March 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:0825-1: moderate: Recommended update for VirtualBox
by maintenance＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Recommended Update: Recommended update for VirtualBox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0825-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for VirtualBox provides version 5.0.36 and fixes the following issues: - Linux Additions: Fix for the shared folders kernel module to compile on Linux 4.10. - Linux Additions: Fix the graphics driver build with Linux 4.10 and later. - Linux hosts: Fixed autostart service script. - Linux hosts / guests: Linux 4.11 compile fixes. - NAT network: Fixed two potential crashes in the DHCP server. - Shared Folders: Fixed access to long paths. - Shared Folders: Fixed case insensitive filename access. - Storage: LsiLogic fix for Windows 10. - USB: Fixed not being able to attach certain USB devices having invalid characters in the device strings. - VBoxBugReport: Fixed VM log collection issue. - VMM: Don't access the MSR_IA32_SMM_MONITOR_CTL MSR if dual-monitor treatment is not available. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-391=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): virtualbox-guest-desktop-icons-5.0.36-37.1 virtualbox-host-source-5.0.36-37.1 - openSUSE Leap 42.1 (x86_64): python-virtualbox-5.0.36-37.1 python-virtualbox-debuginfo-5.0.36-37.1 virtualbox-5.0.36-37.1 virtualbox-debuginfo-5.0.36-37.1 virtualbox-debugsource-5.0.36-37.1 virtualbox-devel-5.0.36-37.1 virtualbox-guest-kmp-default-5.0.36_k4.1.38_50-37.1 virtualbox-guest-kmp-default-debuginfo-5.0.36_k4.1.38_50-37.1 virtualbox-guest-tools-5.0.36-37.1 virtualbox-guest-tools-debuginfo-5.0.36-37.1 virtualbox-guest-x11-5.0.36-37.1 virtualbox-guest-x11-debuginfo-5.0.36-37.1 virtualbox-host-kmp-default-5.0.36_k4.1.38_50-37.1 virtualbox-host-kmp-default-debuginfo-5.0.36_k4.1.38_50-37.1 virtualbox-qt-5.0.36-37.1 virtualbox-qt-debuginfo-5.0.36-37.1 virtualbox-websrv-5.0.36-37.1 virtualbox-websrv-debuginfo-5.0.36-37.1 References:

1 0

openSUSE-RU-2017:0824-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0824-1 Rating: moderate References: #1004094 #1006687 #1019470 #1022014 #1022047 #1025598 #995936 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for systemd provides the following fixes: - core: Fix memory leak in transient units. (bsc#1025598) - core: Destroy all name watching bus slots when we are kicked off the bus. (bsc#1006687) - sd-event: Fix incorrect assertion. (bsc#995936, bsc#1022014) - journald: Don't flush to /var/log/journal before we get asked to. (bsc#1004094) - core: Downgrade warning about duplicate device names. (bsc#1022047) - units: Remove no longer needed ldconfig service. (bsc#1019470) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-379=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libsystemd0-228-25.1 libsystemd0-debuginfo-228-25.1 libsystemd0-mini-228-25.1 libsystemd0-mini-debuginfo-228-25.1 libudev-devel-228-25.1 libudev-mini-devel-228-25.1 libudev-mini1-228-25.1 libudev-mini1-debuginfo-228-25.1 libudev1-228-25.1 libudev1-debuginfo-228-25.1 nss-myhostname-228-25.1 nss-myhostname-debuginfo-228-25.1 nss-mymachines-228-25.1 nss-mymachines-debuginfo-228-25.1 systemd-228-25.1 systemd-debuginfo-228-25.1 systemd-debugsource-228-25.1 systemd-devel-228-25.1 systemd-logger-228-25.1 systemd-mini-228-25.1 systemd-mini-debuginfo-228-25.1 systemd-mini-debugsource-228-25.1 systemd-mini-devel-228-25.1 systemd-mini-sysvinit-228-25.1 systemd-sysvinit-228-25.1 udev-228-25.1 udev-debuginfo-228-25.1 udev-mini-228-25.1 udev-mini-debuginfo-228-25.1 - openSUSE Leap 42.2 (x86_64): libsystemd0-32bit-228-25.1 libsystemd0-debuginfo-32bit-228-25.1 libudev1-32bit-228-25.1 libudev1-debuginfo-32bit-228-25.1 nss-myhostname-32bit-228-25.1 nss-myhostname-debuginfo-32bit-228-25.1 systemd-32bit-228-25.1 systemd-debuginfo-32bit-228-25.1 - openSUSE Leap 42.2 (noarch): systemd-bash-completion-228-25.1 systemd-mini-bash-completion-228-25.1 References: https://bugzilla.suse.com/1004094 https://bugzilla.suse.com/1006687 https://bugzilla.suse.com/1019470 https://bugzilla.suse.com/1022014 https://bugzilla.suse.com/1022047 https://bugzilla.suse.com/1025598 https://bugzilla.suse.com/995936

