March 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2017:0618-1: important: Security update for mysql-community-server
by opensuse-security＠opensuse.org 07 Mar '17

07 Mar '17

openSUSE Security Update: Security update for mysql-community-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0618-1 Rating: important References: #1020872 #1020873 #1020875 #1020876 #1020877 #1020878 #1020882 #1020884 #1020885 #1020890 #1020893 #1020894 #1020896 Cross-References: CVE-2016-8318 CVE-2016-8327 CVE-2017-3238 CVE-2017-3244 CVE-2017-3257 CVE-2017-3258 CVE-2017-3265 CVE-2017-3273 CVE-2017-3291 CVE-2017-3312 CVE-2017-3313 CVE-2017-3317 CVE-2017-3318 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: mysql-community-server was updated to version 5.6.35 to fix bugs and security issues: * Changes http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-35.html * Fixed CVEs: CVE-2016-8318 [boo#1020872], CVE-2017-3312 [boo#1020873], CVE-2017-3258 [boo#1020875], CVE-2017-3273 [boo#1020876], CVE-2017-3244 [boo#1020877], CVE-2017-3257 [boo#1020878], CVE-2017-3238 [boo#1020882], CVE-2017-3291 [boo#1020884], CVE-2017-3265 [boo#1020885], CVE-2017-3313 [boo#1020890], CVE-2016-8327 [boo#1020893], CVE-2017-3317 [boo#1020894], CVE-2017-3318 [boo#1020896] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-315=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libmysql56client18-5.6.35-22.1 libmysql56client18-debuginfo-5.6.35-22.1 libmysql56client_r18-5.6.35-22.1 mysql-community-server-5.6.35-22.1 mysql-community-server-bench-5.6.35-22.1 mysql-community-server-bench-debuginfo-5.6.35-22.1 mysql-community-server-client-5.6.35-22.1 mysql-community-server-client-debuginfo-5.6.35-22.1 mysql-community-server-debuginfo-5.6.35-22.1 mysql-community-server-debugsource-5.6.35-22.1 mysql-community-server-errormessages-5.6.35-22.1 mysql-community-server-test-5.6.35-22.1 mysql-community-server-test-debuginfo-5.6.35-22.1 mysql-community-server-tools-5.6.35-22.1 mysql-community-server-tools-debuginfo-5.6.35-22.1 - openSUSE Leap 42.2 (x86_64): libmysql56client18-32bit-5.6.35-22.1 libmysql56client18-debuginfo-32bit-5.6.35-22.1 libmysql56client_r18-32bit-5.6.35-22.1 References: https://www.suse.com/security/cve/CVE-2016-8318.html https://www.suse.com/security/cve/CVE-2016-8327.html https://www.suse.com/security/cve/CVE-2017-3238.html https://www.suse.com/security/cve/CVE-2017-3244.html https://www.suse.com/security/cve/CVE-2017-3257.html https://www.suse.com/security/cve/CVE-2017-3258.html https://www.suse.com/security/cve/CVE-2017-3265.html https://www.suse.com/security/cve/CVE-2017-3273.html https://www.suse.com/security/cve/CVE-2017-3291.html https://www.suse.com/security/cve/CVE-2017-3312.html https://www.suse.com/security/cve/CVE-2017-3313.html https://www.suse.com/security/cve/CVE-2017-3317.html https://www.suse.com/security/cve/CVE-2017-3318.html https://bugzilla.suse.com/1020872 https://bugzilla.suse.com/1020873 https://bugzilla.suse.com/1020875 https://bugzilla.suse.com/1020876 https://bugzilla.suse.com/1020877 https://bugzilla.suse.com/1020878 https://bugzilla.suse.com/1020882 https://bugzilla.suse.com/1020884 https://bugzilla.suse.com/1020885 https://bugzilla.suse.com/1020890 https://bugzilla.suse.com/1020893 https://bugzilla.suse.com/1020894 https://bugzilla.suse.com/1020896

1 0

openSUSE-OU-2017:0616-1: moderate: Optional update for png++
by maintenance＠opensuse.org 07 Mar '17

07 Mar '17

openSUSE Optional Update: Optional update for png++ ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0616-1 Rating: moderate References: #1026666 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update introduces png++ to the distribution. png++ is a C++ wrapper for the libpng library. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-311=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-311=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): png++-devel-0.2.9-2.1 - openSUSE Leap 42.1 (noarch): png++-devel-0.2.9-2.1 References: https://bugzilla.suse.com/1026666

