March 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:0836-1: Recommended update for phpMyAdmin
by maintenance＠opensuse.org 28 Mar '17

28 Mar '17

openSUSE Recommended Update: Recommended update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0836-1 Rating: low References: #1030092 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for phpMyAdmin fixes the following issues: - Load same admin flags/values for php7 as it is done for php5. (boo#1030092) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-396=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-396=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): phpMyAdmin-4.4.15.10-33.3.1 - openSUSE Leap 42.1 (noarch): phpMyAdmin-4.4.15.10-34.1 References: https://bugzilla.suse.com/1030092

1 0

openSUSE-RU-2017:0835-1: Recommended update for KDE Plasma 5
by maintenance＠opensuse.org 28 Mar '17

28 Mar '17

openSUSE Recommended Update: Recommended update for KDE Plasma 5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0835-1 Rating: low References: #1000519 #1005902 #1006651 #1020020 #1022119 #1022904 #1026970 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update contains KDE Plasma 5.8.6, a general bugfix release. The following components were updated: breeze, discover, kde-user-manager, kiconthemes, kwin5, plasma5-SLE, plasma5-addons, plasma5-desktop, plasma5-pa, plasma5-session, plasma5-workspace The upstream announcements are available here: * https://www.kde.org/announcements/plasma-5.8.6.php * https://www.kde.org/announcements/plasma-5.8.5.php * https://www.kde.org/announcements/plasma-5.8.4.php Changes in breeze: * Add top_left_arrow cursor symlinks. * Delay init of Wayland setup till next event cycle. * Fix broken kcfgc files. Changes in discover: * Improve YaST integration and UI functionality. * Fix arguments when running .desktop files with runservice. * Make sure we report changes in the size once advertised. * AppStream: Take stock icons into account. * Enable full screenshot smoothness. * Don't close if the input is wrong. * Display an error if input URL was malformed. * Expose software-properties-kde if present. * Make sure the application delegate doesn't overflow when the view is narrow. * Elide category names when they're too big. * Move ifdefs to Discover instead of modifying Appstream. * Make it possible for 5.8 to compile against the last AppStreamQt. * Make screenshots visible when there's only one screenshot too. Changes in kde-user-manager: * Hide "automatic login" button in UserAccounts since is does absolutely nothing. * Revert "Do not ask for root permissions when it's unnecessary". Changes in kiconthemes: * Make icons sharper (not blurry) with non-integer scale factors. (boo#1006651, kde#366451) * Make running applications detect changing the configured icon theme and as a result not adding wrong icons to the cache. (boo#1000519, kde#365363) Changes in kwin5: * Avoid a crash on Kwin decoration KCM teardown. * Support modifier-only-shortcuts when capslock is on. * Translate the layout name when passing to layout change OSD. * Fixed initial graying out options in Cube Effect settings. * [TabBox] Remember current model index on SwitcherItem model set. * Align configure button consistently across delegates. * Fix AbstractClient::sizeForClientSize. * Ensure that all Effects honour the grab roles correctly. * Unpolish QStyle on QApp prior to destroying internal Wayland connection. * [helpers/killer] Force to platform XCB. * Simplify the window title passed in from the window system. * [desktopgrid] Don't manipulate virtual desktop of desktop window. * Invert the scroll direction for wheel events on internal windows. * Internal windows cannot be minimized. * [libinput] Add scroll method configuration support. * [libinput] Add natural scrolling support. * [libinput] Add middle mouse button emulation support. * Don't snap to auto-hidden panels. * [scripting] Silence unused variable warnings. * [scripting] Fix export of WorkspaceWrapper in QtScript. * Support for workspace.clientList() in declarative script. * Correctly set i18n suffix in mousemark spinbox. Changes in plasma5-SLE: * Add default fonts to /etc/xdg/kdeglobals to make KDE4 applications use the Plasma5 fonts as well (same as set by plasma5-integration). (boo#1026970) * Increase contrast on