December 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:2409-1: moderate: Recommended update for gnome-documents, gnome-online-accounts, gtk2, meld
by maintenance＠opensuse.org 31 Dec '15

31 Dec '15

openSUSE Recommended Update: Recommended update for gnome-documents, gnome-online-accounts, gtk2, meld ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2409-1 Rating: moderate References: #958808 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides new version for gnome-documents, gnome-online-accounts, gtk2, meld: * gnome-documents: - Update to version 3.16.5 (boo#958808): + Restore separate collections for Books and Documents. + Change to selection mode when pressing ctrl+a. + Disable Print menu item when unsupported. + Don't show an extra menu when the app menu is disabled. + Updated translations. - Update to version 3.16.4: + Don't show the places dialog if there is only one page. + Fix GdTaggedEntry theming. + Add missing Gio import so that Settings can be started. * gnome-online-accounts: - Update to version 3.16.5 (boo#958808): + Bugs fixed: - Network changes cause authentication token timeouts (bgo#751524). - owncloud: Doesn't work with non-standard ports (bgo#752736). - owncloud, exchange: Sanitize HTTP error messages (bgo#755168). - imap-smtp: Fix typo in error message (bgo#755316). - identity: Don't ever nullify identifier (bgo#756494). - provider, telepathy: Small leak fixes (bgo#756759). - Crash in mail_client_check_auth_run_cb when goa_mail_auth_run fails (bgo#758361). * gtk2: - Update to version 2.24.29 (boo#958808): + OS X: Partial aspect ratio support. + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638, bgo#753644, bgo#753691, bgo#753992, bgo#754046. + Updated translations. - Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy: fixed upstream. * meld: - Update to version 3.14.2 (boo#958808): + Fix some GTK+ assertions on window close. + Fix commit error with unicode commit messages. + Add manual appdata kudos markers. + Updated translations. - Changes from version 3.14.1: + Offer to open binary files externally. + Use locale-based default encodings. + Bug fixes: - Fix crash with some GTK+ versions when using --output. - Fix merge-all action not working at all. - Fix creating patches with unicode path names. - Fix copy-to-clipboard option in patch dialog. - Fix diffmap alignment for new GTK+ allocation behaviour. - Improve float accuracy in folder comparison timestamp resolution. - Fix default SVN keyword filter to escape $ characters. - Fix display of unicode --help from command line. - Fix keyboard shortcut docs. - Don't incorrectly show identical notification for changed folder comparisons. + Updated translations. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-981=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gnome-books-3.16.5-7.2 gnome-documents-3.16.5-7.2 gnome-documents-debugsource-3.16.5-7.2 gnome-documents_books-common-3.16.5-7.2 gnome-documents_books-common-debuginfo-3.16.5-7.2 gnome-online-accounts-3.16.5-4.2 gnome-online-accounts-debuginfo-3.16.5-4.2 gnome-online-accounts-debugsource-3.16.5-4.2 gnome-online-accounts-devel-3.16.5-4.2 gnome-shell-search-provider-documents-3.16.5-7.2 gtk2-debugsource-2.24.29-5.2 gtk2-devel-2.24.29-5.2 gtk2-devel-debuginfo-2.24.29-5.2 gtk2-engine-clearlooks-2.20.2-22.2 gtk2-engine-clearlooks-debuginfo-2.20.2-22.2 gtk2-engine-crux-2.20.2-22.2 gtk2-engine-crux-debuginfo-2.20.2-22.2 gtk2-engine-glide-2.20.2-22.2 gtk2-engine-glide-debuginfo-2.20.2-22.2 gtk2-engine-hcengine-2.20.2-22.2 gtk2-engine-hcengine-debuginfo-2.20.2-22.2 gtk2-engine-industrial-2.20.2-22.2 gtk2-engine-industrial-debuginfo-2.20.2-22.2 gtk2-engine-mist-2.20.2-22.2 gtk2-engine-mist-debuginfo-2.20.2-22.2 gtk2-engine-redmond95-2.20.2-22.2 gtk2-engine-redmond95-debuginfo-2.20.2-22.2 gtk2-engine-thinice-2.20.2-22.2 gtk2-engine-thinice-debuginfo-2.20.2-22.2 gtk2-engines-2.20.2-22.2 gtk2-engines-debugsource-2.20.2-22.2 gtk2-engines-devel-2.20.2-22.2 gtk2-immodule-amharic-2.24.29-5.2 gtk2-immodule-amharic-debuginfo-2.24.29-5.2 gtk2-immodule-inuktitut-2.24.29-5.2 gtk2-immodule-inuktitut-debuginfo-2.24.29-5.2 gtk2-immodule-multipress-2.24.29-5.2 gtk2-immodule-multipress-debuginfo-2.24.29-5.2 gtk2-immodule-thai-2.24.29-5.2 gtk2-immodule-thai-debuginfo-2.24.29-5.2 gtk2-immodule-vietnamese-2.24.29-5.2 gtk2-immodule-vietnamese-debuginfo-2.24.29-5.2 gtk2-immodule-xim-2.24.29-5.2 gtk2-immodule-xim-debuginfo-2.24.29-5.2 gtk2-immodules-tigrigna-2.24.29-5.2 gtk2-immodules-tigrigna-debuginfo-2.24.29-5.2 gtk2-tools-2.24.29-5.2 gtk2-tools-debuginfo-2.24.29-5.2 libgoa-1_0-0-3.16.5-4.2 libgoa-1_0-0-debuginfo-3.16.5-4.2 libgoa-backend-1_0-1-3.16.5-4.2 libgoa-backend-1_0-1-debuginfo-3.16.5-4.2 libgtk-2_0-0-2.24.29-5.2 libgtk-2_0-0-debuginfo-2.24.29-5.2 typelib-1_0-Goa-1_0-3.16.5-4.2 typelib-1_0-Gtk-2_0-2.24.29-5.2 - openSUSE Leap 42.1 (x86_64): gtk2-devel-32bit-2.24.29-5.2 gtk2-devel-debuginfo-32bit-2.24.29-5.2 gtk2-engine-clearlooks-32bit-2.20.2-22.2 gtk2-engine-clearlooks-debuginfo-32bit-2.20.2-22.2 gtk2-engine-crux-32bit-2.20.2-22.2 gtk2-engine-crux-debuginfo-32bit-2.20.2-22.2 gtk2-engine-glide-32bit-2.20.2-22.2 gtk2-engine-glide-debuginfo-32bit-2.20.2-22.2 gtk2-engine-industrial-32bit-2.20.2-22.2 gtk2-engine-industrial-debuginfo-32bit-2.20.2-22.2 gtk2-engine-mist-32bit-2.20.2-22.2 gtk2-engine-mist-debuginfo-32bit-2.20.2-22.2 gtk2-engine-redmond95-32bit-2.20.2-22.2 gtk2-engine-redmond95-debuginfo-32bit-2.20.2-22.2 gtk2-engine-thinice-32bit-2.20.2-22.2 gtk2-engine-thinice-debuginfo-32bit-2.20.2-22.2 gtk2-immodule-amharic-32bit-2.24.29-5.2 gtk2-immodule-amharic-debuginfo-32bit-2.24.29-5.2 gtk2-immodule-inuktitut-32bit-2.24.29-5.2 gtk2-immodule-inuktitut-debuginfo-32bit-2.24.29-5.2 gtk2-immodule-multipress-32bit-2.24.29-5.2 gtk2-immodule-multipress-debuginfo-32bit-2.24.29-5.2 gtk2-immodule-thai-32bit-2.24.29-5.2 gtk2-immodule-thai-debuginfo-32bit-2.24.29-5.2 gtk2-immodule-vietnamese-32bit-2.24.29-5.2 gtk2-immodule-vietnamese-debuginfo-32bit-2.24.29-5.2 gtk2-immodule-xim-32bit-2.24.29-5.2 gtk2-immodule-xim-debuginfo-32bit-2.24.29-5.2 gtk2-immodules-tigrigna-32bit-2.24.29-5.2 gtk2-immodules-tigrigna-debuginfo-32bit-2.24.29-5.2 gtk2-tools-32bit-2.24.29-5.2 gtk2-tools-debuginfo-32bit-2.24.29-5.2 libgoa-1_0-0-32bit-3.16.5-4.2 libgoa-1_0-0-debuginfo-32bit-3.16.5-4.2 libgoa-backend-1_0-1-32bit-3.16.5-4.2 libgoa-backend-1_0-1-debuginfo-32bit-3.16.5-4.2 libgtk-2_0-0-32bit-2.24.29-5.2 libgtk-2_0-0-debuginfo-32bit-2.24.29-5.2 - openSUSE Leap 42.1 (noarch): gnome-documents-lang-3.16.5-7.2 gnome-online-accounts-lang-3.16.5-4.2 gtk2-branding-SLED-42.1-5.1 gtk2-branding-openSUSE-42.1-5.1 gtk2-branding-upstream-2.24.29-5.2 gtk2-data-2.24.29-5.2 gtk2-lang-2.24.29-5.2 gtk2-theme-clearlooks-2.20.2-22.2 gtk2-theme-crux-2.20.2-22.2 gtk2-theme-industrial-2.20.2-22.2 gtk2-theme-mist-2.20.2-22.2 gtk2-theme-redmond95-2.20.2-22.2 gtk2-theme-thinice-2.20.2-22.2 meld-3.14.2-4.2 meld-lang-3.14.2-4.2 References: https://bugzilla.suse.com/958808

