December 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:2329-1: moderate: Recommended update for xf86-video-intel
by maintenance＠opensuse.org 21 Dec '15

21 Dec '15

openSUSE Recommended Update: Recommended update for xf86-video-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2329-1 Rating: moderate References: #931309 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xf86-video-intel fixes the following issues: - Don't crash when no boxes to render are available (boo#931309). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-933=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-933=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xf86-video-intel-2.99.916-21.1 xf86-video-intel-debuginfo-2.99.916-21.1 xf86-video-intel-debugsource-2.99.916-21.1 - openSUSE 13.2 (x86_64): xf86-video-intel-32bit-2.99.916-21.1 xf86-video-intel-debuginfo-32bit-2.99.916-21.1 - openSUSE 13.1 (i586 x86_64): xf86-video-intel-2.99.906-15.1 xf86-video-intel-debuginfo-2.99.906-15.1 xf86-video-intel-debugsource-2.99.906-15.1 - openSUSE 13.1 (x86_64): xf86-video-intel-32bit-2.99.906-15.1 xf86-video-intel-debuginfo-32bit-2.99.906-15.1 References: https://bugzilla.suse.com/931309

1 0

openSUSE-RU-2015:2323-1: important: Recommended update for ntp
by maintenance＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Recommended Update: Recommended update for ntp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2323-1 Rating: important References: #954982 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ntp fixes synchronization of local clocks. This issue was introduced with the update to ntp 4.2.8p4 in SLE 12-SP1. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-931=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ntp-4.2.8p4-12.2 ntp-debuginfo-4.2.8p4-12.2 ntp-debugsource-4.2.8p4-12.2 ntp-doc-4.2.8p4-12.2 References: https://bugzilla.suse.com/954982

1 0

openSUSE-RU-2015:2322-1: moderate: Recommended update for tor
by maintenance＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Recommended Update: Recommended update for tor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2322-1 Rating: moderate References: #958729 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Tor was updated to 0.2.7.6 to fix a major bug in entry guard selection. [boo#958729] It also contains all previous upstream changes addressing performance and stability. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-915=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-915=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-915=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): tor-0.2.7.6-9.1 tor-debuginfo-0.2.7.6-9.1 tor-debugsource-0.2.7.6-9.1 - openSUSE 13.2 (i586 x86_64): tor-0.2.7.6-22.1 tor-debuginfo-0.2.7.6-22.1 tor-debugsource-0.2.7.6-22.1 - openSUSE 13.1 (i586 x86_64): tor-0.2.7.6-5.39.1 tor-debuginfo-0.2.7.6-5.39.1 tor-debugsource-0.2.7.6-5.39.1 References: https://bugzilla.suse.com/958729

1 0

openSUSE-RU-2015:2321-1: moderate: Recommended update for release-notes-openSUSE
by maintenance＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Recommended Update: Recommended update for release-notes-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2321-1 Rating: moderate References: #932502 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for release-notes-openSUSE fixes the following issues: - 13.2.20151214 (tracked in boo#932502) - fixed typo - updated translations Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-917=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): release-notes-openSUSE-13.2.20151214-23.1 References: https://bugzilla.suse.com/932502

1 0

openSUSE-RU-2015:2320-1: moderate: Recommended update for yast2-kdump
by maintenance＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Recommended Update: Recommended update for yast2-kdump ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2320-1 Rating: moderate References: #951212 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 3.1.34 for yast2-kdump: - manage the value of the fadump kernel param (boo#951212) - 3.1.34 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-919=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): yast2-kdump-3.1.34-3.1 References: https://bugzilla.suse.com/951212

1 0

openSUSE-RU-2015:2319-1: moderate: Recommended update for star
by maintenance＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Recommended Update: Recommended update for star ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2319-1 Rating: moderate References: #952299 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for star fixes the following issues: - update star-1.5.1-bufferoverflow.patch to fix buffer overflow in longnames.c in a case of files with name 100 characters long [boo#952299] Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-922=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): star-1.5final-72.1 star-debuginfo-1.5final-72.1 star-debugsource-1.5final-72.1 References: https://bugzilla.suse.com/952299

