August 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:2195-1: Recommended update for messagelib
by maintenance＠opensuse.org 16 Aug '17

16 Aug '17

openSUSE Recommended Update: Recommended update for messagelib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2195-1 Rating: low References: #1013838 #1052482 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for messagelib fixes the following issues: - Fix umlauts and other special characters when a mail is exported as html for print preview and printing via an external browser. (bnc#1052482) - Fix jumping to the next unread mail if the space key is pressed at the bottom of a mail. (bnc#1013838) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-933=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): messagelib-16.08.2-8.1 messagelib-devel-16.08.2-8.1 References: https://bugzilla.suse.com/1013838 https://bugzilla.suse.com/1052482

1 0

openSUSE-RU-2017:2194-1: important: Recommended update for drm
by maintenance＠opensuse.org 16 Aug '17

16 Aug '17

openSUSE Recommended Update: Recommended update for drm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2194-1 Rating: important References: #1048155 #1050256 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for drm fixes the following issues: - GPU hang on Intel GPUs (bsc#1050256) - large topology support for vmwgfx (bsc#1048155) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-931=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): drm-debugsource-4.9.33-5.2 drm-kmp-default-4.9.33_k4.4.79_4-5.2 drm-kmp-default-debuginfo-4.9.33_k4.4.79_4-5.2 References: https://bugzilla.suse.com/1048155 https://bugzilla.suse.com/1050256

1 0

openSUSE-RU-2017:2193-1: Recommended update for sed
by maintenance＠opensuse.org 16 Aug '17

16 Aug '17

openSUSE Recommended Update: Recommended update for sed ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2193-1 Rating: low References: #954661 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sed provides the following fixes: - Don't terminate with a segmentation fault if close of last file descriptor fails. (bsc#954661) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-945=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-945=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): sed-4.2.2-11.1 sed-debuginfo-4.2.2-11.1 sed-debugsource-4.2.2-11.1 - openSUSE Leap 42.3 (noarch): sed-lang-4.2.2-11.1 - openSUSE Leap 42.2 (i586 x86_64): sed-4.2.2-8.3.1 sed-debuginfo-4.2.2-8.3.1 sed-debugsource-4.2.2-8.3.1 - openSUSE Leap 42.2 (noarch): sed-lang-4.2.2-8.3.1 References: https://bugzilla.suse.com/954661

1 0

openSUSE-SU-2017:2192-1: moderate: Security update for minicom
by opensuse-security＠opensuse.org 16 Aug '17

16 Aug '17

openSUSE Security Update: Security update for minicom ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2192-1 Rating: moderate References: #1033783 Cross-References: CVE-2017-7467 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for minicom fixes the following issue: This security issue was fixed: - CVE-2017-7467: Invalid cursor coordinates and scroll regions could lead to code execution (bsc#1033783). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-947=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-947=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): minicom-lang-2.7-8.1 - openSUSE Leap 42.3 (x86_64): minicom-2.7-8.1 minicom-debuginfo-2.7-8.1 minicom-debugsource-2.7-8.1 - openSUSE Leap 42.2 (x86_64): minicom-2.7-5.3.1 minicom-debuginfo-2.7-5.3.1 minicom-debugsource-2.7-5.3.1 - openSUSE Leap 42.2 (noarch): minicom-lang-2.7-5.3.1 References: https://www.suse.com/security/cve/CVE-2017-7467.html https://bugzilla.suse.com/1033783

1 0

openSUSE-RU-2017:2191-1: important: Recommended update for systemd
by maintenance＠opensuse.org 16 Aug '17

