April 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2015:0748-1: moderate: Security update for Chromium
by opensuse-security＠opensuse.org 22 Apr '15

22 Apr '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0748-1 Rating: moderate References: #927302 Cross-References: CVE-2015-1235 CVE-2015-1236 CVE-2015-1237 CVE-2015-1238 CVE-2015-1240 CVE-2015-1241 CVE-2015-1242 CVE-2015-1244 CVE-2015-1245 CVE-2015-1246 CVE-2015-1247 CVE-2015-1248 CVE-2015-1249 CVE-2015-3333 CVE-2015-3334 CVE-2015-3335 CVE-2015-3336 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. Description: Chromium was updated to latest stable release 42.0.2311.90 to fix security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-1235: Cross-origin-bypass in HTML parser. * CVE-2015-1236: Cross-origin-bypass in Blink. * CVE-2015-1237: Use-after-free in IPC. * CVE-2015-1238: Out-of-bounds write in Skia. * CVE-2015-1240: Out-of-bounds read in WebGL. * CVE-2015-1241: Tap-Jacking. * CVE-2015-1242: Type confusion in V8. * CVE-2015-1244: HSTS bypass in WebSockets. * CVE-2015-1245: Use-after-free in PDFium. * CVE-2015-1246: Out-of-bounds read in Blink. * CVE-2015-1247: Scheme issues in OpenSearch. * CVE-2015-1248: SafeBrowsing bypass. * CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives. * CVE-2015-3333: Multiple vulnerabilities in V8 fixed at the tip of the 4.2 branch (currently 4.2.77.14). * CVE-2015-3336: fullscreen and UI locking without user confirmeation * CVE-2015-3335: unspecified impact of crafed programs running in NaCl sandbox * CVE-2015-3334: "Media: Allowed by you" sometimes not shown in a permissions table New functionality added: * A number of new apps, extension and Web Platform APIs (including the Push API!) * Lots of under the hood changes for stability and performance Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-320=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-320=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): chromedriver-42.0.2311.90-23.3 chromedriver-debuginfo-42.0.2311.90-23.3 chromium-42.0.2311.90-23.3 chromium-debuginfo-42.0.2311.90-23.3 chromium-debugsource-42.0.2311.90-23.3 chromium-desktop-gnome-42.0.2311.90-23.3 chromium-desktop-kde-42.0.2311.90-23.3 chromium-ffmpegsumo-42.0.2311.90-23.3 chromium-ffmpegsumo-debuginfo-42.0.2311.90-23.3 - openSUSE 13.1 (i586 x86_64): chromedriver-42.0.2311.90-78.2 chromedriver-debuginfo-42.0.2311.90-78.2 chromium-42.0.2311.90-78.2 chromium-debuginfo-42.0.2311.90-78.2 chromium-debugsource-42.0.2311.90-78.2 chromium-desktop-gnome-42.0.2311.90-78.2 chromium-desktop-kde-42.0.2311.90-78.2 chromium-ffmpegsumo-42.0.2311.90-78.2 chromium-ffmpegsumo-debuginfo-42.0.2311.90-78.2 References: https://www.suse.com/security/cve/CVE-2015-1235.html https://www.suse.com/security/cve/CVE-2015-1236.html https://www.suse.com/security/cve/CVE-2015-1237.html https://www.suse.com/security/cve/CVE-2015-1238.html https://www.suse.com/security/cve/CVE-2015-1240.html https://www.suse.com/security/cve/CVE-2015-1241.html https://www.suse.com/security/cve/CVE-2015-1242.html https://www.suse.com/security/cve/CVE-2015-1244.html https://www.suse.com/security/cve/CVE-2015-1245.html https://www.suse.com/security/cve/CVE-2015-1246.html https://www.suse.com/security/cve/CVE-2015-1247.html https://www.suse.com/security/cve/CVE-2015-1248.html https://www.suse.com/security/cve/CVE-2015-1249.html https://www.suse.com/security/cve/CVE-2015-3333.html https://www.suse.com/security/cve/CVE-2015-3334.html https://www.suse.com/security/cve/CVE-2015-3335.html https://www.suse.com/security/cve/CVE-2015-3336.html https://bugzilla.suse.com/927302

