February 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:0538-1: moderate: Recommended update for ddclient
by maintenance＠opensuse.org 22 Feb '16

22 Feb '16

openSUSE Recommended Update: Recommended update for ddclient ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0538-1 Rating: moderate References: #903588 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ddclient fixes the following issues: - boo#903588: various file permission issues after distribution upgrade - systemd fixes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch 4641=1 - openSUSE 13.2: zypper in -t patch 4641=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): ddclient-3.8.2-9.1 - openSUSE 13.2 (noarch): ddclient-3.8.2-4.5.1 References: https://bugzilla.suse.com/903588

1 0

openSUSE-SU-2016:0537-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 22 Feb '16

22 Feb '16

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0537-1 Rating: important References: #907378 #961500 #963767 #965308 #965356 Cross-References: CVE-2016-0723 CVE-2016-2069 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: The openSUSE 13.2 kernel was updated to receive security and bugfixes. It also fixes a regression that caused the Chromium sandbox to no longer work (bsc#965356). Following security bugs were fixed: - CVE-2016-2069: A flaw was discovered in a way the Linux deals with paging structures. When Linux invalidates a paging structure that is not in use locally, it could, in principle, race against another CPU that is switching to a process that uses the paging structure in question, causing a local denial service (machine crash). (bnc#963767). - CVE-2016-0723: Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel allowed local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free and system crash) by making a TIOCGETD ioctl call during processing of a TIOCSETD ioctl call (bnc#961500). The following non-security bugs were fixed: - Bluetooth: ath3k: workaround the compatibility issue with xHCI controller (bnc#907378). - kABI fix for addition of user_namespace.flags field (bnc#965308, bnc#965356). - userns: Add a knob to disable setgroups on a per user namespace basis (bnc#965308, bnc#965356). - userns: Allow setting gid_maps without privilege when setgroups is disabled (bnc#965308, bnc#965356). - userns: Rename id_map_mutex to userns_state_mutex (bnc#965308, bnc#965356). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-256=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i686 x86_64): kernel-debug-3.16.7-35.1 kernel-debug-base-3.16.7-35.1 kernel-debug-base-debuginfo-3.16.7-35.1 kernel-debug-debuginfo-3.16.7-35.1 kernel-debug-debugsource-3.16.7-35.1 kernel-debug-devel-3.16.7-35.1 kernel-debug-devel-debuginfo-3.16.7-35.1 kernel-desktop-3.16.7-35.1 kernel-desktop-base-3.16.7-35.1 kernel-desktop-base-debuginfo-3.16.7-35.1 kernel-desktop-debuginfo-3.16.7-35.1 kernel-desktop-debugsource-3.16.7-35.1 kernel-desktop-devel-3.16.7-35.1 kernel-ec2-base-debuginfo-3.16.7-35.1 kernel-ec2-debuginfo-3.16.7-35.1 kernel-ec2-debugsource-3.16.7-35.1 kernel-vanilla-3.16.7-35.1 kernel-vanilla-debuginfo-3.16.7-35.1 kernel-vanilla-debugsource-3.16.7-35.1 kernel-vanilla-devel-3.16.7-35.1 kernel-xen-3.16.7-35.1 kernel-xen-base-3.16.7-35.1 kernel-xen-base-debuginfo-3.16.7-35.1 