July 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:2017-1: Recommended update for procps
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for procps ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2017-1 Rating: low References: #1039941 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for procps provides the following fixes: - Allow reading and writing content lines longer than 1024 characters under /proc/sys (bsc#1039941) - Avoid printing messages when /proc/sys/net/ipv6/conf/*/stable_secret is not set This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-872=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libprocps3-3.3.9-14.1 libprocps3-debuginfo-3.3.9-14.1 procps-3.3.9-14.1 procps-debuginfo-3.3.9-14.1 procps-debugsource-3.3.9-14.1 procps-devel-3.3.9-14.1 References: https://bugzilla.suse.com/1039941

1 0

openSUSE-SU-2017:2016-1: moderate: Security update for apache2
by opensuse-security＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2016-1 Rating: moderate References: #1023616 #1043055 #1048576 Cross-References: CVE-2017-9788 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for apache2 fixes the following issues: Security issue fixed: - CVE-2017-9788: Uninitialized memory reflection in mod_auth_digest. (bsc#1048576) Bug fixes: - Include individual sysconfig.d files instead of the whole sysconfig.d directory. - Include sysconfig.d/include.conf after httpd.conf is processed. (bsc#1023616, bsc#1043055) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-865=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-865=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-2.4.23-13.1 apache2-debuginfo-2.4.23-13.1 apache2-debugsource-2.4.23-13.1 apache2-devel-2.4.23-13.1 apache2-event-2.4.23-13.1 apache2-event-debuginfo-2.4.23-13.1 apache2-example-pages-2.4.23-13.1 apache2-prefork-2.4.23-13.1 apache2-prefork-debuginfo-2.4.23-13.1 apache2-utils-2.4.23-13.1 apache2-utils-debuginfo-2.4.23-13.1 apache2-worker-2.4.23-13.1 apache2-worker-debuginfo-2.4.23-13.1 - openSUSE Leap 42.3 (noarch): apache2-doc-2.4.23-13.1 - openSUSE Leap 42.2 (i586 x86_64): apache2-2.4.23-8.9.1 apache2-debuginfo-2.4.23-8.9.1 apache2-debugsource-2.4.23-8.9.1 apache2-devel-2.4.23-8.9.1 apache2-event-2.4.23-8.9.1 apache2-event-debuginfo-2.4.23-8.9.1 apache2-example-pages-2.4.23-8.9.1 apache2-prefork-2.4.23-8.9.1 apache2-prefork-debuginfo-2.4.23-8.9.1 apache2-utils-2.4.23-8.9.1 apache2-utils-debuginfo-2.4.23-8.9.1 apache2-worker-2.4.23-8.9.1 apache2-worker-debuginfo-2.4.23-8.9.1 - openSUSE Leap 42.2 (noarch): apache2-doc-2.4.23-8.9.1 References: https://www.suse.com/security/cve/CVE-2017-9788.html https://bugzilla.suse.com/1023616 https://bugzilla.suse.com/1043055 https://bugzilla.suse.com/1048576

1 0

openSUSE-RU-2017:2015-1: Recommended update for procps
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for procps ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2015-1 Rating: low References: #1034563 #1039941 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for procps provides the following fixes: - Make pmap handle LazyFree in /proc/smaps (bsc#1034563) - Allow reading and writing content lines longer than 1024 characters under /proc/sys (bsc#1039941) - Avoid printing messages when /proc/sys/net/ipv6/conf/*/stable_secret is not set This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-868=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libprocps3-3.3.9-7.6.1 libprocps3-debuginfo-3.3.9-7.6.1 procps-3.3.9-7.6.1 procps-debuginfo-3.3.9-7.6.1 procps-debugsource-3.3.9-7.6.1 procps-devel-3.3.9-7.6.1 References: https://bugzilla.suse.com/1034563 https://bugzilla.suse.com/1039941

1 0

openSUSE-OU-2017:2014-1: Add perl-File-Copy-Recursive to the SUSE Package Hub
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Optional Update: Add perl-File-Copy-Recursive to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:2014-1 Rating: low References: #1049442 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update adds perl-File-Copy-Recursive to the SUSE Package Hub. The package contains aPerl extension for recursively copying files and directories and is a dependency for munin. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-860=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): perl-File-Copy-Recursive-0.38-2.1 References: https://bugzilla.suse.com/1049442

1 0

openSUSE-RU-2017:2013-1: Recommended update for perl-Bootloader
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for perl-Bootloader ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2013-1 Rating: low References: #1007335 #985567 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for perl-Bootloader provides the following fixes: - Parse ramdisk settings from grub2 correctly when booting with kexec-bootloader. (bsc#1007335) - Run shim-install only if secure boot is set to yes. (bsc#985567) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-858=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): perl-Bootloader-0.917-2.3.1 perl-Bootloader-YAML-0.917-2.3.1 References: https://bugzilla.suse.com/1007335 https://bugzilla.suse.com/985567