1 0

openSUSE-OU-2017:0615-1: moderate: Optional update for waffle
by maintenance＠opensuse.org 07 Mar '17

07 Mar '17

openSUSE Optional Update: Optional update for waffle ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0615-1 Rating: moderate References: #1025632 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update introduces waffle into the distribution. Waffle is a C library defering selection of GL API and window system until runtime. It is used by the piglit testsuite. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-312=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-312=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libwaffle-1-0-1.5.2-2.1 libwaffle-1-0-debuginfo-1.5.2-2.1 waffle-1.5.2-2.1 waffle-debuginfo-1.5.2-2.1 waffle-debugsource-1.5.2-2.1 waffle-devel-1.5.2-2.1 - openSUSE Leap 42.1 (i586 x86_64): libwaffle-1-0-1.5.2-2.1 libwaffle-1-0-debuginfo-1.5.2-2.1 waffle-1.5.2-2.1 waffle-debuginfo-1.5.2-2.1 waffle-debugsource-1.5.2-2.1 waffle-devel-1.5.2-2.1 References: https://bugzilla.suse.com/1025632

1 0

openSUSE-RU-2017:0614-1: moderate: Recommended update for gnuhealth
by maintenance＠opensuse.org 07 Mar '17

07 Mar '17

openSUSE Recommended Update: Recommended update for gnuhealth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0614-1 Rating: moderate References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for gnuhealth fixes the following issues: - updated documentation - renamed gnuhealth_control to gnuhealth-control - added DB-role to gnuhealth-control Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-313=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): gnuhealth-3.0.6-9.1 References:

1 0

openSUSE-RU-2017:0613-1: Recommended update for clamav-database
by maintenance＠opensuse.org 06 Mar '17

06 Mar '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0613-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh March 6th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-309=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-309=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201703060005-49.1 - openSUSE Leap 42.1 (noarch): clamav-database-201703060005-228.1 References:

1 0

openSUSE-SU-2017:0598-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 03 Mar '17

