September 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:2527-1: Recommended update for ktorrent
by maintenance＠opensuse.org 20 Sep '17

20 Sep '17

openSUSE Recommended Update: Recommended update for ktorrent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2527-1 Rating: low References: #1002948 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ktorrent fixes the following issues: - Empty tip of the day was shown (boo#1002948) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1076=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1076=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): ktorrent-5.0.1-9.1 ktorrent-debuginfo-5.0.1-9.1 ktorrent-debugsource-5.0.1-9.1 - openSUSE Leap 42.3 (noarch): ktorrent-lang-5.0.1-9.1 - openSUSE Leap 42.2 (noarch): ktorrent-lang-5.0.1-5.6.1 - openSUSE Leap 42.2 (x86_64): ktorrent-5.0.1-5.6.1 ktorrent-debuginfo-5.0.1-5.6.1 ktorrent-debugsource-5.0.1-5.6.1 References: https://bugzilla.suse.com/1002948

1 0

openSUSE-RU-2017:2524-1: Recommended update for clamav-database
by maintenance＠opensuse.org 18 Sep '17

18 Sep '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2524-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh September 18th 2017. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1075=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201709180007-54.82.1 References:

1 0

openSUSE-RU-2017:2520-1: moderate: Recommended update for ktorrent
by maintenance＠opensuse.org 18 Sep '17

18 Sep '17

openSUSE Recommended Update: Recommended update for ktorrent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2520-1 Rating: moderate References: #1002948 #1040379 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ktorrent fixes the following issues: - Empty tip of the day was shown (boo#1002948) - Crash when enabling the scheduler plug-in (boo#1040379) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1074=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): ktorrent-5.0.1-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): ktorrent-lang-5.0.1-5.1 References: https://bugzilla.suse.com/1002948 https://bugzilla.suse.com/1040379

1 0

openSUSE-RU-2017:2516-1: moderate: Recommended update for sg3_utils
by maintenance＠opensuse.org 17 Sep '17

17 Sep '17

openSUSE Recommended Update: Recommended update for sg3_utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2516-1 Rating: moderate References: #1005063 #1009269 #1012523 #1025176 #1050767 #1050943 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for sg3_utils provides the following fixes: - Add lunsearch filter to findresized() so that only LUNs specified using --luns are rescanned or resized. (bsc#1025176) - In case the VPD sysfs attributes are missing or cannot be accessed, fallback to use sg_inq --page when using multipath devices in AutoYast2 installations. (bsc#1012523) - Generate /dev/disk/by-path links based on WWPN for Fibre Channel NPIV setups. (bsc#1005063) - Fix dumping data in hexadecimal format in sg_vpd when using the --hex option. (bsc#1050943) - Fix ID_SERIAL values for KVM disks by exporting all NAA values and removing some validity checking. (bsc#1050767) - Make sure initrd is rebuilt on sg3_utils updates. (bsc#1009269) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1070=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1070=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libsgutils-devel-1.43-12.1 libsgutils2-2-1.43-12.1 libsgutils2-2-debuginfo-1.43-12.1 sg3_utils-1.43-12.1 sg3_utils-debuginfo-1.43-12.1 sg3_utils-debugsource-1.43-12.1 - openSUSE Leap 42.2 (i586 x86_64): libsgutils-devel-1.43-9.4.1 libsgutils2-2-1.43-9.4.1 libsgutils2-2-debuginfo-1.43-9.4.1 sg3_utils-1.43-9.4.1 sg3_utils-debuginfo-1.43-9.4.1 sg3_utils-debugsource-1.43-9.4.1 References: https://bugzilla.suse.com/1005063 https://bugzilla.suse.com/1009269 https://bugzilla.suse.com/1012523 https://bugzilla.suse.com/1025176 https://bugzilla.suse.com/1050767 https://bugzilla.suse.com/1050943

1 0

openSUSE-RU-2017:2515-1: Recommended update for drbd-utils
by maintenance＠opensuse.org 17 Sep '17

