April 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:0987-1: moderate: Recommended update for libvirt
by maintenance＠opensuse.org 12 Apr '17

12 Apr '17

openSUSE Recommended Update: Recommended update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0987-1 Rating: moderate References: #1013113 #1017762 #1025252 #1029738 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for libvirt provides the following fixes: - Fail to start network instead of losing routes if IPv6 forwarding is required. (bsc#1025252) - Ensure memory settings are properly aligned. (bsc#1029738) - Fix monitor timeout with large memory VMs. (bsc#1013113) - Fix potential double free in libxlDriverGetDom0MaxmemConf. (bsc#1017762) - Resolve possible resource leak in dom0 maximum memory setting. (bsc#1017762) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-461=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libvirt-2.0.0-13.3.3 libvirt-client-2.0.0-13.3.3 libvirt-client-debuginfo-2.0.0-13.3.3 libvirt-daemon-2.0.0-13.3.3 libvirt-daemon-config-network-2.0.0-13.3.3 libvirt-daemon-config-nwfilter-2.0.0-13.3.3 libvirt-daemon-debuginfo-2.0.0-13.3.3 libvirt-daemon-driver-interface-2.0.0-13.3.3 libvirt-daemon-driver-interface-debuginfo-2.0.0-13.3.3 libvirt-daemon-driver-lxc-2.0.0-13.3.3 libvirt-daemon-driver-lxc-debuginfo-2.0.0-13.3.3 libvirt-daemon-driver-network-2.0.0-13.3.3 libvirt-daemon-driver-network-debuginfo-2.0.0-13.3.3 libvirt-daemon-driver-nodedev-2.0.0-13.3.3 libvirt-daemon-driver-nodedev-debuginfo-2.0.0-13.3.3 libvirt-daemon-driver-nwfilter-2.0.0-13.3.3 libvirt-daemon-driver-nwfilter-debuginfo-2.0.0-13.3.3 libvirt-daemon-driver-qemu-2.0.0-13.3.3 libvirt-daemon-driver-qemu-debuginfo-2.0.0-13.3.3 libvirt-daemon-driver-secret-2.0.0-13.3.3 libvirt-daemon-driver-secret-debuginfo-2.0.0-13.3.3 libvirt-daemon-driver-storage-2.0.0-13.3.3 libvirt-daemon-driver-storage-debuginfo-2.0.0-13.3.3 libvirt-daemon-driver-uml-2.0.0-13.3.3 libvirt-daemon-driver-uml-debuginfo-2.0.0-13.3.3 libvirt-daemon-driver-vbox-2.0.0-13.3.3 libvirt-daemon-driver-vbox-debuginfo-2.0.0-13.3.3 libvirt-daemon-lxc-2.0.0-13.3.3 libvirt-daemon-qemu-2.0.0-13.3.3 libvirt-daemon-uml-2.0.0-13.3.3 libvirt-daemon-vbox-2.0.0-13.3.3 libvirt-debugsource-2.0.0-13.3.3 libvirt-devel-2.0.0-13.3.3 libvirt-doc-2.0.0-13.3.3 libvirt-lock-sanlock-2.0.0-13.3.3 libvirt-lock-sanlock-debuginfo-2.0.0-13.3.3 libvirt-nss-2.0.0-13.3.3 libvirt-nss-debuginfo-2.0.0-13.3.3 - openSUSE Leap 42.2 (x86_64): libvirt-client-32bit-2.0.0-13.3.3 libvirt-client-debuginfo-32bit-2.0.0-13.3.3 libvirt-daemon-driver-libxl-2.0.0-13.3.3 libvirt-daemon-driver-libxl-debuginfo-2.0.0-13.3.3 libvirt-daemon-xen-2.0.0-13.3.3 libvirt-devel-32bit-2.0.0-13.3.3 References: https://bugzilla.suse.com/1013113 https://bugzilla.suse.com/1017762 https://bugzilla.suse.com/1025252 https://bugzilla.suse.com/1029738

