November 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2015:2022-1: moderate: Security update for dracut
by opensuse-security＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Security Update: Security update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2022-1 Rating: moderate References: #935338 #935993 #952491 Cross-References: CVE-2015-0794 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: The dracut package was updated to fix the following security and non security issues: - CVE-2015-0794: Use mktemp instead of hardcoded filenames, possible vulnerability (bnc#935338). - Always install mdraid modules (boo#935993). - Add notice when dracut failed to install modules (bsc#952491). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-765=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): dracut-037-17.30.1 dracut-debuginfo-037-17.30.1 dracut-debugsource-037-17.30.1 dracut-fips-037-17.30.1 References: https://www.suse.com/security/cve/CVE-2015-0794.html https://bugzilla.suse.com/935338 https://bugzilla.suse.com/935993 https://bugzilla.suse.com/952491

1 0

openSUSE-RU-2015:2021-1: moderate: Recommended update for plymouth
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for plymouth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2021-1 Rating: moderate References: #939204 #949046 #951983 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for plymouth provides the following fixes: - Do not filter out useful control characters. (bsc#951983) - Rewrite version handling in the spec file to avoid hard-coding SLE versions. (bsc#949046) - Ensure plymouth-reboot always restarts if needed to show all the log messages. (bsc#939204) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-764=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libply-boot-client2-0.9.0-8.1 libply-boot-client2-debuginfo-0.9.0-8.1 libply-splash-core2-0.9.0-8.1 libply-splash-core2-debuginfo-0.9.0-8.1 libply-splash-graphics2-0.9.0-8.1 libply-splash-graphics2-debuginfo-0.9.0-8.1 libply2-0.9.0-8.1 libply2-debuginfo-0.9.0-8.1 plymouth-0.9.0-8.1 plymouth-debuginfo-0.9.0-8.1 plymouth-debugsource-0.9.0-8.1 plymouth-devel-0.9.0-8.1 plymouth-dracut-0.9.0-8.1 plymouth-plugin-fade-throbber-0.9.0-8.1 plymouth-plugin-fade-throbber-debuginfo-0.9.0-8.1 plymouth-plugin-label-0.9.0-8.1 plymouth-plugin-label-debuginfo-0.9.0-8.1 plymouth-plugin-script-0.9.0-8.1 plymouth-plugin-script-debuginfo-0.9.0-8.1 plymouth-plugin-space-flares-0.9.0-8.1 plymouth-plugin-space-flares-debuginfo-0.9.0-8.1 plymouth-plugin-throbgress-0.9.0-8.1 plymouth-plugin-throbgress-debuginfo-0.9.0-8.1 plymouth-plugin-tribar-0.9.0-8.1 plymouth-plugin-tribar-debuginfo-0.9.0-8.1 plymouth-plugin-two-step-0.9.0-8.1 plymouth-plugin-two-step-debuginfo-0.9.0-8.1 plymouth-scripts-0.9.0-8.1 plymouth-utils-0.9.0-8.1 plymouth-utils-debuginfo-0.9.0-8.1 plymouth-x11-renderer-0.9.0-8.1 plymouth-x11-renderer-debuginfo-0.9.0-8.1 - openSUSE Leap 42.1 (noarch): plymouth-theme-fade-in-0.9.0-8.1 plymouth-theme-script-0.9.0-8.1 plymouth-theme-solar-0.9.0-8.1 plymouth-theme-spinfinity-0.9.0-8.1 plymouth-theme-spinner-0.9.0-8.1 plymouth-theme-tribar-0.9.0-8.1 References: https://bugzilla.suse.com/939204 https://bugzilla.suse.com/949046 https://bugzilla.suse.com/951983

1 0

openSUSE-RU-2015:2020-1: moderate: Recommended update for alsa
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for alsa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2020-1 Rating: moderate References: #954279 #954281 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for alsa fixes the following issues: - Fix PCM dmix/dsnoop XRUN handling in slave PCM (boo#954281). - Align topology API with the official alsa-lib 1.1.0 release (boo#954279). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-761=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): alsa-1.0.29-10.1 alsa-debugsource-1.0.29-10.1 alsa-devel-1.0.29-10.1 libasound2-1.0.29-10.1 libasound2-debuginfo-1.0.29-10.1 - openSUSE Leap 42.1 (x86_64): alsa-devel-32bit-1.0.29-10.1 libasound2-32bit-1.0.29-10.1 libasound2-debuginfo-32bit-1.0.29-10.1 - openSUSE Leap 42.1 (noarch): alsa-docs-1.0.29-10.1 References: https://bugzilla.suse.com/954279 https://bugzilla.suse.com/954281

1 0

openSUSE-RU-2015:2019-1: moderate: Recommended update for target-isns
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for target-isns ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2019-1 Rating: moderate References: #950366 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for target-isns fixes the following issue: - Handle 2 places isnsd was handling IP addresses incorrectly, assuming big-endian architecture (boo#950366). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-759=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): target-isns-0.3-6.1 target-isns-debuginfo-0.3-6.1 target-isns-debugsource-0.3-6.1 References: https://bugzilla.suse.com/950366

