November 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:2145-1: moderate: Recommended update for wicked
by maintenance＠opensuse.org 30 Nov '15

30 Nov '15

openSUSE Recommended Update: Recommended update for wicked ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2145-1 Rating: moderate References: #953107 #954289 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: wicked was updated to fix several bugs: - fsm: dynamically resolve references and requirements (bsc#954289) - nanny: do not pull in and rearm subordinate workers (bsc#954289) - nanny: fix managed policy list handling (bsc#953107) - ifup: do not update policy when it has been created and recheck with a name filter list instead to enable separately to avoid a race condition (bsc#953107) - ovs: do not require link on ovs-system device Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-834=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libwicked-0-6-0.6.28-3.1 libwicked-0-6-debuginfo-0.6.28-3.1 wicked-0.6.28-3.1 wicked-debuginfo-0.6.28-3.1 wicked-debugsource-0.6.28-3.1 wicked-service-0.6.28-3.1 References: https://bugzilla.suse.com/953107 https://bugzilla.suse.com/954289

1 0

openSUSE-RU-2015:2142-1: Recommended update for yast2-bootloader
by maintenance＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Recommended Update: Recommended update for yast2-bootloader ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2142-1 Rating: low References: #952823 #955216 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The YaST2 Bootloader module was updated to 3.1.161 to fix: - Fixed crash in bootloader proposal if previous installation was on software RAID (bsc#955216) - Do not show raid0 warning for /boot on s390 and ppc architectures (bnc#952823) Also updates rubygem-yast-rake to as a dependency (boo#956146) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-829=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ruby2.1-rubygem-yast-rake-0.2.5-5.1 ruby2.1-rubygem-yast-rake-doc-0.2.5-5.1 yast2-bootloader-3.1.161-3.1 yast2-bootloader-devel-doc-3.1.161-3.1 References: https://bugzilla.suse.com/952823 https://bugzilla.suse.com/955216

1 0

openSUSE-RU-2015:2137-1: moderate: Recommended update for tasque
by maintenance＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Recommended Update: Recommended update for tasque ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2137-1 Rating: moderate References: #955052 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tasque fixes the following issue: - Add Requires: mono-data-sqlite to fix a crash (boo#955052) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-822=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-822=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-822=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): tasque-0.1.12-10.1 - openSUSE Leap 42.1 (noarch): tasque-lang-0.1.12-10.1 - openSUSE 13.2 (i586 x86_64): tasque-0.1.12-7.3.1 - openSUSE 13.2 (noarch): tasque-lang-0.1.12-7.3.1 - openSUSE 13.1 (i586 x86_64): tasque-0.1.12-5.3.1 - openSUSE 13.1 (noarch): tasque-lang-0.1.12-5.3.1 References: https://bugzilla.suse.com/955052

1 0

openSUSE-SU-2015:2136-1: moderate: Security update for libpng12
by opensuse-security＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Security Update: Security update for libpng12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2136-1 Rating: moderate References: #952051 #954980 Cross-References: CVE-2015-7981 CVE-2015-8126 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The libpng12 package was updated to fix the following security issues: - CVE-2015-8126: Fixed a buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions (bsc#954980). - CVE-2015-7981: Fixed an out-of-bound read (bsc#952051). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-826=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libpng12-0-1.2.50-5.1 libpng12-0-debuginfo-1.2.50-5.1 libpng12-compat-devel-1.2.50-5.1 libpng12-debugsource-1.2.50-5.1 libpng12-devel-1.2.50-5.1 - openSUSE Leap 42.1 (x86_64): libpng12-0-32bit-1.2.50-5.1 libpng12-0-debuginfo-32bit-1.2.50-5.1 libpng12-compat-devel-32bit-1.2.50-5.1 libpng12-devel-32bit-1.2.50-5.1 References: https://www.suse.com/security/cve/CVE-2015-7981.html https://www.suse.com/security/cve/CVE-2015-8126.html https://bugzilla.suse.com/952051 https://bugzilla.suse.com/954980

1 0

openSUSE-SU-2015:2135-1: moderate: Security update for libpng16
by opensuse-security＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Security Update: Security update for libpng16 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2135-1 Rating: moderate References: #954980 Cross-References: CVE-2015-8126 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The libpng16 package was updated to fix the following security issue: - CVE-2015-8126: Fixed a buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions (bsc#954980). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-825=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libpng16-16-1.6.8-4.1 libpng16-16-debuginfo-1.6.8-4.1 libpng16-compat-devel-1.6.8-4.1 libpng16-debugsource-1.6.8-4.1 libpng16-devel-1.6.8-4.1 libpng16-tools-1.6.8-4.1 libpng16-tools-debuginfo-1.6.8-4.1 - openSUSE Leap 42.1 (x86_64): libpng16-16-32bit-1.6.8-4.1 libpng16-16-debuginfo-32bit-1.6.8-4.1 libpng16-compat-devel-32bit-1.6.8-4.1 libpng16-devel-32bit-1.6.8-4.1 References: https://www.suse.com/security/cve/CVE-2015-8126.html https://bugzilla.suse.com/954980

