June 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:1498-1: Recommended update for opera
by maintenance＠opensuse.org 06 Jun '17

06 Jun '17

openSUSE Recommended Update: Recommended update for opera ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1498-1 Rating: low References: #1042843 Affected Products: openSUSE Leap 42.2:NonFree ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides a new version of opera and fixes serveral issues: - Update to version 45.0.2552.888: * Full changelog available at: https://blogs.opera.com/desktop/changelog-for-45/#b2552.888 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2:NonFree: zypper in -t patch openSUSE-2017-659=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2:NonFree (x86_64): opera-45.0.2552.888-44.1 References: https://bugzilla.suse.com/1042843

1 0

openSUSE-SU-2017:1497-1: important: Security update for deluge
by opensuse-security＠opensuse.org 06 Jun '17

06 Jun '17

openSUSE Security Update: Security update for deluge ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1497-1 Rating: important References: #1039815 #1039958 Cross-References: CVE-2017-7178 CVE-2017-9031 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for deluge fixes two security issues: - CVE-2017-9031: A remote attacker may have used a directory traversal vulnerability in the web interface (bsc#1039815) - CVE-2017-7178: A remote attacher could have exploited a CSRF vulnerability to trick a logged-in user to perform actions in the WebUI (bsc#1039958) In addition, deluge was updated to 1.3.15 with the following fixes and changes: - Core: Fix issues with displaying libtorrent-rasterbar single proxy. - Core: Fix libtorrent-rasterbar 1.2 trackers crashing Deluge UIs. - Core: Fix an error in torrent priorities causing file priority mismatch in UIs. - GtkUI: Fix column sort state not saved in Thinclient mode. - GtkUI: Fix a connection manager error with malformed ip. - GtkUI: Rename SystemTray/Indicator "Pause/Resume All" to "Pause/Resume Session". - GtkUI: Workaround libtorrent-rasterbar single proxy by greying out unused proxy types. - Notification Plugin: Fix webui passing string for int port value. - AutoAdd Plugin: Add WebUI preferences page detailing lack of configuration via WebUI. - Label Plugin: Add WebUI preferences page detailing how to configure plugin. - Core: Fix 'Too many files open' errors. - Core: Add support for python-GeoIP for use with libtorrent 1.1. - Core: Fix a single proxy entry being overwritten resulting in no proxy set. - UI: Add the tracker_status translation to UIs. - GtkUI: Strip whitespace from infohash before checks. - GtkUI: Add a missed feature autofill infohash entry from clipboard. - WebUI: Backport bind interface option for server. - ConsoleUI: Fix a decode error comparing non-ascii (str) torrent names. - AutoAdd Plugin: Fixes for splitting magnets from file. - Remove the duplicate magnet extension when splitting. - Remove deluge-libtorrent-1.1-geoip.patch: fixed upstream. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-656=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): deluge-1.3.15-3.3.1 deluge-lang-1.3.15-3.3.1 References: https://www.suse.com/security/cve/CVE-2017-7178.html https://www.suse.com/security/cve/CVE-2017-9031.html https://bugzilla.suse.com/1039815 https://bugzilla.suse.com/1039958

1 0

openSUSE-RU-2017:1496-1: Recommended update for clamav-database
by maintenance＠opensuse.org 06 Jun '17

06 Jun '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1496-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh June 5th 2017. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-658=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201706050005-54.36.1 References:

1 0

openSUSE-SU-2017:1495-1: moderate: Security update for postgresql93
by opensuse-security＠opensuse.org 06 Jun '17

