May 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2015:0969-1: moderate: Security update for Chromium
by opensuse-security＠opensuse.org 29 May '15

29 May '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0969-1 Rating: moderate References: #931659 #931660 #931661 #931663 #931664 #931665 #931666 #931667 #931668 #931669 #931670 #931671 #931672 #931673 #931674 Cross-References: CVE-2015-1251 CVE-2015-1252 CVE-2015-1253 CVE-2015-1254 CVE-2015-1255 CVE-2015-1256 CVE-2015-1257 CVE-2015-1258 CVE-2015-1259 CVE-2015-1260 CVE-2015-1261 CVE-2015-1262 CVE-2015-1263 CVE-2015-1264 CVE-2015-1265 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: Chromium was updated to 43.0.2357.65 to fix security issues and bugs. The following vulnerabilities were fixed: - CVE-2015-1251: Use-after-free in Speech (boo#931659) - CVE-2015-1252: Sandbox escape in Chrome (boo#931671) - CVE-2015-1253: Cross-origin bypass in DOM (boo#931670) - CVE-2015-1254: Cross-origin bypass in Editing (boo#931669) - CVE-2015-1255: Use-after-free in WebAudio (boo#931674) - CVE-2015-1256: Use-after-free in SVG (boo#931664) - CVE-2015-1257: Container-overflow in SVG (boo#931665) - CVE-2015-1258: Negative-size parameter in Libvpx (boo#931666) - CVE-2015-1259: Uninitialized value in PDFium (boo#931667) - CVE-2015-1260: Use-after-free in WebRTC (boo#931668) - CVE-2015-1261: URL bar spoofing (boo#931673) - CVE-2015-1262: Uninitialized value in Blink (boo#931672) - CVE-2015-1263: Insecure download of spellcheck dictionary (boo#931663) - CVE-2015-1264: Cross-site scripting in bookmarks (boo#931661) - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives (boo#931660) - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-390=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-390=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): chromedriver-43.0.2357.65-29.1 chromedriver-debuginfo-43.0.2357.65-29.1 chromium-43.0.2357.65-29.1 chromium-debuginfo-43.0.2357.65-29.1 chromium-debugsource-43.0.2357.65-29.1 chromium-desktop-gnome-43.0.2357.65-29.1 chromium-desktop-kde-43.0.2357.65-29.1 chromium-ffmpegsumo-43.0.2357.65-29.1 chromium-ffmpegsumo-debuginfo-43.0.2357.65-29.1 - openSUSE 13.1 (i586 x86_64): chromedriver-43.0.2357.65-84.1 chromedriver-debuginfo-43.0.2357.65-84.1 chromium-43.0.2357.65-84.1 chromium-debuginfo-43.0.2357.65-84.1 chromium-debugsource-43.0.2357.65-84.1 chromium-desktop-gnome-43.0.2357.65-84.1 chromium-desktop-kde-43.0.2357.65-84.1 chromium-ffmpegsumo-43.0.2357.65-84.1 chromium-ffmpegsumo-debuginfo-43.0.2357.65-84.1 References: https://www.suse.com/security/cve/CVE-2015-1251.html https://www.suse.com/security/cve/CVE-2015-1252.html https://www.suse.com/security/cve/CVE-2015-1253.html https://www.suse.com/security/cve/CVE-2015-1254.html https://www.suse.com/security/cve/CVE-2015-1255.html https://www.suse.com/security/cve/CVE-2015-1256.html https://www.suse.com/security/cve/CVE-2015-1257.html https://www.suse.com/security/cve/CVE-2015-1258.html https://www.suse.com/security/cve/CVE-2015-1259.html https://www.suse.com/security/cve/CVE-2015-1260.html https://www.suse.com/security/cve/CVE-2015-1261.html https://www.suse.com/security/cve/CVE-2015-1262.html https://www.suse.com/security/cve/CVE-2015-1263.html https://www.suse.com/security/cve/CVE-2015-1264.html https://www.suse.com/security/cve/CVE-2015-1265.html https://bugzilla.suse.com/931659 https://bugzilla.suse.com/931660 https://bugzilla.suse.com/931661 https://bugzilla.suse.com/931663 https://bugzilla.suse.com/931664 https://bugzilla.suse.com/931665 https://bugzilla.suse.com/931666 https://bugzilla.suse.com/931667 https://bugzilla.suse.com/931668 https://bugzilla.suse.com/931669 https://bugzilla.suse.com/931670 https://bugzilla.suse.com/931671 https://bugzilla.suse.com/931672 https://bugzilla.suse.com/931673 https://bugzilla.suse.com/931674

1 0

openSUSE-SU-2015:0968-1: moderate: Security update for GNU parallel
by opensuse-security＠opensuse.org 29 May '15

