June 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:1498-1: Recommended update for opera
by maintenance＠opensuse.org 06 Jun '17

06 Jun '17

openSUSE Recommended Update: Recommended update for opera ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1498-1 Rating: low References: #1042843 Affected Products: openSUSE Leap 42.2:NonFree ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides a new version of opera and fixes serveral issues: - Update to version 45.0.2552.888: * Full changelog available at: https://blogs.opera.com/desktop/changelog-for-45/#b2552.888 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2:NonFree: zypper in -t patch openSUSE-2017-659=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2:NonFree (x86_64): opera-45.0.2552.888-44.1 References: https://bugzilla.suse.com/1042843

1 0

openSUSE-SU-2017:1497-1: important: Security update for deluge
by opensuse-security＠opensuse.org 06 Jun '17

06 Jun '17

openSUSE Security Update: Security update for deluge ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1497-1 Rating: important References: #1039815 #1039958 Cross-References: CVE-2017-7178 CVE-2017-9031 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for deluge fixes two security issues: - CVE-2017-9031: A remote attacker may have used a directory traversal vulnerability in the web interface (bsc#1039815) - CVE-2017-7178: A remote attacher could have exploited a CSRF vulnerability to trick a logged-in user to perform actions in the WebUI (bsc#1039958) In addition, deluge was updated to 1.3.15 with the following fixes and changes: - Core: Fix issues with displaying libtorrent-rasterbar single proxy. - Core: Fix libtorrent-rasterbar 1.2 trackers crashing Deluge UIs. - Core: Fix an error in torrent priorities causing file priority mismatch in UIs. - GtkUI: Fix column sort state not saved in Thinclient mode. - GtkUI: Fix a connection manager error with malformed ip. - GtkUI: Rename SystemTray/Indicator "Pause/Resume All" to "Pause/Resume Session". - GtkUI: Workaround libtorrent-rasterbar single proxy by greying out unused proxy types. - Notification Plugin: Fix webui passing string for int port value. - AutoAdd Plugin: Add WebUI preferences page detailing lack of configuration via WebUI. - Label Plugin: Add WebUI preferences page detailing how to configure plugin. - Core: Fix 'Too many files open' errors. - Core: Add support for python-GeoIP for use with libtorrent 1.1. - Core: Fix a single proxy entry being overwritten resulting in no proxy set. - UI: Add the tracker_status translation to UIs. - GtkUI: Strip whitespace from infohash before checks. - GtkUI: Add a missed feature autofill infohash entry from clipboard. - WebUI: Backport bind interface option for server. - ConsoleUI: Fix a decode error comparing non-ascii (str) torrent names. - AutoAdd Plugin: Fixes for splitting magnets from file. - Remove the duplicate magnet extension when splitting. - Remove deluge-libtorrent-1.1-geoip.patch: fixed upstream. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-656=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): deluge-1.3.15-3.3.1 deluge-lang-1.3.15-3.3.1 References: https://www.suse.com/security/cve/CVE-2017-7178.html https://www.suse.com/security/cve/CVE-2017-9031.html https://bugzilla.suse.com/1039815 https://bugzilla.suse.com/1039958

1 0

openSUSE-RU-2017:1496-1: Recommended update for clamav-database
by maintenance＠opensuse.org 06 Jun '17

06 Jun '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1496-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh June 5th 2017. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-658=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201706050005-54.36.1 References:

1 0

openSUSE-SU-2017:1495-1: moderate: Security update for postgresql93
by opensuse-security＠opensuse.org 06 Jun '17

