June 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:1598-1: Recommended update for erlang
by maintenance＠opensuse.org 19 Jun '17

19 Jun '17

openSUSE Recommended Update: Recommended update for erlang ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1598-1 Rating: low References: #1042887 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides erlang 18.3.4.5 and fixes the following issues: - crypto: Key exchange algorithms diffie-hellman-group-exchange-sha- optimized, up to a factor of 11 for the slowest ( = biggest and safest) one. - erts: A bug has been fixed where if erlang was started +B on a unix platform it would be killed by a SIGUSR2 signal when creating a crash dump. - erts: Calls to erl_drv_send_term() or erl_drv_output_term() from a non-scheduler thread while the corresponding port was invalid caused the emulator to enter an inconsistent state which eventually caused an emulator crash. - erts: Driver and NIF operations accessing processes or ports could cause an emulator crash when used from non-scheduler threads. - erts: Fix bug in binary_to_term for binaries created by term_to_binary with option compressed. The bug can cause badarg exception for a valid binary when Erlang VM is linked against a zlib library of version 1.2.9 or newer. Bug exists since OTP 17.0. - inets: Shutdown gracefully on connection or TLS handshake errors - ssh: The key exchange algorithm diffie-hellman-group-exchange-sha- has a server-option {dh_gex_limits,{Min,Max}}. There was a hostkey signature validation error on the client side if the option was used and the Min or the Max differed fromthe corresponding values obtained from the client. - ssh: Key exchange algorithms diffie-hellman-group-exchange-sha- optimized, up to a factor of 11 for the slowest ( = biggest and safest) one. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-704=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): erlang-18.3.4.5-6.1 erlang-debugger-18.3.4.5-6.1 erlang-debugger-src-18.3.4.5-6.1 erlang-debuginfo-18.3.4.5-6.1 erlang-debugsource-18.3.4.5-6.1 erlang-dialyzer-18.3.4.5-6.1 erlang-dialyzer-debuginfo-18.3.4.5-6.1 erlang-dialyzer-src-18.3.4.5-6.1 erlang-diameter-18.3.4.5-6.1 erlang-diameter-src-18.3.4.5-6.1 erlang-doc-18.3.4.5-6.1 erlang-epmd-18.3.4.5-6.1 erlang-epmd-debuginfo-18.3.4.5-6.1 erlang-et-18.3.4.5-6.1 erlang-et-src-18.3.4.5-6.1 erlang-gs-18.3.4.5-6.1 erlang-gs-src-18.3.4.5-6.1 erlang-jinterface-18.3.4.5-6.1 erlang-jinterface-src-18.3.4.5-6.1 erlang-observer-18.3.4.5-6.1 erlang-observer-src-18.3.4.5-6.1 erlang-reltool-18.3.4.5-6.1 erlang-reltool-src-18.3.4.5-6.1 erlang-src-18.3.4.5-6.1 erlang-wx-18.3.4.5-6.1 erlang-wx-debuginfo-18.3.4.5-6.1 erlang-wx-src-18.3.4.5-6.1 References: https://bugzilla.suse.com/1042887

1 0

openSUSE-RU-2017:1597-1: Recommended update for erlang
by maintenance＠opensuse.org 19 Jun '17

19 Jun '17

openSUSE Recommended Update: Recommended update for erlang ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1597-1 Rating: low References: #1042887 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides erlang 18.3.4.5 and fixes the following issues: - crypto: Key exchange algorithms diffie-hellman-group-exchange-sha- optimized, up to a factor of 11 for the slowest ( = biggest and safest) one. - erts: A bug has been fixed where if erlang was started +B on a unix platform it would be killed by a SIGUSR2 signal when creating a crash dump. - erts: Calls to erl_drv_send_term() or erl_drv_output_term() from a non-scheduler thread while the corresponding port was invalid caused the emulator to enter an inconsistent state which eventually caused an emulator crash. - erts: Driver and NIF operations accessing processes or ports could cause an emulator crash when used from non-scheduler threads. - erts: Fix bug in binary_to_term for binaries created by term_to_binary with option compressed. The bug can cause badarg exception for a valid binary when Erlang VM is linked against a zlib library of version 1.2.9 or newer. Bug exists since OTP 17.0. - inets: Shutdown gracefully on connection or TLS handshake errors - ssh: The key exchange algorithm diffie-hellman-group-exchange-sha- has a server-option {dh_gex_limits,{Min,Max}}. There was a hostkey signature validation error on the client side if the option was used and the Min or the Max differed fromthe corresponding values obtained from the client. - ssh: Key exchange algorithms diffie-hellman-group-exchange-sha- optimized, up to a factor of 11 for the slowest ( = biggest and safest) one. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-704=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): erlang-18.3.4.5-2.4.2 erlang-debugger-18.3.4.5-2.4.2 erlang-debugger-src-18.3.4.5-2.4.2 erlang-debuginfo-18.3.4.5-2.4.2 erlang-debugsource-18.3.4.5-2.4.2 erlang-dialyzer-18.3.4.5-2.4.2 erlang-dialyzer-debuginfo-18.3.4.5-2.4.2 erlang-dialyzer-src-18.3.4.5-2.4.2 erlang-diameter-18.3.4.5-2.4.2 erlang-diameter-src-18.3.4.5-2.4.2 erlang-doc-18.3.4.5-2.4.2 erlang-epmd-18.3.4.5-2.4.2 erlang-epmd-debuginfo-18.3.4.5-2.4.2 erlang-et-18.3.4.5-2.4.2 erlang-et-src-18.3.4.5-2.4.2 erlang-gs-18.3.4.5-2.4.2 erlang-gs-src-18.3.4.5-2.4.2 erlang-jinterface-18.3.4.5-2.4.2 erlang-jinterface-src-18.3.4.5-2.4.2 erlang-observer-18.3.4.5-2.4.2 erlang-observer-src-18.3.4.5-2.4.2 erlang-reltool-18.3.4.5-2.4.2 erlang-reltool-src-18.3.4.5-2.4.2 erlang-src-18.3.4.5-2.4.2 erlang-wx-18.3.4.5-2.4.2 erlang-wx-debuginfo-18.3.4.5-2.4.2 erlang-wx-src-18.3.4.5-2.4.2 References: https://bugzilla.suse.com/1042887