1 0

openSUSE-RU-2017:0823-1: Recommended update for NetworkManager-gnome
by maintenance＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Recommended Update: Recommended update for NetworkManager-gnome ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0823-1 Rating: low References: #1003069 #1009019 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for NetworkManager-gnome fixes the following issues: - NetworkManager stored passwords prevent wifi functionality (bsc#1003069) - Add support for plain MSCHAPV2 as inner authentication method when using TTLS as outer authentication method (bsc#1009019) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-378=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): NetworkManager-appindicator-1.0.10-13.1 NetworkManager-appindicator-debuginfo-1.0.10-13.1 NetworkManager-appindicator-debugsource-1.0.10-13.1 NetworkManager-connection-editor-1.0.10-13.1 NetworkManager-connection-editor-debuginfo-1.0.10-13.1 NetworkManager-gnome-1.0.10-13.1 NetworkManager-gnome-debuginfo-1.0.10-13.1 NetworkManager-gnome-debugsource-1.0.10-13.1 libnm-gtk-devel-1.0.10-13.1 libnm-gtk0-1.0.10-13.1 libnm-gtk0-debuginfo-1.0.10-13.1 typelib-1_0-NMGtk-1_0-1.0.10-13.1 - openSUSE Leap 42.2 (noarch): NetworkManager-gnome-lang-1.0.10-13.1 References: https://bugzilla.suse.com/1003069 https://bugzilla.suse.com/1009019

1 0

openSUSE-RU-2017:0822-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0822-1 Rating: moderate References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for VirtualBox provides version 5.1.18 and fixes the following issues: - API: Fixed snapshot handling of medium attachments and PCI device attachments. - API: Make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used. CPUID/HTT bit set. - GUI: Better error handling on the global settings / network / host-only / DHCP server settings. - GUI: Fixes for full-screen with multiple screens. - GUI: Hide the mini-toolbar from the taskbar and the pager on certain X11 hosts. - ICH9: Fixed incorrect initialization of the primary bus for PCI bridges. - Linux Additions: Added vboxsf FS modules alias. - Linux Additions: Fix for the shared folders kernel module to compile on Linux 4.10. - Linux Additions: Properly install the Linux kernel module override rule on distributions without /etc/depmod.d. - Linux hosts: Added an action for opening the VM manager window to the .desktop file. - Linux hosts: Fixed autostart service script. - Linux hosts / guests: Linux 4.11 compile fixes. - Linux Installers: Do not rebuild kernel modules unnecessarily. - NAT network: Fixed two potential crashes in the DHCP server. - OVF: Fixes for exporting and importing appliances with many disks. - OVF: When importing an appliance handle more than 10 network adapters if the OVA was created by VirtualBox. - Shared Folders: Fixed access to long pathes. (Windows guests only) - Shared Folders: Fixed case insensitive filename access. (Windows guests only) - USB: Fixed not being able to attach certain USB devices having invalid characters in the device strings. - USB: Several fixes for the USB/IP support. - VBoxBugReport: Fixed VM log collection issue. - VBoxManage: Fixed regression with modifyhd --resize. - VBoxSVC: Fixed another crash during shutdown under rare circumstances. - VMM: Another fix for handling certain MSRs on ancient CPUs without VT-x support for MSR bitmaps. - VMM: Don't access the MSR_IA32_SMM_MONITOR_CTL MSR if dual-monitor treatment is not available. - VMM: Fixed a bug in call gate emulation. - VMM: Fixed a sporadic guest hang under certain conditions. - VMM: Fixed VERR_SSM_LOAD_CPUID_MISMATCH errors when restoring a saved state with SMP guests on hosts without the - VMM: FWAIT instruction fix. - Windows Additions: Fixed a crash with recent Windows 10 builds if 3D is disabled. - Windows Additions: Fixed automatic logins for Windows Vista and newer. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-386=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): python-virtualbox-5.1.18-19.1 python-virtualbox-debuginfo-5.1.18-19.1 virtualbox-5.1.18-19.1 virtualbox-debuginfo-5.1.18-19.1 virtualbox-debugsource-5.1.18-19.1 virtualbox-devel-5.1.18-19.1 virtualbox-guest-kmp-default-5.1.18_k4.4.49_16-19.1 virtualbox-guest-kmp-default-debuginfo-5.1.18_k4.4.49_16-19.1 virtualbox-guest-tools-5.1.18-19.1 virtualbox-guest-tools-debuginfo-5.1.18-19.1 virtualbox-guest-x11-5.1.18-19.1 virtualbox-guest-x11-debuginfo-5.1.18-19.1 virtualbox-host-kmp-default-5.1.18_k4.4.49_16-19.1 virtualbox-host-kmp-default-debuginfo-5.1.18_k4.4.49_16-19.1 virtualbox-qt-5.1.18-19.1 virtualbox-qt-debuginfo-5.1.18-19.1 virtualbox-websrv-5.1.18-19.1 virtualbox-websrv-debuginfo-5.1.18-19.1 - openSUSE Leap 42.2 (noarch): virtualbox-guest-desktop-icons-5.1.18-19.1 virtualbox-host-source-5.1.18-19.1 References:

1 0

openSUSE-SU-2017:0821-1: moderate: Security update for qbittorrent
by opensuse-security＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Security Update: Security update for qbittorrent ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0821-1 Rating: moderate References: #1028072 #1028073 Cross-References: CVE-2017-6503 CVE-2017-6504 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update to qbittorrent 3.3.11 fixes the security issues and bugs. The following vulnerabilities were fixed: - CVE-2017-6504: WebUI did not set the X-Frame-Options header (bsc#1028073) - CVE-2017-6503: WebUI did not escape many values, allowing for XSS (bsc#1028072) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-381=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-381=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): qbittorrent-3.3.11-2.3.1 qbittorrent-debuginfo-3.3.11-2.3.1 qbittorrent-debugsource-3.3.11-2.3.1 qbittorrent-nox-3.3.11-2.3.1 qbittorrent-nox-debuginfo-3.3.11-2.3.1 - openSUSE Leap 42.1 (i586 x86_64): qbittorrent-3.3.11-6.1 qbittorrent-debuginfo-3.3.11-6.1 qbittorrent-debugsource-3.3.11-6.1 qbittorrent-nox-3.3.11-6.1 qbittorrent-nox-debuginfo-3.3.11-6.1 References: https://www.suse.com/security/cve/CVE-2017-6503.html https://www.suse.com/security/cve/CVE-2017-6504.html https://bugzilla.suse.com/1028072 https://bugzilla.suse.com/1028073

1 0

openSUSE-SU-2017:0820-1: Security update for partclone
by opensuse-security＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Security Update: Security update for partclone ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0820-1 Rating: low References: #1028904 Cross-References: CVE-2017-6596 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for partclone fixes the following minor security issue: - CVE-2017-6596: A malicious user could have exploited a heap-based buffer overflow vulnerability by supplying a specially crafted image to cause a denial of service (boo#1028904) The following non-security changes are included: - Support for fuse Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-389=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-389=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): partclone-0.3.5a-2.3.1 partclone-debuginfo-0.3.5a-2.3.1 partclone-debugsource-0.3.5a-2.3.1 - openSUSE Leap 42.2 (noarch): partclone-lang-0.3.5a-2.3.1 - openSUSE Leap 42.1 (i586 x86_64): partclone-0.3.5a-7.1 partclone-debuginfo-0.3.5a-7.1 partclone-debugsource-0.3.5a-7.1 - openSUSE Leap 42.1 (noarch): partclone-lang-0.3.5a-7.1 References: https://www.suse.com/security/cve/CVE-2017-6596.html https://bugzilla.suse.com/1028904

