December 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:2286-1: moderate: Recommended update for salt
by maintenance＠opensuse.org 17 Dec '15

17 Dec '15

openSUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2286-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update provides version 2015.8.3 for salt: - Updated to salt 2015.8.3 bugfix release - remove the following patches because upstream merged them: - 4b9302d79455d6a586b7cad1d7990cb22e7bc62e.patch - os_grain.patch - zypper_pkgrepo.patch - more details at: https://docs.saltstack.com/en/latest/topics/releases/2015.8.3.html Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-909=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): salt-2015.8.3-9.2 salt-api-2015.8.3-9.2 salt-cloud-2015.8.3-9.2 salt-doc-2015.8.3-9.2 salt-master-2015.8.3-9.2 salt-minion-2015.8.3-9.2 salt-proxy-2015.8.3-9.2 salt-raet-2015.8.3-9.2 salt-ssh-2015.8.3-9.2 salt-syndic-2015.8.3-9.2 - openSUSE Leap 42.1 (noarch): salt-bash-completion-2015.8.3-9.2 salt-fish-completion-2015.8.3-9.2 salt-zsh-completion-2015.8.3-9.2 References:

1 0

openSUSE-RU-2015:2285-1: moderate: Recommended update for eog-plugins, gnome-settings-daemon, gnome-taquin, hitori, iagno, nautilus
by maintenance＠opensuse.org 16 Dec '15

16 Dec '15

openSUSE Recommended Update: Recommended update for eog-plugins, gnome-settings-daemon, gnome-taquin, hitori, iagno, nautilus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2285-1 Rating: moderate References: #954734 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 3.16.3 for eog-plugins, gnome-settings-daemon, gnome-taquin, hitori, iagno, nautilus: - Update to version 3.16.3 (boo#954734): + Some entries of the popovermenu entry should be grayed when no image opened (bgo#755244). - Update to version 3.16.4 (boo#954734): + DateTime: - Ensure settings changes trigger the plugin. + XSettings: - Ensure settings changes trigger the plugin. - Fix cursor sizes being ignored. - Fix segfault when unloading. + Wacom: - Ensure settings changes trigger the plugin. - Fix left-handed mode. - Fix keep-aspect on multi-monitor. - Plug leaks. + Updated translations. - Update to version 3.16.2 (boo#954734): - Update to version 3.16.2 (boo#954734): + Fix build error with Clang. + Updated translations. - Update to version 3.16.2 (boo#954734): + Fix dragging the window after clicking the game view. + Updated translations. - Update to version 3.16.3 (boo#954734): + Show modified time in all places except Recent. + Fix crash for wrong handling of windows list. + Fix crash on smb:// directories. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-907=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): eog-plugin-exif-display-3.16.3-4.1 eog-plugin-exif-display-debuginfo-3.16.3-4.1 eog-plugin-export-to-folder-3.16.3-4.1 eog-plugin-fit-to-width-3.16.3-4.1 eog-plugin-fit-to-width-debuginfo-3.16.3-4.1 eog-plugin-fullscreenbg-3.16.3-4.1 eog-plugin-hide-titlebar-3.16.3-4.1 eog-plugin-hide-titlebar-debuginfo-3.16.3-4.1 eog-plugin-light-theme-3.16.3-4.1 eog-plugin-light-theme-debuginfo-3.16.3-4.1 eog-plugin-map-3.16.3-4.1 eog-plugin-map-debuginfo-3.16.3-4.1 eog-plugin-maximize-windows-3.16.3-4.1 eog-plugin-postasa-3.16.3-4.1 eog-plugin-postasa-debuginfo-3.16.3-4.1 eog-plugin-pythonconsole-3.16.3-4.1 eog-plugin-send-by-mail-3.16.3-4.1 eog-plugin-send-by-mail-debuginfo-3.16.3-4.1 eog-plugin-slideshowshuffle-3.16.3-4.1 eog-plugins-3.16.3-4.1 eog-plugins-debugsource-3.16.3-4.1 gnome-settings-daemon-3.16.4-7.1 gnome-settings-daemon-debuginfo-3.16.4-7.1 gnome-settings-daemon-debugsource-3.16.4-7.1 gnome-settings-daemon-devel-3.16.4-7.1 gnome-shell-search-provider-nautilus-3.16.3-5.1 gnome-taquin-3.16.2-4.1 gnome-taquin-debuginfo-3.16.2-4.1 gnome-taquin-debugsource-3.16.2-4.1 hitori-3.16.2-5.1 hitori-debuginfo-3.16.2-5.1 hitori-debugsource-3.16.2-5.1 iagno-3.16.2-6.1 iagno-debuginfo-3.16.2-6.1 iagno-debugsource-3.16.2-6.1 libnautilus-extension1-3.16.3-5.1 libnautilus-extension1-debuginfo-3.16.3-5.1 nautilus-3.16.3-5.1 nautilus-debuginfo-3.16.3-5.1 nautilus-debugsource-3.16.3-5.1 nautilus-devel-3.16.3-5.1 typelib-1_0-Nautilus-3_0-3.16.3-5.1 - openSUSE Leap 42.1 (x86_64): libnautilus-extension1-32bit-3.16.3-5.1 libnautilus-extension1-debuginfo-32bit-3.16.3-5.1 - openSUSE Leap 42.1 (noarch): eog-plugins-data-3.16.3-4.1 eog-plugins-lang-3.16.3-4.1 gnome-settings-daemon-lang-3.16.4-7.1 gnome-taquin-lang-3.16.2-4.1 hitori-lang-3.16.2-5.1 iagno-lang-3.16.2-6.1 nautilus-lang-3.16.3-5.1 References: https://bugzilla.suse.com/954734

1 0

openSUSE-RU-2015:2283-1: moderate: Recommended update for protobuf
by maintenance＠opensuse.org 16 Dec '15

16 Dec '15

openSUSE Recommended Update: Recommended update for protobuf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2283-1 Rating: moderate References: #957472 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for protobuf fixes the following issues: - disable google-apputils usage. They are only used for the testsuite which wasn't called anyways. The next upstream version will not use apputils anymore anyways. Fixes build on SLE12. https://github.com/google/protobuf/commit/9f42f5f4a423b923f7b07ae8c5e8db494 3df49c6 boo#957472 - Python bindings require a recent python-google-apputils, so build them where it's available (that's anything recent except SLE12) - Fix check so python bindings are not built in SLE12 - tweak spec to build python bindings for Leap 42.1 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-905=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libprotobuf-lite9-2.6.1-5.1 libprotobuf-lite9-debuginfo-2.6.1-5.1 libprotobuf9-2.6.1-5.1 libprotobuf9-debuginfo-2.6.1-5.1 libprotoc9-2.6.1-5.1 libprotoc9-debuginfo-2.6.1-5.1 protobuf-debugsource-2.6.1-5.1 protobuf-devel-2.6.1-5.1 protobuf-devel-debuginfo-2.6.1-5.1 protobuf-java-2.6.1-5.1 python-protobuf-2.6.1-5.1 - openSUSE Leap 42.1 (x86_64): libprotobuf-lite9-32bit-2.6.1-5.1 libprotobuf-lite9-debuginfo-32bit-2.6.1-5.1 libprotobuf9-32bit-2.6.1-5.1 libprotobuf9-debuginfo-32bit-2.6.1-5.1 libprotoc9-32bit-2.6.1-5.1 libprotoc9-debuginfo-32bit-2.6.1-5.1 References: https://bugzilla.suse.com/957472

1 0

openSUSE-RU-2015:2282-1: moderate: Recommended update for mc
by maintenance＠opensuse.org 16 Dec '15

