December 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2015:2349-1: moderate: Security update for compat-openssl098
by opensuse-security＠opensuse.org 23 Dec '15

23 Dec '15

openSUSE Security Update: Security update for compat-openssl098 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2349-1 Rating: moderate References: #952099 #957812 Cross-References: CVE-2015-3195 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for compat-openssl098 fixes the following issues: Security issue fixed: - CVE-2015-3195: When presented with a malformed X509_ATTRIBUTE structure OpenSSL would leak memory. This structure is used by the PKCS#7 and CMS routines so any application which reads PKCS#7 or CMS data from untrusted sources is affected. SSL/TLS is not affected. (bsc#957812) Non security issue fixed: - Prevent segfault in s_client with invalid options (bsc#952099) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-940=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): compat-openssl098-debugsource-0.9.8j-6.1 libopenssl0_9_8-0.9.8j-6.1 libopenssl0_9_8-debuginfo-0.9.8j-6.1 - openSUSE Leap 42.1 (x86_64): libopenssl0_9_8-32bit-0.9.8j-6.1 libopenssl0_9_8-debuginfo-32bit-0.9.8j-6.1 References: https://www.suse.com/security/cve/CVE-2015-3195.html https://bugzilla.suse.com/952099 https://bugzilla.suse.com/957812

1 0

openSUSE-RU-2015:2348-1: Recommended update for clamav-database
by maintenance＠opensuse.org 23 Dec '15

23 Dec '15

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2348-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh December 21st. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-941=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201512210000-26.1 References:

1 0

openSUSE-SU-2015:2347-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 23 Dec '15

23 Dec '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2347-1 Rating: important References: #959458 Cross-References: CVE-2015-6792 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Chromium was updated to 47.0.2525.106 to fix security issues. Vulnerabilities were fixed under the following collective identifier: * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-939=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-47.0.2526.106-38.1 chromedriver-debuginfo-47.0.2526.106-38.1 chromium-47.0.2526.106-38.1 chromium-debuginfo-47.0.2526.106-38.1 chromium-debugsource-47.0.2526.106-38.1 chromium-desktop-gnome-47.0.2526.106-38.1 chromium-desktop-kde-47.0.2526.106-38.1 chromium-ffmpegsumo-47.0.2526.106-38.1 chromium-ffmpegsumo-debuginfo-47.0.2526.106-38.1 References: https://www.suse.com/security/cve/CVE-2015-6792.html https://bugzilla.suse.com/959458

1 0

openSUSE-SU-2015:2346-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 23 Dec '15

23 Dec '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2346-1 Rating: important References: #959458 Cross-References: CVE-2015-6792 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Chromium was updated to 47.0.2525.106 to fix security issues. Vulnerabilities were fixed under the following collective identifier: * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-939=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-939=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-939=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): chromedriver-47.0.2526.106-10.1 chromedriver-debuginfo-47.0.2526.106-10.1 chromium-47.0.2526.106-10.1 chromium-debuginfo-47.0.2526.106-10.1 chromium-debugsource-47.0.2526.106-10.1 chromium-desktop-gnome-47.0.2526.106-10.1 chromium-desktop-kde-47.0.2526.106-10.1 chromium-ffmpegsumo-47.0.2526.106-10.1 chromium-ffmpegsumo-debuginfo-47.0.2526.106-10.1 - openSUSE 13.2 (i586 x86_64): chromedriver-47.0.2526.106-64.1 chromedriver-debuginfo-47.0.2526.106-64.1 chromium-47.0.2526.106-64.1 chromium-debuginfo-47.0.2526.106-64.1 chromium-debugsource-47.0.2526.106-64.1 chromium-desktop-gnome-47.0.2526.106-64.1 chromium-desktop-kde-47.0.2526.106-64.1 chromium-ffmpegsumo-47.0.2526.106-64.1 chromium-ffmpegsumo-debuginfo-47.0.2526.106-64.1 - openSUSE 13.1 (i586 x86_64): chromedriver-47.0.2526.106-119.1 chromedriver-debuginfo-47.0.2526.106-119.1 chromium-47.0.2526.106-119.1 chromium-debuginfo-47.0.2526.106-119.1 chromium-debugsource-47.0.2526.106-119.1 chromium-desktop-gnome-47.0.2526.106-119.1 chromium-desktop-kde-47.0.2526.106-119.1 chromium-ffmpegsumo-47.0.2526.106-119.1 chromium-ffmpegsumo-debuginfo-47.0.2526.106-119.1 References: https://www.suse.com/security/cve/CVE-2015-6792.html https://bugzilla.suse.com/959458

1 0

openSUSE-SU-2015:2345-1: moderate: Security update for quassel
by opensuse-security＠opensuse.org 23 Dec '15

23 Dec '15

openSUSE Security Update: Security update for quassel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2345-1 Rating: moderate References: #958928 Cross-References: CVE-2015-8547 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Quassel was updated to fix a remote DoS security issue. The following vulnerability was fixed: * CVE-2015-8547: Remote DoS in Quassel core Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-938=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-938=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-938=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): quassel-base-0.12.2-7.1 quassel-client-0.12.2-7.1 quassel-client-debuginfo-0.12.2-7.1 quassel-core-0.12.2-7.1 quassel-core-debuginfo-0.12.2-7.1 quassel-debugsource-0.12.2-7.1 quassel-mono-0.12.2-7.1 quassel-mono-debuginfo-0.12.2-7.1 - openSUSE 13.2 (i586 x86_64): quassel-base-0.10.0-3.13.1 quassel-client-0.10.0-3.13.1 quassel-client-debuginfo-0.10.0-3.13.1 quassel-core-0.10.0-3.13.1 quassel-core-debuginfo-0.10.0-3.13.1 quassel-debugsource-0.10.0-3.13.1 quassel-mono-0.10.0-3.13.1 quassel-mono-debuginfo-0.10.0-3.13.1 - openSUSE 13.1 (i586 x86_64): quassel-base-0.9.2-25.1 quassel-client-0.9.2-25.1 quassel-client-debuginfo-0.9.2-25.1 quassel-core-0.9.2-25.1 quassel-core-debuginfo-0.9.2-25.1 quassel-debugsource-0.9.2-25.1 quassel-mono-0.9.2-25.1 quassel-mono-debuginfo-0.9.2-25.1 References: https://www.suse.com/security/cve/CVE-2015-8547.html https://bugzilla.suse.com/958928

