May 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:1423-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 27 May '17

27 May '17

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1423-1 Rating: moderate References: #1012656 #1028542 #1032576 #1035743 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for dracut fixes the following issues: - Fix assemble of RSTe array on UEFI machines in kdump context. (bsc#1028542) - Better document mkinitrd's -k option. (bsc#1012656) - Fix syntax error in installkernel script. (bsc#1032576) - Fix calculation of network masks. (bsc#1035743) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-622=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dracut-044-16.6.1 dracut-debuginfo-044-16.6.1 dracut-debugsource-044-16.6.1 dracut-fips-044-16.6.1 dracut-tools-044-16.6.1 References: https://bugzilla.suse.com/1012656 https://bugzilla.suse.com/1028542 https://bugzilla.suse.com/1032576 https://bugzilla.suse.com/1035743

1 0

openSUSE-SU-2017:1422-1: moderate: Security update for git
by opensuse-security＠opensuse.org 27 May '17

27 May '17

openSUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1422-1 Rating: moderate References: #1038395 Cross-References: CVE-2017-8386 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for git fixes the following issues: - git 2.12.3: * CVE-2017-8386: Fix git-shell not to escape with the starting dash name (bsc#1038395) * Fix for potential segv introduced in v2.11.0 and later * Misc fixes and cleanups. - git 2.12.2: * CLI output fixes * "Dump http" transport fixes * various fixes for internal code paths * Trailer "Cc:" RFC fix - git 2.12.1: * Reduce authentication round-trip over HTTP when the server supports just a single authentication method. * "git add -i" patch subcommand fixed to have a path selection * various path verification fixes * fix "git log -L..." buffer overrun This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-624=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): git-2.12.3-5.6.1 git-arch-2.12.3-5.6.1 git-core-2.12.3-5.6.1 git-core-debuginfo-2.12.3-5.6.1 git-credential-gnome-keyring-2.12.3-5.6.1 git-credential-gnome-keyring-debuginfo-2.12.3-5.6.1 git-cvs-2.12.3-5.6.1 git-daemon-2.12.3-5.6.1 git-daemon-debuginfo-2.12.3-5.6.1 git-debugsource-2.12.3-5.6.1 git-email-2.12.3-5.6.1 git-gui-2.12.3-5.6.1 git-svn-2.12.3-5.6.1 git-svn-debuginfo-2.12.3-5.6.1 git-web-2.12.3-5.6.1 gitk-2.12.3-5.6.1 - openSUSE Leap 42.2 (noarch): git-doc-2.12.3-5.6.1 References: https://www.suse.com/security/cve/CVE-2017-8386.html https://bugzilla.suse.com/1038395

1 0

openSUSE-RU-2017:1421-1: Recommended update for glibc
by maintenance＠opensuse.org 27 May '17

27 May '17

openSUSE Recommended Update: Recommended update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1421-1 Rating: low References: #1035445 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for glibc fixes the following issue: - improper assert in dlclose() (bsc#1035445) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-621=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 i686 x86_64): glibc-2.22-4.6.3 glibc-debuginfo-2.22-4.6.3 glibc-debugsource-2.22-4.6.3 glibc-devel-2.22-4.6.3 glibc-devel-debuginfo-2.22-4.6.3 glibc-devel-static-2.22-4.6.3 glibc-locale-2.22-4.6.3 glibc-locale-debuginfo-2.22-4.6.3 glibc-profile-2.22-4.6.3 - openSUSE Leap 42.2 (i586 x86_64): glibc-extra-2.22-4.6.3 glibc-extra-debuginfo-2.22-4.6.3 glibc-utils-2.22-4.6.2 glibc-utils-debuginfo-2.22-4.6.2 glibc-utils-debugsource-2.22-4.6.2 nscd-2.22-4.6.3 nscd-debuginfo-2.22-4.6.3 - openSUSE Leap 42.2 (x86_64): glibc-32bit-2.22-4.6.3 glibc-debuginfo-32bit-2.22-4.6.3 glibc-devel-32bit-2.22-4.6.3 glibc-devel-debuginfo-32bit-2.22-4.6.3 glibc-devel-static-32bit-2.22-4.6.3 glibc-locale-32bit-2.22-4.6.3 glibc-locale-debuginfo-32bit-2.22-4.6.3 glibc-profile-32bit-2.22-4.6.3 glibc-utils-32bit-2.22-4.6.2 glibc-utils-debuginfo-32bit-2.22-4.6.2 - openSUSE Leap 42.2 (noarch): glibc-html-2.22-4.6.3 glibc-i18ndata-2.22-4.6.3 glibc-info-2.22-4.6.3 - openSUSE Leap 42.2 (i586): glibc-obsolete-2.22-4.6.3 glibc-obsolete-debuginfo-2.22-4.6.3 References: https://bugzilla.suse.com/1035445