1 0

openSUSE-OU-2015:2408-1: Optional update for docker
by maintenance＠opensuse.org 31 Dec '15

31 Dec '15

openSUSE Optional Update: Optional update for docker ______________________________________________________________________________ Announcement ID: openSUSE-OU-2015:2408-1 Rating: low References: #959405 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for docker fixes the following issues: * boo#959405: Add rules for auditd. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-979=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): docker-1.9.1-10.1 docker-debuginfo-1.9.1-10.1 docker-debugsource-1.9.1-10.1 - openSUSE Leap 42.1 (noarch): docker-bash-completion-1.9.1-10.1 docker-test-1.9.1-10.1 docker-zsh-completion-1.9.1-10.1 References: https://bugzilla.suse.com/959405

1 0

openSUSE-RU-2015:2407-1: moderate: Recommended update for openblas
by maintenance＠opensuse.org 31 Dec '15

31 Dec '15

openSUSE Recommended Update: Recommended update for openblas ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2407-1 Rating: moderate References: #956966 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openblas fixes the following issues: * boo#956966: Resolve a conflict when installing openblas-devel Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-980=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libopenblas_openmp-devel-0.2.14-6.1 libopenblas_openmp0-0.2.14-6.1 libopenblas_openmp0-debuginfo-0.2.14-6.1 libopenblas_pthreads-devel-0.2.14-6.1 libopenblas_pthreads0-0.2.14-6.1 libopenblas_pthreads0-debuginfo-0.2.14-6.1 libopenblas_serial-devel-0.2.14-6.1 libopenblas_serial0-0.2.14-6.1 libopenblas_serial0-debuginfo-0.2.14-6.1 libopenblaso0-0.2.14-6.1 libopenblasp0-0.2.14-6.1 openblas-debugsource-0.2.14-6.1 openblas-devel-0.2.14-6.1 openblas-devel-static-0.2.14-6.1 - openSUSE Leap 42.1 (noarch): openblas-devel-headers-0.2.14-6.1 References: https://bugzilla.suse.com/956966

1 0

openSUSE-SU-2015:2406-1: important: Security update for Mozilla Thunderbird
by opensuse-security＠opensuse.org 31 Dec '15

