March 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-OU-2017:0814-1: moderate: Add gssproxy to the SUSE Package Hub
by maintenance＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Optional Update: Add gssproxy to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0814-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update makes gssproxy available in the SUSE Package Hub. gssproxy is a daemon for managing gss-api requests, as used for NFS service with Kerberos authentication Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-377=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): gssproxy-0.7.0-2.1 References:

1 0

openSUSE-OU-2017:0813-1: Add munin to the SUSE Package Hub
by maintenance＠opensuse.org 27 Mar '17

27 Mar '17

openSUSE Optional Update: Add munin to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0813-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update provides munin for the SUSE Package Hub. Munin is a Network-wide graphing framework (grapher/gatherer). html2text and perl-HTML-Template are supplied as dependencies. html2text is a tool to convert HTML to ASCII. perl-HTML-Template is a Perl module for a HTML-like templating language. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-376=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): html2text-1.3.2a-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): munin-2.0.32-2.1 munin-node-2.0.32-2.1 perl-HTML-Template-2.95-2.1 References:

1 0

openSUSE-RU-2017:0812-1: Recommended update for timezone
by maintenance＠opensuse.org 26 Mar '17

26 Mar '17

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0812-1 Rating: low References: #1030417 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides the latest timezone information (2017b) for your system, including following changes: - Haiti resumed observance of DST in 2017. - Liberia changed from -004430 to +00 on 1972-01-07, not 1972-05-01. - Use "MMT" to abbreviate Liberia's time zone before 1972. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-374=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-374=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): timezone-2017b-39.3.1 timezone-debuginfo-2017b-39.3.1 timezone-debugsource-2017b-39.3.1 - openSUSE Leap 42.2 (noarch): timezone-java-2017b-0.39.3.1 - openSUSE Leap 42.1 (i586 x86_64): timezone-2017b-40.1 timezone-debuginfo-2017b-40.1 timezone-debugsource-2017b-40.1 - openSUSE Leap 42.1 (noarch): timezone-java-2017b-0.40.1 References: https://bugzilla.suse.com/1030417

1 0

openSUSE-RU-2017:0811-1: moderate: Recommended update for wireless-regdb
by maintenance＠opensuse.org 26 Mar '17

26 Mar '17

openSUSE Recommended Update: Recommended update for wireless-regdb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0811-1 Rating: moderate References: #1030085 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for wireless-regdb brings the latest version of regulatory domain data for wireless communication devices. Among other things, the following issues have been fixed: - Update rules for Australia (AU) and add 60GHz rules - Update 5 GHz rules for Canada - Remove DFS requirement for India (IN) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-375=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-375=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): wireless-regdb-2017.03.07-3.5.1 - openSUSE Leap 42.1 (noarch): wireless-regdb-2017.03.07-5.1 References: https://bugzilla.suse.com/1030085

1 0

openSUSE-RU-2017:0810-1: Recommended update for clamav-database
by maintenance＠opensuse.org 26 Mar '17

26 Mar '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0810-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh March 20th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-373=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-373=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201703200005-54.3.1 - openSUSE Leap 42.1 (noarch): clamav-database-201703200005-234.1 References:

1 0

openSUSE-RU-2017:0793-1: Recommended update for spice-gtk
by maintenance＠opensuse.org 22 Mar '17

22 Mar '17

openSUSE Recommended Update: Recommended update for spice-gtk ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0793-1 Rating: low References: #1010188 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spice-gtk fixes the following issue: - Fix virt-manager crash when used over ssh X redirection (bsc#1010188) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-370=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): spice-gtk-lang-0.31-7.1 - openSUSE Leap 42.2 (x86_64): libspice-client-glib-2_0-8-0.31-7.1 libspice-client-glib-2_0-8-debuginfo-0.31-7.1 libspice-client-glib-helper-0.31-7.1 libspice-client-glib-helper-debuginfo-0.31-7.1 libspice-client-gtk-2_0-4-0.31-7.1 libspice-client-gtk-2_0-4-debuginfo-0.31-7.1 libspice-client-gtk-3_0-4-0.31-7.1 libspice-client-gtk-3_0-4-debuginfo-0.31-7.1 libspice-controller0-0.31-7.1 libspice-controller0-debuginfo-0.31-7.1 python-SpiceClientGtk-0.31-7.1 python-SpiceClientGtk-debuginfo-0.31-7.1 spice-gtk-0.31-7.1 spice-gtk-debuginfo-0.31-7.1 spice-gtk-debugsource-0.31-7.1 spice-gtk-devel-0.31-7.1 typelib-1_0-SpiceClientGlib-2_0-0.31-7.1 typelib-1_0-SpiceClientGtk-2_0-0.31-7.1 typelib-1_0-SpiceClientGtk-3_0-0.31-7.1 References: https://bugzilla.suse.com/1010188

