July 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:1788-1: moderate: Recommended update for debootstrap
by maintenance＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Recommended Update: Recommended update for debootstrap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1788-1 Rating: moderate References: #1046623 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for debootstrap fixes the following issues: - debootstrap would fail for Ubuntu Xenial (boo#1046623) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-777=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): debootstrap-1.0.72-8.3.1 References: https://bugzilla.suse.com/1046623

1 0

openSUSE-RU-2017:1786-1: important: Recommended update for rubygem-facter
by maintenance＠opensuse.org 06 Jul '17

06 Jul '17

openSUSE Recommended Update: Recommended update for rubygem-facter ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1786-1 Rating: important References: #1040363 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rubygem-facter fixes the following issues: - VLAN tagged interfaces were not detected correctly (boo#1040363) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-774=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ruby2.1-rubygem-facter-2.4.6-8.3.1 ruby2.1-rubygem-facter-doc-2.4.6-8.3.1 ruby2.1-rubygem-facter-testsuite-2.4.6-8.3.1 rubygem-facter-2.4.6-8.3.1 References: https://bugzilla.suse.com/1040363

1 0

openSUSE-RU-2017:1782-1: moderate: Recommended update for konsole
by maintenance＠opensuse.org 05 Jul '17

05 Jul '17

openSUSE Recommended Update: Recommended update for konsole ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1782-1 Rating: moderate References: #1045914 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for konsole fixes the following issues: * konsole may not start if the initial working directory does not exist (boo#1045914, kde#381400) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-773=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): konsole-16.08.2-8.3.1 konsole-debuginfo-16.08.2-8.3.1 konsole-debugsource-16.08.2-8.3.1 konsole-part-16.08.2-8.3.1 konsole-part-debuginfo-16.08.2-8.3.1 References: https://bugzilla.suse.com/1045914

1 0

openSUSE-RU-2017:1781-1: moderate: Recommended update for konsole
by maintenance＠opensuse.org 05 Jul '17

05 Jul '17

openSUSE Recommended Update: Recommended update for konsole ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1781-1 Rating: moderate References: #1045914 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for konsole fixes the following issues: * konsole may not start if the initial working directory does not exist (boo#1045914, kde#381400) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-773=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): konsole-15.12.3-9.1 konsole-16.08.2-7.1 konsole-debuginfo-15.12.3-9.1 konsole-debugsource-15.12.3-9.1 konsole-part-15.12.3-9.1 konsole-part-16.08.2-7.1 konsole-part-debuginfo-15.12.3-9.1 References: https://bugzilla.suse.com/1045914

1 0

openSUSE-RU-2017:1780-1: moderate: Recommended update for libwacom
by maintenance＠opensuse.org 05 Jul '17

05 Jul '17

openSUSE Recommended Update: Recommended update for libwacom ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1780-1 Rating: moderate References: #1041714 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libwacom fixes the following issues: - Fix detection of certain tablets that do not have specific hardware capabilities (boo#1041714) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-771=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libwacom-data-0.15-5.3.1 libwacom-debugsource-0.15-5.3.1 libwacom-devel-0.15-5.3.1 libwacom-tools-0.15-5.3.1 libwacom-tools-debuginfo-0.15-5.3.1 libwacom2-0.15-5.3.1 libwacom2-debuginfo-0.15-5.3.1 - openSUSE Leap 42.2 (x86_64): libwacom2-32bit-0.15-5.3.1 libwacom2-debuginfo-32bit-0.15-5.3.1 References: https://bugzilla.suse.com/1041714

1 0

openSUSE-RU-2017:1779-1: moderate: Recommended update for fail2ban
by maintenance＠opensuse.org 05 Jul '17

