July 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:1874-1: Recommended update for marble
by maintenance＠opensuse.org 14 Jul '17

14 Jul '17

openSUSE Recommended Update: Recommended update for marble ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1874-1 Rating: low References: #1044747 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for marble fixes the following issues: - Fixes a crash when adding bookmarks while UTM is set for view angle. (boo#1044747) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-813=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): libastro1-16.08.2-2.5.1 libastro1-debuginfo-16.08.2-2.5.1 libmarblewidget-qt5-25-16.08.2-2.5.1 libmarblewidget-qt5-25-debuginfo-16.08.2-2.5.1 marble-16.08.2-2.5.1 marble-debuginfo-16.08.2-2.5.1 marble-devel-16.08.2-2.5.1 marble-kde-16.08.2-2.5.1 marble-kde-debuginfo-16.08.2-2.5.1 marble-qt-16.08.2-2.5.1 marble-qt-debuginfo-16.08.2-2.5.1 - openSUSE Leap 42.2 (noarch): marble-data-16.08.2-2.5.1 marble-doc-16.08.2-2.5.1 References: https://bugzilla.suse.com/1044747

1 0

openSUSE-RU-2017:1873-1: Recommended update for marble
by maintenance＠opensuse.org 14 Jul '17

14 Jul '17

openSUSE Recommended Update: Recommended update for marble ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1873-1 Rating: low References: #1044747 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for marble fixes the following issues: - Fixes a crash when adding bookmarks while UTM is set for view angle. (boo#1044747) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-813=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): libastro1-16.08.2-7.1 libastro1-debuginfo-16.08.2-7.1 libmarblewidget-qt5-25-16.08.2-7.1 libmarblewidget-qt5-25-debuginfo-16.08.2-7.1 marble-16.08.2-7.1 marble-debuginfo-16.08.2-7.1 marble-devel-16.08.2-7.1 marble-kde-16.08.2-7.1 marble-kde-debuginfo-16.08.2-7.1 marble-qt-16.08.2-7.1 marble-qt-debuginfo-16.08.2-7.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): marble-data-16.08.2-7.1 marble-doc-16.08.2-7.1 References: https://bugzilla.suse.com/1044747

1 0

openSUSE-SU-2017:1872-1: important: Security update for qemu
by opensuse-security＠opensuse.org 14 Jul '17

