September 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-OU-2016:2341-1: moderate: Recommended update for python-ply
by maintenance＠opensuse.org 20 Sep '16

20 Sep '16

openSUSE Optional Update: Recommended update for python-ply ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:2341-1 Rating: moderate References: #998291 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for python-ply fixes the following issues: - bsc#998291: Issues building Chromium 54 with unbundled python-ply. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1099=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): python-ply-3.8-5.1 python-ply-doc-3.8-5.1 References: https://bugzilla.suse.com/998291

1 0

openSUSE-RU-2016:2340-1: Recommended update for zlib
by maintenance＠opensuse.org 19 Sep '16

19 Sep '16

openSUSE Recommended Update: Recommended update for zlib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2340-1 Rating: low References: #890228 #935864 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for zlib fixes the following issues: - Package minizip library, everything using it should now pull minizip-devel and unbundle it. (boo#935864) - Install examples to cover another angle from boo#890228 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1094=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libminizip1-1.2.8-5.3.1 libminizip1-debuginfo-1.2.8-5.3.1 libz1-1.2.8-5.3.1 libz1-debuginfo-1.2.8-5.3.1 minizip-devel-1.2.8-5.3.1 zlib-debugsource-1.2.8-5.3.1 zlib-devel-1.2.8-5.3.1 zlib-devel-static-1.2.8-5.3.1 - openSUSE 13.2 (x86_64): libz1-32bit-1.2.8-5.3.1 libz1-debuginfo-32bit-1.2.8-5.3.1 zlib-devel-32bit-1.2.8-5.3.1 zlib-devel-static-32bit-1.2.8-5.3.1 References: https://bugzilla.suse.com/890228 https://bugzilla.suse.com/935864

1 0

openSUSE-SU-2016:2339-1: moderate: Security update for openssh
by opensuse-security＠opensuse.org 19 Sep '16

19 Sep '16

openSUSE Security Update: Security update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2339-1 Rating: moderate References: #948902 #981654 #989363 #992533 Cross-References: CVE-2016-6210 CVE-2016-6515 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for openssh fixes the following issues: - Prevent user enumeration through the timing of password processing (bsc#989363, CVE-2016-6210) - Allow lowering the DH groups parameter limit in server as well as when GSSAPI key exchange is used (bsc#948902) - limit accepted password length (prevents possible DoS) (bsc#992533, CVE-2016-6515) Bug fixes: - avoid complaining about unset DISPLAY variable (bsc#981654) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1096=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): openssh-6.6p1-14.1 openssh-askpass-gnome-6.6p1-14.1 openssh-askpass-gnome-debuginfo-6.6p1-14.1 openssh-cavs-6.6p1-14.1 openssh-cavs-debuginfo-6.6p1-14.1 openssh-debuginfo-6.6p1-14.1 openssh-debugsource-6.6p1-14.1 openssh-fips-6.6p1-14.1 openssh-helpers-6.6p1-14.1 openssh-helpers-debuginfo-6.6p1-14.1 References: https://www.suse.com/security/cve/CVE-2016-6210.html https://www.suse.com/security/cve/CVE-2016-6515.html https://bugzilla.suse.com/948902 https://bugzilla.suse.com/981654 https://bugzilla.suse.com/989363 https://bugzilla.suse.com/992533

1 0

openSUSE-SU-2016:2338-1: moderate: Security update for file-roller
by opensuse-security＠opensuse.org 19 Sep '16

19 Sep '16

openSUSE Security Update: Security update for file-roller ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2338-1 Rating: moderate References: #997822 Cross-References: CVE-2016-7162 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for file-roller fixes the following issue: - CVE-2016-7162: Do not follow symlinks when deleting a folder recursively. (boo#997822, bgo#698554) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1097=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1097=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): file-roller-3.16.5-7.2 file-roller-debuginfo-3.16.5-7.2 file-roller-debugsource-3.16.5-7.2 nautilus-file-roller-3.16.5-7.2 nautilus-file-roller-debuginfo-3.16.5-7.2 - openSUSE Leap 42.1 (noarch): file-roller-lang-3.16.5-7.2 - openSUSE 13.2 (i586 x86_64): file-roller-3.14.2-7.2 file-roller-debuginfo-3.14.2-7.2 file-roller-debugsource-3.14.2-7.2 nautilus-file-roller-3.14.2-7.2 nautilus-file-roller-debuginfo-3.14.2-7.2 - openSUSE 13.2 (noarch): file-roller-lang-3.14.2-7.2 References: https://www.suse.com/security/cve/CVE-2016-7162.html https://bugzilla.suse.com/997822

