December 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:2409-1: moderate: Recommended update for gnome-documents, gnome-online-accounts, gtk2, meld
by maintenance＠opensuse.org 31 Dec '15

31 Dec '15

openSUSE Recommended Update: Recommended update for gnome-documents, gnome-online-accounts, gtk2, meld ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2409-1 Rating: moderate References: #958808 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides new version for gnome-documents, gnome-online-accounts, gtk2, meld: * gnome-documents: - Update to version 3.16.5 (boo#958808): + Restore separate collections for Books and Documents. + Change to selection mode when pressing ctrl+a. + Disable Print menu item when unsupported. + Don't show an extra menu when the app menu is disabled. + Updated translations. - Update to version 3.16.4: + Don't show the places dialog if there is only one page. + Fix GdTaggedEntry theming. + Add missing Gio import so that Settings can be started. * gnome-online-accounts: - Update to version 3.16.5 (boo#958808): + Bugs fixed: - Network changes cause authentication token timeouts (bgo#751524). - owncloud: Doesn't work with non-standard ports (bgo#752736). - owncloud, exchange: Sanitize HTTP error messages (bgo#755168). - imap-smtp: Fix typo in error message (bgo#755316). - identity: Don't ever nullify identifier (bgo#756494). - provider, telepathy: Small leak fixes (bgo#756759). - Crash in mail_client_check_auth_run_cb when goa_mail_auth_run fails (bgo#758361). * gtk2: - Update to version 2.24.29 (boo#958808): + OS X: Partial aspect ratio support. + Bugs fixed: bgo#345345, bgo#745127, bgo#749507, bgo#752638, bgo#753644, bgo#753691, bgo#753992, bgo#754046. + Updated translations. - Drop gtk2-gdk_region_destroy_instead_of_cairo_region_destroy: fixed upstream. * meld: - Update to version 3.14.2 (boo#958808): + Fix some GTK+ assertions on window close. + Fix commit error with unicode commit messages. + Add manual appdata kudos markers. + Updated translations. - Changes from version 3.14.1: + Offer to open binary files externally. + Use locale-based default encodings. + Bug fixes: - Fix crash with some GTK+ versions when using --output. - Fix merge-all action not working at all. - Fix creating patches with unicode path names. - Fix copy-to-clipboard option in patch dialog. - Fix diffmap alignment for new GTK+ allocation behaviour. - Improve float accuracy in folder comparison timestamp resolution. - Fix default SVN keyword filter to escape $ characters. - Fix display of unicode --help from command line. - Fix keyboard shortcut docs. - Don't incorrectly show identical notification for changed folder comparisons. + Updated translations. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-981=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gnome-books-3.16.5-7.2 gnome-documents-3.16.5-7.2 gnome-documents-debugsource-3.16.5-7.2 gnome-documents_books-common-3.16.5-7.2 gnome-documents_books-common-debuginfo-3.16.5-7.2 gnome-online-accounts-3.16.5-4.2 gnome-online-accounts-debuginfo-3.16.5-4.2 gnome-online-accounts-debugsource-3.16.5-4.2 gnome-online-accounts-devel-3.16.5-4.2 gnome-shell-search-provider-documents-3.16.5-7.2 gtk2-debugsource-2.24.29-5.2 gtk2-devel-2.24.29-5.2 gtk2-devel-debuginfo-2.24.29-5.2 gtk2-engine-clearlooks-2.20.2-22.2 gtk2-engine-clearlooks-debuginfo-2.20.2-22.2 gtk2-engine-crux-2.20.2-22.2 gtk2-engine-crux-debuginfo-2.20.2-22.2 gtk2-engine-glide-2.20.2-22.2 gtk2-engine-glide-debuginfo-2.20.2-22.2 