November 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2015:1886-1: used on wotan :)
by opensuse-security＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Security Update: used on wotan :) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1886-1 Rating: low References: Cross-References: CVE-2012-0033 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: used on wotan :) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-361=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): znc-1.6.0-2.1 znc-devel-1.6.0-2.1 znc-perl-1.6.0-2.1 znc-python3-1.6.0-2.1 znc-tcl-1.6.0-2.1 References: https://www.suse.com/security/cve/CVE-2012-0033.html

1 0

openSUSE-OU-2015:1884-1: moderate: Optional update for irssi
by maintenance＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Optional Update: Optional update for irssi ______________________________________________________________________________ Announcement ID: openSUSE-OU-2015:1884-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update brings the terminal IRC client irrsi to the backports project. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-342=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): irssi-0.8.17-2.1 irssi-devel-0.8.17-2.1 References:

1 0

openSUSE-OU-2015:1883-1: Optional update for tmux
by maintenance＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Optional Update: Optional update for tmux ______________________________________________________________________________ Announcement ID: openSUSE-OU-2015:1883-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update brings the terminal multiplexer tmux into the backports project. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-596=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): tmux-2.0-2.1 References:

1 0

openSUSE-RU-2015:1882-1: moderate: Recommended update for znc
by maintenance＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Recommended Update: Recommended update for znc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1882-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: The IRC bouncer znc was updated to 1.6.1: * Fixed the problem that channels were no longer removed from the config despite of chansaver being loaded. * Fixed query buffer size for users who have the default channel buffer size set to 0. * Fixed a startup failure when simple_away was loaded after awaynick. * Fixed channel matching commands, such as DETACH, to be case insensitive. * Specified the required compiler versions in the configure script. * Fixed a rare conflict of HTTP-Basic auth and cookies. * Hid local IP address from the 404 page. * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS. * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC. * Fixed znc-buildmod on Cygwin. * Fixed CThreadPool destructor to handle spurious wakeups. * Fixed make distclean to remove zncconfig.h. * Improved the error message about --datadir. * Fixed a compilation warning when HAVE_LIBSSL is not defined. * Fixed 'comparision' typos in CString documentation. * Added a non-minified version of the jQuery source code to make Linux distributions (Debian) happy, even though the jQuery license does not require this. * chansaver: * Fixed random loading behavior due to an uninitialized member variable. * modpython: * Fixed access to CUser::GetUserClients() and CUser::GetAllClients(). * sasl: * Improved help texts for the SET and REQUIREAUTH commands. (#875) * savebuff: * Fixed periodical writes on the disk when the module is loaded after startup. (#868) * webadmin: * Fixed module checkboxes not to claim that all networks/users have loaded a module when there are no networks/users. (#872) * Added an explanation that ZNC was built without ICU support, when encoding settings are disabled for that reason. * Improved the breadcrumbs. * Mentioned ExpandString in CTCP replies. * Added an explanation how to delete port which is used to access webadmin. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-584=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): znc-1.6.1-5.1 znc-devel-1.6.1-5.1 znc-perl-1.6.1-5.1 znc-python3-1.6.1-5.1 znc-tcl-1.6.1-5.1 References:

1 0

openSUSE-RU-2015:1881-1: moderate: Recommended update for htop
by maintenance＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Recommended Update: Recommended update for htop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1881-1 Rating: moderate References: #440951 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update brings the htop tool version 1.0.3 to the backports channel. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-663=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): htop-1.0.3-2.1 References: https://bugzilla.suse.com/440951

1 0

openSUSE-RU-2015:1880-1: add sshfs
by maintenance＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Recommended Update: add sshfs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1880-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: add sshfs Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-198=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): sshfs-2.5-5.1 sshfs-debuginfo-2.5-5.1 sshfs-debugsource-2.5-5.1 References:

1 0

openSUSE-FU-2015:1879-1: moderate: Add pwgen to SLE 12 backports
by maintenance＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Feature Update: Add pwgen to SLE 12 backports ______________________________________________________________________________ Announcement ID: openSUSE-FU-2015:1879-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 feature fixes can now be installed. Description: pwgen is now available in openSUSE:Backports:SLE-12. It allows the generation of secure passwords that can be easily remembered by humans. Patch Instructions: To install this openSUSE Feature Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-646=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): pwgen-2.07-2.1 References:

1 0

openSUSE-RU-2015:1878-1: moderate: Recommended update for novnc
by maintenance＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Recommended Update: Recommended update for novnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1878-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update provides the novnc (openstack nova vnc) package, a VNC client using HTML5 (Web Sockets, Canvas) with encryption support. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-690=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): novnc-0.5.1-2.1 References:

1 0

openSUSE-SU-2015:1877-1: moderate: Security update for Chromium
by opensuse-security＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1877-1 Rating: moderate References: #931659 #931660 #931661 #931663 #931664 #931665 #931666 #931667 #931668 #931669 #931670 #931671 #931672 #931673 #931674 Cross-References: CVE-2015-1251 CVE-2015-1252 CVE-2015-1253 CVE-2015-1254 CVE-2015-1255 CVE-2015-1256 CVE-2015-1257 CVE-2015-1258 CVE-2015-1259 CVE-2015-1260 CVE-2015-1261 CVE-2015-1262 CVE-2015-1263 CVE-2015-1264 CVE-2015-1265 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: Chromium was updated to 43.0.2357.65 to fix security issues and bugs. The following vulnerabilities were fixed: - CVE-2015-1251: Use-after-free in Speech (boo#931659) - CVE-2015-1252: Sandbox escape in Chrome (boo#931671) - CVE-2015-1253: Cross-origin bypass in DOM (boo#931670) - CVE-2015-1254: Cross-origin bypass in Editing (boo#931669) - CVE-2015-1255: Use-after-free in WebAudio (boo#931674) - CVE-2015-1256: Use-after-free in SVG (boo#931664) - CVE-2015-1257: Container-overflow in SVG (boo#931665) - CVE-2015-1258: Negative-size parameter in Libvpx (boo#931666) - CVE-2015-1259: Uninitialized value in PDFium (boo#931667) - CVE-2015-1260: Use-after-free in WebRTC (boo#931668) - CVE-2015-1261: URL bar spoofing (boo#931673) - CVE-2015-1262: Uninitialized value in Blink (boo#931672) - CVE-2015-1263: Insecure download of spellcheck dictionary (boo#931663) - CVE-2015-1264: Cross-site scripting in bookmarks (boo#931661) - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives (boo#931660) - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-390=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-43.0.2357.65-8.1 chromedriver-debuginfo-43.0.2357.65-8.1 chromium-43.0.2357.65-8.1 chromium-debuginfo-43.0.2357.65-8.1 chromium-debugsource-43.0.2357.65-8.1 chromium-desktop-gnome-43.0.2357.65-8.1 chromium-desktop-kde-43.0.2357.65-8.1 chromium-ffmpegsumo-43.0.2357.65-8.1 chromium-ffmpegsumo-debuginfo-43.0.2357.65-8.1 References: https://www.suse.com/security/cve/CVE-2015-1251.html https://www.suse.com/security/cve/CVE-2015-1252.html https://www.suse.com/security/cve/CVE-2015-1253.html https://www.suse.com/security/cve/CVE-2015-1254.html https://www.suse.com/security/cve/CVE-2015-1255.html https://www.suse.com/security/cve/CVE-2015-1256.html https://www.suse.com/security/cve/CVE-2015-1257.html https://www.suse.com/security/cve/CVE-2015-1258.html https://www.suse.com/security/cve/CVE-2015-1259.html https://www.suse.com/security/cve/CVE-2015-1260.html https://www.suse.com/security/cve/CVE-2015-1261.html https://www.suse.com/security/cve/CVE-2015-1262.html https://www.suse.com/security/cve/CVE-2015-1263.html https://www.suse.com/security/cve/CVE-2015-1264.html https://www.suse.com/security/cve/CVE-2015-1265.html https://bugzilla.suse.com/931659 https://bugzilla.suse.com/931660 https://bugzilla.suse.com/931661 https://bugzilla.suse.com/931663 https://bugzilla.suse.com/931664 https://bugzilla.suse.com/931665 https://bugzilla.suse.com/931666 https://bugzilla.suse.com/931667 https://bugzilla.suse.com/931668 https://bugzilla.suse.com/931669 https://bugzilla.suse.com/931670 https://bugzilla.suse.com/931671 https://bugzilla.suse.com/931672 https://bugzilla.suse.com/931673 https://bugzilla.suse.com/931674