1 0

openSUSE-SU-2016:2337-1: important: Security update for php5
by opensuse-security＠opensuse.org 19 Sep '16

19 Sep '16

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2337-1 Rating: important References: #997206 #997207 #997208 #997210 #997211 #997220 #997225 #997230 #997248 #997257 Cross-References: CVE-2016-7124 CVE-2016-7125 CVE-2016-7126 CVE-2016-7127 CVE-2016-7128 CVE-2016-7129 CVE-2016-7130 CVE-2016-7131 CVE-2016-7132 CVE-2016-7134 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for php5 fixes the following security issues: * CVE-2016-7124: Create an Unexpected Object and Don't Invoke __wakeup() in Deserialization * CVE-2016-7125: PHP Session Data Injection Vulnerability * CVE-2016-7126: select_colors write out-of-bounds * CVE-2016-7127: imagegammacorrect allowed arbitrary write access * CVE-2016-7128: Memory Leakage In exif_process_IFD_in_TIFF * CVE-2016-7129: wddx_deserialize allowed illegal memory access * CVE-2016-7130: wddx_deserialize null dereference * CVE-2016-7131: wddx_deserialize null dereference with invalid xml * CVE-2016-7132: wddx_deserialize null dereference in php_wddx_pop_element * CVE-2016-7134: Heap overflow in the function curl_escape Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1095=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_php5-5.6.1-75.2 apache2-mod_php5-debuginfo-5.6.1-75.2 php5-5.6.1-75.2 php5-bcmath-5.6.1-75.2 php5-bcmath-debuginfo-5.6.1-75.2 php5-bz2-5.6.1-75.2 php5-bz2-debuginfo-5.6.1-75.2 php5-calendar-5.6.1-75.2 php5-calendar-debuginfo-5.6.1-75.2 php5-ctype-5.6.1-75.2 php5-ctype-debuginfo-5.6.1-75.2 php5-curl-5.6.1-75.2 php5-curl-debuginfo-5.6.1-75.2 php5-dba-5.6.1-75.2 php5-dba-debuginfo-5.6.1-75.2 php5-debuginfo-5.6.1-75.2 php5-debugsource-5.6.1-75.2 php5-devel-5.6.1-75.2 php5-dom-5.6.1-75.2 php5-dom-debuginfo-5.6.1-75.2 php5-enchant-5.6.1-75.2 php5-enchant-debuginfo-5.6.1-75.2 php5-exif-5.6.1-75.2 php5-exif-debuginfo-5.6.1-75.2 php5-fastcgi-5.6.1-75.2 php5-fastcgi-debuginfo-5.6.1-75.2 php5-fileinfo-5.6.1-75.2 php5-fileinfo-debuginfo-5.6.1-75.2 php5-firebird-5.6.1-75.2 php5-firebird-debuginfo-5.6.1-75.2 php5-fpm-5.6.1-75.2 php5-fpm-debuginfo-5.6.1-75.2 php5-ftp-5.6.1-75.2 php5-ftp-debuginfo-5.6.1-75.2 php5-gd-5.6.1-75.2 php5-gd-debuginfo-5.6.1-75.2 php5-gettext-5.6.1-75.2 php5-gettext-debuginfo-5.6.1-75.2 php5-gmp-5.6.1-75.2 php5-gmp-debuginfo-5.6.1-75.2 php5-iconv-5.6.1-75.2 php5-iconv-debuginfo-5.6.1-75.2 php5-imap-5.6.1-75.2 php5-imap-debuginfo-5.6.1-75.2 php5-intl-5.6.1-75.2 php5-intl-debuginfo-5.6.1-75.2 php5-json-5.6.1-75.2 php5-json-debuginfo-5.6.1-75.2 php5-ldap-5.6.1-75.2 php5-ldap-debuginfo-5.6.1-75.2 php5-mbstring-5.6.1-75.2 php5-mbstring-debuginfo-5.6.1-75.2 php5-mcrypt-5.6.1-75.2 