1 0

openSUSE-RU-2015:2018-1: moderate: Recommended update for gnome-session
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for gnome-session ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2018-1 Rating: moderate References: #931314 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-session fixes the following issue: - Add DesktopNames, needed by SDDM to start GNOME (boo#931314) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-762=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gnome-session-3.16.0-5.2 gnome-session-core-3.16.0-5.2 gnome-session-core-debuginfo-3.16.0-5.2 gnome-session-debugsource-3.16.0-5.2 gnome-session-default-session-3.16.0-5.2 gnome-session-wayland-3.16.0-5.2 - openSUSE Leap 42.1 (noarch): gnome-session-lang-3.16.0-5.2 References: https://bugzilla.suse.com/931314

1 0

openSUSE-SU-2015:2016-1: moderate: Security update for ntp
by opensuse-security＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Security Update: Security update for ntp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2016-1 Rating: moderate References: #951608 Cross-References: CVE-2015-7691 CVE-2015-7692 CVE-2015-7701 CVE-2015-7702 CVE-2015-7703 CVE-2015-7704 CVE-2015-7705 CVE-2015-7848 CVE-2015-7849 CVE-2015-7850 CVE-2015-7851 CVE-2015-7852 CVE-2015-7853 CVE-2015-7854 CVE-2015-7855 CVE-2015-7871 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 16 vulnerabilities is now available. Description: This ntp update provides the following security and non security fixes: - Update to 4.2.8p4 to fix several security issues (bsc#951608): * CVE-2015-7871: NAK to the Future: Symmetric association authentication bypass via crypto-NAK * CVE-2015-7855: decodenetnum() will ASSERT botch instead of returning FAIL on some bogus values * CVE-2015-7854: Password Length Memory Corruption Vulnerability * CVE-2015-7853: Invalid length data provided by a custom refclock driver could cause a buffer overflow * CVE-2015-7852 ntpq atoascii() Memory Corruption Vulnerability * CVE-2015-7851 saveconfig Directory Traversal Vulnerability * CVE-2015-7850 remote config logfile-keyfile * CVE-2015-7849 trusted key use-after-free * CVE-2015-7848 mode 7 loop counter underrun * CVE-2015-7701 Slow memory leak in CRYPTO_ASSOC * CVE-2015-7703 configuration directives "pidfile" and "driftfile" should only be allowed locally * CVE-2015-7704, CVE-2015-7705 Clients that receive a KoD should validate the origin timestamp field * CVE-2015-7691, CVE-2015-7692, CVE-2015-7702 Incomplete autokey data packet length checks * obsoletes ntp-memlock.patch. - Add a controlkey line to /etc/ntp.conf if one does not already exist to allow runtime configuuration via ntpq. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-767=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ntp-4.2.8p4-9.2 ntp-debuginfo-4.2.8p4-9.2 ntp-debugsource-4.2.8p4-9.2 ntp-doc-4.2.8p4-9.2 References: https://www.suse.com/security/cve/CVE-2015-7691.html https://www.suse.com/security/cve/CVE-2015-7692.html https://www.suse.com/security/cve/CVE-2015-7701.html https://www.suse.com/security/cve/CVE-2015-7702.html https://www.suse.com/security/cve/CVE-2015-7703.html https://www.suse.com/security/cve/CVE-2015-7704.html https://www.suse.com/security/cve/CVE-2015-7705.html https://www.suse.com/security/cve/CVE-2015-7848.html https://www.suse.com/security/cve/CVE-2015-7849.html https://www.suse.com/security/cve/CVE-2015-7850.html https://www.suse.com/security/cve/CVE-2015-7851.html https://www.suse.com/security/cve/CVE-2015-7852.html https://www.suse.com/security/cve/CVE-2015-7853.html https://www.suse.com/security/cve/CVE-2015-7854.html https://www.suse.com/security/cve/CVE-2015-7855.html https://www.suse.com/security/cve/CVE-2015-7871.html https://bugzilla.suse.com/951608

1 0

openSUSE-RU-2015:2015-1: moderate: Recommended update for suse-xsl-stylesheets
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for suse-xsl-stylesheets ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2015-1 Rating: moderate References: #951717 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for suse-xsl-stylesheet provides the latest stable release 2.0.3.1 with various fixes and improvements (boo#951717): - Stylesheets: + PDF: Fixed Admonition titles with normal font weight + PDF: Fixed Product name/version displayed on cover and in footer of DocBook-5-generated books + PDF: Do not generate transparent text in CJK books + XHTML: Bugzilla links are only generated where necessary + XHTML: Make callouts uncopyable + XHTML: Fix display of screens and long commands in screen Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-758=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): suse-xsl-stylesheets-2.0.3.1-6.2 References: https://bugzilla.suse.com/951717

1 0

openSUSE-RU-2015:2014-1: moderate: Recommended update for multipath-tools
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for multipath-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2014-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for multipath-tools fixes the following issues: - Fixes for md_monitor on zFCP (FATE#319070): + strict loop timings + multipathd: fixup a crash when invoking CLI commands + multipathd: implement 'show map $map format $format Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-763=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kpartx-0.5.0-50.1 kpartx-debuginfo-0.5.0-50.1 multipath-tools-0.5.0-50.1 multipath-tools-debuginfo-0.5.0-50.1 multipath-tools-debugsource-0.5.0-50.1 multipath-tools-devel-0.5.0-50.1 References:

