March 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2017:0903-1: moderate: Security update for apache2
by opensuse-security＠opensuse.org 31 Mar '17

31 Mar '17

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0903-1 Rating: moderate References: #1016712 #1016714 #1016715 #980663 Cross-References: CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for apache2 provides the following fixes: Security issues fixed: - CVE-2016-0736: Protect mod_session_crypto data with a MAC to prevent padding oracle attacks (bsc#1016712). - CVE-2016-2161: Malicious input to mod_auth_digest could have caused the server to crash, resulting in DoS (bsc#1016714). - CVE-2016-8743: Added new directive "HttpProtocolOptions Strict" to avoid proxy chain misinterpretation (bsc#1016715). Bugfixes: - Add NotifyAccess=all to systemd service files to prevent warnings in the log when using mod_systemd (bsc#980663). This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-417=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): apache2-2.4.16-18.1 apache2-debuginfo-2.4.16-18.1 apache2-debugsource-2.4.16-18.1 apache2-devel-2.4.16-18.1 apache2-event-2.4.16-18.1 apache2-event-debuginfo-2.4.16-18.1 apache2-example-pages-2.4.16-18.1 apache2-prefork-2.4.16-18.1 apache2-prefork-debuginfo-2.4.16-18.1 apache2-utils-2.4.16-18.1 apache2-utils-debuginfo-2.4.16-18.1 apache2-worker-2.4.16-18.1 apache2-worker-debuginfo-2.4.16-18.1 - openSUSE Leap 42.1 (noarch): apache2-doc-2.4.16-18.1 References: https://www.suse.com/security/cve/CVE-2016-0736.html https://www.suse.com/security/cve/CVE-2016-2161.html https://www.suse.com/security/cve/CVE-2016-8743.html https://bugzilla.suse.com/1016712 https://bugzilla.suse.com/1016714 https://bugzilla.suse.com/1016715 https://bugzilla.suse.com/980663

1 0

openSUSE-SU-2017:0902-1: moderate: Security update for virglrenderer
by opensuse-security＠opensuse.org 31 Mar '17

31 Mar '17

openSUSE Security Update: Security update for virglrenderer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0902-1 Rating: moderate References: #1021616 #1021627 #1024232 #1024244 #1024992 #1024993 #1025505 #1025507 #1026723 #1026725 #1026922 #1027108 #1027376 Cross-References: CVE-2016-10163 CVE-2016-10214 CVE-2017-5580 CVE-2017-5937 CVE-2017-5956 CVE-2017-5957 CVE-2017-5993 CVE-2017-5994 CVE-2017-6209 CVE-2017-6210 CVE-2017-6317 CVE-2017-6355 CVE-2017-6386 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update for virglrenderer fixes the following issues: Security issues fixed: - CVE-2017-6386: memory leakage while in vrend_create_vertex_elements_state (bsc#1027376) - CVE-2017-6355: integer overflow while creating shader object (bsc#1027108) - CVE-2017-6317: fix memory leak in add shader program (bsc#1026922) - CVE-2017-6210: null pointer dereference in vrend_decode_reset (bsc#1026725) - CVE-2017-6209: stack buffer oveflow in parse_identifier (bsc#1026723) - CVE-2017-5994: out-of-bounds access in vrend_create_vertex_elements_state (bsc#1025507) - CVE-2017-5993: host memory leakage when initialising blitter context (bsc#1025505) - CVE-2017-5957: stack overflow in vrend_decode_set_framebuffer_state (bsc#1024993) - CVE-2017-5956: OOB access while in vrend_draw_vbo (bsc#1024992) - CVE-2017-5937: null pointer dereference in vrend_clear (bsc#1024232) - CVE-2017-5580: OOB access while parsing texture instruction (bsc#1021627) - CVE-2016-10214: host memory leak issue in virgl_resource_attach_backing (bsc#1024244) - CVE-2016-10163: host memory leakage when creating decode context (bsc#1021616) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-415=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libvirglrenderer0-0.5.0-3.3.1 libvirglrenderer0-debuginfo-0.5.0-3.3.1 virglrenderer-debugsource-0.5.0-3.3.1 virglrenderer-devel-0.5.0-3.3.1 virglrenderer-test-server-0.5.0-3.3.1 virglrenderer-test-server-debuginfo-0.5.0-3.3.1 References: https://www.suse.com/security/cve/CVE-2016-10163.html https://www.suse.com/security/cve/CVE-2016-10214.html https://www.suse.com/security/cve/CVE-2017-5580.html https://www.suse.com/security/cve/CVE-2017-5937.html https://www.suse.com/security/cve/CVE-2017-5956.html https://www.suse.com/security/cve/CVE-2017-5957.html https://www.suse.com/security/cve/CVE-2017-5993.html https://www.suse.com/security/cve/CVE-2017-5994.html https://www.suse.com/security/cve/CVE-2017-6209.html https://www.suse.com/security/cve/CVE-2017-6210.html https://www.suse.com/security/cve/CVE-2017-6317.html https://www.suse.com/security/cve/CVE-2017-6355.html https://www.suse.com/security/cve/CVE-2017-6386.html https://bugzilla.suse.com/1021616 https://bugzilla.suse.com/1021627 https://bugzilla.suse.com/1024232 https://bugzilla.suse.com/1024244 https://bugzilla.suse.com/1024992 https://bugzilla.suse.com/1024993 https://bugzilla.suse.com/1025505 https://bugzilla.suse.com/1025507 https://bugzilla.suse.com/1026723 https://bugzilla.suse.com/1026725 https://bugzilla.suse.com/1026922 https://bugzilla.suse.com/1027108 https://bugzilla.suse.com/1027376

1 0

openSUSE-RU-2017:0900-1: moderate: Recommended update for plasma5-SLE, sddm
by maintenance＠opensuse.org 31 Mar '17

31 Mar '17

openSUSE Recommended Update: Recommended update for plasma5-SLE, sddm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0900-1 Rating: moderate References: #1025387 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for plasma5-SLE, sddm fixes the following issues: - dependency issue with sddm branding (bsc#1025387) The following cosmetic change was included: - Make the sddm theme (breeze-SLE) more similar to the gdm SLE branding Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-414=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): sddm-0.13.0-5.1 sddm-branding-SLE-0.13.0-5.1 sddm-branding-upstream-0.13.0-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): plasma5-SLE-42.1.1-8.1 plasma5-defaults-SLE-42.1.1-8.1 plasma5-theme-SLE-42.1.1-8.1 plasma5-workspace-branding-SLE-42.1.1-8.1 sddm-theme-SLE-42.1.1-8.1 References: https://bugzilla.suse.com/1025387

1 0

openSUSE-SU-2017:0897-1: moderate: Security update for apache2
by opensuse-security＠opensuse.org 31 Mar '17

31 Mar '17

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0897-1 Rating: moderate References: #1016712 #1016714 #1016715 #1019380 Cross-References: CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for apache2 fixes the following security issues: Security issues fixed: - CVE-2016-0736: Protect mod_session_crypto data with a MAC to prevent padding oracle attacks (bsc#1016712). - CVE-2016-2161: Malicious input to mod_auth_digest could have caused the server to crash, resulting in DoS (bsc#1016714). - CVE-2016-8743: Added new directive "HttpProtocolOptions Strict" to avoid proxy chain misinterpretation (bsc#1016715). Bugfixes: - Add missing copy of hcuri and hcexpr from the worker to the health check worker (bsc#1019380). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-416=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-2.4.23-8.3.1 apache2-debuginfo-2.4.23-8.3.1 apache2-debugsource-2.4.23-8.3.1 apache2-devel-2.4.23-8.3.1 apache2-event-2.4.23-8.3.1 apache2-event-debuginfo-2.4.23-8.3.1 apache2-example-pages-2.4.23-8.3.1 apache2-prefork-2.4.23-8.3.1 apache2-prefork-debuginfo-2.4.23-8.3.1 apache2-utils-2.4.23-8.3.1 apache2-utils-debuginfo-2.4.23-8.3.1 apache2-worker-2.4.23-8.3.1 apache2-worker-debuginfo-2.4.23-8.3.1 - openSUSE Leap 42.2 (noarch): apache2-doc-2.4.23-8.3.1 References: https://www.suse.com/security/cve/CVE-2016-0736.html https://www.suse.com/security/cve/CVE-2016-2161.html https://www.suse.com/security/cve/CVE-2016-8743.html https://bugzilla.suse.com/1016712 https://bugzilla.suse.com/1016714 https://bugzilla.suse.com/1016715 https://bugzilla.suse.com/1019380

1 0

openSUSE-SU-2017:0894-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 30 Mar '17

30 Mar '17

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0894-1 Rating: moderate References: #1027255 Cross-References: CVE-2017-6335 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: Security issue fixed: - CVE-2017-6335: Fixed heap out of bounds write issue (boo#1027255). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-411=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): GraphicsMagick-1.3.25-11.3.1 GraphicsMagick-debuginfo-1.3.25-11.3.1 GraphicsMagick-debugsource-1.3.25-11.3.1 GraphicsMagick-devel-1.3.25-11.3.1 libGraphicsMagick++-Q16-12-1.3.25-11.3.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-11.3.1 libGraphicsMagick++-devel-1.3.25-11.3.1 libGraphicsMagick-Q16-3-1.3.25-11.3.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-11.3.1 libGraphicsMagick3-config-1.3.25-11.3.1 libGraphicsMagickWand-Q16-2-1.3.25-11.3.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-11.3.1 perl-GraphicsMagick-1.3.25-11.3.1 perl-GraphicsMagick-debuginfo-1.3.25-11.3.1 References: https://www.suse.com/security/cve/CVE-2017-6335.html https://bugzilla.suse.com/1027255

1 0

openSUSE-SU-2017:0892-1: moderate: Security update for pidgin
by opensuse-security＠opensuse.org 30 Mar '17

30 Mar '17

openSUSE Security Update: Security update for pidgin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0892-1 Rating: moderate References: #1009974 #1028835 Cross-References: CVE-2017-2640 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for pidgin fixes the following issues: Feature update: - Update to GNOME 3.20.2 (fate#318572). Security issues fixed: - CVE-2017-2640: Fix an out of bounds memory read in purple_markup_unescape_entity. (boo#1028835) Bugfixes - Correctly remove *.so files for plugins (fixes devel-file-in-non-devel-package). - Remove generation of a plugin list to package, simply add it all in %files with exclusions. - Fix SASL EXTERNAL fingerprint authentication (boo#1009974). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-410=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): finch-2.10.11-8.3.1 finch-debuginfo-2.10.11-8.3.1 finch-devel-2.10.11-8.3.1 libpurple-2.10.11-8.3.1 libpurple-debuginfo-2.10.11-8.3.1 libpurple-devel-2.10.11-8.3.1 libpurple-meanwhile-2.10.11-8.3.1 libpurple-meanwhile-debuginfo-2.10.11-8.3.1 libpurple-tcl-2.10.11-8.3.1 libpurple-tcl-debuginfo-2.10.11-8.3.1 pidgin-2.10.11-8.3.1 pidgin-debuginfo-2.10.11-8.3.1 pidgin-debugsource-2.10.11-8.3.1 pidgin-devel-2.10.11-8.3.1 - openSUSE Leap 42.2 (noarch): libpurple-branding-upstream-2.10.11-8.3.1 libpurple-lang-2.10.11-8.3.1 References: https://www.suse.com/security/cve/CVE-2017-2640.html https://bugzilla.suse.com/1009974 https://bugzilla.suse.com/1028835

1 0

openSUSE-SU-2017:0891-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 30 Mar '17

30 Mar '17

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0891-1 Rating: moderate References: #1027255 Cross-References: CVE-2017-6335 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: Security issue fixed: - CVE-2017-6335: Fixed heap out of bounds write issue (boo#1027255). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-413=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): GraphicsMagick-1.3.21-29.1 GraphicsMagick-debuginfo-1.3.21-29.1 GraphicsMagick-debugsource-1.3.21-29.1 GraphicsMagick-devel-1.3.21-29.1 libGraphicsMagick++-Q16-11-1.3.21-29.1 libGraphicsMagick++-Q16-11-debuginfo-1.3.21-29.1 libGraphicsMagick++-devel-1.3.21-29.1 libGraphicsMagick-Q16-3-1.3.21-29.1 libGraphicsMagick-Q16-3-debuginfo-1.3.21-29.1 libGraphicsMagick3-config-1.3.21-29.1 libGraphicsMagickWand-Q16-2-1.3.21-29.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.21-29.1 perl-GraphicsMagick-1.3.21-29.1 perl-GraphicsMagick-debuginfo-1.3.21-29.1 References: https://www.suse.com/security/cve/CVE-2017-6335.html https://bugzilla.suse.com/1027255

1 0

openSUSE-SU-2017:0890-1: moderate: Security update for wget
by opensuse-security＠opensuse.org 30 Mar '17

30 Mar '17

openSUSE Security Update: Security update for wget ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0890-1 Rating: moderate References: #1028301 Cross-References: CVE-2017-6508 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for wget fixes the following issues: Security issue fixed: - CVE-2017-6508: (url_parse): Reject control characters in host part of URL (bsc#1028301). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-412=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-412=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): wget-1.14-8.3.1 wget-debuginfo-1.14-8.3.1 wget-debugsource-1.14-8.3.1 - openSUSE Leap 42.1 (i586 x86_64): wget-1.14-11.1 wget-debuginfo-1.14-11.1 wget-debugsource-1.14-11.1 References: https://www.suse.com/security/cve/CVE-2017-6508.html https://bugzilla.suse.com/1028301

1 0

openSUSE-RU-2017:0857-1: Recommended update for aaa_base
by maintenance＠opensuse.org 29 Mar '17

29 Mar '17

openSUSE Recommended Update: Recommended update for aaa_base ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0857-1 Rating: low References: #1022105 #1025673 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for aaa_base fixes the following issues: - Fix issue in lang.csh's /etc/sysconfig/language parser that could result in incorrect locale settings for csh users. (bsc#1025673) - Fix spurious assignment to unknown variable TERM from /etc/inputrc. (bsc#1022105) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-407=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): aaa_base-13.2+git20140911.61c1681-24.3.1 aaa_base-debuginfo-13.2+git20140911.61c1681-24.3.1 aaa_base-debugsource-13.2+git20140911.61c1681-24.3.1 aaa_base-extras-13.2+git20140911.61c1681-24.3.1 aaa_base-malloccheck-13.2+git20140911.61c1681-24.3.1 References: https://bugzilla.suse.com/1022105 https://bugzilla.suse.com/1025673

1 0

openSUSE-RU-2017:0856-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 29 Mar '17

29 Mar '17

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0856-1 Rating: moderate References: #1021803 #1025985 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for xorg-x11-server fixes the following issues: - X server crash on drawing dashed lines (boo#1025985). - Wrong line endings would be drawn (boo#1021803). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-409=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-409=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xorg-x11-server-7.6_1.18.3-12.9.1 xorg-x11-server-debuginfo-7.6_1.18.3-12.9.1 xorg-x11-server-debugsource-7.6_1.18.3-12.9.1 xorg-x11-server-extra-7.6_1.18.3-12.9.1 xorg-x11-server-extra-debuginfo-7.6_1.18.3-12.9.1 xorg-x11-server-sdk-7.6_1.18.3-12.9.1 xorg-x11-server-source-7.6_1.18.3-12.9.1 - openSUSE Leap 42.1 (i586 x86_64): xorg-x11-server-7.6_1.17.2-27.1 xorg-x11-server-debuginfo-7.6_1.17.2-27.1 xorg-x11-server-debugsource-7.6_1.17.2-27.1 xorg-x11-server-extra-7.6_1.17.2-27.1 xorg-x11-server-extra-debuginfo-7.6_1.17.2-27.1 xorg-x11-server-sdk-7.6_1.17.2-27.1 xorg-x11-server-source-7.6_1.17.2-27.1 References: https://bugzilla.suse.com/1021803 https://bugzilla.suse.com/1025985

1 0

openSUSE-RU-2017:0854-1: moderate: Recommended update for git
by maintenance＠opensuse.org 29 Mar '17

29 Mar '17

openSUSE Recommended Update: Recommended update for git ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0854-1 Rating: moderate References: #977477 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The Git distributed revision control system was updated to version 2.12.0, which brings several fixes and enhancements. - Use of an empty string that is used for 'everything matches' is still warned and Git asks users to use a more explicit '.' for that instead. In the future this warning will be turned into a hard error. - The historical argument order "git merge 'msg' HEAD 'commit'..." has been deprecated for quite some time, and will be removed in a future release. - An ancient script "git relink" has been removed. - The character width table has been updated to match Unicode 9.0. - Commands in the "git diff" and "git log" family by default enable rename detection; use "diff.renames" configuration variable to disable this. - Merging two branches that have no common ancestor with "git merge" is by default forbidden now to prevent creating such an unusual merge by mistake. - Output formats of "git log" that indents the commit log message by 4 spaces now expands HT in the log message by default. The "--no-expand-tabs" option disables this. - "git send-email" now uses a more readable timestamps when formulating a message ID. - The rsync:// transport has been removed. - "git fetch" and friends that make network connections can now be told to only use ipv4 (or ipv6). - Add support for talking http/https over socks proxy. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-406=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): git-2.12.0-10.1 git-arch-2.12.0-10.1 git-core-2.12.0-10.1 git-core-debuginfo-2.12.0-10.1 git-credential-gnome-keyring-2.12.0-10.1 git-credential-gnome-keyring-debuginfo-2.12.0-10.1 git-cvs-2.12.0-10.1 git-daemon-2.12.0-10.1 git-daemon-debuginfo-2.12.0-10.1 git-debugsource-2.12.0-10.1 git-email-2.12.0-10.1 git-gui-2.12.0-10.1 git-svn-2.12.0-10.1 git-svn-debuginfo-2.12.0-10.1 git-web-2.12.0-10.1 gitk-2.12.0-10.1 - openSUSE Leap 42.1 (noarch): git-doc-2.12.0-10.1 References: https://bugzilla.suse.com/977477

1 0

openSUSE-RU-2017:0852-1: Recommended update for man
by maintenance＠opensuse.org 29 Mar '17

29 Mar '17

openSUSE Recommended Update: Recommended update for man ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0852-1 Rating: low References: #1025597 #786679 #986211 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for man provides the following fixes: - Stop using the wrapper that squashed root privileges down to uid man. (bsc#986211, bsc#1025597) - Add description of MAN_POSIXLY_CORRECT in man.man1. (bsc#786679) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-408=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-408=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): man-2.6.6-6.3.1 man-debuginfo-2.6.6-6.3.1 man-debugsource-2.6.6-6.3.1 - openSUSE Leap 42.1 (i586 x86_64): man-2.6.6-6.1 man-debuginfo-2.6.6-6.1 man-debugsource-2.6.6-6.1 References: https://bugzilla.suse.com/1025597 https://bugzilla.suse.com/786679 https://bugzilla.suse.com/986211

1 0

openSUSE-RU-2017:0851-1: moderate: Recommended update for git
by maintenance＠opensuse.org 29 Mar '17

29 Mar '17

openSUSE Recommended Update: Recommended update for git ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0851-1 Rating: moderate References: #977477 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The Git distributed revision control system was updated to version 2.12.0, which brings several fixes and enhancements. - Use of an empty string that is used for 'everything matches' is still warned and Git asks users to use a more explicit '.' for that instead. In the future this warning will be turned into a hard error. - The historical argument order "git merge 'msg' HEAD 'commit'..." has been deprecated for quite some time, and will be removed in a future release. - An ancient script "git relink" has been removed. - The character width table has been updated to match Unicode 9.0. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-405=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): git-doc-2.12.0-5.3.1 - openSUSE Leap 42.2 (x86_64): git-2.12.0-5.3.1 git-arch-2.12.0-5.3.1 git-core-2.12.0-5.3.1 git-core-debuginfo-2.12.0-5.3.1 git-credential-gnome-keyring-2.12.0-5.3.1 git-credential-gnome-keyring-debuginfo-2.12.0-5.3.1 git-cvs-2.12.0-5.3.1 git-daemon-2.12.0-5.3.1 git-daemon-debuginfo-2.12.0-5.3.1 git-debugsource-2.12.0-5.3.1 git-email-2.12.0-5.3.1 git-gui-2.12.0-5.3.1 git-svn-2.12.0-5.3.1 git-svn-debuginfo-2.12.0-5.3.1 git-web-2.12.0-5.3.1 gitk-2.12.0-5.3.1 References: https://bugzilla.suse.com/977477

1 0

openSUSE-SU-2017:0850-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 29 Mar '17

29 Mar '17

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0850-1 Rating: moderate References: #1027210 Cross-References: CVE-2015-8994 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php5 fixes the following issues: Security issue fixed: - CVE-2015-8994: code permission/sensitive data protection vulnerability (bsc#1027210). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-403=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-403=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_php5-5.5.14-77.3.1 apache2-mod_php5-debuginfo-5.5.14-77.3.1 php5-5.5.14-77.3.1 php5-bcmath-5.5.14-77.3.1 php5-bcmath-debuginfo-5.5.14-77.3.1 php5-bz2-5.5.14-77.3.1 php5-bz2-debuginfo-5.5.14-77.3.1 php5-calendar-5.5.14-77.3.1 php5-calendar-debuginfo-5.5.14-77.3.1 php5-ctype-5.5.14-77.3.1 php5-ctype-debuginfo-5.5.14-77.3.1 php5-curl-5.5.14-77.3.1 php5-curl-debuginfo-5.5.14-77.3.1 php5-dba-5.5.14-77.3.1 php5-dba-debuginfo-5.5.14-77.3.1 php5-debuginfo-5.5.14-77.3.1 php5-debugsource-5.5.14-77.3.1 php5-devel-5.5.14-77.3.1 php5-dom-5.5.14-77.3.1 php5-dom-debuginfo-5.5.14-77.3.1 php5-enchant-5.5.14-77.3.1 php5-enchant-debuginfo-5.5.14-77.3.1 php5-exif-5.5.14-77.3.1 php5-exif-debuginfo-5.5.14-77.3.1 php5-fastcgi-5.5.14-77.3.1 php5-fastcgi-debuginfo-5.5.14-77.3.1 php5-fileinfo-5.5.14-77.3.1 php5-fileinfo-debuginfo-5.5.14-77.3.1 php5-firebird-5.5.14-77.3.1 php5-firebird-debuginfo-5.5.14-77.3.1 php5-fpm-5.5.14-77.3.1 php5-fpm-debuginfo-5.5.14-77.3.1 php5-ftp-5.5.14-77.3.1 php5-ftp-debuginfo-5.5.14-77.3.1 php5-gd-5.5.14-77.3.1 php5-gd-debuginfo-5.5.14-77.3.1 php5-gettext-5.5.14-77.3.1 php5-gettext-debuginfo-5.5.14-77.3.1 php5-gmp-5.5.14-77.3.1 php5-gmp-debuginfo-5.5.14-77.3.1 php5-iconv-5.5.14-77.3.1 php5-iconv-debuginfo-5.5.14-77.3.1 php5-imap-5.5.14-77.3.1 php5-imap-debuginfo-5.5.14-77.3.1 php5-intl-5.5.14-77.3.1 php5-intl-debuginfo-5.5.14-77.3.1 php5-json-5.5.14-77.3.1 php5-json-debuginfo-5.5.14-77.3.1 php5-ldap-5.5.14-77.3.1 php5-ldap-debuginfo-5.5.14-77.3.1 php5-mbstring-5.5.14-77.3.1 php5-mbstring-debuginfo-5.5.14-77.3.1 php5-mcrypt-5.5.14-77.3.1 php5-mcrypt-debuginfo-5.5.14-77.3.1 php5-mssql-5.5.14-77.3.1 php5-mssql-debuginfo-5.5.14-77.3.1 php5-mysql-5.5.14-77.3.1 php5-mysql-debuginfo-5.5.14-77.3.1 php5-odbc-5.5.14-77.3.1 php5-odbc-debuginfo-5.5.14-77.3.1 php5-opcache-5.5.14-77.3.1 php5-opcache-debuginfo-5.5.14-77.3.1 php5-openssl-5.5.14-77.3.1 php5-openssl-debuginfo-5.5.14-77.3.1 php5-pcntl-5.5.14-77.3.1 php5-pcntl-debuginfo-5.5.14-77.3.1 php5-pdo-5.5.14-77.3.1 php5-pdo-debuginfo-5.5.14-77.3.1 php5-pgsql-5.5.14-77.3.1 php5-pgsql-debuginfo-5.5.14-77.3.1 php5-phar-5.5.14-77.3.1 php5-phar-debuginfo-5.5.14-77.3.1 php5-posix-5.5.14-77.3.1 php5-posix-debuginfo-5.5.14-77.3.1 php5-pspell-5.5.14-77.3.1 php5-pspell-debuginfo-5.5.14-77.3.1 php5-readline-5.5.14-77.3.1 php5-readline-debuginfo-5.5.14-77.3.1 php5-shmop-5.5.14-77.3.1 php5-shmop-debuginfo-5.5.14-77.3.1 php5-snmp-5.5.14-77.3.1 php5-snmp-debuginfo-5.5.14-77.3.1 php5-soap-5.5.14-77.3.1 php5-soap-debuginfo-5.5.14-77.3.1 php5-sockets-5.5.14-77.3.1 php5-sockets-debuginfo-5.5.14-77.3.1 php5-sqlite-5.5.14-77.3.1 php5-sqlite-debuginfo-5.5.14-77.3.1 php5-suhosin-5.5.14-77.3.1 php5-suhosin-debuginfo-5.5.14-77.3.1 php5-sysvmsg-5.5.14-77.3.1 php5-sysvmsg-debuginfo-5.5.14-77.3.1 php5-sysvsem-5.5.14-77.3.1 php5-sysvsem-debuginfo-5.5.14-77.3.1 php5-sysvshm-5.5.14-77.3.1 php5-sysvshm-debuginfo-5.5.14-77.3.1 php5-tidy-5.5.14-77.3.1 php5-tidy-debuginfo-5.5.14-77.3.1 php5-tokenizer-5.5.14-77.3.1 php5-tokenizer-debuginfo-5.5.14-77.3.1 php5-wddx-5.5.14-77.3.1 php5-wddx-debuginfo-5.5.14-77.3.1 php5-xmlreader-5.5.14-77.3.1 php5-xmlreader-debuginfo-5.5.14-77.3.1 php5-xmlrpc-5.5.14-77.3.1 php5-xmlrpc-debuginfo-5.5.14-77.3.1 php5-xmlwriter-5.5.14-77.3.1 php5-xmlwriter-debuginfo-5.5.14-77.3.1 php5-xsl-5.5.14-77.3.1 php5-xsl-debuginfo-5.5.14-77.3.1 php5-zip-5.5.14-77.3.1 php5-zip-debuginfo-5.5.14-77.3.1 php5-zlib-5.5.14-77.3.1 php5-zlib-debuginfo-5.5.14-77.3.1 - openSUSE Leap 42.2 (noarch): php5-pear-5.5.14-77.3.1 - openSUSE Leap 42.1 (i586 x86_64): apache2-mod_php5-5.5.14-78.1 apache2-mod_php5-debuginfo-5.5.14-78.1 php5-5.5.14-78.1 php5-bcmath-5.5.14-78.1 php5-bcmath-debuginfo-5.5.14-78.1 php5-bz2-5.5.14-78.1 php5-bz2-debuginfo-5.5.14-78.1 php5-calendar-5.5.14-78.1 php5-calendar-debuginfo-5.5.14-78.1 php5-ctype-5.5.14-78.1 php5-ctype-debuginfo-5.5.14-78.1 php5-curl-5.5.14-78.1 php5-curl-debuginfo-5.5.14-78.1 php5-dba-5.5.14-78.1 php5-dba-debuginfo-5.5.14-78.1 php5-debuginfo-5.5.14-78.1 php5-debugsource-5.5.14-78.1 php5-devel-5.5.14-78.1 php5-dom-5.5.14-78.1 php5-dom-debuginfo-5.5.14-78.1 php5-enchant-5.5.14-78.1 php5-enchant-debuginfo-5.5.14-78.1 php5-exif-5.5.14-78.1 php5-exif-debuginfo-5.5.14-78.1 php5-fastcgi-5.5.14-78.1 php5-fastcgi-debuginfo-5.5.14-78.1 php5-fileinfo-5.5.14-78.1 php5-fileinfo-debuginfo-5.5.14-78.1 php5-firebird-5.5.14-78.1 php5-firebird-debuginfo-5.5.14-78.1 php5-fpm-5.5.14-78.1 php5-fpm-debuginfo-5.5.14-78.1 php5-ftp-5.5.14-78.1 php5-ftp-debuginfo-5.5.14-78.1 php5-gd-5.5.14-78.1 php5-gd-debuginfo-5.5.14-78.1 php5-gettext-5.5.14-78.1 php5-gettext-debuginfo-5.5.14-78.1 php5-gmp-5.5.14-78.1 php5-gmp-debuginfo-5.5.14-78.1 php5-iconv-5.5.14-78.1 php5-iconv-debuginfo-5.5.14-78.1 php5-imap-5.5.14-78.1 php5-imap-debuginfo-5.5.14-78.1 php5-intl-5.5.14-78.1 php5-intl-debuginfo-5.5.14-78.1 php5-json-5.5.14-78.1 php5-json-debuginfo-5.5.14-78.1 php5-ldap-5.5.14-78.1 php5-ldap-debuginfo-5.5.14-78.1 php5-mbstring-5.5.14-78.1 php5-mbstring-debuginfo-5.5.14-78.1 php5-mcrypt-5.5.14-78.1 php5-mcrypt-debuginfo-5.5.14-78.1 php5-mssql-5.5.14-78.1 php5-mssql-debuginfo-5.5.14-78.1 php5-mysql-5.5.14-78.1 php5-mysql-debuginfo-5.5.14-78.1 php5-odbc-5.5.14-78.1 php5-odbc-debuginfo-5.5.14-78.1 php5-opcache-5.5.14-78.1 php5-opcache-debuginfo-5.5.14-78.1 php5-openssl-5.5.14-78.1 php5-openssl-debuginfo-5.5.14-78.1 php5-pcntl-5.5.14-78.1 php5-pcntl-debuginfo-5.5.14-78.1 php5-pdo-5.5.14-78.1 php5-pdo-debuginfo-5.5.14-78.1 php5-pgsql-5.5.14-78.1 php5-pgsql-debuginfo-5.5.14-78.1 php5-phar-5.5.14-78.1 php5-phar-debuginfo-5.5.14-78.1 php5-posix-5.5.14-78.1 php5-posix-debuginfo-5.5.14-78.1 php5-pspell-5.5.14-78.1 php5-pspell-debuginfo-5.5.14-78.1 php5-readline-5.5.14-78.1 php5-readline-debuginfo-5.5.14-78.1 php5-shmop-5.5.14-78.1 php5-shmop-debuginfo-5.5.14-78.1 php5-snmp-5.5.14-78.1 php5-snmp-debuginfo-5.5.14-78.1 php5-soap-5.5.14-78.1 php5-soap-debuginfo-5.5.14-78.1 php5-sockets-5.5.14-78.1 php5-sockets-debuginfo-5.5.14-78.1 php5-sqlite-5.5.14-78.1 php5-sqlite-debuginfo-5.5.14-78.1 php5-suhosin-5.5.14-78.1 php5-suhosin-debuginfo-5.5.14-78.1 php5-sysvmsg-5.5.14-78.1 php5-sysvmsg-debuginfo-5.5.14-78.1 php5-sysvsem-5.5.14-78.1 php5-sysvsem-debuginfo-5.5.14-78.1 php5-sysvshm-5.5.14-78.1 php5-sysvshm-debuginfo-5.5.14-78.1 php5-tidy-5.5.14-78.1 php5-tidy-debuginfo-5.5.14-78.1 php5-tokenizer-5.5.14-78.1 php5-tokenizer-debuginfo-5.5.14-78.1 php5-wddx-5.5.14-78.1 php5-wddx-debuginfo-5.5.14-78.1 php5-xmlreader-5.5.14-78.1 php5-xmlreader-debuginfo-5.5.14-78.1 php5-xmlrpc-5.5.14-78.1 php5-xmlrpc-debuginfo-5.5.14-78.1 php5-xmlwriter-5.5.14-78.1 php5-xmlwriter-debuginfo-5.5.14-78.1 php5-xsl-5.5.14-78.1 php5-xsl-debuginfo-5.5.14-78.1 php5-zip-5.5.14-78.1 php5-zip-debuginfo-5.5.14-78.1 php5-zlib-5.5.14-78.1 php5-zlib-debuginfo-5.5.14-78.1 - openSUSE Leap 42.1 (noarch): php5-pear-5.5.14-78.1 References: https://www.suse.com/security/cve/CVE-2015-8994.html https://bugzilla.suse.com/1027210

1 0

openSUSE-RU-2017:0849-1: Recommended update for gcc6
by maintenance＠opensuse.org 29 Mar '17

