May 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:1324-1: Recommended update for vncmanager
by maintenance＠opensuse.org 17 May '17

17 May '17

openSUSE Recommended Update: Recommended update for vncmanager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1324-1 Rating: low References: #1037192 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for vncmanager fixes the following issues: Prevents an exception from single client terminating the whole server. (boo#1037192) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-592=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): vncmanager-1.0.1-2.3.1 vncmanager-debuginfo-1.0.1-2.3.1 vncmanager-debugsource-1.0.1-2.3.1 References: https://bugzilla.suse.com/1037192

1 0

openSUSE-RU-2017:1323-1: End of maintenance announcement for openSUSE Leap 42.1
by maintenance＠opensuse.org 17 May '17

17 May '17

openSUSE Recommended Update: End of maintenance announcement for openSUSE Leap 42.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1323-1 Rating: low References: #1039088 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This announcement marks the end of the maintenance period for openSUSE Leap 42.1. In order to keep your systems up to date and secure, please migrate your systems to the current openSUSE version. For more information on how to upgrade to the current openSUSE version, please read: http://en.opensuse.org/SDB:Distribution-Upgrade Please make sure that you applied all maintenance updates provided for openSUSE Leap 42.1 before starting the update. Thank you for using openSUSE, your Maintenance and Security Team Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-591=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): release-notes-openSUSE-42.1.20170515-16.1 References: https://bugzilla.suse.com/1039088

1 0

openSUSE-RU-2017:1320-1: Recommended update for clamav-database
by maintenance＠opensuse.org 17 May '17

17 May '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1320-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh May 15th 2017. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-590=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201705150004-54.27.1 References:

1 0

openSUSE-SU-2017:1312-1: important: Security update for qemu
by opensuse-security＠opensuse.org 16 May '17

