July 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:1991-1: Recommended update for iptables
by maintenance＠opensuse.org 28 Jul '17

28 Jul '17

openSUSE Recommended Update: Recommended update for iptables ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1991-1 Rating: low References: #1045130 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for iptables provides the following fix: - Fix a locking issue of iptables-batch when other programs modify the iptables rules in parallel (bsc#1045130) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-852=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-852=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): iptables-1.4.21-9.1 iptables-debuginfo-1.4.21-9.1 iptables-debugsource-1.4.21-9.1 libipq-devel-1.4.21-9.1 libipq0-1.4.21-9.1 libipq0-debuginfo-1.4.21-9.1 libiptc-devel-1.4.21-9.1 libiptc0-1.4.21-9.1 libiptc0-debuginfo-1.4.21-9.1 libxtables-devel-1.4.21-9.1 libxtables10-1.4.21-9.1 libxtables10-debuginfo-1.4.21-9.1 xtables-plugins-1.4.21-9.1 xtables-plugins-debuginfo-1.4.21-9.1 - openSUSE Leap 42.2 (i586 x86_64): iptables-1.4.21-6.3.1 iptables-debuginfo-1.4.21-6.3.1 iptables-debugsource-1.4.21-6.3.1 libipq-devel-1.4.21-6.3.1 libipq0-1.4.21-6.3.1 libipq0-debuginfo-1.4.21-6.3.1 libiptc-devel-1.4.21-6.3.1 libiptc0-1.4.21-6.3.1 libiptc0-debuginfo-1.4.21-6.3.1 libxtables-devel-1.4.21-6.3.1 libxtables10-1.4.21-6.3.1 libxtables10-debuginfo-1.4.21-6.3.1 xtables-plugins-1.4.21-6.3.1 xtables-plugins-debuginfo-1.4.21-6.3.1 References: https://bugzilla.suse.com/1045130

1 0

openSUSE-RU-2017:1987-1: moderate: Recommended update for lxc
by maintenance＠opensuse.org 28 Jul '17

28 Jul '17

openSUSE Recommended Update: Recommended update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1987-1 Rating: moderate References: #1036360 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lxc fixes the following issue: * lxc-start would fail to start (boo#1036360) This fix requires to manually start apparmor after installation or rebooting the machine. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-853=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-853=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): lxc-1.1.5-19.1 lxc-debuginfo-1.1.5-19.1 lxc-debugsource-1.1.5-19.1 lxc-devel-1.1.5-19.1 - openSUSE Leap 42.2 (x86_64): lxc-1.1.5-15.6.1 lxc-debuginfo-1.1.5-15.6.1 lxc-debugsource-1.1.5-15.6.1 lxc-devel-1.1.5-15.6.1 References: https://bugzilla.suse.com/1036360

1 0

openSUSE-SU-2017:1985-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 28 Jul '17

28 Jul '17

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1985-1 Rating: moderate References: #1049072 Cross-References: CVE-2017-11403 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issue: - CVE-2017-11403: A specially crafted PNG file may have have triggerd a use-after-free flaw (boo#1049072) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-851=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-851=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): GraphicsMagick-1.3.25-17.1 GraphicsMagick-debuginfo-1.3.25-17.1 GraphicsMagick-debugsource-1.3.25-17.1 GraphicsMagick-devel-1.3.25-17.1 libGraphicsMagick++-Q16-12-1.3.25-17.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-17.1 libGraphicsMagick++-devel-1.3.25-17.1 libGraphicsMagick-Q16-3-1.3.25-17.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-17.1 libGraphicsMagick3-config-1.3.25-17.1 libGraphicsMagickWand-Q16-2-1.3.25-17.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-17.1 perl-GraphicsMagick-1.3.25-17.1 perl-GraphicsMagick-debuginfo-1.3.25-17.1 - openSUSE Leap 42.2 (i586 x86_64): GraphicsMagick-1.3.25-11.15.1 GraphicsMagick-debuginfo-1.3.25-11.15.1 GraphicsMagick-debugsource-1.3.25-11.15.1 GraphicsMagick-devel-1.3.25-11.15.1 libGraphicsMagick++-Q16-12-1.3.25-11.15.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-11.15.1 libGraphicsMagick++-devel-1.3.25-11.15.1 libGraphicsMagick-Q16-3-1.3.25-11.15.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-11.15.1 libGraphicsMagick3-config-1.3.25-11.15.1 libGraphicsMagickWand-Q16-2-1.3.25-11.15.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-11.15.1 perl-GraphicsMagick-1.3.25-11.15.1 perl-GraphicsMagick-debuginfo-1.3.25-11.15.1 References: https://www.suse.com/security/cve/CVE-2017-11403.html https://bugzilla.suse.com/1049072

