May 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:1258-1: moderate: Recommended update for samba
by maintenance＠opensuse.org 15 May '17

15 May '17

openSUSE Recommended Update: Recommended update for samba ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1258-1 Rating: moderate References: #1036283 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for samba fixes the following issues: - Fix CVE-2017-2619 regression with "follow symlinks = no"; (bsc#1036283, bso#12721). This update was imported from the SUSE:SLE-12-SP1:Update and SUSE:SLE-12-SP2:Update update projects. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-579=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-579=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ctdb-4.4.2-11.6.1 ctdb-debuginfo-4.4.2-11.6.1 ctdb-tests-4.4.2-11.6.1 ctdb-tests-debuginfo-4.4.2-11.6.1 libdcerpc-binding0-4.4.2-11.6.1 libdcerpc-binding0-debuginfo-4.4.2-11.6.1 libdcerpc-devel-4.4.2-11.6.1 libdcerpc-samr-devel-4.4.2-11.6.1 libdcerpc-samr0-4.4.2-11.6.1 libdcerpc-samr0-debuginfo-4.4.2-11.6.1 libdcerpc0-4.4.2-11.6.1 libdcerpc0-debuginfo-4.4.2-11.6.1 libndr-devel-4.4.2-11.6.1 libndr-krb5pac-devel-4.4.2-11.6.1 libndr-krb5pac0-4.4.2-11.6.1 libndr-krb5pac0-debuginfo-4.4.2-11.6.1 libndr-nbt-devel-4.4.2-11.6.1 libndr-nbt0-4.4.2-11.6.1 libndr-nbt0-debuginfo-4.4.2-11.6.1 libndr-standard-devel-4.4.2-11.6.1 libndr-standard0-4.4.2-11.6.1 libndr-standard0-debuginfo-4.4.2-11.6.1 libndr0-4.4.2-11.6.1 libndr0-debuginfo-4.4.2-11.6.1 libnetapi-devel-4.4.2-11.6.1 libnetapi0-4.4.2-11.6.1 libnetapi0-debuginfo-4.4.2-11.6.1 libsamba-credentials-devel-4.4.2-11.6.1 libsamba-credentials0-4.4.2-11.6.1 libsamba-credentials0-debuginfo-4.4.2-11.6.1 libsamba-errors-devel-4.4.2-11.6.1 libsamba-errors0-4.4.2-11.6.1 libsamba-errors0-debuginfo-4.4.2-11.6.1 libsamba-hostconfig-devel-4.4.2-11.6.1 libsamba-hostconfig0-4.4.2-11.6.1 libsamba-hostconfig0-debuginfo-4.4.2-11.6.1 libsamba-passdb-devel-4.4.2-11.6.1 libsamba-passdb0-4.4.2-11.6.1 libsamba-passdb0-debuginfo-4.4.2-11.6.1 libsamba-policy-devel-4.4.2-11.6.1 libsamba-policy0-4.4.2-11.6.1 libsamba-policy0-debuginfo-4.4.2-11.6.1 libsamba-util-devel-4.4.2-11.6.1 libsamba-util0-4.4.2-11.6.1 libsamba-util0-debuginfo-4.4.2-11.6.1 libsamdb-devel-4.4.2-11.6.1 libsamdb0-4.4.2-11.6.1 libsamdb0-debuginfo-4.4.2-11.6.1 libsmbclient-devel-4.4.2-11.6.1 libsmbclient0-4.4.2-11.6.1 libsmbclient0-debuginfo-4.4.2-11.6.1 libsmbconf-devel-4.4.2-11.6.1 libsmbconf0-4.4.2-11.6.1 