April 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2017:1035-1: moderate: Security update for proftpd
by opensuse-security＠opensuse.org 18 Apr '17

18 Apr '17

openSUSE Security Update: Security update for proftpd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1035-1 Rating: moderate References: #1032443 Cross-References: CVE-2017-7418 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for proftpd to version 1.3.5d fixes the following issues: This security issue was fixed: - CVE-2017-7418: ProFTPD checked only the last path component when enforcing AllowChrootSymlinks. Attackers with local access could bypass the AllowChrootSymlinks control by replacing a path component (other than the last one) with a symbolic link (bsc#1032443). These non-security issues were fixed: - Reduce TLS protocols to TLSv1.1 and TLSv1.2 - Disable TLSCACertificateFile - Add TLSCertificateChainFile - All FTP logins are treated as anonymous logins again - SSH rekey during authentication could have caused issues with clients. - Recursive SCP uploads of multiple directories were not handled properly. - LIST returned different results for file, depending on path syntax. - "AuthAliasOnly on" in server config broke anonymous logins. - Fixed memory leak when mod_facl is used. - Fix systemd vs SysVinit inconsistency Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-481=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-481=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): proftpd-1.3.5d-6.3.1 proftpd-debuginfo-1.3.5d-6.3.1 proftpd-debugsource-1.3.5d-6.3.1 proftpd-devel-1.3.5d-6.3.1 proftpd-doc-1.3.5d-6.3.1 proftpd-ldap-1.3.5d-6.3.1 proftpd-ldap-debuginfo-1.3.5d-6.3.1 proftpd-mysql-1.3.5d-6.3.1 proftpd-mysql-debuginfo-1.3.5d-6.3.1 proftpd-pgsql-1.3.5d-6.3.1 proftpd-pgsql-debuginfo-1.3.5d-6.3.1 proftpd-radius-1.3.5d-6.3.1 proftpd-radius-debuginfo-1.3.5d-6.3.1 proftpd-sqlite-1.3.5d-6.3.1 proftpd-sqlite-debuginfo-1.3.5d-6.3.1 - openSUSE Leap 42.2 (noarch): proftpd-lang-1.3.5d-6.3.1 - openSUSE Leap 42.1 (i586 x86_64): proftpd-1.3.5d-7.1 proftpd-debuginfo-1.3.5d-7.1 proftpd-debugsource-1.3.5d-7.1 proftpd-devel-1.3.5d-7.1 proftpd-doc-1.3.5d-7.1 proftpd-ldap-1.3.5d-7.1 proftpd-ldap-debuginfo-1.3.5d-7.1 proftpd-mysql-1.3.5d-7.1 proftpd-mysql-debuginfo-1.3.5d-7.1 proftpd-pgsql-1.3.5d-7.1 proftpd-pgsql-debuginfo-1.3.5d-7.1 proftpd-radius-1.3.5d-7.1 proftpd-radius-debuginfo-1.3.5d-7.1 proftpd-sqlite-1.3.5d-7.1 proftpd-sqlite-debuginfo-1.3.5d-7.1 - openSUSE Leap 42.1 (noarch): proftpd-lang-1.3.5d-7.1 References: https://www.suse.com/security/cve/CVE-2017-7418.html https://bugzilla.suse.com/1032443

1 0

openSUSE-SU-2017:1034-1: moderate: Security update for jasper
by opensuse-security＠opensuse.org 18 Apr '17