1 0

openSUSE-SU-2015:1876-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1876-1 Rating: important References: #947504 #947507 Cross-References: CVE-2015-1303 CVE-2015-1304 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Chromium was updated to 45.0.2454.101 to fix two security issues. The following vulnerabilities were fixed: * CVE-2015-1303: Cross-origin bypass in DOM [boo#947504] * CVE-2015-1304: Cross-origin bypass in V8 [boo#947507] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-649=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-45.0.2454.101-24.1 chromedriver-debuginfo-45.0.2454.101-24.1 chromium-45.0.2454.101-24.1 chromium-debuginfo-45.0.2454.101-24.1 chromium-debugsource-45.0.2454.101-24.1 chromium-desktop-gnome-45.0.2454.101-24.1 chromium-desktop-kde-45.0.2454.101-24.1 chromium-ffmpegsumo-45.0.2454.101-24.1 chromium-ffmpegsumo-debuginfo-45.0.2454.101-24.1 References: https://www.suse.com/security/cve/CVE-2015-1303.html https://www.suse.com/security/cve/CVE-2015-1304.html https://bugzilla.suse.com/947504 https://bugzilla.suse.com/947507

1 0

openSUSE-SU-2015:1873-1: moderate: Security update for Chromium
by opensuse-security＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1873-1 Rating: moderate References: #944144 Cross-References: CVE-2015-1291 CVE-2015-1292 CVE-2015-1293 CVE-2015-1294 CVE-2015-1295 CVE-2015-1296 CVE-2015-1297 CVE-2015-1298 CVE-2015-1299 CVE-2015-1300 CVE-2015-1301 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: Chromium was updated to the 45.0.2454.85 of the stable channel to fix multiple security issues. The following vulnerabilities were fixed: * CVE-2015-1291: Cross-origin bypass in DOM * CVE-2015-1292: Cross-origin bypass in ServiceWorker * CVE-2015-1293: Cross-origin bypass in DOM * CVE-2015-1294: Use-after-free in Skia * CVE-2015-1295: Use-after-free in Printing * CVE-2015-1296: Character spoofing in omnibox * CVE-2015-1297: Permission scoping error in WebRequest * CVE-2015-1298: URL validation error in extensions * CVE-2015-1299: Use-after-free in Blink * CVE-2015-1300: Information leak in Blink * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-595=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-45.0.2454.85-17.1 chromedriver-debuginfo-45.0.2454.85-17.1 chromium-45.0.2454.85-17.1 chromium-debuginfo-45.0.2454.85-17.1 chromium-debugsource-45.0.2454.85-17.1 chromium-desktop-gnome-45.0.2454.85-17.1 chromium-desktop-kde-45.0.2454.85-17.1 chromium-ffmpegsumo-45.0.2454.85-17.1 chromium-ffmpegsumo-debuginfo-45.0.2454.85-17.1 References: https://www.suse.com/security/cve/CVE-2015-1291.html https://www.suse.com/security/cve/CVE-2015-1292.html https://www.suse.com/security/cve/CVE-2015-1293.html https://www.suse.com/security/cve/CVE-2015-1294.html https://www.suse.com/security/cve/CVE-2015-1295.html https://www.suse.com/security/cve/CVE-2015-1296.html https://www.suse.com/security/cve/CVE-2015-1297.html https://www.suse.com/security/cve/CVE-2015-1298.html https://www.suse.com/security/cve/CVE-2015-1299.html https://www.suse.com/security/cve/CVE-2015-1300.html https://www.suse.com/security/cve/CVE-2015-1301.html https://bugzilla.suse.com/944144

