April 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2015:0807-1: important: Security update for DirectFB
by opensuse-security＠opensuse.org 30 Apr '15

30 Apr '15

openSUSE Security Update: Security update for DirectFB ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0807-1 Rating: important References: #878345 #878349 Cross-References: CVE-2014-2977 CVE-2014-2978 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: DirectFB was updated to fix two security issues. The following vulnerabilities were fixed: * CVE-2014-2977: Multiple integer signedness errors could allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, which triggers a stack-based buffer overflow. * CVE-2014-2978: Remote attackers could cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, which triggers an out-of-bounds write. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-340=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-340=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): DirectFB-1.7.5-3.3.1 DirectFB-Mesa-1.7.5-3.3.1 DirectFB-Mesa-debuginfo-1.7.5-3.3.1 DirectFB-debuginfo-1.7.5-3.3.1 DirectFB-debugsource-1.7.5-3.3.1 DirectFB-devel-1.7.5-3.3.1 DirectFB-doc-1.7.5-3.3.1 DirectFB-libSDL-1.7.5-3.3.1 DirectFB-libSDL-debuginfo-1.7.5-3.3.1 DirectFB-libvncclient-1.7.5-3.3.1 DirectFB-libvncclient-debuginfo-1.7.5-3.3.1 lib++dfb-1_7-5-1.7.5-3.3.1 lib++dfb-1_7-5-debuginfo-1.7.5-3.3.1 lib++dfb-devel-1.7.5-3.3.1 libdirectfb-1_7-5-1.7.5-3.3.1 libdirectfb-1_7-5-debuginfo-1.7.5-3.3.1 - openSUSE 13.2 (x86_64): DirectFB-devel-32bit-1.7.5-3.3.1 libdirectfb-1_7-5-32bit-1.7.5-3.3.1 libdirectfb-1_7-5-debuginfo-32bit-1.7.5-3.3.1 - openSUSE 13.1 (i586 x86_64): DirectFB-1.6.3-4.3.1 DirectFB-Mesa-1.6.3-4.3.1 DirectFB-Mesa-debuginfo-1.6.3-4.3.1 DirectFB-debuginfo-1.6.3-4.3.1 DirectFB-debugsource-1.6.3-4.3.1 DirectFB-devel-1.6.3-4.3.1 DirectFB-doc-1.6.3-4.3.1 DirectFB-libSDL-1.6.3-4.3.1 DirectFB-libSDL-debuginfo-1.6.3-4.3.1 DirectFB-libvncclient-1.6.3-4.3.1 DirectFB-libvncclient-debuginfo-1.6.3-4.3.1 libdirectfb-1_6-0-1.6.3-4.3.1 libdirectfb-1_6-0-debuginfo-1.6.3-4.3.1 - openSUSE 13.1 (x86_64): DirectFB-devel-32bit-1.6.3-4.3.1 libdirectfb-1_6-0-32bit-1.6.3-4.3.1 libdirectfb-1_6-0-debuginfo-32bit-1.6.3-4.3.1 References: https://www.suse.com/security/cve/CVE-2014-2977.html https://www.suse.com/security/cve/CVE-2014-2978.html https://bugzilla.suse.com/878345 https://bugzilla.suse.com/878349

1 0

openSUSE-RU-2015:0806-1: moderate: Recommended update for poppler
by maintenance＠opensuse.org 30 Apr '15

30 Apr '15

openSUSE Recommended Update: Recommended update for poppler ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0806-1 Rating: moderate References: #927466 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update fixes the following issues for poppler - Map Standard/Expert encoding ligatures to AGLFN names. [bnc#927466] Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-339=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-339=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libpoppler-cpp0-0.26.5-3.1 libpoppler-cpp0-debuginfo-0.26.5-3.1 libpoppler-devel-0.26.5-3.1 libpoppler-glib-devel-0.26.5-3.1 libpoppler-glib8-0.26.5-3.1 libpoppler-glib8-debuginfo-0.26.5-3.1 libpoppler-qt4-4-0.26.5-3.1 libpoppler-qt4-4-debuginfo-0.26.5-3.1 libpoppler-qt4-devel-0.26.5-3.1 libpoppler-qt5-1-0.26.5-3.1 libpoppler-qt5-1-debuginfo-0.26.5-3.1 libpoppler-qt5-devel-0.26.5-3.1 libpoppler46-0.26.5-3.1 libpoppler46-debuginfo-0.26.5-3.1 poppler-debugsource-0.26.5-3.1 poppler-qt-debugsource-0.26.5-3.1 poppler-qt5-debugsource-0.26.5-3.1 poppler-tools-0.26.5-3.1 poppler-tools-debuginfo-0.26.5-3.1 typelib-1_0-Poppler-0_18-0.26.5-3.1 - openSUSE 13.2 (x86_64): libpoppler-cpp0-32bit-0.26.5-3.1 libpoppler-cpp0-debuginfo-32bit-0.26.5-3.1 libpoppler-glib8-32bit-0.26.5-3.1 libpoppler-glib8-debuginfo-32bit-0.26.5-3.1 libpoppler-qt4-4-32bit-0.26.5-3.1 libpoppler-qt4-4-debuginfo-32bit-0.26.5-3.1 libpoppler-qt5-1-32bit-0.26.5-3.1 libpoppler-qt5-1-debuginfo-32bit-0.26.5-3.1 libpoppler46-32bit-0.26.5-3.1 libpoppler46-debuginfo-32bit-0.26.5-3.1 - openSUSE 13.1 (i586 x86_64): libpoppler-cpp0-0.24.3-15.1 libpoppler-cpp0-debuginfo-0.24.3-15.1 libpoppler-devel-0.24.3-15.1 libpoppler-glib-devel-0.24.3-15.1 libpoppler-glib8-0.24.3-15.1 libpoppler-glib8-debuginfo-0.24.3-15.1 libpoppler-qt4-4-0.24.3-15.1 libpoppler-qt4-4-debuginfo-0.24.3-15.1 libpoppler-qt4-devel-0.24.3-15.1 libpoppler43-0.24.3-15.1 libpoppler43-debuginfo-0.24.3-15.1 poppler-debugsource-0.24.3-15.1 poppler-qt-debugsource-0.24.3-15.1 poppler-tools-0.24.3-15.1 poppler-tools-debuginfo-0.24.3-15.1 typelib-1_0-Poppler-0_18-0.24.3-15.1 References: https://bugzilla.suse.com/927466

1 0

openSUSE-RU-2015:0800-1: moderate: Recommended udpate for rsyslog
by maintenance＠opensuse.org 29 Apr '15

29 Apr '15

openSUSE Recommended Update: Recommended udpate for rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0800-1 Rating: moderate References: #925512 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended udpate for rsyslog fixes the following issue: - Adjusted apparmor profile to prevent aa-genprof failures (bnc#925512) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-338=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): rsyslog-8.4.2-3.1 rsyslog-debuginfo-8.4.2-3.1 rsyslog-debugsource-8.4.2-3.1 rsyslog-diag-tools-8.4.2-3.1 rsyslog-diag-tools-debuginfo-8.4.2-3.1 rsyslog-doc-8.4.2-3.1 rsyslog-module-dbi-8.4.2-3.1 rsyslog-module-dbi-debuginfo-8.4.2-3.1 rsyslog-module-elasticsearch-8.4.2-3.1 rsyslog-module-elasticsearch-debuginfo-8.4.2-3.1 rsyslog-module-gcrypt-8.4.2-3.1 rsyslog-module-gcrypt-debuginfo-8.4.2-3.1 rsyslog-module-gssapi-8.4.2-3.1 rsyslog-module-gssapi-debuginfo-8.4.2-3.1 rsyslog-module-gtls-8.4.2-3.1 rsyslog-module-gtls-debuginfo-8.4.2-3.1 rsyslog-module-guardtime-8.4.2-3.1 rsyslog-module-guardtime-debuginfo-8.4.2-3.1 rsyslog-module-mmnormalize-8.4.2-3.1 rsyslog-module-mmnormalize-debuginfo-8.4.2-3.1 rsyslog-module-mysql-8.4.2-3.1 rsyslog-module-mysql-debuginfo-8.4.2-3.1 rsyslog-module-pgsql-8.4.2-3.1 rsyslog-module-pgsql-debuginfo-8.4.2-3.1 rsyslog-module-relp-8.4.2-3.1 rsyslog-module-relp-debuginfo-8.4.2-3.1 rsyslog-module-snmp-8.4.2-3.1 rsyslog-module-snmp-debuginfo-8.4.2-3.1 rsyslog-module-udpspoof-8.4.2-3.1 rsyslog-module-udpspoof-debuginfo-8.4.2-3.1 References: https://bugzilla.suse.com/925512

1 0

openSUSE-SU-2015:0799-1: moderate: Security update for curl
by opensuse-security＠opensuse.org 29 Apr '15

29 Apr '15

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0799-1 Rating: moderate References: #927556 #927607 #927608 #927746 Cross-References: CVE-2015-3143 CVE-2015-3144 CVE-2015-3145 CVE-2015-3148 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: curl was updated to fix four security issues. The following vulnerabilities were fixed: * CVE-2015-3143: curl could re-use NTML authenticateds connections * CVE-2015-3144: curl could access memory out of bounds with zero length host names * CVE-2015-3145: curl cookie parser could access memory out of boundary * CVE-2015-3148: curl could treat Negotiate as not connection-oriented Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-336=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-336=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): curl-7.42.0-7.1 curl-debuginfo-7.42.0-7.1 curl-debugsource-7.42.0-7.1 libcurl-devel-7.42.0-7.1 libcurl4-7.42.0-7.1 libcurl4-debuginfo-7.42.0-7.1 - openSUSE 13.2 (x86_64): libcurl4-32bit-7.42.0-7.1 libcurl4-debuginfo-32bit-7.42.0-7.1 - openSUSE 13.1 (i586 x86_64): curl-7.42.0-2.38.1 curl-debuginfo-7.42.0-2.38.1 curl-debugsource-7.42.0-2.38.1 libcurl-devel-7.42.0-2.38.1 libcurl4-7.42.0-2.38.1 libcurl4-debuginfo-7.42.0-2.38.1 - openSUSE 13.1 (x86_64): libcurl4-32bit-7.42.0-2.38.1 libcurl4-debuginfo-32bit-7.42.0-2.38.1 References: https://www.suse.com/security/cve/CVE-2015-3143.html https://www.suse.com/security/cve/CVE-2015-3144.html https://www.suse.com/security/cve/CVE-2015-3145.html https://www.suse.com/security/cve/CVE-2015-3148.html https://bugzilla.suse.com/927556 https://bugzilla.suse.com/927607 https://bugzilla.suse.com/927608 https://bugzilla.suse.com/927746

1 0

openSUSE-SU-2015:0798-1: moderate: Security update for python-Pillow
by opensuse-security＠opensuse.org 29 Apr '15

29 Apr '15

openSUSE Security Update: Security update for python-Pillow ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0798-1 Rating: moderate References: #921566 Cross-References: CVE-2014-3589 CVE-2014-3598 CVE-2014-9601 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: python-pillow was updated to 2.7.0 to fix security issues and bugs. The following vulnerabilities were fixed: * CVE-2014-9601: Remote attackers could cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed. * CVE-2014-3598: Remote attackers could cause a denial of service using specially crafted image files via Jpeg2KImagePlugin * CVE-2014-3589: Remote attackers could cause a denial of service using specially crafted image files via IcnsImagePlugin Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-337=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): python-Pillow-2.8.1-3.3.1 python-Pillow-debuginfo-2.8.1-3.3.1 python-Pillow-debugsource-2.8.1-3.3.1 python-Pillow-tk-2.8.1-3.3.1 python-Pillow-tk-debuginfo-2.8.1-3.3.1 References: https://www.suse.com/security/cve/CVE-2014-3589.html https://www.suse.com/security/cve/CVE-2014-3598.html https://www.suse.com/security/cve/CVE-2014-9601.html https://bugzilla.suse.com/921566

1 0

openSUSE-RU-2015:0786-1: Recommended update for KDE Frameworks to version 5.9.0
by maintenance＠opensuse.org 28 Apr '15

28 Apr '15

openSUSE Recommended Update: Recommended update for KDE Frameworks to version 5.9.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0786-1 Rating: low References: #924074 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 5.9.0 of KDE Frameworks. For a detailed description of all changes and fixes, please refer to https://www.kde.org/announcements/kde-frameworks-5.9.0.php Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-335=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): attica-qt5-debugsource-5.9.0-18.1 attica-qt5-devel-5.9.0-18.1 breeze-5.2.2-18.1 breeze-debugsource-5.2.2-18.1 breeze4-style-5.2.2-18.1 breeze4-style-debuginfo-5.2.2-18.1 breeze4-style-debugsource-5.2.2-18.1 breeze5-decoration-5.2.2-18.1 breeze5-decoration-debuginfo-5.2.2-18.1 breeze5-style-5.2.2-18.1 breeze5-style-debuginfo-5.2.2-18.1 drkonqi5-5.2.2-26.1 drkonqi5-debuginfo-5.2.2-26.1 extra-cmake-modules-5.9.0-18.1 frameworkintegration-debugsource-5.9.0-18.1 frameworkintegration-devel-5.9.0-18.1 frameworkintegration-plugin-5.9.0-18.1 frameworkintegration-plugin-debuginfo-5.9.0-18.1 kactivities5-5.9.0-18.1 kactivities5-debuginfo-5.9.0-18.1 kactivities5-debugsource-5.9.0-18.1 kactivities5-devel-5.9.0-18.1 kactivities5-imports-5.9.0-18.1 kactivities5-imports-debuginfo-5.9.0-18.1 kapidox-5.9.0-18.1 karchive-debugsource-5.9.0-18.1 karchive-devel-5.9.0-18.1 kauth-debugsource-5.9.0-18.1 kauth-devel-5.9.0-18.1 kbookmarks-debugsource-5.9.0-18.1 kbookmarks-devel-5.9.0-18.1 kcmutils-debugsource-5.9.0-18.1 kcmutils-devel-5.9.0-18.1 kcodecs-debugsource-5.9.0-18.1 kcodecs-devel-5.9.0-18.1 kcompletion-debugsource-5.9.0-18.1 kcompletion-devel-5.9.0-18.1 kconf_update5-5.9.0-18.1 kconf_update5-debuginfo-5.9.0-18.1 kconfig-debugsource-5.9.0-18.1 kconfig-devel-5.9.0-18.1 kconfig-devel-debuginfo-5.9.0-18.1 kconfigwidgets-debugsource-5.9.0-18.1 kconfigwidgets-devel-5.9.0-18.1 kcoreaddons-5.9.0-18.1 kcoreaddons-debugsource-5.9.0-18.1 kcoreaddons-devel-5.9.0-18.1 kcoreaddons-devel-debuginfo-5.9.0-18.1 kcrash-debugsource-5.9.0-18.1 kcrash-devel-5.9.0-18.1 kdbusaddons-debugsource-5.9.0-18.1 kdbusaddons-devel-5.9.0-18.1 kdbusaddons-tools-5.9.0-18.1 kdbusaddons-tools-debuginfo-5.9.0-18.1 kdeclarative-components-5.9.0-18.1 kdeclarative-components-debuginfo-5.9.0-18.1 kdeclarative-debugsource-5.9.0-18.1 kdeclarative-devel-5.9.0-18.1 kdeclarative-tools-5.9.0-18.1 kdeclarative-tools-debuginfo-5.9.0-18.1 kded-5.9.0-18.1 kded-debuginfo-5.9.0-18.1 kded-debugsource-5.9.0-18.1 kded-devel-5.9.0-18.1 kdelibs4support-5.9.0-18.1 kdelibs4support-debuginfo-5.9.0-18.1 kdelibs4support-debugsource-5.9.0-18.1 kdelibs4support-devel-5.9.0-18.1 kdesignerplugin-5.9.0-18.1 kdesignerplugin-debuginfo-5.9.0-18.1 kdesignerplugin-debugsource-5.9.0-18.1 kdesignerplugin-devel-5.9.0-18.1 kdesu-debugsource-5.9.0-18.1 kdesu-devel-5.9.0-18.1 kdewebkit-debugsource-5.9.0-18.1 kdewebkit-devel-5.9.0-18.1 kdnssd-framework-debugsource-5.9.0-18.1 kdnssd-framework-devel-5.9.0-18.1 kdoctools-5.9.0-18.1 kdoctools-debuginfo-5.9.0-18.1 kdoctools-debugsource-5.9.0-18.1 kdoctools-devel-5.9.0-18.1 kemoticons-debugsource-5.9.0-18.1 kemoticons-devel-5.9.0-18.1 kglobalaccel-debugsource-5.9.0-18.1 kglobalaccel-devel-5.9.0-18.1 kglobalaccel5-5.9.0-18.1 kglobalaccel5-debuginfo-5.9.0-18.1 kguiaddons-debugsource-5.9.0-18.1 kguiaddons-devel-5.9.0-18.1 khtml-debugsource-5.9.0-18.1 khtml-devel-5.9.0-18.1 ki18n-debugsource-5.9.0-18.1 ki18n-devel-5.9.0-18.1 kiconthemes-debugsource-5.9.0-18.1 kiconthemes-devel-5.9.0-18.1 kiconthemes-devel-debuginfo-5.9.0-18.1 kidletime-debugsource-5.9.0-18.1 kidletime-devel-5.9.0-18.1 kimageformats-5.9.0-18.1 kimageformats-debuginfo-5.9.0-18.1 kimageformats-debugsource-5.9.0-18.1 kinit-5.9.0-18.1 kinit-debuginfo-5.9.0-18.1 kinit-debugsource-5.9.0-18.1 kinit-devel-5.9.0-18.1 kio-5.9.0-18.1 kio-core-5.9.0-18.1 kio-core-debuginfo-5.9.0-18.1 kio-debuginfo-5.9.0-18.1 kio-debugsource-5.9.0-18.1 kio-devel-5.9.0-18.1 kitemmodels-debugsource-5.9.0-18.1 kitemmodels-devel-5.9.0-18.1 kitemviews-debugsource-5.9.0-18.1 kitemviews-devel-5.9.0-18.1 kjobwidgets-debugsource-5.9.0-18.1 kjobwidgets-devel-5.9.0-18.1 kjs-debugsource-5.9.0-18.1 kjs-devel-5.9.0-18.1 kjs-devel-debuginfo-5.9.0-18.1 kjsembed-debugsource-5.9.0-18.1 kjsembed-devel-5.9.0-18.1 kjsembed-devel-debuginfo-5.9.0-18.1 kmediaplayer-debugsource-5.9.0-18.1 kmediaplayer-devel-5.9.0-18.1 knewstuff-debugsource-5.9.0-18.1 knewstuff-devel-5.9.0-18.1 knotifications-debugsource-5.9.0-18.1 knotifications-devel-5.9.0-18.1 knotifyconfig-debugsource-5.9.0-18.1 knotifyconfig-devel-5.9.0-18.1 kpackage-5.9.0-12.1 kpackage-debuginfo-5.9.0-12.1 kpackage-debugsource-5.9.0-12.1 kpackage-devel-5.9.0-12.1 kparts-debugsource-5.9.0-18.1 kparts-devel-5.9.0-18.1 kpeople5-5.9.0-5.1 kpeople5-debuginfo-5.9.0-5.1 kpeople5-debugsource-5.9.0-5.1 kpeople5-devel-5.9.0-5.1 kpeople5-lang-5.9.0-5.1 kplotting-debugsource-5.9.0-18.1 kplotting-devel-5.9.0-18.1 kpty-debugsource-5.9.0-18.1 kpty-devel-5.9.0-18.1 kross-5.9.0-18.1 kross-debuginfo-5.9.0-18.1 kross-debugsource-5.9.0-18.1 kross-devel-5.9.0-18.1 kross-devel-debuginfo-5.9.0-18.1 krunner-debugsource-5.9.0-18.1 krunner-devel-5.9.0-18.1 kservice-5.9.0-18.1 kservice-debuginfo-5.9.0-18.1 kservice-debugsource-5.9.0-18.1 kservice-devel-5.9.0-18.1 kssl-5.9.0-18.1 kssl-debuginfo-5.9.0-18.1 ktexteditor-5.9.0-18.1 ktexteditor-debuginfo-5.9.0-18.1 ktexteditor-debugsource-5.9.0-18.1 ktexteditor-devel-5.9.0-18.1 ktextwidgets-debugsource-5.9.0-18.1 ktextwidgets-devel-5.9.0-18.1 kunitconversion-debugsource-5.9.0-18.1 kunitconversion-devel-5.9.0-18.1 kwallet-debugsource-5.9.0-18.1 kwallet-devel-5.9.0-18.1 kwalletd5-5.9.0-18.1 kwalletd5-debuginfo-5.9.0-18.1 kwidgetsaddons-debugsource-5.9.0-18.1 kwidgetsaddons-devel-5.9.0-18.1 kwindowsystem-debugsource-5.9.0-19.1 kwindowsystem-devel-5.9.0-19.1 kxmlgui-debugsource-5.9.0-18.1 kxmlgui-devel-5.9.0-18.1 kxmlrpcclient5-debugsource-5.9.0-5.1 kxmlrpcclient5-devel-5.9.0-5.1 libKF5Activities5-5.9.0-18.1 libKF5Activities5-debuginfo-5.9.0-18.1 libKF5Archive5-5.9.0-18.1 libKF5Archive5-debuginfo-5.9.0-18.1 libKF5Attica5-5.9.0-18.1 libKF5Attica5-debuginfo-5.9.0-18.1 libKF5Auth5-5.9.0-18.1 libKF5Auth5-debuginfo-5.9.0-18.1 libKF5Bookmarks5-5.9.0-18.1 libKF5Bookmarks5-debuginfo-5.9.0-18.1 libKF5Codecs5-5.9.0-18.1 libKF5Codecs5-debuginfo-5.9.0-18.1 libKF5Completion5-5.9.0-18.1 libKF5Completion5-debuginfo-5.9.0-18.1 libKF5ConfigCore5-5.9.0-18.1 libKF5ConfigCore5-debuginfo-5.9.0-18.1 libKF5ConfigGui5-5.9.0-18.1 libKF5ConfigGui5-debuginfo-5.9.0-18.1 libKF5ConfigWidgets5-5.9.0-18.1 libKF5ConfigWidgets5-debuginfo-5.9.0-18.1 libKF5CoreAddons5-5.9.0-18.1 libKF5CoreAddons5-debuginfo-5.9.0-18.1 libKF5Crash5-5.9.0-18.1 libKF5Crash5-debuginfo-5.9.0-18.1 libKF5DBusAddons5-5.9.0-18.1 libKF5DBusAddons5-debuginfo-5.9.0-18.1 libKF5DNSSD5-5.9.0-18.1 libKF5DNSSD5-debuginfo-5.9.0-18.1 libKF5Declarative5-5.9.0-18.1 libKF5Declarative5-debuginfo-5.9.0-18.1 libKF5Emoticons5-5.9.0-18.1 libKF5Emoticons5-debuginfo-5.9.0-18.1 libKF5GlobalAccel5-5.9.0-18.1 libKF5GlobalAccel5-debuginfo-5.9.0-18.1 libKF5GuiAddons5-5.9.0-18.1 libKF5GuiAddons5-debuginfo-5.9.0-18.1 libKF5I18n5-5.9.0-18.1 libKF5I18n5-debuginfo-5.9.0-18.1 libKF5IconThemes5-5.9.0-18.1 libKF5IconThemes5-debuginfo-5.9.0-18.1 libKF5IdleTime5-5.9.0-18.1 libKF5IdleTime5-debuginfo-5.9.0-18.1 libKF5ItemModels5-5.9.0-18.1 libKF5ItemModels5-debuginfo-5.9.0-18.1 libKF5ItemViews5-5.9.0-18.1 libKF5ItemViews5-debuginfo-5.9.0-18.1 libKF5JS5-5.9.0-18.1 libKF5JS5-debuginfo-5.9.0-18.1 libKF5JSApi5-5.9.0-18.1 libKF5JSApi5-debuginfo-5.9.0-18.1 libKF5JobWidgets5-5.9.0-18.1 libKF5JobWidgets5-debuginfo-5.9.0-18.1 libKF5JsEmbed5-5.9.0-18.1 libKF5JsEmbed5-debuginfo-5.9.0-18.1 libKF5KCMUtils5-5.9.0-18.1 libKF5KCMUtils5-debuginfo-5.9.0-18.1 libKF5KDELibs4Support5-5.9.0-18.1 libKF5KDELibs4Support5-debuginfo-5.9.0-18.1 libKF5KHtml5-5.9.0-18.1 libKF5KHtml5-debuginfo-5.9.0-18.1 libKF5MediaPlayer5-5.9.0-18.1 libKF5MediaPlayer5-debuginfo-5.9.0-18.1 libKF5ModemManagerQt-debugsource-5.9.0-18.1 libKF5ModemManagerQt-devel-5.9.0-18.1 libKF5ModemManagerQt6-5.9.0-18.1 libKF5ModemManagerQt6-debuginfo-5.9.0-18.1 libKF5NetworkManagerQt-debugsource-5.9.0-18.1 libKF5NetworkManagerQt-devel-5.9.0-18.1 libKF5NetworkManagerQt6-5.9.0-18.1 libKF5NetworkManagerQt6-debuginfo-5.9.0-18.1 libKF5NewStuff5-5.9.0-18.1 libKF5NewStuff5-debuginfo-5.9.0-18.1 libKF5Notifications5-5.9.0-18.1 libKF5Notifications5-debuginfo-5.9.0-18.1 libKF5NotifyConfig5-5.9.0-18.1 libKF5NotifyConfig5-debuginfo-5.9.0-18.1 libKF5Parts5-5.9.0-18.1 libKF5Parts5-debuginfo-5.9.0-18.1 libKF5Plotting5-5.9.0-18.1 libKF5Plotting5-debuginfo-5.9.0-18.1 libKF5Pty5-5.9.0-18.1 libKF5Pty5-debuginfo-5.9.0-18.1 libKF5QuickAddons5-5.9.0-18.1 libKF5QuickAddons5-debuginfo-5.9.0-18.1 libKF5Runner5-5.9.0-18.1 libKF5Runner5-debuginfo-5.9.0-18.1 libKF5Solid5-5.9.0-18.1 libKF5Solid5-debuginfo-5.9.0-18.1 libKF5SonnetCore5-5.9.0-18.1 libKF5SonnetCore5-debuginfo-5.9.0-18.1 libKF5SonnetUi5-5.9.0-18.1 libKF5SonnetUi5-debuginfo-5.9.0-18.1 libKF5Style5-5.9.0-18.1 libKF5Style5-debuginfo-5.9.0-18.1 libKF5Su5-5.9.0-18.1 libKF5Su5-debuginfo-5.9.0-18.1 libKF5TextWidgets5-5.9.0-18.1 libKF5TextWidgets5-debuginfo-5.9.0-18.1 libKF5ThreadWeaver5-5.9.0-18.1 libKF5ThreadWeaver5-debuginfo-5.9.0-18.1 libKF5UnitConversion5-5.9.0-18.1 libKF5UnitConversion5-debuginfo-5.9.0-18.1 libKF5Wallet5-5.9.0-18.1 libKF5Wallet5-debuginfo-5.9.0-18.1 libKF5WebKit5-5.9.0-18.1 libKF5WebKit5-debuginfo-5.9.0-18.1 libKF5WidgetsAddons5-5.9.0-18.1 libKF5WidgetsAddons5-debuginfo-5.9.0-18.1 libKF5WindowSystem5-5.9.0-19.1 libKF5WindowSystem5-debuginfo-5.9.0-19.1 libKF5XmlGui5-5.9.0-18.1 libKF5XmlGui5-debuginfo-5.9.0-18.1 libKF5XmlRpcClient5-5.9.0-5.1 libKF5XmlRpcClient5-debuginfo-5.9.0-5.1 libkwalletbackend5-5-5.9.0-18.1 libkwalletbackend5-5-debuginfo-5.9.0-18.1 plasma-framework-5.9.0-20.1 plasma-framework-components-5.9.0-20.1 plasma-framework-components-debuginfo-5.9.0-20.1 plasma-framework-debuginfo-5.9.0-20.1 plasma-framework-debugsource-5.9.0-20.1 plasma-framework-devel-5.9.0-20.1 plasma-framework-private-5.9.0-20.1 plasma-framework-private-debuginfo-5.9.0-20.1 plasma-nm5-5.2.2-20.1 plasma-nm5-debuginfo-5.2.2-20.1 plasma-nm5-debugsource-5.2.2-20.1 plasma-nm5-l2tp-5.2.2-20.1 plasma-nm5-l2tp-debuginfo-5.2.2-20.1 plasma-nm5-openconnect-5.2.2-20.1 plasma-nm5-openconnect-debuginfo-5.2.2-20.1 plasma-nm5-openswan-5.2.2-20.1 plasma-nm5-openswan-debuginfo-5.2.2-20.1 plasma-nm5-openvpn-5.2.2-20.1 plasma-nm5-openvpn-debuginfo-5.2.2-20.1 plasma-nm5-pptp-5.2.2-20.1 plasma-nm5-pptp-debuginfo-5.2.2-20.1 plasma-nm5-strongswan-5.2.2-20.1 plasma-nm5-strongswan-debuginfo-5.2.2-20.1 plasma-nm5-vpnc-5.2.2-20.1 plasma-nm5-vpnc-debuginfo-5.2.2-20.1 plasma5-desktop-5.2.2-23.2 plasma5-desktop-branding-openSUSE-13.2-14.1 plasma5-desktop-branding-upstream-5.2.2-23.2 plasma5-desktop-debuginfo-5.2.2-23.2 plasma5-desktop-debugsource-5.2.2-23.2 plasma5-openSUSE-13.2-14.1 plasma5-openSUSE-debugsource-13.2-14.1 plasma5-workspace-5.2.2-26.1 plasma5-workspace-branding-openSUSE-13.2-14.1 plasma5-workspace-branding-openSUSE-debuginfo-13.2-14.1 plasma5-workspace-branding-upstream-5.2.2-26.1 plasma5-workspace-debuginfo-5.2.2-26.1 plasma5-workspace-debugsource-5.2.2-26.1 plasma5-workspace-devel-5.2.2-26.1 plasma5-workspace-libs-5.2.2-26.1 plasma5-workspace-libs-debuginfo-5.2.2-26.1 solid-debugsource-5.9.0-18.1 solid-devel-5.9.0-18.1 solid-imports-5.9.0-18.1 solid-imports-debuginfo-5.9.0-18.1 solid-tools-5.9.0-18.1 solid-tools-debuginfo-5.9.0-18.1 sonnet-debugsource-5.9.0-18.1 sonnet-devel-5.9.0-18.1 threadweaver-debugsource-5.9.0-18.1 threadweaver-devel-5.9.0-18.1 - openSUSE 13.2 (x86_64): attica-qt5-devel-32bit-5.9.0-18.1 frameworkintegration-devel-32bit-5.9.0-18.1 frameworkintegration-plugin-32bit-5.9.0-18.1 frameworkintegration-plugin-debuginfo-32bit-5.9.0-18.1 kactivities5-devel-32bit-5.9.0-18.1 karchive-devel-32bit-5.9.0-18.1 kauth-devel-32bit-5.9.0-18.1 kbookmarks-devel-32bit-5.9.0-18.1 kcmutils-devel-32bit-5.9.0-18.1 kcodecs-devel-32bit-5.9.0-18.1 kcompletion-devel-32bit-5.9.0-18.1 kconfig-devel-32bit-5.9.0-18.1 kconfig-devel-debuginfo-32bit-5.9.0-18.1 kconfigwidgets-devel-32bit-5.9.0-18.1 kcoreaddons-devel-32bit-5.9.0-18.1 kcoreaddons-devel-debuginfo-32bit-5.9.0-18.1 kcrash-devel-32bit-5.9.0-18.1 kdbusaddons-devel-32bit-5.9.0-18.1 kdeclarative-components-32bit-5.9.0-18.1 kdeclarative-components-debuginfo-32bit-5.9.0-18.1 kdeclarative-devel-32bit-5.9.0-18.1 kdelibs4support-32bit-5.9.0-18.1 kdelibs4support-debuginfo-32bit-5.9.0-18.1 kdelibs4support-devel-32bit-5.9.0-18.1 kdesu-devel-32bit-5.9.0-18.1 kdewebkit-devel-32bit-5.9.0-18.1 kdnssd-framework-devel-32bit-5.9.0-18.1 kemoticons-devel-32bit-5.9.0-18.1 kglobalaccel-devel-32bit-5.9.0-18.1 kguiaddons-devel-32bit-5.9.0-18.1 khtml-devel-32bit-5.9.0-18.1 ki18n-devel-32bit-5.9.0-18.1 kiconthemes-devel-32bit-5.9.0-18.1 kiconthemes-devel-debuginfo-32bit-5.9.0-18.1 kidletime-devel-32bit-5.9.0-18.1 kimageformats-32bit-5.9.0-18.1 kimageformats-debuginfo-32bit-5.9.0-18.1 kinit-32bit-5.9.0-18.1 kinit-debuginfo-32bit-5.9.0-18.1 kio-32bit-5.9.0-18.1 kio-core-32bit-5.9.0-18.1 kio-core-debuginfo-32bit-5.9.0-18.1 kio-debuginfo-32bit-5.9.0-18.1 kio-devel-32bit-5.9.0-18.1 kitemmodels-devel-32bit-5.9.0-18.1 kitemviews-devel-32bit-5.9.0-18.1 kjobwidgets-devel-32bit-5.9.0-18.1 kjs-devel-32bit-5.9.0-18.1 kjs-devel-debuginfo-32bit-5.9.0-18.1 kjsembed-devel-32bit-5.9.0-18.1 kjsembed-devel-debuginfo-32bit-5.9.0-18.1 kmediaplayer-devel-32bit-5.9.0-18.1 knewstuff-devel-32bit-5.9.0-18.1 knotifications-devel-32bit-5.9.0-18.1 knotifyconfig-devel-32bit-5.9.0-18.1 kpackage-32bit-5.9.0-12.1 kpackage-debuginfo-32bit-5.9.0-12.1 kpackage-devel-32bit-5.9.0-12.1 kparts-devel-32bit-5.9.0-18.1 kpeople5-32bit-5.9.0-5.1 kpeople5-debuginfo-32bit-5.9.0-5.1 kpeople5-devel-32bit-5.9.0-5.1 kplotting-devel-32bit-5.9.0-18.1 kpty-devel-32bit-5.9.0-18.1 kross-32bit-5.9.0-18.1 kross-debuginfo-32bit-5.9.0-18.1 kross-devel-32bit-5.9.0-18.1 kross-devel-debuginfo-32bit-5.9.0-18.1 krunner-devel-32bit-5.9.0-18.1 kservice-32bit-5.9.0-18.1 kservice-debuginfo-32bit-5.9.0-18.1 kservice-devel-32bit-5.9.0-18.1 ktexteditor-32bit-5.9.0-18.1 ktexteditor-debuginfo-32bit-5.9.0-18.1 ktexteditor-devel-32bit-5.9.0-18.1 ktextwidgets-devel-32bit-5.9.0-18.1 kunitconversion-devel-32bit-5.9.0-18.1 kwallet-devel-32bit-5.9.0-18.1 kwidgetsaddons-devel-32bit-5.9.0-18.1 kwindowsystem-devel-32bit-5.9.0-19.1 kxmlgui-devel-32bit-5.9.0-18.1 kxmlrpcclient5-devel-32bit-5.9.0-5.1 libKF5Activities5-32bit-5.9.0-18.1 libKF5Activities5-debuginfo-32bit-5.9.0-18.1 libKF5Archive5-32bit-5.9.0-18.1 libKF5Archive5-debuginfo-32bit-5.9.0-18.1 libKF5Attica5-32bit-5.9.0-18.1 libKF5Attica5-debuginfo-32bit-5.9.0-18.1 libKF5Auth5-32bit-5.9.0-18.1 libKF5Auth5-debuginfo-32bit-5.9.0-18.1 libKF5Bookmarks5-32bit-5.9.0-18.1 libKF5Bookmarks5-debuginfo-32bit-5.9.0-18.1 libKF5Codecs5-32bit-5.9.0-18.1 libKF5Codecs5-debuginfo-32bit-5.9.0-18.1 libKF5Completion5-32bit-5.9.0-18.1 libKF5Completion5-debuginfo-32bit-5.9.0-18.1 libKF5ConfigCore5-32bit-5.9.0-18.1 libKF5ConfigCore5-debuginfo-32bit-5.9.0-18.1 libKF5ConfigGui5-32bit-5.9.0-18.1 libKF5ConfigGui5-debuginfo-32bit-5.9.0-18.1 libKF5ConfigWidgets5-32bit-5.9.0-18.1 libKF5ConfigWidgets5-debuginfo-32bit-5.9.0-18.1 libKF5CoreAddons5-32bit-5.9.0-18.1 libKF5CoreAddons5-debuginfo-32bit-5.9.0-18.1 libKF5Crash5-32bit-5.9.0-18.1 libKF5Crash5-debuginfo-32bit-5.9.0-18.1 libKF5DBusAddons5-32bit-5.9.0-18.1 libKF5DBusAddons5-debuginfo-32bit-5.9.0-18.1 libKF5DNSSD5-32bit-5.9.0-18.1 libKF5DNSSD5-debuginfo-32bit-5.9.0-18.1 libKF5Declarative5-32bit-5.9.0-18.1 libKF5Declarative5-debuginfo-32bit-5.9.0-18.1 libKF5Emoticons5-32bit-5.9.0-18.1 libKF5Emoticons5-debuginfo-32bit-5.9.0-18.1 libKF5GlobalAccel5-32bit-5.9.0-18.1 libKF5GlobalAccel5-debuginfo-32bit-5.9.0-18.1 libKF5GuiAddons5-32bit-5.9.0-18.1 libKF5GuiAddons5-debuginfo-32bit-5.9.0-18.1 libKF5I18n5-32bit-5.9.0-18.1 libKF5I18n5-debuginfo-32bit-5.9.0-18.1 libKF5IconThemes5-32bit-5.9.0-18.1 libKF5IconThemes5-debuginfo-32bit-5.9.0-18.1 libKF5IdleTime5-32bit-5.9.0-18.1 libKF5IdleTime5-debuginfo-32bit-5.9.0-18.1 libKF5ItemModels5-32bit-5.9.0-18.1 libKF5ItemModels5-debuginfo-32bit-5.9.0-18.1 libKF5ItemViews5-32bit-5.9.0-18.1 libKF5ItemViews5-debuginfo-32bit-5.9.0-18.1 libKF5JS5-32bit-5.9.0-18.1 libKF5JS5-debuginfo-32bit-5.9.0-18.1 libKF5JSApi5-32bit-5.9.0-18.1 libKF5JSApi5-debuginfo-32bit-5.9.0-18.1 libKF5JobWidgets5-32bit-5.9.0-18.1 libKF5JobWidgets5-debuginfo-32bit-5.9.0-18.1 libKF5JsEmbed5-32bit-5.9.0-18.1 libKF5JsEmbed5-debuginfo-32bit-5.9.0-18.1 libKF5KCMUtils5-32bit-5.9.0-18.1 libKF5KCMUtils5-debuginfo-32bit-5.9.0-18.1 libKF5KDELibs4Support5-32bit-5.9.0-18.1 libKF5KDELibs4Support5-debuginfo-32bit-5.9.0-18.1 libKF5KHtml5-32bit-5.9.0-18.1 libKF5KHtml5-debuginfo-32bit-5.9.0-18.1 libKF5MediaPlayer5-32bit-5.9.0-18.1 libKF5MediaPlayer5-debuginfo-32bit-5.9.0-18.1 libKF5NetworkManagerQt-devel-32bit-5.9.0-18.1 libKF5NetworkManagerQt6-32bit-5.9.0-18.1 libKF5NetworkManagerQt6-debuginfo-32bit-5.9.0-18.1 libKF5NewStuff5-32bit-5.9.0-18.1 libKF5NewStuff5-debuginfo-32bit-5.9.0-18.1 libKF5Notifications5-32bit-5.9.0-18.1 libKF5Notifications5-debuginfo-32bit-5.9.0-18.1 libKF5NotifyConfig5-32bit-5.9.0-18.1 libKF5NotifyConfig5-debuginfo-32bit-5.9.0-18.1 libKF5Parts5-32bit-5.9.0-18.1 libKF5Parts5-debuginfo-32bit-5.9.0-18.1 libKF5Plotting5-32bit-5.9.0-18.1 libKF5Plotting5-debuginfo-32bit-5.9.0-18.1 libKF5Pty5-32bit-5.9.0-18.1 libKF5Pty5-debuginfo-32bit-5.9.0-18.1 libKF5QuickAddons5-32bit-5.9.0-18.1 libKF5QuickAddons5-debuginfo-32bit-5.9.0-18.1 libKF5Runner5-32bit-5.9.0-18.1 libKF5Runner5-debuginfo-32bit-5.9.0-18.1 libKF5Solid5-32bit-5.9.0-18.1 libKF5Solid5-debuginfo-32bit-5.9.0-18.1 libKF5SonnetCore5-32bit-5.9.0-18.1 libKF5SonnetCore5-debuginfo-32bit-5.9.0-18.1 libKF5SonnetUi5-32bit-5.9.0-18.1 libKF5SonnetUi5-debuginfo-32bit-5.9.0-18.1 libKF5Style5-32bit-5.9.0-18.1 libKF5Style5-debuginfo-32bit-5.9.0-18.1 libKF5Su5-32bit-5.9.0-18.1 libKF5Su5-debuginfo-32bit-5.9.0-18.1 libKF5TextWidgets5-32bit-5.9.0-18.1 libKF5TextWidgets5-debuginfo-32bit-5.9.0-18.1 libKF5ThreadWeaver5-32bit-5.9.0-18.1 libKF5ThreadWeaver5-debuginfo-32bit-5.9.0-18.1 libKF5UnitConversion5-32bit-5.9.0-18.1 libKF5UnitConversion5-debuginfo-32bit-5.9.0-18.1 libKF5Wallet5-32bit-5.9.0-18.1 libKF5Wallet5-debuginfo-32bit-5.9.0-18.1 libKF5WebKit5-32bit-5.9.0-18.1 libKF5WebKit5-debuginfo-32bit-5.9.0-18.1 libKF5WidgetsAddons5-32bit-5.9.0-18.1 libKF5WidgetsAddons5-debuginfo-32bit-5.9.0-18.1 libKF5WindowSystem5-32bit-5.9.0-19.1 libKF5WindowSystem5-debuginfo-32bit-5.9.0-19.1 libKF5XmlGui5-32bit-5.9.0-18.1 libKF5XmlGui5-debuginfo-32bit-5.9.0-18.1 libKF5XmlRpcClient5-32bit-5.9.0-5.1 libKF5XmlRpcClient5-debuginfo-32bit-5.9.0-5.1 libkwalletbackend5-5-32bit-5.9.0-18.1 libkwalletbackend5-5-debuginfo-32bit-5.9.0-18.1 plasma-framework-32bit-5.9.0-20.1 plasma-framework-components-32bit-5.9.0-20.1 plasma-framework-components-debuginfo-32bit-5.9.0-20.1 plasma-framework-debuginfo-32bit-5.9.0-20.1 plasma-framework-devel-32bit-5.9.0-20.1 plasma-framework-private-32bit-5.9.0-20.1 plasma-framework-private-debuginfo-32bit-5.9.0-20.1 plasma5-workspace-libs-32bit-5.2.2-26.1 plasma5-workspace-libs-debuginfo-32bit-5.2.2-26.1 solid-devel-32bit-5.9.0-18.1 sonnet-devel-32bit-5.9.0-18.1 threadweaver-devel-32bit-5.9.0-18.1 - openSUSE 13.2 (noarch): breeze5-cursors-5.2.2-18.1 breeze5-icons-5.2.2-18.1 breeze5-style-lang-5.2.2-18.1 breeze5-wallpapers-5.2.2-18.1 extra-cmake-modules-doc-5.9.0-18.1 kcoreaddons-lang-5.9.0-18.1 kded-lang-5.9.0-18.1 kdelibs4support-lang-5.9.0-18.1 kdesignerplugin-lang-5.9.0-18.1 kdoctools-lang-5.9.0-18.1 kinit-lang-5.9.0-18.1 kio-lang-5.9.0-18.1 kpackage-lang-5.9.0-12.1 kross-lang-5.9.0-18.1 kservice-lang-5.9.0-18.1 ktexteditor-lang-5.9.0-18.1 kwalletd5-lang-5.9.0-18.1 libKF5Activities5-lang-5.9.0-18.1 libKF5Auth5-lang-5.9.0-18.1 libKF5Bookmarks5-lang-5.9.0-18.1 libKF5Codecs5-lang-5.9.0-18.1 libKF5Completion5-lang-5.9.0-18.1 libKF5ConfigCore5-lang-5.9.0-18.1 libKF5ConfigWidgets5-lang-5.9.0-18.1 libKF5DBusAddons5-lang-5.9.0-18.1 libKF5DNSSD5-lang-5.9.0-18.1 libKF5Declarative5-lang-5.9.0-18.1 libKF5GlobalAccel5-lang-5.9.0-18.1 libKF5I18n5-lang-5.9.0-18.1 libKF5IconThemes5-lang-5.9.0-18.1 libKF5ItemViews5-lang-5.9.0-18.1 libKF5JobWidgets5-lang-5.9.0-18.1 libKF5JsEmbed5-lang-5.9.0-18.1 libKF5KCMUtils5-lang-5.9.0-18.1 libKF5KHtml5-lang-5.9.0-18.1 libKF5NewStuff5-lang-5.9.0-18.1 libKF5Notifications5-lang-5.9.0-18.1 libKF5NotifyConfig5-lang-5.9.0-18.1 libKF5Parts5-lang-5.9.0-18.1 libKF5Pty5-lang-5.9.0-18.1 libKF5Solid5-lang-5.9.0-18.1 libKF5SonnetCore5-lang-5.9.0-18.1 libKF5Style5-lang-5.9.0-18.1 libKF5Su5-lang-5.9.0-18.1 libKF5TextWidgets5-lang-5.9.0-18.1 libKF5UnitConversion5-lang-5.9.0-18.1 libKF5WidgetsAddons5-lang-5.9.0-18.1 libKF5WindowSystem5-lang-5.9.0-19.1 libKF5XmlGui5-lang-5.9.0-18.1 libKF5XmlRpcClient5-lang-5.9.0-5.1 plasma-framework-lang-5.9.0-20.1 plasma-nm5-lang-5.2.2-20.1 plasma5-desktop-lang-5.2.2-23.2 plasma5-workspace-lang-5.2.2-26.1 References: https://bugzilla.suse.com/924074

