November 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:2122-1: moderate: Recommended update for xf86-video-savage
by maintenance＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Recommended Update: Recommended update for xf86-video-savage ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2122-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for xf86-video-savage fixes the following issues: - Remove u_Include-xf86Modes.h-to-use-functions-from-hw-xfree86.patch after xf86modes.h is included in savage_driver.h since 2.3.8. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-813=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xf86-video-savage-2.3.8-5.1 xf86-video-savage-debuginfo-2.3.8-5.1 xf86-video-savage-debugsource-2.3.8-5.1 References:

1 0

openSUSE-SU-2015:2121-1: moderate: ppp
by opensuse-security＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Security Update: ppp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2121-1 Rating: moderate References: #927841 Cross-References: CVE-2015-3310 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The ppp package was updated to fix one security issue. - CVE-2015-3310: Fixed buffer overflow in radius plug-ins rc_mksid() (bnc#927841). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-827=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-827=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-827=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ppp-2.4.7-5.1 ppp-debuginfo-2.4.7-5.1 ppp-debugsource-2.4.7-5.1 ppp-devel-2.4.7-5.1 - openSUSE 13.2 (i586 x86_64): ppp-2.4.7-2.3.1 ppp-debuginfo-2.4.7-2.3.1 ppp-debugsource-2.4.7-2.3.1 ppp-devel-2.4.7-2.3.1 - openSUSE 13.1 (i586 x86_64): ppp-2.4.7-20.7.1 ppp-debuginfo-2.4.7-20.7.1 ppp-debugsource-2.4.7-20.7.1 ppp-devel-2.4.7-20.7.1 References: https://www.suse.com/security/cve/CVE-2015-3310.html https://bugzilla.suse.com/927841

1 0

openSUSE-SU-2015:2120-1: moderate: Security update for ffmpeg
by opensuse-security＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Security Update: Security update for ffmpeg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2120-1 Rating: moderate References: #955346 #955347 #955348 #955350 Cross-References: CVE-2015-8216 CVE-2015-8217 CVE-2015-8218 CVE-2015-8219 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: The ffmpeg package was updated to version 2.8.2 to fix the following security and non security issues: - CVE-2015-8216: Fixed the ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c which could cause a denial of service (out-of-bounds array access) (bnc#955346). - CVE-2015-8217: Fixed the ff_hevc_parse_sps function in libavcodec/hevc_ps.c which could cause a denial of service (out-of-bounds array access) (bnc#955347). - CVE-2015-8218: Fixed the decode_uncompressed function in libavcodec/faxcompr.c which could cause a denial of service (out-of-bounds array access) (bnc#955348). - CVE-2015-8219: Fixed the init_tile function in libavcodec/jpeg2000dec.c which could cause a denial of service (out-of-bounds array access) (bnc#955350). - Update to new upstream release 2.8.2 * various fixes in the aac_fixed decoder * various fixes in softfloat * swresample/resample: increase precision for compensation * lavf/mov: add support for sidx fragment indexes * avformat/mxfenc: Only store user comment related tags when needed * ffmpeg: Don't try and write sdp info if none of the outputs had an rtp format. * apng: use correct size for output buffer * jvdec: avoid unsigned overflow in comparison * avcodec/jpeg2000dec: Clip all tile coordinates * avcodec/microdvddec: Check for string end in 'P' case * avcodec/dirac_parser: Fix undefined memcpy() use * avformat/xmv: Discard remainder of packet on error * avformat/xmv: factor return check out of if/else * avcodec/mpeg12dec: Do not call show_bits() with invalid bits * avcodec/faxcompr: Add missing runs check in decode_uncompressed() * libavutil/channel_layout: Check strtol*() for failure * avformat/mpegts: Only start probing data streams within probe_packets * avcodec/hevc_ps: Check chroma_format_idc * avcodec/ffv1dec: Check for 0 quant tables * avcodec/mjpegdec: Reinitialize IDCT on BPP changes * avcodec/mjpegdec: Check index in ljpeg_decode_yuv_scan() before using it * avcodec/h264_slice: Disable slice threads if there are multiple access units in a packet * avformat/hls: update cookies on setcookie response * opusdec: Don't run vector_fmul_scalar on zero length arrays * avcodec/opusdec: Fix extra samples read index * avcodec/ffv1: Initialize vlc_state on allocation * avcodec/ffv1dec: update progress in case of broken pointer chains * avcodec/ffv1dec: Clear slice coordinates if they are invalid or slice header decoding fails for other reasons * rtsp: Allow $ as interleaved packet indicator before a complete response header * videodsp: don't overread edges in vfix3 emu_edge. * avformat/mp3dec: improve junk skipping heuristic * concatdec: fix file_start_time calculation regression * avcodec: loongson optimize h264dsp idct and loop filter with mmi * avcodec/jpeg2000dec: Clear properties in jpeg2000_dec_cleanup() too * avformat/hls: add support for EXT-X-MAP * avformat/hls: fix segment selection regression on track changes of live streams * configure: Require libkvazaar < 0.7. * avcodec/vp8: Do not use num_coeff_partitions in thread/buffer setup - Drop ffmpeg-mov-sidx-fragment.patch, fixed upstream. - Update to new upstream release 2.8.1 * Minor bugfix release * Includes all changes from. Ffmpeg-mt, libav master of 2015-08-28, libav 11 as of 2015-08-28 - Add ffmpeg-mov-sidx-fragment.patch to add sidx fragment indexes. Needed for new mpv release. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-821=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ffmpeg-2.8.2-3.1 ffmpeg-debuginfo-2.8.2-3.1 ffmpeg-debugsource-2.8.2-3.1 ffmpeg-devel-2.8.2-3.1 libavcodec-devel-2.8.2-3.1 libavcodec56-2.8.2-3.1 libavcodec56-debuginfo-2.8.2-3.1 libavdevice-devel-2.8.2-3.1 libavdevice56-2.8.2-3.1 libavdevice56-debuginfo-2.8.2-3.1 libavfilter-devel-2.8.2-3.1 libavfilter5-2.8.2-3.1 libavfilter5-debuginfo-2.8.2-3.1 libavformat-devel-2.8.2-3.1 libavformat56-2.8.2-3.1 libavformat56-debuginfo-2.8.2-3.1 libavresample-devel-2.8.2-3.1 libavresample2-2.8.2-3.1 libavresample2-debuginfo-2.8.2-3.1 libavutil-devel-2.8.2-3.1 libavutil54-2.8.2-3.1 libavutil54-debuginfo-2.8.2-3.1 libpostproc-devel-2.8.2-3.1 libpostproc53-2.8.2-3.1 libpostproc53-debuginfo-2.8.2-3.1 libswresample-devel-2.8.2-3.1 libswresample1-2.8.2-3.1 libswresample1-debuginfo-2.8.2-3.1 libswscale-devel-2.8.2-3.1 libswscale3-2.8.2-3.1 libswscale3-debuginfo-2.8.2-3.1 - openSUSE Leap 42.1 (x86_64): libavcodec56-32bit-2.8.2-3.1 libavcodec56-debuginfo-32bit-2.8.2-3.1 libavdevice56-32bit-2.8.2-3.1 libavdevice56-debuginfo-32bit-2.8.2-3.1 libavfilter5-32bit-2.8.2-3.1 libavfilter5-debuginfo-32bit-2.8.2-3.1 libavformat56-32bit-2.8.2-3.1 libavformat56-debuginfo-32bit-2.8.2-3.1 libavresample2-32bit-2.8.2-3.1 libavresample2-debuginfo-32bit-2.8.2-3.1 libavutil54-32bit-2.8.2-3.1 libavutil54-debuginfo-32bit-2.8.2-3.1 libpostproc53-32bit-2.8.2-3.1 libpostproc53-debuginfo-32bit-2.8.2-3.1 libswresample1-32bit-2.8.2-3.1 libswresample1-debuginfo-32bit-2.8.2-3.1 libswscale3-32bit-2.8.2-3.1 libswscale3-debuginfo-32bit-2.8.2-3.1 References: https://www.suse.com/security/cve/CVE-2015-8216.html https://www.suse.com/security/cve/CVE-2015-8217.html https://www.suse.com/security/cve/CVE-2015-8218.html https://www.suse.com/security/cve/CVE-2015-8219.html https://bugzilla.suse.com/955346 https://bugzilla.suse.com/955347 https://bugzilla.suse.com/955348 https://bugzilla.suse.com/955350

1 0

openSUSE-SU-2015:2119-1: moderate: Security update for libsndfile
by opensuse-security＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Security Update: Security update for libsndfile ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2119-1 Rating: moderate References: #953516 #953519 #953521 Cross-References: CVE-2014-9756 CVE-2015-7805 CVE-2015-8075 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: The libsndfile package was updated to fix the following security issue: - CVE-2014-9756: Fixed a divide by zero problem that can lead to a Denial of Service (DoS) (bsc#953521). - CVE-2015-7805: Fixed heap overflow issue (bsc#953516). - CVE-2015-8075: Fixed heap overflow issue (bsc#953519). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-820=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libsndfile-debugsource-1.0.25-24.1 libsndfile-devel-1.0.25-24.1 libsndfile-progs-1.0.25-24.1 libsndfile-progs-debuginfo-1.0.25-24.1 libsndfile-progs-debugsource-1.0.25-24.1 libsndfile1-1.0.25-24.1 libsndfile1-debuginfo-1.0.25-24.1 - openSUSE Leap 42.1 (x86_64): libsndfile1-32bit-1.0.25-24.1 libsndfile1-debuginfo-32bit-1.0.25-24.1 References: https://www.suse.com/security/cve/CVE-2014-9756.html https://www.suse.com/security/cve/CVE-2015-7805.html https://www.suse.com/security/cve/CVE-2015-8075.html https://bugzilla.suse.com/953516 https://bugzilla.suse.com/953519 https://bugzilla.suse.com/953521

1 0

openSUSE-RU-2015:2118-1: moderate: Recommended update for acl
by maintenance＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Recommended Update: Recommended update for acl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2118-1 Rating: moderate References: #945899 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for acl provides the following fixes: - Fix segmentation fault of getfacl -e on overly long group name. - Make sure that acl_from_text() always sets errno when it fails. - Fix memory and resource leaks in getfacl. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-818=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): acl-2.2.52-8.1 acl-debuginfo-2.2.52-8.1 acl-debugsource-2.2.52-8.1 libacl-devel-2.2.52-8.1 libacl1-2.2.52-8.1 libacl1-debuginfo-2.2.52-8.1 - openSUSE Leap 42.1 (x86_64): libacl-devel-32bit-2.2.52-8.1 libacl1-32bit-2.2.52-8.1 libacl1-debuginfo-32bit-2.2.52-8.1 References: https://bugzilla.suse.com/945899

1 0

openSUSE-RU-2015:2107-1: Recommended update for tgt
by maintenance＠opensuse.org 25 Nov '15

25 Nov '15

openSUSE Recommended Update: Recommended update for tgt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2107-1 Rating: low References: #950946 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tgt improves integration with SystemD. The tgt daemon will now inform SystemD after it finishes its initialization procedure. This ensures that other services which depend on iSCSI targets will be started only after tgtd is ready. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-808=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): tgt-1.0.44-8.1 tgt-debuginfo-1.0.44-8.1 tgt-debugsource-1.0.44-8.1 References: https://bugzilla.suse.com/950946

1 0

openSUSE-RU-2015:2106-1: moderate: Recommended update for docker
by maintenance＠opensuse.org 25 Nov '15

