April 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:1077-1: Recommended update for shim
by maintenance＠opensuse.org 20 Apr '17

20 Apr '17

openSUSE Recommended Update: Recommended update for shim ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1077-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for shim fixes the following issues: - Adds the option --suse-enable-tpm for the install process. (fate#315831) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-498=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): shim-0.9-15.3.1 shim-debuginfo-0.9-15.3.1 shim-debugsource-0.9-15.3.1 References:

1 0

openSUSE-SU-2017:1076-1: Security update for gstreamer-plugins-good
by opensuse-security＠opensuse.org 20 Apr '17

20 Apr '17

openSUSE Security Update: Security update for gstreamer-plugins-good ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1076-1 Rating: low References: #1024014 #1024017 #1024030 #1024034 #1024062 Cross-References: CVE-2016-10198 CVE-2016-10199 CVE-2017-5840 CVE-2017-5841 CVE-2017-5845 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for gstreamer-plugins-good fixes the following issues: - A crafted aac audio file could have caused an invalid read and thus corruption or denial of service (bsc#1024014, CVE-2016-10198) - A crafted mp4 file could have caused an invalid read and thus corruption or denial of service (bsc#1024017, CVE-2016-10199) - A crafted avi file could have caused an invalid read and thus corruption or denial of service (bsc#1024034, CVE-2017-5840) - A crafted AVI file with metadata tag entries (ncdt) could have caused invalid read access and thus corruption or denial of service (bsc#1024030, CVE-2017-5841) - A crafted avi file could have caused an invalid read access resulting in denial of service (bsc#1024062, CVE-2017-5845) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-495=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gstreamer-plugins-good-1.4.5-8.1 gstreamer-plugins-good-debuginfo-1.4.5-8.1 gstreamer-plugins-good-debugsource-1.4.5-8.1 gstreamer-plugins-good-doc-1.4.5-8.1 gstreamer-plugins-good-extra-1.4.5-8.1 gstreamer-plugins-good-extra-debuginfo-1.4.5-8.1 - openSUSE Leap 42.1 (x86_64): gstreamer-plugins-good-32bit-1.4.5-8.1 gstreamer-plugins-good-debuginfo-32bit-1.4.5-8.1 gstreamer-plugins-good-extra-32bit-1.4.5-8.1 gstreamer-plugins-good-extra-debuginfo-32bit-1.4.5-8.1 - openSUSE Leap 42.1 (noarch): gstreamer-plugins-good-lang-1.4.5-8.1 References: https://www.suse.com/security/cve/CVE-2016-10198.html https://www.suse.com/security/cve/CVE-2016-10199.html https://www.suse.com/security/cve/CVE-2017-5840.html https://www.suse.com/security/cve/CVE-2017-5841.html https://www.suse.com/security/cve/CVE-2017-5845.html https://bugzilla.suse.com/1024014 https://bugzilla.suse.com/1024017 https://bugzilla.suse.com/1024030 https://bugzilla.suse.com/1024034 https://bugzilla.suse.com/1024062

1 0

openSUSE-RU-2017:1075-1: Recommended update for gnome-settings-daemon
by maintenance＠opensuse.org 20 Apr '17

20 Apr '17

openSUSE Recommended Update: Recommended update for gnome-settings-daemon ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1075-1 Rating: low References: #1004343 #1005495 #1009515 #979257 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for gnome-settings-daemon fixes the following issues: - Fix 'Shutdown dialog delay 1 to 2 seconds'. (bsc#979257, bgo#774452) - Fix updates notification not popping up. (bsc#1004343) - Fix notification after an offline update was done. (bsc#1005495) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-500=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gnome-settings-daemon-3.20.1-9.3.1 gnome-settings-daemon-debuginfo-3.20.1-9.3.1 gnome-settings-daemon-debugsource-3.20.1-9.3.1 gnome-settings-daemon-devel-3.20.1-9.3.1 - openSUSE Leap 42.2 (noarch): gnome-settings-daemon-lang-3.20.1-9.3.1 References: https://bugzilla.suse.com/1004343 https://bugzilla.suse.com/1005495 https://bugzilla.suse.com/1009515 https://bugzilla.suse.com/979257

1 0

openSUSE-RU-2017:1074-1: Recommended update for python-enum34
by maintenance＠opensuse.org 20 Apr '17