libsmbconf0-debuginfo-4.4.2-11.6.1 libsmbldap-devel-4.4.2-11.6.1 libsmbldap0-4.4.2-11.6.1 libsmbldap0-debuginfo-4.4.2-11.6.1 libtevent-util-devel-4.4.2-11.6.1 libtevent-util0-4.4.2-11.6.1 libtevent-util0-debuginfo-4.4.2-11.6.1 libwbclient-devel-4.4.2-11.6.1 libwbclient0-4.4.2-11.6.1 libwbclient0-debuginfo-4.4.2-11.6.1 samba-4.4.2-11.6.1 samba-client-4.4.2-11.6.1 samba-client-debuginfo-4.4.2-11.6.1 samba-core-devel-4.4.2-11.6.1 samba-debuginfo-4.4.2-11.6.1 samba-debugsource-4.4.2-11.6.1 samba-libs-4.4.2-11.6.1 samba-libs-debuginfo-4.4.2-11.6.1 samba-pidl-4.4.2-11.6.1 samba-python-4.4.2-11.6.1 samba-python-debuginfo-4.4.2-11.6.1 samba-test-4.4.2-11.6.1 samba-test-debuginfo-4.4.2-11.6.1 samba-winbind-4.4.2-11.6.1 samba-winbind-debuginfo-4.4.2-11.6.1 - openSUSE Leap 42.2 (noarch): samba-doc-4.4.2-11.6.1 - openSUSE Leap 42.2 (x86_64): libdcerpc-binding0-32bit-4.4.2-11.6.1 libdcerpc-binding0-debuginfo-32bit-4.4.2-11.6.1 libdcerpc-samr0-32bit-4.4.2-11.6.1 libdcerpc-samr0-debuginfo-32bit-4.4.2-11.6.1 libdcerpc0-32bit-4.4.2-11.6.1 libdcerpc0-debuginfo-32bit-4.4.2-11.6.1 libndr-krb5pac0-32bit-4.4.2-11.6.1 libndr-krb5pac0-debuginfo-32bit-4.4.2-11.6.1 libndr-nbt0-32bit-4.4.2-11.6.1 libndr-nbt0-debuginfo-32bit-4.4.2-11.6.1 libndr-standard0-32bit-4.4.2-11.6.1 libndr-standard0-debuginfo-32bit-4.4.2-11.6.1 libndr0-32bit-4.4.2-11.6.1 libndr0-debuginfo-32bit-4.4.2-11.6.1 libnetapi0-32bit-4.4.2-11.6.1 libnetapi0-debuginfo-32bit-4.4.2-11.6.1 libsamba-credentials0-32bit-4.4.2-11.6.1 libsamba-credentials0-debuginfo-32bit-4.4.2-11.6.1 libsamba-errors0-32bit-4.4.2-11.6.1 libsamba-errors0-debuginfo-32bit-4.4.2-11.6.1 libsamba-hostconfig0-32bit-4.4.2-11.6.1 libsamba-hostconfig0-debuginfo-32bit-4.4.2-11.6.1 libsamba-passdb0-32bit-4.4.2-11.6.1 libsamba-passdb0-debuginfo-32bit-4.4.2-11.6.1 libsamba-policy0-32bit-4.4.2-11.6.1 libsamba-policy0-debuginfo-32bit-4.4.2-11.6.1 libsamba-util0-32bit-4.4.2-11.6.1 libsamba-util0-debuginfo-32bit-4.4.2-11.6.1 libsamdb0-32bit-4.4.2-11.6.1 libsamdb0-debuginfo-32bit-4.4.2-11.6.1 libsmbclient0-32bit-4.4.2-11.6.1 libsmbclient0-debuginfo-32bit-4.4.2-11.6.1 libsmbconf0-32bit-4.4.2-11.6.1 libsmbconf0-debuginfo-32bit-4.4.2-11.6.1 libsmbldap0-32bit-4.4.2-11.6.1 libsmbldap0-debuginfo-32bit-4.4.2-11.6.1 libtevent-util0-32bit-4.4.2-11.6.1 libtevent-util0-debuginfo-32bit-4.4.2-11.6.1 libwbclient0-32bit-4.4.2-11.6.1 libwbclient0-debuginfo-32bit-4.4.2-11.6.1 samba-client-32bit-4.4.2-11.6.1 samba-client-debuginfo-32bit-4.4.2-11.6.1 