September 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:2375-1: moderate: tiff
by opensuse-security＠opensuse.org 25 Sep '16

25 Sep '16

openSUSE Security Update: tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2375-1 Rating: moderate References: #974614 #974618 #975069 #975070 #984808 #984831 #984837 #984842 #987351 Cross-References: CVE-2016-3623 CVE-2016-3945 CVE-2016-3990 CVE-2016-3991 CVE-2016-5314 CVE-2016-5316 CVE-2016-5317 CVE-2016-5320 CVE-2016-5875 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for tiff fixes the following issues: * CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds writes for invalid images (bsc#964225) * CVE-2016-3186: Buffer overflow in gif2tiff (bnc#973340). * CVE-2016-5875: heap-based buffer overflow when using the PixarLog compressionformat (bsc#987351) * CVE-2016-5316: Out-of-bounds read in PixarLogCleanup() function in tif_pixarlog.c (bsc#984837) * CVE-2016-5314: Out-of-bounds write in PixarLogDecode() function (bsc#984831) * CVE-2016-5317: Out-of-bounds write in PixarLogDecode() function in libtiff.so (bsc#984842) * CVE-2016-5320: Out-of-bounds write in PixarLogDecode() function in tif_pixarlog.c (bsc#984808) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-1122=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libtiff-devel-4.0.6-8.25.1 libtiff5-4.0.6-8.25.1 libtiff5-debuginfo-4.0.6-8.25.1 tiff-4.0.6-8.25.1 tiff-debuginfo-4.0.6-8.25.1 tiff-debugsource-4.0.6-8.25.1 - openSUSE 13.1 (x86_64): libtiff-devel-32bit-4.0.6-8.25.1 libtiff5-32bit-4.0.6-8.25.1 libtiff5-debuginfo-32bit-4.0.6-8.25.1 References: https://www.suse.com/security/cve/CVE-2016-3623.html https://www.suse.com/security/cve/CVE-2016-3945.html https://www.suse.com/security/cve/CVE-2016-3990.html https://www.suse.com/security/cve/CVE-2016-3991.html https://www.suse.com/security/cve/CVE-2016-5314.html https://www.suse.com/security/cve/CVE-2016-5316.html https://www.suse.com/security/cve/CVE-2016-5317.html https://www.suse.com/security/cve/CVE-2016-5320.html https://www.suse.com/security/cve/CVE-2016-5875.html https://bugzilla.suse.com/974614 https://bugzilla.suse.com/974618 https://bugzilla.suse.com/975069 https://bugzilla.suse.com/975070 https://bugzilla.suse.com/984808 https://bugzilla.suse.com/984831 https://bugzilla.suse.com/984837 https://bugzilla.suse.com/984842 https://bugzilla.suse.com/987351

1 0

openSUSE-SU-2016:2374-1: moderate: Security update for gtk2
by opensuse-security＠opensuse.org 24 Sep '16

