July 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:2017-1: Recommended update for procps
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for procps ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2017-1 Rating: low References: #1039941 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for procps provides the following fixes: - Allow reading and writing content lines longer than 1024 characters under /proc/sys (bsc#1039941) - Avoid printing messages when /proc/sys/net/ipv6/conf/*/stable_secret is not set This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-872=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libprocps3-3.3.9-14.1 libprocps3-debuginfo-3.3.9-14.1 procps-3.3.9-14.1 procps-debuginfo-3.3.9-14.1 procps-debugsource-3.3.9-14.1 procps-devel-3.3.9-14.1 References: https://bugzilla.suse.com/1039941

1 0

openSUSE-SU-2017:2016-1: moderate: Security update for apache2
by opensuse-security＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2016-1 Rating: moderate References: #1023616 #1043055 #1048576 Cross-References: CVE-2017-9788 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for apache2 fixes the following issues: Security issue fixed: - CVE-2017-9788: Uninitialized memory reflection in mod_auth_digest. (bsc#1048576) Bug fixes: - Include individual sysconfig.d files instead of the whole sysconfig.d directory. - Include sysconfig.d/include.conf after httpd.conf is processed. (bsc#1023616, bsc#1043055) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-865=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-865=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-2.4.23-13.1 apache2-debuginfo-2.4.23-13.1 apache2-debugsource-2.4.23-13.1 apache2-devel-2.4.23-13.1 apache2-event-2.4.23-13.1 apache2-event-debuginfo-2.4.23-13.1 apache2-example-pages-2.4.23-13.1 apache2-prefork-2.4.23-13.1 apache2-prefork-debuginfo-2.4.23-13.1 apache2-utils-2.4.23-13.1 apache2-utils-debuginfo-2.4.23-13.1 apache2-worker-2.4.23-13.1 apache2-worker-debuginfo-2.4.23-13.1 - openSUSE Leap 42.3 (noarch): apache2-doc-2.4.23-13.1 - openSUSE Leap 42.2 (i586 x86_64): apache2-2.4.23-8.9.1 apache2-debuginfo-2.4.23-8.9.1 apache2-debugsource-2.4.23-8.9.1 apache2-devel-2.4.23-8.9.1 apache2-event-2.4.23-8.9.1 apache2-event-debuginfo-2.4.23-8.9.1 apache2-example-pages-2.4.23-8.9.1 apache2-prefork-2.4.23-8.9.1 apache2-prefork-debuginfo-2.4.23-8.9.1 apache2-utils-2.4.23-8.9.1 apache2-utils-debuginfo-2.4.23-8.9.1 apache2-worker-2.4.23-8.9.1 apache2-worker-debuginfo-2.4.23-8.9.1 - openSUSE Leap 42.2 (noarch): apache2-doc-2.4.23-8.9.1 References: https://www.suse.com/security/cve/CVE-2017-9788.html https://bugzilla.suse.com/1023616 https://bugzilla.suse.com/1043055 https://bugzilla.suse.com/1048576

1 0

openSUSE-RU-2017:2015-1: Recommended update for procps
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for procps ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2015-1 Rating: low References: #1034563 #1039941 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for procps provides the following fixes: - Make pmap handle LazyFree in /proc/smaps (bsc#1034563) - Allow reading and writing content lines longer than 1024 characters under /proc/sys (bsc#1039941) - Avoid printing messages when /proc/sys/net/ipv6/conf/*/stable_secret is not set This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-868=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libprocps3-3.3.9-7.6.1 libprocps3-debuginfo-3.3.9-7.6.1 procps-3.3.9-7.6.1 procps-debuginfo-3.3.9-7.6.1 procps-debugsource-3.3.9-7.6.1 procps-devel-3.3.9-7.6.1 References: https://bugzilla.suse.com/1034563 https://bugzilla.suse.com/1039941

1 0

openSUSE-OU-2017:2014-1: Add perl-File-Copy-Recursive to the SUSE Package Hub
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Optional Update: Add perl-File-Copy-Recursive to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:2014-1 Rating: low References: #1049442 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update adds perl-File-Copy-Recursive to the SUSE Package Hub. The package contains aPerl extension for recursively copying files and directories and is a dependency for munin. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-860=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): perl-File-Copy-Recursive-0.38-2.1 References: https://bugzilla.suse.com/1049442

1 0

openSUSE-RU-2017:2013-1: Recommended update for perl-Bootloader
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for perl-Bootloader ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2013-1 Rating: low References: #1007335 #985567 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for perl-Bootloader provides the following fixes: - Parse ramdisk settings from grub2 correctly when booting with kexec-bootloader. (bsc#1007335) - Run shim-install only if secure boot is set to yes. (bsc#985567) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-858=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): perl-Bootloader-0.917-2.3.1 perl-Bootloader-YAML-0.917-2.3.1 References: https://bugzilla.suse.com/1007335 https://bugzilla.suse.com/985567

1 0

openSUSE-OU-2017:2012-1: Add the_silver_searcher to the SUSE Package Hub
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Optional Update: Add the_silver_searcher to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:2012-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update adds the_silver_searcher to the SUSE Package Hub. "The silver searcher", otherwise known as "ag" by it's command line name, is code searching tool with a focus on speed. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-859=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): the_silver_searcher-2.0.0-2.1 References:

1 0

openSUSE-SU-2017:2011-1: moderate: Security update for mysql-community-server
by opensuse-security＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Security Update: Security update for mysql-community-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2011-1 Rating: moderate References: #1049394 #1049396 #1049398 #1049399 #1049404 #1049410 #1049411 #1049412 #1049415 #1049416 #1049417 #1049421 #1049422 Cross-References: CVE-2017-3633 CVE-2017-3634 CVE-2017-3635 CVE-2017-3636 CVE-2017-3641 CVE-2017-3647 CVE-2017-3648 CVE-2017-3649 CVE-2017-3651 CVE-2017-3652 CVE-2017-3653 CVE-2017-3732 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves 12 vulnerabilities and has one errata is now available. Description: This update for mysql-community-server to version 5.6.37 fixes security issues and bugs. The following vulnerabilities were fixed: - CVE-2017-3633: Memcached unspecified vulnerability (boo#1049394) - CVE-2017-3634: DML unspecified vulnerability (boo#1049396) - CVE-2017-3635: C API unspecified vulnerability (boo#1049398) - CVE-2017-3636: Client programs unspecified vulnerability (boo#1049399) - CVE-2017-3641: DML unspecified vulnerability (boo#1049404) - CVE-2017-3647: Replication unspecified vulnerability (boo#1049410) - CVE-2017-3648: Charsets unspecified vulnerability (boo#1049411) - CVE-2017-3649: Replication unspecified vulnerability (boo#1049412) - CVE-2017-3651: Client mysqldump unspecified vulnerability (boo#1049415) - CVE-2017-3652: DDL unspecified vulnerability (boo#1049416) - CVE-2017-3653: DDL unspecified vulnerability (boo#1049417) - CVE-2017-3732: Security, Encryption unspecified vulnerability (boo#1049421) The following general changes are included: - switch systemd unit file from 'Restart=on-failure' to 'Restart=on-abort' - update file lists for new man-pages and tools (for mariadb) For a list of upstream changes in this release, see: http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-866=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-866=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libmysql56client18-5.6.37-27.1 libmysql56client18-debuginfo-5.6.37-27.1 libmysql56client_r18-5.6.37-27.1 mysql-community-server-5.6.37-27.1 mysql-community-server-bench-5.6.37-27.1 mysql-community-server-bench-debuginfo-5.6.37-27.1 mysql-community-server-client-5.6.37-27.1 mysql-community-server-client-debuginfo-5.6.37-27.1 mysql-community-server-debuginfo-5.6.37-27.1 mysql-community-server-debugsource-5.6.37-27.1 mysql-community-server-errormessages-5.6.37-27.1 mysql-community-server-test-5.6.37-27.1 mysql-community-server-test-debuginfo-5.6.37-27.1 mysql-community-server-tools-5.6.37-27.1 mysql-community-server-tools-debuginfo-5.6.37-27.1 - openSUSE Leap 42.3 (x86_64): libmysql56client18-32bit-5.6.37-27.1 libmysql56client18-debuginfo-32bit-5.6.37-27.1 libmysql56client_r18-32bit-5.6.37-27.1 - openSUSE Leap 42.2 (i586 x86_64): libmysql56client18-5.6.37-24.9.1 libmysql56client18-debuginfo-5.6.37-24.9.1 libmysql56client_r18-5.6.37-24.9.1 mysql-community-server-5.6.37-24.9.1 mysql-community-server-bench-5.6.37-24.9.1 mysql-community-server-bench-debuginfo-5.6.37-24.9.1 mysql-community-server-client-5.6.37-24.9.1 mysql-community-server-client-debuginfo-5.6.37-24.9.1 mysql-community-server-debuginfo-5.6.37-24.9.1 mysql-community-server-debugsource-5.6.37-24.9.1 mysql-community-server-errormessages-5.6.37-24.9.1 mysql-community-server-test-5.6.37-24.9.1 mysql-community-server-test-debuginfo-5.6.37-24.9.1 mysql-community-server-tools-5.6.37-24.9.1 mysql-community-server-tools-debuginfo-5.6.37-24.9.1 - openSUSE Leap 42.2 (x86_64): libmysql56client18-32bit-5.6.37-24.9.1 libmysql56client18-debuginfo-32bit-5.6.37-24.9.1 libmysql56client_r18-32bit-5.6.37-24.9.1 References: https://www.suse.com/security/cve/CVE-2017-3633.html https://www.suse.com/security/cve/CVE-2017-3634.html https://www.suse.com/security/cve/CVE-2017-3635.html https://www.suse.com/security/cve/CVE-2017-3636.html https://www.suse.com/security/cve/CVE-2017-3641.html https://www.suse.com/security/cve/CVE-2017-3647.html https://www.suse.com/security/cve/CVE-2017-3648.html https://www.suse.com/security/cve/CVE-2017-3649.html https://www.suse.com/security/cve/CVE-2017-3651.html https://www.suse.com/security/cve/CVE-2017-3652.html https://www.suse.com/security/cve/CVE-2017-3653.html https://www.suse.com/security/cve/CVE-2017-3732.html https://bugzilla.suse.com/1049394 https://bugzilla.suse.com/1049396 https://bugzilla.suse.com/1049398 https://bugzilla.suse.com/1049399 https://bugzilla.suse.com/1049404 https://bugzilla.suse.com/1049410 https://bugzilla.suse.com/1049411 https://bugzilla.suse.com/1049412 https://bugzilla.suse.com/1049415 https://bugzilla.suse.com/1049416 https://bugzilla.suse.com/1049417 https://bugzilla.suse.com/1049421 https://bugzilla.suse.com/1049422

