January 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:0118-1: libqt5-qtbase
by maintenance＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Recommended Update: libqt5-qtbase ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0118-1 Rating: low References: #870151 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for libqt5-qtbase fixes the following issues: - Added patch from upstream to fix Qt5 Apllication crashed in rendering when executing over ssh (qtbug#43623, boo#870151) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-60 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libQt5Bootstrap-devel-static-5.3.2-12.2 libQt5Concurrent-devel-5.3.2-12.2 libQt5Concurrent5-5.3.2-12.2 libQt5Concurrent5-debuginfo-5.3.2-12.2 libQt5Core-devel-5.3.2-12.2 libQt5Core5-5.3.2-12.2 libQt5Core5-debuginfo-5.3.2-12.2 libQt5DBus-devel-5.3.2-12.2 libQt5DBus-devel-debuginfo-5.3.2-12.2 libQt5DBus5-5.3.2-12.2 libQt5DBus5-debuginfo-5.3.2-12.2 libQt5Gui-devel-5.3.2-12.2 libQt5Gui5-5.3.2-12.2 libQt5Gui5-debuginfo-5.3.2-12.2 libQt5Network-devel-5.3.2-12.2 libQt5Network5-5.3.2-12.2 libQt5Network5-debuginfo-5.3.2-12.2 libQt5OpenGL-devel-5.3.2-12.2 libQt5OpenGL5-5.3.2-12.2 libQt5OpenGL5-debuginfo-5.3.2-12.2 libQt5OpenGLExtensions-devel-static-5.3.2-12.2 libQt5PlatformSupport-devel-static-5.3.2-12.2 libQt5PrintSupport-devel-5.3.2-12.2 libQt5PrintSupport5-5.3.2-12.2 libQt5PrintSupport5-debuginfo-5.3.2-12.2 libQt5Sql-devel-5.3.2-12.2 libQt5Sql5-5.3.2-12.2 libQt5Sql5-debuginfo-5.3.2-12.2 libQt5Sql5-mysql-5.3.2-12.2 libQt5Sql5-mysql-debuginfo-5.3.2-12.2 libQt5Sql5-postgresql-5.3.2-12.2 libQt5Sql5-postgresql-debuginfo-5.3.2-12.2 libQt5Sql5-sqlite-5.3.2-12.2 libQt5Sql5-sqlite-debuginfo-5.3.2-12.2 libQt5Sql5-unixODBC-5.3.2-12.2 libQt5Sql5-unixODBC-debuginfo-5.3.2-12.2 libQt5Test-devel-5.3.2-12.2 libQt5Test5-5.3.2-12.2 libQt5Test5-debuginfo-5.3.2-12.2 libQt5Widgets-devel-5.3.2-12.2 libQt5Widgets5-5.3.2-12.2 libQt5Widgets5-debuginfo-5.3.2-12.2 libQt5Xml-devel-5.3.2-12.2 libQt5Xml5-5.3.2-12.2 libQt5Xml5-debuginfo-5.3.2-12.2 libqt5-qtbase-common-devel-5.3.2-12.2 libqt5-qtbase-common-devel-debuginfo-5.3.2-12.2 libqt5-qtbase-debugsource-5.3.2-12.2 libqt5-qtbase-devel-5.3.2-12.2 libqt5-qtbase-doc-5.3.2-12.2 libqt5-qtbase-doc-debuginfo-5.3.2-12.2 libqt5-qtbase-examples-5.3.2-12.2 libqt5-qtbase-examples-debuginfo-5.3.2-12.2 - openSUSE 13.2 (x86_64): libQt5Bootstrap-devel-static-32bit-5.3.2-12.2 libQt5Concurrent-devel-32bit-5.3.2-12.2 libQt5Concurrent5-32bit-5.3.2-12.2 libQt5Concurrent5-debuginfo-32bit-5.3.2-12.2 libQt5Core-devel-32bit-5.3.2-12.2 libQt5Core5-32bit-5.3.2-12.2 libQt5Core5-debuginfo-32bit-5.3.2-12.2 libQt5DBus-devel-32bit-5.3.2-12.2 libQt5DBus-devel-debuginfo-32bit-5.3.2-12.2 libQt5DBus5-32bit-5.3.2-12.2 libQt5DBus5-debuginfo-32bit-5.3.2-12.2 libQt5Gui-devel-32bit-5.3.2-12.2 libQt5Gui5-32bit-5.3.2-12.2 libQt5Gui5-debuginfo-32bit-5.3.2-12.2 libQt5Network-devel-32bit-5.3.2-12.2 libQt5Network5-32bit-5.3.2-12.2 libQt5Network5-debuginfo-32bit-5.3.2-12.2 libQt5OpenGL-devel-32bit-5.3.2-12.2 libQt5OpenGL5-32bit-5.3.2-12.2 libQt5OpenGL5-debuginfo-32bit-5.3.2-12.2 libQt5OpenGLExtensions-devel-static-32bit-5.3.2-12.2 libQt5PlatformSupport-devel-static-32bit-5.3.2-12.2 libQt5PrintSupport-devel-32bit-5.3.2-12.2 libQt5PrintSupport5-32bit-5.3.2-12.2 libQt5PrintSupport5-debuginfo-32bit-5.3.2-12.2 libQt5Sql-devel-32bit-5.3.2-12.2 libQt5Sql5-32bit-5.3.2-12.2 libQt5Sql5-debuginfo-32bit-5.3.2-12.2 libQt5Sql5-mysql-32bit-5.3.2-12.2 libQt5Sql5-mysql-debuginfo-32bit-5.3.2-12.2 libQt5Sql5-postgresql-32bit-5.3.2-12.2 libQt5Sql5-postgresql-debuginfo-32bit-5.3.2-12.2 libQt5Sql5-sqlite-32bit-5.3.2-12.2 libQt5Sql5-sqlite-debuginfo-32bit-5.3.2-12.2 libQt5Sql5-unixODBC-32bit-5.3.2-12.2 libQt5Sql5-unixODBC-debuginfo-32bit-5.3.2-12.2 libQt5Test-devel-32bit-5.3.2-12.2 libQt5Test5-32bit-5.3.2-12.2 libQt5Test5-debuginfo-32bit-5.3.2-12.2 libQt5Widgets-devel-32bit-5.3.2-12.2 libQt5Widgets5-32bit-5.3.2-12.2 libQt5Widgets5-debuginfo-32bit-5.3.2-12.2 libQt5Xml-devel-32bit-5.3.2-12.2 libQt5Xml5-32bit-5.3.2-12.2 libQt5Xml5-debuginfo-32bit-5.3.2-12.2 libqt5-qtbase-examples-32bit-5.3.2-12.2 libqt5-qtbase-examples-debuginfo-32bit-5.3.2-12.2 - openSUSE 13.2 (noarch): libQt5Core-private-headers-devel-5.3.2-12.2 libQt5DBus-private-headers-devel-5.3.2-12.2 libQt5Gui-private-headers-devel-5.3.2-12.2 libQt5Network-private-headers-devel-5.3.2-12.2 libQt5OpenGL-private-headers-devel-5.3.2-12.2 libQt5PlatformSupport-private-headers-devel-5.3.2-12.2 libQt5PrintSupport-private-headers-devel-5.3.2-12.2 libQt5Sql-private-headers-devel-5.3.2-12.2 libQt5Test-private-headers-devel-5.3.2-12.2 libQt5Widgets-private-headers-devel-5.3.2-12.2 libqt5-qtbase-private-headers-devel-5.3.2-12.2 References: https://bugzilla.suse.com/show_bug.cgi?id=870151

