July 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:1827-1: Recommended update for ibus
by maintenance＠opensuse.org 09 Jul '17

09 Jul '17

openSUSE Recommended Update: Recommended update for ibus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1827-1 Rating: low References: #1036729 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ibus provides the following fix: - Disable load preload-engines actions which may cause CJK user login failed (bsc#1036729) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-800=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ibus-1.5.13-2.3.1 ibus-debuginfo-1.5.13-2.3.1 ibus-debugsource-1.5.13-2.3.1 ibus-devel-1.5.13-2.3.1 ibus-gtk-1.5.13-2.3.1 ibus-gtk-debuginfo-1.5.13-2.3.1 ibus-gtk3-1.5.13-2.3.1 ibus-gtk3-debuginfo-1.5.13-2.3.1 libibus-1_0-5-1.5.13-2.3.1 libibus-1_0-5-debuginfo-1.5.13-2.3.1 python-ibus-1.5.13-2.3.1 typelib-1_0-IBus-1_0-1.5.13-2.3.1 - openSUSE Leap 42.2 (noarch): ibus-branding-openSUSE-KDE-1.5.13-2.3.1 ibus-lang-1.5.13-2.3.1 - openSUSE Leap 42.2 (x86_64): ibus-gtk-32bit-1.5.13-2.3.1 ibus-gtk-debuginfo-32bit-1.5.13-2.3.1 ibus-gtk3-32bit-1.5.13-2.3.1 ibus-gtk3-debuginfo-32bit-1.5.13-2.3.1 libibus-1_0-5-32bit-1.5.13-2.3.1 libibus-1_0-5-debuginfo-32bit-1.5.13-2.3.1 References: https://bugzilla.suse.com/1036729

1 0

openSUSE-SU-2017:1826-1: important: Security update for xen
by opensuse-security＠opensuse.org 08 Jul '17

08 Jul '17

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1826-1 Rating: important References: #1027519 #1035642 #1037243 #1042160 #1042882 #1042893 #1042915 #1042923 #1042924 #1042931 #1042938 Cross-References: CVE-2017-10912 CVE-2017-10913 CVE-2017-10914 CVE-2017-10915 CVE-2017-10917 CVE-2017-10918 CVE-2017-10920 CVE-2017-10921 CVE-2017-10922 CVE-2017-8309 CVE-2017-9330 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for xen fixes several issues. These security issues were fixed: - CVE-2017-10912: Page transfer might have allowed PV guest to elevate privilege (XSA-217, bsc#1042882) - CVE-2017-10913 CVE-2017-10914: Races in the grant table unmap code allowed for informations leaks and potentially privilege escalation (XSA-218, bsc#1042893) - CVE-2017-10915: Insufficient reference counts during shadow emulation allowed a malicious pair of guest to elevate their privileges to the privileges that XEN runs under (XSA-219, bsc#1042915) - CVE-2017-10917: Missing NULL pointer check in event channel poll allows guests to DoS the host (XSA-221, bsc#1042924) - CVE-2017-10918: Stale P2M mappings due to insufficient error checking allowed malicious guest to leak information or elevate privileges (XSA-222, bsc#1042931) - CVE-2017-10920, CVE-2017-10921, CVE-2017-10922: Grant table operations mishandled reference counts allowing malicious guests to escape (XSA-224, bsc#1042938) - CVE-2017-9330: USB OHCI Emulation in qemu allowed local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value (bsc#1042160) - CVE-2017-8309: Memory leak in the audio/audio.c allowed remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture (bsc#1037243) - PKRU and BND* leakage between vCPU-s might have leaked information to other guests (XSA-220, bsc#1042923) These non-security issues were fixed: - bsc#1027519: Included various upstream patches - bsc#1035642: Ensure that rpmbuild works This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-799=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xen-debugsource-4.7.2_06-11.9.1 xen-devel-4.7.2_06-11.9.1 xen-libs-4.7.2_06-11.9.1 xen-libs-debuginfo-4.7.2_06-11.9.1 xen-tools-domU-4.7.2_06-11.9.1 xen-tools-domU-debuginfo-4.7.2_06-11.9.1 - openSUSE Leap 42.2 (x86_64): xen-4.7.2_06-11.9.1 xen-doc-html-4.7.2_06-11.9.1 xen-libs-32bit-4.7.2_06-11.9.1 xen-libs-debuginfo-32bit-4.7.2_06-11.9.1 xen-tools-4.7.2_06-11.9.1 xen-tools-debuginfo-4.7.2_06-11.9.1 References: https://www.suse.com/security/cve/CVE-2017-10912.html https://www.suse.com/security/cve/CVE-2017-10913.html https://www.suse.com/security/cve/CVE-2017-10914.html https://www.suse.com/security/cve/CVE-2017-10915.html https://www.suse.com/security/cve/CVE-2017-10917.html https://www.suse.com/security/cve/CVE-2017-10918.html https://www.suse.com/security/cve/CVE-2017-10920.html https://www.suse.com/security/cve/CVE-2017-10921.html https://www.suse.com/security/cve/CVE-2017-10922.html https://www.suse.com/security/cve/CVE-2017-8309.html https://www.suse.com/security/cve/CVE-2017-9330.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1035642 https://bugzilla.suse.com/1037243 https://bugzilla.suse.com/1042160 https://bugzilla.suse.com/1042882 https://bugzilla.suse.com/1042893 https://bugzilla.suse.com/1042915 https://bugzilla.suse.com/1042923 https://bugzilla.suse.com/1042924 https://bugzilla.suse.com/1042931 https://bugzilla.suse.com/1042938

1 0

openSUSE-SU-2017:1825-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 08 Jul '17