1 0

openSUSE-RU-2017:1596-1: Recommended update for virtualbox
by maintenance＠opensuse.org 19 Jun '17

19 Jun '17

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1596-1 Rating: low References: #1041137 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for virtualbox fixes the following issues: - Revise warning screen concerning USB passthrough. (boo#1041137) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-702=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): python-virtualbox-5.1.22-19.21.1 python-virtualbox-debuginfo-5.1.22-19.21.1 virtualbox-5.1.22-19.21.1 virtualbox-debuginfo-5.1.22-19.21.1 virtualbox-debugsource-5.1.22-19.21.1 virtualbox-devel-5.1.22-19.21.1 virtualbox-guest-kmp-default-5.1.22_k4.4.70_18.9-19.21.1 virtualbox-guest-kmp-default-debuginfo-5.1.22_k4.4.70_18.9-19.21.1 virtualbox-guest-tools-5.1.22-19.21.1 virtualbox-guest-tools-debuginfo-5.1.22-19.21.1 virtualbox-guest-x11-5.1.22-19.21.1 virtualbox-guest-x11-debuginfo-5.1.22-19.21.1 virtualbox-host-kmp-default-5.1.22_k4.4.70_18.9-19.21.1 virtualbox-host-kmp-default-debuginfo-5.1.22_k4.4.70_18.9-19.21.1 virtualbox-qt-5.1.22-19.21.1 virtualbox-qt-debuginfo-5.1.22-19.21.1 virtualbox-vnc-5.1.22-19.21.1 virtualbox-websrv-5.1.22-19.21.1 virtualbox-websrv-debuginfo-5.1.22-19.21.1 - openSUSE Leap 42.2 (noarch): virtualbox-guest-desktop-icons-5.1.22-19.21.1 virtualbox-guest-source-5.1.22-19.21.1 virtualbox-host-source-5.1.22-19.21.1 References: https://bugzilla.suse.com/1041137

1 0

openSUSE-SU-2017:1595-1: moderate: Security update for lynis
by opensuse-security＠opensuse.org 19 Jun '17

19 Jun '17

openSUSE Security Update: Security update for lynis ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1595-1 Rating: moderate References: #1043463 Cross-References: CVE-2017-8108 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lynis fixes the following issues: Lynis 2.5.1: * Improved detection of SSL certificate files * Minor changes to improve logging and results * Firewall tests: Determine if CSF is in testing mode The Update also includes changes from Lynis 2.5.0: * CVE-2017-8108: symlink attack may have allowed arbitrary file overwrite or privilege escalation (boo#1043463) * Deleted unused tests from database file * Additional sysctls are tested * Extended test with Symantec components * Snort detection * Snort configuration file The update also includes Lynis 2.4.8 (Changelog from 2.4.1) * More PHP paths added * Minor changes to text * Show atomic test in report * Added FileInstalledByPackage function (dpkg and rpm supported) * Mark Arch Linux version as rolling release (instead of unknown) * Support for Manjaro Linux * Escape files when testing if they are readable * Code cleanups * Allow host alias to be specified in profile * Code readability enhancements * Solaris support has been improved * Fix for upload function to be used from profile * Reduce screen output for mail section, unless --verbose is used * Code cleanups and removed 'update release' command * Colored output can now be tuned with profile (colors=yes/no) * Allow data upload to be set as a profile option * Properly detect SSH daemon version * Generic code improvements * Improved the update check and display * Finish, Portuguese, and Turkish translation * Extended support and tests for DragonFlyBSD * Option to configure hostid and hostid2 in profile * Support for Trend Micro and Cylance (macOS) * Remove comments at end of nginx configuration * Used machine ID to create host ID when no SSH keys are available * Added detection of iptables-save to binaries And Lynis 2.4.0 * Mainly improved support for macOS users * Support for CoreOS * Support for clamconf utility * Support for chinese translation * More sysctl values in the default profile * New commands: "upload-only", "show hostids", "show environment", "show os" Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-705=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): lynis-2.5.1-2.3.1 References: https://www.suse.com/security/cve/CVE-2017-8108.html https://bugzilla.suse.com/1043463

1 0

openSUSE-RU-2017:1594-1: Recommended update for shotwell
by maintenance＠opensuse.org 19 Jun '17

