7_0-openjdk-devel-1.7.0.131-40.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.131-40.1 java-1_7_0-openjdk-headless-1.7.0.131-40.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.131-40.1 java-1_7_0-openjdk-src-1.7.0.131-40.1 - openSUSE Leap 42.2 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.131-40.1 - openSUSE Leap 42.1 (i586 x86_64): java-1_7_0-openjdk-1.7.0.131-40.1 java-1_7_0-openjdk-accessibility-1.7.0.131-40.1 java-1_7_0-openjdk-bootstrap-1.7.0.131-40.1 java-1_7_0-openjdk-bootstrap-debuginfo-1.7.0.131-40.1 java-1_7_0-openjdk-bootstrap-debugsource-1.7.0.131-40.1 java-1_7_0-openjdk-bootstrap-devel-1.7.0.131-40.1 java-1_7_0-openjdk-bootstrap-devel-debuginfo-1.7.0.131-40.1 java-1_7_0-openjdk-bootstrap-headless-1.7.0.131-40.1 java-1_7_0-openjdk-bootstrap-headless-debuginfo-1.7.0.131-40.1 java-1_7_0-openjdk-debuginfo-1.7.0.131-40.1 java-1_7_0-openjdk-debugsource-1.7.0.131-40.1 java-1_7_0-openjdk-demo-1.7.0.131-40.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.131-40.1 java-1_7_0-openjdk-devel-1.7.0.131-40.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.131-40.1 java-1_7_0-openjdk-headless-1.7.0.131-40.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.131-40.1 java-1_7_0-openjdk-src-1.7.0.131-40.1 - openSUSE Leap 42.1 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.131-40.1 References: https://www.suse.com/security/cve/CVE-2016-2183.html https://www.suse.com/security/cve/CVE-2016-5546.html https://www.suse.com/security/cve/CVE-2016-5547.html https://www.suse.com/security/cve/CVE-2016-5548.html https://www.suse.com/security/cve/CVE-2016-5549.html https://www.suse.com/security/cve/CVE-2016-5552.html https://www.suse.com/security/cve/CVE-2017-3231.html https://www.suse.com/security/cve/CVE-2017-3241.html https://www.suse.com/security/cve/CVE-2017-3252.html https://www.suse.com/security/cve/CVE-2017-3253.html https://www.suse.com/security/cve/CVE-2017-3259.html https://www.suse.com/security/cve/CVE-2017-3260.html https://www.suse.com/security/cve/CVE-2017-3261.html https://www.suse.com/security/cve/CVE-2017-3272.html https://www.suse.com/security/cve/CVE-2017-3289.html https://bugzilla.suse.com/1020905

1 0

openSUSE-SU-2017:0512-1: moderate: Security update for tiff
by opensuse-security＠opensuse.org 19 Feb '17

19 Feb '17

openSUSE Security Update: Security update for tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0512-1 Rating: moderate References: #1019611 #1022103 Cross-References: CVE-2017-5225 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for tiff fixes the following issues: - CVE-2017-5225: A crafted TIFF image could cause a crash and potential code execution when processed by the 'tiffcp' utility (bsc#1019611). Also a regression from the version update to 4.0.7 was fixed in handling TIFFTAG_FAXRECVPARAMS. (bsc#1022103) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-281=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-281=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libtiff-devel-4.0.7-15.1 libtiff5-4.0.7-15.1 libtiff5-debuginfo-4.0.7-15.1 tiff-4.0.7-15.1 tiff-debuginfo-4.0.7-15.1 tiff-debugsource-4.0.7-15.1 - openSUSE Leap 42.2 (x86_64): libtiff-devel-32bit-4.0.7-15.1 libtiff5-32bit-4.0.7-15.1 libtiff5-debuginfo-32bit-4.0.7-15.1 - openSUSE Leap 42.1 (i586 x86_64): libtiff-devel-4.0.7-15.1 libtiff5-4.0.7-15.1 libtiff5-debuginfo-4.0.7-15.1 tiff-4.0.7-15.1 tiff-debuginfo-4.0.7-15.1 tiff-debugsource-4.0.7-15.1 - openSUSE Leap 42.1 (x86_64): libtiff-devel-32bit-4.0.7-15.1 libtiff5-32bit-4.0.7-15.1 libtiff5-debuginfo-32bit-4.0.7-15.1 References: https://www.suse.com/security/cve/CVE-2017-5225.html https://bugzilla.suse.com/1019611 https://bugzilla.suse.com/1022103

1 0

openSUSE-SU-2017:0511-1: moderate: Security update for vim
by opensuse-security＠opensuse.org 19 Feb '17

19 Feb '17

openSUSE Security Update: Security update for vim ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0511-1 Rating: moderate References: #1024724 Cross-References: CVE-2017-5953 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for vim fixes the following issues: - CVE-2017-5953: Fixed a possible overflow with corrupted spell file (bsc#1024724) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-280=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gvim-7.4.326-11.1 gvim-debuginfo-7.4.326-11.1 vim-7.4.326-11.1 vim-debuginfo-7.4.326-11.1 vim-debugsource-7.4.326-11.1 - openSUSE Leap 42.1 (noarch): vim-data-7.4.326-11.1 References: https://www.suse.com/security/cve/CVE-2017-5953.html https://bugzilla.suse.com/1024724

1 0

openSUSE-SU-2017:0510-1: important: Security update for opus
by opensuse-security＠opensuse.org 18 Feb '17

18 Feb '17

openSUSE Security Update: Security update for opus ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0510-1 Rating: important References: #1020102 Cross-References: CVE-2017-0381 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for opus fixes the following issues: - CVE-2017-0381: Fixed a remote code execution vulnerability in silk/NLSF_stabilize.c when playing certain media files (bsc#1020102) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-277=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-277=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libopus-devel-1.1-6.1 libopus-devel-static-1.1-6.1 libopus0-1.1-6.1 libopus0-debuginfo-1.1-6.1 opus-debugsource-1.1-6.1 - openSUSE Leap 42.2 (x86_64): libopus0-32bit-1.1-6.1 libopus0-debuginfo-32bit-1.1-6.1 - openSUSE Leap 42.1 (i586 x86_64): libopus-devel-1.1-5.1 libopus-devel-static-1.1-5.1 libopus0-1.1-5.1 libopus0-debuginfo-1.1-5.1 opus-debugsource-1.1-5.1 - openSUSE Leap 42.1 (x86_64): libopus0-32bit-1.1-5.1 libopus0-debuginfo-32bit-1.1-5.1 References: https://www.suse.com/security/cve/CVE-2017-0381.html https://bugzilla.suse.com/1020102

1 0

openSUSE-SU-2017:0509-1: moderate: Security update for open-vm-tools
by opensuse-security＠opensuse.org 18 Feb '17

18 Feb '17

openSUSE Security Update: Security update for open-vm-tools ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0509-1 Rating: moderate References: #1006796 #1007600 #1011057 #1013496 #913727 #971031 #978424 #985110 #994598 Cross-References: CVE-2015-5191 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has 8 fixes is now available. Description: This update for open-vm-tools fixes the following issues: - Updated to 10.1.0 stable release (boo#1011057) + vmware-namespace-cmd command line utility. + gtk3 support + Common Agent Framework (CAF) + guest authentication with xmlsec1 + FreeBSD support + sub-command to push updated network information to the host on demand + udev rules for configuring SCSI timeouts in the guest + fixes for Ubuntu 16.10 + Fix for quiesced snapshot failure leaving guest file system quiesced (boo#1006796) + Fix for CVE-2015-5191 (boo#1007600) - Report SLES12-SAP guest OS as SLES12 (boo#1013496) - Remove building KMP modules. No longer needed or wanted for current releases. User space tool vmhgfs-fuse has replaced the need for vmhgfs kernel module. - Add udev rule to increase VMware virtual disk timeout values (boo#994598) - Fix vmtoolsd init script to run vmtoolsd in background. (boo#971031) + fix originally done in SLE-11-SP4 code base by tcech(a)suse.cz - Added patches for GCC 6 build failure (boo#985110) - Update to 10.0.7-gtk3 stable branch + add support for gtk3, needed by the dndcp and resolutionset plugins + remove files generated by autoreconf + a few minor build fixes - Update fixes copy-n-paste and drag-n-drop regressions (boo#978424) - Added new vmblock-fuse.service - Update to 10.0.7 stable branch + Added namespace command line utility "vmware-namespace-cmd". - Compile without gtkmm support for SLES12 based environments (which do not provide gtkmm2.4) - Update to 10.0.5 stable branch + [vgauth] fix timestamp check + [libresolutionSet.so] Add an error handler to X11 resolutionSet + [vmci.ko] Kill tasklet when unloading vmci module + [libvmbackup.so] Quiesced snapshots Skip freezing autofs mounts. + [vmhgfs.ko] make vmhgfs compatible with Linux kernel 4.2 - This update also addresses a suspend with systemd issue (boo#913727) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-276=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libvmtools-devel-10.1.0-6.1 libvmtools0-10.1.0-6.1 libvmtools0-debuginfo-10.1.0-6.1 open-vm-tools-10.1.0-6.1 open-vm-tools-debuginfo-10.1.0-6.1 open-vm-tools-debugsource-10.1.0-6.1 open-vm-tools-desktop-10.1.0-6.1 open-vm-tools-desktop-debuginfo-10.1.0-6.1 References: https://www.suse.com/security/cve/CVE-2015-5191.html https://bugzilla.suse.com/1006796 https://bugzilla.suse.com/1007600 https://bugzilla.suse.com/1011057 https://bugzilla.suse.com/1013496 https://bugzilla.suse.com/913727 https://bugzilla.suse.com/971031 https://bugzilla.suse.com/978424 https://bugzilla.suse.com/985110 https://bugzilla.suse.com/994598

1 0

openSUSE-RU-2017:0508-1: Recommended update for lvm2
by maintenance＠opensuse.org 18 Feb '17

18 Feb '17

openSUSE Recommended Update: Recommended update for lvm2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0508-1 Rating: low References: #1012973 #1017034 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for lvm2 fixes the following issue: - Remove special case for md in 69-dm-lvm-metadata.rules. (bsc#1012973) - Booting from MPIO fails to activate LVM. (bsc#1017034) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-266=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): device-mapper-1.02.97-73.1 device-mapper-debuginfo-1.02.97-73.1 device-mapper-devel-1.02.97-73.1 lvm2-2.02.120-73.1 lvm2-clvm-2.02.120-73.1 lvm2-clvm-debuginfo-2.02.120-73.1 lvm2-cmirrord-2.02.120-73.1 lvm2-cmirrord-debuginfo-2.02.120-73.1 lvm2-debuginfo-2.02.120-73.1 lvm2-debugsource-2.02.120-73.1 lvm2-devel-2.02.120-73.1 - openSUSE Leap 42.1 (x86_64): device-mapper-32bit-1.02.97-73.1 device-mapper-debuginfo-32bit-1.02.97-73.1 device-mapper-devel-32bit-1.02.97-73.1 References: https://bugzilla.suse.com/1012973 https://bugzilla.suse.com/1017034

1 0

openSUSE-RU-2017:0507-1: Recommended update for vlc
by maintenance＠opensuse.org 18 Feb '17

18 Feb '17

openSUSE Recommended Update: Recommended update for vlc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0507-1 Rating: low References: #1012556 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for vlc fixes the following issues: - Change dependency of the language package on vlc-noX instead of vlc. (boo#1012556) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-267=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): vlc-lang-2.2.4-30.1 - openSUSE Leap 42.2 (x86_64): libvlc5-2.2.4-30.1 libvlc5-debuginfo-2.2.4-30.1 libvlccore8-2.2.4-30.1 libvlccore8-debuginfo-2.2.4-30.1 vlc-2.2.4-30.1 vlc-codec-gstreamer-2.2.4-30.1 vlc-codec-gstreamer-debuginfo-2.2.4-30.1 vlc-debuginfo-2.2.4-30.1 vlc-debugsource-2.2.4-30.1 vlc-devel-2.2.4-30.1 vlc-noX-2.2.4-30.1 vlc-noX-debuginfo-2.2.4-30.1 vlc-qt-2.2.4-30.1 vlc-qt-debuginfo-2.2.4-30.1 References: https://bugzilla.suse.com/1012556

1 0

openSUSE-RU-2017:0506-1: moderate: Recommended update for lxc
by maintenance＠opensuse.org 18 Feb '17

18 Feb '17

openSUSE Recommended Update: Recommended update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0506-1 Rating: moderate References: #1019662 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxc fixes the following issues: - lxc-start would fail to start containers when AppArmor confinement was used (boo#1019662) A openSUSE_apparmor_mount.conf was added, and the package now reloads apparmor related files upon installation and upgrade. In addition, lxc was updated to version 1.1.5. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-269=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): lxc-1.1.5-13.1 lxc-debuginfo-1.1.5-13.1 lxc-debugsource-1.1.5-13.1 lxc-devel-1.1.5-13.1 References: https://bugzilla.suse.com/1019662

1 0

openSUSE-SU-2017:0504-1: moderate: Security update for mupdf
by opensuse-security＠opensuse.org 18 Feb '17

18 Feb '17

openSUSE Security Update: Security update for mupdf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0504-1 Rating: moderate References: #1022503 #1022504 #1023760 #1023761 #1024679 Cross-References: CVE-2017-5627 CVE-2017-5628 CVE-2017-5896 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: This update for mupdf fixes the following vulnerabilities: - CVE-2017-5627: Integer overflow in the mujs implementation (boo#1022503) - CVE-2017-5628: Integer overflow in the mujs implementation (boo#1022504) - CVE-2017-5896: heap overflow (boo#1023761, boo#1024679) - NULL pointer dereference in dodrawpage (boo#1023760) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-271=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-271=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): mupdf-1.10a-11.2 mupdf-devel-static-1.10a-11.2 - openSUSE Leap 42.1 (i586 x86_64): mupdf-1.10a-15.1 mupdf-devel-static-1.10a-15.1 References: https://www.suse.com/security/cve/CVE-2017-5627.html https://www.suse.com/security/cve/CVE-2017-5628.html https://www.suse.com/security/cve/CVE-2017-5896.html https://bugzilla.suse.com/1022503 https://bugzilla.suse.com/1022504 https://bugzilla.suse.com/1023760 https://bugzilla.suse.com/1023761 https://bugzilla.suse.com/1024679

1 0

openSUSE-OU-2017:0502-1: moderate: Optional update for dtv-scan-tables, v4l-utils
by maintenance＠opensuse.org 18 Feb '17

18 Feb '17

openSUSE Optional Update: Optional update for dtv-scan-tables, v4l-utils ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0502-1 Rating: moderate References: #1018436 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update introduces the package dtv-scan-tables and provides version 1.8.0 for v4l-utils. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-275=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dvb-utils-1.8.0-6.1 dvb-utils-debuginfo-1.8.0-6.1 libdvbv5-0-1.8.0-6.1 libdvbv5-0-debuginfo-1.8.0-6.1 libdvbv5-devel-1.8.0-6.1 libv4l-1.8.0-6.1 libv4l-debuginfo-1.8.0-6.1 libv4l-devel-1.8.0-6.1 libv4l1-0-1.8.0-6.1 libv4l1-0-debuginfo-1.8.0-6.1 libv4l2-0-1.8.0-6.1 libv4l2-0-debuginfo-1.8.0-6.1 libv4l2rds0-1.8.0-6.1 libv4l2rds0-debuginfo-1.8.0-6.1 libv4lconvert0-1.8.0-6.1 libv4lconvert0-debuginfo-1.8.0-6.1 qv4l2-1.8.0-6.1 qv4l2-debuginfo-1.8.0-6.1 v4l-utils-1.8.0-6.1 v4l-utils-debuginfo-1.8.0-6.1 v4l-utils-debugsource-1.8.0-6.1 v4l-utils-devel-tools-1.8.0-6.1 v4l-utils-devel-tools-debuginfo-1.8.0-6.1 - openSUSE Leap 42.2 (x86_64): libdvbv5-0-32bit-1.8.0-6.1 libdvbv5-0-debuginfo-32bit-1.8.0-6.1 libv4l-32bit-1.8.0-6.1 libv4l-debuginfo-32bit-1.8.0-6.1 libv4l-devel-32bit-1.8.0-6.1 libv4l1-0-32bit-1.8.0-6.1 libv4l1-0-debuginfo-32bit-1.8.0-6.1 libv4l2-0-32bit-1.8.0-6.1 libv4l2-0-debuginfo-32bit-1.8.0-6.1 libv4l2rds0-32bit-1.8.0-6.1 libv4l2rds0-debuginfo-32bit-1.8.0-6.1 libv4lconvert0-32bit-1.8.0-6.1 libv4lconvert0-debuginfo-32bit-1.8.0-6.1 - openSUSE Leap 42.2 (noarch): dtv-scan-tables-20161227-2.1 dtv-scan-tables-v5-20161227-2.1 libdvbv5-0-lang-1.8.0-6.1 v4l-utils-lang-1.8.0-6.1 References: https://bugzilla.suse.com/1018436

1 0

openSUSE-SU-2017:0501-1: moderate: Security update for viewvc
by opensuse-security＠opensuse.org 18 Feb '17

18 Feb '17

openSUSE Security Update: Security update for viewvc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0501-1 Rating: moderate References: #1024393 Cross-References: CVE-2017-5938 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for viewvc to version 1.1.26 fixes the following issues: - vievwc 1.1.26, including one security fix: * CVE-2017-5938 escape nav_data name to avoid XSS attack (boo#1024393) - vievwc 1.1.25: * fix _rev2optrev assertion on long input - license is BSD-2-Clause, package LICENSE text - Update viewvc.conf for Apache 2.4 syntax. - viewvc 1.1.24: * fix minor bug in human_readable boolean calculation * allow hr_funout option to apply to unidiff diffs, too * fix infinite loop in rcsparse * fix iso8601 timezone offset handling * add support for renamed roots * fix minor buglet in viewvc-install error message Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-274=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-274=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): viewvc-1.1.26-6.1 - openSUSE Leap 42.1 (noarch): viewvc-1.1.26-5.1 References: https://www.suse.com/security/cve/CVE-2017-5938.html https://bugzilla.suse.com/1024393

1 0

openSUSE-RU-2017:0500-1: Recommended update for fate
by maintenance＠opensuse.org 18 Feb '17

18 Feb '17

openSUSE Recommended Update: Recommended update for fate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0500-1 Rating: low References: #1024737 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fate fixes the following issues: - The mouse wheel is now (better) usable in the general tab of the feature editor. - Better label for priority editor table. - Update fate.desktop file to have official menu categories listed. (boo#1024737) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-264=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-264=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): fate-1.5.5.7.2-21.1 fate-debuginfo-1.5.5.7.2-21.1 - openSUSE Leap 42.1 (i586 x86_64): fate-1.5.5.7.2-21.1 fate-debuginfo-1.5.5.7.2-21.1 References: https://bugzilla.suse.com/1024737

1 0

openSUSE-SU-2017:0499-1: important: Security update of chromium
by opensuse-security＠opensuse.org 18 Feb '17