1 0

openSUSE-RU-2015:0785-1: moderate: Recommended udpate for docker
by maintenance＠opensuse.org 28 Apr '15

28 Apr '15

openSUSE Recommended Update: Recommended udpate for docker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0785-1 Rating: moderate References: #908033 #920645 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended udpate for docker provides version 1.6.0 with several fixes and improvements: - Updated to version 1.6.0 (2015-04-07) + Builder: * Building images from an image ID * build containers with resource constraints, ie `docker build --cpu-shares=100 --memory=1024m...` * `commit --change` to apply specified Dockerfile instructions while committing the image * `import --change` to apply specified Dockerfile instructions while importing the image * basic build cancellation + Client: * Windows Support + Runtime: * Container and image Labels * `--cgroup-parent` for specifying a parent cgroup to place container cgroup within * Logging drivers, `json-file`, `syslog`, or `none` * Pulling images by ID * `--ulimit` to set the ulimit on a container * `--default-ulimit` option on the daemon which applies to all created containers (and overwritten by `--ulimit` on run) - Support of Docker Registry API v2. (bnc#908033) - Enable build for armv7l - Fix building with the latest version of our Go pacakge. - Fix check made by the docker daemon against the dockerinit binary. - Updated systemd service and socket units to fix socket activation and to align with best practices recommended by upstream. Moreover socket activation fixes bnc#920645. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-333=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (x86_64): docker-1.6.0-25.1 docker-debuginfo-1.6.0-25.1 docker-debugsource-1.6.0-25.1 - openSUSE 13.2 (noarch): docker-bash-completion-1.6.0-25.1 docker-zsh-completion-1.6.0-25.1 References: https://bugzilla.suse.com/908033 https://bugzilla.suse.com/920645

1 0

openSUSE-RU-2015:0782-1: moderate: Recommended udpate for myspell-dictionaries
by maintenance＠opensuse.org 28 Apr '15

28 Apr '15

openSUSE Recommended Update: Recommended udpate for myspell-dictionaries ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0782-1 Rating: moderate References: #806250 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended udpate for myspell-dictionaries fixes the following issue: - fix incompatible stripping characters and condition (bnc#806250) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-334=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-334=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): myspell-dictionaries-20140911-4.1 myspell-lightproof-en-20140911-4.1 myspell-lightproof-hu_HU-20140911-4.1 myspell-lightproof-pt_BR-20140911-4.1 myspell-lightproof-ru_RU-20140911-4.1 - openSUSE 13.2 (noarch): myspell-af_ZA-20140911-4.1 myspell-an_ES-20140911-4.1 myspell-ar-20140911-4.1 myspell-be_BY-20140911-4.1 myspell-bg_BG-20140911-4.1 myspell-bn_BD-20140911-4.1 myspell-br_FR-20140911-4.1 myspell-bs_BA-20140911-4.1 myspell-ca-20140911-4.1 myspell-cs_CZ-20140911-4.1 myspell-da_DK-20140911-4.1 myspell-de-20140911-4.1 myspell-el_GR-20140911-4.1 myspell-en-20140911-4.1 myspell-es-20140911-4.1 myspell-et_EE-20140911-4.1 myspell-fr_FR-20140911-4.1 myspell-gd_GB-20140911-4.1 myspell-gl-20140911-4.1 myspell-gu_IN-20140911-4.1 myspell-he_IL-20140911-4.1 myspell-hi_IN-20140911-4.1 myspell-hr_HR-20140911-4.1 myspell-hu_HU-20140911-4.1 myspell-is-20140911-4.1 myspell-it_IT-20140911-4.1 myspell-kmr_Latn-20140911-4.1 myspell-lo_LA-20140911-4.1 myspell-lt_LT-20140911-4.1 myspell-lv_LV-20140911-4.1 myspell-ne_NP-20140911-4.1 myspell-nl_NL-20140911-4.1 myspell-no-20140911-4.1 myspell-oc_FR-20140911-4.1 myspell-pl_PL-20140911-4.1 myspell-pt_BR-20140911-4.1 myspell-pt_PT-20140911-4.1 myspell-ro-20140911-4.1 myspell-ru_RU-20140911-4.1 myspell-si_LK-20140911-4.1 myspell-sk_SK-20140911-4.1 myspell-sl_SI-20140911-4.1 myspell-sr-20140911-4.1 myspell-sv_SE-20140911-4.1 myspell-sw_TZ-20140911-4.1 myspell-te_IN-20140911-4.1 myspell-th_TH-20140911-4.1 myspell-uk_UA-20140911-4.1 myspell-vi-20140911-4.1 myspell-zu_ZA-20140911-4.1 - openSUSE 13.1 (noarch): myspell-african-20080701-32.3.1 myspell-albanian-20100517-32.3.1 myspell-american-20100316-32.3.1 myspell-arabic-20080110-32.3.1 myspell-armenian-0.20.0-32.3.1 myspell-assamese-1.0.3-32.3.1 myspell-asturian-0.0.1-32.3.1 myspell-australian-20100316-32.3.1 myspell-belarusian-20101210-32.3.1 myspell-bengali-20080201-32.3.1 myspell-brazilian-20120609-32.3.1 myspell-breton-0.3-32.3.1 myspell-british-20100316-32.3.1 myspell-bulgarian-4.3.1-32.3.1 myspell-canadian-20100316-32.3.1 myspell-catalan-2.1.5-32.3.1 myspell-chichewa-0.1-32.3.1 myspell-coptic-0.3-32.3.1 myspell-croatian-20080813-32.3.1 myspell-czech-20080822-32.3.1 myspell-danish-20090925-32.3.1 myspell-dutch-20091002-32.3.1 myspell-esperanto-1.1-32.3.1 myspell-estonian-1.0-32.3.1 myspell-faroese-20070816-32.3.1 myspell-french-20100810-32.3.1 myspell-friulian-20100606-32.3.1 myspell-gaelic-scots-1.0-32.3.1 myspell-galician-20080515-32.3.1 myspell-greek-20100124-32.3.1 myspell-gujarati-20061015-32.3.1 myspell-haitian-0.06-32.3.1 myspell-hebrew-20080914-32.3.1 myspell-hindi-20090617-32.3.1 myspell-hungarian-20100329-32.3.1 myspell-icelandic-20090823-32.3.1 myspell-indonese-1.2-32.3.1 myspell-irish-20080805-32.3.1 myspell-italian-20100501-32.3.1 myspell-kazakh-20090901-32.3.1 myspell-khmer-1.3-32.3.1 myspell-kichwa-0.4-32.3.1 myspell-kikuyu-20091010-32.3.1 myspell-kinyarwanda-20090218-32.3.1 myspell-kiswahili-20040516-32.3.1 myspell-korean-0.4.3-32.3.1 myspell-kurdish-0.96.0-32.3.1 myspell-latin-20100823-32.3.1 myspell-latvian-20100419-32.3.1 myspell-lithuanian-20081204-32.3.1 myspell-lower-sorbian-1.4.2-32.3.1 myspell-macedonian-20051126-32.3.1 myspell-maithili-20100107-32.3.1 myspell-malagasy-0.03-32.3.1 myspell-malay-20090808-32.3.1 myspell-malayalam-1.1.0-32.3.1 myspell-maory-20080630-32.3.1 myspell-marathi-20091210-32.3.1 myspell-mexican-20091103-32.3.1 myspell-ndebele-20091030-32.3.1 myspell-new-zealand-20081204-32.3.1 myspell-norsk-bokmaal-20080310-32.3.1 myspell-norsk-nynorsk-20080310-32.3.1 myspell-occitan-lengadocian-0.6.1-32.3.1 myspell-persian-20070815-32.3.1 myspell-polish-20081206-32.3.1 myspell-portuguese-20120701-32.3.1 myspell-romanian-20100608-32.3.1 myspell-russian-20081013-32.3.1 myspell-serbian-cyrillic-20100818-32.3.1 myspell-serbian-latin-20100818-32.3.1 myspell-setswana-20061023-32.3.1 myspell-sinhala-3.0.1-32.3.1 myspell-slovak-20100208-32.3.1 myspell-slovene-20091130-32.3.1 myspell-sotho-northern-20060123-32.3.1 myspell-south-african-english-20100316-32.3.1 myspell-spanish-20051029-32.3.1 myspell-spanish-argentine-0.1-32.3.1 myspell-spanish-bolivian-0.1-32.3.1 myspell-spanish-chilean-0.1-32.3.1 myspell-spanish-colombian-0.1-32.3.1 myspell-spanish-costa-rican-0.4-32.3.1 myspell-spanish-dominican-0.1-32.3.1 myspell-spanish-ecuadorian-0.1-32.3.1 myspell-spanish-guatemalan-0.1-32.3.1 myspell-spanish-honduran-0.1-32.3.1 myspell-spanish-nicaraguan-0.1-32.3.1 myspell-spanish-panamanian-0.1-32.3.1 myspell-spanish-paraguayan-0.1-32.3.1 myspell-spanish-peruvian-0.1-32.3.1 myspell-spanish-puerto-rican-0.1-32.3.1 myspell-spanish-salvadorean-0.1-32.3.1 myspell-spanish-uruguayan-0.1-32.3.1 myspell-spanish-venezuelan-1.0.1-32.3.1 myspell-swati-20091030-32.3.1 myspell-swedish-20100130-32.3.1 myspell-swedish-finland-20100131-32.3.1 myspell-tagalog-0.02-32.3.1 myspell-thai-0.3-32.3.1 myspell-tsonga-20060123-32.3.1 myspell-ukrainian-20090818-32.3.1 myspell-valencian-2.2.0-32.3.1 myspell-venda-20091030-32.3.1 myspell-vietnamese-20091031-32.3.1 myspell-welsh-20040425-32.3.1 myspell-xhosa-20091030-32.3.1 myspell-yiddish-20100902-32.3.1 myspell-zulu-20091210-32.3.1 References: https://bugzilla.suse.com/806250

1 0

openSUSE-SU-2015:0775-1: moderate: Security update for ntp
by opensuse-security＠opensuse.org 27 Apr '15

27 Apr '15

openSUSE Security Update: Security update for ntp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0775-1 Rating: moderate References: #924202 Cross-References: CVE-2015-1798 CVE-2015-1799 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: NTP was updated to fix two security vulnerabilities: * ntpd could accept unauthenticated packets with symmetric key crypto. (CVE-2015-1798) * ntpd authentication did not protect symmetric associations against DoS attacks (CVE-2015-1799) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-330=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-330=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ntp-4.2.6p5-25.12.1 ntp-debuginfo-4.2.6p5-25.12.1 ntp-debugsource-4.2.6p5-25.12.1 ntp-doc-4.2.6p5-25.12.1 - openSUSE 13.1 (i586 x86_64): ntp-4.2.6p5-15.16.1 ntp-debuginfo-4.2.6p5-15.16.1 ntp-debugsource-4.2.6p5-15.16.1 ntp-doc-4.2.6p5-15.16.1 References: https://www.suse.com/security/cve/CVE-2015-1798.html https://www.suse.com/security/cve/CVE-2015-1799.html https://bugzilla.suse.com/924202

1 0

openSUSE-SU-2015:0774-1: important: Security update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 27 Apr '15

27 Apr '15

openSUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0774-1 Rating: important References: #927591 Cross-References: CVE-2015-0458 CVE-2015-0459 CVE-2015-0460 CVE-2015-0469 CVE-2015-0477 CVE-2015-0478 CVE-2015-0480 CVE-2015-0484 CVE-2015-0488 CVE-2015-0491 CVE-2015-0492 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: OpenJDK was updated to 2.5.5 - OpenJdk 7u79 to fix security issues and bugs: The following vulnerabilities were fixed: * CVE-2015-0458: Deployment: unauthenticated remote attackers could execute arbitrary code via multiple protocols. * CVE-2015-0459: 2D: unauthenticated remote attackers could execute arbitrary code via multiple protocols. * CVE-2015-0460: Hotspot: unauthenticated remote attackers could execute arbitrary code via multiple protocols. * CVE-2015-0469: 2D: unauthenticated remote attackers could execute arbitrary code via multiple protocols. * CVE-2015-0477: Beans: unauthenticated remote attackers could update, insert or delete some JAVA accessible data via multiple protocols * CVE-2015-0478: JCE: unauthenticated remote attackers could read some JAVA accessible data via multiple protocols * CVE-2015-0480: Tools: unauthenticated remote attackers could update, insert or delete some JAVA accessible data via multiple protocols and cause a partial denial of service (partial DOS) * CVE-2015-0484: JavaFX: unauthenticated remote attackers could read, update, insert or delete access some Java accessible data via multiple protocols and cause a partial denial of service (partial DOS). * CVE-2015-0488: JSSE: unauthenticated remote attackers could cause a partial denial of service (partial DOS). * CVE-2015-0491: 2D: unauthenticated remote attackers could execute arbitrary code via multiple protocols. * CVE-2015-0492: JavaFX: unauthenticated remote attackers could execute arbitrary code via multiple protocols. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-331=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): java-1_7_0-openjdk-1.7.0.79-7.4 java-1_7_0-openjdk-accessibility-1.7.0.79-7.4 java-1_7_0-openjdk-debuginfo-1.7.0.79-7.4 java-1_7_0-openjdk-debugsource-1.7.0.79-7.4 java-1_7_0-openjdk-demo-1.7.0.79-7.4 java-1_7_0-openjdk-demo-debuginfo-1.7.0.79-7.4 java-1_7_0-openjdk-devel-1.7.0.79-7.4 java-1_7_0-openjdk-devel-debuginfo-1.7.0.79-7.4 java-1_7_0-openjdk-headless-1.7.0.79-7.4 java-1_7_0-openjdk-headless-debuginfo-1.7.0.79-7.4 java-1_7_0-openjdk-src-1.7.0.79-7.4 - openSUSE 13.2 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.79-7.4 References: https://www.suse.com/security/cve/CVE-2015-0458.html https://www.suse.com/security/cve/CVE-2015-0459.html https://www.suse.com/security/cve/CVE-2015-0460.html https://www.suse.com/security/cve/CVE-2015-0469.html https://www.suse.com/security/cve/CVE-2015-0477.html https://www.suse.com/security/cve/CVE-2015-0478.html https://www.suse.com/security/cve/CVE-2015-0480.html https://www.suse.com/security/cve/CVE-2015-0484.html https://www.suse.com/security/cve/CVE-2015-0488.html https://www.suse.com/security/cve/CVE-2015-0491.html https://www.suse.com/security/cve/CVE-2015-0492.html https://bugzilla.suse.com/927591