1 0

openSUSE-RU-2015:0741-1: moderate: Recommended update for pulseaudio
by maintenance＠opensuse.org 21 Apr '15

21 Apr '15

openSUSE Recommended Update: Recommended update for pulseaudio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0741-1 Rating: moderate References: #906138 #908288 #910983 #911615 #913686 #916048 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This recommended udpate for pulseaudio fixes the following issues: - Backport ALSA module fixes from PA 6.0 (bnc#906138, bnc#908288, bnc#910983, bnc#911615, bnc#913686, bnc#916048): + alsa-mixer: Fix Analog Input showing up on USB Headset + alsa: Use card description in default sink/source prefix when available + alsa-util: Reset hwparams_copy before the second try of buffer setup + Name HDMI outputs uniquely + sink, source: Assign to s->muted from only one place + alsa-mixer: Add surround 2.1 profile + alsa: Add extra HDMI mappings + alsa: Add "exact-channels" mapping configurability + alsa: Allow "fallback" configuration for mappings and profiles + alsa: Add a multichannel fallback mapping + alsa-mixer: Fix path subset detection + alsa: Remove four channel input profile + alsa-mixer: Mark "Line HP Swap" as required-any + alsa-mixer: recognize Dock headphone jack + alsa-util: Add functions for accessing mixer elements through mixer class + alsa-mixer/card: Move to use the new mixer interface + alsa: Remove unnecessary hctl handles being passed around + alsa-mixer: Merge analog-output-desktop-speaker with analog-output-speaker(-always) + alsa-mixer: Ignore some elements in the analog-output path + alsa-mixer: Disable line-out if headphone jack is plugged + alsa-mixer: Add support for "Headphone+LO" and "Speaker+LO" + alsa: Correct port availability with multiple jacks + alsa-util: fix parenthesis position in err assignment + alsa-mixer: Mute headphones and speakers on line out path + alsa-mixer: Add lineout to surround21 mappings + alsa-mixer: Make speaker unavailable when Line Out is plugged in + alsa: Don't try to use ELD controls with UCM Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-319=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libpulse-devel-5.0-4.18.1 libpulse-mainloop-glib0-5.0-4.18.1 libpulse-mainloop-glib0-debuginfo-5.0-4.18.1 libpulse0-5.0-4.18.1 libpulse0-debuginfo-5.0-4.18.1 pulseaudio-5.0-4.18.1 pulseaudio-debuginfo-5.0-4.18.1 pulseaudio-debugsource-5.0-4.18.1 pulseaudio-esound-compat-5.0-4.18.1 pulseaudio-gdm-hooks-5.0-4.18.1 pulseaudio-module-bluetooth-5.0-4.18.1 pulseaudio-module-bluetooth-debuginfo-5.0-4.18.1 pulseaudio-module-gconf-5.0-4.18.1 pulseaudio-module-gconf-debuginfo-5.0-4.18.1 pulseaudio-module-jack-5.0-4.18.1 pulseaudio-module-jack-debuginfo-5.0-4.18.1 pulseaudio-module-lirc-5.0-4.18.1 pulseaudio-module-lirc-debuginfo-5.0-4.18.1 pulseaudio-module-x11-5.0-4.18.1 pulseaudio-module-x11-debuginfo-5.0-4.18.1 pulseaudio-module-zeroconf-5.0-4.18.1 pulseaudio-module-zeroconf-debuginfo-5.0-4.18.1 pulseaudio-system-wide-5.0-4.18.1 pulseaudio-utils-5.0-4.18.1 pulseaudio-utils-debuginfo-5.0-4.18.1 - openSUSE 13.2 (x86_64): libpulse-mainloop-glib0-32bit-5.0-4.18.1 libpulse-mainloop-glib0-debuginfo-32bit-5.0-4.18.1 libpulse0-32bit-5.0-4.18.1 libpulse0-debuginfo-32bit-5.0-4.18.1 - openSUSE 13.2 (noarch): pulseaudio-lang-5.0-4.18.1 References: https://bugzilla.suse.com/906138 https://bugzilla.suse.com/908288 https://bugzilla.suse.com/910983 https://bugzilla.suse.com/911615 https://bugzilla.suse.com/913686 https://bugzilla.suse.com/916048