08 Jul '17

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1825-1 Rating: important References: #1025461 #1026570 #1031784 #1039354 #1040182 #1040941 #1043347 #1043488 #1043912 #1044854 #1044912 #1045922 #1046105 #1046434 #1046589 #1046821 Cross-References: CVE-2017-1000365 CVE-2017-7518 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has 14 fixes is now available. Description: The openSUSE Leap 42.2 kernel was updated to 4.4.74 to receive various security and bugfixes. This update fixes some long standing btrfs issues. The following security bugs were fixed: - CVE-2017-7518: A KVM debug exception in the syscall handling was fixed which might have been used for local privilege escalation. (bnc#1045922). - CVE-2017-1000365: The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_INFINITY (1/4 of the size), but did not take the argument and environment pointers into account, which allowed attackers to bypass this limitation. (bnc#1039354). The following non-security bugs were fixed: - bluetooth: hidp: fix possible might sleep error in hidp_session_thread (bsc#1031784). - btrfs: disable possible cause of premature ENOSPC (bsc#1040182) - btrfs: Manually implement device_total_bytes getter/setter (bsc#1043912). - btrfs: Round down values which are written for total_bytes_size (bsc#1043912). - drm/i915: Serialize GTT/Aperture accesses on BXT (bsc#1046821). - Fix kABI breakage by KVM CVE fix (bsc#1045922). - hpsa: limit transfer length to 1MB (bsc#1025461). - hwpoison, memcg: forcibly uncharge LRU pages (bnc#1046105). - ibmvnic: Fix assignment of RX/TX IRQ's (bsc#1046589). - iw_cxgb4: Fix error return code in c4iw_rdev_open() (bsc#1026570). - iwlwifi: 8000: fix MODULE_FIRMWARE input (FATE#321353, FATE#323335). - iwlwifi: 9000: increase the number of queues (FATE#321353, FATE#323335). - iwlwifi: add device ID for 8265 (FATE#321353, FATE#323335). - iwlwifi: add device IDs for the 8265 device (FATE#321353, FATE#323335). - iwlwifi: add disable_11ac module param (FATE#321353, FATE#323335). - iwlwifi: add new 3168 series devices support (FATE#321353, FATE#323335). - iwlwifi: add new 8260 PCI IDs (FATE#321353, FATE#323335). - iwlwifi: add new 8265 (FATE#321353, FATE#323335). - iwlwifi: add new 8265 series PCI ID (FATE#321353, FATE#323335). - iwlwifi: Add new PCI IDs for 9260 and 5165 series (FATE#321353, FATE#323335). - iwlwifi: Add PCI IDs for the new 3168 series (FATE#321353, FATE#323335). - iwlwifi: Add PCI IDs for the new series 8165 (FATE#321353, FATE#323335). - iwlwifi: add support for 12K Receive Buffers (FATE#321353, FATE#323335). - iwlwifi: add support for getting HW address from CSR (FATE#321353, FATE#323335). - iwlwifi: avoid d0i3 commands when no/init ucode is loaded (FATE#321353, FATE#323335). - iwlwifi: bail out in case of bad trans state (FATE#321353, FATE#323335). - iwlwifi: block the queues when we send ADD_STA for uAPSD (FATE#321353, FATE#323335). - iwlwifi: change the Intel Wireless email address (FATE#321353, FATE#323335). - iwlwifi: change the Intel Wireless email address (FATE#321353, FATE#323335). - iwlwifi: check for valid ethernet address provided by OEM (FATE#321353, FATE#323335). - iwlwifi: clean up transport debugfs handling (FATE#321353, FATE#323335). - iwlwifi: clear ieee80211_tx_info->driver_data in the op_mode (FATE#321353, FATE#323335). - iwlwifi: Document missing module options (FATE#321353, FATE#323335). - iwlwifi: dump prph registers in a common place for all transports (FATE#321353, FATE#323335). - iwlwifi: dvm: advertise NETIF_F_SG (FATE#321353, FATE#323335). - iwlwifi: dvm: fix compare_const_fl.cocci warnings (FATE#321353, FATE#323335). - iwlwifi: dvm: handle zero brightness for wifi LED (FATE#321353, FATE#323335). - iwlwifi: dvm: remove a wrong dependency on m (FATE#321353, FATE#323335). - iwlwifi: dvm: remove Kconfig default (FATE#321353, FATE#323335). - iwlwifi: dvm: remove stray debug code (FATE#321353, FATE#323335). - iwlwifi: export the _no_grab version of PRPH IO functions (FATE#321353, FATE#323335). - iwlwifi: expose fw usniffer mode to more utilities (FATE#321353, FATE#323335). - iwlwifi: fix double hyphen in MODULE_FIRMWARE for 8000 (FATE#321353, FATE#323335). - iwlwifi: Fix firmware name maximum length definition (FATE#321353, FATE#323335). - iwlwifi: fix name of ucode loaded for 8265 series (FATE#321353, FATE#323335). - iwlwifi: fix printf specifier (FATE#321353, FATE#323335). - iwlwifi: generalize d0i3_entry_timeout module parameter (FATE#321353, FATE#323335). - iwlwifi: mvm: adapt the firmware assert log to new firmware (FATE#321353, FATE#323335). - iwlwifi: mvm: add 9000-series RX API (FATE#321353, FATE#323335). - iwlwifi: mvm: add 9000 series RX processing (FATE#321353, FATE#323335). - iwlwifi: mvm: add a non-trigger window to fw dbg triggers (FATE#321353, FATE#323335). - iwlwifi: mvm: add an option to start rs from HT/VHT rates (FATE#321353, FATE#323335). - iwlwifi: mvm: Add a station in monitor mode (FATE#321353, FATE#323335). - iwlwifi: mvm: add bt rrc and ttc to debugfs (FATE#321353, FATE#323335). - iwlwifi: mvm: add bt settings to debugfs (FATE#321353, FATE#323335). - iwlwifi: mvm: add ctdp operations to debugfs (FATE#321353, FATE#323335). - iwlwifi: mvm: add CT-KILL notification (FATE#321353, FATE#323335). - iwlwifi: mvm: add debug print if scan config is ignored (FATE#321353, FATE#323335). - iwlwifi: mvm: add extended dwell time (FATE#321353, FATE#323335). - iwlwifi: mvm: add new ADD_STA command version (FATE#321353, FATE#323335). - iwlwifi: mvm: Add P2P client snoozing (FATE#321353, FATE#323335). - iwlwifi: mvm: add registration to cooling device (FATE#321353, FATE#323335). - iwlwifi: mvm: add registration to thermal zone (FATE#321353, FATE#323335). - iwlwifi: mvm: add support for negative temperatures (FATE#321353, FATE#323335). - iwlwifi: mvm: add tlv for multi queue rx support (FATE#321353, FATE#323335). - iwlwifi: mvm: add trigger for firmware dump upon TDLS events (FATE#321353, FATE#323335). - iwlwifi: mvm: add trigger for firmware dump upon TX response status (FATE#321353, FATE#323335). - iwlwifi: mvm: advertise NETIF_F_SG (FATE#321353, FATE#323335). - iwlwifi: mvm: Align bt-coex priority with requirements (FATE#321353, FATE#323335). - iwlwifi: mvm: allow to disable beacon filtering for AP/GO interface (FATE#321353, FATE#323335). - iwlwifi: mvm: avoid harmless -Wmaybe-uninialized warning (FATE#321353, FATE#323335). - iwlwifi: mvm: avoid panics with thermal device usage (FATE#321353, FATE#323335). - iwlwifi: mvm: avoid to WARN about gscan capabilities (FATE#321353, FATE#323335). - iwlwifi: mvm: bail out if CTDP start operation fails (FATE#321353, FATE#323335). - iwlwifi: mvm: bump firmware API to 21 (FATE#321353, FATE#323335). - iwlwifi: mvm: bump max API to 20 (FATE#321353, FATE#323335). - iwlwifi: mvm: change access to ieee80211_hdr (FATE#321353, FATE#323335). - iwlwifi: mvm: change iwl_mvm_get_key_sta_id() to return the station (FATE#321353, FATE#323335). - iwlwifi: mvm: change mcc update API (FATE#321353, FATE#323335). - iwlwifi: mvm: change name of iwl_mvm_d3_update_gtk (FATE#321353, FATE#323335). - iwlwifi: mvm: Change number of associated stations when station becomes associated (FATE#321353, FATE#323335). - iwlwifi: mvm: change protocol offload flows (FATE#321353, FATE#323335). - iwlwifi: mvm: change the check for ADD_STA status (FATE#321353, FATE#323335). - iwlwifi: mvm: check FW's response for nvm access write cmd (FATE#321353, FATE#323335). - iwlwifi: mvm: check iwl_mvm_wowlan_config_key_params() return value (FATE#321353, FATE#323335). - iwlwifi: mvm: check minimum temperature notification length (FATE#321353, FATE#323335). - iwlwifi: mvm: cleanup roc te on restart cleanup (FATE#321353, FATE#323335). - iwlwifi: mvm: Configure fragmented scan for scheduled scan (FATE#321353, FATE#323335). - iwlwifi: mvm: configure scheduled scan according to traffic conditions (FATE#321353, FATE#323335). - iwlwifi: mvm: constify the parameters of a few functions in fw-dbg.c (FATE#321353, FATE#323335). - iwlwifi: mvm: Disable beacon storing in D3 when WOWLAN configured (FATE#321353, FATE#323335). - iwlwifi: mvm: disable DQA support (FATE#321353, FATE#323335). - iwlwifi: mvm: do not ask beacons when P2P GO vif and no assoc sta (FATE#321353, FATE#323335). - iwlwifi: mvm: do not keep an mvm ref when the interface is down (FATE#321353, FATE#323335). - iwlwifi: mvm: do not let NDPs mess the packet tracking (FATE#321353, FATE#323335). - iwlwifi: mvm: do not restart HW if suspend fails with unified image (FATE#321353, FATE#323335). - iwlwifi: mvm: Do not switch to D3 image on suspend (FATE#321353, FATE#323335). - iwlwifi: mvm: do not try to offload AES-CMAC in AP/IBSS modes (FATE#321353, FATE#323335). - iwlwifi: mvm: drop low_latency_agg_frame_cnt_limit (FATE#321353, FATE#323335). - iwlwifi: mvm: dump more registers upon error (FATE#321353, FATE#323335). - iwlwifi: mvm: dump the radio registers when the firmware crashes (FATE#321353, FATE#323335). - iwlwifi: mvm: enable L3 filtering (FATE#321353, FATE#323335). - iwlwifi: mvm: Enable MPLUT only on supported hw (FATE#321353, FATE#323335). - iwlwifi: mvm: enable VHT MU-MIMO for supported hardware (FATE#321353, FATE#323335). - iwlwifi: mvm: extend time event duration (FATE#321353, FATE#323335). - iwlwifi: mvm: fix accessing Null pointer during fw dump collection (FATE#321353, FATE#323335). - iwlwifi: mvm: fix d3_test with unified D0/D3 images (FATE#321353, FATE#323335). - iwlwifi: mvm: fix debugfs signedness warning (FATE#321353, FATE#323335). - iwlwifi: mvm: fix extended dwell time (FATE#321353, FATE#323335). - iwlwifi: mvm: fix incorrect fallthrough in iwl_mvm_check_running_scans() (FATE#321353, FATE#323335). - iwlwifi: mvm: fix memory leaks in error paths upon fw error dump (FATE#321353, FATE#323335). - iwlwifi: mvm: fix netdetect starting/stopping for unified images (FATE#321353, FATE#323335). - iwlwifi: mvm: fix RSS key sizing (FATE#321353, FATE#323335). - iwlwifi: mvm: fix unregistration of thermal in some error flows (FATE#321353, FATE#323335). - iwlwifi: mvm: flush all used TX queues before suspending (FATE#321353, FATE#323335). - iwlwifi: mvm: forbid U-APSD for P2P Client if the firmware does not support it (FATE#321353, FATE#323335). - iwlwifi: mvm: handle pass all scan reporting (FATE#321353, FATE#323335). - iwlwifi: mvm: ignore LMAC scan notifications when running UMAC scans (FATE#321353, FATE#323335). - iwlwifi: mvm: infrastructure for frame-release message (FATE#321353, FATE#323335). - iwlwifi: mvm: kill iwl_mvm_enable_agg_txq (FATE#321353, FATE#323335). - iwlwifi: mvm: let the firmware choose the antenna for beacons (FATE#321353, FATE#323335). - iwlwifi: mvm: make collecting fw debug data optional (FATE#321353, FATE#323335). - iwlwifi: mvm: move fw-dbg code to separate file (FATE#321353, FATE#323335). - iwlwifi: mvm: only release the trans ref if d0i3 is supported in fw (FATE#321353, FATE#323335). - iwlwifi: mvm: prepare the code towards TSO implementation (FATE#321353, FATE#323335). - iwlwifi: mvm: refactor d3 key update functions (FATE#321353, FATE#323335). - iwlwifi: mvm: refactor the way fw_key_table is handled (FATE#321353, FATE#323335). - iwlwifi: mvm: remove an extra tab (FATE#321353, FATE#323335). - iwlwifi: mvm: Remove bf_vif from iwl_power_vifs (FATE#321353, FATE#323335). - iwlwifi: mvm: Remove iwl_mvm_update_beacon_abort (FATE#321353, FATE#323335). - iwlwifi: mvm: remove redundant d0i3 flag from the config struct (FATE#321353, FATE#323335). - iwlwifi: mvm: remove shadowing variable (FATE#321353, FATE#323335). - iwlwifi: mvm: remove stray nd_config element (FATE#321353, FATE#323335). - iwlwifi: mvm: remove the vif parameter of iwl_mvm_configure_bcast_filter() (FATE#321353, FATE#323335). - iwlwifi: mvm: remove unnecessary check in iwl_mvm_is_d0i3_supported() (FATE#321353, FATE#323335). - iwlwifi: mvm: remove useless WARN_ON and rely on cfg80211's combination (FATE#321353, FATE#323335). - iwlwifi: mvm: report wakeup for wowlan (FATE#321353, FATE#323335). - iwlwifi: mvm: reset mvm->scan_type when firmware is started (FATE#321353, FATE#323335). - iwlwifi: mvm: return the cooling state index instead of the budget (FATE#321353, FATE#323335). - iwlwifi: mvm: ROC: cleanup time event info on FW failure (FATE#321353, FATE#323335). - iwlwifi: mvm: ROC: Extend the ROC max delay duration & limit ROC duration (FATE#321353, FATE#323335). - iwlwifi: mvm: rs: fix a potential out of bounds access (FATE#321353, FATE#323335). - iwlwifi: mvm: rs: fix a theoretical access to uninitialized array elements (FATE#321353, FATE#323335). - iwlwifi: mvm: rs: fix a warning message (FATE#321353, FATE#323335). - iwlwifi: mvm: rs: fix TPC action decision algorithm (FATE#321353, FATE#323335). - iwlwifi: mvm: rs: fix TPC statistics handling (FATE#321353, FATE#323335). - iwlwifi: mvm: Send power command on BSS_CHANGED_BEACON_INFO if needed (FATE#321353, FATE#323335). - iwlwifi: mvm: set default new STA as non-aggregated (FATE#321353, FATE#323335). - iwlwifi: mvm: set the correct amsdu enum values (FATE#321353, FATE#323335). - iwlwifi: mvm: set the correct descriptor size for tracing (FATE#321353, FATE#323335). - iwlwifi: mvm: small update in the firmware API (FATE#321353, FATE#323335). - iwlwifi: mvm: support A-MSDU in A-MPDU (FATE#321353, FATE#323335). - iwlwifi: mvm: support beacon storing (FATE#321353, FATE#323335). - iwlwifi: mvm: support description for user triggered fw dbg collection (FATE#321353, FATE#323335). - iwlwifi: mvm: support rss queues configuration command (FATE#321353, FATE#323335). - iwlwifi: mvm: Support setting continuous recording debug mode (FATE#321353, FATE#323335). - iwlwifi: mvm: support setting minimum quota from debugfs (FATE#321353, FATE#323335). - iwlwifi: mvm: support sw queue start/stop from mvm (FATE#321353, FATE#323335). - iwlwifi: mvm: take care of padded packets (FATE#321353, FATE#323335). - iwlwifi: mvm: take the transport ref back when leaving (FATE#321353, FATE#323335). - iwlwifi: mvm: track low-latency sources separately (FATE#321353, FATE#323335). - iwlwifi: mvm: update GSCAN capabilities (FATE#321353, FATE#323335). - iwlwifi: mvm: update ucode status before stopping device (FATE#321353, FATE#323335). - iwlwifi: mvm: use build-time assertion for fw trigger ID (FATE#321353, FATE#323335). - iwlwifi: mvm: use firmware station lookup, combine code (FATE#321353, FATE#323335). - iwlwifi: mvm: various trivial cleanups (FATE#321353, FATE#323335). - iwlwifi: mvm: writing zero bytes to debugfs causes a crash (FATE#321353, FATE#323335). - iwlwifi: nvm: fix