1 0

openSUSE-RU-2017:2010-1: Recommended update for mpg123
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for mpg123 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2010-1 Rating: low References: #1046766 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mpg123 fixes the following issues: - Improve over previous fix for CVE-2017-10683 to avoid playback issues (bsc#1046766) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-862=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libmpg123-0-1.25.3-3.1 libmpg123-0-debuginfo-1.25.3-3.1 libout123-0-1.25.3-3.1 libout123-0-debuginfo-1.25.3-3.1 mpg123-1.25.3-3.1 mpg123-debuginfo-1.25.3-3.1 mpg123-debugsource-1.25.3-3.1 mpg123-devel-1.25.3-3.1 mpg123-esound-1.25.3-3.1 mpg123-esound-debuginfo-1.25.3-3.1 mpg123-jack-1.25.3-3.1 mpg123-jack-debuginfo-1.25.3-3.1 mpg123-openal-1.25.3-3.1 mpg123-openal-debuginfo-1.25.3-3.1 mpg123-portaudio-1.25.3-3.1 mpg123-portaudio-debuginfo-1.25.3-3.1 mpg123-pulse-1.25.3-3.1 mpg123-pulse-debuginfo-1.25.3-3.1 mpg123-sdl-1.25.3-3.1 mpg123-sdl-debuginfo-1.25.3-3.1 - openSUSE Leap 42.3 (x86_64): libmpg123-0-32bit-1.25.3-3.1 libmpg123-0-debuginfo-32bit-1.25.3-3.1 libout123-0-32bit-1.25.3-3.1 libout123-0-debuginfo-32bit-1.25.3-3.1 mpg123-devel-32bit-1.25.3-3.1 mpg123-esound-32bit-1.25.3-3.1 mpg123-esound-debuginfo-32bit-1.25.3-3.1 mpg123-jack-32bit-1.25.3-3.1 mpg123-jack-debuginfo-32bit-1.25.3-3.1 mpg123-openal-32bit-1.25.3-3.1 mpg123-openal-debuginfo-32bit-1.25.3-3.1 mpg123-portaudio-32bit-1.25.3-3.1 mpg123-portaudio-debuginfo-32bit-1.25.3-3.1 mpg123-pulse-32bit-1.25.3-3.1 mpg123-pulse-debuginfo-32bit-1.25.3-3.1 mpg123-sdl-32bit-1.25.3-3.1 mpg123-sdl-debuginfo-32bit-1.25.3-3.1 References: https://bugzilla.suse.com/1046766

1 0

openSUSE-RU-2017:2009-1: Recommended update for shotwell
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for shotwell ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2009-1 Rating: low References: #1040047 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for shotwell fixes the following issues: - Fix segmentation fault on "Import From Application..." after disabling plugins (bsc#1040047) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-871=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-871=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): shotwell-lang-0.22.0+git.20160103-11.1 - openSUSE Leap 42.3 (x86_64): shotwell-0.22.0+git.20160103-11.1 shotwell-debuginfo-0.22.0+git.20160103-11.1 shotwell-debugsource-0.22.0+git.20160103-11.1 - openSUSE Leap 42.2 (x86_64): shotwell-0.22.0+git.20160103-7.6.1 shotwell-debuginfo-0.22.0+git.20160103-7.6.1 shotwell-debugsource-0.22.0+git.20160103-7.6.1 - openSUSE Leap 42.2 (noarch): shotwell-lang-0.22.0+git.20160103-7.6.1 References: https://bugzilla.suse.com/1040047

1 0

openSUSE-RU-2017:2008-1: moderate: Recommended update for squidGuard
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for squidGuard ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2008-1 Rating: moderate References: #1040757 #961499 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for squidGuard provides the following fixes: - Adapt squidGuard to work properly with current versions of squid (bsc#1040757) - Change the default configuration file to only reference existing filter lists (bsc#961499) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-870=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-870=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): squidGuard-1.4-8.1 squidGuard-debuginfo-1.4-8.1 squidGuard-debugsource-1.4-8.1 squidGuard-doc-1.4-8.1 - openSUSE Leap 42.2 (i586 x86_64): squidGuard-1.4-5.3.1 squidGuard-debuginfo-1.4-5.3.1 squidGuard-debugsource-1.4-5.3.1 squidGuard-doc-1.4-5.3.1 References: https://bugzilla.suse.com/1040757 https://bugzilla.suse.com/961499

1 0