1 0

openSUSE-RU-2015:2012-1: moderate: Recommended update for util-linux
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2012-1 Rating: moderate References: #931634 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides the following functionality for util-linux: - losetup: Add support for setting logical blocksizes (bsc#931634, FATE#319010) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-760=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libblkid-devel-2.25-12.2 libblkid1-2.25-12.2 libblkid1-debuginfo-2.25-12.2 libmount-devel-2.25-12.2 libmount1-2.25-12.2 libmount1-debuginfo-2.25-12.2 libsmartcols-devel-2.25-12.2 libsmartcols1-2.25-12.2 libsmartcols1-debuginfo-2.25-12.2 libuuid-devel-2.25-12.2 libuuid1-2.25-12.2 libuuid1-debuginfo-2.25-12.2 python-libmount-2.25-12.5 python-libmount-debuginfo-2.25-12.5 python-libmount-debugsource-2.25-12.5 util-linux-2.25-12.2 util-linux-debuginfo-2.25-12.2 util-linux-debugsource-2.25-12.2 util-linux-systemd-2.25-12.1 util-linux-systemd-debuginfo-2.25-12.1 util-linux-systemd-debugsource-2.25-12.1 uuidd-2.25-12.1 uuidd-debuginfo-2.25-12.1 - openSUSE Leap 42.1 (x86_64): libblkid-devel-32bit-2.25-12.2 libblkid1-32bit-2.25-12.2 libblkid1-debuginfo-32bit-2.25-12.2 libmount-devel-32bit-2.25-12.2 libmount1-32bit-2.25-12.2 libmount1-debuginfo-32bit-2.25-12.2 libuuid-devel-32bit-2.25-12.2 libuuid1-32bit-2.25-12.2 libuuid1-debuginfo-32bit-2.25-12.2 - openSUSE Leap 42.1 (noarch): util-linux-lang-2.25-12.2 References: https://bugzilla.suse.com/931634

1 0

openSUSE-RU-2015:2011-1: moderate: Recommended update for openssl
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2011-1 Rating: moderate References: #952871 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openssl fixes the following issue: - Avoid running OPENSSL_config twice. This avoids breaking engine loading. (bsc#952871) - openssl.keyring: Replaced with correct release engineer key Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-755=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libopenssl-devel-1.0.1i-6.1 libopenssl1_0_0-1.0.1i-6.1 libopenssl1_0_0-debuginfo-1.0.1i-6.1 libopenssl1_0_0-hmac-1.0.1i-6.1 openssl-1.0.1i-6.1 openssl-debuginfo-1.0.1i-6.1 openssl-debugsource-1.0.1i-6.1 - openSUSE Leap 42.1 (x86_64): libopenssl-devel-32bit-1.0.1i-6.1 libopenssl1_0_0-32bit-1.0.1i-6.1 libopenssl1_0_0-debuginfo-32bit-1.0.1i-6.1 libopenssl1_0_0-hmac-32bit-1.0.1i-6.1 - openSUSE Leap 42.1 (noarch): openssl-doc-1.0.1i-6.1 References: https://bugzilla.suse.com/952871

1 0

openSUSE-RU-2015:2010-1: moderate: Recommended update for sssd
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for sssd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2010-1 Rating: moderate References: #926961 #939249 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for sssd fixes the following issue: - Do not permit user session before SSSD starts (boo#926961). - Redo fix for boo#939249 by using rpm Requires. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-757=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libipa_hbac-devel-1.11.5.1-7.1 libipa_hbac0-1.11.5.1-7.1 libipa_hbac0-debuginfo-1.11.5.1-7.1 libsss_idmap-devel-1.11.5.1-7.1 libsss_idmap0-1.11.5.1-7.1 libsss_idmap0-debuginfo-1.11.5.1-7.1 libsss_nss_idmap-devel-1.11.5.1-7.1 libsss_nss_idmap0-1.11.5.1-7.1 libsss_nss_idmap0-debuginfo-1.11.5.1-7.1 libsss_sudo-1.11.5.1-7.1 libsss_sudo-debuginfo-1.11.5.1-7.1 python-ipa_hbac-1.11.5.1-7.1 python-ipa_hbac-debuginfo-1.11.5.1-7.1 python-sss_nss_idmap-1.11.5.1-7.1 python-sss_nss_idmap-debuginfo-1.11.5.1-7.1 python-sssd-config-1.11.5.1-7.1 python-sssd-config-debuginfo-1.11.5.1-7.1 sssd-1.11.5.1-7.1 sssd-ad-1.11.5.1-7.1 sssd-ad-debuginfo-1.11.5.1-7.1 sssd-debuginfo-1.11.5.1-7.1 sssd-debugsource-1.11.5.1-7.1 sssd-ipa-1.11.5.1-7.1 sssd-ipa-debuginfo-1.11.5.1-7.1 sssd-krb5-1.11.5.1-7.1 sssd-krb5-common-1.11.5.1-7.1 sssd-krb5-common-debuginfo-1.11.5.1-7.1 sssd-krb5-debuginfo-1.11.5.1-7.1 sssd-ldap-1.11.5.1-7.1 sssd-ldap-debuginfo-1.11.5.1-7.1 sssd-proxy-1.11.5.1-7.1 sssd-proxy-debuginfo-1.11.5.1-7.1 sssd-tools-1.11.5.1-7.1 sssd-tools-debuginfo-1.11.5.1-7.1 - openSUSE Leap 42.1 (x86_64): sssd-32bit-1.11.5.1-7.1 sssd-debuginfo-32bit-1.11.5.1-7.1 References: https://bugzilla.suse.com/926961 https://bugzilla.suse.com/939249