gtk2-engine-hcengine-2.20.2-22.2 gtk2-engine-hcengine-debuginfo-2.20.2-22.2 gtk2-engine-industrial-2.20.2-22.2 gtk2-engine-industrial-debuginfo-2.20.2-22.2 gtk2-engine-mist-2.20.2-22.2 gtk2-engine-mist-debuginfo-2.20.2-22.2 gtk2-engine-redmond95-2.20.2-22.2 gtk2-engine-redmond95-debuginfo-2.20.2-22.2 gtk2-engine-thinice-2.20.2-22.2 gtk2-engine-thinice-debuginfo-2.20.2-22.2 gtk2-engines-2.20.2-22.2 gtk2-engines-debugsource-2.20.2-22.2 gtk2-engines-devel-2.20.2-22.2 gtk2-immodule-amharic-2.24.29-5.2 gtk2-immodule-amharic-debuginfo-2.24.29-5.2 gtk2-immodule-inuktitut-2.24.29-5.2 gtk2-immodule-inuktitut-debuginfo-2.24.29-5.2 gtk2-immodule-multipress-2.24.29-5.2 gtk2-immodule-multipress-debuginfo-2.24.29-5.2 gtk2-immodule-thai-2.24.29-5.2 gtk2-immodule-thai-debuginfo-2.24.29-5.2 gtk2-immodule-vietnamese-2.24.29-5.2 gtk2-immodule-vietnamese-debuginfo-2.24.29-5.2 gtk2-immodule-xim-2.24.29-5.2 gtk2-immodule-xim-debuginfo-2.24.29-5.2 gtk2-immodules-tigrigna-2.24.29-5.2 gtk2-immodules-tigrigna-debuginfo-2.24.29-5.2 gtk2-tools-2.24.29-5.2 gtk2-tools-debuginfo-2.24.29-5.2 libgoa-1_0-0-3.16.5-4.2 libgoa-1_0-0-debuginfo-3.16.5-4.2 libgoa-backend-1_0-1-3.16.5-4.2 libgoa-backend-1_0-1-debuginfo-3.16.5-4.2 libgtk-2_0-0-2.24.29-5.2 libgtk-2_0-0-debuginfo-2.24.29-5.2 typelib-1_0-Goa-1_0-3.16.5-4.2 typelib-1_0-Gtk-2_0-2.24.29-5.2 - openSUSE Leap 42.1 (x86_64): gtk2-devel-32bit-2.24.29-5.2 gtk2-devel-debuginfo-32bit-2.24.29-5.2 gtk2-engine-clearlooks-32bit-2.20.2-22.2 gtk2-engine-clearlooks-debuginfo-32bit-2.20.2-22.2 gtk2-engine-crux-32bit-2.20.2-22.2 gtk2-engine-crux-debuginfo-32bit-2.20.2-22.2 gtk2-engine-glide-32bit-2.20.2-22.2 gtk2-engine-glide-debuginfo-32bit-2.20.2-22.2 gtk2-engine-industrial-32bit-2.20.2-22.2 gtk2-engine-industrial-debuginfo-32bit-2.20.2-22.2 gtk2-engine-mist-32bit-2.20.2-22.2 gtk2-engine-mist-debuginfo-32bit-2.20.2-22.2 gtk2-engine-redmond95-32bit-2.20.2-22.2 gtk2-engine-redmond95-debuginfo-32bit-2.20.2-22.2 gtk2-engine-thinice-32bit-2.20.2-22.2 gtk2-engine-thinice-debuginfo-32bit-2.20.2-22.2 gtk2-immodule-amharic-32bit-2.24.29-5.2 gtk2-immodule-amharic-debuginfo-32bit-2.24.29-5.2 gtk2-immodule-inuktitut-32bit-2.24.29-5.2 gtk2-immodule-inuktitut-debuginfo-32bit-2.24.29-5.2 gtk2-immodule-multipress-32bit-2.24.29-5.2 gtk2-immodule-multipress-debuginfo-32bit-2.24.29-5.2 gtk2-immodule-thai-32bit-2.24.29-5.2 gtk2-immodule-thai-debuginfo-32bit-2.24.29-5.2 gtk2-immodule-vietnamese-32bit-2.24.29-5.2 gtk2-immodule-vietnamese-debuginfo-32bit-2.24.29-5.2 gtk2-immodule-xim-32bit-2.24.29-5.2 gtk2-immodule-xim-debuginfo-32bit-2.24.29-5.2 gtk2-immodules-tigrigna-32bit-2.24.29-5.2 gtk2-immodules-tigrigna-debuginfo-32bit-2.24.29-5.2 gtk2-tools-32bit-2.24.29-5.2 gtk2-tools-debuginfo-32bit-2.24.29-5.2 libgoa-1_0-0-32bit-3.16.5-4.2 libgoa-1_0-0-debuginfo-32bit-3.16.5-4.2 libgoa-backend-1_0-1-32bit-3.16.5-4.2 libgoa-backend-1_0-1-debuginfo-32bit-3.16.5-4.2 libgtk-2_0-0-32bit-2.24.29-5.2 libgtk-2_0-0-debuginfo-32bit-2.24.29-5.2 - openSUSE Leap 42.1 (noarch): gnome-documents-lang-3.16.5-7.2 gnome-online-accounts-lang-3.16.5-4.2 gtk2-branding-SLED-42.1-5.1 gtk2-branding-openSUSE-42.1-5.1 gtk2-branding-upstream-2.24.29-5.2 gtk2-data-2.24.29-5.2 gtk2-lang-2.24.29-5.2 gtk2-theme-clearlooks-2.20.2-22.2 gtk2-theme-crux-2.20.2-22.2 gtk2-theme-industrial-2.20.2-22.2 gtk2-theme-mist-2.20.2-22.2 gtk2-theme-redmond95-2.20.2-22.2 gtk2-theme-thinice-2.20.2-22.2 meld-3.14.2-4.2 meld-lang-3.14.2-4.2 References: https://bugzilla.suse.com/958808