31 Dec '15

openSUSE Security Update: Security update for Mozilla Thunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2406-1 Rating: important References: #959277 Cross-References: CVE-2015-7201 CVE-2015-7205 CVE-2015-7210 CVE-2015-7212 CVE-2015-7213 CVE-2015-7214 CVE-2015-7222 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Mozilla Thunderbird was updated to 38.5.0 to fix multiple security issues. The following vulnerabilities were fixed: (boo#959277) * CVE-2015-7201: Miscellaneous memory safety hazards * CVE-2015-7210: Use-after-free in WebRTC when datachannel is used after being destroyed * CVE-2015-7212: Integer overflow allocating extremely large textures * CVE-2015-7205: Underflow through code inspection * CVE-2015-7213: Integer overflow in MP4 playback in 64-bit versions * CVE-2015-7222: Integer underflow and buffer overflow processing MP4 metadata in libstagefright * CVE-2015-7214: Cross-site reading attack through data and view-source URIs Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-977=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-977=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-977=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): MozillaThunderbird-38.5.0-7.2 MozillaThunderbird-buildsymbols-38.5.0-7.2 MozillaThunderbird-debuginfo-38.5.0-7.2 MozillaThunderbird-debugsource-38.5.0-7.2 MozillaThunderbird-devel-38.5.0-7.2 MozillaThunderbird-translations-common-38.5.0-7.2 MozillaThunderbird-translations-other-38.5.0-7.2 - openSUSE 13.2 (i586 x86_64): MozillaThunderbird-38.5.0-34.2 MozillaThunderbird-buildsymbols-38.5.0-34.2 MozillaThunderbird-debuginfo-38.5.0-34.2 MozillaThunderbird-debugsource-38.5.0-34.2 MozillaThunderbird-devel-38.5.0-34.2 MozillaThunderbird-translations-common-38.5.0-34.2 MozillaThunderbird-translations-other-38.5.0-34.2 - openSUSE 13.1 (i586 x86_64): MozillaThunderbird-38.5.0-70.71.1 MozillaThunderbird-buildsymbols-38.5.0-70.71.1 MozillaThunderbird-debuginfo-38.5.0-70.71.1 MozillaThunderbird-debugsource-38.5.0-70.71.1 MozillaThunderbird-devel-38.5.0-70.71.1 MozillaThunderbird-translations-common-38.5.0-70.71.1 MozillaThunderbird-translations-other-38.5.0-70.71.1 References: https://www.suse.com/security/cve/CVE-2015-7201.html https://www.suse.com/security/cve/CVE-2015-7205.html https://www.suse.com/security/cve/CVE-2015-7210.html https://www.suse.com/security/cve/CVE-2015-7212.html https://www.suse.com/security/cve/CVE-2015-7213.html https://www.suse.com/security/cve/CVE-2015-7214.html https://www.suse.com/security/cve/CVE-2015-7222.html https://bugzilla.suse.com/959277

1 0

openSUSE-SU-2015:2405-1: moderate: Security update for mozilla-nss
by opensuse-security＠opensuse.org 31 Dec '15

31 Dec '15

openSUSE Security Update: Security update for mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2405-1 Rating: moderate References: #959888 Cross-References: CVE-2015-7575 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update to mozilla-nss 3.20.2 fixes the following issues: * CVE-2015-7575: MD5 signatures accepted within TLS 1.2 ServerKeyExchange in server signature (boo#952810) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-978=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-978=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-978=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libfreebl3-3.20.2-6.1 libfreebl3-debuginfo-3.20.2-6.1 libsoftokn3-3.20.2-6.1 libsoftokn3-debuginfo-3.20.2-6.1 mozilla-nss-3.20.2-6.1 mozilla-nss-certs-3.20.2-6.1 mozilla-nss-certs-debuginfo-3.20.2-6.1 mozilla-nss-debuginfo-3.20.2-6.1 mozilla-nss-debugsource-3.20.2-6.1 mozilla-nss-devel-3.20.2-6.1 mozilla-nss-sysinit-3.20.2-6.1 mozilla-nss-sysinit-debuginfo-3.20.2-6.1 mozilla-nss-tools-3.20.2-6.1 mozilla-nss-tools-debuginfo-3.20.2-6.1 - openSUSE Leap 42.1 (x86_64): libfreebl3-32bit-3.20.2-6.1 libfreebl3-debuginfo-32bit-3.20.2-6.1 libsoftokn3-32bit-3.20.2-6.1 libsoftokn3-debuginfo-32bit-3.20.2-6.1 mozilla-nss-32bit-3.20.2-6.1 mozilla-nss-certs-32bit-3.20.2-6.1 mozilla-nss-certs-debuginfo-32bit-3.20.2-6.1 mozilla-nss-debuginfo-32bit-3.20.2-6.1 mozilla-nss-sysinit-32bit-3.20.2-6.1 mozilla-nss-sysinit-debuginfo-32bit-3.20.2-6.1 - openSUSE 13.2 (i586 x86_64): libfreebl3-3.20.2-22.1 libfreebl3-debuginfo-3.20.2-22.1 libsoftokn3-3.20.2-22.1 libsoftokn3-debuginfo-3.20.2-22.1 mozilla-nss-3.20.2-22.1 mozilla-nss-certs-3.20.2-22.1 mozilla-nss-certs-debuginfo-3.20.2-22.1 mozilla-nss-debuginfo-3.20.2-22.1 mozilla-nss-debugsource-3.20.2-22.1 mozilla-nss-devel-3.20.2-22.1 mozilla-nss-sysinit-3.20.2-22.1 mozilla-nss-sysinit-debuginfo-3.20.2-22.1 mozilla-nss-tools-3.20.2-22.1 mozilla-nss-tools-debuginfo-3.20.2-22.1 - openSUSE 13.2 (x86_64): libfreebl3-32bit-3.20.2-22.1 libfreebl3-debuginfo-32bit-3.20.2-22.1 libsoftokn3-32bit-3.20.2-22.1 libsoftokn3-debuginfo-32bit-3.20.2-22.1 mozilla-nss-32bit-3.20.2-22.1 mozilla-nss-certs-32bit-3.20.2-22.1 mozilla-nss-certs-debuginfo-32bit-3.20.2-22.1 mozilla-nss-debuginfo-32bit-3.20.2-22.1 mozilla-nss-sysinit-32bit-3.20.2-22.1 mozilla-nss-sysinit-debuginfo-32bit-3.20.2-22.1 - openSUSE 13.1 (i586 x86_64): libfreebl3-3.20.2-65.1 libfreebl3-debuginfo-3.20.2-65.1 libsoftokn3-3.20.2-65.1 libsoftokn3-debuginfo-3.20.2-65.1 mozilla-nss-3.20.2-65.1 mozilla-nss-certs-3.20.2-65.1 mozilla-nss-certs-debuginfo-3.20.2-65.1 mozilla-nss-debuginfo-3.20.2-65.1 mozilla-nss-debugsource-3.20.2-65.1 mozilla-nss-devel-3.20.2-65.1 mozilla-nss-sysinit-3.20.2-65.1 mozilla-nss-sysinit-debuginfo-3.20.2-65.1 mozilla-nss-tools-3.20.2-65.1 mozilla-nss-tools-debuginfo-3.20.2-65.1 - openSUSE 13.1 (x86_64): libfreebl3-32bit-3.20.2-65.1 libfreebl3-debuginfo-32bit-3.20.2-65.1 libsoftokn3-32bit-3.20.2-65.1 libsoftokn3-debuginfo-32bit-3.20.2-65.1 mozilla-nss-32bit-3.20.2-65.1 mozilla-nss-certs-32bit-3.20.2-65.1 mozilla-nss-certs-debuginfo-32bit-3.20.2-65.1 mozilla-nss-debuginfo-32bit-3.20.2-65.1 mozilla-nss-sysinit-32bit-3.20.2-65.1 mozilla-nss-sysinit-debuginfo-32bit-3.20.2-65.1 References: https://www.suse.com/security/cve/CVE-2015-7575.html https://bugzilla.suse.com/959888