1 0

openSUSE-SU-2015:0773-1: important: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 27 Apr '15

27 Apr '15

openSUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0773-1 Rating: important References: #927591 Cross-References: CVE-2015-0458 CVE-2015-0459 CVE-2015-0460 CVE-2015-0469 CVE-2015-0470 CVE-2015-0477 CVE-2015-0478 CVE-2015-0480 CVE-2015-0484 CVE-2015-0486 CVE-2015-0488 CVE-2015-0491 CVE-2015-0492 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: OpenJDK was updated to jdk8u45-b14 to fix security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-0458: Deployment: unauthenticated remote attackers could execute arbitrary code via multiple protocols. * CVE-2015-0459: 2D: unauthenticated remote attackers could execute arbitrary code via multiple protocols. * CVE-2015-0460: Hotspot: unauthenticated remote attackers could execute arbitrary code via multiple protocols. * CVE-2015-0469: 2D: unauthenticated remote attackers could execute arbitrary code via multiple protocols. * CVE-2015-0470: Hotspot: unauthenticated remote attackers could update, insert or delete some JAVA accessible data via multiple protocols * CVE-2015-0477: Beans: unauthenticated remote attackers could update, insert or delete some JAVA accessible data via multiple protocols * CVE-2015-0478: JCE: unauthenticated remote attackers could read some JAVA accessible data via multiple protocols * CVE-2015-0480: Tools: unauthenticated remote attackers could update, insert or delete some JAVA accessible data via multiple protocols and cause a partial denial of service (partial DOS) * CVE-2015-0484: JavaFX: unauthenticated remote attackers could read, update, insert or delete access some Java accessible data via multiple protocols and cause a partial denial of service (partial DOS). * CVE-2015-0486: Deployment: unauthenticated remote attackers could read some JAVA accessible data via multiple protocols * CVE-2015-0488: JSSE: unauthenticated remote attackers could cause a partial denial of service (partial DOS). * CVE-2015-0491: 2D: unauthenticated remote attackers could execute arbitrary code via multiple protocols. * CVE-2015-0492: JavaFX: unauthenticated remote attackers could execute arbitrary code via multiple protocols. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-332=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): java-1_8_0-openjdk-1.8.0.45-9.3 java-1_8_0-openjdk-accessibility-1.8.0.45-9.3 java-1_8_0-openjdk-debuginfo-1.8.0.45-9.3 java-1_8_0-openjdk-debugsource-1.8.0.45-9.3 java-1_8_0-openjdk-demo-1.8.0.45-9.3 java-1_8_0-openjdk-demo-debuginfo-1.8.0.45-9.3 java-1_8_0-openjdk-devel-1.8.0.45-9.3 java-1_8_0-openjdk-headless-1.8.0.45-9.3 java-1_8_0-openjdk-headless-debuginfo-1.8.0.45-9.3 java-1_8_0-openjdk-src-1.8.0.45-9.3 - openSUSE 13.2 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.45-9.3 References: https://www.suse.com/security/cve/CVE-2015-0458.html https://www.suse.com/security/cve/CVE-2015-0459.html https://www.suse.com/security/cve/CVE-2015-0460.html https://www.suse.com/security/cve/CVE-2015-0469.html https://www.suse.com/security/cve/CVE-2015-0470.html https://www.suse.com/security/cve/CVE-2015-0477.html https://www.suse.com/security/cve/CVE-2015-0478.html https://www.suse.com/security/cve/CVE-2015-0480.html https://www.suse.com/security/cve/CVE-2015-0484.html https://www.suse.com/security/cve/CVE-2015-0486.html https://www.suse.com/security/cve/CVE-2015-0488.html https://www.suse.com/security/cve/CVE-2015-0491.html https://www.suse.com/security/cve/CVE-2015-0492.html https://bugzilla.suse.com/927591

1 0

openSUSE-RU-2015:0771-1: moderate: Recommended update for perl-IO-Socket-SSL
by maintenance＠opensuse.org 27 Apr '15

27 Apr '15

openSUSE Recommended Update: Recommended update for perl-IO-Socket-SSL ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0771-1 Rating: moderate References: #924976 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for perl-IO-Socket-SSL fixes the following issue: - add DHE-RSA to the default client cipher list to support PFS with older machines (bnc#924976) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-328=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): perl-IO-Socket-SSL-1.997-2.3.1 References: https://bugzilla.suse.com/924976

1 0

openSUSE-RU-2015:0770-1: Recommended update for vsftpd
by maintenance＠opensuse.org 27 Apr '15

27 Apr '15

openSUSE Recommended Update: Recommended update for vsftpd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0770-1 Rating: low References: #927612 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The ftp server vsftpd was updated to fix a regression in a previous update that broke browsing ftp trees with some browsers. (boo#927612) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-329=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-329=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): vsftpd-3.0.2-14.17.1 vsftpd-debuginfo-3.0.2-14.17.1 vsftpd-debugsource-3.0.2-14.17.1 - openSUSE 13.1 (i586 x86_64): vsftpd-3.0.2-10.20.1 vsftpd-debuginfo-3.0.2-10.20.1 vsftpd-debugsource-3.0.2-10.20.1 References: https://bugzilla.suse.com/927612

1 0

openSUSE-RU-2015:0764-1: moderate: Recommended udpate for spec-cleaner
by maintenance＠opensuse.org 24 Apr '15

24 Apr '15

openSUSE Recommended Update: Recommended udpate for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0764-1 Rating: moderate References: Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for spec-cleaner fixes the following issues: - Version bump to 0.6.9: + Replace => with >= + Bracketing excludes + Replace paths using regexps instead of hardcoding (more cases covered) + Remove various obsolete tags from preamble Icon/Packager/... + Fix RPM_BUILD_ROOT replacement cornercase failure + Remove %doc from %_mandir paths as it is pointless to have there Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-327=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-327=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): spec-cleaner-0.6.9-11.1 - openSUSE 13.1 (noarch): spec-cleaner-0.6.9-6.27.1 References:

1 0

openSUSE-SU-2015:0763-1: moderate: Security update for Mozille Firefox
by opensuse-security＠opensuse.org 24 Apr '15

24 Apr '15

openSUSE Security Update: Security update for Mozille Firefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0763-1 Rating: moderate References: #928116 Cross-References: CVE-2015-2706 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Mozilla Firefox was updated to 37.0.2 to fix one security issue. The following vulnerability was fixed: * CVE-2015-2706: Memory corruption during failed plugin initialization (bmo#1141081 MFSA 2015-45 bnc#928116) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-326=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): MozillaFirefox-37.0.2-27.1 MozillaFirefox-branding-upstream-37.0.2-27.1 MozillaFirefox-buildsymbols-37.0.2-27.1 MozillaFirefox-debuginfo-37.0.2-27.1 MozillaFirefox-debugsource-37.0.2-27.1 MozillaFirefox-devel-37.0.2-27.1 MozillaFirefox-translations-common-37.0.2-27.1 MozillaFirefox-translations-other-37.0.2-27.1 References: https://www.suse.com/security/cve/CVE-2015-2706.html https://bugzilla.suse.com/928116

1 0

openSUSE-RU-2015:0762-1: moderate: Recommended update for libxine2
by maintenance＠opensuse.org 24 Apr '15

24 Apr '15

openSUSE Recommended Update: Recommended update for libxine2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0762-1 Rating: moderate References: #913588 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for libxine2 provides the latest bugfix release with various fixes and improvements: - Update from version 1.2.3 to 1.2.6 (boo#913588) + Add libmmal video output plugin for Raspberry Pi. + Add libmmal HW video decoder plugin for Raspberry Pi. + Add overlay colormatrix support. + Add "sqare monitor pixels" config option. + Add VAAPI colormatrix and fullrange video support. + Add "radeonhd" XV colormatrix support. + Add Opus audio support. + Update german translation. + Optimize OpenGL2 video out. + Optimize raw RGB video decoder. + Fix multithread ffmpeg video decoding. + Fix/optimize DVB subtitles. + Fix external text subtitles. + BSD build fixes. + Clang build fixes. + Build optimization fixes (aliasing). + AVformat demux build fix. + More safety on memory allocation failure. + Fix detection of and compilation with libcaca 0.99 beta 19. + Add bass downmix support to AC3 decoder. + Add experimental YCgCo colorspace support. + Add avformat demux plugin. * Support for new formats and protocols. * Proper rtsp support (with avformat+rtsp://, rtsp+tcp:// and rtsp+http:// mrls). * By default native xine demux plugins are probed first. This can be overridden in config, by selecting demuxer in mrl (#demux:avformat), or by using "avformat+" mrl prefix. + Add avio (libavformat) input plugin: * Support for new protocols (https://, ftp://, sftp://, ...). * Support for seekable http streams (with "avio+http://" mrl). * By default native xine input plugins are used. This can be overridden in config or by using "avio+" mrl prefix. + Recognise and use HEVC/H.265. (ffmpeg) + Add support for HEVC/H.265 to the mpeg-ts demuxer. + Add support for HEVC/H.265 and VP9 to the matroska demuxer. + Add VP8/VP9 decoder using libvpx. + Modernise Quicktime demuxer: * Multiple user selectable audio traks. * Support AC3, EAC3, vorbis, Purevoice audio. * Support ISO fragment media files. * More safety on broken files. * Slightly faster. + Recognise and use ADPCM G.726 and ATRAC3. (ffmpeg/libva) + Build fixes. + Fix HDMV subtitle channel. + FFmpeg compatibility fixes. + Some colour format conversion fixes. + Fix RealVideo re-ordered PTS: pass through, let the decoder re-order it. + Fix some problems with COOK audio. + Some VAAPI plugin fixes (build, image size changes). + ffmpeg multi-channel playback fixes: * Handle channel configuration changes sooner. * Generic layout if none provided; follow user changes. * Defer opening output if nothing to play. * Don't re-open with identical settings. * Don't use the bits-per-sample value (may not match decoder output). + ffmpeg video fixes: * Default to square pixels, avoiding black bars and unnecessary scaling. * Avoid CODEC_FLAG_EMU_EDGE (and some possible segfaults). * Use MPEG2VIDEO. + OpenGL2 output: don't render into invalid drawable. + Fix a possible xine_play() hang related to display locking. + FLV demuxer rewrite: * Improved metadata parsing. * PTS/DTS fixes. * Large file support on 32-bit. * Much improved seeking. * Much optimisation. * More codecs supported. + audio_out speed control fixes. + Optimised RGB→YUY2 conversion. + Avoid a possible performance penalty where AVX-optimised memcpy is used. + Add BD-J (BluRay Java) support with ARGB overlay capable video drivers (opengl2, vaapi, vdpau) + Add support for theora 4:2:2 and 4:4:4 pixel formats Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-323=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-323=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libxine-devel-1.2.6-5.3.1 libxine2-1.2.6-5.3.1 libxine2-debuginfo-1.2.6-5.3.1 libxine2-gnome-vfs-1.2.6-5.3.1 libxine2-gnome-vfs-debuginfo-1.2.6-5.3.1 libxine2-pulse-1.2.6-5.3.1 libxine2-pulse-debuginfo-1.2.6-5.3.1 xine-lib-debugsource-1.2.6-5.3.1 - openSUSE 13.2 (x86_64): libxine2-32bit-1.2.6-5.3.1 libxine2-debuginfo-32bit-1.2.6-5.3.1 - openSUSE 13.1 (i586 x86_64): libxine-devel-1.2.6-3.3.1 libxine2-1.2.6-3.3.1 libxine2-debuginfo-1.2.6-3.3.1 libxine2-gnome-vfs-1.2.6-3.3.1 libxine2-gnome-vfs-debuginfo-1.2.6-3.3.1 libxine2-pulse-1.2.6-3.3.1 libxine2-pulse-debuginfo-1.2.6-3.3.1 xine-lib-debugsource-1.2.6-3.3.1 - openSUSE 13.1 (x86_64): libxine2-32bit-1.2.6-3.3.1 libxine2-debuginfo-32bit-1.2.6-3.3.1 References: https://bugzilla.suse.com/913588

1 0

openSUSE-SU-2015:0761-1: moderate: Security update for Mozille Firefox
by opensuse-security＠opensuse.org 24 Apr '15

24 Apr '15

openSUSE Security Update: Security update for Mozille Firefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0761-1 Rating: moderate References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Mozilla Firefox was updated to 37.0.2 to fix one security issue. The following vulnerability was fixed: * CVE-2015-2706 Memory corruption during failed plugin initialization (bmo#1141081 MFSA 2015-45 bnc#928116) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-325=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): MozillaFirefox-37.0.2-71.1 MozillaFirefox-branding-upstream-37.0.2-71.1 MozillaFirefox-buildsymbols-37.0.2-71.1 MozillaFirefox-debuginfo-37.0.2-71.1 MozillaFirefox-debugsource-37.0.2-71.1 MozillaFirefox-devel-37.0.2-71.1 MozillaFirefox-translations-common-37.0.2-71.1 MozillaFirefox-translations-other-37.0.2-71.1 References:

1 0

openSUSE-SU-2015:0760-1: moderate: Security update for socat
by opensuse-security＠opensuse.org 24 Apr '15

24 Apr '15

openSUSE Security Update: Security update for socat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0760-1 Rating: moderate References: #860991 #927161 Cross-References: CVE-2014-0019 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: socat was updated 1.7.2.4 to fix one security issue and bugs. The following vulnerabilities were fixed: * socats PROXY-CONNECT address was vulnerable to a buffer overflow with data from command line (CVE-2014-0019, boo#860991) The following bugs were fixed: * socat would frequently crash on ppc and armv7l (boo#927161) * various other bug fixes in 1.7.2.4 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-324=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): socat-1.7.2.4-2.3.1 socat-debuginfo-1.7.2.4-2.3.1 socat-debugsource-1.7.2.4-2.3.1 References: https://www.suse.com/security/cve/CVE-2014-0019.html https://bugzilla.suse.com/860991 https://bugzilla.suse.com/927161

1 0

openSUSE-RU-2015:0754-1: important: Recommended update for pulseaudio
by maintenance＠opensuse.org 23 Apr '15

23 Apr '15

openSUSE Recommended Update: Recommended update for pulseaudio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0754-1 Rating: important References: #928035 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update fixes a regression introduced with the latest pulseaudio-update: - Fix crash by device switching (bnc#928035) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-321=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libpulse-devel-5.0-4.21.1 libpulse-mainloop-glib0-5.0-4.21.1 libpulse-mainloop-glib0-debuginfo-5.0-4.21.1 libpulse0-5.0-4.21.1 libpulse0-debuginfo-5.0-4.21.1 pulseaudio-5.0-4.21.1 pulseaudio-debuginfo-5.0-4.21.1 pulseaudio-debugsource-5.0-4.21.1 pulseaudio-esound-compat-5.0-4.21.1 pulseaudio-gdm-hooks-5.0-4.21.1 pulseaudio-module-bluetooth-5.0-4.21.1 pulseaudio-module-bluetooth-debuginfo-5.0-4.21.1 pulseaudio-module-gconf-5.0-4.21.1 pulseaudio-module-gconf-debuginfo-5.0-4.21.1 pulseaudio-module-jack-5.0-4.21.1 pulseaudio-module-jack-debuginfo-5.0-4.21.1 pulseaudio-module-lirc-5.0-4.21.1 pulseaudio-module-lirc-debuginfo-5.0-4.21.1 pulseaudio-module-x11-5.0-4.21.1 pulseaudio-module-x11-debuginfo-5.0-4.21.1 pulseaudio-module-zeroconf-5.0-4.21.1 pulseaudio-module-zeroconf-debuginfo-5.0-4.21.1 pulseaudio-system-wide-5.0-4.21.1 pulseaudio-utils-5.0-4.21.1 pulseaudio-utils-debuginfo-5.0-4.21.1 - openSUSE 13.2 (x86_64): libpulse-mainloop-glib0-32bit-5.0-4.21.1 libpulse-mainloop-glib0-debuginfo-32bit-5.0-4.21.1 libpulse0-32bit-5.0-4.21.1 libpulse0-debuginfo-32bit-5.0-4.21.1 - openSUSE 13.2 (noarch): pulseaudio-lang-5.0-4.21.1 References: https://bugzilla.suse.com/928035

1 0

openSUSE-RU-2015:0753-1: moderate: Recommended update for LibreOffice
by maintenance＠opensuse.org 23 Apr '15

23 Apr '15

openSUSE Recommended Update: Recommended update for LibreOffice ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0753-1 Rating: moderate References: #913042 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for LibreOffice fixes the following issue: - fixed .jar-generation in spec-file(boo#913042) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-322=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libreoffice-4.3.6.2-15.1 libreoffice-base-4.3.6.2-15.1 libreoffice-base-debuginfo-4.3.6.2-15.1 libreoffice-base-drivers-mysql-4.3.6.2-15.1 libreoffice-base-drivers-mysql-debuginfo-4.3.6.2-15.1 libreoffice-base-drivers-postgresql-4.3.6.2-15.1 libreoffice-base-drivers-postgresql-debuginfo-4.3.6.2-15.1 libreoffice-calc-4.3.6.2-15.1 libreoffice-calc-debuginfo-4.3.6.2-15.1 libreoffice-calc-extensions-4.3.6.2-15.1 libreoffice-debuginfo-4.3.6.2-15.1 libreoffice-debugsource-4.3.6.2-15.1 libreoffice-draw-4.3.6.2-15.1 libreoffice-draw-debuginfo-4.3.6.2-15.1 libreoffice-filters-optional-4.3.6.2-15.1 libreoffice-gnome-4.3.6.2-15.1 libreoffice-gnome-debuginfo-4.3.6.2-15.1 libreoffice-impress-4.3.6.2-15.1 libreoffice-impress-debuginfo-4.3.6.2-15.1 libreoffice-kde4-4.3.6.2-15.1 libreoffice-kde4-debuginfo-4.3.6.2-15.1 libreoffice-mailmerge-4.3.6.2-15.1 libreoffice-math-4.3.6.2-15.1 libreoffice-math-debuginfo-4.3.6.2-15.1 libreoffice-officebean-4.3.6.2-15.1 libreoffice-officebean-debuginfo-4.3.6.2-15.1 libreoffice-pyuno-4.3.6.2-15.1 libreoffice-pyuno-debuginfo-4.3.6.2-15.1 libreoffice-sdk-4.3.6.2-15.1 libreoffice-sdk-debuginfo-4.3.6.2-15.1 libreoffice-sdk-doc-4.3.6.2-15.1 libreoffice-writer-4.3.6.2-15.1 libreoffice-writer-debuginfo-4.3.6.2-15.1 libreoffice-writer-extensions-4.3.6.2-15.1 - openSUSE 13.2 (noarch): libreoffice-branding-upstream-4.3.6.2-15.1 libreoffice-icon-theme-crystal-4.3.6.2-15.1 libreoffice-icon-theme-galaxy-4.3.6.2-15.1 libreoffice-icon-theme-hicontrast-4.3.6.2-15.1 libreoffice-icon-theme-oxygen-4.3.6.2-15.1 libreoffice-icon-theme-sifr-4.3.6.2-15.1 libreoffice-icon-theme-tango-4.3.6.2-15.1 libreoffice-l10n-af-4.3.6.2-15.1 libreoffice-l10n-ar-4.3.6.2-15.1 libreoffice-l10n-as-4.3.6.2-15.1 libreoffice-l10n-bg-4.3.6.2-15.1 libreoffice-l10n-bn-4.3.6.2-15.1 libreoffice-l10n-br-4.3.6.2-15.1 libreoffice-l10n-ca-4.3.6.2-15.1 libreoffice-l10n-cs-4.3.6.2-15.1 libreoffice-l10n-cy-4.3.6.2-15.1 libreoffice-l10n-da-4.3.6.2-15.1 libreoffice-l10n-de-4.3.6.2-15.1 libreoffice-l10n-dz-4.3.6.2-15.1 libreoffice-l10n-el-4.3.6.2-15.1 libreoffice-l10n-en-4.3.6.2-15.1 libreoffice-l10n-es-4.3.6.2-15.1 libreoffice-l10n-et-4.3.6.2-15.1 libreoffice-l10n-eu-4.3.6.2-15.1 libreoffice-l10n-fa-4.3.6.2-15.1 libreoffice-l10n-fi-4.3.6.2-15.1 libreoffice-l10n-fr-4.3.6.2-15.1 libreoffice-l10n-ga-4.3.6.2-15.1 libreoffice-l10n-gl-4.3.6.2-15.1 libreoffice-l10n-gu-4.3.6.2-15.1 libreoffice-l10n-he-4.3.6.2-15.1 libreoffice-l10n-hi-4.3.6.2-15.1 libreoffice-l10n-hr-4.3.6.2-15.1 libreoffice-l10n-hu-4.3.6.2-15.1 libreoffice-l10n-it-4.3.6.2-15.1 libreoffice-l10n-ja-4.3.6.2-15.1 libreoffice-l10n-kk-4.3.6.2-15.1 libreoffice-l10n-kn-4.3.6.2-15.1 libreoffice-l10n-ko-4.3.6.2-15.1 libreoffice-l10n-lt-4.3.6.2-15.1 libreoffice-l10n-lv-4.3.6.2-15.1 libreoffice-l10n-mai-4.3.6.2-15.1 libreoffice-l10n-ml-4.3.6.2-15.1 libreoffice-l10n-mr-4.3.6.2-15.1 libreoffice-l10n-nb-4.3.6.2-15.1 libreoffice-l10n-nl-4.3.6.2-15.1 libreoffice-l10n-nn-4.3.6.2-15.1 libreoffice-l10n-nr-4.3.6.2-15.1 libreoffice-l10n-nso-4.3.6.2-15.1 libreoffice-l10n-or-4.3.6.2-15.1 libreoffice-l10n-pa-4.3.6.2-15.1 libreoffice-l10n-pl-4.3.6.2-15.1 libreoffice-l10n-pt-BR-4.3.6.2-15.1 libreoffice-l10n-pt-PT-4.3.6.2-15.1 libreoffice-l10n-ro-4.3.6.2-15.1 libreoffice-l10n-ru-4.3.6.2-15.1 libreoffice-l10n-si-4.3.6.2-15.1 libreoffice-l10n-sk-4.3.6.2-15.1 libreoffice-l10n-sl-4.3.6.2-15.1 libreoffice-l10n-sr-4.3.6.2-15.1 libreoffice-l10n-ss-4.3.6.2-15.1 libreoffice-l10n-st-4.3.6.2-15.1 libreoffice-l10n-sv-4.3.6.2-15.1 libreoffice-l10n-ta-4.3.6.2-15.1 libreoffice-l10n-te-4.3.6.2-15.1 libreoffice-l10n-th-4.3.6.2-15.1 libreoffice-l10n-tn-4.3.6.2-15.1 libreoffice-l10n-tr-4.3.6.2-15.1 libreoffice-l10n-ts-4.3.6.2-15.1 libreoffice-l10n-uk-4.3.6.2-15.1 libreoffice-l10n-ve-4.3.6.2-15.1 libreoffice-l10n-xh-4.3.6.2-15.1 libreoffice-l10n-zh-Hans-4.3.6.2-15.1 libreoffice-l10n-zh-Hant-4.3.6.2-15.1 libreoffice-l10n-zu-4.3.6.2-15.1 References: https://bugzilla.suse.com/913042

1 0

openSUSE-SU-2015:0748-1: moderate: Security update for Chromium
by opensuse-security＠opensuse.org 22 Apr '15

22 Apr '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0748-1 Rating: moderate References: #927302 Cross-References: CVE-2015-1235 CVE-2015-1236 CVE-2015-1237 CVE-2015-1238 CVE-2015-1240 CVE-2015-1241 CVE-2015-1242 CVE-2015-1244 CVE-2015-1245 CVE-2015-1246 CVE-2015-1247 CVE-2015-1248 CVE-2015-1249 CVE-2015-3333 CVE-2015-3334 CVE-2015-3335 CVE-2015-3336 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. Description: Chromium was updated to latest stable release 42.0.2311.90 to fix security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-1235: Cross-origin-bypass in HTML parser. * CVE-2015-1236: Cross-origin-bypass in Blink. * CVE-2015-1237: Use-after-free in IPC. * CVE-2015-1238: Out-of-bounds write in Skia. * CVE-2015-1240: Out-of-bounds read in WebGL. * CVE-2015-1241: Tap-Jacking. * CVE-2015-1242: Type confusion in V8. * CVE-2015-1244: HSTS bypass in WebSockets. * CVE-2015-1245: Use-after-free in PDFium. * CVE-2015-1246: Out-of-bounds read in Blink. * CVE-2015-1247: Scheme issues in OpenSearch. * CVE-2015-1248: SafeBrowsing bypass. * CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives. * CVE-2015-3333: Multiple vulnerabilities in V8 fixed at the tip of the 4.2 branch (currently 4.2.77.14). * CVE-2015-3336: fullscreen and UI locking without user confirmeation * CVE-2015-3335: unspecified impact of crafed programs running in NaCl sandbox * CVE-2015-3334: "Media: Allowed by you" sometimes not shown in a permissions table New functionality added: * A number of new apps, extension and Web Platform APIs (including the Push API!) * Lots of under the hood changes for stability and performance Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-320=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-320=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): chromedriver-42.0.2311.90-23.3 chromedriver-debuginfo-42.0.2311.90-23.3 chromium-42.0.2311.90-23.3 chromium-debuginfo-42.0.2311.90-23.3 chromium-debugsource-42.0.2311.90-23.3 chromium-desktop-gnome-42.0.2311.90-23.3 chromium-desktop-kde-42.0.2311.90-23.3 chromium-ffmpegsumo-42.0.2311.90-23.3 chromium-ffmpegsumo-debuginfo-42.0.2311.90-23.3 - openSUSE 13.1 (i586 x86_64): chromedriver-42.0.2311.90-78.2 chromedriver-debuginfo-42.0.2311.90-78.2 chromium-42.0.2311.90-78.2 chromium-debuginfo-42.0.2311.90-78.2 chromium-debugsource-42.0.2311.90-78.2 chromium-desktop-gnome-42.0.2311.90-78.2 chromium-desktop-kde-42.0.2311.90-78.2 chromium-ffmpegsumo-42.0.2311.90-78.2 chromium-ffmpegsumo-debuginfo-42.0.2311.90-78.2 References: https://www.suse.com/security/cve/CVE-2015-1235.html https://www.suse.com/security/cve/CVE-2015-1236.html https://www.suse.com/security/cve/CVE-2015-1237.html https://www.suse.com/security/cve/CVE-2015-1238.html https://www.suse.com/security/cve/CVE-2015-1240.html https://www.suse.com/security/cve/CVE-2015-1241.html https://www.suse.com/security/cve/CVE-2015-1242.html https://www.suse.com/security/cve/CVE-2015-1244.html https://www.suse.com/security/cve/CVE-2015-1245.html https://www.suse.com/security/cve/CVE-2015-1246.html https://www.suse.com/security/cve/CVE-2015-1247.html https://www.suse.com/security/cve/CVE-2015-1248.html https://www.suse.com/security/cve/CVE-2015-1249.html https://www.suse.com/security/cve/CVE-2015-3333.html https://www.suse.com/security/cve/CVE-2015-3334.html https://www.suse.com/security/cve/CVE-2015-3335.html https://www.suse.com/security/cve/CVE-2015-3336.html https://bugzilla.suse.com/927302

1 0

openSUSE-RU-2015:0741-1: moderate: Recommended update for pulseaudio
by maintenance＠opensuse.org 21 Apr '15

21 Apr '15

openSUSE Recommended Update: Recommended update for pulseaudio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0741-1 Rating: moderate References: #906138 #908288 #910983 #911615 #913686 #916048 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This recommended udpate for pulseaudio fixes the following issues: - Backport ALSA module fixes from PA 6.0 (bnc#906138, bnc#908288, bnc#910983, bnc#911615, bnc#913686, bnc#916048): + alsa-mixer: Fix Analog Input showing up on USB Headset + alsa: Use card description in default sink/source prefix when available + alsa-util: Reset hwparams_copy before the second try of buffer setup + Name HDMI outputs uniquely + sink, source: Assign to s->muted from only one place + alsa-mixer: Add surround 2.1 profile + alsa: Add extra HDMI mappings + alsa: Add "exact-channels" mapping configurability + alsa: Allow "fallback" configuration for mappings and profiles + alsa: Add a multichannel fallback mapping + alsa-mixer: Fix path subset detection + alsa: Remove four channel input profile + alsa-mixer: Mark "Line HP Swap" as required-any + alsa-mixer: recognize Dock headphone jack + alsa-util: Add functions for accessing mixer elements through mixer class + alsa-mixer/card: Move to use the new mixer interface + alsa: Remove unnecessary hctl handles being passed around + alsa-mixer: Merge analog-output-desktop-speaker with analog-output-speaker(-always) + alsa-mixer: Ignore some elements in the analog-output path + alsa-mixer: Disable line-out if headphone jack is plugged + alsa-mixer: Add support for "Headphone+LO" and "Speaker+LO" + alsa: Correct port availability with multiple jacks + alsa-util: fix parenthesis position in err assignment + alsa-mixer: Mute headphones and speakers on line out path + alsa-mixer: Add lineout to surround21 mappings + alsa-mixer: Make speaker unavailable when Line Out is plugged in + alsa: Don't try to use ELD controls with UCM Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-319=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libpulse-devel-5.0-4.18.1 libpulse-mainloop-glib0-5.0-4.18.1 libpulse-mainloop-glib0-debuginfo-5.0-4.18.1 libpulse0-5.0-4.18.1 libpulse0-debuginfo-5.0-4.18.1 pulseaudio-5.0-4.18.1 pulseaudio-debuginfo-5.0-4.18.1 pulseaudio-debugsource-5.0-4.18.1 pulseaudio-esound-compat-5.0-4.18.1 pulseaudio-gdm-hooks-5.0-4.18.1 pulseaudio-module-bluetooth-5.0-4.18.1 pulseaudio-module-bluetooth-debuginfo-5.0-4.18.1 pulseaudio-module-gconf-5.0-4.18.1 pulseaudio-module-gconf-debuginfo-5.0-4.18.1 pulseaudio-module-jack-5.0-4.18.1 pulseaudio-module-jack-debuginfo-5.0-4.18.1 pulseaudio-module-lirc-5.0-4.18.1 pulseaudio-module-lirc-debuginfo-5.0-4.18.1 pulseaudio-module-x11-5.0-4.18.1 pulseaudio-module-x11-debuginfo-5.0-4.18.1 pulseaudio-module-zeroconf-5.0-4.18.1 pulseaudio-module-zeroconf-debuginfo-5.0-4.18.1 pulseaudio-system-wide-5.0-4.18.1 pulseaudio-utils-5.0-4.18.1 pulseaudio-utils-debuginfo-5.0-4.18.1 - openSUSE 13.2 (x86_64): libpulse-mainloop-glib0-32bit-5.0-4.18.1 libpulse-mainloop-glib0-debuginfo-32bit-5.0-4.18.1 libpulse0-32bit-5.0-4.18.1 libpulse0-debuginfo-32bit-5.0-4.18.1 - openSUSE 13.2 (noarch): pulseaudio-lang-5.0-4.18.1 References: https://bugzilla.suse.com/906138 https://bugzilla.suse.com/908288 https://bugzilla.suse.com/910983 https://bugzilla.suse.com/911615 https://bugzilla.suse.com/913686 https://bugzilla.suse.com/916048

