November 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:1991-1: moderate: Recommended update for conky
by maintenance＠opensuse.org 16 Nov '15

16 Nov '15

openSUSE Recommended Update: Recommended update for conky ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1991-1 Rating: moderate References: #952599 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for conky fixes the following issue: - Also use /usr/bin/lua5.1 on Leap 42.1 (boo#952599). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-743=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): conky-1.10.0-3.1 conky-debuginfo-1.10.0-3.1 conky-debugsource-1.10.0-3.1 conky-doc-1.10.0-3.1 nano-plugin-conky-1.10.0-3.1 vim-plugin-conky-1.10.0-3.1 References: https://bugzilla.suse.com/952599

1 0

openSUSE-FU-2015:1990-1: GNU nano 2.4.2
by maintenance＠opensuse.org 14 Nov '15

14 Nov '15

openSUSE Feature Update: GNU nano 2.4.2 ______________________________________________________________________________ Announcement ID: openSUSE-FU-2015:1990-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 feature fixes can now be installed. Description: This update makes GNU nano 2.4.2 available in the SLE 12 backports project. Patch Instructions: To install this openSUSE Feature Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-739=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): nano-2.4.2-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): nano-lang-2.4.2-2.1 References:

1 0

openSUSE-SU-2015:1984-1: moderate: Security update for flash-player
by opensuse-security＠opensuse.org 13 Nov '15

13 Nov '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1984-1 Rating: moderate References: #954512 Cross-References: CVE-2015-7651 CVE-2015-7652 CVE-2015-7653 CVE-2015-7654 CVE-2015-7655 CVE-2015-7656 CVE-2015-7657 CVE-2015-7658 CVE-2015-7659 CVE-2015-7660 CVE-2015-7661 CVE-2015-7662 CVE-2015-7663 CVE-2015-8042 CVE-2015-8043 CVE-2015-8044 CVE-2015-8046 Affected Products: openSUSE 13.2 NonFree openSUSE 13.1 NonFree ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. Description: The flash-player package was updated to fix the following security issues: - Security update to 11.2.202.548 (bsc#954512): * APSB15-28, CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7659, CVE-2015-7660, CVE-2015-7661, CVE-2015-7662, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, CVE-2015-8046 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2 NonFree: zypper in -t patch openSUSE-2015-738=1 - openSUSE 13.1 NonFree: zypper in -t patch openSUSE-2015-738=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 NonFree (i586 x86_64): flash-player-11.2.202.548-2.79.1 flash-player-gnome-11.2.202.548-2.79.1 flash-player-kde4-11.2.202.548-2.79.1 - openSUSE 13.1 NonFree (i586 x86_64): flash-player-11.2.202.548-144.1 flash-player-gnome-11.2.202.548-144.1 flash-player-kde4-11.2.202.548-144.1 References: https://www.suse.com/security/cve/CVE-2015-7651.html https://www.suse.com/security/cve/CVE-2015-7652.html https://www.suse.com/security/cve/CVE-2015-7653.html https://www.suse.com/security/cve/CVE-2015-7654.html https://www.suse.com/security/cve/CVE-2015-7655.html https://www.suse.com/security/cve/CVE-2015-7656.html https://www.suse.com/security/cve/CVE-2015-7657.html https://www.suse.com/security/cve/CVE-2015-7658.html https://www.suse.com/security/cve/CVE-2015-7659.html https://www.suse.com/security/cve/CVE-2015-7660.html https://www.suse.com/security/cve/CVE-2015-7661.html https://www.suse.com/security/cve/CVE-2015-7662.html https://www.suse.com/security/cve/CVE-2015-7663.html https://www.suse.com/security/cve/CVE-2015-8042.html https://www.suse.com/security/cve/CVE-2015-8043.html https://www.suse.com/security/cve/CVE-2015-8044.html https://www.suse.com/security/cve/CVE-2015-8046.html https://bugzilla.suse.com/954512

1 0

openSUSE-RU-2015:1973-1: moderate: Recommended update for permissions
by maintenance＠opensuse.org 12 Nov '15

12 Nov '15

openSUSE Recommended Update: Recommended update for permissions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1973-1 Rating: moderate References: #685093 #891268 #895647 #904060 #906336 #943471 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: The default permission settings received the following adjustments: - Adjust radosgw to root:www mode 0750. (bsc#943471) - Add capability cap_bind_net_service to radosgw. (bsc#943471) - Remove /usr/bin/get_printing_ticket. (bsc#685093, bsc#906336) - Add iouyap capabilities. (bsc#904060) - Add settings for the Squid Proxy server. (bsc#891268) - Document that "chkstat --system --set" needs to be run after editing. (bsc#895647) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-734=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): permissions-2015.09.28.1626-5.1 permissions-debuginfo-2015.09.28.1626-5.1 permissions-debugsource-2015.09.28.1626-5.1 References: https://bugzilla.suse.com/685093 https://bugzilla.suse.com/891268 https://bugzilla.suse.com/895647 https://bugzilla.suse.com/904060 https://bugzilla.suse.com/906336 https://bugzilla.suse.com/943471

1 0

openSUSE-RU-2015:1972-1: Recommended update for shadow
by maintenance＠opensuse.org 12 Nov '15

12 Nov '15

openSUSE Recommended Update: Recommended update for shadow ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1972-1 Rating: low References: #899409 #935203 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for shadow provides the following fixes: - Add package dependency for aaa_base. (bsc#899409) - Document in the man page that some settings from /etc/login.defs are not evaluated if PAM is used. (bsc#935203) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-735=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): shadow-4.1.5.1-16.1 shadow-debuginfo-4.1.5.1-16.1 shadow-debugsource-4.1.5.1-16.1 References: https://bugzilla.suse.com/899409 https://bugzilla.suse.com/935203

1 0

openSUSE-SU-2015:1971-1: important: Security update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 12 Nov '15

12 Nov '15

openSUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1971-1 Rating: important References: #951376 Cross-References: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4872 CVE-2015-4881 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4903 CVE-2015-4911 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. Description: java-1_7_0-openjdk was updated to version 7u91 to fix 17 security issues. These security issues were fixed: - CVE-2015-4843: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries (bsc#951376). - CVE-2015-4842: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality via vectors related to JAXP (bsc#951376). - CVE-2015-4840: Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality via unknown vectors related to 2D (bsc#951376). - CVE-2015-4872: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allowed remote attackers to affect integrity via unknown vectors related to Security (bsc#951376). - CVE-2015-4860: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883 (bsc#951376). - CVE-2015-4844: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D (bsc#951376). - CVE-2015-4883: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4860 (bsc#951376). - CVE-2015-4893: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allowed remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911 (bsc#951376). - CVE-2015-4911: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allowed remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4893 (bsc#951376). - CVE-2015-4882: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect availability via vectors related to CORBA (bsc#951376). - CVE-2015-4881: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4835 (bsc#951376). - CVE-2015-4734: Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality via vectors related to JGSS (bsc#951376). - CVE-2015-4806: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries (bsc#951376). - CVE-2015-4805: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serialization (bsc#951376). - CVE-2015-4803: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allowed remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4893 and CVE-2015-4911 (bsc#951376). - CVE-2015-4835: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4881 (bsc#951376). - CVE-2015-4903: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality via vectors related to RMI (bsc#951376). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-736=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): java-1_7_0-openjdk-1.7.0.91-22.1 java-1_7_0-openjdk-accessibility-1.7.0.91-22.1 java-1_7_0-openjdk-bootstrap-1.7.0.91-22.1 java-1_7_0-openjdk-bootstrap-debuginfo-1.7.0.91-22.1 java-1_7_0-openjdk-bootstrap-debugsource-1.7.0.91-22.1 java-1_7_0-openjdk-bootstrap-devel-1.7.0.91-22.1 java-1_7_0-openjdk-bootstrap-devel-debuginfo-1.7.0.91-22.1 java-1_7_0-openjdk-bootstrap-headless-1.7.0.91-22.1 java-1_7_0-openjdk-bootstrap-headless-debuginfo-1.7.0.91-22.1 java-1_7_0-openjdk-debuginfo-1.7.0.91-22.1 java-1_7_0-openjdk-debugsource-1.7.0.91-22.1 java-1_7_0-openjdk-demo-1.7.0.91-22.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.91-22.1 java-1_7_0-openjdk-devel-1.7.0.91-22.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.91-22.1 java-1_7_0-openjdk-headless-1.7.0.91-22.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.91-22.1 java-1_7_0-openjdk-src-1.7.0.91-22.1 - openSUSE Leap 42.1 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.91-22.1 References: https://www.suse.com/security/cve/CVE-2015-4734.html https://www.suse.com/security/cve/CVE-2015-4803.html https://www.suse.com/security/cve/CVE-2015-4805.html https://www.suse.com/security/cve/CVE-2015-4806.html https://www.suse.com/security/cve/CVE-2015-4835.html https://www.suse.com/security/cve/CVE-2015-4840.html https://www.suse.com/security/cve/CVE-2015-4842.html https://www.suse.com/security/cve/CVE-2015-4843.html https://www.suse.com/security/cve/CVE-2015-4844.html https://www.suse.com/security/cve/CVE-2015-4860.html https://www.suse.com/security/cve/CVE-2015-4872.html https://www.suse.com/security/cve/CVE-2015-4881.html https://www.suse.com/security/cve/CVE-2015-4882.html https://www.suse.com/security/cve/CVE-2015-4883.html https://www.suse.com/security/cve/CVE-2015-4893.html https://www.suse.com/security/cve/CVE-2015-4903.html https://www.suse.com/security/cve/CVE-2015-4911.html https://bugzilla.suse.com/951376

1 0

openSUSE-RU-2015:1969-1: moderate: Recommended update for systemd, aaa_base
by maintenance＠opensuse.org 12 Nov '15

12 Nov '15

openSUSE Recommended Update: Recommended update for systemd, aaa_base ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1969-1 Rating: moderate References: #897799 #897803 #898233 #901481 #902240 #902901 #903009 #903963 #904517 #904828 #905550 #906709 #907318 #907393 #908476 #910315 #910643 #911347 #912030 #916420 #918118 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 21 recommended fixes can now be installed. Description: systemd and aaa_base have been updated to fix the following bugs: - Add path_id_compat for backwards compatibility with SLE11 (bsc#916420). - Do not watch for socket events when service is in SERVICE_STOP (bsc#918118) - Increase number of children/workers to CPU_COUNT * 64 to avoid 'maximum number of children reached' (bsc#907393). - udev: link_setup - respect kernel name assign policy (bsc#907318). - sync with patches from Base:System:Legacy (bsc#910315) - Remove superfluous set -x from systemd-sleep-grub (bsc#905550) - Make sure that quotacheck is executed after fsck for system root is finished (bsc#897799) - Add missed keyboard layouts which are offered by YaST2 (bsc#910643 and bsc#897803) - Due to fragmentation, journal flushes on btrfs could take very long (bsc#911347) - Fixed comparison of console log facility that caused journald to skip output to console (bsc#912030) - Add user based ignore statements in tmpfiles removal directives. This feature was previously implemented by scripts in aaa_base, which are being removed by this update. (bsc#903009) - Use --boot option in systemd-tmpfiles-setup-dev.service (bsc#908476) - udev: link_setup - respect kernel name assign policy (bsc#907318). - Avoid old net devices naming scheme on openSUSE 13.2 and less maybe caused by patch - Fix systemd-nspawn network-veth support (bsc#906709) - Change the maximum number of children from CPU_COUNT * 256 to CPU_COUNT * 64. (bsc#907393). - Re-add directory /usr/lib/systemd/system/basic.target.wants - Remove pm-utils-hooks-compat.sh again, pm-utils built-in hooks partially duplicate hooks run by systemd which may potentially lead to problems, instead temporarily re-enable Forward-suspend-hibernate-calls-to-pm-utils.patch until bsc#904828 can be addressed properly - Allow the use of --type in the systemctl command list-units and list-unit-files. - Create rule to set I/O scheduler to deadline if device attribute 'rotational' equals 0, usually SSDs (bsc#904517). - Fix systemd-fstab-generator crypttab parsing (bsc#903963) - Add pm-utils-hooks-compat.sh in order to run pm-utils sleep hooks from systemd (bsc#904828) - Add patch watch_resolv.conf_for_become_changed.patch to add an inotify watch on /etc/resolv.conf which enables the reload of a changed resolver configuration on the fly (bsc#902901) - Add upstream patches which will be applied if patch is applied a this may fix the trouble with iSCSI (bsc#898233) - Add upstream patch 1089-fix-cgroup-device-controller.patch to avoid trouble on existing /dev/console with nspawn (bsc#902240) - Add patch to close file descriptors if an incomming connection can not be handled due e.g. short memory. Could be related to (bsc#901481) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-732=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): aaa_base-13.2+git20140911.61c1681-7.1 aaa_base-debuginfo-13.2+git20140911.61c1681-7.1 aaa_base-debugsource-13.2+git20140911.61c1681-7.1 aaa_base-extras-13.2+git20140911.61c1681-7.1 aaa_base-malloccheck-13.2+git20140911.61c1681-7.1 References: https://bugzilla.suse.com/897799 https://bugzilla.suse.com/897803 https://bugzilla.suse.com/898233 https://bugzilla.suse.com/901481 https://bugzilla.suse.com/902240 https://bugzilla.suse.com/902901 https://bugzilla.suse.com/903009 https://bugzilla.suse.com/903963 https://bugzilla.suse.com/904517 https://bugzilla.suse.com/904828 https://bugzilla.suse.com/905550 https://bugzilla.suse.com/906709 https://bugzilla.suse.com/907318 https://bugzilla.suse.com/907393 https://bugzilla.suse.com/908476 https://bugzilla.suse.com/910315 https://bugzilla.suse.com/910643 https://bugzilla.suse.com/911347 https://bugzilla.suse.com/912030 https://bugzilla.suse.com/916420 https://bugzilla.suse.com/918118

1 0

openSUSE-SU-2015:1968-1: moderate: Security update for git
by opensuse-security＠opensuse.org 12 Nov '15

12 Nov '15

openSUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1968-1 Rating: moderate References: #948969 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Git was updated to fix one security issue. The following vulnerability was fixed: * boo#948969: remote code execution with recursive fetch of submodules Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-737=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-737=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): git-2.1.4-16.2 git-arch-2.1.4-16.2 git-core-2.1.4-16.2 git-core-debuginfo-2.1.4-16.2 git-cvs-2.1.4-16.2 git-daemon-2.1.4-16.2 git-daemon-debuginfo-2.1.4-16.2 git-debugsource-2.1.4-16.2 git-email-2.1.4-16.2 git-gui-2.1.4-16.2 git-svn-2.1.4-16.2 git-svn-debuginfo-2.1.4-16.2 git-web-2.1.4-16.2 gitk-2.1.4-16.2 - openSUSE 13.2 (noarch): git-doc-2.1.4-16.2 - openSUSE 13.1 (i586 x86_64): git-1.8.4.5-3.11.2 git-arch-1.8.4.5-3.11.2 git-core-1.8.4.5-3.11.2 git-core-debuginfo-1.8.4.5-3.11.2 git-cvs-1.8.4.5-3.11.2 git-daemon-1.8.4.5-3.11.2 git-daemon-debuginfo-1.8.4.5-3.11.2 git-debugsource-1.8.4.5-3.11.2 git-email-1.8.4.5-3.11.2 git-gui-1.8.4.5-3.11.2 git-remote-helpers-1.8.4.5-3.11.2 git-svn-1.8.4.5-3.11.2 git-svn-debuginfo-1.8.4.5-3.11.2 git-web-1.8.4.5-3.11.2 gitk-1.8.4.5-3.11.2 References: https://bugzilla.suse.com/948969

1 0

openSUSE-RU-2015:1967-1: Recommended update for libyaml
by maintenance＠opensuse.org 12 Nov '15

12 Nov '15

openSUSE Recommended Update: Recommended update for libyaml ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1967-1 Rating: low References: #952625 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update adjusts libyaml's packaging to require pkg-config at build time. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-733=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libyaml-0-2-0.1.6-5.1 libyaml-0-2-debuginfo-0.1.6-5.1 libyaml-debugsource-0.1.6-5.1 libyaml-devel-0.1.6-5.1 References: https://bugzilla.suse.com/952625

1 0

openSUSE-RU-2015:1966-1: Recommended update for gnome-photos
by maintenance＠opensuse.org 12 Nov '15

12 Nov '15

openSUSE Recommended Update: Recommended update for gnome-photos ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1966-1 Rating: low References: #953435 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides version 3.16.3 of gnome-photos with various fixes, improvements and updated translations. (boo#953435) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-731=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gnome-photos-3.16.3-5.1 gnome-photos-debuginfo-3.16.3-5.1 gnome-photos-debugsource-3.16.3-5.1 gnome-shell-search-provider-gnome-photos-3.16.3-5.1 - openSUSE Leap 42.1 (noarch): gnome-photos-lang-3.16.3-5.1 References: https://bugzilla.suse.com/953435

1 0

openSUSE-SU-2015:1965-1: moderate: Security update for xen
by opensuse-security＠opensuse.org 12 Nov '15

12 Nov '15

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1965-1 Rating: moderate References: #877642 #932267 #950367 #950703 #950705 #950706 #951845 Cross-References: CVE-2014-0222 CVE-2015-4037 CVE-2015-7835 CVE-2015-7969 CVE-2015-7971 CVE-2015-7972 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has one errata is now available. Description: Xen was updated to fix 6 security issues. These security issues were fixed: - CVE-2014-0222: Validate L2 table size to avoid integer overflows (bsc#877642). - CVE-2015-4037: Insecure temporary file use in /net/slirp.c (bsc#932267). - CVE-2015-7835: Uncontrolled creation of large page mappings by PV guests (bsc#950367). - CVE-2015-7969: Leak of per-domain profiling-related vcpu pointer array (DoS) (bsc#950705 bsc#950703). - CVE-2015-7971: Some pmu and profiling hypercalls log without rate limiting (bsc#950706). - CVE-2015-7972: Populate-on-demand balloon size inaccuracy can crash guests (bsc#951845). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-730=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xen-debugsource-4.5.1_12-3.1 xen-devel-4.5.1_12-3.1 xen-libs-4.5.1_12-3.1 xen-libs-debuginfo-4.5.1_12-3.1 xen-tools-domU-4.5.1_12-3.1 xen-tools-domU-debuginfo-4.5.1_12-3.1 - openSUSE Leap 42.1 (x86_64): xen-4.5.1_12-3.1 xen-doc-html-4.5.1_12-3.1 xen-kmp-default-4.5.1_12_k4.1.12_1-3.1 xen-kmp-default-debuginfo-4.5.1_12_k4.1.12_1-3.1 xen-libs-32bit-4.5.1_12-3.1 xen-libs-debuginfo-32bit-4.5.1_12-3.1 xen-tools-4.5.1_12-3.1 xen-tools-debuginfo-4.5.1_12-3.1 References: https://www.suse.com/security/cve/CVE-2014-0222.html https://www.suse.com/security/cve/CVE-2015-4037.html https://www.suse.com/security/cve/CVE-2015-7835.html https://www.suse.com/security/cve/CVE-2015-7969.html https://www.suse.com/security/cve/CVE-2015-7971.html https://www.suse.com/security/cve/CVE-2015-7972.html https://bugzilla.suse.com/877642 https://bugzilla.suse.com/932267 https://bugzilla.suse.com/950367 https://bugzilla.suse.com/950703 https://bugzilla.suse.com/950705 https://bugzilla.suse.com/950706 https://bugzilla.suse.com/951845