1 0

openSUSE-SU-2017:0982-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 11 Apr '17

11 Apr '17

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0982-1 Rating: moderate References: #1027210 Cross-References: CVE-2015-8994 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php7 fixes the following issues: Security issue fixed: - CVE-2015-8994: code permission/sensitive data protection vulnerability (bsc#1027210). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-458=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_php7-7.0.7-14.3.1 apache2-mod_php7-debuginfo-7.0.7-14.3.1 php7-7.0.7-14.3.1 php7-bcmath-7.0.7-14.3.1 php7-bcmath-debuginfo-7.0.7-14.3.1 php7-bz2-7.0.7-14.3.1 php7-bz2-debuginfo-7.0.7-14.3.1 php7-calendar-7.0.7-14.3.1 php7-calendar-debuginfo-7.0.7-14.3.1 php7-ctype-7.0.7-14.3.1 php7-ctype-debuginfo-7.0.7-14.3.1 php7-curl-7.0.7-14.3.1 php7-curl-debuginfo-7.0.7-14.3.1 php7-dba-7.0.7-14.3.1 php7-dba-debuginfo-7.0.7-14.3.1 php7-debuginfo-7.0.7-14.3.1 php7-debugsource-7.0.7-14.3.1 php7-devel-7.0.7-14.3.1 php7-dom-7.0.7-14.3.1 php7-dom-debuginfo-7.0.7-14.3.1 php7-enchant-7.0.7-14.3.1 php7-enchant-debuginfo-7.0.7-14.3.1 php7-exif-7.0.7-14.3.1 php7-exif-debuginfo-7.0.7-14.3.1 php7-fastcgi-7.0.7-14.3.1 php7-fastcgi-debuginfo-7.0.7-14.3.1 php7-fileinfo-7.0.7-14.3.1 php7-fileinfo-debuginfo-7.0.7-14.3.1 php7-firebird-7.0.7-14.3.1 php7-firebird-debuginfo-7.0.7-14.3.1 php7-fpm-7.0.7-14.3.1 php7-fpm-debuginfo-7.0.7-14.3.1 php7-ftp-7.0.7-14.3.1 php7-ftp-debuginfo-7.0.7-14.3.1 php7-gd-7.0.7-14.3.1 php7-gd-debuginfo-7.0.7-14.3.1 php7-gettext-7.0.7-14.3.1 php7-gettext-debuginfo-7.0.7-14.3.1 php7-gmp-7.0.7-14.3.1 php7-gmp-debuginfo-7.0.7-14.3.1 php7-iconv-7.0.7-14.3.1 php7-iconv-debuginfo-7.0.7-14.3.1 php7-imap-7.0.7-14.3.1 php7-imap-debuginfo-7.0.7-14.3.1 php7-intl-7.0.7-14.3.1 php7-intl-debuginfo-7.0.7-14.3.1 php7-json-7.0.7-14.3.1 php7-json-debuginfo-7.0.7-14.3.1 php7-ldap-7.0.7-14.3.1 php7-ldap-debuginfo-7.0.7-14.3.1 