November 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:2127-1: moderate: Recommended update for awesome-branding-openSUSE
by maintenance＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Recommended Update: Recommended update for awesome-branding-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2127-1 Rating: moderate References: #953503 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for awesome-freedesktop and awesome-branding-openSUSE fixes the following issues: awesome-freedesktop: - Fix openSUSE branding with version 3.5 (boo#953503) awesome-branding-openSUSE: - Update to 3.5-v0.3: + Awesome 3.5 compatibility (boo#953503). + Use adwaita icon theme instead of gnome icon theme. + Use light-locker instead of xscreensaver. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-816=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): awesome-branding-openSUSE-3.5-8.1 awesome-freedesktop-git201209061058-9.1 References: https://bugzilla.suse.com/953503

1 0

openSUSE-RU-2015:2126-1: Recommended udpate for drbd
by maintenance＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Recommended Update: Recommended udpate for drbd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2126-1 Rating: low References: #949045 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for drbd fixes the following issue: - Remove execute of drbd.service. (boo#949045) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-814=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): drbd-utils-8.9.2-7.1 drbd-utils-debuginfo-8.9.2-7.1 drbd-utils-debugsource-8.9.2-7.1 References: https://bugzilla.suse.com/949045

1 0

openSUSE-RU-2015:2125-1: Recommended update for libseccomp
by maintenance＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Recommended Update: Recommended update for libseccomp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2125-1 Rating: low References: #932372 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libseccomp adjusts the pkgconfig reported version from 2.1.0 to the correct 2.1.1. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-811=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libseccomp-debugsource-2.1.1-5.1 libseccomp-devel-2.1.1-5.1 libseccomp-tools-2.1.1-5.1 libseccomp-tools-debuginfo-2.1.1-5.1 libseccomp2-2.1.1-5.1 libseccomp2-debuginfo-2.1.1-5.1 References: https://bugzilla.suse.com/932372

1 0

openSUSE-RU-2015:2124-1: moderate: Recommended udpate for pacemaker
by maintenance＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Recommended Update: Recommended udpate for pacemaker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2124-1 Rating: moderate References: #913251 #931271 #948989 #949267 #949441 #950128 #950375 #950450 #950551 #952874 #952884 #953192 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 12 recommended fixes can now be installed. Description: This update for pacemaker fixes the following issues: - fencing: crm_resource --show-metadata drops documentation strings for fencing agents (boo#950375) - CTS: Add "try except" to deal with errors that raw_input gets EOFError and add "--yes" to skip interaction (boo#953192) - crm_resource: Correctly clean up all children for anonymous cloned groups (boo#950128) - services: Directly add operations into in-flight list in the execution functions (boo#952874) - systemd: Return PCMK_OCF_UNKNOWN_ERROR instead of PCMK_OCF_NOT_INSTALLED for uncertain errors on LoadUnit (boo#952884) - systemd: Return FALSE for systemd_mask_error() if it only maps an error instead of masking one (boo#952884) - dbus: Correctly return the result for pcmk_dbus_find_error() no matter if there's a DBusError passed in (boo#952884) - services: Prevent potential use-after-free when trying to add an operation into in-flight list (boo#952874) - systemd: Directly return an error if the connection to System DBus is closed (boo#952874) - services: Correctly determine if operations are in-flight (boo#952874) - systemd: Reconnect to System DBus if the connection is closed (boo#931271) - lrmd: Finalize all pending and recurring operations when cleaning up a resource (boo#950450) - fencing: Don't poke peers when remote node status changes - attrd: Don't try to communicate with attrd on a remote node - libcluster,crmd: Never update join info or processes for remote nodes - cib: Increased paranoia when peer updates fail to apply in compatability mode - crmd: Do not accept remote peer data as enough for startup - crmd: Remote nodes can't be DC so never add them to stonith cleanup list - libcluster: Never autoreap from remote peer cache - crmd: Improve generation of node state - CTS: Get Reattach test working again and up-to-date (boo#953192) - libcommon: Ignore CDATA of metadata of the resource. - cib: Downgrade the log message on forwarding CRM_OP_NOOP requests from INFO to DEBUG (boo#949267) - fencing: Return a provider for the internal fencing agent "#watchdog" instead of logging an error (boo#949441) Additionally, the following missing bug-references have been added to the changelog: - boo#950551: frequent logging notice: update_validation: pacemaker-x.y-style configuration - boo#950450: Resource monitor failcount increasing after migration. - boo#931271: LRMD fails on monitor under high load, causing failover - boo#913251: on reboot other services stop before pacemaker - boo#948989: Pacemaker doesn't wait for systemd resource stop Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-815=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libpacemaker-devel-1.1.13-14.1 libpacemaker3-1.1.13-14.1 libpacemaker3-debuginfo-1.1.13-14.1 pacemaker-1.1.13-14.1 pacemaker-cli-1.1.13-14.1 pacemaker-cli-debuginfo-1.1.13-14.1 pacemaker-cts-1.1.13-14.1 pacemaker-cts-debuginfo-1.1.13-14.1 pacemaker-debuginfo-1.1.13-14.1 pacemaker-debugsource-1.1.13-14.1 pacemaker-remote-1.1.13-14.1 pacemaker-remote-debuginfo-1.1.13-14.1 References: https://bugzilla.suse.com/913251 https://bugzilla.suse.com/931271 https://bugzilla.suse.com/948989 https://bugzilla.suse.com/949267 https://bugzilla.suse.com/949441 https://bugzilla.suse.com/950128 https://bugzilla.suse.com/950375 https://bugzilla.suse.com/950450 https://bugzilla.suse.com/950551 https://bugzilla.suse.com/952874 https://bugzilla.suse.com/952884 https://bugzilla.suse.com/953192