1 0

openSUSE-SU-2015:1964-1: important: Security update for xen
by opensuse-security＠opensuse.org 12 Nov '15

12 Nov '15

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1964-1 Rating: important References: #877642 #932267 #938344 #939709 #939712 #941074 #944463 #944697 #947165 #950367 #950703 #950705 #950706 #951845 Cross-References: CVE-2014-0222 CVE-2015-4037 CVE-2015-5154 CVE-2015-5165 CVE-2015-5166 CVE-2015-5239 CVE-2015-6815 CVE-2015-7311 CVE-2015-7835 CVE-2015-7969 CVE-2015-7971 CVE-2015-7972 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves 12 vulnerabilities and has two fixes is now available. Description: xen was updated to fix 13 security issues. These security issues were fixed: - CVE-2015-7972: Populate-on-demand balloon size inaccuracy can crash guests (bsc#951845). - CVE-2015-7969: Leak of main per-domain vcpu pointer array (DoS) (bsc#950703). - CVE-2015-7969: Leak of per-domain profiling-related vcpu pointer array (DoS) (bsc#950705). - CVE-2015-7971: Some pmu and profiling hypercalls log without rate limiting (bsc#950706). - CVE-2015-4037: Insecure temporary file use in /net/slirp.c (bsc#932267). - CVE-2014-0222: Validate L2 table size to avoid integer overflows (bsc#877642). - CVE-2015-7835: Uncontrolled creation of large page mappings by PV guests (bsc#950367). - CVE-2015-7311: libxl fails to honour readonly flag on disks with qemu-xen (bsc#947165). - CVE-2015-5165: QEMU leak of uninitialized heap memory in rtl8139 device model (bsc#939712). - CVE-2015-5166: Use after free in QEMU/Xen block unplug protocol (bsc#939709). - CVE-2015-5239: Integer overflow in vnc_client_read() and protocol_client_msg() (bsc#944463). - CVE-2015-6815: e1000: infinite loop issue (bsc#944697). - CVE-2015-5154: Host code execution via IDE subsystem CD-ROM (bsc#938344). This non-security issues was fixed: - bsc#941074: VmError: Device 51728 (vbd) could not be connected. Hotplug scripts not working. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-729=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): xen-debugsource-4.3.4_06-50.1 xen-devel-4.3.4_06-50.1 xen-kmp-default-4.3.4_06_k3.11.10_29-50.1 xen-kmp-default-debuginfo-4.3.4_06_k3.11.10_29-50.1 xen-kmp-desktop-4.3.4_06_k3.11.10_29-50.1 xen-kmp-desktop-debuginfo-4.3.4_06_k3.11.10_29-50.1 xen-libs-4.3.4_06-50.1 xen-libs-debuginfo-4.3.4_06-50.1 xen-tools-domU-4.3.4_06-50.1 xen-tools-domU-debuginfo-4.3.4_06-50.1 - openSUSE 13.1 (x86_64): xen-4.3.4_06-50.1 xen-doc-html-4.3.4_06-50.1 xen-libs-32bit-4.3.4_06-50.1 xen-libs-debuginfo-32bit-4.3.4_06-50.1 xen-tools-4.3.4_06-50.1 xen-tools-debuginfo-4.3.4_06-50.1 xen-xend-tools-4.3.4_06-50.1 xen-xend-tools-debuginfo-4.3.4_06-50.1 - openSUSE 13.1 (i586): xen-kmp-pae-4.3.4_06_k3.11.10_29-50.1 xen-kmp-pae-debuginfo-4.3.4_06_k3.11.10_29-50.1 References: https://www.suse.com/security/cve/CVE-2014-0222.html https://www.suse.com/security/cve/CVE-2015-4037.html https://www.suse.com/security/cve/CVE-2015-5154.html https://www.suse.com/security/cve/CVE-2015-5165.html https://www.suse.com/security/cve/CVE-2015-5166.html https://www.suse.com/security/cve/CVE-2015-5239.html https://www.suse.com/security/cve/CVE-2015-6815.html https://www.suse.com/security/cve/CVE-2015-7311.html https://www.suse.com/security/cve/CVE-2015-7835.html https://www.suse.com/security/cve/CVE-2015-7969.html https://www.suse.com/security/cve/CVE-2015-7971.html https://www.suse.com/security/cve/CVE-2015-7972.html https://bugzilla.suse.com/877642 https://bugzilla.suse.com/932267 https://bugzilla.suse.com/938344 https://bugzilla.suse.com/939709 https://bugzilla.suse.com/939712 https://bugzilla.suse.com/941074 https://bugzilla.suse.com/944463 https://bugzilla.suse.com/944697 https://bugzilla.suse.com/947165 https://bugzilla.suse.com/950367 https://bugzilla.suse.com/950703 https://bugzilla.suse.com/950705 https://bugzilla.suse.com/950706 https://bugzilla.suse.com/951845

1 0

openSUSE-RU-2015:1961-1: moderate: Recommended update for clamav-database
by maintenance＠opensuse.org 11 Nov '15

11 Nov '15

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1961-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: Internal clamav database refresh on November 9 2015. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-728=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201511090000-6.1 References:

1 0

openSUSE-RU-2015:1959-1: moderate: Recommended update for aaa_base
by maintenance＠opensuse.org 11 Nov '15

11 Nov '15

openSUSE Recommended Update: Recommended update for aaa_base ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1959-1 Rating: moderate References: #932456 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for aaa_base fixes the following issue: - sysconf_addword: do not insert spaces at start of string (boo#932456) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-726=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-726=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): aaa_base-13.2+git20140911.61c1681-3.1 aaa_base-debuginfo-13.2+git20140911.61c1681-3.1 aaa_base-debugsource-13.2+git20140911.61c1681-3.1 aaa_base-extras-13.2+git20140911.61c1681-3.1 aaa_base-malloccheck-13.2+git20140911.61c1681-3.1 - openSUSE 13.1 (i586 x86_64): aaa_base-13.1-16.49.1 aaa_base-debuginfo-13.1-16.49.1 aaa_base-debugsource-13.1-16.49.1 aaa_base-extras-13.1-16.49.1 aaa_base-malloccheck-13.1-16.49.1 References: https://bugzilla.suse.com/932456

1 0

openSUSE-RU-2015:1957-1: moderate: Recommended update for Samba
by maintenance＠opensuse.org 11 Nov '15