18 Apr '17

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1034-1 Rating: moderate References: #1015400 #1018088 #1020353 #1021868 #1029497 Cross-References: CVE-2016-10251 CVE-2016-9583 CVE-2016-9600 CVE-2017-5498 CVE-2017-6850 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for jasper fixes the following issues: Security issues fixed: - CVE-2016-9600: Null Pointer Dereference due to missing check for UNKNOWN color space in JP2 encoder (bsc#1018088) - CVE-2016-10251: Use of uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c) (bsc#1029497) - CVE-2017-5498: left-shift undefined behaviour (bsc#1020353) - CVE-2017-6850: NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c) (bsc#1021868) - CVE-2016-9583: Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-478=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-478=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): jasper-1.900.14-175.3.1 jasper-debuginfo-1.900.14-175.3.1 jasper-debugsource-1.900.14-175.3.1 libjasper-devel-1.900.14-175.3.1 libjasper1-1.900.14-175.3.1 libjasper1-debuginfo-1.900.14-175.3.1 - openSUSE Leap 42.2 (x86_64): libjasper1-32bit-1.900.14-175.3.1 libjasper1-debuginfo-32bit-1.900.14-175.3.1 - openSUSE Leap 42.1 (i586 x86_64): jasper-1.900.14-176.1 jasper-debuginfo-1.900.14-176.1 jasper-debugsource-1.900.14-176.1 libjasper-devel-1.900.14-176.1 libjasper1-1.900.14-176.1 libjasper1-debuginfo-1.900.14-176.1 - openSUSE Leap 42.1 (x86_64): libjasper1-32bit-1.900.14-176.1 libjasper1-debuginfo-32bit-1.900.14-176.1 References: https://www.suse.com/security/cve/CVE-2016-10251.html https://www.suse.com/security/cve/CVE-2016-9583.html https://www.suse.com/security/cve/CVE-2016-9600.html https://www.suse.com/security/cve/CVE-2017-5498.html https://www.suse.com/security/cve/CVE-2017-6850.html https://bugzilla.suse.com/1015400 https://bugzilla.suse.com/1018088 https://bugzilla.suse.com/1020353 https://bugzilla.suse.com/1021868 https://bugzilla.suse.com/1029497

1 0

openSUSE-SU-2017:1033-1: moderate: Security update for dracut
by opensuse-security＠opensuse.org 18 Apr '17

18 Apr '17

openSUSE Security Update: Security update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1033-1 Rating: moderate References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for dracut fixes the following issues: Security issues fixed: - CVE-2016-8637: When the early microcode loading was enabled during initrd creation, the initrd would be read-only available for all users, allowing local users to retrieve secrets stored in the initial ramdisk. (bsc#1008340) Non security issues fixed: - Remove zlib module as requirement. (bsc#1020063) - Unlimit TaskMax for xfs_repair in emergency shell. (bsc#1019938) - Resolve symbolic links for -i and -k parameters. (bsc#902375) - Enhance purge-kernels script to handle kgraft patches. (bsc#1017141) - Allow booting from degraded MD arrays with systemd. (bsc#1017695) - Allow booting on s390x with fips=1 on the kernel command line. (bnc#1021687) - Start multipath services before local-fs-pre.target. (bsc#1005410, bsc#1006118, bsc#1007925) - Fix /sbin/installkernel to handle kernel packages built with 'make bin-rpmpkg'. (bsc#1008648) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-482=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dracut-044-16.3.1 dracut-debuginfo-044-16.3.1 dracut-debugsource-044-16.3.1 dracut-fips-044-16.3.1 dracut-tools-044-16.3.1 References:

1 0

openSUSE-SU-2017:1032-1: Security update for gstreamer-plugins-bad
by opensuse-security＠opensuse.org 18 Apr '17