loading default NVM file (FATE#321353, FATE#323335). - iwlwifi: nvm: fix up phy section when reading it (FATE#321353, FATE#323335). - iwlwifi: pcie: add 9000 series multi queue rx DMA support (FATE#321353, FATE#323335). - iwlwifi: pcie: add infrastructure for multi-queue rx (FATE#321353, FATE#323335). - iwlwifi: pcie: add initial RTPM support for PCI (FATE#321353, FATE#323335). - iwlwifi: pcie: Add new configuration to enable MSIX (FATE#321353, FATE#323335). - iwlwifi: pcie: add pm_prepare and pm_complete ops (FATE#321353, FATE#323335). - iwlwifi: pcie: add RTPM support when wifi is enabled (FATE#321353, FATE#323335). - iwlwifi: pcie: aggregate Flow Handler configuration writes (FATE#321353, FATE#323335). - iwlwifi: pcie: allow the op_mode to block the tx queues (FATE#321353, FATE#323335). - iwlwifi: pcie: allow to pretend to have Tx CSUM for debug (FATE#321353, FATE#323335). - iwlwifi: pcie: avoid restocks inside rx loop if not emergency (FATE#321353, FATE#323335). - iwlwifi: pcie: buffer packets to avoid overflowing Tx queues (FATE#321353, FATE#323335). - iwlwifi: pcie: build an A-MSDU using TSO core (FATE#321353, FATE#323335). - iwlwifi: pcie: configure more RFH settings (FATE#321353, FATE#323335). - iwlwifi: pcie: detect and workaround invalid write ptr behavior (FATE#321353, FATE#323335). - iwlwifi: pcie: do not increment / decrement a bool (FATE#321353, FATE#323335). - iwlwifi: pcie: enable interrupts before releasing the NIC's CPU (FATE#321353, FATE#323335). - iwlwifi: pcie: enable multi-queue rx path (FATE#321353, FATE#323335). - iwlwifi: pcie: extend device reset delay (FATE#321353, FATE#323335). - iwlwifi: pcie: fine tune number of rxbs (FATE#321353, FATE#323335). - iwlwifi: pcie: fix a race in firmware loading flow (FATE#321353, FATE#323335). - iwlwifi: pcie: fix erroneous return value (FATE#321353, FATE#323335). - iwlwifi: pcie: fix global table size (FATE#321353, FATE#323335). - iwlwifi: pcie: fix identation in trans.c (FATE#321353, FATE#323335). - iwlwifi: pcie: fix RF-Kill vs. firmware load race (FATE#321353, FATE#323335). - iwlwifi: pcie: forbid RTPM on device removal (FATE#321353, FATE#323335). - iwlwifi: pcie: mark command queue lock with separate lockdep class (FATE#321353, FATE#323335). - iwlwifi: pcie: prevent skbs shadowing in iwl_trans_pcie_reclaim (FATE#321353, FATE#323335). - iwlwifi: pcie: refactor RXBs reclaiming code (FATE#321353, FATE#323335). - iwlwifi: pcie: remove ICT allocation message (FATE#321353, FATE#323335). - iwlwifi: pcie: remove pointer from debug message (FATE#321353, FATE#323335). - iwlwifi: pcie: re-organize code towards TSO (FATE#321353, FATE#323335). - iwlwifi: pcie: set RB chunk size back to 64 (FATE#321353, FATE#323335). - iwlwifi: pcie: update iwl_mpdu_desc fields (FATE#321353, FATE#323335). - iwlwifi: print index in api/capa flags parsing message (FATE#321353, FATE#323335). - iwlwifi: refactor the code that reads the MAC address from the NVM (FATE#321353, FATE#323335). - iwlwifi: remove IWL_DL_LED (FATE#321353, FATE#323335). - iwlwifi: remove unused parameter from grab_nic_access (FATE#321353, FATE#323335). - iwlwifi: replace d0i3_mode and wowlan_d0i3 with more generic variables (FATE#321353, FATE#323335). - iwlwifi: set max firmware version of 7265 to 17 (FATE#321353, FATE#323335). - iwlwifi: support ucode with d0 unified image - regular and usniffer (FATE#321353, FATE#323335). - iwlwifi: trans: make various conversion macros inlines (FATE#321353, FATE#323335). - iwlwifi: trans: support a callback for ASYNC commands (FATE#321353, FATE#323335). - iwlwifi: treat iwl_parse_nvm_data() MAC addr as little endian (FATE#321353, FATE#323335). - iwlwifi: tt: move ucode_loaded check under mutex (FATE#321353, FATE#323335). - iwlwifi: uninline iwl_trans_send_cmd (FATE#321353, FATE#323335). - iwlwifi: update host command messages to new format (FATE#321353, FATE#323335). - iwlwifi: Update PCI IDs for 8000 and 9000 series (FATE#321353, FATE#323335). - iwlwifi: update support for 3168 series firmware and NVM (FATE#321353, FATE#323335). - iwlwifi: various comments and code cleanups (FATE#321353, FATE#323335). - kabi: ignore fs_info parameter for tracepoints that didn't have it (bsc#1044912). - kabi/severities: ignore kABi changes in iwlwifi stuff itself - powerpc/ftrace: Pass the correct stack pointer for DYNAMIC_FTRACE_WITH_REGS (FATE#322421). - printk: Correctly handle preemption in console_unlock() (bsc#1046434). - printk/xen: Force printk sync mode when migrating Xen guest (bsc#1043347). - RDMA/iw_cxgb4: Always wake up waiter in c4iw_peer_abort_intr() (bsc#1026570). - smartpqi: limit transfer length to 1MB (bsc#1025461). - tty: Destroy ldisc instance on hangup (bnc#1043488). - tty: Fix ldisc crash on reopened tty (bnc#1043488). - tty: Handle NULL tty->ldisc (bnc#1043488). - tty: Move tty_ldisc_kill() (bnc#1043488). - tty: Prepare for destroying line discipline on hangup (bnc#1043488). - tty: Refactor tty_ldisc_reinit() for reuse (bnc#1043488). - tty: Reset c_line from driver's init_termios (bnc#1043488). - tty: Simplify tty_set_ldisc() exit handling (bnc#1043488). - tty: Use 'disc' for line discipline index name (bnc#1043488). - Update config files: add CONFIG_IWLWIFI_PCIE_RTPM=y (FATE#323335) - Update patches.fixes/nfs-svc-rdma.fix (bsc#1044854). Fix bsc reference - Update patches.fixes/xfs-split-default-quota-limits-by-quota-type.patch (bsc#1040941). Fix the bug nr used. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-798=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): kernel-devel-4.4.74-18.20.1 kernel-docs-4.4.74-18.20.3 kernel-docs-html-4.4.74-18.20.3 kernel-docs-pdf-4.4.74-18.20.3 kernel-macros-4.4.74-18.20.1 kernel-source-4.4.74-18.20.1 kernel-source-vanilla-4.4.74-18.20.1 - openSUSE Leap 42.2 (x86_64): kernel-debug-4.4.74-18.20.1 kernel-debug-base-4.4.74-18.20.1 kernel-debug-base-debuginfo-4.4.74-18.20.1 kernel-debug-debuginfo-4.4.74-18.20.1 kernel-debug-debugsource-4.4.74-18.20.1 kernel-debug-devel-4.4.74-18.20.1 kernel-debug-devel-debuginfo-4.4.74-18.20.1 kernel-default-4.4.74-18.20.1 kernel-default-base-4.4.74-18.20.1 kernel-default-base-debuginfo-4.4.74-18.20.1 kernel-default-debuginfo-4.4.74-18.20.1 kernel-default-debugsource-4.4.74-18.20.1 kernel-default-devel-4.4.74-18.20.1 kernel-obs-build-4.4.74-18.20.1 kernel-obs-build-debugsource-4.4.74-18.20.1 kernel-obs-qa-4.4.74-18.20.1 kernel-syms-4.4.74-18.20.1 kernel-vanilla-4.4.74-18.20.1 kernel-vanilla-base-4.4.74-18.20.1 kernel-vanilla-base-debuginfo-4.4.74-18.20.1 kernel-vanilla-debuginfo-4.4.74-18.20.1 kernel-vanilla-debugsource-4.4.74-18.20.1 kernel-vanilla-devel-4.4.74-18.20.1 References: https://www.suse.com/security/cve/CVE-2017-1000365.html https://www.suse.com/security/cve/CVE-2017-7518.html https://bugzilla.suse.com/1025461 https://bugzilla.suse.com/1026570 https://bugzilla.suse.com/1031784 https://bugzilla.suse.com/1039354 https://bugzilla.suse.com/1040182 https://bugzilla.suse.com/1040941 https://bugzilla.suse.com/1043347 https://bugzilla.suse.com/1043488 https://bugzilla.suse.com/1043912 https://bugzilla.suse.com/1044854 https://bugzilla.suse.com/1044912 https://bugzilla.suse.com/1045922 https://bugzilla.suse.com/1046105 https://bugzilla.suse.com/1046434 https://bugzilla.suse.com/1046589 https://bugzilla.suse.com/1046821