1 0

openSUSE-RU-2015:2123-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2123-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update provides version 4.3.34 for virutalbox: NAT: support TCP in DNS proxy (bug #14736) NAT Network: fixed sporadic crashes on Windows hosts (bug #13899) USB: fixed a crash under certain conditions on hosts with Linux kernels older than version 3.3 OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14749) Webcam: passthrough fix for certain devices (Windows hosts only) Mac OS X hosts: use the correct kernel on certain hosts Windows hosts: fixes for a shared folder path with extended-length path prefix (bug #14651) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-819=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): python-virtualbox-4.3.34-35.2 python-virtualbox-debuginfo-4.3.34-35.2 virtualbox-4.3.34-35.2 virtualbox-debuginfo-4.3.34-35.2 virtualbox-debugsource-4.3.34-35.2 virtualbox-devel-4.3.34-35.2 virtualbox-guest-kmp-default-4.3.34_k3.16.7_29-35.2 virtualbox-guest-kmp-default-debuginfo-4.3.34_k3.16.7_29-35.2 virtualbox-guest-kmp-desktop-4.3.34_k3.16.7_29-35.2 virtualbox-guest-kmp-desktop-debuginfo-4.3.34_k3.16.7_29-35.2 virtualbox-guest-tools-4.3.34-35.2 virtualbox-guest-tools-debuginfo-4.3.34-35.2 virtualbox-guest-x11-4.3.34-35.2 virtualbox-guest-x11-debuginfo-4.3.34-35.2 virtualbox-host-kmp-default-4.3.34_k3.16.7_29-35.2 virtualbox-host-kmp-default-debuginfo-4.3.34_k3.16.7_29-35.2 virtualbox-host-kmp-desktop-4.3.34_k3.16.7_29-35.2 virtualbox-host-kmp-desktop-debuginfo-4.3.34_k3.16.7_29-35.2 virtualbox-qt-4.3.34-35.2 virtualbox-qt-debuginfo-4.3.34-35.2 virtualbox-websrv-4.3.34-35.2 virtualbox-websrv-debuginfo-4.3.34-35.2 - openSUSE 13.2 (noarch): virtualbox-guest-desktop-icons-4.3.34-35.2 virtualbox-host-source-4.3.34-35.2 - openSUSE 13.2 (i586): virtualbox-guest-kmp-pae-4.3.34_k3.16.7_29-35.2 virtualbox-guest-kmp-pae-debuginfo-4.3.34_k3.16.7_29-35.2 virtualbox-host-kmp-pae-4.3.34_k3.16.7_29-35.2 virtualbox-host-kmp-pae-debuginfo-4.3.34_k3.16.7_29-35.2 References:

1 0

openSUSE-RU-2015:2122-1: moderate: Recommended update for xf86-video-savage
by maintenance＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Recommended Update: Recommended update for xf86-video-savage ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2122-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for xf86-video-savage fixes the following issues: - Remove u_Include-xf86Modes.h-to-use-functions-from-hw-xfree86.patch after xf86modes.h is included in savage_driver.h since 2.3.8. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-813=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xf86-video-savage-2.3.8-5.1 xf86-video-savage-debuginfo-2.3.8-5.1 xf86-video-savage-debugsource-2.3.8-5.1 References:

1 0

openSUSE-SU-2015:2121-1: moderate: ppp
by opensuse-security＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Security Update: ppp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2121-1 Rating: moderate References: #927841 Cross-References: CVE-2015-3310 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The ppp package was updated to fix one security issue. - CVE-2015-3310: Fixed buffer overflow in radius plug-ins rc_mksid() (bnc#927841). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-827=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-827=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-827=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ppp-2.4.7-5.1 ppp-debuginfo-2.4.7-5.1 ppp-debugsource-2.4.7-5.1 ppp-devel-2.4.7-5.1 - openSUSE 13.2 (i586 x86_64): ppp-2.4.7-2.3.1 ppp-debuginfo-2.4.7-2.3.1 ppp-debugsource-2.4.7-2.3.1 ppp-devel-2.4.7-2.3.1 - openSUSE 13.1 (i586 x86_64): ppp-2.4.7-20.7.1 ppp-debuginfo-2.4.7-20.7.1 ppp-debugsource-2.4.7-20.7.1 ppp-devel-2.4.7-20.7.1 References: https://www.suse.com/security/cve/CVE-2015-3310.html https://bugzilla.suse.com/927841