php5-mcrypt-debuginfo-5.6.1-75.2 php5-mssql-5.6.1-75.2 php5-mssql-debuginfo-5.6.1-75.2 php5-mysql-5.6.1-75.2 php5-mysql-debuginfo-5.6.1-75.2 php5-odbc-5.6.1-75.2 php5-odbc-debuginfo-5.6.1-75.2 php5-opcache-5.6.1-75.2 php5-opcache-debuginfo-5.6.1-75.2 php5-openssl-5.6.1-75.2 php5-openssl-debuginfo-5.6.1-75.2 php5-pcntl-5.6.1-75.2 php5-pcntl-debuginfo-5.6.1-75.2 php5-pdo-5.6.1-75.2 php5-pdo-debuginfo-5.6.1-75.2 php5-pgsql-5.6.1-75.2 php5-pgsql-debuginfo-5.6.1-75.2 php5-phar-5.6.1-75.2 php5-phar-debuginfo-5.6.1-75.2 php5-posix-5.6.1-75.2 php5-posix-debuginfo-5.6.1-75.2 php5-pspell-5.6.1-75.2 php5-pspell-debuginfo-5.6.1-75.2 php5-readline-5.6.1-75.2 php5-readline-debuginfo-5.6.1-75.2 php5-shmop-5.6.1-75.2 php5-shmop-debuginfo-5.6.1-75.2 php5-snmp-5.6.1-75.2 php5-snmp-debuginfo-5.6.1-75.2 php5-soap-5.6.1-75.2 php5-soap-debuginfo-5.6.1-75.2 php5-sockets-5.6.1-75.2 php5-sockets-debuginfo-5.6.1-75.2 php5-sqlite-5.6.1-75.2 php5-sqlite-debuginfo-5.6.1-75.2 php5-suhosin-5.6.1-75.2 php5-suhosin-debuginfo-5.6.1-75.2 php5-sysvmsg-5.6.1-75.2 php5-sysvmsg-debuginfo-5.6.1-75.2 php5-sysvsem-5.6.1-75.2 php5-sysvsem-debuginfo-5.6.1-75.2 php5-sysvshm-5.6.1-75.2 php5-sysvshm-debuginfo-5.6.1-75.2 php5-tidy-5.6.1-75.2 php5-tidy-debuginfo-5.6.1-75.2 php5-tokenizer-5.6.1-75.2 php5-tokenizer-debuginfo-5.6.1-75.2 php5-wddx-5.6.1-75.2 php5-wddx-debuginfo-5.6.1-75.2 php5-xmlreader-5.6.1-75.2 php5-xmlreader-debuginfo-5.6.1-75.2 php5-xmlrpc-5.6.1-75.2 php5-xmlrpc-debuginfo-5.6.1-75.2 php5-xmlwriter-5.6.1-75.2 php5-xmlwriter-debuginfo-5.6.1-75.2 php5-xsl-5.6.1-75.2 php5-xsl-debuginfo-5.6.1-75.2 php5-zip-5.6.1-75.2 php5-zip-debuginfo-5.6.1-75.2 php5-zlib-5.6.1-75.2 php5-zlib-debuginfo-5.6.1-75.2 - openSUSE 13.2 (noarch): php5-pear-5.6.1-75.2 References: https://www.suse.com/security/cve/CVE-2016-7124.html https://www.suse.com/security/cve/CVE-2016-7125.html https://www.suse.com/security/cve/CVE-2016-7126.html https://www.suse.com/security/cve/CVE-2016-7127.html https://www.suse.com/security/cve/CVE-2016-7128.html https://www.suse.com/security/cve/CVE-2016-7129.html https://www.suse.com/security/cve/CVE-2016-7130.html https://www.suse.com/security/cve/CVE-2016-7131.html https://www.suse.com/security/cve/CVE-2016-7132.html https://www.suse.com/security/cve/CVE-2016-7134.html https://bugzilla.suse.com/997206 https://bugzilla.suse.com/997207 https://bugzilla.suse.com/997208 https://bugzilla.suse.com/997210 https://bugzilla.suse.com/997211 https://bugzilla.suse.com/997220 https://bugzilla.suse.com/997225 https://bugzilla.suse.com/997230 https://bugzilla.suse.com/997248 https://bugzilla.suse.com/997257

1 0

openSUSE-RU-2016:2336-1: Recommended update for calibre
by maintenance＠opensuse.org 18 Sep '16

