April 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:1009-1: moderate: Recommended update for sysdig
by maintenance＠opensuse.org 13 Apr '17

13 Apr '17

openSUSE Recommended Update: Recommended update for sysdig ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1009-1 Rating: moderate References: #1032025 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides version 0.15.1 of sysdig and brings various fixes and improvements: The following bugs have been fixed: - Fixed driver compilation issues on armv6l. - Fixes on Kubernetes support. - Regression on rkt detection. - Fixed high cpu usage when sysdig was used with -M parameter. - Fixed a memory leak. - Various fixes on Kubernetes ingestion. - Fix some happening deadlocks in the driver when ioctl were exiting with error. - Fix mkdir and rmdir events, they were skipped in case of page faults. - Bugfix on topports_server chisel. - Avoid some cases of infinite loop when evaluating filters like proc.aname. - JSON output is not: an object per event separated by newline, instead of objects inside array as before. - New filter proc.pcmdline, which represents the full command line (proc.name + proc.args) of the parent of the process generating the event. - Fixes for kernel version 4.9.3. - Improved detection of Mesos containers. - Fix compilation with HAS_CAPTURE disabled on Linux. - Fixes for merged captures support. Additionally the following features have been added: - Support for Linux Kernel 4.10. - Use /proc/<pid>/status instead of custom ioctl to get process vpid for kernels >= 4.1. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-468=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): sysdig-0.15.1-5.3.2 sysdig-debuginfo-0.15.1-5.3.2 sysdig-debugsource-0.15.1-5.3.2 sysdig-kmp-default-0.15.1_k4.4.57_18.3-5.3.2 sysdig-kmp-default-debuginfo-0.15.1_k4.4.57_18.3-5.3.2 References: https://bugzilla.suse.com/1032025

1 0

openSUSE-RU-2017:1007-1: Recommended update for memcached
by maintenance＠opensuse.org 13 Apr '17

13 Apr '17

openSUSE Recommended Update: Recommended update for memcached ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1007-1 Rating: low References: #1032298 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for memcached fixes the following issues: - Use the MEMCACHED_USER variable from the /etc/sysconfig/memcached file to determine the user for the memcached process instead of hard-coding it in the service file (boo#1032298). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-467=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-467=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): memcached-1.4.33-9.3.1 memcached-debuginfo-1.4.33-9.3.1 memcached-debugsource-1.4.33-9.3.1 memcached-devel-1.4.33-9.3.1 - openSUSE Leap 42.1 (i586 x86_64): memcached-1.4.22-9.1 memcached-debuginfo-1.4.22-9.1 memcached-debugsource-1.4.22-9.1 memcached-devel-1.4.22-9.1 References: https://bugzilla.suse.com/1032298

1 0

openSUSE-RU-2017:1006-1: moderate: Recommended update for nfs-utils
by maintenance＠opensuse.org 13 Apr '17

13 Apr '17

openSUSE Recommended Update: Recommended update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1006-1 Rating: moderate References: #1005609 #1019211 #945937 #990356 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for nfs-utils fixes the following issues: - Make mount.nfs return failure if statd is being slow to start due to DNS issues. (bsc#945937) - Include various upstream systemd unit file updates to ensure correct starting dependencies of nfsd and rpcbind. (bsc#990356) - Fix typos relating to version setting in nfs-utils_env.sh. (bsc#990356) - Only require a filesystem to be mounted if it isn't marked 'noauto' in /etc/fstab. (bsc#1019211) - Move rpc.svcgssd and corresponding man page from nfs-client package to nfs-kernel-server. For NFSv4.0 this is needed on client as well as the server to support the back-channel. (bsc#1005609) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-471=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): nfs-client-1.3.0-25.3.1 nfs-client-debuginfo-1.3.0-25.3.1 nfs-doc-1.3.0-25.3.1 nfs-kernel-server-1.3.0-25.3.1 nfs-kernel-server-debuginfo-1.3.0-25.3.1 nfs-utils-debugsource-1.3.0-25.3.1 References: https://bugzilla.suse.com/1005609 https://bugzilla.suse.com/1019211 https://bugzilla.suse.com/945937 https://bugzilla.suse.com/990356

