January 2016 - openSUSE Security Announce

[security-announce] openSUSE-SU-2016:0213-1: important: Security update for roundcubemail
by opensuse-security＠opensuse.org 24 Jan '16

24 Jan '16

openSUSE Security Update: Security update for roundcubemail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0213-1 Rating: important References: #962067 Cross-References: CVE-2015-8770 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update to roundcubemail 1.1.4 fixes the following issues: - CVE-2015-8770: Path traversal vulnerability allowed code execution to remote authenticated users if they were also upload files to the same server through some other method (boo#962067) This update also contains all upstream fixes in 1.1.4. The package was updated to use generic PHP requirements for use with other prefixes than "php5-" Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-80=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): roundcubemail-1.1.4-6.1 References: https://www.suse.com/security/cve/CVE-2015-8770.html https://bugzilla.suse.com/962067 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2016:0210-1: important: Security update for roundcubemail
by opensuse-security＠opensuse.org 24 Jan '16

24 Jan '16

openSUSE Security Update: Security update for roundcubemail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0210-1 Rating: important References: #962067 Cross-References: CVE-2015-8770 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update to roundcubemail 1.0.8 fixes the following issues: - CVE-2015-8770: Path traversal vulnerability allowed code execution to remote authenticated users if they were also upload files to the same server through some other method (boo#962067) This update also contains all upstream fixes in 1.0.8. The package was updated to use generic PHP requirements for use with other prefixes than "php5-" Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-81=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): roundcubemail-1.0.8-17.1 References: https://www.suse.com/security/cve/CVE-2015-8770.html https://bugzilla.suse.com/962067 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2016:0207-1: important: Security update for giflib
by opensuse-security＠opensuse.org 22 Jan '16

22 Jan '16

openSUSE Security Update: Security update for giflib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0207-1 Rating: important References: #949160 #960319 Cross-References: CVE-2015-7555 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: The following patch fixes - a heap overflow in giffix - a memory leak in libgif6 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-76=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): giflib-debugsource-5.0.5-2.3.1 giflib-devel-5.0.5-2.3.1 giflib-progs-5.0.5-2.3.1 giflib-progs-debuginfo-5.0.5-2.3.1 libgif6-5.0.5-2.3.1 libgif6-debuginfo-5.0.5-2.3.1 - openSUSE 13.1 (x86_64): giflib-devel-32bit-5.0.5-2.3.1 libgif6-32bit-5.0.5-2.3.1 libgif6-debuginfo-32bit-5.0.5-2.3.1 References: https://www.suse.com/security/cve/CVE-2015-7555.html https://bugzilla.suse.com/949160 https://bugzilla.suse.com/960319 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2016:0205-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 22 Jan '16