16 Dec '15

openSUSE Recommended Update: Recommended update for mc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2282-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update provides version 4.8.15 for mc: - Submitting updated mc-4.8.15 to openSUSE:Leap:42.1:update to fix #boo958072, see fixes in the update changes entry. - verify the sha256 hash during build - Tag .sha256 file as source. - Update to 4.8.15: * Core: Minimal version of GLib is 2.26.0 Use the PATH environment variable to search for the executable when opening pipe (#3444) Support more than 2 (up to 9) columns in file panel in brief mode (#3212) Clarify file sorting in "Unsorted" mode (#3496) WGroupbox: respect dialog's colors (#3468) Highlight find file's result in internal viewer (#3530) * VFS: s3 extfs vfs: bugfixes and improvements (#3470, #3502) * Editor: Add hidden option to choose full or base file name in the status line (#3445) Improvements of syntax highlighting: Lua (#3471) PKGBUILD (#3484) * Misc: Text alignment in Info panel (#3155) Select of menu file edit: change default button to "User" (#3493) Recognize .gmo files as well as .mo ones (#3422) Fix mc.pot comment tripping up Transifex and unportable inplace sed (#3479) A lot of code clean up (#3420, #3424, #3426, #3427, #3428, #3429, #3430, #3431, #3434, #3435, #3437, #3463, #3464, #3465, #3466, #3467, #3494, #3495, #3539) Documentation updates: Spanish man and help: Diff Viewer section and minor fixes (#3477) VFS garbage collection (#3472) * Fixes: Various memory leaks (#3438, #3439, #3440, #3457, #3458, #3459, #3460, #3461, #3462, #3475, #3520, #3521, #3522) Linux kernel-specific segfault on startup (#3441) Lost of Panelize contents in some cases (#3032, #3489, #3498, #3507) Wrong highlight of search result in case of "Regular expression" and "Whole words" (#3524) "Whole words" search works only in Normal mode (#3525) SFTP VFS: segfault (#3456) Segfault in "Find file" due to invalid UTF-8 sequences (#3449) Bash variable 'PROMPT_COMMAND' in pantheon-terminal (#3534) - rebased mc-extd-xdg.patch against upstream changes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-906=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): mc-4.8.15-5.1 mc-debuginfo-4.8.15-5.1 mc-debugsource-4.8.15-5.1 - openSUSE Leap 42.1 (noarch): mc-lang-4.8.15-5.1 References:

1 0

openSUSE-RU-2015:2264-1: moderate: Recommended update for libqt5-creator
by maintenance＠opensuse.org 14 Dec '15

14 Dec '15

openSUSE Recommended Update: Recommended update for libqt5-creator ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2264-1 Rating: moderate References: #957185 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: libqt5-creator was updated to fix issues running QT Creator with some configurations. boo#957185: Fixes a library issuue that prevented QT Creator from running when lldb is installed. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-903=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libqt5-creator-3.5.1-3.1 libqt5-creator-debuginfo-3.5.1-3.1 libqt5-creator-debugsource-3.5.1-3.1 References: https://bugzilla.suse.com/957185

1 0

openSUSE-SU-2015:2263-1: moderate: Security update for libpng12
by opensuse-security＠opensuse.org 14 Dec '15

14 Dec '15

openSUSE Security Update: Security update for libpng12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2263-1 Rating: moderate References: #954980 Cross-References: CVE-2015-8126 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes the following security issue: * CVE-2015-8126 Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions (bsc#954980) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-902=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-902=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libpng12-0-1.2.51-3.6.1 libpng12-0-debuginfo-1.2.51-3.6.1 libpng12-compat-devel-1.2.51-3.6.1 libpng12-debugsource-1.2.51-3.6.1 libpng12-devel-1.2.51-3.6.1 - openSUSE 13.2 (x86_64): libpng12-0-32bit-1.2.51-3.6.1 libpng12-0-debuginfo-32bit-1.2.51-3.6.1 libpng12-compat-devel-32bit-1.2.51-3.6.1 libpng12-devel-32bit-1.2.51-3.6.1 - openSUSE 13.1 (i586 x86_64): libpng12-0-1.2.50-6.10.1 libpng12-0-debuginfo-1.2.50-6.10.1 libpng12-compat-devel-1.2.50-6.10.1 libpng12-debugsource-1.2.50-6.10.1 libpng12-devel-1.2.50-6.10.1 - openSUSE 13.1 (x86_64): libpng12-0-32bit-1.2.50-6.10.1 libpng12-0-debuginfo-32bit-1.2.50-6.10.1 libpng12-compat-devel-32bit-1.2.50-6.10.1 libpng12-devel-32bit-1.2.50-6.10.1 References: https://www.suse.com/security/cve/CVE-2015-8126.html https://bugzilla.suse.com/954980

1 0

openSUSE-SU-2015:2262-1: moderate: Security update for libpng16
by opensuse-security＠opensuse.org 14 Dec '15

14 Dec '15

openSUSE Security Update: Security update for libpng16 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2262-1 Rating: moderate References: #954980 Cross-References: CVE-2015-8126 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: libpng16 was updated to fix one security issue. The following vulnerability was fixed: * CVE-2015-8126: previously fixed incompletely [boo#954980] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-904=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-904=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libpng16-16-1.6.13-2.10.1 libpng16-16-debuginfo-1.6.13-2.10.1 libpng16-compat-devel-1.6.13-2.10.1 libpng16-debugsource-1.6.13-2.10.1 libpng16-devel-1.6.13-2.10.1 libpng16-tools-1.6.13-2.10.1 libpng16-tools-debuginfo-1.6.13-2.10.1 - openSUSE 13.2 (x86_64): libpng16-16-32bit-1.6.13-2.10.1 libpng16-16-debuginfo-32bit-1.6.13-2.10.1 libpng16-compat-devel-32bit-1.6.13-2.10.1 libpng16-devel-32bit-1.6.13-2.10.1 - openSUSE 13.1 (i586 x86_64): libpng16-16-1.6.6-22.1 libpng16-16-debuginfo-1.6.6-22.1 libpng16-compat-devel-1.6.6-22.1 libpng16-debugsource-1.6.6-22.1 libpng16-devel-1.6.6-22.1 libpng16-tools-1.6.6-22.1 libpng16-tools-debuginfo-1.6.6-22.1 - openSUSE 13.1 (x86_64): libpng16-16-32bit-1.6.6-22.1 libpng16-16-debuginfo-32bit-1.6.6-22.1 libpng16-compat-devel-32bit-1.6.6-22.1 libpng16-devel-32bit-1.6.6-22.1 References: https://www.suse.com/security/cve/CVE-2015-8126.html https://bugzilla.suse.com/954980

1 0

openSUSE-OU-2015:2261-1: moderate: Optional update for armadillo
by maintenance＠opensuse.org 13 Dec '15

13 Dec '15

openSUSE Optional Update: Optional update for armadillo ______________________________________________________________________________ Announcement ID: openSUSE-OU-2015:2261-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: Ambadillo was updated to the final stable 5.x release. Some feature were completed and bugs fixed in version 5.600.2: * Added .each_slice() for repeated matrix operations on each slice of a cube. * Expanded .each_col() and .each_row() to handle out-of-place operations. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-901=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): armadillo-devel-5.600.2-3.1 libarmadillo5-5.600.2-3.1 libarmadillo5-debuginfo-5.600.2-3.1 - openSUSE Leap 42.1 (x86_64): armadillo-devel-32bit-5.600.2-3.1 libarmadillo5-32bit-5.600.2-3.1 libarmadillo5-debuginfo-32bit-5.600.2-3.1 - openSUSE Leap 42.1 (noarch): armadillo-doc-5.600.2-3.1 References:

1 0

openSUSE-RU-2015:2260-1: Recommended update for xpp3
by maintenance＠opensuse.org 13 Dec '15