1 0

openSUSE-SU-2015:2318-1: moderate: Security update for libressl
by opensuse-security＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Security Update: Security update for libressl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2318-1 Rating: moderate References: #958768 Cross-References: CVE-2015-3194 CVE-2015-3195 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: LibreSSL was updated to fix two security issues inherited from OpenSSL. The following vulnerabilities were fixed: * CVE-2015-3194: NULL pointer dereference in client side certificate validation * CVE-2015-3195: Memory leak in PKCS7 - not reachable from TLS/SSL Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-916=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-916=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libcrypto36-2.3.0-7.1 libcrypto36-debuginfo-2.3.0-7.1 libressl-2.3.0-7.1 libressl-debuginfo-2.3.0-7.1 libressl-debugsource-2.3.0-7.1 libressl-devel-2.3.0-7.1 libssl37-2.3.0-7.1 libssl37-debuginfo-2.3.0-7.1 libtls9-2.3.0-7.1 libtls9-debuginfo-2.3.0-7.1 - openSUSE Leap 42.1 (x86_64): libcrypto36-32bit-2.3.0-7.1 libcrypto36-debuginfo-32bit-2.3.0-7.1 libressl-devel-32bit-2.3.0-7.1 libssl37-32bit-2.3.0-7.1 libssl37-debuginfo-32bit-2.3.0-7.1 libtls9-32bit-2.3.0-7.1 libtls9-debuginfo-32bit-2.3.0-7.1 - openSUSE Leap 42.1 (noarch): libressl-devel-doc-2.3.0-7.1 - openSUSE 13.2 (i586 x86_64): libcrypto34-2.2.1-2.10.1 libcrypto34-debuginfo-2.2.1-2.10.1 libressl-2.2.1-2.10.1 libressl-debuginfo-2.2.1-2.10.1 libressl-debugsource-2.2.1-2.10.1 libressl-devel-2.2.1-2.10.1 libssl33-2.2.1-2.10.1 libssl33-debuginfo-2.2.1-2.10.1 libtls4-2.2.1-2.10.1 libtls4-debuginfo-2.2.1-2.10.1 - openSUSE 13.2 (x86_64): libcrypto34-32bit-2.2.1-2.10.1 libcrypto34-debuginfo-32bit-2.2.1-2.10.1 libressl-devel-32bit-2.2.1-2.10.1 libssl33-32bit-2.2.1-2.10.1 libssl33-debuginfo-32bit-2.2.1-2.10.1 libtls4-32bit-2.2.1-2.10.1 libtls4-debuginfo-32bit-2.2.1-2.10.1 - openSUSE 13.2 (noarch): libressl-devel-doc-2.2.1-2.10.1 References: https://www.suse.com/security/cve/CVE-2015-3194.html https://www.suse.com/security/cve/CVE-2015-3195.html https://bugzilla.suse.com/958768

1 0

openSUSE-RU-2015:2317-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2317-1 Rating: moderate References: #955115 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for grub2 fixes the following issues: - Fix wrong escape sequence in previous commit (boo#955115) * modified grub2-snapper-plugin.sh - Fix snapshot booting on s390x (boo#955115) * modified grub2-snapper-plugin.sh Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-927=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): grub2-2.02~beta2-73.1 grub2-branding-upstream-2.02~beta2-73.1 grub2-debuginfo-2.02~beta2-73.1 grub2-i386-pc-2.02~beta2-73.1 - openSUSE Leap 42.1 (x86_64): grub2-x86_64-efi-2.02~beta2-73.1 grub2-x86_64-xen-2.02~beta2-73.1 - openSUSE Leap 42.1 (noarch): grub2-snapper-plugin-2.02~beta2-73.1 - openSUSE Leap 42.1 (i586): grub2-i386-efi-2.02~beta2-73.1 References: https://bugzilla.suse.com/955115

1 0

openSUSE-RU-2015:2316-1: moderate: Recommended update for autoyast2
by maintenance＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Recommended Update: Recommended update for autoyast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2316-1 Rating: moderate References: #955657 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for autoyast2 fixes the following issues: - Evaluating needed YAST packages which are defined in the AutoYaST configuration file and selecting these packages for installation. (boo#955657) - 3.1.101.2 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-928=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): autoyast2-3.1.101.2-6.1 autoyast2-installation-3.1.101.2-6.1 References: https://bugzilla.suse.com/955657

1 0

openSUSE-RU-2015:2315-1: moderate: Recommended update for nfs-utils
by maintenance＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Recommended Update: Recommended update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2315-1 Rating: moderate References: #952055 #954165 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for nfs-utils fixes the following issues: - Re-order service list for %service_add_{pre,post} to ensure migration (boo#954165). - Use proper annotations for service restart (boo#952055). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-925=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): nfs-client-1.3.0-11.1 nfs-client-debuginfo-1.3.0-11.1 nfs-doc-1.3.0-11.1 nfs-kernel-server-1.3.0-11.1 nfs-kernel-server-debuginfo-1.3.0-11.1 nfs-utils-debugsource-1.3.0-11.1 References: https://bugzilla.suse.com/952055 https://bugzilla.suse.com/954165

1 0

openSUSE-RU-2015:2314-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2314-1 Rating: moderate References: #944349 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for yast2-network fixes the following issues: - boo#944349 - do not set links down when running AY installation over ssh. SSH installation do not freeze. - 3.1.134 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-923=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): yast2-network-3.1.134-3.1 yast2-network-devel-doc-3.1.134-3.1 References: https://bugzilla.suse.com/944349