1 0

openSUSE-SU-2015:1872-1: moderate: Security update for chromium
by opensuse-security＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1872-1 Rating: moderate References: #935022 #935723 Cross-References: CVE-2015-1266 CVE-2015-1267 CVE-2015-1268 CVE-2015-1269 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: chromium was updated to 43.0.2357.130 to fix several security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-1266: Scheme validation error in WebUI * CVE-2015-1268: Cross-origin bypass in Blink * CVE-2015-1267: Cross-origin bypass in Blink * CVE-2015-1269: Normalization error in HSTS/HPKP preload list * boo#935022: Prevent Chromium from downloading a binary blob for speech recognition Contains the following non-security changes: * resolved browser font magnification/scaling issue. * Fixed an issue where sometimes a blank page would print * Icons not displaying properly on Linux Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-449=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-43.0.2357.130-14.1 chromedriver-debuginfo-43.0.2357.130-14.1 chromium-43.0.2357.130-14.1 chromium-debuginfo-43.0.2357.130-14.1 chromium-debugsource-43.0.2357.130-14.1 chromium-desktop-gnome-43.0.2357.130-14.1 chromium-desktop-kde-43.0.2357.130-14.1 chromium-ffmpegsumo-43.0.2357.130-14.1 chromium-ffmpegsumo-debuginfo-43.0.2357.130-14.1 References: https://www.suse.com/security/cve/CVE-2015-1266.html https://www.suse.com/security/cve/CVE-2015-1267.html https://www.suse.com/security/cve/CVE-2015-1268.html https://www.suse.com/security/cve/CVE-2015-1269.html https://bugzilla.suse.com/935022 https://bugzilla.suse.com/935723

1 0

openSUSE-RU-2015:1871-1: moderate: Recommended update for fish
by maintenance＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Recommended Update: Recommended update for fish ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1871-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update brings the fish shell to the SLE12 backports. See full changelog of version 2.2.0 on: https://github.com/fish-shell/fish-shell/releases/tag/2.2.0 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-660=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): fish-2.2.0-2.1 References: https://www.suse.com/security/cve/CVE-2014-2905.html https://www.suse.com/security/cve/CVE-2014-2906.html https://www.suse.com/security/cve/CVE-2014-2914.html https://www.suse.com/security/cve/CVE-2014-3219.html https://www.suse.com/security/cve/CVE-2014-3856.html

1 0

openSUSE-RU-2015:1870-1: moderate: Security update for nagstamon
by maintenance＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Recommended Update: Security update for nagstamon ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1870-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This patch provides nagstamon to the SLE-12 backports repository, a nagios status monitor for the desktop. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-689=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): nagstamon-1.0.1-2.1 References:

1 0

openSUSE-RU-2015:1869-1: moderate: Recommended update for wiggle
by maintenance＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Recommended Update: Recommended update for wiggle ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1869-1 Rating: moderate References: #473776 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update brings the tool Wiggle to the SLE 12 backports channel. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-662=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): wiggle-1.0-2.1 References: https://bugzilla.suse.com/473776

1 0

openSUSE-OU-2015:1868-1: Optional update for mumble
by maintenance＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Optional Update: Optional update for mumble ______________________________________________________________________________ Announcement ID: openSUSE-OU-2015:1868-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This patch provides the multiuser voice communication tool mumble. Low-latency, high-quality voice communication for gamers. Includes game linking, so voice from other players comes from the direction of their characters, and has echo cancellation so the sound from your loudspeakers won't be audible to other players. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-209=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): mumble-1.2.8-2.1 mumble-server-1.2.8-2.1 References:

1 0

openSUSE-SU-2015:1867-1: moderate: Security update for Chromium
by opensuse-security＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1867-1 Rating: moderate References: #950290 Cross-References: CVE-2015-6755 CVE-2015-6756 CVE-2015-6757 CVE-2015-6758 CVE-2015-6759 CVE-2015-6760 CVE-2015-6761 CVE-2015-6762 CVE-2015-6763 CVE-2015-6764 CVE-2015-7834 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: Chromium was update do the stable release 46.0.2490.71 to fix security issues. The following vulnerabilities were fixed: * CVE-2015-6755: Cross-origin bypass in Blink * CVE-2015-6756: Use-after-free in PDFium * CVE-2015-6757: Use-after-free in ServiceWorker * CVE-2015-6758: Bad-cast in PDFium * CVE-2015-6759: Information leakage in LocalStorage * CVE-2015-6760: Improper error handling in libANGLE * CVE-2015-6761: Memory corruption in FFMpeg * CVE-2015-6762: CORS bypass via CSS fonts * CVE-2015-6763: Various fixes from internal audits, fuzzing and other initiatives. * CVE-2015-7834: Multiple vulnerabilities in V8 fixed at the tip of the 4.6 branch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-679=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-46.0.2490.71-28.1 chromedriver-debuginfo-46.0.2490.71-28.1 chromium-46.0.2490.71-28.1 chromium-debuginfo-46.0.2490.71-28.1 chromium-debugsource-46.0.2490.71-28.1 chromium-desktop-gnome-46.0.2490.71-28.1 chromium-desktop-kde-46.0.2490.71-28.1 chromium-ffmpegsumo-46.0.2490.71-28.1 chromium-ffmpegsumo-debuginfo-46.0.2490.71-28.1 References: https://www.suse.com/security/cve/CVE-2015-6755.html https://www.suse.com/security/cve/CVE-2015-6756.html https://www.suse.com/security/cve/CVE-2015-6757.html https://www.suse.com/security/cve/CVE-2015-6758.html https://www.suse.com/security/cve/CVE-2015-6759.html https://www.suse.com/security/cve/CVE-2015-6760.html https://www.suse.com/security/cve/CVE-2015-6761.html https://www.suse.com/security/cve/CVE-2015-6762.html https://www.suse.com/security/cve/CVE-2015-6763.html https://www.suse.com/security/cve/CVE-2015-6764.html https://www.suse.com/security/cve/CVE-2015-7834.html https://bugzilla.suse.com/950290

1 0

openSUSE-RU-2015:1866-1: mobile shell (Factory version)
by maintenance＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Recommended Update: mobile shell (Factory version) ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1866-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: mobile shell (Factory version) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-120=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): libprotobuf-lite8-2.5.0-2.1 libprotobuf-lite8-debuginfo-2.5.0-2.1 libprotobuf8-2.5.0-2.1 libprotobuf8-debuginfo-2.5.0-2.1 libprotoc8-2.5.0-2.1 libprotoc8-debuginfo-2.5.0-2.1 mosh-1.2.4-2.1 protobuf-debugsource-2.5.0-2.1 protobuf-devel-2.5.0-2.1 protobuf-devel-debuginfo-2.5.0-2.1 protobuf-java-2.5.0-2.1 python-protobuf-2.5.0-2.1 References:

1 0

openSUSE-RU-2015:1865-1: moderate: Recommended update for ghc, ghc-rpm-macros
by maintenance＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Recommended Update: Recommended update for ghc, ghc-rpm-macros ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1865-1 Rating: moderate References: #711489 #726744 #845572 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update provides a Haskell base stack. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-664=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): ghc-7.10.2-2.1 ghc-Cabal-1.22.4.0-2.1 ghc-Cabal-devel-1.22.4.0-2.1 ghc-array-0.5.1.0-2.1 ghc-array-devel-0.5.1.0-2.1 ghc-base-4.8.1.0-2.1 ghc-base-devel-4.8.1.0-2.1 ghc-binary-0.7.5.0-2.1 ghc-binary-devel-0.7.5.0-2.1 ghc-bootstrap-7.8.3-2.1 ghc-bootstrap-debuginfo-7.8.3-2.1 ghc-bytestring-0.10.6.0-2.1 ghc-bytestring-devel-0.10.6.0-2.1 ghc-compiler-7.10.2-2.1 ghc-containers-0.5.6.2-2.1 ghc-containers-devel-0.5.6.2-2.1 ghc-deepseq-1.4.1.1-2.1 ghc-deepseq-devel-1.4.1.1-2.1 ghc-directory-1.2.2.0-2.1 ghc-directory-devel-1.2.2.0-2.1 ghc-filepath-1.4.0.0-2.1 ghc-filepath-devel-1.4.0.0-2.1 ghc-ghc-7.10.2-2.1 ghc-ghc-devel-7.10.2-2.1 ghc-haskeline-0.7.2.1-2.1 ghc-haskeline-devel-0.7.2.1-2.1 ghc-hoopl-3.10.0.2-2.1 ghc-hoopl-devel-3.10.0.2-2.1 ghc-hpc-0.6.0.2-2.1 ghc-hpc-devel-0.6.0.2-2.1 ghc-libraries-7.10.2-2.1 ghc-pretty-1.1.2.0-2.1 ghc-pretty-devel-1.1.2.0-2.1 ghc-process-1.2.3.0-2.1 ghc-process-devel-1.2.3.0-2.1 ghc-template-haskell-2.10.0.0-2.1 ghc-template-haskell-devel-2.10.0.0-2.1 ghc-terminfo-0.4.0.1-2.1 ghc-terminfo-devel-0.4.0.1-2.1 ghc-time-1.5.0.1-2.1 ghc-time-devel-1.5.0.1-2.1 ghc-transformers-0.4.2.0-2.1 ghc-transformers-devel-0.4.2.0-2.1 ghc-unix-2.7.1.0-2.1 ghc-unix-devel-2.7.1.0-2.1 ghc-xhtml-3000.2.1-2.1 ghc-xhtml-devel-3000.2.1-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): ghc-rpm-macros-1.4.94-2.1 ghc-rpm-macros-extra-1.4.94-2.1 References: https://bugzilla.suse.com/711489 https://bugzilla.suse.com/726744 https://bugzilla.suse.com/845572