samba-libs-32bit-4.4.2-11.6.1 samba-libs-debuginfo-32bit-4.4.2-11.6.1 samba-winbind-32bit-4.4.2-11.6.1 samba-winbind-debuginfo-32bit-4.4.2-11.6.1 - openSUSE Leap 42.1 (i586 x86_64): ctdb-4.2.4-30.1 ctdb-debuginfo-4.2.4-30.1 ctdb-devel-4.2.4-30.1 ctdb-tests-4.2.4-30.1 ctdb-tests-debuginfo-4.2.4-30.1 libdcerpc-atsvc-devel-4.2.4-30.1 libdcerpc-atsvc0-4.2.4-30.1 libdcerpc-atsvc0-debuginfo-4.2.4-30.1 libdcerpc-binding0-4.2.4-30.1 libdcerpc-binding0-debuginfo-4.2.4-30.1 libdcerpc-devel-4.2.4-30.1 libdcerpc-samr-devel-4.2.4-30.1 libdcerpc-samr0-4.2.4-30.1 libdcerpc-samr0-debuginfo-4.2.4-30.1 libdcerpc0-4.2.4-30.1 libdcerpc0-debuginfo-4.2.4-30.1 libgensec-devel-4.2.4-30.1 libgensec0-4.2.4-30.1 libgensec0-debuginfo-4.2.4-30.1 libndr-devel-4.2.4-30.1 libndr-krb5pac-devel-4.2.4-30.1 libndr-krb5pac0-4.2.4-30.1 libndr-krb5pac0-debuginfo-4.2.4-30.1 libndr-nbt-devel-4.2.4-30.1 libndr-nbt0-4.2.4-30.1 libndr-nbt0-debuginfo-4.2.4-30.1 libndr-standard-devel-4.2.4-30.1 libndr-standard0-4.2.4-30.1 libndr-standard0-debuginfo-4.2.4-30.1 libndr0-4.2.4-30.1 libndr0-debuginfo-4.2.4-30.1 libnetapi-devel-4.2.4-30.1 libnetapi0-4.2.4-30.1 libnetapi0-debuginfo-4.2.4-30.1 libregistry-devel-4.2.4-30.1 libregistry0-4.2.4-30.1 libregistry0-debuginfo-4.2.4-30.1 libsamba-credentials-devel-4.2.4-30.1 libsamba-credentials0-4.2.4-30.1 libsamba-credentials0-debuginfo-4.2.4-30.1 libsamba-hostconfig-devel-4.2.4-30.1 libsamba-hostconfig0-4.2.4-30.1 libsamba-hostconfig0-debuginfo-4.2.4-30.1 libsamba-passdb-devel-4.2.4-30.1 libsamba-passdb0-4.2.4-30.1 libsamba-passdb0-debuginfo-4.2.4-30.1 libsamba-policy-devel-4.2.4-30.1 libsamba-policy0-4.2.4-30.1 libsamba-policy0-debuginfo-4.2.4-30.1 libsamba-util-devel-4.2.4-30.1 libsamba-util0-4.2.4-30.1 libsamba-util0-debuginfo-4.2.4-30.1 libsamdb-devel-4.2.4-30.1 libsamdb0-4.2.4-30.1 libsamdb0-debuginfo-4.2.4-30.1 libsmbclient-devel-4.2.4-30.1 libsmbclient-raw-devel-4.2.4-30.1 libsmbclient-raw0-4.2.4-30.1 libsmbclient-raw0-debuginfo-4.2.4-30.1 libsmbclient0-4.2.4-30.1 libsmbclient0-debuginfo-4.2.4-30.1 libsmbconf-devel-4.2.4-30.1 libsmbconf0-4.2.4-30.1 libsmbconf0-debuginfo-4.2.4-30.1 libsmbldap-devel-4.2.4-30.1 libsmbldap0-4.2.4-30.1 libsmbldap0-debuginfo-4.2.4-30.1 libtevent-util-devel-4.2.4-30.1 libtevent-util0-4.2.4-30.1 libtevent-util0-debuginfo-4.2.4-30.1 libwbclient-devel-4.2.4-30.1 libwbclient0-4.2.4-30.1 libwbclient0-debuginfo-4.2.4-30.1 samba-4.2.4-30.1 samba-client-4.2.4-30.1 samba-client-debuginfo-4.2.4-30.1 samba-core-devel-4.2.4-30.1 