1 0

openSUSE-RU-2015:2313-1: moderate: Recommended update for yast2-reipl
by maintenance＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Recommended Update: Recommended update for yast2-reipl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2313-1 Rating: moderate References: #943582 #954952 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-reipl fixes the following issues: - Fixed an internal error on z/kvm (boo#954952) - Require shutdown in zkvm (boo#943582) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-929=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): yast2-reipl-3.1.8-7.1 References: https://bugzilla.suse.com/943582 https://bugzilla.suse.com/954952

1 0

openSUSE-RU-2015:2312-1: moderate: Recommended update for yast2-installation
by maintenance＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Recommended Update: Recommended update for yast2-installation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2312-1 Rating: moderate References: #935965 #956745 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for yast2-installation fixes the following issues: - Do not crash in proposal client if zfcp proposal reports itself as unavailable (boo#956745) - 3.1.162.1 - Ensure second stage and YaST-Firstboot don't get killed by getty when running over serial console (boo#935965) - 3.1.162 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-920=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): yast2-installation-3.1.162.1-3.1 yast2-installation-devel-doc-3.1.162.1-3.1 References: https://bugzilla.suse.com/935965 https://bugzilla.suse.com/956745

1 0

openSUSE-RU-2015:2311-1: moderate: Recommended update for clamav
by maintenance＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Recommended Update: Recommended update for clamav ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2311-1 Rating: moderate References: #957728 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: ClamAV was updated to version 0.99, bringing the following fixes and enhancements: - Support in ClamAV logical signatures for many of the features added for YARA, such as Perl Compatible Regular Expressions, alternate strings, and YARA string attributes. See signatures.pdf for full details. - New and improved on-access scanning for Linux. See clamdoc.pdf for details on the new on-access capabilities. - A new ClamAV API callback function that is invoked when a virus is found. This is intended primarily for applications running in all-match mode. Any applications using all-match mode must use the new callback function to record and report detected viruses. - Configurable default password list to attempt zip file decryption. - TIFF file support. - A new signature target type for designating signatures to run against files with unknown file types. - Improved fidelity of the "data loss prevention" heuristic algorithm. - Support for LZMA decompression within Adobe Flash files. - Support for MSO attachments within Microsoft Office 2003 XML files. - A new sigtool option(--ascii-normalize) allowing signature authors to more easily generate normalized versions of ascii files. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-930=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): clamav-0.99-4.1 clamav-debuginfo-0.99-4.1 clamav-debugsource-0.99-4.1 References: https://bugzilla.suse.com/957728

1 0

openSUSE-RU-2015:2310-1: moderate: Recommended update for lvm2
by maintenance＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Recommended Update: Recommended update for lvm2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2310-1 Rating: moderate References: #948859 #954744 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for lvm2 fixes the following issues: - Merge the configuration item "debug_class" into one line (boo#954744). - Only not support unpartitioned DASD device with CDL formatted. (boo#948859#946217) add: pvcreate-don-t-support-unpartitioned-DASD-devices-with-CDL-formatted.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-926=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): device-mapper-1.02.97-64.1 device-mapper-debuginfo-1.02.97-64.1 device-mapper-devel-1.02.97-64.1 lvm2-2.02.120-64.1 lvm2-clvm-2.02.120-64.1 lvm2-clvm-debuginfo-2.02.120-64.1 lvm2-cmirrord-2.02.120-64.1 lvm2-cmirrord-debuginfo-2.02.120-64.1 lvm2-debuginfo-2.02.120-64.1 lvm2-debugsource-2.02.120-64.1 lvm2-devel-2.02.120-64.1 - openSUSE Leap 42.1 (x86_64): device-mapper-32bit-1.02.97-64.1 device-mapper-debuginfo-32bit-1.02.97-64.1 device-mapper-devel-32bit-1.02.97-64.1 References: https://bugzilla.suse.com/948859 https://bugzilla.suse.com/954744

1 0

openSUSE-RU-2015:2309-1: Recommended update for clamav-database
by maintenance＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2309-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh December 14th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-918=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201512140000-23.1 References:

1 0

openSUSE-RU-2015:2308-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2308-1 Rating: moderate References: #955114 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for resource-agents fixes the following issues: - nfsserver: Use rpc-statd.service for NFS locking in EXEC_MODE=3 (boo#955114) - Add 0002-nfsserver-Use-rpc-statd.service-for-NFS-locking-in-E.patch - nfsserver: Add EXEC_MODE for systemd without nfs-lock.service (boo#955114) - Add 0001-nfsserver-Add-EXEC_MODE-for-systemd-without-nfs-lock.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-924=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ldirectord-3.9.6+git.1442374860.7f3628a-3.1 monitoring-plugins-metadata-3.9.6+git.1442374860.7f3628a-3.1 resource-agents-3.9.6+git.1442374860.7f3628a-3.1 resource-agents-debuginfo-3.9.6+git.1442374860.7f3628a-3.1 resource-agents-debugsource-3.9.6+git.1442374860.7f3628a-3.1 References: https://bugzilla.suse.com/955114

1 0

openSUSE-RU-2015:2307-1: moderate: Recommended update for translation-update-upstream
by maintenance＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Recommended Update: Recommended update for translation-update-upstream ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2307-1 Rating: moderate References: #933411 #947771 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for translation-update-upstream fixes the following issues: - Update of translation-update-upstream-20150820.1.tar.bz2: * Added ibus. - Add github.tlst with ibus (dummy boo#933411). - Update of translation-update-mandatory-20151020.1.tar.bz2: * Updated NetworkManager-vpnc (boo#947771). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-921=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): translation-update-upstream-20150820.2-3.1 References: https://bugzilla.suse.com/933411 https://bugzilla.suse.com/947771

1 0

openSUSE-RU-2015:2301-1: moderate: Recommended update for calibre
by maintenance＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Recommended Update: Recommended update for calibre ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2301-1 Rating: moderate References: #935943 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 2.46.0 for calibre: - Updated BuildRequires and Requires to the latest requirements (this should prevent bugs like #boo935943). - Update to 2.46.0: * PDF Input: Add support for PDF outlines (bookmarks), if present, they are used as the metadata Table of Contents. * Add tool to compress images losslessly. * Add support for new Kobo firmware 3.19. * Disable the Amazon EU stores, at Amazon's request. * And more, for details see: http://calibre-ebook.com/whats-new - Update to 2.45.0: * Improved handling of covers. * And more, for details see: http://calibre-ebook.com/whats-new - Update to 2.43.0: * Driver for the new NookGlowlight Plus. This device only allows sending of files inside the NOOK folder, so calibre now follows that limitation. * When converting AZW4 files to PDF, skip the conversion and simply unwrap the PDF file already embedded inside the AZW4 file. * Edit Book: Add a 'Smart Comment' tool to easily comment/ uncomment text. * Tag mapper: Add new rule types to upper-case, lower-case or capitalize tags. * Amazon metadata download: Fix for website change at amazon.com that prevented ratings from being downloaded. * And more, for details see: http://calibre-ebook.com/whats-new - Update to 2.41.0: * Edit Book: Allow editing an unzipped EPUB (a folder) as a book * Edit Book: Allow easily removing items from the popup menu for the 'Insert tag' button. * Make Tag Browser more useable with keyboard shortcuts. Configure the keyboard shortcuts in Preferences->Keyboard->Tag Browser. * ToC editor: Add context menu item to change selected entries to upper case. * Bugfixes and improved news sources. * For details see http://calibre-ebook.com/whats-new - Update to 2.40.0: * A new tool to apply Tag mapper rules to existing books in the library. To use it, go to Preferences->Toolbars and add the tool to the toolbar. * Kindle driver: Detect books in Amazon's new KFX format present on e-ink kindles (this only detects KFX books and allows to delete, nothing more). * For details see http://calibre-ebook.com/whats-new Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-914=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): calibre-2.46.0-6.1 calibre-debuginfo-2.46.0-6.1 calibre-debugsource-2.46.0-6.1 References: https://bugzilla.suse.com/935943

1 0

openSUSE-SU-2015:2300-1: moderate: Security update for libXfont
by opensuse-security＠opensuse.org 18 Dec '15

18 Dec '15

openSUSE Security Update: Security update for libXfont ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2300-1 Rating: moderate References: #958383 Cross-References: CVE-2015-1804 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libXfont fixes the following issue: - A negative DWIDTH is legal. This was broken by the security fix for CVE-2015-1804. (boo#958383). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-913=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-913=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-913=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libXfont-debugsource-1.5.1-7.1 libXfont-devel-1.5.1-7.1 libXfont1-1.5.1-7.1 libXfont1-debuginfo-1.5.1-7.1 - openSUSE Leap 42.1 (x86_64): libXfont-devel-32bit-1.5.1-7.1 libXfont1-32bit-1.5.1-7.1 libXfont1-debuginfo-32bit-1.5.1-7.1 - openSUSE 13.2 (i586 x86_64): libXfont-debugsource-1.5.0-2.7.1 libXfont-devel-1.5.0-2.7.1 libXfont1-1.5.0-2.7.1 libXfont1-debuginfo-1.5.0-2.7.1 - openSUSE 13.2 (x86_64): libXfont-devel-32bit-1.5.0-2.7.1 libXfont1-32bit-1.5.0-2.7.1 libXfont1-debuginfo-32bit-1.5.0-2.7.1 - openSUSE 13.1 (i586 x86_64): libXfont-debugsource-1.4.6-2.15.1 libXfont-devel-1.4.6-2.15.1 libXfont1-1.4.6-2.15.1 libXfont1-debuginfo-1.4.6-2.15.1 - openSUSE 13.1 (x86_64): libXfont-devel-32bit-1.4.6-2.15.1 libXfont1-32bit-1.4.6-2.15.1 libXfont1-debuginfo-32bit-1.4.6-2.15.1 References: https://www.suse.com/security/cve/CVE-2015-1804.html https://bugzilla.suse.com/958383

