January 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:0073-1: systemd-presets-branding-openSUSE
by maintenance＠opensuse.org 19 Jan '15

19 Jan '15

openSUSE Recommended Update: systemd-presets-branding-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0073-1 Rating: low References: #901859 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for systemd-presets-branding-openSUSE fixes the following issues: - remove lvm2-lvmetad.service (bnc#901859) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-35 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): systemd-presets-branding-openSUSE-0.3.0-12.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=901859

1 0

openSUSE-RU-2015:0072-1: canna
by maintenance＠opensuse.org 19 Jan '15

19 Jan '15

openSUSE Recommended Update: canna ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0072-1 Rating: low References: #878691 #910933 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for canna fixes the following issues: - boo#910933: Canna service does not start + roll back the fix for bnc#878691 + use wnn user instead of canna + fix the command line options in canna.service + use /bin/rm instead of cannakill in canna.service - Fix wrong permission of systemd files Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-37 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): canna-3.7p3-234.4.1 canna-debuginfo-3.7p3-234.4.1 canna-debugsource-3.7p3-234.4.1 canna-devel-3.7p3-234.4.1 canna-libs-3.7p3-234.4.1 canna-libs-debuginfo-3.7p3-234.4.1 - openSUSE 13.2 (x86_64): canna-libs-32bit-3.7p3-234.4.1 canna-libs-debuginfo-32bit-3.7p3-234.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=878691 https://bugzilla.suse.com/show_bug.cgi?id=910933

1 0

openSUSE-RU-2015:0071-1: e2fsprogs
by maintenance＠opensuse.org 19 Jan '15

19 Jan '15

openSUSE Recommended Update: e2fsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0071-1 Rating: low References: #912229 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for e2fsprogs fixes the following issue: - Fix use after free in e2fsck leading to occasional crashes (bnc#912229) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-36 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): e2fsprogs-1.42.12-4.1 e2fsprogs-debuginfo-1.42.12-4.1 e2fsprogs-debugsource-1.42.12-4.1 e2fsprogs-devel-1.42.12-4.1 libcom_err-devel-1.42.12-4.1 libcom_err2-1.42.12-4.1 libcom_err2-debuginfo-1.42.12-4.1 libext2fs-devel-1.42.12-4.1 libext2fs2-1.42.12-4.1 libext2fs2-debuginfo-1.42.12-4.1 - openSUSE 13.2 (x86_64): e2fsprogs-debuginfo-32bit-1.42.12-4.1 libcom_err-devel-32bit-1.42.12-4.1 libcom_err2-32bit-1.42.12-4.1 libcom_err2-debuginfo-32bit-1.42.12-4.1 libext2fs-devel-32bit-1.42.12-4.1 libext2fs2-32bit-1.42.12-4.1 libext2fs2-debuginfo-32bit-1.42.12-4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=912229

1 0

openSUSE-SU-2015:0066-1: moderate: Security update for util-linux
by opensuse-security＠opensuse.org 16 Jan '15

16 Jan '15

openSUSE Security Update: Security update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0066-1 Rating: moderate References: #907434 Cross-References: CVE-2014-9114 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: util-linux was updated to fix a security issue, where local attackers might be able to execute code as root with a prepared USB stick (CVE-2014-9114 bsc#907434). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-34 - openSUSE 13.1: zypper in -t patch openSUSE-2015-34 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libblkid-devel-2.25.1-9.1 libblkid-devel-static-2.25.1-9.1 libblkid1-2.25.1-9.1 libblkid1-debuginfo-2.25.1-9.1 libmount-devel-2.25.1-9.1 libmount-devel-static-2.25.1-9.1 libmount1-2.25.1-9.1 libmount1-debuginfo-2.25.1-9.1 libsmartcols-devel-2.25.1-9.1 libsmartcols-devel-static-2.25.1-9.1 libsmartcols1-2.25.1-9.1 libsmartcols1-debuginfo-2.25.1-9.1 libuuid-devel-2.25.1-9.1 libuuid-devel-static-2.25.1-9.1 libuuid1-2.25.1-9.1 libuuid1-debuginfo-2.25.1-9.1 python-libmount-2.25.1-9.2 python-libmount-debuginfo-2.25.1-9.2 python-libmount-debugsource-2.25.1-9.2 util-linux-2.25.1-9.1 util-linux-debuginfo-2.25.1-9.1 util-linux-debugsource-2.25.1-9.1 util-linux-systemd-2.25.1-9.1 util-linux-systemd-debuginfo-2.25.1-9.1 util-linux-systemd-debugsource-2.25.1-9.1 uuidd-2.25.1-9.1 uuidd-debuginfo-2.25.1-9.1 - openSUSE 13.2 (x86_64): libblkid-devel-32bit-2.25.1-9.1 libblkid1-32bit-2.25.1-9.1 libblkid1-debuginfo-32bit-2.25.1-9.1 libmount-devel-32bit-2.25.1-9.1 libmount1-32bit-2.25.1-9.1 libmount1-debuginfo-32bit-2.25.1-9.1 libuuid-devel-32bit-2.25.1-9.1 libuuid1-32bit-2.25.1-9.1 libuuid1-debuginfo-32bit-2.25.1-9.1 - openSUSE 13.2 (noarch): util-linux-lang-2.25.1-9.1 - openSUSE 13.1 (i586 x86_64): libblkid-devel-2.23.2-24.1 libblkid1-2.23.2-24.1 libblkid1-debuginfo-2.23.2-24.1 libmount-devel-2.23.2-24.1 libmount1-2.23.2-24.1 libmount1-debuginfo-2.23.2-24.1 libuuid-devel-2.23.2-24.1 libuuid1-2.23.2-24.1 libuuid1-debuginfo-2.23.2-24.1 util-linux-2.23.2-24.1 util-linux-debuginfo-2.23.2-24.1 util-linux-debugsource-2.23.2-24.1 uuidd-2.23.2-24.1 uuidd-debuginfo-2.23.2-24.1 - openSUSE 13.1 (x86_64): libblkid-devel-32bit-2.23.2-24.1 libblkid1-32bit-2.23.2-24.1 libblkid1-debuginfo-32bit-2.23.2-24.1 libmount-devel-32bit-2.23.2-24.1 libmount1-32bit-2.23.2-24.1 libmount1-debuginfo-32bit-2.23.2-24.1 libuuid-devel-32bit-2.23.2-24.1 libuuid1-32bit-2.23.2-24.1 libuuid1-debuginfo-32bit-2.23.2-24.1 - openSUSE 13.1 (noarch): util-linux-lang-2.23.2-24.1 References: http://support.novell.com/security/cve/CVE-2014-9114.html https://bugzilla.suse.com/show_bug.cgi?id=907434