06 Jun '17

openSUSE Security Update: Security update for postgresql93 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1495-1 Rating: moderate References: #1037603 #1037624 #1038293 Cross-References: CVE-2017-7484 CVE-2017-7485 CVE-2017-7486 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for postgresql93 fixes the following issues: The PostgreSQL package was updated to 9.3.17, bringing various bug and security fixes. Security fixes: - CVE-2017-7486: Restrict visibility of pg_user_mappings.umoptions, to protect passwords stored as user mapping options. (bsc#1037624) - CVE-2017-7485: Recognize PGREQUIRESSL variable again. (bsc#1038293) - CVE-2017-7484: Prevent exposure of statistical information via leaky operators. (bsc#1037603) More details can be found in the PostgreSQL release announcements: - https://www.postgresql.org/docs/9.3/static/release-9-3-17.html - https://www.postgresql.org/docs/9.3/static/release-9-3-16.html - https://www.postgresql.org/docs/9.3/static/release-9-3-15.html This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-657=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): postgresql93-devel-9.3.17-5.9.1 postgresql93-devel-debuginfo-9.3.17-5.9.1 postgresql93-libs-debugsource-9.3.17-5.9.1 - openSUSE Leap 42.2 (x86_64): postgresql93-9.3.17-5.9.1 postgresql93-contrib-9.3.17-5.9.1 postgresql93-contrib-debuginfo-9.3.17-5.9.1 postgresql93-debuginfo-9.3.17-5.9.1 postgresql93-debugsource-9.3.17-5.9.1 postgresql93-plperl-9.3.17-5.9.1 postgresql93-plperl-debuginfo-9.3.17-5.9.1 postgresql93-plpython-9.3.17-5.9.1 postgresql93-plpython-debuginfo-9.3.17-5.9.1 postgresql93-pltcl-9.3.17-5.9.1 postgresql93-pltcl-debuginfo-9.3.17-5.9.1 postgresql93-server-9.3.17-5.9.1 postgresql93-server-debuginfo-9.3.17-5.9.1 postgresql93-test-9.3.17-5.9.1 - openSUSE Leap 42.2 (noarch): postgresql93-docs-9.3.17-5.9.1 References: https://www.suse.com/security/cve/CVE-2017-7484.html https://www.suse.com/security/cve/CVE-2017-7485.html https://www.suse.com/security/cve/CVE-2017-7486.html https://bugzilla.suse.com/1037603 https://bugzilla.suse.com/1037624 https://bugzilla.suse.com/1038293

1 0

openSUSE-RU-2017:1494-1: Recommended update for amavisd-new
by maintenance＠opensuse.org 06 Jun '17

06 Jun '17

openSUSE Recommended Update: Recommended update for amavisd-new ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1494-1 Rating: low References: #1014157 #1014205 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for amavisd-new provides the following fixes: - Properly create /etc/sysconfig/amavis at installation time. (bsc#1014205) - Add "spamassassin" to requirements list. (bsc#1014157) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-652=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): amavisd-new-2.8.1-5.3.1 amavisd-new-debuginfo-2.8.1-5.3.1 amavisd-new-debugsource-2.8.1-5.3.1 amavisd-new-docs-2.8.1-5.3.1 References: https://bugzilla.suse.com/1014157 https://bugzilla.suse.com/1014205

1 0

openSUSE-OU-2017:1493-1: Initial update for lua51-luajit
by maintenance＠opensuse.org 06 Jun '17

06 Jun '17

openSUSE Optional Update: Initial update for lua51-luajit ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:1493-1 Rating: low References: #1042862 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update provides lua51-luajit for Backports:SLE-12-SP2: LuaJIT is a Just-In-Time Compiler (JIT) for the Lua programming language. Lua is a powerful, dynamic and light-weight programming language. It may be embedded or used as a general-purpose, stand-alone language. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-655=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64): libluajit-5_1-2-2.1.0~beta2-2.1 lua51-luajit-2.1.0~beta2-2.1 lua51-luajit-devel-2.1.0~beta2-2.1 References: https://bugzilla.suse.com/1042862

1 0

openSUSE-RU-2017:1491-1: Recommended update for Enlightenment
by maintenance＠opensuse.org 06 Jun '17