06 Jun '17

openSUSE Security Update: Security update for postgresql93 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1495-1 Rating: moderate References: #1037603 #1037624 #1038293 Cross-References: CVE-2017-7484 CVE-2017-7485 CVE-2017-7486 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for postgresql93 fixes the following issues: The PostgreSQL package was updated to 9.3.17, bringing various bug and security fixes. Security fixes: - CVE-2017-7486: Restrict visibility of pg_user_mappings.umoptions, to protect passwords stored as user mapping options. (bsc#1037624) - CVE-2017-7485: Recognize PGREQUIRESSL variable again. (bsc#1038293) - CVE-2017-7484: Prevent exposure of statistical information via leaky operators. (bsc#1037603) More details can be found in the PostgreSQL release announcements: - https://www.postgresql.org/docs/9.3/static/release-9-3-17.html - https://www.postgresql.org/docs/9.3/static/release-9-3-16.html - https://www.postgresql.org/docs/9.3/static/release-9-3-15.html This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-657=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): postgresql93-devel-9.3.17-5.9.1 postgresql93-devel-debuginfo-9.3.17-5.9.1 postgresql93-libs-debugsource-9.3.17-5.9.1 - openSUSE Leap 42.2 (x86_64): postgresql93-9.3.17-5.9.1 postgresql93-contrib-9.3.17-5.9.1 postgresql93-contrib-debuginfo-9.3.17-5.9.1 postgresql93-debuginfo-9.3.17-5.9.1 postgresql93-debugsource-9.3.17-5.9.1 postgresql93-plperl-9.3.17-5.9.1 postgresql93-plperl-debuginfo-9.3.17-5.9.1 postgresql93-plpython-9.3.17-5.9.1 postgresql93-plpython-debuginfo-9.3.17-5.9.1 postgresql93-pltcl-9.3.17-5.9.1 postgresql93-pltcl-debuginfo-9.3.17-5.9.1 postgresql93-server-9.3.17-5.9.1 postgresql93-server-debuginfo-9.3.17-5.9.1 postgresql93-test-9.3.17-5.9.1 - openSUSE Leap 42.2 (noarch): postgresql93-docs-9.3.17-5.9.1 References: https://www.suse.com/security/cve/CVE-2017-7484.html https://www.suse.com/security/cve/CVE-2017-7485.html https://www.suse.com/security/cve/CVE-2017-7486.html https://bugzilla.suse.com/1037603 https://bugzilla.suse.com/1037624 https://bugzilla.suse.com/1038293

1 0

openSUSE-RU-2017:1494-1: Recommended update for amavisd-new
by maintenance＠opensuse.org 06 Jun '17

06 Jun '17

openSUSE Recommended Update: Recommended update for amavisd-new ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1494-1 Rating: low References: #1014157 #1014205 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for amavisd-new provides the following fixes: - Properly create /etc/sysconfig/amavis at installation time. (bsc#1014205) - Add "spamassassin" to requirements list. (bsc#1014157) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-652=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): amavisd-new-2.8.1-5.3.1 amavisd-new-debuginfo-2.8.1-5.3.1 amavisd-new-debugsource-2.8.1-5.3.1 amavisd-new-docs-2.8.1-5.3.1 References: https://bugzilla.suse.com/1014157 https://bugzilla.suse.com/1014205

1 0

openSUSE-OU-2017:1493-1: Initial update for lua51-luajit
by maintenance＠opensuse.org 06 Jun '17

06 Jun '17

openSUSE Optional Update: Initial update for lua51-luajit ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:1493-1 Rating: low References: #1042862 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update provides lua51-luajit for Backports:SLE-12-SP2: LuaJIT is a Just-In-Time Compiler (JIT) for the Lua programming language. Lua is a powerful, dynamic and light-weight programming language. It may be embedded or used as a general-purpose, stand-alone language. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-655=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): libluajit-5_1-2-2.1.0~beta2-2.1 lua51-luajit-2.1.0~beta2-2.1 lua51-luajit-devel-2.1.0~beta2-2.1 References: https://bugzilla.suse.com/1042862

1 0

openSUSE-RU-2017:1491-1: Recommended update for Enlightenment
by maintenance＠opensuse.org 06 Jun '17