1 0

openSUSE-RU-2015:0740-1: moderate: Recommended update for fail2ban
by maintenance＠opensuse.org 21 Apr '15

21 Apr '15

openSUSE Recommended Update: Recommended update for fail2ban ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0740-1 Rating: moderate References: #926943 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for fail2ban adds a missing dependency on ed to fix boo#926943 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-315=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-315=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): SuSEfirewall2-fail2ban-0.8.14-2.15.1 fail2ban-0.8.14-2.15.1 nagios-plugins-fail2ban-0.8.14-2.15.1 - openSUSE 13.1 (noarch): SuSEfirewall2-fail2ban-0.8.14-2.24.1 fail2ban-0.8.14-2.24.1 nagios-plugins-fail2ban-0.8.14-2.24.1 References: https://bugzilla.suse.com/926943

1 0

openSUSE-RU-2015:0739-1: Gnomestack update for the 3.14 stable branch
by maintenance＠opensuse.org 21 Apr '15

21 Apr '15

openSUSE Recommended Update: Gnomestack update for the 3.14 stable branch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0739-1 Rating: low References: #924072 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides various bugfixes for the 3.14 GNOME stack. For a detailed description, please refer to the changelog. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-318=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): eog-3.14.4-7.3 eog-debuginfo-3.14.4-7.3 eog-debugsource-3.14.4-7.3 eog-devel-3.14.4-7.3 eog-plugins-3.14.2-3.2 eog-plugins-debuginfo-3.14.2-3.2 eog-plugins-debugsource-3.14.2-3.2 gdk-pixbuf-loader-rsvg-2.40.9-7.1 gdk-pixbuf-loader-rsvg-debuginfo-2.40.9-7.1 gdm-3.14.2-7.1 gdm-debuginfo-3.14.2-7.1 gdm-debugsource-3.14.2-7.1 gdm-devel-3.14.2-7.1 gedit-code-assistance-debugsource-3.14.2-2.9.1 gedit-plugin-code-assistance-3.14.2-2.9.1 gedit-plugin-code-assistance-debuginfo-3.14.2-2.9.1 glade-catalog-gtksourceview-3.14.4-11.1 gnome-control-center-3.14.4-15.1 gnome-control-center-color-3.14.4-15.1 gnome-control-center-debuginfo-3.14.4-15.1 gnome-control-center-debugsource-3.14.4-15.1 gnome-control-center-devel-3.14.4-15.1 gnome-control-center-user-faces-3.14.4-15.1 gnome-mines-3.14.2-3.3 gnome-mines-debuginfo-3.14.2-3.3 gnome-mines-debugsource-3.14.2-3.3 gnome-settings-daemon-3.14.3-7.1 gnome-settings-daemon-debuginfo-3.14.3-7.1 gnome-settings-daemon-debugsource-3.14.3-7.1 gnome-settings-daemon-devel-3.14.3-7.1 gnome-shell-3.14.4-9.1 gnome-shell-browser-plugin-3.14.4-9.1 gnome-shell-browser-plugin-debuginfo-3.14.4-9.1 gnome-shell-debuginfo-3.14.4-9.1 gnome-shell-debugsource-3.14.4-9.1 gnome-shell-devel-3.14.4-9.1 gnome-shell-search-provider-gnome-terminal-3.14.3-7.1 gnome-shell-wayland-3.14.4-9.1 gnome-terminal-3.14.3-7.1 gnome-terminal-debuginfo-3.14.3-7.1 gnome-terminal-debugsource-3.14.3-7.1 gssdp-debugsource-0.14.11-2.3.1 gssdp-utils-0.14.11-2.3.1 gssdp-utils-debuginfo-0.14.11-2.3.1 gtk3-debugsource-3.14.12-15.1 gtk3-devel-3.14.12-15.1 gtk3-devel-debuginfo-3.14.12-15.1 gtk3-immodule-amharic-3.14.12-15.1 gtk3-immodule-amharic-debuginfo-3.14.12-15.1 gtk3-immodule-broadway-3.14.12-15.1 gtk3-immodule-broadway-debuginfo-3.14.12-15.1 gtk3-immodule-inuktitut-3.14.12-15.1 gtk3-immodule-inuktitut-debuginfo-3.14.12-15.1 gtk3-immodule-multipress-3.14.12-15.1 gtk3-immodule-multipress-debuginfo-3.14.12-15.1 gtk3-immodule-thai-3.14.12-15.1 gtk3-immodule-thai-debuginfo-3.14.12-15.1 gtk3-immodule-vietnamese-3.14.12-15.1 gtk3-immodule-vietnamese-debuginfo-3.14.12-15.1 gtk3-immodule-xim-3.14.12-15.1 gtk3-immodule-xim-debuginfo-3.14.12-15.1 gtk3-immodules-tigrigna-3.14.12-15.1 gtk3-immodules-tigrigna-debuginfo-3.14.12-15.1 gtk3-tools-3.14.12-15.1 gtk3-tools-debuginfo-3.14.12-15.1 gtksourceview-debugsource-3.14.4-11.1 gtksourceview-devel-3.14.4-11.1 gupnp-av-0.12.7-2.3.1 gupnp-av-debugsource-0.12.7-2.3.1 gupnp-debugsource-0.20.13-2.3.1 gvfs-1.22.4-11.1 gvfs-backend-afc-1.22.4-11.1 gvfs-backend-afc-debuginfo-1.22.4-11.1 gvfs-backends-1.22.4-11.1 gvfs-backends-debuginfo-1.22.4-11.1 gvfs-debuginfo-1.22.4-11.1 gvfs-debugsource-1.22.4-11.1 gvfs-devel-1.22.4-11.1 gvfs-fuse-1.22.4-11.1 gvfs-fuse-debuginfo-1.22.4-11.1 latexila-3.14.4-11.1 latexila-debuginfo-3.14.4-11.1 latexila-debugsource-3.14.4-11.1 libchamplain-0_12-0-0.12.10-3.1 libchamplain-0_12-0-debuginfo-0.12.10-3.1 libchamplain-debugsource-0.12.10-3.1 libchamplain-devel-0.12.10-3.1 libgdm1-3.14.2-7.1 libgdm1-debuginfo-3.14.2-7.1 libgssdp-1_0-3-0.14.11-2.3.1 libgssdp-1_0-3-debuginfo-0.14.11-2.3.1 libgssdp-devel-0.14.11-2.3.1 libgtk-3-0-3.14.12-15.1 libgtk-3-0-debuginfo-3.14.12-15.1 libgtksourceview-3_0-1-3.14.4-11.1 libgtksourceview-3_0-1-debuginfo-3.14.4-11.1 libgupnp-1_0-4-0.20.13-2.3.1 libgupnp-1_0-4-debuginfo-0.20.13-2.3.1 libgupnp-av-1_0-2-0.12.7-2.3.1 libgupnp-av-1_0-2-debuginfo-0.12.7-2.3.1 libgupnp-av-devel-0.12.7-2.3.1 libgupnp-devel-0.20.13-2.3.1 libmutter0-3.14.4-9.1 libmutter0-debuginfo-3.14.4-9.1 librsvg-2-2-2.40.9-7.1 librsvg-2-2-debuginfo-2.40.9-7.1 librsvg-debugsource-2.40.9-7.1 librsvg-devel-2.40.9-7.1 libtracker-common-1_0-1.2.6-9.1 libtracker-common-1_0-debuginfo-1.2.6-9.1 libtracker-control-1_0-0-1.2.6-9.1 libtracker-control-1_0-0-debuginfo-1.2.6-9.1 libtracker-miner-1_0-0-1.2.6-9.1 libtracker-miner-1_0-0-debuginfo-1.2.6-9.1 libtracker-sparql-1_0-0-1.2.6-9.1 libtracker-sparql-1_0-0-debuginfo-1.2.6-9.1 mutter-3.14.4-9.1 mutter-data-3.14.4-9.1 mutter-debuginfo-3.14.4-9.1 mutter-debugsource-3.14.4-9.1 mutter-devel-3.14.4-9.1 mutter-devel-doc-3.14.4-9.1 nautilus-extension-terminal-3.14.3-7.1 nautilus-extension-terminal-debuginfo-3.14.3-7.1 nautilus-extension-tracker-tags-1.2.6-9.1 nautilus-extension-tracker-tags-debuginfo-1.2.6-9.1 orca-3.14.4-7.1 rsvg-view-2.40.9-7.1 rsvg-view-debuginfo-2.40.9-7.1 tracker-1.2.6-9.1 tracker-debuginfo-1.2.6-9.1 tracker-debugsource-1.2.6-9.1 tracker-devel-1.2.6-9.1 tracker-extras-debugsource-1.2.6-9.1 tracker-gui-1.2.6-9.1 tracker-gui-debuginfo-1.2.6-9.1 tracker-miner-files-1.2.6-9.1 tracker-miner-files-debuginfo-1.2.6-9.1 tracker-miner-rss-1.2.6-9.1 tracker-miner-rss-debuginfo-1.2.6-9.1 tracker-miner-thunderbird-1.2.6-9.1 typelib-1_0-Champlain-0_12-0.12.10-3.1 typelib-1_0-GSSDP-1_0-0.14.11-2.3.1 typelib-1_0-GUPnP-1_0-0.20.13-2.3.1 typelib-1_0-GUPnPAV-1_0-0.12.7-2.3.1 typelib-1_0-Gdm-1_0-3.14.2-7.1 typelib-1_0-Gtk-3_0-3.14.12-15.1 typelib-1_0-GtkSource-3_0-3.14.4-11.1 typelib-1_0-Meta-3_0-3.14.4-9.1 typelib-1_0-Rsvg-2_0-2.40.9-7.1 typelib-1_0-Tracker-1_0-1.2.6-9.1 typelib-1_0-TrackerControl-1_0-1.2.6-9.1 typelib-1_0-TrackerMiner-1_0-1.2.6-9.1 - openSUSE 13.2 (x86_64): gdk-pixbuf-loader-rsvg-32bit-2.40.9-7.1 gdk-pixbuf-loader-rsvg-debuginfo-32bit-2.40.9-7.1 gtk3-devel-32bit-3.14.12-15.1 gtk3-devel-debuginfo-32bit-3.14.12-15.1 gtk3-immodule-amharic-32bit-3.14.12-15.1 gtk3-immodule-amharic-debuginfo-32bit-3.14.12-15.1 gtk3-immodule-inuktitut-32bit-3.14.12-15.1 gtk3-immodule-inuktitut-debuginfo-32bit-3.14.12-15.1 gtk3-immodule-multipress-32bit-3.14.12-15.1 gtk3-immodule-multipress-debuginfo-32bit-3.14.12-15.1 gtk3-immodule-thai-32bit-3.14.12-15.1 gtk3-immodule-thai-debuginfo-32bit-3.14.12-15.1 gtk3-immodule-vietnamese-32bit-3.14.12-15.1 gtk3-immodule-vietnamese-debuginfo-32bit-3.14.12-15.1 gtk3-immodule-xim-32bit-3.14.12-15.1 gtk3-immodule-xim-debuginfo-32bit-3.14.12-15.1 gtk3-immodules-tigrigna-32bit-3.14.12-15.1 gtk3-immodules-tigrigna-debuginfo-32bit-3.14.12-15.1 gtk3-tools-32bit-3.14.12-15.1 gtk3-tools-debuginfo-32bit-3.14.12-15.1 gvfs-32bit-1.22.4-11.1 gvfs-debuginfo-32bit-1.22.4-11.1 libgtk-3-0-32bit-3.14.12-15.1 libgtk-3-0-debuginfo-32bit-3.14.12-15.1 librsvg-2-2-32bit-2.40.9-7.1 librsvg-2-2-debuginfo-32bit-2.40.9-7.1 - openSUSE 13.2 (noarch): eog-lang-3.14.4-7.3 eog-plugins-lang-3.14.2-3.2 gdm-branding-openSUSE-13.2-3.2 gdm-branding-upstream-3.14.2-7.1 gdm-lang-3.14.2-7.1 gdmflexiserver-3.14.2-7.1 gnome-control-center-lang-3.14.4-15.1 gnome-mines-lang-3.14.2-3.3 gnome-settings-daemon-lang-3.14.3-7.1 gnome-shell-classic-3.14.4-9.1 gnome-shell-extensions-common-3.14.4-9.1 gnome-shell-extensions-common-lang-3.14.4-9.1 gnome-shell-lang-3.14.4-9.1 gnome-terminal-lang-3.14.3-7.1 gnome-tweak-tool-3.14.3-8.2 gnome-tweak-tool-lang-3.14.3-8.2 gtk3-branding-SLED-13.2-14.2 gtk3-branding-openSUSE-13.2-14.2 gtk3-branding-upstream-3.14.12-15.1 gtk3-data-3.14.12-15.1 gtk3-lang-3.14.12-15.1 gtksourceview-lang-3.14.4-11.1 gvfs-lang-1.22.4-11.1 mutter-lang-3.14.4-9.1 orca-lang-3.14.4-7.1 tracker-lang-1.2.6-9.1 References: https://bugzilla.suse.com/924072

1 0

openSUSE-RU-2015:0738-1: important: Recommended update for tar
by maintenance＠opensuse.org 21 Apr '15

21 Apr '15

openSUSE Recommended Update: Recommended update for tar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0738-1 Rating: important References: #918487 #919233 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for tar fixes a regression: - disable tar-recursive--files-from.patch which was introduced with the latest update, but caused regressions (boo#918487, boo#919233) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-316=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): tar-1.28-2.16.1 tar-backup-scripts-1.28-2.16.1 tar-debuginfo-1.28-2.16.1 tar-debugsource-1.28-2.16.1 tar-tests-1.28-2.16.1 tar-tests-debuginfo-1.28-2.16.1 - openSUSE 13.2 (noarch): tar-lang-1.28-2.16.1 References: https://bugzilla.suse.com/918487 https://bugzilla.suse.com/919233

1 0

openSUSE-RU-2015:0737-1: moderate: Recommended update for Xournal
by maintenance＠opensuse.org 21 Apr '15

21 Apr '15

openSUSE Recommended Update: Recommended update for Xournal ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0737-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for Xournal provides version 0.4.8 with various fixes and improvements: - Added missing German translations - Window title format is corrected - incorrect-fsf-address warning is reported upstream (Bug #151) - have the large pen cursor option updated in the interface after defaults loaded - added possibility to optionally select a larger cursor - fixed implicit functions - Update from 0.4.5 to 0.4.8. (changes from http://xournal.sourceforge.net/manual.html#changelog) + Bugfixes and Features * option to auto-save documents and recover auto-saves * new Export to PDF code using cairo (and config option to enable legacy code) * horizontal view mode * improved touchscreen handling * pencil cursor option * added "new pages duplicate background" option (new default is false) * updated Windows build and packaging instructions * insert image tool * paste images and text directly from and to other applications * lasso tool * ignore events from non-drawing devices by default (ignore_other_devices) * "touchscreen as hand tool" option * "pen disables touchscreen" option; dialog box to designate touch device * tweaks to xinput event processing for touchscreens * generate cursors from pixbufs (fixes a Win32 bug) * work around Win32 bug: refuse paste if mismatched format * fix configure.in for automake-1.13 (Florian Bruhin, Andreas Huettel) * smoother icons for eraser and shapes buttons (by Colin Macdonald) * fix a cross-platform g_basename() issue (after Daniel German) * bugfix for file paths with non-English characters in Win32 * add some margin around lasso selection rectangle (after Niklas Beisert) * warn for fontconfig cache generation in Win32 * renamed "Journal" menu to "Page" * win32 portability code * fix bug in PDF export code on 64-bit systems * fix hand tool bug when exiting canvas * fix save bug with text boxes containing > 4095 characters * fix crash upon unplugging input devices * change close dialog box default to "save" * option to force PDF background rendering via cairo (slower but nicer) * wrapper for missing GdkPixbuf rendering function in newest poppler * disable GTK+ XInput bugfix by default * fix linker flags * evdev coordinate fix * fix 1.#J coordinates from win32 xoj files + Translations * Chinese (simplified) * Polish * Chinese (traditional) * Japanese * Italian * German * Spanish * Brazil Portuguese * Czech * Dutch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-317=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xournal-0.4.8-22.3.1 xournal-debuginfo-0.4.8-22.3.1 xournal-debugsource-0.4.8-22.3.1 References:

1 0

openSUSE-SU-2015:0732-1: important: Security update for xen
by opensuse-security＠opensuse.org 20 Apr '15

20 Apr '15

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0732-1 Rating: important References: #861318 #895528 #901488 #903680 #910254 #918995 #918998 #919098 #919464 #919663 #922705 #922706 Cross-References: CVE-2014-3615 CVE-2015-2044 CVE-2015-2045 CVE-2015-2151 CVE-2015-2152 CVE-2015-2752 CVE-2015-2756 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has 5 fixes is now available. Description: Xen was updated to 4.3.4 to fix multiple vulnerabities and non-security bugs. The following vulnerabilities were fixed: - Long latency MMIO mapping operations are not preemptible (XSA-125 CVE-2015-2752 bnc#922705) - Unmediated PCI command register access in qemu (XSA-126 CVE-2015-2756 bnc#922706) - Hypervisor memory corruption due to x86 emulator flaw (bnc#919464 CVE-2015-2151 XSA-123) - Information leak through version information hypercall (bnc#918998 CVE-2015-2045 XSA-122) - Information leak via internal x86 system device emulation (bnc#918995 (CVE-2015-2044 XSA-121) - HVM qemu unexpectedly enabling emulated VGA graphics backends (bnc#919663 CVE-2015-2152 XSA-119) - information leakage when guest sets high resolution (bnc#895528 CVE-2014-3615) The following non-security bugs were fixed: - L3: XEN blktap device intermittently fails to connect (bnc#919098) - Problems with detecting free loop devices on Xen guest startup (bnc#903680) - xentop reports "Found interface vif101.0 but domain 101 does not exist." (bnc#861318) - Intel ixgbe driver assigns rx/tx queues per core resulting in irq problems on servers with a large amount of CPU cores (bnc#901488) - SLES11 SP3 Xen VT-d igb NIC doesn't work (bnc#910254) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-314=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): xen-debugsource-4.3.4_02-41.1 xen-devel-4.3.4_02-41.1 xen-kmp-default-4.3.4_02_k3.11.10_29-41.1 xen-kmp-default-debuginfo-4.3.4_02_k3.11.10_29-41.1 xen-kmp-desktop-4.3.4_02_k3.11.10_29-41.1 xen-kmp-desktop-debuginfo-4.3.4_02_k3.11.10_29-41.1 xen-libs-4.3.4_02-41.1 xen-libs-debuginfo-4.3.4_02-41.1 xen-tools-domU-4.3.4_02-41.1 xen-tools-domU-debuginfo-4.3.4_02-41.1 - openSUSE 13.1 (x86_64): xen-4.3.4_02-41.1 xen-doc-html-4.3.4_02-41.1 xen-libs-32bit-4.3.4_02-41.1 xen-libs-debuginfo-32bit-4.3.4_02-41.1 xen-tools-4.3.4_02-41.1 xen-tools-debuginfo-4.3.4_02-41.1 xen-xend-tools-4.3.4_02-41.1 xen-xend-tools-debuginfo-4.3.4_02-41.1 - openSUSE 13.1 (i586): xen-kmp-pae-4.3.4_02_k3.11.10_29-41.1 xen-kmp-pae-debuginfo-4.3.4_02_k3.11.10_29-41.1 References: https://www.suse.com/security/cve/CVE-2014-3615.html https://www.suse.com/security/cve/CVE-2015-2044.html https://www.suse.com/security/cve/CVE-2015-2045.html https://www.suse.com/security/cve/CVE-2015-2151.html https://www.suse.com/security/cve/CVE-2015-2152.html https://www.suse.com/security/cve/CVE-2015-2752.html https://www.suse.com/security/cve/CVE-2015-2756.html https://bugzilla.suse.com/861318 https://bugzilla.suse.com/895528 https://bugzilla.suse.com/901488 https://bugzilla.suse.com/903680 https://bugzilla.suse.com/910254 https://bugzilla.suse.com/918995 https://bugzilla.suse.com/918998 https://bugzilla.suse.com/919098 https://bugzilla.suse.com/919464 https://bugzilla.suse.com/919663 https://bugzilla.suse.com/922705 https://bugzilla.suse.com/922706

1 0

openSUSE-RU-2015:0731-1: moderate: Recommended update for Apache2
by maintenance＠opensuse.org 20 Apr '15

20 Apr '15

openSUSE Recommended Update: Recommended update for Apache2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0731-1 Rating: moderate References: #866366 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for Apache2 fixes the following issue: - enable mod_imagemap (bnc#866366) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-311=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-2.4.10-19.1 apache2-debuginfo-2.4.10-19.1 apache2-debugsource-2.4.10-19.1 apache2-devel-2.4.10-19.1 apache2-event-2.4.10-19.1 apache2-event-debuginfo-2.4.10-19.1 apache2-example-pages-2.4.10-19.1 apache2-prefork-2.4.10-19.1 apache2-prefork-debuginfo-2.4.10-19.1 apache2-utils-2.4.10-19.1 apache2-utils-debuginfo-2.4.10-19.1 apache2-worker-2.4.10-19.1 apache2-worker-debuginfo-2.4.10-19.1 - openSUSE 13.2 (noarch): apache2-doc-2.4.10-19.1 References: https://bugzilla.suse.com/866366

1 0

openSUSE-RU-2015:0730-1: moderate: Recommended update for timezone
by maintenance＠opensuse.org 20 Apr '15

20 Apr '15

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0730-1 Rating: moderate References: #927029 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for timezone provides version 2015c with various adjustments (boo#927029): - correct Egypt 2015 DST transition from April 24 to April 30 - Changes affecting past time stamps and historic DST changes - time zones turned into links where this affects UTC offsets in pre-1970 time stamps only: America/Montreal Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-313=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-313=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): timezone-2015c-19.1 timezone-debuginfo-2015c-19.1 timezone-debugsource-2015c-19.1 - openSUSE 13.2 (noarch): timezone-java-2015c-19.1 - openSUSE 13.1 (i586 x86_64): timezone-2015c-23.1 timezone-debuginfo-2015c-23.1 timezone-debugsource-2015c-23.1 - openSUSE 13.1 (noarch): timezone-java-2015c-23.1 References: https://bugzilla.suse.com/927029

1 0

openSUSE-RU-2015:0729-1: moderate: Recommended update for lvm2
by maintenance＠opensuse.org 20 Apr '15

20 Apr '15

openSUSE Recommended Update: Recommended update for lvm2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0729-1 Rating: moderate References: #876192 #926405 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended udpate for lvm2 fixes the following issues: - fix lvmetad meta overflow if >=4g (32bit) when reading an info about MDAs (bsc#926405, bsc#876192) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-312=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-312=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): lvm2-2.02.98-43.24.1 lvm2-clvm-2.02.98-43.24.1 lvm2-clvm-debuginfo-2.02.98-43.24.1 lvm2-cmirrord-2.02.98-43.24.1 lvm2-cmirrord-debuginfo-2.02.98-43.24.1 lvm2-debuginfo-2.02.98-43.24.1 lvm2-debugsource-2.02.98-43.24.1 lvm2-devel-2.02.98-43.24.1 - openSUSE 13.1 (i586 x86_64): lvm2-2.02.98-0.28.37.1 lvm2-clvm-2.02.98-28.37.1 lvm2-clvm-debuginfo-2.02.98-28.37.1 lvm2-cmirrord-2.02.98-28.37.1 lvm2-cmirrord-debuginfo-2.02.98-28.37.1 lvm2-debuginfo-2.02.98-0.28.37.1 lvm2-debugsource-2.02.98-0.28.37.1 References: https://bugzilla.suse.com/876192 https://bugzilla.suse.com/926405

1 0

openSUSE-SU-2015:0728-1: moderate: Security update for icecast
by opensuse-security＠opensuse.org 16 Apr '15

16 Apr '15

openSUSE Security Update: Security update for icecast ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0728-1 Rating: moderate References: #926402 Cross-References: CVE-2015-3026 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The streaming server icecast was updated to fix a remote denial of service vulnerability. A remote attacker could crash icecast and cause denial of service when URL Auth is configured and used with stream_auth without credentials (bnc#926402 CVE-2015-3026) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-310=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-310=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): icecast-2.4.0-2.11.1 icecast-debuginfo-2.4.0-2.11.1 icecast-debugsource-2.4.0-2.11.1 icecast-doc-2.4.0-2.11.1 - openSUSE 13.1 (i586 x86_64): icecast-2.3.3-2.15.1 icecast-debuginfo-2.3.3-2.15.1 icecast-debugsource-2.3.3-2.15.1 icecast-doc-2.3.3-2.15.1 References: https://www.suse.com/security/cve/CVE-2015-3026.html https://bugzilla.suse.com/926402

1 0

openSUSE-SU-2015:0727-1: moderate: Security update for ntop
by opensuse-security＠opensuse.org 16 Apr '15

16 Apr '15

openSUSE Security Update: Security update for ntop ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0727-1 Rating: moderate References: #882971 Cross-References: CVE-2014-4165 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The network monitoring tool ntop was updated to fix one security issue. The following vulnerability was fixed: - Lack of filtering in the title parameter of links to rrdPlugin allowed cross-site-scripting (XSS) attacks against users of the web interface (bsc#882971, CVE-2014-4165) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-309=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-309=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ntop-5.0.2-2.3.1 ntop-debuginfo-5.0.2-2.3.1 ntop-debugsource-5.0.2-2.3.1 - openSUSE 13.1 (i586 x86_64): ntop-5.0.1-2.3.1 ntop-debuginfo-5.0.1-2.3.1 ntop-debugsource-5.0.1-2.3.1 References: https://www.suse.com/security/cve/CVE-2014-4165.html https://bugzilla.suse.com/882971

1 0

openSUSE-RU-2015:0726-1: moderate: Recommended update for lsof
by maintenance＠opensuse.org 16 Apr '15

16 Apr '15

openSUSE Recommended Update: Recommended update for lsof ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0726-1 Rating: moderate References: #919358 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: lsof was updated to fix output errors with certain NFS configurations. The following bugs were fixed: * lsof -N would print wrong export entries while having mounted two NFS volumes from the same server [bnc#919358] Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-308=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-308=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): lsof-4.84-21.3.1 lsof-debuginfo-4.84-21.3.1 lsof-debugsource-4.84-21.3.1 - openSUSE 13.1 (i586 x86_64): lsof-4.84-19.3.1 lsof-debuginfo-4.84-19.3.1 lsof-debugsource-4.84-19.3.1 References: https://bugzilla.suse.com/919358

1 0

openSUSE-SU-2015:0725-1: important: Security update for Adobe Flash Player
by opensuse-security＠opensuse.org 16 Apr '15