06 Jun '17

openSUSE Recommended Update: Recommended update for Enlightenment ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1491-1 Rating: low References: #1041477 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides enlightenment 0.21.8 and contains various bugs and fixes. Changes in enlightenment: - Calling canvas event feed functions during a post event callback breaks the canvas. - Enlightenment crashes when launching bryce configuration. - Can't select custom wallpaper on non-primary displays. - EFM -> Delete -> Crash (race). - Hide, then show existing elm win hides but doesn't show again. - Image native_surface_set() does not set load error on failure. - elm_win_iconified_set(Elm_Win *obj, Eina_Bool iconified ) only works with composite effects enabled. - Screen doesn't blank if "disable blanking for fullscreen windows" is on, even when there's no fullscreen window. This update also provides Enlightenment Foundation Libraries (efl) 1.18.5, fixing several issues: - Ecore_fb_init(): use 'name' parameter similar to ecore_evas_fb_new(). - Fix scripts compilation for edje_edit. - Fix for working item reorder mode correctly. - LINE_APPEND Render fix. - Fix EGL engine for recent nvidia binary. - Fix compilation for EGL < 1.5. - Early check image bpp based on depth (T4389). - Ecore animator - the anim thread is polled on shutdown use volatile. - Ecore anim - actually fix by checking fd not thread handle. - Fix handling of some keys. - Fix hang in wayland due to pulse audio connecting to X. - Disable subtitles by default as that should be - Wl_drm and eayland_egl buffer age fix for gl when age changes. - Fix reproducable build issues. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-651=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): edje-1.18.5-6.3.1 edje-debuginfo-1.18.5-6.3.1 efl-1.18.5-6.3.1 efl-debuginfo-1.18.5-6.3.1 efl-debugsource-1.18.5-6.3.1 efl-devel-1.18.5-6.3.1 efl-devel-debuginfo-1.18.5-6.3.1 efl-examples-1.18.5-6.3.1 efl-testsuite-1.18.5-6.3.1 elementary-1.18.5-6.3.1 elementary-debuginfo-1.18.5-6.3.1 elementary-examples-1.18.5-6.3.1 elua-1.18.5-6.3.1 embryo-1.18.5-6.3.1 embryo-debuginfo-1.18.5-6.3.1 enlightenment-0.21.8-2.6.1 enlightenment-branding-upstream-0.21.8-2.6.1 enlightenment-debuginfo-0.21.8-2.6.1 enlightenment-debugsource-0.21.8-2.6.1 enlightenment-devel-0.21.8-2.6.1 enlightenment-doc-html-0.21.8-2.6.1 enlightenment-theme-dark-0.21.0-6.3.1 enlightenment-theme-upstream-0.21.0-6.3.1 enlightenment-x-dark-icon-theme-1.18.5-6.3.1 evas-generic-loaders-1.18.5-6.3.1 evas-generic-loaders-debuginfo-1.18.5-6.3.1 libecore1-1.18.5-6.3.1 libecore1-debuginfo-1.18.5-6.3.1 libector1-1.18.5-6.3.1 libector1-debuginfo-1.18.5-6.3.1 libedje1-1.18.5-6.3.1 libedje1-debuginfo-1.18.5-6.3.1 libeet1-1.18.5-6.3.1 libeet1-debuginfo-1.18.5-6.3.1 libeeze1-1.18.5-6.3.1 libeeze1-debuginfo-1.18.5-6.3.1 libefl1-1.18.5-6.3.1 libefl1-debuginfo-1.18.5-6.3.1 libefreet1-1.18.5-6.3.1 libefreet1-debuginfo-1.18.5-6.3.1 libefreet_mime1-1.18.5-6.3.1 libefreet_mime1-debuginfo-1.18.5-6.3.1 libefreet_trash1-1.18.5-6.3.1 libefreet_trash1-debuginfo-1.18.5-6.3.1 libeina1-1.18.5-6.3.1 libeina1-debuginfo-1.18.5-6.3.1 libeio1-1.18.5-6.3.1 libeio1-debuginfo-1.18.5-6.3.1 libeldbus1-1.18.5-6.3.1 libeldbus1-debuginfo-1.18.5-6.3.1 libelocation1-1.18.5-6.3.1 libelocation1-debuginfo-1.18.5-6.3.1 libelua1-1.18.5-6.3.1 libelua1-debuginfo-1.18.5-6.3.1 libembryo1-1.18.5-6.3.1 libembryo1-debuginfo-1.18.5-6.3.1 libemile1-1.18.5-6.3.1 libemile1-debuginfo-1.18.5-6.3.1 libemotion1-1.18.5-6.3.1 libemotion1-debuginfo-1.18.5-6.3.1 libeo1-1.18.5-6.3.1 libeo1-debuginfo-1.18.5-6.3.1 libeolian1-1.18.5-6.3.1 libeolian1-debuginfo-1.18.5-6.3.1 libephysics1-1.18.5-6.3.1 libephysics1-debuginfo-1.18.5-6.3.1 libethumb1-1.18.5-6.3.1 libethumb1-debuginfo-1.18.5-6.3.1 libethumb_client1-1.18.5-6.3.1 libethumb_client1-debuginfo-1.18.5-6.3.1 libevas1-1.18.5-6.3.1 libevas1-debuginfo-1.18.5-6.3.1 References: https://bugzilla.suse.com/1041477