1 0

openSUSE-RU-2015:2343-1: moderate: Recommended update for shim-TW
by maintenance＠opensuse.org 22 Dec '15

22 Dec '15

openSUSE Recommended Update: Recommended update for shim-TW ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2343-1 Rating: moderate References: #950569 #950801 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for shim-TW fixes the following issues: - acquired updated signature from Microsoft - Add shim-bsc950569-fix-cryptlib-va-functions.patch to fix the definition of va functions to avoid the potential crash (boo#950569) - Update shim-opensuse-cert-prompt.patch to avoid setting NULL to MokListRT (boo#950801) - Drop shim-fix-mokmanager-sections.patch as we are using the newer binutils now - Refresh shim-change-debug-file-path.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-937=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): shim-0.9-4.1 References: https://bugzilla.suse.com/950569 https://bugzilla.suse.com/950801

1 0

openSUSE-RU-2015:2333-1: moderate: Recommended update for bluedevil
by maintenance＠opensuse.org 21 Dec '15

21 Dec '15

openSUSE Recommended Update: Recommended update for bluedevil ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2333-1 Rating: moderate References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for bluedevil fixes the following issues and brings new features: - Update to 2.1.1 * Last release based on kde4. * Bugfixes: - Don't try to infinitely kill monolithic when it fails (bko343682) - Fix directly opening files from obexftp (eg. images in gwenview) - Fix one crash in kded module (bko342581) - Fix obexftp browse files on old s60 devices (bko342259) - Update to 2.1 * Remember powered state of all adapters, kde#337193 * Monolithic (bluetooth icon) will now be correctly hidden in system tray when all adapters are powered off, kde#341768 * Monolithic will now be removed from system tray when there are no adapters * Action to send files over bluetooth will now be shown only for file that can actually be sent (only local files) * Pin in pairing wizard will now be accepted only after clicking "Matches" button * Kio_obexftp should now better handle errors and correctly reconnect after losing connection, kde#321560 * Kio_bluetooth will not crash when trying to access invalid device - Update to 2.0 final: * Full bluez5 support - Update to 2.0 rc1 - first version officially supporting bluez5 - Remove the obex-data-server as runtime require. this is no longer needed with Bluez5 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-932=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): bluedevil-2.1.1-5.1 bluedevil-debuginfo-2.1.1-5.1 bluedevil-debugsource-2.1.1-5.1 libbluedevil-debugsource-2.1-3.1 libbluedevil-devel-2.1-3.1 libbluedevil2-2.1-3.1 libbluedevil2-debuginfo-2.1-3.1 - openSUSE 13.1 (noarch): bluedevil-lang-2.1.1-5.1 References:

1 0

openSUSE-RU-2015:2332-1: moderate: Recommended update for libspectre
by maintenance＠opensuse.org 21 Dec '15

21 Dec '15

openSUSE Recommended Update: Recommended update for libspectre ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2332-1 Rating: moderate References: #898327 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: libspectre was updated to fix an issue in evince. The following issue was fixed: * boo#898327: Landcape postscript files are not rendered in evince, fix documents being rotated incorrectly Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-934=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libspectre-debugsource-0.2.7-7.3.1 libspectre-devel-0.2.7-7.3.1 libspectre1-0.2.7-7.3.1 libspectre1-debuginfo-0.2.7-7.3.1 References: https://bugzilla.suse.com/898327

1 0

openSUSE-RU-2015:2331-1: moderate: Recommended update for xembed-sni-proxy
by maintenance＠opensuse.org 21 Dec '15

21 Dec '15

openSUSE Recommended Update: Recommended update for xembed-sni-proxy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2331-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for xembed-sni-proxy fixes the following issues: - Added kde355684.patch (kde#355684) - Update to 0.0.1git~20151029~11e8648 * Fix work of Wine applications. * Fix transparent icons in runtime. * Disable session manager * Fix quit if we fail to claim - Update to 0.0.1git~20151005~77d78c3 * Don't try to resize embedded window: Fixed chromium and tuxguitar Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-936=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xembed-sni-proxy-0.0.1git~20151104~ded1538-3.1 xembed-sni-proxy-debuginfo-0.0.1git~20151104~ded1538-3.1 xembed-sni-proxy-debugsource-0.0.1git~20151104~ded1538-3.1 References:

1 0

openSUSE-RU-2015:2330-1: moderate: Recommended update for python-pysaml2
by maintenance＠opensuse.org 21 Dec '15

21 Dec '15

openSUSE Recommended Update: Recommended update for python-pysaml2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2330-1 Rating: moderate References: #958514 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-pysaml2 fixes the following issues: - Add pycrypto/pyopenssl dependency (boo#958514) - Move python-repoze.who from recommends to requires. it's needed. - Add missing requires The dependency python-repoze.who is also supplied as a package. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-935=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): python-pysaml2-2.4.0-4.1 python-repoze.who-2.2-2.1 References: https://bugzilla.suse.com/958514

1 0