16 Aug '17

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2191-1 Rating: important References: #1048679 #874665 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - compat-rules: Don't rely on ID_SERIAL when generating 'by-id' links for NVMe devices. (bsc#1048679) - fstab-generator: Handle NFS "bg" mounts correctly. (bsc#874665, fate#323464) - timesyncd: Don't use compiled-in list if FallbackNTP has been configured explicitly. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-950=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-950=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libsystemd0-228-32.2 libsystemd0-debuginfo-228-32.2 libsystemd0-mini-228-32.2 libsystemd0-mini-debuginfo-228-32.2 libudev-devel-228-32.2 libudev-mini-devel-228-32.2 libudev-mini1-228-32.2 libudev-mini1-debuginfo-228-32.2 libudev1-228-32.2 libudev1-debuginfo-228-32.2 nss-myhostname-228-32.2 nss-myhostname-debuginfo-228-32.2 nss-mymachines-228-32.2 nss-mymachines-debuginfo-228-32.2 systemd-228-32.2 systemd-debuginfo-228-32.2 systemd-debugsource-228-32.2 systemd-devel-228-32.2 systemd-logger-228-32.2 systemd-mini-228-32.2 systemd-mini-debuginfo-228-32.2 systemd-mini-debugsource-228-32.2 systemd-mini-devel-228-32.2 systemd-mini-sysvinit-228-32.2 systemd-sysvinit-228-32.2 udev-228-32.2 udev-debuginfo-228-32.2 udev-mini-228-32.2 udev-mini-debuginfo-228-32.2 - openSUSE Leap 42.3 (noarch): systemd-bash-completion-228-32.2 systemd-mini-bash-completion-228-32.2 - openSUSE Leap 42.3 (x86_64): libsystemd0-32bit-228-32.2 libsystemd0-debuginfo-32bit-228-32.2 libudev1-32bit-228-32.2 libudev1-debuginfo-32bit-228-32.2 nss-myhostname-32bit-228-32.2 nss-myhostname-debuginfo-32bit-228-32.2 systemd-32bit-228-32.2 systemd-debuginfo-32bit-228-32.2 - openSUSE Leap 42.2 (i586 x86_64): libsystemd0-228-25.12.1 libsystemd0-debuginfo-228-25.12.1 libsystemd0-mini-228-25.12.1 libsystemd0-mini-debuginfo-228-25.12.1 libudev-devel-228-25.12.1 libudev-mini-devel-228-25.12.1 libudev-mini1-228-25.12.1 libudev-mini1-debuginfo-228-25.12.1 libudev1-228-25.12.1 libudev1-debuginfo-228-25.12.1 nss-myhostname-228-25.12.1 nss-myhostname-debuginfo-228-25.12.1 nss-mymachines-228-25.12.1 nss-mymachines-debuginfo-228-25.12.1 systemd-228-25.12.1 systemd-debuginfo-228-25.12.1 systemd-debugsource-228-25.12.1 systemd-devel-228-25.12.1 systemd-logger-228-25.12.1 systemd-mini-228-25.12.1 systemd-mini-debuginfo-228-25.12.1 systemd-mini-debugsource-228-25.12.1 systemd-mini-devel-228-25.12.1 systemd-mini-sysvinit-228-25.12.1 systemd-sysvinit-228-25.12.1 udev-228-25.12.1 udev-debuginfo-228-25.12.1 udev-mini-228-25.12.1 udev-mini-debuginfo-228-25.12.1 - openSUSE Leap 42.2 (noarch): systemd-bash-completion-228-25.12.1 systemd-mini-bash-completion-228-25.12.1 - openSUSE Leap 42.2 (x86_64): libsystemd0-32bit-228-25.12.1 libsystemd0-debuginfo-32bit-228-25.12.1 libudev1-32bit-228-25.12.1 libudev1-debuginfo-32bit-228-25.12.1 nss-myhostname-32bit-228-25.12.1 nss-myhostname-debuginfo-32bit-228-25.12.1 systemd-32bit-228-25.12.1 systemd-debuginfo-32bit-228-25.12.1 References: https://bugzilla.suse.com/1048679 https://bugzilla.suse.com/874665

1 0

openSUSE-SU-2017:2190-1: Security update for libxml2
by opensuse-security＠opensuse.org 16 Aug '17