18 Feb '17

openSUSE Security Update: Security update of chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0499-1 Rating: important References: #1022049 Cross-References: CVE-2017-5006 CVE-2017-5007 CVE-2017-5008 CVE-2017-5009 CVE-2017-5010 CVE-2017-5011 CVE-2017-5012 CVE-2017-5013 CVE-2017-5014 CVE-2017-5015 CVE-2017-5016 CVE-2017-5017 CVE-2017-5018 CVE-2017-5019 CVE-2017-5020 CVE-2017-5021 CVE-2017-5022 CVE-2017-5023 CVE-2017-5024 CVE-2017-5025 CVE-2017-5026 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: Google chromium was updated to 56.0.2924.87: * Various small fixes * Disabled option to enable/disable plugins in the chrome://plugins - Changed the build requirement of libavformat to library version 57.41.100, as included in ffmpeg 3.1.1, as only this version properly supports the public AVStream API 'codecpar'. It also contains the version update to 56.0.2924.76 (bsc#1022049): - CVE-2017-5007: Universal XSS in Blink - CVE-2017-5006: Universal XSS in Blink - CVE-2017-5008: Universal XSS in Blink - CVE-2017-5010: Universal XSS in Blink - CVE-2017-5011: Unauthorised file access in Devtools - CVE-2017-5009: Out of bounds memory access in WebRTC - CVE-2017-5012: Heap overflow in V8 - CVE-2017-5013: Address spoofing in Omnibox - CVE-2017-5014: Heap overflow in Skia - CVE-2017-5015: Address spoofing in Omnibox - CVE-2017-5019: Use after free in Renderer - CVE-2017-5016: UI spoofing in Blink - CVE-2017-5017: Uninitialised memory access in webm video - CVE-2017-5018: Universal XSS in chrome://apps - CVE-2017-5020: Universal XSS in chrome://downloads - CVE-2017-5021: Use after free in Extensions - CVE-2017-5022: Bypass of Content Security Policy in Blink - CVE-2017-5023: Type confusion in metrics - CVE-2017-5024: Heap overflow in FFmpeg - CVE-2017-5025: Heap overflow in FFmpeg - CVE-2017-5026: UI spoofing. Credit to Ronni Skansing - Enable VAAPI hardware accelerated video decoding. - Chromium 55.0.2883.87: * various fixes for crashes and specific wesites * update Google pinned certificates Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-273=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-273=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): harfbuzz-debugsource-1.4.2-3.1 harfbuzz-devel-1.4.2-3.1 harfbuzz-tools-1.4.2-3.1 harfbuzz-tools-debuginfo-1.4.2-3.1 libharfbuzz-icu0-1.4.2-3.1 libharfbuzz-icu0-debuginfo-1.4.2-3.1 libharfbuzz0-1.4.2-3.1 libharfbuzz0-debuginfo-1.4.2-3.1 - openSUSE Leap 42.2 (x86_64): chromedriver-56.0.2924.87-102.1 chromedriver-debuginfo-56.0.2924.87-102.1 chromium-56.0.2924.87-102.1 chromium-debuginfo-56.0.2924.87-102.1 chromium-debugsource-56.0.2924.87-102.1 libharfbuzz-icu0-32bit-1.4.2-3.1 libharfbuzz-icu0-debuginfo-32bit-1.4.2-3.1 libharfbuzz0-32bit-1.4.2-3.1 libharfbuzz0-debuginfo-32bit-1.4.2-3.1 - openSUSE Leap 42.1 (i586 x86_64): ffmpeg3-3.2.2-2.1 ffmpeg3-debuginfo-3.2.2-2.1 ffmpeg3-debugsource-3.2.2-2.1 libavcodec-devel-3.2.2-2.1 libavcodec57-3.2.2-2.1 libavcodec57-debuginfo-3.2.2-2.1 libavdevice-devel-3.2.2-2.1 libavdevice57-3.2.2-2.1 libavdevice57-debuginfo-3.2.2-2.1 libavfilter-devel-3.2.2-2.1 libavfilter6-3.2.2-2.1 libavfilter6-debuginfo-3.2.2-2.1 libavformat-devel-3.2.2-2.1 libavformat57-3.2.2-2.1 libavformat57-debuginfo-3.2.2-2.1 libavresample-devel-3.2.2-2.1 libavresample3-3.2.2-2.1 libavresample3-debuginfo-3.2.2-2.1 libavutil-devel-3.2.2-2.1 libavutil55-3.2.2-2.1 libavutil55-debuginfo-3.2.2-2.1 libpostproc-devel-3.2.2-2.1 libpostproc54-3.2.2-2.1 libpostproc54-debuginfo-3.2.2-2.1 libswresample-devel-3.2.2-2.1 libswresample2-3.2.2-2.1 libswresample2-debuginfo-3.2.2-2.1 libswscale-devel-3.2.2-2.1 libswscale4-3.2.2-2.1 libswscale4-debuginfo-3.2.2-2.1 - openSUSE Leap 42.1 (x86_64): chromedriver-56.0.2924.87-102.1 chromedriver-debuginfo-56.0.2924.87-102.1 chromium-56.0.2924.87-102.1 chromium-debuginfo-56.0.2924.87-102.1 chromium-debugsource-56.0.2924.87-102.1 libavcodec57-32bit-3.2.2-2.1 libavcodec57-debuginfo-32bit-3.2.2-2.1 libavdevice57-32bit-3.2.2-2.1 libavdevice57-debuginfo-32bit-3.2.2-2.1 libavfilter6-32bit-3.2.2-2.1 libavfilter6-debuginfo-32bit-3.2.2-2.1 libavformat57-32bit-3.2.2-2.1 libavformat57-debuginfo-32bit-3.2.2-2.1 libavresample3-32bit-3.2.2-2.1 libavresample3-debuginfo-32bit-3.2.2-2.1 libavutil55-32bit-3.2.2-2.1 libavutil55-debuginfo-32bit-3.2.2-2.1 libpostproc54-32bit-3.2.2-2.1 libpostproc54-debuginfo-32bit-3.2.2-2.1 libswresample2-32bit-3.2.2-2.1 libswresample2-debuginfo-32bit-3.2.2-2.1 libswscale4-32bit-3.2.2-2.1 libswscale4-debuginfo-32bit-3.2.2-2.1 References: https://www.suse.com/security/cve/CVE-2017-5006.html https://www.suse.com/security/cve/CVE-2017-5007.html https://www.suse.com/security/cve/CVE-2017-5008.html https://www.suse.com/security/cve/CVE-2017-5009.html https://www.suse.com/security/cve/CVE-2017-5010.html https://www.suse.com/security/cve/CVE-2017-5011.html https://www.suse.com/security/cve/CVE-2017-5012.html https://www.suse.com/security/cve/CVE-2017-5013.html https://www.suse.com/security/cve/CVE-2017-5014.html https://www.suse.com/security/cve/CVE-2017-5015.html https://www.suse.com/security/cve/CVE-2017-5016.html https://www.suse.com/security/cve/CVE-2017-5017.html https://www.suse.com/security/cve/CVE-2017-5018.html https://www.suse.com/security/cve/CVE-2017-5019.html https://www.suse.com/security/cve/CVE-2017-5020.html https://www.suse.com/security/cve/CVE-2017-5021.html https://www.suse.com/security/cve/CVE-2017-5022.html https://www.suse.com/security/cve/CVE-2017-5023.html https://www.suse.com/security/cve/CVE-2017-5024.html https://www.suse.com/security/cve/CVE-2017-5025.html https://www.suse.com/security/cve/CVE-2017-5026.html https://bugzilla.suse.com/1022049

1 0

openSUSE-RU-2017:0498-1: Recommended update for yast2-packager, yast2-update
by maintenance＠opensuse.org 18 Feb '17

18 Feb '17

openSUSE Recommended Update: Recommended update for yast2-packager, yast2-update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0498-1 Rating: low References: #1009834 #954813 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-packager and yast2-update provides fixes and enhancements. yast2-packager: - Prevent double URL encoding when using ISO images as repositories. (bsc#954813) - Packages module is able to perform a package selection proposal during system upgrade. (bsc#1009834) yast2-update: - Allow YaST modules to add packages during upgrade. (bsc#1009834) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-268=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): yast2-packager-3.1.121-3.1 yast2-update-3.1.44-3.1 yast2-update-FACTORY-3.1.44-3.1 References: https://bugzilla.suse.com/1009834 https://bugzilla.suse.com/954813

1 0

openSUSE-RU-2017:0497-1: moderate: Recommended update for font-util
by maintenance＠opensuse.org 18 Feb '17

18 Feb '17

openSUSE Recommended Update: Recommended update for font-util ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0497-1 Rating: moderate References: #1024391 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for font-util fixes the following issues: - fontrootdir was not set in font-util, leading to limited fidelity when creating scale files for fonts. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-270=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-270=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): font-util-1.3.1-4.1 font-util-debuginfo-1.3.1-4.1 font-util-debugsource-1.3.1-4.1 - openSUSE Leap 42.1 (i586 x86_64): font-util-1.3.1-3.1 font-util-debuginfo-1.3.1-3.1 font-util-debugsource-1.3.1-3.1 References: https://bugzilla.suse.com/1024391

1 0

openSUSE-RU-2017:0496-1: Recommended update for spec-cleaner
by maintenance＠opensuse.org 18 Feb '17

18 Feb '17

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0496-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update provides version 0.9.2 of spec-cleaner with various minimal fixes. Additionally, an option to keep vertical space in preamble, if desired, has been added. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-265=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-265=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): spec-cleaner-0.9.2-26.1 spec-cleaner-format_spec_file-0.9.2-26.1 - openSUSE Leap 42.1 (noarch): spec-cleaner-0.9.2-26.1 spec-cleaner-format_spec_file-0.9.2-26.1 References:

1 0

openSUSE-SU-2017:0488-1: moderate: Security update for postfixadmin
by opensuse-security＠opensuse.org 17 Feb '17

17 Feb '17

openSUSE Security Update: Security update for postfixadmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0488-1 Rating: moderate References: #1024211 Cross-References: CVE-2017-5930 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: postfixadmin was updated to 3.0.2 to fix the following issues: - PostfixAdmin 3.0.2: - SECURITY: don't allow to delete protected aliases (CVE-2017-5930, boo#1024211) - fix VacationHandler for PostgreSQL - AliasHandler: restrict mailbox subquery to allowed and specified domains to improve performance on setups with lots of mailboxes - allow switching between dovecot:* password schemes while still accepting passwords hashed using the previous dovecot:* scheme - FetchmailHandler: use a valid date as default for 'date' - fix date formatting in non-english languages when using PostgreSQL - various small fixes - PostfixAdmin 3.0: - add sqlite backend option - add configurable smtp helo (CONF["smtp_client"]) - new translation: ro (Romanian) - language update: tw, cs, de - fix escaping in gen_show_status() (could be used to DOS list-virtual by creating a mail address with special chars) - add CSRF protection for POST requests - list.tpl: base edit/editactive/delete links in list.tpl on $RAW_item to avoid double escaping, and fix some corner cases - fix db_quota_text() for postgresql (concat() vs. ||) - change default date for 'created' and 'updated' columns from 0000-00-00 (which causes problems with MySQL strict mode) to 2000-01-01 - allow punicode even in TLDs - update Smarty to 3.1.29 - add checks to login.php and cli to ensure database layout is up to date - whitelist '-1' as valid value for postfixadmin-cli - don't stripslashes() the password in pacrypt - various small bugfixes Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-261=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-261=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): postfixadmin-3.0.2-3.1 - openSUSE Leap 42.1 (noarch): postfixadmin-3.0.2-5.1 References: https://www.suse.com/security/cve/CVE-2017-5930.html https://bugzilla.suse.com/1024211

1 0

openSUSE-SU-2017:0487-1: moderate: Security update for openssl
by opensuse-security＠opensuse.org 17 Feb '17

17 Feb '17

openSUSE Security Update: Security update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0487-1 Rating: moderate References: #1000677 #1001912 #1004499 #1005878 #1019334 #1021641 #1022085 #1022271 Cross-References: CVE-2016-2108 CVE-2016-7056 CVE-2016-8610 CVE-2017-3731 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves four vulnerabilities and has four fixes is now available. Description: This update for openssl fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641) Security issues fixed: - CVE-2016-7056: A local ECSDA P-256 timing attack that might have allowed key recovery was fixed (bsc#1019334) - CVE-2016-8610: A remote denial of service in SSL alert handling was fixed (bsc#1005878) - CVE-2016-2108: Added a missing commit for CVE-2016-2108, fixing the negative zero handling in the ASN.1 decoder (bsc#1004499) - CVE-2017-3731: Truncated packet could crash via OOB read (bsc#1022085, CVE-2017-3731) - Degrade the 3DES cipher to MEDIUM in SSLv2 (bsc#1001912) Bugs fixed: - fix crash in openssl speed (bsc#1000677) - fix ca-bundle path (bsc#1022271) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-255=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libopenssl-devel-1.0.1i-21.1 libopenssl1_0_0-1.0.1i-21.1 libopenssl1_0_0-debuginfo-1.0.1i-21.1 libopenssl1_0_0-hmac-1.0.1i-21.1 openssl-1.0.1i-21.1 openssl-debuginfo-1.0.1i-21.1 openssl-debugsource-1.0.1i-21.1 - openSUSE Leap 42.1 (noarch): openssl-doc-1.0.1i-21.1 - openSUSE Leap 42.1 (x86_64): libopenssl-devel-32bit-1.0.1i-21.1 libopenssl1_0_0-32bit-1.0.1i-21.1 libopenssl1_0_0-debuginfo-32bit-1.0.1i-21.1 libopenssl1_0_0-hmac-32bit-1.0.1i-21.1 References: https://www.suse.com/security/cve/CVE-2016-2108.html https://www.suse.com/security/cve/CVE-2016-7056.html https://www.suse.com/security/cve/CVE-2016-8610.html https://www.suse.com/security/cve/CVE-2017-3731.html https://bugzilla.suse.com/1000677 https://bugzilla.suse.com/1001912 https://bugzilla.suse.com/1004499 https://bugzilla.suse.com/1005878 https://bugzilla.suse.com/1019334 https://bugzilla.suse.com/1021641 https://bugzilla.suse.com/1022085 https://bugzilla.suse.com/1022271

1 0

openSUSE-SU-2017:0486-1: important: Security update for mariadb
by opensuse-security＠opensuse.org 17 Feb '17

17 Feb '17

openSUSE Security Update: Security update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0486-1 Rating: important References: #1008253 #1020868 #1020873 #1020875 #1020877 #1020878 #1020882 #1020884 #1020885 #1020891 #1020894 #1020896 #1022428 Cross-References: CVE-2016-6664 CVE-2017-3238 CVE-2017-3243 CVE-2017-3244 CVE-2017-3257 CVE-2017-3258 CVE-2017-3265 CVE-2017-3291 CVE-2017-3312 CVE-2017-3317 CVE-2017-3318 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 11 vulnerabilities and has two fixes is now available. Description: This mariadb version update to 10.0.29 fixes the following issues: - CVE-2017-3318: unspecified vulnerability affecting Error Handling (bsc#1020896) - CVE-2017-3317: unspecified vulnerability affecting Logging (bsc#1020894) - CVE-2017-3312: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 (bsc#1020873) - CVE-2017-3291: unrestricted mysqld_safe's ledir (bsc#1020884) - CVE-2017-3265: unsafe chmod/chown use in init script (bsc#1020885) - CVE-2017-3258: unspecified vulnerability in the DDL component (bsc#1020875) - CVE-2017-3257: unspecified vulnerability affecting InnoDB (bsc#1020878) - CVE-2017-3244: unspecified vulnerability affecing the DML component (bsc#1020877) - CVE-2017-3243: unspecified vulnerability affecting the Charsets component (bsc#1020891) - CVE-2017-3238: unspecified vulnerability affecting the Optimizer component (bsc#1020882) - CVE-2016-6664: Root Privilege Escalation (bsc#1008253) - Applications using the client library for MySQL (libmysqlclient.so) had a use-after-free issue that could cause the applications to crash (bsc#1022428) - notable changes: * XtraDB updated to 5.6.34-79.1 * TokuDB updated to 5.6.34-79.1 * Innodb updated to 5.6.35 * Performance Schema updated to 5.6.35 Release notes and changelog: * https://kb.askmonty.org/en/mariadb-10029-release-notes * https://kb.askmonty.org/en/mariadb-10029-changelog This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-257=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-257=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libmysqlclient-devel-10.0.29-18.1 libmysqlclient18-10.0.29-18.1 libmysqlclient18-debuginfo-10.0.29-18.1 libmysqlclient_r18-10.0.29-18.1 libmysqld-devel-10.0.29-18.1 libmysqld18-10.0.29-18.1 libmysqld18-debuginfo-10.0.29-18.1 mariadb-10.0.29-18.1 mariadb-bench-10.0.29-18.1 mariadb-bench-debuginfo-10.0.29-18.1 mariadb-client-10.0.29-18.1 mariadb-client-debuginfo-10.0.29-18.1 mariadb-debuginfo-10.0.29-18.1 mariadb-debugsource-10.0.29-18.1 mariadb-errormessages-10.0.29-18.1 mariadb-test-10.0.29-18.1 mariadb-test-debuginfo-10.0.29-18.1 mariadb-tools-10.0.29-18.1 mariadb-tools-debuginfo-10.0.29-18.1 - openSUSE Leap 42.2 (x86_64): libmysqlclient18-32bit-10.0.29-18.1 libmysqlclient18-debuginfo-32bit-10.0.29-18.1 libmysqlclient_r18-32bit-10.0.29-18.1 - openSUSE Leap 42.1 (i586 x86_64): libmysqlclient-devel-10.0.29-18.1 libmysqlclient18-10.0.29-18.1 libmysqlclient18-debuginfo-10.0.29-18.1 libmysqlclient_r18-10.0.29-18.1 libmysqld-devel-10.0.29-18.1 libmysqld18-10.0.29-18.1 libmysqld18-debuginfo-10.0.29-18.1 mariadb-10.0.29-18.1 mariadb-bench-10.0.29-18.1 mariadb-bench-debuginfo-10.0.29-18.1 mariadb-client-10.0.29-18.1 mariadb-client-debuginfo-10.0.29-18.1 mariadb-debuginfo-10.0.29-18.1 mariadb-debugsource-10.0.29-18.1 mariadb-errormessages-10.0.29-18.1 mariadb-test-10.0.29-18.1 mariadb-test-debuginfo-10.0.29-18.1 mariadb-tools-10.0.29-18.1 mariadb-tools-debuginfo-10.0.29-18.1 - openSUSE Leap 42.1 (x86_64): libmysqlclient18-32bit-10.0.29-18.1 libmysqlclient18-debuginfo-32bit-10.0.29-18.1 libmysqlclient_r18-32bit-10.0.29-18.1 References: https://www.suse.com/security/cve/CVE-2016-6664.html https://www.suse.com/security/cve/CVE-2017-3238.html https://www.suse.com/security/cve/CVE-2017-3243.html https://www.suse.com/security/cve/CVE-2017-3244.html https://www.suse.com/security/cve/CVE-2017-3257.html https://www.suse.com/security/cve/CVE-2017-3258.html https://www.suse.com/security/cve/CVE-2017-3265.html https://www.suse.com/security/cve/CVE-2017-3291.html https://www.suse.com/security/cve/CVE-2017-3312.html https://www.suse.com/security/cve/CVE-2017-3317.html https://www.suse.com/security/cve/CVE-2017-3318.html https://bugzilla.suse.com/1008253 https://bugzilla.suse.com/1020868 https://bugzilla.suse.com/1020873 https://bugzilla.suse.com/1020875 https://bugzilla.suse.com/1020877 https://bugzilla.suse.com/1020878 https://bugzilla.suse.com/1020882 https://bugzilla.suse.com/1020884 https://bugzilla.suse.com/1020885 https://bugzilla.suse.com/1020891 https://bugzilla.suse.com/1020894 https://bugzilla.suse.com/1020896 https://bugzilla.suse.com/1022428

1 0

openSUSE-RU-2017:0485-1: Recommended update for clamav-database
by maintenance＠opensuse.org 17 Feb '17

17 Feb '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0485-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh Feb 13th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-254=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-254=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201702130005-40.1 - openSUSE Leap 42.1 (noarch): clamav-database-201702130005-219.1 References:

1 0

openSUSE-SU-2017:0484-1: moderate: Security update for libgit2
by opensuse-security＠opensuse.org 17 Feb '17

