July 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2017:1765-1: moderate: Security update for ffmpeg
by opensuse-security＠opensuse.org 04 Jul '17

04 Jul '17

openSUSE Security Update: Security update for ffmpeg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1765-1 Rating: moderate References: #1046211 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for ffmpeg fixes the following issues: ffmpeg was updated to 2.8.12, fixing a lot of security issues. (boo#1046211) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-767=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): ffmpeg2-devel-2.8.12-15.1 libavcodec56-2.8.12-15.1 libavdevice56-2.8.12-15.1 libavfilter5-2.8.12-15.1 libavformat56-2.8.12-15.1 libavresample2-2.8.12-15.1 libavutil54-2.8.12-15.1 libpostproc53-2.8.12-15.1 libswresample1-2.8.12-15.1 libswscale3-2.8.12-15.1 References: https://bugzilla.suse.com/1046211

1 0

openSUSE-RU-2017:1764-1: Recommended update for phpMyAdmin
by maintenance＠opensuse.org 04 Jul '17

04 Jul '17

openSUSE Recommended Update: Recommended update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1764-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for phpMyAdmin version fixes the following issues: * Make theme selection keep current server * Fixed direct login for accounts without password * Fixed check for mbstring.func_overload * Fixed wrong encoding of table at triggers * Fixed natural sorting in several places * Show warning for users removed from mysql.user table * Fixed loading additional javascripts * Fixed editing QBE * Improved documentation on user settings * Gracefully handle early fatal errors in AJAX requests * Fixed Incorrect NavigationTreeEnableExpansion default value in the documentation * Fixed export of database with a lot of tables * Improved performance when importing with enabled tracking * Show only supported charsets for conversion * Fixed operation with session.auto_start enabled * Fix "Create PHP code" * Fixed links to resume timeouted import Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-768=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): phpMyAdmin-4.7.2-8.1 References:

1 0

openSUSE-SU-2017:1757-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 03 Jul '17