13 Dec '15

openSUSE Recommended Update: Recommended update for xpp3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2260-1 Rating: low References: #954455 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: xpp3 has been updated to version 1.1.4c, bringing the following fixes: - Updated SAX2 driver add-on. This includes a backward incompatible change: XmlElement will no longer accept null children (null can not be passed to addChild/addElement). - Fixed NullPointerException in MXParserCachingStrings. - Calling defineEntityReplacementText now works before calling setInput. - Fixed Serializer to no longer write endTag unmatching startTag. - Fixed XmlPull SAX2 driver not sending correct qname (rawName) in startElement() callback. - Fixed DOM2XmlPullBuilder not handling default namespaces. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-899=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): xpp3-1.1.4c-27.1 xpp3-javadoc-1.1.4c-27.1 xpp3-minimal-1.1.4c-27.1 References: https://bugzilla.suse.com/954455

1 0

openSUSE-RU-2015:2259-1: moderate: Recommended update for Mesa
by maintenance＠opensuse.org 13 Dec '15

13 Dec '15

openSUSE Recommended Update: Recommended update for Mesa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2259-1 Rating: moderate References: #945444 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Mesa was updated to fix a crash with certain hardware. The following bug was fixed: * boo#945444: plasma 5 crashes due to X/Mesa/Intel Drv bug. Workaround: remove early release of DRI2 miptree Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-896=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): Mesa-10.3.7-91.9.2 Mesa-debuginfo-10.3.7-91.9.2 Mesa-debugsource-10.3.7-91.9.2 Mesa-devel-10.3.7-91.9.2 Mesa-libEGL-devel-10.3.7-91.9.2 Mesa-libEGL1-10.3.7-91.9.2 Mesa-libEGL1-debuginfo-10.3.7-91.9.2 Mesa-libGL-devel-10.3.7-91.9.2 Mesa-libGL1-10.3.7-91.9.2 Mesa-libGL1-debuginfo-10.3.7-91.9.2 Mesa-libGLESv1_CM-devel-10.3.7-91.9.2 Mesa-libGLESv1_CM1-10.3.7-91.9.2 Mesa-libGLESv1_CM1-debuginfo-10.3.7-91.9.2 Mesa-libGLESv2-2-10.3.7-91.9.2 Mesa-libGLESv2-2-debuginfo-10.3.7-91.9.2 Mesa-libGLESv2-devel-10.3.7-91.9.2 Mesa-libGLESv3-devel-10.3.7-91.9.2 Mesa-libglapi-devel-10.3.7-91.9.2 Mesa-libglapi0-10.3.7-91.9.2 Mesa-libglapi0-debuginfo-10.3.7-91.9.2 libOSMesa-devel-10.3.7-91.9.2 libOSMesa9-10.3.7-91.9.2 libOSMesa9-debuginfo-10.3.7-91.9.2 libXvMC_nouveau-10.3.7-91.9.2 libXvMC_nouveau-debuginfo-10.3.7-91.9.2 libXvMC_r600-10.3.7-91.9.2 libgbm-devel-10.3.7-91.9.2 libgbm1-10.3.7-91.9.2 libgbm1-debuginfo-10.3.7-91.9.2 libvdpau_nouveau-10.3.7-91.9.2 libvdpau_nouveau-debuginfo-10.3.7-91.9.2 libvdpau_r600-10.3.7-91.9.2 libvdpau_radeonsi-10.3.7-91.9.2 libwayland-egl-devel-10.3.7-91.9.2 libwayland-egl1-10.3.7-91.9.2 libwayland-egl1-debuginfo-10.3.7-91.9.2 libxatracker-devel-1.0.0-91.9.2 libxatracker2-1.0.0-91.9.2 libxatracker2-debuginfo-1.0.0-91.9.2 - openSUSE 13.2 (x86_64): Mesa-32bit-10.3.7-91.9.2 Mesa-debuginfo-32bit-10.3.7-91.9.2 Mesa-libEGL-devel-32bit-10.3.7-91.9.2 Mesa-libEGL1-32bit-10.3.7-91.9.2 Mesa-libEGL1-debuginfo-32bit-10.3.7-91.9.2 Mesa-libGL-devel-32bit-10.3.7-91.9.2 Mesa-libGL1-32bit-10.3.7-91.9.2 Mesa-libGL1-debuginfo-32bit-10.3.7-91.9.2 Mesa-libGLESv1_CM-devel-32bit-10.3.7-91.9.2 Mesa-libGLESv1_CM1-32bit-10.3.7-91.9.2 Mesa-libGLESv1_CM1-debuginfo-32bit-10.3.7-91.9.2 Mesa-libGLESv2-2-32bit-10.3.7-91.9.2 Mesa-libGLESv2-2-debuginfo-32bit-10.3.7-91.9.2 Mesa-libGLESv2-devel-32bit-10.3.7-91.9.2 Mesa-libglapi-devel-32bit-10.3.7-91.9.2 Mesa-libglapi0-32bit-10.3.7-91.9.2 Mesa-libglapi0-debuginfo-32bit-10.3.7-91.9.2 libOSMesa-devel-32bit-10.3.7-91.9.2 libOSMesa9-32bit-10.3.7-91.9.2 libOSMesa9-debuginfo-32bit-10.3.7-91.9.2 libXvMC_nouveau-32bit-10.3.7-91.9.2 libXvMC_nouveau-debuginfo-32bit-10.3.7-91.9.2 libXvMC_r600-32bit-10.3.7-91.9.2 libgbm-devel-32bit-10.3.7-91.9.2 libgbm1-32bit-10.3.7-91.9.2 libgbm1-debuginfo-32bit-10.3.7-91.9.2 libvdpau_nouveau-32bit-10.3.7-91.9.2 libvdpau_nouveau-debuginfo-32bit-10.3.7-91.9.2 libvdpau_r600-32bit-10.3.7-91.9.2 libvdpau_radeonsi-32bit-10.3.7-91.9.2 libwayland-egl-devel-32bit-10.3.7-91.9.2 libwayland-egl1-32bit-10.3.7-91.9.2 libwayland-egl1-debuginfo-32bit-10.3.7-91.9.2 References: https://bugzilla.suse.com/945444

1 0

openSUSE-RU-2015:2258-1: moderate: Recommended update for plasma-nm
by maintenance＠opensuse.org 13 Dec '15

13 Dec '15

openSUSE Recommended Update: Recommended update for plasma-nm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2258-1 Rating: moderate References: #949054 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for plasma-nm fixes the following issues: * boo#949054: load when plasma-nm is idle affects battery life Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-895=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): plasma-nm-0.9.3.5-2.3.1 plasma-nm-debuginfo-0.9.3.5-2.3.1 plasma-nm-debugsource-0.9.3.5-2.3.1 plasma-nm-l2tp-0.9.3.5-2.3.1 plasma-nm-l2tp-debuginfo-0.9.3.5-2.3.1 plasma-nm-openconnect-0.9.3.5-2.3.1 plasma-nm-openconnect-debuginfo-0.9.3.5-2.3.1 plasma-nm-openswan-0.9.3.5-2.3.1 plasma-nm-openswan-debuginfo-0.9.3.5-2.3.1 plasma-nm-openvpn-0.9.3.5-2.3.1 plasma-nm-openvpn-debuginfo-0.9.3.5-2.3.1 plasma-nm-pptp-0.9.3.5-2.3.1 plasma-nm-pptp-debuginfo-0.9.3.5-2.3.1 plasma-nm-strongswan-0.9.3.5-2.3.1 plasma-nm-strongswan-debuginfo-0.9.3.5-2.3.1 plasma-nm-vpnc-0.9.3.5-2.3.1 plasma-nm-vpnc-debuginfo-0.9.3.5-2.3.1 - openSUSE 13.2 (noarch): plasma-nm-lang-0.9.3.5-2.3.1 References: https://bugzilla.suse.com/949054

1 0

openSUSE-SU-2015:2257-1: important: Security update for mbedtls
by opensuse-security＠opensuse.org 13 Dec '15