24 Sep '16

openSUSE Security Update: Security update for gtk2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2374-1 Rating: moderate References: #966682 #999375 Cross-References: CVE-2013-7447 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This gtk2 update to version 2.24.31 fixes the following issues: Security issues fixed: - CVE-2013-7447: Fixed integer overflow in image handling (boo#966682). Bugs fixed: - Changes from version 2.24.31: + Backport many file chooser entry fixes and cleanups. + Don't crash if invisible files are deleted. + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698, bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220 (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777, bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163, bgo#764996, bgo#769126. GTK2 Engine and branding packages were rebuilt to match the updated gtk2 package (boo#999375). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1118=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gtk2-debugsource-2.24.31-11.2 gtk2-devel-2.24.31-11.2 gtk2-devel-debuginfo-2.24.31-11.2 gtk2-engine-clearlooks-2.20.2-29.3 gtk2-engine-clearlooks-debuginfo-2.20.2-29.3 gtk2-engine-crux-2.20.2-29.3 gtk2-engine-crux-debuginfo-2.20.2-29.3 gtk2-engine-glide-2.20.2-29.3 gtk2-engine-glide-debuginfo-2.20.2-29.3 gtk2-engine-hcengine-2.20.2-29.3 gtk2-engine-hcengine-debuginfo-2.20.2-29.3 gtk2-engine-industrial-2.20.2-29.3 gtk2-engine-industrial-debuginfo-2.20.2-29.3 gtk2-engine-mist-2.20.2-29.3 gtk2-engine-mist-debuginfo-2.20.2-29.3 gtk2-engine-redmond95-2.20.2-29.3 gtk2-engine-redmond95-debuginfo-2.20.2-29.3 gtk2-engine-thinice-2.20.2-29.3 gtk2-engine-thinice-debuginfo-2.20.2-29.3 gtk2-engines-2.20.2-29.3 gtk2-engines-debugsource-2.20.2-29.3 gtk2-engines-devel-2.20.2-29.3 gtk2-immodule-amharic-2.24.31-11.2 gtk2-immodule-amharic-debuginfo-2.24.31-11.2 gtk2-immodule-inuktitut-2.24.31-11.2 gtk2-immodule-inuktitut-debuginfo-2.24.31-11.2 gtk2-immodule-multipress-2.24.31-11.2 gtk2-immodule-multipress-debuginfo-2.24.31-11.2 gtk2-immodule-thai-2.24.31-11.2 gtk2-immodule-thai-debuginfo-2.24.31-11.2 gtk2-immodule-vietnamese-2.24.31-11.2 gtk2-immodule-vietnamese-debuginfo-2.24.31-11.2 gtk2-immodule-xim-2.24.31-11.2 gtk2-immodule-xim-debuginfo-2.24.31-11.2 gtk2-immodules-tigrigna-2.24.31-11.2 gtk2-immodules-tigrigna-debuginfo-2.24.31-11.2 gtk2-tools-2.24.31-11.2 gtk2-tools-debuginfo-2.24.31-11.2 libgtk-2_0-0-2.24.31-11.2 libgtk-2_0-0-debuginfo-2.24.31-11.2 typelib-1_0-Gtk-2_0-2.24.31-11.2 - openSUSE Leap 42.1 (x86_64): gtk2-devel-32bit-2.24.31-11.2 gtk2-devel-debuginfo-32bit-2.24.31-11.2 gtk2-engine-clearlooks-32bit-2.20.2-29.3 gtk2-engine-clearlooks-debuginfo-32bit-2.20.2-29.3 gtk2-engine-crux-32bit-2.20.2-29.3 gtk2-engine-crux-debuginfo-32bit-2.20.2-29.3 gtk2-engine-glide-32bit-2.20.2-29.3 gtk2-engine-glide-debuginfo-32bit-2.20.2-29.3 gtk2-engine-industrial-32bit-2.20.2-29.3 gtk2-engine-industrial-debuginfo-32bit-2.20.2-29.3 gtk2-engine-mist-32bit-2.20.2-29.3 gtk2-engine-mist-debuginfo-32bit-2.20.2-29.3 gtk2-engine-redmond95-32bit-2.20.2-29.3 gtk2-engine-redmond95-debuginfo-32bit-2.20.2-29.3 gtk2-engine-thinice-32bit-2.20.2-29.3 gtk2-engine-thinice-debuginfo-32bit-2.20.2-29.3 gtk2-immodule-amharic-32bit-2.24.31-11.2 gtk2-immodule-amharic-debuginfo-32bit-2.24.31-11.2 gtk2-immodule-inuktitut-32bit-2.24.31-11.2 gtk2-immodule-inuktitut-debuginfo-32bit-2.24.31-11.2 gtk2-immodule-multipress-32bit-2.24.31-11.2 gtk2-immodule-multipress-debuginfo-32bit-2.24.31-11.2 gtk2-immodule-thai-32bit-2.24.31-11.2 gtk2-immodule-thai-debuginfo-32bit-2.24.31-11.2 gtk2-immodule-vietnamese-32bit-2.24.31-11.2 gtk2-immodule-vietnamese-debuginfo-32bit-2.24.31-11.2 gtk2-immodule-xim-32bit-2.24.31-11.2 gtk2-immodule-xim-debuginfo-32bit-2.24.31-11.2 gtk2-immodules-tigrigna-32bit-2.24.31-11.2 gtk2-immodules-tigrigna-debuginfo-32bit-2.24.31-11.2 gtk2-tools-32bit-2.24.31-11.2 gtk2-tools-debuginfo-32bit-2.24.31-11.2 libgtk-2_0-0-32bit-2.24.31-11.2 libgtk-2_0-0-debuginfo-32bit-2.24.31-11.2 - openSUSE Leap 42.1 (noarch): gtk2-branding-SLED-42.1-13.1 gtk2-branding-openSUSE-42.1-13.1 gtk2-branding-upstream-2.24.31-11.2 gtk2-data-2.24.31-11.2 gtk2-lang-2.24.31-11.2 gtk2-theme-clearlooks-2.20.2-29.3 gtk2-theme-crux-2.20.2-29.3 gtk2-theme-industrial-2.20.2-29.3 gtk2-theme-mist-2.20.2-29.3 gtk2-theme-redmond95-2.20.2-29.3 gtk2-theme-thinice-2.20.2-29.3 References: https://www.suse.com/security/cve/CVE-2013-7447.html https://bugzilla.suse.com/966682 https://bugzilla.suse.com/999375

1 0

openSUSE-RU-2016:2373-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 24 Sep '16