20 Apr '17

openSUSE Recommended Update: Recommended update for python-enum34 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1074-1 Rating: low References: #1014478 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides python-enum34 1.1.3, which brings fixes for minor issues and some enhancements. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-496=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-496=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): python-enum34-1.1.3-4.3.1 - openSUSE Leap 42.1 (noarch): python-enum34-1.1.3-4.1 References: https://bugzilla.suse.com/1014478

1 0

openSUSE-RU-2017:1073-1: Recommended update for libmtp
by maintenance＠opensuse.org 20 Apr '17

20 Apr '17

openSUSE Recommended Update: Recommended update for libmtp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1073-1 Rating: low References: #1033830 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides version 1.1.13 of libmtp and brings various fixes and improvements: - Lots of new USB ID updates. - getpartialobject64 fixed for non x86_64. - Some too strict bugflags removed for Galaxy S and Motorola G2. - Async event function. - Small USB 3 bugfix. - libmtp.keyring: Temporary add my older key, as I mistakenly used that to sign the tarball. - Split udev rules to separate package - Various bugfixes. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-497=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-497=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libmtp-debugsource-1.1.13-2.3.1 libmtp-devel-1.1.13-2.3.1 libmtp-udev-1.1.13-2.3.1 libmtp-udev-debuginfo-1.1.13-2.3.1 libmtp9-1.1.13-2.3.1 libmtp9-debuginfo-1.1.13-2.3.1 mtp-tools-1.1.13-2.3.1 mtp-tools-debuginfo-1.1.13-2.3.1 - openSUSE Leap 42.1 (i586 x86_64): libmtp-debugsource-1.1.13-6.1 libmtp-devel-1.1.13-6.1 libmtp-udev-1.1.13-6.1 libmtp-udev-debuginfo-1.1.13-6.1 libmtp9-1.1.13-6.1 libmtp9-debuginfo-1.1.13-6.1 mtp-tools-1.1.13-6.1 mtp-tools-debuginfo-1.1.13-6.1 References: https://bugzilla.suse.com/1033830

1 0

openSUSE-RU-2017:1072-1: moderate: Recommended update for yast2-fonts
by maintenance＠opensuse.org 20 Apr '17

20 Apr '17

openSUSE Recommended Update: Recommended update for yast2-fonts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1072-1 Rating: moderate References: #1006510 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-fonts fixes the following issues: - Fix regression introduced in 3.1.17: installed families table was not filled correctly. - Add UTF-8 encoding to ruby string. (boo#1006510) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-493=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): yast2-fonts-3.1.18-5.4.1 yast2-fonts-debuginfo-3.1.18-5.4.1 yast2-fonts-debugsource-3.1.18-5.4.1 References: https://bugzilla.suse.com/1006510

1 0

openSUSE-RU-2017:1071-1: moderate: Recommended update for libgphoto2
by maintenance＠opensuse.org 20 Apr '17

