March 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:0682-1: moderate: Recommended update for boinc-client
by maintenance＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Recommended Update: Recommended update for boinc-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0682-1 Rating: moderate References: #1017705 #1026965 #999628 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This recommended update for boinc-client fixes the following issues: - BOINC GUI Manager wrapping script specified incorrect directory (boo#999628, boo#1017705) - Systemd service file was changed to read configuration from from sysconfig file (boo#1026965) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-342=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-342=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): boinc-client-doc-7.2.42-6.1 boinc-client-lang-7.2.42-6.1 boinc-manager-lang-7.2.42-6.1 - openSUSE Leap 42.2 (x86_64): boinc-client-7.2.42-6.1 boinc-client-debuginfo-7.2.42-6.1 boinc-client-debugsource-7.2.42-6.1 boinc-client-devel-7.2.42-6.1 boinc-manager-7.2.42-6.1 boinc-manager-debuginfo-7.2.42-6.1 libboinc7-7.2.42-6.1 libboinc7-debuginfo-7.2.42-6.1 - openSUSE Leap 42.1 (i586 x86_64): boinc-client-7.2.42-5.1 boinc-client-debuginfo-7.2.42-5.1 boinc-client-debugsource-7.2.42-5.1 boinc-client-devel-7.2.42-5.1 boinc-manager-7.2.42-5.1 boinc-manager-debuginfo-7.2.42-5.1 libboinc7-7.2.42-5.1 libboinc7-debuginfo-7.2.42-5.1 - openSUSE Leap 42.1 (noarch): boinc-client-doc-7.2.42-5.1 boinc-client-lang-7.2.42-5.1 boinc-manager-lang-7.2.42-5.1 References: https://bugzilla.suse.com/1017705 https://bugzilla.suse.com/1026965 https://bugzilla.suse.com/999628

1 0

openSUSE-RU-2017:0681-1: Recommended update for gnome-online-accounts
by maintenance＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Recommended Update: Recommended update for gnome-online-accounts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0681-1 Rating: low References: #1016000 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides gnome-online-accounts version 3.20.5 which fixes the following issues: - New API key for Google (bsc#1016000) - Updated translations This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-335=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gnome-online-accounts-3.20.5-3.1 gnome-online-accounts-debuginfo-3.20.5-3.1 gnome-online-accounts-debugsource-3.20.5-3.1 gnome-online-accounts-devel-3.20.5-3.1 libgoa-1_0-0-3.20.5-3.1 libgoa-1_0-0-debuginfo-3.20.5-3.1 libgoa-backend-1_0-1-3.20.5-3.1 libgoa-backend-1_0-1-debuginfo-3.20.5-3.1 typelib-1_0-Goa-1_0-3.20.5-3.1 - openSUSE Leap 42.2 (noarch): gnome-online-accounts-lang-3.20.5-3.1 - openSUSE Leap 42.2 (x86_64): libgoa-1_0-0-32bit-3.20.5-3.1 libgoa-1_0-0-debuginfo-32bit-3.20.5-3.1 libgoa-backend-1_0-1-32bit-3.20.5-3.1 libgoa-backend-1_0-1-debuginfo-32bit-3.20.5-3.1 References: https://bugzilla.suse.com/1016000

