August 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:1977-1: moderate: Security update for bsdiff
by opensuse-security＠opensuse.org 05 Aug '16

05 Aug '16

openSUSE Security Update: Security update for bsdiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1977-1 Rating: moderate References: #990660 Cross-References: CVE-2014-9862 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bsdiff fixes the following issues: - CVE-2014-9862: Improper checking of input allows arbitrary write on heap (boo#990660) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-946=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-946=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): bsdiff-4.3-9.2 - openSUSE 13.2 (i586 x86_64): bsdiff-4.3-2.5.2 References: https://www.suse.com/security/cve/CVE-2014-9862.html https://bugzilla.suse.com/990660

1 0

openSUSE-RU-2016:1976-1: Recommended update for psmisc
by maintenance＠opensuse.org 05 Aug '16

05 Aug '16

openSUSE Recommended Update: Recommended update for psmisc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1976-1 Rating: low References: #908063 #930760 #974161 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for psmisc prevents attempts to close files which are not open. This issue could make pstree(1) terminate with a segmentation fault. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-948=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): psmisc-22.21-6.2 psmisc-debuginfo-22.21-6.2 psmisc-debugsource-22.21-6.2 - openSUSE Leap 42.1 (noarch): psmisc-lang-22.21-6.2 References: https://bugzilla.suse.com/908063 https://bugzilla.suse.com/930760 https://bugzilla.suse.com/974161

1 0

openSUSE-SU-2016:1975-1: moderate: Security update for libvirt
by opensuse-security＠opensuse.org 05 Aug '16

05 Aug '16

openSUSE Security Update: Security update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1975-1 Rating: moderate References: #987527 #989755 Cross-References: CVE-2016-5008 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for libvirt fixes the following issues: - Update to libvirt 1.2.18.4 stable release - Inherit many upstream bug fixes, including CVE-2016-5008 boo#987527. For details, see http://wiki.libvirt.org/page/Maintenance_Releases - virsh: improve waiting for block job readines (boo#989755) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-943=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libvirt-1.2.18.4-14.2 libvirt-client-1.2.18.4-14.2 libvirt-client-debuginfo-1.2.18.4-14.2 libvirt-daemon-1.2.18.4-14.2 libvirt-daemon-config-network-1.2.18.4-14.2 libvirt-daemon-config-nwfilter-1.2.18.4-14.2 libvirt-daemon-debuginfo-1.2.18.4-14.2 libvirt-daemon-driver-interface-1.2.18.4-14.2 libvirt-daemon-driver-interface-debuginfo-1.2.18.4-14.2 libvirt-daemon-driver-lxc-1.2.18.4-14.2 libvirt-daemon-driver-lxc-debuginfo-1.2.18.4-14.2 libvirt-daemon-driver-network-1.2.18.4-14.2 libvirt-daemon-driver-network-debuginfo-1.2.18.4-14.2 libvirt-daemon-driver-nodedev-1.2.18.4-14.2 libvirt-daemon-driver-nodedev-debuginfo-1.2.18.4-14.2 libvirt-daemon-driver-nwfilter-1.2.18.4-14.2 libvirt-daemon-driver-nwfilter-debuginfo-1.2.18.4-14.2 libvirt-daemon-driver-qemu-1.2.18.4-14.2 libvirt-daemon-driver-qemu-debuginfo-1.2.18.4-14.2 libvirt-daemon-driver-secret-1.2.18.4-14.2 libvirt-daemon-driver-secret-debuginfo-1.2.18.4-14.2 libvirt-daemon-driver-storage-1.2.18.4-14.2 libvirt-daemon-driver-storage-debuginfo-1.2.18.4-14.2 libvirt-daemon-driver-uml-1.2.18.4-14.2 libvirt-daemon-driver-uml-debuginfo-1.2.18.4-14.2 libvirt-daemon-driver-vbox-1.2.18.4-14.2 libvirt-daemon-driver-vbox-debuginfo-1.2.18.4-14.2 libvirt-daemon-lxc-1.2.18.4-14.2 libvirt-daemon-qemu-1.2.18.4-14.2 libvirt-daemon-uml-1.2.18.4-14.2 libvirt-daemon-vbox-1.2.18.4-14.2 libvirt-debugsource-1.2.18.4-14.2 libvirt-devel-1.2.18.4-14.2 libvirt-doc-1.2.18.4-14.2 libvirt-lock-sanlock-1.2.18.4-14.2 libvirt-lock-sanlock-debuginfo-1.2.18.4-14.2 libvirt-login-shell-1.2.18.4-14.2 libvirt-login-shell-debuginfo-1.2.18.4-14.2 - openSUSE Leap 42.1 (x86_64): libvirt-client-32bit-1.2.18.4-14.2 libvirt-client-debuginfo-32bit-1.2.18.4-14.2 libvirt-daemon-driver-libxl-1.2.18.4-14.2 libvirt-daemon-driver-libxl-debuginfo-1.2.18.4-14.2 libvirt-daemon-xen-1.2.18.4-14.2 libvirt-devel-32bit-1.2.18.4-14.2 References: https://www.suse.com/security/cve/CVE-2016-5008.html https://bugzilla.suse.com/987527 https://bugzilla.suse.com/989755