1 0

openSUSE-SU-2017:1984-1: moderate: Security update for the_silver_searcher
by opensuse-security＠opensuse.org 28 Jul '17

28 Jul '17

openSUSE Security Update: Security update for the_silver_searcher ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1984-1 Rating: moderate References: #1050057 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for the_silver_searcher to version 2.0.0 fixes a minor security issue and includes various improvements. New and updated functionality: - New and updated support for various file types - Performance improvements, including faster substring search - Add --print-all-files options to print all files searched - Add support for inverting ignore rules (e.g. !blah.txt) - Add zsh completion function The following functionality has changed: - No longer read from .agignore, .ignore is used The following potential security issue was fixed: - Heap buffer overflow when searching an absolute path (boo#1050057) The following bug fixes are included: - Fix context line printing when reading from a pipe - Ignore local-domain socket just like named pipes - Fix --word-regexp not applying to alternates Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-850=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-850=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): the_silver_searcher-2.0.0-6.1 the_silver_searcher-debuginfo-2.0.0-6.1 the_silver_searcher-debugsource-2.0.0-6.1 - openSUSE Leap 42.2 (i586 x86_64): the_silver_searcher-2.0.0-3.3.1 the_silver_searcher-debuginfo-2.0.0-3.3.1 the_silver_searcher-debugsource-2.0.0-3.3.1 References: https://bugzilla.suse.com/1050057

1 0

openSUSE-RU-2017:1982-1: important: Recommended update for systemd, dracut
by maintenance＠opensuse.org 27 Jul '17

27 Jul '17

openSUSE Recommended Update: Recommended update for systemd, dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1982-1 Rating: important References: #1032029 #1032284 #1033238 #1037120 #1040153 #1040968 #1043900 #1045290 #1046750 #1048565 #986216 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 11 recommended fixes can now be installed. Description: This update for systemd and dracut fixes the following issues: Issues fixed in systemd: - Automounter issue in combination with NFS volumes (bsc#1040968) - Missing symbolic link for SAS device in /dev/disk/by-path (bsc#1040153) - Add minimal support for boot.d/* scripts in systemd-sysv-convert (bsc#1046750) The update also contains a tracked code change for CVE-2017-9445, a possible out-of-bounds write triggered by a specially crafted TCP payload from a DNS server. The openSUSE package does not ship resolved and is not affected. (bsc#1045290) Issues fixed in dracut: - Bail out if module directory does not exist. (bsc#1043900) - Suppress bogus error message. (bsc#1032029) - Fix module force loading with systemd. (bsc#986216) - Ship udev files required by systemd. (bsc#1040153) - Ignore module resolution errors (e.g. with kgraft). (bsc#1037120) - switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565) - ISCSI boot would fail randomly (bsc#1032284) This update was imported from the SUSE:SLE-12-SP2:Update and SUSE:SLE-12-SP3:Update update projects. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-847=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): dracut-044.1-23.2 dracut-debuginfo-044.1-23.2 dracut-debugsource-044.1-23.2 dracut-fips-044.1-23.2 dracut-tools-044.1-23.2 libsystemd0-228-29.1 libsystemd0-debuginfo-228-29.1 libsystemd0-mini-228-29.1 libsystemd0-mini-debuginfo-228-29.1 libudev-devel-228-29.1 libudev-mini-devel-228-29.1 libudev-mini1-228-29.1 libudev-mini1-debuginfo-228-29.1 libudev1-228-29.1 libudev1-debuginfo-228-29.1 nss-myhostname-228-29.1 nss-myhostname-debuginfo-228-29.1 nss-mymachines-228-29.1 nss-mymachines-debuginfo-228-29.1 systemd-228-29.1 systemd-debuginfo-228-29.1 systemd-debugsource-228-29.1 systemd-devel-228-29.1 systemd-logger-228-29.1 systemd-mini-228-29.1 systemd-mini-debuginfo-228-29.1 systemd-mini-debugsource-228-29.1 systemd-mini-devel-228-29.1 systemd-mini-sysvinit-228-29.1 systemd-sysvinit-228-29.1 udev-228-29.1 udev-debuginfo-228-29.1 udev-mini-228-29.1 udev-mini-debuginfo-228-29.1 - openSUSE Leap 42.3 (noarch): systemd-bash-completion-228-29.1 systemd-mini-bash-completion-228-29.1 - openSUSE Leap 42.3 (x86_64): libsystemd0-32bit-228-29.1 libsystemd0-debuginfo-32bit-228-29.1 libudev1-32bit-228-29.1 libudev1-debuginfo-32bit-228-29.1 nss-myhostname-32bit-228-29.1 nss-myhostname-debuginfo-32bit-228-29.1 systemd-32bit-228-29.1 systemd-debuginfo-32bit-228-29.1 References: https://bugzilla.suse.com/1032029 https://bugzilla.suse.com/1032284 https://bugzilla.suse.com/1033238 https://bugzilla.suse.com/1037120 https://bugzilla.suse.com/1040153 https://bugzilla.suse.com/1040968 https://bugzilla.suse.com/1043900 https://bugzilla.suse.com/1045290 https://bugzilla.suse.com/1046750 https://bugzilla.suse.com/1048565 https://bugzilla.suse.com/986216

