November 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:2033-1: moderate: Recommended update for ez-ipupdate
by maintenance＠opensuse.org 19 Nov '15

19 Nov '15

openSUSE Recommended Update: Recommended update for ez-ipupdate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2033-1 Rating: moderate References: #954439 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ez-ipupdate fixes the following issues: - Fix ez-ipupdate.service: the binary is being installed in /usr/bin, not /usr/sbin (boo#954439). - Fix tmpfile handling for pid file location in _rundir. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-769=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ez-ipupdate-3.0.11b8-293.1 ez-ipupdate-debuginfo-3.0.11b8-293.1 ez-ipupdate-debugsource-3.0.11b8-293.1 References: https://bugzilla.suse.com/954439

1 0

openSUSE-SU-2015:2032-1: moderate: Security update for xscreensaver
by opensuse-security＠opensuse.org 19 Nov '15

19 Nov '15

openSUSE Security Update: Security update for xscreensaver ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2032-1 Rating: moderate References: #952062 Cross-References: CVE-2015-8025 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Xscreensaver was updated to fix one security issue. The following vulnerability was fixed: * CVE-2015-8025: xscreensaver could be bypassed by disconnecting HDMI cable (bsc#952062). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-783=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-783=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-783=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xscreensaver-5.33-4.1 xscreensaver-data-5.33-4.1 xscreensaver-data-debuginfo-5.33-4.1 xscreensaver-data-extra-5.33-4.1 xscreensaver-data-extra-debuginfo-5.33-4.1 xscreensaver-debuginfo-5.33-4.1 xscreensaver-debugsource-5.33-4.1 - openSUSE 13.2 (i586 x86_64): xscreensaver-5.29-2.4.3 xscreensaver-data-5.29-2.4.3 xscreensaver-data-debuginfo-5.29-2.4.3 xscreensaver-data-extra-5.29-2.4.3 xscreensaver-data-extra-debuginfo-5.29-2.4.3 xscreensaver-debuginfo-5.29-2.4.3 xscreensaver-debugsource-5.29-2.4.3 - openSUSE 13.1 (i586 x86_64): xscreensaver-5.22-2.25.1 xscreensaver-data-5.22-2.25.1 xscreensaver-data-debuginfo-5.22-2.25.1 xscreensaver-data-extra-5.22-2.25.1 xscreensaver-data-extra-debuginfo-5.22-2.25.1 xscreensaver-debuginfo-5.22-2.25.1 xscreensaver-debugsource-5.22-2.25.1 References: https://www.suse.com/security/cve/CVE-2015-8025.html https://bugzilla.suse.com/952062

1 0

openSUSE-RU-2015:2031-1: moderate: Recommended update for python-Django
by maintenance＠opensuse.org 19 Nov '15

19 Nov '15

openSUSE Recommended Update: Recommended update for python-Django ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2031-1 Rating: moderate References: #952198 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-Django fixes the following issue: - Add missing Requires for python-setuptools (boo#952198) * /usr/bin/django-admin needs the pkg_resources framework from python-setuptools to run properly. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-773=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): python-Django-1.8.4-3.1 References: https://bugzilla.suse.com/952198

1 0

openSUSE-RU-2015:2030-1: moderate: Recommended update for kdump
by maintenance＠opensuse.org 19 Nov '15

19 Nov '15

openSUSE Recommended Update: Recommended update for kdump ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2030-1 Rating: moderate References: #952141 #952149 #953732 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for kdump fixes the following issues: - Use the actual load script instead of the SysV-style init script. (boo#952149) - Ensure that high crash kernel area covers at least boot requirements (boo#953732). - Add kernel initdata to boot requirements (boo#953732). - calibrate: Add memory for SWIOTLB if maxpfn is above 4G (boo#952141). - calibrate: Search memory ranges from top to bottom (boo#952141). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-781=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kdump-0.8.15-24.1 kdump-debuginfo-0.8.15-24.1 kdump-debugsource-0.8.15-24.1 References: https://bugzilla.suse.com/952141 https://bugzilla.suse.com/952149 https://bugzilla.suse.com/953732

1 0

openSUSE-SU-2015:2023-1: moderate: Security update for putty
by opensuse-security＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Security Update: Security update for putty ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2023-1 Rating: moderate References: #954191 Cross-References: CVE-2015-5309 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: PuTTY was updated to 0.66 to fix security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-5309: Malicious ECH control sequences could have caused an integer overflow, buffer underrun in terminal emulator bnc#954191 Also contains all bug fixes up to the 0.66 release. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-766=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-766=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-766=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): putty-0.66-6.1 putty-debuginfo-0.66-6.1 putty-debugsource-0.66-6.1 - openSUSE 13.2 (i586 x86_64): putty-0.66-4.7.1 putty-debuginfo-0.66-4.7.1 putty-debugsource-0.66-4.7.1 - openSUSE 13.1 (i586 x86_64): putty-0.66-2.7.1 putty-debuginfo-0.66-2.7.1 putty-debugsource-0.66-2.7.1 References: https://www.suse.com/security/cve/CVE-2015-5309.html https://bugzilla.suse.com/954191