03 Mar '17

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0598-1 Rating: moderate References: #1015187 #1015188 #1015189 Cross-References: CVE-2016-9933 CVE-2016-9934 CVE-2016-9935 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for php5 fixes the following issues: * CVE-2016-9933 Possible stack overflow on truecolor images handling [bsc#1015187] * CVE-2016-9934 Dereference from NULL pointer could lead to crash [bsc#1015188] * CVE-2016-9935 Invalid read could lead to crash [bsc#1015189] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-308=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-308=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_php5-5.5.14-75.2 apache2-mod_php5-debuginfo-5.5.14-75.2 php5-5.5.14-75.2 php5-bcmath-5.5.14-75.2 php5-bcmath-debuginfo-5.5.14-75.2 php5-bz2-5.5.14-75.2 php5-bz2-debuginfo-5.5.14-75.2 php5-calendar-5.5.14-75.2 php5-calendar-debuginfo-5.5.14-75.2 php5-ctype-5.5.14-75.2 php5-ctype-debuginfo-5.5.14-75.2 php5-curl-5.5.14-75.2 php5-curl-debuginfo-5.5.14-75.2 php5-dba-5.5.14-75.2 php5-dba-debuginfo-5.5.14-75.2 php5-debuginfo-5.5.14-75.2 php5-debugsource-5.5.14-75.2 php5-devel-5.5.14-75.2 php5-dom-5.5.14-75.2 php5-dom-debuginfo-5.5.14-75.2 php5-enchant-5.5.14-75.2 php5-enchant-debuginfo-5.5.14-75.2 php5-exif-5.5.14-75.2 php5-exif-debuginfo-5.5.14-75.2 php5-fastcgi-5.5.14-75.2 php5-fastcgi-debuginfo-5.5.14-75.2 php5-fileinfo-5.5.14-75.2 php5-fileinfo-debuginfo-5.5.14-75.2 php5-firebird-5.5.14-75.2 php5-firebird-debuginfo-5.5.14-75.2 php5-fpm-5.5.14-75.2 php5-fpm-debuginfo-5.5.14-75.2 php5-ftp-5.5.14-75.2 php5-ftp-debuginfo-5.5.14-75.2 php5-gd-5.5.14-75.2 php5-gd-debuginfo-5.5.14-75.2 php5-gettext-5.5.14-75.2 php5-gettext-debuginfo-5.5.14-75.2 php5-gmp-5.5.14-75.2 php5-gmp-debuginfo-5.5.14-75.2 php5-iconv-5.5.14-75.2 php5-iconv-debuginfo-5.5.14-75.2 php5-imap-5.5.14-75.2 php5-imap-debuginfo-5.5.14-75.2 php5-intl-5.5.14-75.2 php5-intl-debuginfo-5.5.14-75.2 php5-json-5.5.14-75.2 php5-json-debuginfo-5.5.14-75.2 php5-ldap-5.5.14-75.2 php5-ldap-debuginfo-5.5.14-75.2 php5-mbstring-5.5.14-75.2 php5-mbstring-debuginfo-5.5.14-75.2 php5-mcrypt-5.5.14-75.2 php5-mcrypt-debuginfo-5.5.14-75.2 php5-mssql-5.5.14-75.2 php5-mssql-debuginfo-5.5.14-75.2 php5-mysql-5.5.14-75.2 php5-mysql-debuginfo-5.5.14-75.2 php5-odbc-5.5.14-75.2 php5-odbc-debuginfo-5.5.14-75.2 php5-opcache-5.5.14-75.2 php5-opcache-debuginfo-5.5.14-75.2 php5-openssl-5.5.14-75.2 php5-openssl-debuginfo-5.5.14-75.2 php5-pcntl-5.5.14-75.2 php5-pcntl-debuginfo-5.5.14-75.2 php5-pdo-5.5.14-75.2 php5-pdo-debuginfo-5.5.14-75.2 php5-pgsql-5.5.14-75.2 php5-pgsql-debuginfo-5.5.14-75.2 php5-phar-5.5.14-75.2 php5-phar-debuginfo-5.5.14-75.2 php5-posix-5.5.14-75.2 php5-posix-debuginfo-5.5.14-75.2 php5-pspell-5.5.14-75.2 php5-pspell-debuginfo-5.5.14-75.2 php5-readline-5.5.14-75.2 php5-readline-debuginfo-5.5.14-75.2 php5-shmop-5.5.14-75.2 php5-shmop-debuginfo-5.5.14-75.2 php5-snmp-5.5.14-75.2 php5-snmp-debuginfo-5.5.14-75.2 php5-soap-5.5.14-75.2 php5-soap-debuginfo-5.5.14-75.2 php5-sockets-5.5.14-75.2 php5-sockets-debuginfo-5.5.14-75.2 php5-sqlite-5.5.14-75.2 php5-sqlite-debuginfo-5.5.14-75.2 php5-suhosin-5.5.14-75.2 php5-suhosin-debuginfo-5.5.14-75.2 php5-sysvmsg-5.5.14-75.2 php5-sysvmsg-debuginfo-5.5.14-75.2 php5-sysvsem-5.5.14-75.2 php5-sysvsem-debuginfo-5.5.14-75.2 php5-sysvshm-5.5.14-75.2 php5-sysvshm-debuginfo-5.5.14-75.2 php5-tidy-5.5.14-75.2 php5-tidy-debuginfo-5.5.14-75.2 php5-tokenizer-5.5.14-75.2 php5-tokenizer-debuginfo-5.5.14-75.2 php5-wddx-5.5.14-75.2 php5-wddx-debuginfo-5.5.14-75.2 php5-xmlreader-5.5.14-75.2 php5-xmlreader-debuginfo-5.5.14-75.2 php5-xmlrpc-5.5.14-75.2 php5-xmlrpc-debuginfo-5.5.14-75.2 php5-xmlwriter-5.5.14-75.2 php5-xmlwriter-debuginfo-5.5.14-75.2 php5-xsl-5.5.14-75.2 