1 0

openSUSE-SU-2017:0680-1: moderate: Security update for kdelibs4, kio
by opensuse-security＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Security Update: Security update for kdelibs4, kio ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0680-1 Rating: moderate References: #1027520 Cross-References: CVE-2017-6410 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kdelibs4, kio fixes the following issues: - CVE-2017-6410: Information Leak when accessing https when using a malicious PAC file (boo#1027520) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-334=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-334=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): kdelibs4-4.14.25-5.2 kdelibs4-branding-upstream-4.14.25-5.2 kdelibs4-core-4.14.25-5.2 kdelibs4-core-debuginfo-4.14.25-5.2 kdelibs4-debuginfo-4.14.25-5.2 kdelibs4-debugsource-4.14.25-5.2 kdelibs4-doc-4.14.25-5.2 kdelibs4-doc-debuginfo-4.14.25-5.2 kio-5.26.0-6.2 kio-core-5.26.0-6.2 kio-core-debuginfo-5.26.0-6.2 kio-debuginfo-5.26.0-6.2 kio-debugsource-5.26.0-6.2 kio-devel-5.26.0-6.2 kio-devel-debuginfo-5.26.0-6.2 libkde4-4.14.25-5.2 libkde4-debuginfo-4.14.25-5.2 libkde4-devel-4.14.25-5.2 libkdecore4-4.14.25-5.2 libkdecore4-debuginfo-4.14.25-5.2 libkdecore4-devel-4.14.25-5.2 libkdecore4-devel-debuginfo-4.14.25-5.2 libksuseinstall-devel-4.14.25-5.2 libksuseinstall1-4.14.25-5.2 libksuseinstall1-debuginfo-4.14.25-5.2 - openSUSE Leap 42.2 (x86_64): kio-32bit-5.26.0-6.2 kio-core-32bit-5.26.0-6.2 kio-core-debuginfo-32bit-5.26.0-6.2 kio-debuginfo-32bit-5.26.0-6.2 kio-devel-32bit-5.26.0-6.2 kio-devel-debuginfo-32bit-5.26.0-6.2 libkde4-32bit-4.14.25-5.2 libkde4-debuginfo-32bit-4.14.25-5.2 libkdecore4-32bit-4.14.25-5.2 libkdecore4-debuginfo-32bit-4.14.25-5.2 libksuseinstall1-32bit-4.14.25-5.2 libksuseinstall1-debuginfo-32bit-4.14.25-5.2 - openSUSE Leap 42.2 (noarch): kdelibs4-apidocs-4.14.25-5.2 kio-lang-5.26.0-6.2 - openSUSE Leap 42.1 (i586 x86_64): kdelibs4-4.14.18-15.2 kdelibs4-branding-upstream-4.14.18-15.2 kdelibs4-core-4.14.18-15.2 kdelibs4-core-debuginfo-4.14.18-15.2 kdelibs4-debuginfo-4.14.18-15.2 kdelibs4-debugsource-4.14.18-15.2 kdelibs4-doc-4.14.18-15.2 kdelibs4-doc-debuginfo-4.14.18-15.2 kio-5.21.0-23.2 kio-core-5.21.0-23.2 kio-core-debuginfo-5.21.0-23.2 kio-debuginfo-5.21.0-23.2 kio-debugsource-5.21.0-23.2 kio-devel-5.21.0-23.2 kio-devel-debuginfo-5.21.0-23.2 libkde4-4.14.18-15.2 libkde4-debuginfo-4.14.18-15.2 libkde4-devel-4.14.18-15.2 libkdecore4-4.14.18-15.2 libkdecore4-debuginfo-4.14.18-15.2 libkdecore4-devel-4.14.18-15.2 libkdecore4-devel-debuginfo-4.14.18-15.2 libksuseinstall-devel-4.14.18-15.2 libksuseinstall1-4.14.18-15.2 libksuseinstall1-debuginfo-4.14.18-15.2 - openSUSE Leap 42.1 (noarch): kdelibs4-apidocs-4.14.18-15.2 kio-lang-5.21.0-23.2 - openSUSE Leap 42.1 (x86_64): kio-32bit-5.21.0-23.2 kio-core-32bit-5.21.0-23.2 kio-core-debuginfo-32bit-5.21.0-23.2 kio-debuginfo-32bit-5.21.0-23.2 kio-devel-32bit-5.21.0-23.2 kio-devel-debuginfo-32bit-5.21.0-23.2 libkde4-32bit-4.14.18-15.2 libkde4-debuginfo-32bit-4.14.18-15.2 libkdecore4-32bit-4.14.18-15.2 libkdecore4-debuginfo-32bit-4.14.18-15.2 libksuseinstall1-32bit-4.14.18-15.2 libksuseinstall1-debuginfo-32bit-4.14.18-15.2 References: https://www.suse.com/security/cve/CVE-2017-6410.html https://bugzilla.suse.com/1027520

1 0

openSUSE-RU-2017:0679-1: moderate: Recommended update for atril
by maintenance＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Recommended Update: Recommended update for atril ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0679-1 Rating: moderate References: #1028022 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for atril fixes the following issues: - Caja would freeze if properties of a PDF file are selected (boo#1028022) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-333=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): atril-lang-1.16.1-3.1 - openSUSE Leap 42.2 (x86_64): atril-1.16.1-3.1 atril-backends-1.16.1-3.1 atril-backends-debuginfo-1.16.1-3.1 atril-debuginfo-1.16.1-3.1 atril-debugsource-1.16.1-3.1 atril-devel-1.16.1-3.1 atril-thumbnailer-1.16.1-3.1 caja-extension-atril-1.16.1-3.1 caja-extension-atril-debuginfo-1.16.1-3.1 libatrildocument3-1.16.1-3.1 libatrildocument3-debuginfo-1.16.1-3.1 libatrilview3-1.16.1-3.1 libatrilview3-debuginfo-1.16.1-3.1 typelib-1_0-AtrilDocument-1_5_0-1.16.1-3.1 typelib-1_0-AtrilView-1_5_0-1.16.1-3.1 References: https://bugzilla.suse.com/1028022