13 Dec '15

openSUSE Security Update: Security update for mbedtls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2257-1 Rating: important References: #949380 Cross-References: CVE-2015-5291 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mbedtls fixes the following security and non-security issues: - Update to 1.3.15 * Fix potential double free if ssl_set_psk() is called more than once and some allocation fails. Cannot be forced remotely. Found by Guido Vranken, Intelworks. * Fix potential heap corruption on windows when x509_crt_parse_path() is passed a path longer than 2GB. Cannot be triggered remotely. Found by Guido Vranken, Intelworks. * Fix potential buffer overflow in some asn1_write_xxx() functions. Cannot be triggered remotely unless you create X.509 certificates based on untrusted input or write keys of untrusted origin. Found by Guido Vranken, Intelworks. * The x509 max_pathlen constraint was not enforced on intermediate certificates. Found by Nicholas Wilson, fix and tests provided by Janos Follath. #280 and #319 * Self-signed certificates were not excluded from pathlen counting, resulting in some valid X.509 being incorrectly rejected. Found and fix provided by Janos Follath. #319 * Fix bug causing some handshakes to fail due to some non-fatal alerts not begin properly ignored. Found by mancha and Kasom Koht-arsa, #308 * Fix build error with configurations where ecdhe-psk is the only key exchange. Found and fix provided by Chris Hammond. #270 * Fix failures in mpi on sparc(64) due to use of bad assembly code. Found by Kurt Danielson. #292 * Fix typo in name of the extkeyusage oid. found by inestlerode, #314 * Fix bug in asn.1 encoding of booleans that caused generated ca certificates to be rejected by some applications, including OS X Keychain. Found and fixed by Jonathan Leroy, Inikup. * Fix "destination buffer is too small" error in cert_write program. Found and fixed by Jonathan Leroy, Inikup. - Update to 1.3.14 * Added fix for CVE-2015-5291 (boo#949380) to prevent heap corruption due to buffer overflow of the hostname or session ticket. Found by Guido Vranken, Intelworks. * Fix stack buffer overflow in pkcs12 decryption (used by mbedtls_pk_parse_key(file)() when the password is > 129 bytes. Found by Guido Vranken, Intelworks. Not triggerable remotely. * Fix potential buffer overflow in mbedtls_mpi_read_string(). Found by Guido Vranken, Intelworks. Not exploitable remotely in the context of TLS, but might be in other uses. On 32 bit machines, requires reading a string of close to or larger than 1GB to exploit; on 64 bit machines, would require reading a string of close to or larger than 2^62 bytes. * Fix potential random memory allocation in mbedtls_pem_read_buffer() on crafted PEM input data. Found and fix provided by Guido Vranken, Intelworks. Not triggerable remotely in TLS. Triggerable remotely if you accept PEM data from an untrusted source. * Fix potential double-free if ssl_set_psk() is called repeatedly on the same ssl_context object and some memory allocations fail. Found by Guido Vranken, Intelworks. Can not be forced remotely. * Fix possible heap buffer overflow in base64_encode() when the input buffer is 512MB or larger on 32-bit platforms. Found by Guido Vranken, Intelworks. Found by Guido Vranken. Not trigerrable remotely in TLS. * Fix potential heap buffer overflow in servers that perform client authentication against a crafted CA cert. Cannot be triggered remotely unless you allow third parties to pick trust CAs for client auth. Found by Guido Vranken, Intelworks. * Fix compile error in net.c with musl libc. found and patch provided by zhasha (#278). * Fix macroization of 'inline' keywork when building as c++. (#279) * Added checking of hostname length in ssl_set_hostname() to ensure domain names are compliant with RFC 1035. - Changes for 1.3.13 * Fix possible client-side null pointer dereference (read) when the client tries to continue the handshake after it failed (a misuse of the API). (Found and patch provided by Fabian Foerg, Gotham Digital Science using afl-fuzz.) * Add countermeasure against lenstra's rsa-crt attack for pkcs#1 v1.5 signatures. (Found by Florian Weimer, Red Hat.) https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perf ect-forward-secrecy/ * Setting ssl_min_dhm_bytes in config.h had no effect (overriden in ssl.h) (found by Fabio Solari) (#256) * Fix bug in mbedtls_rsa_public() and mbedtls_rsa_private() that could result trying to unlock an unlocked mutex on invalid input (found by Fredrik Axelsson) (#257) * Fix -wshadow warnings (found by hnrkp) (#240) * Fix unused function warning when using mbedtls_mdx_alt or MBEDTLS_SHAxxx_ALT (found by Henrik) (#239) * Fix memory corruption in pkey programs (found by yankuncheng) (#210) * Fix memory corruption on client with overlong psk identity, around SSL_MAX_CONTENT_LEN or higher - not triggerrable remotely (found by Aleksandrs Saveljevs) (#238) * Fix off-by-one error in parsing supported point format extension that caused some handshakes to fail. * When verifying a certificate chain, if an intermediate certificate is trusted, no later cert is checked. (suggested by hannes-landeholm) (#220). - Changes for 1.3.12 * Increase the minimum size of diffie-hellman parameters accepted by the client to 1024 bits, to protect against Logjam attack. * Increase the size of default diffie-hellman parameters on the server to 2048 bits. This can be changed with ssl_set_dh_params(). * Fix thread-safety issue in ssl debug module (found by edwin van vliet). * Some example programs were not built using make, not included in visual Studio projects (found by Kristian Bendiksen). * Fix build error with cmake and pre-4.5 versions of gcc (found by hugo Leisink). * Fix missing -static-ligcc when building shared libraries for windows with make. * Fix compile error with armcc5 --gnu. * Add ssl_min_dhm_bytes configuration parameter in config.h to choose the minimum size of Diffie-Hellman parameters accepted by the client. * The pem parser now accepts a trailing space at end of lines (#226). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-898=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libmbedtls9-1.3.15-6.1 libmbedtls9-debuginfo-1.3.15-6.1 mbedtls-debugsource-1.3.15-6.1 mbedtls-devel-1.3.15-6.1 - openSUSE Leap 42.1 (x86_64): libmbedtls9-32bit-1.3.15-6.1 libmbedtls9-debuginfo-32bit-1.3.15-6.1 References: https://www.suse.com/security/cve/CVE-2015-5291.html https://bugzilla.suse.com/949380

1 0

openSUSE-SU-2015:2256-1: Security update for libraw
by opensuse-security＠opensuse.org 13 Dec '15

13 Dec '15

openSUSE Security Update: Security update for libraw ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2256-1 Rating: low References: #957517 Cross-References: CVE-2015-8367 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes the following security issue: * CVE-2015-8367 - It was found that phase_one_correct function does not handle memory object’s initialization correctly, which may have unspecified impact (bsc#957517). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-900=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-900=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libraw-debugsource-0.16.0-2.6.1 libraw-devel-0.16.0-2.6.1 libraw-devel-static-0.16.0-2.6.1 libraw-tools-0.16.0-2.6.1 libraw-tools-debuginfo-0.16.0-2.6.1 libraw10-0.16.0-2.6.1 libraw10-debuginfo-0.16.0-2.6.1 - openSUSE 13.1 (i586 x86_64): libraw-debugsource-0.15.4-2.6.1 libraw-devel-0.15.4-2.6.1 libraw-devel-static-0.15.4-2.6.1 libraw-tools-0.15.4-2.6.1 libraw-tools-debuginfo-0.15.4-2.6.1 libraw9-0.15.4-2.6.1 libraw9-debuginfo-0.15.4-2.6.1 References: https://www.suse.com/security/cve/CVE-2015-8367.html https://bugzilla.suse.com/957517

1 0

openSUSE-RU-2015:2255-1: moderate: Recommended update for ceph
by maintenance＠opensuse.org 13 Dec '15