25 Nov '15

openSUSE Recommended Update: Recommended update for docker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2106-1 Rating: moderate References: #954737 #954812 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: Docker was updated to version 1.9.0, bringing features and bugfixes (bnc#954812): * Runtime: - `docker stats` now returns block IO metrics (#15005) - `docker stats` now details network stats per interface (#15786) - Add `ancestor=<image>` filter to `docker ps --filter` flag to filter containers based on their ancestor images (#14570) - Add `label=<somelabel>` filter to `docker ps --filter` to filter containers based on label (#16530) - Add `--kernel-memory` flag to `docker run` (#14006) - Add `--message` flag to `docker import` allowing to specify an optional message (#15711) - Add `--privileged` flag to `docker exec` (#14113) - Add `--stop-signal` flag to `docker run` allowing to replace the container process stopping signal (#15307) - Add a new `unless-stopped` restart policy (#15348) - Inspecting an image now returns tags (#13185) - Add container size information to `docker inspect` (#15796) - Add `RepoTags` and `RepoDigests` field to `/images/{name:.*}/json` (#17275) - Remove the deprecated `/container/ps` endpoint from the API (#15972) - Send and document correct HTTP codes for `/exec/<name>/start` (#16250) - Share shm and mqueue between containers sharing IPC namespace (#15862) - Event stream now shows OOM status when `--oom-kill-disable` is set (#16235) - Ensure special network files (/etc/hosts etc.) are read-only if bind-mounted with `ro` option (#14965) - Improve `rmi` performance (#16890) - Do not update /etc/hosts for the default bridge network, except for links (#17325) - Fix conflict with duplicate container names (#17389) - Fix an issue with incorrect template execution in `docker inspect` (#17284) - DEPRECATE `-c` short flag variant for `--cpu-shares` in docker run (#16271) * Client: - Allow `docker import` to import from local files (#11907) * Builder: - Add a `STOPSIGNAL` Dockerfile instruction allowing to set a different stop-signal for the container process (#15307) - Add an `ARG` Dockerfile instruction and a `--build-arg` flag to `docker build` that allows to add build-time environment variables (#15182) - Improve cache miss performance (#16890) * Storage: - devicemapper: Implement deferred deletion capability (#16381) * Networking: - `docker network` exits experimental and is part of standard release (#16645) - New network top-level concept, with associated subcommands and API (#16645) WARNING: the API is different from the experimental API - Support for multiple isolated/micro-segmented networks (#16645) - Built-in multihost networking using VXLAN based overlay driver (#14071) - Support for third-party network plugins (#13424) - Ability to dynamically connect containers to multiple networks (#16645) - Support for user-defined IP address management via pluggable IPAM drivers (#16910) - Add daemon flags `--cluster-store` and `--cluster-advertise` for built-in nodes discovery (#16229) - Add `--cluster-store-opt` for setting up TLS settings (#16644) - Add `--dns-opt` to the daemon (#16031) - DEPRECATE following container `NetworkSettings` fields in API v1.21: `EndpointID`, `Gateway`, `GlobalIPv6Address`, `GlobalIPv6PrefixLen`, `IPAddress`, `IPPrefixLen`, `IPv6Gateway` and `MacAddress`. Those are now specific to the `bridge` network. Use `NetworkSettings.Networks` to inspect the networking settings of a container per network. * Volumes: - New top-level `volume` subcommand and API (#14242) - Move API volume driver settings to host-specific config (#15798) - Print an error message if volume name is not unique (#16009) - Ensure volumes created from Dockerfiles always use the local volume driver (#15507) - DEPRECATE auto-creating missing host paths for bind mounts (#16349) * Logging: - Add `awslogs` logging driver for Amazon CloudWatch (#15495) - Add generic `tag` log option to allow customizing container/image information passed to driver (e.g. show container names) (#15384) - Implement the `docker logs` endpoint for the journald driver (#13707) - DEPRECATE driver-specific log tags (e.g. `syslog-tag`, etc.) (#15384) * Distribution: - `docker search` now works with partial names (#16509) - Push optimization: avoid buffering to file (#15493) - The daemon will display progress for images that were already being pulled by another client (#15489) - Only permissions required for the current action being performed are requested (#) - Renaming trust keys (and respective environment variables) from `offline` to `root` and `tagging` to `repository` (#16894) - DEPRECATE trust key environment variables `DOCKER_CONTENT_TRUST_OFFLINE_PASSPHRASE` and `DOCKER_CONTENT_TRUST_TAGGING_PASSPHRASE` (#16894) * Security: - Add SELinux profiles to the rpm package (#15832) - Fix various issues with AppArmor profiles provided in the deb package (#14609) - Add AppArmor policy that prevents writing to /proc (#15571) * Change systemd unit file to no longer use the deprecated "-d" option (bnc#954737) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-807=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (x86_64): docker-1.9.0-46.1 docker-debuginfo-1.9.0-46.1 docker-debugsource-1.9.0-46.1 - openSUSE 13.2 (noarch): docker-bash-completion-1.9.0-46.1 docker-test-1.9.0-46.1 docker-zsh-completion-1.9.0-46.1 References: https://bugzilla.suse.com/954737 https://bugzilla.suse.com/954812

1 0

openSUSE-RU-2015:2105-1: moderate: Recommended update for frei0r-plugins and libmlt
by maintenance＠opensuse.org 25 Nov '15

25 Nov '15

openSUSE Recommended Update: Recommended update for frei0r-plugins and libmlt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2105-1 Rating: moderate References: #930616 #954841 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for frei0r-plugins and libmlt fixes the following issues: - frei0r-plugins: + Build against opencv-qt5-devel on Leap as well, Leap comes with the KF5/Qt5 based kdenlive (boo#930616) - libmlt: + Build against Qt5 on Leap as well, the included kdenlive 15.08.1 (which is KF5/Qt5 based) will crash on startup otherwise (boo#930616) - Restore pkgconfig(libavdevice), multiple providers should be solved with Prefer: pkg in prjconf - Build with ffmpeg on Leap and Tumbleweed by default to make it a bit more useful (boo#954841) - Replace pkgconfig(libavdevice) BuildRequires with libavdevice-devel to prevent an unresolveable choice between that and libavdevice-libav-devel - Build against Qt5 on Leap as well, the included kdenlive 15.08.1 (which is KF5/Qt5 based) will crash on startup otherwise (boo#930616) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-804=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): frei0r-plugins-1.4-7.1 frei0r-plugins-debuginfo-1.4-7.1 frei0r-plugins-debugsource-1.4-7.1 frei0r-plugins-devel-1.4-7.1 libmlt++-devel-0.9.8-7.1 libmlt++3-0.9.8-7.1 libmlt++3-debuginfo-0.9.8-7.1 libmlt-debugsource-0.9.8-7.1 libmlt-devel-0.9.8-7.1 libmlt6-0.9.8-7.1 libmlt6-debuginfo-0.9.8-7.1 libmlt6-modules-0.9.8-7.1 libmlt6-modules-debuginfo-0.9.8-7.1 melt-0.9.8-7.1 melt6-0.9.8-7.1 melt6-debuginfo-0.9.8-7.1 python-mlt-0.9.8-7.1 python-mlt-debuginfo-0.9.8-7.1 - openSUSE Leap 42.1 (noarch): libmlt6-data-0.9.8-7.1 References: https://bugzilla.suse.com/930616 https://bugzilla.suse.com/954841

1 0

openSUSE-RU-2015:2104-1: moderate: Recommended update for ruby-common
by maintenance＠opensuse.org 25 Nov '15

25 Nov '15

openSUSE Recommended Update: Recommended update for ruby-common ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2104-1 Rating: moderate References: #934328 #953771 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ruby-common provides several fixes and enhancements: - Help the solver to pick the right gem2rpm for the default Ruby version. (bsc#934328) - Fix premature return from from gem install. - Fail early if gem install fails, avoiding confusing error messages at the end of the build. - Implement cleaner solution for the extensions doc dir. - Do not overwrite options.otheropts. - Fixed forwarding of options to gem install. - Call ruby with -x from shell wrappers otherwise it might run into an endless loop. - Add shell-launcher to avoid dependency on a fixed Ruby version. - Ignore any files found in */.gem/*. In some versions of rubygems, gems that are installed are also copied to ~/.gem/. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-809=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): ruby-common-2.1-5.1 References: https://bugzilla.suse.com/934328 https://bugzilla.suse.com/953771

1 0

openSUSE-SU-2015:2103-1: moderate: Security update for strongswan
by opensuse-security＠opensuse.org 25 Nov '15

25 Nov '15

openSUSE Security Update: Security update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2103-1 Rating: moderate References: #953817 Cross-References: CVE-2015-8023 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The strongswan package was updated to fix the following security issue: - CVE-2015-8023: Fixed an authentication bypass vulnerability in the eap-mschapv2 plugin (bsc#953817). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-810=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-810=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-810=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): strongswan-5.2.2-7.1 strongswan-debugsource-5.2.2-7.1 strongswan-hmac-5.2.2-7.1 strongswan-ipsec-5.2.2-7.1 strongswan-ipsec-debuginfo-5.2.2-7.1 strongswan-libs0-5.2.2-7.1 strongswan-libs0-debuginfo-5.2.2-7.1 strongswan-mysql-5.2.2-7.1 strongswan-mysql-debuginfo-5.2.2-7.1 strongswan-nm-5.2.2-7.1 strongswan-nm-debuginfo-5.2.2-7.1 strongswan-sqlite-5.2.2-7.1 strongswan-sqlite-debuginfo-5.2.2-7.1 - openSUSE Leap 42.1 (noarch): strongswan-doc-5.2.2-7.1 - openSUSE 13.2 (i586 x86_64): strongswan-5.1.3-4.14.1 strongswan-debugsource-5.1.3-4.14.1 strongswan-ipsec-5.1.3-4.14.1 strongswan-ipsec-debuginfo-5.1.3-4.14.1 strongswan-libs0-5.1.3-4.14.1 strongswan-libs0-debuginfo-5.1.3-4.14.1 strongswan-mysql-5.1.3-4.14.1 strongswan-mysql-debuginfo-5.1.3-4.14.1 strongswan-nm-5.1.3-4.14.1 strongswan-nm-debuginfo-5.1.3-4.14.1 strongswan-sqlite-5.1.3-4.14.1 strongswan-sqlite-debuginfo-5.1.3-4.14.1 - openSUSE 13.2 (noarch): strongswan-doc-5.1.3-4.14.1 - openSUSE 13.1 (i586 x86_64): strongswan-5.1.1-14.1 strongswan-debugsource-5.1.1-14.1 strongswan-ipsec-5.1.1-14.1 strongswan-ipsec-debuginfo-5.1.1-14.1 strongswan-libs0-5.1.1-14.1 strongswan-libs0-debuginfo-5.1.1-14.1 strongswan-mysql-5.1.1-14.1 strongswan-mysql-debuginfo-5.1.1-14.1 strongswan-nm-5.1.1-14.1 strongswan-nm-debuginfo-5.1.1-14.1 strongswan-sqlite-5.1.1-14.1 strongswan-sqlite-debuginfo-5.1.1-14.1 - openSUSE 13.1 (noarch): strongswan-doc-5.1.1-14.1 References: https://www.suse.com/security/cve/CVE-2015-8023.html https://bugzilla.suse.com/953817

1 0

openSUSE-RU-2015:2102-1: moderate: Recommended update for libstorage
by maintenance＠opensuse.org 25 Nov '15

25 Nov '15

openSUSE Recommended Update: Recommended update for libstorage ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2102-1 Rating: moderate References: #937215 #946673 #948247 #948539 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: libstorage was updated to fix several bugs: - repeat the btrfs file system detection when a race condition in the "btrfs" command is detected (bsc#948247) - Added --zero=y --yes to 'lvcreate' call to prevent interactive prompt (bsc#948539) - detect corrupt backup GPT in parted output (see bsc#946673) - skip checks on qemu user mode builds (bsc#937215) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-805=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libstorage-debugsource-2.25.35-3.1 libstorage-devel-2.25.35-3.1 libstorage-python-2.25.35-3.1 libstorage-python-debuginfo-2.25.35-3.1 libstorage-ruby-2.25.35-3.1 libstorage-ruby-debuginfo-2.25.35-3.1 libstorage-testsuite-2.25.35-3.1 libstorage-testsuite-debuginfo-2.25.35-3.1 libstorage6-2.25.35-3.1 libstorage6-debuginfo-2.25.35-3.1 References: https://bugzilla.suse.com/937215 https://bugzilla.suse.com/946673 https://bugzilla.suse.com/948247 https://bugzilla.suse.com/948539

1 0

openSUSE-RU-2015:2101-1: Recommended update for apache2
by maintenance＠opensuse.org 25 Nov '15