29 May '15

openSUSE Security Update: Security update for GNU parallel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0968-1 Rating: moderate References: #932143 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: GNU parallel was updated to 20150522 to complete a fix one security issue and augment a fix for another. The following vulnerabilities were fixed: * The security issue for --sshlogin + --fifo/--cat has been fixed. * After further security analysis the issue fixed in 20150422 also fixed the problem for --tmux. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-388=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-388=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): gnu_parallel-20150522-2.6.1 gnu_parallel-doc-20150522-2.6.1 - openSUSE 13.1 (noarch): gnu_parallel-20150522-2.6.1 gnu_parallel-doc-20150522-2.6.1 References: https://bugzilla.suse.com/932143

1 0

openSUSE-SU-2015:0967-1: moderate: Security update for mysql-connector-java
by opensuse-security＠opensuse.org 29 May '15

29 May '15

openSUSE Security Update: Security update for mysql-connector-java ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0967-1 Rating: moderate References: #927981 Cross-References: CVE-2015-2575 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: mysql-connector-java was updated to 5.1.35 to fix one security issue and a number of bugs. The following vulnerability was fixed: * CVE-2015-2575: Difficult to exploit vulnerability allows successful authenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some MySQL Connectors accessible data as well as read access to a subset of MySQL Connectors accessible data. In addition, mysql-connector-java was updated to 5.1.35 to fix a number of upstream bugs, details of which listed in CHANGES as well as http://dev.mysql.com/doc/relnotes/connector-j/en/news-5-1.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-389=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-389=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): mysql-connector-java-5.1.35-3.3.1 - openSUSE 13.1 (noarch): mysql-connector-java-5.1.35-3.1 References: https://www.suse.com/security/cve/CVE-2015-2575.html https://bugzilla.suse.com/927981

1 0

openSUSE-RU-2015:0959-1: moderate: Recommended Update for GNOME Stack
by maintenance＠opensuse.org 28 May '15

28 May '15

openSUSE Recommended Update: Recommended Update for GNOME Stack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0959-1 Rating: moderate References: #931501 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended updated provides the latest stable version of the GNOME Stack. For detailed description please refer to the change log. (boo#931501) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-385=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): gnome-contacts-3.10.2-3.1 gnome-contacts-debuginfo-3.10.2-3.1 gnome-contacts-debugsource-3.10.2-3.1 gnome-control-center-3.10.4-21.1 gnome-control-center-color-3.10.4-21.1 gnome-control-center-debuginfo-3.10.4-21.1 gnome-control-center-debugsource-3.10.4-21.1 gnome-control-center-devel-3.10.4-21.1 gnome-control-center-user-faces-3.10.4-21.1 gnome-documents-3.10.3-18.1 gnome-documents-debuginfo-3.10.3-18.1 gnome-documents-debugsource-3.10.3-18.1 gnome-shell-search-provider-contacts-3.10.2-3.1 gnome-shell-search-provider-contacts-debuginfo-3.10.2-3.1 gnome-shell-search-provider-documents-3.10.3-18.1 libtotem-plparser-mini18-3.10.5-13.1 libtotem-plparser-mini18-debuginfo-3.10.5-13.1 libtotem-plparser18-3.10.5-13.1 libtotem-plparser18-debuginfo-3.10.5-13.1 totem-pl-parser-3.10.5-13.1 totem-pl-parser-debuginfo-3.10.5-13.1 totem-pl-parser-debugsource-3.10.5-13.1 totem-pl-parser-devel-3.10.5-13.1 typelib-1_0-TotemPlParser-1_0-3.10.5-13.1 - openSUSE 13.1 (noarch): gnome-contacts-lang-3.10.2-3.1 gnome-control-center-lang-3.10.4-21.1 gnome-documents-lang-3.10.3-18.1 totem-pl-parser-lang-3.10.5-13.1 References: https://bugzilla.suse.com/931501

1 0

openSUSE-RU-2015:0958-1: moderate: Recommended update for texworks
by maintenance＠opensuse.org 28 May '15

