July 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:1884-1: Recommended update for python3-websockets
by maintenance＠opensuse.org 14 Jul '17

14 Jul '17

openSUSE Recommended Update: Recommended update for python3-websockets ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1884-1 Rating: low References: #1047446 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides a new version of python3-websockets and fixes the following issues: - Reduced noise in logs caused by connection resets. - Avoided crashing on concurrent writes on slow connections. - Enforces utf-8 encoding in order to make the package build. (bnc#1047446) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-815=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): python3-websockets-3.3-14.3.1 References: https://bugzilla.suse.com/1047446

1 0

openSUSE-RU-2017:1883-1: Recommended update for yast2-product-creator
by maintenance＠opensuse.org 14 Jul '17

14 Jul '17

openSUSE Recommended Update: Recommended update for yast2-product-creator ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1883-1 Rating: low References: #1028661 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-product-creator provides the following fixes: - Fix patterns list initialization (bsc#1028661) - Fix 'Next' button behavior in pattern selection This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-821=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): yast2-product-creator-3.1.9-2.3.1 References: https://bugzilla.suse.com/1028661

1 0

openSUSE-SU-2017:1882-1: important: Recommended update for ncurses
by opensuse-security＠opensuse.org 14 Jul '17

14 Jul '17

openSUSE Security Update: Recommended update for ncurses ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1882-1 Rating: important References: #1000662 #1046853 #1046858 Cross-References: CVE-2017-10684 CVE-2017-10685 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for ncurses fixes the following issues: Security issues fixed: - CVE-2017-10684: Possible RCE via stack-based buffer overflow in the fmt_entry function. (bsc#1046858) - CVE-2017-10685: Possible RCE with format string vulnerability in the fmt_entry function. (bsc#1046853) Bugfixes: - Drop patch ncurses-5.9-environment.dif as YaST2 ncurses GUI does not need it anymore and as well as it causes bug bsc#1000662 This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-823=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libncurses5-5.9-55.3.1 libncurses5-debuginfo-5.9-55.3.1 libncurses6-5.9-55.3.1 libncurses6-debuginfo-5.9-55.3.1 ncurses-debugsource-5.9-55.3.1 ncurses-devel-5.9-55.3.1 ncurses-devel-debuginfo-5.9-55.3.1 ncurses-utils-5.9-55.3.1 ncurses-utils-debuginfo-5.9-55.3.1 tack-5.9-55.3.1 tack-debuginfo-5.9-55.3.1 terminfo-5.9-55.3.1 terminfo-base-5.9-55.3.1 - openSUSE Leap 42.2 (x86_64): libncurses5-32bit-5.9-55.3.1 libncurses5-debuginfo-32bit-5.9-55.3.1 libncurses6-32bit-5.9-55.3.1 libncurses6-debuginfo-32bit-5.9-55.3.1 ncurses-devel-32bit-5.9-55.3.1 ncurses-devel-debuginfo-32bit-5.9-55.3.1 References: https://www.suse.com/security/cve/CVE-2017-10684.html https://www.suse.com/security/cve/CVE-2017-10685.html https://bugzilla.suse.com/1000662 https://bugzilla.suse.com/1046853 https://bugzilla.suse.com/1046858

1 0

openSUSE-RU-2017:1881-1: moderate: Recommended update for kernel-firmware
by maintenance＠opensuse.org 14 Jul '17

14 Jul '17

openSUSE Recommended Update: Recommended update for kernel-firmware ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1881-1 Rating: moderate References: #1045856 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kernel-firmware reverts Intel's OPA hfi1 firmware to production signed v0.47. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-819=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): kernel-firmware-20170530-7.6.1 ucode-amd-20170530-7.6.1 References: https://bugzilla.suse.com/1045856

1 0

openSUSE-RU-2017:1880-1: Recommended update for mcelog
by maintenance＠opensuse.org 14 Jul '17

14 Jul '17

openSUSE Recommended Update: Recommended update for mcelog ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1880-1 Rating: low References: #1011385 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mcelog fixes the following issues: - Server does not start because it assumed it is already running. (boo#1011385) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-816=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): mcelog-1.20-5.3.1 mcelog-debuginfo-1.20-5.3.1 mcelog-debugsource-1.20-5.3.1 References: https://bugzilla.suse.com/1011385

1 0

openSUSE-RU-2017:1879-1: moderate: Recommended update for openssh
by maintenance＠opensuse.org 14 Jul '17