14 Jul '17

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1872-1 Rating: important References: #1016503 #1016504 #1017081 #1017084 #1020427 #1021741 #1025109 #1025311 #1028184 #1028656 #1030624 #1031142 #1032075 #1034866 #1034908 #1035406 #1035950 #1036211 #1037242 #1037334 #1037336 #1039495 #1042159 #1042800 #1042801 #1043073 #1043296 Cross-References: CVE-2016-10028 CVE-2016-10029 CVE-2016-9602 CVE-2016-9603 CVE-2017-5579 CVE-2017-5973 CVE-2017-5987 CVE-2017-6505 CVE-2017-7377 CVE-2017-7471 CVE-2017-7493 CVE-2017-7718 CVE-2017-7980 CVE-2017-8086 CVE-2017-8112 CVE-2017-8309 CVE-2017-8379 CVE-2017-8380 CVE-2017-9330 CVE-2017-9373 CVE-2017-9374 CVE-2017-9375 CVE-2017-9503 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves 23 vulnerabilities and has four fixes is now available. Description: This update for qemu fixes several issues. These security issues were fixed: - CVE-2017-9330: USB OHCI Emulation in qemu allowed local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value (bsc#1042159). - CVE-2017-8379: Memory leak in the keyboard input event handlers support allowed local guest OS privileged users to cause a denial of service (host memory consumption) by rapidly generating large keyboard events (bsc#1037334). - CVE-2017-8309: Memory leak in the audio/audio.c allowed remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture (bsc#1037242). - CVE-2017-7493: The VirtFS, host directory sharing via Plan 9 File System(9pfs) support, was vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could have used this flaw to escalate their privileges inside guest (bsc#1039495). - CVE-2017-7377: The v9fs_create and v9fs_lcreate functions in hw/9pfs/9p.c allowed local guest OS privileged users to cause a denial of service (file descriptor or memory consumption) via vectors related to an already in-use fid (bsc#1032075). - CVE-2017-8086: A memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c allowed local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable (bsc#1035950). - CVE-2017-5973: A infinite loop while doing control transfer in xhci_kick_epctx allowed privileged user inside the guest to crash the host process resulting in DoS (bsc#1025109) - CVE-2017-5987: The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c allowed local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors involving the transfer mode register during multi block transfer (bsc#1025311). - CVE-2017-6505: The ohci_service_ed_list function in hw/usb/hcd-ohci.c allowed local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors (bsc#1028184) - CVE-2016-9603: A privileged user within the guest VM could have caused a heap overflow in the device model process, potentially escalating their privileges to that of the device model process (bsc#1028656) - CVE-2017-7718: hw/display/cirrus_vga_rop.h allowed local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions (bsc#1034908) - CVE-2017-7980: An out-of-bounds r/w access issues in the Cirrus CLGD 54xx VGA Emulator support allowed privileged user inside guest to use this flaw to crash the Qemu process resulting in DoS or potentially execute arbitrary code on a host with privileges of Qemu process on the host (bsc#1035406) - CVE-2017-8112: hw/scsi/vmw_pvscsi.c allowed local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count (bsc#1036211). - CVE-2017-9375: The USB xHCI controller emulator support was vulnerable to an infinite recursive call loop issue, which allowed a privileged user inside guest to crash the Qemu process resulting in DoS (bsc#1042800). - CVE-2017-9374: Missing free of 's->ipacket', causes a host memory leak, allowing for DoS (bsc#1043073). - CVE-2017-9373: The IDE AHCI Emulation support was vulnerable to a host memory leakage issue, which allowed a privileged user inside guest to leak host memory resulting in DoS (bsc#1042801). - CVE-2017-8380: The MegaRAID SAS 8708EM2 Host Bus Adapter emulation support was vulnerable to an out-of-bounds read access issue which allowed a privileged user inside guest to read host memory resulting in DoS (bsc#1037336). - CVE-2016-9602: The VirtFS host directory sharing via Plan 9 File System(9pfs) support was vulnerable to an improper link following issue which allowed a privileged user inside guest to access host file system beyond the shared folder and potentially escalating their privileges on a host (bsc#1020427). - CVE-2017-7471: The VirtFS host directory sharing via Plan 9 File System(9pfs) support was vulnerable to an improper access control issue which allowed a privileged user inside guest to access host file system beyond the shared folder and potentially escalating their privileges on a host (bsc#1034866). - Fix privilege escalation in TCG mode of QEMU. This is not considered a security issue by the upstream project, but is included as additional hardening (bsc#1030624) - Fix potential DoS in virtfs - CVE-2016-10028: The Virtio GPU Device emulator support was vulnerable to an out of bounds memory access issue allowing a guest user to crash the Qemu process instance on a host, resulting in DoS (bsc#1017084, bsc#1016503) - CVE-2016-10029: The Virtio GPU Device emulator support was vulnerable to an OOB read issue allowing a guest user to crash the Qemu process instance resulting in Dos (bsc#1017081, bsc#1016504) - CVE-2017-5579: The 16550A UART serial device emulation support was vulnerable to a memory leakage issue allowing a privileged user to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1021741) - CVE-2017-9503: The MegaRAID SAS 8708EM2 Host Bus Adapter emulation support was vulnerable to a null pointer dereference issue which allowed a privileged user inside guest to crash the Qemu process on the host resulting in DoS (bsc#1043296). This non-security issue was fixed: - Enable MONITOR/MWAIT support for guests (bsc#1031142) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-822=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): qemu-2.6.2-31.3.3 qemu-arm-2.6.2-31.3.3 qemu-arm-debuginfo-2.6.2-31.3.3 qemu-block-curl-2.6.2-31.3.3 qemu-block-curl-debuginfo-2.6.2-31.3.3 qemu-block-dmg-2.6.2-31.3.3 qemu-block-dmg-debuginfo-2.6.2-31.3.3 qemu-block-iscsi-2.6.2-31.3.3 qemu-block-iscsi-debuginfo-2.6.2-31.3.3 qemu-block-ssh-2.6.2-31.3.3 qemu-block-ssh-debuginfo-2.6.2-31.3.3 qemu-debugsource-2.6.2-31.3.3 qemu-extra-2.6.2-31.3.3 qemu-extra-debuginfo-2.6.2-31.3.3 qemu-guest-agent-2.6.2-31.3.3 qemu-guest-agent-debuginfo-2.6.2-31.3.3 qemu-kvm-2.6.2-31.3.3 qemu-lang-2.6.2-31.3.3 qemu-linux-user-2.6.2-31.3.1 qemu-linux-user-debuginfo-2.6.2-31.3.1 qemu-linux-user-debugsource-2.6.2-31.3.1 qemu-ppc-2.6.2-31.3.3 qemu-ppc-debuginfo-2.6.2-31.3.3 qemu-s390-2.6.2-31.3.3 qemu-s390-debuginfo-2.6.2-31.3.3 qemu-testsuite-2.6.2-31.3.6 qemu-tools-2.6.2-31.3.3 qemu-tools-debuginfo-2.6.2-31.3.3 qemu-x86-2.6.2-31.3.3 qemu-x86-debuginfo-2.6.2-31.3.3 - openSUSE Leap 42.2 (x86_64): qemu-block-rbd-2.6.2-31.3.3 qemu-block-rbd-debuginfo-2.6.2-31.3.3 - openSUSE Leap 42.2 (noarch): qemu-ipxe-1.0.0-31.3.3 qemu-seabios-1.9.1-31.3.3 qemu-sgabios-8-31.3.3 qemu-vgabios-1.9.1-31.3.3 References: https://www.suse.com/security/cve/CVE-2016-10028.html https://www.suse.com/security/cve/CVE-2016-10029.html https://www.suse.com/security/cve/CVE-2016-9602.html https://www.suse.com/security/cve/CVE-2016-9603.html https://www.suse.com/security/cve/CVE-2017-5579.html https://www.suse.com/security/cve/CVE-2017-5973.html https://www.suse.com/security/cve/CVE-2017-5987.html https://www.suse.com/security/cve/CVE-2017-6505.html https://www.suse.com/security/cve/CVE-2017-7377.html https://www.suse.com/security/cve/CVE-2017-7471.html https://www.suse.com/security/cve/CVE-2017-7493.html https://www.suse.com/security/cve/CVE-2017-7718.html https://www.suse.com/security/cve/CVE-2017-7980.html https://www.suse.com/security/cve/CVE-2017-8086.html https://www.suse.com/security/cve/CVE-2017-8112.html https://www.suse.com/security/cve/CVE-2017-8309.html https://www.suse.com/security/cve/CVE-2017-8379.html https://www.suse.com/security/cve/CVE-2017-8380.html https://www.suse.com/security/cve/CVE-2017-9330.html https://www.suse.com/security/cve/CVE-2017-9373.html https://www.suse.com/security/cve/CVE-2017-9374.html https://www.suse.com/security/cve/CVE-2017-9375.html https://www.suse.com/security/cve/CVE-2017-9503.html https://bugzilla.suse.com/1016503 https://bugzilla.suse.com/1016504 https://bugzilla.suse.com/1017081 https://bugzilla.suse.com/1017084 https://bugzilla.suse.com/1020427 https://bugzilla.suse.com/1021741 https://bugzilla.suse.com/1025109 https://bugzilla.suse.com/1025311 https://bugzilla.suse.com/1028184 https://bugzilla.suse.com/1028656 https://bugzilla.suse.com/1030624 https://bugzilla.suse.com/1031142 https://bugzilla.suse.com/1032075 https://bugzilla.suse.com/1034866 https://bugzilla.suse.com/1034908 https://bugzilla.suse.com/1035406 https://bugzilla.suse.com/1035950 https://bugzilla.suse.com/1036211 https://bugzilla.suse.com/1037242 https://bugzilla.suse.com/1037334 https://bugzilla.suse.com/1037336 https://bugzilla.suse.com/1039495 https://bugzilla.suse.com/1042159 https://bugzilla.suse.com/1042800 https://bugzilla.suse.com/1042801 https://bugzilla.suse.com/1043073 https://bugzilla.suse.com/1043296

