December 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:2395-1: moderate: Recommended update for zypper
by maintenance＠opensuse.org 29 Dec '15

29 Dec '15

openSUSE Recommended Update: Recommended update for zypper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2395-1 Rating: moderate References: #793424 #893833 #955615 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This recommended update provides version 1.11.44 of zypper: - lu/lp: fix different data returned in xml and text output (boo#793424, boo#893833) - pchk: also report needed but locked patches - Fix tab-completion if zypper is defined as an alias (boo#955615) - Fix #83 incomplete bash completion for --type Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-971=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): zypper-1.11.44-31.1 zypper-debuginfo-1.11.44-31.1 zypper-debugsource-1.11.44-31.1 - openSUSE 13.2 (noarch): zypper-aptitude-1.11.44-31.1 zypper-log-1.11.44-31.1 References: https://bugzilla.suse.com/793424 https://bugzilla.suse.com/893833 https://bugzilla.suse.com/955615

1 0

openSUSE-SU-2015:2392-1: important: Security update for grub2
by opensuse-security＠opensuse.org 29 Dec '15

29 Dec '15

openSUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2392-1 Rating: important References: #956631 Cross-References: CVE-2015-8370 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for grub2 fixes the following issue: - CVE-2015-8370: Fix for overflow in grub_password_get and grub_user_get functions (bsc#956631) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-970=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): grub2-1.98-14.1 grub2-debuginfo-1.98-14.1 grub2-debugsource-1.98-14.1 References: https://www.suse.com/security/cve/CVE-2015-8370.html https://bugzilla.suse.com/956631

1 0

openSUSE-SU-2015:2391-1: important: Security update for bind
by opensuse-security＠opensuse.org 29 Dec '15

29 Dec '15

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2391-1 Rating: important References: #958861 Cross-References: CVE-2015-8000 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following security issue: - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses (boo#958861). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-969=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): bind-9.9.4P2-72.1 bind-chrootenv-9.9.4P2-72.1 bind-debuginfo-9.9.4P2-72.1 bind-debugsource-9.9.4P2-72.1 bind-devel-9.9.4P2-72.1 bind-libs-9.9.4P2-72.1 bind-libs-debuginfo-9.9.4P2-72.1 bind-lwresd-9.9.4P2-72.1 bind-lwresd-debuginfo-9.9.4P2-72.1 bind-utils-9.9.4P2-72.1 bind-utils-debuginfo-9.9.4P2-72.1 - openSUSE Evergreen 11.4 (x86_64): bind-libs-32bit-9.9.4P2-72.1 bind-libs-debuginfo-32bit-9.9.4P2-72.1 - openSUSE Evergreen 11.4 (noarch): bind-doc-9.9.4P2-72.1 - openSUSE Evergreen 11.4 (ia64): bind-libs-debuginfo-x86-9.9.4P2-72.1 bind-libs-x86-9.9.4P2-72.1 References: https://www.suse.com/security/cve/CVE-2015-8000.html https://bugzilla.suse.com/958861

1 0

openSUSE-RU-2015:2389-1: moderate: Recommended update for kdebase4-runtime, kmix
by maintenance＠opensuse.org 29 Dec '15