1 0

openSUSE-RU-2015:0065-1: patterns-openSUSE
by maintenance＠opensuse.org 16 Jan '15

16 Jan '15

openSUSE Recommended Update: patterns-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0065-1 Rating: low References: #911588 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for patterns-openSUSE fixes the following issues: - Fixes bnc#911588: replace microcode_crl with ucode-amd and ucode-intel Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-33 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): patterns-openSUSE-32bit-20141007-5.1 patterns-openSUSE-64bit-20141007-5.1 patterns-openSUSE-apparmor-20141007-5.1 patterns-openSUSE-apparmor_opt-20141007-5.1 patterns-openSUSE-base-20141007-5.1 patterns-openSUSE-books-20141007-5.1 patterns-openSUSE-console-20141007-5.1 patterns-openSUSE-devel_C_C++-20141007-5.1 patterns-openSUSE-devel_basis-20141007-5.1 patterns-openSUSE-devel_gnome-20141007-5.1 patterns-openSUSE-devel_ide-20141007-5.1 patterns-openSUSE-devel_java-20141007-5.1 patterns-openSUSE-devel_kde-20141007-5.1 patterns-openSUSE-devel_kernel-20141007-5.1 patterns-openSUSE-devel_mono-20141007-5.1 patterns-openSUSE-devel_perl-20141007-5.1 patterns-openSUSE-devel_python-20141007-5.1 patterns-openSUSE-devel_python3-20141007-5.1 patterns-openSUSE-devel_qt4-20141007-5.1 patterns-openSUSE-devel_qt5-20141007-5.1 patterns-openSUSE-devel_rpm_build-20141007-5.1 patterns-openSUSE-devel_ruby-20141007-5.1 patterns-openSUSE-devel_tcl-20141007-5.1 patterns-openSUSE-devel_web-20141007-5.1 patterns-openSUSE-devel_yast-20141007-5.1 patterns-openSUSE-dhcp_dns_server-20141007-5.1 patterns-openSUSE-directory_server-20141007-5.1 patterns-openSUSE-e17-20141007-5.1 patterns-openSUSE-enhanced_base-20141007-5.1 patterns-openSUSE-enhanced_base_opt-20141007-5.1 patterns-openSUSE-file_server-20141007-5.1 patterns-openSUSE-fonts-20141007-5.1 patterns-openSUSE-fonts_opt-20141007-5.1 patterns-openSUSE-games-20141007-5.1 patterns-openSUSE-gateway_server-20141007-5.1 patterns-openSUSE-gnome-20141007-5.1 patterns-openSUSE-gnome_admin-20141007-5.1 patterns-openSUSE-gnome_basis-20141007-5.1 patterns-openSUSE-gnome_basis_opt-20141007-5.1 patterns-openSUSE-gnome_games-20141007-5.1 patterns-openSUSE-gnome_ide-20141007-5.1 patterns-openSUSE-gnome_imaging-20141007-5.1 patterns-openSUSE-gnome_imaging_opt-20141007-5.1 patterns-openSUSE-gnome_internet-20141007-5.1 patterns-openSUSE-gnome_laptop-20141007-5.1 patterns-openSUSE-gnome_multimedia-20141007-5.1 patterns-openSUSE-gnome_multimedia_opt-20141007-5.1 patterns-openSUSE-gnome_office-20141007-5.1 patterns-openSUSE-gnome_office_opt-20141007-5.1 patterns-openSUSE-gnome_utilities-20141007-5.1 patterns-openSUSE-gnome_yast-20141007-5.1 patterns-openSUSE-imaging-20141007-5.1 patterns-openSUSE-imaging_opt-20141007-5.1 patterns-openSUSE-kde-20141007-5.1 patterns-openSUSE-kde4_admin-20141007-5.1 patterns-openSUSE-kde4_basis-20141007-5.1 patterns-openSUSE-kde4_edutainment-20141007-5.1 patterns-openSUSE-kde4_games-20141007-5.1 patterns-openSUSE-kde4_ide-20141007-5.1 patterns-openSUSE-kde4_imaging-20141007-5.1 patterns-openSUSE-kde4_internet-20141007-5.1 patterns-openSUSE-kde4_laptop-20141007-5.1 patterns-openSUSE-kde4_multimedia-20141007-5.1 patterns-openSUSE-kde4_office-20141007-5.1 patterns-openSUSE-kde4_pure-20141007-5.1 patterns-openSUSE-kde4_utilities-20141007-5.1 patterns-openSUSE-kde4_utilities_opt-20141007-5.1 patterns-openSUSE-kde4_yast-20141007-5.1 patterns-openSUSE-kvm_server-20141007-5.1 patterns-openSUSE-lamp_server-20141007-5.1 patterns-openSUSE-laptop-20141007-5.1 patterns-openSUSE-leechcraft-20141007-5.1 patterns-openSUSE-leechcraft_browser-20141007-5.1 patterns-openSUSE-leechcraft_media-20141007-5.1 patterns-openSUSE-leechcraft_messenger-20141007-5.1 patterns-openSUSE-leechcraft_netutils-20141007-5.1 patterns-openSUSE-leechcraft_office-20141007-5.1 patterns-openSUSE-leechcraft_utilities-20141007-5.1 patterns-openSUSE-lxde-20141007-5.1 patterns-openSUSE-lxde_laptop-20141007-5.1 patterns-openSUSE-lxde_office-20141007-5.1 patterns-openSUSE-mail_server-20141007-5.1 patterns-openSUSE-mate-20141007-5.1 patterns-openSUSE-mate_admin-20141007-5.1 patterns-openSUSE-mate_basis-20141007-5.1 patterns-openSUSE-mate_laptop-20141007-5.1 patterns-openSUSE-mate_office-20141007-5.1 patterns-openSUSE-mate_utilities-20141007-5.1 patterns-openSUSE-minimal_base-20141007-5.1 patterns-openSUSE-minimal_base-conflicts-20141007-5.1 patterns-openSUSE-misc_server-20141007-5.1 patterns-openSUSE-multimedia-20141007-5.1 patterns-openSUSE-multimedia_opt-20141007-5.1 patterns-openSUSE-network_admin-20141007-5.1 patterns-openSUSE-non_oss-20141007-5.1 patterns-openSUSE-non_oss_opt-20141007-5.1 patterns-openSUSE-office-20141007-5.1 patterns-openSUSE-office_opt-20141007-5.1 patterns-openSUSE-plasma5_basis-20141007-5.1 patterns-openSUSE-print_server-20141007-5.1 patterns-openSUSE-remote_desktop-20141007-5.1 patterns-openSUSE-rest_cd_gnome-20141007-5.1 patterns-openSUSE-rest_cd_kde4-20141007-5.1 patterns-openSUSE-rest_cd_x11-20141007-5.1 patterns-openSUSE-rest_core_dvd-20141007-5.1 patterns-openSUSE-rest_dvd-20141007-5.1 patterns-openSUSE-rest_dvd9-20141007-5.1 patterns-openSUSE-rest_promo_dvd-20141007-5.1 patterns-openSUSE-sw_management-20141007-5.1 patterns-openSUSE-sw_management_gnome-20141007-5.1 patterns-openSUSE-sw_management_kde4-20141007-5.1 patterns-openSUSE-tabletpc-20141007-5.1 patterns-openSUSE-technical_writing-20141007-5.1 patterns-openSUSE-update_test-20141007-5.1 patterns-openSUSE-voip-20141007-5.1 patterns-openSUSE-x11-20141007-5.1 patterns-openSUSE-x11_opt-20141007-5.1 patterns-openSUSE-x11_yast-20141007-5.1 patterns-openSUSE-x86-20141007-5.1 patterns-openSUSE-xen_server-20141007-5.1 patterns-openSUSE-xfce-20141007-5.1 patterns-openSUSE-xfce_basis-20141007-5.1 patterns-openSUSE-xfce_laptop-20141007-5.1 patterns-openSUSE-xfce_office-20141007-5.1 patterns-openSUSE-yast2_basis-20141007-5.1 patterns-openSUSE-yast2_install_wf-20141007-5.1 References: https://bugzilla.suse.com/show_bug.cgi?id=911588