24 Sep '16

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2373-1 Rating: moderate References: #982210 #982251 #987173 #987857 #990074 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This recommended update for systemd fixes the following issues: - util: Fix fd_cloexec(), fd_nonblock(). - timedate: Remove daylight saving time handling and tzfile parser. (boo#990074) - systemd-ask-password: Make sure directory watch is started before cryptsetup. (boo#987173) - systemd-notify: Always pass a valid pid to sd_pid_notify. - notify: Log error when sd_pid_notify() == 0. - sd-daemon: Introduce sd_pid_notify() and sd_pid_notifyf(). (boo#987857) - units: Set KillMode=mixed for our daemons that fork worker processes. - units: Add nosuid and nodev options to tmp.mount. - logind: Really handle *KeyIgnoreInhibited options in logind.conf. - shared: AFS is also a network filesystem. - console-getty.service: Don't start when /dev/console is missing. (boo#982251) - udev/path_id: Correct segmentation fault due to missing NULL check. (boo#982210) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1109=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libgudev-1_0-0-210.1473248219.3f31c5a-25.43.1 libgudev-1_0-0-debuginfo-210.1473248219.3f31c5a-25.43.1 libgudev-1_0-devel-210.1473248219.3f31c5a-25.43.1 libudev-devel-210.1473248219.3f31c5a-25.43.1 libudev-mini-devel-210.1473248219.3f31c5a-25.43.1 libudev-mini1-210.1473248219.3f31c5a-25.43.1 libudev-mini1-debuginfo-210.1473248219.3f31c5a-25.43.1 libudev1-210.1473248219.3f31c5a-25.43.1 libudev1-debuginfo-210.1473248219.3f31c5a-25.43.1 nss-myhostname-210.1473248219.3f31c5a-25.43.1 nss-myhostname-debuginfo-210.1473248219.3f31c5a-25.43.1 systemd-210.1473248219.3f31c5a-25.43.1 systemd-debuginfo-210.1473248219.3f31c5a-25.43.1 systemd-debugsource-210.1473248219.3f31c5a-25.43.1 systemd-devel-210.1473248219.3f31c5a-25.43.1 systemd-journal-gateway-210.1473248219.3f31c5a-25.43.1 systemd-journal-gateway-debuginfo-210.1473248219.3f31c5a-25.43.1 systemd-logger-210.1473248219.3f31c5a-25.43.1 systemd-mini-210.1473248219.3f31c5a-25.43.1 systemd-mini-debuginfo-210.1473248219.3f31c5a-25.43.1 systemd-mini-debugsource-210.1473248219.3f31c5a-25.43.1 systemd-mini-devel-210.1473248219.3f31c5a-25.43.1 systemd-mini-sysvinit-210.1473248219.3f31c5a-25.43.1 systemd-sysvinit-210.1473248219.3f31c5a-25.43.1 typelib-1_0-GUdev-1_0-210.1473248219.3f31c5a-25.43.1 udev-210.1473248219.3f31c5a-25.43.1 udev-debuginfo-210.1473248219.3f31c5a-25.43.1 udev-mini-210.1473248219.3f31c5a-25.43.1 udev-mini-debuginfo-210.1473248219.3f31c5a-25.43.1 - openSUSE 13.2 (x86_64): libgudev-1_0-0-32bit-210.1473248219.3f31c5a-25.43.1 libgudev-1_0-0-debuginfo-32bit-210.1473248219.3f31c5a-25.43.1 libudev1-32bit-210.1473248219.3f31c5a-25.43.1 libudev1-debuginfo-32bit-210.1473248219.3f31c5a-25.43.1 nss-myhostname-32bit-210.1473248219.3f31c5a-25.43.1 nss-myhostname-debuginfo-32bit-210.1473248219.3f31c5a-25.43.1 systemd-32bit-210.1473248219.3f31c5a-25.43.1 systemd-debuginfo-32bit-210.1473248219.3f31c5a-25.43.1 - openSUSE 13.2 (noarch): systemd-bash-completion-210.1473248219.3f31c5a-25.43.1 References: https://bugzilla.suse.com/982210 https://bugzilla.suse.com/982251 https://bugzilla.suse.com/987173 https://bugzilla.suse.com/987857 https://bugzilla.suse.com/990074

1 0

openSUSE-RU-2016:2372-1: moderate: Recommended update for timezone
by maintenance＠opensuse.org 24 Sep '16

24 Sep '16

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2372-1 Rating: moderate References: #988184 #997830 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update to the timezone database 2016g fixes the following issues: - boo#997830: Turkey will remain on UTC+03 after 2016-10-30 - boo#988184: New leap second at the end of 2016 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1116=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): timezone-2016g-52.1 timezone-debuginfo-2016g-52.1 timezone-debugsource-2016g-52.1 - openSUSE 13.2 (noarch): timezone-java-2016g-52.1 References: https://bugzilla.suse.com/988184 https://bugzilla.suse.com/997830

1 0

openSUSE-SU-2016:2371-1: moderate: Security update for samba
by opensuse-security＠opensuse.org 24 Sep '16

