April 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2017:1063-1: important: Security update for bind
by opensuse-security＠opensuse.org 19 Apr '17

19 Apr '17

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1063-1 Rating: important References: #1020983 #1033466 #1033467 #1033468 #987866 #989528 Cross-References: CVE-2016-2775 CVE-2016-6170 CVE-2017-3136 CVE-2017-3137 CVE-2017-3138 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has one errata is now available. Description: This update for bind fixes the following issues: CVE-2017-3137 (bsc#1033467): Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could have been exploited to cause a denial of service of a bind server performing recursion. CVE-2017-3136 (bsc#1033466): An attacker could have constructed a query that would cause a denial of service of servers configured to use DNS64. CVE-2017-3138 (bsc#1033468): An attacker with access to the BIND control channel could have caused the server to stop by triggering an assertion failure. CVE-2016-6170 (bsc#987866): Primary DNS servers could have caused a denial of service of secondary DNS servers via a large AXFR response. IXFR servers could have caused a denial of service of IXFR clients via a large IXFR response. Remote authenticated users could have caused a denial of service of primary DNS servers via a large UPDATE message. CVE-2016-2775 (bsc#989528): When lwresd or the named lwres option were enabled, bind allowed remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol. One additional non-security bug was fixed: The default umask was changed to 077. (bsc#1020983) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-491=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-491=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): bind-9.9.9P1-48.3.1 bind-chrootenv-9.9.9P1-48.3.1 bind-debuginfo-9.9.9P1-48.3.1 bind-debugsource-9.9.9P1-48.3.1 bind-devel-9.9.9P1-48.3.1 bind-libs-9.9.9P1-48.3.1 bind-libs-debuginfo-9.9.9P1-48.3.1 bind-lwresd-9.9.9P1-48.3.1 bind-lwresd-debuginfo-9.9.9P1-48.3.1 bind-utils-9.9.9P1-48.3.1 bind-utils-debuginfo-9.9.9P1-48.3.1 - openSUSE Leap 42.2 (x86_64): bind-libs-32bit-9.9.9P1-48.3.1 bind-libs-debuginfo-32bit-9.9.9P1-48.3.1 - openSUSE Leap 42.2 (noarch): bind-doc-9.9.9P1-48.3.1 - openSUSE Leap 42.1 (i586 x86_64): bind-9.9.9P1-51.1 bind-chrootenv-9.9.9P1-51.1 bind-debuginfo-9.9.9P1-51.1 bind-debugsource-9.9.9P1-51.1 bind-devel-9.9.9P1-51.1 bind-libs-9.9.9P1-51.1 bind-libs-debuginfo-9.9.9P1-51.1 bind-lwresd-9.9.9P1-51.1 bind-lwresd-debuginfo-9.9.9P1-51.1 bind-utils-9.9.9P1-51.1 bind-utils-debuginfo-9.9.9P1-51.1 - openSUSE Leap 42.1 (noarch): bind-doc-9.9.9P1-51.1 - openSUSE Leap 42.1 (x86_64): bind-libs-32bit-9.9.9P1-51.1 bind-libs-debuginfo-32bit-9.9.9P1-51.1 References: https://www.suse.com/security/cve/CVE-2016-2775.html https://www.suse.com/security/cve/CVE-2016-6170.html https://www.suse.com/security/cve/CVE-2017-3136.html https://www.suse.com/security/cve/CVE-2017-3137.html https://www.suse.com/security/cve/CVE-2017-3138.html https://bugzilla.suse.com/1020983 https://bugzilla.suse.com/1033466 https://bugzilla.suse.com/1033467 https://bugzilla.suse.com/1033468 https://bugzilla.suse.com/987866 https://bugzilla.suse.com/989528

1 0

openSUSE-RU-2017:1054-1: Recommended update for clamav-database
by maintenance＠opensuse.org 19 Apr '17

19 Apr '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1054-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh April 16th 2017. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-489=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-489=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201704170005-54.15.1 - openSUSE Leap 42.1 (noarch): clamav-database-201704170005-246.1 References:

1 0

openSUSE-RU-2017:1053-1: Recommended update for harfbuzz
by maintenance＠opensuse.org 18 Apr '17