16 Apr '15

openSUSE Security Update: Security update for Adobe Flash Player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0725-1 Rating: important References: #856386 #901334 #905032 #907257 #909219 #913057 #914333 #914463 #922033 #927089 Cross-References: CVE-2014-0558 CVE-2014-0564 CVE-2014-0569 CVE-2014-0573 CVE-2014-0574 CVE-2014-0576 CVE-2014-0577 CVE-2014-0581 CVE-2014-0582 CVE-2014-0583 CVE-2014-0584 CVE-2014-0585 CVE-2014-0586 CVE-2014-0588 CVE-2014-0589 CVE-2014-0590 CVE-2014-8437 CVE-2014-8438 CVE-2014-8440 CVE-2014-8441 CVE-2014-8442 CVE-2015-0331 CVE-2015-0332 CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 CVE-2015-3044 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes 45 vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.457 to fix several security issues that could lead to remote code execution. An exploit for CVE-2015-3043 was reported to exist in the wild. The following vulnerabilities were fixed: * Memory corruption vulnerabilities that could lead to code execution (CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043). * Type confusion vulnerability that could lead to code execution (CVE-2015-0356). * Buffer overflow vulnerability that could lead to code execution (CVE-2015-0348). * Use-after-free vulnerabilities that could lead to code execution (CVE-2015-0349, CVE-2015-0351, CVE-2015-0358, CVE-2015-3039). * Double-free vulnerabilities that could lead to code execution (CVE-2015-0346, CVE-2015-0359). * Memory leak vulnerabilities that could be used to bypass ASLR (CVE-2015-0357, CVE-2015-3040). * Security bypass vulnerability that could lead to information disclosure (CVE-2015-3044) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-13=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): flash-player-11.2.202.457-158.1 flash-player-gnome-11.2.202.457-158.1 flash-player-kde4-11.2.202.457-158.1 References: https://www.suse.com/security/cve/CVE-2014-0558.html https://www.suse.com/security/cve/CVE-2014-0564.html https://www.suse.com/security/cve/CVE-2014-0569.html https://www.suse.com/security/cve/CVE-2014-0573.html https://www.suse.com/security/cve/CVE-2014-0574.html https://www.suse.com/security/cve/CVE-2014-0576.html https://www.suse.com/security/cve/CVE-2014-0577.html https://www.suse.com/security/cve/CVE-2014-0581.html https://www.suse.com/security/cve/CVE-2014-0582.html https://www.suse.com/security/cve/CVE-2014-0583.html https://www.suse.com/security/cve/CVE-2014-0584.html https://www.suse.com/security/cve/CVE-2014-0585.html https://www.suse.com/security/cve/CVE-2014-0586.html https://www.suse.com/security/cve/CVE-2014-0588.html https://www.suse.com/security/cve/CVE-2014-0589.html https://www.suse.com/security/cve/CVE-2014-0590.html https://www.suse.com/security/cve/CVE-2014-8437.html https://www.suse.com/security/cve/CVE-2014-8438.html https://www.suse.com/security/cve/CVE-2014-8440.html https://www.suse.com/security/cve/CVE-2014-8441.html https://www.suse.com/security/cve/CVE-2014-8442.html https://www.suse.com/security/cve/CVE-2015-0331.html https://www.suse.com/security/cve/CVE-2015-0332.html https://www.suse.com/security/cve/CVE-2015-0346.html https://www.suse.com/security/cve/CVE-2015-0347.html https://www.suse.com/security/cve/CVE-2015-0348.html https://www.suse.com/security/cve/CVE-2015-0349.html https://www.suse.com/security/cve/CVE-2015-0350.html https://www.suse.com/security/cve/CVE-2015-0351.html https://www.suse.com/security/cve/CVE-2015-0352.html https://www.suse.com/security/cve/CVE-2015-0353.html https://www.suse.com/security/cve/CVE-2015-0354.html https://www.suse.com/security/cve/CVE-2015-0355.html https://www.suse.com/security/cve/CVE-2015-0356.html https://www.suse.com/security/cve/CVE-2015-0357.html https://www.suse.com/security/cve/CVE-2015-0358.html https://www.suse.com/security/cve/CVE-2015-0359.html https://www.suse.com/security/cve/CVE-2015-0360.html https://www.suse.com/security/cve/CVE-2015-3038.html https://www.suse.com/security/cve/CVE-2015-3039.html https://www.suse.com/security/cve/CVE-2015-3040.html https://www.suse.com/security/cve/CVE-2015-3041.html https://www.suse.com/security/cve/CVE-2015-3042.html https://www.suse.com/security/cve/CVE-2015-3043.html https://www.suse.com/security/cve/CVE-2015-3044.html https://bugzilla.suse.com/856386 https://bugzilla.suse.com/901334 https://bugzilla.suse.com/905032 https://bugzilla.suse.com/907257 https://bugzilla.suse.com/909219 https://bugzilla.suse.com/913057 https://bugzilla.suse.com/914333 https://bugzilla.suse.com/914463 https://bugzilla.suse.com/922033 https://bugzilla.suse.com/927089

1 0

openSUSE-SU-2015:0724-1: moderate: Security update for rubygem-rest-client
by opensuse-security＠opensuse.org 16 Apr '15

16 Apr '15

openSUSE Security Update: Security update for rubygem-rest-client ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0724-1 Rating: moderate References: #917802 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: rubygem-rest-client was updated to fix one security issue. The following vulnerability was fixed: - Application logging of password information in plaintext could have allowed a local attacker to gain access to this information (bnc#917802) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-307=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-307=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): rubygem-rest-client-1.6.7-7.3.1 rubygem-rest-client-doc-1.6.7-7.3.1 rubygem-rest-client-testsuite-1.6.7-7.3.1 - openSUSE 13.1 (i586 x86_64): rubygem-rest-client-1.6.7-4.3.1 rubygem-rest-client-doc-1.6.7-4.3.1 rubygem-rest-client-testsuite-1.6.7-4.3.1 References: https://bugzilla.suse.com/917802

1 0

openSUSE-RU-2015:0721-1: moderate: Recommended update for ibus
by maintenance＠opensuse.org 15 Apr '15

15 Apr '15

openSUSE Recommended Update: Recommended update for ibus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0721-1 Rating: moderate References: #924696 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: ibus was updated to fix a bug that would prevent it from saving settings of multiple ibus input engines in new installations. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-306=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ibus-1.5.8-5.7.1 ibus-debuginfo-1.5.8-5.7.1 ibus-debugsource-1.5.8-5.7.1 ibus-devel-1.5.8-5.7.1 ibus-gtk-1.5.8-5.7.1 ibus-gtk-debuginfo-1.5.8-5.7.1 ibus-gtk3-1.5.8-5.7.1 ibus-gtk3-debuginfo-1.5.8-5.7.1 libibus-1_0-5-1.5.8-5.7.1 libibus-1_0-5-debuginfo-1.5.8-5.7.1 python-ibus-1.5.8-5.7.1 typelib-1_0-IBus-1_0-1.5.8-5.7.1 - openSUSE 13.2 (x86_64): ibus-gtk-32bit-1.5.8-5.7.1 ibus-gtk-debuginfo-32bit-1.5.8-5.7.1 ibus-gtk3-32bit-1.5.8-5.7.1 ibus-gtk3-debuginfo-32bit-1.5.8-5.7.1 libibus-1_0-5-32bit-1.5.8-5.7.1 libibus-1_0-5-debuginfo-32bit-1.5.8-5.7.1 - openSUSE 13.2 (noarch): ibus-branding-openSUSE-KDE-1.5.8-5.7.1 ibus-lang-1.5.8-5.7.1 References: https://bugzilla.suse.com/924696

1 0

openSUSE-RU-2015:0720-1: moderate: Recommended update for obs-service-download_files, obs-service-tar_scm, osc
by maintenance＠opensuse.org 15 Apr '15

15 Apr '15

openSUSE Recommended Update: Recommended update for obs-service-download_files, obs-service-tar_scm, osc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0720-1 Rating: moderate References: Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: obs-service-download_files was updated to version 0.5.1.git.1426665567.a5a06e5 to fix: - Stricter change filename check - fix syntax in .service file - Generate changes entries from special files - Add source service tar_scm to fetch sources moved to https://github.com/openSUSE/obs-service-download_files - We do not tell the server that we are an OBS tool by default anymore, because too many sites just have a white list, but they accept wget obs-service-tar_scm was updated to version 0.5.1.1426664483.de67b88 to fix a lot of issues. See RPM changelog or git history. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-305=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-305=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): obs-service-download_files-0.5.1.git.1426665567.a5a06e5-2.3.1 obs-service-tar_scm-0.5.1.1426664483.de67b88-3.1 osc-0.151.2-11.1 - openSUSE 13.1 (noarch): obs-service-download_files-0.5.1.git.1426665567.a5a06e5-3.3.1 obs-service-tar_scm-0.5.1.1426664483.de67b88-2.3.1 osc-0.151.2-2.27.1 References:

1 0

openSUSE-SU-2015:0718-1: important: Security update for Adobe Flash Player
by opensuse-security＠opensuse.org 15 Apr '15

15 Apr '15

openSUSE Security Update: Security update for Adobe Flash Player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0718-1 Rating: important References: #927089 Cross-References: CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 CVE-2015-3044 Affected Products: openSUSE 13.2:NonFree openSUSE 13.1:NonFree ______________________________________________________________________________ An update that fixes 22 vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.457 to fix several security issues that could lead to remote code execution. An exploit for CVE-2015-3043 was reported to exist in the wild. The following vulnerabilities were fixed: * Memory corruption vulnerabilities that could lead to code execution (CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043). * Type confusion vulnerability that could lead to code execution (CVE-2015-0356). * Buffer overflow vulnerability that could lead to code execution (CVE-2015-0348). * Use-after-free vulnerabilities that could lead to code execution (CVE-2015-0349, CVE-2015-0351, CVE-2015-0358, CVE-2015-3039). * Double-free vulnerabilities that could lead to code execution (CVE-2015-0346, CVE-2015-0359). * Memory leak vulnerabilities that could be used to bypass ASLR (CVE-2015-0357, CVE-2015-3040). * Security bypass vulnerability that could lead to information disclosure (CVE-2015-3044). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2:NonFree: zypper in -t patch openSUSE-2015-304=1 - openSUSE 13.1:NonFree: zypper in -t patch openSUSE-2015-304=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2:NonFree (i586 x86_64): flash-player-11.2.202.457-2.48.1 flash-player-gnome-11.2.202.457-2.48.1 flash-player-kde4-11.2.202.457-2.48.1 - openSUSE 13.1:NonFree (i586 x86_64): flash-player-11.2.202.457-113.1 flash-player-gnome-11.2.202.457-113.1 flash-player-kde4-11.2.202.457-113.1 References: https://www.suse.com/security/cve/CVE-2015-0346.html https://www.suse.com/security/cve/CVE-2015-0347.html https://www.suse.com/security/cve/CVE-2015-0348.html https://www.suse.com/security/cve/CVE-2015-0349.html https://www.suse.com/security/cve/CVE-2015-0350.html https://www.suse.com/security/cve/CVE-2015-0351.html https://www.suse.com/security/cve/CVE-2015-0352.html https://www.suse.com/security/cve/CVE-2015-0353.html https://www.suse.com/security/cve/CVE-2015-0354.html https://www.suse.com/security/cve/CVE-2015-0355.html https://www.suse.com/security/cve/CVE-2015-0356.html https://www.suse.com/security/cve/CVE-2015-0357.html https://www.suse.com/security/cve/CVE-2015-0358.html https://www.suse.com/security/cve/CVE-2015-0359.html https://www.suse.com/security/cve/CVE-2015-0360.html https://www.suse.com/security/cve/CVE-2015-3038.html https://www.suse.com/security/cve/CVE-2015-3039.html https://www.suse.com/security/cve/CVE-2015-3040.html https://www.suse.com/security/cve/CVE-2015-3041.html https://www.suse.com/security/cve/CVE-2015-3042.html https://www.suse.com/security/cve/CVE-2015-3043.html https://www.suse.com/security/cve/CVE-2015-3044.html https://bugzilla.suse.com/927089

1 0

openSUSE-RU-2015:0717-1: Recommended update for KDE Frameworks 5 and Plasma 5
by maintenance＠opensuse.org 14 Apr '15