24 Sep '16

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2371-1 Rating: moderate References: #969522 #975131 #981566 #986228 #986869 #991564 Cross-References: CVE-2016-2119 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has 5 fixes is now available. Description: This update for samba provides the following fixes: - CVE-2016-2119: Prevent client-side SMB2 signing downgrade. (bsc#986869) - Fix possible ctdb crash when opening sockets with htons(IPPROTO_RAW). (bsc#969522) - Honor smb.conf socket options in winbind. (bsc#975131) - Fix ntlm-auth segmentation fault with squid. (bsc#986228) - Implement new "--no-dns-updates" option in "net ads" command. (bsc#991564) - Fix population of ctdb sysconfig after source merge. (bsc#981566) This update was imported from the SUSE:SLE-12-SP1:Update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1111=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ctdb-4.2.4-21.3 ctdb-debuginfo-4.2.4-21.3 ctdb-devel-4.2.4-21.3 ctdb-tests-4.2.4-21.3 ctdb-tests-debuginfo-4.2.4-21.3 libdcerpc-atsvc-devel-4.2.4-21.3 libdcerpc-atsvc0-4.2.4-21.3 libdcerpc-atsvc0-debuginfo-4.2.4-21.3 libdcerpc-binding0-4.2.4-21.3 libdcerpc-binding0-debuginfo-4.2.4-21.3 libdcerpc-devel-4.2.4-21.3 libdcerpc-samr-devel-4.2.4-21.3 libdcerpc-samr0-4.2.4-21.3 libdcerpc-samr0-debuginfo-4.2.4-21.3 libdcerpc0-4.2.4-21.3 libdcerpc0-debuginfo-4.2.4-21.3 libgensec-devel-4.2.4-21.3 libgensec0-4.2.4-21.3 libgensec0-debuginfo-4.2.4-21.3 libndr-devel-4.2.4-21.3 libndr-krb5pac-devel-4.2.4-21.3 libndr-krb5pac0-4.2.4-21.3 libndr-krb5pac0-debuginfo-4.2.4-21.3 libndr-nbt-devel-4.2.4-21.3 libndr-nbt0-4.2.4-21.3 libndr-nbt0-debuginfo-4.2.4-21.3 libndr-standard-devel-4.2.4-21.3 libndr-standard0-4.2.4-21.3 libndr-standard0-debuginfo-4.2.4-21.3 libndr0-4.2.4-21.3 libndr0-debuginfo-4.2.4-21.3 libnetapi-devel-4.2.4-21.3 libnetapi0-4.2.4-21.3 libnetapi0-debuginfo-4.2.4-21.3 libregistry-devel-4.2.4-21.3 libregistry0-4.2.4-21.3 libregistry0-debuginfo-4.2.4-21.3 libsamba-credentials-devel-4.2.4-21.3 libsamba-credentials0-4.2.4-21.3 libsamba-credentials0-debuginfo-4.2.4-21.3 libsamba-hostconfig-devel-4.2.4-21.3 libsamba-hostconfig0-4.2.4-21.3 libsamba-hostconfig0-debuginfo-4.2.4-21.3 libsamba-passdb-devel-4.2.4-21.3 libsamba-passdb0-4.2.4-21.3 libsamba-passdb0-debuginfo-4.2.4-21.3 libsamba-policy-devel-4.2.4-21.3 libsamba-policy0-4.2.4-21.3 libsamba-policy0-debuginfo-4.2.4-21.3 libsamba-util-devel-4.2.4-21.3 libsamba-util0-4.2.4-21.3 libsamba-util0-debuginfo-4.2.4-21.3 libsamdb-devel-4.2.4-21.3 libsamdb0-4.2.4-21.3 libsamdb0-debuginfo-4.2.4-21.3 libsmbclient-devel-4.2.4-21.3 libsmbclient-raw-devel-4.2.4-21.3 libsmbclient-raw0-4.2.4-21.3 libsmbclient-raw0-debuginfo-4.2.4-21.3 libsmbclient0-4.2.4-21.3 libsmbclient0-debuginfo-4.2.4-21.3 libsmbconf-devel-4.2.4-21.3 libsmbconf0-4.2.4-21.3 libsmbconf0-debuginfo-4.2.4-21.3 libsmbldap-devel-4.2.4-21.3 libsmbldap0-4.2.4-21.3 libsmbldap0-debuginfo-4.2.4-21.3 libtevent-util-devel-4.2.4-21.3 libtevent-util0-4.2.4-21.3 libtevent-util0-debuginfo-4.2.4-21.3 libwbclient-devel-4.2.4-21.3 libwbclient0-4.2.4-21.3 libwbclient0-debuginfo-4.2.4-21.3 samba-4.2.4-21.3 samba-client-4.2.4-21.3 samba-client-debuginfo-4.2.4-21.3 samba-core-devel-4.2.4-21.3 samba-debuginfo-4.2.4-21.3 samba-debugsource-4.2.4-21.3 samba-libs-4.2.4-21.3 samba-libs-debuginfo-4.2.4-21.3 samba-pidl-4.2.4-21.3 samba-python-4.2.4-21.3 samba-python-debuginfo-4.2.4-21.3 samba-test-4.2.4-21.3 samba-test-debuginfo-4.2.4-21.3 samba-test-devel-4.2.4-21.3 samba-winbind-4.2.4-21.3 samba-winbind-debuginfo-4.2.4-21.3 - openSUSE Leap 42.1 (noarch): samba-doc-4.2.4-21.3 - openSUSE Leap 42.1 (x86_64): libdcerpc-atsvc0-32bit-4.2.4-21.3 libdcerpc-atsvc0-debuginfo-32bit-4.2.4-21.3 libdcerpc-binding0-32bit-4.2.4-21.3 libdcerpc-binding0-debuginfo-32bit-4.2.4-21.3 libdcerpc-samr0-32bit-4.2.4-21.3 libdcerpc-samr0-debuginfo-32bit-4.2.4-21.3 libdcerpc0-32bit-4.2.4-21.3 libdcerpc0-debuginfo-32bit-4.2.4-21.3 libgensec0-32bit-4.2.4-21.3 libgensec0-debuginfo-32bit-4.2.4-21.3 libndr-krb5pac0-32bit-4.2.4-21.3 libndr-krb5pac0-debuginfo-32bit-4.2.4-21.3 libndr-nbt0-32bit-4.2.4-21.3 libndr-nbt0-debuginfo-32bit-4.2.4-21.3 libndr-standard0-32bit-4.2.4-21.3 libndr-standard0-debuginfo-32bit-4.2.4-21.3 libndr0-32bit-4.2.4-21.3 libndr0-debuginfo-32bit-4.2.4-21.3 libnetapi0-32bit-4.2.4-21.3 libnetapi0-debuginfo-32bit-4.2.4-21.3 libregistry0-32bit-4.2.4-21.3 libregistry0-debuginfo-32bit-4.2.4-21.3 libsamba-credentials0-32bit-4.2.4-21.3 libsamba-credentials0-debuginfo-32bit-4.2.4-21.3 libsamba-hostconfig0-32bit-4.2.4-21.3 libsamba-hostconfig0-debuginfo-32bit-4.2.4-21.3 libsamba-passdb0-32bit-4.2.4-21.3 libsamba-passdb0-debuginfo-32bit-4.2.4-21.3 libsamba-policy0-32bit-4.2.4-21.3 libsamba-policy0-debuginfo-32bit-4.2.4-21.3 libsamba-util0-32bit-4.2.4-21.3 libsamba-util0-debuginfo-32bit-4.2.4-21.3 libsamdb0-32bit-4.2.4-21.3 libsamdb0-debuginfo-32bit-4.2.4-21.3 libsmbclient-raw0-32bit-4.2.4-21.3 libsmbclient-raw0-debuginfo-32bit-4.2.4-21.3 libsmbclient0-32bit-4.2.4-21.3 libsmbclient0-debuginfo-32bit-4.2.4-21.3 libsmbconf0-32bit-4.2.4-21.3 libsmbconf0-debuginfo-32bit-4.2.4-21.3 libsmbldap0-32bit-4.2.4-21.3 libsmbldap0-debuginfo-32bit-4.2.4-21.3 libtevent-util0-32bit-4.2.4-21.3 libtevent-util0-debuginfo-32bit-4.2.4-21.3 libwbclient0-32bit-4.2.4-21.3 libwbclient0-debuginfo-32bit-4.2.4-21.3 samba-32bit-4.2.4-21.3 samba-client-32bit-4.2.4-21.3 samba-client-debuginfo-32bit-4.2.4-21.3 samba-debuginfo-32bit-4.2.4-21.3 samba-libs-32bit-4.2.4-21.3 samba-libs-debuginfo-32bit-4.2.4-21.3 samba-winbind-32bit-4.2.4-21.3 samba-winbind-debuginfo-32bit-4.2.4-21.3 References: https://www.suse.com/security/cve/CVE-2016-2119.html https://bugzilla.suse.com/969522 https://bugzilla.suse.com/975131 https://bugzilla.suse.com/981566 https://bugzilla.suse.com/986228 https://bugzilla.suse.com/986869 https://bugzilla.suse.com/991564