php7-mbstring-7.0.7-14.3.1 php7-mbstring-debuginfo-7.0.7-14.3.1 php7-mcrypt-7.0.7-14.3.1 php7-mcrypt-debuginfo-7.0.7-14.3.1 php7-mysql-7.0.7-14.3.1 php7-mysql-debuginfo-7.0.7-14.3.1 php7-odbc-7.0.7-14.3.1 php7-odbc-debuginfo-7.0.7-14.3.1 php7-opcache-7.0.7-14.3.1 php7-opcache-debuginfo-7.0.7-14.3.1 php7-openssl-7.0.7-14.3.1 php7-openssl-debuginfo-7.0.7-14.3.1 php7-pcntl-7.0.7-14.3.1 php7-pcntl-debuginfo-7.0.7-14.3.1 php7-pdo-7.0.7-14.3.1 php7-pdo-debuginfo-7.0.7-14.3.1 php7-pgsql-7.0.7-14.3.1 php7-pgsql-debuginfo-7.0.7-14.3.1 php7-phar-7.0.7-14.3.1 php7-phar-debuginfo-7.0.7-14.3.1 php7-posix-7.0.7-14.3.1 php7-posix-debuginfo-7.0.7-14.3.1 php7-pspell-7.0.7-14.3.1 php7-pspell-debuginfo-7.0.7-14.3.1 php7-readline-7.0.7-14.3.1 php7-readline-debuginfo-7.0.7-14.3.1 php7-shmop-7.0.7-14.3.1 php7-shmop-debuginfo-7.0.7-14.3.1 php7-snmp-7.0.7-14.3.1 php7-snmp-debuginfo-7.0.7-14.3.1 php7-soap-7.0.7-14.3.1 php7-soap-debuginfo-7.0.7-14.3.1 php7-sockets-7.0.7-14.3.1 php7-sockets-debuginfo-7.0.7-14.3.1 php7-sqlite-7.0.7-14.3.1 php7-sqlite-debuginfo-7.0.7-14.3.1 php7-sysvmsg-7.0.7-14.3.1 php7-sysvmsg-debuginfo-7.0.7-14.3.1 php7-sysvsem-7.0.7-14.3.1 php7-sysvsem-debuginfo-7.0.7-14.3.1 php7-sysvshm-7.0.7-14.3.1 php7-sysvshm-debuginfo-7.0.7-14.3.1 php7-tidy-7.0.7-14.3.1 php7-tidy-debuginfo-7.0.7-14.3.1 php7-tokenizer-7.0.7-14.3.1 php7-tokenizer-debuginfo-7.0.7-14.3.1 php7-wddx-7.0.7-14.3.1 php7-wddx-debuginfo-7.0.7-14.3.1 php7-xmlreader-7.0.7-14.3.1 php7-xmlreader-debuginfo-7.0.7-14.3.1 php7-xmlrpc-7.0.7-14.3.1 php7-xmlrpc-debuginfo-7.0.7-14.3.1 php7-xmlwriter-7.0.7-14.3.1 php7-xmlwriter-debuginfo-7.0.7-14.3.1 php7-xsl-7.0.7-14.3.1 php7-xsl-debuginfo-7.0.7-14.3.1 php7-zip-7.0.7-14.3.1 php7-zip-debuginfo-7.0.7-14.3.1 php7-zlib-7.0.7-14.3.1 php7-zlib-debuginfo-7.0.7-14.3.1 - openSUSE Leap 42.2 (noarch): php7-pear-7.0.7-14.3.1 php7-pear-Archive_Tar-7.0.7-14.3.1 References: https://www.suse.com/security/cve/CVE-2015-8994.html https://bugzilla.suse.com/1027210