11 Nov '15

openSUSE Recommended Update: Recommended update for Samba ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1957-1 Rating: moderate References: #295284 #773464 #912457 #913304 #947552 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for Samba provides the latest bugfix release 4.1.21 with various fixes and improvements. - Avoid quoting problems in user's DNs (bso#11488). - Relocate the tmpfiles.d directory to the client package (bsc#947552). - s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable (bso#10823). - Fix logon via MS Remote Desktop (bso#11061). - s3:winbindd: make sure we pass a valid server to rpccli_netlogon_sam_network_logon*() (bso#11081). - s3:param/loadparm fix 'testparm --show-all-parameters' (bso#11170). - s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup (bso#11320). - Use resource group sids obtained from pac logon_info (bso#11328). - s3: smbd: Use separate flag to track become_root()/unbecome_root() state (bso#11339). - s3: smbd: Codenomicon crash in do_smb_load_module() (bso#11342). - lib: replace: Add strsep function (bso#11359). - s3:libsmb: Fix a bug in conversion of ea list to ea array (bso#11361). - docs: Overhaul the description of "smb encrypt" to include SMB3 encryption (bso#11366). - smbd: Fix SMB3 functionality of "smb encrypt" (bso#11372). - s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths (bso#11373). - s3-smbd: Leave sys_disk_free() if dfree command is used (bso#11403). - s3-auth: Fix a possible null pointer dereference (bso#11404). - s3-net: Use talloc array in share allowedusers (bso#11426). - s3-util: Compare the maximum allowed length of a NetBIOS name (bso#11427). - Configure with --bundled-libraries=NONE (bso#11458). - Adapt net-kdc-lookup patch for post-3.3 Samba versions (bsc#295284). - Backport changes to use resource group sids obtained from pac logon_info (bso#11328, bsc#912457). - Remove deprecated base_rid example from idmap_rid manpage (bso#11169, bsc#913304). - Use domain name if search by domain SID fails to send SIDHistory lookups to correct idmap backend (bsc#773464). - Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-727=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-727=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-727=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libdcerpc-atsvc-devel-4.2.4-6.3 libdcerpc-atsvc0-4.2.4-6.3 libdcerpc-atsvc0-debuginfo-4.2.4-6.3 libdcerpc-binding0-4.2.4-6.3 libdcerpc-binding0-debuginfo-4.2.4-6.3 libdcerpc-devel-4.2.4-6.3 libdcerpc-samr-devel-4.2.4-6.3 libdcerpc-samr0-4.2.4-6.3 libdcerpc-samr0-debuginfo-4.2.4-6.3 libdcerpc0-4.2.4-6.3 libdcerpc0-debuginfo-4.2.4-6.3 libgensec-devel-4.2.4-6.3 libgensec0-4.2.4-6.3 libgensec0-debuginfo-4.2.4-6.3 libndr-devel-4.2.4-6.3 libndr-krb5pac-devel-4.2.4-6.3 libndr-krb5pac0-4.2.4-6.3 libndr-krb5pac0-debuginfo-4.2.4-6.3 libndr-nbt-devel-4.2.4-6.3 libndr-nbt0-4.2.4-6.3 libndr-nbt0-debuginfo-4.2.4-6.3 libndr-standard-devel-4.2.4-6.3 libndr-standard0-4.2.4-6.3 libndr-standard0-debuginfo-4.2.4-6.3 libndr0-4.2.4-6.3 libndr0-debuginfo-4.2.4-6.3 libnetapi-devel-4.2.4-6.3 libnetapi0-4.2.4-6.3 libnetapi0-debuginfo-4.2.4-6.3 libregistry-devel-4.2.4-6.3 libregistry0-4.2.4-6.3 libregistry0-debuginfo-4.2.4-6.3 libsamba-credentials-devel-4.2.4-6.3 libsamba-credentials0-4.2.4-6.3 libsamba-credentials0-debuginfo-4.2.4-6.3 libsamba-hostconfig-devel-4.2.4-6.3 libsamba-hostconfig0-4.2.4-6.3 libsamba-hostconfig0-debuginfo-4.2.4-6.3 libsamba-passdb-devel-4.2.4-6.3 libsamba-passdb0-4.2.4-6.3 libsamba-passdb0-debuginfo-4.2.4-6.3 libsamba-policy-devel-4.2.4-6.3 libsamba-policy0-4.2.4-6.3 libsamba-policy0-debuginfo-4.2.4-6.3 libsamba-util-devel-4.2.4-6.3 libsamba-util0-4.2.4-6.3 libsamba-util0-debuginfo-4.2.4-6.3 libsamdb-devel-4.2.4-6.3 libsamdb0-4.2.4-6.3 libsamdb0-debuginfo-4.2.4-6.3 libsmbclient-devel-4.2.4-6.3 libsmbclient-raw-devel-4.2.4-6.3 libsmbclient-raw0-4.2.4-6.3 libsmbclient-raw0-debuginfo-4.2.4-6.3 libsmbclient0-4.2.4-6.3 libsmbclient0-debuginfo-4.2.4-6.3 libsmbconf-devel-4.2.4-6.3 libsmbconf0-4.2.4-6.3 libsmbconf0-debuginfo-4.2.4-6.3 libsmbldap-devel-4.2.4-6.3 libsmbldap0-4.2.4-6.3 libsmbldap0-debuginfo-4.2.4-6.3 libtevent-util-devel-4.2.4-6.3 libtevent-util0-4.2.4-6.3 libtevent-util0-debuginfo-4.2.4-6.3 libwbclient-devel-4.2.4-6.3 libwbclient0-4.2.4-6.3 libwbclient0-debuginfo-4.2.4-6.3 samba-4.2.4-6.3 samba-client-4.2.4-6.3 samba-client-debuginfo-4.2.4-6.3 samba-core-devel-4.2.4-6.3 samba-debuginfo-4.2.4-6.3 samba-debugsource-4.2.4-6.3 samba-libs-4.2.4-6.3 samba-libs-debuginfo-4.2.4-6.3 samba-pidl-4.2.4-6.3 samba-python-4.2.4-6.3 samba-python-debuginfo-4.2.4-6.3 samba-test-4.2.4-6.3 samba-test-debuginfo-4.2.4-6.3 samba-test-devel-4.2.4-6.3 samba-winbind-4.2.4-6.3 samba-winbind-debuginfo-4.2.4-6.3 - openSUSE Leap 42.1 (x86_64): libdcerpc-atsvc0-32bit-4.2.4-6.3 libdcerpc-atsvc0-debuginfo-32bit-4.2.4-6.3 libdcerpc-binding0-32bit-4.2.4-6.3 libdcerpc-binding0-debuginfo-32bit-4.2.4-6.3 libdcerpc-samr0-32bit-4.2.4-6.3 libdcerpc-samr0-debuginfo-32bit-4.2.4-6.3 libdcerpc0-32bit-4.2.4-6.3 libdcerpc0-debuginfo-32bit-4.2.4-6.3 libgensec0-32bit-4.2.4-6.3 libgensec0-debuginfo-32bit-4.2.4-6.3 libndr-krb5pac0-32bit-4.2.4-6.3 libndr-krb5pac0-debuginfo-32bit-4.2.4-6.3 libndr-nbt0-32bit-4.2.4-6.3 libndr-nbt0-debuginfo-32bit-4.2.4-6.3 libndr-standard0-32bit-4.2.4-6.3 libndr-standard0-debuginfo-32bit-4.2.4-6.3 libndr0-32bit-4.2.4-6.3 libndr0-debuginfo-32bit-4.2.4-6.3 libnetapi0-32bit-4.2.4-6.3 libnetapi0-debuginfo-32bit-4.2.4-6.3 libregistry0-32bit-4.2.4-6.3 libregistry0-debuginfo-32bit-4.2.4-6.3 libsamba-credentials0-32bit-4.2.4-6.3 libsamba-credentials0-debuginfo-32bit-4.2.4-6.3 libsamba-hostconfig0-32bit-4.2.4-6.3 libsamba-hostconfig0-debuginfo-32bit-4.2.4-6.3 libsamba-passdb0-32bit-4.2.4-6.3 libsamba-passdb0-debuginfo-32bit-4.2.4-6.3 libsamba-policy0-32bit-4.2.4-6.3 libsamba-policy0-debuginfo-32bit-4.2.4-6.3 libsamba-util0-32bit-4.2.4-6.3 libsamba-util0-debuginfo-32bit-4.2.4-6.3 libsamdb0-32bit-4.2.4-6.3 libsamdb0-debuginfo-32bit-4.2.4-6.3 libsmbclient-raw0-32bit-4.2.4-6.3 libsmbclient-raw0-debuginfo-32bit-4.2.4-6.3 libsmbclient0-32bit-4.2.4-6.3 libsmbclient0-debuginfo-32bit-4.2.4-6.3 libsmbconf0-32bit-4.2.4-6.3 libsmbconf0-debuginfo-32bit-4.2.4-6.3 libsmbldap0-32bit-4.2.4-6.3 libsmbldap0-debuginfo-32bit-4.2.4-6.3 libtevent-util0-32bit-4.2.4-6.3 libtevent-util0-debuginfo-32bit-4.2.4-6.3 libwbclient0-32bit-4.2.4-6.3 libwbclient0-debuginfo-32bit-4.2.4-6.3 samba-32bit-4.2.4-6.3 samba-client-32bit-4.2.4-6.3 samba-client-debuginfo-32bit-4.2.4-6.3 samba-debuginfo-32bit-4.2.4-6.3 samba-libs-32bit-4.2.4-6.3 samba-libs-debuginfo-32bit-4.2.4-6.3 samba-winbind-32bit-4.2.4-6.3 samba-winbind-debuginfo-32bit-4.2.4-6.3 - openSUSE Leap 42.1 (noarch): samba-doc-4.2.4-6.3 - openSUSE 13.2 (i586 x86_64): libdcerpc-atsvc-devel-4.1.21-18.1 libdcerpc-atsvc0-4.1.21-18.1 libdcerpc-atsvc0-debuginfo-4.1.21-18.1 libdcerpc-binding0-4.1.21-18.1 libdcerpc-binding0-debuginfo-4.1.21-18.1 libdcerpc-devel-4.1.21-18.1 libdcerpc-samr-devel-4.1.21-18.1 libdcerpc-samr0-4.1.21-18.1 libdcerpc-samr0-debuginfo-4.1.21-18.1 libdcerpc0-4.1.21-18.1 libdcerpc0-debuginfo-4.1.21-18.1 libgensec-devel-4.1.21-18.1 libgensec0-4.1.21-18.1 libgensec0-debuginfo-4.1.21-18.1 libndr-devel-4.1.21-18.1 libndr-krb5pac-devel-4.1.21-18.1 libndr-krb5pac0-4.1.21-18.1 libndr-krb5pac0-debuginfo-4.1.21-18.1 libndr-nbt-devel-4.1.21-18.1 libndr-nbt0-4.1.21-18.1 libndr-nbt0-debuginfo-4.1.21-18.1 libndr-standard-devel-4.1.21-18.1 libndr-standard0-4.1.21-18.1 libndr-standard0-debuginfo-4.1.21-18.1 libndr0-4.1.21-18.1 libndr0-debuginfo-4.1.21-18.1 libnetapi-devel-4.1.21-18.1 libnetapi0-4.1.21-18.1 libnetapi0-debuginfo-4.1.21-18.1 libpdb-devel-4.1.21-18.1 libpdb0-4.1.21-18.1 libpdb0-debuginfo-4.1.21-18.1 libregistry-devel-4.1.21-18.1 libregistry0-4.1.21-18.1 libregistry0-debuginfo-4.1.21-18.1 libsamba-credentials-devel-4.1.21-18.1 libsamba-credentials0-4.1.21-18.1 libsamba-credentials0-debuginfo-4.1.21-18.1 libsamba-hostconfig-devel-4.1.21-18.1 libsamba-hostconfig0-4.1.21-18.1 libsamba-hostconfig0-debuginfo-4.1.21-18.1 libsamba-policy-devel-4.1.21-18.1 libsamba-policy0-4.1.21-18.1 libsamba-policy0-debuginfo-4.1.21-18.1 libsamba-util-devel-4.1.21-18.1 libsamba-util0-4.1.21-18.1 libsamba-util0-debuginfo-4.1.21-18.1 libsamdb-devel-4.1.21-18.1 libsamdb0-4.1.21-18.1 libsamdb0-debuginfo-4.1.21-18.1 libsmbclient-devel-4.1.21-18.1 libsmbclient-raw-devel-4.1.21-18.1 libsmbclient-raw0-4.1.21-18.1 libsmbclient-raw0-debuginfo-4.1.21-18.1 libsmbclient0-4.1.21-18.1 libsmbclient0-debuginfo-4.1.21-18.1 libsmbconf-devel-4.1.21-18.1 libsmbconf0-4.1.21-18.1 libsmbconf0-debuginfo-4.1.21-18.1 libsmbldap-devel-4.1.21-18.1 libsmbldap0-4.1.21-18.1 libsmbldap0-debuginfo-4.1.21-18.1 libsmbsharemodes-devel-4.1.21-18.1 libsmbsharemodes0-4.1.21-18.1 libsmbsharemodes0-debuginfo-4.1.21-18.1 libtevent-util-devel-4.1.21-18.1 libtevent-util0-4.1.21-18.1 libtevent-util0-debuginfo-4.1.21-18.1 libwbclient-devel-4.1.21-18.1 libwbclient0-4.1.21-18.1 libwbclient0-debuginfo-4.1.21-18.1 samba-4.1.21-18.1 samba-client-4.1.21-18.1 samba-client-debuginfo-4.1.21-18.1 samba-core-devel-4.1.21-18.1 samba-debuginfo-4.1.21-18.1 samba-debugsource-4.1.21-18.1 samba-libs-4.1.21-18.1 samba-libs-debuginfo-4.1.21-18.1 samba-pidl-4.1.21-18.1 samba-python-4.1.21-18.1 samba-python-debuginfo-4.1.21-18.1 samba-test-4.1.21-18.1 samba-test-debuginfo-4.1.21-18.1 samba-test-devel-4.1.21-18.1 samba-winbind-4.1.21-18.1 samba-winbind-debuginfo-4.1.21-18.1 - openSUSE 13.2 (x86_64): libdcerpc-atsvc0-32bit-4.1.21-18.1 libdcerpc-atsvc0-debuginfo-32bit-4.1.21-18.1 libdcerpc-binding0-32bit-4.1.21-18.1 libdcerpc-binding0-debuginfo-32bit-4.1.21-18.1 libdcerpc-samr0-32bit-4.1.21-18.1 libdcerpc-samr0-debuginfo-32bit-4.1.21-18.1 libdcerpc0-32bit-4.1.21-18.1 libdcerpc0-debuginfo-32bit-4.1.21-18.1 libgensec0-32bit-4.1.21-18.1 libgensec0-debuginfo-32bit-4.1.21-18.1 libndr-krb5pac0-32bit-4.1.21-18.1 libndr-krb5pac0-debuginfo-32bit-4.1.21-18.1 libndr-nbt0-32bit-4.1.21-18.1 libndr-nbt0-debuginfo-32bit-4.1.21-18.1 libndr-standard0-32bit-4.1.21-18.1 libndr-standard0-debuginfo-32bit-4.1.21-18.1 libndr0-32bit-4.1.21-18.1 libndr0-debuginfo-32bit-4.1.21-18.1 libnetapi0-32bit-4.1.21-18.1 libnetapi0-debuginfo-32bit-4.1.21-18.1 libpdb0-32bit-4.1.21-18.1 libpdb0-debuginfo-32bit-4.1.21-18.1 libregistry0-32bit-4.1.21-18.1 libregistry0-debuginfo-32bit-4.1.21-18.1 libsamba-credentials0-32bit-4.1.21-18.1 libsamba-credentials0-debuginfo-32bit-4.1.21-18.1 libsamba-hostconfig0-32bit-4.1.21-18.1 libsamba-hostconfig0-debuginfo-32bit-4.1.21-18.1 libsamba-policy0-32bit-4.1.21-18.1 libsamba-policy0-debuginfo-32bit-4.1.21-18.1 libsamba-util0-32bit-4.1.21-18.1 libsamba-util0-debuginfo-32bit-4.1.21-18.1 libsamdb0-32bit-4.1.21-18.1 libsamdb0-debuginfo-32bit-4.1.21-18.1 libsmbclient-raw0-32bit-4.1.21-18.1 libsmbclient-raw0-debuginfo-32bit-4.1.21-18.1 libsmbclient0-32bit-4.1.21-18.1 libsmbclient0-debuginfo-32bit-4.1.21-18.1 libsmbconf0-32bit-4.1.21-18.1 libsmbconf0-debuginfo-32bit-4.1.21-18.1 libsmbldap0-32bit-4.1.21-18.1 libsmbldap0-debuginfo-32bit-4.1.21-18.1 libtevent-util0-32bit-4.1.21-18.1 libtevent-util0-debuginfo-32bit-4.1.21-18.1 libwbclient0-32bit-4.1.21-18.1 libwbclient0-debuginfo-32bit-4.1.21-18.1 samba-32bit-4.1.21-18.1 samba-client-32bit-4.1.21-18.1 samba-client-debuginfo-32bit-4.1.21-18.1 samba-debuginfo-32bit-4.1.21-18.1 samba-libs-32bit-4.1.21-18.1 samba-libs-debuginfo-32bit-4.1.21-18.1 samba-winbind-32bit-4.1.21-18.1 samba-winbind-debuginfo-32bit-4.1.21-18.1 - openSUSE 13.2 (noarch): samba-doc-4.1.21-18.1 - openSUSE 13.1 (i586 x86_64): libdcerpc-atsvc-devel-4.1.21-3.43.1 libdcerpc-atsvc0-4.1.21-3.43.1 libdcerpc-atsvc0-debuginfo-4.1.21-3.43.1 libdcerpc-binding0-4.1.21-3.43.1 libdcerpc-binding0-debuginfo-4.1.21-3.43.1 libdcerpc-devel-4.1.21-3.43.1 libdcerpc-samr-devel-4.1.21-3.43.1 libdcerpc-samr0-4.1.21-3.43.1 libdcerpc-samr0-debuginfo-4.1.21-3.43.1 libdcerpc0-4.1.21-3.43.1 libdcerpc0-debuginfo-4.1.21-3.43.1 libgensec-devel-4.1.21-3.43.1 libgensec0-4.1.21-3.43.1 libgensec0-debuginfo-4.1.21-3.43.1 libndr-devel-4.1.21-3.43.1 libndr-krb5pac-devel-4.1.21-3.43.1 libndr-krb5pac0-4.1.21-3.43.1 libndr-krb5pac0-debuginfo-4.1.21-3.43.1 libndr-nbt-devel-4.1.21-3.43.1 libndr-nbt0-4.1.21-3.43.1 libndr-nbt0-debuginfo-4.1.21-3.43.1 libndr-standard-devel-4.1.21-3.43.1 libndr-standard0-4.1.21-3.43.1 libndr-standard0-debuginfo-4.1.21-3.43.1 libndr0-4.1.21-3.43.1 libndr0-debuginfo-4.1.21-3.43.1 libnetapi-devel-4.1.21-3.43.1 libnetapi0-4.1.21-3.43.1 libnetapi0-debuginfo-4.1.21-3.43.1 libpdb-devel-4.1.21-3.43.1 libpdb0-4.1.21-3.43.1 libpdb0-debuginfo-4.1.21-3.43.1 libregistry-devel-4.1.21-3.43.1 libregistry0-4.1.21-3.43.1 libregistry0-debuginfo-4.1.21-3.43.1 libsamba-credentials-devel-4.1.21-3.43.1 libsamba-credentials0-4.1.21-3.43.1 libsamba-credentials0-debuginfo-4.1.21-3.43.1 libsamba-hostconfig-devel-4.1.21-3.43.1 libsamba-hostconfig0-4.1.21-3.43.1 libsamba-hostconfig0-debuginfo-4.1.21-3.43.1 libsamba-policy-devel-4.1.21-3.43.1 libsamba-policy0-4.1.21-3.43.1 libsamba-policy0-debuginfo-4.1.21-3.43.1 libsamba-util-devel-4.1.21-3.43.1 libsamba-util0-4.1.21-3.43.1 libsamba-util0-debuginfo-4.1.21-3.43.1 libsamdb-devel-4.1.21-3.43.1 libsamdb0-4.1.21-3.43.1 libsamdb0-debuginfo-4.1.21-3.43.1 libsmbclient-devel-4.1.21-3.43.1 libsmbclient-raw-devel-4.1.21-3.43.1 libsmbclient-raw0-4.1.21-3.43.1 libsmbclient-raw0-debuginfo-4.1.21-3.43.1 libsmbclient0-4.1.21-3.43.1 libsmbclient0-debuginfo-4.1.21-3.43.1 libsmbconf-devel-4.1.21-3.43.1 libsmbconf0-4.1.21-3.43.1 libsmbconf0-debuginfo-4.1.21-3.43.1 libsmbldap-devel-4.1.21-3.43.1 libsmbldap0-4.1.21-3.43.1 libsmbldap0-debuginfo-4.1.21-3.43.1 libsmbsharemodes-devel-4.1.21-3.43.1 libsmbsharemodes0-4.1.21-3.43.1 libsmbsharemodes0-debuginfo-4.1.21-3.43.1 libtevent-util-devel-4.1.21-3.43.1 libtevent-util0-4.1.21-3.43.1 libtevent-util0-debuginfo-4.1.21-3.43.1 libwbclient-devel-4.1.21-3.43.1 libwbclient0-4.1.21-3.43.1 libwbclient0-debuginfo-4.1.21-3.43.1 samba-4.1.21-3.43.1 samba-client-4.1.21-3.43.1 samba-client-debuginfo-4.1.21-3.43.1 samba-core-devel-4.1.21-3.43.1 samba-debuginfo-4.1.21-3.43.1 samba-debugsource-4.1.21-3.43.1 samba-libs-4.1.21-3.43.1 samba-libs-debuginfo-4.1.21-3.43.1 samba-pidl-4.1.21-3.43.1 samba-python-4.1.21-3.43.1 samba-python-debuginfo-4.1.21-3.43.1 samba-test-4.1.21-3.43.1 samba-test-debuginfo-4.1.21-3.43.1 samba-test-devel-4.1.21-3.43.1 samba-winbind-4.1.21-3.43.1 samba-winbind-debuginfo-4.1.21-3.43.1 - openSUSE 13.1 (x86_64): libdcerpc-atsvc0-32bit-4.1.21-3.43.1 libdcerpc-atsvc0-debuginfo-32bit-4.1.21-3.43.1 libdcerpc-binding0-32bit-4.1.21-3.43.1 libdcerpc-binding0-debuginfo-32bit-4.1.21-3.43.1 libdcerpc-samr0-32bit-4.1.21-3.43.1 libdcerpc-samr0-debuginfo-32bit-4.1.21-3.43.1 libdcerpc0-32bit-4.1.21-3.43.1 libdcerpc0-debuginfo-32bit-4.1.21-3.43.1 libgensec0-32bit-4.1.21-3.43.1 libgensec0-debuginfo-32bit-4.1.21-3.43.1 libndr-krb5pac0-32bit-4.1.21-3.43.1 libndr-krb5pac0-debuginfo-32bit-4.1.21-3.43.1 libndr-nbt0-32bit-4.1.21-3.43.1 libndr-nbt0-debuginfo-32bit-4.1.21-3.43.1 libndr-standard0-32bit-4.1.21-3.43.1 libndr-standard0-debuginfo-32bit-4.1.21-3.43.1 libndr0-32bit-4.1.21-3.43.1 libndr0-debuginfo-32bit-4.1.21-3.43.1 libnetapi0-32bit-4.1.21-3.43.1 libnetapi0-debuginfo-32bit-4.1.21-3.43.1 libpdb0-32bit-4.1.21-3.43.1 libpdb0-debuginfo-32bit-4.1.21-3.43.1 libregistry0-32bit-4.1.21-3.43.1 libregistry0-debuginfo-32bit-4.1.21-3.43.1 libsamba-credentials0-32bit-4.1.21-3.43.1 libsamba-credentials0-debuginfo-32bit-4.1.21-3.43.1 libsamba-hostconfig0-32bit-4.1.21-3.43.1 libsamba-hostconfig0-debuginfo-32bit-4.1.21-3.43.1 libsamba-policy0-32bit-4.1.21-3.43.1 libsamba-policy0-debuginfo-32bit-4.1.21-3.43.1 libsamba-util0-32bit-4.1.21-3.43.1 libsamba-util0-debuginfo-32bit-4.1.21-3.43.1 libsamdb0-32bit-4.1.21-3.43.1 libsamdb0-debuginfo-32bit-4.1.21-3.43.1 libsmbclient-raw0-32bit-4.1.21-3.43.1 libsmbclient-raw0-debuginfo-32bit-4.1.21-3.43.1 libsmbclient0-32bit-4.1.21-3.43.1 libsmbclient0-debuginfo-32bit-4.1.21-3.43.1 libsmbconf0-32bit-4.1.21-3.43.1 libsmbconf0-debuginfo-32bit-4.1.21-3.43.1 libsmbldap0-32bit-4.1.21-3.43.1 libsmbldap0-debuginfo-32bit-4.1.21-3.43.1 libtevent-util0-32bit-4.1.21-3.43.1 libtevent-util0-debuginfo-32bit-4.1.21-3.43.1 libwbclient0-32bit-4.1.21-3.43.1 libwbclient0-debuginfo-32bit-4.1.21-3.43.1 samba-32bit-4.1.21-3.43.1 samba-client-32bit-4.1.21-3.43.1 samba-client-debuginfo-32bit-4.1.21-3.43.1 samba-debuginfo-32bit-4.1.21-3.43.1 samba-libs-32bit-4.1.21-3.43.1 samba-libs-debuginfo-32bit-4.1.21-3.43.1 samba-winbind-32bit-4.1.21-3.43.1 samba-winbind-debuginfo-32bit-4.1.21-3.43.1 - openSUSE 13.1 (noarch): samba-doc-4.1.21-3.43.1 References: https://bugzilla.suse.com/295284 https://bugzilla.suse.com/773464 https://bugzilla.suse.com/912457 https://bugzilla.suse.com/913304 https://bugzilla.suse.com/947552

1 0

openSUSE-RU-2015:1956-1: moderate: Recommended update for marco
by maintenance＠opensuse.org 11 Nov '15

11 Nov '15

openSUSE Recommended Update: Recommended update for marco ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1956-1 Rating: moderate References: #953036 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 1.10.3 for marco: - Update to 1.10.3: * Fix crash with minimise animation. * Fix crash with window moving in some distributions (boo#953036). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-724=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libmarco-private0-1.10.3-6.1 libmarco-private0-debuginfo-1.10.3-6.1 marco-1.10.3-6.1 marco-debuginfo-1.10.3-6.1 marco-debugsource-1.10.3-6.1 marco-devel-1.10.3-6.1 - openSUSE Leap 42.1 (noarch): marco-lang-1.10.3-6.1 marco-themes-1.10.3-6.1 References: https://bugzilla.suse.com/953036

1 0

openSUSE-RU-2015:1955-1: Recommended update for translation-update
by maintenance＠opensuse.org 11 Nov '15