1 0

openSUSE-RU-2015:0740-1: moderate: Recommended update for fail2ban
by maintenance＠opensuse.org 21 Apr '15

21 Apr '15

openSUSE Recommended Update: Recommended update for fail2ban ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0740-1 Rating: moderate References: #926943 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for fail2ban adds a missing dependency on ed to fix boo#926943 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-315=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-315=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): SuSEfirewall2-fail2ban-0.8.14-2.15.1 fail2ban-0.8.14-2.15.1 nagios-plugins-fail2ban-0.8.14-2.15.1 - openSUSE 13.1 (noarch): SuSEfirewall2-fail2ban-0.8.14-2.24.1 fail2ban-0.8.14-2.24.1 nagios-plugins-fail2ban-0.8.14-2.24.1 References: https://bugzilla.suse.com/926943

1 0

openSUSE-RU-2015:0739-1: Gnomestack update for the 3.14 stable branch
by maintenance＠opensuse.org 21 Apr '15

21 Apr '15

openSUSE Recommended Update: Gnomestack update for the 3.14 stable branch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0739-1 Rating: low References: #924072 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides various bugfixes for the 3.14 GNOME stack. For a detailed description, please refer to the changelog. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-318=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): eog-3.14.4-7.3 eog-debuginfo-3.14.4-7.3 eog-debugsource-3.14.4-7.3 eog-devel-3.14.4-7.3 eog-plugins-3.14.2-3.2 eog-plugins-debuginfo-3.14.2-3.2 eog-plugins-debugsource-3.14.2-3.2 gdk-pixbuf-loader-rsvg-2.40.9-7.1 gdk-pixbuf-loader-rsvg-debuginfo-2.40.9-7.1 gdm-3.14.2-7.1 gdm-debuginfo-3.14.2-7.1 gdm-debugsource-3.14.2-7.1 gdm-devel-3.14.2-7.1 gedit-code-assistance-debugsource-3.14.2-2.9.1 gedit-plugin-code-assistance-3.14.2-2.9.1 gedit-plugin-code-assistance-debuginfo-3.14.2-2.9.1 glade-catalog-gtksourceview-3.14.4-11.1 gnome-control-center-3.14.4-15.1 gnome-control-center-color-3.14.4-15.1 gnome-control-center-debuginfo-3.14.4-15.1 gnome-control-center-debugsource-3.14.4-15.1 gnome-control-center-devel-3.14.4-15.1 gnome-control-center-user-faces-3.14.4-15.1 gnome-mines-3.14.2-3.3 gnome-mines-debuginfo-3.14.2-3.3 gnome-mines-debugsource-3.14.2-3.3 gnome-settings-daemon-3.14.3-7.1 gnome-settings-daemon-debuginfo-3.14.3-7.1 gnome-settings-daemon-debugsource-3.14.3-7.1 gnome-settings-daemon-devel-3.14.3-7.1 gnome-shell-3.14.4-9.1 gnome-shell-browser-plugin-3.14.4-9.1 gnome-shell-browser-plugin-debuginfo-3.14.4-9.1 gnome-shell-debuginfo-3.14.4-9.1 gnome-shell-debugsource-3.14.4-9.1 gnome-shell-devel-3.14.4-9.1 gnome-shell-search-provider-gnome-terminal-3.14.3-7.1 gnome-shell-wayland-3.14.4-9.1 gnome-terminal-3.14.3-7.1 gnome-terminal-debuginfo-3.14.3-7.1 gnome-terminal-debugsource-3.14.3-7.1 