1 0

openSUSE-OU-2017:2012-1: Add the_silver_searcher to the SUSE Package Hub
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Optional Update: Add the_silver_searcher to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:2012-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update adds the_silver_searcher to the SUSE Package Hub. "The silver searcher", otherwise known as "ag" by it's command line name, is code searching tool with a focus on speed. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-859=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): the_silver_searcher-2.0.0-2.1 References:

1 0

openSUSE-SU-2017:2011-1: moderate: Security update for mysql-community-server
by opensuse-security＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Security Update: Security update for mysql-community-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2011-1 Rating: moderate References: #1049394 #1049396 #1049398 #1049399 #1049404 #1049410 #1049411 #1049412 #1049415 #1049416 #1049417 #1049421 #1049422 Cross-References: CVE-2017-3633 CVE-2017-3634 CVE-2017-3635 CVE-2017-3636 CVE-2017-3641 CVE-2017-3647 CVE-2017-3648 CVE-2017-3649 CVE-2017-3651 CVE-2017-3652 CVE-2017-3653 CVE-2017-3732 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves 12 vulnerabilities and has one errata is now available. Description: This update for mysql-community-server to version 5.6.37 fixes security issues and bugs. The following vulnerabilities were fixed: - CVE-2017-3633: Memcached unspecified vulnerability (boo#1049394) - CVE-2017-3634: DML unspecified vulnerability (boo#1049396) - CVE-2017-3635: C API unspecified vulnerability (boo#1049398) - CVE-2017-3636: Client programs unspecified vulnerability (boo#1049399) - CVE-2017-3641: DML unspecified vulnerability (boo#1049404) - CVE-2017-3647: Replication unspecified vulnerability (boo#1049410) - CVE-2017-3648: Charsets unspecified vulnerability (boo#1049411) - CVE-2017-3649: Replication unspecified vulnerability (boo#1049412) - CVE-2017-3651: Client mysqldump unspecified vulnerability (boo#1049415) - CVE-2017-3652: DDL unspecified vulnerability (boo#1049416) - CVE-2017-3653: DDL unspecified vulnerability (boo#1049417) - CVE-2017-3732: Security, Encryption unspecified vulnerability (boo#1049421) The following general changes are included: - switch systemd unit file from 'Restart=on-failure' to 'Restart=on-abort' - update file lists for new man-pages and tools (for mariadb) For a list of upstream changes in this release, see: http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-37.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-866=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-866=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libmysql56client18-5.6.37-27.1 libmysql56client18-debuginfo-5.6.37-27.1 libmysql56client_r18-5.6.37-27.1 mysql-community-server-5.6.37-27.1 mysql-community-server-bench-5.6.37-27.1 mysql-community-server-bench-debuginfo-5.6.37-27.1 mysql-community-server-client-5.6.37-27.1 mysql-community-server-client-debuginfo-5.6.37-27.1 mysql-community-server-debuginfo-5.6.37-27.1 mysql-community-server-debugsource-5.6.37-27.1 mysql-community-server-errormessages-5.6.37-27.1 mysql-community-server-test-5.6.37-27.1 mysql-community-server-test-debuginfo-5.6.37-27.1 mysql-community-server-tools-5.6.37-27.1 mysql-community-server-tools-debuginfo-5.6.37-27.1 - openSUSE Leap 42.3 (x86_64): libmysql56client18-32bit-5.6.37-27.1 libmysql56client18-debuginfo-32bit-5.6.37-27.1 libmysql56client_r18-32bit-5.6.37-27.1 - openSUSE Leap 42.2 (i586 x86_64): libmysql56client18-5.6.37-24.9.1 libmysql56client18-debuginfo-5.6.37-24.9.1 libmysql56client_r18-5.6.37-24.9.1 mysql-community-server-5.6.37-24.9.1 mysql-community-server-bench-5.6.37-24.9.1 mysql-community-server-bench-debuginfo-5.6.37-24.9.1 mysql-community-server-client-5.6.37-24.9.1 mysql-community-server-client-debuginfo-5.6.37-24.9.1 mysql-community-server-debuginfo-5.6.37-24.9.1 mysql-community-server-debugsource-5.6.37-24.9.1 mysql-community-server-errormessages-5.6.37-24.9.1 mysql-community-server-test-5.6.37-24.9.1 mysql-community-server-test-debuginfo-5.6.37-24.9.1 mysql-community-server-tools-5.6.37-24.9.1 mysql-community-server-tools-debuginfo-5.6.37-24.9.1 - openSUSE Leap 42.2 (x86_64): libmysql56client18-32bit-5.6.37-24.9.1 libmysql56client18-debuginfo-32bit-5.6.37-24.9.1 libmysql56client_r18-32bit-5.6.37-24.9.1 References: https://www.suse.com/security/cve/CVE-2017-3633.html https://www.suse.com/security/cve/CVE-2017-3634.html https://www.suse.com/security/cve/CVE-2017-3635.html https://www.suse.com/security/cve/CVE-2017-3636.html https://www.suse.com/security/cve/CVE-2017-3641.html https://www.suse.com/security/cve/CVE-2017-3647.html https://www.suse.com/security/cve/CVE-2017-3648.html https://www.suse.com/security/cve/CVE-2017-3649.html https://www.suse.com/security/cve/CVE-2017-3651.html https://www.suse.com/security/cve/CVE-2017-3652.html https://www.suse.com/security/cve/CVE-2017-3653.html https://www.suse.com/security/cve/CVE-2017-3732.html https://bugzilla.suse.com/1049394 https://bugzilla.suse.com/1049396 https://bugzilla.suse.com/1049398 https://bugzilla.suse.com/1049399 https://bugzilla.suse.com/1049404 https://bugzilla.suse.com/1049410 https://bugzilla.suse.com/1049411 https://bugzilla.suse.com/1049412 https://bugzilla.suse.com/1049415 https://bugzilla.suse.com/1049416 https://bugzilla.suse.com/1049417 https://bugzilla.suse.com/1049421 https://bugzilla.suse.com/1049422

