August 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:1347-1: important: Recommended update for grub2
by maintenance＠opensuse.org 05 Aug '15

05 Aug '15

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1347-1 Rating: important References: #909359 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for grub2 provides the following fix: - grub2-snapper-plugin.sh: cleanup grub-snapshot.cfg not referring to any snapshot (boo#909359) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-535=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): grub2-2.02~beta2-20.7.1 grub2-branding-upstream-2.02~beta2-20.7.1 grub2-debuginfo-2.02~beta2-20.7.1 grub2-debugsource-2.02~beta2-20.7.1 grub2-i386-pc-2.02~beta2-20.7.1 - openSUSE 13.2 (x86_64): grub2-x86_64-efi-2.02~beta2-20.7.1 grub2-x86_64-xen-2.02~beta2-20.7.1 - openSUSE 13.2 (noarch): grub2-snapper-plugin-2.02~beta2-20.7.1 - openSUSE 13.2 (i586): grub2-i386-efi-2.02~beta2-20.7.1 References: https://bugzilla.suse.com/909359

1 0

openSUSE-RU-2015:1343-1: moderate: Recommended update for apcupsd
by maintenance＠opensuse.org 04 Aug '15

04 Aug '15

openSUSE Recommended Update: Recommended update for apcupsd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1343-1 Rating: moderate References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for apcupsd fixes the following issue: - reduce amount of debug messages (rh#1053324). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-532=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): apcupsd-3.14.10-6.8.1 apcupsd-cgi-3.14.10-6.8.1 apcupsd-debuginfo-3.14.10-6.8.1 apcupsd-debugsource-3.14.10-6.8.1 apcupsd-gui-3.14.10-6.8.1 apcupsd-gui-debuginfo-3.14.10-6.8.1 References:

1 0

openSUSE-RU-2015:1342-1: moderate: Recommended update for ffado and ffado-mixer
by maintenance＠opensuse.org 04 Aug '15

04 Aug '15

openSUSE Recommended Update: Recommended update for ffado and ffado-mixer ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1342-1 Rating: moderate References: #937060 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: ffado and ffado-mixer were updated to fix a runtime dependency issue: * boo#937060: add runtime requirement for PyQT4 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-533=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ffado-2.2.1-7.1 ffado-debuginfo-2.2.1-7.1 ffado-debugsource-2.2.1-7.1 libffado-devel-2.2.1-7.1 libffado2-2.2.1-7.1 libffado2-debuginfo-2.2.1-7.1 - openSUSE 13.2 (x86_64): libffado2-32bit-2.2.1-7.1 libffado2-debuginfo-32bit-2.2.1-7.1 - openSUSE 13.2 (noarch): ffado-doc-2.2.1-7.2 ffado-mixer-2.2.1-7.2 References: https://bugzilla.suse.com/937060

1 0

openSUSE-SU-2015:1340-1: Security update for gpsm
by opensuse-security＠opensuse.org 04 Aug '15

04 Aug '15

openSUSE Security Update: Security update for gpsm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1340-1 Rating: low References: #818136 Cross-References: CVE-2013-2038 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: gpsm was updated to fix one security issue. The following vulnerability was fixed: * CVE-2013-2038: Denial of service by a remote attacker via specially crafted packages (boo#818136) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-531=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): gpsd-3.5-7.8.1 gpsd-clients-3.5-7.8.1 gpsd-clients-debuginfo-3.5-7.8.1 gpsd-debuginfo-3.5-7.8.1 gpsd-debugsource-3.5-7.8.1 gpsd-devel-3.5-7.8.1 gpsd-devel-debuginfo-3.5-7.8.1 libQgpsmm20-3.5-7.8.1 libQgpsmm20-debuginfo-3.5-7.8.1 libgps20-3.5-7.8.1 libgps20-debuginfo-3.5-7.8.1 python-gpsd-3.5-7.8.1 python-gpsd-debuginfo-3.5-7.8.1 References: https://www.suse.com/security/cve/CVE-2013-2038.html https://bugzilla.suse.com/818136

1 0

openSUSE-SU-2015:1335-1: important: Security update for bind
by opensuse-security＠opensuse.org 03 Aug '15