29 Mar '17

openSUSE Recommended Update: Recommended update for gcc6 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0849-1 Rating: low References: #1024073 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update of gcc6 replaces the GCC provided system libraries libstdc++6, libgcc_s1, libatomic1 and some others by the ones provided by gcc6. This is similar done as in SUSE Linux Enterprise 12. (bsc#1024073) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-404=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): cpp6-6.2.1+r239768-5.3.1 cpp6-debuginfo-6.2.1+r239768-5.3.1 gcc6-6.2.1+r239768-5.3.1 gcc6-ada-6.2.1+r239768-5.3.1 gcc6-ada-debuginfo-6.2.1+r239768-5.3.1 gcc6-c++-6.2.1+r239768-5.3.1 gcc6-c++-debuginfo-6.2.1+r239768-5.3.1 gcc6-debuginfo-6.2.1+r239768-5.3.1 gcc6-debugsource-6.2.1+r239768-5.3.1 gcc6-fortran-6.2.1+r239768-5.3.1 gcc6-fortran-debuginfo-6.2.1+r239768-5.3.1 gcc6-gij-6.2.1+r239768-5.3.1 gcc6-gij-debuginfo-6.2.1+r239768-5.3.1 gcc6-go-6.2.1+r239768-5.3.1 gcc6-go-debuginfo-6.2.1+r239768-5.3.1 gcc6-java-6.2.1+r239768-5.3.1 gcc6-java-debuginfo-6.2.1+r239768-5.3.1 gcc6-locale-6.2.1+r239768-5.3.1 gcc6-testresults-6.2.1+r239768-5.3.2 libada6-6.2.1+r239768-5.3.1 libada6-debuginfo-6.2.1+r239768-5.3.1 libasan3-6.2.1+r239768-5.3.1 libasan3-debuginfo-6.2.1+r239768-5.3.1 libatomic1-6.2.1+r239768-5.3.1 libatomic1-debuginfo-6.2.1+r239768-5.3.1 libcilkrts5-6.2.1+r239768-5.3.1 libcilkrts5-debuginfo-6.2.1+r239768-5.3.1 libgcc_s1-6.2.1+r239768-5.3.1 libgcc_s1-debuginfo-6.2.1+r239768-5.3.1 libgcj-devel-gcc6-6.2.1+r239768-5.3.1 libgcj-devel-gcc6-debuginfo-6.2.1+r239768-5.3.1 libgcj-gcc6-6.2.1+r239768-5.3.1 libgcj-gcc6-debuginfo-6.2.1+r239768-5.3.1 libgcj-gcc6-debugsource-6.2.1+r239768-5.3.1 libgcj-jar-gcc6-6.2.1+r239768-5.3.1 libgcj_bc1-gcc6-6.2.1+r239768-5.3.1 libgfortran3-6.2.1+r239768-5.3.1 libgfortran3-debuginfo-6.2.1+r239768-5.3.1 libgo9-6.2.1+r239768-5.3.1 libgo9-debuginfo-6.2.1+r239768-5.3.1 libgomp1-6.2.1+r239768-5.3.1 libgomp1-debuginfo-6.2.1+r239768-5.3.1 libitm1-6.2.1+r239768-5.3.1 libitm1-debuginfo-6.2.1+r239768-5.3.1 libmpx2-6.2.1+r239768-5.3.1 libmpx2-debuginfo-6.2.1+r239768-5.3.1 libmpxwrappers2-6.2.1+r239768-5.3.1 libmpxwrappers2-debuginfo-6.2.1+r239768-5.3.1 libquadmath0-6.2.1+r239768-5.3.1 libquadmath0-debuginfo-6.2.1+r239768-5.3.1 libstdc++6-6.2.1+r239768-5.3.1 libstdc++6-debuginfo-6.2.1+r239768-5.3.1 libstdc++6-devel-gcc6-6.2.1+r239768-5.3.1 libstdc++6-locale-6.2.1+r239768-5.3.1 libubsan0-6.2.1+r239768-5.3.1 libubsan0-debuginfo-6.2.1+r239768-5.3.1 - openSUSE Leap 42.2 (noarch): gcc6-info-6.2.1+r239768-5.3.1 libstdc++6-gcc6-doc-6.2.1+r239768-5.3.1 - openSUSE Leap 42.2 (x86_64): cross-aarch64-gcc6-6.2.1+r239768-5.3.2 cross-aarch64-gcc6-debuginfo-6.2.1+r239768-5.3.2 cross-aarch64-gcc6-debugsource-6.2.1+r239768-5.3.2 cross-aarch64-gcc6-icecream-backend-6.2.1+r239768-5.3.2 cross-arm-gcc6-6.2.1+r239768-5.3.2 cross-arm-gcc6-debuginfo-6.2.1+r239768-5.3.2 cross-arm-gcc6-debugsource-6.2.1+r239768-5.3.2 cross-armv6hl-gcc6-6.2.1+r239768-5.3.2 cross-armv6hl-gcc6-debuginfo-6.2.1+r239768-5.3.2 cross-armv6hl-gcc6-debugsource-6.2.1+r239768-5.3.2 cross-armv6hl-gcc6-icecream-backend-6.2.1+r239768-5.3.2 cross-armv7hl-gcc6-6.2.1+r239768-5.3.2 cross-armv7hl-gcc6-debuginfo-6.2.1+r239768-5.3.2 cross-armv7hl-gcc6-debugsource-6.2.1+r239768-5.3.2 cross-armv7hl-gcc6-icecream-backend-6.2.1+r239768-5.3.2 cross-avr-gcc6-6.2.1+r239768-5.3.2 cross-avr-gcc6-debuginfo-6.2.1+r239768-5.3.2 cross-avr-gcc6-debugsource-6.2.1+r239768-5.3.2 cross-avr-gcc6-icecream-backend-6.2.1+r239768-5.3.2 cross-i386-gcc6-6.2.1+r239768-5.3.2 cross-i386-gcc6-debuginfo-6.2.1+r239768-5.3.2 cross-i386-gcc6-debugsource-6.2.1+r239768-5.3.2 cross-i386-gcc6-icecream-backend-6.2.1+r239768-5.3.2 cross-m68k-gcc6-6.2.1+r239768-5.3.2 cross-m68k-gcc6-debuginfo-6.2.1+r239768-5.3.2 cross-m68k-gcc6-debugsource-6.2.1+r239768-5.3.2 cross-m68k-gcc6-icecream-backend-6.2.1+r239768-5.3.2 cross-ppc64-gcc6-6.2.1+r239768-5.3.2 cross-ppc64-gcc6-debuginfo-6.2.1+r239768-5.3.2 cross-ppc64-gcc6-debugsource-6.2.1+r239768-5.3.2 cross-ppc64-gcc6-icecream-backend-6.2.1+r239768-5.3.2 cross-ppc64le-gcc6-6.2.1+r239768-5.3.2 cross-ppc64le-gcc6-debuginfo-6.2.1+r239768-5.3.2 cross-ppc64le-gcc6-debugsource-6.2.1+r239768-5.3.2 cross-ppc64le-gcc6-icecream-backend-6.2.1+r239768-5.3.2 cross-s390x-gcc6-6.2.1+r239768-5.3.2 cross-s390x-gcc6-debuginfo-6.2.1+r239768-5.3.2 cross-s390x-gcc6-debugsource-6.2.1+r239768-5.3.2 cross-s390x-gcc6-icecream-backend-6.2.1+r239768-5.3.2 cross-sparc-gcc6-6.2.1+r239768-5.3.2 cross-sparc-gcc6-debuginfo-6.2.1+r239768-5.3.2 cross-sparc-gcc6-debugsource-6.2.1+r239768-5.3.2 cross-sparc64-gcc6-6.2.1+r239768-5.3.2 cross-sparc64-gcc6-debuginfo-6.2.1+r239768-5.3.2 cross-sparc64-gcc6-debugsource-6.2.1+r239768-5.3.2 cross-sparc64-gcc6-icecream-backend-6.2.1+r239768-5.3.2 cross-sparcv9-gcc6-icecream-backend-6.2.1+r239768-5.3.2 gcc6-32bit-6.2.1+r239768-5.3.1 gcc6-ada-32bit-6.2.1+r239768-5.3.1 gcc6-c++-32bit-6.2.1+r239768-5.3.1 gcc6-fortran-32bit-6.2.1+r239768-5.3.1 gcc6-gij-32bit-6.2.1+r239768-5.3.1 gcc6-gij-debuginfo-32bit-6.2.1+r239768-5.3.1 gcc6-go-32bit-6.2.1+r239768-5.3.1 libada6-32bit-6.2.1+r239768-5.3.1 libada6-32bit-debuginfo-6.2.1+r239768-5.3.1 libasan3-32bit-6.2.1+r239768-5.3.1 libasan3-32bit-debuginfo-6.2.1+r239768-5.3.1 libatomic1-32bit-6.2.1+r239768-5.3.1 libatomic1-32bit-debuginfo-6.2.1+r239768-5.3.1 libcilkrts5-32bit-6.2.1+r239768-5.3.1 libcilkrts5-32bit-debuginfo-6.2.1+r239768-5.3.1 libgcc_s1-32bit-6.2.1+r239768-5.3.1 libgcc_s1-32bit-debuginfo-6.2.1+r239768-5.3.1 libgcj-devel-gcc6-32bit-6.2.1+r239768-5.3.1 libgcj-devel-gcc6-debuginfo-32bit-6.2.1+r239768-5.3.1 libgcj-gcc6-32bit-6.2.1+r239768-5.3.1 libgcj-gcc6-debuginfo-32bit-6.2.1+r239768-5.3.1 libgfortran3-32bit-6.2.1+r239768-5.3.1 libgfortran3-32bit-debuginfo-6.2.1+r239768-5.3.1 libgo9-32bit-6.2.1+r239768-5.3.1 libgo9-32bit-debuginfo-6.2.1+r239768-5.3.1 libgomp1-32bit-6.2.1+r239768-5.3.1 libgomp1-32bit-debuginfo-6.2.1+r239768-5.3.1 libitm1-32bit-6.2.1+r239768-5.3.1 libitm1-32bit-debuginfo-6.2.1+r239768-5.3.1 liblsan0-6.2.1+r239768-5.3.1 liblsan0-debuginfo-6.2.1+r239768-5.3.1 libmpx2-32bit-6.2.1+r239768-5.3.1 libmpx2-32bit-debuginfo-6.2.1+r239768-5.3.1 libmpxwrappers2-32bit-6.2.1+r239768-5.3.1 libmpxwrappers2-32bit-debuginfo-6.2.1+r239768-5.3.1 libquadmath0-32bit-6.2.1+r239768-5.3.1 libquadmath0-32bit-debuginfo-6.2.1+r239768-5.3.1 libstdc++6-32bit-6.2.1+r239768-5.3.1 libstdc++6-32bit-debuginfo-6.2.1+r239768-5.3.1 libstdc++6-devel-gcc6-32bit-6.2.1+r239768-5.3.1 libtsan0-6.2.1+r239768-5.3.1 libtsan0-debuginfo-6.2.1+r239768-5.3.1 libubsan0-32bit-6.2.1+r239768-5.3.1 libubsan0-32bit-debuginfo-6.2.1+r239768-5.3.1 References: https://bugzilla.suse.com/1024073

1 0

openSUSE-SU-2017:0847-1: moderate: Security update for gstreamer-0_10-plugins-good
by opensuse-security＠opensuse.org 29 Mar '17

29 Mar '17

openSUSE Security Update: Security update for gstreamer-0_10-plugins-good ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0847-1 Rating: moderate References: #1012102 #1012103 #1012104 #1013653 #1013655 #1013663 Cross-References: CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9807 CVE-2016-9808 CVE-2016-9810 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for gstreamer-0_10-plugins-good fixes the following issues: Security issues fixed: - CVE-2016-9634, CVE-2016-9635: add some bounds checking (boo#1012102 boo#1012103). - CVE-2016-9636: fix casting for some comparisons (boo#1012104). - CVE-2016-9807, CVE-2016-9808: rewrite logic using GsgtByteReader/Writer (boo#1013653 boo#1013655). - CVE-2016-9810: don't unref() parent in the chain function (boo#1013663). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-402=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gstreamer-0_10-plugin-esd-0.10.31-17.3.1 gstreamer-0_10-plugin-esd-debuginfo-0.10.31-17.3.1 gstreamer-0_10-plugins-good-0.10.31-17.3.1 gstreamer-0_10-plugins-good-debuginfo-0.10.31-17.3.1 gstreamer-0_10-plugins-good-debugsource-0.10.31-17.3.1 gstreamer-0_10-plugins-good-doc-0.10.31-17.3.1 gstreamer-0_10-plugins-good-extra-0.10.31-17.3.1 gstreamer-0_10-plugins-good-extra-debuginfo-0.10.31-17.3.1 - openSUSE Leap 42.2 (x86_64): gstreamer-0_10-plugin-esd-32bit-0.10.31-17.3.1 gstreamer-0_10-plugin-esd-debuginfo-32bit-0.10.31-17.3.1 gstreamer-0_10-plugins-good-32bit-0.10.31-17.3.1 gstreamer-0_10-plugins-good-debuginfo-32bit-0.10.31-17.3.1 gstreamer-0_10-plugins-good-extra-32bit-0.10.31-17.3.1 gstreamer-0_10-plugins-good-extra-debuginfo-32bit-0.10.31-17.3.1 - openSUSE Leap 42.2 (noarch): gstreamer-0_10-plugins-good-lang-0.10.31-17.3.1 References: https://www.suse.com/security/cve/CVE-2016-9634.html https://www.suse.com/security/cve/CVE-2016-9635.html https://www.suse.com/security/cve/CVE-2016-9636.html https://www.suse.com/security/cve/CVE-2016-9807.html https://www.suse.com/security/cve/CVE-2016-9808.html https://www.suse.com/security/cve/CVE-2016-9810.html https://bugzilla.suse.com/1012102 https://bugzilla.suse.com/1012103 https://bugzilla.suse.com/1012104 https://bugzilla.suse.com/1013653 https://bugzilla.suse.com/1013655 https://bugzilla.suse.com/1013663

1 0

openSUSE-RU-2017:0846-1: Recommended update for libreoffice
by maintenance＠opensuse.org 29 Mar '17

29 Mar '17

openSUSE Recommended Update: Recommended update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0846-1 Rating: low References: #1010961 #1014896 #1015467 #945446 #946674 #952640 #955548 #957991 #959168 #980734 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update for libreoffice provides version 5.2.5.1 and fixes the following issues: - Libreoffice freezing when running a hyphenate all (bsc#1014896) - Change tracking: everything is a change, and accepting changes (bsc#1010961) - LibreOffice missing contents in PPTX deck (bsc#980734) - Clone Formatting ignores vertical text alignment (bsc#945446) - CTRL+Z not working to undo changes performed through Navigator crash fix (bsc#955548) - Undo does not revert bundled font size changes for table cells (bsc#946674) - Cut and Paste (at the same position) changes bullet point formatting (bsc#952640) - CTRL+Z not working to undo changes performed through Navigator (bsc#955548) - Undo on bullet point style change only works when focus is not set (bsc#959168) - Improve pivot cache reading performance (bsc#957991) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-400=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libetonyek-0_1-1-0.1.6-6.1 libetonyek-0_1-1-debuginfo-0.1.6-6.1 libetonyek-debugsource-0.1.6-6.1 libetonyek-devel-0.1.6-6.1 libetonyek-tools-0.1.6-6.1 libetonyek-tools-debuginfo-0.1.6-6.1 libreoffice-5.2.5.1-19.1 libreoffice-base-5.2.5.1-19.1 libreoffice-base-debuginfo-5.2.5.1-19.1 libreoffice-base-drivers-firebird-5.2.5.1-19.1 libreoffice-base-drivers-firebird-debuginfo-5.2.5.1-19.1 libreoffice-base-drivers-mysql-5.2.5.1-19.1 libreoffice-base-drivers-mysql-debuginfo-5.2.5.1-19.1 libreoffice-base-drivers-postgresql-5.2.5.1-19.1 libreoffice-base-drivers-postgresql-debuginfo-5.2.5.1-19.1 libreoffice-calc-5.2.5.1-19.1 libreoffice-calc-debuginfo-5.2.5.1-19.1 libreoffice-calc-extensions-5.2.5.1-19.1 libreoffice-debuginfo-5.2.5.1-19.1 libreoffice-debugsource-5.2.5.1-19.1 libreoffice-draw-5.2.5.1-19.1 libreoffice-draw-debuginfo-5.2.5.1-19.1 libreoffice-filters-optional-5.2.5.1-19.1 libreoffice-gnome-5.2.5.1-19.1 libreoffice-gnome-debuginfo-5.2.5.1-19.1 libreoffice-gtk3-5.2.5.1-19.1 libreoffice-gtk3-debuginfo-5.2.5.1-19.1 libreoffice-impress-5.2.5.1-19.1 libreoffice-impress-debuginfo-5.2.5.1-19.1 libreoffice-kde4-5.2.5.1-19.1 libreoffice-kde4-debuginfo-5.2.5.1-19.1 libreoffice-mailmerge-5.2.5.1-19.1 libreoffice-math-5.2.5.1-19.1 libreoffice-math-debuginfo-5.2.5.1-19.1 libreoffice-officebean-5.2.5.1-19.1 libreoffice-officebean-debuginfo-5.2.5.1-19.1 libreoffice-pyuno-5.2.5.1-19.1 libreoffice-pyuno-debuginfo-5.2.5.1-19.1 libreoffice-sdk-5.2.5.1-19.1 libreoffice-sdk-debuginfo-5.2.5.1-19.1 libreoffice-sdk-doc-5.2.5.1-19.1 libreoffice-writer-5.2.5.1-19.1 libreoffice-writer-debuginfo-5.2.5.1-19.1 libreoffice-writer-extensions-5.2.5.1-19.1 libreofficekit-5.2.5.1-19.1 libreofficekit-devel-5.2.5.1-19.1 - openSUSE Leap 42.1 (noarch): libetonyek-devel-doc-0.1.6-6.1 libreoffice-branding-upstream-5.2.5.1-19.1 libreoffice-gdb-pretty-printers-5.2.5.1-19.1 libreoffice-glade-5.2.5.1-19.1 libreoffice-icon-theme-breeze-5.2.5.1-19.1 libreoffice-icon-theme-galaxy-5.2.5.1-19.1 libreoffice-icon-theme-hicontrast-5.2.5.1-19.1 libreoffice-icon-theme-oxygen-5.2.5.1-19.1 libreoffice-icon-theme-sifr-5.2.5.1-19.1 libreoffice-icon-theme-tango-5.2.5.1-19.1 libreoffice-l10n-af-5.2.5.1-19.1 libreoffice-l10n-ar-5.2.5.1-19.1 libreoffice-l10n-as-5.2.5.1-19.1 libreoffice-l10n-bg-5.2.5.1-19.1 libreoffice-l10n-bn-5.2.5.1-19.1 libreoffice-l10n-br-5.2.5.1-19.1 libreoffice-l10n-ca-5.2.5.1-19.1 libreoffice-l10n-cs-5.2.5.1-19.1 libreoffice-l10n-cy-5.2.5.1-19.1 libreoffice-l10n-da-5.2.5.1-19.1 libreoffice-l10n-de-5.2.5.1-19.1 libreoffice-l10n-dz-5.2.5.1-19.1 libreoffice-l10n-el-5.2.5.1-19.1 libreoffice-l10n-en-5.2.5.1-19.1 libreoffice-l10n-es-5.2.5.1-19.1 libreoffice-l10n-et-5.2.5.1-19.1 libreoffice-l10n-eu-5.2.5.1-19.1 libreoffice-l10n-fa-5.2.5.1-19.1 libreoffice-l10n-fi-5.2.5.1-19.1 libreoffice-l10n-fr-5.2.5.1-19.1 libreoffice-l10n-ga-5.2.5.1-19.1 libreoffice-l10n-gl-5.2.5.1-19.1 libreoffice-l10n-gu-5.2.5.1-19.1 libreoffice-l10n-he-5.2.5.1-19.1 libreoffice-l10n-hi-5.2.5.1-19.1 libreoffice-l10n-hr-5.2.5.1-19.1 libreoffice-l10n-hu-5.2.5.1-19.1 libreoffice-l10n-it-5.2.5.1-19.1 libreoffice-l10n-ja-5.2.5.1-19.1 libreoffice-l10n-kk-5.2.5.1-19.1 libreoffice-l10n-kn-5.2.5.1-19.1 libreoffice-l10n-ko-5.2.5.1-19.1 libreoffice-l10n-lt-5.2.5.1-19.1 libreoffice-l10n-lv-5.2.5.1-19.1 libreoffice-l10n-mai-5.2.5.1-19.1 libreoffice-l10n-ml-5.2.5.1-19.1 libreoffice-l10n-mr-5.2.5.1-19.1 libreoffice-l10n-nb-5.2.5.1-19.1 libreoffice-l10n-nl-5.2.5.1-19.1 libreoffice-l10n-nn-5.2.5.1-19.1 libreoffice-l10n-nr-5.2.5.1-19.1 libreoffice-l10n-nso-5.2.5.1-19.1 libreoffice-l10n-or-5.2.5.1-19.1 libreoffice-l10n-pa-5.2.5.1-19.1 libreoffice-l10n-pl-5.2.5.1-19.1 libreoffice-l10n-pt_BR-5.2.5.1-19.1 libreoffice-l10n-pt_PT-5.2.5.1-19.1 libreoffice-l10n-ro-5.2.5.1-19.1 libreoffice-l10n-ru-5.2.5.1-19.1 libreoffice-l10n-si-5.2.5.1-19.1 libreoffice-l10n-sk-5.2.5.1-19.1 libreoffice-l10n-sl-5.2.5.1-19.1 libreoffice-l10n-sr-5.2.5.1-19.1 libreoffice-l10n-ss-5.2.5.1-19.1 libreoffice-l10n-st-5.2.5.1-19.1 libreoffice-l10n-sv-5.2.5.1-19.1 libreoffice-l10n-ta-5.2.5.1-19.1 libreoffice-l10n-te-5.2.5.1-19.1 libreoffice-l10n-th-5.2.5.1-19.1 libreoffice-l10n-tn-5.2.5.1-19.1 libreoffice-l10n-tr-5.2.5.1-19.1 libreoffice-l10n-ts-5.2.5.1-19.1 libreoffice-l10n-uk-5.2.5.1-19.1 libreoffice-l10n-ve-5.2.5.1-19.1 libreoffice-l10n-xh-5.2.5.1-19.1 libreoffice-l10n-zh_CN-5.2.5.1-19.1 libreoffice-l10n-zh_TW-5.2.5.1-19.1 libreoffice-l10n-zu-5.2.5.1-19.1 References: https://bugzilla.suse.com/1010961 https://bugzilla.suse.com/1014896 https://bugzilla.suse.com/1015467 https://bugzilla.suse.com/945446 https://bugzilla.suse.com/946674 https://bugzilla.suse.com/952640 https://bugzilla.suse.com/955548 https://bugzilla.suse.com/957991 https://bugzilla.suse.com/959168 https://bugzilla.suse.com/980734

1 0

openSUSE-RU-2017:0845-1: Recommended update for clamav-database
by maintenance＠opensuse.org 29 Mar '17

29 Mar '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0845-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh March 27th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-399=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-399=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201703270005-54.6.1 - openSUSE Leap 42.1 (noarch): clamav-database-201703270005-237.1 References:

1 0

openSUSE-RU-2017:0844-1: Recommended update for libreoffice
by maintenance＠opensuse.org 29 Mar '17

29 Mar '17

openSUSE Recommended Update: Recommended update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0844-1 Rating: low References: #1010961 #1014896 #1015467 #945446 #946674 #952640 #955548 #957991 #959168 #980734 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update for libreoffice provides version 5.2.5.1 and fixes the following issues: - Libreoffice freezing when running a hyphenate all (bsc#1014896) - Change tracking: everything is a change, and accepting changes (bsc#1010961) - LibreOffice missing contents in PPTX deck (bsc#980734) - Clone Formatting ignores vertical text alignment (bsc#945446) - CTRL+Z not working to undo changes performed through Navigator crash fix (bsc#955548) - Undo does not revert bundled font size changes for table cells (bsc#946674) - Cut and Paste (at the same position) changes bullet point formatting (bsc#952640) - CTRL+Z not working to undo changes performed through Navigator (bsc#955548) - Undo on bullet point style change only works when focus is not set (bsc#959168) - Improve pivot cache reading performance (bsc#957991) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-401=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): libetonyek-devel-doc-0.1.6-5.3.1 libreoffice-branding-upstream-5.2.5.1-18.3.2 libreoffice-gdb-pretty-printers-5.2.5.1-18.3.2 libreoffice-glade-5.2.5.1-18.3.2 libreoffice-icon-theme-breeze-5.2.5.1-18.3.2 libreoffice-icon-theme-galaxy-5.2.5.1-18.3.2 libreoffice-icon-theme-hicontrast-5.2.5.1-18.3.2 libreoffice-icon-theme-oxygen-5.2.5.1-18.3.2 libreoffice-icon-theme-sifr-5.2.5.1-18.3.2 libreoffice-icon-theme-tango-5.2.5.1-18.3.2 libreoffice-l10n-af-5.2.5.1-18.3.2 libreoffice-l10n-ar-5.2.5.1-18.3.2 libreoffice-l10n-as-5.2.5.1-18.3.2 libreoffice-l10n-bg-5.2.5.1-18.3.2 libreoffice-l10n-bn-5.2.5.1-18.3.2 libreoffice-l10n-br-5.2.5.1-18.3.2 libreoffice-l10n-ca-5.2.5.1-18.3.2 libreoffice-l10n-cs-5.2.5.1-18.3.2 libreoffice-l10n-cy-5.2.5.1-18.3.2 libreoffice-l10n-da-5.2.5.1-18.3.2 libreoffice-l10n-de-5.2.5.1-18.3.2 libreoffice-l10n-dz-5.2.5.1-18.3.2 libreoffice-l10n-el-5.2.5.1-18.3.2 libreoffice-l10n-en-5.2.5.1-18.3.2 libreoffice-l10n-es-5.2.5.1-18.3.2 libreoffice-l10n-et-5.2.5.1-18.3.2 libreoffice-l10n-eu-5.2.5.1-18.3.2 libreoffice-l10n-fa-5.2.5.1-18.3.2 libreoffice-l10n-fi-5.2.5.1-18.3.2 libreoffice-l10n-fr-5.2.5.1-18.3.2 libreoffice-l10n-ga-5.2.5.1-18.3.2 libreoffice-l10n-gl-5.2.5.1-18.3.2 libreoffice-l10n-gu-5.2.5.1-18.3.2 libreoffice-l10n-he-5.2.5.1-18.3.2 libreoffice-l10n-hi-5.2.5.1-18.3.2 libreoffice-l10n-hr-5.2.5.1-18.3.2 libreoffice-l10n-hu-5.2.5.1-18.3.2 libreoffice-l10n-it-5.2.5.1-18.3.2 libreoffice-l10n-ja-5.2.5.1-18.3.2 libreoffice-l10n-kk-5.2.5.1-18.3.2 libreoffice-l10n-kn-5.2.5.1-18.3.2 libreoffice-l10n-ko-5.2.5.1-18.3.2 libreoffice-l10n-lt-5.2.5.1-18.3.2 libreoffice-l10n-lv-5.2.5.1-18.3.2 libreoffice-l10n-mai-5.2.5.1-18.3.2 libreoffice-l10n-ml-5.2.5.1-18.3.2 libreoffice-l10n-mr-5.2.5.1-18.3.2 libreoffice-l10n-nb-5.2.5.1-18.3.2 libreoffice-l10n-nl-5.2.5.1-18.3.2 libreoffice-l10n-nn-5.2.5.1-18.3.2 libreoffice-l10n-nr-5.2.5.1-18.3.2 libreoffice-l10n-nso-5.2.5.1-18.3.2 libreoffice-l10n-or-5.2.5.1-18.3.2 libreoffice-l10n-pa-5.2.5.1-18.3.2 libreoffice-l10n-pl-5.2.5.1-18.3.2 libreoffice-l10n-pt_BR-5.2.5.1-18.3.2 libreoffice-l10n-pt_PT-5.2.5.1-18.3.2 libreoffice-l10n-ro-5.2.5.1-18.3.2 libreoffice-l10n-ru-5.2.5.1-18.3.2 libreoffice-l10n-si-5.2.5.1-18.3.2 libreoffice-l10n-sk-5.2.5.1-18.3.2 libreoffice-l10n-sl-5.2.5.1-18.3.2 libreoffice-l10n-sr-5.2.5.1-18.3.2 libreoffice-l10n-ss-5.2.5.1-18.3.2 libreoffice-l10n-st-5.2.5.1-18.3.2 libreoffice-l10n-sv-5.2.5.1-18.3.2 libreoffice-l10n-ta-5.2.5.1-18.3.2 libreoffice-l10n-te-5.2.5.1-18.3.2 libreoffice-l10n-th-5.2.5.1-18.3.2 libreoffice-l10n-tn-5.2.5.1-18.3.2 libreoffice-l10n-tr-5.2.5.1-18.3.2 libreoffice-l10n-ts-5.2.5.1-18.3.2 libreoffice-l10n-uk-5.2.5.1-18.3.2 libreoffice-l10n-ve-5.2.5.1-18.3.2 libreoffice-l10n-xh-5.2.5.1-18.3.2 libreoffice-l10n-zh_CN-5.2.5.1-18.3.2 libreoffice-l10n-zh_TW-5.2.5.1-18.3.2 libreoffice-l10n-zu-5.2.5.1-18.3.2 - openSUSE Leap 42.2 (x86_64): libetonyek-0_1-1-0.1.6-5.3.1 libetonyek-0_1-1-debuginfo-0.1.6-5.3.1 libetonyek-debugsource-0.1.6-5.3.1 libetonyek-devel-0.1.6-5.3.1 libetonyek-tools-0.1.6-5.3.1 libetonyek-tools-debuginfo-0.1.6-5.3.1 libreoffice-5.2.5.1-18.3.2 libreoffice-base-5.2.5.1-18.3.2 libreoffice-base-debuginfo-5.2.5.1-18.3.2 libreoffice-base-drivers-firebird-5.2.5.1-18.3.2 libreoffice-base-drivers-firebird-debuginfo-5.2.5.1-18.3.2 libreoffice-base-drivers-mysql-5.2.5.1-18.3.2 libreoffice-base-drivers-mysql-debuginfo-5.2.5.1-18.3.2 libreoffice-base-drivers-postgresql-5.2.5.1-18.3.2 libreoffice-base-drivers-postgresql-debuginfo-5.2.5.1-18.3.2 libreoffice-calc-5.2.5.1-18.3.2 libreoffice-calc-debuginfo-5.2.5.1-18.3.2 libreoffice-calc-extensions-5.2.5.1-18.3.2 libreoffice-debuginfo-5.2.5.1-18.3.2 libreoffice-debugsource-5.2.5.1-18.3.2 libreoffice-draw-5.2.5.1-18.3.2 libreoffice-draw-debuginfo-5.2.5.1-18.3.2 libreoffice-filters-optional-5.2.5.1-18.3.2 libreoffice-gnome-5.2.5.1-18.3.2 libreoffice-gnome-debuginfo-5.2.5.1-18.3.2 libreoffice-gtk3-5.2.5.1-18.3.2 libreoffice-gtk3-debuginfo-5.2.5.1-18.3.2 libreoffice-impress-5.2.5.1-18.3.2 libreoffice-impress-debuginfo-5.2.5.1-18.3.2 libreoffice-kde4-5.2.5.1-18.3.2 libreoffice-kde4-debuginfo-5.2.5.1-18.3.2 libreoffice-mailmerge-5.2.5.1-18.3.2 libreoffice-math-5.2.5.1-18.3.2 libreoffice-math-debuginfo-5.2.5.1-18.3.2 libreoffice-officebean-5.2.5.1-18.3.2 libreoffice-officebean-debuginfo-5.2.5.1-18.3.2 libreoffice-pyuno-5.2.5.1-18.3.2 libreoffice-pyuno-debuginfo-5.2.5.1-18.3.2 libreoffice-sdk-5.2.5.1-18.3.2 libreoffice-sdk-debuginfo-5.2.5.1-18.3.2 libreoffice-sdk-doc-5.2.5.1-18.3.2 libreoffice-writer-5.2.5.1-18.3.2 libreoffice-writer-debuginfo-5.2.5.1-18.3.2 libreoffice-writer-extensions-5.2.5.1-18.3.2 libreofficekit-5.2.5.1-18.3.2 libreofficekit-devel-5.2.5.1-18.3.2 References: https://bugzilla.suse.com/1010961 https://bugzilla.suse.com/1014896 https://bugzilla.suse.com/1015467 https://bugzilla.suse.com/945446 https://bugzilla.suse.com/946674 https://bugzilla.suse.com/952640 https://bugzilla.suse.com/955548 https://bugzilla.suse.com/957991 https://bugzilla.suse.com/959168 https://bugzilla.suse.com/980734

1 0

openSUSE-RU-2017:0837-1: Recommended update for KDE Plasma 5
by maintenance＠opensuse.org 28 Mar '17

28 Mar '17

openSUSE Recommended Update: Recommended update for KDE Plasma 5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0837-1 Rating: low References: #1015761 #1016982 #1018648 #1020161 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update contains KDE Plasma 5.8.6, a general bugfix release. The following components were updated: ark, jsoncpp, kopete, mailcommon The upstream announcements are available here: * https://www.kde.org/announcements/plasma-5.8.6.php * https://www.kde.org/announcements/plasma-5.8.5.php * https://www.kde.org/announcements/plasma-5.8.4.php Changes in ark: - Avoid running executable scripts when clicking on them. (boo#1018648, kde#374572) Changes in jsoncpp: - Fix pkg-config. (boo#1015761) Changes in kopete: - Fix encrypting OTR messages after closing and re-opening kopete. (boo#1016982, kde#362535) Changes in mailcommon: - Fix a crash when the "Add Tag" dialog is opened. (boo#1020161) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-397=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le x86_64): jsoncpp-debugsource-1.7.4-5.1 jsoncpp-devel-1.7.4-5.1 libjsoncpp1-1.7.4-5.1 libjsoncpp1-debuginfo-1.7.4-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): ark-16.08.2-5.1 kopete-16.08.2-5.1 kopete-debuginfo-16.08.2-5.1 kopete-debugsource-16.08.2-5.1 libKF5MailCommon5-16.08.2-5.1 libKF5MailCommon5-debuginfo-16.08.2-5.1 libkerfuffle16-16.08.2-5.1 mailcommon-16.08.2-5.1 mailcommon-debugsource-16.08.2-5.1 mailcommon-devel-16.08.2-5.1 mailcommon-devel-debuginfo-16.08.2-5.1 References: https://bugzilla.suse.com/1015761 https://bugzilla.suse.com/1016982 https://bugzilla.suse.com/1018648 https://bugzilla.suse.com/1020161

1 0

openSUSE-RU-2017:0836-1: Recommended update for phpMyAdmin
by maintenance＠opensuse.org 28 Mar '17

28 Mar '17

openSUSE Recommended Update: Recommended update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0836-1 Rating: low References: #1030092 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for phpMyAdmin fixes the following issues: - Load same admin flags/values for php7 as it is done for php5. (boo#1030092) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-396=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-396=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): phpMyAdmin-4.4.15.10-33.3.1 - openSUSE Leap 42.1 (noarch): phpMyAdmin-4.4.15.10-34.1 References: https://bugzilla.suse.com/1030092

1 0

openSUSE-RU-2017:0835-1: Recommended update for KDE Plasma 5
by maintenance＠opensuse.org 28 Mar '17