16 Aug '17

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2190-1 Rating: low References: #1038444 Cross-References: CVE-2017-8872 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libxml2 fixes the following security issue: - CVE-2017-8872: Out-of-bounds read in htmlParseTryOrFinish. (bsc#1038444) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-942=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-942=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libxml2-2-2.9.4-12.1 libxml2-2-debuginfo-2.9.4-12.1 libxml2-debugsource-2.9.4-12.1 libxml2-devel-2.9.4-12.1 libxml2-tools-2.9.4-12.1 libxml2-tools-debuginfo-2.9.4-12.1 python-libxml2-2.9.4-12.1 python-libxml2-debuginfo-2.9.4-12.1 python-libxml2-debugsource-2.9.4-12.1 - openSUSE Leap 42.3 (x86_64): libxml2-2-32bit-2.9.4-12.1 libxml2-2-debuginfo-32bit-2.9.4-12.1 libxml2-devel-32bit-2.9.4-12.1 - openSUSE Leap 42.3 (noarch): libxml2-doc-2.9.4-12.1 - openSUSE Leap 42.2 (i586 x86_64): libxml2-2-2.9.4-5.17.1 libxml2-2-debuginfo-2.9.4-5.17.1 libxml2-debugsource-2.9.4-5.17.1 libxml2-devel-2.9.4-5.17.1 libxml2-tools-2.9.4-5.17.1 libxml2-tools-debuginfo-2.9.4-5.17.1 python-libxml2-2.9.4-5.17.1 python-libxml2-debuginfo-2.9.4-5.17.1 python-libxml2-debugsource-2.9.4-5.17.1 - openSUSE Leap 42.2 (noarch): libxml2-doc-2.9.4-5.17.1 - openSUSE Leap 42.2 (x86_64): libxml2-2-32bit-2.9.4-5.17.1 libxml2-2-debuginfo-32bit-2.9.4-5.17.1 libxml2-devel-32bit-2.9.4-5.17.1 References: https://www.suse.com/security/cve/CVE-2017-8872.html https://bugzilla.suse.com/1038444

1 0

openSUSE-RU-2017:2189-1: Recommended update for sysdig
by maintenance＠opensuse.org 16 Aug '17

16 Aug '17

openSUSE Recommended Update: Recommended update for sysdig ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2189-1 Rating: low References: #1051562 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides a new version of sysdig fixes and various improvements and bug fixes: * New features: + Support netlink sockets. + Support for Kernel 4.11. + Decode unshare syscall. * Bug fixes: + Fix a bug on cgroups parsing that prevented sysdig to start. + Allow sysdig to read k8s state from very large k8s environments. + Improve compatibility with older linux kernels. + Improve rkt detection by checking the existence of files into /var/lib/rkt. + Fix rkt detection for containers created before sysdig runs. + Fix container detection if docker itself is running inside a container. + Fix detection of lxc containers. + Fix memory leak on spy_users chisel. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-935=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-935=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): sysdig-0.17.0-8.8 sysdig-debuginfo-0.17.0-8.8 sysdig-debugsource-0.17.0-8.8 sysdig-kmp-default-0.17.0_k4.4.79_4-8.8 sysdig-kmp-default-debuginfo-0.17.0_k4.4.79_4-8.8 - openSUSE Leap 42.2 (x86_64): sysdig-0.17.0-5.6.8 sysdig-debuginfo-0.17.0-5.6.8 sysdig-debugsource-0.17.0-5.6.8 sysdig-kmp-default-0.17.0_k4.4.79_18.23-5.6.8 sysdig-kmp-default-debuginfo-0.17.0_k4.4.79_18.23-5.6.8 References: https://bugzilla.suse.com/1051562

1 0

openSUSE-SU-2017:2188-1: moderate: Security update for fossil
by opensuse-security＠opensuse.org 16 Aug '17

16 Aug '17

openSUSE Security Update: Security update for fossil ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2188-1 Rating: moderate References: #1053267 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for fossil to version 2.3 fixes the following issues: - Potential XSS vulnerability on the /help webpage (boo#1053267) This update also contains all upstream improvements and fixes in version 2.3: - Update internal Unicode character tables, used in regular expression handling, from version 9.0 to 10.0. - Show the last-sync-URL on the /urllist page - Added the "Event Summary" activity report - Added the "Security Audit" page, available to administrators only - Added the Last Login time to the user list page, for administrators only - Added the --numstat option to the fossil diff command - Limit the size of the heap and stack on unix systems, as a proactive defense against the Stack Clash attack - Fix "database locked" warnings caused by "PRAGMA optimize" - Documentation updates Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-949=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): fossil-2.3-3.1 fossil-debuginfo-2.3-3.1 fossil-debugsource-2.3-3.1 References: https://bugzilla.suse.com/1053267