1 0

openSUSE-RU-2015:0064-1: NetworkManager
by maintenance＠opensuse.org 16 Jan '15

16 Jan '15

openSUSE Recommended Update: NetworkManager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0064-1 Rating: low References: #912315 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for NetworkManager fixes the following issues: - Added Patch for to let dhclient handle requesting the 'server-id' option (boo#912315) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-32 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): NetworkManager-0.9.10.0-3.4.1 NetworkManager-debuginfo-0.9.10.0-3.4.1 NetworkManager-debugsource-0.9.10.0-3.4.1 NetworkManager-devel-0.9.10.0-3.4.1 libnm-glib-vpn1-0.9.10.0-3.4.1 libnm-glib-vpn1-debuginfo-0.9.10.0-3.4.1 libnm-glib4-0.9.10.0-3.4.1 libnm-glib4-debuginfo-0.9.10.0-3.4.1 libnm-util2-0.9.10.0-3.4.1 libnm-util2-debuginfo-0.9.10.0-3.4.1 typelib-1_0-NMClient-1_0-0.9.10.0-3.4.1 typelib-1_0-NetworkManager-1_0-0.9.10.0-3.4.1 - openSUSE 13.2 (x86_64): NetworkManager-devel-32bit-0.9.10.0-3.4.1 libnm-glib-vpn1-32bit-0.9.10.0-3.4.1 libnm-glib-vpn1-debuginfo-32bit-0.9.10.0-3.4.1 libnm-glib4-32bit-0.9.10.0-3.4.1 libnm-glib4-debuginfo-32bit-0.9.10.0-3.4.1 libnm-util2-32bit-0.9.10.0-3.4.1 libnm-util2-debuginfo-32bit-0.9.10.0-3.4.1 - openSUSE 13.2 (noarch): NetworkManager-lang-0.9.10.0-3.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=912315