1 0

openSUSE-RU-2017:1420-1: moderate: Recommended update for python
by maintenance＠opensuse.org 27 May '17

27 May '17

openSUSE Recommended Update: Recommended update for python ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1420-1 Rating: moderate References: #1027282 #964182 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update provides Python 2.7.13, which brings several bug fixes. - Fix build with NCurses 6.0 and OPAQUE_WINDOW set to 1. - Update cipher lists for OpenSSL wrapper and support OpenSSL 1.1.0 and newer. - Incorporate more integer overflow checks from upstream. (bsc#964182) - Provide python2-* symbols to support new packages built as python2-. For a comprehensive list of changes, please refer to the upstream Release Notes available at https://hg.python.org/cpython/raw-file/v2.7.13/Misc/NEWS This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-619=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libpython2_7-1_0-2.7.13-25.3.1 libpython2_7-1_0-debuginfo-2.7.13-25.3.1 python-2.7.13-25.3.1 python-base-2.7.13-25.3.1 python-base-debuginfo-2.7.13-25.3.1 python-base-debugsource-2.7.13-25.3.1 python-curses-2.7.13-25.3.1 python-curses-debuginfo-2.7.13-25.3.1 python-debuginfo-2.7.13-25.3.1 python-debugsource-2.7.13-25.3.1 python-demo-2.7.13-25.3.1 python-devel-2.7.13-25.3.1 python-gdbm-2.7.13-25.3.1 python-gdbm-debuginfo-2.7.13-25.3.1 python-idle-2.7.13-25.3.1 python-tk-2.7.13-25.3.1 python-tk-debuginfo-2.7.13-25.3.1 python-xml-2.7.13-25.3.1 python-xml-debuginfo-2.7.13-25.3.1 - openSUSE Leap 42.2 (x86_64): libpython2_7-1_0-32bit-2.7.13-25.3.1 libpython2_7-1_0-debuginfo-32bit-2.7.13-25.3.1 python-32bit-2.7.13-25.3.1 python-base-32bit-2.7.13-25.3.1 python-base-debuginfo-32bit-2.7.13-25.3.1 python-debuginfo-32bit-2.7.13-25.3.1 - openSUSE Leap 42.2 (noarch): python-doc-2.7.13-25.3.1 python-doc-pdf-2.7.13-25.3.1 References: https://bugzilla.suse.com/1027282 https://bugzilla.suse.com/964182

1 0

openSUSE-SU-2017:1415-1: important: Security update for samba
by opensuse-security＠opensuse.org 26 May '17