gssdp-debugsource-0.14.11-2.3.1 gssdp-utils-0.14.11-2.3.1 gssdp-utils-debuginfo-0.14.11-2.3.1 gtk3-debugsource-3.14.12-15.1 gtk3-devel-3.14.12-15.1 gtk3-devel-debuginfo-3.14.12-15.1 gtk3-immodule-amharic-3.14.12-15.1 gtk3-immodule-amharic-debuginfo-3.14.12-15.1 gtk3-immodule-broadway-3.14.12-15.1 gtk3-immodule-broadway-debuginfo-3.14.12-15.1 gtk3-immodule-inuktitut-3.14.12-15.1 gtk3-immodule-inuktitut-debuginfo-3.14.12-15.1 gtk3-immodule-multipress-3.14.12-15.1 gtk3-immodule-multipress-debuginfo-3.14.12-15.1 gtk3-immodule-thai-3.14.12-15.1 gtk3-immodule-thai-debuginfo-3.14.12-15.1 gtk3-immodule-vietnamese-3.14.12-15.1 gtk3-immodule-vietnamese-debuginfo-3.14.12-15.1 gtk3-immodule-xim-3.14.12-15.1 gtk3-immodule-xim-debuginfo-3.14.12-15.1 gtk3-immodules-tigrigna-3.14.12-15.1 gtk3-immodules-tigrigna-debuginfo-3.14.12-15.1 gtk3-tools-3.14.12-15.1 gtk3-tools-debuginfo-3.14.12-15.1 gtksourceview-debugsource-3.14.4-11.1 gtksourceview-devel-3.14.4-11.1 gupnp-av-0.12.7-2.3.1 gupnp-av-debugsource-0.12.7-2.3.1 gupnp-debugsource-0.20.13-2.3.1 gvfs-1.22.4-11.1 gvfs-backend-afc-1.22.4-11.1 gvfs-backend-afc-debuginfo-1.22.4-11.1 gvfs-backends-1.22.4-11.1 gvfs-backends-debuginfo-1.22.4-11.1 gvfs-debuginfo-1.22.4-11.1 gvfs-debugsource-1.22.4-11.1 gvfs-devel-1.22.4-11.1 gvfs-fuse-1.22.4-11.1 gvfs-fuse-debuginfo-1.22.4-11.1 latexila-3.14.4-11.1 latexila-debuginfo-3.14.4-11.1 latexila-debugsource-3.14.4-11.1 libchamplain-0_12-0-0.12.10-3.1 libchamplain-0_12-0-debuginfo-0.12.10-3.1 libchamplain-debugsource-0.12.10-3.1 libchamplain-devel-0.12.10-3.1 libgdm1-3.14.2-7.1 libgdm1-debuginfo-3.14.2-7.1 libgssdp-1_0-3-0.14.11-2.3.1 libgssdp-1_0-3-debuginfo-0.14.11-2.3.1 libgssdp-devel-0.14.11-2.3.1 libgtk-3-0-3.14.12-15.1 libgtk-3-0-debuginfo-3.14.12-15.1 libgtksourceview-3_0-1-3.14.4-11.1 libgtksourceview-3_0-1-debuginfo-3.14.4-11.1 libgupnp-1_0-4-0.20.13-2.3.1 libgupnp-1_0-4-debuginfo-0.20.13-2.3.1 libgupnp-av-1_0-2-0.12.7-2.3.1 libgupnp-av-1_0-2-debuginfo-0.12.7-2.3.1 libgupnp-av-devel-0.12.7-2.3.1 libgupnp-devel-0.20.13-2.3.1 libmutter0-3.14.4-9.1 libmutter0-debuginfo-3.14.4-9.1 librsvg-2-2-2.40.9-7.1 librsvg-2-2-debuginfo-2.40.9-7.1 librsvg-debugsource-2.40.9-7.1 librsvg-devel-2.40.9-7.1 libtracker-common-1_0-1.2.6-9.1 libtracker-common-1_0-debuginfo-1.2.6-9.1 libtracker-control-1_0-0-1.2.6-9.1 libtracker-control-1_0-0-debuginfo-1.2.6-9.1 libtracker-miner-1_0-0-1.2.6-9.1 libtracker-miner-1_0-0-debuginfo-1.2.6-9.1 libtracker-sparql-1_0-0-1.2.6-9.1 libtracker-sparql-1_0-0-debuginfo-1.2.6-9.1 mutter-3.14.4-9.1 mutter-data-3.14.4-9.1 mutter-debuginfo-3.14.4-9.1 mutter-debugsource-3.14.4-9.1 mutter-devel-3.14.4-9.1 mutter-devel-doc-3.14.4-9.1 nautilus-extension-terminal-3.14.3-7.1 nautilus-extension-terminal-debuginfo-3.14.3-7.1 nautilus-extension-tracker-tags-1.2.6-9.1 nautilus-extension-tracker-tags-debuginfo-1.2.6-9.1 