1 0

openSUSE-SU-2017:2186-1: important: Security update for openjpeg2
by opensuse-security＠opensuse.org 16 Aug '17

16 Aug '17

openSUSE Security Update: Security update for openjpeg2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2186-1 Rating: important References: #979907 #997857 Cross-References: CVE-2015-8871 CVE-2016-7163 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for openjpeg2 fixes the following issues: - CVE 2016-7163: Integer Overflow could lead to remote code execution (bsc#997857) - CVE 2015-8871: Use-after-free in opj_j2k_write_mco function could lead to denial of service (bsc#979907) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-943=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-943=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libopenjp2-7-2.1.0-16.1 libopenjp2-7-debuginfo-2.1.0-16.1 openjpeg2-2.1.0-16.1 openjpeg2-debuginfo-2.1.0-16.1 openjpeg2-debugsource-2.1.0-16.1 openjpeg2-devel-2.1.0-16.1 - openSUSE Leap 42.3 (x86_64): libopenjp2-7-32bit-2.1.0-16.1 libopenjp2-7-debuginfo-32bit-2.1.0-16.1 - openSUSE Leap 42.2 (i586 x86_64): libopenjp2-7-2.1.0-13.3.1 libopenjp2-7-debuginfo-2.1.0-13.3.1 openjpeg2-2.1.0-13.3.1 openjpeg2-debuginfo-2.1.0-13.3.1 openjpeg2-debugsource-2.1.0-13.3.1 openjpeg2-devel-2.1.0-13.3.1 - openSUSE Leap 42.2 (x86_64): libopenjp2-7-32bit-2.1.0-13.3.1 libopenjp2-7-debuginfo-32bit-2.1.0-13.3.1 References: https://www.suse.com/security/cve/CVE-2015-8871.html https://www.suse.com/security/cve/CVE-2016-7163.html https://bugzilla.suse.com/979907 https://bugzilla.suse.com/997857

1 0

openSUSE-SU-2017:2185-1: moderate: Security update for taglib
by opensuse-security＠opensuse.org 16 Aug '17

16 Aug '17

openSUSE Security Update: Security update for taglib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2185-1 Rating: moderate References: #1052699 Cross-References: CVE-2017-12678 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for taglib fixes the following issues: - CVE-2017-12678: Denial of service vulnerability via specially crafted ID3v2 data (boo#1052699) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-938=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-938=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libtag-devel-1.11-5.1 libtag1-1.11-5.1 libtag1-debuginfo-1.11-5.1 libtag_c0-1.11-5.1 libtag_c0-debuginfo-1.11-5.1 taglib-1.11-5.1 taglib-debuginfo-1.11-5.1 taglib-debugsource-1.11-5.1 - openSUSE Leap 42.3 (x86_64): libtag1-32bit-1.11-5.1 libtag1-debuginfo-32bit-1.11-5.1 libtag_c0-32bit-1.11-5.1 libtag_c0-debuginfo-32bit-1.11-5.1 - openSUSE Leap 42.2 (i586 x86_64): libtag-devel-1.11-2.3.1 libtag1-1.11-2.3.1 libtag1-debuginfo-1.11-2.3.1 libtag_c0-1.11-2.3.1 libtag_c0-debuginfo-1.11-2.3.1 taglib-1.11-2.3.1 taglib-debuginfo-1.11-2.3.1 taglib-debugsource-1.11-2.3.1 - openSUSE Leap 42.2 (x86_64): libtag1-32bit-1.11-2.3.1 libtag1-debuginfo-32bit-1.11-2.3.1 libtag_c0-32bit-1.11-2.3.1 libtag_c0-debuginfo-32bit-1.11-2.3.1 References: https://www.suse.com/security/cve/CVE-2017-12678.html https://bugzilla.suse.com/1052699

1 0