July 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:1981-1: important: Recommended update for systemd, dracut
by maintenance＠opensuse.org 27 Jul '17

27 Jul '17

openSUSE Recommended Update: Recommended update for systemd, dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1981-1 Rating: important References: #1032029 #1033238 #1037120 #1040153 #1040968 #1043900 #1045290 #1046750 #986216 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: This update for systemd and dracut fixes the following issues: Issues fixed in systemd: - Automounter issue in combination with NFS volumes (bsc#1040968) - Missing symbolic link for SAS device in /dev/disk/by-path (bsc#1040153) - Add minimal support for boot.d/* scripts in systemd-sysv-convert (bsc#1046750) The update also contains a tracked code change for CVE-2017-9445, a possible out-of-bounds write triggered by a specially crafted TCP payload from a DNS server. The openSUSE package does not ship resolved and is not affected. (bsc#1045290) Issues fixed in dracut: - Bail out if module directory does not exist. (bsc#1043900) - Suppress bogus error message. (bsc#1032029) - Fix module force loading with systemd. (bsc#986216) - Ship udev files required by systemd. (bsc#1040153) - Ignore module resolution errors (e.g. with kgraft). (bsc#1037120) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-848=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dracut-044.1-16.9.2 dracut-debuginfo-044.1-16.9.2 dracut-debugsource-044.1-16.9.2 dracut-fips-044.1-16.9.2 dracut-tools-044.1-16.9.2 libsystemd0-228-25.9.1 libsystemd0-debuginfo-228-25.9.1 libsystemd0-mini-228-25.9.1 libsystemd0-mini-debuginfo-228-25.9.1 libudev-devel-228-25.9.1 libudev-mini-devel-228-25.9.1 libudev-mini1-228-25.9.1 libudev-mini1-debuginfo-228-25.9.1 libudev1-228-25.9.1 libudev1-debuginfo-228-25.9.1 nss-myhostname-228-25.9.1 nss-myhostname-debuginfo-228-25.9.1 nss-mymachines-228-25.9.1 nss-mymachines-debuginfo-228-25.9.1 systemd-228-25.9.1 systemd-debuginfo-228-25.9.1 systemd-debugsource-228-25.9.1 systemd-devel-228-25.9.1 systemd-logger-228-25.9.1 systemd-mini-228-25.9.1 systemd-mini-debuginfo-228-25.9.1 systemd-mini-debugsource-228-25.9.1 systemd-mini-devel-228-25.9.1 systemd-mini-sysvinit-228-25.9.1 systemd-sysvinit-228-25.9.1 udev-228-25.9.1 udev-debuginfo-228-25.9.1 udev-mini-228-25.9.1 udev-mini-debuginfo-228-25.9.1 - openSUSE Leap 42.2 (noarch): systemd-bash-completion-228-25.9.1 systemd-mini-bash-completion-228-25.9.1 - openSUSE Leap 42.2 (x86_64): libsystemd0-32bit-228-25.9.1 libsystemd0-debuginfo-32bit-228-25.9.1 libudev1-32bit-228-25.9.1 libudev1-debuginfo-32bit-228-25.9.1 nss-myhostname-32bit-228-25.9.1 nss-myhostname-debuginfo-32bit-228-25.9.1 systemd-32bit-228-25.9.1 systemd-debuginfo-32bit-228-25.9.1 References: https://bugzilla.suse.com/1032029 https://bugzilla.suse.com/1033238 https://bugzilla.suse.com/1037120 https://bugzilla.suse.com/1040153 https://bugzilla.suse.com/1040968 https://bugzilla.suse.com/1043900 https://bugzilla.suse.com/1045290 https://bugzilla.suse.com/1046750 https://bugzilla.suse.com/986216

1 0

openSUSE-RU-2017:1978-1: moderate: Recommended update for dovecot22
by maintenance＠opensuse.org 27 Jul '17