1 0

openSUSE-RU-2015:0063-1: vm-install
by maintenance＠opensuse.org 16 Jan '15

16 Jan '15

openSUSE Recommended Update: vm-install ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0063-1 Rating: low References: #862605 #862608 #881573 #882092 #885052 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This recommended update for vm-install fixes the following issues: - Maintenance update for 13.1 * Fix free_memory to return correct amount of available memory * bnc#885052 - vm-install and virt-install cannot install SLES12 systems * bnc#882092 - Installing SLES12 as a VM on SLES11 SP3 fails because of btrfs in the VM * Add a dependency on package grub2-x86_64-xen for grub.xen. Required for booting sles12 and rhel7 PV VMs using btrfs * bnc#881573 - kvm vm install does not report full system memory * KVM: Fix libvirt connection when running vm-install in background * bnc#862605 - SLES 11 SP3 vm-install should get SLES 12 support when released * bnc#862608 - SLES 11 SP3 vm-install should get RHEL 7 support when released * Output to stdout instead of stderr when 'vm-install -O' is used Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-31 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): vm-install-0.7.11-7.1 References: https://bugzilla.suse.com/show_bug.cgi?id=862605 https://bugzilla.suse.com/show_bug.cgi?id=862608 https://bugzilla.suse.com/show_bug.cgi?id=881573 https://bugzilla.suse.com/show_bug.cgi?id=882092 https://bugzilla.suse.com/show_bug.cgi?id=885052

1 0

openSUSE-SU-2015:0061-1: important: flashplayer to version 11.2.202.429
by opensuse-security＠opensuse.org 15 Jan '15

15 Jan '15

openSUSE Security Update: flashplayer to version 11.2.202.429 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0061-1 Rating: important References: Cross-References: CVE-2015-0301 CVE-2015-0302 CVE-2015-0303 CVE-2015-0304 CVE-2015-0305 CVE-2015-0306 CVE-2015-0307 CVE-2015-0308 CVE-2015-0309 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: Following issues was resolved in this update: *an improper file validation issue CVE-2015-0301), *an information disclosure vulnerability that could be exploited to capture keystrokes on the affected system (CVE-2015-0302), *memory corruption vulnerabilities that could lead to code execution (CVE-2015-0303, CVE-2015-0306), *heap-based buffer overflow vulnerabilities that could lead to code execution (CVE-2015-0304,CVE-2015-0309), *type confusion vulnerability that could lead to code execution (CVE-2015-0305), *an out-of-bounds read vulnerability that could be exploited to leak memory addresses (CVE-2015-0307), *a use-after-free vulnerability that could lead to code execution (CVE-2015-0308). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-2 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): flash-player-11.2.202.429-139.1 flash-player-gnome-11.2.202.429-139.1 flash-player-kde4-11.2.202.429-139.1 References: http://support.novell.com/security/cve/CVE-2015-0301.html http://support.novell.com/security/cve/CVE-2015-0302.html http://support.novell.com/security/cve/CVE-2015-0303.html http://support.novell.com/security/cve/CVE-2015-0304.html http://support.novell.com/security/cve/CVE-2015-0305.html http://support.novell.com/security/cve/CVE-2015-0306.html http://support.novell.com/security/cve/CVE-2015-0307.html http://support.novell.com/security/cve/CVE-2015-0308.html http://support.novell.com/security/cve/CVE-2015-0309.html

1 0

openSUSE-SU-2015:0059-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 15 Jan '15

15 Jan '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0059-1 Rating: important References: #856386 #913057 Cross-References: CVE-2015-0301 CVE-2015-0302 CVE-2015-0303 CVE-2015-0304 CVE-2015-0305 CVE-2015-0306 CVE-2015-0307 CVE-2015-0308 CVE-2015-0309 Affected Products: openSUSE 13.2:NonFree openSUSE 13.1:NonFree ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.429 (bsc#913057): * APSB15-01, CVE-2015-0301, CVE-2015-0302, CVE-2015-0303, CVE-2015-0304, CVE-2015-0305, CVE-2015-0306, CVE-2015-0307, CVE-2015-0308, CVE-2015-0309. - Disable flash player on machines without SSE2 (bnc#856386). More information can be found on http://helpx.adobe.com/security/products/flash-player/apsb15-01.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2:NonFree: zypper in -t patch openSUSE-2015-30 - openSUSE 13.1:NonFree: zypper in -t patch openSUSE-2015-30 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2:NonFree (i586 x86_64): flash-player-11.2.202.429-2.21.1 flash-player-gnome-11.2.202.429-2.21.1 flash-player-kde4-11.2.202.429-2.21.1 - openSUSE 13.1:NonFree (i586 x86_64): flash-player-11.2.202.429-86.1 flash-player-gnome-11.2.202.429-86.1 flash-player-kde4-11.2.202.429-86.1 References: http://support.novell.com/security/cve/CVE-2015-0301.html http://support.novell.com/security/cve/CVE-2015-0302.html http://support.novell.com/security/cve/CVE-2015-0303.html http://support.novell.com/security/cve/CVE-2015-0304.html http://support.novell.com/security/cve/CVE-2015-0305.html http://support.novell.com/security/cve/CVE-2015-0306.html http://support.novell.com/security/cve/CVE-2015-0307.html http://support.novell.com/security/cve/CVE-2015-0308.html http://support.novell.com/security/cve/CVE-2015-0309.html https://bugzilla.suse.com/show_bug.cgi?id=856386 https://bugzilla.suse.com/show_bug.cgi?id=913057