1 0

openSUSE-SU-2017:0678-1: moderate: Security update for pax-utils
by opensuse-security＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Security Update: Security update for pax-utils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0678-1 Rating: moderate References: #1026959 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for pax-utils fixes the following issues: - bsc#1026959: out of bounds read in scanelf could have unspecified impact pax-utils was updated to 1.2.2, fixing missing miscellaneous fd and memory leak issues. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-332=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-332=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): pax-utils-1.2.2-6.1 pax-utils-debuginfo-1.2.2-6.1 pax-utils-debugsource-1.2.2-6.1 - openSUSE Leap 42.1 (i586 x86_64): pax-utils-1.2.2-5.1 pax-utils-debuginfo-1.2.2-5.1 pax-utils-debugsource-1.2.2-5.1 References: https://bugzilla.suse.com/1026959

1 0

openSUSE-SU-2017:0677-1: moderate: Security update for kdelibs4, kio
by opensuse-security＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Security Update: Security update for kdelibs4, kio ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0677-1 Rating: moderate References: #1027520 Cross-References: CVE-2017-6410 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kdelibs4, kio fixes the following issues: - CVE-2017-6410: Information Leak when accessing https when using a malicious PAC file (boo#1027520) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-334=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): kdelibs4-4.14.18-6.2 kdelibs4-4.14.25-5.3 kdelibs4-branding-upstream-4.14.18-6.2 kdelibs4-branding-upstream-4.14.25-5.3 kdelibs4-core-4.14.18-6.2 kdelibs4-core-4.14.25-5.3 kdelibs4-core-debuginfo-4.14.18-6.2 kdelibs4-core-debuginfo-4.14.25-5.3 kdelibs4-debuginfo-4.14.18-6.2 kdelibs4-debuginfo-4.14.25-5.3 kdelibs4-debugsource-4.14.18-6.2 kdelibs4-debugsource-4.14.25-5.3 kdelibs4-doc-4.14.18-6.2 kdelibs4-doc-4.14.25-5.3 kdelibs4-doc-debuginfo-4.14.18-6.2 kdelibs4-doc-debuginfo-4.14.25-5.3 libkde4-4.14.18-6.2 libkde4-4.14.25-5.3 libkde4-debuginfo-4.14.18-6.2 libkde4-debuginfo-4.14.25-5.3 libkde4-devel-4.14.18-6.2 libkde4-devel-4.14.25-5.3 libkdecore4-4.14.18-6.2 libkdecore4-4.14.25-5.3 libkdecore4-debuginfo-4.14.18-6.2 libkdecore4-debuginfo-4.14.25-5.3 libkdecore4-devel-4.14.18-6.2 libkdecore4-devel-4.14.25-5.3 libkdecore4-devel-debuginfo-4.14.18-6.2 libkdecore4-devel-debuginfo-4.14.25-5.3 libksuseinstall-devel-4.14.18-6.2 libksuseinstall-devel-4.14.25-5.3 libksuseinstall1-4.14.18-6.2 libksuseinstall1-4.14.25-5.3 libksuseinstall1-debuginfo-4.14.18-6.2 libksuseinstall1-debuginfo-4.14.25-5.3 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): kio-5.20.0-6.2 kio-5.26.0-5.1 kio-core-5.20.0-6.2 kio-core-5.26.0-5.1 kio-core-debuginfo-5.20.0-6.2 kio-core-debuginfo-5.26.0-5.1 kio-debuginfo-5.20.0-6.2 kio-debuginfo-5.26.0-5.1 kio-debugsource-5.20.0-6.2 kio-debugsource-5.26.0-5.1 kio-devel-5.20.0-6.2 kio-devel-5.26.0-5.1 kio-devel-debuginfo-5.20.0-6.2 kio-devel-debuginfo-5.26.0-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): kdelibs4-apidocs-4.14.18-6.2 kdelibs4-apidocs-4.14.25-5.3 kio-lang-5.20.0-6.2 kio-lang-5.26.0-5.1 References: https://www.suse.com/security/cve/CVE-2017-6410.html https://bugzilla.suse.com/1027520