19 Jun '17

openSUSE Recommended Update: Recommended update for shotwell ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1594-1 Rating: low References: #943556 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for shotwell fixes support for publishing images to Facebook. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-703=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): shotwell-0.22.0+git.20160103-7.3.1 shotwell-debuginfo-0.22.0+git.20160103-7.3.1 shotwell-debugsource-0.22.0+git.20160103-7.3.1 - openSUSE Leap 42.2 (noarch): shotwell-lang-0.22.0+git.20160103-7.3.1 References: https://bugzilla.suse.com/943556

1 0

openSUSE-SU-2017:1593-1: moderate: Security update for chromium
by opensuse-security＠opensuse.org 18 Jun '17

18 Jun '17

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1593-1 Rating: moderate References: #1043420 #1044690 Cross-References: CVE-2017-5087 CVE-2017-5088 CVE-2017-5089 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update to Chromium 59.0.3071.104 fixes the following security issues: * CVE-2017-5087: Sandbox Escape in IndexedDB * CVE-2017-5088: Out of bounds read in V8 * CVE-2017-5089: Domain spoofing in Omnibox * Various fixes from internal audits, fuzzing and other initiatives The following tracked packaging changes are included: * In about dialog, refer to the build as "openSUSE build" (boo#1043420) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-701=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-59.0.3071.104-23.1 chromium-59.0.3071.104-23.1 References: https://www.suse.com/security/cve/CVE-2017-5087.html https://www.suse.com/security/cve/CVE-2017-5088.html https://www.suse.com/security/cve/CVE-2017-5089.html https://bugzilla.suse.com/1043420 https://bugzilla.suse.com/1044690

1 0

openSUSE-RU-2017:1592-1: Recommended update for fate
by maintenance＠opensuse.org 18 Jun '17

18 Jun '17

openSUSE Recommended Update: Recommended update for fate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1592-1 Rating: low References: #1024737 #1032240 #1032321 #1032481 #1036753 #1039533 #1040654 #887741 #961147 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: This update provides fate 1.6 and various improvements and bug fixes: - Easier workflow fo Save/SaveAll features. (bsc#1036753) - Multiple changes at once. - Use class FeatureViewBase wherever appropriate. - Enhance presenting Diffs. (bsc#1039533 and more) - Refactor Simpleeditor. - Multiple FeatureView windows. - Make ECO code compliant to refactored class feature. - Refactor SimpleEditor to use new signals of class Feature. - New product&priority editor. - New ActorList Editor. - Configurable tabbed FeatureView. - Eliminate use of some KDE widgets including KTabWidget. - Refactor class Feature model alike. - Normal quit of fate client triggers KCrash. (bsc#887741) - Duplicate Person Box. (bsc#961147) - FATE: Does not show up in menu. (bsc#1024737) - Segfault when removing Info Provider. (bsc#1032240) - No save button after changing product. (bsc#1032321) - Unable to save a feature. (bsc#1032481) - Rename SLE-13-HPC to SLE-15-HPC. (bsc#1040654) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-700=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): fate-1.6.0-23.6.1 fate-debuginfo-1.6.0-23.6.1 References: https://bugzilla.suse.com/1024737 https://bugzilla.suse.com/1032240 https://bugzilla.suse.com/1032321 https://bugzilla.suse.com/1032481 https://bugzilla.suse.com/1036753 https://bugzilla.suse.com/1039533 https://bugzilla.suse.com/1040654 https://bugzilla.suse.com/887741 https://bugzilla.suse.com/961147

1 0

openSUSE-SU-2017:1591-1: moderate: Security update for chromium
by opensuse-security＠opensuse.org 18 Jun '17

18 Jun '17

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1591-1 Rating: moderate References: #1043420 #1044690 Cross-References: CVE-2017-5087 CVE-2017-5088 CVE-2017-5089 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update to Chromium 59.0.3071.104 fixes the following security issues: * CVE-2017-5087: Sandbox Escape in IndexedDB * CVE-2017-5088: Out of bounds read in V8 * CVE-2017-5089: Domain spoofing in Omnibox * Various fixes from internal audits, fuzzing and other initiatives The following tracked packaging changes are included: * In about dialog, refer to the build as "openSUSE build" (boo#1043420) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-701=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): chromedriver-59.0.3071.104-104.18.2 chromedriver-debuginfo-59.0.3071.104-104.18.2 chromium-59.0.3071.104-104.18.2 chromium-debuginfo-59.0.3071.104-104.18.2 chromium-debugsource-59.0.3071.104-104.18.2 References: https://www.suse.com/security/cve/CVE-2017-5087.html https://www.suse.com/security/cve/CVE-2017-5088.html https://www.suse.com/security/cve/CVE-2017-5089.html https://bugzilla.suse.com/1043420 https://bugzilla.suse.com/1044690

1 0

openSUSE-RU-2017:1589-1: Recommended update for freetype2
by maintenance＠opensuse.org 16 Jun '17

16 Jun '17

openSUSE Recommended Update: Recommended update for freetype2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1589-1 Rating: low References: #1038506 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for freetype2 fixes an issue within handling of very large fonts which could lead to corrupted characters in the boot splash screen of systems configured to use the Korean language. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-697=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): freetype2-debugsource-2.6.3-2.3.1 freetype2-devel-2.6.3-2.3.1 ft2demos-2.6.3-2.3.1 libfreetype6-2.6.3-2.3.1 libfreetype6-debuginfo-2.6.3-2.3.1 - openSUSE Leap 42.2 (x86_64): freetype2-devel-32bit-2.6.3-2.3.1 libfreetype6-32bit-2.6.3-2.3.1 libfreetype6-debuginfo-32bit-2.6.3-2.3.1 References: https://bugzilla.suse.com/1038506

