September 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:2596-1: Recommended update for xinetd
by maintenance＠opensuse.org 29 Sep '17

29 Sep '17

openSUSE Recommended Update: Recommended update for xinetd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2596-1 Rating: low References: #1054532 #943484 #947475 #972691 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for xinetd provides the following fixes: - Specifying multiple log targets in the configuration caused a crash in xinetd, so make sure this is not allowed and in case of misconfiguration handle it correctly. (bsc#1054532) - Fix a race condition that was causing xinetd not to be running after receiving a SIGHUP and a call to bind() failing with error EADDRINUSE. The fix exposes a sysconfig variable named XINETD_BIND_DELAY that can be used to delay calls to bind(). (bsc#972691) - Fix an error that was causing a failure in xinetd when trying to fallback from IPv6 to IPv4. (bsc#947475) - Update the documentation about the maximum allowed size of server parameters. (bsc#943484) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1102=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1102=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): xinetd-2.3.15-13.1 xinetd-debuginfo-2.3.15-13.1 xinetd-debugsource-2.3.15-13.1 - openSUSE Leap 42.2 (i586 x86_64): xinetd-2.3.15-10.3.1 xinetd-debuginfo-2.3.15-10.3.1 xinetd-debugsource-2.3.15-10.3.1 References: https://bugzilla.suse.com/1054532 https://bugzilla.suse.com/943484 https://bugzilla.suse.com/947475 https://bugzilla.suse.com/972691

1 0

openSUSE-SU-2017:2595-1: moderate: Security update for vlc
by opensuse-security＠opensuse.org 29 Sep '17

29 Sep '17

openSUSE Security Update: Security update for vlc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2595-1 Rating: moderate References: #1041907 #1057736 Cross-References: CVE-2017-9300 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for vlc fixes several issues. This security issue was fixed: - CVE-2017-9300: Heap corruption allowed remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted FLAC file (bsc#1041907). These non-security issues were fixed: - Stop depending on libkde4-devel: It's only used to find the install path for kde4, but configure falls back to the correct default for openSUSE anyway (boo#1057736). - Disable vnc access module Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1100=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): vlc-lang-2.2.6-3.1 - openSUSE Leap 42.3 (x86_64): libvlc5-2.2.6-3.1 libvlc5-debuginfo-2.2.6-3.1 libvlccore8-2.2.6-3.1 libvlccore8-debuginfo-2.2.6-3.1 vlc-2.2.6-3.1 vlc-codec-gstreamer-2.2.6-3.1 vlc-codec-gstreamer-debuginfo-2.2.6-3.1 vlc-debuginfo-2.2.6-3.1 vlc-debugsource-2.2.6-3.1 vlc-devel-2.2.6-3.1 vlc-noX-2.2.6-3.1 vlc-noX-debuginfo-2.2.6-3.1 vlc-qt-2.2.6-3.1 vlc-qt-debuginfo-2.2.6-3.1 References: https://www.suse.com/security/cve/CVE-2017-9300.html https://bugzilla.suse.com/1041907 https://bugzilla.suse.com/1057736

1 0

openSUSE-SU-2017:2594-1: moderate: Security update for fmpeg
by opensuse-security＠opensuse.org 29 Sep '17

29 Sep '17

openSUSE Security Update: Security update for fmpeg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2594-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for ffmpeg to version 3.3.4 fixes a number of security issues and bugs. This update also adds lame, twolame and SDL2 to the PackageHub as dependencies. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1099=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): ffmpeg-3.3.4-11.1 lame-3.99.5-2.2 lame-debuginfo-3.99.5-2.2 lame-debugsource-3.99.5-2.2 lame-doc-3.99.5-2.2 lame-mp3rtp-3.99.5-2.2 lame-mp3rtp-debuginfo-3.99.5-2.2 libSDL2-2_0-0-2.0.5-2.1 libSDL2-devel-2.0.5-2.1 libavcodec-devel-3.3.4-11.1 libavcodec57-3.3.4-11.1 libavdevice-devel-3.3.4-11.1 libavdevice57-3.3.4-11.1 libavfilter-devel-3.3.4-11.1 libavfilter6-3.3.4-11.1 libavformat-devel-3.3.4-11.1 libavformat57-3.3.4-11.1 libavresample-devel-3.3.4-11.1 libavresample3-3.3.4-11.1 libavutil-devel-3.3.4-11.1 libavutil55-3.3.4-11.1 libmp3lame-devel-3.99.5-2.2 libmp3lame0-3.99.5-2.2 libmp3lame0-debuginfo-3.99.5-2.2 libpostproc-devel-3.3.4-11.1 libpostproc54-3.3.4-11.1 libswresample-devel-3.3.4-11.1 libswresample2-3.3.4-11.1 libswscale-devel-3.3.4-11.1 libswscale4-3.3.4-11.1 libtwolame-devel-0.3.13-2.2 libtwolame0-0.3.13-2.2 libtwolame0-debuginfo-0.3.13-2.2 twolame-0.3.13-2.2 twolame-debuginfo-0.3.13-2.2 twolame-debugsource-0.3.13-2.2 References:

1 0

openSUSE-RU-2017:2588-1: moderate: Recommended update for amarok
by maintenance＠opensuse.org 27 Sep '17

27 Sep '17

openSUSE Recommended Update: Recommended update for amarok ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2588-1 Rating: moderate References: #1049512 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for amarok fixes the following issues: - Provide mp3 playback by default for users. (boo#1049512) - Fix a possible crash when looking up metadata on MusicBrainz (kde#328359) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1094=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): amarok-2.8.0-5.1 amarok-debuginfo-2.8.0-5.1 amarok-debugsource-2.8.0-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): amarok-lang-2.8.0-5.1 References: https://bugzilla.suse.com/1049512