18 Apr '17

openSUSE Security Update: Security update for gstreamer-plugins-bad ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1032-1 Rating: low References: #1024044 #1024068 Cross-References: CVE-2017-5843 CVE-2017-5848 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for gstreamer-plugins-bad fixes the following issues: Security issues fixed: - CVE-2017-5843: set stream tags to NULL after unrefing (bsc#1024044). - CVE-2017-5848: rewrite PSM parsing to add bounds checking (bsc#1024068). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-479=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gstreamer-plugins-bad-1.8.3-5.3.1 gstreamer-plugins-bad-debuginfo-1.8.3-5.3.1 gstreamer-plugins-bad-debugsource-1.8.3-5.3.1 gstreamer-plugins-bad-devel-1.8.3-5.3.1 gstreamer-plugins-bad-doc-1.8.3-5.3.1 libgstadaptivedemux-1_0-0-1.8.3-5.3.1 libgstadaptivedemux-1_0-0-debuginfo-1.8.3-5.3.1 libgstbadaudio-1_0-0-1.8.3-5.3.1 libgstbadaudio-1_0-0-debuginfo-1.8.3-5.3.1 libgstbadbase-1_0-0-1.8.3-5.3.1 libgstbadbase-1_0-0-debuginfo-1.8.3-5.3.1 libgstbadvideo-1_0-0-1.8.3-5.3.1 libgstbadvideo-1_0-0-debuginfo-1.8.3-5.3.1 libgstbasecamerabinsrc-1_0-0-1.8.3-5.3.1 libgstbasecamerabinsrc-1_0-0-debuginfo-1.8.3-5.3.1 libgstcodecparsers-1_0-0-1.8.3-5.3.1 libgstcodecparsers-1_0-0-debuginfo-1.8.3-5.3.1 libgstgl-1_0-0-1.8.3-5.3.1 libgstgl-1_0-0-debuginfo-1.8.3-5.3.1 libgstinsertbin-1_0-0-1.8.3-5.3.1 libgstinsertbin-1_0-0-debuginfo-1.8.3-5.3.1 libgstmpegts-1_0-0-1.8.3-5.3.1 libgstmpegts-1_0-0-debuginfo-1.8.3-5.3.1 libgstphotography-1_0-0-1.8.3-5.3.1 libgstphotography-1_0-0-debuginfo-1.8.3-5.3.1 libgstplayer-1_0-0-1.8.3-5.3.1 libgstplayer-1_0-0-debuginfo-1.8.3-5.3.1 libgsturidownloader-1_0-0-1.8.3-5.3.1 libgsturidownloader-1_0-0-debuginfo-1.8.3-5.3.1 libgstvdpau-1.8.3-5.3.1 libgstvdpau-debuginfo-1.8.3-5.3.1 libgstwayland-1_0-0-1.8.3-5.3.1 libgstwayland-1_0-0-debuginfo-1.8.3-5.3.1 - openSUSE Leap 42.2 (x86_64): gstreamer-plugins-bad-32bit-1.8.3-5.3.1 gstreamer-plugins-bad-debuginfo-32bit-1.8.3-5.3.1 libgstadaptivedemux-1_0-0-32bit-1.8.3-5.3.1 libgstadaptivedemux-1_0-0-debuginfo-32bit-1.8.3-5.3.1 libgstbadaudio-1_0-0-32bit-1.8.3-5.3.1 libgstbadaudio-1_0-0-debuginfo-32bit-1.8.3-5.3.1 libgstbadbase-1_0-0-32bit-1.8.3-5.3.1 libgstbadbase-1_0-0-debuginfo-32bit-1.8.3-5.3.1 libgstbadvideo-1_0-0-32bit-1.8.3-5.3.1 libgstbadvideo-1_0-0-debuginfo-32bit-1.8.3-5.3.1 libgstbasecamerabinsrc-1_0-0-32bit-1.8.3-5.3.1 libgstbasecamerabinsrc-1_0-0-debuginfo-32bit-1.8.3-5.3.1 libgstcodecparsers-1_0-0-32bit-1.8.3-5.3.1 libgstcodecparsers-1_0-0-debuginfo-32bit-1.8.3-5.3.1 libgstgl-1_0-0-32bit-1.8.3-5.3.1 libgstgl-1_0-0-debuginfo-32bit-1.8.3-5.3.1 libgstinsertbin-1_0-0-32bit-1.8.3-5.3.1 libgstinsertbin-1_0-0-debuginfo-32bit-1.8.3-5.3.1 libgstmpegts-1_0-0-32bit-1.8.3-5.3.1 libgstmpegts-1_0-0-debuginfo-32bit-1.8.3-5.3.1 libgstphotography-1_0-0-32bit-1.8.3-5.3.1 libgstphotography-1_0-0-debuginfo-32bit-1.8.3-5.3.1 libgstplayer-1_0-0-32bit-1.8.3-5.3.1 libgstplayer-1_0-0-debuginfo-32bit-1.8.3-5.3.1 libgsturidownloader-1_0-0-32bit-1.8.3-5.3.1 libgsturidownloader-1_0-0-debuginfo-32bit-1.8.3-5.3.1 libgstvdpau-32bit-1.8.3-5.3.1 libgstvdpau-debuginfo-32bit-1.8.3-5.3.1 libgstwayland-1_0-0-32bit-1.8.3-5.3.1 libgstwayland-1_0-0-debuginfo-32bit-1.8.3-5.3.1 - openSUSE Leap 42.2 (noarch): gstreamer-plugins-bad-lang-1.8.3-5.3.1 References: https://www.suse.com/security/cve/CVE-2017-5843.html https://www.suse.com/security/cve/CVE-2017-5848.html https://bugzilla.suse.com/1024044 https://bugzilla.suse.com/1024068