27 Jul '17

openSUSE Recommended Update: Recommended update for dovecot22 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1978-1 Rating: moderate References: #1045662 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides Dovecot version 2.2.31, which brings many fixes and enhancements: - Do not generate dhparams smaller than 2048 in FIPS mode. (bsc#1045662) - Removed "(Dovecot)" from added Received headers. Some installations want to hide it, and there's not really any good reason for anyone to have it. - Add ssl_alt_cert and ssl_alt_key settings to add support for having both RSA and ECDSA certificates. - Strip trailing whitespace from headers when matching mails in dsync/imapc and pop3-migration plugin. - Add acl_globals_only setting to disable looking up per-mailbox dovecot-acl files. - Parse invalid message addresses better. This mainly affects the generated IMAP ENVELOPE replies. - Fix potential corruption of dovecot.index.cache that could lead to deleting wrong mail's cache. - Fix crash in mail-crypt-acl plugin. - Fix welcome plugin. - Various fixes to handling mailbox listing. Especially related to handling non-existent autocreated or autosubscribed mailboxes and ACLs. - Global ACL file was parsed as if it was local ACL file. - Only the first forward_* field was working, and only if the first passdb lookup succeeded. - Using mail_sort_max_read_count sometimes caused "Broken sort-* indexes, resetting" errors. - Using mail_sort_max_read_count may have caused very high CPU usage. - Message address parsing could have crashed on invalid input. - imapc_features=fetch-headers wasn't always working correctly and caused the full header to be fetched. - Various bug fixes related to connection failure handling in imapc. - Unnecessary FETCH RFC822.SIZE sent to server when expunging mails if quota=imapc. - Add support for "ns" parameter to quota=count. - Fix incremental syncing for mails that don't have Date or Message-ID headers. - Fix hang when client sends pipelined SEARCH + EXPUNGE/CLOSE/LOGOUT. - Token validation in oauth2 didn't accept empty server responses. - Adjusts Pigeonhole to several changes in the Dovecot API, making it depend on Dovecot v2.2.31. - Fixed bug in handling of implicit keep in some cases. Implicit side-effects, such as assigned flags, were not always applied correctly. - Fixed segmentation fault that could occur when the global script location was left unconfigured. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-849=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dovecot22-2.2.31-5.7.1 dovecot22-backend-mysql-2.2.31-5.7.1 dovecot22-backend-mysql-debuginfo-2.2.31-5.7.1 dovecot22-backend-pgsql-2.2.31-5.7.1 dovecot22-backend-pgsql-debuginfo-2.2.31-5.7.1 dovecot22-backend-sqlite-2.2.31-5.7.1 dovecot22-backend-sqlite-debuginfo-2.2.31-5.7.1 dovecot22-debuginfo-2.2.31-5.7.1 dovecot22-debugsource-2.2.31-5.7.1 dovecot22-devel-2.2.31-5.7.1 dovecot22-fts-2.2.31-5.7.1 dovecot22-fts-debuginfo-2.2.31-5.7.1 dovecot22-fts-lucene-2.2.31-5.7.1 dovecot22-fts-lucene-debuginfo-2.2.31-5.7.1 dovecot22-fts-solr-2.2.31-5.7.1 dovecot22-fts-solr-debuginfo-2.2.31-5.7.1 dovecot22-fts-squat-2.2.31-5.7.1 dovecot22-fts-squat-debuginfo-2.2.31-5.7.1 References: https://bugzilla.suse.com/1045662

1 0

openSUSE-OU-2017:1977-1: Optional update for sendmail
by maintenance＠opensuse.org 27 Jul '17

27 Jul '17

openSUSE Optional Update: Optional update for sendmail ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:1977-1 Rating: low References: #1049188 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for sendmail fixes the following issues: - The requirements of the libmilter, sendmail-devel packages did not consider other MTAs (boo#1049188) Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-846=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): libmilter-doc-8.15.2-6.1 sendmail-starttls-8.15.2-6.1 - openSUSE Leap 42.3 (x86_64): libmilter1_0-8.15.2-6.1 libmilter1_0-debuginfo-8.15.2-6.1 rmail-8.15.2-6.1 rmail-debuginfo-8.15.2-6.1 sendmail-8.15.2-6.1 sendmail-debuginfo-8.15.2-6.1 sendmail-debugsource-8.15.2-6.1 sendmail-devel-8.15.2-6.1 References: https://bugzilla.suse.com/1049188

1 0

openSUSE-RU-2017:1970-1: moderate: Recommended update for tigervnc
by maintenance＠opensuse.org 27 Jul '17

27 Jul '17

openSUSE Recommended Update: Recommended update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1970-1 Rating: moderate References: #1041847 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tigervnc fixes the following issues: - Issues accessing vnc through browser with default encrypted connection (boo#1041847) * Make sure CN in generated certificate doesn't exceed 64 characters * fix generation of TLS certificate using current hostname * Fix certificate handling in the java client Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-845=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libXvnc-devel-1.6.0-16.11.1 libXvnc1-1.6.0-16.11.1 libXvnc1-debuginfo-1.6.0-16.11.1 tigervnc-1.6.0-16.11.1 tigervnc-debuginfo-1.6.0-16.11.1 tigervnc-debugsource-1.6.0-16.11.1 xorg-x11-Xvnc-1.6.0-16.11.1 xorg-x11-Xvnc-debuginfo-1.6.0-16.11.1 References: https://bugzilla.suse.com/1041847

1 0

openSUSE-SU-2017:1967-1: moderate: Update for gnu-efi, pesign, shim
by opensuse-security＠opensuse.org 26 Jul '17