13 Dec '15

openSUSE Recommended Update: Recommended update for ceph ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2255-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: Ceph was updated to 0.94.5 to bring it in line with the SES 2 product and to deliver bug fixes on a maintainable version. This is a major not-incremental update. For more information about fixes please check the change log. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-894=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): ceph-0.94.5+git.1446971359.1d0909a-12.1 ceph-common-0.94.5+git.1446971359.1d0909a-12.1 ceph-common-debuginfo-0.94.5+git.1446971359.1d0909a-12.1 ceph-debuginfo-0.94.5+git.1446971359.1d0909a-12.1 ceph-debugsource-0.94.5+git.1446971359.1d0909a-12.1 ceph-devel-compat-0.94.5+git.1446971359.1d0909a-12.1 ceph-fuse-0.94.5+git.1446971359.1d0909a-12.1 ceph-fuse-debuginfo-0.94.5+git.1446971359.1d0909a-12.1 ceph-libs-compat-0.94.5+git.1446971359.1d0909a-12.1 ceph-radosgw-0.94.5+git.1446971359.1d0909a-12.1 ceph-radosgw-debuginfo-0.94.5+git.1446971359.1d0909a-12.1 ceph-test-0.94.5+git.1446971359.1d0909a-12.1 ceph-test-debuginfo-0.94.5+git.1446971359.1d0909a-12.1 cephfs-java-0.94.5+git.1446971359.1d0909a-12.1 libcephfs1-0.94.5+git.1446971359.1d0909a-12.1 libcephfs1-debuginfo-0.94.5+git.1446971359.1d0909a-12.1 libcephfs1-devel-0.94.5+git.1446971359.1d0909a-12.1 libcephfs_jni1-0.94.5+git.1446971359.1d0909a-12.1 libcephfs_jni1-debuginfo-0.94.5+git.1446971359.1d0909a-12.1 libcephfs_jni1-devel-0.94.5+git.1446971359.1d0909a-12.1 librados2-0.94.5+git.1446971359.1d0909a-12.1 librados2-debuginfo-0.94.5+git.1446971359.1d0909a-12.1 librados2-devel-0.94.5+git.1446971359.1d0909a-12.1 libradosstriper1-0.94.5+git.1446971359.1d0909a-12.1 libradosstriper1-debuginfo-0.94.5+git.1446971359.1d0909a-12.1 libradosstriper1-devel-0.94.5+git.1446971359.1d0909a-12.1 librbd1-0.94.5+git.1446971359.1d0909a-12.1 librbd1-debuginfo-0.94.5+git.1446971359.1d0909a-12.1 librbd1-devel-0.94.5+git.1446971359.1d0909a-12.1 python-ceph-compat-0.94.5+git.1446971359.1d0909a-12.1 python-cephfs-0.94.5+git.1446971359.1d0909a-12.1 python-rados-0.94.5+git.1446971359.1d0909a-12.1 python-rbd-0.94.5+git.1446971359.1d0909a-12.1 rbd-fuse-0.94.5+git.1446971359.1d0909a-12.1 rbd-fuse-debuginfo-0.94.5+git.1446971359.1d0909a-12.1 rest-bench-0.94.5+git.1446971359.1d0909a-12.1 rest-bench-debuginfo-0.94.5+git.1446971359.1d0909a-12.1 References:

1 0

openSUSE-RU-2015:2254-1: moderate: Recommended update for clamav
by maintenance＠opensuse.org 13 Dec '15

13 Dec '15

openSUSE Recommended Update: Recommended update for clamav ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2254-1 Rating: moderate References: #872682 #908731 #914505 #915414 #957728 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for clamav brings the 0.99.0 stable release and fixes the following issues: - Update to version 0.99 (boo#957728) * Processing of yara rules(some limitations- see signatures.pdf). * Support in clamav logical signatures for many of the features added for YARA, such as Perl Compatible Regular Expressions, alternate strings, and YARA string attributes. See signatures.pdf for full details. * New and improved on-access scanning for linux. see the recent blog post and clamdoc.pdf for details on the new on-access capabilities. * A new clamav api callback function that is invoked when a virus is found. This is intended primarily for applications running in all-match mode. Any applications using all-match mode must use the new callback function to record and report detected viruses. * Configurable default password list to attempt zip file decryption. * Tiff file support. * Upgrade windows pthread library to 2.9.1. * A new signature target type for designating signatures to run against files with unknown file types. * Improved fidelity of the "data loss prevention" heuristic algorithm. Code supplied by Bill Parker. * Support for lzma decompression within adobe flash files. * Support for mso attachments within microsoft office 2003 xml files. * A new sigtool option(--ascii-normalize) allowing signature authors to more easily generate normalized versions of ascii files. * Windows installation directories changed from \program files\sourcefire\ ClamAV to \Program Files\ClamAV or \Program Files\ClamAV-x64. - Make clamd and clamav-milter services depend on freshclam as they need it - Don't need sendmail for building clamav-milter anymore, sendmail-devel is enough (boo#915414). - Boo#914505: config file merging and temp file creation got moved to %pre by mistake. Put them back to %post. - Restore the updateclamconf script (boo#908731). (https://bugzilla.clamav.net/show_bug.cgi?id=11193). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-897=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-897=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): clamav-0.99-2.19.1 clamav-debuginfo-0.99-2.19.1 clamav-debugsource-0.99-2.19.1 - openSUSE 13.1 (i586 x86_64): clamav-0.99-36.1 clamav-debuginfo-0.99-36.1 clamav-debugsource-0.99-36.1 References: https://bugzilla.suse.com/872682 https://bugzilla.suse.com/908731 https://bugzilla.suse.com/914505 https://bugzilla.suse.com/915414 https://bugzilla.suse.com/957728

1 0

openSUSE-SU-2015:2250-1: moderate: Security update for xen
by opensuse-security＠opensuse.org 10 Dec '15

10 Dec '15

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2250-1 Rating: moderate References: #947165 #950704 #954018 #954405 Cross-References: CVE-2015-5307 CVE-2015-7311 CVE-2015-7835 CVE-2015-7970 CVE-2015-8104 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update fixes the following security issues: - bsc#947165 - CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) - bsc#954405 - CVE-2015-8104: Xen: guest to host DoS by triggering an infinite loop in microcode via #DB exception - bsc#954018 - CVE-2015-5307: xen: x86: CPU lockup during fault delivery (XSA-156) - bsc#950704 - CVE-2015-7970: xen: x86: Long latency populate-on-demand operation is not preemptible (XSA-150) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-893=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xen-debugsource-4.4.3_04-33.1 xen-devel-4.4.3_04-33.1 xen-libs-4.4.3_04-33.1 xen-libs-debuginfo-4.4.3_04-33.1 xen-tools-domU-4.4.3_04-33.1 xen-tools-domU-debuginfo-4.4.3_04-33.1 - openSUSE 13.2 (x86_64): xen-4.4.3_04-33.1 xen-doc-html-4.4.3_04-33.1 xen-kmp-default-4.4.3_04_k3.16.7_29-33.1 xen-kmp-default-debuginfo-4.4.3_04_k3.16.7_29-33.1 xen-kmp-desktop-4.4.3_04_k3.16.7_29-33.1 xen-kmp-desktop-debuginfo-4.4.3_04_k3.16.7_29-33.1 xen-libs-32bit-4.4.3_04-33.1 xen-libs-debuginfo-32bit-4.4.3_04-33.1 xen-tools-4.4.3_04-33.1 xen-tools-debuginfo-4.4.3_04-33.1 References: https://www.suse.com/security/cve/CVE-2015-5307.html https://www.suse.com/security/cve/CVE-2015-7311.html https://www.suse.com/security/cve/CVE-2015-7835.html https://www.suse.com/security/cve/CVE-2015-7970.html https://www.suse.com/security/cve/CVE-2015-8104.html https://bugzilla.suse.com/947165 https://bugzilla.suse.com/950704 https://bugzilla.suse.com/954018 https://bugzilla.suse.com/954405