14 Apr '15

openSUSE Recommended Update: Recommended update for KDE Frameworks 5 and Plasma 5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0717-1 Rating: low References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update provides the current bugfix-release 5.8.0 of KDE Frameworks5 and 5.2.2 of Plasma5 with various bugfixes and improvements. For a detailed description, please refer to: KDE Frameworks 5.8.0: https://www.kde.org/announcements/kde-frameworks-5.8.0.php Plasma5: https://www.kde.org/announcements/plasma-5.2.2.php Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-303=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): attica-qt5-debugsource-5.8.0-15.1 attica-qt5-devel-5.8.0-15.1 baloo5-5.6.2-15.18 baloo5-debugsource-5.6.2-15.18 baloo5-devel-5.6.2-15.18 baloo5-file-5.6.2-15.18 baloo5-file-debuginfo-5.6.2-15.18 baloo5-imports-5.6.2-15.18 baloo5-imports-debuginfo-5.6.2-15.18 baloo5-kioslaves-5.6.2-15.18 baloo5-kioslaves-debuginfo-5.6.2-15.18 baloo5-tools-5.6.2-15.18 baloo5-tools-debuginfo-5.6.2-15.18 bluedevil5-5.2.2-5.3 bluedevil5-debuginfo-5.2.2-5.3 bluedevil5-debugsource-5.2.2-5.3 breeze-5.2.2-15.2 breeze-debugsource-5.2.2-15.2 breeze4-style-5.2.2-15.1 breeze4-style-debuginfo-5.2.2-15.1 breeze4-style-debugsource-5.2.2-15.1 breeze5-decoration-5.2.2-15.2 breeze5-decoration-debuginfo-5.2.2-15.2 breeze5-style-5.2.2-15.2 breeze5-style-debuginfo-5.2.2-15.2 drkonqi5-5.2.2-23.1 drkonqi5-debuginfo-5.2.2-23.1 extra-cmake-modules-1.8.0-15.1 frameworkintegration-debugsource-5.8.0-15.4 frameworkintegration-devel-5.8.0-15.4 frameworkintegration-plugin-5.8.0-15.4 frameworkintegration-plugin-debuginfo-5.8.0-15.4 kactivities5-5.8.0-15.1 kactivities5-debuginfo-5.8.0-15.1 kactivities5-debugsource-5.8.0-15.1 kactivities5-devel-5.8.0-15.1 kactivities5-imports-5.8.0-15.1 kactivities5-imports-debuginfo-5.8.0-15.1 kapidox-5.8.0-15.1 karchive-debugsource-5.8.0-15.1 karchive-devel-5.8.0-15.1 kauth-debugsource-5.8.0-15.1 kauth-devel-5.8.0-15.1 kbookmarks-debugsource-5.8.0-15.1 kbookmarks-devel-5.8.0-15.1 kcm-touchpad5-5.2.1~git20150225-5.12 kcm-touchpad5-debuginfo-5.2.1~git20150225-5.12 kcm-touchpad5-debugsource-5.2.1~git20150225-5.12 kcm_sddm-5.2.2-5.9 kcm_sddm-debuginfo-5.2.2-5.9 kcm_sddm-debugsource-5.2.2-5.9 kcmutils-debugsource-5.8.0-15.1 kcmutils-devel-5.8.0-15.1 kcodecs-debugsource-5.8.0-15.1 kcodecs-devel-5.8.0-15.1 kcompletion-debugsource-5.8.0-15.1 kcompletion-devel-5.8.0-15.1 kconf_update5-5.8.0-15.1 kconf_update5-debuginfo-5.8.0-15.1 kconfig-debugsource-5.8.0-15.1 kconfig-devel-5.8.0-15.1 kconfig-devel-debuginfo-5.8.0-15.1 kconfigwidgets-debugsource-5.8.0-15.1 kconfigwidgets-devel-5.8.0-15.1 kcoreaddons-5.8.0-15.1 kcoreaddons-debugsource-5.8.0-15.1 kcoreaddons-devel-5.8.0-15.1 kcoreaddons-devel-debuginfo-5.8.0-15.1 kcrash-debugsource-5.8.0-15.1 kcrash-devel-5.8.0-15.1 kdbusaddons-debugsource-5.8.0-15.1 kdbusaddons-devel-5.8.0-15.1 kdbusaddons-tools-5.8.0-15.1 kdbusaddons-tools-debuginfo-5.8.0-15.1 kde-cli-tools5-5.2.2-15.1 kde-cli-tools5-debuginfo-5.2.2-15.1 kde-cli-tools5-debugsource-5.2.2-15.1 kde-gtk-config5-5.2.2-5.3 kde-gtk-config5-debuginfo-5.2.2-5.3 kde-gtk-config5-debugsource-5.2.2-5.3 kdeclarative-components-5.8.0-15.1 kdeclarative-components-debuginfo-5.8.0-15.1 kdeclarative-debugsource-5.8.0-15.1 kdeclarative-devel-5.8.0-15.1 kdeclarative-tools-5.8.0-15.1 kdeclarative-tools-debuginfo-5.8.0-15.1 kded-5.8.0-15.1 kded-debuginfo-5.8.0-15.1 kded-debugsource-5.8.0-15.1 kded-devel-5.8.0-15.1 kdelibs4support-5.8.0-15.6 kdelibs4support-debuginfo-5.8.0-15.6 kdelibs4support-debugsource-5.8.0-15.6 kdelibs4support-devel-5.8.0-15.6 kdesignerplugin-5.8.0-15.4 kdesignerplugin-debuginfo-5.8.0-15.4 kdesignerplugin-debugsource-5.8.0-15.4 kdesignerplugin-devel-5.8.0-15.4 kdesu-debugsource-5.8.0-15.1 kdesu-devel-5.8.0-15.1 kdewebkit-debugsource-5.8.0-15.1 kdewebkit-devel-5.8.0-15.1 kdnssd-framework-debugsource-5.8.0-15.1 kdnssd-framework-devel-5.8.0-15.1 kdoctools-5.8.0-15.4 kdoctools-debuginfo-5.8.0-15.4 kdoctools-debugsource-5.8.0-15.4 kdoctools-devel-5.8.0-15.4 kemoticons-debugsource-5.8.0-15.1 kemoticons-devel-5.8.0-15.1 kfilemetadata5-5.6.2-15.1 kfilemetadata5-debuginfo-5.6.2-15.1 kfilemetadata5-debugsource-5.6.2-15.1 kfilemetadata5-devel-5.6.2-15.1 kglobalaccel-debugsource-5.8.0-15.1 kglobalaccel-devel-5.8.0-15.1 kglobalaccel5-5.8.0-15.1 kglobalaccel5-debuginfo-5.8.0-15.1 kguiaddons-debugsource-5.8.0-15.1 kguiaddons-devel-5.8.0-15.1 khotkeys5-5.2.2-20.13 khotkeys5-debuginfo-5.2.2-20.13 khotkeys5-debugsource-5.2.2-20.13 khotkeys5-devel-5.2.2-20.13 khtml-debugsource-5.8.0-15.1 khtml-devel-5.8.0-15.1 ki18n-debugsource-5.8.0-15.1 ki18n-devel-5.8.0-15.1 kiconthemes-debugsource-5.8.0-15.1 kiconthemes-devel-5.8.0-15.1 kiconthemes-devel-debuginfo-5.8.0-15.1 kidletime-debugsource-5.8.0-15.1 kidletime-devel-5.8.0-15.1 kimageformats-5.8.0-15.1 kimageformats-debuginfo-5.8.0-15.1 kimageformats-debugsource-5.8.0-15.1 kinfocenter5-5.2.2-15.1 kinfocenter5-debuginfo-5.2.2-15.1 kinfocenter5-debugsource-5.2.2-15.1 kinit-5.8.0-15.1 kinit-debuginfo-5.8.0-15.1 kinit-debugsource-5.8.0-15.1 kinit-devel-5.8.0-15.1 kio-5.8.0-15.4 kio-debuginfo-5.8.0-15.4 kio-debugsource-5.8.0-15.4 kio-devel-5.8.0-15.4 kio-extras5-5.2.2-16.2 kio-extras5-debuginfo-5.2.2-16.2 kio-extras5-debugsource-5.2.2-16.2 kitemmodels-debugsource-5.8.0-15.1 kitemmodels-devel-5.8.0-15.1 kitemviews-debugsource-5.8.0-15.1 kitemviews-devel-5.8.0-15.1 kjobwidgets-debugsource-5.8.0-15.1 kjobwidgets-devel-5.8.0-15.1 kjs-debugsource-5.8.0-15.1 kjs-devel-5.8.0-15.1 kjs-devel-debuginfo-5.8.0-15.1 kjsembed-debugsource-5.8.0-15.1 kjsembed-devel-5.8.0-15.1 kjsembed-devel-debuginfo-5.8.0-15.1 kmediaplayer-debugsource-5.8.0-15.1 kmediaplayer-devel-5.8.0-15.1 kmenuedit5-5.2.2-15.6 kmenuedit5-debuginfo-5.2.2-15.6 kmenuedit5-debugsource-5.2.2-15.6 knewstuff-debugsource-5.8.0-15.1 knewstuff-devel-5.8.0-15.1 knotifications-debugsource-5.8.0-15.1 knotifications-devel-5.8.0-15.1 knotifyconfig-debugsource-5.8.0-15.1 knotifyconfig-devel-5.8.0-15.1 kpackage-5.8.0-9.1 kpackage-debuginfo-5.8.0-9.1 kpackage-debugsource-5.8.0-9.1 kpackage-devel-5.8.0-9.1 kparts-debugsource-5.8.0-15.1 kparts-devel-5.8.0-15.1 kpeople5-5.8.0-2.1 kpeople5-debuginfo-5.8.0-2.1 kpeople5-debugsource-5.8.0-2.1 kpeople5-devel-5.8.0-2.1 kpeople5-lang-5.8.0-2.1 kplotting-debugsource-5.8.0-15.1 kplotting-devel-5.8.0-15.1 kpty-debugsource-5.8.0-15.1 kpty-devel-5.8.0-15.1 kross-5.8.0-15.1 kross-debuginfo-5.8.0-15.1 kross-debugsource-5.8.0-15.1 kross-devel-5.8.0-15.1 kross-devel-debuginfo-5.8.0-15.1 krunner-debugsource-5.8.0-15.1 krunner-devel-5.8.0-15.1 kscreen5-5.2.2-5.3 kscreen5-debuginfo-5.2.2-5.3 kscreen5-debugsource-5.2.2-5.3 kservice-5.8.0-15.1 kservice-debuginfo-5.8.0-15.1 kservice-debugsource-5.8.0-15.1 kservice-devel-5.8.0-15.1 ksshaskpass5-5.2.2-5.3 ksshaskpass5-debuginfo-5.2.2-5.3 ksshaskpass5-debugsource-5.2.2-5.3 kssl-5.8.0-15.6 kssl-debuginfo-5.8.0-15.6 ksysguard5-5.2.2-15.9 ksysguard5-debuginfo-5.2.2-15.9 ksysguard5-debugsource-5.2.2-15.9 ktexteditor-5.8.0-15.1 ktexteditor-debuginfo-5.8.0-15.1 ktexteditor-debugsource-5.8.0-15.1 ktexteditor-devel-5.8.0-15.1 ktextwidgets-debugsource-5.8.0-15.1 ktextwidgets-devel-5.8.0-15.1 kunitconversion-debugsource-5.8.0-15.1 kunitconversion-devel-5.8.0-15.1 kwallet-debugsource-5.8.0-15.1 kwallet-devel-5.8.0-15.1 kwalletd5-5.8.0-15.1 kwalletd5-debuginfo-5.8.0-15.1 kwayland-debugsource-5.2.2-15.1 kwayland-devel-5.2.2-15.1 kwidgetsaddons-debugsource-5.8.0-15.1 kwidgetsaddons-devel-5.8.0-15.1 kwin5-5.2.2-15.6 kwin5-debuginfo-5.2.2-15.6 kwin5-debugsource-5.2.2-15.6 kwin5-devel-5.2.2-15.6 kwindowsystem-debugsource-5.8.0-16.1 kwindowsystem-devel-5.8.0-16.1 kwrited5-5.2.2-15.1 kwrited5-debuginfo-5.2.2-15.1 kwrited5-debugsource-5.2.2-15.1 kxmlgui-debugsource-5.8.0-15.4 kxmlgui-devel-5.8.0-15.4 kxmlrpcclient5-debugsource-5.8.0-2.1 kxmlrpcclient5-devel-5.8.0-2.1 libKF5Activities5-5.8.0-15.1 libKF5Activities5-debuginfo-5.8.0-15.1 libKF5Archive5-5.8.0-15.1 libKF5Archive5-debuginfo-5.8.0-15.1 libKF5Attica5-5.8.0-15.1 libKF5Attica5-debuginfo-5.8.0-15.1 libKF5Auth5-5.8.0-15.1 libKF5Auth5-debuginfo-5.8.0-15.1 libKF5Baloo1-5.6.2-15.18 libKF5Baloo1-debuginfo-5.6.2-15.18 libKF5BalooXapian1-5.6.2-15.18 libKF5BalooXapian1-debuginfo-5.6.2-15.18 libKF5Bookmarks5-5.8.0-15.1 libKF5Bookmarks5-debuginfo-5.8.0-15.1 libKF5Codecs5-5.8.0-15.1 libKF5Codecs5-debuginfo-5.8.0-15.1 libKF5Completion5-5.8.0-15.1 libKF5Completion5-debuginfo-5.8.0-15.1 libKF5ConfigCore5-5.8.0-15.1 libKF5ConfigCore5-debuginfo-5.8.0-15.1 libKF5ConfigGui5-5.8.0-15.1 libKF5ConfigGui5-debuginfo-5.8.0-15.1 libKF5ConfigWidgets5-5.8.0-15.1 libKF5ConfigWidgets5-debuginfo-5.8.0-15.1 libKF5CoreAddons5-5.8.0-15.1 libKF5CoreAddons5-debuginfo-5.8.0-15.1 libKF5Crash5-5.8.0-15.1 libKF5Crash5-debuginfo-5.8.0-15.1 libKF5DBusAddons5-5.8.0-15.1 libKF5DBusAddons5-debuginfo-5.8.0-15.1 libKF5DNSSD5-5.8.0-15.1 libKF5DNSSD5-debuginfo-5.8.0-15.1 libKF5Declarative5-5.8.0-15.1 libKF5Declarative5-debuginfo-5.8.0-15.1 libKF5Emoticons5-5.8.0-15.1 libKF5Emoticons5-debuginfo-5.8.0-15.1 libKF5GlobalAccel5-5.8.0-15.1 libKF5GlobalAccel5-debuginfo-5.8.0-15.1 libKF5GuiAddons5-5.8.0-15.1 libKF5GuiAddons5-debuginfo-5.8.0-15.1 libKF5I18n5-5.8.0-15.1 libKF5I18n5-debuginfo-5.8.0-15.1 libKF5IconThemes5-5.8.0-15.1 libKF5IconThemes5-debuginfo-5.8.0-15.1 libKF5IdleTime5-5.8.0-15.1 libKF5IdleTime5-debuginfo-5.8.0-15.1 libKF5ItemModels5-5.8.0-15.1 libKF5ItemModels5-debuginfo-5.8.0-15.1 libKF5ItemViews5-5.8.0-15.1 libKF5ItemViews5-debuginfo-5.8.0-15.1 libKF5JS5-5.8.0-15.1 libKF5JS5-debuginfo-5.8.0-15.1 libKF5JSApi5-5.8.0-15.1 libKF5JSApi5-debuginfo-5.8.0-15.1 libKF5JobWidgets5-5.8.0-15.1 libKF5JobWidgets5-debuginfo-5.8.0-15.1 libKF5JsEmbed5-5.8.0-15.1 libKF5JsEmbed5-debuginfo-5.8.0-15.1 libKF5KCMUtils5-5.8.0-15.1 libKF5KCMUtils5-debuginfo-5.8.0-15.1 libKF5KDELibs4Support5-5.8.0-15.6 libKF5KDELibs4Support5-debuginfo-5.8.0-15.6 libKF5KHtml5-5.8.0-15.1 libKF5KHtml5-debuginfo-5.8.0-15.1 libKF5MediaPlayer5-5.8.0-15.1 libKF5MediaPlayer5-debuginfo-5.8.0-15.1 libKF5ModemManagerQt-debugsource-5.2.2-15.1 libKF5ModemManagerQt-devel-5.2.2-15.1 libKF5ModemManagerQt5-5.2.2-15.1 libKF5ModemManagerQt5-debuginfo-5.2.2-15.1 libKF5NetworkManagerQt-debugsource-5.8.0-15.1 libKF5NetworkManagerQt-devel-5.8.0-15.1 libKF5NetworkManagerQt6-5.8.0-15.1 libKF5NetworkManagerQt6-debuginfo-5.8.0-15.1 libKF5NewStuff5-5.8.0-15.1 libKF5NewStuff5-debuginfo-5.8.0-15.1 libKF5Notifications5-5.8.0-15.1 libKF5Notifications5-debuginfo-5.8.0-15.1 libKF5NotifyConfig5-5.8.0-15.1 libKF5NotifyConfig5-debuginfo-5.8.0-15.1 libKF5Parts5-5.8.0-15.1 libKF5Parts5-debuginfo-5.8.0-15.1 libKF5Plotting5-5.8.0-15.1 libKF5Plotting5-debuginfo-5.8.0-15.1 libKF5Pty5-5.8.0-15.1 libKF5Pty5-debuginfo-5.8.0-15.1 libKF5QuickAddons5-5.8.0-15.1 libKF5QuickAddons5-debuginfo-5.8.0-15.1 libKF5Runner5-5.8.0-15.1 libKF5Runner5-debuginfo-5.8.0-15.1 libKF5Screen6-5.2.2-15.1 libKF5Screen6-debuginfo-5.2.2-15.1 libKF5Solid5-5.8.0-15.1 libKF5Solid5-debuginfo-5.8.0-15.1 libKF5SonnetCore5-5.8.0-15.4 libKF5SonnetCore5-debuginfo-5.8.0-15.4 libKF5SonnetUi5-5.8.0-15.4 libKF5SonnetUi5-debuginfo-5.8.0-15.4 libKF5Style5-5.8.0-15.4 libKF5Style5-debuginfo-5.8.0-15.4 libKF5Su5-5.8.0-15.1 libKF5Su5-debuginfo-5.8.0-15.1 libKF5TextWidgets5-5.8.0-15.1 libKF5TextWidgets5-debuginfo-5.8.0-15.1 libKF5ThreadWeaver5-5.8.0-15.1 libKF5ThreadWeaver5-debuginfo-5.8.0-15.1 libKF5UnitConversion5-5.8.0-15.1 libKF5UnitConversion5-debuginfo-5.8.0-15.1 libKF5Wallet5-5.8.0-15.1 libKF5Wallet5-debuginfo-5.8.0-15.1 libKF5WaylandClient5-5.2.2-15.1 libKF5WaylandClient5-debuginfo-5.2.2-15.1 libKF5WaylandServer5-5.2.2-15.1 libKF5WaylandServer5-debuginfo-5.2.2-15.1 libKF5WebKit5-5.8.0-15.1 libKF5WebKit5-debuginfo-5.8.0-15.1 libKF5WidgetsAddons5-5.8.0-15.1 libKF5WidgetsAddons5-debuginfo-5.8.0-15.1 libKF5WindowSystem5-5.8.0-16.1 libKF5WindowSystem5-debuginfo-5.8.0-16.1 libKF5XmlGui5-5.8.0-15.4 libKF5XmlGui5-debuginfo-5.8.0-15.4 libKF5XmlRpcClient5-5.8.0-2.1 libKF5XmlRpcClient5-debuginfo-5.8.0-2.1 libbluedevil5-5.2.2-5.2 libbluedevil5-debuginfo-5.2.2-5.2 libbluedevil5-debugsource-5.2.2-5.2 libbluedevil5-devel-5.2.2-5.2 libkdecoration2-debugsource-5.2.2-5.3 libkdecoration2-devel-5.2.2-5.3 libkdecorations2-5-5.2.2-5.3 libkdecorations2-5-debuginfo-5.2.2-5.3 libkdecorations2private5-5.2.2-5.3 libkdecorations2private5-debuginfo-5.2.2-5.3 libkscreen2-debugsource-5.2.2-15.1 libkscreen2-devel-5.2.2-15.1 libkscreen2-plugin-5.2.2-15.1 libkscreen2-plugin-debuginfo-5.2.2-15.1 libksysguard5-5.2.2-15.5 libksysguard5-debuginfo-5.2.2-15.5 libksysguard5-debugsource-5.2.2-15.5 libksysguard5-devel-5.2.2-15.5 libksysguard5-helper-5.2.2-15.5 libksysguard5-helper-debuginfo-5.2.2-15.5 libkwalletbackend5-5-5.8.0-15.1 libkwalletbackend5-5-debuginfo-5.8.0-15.1 milou5-5.2.2-15.5 milou5-debuginfo-5.2.2-15.5 milou5-debugsource-5.2.2-15.5 oxygen5-5.2.2-15.1 oxygen5-cursors-5.2.2-15.1 oxygen5-debugsource-5.2.2-15.1 oxygen5-devel-5.2.2-15.1 oxygen5-sounds-5.2.2-15.1 oxygen5-style-5.2.2-15.1 oxygen5-style-debuginfo-5.2.2-15.1 plasma-framework-5.8.0-17.4 plasma-framework-components-5.8.0-17.4 plasma-framework-components-debuginfo-5.8.0-17.4 plasma-framework-debuginfo-5.8.0-17.4 plasma-framework-debugsource-5.8.0-17.4 plasma-framework-devel-5.8.0-17.4 plasma-framework-private-5.8.0-17.4 plasma-framework-private-debuginfo-5.8.0-17.4 plasma-nm5-5.2.2-17.4 plasma-nm5-debuginfo-5.2.2-17.4 plasma-nm5-debugsource-5.2.2-17.4 plasma-nm5-l2tp-5.2.2-17.4 plasma-nm5-l2tp-debuginfo-5.2.2-17.4 plasma-nm5-openconnect-5.2.2-17.4 plasma-nm5-openconnect-debuginfo-5.2.2-17.4 plasma-nm5-openswan-5.2.2-17.4 plasma-nm5-openswan-debuginfo-5.2.2-17.4 plasma-nm5-openvpn-5.2.2-17.4 plasma-nm5-openvpn-debuginfo-5.2.2-17.4 plasma-nm5-pptp-5.2.2-17.4 plasma-nm5-pptp-debuginfo-5.2.2-17.4 plasma-nm5-strongswan-5.2.2-17.4 plasma-nm5-strongswan-debuginfo-5.2.2-17.4 plasma-nm5-vpnc-5.2.2-17.4 plasma-nm5-vpnc-debuginfo-5.2.2-17.4 plasma5-addons-5.2.2-15.1 plasma5-addons-debuginfo-5.2.2-15.1 plasma5-addons-debugsource-5.2.2-15.1 plasma5-addons-kimpanel-5.2.2-15.1 plasma5-addons-kimpanel-debuginfo-5.2.2-15.1 plasma5-desktop-5.2.2-20.1 plasma5-desktop-branding-openSUSE-13.2-11.1 plasma5-desktop-branding-upstream-5.2.2-20.1 plasma5-desktop-debuginfo-5.2.2-20.1 plasma5-desktop-debugsource-5.2.2-20.1 plasma5-openSUSE-13.2-11.1 plasma5-openSUSE-debugsource-13.2-11.1 plasma5-workspace-5.2.2-23.1 plasma5-workspace-branding-openSUSE-13.2-11.1 plasma5-workspace-branding-openSUSE-debuginfo-13.2-11.1 plasma5-workspace-branding-upstream-5.2.2-23.1 plasma5-workspace-debuginfo-5.2.2-23.1 plasma5-workspace-debugsource-5.2.2-23.1 plasma5-workspace-devel-5.2.2-23.1 plasma5-workspace-libs-5.2.2-23.1 plasma5-workspace-libs-debuginfo-5.2.2-23.1 polkit-kde-agent-5-5.2.2-2.7.1 polkit-kde-agent-5-debuginfo-5.2.2-2.7.1 polkit-kde-agent-5-debugsource-5.2.2-2.7.1 powerdevil5-5.2.2-11.3 powerdevil5-debuginfo-5.2.2-11.3 powerdevil5-debugsource-5.2.2-11.3 solid-debugsource-5.8.0-15.1 solid-devel-5.8.0-15.1 solid-imports-5.8.0-15.1 solid-imports-debuginfo-5.8.0-15.1 solid-tools-5.8.0-15.1 solid-tools-debuginfo-5.8.0-15.1 sonnet-debugsource-5.8.0-15.4 sonnet-devel-5.8.0-15.4 systemsettings5-5.2.2-15.1 systemsettings5-debuginfo-5.2.2-15.1 systemsettings5-debugsource-5.2.2-15.1 systemsettings5-devel-5.2.2-15.1 threadweaver-debugsource-5.8.0-15.1 threadweaver-devel-5.8.0-15.1 - openSUSE 13.2 (x86_64): attica-qt5-devel-32bit-5.8.0-15.1 frameworkintegration-devel-32bit-5.8.0-15.4 frameworkintegration-plugin-32bit-5.8.0-15.4 frameworkintegration-plugin-debuginfo-32bit-5.8.0-15.4 kactivities5-devel-32bit-5.8.0-15.1 karchive-devel-32bit-5.8.0-15.1 kauth-devel-32bit-5.8.0-15.1 kbookmarks-devel-32bit-5.8.0-15.1 kcmutils-devel-32bit-5.8.0-15.1 kcodecs-devel-32bit-5.8.0-15.1 kcompletion-devel-32bit-5.8.0-15.1 kconfig-devel-32bit-5.8.0-15.1 kconfig-devel-debuginfo-32bit-5.8.0-15.1 kconfigwidgets-devel-32bit-5.8.0-15.1 kcoreaddons-devel-32bit-5.8.0-15.1 kcoreaddons-devel-debuginfo-32bit-5.8.0-15.1 kcrash-devel-32bit-5.8.0-15.1 kdbusaddons-devel-32bit-5.8.0-15.1 kdeclarative-components-32bit-5.8.0-15.1 kdeclarative-components-debuginfo-32bit-5.8.0-15.1 kdeclarative-devel-32bit-5.8.0-15.1 kdelibs4support-32bit-5.8.0-15.6 kdelibs4support-debuginfo-32bit-5.8.0-15.6 kdelibs4support-devel-32bit-5.8.0-15.6 kdesu-devel-32bit-5.8.0-15.1 kdewebkit-devel-32bit-5.8.0-15.1 kdnssd-framework-devel-32bit-5.8.0-15.1 kemoticons-devel-32bit-5.8.0-15.1 kfilemetadata5-32bit-5.6.2-15.1 kfilemetadata5-debuginfo-32bit-5.6.2-15.1 kglobalaccel-devel-32bit-5.8.0-15.1 kguiaddons-devel-32bit-5.8.0-15.1 khtml-devel-32bit-5.8.0-15.1 ki18n-devel-32bit-5.8.0-15.1 kiconthemes-devel-32bit-5.8.0-15.1 kiconthemes-devel-debuginfo-32bit-5.8.0-15.1 kidletime-devel-32bit-5.8.0-15.1 kimageformats-32bit-5.8.0-15.1 kimageformats-debuginfo-32bit-5.8.0-15.1 kinit-32bit-5.8.0-15.1 kinit-debuginfo-32bit-5.8.0-15.1 kio-32bit-5.8.0-15.4 kio-debuginfo-32bit-5.8.0-15.4 kio-devel-32bit-5.8.0-15.4 kitemmodels-devel-32bit-5.8.0-15.1 kitemviews-devel-32bit-5.8.0-15.1 kjobwidgets-devel-32bit-5.8.0-15.1 kjs-devel-32bit-5.8.0-15.1 kjs-devel-debuginfo-32bit-5.8.0-15.1 kjsembed-devel-32bit-5.8.0-15.1 kjsembed-devel-debuginfo-32bit-5.8.0-15.1 kmediaplayer-devel-32bit-5.8.0-15.1 knewstuff-devel-32bit-5.8.0-15.1 knotifications-devel-32bit-5.8.0-15.1 knotifyconfig-devel-32bit-5.8.0-15.1 kpackage-32bit-5.8.0-9.1 kpackage-debuginfo-32bit-5.8.0-9.1 kpackage-devel-32bit-5.8.0-9.1 kparts-devel-32bit-5.8.0-15.1 kpeople5-32bit-5.8.0-2.1 kpeople5-debuginfo-32bit-5.8.0-2.1 kpeople5-devel-32bit-5.8.0-2.1 kplotting-devel-32bit-5.8.0-15.1 kpty-devel-32bit-5.8.0-15.1 kross-32bit-5.8.0-15.1 kross-debuginfo-32bit-5.8.0-15.1 kross-devel-32bit-5.8.0-15.1 kross-devel-debuginfo-32bit-5.8.0-15.1 krunner-devel-32bit-5.8.0-15.1 kservice-32bit-5.8.0-15.1 kservice-debuginfo-32bit-5.8.0-15.1 kservice-devel-32bit-5.8.0-15.1 ktexteditor-32bit-5.8.0-15.1 ktexteditor-debuginfo-32bit-5.8.0-15.1 ktexteditor-devel-32bit-5.8.0-15.1 ktextwidgets-devel-32bit-5.8.0-15.1 kunitconversion-devel-32bit-5.8.0-15.1 kwallet-devel-32bit-5.8.0-15.1 kwayland-devel-32bit-5.2.2-15.1 kwidgetsaddons-devel-32bit-5.8.0-15.1 kwindowsystem-devel-32bit-5.8.0-16.1 kxmlgui-devel-32bit-5.8.0-15.4 kxmlrpcclient5-devel-32bit-5.8.0-2.1 libKF5Activities5-32bit-5.8.0-15.1 libKF5Activities5-debuginfo-32bit-5.8.0-15.1 libKF5Archive5-32bit-5.8.0-15.1 libKF5Archive5-debuginfo-32bit-5.8.0-15.1 libKF5Attica5-32bit-5.8.0-15.1 libKF5Attica5-debuginfo-32bit-5.8.0-15.1 libKF5Auth5-32bit-5.8.0-15.1 libKF5Auth5-debuginfo-32bit-5.8.0-15.1 libKF5Baloo1-32bit-5.6.2-15.18 libKF5Baloo1-debuginfo-32bit-5.6.2-15.18 libKF5BalooXapian1-32bit-5.6.2-15.18 libKF5BalooXapian1-debuginfo-32bit-5.6.2-15.18 libKF5Bookmarks5-32bit-5.8.0-15.1 libKF5Bookmarks5-debuginfo-32bit-5.8.0-15.1 libKF5Codecs5-32bit-5.8.0-15.1 libKF5Codecs5-debuginfo-32bit-5.8.0-15.1 libKF5Completion5-32bit-5.8.0-15.1 libKF5Completion5-debuginfo-32bit-5.8.0-15.1 libKF5ConfigCore5-32bit-5.8.0-15.1 libKF5ConfigCore5-debuginfo-32bit-5.8.0-15.1 libKF5ConfigGui5-32bit-5.8.0-15.1 libKF5ConfigGui5-debuginfo-32bit-5.8.0-15.1 libKF5ConfigWidgets5-32bit-5.8.0-15.1 libKF5ConfigWidgets5-debuginfo-32bit-5.8.0-15.1 libKF5CoreAddons5-32bit-5.8.0-15.1 libKF5CoreAddons5-debuginfo-32bit-5.8.0-15.1 libKF5Crash5-32bit-5.8.0-15.1 libKF5Crash5-debuginfo-32bit-5.8.0-15.1 libKF5DBusAddons5-32bit-5.8.0-15.1 libKF5DBusAddons5-debuginfo-32bit-5.8.0-15.1 libKF5DNSSD5-32bit-5.8.0-15.1 libKF5DNSSD5-debuginfo-32bit-5.8.0-15.1 libKF5Declarative5-32bit-5.8.0-15.1 libKF5Declarative5-debuginfo-32bit-5.8.0-15.1 libKF5Emoticons5-32bit-5.8.0-15.1 libKF5Emoticons5-debuginfo-32bit-5.8.0-15.1 libKF5GlobalAccel5-32bit-5.8.0-15.1 libKF5GlobalAccel5-debuginfo-32bit-5.8.0-15.1 libKF5GuiAddons5-32bit-5.8.0-15.1 libKF5GuiAddons5-debuginfo-32bit-5.8.0-15.1 libKF5I18n5-32bit-5.8.0-15.1 libKF5I18n5-debuginfo-32bit-5.8.0-15.1 libKF5IconThemes5-32bit-5.8.0-15.1 libKF5IconThemes5-debuginfo-32bit-5.8.0-15.1 libKF5IdleTime5-32bit-5.8.0-15.1 libKF5IdleTime5-debuginfo-32bit-5.8.0-15.1 libKF5ItemModels5-32bit-5.8.0-15.1 libKF5ItemModels5-debuginfo-32bit-5.8.0-15.1 libKF5ItemViews5-32bit-5.8.0-15.1 libKF5ItemViews5-debuginfo-32bit-5.8.0-15.1 libKF5JS5-32bit-5.8.0-15.1 libKF5JS5-debuginfo-32bit-5.8.0-15.1 libKF5JSApi5-32bit-5.8.0-15.1 libKF5JSApi5-debuginfo-32bit-5.8.0-15.1 libKF5JobWidgets5-32bit-5.8.0-15.1 libKF5JobWidgets5-debuginfo-32bit-5.8.0-15.1 libKF5JsEmbed5-32bit-5.8.0-15.1 libKF5JsEmbed5-debuginfo-32bit-5.8.0-15.1 libKF5KCMUtils5-32bit-5.8.0-15.1 libKF5KCMUtils5-debuginfo-32bit-5.8.0-15.1 libKF5KDELibs4Support5-32bit-5.8.0-15.6 libKF5KDELibs4Support5-debuginfo-32bit-5.8.0-15.6 libKF5KHtml5-32bit-5.8.0-15.1 libKF5KHtml5-debuginfo-32bit-5.8.0-15.1 libKF5MediaPlayer5-32bit-5.8.0-15.1 libKF5MediaPlayer5-debuginfo-32bit-5.8.0-15.1 libKF5NetworkManagerQt-devel-32bit-5.8.0-15.1 libKF5NetworkManagerQt6-32bit-5.8.0-15.1 libKF5NetworkManagerQt6-debuginfo-32bit-5.8.0-15.1 libKF5NewStuff5-32bit-5.8.0-15.1 libKF5NewStuff5-debuginfo-32bit-5.8.0-15.1 libKF5Notifications5-32bit-5.8.0-15.1 libKF5Notifications5-debuginfo-32bit-5.8.0-15.1 libKF5NotifyConfig5-32bit-5.8.0-15.1 libKF5NotifyConfig5-debuginfo-32bit-5.8.0-15.1 libKF5Parts5-32bit-5.8.0-15.1 libKF5Parts5-debuginfo-32bit-5.8.0-15.1 libKF5Plotting5-32bit-5.8.0-15.1 libKF5Plotting5-debuginfo-32bit-5.8.0-15.1 libKF5Pty5-32bit-5.8.0-15.1 libKF5Pty5-debuginfo-32bit-5.8.0-15.1 libKF5QuickAddons5-32bit-5.8.0-15.1 libKF5QuickAddons5-debuginfo-32bit-5.8.0-15.1 libKF5Runner5-32bit-5.8.0-15.1 libKF5Runner5-debuginfo-32bit-5.8.0-15.1 libKF5Screen6-32bit-5.2.2-15.1 libKF5Screen6-debuginfo-32bit-5.2.2-15.1 libKF5Solid5-32bit-5.8.0-15.1 libKF5Solid5-debuginfo-32bit-5.8.0-15.1 libKF5SonnetCore5-32bit-5.8.0-15.4 libKF5SonnetCore5-debuginfo-32bit-5.8.0-15.4 libKF5SonnetUi5-32bit-5.8.0-15.4 libKF5SonnetUi5-debuginfo-32bit-5.8.0-15.4 libKF5Style5-32bit-5.8.0-15.4 libKF5Style5-debuginfo-32bit-5.8.0-15.4 libKF5Su5-32bit-5.8.0-15.1 libKF5Su5-debuginfo-32bit-5.8.0-15.1 libKF5TextWidgets5-32bit-5.8.0-15.1 libKF5TextWidgets5-debuginfo-32bit-5.8.0-15.1 libKF5ThreadWeaver5-32bit-5.8.0-15.1 libKF5ThreadWeaver5-debuginfo-32bit-5.8.0-15.1 libKF5UnitConversion5-32bit-5.8.0-15.1 libKF5UnitConversion5-debuginfo-32bit-5.8.0-15.1 libKF5Wallet5-32bit-5.8.0-15.1 libKF5Wallet5-debuginfo-32bit-5.8.0-15.1 libKF5WaylandClient5-32bit-5.2.2-15.1 libKF5WaylandClient5-debuginfo-32bit-5.2.2-15.1 libKF5WaylandServer5-32bit-5.2.2-15.1 libKF5WaylandServer5-debuginfo-32bit-5.2.2-15.1 libKF5WebKit5-32bit-5.8.0-15.1 libKF5WebKit5-debuginfo-32bit-5.8.0-15.1 libKF5WidgetsAddons5-32bit-5.8.0-15.1 libKF5WidgetsAddons5-debuginfo-32bit-5.8.0-15.1 libKF5WindowSystem5-32bit-5.8.0-16.1 libKF5WindowSystem5-debuginfo-32bit-5.8.0-16.1 libKF5XmlGui5-32bit-5.8.0-15.4 libKF5XmlGui5-debuginfo-32bit-5.8.0-15.4 libKF5XmlRpcClient5-32bit-5.8.0-2.1 libKF5XmlRpcClient5-debuginfo-32bit-5.8.0-2.1 libkdecoration2-devel-32bit-5.2.2-5.3 libkdecorations2-5-32bit-5.2.2-5.3 libkdecorations2-5-debuginfo-32bit-5.2.2-5.3 libkdecorations2private5-32bit-5.2.2-5.3 libkdecorations2private5-debuginfo-32bit-5.2.2-5.3 libkscreen2-devel-32bit-5.2.2-15.1 libkscreen2-plugin-32bit-5.2.2-15.1 libkscreen2-plugin-debuginfo-32bit-5.2.2-15.1 libksysguard5-32bit-5.2.2-15.5 libksysguard5-debuginfo-32bit-5.2.2-15.5 libksysguard5-devel-32bit-5.2.2-15.5 libkwalletbackend5-5-32bit-5.8.0-15.1 libkwalletbackend5-5-debuginfo-32bit-5.8.0-15.1 oxygen5-style-32bit-5.2.2-15.1 oxygen5-style-debuginfo-32bit-5.2.2-15.1 plasma-framework-32bit-5.8.0-17.4 plasma-framework-components-32bit-5.8.0-17.4 plasma-framework-components-debuginfo-32bit-5.8.0-17.4 plasma-framework-debuginfo-32bit-5.8.0-17.4 plasma-framework-devel-32bit-5.8.0-17.4 plasma-framework-private-32bit-5.8.0-17.4 plasma-framework-private-debuginfo-32bit-5.8.0-17.4 plasma5-workspace-libs-32bit-5.2.2-23.1 plasma5-workspace-libs-debuginfo-32bit-5.2.2-23.1 solid-devel-32bit-5.8.0-15.1 sonnet-devel-32bit-5.8.0-15.4 threadweaver-devel-32bit-5.8.0-15.1 - openSUSE 13.2 (noarch): baloo5-lang-5.6.2-15.18 bluedevil5-lang-5.2.2-5.3 breeze5-cursors-5.2.2-15.2 breeze5-icons-5.2.2-15.2 breeze5-style-lang-5.2.2-15.2 breeze5-wallpapers-5.2.2-15.2 extra-cmake-modules-doc-1.8.0-15.1 kcm_sddm-lang-5.2.2-5.9 kcoreaddons-lang-5.8.0-15.1 kde-cli-tools5-lang-5.2.2-15.1 kde-gtk-config5-lang-5.2.2-5.3 kded-lang-5.8.0-15.1 kdelibs4support-lang-5.8.0-15.6 kdesignerplugin-lang-5.8.0-15.4 kdoctools-lang-5.8.0-15.4 kfilemetadata5-lang-5.6.2-15.1 khotkeys5-lang-5.2.2-20.13 kinfocenter5-lang-5.2.2-15.1 kinit-lang-5.8.0-15.1 kio-extras5-lang-5.2.2-16.2 kio-lang-5.8.0-15.4 kmenuedit5-lang-5.2.2-15.6 kpackage-lang-5.8.0-9.1 kross-lang-5.8.0-15.1 kscreen5-lang-5.2.2-5.3 kservice-lang-5.8.0-15.1 ksshaskpass5-lang-5.2.2-5.3 ksysguard5-lang-5.2.2-15.9 ktexteditor-lang-5.8.0-15.1 kwalletd5-lang-5.8.0-15.1 kwin5-lang-5.2.2-15.6 libKF5Activities5-lang-5.8.0-15.1 libKF5Auth5-lang-5.8.0-15.1 libKF5Bookmarks5-lang-5.8.0-15.1 libKF5Codecs5-lang-5.8.0-15.1 libKF5Completion5-lang-5.8.0-15.1 libKF5ConfigCore5-lang-5.8.0-15.1 libKF5ConfigWidgets5-lang-5.8.0-15.1 libKF5DBusAddons5-lang-5.8.0-15.1 libKF5DNSSD5-lang-5.8.0-15.1 libKF5Declarative5-lang-5.8.0-15.1 libKF5GlobalAccel5-lang-5.8.0-15.1 libKF5I18n5-lang-5.8.0-15.1 libKF5IconThemes5-lang-5.8.0-15.1 libKF5ItemViews5-lang-5.8.0-15.1 libKF5JobWidgets5-lang-5.8.0-15.1 libKF5JsEmbed5-lang-5.8.0-15.1 libKF5KCMUtils5-lang-5.8.0-15.1 libKF5KHtml5-lang-5.8.0-15.1 libKF5NewStuff5-lang-5.8.0-15.1 libKF5Notifications5-lang-5.8.0-15.1 libKF5NotifyConfig5-lang-5.8.0-15.1 libKF5Parts5-lang-5.8.0-15.1 libKF5Pty5-lang-5.8.0-15.1 libKF5Solid5-lang-5.8.0-15.1 libKF5SonnetCore5-lang-5.8.0-15.4 libKF5Style5-lang-5.8.0-15.4 libKF5Su5-lang-5.8.0-15.1 libKF5TextWidgets5-lang-5.8.0-15.1 libKF5UnitConversion5-lang-5.8.0-15.1 libKF5WidgetsAddons5-lang-5.8.0-15.1 libKF5WindowSystem5-lang-5.8.0-16.1 libKF5XmlGui5-lang-5.8.0-15.4 libksysguard5-lang-5.2.2-15.5 milou5-lang-5.2.2-15.5 oxygen5-lang-5.2.2-15.1 plasma-framework-lang-5.8.0-17.4 plasma-nm5-lang-5.2.2-17.4 plasma5-addons-lang-5.2.2-15.1 plasma5-desktop-lang-5.2.2-20.1 plasma5-session-5.2.2-7.1 plasma5-workspace-lang-5.2.2-23.1 plasma5-workspace-wallpapers-5.2.2-15.1 polkit-kde-agent-5-lang-5.2.2-2.7.1 powerdevil5-lang-5.2.2-11.3 systemsettings5-lang-5.2.2-15.1 References:

1 0

openSUSE-SU-2015:0714-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 13 Apr '15