1 0

openSUSE-OU-2017:1858-1: Initial release of python-rpm-macros
by maintenance＠opensuse.org 14 Jul '17

14 Jul '17

openSUSE Optional Update: Initial release of python-rpm-macros ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:1858-1 Rating: low References: #1039368 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update adds python-rpm-macros to the distribution. This package contains RPM macros that ease packaging and building of Python singlespec packages. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-812=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): python-rpm-macros-2017.05.09.fc237de-2.1 References: https://bugzilla.suse.com/1039368

1 0

openSUSE-SU-2017:1857-1: moderate: Security update for libcares2
by opensuse-security＠opensuse.org 13 Jul '17

13 Jul '17

openSUSE Security Update: Security update for libcares2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1857-1 Rating: moderate References: #1044946 Cross-References: CVE-2017-1000381 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libcares2 fixes the following issues: - CVE-2017-1000381: A NAPTR parser out of bounds access was fixed that could lead to crashes. (bsc#1044946) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-810=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libcares-devel-1.9.1-8.3.1 libcares2-1.9.1-8.3.1 libcares2-debuginfo-1.9.1-8.3.1 libcares2-debugsource-1.9.1-8.3.1 - openSUSE Leap 42.2 (x86_64): libcares2-32bit-1.9.1-8.3.1 libcares2-debuginfo-32bit-1.9.1-8.3.1 References: https://www.suse.com/security/cve/CVE-2017-1000381.html https://bugzilla.suse.com/1044946

1 0

openSUSE-RU-2017:1855-1: Recommended update for emacs
by maintenance＠opensuse.org 13 Jul '17

13 Jul '17

openSUSE Recommended Update: Recommended update for emacs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1855-1 Rating: low References: #1032759 #1035645 #1044093 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for emacs provides the following fixes: - Fix emacs cannot use X fonts (bsc#1044093) - Allow to scroll even if keyboard is used (bsc#1035645) - Use socket activation to get dbus up before starting emacs - Fix emacs.sh wrapper script to check modern dbus session (bsc#1032759) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-811=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): emacs-24.3-24.3.1 emacs-debuginfo-24.3-24.3.1 emacs-debugsource-24.3-24.3.1 emacs-nox-24.3-24.3.1 emacs-nox-debuginfo-24.3-24.3.1 emacs-x11-24.3-24.3.1 emacs-x11-debuginfo-24.3-24.3.1 etags-24.3-24.3.1 etags-debuginfo-24.3-24.3.1 - openSUSE Leap 42.2 (noarch): emacs-el-24.3-24.3.1 emacs-info-24.3-24.3.1 References: https://bugzilla.suse.com/1032759 https://bugzilla.suse.com/1035645 https://bugzilla.suse.com/1044093

1 0

openSUSE-RU-2017:1854-1: important: Recommended update for tomcat
by maintenance＠opensuse.org 13 Jul '17

13 Jul '17

openSUSE Recommended Update: Recommended update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1854-1 Rating: important References: #1044256 #1047015 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for tomcat fixes the following issues: - Fix an error in the Tomcat configuration caused by recent jakarta-commons-dbcp update (fate#321029) which could have prevented Tomcat from starting up. (bsc#1044256) - Fix a build problem which was caused by obsolete "Requires" accidentally left behind by the fate#321029 update (bsc#1047015) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-809=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): tomcat-8.0.43-6.10.3 tomcat-admin-webapps-8.0.43-6.10.3 tomcat-docs-webapp-8.0.43-6.10.3 tomcat-el-3_0-api-8.0.43-6.10.3 tomcat-embed-8.0.43-6.10.3 tomcat-javadoc-8.0.43-6.10.3 tomcat-jsp-2_3-api-8.0.43-6.10.3 tomcat-jsvc-8.0.43-6.10.3 tomcat-lib-8.0.43-6.10.3 tomcat-servlet-3_1-api-8.0.43-6.10.3 tomcat-webapps-8.0.43-6.10.3 References: https://bugzilla.suse.com/1044256 https://bugzilla.suse.com/1047015