kernel-xen-debuginfo-3.16.7-35.1 kernel-xen-debugsource-3.16.7-35.1 kernel-xen-devel-3.16.7-35.1 - openSUSE 13.2 (i586 x86_64): bbswitch-0.8-3.17.1 bbswitch-debugsource-0.8-3.17.1 bbswitch-kmp-default-0.8_k3.16.7_35-3.17.1 bbswitch-kmp-default-debuginfo-0.8_k3.16.7_35-3.17.1 bbswitch-kmp-desktop-0.8_k3.16.7_35-3.17.1 bbswitch-kmp-desktop-debuginfo-0.8_k3.16.7_35-3.17.1 bbswitch-kmp-xen-0.8_k3.16.7_35-3.17.1 bbswitch-kmp-xen-debuginfo-0.8_k3.16.7_35-3.17.1 cloop-2.639-14.17.1 cloop-debuginfo-2.639-14.17.1 cloop-debugsource-2.639-14.17.1 cloop-kmp-default-2.639_k3.16.7_35-14.17.1 cloop-kmp-default-debuginfo-2.639_k3.16.7_35-14.17.1 cloop-kmp-desktop-2.639_k3.16.7_35-14.17.1 cloop-kmp-desktop-debuginfo-2.639_k3.16.7_35-14.17.1 cloop-kmp-xen-2.639_k3.16.7_35-14.17.1 cloop-kmp-xen-debuginfo-2.639_k3.16.7_35-14.17.1 crash-7.0.8-17.1 crash-debuginfo-7.0.8-17.1 crash-debugsource-7.0.8-17.1 crash-devel-7.0.8-17.1 crash-doc-7.0.8-17.1 crash-eppic-7.0.8-17.1 crash-eppic-debuginfo-7.0.8-17.1 crash-gcore-7.0.8-17.1 crash-gcore-debuginfo-7.0.8-17.1 crash-kmp-default-7.0.8_k3.16.7_35-17.1 crash-kmp-default-debuginfo-7.0.8_k3.16.7_35-17.1 crash-kmp-desktop-7.0.8_k3.16.7_35-17.1 crash-kmp-desktop-debuginfo-7.0.8_k3.16.7_35-17.1 crash-kmp-xen-7.0.8_k3.16.7_35-17.1 crash-kmp-xen-debuginfo-7.0.8_k3.16.7_35-17.1 hdjmod-debugsource-1.28-18.18.1 hdjmod-kmp-default-1.28_k3.16.7_35-18.18.1 hdjmod-kmp-default-debuginfo-1.28_k3.16.7_35-18.18.1 hdjmod-kmp-desktop-1.28_k3.16.7_35-18.18.1 hdjmod-kmp-desktop-debuginfo-1.28_k3.16.7_35-18.18.1 hdjmod-kmp-xen-1.28_k3.16.7_35-18.18.1 hdjmod-kmp-xen-debuginfo-1.28_k3.16.7_35-18.18.1 ipset-6.23-17.1 ipset-debuginfo-6.23-17.1 ipset-debugsource-6.23-17.1 ipset-devel-6.23-17.1 ipset-kmp-default-6.23_k3.16.7_35-17.1 ipset-kmp-default-debuginfo-6.23_k3.16.7_35-17.1 ipset-kmp-desktop-6.23_k3.16.7_35-17.1 ipset-kmp-desktop-debuginfo-6.23_k3.16.7_35-17.1 ipset-kmp-xen-6.23_k3.16.7_35-17.1 ipset-kmp-xen-debuginfo-6.23_k3.16.7_35-17.1 kernel-default-3.16.7-35.1 kernel-default-base-3.16.7-35.1 kernel-default-base-debuginfo-3.16.7-35.1 kernel-default-debuginfo-3.16.7-35.1 kernel-default-debugsource-3.16.7-35.1 kernel-default-devel-3.16.7-35.1 kernel-ec2-3.16.7-35.1 kernel-ec2-base-3.16.7-35.1 kernel-ec2-devel-3.16.7-35.1 kernel-obs-build-3.16.7-35.2 kernel-obs-build-debugsource-3.16.7-35.2 kernel-obs-qa-3.16.7-35.1 kernel-obs-qa-xen-3.16.7-35.1 kernel-syms-3.16.7-35.1 libipset3-6.23-17.1 libipset3-debuginfo-6.23-17.1 pcfclock-0.44-260.17.1 pcfclock-debuginfo-0.44-260.17.1 pcfclock-debugsource-0.44-260.17.1 pcfclock-kmp-default-0.44_k3.16.7_35-260.17.1 pcfclock-kmp-default-debuginfo-0.44_k3.16.7_35-260.17.1 pcfclock-kmp-desktop-0.44_k3.16.7_35-260.17.1 pcfclock-kmp-desktop-debuginfo-0.44_k3.16.7_35-260.17.1 python-virtualbox-4.3.36-43.2 python-virtualbox-debuginfo-4.3.36-43.2 vhba-kmp-debugsource-20140629-2.17.1 vhba-kmp-default-20140629_k3.16.7_35-2.17.1 vhba-kmp-default-debuginfo-20140629_k3.16.7_35-2.17.1 vhba-kmp-desktop-20140629_k3.16.7_35-2.17.1 vhba-kmp-desktop-debuginfo-20140629_k3.16.7_35-2.17.1 vhba-kmp-xen-20140629_k3.16.7_35-2.17.1 vhba-kmp-xen-debuginfo-20140629_k3.16.7_35-2.17.1 virtualbox-4.3.36-43.2 virtualbox-debuginfo-4.3.36-43.2 virtualbox-debugsource-4.3.36-43.2 virtualbox-devel-4.3.36-43.2 virtualbox-guest-kmp-default-4.3.36_k3.16.7_35-43.2 