1 0

openSUSE-RU-2017:1588-1: Recommended update for file-roller
by maintenance＠opensuse.org 16 Jun '17

16 Jun '17

openSUSE Recommended Update: Recommended update for file-roller ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1588-1 Rating: low References: #1022082 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for file-roller provides the following fixes: - Fix segmentation fault after extracting a file. (bsc#1022082) - Fix integer overflow when comparing large files/directories. - Show the 'open destination' dialog only when using --notify. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-698=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): file-roller-3.20.3-3.3.1 file-roller-debuginfo-3.20.3-3.3.1 file-roller-debugsource-3.20.3-3.3.1 nautilus-file-roller-3.20.3-3.3.1 nautilus-file-roller-debuginfo-3.20.3-3.3.1 - openSUSE Leap 42.2 (noarch): file-roller-lang-3.20.3-3.3.1 References: https://bugzilla.suse.com/1022082

1 0

openSUSE-OU-2017:1586-1: Optional update for brise
by maintenance＠opensuse.org 16 Jun '17

16 Jun '17

openSUSE Optional Update: Optional update for brise ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:1586-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update for brise fixes the following issues: - Update to version 0.36+git20160221.7dbd56b - Make sure source code's LICENSE file install by default. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-695=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): brise-0.36+git20160221.7dbd56b-6.3.1 References:

1 0

openSUSE-RU-2017:1584-1: Recommended update for yast2-packager
by maintenance＠opensuse.org 16 Jun '17

16 Jun '17

openSUSE Recommended Update: Recommended update for yast2-packager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1584-1 Rating: low References: #1014861 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-packager provides the following fix: - Fix SLES4SAP autoupgrade with SUSE Manager repositories (bsc#1014861) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-699=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): yast2-packager-3.1.122-5.3.1 References: https://bugzilla.suse.com/1014861

1 0

openSUSE-RU-2017:1583-1: Recommended update for gnome-settings-daemon
by maintenance＠opensuse.org 16 Jun '17

16 Jun '17

openSUSE Recommended Update: Recommended update for gnome-settings-daemon ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1583-1 Rating: low References: #1000599 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-settings-daemon provides the following fix: - Fix some keybindings become unavailable (bsc#1000599) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-696=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gnome-settings-daemon-3.20.1-9.6.1 gnome-settings-daemon-debuginfo-3.20.1-9.6.1 gnome-settings-daemon-debugsource-3.20.1-9.6.1 gnome-settings-daemon-devel-3.20.1-9.6.1 - openSUSE Leap 42.2 (noarch): gnome-settings-daemon-lang-3.20.1-9.6.1 References: https://bugzilla.suse.com/1000599

1 0

openSUSE-SU-2017:1579-1: moderate: Security update for Mozilla Thunderbird
by opensuse-security＠opensuse.org 16 Jun '17

16 Jun '17

openSUSE Security Update: Security update for Mozilla Thunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1579-1 Rating: moderate References: #1040105 #1042090 #1043960 Cross-References: CVE-2017-5470 CVE-2017-5472 CVE-2017-7749 CVE-2017-7750 CVE-2017-7751 CVE-2017-7752 CVE-2017-7754 CVE-2017-7756 CVE-2017-7757 CVE-2017-7758 CVE-2017-7763 CVE-2017-7764 CVE-2017-7765 CVE-2017-7771 CVE-2017-7772 CVE-2017-7773 CVE-2017-7774 CVE-2017-7775 CVE-2017-7776 CVE-2017-7777 CVE-2017-7778 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: This update to Thunderbird 52.2 fixes security issues and bugs. The following vulnerabilities were fixed: * CVE-2017-5472: Use-after-free using destroyed node when regenerating trees * CVE-2017-7749: Use-after-free during docshell reloading * CVE-2017-7750: Use-after-free with track elements * CVE-2017-7751: Use-after-free with content viewer listeners * CVE-2017-7752: Use-after-free with IME input * CVE-2017-7754: Out-of-bounds read in WebGL with ImageInfo object * CVE-2017-7756: Use-after-free and use-after-scope logging XHR header errors * CVE-2017-7757: Use-after-free in IndexedDB * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772, CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776, CVE-2017-7777: Vulnerabilities in the Graphite 2 library * CVE-2017-7758: Out-of-bounds read in Opus encoder * CVE-2017-7764: Domain spoofing with combination of Canadian Syllabics and other unicode blocks * CVE-2017-5470: Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2 Mozilla Thunderbird now requires NSS 3.28.5. The following bugs were fixed: * Embedded images not shown in email received from Hotmail/Outlook webmailer * Detection of non-ASCII font names in font selector * Attachment not forwarded correctly under certain circumstances * Multiple requests for master password when GMail OAuth2 is enabled * Large number of blank pages being printed under certain circumstances when invalid preferences were present * Messages sent via the Simple MAPI interface are forced to HTML * Calendar: Invitations can't be printed * Mailing list (group) not accessible from macOS or Outlook address book * Clicking on links with references/anchors where target doesn't exist in the message not opening in external browser Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-694=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): MozillaThunderbird-52.2-36.1 MozillaThunderbird-buildsymbols-52.2-36.1 MozillaThunderbird-devel-52.2-36.1 MozillaThunderbird-translations-common-52.2-36.1 MozillaThunderbird-translations-other-52.2-36.1 References: https://www.suse.com/security/cve/CVE-2017-5470.html https://www.suse.com/security/cve/CVE-2017-5472.html https://www.suse.com/security/cve/CVE-2017-7749.html https://www.suse.com/security/cve/CVE-2017-7750.html https://www.suse.com/security/cve/CVE-2017-7751.html https://www.suse.com/security/cve/CVE-2017-7752.html https://www.suse.com/security/cve/CVE-2017-7754.html https://www.suse.com/security/cve/CVE-2017-7756.html https://www.suse.com/security/cve/CVE-2017-7757.html https://www.suse.com/security/cve/CVE-2017-7758.html https://www.suse.com/security/cve/CVE-2017-7763.html https://www.suse.com/security/cve/CVE-2017-7764.html https://www.suse.com/security/cve/CVE-2017-7765.html https://www.suse.com/security/cve/CVE-2017-7771.html https://www.suse.com/security/cve/CVE-2017-7772.html https://www.suse.com/security/cve/CVE-2017-7773.html https://www.suse.com/security/cve/CVE-2017-7774.html https://www.suse.com/security/cve/CVE-2017-7775.html https://www.suse.com/security/cve/CVE-2017-7776.html https://www.suse.com/security/cve/CVE-2017-7777.html https://www.suse.com/security/cve/CVE-2017-7778.html https://bugzilla.suse.com/1040105 https://bugzilla.suse.com/1042090 https://bugzilla.suse.com/1043960