1 0

openSUSE-SU-2015:2403-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 30 Dec '15

30 Dec '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2403-1 Rating: important References: #960317 Cross-References: CVE-2015-8459 CVE-2015-8460 CVE-2015-8634 CVE-2015-8635 CVE-2015-8636 CVE-2015-8638 CVE-2015-8639 CVE-2015-8640 CVE-2015-8641 CVE-2015-8642 CVE-2015-8643 CVE-2015-8644 CVE-2015-8645 CVE-2015-8646 CVE-2015-8647 CVE-2015-8648 CVE-2015-8649 CVE-2015-8650 CVE-2015-8651 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: This update for flash-player fixes the following issues: - Security update to 11.2.202.559 (boo#960317): * APSB16-01, CVE-2015-8459, CVE-2015-8460, CVE-2015-8634, CVE-2015-8635, CVE-2015-8636, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8644, CVE-2015-8645, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, CVE-2015-8650, CVE-2015-8651 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-976=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): flash-player-11.2.202.559-179.1 flash-player-gnome-11.2.202.559-179.1 flash-player-kde4-11.2.202.559-179.1 References: https://www.suse.com/security/cve/CVE-2015-8459.html https://www.suse.com/security/cve/CVE-2015-8460.html https://www.suse.com/security/cve/CVE-2015-8634.html https://www.suse.com/security/cve/CVE-2015-8635.html https://www.suse.com/security/cve/CVE-2015-8636.html https://www.suse.com/security/cve/CVE-2015-8638.html https://www.suse.com/security/cve/CVE-2015-8639.html https://www.suse.com/security/cve/CVE-2015-8640.html https://www.suse.com/security/cve/CVE-2015-8641.html https://www.suse.com/security/cve/CVE-2015-8642.html https://www.suse.com/security/cve/CVE-2015-8643.html https://www.suse.com/security/cve/CVE-2015-8644.html https://www.suse.com/security/cve/CVE-2015-8645.html https://www.suse.com/security/cve/CVE-2015-8646.html https://www.suse.com/security/cve/CVE-2015-8647.html https://www.suse.com/security/cve/CVE-2015-8648.html https://www.suse.com/security/cve/CVE-2015-8649.html https://www.suse.com/security/cve/CVE-2015-8650.html https://www.suse.com/security/cve/CVE-2015-8651.html https://bugzilla.suse.com/960317

1 0

openSUSE-SU-2015:2400-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 30 Dec '15

30 Dec '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2400-1 Rating: important References: #960317 Cross-References: CVE-2015-8459 CVE-2015-8460 CVE-2015-8634 CVE-2015-8635 CVE-2015-8636 CVE-2015-8638 CVE-2015-8639 CVE-2015-8640 CVE-2015-8641 CVE-2015-8642 CVE-2015-8643 CVE-2015-8644 CVE-2015-8645 CVE-2015-8646 CVE-2015-8647 CVE-2015-8648 CVE-2015-8649 CVE-2015-8650 CVE-2015-8651 Affected Products: openSUSE 13.2 NonFree openSUSE 13.1 NonFree ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: This update for flash-player fixes the following issues: - Security update to 11.2.202.559 (boo#960317): * APSB16-01, CVE-2015-8459, CVE-2015-8460, CVE-2015-8634, CVE-2015-8635, CVE-2015-8636, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8644, CVE-2015-8645, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, CVE-2015-8650, CVE-2015-8651 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2 NonFree: zypper in -t patch openSUSE-2015-975=1 - openSUSE 13.1 NonFree: zypper in -t patch openSUSE-2015-975=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 NonFree (i586 x86_64): flash-player-11.2.202.559-2.85.1 flash-player-gnome-11.2.202.559-2.85.1 flash-player-kde4-11.2.202.559-2.85.1 - openSUSE 13.1 NonFree (i586 x86_64): flash-player-11.2.202.559-150.1 flash-player-gnome-11.2.202.559-150.1 flash-player-kde4-11.2.202.559-150.1 References: https://www.suse.com/security/cve/CVE-2015-8459.html https://www.suse.com/security/cve/CVE-2015-8460.html https://www.suse.com/security/cve/CVE-2015-8634.html https://www.suse.com/security/cve/CVE-2015-8635.html https://www.suse.com/security/cve/CVE-2015-8636.html https://www.suse.com/security/cve/CVE-2015-8638.html https://www.suse.com/security/cve/CVE-2015-8639.html https://www.suse.com/security/cve/CVE-2015-8640.html https://www.suse.com/security/cve/CVE-2015-8641.html https://www.suse.com/security/cve/CVE-2015-8642.html https://www.suse.com/security/cve/CVE-2015-8643.html https://www.suse.com/security/cve/CVE-2015-8644.html https://www.suse.com/security/cve/CVE-2015-8645.html https://www.suse.com/security/cve/CVE-2015-8646.html https://www.suse.com/security/cve/CVE-2015-8647.html https://www.suse.com/security/cve/CVE-2015-8648.html https://www.suse.com/security/cve/CVE-2015-8649.html https://www.suse.com/security/cve/CVE-2015-8650.html https://www.suse.com/security/cve/CVE-2015-8651.html https://bugzilla.suse.com/960317

1 0

openSUSE-RU-2015:2398-1: Recommended update for clamav-database
by maintenance＠opensuse.org 29 Dec '15

29 Dec '15

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2398-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh December 28th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-974=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201512280000-29.1 References:

1 0

openSUSE-RU-2015:2397-1: moderate: Recommended update for docker
by maintenance＠opensuse.org 29 Dec '15