1 0

openSUSE-SU-2017:1031-1: Security update for gstreamer
by opensuse-security＠opensuse.org 18 Apr '17

18 Apr '17

openSUSE Security Update: Security update for gstreamer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1031-1 Rating: low References: #1024051 Cross-References: CVE-2017-5838 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gstreamer fixes the following security issues: - A crafted AVI file could have caused an invalid memory read, possibly causing DoS or corruption (bsc#1024051, CVE-2017-5838) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-480=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gstreamer-1.8.3-2.3.1 gstreamer-debuginfo-1.8.3-2.3.1 gstreamer-debugsource-1.8.3-2.3.1 gstreamer-devel-1.8.3-2.3.1 gstreamer-doc-1.8.3-2.3.1 gstreamer-utils-1.8.3-2.3.1 gstreamer-utils-debuginfo-1.8.3-2.3.1 libgstreamer-1_0-0-1.8.3-2.3.1 libgstreamer-1_0-0-debuginfo-1.8.3-2.3.1 typelib-1_0-Gst-1_0-1.8.3-2.3.1 - openSUSE Leap 42.2 (noarch): gstreamer-lang-1.8.3-2.3.1 - openSUSE Leap 42.2 (x86_64): gstreamer-32bit-1.8.3-2.3.1 gstreamer-debuginfo-32bit-1.8.3-2.3.1 libgstreamer-1_0-0-32bit-1.8.3-2.3.1 libgstreamer-1_0-0-debuginfo-32bit-1.8.3-2.3.1 References: https://www.suse.com/security/cve/CVE-2017-5838.html https://bugzilla.suse.com/1024051

1 0

openSUSE-SU-2017:1028-1: moderate: Security update for tigervnc
by opensuse-security＠opensuse.org 18 Apr '17

18 Apr '17

openSUSE Security Update: Security update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1028-1 Rating: moderate References: #1031875 #1031877 #1031879 #1031886 #1032880 Cross-References: CVE-2017-7392 CVE-2017-7393 CVE-2017-7394 CVE-2017-7395 CVE-2017-7396 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for tigervnc provides the several fixes. These security issues were fixed: - CVE-2017-7392, CVE-2017-7396: Client can cause leak in VNC server (bsc#1031886) - CVE-2017-7395: Authenticated VNC client can crash VNC server (bsc#1031877) - CVE-2017-7394: Client can crash or block VNC server (bsc#1031879) - CVE-2017-7393: Authenticated client can cause double free in VNC server (bsc#1031875) - Prevent buffer overflow in VNC client, allowing for crashing the client (bnc#1032880) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-475=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-475=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libXvnc-devel-1.6.0-16.5.1 libXvnc1-1.6.0-16.5.1 libXvnc1-debuginfo-1.6.0-16.5.1 tigervnc-1.6.0-16.5.1 tigervnc-debuginfo-1.6.0-16.5.1 tigervnc-debugsource-1.6.0-16.5.1 xorg-x11-Xvnc-1.6.0-16.5.1 xorg-x11-Xvnc-debuginfo-1.6.0-16.5.1 - openSUSE Leap 42.1 (i586 x86_64): tigervnc-1.5.0-40.1 tigervnc-debuginfo-1.5.0-40.1 tigervnc-debugsource-1.5.0-40.1 xorg-x11-Xvnc-1.5.0-40.1 xorg-x11-Xvnc-debuginfo-1.5.0-40.1 References: https://www.suse.com/security/cve/CVE-2017-7392.html https://www.suse.com/security/cve/CVE-2017-7393.html https://www.suse.com/security/cve/CVE-2017-7394.html https://www.suse.com/security/cve/CVE-2017-7395.html https://www.suse.com/security/cve/CVE-2017-7396.html https://bugzilla.suse.com/1031875 https://bugzilla.suse.com/1031877 https://bugzilla.suse.com/1031879 https://bugzilla.suse.com/1031886 https://bugzilla.suse.com/1032880