25 Nov '15

openSUSE Recommended Update: Recommended update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2101-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: Apache2 was updated with bugfixes from SUSE Linux Enterprise: - LogLevel directive into correct config file, thanks Michael Calmer for the fix [bsc#953329] (internal) - Include directives really into /etc/apache2/sysconfig.d/include.conf, fix from Erik Wegner [bsc#951901] Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-806=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): apache2-2.4.16-9.1 apache2-debuginfo-2.4.16-9.1 apache2-debugsource-2.4.16-9.1 apache2-devel-2.4.16-9.1 apache2-event-2.4.16-9.1 apache2-event-debuginfo-2.4.16-9.1 apache2-example-pages-2.4.16-9.1 apache2-prefork-2.4.16-9.1 apache2-prefork-debuginfo-2.4.16-9.1 apache2-utils-2.4.16-9.1 apache2-utils-debuginfo-2.4.16-9.1 apache2-worker-2.4.16-9.1 apache2-worker-debuginfo-2.4.16-9.1 - openSUSE Leap 42.1 (noarch): apache2-doc-2.4.16-9.1 References:

1 0

openSUSE-SU-2015:2100-1: important: Security update for libpng16
by opensuse-security＠opensuse.org 25 Nov '15

25 Nov '15

openSUSE Security Update: Security update for libpng16 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2100-1 Rating: important References: #954980 Cross-References: CVE-2015-8126 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The libpng16 package was updated to fix the following security issues: - CVE-2015-8126: Fixed a buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions (bsc#954980). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-801=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-801=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libpng16-16-1.6.13-2.7.1 libpng16-16-debuginfo-1.6.13-2.7.1 libpng16-compat-devel-1.6.13-2.7.1 libpng16-debugsource-1.6.13-2.7.1 libpng16-devel-1.6.13-2.7.1 libpng16-tools-1.6.13-2.7.1 libpng16-tools-debuginfo-1.6.13-2.7.1 - openSUSE 13.2 (x86_64): libpng16-16-32bit-1.6.13-2.7.1 libpng16-16-debuginfo-32bit-1.6.13-2.7.1 libpng16-compat-devel-32bit-1.6.13-2.7.1 libpng16-devel-32bit-1.6.13-2.7.1 - openSUSE 13.1 (i586 x86_64): libpng16-16-1.6.6-19.1 libpng16-16-debuginfo-1.6.6-19.1 libpng16-compat-devel-1.6.6-19.1 libpng16-debugsource-1.6.6-19.1 libpng16-devel-1.6.6-19.1 libpng16-tools-1.6.6-19.1 libpng16-tools-debuginfo-1.6.6-19.1 - openSUSE 13.1 (x86_64): libpng16-16-32bit-1.6.6-19.1 libpng16-16-debuginfo-32bit-1.6.6-19.1 libpng16-compat-devel-32bit-1.6.6-19.1 libpng16-devel-32bit-1.6.6-19.1 References: https://www.suse.com/security/cve/CVE-2015-8126.html https://bugzilla.suse.com/954980

1 0

openSUSE-SU-2015:2099-1: important: Security update for libpng12
by opensuse-security＠opensuse.org 25 Nov '15

25 Nov '15

openSUSE Security Update: Security update for libpng12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2099-1 Rating: important References: #952051 #954980 Cross-References: CVE-2015-7981 CVE-2015-8126 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The libpng12 package was updated to fix the following security issues: - CVE-2015-8126: Fixed a buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions (bsc#954980). - CVE-2015-7981: Fixed an out-of-bound read (bsc#952051). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-802=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-802=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libpng12-0-1.2.51-3.3.1 libpng12-0-debuginfo-1.2.51-3.3.1 libpng12-compat-devel-1.2.51-3.3.1 libpng12-debugsource-1.2.51-3.3.1 libpng12-devel-1.2.51-3.3.1 - openSUSE 13.2 (x86_64): libpng12-0-32bit-1.2.51-3.3.1 libpng12-0-debuginfo-32bit-1.2.51-3.3.1 libpng12-compat-devel-32bit-1.2.51-3.3.1 libpng12-devel-32bit-1.2.51-3.3.1 - openSUSE 13.1 (i586 x86_64): libpng12-0-1.2.50-6.7.1 libpng12-0-debuginfo-1.2.50-6.7.1 libpng12-compat-devel-1.2.50-6.7.1 libpng12-debugsource-1.2.50-6.7.1 libpng12-devel-1.2.50-6.7.1 - openSUSE 13.1 (x86_64): libpng12-0-32bit-1.2.50-6.7.1 libpng12-0-debuginfo-32bit-1.2.50-6.7.1 libpng12-compat-devel-32bit-1.2.50-6.7.1 libpng12-devel-32bit-1.2.50-6.7.1 References: https://www.suse.com/security/cve/CVE-2015-7981.html https://www.suse.com/security/cve/CVE-2015-8126.html https://bugzilla.suse.com/952051 https://bugzilla.suse.com/954980

1 0

openSUSE-RU-2015:2098-1: Recommended update for virtualbox
by maintenance＠opensuse.org 25 Nov '15

25 Nov '15

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2098-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update provides version 5.0.10 for virtualbox: - Version bump to VirtualBox 5.0.10 (released 2015-11-10 by Oracle) This is a maintenance release. The following items were fixed and/or added: VMM: improved support for certain Intel Atom CPUs (bug #14773) VMM: system register emulation fix (5.0 regression; bug #14515) GUI: fixed immediate screenshot issue (bug #14108) GUI: fixed another 3D overlay window reparenting issue when the VM is switched to fullscreen mode on X11 hosts GUI: fixed help index (bug #14722) GUI: fixed state synchronization issue in the VM manager window when VM was paused from its runtime window Audio: fixed suspending/resuming audio streams on VM pause/unpause (bug #14784) Audio: properly reset AC97 audio streams, otherwise there is silence until a non-48 kHz stream is played Audio: fixed a small emulation quirk of the AD1980 codec of the HDA device to make recent linux guests work (bug #14653) USB: serveral fixes for the xHCI controller USB: fixed a crash under certain conditions on hosts with Linux kernels older than version 3.3 USB: better identification of certain USB devices NAT: support TCP in DNS proxy (bug #14736) NAT Network: fixed sporadic crashes on Windows hosts (bug #13899) API: when creating differencing images (e.g. as part of a snapshot or cloning a VM) use the same disk image variant as the parent image if possible, which means that e.g. a diff image for a VMDK image split into 2 GB files will also be split (bug #14764) API: event queue handling fixes preventing loss of certain events at runtime (e.g. new webcam attached), particularly important on Mac OS X hosts Webcam: passthrough fix for certain devices (Windows hosts only) VBoxManage: don't crash on snapshot restorecurrent / edit if the VM has no snapshots VBoxManage: don't crash on controlvm addencpassword (bug #14729) Mac OS X hosts: use the correct kernel on certain hosts Windows hosts: fixed VRDP external authentication Windows hosts: allow to use a shared folder path with extended-length path prefix (5.0 regression; bug #14651) Windows hosts: fix a crash in the netfilter host driver under certain conditions (bug #14799) Windows host installer: documented and fixed public properties which can be used to control the installation to some extent Windows host installer: fixed not starting the actual installation when showing the version information or help dialogs X11 Additions: added basic support for X.Org Server 1.18 (3D requires additional fixes) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-800=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): python-virtualbox-5.0.10-10.1 python-virtualbox-debuginfo-5.0.10-10.1 virtualbox-5.0.10-10.1 virtualbox-debuginfo-5.0.10-10.1 virtualbox-debugsource-5.0.10-10.1 virtualbox-devel-5.0.10-10.1 virtualbox-guest-kmp-default-5.0.10_k4.1.12_1-10.1 virtualbox-guest-kmp-default-debuginfo-5.0.10_k4.1.12_1-10.1 virtualbox-guest-tools-5.0.10-10.1 virtualbox-guest-tools-debuginfo-5.0.10-10.1 virtualbox-guest-x11-5.0.10-10.1 virtualbox-guest-x11-debuginfo-5.0.10-10.1 virtualbox-host-kmp-default-5.0.10_k4.1.12_1-10.1 virtualbox-host-kmp-default-debuginfo-5.0.10_k4.1.12_1-10.1 virtualbox-qt-5.0.10-10.1 virtualbox-qt-debuginfo-5.0.10-10.1 virtualbox-websrv-5.0.10-10.1 virtualbox-websrv-debuginfo-5.0.10-10.1 - openSUSE Leap 42.1 (noarch): virtualbox-guest-desktop-icons-5.0.10-10.1 virtualbox-host-source-5.0.10-10.1 References:

1 0

openSUSE-RU-2015:2097-1: moderate: Recommended update for the KDE Applications Framework
by maintenance＠opensuse.org 25 Nov '15