16 May '17

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1312-1 Rating: important References: #1013285 #1014109 #1014111 #1014702 #1015048 #1015169 #1016779 #1020491 #1020589 #1020928 #1021129 #1022541 #1023004 #1023053 #1023907 #1024972 #937125 Cross-References: CVE-2016-10155 CVE-2016-9776 CVE-2016-9907 CVE-2016-9911 CVE-2016-9921 CVE-2016-9922 CVE-2017-2615 CVE-2017-2620 CVE-2017-5525 CVE-2017-5526 CVE-2017-5667 CVE-2017-5856 CVE-2017-5898 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 13 vulnerabilities and has four fixes is now available. Description: This update for qemu fixes several issues. These security issues were fixed: - CVE-2017-2620: In CIRRUS_BLTMODE_MEMSYSSRC mode the bitblit copy routine cirrus_bitblt_cputovideo failed to check the memory region, allowing for an out-of-bounds write that allows for privilege escalation (bsc#1024972) - CVE-2017-2615: An error in the bitblt copy operation could have allowed a malicious guest administrator to cause an out of bounds memory access, possibly leading to information disclosure or privilege escalation (bsc#1023004) - CVE-2017-5856: The MegaRAID SAS 8708EM2 Host Bus Adapter emulation support was vulnerable to a memory leakage issue allowing a privileged user to leak host memory resulting in DoS (bsc#1023053) - CVE-2016-9776: The ColdFire Fast Ethernet Controller emulator support was vulnerable to an infinite loop issue while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could have used this issue to crash the Qemu process on the host leading to DoS (bsc#1013285) - CVE-2016-9911: The USB EHCI Emulation support was vulnerable to a memory leakage issue while processing packet data in 'ehci_init_transfer'. A guest user/process could have used this issue to leak host memory, resulting in DoS for the host (bsc#1014111) - CVE-2016-9907: The USB redirector usb-guest support was vulnerable to a memory leakage flaw when destroying the USB redirector in 'usbredir_handle_destroy'. A guest user/process could have used this issue to leak host memory, resulting in DoS for a host (bsc#1014109) - CVE-2016-9921: The Cirrus CLGD 54xx VGA Emulator support was vulnerable to a divide by zero issue while copying VGA data. A privileged user inside guest could have used this flaw to crash the process instance on the host, resulting in DoS (bsc#1014702) - CVE-2016-9922: The Cirrus CLGD 54xx VGA Emulator support was vulnerable to a divide by zero issue while copying VGA data. A privileged user inside guest could have used this flaw to crash the process instance on the host, resulting in DoS (bsc#1014702) - CVE-2016-10155: The virtual hardware watchdog 'wdt_i6300esb' was vulnerable to a memory leakage issue allowing a privileged user to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1021129) - CVE-2017-5526: The ES1370 audio device emulation support was vulnerable to a memory leakage issue allowing a privileged user inside the guest to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1020589) - CVE-2017-5525: The ac97 audio device emulation support was vulnerable to a memory leakage issue allowing a privileged user inside the guest to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1020491) - CVE-2017-5667: The SDHCI device emulation support was vulnerable to an OOB heap access issue allowing a privileged user inside the guest to crash the Qemu process resulting in DoS or potentially execute arbitrary code with privileges of the Qemu process on the host (bsc#1022541) - CVE-2017-5898: The CCID Card device emulator support was vulnerable to an integer overflow allowing a privileged user inside the guest to crash the Qemu process resulting in DoS (bnc#1023907) These non-security issues were fixed: - Fix post script for qemu-guest-agent rpm to actually activate the guest agent at rpm install time - Fixed various inaccuracies in cirrus vga device emulation - Fixed cause of infrequent migration failures from bad virtio device state (bsc#1020928) - Fixed virtio interface failure (bsc#1015048) - Fixed graphical update errors introduced by previous security fix (bsc#1016779) - Fixed uint64 property parsing and add regression tests (bsc#937125) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-589=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): qemu-2.3.1-25.1 qemu-arm-2.3.1-25.1 qemu-arm-debuginfo-2.3.1-25.1 qemu-block-curl-2.3.1-25.1 qemu-block-curl-debuginfo-2.3.1-25.1 qemu-debugsource-2.3.1-25.1 qemu-extra-2.3.1-25.1 qemu-extra-debuginfo-2.3.1-25.1 qemu-guest-agent-2.3.1-25.1 qemu-guest-agent-debuginfo-2.3.1-25.1 qemu-kvm-2.3.1-25.1 qemu-lang-2.3.1-25.1 qemu-linux-user-2.3.1-25.1 qemu-linux-user-debuginfo-2.3.1-25.1 qemu-linux-user-debugsource-2.3.1-25.1 qemu-ppc-2.3.1-25.1 qemu-ppc-debuginfo-2.3.1-25.1 qemu-s390-2.3.1-25.1 qemu-s390-debuginfo-2.3.1-25.1 qemu-tools-2.3.1-25.1 qemu-tools-debuginfo-2.3.1-25.1 qemu-x86-2.3.1-25.1 qemu-x86-debuginfo-2.3.1-25.1 - openSUSE Leap 42.1 (noarch): qemu-ipxe-1.0.0-25.1 qemu-seabios-1.8.1-25.1 qemu-sgabios-8-25.1 qemu-vgabios-1.8.1-25.1 - openSUSE Leap 42.1 (x86_64): qemu-block-rbd-2.3.1-25.1 qemu-block-rbd-debuginfo-2.3.1-25.1 qemu-testsuite-2.3.1-25.1 References: https://www.suse.com/security/cve/CVE-2016-10155.html https://www.suse.com/security/cve/CVE-2016-9776.html https://www.suse.com/security/cve/CVE-2016-9907.html https://www.suse.com/security/cve/CVE-2016-9911.html https://www.suse.com/security/cve/CVE-2016-9921.html https://www.suse.com/security/cve/CVE-2016-9922.html https://www.suse.com/security/cve/CVE-2017-2615.html https://www.suse.com/security/cve/CVE-2017-2620.html https://www.suse.com/security/cve/CVE-2017-5525.html https://www.suse.com/security/cve/CVE-2017-5526.html https://www.suse.com/security/cve/CVE-2017-5667.html https://www.suse.com/security/cve/CVE-2017-5856.html https://www.suse.com/security/cve/CVE-2017-5898.html https://bugzilla.suse.com/1013285 https://bugzilla.suse.com/1014109 https://bugzilla.suse.com/1014111 https://bugzilla.suse.com/1014702 https://bugzilla.suse.com/1015048 https://bugzilla.suse.com/1015169 https://bugzilla.suse.com/1016779 https://bugzilla.suse.com/1020491 https://bugzilla.suse.com/1020589 https://bugzilla.suse.com/1020928 https://bugzilla.suse.com/1021129 https://bugzilla.suse.com/1022541 https://bugzilla.suse.com/1023004 https://bugzilla.suse.com/1023053 https://bugzilla.suse.com/1023907 https://bugzilla.suse.com/1024972 https://bugzilla.suse.com/937125