1 0

openSUSE-SU-2015:0117-1: moderate: Security update for otrs
by opensuse-security＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Security Update: Security update for otrs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0117-1 Rating: moderate References: #910988 Cross-References: CVE-2014-9324 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes the following issue: CVE-2014-9324: The GenericInterface in OTRS Help Desk access-control problems (bnc#910988) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-53 - openSUSE 13.1: zypper in -t patch openSUSE-2015-53 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): otrs-3.3.11-4.1 otrs-doc-3.3.11-4.1 otrs-itsm-3.3.11-4.1 - openSUSE 13.1 (noarch): otrs-3.2.17-31.13.1 otrs-doc-3.2.17-31.13.1 otrs-itsm-3.2.9-31.13.1 References: http://support.novell.com/security/cve/CVE-2014-9324.html https://bugzilla.suse.com/show_bug.cgi?id=910988

1 0

openSUSE-SU-2015:0116-1: moderate: Security update for roundcubemail
by opensuse-security＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Security Update: Security update for roundcubemail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0116-1 Rating: moderate References: #913095 Cross-References: CVE-2014-9587 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: roundcubemail was updated to 1.0.4 fixing bugs and security issues. Changes: * Disable TinyMCE contextmenu plugin as there are more cons than pros in using it (#1490118) * Fix bug where show_real_foldernames setting wasn't honored on compose page (#1490153) * Fix issue where Archive folder wasn't protected in Folder Manager (#1490154) * Fix compatibility with PHP 5.2. in rcube_imap_generic (#1490115) * Fix setting flags on servers with no PERMANENTFLAGS response (#1490087) * Fix regression in SHAA password generation in ldap driver of password plugin (#1490094) * Fix displaying of HTML messages with absolutely positioned elements in Larry skin (#1490103) * Fix font style display issue in HTML messages with styled <span> elements (#1490101) * Fix download of attachments that are part of TNEF message (#1490091) * Fix handling of uuencoded messages if messages_cache is enabled (#1490108) * Fix handling of base64-encoded attachments with extra spaces (#1490111) * Fix handling of UNKNOWN-CTE response, try do decode content client-side (#1490046) * Fix bug where creating subfolders in shared folders wasn't possible without ACL extension (#1490113) * Fix reply scrolling issue with text mode and start message below the quote (#1490114) * Fix possible issues in skin/skin_path config handling (#1490125) * Fix lack of delimiter for recipient addresses in smtp_log (#1490150) * Fix generation of Blowfish-based password hashes (#1490184) * Fix bugs where CSRF attacks were still possible on some requests (CVE-2014-9587) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-58 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): roundcubemail-1.0.4-4.1 References: http://support.novell.com/security/cve/CVE-2014-9587.html https://bugzilla.suse.com/show_bug.cgi?id=913095

1 0

openSUSE-RU-2015:0115-1: moderate: alpine-branding-openSUSE
by maintenance＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Recommended Update: alpine-branding-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0115-1 Rating: moderate References: #912611 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for alpine-branding-openSUSE fixes the following issue: - boo#912611: Disable IMAP-over-SSH by defualt Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-51 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): alpine-branding-openSUSE-0-2.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=912611

1 0

openSUSE-SU-2015:0114-1: moderate: Security update for strongswan
by opensuse-security＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Security Update: Security update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0114-1 Rating: moderate References: #897048 #897512 #910491 Cross-References: CVE-2014-9221 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update fixes the following security issues: - denial-of-service vulnerability, which can be triggered by an IKEv2 Key Exchange payload, that contains the Diffie-Hellman group 1025 (bsc#910491,CVE-2014-9221). - Applied an upstream patch reverting to store algorithms in the registration order again as ordering them by identifier caused weaker algorithms to be proposed first by default (bsc#897512). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-54 - openSUSE 13.1: zypper in -t patch openSUSE-2015-54 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): strongswan-5.1.3-4.4.1 strongswan-debugsource-5.1.3-4.4.1 strongswan-ipsec-5.1.3-4.4.1 strongswan-ipsec-debuginfo-5.1.3-4.4.1 strongswan-libs0-5.1.3-4.4.1 strongswan-libs0-debuginfo-5.1.3-4.4.1 strongswan-mysql-5.1.3-4.4.1 strongswan-mysql-debuginfo-5.1.3-4.4.1 strongswan-nm-5.1.3-4.4.1 strongswan-nm-debuginfo-5.1.3-4.4.1 strongswan-sqlite-5.1.3-4.4.1 strongswan-sqlite-debuginfo-5.1.3-4.4.1 - openSUSE 13.2 (noarch): strongswan-doc-5.1.3-4.4.1 - openSUSE 13.1 (i586 x86_64): strongswan-5.1.1-8.1 strongswan-debugsource-5.1.1-8.1 strongswan-ipsec-5.1.1-8.1 strongswan-ipsec-debuginfo-5.1.1-8.1 strongswan-libs0-5.1.1-8.1 strongswan-libs0-debuginfo-5.1.1-8.1 strongswan-mysql-5.1.1-8.1 strongswan-mysql-debuginfo-5.1.1-8.1 strongswan-nm-5.1.1-8.1 strongswan-nm-debuginfo-5.1.1-8.1 strongswan-sqlite-5.1.1-8.1 strongswan-sqlite-debuginfo-5.1.1-8.1 - openSUSE 13.1 (noarch): strongswan-doc-5.1.1-8.1 References: http://support.novell.com/security/cve/CVE-2014-9221.html https://bugzilla.suse.com/show_bug.cgi?id=897048 https://bugzilla.suse.com/show_bug.cgi?id=897512 https://bugzilla.suse.com/show_bug.cgi?id=910491