25 Nov '15

openSUSE Recommended Update: Recommended update for the KDE Applications Framework ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2097-1 Rating: moderate References: #517869 #527074 #630625 #656174 #663361 #754576 #774072 #818500 #949130 #949411 #954531 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 11 recommended fixes can now be installed. Description: The KDE Applications framework was updated to 15.08.3. The full detailed list of the changes is on: https://www.kde.org/announcements/announce-applications-15.08.3.php Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-803=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): akonadi-calendar-debugsource-15.08.3-3.1 akonadi-calendar-devel-15.08.3-3.1 akonadi-contact-15.08.3-3.2 akonadi-contact-debuginfo-15.08.3-3.2 akonadi-contact-devel-15.08.3-3.2 akonadi-devel-15.08.3-3.2 akonadi-devel-debuginfo-15.08.3-3.2 akonadi-mime-devel-15.08.3-3.2 akonadi-notes-devel-15.08.3-3.2 akonadi-search-15.08.3-3.1 akonadi-search-debuginfo-15.08.3-3.1 akonadi-search-debugsource-15.08.3-3.1 akonadi-search-devel-15.08.3-3.1 akonadi-server-15.08.3-3.1 akonadi-server-debuginfo-15.08.3-3.1 akonadi-server-debugsource-15.08.3-3.1 akonadi-socialutils-15.08.3-3.2 akonadi-socialutils-debuginfo-15.08.3-3.2 akonadi-socialutils-devel-15.08.3-3.2 akonadi5-15.08.3-3.2 akonadi5-debuginfo-15.08.3-3.2 akonadi_resources-15.08.3-3.2 akonadi_resources-debuginfo-15.08.3-3.2 akregator5-15.08.3-3.2 akregator5-debuginfo-15.08.3-3.2 amor-15.08.3-3.2 amor-debuginfo-15.08.3-3.2 amor-debugsource-15.08.3-3.2 analitza-15.08.3-3.1 analitza-debuginfo-15.08.3-3.1 analitza-debugsource-15.08.3-3.1 analitza-devel-15.08.3-3.1 ark-15.08.3-3.1 ark-debuginfo-15.08.3-3.1 ark-debugsource-15.08.3-3.1 artikulate-15.08.3-3.1 artikulate-debuginfo-15.08.3-3.1 artikulate-debugsource-15.08.3-3.1 baloo5-widgets-15.08.3-3.1 baloo5-widgets-debuginfo-15.08.3-3.1 baloo5-widgets-debugsource-15.08.3-3.1 baloo5-widgets-devel-15.08.3-3.1 blinken-15.08.3-3.1 blinken-debuginfo-15.08.3-3.1 blinken-debugsource-15.08.3-3.1 blogilo5-15.08.3-3.2 blogilo5-debuginfo-15.08.3-3.2 bomber-15.08.3-3.1 bomber-debuginfo-15.08.3-3.1 bomber-debugsource-15.08.3-3.1 bovo-15.08.3-3.4 bovo-debuginfo-15.08.3-3.4 bovo-debugsource-15.08.3-3.4 cantor-15.08.3-3.2 cantor-debuginfo-15.08.3-3.2 cantor-debugsource-15.08.3-3.2 cantor-devel-15.08.3-3.2 cervisia-15.08.3-3.1 cervisia-debuginfo-15.08.3-3.1 cervisia-debugsource-15.08.3-3.1 dolphin-15.08.3-4.2 dolphin-debuginfo-15.08.3-4.2 dolphin-debugsource-15.08.3-4.2 dolphin-devel-15.08.3-4.2 dolphin-part-15.08.3-4.2 dolphin-part-debuginfo-15.08.3-4.2 dolphin-plugins-15.08.3-3.1 dolphin-plugins-debuginfo-15.08.3-3.1 dolphin-plugins-debugsource-15.08.3-3.1 dolphin4-15.08.3-4.3 dolphin4-debuginfo-15.08.3-4.3 dragonplayer-15.08.3-3.1 dragonplayer-debuginfo-15.08.3-3.1 dragonplayer-debugsource-15.08.3-3.1 ffmpegthumbs-15.08.3-3.1 ffmpegthumbs-debuginfo-15.08.3-3.1 ffmpegthumbs-debugsource-15.08.3-3.1 filelight-15.08.3-3.1 filelight-debuginfo-15.08.3-3.1 filelight-debugsource-15.08.3-3.1 gpgmepp5-15.08.3-3.1 gpgmepp5-debuginfo-15.08.3-3.1 gpgmepp5-debugsource-15.08.3-3.1 gpgmepp5-devel-15.08.3-3.1 granatier-15.08.3-3.4 granatier-debuginfo-15.08.3-3.4 granatier-debugsource-15.08.3-3.4 gwenview5-15.08.3-3.2 gwenview5-debuginfo-15.08.3-3.2 gwenview5-debugsource-15.08.3-3.2 jovie-15.08.3-3.2 jovie-debuginfo-15.08.3-3.2 jovie-debugsource-15.08.3-3.2 juk-15.08.3-3.1 juk-debuginfo-15.08.3-3.1 juk-debugsource-15.08.3-3.1 kaccessible-15.08.3-3.1 kaccessible-debuginfo-15.08.3-3.1 kaccessible-debugsource-15.08.3-3.1 kaccounts-integration-15.08.3-3.1 kaccounts-integration-debuginfo-15.08.3-3.1 kaccounts-integration-debugsource-15.08.3-3.1 kaccounts-integration-devel-15.08.3-3.1 kaccounts-providers-15.08.3-3.1 kaddressbook5-15.08.3-3.2 kaddressbook5-debuginfo-15.08.3-3.2 kajongg-15.08.3-3.6 kalarm5-15.08.3-3.2 kalarm5-debuginfo-15.08.3-3.2 kalarmcal-debugsource-15.08.3-3.1 kalarmcal-devel-15.08.3-3.1 kalgebra-15.08.3-3.2 kalgebra-debuginfo-15.08.3-3.2 kalgebra-debugsource-15.08.3-3.2 kalzium-15.08.3-3.1 kalzium-debuginfo-15.08.3-3.1 kalzium-debugsource-15.08.3-3.1 kalzium-devel-15.08.3-3.1 kamera-debugsource-15.08.3-5.1 kanagram-15.08.3-3.1 kanagram-debuginfo-15.08.3-3.1 kanagram-debugsource-15.08.3-3.1 kapman-15.08.3-3.3 kapman-debuginfo-15.08.3-3.3 kapman-debugsource-15.08.3-3.3 kapptemplate-15.08.3-3.1 kapptemplate-debuginfo-15.08.3-3.1 kapptemplate-debugsource-15.08.3-3.1 kate-15.08.3-3.2 kate-debuginfo-15.08.3-3.2 kate-debugsource-15.08.3-3.2 kate-plugins-15.08.3-3.2 kate-plugins-debuginfo-15.08.3-3.2 katomic-15.08.3-3.4 katomic-debuginfo-15.08.3-3.4 katomic-debugsource-15.08.3-3.4 kblackbox-15.08.3-3.3 kblackbox-debuginfo-15.08.3-3.3 kblackbox-debugsource-15.08.3-3.3 kblocks-15.08.3-3.3 kblocks-debuginfo-15.08.3-3.3 kblocks-debugsource-15.08.3-3.3 kblog-debugsource-15.08.3-3.1 kblog-devel-15.08.3-3.1 kbounce-15.08.3-3.4 kbounce-debuginfo-15.08.3-3.4 kbounce-debugsource-15.08.3-3.4 kbreakout-15.08.3-3.4 kbreakout-debuginfo-15.08.3-3.4 kbreakout-debugsource-15.08.3-3.4 kbruch-15.08.3-3.1 kbruch-debuginfo-15.08.3-3.1 kbruch-debugsource-15.08.3-3.1 kcachegrind-15.08.3-3.1 kcachegrind-debuginfo-15.08.3-3.1 kcachegrind-debugsource-15.08.3-3.1 kcalc-15.08.3-5.2 kcalc-debuginfo-15.08.3-5.2 kcalc-debugsource-15.08.3-5.2 kcalcore-debugsource-15.08.3-3.1 kcalcore-devel-15.08.3-3.1 kcalutils-debugsource-15.08.3-3.1 kcalutils-devel-15.08.3-3.1 kcharselect-15.08.3-5.1 kcharselect-debuginfo-15.08.3-5.1 kcharselect-debugsource-15.08.3-5.1 kcolorchooser-15.08.3-5.1 kcolorchooser-debuginfo-15.08.3-5.1 kcolorchooser-debugsource-15.08.3-5.1 kcontacts-debugsource-15.08.3-3.1 kcontacts-devel-15.08.3-3.1 kcron-15.08.3-3.2 kcron-debuginfo-15.08.3-3.2 kcron-debugsource-15.08.3-3.2 kde-dev-utils-debugsource-15.08.3-2.1 kde-mplayer-thumbnailer-15.08.3-3.1 kde-mplayer-thumbnailer-debuginfo-15.08.3-3.1 kde-mplayer-thumbnailer-debugsource-15.08.3-3.1 kde-print-manager-15.08.3-3.1 kde-print-manager-debuginfo-15.08.3-3.1 kde-print-manager-debugsource-15.08.3-3.1 kde4-l10n-devel-15.08.3-3.1 kde4-l10n-devel-debuginfo-15.08.3-3.1 kdeartwork4-debugsource-15.08.3-5.6 kdeartwork4-decorations-15.08.3-5.6 kdeartwork4-decorations-debuginfo-15.08.3-5.6 kdeartwork4-screensaver-15.08.3-5.6 kdeartwork4-screensaver-debuginfo-15.08.3-5.6 kdeartwork4-styles-15.08.3-5.6 kdeartwork4-styles-debuginfo-15.08.3-5.6 kdebase4-debugsource-15.08.3-4.3 kdebase4-libkonq-15.08.3-4.3 kdebase4-libkonq-debuginfo-15.08.3-4.3 kdebase4-nsplugin-15.08.3-4.3 kdebase4-nsplugin-debuginfo-15.08.3-4.3 kdebase4-runtime-15.08.3-3.2 kdebase4-runtime-branding-upstream-15.08.3-3.2 kdebase4-runtime-debuginfo-15.08.3-3.2 kdebase4-runtime-debugsource-15.08.3-3.2 kdebase4-runtime-devel-15.08.3-3.2 kdebugsettings-15.08.3-3.1 kdebugsettings-debuginfo-15.08.3-3.1 kdebugsettings-debugsource-15.08.3-3.1 kdegraphics-strigi-analyzer-15.08.3-3.1 kdegraphics-strigi-analyzer-debuginfo-15.08.3-3.1 kdegraphics-strigi-analyzer-debugsource-15.08.3-3.1 kdegraphics-thumbnailers-15.08.3-3.1 kdegraphics-thumbnailers-debuginfo-15.08.3-3.1 kdegraphics-thumbnailers-debugsource-15.08.3-3.1 kdenetwork-strigi-analyzers-15.08.3-3.1 kdenetwork-strigi-analyzers-debuginfo-15.08.3-3.1 kdenetwork-strigi-analyzers-debugsource-15.08.3-3.1 kdenetwork4-filesharing-15.08.3-5.1 kdenetwork4-filesharing-debuginfo-15.08.3-5.1 kdenetwork4-filesharing-debugsource-15.08.3-5.1 kdenlive-15.08.3-3.2 kdenlive-debuginfo-15.08.3-3.2 kdenlive-debugsource-15.08.3-3.2 kdepasswd-15.08.3-4.3 kdepasswd-debuginfo-15.08.3-4.3 kdepim-15.08.3-3.2 kdepim-debuginfo-15.08.3-3.2 kdepim-debugsource-15.08.3-3.2 kdepim-runtime-15.08.3-3.1 kdepim-runtime-debuginfo-15.08.3-3.1 kdepim-runtime-debugsource-15.08.3-3.1 kdepimlibs-debugsource-15.08.3-3.2 kdesdk-kioslaves-debugsource-15.08.3-4.1 kdesdk-strigi-analyzers-15.08.3-3.1 kdesdk-strigi-analyzers-debuginfo-15.08.3-3.1 kdesdk-strigi-analyzers-debugsource-15.08.3-3.1 kdesdk-thumbnailers-15.08.3-3.1 kdesdk-thumbnailers-debuginfo-15.08.3-3.1 kdesdk-thumbnailers-debugsource-15.08.3-3.1 kdesdk4-scripts-15.08.3-3.1 kdewebdev4-debugsource-15.08.3-3.1 kdf-15.08.3-3.1 kdf-debuginfo-15.08.3-3.1 kdf-debugsource-15.08.3-3.1 kdialog-15.08.3-4.3 kdialog-debuginfo-15.08.3-4.3 