virtualbox-guest-kmp-default-debuginfo-4.3.36_k3.16.7_35-43.2 virtualbox-guest-kmp-desktop-4.3.36_k3.16.7_35-43.2 virtualbox-guest-kmp-desktop-debuginfo-4.3.36_k3.16.7_35-43.2 virtualbox-guest-tools-4.3.36-43.2 virtualbox-guest-tools-debuginfo-4.3.36-43.2 virtualbox-guest-x11-4.3.36-43.2 virtualbox-guest-x11-debuginfo-4.3.36-43.2 virtualbox-host-kmp-default-4.3.36_k3.16.7_35-43.2 virtualbox-host-kmp-default-debuginfo-4.3.36_k3.16.7_35-43.2 virtualbox-host-kmp-desktop-4.3.36_k3.16.7_35-43.2 virtualbox-host-kmp-desktop-debuginfo-4.3.36_k3.16.7_35-43.2 virtualbox-qt-4.3.36-43.2 virtualbox-qt-debuginfo-4.3.36-43.2 virtualbox-websrv-4.3.36-43.2 virtualbox-websrv-debuginfo-4.3.36-43.2 xen-debugsource-4.4.3_08-40.1 xen-devel-4.4.3_08-40.1 xen-libs-4.4.3_08-40.1 xen-libs-debuginfo-4.4.3_08-40.1 xen-tools-domU-4.4.3_08-40.1 xen-tools-domU-debuginfo-4.4.3_08-40.1 xtables-addons-2.6-17.1 xtables-addons-debuginfo-2.6-17.1 xtables-addons-debugsource-2.6-17.1 xtables-addons-kmp-default-2.6_k3.16.7_35-17.1 xtables-addons-kmp-default-debuginfo-2.6_k3.16.7_35-17.1 xtables-addons-kmp-desktop-2.6_k3.16.7_35-17.1 xtables-addons-kmp-desktop-debuginfo-2.6_k3.16.7_35-17.1 xtables-addons-kmp-xen-2.6_k3.16.7_35-17.1 xtables-addons-kmp-xen-debuginfo-2.6_k3.16.7_35-17.1 - openSUSE 13.2 (noarch): kernel-devel-3.16.7-35.1 kernel-docs-3.16.7-35.2 kernel-macros-3.16.7-35.1 kernel-source-3.16.7-35.1 kernel-source-vanilla-3.16.7-35.1 virtualbox-guest-desktop-icons-4.3.36-43.2 virtualbox-host-source-4.3.36-43.2 - openSUSE 13.2 (x86_64): xen-4.4.3_08-40.1 xen-doc-html-4.4.3_08-40.1 xen-kmp-default-4.4.3_08_k3.16.7_35-40.1 xen-kmp-default-debuginfo-4.4.3_08_k3.16.7_35-40.1 xen-kmp-desktop-4.4.3_08_k3.16.7_35-40.1 xen-kmp-desktop-debuginfo-4.4.3_08_k3.16.7_35-40.1 xen-libs-32bit-4.4.3_08-40.1 xen-libs-debuginfo-32bit-4.4.3_08-40.1 xen-tools-4.4.3_08-40.1 xen-tools-debuginfo-4.4.3_08-40.1 - openSUSE 13.2 (i686): kernel-pae-3.16.7-35.1 kernel-pae-base-3.16.7-35.1 kernel-pae-base-debuginfo-3.16.7-35.1 kernel-pae-debuginfo-3.16.7-35.1 kernel-pae-debugsource-3.16.7-35.1 kernel-pae-devel-3.16.7-35.1 - openSUSE 13.2 (i586): bbswitch-kmp-pae-0.8_k3.16.7_35-3.17.1 bbswitch-kmp-pae-debuginfo-0.8_k3.16.7_35-3.17.1 cloop-kmp-pae-2.639_k3.16.7_35-14.17.1 cloop-kmp-pae-debuginfo-2.639_k3.16.7_35-14.17.1 crash-kmp-pae-7.0.8_k3.16.7_35-17.1 crash-kmp-pae-debuginfo-7.0.8_k3.16.7_35-17.1 hdjmod-kmp-pae-1.28_k3.16.7_35-18.18.1 hdjmod-kmp-pae-debuginfo-1.28_k3.16.7_35-18.18.1 ipset-kmp-pae-6.23_k3.16.7_35-17.1 ipset-kmp-pae-debuginfo-6.23_k3.16.7_35-17.1 pcfclock-kmp-pae-0.44_k3.16.7_35-260.17.1 pcfclock-kmp-pae-debuginfo-0.44_k3.16.7_35-260.17.1 vhba-kmp-pae-20140629_k3.16.7_35-2.17.1 vhba-kmp-pae-debuginfo-20140629_k3.16.7_35-2.17.1 virtualbox-guest-kmp-pae-4.3.36_k3.16.7_35-43.2 virtualbox-guest-kmp-pae-debuginfo-4.3.36_k3.16.7_35-43.2 virtualbox-host-kmp-pae-4.3.36_k3.16.7_35-43.2 virtualbox-host-kmp-pae-debuginfo-4.3.36_k3.16.7_35-43.2 xtables-addons-kmp-pae-2.6_k3.16.7_35-17.1 xtables-addons-kmp-pae-debuginfo-2.6_k3.16.7_35-17.1 References: https://www.suse.com/security/cve/CVE-2016-0723.html https://www.suse.com/security/cve/CVE-2016-2069.html https://bugzilla.suse.com/907378 https://bugzilla.suse.com/961500 https://bugzilla.suse.com/963767 https://bugzilla.suse.com/965308 https://bugzilla.suse.com/965356