1 0

openSUSE-RU-2017:1574-1: Recommended update for clamav-database
by maintenance＠opensuse.org 15 Jun '17

15 Jun '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1574-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh June 12th 2017. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-693=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201706120006-54.39.1 References:

1 0

openSUSE-RU-2017:1573-1: Recommended update for fate
by maintenance＠opensuse.org 15 Jun '17

15 Jun '17

openSUSE Recommended Update: Recommended update for fate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1573-1 Rating: low References: #1024737 #1032240 #1032321 #1032481 #1036753 #1039533 #1040654 #887741 #961147 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: This update provides fate 1.6 and various improvements and bug fixes: - Easier workflow fo Save/SaveAll features. (bsc#1036753) - Multiple changes at once. - Use class FeatureViewBase wherever appropriate. - Enhance presenting Diffs. (bsc#1039533 and more) - Refactor Simpleeditor. - Multiple FeatureView windows. - Make ECO code compliant to refactored class feature. - Refactor SimpleEditor to use new signals of class Feature. - New product&priority editor. - New ActorList Editor. - Configurable tabbed FeatureView. - Eliminate use of some KDE widgets including KTabWidget. - Refactor class Feature model alike. - Normal quit of fate client triggers KCrash. (bsc#887741) - Duplicate Person Box. (bsc#961147) - FATE: Does not show up in menu. (bsc#1024737) - Segfault when removing Info Provider. (bsc#1032240) - No save button after changing product. (bsc#1032321) - Unable to save a feature. (bsc#1032481) - Rename SLE-13-HPC to SLE-15-HPC. (bsc#1040654) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-692=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): fate-1.6.0-13.1 References: https://bugzilla.suse.com/1024737 https://bugzilla.suse.com/1032240 https://bugzilla.suse.com/1032321 https://bugzilla.suse.com/1032481 https://bugzilla.suse.com/1036753 https://bugzilla.suse.com/1039533 https://bugzilla.suse.com/1040654 https://bugzilla.suse.com/887741 https://bugzilla.suse.com/961147

1 0

openSUSE-SU-2017:1572-1: important: Security update for mercurial
by opensuse-security＠opensuse.org 15 Jun '17

15 Jun '17

openSUSE Security Update: Security update for mercurial ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1572-1 Rating: important References: #1043063 #1043502 Cross-References: CVE-2017-9462 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for mercurial fixes the following issues: - CVE-2017-9462: Fix the arbitrary code exec by remote users via "hg serve --stdio" (boo#1043063) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-689=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): mercurial-3.8.3-2.5.1 mercurial-debuginfo-3.8.3-2.5.1 mercurial-debugsource-3.8.3-2.5.1 - openSUSE Leap 42.2 (noarch): mercurial-lang-3.8.3-2.5.1 References: https://www.suse.com/security/cve/CVE-2017-9462.html https://bugzilla.suse.com/1043063 https://bugzilla.suse.com/1043502

1 0

openSUSE-SU-2017:1571-1: moderate: Security update for otrs
by opensuse-security＠opensuse.org 15 Jun '17

15 Jun '17

openSUSE Security Update: Security update for otrs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1571-1 Rating: moderate References: #1043086 #1043244 Cross-References: CVE-2017-9324 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for otrs fixes the following issues: - CVE-2017-9324: Incorrect Access Control in OTRS - Improved SecureMode detection in Installer (OSA-2017-03, bsc#1043086) - bsc#1043244: Reflected cross-site scripting in OTRS, customer search should not return results for internal (OSA-2017-02) In addition, OTRS was updated to 3.3.17 with the following fixes: - Function "SystemDataGroupGet" has problems with empty values in oracle - Base64 encoded image does not display in article - Chrome could not display attached PDF files Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-691=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): otrs-3.3.17-5.3.1 otrs-doc-3.3.17-5.3.1 otrs-itsm-3.3.14-5.3.1 References: https://www.suse.com/security/cve/CVE-2017-9324.html https://bugzilla.suse.com/1043086 https://bugzilla.suse.com/1043244