1 0

openSUSE-RU-2016:2370-1: Recommended update for kbd
by maintenance＠opensuse.org 24 Sep '16

24 Sep '16

openSUSE Recommended Update: Recommended update for kbd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2370-1 Rating: low References: #984958 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kbd adds mapping for two keycodes to br-abnt2 map: - Slash (/): alt-gr + q - Question mark (?): alt-gr + w This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1110=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kbd-1.15.5-15.1 kbd-debuginfo-1.15.5-15.1 kbd-debugsource-1.15.5-15.1 References: https://bugzilla.suse.com/984958

1 0

openSUSE-RU-2016:2369-1: Recommended update for libspectre
by maintenance＠opensuse.org 24 Sep '16

24 Sep '16

openSUSE Recommended Update: Recommended update for libspectre ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2369-1 Rating: low References: #975503 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libspectre fixes handling of PostScript files with embedded EPS files. Such documents contains two "%%EOF" DSC comments and the first one stopped the parsing of the file as if the real EOF was reached. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1112=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libspectre-debugsource-0.2.7-13.1 libspectre-devel-0.2.7-13.1 libspectre1-0.2.7-13.1 libspectre1-debuginfo-0.2.7-13.1 References: https://bugzilla.suse.com/975503

1 0

openSUSE-SU-2016:2368-1: important: Security update for MozillaFirefox, mozilla-nss
by opensuse-security＠opensuse.org 24 Sep '16