1 0

openSUSE-SU-2016:1974-1: Security update for wireshark
by opensuse-security＠opensuse.org 05 Aug '16

05 Aug '16

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1974-1 Rating: low References: #991012 #991013 #991015 #991016 #991017 #991018 #991019 #991020 Cross-References: CVE-2016-6504 CVE-2016-6505 CVE-2016-6506 CVE-2016-6507 CVE-2016-6508 CVE-2016-6509 CVE-2016-6510 CVE-2016-6511 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: Wireshark was updated to 1.12.13 to fix a number of minor security issues and bugs. This release fixes a number issues in protocol dissectors that could have allowed a remote attacker to crash Wireshark or cause excessive CPU usage through specially crafted packages inserted into the network or a capture file. - CVE-2016-6504: NDS dissector crash (boo#991012) - CVE-2016-6505: PacketBB crash (boo#991013) - CVE-2016-6506: WSP infinite loop (boo#991015) - CVE-2016-6507: MMSE infinite loop (boo#991016) - CVE-2016-6508: RLC long loop (boo#991017) - CVE-2016-6509: LDSS dissector crash (boo#991018) - CVE-2016-6510: RLC dissector crash (boo#991019) - CVE-2016-6511: OpenFlow long loop (boo#991020) This update also includes further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.12.13.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-947=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-947=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): wireshark-1.12.13-29.1 wireshark-debuginfo-1.12.13-29.1 wireshark-debugsource-1.12.13-29.1 wireshark-devel-1.12.13-29.1 wireshark-ui-gtk-1.12.13-29.1 wireshark-ui-gtk-debuginfo-1.12.13-29.1 wireshark-ui-qt-1.12.13-29.1 wireshark-ui-qt-debuginfo-1.12.13-29.1 - openSUSE 13.2 (i586 x86_64): wireshark-1.12.13-44.1 wireshark-debuginfo-1.12.13-44.1 wireshark-debugsource-1.12.13-44.1 wireshark-devel-1.12.13-44.1 wireshark-ui-gtk-1.12.13-44.1 wireshark-ui-gtk-debuginfo-1.12.13-44.1 wireshark-ui-qt-1.12.13-44.1 wireshark-ui-qt-debuginfo-1.12.13-44.1 References: https://www.suse.com/security/cve/CVE-2016-6504.html https://www.suse.com/security/cve/CVE-2016-6505.html https://www.suse.com/security/cve/CVE-2016-6506.html https://www.suse.com/security/cve/CVE-2016-6507.html https://www.suse.com/security/cve/CVE-2016-6508.html https://www.suse.com/security/cve/CVE-2016-6509.html https://www.suse.com/security/cve/CVE-2016-6510.html https://www.suse.com/security/cve/CVE-2016-6511.html https://bugzilla.suse.com/991012 https://bugzilla.suse.com/991013 https://bugzilla.suse.com/991015 https://bugzilla.suse.com/991016 https://bugzilla.suse.com/991017 https://bugzilla.suse.com/991018 https://bugzilla.suse.com/991019 https://bugzilla.suse.com/991020