06 Jun '17

openSUSE Recommended Update: Recommended update for Enlightenment ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1491-1 Rating: low References: #1041477 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides enlightenment 0.21.8 and contains various bugs and fixes. Changes in enlightenment: - Calling canvas event feed functions during a post event callback breaks the canvas. - Enlightenment crashes when launching bryce configuration. - Can't select custom wallpaper on non-primary displays. - EFM -> Delete -> Crash (race). - Hide, then show existing elm win hides but doesn't show again. - Image native_surface_set() does not set load error on failure. - elm_win_iconified_set(Elm_Win *obj, Eina_Bool iconified ) only works with composite effects enabled. - Screen doesn't blank if "disable blanking for fullscreen windows" is on, even when there's no fullscreen window. This update also provides Enlightenment Foundation Libraries (efl) 1.18.5, fixing several issues: - Ecore_fb_init(): use 'name' parameter similar to ecore_evas_fb_new(). - Fix scripts compilation for edje_edit. - Fix for working item reorder mode correctly. - LINE_APPEND Render fix. - Fix EGL engine for recent nvidia binary. - Fix compilation for EGL < 1.5. - Early check image bpp based on depth (T4389). - Ecore animator - the anim thread is polled on shutdown use volatile. - Ecore anim - actually fix by checking fd not thread handle. - Fix handling of some keys. - Fix hang in wayland due to pulse audio connecting to X. - Disable subtitles by default as that should be - Wl_drm and eayland_egl buffer age fix for gl when age changes. - Fix reproducable build issues. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-651=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): edje-1.18.5-6.3.1 edje-debuginfo-1.18.5-6.3.1 efl-1.18.5-6.3.1 efl-debuginfo-1.18.5-6.3.1 efl-debugsource-1.18.5-6.3.1 efl-devel-1.18.5-6.3.1 efl-devel-debuginfo-1.18.5-6.3.1 efl-examples-1.18.5-6.3.1 efl-testsuite-1.18.5-6.3.1 elementary-1.18.5-6.3.1 elementary-debuginfo-1.18.5-6.3.1 elementary-examples-1.18.5-6.3.1 elua-1.18.5-6.3.1 embryo-1.18.5-6.3.1 embryo-debuginfo-1.18.5-6.3.1 enlightenment-0.21.8-2.6.1 enlightenment-branding-upstream-0.21.8-2.6.1 enlightenment-debuginfo-0.21.8-2.6.1 enlightenment-debugsource-0.21.8-2.6.1 enlightenment-devel-0.21.8-2.6.1 enlightenment-doc-html-0.21.8-2.6.1 enlightenment-theme-dark-0.21.0-6.3.1 enlightenment-theme-upstream-0.21.0-6.3.1 enlightenment-x-dark-icon-theme-1.18.5-6.3.1 evas-generic-loaders-1.18.5-6.3.1 evas-generic-loaders-debuginfo-1.18.5-6.3.1 libecore1-1.18.5-6.3.1 libecore1-debuginfo-1.18.5-6.3.1 libector1-1.18.5-6.3.1 libector1-debuginfo-1.18.5-6.3.1 libedje1-1.18.5-6.3.1 libedje1-debuginfo-1.18.5-6.3.1 libeet1-1.18.5-6.3.1 libeet1-debuginfo-1.18.5-6.3.1 libeeze1-1.18.5-6.3.1 libeeze1-debuginfo-1.18.5-6.3.1 libefl1-1.18.5-6.3.1 libefl1-debuginfo-1.18.5-6.3.1 libefreet1-1.18.5-6.3.1 libefreet1-debuginfo-1.18.5-6.3.1 libefreet_mime1-1.18.5-6.3.1 libefreet_mime1-debuginfo-1.18.5-6.3.1 libefreet_trash1-1.18.5-6.3.1 libefreet_trash1-debuginfo-1.18.5-6.3.1 libeina1-1.18.5-6.3.1 libeina1-debuginfo-1.18.5-6.3.1 libeio1-1.18.5-6.3.1 libeio1-debuginfo-1.18.5-6.3.1 libeldbus1-1.18.5-6.3.1 libeldbus1-debuginfo-1.18.5-6.3.1 libelocation1-1.18.5-6.3.1 libelocation1-debuginfo-1.18.5-6.3.1 libelua1-1.18.5-6.3.1 libelua1-debuginfo-1.18.5-6.3.1 libembryo1-1.18.5-6.3.1 libembryo1-debuginfo-1.18.5-6.3.1 libemile1-1.18.5-6.3.1 libemile1-debuginfo-1.18.5-6.3.1 libemotion1-1.18.5-6.3.1 libemotion1-debuginfo-1.18.5-6.3.1 libeo1-1.18.5-6.3.1 libeo1-debuginfo-1.18.5-6.3.1 libeolian1-1.18.5-6.3.1 libeolian1-debuginfo-1.18.5-6.3.1 libephysics1-1.18.5-6.3.1 libephysics1-debuginfo-1.18.5-6.3.1 libethumb1-1.18.5-6.3.1 libethumb1-debuginfo-1.18.5-6.3.1 libethumb_client1-1.18.5-6.3.1 libethumb_client1-debuginfo-1.18.5-6.3.1 libevas1-1.18.5-6.3.1 libevas1-debuginfo-1.18.5-6.3.1 References: https://bugzilla.suse.com/1041477

1 0

openSUSE-RU-2017:1490-1: Recommended update for cryptsetup
by maintenance＠opensuse.org 06 Jun '17