1 0

openSUSE-RU-2017:1852-1: Recommended update for docker
by maintenance＠opensuse.org 13 Jul '17

13 Jul '17

openSUSE Recommended Update: Recommended update for docker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1852-1 Rating: low References: #1031479 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for docker fixes the following issues: - Backport a layerdb fix for inatomic layerdb operations. In certain cases this would result in /var/lib/docker corruption that would cause Docker to refuse to start. (boo#1031479) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-808=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): docker-bash-completion-1.12.6-30.3.2 docker-zsh-completion-1.12.6-30.3.2 - openSUSE Leap 42.2 (x86_64): docker-1.12.6-30.3.2 docker-debuginfo-1.12.6-30.3.2 docker-debugsource-1.12.6-30.3.2 docker-test-1.12.6-30.3.2 docker-test-debuginfo-1.12.6-30.3.2 References: https://bugzilla.suse.com/1031479

1 0

openSUSE-SU-2017:1851-1: moderate: Security update for libreoffice
by opensuse-security＠opensuse.org 12 Jul '17

12 Jul '17

openSUSE Security Update: Security update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1851-1 Rating: moderate References: #1015115 #1015118 #1015360 #1017925 #1021369 #1021373 #1028817 #1034192 #1034329 #1034568 #1035087 #1036975 #1042828 #948058 #959926 #962777 #972777 #975283 #976831 Cross-References: CVE-2016-10327 CVE-2017-7870 CVE-2017-7882 CVE-2017-8358 CVE-2017-9433 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has 14 fixes is now available. Description: LibreOffice was updated to version 5.3.3.2, bringing new features and enhancements: Writer: - New "Go to Page" dialog for quickly jumping to another page. - Support for "Table Styles". - New drawing tools were added. - Improvements in the toolbar. - Borderless padding is displayed. Calc: - New drawing tools were added. - In new installations the default setting for new documents is now "Enable wildcards in formulas" instead of regular expressions. - Improved compatibility with ODF 1.2 Impress: - Images inserted via "Photo Album" can now be linked instead of embedded in the document. - When launching Impress, a Template Selector allows you to choose a Template to start with. - Two new default templates: Vivid and Pencil. - All existing templates have been improved. Draw: - New arrow endings, including Crow's foot notation's ones. Base: - Firebird has been upgraded to version 3.0.0. It is unable to read back Firebird 2.5 data, so embedded Firebird odb files created in LibreOffice version up to 5.2 cannot be opened with LibreOffice 5.3. Some security issues have also been fixed: - CVE-2017-7870: An out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert function. - CVE-2017-7882: An out-of-bounds write related to the HWPFile::TagsRead function. - CVE-2017-8358: an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function. - CVE-2016-10327: An out-of-bounds write caused by a heap-based buffer overflow related to the EnhWMFReader::ReadEnhWMF function. - CVE-2017-9433: An out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in libmwaw. A comprehensive list of new features and changes in this release is available at: https://wiki.documentfoundation.org/ReleaseNotes/5.3 This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-807=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libixion-0_12-0-0.12.1-8.3.1 libixion-0_12-0-debuginfo-0.12.1-8.3.1 libixion-debugsource-0.12.1-8.3.1 libixion-devel-0.12.1-8.3.1 libixion-python3-0.12.1-8.3.1 