1 0

openSUSE-OU-2016:1971-1: Optional update for ansible
by maintenance＠opensuse.org 05 Aug '16

05 Aug '16

openSUSE Optional Update: Optional update for ansible ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:1971-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update adds ansible 2.1.1.0 to the SLE-12 Package Hub. Ansible is a radically simple IT automation system. It handles configuration-management, application deployment, cloud provisioning, ad-hoc task-execution, and multinode orchestration - including trivializing things like zero downtime rolling updates with load balancers. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-942=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): ansible-2.1.1.0-2.1 References:

1 0

openSUSE-RU-2016:1970-1: moderate: Recommended update for pssh
by maintenance＠opensuse.org 05 Aug '16

05 Aug '16

openSUSE Recommended Update: Recommended update for pssh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1970-1 Rating: moderate References: #985637 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pssh fixes the following issues: - Fix broken -I option (bsc#985637) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-941=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): pssh-2.3.1-18.1 python-pssh-2.3.1-18.1 References: https://bugzilla.suse.com/985637

1 0

openSUSE-RU-2016:1969-1: moderate: Recommended update for ksh
by maintenance＠opensuse.org 05 Aug '16

05 Aug '16

openSUSE Recommended Update: Recommended update for ksh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1969-1 Rating: moderate References: #962069 #964966 #982423 #987362 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for ksh fixes the following issues: - Own the ksh files in /etc/alternatives. (bsc#987362, bsc#962069) - Fix leak in optimize processing. (bsc#982423) - Fix editor prediction code garbling input. (bsc#964966) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-940=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ksh-93vu-10.1 ksh-debuginfo-93vu-10.1 ksh-debugsource-93vu-10.1 ksh-devel-93vu-10.1 References: https://bugzilla.suse.com/962069 https://bugzilla.suse.com/964966 https://bugzilla.suse.com/982423 https://bugzilla.suse.com/987362

1 0

openSUSE-RU-2016:1968-1: moderate: Recommended update for geary
by maintenance＠opensuse.org 05 Aug '16

05 Aug '16

openSUSE Recommended Update: Recommended update for geary ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1968-1 Rating: moderate References: #991116 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for geary provides version 0.11.1 and fixes the following issues: - Fix frequent crashes on 32-bit/i686 OS installations (bgo#758621). - Fix error connecting to certain Outlook.com accounts (bgo#766552). - Find special folders with lower case names (bgo#748183). - Find Exchange Sent and Deleted special folders (bgo#748183). - Don't create Archive folders for GMail accounts (bgo#767259). - Use HTTPS for accessing Gravatar.com (bgo#766595). - Fix text not show when only plain text and image parts (bgo#767438). - Fix crash when is:foo is not translated (bgo#766837). - Make English versions of search ops always work (bgo#766837). - Allow to:me and from:me to be translated separately (bgo#767291). - Add archive special folder support (bgo#713986). - Add is:read, is:unread: is:starred search operators (bgo#726661). - Fix using more than search operator - to:, from:, etc (bgo#749938). - Work around crashes caused by WebKitGTK+ 2.4.10 (bgo#764152, bgo#763933). - Fix a crash when searching (bgo#765515). - Fix images not being displayed in some HTML messages (bgo#764919). - Fix empty main window when opened from notification (bgo#763961). - Fix UI freezing when network connections are lost (bgo#757088). - Work better with Cyrus & other servers when network unreliable (bgo#757166). - Enable use of custom FTS3 tokeniser in SQLite 3.12 and later (bgo#763203). - Fix inconsistent Composer 'Detach' button placement (bgo#757110). - Documentation improvements (bgo#764848, bgo#749925). - Update deb module dependencies (bgo#749931, bgo#748464). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-939=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): geary-0.11.1-6.1 geary-debuginfo-0.11.1-6.1 geary-debugsource-0.11.1-6.1 - openSUSE Leap 42.1 (noarch): geary-lang-0.11.1-6.1 References: https://bugzilla.suse.com/991116

1 0

openSUSE-RU-2016:1967-1: moderate: Recommended update for geary
by maintenance＠opensuse.org 05 Aug '16