1 0

openSUSE-OU-2015:2408-1: Optional update for docker
by maintenance＠opensuse.org 31 Dec '15

31 Dec '15

openSUSE Optional Update: Optional update for docker ______________________________________________________________________________ Announcement ID: openSUSE-OU-2015:2408-1 Rating: low References: #959405 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for docker fixes the following issues: * boo#959405: Add rules for auditd. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-979=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): docker-1.9.1-10.1 docker-debuginfo-1.9.1-10.1 docker-debugsource-1.9.1-10.1 - openSUSE Leap 42.1 (noarch): docker-bash-completion-1.9.1-10.1 docker-test-1.9.1-10.1 docker-zsh-completion-1.9.1-10.1 References: https://bugzilla.suse.com/959405

1 0

openSUSE-RU-2015:2407-1: moderate: Recommended update for openblas
by maintenance＠opensuse.org 31 Dec '15

31 Dec '15

openSUSE Recommended Update: Recommended update for openblas ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2407-1 Rating: moderate References: #956966 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openblas fixes the following issues: * boo#956966: Resolve a conflict when installing openblas-devel Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-980=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libopenblas_openmp-devel-0.2.14-6.1 libopenblas_openmp0-0.2.14-6.1 libopenblas_openmp0-debuginfo-0.2.14-6.1 libopenblas_pthreads-devel-0.2.14-6.1 libopenblas_pthreads0-0.2.14-6.1 libopenblas_pthreads0-debuginfo-0.2.14-6.1 libopenblas_serial-devel-0.2.14-6.1 libopenblas_serial0-0.2.14-6.1 libopenblas_serial0-debuginfo-0.2.14-6.1 libopenblaso0-0.2.14-6.1 libopenblasp0-0.2.14-6.1 openblas-debugsource-0.2.14-6.1 openblas-devel-0.2.14-6.1 openblas-devel-static-0.2.14-6.1 - openSUSE Leap 42.1 (noarch): openblas-devel-headers-0.2.14-6.1 References: https://bugzilla.suse.com/956966

1 0

openSUSE-SU-2015:2406-1: important: Security update for Mozilla Thunderbird
by opensuse-security＠opensuse.org 31 Dec '15