17 Sep '17

openSUSE Recommended Update: Recommended update for drbd-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2515-1 Rating: low References: #1048671 #1052352 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for drbd-utils provides the following fixes: - Make sure the legacy xmdomain.cfg configuration format works properly fixing the usage of libvirt and xen. (bsc#1052352) - Fix the stacking of resources on handlers like "before-resync-target" when called from kernel space. (bsc#1048671) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1073=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): drbd-utils-9.0.0-3.1 drbd-utils-debuginfo-9.0.0-3.1 drbd-utils-debugsource-9.0.0-3.1 References: https://bugzilla.suse.com/1048671 https://bugzilla.suse.com/1052352

1 0

openSUSE-SU-2017:2514-1: important: Security update for xen
by opensuse-security＠opensuse.org 17 Sep '17

17 Sep '17

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2514-1 Rating: important References: #1027519 #1055695 #1056278 #1056280 #1056281 #1056282 #1057358 Cross-References: CVE-2017-14316 CVE-2017-14317 CVE-2017-14318 CVE-2017-14319 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves four vulnerabilities and has three fixes is now available. Description: This update for xen fixes several issues. These security issues were fixed: - CVE-2017-14316: Missing bound check in function `alloc_heap_pages` for an internal array allowed attackers using crafted hypercalls to execute arbitrary code within Xen (XSA-231, bsc#1056278) - CVE-2017-14318: The function __gnttab_cache_flush missed a check for grant tables, allowing a malicious guest to crash the host or for x86 PV guests to potentially escalate privileges (XSA-232, bsc#1056280) - CVE-2017-14317: A race in cxenstored may have cause a double-free allowind for DoS of the xenstored daemon (XSA-233, bsc#1056281). - CVE-2017-14319: An error while handling grant mappings allowed malicious or buggy x86 PV guest to escalate its privileges or crash the hypervisor (XSA-234, bsc#1056282). These non-security issues were fixed: - bsc#1057358: Fixed boot into SUSE Linux Enterprise 12.3 with secure boot - bsc#1055695: Fixed restoring updates for HVM guests for ballooned domUs This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1071=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): xen-4.9.0_12-7.1 xen-debugsource-4.9.0_12-7.1 xen-devel-4.9.0_12-7.1 xen-doc-html-4.9.0_12-7.1 xen-libs-4.9.0_12-7.1 xen-libs-debuginfo-4.9.0_12-7.1 xen-tools-4.9.0_12-7.1 xen-tools-debuginfo-4.9.0_12-7.1 xen-tools-domU-4.9.0_12-7.1 xen-tools-domU-debuginfo-4.9.0_12-7.1 References: https://www.suse.com/security/cve/CVE-2017-14316.html https://www.suse.com/security/cve/CVE-2017-14317.html https://www.suse.com/security/cve/CVE-2017-14318.html https://www.suse.com/security/cve/CVE-2017-14319.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1055695 https://bugzilla.suse.com/1056278 https://bugzilla.suse.com/1056280 https://bugzilla.suse.com/1056281 https://bugzilla.suse.com/1056282 https://bugzilla.suse.com/1057358

1 0

openSUSE-SU-2017:2513-1: important: Security update for qemu
by opensuse-security＠opensuse.org 17 Sep '17