php5-xsl-debuginfo-5.5.14-75.2 php5-zip-5.5.14-75.2 php5-zip-debuginfo-5.5.14-75.2 php5-zlib-5.5.14-75.2 php5-zlib-debuginfo-5.5.14-75.2 - openSUSE Leap 42.2 (noarch): php5-pear-5.5.14-75.2 - openSUSE Leap 42.1 (i586 x86_64): apache2-mod_php5-5.5.14-75.1 apache2-mod_php5-debuginfo-5.5.14-75.1 php5-5.5.14-75.1 php5-bcmath-5.5.14-75.1 php5-bcmath-debuginfo-5.5.14-75.1 php5-bz2-5.5.14-75.1 php5-bz2-debuginfo-5.5.14-75.1 php5-calendar-5.5.14-75.1 php5-calendar-debuginfo-5.5.14-75.1 php5-ctype-5.5.14-75.1 php5-ctype-debuginfo-5.5.14-75.1 php5-curl-5.5.14-75.1 php5-curl-debuginfo-5.5.14-75.1 php5-dba-5.5.14-75.1 php5-dba-debuginfo-5.5.14-75.1 php5-debuginfo-5.5.14-75.1 php5-debugsource-5.5.14-75.1 php5-devel-5.5.14-75.1 php5-dom-5.5.14-75.1 php5-dom-debuginfo-5.5.14-75.1 php5-enchant-5.5.14-75.1 php5-enchant-debuginfo-5.5.14-75.1 php5-exif-5.5.14-75.1 php5-exif-debuginfo-5.5.14-75.1 php5-fastcgi-5.5.14-75.1 php5-fastcgi-debuginfo-5.5.14-75.1 php5-fileinfo-5.5.14-75.1 php5-fileinfo-debuginfo-5.5.14-75.1 php5-firebird-5.5.14-75.1 php5-firebird-debuginfo-5.5.14-75.1 php5-fpm-5.5.14-75.1 php5-fpm-debuginfo-5.5.14-75.1 php5-ftp-5.5.14-75.1 php5-ftp-debuginfo-5.5.14-75.1 php5-gd-5.5.14-75.1 php5-gd-debuginfo-5.5.14-75.1 php5-gettext-5.5.14-75.1 php5-gettext-debuginfo-5.5.14-75.1 php5-gmp-5.5.14-75.1 php5-gmp-debuginfo-5.5.14-75.1 php5-iconv-5.5.14-75.1 php5-iconv-debuginfo-5.5.14-75.1 php5-imap-5.5.14-75.1 php5-imap-debuginfo-5.5.14-75.1 php5-intl-5.5.14-75.1 php5-intl-debuginfo-5.5.14-75.1 php5-json-5.5.14-75.1 php5-json-debuginfo-5.5.14-75.1 php5-ldap-5.5.14-75.1 php5-ldap-debuginfo-5.5.14-75.1 php5-mbstring-5.5.14-75.1 php5-mbstring-debuginfo-5.5.14-75.1 php5-mcrypt-5.5.14-75.1 php5-mcrypt-debuginfo-5.5.14-75.1 php5-mssql-5.5.14-75.1 php5-mssql-debuginfo-5.5.14-75.1 php5-mysql-5.5.14-75.1 php5-mysql-debuginfo-5.5.14-75.1 php5-odbc-5.5.14-75.1 php5-odbc-debuginfo-5.5.14-75.1 php5-opcache-5.5.14-75.1 php5-opcache-debuginfo-5.5.14-75.1 php5-openssl-5.5.14-75.1 php5-openssl-debuginfo-5.5.14-75.1 php5-pcntl-5.5.14-75.1 php5-pcntl-debuginfo-5.5.14-75.1 php5-pdo-5.5.14-75.1 php5-pdo-debuginfo-5.5.14-75.1 php5-pgsql-5.5.14-75.1 php5-pgsql-debuginfo-5.5.14-75.1 php5-phar-5.5.14-75.1 php5-phar-debuginfo-5.5.14-75.1 php5-posix-5.5.14-75.1 php5-posix-debuginfo-5.5.14-75.1 php5-pspell-5.5.14-75.1 php5-pspell-debuginfo-5.5.14-75.1 php5-readline-5.5.14-75.1 php5-readline-debuginfo-5.5.14-75.1 php5-shmop-5.5.14-75.1 php5-shmop-debuginfo-5.5.14-75.1 php5-snmp-5.5.14-75.1 php5-snmp-debuginfo-5.5.14-75.1 php5-soap-5.5.14-75.1 php5-soap-debuginfo-5.5.14-75.1 php5-sockets-5.5.14-75.1 php5-sockets-debuginfo-5.5.14-75.1 php5-sqlite-5.5.14-75.1 php5-sqlite-debuginfo-5.5.14-75.1 php5-suhosin-5.5.14-75.1 php5-suhosin-debuginfo-5.5.14-75.1 php5-sysvmsg-5.5.14-75.1 php5-sysvmsg-debuginfo-5.5.14-75.1 php5-sysvsem-5.5.14-75.1 php5-sysvsem-debuginfo-5.5.14-75.1 php5-sysvshm-5.5.14-75.1 php5-sysvshm-debuginfo-5.5.14-75.1 php5-tidy-5.5.14-75.1 php5-tidy-debuginfo-5.5.14-75.1 php5-tokenizer-5.5.14-75.1 php5-tokenizer-debuginfo-5.5.14-75.1 php5-wddx-5.5.14-75.1 php5-wddx-debuginfo-5.5.14-75.1 php5-xmlreader-5.5.14-75.1 php5-xmlreader-debuginfo-5.5.14-75.1 php5-xmlrpc-5.5.14-75.1 php5-xmlrpc-debuginfo-5.5.14-75.1 php5-xmlwriter-5.5.14-75.1 php5-xmlwriter-debuginfo-5.5.14-75.1 php5-xsl-5.5.14-75.1 php5-xsl-debuginfo-5.5.14-75.1 php5-zip-5.5.14-75.1 php5-zip-debuginfo-5.5.14-75.1 php5-zlib-5.5.14-75.1 php5-zlib-debuginfo-5.5.14-75.1 - openSUSE Leap 42.1 (noarch): php5-pear-5.5.14-75.1 References: https://www.suse.com/security/cve/CVE-2016-9933.html https://www.suse.com/security/cve/CVE-2016-9934.html https://www.suse.com/security/cve/CVE-2016-9935.html https://bugzilla.suse.com/1015187 https://bugzilla.suse.com/1015188 https://bugzilla.suse.com/1015189