1 0

openSUSE-SU-2015:2291-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 17 Dec '15

17 Dec '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2291-1 Rating: important References: #957519 #958481 Cross-References: CVE-2015-6764 CVE-2015-6765 CVE-2015-6766 CVE-2015-6767 CVE-2015-6768 CVE-2015-6769 CVE-2015-6770 CVE-2015-6771 CVE-2015-6772 CVE-2015-6773 CVE-2015-6774 CVE-2015-6775 CVE-2015-6776 CVE-2015-6777 CVE-2015-6778 CVE-2015-6779 CVE-2015-6780 CVE-2015-6781 CVE-2015-6782 CVE-2015-6783 CVE-2015-6784 CVE-2015-6785 CVE-2015-6786 CVE-2015-6787 CVE-2015-6788 CVE-2015-6789 CVE-2015-6790 CVE-2015-6791 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 28 vulnerabilities is now available. Description: Chromium was updated to 47.0.2526.80 to fix security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-6788: Type confusion in extensions * CVE-2015-6789: Use-after-free in Blink * CVE-2015-6790: Escaping issue in saved pages * CVE-2015-6791: Various fixes from internal audits, fuzzing and other initiatives The following vulnerabilities were fixed in 47.0.2526.73: * CVE-2015-6765: Use-after-free in AppCache * CVE-2015-6766: Use-after-free in AppCache * CVE-2015-6767: Use-after-free in AppCache * CVE-2015-6768: Cross-origin bypass in DOM * CVE-2015-6769: Cross-origin bypass in core * CVE-2015-6770: Cross-origin bypass in DOM * CVE-2015-6771: Out of bounds access in v8 * CVE-2015-6772: Cross-origin bypass in DOM * CVE-2015-6764: Out of bounds access in v8 * CVE-2015-6773: Out of bounds access in Skia * CVE-2015-6774: Use-after-free in Extensions * CVE-2015-6775: Type confusion in PDFium * CVE-2015-6776: Out of bounds access in PDFium * CVE-2015-6777: Use-after-free in DOM * CVE-2015-6778: Out of bounds access in PDFium * CVE-2015-6779: Scheme bypass in PDFium * CVE-2015-6780: Use-after-free in Infobars * CVE-2015-6781: Integer overflow in Sfntly * CVE-2015-6782: Content spoofing in Omnibox * CVE-2015-6783: Signature validation issue in Android Crazy Linker. * CVE-2015-6784: Escaping issue in saved pages * CVE-2015-6785: Wildcard matching issue in CSP * CVE-2015-6786: Scheme bypass in CSP * CVE-2015-6787: Various fixes from internal audits, fuzzing and other initiatives. * Multiple vulnerabilities in V8 fixed at the tip of the 4.7 branch (currently 4.7.80.23) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-912=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-47.0.2526.80-35.1 chromedriver-debuginfo-47.0.2526.80-35.1 chromium-47.0.2526.80-35.1 chromium-debuginfo-47.0.2526.80-35.1 chromium-debugsource-47.0.2526.80-35.1 chromium-desktop-gnome-47.0.2526.80-35.1 chromium-desktop-kde-47.0.2526.80-35.1 chromium-ffmpegsumo-47.0.2526.80-35.1 chromium-ffmpegsumo-debuginfo-47.0.2526.80-35.1 imlib2-1.4.5-2.1 imlib2-debuginfo-1.4.5-2.1 imlib2-debugsource-1.4.5-2.1 imlib2-devel-1.4.5-2.1 imlib2-filters-1.4.5-2.1 imlib2-filters-debuginfo-1.4.5-2.1 imlib2-loaders-1.4.5-2.1 imlib2-loaders-debuginfo-1.4.5-2.1 libImlib2-1-1.4.5-2.1 libImlib2-1-debuginfo-1.4.5-2.1 References: https://www.suse.com/security/cve/CVE-2015-6764.html https://www.suse.com/security/cve/CVE-2015-6765.html https://www.suse.com/security/cve/CVE-2015-6766.html https://www.suse.com/security/cve/CVE-2015-6767.html https://www.suse.com/security/cve/CVE-2015-6768.html https://www.suse.com/security/cve/CVE-2015-6769.html https://www.suse.com/security/cve/CVE-2015-6770.html https://www.suse.com/security/cve/CVE-2015-6771.html https://www.suse.com/security/cve/CVE-2015-6772.html https://www.suse.com/security/cve/CVE-2015-6773.html https://www.suse.com/security/cve/CVE-2015-6774.html https://www.suse.com/security/cve/CVE-2015-6775.html https://www.suse.com/security/cve/CVE-2015-6776.html https://www.suse.com/security/cve/CVE-2015-6777.html https://www.suse.com/security/cve/CVE-2015-6778.html https://www.suse.com/security/cve/CVE-2015-6779.html https://www.suse.com/security/cve/CVE-2015-6780.html https://www.suse.com/security/cve/CVE-2015-6781.html https://www.suse.com/security/cve/CVE-2015-6782.html https://www.suse.com/security/cve/CVE-2015-6783.html https://www.suse.com/security/cve/CVE-2015-6784.html https://www.suse.com/security/cve/CVE-2015-6785.html https://www.suse.com/security/cve/CVE-2015-6786.html https://www.suse.com/security/cve/CVE-2015-6787.html https://www.suse.com/security/cve/CVE-2015-6788.html https://www.suse.com/security/cve/CVE-2015-6789.html https://www.suse.com/security/cve/CVE-2015-6790.html https://www.suse.com/security/cve/CVE-2015-6791.html https://bugzilla.suse.com/957519 https://bugzilla.suse.com/958481