1 0

openSUSE-RU-2017:0676-1: Recommended update for evolution-data-server
by maintenance＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Recommended Update: Recommended update for evolution-data-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0676-1 Rating: low References: #1016000 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides evolution-data-server version 3.20.6 which fixes the following issues: - Improve handling of the Google OAuth2 tokens in Calendar (bsc#1016000) - Junk check fails due to empty cache file - Avoid crash when untagged response doesn't have a token This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-336=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): evolution-data-server-3.20.6-3.1 evolution-data-server-debuginfo-3.20.6-3.1 evolution-data-server-debugsource-3.20.6-3.1 evolution-data-server-devel-3.20.6-3.1 evolution-data-server-doc-3.20.6-3.1 libcamel-1_2-57-3.20.6-3.1 libcamel-1_2-57-debuginfo-3.20.6-3.1 libebackend-1_2-10-3.20.6-3.1 libebackend-1_2-10-debuginfo-3.20.6-3.1 libebook-1_2-16-3.20.6-3.1 libebook-1_2-16-debuginfo-3.20.6-3.1 libebook-contacts-1_2-2-3.20.6-3.1 libebook-contacts-1_2-2-debuginfo-3.20.6-3.1 libecal-1_2-19-3.20.6-3.1 libecal-1_2-19-debuginfo-3.20.6-3.1 libedata-book-1_2-25-3.20.6-3.1 libedata-book-1_2-25-debuginfo-3.20.6-3.1 libedata-cal-1_2-28-3.20.6-3.1 libedata-cal-1_2-28-debuginfo-3.20.6-3.1 libedataserver-1_2-21-3.20.6-3.1 libedataserver-1_2-21-debuginfo-3.20.6-3.1 libedataserverui-1_2-1-3.20.6-3.1 libedataserverui-1_2-1-debuginfo-3.20.6-3.1 typelib-1_0-EBook-1_2-3.20.6-3.1 typelib-1_0-EBookContacts-1_2-3.20.6-3.1 typelib-1_0-EDataServer-1_2-3.20.6-3.1 - openSUSE Leap 42.2 (x86_64): evolution-data-server-32bit-3.20.6-3.1 evolution-data-server-debuginfo-32bit-3.20.6-3.1 libcamel-1_2-57-32bit-3.20.6-3.1 libcamel-1_2-57-debuginfo-32bit-3.20.6-3.1 libebackend-1_2-10-32bit-3.20.6-3.1 libebackend-1_2-10-debuginfo-32bit-3.20.6-3.1 libebook-1_2-16-32bit-3.20.6-3.1 libebook-1_2-16-debuginfo-32bit-3.20.6-3.1 libebook-contacts-1_2-2-32bit-3.20.6-3.1 libebook-contacts-1_2-2-debuginfo-32bit-3.20.6-3.1 libecal-1_2-19-32bit-3.20.6-3.1 libecal-1_2-19-debuginfo-32bit-3.20.6-3.1 libedata-book-1_2-25-32bit-3.20.6-3.1 libedata-book-1_2-25-debuginfo-32bit-3.20.6-3.1 libedata-cal-1_2-28-32bit-3.20.6-3.1 libedata-cal-1_2-28-debuginfo-32bit-3.20.6-3.1 libedataserver-1_2-21-32bit-3.20.6-3.1 libedataserver-1_2-21-debuginfo-32bit-3.20.6-3.1 libedataserverui-1_2-1-32bit-3.20.6-3.1 libedataserverui-1_2-1-debuginfo-32bit-3.20.6-3.1 - openSUSE Leap 42.2 (noarch): evolution-data-server-lang-3.20.6-3.1 References: https://bugzilla.suse.com/1016000