1 0

openSUSE-RU-2017:0597-1: Recommended update for clamav-database
by maintenance＠opensuse.org 03 Mar '17

03 Mar '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0597-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh Feb 27th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-307=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-307=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201702270005-46.1 - openSUSE Leap 42.1 (noarch): clamav-database-201702270005-225.1 References:

1 0

openSUSE-SU-2017:0590-1: important: Security update for util-linux
by opensuse-security＠opensuse.org 02 Mar '17

02 Mar '17

openSUSE Security Update: Security update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0590-1 Rating: important References: #1008965 #1012504 #1012632 #1019332 #1020077 #1023041 Cross-References: CVE-2017-2616 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has 5 fixes is now available. Description: This update for util-linux fixes the following issues: This security issue was fixed: - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges (bsc#1023041). This non-security issues were fixed: - lscpu: Implement WSL detection and work around crash (bsc#1019332) - fstrim: De-duplicate btrfs sub-volumes for "fstrim -a" and bind mounts (bsc#1020077) - Fix regressions in safe loop re-use patch set for libmount (bsc#1012504) - Disable ro checks for mtab (bsc#1012632) - Ensure that the option "users,exec,dev,suid" work as expected on NFS mounts (bsc#1008965) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-305=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libblkid-devel-2.25-21.1 libblkid1-2.25-21.1 libblkid1-debuginfo-2.25-21.1 libmount-devel-2.25-21.1 libmount1-2.25-21.1 libmount1-debuginfo-2.25-21.1 libsmartcols-devel-2.25-21.1 libsmartcols1-2.25-21.1 libsmartcols1-debuginfo-2.25-21.1 libuuid-devel-2.25-21.1 libuuid1-2.25-21.1 libuuid1-debuginfo-2.25-21.1 python-libmount-2.25-21.1 python-libmount-debuginfo-2.25-21.1 python-libmount-debugsource-2.25-21.1 util-linux-2.25-21.1 util-linux-debuginfo-2.25-21.1 util-linux-debugsource-2.25-21.1 util-linux-systemd-2.25-21.1 util-linux-systemd-debuginfo-2.25-21.1 util-linux-systemd-debugsource-2.25-21.1 uuidd-2.25-21.1 uuidd-debuginfo-2.25-21.1 - openSUSE Leap 42.1 (noarch): util-linux-lang-2.25-21.1 - openSUSE Leap 42.1 (x86_64): libblkid-devel-32bit-2.25-21.1 libblkid1-32bit-2.25-21.1 libblkid1-debuginfo-32bit-2.25-21.1 libmount-devel-32bit-2.25-21.1 libmount1-32bit-2.25-21.1 libmount1-debuginfo-32bit-2.25-21.1 libuuid-devel-32bit-2.25-21.1 libuuid1-32bit-2.25-21.1 libuuid1-debuginfo-32bit-2.25-21.1 References: https://www.suse.com/security/cve/CVE-2017-2616.html https://bugzilla.suse.com/1008965 https://bugzilla.suse.com/1012504 https://bugzilla.suse.com/1012632 https://bugzilla.suse.com/1019332 https://bugzilla.suse.com/1020077 https://bugzilla.suse.com/1023041