05 Jul '17

openSUSE Recommended Update: Recommended update for fail2ban ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1779-1 Rating: moderate References: #1036928 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fail2ban fixes the following issues: Fail2Ban was updated to version 0.9.7. Additional fixes included: - Updated roundcube authentication filter - Postfix RBL: 554 & SMTP fixes boo#1036928 " fail2ban-rbl regex incorrect, takes no action as a result". Version changes on 0.9.7: * Fixed a systemd-journal handling in fail2ban-regex (gh#fail2ban/fail2ban#1657) * filter.d/sshd.conf - Fixed non-anchored part of failregex (misleading match of colon inside IPv6 address instead of `: ` in the reason-part by missing space, gh#fail2ban/fail2ban#1658) (0.10th resp. IPv6 relevant only, amend for gh#fail2ban/fail2ban#1479) * config/pathes-freebsd.conf - Fixed filenames for apache and nginx log files (gh#fail2ban/fail2ban#1667) * filter.d/exim.conf - optional part `(...)` after host-name before `[IP]` (gh#fail2ban/fail2ban#1751) - new reason "Unrouteable address" for "rejected RCPT" regex (gh#fail2ban/fail2ban#1762) - match of complex time like `D=2m42s` in regex "no MAIL in SMTP connection" (gh#fail2ban/fail2ban#1766) * filter.d/sshd.conf - new aggressive rules (gh#fail2ban/fail2ban#864): - Connection reset by peer (multi-line rule during authorization process) - No supported authentication methods available - single line and multi-line expression optimized, added optional prefixes and suffix (logged from several ssh versions), according to gh#fail2ban/fail2ban#1206; - fixed expression received disconnect auth fail (optional space after port part, gh#fail2ban/fail2ban#1652) and suffix (logged from several ssh versions), according to gh#fail2ban/fail2ban#1206; * filter.d/suhosin.conf - greedy catch-all before `<HOST>` fixed (potential vulnerability) * filter.d/cyrus-imap.conf - accept entries without login-info resp. hostname before IP address (#fail2ban/fail2ban#707) * Filter tests extended with check of all config-regexp, that contains greedy catch-all before `<HOST>`, that is hard-anchored at end or precise sub expression after `<HOST>` * New Actions: - action.d/netscaler: Block IPs on a Citrix Netscaler ADC (gh#fail2ban/fail2ban#1663) * New Filters: - filter.d/domino-smtp: IBM Domino SMTP task (gh#fail2ban/fail2ban#1603) * Introduced new log-level `MSG` (as INFO-2, equivalent to 18) - rename nagios-plugins-fail2ban to monitoring-plugins-fail2ban fail2ban version update to 0.9.6 (2016/12/10) included: Fixes: * Misleading add resp. enable of (already available) jail in database, that induced a subsequent error: last position of log file will be never retrieved (gh-795) * Fixed a distribution related bug within testReadStockJailConfForceEnabled (e.g. test-cases faults on Fedora, see gh-1353) * Fixed pythonic filters and test scripts (running via wrong python version, uses "fail2ban-python" now); * Fixed test case "testSetupInstallRoot" for not default python version (also using direct call, out of virtualenv); * Fixed ambiguous wrong recognized date pattern resp. its optional parts (see gh-1512); * FIPS compliant, use sha1 instead of md5 if it not allowed (see gh-1540) * Monit config: scripting is not supported in path (gh-1556) * `filter.d/apache-modsecurity.conf` - Fixed for newer version (one space, gh-1626), optimized: non-greedy catch-all replaced for safer match, unneeded catch-all anchoring removed, non-capturing * `filter.d/asterisk.conf` - Fixed to match different asterisk log prefix (source file: method:) * `filter.d/dovecot.conf` - Fixed failregex ignores failures through some not relevant info (gh-1623) * `filter.d/ignorecommands/apache-fakegooglebot` - Fixed error within apache-fakegooglebot, that will be called with wrong python version (gh-1506) * `filter.d/assp.conf` - Extended failregex and test cases to handle ASSP V1 and V2 (gh-1494) * `filter.d/postfix-sasl.conf` - Allow for having no trailing space after 'failed:' (gh-1497) * `filter.d/vsftpd.conf` - Optional reason part in message after FAIL LOGIN (gh-1543) * `filter.d/sendmail-reject.conf` - removed mandatory double space (if dns-host available, gh-1579) * filter.d/sshd.conf - recognized "Failed publickey for" (gh-1477); - optimized failregex to match all of "Failed any-method for ... from <HOST>" (gh-1479) - eliminated possible complex injections (on user-name resp. auth-info, see gh-1479) - optional port part after host (see gh-1533, gh-1581) New Features: * New Actions: - `action.d/npf.conf` for NPF, the latest packet filter for NetBSD * New Filters: - `filter.d/mongodb-auth.conf` for MongoDB (document-oriented NoSQL database engine) (gh-1586, gh-1606 and gh-1607) Enhancements: * DateTemplate regexp extended with the word-end boundary, additionally to word-start boundary * Introduces new command "fail2ban-python", as automatically created symlink to python executable, where fail2ban currently installed (resp. its modules are located): - allows to use the same version, fail2ban currently running, e.g. in external scripts just via replace python with fail2ban-python: ```diff -#!/usr/bin/env python +#!/usr/bin/env fail2ban-python ``` - always the same pickle protocol - the same (and also guaranteed available) fail2ban modules - simplified stand-alone install, resp. stand-alone installation possibility via setup (like gh-1487) is getting closer * Several test cases rewritten using new methods assertIn, assertNotIn * New forward compatibility method assertRaisesRegexp (normally python >= 2.7). Methods assertIn, assertNotIn, assertRaisesRegexp, assertLogged, assertNotLogged are test covered now * Jail configuration extended with new syntax to pass options to the backend (see gh-1408), examples: - `backend = systemd[journalpath=/run/log/journal/machine-1]` - `backend = systemd[journalfiles="/run/log/journal/machine-1/system.journal, /run/log/journal/machine-1/user.journal"]` - `backend = systemd[journalflags=2]` Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-772=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): SuSEfirewall2-fail2ban-0.9.7-2.3.1 fail2ban-0.9.7-2.3.1 monitoring-plugins-fail2ban-0.9.7-2.3.1 References: https://bugzilla.suse.com/1036928

1 0

openSUSE-OU-2017:1776-1: Optional update for postgresql96
by maintenance＠opensuse.org 04 Jul '17