1 0

openSUSE-RU-2017:0675-1: moderate: Recommended update for KDE Plasma
by maintenance＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Recommended Update: Recommended update for KDE Plasma ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0675-1 Rating: moderate References: #1005902 #1022119 #1022904 #1026970 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update contains KDE Plasma 5.8.6, a general bugfix release. The following components were updated: breeze, breeze4-style, discover, kde-gtk-config5, kde-user-manager, kscreen5, kscreenlocker, ksysguard5, kwin5, libkscreen2, plasma-nm5, plasma5-desktop, plasma5-openSUSE, plasma5-pa, plasma5-sdk, plasma5-session, plasma5-workspace. The upstream announcements are available here: * https://www.kde.org/announcements/plasma-5.8.6.php * https://www.kde.org/announcements/plasma-5.8.5.php * https://www.kde.org/announcements/plasma-5.8.4.php Changes in breeze: * Add top_left_arrow cursor symlinks Changes in breeze4-style: * Revert "[kstyle] Implement application unpolish to delete ShadowHelper" * [kstyle] Implement application unpolish to delete ShadowHelper * [kstyle] Delay init of Wayland setup till next event cycle * Fix broken kcfgc files Changes in discover: * Improve YaST integration and UI functionality Changes in kde-gtk-config5 * Improved compatibility with old configurations Changes in kde-user-manager: * Hide "automatic login" button in UserAccounts since is does absolutely nothing * Revert "Do not ask for root permissions when it's unnecessary" Changes in kscreen5: * guard against nullptr-access to the OutputPtr * apply config change after correcting invalid mode * no use in setting modes on disabled outputs * correct possibly invalid current mode Changes in kscreenlocker: * implement focusing * Fix crash in Screen Locker KCM on teardown Changes in ksysguard5: * Fix array allocation for non-continuous cpu numbers * Use unicode codepoint instead of UTF-8 literal Changes in kwin5: * Avoid a crash on Kwin decoration KCM teardown * Support modifier-only-shortcuts when capslock is on * Translate the layout name when passing to layout change OSD * Fixed initial graying out options in Cube Effect settings * [TabBox] Remember current model index on SwitcherItem model set * Align configure button consistently across delegates * Fix AbstractClient::sizeForClientSize * Ensure that all Effects honour the grab roles correctly * Unpolish QStyle on QApp prior to destroying internal Wayland connection * [helpers/killer] Force to platform XCB * Simplify the window title passed in from the window system * [desktopgrid] Don't manipulate virtual desktop of desktop window * Invert the scroll direction for wheel events on internal windows * Internal windows cannot be minimized * [libinput] Add scroll method configuration support * [libinput] Add natural scrolling support * [libinput] Add middle mouse button emulation support * Don't snap to auto-hidden panels * [scripting] Silence unused variable warnings * [scripting] Fix export of WorkspaceWrapper in QtScript * Support for workspace.clientList() in declarative script * Correctly set i18n suffix in mousemark spinbox. Changes in libkscreen2 * Fix type argument for get property call * disable logging to kscreen.log by default * allow changing an output's modelist at runtime Changes in plasma-nm5: * Fix crash caused by notifications use-after-free * OpenVPN: Remove previously configured secrets to avoid passing them back * Use KDE specific page for captive portal redirection * Some captive portals seems to have problem redirecting from https * Revert "Pass protocol type to openconnect" * Pass protocol type to openconnect Changes in plasma5-desktop: * fix default font in fonts kcm: * Use icon center for vertical hitscan on drop. * remove get new looks button from 5.8 * Fix crash when invoking Present Windows with the group dialog open. * [Folder View] Don't show script execution prompt on desktop:/ * Use proper version for baloo * [Solid Device Actions KCM] Encode action file name * Revamp (Activity) Pager wheel handling * [Folder View] show script execution prompt when clicking item * Fix startup warning * Fix clearing selection when rectangle selection contains no items. * Fix Plasmoid.busy visualization in desktop containment. * Call correct function and fix warning. * [Task Manager] Hide group dialog when opening applets settings * [kcm] Fix reset logic * Silence warning. * Fix crash during crash acrobatics. * fix binding loop * [Folder View] Fix right click erroneously opening files * Clean up after a window delegate drag exits the window. * Fix Enter/Return not running non-dir items