1 0

openSUSE-SU-2015:2290-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 17 Dec '15

17 Dec '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2290-1 Rating: important References: #957519 #958481 Cross-References: CVE-2015-6764 CVE-2015-6765 CVE-2015-6766 CVE-2015-6767 CVE-2015-6768 CVE-2015-6769 CVE-2015-6770 CVE-2015-6771 CVE-2015-6772 CVE-2015-6773 CVE-2015-6774 CVE-2015-6775 CVE-2015-6776 CVE-2015-6777 CVE-2015-6778 CVE-2015-6779 CVE-2015-6780 CVE-2015-6781 CVE-2015-6782 CVE-2015-6783 CVE-2015-6784 CVE-2015-6785 CVE-2015-6786 CVE-2015-6787 CVE-2015-6788 CVE-2015-6789 CVE-2015-6790 CVE-2015-6791 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 28 vulnerabilities is now available. Description: Chromium was updated to 47.0.2526.80 to fix security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-6788: Type confusion in extensions * CVE-2015-6789: Use-after-free in Blink * CVE-2015-6790: Escaping issue in saved pages * CVE-2015-6791: Various fixes from internal audits, fuzzing and other initiatives The following vulnerabilities were fixed in 47.0.2526.73: * CVE-2015-6765: Use-after-free in AppCache * CVE-2015-6766: Use-after-free in AppCache * CVE-2015-6767: Use-after-free in AppCache * CVE-2015-6768: Cross-origin bypass in DOM * CVE-2015-6769: Cross-origin bypass in core * CVE-2015-6770: Cross-origin bypass in DOM * CVE-2015-6771: Out of bounds access in v8 * CVE-2015-6772: Cross-origin bypass in DOM * CVE-2015-6764: Out of bounds access in v8 * CVE-2015-6773: Out of bounds access in Skia * CVE-2015-6774: Use-after-free in Extensions * CVE-2015-6775: Type confusion in PDFium * CVE-2015-6776: Out of bounds access in PDFium * CVE-2015-6777: Use-after-free in DOM * CVE-2015-6778: Out of bounds access in PDFium * CVE-2015-6779: Scheme bypass in PDFium * CVE-2015-6780: Use-after-free in Infobars * CVE-2015-6781: Integer overflow in Sfntly * CVE-2015-6782: Content spoofing in Omnibox * CVE-2015-6783: Signature validation issue in Android Crazy Linker. * CVE-2015-6784: Escaping issue in saved pages * CVE-2015-6785: Wildcard matching issue in CSP * CVE-2015-6786: Scheme bypass in CSP * CVE-2015-6787: Various fixes from internal audits, fuzzing and other initiatives. * Multiple vulnerabilities in V8 fixed at the tip of the 4.7 branch (currently 4.7.80.23) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-912=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-912=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-912=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): chromedriver-47.0.2526.80-7.1 chromedriver-debuginfo-47.0.2526.80-7.1 chromium-47.0.2526.80-7.1 