July 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2017:1749-1: moderate: Security update for kdepim4
by opensuse-security＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Security Update: Security update for kdepim4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1749-1 Rating: moderate References: #1044210 #1045936 Cross-References: CVE-2017-9604 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for kdepim4 fixes the following issues: - CVE-2017-9604: The kmail "send later" function does not have "sign/encryption" action ensured. (boo#1044210) The package kdepim-addons was updated to conflict with 4.x based akonadi package to prevent file conflicts. (boo#1045936) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-755=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): akonadi-4.14.10-6.5.1 akonadi-debuginfo-4.14.10-6.5.1 akregator-4.14.10-6.5.1 akregator-debuginfo-4.14.10-6.5.1 kaddressbook-4.14.10-6.5.1 kaddressbook-debuginfo-4.14.10-6.5.1 kalarm-4.14.10-6.5.1 kalarm-debuginfo-4.14.10-6.5.1 kdepim-addons-16.08.2-2.3.1 kdepim-addons-debuginfo-16.08.2-2.3.1 kdepim-addons-debugsource-16.08.2-2.3.1 kdepim4-4.14.10-6.5.1 kdepim4-debuginfo-4.14.10-6.5.1 kdepim4-debugsource-4.14.10-6.5.1 kmail-4.14.10-6.5.1 kmail-debuginfo-4.14.10-6.5.1 knode-4.14.10-6.5.1 knode-debuginfo-4.14.10-6.5.1 knotes-4.14.10-6.5.1 knotes-debuginfo-4.14.10-6.5.1 kontact-4.14.10-6.5.1 kontact-debuginfo-4.14.10-6.5.1 korganizer-4.14.10-6.5.1 korganizer-debuginfo-4.14.10-6.5.1 ktimetracker-4.14.10-6.5.1 ktimetracker-debuginfo-4.14.10-6.5.1 ktnef-4.14.10-6.5.1 ktnef-debuginfo-4.14.10-6.5.1 libkdepim4-4.14.10-6.5.1 libkdepim4-debuginfo-4.14.10-6.5.1 References: https://www.suse.com/security/cve/CVE-2017-9604.html https://bugzilla.suse.com/1044210 https://bugzilla.suse.com/1045936

1 0

openSUSE-SU-2017:1748-1: moderate: Security update for kdepim, messagelib
by opensuse-security＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Security Update: Security update for kdepim, messagelib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1748-1 Rating: moderate References: #1044210 Cross-References: CVE-2017-9604 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kdepim and messagelib fixes the following issues: - CVE-2017-9604: The kmail "send later" function does not have "sign/encryption" action ensured. (boo#1044210) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-756=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): akonadi_resources-16.08.2-2.5.3 akonadi_resources-debuginfo-16.08.2-2.5.3 akregator5-16.08.2-2.5.3 akregator5-debuginfo-16.08.2-2.5.3 blogilo5-16.08.2-2.5.3 blogilo5-debuginfo-16.08.2-2.5.3 kaddressbook5-16.08.2-2.5.3 kaddressbook5-debuginfo-16.08.2-2.5.3 kalarm5-16.08.2-2.5.3 kalarm5-debuginfo-16.08.2-2.5.3 kdepim-16.08.2-2.5.3 kdepim-debuginfo-16.08.2-2.5.3 kdepim-debugsource-16.08.2-2.5.3 kmail5-16.08.2-2.5.3 kmail5-debuginfo-16.08.2-2.5.3 knotes5-16.08.2-2.5.3 knotes5-debuginfo-16.08.2-2.5.3 kontact5-16.08.2-2.5.3 kontact5-debuginfo-16.08.2-2.5.3 korganizer5-16.08.2-2.5.3 korganizer5-debuginfo-16.08.2-2.5.3 ktnef5-16.08.2-2.5.3 ktnef5-debuginfo-16.08.2-2.5.3 messagelib-16.08.2-2.6.1 messagelib-debuginfo-16.08.2-2.6.1 messagelib-debugsource-16.08.2-2.6.1 messagelib-devel-16.08.2-2.6.1 References: https://www.suse.com/security/cve/CVE-2017-9604.html https://bugzilla.suse.com/1044210

1 0

openSUSE-RU-2017:1747-1: Recommended update for mc
by maintenance＠opensuse.org 02 Jul '17

02 Jul '17

openSUSE Recommended Update: Recommended update for mc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1747-1 Rating: low References: #1004280 #1042797 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for mc fixes the following issues: - Fixed issues with SFTP connections. (boo#1004280, boo#1042797) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-757=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): mc-4.8.15-7.3.1 mc-debuginfo-4.8.15-7.3.1 mc-debugsource-4.8.15-7.3.1 - openSUSE Leap 42.2 (noarch): mc-lang-4.8.15-7.3.1 References: https://bugzilla.suse.com/1004280 https://bugzilla.suse.com/1042797

1 0

openSUSE-SU-2017:1746-1: moderate: Security update for libxml2
by opensuse-security＠opensuse.org 01 Jul '17

01 Jul '17

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1746-1 Rating: moderate References: #1024989 #1044337 Cross-References: CVE-2017-0663 CVE-2017-5969 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libxml2 fixes the following issues: Security issues fixed: * CVE-2017-0663: Fixed a heap buffer overflow in xmlAddID (bsc#1044337) * CVE-2017-5969: Fixed a NULL pointer deref in xmlDumpElementContent (bsc#1024989) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-754=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libxml2-2-2.9.4-5.9.1 libxml2-2-debuginfo-2.9.4-5.9.1 libxml2-debugsource-2.9.4-5.9.1 libxml2-devel-2.9.4-5.9.1 libxml2-tools-2.9.4-5.9.1 libxml2-tools-debuginfo-2.9.4-5.9.1 python-libxml2-2.9.4-5.9.1 python-libxml2-debuginfo-2.9.4-5.9.1 python-libxml2-debugsource-2.9.4-5.9.1 - openSUSE Leap 42.2 (x86_64): libxml2-2-32bit-2.9.4-5.9.1 libxml2-2-debuginfo-32bit-2.9.4-5.9.1 libxml2-devel-32bit-2.9.4-5.9.1 - openSUSE Leap 42.2 (noarch): libxml2-doc-2.9.4-5.9.1 References: https://www.suse.com/security/cve/CVE-2017-0663.html https://www.suse.com/security/cve/CVE-2017-5969.html https://bugzilla.suse.com/1024989 https://bugzilla.suse.com/1044337

1 0