1 0

openSUSE-SU-2017:0980-1: moderate: Security update for slrn
by opensuse-security＠opensuse.org 11 Apr '17

11 Apr '17

openSUSE Security Update: Security update for slrn ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0980-1 Rating: moderate References: #1031023 Cross-References: CVE-2014-3566 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for slrn contains one security improvement: - CVE-2014-3566: Disable SSLv3 to prevent POODLE attack (boo#1031023) The version 1.0.3 also contains a number of display and message processing improvements. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-459=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-459=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): slrn-lang-1.0.3-4.3.1 - openSUSE Leap 42.2 (x86_64): slrn-1.0.3-4.3.1 slrn-debuginfo-1.0.3-4.3.1 slrn-debugsource-1.0.3-4.3.1 - openSUSE Leap 42.1 (i586 x86_64): slrn-1.0.3-4.1 slrn-debuginfo-1.0.3-4.1 slrn-debugsource-1.0.3-4.1 - openSUSE Leap 42.1 (noarch): slrn-lang-1.0.3-4.1 References: https://www.suse.com/security/cve/CVE-2014-3566.html https://bugzilla.suse.com/1031023

1 0

openSUSE-RU-2017:0974-1: Recommended update for trytond
by maintenance＠opensuse.org 11 Apr '17

11 Apr '17

openSUSE Recommended Update: Recommended update for trytond ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0974-1 Rating: low References: #1026365 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides the current Version of the 3.8 series of trytond. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-453=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): trytond-3.8.11-9.6.2 References: https://bugzilla.suse.com/1026365

1 0

openSUSE-SU-2017:0973-1: important: Security update for pidgin
by opensuse-security＠opensuse.org 11 Apr '17

11 Apr '17

openSUSE Security Update: Security update for pidgin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0973-1 Rating: important References: #1009974 #1028835 Cross-References: CVE-2017-2640 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for pidgin to version 2.12.0 fixes the following issues: This security issue was fixed: - CVE-2017-2640: Out of bounds memory read in purple_markup_unescape_entity (boo#1028835). These non-security issues were fixed: + libpurple: - Fix the use of uninitialised memory if running non-debug-enabled versions of glib. - Update AIM dev and dist ID's to new ones that were assigned by AOL. - TLS certificate verification now uses SHA-256 checksums. - Fix the SASL external auth for Freenode (boo#1009974). - Remove the MSN protocol plugin. It has been unusable and dormant for some time. - Remove the Mxit protocol plugin. The service was closed at the end ofSeptember 2016. - Remove the MySpaceIM protocol plugin. The service has been defunct for a long time (pidgin.im#15356). - Remove the Yahoo! protocol plugin. Yahoo has completely reimplemented their protocol, so this version is no longer operable as of August 5th, 2016. - Remove the Facebook (XMPP) account option. According to https://developers.facebook.com/docs/chat the XMPP Chat API service ended April 30th, 2015. - Fix gnutls certificate validation errors that mainly affected Google. + General: - Replace instances of d.pidgin.im with developer.pidgin.im and update the urls to use https (pidgin.im#17036). + IRC: - Fix an issue of messages being silently cut off at 500 characters. Large messages are now split into parts and sent one by one (pidgin.im#4753). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-457=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): libpurple-branding-openSUSE-42.2-3.3.2 libpurple-branding-upstream-2.12.0-8.6.1 libpurple-lang-2.12.0-8.6.1 - openSUSE Leap 42.2 (x86_64): finch-2.12.0-8.6.1 finch-debuginfo-2.12.0-8.6.1 finch-devel-2.12.0-8.6.1 libpurple-2.12.0-8.6.1 libpurple-debuginfo-2.12.0-8.6.1 libpurple-devel-2.12.0-8.6.1 libpurple-plugin-sametime-2.12.0-8.6.1 libpurple-plugin-sametime-debuginfo-2.12.0-8.6.1 libpurple-tcl-2.12.0-8.6.1 libpurple-tcl-debuginfo-2.12.0-8.6.1 pidgin-2.12.0-8.6.1 pidgin-debuginfo-2.12.0-8.6.1 pidgin-debugsource-2.12.0-8.6.1 pidgin-devel-2.12.0-8.6.1 References: https://www.suse.com/security/cve/CVE-2017-2640.html https://bugzilla.suse.com/1009974 https://bugzilla.suse.com/1028835

1 0

openSUSE-SU-2017:0969-1: important: Security update for apparmor
by opensuse-security＠opensuse.org 10 Apr '17

