October 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:2485-1: moderate: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 10 Oct '16

10 Oct '16

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2485-1 Rating: moderate References: #999701 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for Mozilla Thunderbird to version 45.4.0 fixes the following issues: - When using Thunderbird in a browser like context, for rendering HTML e-mail or feeds, it may be affected by vulnerabilities also fixed in Firefox ESR 45.4. (MFSA 2016-86, boo#999701) The following bugs were fixed in this release: - Display name was truncated if no separating space before email address - Recipient addresses were shown in wrong color in some circumstances - Additional spaces were inserted when drafts were edited. - Mail saved as template copied In-Reply-To and References from original email. - Threading broken when editing message draft, due to loss of Message-ID - "Apply columns to..." did not honor special folders Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-1166=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 s390x x86_64): MozillaThunderbird-45.4.0-12.1 MozillaThunderbird-debuginfo-45.4.0-12.1 MozillaThunderbird-debugsource-45.4.0-12.1 MozillaThunderbird-devel-45.4.0-12.1 MozillaThunderbird-translations-common-45.4.0-12.1 MozillaThunderbird-translations-other-45.4.0-12.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): MozillaThunderbird-buildsymbols-45.4.0-12.1 References: https://bugzilla.suse.com/999701

1 0

openSUSE-SU-2016:2484-1: moderate: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 10 Oct '16

10 Oct '16

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2484-1 Rating: moderate References: #999701 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for Mozilla Thunderbird to version 45.4.0 fixes the following issues: - When using Thunderbird in a browser like context, for rendering HTML e-mail or feeds, it may be affected by vulnerabilities also fixed in Firefox ESR 45.4. (MFSA 2016-86, boo#999701) The following bugs were fixed in this release: - Display name was truncated if no separating space before email address - Recipient addresses were shown in wrong color in some circumstances - Additional spaces were inserted when drafts were edited. - Mail saved as template copied In-Reply-To and References from original email. - Threading broken when editing message draft, due to loss of Message-ID - "Apply columns to..." did not honor special folders Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1166=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1166=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): MozillaThunderbird-45.4.0-22.1 MozillaThunderbird-buildsymbols-45.4.0-22.1 MozillaThunderbird-debuginfo-45.4.0-22.1 MozillaThunderbird-debugsource-45.4.0-22.1 MozillaThunderbird-devel-45.4.0-22.1 MozillaThunderbird-translations-common-45.4.0-22.1 MozillaThunderbird-translations-other-45.4.0-22.1 - openSUSE 13.2 (i586 x86_64): MozillaThunderbird-45.4.0-49.1 MozillaThunderbird-buildsymbols-45.4.0-49.1 MozillaThunderbird-debuginfo-45.4.0-49.1 MozillaThunderbird-debugsource-45.4.0-49.1 MozillaThunderbird-devel-45.4.0-49.1 MozillaThunderbird-translations-common-45.4.0-49.1 MozillaThunderbird-translations-other-45.4.0-49.1 References: https://bugzilla.suse.com/999701

1 0

openSUSE-RU-2016:2481-1: moderate: Recommended update for cairo
by maintenance＠opensuse.org 10 Oct '16