29 Dec '15

openSUSE Recommended Update: Recommended update for docker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2397-1 Rating: moderate References: #956434 #959405 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for docker provides version 1.9.1 with various fixes and improvements (boo#956434): - Runtime: + Do not prevent daemon from booting if images could not be restored + Force ipc mount to unmount on daemon shutdown/init + Turn ipc unmount errors into warnings + Fix `docker stats` performance regression + Clarify cryptic error message upon `docker logs` if `--log-driver=none + Fix seldom panics + Fix opq whiteouts problems for files with dot prefix + devicemapper: Try defaulting to xfs instead of ext4 for performance reasons + devicemapper: Fix displayed fs in docker info + Selinux: only relabel if user requested so with the `z` option + Do not make network calls when normalizing names - Client: + Fix `docker login` on windows + Fix bug with `docker inspect` output when not connected to daemon + Fix `docker inspect -f {{.hostconfig.dns}} somecontainer - Builder: + Fix regression with symlink behavior in add/copy - Networking: + Allow passing a network id as an argument for `--net + Fix connect to host and prevent disconnect from host for `host` network + Fix `--fixed-cidr` issue when gateway ip falls in ip-range and ip-range is not the first block in the network + Restore deterministic `ipv6` generation from `mac` address on default `bridge` network + Allow port-mapping only for endpoints created on docker run + Fixed an endpoint delete issue with a possible stale sbox - Distribution: + Correct parent chain in v2 push when v1compatibility files on the disk are inconsistent. In addition, the following improvements were added to the package: * boo#959405: Add rules for auditd. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-973=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (x86_64): docker-1.9.1-49.1 docker-debuginfo-1.9.1-49.1 docker-debugsource-1.9.1-49.1 - openSUSE 13.2 (noarch): docker-bash-completion-1.9.1-49.1 docker-test-1.9.1-49.1 docker-zsh-completion-1.9.1-49.1 References: https://bugzilla.suse.com/956434 https://bugzilla.suse.com/959405

1 0

openSUSE-RU-2015:2396-1: moderate: Recommended update for kdelibs4, kaffeine
by maintenance＠opensuse.org 29 Dec '15

29 Dec '15

openSUSE Recommended Update: Recommended update for kdelibs4, kaffeine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2396-1 Rating: moderate References: #858018 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Kaffeine and kdelibs4 were updated to fix the following issues: * boo#858018 - kaffeine fails to install additional codecs - adapt ksuseinstall to changes in zypper's output. This fixes the installation of packages. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-972=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-972=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): kaffeine-1.2.2-27.3.1 kaffeine-debuginfo-1.2.2-27.3.1 kaffeine-debugsource-1.2.2-27.3.1 - openSUSE 13.1 (i586 x86_64): kaffeine-1.2.2-25.3.1 kaffeine-debuginfo-1.2.2-25.3.1 kaffeine-debugsource-1.2.2-25.3.1 kdelibs4-4.11.5-491.1 kdelibs4-branding-upstream-4.11.5-491.1 kdelibs4-core-4.11.5-491.1 kdelibs4-core-debuginfo-4.11.5-491.1 kdelibs4-debuginfo-4.11.5-491.1 kdelibs4-debugsource-4.11.5-491.1 kdelibs4-doc-4.11.5-491.1 kdelibs4-doc-debuginfo-4.11.5-491.1 libkde4-4.11.5-491.1 libkde4-debuginfo-4.11.5-491.1 libkde4-devel-4.11.5-491.1 libkdecore4-4.11.5-491.1 libkdecore4-debuginfo-4.11.5-491.1 libkdecore4-devel-4.11.5-491.1 libkdecore4-devel-debuginfo-4.11.5-491.1 libksuseinstall-devel-4.11.5-491.1 libksuseinstall1-4.11.5-491.1 libksuseinstall1-debuginfo-4.11.5-491.1 - openSUSE 13.1 (x86_64): libkde4-32bit-4.11.5-491.1 libkde4-debuginfo-32bit-4.11.5-491.1 libkdecore4-32bit-4.11.5-491.1 libkdecore4-debuginfo-32bit-4.11.5-491.1 libksuseinstall1-32bit-4.11.5-491.1 libksuseinstall1-debuginfo-32bit-4.11.5-491.1 - openSUSE 13.1 (noarch): kdelibs4-apidocs-4.11.5-491.1 References: https://bugzilla.suse.com/858018

1 0

openSUSE-RU-2015:2395-1: moderate: Recommended update for zypper
by maintenance＠opensuse.org 29 Dec '15

29 Dec '15

openSUSE Recommended Update: Recommended update for zypper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2395-1 Rating: moderate References: #793424 #893833 #955615 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This recommended update provides version 1.11.44 of zypper: - lu/lp: fix different data returned in xml and text output (boo#793424, boo#893833) - pchk: also report needed but locked patches - Fix tab-completion if zypper is defined as an alias (boo#955615) - Fix #83 incomplete bash completion for --type Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-971=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): zypper-1.11.44-31.1 zypper-debuginfo-1.11.44-31.1 zypper-debugsource-1.11.44-31.1 - openSUSE 13.2 (noarch): zypper-aptitude-1.11.44-31.1 zypper-log-1.11.44-31.1 References: https://bugzilla.suse.com/793424 https://bugzilla.suse.com/893833 https://bugzilla.suse.com/955615

1 0

openSUSE-SU-2015:2392-1: important: Security update for grub2
by opensuse-security＠opensuse.org 29 Dec '15

29 Dec '15

openSUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2392-1 Rating: important References: #956631 Cross-References: CVE-2015-8370 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for grub2 fixes the following issue: - CVE-2015-8370: Fix for overflow in grub_password_get and grub_user_get functions (bsc#956631) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-970=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): grub2-1.98-14.1 grub2-debuginfo-1.98-14.1 grub2-debugsource-1.98-14.1 References: https://www.suse.com/security/cve/CVE-2015-8370.html https://bugzilla.suse.com/956631

1 0

openSUSE-SU-2015:2391-1: important: Security update for bind
by opensuse-security＠opensuse.org 29 Dec '15