28 May '15

openSUSE Recommended Update: Recommended update for texworks ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0958-1 Rating: moderate References: #930964 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for texworks provides version 0.4.6 with various bugfixes and improvements: !!! Please note, the manual was droped after it's no longer bundled by upstream, see http://www.tug.org/texworks/#Documentation instead!!! - Update to version 0.4.6 (boo#930964) + Implement character-level synchronization by using text searching to assist SyncTeX. + Lift hardwrap line length limitation and implement (hard) unwrap. + Always show console output tab while typesetting to show progress. + Improve the handling of UTF-8 byte order marks. + Improve the log parsing script. + Improve the handling of script errors. + Work around a race condition that causes lines to become invisible, subsequently leading to a crash. + Fix incorrectly accumulating indent. + Fix SyncTeX initialization with non-ASCII filenames. + Fix selection of whole lines and when selecting right-to-left. + Fix hangs and crashes when using "Fit to ..." in the PDF view. + Fix a crash when running an invalid system command from scripts. + Fix encoding issues when reading environment variables. + Fix scrolling when searching for multi-line strings. + Fix auto-completion when working with RTL languages. + Improve the handling of Retina displays in Mac OS X. + Fix a crash when opening PDF files from the Windows Explorer. + Provide texworks.appdata.xml for *nix platforms. + Fix compilation with Qt 5. + Improve the CMake build system. + Add support for Lua 5.2. + Move development from Google Code to GitHub. + Drop conditionals referring to out-of-support openSUSE releases. + Use CMake based build system. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-384=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-384=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): texworks-0.4.6-4.3.1 texworks-debuginfo-0.4.6-4.3.1 texworks-plugin-lua-0.4.6-4.3.1 texworks-plugin-lua-debuginfo-0.4.6-4.3.1 texworks-plugin-python-0.4.6-4.3.1 texworks-plugin-python-debuginfo-0.4.6-4.3.1 - openSUSE 13.1 (i586 x86_64): texworks-0.4.6-2.3.1 texworks-debuginfo-0.4.6-2.3.1 texworks-plugin-lua-0.4.6-2.3.1 texworks-plugin-lua-debuginfo-0.4.6-2.3.1 texworks-plugin-python-0.4.6-2.3.1 texworks-plugin-python-debuginfo-0.4.6-2.3.1 References: https://bugzilla.suse.com/930964

1 0

openSUSE-RU-2015:0957-1: moderate: Recommended Update for GNOME Stack
by maintenance＠opensuse.org 28 May '15