31 Dec '15

openSUSE Security Update: Security update for Mozilla Thunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2406-1 Rating: important References: #959277 Cross-References: CVE-2015-7201 CVE-2015-7205 CVE-2015-7210 CVE-2015-7212 CVE-2015-7213 CVE-2015-7214 CVE-2015-7222 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Mozilla Thunderbird was updated to 38.5.0 to fix multiple security issues. The following vulnerabilities were fixed: (boo#959277) * CVE-2015-7201: Miscellaneous memory safety hazards * CVE-2015-7210: Use-after-free in WebRTC when datachannel is used after being destroyed * CVE-2015-7212: Integer overflow allocating extremely large textures * CVE-2015-7205: Underflow through code inspection * CVE-2015-7213: Integer overflow in MP4 playback in 64-bit versions * CVE-2015-7222: Integer underflow and buffer overflow processing MP4 metadata in libstagefright * CVE-2015-7214: Cross-site reading attack through data and view-source URIs Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-977=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-977=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-977=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): MozillaThunderbird-38.5.0-7.2 MozillaThunderbird-buildsymbols-38.5.0-7.2 MozillaThunderbird-debuginfo-38.5.0-7.2 MozillaThunderbird-debugsource-38.5.0-7.2 MozillaThunderbird-devel-38.5.0-7.2 MozillaThunderbird-translations-common-38.5.0-7.2 MozillaThunderbird-translations-other-38.5.0-7.2 - openSUSE 13.2 (i586 x86_64): MozillaThunderbird-38.5.0-34.2 MozillaThunderbird-buildsymbols-38.5.0-34.2 MozillaThunderbird-debuginfo-38.5.0-34.2 MozillaThunderbird-debugsource-38.5.0-34.2 MozillaThunderbird-devel-38.5.0-34.2 MozillaThunderbird-translations-common-38.5.0-34.2 MozillaThunderbird-translations-other-38.5.0-34.2 - openSUSE 13.1 (i586 x86_64): MozillaThunderbird-38.5.0-70.71.1 MozillaThunderbird-buildsymbols-38.5.0-70.71.1 MozillaThunderbird-debuginfo-38.5.0-70.71.1 MozillaThunderbird-debugsource-38.5.0-70.71.1 MozillaThunderbird-devel-38.5.0-70.71.1 MozillaThunderbird-translations-common-38.5.0-70.71.1 MozillaThunderbird-translations-other-38.5.0-70.71.1 References: https://www.suse.com/security/cve/CVE-2015-7201.html https://www.suse.com/security/cve/CVE-2015-7205.html https://www.suse.com/security/cve/CVE-2015-7210.html https://www.suse.com/security/cve/CVE-2015-7212.html https://www.suse.com/security/cve/CVE-2015-7213.html https://www.suse.com/security/cve/CVE-2015-7214.html https://www.suse.com/security/cve/CVE-2015-7222.html https://bugzilla.suse.com/959277

1 0

openSUSE-SU-2015:2405-1: moderate: Security update for mozilla-nss
by opensuse-security＠opensuse.org 31 Dec '15