17 Feb '17

openSUSE Security Update: Security update for libgit2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0484-1 Rating: moderate References: #1019036 #1019037 Cross-References: CVE-2016-10128 CVE-2016-10129 CVE-2016-10130 CVE-2017-5338 CVE-2017-5339 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for libgit2 fixes the several issues. These security issues were fixed: - CVE-2016-10128: Additional sanitization prevent some edge cases in the Git Smart Protocol which can lead to reading outside of a buffer (bsc#1019036). - CVE-2016-10129: Additional sanitization prevent some edge cases in the Git Smart Protocol which can lead to reading outside of a buffer (bsc#1019036). - CVE-2016-10130: When using the custom certificate callback or when using pygit2 or git2go a attacker could have caused an invalid certificate to be accepted (bsc#1019037). - CVE-2017-5338: When using the custom certificate callback or when using pygit2 or git2go a attacker could have caused an invalid certificate to be accepted (bsc#1019037). - CVE-2017-5339: When using the custom certificate callback or when using pygit2 or git2go a attacker could have caused an invalid certificate to be accepted (bsc#1019037). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-262=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libgit2-24-0.24.1-6.1 libgit2-24-debuginfo-0.24.1-6.1 libgit2-debugsource-0.24.1-6.1 libgit2-devel-0.24.1-6.1 - openSUSE Leap 42.2 (x86_64): libgit2-24-32bit-0.24.1-6.1 libgit2-24-debuginfo-32bit-0.24.1-6.1 References: https://www.suse.com/security/cve/CVE-2016-10128.html https://www.suse.com/security/cve/CVE-2016-10129.html https://www.suse.com/security/cve/CVE-2016-10130.html https://www.suse.com/security/cve/CVE-2017-5338.html https://www.suse.com/security/cve/CVE-2017-5339.html https://bugzilla.suse.com/1019036 https://bugzilla.suse.com/1019037

1 0

openSUSE-SU-2017:0483-1: moderate: Security update for expat
by opensuse-security＠opensuse.org 17 Feb '17

17 Feb '17

openSUSE Security Update: Security update for expat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0483-1 Rating: moderate References: #983215 #983216 Cross-References: CVE-2012-6702 CVE-2016-5300 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for expat fixes the following security issues: - CVE-2012-6702: Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, made it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand function. (bsc#983215) - CVE-2016-5300: The XML parser in Expat did not use sufficient entropy for hash initialization, which allowed context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876. (bsc#983216) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-260=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-260=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): expat-2.1.0-19.1 expat-debuginfo-2.1.0-19.1 expat-debugsource-2.1.0-19.1 libexpat-devel-2.1.0-19.1 libexpat1-2.1.0-19.1 libexpat1-debuginfo-2.1.0-19.1 - openSUSE Leap 42.2 (x86_64): expat-debuginfo-32bit-2.1.0-19.1 libexpat-devel-32bit-2.1.0-19.1 libexpat1-32bit-2.1.0-19.1 libexpat1-debuginfo-32bit-2.1.0-19.1 - openSUSE Leap 42.1 (i586 x86_64): expat-2.1.0-20.1 expat-debuginfo-2.1.0-20.1 expat-debugsource-2.1.0-20.1 libexpat-devel-2.1.0-20.1 libexpat1-2.1.0-20.1 libexpat1-debuginfo-2.1.0-20.1 - openSUSE Leap 42.1 (x86_64): expat-debuginfo-32bit-2.1.0-20.1 libexpat-devel-32bit-2.1.0-20.1 libexpat1-32bit-2.1.0-20.1 libexpat1-debuginfo-32bit-2.1.0-20.1 References: https://www.suse.com/security/cve/CVE-2012-6702.html https://www.suse.com/security/cve/CVE-2016-5300.html https://bugzilla.suse.com/983215 https://bugzilla.suse.com/983216

1 0

openSUSE-SU-2017:0482-1: Security update for guile
by opensuse-security＠opensuse.org 17 Feb '17

17 Feb '17

openSUSE Security Update: Security update for guile ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0482-1 Rating: low References: #1004221 Cross-References: CVE-2016-8605 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for guile fixes the following issues: - CVE-2016-8605: Fixed thread-unsafe umask modification (bsc#1004221). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-259=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-259=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): guile-2.0.9-8.1 guile-debuginfo-2.0.9-8.1 guile-debugsource-2.0.9-8.1 guile-devel-2.0.9-8.1 guile-modules-2_0-2.0.9-8.1 libguile-2_0-22-2.0.9-8.1 libguile-2_0-22-debuginfo-2.0.9-8.1 libguilereadline-v-18-18-2.0.9-8.1 libguilereadline-v-18-18-debuginfo-2.0.9-8.1 - openSUSE Leap 42.1 (i586 x86_64): guile-2.0.9-7.1 guile-debuginfo-2.0.9-7.1 guile-debugsource-2.0.9-7.1 guile-devel-2.0.9-7.1 guile-modules-2_0-2.0.9-7.1 libguile-2_0-22-2.0.9-7.1 libguile-2_0-22-debuginfo-2.0.9-7.1 libguilereadline-v-18-18-2.0.9-7.1 libguilereadline-v-18-18-debuginfo-2.0.9-7.1 References: https://www.suse.com/security/cve/CVE-2016-8605.html https://bugzilla.suse.com/1004221

1 0

openSUSE-SU-2017:0481-1: moderate: Security update for openssl
by opensuse-security＠opensuse.org 17 Feb '17

17 Feb '17

openSUSE Security Update: Security update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0481-1 Rating: moderate References: #1000677 #1001912 #1009528 #1019637 #1021641 #1022085 #1022086 #1022271 Cross-References: CVE-2016-7055 CVE-2017-3731 CVE-2017-3732 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has 5 fixes is now available. Description: This update for openssl fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641) Security issues fixed: - CVE-2016-7055: The x86_64 optimized montgomery multiplication may produce incorrect results (bsc#1009528) - CVE-2017-3731: Truncated packet could crash via OOB read (bsc#1022085) - CVE-2017-3732: BN_mod_exp may produce incorrect results on x86_64 (bsc#1022086) - Degrade the 3DES cipher to MEDIUM in SSLv2 (bsc#1001912) Non-security issues fixed: - fix crash in openssl speed (bsc#1000677) - fix X509_CERT_FILE path (bsc#1022271) - AES XTS key parts must not be identical in FIPS mode (bsc#1019637) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-256=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libopenssl-devel-1.0.2j-4.1 libopenssl1_0_0-1.0.2j-4.1 libopenssl1_0_0-debuginfo-1.0.2j-4.1 libopenssl1_0_0-hmac-1.0.2j-4.1 openssl-1.0.2j-4.1 openssl-debuginfo-1.0.2j-4.1 openssl-debugsource-1.0.2j-4.1 - openSUSE Leap 42.2 (x86_64): libopenssl-devel-32bit-1.0.2j-4.1 libopenssl1_0_0-32bit-1.0.2j-4.1 libopenssl1_0_0-debuginfo-32bit-1.0.2j-4.1 libopenssl1_0_0-hmac-32bit-1.0.2j-4.1 - openSUSE Leap 42.2 (noarch): openssl-doc-1.0.2j-4.1 References: https://www.suse.com/security/cve/CVE-2016-7055.html https://www.suse.com/security/cve/CVE-2017-3731.html https://www.suse.com/security/cve/CVE-2017-3732.html https://bugzilla.suse.com/1000677 https://bugzilla.suse.com/1001912 https://bugzilla.suse.com/1009528 https://bugzilla.suse.com/1019637 https://bugzilla.suse.com/1021641 https://bugzilla.suse.com/1022085 https://bugzilla.suse.com/1022086 https://bugzilla.suse.com/1022271

1 0

openSUSE-RU-2017:0480-1: moderate: Recommended update for wxhexeditor
by maintenance＠opensuse.org 17 Feb '17

17 Feb '17

openSUSE Recommended Update: Recommended update for wxhexeditor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0480-1 Rating: moderate References: #1022460 #1022637 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for wxhexeditor contains the following bug fixes: - boo#1022460: fix crashes in wxHexEditor - boo#1022637: add missing dependencies - Remove some debug printed on stdout Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-263=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-263=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): wxhexeditor-0.23+git20161226-8.1 wxhexeditor-debuginfo-0.23+git20161226-8.1 wxhexeditor-debugsource-0.23+git20161226-8.1 - openSUSE Leap 42.2 (noarch): wxhexeditor-lang-0.23+git20161226-8.1 - openSUSE Leap 42.1 (i586 x86_64): wxhexeditor-0.23+git20161226-4.1 wxhexeditor-debuginfo-0.23+git20161226-4.1 wxhexeditor-debugsource-0.23+git20161226-4.1 - openSUSE Leap 42.1 (noarch): wxhexeditor-lang-0.23+git20161226-4.1 References: https://bugzilla.suse.com/1022460 https://bugzilla.suse.com/1022637

1 0

openSUSE-SU-2017:0479-1: important: Security update for mysql-community-server
by opensuse-security＠opensuse.org 17 Feb '17

17 Feb '17

openSUSE Security Update: Security update for mysql-community-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0479-1 Rating: important References: #1020872 #1020873 #1020875 #1020876 #1020877 #1020878 #1020882 #1020884 #1020885 #1020890 #1020893 #1020894 #1020896 Cross-References: CVE-2016-8318 CVE-2016-8327 CVE-2017-3238 CVE-2017-3244 CVE-2017-3257 CVE-2017-3258 CVE-2017-3265 CVE-2017-3273 CVE-2017-3291 CVE-2017-3312 CVE-2017-3313 CVE-2017-3317 CVE-2017-3318 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: mysql-community-server was updated to version 5.6.35 to fix bugs and security issues: * Changes http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html * Fixed CVEs: CVE-2016-8318 [boo#1020872], CVE-2017-3312 [boo#1020873], CVE-2017-3258 [boo#1020875], CVE-2017-3273 [boo#1020876], CVE-2017-3244 [boo#1020877], CVE-2017-3257 [boo#1020878], CVE-2017-3238 [boo#1020882], CVE-2017-3291 [boo#1020884], CVE-2017-3265 [boo#1020885], CVE-2017-3313 [boo#1020890], CVE-2016-8327 [boo#1020893], CVE-2017-3317 [boo#1020894], CVE-2017-3318 [boo#1020896] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-258=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libmysql56client18-5.6.35-22.1 libmysql56client18-debuginfo-5.6.35-22.1 libmysql56client_r18-5.6.35-22.1 mysql-community-server-5.6.35-22.1 mysql-community-server-bench-5.6.35-22.1 mysql-community-server-bench-debuginfo-5.6.35-22.1 mysql-community-server-client-5.6.35-22.1 mysql-community-server-client-debuginfo-5.6.35-22.1 mysql-community-server-debuginfo-5.6.35-22.1 mysql-community-server-debugsource-5.6.35-22.1 mysql-community-server-errormessages-5.6.35-22.1 mysql-community-server-test-5.6.35-22.1 mysql-community-server-test-debuginfo-5.6.35-22.1 mysql-community-server-tools-5.6.35-22.1 mysql-community-server-tools-debuginfo-5.6.35-22.1 - openSUSE Leap 42.1 (x86_64): libmysql56client18-32bit-5.6.35-22.1 libmysql56client18-debuginfo-32bit-5.6.35-22.1 libmysql56client_r18-32bit-5.6.35-22.1 References: https://www.suse.com/security/cve/CVE-2016-8318.html https://www.suse.com/security/cve/CVE-2016-8327.html https://www.suse.com/security/cve/CVE-2017-3238.html https://www.suse.com/security/cve/CVE-2017-3244.html https://www.suse.com/security/cve/CVE-2017-3257.html https://www.suse.com/security/cve/CVE-2017-3258.html https://www.suse.com/security/cve/CVE-2017-3265.html https://www.suse.com/security/cve/CVE-2017-3273.html https://www.suse.com/security/cve/CVE-2017-3291.html https://www.suse.com/security/cve/CVE-2017-3312.html https://www.suse.com/security/cve/CVE-2017-3313.html https://www.suse.com/security/cve/CVE-2017-3317.html https://www.suse.com/security/cve/CVE-2017-3318.html https://bugzilla.suse.com/1020872 https://bugzilla.suse.com/1020873 https://bugzilla.suse.com/1020875 https://bugzilla.suse.com/1020876 https://bugzilla.suse.com/1020877 https://bugzilla.suse.com/1020878 https://bugzilla.suse.com/1020882 https://bugzilla.suse.com/1020884 https://bugzilla.suse.com/1020885 https://bugzilla.suse.com/1020890 https://bugzilla.suse.com/1020893 https://bugzilla.suse.com/1020894 https://bugzilla.suse.com/1020896

1 0

openSUSE-RU-2017:0477-1: moderate: Recommended update for headmore
by maintenance＠opensuse.org 16 Feb '17

16 Feb '17

openSUSE Recommended Update: Recommended update for headmore ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0477-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update to headmore 1.2 contains one feature enhancement: - Local mouse pointer can be toggled with space bar, this makes mouse pointer visible in case it is not drawn by VNC server. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-253=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): headmore-1.2-5.1 headmore-debuginfo-1.2-5.1 headmore-debugsource-1.2-5.1 References:

1 0

openSUSE-RU-2017:0466-1: Recommended update of sparse
by maintenance＠opensuse.org 15 Feb '17

15 Feb '17

openSUSE Recommended Update: Recommended update of sparse ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0466-1 Rating: low References: #1023536 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update introduces the latest version of sparse with improved functionality and support for current tools. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-249=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): sparse-20161117-6.1 sparse-debuginfo-20161117-6.1 sparse-debugsource-20161117-6.1 sparse-devel-20161117-6.1 sparse-inspect-20161117-6.1 sparse-inspect-debuginfo-20161117-6.1 sparse-llvm-20161117-6.1 sparse-llvm-debuginfo-20161117-6.1 References: https://bugzilla.suse.com/1023536

1 0

openSUSE-RU-2017:0465-1: Recommended update for libseccomp
by maintenance＠opensuse.org 15 Feb '17

15 Feb '17

openSUSE Recommended Update: Recommended update for libseccomp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0465-1 Rating: low References: #1019900 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides libseccomp version 2.3.1 which fixes the following issues: - Fixed a problem with 32-bit x86 socket syscalls on some systems (fate#321647, bsc#1019900) - Fixed problems with ipc syscalls on 32-bit x86 - Fixed problems with socket and ipc syscalls on s390 and s390x This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-248=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libseccomp-debugsource-2.3.1-3.1 libseccomp-devel-2.3.1-3.1 libseccomp-tools-2.3.1-3.1 libseccomp-tools-debuginfo-2.3.1-3.1 libseccomp2-2.3.1-3.1 libseccomp2-debuginfo-2.3.1-3.1 - openSUSE Leap 42.2 (x86_64): libseccomp2-32bit-2.3.1-3.1 libseccomp2-debuginfo-32bit-2.3.1-3.1 References: https://bugzilla.suse.com/1019900

1 0

openSUSE-RU-2017:0462-1: Recommended update for fate
by maintenance＠opensuse.org 14 Feb '17

14 Feb '17

openSUSE Recommended Update: Recommended update for fate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0462-1 Rating: low References: #1024737 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fate fixes the following issues: - The mouse wheel is now (better) usable in the general tab of the feature editor. - Better label for priority editor table. - Update fate.desktop file to have official menu categories listed. (boo#1024737) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-247=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (s390x x86_64): fate-1.5.5.7.2-7.1 References: https://bugzilla.suse.com/1024737

1 0

openSUSE-SU-2017:0458-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 13 Feb '17

13 Feb '17

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0458-1 Rating: important References: #1003077 #1007886 #1009969 #1010444 #1011820 #1013273 #1013531 #1013540 #1013542 #1017589 #1017710 #1019658 #1019660 #1019784 #1020214 #1020381 #1021258 #983348 #987333 #987576 Cross-References: CVE-2016-10088 CVE-2016-10147 CVE-2016-7117 CVE-2016-7917 CVE-2016-8645 CVE-2016-9793 CVE-2016-9806 CVE-2017-5551 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has 12 fixes is now available. Description: The openSUSE Leap 42.1 kernel to 4.1.38 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-7117: Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel allowed remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing (bnc#1003077). - CVE-2017-5551: tmpfs: Fixed a bug that could have allowed users to set setgid bits on files they don't down (bsc#1021258). - CVE-2016-10147: crypto/mcryptd.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5) (bnc#1020381). - CVE-2016-10088: The sg implementation in the Linux kernel did not properly restrict write operations in situations where the KERNEL_DS option is set, which allowed local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device, related to block/bsg.c and drivers/scsi/sg.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9576 (bnc#1017710). - CVE-2016-7917: The nfnetlink_rcv_batch function in net/netfilter/nfnetlink.c in the Linux kernel did not check whether a batch message's length field is large enough, which allowed local users to obtain sensitive information from kernel memory or cause a denial of service (infinite loop or out-of-bounds read) by leveraging the CAP_NET_ADMIN capability (bnc#1010444). - CVE-2016-8645: The TCP stack in the Linux kernel mishandled skb truncation, which allowed local users to cause a denial of service (system crash) via a crafted application that made sendto system calls, related to net/ipv4/tcp_ipv4.c and net/ipv6/tcp_ipv6.c (bnc#1009969). - CVE-2016-9806: Race condition in the netlink_dump function in net/netlink/af_netlink.c in the Linux kernel allowed local users to cause a denial of service (double free) or possibly have unspecified other impact via a crafted application that made sendmsg system calls, leading to a free operation associated with a new dump that started earlier than anticipated (bnc#1013540 1017589). - CVE-2016-9793: The sock_setsockopt function in net/core/sock.c in the Linux kernel mishandled negative values of sk_sndbuf and sk_rcvbuf, which allowed local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUFFORCE or (2) SO_RCVBUFFORCE option (bnc#1013531 1013542). The following non-security bugs were fixed: - PCI: generic: Fix pci_remap_iospace() failure path (bsc#1019658). - bcache: partition support: add 16 minors per bcacheN device (bsc#1019784). - bnx2x: Correct ringparam estimate when DOWN (bsc#1020214). - clk: xgene: Do not call __pa on ioremaped address (bsc#1019660). - kABI workaround for 4.1.37 mount changes (stable-4.1.37). - kABI: reintroduce sk_filter (bsc#1009969). - kabi/severities: Ignore inode_change_ok change It's renamed in 4.1.37 to setattr_prepare() - mpi: Fix NULL ptr dereference in mpi_powm() [ver #3] (bsc#1011820). - net: introduce __sock_queue_rcv_skb() function (bsc#1009969). - netback: correct array index (bsc#983348). - netfront: do not truncate grant references. - netfront: use correct linear area after linearizing an skb (bsc#1007886). - reiserfs: fix race in prealloc discard (bsc#987576). - rose: limit sk_filter trim to payload (bsc#1009969). - scsi: bfa: Increase requested firmware version to 3.2.5.1 (bsc#1013273). - xenbus: correctly signal errors from xenstored_local_init() (luckily none so far). - xenbus: do not invoke ->is_ready() for most device states (bsc#987333). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-246=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i686 x86_64): kernel-debug-4.1.38-47.1 kernel-debug-base-4.1.38-47.1 kernel-debug-base-debuginfo-4.1.38-47.1 kernel-debug-debuginfo-4.1.38-47.1 kernel-debug-debugsource-4.1.38-47.1 kernel-debug-devel-4.1.38-47.1 kernel-debug-devel-debuginfo-4.1.38-47.1 kernel-ec2-4.1.38-47.1 kernel-ec2-base-4.1.38-47.1 kernel-ec2-base-debuginfo-4.1.38-47.1 kernel-ec2-debuginfo-4.1.38-47.1 kernel-ec2-debugsource-4.1.38-47.1 kernel-ec2-devel-4.1.38-47.1 kernel-pv-4.1.38-47.1 kernel-pv-base-4.1.38-47.1 kernel-pv-base-debuginfo-4.1.38-47.1 kernel-pv-debuginfo-4.1.38-47.1 kernel-pv-debugsource-4.1.38-47.1 kernel-pv-devel-4.1.38-47.1 kernel-vanilla-4.1.38-47.1 kernel-vanilla-debuginfo-4.1.38-47.1 kernel-vanilla-debugsource-4.1.38-47.1 kernel-vanilla-devel-4.1.38-47.1 kernel-xen-4.1.38-47.1 kernel-xen-base-4.1.38-47.1 kernel-xen-base-debuginfo-4.1.38-47.1 kernel-xen-debuginfo-4.1.38-47.1 kernel-xen-debugsource-4.1.38-47.1 kernel-xen-devel-4.1.38-47.1 - openSUSE Leap 42.1 (i586 x86_64): kernel-default-4.1.38-47.1 kernel-default-base-4.1.38-47.1 kernel-default-base-debuginfo-4.1.38-47.1 kernel-default-debuginfo-4.1.38-47.1 kernel-default-debugsource-4.1.38-47.1 kernel-default-devel-4.1.38-47.1 kernel-obs-build-4.1.38-47.3 kernel-obs-build-debugsource-4.1.38-47.3 kernel-obs-qa-4.1.38-47.1 kernel-syms-4.1.38-47.1 - openSUSE Leap 42.1 (noarch): kernel-devel-4.1.38-47.1 kernel-docs-4.1.38-47.2 kernel-docs-html-4.1.38-47.2 kernel-docs-pdf-4.1.38-47.2 kernel-macros-4.1.38-47.1 kernel-source-4.1.38-47.1 kernel-source-vanilla-4.1.38-47.1 - openSUSE Leap 42.1 (i686): kernel-pae-4.1.38-47.1 kernel-pae-base-4.1.38-47.1 kernel-pae-base-debuginfo-4.1.38-47.1 kernel-pae-debuginfo-4.1.38-47.1 kernel-pae-debugsource-4.1.38-47.1 kernel-pae-devel-4.1.38-47.1 References: https://www.suse.com/security/cve/CVE-2016-10088.html https://www.suse.com/security/cve/CVE-2016-10147.html https://www.suse.com/security/cve/CVE-2016-7117.html https://www.suse.com/security/cve/CVE-2016-7917.html https://www.suse.com/security/cve/CVE-2016-8645.html https://www.suse.com/security/cve/CVE-2016-9793.html https://www.suse.com/security/cve/CVE-2016-9806.html https://www.suse.com/security/cve/CVE-2017-5551.html https://bugzilla.suse.com/1003077 https://bugzilla.suse.com/1007886 https://bugzilla.suse.com/1009969 https://bugzilla.suse.com/1010444 https://bugzilla.suse.com/1011820 https://bugzilla.suse.com/1013273 https://bugzilla.suse.com/1013531 https://bugzilla.suse.com/1013540 https://bugzilla.suse.com/1013542 https://bugzilla.suse.com/1017589 https://bugzilla.suse.com/1017710 https://bugzilla.suse.com/1019658 https://bugzilla.suse.com/1019660 https://bugzilla.suse.com/1019784 https://bugzilla.suse.com/1020214 https://bugzilla.suse.com/1020381 https://bugzilla.suse.com/1021258 https://bugzilla.suse.com/983348 https://bugzilla.suse.com/987333 https://bugzilla.suse.com/987576

