January 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2015:0043-1: moderate: Security update for gcab
by opensuse-security＠opensuse.org 14 Jan '15

14 Jan '15

openSUSE Security Update: Security update for gcab ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0043-1 Rating: moderate References: #911814 Cross-References: CVE-2015-0552 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes the following security issue: - CVE-2015-0552: Avoid path traversal (boo#911814, bgo#742331, CVE-2015-0552). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-13 - openSUSE 13.1: zypper in -t patch openSUSE-2015-13 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gcab-0.4-4.4.1 gcab-debuginfo-0.4-4.4.1 gcab-debugsource-0.4-4.4.1 gcab-devel-0.4-4.4.1 libgcab-1_0-0-0.4-4.4.1 libgcab-1_0-0-debuginfo-0.4-4.4.1 - openSUSE 13.2 (noarch): gcab-lang-0.4-4.4.1 - openSUSE 13.1 (i586 x86_64): gcab-0.4-2.4.1 gcab-debuginfo-0.4-2.4.1 gcab-debugsource-0.4-2.4.1 gcab-devel-0.4-2.4.1 libgcab-1_0-0-0.4-2.4.1 libgcab-1_0-0-debuginfo-0.4-2.4.1 - openSUSE 13.1 (noarch): gcab-lang-0.4-2.4.1 References: http://support.novell.com/security/cve/CVE-2015-0552.html https://bugzilla.suse.com/show_bug.cgi?id=911814

1 0

openSUSE-SU-2015:0042-1: moderate: Security update for jasper
by opensuse-security＠opensuse.org 14 Jan '15

14 Jan '15

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0042-1 Rating: moderate References: #909474 #909475 Cross-References: CVE-2014-8137 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: The follow issues were fixed with this update: - CVE-2014-8137 double-free in jas_iccattrval_destroy()(bnc#909474) - CVE-2014-8138 heap overflow in jas_decode() (bnc#909475) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-11 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): jasper-1.900.1-160.9.1 jasper-debuginfo-1.900.1-160.9.1 jasper-debugsource-1.900.1-160.9.1 libjasper-devel-1.900.1-160.9.1 libjasper1-1.900.1-160.9.1 libjasper1-debuginfo-1.900.1-160.9.1 - openSUSE 13.1 (x86_64): libjasper1-32bit-1.900.1-160.9.1 libjasper1-debuginfo-32bit-1.900.1-160.9.1 References: http://support.novell.com/security/cve/CVE-2014-8137.html https://bugzilla.suse.com/show_bug.cgi?id=909474 https://bugzilla.suse.com/show_bug.cgi?id=909475

1 0

openSUSE-SU-2015:0041-1: moderate: Security update for libsndfile
by opensuse-security＠opensuse.org 14 Jan '15

14 Jan '15

openSUSE Security Update: Security update for libsndfile ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0041-1 Rating: moderate References: #911796 Cross-References: CVE-2014-9496 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Changes in libsndfile: two buffer read overflows in sd2_parse_rsrc_fork() (CVE-2014-9496, bnc#911796): backported upstream fix patches Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-18 - openSUSE 13.1: zypper in -t patch openSUSE-2015-18 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libsndfile-debugsource-1.0.25-19.4.1 libsndfile-devel-1.0.25-19.4.1 libsndfile-progs-1.0.25-19.4.1 libsndfile-progs-debuginfo-1.0.25-19.4.1 libsndfile-progs-debugsource-1.0.25-19.4.1 libsndfile1-1.0.25-19.4.1 libsndfile1-debuginfo-1.0.25-19.4.1 - openSUSE 13.2 (x86_64): libsndfile1-32bit-1.0.25-19.4.1 libsndfile1-debuginfo-32bit-1.0.25-19.4.1 - openSUSE 13.1 (i586 x86_64): libsndfile-debugsource-1.0.25-17.4.1 libsndfile-devel-1.0.25-17.4.1 libsndfile-progs-1.0.25-17.4.1 libsndfile-progs-debuginfo-1.0.25-17.4.1 libsndfile-progs-debugsource-1.0.25-17.4.1 libsndfile1-1.0.25-17.4.1 libsndfile1-debuginfo-1.0.25-17.4.1 - openSUSE 13.1 (x86_64): libsndfile1-32bit-1.0.25-17.4.1 libsndfile1-debuginfo-32bit-1.0.25-17.4.1 References: http://support.novell.com/security/cve/CVE-2014-9496.html https://bugzilla.suse.com/show_bug.cgi?id=911796