06 Jun '17

openSUSE Recommended Update: Recommended update for cryptsetup ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1490-1 Rating: low References: #1031998 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cryptsetup provides the following fix: - Don't use a zero-filled empty key, because in FIPS, XTS mode key parts mustn't be equivalent (bsc#1031998) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-653=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): cryptsetup-1.6.4-5.3.1 cryptsetup-debuginfo-1.6.4-5.3.1 cryptsetup-debugsource-1.6.4-5.3.1 libcryptsetup-devel-1.6.4-5.3.1 libcryptsetup4-1.6.4-5.3.1 libcryptsetup4-debuginfo-1.6.4-5.3.1 libcryptsetup4-hmac-1.6.4-5.3.1 - openSUSE Leap 42.2 (x86_64): libcryptsetup4-32bit-1.6.4-5.3.1 libcryptsetup4-debuginfo-32bit-1.6.4-5.3.1 libcryptsetup4-hmac-32bit-1.6.4-5.3.1 References: https://bugzilla.suse.com/1031998

1 0

openSUSE-OU-2017:1487-1: Optional update for liberasurecode
by maintenance＠opensuse.org 06 Jun '17

06 Jun '17

openSUSE Optional Update: Optional update for liberasurecode ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:1487-1 Rating: low References: #1041161 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update provides liberasurecode 1.4.0 for openSUSE Leap 42.2. The package is an erasure code API library with pluggable erasure code backends, required for Swift for OpenStack. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-654=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): liberasurecode-debugsource-1.4.0-2.1 liberasurecode-devel-1.4.0-2.1 liberasurecode1-1.4.0-2.1 liberasurecode1-debuginfo-1.4.0-2.1 References: https://bugzilla.suse.com/1041161

1 0

openSUSE-SU-2017:1485-1: moderate: Security update for libupnp
by opensuse-security＠opensuse.org 05 Jun '17

05 Jun '17

openSUSE Security Update: Security update for libupnp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1485-1 Rating: moderate References: #1006256 #898167 #989948 Cross-References: CVE-2016-6255 CVE-2016-8863 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update to libupnp 1.6.21 fixes the following security issues: - various string handling issues (bsc#898167) - CVE-2016-8863: out-of-bounds access (bsc#1006256) - CVE-2016-6255: fix for file write via POST (bsc#989948) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-650=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libupnp-debugsource-1.6.21-4.3.1 libupnp-devel-1.6.21-4.3.1 libupnp6-1.6.21-4.3.1 libupnp6-debuginfo-1.6.21-4.3.1 - openSUSE Leap 42.2 (x86_64): libupnp6-32bit-1.6.21-4.3.1 libupnp6-debuginfo-32bit-1.6.21-4.3.1 References: https://www.suse.com/security/cve/CVE-2016-6255.html https://www.suse.com/security/cve/CVE-2016-8863.html https://bugzilla.suse.com/1006256 https://bugzilla.suse.com/898167 https://bugzilla.suse.com/989948

1 0

openSUSE-RU-2017:1483-1: Recommended update for ntp
by maintenance＠opensuse.org 02 Jun '17

02 Jun '17

openSUSE Recommended Update: Recommended update for ntp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1483-1 Rating: low References: #1034892 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ntp provides the following fix: - Fix systemd migration in %pre (bsc#1034892) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-646=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ntp-4.2.8p10-29.6.1 ntp-debuginfo-4.2.8p10-29.6.1 ntp-debugsource-4.2.8p10-29.6.1 ntp-doc-4.2.8p10-29.6.1 References: https://bugzilla.suse.com/1034892

1 0

openSUSE-RU-2017:1482-1: moderate: Recommended update for gstreamer-plugins-good
by maintenance＠opensuse.org 02 Jun '17

02 Jun '17

openSUSE Recommended Update: Recommended update for gstreamer-plugins-good ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1482-1 Rating: moderate References: #1031890 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gstreamer-plugins-good fixes atomic file writes in "buffer" mode. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-648=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gstreamer-plugins-good-1.8.3-5.6.1 gstreamer-plugins-good-debuginfo-1.8.3-5.6.1 gstreamer-plugins-good-debugsource-1.8.3-5.6.1 gstreamer-plugins-good-doc-1.8.3-5.6.1 gstreamer-plugins-good-extra-1.8.3-5.6.1 gstreamer-plugins-good-extra-debuginfo-1.8.3-5.6.1 - openSUSE Leap 42.2 (x86_64): gstreamer-plugins-good-32bit-1.8.3-5.6.1 gstreamer-plugins-good-debuginfo-32bit-1.8.3-5.6.1 gstreamer-plugins-good-extra-32bit-1.8.3-5.6.1 gstreamer-plugins-good-extra-debuginfo-32bit-1.8.3-5.6.1 - openSUSE Leap 42.2 (noarch): gstreamer-plugins-good-lang-1.8.3-5.6.1 References: https://bugzilla.suse.com/1031890