samba-debuginfo-4.2.4-30.1 samba-debugsource-4.2.4-30.1 samba-libs-4.2.4-30.1 samba-libs-debuginfo-4.2.4-30.1 samba-pidl-4.2.4-30.1 samba-python-4.2.4-30.1 samba-python-debuginfo-4.2.4-30.1 samba-test-4.2.4-30.1 samba-test-debuginfo-4.2.4-30.1 samba-test-devel-4.2.4-30.1 samba-winbind-4.2.4-30.1 samba-winbind-debuginfo-4.2.4-30.1 - openSUSE Leap 42.1 (x86_64): libdcerpc-atsvc0-32bit-4.2.4-30.1 libdcerpc-atsvc0-debuginfo-32bit-4.2.4-30.1 libdcerpc-binding0-32bit-4.2.4-30.1 libdcerpc-binding0-debuginfo-32bit-4.2.4-30.1 libdcerpc-samr0-32bit-4.2.4-30.1 libdcerpc-samr0-debuginfo-32bit-4.2.4-30.1 libdcerpc0-32bit-4.2.4-30.1 libdcerpc0-debuginfo-32bit-4.2.4-30.1 libgensec0-32bit-4.2.4-30.1 libgensec0-debuginfo-32bit-4.2.4-30.1 libndr-krb5pac0-32bit-4.2.4-30.1 libndr-krb5pac0-debuginfo-32bit-4.2.4-30.1 libndr-nbt0-32bit-4.2.4-30.1 libndr-nbt0-debuginfo-32bit-4.2.4-30.1 libndr-standard0-32bit-4.2.4-30.1 libndr-standard0-debuginfo-32bit-4.2.4-30.1 libndr0-32bit-4.2.4-30.1 libndr0-debuginfo-32bit-4.2.4-30.1 libnetapi0-32bit-4.2.4-30.1 libnetapi0-debuginfo-32bit-4.2.4-30.1 libregistry0-32bit-4.2.4-30.1 libregistry0-debuginfo-32bit-4.2.4-30.1 libsamba-credentials0-32bit-4.2.4-30.1 libsamba-credentials0-debuginfo-32bit-4.2.4-30.1 libsamba-hostconfig0-32bit-4.2.4-30.1 libsamba-hostconfig0-debuginfo-32bit-4.2.4-30.1 libsamba-passdb0-32bit-4.2.4-30.1 libsamba-passdb0-debuginfo-32bit-4.2.4-30.1 libsamba-policy0-32bit-4.2.4-30.1 libsamba-policy0-debuginfo-32bit-4.2.4-30.1 libsamba-util0-32bit-4.2.4-30.1 libsamba-util0-debuginfo-32bit-4.2.4-30.1 libsamdb0-32bit-4.2.4-30.1 libsamdb0-debuginfo-32bit-4.2.4-30.1 libsmbclient-raw0-32bit-4.2.4-30.1 libsmbclient-raw0-debuginfo-32bit-4.2.4-30.1 libsmbclient0-32bit-4.2.4-30.1 libsmbclient0-debuginfo-32bit-4.2.4-30.1 libsmbconf0-32bit-4.2.4-30.1 libsmbconf0-debuginfo-32bit-4.2.4-30.1 libsmbldap0-32bit-4.2.4-30.1 libsmbldap0-debuginfo-32bit-4.2.4-30.1 libtevent-util0-32bit-4.2.4-30.1 libtevent-util0-debuginfo-32bit-4.2.4-30.1 libwbclient0-32bit-4.2.4-30.1 libwbclient0-debuginfo-32bit-4.2.4-30.1 samba-32bit-4.2.4-30.1 samba-client-32bit-4.2.4-30.1 samba-client-debuginfo-32bit-4.2.4-30.1 samba-debuginfo-32bit-4.2.4-30.1 samba-libs-32bit-4.2.4-30.1 samba-libs-debuginfo-32bit-4.2.4-30.1 samba-winbind-32bit-4.2.4-30.1 samba-winbind-debuginfo-32bit-4.2.4-30.1 - openSUSE Leap 42.1 (noarch): samba-doc-4.2.4-30.1 References: https://www.suse.com/security/cve/CVE-2017-2619.html https://bugzilla.suse.com/1036283