14 Jul '17

openSUSE Recommended Update: Recommended update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1879-1 Rating: moderate References: #1016709 #1017099 #1023275 #1024251 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for openssh provides the following fixes: - Enable specific ioctl calls for ICA crypto card on the zSeries platform. Without this patch, users using the IBMCA engine are not able to perform ssh login as the filter blocks the communication with the crypto card. (bsc#1016709) - Enable case-insensitive hostname matching. (bsc#1017099) - Add a new switch for printing diagnostic messages in sftp client's batch mode. (bsc#1023275) - Better fix for core dumps from auditing code when trying to bind to an unavailable port. (bsc#1024251) - Remove the limit on the amount of tasks sshd can run. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-817=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): openssh-7.2p2-11.3.1 openssh-askpass-gnome-7.2p2-11.3.1 openssh-askpass-gnome-debuginfo-7.2p2-11.3.1 openssh-cavs-7.2p2-11.3.1 openssh-cavs-debuginfo-7.2p2-11.3.1 openssh-debuginfo-7.2p2-11.3.1 openssh-debugsource-7.2p2-11.3.1 openssh-fips-7.2p2-11.3.1 openssh-helpers-7.2p2-11.3.1 openssh-helpers-debuginfo-7.2p2-11.3.1 References: https://bugzilla.suse.com/1016709 https://bugzilla.suse.com/1017099 https://bugzilla.suse.com/1023275 https://bugzilla.suse.com/1024251

1 0

openSUSE-RU-2017:1878-1: moderate: Recommended update for libquicktime
by maintenance＠opensuse.org 14 Jul '17

14 Jul '17

openSUSE Recommended Update: Recommended update for libquicktime ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1878-1 Rating: moderate References: #1022805 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libquicktime fixes the following issues: - prevent endless loop situations with a previous security update (boo#1022805) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-818=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libquicktime-debugsource-1.2.4cvs20150223-8.6.1 libquicktime-devel-1.2.4cvs20150223-8.6.1 libquicktime-tools-1.2.4cvs20150223-8.6.1 libquicktime-tools-debuginfo-1.2.4cvs20150223-8.6.1 libquicktime0-1.2.4cvs20150223-8.6.1 libquicktime0-debuginfo-1.2.4cvs20150223-8.6.1 - openSUSE Leap 42.2 (x86_64): libquicktime0-32bit-1.2.4cvs20150223-8.6.1 libquicktime0-debuginfo-32bit-1.2.4cvs20150223-8.6.1 References: https://bugzilla.suse.com/1022805

1 0

openSUSE-RU-2017:1877-1: moderate: Recommended update for binutils
by maintenance＠opensuse.org 14 Jul '17

14 Jul '17

openSUSE Recommended Update: Recommended update for binutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1877-1 Rating: moderate References: #1031508 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for binutils fixes an issue that prevented ld(1) from correctly linking the 32 bit version of libclntshcore.so.12.1 from the Oracle 12 Client. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-820=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): binutils-2.26.1-9.3.1 binutils-debuginfo-2.26.1-9.3.1 binutils-debugsource-2.26.1-9.3.1 binutils-devel-2.26.1-9.3.1 binutils-gold-2.26.1-9.3.1 binutils-gold-debuginfo-2.26.1-9.3.1 cross-aarch64-binutils-2.26.1-9.3.1 cross-aarch64-binutils-debuginfo-2.26.1-9.3.1 cross-aarch64-binutils-debugsource-2.26.1-9.3.1 cross-arm-binutils-2.26.1-9.3.1 cross-arm-binutils-debuginfo-2.26.1-9.3.1 cross-arm-binutils-debugsource-2.26.1-9.3.1 cross-avr-binutils-2.26.1-9.3.1 cross-avr-binutils-debuginfo-2.26.1-9.3.1 cross-avr-binutils-debugsource-2.26.1-9.3.1 cross-hppa-binutils-2.26.1-9.3.1 cross-hppa-binutils-debuginfo-2.26.1-9.3.1 cross-hppa-binutils-debugsource-2.26.1-9.3.1 cross-hppa64-binutils-2.26.1-9.3.1 cross-hppa64-binutils-debuginfo-2.26.1-9.3.1 cross-hppa64-binutils-debugsource-2.26.1-9.3.1 cross-ia64-binutils-2.26.1-9.3.1 cross-ia64-binutils-debuginfo-2.26.1-9.3.1 cross-ia64-binutils-debugsource-2.26.1-9.3.1 cross-m68k-binutils-2.26.1-9.3.1 cross-m68k-binutils-debuginfo-2.26.1-9.3.1 cross-m68k-binutils-debugsource-2.26.1-9.3.1 cross-mips-binutils-2.26.1-9.3.1 cross-mips-binutils-debuginfo-2.26.1-9.3.1 cross-mips-binutils-debugsource-2.26.1-9.3.1 cross-ppc-binutils-2.26.1-9.3.1 cross-ppc-binutils-debuginfo-2.26.1-9.3.1 cross-ppc-binutils-debugsource-2.26.1-9.3.1 cross-ppc64-binutils-2.26.1-9.3.1 cross-ppc64-binutils-debuginfo-2.26.1-9.3.1 cross-ppc64-binutils-debugsource-2.26.1-9.3.1 cross-ppc64le-binutils-2.26.1-9.3.1 cross-ppc64le-binutils-debuginfo-2.26.1-9.3.1 cross-ppc64le-binutils-debugsource-2.26.1-9.3.1 cross-s390-binutils-2.26.1-9.3.1 cross-s390-binutils-debuginfo-2.26.1-9.3.1 cross-s390-binutils-debugsource-2.26.1-9.3.1 cross-s390x-binutils-2.26.1-9.3.1 cross-s390x-binutils-debuginfo-2.26.1-9.3.1 cross-s390x-binutils-debugsource-2.26.1-9.3.1 cross-sparc-binutils-2.26.1-9.3.1 cross-sparc-binutils-debuginfo-2.26.1-9.3.1 cross-sparc-binutils-debugsource-2.26.1-9.3.1 cross-sparc64-binutils-2.26.1-9.3.1 cross-sparc64-binutils-debuginfo-2.26.1-9.3.1 cross-sparc64-binutils-debugsource-2.26.1-9.3.1 cross-spu-binutils-2.26.1-9.3.1 cross-spu-binutils-debuginfo-2.26.1-9.3.1 cross-spu-binutils-debugsource-2.26.1-9.3.1 - openSUSE Leap 42.2 (x86_64): binutils-devel-32bit-2.26.1-9.3.1 cross-i386-binutils-2.26.1-9.3.1 cross-i386-binutils-debuginfo-2.26.1-9.3.1 cross-i386-binutils-debugsource-2.26.1-9.3.1 - openSUSE Leap 42.2 (i586): cross-x86_64-binutils-2.26.1-9.3.1 cross-x86_64-binutils-debuginfo-2.26.1-9.3.1 cross-x86_64-binutils-debugsource-2.26.1-9.3.1 References: https://bugzilla.suse.com/1031508