1 0

openSUSE-SU-2017:1824-1: moderate: Security update for irssi
by opensuse-security＠opensuse.org 08 Jul '17

08 Jul '17

openSUSE Security Update: Security update for irssi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1824-1 Rating: moderate References: #1047709 Cross-References: CVE-2017-10965 CVE-2017-10966 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for irssi to version fixes the following issues: - CVE-2017-10965: A malicious server could cause irssi to crash by providing an invalid timestamp - CVE-2017-10966: Undefined behavior may be triggered when irssi updates the internal nick list A number of minor upstream bug fixes are also included. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-797=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): irssi-1.0.4-28.1 irssi-devel-1.0.4-28.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le x86_64): irssi-debuginfo-1.0.4-28.1 irssi-debugsource-1.0.4-28.1 References: https://www.suse.com/security/cve/CVE-2017-10965.html https://www.suse.com/security/cve/CVE-2017-10966.html https://bugzilla.suse.com/1047709

1 0

openSUSE-SU-2017:1823-1: moderate: Security update for irssi
by opensuse-security＠opensuse.org 08 Jul '17

08 Jul '17

openSUSE Security Update: Security update for irssi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1823-1 Rating: moderate References: #1047709 Cross-References: CVE-2017-10965 CVE-2017-10966 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for irssi to version fixes the following issues: - CVE-2017-10965: A malicious server could cause irssi to crash by providing an invalid timestamp - CVE-2017-10966: Undefined behavior may be triggered when irssi updates the internal nick list A number of minor upstream bug fixes are also included. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-797=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): irssi-1.0.4-14.10.1 irssi-debuginfo-1.0.4-14.10.1 irssi-debugsource-1.0.4-14.10.1 irssi-devel-1.0.4-14.10.1 References: https://www.suse.com/security/cve/CVE-2017-10965.html https://www.suse.com/security/cve/CVE-2017-10966.html https://bugzilla.suse.com/1047709

1 0

openSUSE-SU-2017:1822-1: moderate: Security update for libgcrypt
by opensuse-security＠opensuse.org 08 Jul '17

08 Jul '17

openSUSE Security Update: Security update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1822-1 Rating: moderate References: #1046607 Cross-References: CVE-2017-7526 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libgcrypt fixes the following issues: - CVE-2017-7526: Hardening against a local side-channel attack in RSA key handling has been added (bsc#1046607) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-796=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libgcrypt-cavs-1.6.1-34.6.1 libgcrypt-cavs-debuginfo-1.6.1-34.6.1 libgcrypt-debugsource-1.6.1-34.6.1 libgcrypt-devel-1.6.1-34.6.1 libgcrypt-devel-debuginfo-1.6.1-34.6.1 libgcrypt20-1.6.1-34.6.1 libgcrypt20-debuginfo-1.6.1-34.6.1 libgcrypt20-hmac-1.6.1-34.6.1 - openSUSE Leap 42.2 (x86_64): libgcrypt-devel-32bit-1.6.1-34.6.1 libgcrypt-devel-debuginfo-32bit-1.6.1-34.6.1 libgcrypt20-32bit-1.6.1-34.6.1 libgcrypt20-debuginfo-32bit-1.6.1-34.6.1 libgcrypt20-hmac-32bit-1.6.1-34.6.1 References: https://www.suse.com/security/cve/CVE-2017-7526.html https://bugzilla.suse.com/1046607

1 0

openSUSE-OU-2017:1818-1: Initial update for python-cached-property
by maintenance＠opensuse.org 07 Jul '17

07 Jul '17

openSUSE Optional Update: Initial update for python-cached-property ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:1818-1 Rating: low References: #1047468 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: Python-cached-property is a decorator for caching properties in classes. It makes caching of time or computational expensive properties quick and easy. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-795=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): python-cached-property-1.3.0-2.1 References: https://bugzilla.suse.com/1047468

1 0

openSUSE-RU-2017:1814-1: moderate: Recommended update for enigmail
by maintenance＠opensuse.org 07 Jul '17

07 Jul '17

openSUSE Recommended Update: Recommended update for enigmail ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1814-1 Rating: moderate References: #1047252 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for enigmail to version 1.9.8 fixes the following issues: - enigmail may have blocked in the mail sending process (boo#1047252) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-794=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): enigmail-1.9.8-2.6.1 References: https://bugzilla.suse.com/1047252

1 0

openSUSE-SU-2017:1811-1: moderate: Security update for vim
by opensuse-security＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Security Update: Security update for vim ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1811-1 Rating: moderate References: #1018870 #1024724 #1027053 #1027057 Cross-References: CVE-2017-5953 CVE-2017-6349 CVE-2017-6350 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for vim fixes the following issues: Security issues fixed: - CVE-2017-5953: Fixed a possible overflow with corrupted spell file (bsc#1024724) - CVE-2017-6350: Fixed a possible overflow when reading a corrupted undo file (bsc#1027053) - CVE-2017-6349: Fixed a possible overflow when reading a corrupted undo file (bsc#1027057) Non security issues fixed: - Speed up YAML syntax highlighting (bsc#1018870) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-788=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gvim-7.4.326-10.3.1 gvim-debuginfo-7.4.326-10.3.1 vim-7.4.326-10.3.1 vim-debuginfo-7.4.326-10.3.1 vim-debugsource-7.4.326-10.3.1 - openSUSE Leap 42.2 (noarch): vim-data-7.4.326-10.3.1 References: https://www.suse.com/security/cve/CVE-2017-5953.html https://www.suse.com/security/cve/CVE-2017-6349.html https://www.suse.com/security/cve/CVE-2017-6350.html https://bugzilla.suse.com/1018870 https://bugzilla.suse.com/1024724 https://bugzilla.suse.com/1027053 https://bugzilla.suse.com/1027057

1 0

openSUSE-SU-2017:1810-1: moderate: Security update for libxml2
by opensuse-security＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1810-1 Rating: moderate References: #1044887 #1044894 Cross-References: CVE-2017-7375 CVE-2017-7376 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libxml2 fixes the following issues: Security issues fixed: * CVE-2017-7376: Increase buffer space for port in HTTP redirect support (bsc#1044887) * CVE-2017-7375: Prevent unwanted external entity reference (bsc#1044894) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-793=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libxml2-2-2.9.4-5.10.1 libxml2-2-debuginfo-2.9.4-5.10.1 libxml2-debugsource-2.9.4-5.10.1 libxml2-devel-2.9.4-5.10.1 libxml2-tools-2.9.4-5.10.1 libxml2-tools-debuginfo-2.9.4-5.10.1 python-libxml2-2.9.4-5.10.1 python-libxml2-debuginfo-2.9.4-5.10.1 python-libxml2-debugsource-2.9.4-5.10.1 - openSUSE Leap 42.2 (x86_64): libxml2-2-32bit-2.9.4-5.10.1 libxml2-2-debuginfo-32bit-2.9.4-5.10.1 libxml2-devel-32bit-2.9.4-5.10.1 - openSUSE Leap 42.2 (noarch): libxml2-doc-2.9.4-5.10.1 References: https://www.suse.com/security/cve/CVE-2017-7375.html https://www.suse.com/security/cve/CVE-2017-7376.html https://bugzilla.suse.com/1044887 https://bugzilla.suse.com/1044894

1 0

openSUSE-SU-2017:1809-1: important: Security update for bind
by opensuse-security＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1809-1 Rating: important References: #1046554 #1046555 Cross-References: CVE-2017-3142 CVE-2017-3143 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for bind fixes the following issues: - An attacker with the ability to send and receive messages to an authoritative DNS server was able to circumvent TSIG authentication of AXFR requests. A server that relied solely on TSIG keys for protection could be manipulated into (1) providing an AXFR of a zone to an unauthorized recipient and (2) accepting bogus Notify packets. [bsc#1046554, CVE-2017-3142] - An attacker who with the ability to send and receive messages to an authoritative DNS server and who had knowledge of a valid TSIG key name for the zone and service being targeted was able to manipulate BIND into accepting an unauthorized dynamic update. [bsc#1046555, CVE-2017-3143] This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-783=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): bind-9.9.9P1-48.6.1 bind-chrootenv-9.9.9P1-48.6.1 bind-debuginfo-9.9.9P1-48.6.1 bind-debugsource-9.9.9P1-48.6.1 bind-devel-9.9.9P1-48.6.1 bind-libs-9.9.9P1-48.6.1 bind-libs-debuginfo-9.9.9P1-48.6.1 bind-lwresd-9.9.9P1-48.6.1 bind-lwresd-debuginfo-9.9.9P1-48.6.1 bind-utils-9.9.9P1-48.6.1 bind-utils-debuginfo-9.9.9P1-48.6.1 - openSUSE Leap 42.2 (x86_64): bind-libs-32bit-9.9.9P1-48.6.1 bind-libs-debuginfo-32bit-9.9.9P1-48.6.1 - openSUSE Leap 42.2 (noarch): bind-doc-9.9.9P1-48.6.1 References: https://www.suse.com/security/cve/CVE-2017-3142.html https://www.suse.com/security/cve/CVE-2017-3143.html https://bugzilla.suse.com/1046554 https://bugzilla.suse.com/1046555