26 Jul '17

openSUSE Security Update: Update for gnu-efi, pesign, shim ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1967-1 Rating: moderate References: #798043 #807760 #808106 #813079 #813448 #841426 #863205 #866690 #867974 #872503 #873857 #875385 #877003 #889332 #889765 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: shim was updated to fix several security issues. - OOB read access when parsing DHCPv6 packets (remote DoS) (CVE-2014-3675). - Heap overflow when parsing IPv6 addresses provided by tftp:// DHCPv6 boot option (RCE) (CVE-2014-3676). - Memory corruption when processing user provided MOK lists (CVE-2014-3677). More information is available at https://bugzilla.novell.com/show_bug.cgi?id=889332 To enable this update gnu-efi was updated to 3.0u and pesign to version 0.109 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-48=1 - openSUSE 12.3: zypper in -t patch openSUSE-2015-48=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): gnu-efi-3.0u-2.5.1 pesign-0.109-3.9.2 pesign-debuginfo-0.109-3.9.2 pesign-debugsource-0.109-3.9.2 - openSUSE 13.1 (x86_64): shim-0.7.318.81ee561d-7.2 - openSUSE 12.3 (i586 x86_64): gnu-efi-3.0u-6.5.1 pesign-0.109-3.19.1 pesign-debuginfo-0.109-3.19.1 pesign-debugsource-0.109-3.19.1 - openSUSE 12.3 (x86_64): shim-0.7.318.81ee561d-3.22.1 References: https://bugzilla.suse.com/798043 https://bugzilla.suse.com/807760 https://bugzilla.suse.com/808106 https://bugzilla.suse.com/813079 https://bugzilla.suse.com/813448 https://bugzilla.suse.com/841426 https://bugzilla.suse.com/863205 https://bugzilla.suse.com/866690 https://bugzilla.suse.com/867974 https://bugzilla.suse.com/872503 https://bugzilla.suse.com/873857 https://bugzilla.suse.com/875385 https://bugzilla.suse.com/877003 https://bugzilla.suse.com/889332 https://bugzilla.suse.com/889765

1 0

openSUSE-SU-2017:1966-1: moderate: Security update for containerd, docker, runc
by opensuse-security＠opensuse.org 26 Jul '17

26 Jul '17

openSUSE Security Update: Security update for containerd, docker, runc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1966-1 Rating: moderate References: #1004490 #1009961 #1012568 #1015661 #1016307 #1019251 #988408 Cross-References: CVE-2016-9962 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This update for - containerd, - docker to version 1.12.6 and - runc fixes several issues. This security issues was fixed: - CVE-2016-9962: container escape vulnerability (bsc#1012568). Thsese non-security issues were fixed: - boo#1019251: Add a delay when starting docker service - Fixed bash-completion - boo#1015661: add the /usr/bin/docker-run symlink For additional details please see the changelog. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-181=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-181=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): containerd-0.2.5+gitr569_2a5e70c-8.1 containerd-ctr-0.2.5+gitr569_2a5e70c-8.1 containerd-ctr-debuginfo-0.2.5+gitr569_2a5e70c-8.1 containerd-debuginfo-0.2.5+gitr569_2a5e70c-8.1 containerd-debugsource-0.2.5+gitr569_2a5e70c-8.1 docker-1.12.6-25.2 docker-debuginfo-1.12.6-25.2 docker-debugsource-1.12.6-25.2 docker-test-1.12.6-25.2 docker-test-debuginfo-1.12.6-25.2 runc-0.1.1+gitr2819_50a19c6-8.1 runc-debuginfo-0.1.1+gitr2819_50a19c6-8.1 runc-debugsource-0.1.1+gitr2819_50a19c6-8.1 - openSUSE Leap 42.2 (noarch): containerd-test-0.2.5+gitr569_2a5e70c-8.1 docker-bash-completion-1.12.6-25.2 docker-zsh-completion-1.12.6-25.2 runc-test-0.1.1+gitr2819_50a19c6-8.1 - openSUSE Leap 42.1 (i586 x86_64): containerd-0.2.5+gitr569_2a5e70c-10.1 containerd-ctr-0.2.5+gitr569_2a5e70c-10.1 containerd-ctr-debuginfo-0.2.5+gitr569_2a5e70c-10.1 containerd-debuginfo-0.2.5+gitr569_2a5e70c-10.1 containerd-debugsource-0.2.5+gitr569_2a5e70c-10.1 runc-0.1.1+gitr2819_50a19c6-10.1 runc-debuginfo-0.1.1+gitr2819_50a19c6-10.1 runc-debugsource-0.1.1+gitr2819_50a19c6-10.1 - openSUSE Leap 42.1 (noarch): containerd-test-0.2.5+gitr569_2a5e70c-10.1 docker-bash-completion-1.12.6-27.1 docker-zsh-completion-1.12.6-27.1 runc-test-0.1.1+gitr2819_50a19c6-10.1 - openSUSE Leap 42.1 (x86_64): docker-1.12.6-27.1 docker-debuginfo-1.12.6-27.1 docker-debugsource-1.12.6-27.1 docker-test-1.12.6-27.1 docker-test-debuginfo-1.12.6-27.1 References: https://www.suse.com/security/cve/CVE-2016-9962.html https://bugzilla.suse.com/1004490 https://bugzilla.suse.com/1009961 https://bugzilla.suse.com/1012568 https://bugzilla.suse.com/1015661 https://bugzilla.suse.com/1016307 https://bugzilla.suse.com/1019251 https://bugzilla.suse.com/988408

1 0

openSUSE-SU-2017:1960-1: moderate: Security update for jasper
by opensuse-security＠opensuse.org 26 Jul '17