17 Sep '17

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2513-1 Rating: important References: #1011144 #1031692 #1046636 #1047674 #1048296 #1048902 #1049381 #1050268 Cross-References: CVE-2017-10664 CVE-2017-10806 CVE-2017-11334 CVE-2017-11434 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves four vulnerabilities and has four fixes is now available. Description: This update for qemu fixes the following issues: Security issues fixed: * CVE-2017-10664: Fix DOS vulnerability in qemu-nbd (bsc#1046636) * CVE-2017-10806: Fix DOS from stack overflow in debug messages of usb redirection support (bsc#1047674) * CVE-2017-11334: Fix OOB access during DMA operation (bsc#1048902) * CVE-2017-11434: Fix OOB access parsing dhcp slirp options (bsc#1049381) Following non-security issues were fixed: - Postrequire acl for setfacl - Prerequire shadow for groupadd - The recent security fix for CVE-2017-11334 adversely affects Xen. Include two additional patches to make sure Xen is going to be OK. - Pre-add group kvm for qemu-tools (bsc#1011144) - Fixed a few more inaccuracies in the support docs. - Fix support docs to indicate ARM64 is now fully L3 supported in SLES 12 SP3. Apply a few additional clarifications in the support docs. (bsc#1050268) - Adjust to libvdeplug-devel package naming changes. - Fix migration with xhci (bsc#1048296) - Increase VNC delay to fix missing keyboard input events (bsc#1031692) - Remove build dependency package iasl used for seabios This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1072=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): qemu-linux-user-2.9.0-32.1 qemu-linux-user-debuginfo-2.9.0-32.1 qemu-linux-user-debugsource-2.9.0-32.1 - openSUSE Leap 42.3 (x86_64): qemu-2.9.0-32.4 qemu-arm-2.9.0-32.4 qemu-arm-debuginfo-2.9.0-32.4 qemu-block-curl-2.9.0-32.4 qemu-block-curl-debuginfo-2.9.0-32.4 qemu-block-dmg-2.9.0-32.4 qemu-block-dmg-debuginfo-2.9.0-32.4 qemu-block-iscsi-2.9.0-32.4 qemu-block-iscsi-debuginfo-2.9.0-32.4 qemu-block-rbd-2.9.0-32.4 qemu-block-rbd-debuginfo-2.9.0-32.4 qemu-block-ssh-2.9.0-32.4 qemu-block-ssh-debuginfo-2.9.0-32.4 qemu-debugsource-2.9.0-32.4 qemu-extra-2.9.0-32.4 qemu-extra-debuginfo-2.9.0-32.4 qemu-guest-agent-2.9.0-32.4 qemu-guest-agent-debuginfo-2.9.0-32.4 qemu-ksm-2.9.0-32.4 qemu-kvm-2.9.0-32.4 qemu-lang-2.9.0-32.4 qemu-ppc-2.9.0-32.4 qemu-ppc-debuginfo-2.9.0-32.4 qemu-s390-2.9.0-32.4 qemu-s390-debuginfo-2.9.0-32.4 qemu-testsuite-2.9.0-32.4 qemu-tools-2.9.0-32.4 qemu-tools-debuginfo-2.9.0-32.4 qemu-x86-2.9.0-32.4 qemu-x86-debuginfo-2.9.0-32.4 - openSUSE Leap 42.3 (noarch): qemu-ipxe-1.0.0-32.4 qemu-seabios-1.10.2-32.4 qemu-sgabios-8-32.4 qemu-vgabios-1.10.2-32.4 References: https://www.suse.com/security/cve/CVE-2017-10664.html https://www.suse.com/security/cve/CVE-2017-10806.html https://www.suse.com/security/cve/CVE-2017-11334.html https://www.suse.com/security/cve/CVE-2017-11434.html https://bugzilla.suse.com/1011144 https://bugzilla.suse.com/1031692 https://bugzilla.suse.com/1046636 https://bugzilla.suse.com/1047674 https://bugzilla.suse.com/1048296 https://bugzilla.suse.com/1048902 https://bugzilla.suse.com/1049381 https://bugzilla.suse.com/1050268

1 0

openSUSE-RU-2017:2512-1: Recommended update for at
by maintenance＠opensuse.org 17 Sep '17

17 Sep '17

openSUSE Recommended Update: Recommended update for at ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2512-1 Rating: low References: #988890 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for at fixes the following issues: - The systemd atd.service will now run After=nss-user-lookup.target not after systemd-user-sessions.service - Make systemd atd.service run After=time-sync.target (bsc#988890) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1069=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1069=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): at-3.1.14-14.1 at-debuginfo-3.1.14-14.1 at-debugsource-3.1.14-14.1 - openSUSE Leap 42.2 (i586 x86_64): at-3.1.14-11.3.1 at-debuginfo-3.1.14-11.3.1 at-debugsource-3.1.14-11.3.1 References: https://bugzilla.suse.com/988890

1 0

openSUSE-RU-2017:2504-1: important: Recommended update for virtualbox
by maintenance＠opensuse.org 15 Sep '17