24 Sep '16

openSUSE Security Update: Security update for MozillaFirefox, mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2368-1 Rating: important References: #999701 Cross-References: CVE-2016-2827 CVE-2016-5256 CVE-2016-5257 CVE-2016-5270 CVE-2016-5271 CVE-2016-5272 CVE-2016-5273 CVE-2016-5274 CVE-2016-5275 CVE-2016-5276 CVE-2016-5277 CVE-2016-5278 CVE-2016-5279 CVE-2016-5280 CVE-2016-5281 CVE-2016-5282 CVE-2016-5283 CVE-2016-5284 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: This update for MozillaFirefox and mozilla-nss fixes the following issues: MozillaFirefox was updated to version 49.0 (boo#999701) - New features * Updated Firefox Login Manager to allow HTTPS pages to use saved HTTP logins. * Added features to Reader Mode that make it easier on the eyes and the ears * Improved video performance for users on systems that support SSE3 without hardware acceleration * Added context menu controls to HTML5 audio and video that let users loops files or play files at 1.25x speed * Improvements in about:memory reports for tracking font memory usage - Security related fixes * MFSA 2016-85 CVE-2016-2827 (bmo#1289085) - Out-of-bounds read in mozilla::net::IsValidReferrerPolicy CVE-2016-5270 (bmo#1291016) - Heap-buffer-overflow in nsCaseTransformTextRunFactory::TransformString CVE-2016-5271 (bmo#1288946) - Out-of-bounds read in PropertyProvider::GetSpacingInternal CVE-2016-5272 (bmo#1297934) - Bad cast in nsImageGeometryMixin CVE-2016-5273 (bmo#1280387) - crash in mozilla::a11y::HyperTextAccessible::GetChildOffset CVE-2016-5276 (bmo#1287721) - Heap-use-after-free in mozilla::a11y::DocAccessible::ProcessInvalidationList CVE-2016-5274 (bmo#1282076) - use-after-free in nsFrameManager::CaptureFrameState CVE-2016-5277 (bmo#1291665) - Heap-use-after-free in nsRefreshDriver::Tick CVE-2016-5275 (bmo#1287316) - global-buffer-overflow in mozilla::gfx::FilterSupport::ComputeSourceNeededRegions CVE-2016-5278 (bmo#1294677) - Heap-buffer-overflow in nsBMPEncoder::AddImageFrame CVE-2016-5279 (bmo#1249522) - Full local path of files is available to web pages after drag and drop CVE-2016-5280 (bmo#1289970) - Use-after-free in mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap CVE-2016-5281 (bmo#1284690) - use-after-free in DOMSVGLength CVE-2016-5282 (bmo#932335) - Don't allow content to request favicons from non-whitelisted schemes CVE-2016-5283 (bmo#928187) - <iframe src> fragment timing attack can reveal cross-origin data CVE-2016-5284 (bmo#1303127) - Add-on update site certificate pin expiration CVE-2016-5256 - Memory safety bugs fixed in Firefox 49 CVE-2016-5257 - Memory safety bugs fixed in Firefox 49 and Firefox ESR 45.4 - requires NSS 3.25 - Mozilla Firefox 48.0.2: * Mitigate a startup crash issue caused on Windows (bmo#1291738) mozilla-nss was updated to NSS 3.25. New functionality: * Implemented DHE key agreement for TLS 1.3 * Added support for ChaCha with TLS 1.3 * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF * In previous versions, when using client authentication with TLS 1.2, NSS only supported certificate_verify messages that used the same signature hash algorithm as used by the PRF. This limitation has been removed. * Several functions have been added to the public API of the NSS Cryptoki Framework. New functions: * NSSCKFWSlot_GetSlotID * NSSCKFWSession_GetFWSlot * NSSCKFWInstance_DestroySessionHandle * NSSCKFWInstance_FindSessionHandle Notable changes: * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3 * Regression fix: NSS no longer reports a failure if an application attempts to disable the SSLv2 protocol. * The list of trusted CA certificates has been updated to version 2.8 * The following CA certificate was Removed Sonera Class1 CA * The following CA certificates were Added Hellenic Academic and Research Institutions RootCA 2015 Hellenic Academic and Research Institutions ECC RootCA 2015 Certplus Root CA G1 Certplus Root CA G2 OpenTrust Root CA G1 OpenTrust Root CA G2 OpenTrust Root CA G3 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1119=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1119=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): MozillaFirefox-49.0-33.1 MozillaFirefox-branding-upstream-49.0-33.1 MozillaFirefox-buildsymbols-49.0-33.1 MozillaFirefox-debuginfo-49.0-33.1 MozillaFirefox-debugsource-49.0-33.1 MozillaFirefox-devel-49.0-33.1 MozillaFirefox-translations-common-49.0-33.1 MozillaFirefox-translations-other-49.0-33.1 libfreebl3-3.25-29.1 libfreebl3-debuginfo-3.25-29.1 libsoftokn3-3.25-29.1 libsoftokn3-debuginfo-3.25-29.1 mozilla-nss-3.25-29.1 mozilla-nss-certs-3.25-29.1 mozilla-nss-certs-debuginfo-3.25-29.1 mozilla-nss-debuginfo-3.25-29.1 mozilla-nss-debugsource-3.25-29.1 mozilla-nss-devel-3.25-29.1 mozilla-nss-sysinit-3.25-29.1 mozilla-nss-sysinit-debuginfo-3.25-29.1 mozilla-nss-tools-3.25-29.1 mozilla-nss-tools-debuginfo-3.25-29.1 - openSUSE Leap 42.1 (x86_64): libfreebl3-32bit-3.25-29.1 libfreebl3-debuginfo-32bit-3.25-29.1 libsoftokn3-32bit-3.25-29.1 libsoftokn3-debuginfo-32bit-3.25-29.1 mozilla-nss-32bit-3.25-29.1 mozilla-nss-certs-32bit-3.25-29.1 mozilla-nss-certs-debuginfo-32bit-3.25-29.1 mozilla-nss-debuginfo-32bit-3.25-29.1 mozilla-nss-sysinit-32bit-3.25-29.1 mozilla-nss-sysinit-debuginfo-32bit-3.25-29.1 - openSUSE 13.2 (i586 x86_64): MozillaFirefox-49.0-80.1 MozillaFirefox-branding-upstream-49.0-80.1 MozillaFirefox-buildsymbols-49.0-80.1 MozillaFirefox-debuginfo-49.0-80.1 MozillaFirefox-debugsource-49.0-80.1 MozillaFirefox-devel-49.0-80.1 MozillaFirefox-translations-common-49.0-80.1 MozillaFirefox-translations-other-49.0-80.1 libfreebl3-3.25-46.1 libfreebl3-debuginfo-3.25-46.1 libsoftokn3-3.25-46.1 libsoftokn3-debuginfo-3.25-46.1 mozilla-nss-3.25-46.1 mozilla-nss-certs-3.25-46.1 mozilla-nss-certs-debuginfo-3.25-46.1 mozilla-nss-debuginfo-3.25-46.1 mozilla-nss-debugsource-3.25-46.1 mozilla-nss-devel-3.25-46.1 mozilla-nss-sysinit-3.25-46.1 mozilla-nss-sysinit-debuginfo-3.25-46.1 mozilla-nss-tools-3.25-46.1 mozilla-nss-tools-debuginfo-3.25-46.1 - openSUSE 13.2 (x86_64): libfreebl3-32bit-3.25-46.1 libfreebl3-debuginfo-32bit-3.25-46.1 libsoftokn3-32bit-3.25-46.1 libsoftokn3-debuginfo-32bit-3.25-46.1 mozilla-nss-32bit-3.25-46.1 mozilla-nss-certs-32bit-3.25-46.1 mozilla-nss-certs-debuginfo-32bit-3.25-46.1 mozilla-nss-debuginfo-32bit-3.25-46.1 mozilla-nss-sysinit-32bit-3.25-46.1 mozilla-nss-sysinit-debuginfo-32bit-3.25-46.1 References: https://www.suse.com/security/cve/CVE-2016-2827.html https://www.suse.com/security/cve/CVE-2016-5256.html https://www.suse.com/security/cve/CVE-2016-5257.html https://www.suse.com/security/cve/CVE-2016-5270.html https://www.suse.com/security/cve/CVE-2016-5271.html https://www.suse.com/security/cve/CVE-2016-5272.html https://www.suse.com/security/cve/CVE-2016-5273.html https://www.suse.com/security/cve/CVE-2016-5274.html https://www.suse.com/security/cve/CVE-2016-5275.html https://www.suse.com/security/cve/CVE-2016-5276.html https://www.suse.com/security/cve/CVE-2016-5277.html https://www.suse.com/security/cve/CVE-2016-5278.html https://www.suse.com/security/cve/CVE-2016-5279.html https://www.suse.com/security/cve/CVE-2016-5280.html https://www.suse.com/security/cve/CVE-2016-5281.html https://www.suse.com/security/cve/CVE-2016-5282.html https://www.suse.com/security/cve/CVE-2016-5283.html https://www.suse.com/security/cve/CVE-2016-5284.html https://bugzilla.suse.com/999701