05 Aug '16

openSUSE Recommended Update: Recommended update for geary ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1967-1 Rating: moderate References: #991116 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for geary provides version 0.11.1 and fixes the following issues: - Fix frequent crashes on 32-bit/i686 OS installations (bgo#758621). - Fix error connecting to certain Outlook.com accounts (bgo#766552). - Find special folders with lower case names (bgo#748183). - Find Exchange Sent and Deleted special folders (bgo#748183). - Don't create Archive folders for GMail accounts (bgo#767259). - Use HTTPS for accessing Gravatar.com (bgo#766595). - Fix text not show when only plain text and image parts (bgo#767438). - Fix crash when is:foo is not translated (bgo#766837). - Make English versions of search ops always work (bgo#766837). - Allow to:me and from:me to be translated separately (bgo#767291). - Add archive special folder support (bgo#713986). - Add is:read, is:unread: is:starred search operators (bgo#726661). - Fix using more than search operator - to:, from:, etc (bgo#749938). - Work around crashes caused by WebKitGTK+ 2.4.10 (bgo#764152, bgo#763933). - Fix a crash when searching (bgo#765515). - Fix images not being displayed in some HTML messages (bgo#764919). - Fix empty main window when opened from notification (bgo#763961). - Fix UI freezing when network connections are lost (bgo#757088). - Work better with Cyrus & other servers when network unreliable (bgo#757166). - Enable use of custom FTS3 tokeniser in SQLite 3.12 and later (bgo#763203). - Fix inconsistent Composer 'Detach' button placement (bgo#757110). - Documentation improvements (bgo#764848, bgo#749925). - Update deb module dependencies (bgo#749931, bgo#748464). - Undo Archive/Trash/Move of email (bgo#721828). - New split headerbar layout with UI, composer improvements (bgo#743960). - Preference to switch between 2-column and 3-column layout (bgo#714793). - Support multiple ("alternate") email addresses per account (bgo#714922). - New shortcut keys to navigate next/previous conversation (bgo#714434). - Fix displaying inline images referenced by Content-ID (bgo#743676). - Support HTML signatures (bgo#738895). - Quote from multiple selections in reply (bgo#738188). - Restore reply/reply all/forward state of edited drafts (bgo#743067). - Quoted message portion may be easily removed in composer (bgo#741609). - True delete now supported in Gmail (bgo#721790). - Improved searching for terms w/ punctuation (bgo#714863). - Empty Trash, Empty Spam (bgo#714809, bgo#725260). - Better conversation construction (bgo#714563). - Improved IMAP connection reestablishment and retrying of remote operations. - Improved full-text search experience (bgo#720361). - Periodic database & attachments garbage collection (bgo#714134). - Remove minimum width for sidebar/folder list (bgo#713882). - Use GtkHeaderBar for dialogs (bog#741240). - Can now specify Reply-To when composing (bgo#714588). - Fix signed int32 UID/UIDVALIDITY bug (bgo#737642). - Composer shortcuts now listed in online help (bgo#741573). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-938=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): geary-0.11.1-10.1 geary-debuginfo-0.11.1-10.1 geary-debugsource-0.11.1-10.1 - openSUSE 13.2 (noarch): geary-lang-0.11.1-10.1 References: https://bugzilla.suse.com/991116

1 0

openSUSE-SU-2016:1964-1: important: Security update for MozillaFirefox, mozilla-nss
by opensuse-security＠opensuse.org 04 Aug '16