22 Jan '16

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:0205-1 Rating: important References: #962075 Cross-References: CVE-2016-0728 Affected Products: SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Desktop 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The SUSE Linux Enterprise 12 kernel was updated to receive a security fix. Following security bug was fixed: - A reference leak in keyring handling with join_session_keyring() could lead to local attackers gain root privileges. (bsc#962075, CVE-2016-0728). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12: zypper in -t patch SUSE-SLE-WE-12-2016-137=1 - SUSE Linux Enterprise Software Development Kit 12: zypper in -t patch SUSE-SLE-SDK-12-2016-137=1 - SUSE Linux Enterprise Server 12: zypper in -t patch SUSE-SLE-SERVER-12-2016-137=1 - SUSE Linux Enterprise Module for Public Cloud 12: zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2016-137=1 - SUSE Linux Enterprise Live Patching 12: zypper in -t patch SUSE-SLE-Live-Patching-12-2016-137=1 - SUSE Linux Enterprise Desktop 12: zypper in -t patch SUSE-SLE-DESKTOP-12-2016-137=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Workstation Extension 12 (x86_64): kernel-default-debuginfo-3.12.51-52.39.1 kernel-default-debugsource-3.12.51-52.39.1 kernel-default-extra-3.12.51-52.39.1 kernel-default-extra-debuginfo-3.12.51-52.39.1 - SUSE Linux Enterprise Software Development Kit 12 (ppc64le s390x x86_64): kernel-obs-build-3.12.51-52.39.1 kernel-obs-build-debugsource-3.12.51-52.39.1 - SUSE Linux Enterprise Software Development Kit 12 (noarch): kernel-docs-3.12.51-52.39.3 - SUSE Linux Enterprise Server 12 (ppc64le s390x x86_64): kernel-default-3.12.51-52.39.1 kernel-default-base-3.12.51-52.39.1 kernel-default-base-debuginfo-3.12.51-52.39.1 kernel-default-debuginfo-3.12.51-52.39.1 kernel-default-debugsource-3.12.51-52.39.1 kernel-default-devel-3.12.51-52.39.1 kernel-syms-3.12.51-52.39.1 - SUSE Linux Enterprise Server 12 (x86_64): kernel-xen-3.12.51-52.39.1 kernel-xen-base-3.12.51-52.39.1 kernel-xen-base-debuginfo-3.12.51-52.39.1 kernel-xen-debuginfo-3.12.51-52.39.1 kernel-xen-debugsource-3.12.51-52.39.1 kernel-xen-devel-3.12.51-52.39.1 - SUSE Linux Enterprise Server 12 (noarch): kernel-devel-3.12.51-52.39.1 kernel-macros-3.12.51-52.39.1 kernel-source-3.12.51-52.39.1 - SUSE Linux Enterprise Server 12 (s390x): kernel-default-man-3.12.51-52.39.1 - SUSE Linux Enterprise Module for Public Cloud 12 (x86_64): kernel-ec2-3.12.51-52.39.1 kernel-ec2-debuginfo-3.12.51-52.39.1 kernel-ec2-debugsource-3.12.51-52.39.1 kernel-ec2-devel-3.12.51-52.39.1 kernel-ec2-extra-3.12.51-52.39.1 kernel-ec2-extra-debuginfo-3.12.51-52.39.1 - SUSE Linux Enterprise Live Patching 12 (x86_64): kgraft-patch-3_12_51-52_39-default-1-2.3 kgraft-patch-3_12_51-52_39-xen-1-2.3 - SUSE Linux Enterprise Desktop 12 (x86_64): kernel-default-3.12.51-52.39.1 kernel-default-debuginfo-3.12.51-52.39.1 kernel-default-debugsource-3.12.51-52.39.1 kernel-default-devel-3.12.51-52.39.1 kernel-default-extra-3.12.51-52.39.1 kernel-default-extra-debuginfo-3.12.51-52.39.1 kernel-syms-3.12.51-52.39.1 kernel-xen-3.12.51-52.39.1 kernel-xen-debuginfo-3.12.51-52.39.1 kernel-xen-debugsource-3.12.51-52.39.1 kernel-xen-devel-3.12.51-52.39.1 - SUSE Linux Enterprise Desktop 12 (noarch): kernel-devel-3.12.51-52.39.1 kernel-macros-3.12.51-52.39.1 kernel-source-3.12.51-52.39.1 References: https://www.suse.com/security/cve/CVE-2016-0728.html https://bugzilla.suse.com/962075 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2016:0204-1: important: Security update for bind
by opensuse-security＠opensuse.org 22 Jan '16

22 Jan '16

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0204-1 Rating: important References: #962189 Cross-References: CVE-2015-8704 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following issues: - CVE-2015-8704: Specific APL data allowed remote attacker to trigger a crash in certain configurations (bsc#962189) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-73=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): bind-9.9.4P2-2.23.1 bind-chrootenv-9.9.4P2-2.23.1 bind-debuginfo-9.9.4P2-2.23.1 bind-debugsource-9.9.4P2-2.23.1 bind-devel-9.9.4P2-2.23.1 bind-libs-9.9.4P2-2.23.1 bind-libs-debuginfo-9.9.4P2-2.23.1 bind-lwresd-9.9.4P2-2.23.1 bind-lwresd-debuginfo-9.9.4P2-2.23.1 bind-utils-9.9.4P2-2.23.1 bind-utils-debuginfo-9.9.4P2-2.23.1 - openSUSE 13.1 (x86_64): bind-libs-32bit-9.9.4P2-2.23.1 bind-libs-debuginfo-32bit-9.9.4P2-2.23.1 - openSUSE 13.1 (noarch): bind-doc-9.9.4P2-2.23.1 References: https://www.suse.com/security/cve/CVE-2015-8704.html https://bugzilla.suse.com/962189 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2016:0200-1: important: Security update for bind
by opensuse-security＠opensuse.org 22 Jan '16