18 Apr '17

openSUSE Recommended Update: Recommended update for harfbuzz ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1053-1 Rating: low References: #1030465 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Harfbuzz was updated to version 1.4.5, which brings several fixes and enhancements: - Fix buffer-overrun in Bengali. - Route Adlam script to Arabic shaper. - Implement OpenType Font Variation tables avar/fvar/HVAR/VVAR. - hb-shape and hb-view now accept --variations. - Always build and use UCDN for Unicode data by default. - Add core of support for OpenType 1.8 Font Variations. - New APIs: - hb_font_set_face(). - hb_font_set_var_coords_normalized(). - HB_OT_LAYOUT_NO_VARIATIONS_INDEX. - hb_ot_layout_table_find_feature_variations(). - hb_ot_layout_feature_with_variations_get_lookups(). - hb_shape_plan_create2(). - hb_shape_plan_create_cached2(). - Deprecate API: hb_graphite2_font_get_gr_font(). - Fix regression in GDEF glyph class processing. - Add decompositions for Chakma, Limbu, and Balinese in USE shaper. - Fix vertical glyph origin in hb-ot-font. - Implement CBDT/CBLC color font glyph extents in hb-ot-font. - Implement parsing of OpenType MATH table. - Blacklist bad GDEF of more fonts. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-487=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): harfbuzz-debugsource-1.4.5-5.3.1 harfbuzz-devel-1.4.5-5.3.1 harfbuzz-tools-1.4.5-5.3.1 harfbuzz-tools-debuginfo-1.4.5-5.3.1 libharfbuzz-icu0-1.4.5-5.3.1 libharfbuzz-icu0-debuginfo-1.4.5-5.3.1 libharfbuzz0-1.4.5-5.3.1 libharfbuzz0-debuginfo-1.4.5-5.3.1 - openSUSE Leap 42.2 (x86_64): libharfbuzz-icu0-32bit-1.4.5-5.3.1 libharfbuzz-icu0-debuginfo-32bit-1.4.5-5.3.1 libharfbuzz0-32bit-1.4.5-5.3.1 libharfbuzz0-debuginfo-32bit-1.4.5-5.3.1 References: https://bugzilla.suse.com/1030465

1 0

openSUSE-RU-2017:1051-1: Recommended update for librdmacm
by maintenance＠opensuse.org 18 Apr '17

18 Apr '17

openSUSE Recommended Update: Recommended update for librdmacm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1051-1 Rating: low References: #1010030 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for librdmacm fixes the following issues: - Add dependency from librdmacm-devel-32bit to librdmacm1-32bit. (boo#1010030) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-485=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): librdmacm-debugsource-1.0.19.1-4.3.1 librdmacm-devel-1.0.19.1-4.3.1 librdmacm-tools-1.0.19.1-4.3.1 librdmacm-tools-debuginfo-1.0.19.1-4.3.1 librdmacm1-1.0.19.1-4.3.1 librdmacm1-debuginfo-1.0.19.1-4.3.1 - openSUSE Leap 42.2 (x86_64): librdmacm-devel-32bit-1.0.19.1-4.3.1 librdmacm1-32bit-1.0.19.1-4.3.1 librdmacm1-debuginfo-32bit-1.0.19.1-4.3.1 References: https://bugzilla.suse.com/1010030

1 0

openSUSE-RU-2017:1050-1: Recommended update for spec-cleaner
by maintenance＠opensuse.org 18 Apr '17

18 Apr '17

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1050-1 Rating: low References: #1033189 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Spec-cleaner was updated to version 0.9.4, which brings several fixes: - Fixes in the dep_parser. - Vertical whitespace is now safeguarded. - More excludes_bracketing. - Update list of known licenses. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-486=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-486=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): spec-cleaner-0.9.4-31.3.1 spec-cleaner-format_spec_file-0.9.4-31.3.1 - openSUSE Leap 42.1 (noarch): spec-cleaner-0.9.4-32.1 spec-cleaner-format_spec_file-0.9.4-32.1 References: https://bugzilla.suse.com/1033189

1 0

openSUSE-RU-2017:1049-1: Recommended update for NetworkManager
by maintenance＠opensuse.org 18 Apr '17