1 0

openSUSE-SU-2017:0589-1: important: Security update for util-linux
by opensuse-security＠opensuse.org 02 Mar '17

02 Mar '17

openSUSE Security Update: Security update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0589-1 Rating: important References: #1008965 #1012504 #1012632 #1019332 #1020077 #1020985 #1023041 Cross-References: CVE-2017-2616 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This update for util-linux fixes the following issues: This security issue was fixed: - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges (bsc#1023041). This non-security issues were fixed: - lscpu: Implement WSL detection and work around crash (bsc#1019332) - fstrim: De-duplicate btrfs sub-volumes for "fstrim -a" and bind mounts (bsc#1020077) - Fix regressions in safe loop re-use patch set for libmount (bsc#1012504) - Disable ro checks for mtab (bsc#1012632) - Ensure that the option "users,exec,dev,suid" work as expected on NFS mounts (bsc#1008965) - Fix empty slave detection to prevent 100% CPU load in some cases (bsc#1020985) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-306=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libblkid-devel-2.28-10.1 libblkid-devel-static-2.28-10.1 libblkid1-2.28-10.1 libblkid1-debuginfo-2.28-10.1 libfdisk-devel-2.28-10.1 libfdisk-devel-static-2.28-10.1 libfdisk1-2.28-10.1 libfdisk1-debuginfo-2.28-10.1 libmount-devel-2.28-10.1 libmount-devel-static-2.28-10.1 libmount1-2.28-10.1 libmount1-debuginfo-2.28-10.1 libsmartcols-devel-2.28-10.1 libsmartcols-devel-static-2.28-10.1 libsmartcols1-2.28-10.1 libsmartcols1-debuginfo-2.28-10.1 libuuid-devel-2.28-10.1 libuuid-devel-static-2.28-10.1 libuuid1-2.28-10.1 libuuid1-debuginfo-2.28-10.1 python-libmount-2.28-10.2 python-libmount-debuginfo-2.28-10.2 python-libmount-debugsource-2.28-10.2 util-linux-2.28-10.1 util-linux-debuginfo-2.28-10.1 util-linux-debugsource-2.28-10.1 util-linux-systemd-2.28-10.1 util-linux-systemd-debuginfo-2.28-10.1 util-linux-systemd-debugsource-2.28-10.1 uuidd-2.28-10.1 uuidd-debuginfo-2.28-10.1 - openSUSE Leap 42.2 (x86_64): libblkid-devel-32bit-2.28-10.1 libblkid1-32bit-2.28-10.1 libblkid1-debuginfo-32bit-2.28-10.1 libmount-devel-32bit-2.28-10.1 libmount1-32bit-2.28-10.1 libmount1-debuginfo-32bit-2.28-10.1 libuuid-devel-32bit-2.28-10.1 libuuid1-32bit-2.28-10.1 libuuid1-debuginfo-32bit-2.28-10.1 - openSUSE Leap 42.2 (noarch): util-linux-lang-2.28-10.1 References: https://www.suse.com/security/cve/CVE-2017-2616.html https://bugzilla.suse.com/1008965 https://bugzilla.suse.com/1012504 https://bugzilla.suse.com/1012632 https://bugzilla.suse.com/1019332 https://bugzilla.suse.com/1020077 https://bugzilla.suse.com/1020985 https://bugzilla.suse.com/1023041

1 0

openSUSE-SU-2017:0588-1: important: Security update for php7
by opensuse-security＠opensuse.org 02 Mar '17