orca-3.14.4-7.1 rsvg-view-2.40.9-7.1 rsvg-view-debuginfo-2.40.9-7.1 tracker-1.2.6-9.1 tracker-debuginfo-1.2.6-9.1 tracker-debugsource-1.2.6-9.1 tracker-devel-1.2.6-9.1 tracker-extras-debugsource-1.2.6-9.1 tracker-gui-1.2.6-9.1 tracker-gui-debuginfo-1.2.6-9.1 tracker-miner-files-1.2.6-9.1 tracker-miner-files-debuginfo-1.2.6-9.1 tracker-miner-rss-1.2.6-9.1 tracker-miner-rss-debuginfo-1.2.6-9.1 tracker-miner-thunderbird-1.2.6-9.1 typelib-1_0-Champlain-0_12-0.12.10-3.1 typelib-1_0-GSSDP-1_0-0.14.11-2.3.1 typelib-1_0-GUPnP-1_0-0.20.13-2.3.1 typelib-1_0-GUPnPAV-1_0-0.12.7-2.3.1 typelib-1_0-Gdm-1_0-3.14.2-7.1 typelib-1_0-Gtk-3_0-3.14.12-15.1 typelib-1_0-GtkSource-3_0-3.14.4-11.1 typelib-1_0-Meta-3_0-3.14.4-9.1 typelib-1_0-Rsvg-2_0-2.40.9-7.1 typelib-1_0-Tracker-1_0-1.2.6-9.1 typelib-1_0-TrackerControl-1_0-1.2.6-9.1 typelib-1_0-TrackerMiner-1_0-1.2.6-9.1 - openSUSE 13.2 (x86_64): gdk-pixbuf-loader-rsvg-32bit-2.40.9-7.1 gdk-pixbuf-loader-rsvg-debuginfo-32bit-2.40.9-7.1 gtk3-devel-32bit-3.14.12-15.1 gtk3-devel-debuginfo-32bit-3.14.12-15.1 gtk3-immodule-amharic-32bit-3.14.12-15.1 gtk3-immodule-amharic-debuginfo-32bit-3.14.12-15.1 gtk3-immodule-inuktitut-32bit-3.14.12-15.1 gtk3-immodule-inuktitut-debuginfo-32bit-3.14.12-15.1 gtk3-immodule-multipress-32bit-3.14.12-15.1 gtk3-immodule-multipress-debuginfo-32bit-3.14.12-15.1 gtk3-immodule-thai-32bit-3.14.12-15.1 gtk3-immodule-thai-debuginfo-32bit-3.14.12-15.1 gtk3-immodule-vietnamese-32bit-3.14.12-15.1 gtk3-immodule-vietnamese-debuginfo-32bit-3.14.12-15.1 gtk3-immodule-xim-32bit-3.14.12-15.1 gtk3-immodule-xim-debuginfo-32bit-3.14.12-15.1 gtk3-immodules-tigrigna-32bit-3.14.12-15.1 gtk3-immodules-tigrigna-debuginfo-32bit-3.14.12-15.1 gtk3-tools-32bit-3.14.12-15.1 gtk3-tools-debuginfo-32bit-3.14.12-15.1 gvfs-32bit-1.22.4-11.1 gvfs-debuginfo-32bit-1.22.4-11.1 libgtk-3-0-32bit-3.14.12-15.1 libgtk-3-0-debuginfo-32bit-3.14.12-15.1 librsvg-2-2-32bit-2.40.9-7.1 librsvg-2-2-debuginfo-32bit-2.40.9-7.1 - openSUSE 13.2 (noarch): eog-lang-3.14.4-7.3 eog-plugins-lang-3.14.2-3.2 gdm-branding-openSUSE-13.2-3.2 gdm-branding-upstream-3.14.2-7.1 gdm-lang-3.14.2-7.1 gdmflexiserver-3.14.2-7.1 gnome-control-center-lang-3.14.4-15.1 gnome-mines-lang-3.14.2-3.3 gnome-settings-daemon-lang-3.14.3-7.1 gnome-shell-classic-3.14.4-9.1 gnome-shell-extensions-common-3.14.4-9.1 gnome-shell-extensions-common-lang-3.14.4-9.1 gnome-shell-lang-3.14.4-9.1 gnome-terminal-lang-3.14.3-7.1 gnome-tweak-tool-3.14.3-8.2 gnome-tweak-tool-lang-3.14.3-8.2 gtk3-branding-SLED-13.2-14.2 gtk3-branding-openSUSE-13.2-14.2 gtk3-branding-upstream-3.14.12-15.1 gtk3-data-3.14.12-15.1 gtk3-lang-3.14.12-15.1 gtksourceview-lang-3.14.4-11.1 gvfs-lang-1.22.4-11.1 mutter-lang-3.14.4-9.1 orca-lang-3.14.4-7.1 tracker-lang-1.2.6-9.1 References: https://bugzilla.suse.com/924072