kdiamond-15.08.3-3.3 kdiamond-debuginfo-15.08.3-3.3 kdiamond-debugsource-15.08.3-3.3 kdnssd-15.08.3-5.1 kdnssd-debuginfo-15.08.3-5.1 kdnssd-debugsource-15.08.3-5.1 keditbookmarks-15.08.3-4.3 keditbookmarks-debuginfo-15.08.3-4.3 kfilereplace-15.08.3-3.1 kfilereplace-debuginfo-15.08.3-3.1 kfind-15.08.3-4.3 kfind-debuginfo-15.08.3-4.3 kfloppy-15.08.3-3.1 kfloppy-debuginfo-15.08.3-3.1 kfloppy-debugsource-15.08.3-3.1 kfourinline-15.08.3-3.4 kfourinline-debuginfo-15.08.3-3.4 kfourinline-debugsource-15.08.3-3.4 kgeography-15.08.3-3.2 kgeography-debuginfo-15.08.3-3.2 kgeography-debugsource-15.08.3-3.2 kget-15.08.3-5.1 kget-debuginfo-15.08.3-5.1 kget-debugsource-15.08.3-5.1 kgoldrunner-15.08.3-3.1 kgoldrunner-debuginfo-15.08.3-3.1 kgoldrunner-debugsource-15.08.3-3.1 kgpg-15.08.3-5.1 kgpg-debuginfo-15.08.3-5.1 kgpg-debugsource-15.08.3-5.1 khangman-15.08.3-3.4 khangman-debuginfo-15.08.3-3.4 khangman-debugsource-15.08.3-3.4 kholidays-15.08.3-3.1 kholidays-debugsource-15.08.3-3.1 kholidays-devel-15.08.3-3.1 kidentitymanagement-debugsource-15.08.3-3.1 kidentitymanagement-devel-15.08.3-3.1 kig-15.08.3-3.1 kig-debuginfo-15.08.3-3.1 kig-debugsource-15.08.3-3.1 kigo-15.08.3-3.1 kigo-debuginfo-15.08.3-3.1 kigo-debugsource-15.08.3-3.1 killbots-15.08.3-3.4 killbots-debuginfo-15.08.3-3.4 killbots-debugsource-15.08.3-3.4 kimagemapeditor-15.08.3-3.1 kimagemapeditor-debuginfo-15.08.3-3.1 kimap-debugsource-15.08.3-3.1 kimap-devel-15.08.3-3.1 kio-extras5-15.08.3-9.1 kio-extras5-debuginfo-15.08.3-9.1 kio-extras5-debugsource-15.08.3-9.1 kio-pimlibs-15.08.3-3.2 kio-pimlibs-debuginfo-15.08.3-3.2 kio_audiocd-15.08.3-5.1 kio_audiocd-debuginfo-15.08.3-5.1 kio_audiocd-debugsource-15.08.3-5.1 kio_kamera-15.08.3-5.1 kio_kamera-debuginfo-15.08.3-5.1 kio_svn-15.08.3-4.1 kio_svn-debuginfo-15.08.3-4.1 kiriki-15.08.3-3.3 kiriki-debuginfo-15.08.3-3.3 kiriki-debugsource-15.08.3-3.3 kiten-15.08.3-3.2 kiten-debuginfo-15.08.3-3.2 kiten-debugsource-15.08.3-3.2 kiten-devel-15.08.3-3.2 kjumpingcube-15.08.3-3.3 kjumpingcube-debuginfo-15.08.3-3.3 kjumpingcube-debugsource-15.08.3-3.3 kldap-debugsource-15.08.3-3.1 kldap-devel-15.08.3-3.1 kleopatra5-15.08.3-3.2 kleopatra5-debuginfo-15.08.3-3.2 klettres-15.08.3-3.2 klettres-debuginfo-15.08.3-3.2 klettres-debugsource-15.08.3-3.2 klickety-15.08.3-3.1 klickety-debuginfo-15.08.3-3.1 klickety-debugsource-15.08.3-3.1 klines-15.08.3-3.4 klines-debuginfo-15.08.3-3.4 klines-debugsource-15.08.3-3.4 klinkstatus-15.08.3-3.1 klinkstatus-debuginfo-15.08.3-3.1 kmag-15.08.3-5.1 kmag-debuginfo-15.08.3-5.1 kmag-debugsource-15.08.3-5.1 kmahjongg-15.08.3-5.1 kmahjongg-debuginfo-15.08.3-5.1 kmahjongg-debugsource-15.08.3-5.1 kmail5-15.08.3-3.2 kmail5-debuginfo-15.08.3-3.2 kmailtransport-15.08.3-3.1 kmailtransport-debuginfo-15.08.3-3.1 kmailtransport-debugsource-15.08.3-3.1 kmailtransport-devel-15.08.3-3.1 kmbox-debugsource-15.08.3-3.1 kmbox-devel-15.08.3-3.1 kmime-debugsource-15.08.3-3.1 kmime-devel-15.08.3-3.1 kmines-15.08.3-5.4 kmines-debuginfo-15.08.3-5.4 kmines-debugsource-15.08.3-5.4 kmix-15.08.3-3.1 kmix-debuginfo-15.08.3-3.1 kmix-debugsource-15.08.3-3.1 kmousetool-15.08.3-5.1 kmousetool-debuginfo-15.08.3-5.1 kmousetool-debugsource-15.08.3-5.1 kmouth-15.08.3-3.1 kmouth-debuginfo-15.08.3-3.1 kmouth-debugsource-15.08.3-3.1 kmplot-15.08.3-3.2 kmplot-debuginfo-15.08.3-3.2 kmplot-debugsource-15.08.3-3.2 kmtrace-15.08.3-2.1 knavalbattle-15.08.3-3.1 knavalbattle-debuginfo-15.08.3-3.1 knavalbattle-debugsource-15.08.3-3.1 knetwalk-15.08.3-3.3 knetwalk-debuginfo-15.08.3-3.3 knetwalk-debugsource-15.08.3-3.3 knotes5-15.08.3-3.2 knotes5-debuginfo-15.08.3-3.2 kolf-15.08.3-3.1 kolf-debuginfo-15.08.3-3.1 kolf-debugsource-15.08.3-3.1 kollision-15.08.3-3.3 kollision-debuginfo-15.08.3-3.3 kollision-debugsource-15.08.3-3.3 kolourpaint-15.08.3-3.2 kolourpaint-debuginfo-15.08.3-3.2 kolourpaint-debugsource-15.08.3-3.2 kommander-runtime-15.08.3-3.1 kommander-runtime-debuginfo-15.08.3-3.1 kommander-runtime-devel-15.08.3-3.1 kompare-15.08.3-5.1 kompare-debuginfo-15.08.3-5.1 kompare-debugsource-15.08.3-5.1 kompare-devel-15.08.3-5.1 konqueror-15.08.3-4.3 konqueror-debuginfo-15.08.3-4.3 konqueror-plugins-15.08.3-4.3 konqueror-plugins-debuginfo-15.08.3-4.3 konquest-15.08.3-3.1 konquest-debuginfo-15.08.3-3.1 konquest-debugsource-15.08.3-3.1 konsole-15.08.3-3.1 konsole-debuginfo-15.08.3-3.1 konsole-debugsource-15.08.3-3.1 konsole-part-15.08.3-3.1 konsole-part-debuginfo-15.08.3-3.1 kontact5-15.08.3-3.2 kontact5-debuginfo-15.08.3-3.2 kontactinterface-debugsource-15.08.3-3.1 kontactinterface-devel-15.08.3-3.1 kopete-15.08.3-5.1 kopete-debuginfo-15.08.3-5.1 kopete-debugsource-15.08.3-5.1 kopete-devel-15.08.3-5.1 korganizer5-15.08.3-3.2 korganizer5-debuginfo-15.08.3-3.2 kpartloader-15.08.3-2.1 kpartloader-debuginfo-15.08.3-2.1 kpat-15.08.3-3.3 kpat-debuginfo-15.08.3-3.3 kpat-debugsource-15.08.3-3.3 kpimtextedit-debugsource-15.08.3-3.1 kpimtextedit-devel-15.08.3-3.1 kppp-15.08.3-3.1 kppp-debuginfo-15.08.3-3.1 kppp-debugsource-15.08.3-3.1 kprofilemethod-15.08.3-2.1 kqtquickcharts-15.08.3-3.1 kqtquickcharts-debuginfo-15.08.3-3.1 kqtquickcharts-debugsource-15.08.3-3.1 krdc-15.08.3-5.1 krdc-debuginfo-15.08.3-5.1 krdc-debugsource-15.08.3-5.1 krdc-devel-15.08.3-5.1 kremotecontrol-15.08.3-3.1 kremotecontrol-debuginfo-15.08.3-3.1 kremotecontrol-debugsource-15.08.3-3.1 kremotecontrol-devel-15.08.3-3.1 kreversi-15.08.3-5.1 kreversi-debuginfo-15.08.3-5.1 kreversi-debugsource-15.08.3-5.1 krfb-15.08.3-5.1 krfb-debuginfo-15.08.3-5.1 krfb-debugsource-15.08.3-5.1 kross-interpreters-debugsource-15.08.3-4.1 kross-python-15.08.3-4.1 kross-python-debuginfo-15.08.3-4.1 kruler-15.08.3-5.1 kruler-debuginfo-15.08.3-5.1 kruler-debugsource-15.08.3-5.1 ksaneplugin-15.08.3-3.1 ksaneplugin-debuginfo-15.08.3-3.1 ksaneplugin-debugsource-15.08.3-3.1 kshisen-15.08.3-3.5 kshisen-debuginfo-15.08.3-3.5 kshisen-debugsource-15.08.3-3.5 ksirk-15.08.3-3.1 ksirk-debuginfo-15.08.3-3.1 ksirk-debugsource-15.08.3-3.1 ksnakeduel-15.08.3-3.1 ksnakeduel-debuginfo-15.08.3-3.1 ksnakeduel-debugsource-15.08.3-3.1 ksnapshot-15.08.3-5.1 ksnapshot-debuginfo-15.08.3-5.1 ksnapshot-debugsource-15.08.3-5.1 kspaceduel-15.08.3-3.1 kspaceduel-debuginfo-15.08.3-3.1 kspaceduel-debugsource-15.08.3-3.1 ksquares-15.08.3-3.5 ksquares-debuginfo-15.08.3-3.5 ksquares-debugsource-15.08.3-3.5 kstars-15.08.3-3.2 kstars-debuginfo-15.08.3-3.2 kstars-debugsource-15.08.3-3.2 kstartperf-15.08.3-2.1 ksudoku-15.08.3-5.1 ksudoku-debuginfo-15.08.3-5.1 ksudoku-debugsource-15.08.3-5.1 ksystemlog-15.08.3-3.1 ksystemlog-debuginfo-15.08.3-3.1 ksystemlog-debugsource-15.08.3-3.1 kteatime-15.08.3-3.1 kteatime-debuginfo-15.08.3-3.1 kteatime-debugsource-15.08.3-3.1 ktimer-15.08.3-3.1 ktimer-debuginfo-15.08.3-3.1 ktimer-debugsource-15.08.3-3.1 ktnef-debugsource-15.08.3-3.1 ktnef-devel-15.08.3-3.1 ktnef5-15.08.3-3.2 ktnef5-debuginfo-15.08.3-3.2 ktouch-15.08.3-3.1 ktouch-debuginfo-15.08.3-3.1 ktouch-debugsource-15.08.3-3.1 ktp-accounts-kcm-15.08.3-3.1 ktp-accounts-kcm-debuginfo-15.08.3-3.1 ktp-accounts-kcm-debugsource-15.08.3-3.1 ktp-approver-15.08.3-3.1 ktp-approver-debuginfo-15.08.3-3.1 ktp-approver-debugsource-15.08.3-3.1 ktp-auth-handler-15.08.3-3.1 ktp-auth-handler-debuginfo-15.08.3-3.1 ktp-auth-handler-debugsource-15.08.3-3.1 ktp-common-internals-15.08.3-3.1 ktp-common-internals-debuginfo-15.08.3-3.1 ktp-common-internals-debugsource-15.08.3-3.1 ktp-common-internals-devel-15.08.3-3.1 ktp-contact-list-15.08.3-3.1 ktp-contact-list-debuginfo-15.08.3-3.1 ktp-contact-list-debugsource-15.08.3-3.1 ktp-contact-runner-15.08.3-3.1 ktp-contact-runner-debuginfo-15.08.3-3.1 ktp-contact-runner-debugsource-15.08.3-3.1 ktp-desktop-applets-15.08.3-3.1 ktp-desktop-applets-debuginfo-15.08.3-3.1 ktp-desktop-applets-debugsource-15.08.3-3.1 ktp-filetransfer-handler-15.08.3-3.1 ktp-filetransfer-handler-debuginfo-15.08.3-3.1 ktp-filetransfer-handler-debugsource-15.08.3-3.1 ktp-icons-15.08.3-3.1 ktp-kded-module-15.08.3-3.1 ktp-kded-module-debuginfo-15.08.3-3.1 ktp-kded-module-debugsource-15.08.3-3.1 ktp-send-file-15.08.3-3.1 ktp-send-file-debuginfo-15.08.3-3.1 ktp-send-file-debugsource-15.08.3-3.1 ktp-text-ui-15.08.3-3.2 ktp-text-ui-debuginfo-15.08.3-3.2 ktp-text-ui-debugsource-15.08.3-3.2 ktuberling-15.08.3-3.1 ktuberling-debuginfo-15.08.3-3.1 