chromium-debuginfo-47.0.2526.80-7.1 chromium-debugsource-47.0.2526.80-7.1 chromium-desktop-gnome-47.0.2526.80-7.1 chromium-desktop-kde-47.0.2526.80-7.1 chromium-ffmpegsumo-47.0.2526.80-7.1 chromium-ffmpegsumo-debuginfo-47.0.2526.80-7.1 - openSUSE 13.2 (i586 x86_64): chromedriver-47.0.2526.80-61.1 chromedriver-debuginfo-47.0.2526.80-61.1 chromium-47.0.2526.80-61.1 chromium-debuginfo-47.0.2526.80-61.1 chromium-debugsource-47.0.2526.80-61.1 chromium-desktop-gnome-47.0.2526.80-61.1 chromium-desktop-kde-47.0.2526.80-61.1 chromium-ffmpegsumo-47.0.2526.80-61.1 chromium-ffmpegsumo-debuginfo-47.0.2526.80-61.1 - openSUSE 13.1 (i586 x86_64): chromedriver-47.0.2526.80-116.1 chromedriver-debuginfo-47.0.2526.80-116.1 chromium-47.0.2526.80-116.1 chromium-debuginfo-47.0.2526.80-116.1 chromium-debugsource-47.0.2526.80-116.1 chromium-desktop-gnome-47.0.2526.80-116.1 chromium-desktop-kde-47.0.2526.80-116.1 chromium-ffmpegsumo-47.0.2526.80-116.1 chromium-ffmpegsumo-debuginfo-47.0.2526.80-116.1 References: https://www.suse.com/security/cve/CVE-2015-6764.html https://www.suse.com/security/cve/CVE-2015-6765.html https://www.suse.com/security/cve/CVE-2015-6766.html https://www.suse.com/security/cve/CVE-2015-6767.html https://www.suse.com/security/cve/CVE-2015-6768.html https://www.suse.com/security/cve/CVE-2015-6769.html https://www.suse.com/security/cve/CVE-2015-6770.html https://www.suse.com/security/cve/CVE-2015-6771.html https://www.suse.com/security/cve/CVE-2015-6772.html https://www.suse.com/security/cve/CVE-2015-6773.html https://www.suse.com/security/cve/CVE-2015-6774.html https://www.suse.com/security/cve/CVE-2015-6775.html https://www.suse.com/security/cve/CVE-2015-6776.html https://www.suse.com/security/cve/CVE-2015-6777.html https://www.suse.com/security/cve/CVE-2015-6778.html https://www.suse.com/security/cve/CVE-2015-6779.html https://www.suse.com/security/cve/CVE-2015-6780.html https://www.suse.com/security/cve/CVE-2015-6781.html https://www.suse.com/security/cve/CVE-2015-6782.html https://www.suse.com/security/cve/CVE-2015-6783.html https://www.suse.com/security/cve/CVE-2015-6784.html https://www.suse.com/security/cve/CVE-2015-6785.html https://www.suse.com/security/cve/CVE-2015-6786.html https://www.suse.com/security/cve/CVE-2015-6787.html https://www.suse.com/security/cve/CVE-2015-6788.html https://www.suse.com/security/cve/CVE-2015-6789.html https://www.suse.com/security/cve/CVE-2015-6790.html https://www.suse.com/security/cve/CVE-2015-6791.html https://bugzilla.suse.com/957519 https://bugzilla.suse.com/958481

1 0

openSUSE-SU-2015:2289-1: moderate: Security update for openssl
by opensuse-security＠opensuse.org 17 Dec '15