28 Mar '17

openSUSE Recommended Update: Recommended update for KDE Plasma 5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0835-1 Rating: low References: #1000519 #1005902 #1006651 #1020020 #1022119 #1022904 #1026970 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update contains KDE Plasma 5.8.6, a general bugfix release. The following components were updated: breeze, discover, kde-user-manager, kiconthemes, kwin5, plasma5-SLE, plasma5-addons, plasma5-desktop, plasma5-pa, plasma5-session, plasma5-workspace The upstream announcements are available here: * https://www.kde.org/announcements/plasma-5.8.6.php * https://www.kde.org/announcements/plasma-5.8.5.php * https://www.kde.org/announcements/plasma-5.8.4.php Changes in breeze: * Add top_left_arrow cursor symlinks. * Delay init of Wayland setup till next event cycle. * Fix broken kcfgc files. Changes in discover: * Improve YaST integration and UI functionality. * Fix arguments when running .desktop files with runservice. * Make sure we report changes in the size once advertised. * AppStream: Take stock icons into account. * Enable full screenshot smoothness. * Don't close if the input is wrong. * Display an error if input URL was malformed. * Expose software-properties-kde if present. * Make sure the application delegate doesn't overflow when the view is narrow. * Elide category names when they're too big. * Move ifdefs to Discover instead of modifying Appstream. * Make it possible for 5.8 to compile against the last AppStreamQt. * Make screenshots visible when there's only one screenshot too. Changes in kde-user-manager: * Hide "automatic login" button in UserAccounts since is does absolutely nothing. * Revert "Do not ask for root permissions when it's unnecessary". Changes in kiconthemes: * Make icons sharper (not blurry) with non-integer scale factors. (boo#1006651, kde#366451) * Make running applications detect changing the configured icon theme and as a result not adding wrong icons to the cache. (boo#1000519, kde#365363) Changes in kwin5: * Avoid a crash on Kwin decoration KCM teardown. * Support modifier-only-shortcuts when capslock is on. * Translate the layout name when passing to layout change OSD. * Fixed initial graying out options in Cube Effect settings. * [TabBox] Remember current model index on SwitcherItem model set. * Align configure button consistently across delegates. * Fix AbstractClient::sizeForClientSize. * Ensure that all Effects honour the grab roles correctly. * Unpolish QStyle on QApp prior to destroying internal Wayland connection. * [helpers/killer] Force to platform XCB. * Simplify the window title passed in from the window system. * [desktopgrid] Don't manipulate virtual desktop of desktop window. * Invert the scroll direction for wheel events on internal windows. * Internal windows cannot be minimized. * [libinput] Add scroll method configuration support. * [libinput] Add natural scrolling support. * [libinput] Add middle mouse button emulation support. * Don't snap to auto-hidden panels. * [scripting] Silence unused variable warnings. * [scripting] Fix export of WorkspaceWrapper in QtScript. * Support for workspace.clientList() in declarative script. * Correctly set i18n suffix in mousemark spinbox. Changes in plasma5-SLE: * Add default fonts to /etc/xdg/kdeglobals to make KDE4 applications use the Plasma5 fonts as well (same as set by plasma5-integration). (boo#1026970) * Increase contrast on splash/images/bulb.png to get rid of noise and visible edges. Changes in plasma5-addons: * Fix systemloadviewer tooltip. (boo#1020020, kde#129309) * Use PlasmaComponents.Label instead of Text. (kde#372218) * Check on current comic to be valid and don't crash on invalid config groups when asked. Also, disable the context menu options when no valid comic is loaded. (kde#373031) Changes in plasma5-desktop: * Fix default font in fonts kcm. * Use icon center for vertical hitscan on drop. * Remove get new looks button from 5.8. * Fix crash when invoking Present Windows with the group dialog open. * [Folder View] Don't show script execution prompt on desktop:/. * Use proper version for baloo. * [Solid Device Actions KCM] Encode action file name. * Revamp (Activity) Pager wheel handling. * [Folder View] show script execution prompt when clicking item. * Fix startup warning. * Fix clearing selection when rectangle selection contains no items. * Fix Plasmoid.busy visualization in desktop containment. * Call correct function and fix warning. * [Task Manager] Hide group dialog when opening applets settings. * [kcm] Fix reset logic. * Silence warning. * Fix crash during crash acrobatics. * Fix binding loop. * [Folder View] Fix right click erroneously opening files. * Clean up after a window delegate drag exits the window. * Fix Enter/Return not running non-dir items in list view mode. * Set current index to start of selection range when performing rectangle selection. * [Panel Containment] Explicitly bind visible on both the container and the applet. * [Task Manager] Parent QAction to "parent" instead of this. * [Containment Appearance] Make sure to always load a config view. * Don't clear hover state while a child dialog is open. * Prompt for executing files in folderview containment. (boo#1022904) * Prevent folderview from opening files erroneously in addition to showing the context menu when right-clicking on an icon. * [Folder View] Workaround QML Text layouting glitch. * [Kicker] Support drag from bookmarks runner. * Larger icons and stack windows above label item. * Ensure results are sorted by relevance. * [taskmanager] Limit GroupDialog size, stop highlightwindow effect when it shown, increase items readability. * Fix 2 RTL bugs. * [Kicker] Hide "Edit Applications..." context menu entry if system immutable. * Fix running of recent docs actions for runner match entries. * [Folder View] Clear hover state when mouse leaves view. * Select correct index without timer. * Fix "Move to Current Desktop" action moving to all desktops instead. * Check whether the KServe is still valid before running. * Publish delegate geometry when ChildCount increases. * Fix config dialogs in ltr mode. * [Task Manager] Strip application:// prefix before looking up service. * [Task Manager] Pass local file to KService instead of stringified URL. * [Task Manager] Fix Unity launcher count badge rendering when task is created. Changes in plasma5-pa: * Always check if context is valid when calling pa functions. * VolumeSlider: Ignore all value changes until Component is completed. * Fix compare for undefined argument in playFeedback(). * Pass correct index to playFeedback. * Applet: Don't delete delegates while drag is active. Changes in plasma5-session: * Only require version 5.8.6 of packages that actually changed. Changes in plasma5-workspace: * Port to QMultiHash. * Only remove + announce if leader change actually occured, avoid excessive loop. * [Notifications] Never manually hide() the NotificationPopup. * Add comment laying out goals. * Fix crash when switching activities. * Tweak alphabetic (default) sort behavior. * Turn the NotificationItem in a MouseArea. * [DesktopView] show() ConfigView when it is already opened. * [System Tray Containment] Drop useless Q_INVOKABLE from .cpp file. * [System Tray Containment] Ungrab mouse before opening context menu. * [KRunner] In doubt use primary screen for view position. * Drop legacy fixup rule for VirtualBox. * Fix isOutputRedundant logic. * Fix group parents not appearing when disabling inline grouping. * Corona::screenGeometryChanged on qscreen resized. * MediaController: Update position while queuedPositionUpdate timer is running. * Better clean up of duplicate containments. * Fix "Pinned Chrome disappears when all Chrome windows are closed". * [MPRIS Data Engine] Don't crash if "Metadata" is a map but of wrong type. * Systray: Move all icon resolution to dataengine. * Use a native event filter to notice the screen was swapped. * Notice when the only screen changes. * Make sure applet is removed from stack when destroyed. * [Lock Screen] Wrap OSD in its own ColorScope. * Move updating of primary screen in screenpool after fetching its id. * Calendar: Clear selection on opening. * Fix "Unable to assign [undefined] to int" log. * Refresh the ScreenGeometry data role whenever a screen is added or changes its geometry. * systemtray: Don't propagate unhandled wheel events. * [Lock Screen] Add keyboard icon for keyboard layout switcher. * remove categories not present on server anymore. * Select correct index without timer. * Expose rowCount as data role in TaskGroupingProxyModel. * [taskmanagerrulesrc] Add Rewrite Rule for chromium. * [SDDM Theme] Fix background in qmlscene by providing proper config dummy data. * [SDDM Theme] Add "lastUser" and "disableAvatarsThreshold" properties to dummydata. * [SDDM Theme] Remember last username. * [taskmanagerrulesrc] Add Rewrite Rule for chromium-browser. * Fix config dialogs in ltr mode. * Properly parse exec line before qprocessing it for autostart. * Disable Qt's high DPI scaling on shutdown/switch user dialogs. * Don't set PanelView visibilty when opening/closing config. * Check KPluginInfo.service() returns a valid object. * Revert "Port to new plasma-framework API". * Add plasma-discover to mappings. * [Windowed Widgets Runner] Don't access invalid KPluginMetaData. * Load screenpool at the same time as we connect to screenchanged signals. * Avoid connecting to screen changed signals twice. * Sync app config in sync with applets config. * Make sure all outputs are known. * [taskmanagerrulesrc] Add Rewrite Rule for Google-chrome. * [XWindowTasksModel] Check for service being empty before searching new ones. * Fix behavior of scrollable systray popups. * Introduce new pre-layout script hook. * Make sure we're looking both for json and desktop metadata. * Port to new plasma-framework API. * Modified distance function to keep aspect ratio as close as possible. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-394=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): breeze4-style-5.8.6-6.1 breeze4-style-debuginfo-5.8.6-6.1 breeze4-style-debugsource-5.8.6-6.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): breeze-5.8.6-6.1 breeze5-decoration-5.8.6-6.1 breeze5-style-5.8.6-6.1 discover-5.8.6-6.1 discover-debuginfo-5.8.6-6.1 discover-debugsource-5.8.6-6.1 discover-plasmoid-5.8.6-6.1 drkonqi5-5.8.6-5.1 drkonqi5-debuginfo-5.8.6-5.1 kde-user-manager-5.8.6-6.1 kde-user-manager-debuginfo-5.8.6-6.1 kde-user-manager-debugsource-5.8.6-6.1 kiconthemes-debugsource-5.26.0-5.1 kiconthemes-devel-5.26.0-5.1 kiconthemes-devel-debuginfo-5.26.0-5.1 kwin5-5.8.6-5.1 kwin5-debuginfo-5.8.6-5.1 kwin5-debugsource-5.8.6-5.1 kwin5-devel-5.8.6-5.1 libKF5IconThemes5-5.26.0-5.1 libKF5IconThemes5-debuginfo-5.26.0-5.1 plasma5-addons-5.8.3-5.1 plasma5-addons-debuginfo-5.8.3-5.1 plasma5-addons-debugsource-5.8.3-5.1 plasma5-desktop-5.8.6-5.1 plasma5-desktop-debuginfo-5.8.6-5.1 plasma5-desktop-debugsource-5.8.6-5.1 plasma5-pa-5.8.6-5.1 plasma5-pa-debuginfo-5.8.6-5.1 plasma5-pa-debugsource-5.8.6-5.1 plasma5-workspace-5.8.6-5.1 plasma5-workspace-debuginfo-5.8.6-5.1 plasma5-workspace-debugsource-5.8.6-5.1 plasma5-workspace-devel-5.8.6-5.1 plasma5-workspace-libs-5.8.6-5.1 plasma5-workspace-libs-debuginfo-5.8.6-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): breeze5-cursors-5.8.6-6.1 breeze5-style-lang-5.8.6-6.1 breeze5-wallpapers-5.8.6-6.1 discover-lang-5.8.6-6.1 kde-user-manager-lang-5.8.6-6.1 kwin5-lang-5.8.6-5.1 libKF5IconThemes5-lang-5.26.0-5.1 plasma5-SLE-42.1.1-5.1 plasma5-addons-lang-5.8.3-5.1 plasma5-defaults-SLE-42.1.1-5.1 plasma5-desktop-lang-5.8.6-5.1 plasma5-pa-lang-5.8.6-5.1 plasma5-session-5.8.6-5.1 plasma5-theme-SLE-42.1.1-5.1 plasma5-workspace-branding-SLE-42.1.1-5.1 plasma5-workspace-lang-5.8.6-5.1 sddm-theme-SLE-42.1.1-5.1 References: https://bugzilla.suse.com/1000519 https://bugzilla.suse.com/1005902 https://bugzilla.suse.com/1006651 https://bugzilla.suse.com/1020020 https://bugzilla.suse.com/1022119 https://bugzilla.suse.com/1022904 https://bugzilla.suse.com/1026970

1 0

openSUSE-RU-2017:0834-1: Recommended update for netcfg
by maintenance＠opensuse.org 28 Mar '17

28 Mar '17

openSUSE Recommended Update: Recommended update for netcfg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0834-1 Rating: low References: #1028305 #959693 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for netcfg provides the following fixes: - Update script to generate services to use UTF8 by default. (bsc#1028305) - Repack services.bz2 with latest from upstream and adjust the script to not add all the names and emails at the bottom of the file. (bsc#959693) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-393=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-393=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): netcfg-11.5-28.3.1 - openSUSE Leap 42.1 (noarch): netcfg-11.5-28.1 References: https://bugzilla.suse.com/1028305 https://bugzilla.suse.com/959693

1 0

openSUSE-RU-2017:0833-1: Recommended update for selinux-policy
by maintenance＠opensuse.org 28 Mar '17

28 Mar '17

openSUSE Recommended Update: Recommended update for selinux-policy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0833-1 Rating: low References: #1016385 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for selinux-policy fixes the following issue: - Patch installation fails when SELinux is enabled (bsc#1016385) This was due to the selinux-policy package embedding PCRE prebuilt regular expressions, which are incompatible to the PCRE minor version update released some weeks ago. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-392=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): selinux-policy-20140730-3.1 selinux-policy-devel-20140730-3.1 selinux-policy-doc-20140730-3.1 selinux-policy-minimum-20140730-3.1 selinux-policy-targeted-20140730-3.1 References: https://bugzilla.suse.com/1016385

1 0

openSUSE-OU-2017:0832-1: Recommended update for qt5ct
by maintenance＠opensuse.org 28 Mar '17

28 Mar '17

openSUSE Optional Update: Recommended update for qt5ct ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0832-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update makes qt5ct available in the SUSE Package Hub. qt5ct allows users to configure Qt5 settings (theme, font, icons, etc.) under DE/WM without Qt integration. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-398=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): qt5ct-0.30-2.1 References:

1 0

openSUSE-RU-2017:0831-1: Recommended update for dpdk
by maintenance＠opensuse.org 28 Mar '17

28 Mar '17

openSUSE Recommended Update: Recommended update for dpdk ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0831-1 Rating: low References: #1026804 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dpdk provides the following fixes: - Fix broken dpdk-pmd/* soft links. (bsc#1026804) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-395=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dpdk-2.2.0-4.3.1 dpdk-debuginfo-2.2.0-4.3.1 dpdk-debugsource-2.2.0-4.3.1 dpdk-devel-2.2.0-4.3.1 dpdk-examples-2.2.0-4.3.1 dpdk-examples-debuginfo-2.2.0-4.3.1 dpdk-tools-2.2.0-4.3.1 - openSUSE Leap 42.2 (noarch): dpdk-doc-2.2.0-4.3.1 References: https://bugzilla.suse.com/1026804

1 0

openSUSE-SU-2017:0830-1: moderate: Security update for xtrabackup
by opensuse-security＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Security Update: Security update for xtrabackup ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0830-1 Rating: moderate References: #1026729 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update to xtrabackup 2.3.7 fixes one security issue and bugs. The following security issue was fixed: - innobackupex and xtrabackup scripts were showing the password in the ps output when it was passed as a command line argument (boo#1026729) The following functionality was added: - new --remove-original option for removing the original encrypted and compressed files - now supports -H, -h, -u and -p shortcuts for --hostname, --datadir, --user and --password respectively The following bugs were fixed: - Pick up username from user's configuration file correctly - Incremental backups did not include xtrabackup_binlog_info and xtrabackup_galera_info files - --move-back option did not always restore out-of-datadir tablespaces to their original directories - Incremental backup would fail with a path like ~/backup/inc_1 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-382=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): xtrabackup-2.3.7-5.3.1 xtrabackup-debuginfo-2.3.7-5.3.1 xtrabackup-debugsource-2.3.7-5.3.1 xtrabackup-test-2.3.7-5.3.1 References: https://bugzilla.suse.com/1026729

1 0

openSUSE-SU-2017:0828-1: moderate: Security update for gegl
by opensuse-security＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Security Update: Security update for gegl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0828-1 Rating: moderate References: #789835 Cross-References: CVE-2012-4433 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gegl fixes the following issues: Security issue fixed: - Fix CVE-2012-4433: Fix buffer overflow in and add plausibility checks to ppm-load op (bsc#789835). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-388=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gegl-0.2.0-16.1 gegl-0_2-0.2.0-16.1 gegl-0_2-debuginfo-0.2.0-16.1 gegl-debuginfo-0.2.0-16.1 gegl-debugsource-0.2.0-16.1 gegl-devel-0.2.0-16.1 gegl-doc-0.2.0-16.1 libgegl-0_2-0-0.2.0-16.1 libgegl-0_2-0-debuginfo-0.2.0-16.1 - openSUSE Leap 42.2 (noarch): gegl-0_2-lang-0.2.0-16.1 References: https://www.suse.com/security/cve/CVE-2012-4433.html https://bugzilla.suse.com/789835

1 0

openSUSE-SU-2017:0827-1: moderate: Security update for open-vm-tools
by opensuse-security＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Security Update: Security update for open-vm-tools ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0827-1 Rating: moderate References: #1006796 #1007600 #1011057 #1013496 #1024200 #971031 #994598 Cross-References: CVE-2015-5191 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This update for open-vm-tools to 10.1.0 stable brings features, fixes bugs and security issues: - New vmware-namespace-cmd command line utility - GTK3 support - Common Agent Framework (CAF) - Guest authentication with xmlsec1 - Sub-command to push updated network information to the host on demand - Fix for quiesced snapshot failure leaving guest file system quiesced (bsc#1006796) - Fix for CVE-2015-5191 (bsc#1007600) - Report SLES for SAP 12 guest OS as SLES 12 (bsc#1013496) - Add udev rule to increase VMware virtual disk timeout values (bsc#994598) - Fix vmtoolsd init script to run vmtoolsd in background (bsc#971031) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-385=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): libvmtools-devel-10.1.0-3.1 libvmtools0-10.1.0-3.1 libvmtools0-debuginfo-10.1.0-3.1 open-vm-tools-10.1.0-3.1 open-vm-tools-debuginfo-10.1.0-3.1 open-vm-tools-debugsource-10.1.0-3.1 open-vm-tools-desktop-10.1.0-3.1 open-vm-tools-desktop-debuginfo-10.1.0-3.1 References: https://www.suse.com/security/cve/CVE-2015-5191.html https://bugzilla.suse.com/1006796 https://bugzilla.suse.com/1007600 https://bugzilla.suse.com/1011057 https://bugzilla.suse.com/1013496 https://bugzilla.suse.com/1024200 https://bugzilla.suse.com/971031 https://bugzilla.suse.com/994598

1 0

openSUSE-SU-2017:0826-1: Security update for dbus-1
by opensuse-security＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Security Update: Security update for dbus-1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0826-1 Rating: low References: #1025950 #1025951 #974092 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for dbus-1 fixes the following issues: Security issues fixed: - Symlink attack in nonce-tcp transport. (bsc#1025950) - Symlink attack in unit tests. (bsc#1025951) Bugfixes: - Remove sysvinit script, not used under systemd. (bsc#974092) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-384=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-384=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dbus-1-1.8.22-3.1 dbus-1-debuginfo-1.8.22-3.1 dbus-1-debugsource-1.8.22-3.1 dbus-1-devel-1.8.22-3.1 dbus-1-x11-1.8.22-3.1 dbus-1-x11-debuginfo-1.8.22-3.1 dbus-1-x11-debugsource-1.8.22-3.1 libdbus-1-3-1.8.22-3.1 libdbus-1-3-debuginfo-1.8.22-3.1 - openSUSE Leap 42.2 (x86_64): dbus-1-debuginfo-32bit-1.8.22-3.1 dbus-1-devel-32bit-1.8.22-3.1 libdbus-1-3-32bit-1.8.22-3.1 libdbus-1-3-debuginfo-32bit-1.8.22-3.1 - openSUSE Leap 42.2 (noarch): dbus-1-devel-doc-1.8.22-3.1 - openSUSE Leap 42.1 (i586 x86_64): dbus-1-1.8.22-13.1 dbus-1-debuginfo-1.8.22-13.1 dbus-1-debugsource-1.8.22-13.1 dbus-1-devel-1.8.22-13.1 dbus-1-x11-1.8.22-13.1 dbus-1-x11-debuginfo-1.8.22-13.1 dbus-1-x11-debugsource-1.8.22-13.1 libdbus-1-3-1.8.22-13.1 libdbus-1-3-debuginfo-1.8.22-13.1 - openSUSE Leap 42.1 (x86_64): dbus-1-debuginfo-32bit-1.8.22-13.1 dbus-1-devel-32bit-1.8.22-13.1 libdbus-1-3-32bit-1.8.22-13.1 libdbus-1-3-debuginfo-32bit-1.8.22-13.1 - openSUSE Leap 42.1 (noarch): dbus-1-devel-doc-1.8.22-13.1 References: https://bugzilla.suse.com/1025950 https://bugzilla.suse.com/1025951 https://bugzilla.suse.com/974092

1 0

openSUSE-RU-2017:0825-1: moderate: Recommended update for VirtualBox
by maintenance＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Recommended Update: Recommended update for VirtualBox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0825-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for VirtualBox provides version 5.0.36 and fixes the following issues: - Linux Additions: Fix for the shared folders kernel module to compile on Linux 4.10. - Linux Additions: Fix the graphics driver build with Linux 4.10 and later. - Linux hosts: Fixed autostart service script. - Linux hosts / guests: Linux 4.11 compile fixes. - NAT network: Fixed two potential crashes in the DHCP server. - Shared Folders: Fixed access to long paths. - Shared Folders: Fixed case insensitive filename access. - Storage: LsiLogic fix for Windows 10. - USB: Fixed not being able to attach certain USB devices having invalid characters in the device strings. - VBoxBugReport: Fixed VM log collection issue. - VMM: Don't access the MSR_IA32_SMM_MONITOR_CTL MSR if dual-monitor treatment is not available. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-391=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): virtualbox-guest-desktop-icons-5.0.36-37.1 virtualbox-host-source-5.0.36-37.1 - openSUSE Leap 42.1 (x86_64): python-virtualbox-5.0.36-37.1 python-virtualbox-debuginfo-5.0.36-37.1 virtualbox-5.0.36-37.1 virtualbox-debuginfo-5.0.36-37.1 virtualbox-debugsource-5.0.36-37.1 virtualbox-devel-5.0.36-37.1 virtualbox-guest-kmp-default-5.0.36_k4.1.38_50-37.1 virtualbox-guest-kmp-default-debuginfo-5.0.36_k4.1.38_50-37.1 virtualbox-guest-tools-5.0.36-37.1 virtualbox-guest-tools-debuginfo-5.0.36-37.1 virtualbox-guest-x11-5.0.36-37.1 virtualbox-guest-x11-debuginfo-5.0.36-37.1 virtualbox-host-kmp-default-5.0.36_k4.1.38_50-37.1 virtualbox-host-kmp-default-debuginfo-5.0.36_k4.1.38_50-37.1 virtualbox-qt-5.0.36-37.1 virtualbox-qt-debuginfo-5.0.36-37.1 virtualbox-websrv-5.0.36-37.1 virtualbox-websrv-debuginfo-5.0.36-37.1 References:

1 0

openSUSE-RU-2017:0824-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0824-1 Rating: moderate References: #1004094 #1006687 #1019470 #1022014 #1022047 #1025598 #995936 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for systemd provides the following fixes: - core: Fix memory leak in transient units. (bsc#1025598) - core: Destroy all name watching bus slots when we are kicked off the bus. (bsc#1006687) - sd-event: Fix incorrect assertion. (bsc#995936, bsc#1022014) - journald: Don't flush to /var/log/journal before we get asked to. (bsc#1004094) - core: Downgrade warning about duplicate device names. (bsc#1022047) - units: Remove no longer needed ldconfig service. (bsc#1019470) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-379=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libsystemd0-228-25.1 libsystemd0-debuginfo-228-25.1 libsystemd0-mini-228-25.1 libsystemd0-mini-debuginfo-228-25.1 libudev-devel-228-25.1 libudev-mini-devel-228-25.1 libudev-mini1-228-25.1 libudev-mini1-debuginfo-228-25.1 libudev1-228-25.1 libudev1-debuginfo-228-25.1 nss-myhostname-228-25.1 nss-myhostname-debuginfo-228-25.1 nss-mymachines-228-25.1 nss-mymachines-debuginfo-228-25.1 systemd-228-25.1 systemd-debuginfo-228-25.1 systemd-debugsource-228-25.1 systemd-devel-228-25.1 systemd-logger-228-25.1 systemd-mini-228-25.1 systemd-mini-debuginfo-228-25.1 systemd-mini-debugsource-228-25.1 systemd-mini-devel-228-25.1 systemd-mini-sysvinit-228-25.1 systemd-sysvinit-228-25.1 udev-228-25.1 udev-debuginfo-228-25.1 udev-mini-228-25.1 udev-mini-debuginfo-228-25.1 - openSUSE Leap 42.2 (x86_64): libsystemd0-32bit-228-25.1 libsystemd0-debuginfo-32bit-228-25.1 libudev1-32bit-228-25.1 libudev1-debuginfo-32bit-228-25.1 nss-myhostname-32bit-228-25.1 nss-myhostname-debuginfo-32bit-228-25.1 systemd-32bit-228-25.1 systemd-debuginfo-32bit-228-25.1 - openSUSE Leap 42.2 (noarch): systemd-bash-completion-228-25.1 systemd-mini-bash-completion-228-25.1 References: https://bugzilla.suse.com/1004094 https://bugzilla.suse.com/1006687 https://bugzilla.suse.com/1019470 https://bugzilla.suse.com/1022014 https://bugzilla.suse.com/1022047 https://bugzilla.suse.com/1025598 https://bugzilla.suse.com/995936

1 0

openSUSE-RU-2017:0823-1: Recommended update for NetworkManager-gnome
by maintenance＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Recommended Update: Recommended update for NetworkManager-gnome ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0823-1 Rating: low References: #1003069 #1009019 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for NetworkManager-gnome fixes the following issues: - NetworkManager stored passwords prevent wifi functionality (bsc#1003069) - Add support for plain MSCHAPV2 as inner authentication method when using TTLS as outer authentication method (bsc#1009019) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-378=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): NetworkManager-appindicator-1.0.10-13.1 NetworkManager-appindicator-debuginfo-1.0.10-13.1 NetworkManager-appindicator-debugsource-1.0.10-13.1 NetworkManager-connection-editor-1.0.10-13.1 NetworkManager-connection-editor-debuginfo-1.0.10-13.1 NetworkManager-gnome-1.0.10-13.1 NetworkManager-gnome-debuginfo-1.0.10-13.1 NetworkManager-gnome-debugsource-1.0.10-13.1 libnm-gtk-devel-1.0.10-13.1 libnm-gtk0-1.0.10-13.1 libnm-gtk0-debuginfo-1.0.10-13.1 typelib-1_0-NMGtk-1_0-1.0.10-13.1 - openSUSE Leap 42.2 (noarch): NetworkManager-gnome-lang-1.0.10-13.1 References: https://bugzilla.suse.com/1003069 https://bugzilla.suse.com/1009019

1 0

openSUSE-RU-2017:0822-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0822-1 Rating: moderate References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for VirtualBox provides version 5.1.18 and fixes the following issues: - API: Fixed snapshot handling of medium attachments and PCI device attachments. - API: Make 32-bit Windows guests in raw mode boot again if the ICH9 chipset is used. CPUID/HTT bit set. - GUI: Better error handling on the global settings / network / host-only / DHCP server settings. - GUI: Fixes for full-screen with multiple screens. - GUI: Hide the mini-toolbar from the taskbar and the pager on certain X11 hosts. - ICH9: Fixed incorrect initialization of the primary bus for PCI bridges. - Linux Additions: Added vboxsf FS modules alias. - Linux Additions: Fix for the shared folders kernel module to compile on Linux 4.10. - Linux Additions: Properly install the Linux kernel module override rule on distributions without /etc/depmod.d. - Linux hosts: Added an action for opening the VM manager window to the .desktop file. - Linux hosts: Fixed autostart service script. - Linux hosts / guests: Linux 4.11 compile fixes. - Linux Installers: Do not rebuild kernel modules unnecessarily. - NAT network: Fixed two potential crashes in the DHCP server. - OVF: Fixes for exporting and importing appliances with many disks. - OVF: When importing an appliance handle more than 10 network adapters if the OVA was created by VirtualBox. - Shared Folders: Fixed access to long pathes. (Windows guests only) - Shared Folders: Fixed case insensitive filename access. (Windows guests only) - USB: Fixed not being able to attach certain USB devices having invalid characters in the device strings. - USB: Several fixes for the USB/IP support. - VBoxBugReport: Fixed VM log collection issue. - VBoxManage: Fixed regression with modifyhd --resize. - VBoxSVC: Fixed another crash during shutdown under rare circumstances. - VMM: Another fix for handling certain MSRs on ancient CPUs without VT-x support for MSR bitmaps. - VMM: Don't access the MSR_IA32_SMM_MONITOR_CTL MSR if dual-monitor treatment is not available. - VMM: Fixed a bug in call gate emulation. - VMM: Fixed a sporadic guest hang under certain conditions. - VMM: Fixed VERR_SSM_LOAD_CPUID_MISMATCH errors when restoring a saved state with SMP guests on hosts without the - VMM: FWAIT instruction fix. - Windows Additions: Fixed a crash with recent Windows 10 builds if 3D is disabled. - Windows Additions: Fixed automatic logins for Windows Vista and newer. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-386=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): python-virtualbox-5.1.18-19.1 python-virtualbox-debuginfo-5.1.18-19.1 virtualbox-5.1.18-19.1 virtualbox-debuginfo-5.1.18-19.1 virtualbox-debugsource-5.1.18-19.1 virtualbox-devel-5.1.18-19.1 virtualbox-guest-kmp-default-5.1.18_k4.4.49_16-19.1 virtualbox-guest-kmp-default-debuginfo-5.1.18_k4.4.49_16-19.1 virtualbox-guest-tools-5.1.18-19.1 virtualbox-guest-tools-debuginfo-5.1.18-19.1 virtualbox-guest-x11-5.1.18-19.1 virtualbox-guest-x11-debuginfo-5.1.18-19.1 virtualbox-host-kmp-default-5.1.18_k4.4.49_16-19.1 virtualbox-host-kmp-default-debuginfo-5.1.18_k4.4.49_16-19.1 virtualbox-qt-5.1.18-19.1 virtualbox-qt-debuginfo-5.1.18-19.1 virtualbox-websrv-5.1.18-19.1 virtualbox-websrv-debuginfo-5.1.18-19.1 - openSUSE Leap 42.2 (noarch): virtualbox-guest-desktop-icons-5.1.18-19.1 virtualbox-host-source-5.1.18-19.1 References:

1 0

openSUSE-SU-2017:0821-1: moderate: Security update for qbittorrent
by opensuse-security＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Security Update: Security update for qbittorrent ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0821-1 Rating: moderate References: #1028072 #1028073 Cross-References: CVE-2017-6503 CVE-2017-6504 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update to qbittorrent 3.3.11 fixes the security issues and bugs. The following vulnerabilities were fixed: - CVE-2017-6504: WebUI did not set the X-Frame-Options header (bsc#1028073) - CVE-2017-6503: WebUI did not escape many values, allowing for XSS (bsc#1028072) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-381=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-381=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): qbittorrent-3.3.11-2.3.1 qbittorrent-debuginfo-3.3.11-2.3.1 qbittorrent-debugsource-3.3.11-2.3.1 qbittorrent-nox-3.3.11-2.3.1 qbittorrent-nox-debuginfo-3.3.11-2.3.1 - openSUSE Leap 42.1 (i586 x86_64): qbittorrent-3.3.11-6.1 qbittorrent-debuginfo-3.3.11-6.1 qbittorrent-debugsource-3.3.11-6.1 qbittorrent-nox-3.3.11-6.1 qbittorrent-nox-debuginfo-3.3.11-6.1 References: https://www.suse.com/security/cve/CVE-2017-6503.html https://www.suse.com/security/cve/CVE-2017-6504.html https://bugzilla.suse.com/1028072 https://bugzilla.suse.com/1028073

1 0

openSUSE-SU-2017:0820-1: Security update for partclone
by opensuse-security＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Security Update: Security update for partclone ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0820-1 Rating: low References: #1028904 Cross-References: CVE-2017-6596 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for partclone fixes the following minor security issue: - CVE-2017-6596: A malicious user could have exploited a heap-based buffer overflow vulnerability by supplying a specially crafted image to cause a denial of service (boo#1028904) The following non-security changes are included: - Support for fuse Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-389=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-389=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): partclone-0.3.5a-2.3.1 partclone-debuginfo-0.3.5a-2.3.1 partclone-debugsource-0.3.5a-2.3.1 - openSUSE Leap 42.2 (noarch): partclone-lang-0.3.5a-2.3.1 - openSUSE Leap 42.1 (i586 x86_64): partclone-0.3.5a-7.1 partclone-debuginfo-0.3.5a-7.1 partclone-debugsource-0.3.5a-7.1 - openSUSE Leap 42.1 (noarch): partclone-lang-0.3.5a-7.1 References: https://www.suse.com/security/cve/CVE-2017-6596.html https://bugzilla.suse.com/1028904

1 0

openSUSE-SU-2017:0819-1: Security update for tcpreplay
by opensuse-security＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Security Update: Security update for tcpreplay ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0819-1 Rating: low References: #1028234 Cross-References: CVE-2017-6429 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tcpreplay fixes the following issues: - CVE-2017-6429: Buffer overflow in Tcpcapinfo utility triggered by a too large packet (boo#1028234) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-390=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): tcpreplay-4.1.2-5.3.1 tcpreplay-debuginfo-4.1.2-5.3.1 tcpreplay-debugsource-4.1.2-5.3.1 References: https://www.suse.com/security/cve/CVE-2017-6429.html https://bugzilla.suse.com/1028234

1 0

openSUSE-RU-2017:0818-1: moderate: Recommended update for sblim-sfcb
by maintenance＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Recommended Update: Recommended update for sblim-sfcb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0818-1 Rating: moderate References: #1018324 #1023820 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for sblim-sfcb provides the following fixes: - Revert mistaken change that disabled basic authentication on default install. (bsc#1023820) - Reference correct service name for service restarts on upgrades. (bsc#1018324) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-387=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-387=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): sblim-sfcb-1.4.8-6.3.1 sblim-sfcb-debuginfo-1.4.8-6.3.1 sblim-sfcb-debugsource-1.4.8-6.3.1 - openSUSE Leap 42.1 (i586 x86_64): sblim-sfcb-1.4.8-6.1 sblim-sfcb-debuginfo-1.4.8-6.1 sblim-sfcb-debugsource-1.4.8-6.1 References: https://bugzilla.suse.com/1018324 https://bugzilla.suse.com/1023820

1 0

openSUSE-RU-2017:0816-1: moderate: Recommended update for gnuhealth, tryton, trytond
by maintenance＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Recommended Update: Recommended update for gnuhealth, tryton, trytond ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0816-1 Rating: moderate References: #479383 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnuhealth, tryton, trytond fixes the following issues: boo#1026365: pediatrics growth charts do not work gnuhealth was updated to 3.0.7. trytond was updated to 3.8.10. tryton was updated to 3.8.14. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-383=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): gnuhealth-3.0.7-11.3.1 tryton-3.8.14-10.3.1 trytond-3.8.10-9.3.1 References: https://bugzilla.suse.com/479383

1 0

openSUSE-SU-2017:0815-1: moderate: Security update for mxml
by opensuse-security＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Security Update: Security update for mxml ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0815-1 Rating: moderate References: #979205 #979206 Cross-References: CVE-2016-4570 CVE-2016-4571 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for mxml fixes the following issues: - CVE-2016-4570: Specially crafted XML files could have caused stack exhaustation (bsc#979205) - CVE-2016-4571: Specially crafted XML files could have caused stack exhaustation (bsc#979206) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-380=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-380=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libmxml1-2.9-5.3.1 libmxml1-debuginfo-2.9-5.3.1 mxml-2.9-5.3.1 mxml-debuginfo-2.9-5.3.1 mxml-debugsource-2.9-5.3.1 mxml-devel-2.9-5.3.1 - openSUSE Leap 42.2 (x86_64): libmxml1-32bit-2.9-5.3.1 libmxml1-debuginfo-32bit-2.9-5.3.1 - openSUSE Leap 42.1 (i586 x86_64): libmxml1-2.9-5.1 libmxml1-debuginfo-2.9-5.1 mxml-2.9-5.1 mxml-debuginfo-2.9-5.1 mxml-debugsource-2.9-5.1 mxml-devel-2.9-5.1 - openSUSE Leap 42.1 (x86_64): libmxml1-32bit-2.9-5.1 libmxml1-debuginfo-32bit-2.9-5.1 References: https://www.suse.com/security/cve/CVE-2016-4570.html https://www.suse.com/security/cve/CVE-2016-4571.html https://bugzilla.suse.com/979205 https://bugzilla.suse.com/979206

1 0

openSUSE-OU-2017:0814-1: moderate: Add gssproxy to the SUSE Package Hub
by maintenance＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Optional Update: Add gssproxy to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0814-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update makes gssproxy available in the SUSE Package Hub. gssproxy is a daemon for managing gss-api requests, as used for NFS service with Kerberos authentication Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-377=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): gssproxy-0.7.0-2.1 References:

1 0

openSUSE-OU-2017:0813-1: Add munin to the SUSE Package Hub
by maintenance＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Optional Update: Add munin to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0813-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update provides munin for the SUSE Package Hub. Munin is a Network-wide graphing framework (grapher/gatherer). html2text and perl-HTML-Template are supplied as dependencies. html2text is a tool to convert HTML to ASCII. perl-HTML-Template is a Perl module for a HTML-like templating language. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-376=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): html2text-1.3.2a-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): munin-2.0.32-2.1 munin-node-2.0.32-2.1 perl-HTML-Template-2.95-2.1 References:

1 0

openSUSE-RU-2017:0812-1: Recommended update for timezone
by maintenance＠opensuse.org 26 Mar '17

26 Mar '17

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0812-1 Rating: low References: #1030417 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides the latest timezone information (2017b) for your system, including following changes: - Haiti resumed observance of DST in 2017. - Liberia changed from -004430 to +00 on 1972-01-07, not 1972-05-01. - Use "MMT" to abbreviate Liberia's time zone before 1972. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-374=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-374=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): timezone-2017b-39.3.1 timezone-debuginfo-2017b-39.3.1 timezone-debugsource-2017b-39.3.1 - openSUSE Leap 42.2 (noarch): timezone-java-2017b-0.39.3.1 - openSUSE Leap 42.1 (i586 x86_64): timezone-2017b-40.1 timezone-debuginfo-2017b-40.1 timezone-debugsource-2017b-40.1 - openSUSE Leap 42.1 (noarch): timezone-java-2017b-0.40.1 References: https://bugzilla.suse.com/1030417

1 0

openSUSE-RU-2017:0811-1: moderate: Recommended update for wireless-regdb
by maintenance＠opensuse.org 26 Mar '17

26 Mar '17

openSUSE Recommended Update: Recommended update for wireless-regdb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0811-1 Rating: moderate References: #1030085 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for wireless-regdb brings the latest version of regulatory domain data for wireless communication devices. Among other things, the following issues have been fixed: - Update rules for Australia (AU) and add 60GHz rules - Update 5 GHz rules for Canada - Remove DFS requirement for India (IN) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-375=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-375=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): wireless-regdb-2017.03.07-3.5.1 - openSUSE Leap 42.1 (noarch): wireless-regdb-2017.03.07-5.1 References: https://bugzilla.suse.com/1030085

1 0

openSUSE-RU-2017:0810-1: Recommended update for clamav-database
by maintenance＠opensuse.org 26 Mar '17

26 Mar '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0810-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh March 20th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-373=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-373=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201703200005-54.3.1 - openSUSE Leap 42.1 (noarch): clamav-database-201703200005-234.1 References:

1 0

openSUSE-RU-2017:0793-1: Recommended update for spice-gtk
by maintenance＠opensuse.org 22 Mar '17

22 Mar '17

openSUSE Recommended Update: Recommended update for spice-gtk ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0793-1 Rating: low References: #1010188 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spice-gtk fixes the following issue: - Fix virt-manager crash when used over ssh X redirection (bsc#1010188) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-370=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): spice-gtk-lang-0.31-7.1 - openSUSE Leap 42.2 (x86_64): libspice-client-glib-2_0-8-0.31-7.1 libspice-client-glib-2_0-8-debuginfo-0.31-7.1 libspice-client-glib-helper-0.31-7.1 libspice-client-glib-helper-debuginfo-0.31-7.1 libspice-client-gtk-2_0-4-0.31-7.1 libspice-client-gtk-2_0-4-debuginfo-0.31-7.1 libspice-client-gtk-3_0-4-0.31-7.1 libspice-client-gtk-3_0-4-debuginfo-0.31-7.1 libspice-controller0-0.31-7.1 libspice-controller0-debuginfo-0.31-7.1 python-SpiceClientGtk-0.31-7.1 python-SpiceClientGtk-debuginfo-0.31-7.1 spice-gtk-0.31-7.1 spice-gtk-debuginfo-0.31-7.1 spice-gtk-debugsource-0.31-7.1 spice-gtk-devel-0.31-7.1 typelib-1_0-SpiceClientGlib-2_0-0.31-7.1 typelib-1_0-SpiceClientGtk-2_0-0.31-7.1 typelib-1_0-SpiceClientGtk-3_0-0.31-7.1 References: https://bugzilla.suse.com/1010188