26 Jul '17

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1960-1 Rating: moderate References: #1009994 #1010756 #1010757 #1010766 #1010774 #1010782 #1010968 #1010975 #1047958 Cross-References: CVE-2016-9262 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391 CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2017-1000050 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for jasper fixes the following issues: Security issues fixed: - CVE-2016-9262: Multiple integer overflows in the jas_realloc function in base/jas_malloc.c and mem_resize function in base/jas_stream.c allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities. (bsc#1009994) - CVE-2016-9388: The ras_getcmap function in ras_dec.c allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. (bsc#1010975) - CVE-2016-9389: The jpc_irct and jpc_iict functions in jpc_mct.c allow remote attackers to cause a denial of service (assertion failure). (bsc#1010968) - CVE-2016-9390: The jas_seq2d_create function in jas_seq.c allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. (bsc#1010774) - CVE-2016-9391: The jpc_bitstream_getbits function in jpc_bs.c allows remote attackers to cause a denial of service (assertion failure) via a very large integer. (bsc#1010782) - CVE-2017-1000050: The jp2_encode function in jp2_enc.c allows remote attackers to cause a denial of service. (bsc#1047958) CVEs already fixed with previous update: - CVE-2016-9392: The calcstepsizes function in jpc_dec.c allows remote attackers to cause a denial of service (assertion failure) via a crafted file. (bsc#1010757) - CVE-2016-9393: The jpc_pi_nextrpcl function in jpc_t2cod.c allows remote attackers to cause a denial of service (assertion failure) via a crafted file. (bsc#1010766) - CVE-2016-9394: The jas_seq2d_create function in jas_seq.c allows remote attackers to cause a denial of service (assertion failure) via a crafted file. (bsc#1010756) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-844=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-844=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): jasper-1.900.14-179.1 jasper-debuginfo-1.900.14-179.1 jasper-debugsource-1.900.14-179.1 libjasper-devel-1.900.14-179.1 libjasper1-1.900.14-179.1 libjasper1-debuginfo-1.900.14-179.1 - openSUSE Leap 42.3 (x86_64): libjasper1-32bit-1.900.14-179.1 libjasper1-debuginfo-32bit-1.900.14-179.1 - openSUSE Leap 42.2 (i586 x86_64): jasper-1.900.14-175.6.1 jasper-debuginfo-1.900.14-175.6.1 jasper-debugsource-1.900.14-175.6.1 libjasper-devel-1.900.14-175.6.1 libjasper1-1.900.14-175.6.1 libjasper1-debuginfo-1.900.14-175.6.1 - openSUSE Leap 42.2 (x86_64): libjasper1-32bit-1.900.14-175.6.1 libjasper1-debuginfo-32bit-1.900.14-175.6.1 References: https://www.suse.com/security/cve/CVE-2016-9262.html https://www.suse.com/security/cve/CVE-2016-9388.html https://www.suse.com/security/cve/CVE-2016-9389.html https://www.suse.com/security/cve/CVE-2016-9390.html https://www.suse.com/security/cve/CVE-2016-9391.html https://www.suse.com/security/cve/CVE-2016-9392.html https://www.suse.com/security/cve/CVE-2016-9393.html https://www.suse.com/security/cve/CVE-2016-9394.html https://www.suse.com/security/cve/CVE-2017-1000050.html https://bugzilla.suse.com/1009994 https://bugzilla.suse.com/1010756 https://bugzilla.suse.com/1010757 https://bugzilla.suse.com/1010766 https://bugzilla.suse.com/1010774 https://bugzilla.suse.com/1010782 https://bugzilla.suse.com/1010968 https://bugzilla.suse.com/1010975 https://bugzilla.suse.com/1047958

1 0

openSUSE-SU-2017:1959-1: moderate: Security update for catdoc
by opensuse-security＠opensuse.org 26 Jul '17

26 Jul '17

openSUSE Security Update: Security update for catdoc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1959-1 Rating: moderate References: #1047877 Cross-References: CVE-2017-11110 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for catdoc fixes the following issues: - CVE-2017-11110: Attackers may have used specially crafted files to cause a denial of service through a heap-based buffer under-flow and application crash, or have unspecified other impact (boo#1047877) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-841=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): catdoc-0.95-10.1 catdoc-debuginfo-0.95-10.1 catdoc-debugsource-0.95-10.1 References: https://www.suse.com/security/cve/CVE-2017-11110.html https://bugzilla.suse.com/1047877

1 0

openSUSE-SU-2017:1958-1: moderate: Security update for Wireshark
by opensuse-security＠opensuse.org 26 Jul '17

26 Jul '17

openSUSE Security Update: Security update for Wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1958-1 Rating: moderate References: #1049255 #1049621 Cross-References: CVE-2017-11406 CVE-2017-11407 CVE-2017-11408 CVE-2017-11410 CVE-2017-11411 CVE-2017-7702 CVE-2017-9350 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update to Wireshark 2.2.8 fixes some minor vulnerabilities could be used to trigger dissector crashes, infinite loops, or cause excessive use of memory resources by making Wireshark read specially crafted packages from the network or a capture file: - CVE-2017-7702,CVE-2017-11410: WBMXL dissector infinite loop (wnpa-sec-2017-13) - CVE-2017-9350,CVE-2017-11411: openSAFETY dissector memory exhaustion (wnpa-sec-2017-28) - CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34) - CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35) - CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-840=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-840=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): wireshark-2.2.8-17.1 wireshark-debuginfo-2.2.8-17.1 wireshark-debugsource-2.2.8-17.1 wireshark-devel-2.2.8-17.1 wireshark-ui-gtk-2.2.8-17.1 wireshark-ui-gtk-debuginfo-2.2.8-17.1 wireshark-ui-qt-2.2.8-17.1 wireshark-ui-qt-debuginfo-2.2.8-17.1 - openSUSE Leap 42.2 (x86_64): wireshark-2.2.8-14.9.1 wireshark-debuginfo-2.2.8-14.9.1 wireshark-debugsource-2.2.8-14.9.1 wireshark-devel-2.2.8-14.9.1 wireshark-ui-gtk-2.2.8-14.9.1 wireshark-ui-gtk-debuginfo-2.2.8-14.9.1 wireshark-ui-qt-2.2.8-14.9.1 wireshark-ui-qt-debuginfo-2.2.8-14.9.1 References: https://www.suse.com/security/cve/CVE-2017-11406.html https://www.suse.com/security/cve/CVE-2017-11407.html https://www.suse.com/security/cve/CVE-2017-11408.html https://www.suse.com/security/cve/CVE-2017-11410.html https://www.suse.com/security/cve/CVE-2017-11411.html https://www.suse.com/security/cve/CVE-2017-7702.html https://www.suse.com/security/cve/CVE-2017-9350.html https://bugzilla.suse.com/1049255 https://bugzilla.suse.com/1049621