1 0

openSUSE-SU-2017:0819-1: Security update for tcpreplay
by opensuse-security＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Security Update: Security update for tcpreplay ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0819-1 Rating: low References: #1028234 Cross-References: CVE-2017-6429 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tcpreplay fixes the following issues: - CVE-2017-6429: Buffer overflow in Tcpcapinfo utility triggered by a too large packet (boo#1028234) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-390=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): tcpreplay-4.1.2-5.3.1 tcpreplay-debuginfo-4.1.2-5.3.1 tcpreplay-debugsource-4.1.2-5.3.1 References: https://www.suse.com/security/cve/CVE-2017-6429.html https://bugzilla.suse.com/1028234

1 0

openSUSE-RU-2017:0818-1: moderate: Recommended update for sblim-sfcb
by maintenance＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Recommended Update: Recommended update for sblim-sfcb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0818-1 Rating: moderate References: #1018324 #1023820 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for sblim-sfcb provides the following fixes: - Revert mistaken change that disabled basic authentication on default install. (bsc#1023820) - Reference correct service name for service restarts on upgrades. (bsc#1018324) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-387=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-387=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): sblim-sfcb-1.4.8-6.3.1 sblim-sfcb-debuginfo-1.4.8-6.3.1 sblim-sfcb-debugsource-1.4.8-6.3.1 - openSUSE Leap 42.1 (i586 x86_64): sblim-sfcb-1.4.8-6.1 sblim-sfcb-debuginfo-1.4.8-6.1 sblim-sfcb-debugsource-1.4.8-6.1 References: https://bugzilla.suse.com/1018324 https://bugzilla.suse.com/1023820

1 0

openSUSE-RU-2017:0816-1: moderate: Recommended update for gnuhealth, tryton, trytond
by maintenance＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Recommended Update: Recommended update for gnuhealth, tryton, trytond ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0816-1 Rating: moderate References: #479383 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnuhealth, tryton, trytond fixes the following issues: boo#1026365: pediatrics growth charts do not work gnuhealth was updated to 3.0.7. trytond was updated to 3.8.10. tryton was updated to 3.8.14. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-383=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): gnuhealth-3.0.7-11.3.1 tryton-3.8.14-10.3.1 trytond-3.8.10-9.3.1 References: https://bugzilla.suse.com/479383

1 0

openSUSE-SU-2017:0815-1: moderate: Security update for mxml
by opensuse-security＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Security Update: Security update for mxml ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0815-1 Rating: moderate References: #979205 #979206 Cross-References: CVE-2016-4570 CVE-2016-4571 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for mxml fixes the following issues: - CVE-2016-4570: Specially crafted XML files could have caused stack exhaustation (bsc#979205) - CVE-2016-4571: Specially crafted XML files could have caused stack exhaustation (bsc#979206) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-380=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-380=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libmxml1-2.9-5.3.1 libmxml1-debuginfo-2.9-5.3.1 mxml-2.9-5.3.1 mxml-debuginfo-2.9-5.3.1 mxml-debugsource-2.9-5.3.1 mxml-devel-2.9-5.3.1 - openSUSE Leap 42.2 (x86_64): libmxml1-32bit-2.9-5.3.1 libmxml1-debuginfo-32bit-2.9-5.3.1 - openSUSE Leap 42.1 (i586 x86_64): libmxml1-2.9-5.1 libmxml1-debuginfo-2.9-5.1 mxml-2.9-5.1 mxml-debuginfo-2.9-5.1 mxml-debugsource-2.9-5.1 mxml-devel-2.9-5.1 - openSUSE Leap 42.1 (x86_64): libmxml1-32bit-2.9-5.1 libmxml1-debuginfo-32bit-2.9-5.1 References: https://www.suse.com/security/cve/CVE-2016-4570.html https://www.suse.com/security/cve/CVE-2016-4571.html https://bugzilla.suse.com/979205 https://bugzilla.suse.com/979206

1 0