1 0

openSUSE-SU-2017:0456-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 13 Feb '17

13 Feb '17

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0456-1 Rating: important References: #1000092 #1000619 #1003077 #1003253 #1005918 #1006469 #1006472 #1007729 #1008742 #1009546 #1009674 #1009718 #1009911 #1009969 #1010612 #1010690 #1011176 #1011250 #1011602 #1011660 #1011913 #1012422 #1012829 #1012910 #1013000 #1013001 #1013273 #1013531 #1013540 #1013542 #1013792 #1013994 #1014120 #1014392 #1014410 #1014701 #1014710 #1015038 #1015212 #1015359 #1015367 #1015416 #1015840 #1016250 #1016403 #1016517 #1016884 #1016979 #1017164 #1017170 #1017410 #1017589 #1018100 #1018316 #1018358 #1018385 #1018446 #1018813 #1018913 #1019061 #1019148 #1019260 #1019351 #1019594 #1019630 #1019631 #1019784 #1019851 #1020214 #1020488 #1020602 #1020685 #1020817 #1020945 #1020975 #1021248 #1021251 #1021258 #1021260 #1021294 #1021455 #1021474 #1022304 #1022429 #1022476 #1022547 #1022559 #1022971 #1023101 #1023175 #921494 #959709 #960561 #964944 #966170 #966172 #966186 #966191 #969474 #969475 #969756 #971975 #974215 #979378 #981709 #985561 #987192 #987576 #991273 Cross-References: CVE-2015-8709 CVE-2016-7117 CVE-2016-8645 CVE-2016-9793 CVE-2016-9806 CVE-2016-9919 CVE-2017-2583 CVE-2017-2584 CVE-2017-5551 CVE-2017-5576 CVE-2017-5577 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves 11 vulnerabilities and has 98 fixes is now available. Description: The openSUSE 42.2 kernel was updated to 4.4.42 stable release. The following security bugs were fixed: - CVE-2016-7117: Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel allowed remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing (bnc#1003077 1003253). - CVE-2017-5576, CVE-2017-5577: A buffer overflow in the VC4_SUBMIT_CL IOCTL in the VideoCore DRM driver for Raspberry Pi was fixed. (bsc#1021294) - CVE-2017-5551: tmpfs: Fixed a bug that could have allowed users to set setgid bits on files they don't down. (bsc#1021258). - CVE-2017-2583: A Linux kernel built with the Kernel-based Virtual Machine (CONFIG_KVM) support was vulnerable to an incorrect segment selector(SS) value error. A user/process inside guest could have used this flaw to crash the guest resulting in DoS or potentially escalate their privileges inside guest. (bsc#1020602). - CVE-2017-2584: arch/x86/kvm/emulate.c in the Linux kernel allowed local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free) via a crafted application that leverages instruction emulation for fxrstor, fxsave, sgdt, and sidt (bnc#1019851). - CVE-2015-8709: ** DISPUTED ** kernel/ptrace.c in the Linux kernel mishandled uid and gid mappings, which allowed local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call. NOTE: the vendor states "there is no kernel bug here (bnc#959709 bsc#960561). - CVE-2016-9806: Race condition in the netlink_dump function in net/netlink/af_netlink.c in the Linux kernel allowed local users to cause a denial of service (double free) or possibly have unspecified other impact via a crafted application that made sendmsg system calls, leading to a free operation associated with a new dump that started earlier than anticipated (bnc#1013540 1017589). - CVE-2016-8645: The TCP stack in the Linux kernel mishandled skb truncation, which allowed local users to cause a denial of service (system crash) via a crafted application that made sendto system calls, related to net/ipv4/tcp_ipv4.c and net/ipv6/tcp_ipv6.c (bnc#1009969). - CVE-2016-9793: The sock_setsockopt function in net/core/sock.c in the Linux kernel mishandled negative values of sk_sndbuf and sk_rcvbuf, which allowed local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUFFORCE or (2) SO_RCVBUFFORCE option (bnc#1013531 bsc#1013542). - CVE-2016-9919: The icmp6_send function in net/ipv6/icmp.c in the Linux kernel omits a certain check of the dst data structure, which allowed remote attackers to cause a denial of service (panic) via a fragmented IPv6 packet (bnc#1014701). The following non-security bugs were fixed: - 8250/fintek: rename IRQ_MODE macro (boo#1009546). - acpi, nfit: fix bus vs dimm confusion in xlat_status (bsc#1023175). - acpi, nfit, libnvdimm: fix / harden ars_status output length handling (bsc#1023175). - acpi, nfit: validate ars_status output buffer size (bsc#1023175). - arm64/numa: fix incorrect log for memory-less node (bsc#1019631). - ASoC: cht_bsw_rt5645: Fix leftover kmalloc (bsc#1010690). - ASoC: Intel: bytcr_rt5640: fallback mechanism if MCLK is not enabled (bsc#1010690). - ASoC: rt5670: add HS ground control (bsc#1016250). - avoid including "mountproto=" with no protocol in /proc/mounts (bsc#1019260). - bcache: Make gc wakeup sane, remove set_task_state() (bsc#1021260). - bcache: partition support: add 16 minors per bcacheN device (bsc#1019784). - blacklist.conf: add 1b8d2afde54f libnvdimm, pfn: fix ARCH=alpha allmodconfig build failure (bsc#1023175). - blacklist.conf: Add i915 stable commits that can be ignored (bsc#1015367) - blk: Do not collide with QUEUE_FLAG_WC from upstream (bsc#1022547) - blk-mq: Allow timeouts to run while queue is freezing (bsc#1020817). - blk-mq: Always schedule hctx->next_cpu (bsc#1020817). - blk-mq: Avoid memory reclaim when remapping queues (bsc#1020817). - blk-mq: do not overwrite rq->mq_ctx (bsc#1020817). - blk-mq: Fix failed allocation path when mapping queues (bsc#1020817). - blk-mq: improve warning for running a queue on the wrong CPU (bsc#1020817). - block: Change extern inline to static inline (bsc#1023175). - Bluetooth: btmrvl: fix hung task warning dump (bsc#1018813). - bnx2x: Correct ringparam estimate when DOWN (bsc#1020214). - brcmfmac: Change error print on wlan0 existence (bsc#1000092). - btrfs: add support for RENAME_EXCHANGE and RENAME_WHITEOUT (bsc#1020975). - btrfs: bugfix: handle FS_IOC32_{GETFLAGS,SETFLAGS,GETVERSION} in btrfs_ioctl (bsc#1018100). - btrfs: fix inode leak on failure to setup whiteout inode in rename (bsc#1020975). - btrfs: fix lockdep warning about log_mutex (bsc#1021455). - btrfs: fix lockdep warning on deadlock against an inode's log mutex (bsc#1021455). - btrfs: fix number of transaction units for renames with whiteout (bsc#1020975). - btrfs: incremental send, fix invalid paths for rename operations (bsc#1018316). - btrfs: incremental send, fix premature rmdir operations (bsc#1018316). - btrfs: increment ctx->pos for every emitted or skipped dirent in readdir (bsc#981709). - btrfs: pin log earlier when renaming (bsc#1020975). - btrfs: pin logs earlier when doing a rename exchange operation (bsc#1020975). - btrfs: remove old tree_root dirent processing in btrfs_real_readdir() (bsc#981709). - btrfs: send, add missing error check for calls to path_loop() (bsc#1018316). - btrfs: send, avoid incorrect leaf accesses when sending utimes operations (bsc#1018316). - btrfs: send, fix failure to move directories with the same name around (bsc#1018316). - btrfs: send, fix invalid leaf accesses due to incorrect utimes operations (bsc#1018316). - btrfs: send, fix warning due to late freeing of orphan_dir_info structures (bsc#1018316). - btrfs: test_check_exists: Fix infinite loop when searching for free space entries (bsc#987192). - btrfs: unpin log if rename operation fails (bsc#1020975). - btrfs: unpin logs if rename exchange operation fails (bsc#1020975). - [BZ 149851] kernel: Fix invalid domain response handling (bnc#1009718, LTC#149851). - ceph: fix bad endianness handling in parse_reply_info_extra (bsc#1020488). - clk: xgene: Add PMD clock (bsc#1019351). - clk: xgene: Do not call __pa on ioremaped address (bsc#1019351). - clk: xgene: Remove CLK_IS_ROOT (bsc#1019351). - config: enable Ceph kernel client modules for ppc64le (fate#321098) - config: enable Ceph kernel client modules for s390x (fate#321098) - config: enable CONFIG_OCFS2_DEBUG_MASKLOG for ocfs2 (bsc#1015038) - crypto: drbg - do not call drbg_instantiate in healt test (bsc#1018913). - crypto: drbg - remove FIPS 140-2 continuous test (bsc#1018913). - crypto: FIPS - allow tests to be disabled in FIPS mode (bsc#1018913). - crypto: qat - fix bar discovery for c62x (bsc#1021251). - crypto: qat - zero esram only for DH85x devices (1021248). - crypto: rsa - allow keys >= 2048 bits in FIPS mode (bsc#1018913). - crypto: xts - consolidate sanity check for keys (bsc#1018913). - crypto: xts - fix compile errors (bsc#1018913). - cxl: fix potential NULL dereference in free_adapter() (bsc#1016517). - dax: fix deadlock with DAX 4k holes (bsc#1012829). - dax: fix device-dax region base (bsc#1023175). - device-dax: check devm_nsio_enable() return value (bsc#1023175). - device-dax: fail all private mapping attempts (bsc#1023175). - device-dax: fix percpu_ref_exit ordering (bsc#1023175). - driver core: fix race between creating/querying glue dir and its cleanup (bnc#1008742). - drivers:hv: balloon: account for gaps in hot add regions (fate#320485). - drivers:hv: balloon: Add logging for dynamic memory operations (fate#320485). - drivers:hv: balloon: Disable hot add when CONFIG_MEMORY_HOTPLUG is not set (fate#320485). - drivers:hv: balloon: Fix info request to show max page count (fate#320485). - drivers:hv: balloon: keep track of where ha_region starts (fate#320485). - drivers:hv: balloon: replace ha_region_mutex with spinlock (fate#320485). - drivers:hv: balloon: Use available memory value in pressure report (fate#320485). - drivers:hv: cleanup vmbus_open() for wrap around mappings (fate#320485). - drivers:hv: do not leak memory in vmbus_establish_gpadl() (fate#320485). - drivers:hv: get rid of id in struct vmbus_channel (fate#320485). - drivers:hv: get rid of redundant messagecount in create_gpadl_header() (fate#320485). - drivers:hv: get rid of timeout in vmbus_open() (fate#320485). - drivers:hv: Introduce a policy for controlling channel affinity (fate#320485). - drivers:hv: make VMBus bus ids persistent (fate#320485). - drivers:hv: ring_buffer: count on wrap around mappings in get_next_pkt_raw() (v2) (fate#320485). - drivers:hv: ring_buffer: use wrap around mappings in hv_copy{from, to}_ringbuffer() (fate#320485). - drivers:hv: ring_buffer: wrap around mappings for ring buffers (fate#320485). - drivers:hv: utils: Check VSS daemon is listening before a hot backup (fate#320485). - drivers:hv: utils: Continue to poll VSS channel after handling requests (fate#320485). - drivers:hv: utils: fix a race on userspace daemons registration (bnc#1014392). - drivers:hv: utils: Fix the mapping between host version and protocol to use (fate#320485). - drivers:hv: utils: reduce HV_UTIL_NEGO_TIMEOUT timeout (fate#320485). - drivers:hv: vmbus: Base host signaling strictly on the ring state (fate#320485). - drivers:hv: vmbus: Enable explicit signaling policy for NIC channels (fate#320485). - drivers:hv: vmbus: finally fix hv_need_to_signal_on_read() (fate#320485, bug#1018385). - drivers:hv: vmbus: fix the race when querying & updating the percpu list (fate#320485). - drivers:hv: vmbus: Implement a mechanism to tag the channel for low latency (fate#320485). - drivers: hv: vmbus: Make mmio resource local (fate#320485). - drivers:hv: vmbus: On the read path cleanup the logic to interrupt the host (fate#320485). - drivers:hv: vmbus: On write cleanup the logic to interrupt the host (fate#320485). - drivers:hv: vmbus: Reduce the delay between retries in vmbus_post_msg() (fate#320485). - drivers:hv: vmbus: suppress some "hv_vmbus: Unknown GUID" warnings (fate#320485). - drivers:hv: vss: Improve log messages (fate#320485). - drivers:hv: vss: Operation timeouts should match host expectation (fate#320485). - drivers: net: phy: mdio-xgene: Add hardware dependency (bsc#1019351). - drivers: net: phy: xgene: Fix 'remove' function (bsc#1019351). - drivers: net: xgene: Add change_mtu function (bsc#1019351). - drivers: net: xgene: Add flow control configuration (bsc#1019351). - drivers: net: xgene: Add flow control initialization (bsc#1019351). - drivers: net: xgene: Add helper function (bsc#1019351). - drivers: net: xgene: Add support for Jumbo frame (bsc#1019351). - drivers: net: xgene: Configure classifier with pagepool (bsc#1019351). - drivers: net: xgene: fix build after change_mtu function change (bsc#1019351). - drivers: net: xgene: fix: Coalescing values for v2 hardware (bsc#1019351). - drivers: net: xgene: fix: Disable coalescing on v1 hardware (bsc#1019351). - drivers: net: xgene: Fix MSS programming (bsc#1019351). - drivers: net: xgene: fix: RSS for non-TCP/UDP (bsc#1019351). - drivers: net: xgene: fix: Use GPIO to get link status (bsc#1019351). - drivers: net: xgene: uninitialized variable in xgene_enet_free_pagepool() (bsc#1019351). - drm: Fix broken VT switch with video=1366x768 option (bsc#1018358). - drm/i915: add helpers for platform specific revision id range checks (bsc#1015367). - drm/i915: Apply broader WaRsDisableCoarsePowerGating for guc also (bsc#1015367). - drm/i915/bxt: add revision id for A1 stepping and use it (bsc#1015367). - drm/i915: Call intel_dp_mst_resume() before resuming displays (bsc#1015359). - drm/i915: Cleaning up DDI translation tables (bsc#1014392). - drm/i915: Clean up L3 SQC register field definitions (bsc#1014392). - drm/i915: Do not init hpd polling for vlv and chv from runtime_suspend() (bsc#1014120). - drm-i915-dp-Restore-PPS-HW-state-from-the-encoder-re - drm/i915/dp: Restore PPS HW state from the encoder resume hook (bsc#1019061). - drm/i915/dsi: fix CHV dsi encoder hardware state readout on port C (bsc#1015367). - drm/i915: Exit cherryview_irq_handler() after one pass (bsc#1015367). - drm/i915: Fix iboost setting for SKL Y/U DP DDI buffer translation entry 2 (bsc#1014392). - drm/i915: Fix system resume if PCI device remained enabled (bsc#1015367). - drm/i915: Fix watermarks for VLV/CHV (bsc#1011176). - drm/i915: Force ringbuffers to not be at offset 0 (bsc#1015367). - drm/i915: Force VDD off on the new power seqeuencer before starting to use it (bsc#1009674). - drm/i915/gen9: Add WaInPlaceDecompressionHang (bsc#1014392). - drm/i915/gen9: Fix PCODE polling during CDCLK change notification (bsc#1015367). - drm/i915: Mark CPU cache as dirty when used for rendering (bsc#1015367). - drm/i915: Mark i915_hpd_poll_init_work as static (bsc#1014120). - drm-i915-Prevent-PPS-stealing-from-a-normal-DP-port - drm/i915: Prevent PPS stealing from a normal DP port on VLV/CHV (bsc#1019061). - drm/i915: remove parens around revision ids (bsc#1015367). - drm/i915/skl: Add WaDisableGafsUnitClkGating (bsc#1014392). - drm/i915/skl: Fix rc6 based gpu/system hang (bsc#1015367). - drm/i915/skl: Fix spurious gpu hang with gt3/gt4 revs (bsc#1015367). - drm/i915/skl: Update DDI translation tables for SKL (bsc#1014392). - drm/i915/skl: Update watermarks before the crtc is disabled (bsc#1015367). - drm/i915: Update Skylake DDI translation table for DP (bsc#1014392). - drm/i915: Update Skylake DDI translation table for HDMI (bsc#1014392). - drm/i915/userptr: Hold mmref whilst calling get-user-pages (bsc#1015367). - drm/i915/vlv: Prevent enabling hpd polling in late suspend (bsc#1014120). - drm/i915: Workaround for DP DPMS D3 on Dell monitor (bsc#1019061). - drm: Use u64 for intermediate dotclock calculations (bnc#1006472). - drm/vc4: Fix an integer overflow in temporary allocation layout (bsc#1021294). - drm/vc4: Return -EINVAL on the overflow checks failing (bsc#1021294). - drm: virtio-gpu: get the fb from the plane state for atomic updates (bsc#1023101). - EDAC, xgene: Fix spelling mistake in error messages (bsc#1019351). - efi/libstub: Move Graphics Output Protocol handling to generic code (bnc#974215). - fbcon: Fix vc attr at deinit (bsc#1000619). - Fix kABI breakage by i2c-designware baytrail fix (bsc#1011913). - Fix kABI breakage by linux/acpi.h inclusion in i8042-x86ia46io.h (bsc#1011660). - gpio: xgene: make explicitly non-modular (bsc#1019351). - gro_cells: mark napi struct as not busy poll candidates (bsc#966191 FATE#320230 bsc#966186 FATE#320228). - hv: acquire vmbus_connection.channel_mutex in vmbus_free_channels() (fate#320485). - hv: change clockevents unbind tactics (fate#320485). - hv: do not reset hv_context.tsc_page on crash (fate#320485, bnc#1007729). - hv_netvsc: add ethtool statistics for tx packet issues (fate#320485). - hv_netvsc: Add handler for physical link speed change (fate#320485). - hv_netvsc: Add query for initial physical link speed (fate#320485). - hv_netvsc: count multicast packets received (fate#320485). - hv_netvsc: dev hold/put reference to VF (fate#320485). - hv_netvsc: fix a race between netvsc_send() and netvsc_init_buf() (fate#320485). - hv_netvsc: fix comments (fate#320485). - hv_netvsc: fix rtnl locking in callback (fate#320485). - hv_netvsc: Implement batching of receive completions (fate#320485). - hv_netvsc: improve VF device matching (fate#320485). - hv_netvsc: init completion during alloc (fate#320485). - hv_netvsc: make device_remove void (fate#320485). - hv_netvsc: make inline functions static (fate#320485). - hv_netvsc: make netvsc_destroy_buf void (fate#320485). - hv_netvsc: make RSS hash key static (fate#320485). - hv_netvsc: make variable local (fate#320485). - hv_netvsc: rearrange start_xmit (fate#320485). - hv_netvsc: refactor completion function (fate#320485). - hv_netvsc: remove excessive logging on MTU change (fate#320485). - hv_netvsc: remove VF in flight counters (fate#320485). - hv_netvsc: report vmbus name in ethtool (fate#320485). - hv_netvsc: simplify callback event code (fate#320485). - hv_netvsc: style cleanups (fate#320485). - hv_netvsc: use ARRAY_SIZE() for NDIS versions (fate#320485). - hv_netvsc: use consume_skb (fate#320485). - hv_netvsc: use kcalloc (fate#320485). - hv_netvsc: use RCU to protect vf_netdev (fate#320485). - hyperv: Fix spelling of HV_UNKOWN (fate#320485). - i2c: designware-baytrail: Disallow the CPU to enter C6 or C7 while holding the punit semaphore (bsc#1011913). - i2c: designware: fix wrong Tx/Rx FIFO for ACPI (bsc#1019351). - i2c: designware: Implement support for SMBus block read and write (bsc#1019351). - i2c: xgene: Fix missing code of DTB support (bsc#1019351). - i40e: Be much more verbose about what we can and cannot offload (bsc#985561). - i915: Delete previous two fixes for i915 (bsc#1019061). These upstream fixes brought some regressions, so better to revert for now. - i915: Disable patches.drivers/drm-i915-Exit-cherryview_irq_handler-after-one-pass The patch seems leading to the instability on Wyse box (bsc#1015367). - IB/core: Fix possible memory leak in cma_resolve_iboe_route() (bsc#966191 FATE#320230 bsc#966186 FATE#320228). - IB/mlx5: Fix iteration overrun in GSI qps (bsc#966170 FATE#320225 bsc#966172 FATE#320226). - IB/mlx5: Fix steering resource leak (bsc#966170 FATE#320225 bsc#966172 FATE#320226). - IB/mlx5: Set source mac address in FTE (bsc#966170 FATE#320225 bsc#966172 FATE#320226). - ibmveth: calculate gso_segs for large packets (bsc#1019148). - ibmveth: check return of skb_linearize in ibmveth_start_xmit (bsc#1019148). - ibmveth: consolidate kmalloc of array, memset 0 to kcalloc (bsc#1019148). - ibmveth: set correct gso_size and gso_type (bsc#1019148). - ibmvnic: convert to use simple_open() (bsc#1015416). - ibmvnic: Driver Version 1.0.1 (bsc#1015416). - ibmvnic: drop duplicate header seq_file.h (bsc#1015416). - ibmvnic: fix error return code in ibmvnic_probe() (bsc#1015416). - ibmvnic: Fix GFP_KERNEL allocation in interrupt context (bsc#1015416). - ibmvnic: Fix missing brackets in init_sub_crq_irqs (bsc#1015416). - ibmvnic: Fix releasing of sub-CRQ IRQs in interrupt context (bsc#1015416). - ibmvnic: Fix size of debugfs name buffer (bsc#1015416). - ibmvnic: Handle backing device failover and reinitialization (bsc#1015416). - ibmvnic: Start completion queue negotiation at server-provided optimum values (bsc#1015416). - ibmvnic: Unmap ibmvnic_statistics structure (bsc#1015416). - ibmvnic: Update MTU after device initialization (bsc#1015416). - igb: add i211 to i210 PHY workaround (bsc#1009911). - igb: Workaround for igb i210 firmware issue (bsc#1009911). - Input: i8042 - Trust firmware a bit more when probing on X86 (bsc#1011660). - intel_idle: Add KBL support (bsc#1016884). - ipc: msg, make msgrcv work with LONG_MIN (bnc#1005918). - ipc/sem.c: add cond_resched in exit_sme (bsc#979378). - ixgbe: Do not clear RAR entry when clearing VMDq for SAN MAC (bsc#969474 FATE#319812 bsc#969475 FATE#319814). - ixgbe: Force VLNCTRL.VFE to be set in all VMDq paths (bsc#969474 FATE#319812 bsc#969475 FATE#319814). - KABI fix (bsc#1014410). - kABI: protect struct mm_struct (kabi). - kABI: protect struct musb_platform_ops (kabi). - kABI: protect struct task_struct (kabi). - kABI: protect struct user_fpsimd_state (kabi). - kABI: protect struct wake_irq (kabi). - kABI: protect struct xhci_hcd (kabi). - kABI: protect user_namespace include in fs/exec (kabi). - kABI: protect user_namespace include in kernel/ptrace (kabi). - kabi/severities: Ignore changes in drivers/hv - kgraft/iscsi-target: Do not block kGraft in iscsi_np kthread (bsc#1010612, fate#313296). - kgraft/xen: Do not block kGraft in xenbus kthread (bsc#1017410, fate#313296). - libnvdimm, pfn: fix align attribute (bsc#1023175). - locking/pv-qspinlock: Use cmpxchg_release() in __pv_queued_spin_unlock() (bsc#969756). - locking/rtmutex: Prevent dequeue vs. unlock race (bsc#1015212). - locking/rtmutex: Use READ_ONCE() in rt_mutex_owner() (bsc#1015212). - mailbox: xgene-slimpro: Fix wrong test for devm_kzalloc (bsc#1019351). - md-cluster: convert the completion to wait queue (fate#316335). - md-cluster: protect md_find_rdev_nr_rcu with rcu lock (fate#316335). - md: fix refcount problem on mddev when stopping array (bsc#1022304). - md linear: fix a race between linear_add() and linear_congested() (bsc#1018446). - [media] uvcvideo: uvc_scan_fallback() for webcams with broken chain (bsc#1021474). - misc/genwqe: ensure zero initialization (fate#321595). - mmc: sdhci-of-arasan: Remove no-hispd and no-cmd23 quirks for sdhci-arasan4.9a (bsc#1019351). - mm: do not loop on GFP_REPEAT high order requests if there is no reclaim progress (bnc#1013000). - mm, memcg: do not retry precharge charges (bnc#1022559). - mm, page_alloc: fix check for NULL preferred_zone (bnc#971975 VM performance -- page allocator). - mm, page_alloc: fix fast-path race with cpuset update or removal (bnc#971975 VM performance -- page allocator). - mm, page_alloc: fix premature OOM when racing with cpuset mems update (bnc#971975 VM performance -- page allocator). - mm, page_alloc: keep pcp count and list contents in sync if struct page is corrupted (bnc#971975 VM performance -- page allocator). - mm, page_alloc: move cpuset seqcount checking to slowpath (bnc#971975 VM performance -- page allocator). - mwifiex: add missing check for PCIe8997 chipset (bsc#1018813). - mwifiex: fix IBSS data path issue (bsc#1018813). - mwifiex: fix PCIe register information for 8997 chipset (bsc#1018813). - net/af_iucv: do not use paged skbs for TX on HiperSockets (bnc#1020945, LTC#150566). - net: ethernet: apm: xgene: use phydev from struct net_device (bsc#1019351). - net/hyperv: avoid uninitialized variable (fate#320485). - net: icmp6_send should use dst dev to determine L3 domain (bsc#1014701). - net: ipv6: tcp reset, icmp need to consider L3 domain (bsc#1014701). - net/mlx4_en: Fix panic on xmit while port is down (bsc#966191 FATE#320230). - net/mlx5e: Use correct flow dissector key on flower offloading (bsc#966170 FATE#320225 bsc#966172 FATE#320226). - net/mlx5: Fix autogroups groups num not decreasing (bsc#966170 FATE#320225 bsc#966172 FATE#320226). - net/mlx5: Keep autogroups list ordered (bsc#966170 FATE#320225 bsc#966172 FATE#320226). - net: remove useless memset's in drivers get_stats64 (bsc#1019351). - net_sched: fix a typo in tc_for_each_action() (bsc#966170 FATE#320225 bsc#966172 FATE#320226). - netvsc: add rcu_read locking to netvsc callback (fate#320485). - netvsc: fix checksum on UDP IPV6 (fate#320485). - netvsc: reduce maximum GSO size (fate#320485). - netvsc: Remove mistaken udp.h inclusion (fate#320485). - net: xgene: avoid bogus maybe-uninitialized warning (bsc#1019351). - net: xgene: fix backward compatibility fix (bsc#1019351). - net/xgene: fix error handling during reset (bsc#1019351). - net: xgene: move xgene_cle_ptree_ewdn data off stack (bsc#1019351). - nfit: fail DSMs that return non-zero status by default (bsc#1023175). - NFSv4: Cap the transport reconnection timer at 1/2 lease period (bsc#1014410). - NFSv4: Cleanup the setting of the nfs4 lease period (bsc#1014410). - nvdimm: kabi protect nd_cmd_out_size() (bsc#1023175). - nvme: apply DELAY_BEFORE_CHK_RDY quirk at probe time too (bsc#1020685). - ocfs2: fix deadlock on mmapped page in ocfs2_write_begin_nolock() (bnc#921494). - pci: Add devm_request_pci_bus_resources() (bsc#1019351). - PCI/AER: include header file (bsc#964944,FATE#319965). - pci: generic: Fix pci_remap_iospace() failure path (bsc#1019630). - pci: hv: Allocate physically contiguous hypercall params buffer (fate#320485). - pci: hv: Delete the device earlier from hbus->children for hot-remove (fate#320485). - pci: hv: Fix hv_pci_remove() for hot-remove (fate#320485). - pci: hv: Handle hv_pci_generic_compl() error case (fate#320485). - pci: hv: Handle vmbus_sendpacket() failure in hv_compose_msi_msg() (fate#320485). - pci: hv: Make unnecessarily global IRQ masking functions static (fate#320485). - pci: hv: Remove the unused 'wrk' in struct hv_pcibus_device (fate#320485). - pci: hv: Use list_move_tail() instead of list_del() + list_add_tail() (fate#320485). - pci: hv: Use pci_function_description in struct definitions (fate#320485). - pci: hv: Use the correct buffer size in new_pcichild_device() (fate#320485). - pci: hv: Use zero-length array in struct pci_packet (fate#320485). - pci: xgene: Add local struct device pointers (bsc#1019351). - pci: xgene: Add register accessors (bsc#1019351). - pci: xgene: Free bridge resource list on failure (bsc#1019351). - pci: xgene: Make explicitly non-modular (bsc#1019351). - pci: xgene: Pass struct xgene_pcie_port to setup functions (bsc#1019351). - pci: xgene: Remove unused platform data (bsc#1019351). - pci: xgene: Request host bridge window resources (bsc#1019351). - perf: xgene: Remove bogus IS_ERR() check (bsc#1019351). - phy: xgene: rename "enum phy_mode" to "enum xgene_phy_mode" (bsc#1019351). - powerpc/fadump: Fix the race in crash_fadump() (bsc#1022971). - power: reset: xgene-reboot: Unmap region obtained by of_iomap (bsc#1019351). - qeth: check not more than 16 SBALEs on the completion queue (bnc#1009718, LTC#148203). - raid1: ignore discard error (bsc#1017164). - reiserfs: fix race in prealloc discard (bsc#987576). - rpm/kernel-binary.spec.in: Export a make-stderr.log file (bsc#1012422) - rpm/kernel-binary.spec.in: Fix installation of /etc/uefi/certs (bsc#1019594) - rtc: cmos: avoid unused function warning (bsc#1022429). - rtc: cmos: Clear ACPI-driven alarms upon resume (bsc#1022429). - rtc: cmos: Do not enable interrupts in the middle of the interrupt handler (bsc#1022429). - rtc: cmos: Restore alarm after resume (bsc#1022429). - s390/cpuinfo: show maximum thread id (bnc#1009718, LTC#148580). - s390/sysinfo: show partition extended name and UUID if available (bnc#1009718, LTC#150160). - s390/time: LPAR offset handling (bnc#1009718, LTC#146920). - s390/time: move PTFF definitions (bnc#1009718, LTC#146920). - sched: Allow hotplug notifiers to be setup early (bnc#1022476). - sched/core: Fix incorrect utilization accounting when switching to fair class (bnc#1022476). - sched/core: Fix set_user_nice() (bnc#1022476). - sched/core, x86/topology: Fix NUMA in package topology bug (bnc#1022476). - sched/cputime: Add steal time support to full dynticks CPU time accounting (bnc#1022476). - sched/cputime: Fix prev steal time accouting during CPU hotplug (bnc#1022476). - sched/deadline: Always calculate end of period on sched_yield() (bnc#1022476). - sched/deadline: Fix a bug in dl_overflow() (bnc#1022476). - sched/deadline: Fix lock pinning warning during CPU hotplug (bnc#1022476). - sched/deadline: Fix wrap-around in DL heap (bnc#1022476). - sched/fair: Avoid using decay_load_missed() with a negative value (bnc#1022476). - sched/fair: Fix fixed point arithmetic width for shares and effective load (bnc#1022476). - sched/fair: Fix load_above_capacity fixed point arithmetic width (bnc#1022476). - sched/fair: Fix min_vruntime tracking (bnc#1022476). - sched/fair: Fix the wrong throttled clock time for cfs_rq_clock_task() (bnc#1022476). - sched/fair: Improve PELT stuff some more (bnc#1022476). - sched: Make wake_up_nohz_cpu() handle CPUs going offline (bnc#1022476). - sched/rt: Fix PI handling vs. sched_setscheduler() (bnc#1022476). - sched/rt: Kick RT bandwidth timer immediately on start up (bnc#1022476). - sched/rt, sched/dl: Do not push if task's scheduling class was changed (bnc#1022476). - scsi: Add 'AIX VDASD' to blacklist (bsc#1006469). - scsi: bfa: Increase requested firmware version to 3.2.5.1 (bsc#1013273). - scsi_dh_alua: uninitialized variable in alua_rtpg() (bsc#1012910). - scsi: Modify HITACHI OPEN-V blacklist entry (bsc#1006469). - scsi: storvsc: Payload buffer incorrectly sized for 32 bit kernels (fate#320485). - sd: always scan VPD pages if thin provisioning is enabled (bsc#1013792). - serial: 8250_fintek: fix the mismatched IRQ mode (boo#1009546). - serial: 8250: Integrate Fintek into 8250_base (boo#1016979). Update config files to change CONFIG_SERIAL_8250_FINTEK to boolean accordingly, too. Also, the corresponding entry got removed from supported.conf. - ses: Fix SAS device detection in enclosure (bsc#1016403). - sunrpc: Fix reconnection timeouts (bsc#1014410). - sunrpc: fix refcounting problems with auth_gss messages (boo#1011250). - sunrpc: Limit the reconnect backoff timer to the max RPC message timeout (bsc#1014410). - supported.conf: delete xilinx/ll_temac (bsc#1011602) - supported.conf: Support Marvell WiFi/BT SDIO and pinctrl-cherrytrail (bsc#1018813) - target: add XCOPY target/segment desc sense codes (bsc#991273). - target: bounds check XCOPY segment descriptor list (bsc#991273). - target: bounds check XCOPY total descriptor list length (bsc#991273). - target: check for XCOPY parameter truncation (bsc#991273). - target: check XCOPY segment descriptor CSCD IDs (bsc#1017170). - target: return UNSUPPORTED TARGET/SEGMENT DESC TYPE CODE sense (bsc#991273). - target: simplify XCOPY wwn->se_dev lookup helper (bsc#991273). - target: support XCOPY requests without parameters (bsc#991273). - target: use XCOPY segment descriptor CSCD IDs (bsc#1017170). - target: use XCOPY TOO MANY TARGET DESCRIPTORS sense (bsc#991273). - tools: hv: Enable network manager for bonding scripts on RHEL (fate#320485). - tools: hv: fix a compile warning in snprintf (fate#320485). - Tools: hv: kvp: configurable external scripts path (fate#320485). - Tools: hv: kvp: ensure kvp device fd is closed on exec (fate#320485). - tools: hv: remove unnecessary header files and netlink related code (fate#320485). - tools: hv: remove unnecessary link flag (fate#320485). - tty: n_hdlc, fix lockdep false positive (bnc#1015840). - Update metadata for serial fixes (bsc#1013001) - vmbus: make sysfs names consistent with PCI (fate#320485). - x86/hpet: Reduce HPET counter read contention (bsc#1014710). - x86/hyperv: Handle unknown NMIs on one CPU when unknown_nmi_panic (fate#320485). - x86/MCE: Dump MCE to dmesg if no consumers (bsc#1013994). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-245=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): kernel-debug-4.4.46-11.1 kernel-debug-base-4.4.46-11.1 kernel-debug-base-debuginfo-4.4.46-11.1 kernel-debug-debuginfo-4.4.46-11.1 kernel-debug-debugsource-4.4.46-11.1 kernel-debug-devel-4.4.46-11.1 kernel-debug-devel-debuginfo-4.4.46-11.1 kernel-default-4.4.46-11.1 kernel-default-base-4.4.46-11.1 kernel-default-base-debuginfo-4.4.46-11.1 kernel-default-debuginfo-4.4.46-11.1 kernel-default-debugsource-4.4.46-11.1 kernel-default-devel-4.4.46-11.1 kernel-obs-build-4.4.46-11.1 kernel-obs-build-debugsource-4.4.46-11.1 kernel-obs-qa-4.4.46-11.1 kernel-syms-4.4.46-11.1 kernel-vanilla-4.4.46-11.1 kernel-vanilla-base-4.4.46-11.1 kernel-vanilla-base-debuginfo-4.4.46-11.1 kernel-vanilla-debuginfo-4.4.46-11.1 kernel-vanilla-debugsource-4.4.46-11.1 kernel-vanilla-devel-4.4.46-11.1 - openSUSE Leap 42.2 (noarch): kernel-devel-4.4.46-11.1 kernel-docs-4.4.46-11.3 kernel-docs-html-4.4.46-11.3 kernel-docs-pdf-4.4.46-11.3 kernel-macros-4.4.46-11.1 kernel-source-4.4.46-11.1 kernel-source-vanilla-4.4.46-11.1 References: https://www.suse.com/security/cve/CVE-2015-8709.html https://www.suse.com/security/cve/CVE-2016-7117.html https://www.suse.com/security/cve/CVE-2016-8645.html https://www.suse.com/security/cve/CVE-2016-9793.html https://www.suse.com/security/cve/CVE-2016-9806.html https://www.suse.com/security/cve/CVE-2016-9919.html https://www.suse.com/security/cve/CVE-2017-2583.html https://www.suse.com/security/cve/CVE-2017-2584.html https://www.suse.com/security/cve/CVE-2017-5551.html https://www.suse.com/security/cve/CVE-2017-5576.html https://www.suse.com/security/cve/CVE-2017-5577.html https://bugzilla.suse.com/1000092 https://bugzilla.suse.com/1000619 https://bugzilla.suse.com/1003077 https://bugzilla.suse.com/1003253 https://bugzilla.suse.com/1005918 https://bugzilla.suse.com/1006469 https://bugzilla.suse.com/1006472 https://bugzilla.suse.com/1007729 https://bugzilla.suse.com/1008742 https://bugzilla.suse.com/1009546 https://bugzilla.suse.com/1009674 https://bugzilla.suse.com/1009718 https://bugzilla.suse.com/1009911 https://bugzilla.suse.com/1009969 https://bugzilla.suse.com/1010612 https://bugzilla.suse.com/1010690 https://bugzilla.suse.com/1011176 https://bugzilla.suse.com/1011250 https://bugzilla.suse.com/1011602 https://bugzilla.suse.com/1011660 https://bugzilla.suse.com/1011913 https://bugzilla.suse.com/1012422 https://bugzilla.suse.com/1012829 https://bugzilla.suse.com/1012910 https://bugzilla.suse.com/1013000 https://bugzilla.suse.com/1013001 https://bugzilla.suse.com/1013273 https://bugzilla.suse.com/1013531 https://bugzilla.suse.com/1013540 https://bugzilla.suse.com/1013542 https://bugzilla.suse.com/1013792 https://bugzilla.suse.com/1013994 https://bugzilla.suse.com/1014120 https://bugzilla.suse.com/1014392 https://bugzilla.suse.com/1014410 https://bugzilla.suse.com/1014701 https://bugzilla.suse.com/1014710 https://bugzilla.suse.com/1015038 https://bugzilla.suse.com/1015212 https://bugzilla.suse.com/1015359 https://bugzilla.suse.com/1015367 https://bugzilla.suse.com/1015416 https://bugzilla.suse.com/1015840 https://bugzilla.suse.com/1016250 https://bugzilla.suse.com/1016403 https://bugzilla.suse.com/1016517 https://bugzilla.suse.com/1016884 https://bugzilla.suse.com/1016979 https://bugzilla.suse.com/1017164 https://bugzilla.suse.com/1017170 https://bugzilla.suse.com/1017410 https://bugzilla.suse.com/1017589 https://bugzilla.suse.com/1018100 https://bugzilla.suse.com/1018316 https://bugzilla.suse.com/1018358 https://bugzilla.suse.com/1018385 https://bugzilla.suse.com/1018446 https://bugzilla.suse.com/1018813 https://bugzilla.suse.com/1018913 https://bugzilla.suse.com/1019061 https://bugzilla.suse.com/1019148 https://bugzilla.suse.com/1019260 https://bugzilla.suse.com/1019351 https://bugzilla.suse.com/1019594 https://bugzilla.suse.com/1019630 https://bugzilla.suse.com/1019631 https://bugzilla.suse.com/1019784 https://bugzilla.suse.com/1019851 https://bugzilla.suse.com/1020214 https://bugzilla.suse.com/1020488 https://bugzilla.suse.com/1020602 https://bugzilla.suse.com/1020685 https://bugzilla.suse.com/1020817 https://bugzilla.suse.com/1020945 https://bugzilla.suse.com/1020975 https://bugzilla.suse.com/1021248 https://bugzilla.suse.com/1021251 https://bugzilla.suse.com/1021258 https://bugzilla.suse.com/1021260 https://bugzilla.suse.com/1021294 https://bugzilla.suse.com/1021455 https://bugzilla.suse.com/1021474 https://bugzilla.suse.com/1022304 https://bugzilla.suse.com/1022429 https://bugzilla.suse.com/1022476 https://bugzilla.suse.com/1022547 https://bugzilla.suse.com/1022559 https://bugzilla.suse.com/1022971 https://bugzilla.suse.com/1023101 https://bugzilla.suse.com/1023175 https://bugzilla.suse.com/921494 https://bugzilla.suse.com/959709 https://bugzilla.suse.com/960561 https://bugzilla.suse.com/964944 https://bugzilla.suse.com/966170 https://bugzilla.suse.com/966172 https://bugzilla.suse.com/966186 https://bugzilla.suse.com/966191 https://bugzilla.suse.com/969474 https://bugzilla.suse.com/969475 https://bugzilla.suse.com/969756 https://bugzilla.suse.com/971975 https://bugzilla.suse.com/974215 https://bugzilla.suse.com/979378 https://bugzilla.suse.com/981709 https://bugzilla.suse.com/985561 https://bugzilla.suse.com/987192 https://bugzilla.suse.com/987576 https://bugzilla.suse.com/991273