1 0

openSUSE-RU-2015:0738-1: important: Recommended update for tar
by maintenance＠opensuse.org 21 Apr '15

21 Apr '15

openSUSE Recommended Update: Recommended update for tar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0738-1 Rating: important References: #918487 #919233 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for tar fixes a regression: - disable tar-recursive--files-from.patch which was introduced with the latest update, but caused regressions (boo#918487, boo#919233) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-316=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): tar-1.28-2.16.1 tar-backup-scripts-1.28-2.16.1 tar-debuginfo-1.28-2.16.1 tar-debugsource-1.28-2.16.1 tar-tests-1.28-2.16.1 tar-tests-debuginfo-1.28-2.16.1 - openSUSE 13.2 (noarch): tar-lang-1.28-2.16.1 References: https://bugzilla.suse.com/918487 https://bugzilla.suse.com/919233

1 0

openSUSE-RU-2015:0737-1: moderate: Recommended update for Xournal
by maintenance＠opensuse.org 21 Apr '15

21 Apr '15

openSUSE Recommended Update: Recommended update for Xournal ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0737-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for Xournal provides version 0.4.8 with various fixes and improvements: - Added missing German translations - Window title format is corrected - incorrect-fsf-address warning is reported upstream (Bug #151) - have the large pen cursor option updated in the interface after defaults loaded - added possibility to optionally select a larger cursor - fixed implicit functions - Update from 0.4.5 to 0.4.8. (changes from http://xournal.sourceforge.net/manual.html#changelog) + Bugfixes and Features * option to auto-save documents and recover auto-saves * new Export to PDF code using cairo (and config option to enable legacy code) * horizontal view mode * improved touchscreen handling * pencil cursor option * added "new pages duplicate background" option (new default is false) * updated Windows build and packaging instructions * insert image tool * paste images and text directly from and to other applications * lasso tool * ignore events from non-drawing devices by default (ignore_other_devices) * "touchscreen as hand tool" option * "pen disables touchscreen" option; dialog box to designate touch device * tweaks to xinput event processing for touchscreens * generate cursors from pixbufs (fixes a Win32 bug) * work around Win32 bug: refuse paste if mismatched format * fix configure.in for automake-1.13 (Florian Bruhin, Andreas Huettel) * smoother icons for eraser and shapes buttons (by Colin Macdonald) * fix a cross-platform g_basename() issue (after Daniel German) * bugfix for file paths with non-English characters in Win32 * add some margin around lasso selection rectangle (after Niklas Beisert) * warn for fontconfig cache generation in Win32 * renamed "Journal" menu to "Page" * win32 portability code * fix bug in PDF export code on 64-bit systems * fix hand tool bug when exiting canvas * fix save bug with text boxes containing > 4095 characters * fix crash upon unplugging input devices * change close dialog box default to "save" * option to force PDF background rendering via cairo (slower but nicer) * wrapper for missing GdkPixbuf rendering function in newest poppler * disable GTK+ XInput bugfix by default * fix linker flags * evdev coordinate fix * fix 1.#J coordinates from win32 xoj files + Translations * Chinese (simplified) * Polish * Chinese (traditional) * Japanese * Italian * German * Spanish * Brazil Portuguese * Czech * Dutch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-317=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xournal-0.4.8-22.3.1 xournal-debuginfo-0.4.8-22.3.1 xournal-debugsource-0.4.8-22.3.1 References:

1 0

openSUSE-SU-2015:0732-1: important: Security update for xen
by opensuse-security＠opensuse.org 20 Apr '15

20 Apr '15

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0732-1 Rating: important References: #861318 #895528 #901488 #903680 #910254 #918995 #918998 #919098 #919464 #919663 #922705 #922706 Cross-References: CVE-2014-3615 CVE-2015-2044 CVE-2015-2045 CVE-2015-2151 CVE-2015-2152 CVE-2015-2752 CVE-2015-2756 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has 5 fixes is now available. Description: Xen was updated to 4.3.4 to fix multiple vulnerabities and non-security bugs. The following vulnerabilities were fixed: - Long latency MMIO mapping operations are not preemptible (XSA-125 CVE-2015-2752 bnc#922705) - Unmediated PCI command register access in qemu (XSA-126 CVE-2015-2756 bnc#922706) - Hypervisor memory corruption due to x86 emulator flaw (bnc#919464 CVE-2015-2151 XSA-123) - Information leak through version information hypercall (bnc#918998 CVE-2015-2045 XSA-122) - Information leak via internal x86 system device emulation (bnc#918995 (CVE-2015-2044 XSA-121) - HVM qemu unexpectedly enabling emulated VGA graphics backends (bnc#919663 CVE-2015-2152 XSA-119) - information leakage when guest sets high resolution (bnc#895528 CVE-2014-3615) The following non-security bugs were fixed: - L3: XEN blktap device intermittently fails to connect (bnc#919098) - Problems with detecting free loop devices on Xen guest startup (bnc#903680) - xentop reports "Found interface vif101.0 but domain 101 does not exist." (bnc#861318) - Intel ixgbe driver assigns rx/tx queues per core resulting in irq problems on servers with a large amount of CPU cores (bnc#901488) - SLES11 SP3 Xen VT-d igb NIC doesn't work (bnc#910254) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-314=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): xen-debugsource-4.3.4_02-41.1 xen-devel-4.3.4_02-41.1 xen-kmp-default-4.3.4_02_k3.11.10_29-41.1 xen-kmp-default-debuginfo-4.3.4_02_k3.11.10_29-41.1 xen-kmp-desktop-4.3.4_02_k3.11.10_29-41.1 xen-kmp-desktop-debuginfo-4.3.4_02_k3.11.10_29-41.1 xen-libs-4.3.4_02-41.1 xen-libs-debuginfo-4.3.4_02-41.1 xen-tools-domU-4.3.4_02-41.1 xen-tools-domU-debuginfo-4.3.4_02-41.1 - openSUSE 13.1 (x86_64): xen-4.3.4_02-41.1 xen-doc-html-4.3.4_02-41.1 xen-libs-32bit-4.3.4_02-41.1 xen-libs-debuginfo-32bit-4.3.4_02-41.1 xen-tools-4.3.4_02-41.1 xen-tools-debuginfo-4.3.4_02-41.1 xen-xend-tools-4.3.4_02-41.1 xen-xend-tools-debuginfo-4.3.4_02-41.1 - openSUSE 13.1 (i586): xen-kmp-pae-4.3.4_02_k3.11.10_29-41.1 xen-kmp-pae-debuginfo-4.3.4_02_k3.11.10_29-41.1 References: https://www.suse.com/security/cve/CVE-2014-3615.html https://www.suse.com/security/cve/CVE-2015-2044.html https://www.suse.com/security/cve/CVE-2015-2045.html https://www.suse.com/security/cve/CVE-2015-2151.html https://www.suse.com/security/cve/CVE-2015-2152.html https://www.suse.com/security/cve/CVE-2015-2752.html https://www.suse.com/security/cve/CVE-2015-2756.html https://bugzilla.suse.com/861318 https://bugzilla.suse.com/895528 https://bugzilla.suse.com/901488 https://bugzilla.suse.com/903680 https://bugzilla.suse.com/910254 https://bugzilla.suse.com/918995 https://bugzilla.suse.com/918998 https://bugzilla.suse.com/919098 https://bugzilla.suse.com/919464 https://bugzilla.suse.com/919663 https://bugzilla.suse.com/922705 https://bugzilla.suse.com/922706