03 Aug '15

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1335-1 Rating: important References: #939567 Cross-References: CVE-2015-5477 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: bind was updated to fix one security issue. This security issue was fixed: - CVE-2015-5477: Remote DoS via TKEY queries (boo#939567) Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet handling. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-530=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-530=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): bind-9.9.6P1-2.7.1 bind-chrootenv-9.9.6P1-2.7.1 bind-debuginfo-9.9.6P1-2.7.1 bind-debugsource-9.9.6P1-2.7.1 bind-devel-9.9.6P1-2.7.1 bind-libs-9.9.6P1-2.7.1 bind-libs-debuginfo-9.9.6P1-2.7.1 bind-lwresd-9.9.6P1-2.7.1 bind-lwresd-debuginfo-9.9.6P1-2.7.1 bind-utils-9.9.6P1-2.7.1 bind-utils-debuginfo-9.9.6P1-2.7.1 - openSUSE 13.2 (x86_64): bind-libs-32bit-9.9.6P1-2.7.1 bind-libs-debuginfo-32bit-9.9.6P1-2.7.1 - openSUSE 13.2 (noarch): bind-doc-9.9.6P1-2.7.1 - openSUSE 13.1 (i586 x86_64): bind-9.9.4P2-2.14.1 bind-chrootenv-9.9.4P2-2.14.1 bind-debuginfo-9.9.4P2-2.14.1 bind-debugsource-9.9.4P2-2.14.1 bind-devel-9.9.4P2-2.14.1 bind-libs-9.9.4P2-2.14.1 bind-libs-debuginfo-9.9.4P2-2.14.1 bind-lwresd-9.9.4P2-2.14.1 bind-lwresd-debuginfo-9.9.4P2-2.14.1 bind-utils-9.9.4P2-2.14.1 bind-utils-debuginfo-9.9.4P2-2.14.1 - openSUSE 13.1 (x86_64): bind-libs-32bit-9.9.4P2-2.14.1 bind-libs-debuginfo-32bit-9.9.4P2-2.14.1 - openSUSE 13.1 (noarch): bind-doc-9.9.4P2-2.14.1 References: https://www.suse.com/security/cve/CVE-2015-5477.html https://bugzilla.suse.com/939567

1 0

openSUSE-RU-2015:1333-1: moderate: Recommended update for SUSE blinux
by maintenance＠opensuse.org 03 Aug '15

03 Aug '15

openSUSE Recommended Update: Recommended update for SUSE blinux ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1333-1 Rating: moderate References: #851625 #931036 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: sbl was updated to support current hardware and fix bugs. The following bugs were fixed: * boo#931036: sbl daemons dont start with systemd * boo#851625: correct permissions on /usr/sbin/brld sbl was updated to the latest git snapshot. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-528=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-528=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): sbl-3.5.0.20130317.git7a75bc29-24.4.1 sbl-debuginfo-3.5.0.20130317.git7a75bc29-24.4.1 sbl-debugsource-3.5.0.20130317.git7a75bc29-24.4.1 sbl-orca-3.5.0.20130317.git7a75bc29-24.4.1 - openSUSE 13.1 (i586 x86_64): sbl-3.5.0.20130317.git7a75bc29-21.3.1 sbl-debuginfo-3.5.0.20130317.git7a75bc29-21.3.1 sbl-debugsource-3.5.0.20130317.git7a75bc29-21.3.1 sbl-orca-3.5.0.20130317.git7a75bc29-21.3.1 References: https://bugzilla.suse.com/851625 https://bugzilla.suse.com/931036

1 0

openSUSE-SU-2015:1332-1: important: Security update for libuser
by opensuse-security＠opensuse.org 03 Aug '15

03 Aug '15

openSUSE Security Update: Security update for libuser ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1332-1 Rating: important References: #937533 Cross-References: CVE-2015-3246 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: libuser was updated to fix on security issue. The following vulnerability was fixed: * CVE-2015-3246: local root exploit through passwd file handling (boo#937533) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-529=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libuser-0.60-3.3.1 libuser-debuginfo-0.60-3.3.1 libuser-debugsource-0.60-3.3.1 libuser-devel-0.60-3.3.1 libuser-python-0.60-3.3.1 libuser-python-debuginfo-0.60-3.3.1 libuser1-0.60-3.3.1 libuser1-debuginfo-0.60-3.3.1 - openSUSE 13.2 (noarch): libuser-lang-0.60-3.3.1 References: https://www.suse.com/security/cve/CVE-2015-3246.html https://bugzilla.suse.com/937533

1 0