22 Jan '16

SUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:0200-1 Rating: important References: #962189 Cross-References: CVE-2015-8704 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Software Development Kit 11-SP3 SUSE Linux Enterprise Server for VMWare 11-SP3 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-SP3 SUSE Linux Enterprise Server 11-SP2-LTSS SUSE Linux Enterprise Desktop 11-SP4 SUSE Linux Enterprise Desktop 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following issues: - CVE-2015-8704: Specific APL data allowed remote attacker to trigger a crash in certain configurations (bsc#962189) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-bind-12354=1 - SUSE Linux Enterprise Software Development Kit 11-SP3: zypper in -t patch sdksp3-bind-12354=1 - SUSE Linux Enterprise Server for VMWare 11-SP3: zypper in -t patch slessp3-bind-12354=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-bind-12354=1 - SUSE Linux Enterprise Server 11-SP3: zypper in -t patch slessp3-bind-12354=1 - SUSE Linux Enterprise Server 11-SP2-LTSS: zypper in -t patch slessp2-bind-12354=1 - SUSE Linux Enterprise Desktop 11-SP4: zypper in -t patch sledsp4-bind-12354=1 - SUSE Linux Enterprise Desktop 11-SP3: zypper in -t patch sledsp3-bind-12354=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-bind-12354=1 - SUSE Linux Enterprise Debuginfo 11-SP3: zypper in -t patch dbgsp3-bind-12354=1 - SUSE Linux Enterprise Debuginfo 11-SP2: zypper in -t patch dbgsp2-bind-12354=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64): bind-devel-9.9.6P1-0.22.1 - SUSE Linux Enterprise Software Development Kit 11-SP4 (ppc64): bind-devel-32bit-9.9.6P1-0.22.1 - SUSE Linux Enterprise Software Development Kit 11-SP3 (i586 ia64 ppc64 s390x x86_64): bind-devel-9.9.6P1-0.22.1 - SUSE Linux Enterprise Software Development Kit 11-SP3 (ppc64): bind-devel-32bit-9.9.6P1-0.22.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (i586 x86_64): bind-9.9.6P1-0.22.1 bind-chrootenv-9.9.6P1-0.22.1 bind-doc-9.9.6P1-0.22.1 bind-libs-9.9.6P1-0.22.1 bind-utils-9.9.6P1-0.22.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (x86_64): bind-libs-32bit-9.9.6P1-0.22.1 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): bind-9.9.6P1-0.22.1 bind-chrootenv-9.9.6P1-0.22.1 bind-doc-9.9.6P1-0.22.1 bind-libs-9.9.6P1-0.22.1 bind-utils-9.9.6P1-0.22.1 - SUSE Linux Enterprise Server 11-SP4 (ppc64 s390x x86_64): bind-libs-32bit-9.9.6P1-0.22.1 - SUSE Linux Enterprise Server 11-SP4 (ia64): bind-libs-x86-9.9.6P1-0.22.1 - SUSE Linux Enterprise Server 11-SP3 (i586 ia64 ppc64 s390x x86_64): bind-9.9.6P1-0.22.1 bind-chrootenv-9.9.6P1-0.22.1 bind-doc-9.9.6P1-0.22.1 bind-libs-9.9.6P1-0.22.1 bind-utils-9.9.6P1-0.22.1 - SUSE Linux Enterprise Server 11-SP3 (ppc64 s390x x86_64): bind-libs-32bit-9.9.6P1-0.22.1 - SUSE Linux Enterprise Server 11-SP3 (ia64): bind-libs-x86-9.9.6P1-0.22.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586 s390x x86_64): bind-9.9.6P1-0.22.1 bind-chrootenv-9.9.6P1-0.22.1 bind-devel-9.9.6P1-0.22.1 bind-doc-9.9.6P1-0.22.1 bind-libs-9.9.6P1-0.22.1 bind-utils-9.9.6P1-0.22.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (s390x x86_64): bind-libs-32bit-9.9.6P1-0.22.1 - SUSE Linux Enterprise Desktop 11-SP4 (i586 x86_64): bind-libs-9.9.6P1-0.22.1 bind-utils-9.9.6P1-0.22.1 - SUSE Linux Enterprise Desktop 11-SP4 (x86_64): bind-libs-32bit-9.9.6P1-0.22.1 - SUSE Linux Enterprise Desktop 11-SP3 (i586 x86_64): bind-libs-9.9.6P1-0.22.1 bind-utils-9.9.6P1-0.22.1 - SUSE Linux Enterprise Desktop 11-SP3 (x86_64): bind-libs-32bit-9.9.6P1-0.22.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): bind-debuginfo-9.9.6P1-0.22.1 bind-debugsource-9.9.6P1-0.22.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 ia64 ppc64 s390x x86_64): bind-debuginfo-9.9.6P1-0.22.1 bind-debugsource-9.9.6P1-0.22.1 - SUSE Linux Enterprise Debuginfo 11-SP2 (i586 s390x x86_64): bind-debuginfo-9.9.6P1-0.22.1 bind-debugsource-9.9.6P1-0.22.1 References: https://www.suse.com/security/cve/CVE-2015-8704.html https://bugzilla.suse.com/962189 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2016:0199-1: important: Security update for bind
by opensuse-security＠opensuse.org 22 Jan '16