1 0

openSUSE-SU-2017:0792-1: important: Security update for mbedtls
by opensuse-security＠opensuse.org 22 Mar '17

22 Mar '17

openSUSE Security Update: Security update for mbedtls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0792-1 Rating: important References: #1029017 Cross-References: CVE-2017-2784 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update to mbedtls 1.3.19 fixes security issues and bugs. The following vulnerability was fixed: CVE-2017-2784: A remote user could have used a specially crafted certificate to cause mbedtls to free a buffer allocated on the stack when verifying the validity of public key with a secp224k1 curve, which could have allowed remote code execution on some platforms (boo#1029017) The following non-security changes are included: - Add checks to prevent signature forgeries for very large messages while using RSA through the PK module in 64-bit systems. - Fixed potential livelock during the parsing of a CRL in PEM format Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-372=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libmbedtls9-1.3.19-5.1 mbedtls-devel-1.3.19-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): libmbedtls9-debuginfo-1.3.19-5.1 mbedtls-debugsource-1.3.19-5.1 References: https://www.suse.com/security/cve/CVE-2017-2784.html https://bugzilla.suse.com/1029017

1 0

openSUSE-RU-2017:0791-1: Recommended update for plymouth
by maintenance＠opensuse.org 22 Mar '17

22 Mar '17

openSUSE Recommended Update: Recommended update for plymouth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0791-1 Rating: low References: #955227 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for plymouth fixes the following issues: - Write all escape sequences to the devices of the system console but do filter it for the boot log file (bsc#955227) - Avoid allocating/freeing memory for each line of input This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-369=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libply-boot-client4-0.9.2-4.1 libply-boot-client4-debuginfo-0.9.2-4.1 libply-splash-core4-0.9.2-4.1 libply-splash-core4-debuginfo-0.9.2-4.1 libply-splash-graphics4-0.9.2-4.1 libply-splash-graphics4-debuginfo-0.9.2-4.1 libply4-0.9.2-4.1 libply4-debuginfo-0.9.2-4.1 plymouth-0.9.2-4.1 plymouth-debuginfo-0.9.2-4.1 plymouth-debugsource-0.9.2-4.1 plymouth-devel-0.9.2-4.1 plymouth-dracut-0.9.2-4.1 plymouth-plugin-fade-throbber-0.9.2-4.1 plymouth-plugin-fade-throbber-debuginfo-0.9.2-4.1 plymouth-plugin-label-0.9.2-4.1 plymouth-plugin-label-debuginfo-0.9.2-4.1 plymouth-plugin-label-ft-0.9.2-4.1 plymouth-plugin-label-ft-debuginfo-0.9.2-4.1 plymouth-plugin-script-0.9.2-4.1 plymouth-plugin-script-debuginfo-0.9.2-4.1 plymouth-plugin-space-flares-0.9.2-4.1 plymouth-plugin-space-flares-debuginfo-0.9.2-4.1 plymouth-plugin-throbgress-0.9.2-4.1 plymouth-plugin-throbgress-debuginfo-0.9.2-4.1 plymouth-plugin-tribar-0.9.2-4.1 plymouth-plugin-tribar-debuginfo-0.9.2-4.1 plymouth-plugin-two-step-0.9.2-4.1 plymouth-plugin-two-step-debuginfo-0.9.2-4.1 plymouth-scripts-0.9.2-4.1 plymouth-x11-renderer-0.9.2-4.1 plymouth-x11-renderer-debuginfo-0.9.2-4.1 - openSUSE Leap 42.2 (noarch): plymouth-theme-fade-in-0.9.2-4.1 plymouth-theme-script-0.9.2-4.1 plymouth-theme-solar-0.9.2-4.1 plymouth-theme-spinfinity-0.9.2-4.1 plymouth-theme-spinner-0.9.2-4.1 plymouth-theme-tribar-0.9.2-4.1 References: https://bugzilla.suse.com/955227

1 0

openSUSE-SU-2017:0790-1: important: Security update for mbedtls
by opensuse-security＠opensuse.org 22 Mar '17