1 0

openSUSE-RU-2015:2009-1: Recommended udpate for libosinfo
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended udpate for libosinfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2009-1 Rating: low References: #946157 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libosinfo fixes the following issue: - Fix mouse cursor in Guest OS installation in KVM Mode (boo#946157). - Use correct name for openSUSE Leap 42.1 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-752=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libosinfo-0.2.12-10.1 libosinfo-1_0-0-0.2.12-10.1 libosinfo-1_0-0-debuginfo-0.2.12-10.1 libosinfo-debuginfo-0.2.12-10.1 libosinfo-debugsource-0.2.12-10.1 libosinfo-devel-0.2.12-10.1 typelib-1_0-Libosinfo-1_0-0.2.12-10.1 - openSUSE Leap 42.1 (noarch): libosinfo-lang-0.2.12-10.1 References: https://bugzilla.suse.com/946157

1 0

openSUSE-RU-2015:2008-1: moderate: Recommended update for openCryptoki
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for openCryptoki ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2008-1 Rating: moderate References: #953347 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openCryptoki fixes the following issue: - Get a new ldap handle for each session opened in the icsf token, once the user has authenticated. (boo#953347) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-754=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): openCryptoki-3.2-4.1 openCryptoki-debuginfo-3.2-4.1 openCryptoki-debugsource-3.2-4.1 openCryptoki-devel-3.2-4.1 - openSUSE Leap 42.1 (x86_64): openCryptoki-64bit-3.2-4.1 openCryptoki-64bit-debuginfo-3.2-4.1 - openSUSE Leap 42.1 (i586): openCryptoki-32bit-3.2-4.1 openCryptoki-32bit-debuginfo-3.2-4.1 References: https://bugzilla.suse.com/953347

1 0

openSUSE-RU-2015:2007-1: moderate: Recommended update for md_monitor
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for md_monitor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2007-1 Rating: moderate References: #937340 #951211 #953510 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for md_monitor provides version 6.2 with various fixes and improvements: - Include zFCP support (FATE#319070) - Update scripts for zFCP - Set 'timeout' DASD attribute correctly on newer kernels - Include scripts to setup root on MD - Set 'failfast' attribute correctly on newer kernels - Call 'mdadm --wait' when shutdown array (boo#951211) - Include workaround for boo#953510 - Open device nodes read-only (boo#937340) - Use curl instead of wget - Fix I/O timeout handling to work with newer kernel Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-753=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): md_monitor-6.2-3.1 md_monitor-debuginfo-6.2-3.1 md_monitor-debugsource-6.2-3.1 References: https://bugzilla.suse.com/937340 https://bugzilla.suse.com/951211 https://bugzilla.suse.com/953510

1 0

openSUSE-RU-2015:2004-1: Recommended update for release-notes-openSUSE
by maintenance＠opensuse.org 17 Nov '15

17 Nov '15

openSUSE Recommended Update: Recommended update for release-notes-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2004-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This releases notes update for openSUSE Leap 42.1 adds notes on: - ndds hang - the udev network interface naming scheme Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-751=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): release-notes-openSUSE-42.1.20151109-3.1 References:

1 0

openSUSE-SU-2015:2003-1: important: Security update for xen
by opensuse-security＠opensuse.org 17 Nov '15

