February 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2018:0519-1: moderate: Security update for libdb-4_5
by opensuse-security＠opensuse.org 22 Feb '18

22 Feb '18

openSUSE Security Update: Security update for libdb-4_5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0519-1 Rating: moderate References: #1043886 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for libdb-4_5 fixes the following issues: - A DB_CONFIG file in the current working directory allowed local users to obtain sensitive information via a symlink attack involving a setgid or setuid application using libdb-4_5. (bsc#1043886) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-200=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): db45-utils-4.5.20-135.3.1 libdb-4_5-4.5.20-135.3.1 libdb-4_5-debuginfo-4.5.20-135.3.1 libdb-4_5-debugsource-4.5.20-135.3.1 libdb-4_5-devel-4.5.20-135.3.1 libdb_java-4_5-4.5.20-135.3.1 libdb_java-4_5-debuginfo-4.5.20-135.3.1 libdb_java-4_5-debugsource-4.5.20-135.3.1 libdb_java-4_5-devel-4.5.20-135.3.1 - openSUSE Leap 42.3 (x86_64): libdb-4_5-32bit-4.5.20-135.3.1 libdb-4_5-debuginfo-32bit-4.5.20-135.3.1 libdb-4_5-devel-32bit-4.5.20-135.3.1 - openSUSE Leap 42.3 (noarch): db45-doc-4.5.20-135.3.1 db45-utils-doc-4.5.20-135.3.1 References: https://bugzilla.suse.com/1043886

1 0

openSUSE-RU-2018:0518-1: moderate: Recommended update for osc
by maintenance＠opensuse.org 22 Feb '18

22 Feb '18

openSUSE Recommended Update: Recommended update for osc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0518-1 Rating: moderate References: #1079083 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for osc fixes the following issues: osc was updated to 0.162.1, fixing: - Send sha256 hashes for tracked files if the wc is pulled/linkrepair (bsc#1079083) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-198=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): osc-0.162.1-13.1 References: https://bugzilla.suse.com/1079083

1 0

openSUSE-SU-2018:0517-1: moderate: Security update for xv
by opensuse-security＠opensuse.org 21 Feb '18

21 Feb '18

openSUSE Security Update: Security update for xv ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0517-1 Rating: moderate References: #1043479 Affected Products: openSUSE Leap 42.3:NonFree ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for xv fixes the following issues: - Specially crafted images may have caused xv to crash (boo#1043479) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3:NonFree: zypper in -t patch openSUSE-2018-197=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3:NonFree (i586 x86_64): xv-3.10a-1280.3.1 xv-debuginfo-3.10a-1280.3.1 xv-debugsource-3.10a-1280.3.1 References: https://bugzilla.suse.com/1043479

1 0

openSUSE-SU-2018:0504-1: moderate: Security update for libXcursor
by opensuse-security＠opensuse.org 21 Feb '18

21 Feb '18

openSUSE Security Update: Security update for libXcursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0504-1 Rating: moderate References: #1065386 Cross-References: CVE-2017-16612 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libXcursor fixes the following issues: * CVE-2017-16612: It is possible to trigger heap overflows due to an integer overflow while parsing images and a signedness issue while parsing comments. (boo#1065386) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-196=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libXcursor-debugsource-1.1.14-10.3.1 libXcursor-devel-1.1.14-10.3.1 libXcursor1-1.1.14-10.3.1 libXcursor1-debuginfo-1.1.14-10.3.1 - openSUSE Leap 42.3 (x86_64): libXcursor-devel-32bit-1.1.14-10.3.1 libXcursor1-32bit-1.1.14-10.3.1 libXcursor1-debuginfo-32bit-1.1.14-10.3.1 References: https://www.suse.com/security/cve/CVE-2017-16612.html https://bugzilla.suse.com/1065386

1 0

openSUSE-RU-2018:0503-1: moderate: Recommended update for messagelib
by maintenance＠opensuse.org 20 Feb '18