1 0

openSUSE-RU-2015:1864-1: moderate: Recommended update for reptyr
by maintenance＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Recommended Update: Recommended update for reptyr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1864-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This patch provides the "reptyr" package to the SLE-12 backports, a program that can change the pseudo terminal of a program and so can put it in the background. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-691=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): reptyr-0.6.2-2.1 References:

1 0

openSUSE-OU-2015:1863-1: moderate: Add Scite to backports
by maintenance＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Optional Update: Add Scite to backports ______________________________________________________________________________ Announcement ID: openSUSE-OU-2015:1863-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: SciTE is a SCIntilla based Text Editor. Originally built to demonstrate Scintilla, it has grown to be a generally useful editor with facilities for building and running programs. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-467=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): scite-3.5.7-2.1 References:

1 0

openSUSE-RU-2015:1862-1: moderate: Recommended update for alpine
by maintenance＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Recommended Update: Recommended update for alpine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1862-1 Rating: moderate References: #342075 #558841 #597744 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This brings the Alpine Mail Client in version 2.20 to the backports repository. The upstream release 2.20 contains the following new features: * Upgrade UW-IMAP to Panda IMAP from github.com/jonabbey/panda-imap * S/MIME: Add screen to manage certificates. * S/MIME: Signatures are validated using the user's certificates instead of the ones included in the message. Behavior can be disabled by disabling the option "Validate Using Certificate Store Only" which is enabled by default. * S/MIME: add the sender certificate to the list of certificates in encrypted messages to make it possible for the sender to decrypt the message they sent. * S/MIME: Forwarding a message will include the signed part as part of the text and not as a multipart message, just as the reply command does. * Add support to selective expunge through a subcommand of the select-apply commands. * Pico: New subcommand of the search command, allows to reverse the direction of search. * Add /tls1, /tls1_1, /tls1_2 and /dtls1 to the definition of a server to use different ways to connect using ssl, for example {server.com/tls1} will attempt to connect to server.com at the ssl imap port (port 993) and establish a connection using TLSv1. These flags can be used in conjunction with the /ssl flag, the ssl flag is redundant. Conversely, however, the /ssl flag does not imply any of these flags; the /ssl flag means SSLv3 or, if not available, SSLv2 in the SSL port. * Alpine does not attempt to automatically reopen a collection that was not opened due to cancellation by the user. Instead, the user must try to open it explicitly. * Experimental: Write the content-type of a message in lowercase, as some non-compliant servers do not understand uppercase content-type. * Opening a folder updates recent count in maildrops (this already works for other types of folders) * Pico: Justification works without need of a predefined quote string. This allows justification of blocks of text that are indented with spaces. * Decode the name of attachment names, so they can be written as part of the description of the part. * Replace tabs by spaces in From and Subject fields to control for size in screen of these fields. Change only in index screen display. - Drop alpine-month_name-utf8.patch (solved differently upstream), drop alpine-mime-type-workaround.patch (merged upstream) - Add lint.diff to workaround new source code problems - The pico and pilot standalone programs have version numbers of their own; expose these in the .spec file - Add alpine-mime-type-workaround.patch: Send mime type in lowercase to work around MUAs that can't cope with upper case mime type strings in the Content-Type header such as the webmailer of GMX. This is a backport from the current development release and will become obsolete with the next version upgrade. - Update to new upstream release 2.11 * Increase encryption of S/MIME encrypted messages. * Pico: Improvements in justification of paragraphs: lines that begin with a quote string, followed by a space were considered individual paragraphs, now they are considered part of a paragraph. * Unix