1 0

openSUSE-SU-2015:2249-1: moderate: Security update for xen
by opensuse-security＠opensuse.org 10 Dec '15

10 Dec '15

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2249-1 Rating: moderate References: #947165 #950704 #954018 #954405 Cross-References: CVE-2015-3259 CVE-2015-4106 CVE-2015-5154 CVE-2015-5239 CVE-2015-5307 CVE-2015-6815 CVE-2015-7311 CVE-2015-7835 CVE-2015-7970 CVE-2015-8104 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update fixes the following security issues: - bsc#947165 - CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142) - bsc#954405 - CVE-2015-8104: Xen: guest to host DoS by triggering an infinite loop in microcode via #DB exception - bsc#954018 - CVE-2015-5307: xen: x86: CPU lockup during fault delivery (XSA-156) - bsc#950704 - CVE-2015-7970 xen: x86: Long latency populate-on-demand operation is not preemptible (XSA-150) 563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-892=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xen-debugsource-4.5.2_01-6.1 xen-devel-4.5.2_01-6.1 xen-libs-4.5.2_01-6.1 xen-libs-debuginfo-4.5.2_01-6.1 xen-tools-domU-4.5.2_01-6.1 xen-tools-domU-debuginfo-4.5.2_01-6.1 - openSUSE Leap 42.1 (x86_64): xen-4.5.2_01-6.1 xen-doc-html-4.5.2_01-6.1 xen-kmp-default-4.5.2_01_k4.1.12_1-6.1 xen-kmp-default-debuginfo-4.5.2_01_k4.1.12_1-6.1 xen-libs-32bit-4.5.2_01-6.1 xen-libs-debuginfo-32bit-4.5.2_01-6.1 xen-tools-4.5.2_01-6.1 xen-tools-debuginfo-4.5.2_01-6.1 References: https://www.suse.com/security/cve/CVE-2015-3259.html https://www.suse.com/security/cve/CVE-2015-4106.html https://www.suse.com/security/cve/CVE-2015-5154.html https://www.suse.com/security/cve/CVE-2015-5239.html https://www.suse.com/security/cve/CVE-2015-5307.html https://www.suse.com/security/cve/CVE-2015-6815.html https://www.suse.com/security/cve/CVE-2015-7311.html https://www.suse.com/security/cve/CVE-2015-7835.html https://www.suse.com/security/cve/CVE-2015-7970.html https://www.suse.com/security/cve/CVE-2015-8104.html https://bugzilla.suse.com/947165 https://bugzilla.suse.com/950704 https://bugzilla.suse.com/954018 https://bugzilla.suse.com/954405

1 0

openSUSE-RU-2015:2248-1: moderate: Recommended update for xf86-video-intel
by maintenance＠opensuse.org 10 Dec '15

10 Dec '15

openSUSE Recommended Update: Recommended update for xf86-video-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2248-1 Rating: moderate References: #957508 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xf86-video-intel fixes the following issues: - Backport set of patches to fix issues with panning and server resets (boo#957508). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-891=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xf86-video-intel-2.99.916-18.1 xf86-video-intel-debuginfo-2.99.916-18.1 xf86-video-intel-debugsource-2.99.916-18.1 - openSUSE 13.2 (x86_64): xf86-video-intel-32bit-2.99.916-18.1 xf86-video-intel-debuginfo-32bit-2.99.916-18.1 References: https://bugzilla.suse.com/957508

1 0

openSUSE-SU-2015:2246-1: important: Security update to MariaDB 5.5.46
by opensuse-security＠opensuse.org 10 Dec '15

10 Dec '15

openSUSE Security Update: Security update to MariaDB 5.5.46 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2246-1 Rating: important References: Cross-References: CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858 CVE-2015-4861 CVE-2015-4870 CVE-2015-4913 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: MariaDB was updated to 5.5.46 to fix security issues and bugs. The following vulnerabilities were fixed in the upstream release: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4870, CVE-2015-4913, CVE-2015-4792 A list of upstream changes and release notes can be found here: https://mariadb.com/kb/en/mariadb/mariadb-5546-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-5546-changelog/ Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-890=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libmysqlclient-devel-5.5.46-13.1 libmysqlclient18-5.5.46-13.1 libmysqlclient18-debuginfo-5.5.46-13.1 libmysqlclient_r18-5.5.46-13.1 libmysqld-devel-5.5.46-13.1 libmysqld18-5.5.46-13.1 libmysqld18-debuginfo-5.5.46-13.1 mariadb-5.5.46-13.1 mariadb-bench-5.5.46-13.1 mariadb-bench-debuginfo-5.5.46-13.1 mariadb-client-5.5.46-13.1 mariadb-client-debuginfo-5.5.46-13.1 mariadb-debuginfo-5.5.46-13.1 mariadb-debugsource-5.5.46-13.1 mariadb-errormessages-5.5.46-13.1 mariadb-test-5.5.46-13.1 mariadb-test-debuginfo-5.5.46-13.1 mariadb-tools-5.5.46-13.1 mariadb-tools-debuginfo-5.5.46-13.1 - openSUSE 13.1 (x86_64): libmysqlclient18-32bit-5.5.46-13.1 libmysqlclient18-debuginfo-32bit-5.5.46-13.1 libmysqlclient_r18-32bit-5.5.46-13.1 References: https://www.suse.com/security/cve/CVE-2015-4792.html https://www.suse.com/security/cve/CVE-2015-4802.html https://www.suse.com/security/cve/CVE-2015-4807.html https://www.suse.com/security/cve/CVE-2015-4815.html https://www.suse.com/security/cve/CVE-2015-4826.html https://www.suse.com/security/cve/CVE-2015-4830.html https://www.suse.com/security/cve/CVE-2015-4836.html https://www.suse.com/security/cve/CVE-2015-4858.html https://www.suse.com/security/cve/CVE-2015-4861.html https://www.suse.com/security/cve/CVE-2015-4870.html https://www.suse.com/security/cve/CVE-2015-4913.html

1 0

openSUSE-SU-2015:2245-1: moderate: Security update for Mozilla Thunderbird
by opensuse-security＠opensuse.org 10 Dec '15