15 Sep '17

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2504-1 Rating: important References: #1033425 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for virtualbox fixes the following issues: - VirtualBox would fail if VBoxNetNAT was selected due to missing setuid (boo#1033425) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1066=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1066=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): virtualbox-guest-desktop-icons-5.1.26-31.1 virtualbox-guest-source-5.1.26-31.1 virtualbox-host-source-5.1.26-31.1 - openSUSE Leap 42.3 (x86_64): python-virtualbox-5.1.26-31.1 python-virtualbox-debuginfo-5.1.26-31.1 virtualbox-5.1.26-31.1 virtualbox-debuginfo-5.1.26-31.1 virtualbox-debugsource-5.1.26-31.1 virtualbox-devel-5.1.26-31.1 virtualbox-guest-kmp-default-5.1.26_k4.4.85_22-31.1 virtualbox-guest-kmp-default-debuginfo-5.1.26_k4.4.85_22-31.1 virtualbox-guest-tools-5.1.26-31.1 virtualbox-guest-tools-debuginfo-5.1.26-31.1 virtualbox-guest-x11-5.1.26-31.1 virtualbox-guest-x11-debuginfo-5.1.26-31.1 virtualbox-host-kmp-default-5.1.26_k4.4.85_22-31.1 virtualbox-host-kmp-default-debuginfo-5.1.26_k4.4.85_22-31.1 virtualbox-qt-5.1.26-31.1 virtualbox-qt-debuginfo-5.1.26-31.1 virtualbox-vnc-5.1.26-31.1 virtualbox-websrv-5.1.26-31.1 virtualbox-websrv-debuginfo-5.1.26-31.1 - openSUSE Leap 42.2 (noarch): virtualbox-guest-desktop-icons-5.1.26-19.38.1 virtualbox-guest-source-5.1.26-19.38.1 virtualbox-host-source-5.1.26-19.38.1 - openSUSE Leap 42.2 (x86_64): python-virtualbox-5.1.26-19.38.1 python-virtualbox-debuginfo-5.1.26-19.38.1 virtualbox-5.1.26-19.38.1 virtualbox-debuginfo-5.1.26-19.38.1 virtualbox-debugsource-5.1.26-19.38.1 virtualbox-devel-5.1.26-19.38.1 virtualbox-guest-kmp-default-5.1.26_k4.4.79_18.26-19.38.1 virtualbox-guest-kmp-default-debuginfo-5.1.26_k4.4.79_18.26-19.38.1 virtualbox-guest-tools-5.1.26-19.38.1 virtualbox-guest-tools-debuginfo-5.1.26-19.38.1 virtualbox-guest-x11-5.1.26-19.38.1 virtualbox-guest-x11-debuginfo-5.1.26-19.38.1 virtualbox-host-kmp-default-5.1.26_k4.4.79_18.26-19.38.1 virtualbox-host-kmp-default-debuginfo-5.1.26_k4.4.79_18.26-19.38.1 virtualbox-qt-5.1.26-19.38.1 virtualbox-qt-debuginfo-5.1.26-19.38.1 virtualbox-vnc-5.1.26-19.38.1 virtualbox-websrv-5.1.26-19.38.1 virtualbox-websrv-debuginfo-5.1.26-19.38.1 References: https://bugzilla.suse.com/1033425

1 0

openSUSE-SU-2017:2502-1: important: Security update for ffmpeg, ffmpeg2
by opensuse-security＠opensuse.org 15 Sep '17