03 Jul '17

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1757-1 Rating: moderate References: #1035111 #1040883 #1040889 #1040891 Cross-References: CVE-2016-6294 CVE-2017-9224 CVE-2017-9226 CVE-2017-9227 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for php5 fixes the following security issues: - CVE-2016-6294: The locale_accept_from_http function in ext/intl/locale/locale_methods.c did not properly restrict calls to the ICU uloc_acceptLanguageFromHTTP function, which allowed remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long argument (bsc#1035111). - CVE-2017-9227: A stack out-of-bounds read occurs in mbc_enc_len() during regular expression searching. (bsc#1040883) - CVE-2017-9226: A heap out-of-bounds write or read occurs in next_state_val() during regular expression compilation. (bsc#1040889) - CVE-2017-9224: A stack out-of-bounds read occurs in match_at() during regular expression searching. (bsc#1040891) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-764=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_php5-5.5.14-77.6.1 apache2-mod_php5-debuginfo-5.5.14-77.6.1 php5-5.5.14-77.6.1 php5-bcmath-5.5.14-77.6.1 php5-bcmath-debuginfo-5.5.14-77.6.1 php5-bz2-5.5.14-77.6.1 php5-bz2-debuginfo-5.5.14-77.6.1 php5-calendar-5.5.14-77.6.1 php5-calendar-debuginfo-5.5.14-77.6.1 php5-ctype-5.5.14-77.6.1 php5-ctype-debuginfo-5.5.14-77.6.1 php5-curl-5.5.14-77.6.1 php5-curl-debuginfo-5.5.14-77.6.1 php5-dba-5.5.14-77.6.1 php5-dba-debuginfo-5.5.14-77.6.1 php5-debuginfo-5.5.14-77.6.1 php5-debugsource-5.5.14-77.6.1 php5-devel-5.5.14-77.6.1 php5-dom-5.5.14-77.6.1 php5-dom-debuginfo-5.5.14-77.6.1 php5-enchant-5.5.14-77.6.1 php5-enchant-debuginfo-5.5.14-77.6.1 php5-exif-5.5.14-77.6.1 php5-exif-debuginfo-5.5.14-77.6.1 php5-fastcgi-5.5.14-77.6.1 php5-fastcgi-debuginfo-5.5.14-77.6.1 php5-fileinfo-5.5.14-77.6.1 php5-fileinfo-debuginfo-5.5.14-77.6.1 php5-firebird-5.5.14-77.6.1 php5-firebird-debuginfo-5.5.14-77.6.1 php5-fpm-5.5.14-77.6.1 php5-fpm-debuginfo-5.5.14-77.6.1 php5-ftp-5.5.14-77.6.1 php5-ftp-debuginfo-5.5.14-77.6.1 php5-gd-5.5.14-77.6.1 php5-gd-debuginfo-5.5.14-77.6.1 php5-gettext-5.5.14-77.6.1 php5-gettext-debuginfo-5.5.14-77.6.1 php5-gmp-5.5.14-77.6.1 php5-gmp-debuginfo-5.5.14-77.6.1 php5-iconv-5.5.14-77.6.1 php5-iconv-debuginfo-5.5.14-77.6.1 php5-imap-5.5.14-77.6.1 php5-imap-debuginfo-5.5.14-77.6.1 php5-intl-5.5.14-77.6.1 php5-intl-debuginfo-5.5.14-77.6.1 php5-json-5.5.14-77.6.1 php5-json-debuginfo-5.5.14-77.6.1 php5-ldap-5.5.14-77.6.1 php5-ldap-debuginfo-5.5.14-77.6.1 php5-mbstring-5.5.14-77.6.1 php5-mbstring-debuginfo-5.5.14-77.6.1 php5-mcrypt-5.5.14-77.6.1 php5-mcrypt-debuginfo-5.5.14-77.6.1 php5-mssql-5.5.14-77.6.1 php5-mssql-debuginfo-5.5.14-77.6.1 php5-mysql-5.5.14-77.6.1 php5-mysql-debuginfo-5.5.14-77.6.1 php5-odbc-5.5.14-77.6.1 php5-odbc-debuginfo-5.5.14-77.6.1 php5-opcache-5.5.14-77.6.1 php5-opcache-debuginfo-5.5.14-77.6.1 php5-openssl-5.5.14-77.6.1 php5-openssl-debuginfo-5.5.14-77.6.1 php5-pcntl-5.5.14-77.6.1 php5-pcntl-debuginfo-5.5.14-77.6.1 php5-pdo-5.5.14-77.6.1 php5-pdo-debuginfo-5.5.14-77.6.1 php5-pgsql-5.5.14-77.6.1 php5-pgsql-debuginfo-5.5.14-77.6.1 php5-phar-5.5.14-77.6.1 php5-phar-debuginfo-5.5.14-77.6.1 php5-posix-5.5.14-77.6.1 php5-posix-debuginfo-5.5.14-77.6.1 php5-pspell-5.5.14-77.6.1 php5-pspell-debuginfo-5.5.14-77.6.1 php5-readline-5.5.14-77.6.1 php5-readline-debuginfo-5.5.14-77.6.1 php5-shmop-5.5.14-77.6.1 php5-shmop-debuginfo-5.5.14-77.6.1 php5-snmp-5.5.14-77.6.1 php5-snmp-debuginfo-5.5.14-77.6.1 php5-soap-5.5.14-77.6.1 php5-soap-debuginfo-5.5.14-77.6.1 php5-sockets-5.5.14-77.6.1 php5-sockets-debuginfo-5.5.14-77.6.1 php5-sqlite-5.5.14-77.6.1 php5-sqlite-debuginfo-5.5.14-77.6.1 php5-suhosin-5.5.14-77.6.1 php5-suhosin-debuginfo-5.5.14-77.6.1 php5-sysvmsg-5.5.14-77.6.1 php5-sysvmsg-debuginfo-5.5.14-77.6.1 php5-sysvsem-5.5.14-77.6.1 php5-sysvsem-debuginfo-5.5.14-77.6.1 php5-sysvshm-5.5.14-77.6.1 php5-sysvshm-debuginfo-5.5.14-77.6.1 php5-tidy-5.5.14-77.6.1 php5-tidy-debuginfo-5.5.14-77.6.1 php5-tokenizer-5.5.14-77.6.1 php5-tokenizer-debuginfo-5.5.14-77.6.1 php5-wddx-5.5.14-77.6.1 php5-wddx-debuginfo-5.5.14-77.6.1 php5-xmlreader-5.5.14-77.6.1 php5-xmlreader-debuginfo-5.5.14-77.6.1 php5-xmlrpc-5.5.14-77.6.1 php5-xmlrpc-debuginfo-5.5.14-77.6.1 php5-xmlwriter-5.5.14-77.6.1 php5-xmlwriter-debuginfo-5.5.14-77.6.1 php5-xsl-5.5.14-77.6.1 php5-xsl-debuginfo-5.5.14-77.6.1 php5-zip-5.5.14-77.6.1 php5-zip-debuginfo-5.5.14-77.6.1 php5-zlib-5.5.14-77.6.1 php5-zlib-debuginfo-5.5.14-77.6.1 - openSUSE Leap 42.2 (noarch): php5-pear-5.5.14-77.6.1 References: https://www.suse.com/security/cve/CVE-2016-6294.html https://www.suse.com/security/cve/CVE-2017-9224.html https://www.suse.com/security/cve/CVE-2017-9226.html https://www.suse.com/security/cve/CVE-2017-9227.html https://bugzilla.suse.com/1035111 https://bugzilla.suse.com/1040883 https://bugzilla.suse.com/1040889 https://bugzilla.suse.com/1040891