1 0

openSUSE-RU-2017:2010-1: Recommended update for mpg123
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for mpg123 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2010-1 Rating: low References: #1046766 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mpg123 fixes the following issues: - Improve over previous fix for CVE-2017-10683 to avoid playback issues (bsc#1046766) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-862=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libmpg123-0-1.25.3-3.1 libmpg123-0-debuginfo-1.25.3-3.1 libout123-0-1.25.3-3.1 libout123-0-debuginfo-1.25.3-3.1 mpg123-1.25.3-3.1 mpg123-debuginfo-1.25.3-3.1 mpg123-debugsource-1.25.3-3.1 mpg123-devel-1.25.3-3.1 mpg123-esound-1.25.3-3.1 mpg123-esound-debuginfo-1.25.3-3.1 mpg123-jack-1.25.3-3.1 mpg123-jack-debuginfo-1.25.3-3.1 mpg123-openal-1.25.3-3.1 mpg123-openal-debuginfo-1.25.3-3.1 mpg123-portaudio-1.25.3-3.1 mpg123-portaudio-debuginfo-1.25.3-3.1 mpg123-pulse-1.25.3-3.1 mpg123-pulse-debuginfo-1.25.3-3.1 mpg123-sdl-1.25.3-3.1 mpg123-sdl-debuginfo-1.25.3-3.1 - openSUSE Leap 42.3 (x86_64): libmpg123-0-32bit-1.25.3-3.1 libmpg123-0-debuginfo-32bit-1.25.3-3.1 libout123-0-32bit-1.25.3-3.1 libout123-0-debuginfo-32bit-1.25.3-3.1 mpg123-devel-32bit-1.25.3-3.1 mpg123-esound-32bit-1.25.3-3.1 mpg123-esound-debuginfo-32bit-1.25.3-3.1 mpg123-jack-32bit-1.25.3-3.1 mpg123-jack-debuginfo-32bit-1.25.3-3.1 mpg123-openal-32bit-1.25.3-3.1 mpg123-openal-debuginfo-32bit-1.25.3-3.1 mpg123-portaudio-32bit-1.25.3-3.1 mpg123-portaudio-debuginfo-32bit-1.25.3-3.1 mpg123-pulse-32bit-1.25.3-3.1 mpg123-pulse-debuginfo-32bit-1.25.3-3.1 mpg123-sdl-32bit-1.25.3-3.1 mpg123-sdl-debuginfo-32bit-1.25.3-3.1 References: https://bugzilla.suse.com/1046766

1 0

openSUSE-RU-2017:2009-1: Recommended update for shotwell
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for shotwell ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2009-1 Rating: low References: #1040047 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for shotwell fixes the following issues: - Fix segmentation fault on "Import From Application..." after disabling plugins (bsc#1040047) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-871=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-871=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): shotwell-lang-0.22.0+git.20160103-11.1 - openSUSE Leap 42.3 (x86_64): shotwell-0.22.0+git.20160103-11.1 shotwell-debuginfo-0.22.0+git.20160103-11.1 shotwell-debugsource-0.22.0+git.20160103-11.1 - openSUSE Leap 42.2 (x86_64): shotwell-0.22.0+git.20160103-7.6.1 shotwell-debuginfo-0.22.0+git.20160103-7.6.1 shotwell-debugsource-0.22.0+git.20160103-7.6.1 - openSUSE Leap 42.2 (noarch): shotwell-lang-0.22.0+git.20160103-7.6.1 References: https://bugzilla.suse.com/1040047

1 0

openSUSE-RU-2017:2008-1: moderate: Recommended update for squidGuard
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for squidGuard ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2008-1 Rating: moderate References: #1040757 #961499 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for squidGuard provides the following fixes: - Adapt squidGuard to work properly with current versions of squid (bsc#1040757) - Change the default configuration file to only reference existing filter lists (bsc#961499) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-870=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-870=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): squidGuard-1.4-8.1 squidGuard-debuginfo-1.4-8.1 squidGuard-debugsource-1.4-8.1 squidGuard-doc-1.4-8.1 - openSUSE Leap 42.2 (i586 x86_64): squidGuard-1.4-5.3.1 squidGuard-debuginfo-1.4-5.3.1 squidGuard-debugsource-1.4-5.3.1 squidGuard-doc-1.4-5.3.1 References: https://bugzilla.suse.com/1040757 https://bugzilla.suse.com/961499