1 0

openSUSE-SU-2017:0792-1: important: Security update for mbedtls
by opensuse-security＠opensuse.org 22 Mar '17

22 Mar '17

openSUSE Security Update: Security update for mbedtls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0792-1 Rating: important References: #1029017 Cross-References: CVE-2017-2784 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update to mbedtls 1.3.19 fixes security issues and bugs. The following vulnerability was fixed: CVE-2017-2784: A remote user could have used a specially crafted certificate to cause mbedtls to free a buffer allocated on the stack when verifying the validity of public key with a secp224k1 curve, which could have allowed remote code execution on some platforms (boo#1029017) The following non-security changes are included: - Add checks to prevent signature forgeries for very large messages while using RSA through the PK module in 64-bit systems. - Fixed potential livelock during the parsing of a CRL in PEM format Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-372=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libmbedtls9-1.3.19-5.1 mbedtls-devel-1.3.19-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): libmbedtls9-debuginfo-1.3.19-5.1 mbedtls-debugsource-1.3.19-5.1 References: https://www.suse.com/security/cve/CVE-2017-2784.html https://bugzilla.suse.com/1029017

1 0

openSUSE-RU-2017:0791-1: Recommended update for plymouth
by maintenance＠opensuse.org 22 Mar '17

22 Mar '17

openSUSE Recommended Update: Recommended update for plymouth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0791-1 Rating: low References: #955227 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for plymouth fixes the following issues: - Write all escape sequences to the devices of the system console but do filter it for the boot log file (bsc#955227) - Avoid allocating/freeing memory for each line of input This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-369=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libply-boot-client4-0.9.2-4.1 libply-boot-client4-debuginfo-0.9.2-4.1 libply-splash-core4-0.9.2-4.1 libply-splash-core4-debuginfo-0.9.2-4.1 libply-splash-graphics4-0.9.2-4.1 libply-splash-graphics4-debuginfo-0.9.2-4.1 libply4-0.9.2-4.1 libply4-debuginfo-0.9.2-4.1 plymouth-0.9.2-4.1 plymouth-debuginfo-0.9.2-4.1 plymouth-debugsource-0.9.2-4.1 plymouth-devel-0.9.2-4.1 plymouth-dracut-0.9.2-4.1 plymouth-plugin-fade-throbber-0.9.2-4.1 plymouth-plugin-fade-throbber-debuginfo-0.9.2-4.1 plymouth-plugin-label-0.9.2-4.1 plymouth-plugin-label-debuginfo-0.9.2-4.1 plymouth-plugin-label-ft-0.9.2-4.1 plymouth-plugin-label-ft-debuginfo-0.9.2-4.1 plymouth-plugin-script-0.9.2-4.1 plymouth-plugin-script-debuginfo-0.9.2-4.1 plymouth-plugin-space-flares-0.9.2-4.1 plymouth-plugin-space-flares-debuginfo-0.9.2-4.1 plymouth-plugin-throbgress-0.9.2-4.1 plymouth-plugin-throbgress-debuginfo-0.9.2-4.1 plymouth-plugin-tribar-0.9.2-4.1 plymouth-plugin-tribar-debuginfo-0.9.2-4.1 plymouth-plugin-two-step-0.9.2-4.1 plymouth-plugin-two-step-debuginfo-0.9.2-4.1 plymouth-scripts-0.9.2-4.1 plymouth-x11-renderer-0.9.2-4.1 plymouth-x11-renderer-debuginfo-0.9.2-4.1 - openSUSE Leap 42.2 (noarch): plymouth-theme-fade-in-0.9.2-4.1 plymouth-theme-script-0.9.2-4.1 plymouth-theme-solar-0.9.2-4.1 plymouth-theme-spinfinity-0.9.2-4.1 plymouth-theme-spinner-0.9.2-4.1 plymouth-theme-tribar-0.9.2-4.1 References: https://bugzilla.suse.com/955227

1 0

openSUSE-SU-2017:0790-1: important: Security update for mbedtls
by opensuse-security＠opensuse.org 22 Mar '17

22 Mar '17

openSUSE Security Update: Security update for mbedtls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0790-1 Rating: important References: #1029017 Cross-References: CVE-2017-2784 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update to mbedtls 1.3.19 fixes security issues and bugs. The following vulnerability was fixed: CVE-2017-2784: A remote user could have used a specially crafted certificate to cause mbedtls to free a buffer allocated on the stack when verifying the validity of public key with a secp224k1 curve, which could have allowed remote code execution on some platforms (boo#1029017) The following non-security changes are included: - Add checks to prevent signature forgeries for very large messages while using RSA through the PK module in 64-bit systems. - Fixed potential livelock during the parsing of a CRL in PEM format Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-372=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-372=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libmbedtls9-1.3.19-15.1 libmbedtls9-debuginfo-1.3.19-15.1 mbedtls-debugsource-1.3.19-15.1 mbedtls-devel-1.3.19-15.1 - openSUSE Leap 42.2 (x86_64): libmbedtls9-32bit-1.3.19-15.1 libmbedtls9-debuginfo-32bit-1.3.19-15.1 - openSUSE Leap 42.1 (i586 x86_64): libmbedtls9-1.3.19-15.1 libmbedtls9-debuginfo-1.3.19-15.1 mbedtls-debugsource-1.3.19-15.1 mbedtls-devel-1.3.19-15.1 - openSUSE Leap 42.1 (x86_64): libmbedtls9-32bit-1.3.19-15.1 libmbedtls9-debuginfo-32bit-1.3.19-15.1 References: https://www.suse.com/security/cve/CVE-2017-2784.html https://bugzilla.suse.com/1029017

1 0

openSUSE-RU-2017:0789-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 22 Mar '17

22 Mar '17

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0789-1 Rating: moderate References: #1012266 #1012591 #1013989 #1018399 #1020083 #909418 #912715 #945340 #963290 #990538 #997682 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 11 recommended fixes can now be installed. Description: This update for systemd provides the following fixes: - rule: Don't automatically online standby memory on s390x. (bsc#997682) - systemctl: Remove duplicate entries showed by list-dependencies. (bsc#1012266) - systemctl: Add ConsistsOf as the inverse of PartOf. (bsc#1020083) - man: Reword list-dependencies description. - man: Improve description of systemctl's --after/--before. - rules: Set SYSTEMD_READY=0 on DM_UDEV_DISABLE_OTHER_RULES_FLAG=1 only with ADD event. (bsc#963290, bsc#990538) - core: Make sure to not call device_is_bound_by_mounts() when dev is null. (bsc#1018399) - core: Make mount units from /proc/self/mountinfo possibly bind to a device. (bsc#909418, bsc#912715, bsc#945340) - core: Do not bind a mount unit to a device, if it was from mountinfo. - rules: Don't ignore CDROM devices even if not ready. - unit: Use weaker dependencies between mount and device units in --user mode. - rules: Clean up stale CD drive mounts after ejection. - core: Add dependencies to dynamically mounted mounts too. - fstab-generator: Remove bogus condition. (bsc#1013989) - coredumpctl: Let gdb handle the SIGINT signal. (bsc#1012591) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-371=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libgudev-1_0-0-210-104.1 libgudev-1_0-0-debuginfo-210-104.1 libgudev-1_0-devel-210-104.1 libudev-devel-210-104.1 libudev-mini-devel-210-104.1 libudev-mini1-210-104.1 libudev-mini1-debuginfo-210-104.1 libudev1-210-104.1 libudev1-debuginfo-210-104.1 nss-myhostname-210-104.1 nss-myhostname-debuginfo-210-104.1 systemd-210-104.1 systemd-debuginfo-210-104.1 systemd-debugsource-210-104.1 systemd-devel-210-104.1 systemd-journal-gateway-210-104.1 systemd-journal-gateway-debuginfo-210-104.1 systemd-logger-210-104.1 systemd-mini-210-104.1 systemd-mini-debuginfo-210-104.1 systemd-mini-debugsource-210-104.1 systemd-mini-devel-210-104.1 systemd-mini-sysvinit-210-104.1 systemd-sysvinit-210-104.1 typelib-1_0-GUdev-1_0-210-104.1 udev-210-104.1 udev-debuginfo-210-104.1 udev-mini-210-104.1 udev-mini-debuginfo-210-104.1 - openSUSE Leap 42.1 (x86_64): libgudev-1_0-0-32bit-210-104.1 libgudev-1_0-0-debuginfo-32bit-210-104.1 libudev1-32bit-210-104.1 libudev1-debuginfo-32bit-210-104.1 nss-myhostname-32bit-210-104.1 nss-myhostname-debuginfo-32bit-210-104.1 systemd-32bit-210-104.1 systemd-debuginfo-32bit-210-104.1 - openSUSE Leap 42.1 (noarch): systemd-bash-completion-210-104.1 References: https://bugzilla.suse.com/1012266 https://bugzilla.suse.com/1012591 https://bugzilla.suse.com/1013989 https://bugzilla.suse.com/1018399 https://bugzilla.suse.com/1020083 https://bugzilla.suse.com/909418 https://bugzilla.suse.com/912715 https://bugzilla.suse.com/945340 https://bugzilla.suse.com/963290 https://bugzilla.suse.com/990538 https://bugzilla.suse.com/997682

1 0

openSUSE-SU-2017:0765-1: important: Security update for Mozilla Firefox
by opensuse-security＠opensuse.org 20 Mar '17

20 Mar '17

openSUSE Security Update: Security update for Mozilla Firefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0765-1 Rating: important References: #1029822 Cross-References: CVE-2017-5428 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Mozilla Firefox was updated to 52.0.1 to fix one security issue: - CVE-2017-5428: integer overflow in createImageBitmap() (boo#1029822, MFSA 2017-08) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-368=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-368=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): MozillaFirefox-52.0.1-57.3.1 MozillaFirefox-branding-upstream-52.0.1-57.3.1 MozillaFirefox-buildsymbols-52.0.1-57.3.1 MozillaFirefox-debuginfo-52.0.1-57.3.1 MozillaFirefox-debugsource-52.0.1-57.3.1 MozillaFirefox-devel-52.0.1-57.3.1 MozillaFirefox-translations-common-52.0.1-57.3.1 MozillaFirefox-translations-other-52.0.1-57.3.1 - openSUSE Leap 42.1 (x86_64): MozillaFirefox-52.0.1-58.1 MozillaFirefox-branding-upstream-52.0.1-58.1 MozillaFirefox-buildsymbols-52.0.1-58.1 MozillaFirefox-debuginfo-52.0.1-58.1 MozillaFirefox-debugsource-52.0.1-58.1 MozillaFirefox-devel-52.0.1-58.1 MozillaFirefox-translations-common-52.0.1-58.1 MozillaFirefox-translations-other-52.0.1-58.1 References: https://www.suse.com/security/cve/CVE-2017-5428.html https://bugzilla.suse.com/1029822

1 0

openSUSE-RU-2017:0757-1: Recommended update for boost
by maintenance＠opensuse.org 20 Mar '17

20 Mar '17

openSUSE Recommended Update: Recommended update for boost ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0757-1 Rating: low References: #1004947 #1017048 #1019896 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for boost provides the following fixes: - Enable build of 32bit version of libboost_locale1_54_0. (bsc#1017048) - Ship ppc64le and s390x versions of libboost_random1_54_0. (bsc#1019896) The 32 bit libraries of libpsl-inifipath were built as a dependency. (bsc#1004947) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-367=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-367=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): boost-devel-1.54.0-15.1 infinipath-psm-debugsource-3.3-9.3.1 infinipath-psm-devel-3.3-9.3.1 libboost_atomic1_54_0-1.54.0-15.1 libboost_atomic1_54_0-debuginfo-1.54.0-15.1 libboost_chrono1_54_0-1.54.0-15.1 libboost_chrono1_54_0-debuginfo-1.54.0-15.1 libboost_context1_54_0-1.54.0-15.1 libboost_context1_54_0-debuginfo-1.54.0-15.1 libboost_date_time1_54_0-1.54.0-15.1 libboost_date_time1_54_0-debuginfo-1.54.0-15.1 libboost_filesystem1_54_0-1.54.0-15.1 libboost_filesystem1_54_0-debuginfo-1.54.0-15.1 libboost_graph1_54_0-1.54.0-15.1 libboost_graph1_54_0-debuginfo-1.54.0-15.1 libboost_graph_parallel1_54_0-1.54.0-15.1 libboost_graph_parallel1_54_0-debuginfo-1.54.0-15.1 libboost_iostreams1_54_0-1.54.0-15.1 libboost_iostreams1_54_0-debuginfo-1.54.0-15.1 libboost_locale1_54_0-1.54.0-15.1 libboost_locale1_54_0-debuginfo-1.54.0-15.1 libboost_log1_54_0-1.54.0-15.1 libboost_log1_54_0-debuginfo-1.54.0-15.1 libboost_math1_54_0-1.54.0-15.1 libboost_math1_54_0-debuginfo-1.54.0-15.1 libboost_mpi1_54_0-1.54.0-15.1 libboost_mpi1_54_0-debuginfo-1.54.0-15.1 libboost_program_options1_54_0-1.54.0-15.1 libboost_program_options1_54_0-debuginfo-1.54.0-15.1 libboost_python1_54_0-1.54.0-15.1 libboost_python1_54_0-debuginfo-1.54.0-15.1 libboost_random1_54_0-1.54.0-15.1 libboost_random1_54_0-debuginfo-1.54.0-15.1 libboost_regex1_54_0-1.54.0-15.1 libboost_regex1_54_0-debuginfo-1.54.0-15.1 libboost_serialization1_54_0-1.54.0-15.1 libboost_serialization1_54_0-debuginfo-1.54.0-15.1 libboost_signals1_54_0-1.54.0-15.1 libboost_signals1_54_0-debuginfo-1.54.0-15.1 libboost_system1_54_0-1.54.0-15.1 libboost_system1_54_0-debuginfo-1.54.0-15.1 libboost_test1_54_0-1.54.0-15.1 libboost_test1_54_0-debuginfo-1.54.0-15.1 libboost_thread1_54_0-1.54.0-15.1 libboost_thread1_54_0-debuginfo-1.54.0-15.1 libboost_timer1_54_0-1.54.0-15.1 libboost_timer1_54_0-debuginfo-1.54.0-15.1 libboost_wave1_54_0-1.54.0-15.1 libboost_wave1_54_0-debuginfo-1.54.0-15.1 libpsm_infinipath1-3.3-9.3.1 libpsm_infinipath1-debuginfo-3.3-9.3.1 - openSUSE Leap 42.2 (noarch): boost-doc-html-1.54.0-15.1 boost-doc-man-1.54.0-15.1 boost-doc-pdf-1.54.0-15.1 boost-license1_54_0-1.54.0-15.1 - openSUSE Leap 42.2 (x86_64): boost-devel-32bit-1.54.0-15.1 libboost_atomic1_54_0-32bit-1.54.0-15.1 libboost_atomic1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_context1_54_0-32bit-1.54.0-15.1 libboost_context1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_date_time1_54_0-32bit-1.54.0-15.1 libboost_date_time1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_filesystem1_54_0-32bit-1.54.0-15.1 libboost_filesystem1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_graph1_54_0-32bit-1.54.0-15.1 libboost_graph1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_graph_parallel1_54_0-32bit-1.54.0-15.1 libboost_graph_parallel1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_iostreams1_54_0-32bit-1.54.0-15.1 libboost_iostreams1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_locale1_54_0-32bit-1.54.0-15.1 libboost_locale1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_math1_54_0-32bit-1.54.0-15.1 libboost_math1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_mpi1_54_0-32bit-1.54.0-15.1 libboost_mpi1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_program_options1_54_0-32bit-1.54.0-15.1 libboost_program_options1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_python1_54_0-32bit-1.54.0-15.1 libboost_python1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_random1_54_0-32bit-1.54.0-15.1 libboost_random1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_regex1_54_0-32bit-1.54.0-15.1 libboost_regex1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_serialization1_54_0-32bit-1.54.0-15.1 libboost_serialization1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_signals1_54_0-32bit-1.54.0-15.1 libboost_signals1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_system1_54_0-32bit-1.54.0-15.1 libboost_system1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_test1_54_0-32bit-1.54.0-15.1 libboost_test1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_thread1_54_0-32bit-1.54.0-15.1 libboost_thread1_54_0-debuginfo-32bit-1.54.0-15.1 libboost_wave1_54_0-32bit-1.54.0-15.1 libboost_wave1_54_0-debuginfo-32bit-1.54.0-15.1 libpsm_infinipath1-32bit-3.3-9.3.1 libpsm_infinipath1-debuginfo-32bit-3.3-9.3.1 - openSUSE Leap 42.1 (i586 x86_64): boost-devel-1.54.0-16.1 infinipath-psm-debugsource-3.3-8.1 infinipath-psm-devel-3.3-8.1 libboost_atomic1_54_0-1.54.0-16.1 libboost_atomic1_54_0-debuginfo-1.54.0-16.1 libboost_chrono1_54_0-1.54.0-16.1 libboost_chrono1_54_0-debuginfo-1.54.0-16.1 libboost_context1_54_0-1.54.0-16.1 libboost_context1_54_0-debuginfo-1.54.0-16.1 libboost_date_time1_54_0-1.54.0-16.1 libboost_date_time1_54_0-debuginfo-1.54.0-16.1 libboost_filesystem1_54_0-1.54.0-16.1 libboost_filesystem1_54_0-debuginfo-1.54.0-16.1 libboost_graph1_54_0-1.54.0-16.1 libboost_graph1_54_0-debuginfo-1.54.0-16.1 libboost_graph_parallel1_54_0-1.54.0-16.1 libboost_graph_parallel1_54_0-debuginfo-1.54.0-16.1 libboost_iostreams1_54_0-1.54.0-16.1 libboost_iostreams1_54_0-debuginfo-1.54.0-16.1 libboost_locale1_54_0-1.54.0-16.1 libboost_locale1_54_0-debuginfo-1.54.0-16.1 libboost_log1_54_0-1.54.0-16.1 libboost_log1_54_0-debuginfo-1.54.0-16.1 libboost_math1_54_0-1.54.0-16.1 libboost_math1_54_0-debuginfo-1.54.0-16.1 libboost_mpi1_54_0-1.54.0-16.1 libboost_mpi1_54_0-debuginfo-1.54.0-16.1 libboost_program_options1_54_0-1.54.0-16.1 libboost_program_options1_54_0-debuginfo-1.54.0-16.1 libboost_python1_54_0-1.54.0-16.1 libboost_python1_54_0-debuginfo-1.54.0-16.1 libboost_random1_54_0-1.54.0-16.1 libboost_random1_54_0-debuginfo-1.54.0-16.1 libboost_regex1_54_0-1.54.0-16.1 libboost_regex1_54_0-debuginfo-1.54.0-16.1 libboost_serialization1_54_0-1.54.0-16.1 libboost_serialization1_54_0-debuginfo-1.54.0-16.1 libboost_signals1_54_0-1.54.0-16.1 libboost_signals1_54_0-debuginfo-1.54.0-16.1 libboost_system1_54_0-1.54.0-16.1 libboost_system1_54_0-debuginfo-1.54.0-16.1 libboost_test1_54_0-1.54.0-16.1 libboost_test1_54_0-debuginfo-1.54.0-16.1 libboost_thread1_54_0-1.54.0-16.1 libboost_thread1_54_0-debuginfo-1.54.0-16.1 libboost_timer1_54_0-1.54.0-16.1 libboost_timer1_54_0-debuginfo-1.54.0-16.1 libboost_wave1_54_0-1.54.0-16.1 libboost_wave1_54_0-debuginfo-1.54.0-16.1 libpsm_infinipath1-3.3-8.1 libpsm_infinipath1-debuginfo-3.3-8.1 - openSUSE Leap 42.1 (noarch): boost-doc-html-1.54.0-16.1 boost-doc-man-1.54.0-16.1 boost-doc-pdf-1.54.0-16.1 boost-license1_54_0-1.54.0-16.1 - openSUSE Leap 42.1 (x86_64): boost-devel-32bit-1.54.0-16.1 libboost_atomic1_54_0-32bit-1.54.0-16.1 libboost_atomic1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_context1_54_0-32bit-1.54.0-16.1 libboost_context1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_date_time1_54_0-32bit-1.54.0-16.1 libboost_date_time1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_filesystem1_54_0-32bit-1.54.0-16.1 libboost_filesystem1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_graph1_54_0-32bit-1.54.0-16.1 libboost_graph1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_graph_parallel1_54_0-32bit-1.54.0-16.1 libboost_graph_parallel1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_iostreams1_54_0-32bit-1.54.0-16.1 libboost_iostreams1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_locale1_54_0-32bit-1.54.0-16.1 libboost_locale1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_math1_54_0-32bit-1.54.0-16.1 libboost_math1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_mpi1_54_0-32bit-1.54.0-16.1 libboost_mpi1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_program_options1_54_0-32bit-1.54.0-16.1 libboost_program_options1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_python1_54_0-32bit-1.54.0-16.1 libboost_python1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_random1_54_0-32bit-1.54.0-16.1 libboost_random1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_regex1_54_0-32bit-1.54.0-16.1 libboost_regex1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_serialization1_54_0-32bit-1.54.0-16.1 libboost_serialization1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_signals1_54_0-32bit-1.54.0-16.1 libboost_signals1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_system1_54_0-32bit-1.54.0-16.1 libboost_system1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_test1_54_0-32bit-1.54.0-16.1 libboost_test1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_thread1_54_0-32bit-1.54.0-16.1 libboost_thread1_54_0-debuginfo-32bit-1.54.0-16.1 libboost_wave1_54_0-32bit-1.54.0-16.1 libboost_wave1_54_0-debuginfo-32bit-1.54.0-16.1 libpsm_infinipath1-32bit-3.3-8.1 libpsm_infinipath1-debuginfo-32bit-3.3-8.1 References: https://bugzilla.suse.com/1004947 https://bugzilla.suse.com/1017048 https://bugzilla.suse.com/1019896

1 0

openSUSE-RU-2017:0754-1: moderate: Recommended update for python-Coherence
by maintenance＠opensuse.org 20 Mar '17

20 Mar '17

openSUSE Recommended Update: Recommended update for python-Coherence ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0754-1 Rating: moderate References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for python-Coherence fixes the following issue: - Provide proper detection of twisted >= 16.0.0 to make Coherence run with Twisted 16.4.0. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-366=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): python-Coherence-0.6.6.2-16.1 References:

1 0

openSUSE-RU-2017:0753-1: important: Recommended update for wxhexeditor
by maintenance＠opensuse.org 20 Mar '17

20 Mar '17

openSUSE Recommended Update: Recommended update for wxhexeditor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0753-1 Rating: important References: #1022460 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for wxhexeditor fixes various segfaults and other issues: - Fixed MinGW32 compatibility. - Fixed GIANT file size detection. - Fixed read mode cosmetic issues and add some compare mode restrictions. - Removed right click into search and compare panels. - Fixed Assertion with zero sized files. - Fixed 0 sized file GoTo seek error. - Fixed some operations with 0 sized files. - Added selection after paste. - Fixed deleted TAG live on taglist error. - Fixed typo & allow find dialog to hide. - Fixed last comma with CopyAs Special Hex 0x with ",". - Fixed block deletion. - Implemented Portable mode. - Replaced SF.net links with wxHexEditor.org. - Fixed cosmetic typo. - Fixed Find Backward Wraparound SEGV. - Added support for Paste Hex with "\x00" notation. - Fixed FindAll double find cosmetic issue. - Fixed find result for zero offset location. - Fixed non-SSE2 environment build. - Removed ":" from tag dialogues. - Fixed desktop file. - Added Cancel button to Tag Edit Dialog. - Fixed FileSystemWatcher : operational right now. - Fixed more FileSystemWatcher issues. - Fixed FileWatcher for files open via CLI arg. - Replaced nullptr with old NULL for compatibility. - Fixed FindAll SEG fault and double find issues. - Fixed locale file. - Fixed thread kill on file close. - Fixed Disk Image Tools cosmetics - Refactored FIND functions with SSE2 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-358=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-358=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): wxhexeditor-lang-0.23+git20170312-11.1 - openSUSE Leap 42.2 (x86_64): wxhexeditor-0.23+git20170312-11.1 wxhexeditor-debuginfo-0.23+git20170312-11.1 wxhexeditor-debugsource-0.23+git20170312-11.1 - openSUSE Leap 42.1 (i586 x86_64): wxhexeditor-0.23+git20170312-7.1 wxhexeditor-debuginfo-0.23+git20170312-7.1 wxhexeditor-debugsource-0.23+git20170312-7.1 - openSUSE Leap 42.1 (noarch): wxhexeditor-lang-0.23+git20170312-7.1 References: https://bugzilla.suse.com/1022460

1 0

openSUSE-RU-2017:0752-1: moderate: Recommended update for apulse
by maintenance＠opensuse.org 20 Mar '17

20 Mar '17

openSUSE Recommended Update: Recommended update for apulse ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0752-1 Rating: moderate References: #1028547 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apulse fixes the following issues: - Make playback in Firefox working, including volume changing (boo#1028547). - Reimplement snd_pcm_avail(), which is missing in older versions of alsa-lib. - Make reported buffer sizes to be multiple of frame sizes. - Stop crashing in pa_stream_disconnect() if initialisation has failed. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-363=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apulse-0.1.8-3.1 apulse-debuginfo-0.1.8-3.1 apulse-debugsource-0.1.8-3.1 - openSUSE Leap 42.2 (x86_64): apulse-32bit-0.1.8-3.1 apulse-debuginfo-32bit-0.1.8-3.1 References: https://bugzilla.suse.com/1028547

1 0

openSUSE-RU-2017:0751-1: moderate: Recommended update for enlightenment
by maintenance＠opensuse.org 20 Mar '17

20 Mar '17

openSUSE Recommended Update: Recommended update for enlightenment ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0751-1 Rating: moderate References: #1003939 #1008982 #983978 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for enlightenment provides version 0.21.7 and fixes the following issues: - Scaling set to 1.2 at start of the wizard. (boo#983978) - Added workaround to set LC_CTYPE. (boo#1008982) - Use keyboard layout from sys. (boo#1003939) For a detailed description of all fixes and improvements, please refer to the changelog. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-359=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): enlightenment-0.21.7-3.1 enlightenment-branding-upstream-0.21.7-3.1 enlightenment-debuginfo-0.21.7-3.1 enlightenment-debugsource-0.21.7-3.1 enlightenment-devel-0.21.7-3.1 enlightenment-doc-html-0.21.7-3.1 References: https://bugzilla.suse.com/1003939 https://bugzilla.suse.com/1008982 https://bugzilla.suse.com/983978

1 0

openSUSE-RU-2017:0750-1: Recommended update for libtorrent-rasterbar
by maintenance＠opensuse.org 20 Mar '17

20 Mar '17

openSUSE Recommended Update: Recommended update for libtorrent-rasterbar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0750-1 Rating: low References: #1028448 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libtorrent-rasterbar provides version 1.1.2 and fixes the following issues: - Fix a resumedata check issue with files with priority 0 (boo#1028448). - Fix invalid access when leaving seed-mode with outstanding hash jobs. - Fix an ABI compatibility issue introduced with preformatted entry type. - Add web_seed_name_lookup_retry to session_settings. - Slightly improve proxy settings backwards compatibility. - Add a function to get default settings. - Updating super seeding would include the torrent in state_update_alert. - Fix an issue where num_seeds could be greater than num_peers in torrent_status. - Finished non-seed torrents can also be in super-seeding mode. - Fix an issue related to unloading torrents. - Fix finished-time calculation. - Add missing min_memory_usage() and high_performance_seed() settings presets to Python. - Fix a stat cache issue that sometimes would produce incorrect resume data. - Storage optimization to peer classes. - Fix the torrent name in alerts of builds with deprecated functions. - Make torrent_info::is_valid() return false if a torrent failed to load. - Fix per-torrent rate limits for >256 peer classes. - Don't load user_agent and peer_fingerprint from session_state. - Fix the file rename issue with name prefix matching torrent name. - Fix division by zero when setting tick_interval > 1000. - Fix move_storage() to its own directory (would delete the files). - Fix the socks5 support for UDP. - Add a setting urlseed_max_request_bytes to handle large web seed requests. - Fix Python bindings crash with non-default C++11. - Add trackers from the add_torrent_params/magnet links to separate tiers. - Deprecate the mmap_cache feature. - Add an utility function for generating the peer ID fingerprint. - Fix a bug in last-seen-complete. - Remove a file size limit in the torrent_info filename constructor. - Fix tail-padding for the last file in create_torrent. - Don't send the user-agent in metadata http downloads or UPnP requests when in the anonymous mode. - Fix the internal resolve links lookup for mutable torrents. - Hint DHT bootstrap nodes of actual bootstrap request. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-362=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libtorrent-rasterbar-debugsource-1.1.2-6.1 libtorrent-rasterbar-devel-1.1.2-6.1 libtorrent-rasterbar-doc-1.1.2-6.1 libtorrent-rasterbar9-1.1.2-6.1 libtorrent-rasterbar9-debuginfo-1.1.2-6.1 python-libtorrent-rasterbar-1.1.2-6.1 python-libtorrent-rasterbar-debuginfo-1.1.2-6.1 References: https://bugzilla.suse.com/1028448

1 0

openSUSE-RU-2017:0749-1: Recommended update for coreutils
by maintenance＠opensuse.org 20 Mar '17

20 Mar '17

openSUSE Recommended Update: Recommended update for coreutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0749-1 Rating: low References: #1024551 #954222 #994678 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for coreutils provides the following fixes: - Fix hanging df when remote mounts are inaccessible. (bsc#954222) - Fix erroneous warnings with chmod(1) -R --changes. (bsc#994678) - Allow install(1) options -D and -t to be used together. (bsc#1024551) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-361=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): coreutils-8.22-6.1 coreutils-debuginfo-8.22-6.1 coreutils-debugsource-8.22-6.1 coreutils-testsuite-8.22-6.1 - openSUSE Leap 42.1 (noarch): coreutils-lang-8.22-6.1 References: https://bugzilla.suse.com/1024551 https://bugzilla.suse.com/954222 https://bugzilla.suse.com/994678

1 0

openSUSE-RU-2017:0748-1: moderate: Recommended update for lirc
by maintenance＠opensuse.org 20 Mar '17

20 Mar '17

openSUSE Recommended Update: Recommended update for lirc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0748-1 Rating: moderate References: #1008764 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lirc provides version 0.9.4c with many fixes and improvements. For a detailed description of all fixes and improvements, please refer to the changelog. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-360=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): libirrecord0-0.9.4c-3.1 libirrecord0-debuginfo-0.9.4c-3.1 liblirc0-0.9.4c-3.1 liblirc0-debuginfo-0.9.4c-3.1 liblirc_client0-0.9.4c-3.1 liblirc_client0-debuginfo-0.9.4c-3.1 liblirc_driver0-0.9.4c-3.1 liblirc_driver0-debuginfo-0.9.4c-3.1 lirc-core-0.9.4c-3.1 lirc-core-debuginfo-0.9.4c-3.1 lirc-debugsource-0.9.4c-3.1 lirc-devel-0.9.4c-3.1 lirc-disable-kernel-rc-0.9.4c-3.1 lirc-drv-portaudio-0.9.4c-3.1 lirc-drv-portaudio-debuginfo-0.9.4c-3.1 lirc-tools-gui-0.9.4c-3.1 lirc-tools-gui-debuginfo-0.9.4c-3.1 - openSUSE Leap 42.2 (noarch): lirc-config-0.9.4c-3.1 References: https://bugzilla.suse.com/1008764

1 0

openSUSE-RU-2017:0747-1: moderate: Recommended update for systemd-presets-branding-openSUSE
by maintenance＠opensuse.org 20 Mar '17

20 Mar '17

openSUSE Recommended Update: Recommended update for systemd-presets-branding-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0747-1 Rating: moderate References: #1011053 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for systemd-presets-branding-openSUSE fixes the following issues: - Enable socket/service(s) for lvm2. (boo#1011053) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-364=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-364=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): systemd-presets-branding-openSUSE-0.3.0-28.1 - openSUSE Leap 42.1 (noarch): systemd-presets-branding-openSUSE-0.3.0-28.1 References: https://bugzilla.suse.com/1011053

1 0

openSUSE-OU-2017:0746-1: Initial update for python-configparser
by maintenance＠opensuse.org 20 Mar '17

20 Mar '17

openSUSE Optional Update: Initial update for python-configparser ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0746-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update adds python-configparser to openSUSE Leap 42.2. The ConfigParser module backports functionality from Python 3.x to make it available for Python 2.7. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-365=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): python-configparser-3.5.0-2.1 References:

1 0

openSUSE-RU-2017:0745-1: Recommended update for calibre
by maintenance＠opensuse.org 20 Mar '17

20 Mar '17

openSUSE Recommended Update: Recommended update for calibre ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0745-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for calibre provides version 2.81.0 and fixes the following issues: - New Features + Amazon metadata download: Allow downloading amazon metadata from multiple sources. You can now configure the Amazon plugin via Preferences->Metadata download to use either the amazon servers, or various search engine caches to get the metadata. Should help with the recent CAPTCHA problems when downloading metadata from amazon. + Kobo driver: Add support for new firmware. + Edit Book: Spell Check dialog: Always add the original word as one of the spelling corrections, so that small edits to the word can be made easily. + Edit Book: Saved searched Dialog: Allow re-arranging the saved searches using drag and drop. + Implement auto update of builtin metadata download plugins, just as for recipes and Get Books plugins. Needed as the websites they get data from often change. + Edit Book: When inserting full screen images, use the actual image dimensions in the generated SVG code, when available. + Linux installer: Check that the umask is suitable before running the installer. Should fix breakage on systems where users have changed the user umask but neglected to also alter it for sudo. + Bulk metadata edit: Remove the control to delete specific formats as it is redundant. This functionality is already present by right clicking the Remove books button. + Add support for sideloading of KFX files created with the third-party KFX calibre plugin. + Edit book: Allow drag and drop of image files, stylesheets and html files into the editor to insert the appropriate and tags and add the files to the book automatically. + Edit Book: Spell Check: If there are no suggestions fill the suggested word box with the original word. + Viewer: Add a shortcut (Ctrl+F11) to show/hide toolbars. + OS X/Linux: Show an informational popup message when an Android device is plugged in that needs the user to tap Allow for the connection to work. + Conversion: Log options that are different from the defaults separately, for easy reference. - Bug Fixes + TXT Input: When detecting the encoding of txt files only use the first four kilobytes of text. Fixes excessively slow conversion of very large text files. + Get Books: Fix price not being displayed for books from Amazon dues to website changes. + GetBooks: Update Google Books plugin for website changes. + E-book viewer: Fix slow startup when recently opened files are on a slow/malfunctioning networked filesystem. + Google metadata download: Fix metadata not being found when the title of the book includes a sub-title. + Improve downloading of covers from the google books metadata source. + News download: Fix a bug that could cause a crash when downloading an SVG image. + Edit book: Fix a regression that caused pasting copied text from programs that generate both HTML and plain text when copying to paste the HTML in preference to the plain text. + E-mail delivery: Add a Message-ID header when sending emails. Reduces probability of mails sent from calibre being marked as spam. + Save to disk: Fix path shortening being applied to entire save template even when saving to singe directory. + Get Books: Update the Virualo and Publi store plugins for website changes. + Viewer: Fix regression that caused slow opening of some books with missing font/css/image files. + Viewer: Pressing Ctrl+F in fullscreen mode should show the controls. + Edit book: Do not allow creating multiple new files whose names differ only by case. + Viewer: Use heuristics to try to detect comics encoded as fixed layout EPUBs to ensure they are displayed as intended. + Conversion: Fix regression that broke conversion of some epub files when using the 'Remove first image' option. + Get Books: Update Kobo plugin for website changes. + Windows MTP driver: Fix error when enumerating device storage not being reported during debug device detection. + Tag Browser: When dragging and dropping a book onto a series increment the series number. + Fix crash when generating covers with Qt 5.8 on linux. + Fix Get Books result list and jobs list not being populated on Qt 5.8. + Fix importing rules in the coloring/icon rules dialog not enabling the apply button. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-357=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): calibre-2.81.0-10.1 calibre-debuginfo-2.81.0-10.1 calibre-debugsource-2.81.0-10.1 References:

1 0

openSUSE-RU-2017:0744-1: Recommended update for fate
by maintenance＠opensuse.org 19 Mar '17

19 Mar '17

openSUSE Recommended Update: Recommended update for fate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0744-1 Rating: low References: #1028004 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fate fixes the following issues: - Fix error when generating a query that uses milestones. (boo#1028004) - Remember DeltaDialog size over restart. - Make diffs in 'Changes' dialog colored. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-356=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-356=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): fate-1.5.5.8.1-24.1 fate-debuginfo-1.5.5.8.1-24.1 - openSUSE Leap 42.1 (i586 x86_64): fate-1.5.5.8.1-24.1 fate-debuginfo-1.5.5.8.1-24.1 References: https://bugzilla.suse.com/1028004

1 0

openSUSE-RU-2017:0743-1: Recommended update for fate
by maintenance＠opensuse.org 19 Mar '17

19 Mar '17

openSUSE Recommended Update: Recommended update for fate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0743-1 Rating: low References: #1028004 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fate fixes the following issues: - Fix error when generating a query that uses milestones. (boo#1028004) - Remember DeltaDialog size over restart. - Make diffs in 'Changes' dialog colored. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-356=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): fate-1.5.5.8.1-10.1 References: https://bugzilla.suse.com/1028004

1 0

openSUSE-SU-2017:0742-1: moderate: Security update for roundcubemail
by opensuse-security＠opensuse.org 19 Mar '17

19 Mar '17

openSUSE Security Update: Security update for roundcubemail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0742-1 Rating: moderate References: #1029035 Cross-References: CVE-2017-6820 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update to roundcubemail 1.1.8 fixes security issues and bugs. The following vulnerability was fixed: - CVE-2017-6820: XSS issue in handling of a style tag inside of an svg element (boo#1029035) The following bugs were fixed: * bug where mail content frame couldn't be reset in some corner cases * regression where groups with email address were resolved to its members' addresses * group/addressbook selection is retained on page refresh * signature couldn't be added above the quote in Firefox 51 * microseconds macro (u) in log_date_format works Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-355=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-355=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): roundcubemail-1.1.8-18.1 - openSUSE Leap 42.1 (noarch): roundcubemail-1.1.8-18.1 References: https://www.suse.com/security/cve/CVE-2017-6820.html https://bugzilla.suse.com/1029035

1 0

openSUSE-SU-2017:0741-1: moderate: Security update for putty
by opensuse-security＠opensuse.org 19 Mar '17

19 Mar '17

openSUSE Security Update: Security update for putty ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0741-1 Rating: moderate References: #1029256 Cross-References: CVE-2017-6542 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update to putty 0.68 fixes the following security issue: - CVE-2017-6542: If SSH agent forwarding is enabled, local attackers that are also able to connect to the UNIX domain socket could have overwritten heap data (boo#1029256) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-354=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-354=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): putty-0.68-12.1 putty-debuginfo-0.68-12.1 putty-debugsource-0.68-12.1 - openSUSE Leap 42.1 (i586 x86_64): putty-0.68-12.1 putty-debuginfo-0.68-12.1 putty-debugsource-0.68-12.1 References: https://www.suse.com/security/cve/CVE-2017-6542.html https://bugzilla.suse.com/1029256

1 0

openSUSE-SU-2017:0740-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 17 Mar '17

17 Mar '17

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0740-1 Rating: important References: #1028848 Cross-References: CVE-2017-5029 CVE-2017-5030 CVE-2017-5031 CVE-2017-5032 CVE-2017-5033 CVE-2017-5034 CVE-2017-5035 CVE-2017-5036 CVE-2017-5037 CVE-2017-5038 CVE-2017-5039 CVE-2017-5040 CVE-2017-5041 CVE-2017-5042 CVE-2017-5043 CVE-2017-5044 CVE-2017-5045 CVE-2017-5046 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: Chromium was updated to 57.0.2987.98 to fix security issues and bugs. The following vulnerabilities were fixed (bsc#1028848): - CVE-2017-5030: Memory corruption in V8 - CVE-2017-5031: Use after free in ANGLE - CVE-2017-5032: Out of bounds write in PDFium - CVE-2017-5029: Integer overflow in libxslt - CVE-2017-5034: Use after free in PDFium - CVE-2017-5035: Incorrect security UI in Omnibox - CVE-2017-5036: Use after free in PDFium - CVE-2017-5037: Multiple out of bounds writes in ChunkDemuxer - CVE-2017-5039: Use after free in PDFium - CVE-2017-5040: Information disclosure in V8 - CVE-2017-5041: Address spoofing in Omnibox - CVE-2017-5033: Bypass of Content Security Policy in Blink - CVE-2017-5042: Incorrect handling of cookies in Cast - CVE-2017-5038: Use after free in GuestView - CVE-2017-5043: Use after free in GuestView - CVE-2017-5044: Heap overflow in Skia - CVE-2017-5045: Information disclosure in XSS Auditor - CVE-2017-5046: Information disclosure in Blink The following non-security changes are included: - Address broken rendering on non-intel cards Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-353=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-57.0.2987.98-8.1 chromedriver-debuginfo-57.0.2987.98-8.1 chromium-57.0.2987.98-8.1 chromium-debuginfo-57.0.2987.98-8.1 chromium-debugsource-57.0.2987.98-8.1 References: https://www.suse.com/security/cve/CVE-2017-5029.html https://www.suse.com/security/cve/CVE-2017-5030.html https://www.suse.com/security/cve/CVE-2017-5031.html https://www.suse.com/security/cve/CVE-2017-5032.html https://www.suse.com/security/cve/CVE-2017-5033.html https://www.suse.com/security/cve/CVE-2017-5034.html https://www.suse.com/security/cve/CVE-2017-5035.html https://www.suse.com/security/cve/CVE-2017-5036.html https://www.suse.com/security/cve/CVE-2017-5037.html https://www.suse.com/security/cve/CVE-2017-5038.html https://www.suse.com/security/cve/CVE-2017-5039.html https://www.suse.com/security/cve/CVE-2017-5040.html https://www.suse.com/security/cve/CVE-2017-5041.html https://www.suse.com/security/cve/CVE-2017-5042.html https://www.suse.com/security/cve/CVE-2017-5043.html https://www.suse.com/security/cve/CVE-2017-5044.html https://www.suse.com/security/cve/CVE-2017-5045.html https://www.suse.com/security/cve/CVE-2017-5046.html https://bugzilla.suse.com/1028848

1 0

openSUSE-SU-2017:0739-1: moderate: Security update for irssi
by opensuse-security＠opensuse.org 17 Mar '17

17 Mar '17

openSUSE Security Update: Security update for irssi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0739-1 Rating: moderate References: #1029020 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update to irssi 1.0.2 fixes security issues and bugs. The following vulnerabilities were fixed: boo#1029020: Use after free while producing list of netjoins The following non-security changes are included: - Fix in command arg parser to detect missing arguments in tail place - Fix regression that broke incoming DCC file transfers - Fix issue with escaping \ in evaluated strings - improve UTF8 support in GRegex Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-352=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): irssi-1.0.2-21.1 irssi-devel-1.0.2-21.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le x86_64): irssi-debuginfo-1.0.2-21.1 irssi-debugsource-1.0.2-21.1 References: https://bugzilla.suse.com/1029020

1 0

openSUSE-SU-2017:0738-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 17 Mar '17

17 Mar '17

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0738-1 Rating: important References: #1028848 Cross-References: CVE-2017-5029 CVE-2017-5030 CVE-2017-5031 CVE-2017-5032 CVE-2017-5033 CVE-2017-5034 CVE-2017-5035 CVE-2017-5036 CVE-2017-5037 CVE-2017-5038 CVE-2017-5039 CVE-2017-5040 CVE-2017-5041 CVE-2017-5042 CVE-2017-5043 CVE-2017-5044 CVE-2017-5045 CVE-2017-5046 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: Chromium was updated to 57.0.2987.98 to fix security issues and bugs. The following vulnerabilities were fixed (bsc#1028848): - CVE-2017-5030: Memory corruption in V8 - CVE-2017-5031: Use after free in ANGLE - CVE-2017-5032: Out of bounds write in PDFium - CVE-2017-5029: Integer overflow in libxslt - CVE-2017-5034: Use after free in PDFium - CVE-2017-5035: Incorrect security UI in Omnibox - CVE-2017-5036: Use after free in PDFium - CVE-2017-5037: Multiple out of bounds writes in ChunkDemuxer - CVE-2017-5039: Use after free in PDFium - CVE-2017-5040: Information disclosure in V8 - CVE-2017-5041: Address spoofing in Omnibox - CVE-2017-5033: Bypass of Content Security Policy in Blink - CVE-2017-5042: Incorrect handling of cookies in Cast - CVE-2017-5038: Use after free in GuestView - CVE-2017-5043: Use after free in GuestView - CVE-2017-5044: Heap overflow in Skia - CVE-2017-5045: Information disclosure in XSS Auditor - CVE-2017-5046: Information disclosure in Blink The following non-security changes are included: - Address broken rendering on non-intel cards Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-353=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-353=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): chromedriver-57.0.2987.98-105.2 chromedriver-debuginfo-57.0.2987.98-105.2 chromium-57.0.2987.98-105.2 chromium-debuginfo-57.0.2987.98-105.2 chromium-debugsource-57.0.2987.98-105.2 - openSUSE Leap 42.1 (x86_64): chromedriver-57.0.2987.98-105.2 chromedriver-debuginfo-57.0.2987.98-105.2 chromium-57.0.2987.98-105.2 chromium-debuginfo-57.0.2987.98-105.2 chromium-debugsource-57.0.2987.98-105.2 References: https://www.suse.com/security/cve/CVE-2017-5029.html https://www.suse.com/security/cve/CVE-2017-5030.html https://www.suse.com/security/cve/CVE-2017-5031.html https://www.suse.com/security/cve/CVE-2017-5032.html https://www.suse.com/security/cve/CVE-2017-5033.html https://www.suse.com/security/cve/CVE-2017-5034.html https://www.suse.com/security/cve/CVE-2017-5035.html https://www.suse.com/security/cve/CVE-2017-5036.html https://www.suse.com/security/cve/CVE-2017-5037.html https://www.suse.com/security/cve/CVE-2017-5038.html https://www.suse.com/security/cve/CVE-2017-5039.html https://www.suse.com/security/cve/CVE-2017-5040.html https://www.suse.com/security/cve/CVE-2017-5041.html https://www.suse.com/security/cve/CVE-2017-5042.html https://www.suse.com/security/cve/CVE-2017-5043.html https://www.suse.com/security/cve/CVE-2017-5044.html https://www.suse.com/security/cve/CVE-2017-5045.html https://www.suse.com/security/cve/CVE-2017-5046.html https://bugzilla.suse.com/1028848

1 0

openSUSE-SU-2017:0737-1: moderate: Security update for irssi
by opensuse-security＠opensuse.org 17 Mar '17

17 Mar '17

openSUSE Security Update: Security update for irssi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0737-1 Rating: moderate References: #1029020 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update to irssi 1.0.2 fixes security issues and bugs. The following vulnerabilities were fixed: boo#1029020: Use after free while producing list of netjoins The following non-security changes are included: - Fix in command arg parser to detect missing arguments in tail place - Fix regression that broke incoming DCC file transfers - Fix issue with escaping \ in evaluated strings - improve UTF8 support in GRegex Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-352=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-352=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): irssi-1.0.2-15.1 irssi-debuginfo-1.0.2-15.1 irssi-debugsource-1.0.2-15.1 irssi-devel-1.0.2-15.1 - openSUSE Leap 42.1 (i586 x86_64): irssi-1.0.2-15.1 irssi-debuginfo-1.0.2-15.1 irssi-debugsource-1.0.2-15.1 irssi-devel-1.0.2-15.1 References: https://bugzilla.suse.com/1029020

1 0

openSUSE-RU-2017:0735-1: moderate: Recommended update for gtk3
by maintenance＠opensuse.org 17 Mar '17

17 Mar '17

openSUSE Recommended Update: Recommended update for gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0735-1 Rating: moderate References: #1021476 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The GTK3 library was updated to version 3.20.10, which brings many stability fixes. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-351=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gtk3-debugsource-3.20.10-3.1 gtk3-devel-3.20.10-3.1 gtk3-devel-debuginfo-3.20.10-3.1 gtk3-immodule-amharic-3.20.10-3.1 gtk3-immodule-amharic-debuginfo-3.20.10-3.1 gtk3-immodule-broadway-3.20.10-3.1 gtk3-immodule-broadway-debuginfo-3.20.10-3.1 gtk3-immodule-inuktitut-3.20.10-3.1 gtk3-immodule-inuktitut-debuginfo-3.20.10-3.1 gtk3-immodule-multipress-3.20.10-3.1 gtk3-immodule-multipress-debuginfo-3.20.10-3.1 gtk3-immodule-thai-3.20.10-3.1 gtk3-immodule-thai-debuginfo-3.20.10-3.1 gtk3-immodule-vietnamese-3.20.10-3.1 gtk3-immodule-vietnamese-debuginfo-3.20.10-3.1 gtk3-immodule-xim-3.20.10-3.1 gtk3-immodule-xim-debuginfo-3.20.10-3.1 gtk3-immodules-tigrigna-3.20.10-3.1 gtk3-immodules-tigrigna-debuginfo-3.20.10-3.1 gtk3-tools-3.20.10-3.1 gtk3-tools-debuginfo-3.20.10-3.1 libgtk-3-0-3.20.10-3.1 libgtk-3-0-debuginfo-3.20.10-3.1 typelib-1_0-Gtk-3_0-3.20.10-3.1 - openSUSE Leap 42.2 (x86_64): gtk3-devel-32bit-3.20.10-3.1 gtk3-devel-debuginfo-32bit-3.20.10-3.1 gtk3-immodule-amharic-32bit-3.20.10-3.1 gtk3-immodule-amharic-debuginfo-32bit-3.20.10-3.1 gtk3-immodule-inuktitut-32bit-3.20.10-3.1 gtk3-immodule-inuktitut-debuginfo-32bit-3.20.10-3.1 gtk3-immodule-multipress-32bit-3.20.10-3.1 gtk3-immodule-multipress-debuginfo-32bit-3.20.10-3.1 gtk3-immodule-thai-32bit-3.20.10-3.1 gtk3-immodule-thai-debuginfo-32bit-3.20.10-3.1 gtk3-immodule-vietnamese-32bit-3.20.10-3.1 gtk3-immodule-vietnamese-debuginfo-32bit-3.20.10-3.1 gtk3-immodule-xim-32bit-3.20.10-3.1 gtk3-immodule-xim-debuginfo-32bit-3.20.10-3.1 gtk3-immodules-tigrigna-32bit-3.20.10-3.1 gtk3-immodules-tigrigna-debuginfo-32bit-3.20.10-3.1 gtk3-tools-32bit-3.20.10-3.1 gtk3-tools-debuginfo-32bit-3.20.10-3.1 libgtk-3-0-32bit-3.20.10-3.1 libgtk-3-0-debuginfo-32bit-3.20.10-3.1 - openSUSE Leap 42.2 (noarch): gtk3-branding-openSUSE-42.1-3.1 gtk3-branding-upstream-3.20.10-3.1 gtk3-data-3.20.10-3.1 gtk3-lang-3.20.10-3.1 References: https://bugzilla.suse.com/1021476

1 0

openSUSE-RU-2017:0733-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 17 Mar '17

17 Mar '17

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0733-1 Rating: moderate References: #1028868 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spec-cleaner fixes the following issues: boo#1028868: kernel-firmware spec files would be incorrectly mangled Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-350=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-350=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): spec-cleaner-0.9.3-29.1 spec-cleaner-format_spec_file-0.9.3-29.1 - openSUSE Leap 42.1 (noarch): spec-cleaner-0.9.3-29.1 spec-cleaner-format_spec_file-0.9.3-29.1 References: https://bugzilla.suse.com/1028868

1 0

openSUSE-RU-2017:0711-1: Recommended update for jasper
by maintenance＠opensuse.org 16 Mar '17

16 Mar '17

openSUSE Recommended Update: Recommended update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0711-1 Rating: low References: #1028070 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for jasper provides the following fixes: - Add -D_BSD_SOURCE to fix redefinition of system types in jas_config.h, which could lead to build failures on ppc64le, s390 and s390x. (bsc#1028070) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-348=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-348=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): jasper-1.900.14-173.1 jasper-debuginfo-1.900.14-173.1 jasper-debugsource-1.900.14-173.1 libjasper-devel-1.900.14-173.1 libjasper1-1.900.14-173.1 libjasper1-debuginfo-1.900.14-173.1 - openSUSE Leap 42.2 (x86_64): libjasper1-32bit-1.900.14-173.1 libjasper1-debuginfo-32bit-1.900.14-173.1 - openSUSE Leap 42.1 (i586 x86_64): jasper-1.900.14-173.1 jasper-debuginfo-1.900.14-173.1 jasper-debugsource-1.900.14-173.1 libjasper-devel-1.900.14-173.1 libjasper1-1.900.14-173.1 libjasper1-debuginfo-1.900.14-173.1 - openSUSE Leap 42.1 (x86_64): libjasper1-32bit-1.900.14-173.1 libjasper1-debuginfo-32bit-1.900.14-173.1 References: https://bugzilla.suse.com/1028070

1 0

openSUSE-SU-2017:0708-1: moderate: Security update for dracut
by opensuse-security＠opensuse.org 16 Mar '17

16 Mar '17

openSUSE Security Update: Security update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0708-1 Rating: moderate References: #1005410 #1006118 #1007925 #1008340 #1017695 #986734 #986838 Cross-References: CVE-2016-8637 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This update for dracut fixes the following issues: Security issues fixed: - CVE-2016-8637: When the early microcode loading was enabled during initrd creation, the initrd would be read-only available for all users, allowing local users to retrieve secrets stored in the initial ramdisk. (bsc#1008340) Non security issues fixed: - Allow booting from degraded MD arrays with systemd. (bsc#1017695) - Start multipath services before local-fs-pre.target. (bsc#1005410, bsc#1006118, bsc#1007925, bsc#986734, bsc#986838) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-347=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): dracut-037-80.1 dracut-debuginfo-037-80.1 dracut-debugsource-037-80.1 dracut-fips-037-80.1 References: https://www.suse.com/security/cve/CVE-2016-8637.html https://bugzilla.suse.com/1005410 https://bugzilla.suse.com/1006118 https://bugzilla.suse.com/1007925 https://bugzilla.suse.com/1008340 https://bugzilla.suse.com/1017695 https://bugzilla.suse.com/986734 https://bugzilla.suse.com/986838

1 0

openSUSE-SU-2017:0707-1: important: Security update for qemu
by opensuse-security＠opensuse.org 16 Mar '17

16 Mar '17

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0707-1 Rating: important References: #1014702 #1015169 #1016779 #1017081 #1017084 #1020491 #1020589 #1020928 #1021129 #1021195 #1021481 #1022541 #1023004 #1023053 #1023073 #1023907 #1024972 #1026583 #977027 Cross-References: CVE-2016-10028 CVE-2016-10029 CVE-2016-10155 CVE-2016-9921 CVE-2016-9922 CVE-2017-2615 CVE-2017-2620 CVE-2017-5525 CVE-2017-5526 CVE-2017-5552 CVE-2017-5578 CVE-2017-5667 CVE-2017-5856 CVE-2017-5857 CVE-2017-5898 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves 15 vulnerabilities and has four fixes is now available. Description: This update for qemu fixes several issues. These security issues were fixed: - CVE-2017-5898: The CCID Card device emulator support was vulnerable to an integer overflow flaw allowing a privileged user to crash the Qemu process on the host resulting in DoS (bsc#1023907). - CVE-2017-5857: The Virtio GPU Device emulator support was vulnerable to a host memory leakage issue allowing a guest user to leak host memory resulting in DoS (bsc#1023073). - CVE-2017-2620: In CIRRUS_BLTMODE_MEMSYSSRC mode the bitblit copy routine cirrus_bitblt_cputovideo failed to check the memory region, allowing for an out-of-bounds write that allows for privilege escalation (bsc#1024972) - CVE-2017-2615: An error in the bitblt copy operation could have allowed a malicious guest administrator to cause an out of bounds memory access, possibly leading to information disclosure or privilege escalation (bsc#1023004) - CVE-2017-5856: The MegaRAID SAS 8708EM2 Host Bus Adapter emulation support was vulnerable to a memory leakage issue allowing a privileged user to leak host memory resulting in DoS (bsc#1023053) - CVE-2016-9921: The Cirrus CLGD 54xx VGA Emulator support was vulnerable to a divide by zero issue while copying VGA data. A privileged user inside guest could have used this flaw to crash the process instance on the host, resulting in DoS (bsc#1014702) - CVE-2016-9922: The Cirrus CLGD 54xx VGA Emulator support was vulnerable to a divide by zero issue while copying VGA data. A privileged user inside guest could have used this flaw to crash the process instance on the host, resulting in DoS (bsc#1014702) - CVE-2016-10029: The Virtio GPU Device emulator support was vulnerable to an OOB read issue allowing a guest user to crash the Qemu process instance resulting in Dos (bsc#1017081). - CVE-2016-10028: The Virtio GPU Device emulator support was vulnerable to an out of bounds memory access issue allowing a guest user to crash the Qemu process instance on a host, resulting in DoS (bsc#1017084). - CVE-2016-10155: The virtual hardware watchdog 'wdt_i6300esb' was vulnerable to a memory leakage issue allowing a privileged user to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1021129) - CVE-2017-5552: The Virtio GPU Device emulator support was vulnerable to a memory leakage issue allowing a guest user to leak host memory resulting in DoS (bsc#1021195). - CVE-2017-5578: The Virtio GPU Device emulator support was vulnerable to a memory leakage issue allowing a guest user to leak host memory resulting in DoS (bsc#1021481). - CVE-2017-5526: The ES1370 audio device emulation support was vulnerable to a memory leakage issue allowing a privileged user inside the guest to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1020589). - CVE-2017-5525: The ac97 audio device emulation support was vulnerable to a memory leakage issue allowing a privileged user inside the guest to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1020491). - CVE-2017-5667: The SDHCI device emulation support was vulnerable to an OOB heap access issue allowing a privileged user inside the guest to crash the Qemu process resulting in DoS or potentially execute arbitrary code with privileges of the Qemu process on the host (bsc#1022541). - CVE-2017-5898: The CCID Card device emulator support was vulnerable to an integer overflow allowing a privileged user inside the guest to crash the Qemu process resulting in DoS (bnc#1023907) These non-security issues were fixed: - Fix name of s390x specific sysctl configuration file to end with .conf (bsc#1026583) - XHCI fixes (bsc#977027) - Fixed rare race during s390x guest reboot - Fixed various inaccuracies in cirrus vga device emulation - Fixed cause of infrequent migration failures from bad virtio device state (bsc#1020928) - Fixed graphical update errors introduced by previous security fix (bsc#1016779) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-349=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): qemu-2.6.2-29.4 qemu-arm-2.6.2-29.4 qemu-arm-debuginfo-2.6.2-29.4 qemu-block-curl-2.6.2-29.4 qemu-block-curl-debuginfo-2.6.2-29.4 qemu-block-dmg-2.6.2-29.4 qemu-block-dmg-debuginfo-2.6.2-29.4 qemu-block-iscsi-2.6.2-29.4 qemu-block-iscsi-debuginfo-2.6.2-29.4 qemu-block-ssh-2.6.2-29.4 qemu-block-ssh-debuginfo-2.6.2-29.4 qemu-debugsource-2.6.2-29.4 qemu-extra-2.6.2-29.4 qemu-extra-debuginfo-2.6.2-29.4 qemu-guest-agent-2.6.2-29.4 qemu-guest-agent-debuginfo-2.6.2-29.4 qemu-kvm-2.6.2-29.4 qemu-lang-2.6.2-29.4 qemu-linux-user-2.6.2-29.1 qemu-linux-user-debuginfo-2.6.2-29.1 qemu-linux-user-debugsource-2.6.2-29.1 qemu-ppc-2.6.2-29.4 qemu-ppc-debuginfo-2.6.2-29.4 qemu-s390-2.6.2-29.4 qemu-s390-debuginfo-2.6.2-29.4 qemu-testsuite-2.6.2-29.8 qemu-tools-2.6.2-29.4 qemu-tools-debuginfo-2.6.2-29.4 qemu-x86-2.6.2-29.4 qemu-x86-debuginfo-2.6.2-29.4 - openSUSE Leap 42.2 (x86_64): qemu-block-rbd-2.6.2-29.4 qemu-block-rbd-debuginfo-2.6.2-29.4 - openSUSE Leap 42.2 (noarch): qemu-ipxe-1.0.0-29.4 qemu-seabios-1.9.1-29.4 qemu-sgabios-8-29.4 qemu-vgabios-1.9.1-29.4 References: https://www.suse.com/security/cve/CVE-2016-10028.html https://www.suse.com/security/cve/CVE-2016-10029.html https://www.suse.com/security/cve/CVE-2016-10155.html https://www.suse.com/security/cve/CVE-2016-9921.html https://www.suse.com/security/cve/CVE-2016-9922.html https://www.suse.com/security/cve/CVE-2017-2615.html https://www.suse.com/security/cve/CVE-2017-2620.html https://www.suse.com/security/cve/CVE-2017-5525.html https://www.suse.com/security/cve/CVE-2017-5526.html https://www.suse.com/security/cve/CVE-2017-5552.html https://www.suse.com/security/cve/CVE-2017-5578.html https://www.suse.com/security/cve/CVE-2017-5667.html https://www.suse.com/security/cve/CVE-2017-5856.html https://www.suse.com/security/cve/CVE-2017-5857.html https://www.suse.com/security/cve/CVE-2017-5898.html https://bugzilla.suse.com/1014702 https://bugzilla.suse.com/1015169 https://bugzilla.suse.com/1016779 https://bugzilla.suse.com/1017081 https://bugzilla.suse.com/1017084 https://bugzilla.suse.com/1020491 https://bugzilla.suse.com/1020589 https://bugzilla.suse.com/1020928 https://bugzilla.suse.com/1021129 https://bugzilla.suse.com/1021195 https://bugzilla.suse.com/1021481 https://bugzilla.suse.com/1022541 https://bugzilla.suse.com/1023004 https://bugzilla.suse.com/1023053 https://bugzilla.suse.com/1023073 https://bugzilla.suse.com/1023907 https://bugzilla.suse.com/1024972 https://bugzilla.suse.com/1026583 https://bugzilla.suse.com/977027

1 0

openSUSE-OU-2017:0699-1: moderate: Add docker-bench-security to the SUSE Package Hub
by maintenance＠opensuse.org 15 Mar '17

15 Mar '17

openSUSE Optional Update: Add docker-bench-security to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0699-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update adds docker-bench-security to the SUSE Package Hub. The package is a security auditing tool, implementing CIS Docker benchmark. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-346=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): docker-bench-security-1.3.0-2.1 References:

1 0

openSUSE-SU-2017:0690-1: important: Security update for MozillaFirefox, mozilla-nss
by opensuse-security＠opensuse.org 14 Mar '17

14 Mar '17

openSUSE Security Update: Security update for MozillaFirefox, mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0690-1 Rating: important References: #1028391 Cross-References: CVE-2017-5398 CVE-2017-5399 CVE-2017-5400 CVE-2017-5401 CVE-2017-5402 CVE-2017-5403 CVE-2017-5404 CVE-2017-5405 CVE-2017-5406 CVE-2017-5407 CVE-2017-5408 CVE-2017-5410 CVE-2017-5412 CVE-2017-5413 CVE-2017-5414 CVE-2017-5415 CVE-2017-5416 CVE-2017-5417 CVE-2017-5418 CVE-2017-5419 CVE-2017-5420 CVE-2017-5421 CVE-2017-5422 CVE-2017-5426 CVE-2017-5427 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 25 vulnerabilities is now available. Description: This update for MozillaFirefox and mozilla-nss fixes the following issues: MozillaFirefox was updated to Firefox 52.0 (boo#1028391) * requires NSS >= 3.28.3 * Pages containing insecure password fields now display a warning directly within username and password fields. * Send and open a tab from one device to another with Sync * Removed NPAPI support for plugins other than Flash. Silverlight, Java, Acrobat and the like are no longer supported. * Removed Battery Status API to reduce fingerprinting of users by trackers * MFSA 2017-05 CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP (bmo#1334933) CVE-2017-5401: Memory Corruption when handling ErrorResult (bmo#1328861) CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876) CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object (bmo#1340186) CVE-2017-5404: Use-after-free working with ranges in selections (bmo#1340138) CVE-2017-5406: Segmentation fault in Skia with canvas operations (bmo#1306890) CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters (bmo#1336622) CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping (bmo#1330687) CVE-2017-5408: Cross-origin reading of video captions in violation of CORS (bmo#1313711) CVE-2017-5412: Buffer overflow read in SVG filters (bmo#1328323) CVE-2017-5413: Segmentation fault during bidirectional operations (bmo#1337504) CVE-2017-5414: File picker can choose incorrect default directory (bmo#1319370) CVE-2017-5415: Addressbar spoofing through blob URL (bmo#1321719) CVE-2017-5416: Null dereference crash in HttpChannel (bmo#1328121) CVE-2017-5417: Addressbar spoofing by draging and dropping URLs (bmo#791597) CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running (bmo#1257361) CVE-2017-5427: Non-existent chrome.manifest file loaded during startup (bmo#1295542) CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses (bmo#1338876) CVE-2017-5419: Repeated authentication prompts lead to DOS attack (bmo#1312243) CVE-2017-5420: Javascript: URLs can obfuscate addressbar location (bmo#1284395) CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699) CVE-2017-5421: Print preview spoofing (bmo#1301876) CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink (bmo#1295002) CVE-2017-5399: Memory safety bugs fixed in Firefox 52 CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and Firefox ESR 45.8 mozilla-nss was updated to NSS 3.28.3 * This is a patch release to fix binary compatibility issues. NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were in violation with the NSS compatibility promise. ECParams, which is part of the public API of the freebl/softokn parts of NSS, had been changed to include an additional attribute. That size increase caused crashes or malfunctioning with applications that use that data structure directly, or indirectly through ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey, or potentially other data structures that reference ECParams. The change has been reverted to the original state in bug bmo#1334108. SECKEYECPublicKey had been extended with a new attribute, named "encoding". If an application passed type SECKEYECPublicKey to NSS (as part of SECKEYPublicKey), the NSS library read the uninitialized attribute. With this NSS release SECKEYECPublicKey.encoding is deprecated. NSS no longer reads the attribute, and will always set it to ECPoint_Undefined. See bug bmo#1340103. - requires NSPR >= 4.13.1 - update to NSS 3.28.2 This is a stability and compatibility release. Below is a summary of the changes. * Fixed a NSS 3.28 regression in the signature scheme flexibility that causes connectivity issues between iOS 8 clients and NSS servers with ECDSA certificates (bmo#1334114) * Fixed a possible crash on some Windows systems (bmo#1323150) * Fixed a compatibility issue with TLS clients that do not provide a list of supported key exchange groups (bmo#1330612) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-344=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-344=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): MozillaFirefox-52.0-55.2 MozillaFirefox-branding-upstream-52.0-55.2 MozillaFirefox-buildsymbols-52.0-55.2 MozillaFirefox-debuginfo-52.0-55.2 MozillaFirefox-debugsource-52.0-55.2 MozillaFirefox-devel-52.0-55.2 MozillaFirefox-translations-common-52.0-55.2 MozillaFirefox-translations-other-52.0-55.2 java-1_8_0-openjdk-1.8.0.121-8.1 java-1_8_0-openjdk-accessibility-1.8.0.121-8.1 java-1_8_0-openjdk-debuginfo-1.8.0.121-8.1 java-1_8_0-openjdk-debugsource-1.8.0.121-8.1 java-1_8_0-openjdk-demo-1.8.0.121-8.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.121-8.1 java-1_8_0-openjdk-devel-1.8.0.121-8.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.121-8.1 java-1_8_0-openjdk-headless-1.8.0.121-8.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.121-8.1 java-1_8_0-openjdk-src-1.8.0.121-8.1 libfreebl3-3.28.3-38.1 libfreebl3-debuginfo-3.28.3-38.1 libsoftokn3-3.28.3-38.1 libsoftokn3-debuginfo-3.28.3-38.1 mozilla-nss-3.28.3-38.1 mozilla-nss-certs-3.28.3-38.1 mozilla-nss-certs-debuginfo-3.28.3-38.1 mozilla-nss-debuginfo-3.28.3-38.1 mozilla-nss-debugsource-3.28.3-38.1 mozilla-nss-devel-3.28.3-38.1 mozilla-nss-sysinit-3.28.3-38.1 mozilla-nss-sysinit-debuginfo-3.28.3-38.1 mozilla-nss-tools-3.28.3-38.1 mozilla-nss-tools-debuginfo-3.28.3-38.1 - openSUSE Leap 42.2 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.121-8.1 - openSUSE Leap 42.2 (x86_64): libfreebl3-32bit-3.28.3-38.1 libfreebl3-debuginfo-32bit-3.28.3-38.1 libsoftokn3-32bit-3.28.3-38.1 libsoftokn3-debuginfo-32bit-3.28.3-38.1 mozilla-nss-32bit-3.28.3-38.1 mozilla-nss-certs-32bit-3.28.3-38.1 mozilla-nss-certs-debuginfo-32bit-3.28.3-38.1 mozilla-nss-debuginfo-32bit-3.28.3-38.1 mozilla-nss-sysinit-32bit-3.28.3-38.1 mozilla-nss-sysinit-debuginfo-32bit-3.28.3-38.1 - openSUSE Leap 42.1 (i586 x86_64): java-1_8_0-openjdk-1.8.0.121-23.1 java-1_8_0-openjdk-accessibility-1.8.0.121-23.1 java-1_8_0-openjdk-debuginfo-1.8.0.121-23.1 java-1_8_0-openjdk-debugsource-1.8.0.121-23.1 java-1_8_0-openjdk-demo-1.8.0.121-23.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.121-23.1 java-1_8_0-openjdk-devel-1.8.0.121-23.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.121-23.1 java-1_8_0-openjdk-headless-1.8.0.121-23.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.121-23.1 java-1_8_0-openjdk-src-1.8.0.121-23.1 libfreebl3-3.28.3-38.1 libfreebl3-debuginfo-3.28.3-38.1 libsoftokn3-3.28.3-38.1 libsoftokn3-debuginfo-3.28.3-38.1 mozilla-nss-3.28.3-38.1 mozilla-nss-certs-3.28.3-38.1 mozilla-nss-certs-debuginfo-3.28.3-38.1 mozilla-nss-debuginfo-3.28.3-38.1 mozilla-nss-debugsource-3.28.3-38.1 mozilla-nss-devel-3.28.3-38.1 mozilla-nss-sysinit-3.28.3-38.1 mozilla-nss-sysinit-debuginfo-3.28.3-38.1 mozilla-nss-tools-3.28.3-38.1 mozilla-nss-tools-debuginfo-3.28.3-38.1 - openSUSE Leap 42.1 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.121-23.1 - openSUSE Leap 42.1 (x86_64): MozillaFirefox-52.0-55.2 MozillaFirefox-branding-upstream-52.0-55.2 MozillaFirefox-buildsymbols-52.0-55.2 MozillaFirefox-debuginfo-52.0-55.2 MozillaFirefox-debugsource-52.0-55.2 MozillaFirefox-devel-52.0-55.2 MozillaFirefox-translations-common-52.0-55.2 MozillaFirefox-translations-other-52.0-55.2 libfreebl3-32bit-3.28.3-38.1 libfreebl3-debuginfo-32bit-3.28.3-38.1 libsoftokn3-32bit-3.28.3-38.1 libsoftokn3-debuginfo-32bit-3.28.3-38.1 mozilla-nss-32bit-3.28.3-38.1 mozilla-nss-certs-32bit-3.28.3-38.1 mozilla-nss-certs-debuginfo-32bit-3.28.3-38.1 mozilla-nss-debuginfo-32bit-3.28.3-38.1 mozilla-nss-sysinit-32bit-3.28.3-38.1 mozilla-nss-sysinit-debuginfo-32bit-3.28.3-38.1 - openSUSE Leap 42.1 (i586): MozillaFirefox-52.0-55.1 MozillaFirefox-branding-upstream-52.0-55.1 MozillaFirefox-buildsymbols-52.0-55.1 MozillaFirefox-debuginfo-52.0-55.1 MozillaFirefox-debugsource-52.0-55.1 MozillaFirefox-devel-52.0-55.1 MozillaFirefox-translations-common-52.0-55.1 MozillaFirefox-translations-other-52.0-55.1 References: https://www.suse.com/security/cve/CVE-2017-5398.html https://www.suse.com/security/cve/CVE-2017-5399.html https://www.suse.com/security/cve/CVE-2017-5400.html https://www.suse.com/security/cve/CVE-2017-5401.html https://www.suse.com/security/cve/CVE-2017-5402.html https://www.suse.com/security/cve/CVE-2017-5403.html https://www.suse.com/security/cve/CVE-2017-5404.html https://www.suse.com/security/cve/CVE-2017-5405.html https://www.suse.com/security/cve/CVE-2017-5406.html https://www.suse.com/security/cve/CVE-2017-5407.html https://www.suse.com/security/cve/CVE-2017-5408.html https://www.suse.com/security/cve/CVE-2017-5410.html https://www.suse.com/security/cve/CVE-2017-5412.html https://www.suse.com/security/cve/CVE-2017-5413.html https://www.suse.com/security/cve/CVE-2017-5414.html https://www.suse.com/security/cve/CVE-2017-5415.html https://www.suse.com/security/cve/CVE-2017-5416.html https://www.suse.com/security/cve/CVE-2017-5417.html https://www.suse.com/security/cve/CVE-2017-5418.html https://www.suse.com/security/cve/CVE-2017-5419.html https://www.suse.com/security/cve/CVE-2017-5420.html https://www.suse.com/security/cve/CVE-2017-5421.html https://www.suse.com/security/cve/CVE-2017-5422.html https://www.suse.com/security/cve/CVE-2017-5426.html https://www.suse.com/security/cve/CVE-2017-5427.html https://bugzilla.suse.com/1028391