10 Oct '16

openSUSE Recommended Update: Recommended update for cairo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2481-1 Rating: moderate References: #997189 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for cairo fixes the following issues: - boo#997189: crash in cairo related to libwnck3 and faulty icons (fdo#91967) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1163=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1163=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): cairo-debugsource-1.14.2-9.2 cairo-devel-1.14.2-9.2 cairo-tools-1.14.2-9.2 cairo-tools-debuginfo-1.14.2-9.2 libcairo-gobject2-1.14.2-9.2 libcairo-gobject2-debuginfo-1.14.2-9.2 libcairo-script-interpreter2-1.14.2-9.2 libcairo-script-interpreter2-debuginfo-1.14.2-9.2 libcairo2-1.14.2-9.2 libcairo2-debuginfo-1.14.2-9.2 - openSUSE Leap 42.1 (x86_64): cairo-devel-32bit-1.14.2-9.2 libcairo-gobject2-32bit-1.14.2-9.2 libcairo-gobject2-debuginfo-32bit-1.14.2-9.2 libcairo-script-interpreter2-32bit-1.14.2-9.2 libcairo-script-interpreter2-debuginfo-32bit-1.14.2-9.2 libcairo2-32bit-1.14.2-9.2 libcairo2-debuginfo-32bit-1.14.2-9.2 - openSUSE 13.2 (i586 x86_64): cairo-debugsource-1.14.0-7.15.2 cairo-devel-1.14.0-7.15.2 cairo-tools-1.14.0-7.15.2 cairo-tools-debuginfo-1.14.0-7.15.2 libcairo-gobject2-1.14.0-7.15.2 libcairo-gobject2-debuginfo-1.14.0-7.15.2 libcairo-script-interpreter2-1.14.0-7.15.2 libcairo-script-interpreter2-debuginfo-1.14.0-7.15.2 libcairo2-1.14.0-7.15.2 libcairo2-debuginfo-1.14.0-7.15.2 - openSUSE 13.2 (x86_64): cairo-devel-32bit-1.14.0-7.15.2 libcairo-gobject2-32bit-1.14.0-7.15.2 libcairo-gobject2-debuginfo-32bit-1.14.0-7.15.2 libcairo-script-interpreter2-32bit-1.14.0-7.15.2 libcairo-script-interpreter2-debuginfo-32bit-1.14.0-7.15.2 libcairo2-32bit-1.14.0-7.15.2 libcairo2-debuginfo-32bit-1.14.0-7.15.2 References: https://bugzilla.suse.com/997189

1 0

openSUSE-RU-2016:2480-1: Recommended update for ding-libs
by maintenance＠opensuse.org 10 Oct '16

10 Oct '16

openSUSE Recommended Update: Recommended update for ding-libs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2480-1 Rating: low References: #989488 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ding-libs provides the following fixes: - Support longer values in INI file parser (bsc#989488) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1165=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ding-libs-debugsource-0.3.0.1-23.1 libbasicobjects-devel-0.1.0-23.1 libbasicobjects0-0.1.0-23.1 libbasicobjects0-debuginfo-0.1.0-23.1 libcollection-devel-0.6.2-23.1 libcollection2-0.6.2-23.1 libcollection2-debuginfo-0.6.2-23.1 libdhash-devel-0.4.3-23.1 libdhash1-0.4.3-23.1 libdhash1-debuginfo-0.4.3-23.1 libini_config-devel-1.0.0.1-23.1 libini_config3-1.0.0.1-23.1 libini_config3-debuginfo-1.0.0.1-23.1 libpath_utils-devel-0.2.1-23.1 libpath_utils1-0.2.1-23.1 libpath_utils1-debuginfo-0.2.1-23.1 libref_array-devel-0.1.3-23.1 libref_array1-0.1.3-23.1 libref_array1-debuginfo-0.1.3-23.1 - openSUSE Leap 42.1 (x86_64): libbasicobjects-devel-32bit-0.1.0-23.1 libbasicobjects0-32bit-0.1.0-23.1 libbasicobjects0-debuginfo-32bit-0.1.0-23.1 libcollection-devel-32bit-0.6.2-23.1 libcollection2-32bit-0.6.2-23.1 libcollection2-debuginfo-32bit-0.6.2-23.1 libdhash-devel-32bit-0.4.3-23.1 libdhash1-32bit-0.4.3-23.1 libdhash1-debuginfo-32bit-0.4.3-23.1 libini_config-devel-32bit-1.0.0.1-23.1 libini_config3-32bit-1.0.0.1-23.1 libini_config3-debuginfo-32bit-1.0.0.1-23.1 libpath_utils-devel-32bit-0.2.1-23.1 libpath_utils1-32bit-0.2.1-23.1 libpath_utils1-debuginfo-32bit-0.2.1-23.1 libref_array-devel-32bit-0.1.3-23.1 libref_array1-32bit-0.1.3-23.1 libref_array1-debuginfo-32bit-0.1.3-23.1 References: https://bugzilla.suse.com/989488