1 0

openSUSE-RU-2017:1023-1: Recommended update for opera
by maintenance＠opensuse.org 17 Apr '17

17 Apr '17

openSUSE Recommended Update: Recommended update for opera ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1023-1 Rating: low References: #1033177 Affected Products: openSUSE Leap 42.2:NonFree openSUSE Leap 42.1:NonFree ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Opera was updated to version 44.0.2510.1218: - The full changelog with all fixes and enhancements is available at: https://www.opera.com/blogs/desktop/changelog-for-44/#b2510.1218 https://www.opera.com/blogs/desktop/changelog-for-44/#b2510.1159 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2:NonFree: zypper in -t patch openSUSE-2017-474=1 - openSUSE Leap 42.1:NonFree: zypper in -t patch openSUSE-2017-474=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2:NonFree (x86_64): opera-44.0.2510.1218-32.1 - openSUSE Leap 42.1:NonFree (x86_64): opera-44.0.2510.1218-69.1 References: https://bugzilla.suse.com/1033177

1 0

openSUSE-RU-2017:1022-1: Recommended update for alsa
by maintenance＠opensuse.org 15 Apr '17

15 Apr '17

openSUSE Recommended Update: Recommended update for alsa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1022-1 Rating: low References: #1033080 #1033179 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for alsa fixes the following issues: - Disable dmix var_periodsize as default. (boo#1033179) - Workaround for binary incompatibility of dmix shm. (boo#1033080): Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-473=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): alsa-1.1.3-8.6.1 alsa-debugsource-1.1.3-8.6.1 alsa-devel-1.1.3-8.6.1 libasound2-1.1.3-8.6.1 libasound2-debuginfo-1.1.3-8.6.1 - openSUSE Leap 42.2 (x86_64): alsa-devel-32bit-1.1.3-8.6.1 libasound2-32bit-1.1.3-8.6.1 libasound2-debuginfo-32bit-1.1.3-8.6.1 - openSUSE Leap 42.2 (noarch): alsa-docs-1.1.3-8.6.1 References: https://bugzilla.suse.com/1033080 https://bugzilla.suse.com/1033179

1 0

openSUSE-SU-2017:1021-1: important: Security update for postgresql93
by opensuse-security＠opensuse.org 15 Apr '17