26 May '17

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1415-1 Rating: important References: #1038231 Cross-References: CVE-2017-7494 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for samba fixes the following issue: - An unprivileged user with access to the samba server could cause smbd to load a specially crafted shared library, which then had the ability to execute arbitrary code on the server as 'root'. [CVE-2017-7494, bso#12780, bsc#1038231] This update was imported from SUSE:SLE-12-SP1:Update project. NOTE: This update is released in openSUSE Leap 42.1 after its official End Of Life only because of its severity and potential impact for users that have not migrated yet. Please upgrade your openSUSE Leap 42.1 as soon as possible. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-618=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ctdb-4.2.4-33.1 ctdb-debuginfo-4.2.4-33.1 ctdb-devel-4.2.4-33.1 ctdb-tests-4.2.4-33.1 ctdb-tests-debuginfo-4.2.4-33.1 libdcerpc-atsvc-devel-4.2.4-33.1 libdcerpc-atsvc0-4.2.4-33.1 libdcerpc-atsvc0-debuginfo-4.2.4-33.1 libdcerpc-binding0-4.2.4-33.1 libdcerpc-binding0-debuginfo-4.2.4-33.1 libdcerpc-devel-4.2.4-33.1 libdcerpc-samr-devel-4.2.4-33.1 libdcerpc-samr0-4.2.4-33.1 libdcerpc-samr0-debuginfo-4.2.4-33.1 libdcerpc0-4.2.4-33.1 libdcerpc0-debuginfo-4.2.4-33.1 libgensec-devel-4.2.4-33.1 libgensec0-4.2.4-33.1 libgensec0-debuginfo-4.2.4-33.1 libndr-devel-4.2.4-33.1 libndr-krb5pac-devel-4.2.4-33.1 libndr-krb5pac0-4.2.4-33.1 libndr-krb5pac0-debuginfo-4.2.4-33.1 libndr-nbt-devel-4.2.4-33.1 libndr-nbt0-4.2.4-33.1 libndr-nbt0-debuginfo-4.2.4-33.1 libndr-standard-devel-4.2.4-33.1 libndr-standard0-4.2.4-33.1 libndr-standard0-debuginfo-4.2.4-33.1 libndr0-4.2.4-33.1 libndr0-debuginfo-4.2.4-33.1 libnetapi-devel-4.2.4-33.1 libnetapi0-4.2.4-33.1 libnetapi0-debuginfo-4.2.4-33.1 libregistry-devel-4.2.4-33.1 libregistry0-4.2.4-33.1 libregistry0-debuginfo-4.2.4-33.1 libsamba-credentials-devel-4.2.4-33.1 libsamba-credentials0-4.2.4-33.1 libsamba-credentials0-debuginfo-4.2.4-33.1 libsamba-hostconfig-devel-4.2.4-33.1 libsamba-hostconfig0-4.2.4-33.1 libsamba-hostconfig0-debuginfo-4.2.4-33.1 libsamba-passdb-devel-4.2.4-33.1 libsamba-passdb0-4.2.4-33.1 libsamba-passdb0-debuginfo-4.2.4-33.1 libsamba-policy-devel-4.2.4-33.1 libsamba-policy0-4.2.4-33.1 libsamba-policy0-debuginfo-4.2.4-33.1 libsamba-util-devel-4.2.4-33.1 libsamba-util0-4.2.4-33.1 libsamba-util0-debuginfo-4.2.4-33.1 libsamdb-devel-4.2.4-33.1 libsamdb0-4.2.4-33.1 libsamdb0-debuginfo-4.2.4-33.1 libsmbclient-devel-4.2.4-33.1 libsmbclient-raw-devel-4.2.4-33.1 libsmbclient-raw0-4.2.4-33.1 libsmbclient-raw0-debuginfo-4.2.4-33.1 libsmbclient0-4.2.4-33.1 libsmbclient0-debuginfo-4.2.4-33.1 libsmbconf-devel-4.2.4-33.1 libsmbconf0-4.2.4-33.1 libsmbconf0-debuginfo-4.2.4-33.1 libsmbldap-devel-4.2.4-33.1 