11 Nov '15

openSUSE Recommended Update: Recommended update for translation-update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1955-1 Rating: low References: #952855 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update updates the translation-update-from-translation-update-upstream tarball to work better. (boo#952855). Older translations updates are obsoleted (removed). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-725=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-725=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-725=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): translation-update-12.3-13.1 translation-update-ar-12.3-13.1 translation-update-as-12.3-13.1 translation-update-be-12.3-13.1 translation-update-bg-12.3-13.1 translation-update-bn-12.3-13.1 translation-update-bn_IN-12.3-13.1 translation-update-ca-12.3-13.1 translation-update-caValencia-12.3-13.1 translation-update-cs-12.3-13.1 translation-update-da-12.3-13.1 translation-update-de-12.3-13.1 translation-update-el-12.3-13.1 translation-update-en_GB-12.3-13.1 translation-update-en_US-12.3-13.1 translation-update-eo-12.3-13.1 translation-update-es-12.3-13.1 translation-update-et-12.3-13.1 translation-update-eu-12.3-13.1 translation-update-fa-12.3-13.1 translation-update-fi-12.3-13.1 translation-update-fr-12.3-13.1 translation-update-gl-12.3-13.1 translation-update-gu-12.3-13.1 translation-update-he-12.3-13.1 translation-update-hi-12.3-13.1 translation-update-hr-12.3-13.1 translation-update-hu-12.3-13.1 translation-update-id-12.3-13.1 translation-update-it-12.3-13.1 translation-update-ja-12.3-13.1 translation-update-kk-12.3-13.1 translation-update-km-12.3-13.1 translation-update-kn-12.3-13.1 translation-update-ko-12.3-13.1 translation-update-lt-12.3-13.1 translation-update-lv-12.3-13.1 translation-update-ml-12.3-13.1 translation-update-mr-12.3-13.1 translation-update-nb-12.3-13.1 translation-update-nl-12.3-13.1 translation-update-nn-12.3-13.1 translation-update-or-12.3-13.1 translation-update-pa-12.3-13.1 translation-update-pl-12.3-13.1 translation-update-pt-12.3-13.1 translation-update-pt_BR-12.3-13.1 translation-update-ro-12.3-13.1 translation-update-ru-12.3-13.1 translation-update-sk-12.3-13.1 translation-update-sl-12.3-13.1 translation-update-sr-12.3-13.1 translation-update-srLatin-12.3-13.1 translation-update-sv-12.3-13.1 translation-update-ta-12.3-13.1 translation-update-te-12.3-13.1 translation-update-th-12.3-13.1 translation-update-tr-12.3-13.1 translation-update-ug-12.3-13.1 translation-update-uk-12.3-13.1 translation-update-vi-12.3-13.1 translation-update-zh_CN-12.3-13.1 translation-update-zh_HK-12.3-13.1 translation-update-zh_TW-12.3-13.1 - openSUSE 13.2 (noarch): translation-update-12.3-6.3.1 translation-update-ar-12.3-6.3.1 translation-update-as-12.3-6.3.1 translation-update-be-12.3-6.3.1 translation-update-bg-12.3-6.3.1 translation-update-bn-12.3-6.3.1 translation-update-bn_IN-12.3-6.3.1 translation-update-ca-12.3-6.3.1 translation-update-caValencia-12.3-6.3.1 translation-update-cs-12.3-6.3.1 translation-update-da-12.3-6.3.1 translation-update-de-12.3-6.3.1 translation-update-el-12.3-6.3.1 translation-update-en_GB-12.3-6.3.1 translation-update-en_US-12.3-6.3.1 translation-update-eo-12.3-6.3.1 translation-update-es-12.3-6.3.1 translation-update-et-12.3-6.3.1 translation-update-eu-12.3-6.3.1 translation-update-fa-12.3-6.3.1 translation-update-fi-12.3-6.3.1 translation-update-fr-12.3-6.3.1 translation-update-gl-12.3-6.3.1 translation-update-gu-12.3-6.3.1 translation-update-he-12.3-6.3.1 translation-update-hi-12.3-6.3.1 translation-update-hr-12.3-6.3.1 translation-update-hu-12.3-6.3.1 translation-update-id-12.3-6.3.1 translation-update-it-12.3-6.3.1 translation-update-ja-12.3-6.3.1 translation-update-kk-12.3-6.3.1 translation-update-km-12.3-6.3.1 translation-update-kn-12.3-6.3.1 translation-update-ko-12.3-6.3.1 translation-update-lt-12.3-6.3.1 translation-update-lv-12.3-6.3.1 translation-update-ml-12.3-6.3.1 translation-update-mr-12.3-6.3.1 translation-update-nb-12.3-6.3.1 translation-update-nl-12.3-6.3.1 translation-update-nn-12.3-6.3.1 translation-update-or-12.3-6.3.1 translation-update-pa-12.3-6.3.1 translation-update-pl-12.3-6.3.1 translation-update-pt-12.3-6.3.1 translation-update-pt_BR-12.3-6.3.1 translation-update-ro-12.3-6.3.1 translation-update-ru-12.3-6.3.1 translation-update-sk-12.3-6.3.1 translation-update-sl-12.3-6.3.1 translation-update-sr-12.3-6.3.1 translation-update-srLatin-12.3-6.3.1 translation-update-sv-12.3-6.3.1 translation-update-ta-12.3-6.3.1 translation-update-te-12.3-6.3.1 translation-update-th-12.3-6.3.1 translation-update-tr-12.3-6.3.1 translation-update-ug-12.3-6.3.1 translation-update-uk-12.3-6.3.1 translation-update-vi-12.3-6.3.1 translation-update-zh_CN-12.3-6.3.1 translation-update-zh_HK-12.3-6.3.1 translation-update-zh_TW-12.3-6.3.1 - openSUSE 13.1 (noarch): translation-update-12.3-2.3.1 translation-update-ar-12.3-2.3.1 translation-update-as-12.3-2.3.1 translation-update-be-12.3-2.3.1 translation-update-bg-12.3-2.3.1 translation-update-bn-12.3-2.3.1 translation-update-bn_IN-12.3-2.3.1 translation-update-ca-12.3-2.3.1 translation-update-ca(a)valencia-12.3-2.3.1 translation-update-cs-12.3-2.3.1 translation-update-da-12.3-2.3.1 translation-update-de-12.3-2.3.1 translation-update-el-12.3-2.3.1 translation-update-en_GB-12.3-2.3.1 translation-update-en_US-12.3-2.3.1 translation-update-eo-12.3-2.3.1 translation-update-es-12.3-2.3.1 translation-update-et-12.3-2.3.1 translation-update-eu-12.3-2.3.1 translation-update-fa-12.3-2.3.1 translation-update-fi-12.3-2.3.1 translation-update-fr-12.3-2.3.1 translation-update-gl-12.3-2.3.1 translation-update-gu-12.3-2.3.1 translation-update-he-12.3-2.3.1 translation-update-hi-12.3-2.3.1 translation-update-hr-12.3-2.3.1 translation-update-hu-12.3-2.3.1 translation-update-id-12.3-2.3.1 translation-update-it-12.3-2.3.1 translation-update-ja-12.3-2.3.1 translation-update-kk-12.3-2.3.1 translation-update-km-12.3-2.3.1 translation-update-kn-12.3-2.3.1 translation-update-ko-12.3-2.3.1 translation-update-lt-12.3-2.3.1 translation-update-lv-12.3-2.3.1 translation-update-ml-12.3-2.3.1 translation-update-mr-12.3-2.3.1 translation-update-nb-12.3-2.3.1 translation-update-nl-12.3-2.3.1 translation-update-nn-12.3-2.3.1 translation-update-or-12.3-2.3.1 translation-update-pa-12.3-2.3.1 translation-update-pl-12.3-2.3.1 translation-update-pt-12.3-2.3.1 translation-update-pt_BR-12.3-2.3.1 translation-update-ro-12.3-2.3.1 translation-update-ru-12.3-2.3.1 translation-update-sk-12.3-2.3.1 translation-update-sl-12.3-2.3.1 translation-update-sr-12.3-2.3.1 translation-update-sr(a)latin-12.3-2.3.1 translation-update-sv-12.3-2.3.1 translation-update-ta-12.3-2.3.1 translation-update-te-12.3-2.3.1 translation-update-th-12.3-2.3.1 translation-update-tr-12.3-2.3.1 translation-update-ug-12.3-2.3.1 translation-update-uk-12.3-2.3.1 translation-update-vi-12.3-2.3.1 translation-update-zh_CN-12.3-2.3.1 translation-update-zh_HK-12.3-2.3.1 translation-update-zh_TW-12.3-2.3.1 References: https://bugzilla.suse.com/952855

1 0

openSUSE-RU-2015:1949-1: moderate: Recommended update for ibus-libpinyin
by maintenance＠opensuse.org 10 Nov '15

10 Nov '15

openSUSE Recommended Update: Recommended update for ibus-libpinyin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1949-1 Rating: moderate References: #947676 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: ibus-libpinyin was updated to 1.7.2: * Fix for Lua 5.2 API change (luaL_register is deprecated) * update po files * update clearPinyinUserData method * update m_dictionaries * use pinyin_load_addon_phrase_library function * update setup dialog * fixes a typo * add libpinyin.appdata.xml - This update fixed a ibus-libpinyin require issue (boo#947676) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-720=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ibus-libpinyin-1.7.2git20150720-4.1 ibus-libpinyin-debuginfo-1.7.2git20150720-4.1 ibus-libpinyin-debugsource-1.7.2git20150720-4.1 References: https://bugzilla.suse.com/947676

1 0

openSUSE-RU-2015:1948-1: moderate: Recommended update for gnome-boxes
by maintenance＠opensuse.org 10 Nov '15

10 Nov '15

openSUSE Recommended Update: Recommended update for gnome-boxes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1948-1 Rating: moderate References: #952712 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for gnome-boxes fixes the following issue: - Stop passing --enable-smartcard to configure, we are using SLE base for Leap, and we are missing smartcard support (boo#952712). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-719=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gnome-boxes-3.16.2-4.1 gnome-boxes-debuginfo-3.16.2-4.1 gnome-boxes-debugsource-3.16.2-4.1 gnome-shell-search-provider-boxes-3.16.2-4.1 gnome-shell-search-provider-boxes-debuginfo-3.16.2-4.1 - openSUSE Leap 42.1 (noarch): gnome-boxes-lang-3.16.2-4.1 References: https://bugzilla.suse.com/952712

1 0

openSUSE-SU-2015:1946-1: moderate: Security update for gcc48
by opensuse-security＠opensuse.org 10 Nov '15

10 Nov '15

openSUSE Security Update: Security update for gcc48 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1946-1 Rating: moderate References: #945842 #947772 #947791 #948168 #949000 Cross-References: CVE-2015-5276 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. Description: This update for GCC 4.8 provides the following fixes: - Fix C++11 std::random_device short read issue that could lead to predictable randomness. (CVE-2015-5276, bsc#945842) - Fix linker segmentation fault when building SLOF on ppc64le. (bsc#949000) - Fix no_instrument_function attribute handling on PPC64 with -mprofile-kernel. (bsc#947791) - Fix internal compiler error with aarch64 target using PCH and builtin functions. (bsc#947772) - Fix libffi issues on aarch64. (bsc#948168) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-723=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): cpp48-4.8.5-18.1 cpp48-debuginfo-4.8.5-18.1 gcc48-4.8.5-18.1 gcc48-ada-4.8.5-18.1 gcc48-ada-debuginfo-4.8.5-18.1 gcc48-c++-4.8.5-18.1 gcc48-c++-debuginfo-4.8.5-18.1 gcc48-debuginfo-4.8.5-18.1 gcc48-debugsource-4.8.5-18.1 gcc48-fortran-4.8.5-18.1 gcc48-fortran-debuginfo-4.8.5-18.1 gcc48-gij-4.8.5-18.1 gcc48-gij-debuginfo-4.8.5-18.1 gcc48-java-4.8.5-18.1 gcc48-java-debuginfo-4.8.5-18.1 gcc48-locale-4.8.5-18.1 gcc48-obj-c++-4.8.5-18.1 gcc48-obj-c++-debuginfo-4.8.5-18.1 gcc48-objc-4.8.5-18.1 gcc48-objc-debuginfo-4.8.5-18.1 gcc48-testresults-4.8.5-18.3 gdb-7.9.1-7.1 gdb-debuginfo-7.9.1-7.1 gdb-debugsource-7.9.1-7.1 gdb-testresults-7.9.1-7.1 gdbserver-7.9.1-7.1 gdbserver-debuginfo-7.9.1-7.1 libada48-4.8.5-18.1 libada48-debuginfo-4.8.5-18.1 libasan0-4.8.5-18.1 libasan0-debuginfo-4.8.5-18.1 libatomic1-gcc48-4.8.5-18.1 libatomic1-gcc48-debuginfo-4.8.5-18.1 libffi4-gcc48-4.8.5-18.1 libffi4-gcc48-debuginfo-4.8.5-18.1 libffi48-debugsource-4.8.5-18.1 libffi48-devel-4.8.5-18.1 libgcc_s1-gcc48-4.8.5-18.1 libgcc_s1-gcc48-debuginfo-4.8.5-18.1 libgcj48-4.8.5-18.1 libgcj48-debuginfo-4.8.5-18.1 libgcj48-debugsource-4.8.5-18.1 libgcj48-devel-4.8.5-18.1 libgcj48-devel-debuginfo-4.8.5-18.1 libgcj48-jar-4.8.5-18.1 libgcj_bc1-gcc48-4.8.5-18.1 libgfortran3-gcc48-4.8.5-18.1 libgfortran3-gcc48-debuginfo-4.8.5-18.1 libgomp1-gcc48-4.8.5-18.1 libgomp1-gcc48-debuginfo-4.8.5-18.1 libitm1-gcc48-4.8.5-18.1 libitm1-gcc48-debuginfo-4.8.5-18.1 libobjc4-4.8.5-18.1 libobjc4-debuginfo-4.8.5-18.1 libquadmath0-gcc48-4.8.5-18.1 libquadmath0-gcc48-debuginfo-4.8.5-18.1 libstdc++48-devel-4.8.5-18.1 libstdc++6-gcc48-4.8.5-18.1 libstdc++6-gcc48-debuginfo-4.8.5-18.1 libstdc++6-gcc48-locale-4.8.5-18.1 - openSUSE Leap 42.1 (x86_64): cross-aarch64-gcc48-icecream-backend-4.8.5-18.2 cross-armv6hl-gcc48-icecream-backend-4.8.5-18.2 cross-armv7hl-gcc48-icecream-backend-4.8.5-18.2 cross-hppa-gcc48-icecream-backend-4.8.5-18.2 cross-i386-gcc48-icecream-backend-4.8.5-18.2 cross-ia64-gcc48-icecream-backend-4.8.5-18.2 cross-ppc-gcc48-icecream-backend-4.8.5-18.2 cross-ppc64-gcc48-icecream-backend-4.8.5-18.2 cross-ppc64le-gcc48-icecream-backend-4.8.5-18.2 cross-s390-gcc48-icecream-backend-4.8.5-18.2 cross-s390x-gcc48-icecream-backend-4.8.5-18.2 gcc48-32bit-4.8.5-18.1 gcc48-ada-32bit-4.8.5-18.1 gcc48-fortran-32bit-4.8.5-18.1 gcc48-gij-32bit-4.8.5-18.1 gcc48-gij-debuginfo-32bit-4.8.5-18.1 gcc48-objc-32bit-4.8.5-18.1 libada48-32bit-4.8.5-18.1 libada48-32bit-debuginfo-4.8.5-18.1 libasan0-32bit-4.8.5-18.1 libasan0-32bit-debuginfo-4.8.5-18.1 libatomic1-gcc48-32bit-4.8.5-18.1 libatomic1-gcc48-32bit-debuginfo-4.8.5-18.1 libffi4-gcc48-32bit-4.8.5-18.1 libffi4-gcc48-32bit-debuginfo-4.8.5-18.1 libffi48-devel-32bit-4.8.5-18.1 libgcc_s1-gcc48-32bit-4.8.5-18.1 libgcc_s1-gcc48-32bit-debuginfo-4.8.5-18.1 libgcj48-32bit-4.8.5-18.1 libgcj48-debuginfo-32bit-4.8.5-18.1 libgcj48-devel-32bit-4.8.5-18.1 libgcj48-devel-debuginfo-32bit-4.8.5-18.1 libgfortran3-gcc48-32bit-4.8.5-18.1 libgfortran3-gcc48-32bit-debuginfo-4.8.5-18.1 libgomp1-gcc48-32bit-4.8.5-18.1 libgomp1-gcc48-32bit-debuginfo-4.8.5-18.1 libitm1-gcc48-32bit-4.8.5-18.1 libitm1-gcc48-32bit-debuginfo-4.8.5-18.1 libobjc4-32bit-4.8.5-18.1 libobjc4-32bit-debuginfo-4.8.5-18.1 libquadmath0-gcc48-32bit-4.8.5-18.1 libquadmath0-gcc48-32bit-debuginfo-4.8.5-18.1 libstdc++48-devel-32bit-4.8.5-18.1 libstdc++6-gcc48-32bit-4.8.5-18.1 libstdc++6-gcc48-32bit-debuginfo-4.8.5-18.1 libtsan0-gcc48-4.8.5-18.1 libtsan0-gcc48-debuginfo-4.8.5-18.1 - openSUSE Leap 42.1 (noarch): gcc48-info-4.8.5-18.1 libstdc++48-doc-4.8.5-18.1 References: https://www.suse.com/security/cve/CVE-2015-5276.html https://bugzilla.suse.com/945842 https://bugzilla.suse.com/947772 https://bugzilla.suse.com/947791 https://bugzilla.suse.com/948168 https://bugzilla.suse.com/949000

1 0

openSUSE-SU-2015:1945-1: moderate: Security update for roundcubemail
by opensuse-security＠opensuse.org 10 Nov '15

10 Nov '15

openSUSE Security Update: Security update for roundcubemail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1945-1 Rating: moderate References: #938840 #952006 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update of roundcubemail fixes one security issue and one bug. - roundcubemail was updated to disallow unwanted access on files in the file system. The apache2 configuration file for roundcubemail previously allowed access to the roundcubemail/bin folder and possibly /logs, /config and /temp, if these were not symlinks (this is only the case when manually changed). This update comes with a fixed configuration. If you modified the file "/etc/apache2/conf.d/roundcubemail.conf", please replace it with the configuration "roundcubemail.conf.rpmnew" and reapply your changes. After that, a restart of apache2 is requried. - This update also fixes an issue that causes apache2 not to start because "mod_version.c" is not loaded. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-722=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): roundcubemail-1.1.3-3.1 References: https://bugzilla.suse.com/938840 https://bugzilla.suse.com/952006

1 0

openSUSE-RU-2015:1943-1: moderate: Recommended update for open-vm-tools
by maintenance＠opensuse.org 10 Nov '15

10 Nov '15

openSUSE Recommended Update: Recommended update for open-vm-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1943-1 Rating: moderate References: #952645 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: open-vm-tools was updated to fix a restart issue: - Enable vgauth for openSUSE Leap 42.1 (bsc#952645) - Remove vgauth requirements from vmtoolsd.service file if vgauth is not enabled. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-721=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libvmtools-devel-10.0.0-3.1 libvmtools0-10.0.0-3.1 libvmtools0-debuginfo-10.0.0-3.1 open-vm-tools-10.0.0-3.1 open-vm-tools-debuginfo-10.0.0-3.1 open-vm-tools-debugsource-10.0.0-3.1 open-vm-tools-desktop-10.0.0-3.1 open-vm-tools-desktop-debuginfo-10.0.0-3.1 References: https://bugzilla.suse.com/952645

1 0

openSUSE-SU-2015:1942-1: important: Security update for MozillaFirefox, mozilla-nspr, mozilla-nss, xulrunner, seamonkey
by opensuse-security＠opensuse.org 09 Nov '15