1 0

openSUSE-RU-2017:1808-1: Recommended update for dirmngr
by maintenance＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Recommended Update: Recommended update for dirmngr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1808-1 Rating: low References: #1045943 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dirmngr provides the following fix: - Change logrotate from Requires to Recommends (bsc#1045943) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-792=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dirmngr-1.1.1-16.3.1 dirmngr-debuginfo-1.1.1-16.3.1 dirmngr-debugsource-1.1.1-16.3.1 - openSUSE Leap 42.2 (noarch): dirmngr-lang-1.1.1-16.3.1 References: https://bugzilla.suse.com/1045943

1 0

openSUSE-SU-2017:1807-1: moderate: Security update for dovecot22
by opensuse-security＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Security Update: Security update for dovecot22 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1807-1 Rating: moderate References: #1032248 #854512 #932386 Cross-References: CVE-2017-2669 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for dovecot22 to version 2.2.30.2 fixes the following issues: This security issue was fixed: - CVE-2017-2669: Don't double-expand %variables in keys. If dict was used as the authentication passdb, using specially crafted %variables in the username could be used to cause DoS (bsc#1032248) Additionally stronger SSL default ciphers are now used. This non-security issue was fixed: - Remove all references /etc/ssl/certs/. It should not be used anymore (bsc#932386) The version 2.2.30.2 also includes many fixes and enhancements: - Multiple failed authentications within short time caused crashes. - Use timing safe comparisons for everything related to passwords. - Master process now sends SIGQUIT to all running children at shutdown, which instructs them to close all the socket listeners immediately. Restarting Dovecot should no longer fail due to some processes keeping the listeners open for a long time. - Add passdb { mechanisms=none } to match separate passdb lookup. - Add passdb { username_filter } to use passdb only if user matches the filter. - Add dsync_commit_msgs_interval setting. It attempts to commit the transaction after saving this many new messages. - Support imapc_features=search without ESEARCH extension. - Add imapc_features=fetch-bodystructure to pass through remote server's FETCH BODY and BODYSTRUCTURE. - Add quota=imapc backend to use GETQUOTA/GETQUOTAROOT on the remote server. - Add allow_invalid_cert and ssl_ca_file parameters. - If dovecot.index.cache corruption is detected, reset only the one corrupted mail instead of the whole file. - Add "firstsaved" field to doveadm mailbox status. - Add old host's up/down and vhost count as parameters to director_flush_socket. - More fixes to automatically fix corruption in dovecot.list.index. - Fix support for dsync_features=empty-header-workaround. - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't enabled modseq tracking via CONDSTORE/QRESYNC. - Fix fts-lucene it to work again with mbox format. - Some internal error messages may have contained garbage in v2.2.29. - Re-encrypt when copying/moving mails and per-mailbox keys are used, otherwise the copied mails can't be opened. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-787=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dovecot22-2.2.30.2-5.4.1 dovecot22-backend-mysql-2.2.30.2-5.4.1 dovecot22-backend-mysql-debuginfo-2.2.30.2-5.4.1 dovecot22-backend-pgsql-2.2.30.2-5.4.1 dovecot22-backend-pgsql-debuginfo-2.2.30.2-5.4.1 dovecot22-backend-sqlite-2.2.30.2-5.4.1 dovecot22-backend-sqlite-debuginfo-2.2.30.2-5.4.1 dovecot22-debuginfo-2.2.30.2-5.4.1 dovecot22-debugsource-2.2.30.2-5.4.1 dovecot22-devel-2.2.30.2-5.4.1 dovecot22-fts-2.2.30.2-5.4.1 dovecot22-fts-debuginfo-2.2.30.2-5.4.1 dovecot22-fts-lucene-2.2.30.2-5.4.1 dovecot22-fts-lucene-debuginfo-2.2.30.2-5.4.1 dovecot22-fts-solr-2.2.30.2-5.4.1 dovecot22-fts-solr-debuginfo-2.2.30.2-5.4.1 dovecot22-fts-squat-2.2.30.2-5.4.1 dovecot22-fts-squat-debuginfo-2.2.30.2-5.4.1 References: https://www.suse.com/security/cve/CVE-2017-2669.html https://bugzilla.suse.com/1032248 https://bugzilla.suse.com/854512 https://bugzilla.suse.com/932386

1 0

openSUSE-SU-2017:1806-1: moderate: Security update for libquicktime
by opensuse-security＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Security Update: Security update for libquicktime ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1806-1 Rating: moderate References: #1044000 #1044002 #1044006 #1044008 #1044009 #1044077 #1044122 Cross-References: CVE-2017-9122 CVE-2017-9123 CVE-2017-9124 CVE-2017-9125 CVE-2017-9126 CVE-2017-9127 CVE-2017-9128 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for libquicktime fixes the following issues: * CVE-2017-9122: A DoS in quicktime_read_moov function in moov.c via acrafted mp4 file was fixed. (boo#1044077) * CVE-2017-9123: An invalid memory read in lqt_frame_duration via a crafted mp4 file was fixed. (boo#1044009) * CVE-2017-9124: A NULL pointer dereference in quicktime_match_32 via a crafted mp4 file was fixed. (boo#1044008) * CVE-2017-9125: A DoS in lqt_frame_duration function in lqt_quicktime.c via crafted mp4 file was fixed. (boo#1044122) * CVE-2017-9126: A heap-based buffer overflow in quicktime_read_dref_table via a crafted mp4 file was fixed. (boo#1044006) * CVE-2017-9127: A heap-based buffer overflow in quicktime_user_atoms_read_atom via a crafted mp4 file was fixed. (boo#1044002) * CVE-2017-9128: A heap-based buffer over-read in quicktime_video_width via a crafted mp4 file was fixed. (boo#1044000) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-785=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libquicktime-debugsource-1.2.4cvs20150223-8.3.1 libquicktime-devel-1.2.4cvs20150223-8.3.1 libquicktime-tools-1.2.4cvs20150223-8.3.1 libquicktime-tools-debuginfo-1.2.4cvs20150223-8.3.1 libquicktime0-1.2.4cvs20150223-8.3.1 libquicktime0-debuginfo-1.2.4cvs20150223-8.3.1 - openSUSE Leap 42.2 (x86_64): libquicktime0-32bit-1.2.4cvs20150223-8.3.1 libquicktime0-debuginfo-32bit-1.2.4cvs20150223-8.3.1 References: https://www.suse.com/security/cve/CVE-2017-9122.html https://www.suse.com/security/cve/CVE-2017-9123.html https://www.suse.com/security/cve/CVE-2017-9124.html https://www.suse.com/security/cve/CVE-2017-9125.html https://www.suse.com/security/cve/CVE-2017-9126.html https://www.suse.com/security/cve/CVE-2017-9127.html https://www.suse.com/security/cve/CVE-2017-9128.html https://bugzilla.suse.com/1044000 https://bugzilla.suse.com/1044002 https://bugzilla.suse.com/1044006 https://bugzilla.suse.com/1044008 https://bugzilla.suse.com/1044009 https://bugzilla.suse.com/1044077 https://bugzilla.suse.com/1044122

1 0

openSUSE-RU-2017:1805-1: Recommended update for apache-commons-daemon
by maintenance＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Recommended Update: Recommended update for apache-commons-daemon ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1805-1 Rating: low References: #716139 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apache-commons-daemon provides the following fix: - Corrected error creating and using temporary files (bsc#716139) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-782=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache-commons-daemon-1.0.15-13.3.1 apache-commons-daemon-debugsource-1.0.15-13.3.1 apache-commons-daemon-jsvc-1.0.15-13.3.1 apache-commons-daemon-jsvc-debuginfo-1.0.15-13.3.1 - openSUSE Leap 42.2 (noarch): apache-commons-daemon-javadoc-1.0.15-13.3.1 References: https://bugzilla.suse.com/716139