1 0

openSUSE-RU-2017:1981-1: important: Recommended update for systemd, dracut
by maintenance＠opensuse.org 27 Jul '17

27 Jul '17

openSUSE Recommended Update: Recommended update for systemd, dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1981-1 Rating: important References: #1032029 #1033238 #1037120 #1040153 #1040968 #1043900 #1045290 #1046750 #986216 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: This update for systemd and dracut fixes the following issues: Issues fixed in systemd: - Automounter issue in combination with NFS volumes (bsc#1040968) - Missing symbolic link for SAS device in /dev/disk/by-path (bsc#1040153) - Add minimal support for boot.d/* scripts in systemd-sysv-convert (bsc#1046750) The update also contains a tracked code change for CVE-2017-9445, a possible out-of-bounds write triggered by a specially crafted TCP payload from a DNS server. The openSUSE package does not ship resolved and is not affected. (bsc#1045290) Issues fixed in dracut: - Bail out if module directory does not exist. (bsc#1043900) - Suppress bogus error message. (bsc#1032029) - Fix module force loading with systemd. (bsc#986216) - Ship udev files required by systemd. (bsc#1040153) - Ignore module resolution errors (e.g. with kgraft). (bsc#1037120) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-848=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dracut-044.1-16.9.2 dracut-debuginfo-044.1-16.9.2 dracut-debugsource-044.1-16.9.2 dracut-fips-044.1-16.9.2 dracut-tools-044.1-16.9.2 libsystemd0-228-25.9.1 libsystemd0-debuginfo-228-25.9.1 libsystemd0-mini-228-25.9.1 libsystemd0-mini-debuginfo-228-25.9.1 libudev-devel-228-25.9.1 libudev-mini-devel-228-25.9.1 libudev-mini1-228-25.9.1 libudev-mini1-debuginfo-228-25.9.1 libudev1-228-25.9.1 libudev1-debuginfo-228-25.9.1 nss-myhostname-228-25.9.1 nss-myhostname-debuginfo-228-25.9.1 nss-mymachines-228-25.9.1 nss-mymachines-debuginfo-228-25.9.1 systemd-228-25.9.1 systemd-debuginfo-228-25.9.1 systemd-debugsource-228-25.9.1 systemd-devel-228-25.9.1 systemd-logger-228-25.9.1 systemd-mini-228-25.9.1 systemd-mini-debuginfo-228-25.9.1 systemd-mini-debugsource-228-25.9.1 systemd-mini-devel-228-25.9.1 systemd-mini-sysvinit-228-25.9.1 systemd-sysvinit-228-25.9.1 udev-228-25.9.1 udev-debuginfo-228-25.9.1 udev-mini-228-25.9.1 udev-mini-debuginfo-228-25.9.1 - openSUSE Leap 42.2 (noarch): systemd-bash-completion-228-25.9.1 systemd-mini-bash-completion-228-25.9.1 - openSUSE Leap 42.2 (x86_64): libsystemd0-32bit-228-25.9.1 libsystemd0-debuginfo-32bit-228-25.9.1 libudev1-32bit-228-25.9.1 libudev1-debuginfo-32bit-228-25.9.1 nss-myhostname-32bit-228-25.9.1 nss-myhostname-debuginfo-32bit-228-25.9.1 systemd-32bit-228-25.9.1 systemd-debuginfo-32bit-228-25.9.1 References: https://bugzilla.suse.com/1032029 https://bugzilla.suse.com/1033238 https://bugzilla.suse.com/1037120 https://bugzilla.suse.com/1040153 https://bugzilla.suse.com/1040968 https://bugzilla.suse.com/1043900 https://bugzilla.suse.com/1045290 https://bugzilla.suse.com/1046750 https://bugzilla.suse.com/986216