1 0

openSUSE-SU-2015:2120-1: moderate: Security update for ffmpeg
by opensuse-security＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Security Update: Security update for ffmpeg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2120-1 Rating: moderate References: #955346 #955347 #955348 #955350 Cross-References: CVE-2015-8216 CVE-2015-8217 CVE-2015-8218 CVE-2015-8219 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: The ffmpeg package was updated to version 2.8.2 to fix the following security and non security issues: - CVE-2015-8216: Fixed the ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c which could cause a denial of service (out-of-bounds array access) (bnc#955346). - CVE-2015-8217: Fixed the ff_hevc_parse_sps function in libavcodec/hevc_ps.c which could cause a denial of service (out-of-bounds array access) (bnc#955347). - CVE-2015-8218: Fixed the decode_uncompressed function in libavcodec/faxcompr.c which could cause a denial of service (out-of-bounds array access) (bnc#955348). - CVE-2015-8219: Fixed the init_tile function in libavcodec/jpeg2000dec.c which could cause a denial of service (out-of-bounds array access) (bnc#955350). - Update to new upstream release 2.8.2 * various fixes in the aac_fixed decoder * various fixes in softfloat * swresample/resample: increase precision for compensation * lavf/mov: add support for sidx fragment indexes * avformat/mxfenc: Only store user comment related tags when needed * ffmpeg: Don't try and write sdp info if none of the outputs had an rtp format. * apng: use correct size for output buffer * jvdec: avoid unsigned overflow in comparison * avcodec/jpeg2000dec: Clip all tile coordinates * avcodec/microdvddec: Check for string end in 'P' case * avcodec/dirac_parser: Fix undefined memcpy() use * avformat/xmv: Discard remainder of packet on error * avformat/xmv: factor return check out of if/else * avcodec/mpeg12dec: Do not call show_bits() with invalid bits * avcodec/faxcompr: Add missing runs check in decode_uncompressed() * libavutil/channel_layout: Check strtol*() for failure * avformat/mpegts: Only start probing data streams within probe_packets * avcodec/hevc_ps: Check chroma_format_idc * avcodec/ffv1dec: Check for 0 quant tables * avcodec/mjpegdec: Reinitialize IDCT on BPP changes * avcodec/mjpegdec: Check index in ljpeg_decode_yuv_scan() before using it * avcodec/h264_slice: Disable slice threads if there are multiple access units in a packet * avformat/hls: update cookies on setcookie response * opusdec: Don't run vector_fmul_scalar on zero length arrays * avcodec/opusdec: Fix extra samples read index * avcodec/ffv1: Initialize vlc_state on allocation * avcodec/ffv1dec: update progress in case of broken pointer chains * avcodec/ffv1dec: Clear slice coordinates if they are invalid or slice header decoding fails for other reasons * rtsp: Allow $ as interleaved packet indicator before a complete response header * videodsp: don't overread edges in vfix3 emu_edge. * avformat/mp3dec: improve junk skipping heuristic * concatdec: fix file_start_time calculation regression * avcodec: loongson optimize h264dsp idct and loop filter with mmi * avcodec/jpeg2000dec: Clear properties in jpeg2000_dec_cleanup() too * avformat/hls: add support for EXT-X-MAP * avformat/hls: fix segment selection regression on track changes of live streams * configure: Require libkvazaar < 0.7. * avcodec/vp8: Do not use num_coeff_partitions in thread/buffer setup - Drop ffmpeg-mov-sidx-fragment.patch, fixed upstream. - Update to new upstream release 2.8.1 * Minor bugfix release * Includes all changes from. Ffmpeg-mt, libav master of 2015-08-28, libav 11 as of 2015-08-28 - Add ffmpeg-mov-sidx-fragment.patch to add sidx fragment indexes. Needed for new mpv release. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-821=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ffmpeg-2.8.2-3.1 ffmpeg-debuginfo-2.8.2-3.1 ffmpeg-debugsource-2.8.2-3.1 ffmpeg-devel-2.8.2-3.1 libavcodec-devel-2.8.2-3.1 libavcodec56-2.8.2-3.1 libavcodec56-debuginfo-2.8.2-3.1 libavdevice-devel-2.8.2-3.1 libavdevice56-2.8.2-3.1 libavdevice56-debuginfo-2.8.2-3.1 libavfilter-devel-2.8.2-3.1 libavfilter5-2.8.2-3.1 libavfilter5-debuginfo-2.8.2-3.1 libavformat-devel-2.8.2-3.1 libavformat56-2.8.2-3.1 libavformat56-debuginfo-2.8.2-3.1 libavresample-devel-2.8.2-3.1 libavresample2-2.8.2-3.1 libavresample2-debuginfo-2.8.2-3.1 libavutil-devel-2.8.2-3.1 libavutil54-2.8.2-3.1 libavutil54-debuginfo-2.8.2-3.1 libpostproc-devel-2.8.2-3.1 libpostproc53-2.8.2-3.1 libpostproc53-debuginfo-2.8.2-3.1 libswresample-devel-2.8.2-3.1 libswresample1-2.8.2-3.1 libswresample1-debuginfo-2.8.2-3.1 libswscale-devel-2.8.2-3.1 libswscale3-2.8.2-3.1 libswscale3-debuginfo-2.8.2-3.1 - openSUSE Leap 42.1 (x86_64): libavcodec56-32bit-2.8.2-3.1 libavcodec56-debuginfo-32bit-2.8.2-3.1 libavdevice56-32bit-2.8.2-3.1 libavdevice56-debuginfo-32bit-2.8.2-3.1 libavfilter5-32bit-2.8.2-3.1 libavfilter5-debuginfo-32bit-2.8.2-3.1 libavformat56-32bit-2.8.2-3.1 libavformat56-debuginfo-32bit-2.8.2-3.1 libavresample2-32bit-2.8.2-3.1 libavresample2-debuginfo-32bit-2.8.2-3.1 libavutil54-32bit-2.8.2-3.1 libavutil54-debuginfo-32bit-2.8.2-3.1 libpostproc53-32bit-2.8.2-3.1 libpostproc53-debuginfo-32bit-2.8.2-3.1 libswresample1-32bit-2.8.2-3.1 libswresample1-debuginfo-32bit-2.8.2-3.1 libswscale3-32bit-2.8.2-3.1 libswscale3-debuginfo-32bit-2.8.2-3.1 References: https://www.suse.com/security/cve/CVE-2015-8216.html https://www.suse.com/security/cve/CVE-2015-8217.html https://www.suse.com/security/cve/CVE-2015-8218.html https://www.suse.com/security/cve/CVE-2015-8219.html https://bugzilla.suse.com/955346 https://bugzilla.suse.com/955347 https://bugzilla.suse.com/955348 https://bugzilla.suse.com/955350

