July 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:2007-1: Recommended update for python-websockify
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for python-websockify ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2007-1 Rating: low References: #1049987 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-websockify fixes the following issues: - remove unused run-time dependency on pyOpenSSL (boo#1049987) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-856=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-856=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): python-websockify-0.8.0-5.1 - openSUSE Leap 42.2 (noarch): python-websockify-0.8.0-2.3.1 References: https://bugzilla.suse.com/1049987

1 0

openSUSE-RU-2017:2006-1: Recommended update for btrfsmaintenance
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for btrfsmaintenance ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2006-1 Rating: low References: #1047226 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for btrfsmaintenance provides the following fixes: - Add btrfsprogs as a dependency of btrfsmaintenance. (bsc#1047226) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-863=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): btrfsmaintenance-0.2-14.3.1 References: https://bugzilla.suse.com/1047226

1 0

openSUSE-RU-2017:2005-1: moderate: Recommended update for gnuhealth
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for gnuhealth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2005-1 Rating: moderate References: #1049985 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update gnuhealth 3.2.1 fixes the following issues: - View error on lab order (bsc#1049985) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-857=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): gnuhealth-3.2.1-15.1 References: https://bugzilla.suse.com/1049985

1 0

openSUSE-RU-2017:2004-1: Recommended update for llvm
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for llvm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2004-1 Rating: low References: #1023614 #1032686 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for llvm provides the following fixes: - Fix relocations on aarch64. (bsc#1032686) - Fix invalid code creation by libllvm shader compiler. (bsc#1023614) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-855=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libLLVM-3.8.0-2.6.1 libLLVM-debuginfo-3.8.0-2.6.1 libclang-3.8.0-2.6.1 libclang-debuginfo-3.8.0-2.6.1 llvm-3.8.0-2.6.1 llvm-clang-3.8.0-2.6.1 llvm-clang-debuginfo-3.8.0-2.6.1 llvm-clang-devel-3.8.0-2.6.1 llvm-debuginfo-3.8.0-2.6.1 llvm-debugsource-3.8.0-2.6.1 llvm-devel-3.8.0-2.6.1 llvm-devel-debuginfo-3.8.0-2.6.1 llvm-vim-plugins-3.8.0-2.6.1 python-clang-3.8.0-2.6.1 - openSUSE Leap 42.2 (x86_64): libLLVM-32bit-3.8.0-2.6.1 libLLVM-debuginfo-32bit-3.8.0-2.6.1 libclang-32bit-3.8.0-2.6.1 libclang-debuginfo-32bit-3.8.0-2.6.1 lldb-3.8.0-2.6.1 lldb-debuginfo-3.8.0-2.6.1 References: https://bugzilla.suse.com/1023614 https://bugzilla.suse.com/1032686

1 0

openSUSE-SU-2017:2003-1: moderate: Security update for nginx
by opensuse-security＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Security Update: Security update for nginx ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2003-1 Rating: moderate References: #1048265 Cross-References: CVE-2017-7529 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for nginx fixes the following issues: - CVE-2017-7529: A remote attacker could have used specially crafted requests to trigger an integer overflow the nginx range filter module to leak potentially sensitive information (boo#1048265) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-867=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): nginx-1.8.1-10.5.1 nginx-debuginfo-1.8.1-10.5.1 nginx-debugsource-1.8.1-10.5.1 References: https://www.suse.com/security/cve/CVE-2017-7529.html https://bugzilla.suse.com/1048265

1 0

openSUSE-SU-2017:2002-1: moderate: Security update for libical
by opensuse-security＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Security Update: Security update for libical ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2002-1 Rating: moderate References: #1015964 #1044995 #986631 #986639 Cross-References: CVE-2016-5824 CVE-2016-5827 CVE-2016-9584 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for libical fixes the following issues: Security issues fixed: - CVE-2016-5824: libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file. (bsc#986639) - CVE-2016-5827: The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted string to the icalparser_parse_string function. (bsc#986631) - CVE-2016-9584: libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file. (bsc#1015964) Bug fixes: - libical crashes while parsing timezones (bsc#1044995) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-869=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-869=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libical-debugsource-1.0.1-16.1 libical-devel-1.0.1-16.1 libical-devel-static-1.0.1-16.1 libical1-1.0.1-16.1 libical1-debuginfo-1.0.1-16.1 - openSUSE Leap 42.3 (noarch): libical-doc-1.0.1-16.1 - openSUSE Leap 42.3 (x86_64): libical1-32bit-1.0.1-16.1 libical1-debuginfo-32bit-1.0.1-16.1 - openSUSE Leap 42.2 (i586 x86_64): libical-debugsource-1.0.1-13.3.1 libical-devel-1.0.1-13.3.1 libical-devel-static-1.0.1-13.3.1 libical1-1.0.1-13.3.1 libical1-debuginfo-1.0.1-13.3.1 - openSUSE Leap 42.2 (x86_64): libical1-32bit-1.0.1-13.3.1 libical1-debuginfo-32bit-1.0.1-13.3.1 - openSUSE Leap 42.2 (noarch): libical-doc-1.0.1-13.3.1 References: https://www.suse.com/security/cve/CVE-2016-5824.html https://www.suse.com/security/cve/CVE-2016-5827.html https://www.suse.com/security/cve/CVE-2016-9584.html https://bugzilla.suse.com/1015964 https://bugzilla.suse.com/1044995 https://bugzilla.suse.com/986631 https://bugzilla.suse.com/986639