splash/images/bulb.png to get rid of noise and visible edges. Changes in plasma5-addons: * Fix systemloadviewer tooltip. (boo#1020020, kde#129309) * Use PlasmaComponents.Label instead of Text. (kde#372218) * Check on current comic to be valid and don't crash on invalid config groups when asked. Also, disable the context menu options when no valid comic is loaded. (kde#373031) Changes in plasma5-desktop: * Fix default font in fonts kcm. * Use icon center for vertical hitscan on drop. * Remove get new looks button from 5.8. * Fix crash when invoking Present Windows with the group dialog open. * [Folder View] Don't show script execution prompt on desktop:/. * Use proper version for baloo. * [Solid Device Actions KCM] Encode action file name. * Revamp (Activity) Pager wheel handling. * [Folder View] show script execution prompt when clicking item. * Fix startup warning. * Fix clearing selection when rectangle selection contains no items. * Fix Plasmoid.busy visualization in desktop containment. * Call correct function and fix warning. * [Task Manager] Hide group dialog when opening applets settings. * [kcm] Fix reset logic. * Silence warning. * Fix crash during crash acrobatics. * Fix binding loop. * [Folder View] Fix right click erroneously opening files. * Clean up after a window delegate drag exits the window. * Fix Enter/Return not running non-dir items in list view mode. * Set current index to start of selection range when performing rectangle selection. * [Panel Containment] Explicitly bind visible on both the container and the applet. * [Task Manager] Parent QAction to "parent" instead of this. * [Containment Appearance] Make sure to always load a config view. * Don't clear hover state while a child dialog is open. * Prompt for executing files in folderview containment. (boo#1022904) * Prevent folderview from opening files erroneously in addition to showing the context menu when right-clicking on an icon. * [Folder View] Workaround QML Text layouting glitch. * [Kicker] Support drag from bookmarks runner. * Larger icons and stack windows above label item. * Ensure results are sorted by relevance. * [taskmanager] Limit GroupDialog size, stop highlightwindow effect when it shown, increase items readability. * Fix 2 RTL bugs. * [Kicker] Hide "Edit Applications..." context menu entry if system immutable. * Fix running of recent docs actions for runner match entries. * [Folder View] Clear hover state when mouse leaves view. * Select correct index without timer. * Fix "Move to Current Desktop" action moving to all desktops instead. * Check whether the KServe is still valid before running. * Publish delegate geometry when ChildCount increases. * Fix config dialogs in ltr mode. * [Task Manager] Strip application:// prefix before looking up service. * [Task Manager] Pass local file to KService instead of stringified URL. * [Task Manager] Fix Unity launcher count badge rendering when task is created. Changes in plasma5-pa: * Always check if context is valid when calling pa functions. * VolumeSlider: Ignore all value changes until Component is completed. * Fix compare for undefined argument in playFeedback(). * Pass correct index to playFeedback. * Applet: Don't delete delegates while drag is active. Changes in plasma5-session: * Only require version 5.8.6 of packages that actually changed. Changes in plasma5-workspace: * Port to QMultiHash. * Only remove + announce if leader change actually occured, avoid excessive loop. * [Notifications] Never manually hide() the NotificationPopup. * Add comment laying out goals. * Fix crash when switching activities. * Tweak alphabetic (default) sort behavior. * Turn the NotificationItem in a MouseArea. * [DesktopView] show() ConfigView when it is already opened. * [System Tray Containment] Drop useless Q_INVOKABLE from .cpp file. * [System Tray Containment] Ungrab mouse before opening context menu. * [KRunner] In doubt use primary screen for view position. * Drop legacy fixup rule for VirtualBox. * Fix isOutputRedundant logic. * Fix group parents not appearing when disabling inline grouping. * Corona::screenGeometryChanged on qscreen resized. * MediaController: Update position while queuedPositionUpdate timer is running. * Better clean up of duplicate containments. * Fix "Pinned Chrome disappears when all Chrome windows are closed". * [MPRIS