04 Aug '16

openSUSE Security Update: Security update for MozillaFirefox, mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1964-1 Rating: important References: #984126 #984403 #984637 #986541 #991809 Cross-References: CVE-2016-0718 CVE-2016-2830 CVE-2016-2835 CVE-2016-2836 CVE-2016-2837 CVE-2016-2838 CVE-2016-2839 CVE-2016-5250 CVE-2016-5251 CVE-2016-5252 CVE-2016-5254 CVE-2016-5255 CVE-2016-5258 CVE-2016-5259 CVE-2016-5260 CVE-2016-5261 CVE-2016-5262 CVE-2016-5263 CVE-2016-5264 CVE-2016-5265 CVE-2016-5266 CVE-2016-5268 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes 22 vulnerabilities is now available. Description: Mozilla Firefox was updated to 48.0 to fix security issues, bugs, and deliver various improvements. The following major changes are included: - Process separation (e10s) is enabled for some users - Add-ons that have not been verified and signed by Mozilla will not load - WebRTC enhancements - The media parser has been redeveloped using the Rust programming language - better Canvas performance with speedy Skia support - Now requires NSS 3.24 The following security issues were fixed: (boo#991809) - CVE-2016-2835/CVE-2016-2836: Miscellaneous memory safety hazards - CVE-2016-2830: Favicon network connection can persist when page is closed - CVE-2016-2838: Buffer overflow rendering SVG with bidirectional content - CVE-2016-2839: Cairo rendering crash due to memory allocation issue with FFmpeg 0.10 - CVE-2016-5251: Location bar spoofing via data URLs with malformed/invalid mediatypes - CVE-2016-5252: Stack underflow during 2D graphics rendering - CVE-2016-0718: Out-of-bounds read during XML parsing in Expat library - CVE-2016-5254: Use-after-free when using alt key and toplevel menus - CVE-2016-5255: Crash in incremental garbage collection in JavaScript - CVE-2016-5258: Use-after-free in DTLS during WebRTC session shutdown - CVE-2016-5259: Use-after-free in service workers with nested sync events - CVE-2016-5260: Form input type change from password to text can store plain text password in session restore file - CVE-2016-5261: Integer overflow in WebSockets during data buffering - CVE-2016-5262: Scripts on marquee tag can execute in sandboxed iframes - CVE-2016-2837: Buffer overflow in ClearKey Content Decryption Module (CDM) during video playback - CVE-2016-5263: Type confusion in display transformation - CVE-2016-5264: Use-after-free when applying SVG effects - CVE-2016-5265: Same-origin policy violation using local HTML file and saved shortcut file - CVE-2016-5266: Information disclosure and local file manipulation through drag and drop - CVE-2016-5268: Spoofing attack through text injection into internal error pages - CVE-2016-5250: Information disclosure through Resource Timing API during page navigation The following non-security changes are included: - The AppData description and screenshots were updated. - Fix Firefox crash on startup on i586 (boo#986541) - The Selenium WebDriver may have caused Firefox to crash at startup - fix build issues with gcc/binutils combination used in Leap 42.2 (boo#984637) - Fix running on 48bit va aarch64 (boo#984126) - fix XUL dialog button order under KDE session (boo#984403) Mozilla NSS was updated to 3.24 as a dependency. Changes in mozilla-nss: - NSS softoken updated with latest NIST guidance - NSS softoken updated to allow NSS to run in FIPS Level 1 (no password) - Various added and deprecated functions - Remove most code related to SSL v2, including the ability to actively send a SSLv2-compatible client hello. - Protect against the Cachebleed attack. - Disable support for DTLS compression. - Improve support for TLS 1.3. This includes support for DTLS 