1 0

openSUSE-SU-2015:0113-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0113-1 Rating: moderate References: #912365 #912368 #912369 #912370 #912372 Cross-References: CVE-2015-0559 CVE-2015-0560 CVE-2015-0561 CVE-2015-0562 CVE-2015-0563 CVE-2015-0564 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update fixes the following security issues: + The WCCP dissector could crash wnpa-sec-2015-01 CVE-2015-0559 CVE-2015-0560 [boo#912365] + The LPP dissector could crash. wnpa-sec-2015-02 CVE-2015-0561 [boo#912368] + The DEC DNA Routing Protocol dissector could crash. wnpa-sec-2015-03 CVE-2015-0562 [boo#912369] + The SMTP dissector could crash. wnpa-sec-2015-04 CVE-2015-0563 [boo#912370] + Wireshark could crash while decypting TLS/SSL sessions. wnpa-sec-2015-05 CVE-2015-0564 [boo#912372] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-52 - openSUSE 13.1: zypper in -t patch openSUSE-2015-52 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): wireshark-1.12.3-8.1 wireshark-debuginfo-1.12.3-8.1 wireshark-debugsource-1.12.3-8.1 wireshark-devel-1.12.3-8.1 wireshark-ui-gtk-1.12.3-8.1 wireshark-ui-gtk-debuginfo-1.12.3-8.1 wireshark-ui-qt-1.12.3-8.1 wireshark-ui-qt-debuginfo-1.12.3-8.1 - openSUSE 13.1 (i586 x86_64): wireshark-1.10.12-32.1 wireshark-debuginfo-1.10.12-32.1 wireshark-debugsource-1.10.12-32.1 wireshark-devel-1.10.12-32.1 References: http://support.novell.com/security/cve/CVE-2015-0559.html http://support.novell.com/security/cve/CVE-2015-0560.html http://support.novell.com/security/cve/CVE-2015-0561.html http://support.novell.com/security/cve/CVE-2015-0562.html http://support.novell.com/security/cve/CVE-2015-0563.html http://support.novell.com/security/cve/CVE-2015-0564.html https://bugzilla.suse.com/show_bug.cgi?id=912365 https://bugzilla.suse.com/show_bug.cgi?id=912368 https://bugzilla.suse.com/show_bug.cgi?id=912369 https://bugzilla.suse.com/show_bug.cgi?id=912370 https://bugzilla.suse.com/show_bug.cgi?id=912372

1 0

openSUSE-RU-2015:0112-1: moderate: Recommended update for spamassassin
by maintenance＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Recommended Update: Recommended update for spamassassin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0112-1 Rating: moderate References: #911355 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for spamassassin fixes the following issue: - Run sa-update before starting service (bnc#911355) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-62 - openSUSE 13.1: zypper in -t patch openSUSE-2015-62 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): perl-Mail-SpamAssassin-3.4.0-44.4.1 perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-44.4.1 spamassassin-3.4.0-44.4.1 spamassassin-debuginfo-3.4.0-44.4.1 spamassassin-debugsource-3.4.0-44.4.1 - openSUSE 13.1 (i586 x86_64): perl-Mail-SpamAssassin-3.3.2-37.8.1 perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-37.8.1 spamassassin-3.3.2-37.8.1 spamassassin-debuginfo-3.3.2-37.8.1 spamassassin-debugsource-3.3.2-37.8.1 References: https://bugzilla.suse.com/show_bug.cgi?id=911355