22 Jan '16

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0199-1 Rating: important References: #962189 Cross-References: CVE-2015-8704 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following issues: - CVE-2015-8704: Specific APL data allowed remote attacker to trigger a crash in certain configurations (bsc#962189) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-71=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): bind-9.9.6P1-2.16.1 bind-chrootenv-9.9.6P1-2.16.1 bind-debuginfo-9.9.6P1-2.16.1 bind-debugsource-9.9.6P1-2.16.1 bind-devel-9.9.6P1-2.16.1 bind-libs-9.9.6P1-2.16.1 bind-libs-debuginfo-9.9.6P1-2.16.1 bind-lwresd-9.9.6P1-2.16.1 bind-lwresd-debuginfo-9.9.6P1-2.16.1 bind-utils-9.9.6P1-2.16.1 bind-utils-debuginfo-9.9.6P1-2.16.1 - openSUSE 13.2 (x86_64): bind-libs-32bit-9.9.6P1-2.16.1 bind-libs-debuginfo-32bit-9.9.6P1-2.16.1 - openSUSE 13.2 (noarch): bind-doc-9.9.6P1-2.16.1 References: https://www.suse.com/security/cve/CVE-2015-8704.html https://bugzilla.suse.com/962189 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2016:0197-1: important: Security update for bind
by opensuse-security＠opensuse.org 22 Jan '16

22 Jan '16

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0197-1 Rating: important References: #962189 Cross-References: CVE-2015-8704 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following issues: - CVE-2015-8704: Specific APL data allowed remote attacker to trigger a crash in certain configurations (bsc#962189) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-70=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): bind-9.9.6P1-30.1 bind-chrootenv-9.9.6P1-30.1 bind-debuginfo-9.9.6P1-30.1 bind-debugsource-9.9.6P1-30.1 bind-devel-9.9.6P1-30.1 bind-libs-9.9.6P1-30.1 bind-libs-debuginfo-9.9.6P1-30.1 bind-lwresd-9.9.6P1-30.1 bind-lwresd-debuginfo-9.9.6P1-30.1 bind-utils-9.9.6P1-30.1 bind-utils-debuginfo-9.9.6P1-30.1 - openSUSE Leap 42.1 (x86_64): bind-libs-32bit-9.9.6P1-30.1 bind-libs-debuginfo-32bit-9.9.6P1-30.1 - openSUSE Leap 42.1 (noarch): bind-doc-9.9.6P1-30.1 References: https://www.suse.com/security/cve/CVE-2015-8704.html https://bugzilla.suse.com/962189 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2016:0186-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 20 Jan '16