04 Jul '17

openSUSE Optional Update: Optional update for postgresql96 ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:1776-1 Rating: low References: #1038474 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update delivers PostgreSQL 9.6.3 to openSUSE Leap 42.2, following the SUSE Linux Enterprise 12 changes. Major enhancements in PostgreSQL 9.6 include: - Parallel execution of sequential scans, joins and aggregates - Avoid scanning pages unnecessarily during vacuum freeze operations - Synchronous replication now allows multiple standby servers for increased reliability - Full-text search can now search for phrases (multiple adjacent words) - postgres_fdw now supports remote joins, sorts, UPDATEs, and DELETEs - Substantial performance improvements, especially in the area of scalability on multi-CPU-socket servers. Version 9.6 contains a number of changes that may affect compatibility with previous releases. Please refer to https://www.postgresql.org/docs/9.6/static/release-9-6.html for a comprehensive list of changes. The existing client libraries libecpg6 and libpq5 are now taken from the postgresql96 build instead of the postgresql94 build. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-769=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libecpg6-9.6.3-2.1 libecpg6-debuginfo-9.6.3-2.1 libpq5-9.6.3-2.1 libpq5-debuginfo-9.6.3-2.1 postgresql96-9.6.3-2.1 postgresql96-contrib-9.6.3-2.1 postgresql96-contrib-debuginfo-9.6.3-2.1 postgresql96-debuginfo-9.6.3-2.1 postgresql96-debugsource-9.6.3-2.1 postgresql96-devel-9.6.3-2.1 postgresql96-devel-debuginfo-9.6.3-2.1 postgresql96-libs-debugsource-9.6.3-2.1 postgresql96-plperl-9.6.3-2.1 postgresql96-plperl-debuginfo-9.6.3-2.1 postgresql96-plpython-9.6.3-2.1 postgresql96-plpython-debuginfo-9.6.3-2.1 postgresql96-pltcl-9.6.3-2.1 postgresql96-pltcl-debuginfo-9.6.3-2.1 postgresql96-server-9.6.3-2.1 postgresql96-server-debuginfo-9.6.3-2.1 postgresql96-test-9.6.3-2.1 - openSUSE Leap 42.2 (x86_64): libecpg6-32bit-9.6.3-2.1 libecpg6-debuginfo-32bit-9.6.3-2.1 libpq5-32bit-9.6.3-2.1 libpq5-debuginfo-32bit-9.6.3-2.1 - openSUSE Leap 42.2 (noarch): postgresql-init-9.6-14.3.1 postgresql96-docs-9.6.3-2.1 References: https://bugzilla.suse.com/1038474

1 0

openSUSE-SU-2017:1772-1: moderate: Security update for postgresql94
by opensuse-security＠opensuse.org 04 Jul '17

04 Jul '17

openSUSE Security Update: Security update for postgresql94 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1772-1 Rating: moderate References: #1037603 #1037624 #1038293 Cross-References: CVE-2017-7484 CVE-2017-7485 CVE-2017-7486 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for postgresql94 to 9.4.12 fixes the following issues: Upstream changelogs: - https://www.postgresql.org/docs/9.4/static/release-9-4-12.html - https://www.postgresql.org/docs/9.4/static/release-9-4-11.html - https://www.postgresql.org/docs/9.4/static/release-9-4-10.html Security issues fixed: * CVE-2017-7486: Restrict visibility of pg_user_mappings.umoptions, to protect passwords stored as user mapping options. (bsc#1037624) Please note that manual action is needed to fix this in existing databases See the upstream release notes for details. * CVE-2017-7485: recognize PGREQUIRESSL variable again. (bsc#1038293) * CVE-2017-7484: Prevent exposure of statistical information via leaky operators. (bsc#1037603) Changes in version 9.4.12: * Build corruption with CREATE INDEX CONCURRENTLY * Fixes for visibility and write-ahead-log stability Changes in version 9.4.10: * Fix WAL-logging of truncation of relation free space maps and visibility maps * Fix incorrect creation of GIN index WAL records on big-endian machines * Fix SELECT FOR UPDATE/SHARE to correctly lock tuples that have been updated by a subsequently-aborted transaction * Fix EvalPlanQual rechecks involving CTE scans * Fix improper repetition of previous results from hashed aggregation in a subquery The libraries libpq and libecpg are now supplied by postgresql 9.6. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-770=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): postgresql94-9.4.12-9.6.1 postgresql94-contrib-9.4.12-9.6.1 postgresql94-contrib-debuginfo-9.4.12-9.6.1 postgresql94-debuginfo-9.4.12-9.6.1 postgresql94-debugsource-9.4.12-9.6.1 postgresql94-devel-9.4.12-9.6.1 postgresql94-devel-debuginfo-9.4.12-9.6.1 postgresql94-libs-debugsource-9.4.12-9.6.1 postgresql94-plperl-9.4.12-9.6.1 postgresql94-plperl-debuginfo-9.4.12-9.6.1 postgresql94-plpython-9.4.12-9.6.1 postgresql94-plpython-debuginfo-9.4.12-9.6.1 postgresql94-pltcl-9.4.12-9.6.1 postgresql94-pltcl-debuginfo-9.4.12-9.6.1 postgresql94-server-9.4.12-9.6.1 postgresql94-server-debuginfo-9.4.12-9.6.1 postgresql94-test-9.4.12-9.6.1 - openSUSE Leap 42.2 (noarch): postgresql94-docs-9.4.12-9.6.1 References: https://www.suse.com/security/cve/CVE-2017-7484.html https://www.suse.com/security/cve/CVE-2017-7485.html https://www.suse.com/security/cve/CVE-2017-7486.html https://bugzilla.suse.com/1037603 https://bugzilla.suse.com/1037624 https://bugzilla.suse.com/1038293