1 0

openSUSE-RU-2017:1804-1: Recommended update for OpenIPMI
by maintenance＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Recommended Update: Recommended update for OpenIPMI ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1804-1 Rating: low References: #1046174 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for OpenIPMI provides the following fix: - Fix pthread requirements in OpenIPMIpthread pkg-config settings. (bsc#1046174) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-791=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): OpenIPMI-2.0.21-7.3.1 OpenIPMI-debuginfo-2.0.21-7.3.1 OpenIPMI-debugsource-2.0.21-7.3.1 OpenIPMI-devel-2.0.21-7.3.1 OpenIPMI-python-2.0.21-7.3.1 OpenIPMI-python-debuginfo-2.0.21-7.3.1 References: https://bugzilla.suse.com/1046174

1 0

openSUSE-SU-2017:1803-1: moderate: Security update for apache2
by opensuse-security＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1803-1 Rating: moderate References: #1035829 #1041830 #1045060 #1045062 #1045065 Cross-References: CVE-2017-3167 CVE-2017-3169 CVE-2017-7679 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: This update for apache2 provides the following fixes: Security issues fixed: - CVE-2017-3167: In Apache use of httpd ap_get_basic_auth_pw() outside of the authentication phase could lead to authentication requirements bypass (bsc#1045065) - CVE-2017-3169: In mod_ssl may have a dereference NULL pointer issue which could lead to denial of service (bsc#1045062) - CVE-2017-7679: In mod_mime can buffer over-read by 1 byte, potentially leading to a crash or information disclosure (bsc#1045060) Non-Security issues fixed: - Remove /usr/bin/http2 symlink only during apache2 package uninstall, not upgrade. (bsc#1041830) - In gensslcert, use hostname when fqdn is too long. (bsc#1035829) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-786=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-2.4.23-8.6.1 apache2-debuginfo-2.4.23-8.6.1 apache2-debugsource-2.4.23-8.6.1 apache2-devel-2.4.23-8.6.1 apache2-event-2.4.23-8.6.1 apache2-event-debuginfo-2.4.23-8.6.1 apache2-example-pages-2.4.23-8.6.1 apache2-prefork-2.4.23-8.6.1 apache2-prefork-debuginfo-2.4.23-8.6.1 apache2-utils-2.4.23-8.6.1 apache2-utils-debuginfo-2.4.23-8.6.1 apache2-worker-2.4.23-8.6.1 apache2-worker-debuginfo-2.4.23-8.6.1 - openSUSE Leap 42.2 (noarch): apache2-doc-2.4.23-8.6.1 References: https://www.suse.com/security/cve/CVE-2017-3167.html https://www.suse.com/security/cve/CVE-2017-3169.html https://www.suse.com/security/cve/CVE-2017-7679.html https://bugzilla.suse.com/1035829 https://bugzilla.suse.com/1041830 https://bugzilla.suse.com/1045060 https://bugzilla.suse.com/1045062 https://bugzilla.suse.com/1045065

1 0

openSUSE-SU-2017:1802-1: moderate: Security update for libXdmcp
by opensuse-security＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Security Update: Security update for libXdmcp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1802-1 Rating: moderate References: #1025046 Cross-References: CVE-2017-2625 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libXdmcp fixes the following issues: - CVE-2017-2625: The generation of session key in XDM using libXdmcp might have used weak entropy, making the session keys predictable (boo#1025046) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-789=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libXdmcp-debugsource-1.1.2-3.3.1 libXdmcp-devel-1.1.2-3.3.1 libXdmcp6-1.1.2-3.3.1 libXdmcp6-debuginfo-1.1.2-3.3.1 - openSUSE Leap 42.2 (x86_64): libXdmcp-devel-32bit-1.1.2-3.3.1 libXdmcp6-32bit-1.1.2-3.3.1 libXdmcp6-debuginfo-32bit-1.1.2-3.3.1 References: https://www.suse.com/security/cve/CVE-2017-2625.html https://bugzilla.suse.com/1025046

1 0

openSUSE-SU-2017:1801-1: moderate: Security update for libICE
by opensuse-security＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Security Update: Security update for libICE ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1801-1 Rating: moderate References: #1025068 Cross-References: CVE-2017-2626 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libICE fixes the following issues: - CVE-2017-2626: Creation of the ICE auth session cookies used insufficient randomness, making these cookies predictable. A more random generation method has been implemented. (boo#1025068) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-784=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libICE-debugsource-1.0.9-5.3.1 libICE-devel-1.0.9-5.3.1 libICE6-1.0.9-5.3.1 libICE6-debuginfo-1.0.9-5.3.1 - openSUSE Leap 42.2 (x86_64): libICE-devel-32bit-1.0.9-5.3.1 libICE6-32bit-1.0.9-5.3.1 libICE6-debuginfo-32bit-1.0.9-5.3.1 References: https://www.suse.com/security/cve/CVE-2017-2626.html https://bugzilla.suse.com/1025068

