July 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2017:1933-1: important: Security update for evince
by opensuse-security＠opensuse.org 24 Jul '17

24 Jul '17

openSUSE Security Update: Security update for evince ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1933-1 Rating: important References: #1046856 Cross-References: CVE-2017-1000083 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for evince fixes the following issues: - CVE-2017-1000083: Remote attackers could have used the comicbook mode of evince to inject shell code. (bsc#1046856, bgo#784630) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-834=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): evince-3.20.1-2.3.1 evince-browser-plugin-3.20.1-2.3.1 evince-browser-plugin-debuginfo-3.20.1-2.3.1 evince-debuginfo-3.20.1-2.3.1 evince-debugsource-3.20.1-2.3.1 evince-devel-3.20.1-2.3.1 evince-plugin-comicsdocument-3.20.1-2.3.1 evince-plugin-comicsdocument-debuginfo-3.20.1-2.3.1 evince-plugin-djvudocument-3.20.1-2.3.1 evince-plugin-djvudocument-debuginfo-3.20.1-2.3.1 evince-plugin-dvidocument-3.20.1-2.3.1 evince-plugin-dvidocument-debuginfo-3.20.1-2.3.1 evince-plugin-pdfdocument-3.20.1-2.3.1 evince-plugin-pdfdocument-debuginfo-3.20.1-2.3.1 evince-plugin-psdocument-3.20.1-2.3.1 evince-plugin-psdocument-debuginfo-3.20.1-2.3.1 evince-plugin-tiffdocument-3.20.1-2.3.1 evince-plugin-tiffdocument-debuginfo-3.20.1-2.3.1 evince-plugin-xpsdocument-3.20.1-2.3.1 evince-plugin-xpsdocument-debuginfo-3.20.1-2.3.1 libevdocument3-4-3.20.1-2.3.1 libevdocument3-4-debuginfo-3.20.1-2.3.1 libevview3-3-3.20.1-2.3.1 libevview3-3-debuginfo-3.20.1-2.3.1 nautilus-evince-3.20.1-2.3.1 nautilus-evince-debuginfo-3.20.1-2.3.1 typelib-1_0-EvinceDocument-3_0-3.20.1-2.3.1 typelib-1_0-EvinceView-3_0-3.20.1-2.3.1 - openSUSE Leap 42.2 (noarch): evince-lang-3.20.1-2.3.1 References: https://www.suse.com/security/cve/CVE-2017-1000083.html https://bugzilla.suse.com/1046856

1 0

openSUSE-RU-2017:1932-1: important: Recommended update for libXi
by maintenance＠opensuse.org 24 Jul '17

24 Jul '17

openSUSE Recommended Update: Recommended update for libXi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1932-1 Rating: important References: #1049681 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libXi fixes the following issues: - many X clients would crash with SIGSEGV on tablet devices or some GTK applications (bsc#1049681) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-831=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-831=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libXi-debugsource-1.7.5-8.1 libXi-devel-1.7.5-8.1 libXi6-1.7.5-8.1 libXi6-debuginfo-1.7.5-8.1 - openSUSE Leap 42.3 (x86_64): libXi-devel-32bit-1.7.5-8.1 libXi6-32bit-1.7.5-8.1 libXi6-debuginfo-32bit-1.7.5-8.1 - openSUSE Leap 42.2 (i586 x86_64): libXi-debugsource-1.7.5-5.3.1 libXi-devel-1.7.5-5.3.1 libXi6-1.7.5-5.3.1 libXi6-debuginfo-1.7.5-5.3.1 - openSUSE Leap 42.2 (x86_64): libXi-devel-32bit-1.7.5-5.3.1 libXi6-32bit-1.7.5-5.3.1 libXi6-debuginfo-32bit-1.7.5-5.3.1 References: https://bugzilla.suse.com/1049681

1 0

openSUSE-RU-2017:1931-1: moderate: Recommended update for release-notes-openSUSE
by maintenance＠opensuse.org 24 Jul '17