1 0

openSUSE-RU-2016:2479-1: Recommended update for autofs
by maintenance＠opensuse.org 10 Oct '16

10 Oct '16

openSUSE Recommended Update: Recommended update for autofs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2479-1 Rating: low References: #968918 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for autofs fixes the following issues: - Fix spurious ELOOP errors caused by incorrect error handling in the NSS lookup module. (bsc#968918) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1164=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): autofs-5.0.9-12.1 autofs-debuginfo-5.0.9-12.1 autofs-debugsource-5.0.9-12.1 References: https://bugzilla.suse.com/968918

1 0

openSUSE-RU-2016:2467-1: moderate: Recommended update for yast2-fonts
by maintenance＠opensuse.org 06 Oct '16

06 Oct '16

openSUSE Recommended Update: Recommended update for yast2-fonts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2467-1 Rating: moderate References: #998300 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for yast2-fonts fixes the following issue: - comma and the rest of family string is ignored [boo#998300] Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1162=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): yast2-fonts-3.1.17-3.1 yast2-fonts-debuginfo-3.1.17-3.1 yast2-fonts-debugsource-3.1.17-3.1 References: https://bugzilla.suse.com/998300

1 0

openSUSE-SU-2016:2465-1: important: Security update for python-Jinja2
by opensuse-security＠opensuse.org 06 Oct '16

06 Oct '16

openSUSE Security Update: Security update for python-Jinja2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2465-1 Rating: important References: #858239 Cross-References: CVE-2014-0012 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Jinja2 fixes the following issues: Update to version 2.8: - Added `target` parameter to urlize function. - Added support for `followsymlinks` to the file system loader. - The truncate filter now counts the length. - Added equalto filter that helps with select filters. - Changed cache keys to use absolute file names if available instead of load names. - Fixed loop length calculation for some iterators. - Changed how Jinja2 enforces strings to be native strings in Python 2 to work when people break their default encoding. - Added :func:`make_logging_undefined` which returns an undefined object that logs failures into a logger. - If unmarshalling of cached data fails the template will be reloaded now. - Implemented a block ``set`` tag. - Default cache size was incrased to 400 from a low 50. - Fixed ``is number`` test to accept long integers in all Python versions. - Changed ``is number`` to accept Decimal as a number. - Added a check for default arguments followed by non-default arguments. This change makes ``{% macro m(x, y=1, z) %}...{% endmacro %}`` a syntax error. The previous behavior for this code was broken anyway (resulting in the default value being applied to `y`). - Add ability to use custom subclasses of ``jinja2.compiler.CodeGenerator`` and ``jinja2.runtime.Context`` by adding two new attributes to the environment (`code_generator_class` and `context_class`) (pull request ``#404``). - added support for context/environment/evalctx decorator functions on the finalize callback of the environment. - escape query strings for urlencode properly. Previously slashes were not escaped in that place. - Add 'base' parameter to 'int' filter. - Update to 2.7.3 (boo#858239, CVE-2014-0012) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1159=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): python-Jinja2-2.8-3.3.1 python-Jinja2-emacs-2.8-3.3.1 python-Jinja2-vim-2.8-3.3.1 References: https://www.suse.com/security/cve/CVE-2014-0012.html https://bugzilla.suse.com/858239

1 0

openSUSE-SU-2016:2464-1: important: Security update for postgresql94
by opensuse-security＠opensuse.org 06 Oct '16