1 0

openSUSE-RU-2017:1978-1: moderate: Recommended update for dovecot22
by maintenance＠opensuse.org 27 Jul '17

27 Jul '17

openSUSE Recommended Update: Recommended update for dovecot22 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1978-1 Rating: moderate References: #1045662 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides Dovecot version 2.2.31, which brings many fixes and enhancements: - Do not generate dhparams smaller than 2048 in FIPS mode. (bsc#1045662) - Removed "(Dovecot)" from added Received headers. Some installations want to hide it, and there's not really any good reason for anyone to have it. - Add ssl_alt_cert and ssl_alt_key settings to add support for having both RSA and ECDSA certificates. - Strip trailing whitespace from headers when matching mails in dsync/imapc and pop3-migration plugin. - Add acl_globals_only setting to disable looking up per-mailbox dovecot-acl files. - Parse invalid message addresses better. This mainly affects the generated IMAP ENVELOPE replies. - Fix potential corruption of dovecot.index.cache that could lead to deleting wrong mail's cache. - Fix crash in mail-crypt-acl plugin. - Fix welcome plugin. - Various fixes to handling mailbox listing. Especially related to handling non-existent autocreated or autosubscribed mailboxes and ACLs. - Global ACL file was parsed as if it was local ACL file. - Only the first forward_* field was working, and only if the first passdb lookup succeeded. - Using mail_sort_max_read_count sometimes caused "Broken sort-* indexes, resetting" errors. - Using mail_sort_max_read_count may have caused very high CPU usage. - Message address parsing could have crashed on invalid input. - imapc_features=fetch-headers wasn't always working correctly and caused the full header to be fetched. - Various bug fixes related to connection failure handling in imapc. - Unnecessary FETCH RFC822.SIZE sent to server when expunging mails if quota=imapc. - Add support for "ns" parameter to quota=count. - Fix incremental syncing for mails that don't have Date or Message-ID headers. - Fix hang when client sends pipelined SEARCH + EXPUNGE/CLOSE/LOGOUT. - Token validation in oauth2 didn't accept empty server responses. - Adjusts Pigeonhole to several changes in the Dovecot API, making it depend on Dovecot v2.2.31. - Fixed bug in handling of implicit keep in some cases. Implicit side-effects, such as assigned flags, were not always applied correctly. - Fixed segmentation fault that could occur when the global script location was left unconfigured. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-849=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dovecot22-2.2.31-5.7.1 dovecot22-backend-mysql-2.2.31-5.7.1 dovecot22-backend-mysql-debuginfo-2.2.31-5.7.1 dovecot22-backend-pgsql-2.2.31-5.7.1 dovecot22-backend-pgsql-debuginfo-2.2.31-5.7.1 dovecot22-backend-sqlite-2.2.31-5.7.1 dovecot22-backend-sqlite-debuginfo-2.2.31-5.7.1 dovecot22-debuginfo-2.2.31-5.7.1 dovecot22-debugsource-2.2.31-5.7.1 dovecot22-devel-2.2.31-5.7.1 dovecot22-fts-2.2.31-5.7.1 dovecot22-fts-debuginfo-2.2.31-5.7.1 dovecot22-fts-lucene-2.2.31-5.7.1 dovecot22-fts-lucene-debuginfo-2.2.31-5.7.1 dovecot22-fts-solr-2.2.31-5.7.1 dovecot22-fts-solr-debuginfo-2.2.31-5.7.1 dovecot22-fts-squat-2.2.31-5.7.1 dovecot22-fts-squat-debuginfo-2.2.31-5.7.1 References: https://bugzilla.suse.com/1045662