24 Jul '17

openSUSE Recommended Update: Recommended update for release-notes-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1931-1 Rating: moderate References: #1006175 #1012371 #1015965 #1048660 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for release-notes-openSUSE fixes the following issues: - Update Leap 42.2 release notes to 42.2.20170721 (tracked in boo#1015965) - Updated translations - Added note about LibreOffice and Type-1 fonts (boo#1048660) - Added entry about missing GNOME Keyring integration with GPG (boo#1012371) - Added section about CCISS driver (boo#1006175) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-832=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): release-notes-openSUSE-42.2.20170721-5.3.1 References: https://bugzilla.suse.com/1006175 https://bugzilla.suse.com/1012371 https://bugzilla.suse.com/1015965 https://bugzilla.suse.com/1048660

1 0

openSUSE-RU-2017:1930-1: important: Recommended update for ucode-intel
by maintenance＠opensuse.org 24 Jul '17

24 Jul '17

openSUSE Recommended Update: Recommended update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1930-1 Rating: important References: #1043358 #1046431 #1048133 #993639 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for ucode-intel brings newer revisions of microcode firmwares for many Intel devices: - BDX-ML B0/M0/R0 (06-4f-01:ef): b00001f -> b000021 - Skylake D0 (06-4e-03:c0): 9e -> ba - Broadwell ULT/ULX E/F-step (06-3d-04:c0): 24 -> 25 - ULT Cx/Dx (06-45-01:72): 1f -> 20 - Crystalwell Cx (06-46-01:32): 16 -> 17 - Broadwell Halo E/G-step (06-47-01:22): 16 -> 17 - HSX EX E0 (06-3f-04:80): d -> f - Skylake R0 (06-5e-03:36): 9e -> ba - Haswell Cx/Dx (06-3c-03:32): 20 -> 22 - HSX C0 (06-3f-02:6f): 39 -> 3a - KBL H0 (06-8e-09:c0): -> 62 - KBL Y0 (06-8e-0a:c0): -> 66 - KBL B0 (06-9e-09:2a): -> 5e - SKX H0 (06-55-04:97): -> 2000022 The updated CPU microcode addresses the following bugs: - Intel Skylake AVX/ FMA3 issue. (bsc#993639) - Intel Skylake HyperThreading issue. (bsc#1046431) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-833=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-833=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): ucode-intel-20170707-10.1 ucode-intel-blob-20170707-10.1 ucode-intel-debuginfo-20170707-10.1 ucode-intel-debugsource-20170707-10.1 - openSUSE Leap 42.2 (i586 x86_64): ucode-intel-20170707-7.6.1 ucode-intel-blob-20170707-7.6.1 ucode-intel-debuginfo-20170707-7.6.1 ucode-intel-debugsource-20170707-7.6.1 References: https://bugzilla.suse.com/1043358 https://bugzilla.suse.com/1046431 https://bugzilla.suse.com/1048133 https://bugzilla.suse.com/993639

1 0

openSUSE-OU-2017:1921-2: Optional update for libkcapi
by maintenance＠opensuse.org 23 Jul '17

23 Jul '17

openSUSE Optional Update: Optional update for libkcapi ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:1921-2 Rating: low References: #1045948 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update supplies access library and tools for the Kernel Crypto API. The libkcapi0 library and the libkcapi-tools are used to access the cryptographic interface of the kernel over the AF_ALG socket interface. (FATE#323554 bsc#1045948) Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-829=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libkcapi-devel-0.13.0-2.1 libkcapi-tools-0.13.0-2.1 libkcapi-tools-debuginfo-0.13.0-2.1 libkcapi0-0.13.0-2.1 libkcapi0-debuginfo-0.13.0-2.1 References: https://bugzilla.suse.com/1045948

1 0

openSUSE-OU-2017:1921-1: Optional update for libkcapi
by maintenance＠opensuse.org 21 Jul '17