28 May '15

openSUSE Recommended Update: Recommended Update for GNOME Stack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0957-1 Rating: moderate References: #871792 #879607 #905667 #927357 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This recommended update provides various bugfixes, improvements and security-fixes from upstream (boo#927357). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-387=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): brasero-3.12.1-8.5 brasero-debuginfo-3.12.1-8.5 brasero-debugsource-3.12.1-8.5 brasero-devel-3.12.1-8.5 brasero-nautilus-3.12.1-8.5 brasero-nautilus-debuginfo-3.12.1-8.5 clutter-debugsource-1.20.2-7.4 clutter-devel-1.20.2-7.4 empathy-3.12.9-7.6 empathy-debuginfo-3.12.9-7.6 empathy-debugsource-3.12.9-7.6 gedit-code-assistance-debugsource-3.14.3-2.12.1 gedit-plugin-code-assistance-3.14.3-2.12.1 gedit-plugin-code-assistance-debuginfo-3.14.3-2.12.1 gnome-bluetooth-3.14.1-3.2 gnome-bluetooth-debuginfo-3.14.1-3.2 gnome-bluetooth-debugsource-3.14.1-3.2 gnome-bluetooth-devel-3.14.1-3.2 gnome-control-center-3.14.5-18.1 gnome-control-center-color-3.14.5-18.1 gnome-control-center-debuginfo-3.14.5-18.1 gnome-control-center-debugsource-3.14.5-18.1 gnome-control-center-devel-3.14.5-18.1 gnome-control-center-user-faces-3.14.5-18.1 gnome-documents-3.14.3-7.1 gnome-documents-debuginfo-3.14.3-7.1 gnome-documents-debugsource-3.14.3-7.1 gnome-online-accounts-3.14.4-11.1 gnome-online-accounts-debuginfo-3.14.4-11.1 gnome-online-accounts-debugsource-3.14.4-11.1 gnome-online-accounts-devel-3.14.4-11.1 gnome-online-miners-3.14.3-7.1 gnome-online-miners-debuginfo-3.14.3-7.1 gnome-online-miners-debugsource-3.14.3-7.1 gnome-photos-3.14.3-7.3 gnome-photos-debuginfo-3.14.3-7.3 gnome-photos-debugsource-3.14.3-7.3 gnome-settings-daemon-3.14.4-10.1 gnome-settings-daemon-debuginfo-3.14.4-10.1 gnome-settings-daemon-debugsource-3.14.4-10.1 gnome-settings-daemon-devel-3.14.4-10.1 gnome-shell-search-provider-documents-3.14.3-7.1 gnome-shell-search-provider-gnome-photos-3.14.3-7.3 gnonlin-debugsource-1.4.0-2.3.1 goobox-3.4.0-2.7.2 goobox-debuginfo-3.4.0-2.7.2 goobox-debugsource-3.4.0-2.7.2 gsettings-desktop-schemas-3.14.2-3.1 gsettings-desktop-schemas-devel-3.14.2-3.1 gsf-office-thumbnailer-1.14.33-2.7.1 gsf-office-thumbnailer-debuginfo-1.14.33-2.7.1 gstreamer-editing-services-1.4.0-2.3.1 gstreamer-editing-services-debuginfo-1.4.0-2.3.1 gstreamer-editing-services-debugsource-1.4.0-2.3.1 gstreamer-editing-services-devel-1.4.0-2.3.1 gstreamer-plugin-gnonlin-1.4.0-2.3.1 gstreamer-plugin-gnonlin-debuginfo-1.4.0-2.3.1 gstreamer-plugin-gnonlin-doc-1.4.0-2.3.1 gthumb-3.4.0-2.4.4 gthumb-debuginfo-3.4.0-2.4.4 gthumb-debugsource-3.4.0-2.4.4 gthumb-devel-3.4.0-2.4.4 gtk2-debugsource-2.24.28-4.11.2 gtk2-devel-2.24.28-4.11.2 gtk2-devel-debuginfo-2.24.28-4.11.2 gtk2-engine-clearlooks-2.20.2-18.11.2 gtk2-engine-clearlooks-debuginfo-2.20.2-18.11.2 gtk2-engine-crux-2.20.2-18.11.2 gtk2-engine-crux-debuginfo-2.20.2-18.11.2 gtk2-engine-glide-2.20.2-18.11.2 gtk2-engine-glide-debuginfo-2.20.2-18.11.2 gtk2-engine-hcengine-2.20.2-18.11.2 gtk2-engine-hcengine-debuginfo-2.20.2-18.11.2 gtk2-engine-industrial-2.20.2-18.11.2 gtk2-engine-industrial-debuginfo-2.20.2-18.11.2 gtk2-engine-mist-2.20.2-18.11.2 gtk2-engine-mist-debuginfo-2.20.2-18.11.2 gtk2-engine-redmond95-2.20.2-18.11.2 gtk2-engine-redmond95-debuginfo-2.20.2-18.11.2 gtk2-engine-thinice-2.20.2-18.11.2 gtk2-engine-thinice-debuginfo-2.20.2-18.11.2 gtk2-engines-2.20.2-18.11.2 gtk2-engines-debugsource-2.20.2-18.11.2 