1 0

openSUSE-SU-2016:0536-1: important: Security update for qemu
by opensuse-security＠opensuse.org 21 Feb '16

21 Feb '16

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0536-1 Rating: important References: #954864 #956829 #957162 Cross-References: CVE-2015-7512 CVE-2015-8345 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update fixes the following security issues: - Enforce receive packet size, thus eliminating buffer overflow and potential security issue. (bsc#957162 CVE-2015-7512) - Infinite loop in processing command block list. CVE-2015-8345 (bsc#956829): This update also fixes a non-security bug: - Due to space restrictions in limited bios data areas, don't create mptable if vcpu count is "high" (ie more than ~19). (bsc#954864) (No supported guests are negatively impacted by this change, which is taken from upstream seabios) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-252=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): qemu-2.3.1-12.1 qemu-arm-2.3.1-12.1 qemu-arm-debuginfo-2.3.1-12.1 qemu-block-curl-2.3.1-12.1 qemu-block-curl-debuginfo-2.3.1-12.1 qemu-debugsource-2.3.1-12.1 qemu-extra-2.3.1-12.1 qemu-extra-debuginfo-2.3.1-12.1 qemu-guest-agent-2.3.1-12.1 qemu-guest-agent-debuginfo-2.3.1-12.1 qemu-kvm-2.3.1-12.1 qemu-lang-2.3.1-12.1 qemu-linux-user-2.3.1-12.1 qemu-linux-user-debuginfo-2.3.1-12.1 qemu-linux-user-debugsource-2.3.1-12.1 qemu-ppc-2.3.1-12.1 qemu-ppc-debuginfo-2.3.1-12.1 qemu-s390-2.3.1-12.1 qemu-s390-debuginfo-2.3.1-12.1 qemu-tools-2.3.1-12.1 qemu-tools-debuginfo-2.3.1-12.1 qemu-x86-2.3.1-12.1 qemu-x86-debuginfo-2.3.1-12.1 - openSUSE Leap 42.1 (x86_64): qemu-block-rbd-2.3.1-12.1 qemu-block-rbd-debuginfo-2.3.1-12.1 qemu-testsuite-2.3.1-12.2 - openSUSE Leap 42.1 (noarch): qemu-ipxe-1.0.0-12.1 qemu-seabios-1.8.1-12.1 qemu-sgabios-8-12.1 qemu-vgabios-1.8.1-12.1 References: https://www.suse.com/security/cve/CVE-2015-7512.html https://www.suse.com/security/cve/CVE-2015-8345.html https://bugzilla.suse.com/954864 https://bugzilla.suse.com/956829 https://bugzilla.suse.com/957162