1 0

openSUSE-RU-2015:0058-1: rdesktop
by maintenance＠opensuse.org 15 Jan '15

15 Jan '15

openSUSE Recommended Update: rdesktop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0058-1 Rating: low References: #897205 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for rdesktop fixes the following issues: - fix for boo#897205, disconnection with error when rdesktop to a Windows 2008 R2 Terminal Server Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-21 - openSUSE 13.1: zypper in -t patch openSUSE-2015-21 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): rdesktop-1.8.3-2.7.1 rdesktop-debuginfo-1.8.3-2.7.1 rdesktop-debugsource-1.8.3-2.7.1 - openSUSE 13.1 (i586 x86_64): rdesktop-1.8.3-2.14.1 rdesktop-debuginfo-1.8.3-2.14.1 rdesktop-debugsource-1.8.3-2.14.1 References: https://bugzilla.suse.com/show_bug.cgi?id=897205

1 0

openSUSE-RU-2015:0057-1: moderate: enlightenment, enlightenment-branding-openSUSE, elementary, efl and xdg-utils
by maintenance＠opensuse.org 15 Jan '15

15 Jan '15

openSUSE Recommended Update: enlightenment, enlightenment-branding-openSUSE, elementary, efl and xdg-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0057-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update fixes the following issues: - enlightenment + Update from version 0.19.0 to 0.19.2 * Randr Fixes particuarlly for nvidia * Fix X Crash * eeze and efm fixes * don't add nocomp damages for input-only windows * check protocol visibility for nocomp breaks, not comp object visibility * manually break out of nocomp * end nocomp on nocomp end...always * force render queue on unmaximize if client was fullscreen * add borderless theme for deskmirror clients to support various animations * comp render queue on every client resize instead of on unmaximize * force comp render queue more aggressively to detect changes in nocomp * client hooks should not continue to be called if the client has been deleted * thaw evas on winlist activation with no clients available * modules/teamwork: Use eina_file_mkstemp() to avoid problems with umask * fix: Add more desktops to be tiled by default in the tiling config. * Further minor fixes - enlightenment-branding-openSUSE + Should require openSUSE Profiles as these are a fundamental part of the branding - xdg-utils + xdg-su and xdg-terminal both detected enlightenment then did nothing + xdg-su and xdg-terminal both use terminology rather then xterm now - elementary + fileselector: Do not call _populate directly in APIs + entry/test: make scrollable entries visible + Elm_Panel: forbid changing of content of "elm.swallow.event" part + elm_widget: fix segfaults for _elm_widget_item_style_set/get + genlist: Remove unnecessary callbacks when item loop is disabled. + widget: fix the typo. Use win object instead. + elm_box_align_set API fix + label: Reset sd->lastw as '-1' in some elm_label APIs for ensure the sizing_eval. + elm_box: inappropriate size_hint_align value usage fix + elm_win should not check ELM_ACCEL variable if application has overridden it + remove accel_override from elm_config + bg: fix the _elm_bg_elm_layout_sizing_eval bug. - efl + Eo id: Fix id security checks for invalid objects. + Fix bug ecore_imf_context_cursor_position_set was not called when cursor was moved by ECORE_IMF_CALLBACK_SELECTION_SET + Evas filters: Fix parsing of argument lists + edje_program: added signal "focus,part,out" when focus is discarded + efl - vsync - deal with both broken and non-broken libdrm + ecore_x_vsync - fix tiny leaklet of drmversion + Evas Textblock: Fix bad empty line add on wrapping + ecore vsync - fix up dual nvidia + dri/drm driver discovery + eeze - sensors - ints for sensor events were decld in .h - and never .c + Evas Textblock: Fix native width of BiDi text (T1532) + ecore_imf/ibus : provide to get surrounding text + evas: GL_X11 context need to always be with alpha or it will fail to change. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-25 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): edje-1.11.5-4.1 edje-debuginfo-1.11.5-4.1 efl-1.11.5-4.1 efl-debuginfo-1.11.5-4.1 efl-debugsource-1.11.5-4.1 efl-devel-1.11.5-4.1 efl-examples-1.11.5-4.1 efl-testsuite-1.11.5-4.1 elementary-1.11.5-10.5.1 elementary-debuginfo-1.11.5-10.5.1 elementary-debugsource-1.11.5-10.5.1 elementary-devel-1.11.5-10.5.1 elementary-examples-1.11.5-10.5.1 elua-1.11.5-4.1 embryo-1.11.5-4.1 embryo-debuginfo-1.11.5-4.1 enlightenment-0.19.2-4.2 enlightenment-branding-openSUSE-0.1-2.4.1 enlightenment-branding-upstream-0.19.2-4.2 enlightenment-debuginfo-0.19.2-4.2 enlightenment-debugsource-0.19.2-4.2 enlightenment-devel-0.19.2-4.2 enlightenment-doc-html-0.19.2-4.2 enlightenment-theme-dark-1.11.5-10.5.1 enlightenment-theme-upstream-0.18.0-10.5.1 libecore1-1.11.5-4.1 libecore1-debuginfo-1.11.5-4.1 libedje1-1.11.5-4.1 libedje1-debuginfo-1.11.5-4.1 libeet1-1.11.5-4.1 libeet1-debuginfo-1.11.5-4.1 libeeze1-1.11.5-4.1 libeeze1-debuginfo-1.11.5-4.1 libefreet1-1.11.5-4.1 libefreet1-debuginfo-1.11.5-4.1 libefreet_mime1-1.11.5-4.1 libefreet_mime1-debuginfo-1.11.5-4.1 libefreet_trash1-1.11.5-4.1 libefreet_trash1-debuginfo-1.11.5-4.1 libeina1-1.11.5-4.1 libeina1-debuginfo-1.11.5-4.1 libeio1-1.11.5-4.1 libeio1-debuginfo-1.11.5-4.1 libeldbus1-1.11.5-4.1 libeldbus1-debuginfo-1.11.5-4.1 libelementary1-1.11.5-10.5.1 libelementary1-debuginfo-1.11.5-10.5.1 libembryo1-1.11.5-4.1 libembryo1-debuginfo-1.11.5-4.1 libemotion1-1.11.5-4.1 libemotion1-debuginfo-1.11.5-4.1 libeo1-1.11.5-4.1 libeo1-debuginfo-1.11.5-4.1 libeolian1-1.11.5-4.1 libeolian1-debuginfo-1.11.5-4.1 libephysics1-1.11.5-4.1 libephysics1-debuginfo-1.11.5-4.1 libethumb1-1.11.5-4.1 libethumb1-debuginfo-1.11.5-4.1 libethumb_client1-1.11.5-4.1 libethumb_client1-debuginfo-1.11.5-4.1 libevas1-1.11.5-4.1 libevas1-debuginfo-1.11.5-4.1 - openSUSE 13.2 (noarch): xdg-utils-20140922-4.1 References:

1 0

openSUSE-RU-2015:0056-1: librevenge
by maintenance＠opensuse.org 15 Jan '15

15 Jan '15

openSUSE Recommended Update: librevenge ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0056-1 Rating: low References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for librevenge fixes the following issues: - Version bump to 0.0.2: + Better handling of invalid input in RVNGDirectoryStream functions. + Add documentation for RVNGDirectoryStream. + Add text:outline-level to allowed paragraph properties. This is to allow import libraries to handle headings properly. + Properly handle units in all generators, instead of expecting everything is in inches. + Implement open/closeGroup for RVNGSVGDrawingGenerator. + Improve handling of layers in RVNGSVGPresentationGenerator. + Handle master pages in RVNGSVGDrawingGenerator and RVNGSVGPresentationGenerator. + Simple handling of tables in RVNGSVGDrawingGenerator and RVNGSVGPresentationGenerator: just create a text box for each cell. + Fix return value of RVNGStringStream::seek when seeking to end. + Fix some warnings found by Coverity + Use symbol visibility on Linux. The library only exports public functions now. + Fix several crashes or hangs when reading broken OLE2 or Zip files, found with the help of american-fuzzy-lop. + Add fo:language, fo:country and fo:script to allowed span properties. + Handle headings in RVNGHTMLTextGenerator Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-27 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): librevenge-0_0-0-0.0.2-3.4.1 librevenge-0_0-0-debuginfo-0.0.2-3.4.1 librevenge-debugsource-0.0.2-3.4.1 librevenge-devel-0.0.2-3.4.1 librevenge-generators-0_0-0-0.0.2-3.4.1 librevenge-generators-0_0-0-debuginfo-0.0.2-3.4.1 librevenge-stream-0_0-0-0.0.2-3.4.1 librevenge-stream-0_0-0-debuginfo-0.0.2-3.4.1 - openSUSE 13.2 (noarch): librevenge-doc-0.0.2-3.4.1 References:

1 0

openSUSE-RU-2015:0055-1: kbd
by maintenance＠opensuse.org 15 Jan '15

15 Jan '15

openSUSE Recommended Update: kbd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0055-1 Rating: low References: #907391 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for kbd fixes the following issues: - fix previously added links [bnc#907391c#9] Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-22 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): kbd-2.0.2-2.10.1 kbd-debuginfo-2.0.2-2.10.1 kbd-debugsource-2.0.2-2.10.1 References: https://bugzilla.suse.com/show_bug.cgi?id=907391

1 0

openSUSE-RU-2015:0054-1: moderate: libmspub
by maintenance＠opensuse.org 15 Jan '15

15 Jan '15

openSUSE Recommended Update: libmspub ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0054-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for libmspub fixes the following issues: - Version bump to 0.1.2: + Check arguments of public functions. Passing NULL no longer causes a crash. + Use symbol visibility on Linux. The library only exports the two public functions now. + Fix several crashes and hangs when reading broken files, found with the help of american-fuzzy-lop. + Add support for embedded fonts. + Add initial support for tables. + Parse document metadata. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-23 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libmspub-0_1-1-0.1.2-2.4.1 libmspub-0_1-1-debuginfo-0.1.2-2.4.1 libmspub-debugsource-0.1.2-2.4.1 libmspub-devel-0.1.2-2.4.1 libmspub-tools-0.1.2-2.4.1 libmspub-tools-debuginfo-0.1.2-2.4.1 - openSUSE 13.2 (noarch): libmspub-devel-doc-0.1.2-2.4.1 References:

1 0

openSUSE-RU-2015:0053-1: cdrtools
by maintenance＠opensuse.org 15 Jan '15

15 Jan '15

openSUSE Recommended Update: cdrtools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0053-1 Rating: low References: #899718 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for cdrtools fixes the following issues: - Update to new upstream release 3.01~a25 - bnc#899718: Reenable missing capability support Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-29 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): btcflash-3.01~a25-2.8.2 btcflash-debuginfo-3.01~a25-2.8.2 cdda2wav-3.01~a25-2.8.2 cdda2wav-debuginfo-3.01~a25-2.8.2 cdrecord-3.01~a25-2.8.2 cdrecord-debuginfo-3.01~a25-2.8.2 cdrtools-3.01~a25-2.8.2 cdrtools-debugsource-3.01~a25-2.8.2 libscg-devel-3.01~a25-2.8.1 libscg1_0-3.01~a25-2.8.1 libscg1_0-debuginfo-3.01~a25-2.8.1 libschily-devel-3.01~a25-2.8.1 libschily1_0-3.01~a25-2.8.1 libschily1_0-debuginfo-3.01~a25-2.8.1 mkisofs-3.01~a25-2.8.2 mkisofs-debuginfo-3.01~a25-2.8.2 schily-libs-debugsource-3.01~a25-2.8.1 References: https://bugzilla.suse.com/show_bug.cgi?id=899718