1 0

openSUSE-SU-2017:1005-1: moderate: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 13 Apr '17

13 Apr '17

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1005-1 Rating: moderate References: #1032105 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for phpMyAdmin fixes the following issue: - boo#1032105: The AllowNoPassword configuration option may have been bypassed when running on PHP5, allowing the login of users who have no password set even with AllowNoPassword set to false (PMASA-2017-8) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-470=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-470=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): phpMyAdmin-4.4.15.10-33.6.1 - openSUSE Leap 42.1 (noarch): phpMyAdmin-4.4.15.10-37.1 References: https://bugzilla.suse.com/1032105

1 0

openSUSE-RU-2017:1002-1: moderate: Recommended update for libtorrent-rasterbar
by maintenance＠opensuse.org 13 Apr '17

13 Apr '17

openSUSE Recommended Update: Recommended update for libtorrent-rasterbar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1002-1 Rating: moderate References: #1031510 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libtorrent-rasterbar fixes the following issues: * Unhandled error related to timestamp fields in Python bindings (boo#1031510). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-469=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libtorrent-rasterbar-debugsource-1.1.2-7.3.2 libtorrent-rasterbar-devel-1.1.2-7.3.2 libtorrent-rasterbar-doc-1.1.2-7.3.2 libtorrent-rasterbar9-1.1.2-7.3.2 libtorrent-rasterbar9-debuginfo-1.1.2-7.3.2 python-libtorrent-rasterbar-1.1.2-7.3.2 python-libtorrent-rasterbar-debuginfo-1.1.2-7.3.2 References: https://bugzilla.suse.com/1031510

1 0

openSUSE-RU-2017:1001-1: Recommended update for python-xattr, python3-xattr
by maintenance＠opensuse.org 13 Apr '17

13 Apr '17

openSUSE Recommended Update: Recommended update for python-xattr, python3-xattr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1001-1 Rating: low References: #1033325 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-xattr and python3-xattr provides the following fix: - Fix file conflict between python3-xattr and python-xattr (bsc#1033325) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-466=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-466=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): python-xattr-0.7.5-5.3.1 python-xattr-debuginfo-0.7.5-5.3.1 python-xattr-debugsource-0.7.5-5.3.1 python3-xattr-0.7.8-4.3.1 python3-xattr-debuginfo-0.7.8-4.3.1 python3-xattr-debugsource-0.7.8-4.3.1 - openSUSE Leap 42.1 (i586 x86_64): python-xattr-0.7.5-5.1 python-xattr-debuginfo-0.7.5-5.1 python-xattr-debugsource-0.7.5-5.1 References: https://bugzilla.suse.com/1033325

1 0

openSUSE-SU-2017:0994-1: moderate: Security update for gimp
by opensuse-security＠opensuse.org 12 Apr '17