1 0

openSUSE-RU-2016:0535-1: moderate: Recommended update for libsolv, libzypp, zypper
by maintenance＠opensuse.org 21 Feb '16

21 Feb '16

openSUSE Recommended Update: Recommended update for libsolv, libzypp, zypper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0535-1 Rating: moderate References: #606220 #637791 #710541 #793424 #948566 #949196 #949945 #951707 #953214 #953458 #955053 #955615 #956443 #956480 #957606 #957862 #959564 #959804 #961719 #961738 #964150 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 21 recommended fixes can now be installed. Description: This update for the Software Update Stack provides fixes and enhancements. libsolv: - Fix rule generation for linked packages. (bsc#961738) - Fix update handling of multiversion packages. (bsc#957606) - Fix orphan handling for dup with keeporphans set. (bsc#957606) - Change product links to also look at timestamps. (bsc#956443) - Rework multiversion orphaned handling. (bsc#957606) - Support key type changes in repodata_internalize(). - Allow serialization of REPOKEY_TYPE_DELETED. - Improve appdata handling of installed packages. - Improve performance when run under Xen. libzypp: - Filter unwanted btrfs subvolumes. (bsc#949945) - Fix plural form detection in createPot. (bsc#955053) - Fix Japanese translations. (bsc#949196) - More specific exception message if GPG binary is missing. (bsc#637791) zypper: - Don't load repos when removing packages. (bsc#606220) - Propagate repo refresh errors even if main action succeeded. (bsc#961719) - Fix misaligned TAB stops in colored prompts. (bsc#948566) - Enhance guessing of 'obs://' URLs on openSUSE Leap. (bsc#959804) - Don't return 0 if repositories were skipped during refresh. (bsc#959564) - Fix '-y' command option as alias for --non-interactive global option. (bsc#957862) - Mention location where rpm installs source packages to in command help and man page. (bsc#710541) - Explain difference between 'dup' and 'dup --from' in man page. - Explain meaning of 'System Packages' and '@System' shown in search results. (bsc#953458) - Fix different data returned in xml and text output of lu/lp commands. (bsc#793424) - Indicate patches requiring a restart of the package manager itself and enhance Status column in 'lp -a' output. - Also report needed but locked patches in 'pchk'. - Fix claiming an error after successful download. (bsc#956480) - Fix tab-completion if zypper is defined as an alias. (bsc#955615) - Fix plural form detection in createPot. (bsc#955053) - Fix typo. (bsc#953214) - Fix miss-aligned output when LANG=C. (bsc#951707) - Provide --priority option on 'addrepo' command. - Support '--priority 0' to restore the default repository priority in add/modifyrepo. - Fix Japanese translations. (bsc#949196) - Add -x shorthand option for --match-exact. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-254=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libsolv-debugsource-0.6.18-3.1 libsolv-demo-0.6.18-3.1 libsolv-demo-debuginfo-0.6.18-3.1 libsolv-devel-0.6.18-3.1 libsolv-devel-debuginfo-0.6.18-3.1 libsolv-tools-0.6.18-3.1 libsolv-tools-debuginfo-0.6.18-3.1 libzypp-15.21.1-3.2 libzypp-debuginfo-15.21.1-3.2 libzypp-debugsource-15.21.1-3.2 libzypp-devel-15.21.1-3.2 libzypp-devel-doc-15.21.1-3.2 perl-solv-0.6.18-3.1 perl-solv-debuginfo-0.6.18-3.1 python-solv-0.6.18-3.1 python-solv-debuginfo-0.6.18-3.1 ruby-solv-0.6.18-3.1 ruby-solv-debuginfo-0.6.18-3.1 zypper-1.12.31-3.1 zypper-debuginfo-1.12.31-3.1 zypper-debugsource-1.12.31-3.1 - openSUSE Leap 42.1 (noarch): zypper-aptitude-1.12.31-3.1 zypper-log-1.12.31-3.1 References: https://bugzilla.suse.com/606220 https://bugzilla.suse.com/637791 https://bugzilla.suse.com/710541 https://bugzilla.suse.com/793424 https://bugzilla.suse.com/948566 https://bugzilla.suse.com/949196 https://bugzilla.suse.com/949945 https://bugzilla.suse.com/951707 https://bugzilla.suse.com/953214 https://bugzilla.suse.com/953458 https://bugzilla.suse.com/955053 https://bugzilla.suse.com/955615 https://bugzilla.suse.com/956443 https://bugzilla.suse.com/956480 https://bugzilla.suse.com/957606 https://bugzilla.suse.com/957862 https://bugzilla.suse.com/959564 https://bugzilla.suse.com/959804 https://bugzilla.suse.com/961719 https://bugzilla.suse.com/961738 https://bugzilla.suse.com/964150