02 Mar '17

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0588-1 Rating: important References: #1008026 #1019547 #1019550 #1019568 #1019570 #1022219 #1022255 #1022257 #1022260 #1022262 #1022263 #1022264 #1022265 Cross-References: CVE-2016-10158 CVE-2016-10159 CVE-2016-10160 CVE-2016-10161 CVE-2016-10162 CVE-2016-10166 CVE-2016-10167 CVE-2016-10168 CVE-2016-7478 CVE-2016-7479 CVE-2016-7480 CVE-2016-9138 CVE-2017-5340 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update for php7 fixes the following security issues: - CVE-2016-7480: The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP did not verify that a key is an object, which allowed remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access) via crafted serialized data. (bsc#1019568) - CVE-2017-5340: Zend/zend_hash.c in PHP mishandled certain cases that require large array allocations, which allowed remote attackers to execute arbitrary code or cause a denial of service (integer overflow, uninitialized memory access, and use of arbitrary destructor function pointers) via crafted serialized data. (bsc#1019570) - CVE-2016-7479: In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may have lead to use-after-free. A remote attacker may exploit this bug to gain arbitrary code execution. (bsc#1019547) - CVE-2016-7478: Zend/zend_exceptions.c in PHP allowed remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876. (bsc#1019550) - CVE-2016-10159: Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP allowed remote attackers to cause a denial of service (memory consumption or application crash) via a truncated manifest entry in a PHAR archive. (bsc#1022255) - CVE-2016-10160: Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP allowed remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch. (bsc#1022257) - CVE-2016-10161: The object_common1 function in ext/standard/var_unserializer.c in PHP allowed remote attackers to cause a denial of service (buffer over-read and application crash) via crafted serialized data that is mishandled in a finish_nested_data call. (bsc#1022260) - CVE-2016-10162: The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7 allowed remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call. (bsc#1022262) - CVE-2016-10166: A potential unsigned underflow in gd interpolation functions could lead to memory corruption in the PHP gd module (bsc#1022263) - CVE-2016-10167: A denial of service problem in gdImageCreateFromGd2Ctx() could lead to php out of memory even on small files. (bsc#1022264) - CVE-2016-10168: A signed integer overflow in the gd module could lead to memory corruption (bsc#1022265) - CVE-2016-9138: PHP mishandled property modification during __wakeup processing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data, as demonstrated by Exception::__toString with DateInterval::__wakeup. (bsc#1008026) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-304=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_php7-7.0.7-12.1 apache2-mod_php7-debuginfo-7.0.7-12.1 php7-7.0.7-12.1 php7-bcmath-7.0.7-12.1 php7-bcmath-debuginfo-7.0.7-12.1 php7-bz2-7.0.7-12.1 php7-bz2-debuginfo-7.0.7-12.1 php7-calendar-7.0.7-12.1 php7-calendar-debuginfo-7.0.7-12.1 php7-ctype-7.0.7-12.1 php7-ctype-debuginfo-7.0.7-12.1 php7-curl-7.0.7-12.1 php7-curl-debuginfo-7.0.7-12.1 php7-dba-7.0.7-12.1 php7-dba-debuginfo-7.0.7-12.1 php7-debuginfo-7.0.7-12.1 php7-debugsource-7.0.7-12.1 php7-devel-7.0.7-12.1 php7-dom-7.0.7-12.1 php7-dom-debuginfo-7.0.7-12.1 php7-enchant-7.0.7-12.1 php7-enchant-debuginfo-7.0.7-12.1 php7-exif-7.0.7-12.1 php7-exif-debuginfo-7.0.7-12.1 