1 0

openSUSE-SU-2017:1957-1: moderate: Recommended update for gsoap
by opensuse-security＠opensuse.org 26 Jul '17

26 Jul '17

openSUSE Security Update: Recommended update for gsoap ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1957-1 Rating: moderate References: #1049348 Cross-References: CVE-2017-9765 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gsoap fixes the following security issue: - CVE-2017-9765: A remote attacker may have triggered a buffer overflow to cause a server crash (denial of service) after sending 2GB of a specially crafted XML message, or possibly have unspecified futher impact. (bsc#1049348) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-842=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-842=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): gsoap-debugsource-2.8.46-3.1 gsoap-devel-2.8.46-3.1 gsoap-devel-debuginfo-2.8.46-3.1 libgsoap-2_8_46-2.8.46-3.1 libgsoap-2_8_46-debuginfo-2.8.46-3.1 - openSUSE Leap 42.3 (noarch): gsoap-doc-2.8.46-3.1 - openSUSE Leap 42.2 (i586 x86_64): gsoap-debugsource-2.8.33-2.3.1 gsoap-devel-2.8.33-2.3.1 gsoap-devel-debuginfo-2.8.33-2.3.1 libgsoap-2_8_33-2.8.33-2.3.1 libgsoap-2_8_33-debuginfo-2.8.33-2.3.1 References: https://www.suse.com/security/cve/CVE-2017-9765.html https://bugzilla.suse.com/1049348

1 0

openSUSE-RU-2017:1956-1: Recommended update for clamav-database
by maintenance＠opensuse.org 26 Jul '17

26 Jul '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1956-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh July 24th 2017. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-843=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201707240005-54.57.1 References:

1 0

openSUSE-RU-2017:1949-1: Recommended update for smartmontools
by maintenance＠opensuse.org 24 Jul '17

24 Jul '17

openSUSE Recommended Update: Recommended update for smartmontools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1949-1 Rating: low References: #900099 #983938 #999541 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update provides a new version of smartmontools with various improvements and bug fixes: - Experimental support for NVMe devices on FreeBSD, Linux and Windows. (boo#999541) - smartctl '-i', '-c', '-H' and '-l error': NVMe support. - smartctl '-l nvmelog': New option for NVMe. - smartd.conf '-H', '-l error' and '-W': NVMe support. - Optional NVMe device scanning support on Linux and Windows. - Configure option '--with-nvme-devicescan' to include NVMe in default device scanning result. - Drop systemd dependency on syslog.target (boo#983938). - SCSI: Improved support of modern disks (SAS SSDs). - AACRAID fixes, SMART STATUS should work now. - '/dev/megaraid_sas_ioctl_node' fd leak fix. - Re-add /usr/sbin/rcsmards symlink (boo#900099). - Fix service restart in smartmontools.generate_smartd_opts.in (boo#900099). - re-add sysvinit support in specfile. - HDD, SSD and USB additions to drive database. - Build with large file support in 32 bit systems. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-836=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-836=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): smartmontools-6.5-8.1 smartmontools-debuginfo-6.5-8.1 smartmontools-debugsource-6.5-8.1 - openSUSE Leap 42.2 (i586 x86_64): smartmontools-6.5-5.3.1 smartmontools-debuginfo-6.5-5.3.1 smartmontools-debugsource-6.5-5.3.1 References: https://bugzilla.suse.com/900099 https://bugzilla.suse.com/983938 https://bugzilla.suse.com/999541

1 0

openSUSE-SU-2017:1948-1: important: Security update for rubygem-puppet
by opensuse-security＠opensuse.org 24 Jul '17