1 0

openSUSE-RU-2016:0534-1: Recommended update for shared-mime-info
by maintenance＠opensuse.org 21 Feb '16

21 Feb '16

openSUSE Recommended Update: Recommended update for shared-mime-info ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0534-1 Rating: low References: #862596 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for shared-mime-info removes excessive calls to fdatasync() from update-mime-database. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-255=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): shared-mime-info-1.2-5.1 shared-mime-info-debuginfo-1.2-5.1 shared-mime-info-debugsource-1.2-5.1 - openSUSE Leap 42.1 (noarch): shared-mime-info-lang-1.2-5.1 References: https://bugzilla.suse.com/862596

1 0

openSUSE-RU-2016:0533-1: moderate: Recommended update for dateutils
by maintenance＠opensuse.org 21 Feb '16

21 Feb '16

openSUSE Recommended Update: Recommended update for dateutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0533-1 Rating: moderate References: #966644 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 0.3.5 for dateutils: - distinguish between numerals-only dates and durations - documentation updates - fix rebuilding of dateutils package (boo#966644) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-250=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): dateutils-0.3.5-3.1 dateutils-debuginfo-0.3.5-3.1 dateutils-debugsource-0.3.5-3.1 References: https://bugzilla.suse.com/966644

1 0

openSUSE-OU-2016:0532-1: Optional update for postgresql94-plr
by maintenance＠opensuse.org 21 Feb '16

21 Feb '16

openSUSE Optional Update: Optional update for postgresql94-plr ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:0532-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This optional provides the 9.4 version of postgresql PLR package. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-251=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): postgresql94-plr-8.3.0.16-2.1 postgresql94-plr-debuginfo-8.3.0.16-2.1 postgresql94-plr-debugsource-8.3.0.16-2.1 postgresql94-plr-doc-8.3.0.16-2.1 References:

1 0

openSUSE-SU-2016:0531-1: important: Security update for postgresql93
by opensuse-security＠opensuse.org 21 Feb '16