1 0

openSUSE-SU-2017:1292-1: important: Security update for tomcat
by opensuse-security＠opensuse.org 15 May '17

15 May '17

openSUSE Security Update: Security update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1292-1 Rating: important References: #1015119 #1033447 #1033448 Cross-References: CVE-2016-8745 CVE-2017-5647 CVE-2017-5648 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for tomcat fixes the following issues: - CVE-2017-5647 Pipelined requests could lead to information disclosure (bsc#1033448) - CVE-2017-5648 Untrusted application could retain listener leading to information disclosure (bsc#1033447) - CVE-2016-8745 shared Processor on Connector code could lead to information disclosure (bsc#1015119) This update was imported from the SUSE:SLE-12-SP1:Update and SUSE:SLE-12-SP2:Update update projects. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-586=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-586=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): tomcat-8.0.43-6.7.1 tomcat-admin-webapps-8.0.43-6.7.1 tomcat-docs-webapp-8.0.43-6.7.1 tomcat-el-3_0-api-8.0.43-6.7.1 tomcat-embed-8.0.43-6.7.1 tomcat-javadoc-8.0.43-6.7.1 tomcat-jsp-2_3-api-8.0.43-6.7.1 tomcat-jsvc-8.0.43-6.7.1 tomcat-lib-8.0.43-6.7.1 tomcat-servlet-3_1-api-8.0.43-6.7.1 tomcat-webapps-8.0.43-6.7.1 - openSUSE Leap 42.1 (noarch): tomcat-8.0.43-17.1 tomcat-admin-webapps-8.0.43-17.1 tomcat-docs-webapp-8.0.43-17.1 tomcat-el-3_0-api-8.0.43-17.1 tomcat-embed-8.0.43-17.1 tomcat-javadoc-8.0.43-17.1 tomcat-jsp-2_3-api-8.0.43-17.1 tomcat-jsvc-8.0.43-17.1 tomcat-lib-8.0.43-17.1 tomcat-servlet-3_1-api-8.0.43-17.1 tomcat-webapps-8.0.43-17.1 References: https://www.suse.com/security/cve/CVE-2016-8745.html https://www.suse.com/security/cve/CVE-2017-5647.html https://www.suse.com/security/cve/CVE-2017-5648.html https://bugzilla.suse.com/1015119 https://bugzilla.suse.com/1033447 https://bugzilla.suse.com/1033448

1 0

openSUSE-RU-2017:1276-1: Recommended update for openvpn
by maintenance＠opensuse.org 15 May '17

15 May '17

openSUSE Recommended Update: Recommended update for openvpn ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1276-1 Rating: low References: #959511 #988522 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for openvpn provides the following fixes: - Perform deferred authentication in the background to not cause processing delays when the underlying PAM mechanism (e.g. LDAP) needs longer to respond. (bsc#959511) - Use FIPS approved cipher in our sample configuration file. (bsc#988522) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-587=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-587=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): openvpn-2.3.8-8.3.1 openvpn-auth-pam-plugin-2.3.8-8.3.1 openvpn-auth-pam-plugin-debuginfo-2.3.8-8.3.1 openvpn-debuginfo-2.3.8-8.3.1 openvpn-debugsource-2.3.8-8.3.1 openvpn-devel-2.3.8-8.3.1 openvpn-down-root-plugin-2.3.8-8.3.1 openvpn-down-root-plugin-debuginfo-2.3.8-8.3.1 - openSUSE Leap 42.1 (i586 x86_64): openvpn-2.3.8-9.1 openvpn-auth-pam-plugin-2.3.8-9.1 openvpn-auth-pam-plugin-debuginfo-2.3.8-9.1 openvpn-debuginfo-2.3.8-9.1 openvpn-debugsource-2.3.8-9.1 openvpn-devel-2.3.8-9.1 openvpn-down-root-plugin-2.3.8-9.1 openvpn-down-root-plugin-debuginfo-2.3.8-9.1 References: https://bugzilla.suse.com/959511 https://bugzilla.suse.com/988522