13 Apr '15

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0714-1 Rating: important References: #903640 #904899 #907988 #909078 #910150 #911325 #911326 #912202 #912654 #912705 #913059 #913695 #914175 #915322 #917839 #920901 Cross-References: CVE-2014-7822 CVE-2014-8134 CVE-2014-8160 CVE-2014-8173 CVE-2014-8559 CVE-2014-9419 CVE-2014-9420 CVE-2014-9529 CVE-2014-9584 CVE-2014-9585 CVE-2015-1593 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves 11 vulnerabilities and has 5 fixes is now available. Description: The Linux kernel was updated to fix various bugs and security issues. Following security issues were fixed: - CVE-2014-8173: A NULL pointer dereference flaw was found in the way the Linux kernels madvise MADV_WILLNEED functionality handled page table locking. A local, unprivileged user could have used this flaw to crash the system. - CVE-2015-1593: A integer overflow reduced the effectiveness of the stack randomization on 64-bit systems. - CVE-2014-7822: A flaw was found in the way the Linux kernels splice() system call validated its parameters. On certain file systems, a local, unprivileged user could have used this flaw to write past the maximum file size, and thus crash the system. - CVE-2014-9419: The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel did not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which made it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address. - CVE-2014-8134: The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel used an improper paravirt_enabled setting for KVM guest kernels, which made it easier for guest OS users to bypass the ASLR protection mechanism via a crafted application that reads a 16-bit value. - CVE-2014-8160: net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel generated incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allowed remote attackers to bypass intended access restrictions via packets with disallowed port numbers. - CVE-2014-9529: Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel allowed local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other impact via keyctl commands that trigger access to a key structure member during garbage collection of a key. - CVE-2014-8559: The d_walk function in fs/dcache.c in the Linux kernel through did not properly maintain the semantics of rename_lock, which allowed local users to cause a denial of service (deadlock and system hang) via a crafted application. - CVE-2014-9420: The rock_continue function in fs/isofs/rock.c in the Linux kernel did not restrict the number of Rock Ridge continuation entries, which allowed local users to cause a denial of service (infinite loop, and system crash or hang) via a crafted iso9660 image. - CVE-2014-9584: The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel did not validate a length value in the Extensions Reference (ER) System Use Field, which allowed local users to obtain sensitive information from kernel memory via a crafted iso9660 image. - CVE-2014-9585: The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel did not properly choose memory locations for the vDSO area, which made it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD. Following bugs were fixed: - HID: usbhid: enable always-poll quirk for Elan Touchscreen 0103 (bnc#920901). - HID: usbhid: enable always-poll quirk for Elan Touchscreen 016f (bnc#920901). - HID: usbhid: enable always-poll quirk for Elan Touchscreen 009b (bnc#920901). - HID: usbhid: add another mouse that needs QUIRK_ALWAYS_POLL (bnc#920901). - HID: usbhid: fix PIXART optical mouse (bnc#920901). - HID: usbhid: enable always-poll quirk for Elan Touchscreen (bnc#920901). - HID: usbhid: add always-poll quirk (bnc#920901). - storvsc: ring buffer failures may result in I/O freeze (bnc#914175). - mm, vmscan: prevent kswapd livelock due to pfmemalloc-throttled process being killed (VM Functionality bnc#910150). - Input: evdev - fix EVIOCG{type} ioctl (bnc#904899). - mnt: Implicitly add MNT_NODEV on remount when it was implicitly added by mount (bsc#907988). - DocBook: Do not exceed argument list limit. - DocBook: Make mandocs parallel-safe. - mm: free compound page with correct order (bnc#913695). - udf: Check component length before reading it. - udf: Check path length when reading symlink. - udf: Verify symlink size before loading it. - udf: Verify i_size when loading inode. - xfs: remote attribute overwrite causes transaction overrun. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-301=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i686 x86_64): kernel-debug-3.11.10-29.1 kernel-debug-base-3.11.10-29.1 kernel-debug-base-debuginfo-3.11.10-29.1 kernel-debug-debuginfo-3.11.10-29.1 kernel-debug-debugsource-3.11.10-29.1 kernel-debug-devel-3.11.10-29.1 kernel-debug-devel-debuginfo-3.11.10-29.1 kernel-desktop-3.11.10-29.1 kernel-desktop-base-3.11.10-29.1 kernel-desktop-base-debuginfo-3.11.10-29.1 kernel-desktop-debuginfo-3.11.10-29.1 kernel-desktop-debugsource-3.11.10-29.1 kernel-desktop-devel-3.11.10-29.1 kernel-desktop-devel-debuginfo-3.11.10-29.1 kernel-ec2-3.11.10-29.1 kernel-ec2-base-3.11.10-29.1 kernel-ec2-base-debuginfo-3.11.10-29.1 kernel-ec2-debuginfo-3.11.10-29.1 kernel-ec2-debugsource-3.11.10-29.1 kernel-ec2-devel-3.11.10-29.1 kernel-ec2-devel-debuginfo-3.11.10-29.1 kernel-trace-3.11.10-29.1 kernel-trace-base-3.11.10-29.1 kernel-trace-base-debuginfo-3.11.10-29.1 kernel-trace-debuginfo-3.11.10-29.1 kernel-trace-debugsource-3.11.10-29.1 kernel-trace-devel-3.11.10-29.1 kernel-trace-devel-debuginfo-3.11.10-29.1 kernel-vanilla-3.11.10-29.1 kernel-vanilla-debuginfo-3.11.10-29.1 kernel-vanilla-debugsource-3.11.10-29.1 kernel-vanilla-devel-3.11.10-29.1 kernel-vanilla-devel-debuginfo-3.11.10-29.1 kernel-xen-3.11.10-29.1 kernel-xen-base-3.11.10-29.1 kernel-xen-base-debuginfo-3.11.10-29.1 kernel-xen-debuginfo-3.11.10-29.1 kernel-xen-debugsource-3.11.10-29.1 kernel-xen-devel-3.11.10-29.1 kernel-xen-devel-debuginfo-3.11.10-29.1 - openSUSE 13.1 (i586 x86_64): cloop-2.639-11.19.1 cloop-debuginfo-2.639-11.19.1 cloop-debugsource-2.639-11.19.1 cloop-kmp-default-2.639_k3.11.10_29-11.19.1 cloop-kmp-default-debuginfo-2.639_k3.11.10_29-11.19.1 cloop-kmp-desktop-2.639_k3.11.10_29-11.19.1 cloop-kmp-desktop-debuginfo-2.639_k3.11.10_29-11.19.1 cloop-kmp-xen-2.639_k3.11.10_29-11.19.1 cloop-kmp-xen-debuginfo-2.639_k3.11.10_29-11.19.1 crash-7.0.2-2.19.1 crash-debuginfo-7.0.2-2.19.1 crash-debugsource-7.0.2-2.19.1 crash-devel-7.0.2-2.19.1 crash-doc-7.0.2-2.19.1 crash-eppic-7.0.2-2.19.1 crash-eppic-debuginfo-7.0.2-2.19.1 crash-gcore-7.0.2-2.19.1 crash-gcore-debuginfo-7.0.2-2.19.1 crash-kmp-default-7.0.2_k3.11.10_29-2.19.1 crash-kmp-default-debuginfo-7.0.2_k3.11.10_29-2.19.1 crash-kmp-desktop-7.0.2_k3.11.10_29-2.19.1 crash-kmp-desktop-debuginfo-7.0.2_k3.11.10_29-2.19.1 crash-kmp-xen-7.0.2_k3.11.10_29-2.19.1 crash-kmp-xen-debuginfo-7.0.2_k3.11.10_29-2.19.1 hdjmod-debugsource-1.28-16.19.1 hdjmod-kmp-default-1.28_k3.11.10_29-16.19.1 hdjmod-kmp-default-debuginfo-1.28_k3.11.10_29-16.19.1 hdjmod-kmp-desktop-1.28_k3.11.10_29-16.19.1 hdjmod-kmp-desktop-debuginfo-1.28_k3.11.10_29-16.19.1 hdjmod-kmp-xen-1.28_k3.11.10_29-16.19.1 hdjmod-kmp-xen-debuginfo-1.28_k3.11.10_29-16.19.1 ipset-6.21.1-2.23.1 ipset-debuginfo-6.21.1-2.23.1 ipset-debugsource-6.21.1-2.23.1 ipset-devel-6.21.1-2.23.1 ipset-kmp-default-6.21.1_k3.11.10_29-2.23.1 ipset-kmp-default-debuginfo-6.21.1_k3.11.10_29-2.23.1 ipset-kmp-desktop-6.21.1_k3.11.10_29-2.23.1 ipset-kmp-desktop-debuginfo-6.21.1_k3.11.10_29-2.23.1 ipset-kmp-xen-6.21.1_k3.11.10_29-2.23.1 ipset-kmp-xen-debuginfo-6.21.1_k3.11.10_29-2.23.1 iscsitarget-1.4.20.3-13.19.1 iscsitarget-debuginfo-1.4.20.3-13.19.1 iscsitarget-debugsource-1.4.20.3-13.19.1 iscsitarget-kmp-default-1.4.20.3_k3.11.10_29-13.19.1 iscsitarget-kmp-default-debuginfo-1.4.20.3_k3.11.10_29-13.19.1 iscsitarget-kmp-desktop-1.4.20.3_k3.11.10_29-13.19.1 iscsitarget-kmp-desktop-debuginfo-1.4.20.3_k3.11.10_29-13.19.1 iscsitarget-kmp-xen-1.4.20.3_k3.11.10_29-13.19.1 iscsitarget-kmp-xen-debuginfo-1.4.20.3_k3.11.10_29-13.19.1 kernel-default-3.11.10-29.1 kernel-default-base-3.11.10-29.1 kernel-default-base-debuginfo-3.11.10-29.1 kernel-default-debuginfo-3.11.10-29.1 kernel-default-debugsource-3.11.10-29.1 kernel-default-devel-3.11.10-29.1 kernel-default-devel-debuginfo-3.11.10-29.1 kernel-syms-3.11.10-29.1 libipset3-6.21.1-2.23.1 libipset3-debuginfo-6.21.1-2.23.1 ndiswrapper-1.58-19.1 ndiswrapper-debuginfo-1.58-19.1 ndiswrapper-debugsource-1.58-19.1 ndiswrapper-kmp-default-1.58_k3.11.10_29-19.1 ndiswrapper-kmp-default-debuginfo-1.58_k3.11.10_29-19.1 ndiswrapper-kmp-desktop-1.58_k3.11.10_29-19.1 ndiswrapper-kmp-desktop-debuginfo-1.58_k3.11.10_29-19.1 pcfclock-0.44-258.19.1 pcfclock-debuginfo-0.44-258.19.1 pcfclock-debugsource-0.44-258.19.1 pcfclock-kmp-default-0.44_k3.11.10_29-258.19.1 pcfclock-kmp-default-debuginfo-0.44_k3.11.10_29-258.19.1 pcfclock-kmp-desktop-0.44_k3.11.10_29-258.19.1 pcfclock-kmp-desktop-debuginfo-0.44_k3.11.10_29-258.19.1 python-virtualbox-4.2.28-2.28.1 python-virtualbox-debuginfo-4.2.28-2.28.1 vhba-kmp-debugsource-20130607-2.20.1 vhba-kmp-default-20130607_k3.11.10_29-2.20.1 vhba-kmp-default-debuginfo-20130607_k3.11.10_29-2.20.1 vhba-kmp-desktop-20130607_k3.11.10_29-2.20.1 vhba-kmp-desktop-debuginfo-20130607_k3.11.10_29-2.20.1 vhba-kmp-xen-20130607_k3.11.10_29-2.20.1 vhba-kmp-xen-debuginfo-20130607_k3.11.10_29-2.20.1 virtualbox-4.2.28-2.28.1 virtualbox-debuginfo-4.2.28-2.28.1 virtualbox-debugsource-4.2.28-2.28.1 virtualbox-devel-4.2.28-2.28.1 virtualbox-guest-kmp-default-4.2.28_k3.11.10_29-2.28.1 virtualbox-guest-kmp-default-debuginfo-4.2.28_k3.11.10_29-2.28.1 virtualbox-guest-kmp-desktop-4.2.28_k3.11.10_29-2.28.1 virtualbox-guest-kmp-desktop-debuginfo-4.2.28_k3.11.10_29-2.28.1 virtualbox-guest-tools-4.2.28-2.28.1 virtualbox-guest-tools-debuginfo-4.2.28-2.28.1 virtualbox-guest-x11-4.2.28-2.28.1 virtualbox-guest-x11-debuginfo-4.2.28-2.28.1 virtualbox-host-kmp-default-4.2.28_k3.11.10_29-2.28.1 virtualbox-host-kmp-default-debuginfo-4.2.28_k3.11.10_29-2.28.1 virtualbox-host-kmp-desktop-4.2.28_k3.11.10_29-2.28.1 virtualbox-host-kmp-desktop-debuginfo-4.2.28_k3.11.10_29-2.28.1 virtualbox-qt-4.2.28-2.28.1 virtualbox-qt-debuginfo-4.2.28-2.28.1 virtualbox-websrv-4.2.28-2.28.1 virtualbox-websrv-debuginfo-4.2.28-2.28.1 xen-debugsource-4.3.3_04-37.1 xen-devel-4.3.3_04-37.1 xen-kmp-default-4.3.3_04_k3.11.10_29-37.1 xen-kmp-default-debuginfo-4.3.3_04_k3.11.10_29-37.1 xen-kmp-desktop-4.3.3_04_k3.11.10_29-37.1 xen-kmp-desktop-debuginfo-4.3.3_04_k3.11.10_29-37.1 xen-libs-4.3.3_04-37.1 xen-libs-debuginfo-4.3.3_04-37.1 xen-tools-domU-4.3.3_04-37.1 xen-tools-domU-debuginfo-4.3.3_04-37.1 xtables-addons-2.3-2.19.1 xtables-addons-debuginfo-2.3-2.19.1 xtables-addons-debugsource-2.3-2.19.1 xtables-addons-kmp-default-2.3_k3.11.10_29-2.19.1 xtables-addons-kmp-default-debuginfo-2.3_k3.11.10_29-2.19.1 xtables-addons-kmp-desktop-2.3_k3.11.10_29-2.19.1 xtables-addons-kmp-desktop-debuginfo-2.3_k3.11.10_29-2.19.1 xtables-addons-kmp-xen-2.3_k3.11.10_29-2.19.1 xtables-addons-kmp-xen-debuginfo-2.3_k3.11.10_29-2.19.1 - openSUSE 13.1 (noarch): kernel-devel-3.11.10-29.1 kernel-docs-3.11.10-29.2 kernel-source-3.11.10-29.1 kernel-source-vanilla-3.11.10-29.1 - openSUSE 13.1 (x86_64): xen-4.3.3_04-37.1 xen-doc-html-4.3.3_04-37.1 xen-libs-32bit-4.3.3_04-37.1 xen-libs-debuginfo-32bit-4.3.3_04-37.1 xen-tools-4.3.3_04-37.1 xen-tools-debuginfo-4.3.3_04-37.1 xen-xend-tools-4.3.3_04-37.1 xen-xend-tools-debuginfo-4.3.3_04-37.1 - openSUSE 13.1 (i686): kernel-pae-3.11.10-29.1 kernel-pae-base-3.11.10-29.1 kernel-pae-base-debuginfo-3.11.10-29.1 kernel-pae-debuginfo-3.11.10-29.1 kernel-pae-debugsource-3.11.10-29.1 kernel-pae-devel-3.11.10-29.1 kernel-pae-devel-debuginfo-3.11.10-29.1 - openSUSE 13.1 (i586): cloop-kmp-pae-2.639_k3.11.10_29-11.19.1 cloop-kmp-pae-debuginfo-2.639_k3.11.10_29-11.19.1 crash-kmp-pae-7.0.2_k3.11.10_29-2.19.1 crash-kmp-pae-debuginfo-7.0.2_k3.11.10_29-2.19.1 hdjmod-kmp-pae-1.28_k3.11.10_29-16.19.1 hdjmod-kmp-pae-debuginfo-1.28_k3.11.10_29-16.19.1 ipset-kmp-pae-6.21.1_k3.11.10_29-2.23.1 ipset-kmp-pae-debuginfo-6.21.1_k3.11.10_29-2.23.1 iscsitarget-kmp-pae-1.4.20.3_k3.11.10_29-13.19.1 iscsitarget-kmp-pae-debuginfo-1.4.20.3_k3.11.10_29-13.19.1 ndiswrapper-kmp-pae-1.58_k3.11.10_29-19.1 ndiswrapper-kmp-pae-debuginfo-1.58_k3.11.10_29-19.1 pcfclock-kmp-pae-0.44_k3.11.10_29-258.19.1 pcfclock-kmp-pae-debuginfo-0.44_k3.11.10_29-258.19.1 vhba-kmp-pae-20130607_k3.11.10_29-2.20.1 vhba-kmp-pae-debuginfo-20130607_k3.11.10_29-2.20.1 virtualbox-guest-kmp-pae-4.2.28_k3.11.10_29-2.28.1 virtualbox-guest-kmp-pae-debuginfo-4.2.28_k3.11.10_29-2.28.1 virtualbox-host-kmp-pae-4.2.28_k3.11.10_29-2.28.1 virtualbox-host-kmp-pae-debuginfo-4.2.28_k3.11.10_29-2.28.1 xen-kmp-pae-4.3.3_04_k3.11.10_29-37.1 xen-kmp-pae-debuginfo-4.3.3_04_k3.11.10_29-37.1 xtables-addons-kmp-pae-2.3_k3.11.10_29-2.19.1 xtables-addons-kmp-pae-debuginfo-2.3_k3.11.10_29-2.19.1 References: https://www.suse.com/security/cve/CVE-2014-7822.html https://www.suse.com/security/cve/CVE-2014-8134.html https://www.suse.com/security/cve/CVE-2014-8160.html https://www.suse.com/security/cve/CVE-2014-8173.html https://www.suse.com/security/cve/CVE-2014-8559.html https://www.suse.com/security/cve/CVE-2014-9419.html https://www.suse.com/security/cve/CVE-2014-9420.html https://www.suse.com/security/cve/CVE-2014-9529.html https://www.suse.com/security/cve/CVE-2014-9584.html https://www.suse.com/security/cve/CVE-2014-9585.html https://www.suse.com/security/cve/CVE-2015-1593.html https://bugzilla.suse.com/903640 https://bugzilla.suse.com/904899 https://bugzilla.suse.com/907988 https://bugzilla.suse.com/909078 https://bugzilla.suse.com/910150 https://bugzilla.suse.com/911325 https://bugzilla.suse.com/911326 https://bugzilla.suse.com/912202 https://bugzilla.suse.com/912654 https://bugzilla.suse.com/912705 https://bugzilla.suse.com/913059 https://bugzilla.suse.com/913695 https://bugzilla.suse.com/914175 https://bugzilla.suse.com/915322 https://bugzilla.suse.com/917839 https://bugzilla.suse.com/920901

1 0

openSUSE-SU-2015:0713-1: important: Security update for Linux Kernel
by opensuse-security＠opensuse.org 13 Apr '15

13 Apr '15

openSUSE Security Update: Security update for Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0713-1 Rating: important References: #867199 #893428 #895797 #900811 #901925 #903589 #903640 #904899 #905681 #907039 #907818 #907988 #908582 #908588 #908589 #908592 #908593 #908594 #908596 #908598 #908603 #908604 #908605 #908606 #908608 #908610 #908612 #909077 #909078 #909477 #909634 #910150 #910322 #910440 #911311 #911325 #911326 #911356 #911438 #911578 #911835 #912061 #912202 #912429 #912705 #913059 #913466 #913695 #914175 #915425 #915454 #915456 #915577 #915858 #916608 #917830 #917839 #918954 #918970 #919463 #920581 #920604 #921313 #922542 #922944 Cross-References: CVE-2014-8134 CVE-2014-8160 CVE-2014-8559 CVE-2014-9419 CVE-2014-9420 CVE-2014-9428 CVE-2014-9529 CVE-2014-9584 CVE-2014-9585 CVE-2015-0777 CVE-2015-1421 CVE-2015-1593 CVE-2015-2150 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves 13 vulnerabilities and has 52 fixes is now available. Description: The Linux kernel was updated to fix bugs and security issues: Following security issues were fixed: - CVE-2015-1421: Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel allowed remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data. - CVE-2015-2150: XSA-120: Guests were permitted to modify all bits of the PCI command register of passed through cards, which could lead to Host system crashes. - CVE-2015-0777: The XEN usb backend could leak information to the guest system due to copying uninitialized memory. - CVE-2015-1593: A integer overflow reduced the effectiveness of the stack randomization on 64-bit systems. - CVE-2014-9419: The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel did not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which made it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address. - CVE-2014-9428: The batadv_frag_merge_packets function in net/batman-adv/fragmentation.c in the B.A.T.M.A.N. implementation in the Linux kernel used an incorrect length field during a calculation of an amount of memory, which allowed remote attackers to cause a denial of service (mesh-node system crash) via fragmented packets. - CVE-2014-8160: net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel generated incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allowed remote attackers to bypass intended access restrictions via packets with disallowed port numbers. - CVE-2014-9529: Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel allowed local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other impact via keyctl commands that trigger access to a key structure member during garbage collection of a key. - CVE-2014-9420: The rock_continue function in fs/isofs/rock.c in the Linux kernel did not restrict the number of Rock Ridge continuation entries, which allowed local users to cause a denial of service (infinite loop, and system crash or hang) via a crafted iso9660 image. - CVE-2014-9584: The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel did not validate a length value in the Extensions Reference (ER) System Use Field, which allowed local users to obtain sensitive information from kernel memory via a crafted iso9660 image. - CVE-2014-9585: The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel did not properly choose memory locations for the vDSO area, which made it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD. - CVE-2014-8559: The d_walk function in fs/dcache.c in the Linux kernel through did not properly maintain the semantics of rename_lock, which allowed local users to cause a denial of service (deadlock and system hang) via a crafted application. - CVE-2014-8134: The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel used an improper paravirt_enabled setting for KVM guest kernels, which made it easier for guest OS users to bypass the ASLR protection mechanism via a crafted application that reads a 16-bit value. Following bugs were fixed: - powerpc/pci: Fix IO space breakage after of_pci_range_to_resource() change (bnc#922542). - cifs: fix use-after-free bug in find_writable_file (bnc#909477). - usb: Do not allow usb_alloc_streams on unconfigured devices (bsc#920581). - fuse: honour max_read and max_write in direct_io mode (bnc#918954). - switch iov_iter_get_pages() to passing maximal number of pages (bnc#918954). - bcache: fix a livelock in btree lock v2 (bnc#910440) (bnc#910440). Updated because another version went upstream - drm/i915: Initialise userptr mmu_notifier serial to 1 (bnc#918970). - NFS: Don't try to reclaim delegation open state if recovery failed (boo#909634). - NFSv4: Ensure that we call FREE_STATEID when NFSv4.x stateids are revoked (boo#909634). - NFSv4: Fix races between nfs_remove_bad_delegation() and delegation return (boo#909634). - NFSv4: Ensure that we remove NFSv4.0 delegations when state has expired (boo#909634). - Fixing lease renewal (boo#909634). - bcache: Fix a bug when detaching (bsc#908582). - fix a leak in bch_cached_dev_run() (bnc#910440). - bcache: unregister reboot notifier when bcache fails to register a block device (bnc#910440). - bcache: fix a livelock in btree lock (bnc#910440). - bcache: [BUG] clear BCACHE_DEV_UNLINK_DONE flag when attaching a backing device (bnc#910440). - bcache: Add a cond_resched() call to gc (bnc#910440). - storvsc: ring buffer failures may result in I/O freeze (bnc#914175). - ALSA: seq-dummy: remove deadlock-causing events on close (boo#916608). - ALSA: pcm: Zero-clear reserved fields of PCM status ioctl in compat mode (boo#916608). - ALSA: bebob: Uninitialized id returned by saffirepro_both_clk_src_get (boo#916608). - ALSA: hda - Fix built-in mic on Compaq Presario CQ60 (bnc#920604). - ALSA: hda - Fix regression of HD-audio controller fallback modes (bsc#921313). - [media] sound: Update au0828 quirks table (boo#916608). - [media] sound: simplify au0828 quirk table (boo#916608). - ALSA: usb-audio: Add mic volume fix quirk for Logitech Webcam C210 (boo#916608). - ALSA: usb-audio: extend KEF X300A FU 10 tweak to Arcam rPAC (boo#916608). - ALSA: usb-audio: Add ctrl message delay quirk for Marantz/Denon devices (boo#916608). - ALSA: usb-audio: Fix memory leak in FTU quirk (boo#916608). - ALSA: usb-audio: Fix device_del() sysfs warnings at disconnect (boo#916608). - ALSA: hda - Add new GPU codec ID 0x10de0072 to snd-hda (boo#916608). - ALSA: hda - Fix wrong gpio_dir & gpio_mask hint setups for IDT/STAC codecs (boo#916608). - ALSA: hda/realtek - New codec support for ALC298 (boo#916608). - ALSA: hda/realtek - New codec support for ALC256 (boo#916608). - ALSA: hda/realtek - Add new Dell desktop for ALC3234 headset mode (boo#916608). - ALSA: hda - Add EAPD fixup for ASUS Z99He laptop (boo#916608). - ALSA: hda - Fix built-in mic at resume on Lenovo Ideapad S210 (boo#916608). - ALSA: hda/realtek - Add headset Mic support for new Dell machine (boo#916608). - ALSA: hda_intel: Add DeviceIDs for Sunrise Point-LP (boo#916608). - ALSA: hda_intel: Add Device IDs for Intel Sunrise Point PCH (boo#916608). - ALSA: hda - add codec ID for Braswell display audio codec (boo#916608). - ALSA: hda - add PCI IDs for Intel Braswell (boo#916608). - ALSA: hda - Add dock support for Thinkpad T440 (17aa:2212) (boo#916608). - ALSA: hda - Set up GPIO for Toshiba Satellite S50D (bnc#915858). - rpm/kernel-binary.spec.in: Fix build if there is no *.crt file - mm, vmscan: prevent kswapd livelock due to pfmemalloc-throttled process being killed (VM Functionality bnc#910150). - Input: evdev - fix EVIOCG{type} ioctl (bnc#904899). - mnt: Implicitly add MNT_NODEV on remount when it was implicitly added by mount (bsc#907988). - Btrfs: fix scrub race leading to use-after-free (bnc#915456). - Btrfs: fix setup_leaf_for_split() to avoid leaf corruption (bnc#915454). - Btrfs: fix fsync log replay for inodes with a mix of regular refs and extrefs (bnc#915425). - Btrfs: fix fsync when extend references are added to an inode (bnc#915425). - Btrfs: fix directory inconsistency after fsync log replay (bnc#915425). - Btrfs: make xattr replace operations atomic (bnc#913466). - Btrfs: fix directory recovery from fsync log (bnc#895797). - bcache: add mutex lock for bch_is_open (bnc#908612). - bcache: Correct printing of btree_gc_max_duration_ms (bnc#908610). - bcache: fix crash with incomplete cache set (bnc#908608). - bcache: fix memory corruption in init error path (bnc#908606). - bcache: Fix more early shutdown bugs (bnc#908605). - bcache: fix use-after-free in btree_gc_coalesce() (bnc#908604). - bcache: Fix an infinite loop in journal replay (bnc#908603). - bcache: fix typo in bch_bkey_equal_header (bnc#908598). - bcache: Make sure to pass GFP_WAIT to mempool_alloc() (bnc#908596). - bcache: fix crash on shutdown in passthrough mode (bnc#908594). - bcache: fix lockdep warnings on shutdown (bnc#908593). - bcache allocator: send discards with correct size (bnc#908592). - bcache: Fix to remove the rcu_sched stalls (bnc#908589). - bcache: Fix a journal replay bug (bnc#908588). - Update x86_64 config files: CONFIG_SENSORS_NCT6683=m The nct6683 driver is already enabled on i386 and history suggests that it not being enabled on x86_64 is by mistake. - rpm/kernel-binary.spec.in: Own the modules directory in the devel package (bnc#910322) - Revert "iwlwifi: mvm: treat EAPOLs like mgmt frames wrt rate" (bnc#900811). - mm: free compound page with correct order (bnc#913695). - drm/i915: More cautious with pch fifo underruns (boo#907039). - Refresh patches.arch/arm64-0039-generic-pci.patch (fix PCI bridge support) - x86/microcode/intel: Fish out the stashed microcode for the BSP (bsc#903589). - x86, microcode: Reload microcode on resume (bsc#903589). - x86, microcode: Don't initialize microcode code on paravirt (bsc#903589). - x86, microcode, intel: Drop unused parameter (bsc#903589). - x86, microcode, AMD: Do not use smp_processor_id() in preemtible context (bsc#903589). - x86, microcode: Update BSPs microcode on resume (bsc#903589). - x86, microcode, AMD: Fix ucode patch stashing on 32-bit (bsc#903589). - x86, microcode: Fix accessing dis_ucode_ldr on 32-bit (bsc#903589). - x86, microcode, AMD: Fix early ucode loading on 32-bit (bsc#903589). - Bluetooth: Add support for Broadcom BCM20702A0 variants firmware download (bnc#911311). - drm/radeon: fix sad_count check for dce3 (bnc#911356). - drm/i915: Don't call intel_prepare_page_flip() multiple times on gen2-4 (bnc#911835). - udf: Check component length before reading it. - udf: Check path length when reading symlink. - udf: Verify symlink size before loading it. - udf: Verify i_size when loading inode. - arm64: Enable DRM - arm64: Enable generic PHB driver (bnc#912061). - ACPI / video: Add some Samsung models to disable_native_backlight list (boo#905681). - asus-nb-wmi: Add another wapf=4 quirk (boo#911438). - asus-nb-wmi: Add wapf4 quirk for the X550VB (boo#911438). - asus-nb-wmi: Add wapf4 quirk for the U32U (boo#911438). - asus-nb-wmi: Add wapf4 quirk for the X550CC (boo#911438). - asus-nb-wmi: Constify asus_quirks DMI table (boo#911438). - asus-nb-wmi: Add wapf4 quirk for the X550CL (boo#911438). - asus-nb-wmi.c: Rename x401u quirk to wapf4 (boo#911438). - asus-nb-wmi: Add ASUSTeK COMPUTER INC. X200CA (boo#911438). - WAPF 4 for ASUSTeK COMPUTER INC. X75VBP WLAN ON (boo#911438). - Input: synaptics - gate forcepad support by DMI check (bnc#911578). - ext4: introduce aging to extent status tree (bnc#893428). - ext4: cleanup flag definitions for extent status tree (bnc#893428). - ext4: limit number of scanned extents in status tree shrinker (bnc#893428). - ext4: move handling of list of shrinkable inodes into extent status code (bnc#893428). - ext4: change LRU to round-robin in extent status tree shrinker (bnc#893428). - ext4: cache extent hole in extent status tree for ext4_da_map_blocks() (bnc#893428). - ext4: fix block reservation for bigalloc filesystems (bnc#893428). - ext4: track extent status tree shrinker delay statictics (bnc#893428). - ext4: improve extents status tree trace point (bnc#893428). - rpm/kernel-binary.spec.in: Provide name-version-release for kgraft packages (bnc#901925) - rpm/kernel-binary.spec.in: Fix including the secure boot cert in /etc/uefi/certs - doc/README.SUSE: update Solid Driver team contacts - rpm/kernel-binary.spec.in: Do not sign firmware files (bnc#867199) - Port module signing changes from SLE11-SP3 (fate#314508) - doc/README.PATCH-POLICY.SUSE: add patch policy / best practices document after installation. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-302=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i686 x86_64): kernel-debug-3.16.7-13.2 kernel-debug-base-3.16.7-13.2 kernel-debug-base-debuginfo-3.16.7-13.2 kernel-debug-debuginfo-3.16.7-13.2 kernel-debug-debugsource-3.16.7-13.2 kernel-debug-devel-3.16.7-13.2 kernel-debug-devel-debuginfo-3.16.7-13.2 kernel-desktop-3.16.7-13.2 kernel-desktop-base-3.16.7-13.2 kernel-desktop-base-debuginfo-3.16.7-13.2 kernel-desktop-debuginfo-3.16.7-13.2 kernel-desktop-debugsource-3.16.7-13.2 kernel-desktop-devel-3.16.7-13.2 kernel-ec2-3.16.7-13.2 kernel-ec2-base-3.16.7-13.2 kernel-ec2-base-debuginfo-3.16.7-13.2 kernel-ec2-debuginfo-3.16.7-13.2 kernel-ec2-debugsource-3.16.7-13.2 kernel-ec2-devel-3.16.7-13.2 kernel-vanilla-3.16.7-13.2 kernel-vanilla-debuginfo-3.16.7-13.2 kernel-vanilla-debugsource-3.16.7-13.2 kernel-vanilla-devel-3.16.7-13.2 kernel-xen-3.16.7-13.2 kernel-xen-base-3.16.7-13.2 kernel-xen-base-debuginfo-3.16.7-13.2 kernel-xen-debuginfo-3.16.7-13.2 kernel-xen-debugsource-3.16.7-13.2 kernel-xen-devel-3.16.7-13.2 - openSUSE 13.2 (i586 x86_64): bbswitch-0.8-3.6.6 bbswitch-debugsource-0.8-3.6.6 bbswitch-kmp-default-0.8_k3.16.7_13-3.6.6 bbswitch-kmp-default-debuginfo-0.8_k3.16.7_13-3.6.6 bbswitch-kmp-desktop-0.8_k3.16.7_13-3.6.6 bbswitch-kmp-desktop-debuginfo-0.8_k3.16.7_13-3.6.6 bbswitch-kmp-xen-0.8_k3.16.7_13-3.6.6 bbswitch-kmp-xen-debuginfo-0.8_k3.16.7_13-3.6.6 cloop-2.639-14.6.6 cloop-debuginfo-2.639-14.6.6 cloop-debugsource-2.639-14.6.6 cloop-kmp-default-2.639_k3.16.7_13-14.6.6 cloop-kmp-default-debuginfo-2.639_k3.16.7_13-14.6.6 cloop-kmp-desktop-2.639_k3.16.7_13-14.6.6 cloop-kmp-desktop-debuginfo-2.639_k3.16.7_13-14.6.6 cloop-kmp-xen-2.639_k3.16.7_13-14.6.6 cloop-kmp-xen-debuginfo-2.639_k3.16.7_13-14.6.6 crash-7.0.8-6.6 crash-debuginfo-7.0.8-6.6 crash-debugsource-7.0.8-6.6 crash-devel-7.0.8-6.6 crash-doc-7.0.8-6.6 crash-eppic-7.0.8-6.6 crash-eppic-debuginfo-7.0.8-6.6 crash-gcore-7.0.8-6.6 crash-gcore-debuginfo-7.0.8-6.6 crash-kmp-default-7.0.8_k3.16.7_13-6.6 crash-kmp-default-debuginfo-7.0.8_k3.16.7_13-6.6 crash-kmp-desktop-7.0.8_k3.16.7_13-6.6 crash-kmp-desktop-debuginfo-7.0.8_k3.16.7_13-6.6 crash-kmp-xen-7.0.8_k3.16.7_13-6.6 crash-kmp-xen-debuginfo-7.0.8_k3.16.7_13-6.6 hdjmod-debugsource-1.28-18.7.6 hdjmod-kmp-default-1.28_k3.16.7_13-18.7.6 hdjmod-kmp-default-debuginfo-1.28_k3.16.7_13-18.7.6 hdjmod-kmp-desktop-1.28_k3.16.7_13-18.7.6 hdjmod-kmp-desktop-debuginfo-1.28_k3.16.7_13-18.7.6 hdjmod-kmp-xen-1.28_k3.16.7_13-18.7.6 hdjmod-kmp-xen-debuginfo-1.28_k3.16.7_13-18.7.6 ipset-6.23-6.6 ipset-debuginfo-6.23-6.6 ipset-debugsource-6.23-6.6 ipset-devel-6.23-6.6 ipset-kmp-default-6.23_k3.16.7_13-6.6 ipset-kmp-default-debuginfo-6.23_k3.16.7_13-6.6 ipset-kmp-desktop-6.23_k3.16.7_13-6.6 ipset-kmp-desktop-debuginfo-6.23_k3.16.7_13-6.6 ipset-kmp-xen-6.23_k3.16.7_13-6.6 ipset-kmp-xen-debuginfo-6.23_k3.16.7_13-6.6 kernel-default-3.16.7-13.3 kernel-default-base-3.16.7-13.3 kernel-default-base-debuginfo-3.16.7-13.3 kernel-default-debuginfo-3.16.7-13.3 kernel-default-debugsource-3.16.7-13.3 kernel-default-devel-3.16.7-13.3 kernel-obs-build-3.16.7-13.7 kernel-obs-build-debugsource-3.16.7-13.7 kernel-obs-qa-3.16.7-13.1 kernel-obs-qa-xen-3.16.7-13.1 kernel-syms-3.16.7-13.1 libipset3-6.23-6.6 libipset3-debuginfo-6.23-6.6 pcfclock-0.44-260.6.2 pcfclock-debuginfo-0.44-260.6.2 pcfclock-debugsource-0.44-260.6.2 pcfclock-kmp-default-0.44_k3.16.7_13-260.6.2 pcfclock-kmp-default-debuginfo-0.44_k3.16.7_13-260.6.2 pcfclock-kmp-desktop-0.44_k3.16.7_13-260.6.2 pcfclock-kmp-desktop-debuginfo-0.44_k3.16.7_13-260.6.2 python-virtualbox-4.3.20-10.2 python-virtualbox-debuginfo-4.3.20-10.2 vhba-kmp-debugsource-20140629-2.6.2 vhba-kmp-default-20140629_k3.16.7_13-2.6.2 vhba-kmp-default-debuginfo-20140629_k3.16.7_13-2.6.2 vhba-kmp-desktop-20140629_k3.16.7_13-2.6.2 vhba-kmp-desktop-debuginfo-20140629_k3.16.7_13-2.6.2 vhba-kmp-xen-20140629_k3.16.7_13-2.6.2 vhba-kmp-xen-debuginfo-20140629_k3.16.7_13-2.6.2 virtualbox-4.3.20-10.2 virtualbox-debuginfo-4.3.20-10.2 virtualbox-debugsource-4.3.20-10.2 virtualbox-devel-4.3.20-10.2 virtualbox-guest-kmp-default-4.3.20_k3.16.7_13-10.2 virtualbox-guest-kmp-default-debuginfo-4.3.20_k3.16.7_13-10.2 virtualbox-guest-kmp-desktop-4.3.20_k3.16.7_13-10.2 virtualbox-guest-kmp-desktop-debuginfo-4.3.20_k3.16.7_13-10.2 virtualbox-guest-tools-4.3.20-10.2 virtualbox-guest-tools-debuginfo-4.3.20-10.2 virtualbox-guest-x11-4.3.20-10.2 virtualbox-guest-x11-debuginfo-4.3.20-10.2 virtualbox-host-kmp-default-4.3.20_k3.16.7_13-10.2 virtualbox-host-kmp-default-debuginfo-4.3.20_k3.16.7_13-10.2 virtualbox-host-kmp-desktop-4.3.20_k3.16.7_13-10.2 virtualbox-host-kmp-desktop-debuginfo-4.3.20_k3.16.7_13-10.2 virtualbox-qt-4.3.20-10.2 virtualbox-qt-debuginfo-4.3.20-10.2 virtualbox-websrv-4.3.20-10.2 virtualbox-websrv-debuginfo-4.3.20-10.2 xen-debugsource-4.4.1_08-12.2 xen-devel-4.4.1_08-12.2 xen-libs-4.4.1_08-12.2 xen-libs-debuginfo-4.4.1_08-12.2 xen-tools-domU-4.4.1_08-12.2 xen-tools-domU-debuginfo-4.4.1_08-12.2 xtables-addons-2.6-6.2 xtables-addons-debuginfo-2.6-6.2 xtables-addons-debugsource-2.6-6.2 xtables-addons-kmp-default-2.6_k3.16.7_13-6.2 xtables-addons-kmp-default-debuginfo-2.6_k3.16.7_13-6.2 xtables-addons-kmp-desktop-2.6_k3.16.7_13-6.2 xtables-addons-kmp-desktop-debuginfo-2.6_k3.16.7_13-6.2 xtables-addons-kmp-xen-2.6_k3.16.7_13-6.2 xtables-addons-kmp-xen-debuginfo-2.6_k3.16.7_13-6.2 - openSUSE 13.2 (noarch): kernel-devel-3.16.7-13.1 kernel-docs-3.16.7-13.2 kernel-macros-3.16.7-13.1 kernel-source-3.16.7-13.1 kernel-source-vanilla-3.16.7-13.1 virtualbox-guest-desktop-icons-4.3.20-10.2 - openSUSE 13.2 (x86_64): xen-4.4.1_08-12.2 xen-doc-html-4.4.1_08-12.2 xen-kmp-default-4.4.1_08_k3.16.7_13-12.2 xen-kmp-default-debuginfo-4.4.1_08_k3.16.7_13-12.2 xen-kmp-desktop-4.4.1_08_k3.16.7_13-12.2 xen-kmp-desktop-debuginfo-4.4.1_08_k3.16.7_13-12.2 xen-libs-32bit-4.4.1_08-12.2 xen-libs-debuginfo-32bit-4.4.1_08-12.2 xen-tools-4.4.1_08-12.2 xen-tools-debuginfo-4.4.1_08-12.2 - openSUSE 13.2 (i686): kernel-pae-3.16.7-13.2 kernel-pae-base-3.16.7-13.2 kernel-pae-base-debuginfo-3.16.7-13.2 kernel-pae-debuginfo-3.16.7-13.2 kernel-pae-debugsource-3.16.7-13.2 kernel-pae-devel-3.16.7-13.2 - openSUSE 13.2 (i586): bbswitch-kmp-pae-0.8_k3.16.7_13-3.6.6 bbswitch-kmp-pae-debuginfo-0.8_k3.16.7_13-3.6.6 cloop-kmp-pae-2.639_k3.16.7_13-14.6.6 cloop-kmp-pae-debuginfo-2.639_k3.16.7_13-14.6.6 crash-kmp-pae-7.0.8_k3.16.7_13-6.6 crash-kmp-pae-debuginfo-7.0.8_k3.16.7_13-6.6 hdjmod-kmp-pae-1.28_k3.16.7_13-18.7.6 hdjmod-kmp-pae-debuginfo-1.28_k3.16.7_13-18.7.6 ipset-kmp-pae-6.23_k3.16.7_13-6.6 ipset-kmp-pae-debuginfo-6.23_k3.16.7_13-6.6 pcfclock-kmp-pae-0.44_k3.16.7_13-260.6.2 pcfclock-kmp-pae-debuginfo-0.44_k3.16.7_13-260.6.2 vhba-kmp-pae-20140629_k3.16.7_13-2.6.2 vhba-kmp-pae-debuginfo-20140629_k3.16.7_13-2.6.2 virtualbox-guest-kmp-pae-4.3.20_k3.16.7_13-10.2 virtualbox-guest-kmp-pae-debuginfo-4.3.20_k3.16.7_13-10.2 virtualbox-host-kmp-pae-4.3.20_k3.16.7_13-10.2 virtualbox-host-kmp-pae-debuginfo-4.3.20_k3.16.7_13-10.2 xtables-addons-kmp-pae-2.6_k3.16.7_13-6.2 xtables-addons-kmp-pae-debuginfo-2.6_k3.16.7_13-6.2 References: https://www.suse.com/security/cve/CVE-2014-8134.html https://www.suse.com/security/cve/CVE-2014-8160.html https://www.suse.com/security/cve/CVE-2014-8559.html https://www.suse.com/security/cve/CVE-2014-9419.html https://www.suse.com/security/cve/CVE-2014-9420.html https://www.suse.com/security/cve/CVE-2014-9428.html https://www.suse.com/security/cve/CVE-2014-9529.html https://www.suse.com/security/cve/CVE-2014-9584.html https://www.suse.com/security/cve/CVE-2014-9585.html https://www.suse.com/security/cve/CVE-2015-0777.html https://www.suse.com/security/cve/CVE-2015-1421.html https://www.suse.com/security/cve/CVE-2015-1593.html https://www.suse.com/security/cve/CVE-2015-2150.html https://bugzilla.suse.com/867199 https://bugzilla.suse.com/893428 https://bugzilla.suse.com/895797 https://bugzilla.suse.com/900811 https://bugzilla.suse.com/901925 https://bugzilla.suse.com/903589 https://bugzilla.suse.com/903640 https://bugzilla.suse.com/904899 https://bugzilla.suse.com/905681 https://bugzilla.suse.com/907039 https://bugzilla.suse.com/907818 https://bugzilla.suse.com/907988 https://bugzilla.suse.com/908582 https://bugzilla.suse.com/908588 https://bugzilla.suse.com/908589 https://bugzilla.suse.com/908592 https://bugzilla.suse.com/908593 https://bugzilla.suse.com/908594 https://bugzilla.suse.com/908596 https://bugzilla.suse.com/908598 https://bugzilla.suse.com/908603 https://bugzilla.suse.com/908604 https://bugzilla.suse.com/908605 https://bugzilla.suse.com/908606 https://bugzilla.suse.com/908608 https://bugzilla.suse.com/908610 https://bugzilla.suse.com/908612 https://bugzilla.suse.com/909077 https://bugzilla.suse.com/909078 https://bugzilla.suse.com/909477 https://bugzilla.suse.com/909634 https://bugzilla.suse.com/910150 https://bugzilla.suse.com/910322 https://bugzilla.suse.com/910440 https://bugzilla.suse.com/911311 https://bugzilla.suse.com/911325 https://bugzilla.suse.com/911326 https://bugzilla.suse.com/911356 https://bugzilla.suse.com/911438 https://bugzilla.suse.com/911578 https://bugzilla.suse.com/911835 https://bugzilla.suse.com/912061 https://bugzilla.suse.com/912202 https://bugzilla.suse.com/912429 https://bugzilla.suse.com/912705 https://bugzilla.suse.com/913059 https://bugzilla.suse.com/913466 https://bugzilla.suse.com/913695 https://bugzilla.suse.com/914175 https://bugzilla.suse.com/915425 https://bugzilla.suse.com/915454 https://bugzilla.suse.com/915456 https://bugzilla.suse.com/915577 https://bugzilla.suse.com/915858 https://bugzilla.suse.com/916608 https://bugzilla.suse.com/917830 https://bugzilla.suse.com/917839 https://bugzilla.suse.com/918954 https://bugzilla.suse.com/918970 https://bugzilla.suse.com/919463 https://bugzilla.suse.com/920581 https://bugzilla.suse.com/920604 https://bugzilla.suse.com/921313 https://bugzilla.suse.com/922542 https://bugzilla.suse.com/922944