29 Dec '15

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2391-1 Rating: important References: #958861 Cross-References: CVE-2015-8000 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following security issue: - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses (boo#958861). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-969=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): bind-9.9.4P2-72.1 bind-chrootenv-9.9.4P2-72.1 bind-debuginfo-9.9.4P2-72.1 bind-debugsource-9.9.4P2-72.1 bind-devel-9.9.4P2-72.1 bind-libs-9.9.4P2-72.1 bind-libs-debuginfo-9.9.4P2-72.1 bind-lwresd-9.9.4P2-72.1 bind-lwresd-debuginfo-9.9.4P2-72.1 bind-utils-9.9.4P2-72.1 bind-utils-debuginfo-9.9.4P2-72.1 - openSUSE Evergreen 11.4 (x86_64): bind-libs-32bit-9.9.4P2-72.1 bind-libs-debuginfo-32bit-9.9.4P2-72.1 - openSUSE Evergreen 11.4 (noarch): bind-doc-9.9.4P2-72.1 - openSUSE Evergreen 11.4 (ia64): bind-libs-debuginfo-x86-9.9.4P2-72.1 bind-libs-x86-9.9.4P2-72.1 References: https://www.suse.com/security/cve/CVE-2015-8000.html https://bugzilla.suse.com/958861

1 0

openSUSE-RU-2015:2389-1: moderate: Recommended update for kdebase4-runtime, kmix
by maintenance＠opensuse.org 29 Dec '15

29 Dec '15

openSUSE Recommended Update: Recommended update for kdebase4-runtime, kmix ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2389-1 Rating: moderate References: #878685 #896933 #954531 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: kdebase4-runtime and kmix were updated to the version 15.08.3 from KDE Applications (boo#954531), fixing the following bugs: * boo#896933: Kmix - popping up of Unknown Application: Audio-volume-change stream * boo#878685: KMIX doesnt contain Event Sounds slider Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-968=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-968=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): kdebase4-runtime-15.08.3-19.1 kdebase4-runtime-branding-upstream-15.08.3-19.1 kdebase4-runtime-debuginfo-15.08.3-19.1 kdebase4-runtime-debugsource-15.08.3-19.1 kdebase4-runtime-devel-15.08.3-19.1 kmix-15.08.3-19.1 kmix-debuginfo-15.08.3-19.1 kmix-debugsource-15.08.3-19.1 plasma-theme-oxygen-15.08.3-19.1 - openSUSE 13.1 (i586 x86_64): kdebase4-runtime-4.11.5-485.1 kdebase4-runtime-branding-upstream-4.11.5-485.1 kdebase4-runtime-debuginfo-4.11.5-485.1 kdebase4-runtime-debugsource-4.11.5-485.1 kdebase4-runtime-devel-4.11.5-485.1 kmix-4.11.5-193.1 kmix-debuginfo-4.11.5-193.1 kmix-debugsource-4.11.5-193.1 plasma-theme-oxygen-4.11.5-485.1 References: https://bugzilla.suse.com/878685 https://bugzilla.suse.com/896933 https://bugzilla.suse.com/954531

1 0

openSUSE-RU-2015:2388-1: Recommended update for Ninja-ide
by maintenance＠opensuse.org 29 Dec '15

29 Dec '15

openSUSE Recommended Update: Recommended update for Ninja-ide ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2388-1 Rating: low References: #958149 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Ninja-ide was updated to fix an installation issue. * boo#95814: Fix for installation requirement python-setuptools Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-967=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): ninja-ide-2.3-8.1 References: https://bugzilla.suse.com/958149

1 0

openSUSE-SU-2015:2380-1: important: Security update for xulrunner
by opensuse-security＠opensuse.org 28 Dec '15

28 Dec '15

openSUSE Security Update: Security update for xulrunner ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2380-1 Rating: important References: #959277 Cross-References: CVE-2015-7201 CVE-2015-7205 CVE-2015-7210 CVE-2015-7212 CVE-2015-7213 CVE-2015-7214 CVE-2015-7222 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Xulrunner was updated to 38.5.0 to fix several security issues. The following vulnerabilities were fixed (boo#959277): * CVE-2015-7201: Miscellaneous memory safety hazards * CVE-2015-7210: Use-after-free in WebRTC when datachannel is used after being destroyed * CVE-2015-7212: Integer overflow allocating extremely large textures * CVE-2015-7205: Underflow through code inspection * CVE-2015-7213: Integer overflow in MP4 playback in 64-bit versions * CVE-2015-7222: Integer underflow and buffer overflow processing MP4 metadata in libstagefright * CVE-2015-7214: Cross-site reading attack through data and view-source URIs Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-966=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xulrunner-38.5.0-7.1 xulrunner-debuginfo-38.5.0-7.1 xulrunner-debugsource-38.5.0-7.1 xulrunner-devel-38.5.0-7.1 - openSUSE Leap 42.1 (x86_64): xulrunner-32bit-38.5.0-7.1 xulrunner-debuginfo-32bit-38.5.0-7.1 References: https://www.suse.com/security/cve/CVE-2015-7201.html https://www.suse.com/security/cve/CVE-2015-7205.html https://www.suse.com/security/cve/CVE-2015-7210.html https://www.suse.com/security/cve/CVE-2015-7212.html https://www.suse.com/security/cve/CVE-2015-7213.html https://www.suse.com/security/cve/CVE-2015-7214.html https://www.suse.com/security/cve/CVE-2015-7222.html https://bugzilla.suse.com/959277

1 0

openSUSE-RU-2015:2379-1: moderate: Recommended update for kcm5-fcitx
by maintenance＠opensuse.org 28 Dec '15

28 Dec '15

openSUSE Recommended Update: Recommended update for kcm5-fcitx ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2379-1 Rating: moderate References: #951609 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kcm5-fcitx fixes the following issues: * boo#951609: fcitx-configtool crashes on KDE, fix the still-existing crash at clicking "Only Show Currnet Language" checkbox Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-964=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kcm5-fcitx-debugsource-0.5.2-4.1 kf5-kcm-fcitx-0.5.2-4.1 kf5-kcm-fcitx-debuginfo-0.5.2-4.1 - openSUSE Leap 42.1 (noarch): kf5-kcm-fcitx-icons-0.5.2-4.1 References: https://bugzilla.suse.com/951609

1 0

openSUSE-RU-2015:2378-1: Recommended update for systemd-presets-branding-openSUSE
by maintenance＠opensuse.org 28 Dec '15