10 Apr '17

openSUSE Security Update: Security update for apparmor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0969-1 Rating: important References: #1016259 #1017260 #1029696 Cross-References: CVE-2017-6507 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for apparmor fixes the following issues: These security issues were fixed: - CVE-2017-6507: Preserve unknown profiles when reloading apparmor.service (lp#1668892, boo#1029696) - boo#1017260: Migration to apparmor.service accidently disable AppArmor. Note: This will re-enable AppArmor if it was disabled by the last update. You'll need to "rcapparmor reload" to actually load the profiles, and then check aa-status for programs that need to be restarted to apply the profiles. These non-security issues were fixed: - Fixed crash in aa-logprof on specific change_hat events - boo#1016259: Added var.mount dependeny to apparmor.service The aa-remove-unknown utility was added to unload unknown profiles (lp#1668892) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-452=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-452=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_apparmor-2.10.2-12.3.1 apache2-mod_apparmor-debuginfo-2.10.2-12.3.1 apparmor-debugsource-2.10.2-12.3.1 apparmor-parser-2.10.2-12.3.1 apparmor-parser-debuginfo-2.10.2-12.3.1 libapparmor-devel-2.10.2-12.3.1 libapparmor1-2.10.2-12.3.1 libapparmor1-debuginfo-2.10.2-12.3.1 pam_apparmor-2.10.2-12.3.1 pam_apparmor-debuginfo-2.10.2-12.3.1 perl-apparmor-2.10.2-12.3.1 perl-apparmor-debuginfo-2.10.2-12.3.1 python3-apparmor-2.10.2-12.3.1 python3-apparmor-debuginfo-2.10.2-12.3.1 ruby-apparmor-2.10.2-12.3.1 ruby-apparmor-debuginfo-2.10.2-12.3.1 - openSUSE Leap 42.2 (x86_64): libapparmor1-32bit-2.10.2-12.3.1 libapparmor1-debuginfo-32bit-2.10.2-12.3.1 pam_apparmor-32bit-2.10.2-12.3.1 pam_apparmor-debuginfo-32bit-2.10.2-12.3.1 - openSUSE Leap 42.2 (noarch): apparmor-abstractions-2.10.2-12.3.1 apparmor-docs-2.10.2-12.3.1 apparmor-parser-lang-2.10.2-12.3.1 apparmor-profiles-2.10.2-12.3.1 apparmor-utils-2.10.2-12.3.1 apparmor-utils-lang-2.10.2-12.3.1 - openSUSE Leap 42.1 (i586 x86_64): apache2-mod_apparmor-2.10.2-12.1 apache2-mod_apparmor-debuginfo-2.10.2-12.1 apparmor-debugsource-2.10.2-12.1 apparmor-parser-2.10.2-12.1 apparmor-parser-debuginfo-2.10.2-12.1 libapparmor-devel-2.10.2-12.1 libapparmor1-2.10.2-12.1 libapparmor1-debuginfo-2.10.2-12.1 pam_apparmor-2.10.2-12.1 pam_apparmor-debuginfo-2.10.2-12.1 perl-apparmor-2.10.2-12.1 perl-apparmor-debuginfo-2.10.2-12.1 python3-apparmor-2.10.2-12.1 python3-apparmor-debuginfo-2.10.2-12.1 ruby-apparmor-2.10.2-12.1 ruby-apparmor-debuginfo-2.10.2-12.1 - openSUSE Leap 42.1 (noarch): apparmor-abstractions-2.10.2-12.1 apparmor-docs-2.10.2-12.1 apparmor-parser-lang-2.10.2-12.1 apparmor-profiles-2.10.2-12.1 apparmor-utils-2.10.2-12.1 apparmor-utils-lang-2.10.2-12.1 - openSUSE Leap 42.1 (x86_64): libapparmor1-32bit-2.10.2-12.1 libapparmor1-debuginfo-32bit-2.10.2-12.1 pam_apparmor-32bit-2.10.2-12.1 pam_apparmor-debuginfo-32bit-2.10.2-12.1 References: https://www.suse.com/security/cve/CVE-2017-6507.html https://bugzilla.suse.com/1016259 https://bugzilla.suse.com/1017260 https://bugzilla.suse.com/1029696

1 0

openSUSE-RU-2017:0965-1: moderate: Recommended update for kdepim
by maintenance＠opensuse.org 07 Apr '17