1 0

openSUSE-RU-2017:0451-1: Recommended update for geany, geany-plugins
by maintenance＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Recommended Update: Recommended update for geany, geany-plugins ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0451-1 Rating: low References: #1022222 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for geany, geany-plugins fixes the following issues: - boo#1022222: The integrated terminal was not available In addition, the Geany IDE was updated to 1.29, with the following upstream changes: - UI fixes related to GTK - Fix focusing the message window when the Terminal tab is active - Add support for keeping the cursor a number of lines from the edges to always show some context - Allow to configure keybinding for "Delete to beginning of line" - Performance improvements with many duplicate symbols - Allow to configure the error indicator color - Fix highlighting of Haxe preprocessor - Add `.exp` extension to TCL The following changes are included in geany-plugins: - Rename plugin GeanyLipsum to Lipsum - Addons: Add a function to deselect marked words with one click - Commander: Add keybindings for triggering a particular filter type - Git-Changebar: Fix an issue access the git repository in combination with libgit2 0.24.2 - Git-Changebar: Fix an off-by-one issue in tooltip hunk width calculation cropping 1px on the right - Fix handling of documents starting with a BOM - Spellcheck: Strip single quotes from words' beginning and end - Spellcheck: Fix a memory leak on duplicate dictionaries - Treebrowser: Fix a typo in configuration parsing causing option for "open new files" have not being save/restored correctly Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-240=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): geany-1.29-3.1 geany-debuginfo-1.29-3.1 geany-debugsource-1.29-3.1 geany-devel-1.29-3.1 geany-doc-1.29-3.1 geany-plugins-1.29-3.2 geany-plugins-debuginfo-1.29-3.2 geany-plugins-debugsource-1.29-3.2 libgeany0-1.29-3.1 libgeany0-debuginfo-1.29-3.1 - openSUSE Leap 42.2 (noarch): geany-lang-1.29-3.1 geany-plugins-lang-1.29-3.2 References: https://bugzilla.suse.com/1022222

1 0

openSUSE-RU-2017:0450-1: moderate: Recommended update for kiconthemes
by maintenance＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Recommended Update: Recommended update for kiconthemes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0450-1 Rating: moderate References: #1000519 #1006651 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for kiconthemes fixes the following issues: - boo#1006651: icons would appear blurry with with non-integer scale factors - boo#1000519: applications would not detect a change in the configured icon theme while running Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-238=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): kiconthemes-debugsource-5.26.0-3.1 kiconthemes-devel-5.26.0-3.1 kiconthemes-devel-debuginfo-5.26.0-3.1 libKF5IconThemes5-5.26.0-3.1 libKF5IconThemes5-debuginfo-5.26.0-3.1 - openSUSE Leap 42.2 (x86_64): kiconthemes-devel-32bit-5.26.0-3.1 kiconthemes-devel-debuginfo-32bit-5.26.0-3.1 libKF5IconThemes5-32bit-5.26.0-3.1 libKF5IconThemes5-debuginfo-32bit-5.26.0-3.1 - openSUSE Leap 42.2 (noarch): libKF5IconThemes5-lang-5.26.0-3.1 References: https://bugzilla.suse.com/1000519 https://bugzilla.suse.com/1006651

1 0

openSUSE-RU-2017:0449-1: moderate: Recommended update for jsoncpp
by maintenance＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Recommended Update: Recommended update for jsoncpp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0449-1 Rating: moderate References: #1015761 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update to jsoncpp fixes the following issues: - boo#1015761: pkgconf script was broken Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-242=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): jsoncpp-debugsource-1.7.4-3.1 jsoncpp-devel-1.7.4-3.1 libjsoncpp1-1.7.4-3.1 libjsoncpp1-debuginfo-1.7.4-3.1 References: https://bugzilla.suse.com/1015761

1 0

openSUSE-RU-2017:0448-1: Recommended update for apparmor
by maintenance＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Recommended Update: Recommended update for apparmor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0448-1 Rating: low References: #1000201 #1009964 #1014463 #1015249 #1016259 #1017260 #980081 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update provides apparmor 2.10.2 and brings many fixes and improvements: The AppArmor 2.10.2 maintenance release includes lots of bugfixes and profile updates, see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details. (including fixes for boo#1000201, boo#1009964 and boo1014463) Additional fixes: - Add missing apparmor.service. (boo#1017260) Note: If you manually disabled AppArmor, this change will re-enable it. - Change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/. (boo#1015249, boo#980081, bsc#1016259) - Add dependency on var-lib.mount to apparmor.service as safety net. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-237=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_apparmor-2.10.2-10.1 apache2-mod_apparmor-debuginfo-2.10.2-10.1 apparmor-debugsource-2.10.2-10.1 apparmor-parser-2.10.2-10.1 apparmor-parser-debuginfo-2.10.2-10.1 libapparmor-devel-2.10.2-10.1 libapparmor1-2.10.2-10.1 libapparmor1-debuginfo-2.10.2-10.1 pam_apparmor-2.10.2-10.1 pam_apparmor-debuginfo-2.10.2-10.1 perl-apparmor-2.10.2-10.1 perl-apparmor-debuginfo-2.10.2-10.1 python3-apparmor-2.10.2-10.1 python3-apparmor-debuginfo-2.10.2-10.1 ruby-apparmor-2.10.2-10.1 ruby-apparmor-debuginfo-2.10.2-10.1 - openSUSE Leap 42.2 (noarch): apparmor-abstractions-2.10.2-10.1 apparmor-docs-2.10.2-10.1 apparmor-parser-lang-2.10.2-10.1 apparmor-profiles-2.10.2-10.1 apparmor-utils-2.10.2-10.1 apparmor-utils-lang-2.10.2-10.1 - openSUSE Leap 42.2 (x86_64): libapparmor1-32bit-2.10.2-10.1 libapparmor1-debuginfo-32bit-2.10.2-10.1 pam_apparmor-32bit-2.10.2-10.1 pam_apparmor-debuginfo-32bit-2.10.2-10.1 References: https://bugzilla.suse.com/1000201 https://bugzilla.suse.com/1009964 https://bugzilla.suse.com/1014463 https://bugzilla.suse.com/1015249 https://bugzilla.suse.com/1016259 https://bugzilla.suse.com/1017260 https://bugzilla.suse.com/980081

1 0

openSUSE-SU-2017:0447-1: moderate: Security update for irssi
by opensuse-security＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Security Update: Security update for irssi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0447-1 Rating: moderate References: #1023637 #1023638 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: The IRC textmode client irssi was updated to version 1.0.1 to fix bugs and security issues. irssi 1.0.1: * Fix Perl compilation in object dir * Fix incorrect HELP SERVER example * Correct memory leak in /OP and /VOICE * Fix regression that broke second level completion * Correct missing NULL termination in perl_parse boo#1023638 * Sync broken mail.pl script * Prevent a memory leak during the processing of the SASL response boo#1023637 irssi 1.0.0: * irssiproxy can now forward all tags through a single port. * The kill buffer now remembers consecutive kills. New bindings were added: yank_next_cutbuffer and append_next_kill. * autolog_ignore_targets and activity_hide_targets learn a new syntax tag/* and * to ignore whole networks or everything. * hilight got a -matchcase flag to hilight case sensitively. * Display TLS connection information upon connect. You can disable this by setting tls_verbose_connect to FALSE * Certificate pinning for TLS certificates * /names and $[…] now uses utf8 string operations. * New setting completion_nicks_match_case * /channel /server /network now support modify subcommand. * New option sasl_disconnect_on_failure to disconnect when SASL log-in failed. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-241=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-241=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): irssi-1.0.1-12.1 irssi-debuginfo-1.0.1-12.1 irssi-debugsource-1.0.1-12.1 irssi-devel-1.0.1-12.1 - openSUSE Leap 42.1 (i586 x86_64): irssi-1.0.1-12.1 irssi-debuginfo-1.0.1-12.1 irssi-debugsource-1.0.1-12.1 irssi-devel-1.0.1-12.1 References: https://bugzilla.suse.com/1023637 https://bugzilla.suse.com/1023638

1 0

openSUSE-SU-2017:0446-1: moderate: Security update for libxml2
by opensuse-security＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0446-1 Rating: moderate References: #1005544 #1010675 #1013930 #1014873 #1017497 Cross-References: CVE-2016-4658 CVE-2016-9318 CVE-2016-9597 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: This update for libxml2 fixes the following issues: * CVE-2016-4658: use-after-free error could lead to crash [bsc#1005544] * Fix NULL dereference in xpointer.c when in recovery mode [bsc#1014873] * CVE-2016-9597: An XML document with many opening tags could have caused a overflow of the stack not detected by the recursion limits, allowing for DoS (bsc#1017497). For CVE-2016-9318 we decided not to ship a fix since it can break existing setups. Please take appropriate actions if you parse untrusted XML files and use the new -noxxe flag if possible (bnc#1010675, bnc#1013930). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-244=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libxml2-2-2.9.4-3.1 libxml2-2-debuginfo-2.9.4-3.1 libxml2-debugsource-2.9.4-3.1 libxml2-devel-2.9.4-3.1 libxml2-tools-2.9.4-3.1 libxml2-tools-debuginfo-2.9.4-3.1 python-libxml2-2.9.4-3.1 python-libxml2-debuginfo-2.9.4-3.1 python-libxml2-debugsource-2.9.4-3.1 - openSUSE Leap 42.2 (noarch): libxml2-doc-2.9.4-3.1 - openSUSE Leap 42.2 (x86_64): libxml2-2-32bit-2.9.4-3.1 libxml2-2-debuginfo-32bit-2.9.4-3.1 libxml2-devel-32bit-2.9.4-3.1 References: https://www.suse.com/security/cve/CVE-2016-4658.html https://www.suse.com/security/cve/CVE-2016-9318.html https://www.suse.com/security/cve/CVE-2016-9597.html https://bugzilla.suse.com/1005544 https://bugzilla.suse.com/1010675 https://bugzilla.suse.com/1013930 https://bugzilla.suse.com/1014873 https://bugzilla.suse.com/1017497

1 0

openSUSE-RU-2017:0445-1: Recommended update for patterns-openSUSE
by maintenance＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Recommended Update: Recommended update for patterns-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0445-1 Rating: low References: #1010202 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for patterns-openSUSE fixes the following issues: - Remove gsynaptics Recommends from XFCE and LXDE patterns. This drags xf86-input-synaptics and blocks the libinput usage as a consequence although we've already wanted to move to libinput. (boo#1010202) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-235=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): patterns-openSUSE-lxde_laptop-20150918-27.1 patterns-openSUSE-xfce_laptop-20150918-27.1 References: https://bugzilla.suse.com/1010202

1 0

openSUSE-SU-2017:0444-1: important: Security update for tigervnc
by opensuse-security＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Security Update: Security update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0444-1 Rating: important References: #1022432 #1023012 Cross-References: CVE-2016-10207 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for tigervnc fixes the following issues: This security issue was fixed: - CVE-2016-10207: Prevent crash caused by failed TLS connection (bnc#1023012) This non-security issue was fixed: * Fix random client disconnections (boo#1022432) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-243=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-243=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libXvnc-devel-1.6.0-11.1 libXvnc1-1.6.0-11.1 libXvnc1-debuginfo-1.6.0-11.1 tigervnc-1.6.0-11.1 tigervnc-debuginfo-1.6.0-11.1 tigervnc-debugsource-1.6.0-11.1 xorg-x11-Xvnc-1.6.0-11.1 xorg-x11-Xvnc-debuginfo-1.6.0-11.1 - openSUSE Leap 42.1 (i586 x86_64): tigervnc-1.5.0-32.1 tigervnc-debuginfo-1.5.0-32.1 tigervnc-debugsource-1.5.0-32.1 xorg-x11-Xvnc-1.5.0-32.1 xorg-x11-Xvnc-debuginfo-1.5.0-32.1 References: https://www.suse.com/security/cve/CVE-2016-10207.html https://bugzilla.suse.com/1022432 https://bugzilla.suse.com/1023012

1 0

openSUSE-RU-2017:0443-1: Recommended update for apparmor
by maintenance＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Recommended Update: Recommended update for apparmor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0443-1 Rating: low References: #1000201 #1009964 #1014463 #1015249 #1016259 #1017260 #980081 #980596 #987607 #990006 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update provides apparmor 2.10.2 and brings many fixes and improvements: The AppArmor 2.10.2 maintenance release includes lots of bugfixes and profile updates, see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details. (including fixes for boo#1000201, boo#1009964 and boo1014463) Additional fixes: - Add missing apparmor.service. (boo#1017260) Note: If you manually disabled AppArmor, this change will re-enable it. - Change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/. This is part of the root partition (at least with default partitioning) and should be available earlier than /var/cache/apparmor/. (boo#1015249, boo#980081, bsc#1016259) - Add dependency on var-lib.mount to apparmor.service as safety net. - Allow dac_override in winbindd profile and mr for /usr/lib*/lbd/*.so in samba abstractions. (boo#990006) - Fix python LibAppArmor import failures with swig > 3.0.8. (boo#987607) - Updated ping profile. (boo#980596) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-236=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): apache2-mod_apparmor-2.10.2-9.1 apache2-mod_apparmor-debuginfo-2.10.2-9.1 apparmor-debugsource-2.10.2-9.1 apparmor-parser-2.10.2-9.1 apparmor-parser-debuginfo-2.10.2-9.1 libapparmor-devel-2.10.2-9.1 libapparmor1-2.10.2-9.1 libapparmor1-debuginfo-2.10.2-9.1 pam_apparmor-2.10.2-9.1 pam_apparmor-debuginfo-2.10.2-9.1 perl-apparmor-2.10.2-9.1 perl-apparmor-debuginfo-2.10.2-9.1 python3-apparmor-2.10.2-9.1 python3-apparmor-debuginfo-2.10.2-9.1 ruby-apparmor-2.10.2-9.1 ruby-apparmor-debuginfo-2.10.2-9.1 - openSUSE Leap 42.1 (x86_64): libapparmor1-32bit-2.10.2-9.1 libapparmor1-debuginfo-32bit-2.10.2-9.1 pam_apparmor-32bit-2.10.2-9.1 pam_apparmor-debuginfo-32bit-2.10.2-9.1 - openSUSE Leap 42.1 (noarch): apparmor-abstractions-2.10.2-9.1 apparmor-docs-2.10.2-9.1 apparmor-parser-lang-2.10.2-9.1 apparmor-profiles-2.10.2-9.1 apparmor-utils-2.10.2-9.1 apparmor-utils-lang-2.10.2-9.1 References: https://bugzilla.suse.com/1000201 https://bugzilla.suse.com/1009964 https://bugzilla.suse.com/1014463 https://bugzilla.suse.com/1015249 https://bugzilla.suse.com/1016259 https://bugzilla.suse.com/1017260 https://bugzilla.suse.com/980081 https://bugzilla.suse.com/980596 https://bugzilla.suse.com/987607 https://bugzilla.suse.com/990006

1 0

openSUSE-RU-2017:0442-1: moderate: Recommended update for konsole
by maintenance＠opensuse.org 11 Feb '17

11 Feb '17

openSUSE Recommended Update: Recommended update for konsole ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0442-1 Rating: moderate References: #1018087 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update to konsole fixes some regressions in the parsing of command line arguments that caused compatibility issues with previous versions: - restore proper handling of the -e command line option (boo#1018087, kde#366793) - re-add the --nofork option for compatibility (kde#367672) It also removes some debug output that got introduced by mistake in the previous update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-239=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): konsole-16.08.2-6.1 konsole-debuginfo-16.08.2-6.1 konsole-debugsource-16.08.2-6.1 konsole-part-16.08.2-6.1 konsole-part-debuginfo-16.08.2-6.1 References: https://bugzilla.suse.com/1018087