20 Feb '18

openSUSE Recommended Update: Recommended update for messagelib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0503-1 Rating: moderate References: #1078174 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for messagelib fixes the following issue: - The "Disable Emoticons" option was remembered in kmail/PIM (boo#1078174) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-194=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): messagelib-lang-17.04.2-6.1 - openSUSE Leap 42.3 (x86_64): messagelib-17.04.2-6.1 messagelib-debuginfo-17.04.2-6.1 messagelib-debugsource-17.04.2-6.1 messagelib-devel-17.04.2-6.1 References: https://bugzilla.suse.com/1078174

1 0

openSUSE-RU-2018:0502-1: moderate: Recommended update for plasma5-integration
by maintenance＠opensuse.org 20 Feb '18

20 Feb '18

openSUSE Recommended Update: Recommended update for plasma5-integration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0502-1 Rating: moderate References: #1081045 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for plasma5-integration fixes the following issues: - The context menu of tray icons did not support submenus (boo#1081045) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-192=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): plasma5-integration-plugin-lang-5.9.4-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): plasma5-integration-debugsource-5.9.4-5.1 plasma5-integration-plugin-5.9.4-5.1 plasma5-integration-plugin-debuginfo-5.9.4-5.1 References: https://bugzilla.suse.com/1081045

1 0

openSUSE-RU-2018:0501-1: Recommended update for sk1
by maintenance＠opensuse.org 20 Feb '18

20 Feb '18

openSUSE Recommended Update: Recommended update for sk1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0501-1 Rating: low References: #1081289 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sk1 fixes the following issues: - The package did not specify the run-time requirement python2-tk (boo#1081289) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-193=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): sk1-0.9.1pre_rev730-33.3.1 sk1-debuginfo-0.9.1pre_rev730-33.3.1 sk1-debugsource-0.9.1pre_rev730-33.3.1 References: https://bugzilla.suse.com/1081289

1 0

openSUSE-RU-2018:0500-1: moderate: Recommended update for mlmmj
by maintenance＠opensuse.org 20 Feb '18

20 Feb '18

openSUSE Recommended Update: Recommended update for mlmmj ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0500-1 Rating: moderate References: #1081432 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mlmmj fixes the following issues: - mlmmj templates were double utf-8 encoded (poo#31546, boo#1081432) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-195=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): mlmmj-1.2.19.0-7.3.1 mlmmj-debuginfo-1.2.19.0-7.3.1 mlmmj-debugsource-1.2.19.0-7.3.1 References: https://bugzilla.suse.com/1081432

1 0

openSUSE-RU-2018:0499-1: moderate: Recommended update for plasma5-integration
by maintenance＠opensuse.org 20 Feb '18

20 Feb '18

openSUSE Recommended Update: Recommended update for plasma5-integration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:0499-1 Rating: moderate References: #1081045 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for plasma5-integration fixes the following issues: - The context menu of tray icons did not support submenus (boo#1081045) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-192=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): plasma5-integration-plugin-lang-5.9.4-4.3.1 - openSUSE Leap 42.3 (x86_64): plasma5-integration-debugsource-5.9.4-4.3.1 plasma5-integration-plugin-5.9.4-4.3.1 plasma5-integration-plugin-debuginfo-5.9.4-4.3.1 References: https://bugzilla.suse.com/1081045

1 0

openSUSE-SU-2018:0498-1: moderate: Security update for transfig
by opensuse-security＠opensuse.org 20 Feb '18

20 Feb '18

openSUSE Security Update: Security update for transfig ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0498-1 Rating: moderate References: #1069257 Cross-References: CVE-2017-16899 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for transfig fixes the following issues: * CVE-2017-16899: Do some input sanitizing when reading FIG files to avoid crashes (boo#1069257) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-190=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): transfig-3.2.5e-7.3.1 transfig-debuginfo-3.2.5e-7.3.1 transfig-debugsource-3.2.5e-7.3.1 References: https://www.suse.com/security/cve/CVE-2017-16899.html https://bugzilla.suse.com/1069257

1 0