09 Nov '15

openSUSE Security Update: Security update for MozillaFirefox, mozilla-nspr, mozilla-nss, xulrunner, seamonkey ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1942-1 Rating: important References: #952810 Cross-References: CVE-2015-4513 CVE-2015-4514 CVE-2015-4515 CVE-2015-4518 CVE-2015-7181 CVE-2015-7182 CVE-2015-7183 CVE-2015-7185 CVE-2015-7186 CVE-2015-7187 CVE-2015-7188 CVE-2015-7189 CVE-2015-7190 CVE-2015-7191 CVE-2015-7192 CVE-2015-7193 CVE-2015-7194 CVE-2015-7195 CVE-2015-7196 CVE-2015-7197 CVE-2015-7198 CVE-2015-7199 CVE-2015-7200 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 23 vulnerabilities is now available. Description: Mozilla Firefox was updated to version 42.0, fixing bugs and security issues. Mozilla xulrunner was updated to xulrunner 38.4.0. Seamonkey was updated to 2.39. New features in Mozilla Firefox: * Private Browsing with Tracking Protection blocks certain Web elements that could be used to record your behavior across sites * Control Center that contains site security and privacy controls * Login Manager improvements * WebRTC improvements * Indicator added to tabs that play audio with one-click muting * Media Source Extension for HTML5 video available for all sites Security fixes: * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514 Miscellaneous memory safety hazards * MFSA 2015-117/CVE-2015-4515 (bmo#1046421) Information disclosure through NTLM authentication * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692) CSP bypass due to permissive Reader mode whitelist * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only) Firefox for Android addressbar can be removed after fullscreen mode * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only) Reading sensitive profile files through local HTML file on Android * MFSA 2015-121/CVE-2015-7187 (bmo#1195735) disabling scripts in Add-on SDK panels has no effect * MFSA 2015-122/CVE-2015-7188 (bmo#1199430) Trailing whitespace in IP address hostnames can bypass same-origin policy * MFSA 2015-123/CVE-2015-7189 (bmo#1205900) Buffer overflow during image interactions in canvas * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only) Android intents can be used on Firefox for Android to open privileged files * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only) XSS attack through intents on Firefox for Android * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only) Crash when accessing HTML tables with accessibility tools on OS X * MFSA 2015-127/CVE-2015-7193 (bmo#1210302) CORS preflight is bypassed when non-standard Content-Type headers are received * MFSA 2015-128/CVE-2015-7194 (bmo#1211262) Memory corruption in libjar through zip files * MFSA 2015-129/CVE-2015-7195 (bmo#1211871) Certain escaped characters in host of Location-header are being treated as non-escaped * MFSA 2015-130/CVE-2015-7196 (bmo#1140616) JavaScript garbage collection crash with Java applet * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200 (bmo#1188010, bmo#1204061, bmo#1204155) Vulnerabilities found through code inspection * MFSA 2015-132/CVE-2015-7197 (bmo#1204269) Mixed content WebSocket policy bypass through workers * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183 (bmo#1202868, bmo#1205157) NSS and NSPR memory corruption issues (fixed in mozilla-nspr and mozilla-nss packages) mozilla-nspr was updated to 4.10.10: * MFSA 2015-133/CVE-2015-7183 (bmo#1205157) memory corruption issues This update includes the update to version 4.10.9 * bmo#1021167: Leak of |poll_list| on failure in _MW_PollInternal * bmo#1030692: Make compiling nspr on windows possible again. * bmo#1088790: dosprint() doesn't support %zu and other size formats * bmo#1130787: prtime.h does not compile with MSVC's /Za (ISO C/C++ conformance) option * bmo#1153610: MIPS64: Add support for n64 ABI * bmo#1156029: Teach clang-analyzer about PR_ASSERT * bmo#1160125: MSVC version detection is broken CC is set to a wrapper (like sccache) * bmo#1163346: Add NSPR support for FreeBSD mips/mips64 * bmo#1169185: Add support for OpenRISC (or1k) * bmo:1174749: Remove configure block for iOS that uses MACOS_SDK_DIR * bmo#1174781: PR_GetInheritedFD can use uninitialized variables mozilla-nss was updated to 3.20.1: * requires NSPR 4.10.10 * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868) memory corruption issues - Install the static libfreebl.a that is needed in order to link Sun elliptical curves provider in Java 7. This includes the update of Mozilla NSS to NSS 3.20 New functionality: * The TLS library has been extended to support DHE ciphersuites in server applications. New Functions: * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group parameters that can be used by NSS for a server socket. * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group parameters that are smaller than the library default's minimum size. New Types: * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in NSS that can be used with function SSL_DHEGroupPrefSet. New Macros: * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable DHE ciphersuites for a server socket. Notable Changes: * For backwards compatibility reasons, the server side implementation of the TLS library keeps all DHE ciphersuites disabled by default. They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE and the SSL_OptionSet or the SSL_OptionSetDefault API. * The server side implementation of the TLS implementation does not support session tickets when using a DHE ciphersuite (see bmo#1174677). * Support for the following ciphersuites has been added: - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 * By default, the server side TLS implementation will use DHE parameters with a size of 2048 bits when using DHE ciphersuites. * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and 8192 bits, which were copied from version 08 of the Internet-Draft "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for TLS", Appendix A. * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a server application to select one or multiple of the embedded DHE parameters as the preferred parameters. The current implementation of NSS will always use the first entry in the array that is passed as a parameter to the SSL_DHEGroupPrefSet API. In future versions of the TLS implementation, a TLS client might signal a preference for certain DHE parameters, and the NSS TLS server side implementation might select a matching entry from the set of parameters that have been configured as preferred on the server side. * NSS optionally supports the use of weak DHE parameters with DHE ciphersuites to support legacy clients. In order to enable this support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each time this API is called for the first time in a process, a fresh set of weak DHE parameters will be randomly created, which may take a long amount of time. Please refer to the comments in the header file that declares the SSL_EnableWeakDHEPrimeGroup API for additional details. * The size of the default PQG parameters used by certutil when creating DSA keys has been increased to use 2048 bit parameters. * The selfserv utility has been enhanced to support the new DHE features. * NSS no longer supports C compilers that predate the ANSI C standard (C89). It also includes the update to NSS 3.19.3; certstore updates only * The following CA certificates were removed - Buypass Class 3 CA 1 - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı - SG TRUST SERVICES RACINE - TC TrustCenter Universal CA I - TC TrustCenter Class 2 CA II * The following CA certificate had the Websites trust bit turned off - ComSign Secured CA * The following CA certificates were added - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5 - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6 - Certinomis - Root CA * The version number of the updated root CA list has been set to 2.5 - Install blapi.h and algmac.h that are needed in order to build Sun elliptical curves provider in Java 7 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-718=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-718=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-718=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): MozillaFirefox-42.0-3.5 MozillaFirefox-branding-upstream-42.0-3.5 MozillaFirefox-buildsymbols-42.0-3.5 MozillaFirefox-debuginfo-42.0-3.5 MozillaFirefox-debugsource-42.0-3.5 MozillaFirefox-devel-42.0-3.5 MozillaFirefox-translations-common-42.0-3.5 MozillaFirefox-translations-other-42.0-3.5 libfreebl3-3.20.1-3.3 libfreebl3-debuginfo-3.20.1-3.3 libsoftokn3-3.20.1-3.3 libsoftokn3-debuginfo-3.20.1-3.3 mozilla-nspr-4.10.10-4.1 mozilla-nspr-debuginfo-4.10.10-4.1 mozilla-nspr-debugsource-4.10.10-4.1 mozilla-nspr-devel-4.10.10-4.1 mozilla-nss-3.20.1-3.3 mozilla-nss-certs-3.20.1-3.3 mozilla-nss-certs-debuginfo-3.20.1-3.3 mozilla-nss-debuginfo-3.20.1-3.3 mozilla-nss-debugsource-3.20.1-3.3 mozilla-nss-devel-3.20.1-3.3 mozilla-nss-sysinit-3.20.1-3.3 mozilla-nss-sysinit-debuginfo-3.20.1-3.3 mozilla-nss-tools-3.20.1-3.3 mozilla-nss-tools-debuginfo-3.20.1-3.3 seamonkey-2.39-3.1 seamonkey-debuginfo-2.39-3.1 seamonkey-debugsource-2.39-3.1 seamonkey-dom-inspector-2.39-3.1 seamonkey-irc-2.39-3.1 seamonkey-translations-common-2.39-3.1 seamonkey-translations-other-2.39-3.1 xulrunner-38.4.0-3.2 xulrunner-debuginfo-38.4.0-3.2 xulrunner-debugsource-38.4.0-3.2 xulrunner-devel-38.4.0-3.2 - openSUSE Leap 42.1 (x86_64): libfreebl3-32bit-3.20.1-3.3 libfreebl3-debuginfo-32bit-3.20.1-3.3 libsoftokn3-32bit-3.20.1-3.3 libsoftokn3-debuginfo-32bit-3.20.1-3.3 mozilla-nspr-32bit-4.10.10-4.1 mozilla-nspr-debuginfo-32bit-4.10.10-4.1 mozilla-nss-32bit-3.20.1-3.3 mozilla-nss-certs-32bit-3.20.1-3.3 mozilla-nss-certs-debuginfo-32bit-3.20.1-3.3 mozilla-nss-debuginfo-32bit-3.20.1-3.3 mozilla-nss-sysinit-32bit-3.20.1-3.3 mozilla-nss-sysinit-debuginfo-32bit-3.20.1-3.3 xulrunner-32bit-38.4.0-3.2 xulrunner-debuginfo-32bit-38.4.0-3.2 - openSUSE 13.2 (i586 x86_64): MozillaFirefox-42.0-50.4 MozillaFirefox-branding-upstream-42.0-50.4 MozillaFirefox-buildsymbols-42.0-50.4 MozillaFirefox-debuginfo-42.0-50.4 MozillaFirefox-debugsource-42.0-50.4 MozillaFirefox-devel-42.0-50.4 MozillaFirefox-translations-common-42.0-50.4 MozillaFirefox-translations-other-42.0-50.4 libfreebl3-3.20.1-19.2 libfreebl3-debuginfo-3.20.1-19.2 libsoftokn3-3.20.1-19.2 libsoftokn3-debuginfo-3.20.1-19.2 mozilla-nspr-4.10.10-9.1 mozilla-nspr-debuginfo-4.10.10-9.1 mozilla-nspr-debugsource-4.10.10-9.1 mozilla-nspr-devel-4.10.10-9.1 mozilla-nss-3.20.1-19.2 mozilla-nss-certs-3.20.1-19.2 mozilla-nss-certs-debuginfo-3.20.1-19.2 mozilla-nss-debuginfo-3.20.1-19.2 mozilla-nss-debugsource-3.20.1-19.2 mozilla-nss-devel-3.20.1-19.2 mozilla-nss-sysinit-3.20.1-19.2 mozilla-nss-sysinit-debuginfo-3.20.1-19.2 mozilla-nss-tools-3.20.1-19.2 mozilla-nss-tools-debuginfo-3.20.1-19.2 seamonkey-2.39-23.1 seamonkey-debuginfo-2.39-23.1 seamonkey-debugsource-2.39-23.1 seamonkey-dom-inspector-2.39-23.1 seamonkey-irc-2.39-23.1 seamonkey-translations-common-2.39-23.1 seamonkey-translations-other-2.39-23.1 - openSUSE 13.2 (x86_64): libfreebl3-32bit-3.20.1-19.2 libfreebl3-debuginfo-32bit-3.20.1-19.2 libsoftokn3-32bit-3.20.1-19.2 libsoftokn3-debuginfo-32bit-3.20.1-19.2 mozilla-nspr-32bit-4.10.10-9.1 mozilla-nspr-debuginfo-32bit-4.10.10-9.1 mozilla-nss-32bit-3.20.1-19.2 mozilla-nss-certs-32bit-3.20.1-19.2 mozilla-nss-certs-debuginfo-32bit-3.20.1-19.2 mozilla-nss-debuginfo-32bit-3.20.1-19.2 mozilla-nss-sysinit-32bit-3.20.1-19.2 mozilla-nss-sysinit-debuginfo-32bit-3.20.1-19.2 - openSUSE 13.1 (i586 x86_64): MozillaFirefox-42.0-94.4 MozillaFirefox-branding-upstream-42.0-94.4 MozillaFirefox-buildsymbols-42.0-94.4 MozillaFirefox-debuginfo-42.0-94.4 MozillaFirefox-debugsource-42.0-94.4 MozillaFirefox-devel-42.0-94.4 MozillaFirefox-translations-common-42.0-94.4 MozillaFirefox-translations-other-42.0-94.4 libfreebl3-3.20.1-62.2 libfreebl3-debuginfo-3.20.1-62.2 libsoftokn3-3.20.1-62.2 libsoftokn3-debuginfo-3.20.1-62.2 mozilla-nspr-4.10.10-25.1 mozilla-nspr-debuginfo-4.10.10-25.1 mozilla-nspr-debugsource-4.10.10-25.1 mozilla-nspr-devel-4.10.10-25.1 mozilla-nss-3.20.1-62.2 mozilla-nss-certs-3.20.1-62.2 mozilla-nss-certs-debuginfo-3.20.1-62.2 mozilla-nss-debuginfo-3.20.1-62.2 mozilla-nss-debugsource-3.20.1-62.2 mozilla-nss-devel-3.20.1-62.2 mozilla-nss-sysinit-3.20.1-62.2 mozilla-nss-sysinit-debuginfo-3.20.1-62.2 mozilla-nss-tools-3.20.1-62.2 mozilla-nss-tools-debuginfo-3.20.1-62.2 seamonkey-2.39-59.1 seamonkey-debuginfo-2.39-59.1 seamonkey-debugsource-2.39-59.1 seamonkey-dom-inspector-2.39-59.1 seamonkey-irc-2.39-59.1 seamonkey-translations-common-2.39-59.1 seamonkey-translations-other-2.39-59.1 - openSUSE 13.1 (x86_64): libfreebl3-32bit-3.20.1-62.2 libfreebl3-debuginfo-32bit-3.20.1-62.2 libsoftokn3-32bit-3.20.1-62.2 libsoftokn3-debuginfo-32bit-3.20.1-62.2 mozilla-nspr-32bit-4.10.10-25.1 mozilla-nspr-debuginfo-32bit-4.10.10-25.1 mozilla-nss-32bit-3.20.1-62.2 mozilla-nss-certs-32bit-3.20.1-62.2 mozilla-nss-certs-debuginfo-32bit-3.20.1-62.2 mozilla-nss-debuginfo-32bit-3.20.1-62.2 mozilla-nss-sysinit-32bit-3.20.1-62.2 mozilla-nss-sysinit-debuginfo-32bit-3.20.1-62.2 References: https://www.suse.com/security/cve/CVE-2015-4513.html https://www.suse.com/security/cve/CVE-2015-4514.html https://www.suse.com/security/cve/CVE-2015-4515.html https://www.suse.com/security/cve/CVE-2015-4518.html https://www.suse.com/security/cve/CVE-2015-7181.html https://www.suse.com/security/cve/CVE-2015-7182.html https://www.suse.com/security/cve/CVE-2015-7183.html https://www.suse.com/security/cve/CVE-2015-7185.html https://www.suse.com/security/cve/CVE-2015-7186.html https://www.suse.com/security/cve/CVE-2015-7187.html https://www.suse.com/security/cve/CVE-2015-7188.html https://www.suse.com/security/cve/CVE-2015-7189.html https://www.suse.com/security/cve/CVE-2015-7190.html https://www.suse.com/security/cve/CVE-2015-7191.html https://www.suse.com/security/cve/CVE-2015-7192.html https://www.suse.com/security/cve/CVE-2015-7193.html https://www.suse.com/security/cve/CVE-2015-7194.html https://www.suse.com/security/cve/CVE-2015-7195.html https://www.suse.com/security/cve/CVE-2015-7196.html https://www.suse.com/security/cve/CVE-2015-7197.html https://www.suse.com/security/cve/CVE-2015-7198.html https://www.suse.com/security/cve/CVE-2015-7199.html https://www.suse.com/security/cve/CVE-2015-7200.html https://bugzilla.suse.com/952810

1 0

openSUSE-RU-2015:1940-1: Recommended update for gtk3
by maintenance＠opensuse.org 09 Nov '15

09 Nov '15

openSUSE Recommended Update: Recommended update for gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1940-1 Rating: low References: #952356 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gtk3 fixes the following issue: - Do not crash if dragging something over the places sidebar, that has no valid URI (mostly coming from a host system into a guest system) (boo#952356, bgo#757298). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-716=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gtk3-debugsource-3.16.7-5.1 gtk3-devel-3.16.7-5.1 gtk3-devel-debuginfo-3.16.7-5.1 gtk3-immodule-amharic-3.16.7-5.1 gtk3-immodule-amharic-debuginfo-3.16.7-5.1 gtk3-immodule-broadway-3.16.7-5.1 gtk3-immodule-broadway-debuginfo-3.16.7-5.1 gtk3-immodule-inuktitut-3.16.7-5.1 gtk3-immodule-inuktitut-debuginfo-3.16.7-5.1 gtk3-immodule-multipress-3.16.7-5.1 gtk3-immodule-multipress-debuginfo-3.16.7-5.1 gtk3-immodule-thai-3.16.7-5.1 gtk3-immodule-thai-debuginfo-3.16.7-5.1 gtk3-immodule-vietnamese-3.16.7-5.1 gtk3-immodule-vietnamese-debuginfo-3.16.7-5.1 gtk3-immodule-xim-3.16.7-5.1 gtk3-immodule-xim-debuginfo-3.16.7-5.1 gtk3-immodules-tigrigna-3.16.7-5.1 gtk3-immodules-tigrigna-debuginfo-3.16.7-5.1 gtk3-tools-3.16.7-5.1 gtk3-tools-debuginfo-3.16.7-5.1 libgtk-3-0-3.16.7-5.1 libgtk-3-0-debuginfo-3.16.7-5.1 typelib-1_0-Gtk-3_0-3.16.7-5.1 - openSUSE Leap 42.1 (x86_64): gtk3-devel-32bit-3.16.7-5.1 gtk3-devel-debuginfo-32bit-3.16.7-5.1 gtk3-immodule-amharic-32bit-3.16.7-5.1 gtk3-immodule-amharic-debuginfo-32bit-3.16.7-5.1 gtk3-immodule-inuktitut-32bit-3.16.7-5.1 gtk3-immodule-inuktitut-debuginfo-32bit-3.16.7-5.1 gtk3-immodule-multipress-32bit-3.16.7-5.1 gtk3-immodule-multipress-debuginfo-32bit-3.16.7-5.1 gtk3-immodule-thai-32bit-3.16.7-5.1 gtk3-immodule-thai-debuginfo-32bit-3.16.7-5.1 gtk3-immodule-vietnamese-32bit-3.16.7-5.1 gtk3-immodule-vietnamese-debuginfo-32bit-3.16.7-5.1 gtk3-immodule-xim-32bit-3.16.7-5.1 gtk3-immodule-xim-debuginfo-32bit-3.16.7-5.1 gtk3-immodules-tigrigna-32bit-3.16.7-5.1 gtk3-immodules-tigrigna-debuginfo-32bit-3.16.7-5.1 gtk3-tools-32bit-3.16.7-5.1 gtk3-tools-debuginfo-32bit-3.16.7-5.1 libgtk-3-0-32bit-3.16.7-5.1 libgtk-3-0-debuginfo-32bit-3.16.7-5.1 - openSUSE Leap 42.1 (noarch): gtk3-branding-upstream-3.16.7-5.1 gtk3-data-3.16.7-5.1 gtk3-lang-3.16.7-5.1 References: https://bugzilla.suse.com/952356

1 0

openSUSE-RU-2015:1939-1: moderate: Recommended update for gnome-keyring
by maintenance＠opensuse.org 09 Nov '15

09 Nov '15

openSUSE Recommended Update: Recommended update for gnome-keyring ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1939-1 Rating: moderate References: #953100 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for gnome-keyring fixes the following issue: - Re-enable gpgagent integration on openSUSE Leap 42.1 which still uses gnupg 2.0. Fixes (boo#953100). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-714=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gnome-keyring-3.16.0-7.1 gnome-keyring-debuginfo-3.16.0-7.1 gnome-keyring-debugsource-3.16.0-7.1 gnome-keyring-pam-3.16.0-7.1 gnome-keyring-pam-debuginfo-3.16.0-7.1 libgck-modules-gnome-keyring-3.16.0-7.1 libgck-modules-gnome-keyring-debuginfo-3.16.0-7.1 - openSUSE Leap 42.1 (x86_64): gnome-keyring-32bit-3.16.0-7.1 gnome-keyring-debuginfo-32bit-3.16.0-7.1 gnome-keyring-pam-32bit-3.16.0-7.1 gnome-keyring-pam-debuginfo-32bit-3.16.0-7.1 - openSUSE Leap 42.1 (noarch): gnome-keyring-lang-3.16.0-7.1 References: https://bugzilla.suse.com/953100