1 0

openSUSE-OU-2017:1767-1: moderate: Recommended update for php7-APCu
by maintenance＠opensuse.org 04 Jul '17

04 Jul '17

openSUSE Optional Update: Recommended update for php7-APCu ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:1767-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update provides php7-APCu for the SUSE PackageHub. The package provides an User Cache for APC in PHP, as needed for OwnCloud. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-766=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): php7-APCu-5.1.8-2.1 References:

1 0

openSUSE-RU-2017:1766-1: moderate: Recommended update for tmux
by maintenance＠opensuse.org 04 Jul '17

04 Jul '17

openSUSE Recommended Update: Recommended update for tmux ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1766-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update provides tmux 2.5 for the SUSE PackageHub. - major (incompatible) key table changes - Support for mouse double and triple clicks. - BCE (Background Colour Erase) is now supported. - All occurrences of a search string in copy mode are now highlighted - source-file now understands glob patterns. - The configuration file now accepts %if/%endif conditional blocks - detach-client now has -E to execute a command replacing the client instead of exiting - Add support for custom command aliases - break-pane now has -n to specify the new window name. - Strikethrough support - Grouped sessions can now be named (new -t). - substantial performance improvements. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-765=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): tmux-2.5-12.1 References:

1 0

openSUSE-SU-2017:1765-1: moderate: Security update for ffmpeg
by opensuse-security＠opensuse.org 04 Jul '17

04 Jul '17

openSUSE Security Update: Security update for ffmpeg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1765-1 Rating: moderate References: #1046211 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for ffmpeg fixes the following issues: ffmpeg was updated to 2.8.12, fixing a lot of security issues. (boo#1046211) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-767=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): ffmpeg2-devel-2.8.12-15.1 libavcodec56-2.8.12-15.1 libavdevice56-2.8.12-15.1 libavfilter5-2.8.12-15.1 libavformat56-2.8.12-15.1 libavresample2-2.8.12-15.1 libavutil54-2.8.12-15.1 libpostproc53-2.8.12-15.1 libswresample1-2.8.12-15.1 libswscale3-2.8.12-15.1 References: https://bugzilla.suse.com/1046211

1 0

openSUSE-RU-2017:1764-1: Recommended update for phpMyAdmin
by maintenance＠opensuse.org 04 Jul '17

04 Jul '17

openSUSE Recommended Update: Recommended update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1764-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for phpMyAdmin version fixes the following issues: * Make theme selection keep current server * Fixed direct login for accounts without password * Fixed check for mbstring.func_overload * Fixed wrong encoding of table at triggers * Fixed natural sorting in several places * Show warning for users removed from mysql.user table * Fixed loading additional javascripts * Fixed editing QBE * Improved documentation on user settings * Gracefully handle early fatal errors in AJAX requests * Fixed Incorrect NavigationTreeEnableExpansion default value in the documentation * Fixed export of database with a lot of tables * Improved performance when importing with enabled tracking * Show only supported charsets for conversion * Fixed operation with session.auto_start enabled * Fix "Create PHP code" * Fixed links to resume timeouted import Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-768=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): phpMyAdmin-4.7.2-8.1 References:

1 0

openSUSE-SU-2017:1757-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 03 Jul '17