1 0

openSUSE-RU-2015:0051-1: moderate: mozc
by maintenance＠opensuse.org 15 Jan '15

15 Jan '15

openSUSE Recommended Update: mozc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0051-1 Rating: moderate References: #906143 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for mozc fixes the following issue: - bnc#906143: pre-edit text is not reset appropriately after focus lost under XIM Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-28 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): fcitx-mozc-1.15.1868.102-4.1 fcitx-mozc-debuginfo-1.15.1868.102-4.1 ibus-mozc-1.15.1868.102-4.1 ibus-mozc-candidate-window-1.15.1868.102-4.1 ibus-mozc-candidate-window-debuginfo-1.15.1868.102-4.1 ibus-mozc-debuginfo-1.15.1868.102-4.1 mozc-1.15.1868.102-4.1 mozc-debuginfo-1.15.1868.102-4.1 mozc-debugsource-1.15.1868.102-4.1 mozc-gui-tools-1.15.1868.102-4.1 mozc-gui-tools-debuginfo-1.15.1868.102-4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=906143

1 0

openSUSE-RU-2015:0050-1: libmwaw
by maintenance＠opensuse.org 15 Jan '15

15 Jan '15

openSUSE Recommended Update: libmwaw ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0050-1 Rating: low References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for libmwaw provides various tweaks and fixes on the 0.3 series found by fuzzy testing/etc Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-26 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libmwaw-0_3-3-0.3.4-2.4.1 libmwaw-0_3-3-debuginfo-0.3.4-2.4.1 libmwaw-debugsource-0.3.4-2.4.1 libmwaw-devel-0.3.4-2.4.1 libmwaw-tools-0.3.4-2.4.1 libmwaw-tools-debuginfo-0.3.4-2.4.1 - openSUSE 13.2 (noarch): libmwaw-devel-doc-0.3.4-2.4.1 References:

1 0

openSUSE-RU-2015:0049-1: moderate: recommended udpate for apache2
by maintenance＠opensuse.org 15 Jan '15

15 Jan '15

openSUSE Recommended Update: recommended udpate for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0049-1 Rating: moderate References: #842377 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended udpate for apache2 fixes the following issue: - bnc#842377c16: deleted IfModule directive around SSLSessionCache because it isn't needed for apache 2.2 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2015-24 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): apache2-2.2.29-10.24.1 apache2-debuginfo-2.2.29-10.24.1 apache2-debugsource-2.2.29-10.24.1 apache2-devel-2.2.29-10.24.1 apache2-event-2.2.29-10.24.1 apache2-event-debuginfo-2.2.29-10.24.1 apache2-example-pages-2.2.29-10.24.1 apache2-itk-2.2.29-10.24.1 apache2-itk-debuginfo-2.2.29-10.24.1 apache2-prefork-2.2.29-10.24.1 apache2-prefork-debuginfo-2.2.29-10.24.1 apache2-utils-2.2.29-10.24.1 apache2-utils-debuginfo-2.2.29-10.24.1 apache2-worker-2.2.29-10.24.1 apache2-worker-debuginfo-2.2.29-10.24.1 - openSUSE 12.3 (noarch): apache2-doc-2.2.29-10.24.1 References: https://bugzilla.suse.com/show_bug.cgi?id=842377

1 0

openSUSE-RU-2015:0048-1: release-notes-openSUSE
by maintenance＠opensuse.org 15 Jan '15

15 Jan '15

openSUSE Recommended Update: release-notes-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0048-1 Rating: low References: #906936 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for release-notes-openSUSE fixes the following issues - Update - bnc#906936: Set LANG as a work around to properly build all .txt outputs; Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-20 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): release-notes-openSUSE-13.2.20150107-12.1 References: https://bugzilla.suse.com/show_bug.cgi?id=906936

1 0

openSUSE-RU-2015:0044-1: moderate: quota
by maintenance＠opensuse.org 14 Jan '15

14 Jan '15

openSUSE Recommended Update: quota ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0044-1 Rating: moderate References: #908846 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended udpate for quota fixes the following issues: fixes bnc#908846 - Properly run all systemd calls on services - fix bashism in quotad_env.sh script - Version bump to 4.02 release * Mostly few trivial fixes including bnc#908846 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-19 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): quota-4.02-2.4.1 quota-debuginfo-4.02-2.4.1 quota-debugsource-4.02-2.4.1 quota-nfs-4.02-2.4.1 quota-nfs-debuginfo-4.02-2.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=908846

1 0

openSUSE-SU-2015:0043-1: moderate: Security update for gcab
by opensuse-security＠opensuse.org 14 Jan '15