10 Dec '15

openSUSE Security Update: Security update for Mozilla Thunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2245-1 Rating: moderate References: #952325 #952810 Cross-References: CVE-2015-4513 CVE-2015-4514 CVE-2015-7181 CVE-2015-7182 CVE-2015-7183 CVE-2015-7188 CVE-2015-7189 CVE-2015-7193 CVE-2015-7194 CVE-2015-7196 CVE-2015-7197 CVE-2015-7198 CVE-2015-7199 CVE-2015-7200 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: The MozillaThunderbird package was updated to version 38.4.0 to fix several security and non security issues: Changes in MozillaThunderbird: - update to Thunderbird 38.4.0 (bnc#952810) * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514 Miscellaneous memory safety hazards * MFSA 2015-122/CVE-2015-7188 (bmo#1199430) Trailing whitespace in IP address hostnames can bypass same-origin policy * MFSA 2015-123/CVE-2015-7189 (bmo#1205900) Buffer overflow during image interactions in canvas * MFSA 2015-127/CVE-2015-7193 (bmo#1210302) CORS preflight is bypassed when non-standard Content-Type headers are received * MFSA 2015-128/CVE-2015-7194 (bmo#1211262) Memory corruption in libjar through zip files * MFSA 2015-130/CVE-2015-7196 (bmo#1140616) JavaScript garbage collection crash with Java applet * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200 (bmo#1188010, bmo#1204061, bmo#1204155) Vulnerabilities found through code inspection * MFSA 2015-132/CVE-2015-7197 (bmo#1204269) Mixed content WebSocket policy bypass through workers * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183 (bmo#1202868, bmo#1205157) NSS and NSPR memory corruption issues (fixed in mozilla-nspr and mozilla-nss packages) - requires NSPR 4.10.10 and NSS 3.19.2.1 - added explicit appdata provides (bnc#952325) - fix build on aarch64 by reusing the crashreporter conditional from MozillaFirefox - fix libjpeg-turbo configuration Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-885=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-885=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): MozillaThunderbird-38.4.0-31.1 MozillaThunderbird-buildsymbols-38.4.0-31.1 MozillaThunderbird-debuginfo-38.4.0-31.1 MozillaThunderbird-debugsource-38.4.0-31.1 MozillaThunderbird-devel-38.4.0-31.1 MozillaThunderbird-translations-common-38.4.0-31.1 MozillaThunderbird-translations-other-38.4.0-31.1 - openSUSE 13.1 (i586 x86_64): MozillaThunderbird-38.4.0-70.68.1 MozillaThunderbird-buildsymbols-38.4.0-70.68.1 MozillaThunderbird-debuginfo-38.4.0-70.68.1 MozillaThunderbird-debugsource-38.4.0-70.68.1 MozillaThunderbird-devel-38.4.0-70.68.1 MozillaThunderbird-translations-common-38.4.0-70.68.1 MozillaThunderbird-translations-other-38.4.0-70.68.1 References: https://www.suse.com/security/cve/CVE-2015-4513.html https://www.suse.com/security/cve/CVE-2015-4514.html https://www.suse.com/security/cve/CVE-2015-7181.html https://www.suse.com/security/cve/CVE-2015-7182.html https://www.suse.com/security/cve/CVE-2015-7183.html https://www.suse.com/security/cve/CVE-2015-7188.html https://www.suse.com/security/cve/CVE-2015-7189.html https://www.suse.com/security/cve/CVE-2015-7193.html https://www.suse.com/security/cve/CVE-2015-7194.html https://www.suse.com/security/cve/CVE-2015-7196.html https://www.suse.com/security/cve/CVE-2015-7197.html https://www.suse.com/security/cve/CVE-2015-7198.html https://www.suse.com/security/cve/CVE-2015-7199.html https://www.suse.com/security/cve/CVE-2015-7200.html https://bugzilla.suse.com/952325 https://bugzilla.suse.com/952810

1 0

openSUSE-SU-2015:2244-1: important: Security update to MariaDB 10.0.22
by opensuse-security＠opensuse.org 10 Dec '15

10 Dec '15

openSUSE Security Update: Security update to MariaDB 10.0.22 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2244-1 Rating: important References: #937787 Cross-References: CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858 CVE-2015-4861 CVE-2015-4870 CVE-2015-4913 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: MariaDB was updated to 10.0.22 to fix security issues and bugs. The following vulnerabilities were fixed in the upstream release: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4870, CVE-2015-4913, CVE-2015-4792 A list of upstream changes and release notes can be found here: * https://kb.askmonty.org/en/mariadb-10022-release-notes/ * https://kb.askmonty.org/en/mariadb-10022-changelog/ The following build problems were fixed: * bsc#937787: fix main.bootstrap test (change default charset to utf8 in test result) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-884=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libmysqlclient-devel-10.0.22-2.18.1 libmysqlclient18-10.0.22-2.18.1 libmysqlclient18-debuginfo-10.0.22-2.18.1 libmysqlclient_r18-10.0.22-2.18.1 libmysqld-devel-10.0.22-2.18.1 libmysqld18-10.0.22-2.18.1 libmysqld18-debuginfo-10.0.22-2.18.1 mariadb-10.0.22-2.18.1 mariadb-bench-10.0.22-2.18.1 mariadb-bench-debuginfo-10.0.22-2.18.1 mariadb-client-10.0.22-2.18.1 mariadb-client-debuginfo-10.0.22-2.18.1 mariadb-debuginfo-10.0.22-2.18.1 mariadb-debugsource-10.0.22-2.18.1 mariadb-errormessages-10.0.22-2.18.1 mariadb-test-10.0.22-2.18.1 mariadb-test-debuginfo-10.0.22-2.18.1 mariadb-tools-10.0.22-2.18.1 mariadb-tools-debuginfo-10.0.22-2.18.1 - openSUSE 13.2 (x86_64): libmysqlclient18-32bit-10.0.22-2.18.1 libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1 libmysqlclient_r18-32bit-10.0.22-2.18.1 References: https://www.suse.com/security/cve/CVE-2015-4792.html https://www.suse.com/security/cve/CVE-2015-4802.html https://www.suse.com/security/cve/CVE-2015-4807.html https://www.suse.com/security/cve/CVE-2015-4815.html https://www.suse.com/security/cve/CVE-2015-4826.html https://www.suse.com/security/cve/CVE-2015-4830.html https://www.suse.com/security/cve/CVE-2015-4836.html https://www.suse.com/security/cve/CVE-2015-4858.html https://www.suse.com/security/cve/CVE-2015-4861.html https://www.suse.com/security/cve/CVE-2015-4870.html https://www.suse.com/security/cve/CVE-2015-4913.html https://bugzilla.suse.com/937787

1 0

openSUSE-SU-2015:2243-1: important: Security update to MySQL 5.6.27
by opensuse-security＠opensuse.org 10 Dec '15