Data Engine] Don't crash if "Metadata" is a map but of wrong type. * Systray: Move all icon resolution to dataengine. * Use a native event filter to notice the screen was swapped. * Notice when the only screen changes. * Make sure applet is removed from stack when destroyed. * [Lock Screen] Wrap OSD in its own ColorScope. * Move updating of primary screen in screenpool after fetching its id. * Calendar: Clear selection on opening. * Fix "Unable to assign [undefined] to int" log. * Refresh the ScreenGeometry data role whenever a screen is added or changes its geometry. * systemtray: Don't propagate unhandled wheel events. * [Lock Screen] Add keyboard icon for keyboard layout switcher. * remove categories not present on server anymore. * Select correct index without timer. * Expose rowCount as data role in TaskGroupingProxyModel. * [taskmanagerrulesrc] Add Rewrite Rule for chromium. * [SDDM Theme] Fix background in qmlscene by providing proper config dummy data. * [SDDM Theme] Add "lastUser" and "disableAvatarsThreshold" properties to dummydata. * [SDDM Theme] Remember last username. * [taskmanagerrulesrc] Add Rewrite Rule for chromium-browser. * Fix config dialogs in ltr mode. * Properly parse exec line before qprocessing it for autostart. * Disable Qt's high DPI scaling on shutdown/switch user dialogs. * Don't set PanelView visibilty when opening/closing config. * Check KPluginInfo.service() returns a valid object. * Revert "Port to new plasma-framework API". * Add plasma-discover to mappings. * [Windowed Widgets Runner] Don't access invalid KPluginMetaData. * Load screenpool at the same time as we connect to screenchanged signals. * Avoid connecting to screen changed signals twice. * Sync app config in sync with applets config. * Make sure all outputs are known. * [taskmanagerrulesrc] Add Rewrite Rule for Google-chrome. * [XWindowTasksModel] Check for service being empty before searching new ones. * Fix behavior of scrollable systray popups. * Introduce new pre-layout script hook. * Make sure we're looking both for json and desktop metadata. * Port to new plasma-framework API. * Modified distance function to keep aspect ratio as close as possible. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-394=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): breeze4-style-5.8.6-6.1 breeze4-style-debuginfo-5.8.6-6.1 breeze4-style-debugsource-5.8.6-6.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): breeze-5.8.6-6.1 breeze5-decoration-5.8.6-6.1 breeze5-style-5.8.6-6.1 discover-5.8.6-6.1 discover-debuginfo-5.8.6-6.1 discover-debugsource-5.8.6-6.1 discover-plasmoid-5.8.6-6.1 drkonqi5-5.8.6-5.1 drkonqi5-debuginfo-5.8.6-5.1 kde-user-manager-5.8.6-6.1 kde-user-manager-debuginfo-5.8.6-6.1 kde-user-manager-debugsource-5.8.6-6.1 kiconthemes-debugsource-5.26.0-5.1 kiconthemes-devel-5.26.0-5.1 kiconthemes-devel-debuginfo-5.26.0-5.1 kwin5-5.8.6-5.1 kwin5-debuginfo-5.8.6-5.1 kwin5-debugsource-5.8.6-5.1 kwin5-devel-5.8.6-5.1 libKF5IconThemes5-5.26.0-5.1 libKF5IconThemes5-debuginfo-5.26.0-5.1 plasma5-addons-5.8.3-5.1 plasma5-addons-debuginfo-5.8.3-5.1 plasma5-addons-debugsource-5.8.3-5.1 plasma5-desktop-5.8.6-5.1 plasma5-desktop-debuginfo-5.8.6-5.1 plasma5-desktop-debugsource-5.8.6-5.1 plasma5-pa-5.8.6-5.1 plasma5-pa-debuginfo-5.8.6-5.1 plasma5-pa-debugsource-5.8.6-5.1 plasma5-workspace-5.8.6-5.1 plasma5-workspace-debuginfo-5.8.6-5.1 plasma5-workspace-debugsource-5.8.6-5.1 plasma5-workspace-devel-5.8.6-5.1 plasma5-workspace-libs-5.8.6-5.1 plasma5-workspace-libs-debuginfo-5.8.6-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): breeze5-cursors-5.8.6-6.1 breeze5-style-lang-5.8.6-6.1 breeze5-wallpapers-5.8.6-6.1 discover-lang-5.8.6-6.1 kde-user-manager-lang-5.8.6-6.1 kwin5-lang-5.8.6-5.1 libKF5IconThemes5-lang-5.26.0-5.1 plasma5-SLE-42.1.1-5.1 plasma5-addons-lang-5.8.3-5.1 plasma5-defaults-SLE-42.1.1-5.1 plasma5-desktop-lang-5.8.6-5.1 plasma5-pa-lang-5.8.6-5.1 plasma5-session-5.8.6-5.1 plasma5-theme-SLE-42.1.1-5.1 plasma5-workspace-branding-SLE-42.1.1-5.1 plasma5-workspace-lang-5.8.6-5.1 sddm-theme-SLE-42.1.1-5.1 References: https://bugzilla.suse.com/1000519 https://bugzilla.suse.com/1005902 https://bugzilla.suse.com/1006651 https://bugzilla.suse.com/1020020 https://bugzilla.suse.com/1022119 https://bugzilla.suse.com/1022904 https://bugzilla.suse.com/1026970