1 0

openSUSE-RU-2017:0689-1: Recommended update for clamav-database
by maintenance＠opensuse.org 14 Mar '17

14 Mar '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0689-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh March 13th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-343=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-343=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201703130005-52.1 - openSUSE Leap 42.1 (noarch): clamav-database-201703130005-231.1 References:

1 0

openSUSE-SU-2017:0688-1: moderate: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 14 Mar '17

14 Mar '17

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0688-1 Rating: moderate References: #1028391 Cross-References: CVE-2017-5398 CVE-2017-5400 CVE-2017-5401 CVE-2017-5402 CVE-2017-5404 CVE-2017-5405 CVE-2017-5407 CVE-2017-5408 CVE-2017-5410 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update to Mozilla Thunderbird 45.8.0 fixes security issues and bugs. The following security issues from advisory MFSA 2017-07 were fixed. (boo#1028391) In general, these flaws cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts: - CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP - CVE-2017-5401: Memory Corruption when handling ErrorResult - CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876) - CVE-2017-5404: Use-after-free working with ranges in selections - CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters - CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping - CVE-2017-5408: Cross-origin reading of video captions in violation of CORS - CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699) - CVE-2017-5398: Memory safety bugs fixed in Thunderbird 45.8 The following non-security issues were fixed: - crash when viewing certain IMAP messages Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-345=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 s390x x86_64): MozillaThunderbird-45.8.0-27.1 MozillaThunderbird-debuginfo-45.8.0-27.1 MozillaThunderbird-debugsource-45.8.0-27.1 MozillaThunderbird-devel-45.8.0-27.1 MozillaThunderbird-translations-common-45.8.0-27.1 MozillaThunderbird-translations-other-45.8.0-27.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): MozillaThunderbird-buildsymbols-45.8.0-27.1 References: https://www.suse.com/security/cve/CVE-2017-5398.html https://www.suse.com/security/cve/CVE-2017-5400.html https://www.suse.com/security/cve/CVE-2017-5401.html https://www.suse.com/security/cve/CVE-2017-5402.html https://www.suse.com/security/cve/CVE-2017-5404.html https://www.suse.com/security/cve/CVE-2017-5405.html https://www.suse.com/security/cve/CVE-2017-5407.html https://www.suse.com/security/cve/CVE-2017-5408.html https://www.suse.com/security/cve/CVE-2017-5410.html https://bugzilla.suse.com/1028391

1 0

openSUSE-SU-2017:0687-1: moderate: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 14 Mar '17

14 Mar '17

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0687-1 Rating: moderate References: #1028391 Cross-References: CVE-2017-5398 CVE-2017-5400 CVE-2017-5401 CVE-2017-5402 CVE-2017-5404 CVE-2017-5405 CVE-2017-5407 CVE-2017-5408 CVE-2017-5410 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update to Mozilla Thunderbird 45.8.0 fixes security issues and bugs. The following security issues from advisory MFSA 2017-07 were fixed. (boo#1028391) In general, these flaws cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts: - CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP - CVE-2017-5401: Memory Corruption when handling ErrorResult - CVE-2017-5402: Use-after-free working with events in FontFace objects (bmo#1334876) - CVE-2017-5404: Use-after-free working with ranges in selections - CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters - CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping - CVE-2017-5408: Cross-origin reading of video captions in violation of CORS - CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports (bmo#1336699) - CVE-2017-5398: Memory safety bugs fixed in Thunderbird 45.8 The following non-security issues were fixed: - crash when viewing certain IMAP messages Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-345=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-345=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): MozillaThunderbird-45.8.0-39.1 MozillaThunderbird-buildsymbols-45.8.0-39.1 MozillaThunderbird-debuginfo-45.8.0-39.1 MozillaThunderbird-debugsource-45.8.0-39.1 MozillaThunderbird-devel-45.8.0-39.1 MozillaThunderbird-translations-common-45.8.0-39.1 MozillaThunderbird-translations-other-45.8.0-39.1 - openSUSE Leap 42.1 (i586 x86_64): MozillaThunderbird-45.8.0-39.1 MozillaThunderbird-buildsymbols-45.8.0-39.1 MozillaThunderbird-debuginfo-45.8.0-39.1 MozillaThunderbird-debugsource-45.8.0-39.1 MozillaThunderbird-devel-45.8.0-39.1 MozillaThunderbird-translations-common-45.8.0-39.1 MozillaThunderbird-translations-other-45.8.0-39.1 References: https://www.suse.com/security/cve/CVE-2017-5398.html https://www.suse.com/security/cve/CVE-2017-5400.html https://www.suse.com/security/cve/CVE-2017-5401.html https://www.suse.com/security/cve/CVE-2017-5402.html https://www.suse.com/security/cve/CVE-2017-5404.html https://www.suse.com/security/cve/CVE-2017-5405.html https://www.suse.com/security/cve/CVE-2017-5407.html https://www.suse.com/security/cve/CVE-2017-5408.html https://www.suse.com/security/cve/CVE-2017-5410.html https://bugzilla.suse.com/1028391

1 0

openSUSE-RU-2017:0682-1: moderate: Recommended update for boinc-client
by maintenance＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Recommended Update: Recommended update for boinc-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0682-1 Rating: moderate References: #1017705 #1026965 #999628 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This recommended update for boinc-client fixes the following issues: - BOINC GUI Manager wrapping script specified incorrect directory (boo#999628, boo#1017705) - Systemd service file was changed to read configuration from from sysconfig file (boo#1026965) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-342=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-342=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): boinc-client-doc-7.2.42-6.1 boinc-client-lang-7.2.42-6.1 boinc-manager-lang-7.2.42-6.1 - openSUSE Leap 42.2 (x86_64): boinc-client-7.2.42-6.1 boinc-client-debuginfo-7.2.42-6.1 boinc-client-debugsource-7.2.42-6.1 boinc-client-devel-7.2.42-6.1 boinc-manager-7.2.42-6.1 boinc-manager-debuginfo-7.2.42-6.1 libboinc7-7.2.42-6.1 libboinc7-debuginfo-7.2.42-6.1 - openSUSE Leap 42.1 (i586 x86_64): boinc-client-7.2.42-5.1 boinc-client-debuginfo-7.2.42-5.1 boinc-client-debugsource-7.2.42-5.1 boinc-client-devel-7.2.42-5.1 boinc-manager-7.2.42-5.1 boinc-manager-debuginfo-7.2.42-5.1 libboinc7-7.2.42-5.1 libboinc7-debuginfo-7.2.42-5.1 - openSUSE Leap 42.1 (noarch): boinc-client-doc-7.2.42-5.1 boinc-client-lang-7.2.42-5.1 boinc-manager-lang-7.2.42-5.1 References: https://bugzilla.suse.com/1017705 https://bugzilla.suse.com/1026965 https://bugzilla.suse.com/999628

1 0

openSUSE-RU-2017:0681-1: Recommended update for gnome-online-accounts
by maintenance＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Recommended Update: Recommended update for gnome-online-accounts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0681-1 Rating: low References: #1016000 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides gnome-online-accounts version 3.20.5 which fixes the following issues: - New API key for Google (bsc#1016000) - Updated translations This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-335=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gnome-online-accounts-3.20.5-3.1 gnome-online-accounts-debuginfo-3.20.5-3.1 gnome-online-accounts-debugsource-3.20.5-3.1 gnome-online-accounts-devel-3.20.5-3.1 libgoa-1_0-0-3.20.5-3.1 libgoa-1_0-0-debuginfo-3.20.5-3.1 libgoa-backend-1_0-1-3.20.5-3.1 libgoa-backend-1_0-1-debuginfo-3.20.5-3.1 typelib-1_0-Goa-1_0-3.20.5-3.1 - openSUSE Leap 42.2 (noarch): gnome-online-accounts-lang-3.20.5-3.1 - openSUSE Leap 42.2 (x86_64): libgoa-1_0-0-32bit-3.20.5-3.1 libgoa-1_0-0-debuginfo-32bit-3.20.5-3.1 libgoa-backend-1_0-1-32bit-3.20.5-3.1 libgoa-backend-1_0-1-debuginfo-32bit-3.20.5-3.1 References: https://bugzilla.suse.com/1016000

1 0

openSUSE-SU-2017:0680-1: moderate: Security update for kdelibs4, kio
by opensuse-security＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Security Update: Security update for kdelibs4, kio ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0680-1 Rating: moderate References: #1027520 Cross-References: CVE-2017-6410 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kdelibs4, kio fixes the following issues: - CVE-2017-6410: Information Leak when accessing https when using a malicious PAC file (boo#1027520) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-334=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-334=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): kdelibs4-4.14.25-5.2 kdelibs4-branding-upstream-4.14.25-5.2 kdelibs4-core-4.14.25-5.2 kdelibs4-core-debuginfo-4.14.25-5.2 kdelibs4-debuginfo-4.14.25-5.2 kdelibs4-debugsource-4.14.25-5.2 kdelibs4-doc-4.14.25-5.2 kdelibs4-doc-debuginfo-4.14.25-5.2 kio-5.26.0-6.2 kio-core-5.26.0-6.2 kio-core-debuginfo-5.26.0-6.2 kio-debuginfo-5.26.0-6.2 kio-debugsource-5.26.0-6.2 kio-devel-5.26.0-6.2 kio-devel-debuginfo-5.26.0-6.2 libkde4-4.14.25-5.2 libkde4-debuginfo-4.14.25-5.2 libkde4-devel-4.14.25-5.2 libkdecore4-4.14.25-5.2 libkdecore4-debuginfo-4.14.25-5.2 libkdecore4-devel-4.14.25-5.2 libkdecore4-devel-debuginfo-4.14.25-5.2 libksuseinstall-devel-4.14.25-5.2 libksuseinstall1-4.14.25-5.2 libksuseinstall1-debuginfo-4.14.25-5.2 - openSUSE Leap 42.2 (x86_64): kio-32bit-5.26.0-6.2 kio-core-32bit-5.26.0-6.2 kio-core-debuginfo-32bit-5.26.0-6.2 kio-debuginfo-32bit-5.26.0-6.2 kio-devel-32bit-5.26.0-6.2 kio-devel-debuginfo-32bit-5.26.0-6.2 libkde4-32bit-4.14.25-5.2 libkde4-debuginfo-32bit-4.14.25-5.2 libkdecore4-32bit-4.14.25-5.2 libkdecore4-debuginfo-32bit-4.14.25-5.2 libksuseinstall1-32bit-4.14.25-5.2 libksuseinstall1-debuginfo-32bit-4.14.25-5.2 - openSUSE Leap 42.2 (noarch): kdelibs4-apidocs-4.14.25-5.2 kio-lang-5.26.0-6.2 - openSUSE Leap 42.1 (i586 x86_64): kdelibs4-4.14.18-15.2 kdelibs4-branding-upstream-4.14.18-15.2 kdelibs4-core-4.14.18-15.2 kdelibs4-core-debuginfo-4.14.18-15.2 kdelibs4-debuginfo-4.14.18-15.2 kdelibs4-debugsource-4.14.18-15.2 kdelibs4-doc-4.14.18-15.2 kdelibs4-doc-debuginfo-4.14.18-15.2 kio-5.21.0-23.2 kio-core-5.21.0-23.2 kio-core-debuginfo-5.21.0-23.2 kio-debuginfo-5.21.0-23.2 kio-debugsource-5.21.0-23.2 kio-devel-5.21.0-23.2 kio-devel-debuginfo-5.21.0-23.2 libkde4-4.14.18-15.2 libkde4-debuginfo-4.14.18-15.2 libkde4-devel-4.14.18-15.2 libkdecore4-4.14.18-15.2 libkdecore4-debuginfo-4.14.18-15.2 libkdecore4-devel-4.14.18-15.2 libkdecore4-devel-debuginfo-4.14.18-15.2 libksuseinstall-devel-4.14.18-15.2 libksuseinstall1-4.14.18-15.2 libksuseinstall1-debuginfo-4.14.18-15.2 - openSUSE Leap 42.1 (noarch): kdelibs4-apidocs-4.14.18-15.2 kio-lang-5.21.0-23.2 - openSUSE Leap 42.1 (x86_64): kio-32bit-5.21.0-23.2 kio-core-32bit-5.21.0-23.2 kio-core-debuginfo-32bit-5.21.0-23.2 kio-debuginfo-32bit-5.21.0-23.2 kio-devel-32bit-5.21.0-23.2 kio-devel-debuginfo-32bit-5.21.0-23.2 libkde4-32bit-4.14.18-15.2 libkde4-debuginfo-32bit-4.14.18-15.2 libkdecore4-32bit-4.14.18-15.2 libkdecore4-debuginfo-32bit-4.14.18-15.2 libksuseinstall1-32bit-4.14.18-15.2 libksuseinstall1-debuginfo-32bit-4.14.18-15.2 References: https://www.suse.com/security/cve/CVE-2017-6410.html https://bugzilla.suse.com/1027520

1 0

openSUSE-RU-2017:0679-1: moderate: Recommended update for atril
by maintenance＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Recommended Update: Recommended update for atril ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0679-1 Rating: moderate References: #1028022 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for atril fixes the following issues: - Caja would freeze if properties of a PDF file are selected (boo#1028022) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-333=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): atril-lang-1.16.1-3.1 - openSUSE Leap 42.2 (x86_64): atril-1.16.1-3.1 atril-backends-1.16.1-3.1 atril-backends-debuginfo-1.16.1-3.1 atril-debuginfo-1.16.1-3.1 atril-debugsource-1.16.1-3.1 atril-devel-1.16.1-3.1 atril-thumbnailer-1.16.1-3.1 caja-extension-atril-1.16.1-3.1 caja-extension-atril-debuginfo-1.16.1-3.1 libatrildocument3-1.16.1-3.1 libatrildocument3-debuginfo-1.16.1-3.1 libatrilview3-1.16.1-3.1 libatrilview3-debuginfo-1.16.1-3.1 typelib-1_0-AtrilDocument-1_5_0-1.16.1-3.1 typelib-1_0-AtrilView-1_5_0-1.16.1-3.1 References: https://bugzilla.suse.com/1028022

1 0

openSUSE-SU-2017:0678-1: moderate: Security update for pax-utils
by opensuse-security＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Security Update: Security update for pax-utils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0678-1 Rating: moderate References: #1026959 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for pax-utils fixes the following issues: - bsc#1026959: out of bounds read in scanelf could have unspecified impact pax-utils was updated to 1.2.2, fixing missing miscellaneous fd and memory leak issues. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-332=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-332=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): pax-utils-1.2.2-6.1 pax-utils-debuginfo-1.2.2-6.1 pax-utils-debugsource-1.2.2-6.1 - openSUSE Leap 42.1 (i586 x86_64): pax-utils-1.2.2-5.1 pax-utils-debuginfo-1.2.2-5.1 pax-utils-debugsource-1.2.2-5.1 References: https://bugzilla.suse.com/1026959

1 0

openSUSE-SU-2017:0677-1: moderate: Security update for kdelibs4, kio
by opensuse-security＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Security Update: Security update for kdelibs4, kio ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0677-1 Rating: moderate References: #1027520 Cross-References: CVE-2017-6410 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kdelibs4, kio fixes the following issues: - CVE-2017-6410: Information Leak when accessing https when using a malicious PAC file (boo#1027520) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-334=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): kdelibs4-4.14.18-6.2 kdelibs4-4.14.25-5.3 kdelibs4-branding-upstream-4.14.18-6.2 kdelibs4-branding-upstream-4.14.25-5.3 kdelibs4-core-4.14.18-6.2 kdelibs4-core-4.14.25-5.3 kdelibs4-core-debuginfo-4.14.18-6.2 kdelibs4-core-debuginfo-4.14.25-5.3 kdelibs4-debuginfo-4.14.18-6.2 kdelibs4-debuginfo-4.14.25-5.3 kdelibs4-debugsource-4.14.18-6.2 kdelibs4-debugsource-4.14.25-5.3 kdelibs4-doc-4.14.18-6.2 kdelibs4-doc-4.14.25-5.3 kdelibs4-doc-debuginfo-4.14.18-6.2 kdelibs4-doc-debuginfo-4.14.25-5.3 libkde4-4.14.18-6.2 libkde4-4.14.25-5.3 libkde4-debuginfo-4.14.18-6.2 libkde4-debuginfo-4.14.25-5.3 libkde4-devel-4.14.18-6.2 libkde4-devel-4.14.25-5.3 libkdecore4-4.14.18-6.2 libkdecore4-4.14.25-5.3 libkdecore4-debuginfo-4.14.18-6.2 libkdecore4-debuginfo-4.14.25-5.3 libkdecore4-devel-4.14.18-6.2 libkdecore4-devel-4.14.25-5.3 libkdecore4-devel-debuginfo-4.14.18-6.2 libkdecore4-devel-debuginfo-4.14.25-5.3 libksuseinstall-devel-4.14.18-6.2 libksuseinstall-devel-4.14.25-5.3 libksuseinstall1-4.14.18-6.2 libksuseinstall1-4.14.25-5.3 libksuseinstall1-debuginfo-4.14.18-6.2 libksuseinstall1-debuginfo-4.14.25-5.3 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): kio-5.20.0-6.2 kio-5.26.0-5.1 kio-core-5.20.0-6.2 kio-core-5.26.0-5.1 kio-core-debuginfo-5.20.0-6.2 kio-core-debuginfo-5.26.0-5.1 kio-debuginfo-5.20.0-6.2 kio-debuginfo-5.26.0-5.1 kio-debugsource-5.20.0-6.2 kio-debugsource-5.26.0-5.1 kio-devel-5.20.0-6.2 kio-devel-5.26.0-5.1 kio-devel-debuginfo-5.20.0-6.2 kio-devel-debuginfo-5.26.0-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): kdelibs4-apidocs-4.14.18-6.2 kdelibs4-apidocs-4.14.25-5.3 kio-lang-5.20.0-6.2 kio-lang-5.26.0-5.1 References: https://www.suse.com/security/cve/CVE-2017-6410.html https://bugzilla.suse.com/1027520

1 0

openSUSE-RU-2017:0676-1: Recommended update for evolution-data-server
by maintenance＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Recommended Update: Recommended update for evolution-data-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0676-1 Rating: low References: #1016000 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides evolution-data-server version 3.20.6 which fixes the following issues: - Improve handling of the Google OAuth2 tokens in Calendar (bsc#1016000) - Junk check fails due to empty cache file - Avoid crash when untagged response doesn't have a token This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-336=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): evolution-data-server-3.20.6-3.1 evolution-data-server-debuginfo-3.20.6-3.1 evolution-data-server-debugsource-3.20.6-3.1 evolution-data-server-devel-3.20.6-3.1 evolution-data-server-doc-3.20.6-3.1 libcamel-1_2-57-3.20.6-3.1 libcamel-1_2-57-debuginfo-3.20.6-3.1 libebackend-1_2-10-3.20.6-3.1 libebackend-1_2-10-debuginfo-3.20.6-3.1 libebook-1_2-16-3.20.6-3.1 libebook-1_2-16-debuginfo-3.20.6-3.1 libebook-contacts-1_2-2-3.20.6-3.1 libebook-contacts-1_2-2-debuginfo-3.20.6-3.1 libecal-1_2-19-3.20.6-3.1 libecal-1_2-19-debuginfo-3.20.6-3.1 libedata-book-1_2-25-3.20.6-3.1 libedata-book-1_2-25-debuginfo-3.20.6-3.1 libedata-cal-1_2-28-3.20.6-3.1 libedata-cal-1_2-28-debuginfo-3.20.6-3.1 libedataserver-1_2-21-3.20.6-3.1 libedataserver-1_2-21-debuginfo-3.20.6-3.1 libedataserverui-1_2-1-3.20.6-3.1 libedataserverui-1_2-1-debuginfo-3.20.6-3.1 typelib-1_0-EBook-1_2-3.20.6-3.1 typelib-1_0-EBookContacts-1_2-3.20.6-3.1 typelib-1_0-EDataServer-1_2-3.20.6-3.1 - openSUSE Leap 42.2 (x86_64): evolution-data-server-32bit-3.20.6-3.1 evolution-data-server-debuginfo-32bit-3.20.6-3.1 libcamel-1_2-57-32bit-3.20.6-3.1 libcamel-1_2-57-debuginfo-32bit-3.20.6-3.1 libebackend-1_2-10-32bit-3.20.6-3.1 libebackend-1_2-10-debuginfo-32bit-3.20.6-3.1 libebook-1_2-16-32bit-3.20.6-3.1 libebook-1_2-16-debuginfo-32bit-3.20.6-3.1 libebook-contacts-1_2-2-32bit-3.20.6-3.1 libebook-contacts-1_2-2-debuginfo-32bit-3.20.6-3.1 libecal-1_2-19-32bit-3.20.6-3.1 libecal-1_2-19-debuginfo-32bit-3.20.6-3.1 libedata-book-1_2-25-32bit-3.20.6-3.1 libedata-book-1_2-25-debuginfo-32bit-3.20.6-3.1 libedata-cal-1_2-28-32bit-3.20.6-3.1 libedata-cal-1_2-28-debuginfo-32bit-3.20.6-3.1 libedataserver-1_2-21-32bit-3.20.6-3.1 libedataserver-1_2-21-debuginfo-32bit-3.20.6-3.1 libedataserverui-1_2-1-32bit-3.20.6-3.1 libedataserverui-1_2-1-debuginfo-32bit-3.20.6-3.1 - openSUSE Leap 42.2 (noarch): evolution-data-server-lang-3.20.6-3.1 References: https://bugzilla.suse.com/1016000

1 0

openSUSE-RU-2017:0675-1: moderate: Recommended update for KDE Plasma
by maintenance＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Recommended Update: Recommended update for KDE Plasma ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0675-1 Rating: moderate References: #1005902 #1022119 #1022904 #1026970 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update contains KDE Plasma 5.8.6, a general bugfix release. The following components were updated: breeze, breeze4-style, discover, kde-gtk-config5, kde-user-manager, kscreen5, kscreenlocker, ksysguard5, kwin5, libkscreen2, plasma-nm5, plasma5-desktop, plasma5-openSUSE, plasma5-pa, plasma5-sdk, plasma5-session, plasma5-workspace. The upstream announcements are available here: * https://www.kde.org/announcements/plasma-5.8.6.php * https://www.kde.org/announcements/plasma-5.8.5.php * https://www.kde.org/announcements/plasma-5.8.4.php Changes in breeze: * Add top_left_arrow cursor symlinks Changes in breeze4-style: * Revert "[kstyle] Implement application unpolish to delete ShadowHelper" * [kstyle] Implement application unpolish to delete ShadowHelper * [kstyle] Delay init of Wayland setup till next event cycle * Fix broken kcfgc files Changes in discover: * Improve YaST integration and UI functionality Changes in kde-gtk-config5 * Improved compatibility with old configurations Changes in kde-user-manager: * Hide "automatic login" button in UserAccounts since is does absolutely nothing * Revert "Do not ask for root permissions when it's unnecessary" Changes in kscreen5: * guard against nullptr-access to the OutputPtr * apply config change after correcting invalid mode * no use in setting modes on disabled outputs * correct possibly invalid current mode Changes in kscreenlocker: * implement focusing * Fix crash in Screen Locker KCM on teardown Changes in ksysguard5: * Fix array allocation for non-continuous cpu numbers * Use unicode codepoint instead of UTF-8 literal Changes in kwin5: * Avoid a crash on Kwin decoration KCM teardown * Support modifier-only-shortcuts when capslock is on * Translate the layout name when passing to layout change OSD * Fixed initial graying out options in Cube Effect settings * [TabBox] Remember current model index on SwitcherItem model set * Align configure button consistently across delegates * Fix AbstractClient::sizeForClientSize * Ensure that all Effects honour the grab roles correctly * Unpolish QStyle on QApp prior to destroying internal Wayland connection * [helpers/killer] Force to platform XCB * Simplify the window title passed in from the window system * [desktopgrid] Don't manipulate virtual desktop of desktop window * Invert the scroll direction for wheel events on internal windows * Internal windows cannot be minimized * [libinput] Add scroll method configuration support * [libinput] Add natural scrolling support * [libinput] Add middle mouse button emulation support * Don't snap to auto-hidden panels * [scripting] Silence unused variable warnings * [scripting] Fix export of WorkspaceWrapper in QtScript * Support for workspace.clientList() in declarative script * Correctly set i18n suffix in mousemark spinbox. Changes in libkscreen2 * Fix type argument for get property call * disable logging to kscreen.log by default * allow changing an output's modelist at runtime Changes in plasma-nm5: * Fix crash caused by notifications use-after-free * OpenVPN: Remove previously configured secrets to avoid passing them back * Use KDE specific page for captive portal redirection * Some captive portals seems to have problem redirecting from https * Revert "Pass protocol type to openconnect" * Pass protocol type to openconnect Changes in plasma5-desktop: * fix default font in fonts kcm: * Use icon center for vertical hitscan on drop. * remove get new looks button from 5.8 * Fix crash when invoking Present Windows with the group dialog open. * [Folder View] Don't show script execution prompt on desktop:/ * Use proper version for baloo * [Solid Device Actions KCM] Encode action file name * Revamp (Activity) Pager wheel handling * [Folder View] show script execution prompt when clicking item * Fix startup warning * Fix clearing selection when rectangle selection contains no items. * Fix Plasmoid.busy visualization in desktop containment. * Call correct function and fix warning. * [Task Manager] Hide group dialog when opening applets settings * [kcm] Fix reset logic * Silence warning. * Fix crash during crash acrobatics. * fix binding loop * [Folder View] Fix right click erroneously opening files * Clean up after a window delegate drag exits the window. * Fix Enter/Return not running non-dir items in list view mode. * Set current index to start of selection range when performing rectangle selection. * [Panel Containment] Explicitly bind visible on both the container and the applet * [Task Manager] Parent QAction to "parent" instead of this * [Containment Appearance] Make sure to always load a config view * Don't clear hover state while a child dialog is open. * prompt for executing files in folderview containment (boo#1022904) * prevent folderview from opening files erroneously in addition to showing the context menu when right-clicking on an icon * [Folder View] Workaround QML Text layouting glitch * [Kicker] Support drag from bookmarks runner * Larger icons and stack windows above label item. * ensure results are sorted by relevance * [taskmanager] Limit GroupDialog size, stop highlightwindow effect when it shown, increase items readability * Fix 2 RTL bugs * [Kicker] Hide "Edit Applications..." context menu entry if system immutable * Fix running of recent docs actions for runner match entries. * [Folder View] Clear hover state when mouse leaves view * Select correct index without timer * Select correct index without timer * Fix "Move to Current Desktop" action moving to all desktops instead. * Check whether the KServe is still valid before running. * Publish delegate geometry when ChildCount increases. * fix config dialogs in ltr mode * [Task Manager] Strip application:// prefix before looking up service * [Task Manager] Pass local file to KService instead of stringified URL * [Task Manager] Fix Unity launcher count badge rendering when task is created Changes in plasma5-openSUSE: * Add default fonts to /etc/xdg/kdeglobals to make KDE4 applications * use the Plasma5 fonts as well (same as set by plasma5-integration) (boo#1026970) * Increase contrast on splash/images/bulb.png to get rid of noise and visible edges Changes in plasma5-pa: * Always check if context is valid when calling pa functions * VolumeSlider: Ignore all value changes until Component is completed * Fix compare for undefined argument in playFeedback() * Pass correct index to playFeedback * Applet: Don't delete delegates while drag is active Changes in plasma5-sdk: * Update to KDevplatform API change * Fix handling of paths with whitespace in bash * Use NO_POLICY_SCOPE on KDECompilerSettings Changes in plasma5-session: * Only require version 5.8.6 of packages that actually changed Changes in plasma5-workspace: * Port to QMultiHash. * Only remove + announce if leader change actually occured, avoid excessive loop. * [Notifications] Never manually hide() the NotificationPopup * Add comment laying out goals. * Fix crash when switching activities. * Tweak alphabetic (default) sort behavior. * turn the NotificationItem in a MouseArea * [DesktopView] show() ConfigView when it is already opened * [System Tray Containment] Drop useless Q_INVOKABLE from .cpp file * [System Tray Containment] Ungrab mouse before opening context menu * [KRunner] In doubt use primary screen for view position * Drop legacy fixup rule for VirtualBox. * fix isOutputRedundant logic * Fix group parents not appearing when disabling inline grouping. * Corona::screenGeometryChanged on qscreen resized * MediaController: Update position while queuedPositionUpdate timer is running * better clean up of duplicate containments * Fix "Pinned Chrome disappears when all Chrome windows are closed" * [MPRIS Data Engine] Don't crash if "Metadata" is a map but of wrong type * Systray: Move all icon resolution to dataengine * use a native event filter to notice the screen was swapped * notice when the only screen changes * make sure applet is removed from stack when destroyed * [Lock Screen] Wrap OSD in its own ColorScope * Move updating of primary screen in screenpool after fetching its id * Calendar: clear selection on opening * Fix "Unable to assign [undefined] to int" log * Refresh the ScreenGeometry data role whenever a screen is added or changes its geometry. * systemtray: Don't propagate unhandled wheel events * [Lock Screen] Add keyboard icon for keyboard layout switcher * remove categories not present on server anymore * Select correct index without timer * Expose rowCount as data role in TaskGroupingProxyModel. * [taskmanagerrulesrc] Add Rewrite Rule for chromium * [SDDM Theme] Fix background in qmlscene by providing proper config dummy data * [SDDM Theme] Add "lastUser" and "disableAvatarsThreshold" properties to dummydata * [SDDM Theme] Remember last username * [taskmanagerrulesrc] Add Rewrite Rule for chromium-browser * fix config dialogs in ltr mode * properly parse exec line before qprocessing it for autostart * Disable Qt's high DPI scaling on shutdown/switch user dialogs * Don't set PanelView visibilty when opening/closing config * Check KPluginInfo.service() returns a valid object * Revert "Port to new plasma-framework API" * Add plasma-discover to mappings * [Windowed Widgets Runner] Don't access invalid KPluginMetaData * Load screenpool at the same time as we connect to screenchanged signals * Avoid connecting to screen changed signals twice * Sync app config in sync with applets config * make sure all outputs are known * [taskmanagerrulesrc] Add Rewrite Rule for Google-chrome * [XWindowTasksModel] Check for service being empty before searching new ones * fix behavior of scrollable systray popups * Introduce new pre-layout script hook * Make sure we're looking both for json and desktop metadata * Port to new plasma-framework API * Modified distance function to keep aspect ratio as close as possible * fix adding a panel or plasmoid with the new json metadata files Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-340=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): breeze-5.8.6-7.1 breeze-debugsource-5.8.6-7.1 breeze4-style-5.8.6-7.1 breeze4-style-debuginfo-5.8.6-7.1 breeze4-style-debugsource-5.8.6-7.1 breeze5-decoration-5.8.6-7.1 breeze5-decoration-debuginfo-5.8.6-7.1 breeze5-style-5.8.6-7.1 breeze5-style-debuginfo-5.8.6-7.1 drkonqi5-5.8.6-8.1 drkonqi5-debuginfo-5.8.6-8.1 kde-gtk-config5-5.8.6-4.1 kde-gtk-config5-debuginfo-5.8.6-4.1 kde-gtk-config5-debugsource-5.8.6-4.1 kde-user-manager-5.8.6-7.1 kde-user-manager-debuginfo-5.8.6-7.1 kde-user-manager-debugsource-5.8.6-7.1 kscreen5-5.8.6-4.1 kscreen5-debuginfo-5.8.6-4.1 kscreen5-debugsource-5.8.6-4.1 kscreenlocker-5.8.6-4.1 kscreenlocker-debuginfo-5.8.6-4.1 kscreenlocker-debugsource-5.8.6-4.1 kscreenlocker-devel-5.8.6-4.1 ksysguard5-5.8.6-4.1 ksysguard5-debuginfo-5.8.6-4.1 ksysguard5-debugsource-5.8.6-4.1 kwin5-5.8.6-7.1 kwin5-debuginfo-5.8.6-7.1 kwin5-debugsource-5.8.6-7.1 kwin5-devel-5.8.6-7.1 libKF5Screen7-5.8.6-4.1 libKF5Screen7-debuginfo-5.8.6-4.1 libKScreenLocker5-5.8.6-4.1 libKScreenLocker5-debuginfo-5.8.6-4.1 libkscreen2-debugsource-5.8.6-4.1 libkscreen2-devel-5.8.6-4.1 libkscreen2-plugin-5.8.6-4.1 libkscreen2-plugin-debuginfo-5.8.6-4.1 plasma5-desktop-5.8.6-7.1 plasma5-desktop-debuginfo-5.8.6-7.1 plasma5-desktop-debugsource-5.8.6-7.1 plasma5-pa-5.8.6-7.1 plasma5-pa-debuginfo-5.8.6-7.1 plasma5-pa-debugsource-5.8.6-7.1 plasma5-workspace-5.8.6-8.1 plasma5-workspace-debuginfo-5.8.6-8.1 plasma5-workspace-debugsource-5.8.6-8.1 plasma5-workspace-devel-5.8.6-8.1 plasma5-workspace-libs-5.8.6-8.1 plasma5-workspace-libs-debuginfo-5.8.6-8.1 - openSUSE Leap 42.2 (x86_64): discover-5.8.6-7.1 discover-debuginfo-5.8.6-7.1 discover-debugsource-5.8.6-7.1 discover-plasmoid-5.8.6-7.1 libKF5Screen7-32bit-5.8.6-4.1 libKF5Screen7-debuginfo-32bit-5.8.6-4.1 libkscreen2-devel-32bit-5.8.6-4.1 libkscreen2-plugin-32bit-5.8.6-4.1 libkscreen2-plugin-debuginfo-32bit-5.8.6-4.1 plasma-nm5-5.8.6-4.1 plasma-nm5-debuginfo-5.8.6-4.1 plasma-nm5-debugsource-5.8.6-4.1 plasma-nm5-l2tp-5.8.6-4.1 plasma-nm5-l2tp-debuginfo-5.8.6-4.1 plasma-nm5-openconnect-5.8.6-4.1 plasma-nm5-openconnect-debuginfo-5.8.6-4.1 plasma-nm5-openswan-5.8.6-4.1 plasma-nm5-openswan-debuginfo-5.8.6-4.1 plasma-nm5-openvpn-5.8.6-4.1 plasma-nm5-openvpn-debuginfo-5.8.6-4.1 plasma-nm5-pptp-5.8.6-4.1 plasma-nm5-pptp-debuginfo-5.8.6-4.1 plasma-nm5-ssh-5.8.6-4.1 plasma-nm5-ssh-debuginfo-5.8.6-4.1 plasma-nm5-sstp-5.8.6-4.1 plasma-nm5-sstp-debuginfo-5.8.6-4.1 plasma-nm5-strongswan-5.8.6-4.1 plasma-nm5-strongswan-debuginfo-5.8.6-4.1 plasma-nm5-vpnc-5.8.6-4.1 plasma-nm5-vpnc-debuginfo-5.8.6-4.1 plasma5-sdk-5.8.6-3.1 plasma5-sdk-debuginfo-5.8.6-3.1 plasma5-sdk-debugsource-5.8.6-3.1 plasma5-workspace-libs-32bit-5.8.6-8.1 plasma5-workspace-libs-debuginfo-32bit-5.8.6-8.1 plasmaengineexplorer5-5.8.6-3.1 plasmaengineexplorer5-debuginfo-5.8.6-3.1 - openSUSE Leap 42.2 (noarch): breeze5-cursors-5.8.6-7.1 breeze5-style-lang-5.8.6-7.1 breeze5-wallpapers-5.8.6-7.1 discover-lang-5.8.6-7.1 kde-gtk-config5-lang-5.8.6-4.1 kde-user-manager-lang-5.8.6-7.1 kscreen5-lang-5.8.6-4.1 kscreenlocker-lang-5.8.6-4.1 ksysguard5-lang-5.8.6-4.1 kwin5-lang-5.8.6-7.1 plasma-nm5-lang-5.8.6-4.1 plasma5-defaults-openSUSE-42.1.1-12.1 plasma5-desktop-lang-5.8.6-7.1 plasma5-openSUSE-42.1.1-12.1 plasma5-pa-lang-5.8.6-7.1 plasma5-sdk-lang-5.8.6-3.1 plasma5-session-5.8.6-7.1 plasma5-theme-openSUSE-42.1.1-12.1 plasma5-workspace-branding-openSUSE-42.1.1-12.1 plasma5-workspace-lang-5.8.6-8.1 sddm-theme-openSUSE-42.1.1-12.1 References: https://bugzilla.suse.com/1005902 https://bugzilla.suse.com/1022119 https://bugzilla.suse.com/1022904 https://bugzilla.suse.com/1026970