libixion-python3-debuginfo-0.12.1-8.3.1 libixion-tools-0.12.1-8.3.1 libixion-tools-debuginfo-0.12.1-8.3.1 libmwaw-0_3-3-0.3.11-6.3.1 libmwaw-0_3-3-debuginfo-0.3.11-6.3.1 libmwaw-debugsource-0.3.11-6.3.1 libmwaw-devel-0.3.11-6.3.1 libmwaw-tools-0.3.11-6.3.1 libmwaw-tools-debuginfo-0.3.11-6.3.1 liborcus-0_12-0-0.12.1-9.3.1 liborcus-0_12-0-debuginfo-0.12.1-9.3.1 liborcus-debugsource-0.12.1-9.3.1 liborcus-devel-0.12.1-9.3.1 liborcus-python3-0.12.1-9.3.1 liborcus-python3-debuginfo-0.12.1-9.3.1 liborcus-tools-0.12.1-9.3.1 liborcus-tools-debuginfo-0.12.1-9.3.1 libstaroffice-0_0-0-0.0.3-2.3.1 libstaroffice-0_0-0-debuginfo-0.0.3-2.3.1 libstaroffice-debugsource-0.0.3-2.3.1 libstaroffice-devel-0.0.3-2.3.1 libstaroffice-tools-0.0.3-2.3.1 libstaroffice-tools-debuginfo-0.0.3-2.3.1 libzmf-0_0-0-0.0.1-2.1 libzmf-0_0-0-debuginfo-0.0.1-2.1 libzmf-debugsource-0.0.1-2.1 libzmf-devel-0.0.1-2.1 libzmf-tools-0.0.1-2.1 libzmf-tools-debuginfo-0.0.1-2.1 myspell-dictionaries-20170511-6.3.1 myspell-lightproof-en-20170511-6.3.1 myspell-lightproof-hu_HU-20170511-6.3.1 myspell-lightproof-pt_BR-20170511-6.3.1 myspell-lightproof-ru_RU-20170511-6.3.1 - openSUSE Leap 42.2 (x86_64): libreoffice-5.3.3.2-18.6.2 libreoffice-base-5.3.3.2-18.6.2 libreoffice-base-debuginfo-5.3.3.2-18.6.2 libreoffice-base-drivers-mysql-5.3.3.2-18.6.2 libreoffice-base-drivers-mysql-debuginfo-5.3.3.2-18.6.2 libreoffice-base-drivers-postgresql-5.3.3.2-18.6.2 libreoffice-base-drivers-postgresql-debuginfo-5.3.3.2-18.6.2 libreoffice-calc-5.3.3.2-18.6.2 libreoffice-calc-debuginfo-5.3.3.2-18.6.2 libreoffice-calc-extensions-5.3.3.2-18.6.2 libreoffice-debuginfo-5.3.3.2-18.6.2 libreoffice-debugsource-5.3.3.2-18.6.2 libreoffice-draw-5.3.3.2-18.6.2 libreoffice-draw-debuginfo-5.3.3.2-18.6.2 libreoffice-filters-optional-5.3.3.2-18.6.2 libreoffice-gnome-5.3.3.2-18.6.2 libreoffice-gnome-debuginfo-5.3.3.2-18.6.2 libreoffice-gtk3-5.3.3.2-18.6.2 libreoffice-gtk3-debuginfo-5.3.3.2-18.6.2 libreoffice-impress-5.3.3.2-18.6.2 libreoffice-impress-debuginfo-5.3.3.2-18.6.2 libreoffice-kde4-5.3.3.2-18.6.2 libreoffice-kde4-debuginfo-5.3.3.2-18.6.2 libreoffice-mailmerge-5.3.3.2-18.6.2 libreoffice-math-5.3.3.2-18.6.2 libreoffice-math-debuginfo-5.3.3.2-18.6.2 libreoffice-officebean-5.3.3.2-18.6.2 libreoffice-officebean-debuginfo-5.3.3.2-18.6.2 libreoffice-pyuno-5.3.3.2-18.6.2 libreoffice-pyuno-debuginfo-5.3.3.2-18.6.2 libreoffice-sdk-5.3.3.2-18.6.2 libreoffice-sdk-debuginfo-5.3.3.2-18.6.2 libreoffice-sdk-doc-5.3.3.2-18.6.2 libreoffice-writer-5.3.3.2-18.6.2 libreoffice-writer-debuginfo-5.3.3.2-18.6.2 libreoffice-writer-extensions-5.3.3.2-18.6.2 libreofficekit-5.3.3.2-18.6.2 libreofficekit-devel-5.3.3.2-18.6.2 - openSUSE Leap 42.2 (noarch): libmwaw-devel-doc-0.3.11-6.3.1 libreoffice-branding-upstream-5.3.3.2-18.6.2 libreoffice-gdb-pretty-printers-5.3.3.2-18.6.2 libreoffice-glade-5.3.3.2-18.6.2 libreoffice-icon-theme-breeze-5.3.3.2-18.6.2 libreoffice-icon-theme-galaxy-5.3.3.2-18.6.2 libreoffice-icon-theme-hicontrast-5.3.3.2-18.6.2 libreoffice-icon-theme-oxygen-5.3.3.2-18.6.2 libreoffice-icon-theme-sifr-5.3.3.2-18.6.2 libreoffice-icon-theme-tango-5.3.3.2-18.6.2 libreoffice-l10n-af-5.3.3.2-18.6.2 libreoffice-l10n-ar-5.3.3.2-18.6.2 libreoffice-l10n-as-5.3.3.2-18.6.2 libreoffice-l10n-bg-5.3.3.2-18.6.2 libreoffice-l10n-bn-5.3.3.2-18.6.2 libreoffice-l10n-br-5.3.3.2-18.6.2 libreoffice-l10n-ca-5.3.3.2-18.6.2 libreoffice-l10n-cs-5.3.3.2-18.6.2 libreoffice-l10n-cy-5.3.3.2-18.6.2 libreoffice-l10n-da-5.3.3.2-18.6.2 libreoffice-l10n-de-5.3.3.2-18.6.2 libreoffice-l10n-dz-5.3.3.2-18.6.2 