1 0

openSUSE-RU-2017:2587-1: moderate: Recommended update for bitlbee-facebook
by maintenance＠opensuse.org 27 Sep '17

27 Sep '17

openSUSE Recommended Update: Recommended update for bitlbee-facebook ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2587-1 Rating: moderate References: #1058997 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for bitlbee-facebook contains the following fixes: - Fix connection errors with Facebook - various fixes for chat and messaging functions Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1093=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1093=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): bitlbee-facebook-1.1.2-5.1 bitlbee-facebook-debuginfo-1.1.2-5.1 bitlbee-facebook-debugsource-1.1.2-5.1 - openSUSE Leap 42.2 (x86_64): bitlbee-facebook-1.1.2-2.3.1 bitlbee-facebook-debuginfo-1.1.2-2.3.1 bitlbee-facebook-debugsource-1.1.2-2.3.1 References: https://bugzilla.suse.com/1058997

1 0

openSUSE-OU-2017:2585-1: Optional update for mysql-connector-cpp
by maintenance＠opensuse.org 27 Sep '17

27 Sep '17

openSUSE Optional Update: Optional update for mysql-connector-cpp ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:2585-1 Rating: low References: #838038 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This optional update for mysql-connector-cpp fixes the following issue: - libmysqlcppconn-devel did not require boost-devel (boo#838038) Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1096=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1096=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libmysqlcppconn-devel-1.1.8-8.1 libmysqlcppconn7-1.1.8-8.1 libmysqlcppconn7-debuginfo-1.1.8-8.1 mysql-connector-cpp-debugsource-1.1.8-8.1 - openSUSE Leap 42.2 (i586 x86_64): libmysqlcppconn-devel-1.1.8-5.6.1 libmysqlcppconn7-1.1.8-5.6.1 libmysqlcppconn7-debuginfo-1.1.8-5.6.1 mysql-connector-cpp-debugsource-1.1.8-5.6.1 References: https://bugzilla.suse.com/838038

1 0

openSUSE-RU-2017:2584-1: moderate: Recommended update for openjpeg
by maintenance＠opensuse.org 27 Sep '17

27 Sep '17

openSUSE Recommended Update: Recommended update for openjpeg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2584-1 Rating: moderate References: #1029609 #1059440 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for openjpeg fixes the following issue: - Programs linked with libopenjpeg1 would expose non-standard math behavior due to usage of -ffast-math in openjpeg (boo#1029609, boo#1059440) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1097=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1097=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libopenjpeg1-1.5.2-10.1 libopenjpeg1-debuginfo-1.5.2-10.1 openjpeg-1.5.2-10.1 openjpeg-debuginfo-1.5.2-10.1 openjpeg-debugsource-1.5.2-10.1 openjpeg-devel-1.5.2-10.1 - openSUSE Leap 42.3 (x86_64): libopenjpeg1-32bit-1.5.2-10.1 libopenjpeg1-debuginfo-32bit-1.5.2-10.1 openjpeg-devel-32bit-1.5.2-10.1 - openSUSE Leap 42.2 (i586 x86_64): libopenjpeg1-1.5.2-7.3.1 libopenjpeg1-debuginfo-1.5.2-7.3.1 openjpeg-1.5.2-7.3.1 openjpeg-debuginfo-1.5.2-7.3.1 openjpeg-debugsource-1.5.2-7.3.1 openjpeg-devel-1.5.2-7.3.1 - openSUSE Leap 42.2 (x86_64): libopenjpeg1-32bit-1.5.2-7.3.1 libopenjpeg1-debuginfo-32bit-1.5.2-7.3.1 openjpeg-devel-32bit-1.5.2-7.3.1 References: https://bugzilla.suse.com/1029609 https://bugzilla.suse.com/1059440

1 0

openSUSE-RU-2017:2581-1: moderate: Recommended update for yast2-rear
by maintenance＠opensuse.org 27 Sep '17

27 Sep '17

openSUSE Recommended Update: Recommended update for yast2-rear ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2581-1 Rating: moderate References: #1051340 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-rear provides the following fix: - Fix the RPM package by adding some missing files. (bsc#1051340) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1098=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): yast2-rear-3.2.1-3.1 References: https://bugzilla.suse.com/1051340

1 0

openSUSE-RU-2017:2580-1: moderate: Recommended update for acct
by maintenance＠opensuse.org 27 Sep '17

27 Sep '17

openSUSE Recommended Update: Recommended update for acct ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2580-1 Rating: moderate References: #1053528 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for acct fixes the following issue: - The acct.service file contained a chmod without an absolute path, causing it to be ignored (boo#1053528) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1095=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1095=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): acct-6.6.2-12.1 acct-debuginfo-6.6.2-12.1 acct-debugsource-6.6.2-12.1 - openSUSE Leap 42.2 (i586 x86_64): acct-6.6.2-9.3.1 acct-debuginfo-6.6.2-9.3.1 acct-debugsource-6.6.2-9.3.1 References: https://bugzilla.suse.com/1053528

1 0

openSUSE-RU-2017:2579-1: moderate: Recommended update for amarok
by maintenance＠opensuse.org 27 Sep '17

27 Sep '17

openSUSE Recommended Update: Recommended update for amarok ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2579-1 Rating: moderate References: #1049512 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for amarok fixes the following issues: - Provide mp3 playback by default for users. (boo#1049512) - Fix a possible crash when looking up metadata on MusicBrainz (kde#328359) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1094=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): amarok-lang-2.8.0-19.1 - openSUSE Leap 42.3 (x86_64): amarok-2.8.0-19.1 amarok-debuginfo-2.8.0-19.1 amarok-debugsource-2.8.0-19.1 References: https://bugzilla.suse.com/1049512

1 0