1 0

openSUSE-SU-2017:1275-1: Security update for rzip
by opensuse-security＠opensuse.org 15 May '17

15 May '17

openSUSE Security Update: Security update for rzip ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1275-1 Rating: low References: #1036941 Cross-References: CVE-2017-8364 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rzip fixes the following issues: - CVE-2017-8364: heap-based buffer overflow in read_buf function via crafted archive file could lead to crash (boo#1036941) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-571=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-571=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): rzip-2.1-151.3.1 rzip-debuginfo-2.1-151.3.1 rzip-debugsource-2.1-151.3.1 - openSUSE Leap 42.1 (i586 x86_64): rzip-2.1-151.1 rzip-debuginfo-2.1-151.1 rzip-debugsource-2.1-151.1 References: https://www.suse.com/security/cve/CVE-2017-8364.html https://bugzilla.suse.com/1036941

1 0

openSUSE-RU-2017:1274-1: Recommended update for procps
by maintenance＠opensuse.org 15 May '17

15 May '17

openSUSE Recommended Update: Recommended update for procps ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1274-1 Rating: low References: #1030621 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for procps fixes the following issues: - Command w(1) with option -n doesn't work. (bsc#1030621) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-585=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-585=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libprocps3-3.3.9-7.3.1 libprocps3-debuginfo-3.3.9-7.3.1 procps-3.3.9-7.3.1 procps-debuginfo-3.3.9-7.3.1 procps-debugsource-3.3.9-7.3.1 procps-devel-3.3.9-7.3.1 - openSUSE Leap 42.1 (i586 x86_64): libprocps3-3.3.9-10.1 libprocps3-debuginfo-3.3.9-10.1 procps-3.3.9-10.1 procps-debuginfo-3.3.9-10.1 procps-debugsource-3.3.9-10.1 procps-devel-3.3.9-10.1 References: https://bugzilla.suse.com/1030621

1 0

openSUSE-SU-2017:1273-1: important: Security update for graphite2
by opensuse-security＠opensuse.org 15 May '17

15 May '17

openSUSE Security Update: Security update for graphite2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1273-1 Rating: important References: #1035204 Cross-References: CVE-2017-5436 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for graphite2 fixes one issue. This security issues was fixed: - CVE-2017-5436: An out-of-bounds write triggered with a maliciously crafted Graphite font could lead to a crash or potentially code execution (bsc#1035204). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-570=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-570=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): graphite2-1.3.1-4.3.1 graphite2-debuginfo-1.3.1-4.3.1 graphite2-debugsource-1.3.1-4.3.1 graphite2-devel-1.3.1-4.3.1 libgraphite2-3-1.3.1-4.3.1 libgraphite2-3-debuginfo-1.3.1-4.3.1 - openSUSE Leap 42.2 (x86_64): libgraphite2-3-32bit-1.3.1-4.3.1 libgraphite2-3-debuginfo-32bit-1.3.1-4.3.1 - openSUSE Leap 42.1 (i586 x86_64): graphite2-1.3.1-6.1 graphite2-debuginfo-1.3.1-6.1 graphite2-debugsource-1.3.1-6.1 graphite2-devel-1.3.1-6.1 libgraphite2-3-1.3.1-6.1 libgraphite2-3-debuginfo-1.3.1-6.1 - openSUSE Leap 42.1 (x86_64): libgraphite2-3-32bit-1.3.1-6.1 libgraphite2-3-debuginfo-32bit-1.3.1-6.1 References: https://www.suse.com/security/cve/CVE-2017-5436.html https://bugzilla.suse.com/1035204

1 0

openSUSE-SU-2017:1272-1: important: Security update for kauth, kdelibs4
by opensuse-security＠opensuse.org 15 May '17