libreoffice-l10n-el-5.3.3.2-18.6.2 libreoffice-l10n-en-5.3.3.2-18.6.2 libreoffice-l10n-es-5.3.3.2-18.6.2 libreoffice-l10n-et-5.3.3.2-18.6.2 libreoffice-l10n-eu-5.3.3.2-18.6.2 libreoffice-l10n-fa-5.3.3.2-18.6.2 libreoffice-l10n-fi-5.3.3.2-18.6.2 libreoffice-l10n-fr-5.3.3.2-18.6.2 libreoffice-l10n-ga-5.3.3.2-18.6.2 libreoffice-l10n-gl-5.3.3.2-18.6.2 libreoffice-l10n-gu-5.3.3.2-18.6.2 libreoffice-l10n-he-5.3.3.2-18.6.2 libreoffice-l10n-hi-5.3.3.2-18.6.2 libreoffice-l10n-hr-5.3.3.2-18.6.2 libreoffice-l10n-hu-5.3.3.2-18.6.2 libreoffice-l10n-it-5.3.3.2-18.6.2 libreoffice-l10n-ja-5.3.3.2-18.6.2 libreoffice-l10n-kk-5.3.3.2-18.6.2 libreoffice-l10n-kn-5.3.3.2-18.6.2 libreoffice-l10n-ko-5.3.3.2-18.6.2 libreoffice-l10n-lt-5.3.3.2-18.6.2 libreoffice-l10n-lv-5.3.3.2-18.6.2 libreoffice-l10n-mai-5.3.3.2-18.6.2 libreoffice-l10n-ml-5.3.3.2-18.6.2 libreoffice-l10n-mr-5.3.3.2-18.6.2 libreoffice-l10n-nb-5.3.3.2-18.6.2 libreoffice-l10n-nl-5.3.3.2-18.6.2 libreoffice-l10n-nn-5.3.3.2-18.6.2 libreoffice-l10n-nr-5.3.3.2-18.6.2 libreoffice-l10n-nso-5.3.3.2-18.6.2 libreoffice-l10n-or-5.3.3.2-18.6.2 libreoffice-l10n-pa-5.3.3.2-18.6.2 libreoffice-l10n-pl-5.3.3.2-18.6.2 libreoffice-l10n-pt_BR-5.3.3.2-18.6.2 libreoffice-l10n-pt_PT-5.3.3.2-18.6.2 libreoffice-l10n-ro-5.3.3.2-18.6.2 libreoffice-l10n-ru-5.3.3.2-18.6.2 libreoffice-l10n-si-5.3.3.2-18.6.2 libreoffice-l10n-sk-5.3.3.2-18.6.2 libreoffice-l10n-sl-5.3.3.2-18.6.2 libreoffice-l10n-sr-5.3.3.2-18.6.2 libreoffice-l10n-ss-5.3.3.2-18.6.2 libreoffice-l10n-st-5.3.3.2-18.6.2 libreoffice-l10n-sv-5.3.3.2-18.6.2 libreoffice-l10n-ta-5.3.3.2-18.6.2 libreoffice-l10n-te-5.3.3.2-18.6.2 libreoffice-l10n-th-5.3.3.2-18.6.2 libreoffice-l10n-tn-5.3.3.2-18.6.2 libreoffice-l10n-tr-5.3.3.2-18.6.2 libreoffice-l10n-ts-5.3.3.2-18.6.2 libreoffice-l10n-uk-5.3.3.2-18.6.2 libreoffice-l10n-ve-5.3.3.2-18.6.2 libreoffice-l10n-xh-5.3.3.2-18.6.2 libreoffice-l10n-zh_CN-5.3.3.2-18.6.2 libreoffice-l10n-zh_TW-5.3.3.2-18.6.2 libreoffice-l10n-zu-5.3.3.2-18.6.2 libstaroffice-devel-doc-0.0.3-2.3.1 libzmf-devel-doc-0.0.1-2.1 myspell-af_NA-20170511-6.3.1 myspell-af_ZA-20170511-6.3.1 myspell-an-20170511-6.3.1 myspell-an_ES-20170511-6.3.1 myspell-ar-20170511-6.3.1 myspell-ar_AE-20170511-6.3.1 myspell-ar_BH-20170511-6.3.1 myspell-ar_DZ-20170511-6.3.1 myspell-ar_EG-20170511-6.3.1 myspell-ar_IQ-20170511-6.3.1 myspell-ar_JO-20170511-6.3.1 myspell-ar_KW-20170511-6.3.1 myspell-ar_LB-20170511-6.3.1 myspell-ar_LY-20170511-6.3.1 myspell-ar_MA-20170511-6.3.1 myspell-ar_OM-20170511-6.3.1 myspell-ar_QA-20170511-6.3.1 myspell-ar_SA-20170511-6.3.1 myspell-ar_SD-20170511-6.3.1 myspell-ar_SY-20170511-6.3.1 myspell-ar_TN-20170511-6.3.1 myspell-ar_YE-20170511-6.3.1 myspell-be_BY-20170511-6.3.1 myspell-bg_BG-20170511-6.3.1 myspell-bn_BD-20170511-6.3.1 myspell-bn_IN-20170511-6.3.1 myspell-bo-20170511-6.3.1 myspell-bo_CN-20170511-6.3.1 myspell-bo_IN-20170511-6.3.1 myspell-br_FR-20170511-6.3.1 myspell-bs-20170511-6.3.1 myspell-bs_BA-20170511-6.3.1 myspell-ca-20170511-6.3.1 myspell-ca_AD-20170511-6.3.1 myspell-ca_ES-20170511-6.3.1 myspell-ca_ES_valencia-20170511-6.3.1 myspell-ca_FR-20170511-6.3.1 myspell-ca_IT-20170511-6.3.1 myspell-cs_CZ-20170511-6.3.1 myspell-da_DK-20170511-6.3.1 myspell-de-20170511-6.3.1 myspell-de_AT-20170511-6.3.1 myspell-de_CH-20170511-6.3.1 myspell-de_DE-20170511-6.3.1 myspell-el_GR-20170511-6.3.1 myspell-en-20170511-6.3.1 myspell-en_AU-20170511-6.3.1 myspell-en_BS-20170511-6.3.1 myspell-en_BZ-20170511-6.3.1 myspell-en_CA-20170511-6.3.1 myspell-en_GB-20170511-6.3.1 myspell-en_GH-20170511-6.3.1 