1 0

openSUSE-SU-2015:2119-1: moderate: Security update for libsndfile
by opensuse-security＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Security Update: Security update for libsndfile ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2119-1 Rating: moderate References: #953516 #953519 #953521 Cross-References: CVE-2014-9756 CVE-2015-7805 CVE-2015-8075 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: The libsndfile package was updated to fix the following security issue: - CVE-2014-9756: Fixed a divide by zero problem that can lead to a Denial of Service (DoS) (bsc#953521). - CVE-2015-7805: Fixed heap overflow issue (bsc#953516). - CVE-2015-8075: Fixed heap overflow issue (bsc#953519). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-820=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libsndfile-debugsource-1.0.25-24.1 libsndfile-devel-1.0.25-24.1 libsndfile-progs-1.0.25-24.1 libsndfile-progs-debuginfo-1.0.25-24.1 libsndfile-progs-debugsource-1.0.25-24.1 libsndfile1-1.0.25-24.1 libsndfile1-debuginfo-1.0.25-24.1 - openSUSE Leap 42.1 (x86_64): libsndfile1-32bit-1.0.25-24.1 libsndfile1-debuginfo-32bit-1.0.25-24.1 References: https://www.suse.com/security/cve/CVE-2014-9756.html https://www.suse.com/security/cve/CVE-2015-7805.html https://www.suse.com/security/cve/CVE-2015-8075.html https://bugzilla.suse.com/953516 https://bugzilla.suse.com/953519 https://bugzilla.suse.com/953521

1 0

openSUSE-RU-2015:2118-1: moderate: Recommended update for acl
by maintenance＠opensuse.org 27 Nov '15

27 Nov '15

openSUSE Recommended Update: Recommended update for acl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2118-1 Rating: moderate References: #945899 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for acl provides the following fixes: - Fix segmentation fault of getfacl -e on overly long group name. - Make sure that acl_from_text() always sets errno when it fails. - Fix memory and resource leaks in getfacl. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-818=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): acl-2.2.52-8.1 acl-debuginfo-2.2.52-8.1 acl-debugsource-2.2.52-8.1 libacl-devel-2.2.52-8.1 libacl1-2.2.52-8.1 libacl1-debuginfo-2.2.52-8.1 - openSUSE Leap 42.1 (x86_64): libacl-devel-32bit-2.2.52-8.1 libacl1-32bit-2.2.52-8.1 libacl1-debuginfo-32bit-2.2.52-8.1 References: https://bugzilla.suse.com/945899

1 0