ktuberling-debugsource-15.08.3-3.1 kturtle-15.08.3-3.2 kturtle-debuginfo-15.08.3-3.2 kturtle-debugsource-15.08.3-3.2 ktux-15.08.3-3.1 ktux-debuginfo-15.08.3-3.1 ktux-debugsource-15.08.3-3.1 kubrick-15.08.3-3.1 kubrick-debuginfo-15.08.3-3.1 kubrick-debugsource-15.08.3-3.1 kuiviewer-15.08.3-2.1 kuiviewer-debuginfo-15.08.3-2.1 kuser-15.08.3-3.1 kuser-debuginfo-15.08.3-3.1 kuser-debugsource-15.08.3-3.1 kwalletmanager5-15.08.3-3.2 kwalletmanager5-debuginfo-15.08.3-3.2 kwalletmanager5-debugsource-15.08.3-3.2 kwikdisk-15.08.3-3.1 kwikdisk-debuginfo-15.08.3-3.1 kwordquiz-15.08.3-3.3 kwordquiz-debuginfo-15.08.3-3.3 kwordquiz-debugsource-15.08.3-3.3 kwrite-15.08.3-3.2 kwrite-debuginfo-15.08.3-3.2 libAnalitza5-15.08.3-3.1 libAnalitza5-debuginfo-15.08.3-3.1 libKEduVocDocument5-15.08.3-3.1 libKEduVocDocument5-debuginfo-15.08.3-3.1 libKF5AkonadiCalendar5-15.08.3-3.1 libKF5AkonadiCalendar5-debuginfo-15.08.3-3.1 libKF5AkonadiMime5-15.08.3-3.2 libKF5AkonadiMime5-debuginfo-15.08.3-3.2 libKF5AkonadiNotes5-15.08.3-3.2 libKF5AkonadiNotes5-debuginfo-15.08.3-3.2 libKF5AkonadiPrivate-devel-15.08.3-3.1 libKF5AkonadiPrivate5-15.08.3-3.1 libKF5AkonadiPrivate5-debuginfo-15.08.3-3.1 libKF5AkonadiSearch-15.08.3-3.1 libKF5AkonadiSearch-debuginfo-15.08.3-3.1 libKF5AlarmCalendar5-15.08.3-3.1 libKF5AlarmCalendar5-debuginfo-15.08.3-3.1 libKF5Blog5-15.08.3-3.1 libKF5Blog5-debuginfo-15.08.3-3.1 libKF5CalendarCore5-15.08.3-3.1 libKF5CalendarCore5-debuginfo-15.08.3-3.1 libKF5CalendarUtils5-15.08.3-3.1 libKF5CalendarUtils5-debuginfo-15.08.3-3.1 libKF5Contacts5-15.08.3-3.1 libKF5Contacts5-debuginfo-15.08.3-3.1 libKF5Holidays5-15.08.3-3.1 libKF5Holidays5-debuginfo-15.08.3-3.1 libKF5IMAP5-15.08.3-3.1 libKF5IMAP5-debuginfo-15.08.3-3.1 libKF5IdentityManagement5-15.08.3-3.1 libKF5IdentityManagement5-debuginfo-15.08.3-3.1 libKF5KMahjongglib5-15.08.3-3.2 libKF5KMahjongglib5-debuginfo-15.08.3-3.2 libKF5KontactInterface5-15.08.3-3.1 libKF5KontactInterface5-debuginfo-15.08.3-3.1 libKF5Ldap5-15.08.3-3.1 libKF5Ldap5-debuginfo-15.08.3-3.1 libKF5Mbox5-15.08.3-3.1 libKF5Mbox5-debuginfo-15.08.3-3.1 libKF5Mime5-15.08.3-3.1 libKF5Mime5-debuginfo-15.08.3-3.1 libKF5PimTextEdit5-15.08.3-3.1 libKF5PimTextEdit5-debuginfo-15.08.3-3.1 libKF5QGpgme5-15.08.3-3.1 libKF5QGpgme5-debuginfo-15.08.3-3.1 libKF5Syndication5-15.08.3-3.1 libKF5Syndication5-debuginfo-15.08.3-3.1 libKF5Tnef5-15.08.3-3.1 libKF5Tnef5-debuginfo-15.08.3-3.1 libastro-qt5-1-15.08.3-3.2 libastro-qt5-1-debuginfo-15.08.3-3.2 libastro1-15.08.3-3.1 libastro1-debuginfo-15.08.3-3.1 libcantorlibs6-15.08.3-3.2 libcantorlibs6-debuginfo-15.08.3-3.2 libdolphinvcs5-15.08.3-4.2 libdolphinvcs5-debuginfo-15.08.3-4.2 libkcddb4-15.08.3-5.1 libkcddb4-debuginfo-15.08.3-5.1 libkcddb4-debugsource-15.08.3-5.1 libkcddb4-devel-15.08.3-5.1 libkcompactdisc4-15.08.3-5.1 libkcompactdisc4-debuginfo-15.08.3-5.1 libkcompactdisc4-debugsource-15.08.3-5.1 libkcompactdisc4-devel-15.08.3-5.1 libkdcraw-debugsource-15.08.3-3.1 libkdcraw-devel-15.08.3-3.1 libkdcraw23-15.08.3-3.1 libkdcraw23-debuginfo-15.08.3-3.1 libkdeedu4-debugsource-15.08.3-3.2 libkdeedu4-devel-15.08.3-3.2 libkdegames-15.08.3-5.1 libkdegames-debugsource-15.08.3-5.1 libkdegames-devel-15.08.3-5.1 libkdepim-15.08.3-3.2 libkdepim-debuginfo-15.08.3-3.2 libkeduvocdocument-debugsource-15.08.3-3.1 libkeduvocdocument-devel-15.08.3-3.1 libkeduvocdocument4-15.08.3-3.2 libkeduvocdocument4-debuginfo-15.08.3-3.2 libkerfuffle15-15.08.3-3.1 libkerfuffle15-debuginfo-15.08.3-3.1 libkexiv2-11-15.08.3-3.1 libkexiv2-11-debuginfo-15.08.3-3.1 libkexiv2-debugsource-15.08.3-3.1 libkexiv2-devel-15.08.3-3.1 libkf5kdegames6-15.08.3-5.1 libkf5kdegames6-debuginfo-15.08.3-5.1 libkface-15.08.3-3.1 libkface-debugsource-15.08.3-3.1 libkface-devel-15.08.3-3.1 libkface3-15.08.3-3.1 libkface3-debuginfo-15.08.3-3.1 libkgeomap-15.08.3-3.1 libkgeomap-debugsource-15.08.3-3.1 libkgeomap-devel-15.08.3-3.1 libkgeomap2-15.08.3-3.1 libkgeomap2-debuginfo-15.08.3-3.1 libkipi-debugsource-15.08.3-3.1 libkipi-devel-15.08.3-3.1 libkipi11-15.08.3-3.1 libkipi11-debuginfo-15.08.3-3.1 libkmahjongg-15.08.3-3.2 libkmahjongg-debugsource-15.08.3-3.2 libkmahjongg-devel-15.08.3-3.2 libkomparediff2-5-15.08.3-5.1 libkomparediff2-5-debuginfo-15.08.3-5.1 libkomparediff2-debugsource-15.08.3-5.1 libkomparediff2-devel-15.08.3-5.1 libkonq-devel-15.08.3-4.3 libkonq5-15.08.3-4.3 libkonq5-debuginfo-15.08.3-4.3 libksane-debugsource-15.08.3-3.1 libksane-devel-15.08.3-3.1 libksane0-15.08.3-3.1 libksane0-debuginfo-15.08.3-3.1 libktpaccountskcminternal9-15.08.3-3.1 libktpaccountskcminternal9-debuginfo-15.08.3-3.1 liblibkremotecontrol1-15.08.3-3.1 liblibkremotecontrol1-debuginfo-15.08.3-3.1 libmarblewidget-debugsource-15.08.3-3.1 libmarblewidget-devel-15.08.3-3.1 libmarblewidget-qt5-22-15.08.3-3.2 libmarblewidget-qt5-22-debuginfo-15.08.3-3.2 libmarblewidget22-15.08.3-3.1 libmarblewidget22-debuginfo-15.08.3-3.1 librocsgraphtheory0-15.08.3-3.2 librocsgraphtheory0-debuginfo-15.08.3-3.2 lokalize-15.08.3-3.1 lokalize-debuginfo-15.08.3-3.1 lokalize-debugsource-15.08.3-3.1 lskat-15.08.3-3.1 lskat-debuginfo-15.08.3-3.1 lskat-debugsource-15.08.3-3.1 marble-15.08.3-3.2 marble-debuginfo-15.08.3-3.2 marble-devel-15.08.3-3.2 marble-kde-15.08.3-3.2 marble-kde-debuginfo-15.08.3-3.2 marble-qt-15.08.3-3.2 marble-qt-debuginfo-15.08.3-3.2 mobipocket-15.08.3-5.1 mobipocket-debuginfo-15.08.3-5.1 mobipocket-debugsource-15.08.3-5.1 mobipocket-devel-15.08.3-5.1 okteta-15.08.3-3.2 okteta-debuginfo-15.08.3-3.2 okteta-debugsource-15.08.3-3.2 okteta-devel-15.08.3-3.2 okular-15.08.3-3.1 okular-debuginfo-15.08.3-3.1 okular-debugsource-15.08.3-3.1 okular-devel-15.08.3-3.1 palapeli-15.08.3-3.1 palapeli-debuginfo-15.08.3-3.1 palapeli-debugsource-15.08.3-3.1 palapeli-devel-15.08.3-3.1 parley-15.08.3-3.2 parley-debuginfo-15.08.3-3.2 parley-debugsource-15.08.3-3.2 picmi-15.08.3-3.2 picmi-debuginfo-15.08.3-3.2 picmi-debugsource-15.08.3-3.2 plasma-theme-oxygen-15.08.3-3.2 plasmoid-folderview-15.08.3-4.3 plasmoid-folderview-debuginfo-15.08.3-4.3 poxml-debugsource-15.08.3-3.1 rocs-15.08.3-3.2 rocs-debuginfo-15.08.3-3.2 rocs-debugsource-15.08.3-3.2 rocs-devel-15.08.3-3.2 signon-kwallet-extension-15.08.3-3.1 signon-kwallet-extension-debuginfo-15.08.3-3.1 signon-kwallet-extension-debugsource-15.08.3-3.1 step-15.08.3-3.2 step-debuginfo-15.08.3-3.2 step-debugsource-15.08.3-3.2 superkaramba-15.08.3-3.1 superkaramba-debuginfo-15.08.3-3.1 superkaramba-debugsource-15.08.3-3.1 svgpart-15.08.3-3.1 svgpart-debuginfo-15.08.3-3.1 svgpart-debugsource-15.08.3-3.1 sweeper-15.08.3-5.1 sweeper-debuginfo-15.08.3-5.1 sweeper-debugsource-15.08.3-5.1 syndication-debugsource-15.08.3-3.1 syndication-devel-15.08.3-3.1 umbrello-15.08.3-3.1 umbrello-debuginfo-15.08.3-3.1 umbrello-debugsource-15.08.3-3.1 - openSUSE Leap 42.1 (x86_64): gpgmepp5-32bit-15.08.3-3.1 gpgmepp5-debuginfo-32bit-15.08.3-3.1 gpgmepp5-devel-32bit-15.08.3-3.1 kaccounts-integration-32bit-15.08.3-3.1 kaccounts-integration-debuginfo-32bit-15.08.3-3.1 kcontacts-devel-32bit-15.08.3-3.1 libKF5Contacts5-32bit-15.08.3-3.1 libKF5Contacts5-debuginfo-32bit-15.08.3-3.1 libKF5QGpgme5-32bit-15.08.3-3.1 libKF5QGpgme5-debuginfo-32bit-15.08.3-3.1 libkonq5-32bit-15.08.3-4.3 libkonq5-debuginfo-32bit-15.08.3-4.3 - openSUSE Leap 42.1 (noarch): fonts-KanjiStrokeOrders-15.08.3-3.2 kdeartwork4-colorschemes-15.08.3-5.6 kdeartwork4-desktopthemes-15.08.3-5.6 kdeartwork4-emoticons-15.08.3-5.6 kdeartwork4-icons-15.08.3-5.6 kdeartwork4-icons-mono-15.08.3-5.6 kdeartwork4-wallpapers-15.08.3-5.6 kdeartwork4-wallpapers-large-15.08.3-5.6 kdeartwork4-wallpapers-weather-15.08.3-5.6 kdebase4-artwork-15.08.3-5.1 kdebase4-wallpaper-default-15.08.3-5.1 kdebase4-wallpapers-15.08.3-5.1 kdeedu-data-15.08.3-3.1 kdegames-carddecks-default-15.08.3-5.1 kdegames-carddecks-other-15.08.3-5.1 marble-data-15.08.3-3.2 marble-doc-15.08.3-3.2 palapeli-data-15.08.3-3.1 plasma-theme-aya-15.08.3-5.6 References: https://bugzilla.suse.com/517869 https://bugzilla.suse.com/527074 https://bugzilla.suse.com/630625 https://bugzilla.suse.com/656174 https://bugzilla.suse.com/663361 https://bugzilla.suse.com/754576 https://bugzilla.suse.com/774072 https://bugzilla.suse.com/818500 https://bugzilla.suse.com/949130 https://bugzilla.suse.com/949411 https://bugzilla.suse.com/954531