1 0

openSUSE-RU-2017:1257-1: moderate: Recommended update for tbb
by maintenance＠opensuse.org 15 May '17

15 May '17

openSUSE Recommended Update: Recommended update for tbb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1257-1 Rating: moderate References: #1034842 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tbb fixes the following issues: - Add missing include files (boo#1034842) This update also contains an update to the 2017_20170226 release with the following changes: - Added support for C++11 move semantics in parallel_do. - Constructors for many classes, including graph nodes, concurrent containers, thread-local containers, etc., are declared explicit and cannot be used for implicit conversions anymore. - Added a workaround for bug 16657 in the GNU C Library (glibc) affecting the debug version of tbb::mutex. - Fixed a crash in pool_identify() called for an object allocated in another thread. - Added template class gfx_factory to the flow graph API. It implements the Factory concept for streaming_node to offload computations to Intel processor graphics. - Fixed a possible deadlock caused by missed wakeup signals in task_arena::execute(). - Fixed the issue with task_arena::execute() not being processed when the calling thread cannot join the arena. - static_partitioner class is now a fully supported feature. - async_node class is now a fully supported feature. - For 64-bit platforms, quadrupled the worst-case limit on the amount of memory the Intel TBB allocator can handle. - Added TBB_USE_GLIBCXX_VERSION macro to specify the version of GNU libstdc++ when it cannot be properly recognized, e.g. when used with Clang on Linux* OS. Inspired by a contribution from David A. - Added graph/stereo example to demostrate tbb::flow::async_msg. - Removed a few cases of excessive user data copying in the flow graph. - Reworked split_node to eliminate unnecessary overheads. - Added support for C++11 move semantics to the argument of tbb::parallel_do_feeder::add() method. - Added C++11 move constructor and assignment operator to tbb::combinable template class. - Added tbb::this_task_arena::max_concurrency() function and max_concurrency() method of class task_arena returning the maximal number of threads that can work inside an arena. - Deprecated tbb::task_arena::current_thread_index() static method; use tbb::this_task_arena::current_thread_index() function instead. The license of this package changed to Apache-2.0. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-573=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libtbb2-2017_20170226-2.3.1 libtbb2-debuginfo-2017_20170226-2.3.1 libtbbmalloc2-2017_20170226-2.3.1 libtbbmalloc2-debuginfo-2017_20170226-2.3.1 tbb-debugsource-2017_20170226-2.3.1 tbb-devel-2017_20170226-2.3.1 References: https://bugzilla.suse.com/1034842

1 0

openSUSE-RU-2017:1256-1: Recommended update for hwinfo
by maintenance＠opensuse.org 15 May '17