1 0

openSUSE-OU-2016:2367-1: moderate: Optional update for flac
by maintenance＠opensuse.org 24 Sep '16

24 Sep '16

openSUSE Optional Update: Optional update for flac ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:2367-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update for flac removes an openSUSE specific patch which caused assert.h to be overwritten in packages using this library. Flac was also updated to 1.3.1 to bring performance improvements and replace previously patched security fixes with the upstream release. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1113=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): flac-1.3.1-4.7.1 flac-debuginfo-1.3.1-4.7.1 flac-debugsource-1.3.1-4.7.1 flac-devel-1.3.1-4.7.1 libFLAC++6-1.3.1-4.7.1 libFLAC++6-debuginfo-1.3.1-4.7.1 libFLAC8-1.3.1-4.7.1 libFLAC8-debuginfo-1.3.1-4.7.1 - openSUSE 13.2 (x86_64): flac-devel-32bit-1.3.1-4.7.1 libFLAC++6-32bit-1.3.1-4.7.1 libFLAC++6-debuginfo-32bit-1.3.1-4.7.1 libFLAC8-32bit-1.3.1-4.7.1 libFLAC8-debuginfo-32bit-1.3.1-4.7.1 - openSUSE 13.2 (noarch): flac-doc-1.3.1-4.7.1 References:

1 0

openSUSE-SU-2016:2366-1: moderate: Security update for gtk2
by opensuse-security＠opensuse.org 24 Sep '16