myspell-en_IE-20170511-6.3.1 myspell-en_IN-20170511-6.3.1 myspell-en_JM-20170511-6.3.1 myspell-en_MW-20170511-6.3.1 myspell-en_NA-20170511-6.3.1 myspell-en_NZ-20170511-6.3.1 myspell-en_PH-20170511-6.3.1 myspell-en_TT-20170511-6.3.1 myspell-en_US-20170511-6.3.1 myspell-en_ZA-20170511-6.3.1 myspell-en_ZW-20170511-6.3.1 myspell-es-20170511-6.3.1 myspell-es_AR-20170511-6.3.1 myspell-es_BO-20170511-6.3.1 myspell-es_CL-20170511-6.3.1 myspell-es_CO-20170511-6.3.1 myspell-es_CR-20170511-6.3.1 myspell-es_CU-20170511-6.3.1 myspell-es_DO-20170511-6.3.1 myspell-es_EC-20170511-6.3.1 myspell-es_ES-20170511-6.3.1 myspell-es_GT-20170511-6.3.1 myspell-es_HN-20170511-6.3.1 myspell-es_MX-20170511-6.3.1 myspell-es_NI-20170511-6.3.1 myspell-es_PA-20170511-6.3.1 myspell-es_PE-20170511-6.3.1 myspell-es_PR-20170511-6.3.1 myspell-es_PY-20170511-6.3.1 myspell-es_SV-20170511-6.3.1 myspell-es_UY-20170511-6.3.1 myspell-es_VE-20170511-6.3.1 myspell-et_EE-20170511-6.3.1 myspell-fr_BE-20170511-6.3.1 myspell-fr_CA-20170511-6.3.1 myspell-fr_CH-20170511-6.3.1 myspell-fr_FR-20170511-6.3.1 myspell-fr_LU-20170511-6.3.1 myspell-fr_MC-20170511-6.3.1 myspell-gd_GB-20170511-6.3.1 myspell-gl-20170511-6.3.1 myspell-gl_ES-20170511-6.3.1 myspell-gu_IN-20170511-6.3.1 myspell-gug-20170511-6.3.1 myspell-gug_PY-20170511-6.3.1 myspell-he_IL-20170511-6.3.1 myspell-hi_IN-20170511-6.3.1 myspell-hr_HR-20170511-6.3.1 myspell-hu_HU-20170511-6.3.1 myspell-is-20170511-6.3.1 myspell-is_IS-20170511-6.3.1 myspell-it_IT-20170511-6.3.1 myspell-kmr_Latn-20170511-6.3.1 myspell-kmr_Latn_SY-20170511-6.3.1 myspell-kmr_Latn_TR-20170511-6.3.1 myspell-lo_LA-20170511-6.3.1 myspell-lt_LT-20170511-6.3.1 myspell-lv_LV-20170511-6.3.1 myspell-nb_NO-20170511-6.3.1 myspell-ne_NP-20170511-6.3.1 myspell-nl_BE-20170511-6.3.1 myspell-nl_NL-20170511-6.3.1 myspell-nn_NO-20170511-6.3.1 myspell-no-20170511-6.3.1 myspell-oc_FR-20170511-6.3.1 myspell-pl_PL-20170511-6.3.1 myspell-pt_AO-20170511-6.3.1 myspell-pt_BR-20170511-6.3.1 myspell-pt_PT-20170511-6.3.1 myspell-ro-20170511-6.3.1 myspell-ro_RO-20170511-6.3.1 myspell-ru_RU-20170511-6.3.1 myspell-si_LK-20170511-6.3.1 myspell-sk_SK-20170511-6.3.1 myspell-sl_SI-20170511-6.3.1 myspell-sr-20170511-6.3.1 myspell-sr_CS-20170511-6.3.1 myspell-sr_Latn_CS-20170511-6.3.1 myspell-sr_Latn_RS-20170511-6.3.1 myspell-sr_RS-20170511-6.3.1 myspell-sv_FI-20170511-6.3.1 myspell-sv_SE-20170511-6.3.1 myspell-sw_TZ-20170511-6.3.1 myspell-te-20170511-6.3.1 myspell-te_IN-20170511-6.3.1 myspell-th_TH-20170511-6.3.1 myspell-uk_UA-20170511-6.3.1 myspell-vi-20170511-6.3.1 myspell-vi_VN-20170511-6.3.1 myspell-zu_ZA-20170511-6.3.1 References: https://www.suse.com/security/cve/CVE-2016-10327.html https://www.suse.com/security/cve/CVE-2017-7870.html https://www.suse.com/security/cve/CVE-2017-7882.html https://www.suse.com/security/cve/CVE-2017-8358.html https://www.suse.com/security/cve/CVE-2017-9433.html https://bugzilla.suse.com/1015115 https://bugzilla.suse.com/1015118 https://bugzilla.suse.com/1015360 https://bugzilla.suse.com/1017925 https://bugzilla.suse.com/1021369 https://bugzilla.suse.com/1021373 https://bugzilla.suse.com/1028817 https://bugzilla.suse.com/1034192 https://bugzilla.suse.com/1034329 https://bugzilla.suse.com/1034568 https://bugzilla.suse.com/1035087 https://bugzilla.suse.com/1036975 https://bugzilla.suse.com/1042828 https://bugzilla.suse.com/948058 https://bugzilla.suse.com/959926 https://bugzilla.suse.com/962777 https://bugzilla.suse.com/972777 https://bugzilla.suse.com/975283 https://bugzilla.suse.com/976831