1 0

openSUSE-SU-2015:2022-1: moderate: Security update for dracut
by opensuse-security＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Security Update: Security update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2022-1 Rating: moderate References: #935338 #935993 #952491 Cross-References: CVE-2015-0794 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: The dracut package was updated to fix the following security and non security issues: - CVE-2015-0794: Use mktemp instead of hardcoded filenames, possible vulnerability (bnc#935338). - Always install mdraid modules (boo#935993). - Add notice when dracut failed to install modules (bsc#952491). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-765=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): dracut-037-17.30.1 dracut-debuginfo-037-17.30.1 dracut-debugsource-037-17.30.1 dracut-fips-037-17.30.1 References: https://www.suse.com/security/cve/CVE-2015-0794.html https://bugzilla.suse.com/935338 https://bugzilla.suse.com/935993 https://bugzilla.suse.com/952491

1 0

openSUSE-RU-2015:2021-1: moderate: Recommended update for plymouth
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for plymouth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2021-1 Rating: moderate References: #939204 #949046 #951983 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for plymouth provides the following fixes: - Do not filter out useful control characters. (bsc#951983) - Rewrite version handling in the spec file to avoid hard-coding SLE versions. (bsc#949046) - Ensure plymouth-reboot always restarts if needed to show all the log messages. (bsc#939204) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-764=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libply-boot-client2-0.9.0-8.1 libply-boot-client2-debuginfo-0.9.0-8.1 libply-splash-core2-0.9.0-8.1 libply-splash-core2-debuginfo-0.9.0-8.1 libply-splash-graphics2-0.9.0-8.1 libply-splash-graphics2-debuginfo-0.9.0-8.1 libply2-0.9.0-8.1 libply2-debuginfo-0.9.0-8.1 plymouth-0.9.0-8.1 plymouth-debuginfo-0.9.0-8.1 plymouth-debugsource-0.9.0-8.1 plymouth-devel-0.9.0-8.1 plymouth-dracut-0.9.0-8.1 plymouth-plugin-fade-throbber-0.9.0-8.1 plymouth-plugin-fade-throbber-debuginfo-0.9.0-8.1 plymouth-plugin-label-0.9.0-8.1 plymouth-plugin-label-debuginfo-0.9.0-8.1 plymouth-plugin-script-0.9.0-8.1 plymouth-plugin-script-debuginfo-0.9.0-8.1 plymouth-plugin-space-flares-0.9.0-8.1 plymouth-plugin-space-flares-debuginfo-0.9.0-8.1 plymouth-plugin-throbgress-0.9.0-8.1 plymouth-plugin-throbgress-debuginfo-0.9.0-8.1 plymouth-plugin-tribar-0.9.0-8.1 plymouth-plugin-tribar-debuginfo-0.9.0-8.1 plymouth-plugin-two-step-0.9.0-8.1 plymouth-plugin-two-step-debuginfo-0.9.0-8.1 plymouth-scripts-0.9.0-8.1 plymouth-utils-0.9.0-8.1 plymouth-utils-debuginfo-0.9.0-8.1 plymouth-x11-renderer-0.9.0-8.1 plymouth-x11-renderer-debuginfo-0.9.0-8.1 - openSUSE Leap 42.1 (noarch): plymouth-theme-fade-in-0.9.0-8.1 plymouth-theme-script-0.9.0-8.1 plymouth-theme-solar-0.9.0-8.1 plymouth-theme-spinfinity-0.9.0-8.1 plymouth-theme-spinner-0.9.0-8.1 plymouth-theme-tribar-0.9.0-8.1 References: https://bugzilla.suse.com/939204 https://bugzilla.suse.com/949046 https://bugzilla.suse.com/951983

1 0

openSUSE-RU-2015:2020-1: moderate: Recommended update for alsa
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for alsa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2020-1 Rating: moderate References: #954279 #954281 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for alsa fixes the following issues: - Fix PCM dmix/dsnoop XRUN handling in slave PCM (boo#954281). - Align topology API with the official alsa-lib 1.1.0 release (boo#954279). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-761=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): alsa-1.0.29-10.1 alsa-debugsource-1.0.29-10.1 alsa-devel-1.0.29-10.1 libasound2-1.0.29-10.1 libasound2-debuginfo-1.0.29-10.1 - openSUSE Leap 42.1 (x86_64): alsa-devel-32bit-1.0.29-10.1 libasound2-32bit-1.0.29-10.1 libasound2-debuginfo-32bit-1.0.29-10.1 - openSUSE Leap 42.1 (noarch): alsa-docs-1.0.29-10.1 References: https://bugzilla.suse.com/954279 https://bugzilla.suse.com/954281

1 0

openSUSE-RU-2015:2019-1: moderate: Recommended update for target-isns
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for target-isns ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2019-1 Rating: moderate References: #950366 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for target-isns fixes the following issue: - Handle 2 places isnsd was handling IP addresses incorrectly, assuming big-endian architecture (boo#950366). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-759=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): target-isns-0.3-6.1 target-isns-debuginfo-0.3-6.1 target-isns-debugsource-0.3-6.1 References: https://bugzilla.suse.com/950366

1 0

openSUSE-RU-2015:2018-1: moderate: Recommended update for gnome-session
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for gnome-session ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2018-1 Rating: moderate References: #931314 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-session fixes the following issue: - Add DesktopNames, needed by SDDM to start GNOME (boo#931314) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-762=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gnome-session-3.16.0-5.2 gnome-session-core-3.16.0-5.2 gnome-session-core-debuginfo-3.16.0-5.2 gnome-session-debugsource-3.16.0-5.2 gnome-session-default-session-3.16.0-5.2 gnome-session-wayland-3.16.0-5.2 - openSUSE Leap 42.1 (noarch): gnome-session-lang-3.16.0-5.2 References: https://bugzilla.suse.com/931314

1 0