28 Dec '15

openSUSE Recommended Update: Recommended update for systemd-presets-branding-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2378-1 Rating: low References: #958880 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for systemd-presets-branding-openSUSE fixes the following issues: * boo#958880: warning message relating to missing service files -Add display-manager.service to defaults presets Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-965=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-965=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): systemd-presets-branding-openSUSE-0.3.0-25.1 - openSUSE 13.2 (noarch): systemd-presets-branding-openSUSE-0.3.0-12.7.1 References: https://bugzilla.suse.com/958880

1 0

openSUSE-RU-2015:2377-1: moderate: Recommended update for vlc
by maintenance＠opensuse.org 27 Dec '15

27 Dec '15

openSUSE Recommended Update: Recommended update for vlc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2377-1 Rating: moderate References: #956769 #959100 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for vlc fixes the following issues: * boo#959100: Enable libupnp support * boo#956769: Mouse pointer disappears in VLC window and no fullscreen controls Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-952=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libvlc5-2.2.1-15.1 libvlc5-debuginfo-2.2.1-15.1 libvlccore8-2.2.1-15.1 libvlccore8-debuginfo-2.2.1-15.1 vlc-2.2.1-15.1 vlc-debuginfo-2.2.1-15.1 vlc-debugsource-2.2.1-15.1 vlc-devel-2.2.1-15.1 vlc-gnome-2.2.1-15.1 vlc-gnome-debuginfo-2.2.1-15.1 vlc-noX-2.2.1-15.1 vlc-noX-debuginfo-2.2.1-15.1 vlc-qt-2.2.1-15.1 vlc-qt-debuginfo-2.2.1-15.1 - openSUSE Leap 42.1 (noarch): vlc-noX-lang-2.2.1-15.1 References: https://bugzilla.suse.com/956769 https://bugzilla.suse.com/959100

1 0

openSUSE-SU-2015:2376-1: moderate: Security update for krb5
by opensuse-security＠opensuse.org 27 Dec '15

27 Dec '15

openSUSE Security Update: Security update for krb5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2376-1 Rating: moderate References: #954204 Cross-References: CVE-2015-2698 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The krb5 package was updated to fix the following security issue: - CVE-2015-2698: Fixed a memory corruption regression introduced by resolving of CVE-2015-2698 (bsc#954204). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-961=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): krb5-1.12.1-24.1 krb5-client-1.12.1-24.1 krb5-client-debuginfo-1.12.1-24.1 krb5-debuginfo-1.12.1-24.1 krb5-debugsource-1.12.1-24.1 krb5-devel-1.12.1-24.1 krb5-doc-1.12.1-24.1 krb5-mini-1.12.1-24.1 krb5-mini-debuginfo-1.12.1-24.1 krb5-mini-debugsource-1.12.1-24.1 krb5-mini-devel-1.12.1-24.1 krb5-plugin-kdb-ldap-1.12.1-24.1 krb5-plugin-kdb-ldap-debuginfo-1.12.1-24.1 krb5-plugin-preauth-otp-1.12.1-24.1 krb5-plugin-preauth-otp-debuginfo-1.12.1-24.1 krb5-plugin-preauth-pkinit-1.12.1-24.1 krb5-plugin-preauth-pkinit-debuginfo-1.12.1-24.1 krb5-server-1.12.1-24.1 krb5-server-debuginfo-1.12.1-24.1 - openSUSE Leap 42.1 (x86_64): krb5-32bit-1.12.1-24.1 krb5-debuginfo-32bit-1.12.1-24.1 krb5-devel-32bit-1.12.1-24.1 References: https://www.suse.com/security/cve/CVE-2015-2698.html https://bugzilla.suse.com/954204

1 0

openSUSE-SU-2015:2375-1: important: Security update for grub2
by opensuse-security＠opensuse.org 27 Dec '15

27 Dec '15

openSUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2375-1 Rating: important References: #956631 Cross-References: CVE-2015-8370 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for grub2 fixes the following issue: Changes in grub2: - CVE-2015-8370: Fix for overflow in grub_password_get and grub_user_get functions (bnc#956631) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-957=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-957=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): grub2-2.02~beta2-20.13.1 grub2-branding-upstream-2.02~beta2-20.13.1 grub2-debuginfo-2.02~beta2-20.13.1 grub2-debugsource-2.02~beta2-20.13.1 grub2-i386-pc-2.02~beta2-20.13.1 - openSUSE 13.2 (x86_64): grub2-x86_64-efi-2.02~beta2-20.13.1 grub2-x86_64-xen-2.02~beta2-20.13.1 - openSUSE 13.2 (noarch): grub2-snapper-plugin-2.02~beta2-20.13.1 - openSUSE 13.2 (i586): grub2-i386-efi-2.02~beta2-20.13.1 - openSUSE 13.1 (i586 x86_64): grub2-2.00-39.11.1 grub2-debuginfo-2.00-39.11.1 grub2-debugsource-2.00-39.11.1 grub2-i386-pc-2.00-39.11.1 grub2-i386-pc-debuginfo-2.00-39.11.1 - openSUSE 13.1 (x86_64): grub2-x86_64-efi-2.00-39.11.1 grub2-x86_64-efi-debuginfo-2.00-39.11.1 - openSUSE 13.1 (i586): grub2-i386-efi-2.00-39.11.1 grub2-i386-efi-debuginfo-2.00-39.11.1 References: https://www.suse.com/security/cve/CVE-2015-8370.html https://bugzilla.suse.com/956631

1 0

openSUSE-RU-2015:2374-1: moderate: Recommended update for libselinux
by maintenance＠opensuse.org 27 Dec '15

27 Dec '15

openSUSE Recommended Update: Recommended update for libselinux ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2374-1 Rating: moderate References: #940006 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The selinux-ready helper in libselinux was updated to detect new style Linux initial ramdisks generated by dracut. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-960=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libselinux-bindings-debugsource-2.3-5.1 libselinux-debugsource-2.3-5.1 libselinux-devel-2.3-5.1 libselinux-devel-static-2.3-5.1 libselinux1-2.3-5.1 libselinux1-debuginfo-2.3-5.1 python-selinux-2.3-5.1 python-selinux-debuginfo-2.3-5.1 ruby-selinux-2.3-5.1 ruby-selinux-debuginfo-2.3-5.1 selinux-tools-2.3-5.1 selinux-tools-debuginfo-2.3-5.1 - openSUSE Leap 42.1 (x86_64): libselinux1-32bit-2.3-5.1 libselinux1-debuginfo-32bit-2.3-5.1 References: https://bugzilla.suse.com/940006