15 May '17

openSUSE Security Update: Security update for kauth, kdelibs4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1272-1 Rating: important References: #1036244 Cross-References: CVE-2017-8422 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kauth and kdelibs4 fixes the following issues: - CVE-2017-8422: logic flaw in the KAuth framework allowed privilege escalation (boo#1036244). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-575=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-575=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): kauth-debugsource-5.26.0-2.3.1 kauth-devel-5.26.0-2.3.1 kdelibs4-4.14.25-7.4.1 kdelibs4-branding-upstream-4.14.25-7.4.1 kdelibs4-core-4.14.25-7.4.1 kdelibs4-core-debuginfo-4.14.25-7.4.1 kdelibs4-debuginfo-4.14.25-7.4.1 kdelibs4-debugsource-4.14.25-7.4.1 kdelibs4-doc-4.14.25-7.4.1 kdelibs4-doc-debuginfo-4.14.25-7.4.1 libKF5Auth5-5.26.0-2.3.1 libKF5Auth5-debuginfo-5.26.0-2.3.1 libkde4-4.14.25-7.4.1 libkde4-debuginfo-4.14.25-7.4.1 libkde4-devel-4.14.25-7.4.1 libkdecore4-4.14.25-7.4.1 libkdecore4-debuginfo-4.14.25-7.4.1 libkdecore4-devel-4.14.25-7.4.1 libkdecore4-devel-debuginfo-4.14.25-7.4.1 libksuseinstall-devel-4.14.25-7.4.1 libksuseinstall1-4.14.25-7.4.1 libksuseinstall1-debuginfo-4.14.25-7.4.1 - openSUSE Leap 42.2 (x86_64): kauth-devel-32bit-5.26.0-2.3.1 libKF5Auth5-32bit-5.26.0-2.3.1 libKF5Auth5-debuginfo-32bit-5.26.0-2.3.1 libkde4-32bit-4.14.25-7.4.1 libkde4-debuginfo-32bit-4.14.25-7.4.1 libkdecore4-32bit-4.14.25-7.4.1 libkdecore4-debuginfo-32bit-4.14.25-7.4.1 libksuseinstall1-32bit-4.14.25-7.4.1 libksuseinstall1-debuginfo-32bit-4.14.25-7.4.1 - openSUSE Leap 42.2 (noarch): kdelibs4-apidocs-4.14.25-7.4.1 libKF5Auth5-lang-5.26.0-2.3.1 - openSUSE Leap 42.1 (i586 x86_64): kauth-debugsource-5.21.0-16.1 kauth-devel-5.21.0-16.1 kdelibs4-4.14.18-18.1 kdelibs4-branding-upstream-4.14.18-18.1 kdelibs4-core-4.14.18-18.1 kdelibs4-core-debuginfo-4.14.18-18.1 kdelibs4-debuginfo-4.14.18-18.1 kdelibs4-debugsource-4.14.18-18.1 kdelibs4-doc-4.14.18-18.1 kdelibs4-doc-debuginfo-4.14.18-18.1 libKF5Auth5-5.21.0-16.1 libKF5Auth5-debuginfo-5.21.0-16.1 libkde4-4.14.18-18.1 libkde4-debuginfo-4.14.18-18.1 libkde4-devel-4.14.18-18.1 libkdecore4-4.14.18-18.1 libkdecore4-debuginfo-4.14.18-18.1 libkdecore4-devel-4.14.18-18.1 libkdecore4-devel-debuginfo-4.14.18-18.1 libksuseinstall-devel-4.14.18-18.1 libksuseinstall1-4.14.18-18.1 libksuseinstall1-debuginfo-4.14.18-18.1 - openSUSE Leap 42.1 (noarch): kdelibs4-apidocs-4.14.18-18.1 libKF5Auth5-lang-5.21.0-16.1 - openSUSE Leap 42.1 (x86_64): kauth-devel-32bit-5.21.0-16.1 libKF5Auth5-32bit-5.21.0-16.1 libKF5Auth5-debuginfo-32bit-5.21.0-16.1 libkde4-32bit-4.14.18-18.1 libkde4-debuginfo-32bit-4.14.18-18.1 libkdecore4-32bit-4.14.18-18.1 libkdecore4-debuginfo-32bit-4.14.18-18.1 libksuseinstall1-32bit-4.14.18-18.1 libksuseinstall1-debuginfo-32bit-4.14.18-18.1 References: https://www.suse.com/security/cve/CVE-2017-8422.html https://bugzilla.suse.com/1036244

1 0