07 Apr '17

openSUSE Recommended Update: Recommended update for kdepim ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0965-1 Rating: moderate References: #1032754 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kdepim fixes the following issues: - boo#103275: symbol lookup error in akregator, blogilo introduced with a recent messagelib update kdepim was rebuilt with the updated messagelib. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-447=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): akonadi_resources-16.08.2-2.2.1 akonadi_resources-debuginfo-16.08.2-2.2.1 akregator5-16.08.2-2.2.1 akregator5-debuginfo-16.08.2-2.2.1 blogilo5-16.08.2-2.2.1 blogilo5-debuginfo-16.08.2-2.2.1 kaddressbook5-16.08.2-2.2.1 kaddressbook5-debuginfo-16.08.2-2.2.1 kalarm5-16.08.2-2.2.1 kalarm5-debuginfo-16.08.2-2.2.1 kdepim-16.08.2-2.2.1 kdepim-debuginfo-16.08.2-2.2.1 kdepim-debugsource-16.08.2-2.2.1 kmail5-16.08.2-2.2.1 kmail5-debuginfo-16.08.2-2.2.1 knotes5-16.08.2-2.2.1 knotes5-debuginfo-16.08.2-2.2.1 kontact5-16.08.2-2.2.1 kontact5-debuginfo-16.08.2-2.2.1 korganizer5-16.08.2-2.2.1 korganizer5-debuginfo-16.08.2-2.2.1 ktnef5-16.08.2-2.2.1 ktnef5-debuginfo-16.08.2-2.2.1 References: https://bugzilla.suse.com/1032754

1 0

openSUSE-RU-2017:0964-1: moderate: Recommended update for lvm2
by maintenance＠opensuse.org 07 Apr '17

07 Apr '17

openSUSE Recommended Update: Recommended update for lvm2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0964-1 Rating: moderate References: #1015943 #1023283 #1025560 #1025630 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for lvm2 provides the following fixes: - Fix clvmd segmentation fault on ppc64le architecture. (bsc#1025630) - Fix several trivial issues about clvmd/cmirrord resource agents. (bsc#1023283, bsc#1025560) - Add systemd_requires to device-mapper package. (bsc#1015943) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-450=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): device-mapper-1.02.97-76.1 device-mapper-debuginfo-1.02.97-76.1 device-mapper-devel-1.02.97-76.1 lvm2-2.02.120-76.1 lvm2-clvm-2.02.120-76.1 lvm2-clvm-debuginfo-2.02.120-76.1 lvm2-cmirrord-2.02.120-76.1 lvm2-cmirrord-debuginfo-2.02.120-76.1 lvm2-debuginfo-2.02.120-76.1 lvm2-debugsource-2.02.120-76.1 lvm2-devel-2.02.120-76.1 - openSUSE Leap 42.1 (x86_64): device-mapper-32bit-1.02.97-76.1 device-mapper-debuginfo-32bit-1.02.97-76.1 device-mapper-devel-32bit-1.02.97-76.1 References: https://bugzilla.suse.com/1015943 https://bugzilla.suse.com/1023283 https://bugzilla.suse.com/1025560 https://bugzilla.suse.com/1025630

1 0

openSUSE-RU-2017:0963-1: moderate: Recommended update for python-kiwi
by maintenance＠opensuse.org 07 Apr '17