1 0

openSUSE-SU-2017:1569-1: moderate: Security update for tor
by opensuse-security＠opensuse.org 15 Jun '17

15 Jun '17

openSUSE Security Update: Security update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1569-1 Rating: moderate References: #1043455 #1043456 Cross-References: CVE-2017-0375 CVE-2017-0376 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update to tor 0.2.9.11 fixes the following vulnerabilities: - CVE-2017-0375: remotely triggerable assertion failure when a hidden service handles a malformed BEGIN cell (bsc#1043455) - CVE-2017-0376: remotely triggerable assertion failure caused by receiving a BEGIN_DIR cell on a hidden service rendezvous circuit (bsc#1043456) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-690=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): tor-0.2.9.11-8.3.1 tor-debuginfo-0.2.9.11-8.3.1 tor-debugsource-0.2.9.11-8.3.1 References: https://www.suse.com/security/cve/CVE-2017-0375.html https://www.suse.com/security/cve/CVE-2017-0376.html https://bugzilla.suse.com/1043455 https://bugzilla.suse.com/1043456

1 0

openSUSE-RU-2017:1562-1: Recommended update for vte
by maintenance＠opensuse.org 14 Jun '17

14 Jun '17

openSUSE Recommended Update: Recommended update for vte ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1562-1 Rating: low References: #1021684 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for vte fixes the following issues: - Memory leaks in gnome-terminal-server (bsc#1021684) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-688=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): glade-catalog-vte-0.44.2-3.3.1 libvte-2_91-0-0.44.2-3.3.1 libvte-2_91-0-debuginfo-0.44.2-3.3.1 typelib-1_0-Vte-2.91-0.44.2-3.3.1 vte-debugsource-0.44.2-3.3.1 vte-devel-0.44.2-3.3.1 vte-tools-0.44.2-3.3.1 vte-tools-debuginfo-0.44.2-3.3.1 - openSUSE Leap 42.2 (noarch): vte-lang-0.44.2-3.3.1 References: https://bugzilla.suse.com/1021684

1 0

openSUSE-SU-2017:1560-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 14 Jun '17