24 Jul '17

openSUSE Security Update: Security update for rubygem-puppet ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1948-1 Rating: important References: #1040151 Cross-References: CVE-2017-2295 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rubygem-puppet fixes the following issues: - CVE-2017-2295: A remote attacker could have forced unsafe YAML deserialization which could have led to code execution (bsc#1040151) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-835=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-835=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): ruby2.1-rubygem-puppet-3.8.7-20.1 ruby2.1-rubygem-puppet-doc-3.8.7-20.1 ruby2.1-rubygem-puppet-testsuite-3.8.7-20.1 ruby2.2-rubygem-puppet-3.8.7-20.1 ruby2.2-rubygem-puppet-doc-3.8.7-20.1 ruby2.2-rubygem-puppet-testsuite-3.8.7-20.1 ruby2.3-rubygem-puppet-3.8.7-20.1 ruby2.3-rubygem-puppet-doc-3.8.7-20.1 ruby2.3-rubygem-puppet-testsuite-3.8.7-20.1 ruby2.4-rubygem-puppet-3.8.7-20.1 ruby2.4-rubygem-puppet-doc-3.8.7-20.1 ruby2.4-rubygem-puppet-testsuite-3.8.7-20.1 rubygem-puppet-3.8.7-20.1 rubygem-puppet-master-3.8.7-20.1 - openSUSE Leap 42.3 (noarch): rubygem-puppet-emacs-3.8.7-20.1 rubygem-puppet-master-unicorn-3.8.7-20.1 rubygem-puppet-vim-3.8.7-20.1 - openSUSE Leap 42.2 (i586 x86_64): ruby2.1-rubygem-puppet-3.8.7-17.3.1 ruby2.1-rubygem-puppet-doc-3.8.7-17.3.1 ruby2.1-rubygem-puppet-testsuite-3.8.7-17.3.1 rubygem-puppet-3.8.7-17.3.1 rubygem-puppet-master-3.8.7-17.3.1 - openSUSE Leap 42.2 (noarch): rubygem-puppet-emacs-3.8.7-17.3.1 rubygem-puppet-master-unicorn-3.8.7-17.3.1 rubygem-puppet-vim-3.8.7-17.3.1 References: https://www.suse.com/security/cve/CVE-2017-2295.html https://bugzilla.suse.com/1040151

1 0

openSUSE-RU-2017:1947-1: moderate: Recommended update for coolkey
by maintenance＠opensuse.org 24 Jul '17

24 Jul '17

openSUSE Recommended Update: Recommended update for coolkey ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1947-1 Rating: moderate References: #1049213 #996047 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for coolkey provides fixes and enhancements, including: - PK15 support. - Fix CAC card support. - Fix card removal issues. - Add PKCS11 module to p11-kit-32bit. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-839=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-839=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): coolkey-1.1.0-156.1 coolkey-debuginfo-1.1.0-156.1 coolkey-debugsource-1.1.0-156.1 coolkey-devel-1.1.0-156.1 - openSUSE Leap 42.3 (x86_64): coolkey-32bit-1.1.0-156.1 coolkey-debuginfo-32bit-1.1.0-156.1 - openSUSE Leap 42.2 (i586 x86_64): coolkey-1.1.0-153.3.1 coolkey-debuginfo-1.1.0-153.3.1 coolkey-debugsource-1.1.0-153.3.1 coolkey-devel-1.1.0-153.3.1 - openSUSE Leap 42.2 (x86_64): coolkey-32bit-1.1.0-153.3.1 coolkey-debuginfo-32bit-1.1.0-153.3.1 References: https://bugzilla.suse.com/1049213 https://bugzilla.suse.com/996047

1 0

openSUSE-SU-2017:1934-1: moderate: Security update for xorg-x11-server
by opensuse-security＠opensuse.org 24 Jul '17

24 Jul '17

openSUSE Security Update: Security update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1934-1 Rating: moderate References: #1025084 #1047154 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for xorg-x11-server fixes the following issues: - Improve retrieval of entropy for generating random authentication cookies (bsc#1025084) - Fix rendering with glamor acceleration. (bsc#1047154) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-826=2 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): xorg-x11-server-7.6_1.18.3-22.1 xorg-x11-server-debuginfo-7.6_1.18.3-22.1 xorg-x11-server-debugsource-7.6_1.18.3-22.1 xorg-x11-server-extra-7.6_1.18.3-22.1 xorg-x11-server-extra-debuginfo-7.6_1.18.3-22.1 xorg-x11-server-sdk-7.6_1.18.3-22.1 xorg-x11-server-source-7.6_1.18.3-22.1 References: https://bugzilla.suse.com/1025084 https://bugzilla.suse.com/1047154

1 0

openSUSE-SU-2017:1933-1: important: Security update for evince
by opensuse-security＠opensuse.org 24 Jul '17