libsmbldap0-4.2.4-33.1 libsmbldap0-debuginfo-4.2.4-33.1 libtevent-util-devel-4.2.4-33.1 libtevent-util0-4.2.4-33.1 libtevent-util0-debuginfo-4.2.4-33.1 libwbclient-devel-4.2.4-33.1 libwbclient0-4.2.4-33.1 libwbclient0-debuginfo-4.2.4-33.1 samba-4.2.4-33.1 samba-client-4.2.4-33.1 samba-client-debuginfo-4.2.4-33.1 samba-core-devel-4.2.4-33.1 samba-debuginfo-4.2.4-33.1 samba-debugsource-4.2.4-33.1 samba-libs-4.2.4-33.1 samba-libs-debuginfo-4.2.4-33.1 samba-pidl-4.2.4-33.1 samba-python-4.2.4-33.1 samba-python-debuginfo-4.2.4-33.1 samba-test-4.2.4-33.1 samba-test-debuginfo-4.2.4-33.1 samba-test-devel-4.2.4-33.1 samba-winbind-4.2.4-33.1 samba-winbind-debuginfo-4.2.4-33.1 - openSUSE Leap 42.1 (x86_64): libdcerpc-atsvc0-32bit-4.2.4-33.1 libdcerpc-atsvc0-debuginfo-32bit-4.2.4-33.1 libdcerpc-binding0-32bit-4.2.4-33.1 libdcerpc-binding0-debuginfo-32bit-4.2.4-33.1 libdcerpc-samr0-32bit-4.2.4-33.1 libdcerpc-samr0-debuginfo-32bit-4.2.4-33.1 libdcerpc0-32bit-4.2.4-33.1 libdcerpc0-debuginfo-32bit-4.2.4-33.1 libgensec0-32bit-4.2.4-33.1 libgensec0-debuginfo-32bit-4.2.4-33.1 libndr-krb5pac0-32bit-4.2.4-33.1 libndr-krb5pac0-debuginfo-32bit-4.2.4-33.1 libndr-nbt0-32bit-4.2.4-33.1 libndr-nbt0-debuginfo-32bit-4.2.4-33.1 libndr-standard0-32bit-4.2.4-33.1 libndr-standard0-debuginfo-32bit-4.2.4-33.1 libndr0-32bit-4.2.4-33.1 libndr0-debuginfo-32bit-4.2.4-33.1 libnetapi0-32bit-4.2.4-33.1 libnetapi0-debuginfo-32bit-4.2.4-33.1 libregistry0-32bit-4.2.4-33.1 libregistry0-debuginfo-32bit-4.2.4-33.1 libsamba-credentials0-32bit-4.2.4-33.1 libsamba-credentials0-debuginfo-32bit-4.2.4-33.1 libsamba-hostconfig0-32bit-4.2.4-33.1 libsamba-hostconfig0-debuginfo-32bit-4.2.4-33.1 libsamba-passdb0-32bit-4.2.4-33.1 libsamba-passdb0-debuginfo-32bit-4.2.4-33.1 libsamba-policy0-32bit-4.2.4-33.1 libsamba-policy0-debuginfo-32bit-4.2.4-33.1 libsamba-util0-32bit-4.2.4-33.1 libsamba-util0-debuginfo-32bit-4.2.4-33.1 libsamdb0-32bit-4.2.4-33.1 libsamdb0-debuginfo-32bit-4.2.4-33.1 libsmbclient-raw0-32bit-4.2.4-33.1 libsmbclient-raw0-debuginfo-32bit-4.2.4-33.1 libsmbclient0-32bit-4.2.4-33.1 libsmbclient0-debuginfo-32bit-4.2.4-33.1 libsmbconf0-32bit-4.2.4-33.1 libsmbconf0-debuginfo-32bit-4.2.4-33.1 libsmbldap0-32bit-4.2.4-33.1 libsmbldap0-debuginfo-32bit-4.2.4-33.1 libtevent-util0-32bit-4.2.4-33.1 libtevent-util0-debuginfo-32bit-4.2.4-33.1 libwbclient0-32bit-4.2.4-33.1 libwbclient0-debuginfo-32bit-4.2.4-33.1 samba-32bit-4.2.4-33.1 samba-client-32bit-4.2.4-33.1 samba-client-debuginfo-32bit-4.2.4-33.1 samba-debuginfo-32bit-4.2.4-33.1 samba-libs-32bit-4.2.4-33.1 samba-libs-debuginfo-32bit-4.2.4-33.1 samba-winbind-32bit-4.2.4-33.1 samba-winbind-debuginfo-32bit-4.2.4-33.1 - openSUSE Leap 42.1 (noarch): samba-doc-4.2.4-33.1 References: https://www.suse.com/security/cve/CVE-2017-7494.html https://bugzilla.suse.com/1038231