1 0

openSUSE-SU-2015:0111-1: moderate: Security update for dbus-1
by opensuse-security＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Security Update: Security update for dbus-1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0111-1 Rating: moderate References: #912016 Cross-References: CVE-2012-3524 CVE-2014-8148 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update fixes the following security issues: * CVE-2014-8148: - Do not allow calls to UpdateActivationEnvironment from uids other than the uid of the dbus-daemon. If a system service installs unsafe security policy rules that allow arbitrary method calls (such as CVE-2014-8148) then this prevents memory consumption and possible privilege escalation via UpdateActivationEnvironment. * CVE-2012-3524: Don't access environment variables (bnc#912016) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-50 - openSUSE 13.1: zypper in -t patch openSUSE-2015-50 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): dbus-1-1.8.14-12.2 dbus-1-debuginfo-1.8.14-12.2 dbus-1-debugsource-1.8.14-12.1 dbus-1-devel-1.8.14-12.1 dbus-1-x11-1.8.14-12.2 dbus-1-x11-debuginfo-1.8.14-12.2 dbus-1-x11-debugsource-1.8.14-12.2 libdbus-1-3-1.8.14-12.1 libdbus-1-3-debuginfo-1.8.14-12.1 - openSUSE 13.2 (x86_64): dbus-1-debuginfo-32bit-1.8.14-12.2 dbus-1-devel-32bit-1.8.14-12.1 libdbus-1-3-32bit-1.8.14-12.1 libdbus-1-3-debuginfo-32bit-1.8.14-12.1 - openSUSE 13.2 (noarch): dbus-1-devel-doc-1.8.14-12.2 - openSUSE 13.1 (i586 x86_64): dbus-1-1.8.14-4.32.3 dbus-1-debuginfo-1.8.14-4.32.3 dbus-1-debugsource-1.8.14-4.32.1 dbus-1-devel-1.8.14-4.32.1 dbus-1-x11-1.8.14-4.32.3 dbus-1-x11-debuginfo-1.8.14-4.32.3 dbus-1-x11-debugsource-1.8.14-4.32.3 libdbus-1-3-1.8.14-4.32.1 libdbus-1-3-debuginfo-1.8.14-4.32.1 - openSUSE 13.1 (x86_64): dbus-1-debuginfo-32bit-1.8.14-4.32.3 dbus-1-devel-32bit-1.8.14-4.32.1 libdbus-1-3-32bit-1.8.14-4.32.1 libdbus-1-3-debuginfo-32bit-1.8.14-4.32.1 - openSUSE 13.1 (noarch): dbus-1-devel-doc-1.8.14-4.32.3 References: http://support.novell.com/security/cve/CVE-2012-3524.html http://support.novell.com/security/cve/CVE-2014-8148.html https://bugzilla.suse.com/show_bug.cgi?id=912016

1 0

openSUSE-SU-2015:0110-1: critical: Security update for flash-player
by opensuse-security＠opensuse.org 22 Jan '15

22 Jan '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0110-1 Rating: critical References: #914333 Cross-References: CVE-2015-0310 Affected Products: openSUSE 13.2:NonFree openSUSE 13.1:NonFree ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Adobe Flash Player was updated to 11.2.202.438 to fix one security isssue. http://helpx.adobe.com/security/products/flash-player/apsb15-02.html (APSB15-02, CVE-2015-0310) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2:NonFree: zypper in -t patch openSUSE-2015-49 - openSUSE 13.1:NonFree: zypper in -t patch openSUSE-2015-49 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2:NonFree (i586 x86_64): flash-player-11.2.202.438-2.25.1 flash-player-gnome-11.2.202.438-2.25.1 flash-player-kde4-11.2.202.438-2.25.1 - openSUSE 13.1:NonFree (i586 x86_64): flash-player-11.2.202.438-90.1 flash-player-gnome-11.2.202.438-90.1 flash-player-kde4-11.2.202.438-90.1 References: http://support.novell.com/security/cve/CVE-2015-0310.html https://bugzilla.suse.com/show_bug.cgi?id=914333

1 0

openSUSE-RU-2015:0098-1: moderate: apache2
by maintenance＠opensuse.org 21 Jan '15

21 Jan '15

openSUSE Recommended Update: apache2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0098-1 Rating: moderate References: #859439 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for apache2 fixes the following issues: - boo#859439: Fixed service reload can cause log data to be lost with logrotate under some circumstances. Remove "-t" from service reload. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-47 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (x86_64): apache2-2.4.10-12.1 apache2-debuginfo-2.4.10-12.1 apache2-debugsource-2.4.10-12.1 apache2-devel-2.4.10-12.1 apache2-event-2.4.10-12.1 apache2-event-debuginfo-2.4.10-12.1 apache2-example-pages-2.4.10-12.1 apache2-prefork-2.4.10-12.1 apache2-prefork-debuginfo-2.4.10-12.1 apache2-utils-2.4.10-12.1 apache2-utils-debuginfo-2.4.10-12.1 apache2-worker-2.4.10-12.1 apache2-worker-debuginfo-2.4.10-12.1 - openSUSE 13.2 (noarch): apache2-doc-2.4.10-12.1 apache2-doc-2.4.10-8.1 - openSUSE 13.2 (i586): apache2-2.4.10-8.1 apache2-debuginfo-2.4.10-8.1 apache2-debugsource-2.4.10-8.1 apache2-devel-2.4.10-8.1 apache2-event-2.4.10-8.1 apache2-event-debuginfo-2.4.10-8.1 apache2-example-pages-2.4.10-8.1 apache2-prefork-2.4.10-8.1 apache2-prefork-debuginfo-2.4.10-8.1 apache2-utils-2.4.10-8.1 apache2-utils-debuginfo-2.4.10-8.1 apache2-worker-2.4.10-8.1 apache2-worker-debuginfo-2.4.10-8.1 References: https://bugzilla.suse.com/show_bug.cgi?id=859439

1 0