1 0

openSUSE-RU-2017:1480-1: Recommended update for yast2-network
by maintenance＠opensuse.org 02 Jun '17

02 Jun '17

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1480-1 Rating: low References: #1036440 #994471 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-network provides the following fix: - Command "yast remote list" should not alter the system (bsc#1036440, bsc#994471) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-647=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): yast2-network-3.1.177-5.6.1 References: https://bugzilla.suse.com/1036440 https://bugzilla.suse.com/994471

1 0

openSUSE-RU-2017:1478-1: Recommended update for e2fsprogs
by maintenance＠opensuse.org 02 Jun '17

02 Jun '17

openSUSE Recommended Update: Recommended update for e2fsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1478-1 Rating: low References: #1009532 #960273 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for e2fsprogs provides the following fixes: - Fix 32/64-bit overflow when multiplying by blocks/clusters per group. This allows resize2fs(8) to resize file systems larger than 20 TB. (bsc#1009532) - Update spec file to regenerate initrd when e2fsprogs is updated or uninstalled. (bsc#960273) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-645=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): e2fsprogs-1.42.11-12.3.1 e2fsprogs-debuginfo-1.42.11-12.3.1 e2fsprogs-debugsource-1.42.11-12.3.1 e2fsprogs-devel-1.42.11-12.3.1 libcom_err-devel-1.42.11-12.3.1 libcom_err2-1.42.11-12.3.1 libcom_err2-debuginfo-1.42.11-12.3.1 libext2fs-devel-1.42.11-12.3.1 libext2fs2-1.42.11-12.3.1 libext2fs2-debuginfo-1.42.11-12.3.1 - openSUSE Leap 42.2 (x86_64): e2fsprogs-debuginfo-32bit-1.42.11-12.3.1 libcom_err-devel-32bit-1.42.11-12.3.1 libcom_err2-32bit-1.42.11-12.3.1 libcom_err2-debuginfo-32bit-1.42.11-12.3.1 libext2fs-devel-32bit-1.42.11-12.3.1 libext2fs2-32bit-1.42.11-12.3.1 libext2fs2-debuginfo-32bit-1.42.11-12.3.1 References: https://bugzilla.suse.com/1009532 https://bugzilla.suse.com/960273

1 0

openSUSE-SU-2017:1475-1: important: Security update for mariadb
by opensuse-security＠opensuse.org 02 Jun '17

02 Jun '17

openSUSE Security Update: Security update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1475-1 Rating: important References: #1020868 #1020890 #1020976 #1022428 #1034911 #1038740 #996821 Cross-References: CVE-2017-3302 CVE-2017-3313 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has 5 fixes is now available. Description: This update for mariadb fixes the following issues: - update to MariaDB 10.0.30 GA * notable changes: * XtraDB updated to 5.6.35-80.0 * TokuDB updated to 5.6.35-80.0 * PCRE updated to 8.40 * MDEV-11027: better InnoDB crash recovery progress reporting * MDEV-11520: improvements to how InnoDB data files are extended * Improvements to InnoDB startup/shutdown to make it more robust * MDEV-11233: fix for FULLTEXT index crash * MDEV-6143: MariaDB Linux binary tarballs will now always untar to directories that match their filename * release notes and changelog: * https://kb.askmonty.org/en/mariadb-10030-release-notes * https://kb.askmonty.org/en/mariadb-10030-changelog * fixes the following CVEs: CVE-2017-3313: unspecified vulnerability affecting the MyISAM component [bsc#1020890] CVE-2017-3302: Use after free in libmysqlclient.so [bsc#1022428] - set the default umask to 077 in mysql-systemd-helper [bsc#1020976] - [bsc#1034911] - tracker bug * fixes also [bsc#1020868] This update for mariadb fixes permissions for /var/run/mysql in mysql-systemd-helper that were incorrectly set to 700 instead of 755 due to umask. This prevented non-root users from connecting to the database. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-644=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libmysqlclient-devel-10.0.30-20.4.1 libmysqlclient18-10.0.30-20.4.1 libmysqlclient18-debuginfo-10.0.30-20.4.1 libmysqlclient_r18-10.0.30-20.4.1 libmysqld-devel-10.0.30-20.4.1 libmysqld18-10.0.30-20.4.1 libmysqld18-debuginfo-10.0.30-20.4.1 mariadb-10.0.30-20.4.1 mariadb-bench-10.0.30-20.4.1 mariadb-bench-debuginfo-10.0.30-20.4.1 mariadb-client-10.0.30-20.4.1 mariadb-client-debuginfo-10.0.30-20.4.1 mariadb-debuginfo-10.0.30-20.4.1 mariadb-debugsource-10.0.30-20.4.1 mariadb-errormessages-10.0.30-20.4.1 mariadb-test-10.0.30-20.4.1 mariadb-test-debuginfo-10.0.30-20.4.1 mariadb-tools-10.0.30-20.4.1 mariadb-tools-debuginfo-10.0.30-20.4.1 - openSUSE Leap 42.2 (x86_64): libmysqlclient18-32bit-10.0.30-20.4.1 libmysqlclient18-debuginfo-32bit-10.0.30-20.4.1 libmysqlclient_r18-32bit-10.0.30-20.4.1 References: https://www.suse.com/security/cve/CVE-2017-3302.html https://www.suse.com/security/cve/CVE-2017-3313.html https://bugzilla.suse.com/1020868 https://bugzilla.suse.com/1020890 https://bugzilla.suse.com/1020976 https://bugzilla.suse.com/1022428 https://bugzilla.suse.com/1034911 https://bugzilla.suse.com/1038740 https://bugzilla.suse.com/996821