12 Apr '17

openSUSE Security Update: Security update for gimp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0994-1 Rating: moderate References: #1025717 #1032241 Cross-References: CVE-2007-3126 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for gimp fixes the following issues: This security issue was fixed: - CVE-2007-3126: Context-dependent attackers were able to cause a denial of service via an ICO file with an InfoHeader containing a Height of zero (bsc#1032241). These non-security issues were fixed: - bsc#1025717: Prefer lcms2 over lcms1 if both are available - bgo#593576: Preven crash in PDF Import filter when importing large image PDF or specifying high resolution Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-462=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gimp-2.8.18-2.3.1 gimp-debuginfo-2.8.18-2.3.1 gimp-debugsource-2.8.18-2.3.1 gimp-devel-2.8.18-2.3.1 gimp-devel-debuginfo-2.8.18-2.3.1 gimp-help-browser-2.8.18-2.3.1 gimp-help-browser-debuginfo-2.8.18-2.3.1 gimp-plugin-aa-2.8.18-2.3.1 gimp-plugin-aa-debuginfo-2.8.18-2.3.1 gimp-plugins-python-2.8.18-2.3.1 gimp-plugins-python-debuginfo-2.8.18-2.3.1 libgimp-2_0-0-2.8.18-2.3.1 libgimp-2_0-0-debuginfo-2.8.18-2.3.1 libgimpui-2_0-0-2.8.18-2.3.1 libgimpui-2_0-0-debuginfo-2.8.18-2.3.1 - openSUSE Leap 42.2 (x86_64): libgimp-2_0-0-32bit-2.8.18-2.3.1 libgimp-2_0-0-debuginfo-32bit-2.8.18-2.3.1 libgimpui-2_0-0-32bit-2.8.18-2.3.1 libgimpui-2_0-0-debuginfo-32bit-2.8.18-2.3.1 - openSUSE Leap 42.2 (noarch): gimp-lang-2.8.18-2.3.1 References: https://www.suse.com/security/cve/CVE-2007-3126.html https://bugzilla.suse.com/1025717 https://bugzilla.suse.com/1032241

1 0

openSUSE-RU-2017:0991-1: Recommended update for clamav-database
by maintenance＠opensuse.org 12 Apr '17

12 Apr '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0991-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh April 10th 2017. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-460=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-460=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201704100005-54.12.1 - openSUSE Leap 42.1 (noarch): clamav-database-201704100005-243.1 References:

1 0

openSUSE-RU-2017:0989-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 12 Apr '17

12 Apr '17

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0989-1 Rating: moderate References: #1024671 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for virtualbox fixes the following issues: - Add VNC Extension Pack to VirtualBox. (boo#1024671) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-465=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): python-virtualbox-5.1.18-19.5.1 python-virtualbox-debuginfo-5.1.18-19.5.1 virtualbox-5.1.18-19.5.1 virtualbox-debuginfo-5.1.18-19.5.1 virtualbox-debugsource-5.1.18-19.5.1 virtualbox-devel-5.1.18-19.5.1 virtualbox-guest-kmp-default-5.1.18_k4.4.57_18.3-19.5.1 virtualbox-guest-kmp-default-debuginfo-5.1.18_k4.4.57_18.3-19.5.1 virtualbox-guest-tools-5.1.18-19.5.1 virtualbox-guest-tools-debuginfo-5.1.18-19.5.1 virtualbox-guest-x11-5.1.18-19.5.1 virtualbox-guest-x11-debuginfo-5.1.18-19.5.1 virtualbox-host-kmp-default-5.1.18_k4.4.57_18.3-19.5.1 virtualbox-host-kmp-default-debuginfo-5.1.18_k4.4.57_18.3-19.5.1 virtualbox-qt-5.1.18-19.5.1 virtualbox-qt-debuginfo-5.1.18-19.5.1 virtualbox-websrv-5.1.18-19.5.1 virtualbox-websrv-debuginfo-5.1.18-19.5.1 - openSUSE Leap 42.2 (noarch): virtualbox-guest-desktop-icons-5.1.18-19.5.1 virtualbox-host-source-5.1.18-19.5.1 References: https://bugzilla.suse.com/1024671

1 0

openSUSE-SU-2017:0988-1: Security update for lxc
by opensuse-security＠opensuse.org 12 Apr '17

12 Apr '17

openSUSE Security Update: Security update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0988-1 Rating: low References: #1028264 Cross-References: CVE-2017-5985 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lxc fixes the following issues: This security issue was fixed: CVE-2017-5985: lxc-user-nic allowed access to network namespace over which the caller did not hold privilege (boo#1028264). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-463=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): lxc-1.1.5-15.3.1 lxc-debuginfo-1.1.5-15.3.1 lxc-debugsource-1.1.5-15.3.1 lxc-devel-1.1.5-15.3.1 References: https://www.suse.com/security/cve/CVE-2017-5985.html https://bugzilla.suse.com/1028264

1 0