1 0

openSUSE-SU-2017:0674-1: moderate: Security update for openssh
by opensuse-security＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Security Update: Security update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0674-1 Rating: moderate References: #1005480 #1005893 #1006221 #1016366 #1016369 Cross-References: CVE-2016-10009 CVE-2016-10011 CVE-2016-8858 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: This update for openssh fixes the following issues: - CVE-2016-8858: prevent resource depletion during key exchange (bsc#1005480) - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation (bsc#1016366) - CVE-2016-10011: Prevent possible leaks of host private keys to low-privilege process handling authentication (bsc#1016369) - Fix suggested command for removing conflicting server keys from the known_hosts file (bsc#1006221) - Properly verify CIDR masks in the AllowUsers and DenyUsers configuration lists (bsc#1005893) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-339=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): openssh-6.6p1-17.1 openssh-askpass-gnome-6.6p1-17.1 openssh-askpass-gnome-debuginfo-6.6p1-17.1 openssh-cavs-6.6p1-17.1 openssh-cavs-debuginfo-6.6p1-17.1 openssh-debuginfo-6.6p1-17.1 openssh-debugsource-6.6p1-17.1 openssh-fips-6.6p1-17.1 openssh-helpers-6.6p1-17.1 openssh-helpers-debuginfo-6.6p1-17.1 References: https://www.suse.com/security/cve/CVE-2016-10009.html https://www.suse.com/security/cve/CVE-2016-10011.html https://www.suse.com/security/cve/CVE-2016-8858.html https://bugzilla.suse.com/1005480 https://bugzilla.suse.com/1005893 https://bugzilla.suse.com/1006221 https://bugzilla.suse.com/1016366 https://bugzilla.suse.com/1016369

1 0

openSUSE-RU-2017:0673-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0673-1 Rating: moderate References: #1024934 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for virtualbox fixes the following issues: - 3D acceleration available for GNOME desktops bsc#1024934. Not supported in KDE. 3D acceleration remains disabled by default, can be enabled in /etc/init.d/vboxadd Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-341=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): virtualbox-guest-desktop-icons-5.1.14-14.1 virtualbox-host-source-5.1.14-14.1 - openSUSE Leap 42.2 (x86_64): python-virtualbox-5.1.14-14.1 python-virtualbox-debuginfo-5.1.14-14.1 virtualbox-5.1.14-14.1 virtualbox-debuginfo-5.1.14-14.1 virtualbox-debugsource-5.1.14-14.1 virtualbox-devel-5.1.14-14.1 virtualbox-guest-kmp-default-5.1.14_k4.4.49_16-14.1 virtualbox-guest-kmp-default-debuginfo-5.1.14_k4.4.49_16-14.1 virtualbox-guest-tools-5.1.14-14.1 virtualbox-guest-tools-debuginfo-5.1.14-14.1 virtualbox-guest-x11-5.1.14-14.1 virtualbox-guest-x11-debuginfo-5.1.14-14.1 virtualbox-host-kmp-default-5.1.14_k4.4.49_16-14.1 virtualbox-host-kmp-default-debuginfo-5.1.14_k4.4.49_16-14.1 virtualbox-qt-5.1.14-14.1 virtualbox-qt-debuginfo-5.1.14-14.1 virtualbox-websrv-5.1.14-14.1 virtualbox-websrv-debuginfo-5.1.14-14.1 References: https://bugzilla.suse.com/1024934

1 0

openSUSE-RU-2017:0671-1: moderate: Recommended update for tor
by maintenance＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Recommended Update: Recommended update for tor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0671-1 Rating: moderate References: #1027594 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Tor was updated to the long-term supported release series 0.2.9.x. The update contains a number of privacy and performance improvements. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-338=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-338=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): tor-0.2.9.10-6.1 tor-debuginfo-0.2.9.10-6.1 tor-debugsource-0.2.9.10-6.1 - openSUSE Leap 42.1 (i586 x86_64): tor-0.2.9.10-19.1 tor-debuginfo-0.2.9.10-19.1 tor-debugsource-0.2.9.10-19.1 References: https://bugzilla.suse.com/1027594

1 0

openSUSE-RU-2017:0670-1: moderate: Recommended update for haproxy
by maintenance＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Recommended Update: Recommended update for haproxy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0670-1 Rating: moderate References: #1023141 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides haproxy 1.6.11, which brings several fixes and enhancements: - systemd-wrapper: Return correct exit codes. - srv-state: Properly restore the DRAIN state. - srv-state: Allow to have both CMAINT and FDRAIN flags. - servers: Properly propagate the maintenance states during startup. - vars: Fix 'set-var' converter because of a typo. - channel: Fix bad unlikely macro. - doc/ssl: Use correct wording for ca-sign-pass. - stick-table: Handle out-of-memory condition gracefully. - connection: Check the control layer before stopping polling. - stick-table: Fix regression caused by recent fix for out-of-memory. - cli: Properly decrement ref count on tables during failed dumps. - lua: In some case, the return of sample-fetches is ignored. - cli: Fix pointer size when reporting data/transport layer name. - cli: Dequeue from the proxy when changing a maxconn. - cli: Wake up the CLI's task after a timeout update. - freq-ctr: Make swrate_add() support larger values. - proxy: Return "none" and "unknown" for unknown LB algos. - stream: Fix session abort on resource shortage. - http: Don't send an extra CRLF after a Set-Cookie in a redirect. - variables: Some variable name can hide another ones. - cli: Be sure to always warn the cli applet when input buffer is full. - applet: Count number of (active) applets. - task: Rename run_queue and run_queue_cur counters. - stream: Save unprocessed events for a stream. - Fix how the list of entities waiting for a buffer is handled. - stream-int: Automatically release SI_FL_WAIT_DATA on SHUTW_NOW. - doc/lua: Section declared twice. - doc: Fix small typo in fe_id (backend instead of frontend). - lua: Fix memory leak executing tasks. - ssl: Properly reset the reused_sess during a forced handshake. - ssl: Avoid double free when releasing bind_confs. - backend: nbsrv() should return 0 if backend is disabled. - ssl: For a handshake when server-side SNI changes. - systemd: Prevent potential zombie processes. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-337=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): haproxy-1.6.11-6.1 haproxy-debuginfo-1.6.11-6.1 haproxy-debugsource-1.6.11-6.1 References: https://bugzilla.suse.com/1023141

1 0

openSUSE-SU-2017:0669-1: moderate: Security update for bitlbee
by opensuse-security＠opensuse.org 11 Mar '17

11 Mar '17

openSUSE Security Update: Security update for bitlbee ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0669-1 Rating: moderate References: #1022498 Cross-References: CVE-2016-10189 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bitlbee fixes the following security issues: - A file transfer request from a contact not in the contact list could have resulted in a null pointer dereference, causing remote DoS by malicious remote clients (CVE-2016-10189, bnc#1022498). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-328=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-328=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): bitlbee-3.4.2-3.1 bitlbee-debuginfo-3.4.2-3.1 bitlbee-devel-3.4.2-3.1 bitlbee-doc-3.4.2-3.1 - openSUSE Leap 42.1 (i586 x86_64): bitlbee-3.4.1-5.1 bitlbee-debuginfo-3.4.1-5.1 bitlbee-debugsource-3.4.1-5.1 bitlbee-doc-3.4.1-5.1 References: https://www.suse.com/security/cve/CVE-2016-10189.html https://bugzilla.suse.com/1022498

1 0

openSUSE-SU-2017:0668-1: moderate: Security update for lynx
by opensuse-security＠opensuse.org 11 Mar '17

11 Mar '17

openSUSE Security Update: Security update for lynx ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0668-1 Rating: moderate References: #1008642 Cross-References: CVE-2016-9179 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lynx fixes the following issues: - CVE-2016-9179: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host. (bsc#1008642) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-330=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-330=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): lynx-2.8.7-6.1 lynx-debuginfo-2.8.7-6.1 lynx-debugsource-2.8.7-6.1 - openSUSE Leap 42.1 (i586 x86_64): lynx-2.8.7-5.1 lynx-debuginfo-2.8.7-5.1 lynx-debugsource-2.8.7-5.1 References: https://www.suse.com/security/cve/CVE-2016-9179.html https://bugzilla.suse.com/1008642

1 0

openSUSE-SU-2017:0667-1: moderate: Security update for perl-Image-Info
by opensuse-security＠opensuse.org 11 Mar '17

11 Mar '17

openSUSE Security Update: Security update for perl-Image-Info ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0667-1 Rating: moderate References: #1008647 Cross-References: CVE-2016-9181 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for perl-Image-Info fixes the following issues: - update to version 1.39 to fix a potential security issue. A crafted SVG file could have caused information disclosure or denial of service by using external entitity expansion (XXE). This is a potentially incompatible change; however usually SVG files do not rely on XXE. (boo#1008647, CVE-2016-9181) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-327=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-327=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): perl-Image-Info-1.39-5.1 - openSUSE Leap 42.1 (noarch): perl-Image-Info-1.39-4.1 References: https://www.suse.com/security/cve/CVE-2016-9181.html https://bugzilla.suse.com/1008647

1 0

openSUSE-SU-2017:0665-1: important: Security update for xen
by opensuse-security＠opensuse.org 11 Mar '17

11 Mar '17

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0665-1 Rating: important References: #1000195 #1002496 #1005028 #1012651 #1014298 #1014300 #1015169 #1016340 #1022871 #1023004 #1024834 Cross-References: CVE-2016-9921 CVE-2016-9922 CVE-2017-2615 CVE-2017-2620 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves four vulnerabilities and has 7 fixes is now available. Description: This update for xen fixes several issues. These security issues were fixed: - CVE-2017-2620: In CIRRUS_BLTMODE_MEMSYSSRC mode the bitblit copy routine cirrus_bitblt_cputovideo failed to check the memory region, allowing for an out-of-bounds write that allows for privilege escalation (bsc#1024834). - CVE-2017-2615: An error in the bitblt copy operation could have allowed a malicious guest administrator to cause an out of bounds memory access, possibly leading to information disclosure or privilege escalation (bsc#1023004). - A malicious guest could have, by frequently rebooting over extended periods of time, run the host system out of memory, resulting in a Denial of Service (DoS) (bsc#1022871) - CVE-2016-9921: The Cirrus CLGD 54xx VGA Emulator support was vulnerable to a divide by zero issue while copying VGA data. A privileged user inside guest could have used this flaw to crash the process instance on the host, resulting in DoS (bsc#1015169 These non-security issues were fixed: - bsc#1000195: Prevent panic on CPU0 while booting on SLES 11 SP3 - bsc#1002496: Added support for reloading clvm in block-dmmd block-dmmd - bsc#1005028: Fixed building Xen RPMs from Sources This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-329=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xen-debugsource-4.7.1_06-9.2 xen-devel-4.7.1_06-9.2 xen-libs-4.7.1_06-9.2 xen-libs-debuginfo-4.7.1_06-9.2 xen-tools-domU-4.7.1_06-9.2 xen-tools-domU-debuginfo-4.7.1_06-9.2 - openSUSE Leap 42.2 (x86_64): xen-4.7.1_06-9.2 xen-doc-html-4.7.1_06-9.2 xen-libs-32bit-4.7.1_06-9.2 xen-libs-debuginfo-32bit-4.7.1_06-9.2 xen-tools-4.7.1_06-9.2 xen-tools-debuginfo-4.7.1_06-9.2 References: https://www.suse.com/security/cve/CVE-2016-9921.html https://www.suse.com/security/cve/CVE-2016-9922.html https://www.suse.com/security/cve/CVE-2017-2615.html https://www.suse.com/security/cve/CVE-2017-2620.html https://bugzilla.suse.com/1000195 https://bugzilla.suse.com/1002496 https://bugzilla.suse.com/1005028 https://bugzilla.suse.com/1012651 https://bugzilla.suse.com/1014298 https://bugzilla.suse.com/1014300 https://bugzilla.suse.com/1015169 https://bugzilla.suse.com/1016340 https://bugzilla.suse.com/1022871 https://bugzilla.suse.com/1023004 https://bugzilla.suse.com/1024834

1 0

openSUSE-SU-2017:0664-1: Security update for Wireshark
by opensuse-security＠opensuse.org 11 Mar '17

11 Mar '17

openSUSE Security Update: Security update for Wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0664-1 Rating: low References: #1027998 Cross-References: CVE-2017-6467 CVE-2017-6468 CVE-2017-6469 CVE-2017-6470 CVE-2017-6471 CVE-2017-6472 CVE-2017-6473 CVE-2017-6474 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for Wireshark fixes minor vulnerabilities that could be used to trigger a dissector crash or infinite loops by sending specially crafted packages over the network or into a capture file: - CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11) - CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08) - CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03) - CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10) - CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05) - CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04) - CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09) - CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07) - wnpa-sec-2017-06: STANAG 4607 file parser infinite loop Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-326=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): wireshark-2.2.5-12.1 wireshark-debuginfo-2.2.5-12.1 wireshark-debugsource-2.2.5-12.1 wireshark-devel-2.2.5-12.1 wireshark-ui-gtk-2.2.5-12.1 wireshark-ui-gtk-debuginfo-2.2.5-12.1 wireshark-ui-qt-2.2.5-12.1 wireshark-ui-qt-debuginfo-2.2.5-12.1 References: https://www.suse.com/security/cve/CVE-2017-6467.html https://www.suse.com/security/cve/CVE-2017-6468.html https://www.suse.com/security/cve/CVE-2017-6469.html https://www.suse.com/security/cve/CVE-2017-6470.html https://www.suse.com/security/cve/CVE-2017-6471.html https://www.suse.com/security/cve/CVE-2017-6472.html https://www.suse.com/security/cve/CVE-2017-6473.html https://www.suse.com/security/cve/CVE-2017-6474.html https://bugzilla.suse.com/1027998

1 0

openSUSE-SU-2017:0663-1: Security update for cacti
by opensuse-security＠opensuse.org 11 Mar '17

11 Mar '17

openSUSE Security Update: Security update for cacti ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0663-1 Rating: low References: #1022564 Cross-References: CVE-2014-4000 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for cacti fixes the following vulnerabilities: - CVE-2014-4000: PHP Object Injection Vulnerabilities (boo#1022564) It also updates cacti to version 1.0.4 to include the latest upstream bugfixes and improvements. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-325=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-325=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): cacti-1.0.4-14.1 cacti-doc-1.0.4-14.1 - openSUSE Leap 42.1 (noarch): cacti-1.0.4-14.1 cacti-doc-1.0.4-14.1 References: https://www.suse.com/security/cve/CVE-2014-4000.html https://bugzilla.suse.com/1022564

1 0

openSUSE-RU-2017:0657-1: moderate: Recommended update for spectacle
by maintenance＠opensuse.org 10 Mar '17

10 Mar '17

openSUSE Recommended Update: Recommended update for spectacle ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0657-1 Rating: moderate References: #1026635 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spectacle fixes the following issues: - use the desktop's native file dialog for the Save As option instead of the generic Qt dialog (boo#1026635) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-324=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): spectacle-16.08.2-5.1 spectacle-doc-16.08.2-5.1 References: https://bugzilla.suse.com/1026635

1 0

openSUSE-RU-2017:0655-1: moderate: Recommended update for greybird-theme
by maintenance＠opensuse.org 10 Mar '17

10 Mar '17

openSUSE Recommended Update: Recommended update for greybird-theme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0655-1 Rating: moderate References: #1004225 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for greybird-theme fixes the following issues: - greybird-theme not working with GTK3 3.20, update to 3.22.0 (boo#1004225) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-322=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): gtk2-metatheme-greybird-3.22.0-8.1 gtk3-metatheme-greybird-3.22.0-8.1 metatheme-greybird-common-3.22.0-8.1 References: https://bugzilla.suse.com/1004225

1 0

openSUSE-RU-2017:0654-1: important: Recommended update for docker
by maintenance＠opensuse.org 10 Mar '17

10 Mar '17

openSUSE Recommended Update: Recommended update for docker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0654-1 Rating: important References: #1016992 #1020806 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for docker fixes the following issues: - fix "Unknown runtime specified oci" errors with containers using an old runtime option boo#1020806 boo#1016992 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-321=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-321=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): docker-bash-completion-1.12.6-28.2 docker-zsh-completion-1.12.6-28.2 - openSUSE Leap 42.2 (x86_64): docker-1.12.6-28.2 docker-debuginfo-1.12.6-28.2 docker-debugsource-1.12.6-28.2 docker-test-1.12.6-28.2 docker-test-debuginfo-1.12.6-28.2 - openSUSE Leap 42.1 (x86_64): docker-1.12.6-30.2 docker-debuginfo-1.12.6-30.2 docker-debugsource-1.12.6-30.2 docker-test-1.12.6-30.2 docker-test-debuginfo-1.12.6-30.2 - openSUSE Leap 42.1 (noarch): docker-bash-completion-1.12.6-30.2 docker-zsh-completion-1.12.6-30.2 References: https://bugzilla.suse.com/1016992 https://bugzilla.suse.com/1020806

1 0

openSUSE-RU-2017:0653-1: moderate: Recommended update for spectacle
by maintenance＠opensuse.org 10 Mar '17

10 Mar '17

openSUSE Recommended Update: Recommended update for spectacle ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0653-1 Rating: moderate References: #1026635 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spectacle fixes the following issues: - use the desktop's native file dialog for the Save As option instead of the generic Qt dialog (boo#1026635) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-324=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): spectacle-16.08.2-3.1 spectacle-debuginfo-16.08.2-3.1 spectacle-debugsource-16.08.2-3.1 spectacle-doc-16.08.2-3.1 References: https://bugzilla.suse.com/1026635

1 0

openSUSE-RU-2017:0652-1: important: Recommended update for thunar
by maintenance＠opensuse.org 10 Mar '17

10 Mar '17

openSUSE Recommended Update: Recommended update for thunar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0652-1 Rating: important References: #1011518 #1012237 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for thunar fixes the following issues: - crash for on cut/pasting of multiple files (boo#1012237) - crash when renaming files (boo #1011518) - history deleted after view change - crashes when reloading target file after move Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-323=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-323=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): thunar-lang-1.6.10-6.1 - openSUSE Leap 42.2 (x86_64): libthunarx-2-0-1.6.10-6.1 libthunarx-2-0-debuginfo-1.6.10-6.1 thunar-1.6.10-6.1 thunar-debuginfo-1.6.10-6.1 thunar-debugsource-1.6.10-6.1 thunar-devel-1.6.10-6.1 - openSUSE Leap 42.1 (i586 x86_64): libthunarx-2-0-1.6.10-7.1 libthunarx-2-0-debuginfo-1.6.10-7.1 thunar-1.6.10-7.1 thunar-debuginfo-1.6.10-7.1 thunar-debugsource-1.6.10-7.1 thunar-devel-1.6.10-7.1 - openSUSE Leap 42.1 (noarch): thunar-lang-1.6.10-7.1 References: https://bugzilla.suse.com/1011518 https://bugzilla.suse.com/1012237

1 0

openSUSE-RU-2017:0650-1: Recommended update for timezone
by maintenance＠opensuse.org 10 Mar '17

10 Mar '17

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0650-1 Rating: low References: #1024676 #1024677 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update provides the latest timezone information (2017a) for your system, including the following changes: - Mongolia no longer observes DST. (bsc#1024676) - Chile's Region of Magallanes moves from -04/-03 to -03 year-round starting 2017-05-13 23:00. Split from America/Santiago creating a new zone America/Punta_Arenas. Also affects Antarctica/Palmer. (bsc#1024677) - Fixes to historical time stamps: Spain, Ecuador, Atyrau, Oral. - Switch to numeric, or commonly used time zone abbreviations. - zic(8) no longer mishandles some transitions in January 2038. - date and strftime now cause %z to generate "-0000" instead of "+0000" when the UT offset is zero and the time zone abbreviation begins with "-". This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-320=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-320=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): timezone-2017a-37.1 timezone-debuginfo-2017a-37.1 timezone-debugsource-2017a-37.1 - openSUSE Leap 42.2 (noarch): timezone-java-2017a-0.37.1 - openSUSE Leap 42.1 (i586 x86_64): timezone-2017a-37.1 timezone-debuginfo-2017a-37.1 timezone-debugsource-2017a-37.1 - openSUSE Leap 42.1 (noarch): timezone-java-2017a-0.37.1 References: https://bugzilla.suse.com/1024676 https://bugzilla.suse.com/1024677

1 0

openSUSE-SU-2017:0649-1: moderate: Security update for sane-backends
by opensuse-security＠opensuse.org 10 Mar '17

10 Mar '17

openSUSE Security Update: Security update for sane-backends ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0649-1 Rating: moderate References: #1027197 Cross-References: CVE-2017-6318 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sane-backends fixes the following issues: - saned could have leaked uninitialized memory back to its requesters for some opcodes, allowing for information disclosure of saned memory (CVE-2017-6318, bsc#1027197). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-318=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): sane-backends-1.0.24-5.1 sane-backends-autoconfig-1.0.24-5.1 sane-backends-debuginfo-1.0.24-5.1 sane-backends-debugsource-1.0.24-5.1 sane-backends-devel-1.0.24-5.1 - openSUSE Leap 42.1 (x86_64): sane-backends-32bit-1.0.24-5.1 sane-backends-debuginfo-32bit-1.0.24-5.1 References: https://www.suse.com/security/cve/CVE-2017-6318.html https://bugzilla.suse.com/1027197

1 0

openSUSE-SU-2017:0648-1: moderate: Security update for potrace
by opensuse-security＠opensuse.org 10 Mar '17

10 Mar '17

openSUSE Security Update: Security update for potrace ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0648-1 Rating: moderate References: #1005026 Cross-References: CVE-2016-8685 CVE-2016-8686 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for potrace to version 1.14 fixes the following issues: Security issues fixed: - CVE-2016-8685, CVE-2016-8686: Bugs triggered by malformed BMP files have been fixed (boo#1005026). Bugfixes: - Error reporting has been improved. - The image size is now truncated when the bitmap data ends prematurely. - It is now possible to use negative dy in bitmap data. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-319=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-319=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libpotrace0-1.14-8.1 libpotrace0-debuginfo-1.14-8.1 potrace-1.14-8.1 potrace-debuginfo-1.14-8.1 potrace-debugsource-1.14-8.1 potrace-devel-1.14-8.1 - openSUSE Leap 42.1 (i586 x86_64): libpotrace0-1.14-8.1 libpotrace0-debuginfo-1.14-8.1 potrace-1.14-8.1 potrace-debuginfo-1.14-8.1 potrace-debugsource-1.14-8.1 potrace-devel-1.14-8.1 References: https://www.suse.com/security/cve/CVE-2016-8685.html https://www.suse.com/security/cve/CVE-2016-8686.html https://bugzilla.suse.com/1005026

1 0

openSUSE-RU-2017:0628-1: moderate: Recommended update for opera
by maintenance＠opensuse.org 07 Mar '17

07 Mar '17

openSUSE Recommended Update: Recommended update for opera ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0628-1 Rating: moderate References: #1028011 Affected Products: openSUSE Leap 42.2:NonFree openSUSE Leap 42.1:NonFree ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for Opera fixes the following issues: - Update Opera to 43.0.2442.1144, full changelog at https://www.opera.com/blogs/desktop/changelog-for-43/#b2442.1144 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2:NonFree: zypper in -t patch openSUSE-2017-317=1 - openSUSE Leap 42.1:NonFree: zypper in -t patch openSUSE-2017-317=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2:NonFree (x86_64): opera-43.0.2442.1144-27.1 - openSUSE Leap 42.1:NonFree (x86_64): opera-43.0.2442.1144-64.1 References: https://bugzilla.suse.com/1028011

1 0

openSUSE-SU-2017:0621-1: important: Security update for munin
by opensuse-security＠opensuse.org 07 Mar '17

07 Mar '17

openSUSE Security Update: Security update for munin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0621-1 Rating: important References: #1026539 Cross-References: CVE-2017-6188 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for munin fixes the following issues: - An attacker has been able to write arbitrary local files with the permissions of the web server, by using parameter injection (boo#1026539, CVE-2017-6188) - The MySQL plugin has been fixed to work correctly against MySQL 5.5 on Leap 42.1 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-310=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-310=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): munin-2.0.25-9.1 munin-node-2.0.25-9.1 - openSUSE Leap 42.1 (noarch): munin-2.0.25-7.1 munin-node-2.0.25-7.1 References: https://www.suse.com/security/cve/CVE-2017-6188.html https://bugzilla.suse.com/1026539

1 0

openSUSE-SU-2017:0620-1: moderate: Security update for bind
by opensuse-security＠opensuse.org 07 Mar '17

07 Mar '17

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0620-1 Rating: moderate References: #1024130 Cross-References: CVE-2017-3135 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following issues: - Fixed a possible denial of service vulnerability (affected only configurations using both DNS64 and RPZ, CVE-2017-3135, bsc#1024130) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-314=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-314=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): bind-9.9.9P1-46.1 bind-chrootenv-9.9.9P1-46.1 bind-debuginfo-9.9.9P1-46.1 bind-debugsource-9.9.9P1-46.1 bind-devel-9.9.9P1-46.1 bind-libs-9.9.9P1-46.1 bind-libs-debuginfo-9.9.9P1-46.1 bind-lwresd-9.9.9P1-46.1 bind-lwresd-debuginfo-9.9.9P1-46.1 bind-utils-9.9.9P1-46.1 bind-utils-debuginfo-9.9.9P1-46.1 - openSUSE Leap 42.2 (noarch): bind-doc-9.9.9P1-46.1 - openSUSE Leap 42.2 (x86_64): bind-libs-32bit-9.9.9P1-46.1 bind-libs-debuginfo-32bit-9.9.9P1-46.1 - openSUSE Leap 42.1 (i586 x86_64): bind-9.9.9P1-48.1 bind-chrootenv-9.9.9P1-48.1 bind-debuginfo-9.9.9P1-48.1 bind-debugsource-9.9.9P1-48.1 bind-devel-9.9.9P1-48.1 bind-libs-9.9.9P1-48.1 bind-libs-debuginfo-9.9.9P1-48.1 bind-lwresd-9.9.9P1-48.1 bind-lwresd-debuginfo-9.9.9P1-48.1 bind-utils-9.9.9P1-48.1 bind-utils-debuginfo-9.9.9P1-48.1 - openSUSE Leap 42.1 (noarch): bind-doc-9.9.9P1-48.1 - openSUSE Leap 42.1 (x86_64): bind-libs-32bit-9.9.9P1-48.1 bind-libs-debuginfo-32bit-9.9.9P1-48.1 References: https://www.suse.com/security/cve/CVE-2017-3135.html https://bugzilla.suse.com/1024130

1 0

openSUSE-RU-2017:0619-1: moderate: Recommended update for vinagre
by maintenance＠opensuse.org 07 Mar '17

07 Mar '17

openSUSE Recommended Update: Recommended update for vinagre ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0619-1 Rating: moderate References: #1002350 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for vinagre fixes certificate validation incompatibilities with FreeRDP 1.2 that could lead to failure to establish RDP connections. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-316=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): vinagre-3.20.2-5.1 vinagre-debuginfo-3.20.2-5.1 vinagre-debugsource-3.20.2-5.1 - openSUSE Leap 42.2 (noarch): vinagre-lang-3.20.2-5.1 References: https://bugzilla.suse.com/1002350

1 0

openSUSE-SU-2017:0618-1: important: Security update for mysql-community-server
by opensuse-security＠opensuse.org 07 Mar '17

07 Mar '17

openSUSE Security Update: Security update for mysql-community-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0618-1 Rating: important References: #1020872 #1020873 #1020875 #1020876 #1020877 #1020878 #1020882 #1020884 #1020885 #1020890 #1020893 #1020894 #1020896 Cross-References: CVE-2016-8318 CVE-2016-8327 CVE-2017-3238 CVE-2017-3244 CVE-2017-3257 CVE-2017-3258 CVE-2017-3265 CVE-2017-3273 CVE-2017-3291 CVE-2017-3312 CVE-2017-3313 CVE-2017-3317 CVE-2017-3318 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: mysql-community-server was updated to version 5.6.35 to fix bugs and security issues: * Changes http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html * Fixed CVEs: CVE-2016-8318 [boo#1020872], CVE-2017-3312 [boo#1020873], CVE-2017-3258 [boo#1020875], CVE-2017-3273 [boo#1020876], CVE-2017-3244 [boo#1020877], CVE-2017-3257 [boo#1020878], CVE-2017-3238 [boo#1020882], CVE-2017-3291 [boo#1020884], CVE-2017-3265 [boo#1020885], CVE-2017-3313 [boo#1020890], CVE-2016-8327 [boo#1020893], CVE-2017-3317 [boo#1020894], CVE-2017-3318 [boo#1020896] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-315=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libmysql56client18-5.6.35-22.1 libmysql56client18-debuginfo-5.6.35-22.1 libmysql56client_r18-5.6.35-22.1 mysql-community-server-5.6.35-22.1 mysql-community-server-bench-5.6.35-22.1 mysql-community-server-bench-debuginfo-5.6.35-22.1 mysql-community-server-client-5.6.35-22.1 mysql-community-server-client-debuginfo-5.6.35-22.1 mysql-community-server-debuginfo-5.6.35-22.1 mysql-community-server-debugsource-5.6.35-22.1 mysql-community-server-errormessages-5.6.35-22.1 mysql-community-server-test-5.6.35-22.1 mysql-community-server-test-debuginfo-5.6.35-22.1 mysql-community-server-tools-5.6.35-22.1 mysql-community-server-tools-debuginfo-5.6.35-22.1 - openSUSE Leap 42.2 (x86_64): libmysql56client18-32bit-5.6.35-22.1 libmysql56client18-debuginfo-32bit-5.6.35-22.1 libmysql56client_r18-32bit-5.6.35-22.1 References: https://www.suse.com/security/cve/CVE-2016-8318.html https://www.suse.com/security/cve/CVE-2016-8327.html https://www.suse.com/security/cve/CVE-2017-3238.html https://www.suse.com/security/cve/CVE-2017-3244.html https://www.suse.com/security/cve/CVE-2017-3257.html https://www.suse.com/security/cve/CVE-2017-3258.html https://www.suse.com/security/cve/CVE-2017-3265.html https://www.suse.com/security/cve/CVE-2017-3273.html https://www.suse.com/security/cve/CVE-2017-3291.html https://www.suse.com/security/cve/CVE-2017-3312.html https://www.suse.com/security/cve/CVE-2017-3313.html https://www.suse.com/security/cve/CVE-2017-3317.html https://www.suse.com/security/cve/CVE-2017-3318.html https://bugzilla.suse.com/1020872 https://bugzilla.suse.com/1020873 https://bugzilla.suse.com/1020875 https://bugzilla.suse.com/1020876 https://bugzilla.suse.com/1020877 https://bugzilla.suse.com/1020878 https://bugzilla.suse.com/1020882 https://bugzilla.suse.com/1020884 https://bugzilla.suse.com/1020885 https://bugzilla.suse.com/1020890 https://bugzilla.suse.com/1020893 https://bugzilla.suse.com/1020894 https://bugzilla.suse.com/1020896

1 0

openSUSE-OU-2017:0616-1: moderate: Optional update for png++
by maintenance＠opensuse.org 07 Mar '17

07 Mar '17

openSUSE Optional Update: Optional update for png++ ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0616-1 Rating: moderate References: #1026666 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update introduces png++ to the distribution. png++ is a C++ wrapper for the libpng library. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-311=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-311=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): png++-devel-0.2.9-2.1 - openSUSE Leap 42.1 (noarch): png++-devel-0.2.9-2.1 References: https://bugzilla.suse.com/1026666

1 0

openSUSE-OU-2017:0615-1: moderate: Optional update for waffle
by maintenance＠opensuse.org 07 Mar '17

07 Mar '17

openSUSE Optional Update: Optional update for waffle ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0615-1 Rating: moderate References: #1025632 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update introduces waffle into the distribution. Waffle is a C library defering selection of GL API and window system until runtime. It is used by the piglit testsuite. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-312=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-312=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libwaffle-1-0-1.5.2-2.1 libwaffle-1-0-debuginfo-1.5.2-2.1 waffle-1.5.2-2.1 waffle-debuginfo-1.5.2-2.1 waffle-debugsource-1.5.2-2.1 waffle-devel-1.5.2-2.1 - openSUSE Leap 42.1 (i586 x86_64): libwaffle-1-0-1.5.2-2.1 libwaffle-1-0-debuginfo-1.5.2-2.1 waffle-1.5.2-2.1 waffle-debuginfo-1.5.2-2.1 waffle-debugsource-1.5.2-2.1 waffle-devel-1.5.2-2.1 References: https://bugzilla.suse.com/1025632

1 0

openSUSE-RU-2017:0614-1: moderate: Recommended update for gnuhealth
by maintenance＠opensuse.org 07 Mar '17

07 Mar '17

openSUSE Recommended Update: Recommended update for gnuhealth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0614-1 Rating: moderate References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for gnuhealth fixes the following issues: - updated documentation - renamed gnuhealth_control to gnuhealth-control - added DB-role to gnuhealth-control Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-313=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): gnuhealth-3.0.6-9.1 References:

1 0

openSUSE-RU-2017:0613-1: Recommended update for clamav-database
by maintenance＠opensuse.org 06 Mar '17

06 Mar '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0613-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh March 6th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-309=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-309=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201703060005-49.1 - openSUSE Leap 42.1 (noarch): clamav-database-201703060005-228.1 References:

1 0

openSUSE-SU-2017:0598-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 03 Mar '17