24 Sep '16

openSUSE Security Update: Security update for gtk2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2366-1 Rating: moderate References: #966682 #999375 Cross-References: CVE-2013-7447 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This gtk2 update to version 2.24.31 fixes the following issues: Security issues fixed: - CVE-2013-7447: Fixed integer overflow in image handling (boo#966682). Bugs fixed: - Changes from version 2.24.31: + Backport many file chooser entry fixes and cleanups. + Don't crash if invisible files are deleted. + Bugs fixed: bgo#555087, bgo#586367, bgo#635287, bgo#640698, bgo#648419, bgo#672271, bgo#679333, bgo#687196, bgo#703220 (CVE-2013-7447), bgo#720330, bgo#729927, bgo#737777, bgo#752707, bgo#756450, bgo#765120, bgo#765193, bgo#768163, bgo#764996, bgo#769126. - Changes from version 2.24.30: + Win32: Build fixes. + X11: Support Randr 1.5 monitor information. + Bugs fixed: bgo#722815, bgo#612611, bgo#699652, bgo#698652, bgo#758893. + Updated translations. - Changes from version 2.24.29: + OS X: Partial aspect ratio support. + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638, bgo#753644, bgo#753691, bgo#753992, bgo#754046. + Updated translations. GTK2 Engine and branding packages were rebuilt to match the updated gtk2 package (boo#999375). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1117=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gtk2-debugsource-2.24.31-4.17.2 gtk2-devel-2.24.31-4.17.2 gtk2-devel-debuginfo-2.24.31-4.17.2 gtk2-engine-clearlooks-2.20.2-18.14.3 gtk2-engine-clearlooks-debuginfo-2.20.2-18.14.3 gtk2-engine-crux-2.20.2-18.14.3 gtk2-engine-crux-debuginfo-2.20.2-18.14.3 gtk2-engine-glide-2.20.2-18.14.3 gtk2-engine-glide-debuginfo-2.20.2-18.14.3 gtk2-engine-hcengine-2.20.2-18.14.3 gtk2-engine-hcengine-debuginfo-2.20.2-18.14.3 gtk2-engine-industrial-2.20.2-18.14.3 gtk2-engine-industrial-debuginfo-2.20.2-18.14.3 gtk2-engine-mist-2.20.2-18.14.3 gtk2-engine-mist-debuginfo-2.20.2-18.14.3 gtk2-engine-redmond95-2.20.2-18.14.3 gtk2-engine-redmond95-debuginfo-2.20.2-18.14.3 gtk2-engine-thinice-2.20.2-18.14.3 gtk2-engine-thinice-debuginfo-2.20.2-18.14.3 gtk2-engines-2.20.2-18.14.3 gtk2-engines-debugsource-2.20.2-18.14.3 gtk2-engines-devel-2.20.2-18.14.3 gtk2-immodule-amharic-2.24.31-4.17.2 gtk2-immodule-amharic-debuginfo-2.24.31-4.17.2 gtk2-immodule-inuktitut-2.24.31-4.17.2 gtk2-immodule-inuktitut-debuginfo-2.24.31-4.17.2 gtk2-immodule-multipress-2.24.31-4.17.2 gtk2-immodule-multipress-debuginfo-2.24.31-4.17.2 gtk2-immodule-thai-2.24.31-4.17.2 gtk2-immodule-thai-debuginfo-2.24.31-4.17.2 gtk2-immodule-vietnamese-2.24.31-4.17.2 gtk2-immodule-vietnamese-debuginfo-2.24.31-4.17.2 gtk2-immodule-xim-2.24.31-4.17.2 gtk2-immodule-xim-debuginfo-2.24.31-4.17.2 gtk2-immodules-tigrigna-2.24.31-4.17.2 gtk2-immodules-tigrigna-debuginfo-2.24.31-4.17.2 gtk2-tools-2.24.31-4.17.2 gtk2-tools-debuginfo-2.24.31-4.17.2 libgtk-2_0-0-2.24.31-4.17.2 libgtk-2_0-0-debuginfo-2.24.31-4.17.2 typelib-1_0-Gtk-2_0-2.24.31-4.17.2 - openSUSE 13.2 (x86_64): gtk2-devel-32bit-2.24.31-4.17.2 gtk2-devel-debuginfo-32bit-2.24.31-4.17.2 gtk2-engine-clearlooks-32bit-2.20.2-18.14.3 gtk2-engine-clearlooks-debuginfo-32bit-2.20.2-18.14.3 gtk2-engine-crux-32bit-2.20.2-18.14.3 gtk2-engine-crux-debuginfo-32bit-2.20.2-18.14.3 gtk2-engine-glide-32bit-2.20.2-18.14.3 gtk2-engine-glide-debuginfo-32bit-2.20.2-18.14.3 gtk2-engine-industrial-32bit-2.20.2-18.14.3 gtk2-engine-industrial-debuginfo-32bit-2.20.2-18.14.3 gtk2-engine-mist-32bit-2.20.2-18.14.3 gtk2-engine-mist-debuginfo-32bit-2.20.2-18.14.3 gtk2-engine-redmond95-32bit-2.20.2-18.14.3 gtk2-engine-redmond95-debuginfo-32bit-2.20.2-18.14.3 gtk2-engine-thinice-32bit-2.20.2-18.14.3 gtk2-engine-thinice-debuginfo-32bit-2.20.2-18.14.3 gtk2-immodule-amharic-32bit-2.24.31-4.17.2 gtk2-immodule-amharic-debuginfo-32bit-2.24.31-4.17.2 gtk2-immodule-inuktitut-32bit-2.24.31-4.17.2 gtk2-immodule-inuktitut-debuginfo-32bit-2.24.31-4.17.2 gtk2-immodule-multipress-32bit-2.24.31-4.17.2 gtk2-immodule-multipress-debuginfo-32bit-2.24.31-4.17.2 gtk2-immodule-thai-32bit-2.24.31-4.17.2 gtk2-immodule-thai-debuginfo-32bit-2.24.31-4.17.2 gtk2-immodule-vietnamese-32bit-2.24.31-4.17.2 gtk2-immodule-vietnamese-debuginfo-32bit-2.24.31-4.17.2 gtk2-immodule-xim-32bit-2.24.31-4.17.2 gtk2-immodule-xim-debuginfo-32bit-2.24.31-4.17.2 gtk2-immodules-tigrigna-32bit-2.24.31-4.17.2 gtk2-immodules-tigrigna-debuginfo-32bit-2.24.31-4.17.2 gtk2-tools-32bit-2.24.31-4.17.2 gtk2-tools-debuginfo-32bit-2.24.31-4.17.2 libgtk-2_0-0-32bit-2.24.31-4.17.2 libgtk-2_0-0-debuginfo-32bit-2.24.31-4.17.2 - openSUSE 13.2 (noarch): gtk2-branding-SLED-13.2-14.3 gtk2-branding-openSUSE-13.2-14.3 gtk2-branding-upstream-2.24.31-4.17.2 gtk2-data-2.24.31-4.17.2 gtk2-lang-2.24.31-4.17.2 gtk2-theme-clearlooks-2.20.2-18.14.3 gtk2-theme-crux-2.20.2-18.14.3 gtk2-theme-industrial-2.20.2-18.14.3 gtk2-theme-mist-2.20.2-18.14.3 gtk2-theme-redmond95-2.20.2-18.14.3 gtk2-theme-thinice-2.20.2-18.14.3 References: https://www.suse.com/security/cve/CVE-2013-7447.html https://bugzilla.suse.com/966682 https://bugzilla.suse.com/999375

1 0