24 Jul '17

openSUSE Security Update: Security update for evince ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1933-1 Rating: important References: #1046856 Cross-References: CVE-2017-1000083 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for evince fixes the following issues: - CVE-2017-1000083: Remote attackers could have used the comicbook mode of evince to inject shell code. (bsc#1046856, bgo#784630) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-834=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): evince-3.20.1-2.3.1 evince-browser-plugin-3.20.1-2.3.1 evince-browser-plugin-debuginfo-3.20.1-2.3.1 evince-debuginfo-3.20.1-2.3.1 evince-debugsource-3.20.1-2.3.1 evince-devel-3.20.1-2.3.1 evince-plugin-comicsdocument-3.20.1-2.3.1 evince-plugin-comicsdocument-debuginfo-3.20.1-2.3.1 evince-plugin-djvudocument-3.20.1-2.3.1 evince-plugin-djvudocument-debuginfo-3.20.1-2.3.1 evince-plugin-dvidocument-3.20.1-2.3.1 evince-plugin-dvidocument-debuginfo-3.20.1-2.3.1 evince-plugin-pdfdocument-3.20.1-2.3.1 evince-plugin-pdfdocument-debuginfo-3.20.1-2.3.1 evince-plugin-psdocument-3.20.1-2.3.1 evince-plugin-psdocument-debuginfo-3.20.1-2.3.1 evince-plugin-tiffdocument-3.20.1-2.3.1 evince-plugin-tiffdocument-debuginfo-3.20.1-2.3.1 evince-plugin-xpsdocument-3.20.1-2.3.1 evince-plugin-xpsdocument-debuginfo-3.20.1-2.3.1 libevdocument3-4-3.20.1-2.3.1 libevdocument3-4-debuginfo-3.20.1-2.3.1 libevview3-3-3.20.1-2.3.1 libevview3-3-debuginfo-3.20.1-2.3.1 nautilus-evince-3.20.1-2.3.1 nautilus-evince-debuginfo-3.20.1-2.3.1 typelib-1_0-EvinceDocument-3_0-3.20.1-2.3.1 typelib-1_0-EvinceView-3_0-3.20.1-2.3.1 - openSUSE Leap 42.2 (noarch): evince-lang-3.20.1-2.3.1 References: https://www.suse.com/security/cve/CVE-2017-1000083.html https://bugzilla.suse.com/1046856

1 0

openSUSE-RU-2017:1932-1: important: Recommended update for libXi
by maintenance＠opensuse.org 24 Jul '17

24 Jul '17

openSUSE Recommended Update: Recommended update for libXi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1932-1 Rating: important References: #1049681 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libXi fixes the following issues: - many X clients would crash with SIGSEGV on tablet devices or some GTK applications (bsc#1049681) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-831=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-831=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libXi-debugsource-1.7.5-8.1 libXi-devel-1.7.5-8.1 libXi6-1.7.5-8.1 libXi6-debuginfo-1.7.5-8.1 - openSUSE Leap 42.3 (x86_64): libXi-devel-32bit-1.7.5-8.1 libXi6-32bit-1.7.5-8.1 libXi6-debuginfo-32bit-1.7.5-8.1 - openSUSE Leap 42.2 (i586 x86_64): libXi-debugsource-1.7.5-5.3.1 libXi-devel-1.7.5-5.3.1 libXi6-1.7.5-5.3.1 libXi6-debuginfo-1.7.5-5.3.1 - openSUSE Leap 42.2 (x86_64): libXi-devel-32bit-1.7.5-5.3.1 libXi6-32bit-1.7.5-5.3.1 libXi6-debuginfo-32bit-1.7.5-5.3.1 References: https://bugzilla.suse.com/1049681

1 0

openSUSE-RU-2017:1931-1: moderate: Recommended update for release-notes-openSUSE
by maintenance＠opensuse.org 24 Jul '17

24 Jul '17

openSUSE Recommended Update: Recommended update for release-notes-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1931-1 Rating: moderate References: #1006175 #1012371 #1015965 #1048660 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for release-notes-openSUSE fixes the following issues: - Update Leap 42.2 release notes to 42.2.20170721 (tracked in boo#1015965) - Updated translations - Added note about LibreOffice and Type-1 fonts (boo#1048660) - Added entry about missing GNOME Keyring integration with GPG (boo#1012371) - Added section about CCISS driver (boo#1006175) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-832=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): release-notes-openSUSE-42.2.20170721-5.3.1 References: https://bugzilla.suse.com/1006175 https://bugzilla.suse.com/1012371 https://bugzilla.suse.com/1015965 https://bugzilla.suse.com/1048660

1 0

openSUSE-RU-2017:1930-1: important: Recommended update for ucode-intel
by maintenance＠opensuse.org 24 Jul '17

24 Jul '17

openSUSE Recommended Update: Recommended update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1930-1 Rating: important References: #1043358 #1046431 #1048133 #993639 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for ucode-intel brings newer revisions of microcode firmwares for many Intel devices: - BDX-ML B0/M0/R0 (06-4f-01:ef): b00001f -> b000021 - Skylake D0 (06-4e-03:c0): 9e -> ba - Broadwell ULT/ULX E/F-step (06-3d-04:c0): 24 -> 25 - ULT Cx/Dx (06-45-01:72): 1f -> 20 - Crystalwell Cx (06-46-01:32): 16 -> 17 - Broadwell Halo E/G-step (06-47-01:22): 16 -> 17 - HSX EX E0 (06-3f-04:80): d -> f - Skylake R0 (06-5e-03:36): 9e -> ba - Haswell Cx/Dx (06-3c-03:32): 20 -> 22 - HSX C0 (06-3f-02:6f): 39 -> 3a - KBL H0 (06-8e-09:c0): -> 62 - KBL Y0 (06-8e-0a:c0): -> 66 - KBL B0 (06-9e-09:2a): -> 5e - SKX H0 (06-55-04:97): -> 2000022 The updated CPU microcode addresses the following bugs: - Intel Skylake AVX/ FMA3 issue. (bsc#993639) - Intel Skylake HyperThreading issue. (bsc#1046431) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-833=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-833=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): ucode-intel-20170707-10.1 ucode-intel-blob-20170707-10.1 ucode-intel-debuginfo-20170707-10.1 ucode-intel-debugsource-20170707-10.1 - openSUSE Leap 42.2 (i586 x86_64): ucode-intel-20170707-7.6.1 ucode-intel-blob-20170707-7.6.1 ucode-intel-debuginfo-20170707-7.6.1 ucode-intel-debugsource-20170707-7.6.1 References: https://bugzilla.suse.com/1043358 https://bugzilla.suse.com/1046431 https://bugzilla.suse.com/1048133 https://bugzilla.suse.com/993639