06 Oct '16

openSUSE Security Update: Security update for postgresql94 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2464-1 Rating: important References: #973660 #993453 #993454 Cross-References: CVE-2016-5423 CVE-2016-5424 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for postgresql94 to version 9.4.9 fixes the several issues. These security issues were fixed: - CVE-2016-5423: CASE/WHEN with inlining can cause untrusted pointer dereference (bsc#993454). - CVE-2016-5424: Fix client programs' handling of special characters in database and role names (bsc#993453). This non-security issue was fixed: - bsc#973660: Added "Requires: timezone" to Service Pack For additional non-security issues please refer to - http://www.postgresql.org/docs/9.4/static/release-9-4-9.html - http://www.postgresql.org/docs/9.4/static/release-9-4-8.html - http://www.postgresql.org/docs/9.4/static/release-9-4-7.html This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1161=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libecpg6-9.4.9-7.1 libecpg6-debuginfo-9.4.9-7.1 libpq5-9.4.9-7.1 libpq5-debuginfo-9.4.9-7.1 postgresql94-9.4.9-7.1 postgresql94-contrib-9.4.9-7.1 postgresql94-contrib-debuginfo-9.4.9-7.1 postgresql94-debuginfo-9.4.9-7.1 postgresql94-debugsource-9.4.9-7.1 postgresql94-devel-9.4.9-7.1 postgresql94-devel-debuginfo-9.4.9-7.1 postgresql94-libs-debugsource-9.4.9-7.1 postgresql94-plperl-9.4.9-7.1 postgresql94-plperl-debuginfo-9.4.9-7.1 postgresql94-plpython-9.4.9-7.1 postgresql94-plpython-debuginfo-9.4.9-7.1 postgresql94-pltcl-9.4.9-7.1 postgresql94-pltcl-debuginfo-9.4.9-7.1 postgresql94-server-9.4.9-7.1 postgresql94-server-debuginfo-9.4.9-7.1 postgresql94-test-9.4.9-7.1 - openSUSE Leap 42.1 (x86_64): libecpg6-32bit-9.4.9-7.1 libecpg6-debuginfo-32bit-9.4.9-7.1 libpq5-32bit-9.4.9-7.1 libpq5-debuginfo-32bit-9.4.9-7.1 - openSUSE Leap 42.1 (noarch): postgresql94-docs-9.4.9-7.1 References: https://www.suse.com/security/cve/CVE-2016-5423.html https://www.suse.com/security/cve/CVE-2016-5424.html https://bugzilla.suse.com/973660 https://bugzilla.suse.com/993453 https://bugzilla.suse.com/993454

1 0

openSUSE-SU-2016:2463-1: moderate: Security update for ffmpeg
by opensuse-security＠opensuse.org 06 Oct '16