1.3. (experimental) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-937=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-937=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): MozillaFirefox-48.0-27.1 MozillaFirefox-branding-upstream-48.0-27.1 MozillaFirefox-buildsymbols-48.0-27.1 MozillaFirefox-debuginfo-48.0-27.1 MozillaFirefox-debugsource-48.0-27.1 MozillaFirefox-devel-48.0-27.1 MozillaFirefox-translations-common-48.0-27.1 MozillaFirefox-translations-other-48.0-27.1 libfreebl3-3.24-21.1 libfreebl3-debuginfo-3.24-21.1 libsoftokn3-3.24-21.1 libsoftokn3-debuginfo-3.24-21.1 mozilla-nss-3.24-21.1 mozilla-nss-certs-3.24-21.1 mozilla-nss-certs-debuginfo-3.24-21.1 mozilla-nss-debuginfo-3.24-21.1 mozilla-nss-debugsource-3.24-21.1 mozilla-nss-devel-3.24-21.1 mozilla-nss-sysinit-3.24-21.1 mozilla-nss-sysinit-debuginfo-3.24-21.1 mozilla-nss-tools-3.24-21.1 mozilla-nss-tools-debuginfo-3.24-21.1 - openSUSE Leap 42.1 (x86_64): libfreebl3-32bit-3.24-21.1 libfreebl3-debuginfo-32bit-3.24-21.1 libsoftokn3-32bit-3.24-21.1 libsoftokn3-debuginfo-32bit-3.24-21.1 mozilla-nss-32bit-3.24-21.1 mozilla-nss-certs-32bit-3.24-21.1 mozilla-nss-certs-debuginfo-32bit-3.24-21.1 mozilla-nss-debuginfo-32bit-3.24-21.1 mozilla-nss-sysinit-32bit-3.24-21.1 mozilla-nss-sysinit-debuginfo-32bit-3.24-21.1 - openSUSE 13.2 (i586 x86_64): MozillaFirefox-48.0-74.1 MozillaFirefox-branding-upstream-48.0-74.1 MozillaFirefox-buildsymbols-48.0-74.1 MozillaFirefox-debuginfo-48.0-74.1 MozillaFirefox-debugsource-48.0-74.1 MozillaFirefox-devel-48.0-74.1 MozillaFirefox-translations-common-48.0-74.1 MozillaFirefox-translations-other-48.0-74.1 libfreebl3-3.24-37.1 libfreebl3-debuginfo-3.24-37.1 libsoftokn3-3.24-37.1 libsoftokn3-debuginfo-3.24-37.1 mozilla-nss-3.24-37.1 mozilla-nss-certs-3.24-37.1 mozilla-nss-certs-debuginfo-3.24-37.1 mozilla-nss-debuginfo-3.24-37.1 mozilla-nss-debugsource-3.24-37.1 mozilla-nss-devel-3.24-37.1 mozilla-nss-sysinit-3.24-37.1 mozilla-nss-sysinit-debuginfo-3.24-37.1 mozilla-nss-tools-3.24-37.1 mozilla-nss-tools-debuginfo-3.24-37.1 - openSUSE 13.2 (x86_64): libfreebl3-32bit-3.24-37.1 libfreebl3-debuginfo-32bit-3.24-37.1 libsoftokn3-32bit-3.24-37.1 libsoftokn3-debuginfo-32bit-3.24-37.1 mozilla-nss-32bit-3.24-37.1 mozilla-nss-certs-32bit-3.24-37.1 mozilla-nss-certs-debuginfo-32bit-3.24-37.1 mozilla-nss-debuginfo-32bit-3.24-37.1 mozilla-nss-sysinit-32bit-3.24-37.1 mozilla-nss-sysinit-debuginfo-32bit-3.24-37.1 References: https://www.suse.com/security/cve/CVE-2016-0718.html https://www.suse.com/security/cve/CVE-2016-2830.html https://www.suse.com/security/cve/CVE-2016-2835.html https://www.suse.com/security/cve/CVE-2016-2836.html https://www.suse.com/security/cve/CVE-2016-2837.html https://www.suse.com/security/cve/CVE-2016-2838.html https://www.suse.com/security/cve/CVE-2016-2839.html https://www.suse.com/security/cve/CVE-2016-5250.html https://www.suse.com/security/cve/CVE-2016-5251.html https://www.suse.com/security/cve/CVE-2016-5252.html https://www.suse.com/security/cve/CVE-2016-5254.html https://www.suse.com/security/cve/CVE-2016-5255.html https://www.suse.com/security/cve/CVE-2016-5258.html https://www.suse.com/security/cve/CVE-2016-5259.html https://www.suse.com/security/cve/CVE-2016-5260.html https://www.suse.com/security/cve/CVE-2016-5261.html https://www.suse.com/security/cve/CVE-2016-5262.html https://www.suse.com/security/cve/CVE-2016-5263.html https://www.suse.com/security/cve/CVE-2016-5264.html https://www.suse.com/security/cve/CVE-2016-5265.html https://www.suse.com/security/cve/CVE-2016-5266.html https://www.suse.com/security/cve/CVE-2016-5268.html https://bugzilla.suse.com/984126 https://bugzilla.suse.com/984403 https://bugzilla.suse.com/984637 https://bugzilla.suse.com/986541 https://bugzilla.suse.com/991809

1 0