15 Sep '17

openSUSE Security Update: Security update for ffmpeg, ffmpeg2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2502-1 Rating: important References: #1015120 #1022920 #1022921 #1022922 #1034176 #1034177 #1034179 #1046211 #1049095 #1056760 #1056761 #1056762 #1056763 #1056765 #1056766 #1057536 #1057537 #1057539 #1058018 #1058019 #1058020 Cross-References: CVE-2016-10190 CVE-2016-10191 CVE-2016-10192 CVE-2016-9561 CVE-2017-11399 CVE-2017-14054 CVE-2017-14055 CVE-2017-14056 CVE-2017-14057 CVE-2017-14058 CVE-2017-14059 CVE-2017-14169 CVE-2017-14170 CVE-2017-14171 CVE-2017-14222 CVE-2017-14223 CVE-2017-14225 CVE-2017-7863 CVE-2017-7865 CVE-2017-7866 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves 20 vulnerabilities and has one errata is now available. Description: This update introduces lame and twolame. For ffmpeg2 it updates to version 2.8.13 and fixes several issues. These security issues were fixed: - CVE-2017-14058: The read_data function in libavformat/hls.c did not restrict reload attempts for an insufficient list, which allowed remote attackers to cause a denial of service (infinite loop) (bsc#1056762). - CVE-2017-14057: In asf_read_marker() due to lack of an EOF (End of File) check might have caused huge CPU and memory consumption. When a crafted ASF file, which claims a large "name_len" or "count" field in the header but did not contain sufficient backing data, was provided, the loops over the name and markers would consume huge CPU and memory resources, since there is no EOF check inside these loops (bsc#1056761). - CVE-2017-14059: A DoS in cine_read_header() due to lack of an EOF check might have caused huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but did not contain sufficient backing data, was provided, the image-offset parsing loop would consume huge CPU and memory resources, since there is no EOF check inside the loop (bsc#1056763). - CVE-2017-14056: A DoS in rl2_read_header() due to lack of an EOF (End of File) check might have caused huge CPU and memory consumption. When a crafted RL2 file, which claims a large "frame_count" field in the header but did not contain sufficient backing data, was provided, the loops (for offset and size tables) would consume huge CPU and memory resources, since there is no EOF check inside these loops (bsc#1056760). - CVE-2017-14055: a DoS in mv_read_header() due to lack of an EOF (End of File) check might have caused huge CPU and memory consumption. When a crafted MV file, which claims a large "nb_frames" field in the header but did not contain sufficient backing data, was provided, the loop over the frames would consume huge CPU and memory resources, since there is no EOF check inside the loop (bsc#1056766). - boo#1046211: Lots of integer overflow fixes - CVE-2016-9561: The che_configure function in libavcodec/aacdec_template.c in FFmpeg allowed remote attackers to cause a denial of service (allocation of huge memory, and being killed by the OS) via a crafted MOV file (boo#1015120) - CVE-2017-7863: FFmpeg had an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame_common function in libavcodec/pngdec.c (boo#1034179) - CVE-2017-7865: FFmpeg had an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideo_decode_block_opcode_0xA function in libavcodec/interplayvideo.c and the avcodec_align_dimensions2 function in libavcodec/utils.c (boo#1034177) - CVE-2017-7866: FFmpeg had an out-of-bounds write caused by a stack-based buffer overflow related to the decode_zbuf function in libavcodec/pngdec.c (boo#1034176) - CVE-2016-10190: Heap-based buffer overflow in libavformat/http.c in FFmpeg allowed remote web servers to execute arbitrary code via a negative chunk size in an HTTP response (boo#1022920) - CVE-2016-10191: Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg allowed remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches (boo#1022921) - CVE-2016-10192: Heap-based buffer overflow in ffserver.c in FFmpeg allowed remote attackers to execute arbitrary code by leveraging failure to check chunk size (boo#1022922) - CVE-2017-14169: In the mxf_read_primer_pack function an