10 Dec '15

openSUSE Security Update: Security update to MySQL 5.6.27 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2243-1 Rating: important References: #924663 #928962 #951391 Cross-References: CVE-2015-0286 CVE-2015-0288 CVE-2015-1789 CVE-2015-1793 CVE-2015-3152 CVE-2015-4730 CVE-2015-4766 CVE-2015-4792 CVE-2015-4800 CVE-2015-4802 CVE-2015-4815 CVE-2015-4816 CVE-2015-4819 CVE-2015-4826 CVE-2015-4830 CVE-2015-4833 CVE-2015-4836 CVE-2015-4858 CVE-2015-4861 CVE-2015-4862 CVE-2015-4864 CVE-2015-4866 CVE-2015-4870 CVE-2015-4879 CVE-2015-4890 CVE-2015-4895 CVE-2015-4904 CVE-2015-4905 CVE-2015-4910 CVE-2015-4913 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 30 vulnerabilities is now available. Description: MySQL was updated to 5.6.27 to fix security issues and bugs. The following vulnerabilities were fixed as part of the upstream release [boo#951391]: CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789, CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800, CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864, CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890, CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910, CVE-2015-4913 Details on these and other changes can be found at: http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html The following security relevant changes are included additionally: * CVE-2015-3152: MySQL lacked SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*] implies that the ssl connection is required. The mysql client will now print an error if ssl is required, but the server can not handle a ssl connection [boo#924663], [boo#928962] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-889=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-889=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-889=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libmysql56client18-5.6.27-8.1 libmysql56client18-debuginfo-5.6.27-8.1 libmysql56client_r18-5.6.27-8.1 mysql-community-server-5.6.27-8.1 mysql-community-server-bench-5.6.27-8.1 mysql-community-server-bench-debuginfo-5.6.27-8.1 mysql-community-server-client-5.6.27-8.1 mysql-community-server-client-debuginfo-5.6.27-8.1 mysql-community-server-debuginfo-5.6.27-8.1 mysql-community-server-debugsource-5.6.27-8.1 mysql-community-server-errormessages-5.6.27-8.1 mysql-community-server-test-5.6.27-8.1 mysql-community-server-test-debuginfo-5.6.27-8.1 mysql-community-server-tools-5.6.27-8.1 mysql-community-server-tools-debuginfo-5.6.27-8.1 - openSUSE Leap 42.1 (x86_64): libmysql56client18-32bit-5.6.27-8.1 libmysql56client18-debuginfo-32bit-5.6.27-8.1 libmysql56client_r18-32bit-5.6.27-8.1 - openSUSE 13.2 (i586 x86_64): libmysql56client18-5.6.27-2.12.1 libmysql56client18-debuginfo-5.6.27-2.12.1 libmysql56client_r18-5.6.27-2.12.1 mysql-community-server-5.6.27-2.12.1 mysql-community-server-bench-5.6.27-2.12.1 mysql-community-server-bench-debuginfo-5.6.27-2.12.1 mysql-community-server-client-5.6.27-2.12.1 mysql-community-server-client-debuginfo-5.6.27-2.12.1 mysql-community-server-debuginfo-5.6.27-2.12.1 mysql-community-server-debugsource-5.6.27-2.12.1 mysql-community-server-errormessages-5.6.27-2.12.1 mysql-community-server-test-5.6.27-2.12.1 mysql-community-server-test-debuginfo-5.6.27-2.12.1 mysql-community-server-tools-5.6.27-2.12.1 mysql-community-server-tools-debuginfo-5.6.27-2.12.1 - openSUSE 13.2 (x86_64): libmysql56client18-32bit-5.6.27-2.12.1 libmysql56client18-debuginfo-32bit-5.6.27-2.12.1 libmysql56client_r18-32bit-5.6.27-2.12.1 - openSUSE 13.1 (i586 x86_64): libmysql56client18-5.6.27-7.13.1 libmysql56client18-debuginfo-5.6.27-7.13.1 libmysql56client_r18-5.6.27-7.13.1 mysql-community-server-5.6.27-7.13.1 mysql-community-server-bench-5.6.27-7.13.1 mysql-community-server-bench-debuginfo-5.6.27-7.13.1 mysql-community-server-client-5.6.27-7.13.1 mysql-community-server-client-debuginfo-5.6.27-7.13.1 mysql-community-server-debuginfo-5.6.27-7.13.1 mysql-community-server-debugsource-5.6.27-7.13.1 mysql-community-server-errormessages-5.6.27-7.13.1 mysql-community-server-test-5.6.27-7.13.1 mysql-community-server-test-debuginfo-5.6.27-7.13.1 mysql-community-server-tools-5.6.27-7.13.1 mysql-community-server-tools-debuginfo-5.6.27-7.13.1 - openSUSE 13.1 (x86_64): libmysql56client18-32bit-5.6.27-7.13.1 libmysql56client18-debuginfo-32bit-5.6.27-7.13.1 libmysql56client_r18-32bit-5.6.27-7.13.1 References: https://www.suse.com/security/cve/CVE-2015-0286.html https://www.suse.com/security/cve/CVE-2015-0288.html https://www.suse.com/security/cve/CVE-2015-1789.html https://www.suse.com/security/cve/CVE-2015-1793.html https://www.suse.com/security/cve/CVE-2015-3152.html https://www.suse.com/security/cve/CVE-2015-4730.html https://www.suse.com/security/cve/CVE-2015-4766.html https://www.suse.com/security/cve/CVE-2015-4792.html https://www.suse.com/security/cve/CVE-2015-4800.html https://www.suse.com/security/cve/CVE-2015-4802.html https://www.suse.com/security/cve/CVE-2015-4815.html https://www.suse.com/security/cve/CVE-2015-4816.html https://www.suse.com/security/cve/CVE-2015-4819.html https://www.suse.com/security/cve/CVE-2015-4826.html https://www.suse.com/security/cve/CVE-2015-4830.html https://www.suse.com/security/cve/CVE-2015-4833.html https://www.suse.com/security/cve/CVE-2015-4836.html https://www.suse.com/security/cve/CVE-2015-4858.html https://www.suse.com/security/cve/CVE-2015-4861.html https://www.suse.com/security/cve/CVE-2015-4862.html https://www.suse.com/security/cve/CVE-2015-4864.html https://www.suse.com/security/cve/CVE-2015-4866.html https://www.suse.com/security/cve/CVE-2015-4870.html https://www.suse.com/security/cve/CVE-2015-4879.html https://www.suse.com/security/cve/CVE-2015-4890.html https://www.suse.com/security/cve/CVE-2015-4895.html https://www.suse.com/security/cve/CVE-2015-4904.html https://www.suse.com/security/cve/CVE-2015-4905.html https://www.suse.com/security/cve/CVE-2015-4910.html https://www.suse.com/security/cve/CVE-2015-4913.html https://bugzilla.suse.com/924663 https://bugzilla.suse.com/928962 https://bugzilla.suse.com/951391

1 0

openSUSE-RU-2015:2242-1: moderate: Recommended update for clamav-database
by maintenance＠opensuse.org 10 Dec '15

10 Dec '15

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2242-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh December 7th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-888=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201512070000-20.1 References:

1 0

openSUSE-SU-2015:2241-1: moderate: Security update for gpg2
by opensuse-security＠opensuse.org 10 Dec '15

10 Dec '15

openSUSE Security Update: Security update for gpg2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2241-1 Rating: moderate References: #918089 #918090 #952347 #955753 Cross-References: CVE-2015-1606 CVE-2015-1607 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: The gpg2 package was updated to fix the following security and non security issues: - CVE-2015-1606: Fixed invalid memory read using a garbled keyring (bsc#918089). - CVE-2015-1607: Fixed memcpy with overlapping ranges (bsc#918090). - bsc#955753: Fixed a regression of "gpg --recv" due to keyserver import filter (also boo#952347). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-886=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gpg2-2.0.24-5.1 gpg2-debuginfo-2.0.24-5.1 gpg2-debugsource-2.0.24-5.1 - openSUSE Leap 42.1 (noarch): gpg2-lang-2.0.24-5.1 References: https://www.suse.com/security/cve/CVE-2015-1606.html https://www.suse.com/security/cve/CVE-2015-1607.html https://bugzilla.suse.com/918089 https://bugzilla.suse.com/918090 https://bugzilla.suse.com/952347 https://bugzilla.suse.com/955753

1 0

openSUSE-RU-2015:2240-1: Recommended update for qemu
by maintenance＠opensuse.org 10 Dec '15

10 Dec '15

openSUSE Recommended Update: Recommended update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2240-1 Rating: low References: #943446 #949016 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: QEMU was updated to fix two bugs: - qemu-img convert doesn't create MB aligned VHDs anymore (bsc#943446) - Build SLOF from source (bsc#949016) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-883=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): qemu-2.3.1-9.1 qemu-arm-2.3.1-9.1 qemu-arm-debuginfo-2.3.1-9.1 qemu-block-curl-2.3.1-9.1 qemu-block-curl-debuginfo-2.3.1-9.1 qemu-debugsource-2.3.1-9.1 qemu-extra-2.3.1-9.1 qemu-extra-debuginfo-2.3.1-9.1 qemu-guest-agent-2.3.1-9.1 qemu-guest-agent-debuginfo-2.3.1-9.1 qemu-kvm-2.3.1-9.1 qemu-lang-2.3.1-9.1 qemu-linux-user-2.3.1-9.1 qemu-linux-user-debuginfo-2.3.1-9.1 qemu-linux-user-debugsource-2.3.1-9.1 qemu-ppc-2.3.1-9.1 qemu-ppc-debuginfo-2.3.1-9.1 qemu-s390-2.3.1-9.1 qemu-s390-debuginfo-2.3.1-9.1 qemu-tools-2.3.1-9.1 qemu-tools-debuginfo-2.3.1-9.1 qemu-x86-2.3.1-9.1 qemu-x86-debuginfo-2.3.1-9.1 - openSUSE Leap 42.1 (x86_64): qemu-block-rbd-2.3.1-9.1 qemu-block-rbd-debuginfo-2.3.1-9.1 qemu-testsuite-2.3.1-9.1 - openSUSE Leap 42.1 (noarch): qemu-ipxe-1.0.0-9.1 qemu-seabios-1.8.1-9.1 qemu-sgabios-8-9.1 qemu-vgabios-1.8.1-9.1 References: https://bugzilla.suse.com/943446 https://bugzilla.suse.com/949016

1 0