1 0

openSUSE-RU-2015:1938-1: moderate: Recommended update for gnome-software
by maintenance＠opensuse.org 09 Nov '15

09 Nov '15

openSUSE Recommended Update: Recommended update for gnome-software ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1938-1 Rating: moderate References: #906598 #906687 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for gnome-software fixes the following issues: - Add gnome-software-xterm-is-not-removable.patch: XTerm is a system dependency and must not be removable (boo#906598, boo#906687). As Leap is based on SLE, we did not inherit the split of xterm and xterm-bin. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-713=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gnome-software-3.16.6-4.1 gnome-software-debuginfo-3.16.6-4.1 gnome-software-debugsource-3.16.6-4.1 - openSUSE Leap 42.1 (noarch): gnome-software-lang-3.16.6-4.1 References: https://bugzilla.suse.com/906598 https://bugzilla.suse.com/906687

1 0

openSUSE-RU-2015:1937-1: moderate: Recommended update for pithos
by maintenance＠opensuse.org 09 Nov '15

09 Nov '15

openSUSE Recommended Update: Recommended update for pithos ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1937-1 Rating: moderate References: #907701 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 1.0.1 for pithos: - Update to version 1.0.1: + Automatically install missing codecs if supported. + Save window position between sessions. + Fix saving last station on quit. + Fix pacparser support. + Improve pandora module docs. + Add setup.py command to build docs. + Add appdata file. + Notification_icon: Make toggling visibility more reliable. + mpris: Fix exception when querying positon. + mpris: Implement setting volume. - Update fixes Pandora stream and hangs at "loading songs" This occurs randomly, sometimes very frequently (boo#907701). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-715=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): pithos-1.0.1-3.1 References: https://bugzilla.suse.com/907701

1 0

openSUSE-RU-2015:1936-1: moderate: Recommended update for php5
by maintenance＠opensuse.org 09 Nov '15

09 Nov '15

openSUSE Recommended Update: Recommended update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1936-1 Rating: moderate References: #949134 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update reenables the suhosin extension that was disabled by mistake in the previous update. [bnc#949134] Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-717=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): apache2-mod_php5-5.5.14-38.1 apache2-mod_php5-debuginfo-5.5.14-38.1 php5-5.5.14-38.1 php5-bcmath-5.5.14-38.1 php5-bcmath-debuginfo-5.5.14-38.1 php5-bz2-5.5.14-38.1 php5-bz2-debuginfo-5.5.14-38.1 php5-calendar-5.5.14-38.1 php5-calendar-debuginfo-5.5.14-38.1 php5-ctype-5.5.14-38.1 php5-ctype-debuginfo-5.5.14-38.1 php5-curl-5.5.14-38.1 php5-curl-debuginfo-5.5.14-38.1 php5-dba-5.5.14-38.1 php5-dba-debuginfo-5.5.14-38.1 php5-debuginfo-5.5.14-38.1 php5-debugsource-5.5.14-38.1 php5-devel-5.5.14-38.1 php5-dom-5.5.14-38.1 php5-dom-debuginfo-5.5.14-38.1 php5-enchant-5.5.14-38.1 php5-enchant-debuginfo-5.5.14-38.1 php5-exif-5.5.14-38.1 php5-exif-debuginfo-5.5.14-38.1 php5-fastcgi-5.5.14-38.1 php5-fastcgi-debuginfo-5.5.14-38.1 php5-fileinfo-5.5.14-38.1 php5-fileinfo-debuginfo-5.5.14-38.1 php5-firebird-5.5.14-38.1 php5-firebird-debuginfo-5.5.14-38.1 php5-fpm-5.5.14-38.1 php5-fpm-debuginfo-5.5.14-38.1 php5-ftp-5.5.14-38.1 php5-ftp-debuginfo-5.5.14-38.1 php5-gd-5.5.14-38.1 php5-gd-debuginfo-5.5.14-38.1 php5-gettext-5.5.14-38.1 php5-gettext-debuginfo-5.5.14-38.1 php5-gmp-5.5.14-38.1 php5-gmp-debuginfo-5.5.14-38.1 php5-iconv-5.5.14-38.1 php5-iconv-debuginfo-5.5.14-38.1 php5-imap-5.5.14-38.1 php5-imap-debuginfo-5.5.14-38.1 php5-intl-5.5.14-38.1 php5-intl-debuginfo-5.5.14-38.1 php5-json-5.5.14-38.1 php5-json-debuginfo-5.5.14-38.1 php5-ldap-5.5.14-38.1 php5-ldap-debuginfo-5.5.14-38.1 php5-mbstring-5.5.14-38.1 php5-mbstring-debuginfo-5.5.14-38.1 php5-mcrypt-5.5.14-38.1 php5-mcrypt-debuginfo-5.5.14-38.1 php5-mssql-5.5.14-38.1 php5-mssql-debuginfo-5.5.14-38.1 php5-mysql-5.5.14-38.1 php5-mysql-debuginfo-5.5.14-38.1 php5-odbc-5.5.14-38.1 php5-odbc-debuginfo-5.5.14-38.1 php5-opcache-5.5.14-38.1 php5-opcache-debuginfo-5.5.14-38.1 php5-openssl-5.5.14-38.1 php5-openssl-debuginfo-5.5.14-38.1 php5-pcntl-5.5.14-38.1 php5-pcntl-debuginfo-5.5.14-38.1 php5-pdo-5.5.14-38.1 php5-pdo-debuginfo-5.5.14-38.1 php5-pgsql-5.5.14-38.1 php5-pgsql-debuginfo-5.5.14-38.1 php5-phar-5.5.14-38.1 php5-phar-debuginfo-5.5.14-38.1 php5-posix-5.5.14-38.1 php5-posix-debuginfo-5.5.14-38.1 php5-pspell-5.5.14-38.1 php5-pspell-debuginfo-5.5.14-38.1 php5-readline-5.5.14-38.1 php5-readline-debuginfo-5.5.14-38.1 php5-shmop-5.5.14-38.1 php5-shmop-debuginfo-5.5.14-38.1 php5-snmp-5.5.14-38.1 php5-snmp-debuginfo-5.5.14-38.1 php5-soap-5.5.14-38.1 php5-soap-debuginfo-5.5.14-38.1 php5-sockets-5.5.14-38.1 php5-sockets-debuginfo-5.5.14-38.1 php5-sqlite-5.5.14-38.1 php5-sqlite-debuginfo-5.5.14-38.1 php5-suhosin-5.5.14-38.1 php5-suhosin-debuginfo-5.5.14-38.1 php5-sysvmsg-5.5.14-38.1 php5-sysvmsg-debuginfo-5.5.14-38.1 php5-sysvsem-5.5.14-38.1 php5-sysvsem-debuginfo-5.5.14-38.1 php5-sysvshm-5.5.14-38.1 php5-sysvshm-debuginfo-5.5.14-38.1 php5-tidy-5.5.14-38.1 php5-tidy-debuginfo-5.5.14-38.1 php5-tokenizer-5.5.14-38.1 php5-tokenizer-debuginfo-5.5.14-38.1 php5-wddx-5.5.14-38.1 php5-wddx-debuginfo-5.5.14-38.1 php5-xmlreader-5.5.14-38.1 php5-xmlreader-debuginfo-5.5.14-38.1 php5-xmlrpc-5.5.14-38.1 php5-xmlrpc-debuginfo-5.5.14-38.1 php5-xmlwriter-5.5.14-38.1 php5-xmlwriter-debuginfo-5.5.14-38.1 php5-xsl-5.5.14-38.1 php5-xsl-debuginfo-5.5.14-38.1 php5-zip-5.5.14-38.1 php5-zip-debuginfo-5.5.14-38.1 php5-zlib-5.5.14-38.1 php5-zlib-debuginfo-5.5.14-38.1 - openSUSE Leap 42.1 (noarch): php5-pear-5.5.14-38.1 References: https://bugzilla.suse.com/949134

1 0

openSUSE-SU-2015:1930-1: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 06 Nov '15

06 Nov '15

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1930-1 Rating: low References: #951960 Cross-References: CVE-2015-7873 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: phpMyAdmin was updated to fix one security issue. This security issue was fixed: - CVE-2015-7873: The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allowed remote attackers to spoof content via the url parameter (bsc#951960). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-712=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): phpMyAdmin-4.4.15.1-3.1 References: https://www.suse.com/security/cve/CVE-2015-7873.html https://bugzilla.suse.com/951960

1 0

openSUSE-SU-2015:1929-1: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 06 Nov '15

06 Nov '15

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1929-1 Rating: low References: #951960 Cross-References: CVE-2015-7873 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: phpMyAdmin was updated to version 4.4.15.1 to fix one security issue. This security issue was fixed: - CVE-2015-7873: The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allowed remote attackers to spoof content via the url parameter (bsc#951960). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-710=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-710=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): phpMyAdmin-4.4.15.1-17.1 - openSUSE 13.1 (noarch): phpMyAdmin-4.4.15.1-37.1 References: https://www.suse.com/security/cve/CVE-2015-7873.html https://bugzilla.suse.com/951960

1 0

openSUSE-SU-2015:1928-1: important: Security update for krb5
by opensuse-security＠opensuse.org 06 Nov '15

06 Nov '15

openSUSE Security Update: Security update for krb5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1928-1 Rating: important References: #952188 #952189 #952190 Cross-References: CVE-2015-2695 CVE-2015-2696 CVE-2015-2697 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: krb5 was updated to fix three security issues. These security issues were fixed: - CVE-2015-2695: Applications which call gss_inquire_context() on a partially-established SPNEGO context could have caused the GSS-API library to read from a pointer using the wrong type, generally causing a process crash. (bsc#952188). - CVE-2015-2696: Applications which call gss_inquire_context() on a partially-established IAKERB context could have caused the GSS-API library to read from a pointer using the wrong type, generally causing a process crash. (bsc#952189). - CVE-2015-2697: Incorrect string handling in build_principal_va can lead to DOS (bsc#952190). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-709=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-709=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): krb5-1.12.2-15.1 krb5-client-1.12.2-15.1 krb5-client-debuginfo-1.12.2-15.1 krb5-debuginfo-1.12.2-15.1 krb5-debugsource-1.12.2-15.1 krb5-devel-1.12.2-15.1 krb5-doc-1.12.2-15.1 krb5-mini-1.12.2-15.1 krb5-mini-debuginfo-1.12.2-15.1 krb5-mini-debugsource-1.12.2-15.1 krb5-mini-devel-1.12.2-15.1 krb5-plugin-kdb-ldap-1.12.2-15.1 krb5-plugin-kdb-ldap-debuginfo-1.12.2-15.1 krb5-plugin-preauth-otp-1.12.2-15.1 krb5-plugin-preauth-otp-debuginfo-1.12.2-15.1 krb5-plugin-preauth-pkinit-1.12.2-15.1 krb5-plugin-preauth-pkinit-debuginfo-1.12.2-15.1 krb5-server-1.12.2-15.1 krb5-server-debuginfo-1.12.2-15.1 - openSUSE 13.2 (x86_64): krb5-32bit-1.12.2-15.1 krb5-debuginfo-32bit-1.12.2-15.1 krb5-devel-32bit-1.12.2-15.1 - openSUSE 13.1 (i586 x86_64): krb5-1.11.3-3.21.1 krb5-client-1.11.3-3.21.1 krb5-client-debuginfo-1.11.3-3.21.1 krb5-debuginfo-1.11.3-3.21.1 krb5-debugsource-1.11.3-3.21.1 krb5-devel-1.11.3-3.21.1 krb5-doc-1.11.3-3.21.1 krb5-mini-1.11.3-3.21.1 krb5-mini-debuginfo-1.11.3-3.21.1 krb5-mini-debugsource-1.11.3-3.21.1 krb5-mini-devel-1.11.3-3.21.1 krb5-plugin-kdb-ldap-1.11.3-3.21.1 krb5-plugin-kdb-ldap-debuginfo-1.11.3-3.21.1 krb5-plugin-preauth-pkinit-1.11.3-3.21.1 krb5-plugin-preauth-pkinit-debuginfo-1.11.3-3.21.1 krb5-server-1.11.3-3.21.1 krb5-server-debuginfo-1.11.3-3.21.1 - openSUSE 13.1 (x86_64): krb5-32bit-1.11.3-3.21.1 krb5-debuginfo-32bit-1.11.3-3.21.1 krb5-devel-32bit-1.11.3-3.21.1 References: https://www.suse.com/security/cve/CVE-2015-2695.html https://www.suse.com/security/cve/CVE-2015-2696.html https://www.suse.com/security/cve/CVE-2015-2697.html https://bugzilla.suse.com/952188 https://bugzilla.suse.com/952189 https://bugzilla.suse.com/952190

1 0

openSUSE-SU-2015:1927-1: moderate: Security update for polkit
by opensuse-security＠opensuse.org 06 Nov '15

06 Nov '15

openSUSE Security Update: Security update for polkit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1927-1 Rating: moderate References: #912889 #933922 #935119 #939246 #943816 #950114 Cross-References: CVE-2015-3218 CVE-2015-3255 CVE-2015-3256 CVE-2015-4625 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves four vulnerabilities and has two fixes is now available. Description: polkit was updated to the 0.113 release, fixing security issues and bugs. Security issues fixed: * Fixes CVE-2015-4625, a local privilege escalation due to predictable authentication session cookie values. Thanks to Tavis Ormandy, Google Project Zero for reporting this issue. For the future, authentication agents are encouraged to use PolkitAgentSession instead of using the D-Bus agent response API directly. (bsc#935119) * Fixes CVE-2015-3256, various memory corruption vulnerabilities in use of the JavaScript interpreter, possibly leading to local privilege escalation. (bsc#943816) * Fixes CVE-2015-3255, a memory corruption vulnerability in handling duplicate action IDs, possibly leading to local privilege escalation. Thanks to Laurent Bigonville for reporting this issue. (bsc#939246) * Fixes CVE-2015-3218, which allowed any local user to crash polkitd. Thanks to Tavis Ormandy, Google Project Zero, for reporting this issue. (bsc#933922) Other issues fixed: * On systemd-213 and later, the "active" state is shared across all sessions of an user, instead of being tracked separately. * pkexec, when not given a program to execute, runs the users shell by default. * Fixed shutdown problems on powerpc64le (bsc#950114) * polkit had a memory leak (bsc#912889) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-711=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libpolkit0-0.113-6.1 libpolkit0-debuginfo-0.113-6.1 polkit-0.113-6.1 polkit-debuginfo-0.113-6.1 polkit-debugsource-0.113-6.1 polkit-devel-0.113-6.1 polkit-devel-debuginfo-0.113-6.1 typelib-1_0-Polkit-1_0-0.113-6.1 - openSUSE Leap 42.1 (x86_64): libpolkit0-32bit-0.113-6.1 libpolkit0-debuginfo-32bit-0.113-6.1 - openSUSE Leap 42.1 (noarch): polkit-doc-0.113-6.1 References: https://www.suse.com/security/cve/CVE-2015-3218.html https://www.suse.com/security/cve/CVE-2015-3255.html https://www.suse.com/security/cve/CVE-2015-3256.html https://www.suse.com/security/cve/CVE-2015-4625.html https://bugzilla.suse.com/912889 https://bugzilla.suse.com/933922 https://bugzilla.suse.com/935119 https://bugzilla.suse.com/939246 https://bugzilla.suse.com/943816 https://bugzilla.suse.com/950114

1 0

openSUSE-SU-2015:1920-1: moderate: Security update for wpa_supplicant
by opensuse-security＠opensuse.org 05 Nov '15

05 Nov '15

openSUSE Security Update: Security update for wpa_supplicant ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1920-1 Rating: moderate References: #937419 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: wpa_supplicant was updated to fix one security issue. This security issue was fixed: - bsc#937419: Incomplete WPS and P2P NFC NDEF record payload length validation. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-707=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): wpa_supplicant-2.0-3.17.1 wpa_supplicant-debuginfo-2.0-3.17.1 wpa_supplicant-debugsource-2.0-3.17.1 wpa_supplicant-gui-2.0-3.17.1 wpa_supplicant-gui-debuginfo-2.0-3.17.1 References: https://bugzilla.suse.com/937419

1 0

openSUSE-SU-2015:1919-1: moderate: Security update for postgresql92
by opensuse-security＠opensuse.org 05 Nov '15

05 Nov '15

openSUSE Security Update: Security update for postgresql92 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1919-1 Rating: moderate References: #949669 Cross-References: CVE-2015-5288 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: postgresql92 was updated to version 9.2.14 to fix one security issue. This security issue was fixed: - CVE-2015-5288: The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x before 9.4.5 allowed attackers to cause a denial of service (server crash) or read arbitrary server memory via a "too-short" salt (bsc#949669). For the full release notes see: http://www.postgresql.org/docs/current/static/release-9-2-14.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-708=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libecpg6-9.2.14-4.7.1 libecpg6-debuginfo-9.2.14-4.7.1 libpq5-9.2.14-4.7.1 libpq5-debuginfo-9.2.14-4.7.1 postgresql92-9.2.14-4.7.2 postgresql92-contrib-9.2.14-4.7.2 postgresql92-contrib-debuginfo-9.2.14-4.7.2 postgresql92-debuginfo-9.2.14-4.7.2 postgresql92-debugsource-9.2.14-4.7.2 postgresql92-devel-9.2.14-4.7.1 postgresql92-devel-debuginfo-9.2.14-4.7.1 postgresql92-libs-debugsource-9.2.14-4.7.1 postgresql92-plperl-9.2.14-4.7.2 postgresql92-plperl-debuginfo-9.2.14-4.7.2 postgresql92-plpython-9.2.14-4.7.2 postgresql92-plpython-debuginfo-9.2.14-4.7.2 postgresql92-pltcl-9.2.14-4.7.2 postgresql92-pltcl-debuginfo-9.2.14-4.7.2 postgresql92-server-9.2.14-4.7.2 postgresql92-server-debuginfo-9.2.14-4.7.2 - openSUSE 13.1 (x86_64): libecpg6-32bit-9.2.14-4.7.1 libecpg6-debuginfo-32bit-9.2.14-4.7.1 libpq5-32bit-9.2.14-4.7.1 libpq5-debuginfo-32bit-9.2.14-4.7.1 - openSUSE 13.1 (noarch): postgresql92-docs-9.2.14-4.7.2 References: https://www.suse.com/security/cve/CVE-2015-5288.html https://bugzilla.suse.com/949669