1 0

openSUSE-RU-2017:0439-1: Recommended update for python3-requests
by maintenance＠opensuse.org 09 Feb '17

09 Feb '17

openSUSE Recommended Update: Recommended update for python3-requests ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0439-1 Rating: low References: #912903 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python3-requests fixes the following issues: - Make https requests use verification based on openSUSE's default CA bundle. (boo#912903) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-234=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-234=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): python3-requests-2.7.0-6.1 - openSUSE Leap 42.1 (noarch): python3-requests-2.7.0-5.1 References: https://bugzilla.suse.com/912903

1 0

openSUSE-RU-2017:0435-1: moderate: Recommended update for python3-xattr
by maintenance＠opensuse.org 09 Feb '17

09 Feb '17

openSUSE Recommended Update: Recommended update for python3-xattr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0435-1 Rating: moderate References: #990225 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python3-xattr resolves the following issues: boo#990225: python3-xattr not available for the installation of python3-kiki Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-233=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): python3-xattr-0.7.8-2.1 python3-xattr-debuginfo-0.7.8-2.1 python3-xattr-debugsource-0.7.8-2.1 References: https://bugzilla.suse.com/990225

1 0

openSUSE-SU-2017:0434-1: moderate: Recommended update for opera
by opensuse-security＠opensuse.org 09 Feb '17

09 Feb '17

openSUSE Security Update: Recommended update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0434-1 Rating: moderate References: Affected Products: openSUSE Leap 42.2:NonFree openSUSE Leap 42.1:NonFree ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for opera fixes the following issues: Changes in opera: - Update to version 43.0.2442.806: * See https://opera.com/blogs/desktop/changelog-for-43 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2:NonFree: zypper in -t patch openSUSE-2017-232=1 - openSUSE Leap 42.1:NonFree: zypper in -t patch openSUSE-2017-232=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2:NonFree (x86_64): opera-43.0.2442.806-21.1 - openSUSE Leap 42.1:NonFree (x86_64): opera-43.0.2442.806-58.1 References:

1 0

openSUSE-SU-2017:0429-1: moderate: Security update for rubygem-minitar
by opensuse-security＠opensuse.org 09 Feb '17

09 Feb '17

openSUSE Security Update: Security update for rubygem-minitar ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0429-1 Rating: moderate References: #1021740 Cross-References: CVE-2016-10173 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rubygem-minitar fixes the following issues: - CVE-2016-10173: Fixed a directory traversal vulnerability in rubygem-minitar, rubygem-archive-tar-minitar. (boo#1021740) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-231=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ruby2.1-rubygem-minitar-0.5.4-3.1 ruby2.1-rubygem-minitar-doc-0.5.4-3.1 References: https://www.suse.com/security/cve/CVE-2016-10173.html https://bugzilla.suse.com/1021740

1 0

openSUSE-SU-2017:0428-1: Security update for libplist
by opensuse-security＠opensuse.org 09 Feb '17

09 Feb '17

openSUSE Security Update: Security update for libplist ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0428-1 Rating: low References: #1019531 #1021610 Cross-References: CVE-2017-5209 CVE-2017-5545 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libplist addresses the following vulnerabilities: - CVE-2017-5545: OOB heap buffer read which could allow attackers to obtain sensitive information from process memory or cause a DoS (bsc#1021610) - CVE-2017-5209: base64decode function could have allowed attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-230=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-230=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libplist++-devel-1.12-5.1 libplist++3-1.12-5.1 libplist++3-debuginfo-1.12-5.1 libplist-debugsource-1.12-5.1 libplist-devel-1.12-5.1 libplist3-1.12-5.1 libplist3-debuginfo-1.12-5.1 plistutil-1.12-5.1 plistutil-debuginfo-1.12-5.1 python-plist-1.12-5.1 python-plist-debuginfo-1.12-5.1 - openSUSE Leap 42.2 (x86_64): libplist++3-32bit-1.12-5.1 libplist++3-debuginfo-32bit-1.12-5.1 libplist3-32bit-1.12-5.1 libplist3-debuginfo-32bit-1.12-5.1 - openSUSE Leap 42.1 (i586 x86_64): libplist++-devel-1.12-4.1 libplist++3-1.12-4.1 libplist++3-debuginfo-1.12-4.1 libplist-debugsource-1.12-4.1 libplist-devel-1.12-4.1 libplist3-1.12-4.1 libplist3-debuginfo-1.12-4.1 plistutil-1.12-4.1 plistutil-debuginfo-1.12-4.1 python-plist-1.12-4.1 python-plist-debuginfo-1.12-4.1 - openSUSE Leap 42.1 (x86_64): libplist++3-32bit-1.12-4.1 libplist++3-debuginfo-32bit-1.12-4.1 libplist3-32bit-1.12-4.1 libplist3-debuginfo-32bit-1.12-4.1 References: https://www.suse.com/security/cve/CVE-2017-5209.html https://www.suse.com/security/cve/CVE-2017-5545.html https://bugzilla.suse.com/1019531 https://bugzilla.suse.com/1021610

1 0

openSUSE-RU-2017:0422-1: moderate: Recommended update for calibre
by maintenance＠opensuse.org 08 Feb '17

08 Feb '17

openSUSE Recommended Update: Recommended update for calibre ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0422-1 Rating: moderate References: #1011610 #1022710 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for calibre fixes the following issues: - boo#1022710: when upgrading from openSUSE 13.2, the package install may fail - boo#1011610: calibre could crash upon opening In addition, calibre was updated to 2.78.0 to deliver the following features and improvements: - Kobo driver: Update to support the newest firmware from Kobo - Amazon metadata download: Add support for downloading from amazon.ca Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-229=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-229=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): calibre-2.78.0-7.1 calibre-debuginfo-2.78.0-7.1 calibre-debugsource-2.78.0-7.1 - openSUSE Leap 42.1 (i586 x86_64): calibre-2.78.0-30.1 calibre-debuginfo-2.78.0-30.1 calibre-debugsource-2.78.0-30.1 References: https://bugzilla.suse.com/1011610 https://bugzilla.suse.com/1022710

1 0

openSUSE-SU-2017:0421-1: important: Security update for spice
by opensuse-security＠opensuse.org 08 Feb '17

08 Feb '17

openSUSE Security Update: Security update for spice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0421-1 Rating: important References: #1023078 #1023079 Cross-References: CVE-2016-9577 CVE-2016-9578 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This security update for spice fixes the following issues: CVE-2016-9577: A buffer overflow in the spice server could have potentially been used by unauthenticated attackers to execute arbitrary code. (bsc#1023078) CVE-2016-9578: Unauthenticated attackers could have caused a denial of service via a crafted message. (bsc#1023079) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-227=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libspice-server-devel-0.12.5-11.1 libspice-server1-0.12.5-11.1 libspice-server1-debuginfo-0.12.5-11.1 spice-client-0.12.5-11.1 spice-client-debuginfo-0.12.5-11.1 spice-debugsource-0.12.5-11.1 References: https://www.suse.com/security/cve/CVE-2016-9577.html https://www.suse.com/security/cve/CVE-2016-9578.html https://bugzilla.suse.com/1023078 https://bugzilla.suse.com/1023079

1 0

openSUSE-RU-2017:0420-1: moderate: Recommended update for clamav-database
by maintenance＠opensuse.org 08 Feb '17

08 Feb '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0420-1 Rating: moderate References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh on February 6th 2017. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-226=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-226=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201702060005-37.1 - openSUSE Leap 42.1 (noarch): clamav-database-201702060005-216.1 References:

1 0

openSUSE-SU-2017:0419-1: important: Security update for spice
by opensuse-security＠opensuse.org 08 Feb '17

08 Feb '17

openSUSE Security Update: Security update for spice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0419-1 Rating: important References: #1023078 #1023079 Cross-References: CVE-2016-9577 CVE-2016-9578 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This security update for spice fixes the following issues: - CVE-2016-9577: A buffer overflow in the spice server could have potentially been used by unauthenticated attackers to execute arbitrary code. (bsc#1023078) - CVE-2016-9578: Unauthenticated attackers could have caused a denial of service via a crafted message. (bsc#1023079) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-228=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libspice-server-devel-0.12.7-3.1 libspice-server1-0.12.7-3.1 libspice-server1-debuginfo-0.12.7-3.1 spice-client-0.12.7-3.1 spice-debugsource-0.12.7-3.1 References: https://www.suse.com/security/cve/CVE-2016-9577.html https://www.suse.com/security/cve/CVE-2016-9578.html https://bugzilla.suse.com/1023078 https://bugzilla.suse.com/1023079

1 0

openSUSE-RU-2017:0416-1: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 07 Feb '17

07 Feb '17

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0416-1 Rating: low References: #1022050 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xorg-x11-server fixes the following issues: - Fix unpainted areas when glamor is being used. (boo#1022050) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-224=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xorg-x11-server-7.6_1.18.3-10.1 xorg-x11-server-debuginfo-7.6_1.18.3-10.1 xorg-x11-server-debugsource-7.6_1.18.3-10.1 xorg-x11-server-extra-7.6_1.18.3-10.1 xorg-x11-server-extra-debuginfo-7.6_1.18.3-10.1 xorg-x11-server-sdk-7.6_1.18.3-10.1 xorg-x11-server-source-7.6_1.18.3-10.1 References: https://bugzilla.suse.com/1022050

1 0

openSUSE-RU-2017:0414-1: Recommended update for gnome-todo
by maintenance＠opensuse.org 07 Feb '17

07 Feb '17

openSUSE Recommended Update: Recommended update for gnome-todo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0414-1 Rating: low References: #1021815 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-todo fixes the following issues: - Avoid a crash when closing a task's detailed view. (bgo#768319, boo#1021815) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-225=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): gnome-todo-lang-3.20.2-3.1 - openSUSE Leap 42.2 (x86_64): gnome-todo-3.20.2-3.1 gnome-todo-debuginfo-3.20.2-3.1 gnome-todo-debugsource-3.20.2-3.1 gnome-todo-devel-3.20.2-3.1 typelib-1_0-Gtd-1_0-3.20.2-3.1 References: https://bugzilla.suse.com/1021815

1 0

openSUSE-SU-2017:0413-1: Security update for irssi
by opensuse-security＠opensuse.org 07 Feb '17

07 Feb '17

openSUSE Security Update: Security update for irssi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0413-1 Rating: low References: #1023637 #1023638 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: The IRC textmode client irssi was updated to version 1.0.1 to fix bugs and security issues. irssi 1.0.1: * Fix Perl compilation in object dir * Fix incorrect HELP SERVER example * Correct memory leak in /OP and /VOICE * Fix regression that broke second level completion * Correct missing NULL termination in perl_parse boo#1023638 * Sync broken mail.pl script * Prevent a memory leak during the processing of the SASL response boo#1023637 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-223=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): irssi-1.0.1-18.1 irssi-devel-1.0.1-18.1 References: https://bugzilla.suse.com/1023637 https://bugzilla.suse.com/1023638

1 0

openSUSE-SU-2017:0409-1: moderate: Security update for libressl
by opensuse-security＠opensuse.org 07 Feb '17

07 Feb '17

openSUSE Security Update: Security update for libressl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0409-1 Rating: moderate References: #1019334 Cross-References: CVE-2016-7056 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libressl fixes the following issues: - CVE-2016-7056: Difficult to execute cache timing attack that may have allowed a local user to recover the private part from ECDSA P-256 keys (boo#1019334) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-222=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-222=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libcrypto37-2.3.4-3.1 libcrypto37-debuginfo-2.3.4-3.1 libressl-2.3.4-3.1 libressl-debuginfo-2.3.4-3.1 libressl-debugsource-2.3.4-3.1 libressl-devel-2.3.4-3.1 libssl38-2.3.4-3.1 libssl38-debuginfo-2.3.4-3.1 libtls10-2.3.4-3.1 libtls10-debuginfo-2.3.4-3.1 - openSUSE Leap 42.2 (x86_64): libcrypto37-32bit-2.3.4-3.1 libcrypto37-debuginfo-32bit-2.3.4-3.1 libressl-devel-32bit-2.3.4-3.1 libssl38-32bit-2.3.4-3.1 libssl38-debuginfo-32bit-2.3.4-3.1 libtls10-32bit-2.3.4-3.1 libtls10-debuginfo-32bit-2.3.4-3.1 - openSUSE Leap 42.2 (noarch): libressl-devel-doc-2.3.4-3.1 - openSUSE Leap 42.1 (i586 x86_64): libcrypto36-2.3.0-10.1 libcrypto36-debuginfo-2.3.0-10.1 libressl-2.3.0-10.1 libressl-debuginfo-2.3.0-10.1 libressl-debugsource-2.3.0-10.1 libressl-devel-2.3.0-10.1 libssl37-2.3.0-10.1 libssl37-debuginfo-2.3.0-10.1 libtls9-2.3.0-10.1 libtls9-debuginfo-2.3.0-10.1 - openSUSE Leap 42.1 (noarch): libressl-devel-doc-2.3.0-10.1 - openSUSE Leap 42.1 (x86_64): libcrypto36-32bit-2.3.0-10.1 libcrypto36-debuginfo-32bit-2.3.0-10.1 libressl-devel-32bit-2.3.0-10.1 libssl37-32bit-2.3.0-10.1 libssl37-debuginfo-32bit-2.3.0-10.1 libtls9-32bit-2.3.0-10.1 libtls9-debuginfo-32bit-2.3.0-10.1 References: https://www.suse.com/security/cve/CVE-2016-7056.html https://bugzilla.suse.com/1019334

1 0

openSUSE-OU-2017:0406-1: moderate: Add rubygem-httpclient to the SUSE Package Hub
by maintenance＠opensuse.org 06 Feb '17

06 Feb '17

openSUSE Optional Update: Add rubygem-httpclient to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0406-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update adds rubygem-httpclient to the SUSE Package Hub. It adds HTTP client functionality to Ruby. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-220=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): ruby2.1-rubygem-httpclient-2.8.3-2.1 ruby2.1-rubygem-httpclient-doc-2.8.3-2.1 ruby2.1-rubygem-httpclient-testsuite-2.8.3-2.1 References:

1 0

openSUSE-SU-2017:0405-1: moderate: Security update for libgit2
by opensuse-security＠opensuse.org 06 Feb '17

06 Feb '17

openSUSE Security Update: Security update for libgit2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0405-1 Rating: moderate References: #1019036 #1019037 Cross-References: CVE-2016-10128 CVE-2016-10129 CVE-2016-10130 CVE-2017-5338 CVE-2017-5339 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for libgit2 to version 0.24.6 fixes the following issues: - CVE-2016-10130: When using the custom certificate callback or when using pygit2 or git2go a attacker could have caused an invalid certificate to be accepted (bsc#1019037). - CVE-2017-5338: When using the custom certificate callback or when using pygit2 or git2go a attacker could have caused an invalid certificate to be accepted (bsc#1019037). - CVE-2017-5339: When using the custom certificate callback or when using pygit2 or git2go a attacker could have caused an invalid certificate to be accepted (bsc#1019037). - CVE-2016-10128: Additional sanitization prevent some edge cases in the Git Smart Protocol which can lead to reading outside of a buffer (bsc#1019036). - CVE-2016-10129: Additional sanitization prevent some edge cases in the Git Smart Protocol which can lead to reading outside of a buffer (bsc#1019036). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-216=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 s390x x86_64): libgit2-24-0.24.6-10.1 libgit2-devel-0.24.6-10.1 References: https://www.suse.com/security/cve/CVE-2016-10128.html https://www.suse.com/security/cve/CVE-2016-10129.html https://www.suse.com/security/cve/CVE-2016-10130.html https://www.suse.com/security/cve/CVE-2017-5338.html https://www.suse.com/security/cve/CVE-2017-5339.html https://bugzilla.suse.com/1019036 https://bugzilla.suse.com/1019037

1 0

openSUSE-OU-2017:0404-1: moderate: Add FATE to the SUSE Package Hub
by maintenance＠opensuse.org 06 Feb '17

06 Feb '17

openSUSE Optional Update: Add FATE to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0404-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update make FATE available in the SUSE Package Hub. FATE is the SUSE Feature Management Tool. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-221=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (s390x x86_64): fate-1.5.5.7.1-2.1 fate-debuginfo-1.5.5.7.1-2.1 References:

1 0

openSUSE-OU-2017:0403-1: moderate: Add Regina-REXX to the SUSE Package Hub.
by maintenance＠opensuse.org 06 Feb '17

06 Feb '17

openSUSE Optional Update: Add Regina-REXX to the SUSE Package Hub. ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0403-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update adds Regina-REXX to the SUSE Package Hub. Regina-REXX is a REXX interpreter. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-218=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): Regina-REXX-3.9.1-2.1 Regina-REXX-devel-3.9.1-2.1 Regina-REXX-doc-3.9.1-2.1 libregina3-3.9.1-2.1 References:

1 0

openSUSE-OU-2017:0402-1: moderate: Add waffle to the SUSE Package Hub
by maintenance＠opensuse.org 06 Feb '17

06 Feb '17

openSUSE Optional Update: Add waffle to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0402-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update make waffle available in the SUSE Package Hub. Waffle is a cross-platform C library that allows one to defer selection of an OpenGL API and window system until runtime. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-219=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libwaffle-1-0-1.5.2-2.1 waffle-1.5.2-2.1 waffle-devel-1.5.2-2.1 References:

1 0

openSUSE-RU-2017:0401-1: moderate: Recommended update for nano
by maintenance＠opensuse.org 06 Feb '17

06 Feb '17

openSUSE Recommended Update: Recommended update for nano ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0401-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for nano to version 2.7.4 delivers the latest version of the editor to the SUSE Package Hub. * syntax highlighting improvements and fixes * new feature: trim end-of-line whitespace when justifying * Go To Line takes negative numbers, relative to bottom of text * new feature: select text by Shift+cursor * add ability to display line numbers * file browser improvements * many bug fixes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-217=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): nano-2.7.4-6.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): nano-lang-2.7.4-6.1 References:

1 0

openSUSE-SU-2017:0399-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 06 Feb '17

06 Feb '17

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0399-1 Rating: moderate References: #1017310 #1017312 #1017313 #1017314 #1017324 #1017326 #1020443 #1020448 Cross-References: CVE-2016-10048 CVE-2016-10050 CVE-2016-10051 CVE-2016-10052 CVE-2016-10068 CVE-2016-10070 CVE-2016-10146 CVE-2017-5511 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for GraphicsMagick fixes several issues. These security issues were fixed: - CVE-2016-10048: Arbitrary module could have been load because relative path were not escaped (bsc#1017310) - CVE-2016-10050: Corrupt RLE files could have overflowed a heap buffer due to a missing offset check (bsc#1017312) - CVE-2016-10051: Fixed use after free when reading PWP files (bsc#1017313) - CVE-2016-10052: Added bound check to exif parsing of JPEG files (bsc#1017314) - CVE-2016-10068: Prevent NULL pointer access when using the MSL interpreter (bsc#1017324) - CVE-2016-10070: Prevent allocating the wrong amount of memory when reading mat files (bsc#1017326) - CVE-2016-10146: Captions and labels were handled incorrectly, causing a memory leak that could have lead to DoS (bsc#1020443) - CVE-2017-5511: A missing cast when reading PSD files could have caused memory corruption by a heap overflow (bsc#1020448) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-212=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): GraphicsMagick-1.3.25-9.1 GraphicsMagick-debuginfo-1.3.25-9.1 GraphicsMagick-debugsource-1.3.25-9.1 GraphicsMagick-devel-1.3.25-9.1 libGraphicsMagick++-Q16-12-1.3.25-9.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-9.1 libGraphicsMagick++-devel-1.3.25-9.1 libGraphicsMagick-Q16-3-1.3.25-9.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-9.1 libGraphicsMagick3-config-1.3.25-9.1 libGraphicsMagickWand-Q16-2-1.3.25-9.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-9.1 perl-GraphicsMagick-1.3.25-9.1 perl-GraphicsMagick-debuginfo-1.3.25-9.1 References: https://www.suse.com/security/cve/CVE-2016-10048.html https://www.suse.com/security/cve/CVE-2016-10050.html https://www.suse.com/security/cve/CVE-2016-10051.html https://www.suse.com/security/cve/CVE-2016-10052.html https://www.suse.com/security/cve/CVE-2016-10068.html https://www.suse.com/security/cve/CVE-2016-10070.html https://www.suse.com/security/cve/CVE-2016-10146.html https://www.suse.com/security/cve/CVE-2017-5511.html https://bugzilla.suse.com/1017310 https://bugzilla.suse.com/1017312 https://bugzilla.suse.com/1017313 https://bugzilla.suse.com/1017314 https://bugzilla.suse.com/1017324 https://bugzilla.suse.com/1017326 https://bugzilla.suse.com/1020443 https://bugzilla.suse.com/1020448