1 0

openSUSE-OU-2017:1977-1: Optional update for sendmail
by maintenance＠opensuse.org 27 Jul '17

27 Jul '17

openSUSE Optional Update: Optional update for sendmail ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:1977-1 Rating: low References: #1049188 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for sendmail fixes the following issues: - The requirements of the libmilter, sendmail-devel packages did not consider other MTAs (boo#1049188) Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-846=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): libmilter-doc-8.15.2-6.1 sendmail-starttls-8.15.2-6.1 - openSUSE Leap 42.3 (x86_64): libmilter1_0-8.15.2-6.1 libmilter1_0-debuginfo-8.15.2-6.1 rmail-8.15.2-6.1 rmail-debuginfo-8.15.2-6.1 sendmail-8.15.2-6.1 sendmail-debuginfo-8.15.2-6.1 sendmail-debugsource-8.15.2-6.1 sendmail-devel-8.15.2-6.1 References: https://bugzilla.suse.com/1049188

1 0

openSUSE-RU-2017:1970-1: moderate: Recommended update for tigervnc
by maintenance＠opensuse.org 27 Jul '17

27 Jul '17

openSUSE Recommended Update: Recommended update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1970-1 Rating: moderate References: #1041847 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tigervnc fixes the following issues: - Issues accessing vnc through browser with default encrypted connection (boo#1041847) * Make sure CN in generated certificate doesn't exceed 64 characters * fix generation of TLS certificate using current hostname * Fix certificate handling in the java client Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-845=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libXvnc-devel-1.6.0-16.11.1 libXvnc1-1.6.0-16.11.1 libXvnc1-debuginfo-1.6.0-16.11.1 tigervnc-1.6.0-16.11.1 tigervnc-debuginfo-1.6.0-16.11.1 tigervnc-debugsource-1.6.0-16.11.1 xorg-x11-Xvnc-1.6.0-16.11.1 xorg-x11-Xvnc-debuginfo-1.6.0-16.11.1 References: https://bugzilla.suse.com/1041847

1 0

openSUSE-SU-2017:1967-1: moderate: Update for gnu-efi, pesign, shim
by opensuse-security＠opensuse.org 26 Jul '17

26 Jul '17

openSUSE Security Update: Update for gnu-efi, pesign, shim ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1967-1 Rating: moderate References: #798043 #807760 #808106 #813079 #813448 #841426 #863205 #866690 #867974 #872503 #873857 #875385 #877003 #889332 #889765 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: shim was updated to fix several security issues. - OOB read access when parsing DHCPv6 packets (remote DoS) (CVE-2014-3675). - Heap overflow when parsing IPv6 addresses provided by tftp:// DHCPv6 boot option (RCE) (CVE-2014-3676). - Memory corruption when processing user provided MOK lists (CVE-2014-3677). More information is available at https://bugzilla.novell.com/show_bug.cgi?id=889332 To enable this update gnu-efi was updated to 3.0u and pesign to version 0.109 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-48=1 - openSUSE 12.3: zypper in -t patch openSUSE-2015-48=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): gnu-efi-3.0u-2.5.1 pesign-0.109-3.9.2 pesign-debuginfo-0.109-3.9.2 pesign-debugsource-0.109-3.9.2 - openSUSE 13.1 (x86_64): shim-0.7.318.81ee561d-7.2 - openSUSE 12.3 (i586 x86_64): gnu-efi-3.0u-6.5.1 pesign-0.109-3.19.1 pesign-debuginfo-0.109-3.19.1 pesign-debugsource-0.109-3.19.1 - openSUSE 12.3 (x86_64): shim-0.7.318.81ee561d-3.22.1 References: https://bugzilla.suse.com/798043 https://bugzilla.suse.com/807760 https://bugzilla.suse.com/808106 https://bugzilla.suse.com/813079 https://bugzilla.suse.com/813448 https://bugzilla.suse.com/841426 https://bugzilla.suse.com/863205 https://bugzilla.suse.com/866690 https://bugzilla.suse.com/867974 https://bugzilla.suse.com/872503 https://bugzilla.suse.com/873857 https://bugzilla.suse.com/875385 https://bugzilla.suse.com/877003 https://bugzilla.suse.com/889332 https://bugzilla.suse.com/889765

1 0