1 0

openSUSE-RU-2017:1414-1: moderate: Recommended update for mysql-community-server
by maintenance＠opensuse.org 26 May '17

26 May '17

openSUSE Recommended Update: Recommended update for mysql-community-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1414-1 Rating: moderate References: #1038740 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mysql-community-server fixes the following issues: - bsc#1038740: permission issue for /var/run/mysql prevented non-root users from connecting Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-617=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-617=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libmysql56client18-5.6.36-24.6.2 libmysql56client18-debuginfo-5.6.36-24.6.2 libmysql56client_r18-5.6.36-24.6.2 mysql-community-server-5.6.36-24.6.2 mysql-community-server-bench-5.6.36-24.6.2 mysql-community-server-bench-debuginfo-5.6.36-24.6.2 mysql-community-server-client-5.6.36-24.6.2 mysql-community-server-client-debuginfo-5.6.36-24.6.2 mysql-community-server-debuginfo-5.6.36-24.6.2 mysql-community-server-debugsource-5.6.36-24.6.2 mysql-community-server-errormessages-5.6.36-24.6.2 mysql-community-server-test-5.6.36-24.6.2 mysql-community-server-test-debuginfo-5.6.36-24.6.2 mysql-community-server-tools-5.6.36-24.6.2 mysql-community-server-tools-debuginfo-5.6.36-24.6.2 - openSUSE Leap 42.2 (x86_64): libmysql56client18-32bit-5.6.36-24.6.2 libmysql56client18-debuginfo-32bit-5.6.36-24.6.2 libmysql56client_r18-32bit-5.6.36-24.6.2 - openSUSE Leap 42.1 (i586 x86_64): libmysql56client18-5.6.36-28.1 libmysql56client18-debuginfo-5.6.36-28.1 libmysql56client_r18-5.6.36-28.1 mysql-community-server-5.6.36-28.1 mysql-community-server-bench-5.6.36-28.1 mysql-community-server-bench-debuginfo-5.6.36-28.1 mysql-community-server-client-5.6.36-28.1 mysql-community-server-client-debuginfo-5.6.36-28.1 mysql-community-server-debuginfo-5.6.36-28.1 mysql-community-server-debugsource-5.6.36-28.1 mysql-community-server-errormessages-5.6.36-28.1 mysql-community-server-test-5.6.36-28.1 mysql-community-server-test-debuginfo-5.6.36-28.1 mysql-community-server-tools-5.6.36-28.1 mysql-community-server-tools-debuginfo-5.6.36-28.1 - openSUSE Leap 42.1 (x86_64): libmysql56client18-32bit-5.6.36-28.1 libmysql56client18-debuginfo-32bit-5.6.36-28.1 libmysql56client_r18-32bit-5.6.36-28.1 References: https://bugzilla.suse.com/1038740

1 0

openSUSE-SU-2017:1413-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 26 May '17