integer signedness error have might occured when a crafted file, which claims a large "item_num" field such as 0xffffffff, was provided. As a result, the variable "item_num" turns negative, bypassing the check for a large value (bsc#1057536). - CVE-2017-14170: Prevent DoS in mxf_read_index_entry_array() due to lack of an EOF (End of File) check that might have caused huge CPU consumption. When a crafted MXF file, which claims a large "nb_index_entries" field in the header but did not contain sufficient backing data, was provided, the loop would consume huge CPU resources, since there was no EOF check inside the loop. Moreover, this big loop can be invoked multiple times if there is more than one applicable data segment in the crafted MXF file (bsc#1057537). - CVE-2017-14171: Prevent DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check taht might have caused huge CPU consumption. When a crafted NSV file, which claims a large "table_entries_used" field in the header but did not contain sufficient backing data, was provided, the loop over 'table_entries_used' would consume huge CPU resources, since there was no EOF check inside the loop (bsc#1057539). - CVE-2017-14223: Prevent DoS in asf_build_simple_index() due to lack of an EOF (End of File) check that might have caused huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but did not contain sufficient backing data, was provided, the for loop would consume huge CPU and memory resources, since there was no EOF check inside the loop (bsc#1058019) - CVE-2017-14222: Prevent DoS in read_tfra() due to lack of an EOF (End of File) check that might have caused huge CPU and memory consumption. When a crafted MOV file, which claims a large "item_count" field in the header but did not contain sufficient backing data, was provided, the loop would consume huge CPU and memory resources, since there was no EOF check inside the loop (bsc#1058020) These non-security issues were fixed: - Unconditionalize celt, ass, openjpeg, webp, libva, vdpau. - Build unconditionally with lame and twolame - Enable AC3 and MP3 decoding to match multimedia:libs/ffmpeg (3.x) For ffmpeg it updates to version 3.3.4 and fixes several issues. These security issues were fixed: - CVE-2017-14225: The av_color_primaries_name function may have returned a NULL pointer depending on a value contained in a file, but callers did not anticipate this, leading to a NULL pointer dereference (bsc#1058018). - CVE-2017-14223: Prevent DoS in asf_build_simple_index() due to lack of an EOF (End of File) check that might have caused huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but did not contain sufficient backing data, was provided, the for loop would consume huge CPU and memory resources, since there was no EOF check inside the loop (bsc#1058019). - CVE-2017-14222: Prevent DoS in read_tfra() due to lack of an EOF (End of File) check that might have caused huge CPU and memory consumption. When a crafted MOV file, which claims a large "item_count" field in the header but did not contain sufficient backing data, was provided, the loop would consume huge CPU and memory resources, since there was no EOF check inside the loop (bsc#1058020). - CVE-2017-14058: The read_data function in libavformat/hls.c did not restrict reload attempts for an insufficient list, which allowed remote attackers to cause a denial of service (infinite loop) (bsc#1056762) - CVE-2017-14057: In asf_read_marker() due to lack of an EOF (End of File) check might have caused huge CPU and memory consumption. When a crafted ASF file, which claims a large "name_len" or "count" field in the header but did not contain sufficient backing data, was provided, the loops over the name and markers would consume huge CPU and memory resources, since there is no EOF check inside these loops (bsc#1056761) - CVE-2017-14059: A DoS in cine_read_header() due to lack of an EOF check might have caused huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but did not contain sufficient backing data, was provided, the image-offset parsing loop would consume huge CPU and memory resources, since there is no