15 May '17

openSUSE Recommended Update: Recommended update for hwinfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1256-1 Rating: low References: #1031676 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for hwinfo adds support for ibmvnic network interfaces. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-578=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): hwinfo-21.39-8.3.1 hwinfo-debuginfo-21.39-8.3.1 hwinfo-debugsource-21.39-8.3.1 hwinfo-devel-21.39-8.3.1 hwinfo-devel-debuginfo-21.39-8.3.1 References: https://bugzilla.suse.com/1031676

1 0

openSUSE-RU-2017:1255-1: moderate: Recommended update for alsa
by maintenance＠opensuse.org 15 May '17

15 May '17

openSUSE Recommended Update: Recommended update for alsa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1255-1 Rating: moderate References: #1037021 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for alsa fixes the following issues: - fix sound issues with steam (boo#1037021) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-572=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): alsa-1.1.3-8.9.1 alsa-debugsource-1.1.3-8.9.1 alsa-devel-1.1.3-8.9.1 libasound2-1.1.3-8.9.1 libasound2-debuginfo-1.1.3-8.9.1 - openSUSE Leap 42.2 (noarch): alsa-docs-1.1.3-8.9.1 - openSUSE Leap 42.2 (x86_64): alsa-devel-32bit-1.1.3-8.9.1 libasound2-32bit-1.1.3-8.9.1 libasound2-debuginfo-32bit-1.1.3-8.9.1 References: https://bugzilla.suse.com/1037021

1 0

openSUSE-SU-2017:1254-1: important: Security update for kauth, kdelibs4
by opensuse-security＠opensuse.org 15 May '17

15 May '17

openSUSE Security Update: Security update for kauth, kdelibs4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1254-1 Rating: important References: #1036244 Cross-References: CVE-2017-8422 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kauth and kdelibs4 fixes the following issues: - CVE-2017-8422: logic flaw in the KAuth framework allowed privilege escalation (boo#1036244). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-575=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): kdelibs4-4.14.18-9.1 kdelibs4-4.14.25-8.2 kdelibs4-branding-upstream-4.14.18-9.1 kdelibs4-branding-upstream-4.14.25-8.2 kdelibs4-core-4.14.18-9.1 kdelibs4-core-4.14.25-8.2 kdelibs4-core-debuginfo-4.14.18-9.1 kdelibs4-core-debuginfo-4.14.25-8.2 kdelibs4-debuginfo-4.14.18-9.1 kdelibs4-debuginfo-4.14.25-8.2 kdelibs4-debugsource-4.14.18-9.1 kdelibs4-debugsource-4.14.25-8.2 kdelibs4-doc-4.14.18-9.1 kdelibs4-doc-4.14.25-8.2 kdelibs4-doc-debuginfo-4.14.18-9.1 kdelibs4-doc-debuginfo-4.14.25-8.2 libkde4-4.14.18-9.1 libkde4-4.14.25-8.2 libkde4-debuginfo-4.14.18-9.1 libkde4-debuginfo-4.14.25-8.2 libkde4-devel-4.14.18-9.1 libkde4-devel-4.14.25-8.2 libkdecore4-4.14.18-9.1 libkdecore4-4.14.25-8.2 libkdecore4-debuginfo-4.14.18-9.1 libkdecore4-debuginfo-4.14.25-8.2 libkdecore4-devel-4.14.18-9.1 libkdecore4-devel-4.14.25-8.2 libkdecore4-devel-debuginfo-4.14.18-9.1 libkdecore4-devel-debuginfo-4.14.25-8.2 libksuseinstall-devel-4.14.18-9.1 libksuseinstall-devel-4.14.25-8.2 libksuseinstall1-4.14.18-9.1 libksuseinstall1-4.14.25-8.2 libksuseinstall1-debuginfo-4.14.18-9.1 libksuseinstall1-debuginfo-4.14.25-8.2 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): kauth-debugsource-5.20.0-7.1 kauth-debugsource-5.26.0-6.1 kauth-devel-5.20.0-7.1 kauth-devel-5.26.0-6.1 libKF5Auth5-5.20.0-7.1 libKF5Auth5-5.26.0-6.1 libKF5Auth5-debuginfo-5.20.0-7.1 libKF5Auth5-debuginfo-5.26.0-6.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): kdelibs4-apidocs-4.14.18-9.1 kdelibs4-apidocs-4.14.25-8.2 libKF5Auth5-lang-5.20.0-7.1 libKF5Auth5-lang-5.26.0-6.1 References: https://www.suse.com/security/cve/CVE-2017-8422.html https://bugzilla.suse.com/1036244