17 Nov '15

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2003-1 Rating: important References: #877642 #901488 #907514 #910258 #918984 #923967 #925466 #932267 #935634 #938344 #939709 #939712 #944463 #944697 #945167 #947165 #949138 #950367 #950703 #950705 #950706 #951845 Cross-References: CVE-2014-0222 CVE-2015-3259 CVE-2015-4037 CVE-2015-5154 CVE-2015-5165 CVE-2015-5166 CVE-2015-5239 CVE-2015-6815 CVE-2015-7311 CVE-2015-7835 CVE-2015-7969 CVE-2015-7971 CVE-2015-7972 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves 13 vulnerabilities and has 9 fixes is now available. Description: xen was updated to fix 12 security issues. These security issues were fixed: - CVE-2015-7972: Populate-on-demand balloon size inaccuracy can crash guests (bsc#951845). - CVE-2015-7969: Leak of main per-domain vcpu pointer array (DoS) (bsc#950703). - CVE-2015-7969: Leak of per-domain profiling-related vcpu pointer array (DoS) (bsc#950705). - CVE-2015-7971: Some pmu and profiling hypercalls log without rate limiting (bsc#950706). - CVE-2015-4037: Insecure temporary file use in /net/slirp.c (bsc#932267). - CVE-2014-0222: Validate L2 table size to avoid integer overflows (bsc#877642). - CVE-2015-7835: Uncontrolled creation of large page mappings by PV guests (bsc#950367). - CVE-2015-7311: libxl fails to honour readonly flag on disks with qemu-xen (bsc#947165). - CVE-2015-5165: QEMU leak of uninitialized heap memory in rtl8139 device model (bsc#939712). - CVE-2015-5166: Use after free in QEMU/Xen block unplug protocol (bsc#939709). - CVE-2015-5154: Host code execution via IDE subsystem CD-ROM (bsc#938344). - CVE-2015-3259: xl command line config handling stack overflow (bsc#935634). These non-security issues were fixed: - bsc#907514: Bus fatal error and sles12 sudden reboot has been observed - bsc#910258: SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984: Bus fatal error and sles11-SP4 sudden reboot has been observed - bsc#923967: Partner-L3: Bus fatal error and sles11-SP3 sudden reboot has been observed - bsc#901488: Intel ixgbe driver assigns rx/tx queues per core resulting in irq problems on servers with a large amount of CPU cores - bsc#945167: Running command xl pci-assignable-add 03:10.1 secondly show errors - bsc#949138: Setting vcpu affinity under Xen causes libvirtd abort - bsc#944463: VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg() - bsc#944697: VUL-1: CVE-2015-6815: qemu: net: e1000: infinite loop issue - bsc#925466: Kdump does not work in a XEN environment Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-750=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xen-debugsource-4.4.3_02-30.1 xen-devel-4.4.3_02-30.1 xen-libs-4.4.3_02-30.1 xen-libs-debuginfo-4.4.3_02-30.1 xen-tools-domU-4.4.3_02-30.1 xen-tools-domU-debuginfo-4.4.3_02-30.1 - openSUSE 13.2 (x86_64): xen-4.4.3_02-30.1 xen-doc-html-4.4.3_02-30.1 xen-kmp-default-4.4.3_02_k3.16.7_29-30.1 xen-kmp-default-debuginfo-4.4.3_02_k3.16.7_29-30.1 xen-kmp-desktop-4.4.3_02_k3.16.7_29-30.1 xen-kmp-desktop-debuginfo-4.4.3_02_k3.16.7_29-30.1 xen-libs-32bit-4.4.3_02-30.1 xen-libs-debuginfo-32bit-4.4.3_02-30.1 xen-tools-4.4.3_02-30.1 xen-tools-debuginfo-4.4.3_02-30.1 References: https://www.suse.com/security/cve/CVE-2014-0222.html https://www.suse.com/security/cve/CVE-2015-3259.html https://www.suse.com/security/cve/CVE-2015-4037.html https://www.suse.com/security/cve/CVE-2015-5154.html https://www.suse.com/security/cve/CVE-2015-5165.html https://www.suse.com/security/cve/CVE-2015-5166.html https://www.suse.com/security/cve/CVE-2015-5239.html https://www.suse.com/security/cve/CVE-2015-6815.html https://www.suse.com/security/cve/CVE-2015-7311.html https://www.suse.com/security/cve/CVE-2015-7835.html https://www.suse.com/security/cve/CVE-2015-7969.html https://www.suse.com/security/cve/CVE-2015-7971.html https://www.suse.com/security/cve/CVE-2015-7972.html https://bugzilla.suse.com/877642 https://bugzilla.suse.com/901488 https://bugzilla.suse.com/907514 https://bugzilla.suse.com/910258 https://bugzilla.suse.com/918984 https://bugzilla.suse.com/923967 https://bugzilla.suse.com/925466 https://bugzilla.suse.com/932267 https://bugzilla.suse.com/935634 https://bugzilla.suse.com/938344 https://bugzilla.suse.com/939709 https://bugzilla.suse.com/939712 https://bugzilla.suse.com/944463 https://bugzilla.suse.com/944697 https://bugzilla.suse.com/945167 https://bugzilla.suse.com/947165 https://bugzilla.suse.com/949138 https://bugzilla.suse.com/950367 https://bugzilla.suse.com/950703 https://bugzilla.suse.com/950705 https://bugzilla.suse.com/950706 https://bugzilla.suse.com/951845

1 0

openSUSE-RU-2015:2001-1: moderate: Recommended update for VirtualBox
by maintenance＠opensuse.org 16 Nov '15

16 Nov '15

openSUSE Recommended Update: Recommended update for VirtualBox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2001-1 Rating: moderate References: #953018 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: VirtualBox was updated to fix issues related to USB pass-through. The following bugs were fixed: boo#953018: Add message guiding user on how to enable optional USB pass-through, due to the associated security risk. VirtualBox was updated to 5.0.8 containing all upstream fixes and improvements. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-748=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): python-virtualbox-5.0.8-4.1 python-virtualbox-debuginfo-5.0.8-4.1 virtualbox-5.0.8-4.1 virtualbox-debuginfo-5.0.8-4.1 virtualbox-debugsource-5.0.8-4.1 virtualbox-devel-5.0.8-4.1 virtualbox-guest-kmp-default-5.0.8_k4.1.12_1-4.1 virtualbox-guest-kmp-default-debuginfo-5.0.8_k4.1.12_1-4.1 virtualbox-guest-tools-5.0.8-4.1 virtualbox-guest-tools-debuginfo-5.0.8-4.1 virtualbox-guest-x11-5.0.8-4.1 virtualbox-guest-x11-debuginfo-5.0.8-4.1 virtualbox-host-kmp-default-5.0.8_k4.1.12_1-4.1 virtualbox-host-kmp-default-debuginfo-5.0.8_k4.1.12_1-4.1 virtualbox-qt-5.0.8-4.1 virtualbox-qt-debuginfo-5.0.8-4.1 virtualbox-websrv-5.0.8-4.1 virtualbox-websrv-debuginfo-5.0.8-4.1 - openSUSE Leap 42.1 (noarch): virtualbox-guest-desktop-icons-5.0.8-4.1 virtualbox-host-source-5.0.8-4.1 References: https://bugzilla.suse.com/953018

1 0

openSUSE-RU-2015:1999-1: moderate: Recommended update for avahi
by maintenance＠opensuse.org 16 Nov '15