1 0

openSUSE-RU-2017:2007-1: Recommended update for python-websockify
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for python-websockify ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2007-1 Rating: low References: #1049987 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-websockify fixes the following issues: - remove unused run-time dependency on pyOpenSSL (boo#1049987) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-856=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-856=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): python-websockify-0.8.0-5.1 - openSUSE Leap 42.2 (noarch): python-websockify-0.8.0-2.3.1 References: https://bugzilla.suse.com/1049987

1 0

openSUSE-RU-2017:2006-1: Recommended update for btrfsmaintenance
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for btrfsmaintenance ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2006-1 Rating: low References: #1047226 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for btrfsmaintenance provides the following fixes: - Add btrfsprogs as a dependency of btrfsmaintenance. (bsc#1047226) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-863=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): btrfsmaintenance-0.2-14.3.1 References: https://bugzilla.suse.com/1047226

1 0

openSUSE-RU-2017:2005-1: moderate: Recommended update for gnuhealth
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for gnuhealth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2005-1 Rating: moderate References: #1049985 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update gnuhealth 3.2.1 fixes the following issues: - View error on lab order (bsc#1049985) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-857=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): gnuhealth-3.2.1-15.1 References: https://bugzilla.suse.com/1049985

1 0

openSUSE-RU-2017:2004-1: Recommended update for llvm
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for llvm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2004-1 Rating: low References: #1023614 #1032686 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for llvm provides the following fixes: - Fix relocations on aarch64. (bsc#1032686) - Fix invalid code creation by libllvm shader compiler. (bsc#1023614) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-855=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libLLVM-3.8.0-2.6.1 libLLVM-debuginfo-3.8.0-2.6.1 libclang-3.8.0-2.6.1 libclang-debuginfo-3.8.0-2.6.1 llvm-3.8.0-2.6.1 llvm-clang-3.8.0-2.6.1 llvm-clang-debuginfo-3.8.0-2.6.1 llvm-clang-devel-3.8.0-2.6.1 llvm-debuginfo-3.8.0-2.6.1 llvm-debugsource-3.8.0-2.6.1 llvm-devel-3.8.0-2.6.1 llvm-devel-debuginfo-3.8.0-2.6.1 llvm-vim-plugins-3.8.0-2.6.1 python-clang-3.8.0-2.6.1 - openSUSE Leap 42.2 (x86_64): libLLVM-32bit-3.8.0-2.6.1 libLLVM-debuginfo-32bit-3.8.0-2.6.1 libclang-32bit-3.8.0-2.6.1 libclang-debuginfo-32bit-3.8.0-2.6.1 lldb-3.8.0-2.6.1 lldb-debuginfo-3.8.0-2.6.1 References: https://bugzilla.suse.com/1023614 https://bugzilla.suse.com/1032686

1 0

openSUSE-SU-2017:2003-1: moderate: Security update for nginx
by opensuse-security＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Security Update: Security update for nginx ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2003-1 Rating: moderate References: #1048265 Cross-References: CVE-2017-7529 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for nginx fixes the following issues: - CVE-2017-7529: A remote attacker could have used specially crafted requests to trigger an integer overflow the nginx range filter module to leak potentially sensitive information (boo#1048265) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-867=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): nginx-1.8.1-10.5.1 nginx-debuginfo-1.8.1-10.5.1 nginx-debugsource-1.8.1-10.5.1 References: https://www.suse.com/security/cve/CVE-2017-7529.html https://bugzilla.suse.com/1048265

1 0

openSUSE-SU-2017:2002-1: moderate: Security update for libical
by opensuse-security＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Security Update: Security update for libical ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2002-1 Rating: moderate References: #1015964 #1044995 #986631 #986639 Cross-References: CVE-2016-5824 CVE-2016-5827 CVE-2016-9584 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for libical fixes the following issues: Security issues fixed: - CVE-2016-5824: libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file. (bsc#986639) - CVE-2016-5827: The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted string to the icalparser_parse_string function. (bsc#986631) - CVE-2016-9584: libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file. (bsc#1015964) Bug fixes: - libical crashes while parsing timezones (bsc#1044995) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-869=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-869=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libical-debugsource-1.0.1-16.1 libical-devel-1.0.1-16.1 libical-devel-static-1.0.1-16.1 libical1-1.0.1-16.1 libical1-debuginfo-1.0.1-16.1 - openSUSE Leap 42.3 (noarch): libical-doc-1.0.1-16.1 - openSUSE Leap 42.3 (x86_64): libical1-32bit-1.0.1-16.1 libical1-debuginfo-32bit-1.0.1-16.1 - openSUSE Leap 42.2 (i586 x86_64): libical-debugsource-1.0.1-13.3.1 libical-devel-1.0.1-13.3.1 libical-devel-static-1.0.1-13.3.1 libical1-1.0.1-13.3.1 libical1-debuginfo-1.0.1-13.3.1 - openSUSE Leap 42.2 (x86_64): libical1-32bit-1.0.1-13.3.1 libical1-debuginfo-32bit-1.0.1-13.3.1 - openSUSE Leap 42.2 (noarch): libical-doc-1.0.1-13.3.1 References: https://www.suse.com/security/cve/CVE-2016-5824.html https://www.suse.com/security/cve/CVE-2016-5827.html https://www.suse.com/security/cve/CVE-2016-9584.html https://bugzilla.suse.com/1015964 https://bugzilla.suse.com/1044995 https://bugzilla.suse.com/986631 https://bugzilla.suse.com/986639