1 0

openSUSE-RU-2015:0040-1: moderate: squidview
by maintenance＠opensuse.org 14 Jan '15

14 Jan '15

openSUSE Recommended Update: squidview ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0040-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for squidview fixes the following issues: - squid result code update Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-16 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): squidview-0.81-2.5.1 squidview-debuginfo-0.81-2.5.1 squidview-debugsource-0.81-2.5.1 References:

1 0

openSUSE-SU-2015:0039-1: moderate: Security update for jasper
by opensuse-security＠opensuse.org 14 Jan '15

14 Jan '15

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0039-1 Rating: moderate References: #909474 #909475 Cross-References: CVE-2014-8137 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: The follow issues were fixed with this update: - CVE-2014-8137 double-free in jas_iccattrval_destroy()(bnc#909474) - CVE-2014-8138 heap overflow in jas_decode() (bnc#909475) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2015-14 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): jasper-1.900.1-156.9.1 jasper-debuginfo-1.900.1-156.9.1 jasper-debugsource-1.900.1-156.9.1 libjasper-devel-1.900.1-156.9.1 libjasper1-1.900.1-156.9.1 libjasper1-debuginfo-1.900.1-156.9.1 - openSUSE 12.3 (x86_64): libjasper1-32bit-1.900.1-156.9.1 libjasper1-debuginfo-32bit-1.900.1-156.9.1 References: http://support.novell.com/security/cve/CVE-2014-8137.html https://bugzilla.suse.com/show_bug.cgi?id=909474 https://bugzilla.suse.com/show_bug.cgi?id=909475

1 0

openSUSE-SU-2015:0038-1: moderate: Security update for jasper
by opensuse-security＠opensuse.org 14 Jan '15

14 Jan '15

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0038-1 Rating: moderate References: #909474 #909475 Cross-References: CVE-2014-8137 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: The follow issues were fixed with this update: - CVE-2014-8137 double-free in jas_iccattrval_destroy()(bnc#909474) - CVE-2014-8138 heap overflow in jas_decode() (bnc#909475) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-12 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): jasper-1.900.1-163.9.1 jasper-debuginfo-1.900.1-163.9.1 jasper-debugsource-1.900.1-163.9.1 libjasper-devel-1.900.1-163.9.1 libjasper1-1.900.1-163.9.1 libjasper1-debuginfo-1.900.1-163.9.1 - openSUSE 13.2 (x86_64): libjasper1-32bit-1.900.1-163.9.1 libjasper1-debuginfo-32bit-1.900.1-163.9.1 References: http://support.novell.com/security/cve/CVE-2014-8137.html https://bugzilla.suse.com/show_bug.cgi?id=909474 https://bugzilla.suse.com/show_bug.cgi?id=909475

1 0

openSUSE-RU-2015:0037-1: moderate: squidview
by maintenance＠opensuse.org 14 Jan '15

14 Jan '15

openSUSE Recommended Update: squidview ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0037-1 Rating: moderate References: Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for squidview fixes the following issues: - Update from version 0.7.9 to 0.8.1 + fix compatibility with syslog + fix squid result code update Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-17 - openSUSE 12.3: zypper in -t patch openSUSE-2015-17 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): squidview-0.81-11.4.1 squidview-debuginfo-0.81-11.4.1 squidview-debugsource-0.81-11.4.1 - openSUSE 12.3 (i586 x86_64): squidview-0.81-9.4.1 squidview-debuginfo-0.81-9.4.1 squidview-debugsource-0.81-9.4.1 References:

1 0

openSUSE-RU-2015:0036-1: moderate: kernel-firmware
by maintenance＠opensuse.org 14 Jan '15

14 Jan '15

openSUSE Recommended Update: kernel-firmware ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0036-1 Rating: moderate References: #906212 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for kernel-firmware fixes the following issue: - Require coreutils for %pre scripts. In some instances (mainly kiwi builds) this package can end up being installed before coreutils, having some errors spit in the %pre phase. - Realtek WiFi and Ethernet updates and Intel BT updates (bnc#906212) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-15 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): kernel-firmware-20141122git-5.1 ucode-amd-20141122git-5.1 References: https://bugzilla.suse.com/show_bug.cgi?id=906212

1 0

openSUSE-RU-2015:0035-1: kdebase4-workspace
by maintenance＠opensuse.org 14 Jan '15

14 Jan '15

openSUSE Recommended Update: kdebase4-workspace ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0035-1 Rating: low References: #772344 Affected Products: openSUSE 13.2 openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for kdebase4-workspace fixes the following issues: - Added patch to fix keyboard input in kdm's dialogs (boo#772344, kde#338018) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-10 - openSUSE 13.1: zypper in -t patch openSUSE-2015-10 - openSUSE 12.3: zypper in -t patch openSUSE-2015-10 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): kde4-kgreeter-plugins-4.11.14-9.1 kde4-kgreeter-plugins-debuginfo-4.11.14-9.1 kdebase4-workspace-4.11.14-9.1 kdebase4-workspace-addons-4.11.14-9.1 kdebase4-workspace-addons-debuginfo-4.11.14-9.1 kdebase4-workspace-branding-upstream-4.11.14-9.1 kdebase4-workspace-debuginfo-4.11.14-9.1 kdebase4-workspace-debugsource-4.11.14-9.1 kdebase4-workspace-devel-4.11.14-9.1 kdebase4-workspace-devel-debuginfo-4.11.14-9.1 kdebase4-workspace-ksysguardd-4.11.14-9.1 kdebase4-workspace-ksysguardd-debuginfo-4.11.14-9.1 kdebase4-workspace-liboxygenstyle-4.11.14-9.1 kdebase4-workspace-liboxygenstyle-debuginfo-4.11.14-9.1 kdebase4-workspace-libs-4.11.14-9.1 kdebase4-workspace-libs-debuginfo-4.11.14-9.1 kdebase4-workspace-plasma-calendar-4.11.14-9.1 kdebase4-workspace-plasma-calendar-debuginfo-4.11.14-9.1 kdm-4.11.14-9.1 kdm-branding-upstream-4.11.14-9.1 kdm-debuginfo-4.11.14-9.1 krandr-4.11.14-9.1 krandr-debuginfo-4.11.14-9.1 kwin-4.11.14-9.1 kwin-debuginfo-4.11.14-9.1 oxygen-cursors4-4.11.14-9.1 python-kdebase4-4.11.14-9.1 - openSUSE 13.2 (x86_64): kdebase4-workspace-liboxygenstyle-32bit-4.11.14-9.1 kdebase4-workspace-liboxygenstyle-debuginfo-32bit-4.11.14-9.1 kdebase4-workspace-libs-32bit-4.11.14-9.1 kdebase4-workspace-libs-debuginfo-32bit-4.11.14-9.1 - openSUSE 13.1 (i586 x86_64): kde4-kgreeter-plugins-4.11.12-123.1 