18 Apr '17

openSUSE Recommended Update: Recommended update for NetworkManager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1049-1 Rating: low References: #1009717 #1021665 #960153 #966232 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for NetworkManager provides the following fixes: - Fix NetworkManager crashes when editing the same Wifi the second time in Gnome's Control Center. (bsc#1009717) - Don't ask for new PSK for locally-generated WLAN_REASON_DISASSOC_DUE_TO_INACTIVITY error. (bsc#966232) - Don't overwrite /etc/resolv.conf. (bsc#960153, bsc#1021665) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-488=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): NetworkManager-1.0.12-4.3.1 NetworkManager-debuginfo-1.0.12-4.3.1 NetworkManager-debugsource-1.0.12-4.3.1 NetworkManager-devel-1.0.12-4.3.1 libnm-glib-vpn1-1.0.12-4.3.1 libnm-glib-vpn1-debuginfo-1.0.12-4.3.1 libnm-glib4-1.0.12-4.3.1 libnm-glib4-debuginfo-1.0.12-4.3.1 libnm-util2-1.0.12-4.3.1 libnm-util2-debuginfo-1.0.12-4.3.1 libnm0-1.0.12-4.3.1 libnm0-debuginfo-1.0.12-4.3.1 typelib-1_0-NM-1_0-1.0.12-4.3.1 typelib-1_0-NMClient-1_0-1.0.12-4.3.1 typelib-1_0-NetworkManager-1_0-1.0.12-4.3.1 - openSUSE Leap 42.2 (noarch): NetworkManager-branding-upstream-1.0.12-4.3.1 NetworkManager-lang-1.0.12-4.3.1 - openSUSE Leap 42.2 (x86_64): NetworkManager-devel-32bit-1.0.12-4.3.1 libnm-glib-vpn1-32bit-1.0.12-4.3.1 libnm-glib-vpn1-debuginfo-32bit-1.0.12-4.3.1 libnm-glib4-32bit-1.0.12-4.3.1 libnm-glib4-debuginfo-32bit-1.0.12-4.3.1 libnm-util2-32bit-1.0.12-4.3.1 libnm-util2-debuginfo-32bit-1.0.12-4.3.1 References: https://bugzilla.suse.com/1009717 https://bugzilla.suse.com/1021665 https://bugzilla.suse.com/960153 https://bugzilla.suse.com/966232

1 0

openSUSE-OU-2017:1046-1: moderate: Add firewalld to the SUSE Package Hub
by maintenance＠opensuse.org 18 Apr '17

18 Apr '17

openSUSE Optional Update: Add firewalld to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:1046-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update makes firewalld available in the SUSE Package Hub. - firewalld is a firewall daemon with D-Bus interface providing a dynamic firewall. - susefirewall2-to-firewalld is a basic SuSEfirewall2 to FirewallD migration script. The following package was added as a dependency: - python-slip contains miscellaneous convenience, extension and workaround code for Python. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-484=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): firewall-applet-0.4.3.3-2.1 firewall-config-0.4.3.3-2.1 firewalld-0.4.3.3-2.1 firewalld-lang-0.4.3.3-2.1 python-slip-0.6.4-2.1 python-slip-dbus-0.6.4-2.1 python-slip-gtk-0.6.4-2.1 susefirewall2-to-firewalld-0.0.1-2.1 References:

1 0

openSUSE-RU-2017:1045-1: moderate: Recommended update for go
by maintenance＠opensuse.org 18 Apr '17

18 Apr '17

openSUSE Recommended Update: Recommended update for go ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1045-1 Rating: moderate References: #1028865 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update makes go available on the s390x plaform. The following changes are included: - bsc#1028865: Ensure Docker and k8s can run properly on NUMA machines Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-483=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (ppc64le s390x x86_64): go-1.7.0-2.1 go-debuginfo-1.7.0-2.1 go-debugsource-1.7.0-2.1 go-doc-1.7.0-2.1 References: https://bugzilla.suse.com/1028865

1 0

openSUSE-SU-2017:1038-1: Security update for audiofile
by opensuse-security＠opensuse.org 18 Apr '17