29 Dec '15

openSUSE Recommended Update: Recommended update for kdebase4-runtime, kmix ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2389-1 Rating: moderate References: #878685 #896933 #954531 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: kdebase4-runtime and kmix were updated to the version 15.08.3 from KDE Applications (boo#954531), fixing the following bugs: * boo#896933: Kmix - popping up of Unknown Application: Audio-volume-change stream * boo#878685: KMIX doesnt contain Event Sounds slider Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-968=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-968=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): kdebase4-runtime-15.08.3-19.1 kdebase4-runtime-branding-upstream-15.08.3-19.1 kdebase4-runtime-debuginfo-15.08.3-19.1 kdebase4-runtime-debugsource-15.08.3-19.1 kdebase4-runtime-devel-15.08.3-19.1 kmix-15.08.3-19.1 kmix-debuginfo-15.08.3-19.1 kmix-debugsource-15.08.3-19.1 plasma-theme-oxygen-15.08.3-19.1 - openSUSE 13.1 (i586 x86_64): kdebase4-runtime-4.11.5-485.1 kdebase4-runtime-branding-upstream-4.11.5-485.1 kdebase4-runtime-debuginfo-4.11.5-485.1 kdebase4-runtime-debugsource-4.11.5-485.1 kdebase4-runtime-devel-4.11.5-485.1 kmix-4.11.5-193.1 kmix-debuginfo-4.11.5-193.1 kmix-debugsource-4.11.5-193.1 plasma-theme-oxygen-4.11.5-485.1 References: https://bugzilla.suse.com/878685 https://bugzilla.suse.com/896933 https://bugzilla.suse.com/954531

1 0

openSUSE-RU-2015:2388-1: Recommended update for Ninja-ide
by maintenance＠opensuse.org 29 Dec '15

29 Dec '15

openSUSE Recommended Update: Recommended update for Ninja-ide ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2388-1 Rating: low References: #958149 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Ninja-ide was updated to fix an installation issue. * boo#95814: Fix for installation requirement python-setuptools Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-967=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): ninja-ide-2.3-8.1 References: https://bugzilla.suse.com/958149

1 0

openSUSE-SU-2015:2380-1: important: Security update for xulrunner
by opensuse-security＠opensuse.org 28 Dec '15

28 Dec '15

openSUSE Security Update: Security update for xulrunner ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2380-1 Rating: important References: #959277 Cross-References: CVE-2015-7201 CVE-2015-7205 CVE-2015-7210 CVE-2015-7212 CVE-2015-7213 CVE-2015-7214 CVE-2015-7222 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Xulrunner was updated to 38.5.0 to fix several security issues. The following vulnerabilities were fixed (boo#959277): * CVE-2015-7201: Miscellaneous memory safety hazards * CVE-2015-7210: Use-after-free in WebRTC when datachannel is used after being destroyed * CVE-2015-7212: Integer overflow allocating extremely large textures * CVE-2015-7205: Underflow through code inspection * CVE-2015-7213: Integer overflow in MP4 playback in 64-bit versions * CVE-2015-7222: Integer underflow and buffer overflow processing MP4 metadata in libstagefright * CVE-2015-7214: Cross-site reading attack through data and view-source URIs Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-966=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xulrunner-38.5.0-7.1 xulrunner-debuginfo-38.5.0-7.1 xulrunner-debugsource-38.5.0-7.1 xulrunner-devel-38.5.0-7.1 - openSUSE Leap 42.1 (x86_64): xulrunner-32bit-38.5.0-7.1 xulrunner-debuginfo-32bit-38.5.0-7.1 References: https://www.suse.com/security/cve/CVE-2015-7201.html https://www.suse.com/security/cve/CVE-2015-7205.html https://www.suse.com/security/cve/CVE-2015-7210.html https://www.suse.com/security/cve/CVE-2015-7212.html https://www.suse.com/security/cve/CVE-2015-7213.html https://www.suse.com/security/cve/CVE-2015-7214.html https://www.suse.com/security/cve/CVE-2015-7222.html https://bugzilla.suse.com/959277

1 0

openSUSE-RU-2015:2379-1: moderate: Recommended update for kcm5-fcitx
by maintenance＠opensuse.org 28 Dec '15

28 Dec '15

openSUSE Recommended Update: Recommended update for kcm5-fcitx ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2379-1 Rating: moderate References: #951609 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kcm5-fcitx fixes the following issues: * boo#951609: fcitx-configtool crashes on KDE, fix the still-existing crash at clicking "Only Show Currnet Language" checkbox Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-964=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kcm5-fcitx-debugsource-0.5.2-4.1 kf5-kcm-fcitx-0.5.2-4.1 kf5-kcm-fcitx-debuginfo-0.5.2-4.1 - openSUSE Leap 42.1 (noarch): kf5-kcm-fcitx-icons-0.5.2-4.1 References: https://bugzilla.suse.com/951609