31 Dec '15

openSUSE Security Update: Security update for mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2405-1 Rating: moderate References: #959888 Cross-References: CVE-2015-7575 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update to mozilla-nss 3.20.2 fixes the following issues: * CVE-2015-7575: MD5 signatures accepted within TLS 1.2 ServerKeyExchange in server signature (boo#952810) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-978=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-978=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-978=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libfreebl3-3.20.2-6.1 libfreebl3-debuginfo-3.20.2-6.1 libsoftokn3-3.20.2-6.1 libsoftokn3-debuginfo-3.20.2-6.1 mozilla-nss-3.20.2-6.1 mozilla-nss-certs-3.20.2-6.1 mozilla-nss-certs-debuginfo-3.20.2-6.1 mozilla-nss-debuginfo-3.20.2-6.1 mozilla-nss-debugsource-3.20.2-6.1 mozilla-nss-devel-3.20.2-6.1 mozilla-nss-sysinit-3.20.2-6.1 mozilla-nss-sysinit-debuginfo-3.20.2-6.1 mozilla-nss-tools-3.20.2-6.1 mozilla-nss-tools-debuginfo-3.20.2-6.1 - openSUSE Leap 42.1 (x86_64): libfreebl3-32bit-3.20.2-6.1 libfreebl3-debuginfo-32bit-3.20.2-6.1 libsoftokn3-32bit-3.20.2-6.1 libsoftokn3-debuginfo-32bit-3.20.2-6.1 mozilla-nss-32bit-3.20.2-6.1 mozilla-nss-certs-32bit-3.20.2-6.1 mozilla-nss-certs-debuginfo-32bit-3.20.2-6.1 mozilla-nss-debuginfo-32bit-3.20.2-6.1 mozilla-nss-sysinit-32bit-3.20.2-6.1 mozilla-nss-sysinit-debuginfo-32bit-3.20.2-6.1 - openSUSE 13.2 (i586 x86_64): libfreebl3-3.20.2-22.1 libfreebl3-debuginfo-3.20.2-22.1 libsoftokn3-3.20.2-22.1 libsoftokn3-debuginfo-3.20.2-22.1 mozilla-nss-3.20.2-22.1 mozilla-nss-certs-3.20.2-22.1 mozilla-nss-certs-debuginfo-3.20.2-22.1 mozilla-nss-debuginfo-3.20.2-22.1 mozilla-nss-debugsource-3.20.2-22.1 mozilla-nss-devel-3.20.2-22.1 mozilla-nss-sysinit-3.20.2-22.1 mozilla-nss-sysinit-debuginfo-3.20.2-22.1 mozilla-nss-tools-3.20.2-22.1 mozilla-nss-tools-debuginfo-3.20.2-22.1 - openSUSE 13.2 (x86_64): libfreebl3-32bit-3.20.2-22.1 libfreebl3-debuginfo-32bit-3.20.2-22.1 libsoftokn3-32bit-3.20.2-22.1 libsoftokn3-debuginfo-32bit-3.20.2-22.1 mozilla-nss-32bit-3.20.2-22.1 mozilla-nss-certs-32bit-3.20.2-22.1 mozilla-nss-certs-debuginfo-32bit-3.20.2-22.1 mozilla-nss-debuginfo-32bit-3.20.2-22.1 mozilla-nss-sysinit-32bit-3.20.2-22.1 mozilla-nss-sysinit-debuginfo-32bit-3.20.2-22.1 - openSUSE 13.1 (i586 x86_64): libfreebl3-3.20.2-65.1 libfreebl3-debuginfo-3.20.2-65.1 libsoftokn3-3.20.2-65.1 libsoftokn3-debuginfo-3.20.2-65.1 mozilla-nss-3.20.2-65.1 mozilla-nss-certs-3.20.2-65.1 mozilla-nss-certs-debuginfo-3.20.2-65.1 mozilla-nss-debuginfo-3.20.2-65.1 mozilla-nss-debugsource-3.20.2-65.1 mozilla-nss-devel-3.20.2-65.1 mozilla-nss-sysinit-3.20.2-65.1 mozilla-nss-sysinit-debuginfo-3.20.2-65.1 mozilla-nss-tools-3.20.2-65.1 mozilla-nss-tools-debuginfo-3.20.2-65.1 - openSUSE 13.1 (x86_64): libfreebl3-32bit-3.20.2-65.1 libfreebl3-debuginfo-32bit-3.20.2-65.1 libsoftokn3-32bit-3.20.2-65.1 libsoftokn3-debuginfo-32bit-3.20.2-65.1 mozilla-nss-32bit-3.20.2-65.1 mozilla-nss-certs-32bit-3.20.2-65.1 mozilla-nss-certs-debuginfo-32bit-3.20.2-65.1 mozilla-nss-debuginfo-32bit-3.20.2-65.1 mozilla-nss-sysinit-32bit-3.20.2-65.1 mozilla-nss-sysinit-debuginfo-32bit-3.20.2-65.1 References: https://www.suse.com/security/cve/CVE-2015-7575.html https://bugzilla.suse.com/959888

1 0

openSUSE-SU-2015:2403-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 30 Dec '15

30 Dec '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2403-1 Rating: important References: #960317 Cross-References: CVE-2015-8459 CVE-2015-8460 CVE-2015-8634 CVE-2015-8635 CVE-2015-8636 CVE-2015-8638 CVE-2015-8639 CVE-2015-8640 CVE-2015-8641 CVE-2015-8642 CVE-2015-8643 CVE-2015-8644 CVE-2015-8645 CVE-2015-8646 CVE-2015-8647 CVE-2015-8648 CVE-2015-8649 CVE-2015-8650 CVE-2015-8651 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: This update for flash-player fixes the following issues: - Security update to 11.2.202.559 (boo#960317): * APSB16-01, CVE-2015-8459, CVE-2015-8460, CVE-2015-8634, CVE-2015-8635, CVE-2015-8636, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8644, CVE-2015-8645, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, CVE-2015-8650, CVE-2015-8651 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-976=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): flash-player-11.2.202.559-179.1 flash-player-gnome-11.2.202.559-179.1 flash-player-kde4-11.2.202.559-179.1 References: https://www.suse.com/security/cve/CVE-2015-8459.html https://www.suse.com/security/cve/CVE-2015-8460.html https://www.suse.com/security/cve/CVE-2015-8634.html https://www.suse.com/security/cve/CVE-2015-8635.html https://www.suse.com/security/cve/CVE-2015-8636.html https://www.suse.com/security/cve/CVE-2015-8638.html https://www.suse.com/security/cve/CVE-2015-8639.html https://www.suse.com/security/cve/CVE-2015-8640.html https://www.suse.com/security/cve/CVE-2015-8641.html https://www.suse.com/security/cve/CVE-2015-8642.html https://www.suse.com/security/cve/CVE-2015-8643.html https://www.suse.com/security/cve/CVE-2015-8644.html https://www.suse.com/security/cve/CVE-2015-8645.html https://www.suse.com/security/cve/CVE-2015-8646.html https://www.suse.com/security/cve/CVE-2015-8647.html https://www.suse.com/security/cve/CVE-2015-8648.html https://www.suse.com/security/cve/CVE-2015-8649.html https://www.suse.com/security/cve/CVE-2015-8650.html https://www.suse.com/security/cve/CVE-2015-8651.html https://bugzilla.suse.com/960317