1 0

openSUSE-RU-2015:2133-1: Recommended update for os-prober
by maintenance＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Recommended Update: Recommended update for os-prober ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2133-1 Rating: low References: #931955 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes os-prober to not attempt to mount btrfs snapshots. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-817=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): os-prober-1.61-15.1 os-prober-debuginfo-1.61-15.1 os-prober-debugsource-1.61-15.1 References: https://bugzilla.suse.com/931955

1 0

openSUSE-RU-2015:2132-1: moderate: Recommended update for xf86-video-savage
by maintenance＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Recommended Update: Recommended update for xf86-video-savage ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2132-1 Rating: moderate References: #857141 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xf86-video-savage fixes the following issues: - Fix build against xorg-server 1.15 - Update to version 2.3.7 (boo#857141) + Small bugfix for video playback on MX/IX/SuperSavage + Usual catch-up to the ever-changing xserver, build and run on 1.14, and default to EXA now that the xserver does not support XAA anymore. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-812=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): xf86-video-savage-2.3.7-7.3.1 xf86-video-savage-debuginfo-2.3.7-7.3.1 xf86-video-savage-debugsource-2.3.7-7.3.1 References: https://bugzilla.suse.com/857141

1 0

openSUSE-SU-2015:2130-1: moderate: cyrus-imapd
by opensuse-security＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Security Update: cyrus-imapd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2130-1 Rating: moderate References: #954200 #954201 Cross-References: CVE-2015-8077 CVE-2015-8078 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The cyrus-imapd package was updated to fix two security issues. - CVE-2015-8077: Integer overflow in range checks (bnc#954200) - CVE-2015-8078: Integer overflow in index_urlfetch (bnc#954201) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-828=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-828=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): cyradm-2.4.18-3.1 cyrus-imapd-2.4.18-3.1 cyrus-imapd-debuginfo-2.4.18-3.1 cyrus-imapd-debugsource-2.4.18-3.1 cyrus-imapd-devel-2.4.18-3.1 cyrus-imapd-snmp-2.4.18-3.1 cyrus-imapd-snmp-mibs-2.4.18-3.1 cyrus-imapd-utils-2.4.18-3.1 perl-Cyrus-IMAP-2.4.18-3.1 perl-Cyrus-IMAP-debuginfo-2.4.18-3.1 perl-Cyrus-SIEVE-managesieve-2.4.18-3.1 perl-Cyrus-SIEVE-managesieve-debuginfo-2.4.18-3.1 - openSUSE 13.2 (i586 x86_64): cyradm-2.4.18-2.10.1 cyrus-imapd-2.4.18-2.10.1 cyrus-imapd-debuginfo-2.4.18-2.10.1 cyrus-imapd-debugsource-2.4.18-2.10.1 cyrus-imapd-devel-2.4.18-2.10.1 cyrus-imapd-snmp-2.4.18-2.10.1 cyrus-imapd-snmp-mibs-2.4.18-2.10.1 cyrus-imapd-utils-2.4.18-2.10.1 perl-Cyrus-IMAP-2.4.18-2.10.1 perl-Cyrus-IMAP-debuginfo-2.4.18-2.10.1 perl-Cyrus-SIEVE-managesieve-2.4.18-2.10.1 perl-Cyrus-SIEVE-managesieve-debuginfo-2.4.18-2.10.1 References: https://www.suse.com/security/cve/CVE-2015-8077.html https://www.suse.com/security/cve/CVE-2015-8078.html https://bugzilla.suse.com/954200 https://bugzilla.suse.com/954201

1 0

openSUSE-RU-2015:2129-1: moderate: Recommended update for xf86-video-intel
by maintenance＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Recommended Update: Recommended update for xf86-video-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2129-1 Rating: moderate References: #901506 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xf86-video-intel fixes the following issues: - Use default monitor options on the fist output instead of erronously picking the 2nd. This fixes a regression introduced before 2.99.16 (boo#901506). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-824=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xf86-video-intel-2.99.916-15.1 xf86-video-intel-debuginfo-2.99.916-15.1 xf86-video-intel-debugsource-2.99.916-15.1 - openSUSE 13.2 (x86_64): xf86-video-intel-32bit-2.99.916-15.1 xf86-video-intel-debuginfo-32bit-2.99.916-15.1 References: https://bugzilla.suse.com/901506

1 0

openSUSE-RU-2015:2128-1: moderate: Recommended update for patch2mail
by maintenance＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Recommended Update: Recommended update for patch2mail ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2128-1 Rating: moderate References: #955207 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for patch2mail fixes the following issue: - Use zypp-refresh, not the (no longer existing) zypp-refresh-wrapper (boo#955207) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-823=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-823=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-823=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): patch2mail-1.1.2-17.1 - openSUSE 13.2 (noarch): patch2mail-1.1.2-12.3.1 - openSUSE 13.1 (noarch): patch2mail-1.1.2-10.3.1 References: https://bugzilla.suse.com/955207

1 0