EOF check inside the loop (bsc#1056763) - CVE-2017-14054: A DoS in ivr_read_header() due to lack of an EOF (End of File) check might have caused huge CPU consumption. When a crafted IVR file, which claims a large "len" field in the header but did not contain sufficient backing data, was provided, the first type==4 loop would consume huge CPU resources, since there is no EOF check inside the loop (bsc#1056765). - CVE-2017-14056: A DoS in rl2_read_header() due to lack of an EOF (End of File) check might have caused huge CPU and memory consumption. When a crafted RL2 file, which claims a large "frame_count" field in the header but did not contain sufficient backing data, was provided, the loops (for offset and size tables) would consume huge CPU and memory resources, since there is no EOF check inside these loops (bsc#1056760) - CVE-2017-14055: a DoS in mv_read_header() due to lack of an EOF (End of File) check might have caused huge CPU and memory consumption. When a crafted MV file, which claims a large "nb_frames" field in the header but did not contain sufficient backing data, was provided, the loop over the frames would consume huge CPU and memory resources, since there is no EOF check inside the loop (bsc#1056766) - CVE-2017-11399: Integer overflow in the ape_decode_frame function allowed remote attackers to cause a denial of service (out-of-array access and application crash) or possibly have unspecified other impact via a crafted APE file (bsc#1049095). - CVE-2017-14171: Prevent DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check taht might have caused huge CPU consumption. When a crafted NSV file, which claims a large "table_entries_used" field in the header but did not contain sufficient backing data, was provided, the loop over 'table_entries_used' would consume huge CPU resources, since there was no EOF check inside the loop (bsc#1057539) - CVE-2017-14170: Prevent DoS in mxf_read_index_entry_array() due to lack of an EOF (End of File) check that might have caused huge CPU consumption. When a crafted MXF file, which claims a large "nb_index_entries" field in the header but did not contain sufficient backing data, was provided, the loop would consume huge CPU resources, since there was no EOF check inside the loop. Moreover, this big loop can be invoked multiple times if there is more than one applicable data segment in the crafted MXF file (bsc#1057537) - CVE-2017-14169: In the mxf_read_primer_pack function an integer signedness error have might occured when a crafted file, which claims a large "item_num" field such as 0xffffffff, was provided. As a result, the variable "item_num" turns negative, bypassing the check for a large value (bsc#1057536) It also includes various fixes for integer overflows and too-large bit shifts that didn't receive a CVE. These non-security issues were fixed: - Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau. - Build unconditionally with lame and twolame - Enabled cuda and cuvid for unrestricted build. - Add additional checks to ensure MPEG is off Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1067=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): ffmpeg-3.3.4-7.1 ffmpeg-debuginfo-3.3.4-7.1 ffmpeg-debugsource-3.3.4-7.1 ffmpeg2-debugsource-2.8.13-32.1 ffmpeg2-devel-2.8.13-32.1 lame-3.99.5-2.1 lame-debuginfo-3.99.5-2.1 lame-debugsource-3.99.5-2.1 lame-doc-3.99.5-2.1 lame-mp3rtp-3.99.5-2.1 lame-mp3rtp-debuginfo-3.99.5-2.1 libavcodec-devel-3.3.4-7.1 libavcodec56-2.8.13-32.1 libavcodec56-debuginfo-2.8.13-32.1 libavcodec57-3.3.4-7.1 libavcodec57-debuginfo-3.3.4-7.1 libavdevice-devel-3.3.4-7.1 libavdevice56-2.8.13-32.1 libavdevice56-debuginfo-2.8.13-32.1 libavdevice57-3.3.4-7.1 libavdevice57-debuginfo-3.3.4-7.1 libavfilter-devel-3.3.4-7.1 libavfilter5-2.8.13-32.1 libavfilter5-debuginfo-2.8.13-32.1 libavfilter6-3.3.4-7.1 libavfilter6-debuginfo-3.3.4-7.1 libavformat-devel-3.3.4-7.1 libavformat56-2.8.13-32.1 libavformat56-debuginfo-2.8.13-32.1 libavformat57-3.3.4-7.1 libavformat57-debuginfo-3.3.4-7.1 libavresample-devel-3.3.4-7.1 libavresample2-2.8.13-32.1 libavresample2-debuginfo-2.8.13-32.1 