17 Dec '15

openSUSE Security Update: Security update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2289-1 Rating: moderate References: #954256 #957812 #957813 #957815 Cross-References: CVE-2015-3194 CVE-2015-3195 CVE-2015-3196 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for openssl fixes the following issues: Security fixes: - CVE-2015-3194: The signature verification routines will crash with a NULL pointer dereference if presented with an ASN.1 signature using the RSA PSS algorithm and absent mask generation function parameter. Since these routines are used to verify certificate signature algorithms this can be used to crash any certificate verification operation and exploited in a DoS attack. Any application which performs certificate verification is vulnerable including OpenSSL clients and servers which enable client authentication. (bsc#957815) - CVE-2015-3195: When presented with a malformed X509_ATTRIBUTE structure OpenSSL would leak memory. This structure is used by the PKCS#7 and CMS routines so any application which reads PKCS#7 or CMS data from untrusted sources is affected. SSL/TLS is not affected. (bsc#957812) - CVE-2015-3196: If PSK identity hints are received by a multi-threaded client then the values were wrongly updated in the parent SSL_CTX structure. This could result in a race condition potentially leading to a double free of the identify hint data. (bsc#957813) Non security bugs fixed: - Improve S/390 performance on IBM z196 and z13 (bsc#954256) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-911=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libopenssl-devel-1.0.1i-9.1 libopenssl1_0_0-1.0.1i-9.1 libopenssl1_0_0-debuginfo-1.0.1i-9.1 libopenssl1_0_0-hmac-1.0.1i-9.1 openssl-1.0.1i-9.1 openssl-debuginfo-1.0.1i-9.1 openssl-debugsource-1.0.1i-9.1 - openSUSE Leap 42.1 (x86_64): libopenssl-devel-32bit-1.0.1i-9.1 libopenssl1_0_0-32bit-1.0.1i-9.1 libopenssl1_0_0-debuginfo-32bit-1.0.1i-9.1 libopenssl1_0_0-hmac-32bit-1.0.1i-9.1 - openSUSE Leap 42.1 (noarch): openssl-doc-1.0.1i-9.1 References: https://www.suse.com/security/cve/CVE-2015-3194.html https://www.suse.com/security/cve/CVE-2015-3195.html https://www.suse.com/security/cve/CVE-2015-3196.html https://bugzilla.suse.com/954256 https://bugzilla.suse.com/957812 https://bugzilla.suse.com/957813 https://bugzilla.suse.com/957815

1 0

openSUSE-SU-2015:2288-1: moderate: Security update for OpenSSL
by opensuse-security＠opensuse.org 17 Dec '15

17 Dec '15

openSUSE Security Update: Security update for OpenSSL ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2288-1 Rating: moderate References: #957812 #957813 #957815 Cross-References: CVE-2015-3194 CVE-2015-3195 CVE-2015-3196 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: OpenSSL was updated to fix three security issues. The following vulnerabilities were fixed: * CVE-2015-3194: Certificate verify crash with missing PSS parameter (bsc#957815) * CVE-2015-3195: X509_ATTRIBUTE memory leak (bsc#957812) * CVE-2015-3196: Race condition handling PSK identify hint (bsc#957813) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-908=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-908=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libopenssl-devel-1.0.1k-2.27.1 libopenssl1_0_0-1.0.1k-2.27.1 libopenssl1_0_0-debuginfo-1.0.1k-2.27.1 libopenssl1_0_0-hmac-1.0.1k-2.27.1 openssl-1.0.1k-2.27.1 openssl-debuginfo-1.0.1k-2.27.1 openssl-debugsource-1.0.1k-2.27.1 - openSUSE 13.2 (x86_64): libopenssl-devel-32bit-1.0.1k-2.27.1 libopenssl1_0_0-32bit-1.0.1k-2.27.1 libopenssl1_0_0-debuginfo-32bit-1.0.1k-2.27.1 libopenssl1_0_0-hmac-32bit-1.0.1k-2.27.1 - openSUSE 13.2 (noarch): openssl-doc-1.0.1k-2.27.1 - openSUSE 13.1 (i586 x86_64): libopenssl-devel-1.0.1k-11.75.1 libopenssl1_0_0-1.0.1k-11.75.1 libopenssl1_0_0-debuginfo-1.0.1k-11.75.1 openssl-1.0.1k-11.75.1 openssl-debuginfo-1.0.1k-11.75.1 openssl-debugsource-1.0.1k-11.75.1 - openSUSE 13.1 (x86_64): libopenssl-devel-32bit-1.0.1k-11.75.1 libopenssl1_0_0-32bit-1.0.1k-11.75.1 libopenssl1_0_0-debuginfo-32bit-1.0.1k-11.75.1 - openSUSE 13.1 (noarch): openssl-doc-1.0.1k-11.75.1 References: https://www.suse.com/security/cve/CVE-2015-3194.html https://www.suse.com/security/cve/CVE-2015-3195.html https://www.suse.com/security/cve/CVE-2015-3196.html https://bugzilla.suse.com/957812 https://bugzilla.suse.com/957813 https://bugzilla.suse.com/957815

1 0

openSUSE-RU-2015:2287-1: moderate: Recommended update for crda
by maintenance＠opensuse.org 17 Dec '15

17 Dec '15

openSUSE Recommended Update: Recommended update for crda ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2287-1 Rating: moderate References: #958089 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for crda fixes the following issues: - Update to version 3.18: * User visible: add pubkey of new wireless-regdb maintainer to make crda work at all with newer wireless-regdb * Synchronize code with latest kernel changes * Crda: add auto-bw rule flag support * Crda: parse/print cac time * Code restructuring and bug fixes *** License is now copyleft-next-0.3.0 *** * Shared library libreg.so is now used by the tools Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-910=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): crda-3.18-5.1 crda-debuginfo-3.18-5.1 crda-debugsource-3.18-5.1 References: https://bugzilla.suse.com/958089

1 0