03 Mar '17

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0598-1 Rating: moderate References: #1015187 #1015188 #1015189 Cross-References: CVE-2016-9933 CVE-2016-9934 CVE-2016-9935 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for php5 fixes the following issues: * CVE-2016-9933 Possible stack overflow on truecolor images handling [bsc#1015187] * CVE-2016-9934 Dereference from NULL pointer could lead to crash [bsc#1015188] * CVE-2016-9935 Invalid read could lead to crash [bsc#1015189] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-308=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-308=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_php5-5.5.14-75.2 apache2-mod_php5-debuginfo-5.5.14-75.2 php5-5.5.14-75.2 php5-bcmath-5.5.14-75.2 php5-bcmath-debuginfo-5.5.14-75.2 php5-bz2-5.5.14-75.2 php5-bz2-debuginfo-5.5.14-75.2 php5-calendar-5.5.14-75.2 php5-calendar-debuginfo-5.5.14-75.2 php5-ctype-5.5.14-75.2 php5-ctype-debuginfo-5.5.14-75.2 php5-curl-5.5.14-75.2 php5-curl-debuginfo-5.5.14-75.2 php5-dba-5.5.14-75.2 php5-dba-debuginfo-5.5.14-75.2 php5-debuginfo-5.5.14-75.2 php5-debugsource-5.5.14-75.2 php5-devel-5.5.14-75.2 php5-dom-5.5.14-75.2 php5-dom-debuginfo-5.5.14-75.2 php5-enchant-5.5.14-75.2 php5-enchant-debuginfo-5.5.14-75.2 php5-exif-5.5.14-75.2 php5-exif-debuginfo-5.5.14-75.2 php5-fastcgi-5.5.14-75.2 php5-fastcgi-debuginfo-5.5.14-75.2 php5-fileinfo-5.5.14-75.2 php5-fileinfo-debuginfo-5.5.14-75.2 php5-firebird-5.5.14-75.2 php5-firebird-debuginfo-5.5.14-75.2 php5-fpm-5.5.14-75.2 php5-fpm-debuginfo-5.5.14-75.2 php5-ftp-5.5.14-75.2 php5-ftp-debuginfo-5.5.14-75.2 php5-gd-5.5.14-75.2 php5-gd-debuginfo-5.5.14-75.2 php5-gettext-5.5.14-75.2 php5-gettext-debuginfo-5.5.14-75.2 php5-gmp-5.5.14-75.2 php5-gmp-debuginfo-5.5.14-75.2 php5-iconv-5.5.14-75.2 php5-iconv-debuginfo-5.5.14-75.2 php5-imap-5.5.14-75.2 php5-imap-debuginfo-5.5.14-75.2 php5-intl-5.5.14-75.2 php5-intl-debuginfo-5.5.14-75.2 php5-json-5.5.14-75.2 php5-json-debuginfo-5.5.14-75.2 php5-ldap-5.5.14-75.2 php5-ldap-debuginfo-5.5.14-75.2 php5-mbstring-5.5.14-75.2 php5-mbstring-debuginfo-5.5.14-75.2 php5-mcrypt-5.5.14-75.2 php5-mcrypt-debuginfo-5.5.14-75.2 php5-mssql-5.5.14-75.2 php5-mssql-debuginfo-5.5.14-75.2 php5-mysql-5.5.14-75.2 php5-mysql-debuginfo-5.5.14-75.2 php5-odbc-5.5.14-75.2 php5-odbc-debuginfo-5.5.14-75.2 php5-opcache-5.5.14-75.2 php5-opcache-debuginfo-5.5.14-75.2 php5-openssl-5.5.14-75.2 php5-openssl-debuginfo-5.5.14-75.2 php5-pcntl-5.5.14-75.2 php5-pcntl-debuginfo-5.5.14-75.2 php5-pdo-5.5.14-75.2 php5-pdo-debuginfo-5.5.14-75.2 php5-pgsql-5.5.14-75.2 php5-pgsql-debuginfo-5.5.14-75.2 php5-phar-5.5.14-75.2 php5-phar-debuginfo-5.5.14-75.2 php5-posix-5.5.14-75.2 php5-posix-debuginfo-5.5.14-75.2 php5-pspell-5.5.14-75.2 php5-pspell-debuginfo-5.5.14-75.2 php5-readline-5.5.14-75.2 php5-readline-debuginfo-5.5.14-75.2 php5-shmop-5.5.14-75.2 php5-shmop-debuginfo-5.5.14-75.2 php5-snmp-5.5.14-75.2 php5-snmp-debuginfo-5.5.14-75.2 php5-soap-5.5.14-75.2 php5-soap-debuginfo-5.5.14-75.2 php5-sockets-5.5.14-75.2 php5-sockets-debuginfo-5.5.14-75.2 php5-sqlite-5.5.14-75.2 php5-sqlite-debuginfo-5.5.14-75.2 php5-suhosin-5.5.14-75.2 php5-suhosin-debuginfo-5.5.14-75.2 php5-sysvmsg-5.5.14-75.2 php5-sysvmsg-debuginfo-5.5.14-75.2 php5-sysvsem-5.5.14-75.2 php5-sysvsem-debuginfo-5.5.14-75.2 php5-sysvshm-5.5.14-75.2 php5-sysvshm-debuginfo-5.5.14-75.2 php5-tidy-5.5.14-75.2 php5-tidy-debuginfo-5.5.14-75.2 php5-tokenizer-5.5.14-75.2 php5-tokenizer-debuginfo-5.5.14-75.2 php5-wddx-5.5.14-75.2 php5-wddx-debuginfo-5.5.14-75.2 php5-xmlreader-5.5.14-75.2 php5-xmlreader-debuginfo-5.5.14-75.2 php5-xmlrpc-5.5.14-75.2 php5-xmlrpc-debuginfo-5.5.14-75.2 php5-xmlwriter-5.5.14-75.2 php5-xmlwriter-debuginfo-5.5.14-75.2 php5-xsl-5.5.14-75.2 php5-xsl-debuginfo-5.5.14-75.2 php5-zip-5.5.14-75.2 php5-zip-debuginfo-5.5.14-75.2 php5-zlib-5.5.14-75.2 php5-zlib-debuginfo-5.5.14-75.2 - openSUSE Leap 42.2 (noarch): php5-pear-5.5.14-75.2 - openSUSE Leap 42.1 (i586 x86_64): apache2-mod_php5-5.5.14-75.1 apache2-mod_php5-debuginfo-5.5.14-75.1 php5-5.5.14-75.1 php5-bcmath-5.5.14-75.1 php5-bcmath-debuginfo-5.5.14-75.1 php5-bz2-5.5.14-75.1 php5-bz2-debuginfo-5.5.14-75.1 php5-calendar-5.5.14-75.1 php5-calendar-debuginfo-5.5.14-75.1 php5-ctype-5.5.14-75.1 php5-ctype-debuginfo-5.5.14-75.1 php5-curl-5.5.14-75.1 php5-curl-debuginfo-5.5.14-75.1 php5-dba-5.5.14-75.1 php5-dba-debuginfo-5.5.14-75.1 php5-debuginfo-5.5.14-75.1 php5-debugsource-5.5.14-75.1 php5-devel-5.5.14-75.1 php5-dom-5.5.14-75.1 php5-dom-debuginfo-5.5.14-75.1 php5-enchant-5.5.14-75.1 php5-enchant-debuginfo-5.5.14-75.1 php5-exif-5.5.14-75.1 php5-exif-debuginfo-5.5.14-75.1 php5-fastcgi-5.5.14-75.1 php5-fastcgi-debuginfo-5.5.14-75.1 php5-fileinfo-5.5.14-75.1 php5-fileinfo-debuginfo-5.5.14-75.1 php5-firebird-5.5.14-75.1 php5-firebird-debuginfo-5.5.14-75.1 php5-fpm-5.5.14-75.1 php5-fpm-debuginfo-5.5.14-75.1 php5-ftp-5.5.14-75.1 php5-ftp-debuginfo-5.5.14-75.1 php5-gd-5.5.14-75.1 php5-gd-debuginfo-5.5.14-75.1 php5-gettext-5.5.14-75.1 php5-gettext-debuginfo-5.5.14-75.1 php5-gmp-5.5.14-75.1 php5-gmp-debuginfo-5.5.14-75.1 php5-iconv-5.5.14-75.1 php5-iconv-debuginfo-5.5.14-75.1 php5-imap-5.5.14-75.1 php5-imap-debuginfo-5.5.14-75.1 php5-intl-5.5.14-75.1 php5-intl-debuginfo-5.5.14-75.1 php5-json-5.5.14-75.1 php5-json-debuginfo-5.5.14-75.1 php5-ldap-5.5.14-75.1 php5-ldap-debuginfo-5.5.14-75.1 php5-mbstring-5.5.14-75.1 php5-mbstring-debuginfo-5.5.14-75.1 php5-mcrypt-5.5.14-75.1 php5-mcrypt-debuginfo-5.5.14-75.1 php5-mssql-5.5.14-75.1 php5-mssql-debuginfo-5.5.14-75.1 php5-mysql-5.5.14-75.1 php5-mysql-debuginfo-5.5.14-75.1 php5-odbc-5.5.14-75.1 php5-odbc-debuginfo-5.5.14-75.1 php5-opcache-5.5.14-75.1 php5-opcache-debuginfo-5.5.14-75.1 php5-openssl-5.5.14-75.1 php5-openssl-debuginfo-5.5.14-75.1 php5-pcntl-5.5.14-75.1 php5-pcntl-debuginfo-5.5.14-75.1 php5-pdo-5.5.14-75.1 php5-pdo-debuginfo-5.5.14-75.1 php5-pgsql-5.5.14-75.1 php5-pgsql-debuginfo-5.5.14-75.1 php5-phar-5.5.14-75.1 php5-phar-debuginfo-5.5.14-75.1 php5-posix-5.5.14-75.1 php5-posix-debuginfo-5.5.14-75.1 php5-pspell-5.5.14-75.1 php5-pspell-debuginfo-5.5.14-75.1 php5-readline-5.5.14-75.1 php5-readline-debuginfo-5.5.14-75.1 php5-shmop-5.5.14-75.1 php5-shmop-debuginfo-5.5.14-75.1 php5-snmp-5.5.14-75.1 php5-snmp-debuginfo-5.5.14-75.1 php5-soap-5.5.14-75.1 php5-soap-debuginfo-5.5.14-75.1 php5-sockets-5.5.14-75.1 php5-sockets-debuginfo-5.5.14-75.1 php5-sqlite-5.5.14-75.1 php5-sqlite-debuginfo-5.5.14-75.1 php5-suhosin-5.5.14-75.1 php5-suhosin-debuginfo-5.5.14-75.1 php5-sysvmsg-5.5.14-75.1 php5-sysvmsg-debuginfo-5.5.14-75.1 php5-sysvsem-5.5.14-75.1 php5-sysvsem-debuginfo-5.5.14-75.1 php5-sysvshm-5.5.14-75.1 php5-sysvshm-debuginfo-5.5.14-75.1 php5-tidy-5.5.14-75.1 php5-tidy-debuginfo-5.5.14-75.1 php5-tokenizer-5.5.14-75.1 php5-tokenizer-debuginfo-5.5.14-75.1 php5-wddx-5.5.14-75.1 php5-wddx-debuginfo-5.5.14-75.1 php5-xmlreader-5.5.14-75.1 php5-xmlreader-debuginfo-5.5.14-75.1 php5-xmlrpc-5.5.14-75.1 php5-xmlrpc-debuginfo-5.5.14-75.1 php5-xmlwriter-5.5.14-75.1 php5-xmlwriter-debuginfo-5.5.14-75.1 php5-xsl-5.5.14-75.1 php5-xsl-debuginfo-5.5.14-75.1 php5-zip-5.5.14-75.1 php5-zip-debuginfo-5.5.14-75.1 php5-zlib-5.5.14-75.1 php5-zlib-debuginfo-5.5.14-75.1 - openSUSE Leap 42.1 (noarch): php5-pear-5.5.14-75.1 References: https://www.suse.com/security/cve/CVE-2016-9933.html https://www.suse.com/security/cve/CVE-2016-9934.html https://www.suse.com/security/cve/CVE-2016-9935.html https://bugzilla.suse.com/1015187 https://bugzilla.suse.com/1015188 https://bugzilla.suse.com/1015189

1 0

openSUSE-RU-2017:0597-1: Recommended update for clamav-database
by maintenance＠opensuse.org 03 Mar '17

03 Mar '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0597-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh Feb 27th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-307=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-307=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201702270005-46.1 - openSUSE Leap 42.1 (noarch): clamav-database-201702270005-225.1 References:

1 0

openSUSE-SU-2017:0590-1: important: Security update for util-linux
by opensuse-security＠opensuse.org 02 Mar '17

02 Mar '17

openSUSE Security Update: Security update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0590-1 Rating: important References: #1008965 #1012504 #1012632 #1019332 #1020077 #1023041 Cross-References: CVE-2017-2616 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has 5 fixes is now available. Description: This update for util-linux fixes the following issues: This security issue was fixed: - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges (bsc#1023041). This non-security issues were fixed: - lscpu: Implement WSL detection and work around crash (bsc#1019332) - fstrim: De-duplicate btrfs sub-volumes for "fstrim -a" and bind mounts (bsc#1020077) - Fix regressions in safe loop re-use patch set for libmount (bsc#1012504) - Disable ro checks for mtab (bsc#1012632) - Ensure that the option "users,exec,dev,suid" work as expected on NFS mounts (bsc#1008965) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-305=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libblkid-devel-2.25-21.1 libblkid1-2.25-21.1 libblkid1-debuginfo-2.25-21.1 libmount-devel-2.25-21.1 libmount1-2.25-21.1 libmount1-debuginfo-2.25-21.1 libsmartcols-devel-2.25-21.1 libsmartcols1-2.25-21.1 libsmartcols1-debuginfo-2.25-21.1 libuuid-devel-2.25-21.1 libuuid1-2.25-21.1 libuuid1-debuginfo-2.25-21.1 python-libmount-2.25-21.1 python-libmount-debuginfo-2.25-21.1 python-libmount-debugsource-2.25-21.1 util-linux-2.25-21.1 util-linux-debuginfo-2.25-21.1 util-linux-debugsource-2.25-21.1 util-linux-systemd-2.25-21.1 util-linux-systemd-debuginfo-2.25-21.1 util-linux-systemd-debugsource-2.25-21.1 uuidd-2.25-21.1 uuidd-debuginfo-2.25-21.1 - openSUSE Leap 42.1 (noarch): util-linux-lang-2.25-21.1 - openSUSE Leap 42.1 (x86_64): libblkid-devel-32bit-2.25-21.1 libblkid1-32bit-2.25-21.1 libblkid1-debuginfo-32bit-2.25-21.1 libmount-devel-32bit-2.25-21.1 libmount1-32bit-2.25-21.1 libmount1-debuginfo-32bit-2.25-21.1 libuuid-devel-32bit-2.25-21.1 libuuid1-32bit-2.25-21.1 libuuid1-debuginfo-32bit-2.25-21.1 References: https://www.suse.com/security/cve/CVE-2017-2616.html https://bugzilla.suse.com/1008965 https://bugzilla.suse.com/1012504 https://bugzilla.suse.com/1012632 https://bugzilla.suse.com/1019332 https://bugzilla.suse.com/1020077 https://bugzilla.suse.com/1023041

1 0

openSUSE-SU-2017:0589-1: important: Security update for util-linux
by opensuse-security＠opensuse.org 02 Mar '17

02 Mar '17

openSUSE Security Update: Security update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0589-1 Rating: important References: #1008965 #1012504 #1012632 #1019332 #1020077 #1020985 #1023041 Cross-References: CVE-2017-2616 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This update for util-linux fixes the following issues: This security issue was fixed: - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges (bsc#1023041). This non-security issues were fixed: - lscpu: Implement WSL detection and work around crash (bsc#1019332) - fstrim: De-duplicate btrfs sub-volumes for "fstrim -a" and bind mounts (bsc#1020077) - Fix regressions in safe loop re-use patch set for libmount (bsc#1012504) - Disable ro checks for mtab (bsc#1012632) - Ensure that the option "users,exec,dev,suid" work as expected on NFS mounts (bsc#1008965) - Fix empty slave detection to prevent 100% CPU load in some cases (bsc#1020985) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-306=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libblkid-devel-2.28-10.1 libblkid-devel-static-2.28-10.1 libblkid1-2.28-10.1 libblkid1-debuginfo-2.28-10.1 libfdisk-devel-2.28-10.1 libfdisk-devel-static-2.28-10.1 libfdisk1-2.28-10.1 libfdisk1-debuginfo-2.28-10.1 libmount-devel-2.28-10.1 libmount-devel-static-2.28-10.1 libmount1-2.28-10.1 libmount1-debuginfo-2.28-10.1 libsmartcols-devel-2.28-10.1 libsmartcols-devel-static-2.28-10.1 libsmartcols1-2.28-10.1 libsmartcols1-debuginfo-2.28-10.1 libuuid-devel-2.28-10.1 libuuid-devel-static-2.28-10.1 libuuid1-2.28-10.1 libuuid1-debuginfo-2.28-10.1 python-libmount-2.28-10.2 python-libmount-debuginfo-2.28-10.2 python-libmount-debugsource-2.28-10.2 util-linux-2.28-10.1 util-linux-debuginfo-2.28-10.1 util-linux-debugsource-2.28-10.1 util-linux-systemd-2.28-10.1 util-linux-systemd-debuginfo-2.28-10.1 util-linux-systemd-debugsource-2.28-10.1 uuidd-2.28-10.1 uuidd-debuginfo-2.28-10.1 - openSUSE Leap 42.2 (x86_64): libblkid-devel-32bit-2.28-10.1 libblkid1-32bit-2.28-10.1 libblkid1-debuginfo-32bit-2.28-10.1 libmount-devel-32bit-2.28-10.1 libmount1-32bit-2.28-10.1 libmount1-debuginfo-32bit-2.28-10.1 libuuid-devel-32bit-2.28-10.1 libuuid1-32bit-2.28-10.1 libuuid1-debuginfo-32bit-2.28-10.1 - openSUSE Leap 42.2 (noarch): util-linux-lang-2.28-10.1 References: https://www.suse.com/security/cve/CVE-2017-2616.html https://bugzilla.suse.com/1008965 https://bugzilla.suse.com/1012504 https://bugzilla.suse.com/1012632 https://bugzilla.suse.com/1019332 https://bugzilla.suse.com/1020077 https://bugzilla.suse.com/1020985 https://bugzilla.suse.com/1023041

1 0

openSUSE-SU-2017:0588-1: important: Security update for php7
by opensuse-security＠opensuse.org 02 Mar '17

02 Mar '17

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0588-1 Rating: important References: #1008026 #1019547 #1019550 #1019568 #1019570 #1022219 #1022255 #1022257 #1022260 #1022262 #1022263 #1022264 #1022265 Cross-References: CVE-2016-10158 CVE-2016-10159 CVE-2016-10160 CVE-2016-10161 CVE-2016-10162 CVE-2016-10166 CVE-2016-10167 CVE-2016-10168 CVE-2016-7478 CVE-2016-7479 CVE-2016-7480 CVE-2016-9138 CVE-2017-5340 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update for php7 fixes the following security issues: - CVE-2016-7480: The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP did not verify that a key is an object, which allowed remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access) via crafted serialized data. (bsc#1019568) - CVE-2017-5340: Zend/zend_hash.c in PHP mishandled certain cases that require large array allocations, which allowed remote attackers to execute arbitrary code or cause a denial of service (integer overflow, uninitialized memory access, and use of arbitrary destructor function pointers) via crafted serialized data. (bsc#1019570) - CVE-2016-7479: In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may have lead to use-after-free. A remote attacker may exploit this bug to gain arbitrary code execution. (bsc#1019547) - CVE-2016-7478: Zend/zend_exceptions.c in PHP allowed remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876. (bsc#1019550) - CVE-2016-10159: Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP allowed remote attackers to cause a denial of service (memory consumption or application crash) via a truncated manifest entry in a PHAR archive. (bsc#1022255) - CVE-2016-10160: Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP allowed remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch. (bsc#1022257) - CVE-2016-10161: The object_common1 function in ext/standard/var_unserializer.c in PHP allowed remote attackers to cause a denial of service (buffer over-read and application crash) via crafted serialized data that is mishandled in a finish_nested_data call. (bsc#1022260) - CVE-2016-10162: The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7 allowed remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call. (bsc#1022262) - CVE-2016-10166: A potential unsigned underflow in gd interpolation functions could lead to memory corruption in the PHP gd module (bsc#1022263) - CVE-2016-10167: A denial of service problem in gdImageCreateFromGd2Ctx() could lead to php out of memory even on small files. (bsc#1022264) - CVE-2016-10168: A signed integer overflow in the gd module could lead to memory corruption (bsc#1022265) - CVE-2016-9138: PHP mishandled property modification during __wakeup processing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data, as demonstrated by Exception::__toString with DateInterval::__wakeup. (bsc#1008026) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-304=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_php7-7.0.7-12.1 apache2-mod_php7-debuginfo-7.0.7-12.1 php7-7.0.7-12.1 php7-bcmath-7.0.7-12.1 php7-bcmath-debuginfo-7.0.7-12.1 php7-bz2-7.0.7-12.1 php7-bz2-debuginfo-7.0.7-12.1 php7-calendar-7.0.7-12.1 php7-calendar-debuginfo-7.0.7-12.1 php7-ctype-7.0.7-12.1 php7-ctype-debuginfo-7.0.7-12.1 php7-curl-7.0.7-12.1 php7-curl-debuginfo-7.0.7-12.1 php7-dba-7.0.7-12.1 php7-dba-debuginfo-7.0.7-12.1 php7-debuginfo-7.0.7-12.1 php7-debugsource-7.0.7-12.1 php7-devel-7.0.7-12.1 php7-dom-7.0.7-12.1 php7-dom-debuginfo-7.0.7-12.1 php7-enchant-7.0.7-12.1 php7-enchant-debuginfo-7.0.7-12.1 php7-exif-7.0.7-12.1 php7-exif-debuginfo-7.0.7-12.1 php7-fastcgi-7.0.7-12.1 php7-fastcgi-debuginfo-7.0.7-12.1 php7-fileinfo-7.0.7-12.1 php7-fileinfo-debuginfo-7.0.7-12.1 php7-firebird-7.0.7-12.1 php7-firebird-debuginfo-7.0.7-12.1 php7-fpm-7.0.7-12.1 php7-fpm-debuginfo-7.0.7-12.1 php7-ftp-7.0.7-12.1 php7-ftp-debuginfo-7.0.7-12.1 php7-gd-7.0.7-12.1 php7-gd-debuginfo-7.0.7-12.1 php7-gettext-7.0.7-12.1 php7-gettext-debuginfo-7.0.7-12.1 php7-gmp-7.0.7-12.1 php7-gmp-debuginfo-7.0.7-12.1 php7-iconv-7.0.7-12.1 php7-iconv-debuginfo-7.0.7-12.1 php7-imap-7.0.7-12.1 php7-imap-debuginfo-7.0.7-12.1 php7-intl-7.0.7-12.1 php7-intl-debuginfo-7.0.7-12.1 php7-json-7.0.7-12.1 php7-json-debuginfo-7.0.7-12.1 php7-ldap-7.0.7-12.1 php7-ldap-debuginfo-7.0.7-12.1 php7-mbstring-7.0.7-12.1 php7-mbstring-debuginfo-7.0.7-12.1 php7-mcrypt-7.0.7-12.1 php7-mcrypt-debuginfo-7.0.7-12.1 php7-mysql-7.0.7-12.1 php7-mysql-debuginfo-7.0.7-12.1 php7-odbc-7.0.7-12.1 php7-odbc-debuginfo-7.0.7-12.1 php7-opcache-7.0.7-12.1 php7-opcache-debuginfo-7.0.7-12.1 php7-openssl-7.0.7-12.1 php7-openssl-debuginfo-7.0.7-12.1 php7-pcntl-7.0.7-12.1 php7-pcntl-debuginfo-7.0.7-12.1 php7-pdo-7.0.7-12.1 php7-pdo-debuginfo-7.0.7-12.1 php7-pgsql-7.0.7-12.1 php7-pgsql-debuginfo-7.0.7-12.1 php7-phar-7.0.7-12.1 php7-phar-debuginfo-7.0.7-12.1 php7-posix-7.0.7-12.1 php7-posix-debuginfo-7.0.7-12.1 php7-pspell-7.0.7-12.1 php7-pspell-debuginfo-7.0.7-12.1 php7-readline-7.0.7-12.1 php7-readline-debuginfo-7.0.7-12.1 php7-shmop-7.0.7-12.1 php7-shmop-debuginfo-7.0.7-12.1 php7-snmp-7.0.7-12.1 php7-snmp-debuginfo-7.0.7-12.1 php7-soap-7.0.7-12.1 php7-soap-debuginfo-7.0.7-12.1 php7-sockets-7.0.7-12.1 php7-sockets-debuginfo-7.0.7-12.1 php7-sqlite-7.0.7-12.1 php7-sqlite-debuginfo-7.0.7-12.1 php7-sysvmsg-7.0.7-12.1 php7-sysvmsg-debuginfo-7.0.7-12.1 php7-sysvsem-7.0.7-12.1 php7-sysvsem-debuginfo-7.0.7-12.1 php7-sysvshm-7.0.7-12.1 php7-sysvshm-debuginfo-7.0.7-12.1 php7-tidy-7.0.7-12.1 php7-tidy-debuginfo-7.0.7-12.1 php7-tokenizer-7.0.7-12.1 php7-tokenizer-debuginfo-7.0.7-12.1 php7-wddx-7.0.7-12.1 php7-wddx-debuginfo-7.0.7-12.1 php7-xmlreader-7.0.7-12.1 php7-xmlreader-debuginfo-7.0.7-12.1 php7-xmlrpc-7.0.7-12.1 php7-xmlrpc-debuginfo-7.0.7-12.1 php7-xmlwriter-7.0.7-12.1 php7-xmlwriter-debuginfo-7.0.7-12.1 php7-xsl-7.0.7-12.1 php7-xsl-debuginfo-7.0.7-12.1 php7-zip-7.0.7-12.1 php7-zip-debuginfo-7.0.7-12.1 php7-zlib-7.0.7-12.1 php7-zlib-debuginfo-7.0.7-12.1 - openSUSE Leap 42.2 (noarch): php7-pear-7.0.7-12.1 php7-pear-Archive_Tar-7.0.7-12.1 References: https://www.suse.com/security/cve/CVE-2016-10158.html https://www.suse.com/security/cve/CVE-2016-10159.html https://www.suse.com/security/cve/CVE-2016-10160.html https://www.suse.com/security/cve/CVE-2016-10161.html https://www.suse.com/security/cve/CVE-2016-10162.html https://www.suse.com/security/cve/CVE-2016-10166.html https://www.suse.com/security/cve/CVE-2016-10167.html https://www.suse.com/security/cve/CVE-2016-10168.html https://www.suse.com/security/cve/CVE-2016-7478.html https://www.suse.com/security/cve/CVE-2016-7479.html https://www.suse.com/security/cve/CVE-2016-7480.html https://www.suse.com/security/cve/CVE-2016-9138.html https://www.suse.com/security/cve/CVE-2017-5340.html https://bugzilla.suse.com/1008026 https://bugzilla.suse.com/1019547 https://bugzilla.suse.com/1019550 https://bugzilla.suse.com/1019568 https://bugzilla.suse.com/1019570 https://bugzilla.suse.com/1022219 https://bugzilla.suse.com/1022255 https://bugzilla.suse.com/1022257 https://bugzilla.suse.com/1022260 https://bugzilla.suse.com/1022262 https://bugzilla.suse.com/1022263 https://bugzilla.suse.com/1022264 https://bugzilla.suse.com/1022265

1 0

openSUSE-SU-2017:0587-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 02 Mar '17

02 Mar '17

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0587-1 Rating: moderate References: #1017308 #1017310 #1017311 #1017312 #1017313 #1017314 #1017318 #1017319 #1017320 #1017321 #1017322 #1017324 #1017325 #1017326 #1017421 #1020433 #1020435 #1020436 #1020439 #1020441 #1020443 #1020446 #1020448 Cross-References: CVE-2016-10046 CVE-2016-10048 CVE-2016-10049 CVE-2016-10050 CVE-2016-10051 CVE-2016-10052 CVE-2016-10059 CVE-2016-10060 CVE-2016-10061 CVE-2016-10062 CVE-2016-10063 CVE-2016-10064 CVE-2016-10065 CVE-2016-10068 CVE-2016-10069 CVE-2016-10070 CVE-2016-10071 CVE-2016-10144 CVE-2016-10145 CVE-2016-10146 CVE-2017-5506 CVE-2017-5507 CVE-2017-5508 CVE-2017-5510 CVE-2017-5511 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 25 vulnerabilities is now available. Description: This update for ImageMagick fixes the following issues: - CVE-2016-10046: Prevent buffer overflow in draw.c caused by an incorrect length calculation (bsc#1017308) - CVE-2016-10048: Arbitrary module could have been load because relative path were not escaped (bsc#1017310) - CVE-2016-10049: Corrupt RLE files could have overflowed a buffer due to a incorrect length calculation (bsc#1017311) - CVE-2016-10050: Corrupt RLE files could have overflowed a heap buffer due to a missing offset check (bsc#1017312) - CVE-2016-10051: Fixed use after free when reading PWP files (bsc#1017313) - CVE-2016-10052: Added bound check to exif parsing of JPEG files (bsc#1017314) - CVE-2016-10059: Unchecked calculation when reading TIFF files could have lead to a buffer overflow (bsc#1017318) - CVE-2016-10060: Improved error handling when writing files to not mask errors (bsc#1017319) - CVE-2016-10061: Improved error handling when writing files to not mask errors (bsc#1017319). - CVE-2016-10062: Improved error handling when writing files to not mask errors (bsc#1017319). - CVE-2016-10063: Check validity of extend during TIFF file reading (bsc#1017320) - CVE-2016-10064: Improved checks for buffer overflow when reading TIFF files (bsc#1017321) - CVE-2016-10065: Unchecked calculations when reading VIFF files could have lead to out of bound reads (bsc#1017322) - CVE-2016-10068: Prevent NULL pointer access when using the MSL interpreter (bsc#1017324) - CVE-2016-10069: Add check for invalid mat file (bsc#1017325). - CVE-2016-10070: Prevent allocating the wrong amount of memory when reading mat files (bsc#1017326) - CVE-2016-10071: Prevent allocating the wrong amount of memory when reading mat files (bsc#1017326) - CVE-2016-10144: Added a check after allocating memory when parsing IPL files (bsc#1020433) - CVE-2016-10145: Fixed of-by-one in string copy operation when parsing WPG files (bsc#1020435) - CVE-2016-10146: Captions and labels were handled incorrectly, causing a memory leak that could have lead to DoS (bsc#1020443) - CVE-2017-5506: Missing offset check leading to a double-free (bsc#1020436) - CVE-2017-5507: Fixed a memory leak when reading MPC files allowing for DoS (bsc#1020439) - CVE-2017-5508: Increase the amount of memory allocated for TIFF pixels to prevent a heap buffer-overflow (bsc#1020441) - CVE-2017-5510: Prevent out-of-bounds write when reading PSD files (bsc#1020446). - CVE-2017-5511: A missing cast when reading PSD files could have caused memory corruption by a heap overflow (bsc#1020448) This update removes the fix for CVE-2016-9773. ImageMagick-6 was not affected by CVE-2016-9773 and it caused a regression (at least in GraphicsMagick) (bsc#1017421). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-303=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-303=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ImageMagick-6.8.8.1-28.1 ImageMagick-debuginfo-6.8.8.1-28.1 ImageMagick-debugsource-6.8.8.1-28.1 ImageMagick-devel-6.8.8.1-28.1 ImageMagick-extra-6.8.8.1-28.1 ImageMagick-extra-debuginfo-6.8.8.1-28.1 libMagick++-6_Q16-3-6.8.8.1-28.1 libMagick++-6_Q16-3-debuginfo-6.8.8.1-28.1 libMagick++-devel-6.8.8.1-28.1 libMagickCore-6_Q16-1-6.8.8.1-28.1 libMagickCore-6_Q16-1-debuginfo-6.8.8.1-28.1 libMagickWand-6_Q16-1-6.8.8.1-28.1 libMagickWand-6_Q16-1-debuginfo-6.8.8.1-28.1 perl-PerlMagick-6.8.8.1-28.1 perl-PerlMagick-debuginfo-6.8.8.1-28.1 - openSUSE Leap 42.2 (x86_64): ImageMagick-devel-32bit-6.8.8.1-28.1 libMagick++-6_Q16-3-32bit-6.8.8.1-28.1 libMagick++-6_Q16-3-debuginfo-32bit-6.8.8.1-28.1 libMagick++-devel-32bit-6.8.8.1-28.1 libMagickCore-6_Q16-1-32bit-6.8.8.1-28.1 libMagickCore-6_Q16-1-debuginfo-32bit-6.8.8.1-28.1 libMagickWand-6_Q16-1-32bit-6.8.8.1-28.1 libMagickWand-6_Q16-1-debuginfo-32bit-6.8.8.1-28.1 - openSUSE Leap 42.2 (noarch): ImageMagick-doc-6.8.8.1-28.1 - openSUSE Leap 42.1 (i586 x86_64): ImageMagick-6.8.8.1-30.1 ImageMagick-debuginfo-6.8.8.1-30.1 ImageMagick-debugsource-6.8.8.1-30.1 ImageMagick-devel-6.8.8.1-30.1 ImageMagick-extra-6.8.8.1-30.1 ImageMagick-extra-debuginfo-6.8.8.1-30.1 libMagick++-6_Q16-3-6.8.8.1-30.1 libMagick++-6_Q16-3-debuginfo-6.8.8.1-30.1 libMagick++-devel-6.8.8.1-30.1 libMagickCore-6_Q16-1-6.8.8.1-30.1 libMagickCore-6_Q16-1-debuginfo-6.8.8.1-30.1 libMagickWand-6_Q16-1-6.8.8.1-30.1 libMagickWand-6_Q16-1-debuginfo-6.8.8.1-30.1 perl-PerlMagick-6.8.8.1-30.1 perl-PerlMagick-debuginfo-6.8.8.1-30.1 - openSUSE Leap 42.1 (x86_64): ImageMagick-devel-32bit-6.8.8.1-30.1 libMagick++-6_Q16-3-32bit-6.8.8.1-30.1 libMagick++-6_Q16-3-debuginfo-32bit-6.8.8.1-30.1 libMagick++-devel-32bit-6.8.8.1-30.1 libMagickCore-6_Q16-1-32bit-6.8.8.1-30.1 libMagickCore-6_Q16-1-debuginfo-32bit-6.8.8.1-30.1 libMagickWand-6_Q16-1-32bit-6.8.8.1-30.1 libMagickWand-6_Q16-1-debuginfo-32bit-6.8.8.1-30.1 - openSUSE Leap 42.1 (noarch): ImageMagick-doc-6.8.8.1-30.1 References: https://www.suse.com/security/cve/CVE-2016-10046.html https://www.suse.com/security/cve/CVE-2016-10048.html https://www.suse.com/security/cve/CVE-2016-10049.html https://www.suse.com/security/cve/CVE-2016-10050.html https://www.suse.com/security/cve/CVE-2016-10051.html https://www.suse.com/security/cve/CVE-2016-10052.html https://www.suse.com/security/cve/CVE-2016-10059.html https://www.suse.com/security/cve/CVE-2016-10060.html https://www.suse.com/security/cve/CVE-2016-10061.html https://www.suse.com/security/cve/CVE-2016-10062.html https://www.suse.com/security/cve/CVE-2016-10063.html https://www.suse.com/security/cve/CVE-2016-10064.html https://www.suse.com/security/cve/CVE-2016-10065.html https://www.suse.com/security/cve/CVE-2016-10068.html https://www.suse.com/security/cve/CVE-2016-10069.html https://www.suse.com/security/cve/CVE-2016-10070.html https://www.suse.com/security/cve/CVE-2016-10071.html https://www.suse.com/security/cve/CVE-2016-10144.html https://www.suse.com/security/cve/CVE-2016-10145.html https://www.suse.com/security/cve/CVE-2016-10146.html https://www.suse.com/security/cve/CVE-2017-5506.html https://www.suse.com/security/cve/CVE-2017-5507.html https://www.suse.com/security/cve/CVE-2017-5508.html https://www.suse.com/security/cve/CVE-2017-5510.html https://www.suse.com/security/cve/CVE-2017-5511.html https://bugzilla.suse.com/1017308 https://bugzilla.suse.com/1017310 https://bugzilla.suse.com/1017311 https://bugzilla.suse.com/1017312 https://bugzilla.suse.com/1017313 https://bugzilla.suse.com/1017314 https://bugzilla.suse.com/1017318 https://bugzilla.suse.com/1017319 https://bugzilla.suse.com/1017320 https://bugzilla.suse.com/1017321 https://bugzilla.suse.com/1017322 https://bugzilla.suse.com/1017324 https://bugzilla.suse.com/1017325 https://bugzilla.suse.com/1017326 https://bugzilla.suse.com/1017421 https://bugzilla.suse.com/1020433 https://bugzilla.suse.com/1020435 https://bugzilla.suse.com/1020436 https://bugzilla.suse.com/1020439 https://bugzilla.suse.com/1020441 https://bugzilla.suse.com/1020443 https://bugzilla.suse.com/1020446 https://bugzilla.suse.com/1020448

1 0