18 Sep '16

openSUSE Recommended Update: Recommended update for calibre ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2336-1 Rating: low References: #993644 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides version 2.67.0 of calibre and fixes the following issues: - Devices: + Driver for Kobo Aura One and Aura Edition 2 + Driver for the PocketBook Tourch HD (lp#1618962) + Kobo driver: Add an option to ignore some collections on the device. The specified collections will not be touched by the driver. + Kobo driver: Add support for firmware version 3.20 + Kobo driver: Add support for firmware version 4 available on the new Kobo Aura One - Improvements for high DPI screens - Remove 2nd part of the update disabling as it breaks with new code now user can click and get the notification, but still it won't be at least done automatically. (boo#993644) For all details, please refer to http://calibre-ebook.com/whats-new Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1093=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): calibre-2.67.0-24.1 calibre-debuginfo-2.67.0-24.1 calibre-debugsource-2.67.0-24.1 References: https://bugzilla.suse.com/993644

1 0

openSUSE-RU-2016:2335-1: moderate: Recommended update for fwts
by maintenance＠opensuse.org 17 Sep '16

17 Sep '16

openSUSE Recommended Update: Recommended update for fwts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2335-1 Rating: moderate References: #994319 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 16.08.00 for fwts: For detailed information please refer to the changelog. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-1092=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le x86_64): fwts-16.08.00-8.1 fwts-debuginfo-16.08.00-8.1 fwts-debugsource-16.08.00-8.1 References: https://bugzilla.suse.com/994319

1 0

openSUSE-RU-2016:2334-1: moderate: Recommended update for fwts
by maintenance＠opensuse.org 17 Sep '16

17 Sep '16

openSUSE Recommended Update: Recommended update for fwts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2334-1 Rating: moderate References: #994319 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 16.08.00 for fwts: For detailed information please refer to the changelog. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1092=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): fwts-16.08.00-3.1 fwts-debuginfo-16.08.00-3.1 fwts-debugsource-16.08.00-3.1 References: https://bugzilla.suse.com/994319

1 0

openSUSE-RU-2016:2333-1: important: Recommended update for virtualbox
by maintenance＠opensuse.org 17 Sep '16

17 Sep '16

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2333-1 Rating: important References: #983927 #998369 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for virtualbox fixes the following issues: - boo#983927, boo#998369: The VirtualBox kernel modules would not load with an updated kernel. Ensure vboxvideo module can resolve all symbols, so that the weak-update mechanism works for future kernel updates. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1091=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): virtualbox-guest-desktop-icons-5.0.26-31.1 virtualbox-host-source-5.0.26-31.1 - openSUSE Leap 42.1 (x86_64): python-virtualbox-5.0.26-31.1 python-virtualbox-debuginfo-5.0.26-31.1 virtualbox-5.0.26-31.1 virtualbox-debuginfo-5.0.26-31.1 virtualbox-debugsource-5.0.26-31.1 virtualbox-devel-5.0.26-31.1 virtualbox-guest-kmp-default-5.0.26_k4.1.31_30-31.1 virtualbox-guest-kmp-default-debuginfo-5.0.26_k4.1.31_30-31.1 virtualbox-guest-tools-5.0.26-31.1 virtualbox-guest-tools-debuginfo-5.0.26-31.1 virtualbox-guest-x11-5.0.26-31.1 virtualbox-guest-x11-debuginfo-5.0.26-31.1 virtualbox-host-kmp-default-5.0.26_k4.1.31_30-31.1 virtualbox-host-kmp-default-debuginfo-5.0.26_k4.1.31_30-31.1 virtualbox-qt-5.0.26-31.1 virtualbox-qt-debuginfo-5.0.26-31.1 virtualbox-websrv-5.0.26-31.1 virtualbox-websrv-debuginfo-5.0.26-31.1 References: https://bugzilla.suse.com/983927 https://bugzilla.suse.com/998369

1 0

openSUSE-RU-2016:2322-1: moderate: Recommended update for spice-vdagent
by maintenance＠opensuse.org 16 Sep '16

16 Sep '16

openSUSE Recommended Update: Recommended update for spice-vdagent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2322-1 Rating: moderate References: #997236 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for spice-vdagent fixes the following issue: - Fix crash when changing guest display's resolution (boo#997236) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1090=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): spice-vdagent-0.16.0-3.1 spice-vdagent-debuginfo-0.16.0-3.1 spice-vdagent-debugsource-0.16.0-3.1 References: https://bugzilla.suse.com/997236

1 0