1 0

openSUSE-RU-2017:2001-1: Recommended update for kyotocabinet
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for kyotocabinet ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2001-1 Rating: low References: #1037914 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kyotocabinet fixes the following issues: - Do not optimize for native cpu of the build system. (bsc#1037914) - Fix debuginfo package generation. - Fix build errors with GCC 6 and 7. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-864=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): kyotocabinet-1.2.76-14.3.1 kyotocabinet-debuginfo-1.2.76-14.3.1 kyotocabinet-debugsource-1.2.76-14.3.1 libkyotocabinet-devel-1.2.76-14.3.1 libkyotocabinet16-1.2.76-14.3.1 libkyotocabinet16-debuginfo-1.2.76-14.3.1 References: https://bugzilla.suse.com/1037914

1 0

openSUSE-RU-2017:2000-1: moderate: Recommended update for oidentd
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for oidentd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2000-1 Rating: moderate References: #953608 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for oidentd fixes the following issues: - Upgrade and start-up problems related to service files (boo#953608) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-861=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-861=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): oidentd-2.0.8-153.1 oidentd-debuginfo-2.0.8-153.1 oidentd-debugsource-2.0.8-153.1 - openSUSE Leap 42.2 (i586 x86_64): oidentd-2.0.8-150.3.1 oidentd-debuginfo-2.0.8-150.3.1 oidentd-debugsource-2.0.8-150.3.1 References: https://bugzilla.suse.com/953608

1 0

openSUSE-SU-2017:1994-1: important: Security update for chromium
by opensuse-security＠opensuse.org 28 Jul '17

28 Jul '17

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1994-1 Rating: important References: #1050537 Cross-References: CVE-2017-5091 CVE-2017-5092 CVE-2017-5093 CVE-2017-5094 CVE-2017-5095 CVE-2017-5096 CVE-2017-5097 CVE-2017-5098 CVE-2017-5099 CVE-2017-5100 CVE-2017-5101 CVE-2017-5102 CVE-2017-5103 CVE-2017-5104 CVE-2017-5105 CVE-2017-5106 CVE-2017-5107 CVE-2017-5108 CVE-2017-5109 CVE-2017-5110 CVE-2017-7000 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: This update Chromium to version 60.0.3112.78 fixes security issue and bugs. The following security issues were fixed: * CVE-2017-5091: Use after free in IndexedDB * CVE-2017-5092: Use after free in PPAPI * CVE-2017-5093: UI spoofing in Blink * CVE-2017-5094: Type confusion in extensions * CVE-2017-5095: Out-of-bounds write in PDFium * CVE-2017-5096: User information leak via Android intents * CVE-2017-5097: Out-of-bounds read in Skia * CVE-2017-5098: Use after free in V8 * CVE-2017-5099: Out-of-bounds write in PPAPI * CVE-2017-5100: Use after free in Chrome Apps * CVE-2017-5101: URL spoofing in OmniBox * CVE-2017-5102: Uninitialized use in Skia * CVE-2017-5103: Uninitialized use in Skia * CVE-2017-5104: UI spoofing in browser * CVE-2017-7000: Pointer disclosure in SQLite * CVE-2017-5105: URL spoofing in OmniBox * CVE-2017-5106: URL spoofing in OmniBox * CVE-2017-5107: User information leak via SVG * CVE-2017-5108: Type confusion in PDFium * CVE-2017-5109: UI spoofing in browser * CVE-2017-5110: UI spoofing in payments dialog * Various fixes from internal audits, fuzzing and other initiatives A number of upstream bugfixes are also included in this release. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-854=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-60.0.3112.78-26.1 chromedriver-debuginfo-60.0.3112.78-26.1 chromium-60.0.3112.78-26.1 chromium-debuginfo-60.0.3112.78-26.1 chromium-debugsource-60.0.3112.78-26.1 References: https://www.suse.com/security/cve/CVE-2017-5091.html https://www.suse.com/security/cve/CVE-2017-5092.html https://www.suse.com/security/cve/CVE-2017-5093.html https://www.suse.com/security/cve/CVE-2017-5094.html https://www.suse.com/security/cve/CVE-2017-5095.html https://www.suse.com/security/cve/CVE-2017-5096.html https://www.suse.com/security/cve/CVE-2017-5097.html https://www.suse.com/security/cve/CVE-2017-5098.html https://www.suse.com/security/cve/CVE-2017-5099.html https://www.suse.com/security/cve/CVE-2017-5100.html https://www.suse.com/security/cve/CVE-2017-5101.html https://www.suse.com/security/cve/CVE-2017-5102.html https://www.suse.com/security/cve/CVE-2017-5103.html https://www.suse.com/security/cve/CVE-2017-5104.html https://www.suse.com/security/cve/CVE-2017-5105.html https://www.suse.com/security/cve/CVE-2017-5106.html https://www.suse.com/security/cve/CVE-2017-5107.html https://www.suse.com/security/cve/CVE-2017-5108.html https://www.suse.com/security/cve/CVE-2017-5109.html https://www.suse.com/security/cve/CVE-2017-5110.html https://www.suse.com/security/cve/CVE-2017-7000.html https://bugzilla.suse.com/1050537