1 0

openSUSE-SU-2017:1800-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1800-1 Rating: moderate References: #1032155 #1035111 #1040883 #1040889 #1040891 Cross-References: CVE-2016-6294 CVE-2017-6441 CVE-2017-9224 CVE-2017-9226 CVE-2017-9227 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for php7 fixes the following security issues: - CVE-2017-9224: stack out-of-bounds read occurs in match_at() could lead to Denial of service (bsc#1040891) - CVE-2017-9226: heap out-of-bounds write orread occurs in next_state_val() could lead to Denial of service(bsc#1040889) - CVE-2017-9227: stack out-of-bounds read in mbc_enc_len() could lead to Denial of service (bsc#1040883) - CVE-2017-6441: The _zval_get_long_func_ex in Zend/zend_operators.c in PHP allowed attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted use of "declare(ticks=" in a PHP script (bsc#1032155). - CVE-2016-6294: The locale_accept_from_http function in ext/intl/locale/locale_methods.c did not properly restrict calls to the ICU uloc_acceptLanguageFromHTTP function, which allowed remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long argument (bsc#1035111). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-790=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_php7-7.0.7-14.6.1 apache2-mod_php7-debuginfo-7.0.7-14.6.1 php7-7.0.7-14.6.1 php7-bcmath-7.0.7-14.6.1 php7-bcmath-debuginfo-7.0.7-14.6.1 php7-bz2-7.0.7-14.6.1 php7-bz2-debuginfo-7.0.7-14.6.1 php7-calendar-7.0.7-14.6.1 php7-calendar-debuginfo-7.0.7-14.6.1 php7-ctype-7.0.7-14.6.1 php7-ctype-debuginfo-7.0.7-14.6.1 php7-curl-7.0.7-14.6.1 php7-curl-debuginfo-7.0.7-14.6.1 php7-dba-7.0.7-14.6.1 php7-dba-debuginfo-7.0.7-14.6.1 php7-debuginfo-7.0.7-14.6.1 php7-debugsource-7.0.7-14.6.1 php7-devel-7.0.7-14.6.1 php7-dom-7.0.7-14.6.1 php7-dom-debuginfo-7.0.7-14.6.1 php7-enchant-7.0.7-14.6.1 php7-enchant-debuginfo-7.0.7-14.6.1 php7-exif-7.0.7-14.6.1 php7-exif-debuginfo-7.0.7-14.6.1 php7-fastcgi-7.0.7-14.6.1 php7-fastcgi-debuginfo-7.0.7-14.6.1 php7-fileinfo-7.0.7-14.6.1 php7-fileinfo-debuginfo-7.0.7-14.6.1 php7-firebird-7.0.7-14.6.1 php7-firebird-debuginfo-7.0.7-14.6.1 php7-fpm-7.0.7-14.6.1 php7-fpm-debuginfo-7.0.7-14.6.1 php7-ftp-7.0.7-14.6.1 php7-ftp-debuginfo-7.0.7-14.6.1 php7-gd-7.0.7-14.6.1 php7-gd-debuginfo-7.0.7-14.6.1 php7-gettext-7.0.7-14.6.1 php7-gettext-debuginfo-7.0.7-14.6.1 php7-gmp-7.0.7-14.6.1 php7-gmp-debuginfo-7.0.7-14.6.1 php7-iconv-7.0.7-14.6.1 php7-iconv-debuginfo-7.0.7-14.6.1 php7-imap-7.0.7-14.6.1 php7-imap-debuginfo-7.0.7-14.6.1 php7-intl-7.0.7-14.6.1 php7-intl-debuginfo-7.0.7-14.6.1 php7-json-7.0.7-14.6.1 php7-json-debuginfo-7.0.7-14.6.1 php7-ldap-7.0.7-14.6.1 php7-ldap-debuginfo-7.0.7-14.6.1 php7-mbstring-7.0.7-14.6.1 php7-mbstring-debuginfo-7.0.7-14.6.1 php7-mcrypt-7.0.7-14.6.1 php7-mcrypt-debuginfo-7.0.7-14.6.1 php7-mysql-7.0.7-14.6.1 php7-mysql-debuginfo-7.0.7-14.6.1 php7-odbc-7.0.7-14.6.1 php7-odbc-debuginfo-7.0.7-14.6.1 php7-opcache-7.0.7-14.6.1 php7-opcache-debuginfo-7.0.7-14.6.1 php7-openssl-7.0.7-14.6.1 php7-openssl-debuginfo-7.0.7-14.6.1 php7-pcntl-7.0.7-14.6.1 php7-pcntl-debuginfo-7.0.7-14.6.1 php7-pdo-7.0.7-14.6.1 php7-pdo-debuginfo-7.0.7-14.6.1 php7-pgsql-7.0.7-14.6.1 php7-pgsql-debuginfo-7.0.7-14.6.1 php7-phar-7.0.7-14.6.1 php7-phar-debuginfo-7.0.7-14.6.1 php7-posix-7.0.7-14.6.1 php7-posix-debuginfo-7.0.7-14.6.1 php7-pspell-7.0.7-14.6.1 php7-pspell-debuginfo-7.0.7-14.6.1 php7-readline-7.0.7-14.6.1 php7-readline-debuginfo-7.0.7-14.6.1 php7-shmop-7.0.7-14.6.1 php7-shmop-debuginfo-7.0.7-14.6.1 php7-snmp-7.0.7-14.6.1 php7-snmp-debuginfo-7.0.7-14.6.1 php7-soap-7.0.7-14.6.1 php7-soap-debuginfo-7.0.7-14.6.1 php7-sockets-7.0.7-14.6.1 php7-sockets-debuginfo-7.0.7-14.6.1 php7-sqlite-7.0.7-14.6.1 php7-sqlite-debuginfo-7.0.7-14.6.1 php7-sysvmsg-7.0.7-14.6.1 php7-sysvmsg-debuginfo-7.0.7-14.6.1 php7-sysvsem-7.0.7-14.6.1 php7-sysvsem-debuginfo-7.0.7-14.6.1 php7-sysvshm-7.0.7-14.6.1 php7-sysvshm-debuginfo-7.0.7-14.6.1 php7-tidy-7.0.7-14.6.1 php7-tidy-debuginfo-7.0.7-14.6.1 php7-tokenizer-7.0.7-14.6.1 php7-tokenizer-debuginfo-7.0.7-14.6.1 php7-wddx-7.0.7-14.6.1 php7-wddx-debuginfo-7.0.7-14.6.1 php7-xmlreader-7.0.7-14.6.1 php7-xmlreader-debuginfo-7.0.7-14.6.1 php7-xmlrpc-7.0.7-14.6.1 php7-xmlrpc-debuginfo-7.0.7-14.6.1 php7-xmlwriter-7.0.7-14.6.1 php7-xmlwriter-debuginfo-7.0.7-14.6.1 php7-xsl-7.0.7-14.6.1 php7-xsl-debuginfo-7.0.7-14.6.1 php7-zip-7.0.7-14.6.1 php7-zip-debuginfo-7.0.7-14.6.1 php7-zlib-7.0.7-14.6.1 php7-zlib-debuginfo-7.0.7-14.6.1 - openSUSE Leap 42.2 (noarch): php7-pear-7.0.7-14.6.1 php7-pear-Archive_Tar-7.0.7-14.6.1 References: https://www.suse.com/security/cve/CVE-2016-6294.html https://www.suse.com/security/cve/CVE-2017-6441.html https://www.suse.com/security/cve/CVE-2017-9224.html https://www.suse.com/security/cve/CVE-2017-9226.html https://www.suse.com/security/cve/CVE-2017-9227.html https://bugzilla.suse.com/1032155 https://bugzilla.suse.com/1035111 https://bugzilla.suse.com/1040883 https://bugzilla.suse.com/1040889 https://bugzilla.suse.com/1040891

1 0

openSUSE-SU-2017:1798-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1798-1 Rating: moderate References: #1036985 Cross-References: CVE-2017-8350 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2017-8350: an additional fix for a denial of service memory leak in the JNG decoder was done. [boo#1036985 c13-c21] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-781=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): GraphicsMagick-1.3.25-11.12.3 GraphicsMagick-debuginfo-1.3.25-11.12.3 GraphicsMagick-debugsource-1.3.25-11.12.3 GraphicsMagick-devel-1.3.25-11.12.3 libGraphicsMagick++-Q16-12-1.3.25-11.12.3 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-11.12.3 libGraphicsMagick++-devel-1.3.25-11.12.3 libGraphicsMagick-Q16-3-1.3.25-11.12.3 libGraphicsMagick-Q16-3-debuginfo-1.3.25-11.12.3 libGraphicsMagick3-config-1.3.25-11.12.3 libGraphicsMagickWand-Q16-2-1.3.25-11.12.3 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-11.12.3 perl-GraphicsMagick-1.3.25-11.12.3 perl-GraphicsMagick-debuginfo-1.3.25-11.12.3 References: https://www.suse.com/security/cve/CVE-2017-8350.html https://bugzilla.suse.com/1036985

1 0

openSUSE-SU-2017:1797-1: important: Security update for clamav
by opensuse-security＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Security Update: Security update for clamav ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1797-1 Rating: important References: #1045490 Cross-References: CVE-2012-6706 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for clamav fixes the following security issue: - CVE-2012-6706: Fixed an arbitrary memory write in VMSF_DELTA filter in libclamunrar (bsc#1045490) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-779=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): clamav-0.99.2-16.3.1 clamav-debuginfo-0.99.2-16.3.1 clamav-debugsource-0.99.2-16.3.1 References: https://www.suse.com/security/cve/CVE-2012-6706.html https://bugzilla.suse.com/1045490

1 0

openSUSE-RU-2017:1796-1: Recommended update for clamav-database
by maintenance＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1796-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh July 3rd 2017. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-778=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201707030006-54.48.1 References:

1 0

openSUSE-RU-2017:1791-1: moderate: Recommended update for espeak-gui
by maintenance＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Recommended Update: Recommended update for espeak-gui ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1791-1 Rating: moderate References: #910900 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for espeak-gui fixes the following issues: - Espeak-gui did not use selected language to speech (bsc#910900) The following changes are included: - Add Lithuanian translation Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-775=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): espeak-gui-0.4-11.3.1 espeak-gui-lang-0.4-11.3.1 References: https://bugzilla.suse.com/910900

1 0

openSUSE-OU-2017:1789-1: moderate: Optional update for live-fat-stick
by maintenance＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Optional Update: Optional update for live-fat-stick ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:1789-1 Rating: moderate References: #1046499 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for live-fat-stick contains some improvements to create live USB media on FAT devices more reliably. - more various checks before and after writing ISO to ensure non-broken LiveUSB - check iso size as vfat does not support file larger than 4G. - Support also non-vfat partitions (e.g. ntfs) via new live-grub-stick script - fix GRUB2 installation Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-776=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): live-fat-stick-0.4.2-6.3.1 live-grub-stick-0.4.2-6.3.1 live-usb-gui-0.4.2-6.3.1 References: https://bugzilla.suse.com/1046499

1 0