1 0

openSUSE-RU-2017:1490-1: Recommended update for cryptsetup
by maintenance＠opensuse.org 06 Jun '17

06 Jun '17

openSUSE Recommended Update: Recommended update for cryptsetup ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1490-1 Rating: low References: #1031998 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cryptsetup provides the following fix: - Don't use a zero-filled empty key, because in FIPS, XTS mode key parts mustn't be equivalent (bsc#1031998) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-653=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): cryptsetup-1.6.4-5.3.1 cryptsetup-debuginfo-1.6.4-5.3.1 cryptsetup-debugsource-1.6.4-5.3.1 libcryptsetup-devel-1.6.4-5.3.1 libcryptsetup4-1.6.4-5.3.1 libcryptsetup4-debuginfo-1.6.4-5.3.1 libcryptsetup4-hmac-1.6.4-5.3.1 - openSUSE Leap 42.2 (x86_64): libcryptsetup4-32bit-1.6.4-5.3.1 libcryptsetup4-debuginfo-32bit-1.6.4-5.3.1 libcryptsetup4-hmac-32bit-1.6.4-5.3.1 References: https://bugzilla.suse.com/1031998

1 0

openSUSE-OU-2017:1487-1: Optional update for liberasurecode
by maintenance＠opensuse.org 06 Jun '17

06 Jun '17

openSUSE Optional Update: Optional update for liberasurecode ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:1487-1 Rating: low References: #1041161 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update provides liberasurecode 1.4.0 for openSUSE Leap 42.2. The package is an erasure code API library with pluggable erasure code backends, required for Swift for OpenStack. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-654=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): liberasurecode-debugsource-1.4.0-2.1 liberasurecode-devel-1.4.0-2.1 liberasurecode1-1.4.0-2.1 liberasurecode1-debuginfo-1.4.0-2.1 References: https://bugzilla.suse.com/1041161

1 0

openSUSE-SU-2017:1485-1: moderate: Security update for libupnp
by opensuse-security＠opensuse.org 05 Jun '17

05 Jun '17

openSUSE Security Update: Security update for libupnp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1485-1 Rating: moderate References: #1006256 #898167 #989948 Cross-References: CVE-2016-6255 CVE-2016-8863 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update to libupnp 1.6.21 fixes the following security issues: - various string handling issues (bsc#898167) - CVE-2016-8863: out-of-bounds access (bsc#1006256) - CVE-2016-6255: fix for file write via POST (bsc#989948) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-650=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libupnp-debugsource-1.6.21-4.3.1 libupnp-devel-1.6.21-4.3.1 libupnp6-1.6.21-4.3.1 libupnp6-debuginfo-1.6.21-4.3.1 - openSUSE Leap 42.2 (x86_64): libupnp6-32bit-1.6.21-4.3.1 libupnp6-debuginfo-32bit-1.6.21-4.3.1 References: https://www.suse.com/security/cve/CVE-2016-6255.html https://www.suse.com/security/cve/CVE-2016-8863.html https://bugzilla.suse.com/1006256 https://bugzilla.suse.com/898167 https://bugzilla.suse.com/989948

1 0