1 0

openSUSE-RU-2017:1243-1: moderate: Recommended update for SuSEfirewall2
by maintenance＠opensuse.org 11 May '17

11 May '17

openSUSE Recommended Update: Recommended update for SuSEfirewall2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1243-1 Rating: moderate References: #1014987 #785299 #841046 #847193 #906136 #938727 #961258 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for SuSEfirewall2 fixes the following issues: - Install symlink to SuSEfirewall2 with the updated SUSE spelling. (bsc#938727, fate#316521) - Remove basic.target to avoid loop with SuSEfirewall2. (bsc#961258) - Ignore the bootlock when incremental updates for hotplugged or virtual devices are coming in during boot. This prevents lockups for example when drbd is used with FW_BOOT_FULL_INIT. (bsc#785299) - Support for IPv6 in FW_TRUSTED_NETS config variable. (bsc#841046) - Don't log dropped broadcast IPv6 broadcast/multicast packets by default to avoid cluttering the kernel log. (bsc#847193) - Only apply FW_KERNEL_SECURITY proc settings, if not overriden by the administrator in /etc/sysctl.conf. This allows you to benefit from some of the kernel security settings, while overwriting others. (bsc#906136) - Fix a race condition in systemd unit files that could cause the SuSEfirewall2_init unit to sporadically fail, because /tmp was not there/writable yet. (bsc#1014987) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-566=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-566=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): SuSEfirewall2-3.6.312-5.3.1 - openSUSE Leap 42.1 (noarch): SuSEfirewall2-3.6.312-5.1 References: https://bugzilla.suse.com/1014987 https://bugzilla.suse.com/785299 https://bugzilla.suse.com/841046 https://bugzilla.suse.com/847193 https://bugzilla.suse.com/906136 https://bugzilla.suse.com/938727 https://bugzilla.suse.com/961258

1 0

openSUSE-RU-2017:1240-1: Recommended update for evolution
by maintenance＠opensuse.org 11 May '17

11 May '17

openSUSE Recommended Update: Recommended update for evolution ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1240-1 Rating: low References: #1015898 #990206 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for evolution provides the following fixes: - Improve performance with very large contact lists (bsc#990206) - Fix evolution sending email EPortEntry too large (bsc#1015898) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-567=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): evolution-lang-3.20.5-2.3.1 - openSUSE Leap 42.2 (x86_64): evolution-3.20.5-2.3.1 evolution-debuginfo-3.20.5-2.3.1 evolution-debugsource-3.20.5-2.3.1 evolution-devel-3.20.5-2.3.1 evolution-plugin-bogofilter-3.20.5-2.3.1 evolution-plugin-bogofilter-debuginfo-3.20.5-2.3.1 evolution-plugin-pst-import-3.20.5-2.3.1 evolution-plugin-pst-import-debuginfo-3.20.5-2.3.1 evolution-plugin-spamassassin-3.20.5-2.3.1 evolution-plugin-spamassassin-debuginfo-3.20.5-2.3.1 glade-catalog-evolution-3.20.5-2.3.1 glade-catalog-evolution-debuginfo-3.20.5-2.3.1 References: https://bugzilla.suse.com/1015898 https://bugzilla.suse.com/990206

1 0

openSUSE-RU-2017:1232-1: Recommended update for clamav-database
by maintenance＠opensuse.org 10 May '17