03 Jul '17

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1757-1 Rating: moderate References: #1035111 #1040883 #1040889 #1040891 Cross-References: CVE-2016-6294 CVE-2017-9224 CVE-2017-9226 CVE-2017-9227 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for php5 fixes the following security issues: - CVE-2016-6294: The locale_accept_from_http function in ext/intl/locale/locale_methods.c did not properly restrict calls to the ICU uloc_acceptLanguageFromHTTP function, which allowed remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long argument (bsc#1035111). - CVE-2017-9227: A stack out-of-bounds read occurs in mbc_enc_len() during regular expression searching. (bsc#1040883) - CVE-2017-9226: A heap out-of-bounds write or read occurs in next_state_val() during regular expression compilation. (bsc#1040889) - CVE-2017-9224: A stack out-of-bounds read occurs in match_at() during regular expression searching. (bsc#1040891) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-764=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_php5-5.5.14-77.6.1 apache2-mod_php5-debuginfo-5.5.14-77.6.1 php5-5.5.14-77.6.1 php5-bcmath-5.5.14-77.6.1 php5-bcmath-debuginfo-5.5.14-77.6.1 php5-bz2-5.5.14-77.6.1 php5-bz2-debuginfo-5.5.14-77.6.1 php5-calendar-5.5.14-77.6.1 php5-calendar-debuginfo-5.5.14-77.6.1 php5-ctype-5.5.14-77.6.1 php5-ctype-debuginfo-5.5.14-77.6.1 php5-curl-5.5.14-77.6.1 php5-curl-debuginfo-5.5.14-77.6.1 php5-dba-5.5.14-77.6.1 php5-dba-debuginfo-5.5.14-77.6.1 php5-debuginfo-5.5.14-77.6.1 php5-debugsource-5.5.14-77.6.1 php5-devel-5.5.14-77.6.1 php5-dom-5.5.14-77.6.1 php5-dom-debuginfo-5.5.14-77.6.1 php5-enchant-5.5.14-77.6.1 php5-enchant-debuginfo-5.5.14-77.6.1 php5-exif-5.5.14-77.6.1 php5-exif-debuginfo-5.5.14-77.6.1 php5-fastcgi-5.5.14-77.6.1 php5-fastcgi-debuginfo-5.5.14-77.6.1 php5-fileinfo-5.5.14-77.6.1 php5-fileinfo-debuginfo-5.5.14-77.6.1 php5-firebird-5.5.14-77.6.1 php5-firebird-debuginfo-5.5.14-77.6.1 php5-fpm-5.5.14-77.6.1 php5-fpm-debuginfo-5.5.14-77.6.1 php5-ftp-5.5.14-77.6.1 php5-ftp-debuginfo-5.5.14-77.6.1 php5-gd-5.5.14-77.6.1 php5-gd-debuginfo-5.5.14-77.6.1 php5-gettext-5.5.14-77.6.1 php5-gettext-debuginfo-5.5.14-77.6.1 php5-gmp-5.5.14-77.6.1 php5-gmp-debuginfo-5.5.14-77.6.1 php5-iconv-5.5.14-77.6.1 php5-iconv-debuginfo-5.5.14-77.6.1 php5-imap-5.5.14-77.6.1 php5-imap-debuginfo-5.5.14-77.6.1 php5-intl-5.5.14-77.6.1 php5-intl-debuginfo-5.5.14-77.6.1 php5-json-5.5.14-77.6.1 php5-json-debuginfo-5.5.14-77.6.1 php5-ldap-5.5.14-77.6.1 php5-ldap-debuginfo-5.5.14-77.6.1 php5-mbstring-5.5.14-77.6.1 php5-mbstring-debuginfo-5.5.14-77.6.1 php5-mcrypt-5.5.14-77.6.1 php5-mcrypt-debuginfo-5.5.14-77.6.1 php5-mssql-5.5.14-77.6.1 php5-mssql-debuginfo-5.5.14-77.6.1 php5-mysql-5.5.14-77.6.1 php5-mysql-debuginfo-5.5.14-77.6.1 php5-odbc-5.5.14-77.6.1 php5-odbc-debuginfo-5.5.14-77.6.1 php5-opcache-5.5.14-77.6.1 php5-opcache-debuginfo-5.5.14-77.6.1 php5-openssl-5.5.14-77.6.1 php5-openssl-debuginfo-5.5.14-77.6.1 php5-pcntl-5.5.14-77.6.1 php5-pcntl-debuginfo-5.5.14-77.6.1 php5-pdo-5.5.14-77.6.1 php5-pdo-debuginfo-5.5.14-77.6.1 php5-pgsql-5.5.14-77.6.1 php5-pgsql-debuginfo-5.5.14-77.6.1 php5-phar-5.5.14-77.6.1 php5-phar-debuginfo-5.5.14-77.6.1 php5-posix-5.5.14-77.6.1 php5-posix-debuginfo-5.5.14-77.6.1 php5-pspell-5.5.14-77.6.1 php5-pspell-debuginfo-5.5.14-77.6.1 php5-readline-5.5.14-77.6.1 php5-readline-debuginfo-5.5.14-77.6.1 php5-shmop-5.5.14-77.6.1 php5-shmop-debuginfo-5.5.14-77.6.1 php5-snmp-5.5.14-77.6.1 php5-snmp-debuginfo-5.5.14-77.6.1 php5-soap-5.5.14-77.6.1 php5-soap-debuginfo-5.5.14-77.6.1 php5-sockets-5.5.14-77.6.1 php5-sockets-debuginfo-5.5.14-77.6.1 php5-sqlite-5.5.14-77.6.1 php5-sqlite-debuginfo-5.5.14-77.6.1 php5-suhosin-5.5.14-77.6.1 php5-suhosin-debuginfo-5.5.14-77.6.1 php5-sysvmsg-5.5.14-77.6.1 php5-sysvmsg-debuginfo-5.5.14-77.6.1 php5-sysvsem-5.5.14-77.6.1 php5-sysvsem-debuginfo-5.5.14-77.6.1 php5-sysvshm-5.5.14-77.6.1 php5-sysvshm-debuginfo-5.5.14-77.6.1 php5-tidy-5.5.14-77.6.1 php5-tidy-debuginfo-5.5.14-77.6.1 php5-tokenizer-5.5.14-77.6.1 php5-tokenizer-debuginfo-5.5.14-77.6.1 php5-wddx-5.5.14-77.6.1 php5-wddx-debuginfo-5.5.14-77.6.1 php5-xmlreader-5.5.14-77.6.1 php5-xmlreader-debuginfo-5.5.14-77.6.1 php5-xmlrpc-5.5.14-77.6.1 php5-xmlrpc-debuginfo-5.5.14-77.6.1 php5-xmlwriter-5.5.14-77.6.1 php5-xmlwriter-debuginfo-5.5.14-77.6.1 php5-xsl-5.5.14-77.6.1 php5-xsl-debuginfo-5.5.14-77.6.1 php5-zip-5.5.14-77.6.1 php5-zip-debuginfo-5.5.14-77.6.1 php5-zlib-5.5.14-77.6.1 php5-zlib-debuginfo-5.5.14-77.6.1 - openSUSE Leap 42.2 (noarch): php5-pear-5.5.14-77.6.1 References: https://www.suse.com/security/cve/CVE-2016-6294.html https://www.suse.com/security/cve/CVE-2017-9224.html https://www.suse.com/security/cve/CVE-2017-9226.html https://www.suse.com/security/cve/CVE-2017-9227.html https://bugzilla.suse.com/1035111 https://bugzilla.suse.com/1040883 https://bugzilla.suse.com/1040889 https://bugzilla.suse.com/1040891