21 Feb '16

openSUSE Security Update: Security update for postgresql93 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0531-1 Rating: important References: #966435 #966436 Cross-References: CVE-2007-4772 CVE-2016-0766 CVE-2016-0773 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for postgresql93 fixes the following issues: - Security and bugfix release 9.3.11: * Fix infinite loops and buffer-overrun problems in regular expressions (CVE-2016-0773, boo#966436). * Fix regular-expression compiler to handle loops of constraint arcs (CVE-2007-4772). * Prevent certain PL/Java parameters from being set by non-superusers (CVE-2016-0766, boo#966435). * Fix many issues in pg_dump with specific object types * Prevent over-eager pushdown of HAVING clauses for GROUPING SETS * Fix deparsing error with ON CONFLICT ... WHERE clauses * Fix tableoid errors for postgres_fdw * Prevent floating-point exceptions in pgbench * Make \det search Foreign Table names consistently * Fix quoting of domain constraint names in pg_dump * Prevent putting expanded objects into Const nodes * Allow compile of PL/Java on Windows * Fix "unresolved symbol" errors in PL/Python execution * Allow Python2 and Python3 to be used in the same database * Add support for Python 3.5 in PL/Python * Fix issue with subdirectory creation during initdb * Make pg_ctl report status correctly on Windows * Suppress confusing error when using pg_receivexlog with older servers * Multiple documentation corrections and additions * Fix erroneous hash calculations in gin_extract_jsonb_path() - For the full release notse, see: http://www.postgresql.org/docs/9.3/static/release-9-3-11.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-253=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-253=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): postgresql93-9.3.11-3.2 postgresql93-contrib-9.3.11-3.2 postgresql93-contrib-debuginfo-9.3.11-3.2 postgresql93-debuginfo-9.3.11-3.2 postgresql93-debugsource-9.3.11-3.2 postgresql93-devel-9.3.11-3.2 postgresql93-devel-debuginfo-9.3.11-3.2 postgresql93-libs-debugsource-9.3.11-3.2 postgresql93-plperl-9.3.11-3.2 postgresql93-plperl-debuginfo-9.3.11-3.2 postgresql93-plpython-9.3.11-3.2 postgresql93-plpython-debuginfo-9.3.11-3.2 postgresql93-pltcl-9.3.11-3.2 postgresql93-pltcl-debuginfo-9.3.11-3.2 postgresql93-server-9.3.11-3.2 postgresql93-server-debuginfo-9.3.11-3.2 postgresql93-test-9.3.11-3.2 - openSUSE Leap 42.1 (noarch): postgresql-init-9.4-6.1 postgresql93-docs-9.3.11-3.2 - openSUSE 13.2 (i586 x86_64): libecpg6-9.3.11-2.10.1 libecpg6-debuginfo-9.3.11-2.10.1 libpq5-9.3.11-2.10.1 libpq5-debuginfo-9.3.11-2.10.1 postgresql93-9.3.11-2.10.1 postgresql93-contrib-9.3.11-2.10.1 postgresql93-contrib-debuginfo-9.3.11-2.10.1 postgresql93-debuginfo-9.3.11-2.10.1 postgresql93-debugsource-9.3.11-2.10.1 postgresql93-devel-9.3.11-2.10.1 postgresql93-devel-debuginfo-9.3.11-2.10.1 postgresql93-libs-debugsource-9.3.11-2.10.1 postgresql93-plperl-9.3.11-2.10.1 postgresql93-plperl-debuginfo-9.3.11-2.10.1 postgresql93-plpython-9.3.11-2.10.1 postgresql93-plpython-debuginfo-9.3.11-2.10.1 postgresql93-pltcl-9.3.11-2.10.1 postgresql93-pltcl-debuginfo-9.3.11-2.10.1 postgresql93-server-9.3.11-2.10.1 postgresql93-server-debuginfo-9.3.11-2.10.1 postgresql93-test-9.3.11-2.10.1 - openSUSE 13.2 (x86_64): libecpg6-32bit-9.3.11-2.10.1 libecpg6-debuginfo-32bit-9.3.11-2.10.1 libpq5-32bit-9.3.11-2.10.1 libpq5-debuginfo-32bit-9.3.11-2.10.1 - openSUSE 13.2 (noarch): postgresql93-docs-9.3.11-2.10.1 References: https://www.suse.com/security/cve/CVE-2007-4772.html https://www.suse.com/security/cve/CVE-2016-0766.html https://www.suse.com/security/cve/CVE-2016-0773.html https://bugzilla.suse.com/966435 https://bugzilla.suse.com/966436

1 0

openSUSE-SU-2016:0530-1: moderate: Security update for xdelta3
by opensuse-security＠opensuse.org 20 Feb '16

20 Feb '16

openSUSE Security Update: Security update for xdelta3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0530-1 Rating: moderate References: #965791 Cross-References: CVE-2014-9765 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xdelta3 fixes the following security issue: - CVE-2014-9765: Fixed buffer overflow in main_get_appheader. (boo#965791) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-248=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): xdelta3-3.0.8-7.6.1 References: https://www.suse.com/security/cve/CVE-2014-9765.html https://bugzilla.suse.com/965791

1 0

openSUSE-SU-2016:0529-1: critical: Security update for Chromium
by opensuse-security＠opensuse.org 20 Feb '16

20 Feb '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0529-1 Rating: critical References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update contains Chromium 48.0.2564.116 and fixes the following security flaw: - CVE-2016-1629: Same-origin bypass in Blink and Sandbox escape in Chrome. (boo#967376) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-249=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): chromedriver-48.0.2564.116-129.1 chromedriver-debuginfo-48.0.2564.116-129.1 chromium-48.0.2564.116-129.1 chromium-debuginfo-48.0.2564.116-129.1 chromium-debugsource-48.0.2564.116-129.1 chromium-desktop-gnome-48.0.2564.116-129.1 chromium-desktop-kde-48.0.2564.116-129.1 chromium-ffmpegsumo-48.0.2564.116-129.1 chromium-ffmpegsumo-debuginfo-48.0.2564.116-129.1 References:

1 0