in list view mode. * Set current index to start of selection range when performing rectangle selection. * [Panel Containment] Explicitly bind visible on both the container and the applet * [Task Manager] Parent QAction to "parent" instead of this * [Containment Appearance] Make sure to always load a config view * Don't clear hover state while a child dialog is open. * prompt for executing files in folderview containment (boo#1022904) * prevent folderview from opening files erroneously in addition to showing the context menu when right-clicking on an icon * [Folder View] Workaround QML Text layouting glitch * [Kicker] Support drag from bookmarks runner * Larger icons and stack windows above label item. * ensure results are sorted by relevance * [taskmanager] Limit GroupDialog size, stop highlightwindow effect when it shown, increase items readability * Fix 2 RTL bugs * [Kicker] Hide "Edit Applications..." context menu entry if system immutable * Fix running of recent docs actions for runner match entries. * [Folder View] Clear hover state when mouse leaves view * Select correct index without timer * Select correct index without timer * Fix "Move to Current Desktop" action moving to all desktops instead. * Check whether the KServe is still valid before running. * Publish delegate geometry when ChildCount increases. * fix config dialogs in ltr mode * [Task Manager] Strip application:// prefix before looking up service * [Task Manager] Pass local file to KService instead of stringified URL * [Task Manager] Fix Unity launcher count badge rendering when task is created Changes in plasma5-openSUSE: * Add default fonts to /etc/xdg/kdeglobals to make KDE4 applications * use the Plasma5 fonts as well (same as set by plasma5-integration) (boo#1026970) * Increase contrast on splash/images/bulb.png to get rid of noise and visible edges Changes in plasma5-pa: * Always check if context is valid when calling pa functions * VolumeSlider: Ignore all value changes until Component is completed * Fix compare for undefined argument in playFeedback() * Pass correct index to playFeedback * Applet: Don't delete delegates while drag is active Changes in plasma5-sdk: * Update to KDevplatform API change * Fix handling of paths with whitespace in bash * Use NO_POLICY_SCOPE on KDECompilerSettings Changes in plasma5-session: * Only require version 5.8.6 of packages that actually changed Changes in plasma5-workspace: * Port to QMultiHash. * Only remove + announce if leader change actually occured, avoid excessive loop. * [Notifications] Never manually hide() the NotificationPopup * Add comment laying out goals. * Fix crash when switching activities. * Tweak alphabetic (default) sort behavior. * turn the NotificationItem in a MouseArea * [DesktopView] show() ConfigView when it is already opened * [System Tray Containment] Drop useless Q_INVOKABLE from .cpp file * [System Tray Containment] Ungrab mouse before opening context menu * [KRunner] In doubt use primary screen for view position * Drop legacy fixup rule for VirtualBox. * fix isOutputRedundant logic * Fix group parents not appearing when disabling inline grouping. * Corona::screenGeometryChanged on qscreen resized * MediaController: Update position while queuedPositionUpdate timer is running * better clean up of duplicate containments * Fix "Pinned Chrome disappears when all Chrome windows are closed" * [MPRIS Data Engine] Don't crash if "Metadata" is a map but of wrong type * Systray: Move all icon resolution to dataengine * use a native event filter to notice the screen was swapped * notice when the only screen changes * make sure applet is removed from stack when destroyed * [Lock Screen] Wrap OSD in its own ColorScope * Move updating of primary screen in screenpool after fetching its id * Calendar: clear selection on opening * Fix "Unable to assign [undefined] to int" log * Refresh the ScreenGeometry data role whenever a screen is added or changes its geometry. * systemtray: Don't propagate unhandled wheel events * [Lock Screen] Add keyboard icon for keyboard layout switcher * remove categories not present on server anymore * Select correct index without timer * Expose rowCount as data role in TaskGroupingProxyModel. * [taskmanagerrulesrc] Add Rewrite Rule for chromium * [SDDM Theme] Fix background in qmlscene by providing proper config dummy data * [SDDM Theme] Add "lastUser" and "disableAvatarsThreshold" properties to dummydata * [SDDM Theme] Remember last username * [taskmanagerrulesrc] Add Rewrite Rule for chromium-browser * fix config dialogs in ltr mode * properly parse exec line before qprocessing it for autostart * Disable Qt's high DPI scaling