1 0

openSUSE-SU-2017:1756-1: moderate: Security update for kdepim, messagelib
by opensuse-security＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Security Update: Security update for kdepim, messagelib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1756-1 Rating: moderate References: #1044210 Cross-References: CVE-2017-9604 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kdepim and messagelib fixes the following issues: - CVE-2017-9604: The kmail "send later" function does not have "sign/encryption" action ensured. (boo#1044210) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-756=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): akonadi_resources-16.08.2-5.2 akonadi_resources-debuginfo-16.08.2-5.2 akregator5-16.08.2-5.2 akregator5-debuginfo-16.08.2-5.2 blogilo5-16.08.2-5.2 blogilo5-debuginfo-16.08.2-5.2 kaddressbook5-16.08.2-5.2 kaddressbook5-debuginfo-16.08.2-5.2 kalarm5-16.08.2-5.2 kalarm5-debuginfo-16.08.2-5.2 kdepim-16.08.2-5.2 kdepim-debuginfo-16.08.2-5.2 kdepim-debugsource-16.08.2-5.2 kmail5-16.08.2-5.2 kmail5-debuginfo-16.08.2-5.2 knotes5-16.08.2-5.2 knotes5-debuginfo-16.08.2-5.2 kontact5-16.08.2-5.2 kontact5-debuginfo-16.08.2-5.2 korganizer5-16.08.2-5.2 korganizer5-debuginfo-16.08.2-5.2 ktnef5-16.08.2-5.2 ktnef5-debuginfo-16.08.2-5.2 messagelib-16.08.2-5.1 messagelib-debuginfo-16.08.2-5.1 messagelib-debugsource-16.08.2-5.1 messagelib-devel-16.08.2-5.1 References: https://www.suse.com/security/cve/CVE-2017-9604.html https://bugzilla.suse.com/1044210

1 0

openSUSE-RU-2017:1755-1: Recommended update for e2fsprogs
by maintenance＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Recommended Update: Recommended update for e2fsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1755-1 Rating: low References: #1038194 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for e2fsprogs provides the following fixes: - Don't ignore fsync errors in libext2fs. (bsc#1038194) - Fix fsync(2) detection in libext2fs. (bsc#1038194) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-759=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): e2fsprogs-1.42.11-12.6.1 e2fsprogs-debuginfo-1.42.11-12.6.1 e2fsprogs-debugsource-1.42.11-12.6.1 e2fsprogs-devel-1.42.11-12.6.1 libcom_err-devel-1.42.11-12.6.1 libcom_err2-1.42.11-12.6.1 libcom_err2-debuginfo-1.42.11-12.6.1 libext2fs-devel-1.42.11-12.6.1 libext2fs2-1.42.11-12.6.1 libext2fs2-debuginfo-1.42.11-12.6.1 - openSUSE Leap 42.2 (x86_64): e2fsprogs-debuginfo-32bit-1.42.11-12.6.1 libcom_err-devel-32bit-1.42.11-12.6.1 libcom_err2-32bit-1.42.11-12.6.1 libcom_err2-debuginfo-32bit-1.42.11-12.6.1 libext2fs-devel-32bit-1.42.11-12.6.1 libext2fs2-32bit-1.42.11-12.6.1 libext2fs2-debuginfo-32bit-1.42.11-12.6.1 References: https://bugzilla.suse.com/1038194

1 0

openSUSE-RU-2017:1754-1: moderate: Recommended update for ucode-intel
by maintenance＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Recommended Update: Recommended update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1754-1 Rating: moderate References: #1046431 #993639 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ucode-intel to version 20170511 fixes the following issues: - Intel Skylake AVX/ FMA3 bug" (boo#993639) - Intel Skylake hyperthreading bug - for some models Skylake models (boo#1046431) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-762=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ucode-intel-20170511-7.3.1 ucode-intel-blob-20170511-7.3.1 ucode-intel-debuginfo-20170511-7.3.1 ucode-intel-debugsource-20170511-7.3.1 References: https://bugzilla.suse.com/1046431 https://bugzilla.suse.com/993639