20 Jan '16

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:0186-1 Rating: important References: #962075 Cross-References: CVE-2016-0728 Affected Products: SUSE Linux Enterprise Workstation Extension 12-SP1 SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Desktop 12-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The SUSE Linux Enterprise 12 SP1 kernel was updated to receive a security fix. Following security bug was fixed: - A reference leak in keyring handling with join_session_keyring() could lead to local attackers gain root privileges. (bsc#962075, CVE-2016-0728). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12-SP1: zypper in -t patch SUSE-SLE-WE-12-SP1-2016-124=1 - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2016-124=1 - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2016-124=1 - SUSE Linux Enterprise Module for Public Cloud 12: zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2016-124=1 - SUSE Linux Enterprise Live Patching 12: zypper in -t patch SUSE-SLE-Live-Patching-12-2016-124=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2016-124=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Workstation Extension 12-SP1 (x86_64): kernel-default-debuginfo-3.12.51-60.25.1 kernel-default-debugsource-3.12.51-60.25.1 kernel-default-extra-3.12.51-60.25.1 kernel-default-extra-debuginfo-3.12.51-60.25.1 - SUSE Linux Enterprise Software Development Kit 12-SP1 (ppc64le s390x x86_64): kernel-obs-build-3.12.51-60.25.1 kernel-obs-build-debugsource-3.12.51-60.25.1 - SUSE Linux Enterprise Software Development Kit 12-SP1 (noarch): kernel-docs-3.12.51-60.25.2 - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): kernel-default-3.12.51-60.25.1 kernel-default-base-3.12.51-60.25.1 kernel-default-base-debuginfo-3.12.51-60.25.1 kernel-default-debuginfo-3.12.51-60.25.1 kernel-default-debugsource-3.12.51-60.25.1 kernel-default-devel-3.12.51-60.25.1 kernel-syms-3.12.51-60.25.1 - SUSE Linux Enterprise Server 12-SP1 (x86_64): kernel-xen-3.12.51-60.25.1 kernel-xen-base-3.12.51-60.25.1 kernel-xen-base-debuginfo-3.12.51-60.25.1 kernel-xen-debuginfo-3.12.51-60.25.1 kernel-xen-debugsource-3.12.51-60.25.1 kernel-xen-devel-3.12.51-60.25.1 - SUSE Linux Enterprise Server 12-SP1 (noarch): kernel-devel-3.12.51-60.25.1 kernel-macros-3.12.51-60.25.1 kernel-source-3.12.51-60.25.1 - SUSE Linux Enterprise Server 12-SP1 (s390x): kernel-default-man-3.12.51-60.25.1 - SUSE Linux Enterprise Module for Public Cloud 12 (x86_64): kernel-ec2-3.12.51-60.25.1 kernel-ec2-debuginfo-3.12.51-60.25.1 kernel-ec2-debugsource-3.12.51-60.25.1 kernel-ec2-devel-3.12.51-60.25.1 kernel-ec2-extra-3.12.51-60.25.1 kernel-ec2-extra-debuginfo-3.12.51-60.25.1 - SUSE Linux Enterprise Live Patching 12 (x86_64): kgraft-patch-3_12_51-60_25-default-1-2.2 kgraft-patch-3_12_51-60_25-xen-1-2.2 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): kernel-default-3.12.51-60.25.1 kernel-default-debuginfo-3.12.51-60.25.1 kernel-default-debugsource-3.12.51-60.25.1 kernel-default-devel-3.12.51-60.25.1 kernel-default-extra-3.12.51-60.25.1 kernel-default-extra-debuginfo-3.12.51-60.25.1 kernel-syms-3.12.51-60.25.1 kernel-xen-3.12.51-60.25.1 kernel-xen-debuginfo-3.12.51-60.25.1 kernel-xen-debugsource-3.12.51-60.25.1 kernel-xen-devel-3.12.51-60.25.1 - SUSE Linux Enterprise Desktop 12-SP1 (noarch): kernel-devel-3.12.51-60.25.1 kernel-macros-3.12.51-60.25.1 kernel-source-3.12.51-60.25.1 References: https://www.suse.com/security/cve/CVE-2016-0728.html https://bugzilla.suse.com/962075 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2016:0180-1: important: Security update for bind
by opensuse-security＠opensuse.org 20 Jan '16

20 Jan '16

SUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:0180-1 Rating: important References: #962189 Cross-References: CVE-2015-8704 Affected Products: SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Desktop 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following issues: - CVE-2015-8704: Specific APL data allowed remote attacker to trigger a crash in certain configurations (bsc#962189) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12: zypper in -t patch SUSE-SLE-SDK-12-2016-118=1 - SUSE Linux Enterprise Server 12: zypper in -t patch SUSE-SLE-SERVER-12-2016-118=1 - SUSE Linux Enterprise Desktop 12: zypper in -t patch SUSE-SLE-DESKTOP-12-2016-118=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12 (ppc64le s390x x86_64): bind-debuginfo-9.9.6P1-28.9.1 bind-debugsource-9.9.6P1-28.9.1 bind-devel-9.9.6P1-28.9.1 - SUSE Linux Enterprise Server 12 (ppc64le s390x x86_64): bind-9.9.6P1-28.9.1 bind-chrootenv-9.9.6P1-28.9.1 bind-debuginfo-9.9.6P1-28.9.1 bind-debugsource-9.9.6P1-28.9.1 bind-libs-9.9.6P1-28.9.1 bind-libs-debuginfo-9.9.6P1-28.9.1 bind-utils-9.9.6P1-28.9.1 bind-utils-debuginfo-9.9.6P1-28.9.1 - SUSE Linux Enterprise Server 12 (s390x x86_64): bind-libs-32bit-9.9.6P1-28.9.1 bind-libs-debuginfo-32bit-9.9.6P1-28.9.1 - SUSE Linux Enterprise Server 12 (noarch): bind-doc-9.9.6P1-28.9.1 - SUSE Linux Enterprise Desktop 12 (x86_64): bind-debuginfo-9.9.6P1-28.9.1 bind-debugsource-9.9.6P1-28.9.1 bind-libs-32bit-9.9.6P1-28.9.1 bind-libs-9.9.6P1-28.9.1 bind-libs-debuginfo-32bit-9.9.6P1-28.9.1 bind-libs-debuginfo-9.9.6P1-28.9.1 bind-utils-9.9.6P1-28.9.1 bind-utils-debuginfo-9.9.6P1-28.9.1 References: https://www.suse.com/security/cve/CVE-2015-8704.html https://bugzilla.suse.com/962189 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0