1 0

openSUSE-RU-2015:1917-1: moderate: Recommended update for clamav-database
by maintenance＠opensuse.org 05 Nov '15

05 Nov '15

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1917-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: clamav database refresh for november 3rd. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-706=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201511031116-3.1 References:

1 0

openSUSE-SU-2015:1913-1: moderate: Security update for sudo
by opensuse-security＠opensuse.org 04 Nov '15

04 Nov '15

openSUSE Security Update: Security update for sudo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1913-1 Rating: moderate References: #917806 Cross-References: CVE-2014-9680 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: sudo was updated to fix one security issue. This security issue was fixed: - CVE-2014-9680: Unsafe handling of TZ environment variable (bsc#917806). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-703=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-703=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): sudo-1.8.10p3-2.7.1 sudo-debuginfo-1.8.10p3-2.7.1 sudo-debugsource-1.8.10p3-2.7.1 sudo-devel-1.8.10p3-2.7.1 sudo-test-1.8.10p3-2.7.1 - openSUSE 13.1 (i586 x86_64): sudo-1.8.10p3-5.16.1 sudo-debuginfo-1.8.10p3-5.16.1 sudo-debugsource-1.8.10p3-5.16.1 sudo-devel-1.8.10p3-5.16.1 References: https://www.suse.com/security/cve/CVE-2014-9680.html https://bugzilla.suse.com/917806

1 0

openSUSE-SU-2015:1912-1: moderate: Security update for wpa_supplicant
by opensuse-security＠opensuse.org 04 Nov '15

04 Nov '15

openSUSE Security Update: Security update for wpa_supplicant ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1912-1 Rating: moderate References: #937419 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: wpa_supplicant was updated to fix one security issue. This security issue was fixed: - bsc#937419: Incomplete WPS and P2P NFC NDEF record payload length validation. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-700=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): wpa_supplicant-2.2-5.10.1 wpa_supplicant-debuginfo-2.2-5.10.1 wpa_supplicant-debugsource-2.2-5.10.1 wpa_supplicant-gui-2.2-5.10.1 wpa_supplicant-gui-debuginfo-2.2-5.10.1 References: https://bugzilla.suse.com/937419

1 0

openSUSE-SU-2015:1911-1: important: Security update for bouncycastle
by opensuse-security＠opensuse.org 04 Nov '15

04 Nov '15

openSUSE Security Update: Security update for bouncycastle ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1911-1 Rating: important References: #951727 Cross-References: CVE-2015-7940 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: bouncycastle was updated to version 1.53 to fix one security issue. This security issue was fixed: - CVE-2015-7940: Invalid curve attack (bsc#951727). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-705=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-705=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-705=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): bouncycastle-1.53-16.1 bouncycastle-javadoc-1.53-16.1 - openSUSE 13.2 (noarch): bouncycastle-1.53-13.3.1 bouncycastle-javadoc-1.53-13.3.1 - openSUSE 13.1 (noarch): bouncycastle-1.53-8.3.1 bouncycastle-javadoc-1.53-8.3.1 References: https://www.suse.com/security/cve/CVE-2015-7940.html https://bugzilla.suse.com/951727

1 0

openSUSE-SU-2015:1910-1: moderate: Security update for util-linux
by opensuse-security＠opensuse.org 04 Nov '15

04 Nov '15

openSUSE Security Update: Security update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1910-1 Rating: moderate References: #903440 #949754 Cross-References: CVE-2015-5218 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: util-linux was updated to fix one security issue. This security issue was fixed: - CVE-2015-5218: Prevent colcrt buffer overflow (bsc#949754). This non-security issue was fixed: - bsc#903440: Calendar "cal" crash with segmentation fault when execute in background. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-702=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-702=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-702=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libblkid-devel-2.25-9.4 libblkid1-2.25-9.4 libblkid1-debuginfo-2.25-9.4 libmount-devel-2.25-9.4 libmount1-2.25-9.4 libmount1-debuginfo-2.25-9.4 libsmartcols-devel-2.25-9.4 libsmartcols1-2.25-9.4 libsmartcols1-debuginfo-2.25-9.4 libuuid-devel-2.25-9.4 libuuid1-2.25-9.4 libuuid1-debuginfo-2.25-9.4 python-libmount-2.25-9.5 python-libmount-debuginfo-2.25-9.5 python-libmount-debugsource-2.25-9.5 util-linux-2.25-9.4 util-linux-debuginfo-2.25-9.4 util-linux-debugsource-2.25-9.4 util-linux-systemd-2.25-9.1 util-linux-systemd-debuginfo-2.25-9.1 util-linux-systemd-debugsource-2.25-9.1 uuidd-2.25-9.1 uuidd-debuginfo-2.25-9.1 - openSUSE Leap 42.1 (x86_64): libblkid-devel-32bit-2.25-9.4 libblkid1-32bit-2.25-9.4 libblkid1-debuginfo-32bit-2.25-9.4 libmount-devel-32bit-2.25-9.4 libmount1-32bit-2.25-9.4 libmount1-debuginfo-32bit-2.25-9.4 libuuid-devel-32bit-2.25-9.4 libuuid1-32bit-2.25-9.4 libuuid1-debuginfo-32bit-2.25-9.4 - openSUSE Leap 42.1 (noarch): util-linux-lang-2.25-9.4 - openSUSE 13.2 (i586 x86_64): libblkid-devel-2.25.1-20.1 libblkid-devel-static-2.25.1-20.1 libblkid1-2.25.1-20.1 libblkid1-debuginfo-2.25.1-20.1 libmount-devel-2.25.1-20.1 libmount-devel-static-2.25.1-20.1 libmount1-2.25.1-20.1 libmount1-debuginfo-2.25.1-20.1 libsmartcols-devel-2.25.1-20.1 libsmartcols-devel-static-2.25.1-20.1 libsmartcols1-2.25.1-20.1 libsmartcols1-debuginfo-2.25.1-20.1 libuuid-devel-2.25.1-20.1 libuuid-devel-static-2.25.1-20.1 libuuid1-2.25.1-20.1 libuuid1-debuginfo-2.25.1-20.1 python-libmount-2.25.1-20.2 python-libmount-debuginfo-2.25.1-20.2 python-libmount-debugsource-2.25.1-20.2 util-linux-2.25.1-20.1 util-linux-debuginfo-2.25.1-20.1 util-linux-debugsource-2.25.1-20.1 util-linux-systemd-2.25.1-20.1 util-linux-systemd-debuginfo-2.25.1-20.1 util-linux-systemd-debugsource-2.25.1-20.1 uuidd-2.25.1-20.1 uuidd-debuginfo-2.25.1-20.1 - openSUSE 13.2 (x86_64): libblkid-devel-32bit-2.25.1-20.1 libblkid1-32bit-2.25.1-20.1 libblkid1-debuginfo-32bit-2.25.1-20.1 libmount-devel-32bit-2.25.1-20.1 libmount1-32bit-2.25.1-20.1 libmount1-debuginfo-32bit-2.25.1-20.1 libuuid-devel-32bit-2.25.1-20.1 libuuid1-32bit-2.25.1-20.1 libuuid1-debuginfo-32bit-2.25.1-20.1 - openSUSE 13.2 (noarch): util-linux-lang-2.25.1-20.1 - openSUSE 13.1 (i586 x86_64): libblkid-devel-2.23.2-34.1 libblkid1-2.23.2-34.1 libblkid1-debuginfo-2.23.2-34.1 libmount-devel-2.23.2-34.1 libmount1-2.23.2-34.1 libmount1-debuginfo-2.23.2-34.1 libuuid-devel-2.23.2-34.1 libuuid1-2.23.2-34.1 libuuid1-debuginfo-2.23.2-34.1 util-linux-2.23.2-34.1 util-linux-debuginfo-2.23.2-34.1 util-linux-debugsource-2.23.2-34.1 uuidd-2.23.2-34.1 uuidd-debuginfo-2.23.2-34.1 - openSUSE 13.1 (x86_64): libblkid-devel-32bit-2.23.2-34.1 libblkid1-32bit-2.23.2-34.1 libblkid1-debuginfo-32bit-2.23.2-34.1 libmount-devel-32bit-2.23.2-34.1 libmount1-32bit-2.23.2-34.1 libmount1-debuginfo-32bit-2.23.2-34.1 libuuid-devel-32bit-2.23.2-34.1 libuuid1-32bit-2.23.2-34.1 libuuid1-debuginfo-32bit-2.23.2-34.1 - openSUSE 13.1 (noarch): util-linux-lang-2.23.2-34.1 References: https://www.suse.com/security/cve/CVE-2015-5218.html https://bugzilla.suse.com/903440 https://bugzilla.suse.com/949754

1 0

openSUSE-SU-2015:1909-1: moderate: Security update for potrace
by opensuse-security＠opensuse.org 04 Nov '15

04 Nov '15

openSUSE Security Update: Security update for potrace ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1909-1 Rating: moderate References: #924904 Cross-References: CVE-2013-7437 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: potrace was updated to fix one security issue. This security issue was fixed: - CVE-2013-7437: Multiple integer overflows in potrace 1.11 allowed remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, which triggers a buffer overflow (bsc#924904). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-704=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-704=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-704=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libpotrace0-1.13-5.1 libpotrace0-debuginfo-1.13-5.1 potrace-1.13-5.1 potrace-debuginfo-1.13-5.1 potrace-debugsource-1.13-5.1 potrace-devel-1.13-5.1 - openSUSE 13.2 (i586 x86_64): libpotrace0-1.13-4.7.1 libpotrace0-debuginfo-1.13-4.7.1 potrace-1.13-4.7.1 potrace-debuginfo-1.13-4.7.1 potrace-debugsource-1.13-4.7.1 potrace-devel-1.13-4.7.1 - openSUSE 13.1 (i586 x86_64): libpotrace0-1.13-2.7.1 libpotrace0-debuginfo-1.13-2.7.1 potrace-1.13-2.7.1 potrace-debuginfo-1.13-2.7.1 potrace-debugsource-1.13-2.7.1 potrace-devel-1.13-2.7.1 References: https://www.suse.com/security/cve/CVE-2013-7437.html https://bugzilla.suse.com/924904

1 0

openSUSE-SU-2015:1907-1: moderate: Security update for postgresql93
by opensuse-security＠opensuse.org 04 Nov '15

04 Nov '15

openSUSE Security Update: Security update for postgresql93 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1907-1 Rating: moderate References: #949669 #949670 Cross-References: CVE-2015-5288 CVE-2015-5289 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: postgresql93 was updated to version 9.3.10 to fix two security issues. These security issues were fixed: - CVE-2015-5288: Unchecked JSON input can crash the server (bsc#949669). - CVE-2015-5289: Memory leak in crypt() function (bsc#949670). For the full release notes, please see: http://www.postgresql.org/docs/current/static/release-9-3-10.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-701=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libecpg6-9.3.10-2.7.1 libecpg6-debuginfo-9.3.10-2.7.1 libpq5-9.3.10-2.7.1 libpq5-debuginfo-9.3.10-2.7.1 postgresql93-9.3.10-2.7.1 postgresql93-contrib-9.3.10-2.7.1 postgresql93-contrib-debuginfo-9.3.10-2.7.1 postgresql93-debuginfo-9.3.10-2.7.1 postgresql93-debugsource-9.3.10-2.7.1 postgresql93-devel-9.3.10-2.7.1 postgresql93-devel-debuginfo-9.3.10-2.7.1 postgresql93-libs-debugsource-9.3.10-2.7.1 postgresql93-plperl-9.3.10-2.7.1 postgresql93-plperl-debuginfo-9.3.10-2.7.1 postgresql93-plpython-9.3.10-2.7.1 postgresql93-plpython-debuginfo-9.3.10-2.7.1 postgresql93-pltcl-9.3.10-2.7.1 postgresql93-pltcl-debuginfo-9.3.10-2.7.1 postgresql93-server-9.3.10-2.7.1 postgresql93-server-debuginfo-9.3.10-2.7.1 postgresql93-test-9.3.10-2.7.1 - openSUSE 13.2 (x86_64): libecpg6-32bit-9.3.10-2.7.1 libecpg6-debuginfo-32bit-9.3.10-2.7.1 libpq5-32bit-9.3.10-2.7.1 libpq5-debuginfo-32bit-9.3.10-2.7.1 - openSUSE 13.2 (noarch): postgresql93-docs-9.3.10-2.7.1 References: https://www.suse.com/security/cve/CVE-2015-5288.html https://www.suse.com/security/cve/CVE-2015-5289.html https://bugzilla.suse.com/949669 https://bugzilla.suse.com/949670

1 0

openSUSE-SU-2015:1906-1: important: Security update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 04 Nov '15

04 Nov '15

openSUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1906-1 Rating: important References: #951376 Cross-References: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4872 CVE-2015-4881 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4903 CVE-2015-4911 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. Description: java-1_7_0-openjdk was updated to fix 17 security issues. These security issues were fixed: - CVE-2015-4843: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries (bsc#951376). - CVE-2015-4842: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality via vectors related to JAXP (bsc#951376). - CVE-2015-4840: Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality via unknown vectors related to 2D (bsc#951376). - CVE-2015-4872: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allowed remote attackers to affect integrity via unknown vectors related to Security (bsc#951376). - CVE-2015-4860: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883 (bsc#951376). - CVE-2015-4844: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D (bsc#951376). - CVE-2015-4883: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4860 (bsc#951376). - CVE-2015-4893: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allowed remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911 (bsc#951376). - CVE-2015-4911: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allowed remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4893 (bsc#951376). - CVE-2015-4882: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect availability via vectors related to CORBA (bsc#951376). - CVE-2015-4881: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4835 (bsc#951376). - CVE-2015-4734: Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality via vectors related to JGSS (bsc#951376). - CVE-2015-4806: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries (bsc#951376). - CVE-2015-4805: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serialization (bsc#951376). - CVE-2015-4803: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allowed remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4893 and CVE-2015-4911 (bsc#951376). - CVE-2015-4835: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4881 (bsc#951376). - CVE-2015-4903: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality via vectors related to RMI (bsc#951376). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-697=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): java-1_7_0-openjdk-1.7.0.91-24.24.1 java-1_7_0-openjdk-accessibility-1.7.0.91-24.24.1 java-1_7_0-openjdk-debuginfo-1.7.0.91-24.24.1 java-1_7_0-openjdk-debugsource-1.7.0.91-24.24.1 java-1_7_0-openjdk-demo-1.7.0.91-24.24.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.91-24.24.1 java-1_7_0-openjdk-devel-1.7.0.91-24.24.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.91-24.24.1 java-1_7_0-openjdk-headless-1.7.0.91-24.24.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.91-24.24.1 java-1_7_0-openjdk-src-1.7.0.91-24.24.1 - openSUSE 13.1 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.91-24.24.1 References: https://www.suse.com/security/cve/CVE-2015-4734.html https://www.suse.com/security/cve/CVE-2015-4803.html https://www.suse.com/security/cve/CVE-2015-4805.html https://www.suse.com/security/cve/CVE-2015-4806.html https://www.suse.com/security/cve/CVE-2015-4835.html https://www.suse.com/security/cve/CVE-2015-4840.html https://www.suse.com/security/cve/CVE-2015-4842.html https://www.suse.com/security/cve/CVE-2015-4843.html https://www.suse.com/security/cve/CVE-2015-4844.html https://www.suse.com/security/cve/CVE-2015-4860.html https://www.suse.com/security/cve/CVE-2015-4872.html https://www.suse.com/security/cve/CVE-2015-4881.html https://www.suse.com/security/cve/CVE-2015-4882.html https://www.suse.com/security/cve/CVE-2015-4883.html https://www.suse.com/security/cve/CVE-2015-4893.html https://www.suse.com/security/cve/CVE-2015-4903.html https://www.suse.com/security/cve/CVE-2015-4911.html https://bugzilla.suse.com/951376

1 0

openSUSE-SU-2015:1905-1: important: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 04 Nov '15

04 Nov '15

openSUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1905-1 Rating: important References: #951376 Cross-References: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4868 CVE-2015-4872 CVE-2015-4881 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4901 CVE-2015-4902 CVE-2015-4903 CVE-2015-4906 CVE-2015-4908 CVE-2015-4911 CVE-2015-4916 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 24 vulnerabilities is now available. Description: java-1_8_0-openjdk was updated to fix 24 security issues. These security issues were fixed: - CVE-2015-4734: A remote user can exploit a flaw in the Embedded JGSS component to partially access data - CVE-2015-4803: A remote user can exploit a flaw in the JRockit JAXP component to cause partial denial of service conditions - CVE-2015-4805: A remote user can exploit a flaw in the Embedded Serialization component to gain elevated privileges - CVE-2015-4806: A remote user can exploit a flaw in the Java SE Embedded Libraries component to partially access and partially modify data - CVE-2015-4835: A remote user can exploit a flaw in the Embedded CORBA component to gain elevated privileges - CVE-2015-4842: A remote user can exploit a flaw in the Embedded JAXP component to partially access data - CVE-2015-4843: A remote user can exploit a flaw in the Java SE Embedded Libraries component to gain elevated privileges - CVE-2015-4844: A remote user can exploit a flaw in the Embedded 2D component to gain elevated privileges - CVE-2015-4860: A remote user can exploit a flaw in the Embedded RMI component to gain elevated privileges - CVE-2015-4872: A remote user can exploit a flaw in the JRockit Security component to partially modify data []. - CVE-2015-4881: A remote user can exploit a flaw in the Embedded CORBA component to gain elevated privileges - CVE-2015-4882: A remote user can exploit a flaw in the Embedded CORBA component to cause partial denial of service conditions - CVE-2015-4883: A remote user can exploit a flaw in the Embedded RMI component to gain elevated privileges - CVE-2015-4893: A remote user can exploit a flaw in the JRockit JAXP component to cause partial denial of service conditions - CVE-2015-4902: A remote user can exploit a flaw in the Java SE Deployment component to partially modify data - CVE-2015-4903: A remote user can exploit a flaw in the Embedded RMI component to partially access data - CVE-2015-4911: A remote user can exploit a flaw in the JRockit JAXP component to cause partial denial of service conditions - CVE-2015-4810: A local user can exploit a flaw in the Java SE Deployment component to gain elevated privileges - CVE-2015-4840: A remote user can exploit a flaw in the Embedded 2D component to partially access data - CVE-2015-4868: A remote user can exploit a flaw in the Java SE Embedded Libraries component to gain elevated privileges - CVE-2015-4901: A remote user can exploit a flaw in the JavaFX component to gain elevated privileges - CVE-2015-4906: A remote user can exploit a flaw in the JavaFX component to partially access data - CVE-2015-4908: A remote user can exploit a flaw in the JavaFX component to partially access data - CVE-2015-4916: A remote user can exploit a flaw in the JavaFX component to partially access data Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-696=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): java-1_8_0-openjdk-1.8.0.65-18.1 java-1_8_0-openjdk-accessibility-1.8.0.65-18.1 java-1_8_0-openjdk-debuginfo-1.8.0.65-18.1 java-1_8_0-openjdk-debugsource-1.8.0.65-18.1 java-1_8_0-openjdk-demo-1.8.0.65-18.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.65-18.1 java-1_8_0-openjdk-devel-1.8.0.65-18.1 java-1_8_0-openjdk-headless-1.8.0.65-18.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.65-18.1 java-1_8_0-openjdk-src-1.8.0.65-18.1 - openSUSE 13.2 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.65-18.1 References: https://www.suse.com/security/cve/CVE-2015-4734.html https://www.suse.com/security/cve/CVE-2015-4803.html https://www.suse.com/security/cve/CVE-2015-4805.html https://www.suse.com/security/cve/CVE-2015-4806.html https://www.suse.com/security/cve/CVE-2015-4810.html https://www.suse.com/security/cve/CVE-2015-4835.html https://www.suse.com/security/cve/CVE-2015-4840.html https://www.suse.com/security/cve/CVE-2015-4842.html https://www.suse.com/security/cve/CVE-2015-4843.html https://www.suse.com/security/cve/CVE-2015-4844.html https://www.suse.com/security/cve/CVE-2015-4860.html https://www.suse.com/security/cve/CVE-2015-4868.html https://www.suse.com/security/cve/CVE-2015-4872.html https://www.suse.com/security/cve/CVE-2015-4881.html https://www.suse.com/security/cve/CVE-2015-4882.html https://www.suse.com/security/cve/CVE-2015-4883.html https://www.suse.com/security/cve/CVE-2015-4893.html https://www.suse.com/security/cve/CVE-2015-4901.html https://www.suse.com/security/cve/CVE-2015-4902.html https://www.suse.com/security/cve/CVE-2015-4903.html https://www.suse.com/security/cve/CVE-2015-4906.html https://www.suse.com/security/cve/CVE-2015-4908.html https://www.suse.com/security/cve/CVE-2015-4911.html https://www.suse.com/security/cve/CVE-2015-4916.html https://bugzilla.suse.com/951376