14 Jun '17

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1560-1 Rating: moderate References: #1028075 #1033091 #1034870 #1034872 #1034876 #1036976 #1036977 #1036978 #1036980 #1036981 #1036982 #1036983 #1036984 #1036985 #1036986 #1036987 #1036988 #1036989 #1036990 #1036991 #1037527 #1038000 #1040025 #1040303 #1040304 #1040306 #1040332 Cross-References: CVE-2017-6502 CVE-2017-7606 CVE-2017-7941 CVE-2017-7942 CVE-2017-7943 CVE-2017-8343 CVE-2017-8344 CVE-2017-8345 CVE-2017-8346 CVE-2017-8347 CVE-2017-8348 CVE-2017-8349 CVE-2017-8350 CVE-2017-8351 CVE-2017-8352 CVE-2017-8353 CVE-2017-8354 CVE-2017-8355 CVE-2017-8356 CVE-2017-8357 CVE-2017-8765 CVE-2017-8830 CVE-2017-9098 CVE-2017-9141 CVE-2017-9142 CVE-2017-9143 CVE-2017-9144 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 27 vulnerabilities is now available. Description: This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2017-6502: Possible file-descriptor leak in libmagickcore that could be triggered via a specially crafted webp file (bsc#1028075). - CVE-2017-7943: The ReadSVGImage function in svg.c allowed remote attackers to consume an amount of available memory via a crafted file (bsc#1034870). Note that this only impacts the built-in SVG implementation. As we use the librsgv implementation, we are not affected. - CVE-2017-7942: The ReadAVSImage function in avs.c allowed remote attackers to consume an amount of available memory via a crafted file (bsc#1034872). - CVE-2017-7941: The ReadSGIImage function in sgi.c allowed remote attackers to consume an amount of available memory via a crafted file (bsc#1034876). - CVE-2017-8351: ImageMagick, GraphicsMagick: denial of service (memory leak) via a crafted file (ReadPCDImage func in pcd.c) (bsc#1036986). - CVE-2017-8352: denial of service (memory leak) via a crafted file (ReadXWDImage func in xwd.c) (bsc#1036987) - CVE-2017-8349: denial of service (memory leak) via a crafted file (ReadSFWImage func in sfw.c) (bsc#1036984) - CVE-2017-8350: denial of service (memory leak) via a crafted file (ReadJNGImage function in png.c) (bsc#1036985) - CVE-2017-8347: denial of service (memory leak) via a crafted file (ReadEXRImage func in exr.c) (bsc#1036982) - CVE-2017-8348: denial of service (memory leak) via a crafted file (ReadMATImage func in mat.c) (bsc#1036983) - CVE-2017-8345: denial of service (memory leak) via a crafted file (ReadMNGImage func in png.c) (bsc#1036980) - CVE-2017-8346: denial of service (memory leak) via a crafted file (ReadDCMImage func in dcm.c) (bsc#1036981) - CVE-2017-8353: denial of service (memory leak) via a crafted file (ReadPICTImage func in pict.c) (bsc#1036988) - CVE-2017-8354: denial of service (memory leak) via a crafted file (ReadBMPImage func in bmp.c) (bsc#1036989) - CVE-2017-8830: denial of service (memory leak) via a crafted file (ReadBMPImage func in bmp.c:1379) (bsc#1038000) - CVE-2017-7606: denial of service (application crash) or possibly have unspecified other impact via a crafted image (bsc#1033091) - CVE-2017-8765: memory leak vulnerability via a crafted ICON file (ReadICONImage in coders\icon.c) (bsc#1037527) - CVE-2017-8356: denial of service (memory leak) via a crafted file (ReadSUNImage function in sun.c) (bsc#1036991) - CVE-2017-8355: denial of service (memory leak) via a crafted file (ReadMTVImage func in mtv.c) (bsc#1036990) - CVE-2017-8344: denial of service (memory leak) via a crafted file (ReadPCXImage func in pcx.c) (bsc#1036978) - CVE-2017-8343: denial of service (memory leak) via a crafted file (ReadAAIImage func in aai.c) (bsc#1036977) - CVE-2017-8357: denial of service (memory leak) via a crafted file (ReadEPTImage func in ept.c) (bsc#1036976) - CVE-2017-9098: uninitialized memory usage in the ReadRLEImage RLE decoder function coders/rle.c (bsc#1040025) - CVE-2017-9141: Missing checks in the ReadDDSImage function in coders/dds.c could lead to a denial of service (assertion) (bsc#1040303) - CVE-2017-9142: Missing checks in theReadOneJNGImage function in coders/png.c could lead to denial of service (assertion) (bsc#1040304) - CVE-2017-9143: A possible denial of service attack via crafted .art file in ReadARTImage function in coders/art.c (bsc#1040306) - CVE-2017-9144: A crafted RLE image can trigger a crash in coders/rle.c could lead to a denial of service (crash) (bsc#1040332) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-686=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ImageMagick-6.8.8.1-30.3.1 ImageMagick-debuginfo-6.8.8.1-30.3.1 ImageMagick-debugsource-6.8.8.1-30.3.1 ImageMagick-devel-6.8.8.1-30.3.1 ImageMagick-extra-6.8.8.1-30.3.1 ImageMagick-extra-debuginfo-6.8.8.1-30.3.1 libMagick++-6_Q16-3-6.8.8.1-30.3.1 libMagick++-6_Q16-3-debuginfo-6.8.8.1-30.3.1 libMagick++-devel-6.8.8.1-30.3.1 libMagickCore-6_Q16-1-6.8.8.1-30.3.1 libMagickCore-6_Q16-1-debuginfo-6.8.8.1-30.3.1 libMagickWand-6_Q16-1-6.8.8.1-30.3.1 libMagickWand-6_Q16-1-debuginfo-6.8.8.1-30.3.1 perl-PerlMagick-6.8.8.1-30.3.1 perl-PerlMagick-debuginfo-6.8.8.1-30.3.1 - openSUSE Leap 42.2 (noarch): ImageMagick-doc-6.8.8.1-30.3.1 - openSUSE Leap 42.2 (x86_64): ImageMagick-devel-32bit-6.8.8.1-30.3.1 libMagick++-6_Q16-3-32bit-6.8.8.1-30.3.1 libMagick++-6_Q16-3-debuginfo-32bit-6.8.8.1-30.3.1 libMagick++-devel-32bit-6.8.8.1-30.3.1 libMagickCore-6_Q16-1-32bit-6.8.8.1-30.3.1 libMagickCore-6_Q16-1-debuginfo-32bit-6.8.8.1-30.3.1 libMagickWand-6_Q16-1-32bit-6.8.8.1-30.3.1 libMagickWand-6_Q16-1-debuginfo-32bit-6.8.8.1-30.3.1 References: https://www.suse.com/security/cve/CVE-2017-6502.html https://www.suse.com/security/cve/CVE-2017-7606.html https://www.suse.com/security/cve/CVE-2017-7941.html https://www.suse.com/security/cve/CVE-2017-7942.html https://www.suse.com/security/cve/CVE-2017-7943.html https://www.suse.com/security/cve/CVE-2017-8343.html https://www.suse.com/security/cve/CVE-2017-8344.html https://www.suse.com/security/cve/CVE-2017-8345.html https://www.suse.com/security/cve/CVE-2017-8346.html https://www.suse.com/security/cve/CVE-2017-8347.html https://www.suse.com/security/cve/CVE-2017-8348.html https://www.suse.com/security/cve/CVE-2017-8349.html https://www.suse.com/security/cve/CVE-2017-8350.html https://www.suse.com/security/cve/CVE-2017-8351.html https://www.suse.com/security/cve/CVE-2017-8352.html https://www.suse.com/security/cve/CVE-2017-8353.html https://www.suse.com/security/cve/CVE-2017-8354.html https://www.suse.com/security/cve/CVE-2017-8355.html https://www.suse.com/security/cve/CVE-2017-8356.html https://www.suse.com/security/cve/CVE-2017-8357.html https://www.suse.com/security/cve/CVE-2017-8765.html https://www.suse.com/security/cve/CVE-2017-8830.html https://www.suse.com/security/cve/CVE-2017-9098.html https://www.suse.com/security/cve/CVE-2017-9141.html https://www.suse.com/security/cve/CVE-2017-9142.html https://www.suse.com/security/cve/CVE-2017-9143.html https://www.suse.com/security/cve/CVE-2017-9144.html https://bugzilla.suse.com/1028075 https://bugzilla.suse.com/1033091 https://bugzilla.suse.com/1034870 https://bugzilla.suse.com/1034872 https://bugzilla.suse.com/1034876 https://bugzilla.suse.com/1036976 https://bugzilla.suse.com/1036977 https://bugzilla.suse.com/1036978 https://bugzilla.suse.com/1036980 https://bugzilla.suse.com/1036981 https://bugzilla.suse.com/1036982 https://bugzilla.suse.com/1036983 https://bugzilla.suse.com/1036984 https://bugzilla.suse.com/1036985 https://bugzilla.suse.com/1036986 https://bugzilla.suse.com/1036987 https://bugzilla.suse.com/1036988 https://bugzilla.suse.com/1036989 https://bugzilla.suse.com/1036990 https://bugzilla.suse.com/1036991 https://bugzilla.suse.com/1037527 https://bugzilla.suse.com/1038000 https://bugzilla.suse.com/1040025 https://bugzilla.suse.com/1040303 https://bugzilla.suse.com/1040304 https://bugzilla.suse.com/1040306 https://bugzilla.suse.com/1040332