1 0

openSUSE-OU-2015:2083-1: moderate: Optional update for desktop-fonts
by maintenance＠opensuse.org 24 Nov '15

24 Nov '15

openSUSE Optional Update: Optional update for desktop-fonts ______________________________________________________________________________ Announcement ID: openSUSE-OU-2015:2083-1 Rating: moderate References: #951898 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: Optional update for desktop-fonts: - Roboto prefered for sans and serif and Source Sans Pro for monospace [bsc#951898] - install google-roboto-fonts instead of dejavu-fonts in -fonts pattern, add noto-sans to -fonts_opt pattern [bnc#951898] Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-799=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): patterns-openSUSE-32bit-20150918-12.1 patterns-openSUSE-64bit-20150918-12.1 patterns-openSUSE-apparmor-20150918-12.1 patterns-openSUSE-apparmor_opt-20150918-12.1 patterns-openSUSE-base-20150918-12.1 patterns-openSUSE-books-20150918-12.1 patterns-openSUSE-console-20150918-12.1 patterns-openSUSE-devel_C_C++-20150918-12.1 patterns-openSUSE-devel_basis-20150918-12.1 patterns-openSUSE-devel_gnome-20150918-12.1 patterns-openSUSE-devel_ide-20150918-12.1 patterns-openSUSE-devel_java-20150918-12.1 patterns-openSUSE-devel_kde-20150918-12.1 patterns-openSUSE-devel_kde_frameworks-20150918-12.1 patterns-openSUSE-devel_kernel-20150918-12.1 patterns-openSUSE-devel_mono-20150918-12.1 patterns-openSUSE-devel_perl-20150918-12.1 patterns-openSUSE-devel_python-20150918-12.1 patterns-openSUSE-devel_python3-20150918-12.1 patterns-openSUSE-devel_qt4-20150918-12.1 patterns-openSUSE-devel_qt5-20150918-12.1 patterns-openSUSE-devel_rpm_build-20150918-12.1 patterns-openSUSE-devel_ruby-20150918-12.1 patterns-openSUSE-devel_tcl-20150918-12.1 patterns-openSUSE-devel_web-20150918-12.1 patterns-openSUSE-devel_yast-20150918-12.1 patterns-openSUSE-dhcp_dns_server-20150918-12.1 patterns-openSUSE-directory_server-20150918-12.1 patterns-openSUSE-enhanced_base-20150918-12.1 patterns-openSUSE-enhanced_base_opt-20150918-12.1 patterns-openSUSE-enlightenment-20150918-12.1 patterns-openSUSE-file_server-20150918-12.1 patterns-openSUSE-fonts-20150918-12.1 patterns-openSUSE-fonts_opt-20150918-12.1 patterns-openSUSE-games-20150918-12.1 patterns-openSUSE-gateway_server-20150918-12.1 patterns-openSUSE-generic_server-20150918-12.1 patterns-openSUSE-gnome-20150918-12.1 patterns-openSUSE-gnome_admin-20150918-12.1 patterns-openSUSE-gnome_basis-20150918-12.1 patterns-openSUSE-gnome_basis_opt-20150918-12.1 patterns-openSUSE-gnome_games-20150918-12.1 patterns-openSUSE-gnome_ide-20150918-12.1 patterns-openSUSE-gnome_imaging-20150918-12.1 patterns-openSUSE-gnome_imaging_opt-20150918-12.1 patterns-openSUSE-gnome_internet-20150918-12.1 patterns-openSUSE-gnome_laptop-20150918-12.1 patterns-openSUSE-gnome_multimedia-20150918-12.1 patterns-openSUSE-gnome_multimedia_opt-20150918-12.1 patterns-openSUSE-gnome_office-20150918-12.1 patterns-openSUSE-gnome_office_opt-20150918-12.1 patterns-openSUSE-gnome_utilities-20150918-12.1 patterns-openSUSE-gnome_yast-20150918-12.1 patterns-openSUSE-haskell_platform-20150918-12.1 patterns-openSUSE-imaging-20150918-12.1 patterns-openSUSE-imaging_opt-20150918-12.1 patterns-openSUSE-kde-20150918-12.1 patterns-openSUSE-kde_edutainment-20150918-12.1 patterns-openSUSE-kde_games-20150918-12.1 patterns-openSUSE-kde_ide-20150918-12.1 patterns-openSUSE-kde_imaging-20150918-12.1 patterns-openSUSE-kde_internet-20150918-12.1 patterns-openSUSE-kde_multimedia-20150918-12.1 patterns-openSUSE-kde_office-20150918-12.1 patterns-openSUSE-kde_plasma-20150918-12.1 patterns-openSUSE-kde_telepathy-20150918-12.1 patterns-openSUSE-kde_utilities-20150918-12.1 patterns-openSUSE-kde_utilities_opt-20150918-12.1 patterns-openSUSE-kde_yast-20150918-12.1 patterns-openSUSE-kvm_server-20150918-12.1 patterns-openSUSE-lamp_server-20150918-12.1 patterns-openSUSE-laptop-20150918-12.1 patterns-openSUSE-leechcraft-20150918-12.1 patterns-openSUSE-leechcraft_browser-20150918-12.1 patterns-openSUSE-leechcraft_media-20150918-12.1 patterns-openSUSE-leechcraft_messenger-20150918-12.1 patterns-openSUSE-leechcraft_netutils-20150918-12.1 patterns-openSUSE-leechcraft_office-20150918-12.1 patterns-openSUSE-leechcraft_utilities-20150918-12.1 patterns-openSUSE-lxde-20150918-12.1 patterns-openSUSE-lxde_laptop-20150918-12.1 patterns-openSUSE-lxde_office-20150918-12.1 patterns-openSUSE-lxqt-20150918-12.1 patterns-openSUSE-mail_server-20150918-12.1 patterns-openSUSE-mate-20150918-12.1 patterns-openSUSE-mate_admin-20150918-12.1 patterns-openSUSE-mate_basis-20150918-12.1 patterns-openSUSE-mate_internet-20150918-12.1 patterns-openSUSE-mate_laptop-20150918-12.1 patterns-openSUSE-mate_office-20150918-12.1 patterns-openSUSE-mate_office_opt-20150918-12.1 patterns-openSUSE-mate_utilities-20150918-12.1 patterns-openSUSE-minimal_base-20150918-12.1 patterns-openSUSE-minimal_base-conflicts-20150918-12.1 patterns-openSUSE-misc_server-20150918-12.1 patterns-openSUSE-multimedia-20150918-12.1 patterns-openSUSE-multimedia_opt-20150918-12.1 patterns-openSUSE-network_admin-20150918-12.1 patterns-openSUSE-non_oss-20150918-12.1 patterns-openSUSE-non_oss_opt-20150918-12.1 patterns-openSUSE-office-20150918-12.1 patterns-openSUSE-office_opt-20150918-12.1 patterns-openSUSE-print_server-20150918-12.1 patterns-openSUSE-remote_desktop-20150918-12.1 patterns-openSUSE-rest_cd_gnome-20150918-12.1 patterns-openSUSE-rest_cd_kde-20150918-12.1 patterns-openSUSE-rest_cd_x11-20150918-12.1 patterns-openSUSE-rest_core_dvd-20150918-12.1 patterns-openSUSE-rest_dvd-20150918-12.1 patterns-openSUSE-rest_dvd9-20150918-12.1 patterns-openSUSE-rest_promo_dvd-20150918-12.1 patterns-openSUSE-sw_management-20150918-12.1 patterns-openSUSE-sw_management_gnome-20150918-12.1 patterns-openSUSE-sw_management_kde-20150918-12.1 patterns-openSUSE-tabletpc-20150918-12.1 patterns-openSUSE-technical_writing-20150918-12.1 patterns-openSUSE-update_test-20150918-12.1 patterns-openSUSE-voip-20150918-12.1 patterns-openSUSE-x11-20150918-12.1 patterns-openSUSE-x11_opt-20150918-12.1 patterns-openSUSE-x11_yast-20150918-12.1 patterns-openSUSE-x86-20150918-12.1 patterns-openSUSE-xen_server-20150918-12.1 patterns-openSUSE-xfce-20150918-12.1 patterns-openSUSE-xfce_basis-20150918-12.1 patterns-openSUSE-xfce_laptop-20150918-12.1 patterns-openSUSE-xfce_office-20150918-12.1 patterns-openSUSE-yast2_basis-20150918-12.1 patterns-openSUSE-yast2_install_wf-20150918-12.1 - openSUSE Leap 42.1 (noarch): fonts-config-20150424-3.1 References: https://bugzilla.suse.com/951898

1 0

openSUSE-RU-2015:2079-1: Recommended update for polkit
by maintenance＠opensuse.org 23 Nov '15

23 Nov '15

openSUSE Recommended Update: Recommended update for polkit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2079-1 Rating: low References: #954139 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a regression caused by a previous polkit update. The 0.113 version contains slightly adjusted systemd session handling which does not always work correctly, resulting in "active" sessions being handled as "inactive" ones and so privilege requests dialogs happened unexpectedly. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-798=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-798=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-798=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libpolkit0-0.113-9.1 libpolkit0-debuginfo-0.113-9.1 polkit-0.113-9.1 polkit-debuginfo-0.113-9.1 polkit-debugsource-0.113-9.1 polkit-devel-0.113-9.1 polkit-devel-debuginfo-0.113-9.1 typelib-1_0-Polkit-1_0-0.113-9.1 - openSUSE Leap 42.1 (x86_64): libpolkit0-32bit-0.113-9.1 libpolkit0-debuginfo-32bit-0.113-9.1 - openSUSE Leap 42.1 (noarch): polkit-doc-0.113-9.1 - openSUSE 13.2 (i586 x86_64): libpolkit0-0.113-3.11.1 libpolkit0-debuginfo-0.113-3.11.1 polkit-0.113-3.11.1 polkit-debuginfo-0.113-3.11.1 polkit-debugsource-0.113-3.11.1 polkit-devel-0.113-3.11.1 polkit-devel-debuginfo-0.113-3.11.1 typelib-1_0-Polkit-1_0-0.113-3.11.1 - openSUSE 13.2 (x86_64): libpolkit0-32bit-0.113-3.11.1 libpolkit0-debuginfo-32bit-0.113-3.11.1 - openSUSE 13.2 (noarch): polkit-doc-0.113-3.11.1 - openSUSE 13.1 (i586 x86_64): libpolkit0-0.113-12.1 libpolkit0-debuginfo-0.113-12.1 polkit-0.113-12.1 polkit-debuginfo-0.113-12.1 polkit-debugsource-0.113-12.1 polkit-devel-0.113-12.1 polkit-devel-debuginfo-0.113-12.1 typelib-1_0-Polkit-1_0-0.113-12.1 - openSUSE 13.1 (x86_64): libpolkit0-32bit-0.113-12.1 libpolkit0-debuginfo-32bit-0.113-12.1 - openSUSE 13.1 (noarch): polkit-doc-0.113-12.1 References: https://bugzilla.suse.com/954139

1 0

openSUSE-RU-2015:2078-1: moderate: Recommended update for deepin-music-player
by maintenance＠opensuse.org 23 Nov '15

23 Nov '15

openSUSE Recommended Update: Recommended update for deepin-music-player ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2078-1 Rating: moderate References: #954761 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for deepin-music-player fixes the following issues: - Fix boo#954761 * add python-Pillow as Requires. - Add %icon_theme_cache_post / %icon_theme_cache_postun macro. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-796=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): deepin-music-player-2.90.0+git20150617.bb7889c-8.1 deepin-music-player-lang-2.90.0+git20150617.bb7889c-8.1 References: https://bugzilla.suse.com/954761

1 0

openSUSE-RU-2015:2077-1: moderate: Recommended update for wicked
by maintenance＠opensuse.org 23 Nov '15

23 Nov '15

openSUSE Recommended Update: Recommended update for wicked ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2077-1 Rating: moderate References: #953107 #954289 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update provides version 0.6.28 for wicked: - fsm: dynamically resolve references and requirements (bsc#954289) - nanny: do not pull in and rearm subordinate workers (bsc#954289) - nanny: fix managed policy list handling (bsc#953107) - ifup: do not update policy when it has been created and recheck with a name filter list instead to enable separately to avoid a race condition (bsc#953107) - ovs: do not require link on ovs-system device Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-795=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libwicked-0-6-0.6.28-24.1 libwicked-0-6-debuginfo-0.6.28-24.1 wicked-0.6.28-24.1 wicked-debuginfo-0.6.28-24.1 wicked-debugsource-0.6.28-24.1 wicked-service-0.6.28-24.1 References: https://bugzilla.suse.com/953107 https://bugzilla.suse.com/954289

1 0

openSUSE-RU-2015:2076-1: moderate: Recommended update for yaml-cpp
by maintenance＠opensuse.org 23 Nov '15

23 Nov '15

openSUSE Recommended Update: Recommended update for yaml-cpp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2076-1 Rating: moderate References: #954749 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for yaml-cpp fixes the following issue: - Add patch to fix wrong node behaviour in 0.5.2 bnc#954749: * fix-node-regression.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-794=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libyaml-cpp0_5-0.5.2-13.2 libyaml-cpp0_5-debuginfo-0.5.2-13.2 yaml-cpp-debugsource-0.5.2-13.2 yaml-cpp-devel-0.5.2-13.2 References: https://bugzilla.suse.com/954749

1 0

openSUSE-RU-2015:2075-1: moderate: Recommended update for nfs-utils
by maintenance＠opensuse.org 23 Nov '15