1 0

openSUSE-OU-2017:1921-2: Optional update for libkcapi
by maintenance＠opensuse.org 23 Jul '17

23 Jul '17

openSUSE Optional Update: Optional update for libkcapi ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:1921-2 Rating: low References: #1045948 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update supplies access library and tools for the Kernel Crypto API. The libkcapi0 library and the libkcapi-tools are used to access the cryptographic interface of the kernel over the AF_ALG socket interface. (FATE#323554 bsc#1045948) Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-829=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libkcapi-devel-0.13.0-2.1 libkcapi-tools-0.13.0-2.1 libkcapi-tools-debuginfo-0.13.0-2.1 libkcapi0-0.13.0-2.1 libkcapi0-debuginfo-0.13.0-2.1 References: https://bugzilla.suse.com/1045948

1 0

openSUSE-OU-2017:1921-1: Optional update for libkcapi
by maintenance＠opensuse.org 21 Jul '17

21 Jul '17

openSUSE Optional Update: Optional update for libkcapi ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:1921-1 Rating: low References: #1045948 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update supplies access library and tools for the Kernel Crypto API. The libkcapi0 library and the libkcapi-tools are used to access the cryptographic interface of the kernel over the AF_ALG socket interface. (FATE#323554 bsc#1045948) Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-829=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libkcapi-devel-0.13.0-2.1 libkcapi-tools-0.13.0-2.1 libkcapi-tools-debuginfo-0.13.0-2.1 libkcapi0-0.13.0-2.1 libkcapi0-debuginfo-0.13.0-2.1 References: https://bugzilla.suse.com/1045948

1 0

openSUSE-RU-2017:1920-1: Recommended update for oxygen5-icon-theme
by maintenance＠opensuse.org 21 Jul '17

21 Jul '17

openSUSE Recommended Update: Recommended update for oxygen5-icon-theme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1920-1 Rating: low References: #1035476 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for oxygen5-icon-theme fixes the following issues: - device notifier was missing a media mount action icon (boo#1035476) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-830=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): oxygen5-icon-theme-5.26.0-5.1 oxygen5-icon-theme-large-5.26.0-5.1 oxygen5-icon-theme-scalable-5.26.0-5.1 References: https://bugzilla.suse.com/1035476

1 0

openSUSE-SU-2017:1899-1: moderate: Security update for catdoc
by opensuse-security＠opensuse.org 19 Jul '17

19 Jul '17

openSUSE Security Update: Security update for catdoc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1899-1 Rating: moderate References: #1047877 Cross-References: CVE-2017-11110 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for catdoc fixes the following issues: - CVE-2017-11110: Attackers may have used specially crafted files to cause a denial of service through a heap-based buffer under-flow and application crash, or have unspecified other impact (boo#1047877) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-828=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): catdoc-0.95-7.6.1 catdoc-debuginfo-0.95-7.6.1 catdoc-debugsource-0.95-7.6.1 References: https://www.suse.com/security/cve/CVE-2017-11110.html https://bugzilla.suse.com/1047877

1 0

openSUSE-RU-2017:1889-1: Recommended update for clamav-database
by maintenance＠opensuse.org 18 Jul '17

18 Jul '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1889-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh July 17th 2017. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-827=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201707170005-54.54.1 References:

1 0

openSUSE-SU-2017:1885-1: important: Security update for xorg-x11-server
by opensuse-security＠opensuse.org 15 Jul '17

15 Jul '17

openSUSE Security Update: Security update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1885-1 Rating: important References: #1025084 #1035283 Cross-References: CVE-2017-10971 CVE-2017-10972 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for xorg-x11-server fixes the following issues: - CVE-2017-10971: Fix endianess handling of GenericEvent to prevent a stack overflow by clients. (bnc#1035283) - Make sure the type of all events to be sent by ProcXSendExtensionEvent are in the allowed range. - CVE-2017-10972: Initialize the xEvent eventT with zeros to avoid information leakage. - Improve retrieval of entropy for generating random authentication cookies (boo#1025084) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-825=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xorg-x11-server-7.6_1.18.3-12.20.1 xorg-x11-server-debuginfo-7.6_1.18.3-12.20.1 xorg-x11-server-debugsource-7.6_1.18.3-12.20.1 xorg-x11-server-extra-7.6_1.18.3-12.20.1 xorg-x11-server-extra-debuginfo-7.6_1.18.3-12.20.1 xorg-x11-server-sdk-7.6_1.18.3-12.20.1 xorg-x11-server-source-7.6_1.18.3-12.20.1 References: https://www.suse.com/security/cve/CVE-2017-10971.html https://www.suse.com/security/cve/CVE-2017-10972.html https://bugzilla.suse.com/1025084 https://bugzilla.suse.com/1035283

1 0