1 0

openSUSE-SU-2017:1993-1: important: Security update for chromium
by opensuse-security＠opensuse.org 28 Jul '17

28 Jul '17

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1993-1 Rating: important References: #1050537 Cross-References: CVE-2017-5091 CVE-2017-5092 CVE-2017-5093 CVE-2017-5094 CVE-2017-5095 CVE-2017-5096 CVE-2017-5097 CVE-2017-5098 CVE-2017-5099 CVE-2017-5100 CVE-2017-5101 CVE-2017-5102 CVE-2017-5103 CVE-2017-5104 CVE-2017-5105 CVE-2017-5106 CVE-2017-5107 CVE-2017-5108 CVE-2017-5109 CVE-2017-5110 CVE-2017-7000 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: This update Chromium to version 60.0.3112.78 fixes security issue and bugs. The following security issues were fixed: * CVE-2017-5091: Use after free in IndexedDB * CVE-2017-5092: Use after free in PPAPI * CVE-2017-5093: UI spoofing in Blink * CVE-2017-5094: Type confusion in extensions * CVE-2017-5095: Out-of-bounds write in PDFium * CVE-2017-5096: User information leak via Android intents * CVE-2017-5097: Out-of-bounds read in Skia * CVE-2017-5098: Use after free in V8 * CVE-2017-5099: Out-of-bounds write in PPAPI * CVE-2017-5100: Use after free in Chrome Apps * CVE-2017-5101: URL spoofing in OmniBox * CVE-2017-5102: Uninitialized use in Skia * CVE-2017-5103: Uninitialized use in Skia * CVE-2017-5104: UI spoofing in browser * CVE-2017-7000: Pointer disclosure in SQLite * CVE-2017-5105: URL spoofing in OmniBox * CVE-2017-5106: URL spoofing in OmniBox * CVE-2017-5107: User information leak via SVG * CVE-2017-5108: Type confusion in PDFium * CVE-2017-5109: UI spoofing in browser * CVE-2017-5110: UI spoofing in payments dialog * Various fixes from internal audits, fuzzing and other initiatives A number of upstream bugfixes are also included in this release. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-854=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-854=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): chromedriver-60.0.3112.78-107.1 chromedriver-debuginfo-60.0.3112.78-107.1 chromium-60.0.3112.78-107.1 chromium-debuginfo-60.0.3112.78-107.1 chromium-debugsource-60.0.3112.78-107.1 - openSUSE Leap 42.2 (x86_64): chromedriver-60.0.3112.78-104.21.1 chromedriver-debuginfo-60.0.3112.78-104.21.1 chromium-60.0.3112.78-104.21.1 chromium-debuginfo-60.0.3112.78-104.21.1 chromium-debugsource-60.0.3112.78-104.21.1 References: https://www.suse.com/security/cve/CVE-2017-5091.html https://www.suse.com/security/cve/CVE-2017-5092.html https://www.suse.com/security/cve/CVE-2017-5093.html https://www.suse.com/security/cve/CVE-2017-5094.html https://www.suse.com/security/cve/CVE-2017-5095.html https://www.suse.com/security/cve/CVE-2017-5096.html https://www.suse.com/security/cve/CVE-2017-5097.html https://www.suse.com/security/cve/CVE-2017-5098.html https://www.suse.com/security/cve/CVE-2017-5099.html https://www.suse.com/security/cve/CVE-2017-5100.html https://www.suse.com/security/cve/CVE-2017-5101.html https://www.suse.com/security/cve/CVE-2017-5102.html https://www.suse.com/security/cve/CVE-2017-5103.html https://www.suse.com/security/cve/CVE-2017-5104.html https://www.suse.com/security/cve/CVE-2017-5105.html https://www.suse.com/security/cve/CVE-2017-5106.html https://www.suse.com/security/cve/CVE-2017-5107.html https://www.suse.com/security/cve/CVE-2017-5108.html https://www.suse.com/security/cve/CVE-2017-5109.html https://www.suse.com/security/cve/CVE-2017-5110.html https://www.suse.com/security/cve/CVE-2017-7000.html https://bugzilla.suse.com/1050537