16 Nov '15

openSUSE Recommended Update: Recommended update for avahi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1999-1 Rating: moderate References: #914298 #947140 #948277 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: Avahi was updated to fix logging issues. * boo#947140 bsc#948277: Do not spam logs for invalid packets. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-749=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-749=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): avahi-0.6.31-26.1 avahi-autoipd-0.6.31-26.1 avahi-autoipd-debuginfo-0.6.31-26.1 avahi-compat-howl-devel-0.6.31-26.1 avahi-compat-mDNSResponder-devel-0.6.31-26.1 avahi-debuginfo-0.6.31-26.1 avahi-debugsource-0.6.31-26.1 avahi-glib2-debugsource-0.6.31-26.1 avahi-mono-0.6.31-26.1 avahi-qt4-debugsource-0.6.31-26.1 avahi-utils-0.6.31-26.1 avahi-utils-debuginfo-0.6.31-26.1 avahi-utils-gtk-0.6.31-26.1 avahi-utils-gtk-debuginfo-0.6.31-26.1 libavahi-client3-0.6.31-26.1 libavahi-client3-debuginfo-0.6.31-26.1 libavahi-common3-0.6.31-26.1 libavahi-common3-debuginfo-0.6.31-26.1 libavahi-core7-0.6.31-26.1 libavahi-core7-debuginfo-0.6.31-26.1 libavahi-devel-0.6.31-26.1 libavahi-glib-devel-0.6.31-26.1 libavahi-glib1-0.6.31-26.1 libavahi-glib1-debuginfo-0.6.31-26.1 libavahi-gobject-devel-0.6.31-26.1 libavahi-gobject0-0.6.31-26.1 libavahi-gobject0-debuginfo-0.6.31-26.1 libavahi-qt4-1-0.6.31-26.1 libavahi-qt4-1-debuginfo-0.6.31-26.1 libavahi-qt4-devel-0.6.31-26.1 libavahi-ui-gtk3-0-0.6.31-26.1 libavahi-ui-gtk3-0-debuginfo-0.6.31-26.1 libavahi-ui0-0.6.31-26.1 libavahi-ui0-debuginfo-0.6.31-26.1 libdns_sd-0.6.31-26.1 libdns_sd-debuginfo-0.6.31-26.1 libhowl0-0.6.31-26.1 libhowl0-debuginfo-0.6.31-26.1 python-avahi-0.6.31-26.1 python-avahi-gtk-0.6.31-26.1 typelib-1_0-Avahi-0_6-0.6.31-26.1 - openSUSE Leap 42.1 (x86_64): avahi-debuginfo-32bit-0.6.31-26.1 libavahi-client3-32bit-0.6.31-26.1 libavahi-client3-debuginfo-32bit-0.6.31-26.1 libavahi-common3-32bit-0.6.31-26.1 libavahi-common3-debuginfo-32bit-0.6.31-26.1 libavahi-glib1-32bit-0.6.31-26.1 libavahi-glib1-debuginfo-32bit-0.6.31-26.1 libdns_sd-32bit-0.6.31-26.1 libdns_sd-debuginfo-32bit-0.6.31-26.1 - openSUSE Leap 42.1 (noarch): avahi-lang-0.6.31-26.1 - openSUSE 13.2 (i586 x86_64): avahi-0.6.31-23.3.1 avahi-autoipd-0.6.31-23.3.1 avahi-autoipd-debuginfo-0.6.31-23.3.1 avahi-compat-howl-devel-0.6.31-23.3.1 avahi-compat-mDNSResponder-devel-0.6.31-23.3.1 avahi-debuginfo-0.6.31-23.3.1 avahi-debugsource-0.6.31-23.3.1 avahi-glib2-debugsource-0.6.31-23.3.1 avahi-mono-0.6.31-23.3.1 avahi-qt4-debugsource-0.6.31-23.3.1 avahi-utils-0.6.31-23.3.1 avahi-utils-debuginfo-0.6.31-23.3.1 avahi-utils-gtk-0.6.31-23.3.1 avahi-utils-gtk-debuginfo-0.6.31-23.3.1 libavahi-client3-0.6.31-23.3.1 libavahi-client3-debuginfo-0.6.31-23.3.1 libavahi-common3-0.6.31-23.3.1 libavahi-common3-debuginfo-0.6.31-23.3.1 libavahi-core7-0.6.31-23.3.1 libavahi-core7-debuginfo-0.6.31-23.3.1 libavahi-devel-0.6.31-23.3.1 libavahi-glib-devel-0.6.31-23.3.1 libavahi-glib1-0.6.31-23.3.1 libavahi-glib1-debuginfo-0.6.31-23.3.1 libavahi-gobject-devel-0.6.31-23.3.1 libavahi-gobject0-0.6.31-23.3.1 libavahi-gobject0-debuginfo-0.6.31-23.3.1 libavahi-qt4-1-0.6.31-23.3.1 libavahi-qt4-1-debuginfo-0.6.31-23.3.1 libavahi-qt4-devel-0.6.31-23.3.1 libavahi-ui-gtk3-0-0.6.31-23.3.1 libavahi-ui-gtk3-0-debuginfo-0.6.31-23.3.1 libavahi-ui0-0.6.31-23.3.1 libavahi-ui0-debuginfo-0.6.31-23.3.1 libdns_sd-0.6.31-23.3.1 libdns_sd-debuginfo-0.6.31-23.3.1 libhowl0-0.6.31-23.3.1 libhowl0-debuginfo-0.6.31-23.3.1 python-avahi-0.6.31-23.3.1 python-avahi-gtk-0.6.31-23.3.1 typelib-1_0-Avahi-0_6-0.6.31-23.3.1 - openSUSE 13.2 (x86_64): avahi-debuginfo-32bit-0.6.31-23.3.1 libavahi-client3-32bit-0.6.31-23.3.1 libavahi-client3-debuginfo-32bit-0.6.31-23.3.1 libavahi-common3-32bit-0.6.31-23.3.1 libavahi-common3-debuginfo-32bit-0.6.31-23.3.1 libavahi-glib1-32bit-0.6.31-23.3.1 libavahi-glib1-debuginfo-32bit-0.6.31-23.3.1 libdns_sd-32bit-0.6.31-23.3.1 libdns_sd-debuginfo-32bit-0.6.31-23.3.1 - openSUSE 13.2 (noarch): avahi-lang-0.6.31-23.3.1 References: https://bugzilla.suse.com/914298 https://bugzilla.suse.com/947140 https://bugzilla.suse.com/948277