on shutdown/switch user dialogs * Don't set PanelView visibilty when opening/closing config * Check KPluginInfo.service() returns a valid object * Revert "Port to new plasma-framework API" * Add plasma-discover to mappings * [Windowed Widgets Runner] Don't access invalid KPluginMetaData * Load screenpool at the same time as we connect to screenchanged signals * Avoid connecting to screen changed signals twice * Sync app config in sync with applets config * make sure all outputs are known * [taskmanagerrulesrc] Add Rewrite Rule for Google-chrome * [XWindowTasksModel] Check for service being empty before searching new ones * fix behavior of scrollable systray popups * Introduce new pre-layout script hook * Make sure we're looking both for json and desktop metadata * Port to new plasma-framework API * Modified distance function to keep aspect ratio as close as possible * fix adding a panel or plasmoid with the new json metadata files Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-340=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): breeze-5.8.6-7.1 breeze-debugsource-5.8.6-7.1 breeze4-style-5.8.6-7.1 breeze4-style-debuginfo-5.8.6-7.1 breeze4-style-debugsource-5.8.6-7.1 breeze5-decoration-5.8.6-7.1 breeze5-decoration-debuginfo-5.8.6-7.1 breeze5-style-5.8.6-7.1 breeze5-style-debuginfo-5.8.6-7.1 drkonqi5-5.8.6-8.1 drkonqi5-debuginfo-5.8.6-8.1 kde-gtk-config5-5.8.6-4.1 kde-gtk-config5-debuginfo-5.8.6-4.1 kde-gtk-config5-debugsource-5.8.6-4.1 kde-user-manager-5.8.6-7.1 kde-user-manager-debuginfo-5.8.6-7.1 kde-user-manager-debugsource-5.8.6-7.1 kscreen5-5.8.6-4.1 kscreen5-debuginfo-5.8.6-4.1 kscreen5-debugsource-5.8.6-4.1 kscreenlocker-5.8.6-4.1 kscreenlocker-debuginfo-5.8.6-4.1 kscreenlocker-debugsource-5.8.6-4.1 kscreenlocker-devel-5.8.6-4.1 ksysguard5-5.8.6-4.1 ksysguard5-debuginfo-5.8.6-4.1 ksysguard5-debugsource-5.8.6-4.1 kwin5-5.8.6-7.1 kwin5-debuginfo-5.8.6-7.1 kwin5-debugsource-5.8.6-7.1 kwin5-devel-5.8.6-7.1 libKF5Screen7-5.8.6-4.1 libKF5Screen7-debuginfo-5.8.6-4.1 libKScreenLocker5-5.8.6-4.1 libKScreenLocker5-debuginfo-5.8.6-4.1 libkscreen2-debugsource-5.8.6-4.1 libkscreen2-devel-5.8.6-4.1 libkscreen2-plugin-5.8.6-4.1 libkscreen2-plugin-debuginfo-5.8.6-4.1 plasma5-desktop-5.8.6-7.1 plasma5-desktop-debuginfo-5.8.6-7.1 plasma5-desktop-debugsource-5.8.6-7.1 plasma5-pa-5.8.6-7.1 plasma5-pa-debuginfo-5.8.6-7.1 plasma5-pa-debugsource-5.8.6-7.1 plasma5-workspace-5.8.6-8.1 plasma5-workspace-debuginfo-5.8.6-8.1 plasma5-workspace-debugsource-5.8.6-8.1 plasma5-workspace-devel-5.8.6-8.1 plasma5-workspace-libs-5.8.6-8.1 plasma5-workspace-libs-debuginfo-5.8.6-8.1 - openSUSE Leap 42.2 (x86_64): discover-5.8.6-7.1 discover-debuginfo-5.8.6-7.1 discover-debugsource-5.8.6-7.1 discover-plasmoid-5.8.6-7.1 libKF5Screen7-32bit-5.8.6-4.1 libKF5Screen7-debuginfo-32bit-5.8.6-4.1 libkscreen2-devel-32bit-5.8.6-4.1 libkscreen2-plugin-32bit-5.8.6-4.1 libkscreen2-plugin-debuginfo-32bit-5.8.6-4.1 plasma-nm5-5.8.6-4.1 plasma-nm5-debuginfo-5.8.6-4.1 plasma-nm5-debugsource-5.8.6-4.1 plasma-nm5-l2tp-5.8.6-4.1 plasma-nm5-l2tp-debuginfo-5.8.6-4.1 plasma-nm5-openconnect-5.8.6-4.1 plasma-nm5-openconnect-debuginfo-5.8.6-4.1 plasma-nm5-openswan-5.8.6-4.1 plasma-nm5-openswan-debuginfo-5.8.6-4.1 plasma-nm5-openvpn-5.8.6-4.1 plasma-nm5-openvpn-debuginfo-5.8.6-4.1 plasma-nm5-pptp-5.8.6-4.1 plasma-nm5-pptp-debuginfo-5.8.6-4.1 plasma-nm5-ssh-5.8.6-4.1 plasma-nm5-ssh-debuginfo-5.8.6-4.1 plasma-nm5-sstp-5.8.6-4.1 plasma-nm5-sstp-debuginfo-5.8.6-4.1 plasma-nm5-strongswan-5.8.6-4.1 plasma-nm5-strongswan-debuginfo-5.8.6-4.1 plasma-nm5-vpnc-5.8.6-4.1 plasma-nm5-vpnc-debuginfo-5.8.6-4.1 plasma5-sdk-5.8.6-3.1 plasma5-sdk-debuginfo-5.8.6-3.1 plasma5-sdk-debugsource-5.8.6-3.1 plasma5-workspace-libs-32bit-5.8.6-8.1 plasma5-workspace-libs-debuginfo-32bit-5.8.6-8.1 plasmaengineexplorer5-5.8.6-3.1 plasmaengineexplorer5-debuginfo-5.8.6-3.1 - openSUSE Leap 42.2 (noarch): breeze5-cursors-5.8.6-7.1 breeze5-style-lang-5.8.6-7.1 breeze5-wallpapers-5.8.6-7.1 discover-lang-5.8.6-7.1 kde-gtk-config5-lang-5.8.6-4.1 kde-user-manager-lang-5.8.6-7.1 kscreen5-lang-5.8.6-4.1 kscreenlocker-lang-5.8.6-4.1 ksysguard5-lang-5.8.6-4.1 kwin5-lang-5.8.6-7.1 plasma-nm5-lang-5.8.6-4.1 plasma5-defaults-openSUSE-42.1.1-12.1 plasma5-desktop-lang-5.8.6-7.1 plasma5-openSUSE-42.1.1-12.1 plasma5-pa-lang-5.8.6-7.1 plasma5-sdk-lang-5.8.6-3.1 plasma5-session-5.8.6-7.1 plasma5-theme-openSUSE-42.1.1-12.1 plasma5-workspace-branding-openSUSE-42.1.1-12.1 plasma5-workspace-lang-5.8.6-8.1 sddm-theme-openSUSE-42.1.1-12.1 References: https://bugzilla.suse.com/1005902 https://bugzilla.suse.com/1022119 https://bugzilla.suse.com/1022904 https://bugzilla.suse.com/1026970