1 0

openSUSE-RU-2017:1991-1: Recommended update for iptables
by maintenance＠opensuse.org 28 Jul '17

28 Jul '17

openSUSE Recommended Update: Recommended update for iptables ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1991-1 Rating: low References: #1045130 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for iptables provides the following fix: - Fix a locking issue of iptables-batch when other programs modify the iptables rules in parallel (bsc#1045130) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-852=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-852=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): iptables-1.4.21-9.1 iptables-debuginfo-1.4.21-9.1 iptables-debugsource-1.4.21-9.1 libipq-devel-1.4.21-9.1 libipq0-1.4.21-9.1 libipq0-debuginfo-1.4.21-9.1 libiptc-devel-1.4.21-9.1 libiptc0-1.4.21-9.1 libiptc0-debuginfo-1.4.21-9.1 libxtables-devel-1.4.21-9.1 libxtables10-1.4.21-9.1 libxtables10-debuginfo-1.4.21-9.1 xtables-plugins-1.4.21-9.1 xtables-plugins-debuginfo-1.4.21-9.1 - openSUSE Leap 42.2 (i586 x86_64): iptables-1.4.21-6.3.1 iptables-debuginfo-1.4.21-6.3.1 iptables-debugsource-1.4.21-6.3.1 libipq-devel-1.4.21-6.3.1 libipq0-1.4.21-6.3.1 libipq0-debuginfo-1.4.21-6.3.1 libiptc-devel-1.4.21-6.3.1 libiptc0-1.4.21-6.3.1 libiptc0-debuginfo-1.4.21-6.3.1 libxtables-devel-1.4.21-6.3.1 libxtables10-1.4.21-6.3.1 libxtables10-debuginfo-1.4.21-6.3.1 xtables-plugins-1.4.21-6.3.1 xtables-plugins-debuginfo-1.4.21-6.3.1 References: https://bugzilla.suse.com/1045130

1 0

openSUSE-RU-2017:1987-1: moderate: Recommended update for lxc
by maintenance＠opensuse.org 28 Jul '17

28 Jul '17

openSUSE Recommended Update: Recommended update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1987-1 Rating: moderate References: #1036360 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxc fixes the following issue: * lxc-start would fail to start (boo#1036360) This fix requires to manually start apparmor after installation or rebooting the machine. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-853=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-853=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): lxc-1.1.5-19.1 lxc-debuginfo-1.1.5-19.1 lxc-debugsource-1.1.5-19.1 lxc-devel-1.1.5-19.1 - openSUSE Leap 42.2 (x86_64): lxc-1.1.5-15.6.1 lxc-debuginfo-1.1.5-15.6.1 lxc-debugsource-1.1.5-15.6.1 lxc-devel-1.1.5-15.6.1 References: https://bugzilla.suse.com/1036360

1 0

openSUSE-SU-2017:1985-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 28 Jul '17

28 Jul '17

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1985-1 Rating: moderate References: #1049072 Cross-References: CVE-2017-11403 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issue: - CVE-2017-11403: A specially crafted PNG file may have have triggerd a use-after-free flaw (boo#1049072) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-851=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-851=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): GraphicsMagick-1.3.25-17.1 GraphicsMagick-debuginfo-1.3.25-17.1 GraphicsMagick-debugsource-1.3.25-17.1 GraphicsMagick-devel-1.3.25-17.1 libGraphicsMagick++-Q16-12-1.3.25-17.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-17.1 libGraphicsMagick++-devel-1.3.25-17.1 libGraphicsMagick-Q16-3-1.3.25-17.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-17.1 libGraphicsMagick3-config-1.3.25-17.1 libGraphicsMagickWand-Q16-2-1.3.25-17.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-17.1 perl-GraphicsMagick-1.3.25-17.1 perl-GraphicsMagick-debuginfo-1.3.25-17.1 - openSUSE Leap 42.2 (i586 x86_64): GraphicsMagick-1.3.25-11.15.1 GraphicsMagick-debuginfo-1.3.25-11.15.1 GraphicsMagick-debugsource-1.3.25-11.15.1 GraphicsMagick-devel-1.3.25-11.15.1 libGraphicsMagick++-Q16-12-1.3.25-11.15.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-11.15.1 libGraphicsMagick++-devel-1.3.25-11.15.1 libGraphicsMagick-Q16-3-1.3.25-11.15.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-11.15.1 libGraphicsMagick3-config-1.3.25-11.15.1 libGraphicsMagickWand-Q16-2-1.3.25-11.15.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-11.15.1 perl-GraphicsMagick-1.3.25-11.15.1 perl-GraphicsMagick-debuginfo-1.3.25-11.15.1 References: https://www.suse.com/security/cve/CVE-2017-11403.html https://bugzilla.suse.com/1049072

1 0

openSUSE-SU-2017:1984-1: moderate: Security update for the_silver_searcher
by opensuse-security＠opensuse.org 28 Jul '17