1 0

openSUSE-RU-2017:0834-1: Recommended update for netcfg
by maintenance＠opensuse.org 28 Mar '17

28 Mar '17

openSUSE Recommended Update: Recommended update for netcfg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0834-1 Rating: low References: #1028305 #959693 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for netcfg provides the following fixes: - Update script to generate services to use UTF8 by default. (bsc#1028305) - Repack services.bz2 with latest from upstream and adjust the script to not add all the names and emails at the bottom of the file. (bsc#959693) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-393=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-393=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): netcfg-11.5-28.3.1 - openSUSE Leap 42.1 (noarch): netcfg-11.5-28.1 References: https://bugzilla.suse.com/1028305 https://bugzilla.suse.com/959693

1 0

openSUSE-RU-2017:0833-1: Recommended update for selinux-policy
by maintenance＠opensuse.org 28 Mar '17

28 Mar '17

openSUSE Recommended Update: Recommended update for selinux-policy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0833-1 Rating: low References: #1016385 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for selinux-policy fixes the following issue: - Patch installation fails when SELinux is enabled (bsc#1016385) This was due to the selinux-policy package embedding PCRE prebuilt regular expressions, which are incompatible to the PCRE minor version update released some weeks ago. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-392=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): selinux-policy-20140730-3.1 selinux-policy-devel-20140730-3.1 selinux-policy-doc-20140730-3.1 selinux-policy-minimum-20140730-3.1 selinux-policy-targeted-20140730-3.1 References: https://bugzilla.suse.com/1016385

1 0

openSUSE-OU-2017:0832-1: Recommended update for qt5ct
by maintenance＠opensuse.org 28 Mar '17

28 Mar '17

openSUSE Optional Update: Recommended update for qt5ct ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0832-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update makes qt5ct available in the SUSE Package Hub. qt5ct allows users to configure Qt5 settings (theme, font, icons, etc.) under DE/WM without Qt integration. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-398=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): qt5ct-0.30-2.1 References:

1 0

openSUSE-RU-2017:0831-1: Recommended update for dpdk
by maintenance＠opensuse.org 28 Mar '17

28 Mar '17

openSUSE Recommended Update: Recommended update for dpdk ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0831-1 Rating: low References: #1026804 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dpdk provides the following fixes: - Fix broken dpdk-pmd/* soft links. (bsc#1026804) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-395=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dpdk-2.2.0-4.3.1 dpdk-debuginfo-2.2.0-4.3.1 dpdk-debugsource-2.2.0-4.3.1 dpdk-devel-2.2.0-4.3.1 dpdk-examples-2.2.0-4.3.1 dpdk-examples-debuginfo-2.2.0-4.3.1 dpdk-tools-2.2.0-4.3.1 - openSUSE Leap 42.2 (noarch): dpdk-doc-2.2.0-4.3.1 References: https://bugzilla.suse.com/1026804

1 0

openSUSE-SU-2017:0830-1: moderate: Security update for xtrabackup
by opensuse-security＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Security Update: Security update for xtrabackup ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0830-1 Rating: moderate References: #1026729 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update to xtrabackup 2.3.7 fixes one security issue and bugs. The following security issue was fixed: - innobackupex and xtrabackup scripts were showing the password in the ps output when it was passed as a command line argument (boo#1026729) The following functionality was added: - new --remove-original option for removing the original encrypted and compressed files - now supports -H, -h, -u and -p shortcuts for --hostname, --datadir, --user and --password respectively The following bugs were fixed: - Pick up username from user's configuration file correctly - Incremental backups did not include xtrabackup_binlog_info and xtrabackup_galera_info files - --move-back option did not always restore out-of-datadir tablespaces to their original directories - Incremental backup would fail with a path like ~/backup/inc_1 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-382=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): xtrabackup-2.3.7-5.3.1 xtrabackup-debuginfo-2.3.7-5.3.1 xtrabackup-debugsource-2.3.7-5.3.1 xtrabackup-test-2.3.7-5.3.1 References: https://bugzilla.suse.com/1026729

1 0

openSUSE-SU-2017:0828-1: moderate: Security update for gegl
by opensuse-security＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Security Update: Security update for gegl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0828-1 Rating: moderate References: #789835 Cross-References: CVE-2012-4433 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gegl fixes the following issues: Security issue fixed: - Fix CVE-2012-4433: Fix buffer overflow in and add plausibility checks to ppm-load op (bsc#789835). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-388=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gegl-0.2.0-16.1 gegl-0_2-0.2.0-16.1 gegl-0_2-debuginfo-0.2.0-16.1 gegl-debuginfo-0.2.0-16.1 gegl-debugsource-0.2.0-16.1 gegl-devel-0.2.0-16.1 gegl-doc-0.2.0-16.1 libgegl-0_2-0-0.2.0-16.1 libgegl-0_2-0-debuginfo-0.2.0-16.1 - openSUSE Leap 42.2 (noarch): gegl-0_2-lang-0.2.0-16.1 References: https://www.suse.com/security/cve/CVE-2012-4433.html https://bugzilla.suse.com/789835