26 May '17

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1413-1 Rating: moderate References: #1036985 #1036986 #1036988 #1036990 Cross-References: CVE-2017-8350 CVE-2017-8351 CVE-2017-8353 CVE-2017-8355 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2017-8350: denial of service via crafted PNG file (boo#1036985) - CVE-2017-8351: denial of service via crafted PCD file (boo#1036986) - CVE-2017-8353: denial of service via crafted PICT file (boo#1036988) - CVE-2017-8355: denial of service via crafted MTV file (boo#1036990) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-616=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): GraphicsMagick-1.3.25-11.6.1 GraphicsMagick-debuginfo-1.3.25-11.6.1 GraphicsMagick-debugsource-1.3.25-11.6.1 GraphicsMagick-devel-1.3.25-11.6.1 libGraphicsMagick++-Q16-12-1.3.25-11.6.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-11.6.1 libGraphicsMagick++-devel-1.3.25-11.6.1 libGraphicsMagick-Q16-3-1.3.25-11.6.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-11.6.1 libGraphicsMagick3-config-1.3.25-11.6.1 libGraphicsMagickWand-Q16-2-1.3.25-11.6.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-11.6.1 perl-GraphicsMagick-1.3.25-11.6.1 perl-GraphicsMagick-debuginfo-1.3.25-11.6.1 References: https://www.suse.com/security/cve/CVE-2017-8350.html https://www.suse.com/security/cve/CVE-2017-8351.html https://www.suse.com/security/cve/CVE-2017-8353.html https://www.suse.com/security/cve/CVE-2017-8355.html https://bugzilla.suse.com/1036985 https://bugzilla.suse.com/1036986 https://bugzilla.suse.com/1036988 https://bugzilla.suse.com/1036990

1 0

openSUSE-SU-2017:1412-1: important: Security update for rpcbind
by opensuse-security＠opensuse.org 26 May '17

26 May '17

openSUSE Security Update: Security update for rpcbind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1412-1 Rating: important References: #1037559 Cross-References: CVE-2017-8779 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rpcbind fixes the following issues: - CVE-2017-8779: A crafted UDP package could lead rcpbind to remote denial-of-service (bsc#1037559) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-615=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): rpcbind-0.2.3-3.3.1 rpcbind-debuginfo-0.2.3-3.3.1 rpcbind-debugsource-0.2.3-3.3.1 References: https://www.suse.com/security/cve/CVE-2017-8779.html https://bugzilla.suse.com/1037559

1 0

openSUSE-RU-2017:1407-1: Recommended update for clamav-database
by maintenance＠opensuse.org 24 May '17

24 May '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1407-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh May 22nd 2017. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-612=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201705221140-54.30.1 References:

1 0

openSUSE-SU-2017:1402-1: moderate: Security update for bash
by opensuse-security＠opensuse.org 24 May '17

24 May '17

openSUSE Security Update: Security update for bash ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1402-1 Rating: moderate References: #1010845 #1035371 Cross-References: CVE-2016-9401 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for bash fixes an issue that could lead to syntax errors when parsing scripts that use expr(1) inside loops. Additionally, the popd build-in now ensures that the normalized stack offset is within bounds before trying to free that stack entry. This fixes a segmentation fault. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-614=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): bash-4.3-80.3.1 bash-debuginfo-4.3-80.3.1 bash-debugsource-4.3-80.3.1 bash-devel-4.3-80.3.1 bash-loadables-4.3-80.3.1 bash-loadables-debuginfo-4.3-80.3.1 libreadline6-6.3-80.3.1 libreadline6-debuginfo-6.3-80.3.1 readline-devel-6.3-80.3.1 - openSUSE Leap 42.2 (x86_64): bash-debuginfo-32bit-4.3-80.3.1 libreadline6-32bit-6.3-80.3.1 libreadline6-debuginfo-32bit-6.3-80.3.1 readline-devel-32bit-6.3-80.3.1 - openSUSE Leap 42.2 (noarch): bash-doc-4.3-80.3.1 bash-lang-4.3-80.3.1 readline-doc-6.3-80.3.1 References: https://www.suse.com/security/cve/CVE-2016-9401.html https://bugzilla.suse.com/1010845 https://bugzilla.suse.com/1035371

1 0