1 0

openSUSE-RU-2015:0731-1: moderate: Recommended update for Apache2
by maintenance＠opensuse.org 20 Apr '15

20 Apr '15

openSUSE Recommended Update: Recommended update for Apache2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0731-1 Rating: moderate References: #866366 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for Apache2 fixes the following issue: - enable mod_imagemap (bnc#866366) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-311=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-2.4.10-19.1 apache2-debuginfo-2.4.10-19.1 apache2-debugsource-2.4.10-19.1 apache2-devel-2.4.10-19.1 apache2-event-2.4.10-19.1 apache2-event-debuginfo-2.4.10-19.1 apache2-example-pages-2.4.10-19.1 apache2-prefork-2.4.10-19.1 apache2-prefork-debuginfo-2.4.10-19.1 apache2-utils-2.4.10-19.1 apache2-utils-debuginfo-2.4.10-19.1 apache2-worker-2.4.10-19.1 apache2-worker-debuginfo-2.4.10-19.1 - openSUSE 13.2 (noarch): apache2-doc-2.4.10-19.1 References: https://bugzilla.suse.com/866366

1 0

openSUSE-RU-2015:0730-1: moderate: Recommended update for timezone
by maintenance＠opensuse.org 20 Apr '15

20 Apr '15

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0730-1 Rating: moderate References: #927029 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for timezone provides version 2015c with various adjustments (boo#927029): - correct Egypt 2015 DST transition from April 24 to April 30 - Changes affecting past time stamps and historic DST changes - time zones turned into links where this affects UTC offsets in pre-1970 time stamps only: America/Montreal Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-313=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-313=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): timezone-2015c-19.1 timezone-debuginfo-2015c-19.1 timezone-debugsource-2015c-19.1 - openSUSE 13.2 (noarch): timezone-java-2015c-19.1 - openSUSE 13.1 (i586 x86_64): timezone-2015c-23.1 timezone-debuginfo-2015c-23.1 timezone-debugsource-2015c-23.1 - openSUSE 13.1 (noarch): timezone-java-2015c-23.1 References: https://bugzilla.suse.com/927029

1 0

openSUSE-RU-2015:0729-1: moderate: Recommended update for lvm2
by maintenance＠opensuse.org 20 Apr '15

20 Apr '15

openSUSE Recommended Update: Recommended update for lvm2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0729-1 Rating: moderate References: #876192 #926405 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended udpate for lvm2 fixes the following issues: - fix lvmetad meta overflow if >=4g (32bit) when reading an info about MDAs (bsc#926405, bsc#876192) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-312=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-312=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): lvm2-2.02.98-43.24.1 lvm2-clvm-2.02.98-43.24.1 lvm2-clvm-debuginfo-2.02.98-43.24.1 lvm2-cmirrord-2.02.98-43.24.1 lvm2-cmirrord-debuginfo-2.02.98-43.24.1 lvm2-debuginfo-2.02.98-43.24.1 lvm2-debugsource-2.02.98-43.24.1 lvm2-devel-2.02.98-43.24.1 - openSUSE 13.1 (i586 x86_64): lvm2-2.02.98-0.28.37.1 lvm2-clvm-2.02.98-28.37.1 lvm2-clvm-debuginfo-2.02.98-28.37.1 lvm2-cmirrord-2.02.98-28.37.1 lvm2-cmirrord-debuginfo-2.02.98-28.37.1 lvm2-debuginfo-2.02.98-0.28.37.1 lvm2-debugsource-2.02.98-0.28.37.1 References: https://bugzilla.suse.com/876192 https://bugzilla.suse.com/926405

1 0