23 Nov '15

openSUSE Recommended Update: Recommended update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2075-1 Rating: moderate References: #952055 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for nfs-utils fixes the following issue: Use proper annotations for service restart (bsc#952055). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-797=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): nfs-client-1.3.0-4.4.1 nfs-client-debuginfo-1.3.0-4.4.1 nfs-doc-1.3.0-4.4.1 nfs-kernel-server-1.3.0-4.4.1 nfs-kernel-server-debuginfo-1.3.0-4.4.1 nfs-utils-debugsource-1.3.0-4.4.1 References: https://bugzilla.suse.com/952055

1 0

openSUSE-RU-2015:2074-1: moderate: Recommended update for salt
by maintenance＠opensuse.org 23 Nov '15

23 Nov '15

openSUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2074-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for salt fixes the following issues: - Updated to bugfix release 2015.8.2 - os_grain.patch will fix the grains on sles 11 sp3 for more details: https://docs.saltstack.com/en/2015.8/topics/releases/2015.8.2.html Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-793=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): salt-2015.8.2-3.1 salt-api-2015.8.2-3.1 salt-cloud-2015.8.2-3.1 salt-doc-2015.8.2-3.1 salt-master-2015.8.2-3.1 salt-minion-2015.8.2-3.1 salt-proxy-2015.8.2-3.1 salt-raet-2015.8.2-3.1 salt-ssh-2015.8.2-3.1 salt-syndic-2015.8.2-3.1 - openSUSE Leap 42.1 (noarch): salt-bash-completion-2015.8.2-3.1 salt-fish-completion-2015.8.2-3.1 salt-zsh-completion-2015.8.2-3.1 References:

1 0

openSUSE-SU-2015:2073-1: moderate: Security update for docker
by opensuse-security＠opensuse.org 23 Nov '15

23 Nov '15

openSUSE Security Update: Security update for docker ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2073-1 Rating: moderate References: #949660 #954737 #954812 Cross-References: CVE-2014-8178 CVE-2014-8179 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: Docker was updated to version 1.9.0, bringing features and bugfixes (bnc#954812): * Runtime: - `docker stats` now returns block IO metrics (#15005) - `docker stats` now details network stats per interface (#15786) - Add `ancestor=<image>` filter to `docker ps --filter` flag to filter containers based on their ancestor images (#14570) - Add `label=<somelabel>` filter to `docker ps --filter` to filter containers based on label (#16530) - Add `--kernel-memory` flag to `docker run` (#14006) - Add `--message` flag to `docker import` allowing to specify an optional message (#15711) - Add `--privileged` flag to `docker exec` (#14113) - Add `--stop-signal` flag to `docker run` allowing to replace the container process stopping signal (#15307) - Add a new `unless-stopped` restart policy (#15348) - Inspecting an image now returns tags (#13185) - Add container size information to `docker inspect` (#15796) - Add `RepoTags` and `RepoDigests` field to `/images/{name:.*}/json` (#17275) - Remove the deprecated `/container/ps` endpoint from the API (#15972) - Send and document correct HTTP codes for `/exec/<name>/start` (#16250) - Share shm and mqueue between containers sharing IPC namespace (#15862) - Event stream now shows OOM status when `--oom-kill-disable` is set (#16235) - Ensure special network files (/etc/hosts etc.) are read-only if bind-mounted with `ro` option (#14965) - Improve `rmi` performance (#16890) - Do not update /etc/hosts for the default bridge network, except for links (#17325) - Fix conflict with duplicate container names (#17389) - Fix an issue with incorrect template execution in `docker inspect` (#17284) - DEPRECATE `-c` short flag variant for `--cpu-shares` in docker run (#16271) * Client: - Allow `docker import` to import from local files (#11907) * Builder: - Add a `STOPSIGNAL` Dockerfile instruction allowing to set a different stop-signal for the container process (#15307) - Add an `ARG` Dockerfile instruction and a `--build-arg` flag to `docker build` that allows to add build-time environment variables (#15182) - Improve cache miss performance (#16890) * Storage: - devicemapper: Implement deferred deletion capability (#16381) * Networking: - `docker network` exits experimental and is part of standard release (#16645) - New network top-level concept, with associated subcommands and API (#16645) WARNING: the API is different from the experimental API - Support for multiple isolated/micro-segmented networks (#16645) - Built-in multihost networking using VXLAN based overlay driver (#14071) - Support for third-party network plugins (#13424) - Ability to dynamically connect containers to multiple networks (#16645) - Support for user-defined IP address management via pluggable IPAM drivers (#16910) - Add daemon flags `--cluster-store` and `--cluster-advertise` for built-in nodes discovery (#16229) - Add `--cluster-store-opt` for setting up TLS settings (#16644) - Add `--dns-opt` to the daemon (#16031) - DEPRECATE following container `NetworkSettings` fields in API v1.21: `EndpointID`, `Gateway`, `GlobalIPv6Address`, `GlobalIPv6PrefixLen`, `IPAddress`, `IPPrefixLen`, `IPv6Gateway` and `MacAddress`. Those are now specific to the `bridge` network. Use `NetworkSettings.Networks` to inspect the networking settings of a container per network. * Volumes: - New top-level `volume` subcommand and API (#14242) - Move API volume driver settings to host-specific config (#15798) - Print an error message if volume name is not unique (#16009) - Ensure volumes created from Dockerfiles always use the local volume driver (#15507) - DEPRECATE auto-creating missing host paths for bind mounts (#16349) * Logging: - Add `awslogs` logging driver for Amazon CloudWatch (#15495) - Add generic `tag` log option to allow customizing container/image information passed to driver (e.g. show container names) (#15384) - Implement the `docker logs` endpoint for the journald driver (#13707) - DEPRECATE driver-specific log tags (e.g. `syslog-tag`, etc.) (#15384) * Distribution: - `docker search` now works with partial names (#16509) - Push optimization: avoid buffering to file (#15493) - The daemon will display progress for images that were already being pulled by another client (#15489) - Only permissions required for the current action being performed are requested (#) - Renaming trust keys (and respective environment variables) from `offline` to `root` and `tagging` to `repository` (#16894) - DEPRECATE trust key environment variables `DOCKER_CONTENT_TRUST_OFFLINE_PASSPHRASE` and `DOCKER_CONTENT_TRUST_TAGGING_PASSPHRASE` (#16894) * Security: - Add SELinux profiles to the rpm package (#15832) - Fix various issues with AppArmor profiles provided in the deb package (#14609) - Add AppArmor policy that prevents writing to /proc (#15571) * Change systemd unit file to no longer use the deprecated "-d" option (bnc#954737) - Also docker was updated to the 1.8.3 version that fixes security issues: * Fix layer IDs lead to local graph poisoning (CVE-2014-8178) (bnc#949660) * Fix manifest validation and parsing logic errors allow pull-by-digest validation bypass (CVE-2014-8179) * Add `--disable-legacy-registry` to prevent a daemon from using a v1 registry Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-792=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): docker-1.9.0-4.1 docker-debuginfo-1.9.0-4.1 docker-debugsource-1.9.0-4.1 - openSUSE Leap 42.1 (noarch): docker-bash-completion-1.9.0-4.1 docker-test-1.9.0-4.1 docker-zsh-completion-1.9.0-4.1 References: https://www.suse.com/security/cve/CVE-2014-8178.html https://www.suse.com/security/cve/CVE-2014-8179.html https://bugzilla.suse.com/949660 https://bugzilla.suse.com/954737 https://bugzilla.suse.com/954812

1 0

openSUSE-RU-2015:2072-1: kernel update for Evergreen 11.4
by maintenance＠opensuse.org 22 Nov '15

22 Nov '15

openSUSE Recommended Update: kernel update for Evergreen 11.4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2072-1 Rating: low References: Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: kernel update for Evergreen 11.4 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-790=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): kernel-debug-3.0.101-102.1 kernel-debug-base-3.0.101-102.1 kernel-debug-base-debuginfo-3.0.101-102.1 kernel-debug-debuginfo-3.0.101-102.1 kernel-debug-debugsource-3.0.101-102.1 kernel-debug-devel-3.0.101-102.1 kernel-debug-devel-debuginfo-3.0.101-102.1 kernel-debug-hmac-3.0.101-102.1 kernel-default-3.0.101-102.1 kernel-default-base-3.0.101-102.1 kernel-default-base-debuginfo-3.0.101-102.1 kernel-default-debuginfo-3.0.101-102.1 kernel-default-debugsource-3.0.101-102.1 kernel-default-devel-3.0.101-102.1 kernel-default-devel-debuginfo-3.0.101-102.1 kernel-default-hmac-3.0.101-102.1 kernel-desktop-3.0.101-102.1 kernel-desktop-base-3.0.101-102.1 kernel-desktop-base-debuginfo-3.0.101-102.1 kernel-desktop-debuginfo-3.0.101-102.1 kernel-desktop-debugsource-3.0.101-102.1 kernel-desktop-devel-3.0.101-102.1 kernel-desktop-devel-debuginfo-3.0.101-102.1 kernel-desktop-hmac-3.0.101-102.1 kernel-ec2-3.0.101-102.1 kernel-ec2-base-3.0.101-102.1 kernel-ec2-base-debuginfo-3.0.101-102.1 kernel-ec2-debuginfo-3.0.101-102.1 kernel-ec2-debugsource-3.0.101-102.1 kernel-ec2-devel-3.0.101-102.1 kernel-ec2-devel-debuginfo-3.0.101-102.1 kernel-ec2-extra-3.0.101-102.1 kernel-ec2-extra-debuginfo-3.0.101-102.1 kernel-ec2-hmac-3.0.101-102.1 kernel-source-3.0.101-102.1 kernel-source-vanilla-3.0.101-102.1 kernel-syms-3.0.101-102.1 kernel-trace-3.0.101-102.1 kernel-trace-base-3.0.101-102.1 kernel-trace-base-debuginfo-3.0.101-102.1 kernel-trace-debuginfo-3.0.101-102.1 kernel-trace-debugsource-3.0.101-102.1 kernel-trace-devel-3.0.101-102.1 kernel-trace-devel-debuginfo-3.0.101-102.1 kernel-trace-hmac-3.0.101-102.1 kernel-vanilla-3.0.101-102.1 kernel-vanilla-base-3.0.101-102.1 kernel-vanilla-base-debuginfo-3.0.101-102.1 kernel-vanilla-debuginfo-3.0.101-102.1 kernel-vanilla-debugsource-3.0.101-102.1 kernel-vanilla-devel-3.0.101-102.1 kernel-vanilla-devel-debuginfo-3.0.101-102.1 kernel-vanilla-hmac-3.0.101-102.1 kernel-xen-3.0.101-102.1 kernel-xen-base-3.0.101-102.1 kernel-xen-base-debuginfo-3.0.101-102.1 kernel-xen-debuginfo-3.0.101-102.1 kernel-xen-debugsource-3.0.101-102.1 kernel-xen-devel-3.0.101-102.1 kernel-xen-devel-debuginfo-3.0.101-102.1 kernel-xen-hmac-3.0.101-102.1 preload-1.2-6.80.1 preload-debuginfo-1.2-6.80.1 preload-debugsource-1.2-6.80.1 preload-kmp-default-1.2_3.0.101_102-6.80.1 preload-kmp-default-debuginfo-1.2_3.0.101_102-6.80.1 preload-kmp-desktop-1.2_3.0.101_102-6.80.1 preload-kmp-desktop-debuginfo-1.2_3.0.101_102-6.80.1 - openSUSE Evergreen 11.4 (noarch): kernel-docs-3.0.101-102.1 - openSUSE Evergreen 11.4 (i586): kernel-pae-3.0.101-102.1 kernel-pae-base-3.0.101-102.1 kernel-pae-base-debuginfo-3.0.101-102.1 kernel-pae-debuginfo-3.0.101-102.1 kernel-pae-debugsource-3.0.101-102.1 kernel-pae-devel-3.0.101-102.1 kernel-pae-devel-debuginfo-3.0.101-102.1 kernel-pae-hmac-3.0.101-102.1 kernel-vmi-3.0.101-102.1 kernel-vmi-base-3.0.101-102.1 kernel-vmi-base-debuginfo-3.0.101-102.1 kernel-vmi-debuginfo-3.0.101-102.1 kernel-vmi-debugsource-3.0.101-102.1 kernel-vmi-devel-3.0.101-102.1 kernel-vmi-devel-debuginfo-3.0.101-102.1 kernel-vmi-hmac-3.0.101-102.1 References:

1 0