1 0

openSUSE-SU-2015:1998-1: Security update for python-tornado
by opensuse-security＠opensuse.org 16 Nov '15

16 Nov '15

openSUSE Security Update: Security update for python-tornado ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1998-1 Rating: low References: #930361 #930362 Cross-References: CVE-2014-9720 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: python-tornado was updates to fix one security issue. The following vulnerability was fixed: * CVE-2014-9720: XSRF cookie allowed side-channel attack against TLS (BREACH) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-741=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): python-tornado-3.1-2.3.1 References: https://www.suse.com/security/cve/CVE-2014-9720.html https://bugzilla.suse.com/930361 https://bugzilla.suse.com/930362

1 0

openSUSE-SU-2015:1997-1: important: Security update for krb5
by opensuse-security＠opensuse.org 16 Nov '15

16 Nov '15

openSUSE Security Update: Security update for krb5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1997-1 Rating: important References: #948011 #952188 #952189 #952190 Cross-References: CVE-2015-2695 CVE-2015-2696 CVE-2015-2697 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: krb5 was updated to fix three security issues. These security issues were fixed: - CVE-2015-2695: Applications which call gss_inquire_context() on a partially-established SPNEGO context could have caused the GSS-API library to read from a pointer using the wrong type, generally causing a process crash. (bsc#952188). - CVE-2015-2696: Applications which call gss_inquire_context() on a partially-established IAKERB context could have caused the GSS-API library to read from a pointer using the wrong type, generally causing a process crash. (bsc#952189). - CVE-2015-2697: Incorrect string handling in build_principal_va can lead to DOS (bsc#952190). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-740=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): krb5-1.12.1-21.1 krb5-client-1.12.1-21.1 krb5-client-debuginfo-1.12.1-21.1 krb5-debuginfo-1.12.1-21.1 krb5-debugsource-1.12.1-21.1 krb5-devel-1.12.1-21.1 krb5-doc-1.12.1-21.1 krb5-mini-1.12.1-21.1 krb5-mini-debuginfo-1.12.1-21.1 krb5-mini-debugsource-1.12.1-21.1 krb5-mini-devel-1.12.1-21.1 krb5-plugin-kdb-ldap-1.12.1-21.1 krb5-plugin-kdb-ldap-debuginfo-1.12.1-21.1 krb5-plugin-preauth-otp-1.12.1-21.1 krb5-plugin-preauth-otp-debuginfo-1.12.1-21.1 krb5-plugin-preauth-pkinit-1.12.1-21.1 krb5-plugin-preauth-pkinit-debuginfo-1.12.1-21.1 krb5-server-1.12.1-21.1 krb5-server-debuginfo-1.12.1-21.1 - openSUSE Leap 42.1 (x86_64): krb5-32bit-1.12.1-21.1 krb5-debuginfo-32bit-1.12.1-21.1 krb5-devel-32bit-1.12.1-21.1 References: https://www.suse.com/security/cve/CVE-2015-2695.html https://www.suse.com/security/cve/CVE-2015-2696.html https://www.suse.com/security/cve/CVE-2015-2697.html https://bugzilla.suse.com/948011 https://bugzilla.suse.com/952188 https://bugzilla.suse.com/952189 https://bugzilla.suse.com/952190

1 0

openSUSE-RU-2015:1996-1: moderate: Recommended update for blender
by maintenance＠opensuse.org 16 Nov '15

16 Nov '15

openSUSE Recommended Update: Recommended update for blender ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1996-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for blender fixes the following issues: - disable WITH_CYCLES for non intel architectures to avoid build failure of cycles/bvh with missing x86intrin.h Add _constraints file to avoid no space error on ppc64le - avoid -msse* for non intel architecture Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-744=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): blender-2.75a-4.1 blender-debuginfo-2.75a-4.1 blender-debugsource-2.75a-4.1 - openSUSE Leap 42.1 (noarch): blender-lang-2.75a-4.1 References:

1 0

openSUSE-SU-2015:1995-1: moderate: Security update for libsndfile
by opensuse-security＠opensuse.org 16 Nov '15