1 0

openSUSE-RU-2017:1753-1: moderate: Recommended update for gnucash
by maintenance＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Recommended Update: Recommended update for gnucash ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1753-1 Rating: moderate References: #1046129 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update to gnucash 2.6.16 fixes the following issues: - GnuCash 2.6.7 would crash (boo#1046129) This update also contains various bug fixes, UI and translation updates in the 2.6.x stable release series. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-761=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): gnucash-2.6.16-3.3.1 gnucash-debuginfo-2.6.16-3.3.1 gnucash-debugsource-2.6.16-3.3.1 gnucash-devel-2.6.16-3.3.1 python-gnucash-2.6.16-3.3.1 python-gnucash-debuginfo-2.6.16-3.3.1 - openSUSE Leap 42.2 (noarch): gnucash-docs-2.6.16-6.3.1 gnucash-lang-2.6.16-3.3.1 References: https://bugzilla.suse.com/1046129

1 0

openSUSE-RU-2017:1752-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1752-1 Rating: moderate References: #1046652 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spec-cleaner fixes various issues, including: - Remove defattr as default from new rpm should be enough - Remove buildroot as new rpms do not need it at all - Fix help parsing that crashed the app on execution - Deduplication of requires/buildrequires - Preamble detection fixups - Detect buildignores Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-763=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): spec-cleaner-0.9.8-31.9.1 spec-cleaner-format_spec_file-0.9.8-31.9.1 References: https://bugzilla.suse.com/1046652

1 0

openSUSE-RU-2017:1751-1: Recommended update for xfsprogs
by maintenance＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Recommended Update: Recommended update for xfsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1751-1 Rating: low References: #1034045 #1037376 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for xfsprogs provides the following fixes: - Moved dracut files to accommodate JeOS (bsc#1037376). - Don't call xfs_sb_quota_from_disk twice in xfs_repair(8). (bsc#1034045) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-758=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xfsprogs-4.3.0-3.3.1 xfsprogs-debuginfo-4.3.0-3.3.1 xfsprogs-debugsource-4.3.0-3.3.1 xfsprogs-devel-4.3.0-3.3.1 References: https://bugzilla.suse.com/1034045 https://bugzilla.suse.com/1037376

1 0

openSUSE-RU-2017:1750-1: Recommended update for libsemanage, policycoreutils
by maintenance＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Recommended Update: Recommended update for libsemanage, policycoreutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1750-1 Rating: low References: #1043237 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libsemanage, policycoreutils fixes the following issue: - Show version numbers of modules where they are available (bsc#1043237) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-760=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libsemanage-debugsource-2.5-2.6.1 libsemanage-devel-2.5-2.6.1 libsemanage-devel-static-2.5-2.6.1 libsemanage1-2.5-2.6.1 libsemanage1-debuginfo-2.5-2.6.1 python-semanage-2.5-2.6.1 python-semanage-debuginfo-2.5-2.6.1 python-semanage-debugsource-2.5-2.6.1 - openSUSE Leap 42.2 (x86_64): libsemanage1-32bit-2.5-2.6.1 libsemanage1-debuginfo-32bit-2.5-2.6.1 policycoreutils-2.5-2.3.1 policycoreutils-debuginfo-2.5-2.3.1 policycoreutils-debugsource-2.5-2.3.1 policycoreutils-gui-2.5-2.3.1 policycoreutils-newrole-2.5-2.3.1 policycoreutils-newrole-debuginfo-2.5-2.3.1 policycoreutils-python-2.5-2.3.1 policycoreutils-python-debuginfo-2.5-2.3.1 policycoreutils-sandbox-2.5-2.3.1 policycoreutils-sandbox-debuginfo-2.5-2.3.1 - openSUSE Leap 42.2 (noarch): policycoreutils-lang-2.5-2.3.1 References: https://bugzilla.suse.com/1043237

1 0

openSUSE-SU-2017:1749-1: moderate: Security update for kdepim4
by opensuse-security＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Security Update: Security update for kdepim4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1749-1 Rating: moderate References: #1044210 #1045936 Cross-References: CVE-2017-9604 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for kdepim4 fixes the following issues: - CVE-2017-9604: The kmail "send later" function does not have "sign/encryption" action ensured. (boo#1044210) The package kdepim-addons was updated to conflict with 4.x based akonadi package to prevent file conflicts. (boo#1045936) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-755=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): akonadi-4.14.10-6.5.1 akonadi-debuginfo-4.14.10-6.5.1 akregator-4.14.10-6.5.1 akregator-debuginfo-4.14.10-6.5.1 kaddressbook-4.14.10-6.5.1 kaddressbook-debuginfo-4.14.10-6.5.1 kalarm-4.14.10-6.5.1 kalarm-debuginfo-4.14.10-6.5.1 kdepim-addons-16.08.2-2.3.1 kdepim-addons-debuginfo-16.08.2-2.3.1 kdepim-addons-debugsource-16.08.2-2.3.1 kdepim4-4.14.10-6.5.1 kdepim4-debuginfo-4.14.10-6.5.1 kdepim4-debugsource-4.14.10-6.5.1 kmail-4.14.10-6.5.1 kmail-debuginfo-4.14.10-6.5.1 knode-4.14.10-6.5.1 knode-debuginfo-4.14.10-6.5.1 knotes-4.14.10-6.5.1 knotes-debuginfo-4.14.10-6.5.1 kontact-4.14.10-6.5.1 kontact-debuginfo-4.14.10-6.5.1 korganizer-4.14.10-6.5.1 korganizer-debuginfo-4.14.10-6.5.1 ktimetracker-4.14.10-6.5.1 ktimetracker-debuginfo-4.14.10-6.5.1 ktnef-4.14.10-6.5.1 ktnef-debuginfo-4.14.10-6.5.1 libkdepim4-4.14.10-6.5.1 libkdepim4-debuginfo-4.14.10-6.5.1 References: https://www.suse.com/security/cve/CVE-2017-9604.html https://bugzilla.suse.com/1044210 https://bugzilla.suse.com/1045936