28 Jul '17

openSUSE Security Update: Security update for the_silver_searcher ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1984-1 Rating: moderate References: #1050057 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for the_silver_searcher to version 2.0.0 fixes a minor security issue and includes various improvements. New and updated functionality: - New and updated support for various file types - Performance improvements, including faster substring search - Add --print-all-files options to print all files searched - Add support for inverting ignore rules (e.g. !blah.txt) - Add zsh completion function The following functionality has changed: - No longer read from .agignore, .ignore is used The following potential security issue was fixed: - Heap buffer overflow when searching an absolute path (boo#1050057) The following bug fixes are included: - Fix context line printing when reading from a pipe - Ignore local-domain socket just like named pipes - Fix --word-regexp not applying to alternates Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-850=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-850=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): the_silver_searcher-2.0.0-6.1 the_silver_searcher-debuginfo-2.0.0-6.1 the_silver_searcher-debugsource-2.0.0-6.1 - openSUSE Leap 42.2 (i586 x86_64): the_silver_searcher-2.0.0-3.3.1 the_silver_searcher-debuginfo-2.0.0-3.3.1 the_silver_searcher-debugsource-2.0.0-3.3.1 References: https://bugzilla.suse.com/1050057

1 0

openSUSE-RU-2017:1982-1: important: Recommended update for systemd, dracut
by maintenance＠opensuse.org 27 Jul '17

27 Jul '17

openSUSE Recommended Update: Recommended update for systemd, dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1982-1 Rating: important References: #1032029 #1032284 #1033238 #1037120 #1040153 #1040968 #1043900 #1045290 #1046750 #1048565 #986216 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 11 recommended fixes can now be installed. Description: This update for systemd and dracut fixes the following issues: Issues fixed in systemd: - Automounter issue in combination with NFS volumes (bsc#1040968) - Missing symbolic link for SAS device in /dev/disk/by-path (bsc#1040153) - Add minimal support for boot.d/* scripts in systemd-sysv-convert (bsc#1046750) The update also contains a tracked code change for CVE-2017-9445, a possible out-of-bounds write triggered by a specially crafted TCP payload from a DNS server. The openSUSE package does not ship resolved and is not affected. (bsc#1045290) Issues fixed in dracut: - Bail out if module directory does not exist. (bsc#1043900) - Suppress bogus error message. (bsc#1032029) - Fix module force loading with systemd. (bsc#986216) - Ship udev files required by systemd. (bsc#1040153) - Ignore module resolution errors (e.g. with kgraft). (bsc#1037120) - switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565) - ISCSI boot would fail randomly (bsc#1032284) This update was imported from the SUSE:SLE-12-SP2:Update and SUSE:SLE-12-SP3:Update update projects. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-847=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): dracut-044.1-23.2 dracut-debuginfo-044.1-23.2 dracut-debugsource-044.1-23.2 dracut-fips-044.1-23.2 dracut-tools-044.1-23.2 libsystemd0-228-29.1 libsystemd0-debuginfo-228-29.1 libsystemd0-mini-228-29.1 libsystemd0-mini-debuginfo-228-29.1 libudev-devel-228-29.1 libudev-mini-devel-228-29.1 libudev-mini1-228-29.1 libudev-mini1-debuginfo-228-29.1 libudev1-228-29.1 libudev1-debuginfo-228-29.1 nss-myhostname-228-29.1 nss-myhostname-debuginfo-228-29.1 nss-mymachines-228-29.1 nss-mymachines-debuginfo-228-29.1 systemd-228-29.1 systemd-debuginfo-228-29.1 systemd-debugsource-228-29.1 systemd-devel-228-29.1 systemd-logger-228-29.1 systemd-mini-228-29.1 systemd-mini-debuginfo-228-29.1 systemd-mini-debugsource-228-29.1 systemd-mini-devel-228-29.1 systemd-mini-sysvinit-228-29.1 systemd-sysvinit-228-29.1 udev-228-29.1 udev-debuginfo-228-29.1 udev-mini-228-29.1 udev-mini-debuginfo-228-29.1 - openSUSE Leap 42.3 (noarch): systemd-bash-completion-228-29.1 systemd-mini-bash-completion-228-29.1 - openSUSE Leap 42.3 (x86_64): libsystemd0-32bit-228-29.1 libsystemd0-debuginfo-32bit-228-29.1 libudev1-32bit-228-29.1 libudev1-debuginfo-32bit-228-29.1 nss-myhostname-32bit-228-29.1 nss-myhostname-debuginfo-32bit-228-29.1 systemd-32bit-228-29.1 systemd-debuginfo-32bit-228-29.1 References: https://bugzilla.suse.com/1032029 https://bugzilla.suse.com/1032284 https://bugzilla.suse.com/1033238 https://bugzilla.suse.com/1037120 https://bugzilla.suse.com/1040153 https://bugzilla.suse.com/1040968 https://bugzilla.suse.com/1043900 https://bugzilla.suse.com/1045290 https://bugzilla.suse.com/1046750 https://bugzilla.suse.com/1048565 https://bugzilla.suse.com/986216

1 0