1 0

openSUSE-SU-2017:1756-1: moderate: Security update for kdepim, messagelib
by opensuse-security＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Security Update: Security update for kdepim, messagelib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1756-1 Rating: moderate References: #1044210 Cross-References: CVE-2017-9604 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kdepim and messagelib fixes the following issues: - CVE-2017-9604: The kmail "send later" function does not have "sign/encryption" action ensured. (boo#1044210) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-756=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): akonadi_resources-16.08.2-5.2 akonadi_resources-debuginfo-16.08.2-5.2 akregator5-16.08.2-5.2 akregator5-debuginfo-16.08.2-5.2 blogilo5-16.08.2-5.2 blogilo5-debuginfo-16.08.2-5.2 kaddressbook5-16.08.2-5.2 kaddressbook5-debuginfo-16.08.2-5.2 kalarm5-16.08.2-5.2 kalarm5-debuginfo-16.08.2-5.2 kdepim-16.08.2-5.2 kdepim-debuginfo-16.08.2-5.2 kdepim-debugsource-16.08.2-5.2 kmail5-16.08.2-5.2 kmail5-debuginfo-16.08.2-5.2 knotes5-16.08.2-5.2 knotes5-debuginfo-16.08.2-5.2 kontact5-16.08.2-5.2 kontact5-debuginfo-16.08.2-5.2 korganizer5-16.08.2-5.2 korganizer5-debuginfo-16.08.2-5.2 ktnef5-16.08.2-5.2 ktnef5-debuginfo-16.08.2-5.2 messagelib-16.08.2-5.1 messagelib-debuginfo-16.08.2-5.1 messagelib-debugsource-16.08.2-5.1 messagelib-devel-16.08.2-5.1 References: https://www.suse.com/security/cve/CVE-2017-9604.html https://bugzilla.suse.com/1044210

1 0

openSUSE-RU-2017:1755-1: Recommended update for e2fsprogs
by maintenance＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Recommended Update: Recommended update for e2fsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1755-1 Rating: low References: #1038194 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for e2fsprogs provides the following fixes: - Don't ignore fsync errors in libext2fs. (bsc#1038194) - Fix fsync(2) detection in libext2fs. (bsc#1038194) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-759=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): e2fsprogs-1.42.11-12.6.1 e2fsprogs-debuginfo-1.42.11-12.6.1 e2fsprogs-debugsource-1.42.11-12.6.1 e2fsprogs-devel-1.42.11-12.6.1 libcom_err-devel-1.42.11-12.6.1 libcom_err2-1.42.11-12.6.1 libcom_err2-debuginfo-1.42.11-12.6.1 libext2fs-devel-1.42.11-12.6.1 libext2fs2-1.42.11-12.6.1 libext2fs2-debuginfo-1.42.11-12.6.1 - openSUSE Leap 42.2 (x86_64): e2fsprogs-debuginfo-32bit-1.42.11-12.6.1 libcom_err-devel-32bit-1.42.11-12.6.1 libcom_err2-32bit-1.42.11-12.6.1 libcom_err2-debuginfo-32bit-1.42.11-12.6.1 libext2fs-devel-32bit-1.42.11-12.6.1 libext2fs2-32bit-1.42.11-12.6.1 libext2fs2-debuginfo-32bit-1.42.11-12.6.1 References: https://bugzilla.suse.com/1038194