1 0

openSUSE-SU-2017:1748-1: moderate: Security update for kdepim, messagelib
by opensuse-security＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Security Update: Security update for kdepim, messagelib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1748-1 Rating: moderate References: #1044210 Cross-References: CVE-2017-9604 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kdepim and messagelib fixes the following issues: - CVE-2017-9604: The kmail "send later" function does not have "sign/encryption" action ensured. (boo#1044210) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-756=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): akonadi_resources-16.08.2-2.5.3 akonadi_resources-debuginfo-16.08.2-2.5.3 akregator5-16.08.2-2.5.3 akregator5-debuginfo-16.08.2-2.5.3 blogilo5-16.08.2-2.5.3 blogilo5-debuginfo-16.08.2-2.5.3 kaddressbook5-16.08.2-2.5.3 kaddressbook5-debuginfo-16.08.2-2.5.3 kalarm5-16.08.2-2.5.3 kalarm5-debuginfo-16.08.2-2.5.3 kdepim-16.08.2-2.5.3 kdepim-debuginfo-16.08.2-2.5.3 kdepim-debugsource-16.08.2-2.5.3 kmail5-16.08.2-2.5.3 kmail5-debuginfo-16.08.2-2.5.3 knotes5-16.08.2-2.5.3 knotes5-debuginfo-16.08.2-2.5.3 kontact5-16.08.2-2.5.3 kontact5-debuginfo-16.08.2-2.5.3 korganizer5-16.08.2-2.5.3 korganizer5-debuginfo-16.08.2-2.5.3 ktnef5-16.08.2-2.5.3 ktnef5-debuginfo-16.08.2-2.5.3 messagelib-16.08.2-2.6.1 messagelib-debuginfo-16.08.2-2.6.1 messagelib-debugsource-16.08.2-2.6.1 messagelib-devel-16.08.2-2.6.1 References: https://www.suse.com/security/cve/CVE-2017-9604.html https://bugzilla.suse.com/1044210

1 0

openSUSE-RU-2017:1747-1: Recommended update for mc
by maintenance＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Recommended Update: Recommended update for mc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1747-1 Rating: low References: #1004280 #1042797 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for mc fixes the following issues: - Fixed issues with SFTP connections. (boo#1004280, boo#1042797) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-757=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): mc-4.8.15-7.3.1 mc-debuginfo-4.8.15-7.3.1 mc-debugsource-4.8.15-7.3.1 - openSUSE Leap 42.2 (noarch): mc-lang-4.8.15-7.3.1 References: https://bugzilla.suse.com/1004280 https://bugzilla.suse.com/1042797

1 0

openSUSE-SU-2017:1746-1: moderate: Security update for libxml2
by opensuse-security＠opensuse.org 01 Jul '17

01 Jul '17

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1746-1 Rating: moderate References: #1024989 #1044337 Cross-References: CVE-2017-0663 CVE-2017-5969 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libxml2 fixes the following issues: Security issues fixed: * CVE-2017-0663: Fixed a heap buffer overflow in xmlAddID (bsc#1044337) * CVE-2017-5969: Fixed a NULL pointer deref in xmlDumpElementContent (bsc#1024989) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-754=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libxml2-2-2.9.4-5.9.1 libxml2-2-debuginfo-2.9.4-5.9.1 libxml2-debugsource-2.9.4-5.9.1 libxml2-devel-2.9.4-5.9.1 libxml2-tools-2.9.4-5.9.1 libxml2-tools-debuginfo-2.9.4-5.9.1 python-libxml2-2.9.4-5.9.1 python-libxml2-debuginfo-2.9.4-5.9.1 python-libxml2-debugsource-2.9.4-5.9.1 - openSUSE Leap 42.2 (x86_64): libxml2-2-32bit-2.9.4-5.9.1 libxml2-2-debuginfo-32bit-2.9.4-5.9.1 libxml2-devel-32bit-2.9.4-5.9.1 - openSUSE Leap 42.2 (noarch): libxml2-doc-2.9.4-5.9.1 References: https://www.suse.com/security/cve/CVE-2017-0663.html https://www.suse.com/security/cve/CVE-2017-5969.html https://bugzilla.suse.com/1024989 https://bugzilla.suse.com/1044337

1 0