20 Apr '17

openSUSE Recommended Update: Recommended update for libgphoto2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1071-1 Rating: moderate References: #1033790 #982339 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The digital camera access library libgphoto2 was updated to 2.5.13 to bring features and bugfixes. - require: udev in the library package for the hwdb refresher. (boo#982339) - pentax: - Now using the pktriggercord codebase. - Lots of improvements. - Please report missing Pentax K USB ids that are supported by pktriggercord! - ptp2: - iPhone iOS 10.2 storage handling fixed, added dynamic storage handling. (boo#1033790) - Canon: EOS capture improvements, also supporting new EOS. - Canon EOS M series capture enabled. (might not fully work yet) - Canon EOS: Fixed a timeout bug on wait_event. - Canon EOS: Report protection status correctly. - Canon EOS: Unlock the ui on close. - Canon EOS: More fixes for Canon EOS 5D Mark IV and Canon EOS 80D. - Canon EOS: Handle "no focus" during capture. - Canon EOS: Handle --new correctly. - Canon Powershot: Handle lack of object protection setting. - Canon: Re-add old Canon IXUS 30. - Sony Alpha Live View support. - Sony: Tethering and trigger capture implemented, capture stability improvements. - Sony: Exposure compensation setting fixed. - Sony: Capture and autofocus configurations, similar to eosremoterelease. - Sony: Bulb mode support (in manual mode, shutterspeed and bulb option). - Nikon: Fixed problem with SDRAM capture. - Nikon: "autofocus" config variable for global autofocus enable/disable (default on, default liveview off). - Nikon 1: Fixed Nikon 1 capture. - Nikon J5 support. Nikon now hides prop and opcodes even differently. - ptpip: Allow different event ports. --port ptpip:IP:dataport:eventport - Allow generic opcode commands with parameters, config variable "opcode". - Fixed pretending that Nikon Coolpix S series is a Nikon 1 S. - Ricoh Theta: Support shutterspeed configuration. - Added size checking to PTP unpacking primitives. - PTP/IP: Fixes to support Ricoh Theta and Sony Alpha over WLAN better. - Unification of timeout with backoff handling. - Hook up PTP OpenCapture opcode. - Parrot Sequoia support and property decoding. - Generic: Fixed serialnumber retrieval. - Various bugs fixed, stability improved. - Various crashes and endless loops fixed that were found by the AFL fuzzer. - Various bugfixes in Nikon, Canon capture. - New USB IDs: - Sony: SLT A37, DSC-RX100M5, Alpha 7, DSC-RX100M4, NEX-7, DSC-HX20V, Alpha 6300, A7S II, A7, A7S II, ILCE 7M2, SLT A77V, A7R2, HDR-PJ260VE - Nikon KeyMission 360 - Nikon Coolpix AW130, L840, S3600, AW110, S6300, S6800, S3700, S2900 - Nikon DSC D3400, Df, D7200, D5, D810A, 1 V3, D5500 - Nikon 1 S2, J5 - Canon PowerShot G16, Digital IXUS 180, IXUS 160 - Canon EOS M5, EOS 1Dx Mark 3, 80D, 5D Mark IV, EOS 1D C, 750D, 760D, 5Ds, 5Ds R - Fuji Fujifilm XT-2, X-T1, X-T10, A-610 - Parrot Sequoia - GoPro Hero 5 Black, Hero, Hero4 Silver, Hero +, Hero 4 - Kodak Z990 - Leica SL - Olympus TG-620, E-M5 Mark 2 - Ricoh Theta m15 (USB and WLAN) - various music players / android phones imported from libmtp - canon: - Fixed zoom on some older Canon Powershots. - libgphoto2: - Speed up initial startup. - gp_widget_changed() no longer clears the "changed" state to make this API more consistent. Use gp_widget_set_changed(widget,FALSE) to do so. - Added gp_camera_list_config, gp_camera_get_single_config, gp_camera_set_single_config additional configuration APIs for faster access to single configuration values. - libgphoto2_port/vusb: - Implemented a virtual PTP camera for test purposes. - libgphoto2_port/disk: - Support exfat fuse filesystems. - all: - Fixed various issues found by Coverity static analyzer. - translations: - updated polish, ukrainian, vietnamese, danish, french, svensk, swedish, finnish, russian, brazilian, serbian, dutch, chinese, portuguese, italian - examples: - sample-photobooth: A sample program handling tethering, SIGUSR1 driven capture and SIGUSR2 based configuration reading. - sample-afl: Code to inject afl fuzzing data. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-494=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-494=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libgphoto2-6-2.5.13-2.3.1 libgphoto2-6-debuginfo-2.5.13-2.3.1 libgphoto2-debugsource-2.5.13-2.3.1 libgphoto2-devel-2.5.13-2.3.1 libgphoto2-devel-doc-2.5.13-2.3.1 libgphoto2-doc-2.5.13-2.3.1 - openSUSE Leap 42.2 (noarch): libgphoto2-6-lang-2.5.13-2.3.1 - openSUSE Leap 42.2 (x86_64): libgphoto2-6-32bit-2.5.13-2.3.1 libgphoto2-6-debuginfo-32bit-2.5.13-2.3.1 libgphoto2-devel-32bit-2.5.13-2.3.1 - openSUSE Leap 42.1 (i586 x86_64): libgphoto2-6-2.5.13-7.1 libgphoto2-6-debuginfo-2.5.13-7.1 libgphoto2-debugsource-2.5.13-7.1 libgphoto2-devel-2.5.13-7.1 libgphoto2-devel-doc-2.5.13-7.1 libgphoto2-doc-2.5.13-7.1 - openSUSE Leap 42.1 (noarch): libgphoto2-6-lang-2.5.13-7.1 - openSUSE Leap 42.1 (x86_64): libgphoto2-6-32bit-2.5.13-7.1 libgphoto2-6-debuginfo-32bit-2.5.13-7.1 libgphoto2-devel-32bit-2.5.13-7.1 References: https://bugzilla.suse.com/1033790 https://bugzilla.suse.com/982339