libavresample3-3.3.4-7.1 libavresample3-debuginfo-3.3.4-7.1 libavutil-devel-3.3.4-7.1 libavutil54-2.8.13-32.1 libavutil54-debuginfo-2.8.13-32.1 libavutil55-3.3.4-7.1 libavutil55-debuginfo-3.3.4-7.1 libmp3lame-devel-3.99.5-2.1 libmp3lame0-3.99.5-2.1 libmp3lame0-debuginfo-3.99.5-2.1 libpostproc-devel-3.3.4-7.1 libpostproc53-2.8.13-32.1 libpostproc53-debuginfo-2.8.13-32.1 libpostproc54-3.3.4-7.1 libpostproc54-debuginfo-3.3.4-7.1 libswresample-devel-3.3.4-7.1 libswresample1-2.8.13-32.1 libswresample1-debuginfo-2.8.13-32.1 libswresample2-3.3.4-7.1 libswresample2-debuginfo-3.3.4-7.1 libswscale-devel-3.3.4-7.1 libswscale3-2.8.13-32.1 libswscale3-debuginfo-2.8.13-32.1 libswscale4-3.3.4-7.1 libswscale4-debuginfo-3.3.4-7.1 libtwolame-devel-0.3.13-2.1 libtwolame0-0.3.13-2.1 libtwolame0-debuginfo-0.3.13-2.1 twolame-0.3.13-2.1 twolame-debuginfo-0.3.13-2.1 twolame-debugsource-0.3.13-2.1 - openSUSE Leap 42.3 (x86_64): libavcodec56-32bit-2.8.13-32.1 libavcodec56-debuginfo-32bit-2.8.13-32.1 libavcodec57-32bit-3.3.4-7.1 libavcodec57-debuginfo-32bit-3.3.4-7.1 libavdevice56-32bit-2.8.13-32.1 libavdevice56-debuginfo-32bit-2.8.13-32.1 libavdevice57-32bit-3.3.4-7.1 libavdevice57-debuginfo-32bit-3.3.4-7.1 libavfilter5-32bit-2.8.13-32.1 libavfilter5-debuginfo-32bit-2.8.13-32.1 libavfilter6-32bit-3.3.4-7.1 libavfilter6-debuginfo-32bit-3.3.4-7.1 libavformat56-32bit-2.8.13-32.1 libavformat56-debuginfo-32bit-2.8.13-32.1 libavformat57-32bit-3.3.4-7.1 libavformat57-debuginfo-32bit-3.3.4-7.1 libavresample2-32bit-2.8.13-32.1 libavresample2-debuginfo-32bit-2.8.13-32.1 libavresample3-32bit-3.3.4-7.1 libavresample3-debuginfo-32bit-3.3.4-7.1 libavutil54-32bit-2.8.13-32.1 libavutil54-debuginfo-32bit-2.8.13-32.1 libavutil55-32bit-3.3.4-7.1 libavutil55-debuginfo-32bit-3.3.4-7.1 libmp3lame0-32bit-3.99.5-2.1 libmp3lame0-debuginfo-32bit-3.99.5-2.1 libpostproc53-32bit-2.8.13-32.1 libpostproc53-debuginfo-32bit-2.8.13-32.1 libpostproc54-32bit-3.3.4-7.1 libpostproc54-debuginfo-32bit-3.3.4-7.1 libswresample1-32bit-2.8.13-32.1 libswresample1-debuginfo-32bit-2.8.13-32.1 libswresample2-32bit-3.3.4-7.1 libswresample2-debuginfo-32bit-3.3.4-7.1 libswscale3-32bit-2.8.13-32.1 libswscale3-debuginfo-32bit-2.8.13-32.1 libswscale4-32bit-3.3.4-7.1 libswscale4-debuginfo-32bit-3.3.4-7.1 libtwolame0-32bit-0.3.13-2.1 libtwolame0-debuginfo-32bit-0.3.13-2.1 References: https://www.suse.com/security/cve/CVE-2016-10190.html https://www.suse.com/security/cve/CVE-2016-10191.html https://www.suse.com/security/cve/CVE-2016-10192.html https://www.suse.com/security/cve/CVE-2016-9561.html https://www.suse.com/security/cve/CVE-2017-11399.html https://www.suse.com/security/cve/CVE-2017-14054.html https://www.suse.com/security/cve/CVE-2017-14055.html https://www.suse.com/security/cve/CVE-2017-14056.html https://www.suse.com/security/cve/CVE-2017-14057.html https://www.suse.com/security/cve/CVE-2017-14058.html https://www.suse.com/security/cve/CVE-2017-14059.html https://www.suse.com/security/cve/CVE-2017-14169.html https://www.suse.com/security/cve/CVE-2017-14170.html https://www.suse.com/security/cve/CVE-2017-14171.html https://www.suse.com/security/cve/CVE-2017-14222.html https://www.suse.com/security/cve/CVE-2017-14223.html https://www.suse.com/security/cve/CVE-2017-14225.html https://www.suse.com/security/cve/CVE-2017-7863.html https://www.suse.com/security/cve/CVE-2017-7865.html https://www.suse.com/security/cve/CVE-2017-7866.html https://bugzilla.suse.com/1015120 https://bugzilla.suse.com/1022920 https://bugzilla.suse.com/1022921 https://bugzilla.suse.com/1022922 https://bugzilla.suse.com/1034176 https://bugzilla.suse.com/1034177 https://bugzilla.suse.com/1034179 https://bugzilla.suse.com/1046211 https://bugzilla.suse.com/1049095 https://bugzilla.suse.com/1056760 https://bugzilla.suse.com/1056761 https://bugzilla.suse.com/1056762 https://bugzilla.suse.com/1056763 https://bugzilla.suse.com/1056765 https://bugzilla.suse.com/1056766 https://bugzilla.suse.com/1057536 https://bugzilla.suse.com/1057537 https://bugzilla.suse.com/1057539 https://bugzilla.suse.com/1058018 https://bugzilla.suse.com/1058019 https://bugzilla.suse.com/1058020

1 0