14 Jan '15

openSUSE Security Update: Security update for gcab ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0043-1 Rating: moderate References: #911814 Cross-References: CVE-2015-0552 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes the following security issue: - CVE-2015-0552: Avoid path traversal (boo#911814, bgo#742331, CVE-2015-0552). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-13 - openSUSE 13.1: zypper in -t patch openSUSE-2015-13 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gcab-0.4-4.4.1 gcab-debuginfo-0.4-4.4.1 gcab-debugsource-0.4-4.4.1 gcab-devel-0.4-4.4.1 libgcab-1_0-0-0.4-4.4.1 libgcab-1_0-0-debuginfo-0.4-4.4.1 - openSUSE 13.2 (noarch): gcab-lang-0.4-4.4.1 - openSUSE 13.1 (i586 x86_64): gcab-0.4-2.4.1 gcab-debuginfo-0.4-2.4.1 gcab-debugsource-0.4-2.4.1 gcab-devel-0.4-2.4.1 libgcab-1_0-0-0.4-2.4.1 libgcab-1_0-0-debuginfo-0.4-2.4.1 - openSUSE 13.1 (noarch): gcab-lang-0.4-2.4.1 References: http://support.novell.com/security/cve/CVE-2015-0552.html https://bugzilla.suse.com/show_bug.cgi?id=911814

1 0

openSUSE-SU-2015:0042-1: moderate: Security update for jasper
by opensuse-security＠opensuse.org 14 Jan '15

14 Jan '15

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0042-1 Rating: moderate References: #909474 #909475 Cross-References: CVE-2014-8137 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: The follow issues were fixed with this update: - CVE-2014-8137 double-free in jas_iccattrval_destroy()(bnc#909474) - CVE-2014-8138 heap overflow in jas_decode() (bnc#909475) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-11 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): jasper-1.900.1-160.9.1 jasper-debuginfo-1.900.1-160.9.1 jasper-debugsource-1.900.1-160.9.1 libjasper-devel-1.900.1-160.9.1 libjasper1-1.900.1-160.9.1 libjasper1-debuginfo-1.900.1-160.9.1 - openSUSE 13.1 (x86_64): libjasper1-32bit-1.900.1-160.9.1 libjasper1-debuginfo-32bit-1.900.1-160.9.1 References: http://support.novell.com/security/cve/CVE-2014-8137.html https://bugzilla.suse.com/show_bug.cgi?id=909474 https://bugzilla.suse.com/show_bug.cgi?id=909475

1 0

openSUSE-SU-2015:0041-1: moderate: Security update for libsndfile
by opensuse-security＠opensuse.org 14 Jan '15

14 Jan '15

openSUSE Security Update: Security update for libsndfile ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0041-1 Rating: moderate References: #911796 Cross-References: CVE-2014-9496 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Changes in libsndfile: two buffer read overflows in sd2_parse_rsrc_fork() (CVE-2014-9496, bnc#911796): backported upstream fix patches Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-18 - openSUSE 13.1: zypper in -t patch openSUSE-2015-18 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libsndfile-debugsource-1.0.25-19.4.1 libsndfile-devel-1.0.25-19.4.1 libsndfile-progs-1.0.25-19.4.1 libsndfile-progs-debuginfo-1.0.25-19.4.1 libsndfile-progs-debugsource-1.0.25-19.4.1 libsndfile1-1.0.25-19.4.1 libsndfile1-debuginfo-1.0.25-19.4.1 - openSUSE 13.2 (x86_64): libsndfile1-32bit-1.0.25-19.4.1 libsndfile1-debuginfo-32bit-1.0.25-19.4.1 - openSUSE 13.1 (i586 x86_64): libsndfile-debugsource-1.0.25-17.4.1 libsndfile-devel-1.0.25-17.4.1 libsndfile-progs-1.0.25-17.4.1 libsndfile-progs-debuginfo-1.0.25-17.4.1 libsndfile-progs-debugsource-1.0.25-17.4.1 libsndfile1-1.0.25-17.4.1 libsndfile1-debuginfo-1.0.25-17.4.1 - openSUSE 13.1 (x86_64): libsndfile1-32bit-1.0.25-17.4.1 libsndfile1-debuginfo-32bit-1.0.25-17.4.1 References: http://support.novell.com/security/cve/CVE-2014-9496.html https://bugzilla.suse.com/show_bug.cgi?id=911796

1 0

openSUSE-RU-2015:0040-1: moderate: squidview
by maintenance＠opensuse.org 14 Jan '15

14 Jan '15

openSUSE Recommended Update: squidview ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0040-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for squidview fixes the following issues: - squid result code update Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-16 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): squidview-0.81-2.5.1 squidview-debuginfo-0.81-2.5.1 squidview-debugsource-0.81-2.5.1 References:

1 0

openSUSE-SU-2015:0039-1: moderate: Security update for jasper
by opensuse-security＠opensuse.org 14 Jan '15

14 Jan '15

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0039-1 Rating: moderate References: #909474 #909475 Cross-References: CVE-2014-8137 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: The follow issues were fixed with this update: - CVE-2014-8137 double-free in jas_iccattrval_destroy()(bnc#909474) - CVE-2014-8138 heap overflow in jas_decode() (bnc#909475) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2015-14 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): jasper-1.900.1-156.9.1 jasper-debuginfo-1.900.1-156.9.1 jasper-debugsource-1.900.1-156.9.1 libjasper-devel-1.900.1-156.9.1 libjasper1-1.900.1-156.9.1 libjasper1-debuginfo-1.900.1-156.9.1 - openSUSE 12.3 (x86_64): libjasper1-32bit-1.900.1-156.9.1 libjasper1-debuginfo-32bit-1.900.1-156.9.1 References: http://support.novell.com/security/cve/CVE-2014-8137.html https://bugzilla.suse.com/show_bug.cgi?id=909474 https://bugzilla.suse.com/show_bug.cgi?id=909475

1 0