1 0

openSUSE-RU-2015:2373-1: moderate: Recommended update for tigervnc
by maintenance＠opensuse.org 27 Dec '15

27 Dec '15

openSUSE Recommended Update: Recommended update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2373-1 Rating: moderate References: #956537 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tigervnc fixes the following issues: * Update default vnc xstartup script: - Add dependency on xinit and icewm. (boo#956537) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-958=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-958=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): tigervnc-1.5.0-13.1 tigervnc-debuginfo-1.5.0-13.1 tigervnc-debugsource-1.5.0-13.1 xorg-x11-Xvnc-1.5.0-13.1 xorg-x11-Xvnc-debuginfo-1.5.0-13.1 - openSUSE 13.2 (i586 x86_64): tigervnc-1.4.1-6.44.1 tigervnc-debuginfo-1.4.1-6.44.1 tigervnc-debugsource-1.4.1-6.44.1 xorg-x11-Xvnc-1.4.1-6.44.1 xorg-x11-Xvnc-debuginfo-1.4.1-6.44.1 References: https://bugzilla.suse.com/956537

1 0

openSUSE-SU-2015:2372-1: moderate: Security update for libxml2
by opensuse-security＠opensuse.org 27 Dec '15

27 Dec '15

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2372-1 Rating: moderate References: #928193 #951734 #951735 #954429 #956018 #956021 #956260 #957105 #957106 #957107 #957109 #957110 Cross-References: CVE-2014-0191 CVE-2014-3660 CVE-2015-1819 CVE-2015-5312 CVE-2015-7497 CVE-2015-7498 CVE-2015-7499 CVE-2015-7500 CVE-2015-7941 CVE-2015-7942 CVE-2015-8035 CVE-2015-8241 CVE-2015-8242 CVE-2015-8317 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: - update to 2.9.3 * full changelog: http://www.xmlsoft.org/news.html * fixed CVEs: CVE-2015-8242, CVE-2015-7500, CVE-2015-7499, CVE-2015-5312, CVE-2015-7497, CVE-2015-7498, CVE-2015-8035, CVE-2015-7942, CVE-2015-1819, CVE-2015-7941, CVE-2014-3660, CVE-2014-0191, CVE-2015-8241, CVE-2015-8317 * fixed bugs: [bsc#928193], [bsc#951734], [bsc#951735], [bsc#954429], [bsc#956018], [bsc#956021], [bsc#956260], [bsc#957105], [bsc#957106], [bsc#957107], [bsc#957109], [bsc#957110] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-959=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-959=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libxml2-2-2.9.3-7.4.1 libxml2-2-debuginfo-2.9.3-7.4.1 libxml2-debugsource-2.9.3-7.4.1 libxml2-devel-2.9.3-7.4.1 libxml2-tools-2.9.3-7.4.1 libxml2-tools-debuginfo-2.9.3-7.4.1 python-libxml2-2.9.3-7.4.1 python-libxml2-debuginfo-2.9.3-7.4.1 python-libxml2-debugsource-2.9.3-7.4.1 - openSUSE 13.2 (x86_64): libxml2-2-32bit-2.9.3-7.4.1 libxml2-2-debuginfo-32bit-2.9.3-7.4.1 libxml2-devel-32bit-2.9.3-7.4.1 - openSUSE 13.2 (noarch): libxml2-doc-2.9.3-7.4.1 - openSUSE 13.1 (i586 x86_64): libxml2-2-2.9.3-2.19.1 libxml2-2-debuginfo-2.9.3-2.19.1 libxml2-debugsource-2.9.3-2.19.1 libxml2-devel-2.9.3-2.19.1 libxml2-tools-2.9.3-2.19.1 libxml2-tools-debuginfo-2.9.3-2.19.1 python-libxml2-2.9.3-2.19.1 python-libxml2-debuginfo-2.9.3-2.19.1 python-libxml2-debugsource-2.9.3-2.19.1 - openSUSE 13.1 (x86_64): libxml2-2-32bit-2.9.3-2.19.1 libxml2-2-debuginfo-32bit-2.9.3-2.19.1 libxml2-devel-32bit-2.9.3-2.19.1 - openSUSE 13.1 (noarch): libxml2-doc-2.9.3-2.19.1 References: https://www.suse.com/security/cve/CVE-2014-0191.html https://www.suse.com/security/cve/CVE-2014-3660.html https://www.suse.com/security/cve/CVE-2015-1819.html https://www.suse.com/security/cve/CVE-2015-5312.html https://www.suse.com/security/cve/CVE-2015-7497.html https://www.suse.com/security/cve/CVE-2015-7498.html https://www.suse.com/security/cve/CVE-2015-7499.html https://www.suse.com/security/cve/CVE-2015-7500.html https://www.suse.com/security/cve/CVE-2015-7941.html https://www.suse.com/security/cve/CVE-2015-7942.html https://www.suse.com/security/cve/CVE-2015-8035.html https://www.suse.com/security/cve/CVE-2015-8241.html https://www.suse.com/security/cve/CVE-2015-8242.html https://www.suse.com/security/cve/CVE-2015-8317.html https://bugzilla.suse.com/928193 https://bugzilla.suse.com/951734 https://bugzilla.suse.com/951735 https://bugzilla.suse.com/954429 https://bugzilla.suse.com/956018 https://bugzilla.suse.com/956021 https://bugzilla.suse.com/956260 https://bugzilla.suse.com/957105 https://bugzilla.suse.com/957106 https://bugzilla.suse.com/957107 https://bugzilla.suse.com/957109 https://bugzilla.suse.com/957110

1 0

openSUSE-SU-2015:2371-1: moderate: Security update for polarssl
by opensuse-security＠opensuse.org 27 Dec '15

27 Dec '15

openSUSE Security Update: Security update for polarssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2371-1 Rating: moderate References: #949380 Cross-References: CVE-2015-5291 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for polarssl fixes the following security issue: * CVE-2015-5291: Remote code execution via session tickets or SNI (boo#949380) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-962=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libpolarssl7-1.3.9-11.1 libpolarssl7-debuginfo-1.3.9-11.1 polarssl-devel-1.3.9-11.1 References: https://www.suse.com/security/cve/CVE-2015-5291.html https://bugzilla.suse.com/949380

1 0