1 0

openSUSE-SU-2017:0674-1: moderate: Security update for openssh
by opensuse-security＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Security Update: Security update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0674-1 Rating: moderate References: #1005480 #1005893 #1006221 #1016366 #1016369 Cross-References: CVE-2016-10009 CVE-2016-10011 CVE-2016-8858 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: This update for openssh fixes the following issues: - CVE-2016-8858: prevent resource depletion during key exchange (bsc#1005480) - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation (bsc#1016366) - CVE-2016-10011: Prevent possible leaks of host private keys to low-privilege process handling authentication (bsc#1016369) - Fix suggested command for removing conflicting server keys from the known_hosts file (bsc#1006221) - Properly verify CIDR masks in the AllowUsers and DenyUsers configuration lists (bsc#1005893) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-339=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): openssh-6.6p1-17.1 openssh-askpass-gnome-6.6p1-17.1 openssh-askpass-gnome-debuginfo-6.6p1-17.1 openssh-cavs-6.6p1-17.1 openssh-cavs-debuginfo-6.6p1-17.1 openssh-debuginfo-6.6p1-17.1 openssh-debugsource-6.6p1-17.1 openssh-fips-6.6p1-17.1 openssh-helpers-6.6p1-17.1 openssh-helpers-debuginfo-6.6p1-17.1 References: https://www.suse.com/security/cve/CVE-2016-10009.html https://www.suse.com/security/cve/CVE-2016-10011.html https://www.suse.com/security/cve/CVE-2016-8858.html https://bugzilla.suse.com/1005480 https://bugzilla.suse.com/1005893 https://bugzilla.suse.com/1006221 https://bugzilla.suse.com/1016366 https://bugzilla.suse.com/1016369

1 0

openSUSE-RU-2017:0673-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 13 Mar '17

13 Mar '17

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0673-1 Rating: moderate References: #1024934 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for virtualbox fixes the following issues: - 3D acceleration available for GNOME desktops bsc#1024934. Not supported in KDE. 3D acceleration remains disabled by default, can be enabled in /etc/init.d/vboxadd Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-341=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): virtualbox-guest-desktop-icons-5.1.14-14.1 virtualbox-host-source-5.1.14-14.1 - openSUSE Leap 42.2 (x86_64): python-virtualbox-5.1.14-14.1 python-virtualbox-debuginfo-5.1.14-14.1 virtualbox-5.1.14-14.1 virtualbox-debuginfo-5.1.14-14.1 virtualbox-debugsource-5.1.14-14.1 virtualbox-devel-5.1.14-14.1 virtualbox-guest-kmp-default-5.1.14_k4.4.49_16-14.1 virtualbox-guest-kmp-default-debuginfo-5.1.14_k4.4.49_16-14.1 virtualbox-guest-tools-5.1.14-14.1 virtualbox-guest-tools-debuginfo-5.1.14-14.1 virtualbox-guest-x11-5.1.14-14.1 virtualbox-guest-x11-debuginfo-5.1.14-14.1 virtualbox-host-kmp-default-5.1.14_k4.4.49_16-14.1 virtualbox-host-kmp-default-debuginfo-5.1.14_k4.4.49_16-14.1 virtualbox-qt-5.1.14-14.1 virtualbox-qt-debuginfo-5.1.14-14.1 virtualbox-websrv-5.1.14-14.1 virtualbox-websrv-debuginfo-5.1.14-14.1 References: https://bugzilla.suse.com/1024934

1 0