gtk2-engines-devel-2.20.2-18.11.2 gtk2-immodule-amharic-2.24.28-4.11.2 gtk2-immodule-amharic-debuginfo-2.24.28-4.11.2 gtk2-immodule-inuktitut-2.24.28-4.11.2 gtk2-immodule-inuktitut-debuginfo-2.24.28-4.11.2 gtk2-immodule-multipress-2.24.28-4.11.2 gtk2-immodule-multipress-debuginfo-2.24.28-4.11.2 gtk2-immodule-thai-2.24.28-4.11.2 gtk2-immodule-thai-debuginfo-2.24.28-4.11.2 gtk2-immodule-vietnamese-2.24.28-4.11.2 gtk2-immodule-vietnamese-debuginfo-2.24.28-4.11.2 gtk2-immodule-xim-2.24.28-4.11.2 gtk2-immodule-xim-debuginfo-2.24.28-4.11.2 gtk2-immodules-tigrigna-2.24.28-4.11.2 gtk2-immodules-tigrigna-debuginfo-2.24.28-4.11.2 gtk2-tools-2.24.28-4.11.2 gtk2-tools-debuginfo-2.24.28-4.11.2 gtk3-debugsource-3.14.13-18.1 gtk3-devel-3.14.13-18.1 gtk3-devel-debuginfo-3.14.13-18.1 gtk3-immodule-amharic-3.14.13-18.1 gtk3-immodule-amharic-debuginfo-3.14.13-18.1 gtk3-immodule-broadway-3.14.13-18.1 gtk3-immodule-broadway-debuginfo-3.14.13-18.1 gtk3-immodule-inuktitut-3.14.13-18.1 gtk3-immodule-inuktitut-debuginfo-3.14.13-18.1 gtk3-immodule-multipress-3.14.13-18.1 gtk3-immodule-multipress-debuginfo-3.14.13-18.1 gtk3-immodule-thai-3.14.13-18.1 gtk3-immodule-thai-debuginfo-3.14.13-18.1 gtk3-immodule-vietnamese-3.14.13-18.1 gtk3-immodule-vietnamese-debuginfo-3.14.13-18.1 gtk3-immodule-xim-3.14.13-18.1 gtk3-immodule-xim-debuginfo-3.14.13-18.1 gtk3-immodules-tigrigna-3.14.13-18.1 gtk3-immodules-tigrigna-debuginfo-3.14.13-18.1 gtk3-tools-3.14.13-18.1 gtk3-tools-debuginfo-3.14.13-18.1 libbrasero-burn3-1-3.12.1-8.5 libbrasero-burn3-1-debuginfo-3.12.1-8.5 libbrasero-media3-1-3.12.1-8.5 libbrasero-media3-1-debuginfo-3.12.1-8.5 libbrasero-utils3-1-3.12.1-8.5 libbrasero-utils3-1-debuginfo-3.12.1-8.5 libclutter-1_0-0-1.20.2-7.4 libclutter-1_0-0-debuginfo-1.20.2-7.4 libges-1_0-0-1.4.0-2.3.1 libges-1_0-0-debuginfo-1.4.0-2.3.1 libgnome-bluetooth13-3.14.1-3.2 libgnome-bluetooth13-debuginfo-3.14.1-3.2 libgoa-1_0-0-3.14.4-11.1 libgoa-1_0-0-debuginfo-3.14.4-11.1 libgoa-backend-1_0-1-3.14.4-11.1 libgoa-backend-1_0-1-debuginfo-3.14.4-11.1 libgsf-1-114-1.14.33-2.7.1 libgsf-1-114-debuginfo-1.14.33-2.7.1 libgsf-debugsource-1.14.33-2.7.1 libgsf-devel-1.14.33-2.7.1 libgsf-tools-1.14.33-2.7.1 libgsf-tools-debuginfo-1.14.33-2.7.1 libgtk-2_0-0-2.24.28-4.11.2 libgtk-2_0-0-debuginfo-2.24.28-4.11.2 libgtk-3-0-3.14.13-18.1 libgtk-3-0-debuginfo-3.14.13-18.1 libgweather-3-6-3.14.4-7.1 libgweather-3-6-debuginfo-3.14.4-7.1 libgweather-debugsource-3.14.4-7.1 libgweather-devel-3.14.4-7.1 libjavascriptcoregtk-1_0-0-2.4.8-7.2 libjavascriptcoregtk-1_0-0-debuginfo-2.4.8-7.2 libjavascriptcoregtk-3_0-0-2.4.8-7.2 libjavascriptcoregtk-3_0-0-debuginfo-2.4.8-7.2 libjavascriptcoregtk-4_0-18-2.6.6-7.2 libjavascriptcoregtk-4_0-18-debuginfo-2.6.6-7.2 librygel-core-2_4-2-0.24.4-7.1 librygel-core-2_4-2-debuginfo-0.24.4-7.1 librygel-renderer-2_4-2-0.24.4-7.1 librygel-renderer-2_4-2-debuginfo-0.24.4-7.1 librygel-renderer-gst-2_4-2-0.24.4-7.1 librygel-renderer-gst-2_4-2-debuginfo-0.24.4-7.1 librygel-server-2_4-2-0.24.4-7.1 librygel-server-2_4-2-debuginfo-0.24.4-7.1 libwebkit2gtk-4_0-37-2.6.6-7.2 libwebkit2gtk-4_0-37-debuginfo-2.6.6-7.2 libwebkitgtk-1_0-0-2.4.8-7.2 libwebkitgtk-1_0-0-debuginfo-2.4.8-7.2 libwebkitgtk-3_0-0-2.4.8-7.2 libwebkitgtk-3_0-0-debuginfo-2.4.8-7.2 libwebkitgtk-devel-2.4.8-7.2 libwebkitgtk3-devel-2.4.8-7.2 libyelp0-3.14.2-3.1 libyelp0-debuginfo-3.14.2-3.1 nautilus-totem-3.14.3-11.2 nautilus-totem-debuginfo-3.14.3-11.2 pitivi-0.94-2.3.1 pitivi-debuginfo-0.94-2.3.1 pitivi-debugsource-0.94-2.3.1 