1 0

openSUSE-SU-2015:2400-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 30 Dec '15

30 Dec '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2400-1 Rating: important References: #960317 Cross-References: CVE-2015-8459 CVE-2015-8460 CVE-2015-8634 CVE-2015-8635 CVE-2015-8636 CVE-2015-8638 CVE-2015-8639 CVE-2015-8640 CVE-2015-8641 CVE-2015-8642 CVE-2015-8643 CVE-2015-8644 CVE-2015-8645 CVE-2015-8646 CVE-2015-8647 CVE-2015-8648 CVE-2015-8649 CVE-2015-8650 CVE-2015-8651 Affected Products: openSUSE 13.2 NonFree openSUSE 13.1 NonFree ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: This update for flash-player fixes the following issues: - Security update to 11.2.202.559 (boo#960317): * APSB16-01, CVE-2015-8459, CVE-2015-8460, CVE-2015-8634, CVE-2015-8635, CVE-2015-8636, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8644, CVE-2015-8645, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, CVE-2015-8650, CVE-2015-8651 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2 NonFree: zypper in -t patch openSUSE-2015-975=1 - openSUSE 13.1 NonFree: zypper in -t patch openSUSE-2015-975=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 NonFree (i586 x86_64): flash-player-11.2.202.559-2.85.1 flash-player-gnome-11.2.202.559-2.85.1 flash-player-kde4-11.2.202.559-2.85.1 - openSUSE 13.1 NonFree (i586 x86_64): flash-player-11.2.202.559-150.1 flash-player-gnome-11.2.202.559-150.1 flash-player-kde4-11.2.202.559-150.1 References: https://www.suse.com/security/cve/CVE-2015-8459.html https://www.suse.com/security/cve/CVE-2015-8460.html https://www.suse.com/security/cve/CVE-2015-8634.html https://www.suse.com/security/cve/CVE-2015-8635.html https://www.suse.com/security/cve/CVE-2015-8636.html https://www.suse.com/security/cve/CVE-2015-8638.html https://www.suse.com/security/cve/CVE-2015-8639.html https://www.suse.com/security/cve/CVE-2015-8640.html https://www.suse.com/security/cve/CVE-2015-8641.html https://www.suse.com/security/cve/CVE-2015-8642.html https://www.suse.com/security/cve/CVE-2015-8643.html https://www.suse.com/security/cve/CVE-2015-8644.html https://www.suse.com/security/cve/CVE-2015-8645.html https://www.suse.com/security/cve/CVE-2015-8646.html https://www.suse.com/security/cve/CVE-2015-8647.html https://www.suse.com/security/cve/CVE-2015-8648.html https://www.suse.com/security/cve/CVE-2015-8649.html https://www.suse.com/security/cve/CVE-2015-8650.html https://www.suse.com/security/cve/CVE-2015-8651.html https://bugzilla.suse.com/960317

1 0

openSUSE-RU-2015:2398-1: Recommended update for clamav-database
by maintenance＠opensuse.org 29 Dec '15

29 Dec '15

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2398-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh December 28th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-974=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201512280000-29.1 References:

1 0

openSUSE-RU-2015:2397-1: moderate: Recommended update for docker
by maintenance＠opensuse.org 29 Dec '15