16 Nov '15

openSUSE Security Update: Security update for libsndfile ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1995-1 Rating: moderate References: #953516 #953519 #953521 Cross-References: CVE-2014-9756 CVE-2015-7805 CVE-2015-8075 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: The libsndfile package was updated to fix three security issues: - CVE-2015-7805: fix for heap overflow via specially crafted AIFF header (bsc#953516) - CVE-2015-8075: fix for out of bounds read access in function psf_strlcpy_crlf (bsc#953519) - CVE-2014-9756: fix a divide-by-zero issue that can lead to an DoS (bsc#953521) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-742=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-742=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libsndfile-debugsource-1.0.25-19.7.1 libsndfile-devel-1.0.25-19.7.1 libsndfile-progs-1.0.25-19.7.1 libsndfile-progs-debuginfo-1.0.25-19.7.1 libsndfile-progs-debugsource-1.0.25-19.7.1 libsndfile1-1.0.25-19.7.1 libsndfile1-debuginfo-1.0.25-19.7.1 - openSUSE 13.2 (x86_64): libsndfile1-32bit-1.0.25-19.7.1 libsndfile1-debuginfo-32bit-1.0.25-19.7.1 - openSUSE 13.1 (i586 x86_64): libsndfile-debugsource-1.0.25-17.7.1 libsndfile-devel-1.0.25-17.7.1 libsndfile-progs-1.0.25-17.7.1 libsndfile-progs-debuginfo-1.0.25-17.7.1 libsndfile-progs-debugsource-1.0.25-17.7.1 libsndfile1-1.0.25-17.7.1 libsndfile1-debuginfo-1.0.25-17.7.1 - openSUSE 13.1 (x86_64): libsndfile1-32bit-1.0.25-17.7.1 libsndfile1-debuginfo-32bit-1.0.25-17.7.1 References: https://www.suse.com/security/cve/CVE-2014-9756.html https://www.suse.com/security/cve/CVE-2015-7805.html https://www.suse.com/security/cve/CVE-2015-8075.html https://bugzilla.suse.com/953516 https://bugzilla.suse.com/953519 https://bugzilla.suse.com/953521

1 0

openSUSE-OU-2015:1994-1: moderate: Optional update for gdm
by maintenance＠opensuse.org 16 Nov '15

16 Nov '15

openSUSE Optional Update: Optional update for gdm ______________________________________________________________________________ Announcement ID: openSUSE-OU-2015:1994-1 Rating: moderate References: #953665 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update silences a warning logged when starting up a GNOME session. * boo#953665: Remove caribou-autostart.desktop, no longer required. Since gnome-shell 3.14, caribou is started through d-bus Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-747=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-747=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gdm-3.14.2-3.1 gdm-debuginfo-3.14.2-3.1 gdm-debugsource-3.14.2-3.1 gdm-devel-3.14.2-3.1 libgdm1-3.14.2-3.1 libgdm1-debuginfo-3.14.2-3.1 typelib-1_0-Gdm-1_0-3.14.2-3.1 - openSUSE Leap 42.1 (noarch): gdm-branding-upstream-3.14.2-3.1 gdm-lang-3.14.2-3.1 gdmflexiserver-3.14.2-3.1 - openSUSE 13.2 (i586 x86_64): gdm-3.14.2-10.1 gdm-debuginfo-3.14.2-10.1 gdm-debugsource-3.14.2-10.1 gdm-devel-3.14.2-10.1 libgdm1-3.14.2-10.1 libgdm1-debuginfo-3.14.2-10.1 typelib-1_0-Gdm-1_0-3.14.2-10.1 - openSUSE 13.2 (noarch): gdm-branding-upstream-3.14.2-10.1 gdm-lang-3.14.2-10.1 gdmflexiserver-3.14.2-10.1 References: https://bugzilla.suse.com/953665

1 0

openSUSE-OU-2015:1993-1: moderate: Optional update for geoclue2
by maintenance＠opensuse.org 16 Nov '15

16 Nov '15

openSUSE Optional Update: Optional update for geoclue2 ______________________________________________________________________________ Announcement ID: openSUSE-OU-2015:1993-1 Rating: moderate References: #953865 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: Geoclue2 was updated to fix one warning message. boo#953865: Fix a warning message loading system maps when starting geoclue2 Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-745=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-745=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): geoclue2-2.2.0-5.1 geoclue2-debuginfo-2.2.0-5.1 geoclue2-debugsource-2.2.0-5.1 geoclue2-devel-2.2.0-5.1 - openSUSE 13.2 (i586 x86_64): geoclue2-2.1.10-3.1 geoclue2-debuginfo-2.1.10-3.1 geoclue2-debugsource-2.1.10-3.1 geoclue2-devel-2.1.10-3.1 References: https://bugzilla.suse.com/953865

1 0

openSUSE-OU-2015:1992-1: moderate: Optional update for stm32flash
by maintenance＠opensuse.org 16 Nov '15

16 Nov '15

openSUSE Optional Update: Optional update for stm32flash ______________________________________________________________________________ Announcement ID: openSUSE-OU-2015:1992-1 Rating: moderate References: #952646 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update fixes (re)building of stm32flash with existing version of i2c-tools on openSUSE Leap 42.1 Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-746=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): stm32flash-0.4-5.1 stm32flash-debuginfo-0.4-5.1 stm32flash-debugsource-0.4-5.1 References: https://bugzilla.suse.com/952646

1 0