rygel-0.24.4-7.1 rygel-debuginfo-0.24.4-7.1 rygel-debugsource-0.24.4-7.1 rygel-devel-0.24.4-7.1 rygel-plugin-gstreamer-renderer-0.24.4-7.1 rygel-plugin-gstreamer-renderer-debuginfo-0.24.4-7.1 rygel-plugin-tracker-0.24.4-7.1 rygel-plugin-tracker-debuginfo-0.24.4-7.1 rygel-plugin-zdf-mediathek-0.24.4-7.1 rygel-plugin-zdf-mediathek-debuginfo-0.24.4-7.1 telepathy-mission-control-plugin-goa-3.12.9-7.6 telepathy-mission-control-plugin-goa-debuginfo-3.12.9-7.6 totem-3.14.3-11.2 totem-debuginfo-3.14.3-11.2 totem-debugsource-3.14.3-11.2 totem-devel-3.14.3-11.2 totem-plugin-zeitgeist-3.14.3-11.2 totem-plugin-zeitgeist-debuginfo-3.14.3-11.2 totem-plugins-3.14.3-11.2 totem-plugins-debuginfo-3.14.3-11.2 typelib-1_0-BraseroBurn-3_2_0-3.12.1-8.5 typelib-1_0-BraseroMedia-3_2_0-3.12.1-8.5 typelib-1_0-Clutter-1_0-1.20.2-7.4 typelib-1_0-GES-1_0-1.4.0-2.3.1 typelib-1_0-GWeather-3_0-3.14.4-7.1 typelib-1_0-GnomeBluetooth-1_0-3.14.1-3.2 typelib-1_0-Goa-1_0-3.14.4-11.1 typelib-1_0-Gsf-1-1.14.33-2.7.1 typelib-1_0-Gtk-2_0-2.24.28-4.11.2 typelib-1_0-Gtk-3_0-3.14.13-18.1 typelib-1_0-JavaScriptCore-1_0-2.4.8-7.2 typelib-1_0-JavaScriptCore-3_0-2.4.8-7.2 typelib-1_0-JavaScriptCore-4_0-2.6.6-7.2 typelib-1_0-RygelCore-2_4-0.24.4-7.1 typelib-1_0-RygelRenderer-2_4-0.24.4-7.1 typelib-1_0-RygelServer-2_4-0.24.4-7.1 typelib-1_0-WebKit-1_0-2.4.8-7.2 typelib-1_0-WebKit-3_0-2.4.8-7.2 typelib-1_0-WebKit2-4_0-2.6.6-7.2 typelib-1_0-WebKit2WebExtension-4_0-2.6.6-7.2 webkit-jsc-1-2.4.8-7.2 webkit-jsc-1-debuginfo-2.4.8-7.2 webkit-jsc-3-2.4.8-7.2 webkit-jsc-3-debuginfo-2.4.8-7.2 webkit-jsc-4-2.6.6-7.2 webkit-jsc-4-debuginfo-2.6.6-7.2 webkit2gtk-4_0-injected-bundles-2.6.6-7.2 webkit2gtk-4_0-injected-bundles-debuginfo-2.6.6-7.2 webkit2gtk3-debugsource-2.6.6-7.2 webkit2gtk3-devel-2.6.6-7.2 yelp-3.14.2-3.1 yelp-debuginfo-3.14.2-3.1 yelp-debugsource-3.14.2-3.1 yelp-devel-3.14.2-3.1 - openSUSE 13.2 (x86_64): gstreamer-plugin-gnonlin-32bit-1.4.0-2.3.1 gstreamer-plugin-gnonlin-debuginfo-32bit-1.4.0-2.3.1 gtk2-devel-32bit-2.24.28-4.11.2 gtk2-devel-debuginfo-32bit-2.24.28-4.11.2 gtk2-engine-clearlooks-32bit-2.20.2-18.11.2 gtk2-engine-clearlooks-debuginfo-32bit-2.20.2-18.11.2 gtk2-engine-crux-32bit-2.20.2-18.11.2 gtk2-engine-crux-debuginfo-32bit-2.20.2-18.11.2 gtk2-engine-glide-32bit-2.20.2-18.11.2 gtk2-engine-glide-debuginfo-32bit-2.20.2-18.11.2 gtk2-engine-industrial-32bit-2.20.2-18.11.2 gtk2-engine-industrial-debuginfo-32bit-2.20.2-18.11.2 gtk2-engine-mist-32bit-2.20.2-18.11.2 gtk2-engine-mist-debuginfo-32bit-2.20.2-18.11.2 gtk2-engine-redmond95-32bit-2.20.2-18.11.2 gtk2-engine-redmond95-debuginfo-32bit-2.20.2-18.11.2 gtk2-engine-thinice-32bit-2.20.2-18.11.2 gtk2-engine-thinice-debuginfo-32bit-2.20.2-18.11.2 gtk2-immodule-amharic-32bit-2.24.28-4.11.2 gtk2-immodule-amharic-debuginfo-32bit-2.24.28-4.11.2 gtk2-immodule-inuktitut-32bit-2.24.28-4.11.2 gtk2-immodule-inuktitut-debuginfo-32bit-2.24.28-4.11.2 gtk2-immodule-multipress-32bit-2.24.28-4.11.2 gtk2-immodule-multipress-debuginfo-32bit-2.24.28-4.11.2 gtk2-immodule-thai-32bit-2.24.28-4.11.2 gtk2-immodule-thai-debuginfo-32bit-2.24.28-4.11.2 gtk2-immodule-vietnamese-32bit-2.24.28-4.11.2 gtk2-immodule-vietnamese-debuginfo-32bit-2.24.28-4.11.2 gtk2-immodule-xim-32bit-2.24.28-4.11.2 gtk2-immodule-xim-debuginfo-32bit-2.24.28-4.11.2 gtk2-immodules-tigrigna-32bit-2.24.28-4.11.2 gtk2-immodules-tigrigna-debuginfo-32bit-2.24.28-4.11.2 gtk2-tools-32bit-2.24.28-4.11.2 gtk2-tools-debuginfo-32bit-2.24.28-4.11.2 gtk3-devel-32bit-3.14.13-18.1 gtk3-devel-debuginfo-32bit-3.14.13-18.1 