1 0

openSUSE-SU-2017:0827-1: moderate: Security update for open-vm-tools
by opensuse-security＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Security Update: Security update for open-vm-tools ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0827-1 Rating: moderate References: #1006796 #1007600 #1011057 #1013496 #1024200 #971031 #994598 Cross-References: CVE-2015-5191 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This update for open-vm-tools to 10.1.0 stable brings features, fixes bugs and security issues: - New vmware-namespace-cmd command line utility - GTK3 support - Common Agent Framework (CAF) - Guest authentication with xmlsec1 - Sub-command to push updated network information to the host on demand - Fix for quiesced snapshot failure leaving guest file system quiesced (bsc#1006796) - Fix for CVE-2015-5191 (bsc#1007600) - Report SLES for SAP 12 guest OS as SLES 12 (bsc#1013496) - Add udev rule to increase VMware virtual disk timeout values (bsc#994598) - Fix vmtoolsd init script to run vmtoolsd in background (bsc#971031) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-385=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): libvmtools-devel-10.1.0-3.1 libvmtools0-10.1.0-3.1 libvmtools0-debuginfo-10.1.0-3.1 open-vm-tools-10.1.0-3.1 open-vm-tools-debuginfo-10.1.0-3.1 open-vm-tools-debugsource-10.1.0-3.1 open-vm-tools-desktop-10.1.0-3.1 open-vm-tools-desktop-debuginfo-10.1.0-3.1 References: https://www.suse.com/security/cve/CVE-2015-5191.html https://bugzilla.suse.com/1006796 https://bugzilla.suse.com/1007600 https://bugzilla.suse.com/1011057 https://bugzilla.suse.com/1013496 https://bugzilla.suse.com/1024200 https://bugzilla.suse.com/971031 https://bugzilla.suse.com/994598

1 0

openSUSE-SU-2017:0826-1: Security update for dbus-1
by opensuse-security＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Security Update: Security update for dbus-1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0826-1 Rating: low References: #1025950 #1025951 #974092 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for dbus-1 fixes the following issues: Security issues fixed: - Symlink attack in nonce-tcp transport. (bsc#1025950) - Symlink attack in unit tests. (bsc#1025951) Bugfixes: - Remove sysvinit script, not used under systemd. (bsc#974092) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-384=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-384=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dbus-1-1.8.22-3.1 dbus-1-debuginfo-1.8.22-3.1 dbus-1-debugsource-1.8.22-3.1 dbus-1-devel-1.8.22-3.1 dbus-1-x11-1.8.22-3.1 dbus-1-x11-debuginfo-1.8.22-3.1 dbus-1-x11-debugsource-1.8.22-3.1 libdbus-1-3-1.8.22-3.1 libdbus-1-3-debuginfo-1.8.22-3.1 - openSUSE Leap 42.2 (x86_64): dbus-1-debuginfo-32bit-1.8.22-3.1 dbus-1-devel-32bit-1.8.22-3.1 libdbus-1-3-32bit-1.8.22-3.1 libdbus-1-3-debuginfo-32bit-1.8.22-3.1 - openSUSE Leap 42.2 (noarch): dbus-1-devel-doc-1.8.22-3.1 - openSUSE Leap 42.1 (i586 x86_64): dbus-1-1.8.22-13.1 dbus-1-debuginfo-1.8.22-13.1 dbus-1-debugsource-1.8.22-13.1 dbus-1-devel-1.8.22-13.1 dbus-1-x11-1.8.22-13.1 dbus-1-x11-debuginfo-1.8.22-13.1 dbus-1-x11-debugsource-1.8.22-13.1 libdbus-1-3-1.8.22-13.1 libdbus-1-3-debuginfo-1.8.22-13.1 - openSUSE Leap 42.1 (x86_64): dbus-1-debuginfo-32bit-1.8.22-13.1 dbus-1-devel-32bit-1.8.22-13.1 libdbus-1-3-32bit-1.8.22-13.1 libdbus-1-3-debuginfo-32bit-1.8.22-13.1 - openSUSE Leap 42.1 (noarch): dbus-1-devel-doc-1.8.22-13.1 References: https://bugzilla.suse.com/1025950 https://bugzilla.suse.com/1025951 https://bugzilla.suse.com/974092

1 0