1 0

openSUSE-RU-2017:1754-1: moderate: Recommended update for ucode-intel
by maintenance＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Recommended Update: Recommended update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1754-1 Rating: moderate References: #1046431 #993639 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ucode-intel to version 20170511 fixes the following issues: - Intel Skylake AVX/ FMA3 bug" (boo#993639) - Intel Skylake hyperthreading bug - for some models Skylake models (boo#1046431) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-762=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ucode-intel-20170511-7.3.1 ucode-intel-blob-20170511-7.3.1 ucode-intel-debuginfo-20170511-7.3.1 ucode-intel-debugsource-20170511-7.3.1 References: https://bugzilla.suse.com/1046431 https://bugzilla.suse.com/993639

1 0

openSUSE-RU-2017:1753-1: moderate: Recommended update for gnucash
by maintenance＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Recommended Update: Recommended update for gnucash ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1753-1 Rating: moderate References: #1046129 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update to gnucash 2.6.16 fixes the following issues: - GnuCash 2.6.7 would crash (boo#1046129) This update also contains various bug fixes, UI and translation updates in the 2.6.x stable release series. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-761=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): gnucash-2.6.16-3.3.1 gnucash-debuginfo-2.6.16-3.3.1 gnucash-debugsource-2.6.16-3.3.1 gnucash-devel-2.6.16-3.3.1 python-gnucash-2.6.16-3.3.1 python-gnucash-debuginfo-2.6.16-3.3.1 - openSUSE Leap 42.2 (noarch): gnucash-docs-2.6.16-6.3.1 gnucash-lang-2.6.16-3.3.1 References: https://bugzilla.suse.com/1046129

1 0

openSUSE-RU-2017:1752-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1752-1 Rating: moderate References: #1046652 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spec-cleaner fixes various issues, including: - Remove defattr as default from new rpm should be enough - Remove buildroot as new rpms do not need it at all - Fix help parsing that crashed the app on execution - Deduplication of requires/buildrequires - Preamble detection fixups - Detect buildignores Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-763=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): spec-cleaner-0.9.8-31.9.1 spec-cleaner-format_spec_file-0.9.8-31.9.1 References: https://bugzilla.suse.com/1046652

1 0

openSUSE-RU-2017:1751-1: Recommended update for xfsprogs
by maintenance＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Recommended Update: Recommended update for xfsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1751-1 Rating: low References: #1034045 #1037376 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for xfsprogs provides the following fixes: - Moved dracut files to accommodate JeOS (bsc#1037376). - Don't call xfs_sb_quota_from_disk twice in xfs_repair(8). (bsc#1034045) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-758=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xfsprogs-4.3.0-3.3.1 xfsprogs-debuginfo-4.3.0-3.3.1 xfsprogs-debugsource-4.3.0-3.3.1 xfsprogs-devel-4.3.0-3.3.1 References: https://bugzilla.suse.com/1034045 https://bugzilla.suse.com/1037376

1 0

openSUSE-RU-2017:1750-1: Recommended update for libsemanage, policycoreutils
by maintenance＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Recommended Update: Recommended update for libsemanage, policycoreutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1750-1 Rating: low References: #1043237 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libsemanage, policycoreutils fixes the following issue: - Show version numbers of modules where they are available (bsc#1043237) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-760=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libsemanage-debugsource-2.5-2.6.1 libsemanage-devel-2.5-2.6.1 libsemanage-devel-static-2.5-2.6.1 libsemanage1-2.5-2.6.1 libsemanage1-debuginfo-2.5-2.6.1 python-semanage-2.5-2.6.1 python-semanage-debuginfo-2.5-2.6.1 python-semanage-debugsource-2.5-2.6.1 - openSUSE Leap 42.2 (x86_64): libsemanage1-32bit-2.5-2.6.1 libsemanage1-debuginfo-32bit-2.5-2.6.1 policycoreutils-2.5-2.3.1 policycoreutils-debuginfo-2.5-2.3.1 policycoreutils-debugsource-2.5-2.3.1 policycoreutils-gui-2.5-2.3.1 policycoreutils-newrole-2.5-2.3.1 policycoreutils-newrole-debuginfo-2.5-2.3.1 policycoreutils-python-2.5-2.3.1 policycoreutils-python-debuginfo-2.5-2.3.1 policycoreutils-sandbox-2.5-2.3.1 policycoreutils-sandbox-debuginfo-2.5-2.3.1 - openSUSE Leap 42.2 (noarch): policycoreutils-lang-2.5-2.3.1 References: https://bugzilla.suse.com/1043237

1 0