1 0

openSUSE-SU-2015:1904-1: moderate: Security update for roundcubemail
by opensuse-security＠opensuse.org 04 Nov '15

04 Nov '15

openSUSE Security Update: Security update for roundcubemail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1904-1 Rating: moderate References: #938840 #952006 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: roundcubemail was updated to version 1.0.7 to fix two security issues. These security issues were fixed: - XSS issue in drag-n-drop file uploads - Disallow unwanted access on files in the file system. The apache2 configuration file for roundcubemail allowed access to the roundcubemail/bin folder and possibly /logs, /config and /temp, if these were not symlinks (this was only the case when the configuration was manually changed) (bsc#952006) The package comes with a fixed configuration. If you modified the file "/etc/apache2/conf.d/roundcubemail.conf", please replace it with the configuration "roundcubemail.conf.rpmnew" and reapply your changes. After that, a restart of apache2 is requried. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-699=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-699=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): roundcubemail-1.0.7-14.1 - openSUSE 13.1 (noarch): roundcubemail-1.0.7-2.24.1 References: https://bugzilla.suse.com/938840 https://bugzilla.suse.com/952006

1 0

openSUSE-SU-2015:1903-1: Security update for audiofile
by opensuse-security＠opensuse.org 04 Nov '15

04 Nov '15

openSUSE Security Update: Security update for audiofile ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1903-1 Rating: low References: #949399 Cross-References: CVE-2015-7747 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: audiofile was updated to fix one security issue. This security issue was fixed: - CVE-2015-7747: Overflow when changing both number of channels and sample format (bsc#949399). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-698=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-698=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-698=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): audiofile-0.3.6-9.1 audiofile-debuginfo-0.3.6-9.1 audiofile-debugsource-0.3.6-9.1 audiofile-devel-0.3.6-9.1 audiofile-doc-0.3.6-9.1 libaudiofile1-0.3.6-9.1 libaudiofile1-debuginfo-0.3.6-9.1 - openSUSE Leap 42.1 (x86_64): audiofile-devel-32bit-0.3.6-9.1 libaudiofile1-32bit-0.3.6-9.1 libaudiofile1-debuginfo-32bit-0.3.6-9.1 - openSUSE 13.2 (i586 x86_64): audiofile-0.3.6-6.3.1 audiofile-debuginfo-0.3.6-6.3.1 audiofile-debugsource-0.3.6-6.3.1 audiofile-devel-0.3.6-6.3.1 audiofile-doc-0.3.6-6.3.1 libaudiofile1-0.3.6-6.3.1 libaudiofile1-debuginfo-0.3.6-6.3.1 - openSUSE 13.2 (x86_64): audiofile-devel-32bit-0.3.6-6.3.1 libaudiofile1-32bit-0.3.6-6.3.1 libaudiofile1-debuginfo-32bit-0.3.6-6.3.1 - openSUSE 13.1 (i586 x86_64): audiofile-0.3.6-2.3.1 audiofile-debuginfo-0.3.6-2.3.1 audiofile-debugsource-0.3.6-2.3.1 audiofile-devel-0.3.6-2.3.1 audiofile-doc-0.3.6-2.3.1 libaudiofile1-0.3.6-2.3.1 libaudiofile1-debuginfo-0.3.6-2.3.1 - openSUSE 13.1 (x86_64): audiofile-devel-32bit-0.3.6-2.3.1 libaudiofile1-32bit-0.3.6-2.3.1 libaudiofile1-debuginfo-32bit-0.3.6-2.3.1 References: https://www.suse.com/security/cve/CVE-2015-7747.html https://bugzilla.suse.com/949399

1 0

openSUSE-SU-2015:1902-1: important: Security update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 04 Nov '15

04 Nov '15

openSUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1902-1 Rating: important References: #951376 Cross-References: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4872 CVE-2015-4881 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4903 CVE-2015-4911 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. Description: java-1_7_0-openjdk was updated to fix 17 security issues. These security issues were fixed: - CVE-2015-4843: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries (bsc#951376). - CVE-2015-4842: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality via vectors related to JAXP (bsc#951376). - CVE-2015-4840: Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality via unknown vectors related to 2D (bsc#951376). - CVE-2015-4872: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allowed remote attackers to affect integrity via unknown vectors related to Security (bsc#951376). - CVE-2015-4860: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883 (bsc#951376). - CVE-2015-4844: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D (bsc#951376). - CVE-2015-4883: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4860 (bsc#951376). - CVE-2015-4893: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allowed remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911 (bsc#951376). - CVE-2015-4911: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allowed remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4893 (bsc#951376). - CVE-2015-4882: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect availability via vectors related to CORBA (bsc#951376). - CVE-2015-4881: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4835 (bsc#951376). - CVE-2015-4734: Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality via vectors related to JGSS (bsc#951376). - CVE-2015-4806: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries (bsc#951376). - CVE-2015-4805: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serialization (bsc#951376). - CVE-2015-4803: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allowed remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4893 and CVE-2015-4911 (bsc#951376). - CVE-2015-4835: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4881 (bsc#951376). - CVE-2015-4903: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality via vectors related to RMI (bsc#951376). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-695=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): java-1_7_0-openjdk-1.7.0.91-13.1 java-1_7_0-openjdk-accessibility-1.7.0.91-13.1 java-1_7_0-openjdk-bootstrap-1.7.0.91-13.1 java-1_7_0-openjdk-bootstrap-debuginfo-1.7.0.91-13.1 java-1_7_0-openjdk-bootstrap-debugsource-1.7.0.91-13.1 java-1_7_0-openjdk-bootstrap-devel-1.7.0.91-13.1 java-1_7_0-openjdk-bootstrap-devel-debuginfo-1.7.0.91-13.1 java-1_7_0-openjdk-bootstrap-headless-1.7.0.91-13.1 java-1_7_0-openjdk-bootstrap-headless-debuginfo-1.7.0.91-13.1 java-1_7_0-openjdk-debuginfo-1.7.0.91-13.1 java-1_7_0-openjdk-debugsource-1.7.0.91-13.1 java-1_7_0-openjdk-demo-1.7.0.91-13.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.91-13.1 java-1_7_0-openjdk-devel-1.7.0.91-13.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.91-13.1 java-1_7_0-openjdk-headless-1.7.0.91-13.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.91-13.1 java-1_7_0-openjdk-src-1.7.0.91-13.1 - openSUSE 13.2 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.91-13.1 References: https://www.suse.com/security/cve/CVE-2015-4734.html https://www.suse.com/security/cve/CVE-2015-4803.html https://www.suse.com/security/cve/CVE-2015-4805.html https://www.suse.com/security/cve/CVE-2015-4806.html https://www.suse.com/security/cve/CVE-2015-4835.html https://www.suse.com/security/cve/CVE-2015-4840.html https://www.suse.com/security/cve/CVE-2015-4842.html https://www.suse.com/security/cve/CVE-2015-4843.html https://www.suse.com/security/cve/CVE-2015-4844.html https://www.suse.com/security/cve/CVE-2015-4860.html https://www.suse.com/security/cve/CVE-2015-4872.html https://www.suse.com/security/cve/CVE-2015-4881.html https://www.suse.com/security/cve/CVE-2015-4882.html https://www.suse.com/security/cve/CVE-2015-4883.html https://www.suse.com/security/cve/CVE-2015-4893.html https://www.suse.com/security/cve/CVE-2015-4903.html https://www.suse.com/security/cve/CVE-2015-4911.html https://bugzilla.suse.com/951376

1 0

openSUSE-RU-2015:1901-1: moderate: Recommended update for wicked
by maintenance＠opensuse.org 04 Nov '15

04 Nov '15

openSUSE Recommended Update: Recommended update for wicked ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1901-1 Rating: moderate References: #899985 #916035 #925276 #927309 #928459 #939142 #940239 #941611 #941964 #942278 #947542 #948423 #950333 #951315 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 14 recommended fixes can now be installed. Description: This recommended update provides version 0.6.27 of wicked: - vesion 0.6.27 - spec: disabled teamd support for SLE-12-GA/13.2, not available - nanny: fix policy file reading and objects references (boo#916035) - ovs: use --may-exist option in add-port (bsc#951315) commands to avoid error messages when the port is already in the db. - netconfig: do not refresh unrelated details in supplicants - service: fixed wicked client and nanny dependencies (bsc#950333). - service: restart wickedd* on dbus restart (bsc#941964) - fsm: do not follow link-up checks on configured master devices not involved in the current ifup operation (bsc#948423). - client: added more comfortable "wicked test dhcp[46]" commands executing the wickedd-dhcp[46] in their --test mode (bsc#942278) - version 0.6.26 - nanny: add link device references to policy match (bsc#941611) This causes, that nanny checks and waits until the configuration for link references is applied by ifup (master device worker is available) in order to not start managing ports/slaves and fail on unresolvable requirements with "document error" first. Unavailable reference matches caused a timing race, where nanny omits to enslave ports into master (e.g. a dummy into ovsbr), but was not limited to ovs setups. - dhcp4: fix to request offer by default in --test (bsc#942278) - teamd: adjust permissions of the teamd interface config to be owned by teamd user if available and to always re-read dbus busname from the service file (bsc#947542) - version 0.6.25 - compat: read complete sysctl file set (bsc#928459) - wireless: fixed to parse/format hex escapes in essid (bsc#928459) - version 0.6.24 - auto4: initial autoip and dhcp4 fallback fix (bsc#899985) - ethtool: update to the most recent ethtool.h, fixed advertised mode and flags (bsc#927309) - dhcp4: verify received client-id, accept hex encoded id - ovs: fixes for ovs bridge handling - make: fixed to add linux header copies as noinst - version 0.6.23 - ovs: initial openvswitch bridge support (fate#318840) - team: fix segfault on discovery failure - nanny: register device object also on device-up event - version 0.6.22 - fsm: do not run post-up scripts when leases defer (bsc#940239) - team: configurable teamd support and ctl detection (fate#318389) [- 0001-teamd-create-teamd-run-directory-when-missed.patch] - Add 0001-teamd-create-teamd-run-directory-when-missed.patch: Make sure /run/teamd directory is created on config generation. - version 0.6.21 - team: initial team device support (fate#318389) - ifstatus: fixed error return code and quiet option (bsc#939142) - version 0.6.20 - spec: ensure nanny use is disabled on SLE-12-GA - ifconfig: handle link up of externally enslaved devices - ifcfg: generate link master from master config, added MASTER_DEVICE variable - fsm: master/slave transition dependency and state check fixes - fsm: improve subordinate device relation updating and logging - fsm: reference count config nodes to avoid memleaks - ethtool: fix option tables terminator (bsc#925276) - scripts: fixed typo breaking wicked scheme scripts - sysfs: fixed memleak while reading device path - client: client: config parsing, origin processing, root-directory cleanup and memory leak fixes. - xml: fixes to memory leaks, location functions cleanup - firmware: properly extract discovery type and path Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-693=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libwicked-0-6-0.6.27-21.1 libwicked-0-6-debuginfo-0.6.27-21.1 wicked-0.6.27-21.1 wicked-debuginfo-0.6.27-21.1 wicked-debugsource-0.6.27-21.1 wicked-service-0.6.27-21.1 References: https://bugzilla.suse.com/899985 https://bugzilla.suse.com/916035 https://bugzilla.suse.com/925276 https://bugzilla.suse.com/927309 https://bugzilla.suse.com/928459 https://bugzilla.suse.com/939142 https://bugzilla.suse.com/940239 https://bugzilla.suse.com/941611 https://bugzilla.suse.com/941964 https://bugzilla.suse.com/942278 https://bugzilla.suse.com/947542 https://bugzilla.suse.com/948423 https://bugzilla.suse.com/950333 https://bugzilla.suse.com/951315

1 0

openSUSE-RU-2015:1900-1: moderate: Recommended update for bumblebee
by maintenance＠opensuse.org 04 Nov '15

04 Nov '15

openSUSE Recommended Update: Recommended update for bumblebee ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1900-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for bumblebee fixes the following issue: - Added patch to correctly load/unload nvidia-uvm and unload nvidia-modeset: * nvidia-uvm-modeset-support.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-694=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): bumblebee-3.2.1-2.3.1 bumblebee-debuginfo-3.2.1-2.3.1 bumblebee-debugsource-3.2.1-2.3.1 References:

1 0

openSUSE-RU-2015:1891-1: moderate: Recommended update for the Software Stack
by maintenance＠opensuse.org 03 Nov '15

03 Nov '15

openSUSE Recommended Update: Recommended update for the Software Stack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1891-1 Rating: moderate References: #941453 #941463 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for the Software Stack fixes the following issues: - libzypp: + Update translations + Resolver allow tuning DUP mode solver flags (FATE#319128) + Fix setting dup_allow* solver options (bnc#941463) + Don't make zypper encode {} around repo vars (bnc#941453) + Support for MIPS architectures - zypper: + Update translations + Options to allow vendor locking for zypper dup (FATE#319128) + Fix handling of wchar errors + Add git-like subcommand support for zypper. * Zypper subcommands are standalone executables that live in the zypper exec dir or are available in your $PATH (see zypper(8)). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-692=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libzypp-14.40.2-29.2 libzypp-debuginfo-14.40.2-29.2 libzypp-debugsource-14.40.2-29.2 libzypp-devel-14.40.2-29.2 libzypp-devel-doc-14.40.2-29.2 zypper-1.11.34-25.2 zypper-debuginfo-1.11.34-25.2 zypper-debugsource-1.11.34-25.2 - openSUSE 13.2 (noarch): zypper-aptitude-1.11.34-25.2 zypper-log-1.11.34-25.2 References: https://bugzilla.suse.com/941453 https://bugzilla.suse.com/941463

1 0

openSUSE-SU-2015:1887-1: moderate: Security update for chromium
by opensuse-security＠opensuse.org 02 Nov '15

02 Nov '15

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1887-1 Rating: moderate References: Cross-References: CVE-2015-1233 CVE-2015-1234 CVE-2015-1235 CVE-2015-1236 CVE-2015-1237 CVE-2015-1238 CVE-2015-1240 CVE-2015-1241 CVE-2015-1242 CVE-2015-1244 CVE-2015-1245 CVE-2015-1246 CVE-2015-1247 CVE-2015-1248 CVE-2015-1249 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: - Update to Chromium 42.0.2311.90 * A number of new apps, extension and Web Platform APIs (including the Push API!) * Lots of under the hood changes for stability and performance * Security fixes, including: - CVE-2015-1235: Cross-origin-bypass in HTML parser - CVE-2015-1236: Cross-origin-bypass in Blink - CVE-2015-1237: Use-after-free in IPC - CVE-2015-1238: Out-of-bounds write in Skia - CVE-2015-1240: Out-of-bounds read in WebGL - CVE-2015-1241: Tap-Jacking - CVE-2015-1242: Type confusion in V8 - CVE-2015-1244: HSTS bypass in WebSockets - CVE-2015-1245: Use-after-free in PDFium - CVE-2015-1246: Out-of-bounds read in Blink - CVE-2015-1247: Scheme issues in OpenSearch - CVE-2015-1248: SafeBrowsing bypass - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives - Multiple vulnerabilities in V8 fixed - Update to Chromium 41.0.2272.118 Security fixes: * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that can lead to remote code execution outside of the sandbox * CVE-2015-1234: Buffer overflow via race condition in GPU Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-351=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-42.0.2311.135-5.1 chromium-42.0.2311.135-5.1 chromium-desktop-gnome-42.0.2311.135-5.1 chromium-desktop-kde-42.0.2311.135-5.1 chromium-ffmpegsumo-42.0.2311.135-5.1 References: https://www.suse.com/security/cve/CVE-2015-1233.html https://www.suse.com/security/cve/CVE-2015-1234.html https://www.suse.com/security/cve/CVE-2015-1235.html https://www.suse.com/security/cve/CVE-2015-1236.html https://www.suse.com/security/cve/CVE-2015-1237.html https://www.suse.com/security/cve/CVE-2015-1238.html https://www.suse.com/security/cve/CVE-2015-1240.html https://www.suse.com/security/cve/CVE-2015-1241.html https://www.suse.com/security/cve/CVE-2015-1242.html https://www.suse.com/security/cve/CVE-2015-1244.html https://www.suse.com/security/cve/CVE-2015-1245.html https://www.suse.com/security/cve/CVE-2015-1246.html https://www.suse.com/security/cve/CVE-2015-1247.html https://www.suse.com/security/cve/CVE-2015-1248.html https://www.suse.com/security/cve/CVE-2015-1249.html

1 0