18 Apr '17

openSUSE Security Update: Security update for audiofile ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1038-1 Rating: low References: #1026978 #1026979 #1026980 #1026981 #1026982 #1026983 #1026984 #1026985 #1026986 #1026987 #1026988 Cross-References: CVE-2017-6827 CVE-2017-6828 CVE-2017-6829 CVE-2017-6830 CVE-2017-6831 CVE-2017-6832 CVE-2017-6833 CVE-2017-6834 CVE-2017-6835 CVE-2017-6836 CVE-2017-6837 CVE-2017-6838 CVE-2017-6839 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This audiofile update fixes the following issue: Security issues fixed: - CVE-2017-6827: heap-based buffer overflow in MSADPCM::initializeCoefficients (MSADPCM.cpp) (bsc#1026979) - CVE-2017-6828: heap-based buffer overflow in readValue (FileHandle.cpp) (bsc#1026980) - CVE-2017-6829: global buffer overflow in decodeSample (IMA.cpp) (bsc#1026981) - CVE-2017-6830: heap-based buffer overflow in alaw2linear_buf (G711.cpp) (bsc#1026982) - CVE-2017-6831: heap-based buffer overflow in IMA::decodeBlockWAVE (IMA.cpp) (bsc#1026983) - CVE-2017-6832: heap-based buffer overflow in MSADPCM::decodeBlock (MSADPCM.cpp) (bsc#1026984) - CVE-2017-6833: divide-by-zero in BlockCodec::runPull (BlockCodec.cpp) (bsc#1026985) - CVE-2017-6834: heap-based buffer overflow in ulaw2linear_buf (G711.cpp) (bsc#1026986) - CVE-2017-6835: divide-by-zero in BlockCodec::reset1 (BlockCodec.cpp) (bsc#1026988) - CVE-2017-6836: heap-based buffer overflow in Expand3To4Module::run (SimpleModule.h) (bsc#1026987) - CVE-2017-6837, CVE-2017-6838, CVE-2017-6839: multiple ubsan crashes (bsc#1026978) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-476=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-476=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): audiofile-0.3.6-10.3.1 audiofile-debuginfo-0.3.6-10.3.1 audiofile-debugsource-0.3.6-10.3.1 audiofile-devel-0.3.6-10.3.1 audiofile-doc-0.3.6-10.3.1 libaudiofile1-0.3.6-10.3.1 libaudiofile1-debuginfo-0.3.6-10.3.1 - openSUSE Leap 42.2 (x86_64): audiofile-devel-32bit-0.3.6-10.3.1 libaudiofile1-32bit-0.3.6-10.3.1 libaudiofile1-debuginfo-32bit-0.3.6-10.3.1 - openSUSE Leap 42.1 (i586 x86_64): audiofile-0.3.6-12.1 audiofile-debuginfo-0.3.6-12.1 audiofile-debugsource-0.3.6-12.1 audiofile-devel-0.3.6-12.1 audiofile-doc-0.3.6-12.1 libaudiofile1-0.3.6-12.1 libaudiofile1-debuginfo-0.3.6-12.1 - openSUSE Leap 42.1 (x86_64): audiofile-devel-32bit-0.3.6-12.1 libaudiofile1-32bit-0.3.6-12.1 libaudiofile1-debuginfo-32bit-0.3.6-12.1 References: https://www.suse.com/security/cve/CVE-2017-6827.html https://www.suse.com/security/cve/CVE-2017-6828.html https://www.suse.com/security/cve/CVE-2017-6829.html https://www.suse.com/security/cve/CVE-2017-6830.html https://www.suse.com/security/cve/CVE-2017-6831.html https://www.suse.com/security/cve/CVE-2017-6832.html https://www.suse.com/security/cve/CVE-2017-6833.html https://www.suse.com/security/cve/CVE-2017-6834.html https://www.suse.com/security/cve/CVE-2017-6835.html https://www.suse.com/security/cve/CVE-2017-6836.html https://www.suse.com/security/cve/CVE-2017-6837.html https://www.suse.com/security/cve/CVE-2017-6838.html https://www.suse.com/security/cve/CVE-2017-6839.html https://bugzilla.suse.com/1026978 https://bugzilla.suse.com/1026979 https://bugzilla.suse.com/1026980 https://bugzilla.suse.com/1026981 https://bugzilla.suse.com/1026982 https://bugzilla.suse.com/1026983 https://bugzilla.suse.com/1026984 https://bugzilla.suse.com/1026985 https://bugzilla.suse.com/1026986 https://bugzilla.suse.com/1026987 https://bugzilla.suse.com/1026988

1 0

openSUSE-SU-2017:1037-1: moderate: Security update for libpng15
by opensuse-security＠opensuse.org 18 Apr '17

18 Apr '17

openSUSE Security Update: Security update for libpng15 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1037-1 Rating: moderate References: #1017646 #958791 Cross-References: CVE-2015-8540 CVE-2016-10087 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libpng15 fixes the following issues: Security issues fixed: - CVE-2015-8540: read underflow in libpng (bsc#958791) - CVE-2016-10087: NULL pointer dereference in png_set_text_2() (bsc#1017646) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-477=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-477=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libpng15-15-1.5.22-5.3.1 libpng15-15-debuginfo-1.5.22-5.3.1 libpng15-debugsource-1.5.22-5.3.1 - openSUSE Leap 42.2 (x86_64): libpng15-15-32bit-1.5.22-5.3.1 libpng15-15-debuginfo-32bit-1.5.22-5.3.1 - openSUSE Leap 42.1 (i586 x86_64): libpng15-15-1.5.22-7.1 libpng15-15-debuginfo-1.5.22-7.1 libpng15-debugsource-1.5.22-7.1 - openSUSE Leap 42.1 (x86_64): libpng15-15-32bit-1.5.22-7.1 libpng15-15-debuginfo-32bit-1.5.22-7.1 References: https://www.suse.com/security/cve/CVE-2015-8540.html https://www.suse.com/security/cve/CVE-2016-10087.html https://bugzilla.suse.com/1017646 https://bugzilla.suse.com/958791

1 0