21 Jul '17

openSUSE Optional Update: Optional update for libkcapi ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:1921-1 Rating: low References: #1045948 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update supplies access library and tools for the Kernel Crypto API. The libkcapi0 library and the libkcapi-tools are used to access the cryptographic interface of the kernel over the AF_ALG socket interface. (FATE#323554 bsc#1045948) Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-829=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libkcapi-devel-0.13.0-2.1 libkcapi-tools-0.13.0-2.1 libkcapi-tools-debuginfo-0.13.0-2.1 libkcapi0-0.13.0-2.1 libkcapi0-debuginfo-0.13.0-2.1 References: https://bugzilla.suse.com/1045948

1 0

openSUSE-RU-2017:1920-1: Recommended update for oxygen5-icon-theme
by maintenance＠opensuse.org 21 Jul '17

21 Jul '17

openSUSE Recommended Update: Recommended update for oxygen5-icon-theme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1920-1 Rating: low References: #1035476 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for oxygen5-icon-theme fixes the following issues: - device notifier was missing a media mount action icon (boo#1035476) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-830=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): oxygen5-icon-theme-5.26.0-5.1 oxygen5-icon-theme-large-5.26.0-5.1 oxygen5-icon-theme-scalable-5.26.0-5.1 References: https://bugzilla.suse.com/1035476

1 0

openSUSE-SU-2017:1899-1: moderate: Security update for catdoc
by opensuse-security＠opensuse.org 19 Jul '17

19 Jul '17

openSUSE Security Update: Security update for catdoc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1899-1 Rating: moderate References: #1047877 Cross-References: CVE-2017-11110 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for catdoc fixes the following issues: - CVE-2017-11110: Attackers may have used specially crafted files to cause a denial of service through a heap-based buffer under-flow and application crash, or have unspecified other impact (boo#1047877) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-828=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): catdoc-0.95-7.6.1 catdoc-debuginfo-0.95-7.6.1 catdoc-debugsource-0.95-7.6.1 References: https://www.suse.com/security/cve/CVE-2017-11110.html https://bugzilla.suse.com/1047877

1 0

openSUSE-RU-2017:1889-1: Recommended update for clamav-database
by maintenance＠opensuse.org 18 Jul '17

18 Jul '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1889-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh July 17th 2017. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-827=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201707170005-54.54.1 References:

1 0

openSUSE-SU-2017:1885-1: important: Security update for xorg-x11-server
by opensuse-security＠opensuse.org 15 Jul '17

15 Jul '17

openSUSE Security Update: Security update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1885-1 Rating: important References: #1025084 #1035283 Cross-References: CVE-2017-10971 CVE-2017-10972 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for xorg-x11-server fixes the following issues: - CVE-2017-10971: Fix endianess handling of GenericEvent to prevent a stack overflow by clients. (bnc#1035283) - Make sure the type of all events to be sent by ProcXSendExtensionEvent are in the allowed range. - CVE-2017-10972: Initialize the xEvent eventT with zeros to avoid information leakage. - Improve retrieval of entropy for generating random authentication cookies (boo#1025084) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-825=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xorg-x11-server-7.6_1.18.3-12.20.1 xorg-x11-server-debuginfo-7.6_1.18.3-12.20.1 xorg-x11-server-debugsource-7.6_1.18.3-12.20.1 xorg-x11-server-extra-7.6_1.18.3-12.20.1 xorg-x11-server-extra-debuginfo-7.6_1.18.3-12.20.1 xorg-x11-server-sdk-7.6_1.18.3-12.20.1 xorg-x11-server-source-7.6_1.18.3-12.20.1 References: https://www.suse.com/security/cve/CVE-2017-10971.html https://www.suse.com/security/cve/CVE-2017-10972.html https://bugzilla.suse.com/1025084 https://bugzilla.suse.com/1035283

1 0