15 Apr '17

openSUSE Security Update: Security update for postgresql93 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1021-1 Rating: important References: #1029547 #973660 #993453 #993454 Cross-References: CVE-2016-5423 CVE-2016-5424 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for postgresql93 to version 9.3.14 fixes the several issues. These security issues were fixed: - CVE-2016-5423: CASE/WHEN with inlining can cause untrusted pointer dereference (bsc#993454). - CVE-2016-5424: Fix client programs' handling of special characters in database and role names (bsc#993453). This non-security issue was fixed: - bsc#973660: Added "Requires: timezone" to Service Pack - bsc#1029547: postgresql: fails to build with timezone 2017a For additional non-security issues please refer to - http://www.postgresql.org/docs/9.3/static/release-9-3-14.html - http://www.postgresql.org/docs/9.3/static/release-9-3-13.html - http://www.postgresql.org/docs/9.4/static/release-9-3-12.html This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-472=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-472=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): postgresql93-devel-9.3.14-5.5.1 postgresql93-devel-debuginfo-9.3.14-5.5.1 postgresql93-libs-debugsource-9.3.14-5.5.1 - openSUSE Leap 42.2 (x86_64): postgresql93-9.3.14-5.5.1 postgresql93-contrib-9.3.14-5.5.1 postgresql93-contrib-debuginfo-9.3.14-5.5.1 postgresql93-debuginfo-9.3.14-5.5.1 postgresql93-debugsource-9.3.14-5.5.1 postgresql93-plperl-9.3.14-5.5.1 postgresql93-plperl-debuginfo-9.3.14-5.5.1 postgresql93-plpython-9.3.14-5.5.1 postgresql93-plpython-debuginfo-9.3.14-5.5.1 postgresql93-pltcl-9.3.14-5.5.1 postgresql93-pltcl-debuginfo-9.3.14-5.5.1 postgresql93-server-9.3.14-5.5.1 postgresql93-server-debuginfo-9.3.14-5.5.1 postgresql93-test-9.3.14-5.5.1 - openSUSE Leap 42.2 (noarch): postgresql93-docs-9.3.14-5.5.1 - openSUSE Leap 42.1 (i586 x86_64): postgresql93-9.3.14-8.1 postgresql93-contrib-9.3.14-8.1 postgresql93-contrib-debuginfo-9.3.14-8.1 postgresql93-debuginfo-9.3.14-8.1 postgresql93-debugsource-9.3.14-8.1 postgresql93-devel-9.3.14-8.1 postgresql93-devel-debuginfo-9.3.14-8.1 postgresql93-libs-debugsource-9.3.14-8.1 postgresql93-plperl-9.3.14-8.1 postgresql93-plperl-debuginfo-9.3.14-8.1 postgresql93-plpython-9.3.14-8.1 postgresql93-plpython-debuginfo-9.3.14-8.1 postgresql93-pltcl-9.3.14-8.1 postgresql93-pltcl-debuginfo-9.3.14-8.1 postgresql93-server-9.3.14-8.1 postgresql93-server-debuginfo-9.3.14-8.1 postgresql93-test-9.3.14-8.1 - openSUSE Leap 42.1 (noarch): postgresql93-docs-9.3.14-8.1 References: https://www.suse.com/security/cve/CVE-2016-5423.html https://www.suse.com/security/cve/CVE-2016-5424.html https://bugzilla.suse.com/1029547 https://bugzilla.suse.com/973660 https://bugzilla.suse.com/993453 https://bugzilla.suse.com/993454

1 0

openSUSE-RU-2017:1011-1: moderate: Recommended update for sysdig
by maintenance＠opensuse.org 13 Apr '17

13 Apr '17

openSUSE Recommended Update: Recommended update for sysdig ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1011-1 Rating: moderate References: #1032025 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides version 0.15.1 of sysdig and brings various fixes and improvements: The following bugs have been fixed: - Fixed driver compilation issues on armv6l. - Fixes on Kubernetes support. - Regression on rkt detection. - Fixed high cpu usage when sysdig was used with -M parameter. - Fixed a memory leak. - Various fixes on Kubernetes ingestion. - Fix some happening deadlocks in the driver when ioctl were exiting with error. - Fix mkdir and rmdir events, they were skipped in case of page faults. - Bugfix on topports_server chisel. - Avoid some cases of infinite loop when evaluating filters like proc.aname. - JSON output is not: an object per event separated by newline, instead of objects inside array as before. - New filter proc.pcmdline, which represents the full command line (proc.name + proc.args) of the parent of the process generating the event. - Fixes for kernel version 4.9.3. - Improved detection of Mesos containers. - Fix compilation with HAS_CAPTURE disabled on Linux. - Fixes for merged captures support. Additionally the following features have been added: - Support for Linux Kernel 4.10. - Use /proc/<pid>/status instead of custom ioctl to get process vpid for kernels >= 4.1. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-468=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (ppc64le s390x x86_64): sysdig-0.15.1-11.1 sysdig-0.15.1-5.1 sysdig-debuginfo-0.15.1-5.1 sysdig-debugsource-0.15.1-5.1 sysdig-kmp-default-0.15.1_k3.12.49_11-11.1 sysdig-kmp-default-0.15.1_k3.12.49_11-5.1 sysdig-kmp-default-debuginfo-0.15.1_k3.12.49_11-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): sysdig-kmp-xen-0.15.1_k3.12.49_11-11.1 sysdig-kmp-xen-0.15.1_k3.12.49_11-5.1 sysdig-kmp-xen-debuginfo-0.15.1_k3.12.49_11-5.1 References: https://bugzilla.suse.com/1032025

1 0