07 Apr '17

openSUSE Recommended Update: Recommended update for python-kiwi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0963-1 Rating: moderate References: #1011342 #1015549 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-kiwi adds new functionality and bug fixes: * Support for layered docker images * Support for base docker images created via umoci/skopeo * Support for multipython build * Add image info command * Fix kiwi API, make sure modules are found when used in other python programs * Fix use of legacy services * Support repositories with credentials * Support DNF package manager * Fix network link detection * Fix isolinux timeout configuration * Clean up existing machine id files by deleting them (setupMachineID) * Fixup duplication of btrfs toplevel volume * Update schema for container setup The source container changed from python3-kiwi to python-kiwi (singlespec). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-451=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): kiwi-boot-requires-8.30.0-2.1 kiwi-man-pages-8.30.0-2.1 kiwi-pxeboot-8.30.0-2.1 kiwi-tools-8.30.0-2.1 kiwi-tools-debuginfo-8.30.0-2.1 python-kiwi-debugsource-8.30.0-2.1 python2-kiwi-8.30.0-2.1 python3-kiwi-8.30.0-2.1 References: https://bugzilla.suse.com/1011342 https://bugzilla.suse.com/1015549

1 0

openSUSE-SU-2017:0961-1: moderate: Security update for ffmpeg
by opensuse-security＠opensuse.org 07 Apr '17

07 Apr '17

openSUSE Security Update: Security update for ffmpeg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0961-1 Rating: moderate References: #1022920 Cross-References: CVE-2016-10190 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ffmpeg fixes the following issues: Security issue fixed: - CVE-2016-10190: remote code execution vulnerability [ 1 - libavformat/http.c ] (boo#1022920) Detailed ChangeLog: - 3.1.6: https://github.com/FFmpeg/FFmpeg/blob/e08b1cf2df8cfdb3394aa5ab0320739f8b5a1 c4f/Changelog - 3.2.4: https://github.com/FFmpeg/FFmpeg/blob/cbe65ccfa02a9061cead73a6685eef90225c4 1b5/Changelog Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-449=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): ffmpeg-2.8.10-9.1 ffmpeg-3.1.6-5.1 ffmpeg-debuginfo-3.1.6-5.1 ffmpeg-debugsource-3.1.6-5.1 ffmpeg-devel-2.8.10-9.1 libavcodec-devel-2.8.10-9.1 libavcodec-devel-3.1.6-5.1 libavcodec56-2.8.10-9.1 libavcodec57-3.1.6-5.1 libavcodec57-debuginfo-3.1.6-5.1 libavdevice-devel-2.8.10-9.1 libavdevice-devel-3.1.6-5.1 libavdevice56-2.8.10-9.1 libavdevice57-3.1.6-5.1 libavdevice57-debuginfo-3.1.6-5.1 libavfilter-devel-2.8.10-9.1 libavfilter-devel-3.1.6-5.1 libavfilter5-2.8.10-9.1 libavfilter6-3.1.6-5.1 libavfilter6-debuginfo-3.1.6-5.1 libavformat-devel-2.8.10-9.1 libavformat-devel-3.1.6-5.1 libavformat56-2.8.10-9.1 libavformat57-3.1.6-5.1 libavformat57-debuginfo-3.1.6-5.1 libavresample-devel-2.8.10-9.1 libavresample-devel-3.1.6-5.1 libavresample2-2.8.10-9.1 libavresample3-3.1.6-5.1 libavresample3-debuginfo-3.1.6-5.1 libavutil-devel-2.8.10-9.1 libavutil-devel-3.1.6-5.1 libavutil54-2.8.10-9.1 libavutil55-3.1.6-5.1 libavutil55-debuginfo-3.1.6-5.1 libpostproc-devel-2.8.10-9.1 libpostproc-devel-3.1.6-5.1 libpostproc53-2.8.10-9.1 libpostproc54-3.1.6-5.1 libpostproc54-debuginfo-3.1.6-5.1 libswresample-devel-2.8.10-9.1 libswresample-devel-3.1.6-5.1 libswresample1-2.8.10-9.1 libswresample2-3.1.6-5.1 libswresample2-debuginfo-3.1.6-5.1 libswscale-devel-2.8.10-9.1 libswscale-devel-3.1.6-5.1 libswscale3-2.8.10-9.1 libswscale4-3.1.6-5.1 libswscale4-debuginfo-3.1.6-5.1 References: https://www.suse.com/security/cve/CVE-2016-10190.html https://bugzilla.suse.com/1022920

1 0