1 0

openSUSE-RU-2017:1069-1: Recommended update for ovmf
by maintenance＠opensuse.org 20 Apr '17

20 Apr '17

openSUSE Recommended Update: Recommended update for ovmf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1069-1 Rating: low References: #1030565 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ovmf provides the following fixes: - Update bundled OpenSSL to version 1.0.2k. (bsc#1030565) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-499=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ovmf-2015+git1462940744.321151f-12.3.1 ovmf-tools-2015+git1462940744.321151f-12.3.1 - openSUSE Leap 42.2 (x86_64): qemu-ovmf-x86_64-debug-2015+git1462940744.321151f-12.3.1 - openSUSE Leap 42.2 (noarch): qemu-ovmf-ia32-2015+git1462940744.321151f-12.3.1 qemu-ovmf-x86_64-2015+git1462940744.321151f-12.3.1 References: https://bugzilla.suse.com/1030565

1 0

openSUSE-RU-2017:1068-1: important: Recommended update for cpio
by maintenance＠opensuse.org 20 Apr '17

20 Apr '17

openSUSE Recommended Update: Recommended update for cpio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1068-1 Rating: important References: #1028410 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cpio fixes the following issues: - A regression caused cpio to crash for tar and ustar archive types [bsc#1028410] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-501=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-501=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): cpio-2.11-35.3.1 cpio-debuginfo-2.11-35.3.1 cpio-debugsource-2.11-35.3.1 - openSUSE Leap 42.2 (noarch): cpio-lang-2.11-35.3.1 - openSUSE Leap 42.1 (i586 x86_64): cpio-2.11-35.1 cpio-debuginfo-2.11-35.1 cpio-debugsource-2.11-35.1 - openSUSE Leap 42.1 (noarch): cpio-lang-2.11-35.1 References: https://bugzilla.suse.com/1028410

1 0

openSUSE-SU-2017:1066-1: Security update for gstreamer-plugins-good
by opensuse-security＠opensuse.org 19 Apr '17

19 Apr '17

openSUSE Security Update: Security update for gstreamer-plugins-good ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1066-1 Rating: low References: #1024014 #1024017 #1024030 #1024034 #1024062 Cross-References: CVE-2016-10198 CVE-2016-10199 CVE-2017-5840 CVE-2017-5841 CVE-2017-5845 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for gstreamer-plugins-good fixes the following issues: - A crafted aac audio file could have caused an invalid read and thus corruption or denial of service (bsc#1024014, CVE-2016-10198) - A crafted mp4 file could have caused an invalid read and thus corruption or denial of service (bsc#1024017, CVE-2016-10199) - A crafted avi file could have caused an invalid read and thus corruption or denial of service (bsc#1024034, CVE-2017-5840) - A crafted AVI file with metadata tag entries (ncdt) could have caused invalid read access and thus corruption or denial of service (bsc#1024030, CVE-2017-5841) - A crafted avi file could have caused an invalid read access resulting in denial of service (bsc#1024062, CVE-2017-5845) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-490=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gstreamer-plugins-good-1.8.3-5.3.1 gstreamer-plugins-good-debuginfo-1.8.3-5.3.1 gstreamer-plugins-good-debugsource-1.8.3-5.3.1 gstreamer-plugins-good-doc-1.8.3-5.3.1 gstreamer-plugins-good-extra-1.8.3-5.3.1 gstreamer-plugins-good-extra-debuginfo-1.8.3-5.3.1 - openSUSE Leap 42.2 (x86_64): gstreamer-plugins-good-32bit-1.8.3-5.3.1 gstreamer-plugins-good-debuginfo-32bit-1.8.3-5.3.1 gstreamer-plugins-good-extra-32bit-1.8.3-5.3.1 gstreamer-plugins-good-extra-debuginfo-32bit-1.8.3-5.3.1 - openSUSE Leap 42.2 (noarch): gstreamer-plugins-good-lang-1.8.3-5.3.1 References: https://www.suse.com/security/cve/CVE-2016-10198.html https://www.suse.com/security/cve/CVE-2016-10199.html https://www.suse.com/security/cve/CVE-2017-5840.html https://www.suse.com/security/cve/CVE-2017-5841.html https://www.suse.com/security/cve/CVE-2017-5845.html https://bugzilla.suse.com/1024014 https://bugzilla.suse.com/1024017 https://bugzilla.suse.com/1024030 https://bugzilla.suse.com/1024034 https://bugzilla.suse.com/1024062

1 0