1 0

openSUSE-SU-2017:0397-1: moderate: Security update for libgit2
by opensuse-security＠opensuse.org 06 Feb '17

06 Feb '17

openSUSE Security Update: Security update for libgit2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0397-1 Rating: moderate References: #1019036 #1019037 Cross-References: CVE-2016-10128 CVE-2016-10129 CVE-2016-10130 CVE-2017-5338 CVE-2017-5339 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for libgit2 fixes the following issues: - CVE-2016-10130: When using the custom certificate callback or when using pygit2 or git2go a attacker could have caused an invalid certificate to be accepted (bsc#1019037). - CVE-2017-5338: When using the custom certificate callback or when using pygit2 or git2go a attacker could have caused an invalid certificate to be accepted (bsc#1019037). - CVE-2017-5339: When using the custom certificate callback or when using pygit2 or git2go a attacker could have caused an invalid certificate to be accepted (bsc#1019037). - CVE-2016-10128: Additional sanitization prevent some edge cases in the Git Smart Protocol which can lead to reading outside of a buffer (bsc#1019036). - CVE-2016-10129: Additional sanitization prevent some edge cases in the Git Smart Protocol which can lead to reading outside of a buffer (bsc#1019036). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-213=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libgit2-22-0.22.1-8.1 libgit2-22-debuginfo-0.22.1-8.1 libgit2-debugsource-0.22.1-8.1 libgit2-devel-0.22.1-8.1 - openSUSE Leap 42.1 (x86_64): libgit2-22-32bit-0.22.1-8.1 libgit2-22-debuginfo-32bit-0.22.1-8.1 References: https://www.suse.com/security/cve/CVE-2016-10128.html https://www.suse.com/security/cve/CVE-2016-10129.html https://www.suse.com/security/cve/CVE-2016-10130.html https://www.suse.com/security/cve/CVE-2017-5338.html https://www.suse.com/security/cve/CVE-2017-5339.html https://bugzilla.suse.com/1019036 https://bugzilla.suse.com/1019037

1 0

openSUSE-RU-2017:0395-1: moderate: Recommended update for alsa
by maintenance＠opensuse.org 06 Feb '17

06 Feb '17

openSUSE Recommended Update: Recommended update for alsa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0395-1 Rating: moderate References: #1017824 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides alsa-lib 1.1.3 including a regression fix for clementine and various other fixes and improvements. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-215=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): alsa-1.1.3-6.1 alsa-debugsource-1.1.3-6.1 alsa-devel-1.1.3-6.1 libasound2-1.1.3-6.1 libasound2-debuginfo-1.1.3-6.1 - openSUSE Leap 42.2 (noarch): alsa-docs-1.1.3-6.1 - openSUSE Leap 42.2 (x86_64): alsa-devel-32bit-1.1.3-6.1 libasound2-32bit-1.1.3-6.1 libasound2-debuginfo-32bit-1.1.3-6.1 References: https://bugzilla.suse.com/1017824

1 0

openSUSE-SU-2017:0391-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 06 Feb '17

06 Feb '17

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0391-1 Rating: moderate References: #1017310 #1017312 #1017313 #1017314 #1017318 #1017321 #1017322 #1017324 #1017325 #1017326 #1020443 #1020448 Cross-References: CVE-2016-10048 CVE-2016-10050 CVE-2016-10051 CVE-2016-10052 CVE-2016-10059 CVE-2016-10064 CVE-2016-10065 CVE-2016-10068 CVE-2016-10069 CVE-2016-10070 CVE-2016-10146 CVE-2017-5511 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for GraphicsMagick fixes several issues. These security issues were fixed: - CVE-2016-10048: Arbitrary module could have been load because relative path were not escaped (bsc#1017310) - CVE-2016-10050: Corrupt RLE files could have overflowed a heap buffer due to a missing offset check (bsc#1017312) - CVE-2016-10051: Fixed use after free when reading PWP files (bsc#1017313) - CVE-2016-10052: Added bound check to exif parsing of JPEG files (bsc#1017314) - CVE-2016-10059: Unchecked calculation when reading TIFF files could have lead to a buffer overflow (bsc#1017318) - CVE-2016-10064: Improved checks for buffer overflow when reading TIFF files (bsc#1017321) - CVE-2016-10065: Unchecked calculations when reading VIFF files could have lead to out of bound reads (bsc#1017322) - CVE-2016-10068: Prevent NULL pointer access when using the MSL interpreter (bsc#1017324) - CVE-2016-10069: Add check for invalid mat file (bsc#1017325). - CVE-2016-10070: Prevent allocating the wrong amount of memory when reading mat files (bsc#1017326) - CVE-2016-10146: Captions and labels were handled incorrectly, causing a memory leak that could have lead to DoS (bsc#1020443) - CVE-2017-5511: A missing cast when reading PSD files could have caused memory corruption by a heap overflow (bsc#1020448) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-214=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): GraphicsMagick-1.3.21-26.1 GraphicsMagick-debuginfo-1.3.21-26.1 GraphicsMagick-debugsource-1.3.21-26.1 GraphicsMagick-devel-1.3.21-26.1 libGraphicsMagick++-Q16-11-1.3.21-26.1 libGraphicsMagick++-Q16-11-debuginfo-1.3.21-26.1 libGraphicsMagick++-devel-1.3.21-26.1 libGraphicsMagick-Q16-3-1.3.21-26.1 libGraphicsMagick-Q16-3-debuginfo-1.3.21-26.1 libGraphicsMagick3-config-1.3.21-26.1 libGraphicsMagickWand-Q16-2-1.3.21-26.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.21-26.1 perl-GraphicsMagick-1.3.21-26.1 perl-GraphicsMagick-debuginfo-1.3.21-26.1 References: https://www.suse.com/security/cve/CVE-2016-10048.html https://www.suse.com/security/cve/CVE-2016-10050.html https://www.suse.com/security/cve/CVE-2016-10051.html https://www.suse.com/security/cve/CVE-2016-10052.html https://www.suse.com/security/cve/CVE-2016-10059.html https://www.suse.com/security/cve/CVE-2016-10064.html https://www.suse.com/security/cve/CVE-2016-10065.html https://www.suse.com/security/cve/CVE-2016-10068.html https://www.suse.com/security/cve/CVE-2016-10069.html https://www.suse.com/security/cve/CVE-2016-10070.html https://www.suse.com/security/cve/CVE-2016-10146.html https://www.suse.com/security/cve/CVE-2017-5511.html https://bugzilla.suse.com/1017310 https://bugzilla.suse.com/1017312 https://bugzilla.suse.com/1017313 https://bugzilla.suse.com/1017314 https://bugzilla.suse.com/1017318 https://bugzilla.suse.com/1017321 https://bugzilla.suse.com/1017322 https://bugzilla.suse.com/1017324 https://bugzilla.suse.com/1017325 https://bugzilla.suse.com/1017326 https://bugzilla.suse.com/1020443 https://bugzilla.suse.com/1020448

1 0

openSUSE-RU-2017:0390-1: Recommended update for yast2-ruby-bindings
by maintenance＠opensuse.org 04 Feb '17

04 Feb '17

openSUSE Recommended Update: Recommended update for yast2-ruby-bindings ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0390-1 Rating: low References: #1014458 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-ruby-bindings fixes the following issue: - Do not crash when FastGettext is unable to find the empty.mo file (bsc#1014458) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-210=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): yast2-ruby-bindings-3.1.40.1-3.1 yast2-ruby-bindings-debuginfo-3.1.40.1-3.1 yast2-ruby-bindings-debugsource-3.1.40.1-3.1 References: https://bugzilla.suse.com/1014458

1 0

openSUSE-SU-2017:0389-1: moderate: Security update for cpio
by opensuse-security＠opensuse.org 04 Feb '17

04 Feb '17

openSUSE Security Update: Security update for cpio ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0389-1 Rating: moderate References: #1020108 #963448 Cross-References: CVE-2016-2037 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for cpio fixes two issues. This security issue was fixed: - CVE-2016-2037: The cpio_safer_name_suffix function in util.c in cpio allowed remote attackers to cause a denial of service (out-of-bounds write) via a crafted cpio file (bsc#963448). This non-security issue was fixed: - bsc#1020108: Always use 32 bit CRC to prevent checksum errors for files greater than 32MB This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-209=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-209=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): cpio-2.11-33.1 cpio-debuginfo-2.11-33.1 cpio-debugsource-2.11-33.1 - openSUSE Leap 42.2 (noarch): cpio-lang-2.11-33.1 - openSUSE Leap 42.1 (i586 x86_64): cpio-2.11-32.1 cpio-debuginfo-2.11-32.1 cpio-debugsource-2.11-32.1 - openSUSE Leap 42.1 (noarch): cpio-lang-2.11-32.1 References: https://www.suse.com/security/cve/CVE-2016-2037.html https://bugzilla.suse.com/1020108 https://bugzilla.suse.com/963448

1 0

openSUSE-SU-2017:0388-1: moderate: Security update for gstreamer-0_10-plugins-bad
by opensuse-security＠opensuse.org 04 Feb '17

04 Feb '17

openSUSE Security Update: Security update for gstreamer-0_10-plugins-bad ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0388-1 Rating: moderate References: #1013659 Cross-References: CVE-2016-9809 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gstreamer-0_10-plugins-bad fixes the following issue: - CVE-2016-9809: Off by one read in gst_h264_parse_set_caps() (bsc#1013659) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-208=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gstreamer-0_10-plugins-bad-0.10.23-27.1 gstreamer-0_10-plugins-bad-debuginfo-0.10.23-27.1 gstreamer-0_10-plugins-bad-debugsource-0.10.23-27.1 gstreamer-0_10-plugins-bad-devel-0.10.23-27.1 gstreamer-0_10-plugins-bad-doc-0.10.23-27.1 libgstbasecamerabinsrc-0_10-23-0.10.23-27.1 libgstbasecamerabinsrc-0_10-23-debuginfo-0.10.23-27.1 libgstbasevideo-0_10-23-0.10.23-27.1 libgstbasevideo-0_10-23-debuginfo-0.10.23-27.1 libgstcodecparsers-0_10-23-0.10.23-27.1 libgstcodecparsers-0_10-23-debuginfo-0.10.23-27.1 libgstphotography-0_10-23-0.10.23-27.1 libgstphotography-0_10-23-debuginfo-0.10.23-27.1 libgstsignalprocessor-0_10-23-0.10.23-27.1 libgstsignalprocessor-0_10-23-debuginfo-0.10.23-27.1 libgstvdp-0_10-23-0.10.23-27.1 libgstvdp-0_10-23-debuginfo-0.10.23-27.1 - openSUSE Leap 42.2 (noarch): gstreamer-0_10-plugins-bad-lang-0.10.23-27.1 - openSUSE Leap 42.2 (x86_64): gstreamer-0_10-plugins-bad-32bit-0.10.23-27.1 gstreamer-0_10-plugins-bad-debuginfo-32bit-0.10.23-27.1 libgstbasecamerabinsrc-0_10-23-32bit-0.10.23-27.1 libgstbasecamerabinsrc-0_10-23-debuginfo-32bit-0.10.23-27.1 libgstbasevideo-0_10-23-32bit-0.10.23-27.1 libgstbasevideo-0_10-23-debuginfo-32bit-0.10.23-27.1 libgstcodecparsers-0_10-23-32bit-0.10.23-27.1 libgstcodecparsers-0_10-23-debuginfo-32bit-0.10.23-27.1 libgstphotography-0_10-23-32bit-0.10.23-27.1 libgstphotography-0_10-23-debuginfo-32bit-0.10.23-27.1 libgstsignalprocessor-0_10-23-32bit-0.10.23-27.1 libgstsignalprocessor-0_10-23-debuginfo-32bit-0.10.23-27.1 libgstvdp-0_10-23-32bit-0.10.23-27.1 libgstvdp-0_10-23-debuginfo-32bit-0.10.23-27.1 References: https://www.suse.com/security/cve/CVE-2016-9809.html https://bugzilla.suse.com/1013659

1 0

openSUSE-RU-2017:0387-1: moderate: Recommended update for fate
by maintenance＠opensuse.org 04 Feb '17

04 Feb '17

openSUSE Recommended Update: Recommended update for fate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0387-1 Rating: moderate References: #1004536 #1006192 #1015881 #401198 #837526 #934673 #940928 #956270 #957827 #964882 #967367 #978153 #980276 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 13 recommended fixes can now be installed. Description: This update for fate fixes the following bugs and improvement requests: - boo#837526: fix filter in productviewer, rearrange columns and layout, also show feature open dates and deadlines - boo#964882: fix crash, QList::first() returns undefined on empty list, so check first - boo#1006192: have UTC time stamps in comments as in openfate - boo#940928: fix formatting and limit comment threads - boo#967367: remove bookmarks feature which is currently broken - boo#1004536: create an extra list for ECO stakeholders in feature view - boo#401198: Saving changes list of displayed features - bsc#934673: ECO edit tab is too small vertically on laptop screen - bsc#956270: Allow case-insensitive search - bsc#957827: Under Gnome/SLE12 checkboxes in "Only Status" pulldown menu of Custom Query dialog do not get displayed while KDE works - bsc#978153: usability improvements - bsc#980276: button icons on fresh Leap 42.1 / Gnome installation The following administative changes are included: - replace outdated inttools@ mail adress by featureadmin@ (bug via email) - make comments always editable by original author - fix fate process help view The following tracked packaging bug fixes are included: - require oxygen-icon-theme instead of oxygen5-icon-theme (boo#1015881) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-211=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-211=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): fate-1.5.5.7.1-18.1 fate-debuginfo-1.5.5.7.1-18.1 - openSUSE Leap 42.1 (i586 x86_64): fate-1.5.5.7.1-18.1 fate-debuginfo-1.5.5.7.1-18.1 References: https://bugzilla.suse.com/1004536 https://bugzilla.suse.com/1006192 https://bugzilla.suse.com/1015881 https://bugzilla.suse.com/401198 https://bugzilla.suse.com/837526 https://bugzilla.suse.com/934673 https://bugzilla.suse.com/940928 https://bugzilla.suse.com/956270 https://bugzilla.suse.com/957827 https://bugzilla.suse.com/964882 https://bugzilla.suse.com/967367 https://bugzilla.suse.com/978153 https://bugzilla.suse.com/980276

1 0

openSUSE-SU-2017:0386-1: important: Security update for gnutls
by opensuse-security＠opensuse.org 04 Feb '17

04 Feb '17

openSUSE Security Update: Security update for gnutls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0386-1 Rating: important References: #1005879 #1018832 #999646 Cross-References: CVE-2016-7444 CVE-2016-8610 CVE-2017-5335 CVE-2017-5336 CVE-2017-5337 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for gnutls fixes the following security issues: - GnuTLS could have crashed when processing maliciously crafted OpenPGP certificates (GNUTLS-SA-2017-2, bsc#1018832, CVE-2017-5335, CVE-2017-5337, CVE-2017-5336) - GnuTLS could have falsely accepted certificates when using OCSP (GNUTLS-SA-2016-3, bsc#999646, CVE-2016-7444) - GnuTLS could have suffered from 100% CPU load DoS attacks by using SSL alert packets during the handshake (bsc#1005879, CVE-2016-8610) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-207=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-207=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gnutls-3.2.15-9.1 gnutls-debuginfo-3.2.15-9.1 gnutls-debugsource-3.2.15-9.1 libgnutls-devel-3.2.15-9.1 libgnutls-openssl-devel-3.2.15-9.1 libgnutls-openssl27-3.2.15-9.1 libgnutls-openssl27-debuginfo-3.2.15-9.1 libgnutls28-3.2.15-9.1 libgnutls28-debuginfo-3.2.15-9.1 libgnutlsxx-devel-3.2.15-9.1 libgnutlsxx28-3.2.15-9.1 libgnutlsxx28-debuginfo-3.2.15-9.1 - openSUSE Leap 42.2 (x86_64): libgnutls-devel-32bit-3.2.15-9.1 libgnutls28-32bit-3.2.15-9.1 libgnutls28-debuginfo-32bit-3.2.15-9.1 - openSUSE Leap 42.1 (i586 x86_64): gnutls-3.2.15-8.1 gnutls-debuginfo-3.2.15-8.1 gnutls-debugsource-3.2.15-8.1 libgnutls-devel-3.2.15-8.1 libgnutls-openssl-devel-3.2.15-8.1 libgnutls-openssl27-3.2.15-8.1 libgnutls-openssl27-debuginfo-3.2.15-8.1 libgnutls28-3.2.15-8.1 libgnutls28-debuginfo-3.2.15-8.1 libgnutlsxx-devel-3.2.15-8.1 libgnutlsxx28-3.2.15-8.1 libgnutlsxx28-debuginfo-3.2.15-8.1 - openSUSE Leap 42.1 (x86_64): libgnutls-devel-32bit-3.2.15-8.1 libgnutls28-32bit-3.2.15-8.1 libgnutls28-debuginfo-32bit-3.2.15-8.1 References: https://www.suse.com/security/cve/CVE-2016-7444.html https://www.suse.com/security/cve/CVE-2016-8610.html https://www.suse.com/security/cve/CVE-2017-5335.html https://www.suse.com/security/cve/CVE-2017-5336.html https://www.suse.com/security/cve/CVE-2017-5337.html https://bugzilla.suse.com/1005879 https://bugzilla.suse.com/1018832 https://bugzilla.suse.com/999646

1 0

openSUSE-OU-2017:0385-1: Initial release of python3-kiwi and python3-future
by maintenance＠opensuse.org 04 Feb '17

04 Feb '17

openSUSE Optional Update: Initial release of python3-kiwi and python3-future ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0385-1 Rating: low References: #1011342 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update adds python3-kiwi and python3-future to openSUSE Leap 42.2. python3-kiwi is the next generation of the SUSE appliance builder. python3-future provides easy, safe support for Python 2/3 compatibility. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-205=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): kiwi-boot-requires-8.28.3-2.1 kiwi-pxeboot-8.28.3-2.1 kiwi-tools-8.28.3-2.1 kiwi-tools-debuginfo-8.28.3-2.1 python3-kiwi-8.28.3-2.1 python3-kiwi-debugsource-8.28.3-2.1 - openSUSE Leap 42.2 (noarch): python3-future-0.16.0-2.1 References: https://bugzilla.suse.com/1011342

1 0

openSUSE-RU-2017:0384-1: moderate: Recommended update for tolua++
by maintenance＠opensuse.org 04 Feb '17

04 Feb '17

openSUSE Recommended Update: Recommended update for tolua++ ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0384-1 Rating: moderate References: #1018120 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tolua++ fixes the following issues: - tolua++ would add version/date information to generated code, causing dependent packages to be constantly re-published (bsc#1018120). Remove version and timestamp from generated files. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-202=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-202=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): tolua++-1.0.93-18.1 tolua++-debuginfo-1.0.93-18.1 tolua++-debugsource-1.0.93-18.1 - openSUSE Leap 42.1 (i586 x86_64): tolua++-1.0.93-17.1 tolua++-debuginfo-1.0.93-17.1 tolua++-debugsource-1.0.93-17.1 References: https://bugzilla.suse.com/1018120

1 0