1 0

openSUSE-RU-2017:1559-1: moderate: Recommended update for libsemanage, selinux-policy
by maintenance＠opensuse.org 14 Jun '17

14 Jun '17

openSUSE Recommended Update: Recommended update for libsemanage, selinux-policy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1559-1 Rating: moderate References: #1020143 #1032445 #1035818 #1038189 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for libsemanage, selinux-policy fixes the following issues: - Limit to policy version 29 by default. - Fix policy module build failures and wrong policy path on SLE 12 SP2 (bsc#1038189, bsc#1035818, bsc#1020143, bsc#1032445) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-687=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libsemanage-debugsource-2.5-2.3.1 libsemanage-devel-2.5-2.3.1 libsemanage-devel-static-2.5-2.3.1 libsemanage1-2.5-2.3.1 libsemanage1-debuginfo-2.5-2.3.1 python-semanage-2.5-2.3.1 python-semanage-debuginfo-2.5-2.3.1 python-semanage-debugsource-2.5-2.3.1 - openSUSE Leap 42.2 (x86_64): libsemanage1-32bit-2.5-2.3.1 libsemanage1-debuginfo-32bit-2.5-2.3.1 References: https://bugzilla.suse.com/1020143 https://bugzilla.suse.com/1032445 https://bugzilla.suse.com/1035818 https://bugzilla.suse.com/1038189

1 0

openSUSE-RU-2017:1551-1: Recommended update for gnome-boxes
by maintenance＠opensuse.org 13 Jun '17

13 Jun '17

openSUSE Recommended Update: Recommended update for gnome-boxes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1551-1 Rating: low References: #952712 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-boxes fixes the following issues: - Disables smartcard support for gnome-boxes. (boo#952712) - Store the user password in the keyring during an express installation. - Fix typo in debug string. - Fix printf format strings. - Only elevate privileges when doing an import and not at startup. - Fix non-matching generic types of inferface implementations. - Work around a libvirt-glib bug to avoid a crash during startup. - Updated translations. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-685=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): gnome-boxes-3.20.4-3.3.1 gnome-boxes-debuginfo-3.20.4-3.3.1 gnome-boxes-debugsource-3.20.4-3.3.1 gnome-shell-search-provider-boxes-3.20.4-3.3.1 gnome-shell-search-provider-boxes-debuginfo-3.20.4-3.3.1 - openSUSE Leap 42.2 (noarch): gnome-boxes-lang-3.20.4-3.3.1 References: https://bugzilla.suse.com/952712

1 0

openSUSE-OU-2017:1546-1: Initial update for sshguard
by maintenance＠opensuse.org 12 Jun '17

12 Jun '17

openSUSE Optional Update: Initial update for sshguard ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:1546-1 Rating: low References: #1041425 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update provides sshguard 1.7.1 for the Package Hub.: sshguard protects hosts from brute-force attacks against SSH and other services. It aggregates system logs and blocks repeat offenders using one of several firewall backends, including iptables, ipfw, and pf. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-684=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): sshguard-1.7.1-2.1 References: https://bugzilla.suse.com/1041425

1 0

openSUSE-RU-2017:1543-1: Recommended update for nfs-utils
by maintenance＠opensuse.org 12 Jun '17

12 Jun '17

openSUSE Recommended Update: Recommended update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1543-1 Rating: low References: #1028376 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nfs-utils provides the following fix: - Fix migration so that nfsserver is still enabled after upgrade to SP1 (bsc#1028376) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-680=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): nfs-client-1.3.0-25.6.1 nfs-client-debuginfo-1.3.0-25.6.1 nfs-doc-1.3.0-25.6.1 nfs-kernel-server-1.3.0-25.6.1 nfs-kernel-server-debuginfo-1.3.0-25.6.1 nfs-utils-debugsource-1.3.0-25.6.1 References: https://bugzilla.suse.com/1028376

1 0