gtk3-immodule-amharic-32bit-3.14.13-18.1 gtk3-immodule-amharic-debuginfo-32bit-3.14.13-18.1 gtk3-immodule-inuktitut-32bit-3.14.13-18.1 gtk3-immodule-inuktitut-debuginfo-32bit-3.14.13-18.1 gtk3-immodule-multipress-32bit-3.14.13-18.1 gtk3-immodule-multipress-debuginfo-32bit-3.14.13-18.1 gtk3-immodule-thai-32bit-3.14.13-18.1 gtk3-immodule-thai-debuginfo-32bit-3.14.13-18.1 gtk3-immodule-vietnamese-32bit-3.14.13-18.1 gtk3-immodule-vietnamese-debuginfo-32bit-3.14.13-18.1 gtk3-immodule-xim-32bit-3.14.13-18.1 gtk3-immodule-xim-debuginfo-32bit-3.14.13-18.1 gtk3-immodules-tigrigna-32bit-3.14.13-18.1 gtk3-immodules-tigrigna-debuginfo-32bit-3.14.13-18.1 gtk3-tools-32bit-3.14.13-18.1 gtk3-tools-debuginfo-32bit-3.14.13-18.1 libclutter-1_0-0-32bit-1.20.2-7.4 libclutter-1_0-0-debuginfo-32bit-1.20.2-7.4 libgoa-1_0-0-32bit-3.14.4-11.1 libgoa-1_0-0-debuginfo-32bit-3.14.4-11.1 libgoa-backend-1_0-1-32bit-3.14.4-11.1 libgoa-backend-1_0-1-debuginfo-32bit-3.14.4-11.1 libgsf-1-114-32bit-1.14.33-2.7.1 libgsf-1-114-debuginfo-32bit-1.14.33-2.7.1 libgtk-2_0-0-32bit-2.24.28-4.11.2 libgtk-2_0-0-debuginfo-32bit-2.24.28-4.11.2 libgtk-3-0-32bit-3.14.13-18.1 libgtk-3-0-debuginfo-32bit-3.14.13-18.1 libgweather-3-6-32bit-3.14.4-7.1 libgweather-3-6-debuginfo-32bit-3.14.4-7.1 libjavascriptcoregtk-1_0-0-32bit-2.4.8-7.2 libjavascriptcoregtk-1_0-0-debuginfo-32bit-2.4.8-7.2 libjavascriptcoregtk-3_0-0-32bit-2.4.8-7.2 libjavascriptcoregtk-3_0-0-debuginfo-32bit-2.4.8-7.2 libjavascriptcoregtk-4_0-18-32bit-2.6.6-7.2 libjavascriptcoregtk-4_0-18-debuginfo-32bit-2.6.6-7.2 libwebkit2gtk-4_0-37-32bit-2.6.6-7.2 libwebkit2gtk-4_0-37-debuginfo-32bit-2.6.6-7.2 libwebkitgtk-1_0-0-32bit-2.4.8-7.2 libwebkitgtk-1_0-0-debuginfo-32bit-2.4.8-7.2 libwebkitgtk-3_0-0-32bit-2.4.8-7.2 libwebkitgtk-3_0-0-debuginfo-32bit-2.4.8-7.2 - openSUSE 13.2 (noarch): brasero-lang-3.12.1-8.5 clutter-lang-1.20.2-7.4 empathy-lang-3.12.9-7.6 gnome-bluetooth-lang-3.14.1-3.2 gnome-control-center-lang-3.14.5-18.1 gnome-documents-lang-3.14.3-7.1 gnome-online-accounts-lang-3.14.4-11.1 gnome-photos-lang-3.14.3-7.3 gnome-settings-daemon-lang-3.14.4-10.1 goobox-lang-3.4.0-2.7.2 gsettings-desktop-schemas-lang-3.14.2-3.1 gthumb-lang-3.4.0-2.4.4 gtk2-branding-SLED-13.2-11.3 gtk2-branding-openSUSE-13.2-11.3 gtk2-branding-upstream-2.24.28-4.11.2 gtk2-data-2.24.28-4.11.2 gtk2-lang-2.24.28-4.11.2 gtk2-theme-clearlooks-2.20.2-18.11.2 gtk2-theme-crux-2.20.2-18.11.2 gtk2-theme-industrial-2.20.2-18.11.2 gtk2-theme-mist-2.20.2-18.11.2 gtk2-theme-redmond95-2.20.2-18.11.2 gtk2-theme-thinice-2.20.2-18.11.2 gtk3-branding-SLED-13.2-17.3 gtk3-branding-openSUSE-13.2-17.3 gtk3-branding-upstream-3.14.13-18.1 gtk3-data-3.14.13-18.1 gtk3-lang-3.14.13-18.1 libgsf-lang-1.14.33-2.7.1 libgweather-data-3.14.4-7.1 libgweather-lang-3.14.4-7.1 libwebkit2gtk3-lang-2.6.6-7.2 libwebkitgtk2-lang-2.4.8-7.2 libwebkitgtk3-lang-2.4.8-7.2 pitivi-lang-0.94-2.3.1 rygel-lang-0.24.4-7.1 totem-lang-3.14.3-11.2 yelp-lang-3.14.2-3.1 References: https://www.suse.com/security/cve/CVE-2014-1344.html https://www.suse.com/security/cve/CVE-2014-1384.html https://www.suse.com/security/cve/CVE-2014-1385.html https://www.suse.com/security/cve/CVE-2014-1386.html https://www.suse.com/security/cve/CVE-2014-1387.html https://www.suse.com/security/cve/CVE-2014-1388.html https://www.suse.com/security/cve/CVE-2014-1389.html https://www.suse.com/security/cve/CVE-2014-1390.html https://bugzilla.suse.com/871792 https://bugzilla.suse.com/879607 https://bugzilla.suse.com/905667 https://bugzilla.suse.com/927357