1 0

openSUSE-RU-2017:1876-1: moderate: Recommended update for gnuhealth
by maintenance＠opensuse.org 14 Jul '17

14 Jul '17

openSUSE Recommended Update: Recommended update for gnuhealth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1876-1 Rating: moderate References: #1047594 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnuhealth fixes the following issues: - gnuhealth was unable to install additional languages (bsc#1047594) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-814=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): gnuhealth-3.0.8-11.9.1 trytond-3.8.13-9.12.1 References: https://bugzilla.suse.com/1047594

1 0

openSUSE-SU-2017:1875-1: moderate: Security update for gnutls
by opensuse-security＠opensuse.org 14 Jul '17

14 Jul '17

openSUSE Security Update: Security update for gnutls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1875-1 Rating: moderate References: #1034173 #1038337 #1043398 Cross-References: CVE-2017-7507 CVE-2017-7869 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for gnutls fixes the following issues: - GNUTLS-SA-2017-4 / CVE-2017-7507: Fix crash in status response TLS extension decoding (bsc#1043398) - GNUTLS-SA-2017-3 / CVE-2017-7869: Fix out-of-bounds write in OpenPGP certificate decoding (bsc#1034173) - Address read of 4 bytes past the end of buffer in OpenPGP certificate parsing (bsc#1038337) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-824=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gnutls-3.2.15-11.3.1 gnutls-debuginfo-3.2.15-11.3.1 gnutls-debugsource-3.2.15-11.3.1 libgnutls-devel-3.2.15-11.3.1 libgnutls-openssl-devel-3.2.15-11.3.1 libgnutls-openssl27-3.2.15-11.3.1 libgnutls-openssl27-debuginfo-3.2.15-11.3.1 libgnutls28-3.2.15-11.3.1 libgnutls28-debuginfo-3.2.15-11.3.1 libgnutlsxx-devel-3.2.15-11.3.1 libgnutlsxx28-3.2.15-11.3.1 libgnutlsxx28-debuginfo-3.2.15-11.3.1 - openSUSE Leap 42.2 (x86_64): libgnutls-devel-32bit-3.2.15-11.3.1 libgnutls28-32bit-3.2.15-11.3.1 libgnutls28-debuginfo-32bit-3.2.15-11.3.1 References: https://www.suse.com/security/cve/CVE-2017-7507.html https://www.suse.com/security/cve/CVE-2017-7869.html https://bugzilla.suse.com/1034173 https://bugzilla.suse.com/1038337 https://bugzilla.suse.com/1043398

1 0