1 0

openSUSE-SU-2015:0712-1: moderate: Security update for tor
by opensuse-security＠opensuse.org 13 Apr '15

13 Apr '15

openSUSE Security Update: Security update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0712-1 Rating: moderate References: #926097 Cross-References: CVE-2015-2928 CVE-2015-2929 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Tor was updated to 0.2.4.27 to fix two security issues that could be used by an attacker to crash hidden services, or crash clients visiting hidden services. Hidden services should upgrade as soon as possible. The following security issues were fixed: * A malicious client could trigger an assertion failure and halt a hidden service. (CVE-2015-2928) * A client could crash with an assertion failure when parsing a malformed hidden service descriptor. (CVE-2015-2929) This release also backports a simple improvement to make hidden services a bit less vulnerable to denial-of-service attacks: * Introduction points no longer allow multiple INTRODUCE1 cells to arrive on the same circuit. This should make it more expensive for attackers to overwhelm hidden services with introductions. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-300=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-300=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): tor-0.2.4.27-13.1 tor-debuginfo-0.2.4.27-13.1 tor-debugsource-0.2.4.27-13.1 - openSUSE 13.1 (i586 x86_64): tor-0.2.4.27-5.30.1 tor-debuginfo-0.2.4.27-5.30.1 tor-debugsource-0.2.4.27-5.30.1 References: https://www.suse.com/security/cve/CVE-2015-2928.html https://www.suse.com/security/cve/CVE-2015-2929.html https://bugzilla.suse.com/926097

1 0

openSUSE-SU-2015:0687-1: moderate: Security update for quassel
by opensuse-security＠opensuse.org 08 Apr '15

08 Apr '15

openSUSE Security Update: Security update for quassel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0687-1 Rating: moderate References: #924930 #924933 Cross-References: CVE-2015-2778 CVE-2015-2779 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The IRC client quassel was updated to fix two security issues. The following vulnerabilities were fixed: * quassel could crash when receiving an overlength CTCP query containing only multibyte characters (bnc#924930 CVE-2015-2778) * quassel could incorrectly split a message in the middle of a multibyte character, leading to DoS (bnc#924933 CVE-2015-2779) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-294=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-294=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): quassel-base-0.10.0-3.7.1 quassel-client-0.10.0-3.7.1 quassel-client-debuginfo-0.10.0-3.7.1 quassel-core-0.10.0-3.7.1 quassel-core-debuginfo-0.10.0-3.7.1 quassel-debugsource-0.10.0-3.7.1 quassel-mono-0.10.0-3.7.1 quassel-mono-debuginfo-0.10.0-3.7.1 - openSUSE 13.1 (i586 x86_64): quassel-base-0.9.2-19.1 quassel-client-0.9.2-19.1 quassel-client-debuginfo-0.9.2-19.1 quassel-core-0.9.2-19.1 quassel-core-debuginfo-0.9.2-19.1 quassel-debugsource-0.9.2-19.1 quassel-mono-0.9.2-19.1 quassel-mono-debuginfo-0.9.2-19.1 References: https://www.suse.com/security/cve/CVE-2015-2778.html https://www.suse.com/security/cve/CVE-2015-2779.html https://bugzilla.suse.com/924930 https://bugzilla.suse.com/924933

1 0

openSUSE-RU-2015:0686-1: moderate: Recommended update for laptop-mode-tools
by maintenance＠opensuse.org 08 Apr '15

08 Apr '15

openSUSE Recommended Update: Recommended update for laptop-mode-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0686-1 Rating: moderate References: #925636 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: laptop-mode-tools was updated to fix an issue when using it with udev The following bugs were fixed: * fix laptop-mode-tools to make it find the correct path of udevadm (bnc#925636). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-292=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): laptop-mode-tools-1.62-6.3.1 References: https://bugzilla.suse.com/925636

1 0

openSUSE-SU-2015:0685-1: Security update for potrace
by opensuse-security＠opensuse.org 08 Apr '15

08 Apr '15

openSUSE Security Update: Security update for potrace ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0685-1 Rating: low References: #924904 Cross-References: CVE-2013-7437 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The bitmap to vector graphic tracing utility potrace was updated to fix one security issue. The following vulnerability was fixed: - Very large bitmaps could trigger a buffer overflow, crashing the program and causing denial of service (bsc#924904, CVE-2013-7437) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-297=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-297=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libpotrace0-1.11-4.4.1 libpotrace0-debuginfo-1.11-4.4.1 potrace-1.11-4.4.1 potrace-debuginfo-1.11-4.4.1 potrace-debugsource-1.11-4.4.1 potrace-devel-1.11-4.4.1 - openSUSE 13.1 (i586 x86_64): libpotrace0-1.11-2.4.1 libpotrace0-debuginfo-1.11-2.4.1 potrace-1.11-2.4.1 potrace-debuginfo-1.11-2.4.1 potrace-debugsource-1.11-2.4.1 potrace-devel-1.11-2.4.1 References: https://www.suse.com/security/cve/CVE-2013-7437.html https://bugzilla.suse.com/924904

1 0

openSUSE-SU-2015:0684-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 08 Apr '15

08 Apr '15

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0684-1 Rating: moderate References: #924970 #924972 #925109 Cross-References: CVE-2015-2348 CVE-2015-2787 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: PHP was updated to fix three security issues. The following vulnerabilities were fixed: * use-after-free vulnerability in the process_nested_data function (CVE-2015-2787 bnc#924972) * unserialize SoapClient type confusion (bnc#925109) * move_uploaded_file truncates a pathNAME upon encountering a x00 character (CVE-2015-2348 bnc#924970) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-295=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-295=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_php5-5.6.1-18.1 apache2-mod_php5-debuginfo-5.6.1-18.1 php5-5.6.1-18.1 php5-bcmath-5.6.1-18.1 php5-bcmath-debuginfo-5.6.1-18.1 php5-bz2-5.6.1-18.1 php5-bz2-debuginfo-5.6.1-18.1 php5-calendar-5.6.1-18.1 php5-calendar-debuginfo-5.6.1-18.1 php5-ctype-5.6.1-18.1 php5-ctype-debuginfo-5.6.1-18.1 php5-curl-5.6.1-18.1 php5-curl-debuginfo-5.6.1-18.1 php5-dba-5.6.1-18.1 php5-dba-debuginfo-5.6.1-18.1 php5-debuginfo-5.6.1-18.1 php5-debugsource-5.6.1-18.1 php5-devel-5.6.1-18.1 php5-dom-5.6.1-18.1 php5-dom-debuginfo-5.6.1-18.1 php5-enchant-5.6.1-18.1 php5-enchant-debuginfo-5.6.1-18.1 php5-exif-5.6.1-18.1 php5-exif-debuginfo-5.6.1-18.1 php5-fastcgi-5.6.1-18.1 php5-fastcgi-debuginfo-5.6.1-18.1 php5-fileinfo-5.6.1-18.1 php5-fileinfo-debuginfo-5.6.1-18.1 php5-firebird-5.6.1-18.1 php5-firebird-debuginfo-5.6.1-18.1 php5-fpm-5.6.1-18.1 php5-fpm-debuginfo-5.6.1-18.1 php5-ftp-5.6.1-18.1 php5-ftp-debuginfo-5.6.1-18.1 php5-gd-5.6.1-18.1 php5-gd-debuginfo-5.6.1-18.1 php5-gettext-5.6.1-18.1 php5-gettext-debuginfo-5.6.1-18.1 php5-gmp-5.6.1-18.1 php5-gmp-debuginfo-5.6.1-18.1 php5-iconv-5.6.1-18.1 php5-iconv-debuginfo-5.6.1-18.1 php5-imap-5.6.1-18.1 php5-imap-debuginfo-5.6.1-18.1 php5-intl-5.6.1-18.1 php5-intl-debuginfo-5.6.1-18.1 php5-json-5.6.1-18.1 php5-json-debuginfo-5.6.1-18.1 php5-ldap-5.6.1-18.1 php5-ldap-debuginfo-5.6.1-18.1 php5-mbstring-5.6.1-18.1 php5-mbstring-debuginfo-5.6.1-18.1 php5-mcrypt-5.6.1-18.1 php5-mcrypt-debuginfo-5.6.1-18.1 php5-mssql-5.6.1-18.1 php5-mssql-debuginfo-5.6.1-18.1 php5-mysql-5.6.1-18.1 php5-mysql-debuginfo-5.6.1-18.1 php5-odbc-5.6.1-18.1 php5-odbc-debuginfo-5.6.1-18.1 php5-opcache-5.6.1-18.1 php5-opcache-debuginfo-5.6.1-18.1 php5-openssl-5.6.1-18.1 php5-openssl-debuginfo-5.6.1-18.1 php5-pcntl-5.6.1-18.1 php5-pcntl-debuginfo-5.6.1-18.1 php5-pdo-5.6.1-18.1 php5-pdo-debuginfo-5.6.1-18.1 php5-pgsql-5.6.1-18.1 php5-pgsql-debuginfo-5.6.1-18.1 php5-phar-5.6.1-18.1 php5-phar-debuginfo-5.6.1-18.1 php5-posix-5.6.1-18.1 php5-posix-debuginfo-5.6.1-18.1 php5-pspell-5.6.1-18.1 php5-pspell-debuginfo-5.6.1-18.1 php5-readline-5.6.1-18.1 php5-readline-debuginfo-5.6.1-18.1 php5-shmop-5.6.1-18.1 php5-shmop-debuginfo-5.6.1-18.1 php5-snmp-5.6.1-18.1 php5-snmp-debuginfo-5.6.1-18.1 php5-soap-5.6.1-18.1 php5-soap-debuginfo-5.6.1-18.1 php5-sockets-5.6.1-18.1 php5-sockets-debuginfo-5.6.1-18.1 php5-sqlite-5.6.1-18.1 php5-sqlite-debuginfo-5.6.1-18.1 php5-suhosin-5.6.1-18.1 php5-suhosin-debuginfo-5.6.1-18.1 php5-sysvmsg-5.6.1-18.1 php5-sysvmsg-debuginfo-5.6.1-18.1 php5-sysvsem-5.6.1-18.1 php5-sysvsem-debuginfo-5.6.1-18.1 php5-sysvshm-5.6.1-18.1 php5-sysvshm-debuginfo-5.6.1-18.1 php5-tidy-5.6.1-18.1 php5-tidy-debuginfo-5.6.1-18.1 php5-tokenizer-5.6.1-18.1 php5-tokenizer-debuginfo-5.6.1-18.1 php5-wddx-5.6.1-18.1 php5-wddx-debuginfo-5.6.1-18.1 php5-xmlreader-5.6.1-18.1 php5-xmlreader-debuginfo-5.6.1-18.1 php5-xmlrpc-5.6.1-18.1 php5-xmlrpc-debuginfo-5.6.1-18.1 php5-xmlwriter-5.6.1-18.1 php5-xmlwriter-debuginfo-5.6.1-18.1 php5-xsl-5.6.1-18.1 php5-xsl-debuginfo-5.6.1-18.1 php5-zip-5.6.1-18.1 php5-zip-debuginfo-5.6.1-18.1 php5-zlib-5.6.1-18.1 php5-zlib-debuginfo-5.6.1-18.1 - openSUSE 13.2 (noarch): php5-pear-5.6.1-18.1 - openSUSE 13.1 (i586 x86_64): apache2-mod_php5-5.4.20-49.1 apache2-mod_php5-debuginfo-5.4.20-49.1 php5-5.4.20-49.1 php5-bcmath-5.4.20-49.1 php5-bcmath-debuginfo-5.4.20-49.1 php5-bz2-5.4.20-49.1 php5-bz2-debuginfo-5.4.20-49.1 php5-calendar-5.4.20-49.1 php5-calendar-debuginfo-5.4.20-49.1 php5-ctype-5.4.20-49.1 php5-ctype-debuginfo-5.4.20-49.1 php5-curl-5.4.20-49.1 php5-curl-debuginfo-5.4.20-49.1 php5-dba-5.4.20-49.1 php5-dba-debuginfo-5.4.20-49.1 php5-debuginfo-5.4.20-49.1 php5-debugsource-5.4.20-49.1 php5-devel-5.4.20-49.1 php5-dom-5.4.20-49.1 php5-dom-debuginfo-5.4.20-49.1 php5-enchant-5.4.20-49.1 php5-enchant-debuginfo-5.4.20-49.1 php5-exif-5.4.20-49.1 php5-exif-debuginfo-5.4.20-49.1 php5-fastcgi-5.4.20-49.1 php5-fastcgi-debuginfo-5.4.20-49.1 php5-fileinfo-5.4.20-49.1 php5-fileinfo-debuginfo-5.4.20-49.1 php5-firebird-5.4.20-49.1 php5-firebird-debuginfo-5.4.20-49.1 php5-fpm-5.4.20-49.1 php5-fpm-debuginfo-5.4.20-49.1 php5-ftp-5.4.20-49.1 php5-ftp-debuginfo-5.4.20-49.1 php5-gd-5.4.20-49.1 php5-gd-debuginfo-5.4.20-49.1 php5-gettext-5.4.20-49.1 php5-gettext-debuginfo-5.4.20-49.1 php5-gmp-5.4.20-49.1 php5-gmp-debuginfo-5.4.20-49.1 php5-iconv-5.4.20-49.1 php5-iconv-debuginfo-5.4.20-49.1 php5-imap-5.4.20-49.1 php5-imap-debuginfo-5.4.20-49.1 php5-intl-5.4.20-49.1 php5-intl-debuginfo-5.4.20-49.1 php5-json-5.4.20-49.1 php5-json-debuginfo-5.4.20-49.1 php5-ldap-5.4.20-49.1 php5-ldap-debuginfo-5.4.20-49.1 php5-mbstring-5.4.20-49.1 php5-mbstring-debuginfo-5.4.20-49.1 php5-mcrypt-5.4.20-49.1 php5-mcrypt-debuginfo-5.4.20-49.1 php5-mssql-5.4.20-49.1 php5-mssql-debuginfo-5.4.20-49.1 php5-mysql-5.4.20-49.1 php5-mysql-debuginfo-5.4.20-49.1 php5-odbc-5.4.20-49.1 php5-odbc-debuginfo-5.4.20-49.1 php5-openssl-5.4.20-49.1 php5-openssl-debuginfo-5.4.20-49.1 php5-pcntl-5.4.20-49.1 php5-pcntl-debuginfo-5.4.20-49.1 php5-pdo-5.4.20-49.1 php5-pdo-debuginfo-5.4.20-49.1 php5-pgsql-5.4.20-49.1 php5-pgsql-debuginfo-5.4.20-49.1 php5-phar-5.4.20-49.1 php5-phar-debuginfo-5.4.20-49.1 php5-posix-5.4.20-49.1 php5-posix-debuginfo-5.4.20-49.1 php5-pspell-5.4.20-49.1 php5-pspell-debuginfo-5.4.20-49.1 php5-readline-5.4.20-49.1 php5-readline-debuginfo-5.4.20-49.1 php5-shmop-5.4.20-49.1 php5-shmop-debuginfo-5.4.20-49.1 php5-snmp-5.4.20-49.1 php5-snmp-debuginfo-5.4.20-49.1 php5-soap-5.4.20-49.1 php5-soap-debuginfo-5.4.20-49.1 php5-sockets-5.4.20-49.1 php5-sockets-debuginfo-5.4.20-49.1 php5-sqlite-5.4.20-49.1 php5-sqlite-debuginfo-5.4.20-49.1 php5-suhosin-5.4.20-49.1 php5-suhosin-debuginfo-5.4.20-49.1 php5-sysvmsg-5.4.20-49.1 php5-sysvmsg-debuginfo-5.4.20-49.1 php5-sysvsem-5.4.20-49.1 php5-sysvsem-debuginfo-5.4.20-49.1 php5-sysvshm-5.4.20-49.1 php5-sysvshm-debuginfo-5.4.20-49.1 php5-tidy-5.4.20-49.1 php5-tidy-debuginfo-5.4.20-49.1 php5-tokenizer-5.4.20-49.1 php5-tokenizer-debuginfo-5.4.20-49.1 php5-wddx-5.4.20-49.1 php5-wddx-debuginfo-5.4.20-49.1 php5-xmlreader-5.4.20-49.1 php5-xmlreader-debuginfo-5.4.20-49.1 php5-xmlrpc-5.4.20-49.1 php5-xmlrpc-debuginfo-5.4.20-49.1 php5-xmlwriter-5.4.20-49.1 php5-xmlwriter-debuginfo-5.4.20-49.1 php5-xsl-5.4.20-49.1 php5-xsl-debuginfo-5.4.20-49.1 php5-zip-5.4.20-49.1 php5-zip-debuginfo-5.4.20-49.1 php5-zlib-5.4.20-49.1 php5-zlib-debuginfo-5.4.20-49.1 - openSUSE 13.1 (noarch): php5-pear-5.4.20-49.1 References: https://www.suse.com/security/cve/CVE-2015-2348.html https://www.suse.com/security/cve/CVE-2015-2787.html https://bugzilla.suse.com/924970 https://bugzilla.suse.com/924972 https://bugzilla.suse.com/925109

1 0

openSUSE-RU-2015:0683-1: Recommended update for apache2-mod_nss
by maintenance＠opensuse.org 08 Apr '15

08 Apr '15

openSUSE Recommended Update: Recommended update for apache2-mod_nss ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0683-1 Rating: low References: #921182 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The Apache2 mod_nss sample configuration file was updated to remove "ecdhe_rsa_aes_256_sha256" cipher from the mod_nss.conf.in file as this cipher is not supported and it was listed here incorrectly [bnc#921182]. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-291=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_nss-1.0.8-11.11.1 apache2-mod_nss-debuginfo-1.0.8-11.11.1 apache2-mod_nss-debugsource-1.0.8-11.11.1 References: https://bugzilla.suse.com/921182

1 0

openSUSE-SU-2015:0682-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 08 Apr '15

08 Apr '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0682-1 Rating: important References: #925713 #925714 Cross-References: CVE-2015-1233 CVE-2015-1234 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Chromium was updated to 41.0.2272.118 to fix two security issues. The following vulnerabilities were fixed: * A combination of V8, Gamepad and IPC bugs could lead to remote code execution outside of the sandbox (CVE-2015-1233, boo#925713) * Buffer overflow via race condition in GPU (CVE-2015-1234, boo#925714) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-298=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-298=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): chromedriver-41.0.2272.118-20.1 chromedriver-debuginfo-41.0.2272.118-20.1 chromium-41.0.2272.118-20.1 chromium-debuginfo-41.0.2272.118-20.1 chromium-debugsource-41.0.2272.118-20.1 chromium-desktop-gnome-41.0.2272.118-20.1 chromium-desktop-kde-41.0.2272.118-20.1 chromium-ffmpegsumo-41.0.2272.118-20.1 chromium-ffmpegsumo-debuginfo-41.0.2272.118-20.1 - openSUSE 13.1 (i586 x86_64): chromedriver-41.0.2272.118-75.1 chromedriver-debuginfo-41.0.2272.118-75.1 chromium-41.0.2272.118-75.1 chromium-debuginfo-41.0.2272.118-75.1 chromium-debugsource-41.0.2272.118-75.1 chromium-desktop-gnome-41.0.2272.118-75.1 chromium-desktop-kde-41.0.2272.118-75.1 chromium-ffmpegsumo-41.0.2272.118-75.1 chromium-ffmpegsumo-debuginfo-41.0.2272.118-75.1 References: https://www.suse.com/security/cve/CVE-2015-1233.html https://www.suse.com/security/cve/CVE-2015-1234.html https://bugzilla.suse.com/925713 https://bugzilla.suse.com/925714

1 0

openSUSE-RU-2015:0681-1: moderate: Recommended update for vsftpd
by maintenance＠opensuse.org 08 Apr '15

08 Apr '15

openSUSE Recommended Update: Recommended update for vsftpd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0681-1 Rating: moderate References: #900326 #915522 #922538 #925963 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: vsftpd was updated to fix the deny_file option better and avoid wildcard regressions introduced by previous updates. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-296=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-296=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): vsftpd-3.0.2-14.14.1 vsftpd-debuginfo-3.0.2-14.14.1 vsftpd-debugsource-3.0.2-14.14.1 - openSUSE 13.1 (i586 x86_64): vsftpd-3.0.2-10.17.1 vsftpd-debuginfo-3.0.2-10.17.1 vsftpd-debugsource-3.0.2-10.17.1 References: https://bugzilla.suse.com/900326 https://bugzilla.suse.com/915522 https://bugzilla.suse.com/922538 https://bugzilla.suse.com/925963

1 0

openSUSE-RU-2015:0680-1: moderate: Recommended update for tigervnc
by maintenance＠opensuse.org 08 Apr '15

08 Apr '15

openSUSE Recommended Update: Recommended update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0680-1 Rating: moderate References: #920969 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: TigerVNC was updated to terminate instead of ignoring restart. (bnc#920969) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-293=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): tigervnc-1.4.1-6.29.1 tigervnc-debuginfo-1.4.1-6.29.1 tigervnc-debugsource-1.4.1-6.29.1 xorg-x11-Xvnc-1.4.1-6.29.1 xorg-x11-Xvnc-debuginfo-1.4.1-6.29.1 References: https://bugzilla.suse.com/920969

1 0