1 0

openSUSE-RU-2015:2378-1: Recommended update for systemd-presets-branding-openSUSE
by maintenance＠opensuse.org 28 Dec '15

28 Dec '15

openSUSE Recommended Update: Recommended update for systemd-presets-branding-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2378-1 Rating: low References: #958880 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for systemd-presets-branding-openSUSE fixes the following issues: * boo#958880: warning message relating to missing service files -Add display-manager.service to defaults presets Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-965=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-965=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): systemd-presets-branding-openSUSE-0.3.0-25.1 - openSUSE 13.2 (noarch): systemd-presets-branding-openSUSE-0.3.0-12.7.1 References: https://bugzilla.suse.com/958880

1 0

openSUSE-RU-2015:2377-1: moderate: Recommended update for vlc
by maintenance＠opensuse.org 27 Dec '15

27 Dec '15

openSUSE Recommended Update: Recommended update for vlc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2377-1 Rating: moderate References: #956769 #959100 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for vlc fixes the following issues: * boo#959100: Enable libupnp support * boo#956769: Mouse pointer disappears in VLC window and no fullscreen controls Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-952=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libvlc5-2.2.1-15.1 libvlc5-debuginfo-2.2.1-15.1 libvlccore8-2.2.1-15.1 libvlccore8-debuginfo-2.2.1-15.1 vlc-2.2.1-15.1 vlc-debuginfo-2.2.1-15.1 vlc-debugsource-2.2.1-15.1 vlc-devel-2.2.1-15.1 vlc-gnome-2.2.1-15.1 vlc-gnome-debuginfo-2.2.1-15.1 vlc-noX-2.2.1-15.1 vlc-noX-debuginfo-2.2.1-15.1 vlc-qt-2.2.1-15.1 vlc-qt-debuginfo-2.2.1-15.1 - openSUSE Leap 42.1 (noarch): vlc-noX-lang-2.2.1-15.1 References: https://bugzilla.suse.com/956769 https://bugzilla.suse.com/959100

1 0

openSUSE-SU-2015:2376-1: moderate: Security update for krb5
by opensuse-security＠opensuse.org 27 Dec '15

27 Dec '15

openSUSE Security Update: Security update for krb5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2376-1 Rating: moderate References: #954204 Cross-References: CVE-2015-2698 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The krb5 package was updated to fix the following security issue: - CVE-2015-2698: Fixed a memory corruption regression introduced by resolving of CVE-2015-2698 (bsc#954204). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-961=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): krb5-1.12.1-24.1 krb5-client-1.12.1-24.1 krb5-client-debuginfo-1.12.1-24.1 krb5-debuginfo-1.12.1-24.1 krb5-debugsource-1.12.1-24.1 krb5-devel-1.12.1-24.1 krb5-doc-1.12.1-24.1 krb5-mini-1.12.1-24.1 krb5-mini-debuginfo-1.12.1-24.1 krb5-mini-debugsource-1.12.1-24.1 krb5-mini-devel-1.12.1-24.1 krb5-plugin-kdb-ldap-1.12.1-24.1 krb5-plugin-kdb-ldap-debuginfo-1.12.1-24.1 krb5-plugin-preauth-otp-1.12.1-24.1 krb5-plugin-preauth-otp-debuginfo-1.12.1-24.1 krb5-plugin-preauth-pkinit-1.12.1-24.1 krb5-plugin-preauth-pkinit-debuginfo-1.12.1-24.1 krb5-server-1.12.1-24.1 krb5-server-debuginfo-1.12.1-24.1 - openSUSE Leap 42.1 (x86_64): krb5-32bit-1.12.1-24.1 krb5-debuginfo-32bit-1.12.1-24.1 krb5-devel-32bit-1.12.1-24.1 References: https://www.suse.com/security/cve/CVE-2015-2698.html https://bugzilla.suse.com/954204

1 0