29 Dec '15

openSUSE Recommended Update: Recommended update for docker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2397-1 Rating: moderate References: #956434 #959405 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for docker provides version 1.9.1 with various fixes and improvements (boo#956434): - Runtime: + Do not prevent daemon from booting if images could not be restored + Force ipc mount to unmount on daemon shutdown/init + Turn ipc unmount errors into warnings + Fix `docker stats` performance regression + Clarify cryptic error message upon `docker logs` if `--log-driver=none + Fix seldom panics + Fix opq whiteouts problems for files with dot prefix + devicemapper: Try defaulting to xfs instead of ext4 for performance reasons + devicemapper: Fix displayed fs in docker info + Selinux: only relabel if user requested so with the `z` option + Do not make network calls when normalizing names - Client: + Fix `docker login` on windows + Fix bug with `docker inspect` output when not connected to daemon + Fix `docker inspect -f {{.hostconfig.dns}} somecontainer - Builder: + Fix regression with symlink behavior in add/copy - Networking: + Allow passing a network id as an argument for `--net + Fix connect to host and prevent disconnect from host for `host` network + Fix `--fixed-cidr` issue when gateway ip falls in ip-range and ip-range is not the first block in the network + Restore deterministic `ipv6` generation from `mac` address on default `bridge` network + Allow port-mapping only for endpoints created on docker run + Fixed an endpoint delete issue with a possible stale sbox - Distribution: + Correct parent chain in v2 push when v1compatibility files on the disk are inconsistent. In addition, the following improvements were added to the package: * boo#959405: Add rules for auditd. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-973=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (x86_64): docker-1.9.1-49.1 docker-debuginfo-1.9.1-49.1 docker-debugsource-1.9.1-49.1 - openSUSE 13.2 (noarch): docker-bash-completion-1.9.1-49.1 docker-test-1.9.1-49.1 docker-zsh-completion-1.9.1-49.1 References: https://bugzilla.suse.com/956434 https://bugzilla.suse.com/959405

1 0

openSUSE-RU-2015:2396-1: moderate: Recommended update for kdelibs4, kaffeine
by maintenance＠opensuse.org 29 Dec '15

29 Dec '15

openSUSE Recommended Update: Recommended update for kdelibs4, kaffeine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2396-1 Rating: moderate References: #858018 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Kaffeine and kdelibs4 were updated to fix the following issues: * boo#858018 - kaffeine fails to install additional codecs - adapt ksuseinstall to changes in zypper's output. This fixes the installation of packages. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-972=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-972=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): kaffeine-1.2.2-27.3.1 kaffeine-debuginfo-1.2.2-27.3.1 kaffeine-debugsource-1.2.2-27.3.1 - openSUSE 13.1 (i586 x86_64): kaffeine-1.2.2-25.3.1 kaffeine-debuginfo-1.2.2-25.3.1 kaffeine-debugsource-1.2.2-25.3.1 kdelibs4-4.11.5-491.1 kdelibs4-branding-upstream-4.11.5-491.1 kdelibs4-core-4.11.5-491.1 kdelibs4-core-debuginfo-4.11.5-491.1 kdelibs4-debuginfo-4.11.5-491.1 kdelibs4-debugsource-4.11.5-491.1 kdelibs4-doc-4.11.5-491.1 kdelibs4-doc-debuginfo-4.11.5-491.1 libkde4-4.11.5-491.1 libkde4-debuginfo-4.11.5-491.1 libkde4-devel-4.11.5-491.1 libkdecore4-4.11.5-491.1 libkdecore4-debuginfo-4.11.5-491.1 libkdecore4-devel-4.11.5-491.1 libkdecore4-devel-debuginfo-4.11.5-491.1 libksuseinstall-devel-4.11.5-491.1 libksuseinstall1-4.11.5-491.1 libksuseinstall1-debuginfo-4.11.5-491.1 - openSUSE 13.1 (x86_64): libkde4-32bit-4.11.5-491.1 libkde4-debuginfo-32bit-4.11.5-491.1 libkdecore4-32bit-4.11.5-491.1 libkdecore4-debuginfo-32bit-4.11.5-491.1 libksuseinstall1-32bit-4.11.5-491.1 libksuseinstall1-debuginfo-32bit-4.11.5-491.1 - openSUSE 13.1 (noarch): kdelibs4-apidocs-4.11.5-491.1 References: https://bugzilla.suse.com/858018

1 0