kde4-kgreeter-plugins-debuginfo-4.11.12-123.1 kdebase4-workspace-4.11.12-123.1 kdebase4-workspace-branding-upstream-4.11.12-123.1 kdebase4-workspace-debuginfo-4.11.12-123.1 kdebase4-workspace-debugsource-4.11.12-123.1 kdebase4-workspace-devel-4.11.12-123.1 kdebase4-workspace-devel-debuginfo-4.11.12-123.1 kdebase4-workspace-ksysguardd-4.11.12-123.1 kdebase4-workspace-ksysguardd-debuginfo-4.11.12-123.1 kdebase4-workspace-liboxygenstyle-4.11.12-123.1 kdebase4-workspace-liboxygenstyle-debuginfo-4.11.12-123.1 kdebase4-workspace-plasma-calendar-4.11.12-123.1 kdebase4-workspace-plasma-calendar-debuginfo-4.11.12-123.1 kdm-4.11.12-123.1 kdm-branding-upstream-4.11.12-123.1 kdm-debuginfo-4.11.12-123.1 krandr-4.11.12-123.1 krandr-debuginfo-4.11.12-123.1 kwin-4.11.12-123.1 kwin-debuginfo-4.11.12-123.1 python-kdebase4-4.11.12-123.1 - openSUSE 13.1 (x86_64): kdebase4-workspace-liboxygenstyle-32bit-4.11.12-123.1 kdebase4-workspace-liboxygenstyle-debuginfo-32bit-4.11.12-123.1 - openSUSE 12.3 (i586 x86_64): kde4-kgreeter-plugins-4.10.5-1.123.1 kde4-kgreeter-plugins-debuginfo-4.10.5-1.123.1 kdebase4-workspace-4.10.5-1.123.1 kdebase4-workspace-branding-upstream-4.10.5-1.123.1 kdebase4-workspace-debuginfo-4.10.5-1.123.1 kdebase4-workspace-debugsource-4.10.5-1.123.1 kdebase4-workspace-devel-4.10.5-1.123.1 kdebase4-workspace-devel-debuginfo-4.10.5-1.123.1 kdebase4-workspace-ksysguardd-4.10.5-1.123.1 kdebase4-workspace-ksysguardd-debuginfo-4.10.5-1.123.1 kdebase4-workspace-liboxygenstyle-4.10.5-1.123.1 kdebase4-workspace-liboxygenstyle-debuginfo-4.10.5-1.123.1 kdebase4-workspace-plasma-calendar-4.10.5-1.123.1 kdebase4-workspace-plasma-calendar-debuginfo-4.10.5-1.123.1 kdm-4.10.5-1.123.1 kdm-branding-upstream-4.10.5-1.123.1 kdm-debuginfo-4.10.5-1.123.1 kwin-4.10.5-1.123.1 kwin-debuginfo-4.10.5-1.123.1 python-kdebase4-4.10.5-1.123.1 - openSUSE 12.3 (x86_64): kdebase4-workspace-liboxygenstyle-32bit-4.10.5-1.123.1 kdebase4-workspace-liboxygenstyle-debuginfo-32bit-4.10.5-1.123.1 References: https://bugzilla.suse.com/show_bug.cgi?id=772344

1 0

openSUSE-RU-2015:0034-1: libvisio
by maintenance＠opensuse.org 14 Jan '15

14 Jan '15

openSUSE Recommended Update: libvisio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0034-1 Rating: low References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for libvisio fixes the following issues: - Updates Version to 0.1.1: * Various bugfixes - Remove obsolete patches - Enable testsuite Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-9 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libvisio-0_1-1-0.1.1-2.4.1 libvisio-0_1-1-debuginfo-0.1.1-2.4.1 libvisio-debugsource-0.1.1-2.4.1 libvisio-devel-0.1.1-2.4.1 libvisio-tools-0.1.1-2.4.1 libvisio-tools-debuginfo-0.1.1-2.4.1 - openSUSE 13.2 (noarch): libvisio-devel-doc-0.1.1-2.4.1 References:

1 0