1 0

openSUSE-SU-2017:1844-1: moderate: Security update for systemd
by opensuse-security＠opensuse.org 12 Jul '17

12 Jul '17

openSUSE Security Update: Security update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1844-1 Rating: moderate References: #1004995 #1029102 #1029516 #1036873 #1038865 #1040258 #1040614 #1040942 #1043758 #982303 Cross-References: CVE-2017-9217 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has 9 fixes is now available. Description: This update for systemd fixes the following issues: Security issue fixed: - CVE-2017-9217: resolved: Fix null pointer p->question dereferencing that could lead to resolved aborting (bsc#1040614) The update also fixed several non-security bugs: - core/mount: Use the "-c" flag to not canonicalize paths when calling /bin/umount - automount: Handle expire_tokens when the mount unit changes its state (bsc#1040942) - automount: Rework propagation between automount and mount units - build: Make sure tmpfiles.d/systemd-remote.conf get installed when necessary - build: Fix systemd-journal-upload installation - basic: Detect XEN Dom0 as no virtualization (bsc#1036873) - virt: Make sure some errors are not ignored - fstab-generator: Do not skip Before= ordering for noauto mountpoints - fstab-gen: Do not convert device timeout into seconds when initializing JobTimeoutSec - core/device: Use JobRunningTimeoutSec= for device units (bsc#1004995) - fstab-generator: Apply the _netdev option also to device units (bsc#1004995) - job: Add JobRunningTimeoutSec for JOB_RUNNING state (bsc#1004995) - job: Ensure JobRunningTimeoutSec= survives serialization (bsc#1004995) - rules: Export NVMe WWID udev attribute (bsc#1038865) - rules: Introduce disk/by-id (model_serial) symbolic links for NVMe drives - rules: Add rules for NVMe devices - sysusers: Make group shadow support configurable (bsc#1029516) - core: When deserializing a unit, fully restore its cgroup state (bsc#1029102) - core: Introduce cg_mask_from_string()/cg_mask_to_string() - core:execute: Fix handling failures of calling fork() in exec_spawn() (bsc#1040258) - Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303) The database might be missing when upgrading a package which was shipping no sysv init scripts nor unit files (at the time --save was called) but the new version start shipping unit files. - Disable group shadow support (bsc#1029516) - Only check signature job error if signature job exists (bsc#1043758) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-806=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libsystemd0-228-25.6.1 libsystemd0-debuginfo-228-25.6.1 libsystemd0-mini-228-25.6.1 libsystemd0-mini-debuginfo-228-25.6.1 libudev-devel-228-25.6.1 libudev-mini-devel-228-25.6.1 libudev-mini1-228-25.6.1 libudev-mini1-debuginfo-228-25.6.1 libudev1-228-25.6.1 libudev1-debuginfo-228-25.6.1 nss-myhostname-228-25.6.1 nss-myhostname-debuginfo-228-25.6.1 nss-mymachines-228-25.6.1 nss-mymachines-debuginfo-228-25.6.1 systemd-228-25.6.1 systemd-debuginfo-228-25.6.1 systemd-debugsource-228-25.6.1 systemd-devel-228-25.6.1 systemd-logger-228-25.6.1 systemd-mini-228-25.6.1 systemd-mini-debuginfo-228-25.6.1 systemd-mini-debugsource-228-25.6.1 systemd-mini-devel-228-25.6.1 systemd-mini-sysvinit-228-25.6.1 systemd-sysvinit-228-25.6.1 udev-228-25.6.1 udev-debuginfo-228-25.6.1 udev-mini-228-25.6.1 udev-mini-debuginfo-228-25.6.1 - openSUSE Leap 42.2 (x86_64): libsystemd0-32bit-228-25.6.1 libsystemd0-debuginfo-32bit-228-25.6.1 libudev1-32bit-228-25.6.1 libudev1-debuginfo-32bit-228-25.6.1 nss-myhostname-32bit-228-25.6.1 nss-myhostname-debuginfo-32bit-228-25.6.1 systemd-32bit-228-25.6.1 systemd-debuginfo-32bit-228-25.6.1 - openSUSE Leap 42.2 (noarch): systemd-bash-completion-228-25.6.1 systemd-mini-bash-completion-228-25.6.1 References: https://www.suse.com/security/cve/CVE-2017-9217.html https://bugzilla.suse.com/1004995 https://bugzilla.suse.com/1029102 https://bugzilla.suse.com/1029516 https://bugzilla.suse.com/1036873 https://bugzilla.suse.com/1038865 https://bugzilla.suse.com/1040258 https://bugzilla.suse.com/1040614 https://bugzilla.suse.com/1040942 https://bugzilla.suse.com/1043758 https://bugzilla.suse.com/982303

1 0