10 May '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1232-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh May 8, 2017 This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-565=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-565=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201705080006-54.24.1 - openSUSE Leap 42.1 (noarch): clamav-database-201705080006-255.1 References:

1 0

openSUSE-SU-2017:1230-1: moderate: Security update for swftools
by opensuse-security＠opensuse.org 10 May '17

10 May '17

openSUSE Security Update: Security update for swftools ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1230-1 Rating: moderate References: #1037050 #1037051 Cross-References: CVE-2017-8400 CVE-2017-8401 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for swftools fixes the following issues: - CVE-2017-8400: out-of-bound write of heap data issue (bsc#1037050) - CVE-2017-8401: out-of-bound read of heap data issue (bsc#1037051) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-564=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-564=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): swftools-0.9.2-8.3.1 swftools-debuginfo-0.9.2-8.3.1 swftools-debugsource-0.9.2-8.3.1 - openSUSE Leap 42.1 (i586 x86_64): swftools-0.9.2-8.1 swftools-debuginfo-0.9.2-8.1 swftools-debugsource-0.9.2-8.1 References: https://www.suse.com/security/cve/CVE-2017-8400.html https://www.suse.com/security/cve/CVE-2017-8401.html https://bugzilla.suse.com/1037050 https://bugzilla.suse.com/1037051

1 0

openSUSE-SU-2017:1221-1: important: Security update for xen
by opensuse-security＠opensuse.org 09 May '17

09 May '17

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1221-1 Rating: important References: #1022703 #1028655 #1029827 #1030144 #1034843 #1034844 #1034994 #1036146 Cross-References: CVE-2016-9603 CVE-2017-7718 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has 6 fixes is now available. Description: This update for xen fixes several issues. These security issues were fixed: - A malicious 64-bit PV guest may be able to access all of system memory, allowing for all of privilege escalation, host crashes, and information leaks by placing a IRET hypercall in the middle of a multicall batch (XSA-213, bsc#1034843) - A malicious pair of guests may be able to access all of system memory, allowing for all of privilege escalation, host crashes, and information leaks because of a missing check when transfering pages via GNTTABOP_transfer (XSA-214, bsc#1034844). - CVE-2017-7718: hw/display/cirrus_vga_rop.h allowed local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions (bsc#1034994). - CVE-2016-9603: A privileged user within the guest VM could have caused a heap overflow in the device model process, potentially escalating their privileges to that of the device model process (bsc#1028655) These non-security issues were fixed: - bsc#1029827: Additional xenstore patch - bsc#1036146: Xen VM dumped core to wrong path - bsc#1022703: Prevent Xen HVM guest with OVMF to hang with unattached CDRom This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-563=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xen-debugsource-4.7.2_04-11.6.1 xen-devel-4.7.2_04-11.6.1 xen-libs-4.7.2_04-11.6.1 xen-libs-debuginfo-4.7.2_04-11.6.1 xen-tools-domU-4.7.2_04-11.6.1 xen-tools-domU-debuginfo-4.7.2_04-11.6.1 - openSUSE Leap 42.2 (x86_64): xen-4.7.2_04-11.6.1 xen-doc-html-4.7.2_04-11.6.1 xen-libs-32bit-4.7.2_04-11.6.1 xen-libs-debuginfo-32bit-4.7.2_04-11.6.1 xen-tools-4.7.2_04-11.6.1 xen-tools-debuginfo-4.7.2_04-11.6.1 References: https://www.suse.com/security/cve/CVE-2016-9603.html https://www.suse.com/security/cve/CVE-2017-7718.html https://bugzilla.suse.com/1022703 https://bugzilla.suse.com/1028655 https://bugzilla.suse.com/1029827 https://bugzilla.suse.com/1030144 https://bugzilla.suse.com/1034843 https://bugzilla.suse.com/1034844 https://bugzilla.suse.com/1034994 https://bugzilla.suse.com/1036146

1 0