22 Mar '17

openSUSE Security Update: Security update for mbedtls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0790-1 Rating: important References: #1029017 Cross-References: CVE-2017-2784 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update to mbedtls 1.3.19 fixes security issues and bugs. The following vulnerability was fixed: CVE-2017-2784: A remote user could have used a specially crafted certificate to cause mbedtls to free a buffer allocated on the stack when verifying the validity of public key with a secp224k1 curve, which could have allowed remote code execution on some platforms (boo#1029017) The following non-security changes are included: - Add checks to prevent signature forgeries for very large messages while using RSA through the PK module in 64-bit systems. - Fixed potential livelock during the parsing of a CRL in PEM format Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-372=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-372=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libmbedtls9-1.3.19-15.1 libmbedtls9-debuginfo-1.3.19-15.1 mbedtls-debugsource-1.3.19-15.1 mbedtls-devel-1.3.19-15.1 - openSUSE Leap 42.2 (x86_64): libmbedtls9-32bit-1.3.19-15.1 libmbedtls9-debuginfo-32bit-1.3.19-15.1 - openSUSE Leap 42.1 (i586 x86_64): libmbedtls9-1.3.19-15.1 libmbedtls9-debuginfo-1.3.19-15.1 mbedtls-debugsource-1.3.19-15.1 mbedtls-devel-1.3.19-15.1 - openSUSE Leap 42.1 (x86_64): libmbedtls9-32bit-1.3.19-15.1 libmbedtls9-debuginfo-32bit-1.3.19-15.1 References: https://www.suse.com/security/cve/CVE-2017-2784.html https://bugzilla.suse.com/1029017

1 0

openSUSE-RU-2017:0789-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 22 Mar '17

22 Mar '17

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0789-1 Rating: moderate References: #1012266 #1012591 #1013989 #1018399 #1020083 #909418 #912715 #945340 #963290 #990538 #997682 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 11 recommended fixes can now be installed. Description: This update for systemd provides the following fixes: - rule: Don't automatically online standby memory on s390x. (bsc#997682) - systemctl: Remove duplicate entries showed by list-dependencies. (bsc#1012266) - systemctl: Add ConsistsOf as the inverse of PartOf. (bsc#1020083) - man: Reword list-dependencies description. - man: Improve description of systemctl's --after/--before. - rules: Set SYSTEMD_READY=0 on DM_UDEV_DISABLE_OTHER_RULES_FLAG=1 only with ADD event. (bsc#963290, bsc#990538) - core: Make sure to not call device_is_bound_by_mounts() when dev is null. (bsc#1018399) - core: Make mount units from /proc/self/mountinfo possibly bind to a device. (bsc#909418, bsc#912715, bsc#945340) - core: Do not bind a mount unit to a device, if it was from mountinfo. - rules: Don't ignore CDROM devices even if not ready. - unit: Use weaker dependencies between mount and device units in --user mode. - rules: Clean up stale CD drive mounts after ejection. - core: Add dependencies to dynamically mounted mounts too. - fstab-generator: Remove bogus condition. (bsc#1013989) - coredumpctl: Let gdb handle the SIGINT signal. (bsc#1012591) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-371=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libgudev-1_0-0-210-104.1 libgudev-1_0-0-debuginfo-210-104.1 libgudev-1_0-devel-210-104.1 libudev-devel-210-104.1 libudev-mini-devel-210-104.1 libudev-mini1-210-104.1 libudev-mini1-debuginfo-210-104.1 libudev1-210-104.1 libudev1-debuginfo-210-104.1 nss-myhostname-210-104.1 nss-myhostname-debuginfo-210-104.1 systemd-210-104.1 systemd-debuginfo-210-104.1 systemd-debugsource-210-104.1 systemd-devel-210-104.1 systemd-journal-gateway-210-104.1 systemd-journal-gateway-debuginfo-210-104.1 systemd-logger-210-104.1 systemd-mini-210-104.1 systemd-mini-debuginfo-210-104.1 systemd-mini-debugsource-210-104.1 systemd-mini-devel-210-104.1 systemd-mini-sysvinit-210-104.1 systemd-sysvinit-210-104.1 typelib-1_0-GUdev-1_0-210-104.1 udev-210-104.1 udev-debuginfo-210-104.1 udev-mini-210-104.1 udev-mini-debuginfo-210-104.1 - openSUSE Leap 42.1 (x86_64): libgudev-1_0-0-32bit-210-104.1 libgudev-1_0-0-debuginfo-32bit-210-104.1 libudev1-32bit-210-104.1 libudev1-debuginfo-32bit-210-104.1 nss-myhostname-32bit-210-104.1 nss-myhostname-debuginfo-32bit-210-104.1 systemd-32bit-210-104.1 systemd-debuginfo-32bit-210-104.1 - openSUSE Leap 42.1 (noarch): systemd-bash-completion-210-104.1 References: https://bugzilla.suse.com/1012266 https://bugzilla.suse.com/1012591 https://bugzilla.suse.com/1013989 https://bugzilla.suse.com/1018399 https://bugzilla.suse.com/1020083 https://bugzilla.suse.com/909418 https://bugzilla.suse.com/912715 https://bugzilla.suse.com/945340 https://bugzilla.suse.com/963290 https://bugzilla.suse.com/990538 https://bugzilla.suse.com/997682

1 0