Alpine: Allow local .pinerc file to be a symbolic link. * Experimental extended support of recognition of UTF-8 in urls * Added recognition of ws and wss URIs. * Add ability to color folder names, directory names, and text in the FOLDER SCREEN. * Add the ability to color any token used in the display of the INDEX SCREEN. * New option preserve-original-fields that adds the ability to preserve To: and Cc: fields when replying to a message, as specified by original sender. * Added Quota subcommands for printing, forwarding, saving, etc. - Refresh from homepage (and save as unified): chappa-*.patch - Refresh for -p1: operation-may-be-undefined-warning.diff, fix-implicit.patch, alpine-gcc44.diff - Drop quilt-patches/alpine-2.00-as_needed.patch (merged upstream) - Update to new upstream release 2.10 * Quota report for IMAP folders that support it (press the "@" command in the index screen of such folder). * Search a folder for the content of any header with the ";" command. * Foreign characters are decoded correctly in IMAP folders. * Recognition of proper mime type for docx, xlsx, and pptx files. * When composing a message, Alpine will create a new thread when the subject is erased. - Uncompress patches, since quilt does not like working with them - Remove because merged upstream: chappa-filterflagbug.patch(.gz), chappa-nlinfobug.patch(.gz), chappa-replacebug.patch(.gz), chappa-searchheader.patch(.gz), chappa-streamlock.patch(.gz) - Rediff to clear fuzz: alpine-no-add-needed.patch, pine-nonvoid-function.patch - Remove because no longer applies and total lack of description as per Patch Guidelines: alpine-no-add-needed.patch - Remove old SUSE definitions - Include sys/resource.h for getrlimit. - clean up spec file - Fix two instances of premature closedir() and a potential buffer overflow in the maildir handler (alpine-maildir-closedir.patch). - Fix and extend operation-may-be-undefined-warning.diff (bnc#558841) - Overhaul RPM summary and description. - Month names containing non-ASCII characters were rendered incorrectly in non-UTF8 locales (bnc#597744). - Explicitly set the ssl prefix dir to fix build on ARM. - add libtool as buildrequire to make the spec file more reliable - Remove redundant tags/sections from specfile - Use %_smp_mflags for parallel build - Fix build with no-add-needed - updated patches to apply with fuzz=0 - Included the latest bugfix-patches from Eduardo Chappa: - replacebug: Fix a bug in Pico which makes it not update the screen. - unixnullbug: Fix a bug that makes Alpine crash when opening a unix type folder. - streamlock: Fix a bug that makes Alpine crash when suspending it. - filterflagbug: Fix a bug in Alpine that makes it not to set a flag in a filtered message (bnc#342075). - nlinfobug: Fix a bug in Pico and Pilot that makes them crash for bad locale information. - unverified: Fix a bug that makes Alpine not to give a warning if the Newsgroup header is present - fixed build with --as-needed - fix compilation with gcc44 - lzma is no longer needed for building. - added unistd.h for prototypes - Update to version 2.00 and the related Chappa patches. - Changes include: * Experimental S/MIME support added in UNIX versions of Alpine * Enhance address completion in the composer (TAB command) * Add line wrapping when displaying PRE formatted sections of HTML * Fix a crash when using tab-completion for selecting a Save filename * Fix viewing, printing, exporting, replying, and bouncing of message digests. * The Unknown Character Set option did not work correctly interpreting unknown characters in message headers * Crash when TABing to next folder, the next folder with new mail is a POP folder, and there is a more than 10 minute pause between typing the TAB and typing the Yes - For more details, see: http://www.washington.edu/alpine/changes/1.10-to-2.00.html - fix build - Update to alpine-1.10 and update fixes suggested for this version - Update to alpine-1.00 and apply fixes suggested for this version - Use only select patches from Eduardo (fixes crash in mail reader) - Remove files with unclear license from packaged sources (#308533) - Add small bug fix: Postponed messages which were labelled as UTF-8 - Spec file cleanup: Comments improved, obsoleted some warning flags - Update to final prerelease 0.9999 with updates from Eduardo Chappa - add a number of critcally needed fixes for some crashes (and more) - initial version 0.999 + assorted feature patches and some fixes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-661=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): alpine-2.20-2.1 pico-5.07-2.1 pilot-2.99-2.1 References: https://bugzilla.suse.com/342075 https://bugzilla.suse.com/558841 https://bugzilla.suse.com/597744