1 0

openSUSE-RU-2017:2001-1: Recommended update for kyotocabinet
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for kyotocabinet ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2001-1 Rating: low References: #1037914 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kyotocabinet fixes the following issues: - Do not optimize for native cpu of the build system. (bsc#1037914) - Fix debuginfo package generation. - Fix build errors with GCC 6 and 7. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-864=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): kyotocabinet-1.2.76-14.3.1 kyotocabinet-debuginfo-1.2.76-14.3.1 kyotocabinet-debugsource-1.2.76-14.3.1 libkyotocabinet-devel-1.2.76-14.3.1 libkyotocabinet16-1.2.76-14.3.1 libkyotocabinet16-debuginfo-1.2.76-14.3.1 References: https://bugzilla.suse.com/1037914

1 0

openSUSE-RU-2017:2000-1: moderate: Recommended update for oidentd
by maintenance＠opensuse.org 29 Jul '17

29 Jul '17

openSUSE Recommended Update: Recommended update for oidentd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2000-1 Rating: moderate References: #953608 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for oidentd fixes the following issues: - Upgrade and start-up problems related to service files (boo#953608) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-861=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-861=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): oidentd-2.0.8-153.1 oidentd-debuginfo-2.0.8-153.1 oidentd-debugsource-2.0.8-153.1 - openSUSE Leap 42.2 (i586 x86_64): oidentd-2.0.8-150.3.1 oidentd-debuginfo-2.0.8-150.3.1 oidentd-debugsource-2.0.8-150.3.1 References: https://bugzilla.suse.com/953608

1 0

openSUSE-SU-2017:1994-1: important: Security update for chromium
by opensuse-security＠opensuse.org 28 Jul '17

28 Jul '17

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1994-1 Rating: important References: #1050537 Cross-References: CVE-2017-5091 CVE-2017-5092 CVE-2017-5093 CVE-2017-5094 CVE-2017-5095 CVE-2017-5096 CVE-2017-5097 CVE-2017-5098 CVE-2017-5099 CVE-2017-5100 CVE-2017-5101 CVE-2017-5102 CVE-2017-5103 CVE-2017-5104 CVE-2017-5105 CVE-2017-5106 CVE-2017-5107 CVE-2017-5108 CVE-2017-5109 CVE-2017-5110 CVE-2017-7000 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: This update Chromium to version 60.0.3112.78 fixes security issue and bugs. The following security issues were fixed: * CVE-2017-5091: Use after free in IndexedDB * CVE-2017-5092: Use after free in PPAPI * CVE-2017-5093: UI spoofing in Blink * CVE-2017-5094: Type confusion in extensions * CVE-2017-5095: Out-of-bounds write in PDFium * CVE-2017-5096: User information leak via Android intents * CVE-2017-5097: Out-of-bounds read in Skia * CVE-2017-5098: Use after free in V8 * CVE-2017-5099: Out-of-bounds write in PPAPI * CVE-2017-5100: Use after free in Chrome Apps * CVE-2017-5101: URL spoofing in OmniBox * CVE-2017-5102: Uninitialized use in Skia * CVE-2017-5103: Uninitialized use in Skia * CVE-2017-5104: UI spoofing in browser * CVE-2017-7000: Pointer disclosure in SQLite * CVE-2017-5105: URL spoofing in OmniBox * CVE-2017-5106: URL spoofing in OmniBox * CVE-2017-5107: User information leak via SVG * CVE-2017-5108: Type confusion in PDFium * CVE-2017-5109: UI spoofing in browser * CVE-2017-5110: UI spoofing in payments dialog * Various fixes from internal audits, fuzzing and other initiatives A number of upstream bugfixes are also included in this release. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-854=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-60.0.3112.78-26.1 chromedriver-debuginfo-60.0.3112.78-26.1 chromium-60.0.3112.78-26.1 chromium-debuginfo-60.0.3112.78-26.1 chromium-debugsource-60.0.3112.78-26.1 References: https://www.suse.com/security/cve/CVE-2017-5091.html https://www.suse.com/security/cve/CVE-2017-5092.html https://www.suse.com/security/cve/CVE-2017-5093.html https://www.suse.com/security/cve/CVE-2017-5094.html https://www.suse.com/security/cve/CVE-2017-5095.html https://www.suse.com/security/cve/CVE-2017-5096.html https://www.suse.com/security/cve/CVE-2017-5097.html https://www.suse.com/security/cve/CVE-2017-5098.html https://www.suse.com/security/cve/CVE-2017-5099.html https://www.suse.com/security/cve/CVE-2017-5100.html https://www.suse.com/security/cve/CVE-2017-5101.html https://www.suse.com/security/cve/CVE-2017-5102.html https://www.suse.com/security/cve/CVE-2017-5103.html https://www.suse.com/security/cve/CVE-2017-5104.html https://www.suse.com/security/cve/CVE-2017-5105.html https://www.suse.com/security/cve/CVE-2017-5106.html https://www.suse.com/security/cve/CVE-2017-5107.html https://www.suse.com/security/cve/CVE-2017-5108.html https://www.suse.com/security/cve/CVE-2017-5109.html https://www.suse.com/security/cve/CVE-2017-5110.html https://www.suse.com/security/cve/CVE-2017-7000.html https://bugzilla.suse.com/1050537