1 0

openSUSE-RU-2017:1470-1: moderate: Recommended update for ffmpeg
by maintenance＠opensuse.org 01 Jun '17

01 Jun '17

openSUSE Recommended Update: Recommended update for ffmpeg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1470-1 Rating: moderate References: #1041794 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ffmpeg fixes the following issue: * Browsers would fail play some online videos by selecting H264 over webm (boo#1041794) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-642=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ffmpeg-3.3-6.9.1 ffmpeg-debuginfo-3.3-6.9.1 ffmpeg-debugsource-3.3-6.9.1 libavcodec-devel-3.3-6.9.1 libavcodec57-3.3-6.9.1 libavcodec57-debuginfo-3.3-6.9.1 libavdevice-devel-3.3-6.9.1 libavdevice57-3.3-6.9.1 libavdevice57-debuginfo-3.3-6.9.1 libavfilter-devel-3.3-6.9.1 libavfilter6-3.3-6.9.1 libavfilter6-debuginfo-3.3-6.9.1 libavformat-devel-3.3-6.9.1 libavformat57-3.3-6.9.1 libavformat57-debuginfo-3.3-6.9.1 libavresample-devel-3.3-6.9.1 libavresample3-3.3-6.9.1 libavresample3-debuginfo-3.3-6.9.1 libavutil-devel-3.3-6.9.1 libavutil55-3.3-6.9.1 libavutil55-debuginfo-3.3-6.9.1 libpostproc-devel-3.3-6.9.1 libpostproc54-3.3-6.9.1 libpostproc54-debuginfo-3.3-6.9.1 libswresample-devel-3.3-6.9.1 libswresample2-3.3-6.9.1 libswresample2-debuginfo-3.3-6.9.1 libswscale-devel-3.3-6.9.1 libswscale4-3.3-6.9.1 libswscale4-debuginfo-3.3-6.9.1 - openSUSE Leap 42.2 (x86_64): libavcodec57-32bit-3.3-6.9.1 libavcodec57-debuginfo-32bit-3.3-6.9.1 libavdevice57-32bit-3.3-6.9.1 libavdevice57-debuginfo-32bit-3.3-6.9.1 libavfilter6-32bit-3.3-6.9.1 libavfilter6-debuginfo-32bit-3.3-6.9.1 libavformat57-32bit-3.3-6.9.1 libavformat57-debuginfo-32bit-3.3-6.9.1 libavresample3-32bit-3.3-6.9.1 libavresample3-debuginfo-32bit-3.3-6.9.1 libavutil55-32bit-3.3-6.9.1 libavutil55-debuginfo-32bit-3.3-6.9.1 libpostproc54-32bit-3.3-6.9.1 libpostproc54-debuginfo-32bit-3.3-6.9.1 libswresample2-32bit-3.3-6.9.1 libswresample2-debuginfo-32bit-3.3-6.9.1 libswscale4-32bit-3.3-6.9.1 libswscale4-debuginfo-32bit-3.3-6.9.1 References: https://bugzilla.suse.com/1041794

1 0