06 Oct '16

openSUSE Security Update: Security update for ffmpeg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2463-1 Rating: moderate References: #998636 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: ffmpeg was updated to 2.8.8 to fix the following issues, both bugs and security issues: * avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame * avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg * avformat/oggparseopus: Check that granule pos is within the supported range * avformat/utils: Check bps before using it in a shift in ff_get_pcm_codec_id() * ffmpeg: Check that r_frame_rate is set before attempting to use it * avformat/utils: Do not compute the bitrate from duration == 0 * avformat/utils: Check negative bps before shifting in ff_get_pcm_codec_id() * avformat/avidec: Detect index with too short entries * avformat/oggparseopus: Fix Undefined behavior in oggparseopus.c and libavformat/utils.c * avformat/allformats: Making av_register_all() thread-safe. * avcodec/vp9_parser: Check the input frame sizes for being consistent * avformat/oggdec: Fix integer overflow with invalid pts * avcodec/ffv1enc: Fix assertion failure with non zero bits per sample * avcodec/diracdec: Check numx/y * avformat/avidec: Fix infinite loop in avi_read_nikon() Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1160=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ffmpeg-2.8.8-19.1 ffmpeg-debuginfo-2.8.8-19.1 ffmpeg-debugsource-2.8.8-19.1 ffmpeg-devel-2.8.8-19.1 libavcodec-devel-2.8.8-19.1 libavcodec56-2.8.8-19.1 libavcodec56-debuginfo-2.8.8-19.1 libavdevice-devel-2.8.8-19.1 libavdevice56-2.8.8-19.1 libavdevice56-debuginfo-2.8.8-19.1 libavfilter-devel-2.8.8-19.1 libavfilter5-2.8.8-19.1 libavfilter5-debuginfo-2.8.8-19.1 libavformat-devel-2.8.8-19.1 libavformat56-2.8.8-19.1 libavformat56-debuginfo-2.8.8-19.1 libavresample-devel-2.8.8-19.1 libavresample2-2.8.8-19.1 libavresample2-debuginfo-2.8.8-19.1 libavutil-devel-2.8.8-19.1 libavutil54-2.8.8-19.1 libavutil54-debuginfo-2.8.8-19.1 libpostproc-devel-2.8.8-19.1 libpostproc53-2.8.8-19.1 libpostproc53-debuginfo-2.8.8-19.1 libswresample-devel-2.8.8-19.1 libswresample1-2.8.8-19.1 libswresample1-debuginfo-2.8.8-19.1 libswscale-devel-2.8.8-19.1 libswscale3-2.8.8-19.1 libswscale3-debuginfo-2.8.8-19.1 - openSUSE Leap 42.1 (x86_64): libavcodec56-32bit-2.8.8-19.1 libavcodec56-debuginfo-32bit-2.8.8-19.1 libavdevice56-32bit-2.8.8-19.1 libavdevice56-debuginfo-32bit-2.8.8-19.1 libavfilter5-32bit-2.8.8-19.1 libavfilter5-debuginfo-32bit-2.8.8-19.1 libavformat56-32bit-2.8.8-19.1 libavformat56-debuginfo-32bit-2.8.8-19.1 libavresample2-32bit-2.8.8-19.1 libavresample2-debuginfo-32bit-2.8.8-19.1 libavutil54-32bit-2.8.8-19.1 libavutil54-debuginfo-32bit-2.8.8-19.1 libpostproc53-32bit-2.8.8-19.1 libpostproc53-debuginfo-32bit-2.8.8-19.1 libswresample1-32bit-2.8.8-19.1 libswresample1-debuginfo-32bit-2.8.8-19.1 libswscale3-32bit-2.8.8-19.1 libswscale3-debuginfo-32bit-2.8.8-19.1 References: https://bugzilla.suse.com/998636

1 0

openSUSE-RU-2016:2456-1: moderate: Recommended update for python-Jinja2
by maintenance＠opensuse.org 05 Oct '16

05 Oct '16

openSUSE Recommended Update: Recommended update for python-Jinja2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2456-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-Jinja2 fixes the following issues: Update to version 2.8: - Added `target` parameter to urlize function. - Added support for `followsymlinks` to the file system loader. - The truncate filter now counts the length. - Added equalto filter that helps with select filters. - Changed cache keys to use absolute file names if available instead of load names. - Fixed loop length calculation for some iterators. - Changed how Jinja2 enforces strings to be native strings in Python 2 to work when people break their default encoding. - Added :func:`make_logging_undefined` which returns an undefined object that logs failures into a logger. - If unmarshalling of cached data fails the template will be reloaded now. - Implemented a block ``set`` tag. - Default cache size was incrased to 400 from a low 50. - Fixed ``is number`` test to accept long integers in all Python versions. - Changed ``is number`` to accept Decimal as a number. - Added a check for default arguments followed by non-default arguments. This change makes ``{% macro m(x, y=1, z) %}...{% endmacro %}`` a syntax error. The previous behavior for this code was broken anyway (resulting in the default value being applied to `y`). - Add ability to use custom subclasses of ``jinja2.compiler.CodeGenerator`` and ``jinja2.runtime.Context`` by adding two new attributes to the environment (`code_generator_class` and `context_class`) (pull request ``#404``). - added support for context/environment/evalctx decorator functions on the finalize callback of the environment. - escape query strings for urlencode properly. Previously slashes were not escaped in that place. - Add 'base' parameter to 'int' filter. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1158=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): python-Jinja2-2.8-6.1 python-Jinja2-emacs-2.8-6.1 python-Jinja2-vim-2.8-6.1 References:

1 0