1 0

openSUSE-SU-2017:1993-1: important: Security update for chromium
by opensuse-security＠opensuse.org 28 Jul '17

28 Jul '17

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1993-1 Rating: important References: #1050537 Cross-References: CVE-2017-5091 CVE-2017-5092 CVE-2017-5093 CVE-2017-5094 CVE-2017-5095 CVE-2017-5096 CVE-2017-5097 CVE-2017-5098 CVE-2017-5099 CVE-2017-5100 CVE-2017-5101 CVE-2017-5102 CVE-2017-5103 CVE-2017-5104 CVE-2017-5105 CVE-2017-5106 CVE-2017-5107 CVE-2017-5108 CVE-2017-5109 CVE-2017-5110 CVE-2017-7000 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: This update Chromium to version 60.0.3112.78 fixes security issue and bugs. The following security issues were fixed: * CVE-2017-5091: Use after free in IndexedDB * CVE-2017-5092: Use after free in PPAPI * CVE-2017-5093: UI spoofing in Blink * CVE-2017-5094: Type confusion in extensions * CVE-2017-5095: Out-of-bounds write in PDFium * CVE-2017-5096: User information leak via Android intents * CVE-2017-5097: Out-of-bounds read in Skia * CVE-2017-5098: Use after free in V8 * CVE-2017-5099: Out-of-bounds write in PPAPI * CVE-2017-5100: Use after free in Chrome Apps * CVE-2017-5101: URL spoofing in OmniBox * CVE-2017-5102: Uninitialized use in Skia * CVE-2017-5103: Uninitialized use in Skia * CVE-2017-5104: UI spoofing in browser * CVE-2017-7000: Pointer disclosure in SQLite * CVE-2017-5105: URL spoofing in OmniBox * CVE-2017-5106: URL spoofing in OmniBox * CVE-2017-5107: User information leak via SVG * CVE-2017-5108: Type confusion in PDFium * CVE-2017-5109: UI spoofing in browser * CVE-2017-5110: UI spoofing in payments dialog * Various fixes from internal audits, fuzzing and other initiatives A number of upstream bugfixes are also included in this release. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-854=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-854=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): chromedriver-60.0.3112.78-107.1 chromedriver-debuginfo-60.0.3112.78-107.1 chromium-60.0.3112.78-107.1 chromium-debuginfo-60.0.3112.78-107.1 chromium-debugsource-60.0.3112.78-107.1 - openSUSE Leap 42.2 (x86_64): chromedriver-60.0.3112.78-104.21.1 chromedriver-debuginfo-60.0.3112.78-104.21.1 chromium-60.0.3112.78-104.21.1 chromium-debuginfo-60.0.3112.78-104.21.1 chromium-debugsource-60.0.3112.78-104.21.1 References: https://www.suse.com/security/cve/CVE-2017-5091.html https://www.suse.com/security/cve/CVE-2017-5092.html https://www.suse.com/security/cve/CVE-2017-5093.html https://www.suse.com/security/cve/CVE-2017-5094.html https://www.suse.com/security/cve/CVE-2017-5095.html https://www.suse.com/security/cve/CVE-2017-5096.html https://www.suse.com/security/cve/CVE-2017-5097.html https://www.suse.com/security/cve/CVE-2017-5098.html https://www.suse.com/security/cve/CVE-2017-5099.html https://www.suse.com/security/cve/CVE-2017-5100.html https://www.suse.com/security/cve/CVE-2017-5101.html https://www.suse.com/security/cve/CVE-2017-5102.html https://www.suse.com/security/cve/CVE-2017-5103.html https://www.suse.com/security/cve/CVE-2017-5104.html https://www.suse.com/security/cve/CVE-2017-5105.html https://www.suse.com/security/cve/CVE-2017-5106.html https://www.suse.com/security/cve/CVE-2017-5107.html https://www.suse.com/security/cve/CVE-2017-5108.html https://www.suse.com/security/cve/CVE-2017-5109.html https://www.suse.com/security/cve/CVE-2017-5110.html https://www.suse.com/security/cve/CVE-2017-7000.html https://bugzilla.suse.com/1050537

1 0