1 0

openSUSE-RU-2015:1861-1: moderate: Recommended update for chromium
by maintenance＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Recommended Update: Recommended update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1861-1 Rating: moderate References: #893720 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update includes Chromium into the SUSE Linux Enterprise 12 community build service module. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-299=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-41.0.2272.101-2.1 chromium-41.0.2272.101-2.1 chromium-desktop-gnome-41.0.2272.101-2.1 chromium-desktop-kde-41.0.2272.101-2.1 chromium-ffmpegsumo-41.0.2272.101-2.1 ninja-1.5.3-2.1 ninja-debuginfo-1.5.3-2.1 ninja-debugsource-1.5.3-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): perl-Switch-2.17-2.1 References: https://bugzilla.suse.com/893720

1 0

openSUSE-SU-2015:1855-1: moderate: Security update for VirtualBox
by opensuse-security＠opensuse.org 01 Nov '15

01 Nov '15

openSUSE Security Update: Security update for VirtualBox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1855-1 Rating: moderate References: #951432 Cross-References: CVE-2015-4813 CVE-2015-4896 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: VirtualBox was updated to 4.3.32 to fix security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-4813: Windows guests with guest additions installed could cause a hang or crash of VirtualBox. * CVE-2015-4896: Remote unauthenticated users could cause crash (DoS) via the network when the Remote Display feature (RDP) is enabled. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-688=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): python-virtualbox-4.3.32-32.2 python-virtualbox-debuginfo-4.3.32-32.2 virtualbox-4.3.32-32.2 virtualbox-debuginfo-4.3.32-32.2 virtualbox-debugsource-4.3.32-32.2 virtualbox-devel-4.3.32-32.2 virtualbox-guest-kmp-default-4.3.32_k3.16.7_29-32.2 virtualbox-guest-kmp-default-debuginfo-4.3.32_k3.16.7_29-32.2 virtualbox-guest-kmp-desktop-4.3.32_k3.16.7_29-32.2 virtualbox-guest-kmp-desktop-debuginfo-4.3.32_k3.16.7_29-32.2 virtualbox-guest-tools-4.3.32-32.2 virtualbox-guest-tools-debuginfo-4.3.32-32.2 virtualbox-guest-x11-4.3.32-32.2 virtualbox-guest-x11-debuginfo-4.3.32-32.2 virtualbox-host-kmp-default-4.3.32_k3.16.7_29-32.2 virtualbox-host-kmp-default-debuginfo-4.3.32_k3.16.7_29-32.2 virtualbox-host-kmp-desktop-4.3.32_k3.16.7_29-32.2 virtualbox-host-kmp-desktop-debuginfo-4.3.32_k3.16.7_29-32.2 virtualbox-qt-4.3.32-32.2 virtualbox-qt-debuginfo-4.3.32-32.2 virtualbox-websrv-4.3.32-32.2 virtualbox-websrv-debuginfo-4.3.32-32.2 - openSUSE 13.2 (noarch): virtualbox-guest-desktop-icons-4.3.32-32.2 virtualbox-host-source-4.3.32-32.2 - openSUSE 13.2 (i586): virtualbox-guest-kmp-pae-4.3.32_k3.16.7_29-32.2 virtualbox-guest-kmp-pae-debuginfo-4.3.32_k3.16.7_29-32.2 virtualbox-host-kmp-pae-4.3.32_k3.16.7_29-32.2 virtualbox-host-kmp-pae-debuginfo-4.3.32_k3.16.7_29-32.2 References: https://www.suse.com/security/cve/CVE-2015-4813.html https://www.suse.com/security/cve/CVE-2015-4896.html https://bugzilla.suse.com/951432

1 0