php7-fastcgi-7.0.7-12.1 php7-fastcgi-debuginfo-7.0.7-12.1 php7-fileinfo-7.0.7-12.1 php7-fileinfo-debuginfo-7.0.7-12.1 php7-firebird-7.0.7-12.1 php7-firebird-debuginfo-7.0.7-12.1 php7-fpm-7.0.7-12.1 php7-fpm-debuginfo-7.0.7-12.1 php7-ftp-7.0.7-12.1 php7-ftp-debuginfo-7.0.7-12.1 php7-gd-7.0.7-12.1 php7-gd-debuginfo-7.0.7-12.1 php7-gettext-7.0.7-12.1 php7-gettext-debuginfo-7.0.7-12.1 php7-gmp-7.0.7-12.1 php7-gmp-debuginfo-7.0.7-12.1 php7-iconv-7.0.7-12.1 php7-iconv-debuginfo-7.0.7-12.1 php7-imap-7.0.7-12.1 php7-imap-debuginfo-7.0.7-12.1 php7-intl-7.0.7-12.1 php7-intl-debuginfo-7.0.7-12.1 php7-json-7.0.7-12.1 php7-json-debuginfo-7.0.7-12.1 php7-ldap-7.0.7-12.1 php7-ldap-debuginfo-7.0.7-12.1 php7-mbstring-7.0.7-12.1 php7-mbstring-debuginfo-7.0.7-12.1 php7-mcrypt-7.0.7-12.1 php7-mcrypt-debuginfo-7.0.7-12.1 php7-mysql-7.0.7-12.1 php7-mysql-debuginfo-7.0.7-12.1 php7-odbc-7.0.7-12.1 php7-odbc-debuginfo-7.0.7-12.1 php7-opcache-7.0.7-12.1 php7-opcache-debuginfo-7.0.7-12.1 php7-openssl-7.0.7-12.1 php7-openssl-debuginfo-7.0.7-12.1 php7-pcntl-7.0.7-12.1 php7-pcntl-debuginfo-7.0.7-12.1 php7-pdo-7.0.7-12.1 php7-pdo-debuginfo-7.0.7-12.1 php7-pgsql-7.0.7-12.1 php7-pgsql-debuginfo-7.0.7-12.1 php7-phar-7.0.7-12.1 php7-phar-debuginfo-7.0.7-12.1 php7-posix-7.0.7-12.1 php7-posix-debuginfo-7.0.7-12.1 php7-pspell-7.0.7-12.1 php7-pspell-debuginfo-7.0.7-12.1 php7-readline-7.0.7-12.1 php7-readline-debuginfo-7.0.7-12.1 php7-shmop-7.0.7-12.1 php7-shmop-debuginfo-7.0.7-12.1 php7-snmp-7.0.7-12.1 php7-snmp-debuginfo-7.0.7-12.1 php7-soap-7.0.7-12.1 php7-soap-debuginfo-7.0.7-12.1 php7-sockets-7.0.7-12.1 php7-sockets-debuginfo-7.0.7-12.1 php7-sqlite-7.0.7-12.1 php7-sqlite-debuginfo-7.0.7-12.1 php7-sysvmsg-7.0.7-12.1 php7-sysvmsg-debuginfo-7.0.7-12.1 php7-sysvsem-7.0.7-12.1 php7-sysvsem-debuginfo-7.0.7-12.1 php7-sysvshm-7.0.7-12.1 php7-sysvshm-debuginfo-7.0.7-12.1 php7-tidy-7.0.7-12.1 php7-tidy-debuginfo-7.0.7-12.1 php7-tokenizer-7.0.7-12.1 php7-tokenizer-debuginfo-7.0.7-12.1 php7-wddx-7.0.7-12.1 php7-wddx-debuginfo-7.0.7-12.1 php7-xmlreader-7.0.7-12.1 php7-xmlreader-debuginfo-7.0.7-12.1 php7-xmlrpc-7.0.7-12.1 php7-xmlrpc-debuginfo-7.0.7-12.1 php7-xmlwriter-7.0.7-12.1 php7-xmlwriter-debuginfo-7.0.7-12.1 php7-xsl-7.0.7-12.1 php7-xsl-debuginfo-7.0.7-12.1 php7-zip-7.0.7-12.1 php7-zip-debuginfo-7.0.7-12.1 php7-zlib-7.0.7-12.1 php7-zlib-debuginfo-7.0.7-12.1 - openSUSE Leap 42.2 (noarch): php7-pear-7.0.7-12.1 php7-pear-Archive_Tar-7.0.7-12.1 References: https://www.suse.com/security/cve/CVE-2016-10158.html https://www.suse.com/security/cve/CVE-2016-10159.html https://www.suse.com/security/cve/CVE-2016-10160.html https://www.suse.com/security/cve/CVE-2016-10161.html https://www.suse.com/security/cve/CVE-2016-10162.html https://www.suse.com/security/cve/CVE-2016-10166.html https://www.suse.com/security/cve/CVE-2016-10167.html https://www.suse.com/security/cve/CVE-2016-10168.html https://www.suse.com/security/cve/CVE-2016-7478.html https://www.suse.com/security/cve/CVE-2016-7479.html https://www.suse.com/security/cve/CVE-2016-7480.html https://www.suse.com/security/cve/CVE-2016-9138.html https://www.suse.com/security/cve/CVE-2017-5340.html https://bugzilla.suse.com/1008026 https://bugzilla.suse.com/1019547 https://bugzilla.suse.com/1019550 https://bugzilla.suse.com/1019568 https://bugzilla.suse.com/1019570 https://bugzilla.suse.com/1022219 https://bugzilla.suse.com/1022255 https://bugzilla.suse.com/1022257 https://bugzilla.suse.com/1022260 https://bugzilla.suse.com/1022262 https://bugzilla.suse.com/1022263 https://bugzilla.suse.com/1022264 https://bugzilla.suse.com/1022265

1 0