1 0

openSUSE-RU-2015:0956-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 28 May '15

28 May '15

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0956-1 Rating: moderate References: #925663 #931461 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update fixes the following issues: - Fix issue with smap on Haswell or Broadwell (boo#931461) - Provide host-kmp src for use with custom kernels (bnc#925663) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-386=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): python-virtualbox-4.2.28-2.31.1 python-virtualbox-debuginfo-4.2.28-2.31.1 virtualbox-4.2.28-2.31.1 virtualbox-debuginfo-4.2.28-2.31.1 virtualbox-debugsource-4.2.28-2.31.1 virtualbox-devel-4.2.28-2.31.1 virtualbox-guest-kmp-default-4.2.28_k3.11.10_29-2.31.1 virtualbox-guest-kmp-default-debuginfo-4.2.28_k3.11.10_29-2.31.1 virtualbox-guest-kmp-desktop-4.2.28_k3.11.10_29-2.31.1 virtualbox-guest-kmp-desktop-debuginfo-4.2.28_k3.11.10_29-2.31.1 virtualbox-guest-tools-4.2.28-2.31.1 virtualbox-guest-tools-debuginfo-4.2.28-2.31.1 virtualbox-guest-x11-4.2.28-2.31.1 virtualbox-guest-x11-debuginfo-4.2.28-2.31.1 virtualbox-host-kmp-default-4.2.28_k3.11.10_29-2.31.1 virtualbox-host-kmp-default-debuginfo-4.2.28_k3.11.10_29-2.31.1 virtualbox-host-kmp-desktop-4.2.28_k3.11.10_29-2.31.1 virtualbox-host-kmp-desktop-debuginfo-4.2.28_k3.11.10_29-2.31.1 virtualbox-qt-4.2.28-2.31.1 virtualbox-qt-debuginfo-4.2.28-2.31.1 virtualbox-websrv-4.2.28-2.31.1 virtualbox-websrv-debuginfo-4.2.28-2.31.1 - openSUSE 13.1 (noarch): virtualbox-host-source-4.2.28-2.31.1 - openSUSE 13.1 (i586): virtualbox-guest-kmp-pae-4.2.28_k3.11.10_29-2.31.1 virtualbox-guest-kmp-pae-debuginfo-4.2.28_k3.11.10_29-2.31.1 virtualbox-host-kmp-pae-4.2.28_k3.11.10_29-2.31.1 virtualbox-host-kmp-pae-debuginfo-4.2.28_k3.11.10_29-2.31.1 References: https://bugzilla.suse.com/925663 https://bugzilla.suse.com/931461

1 0

openSUSE-SU-2015:0955-1: moderate: Security update for glibc, glibc-testsuite, glibc-utils, glibc.i686
by opensuse-security＠opensuse.org 27 May '15

27 May '15

openSUSE Security Update: Security update for glibc, glibc-testsuite, glibc-utils, glibc.i686 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0955-1 Rating: moderate References: #917539 #918187 #920338 #927080 Cross-References: CVE-2014-8121 CVE-2015-1781 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: glibc was updated to fix security issues and bugs: - Separate internal state between getXXent and getXXbyYY NSS calls (CVE-2014-8121, bsc#918187, BZ #18007) - Fix read past end of pattern in fnmatch (bsc#920338, BZ #17062, BZ #18032, BZ #18036) - Fix buffer overflow in nss_dns (CVE-2015-1781, bsc#927080, BZ #18287) Also this bug got fixed: - Simplify handling of nameserver configuration in resolver (bsc#917539) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-383=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-383=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): glibc-2.19-16.12.1 glibc-debuginfo-2.19-16.12.1 glibc-debugsource-2.19-16.12.1 glibc-devel-2.19-16.12.1 glibc-devel-debuginfo-2.19-16.12.1 glibc-devel-static-2.19-16.12.1 glibc-extra-2.19-16.12.1 glibc-extra-debuginfo-2.19-16.12.1 glibc-locale-2.19-16.12.1 glibc-locale-debuginfo-2.19-16.12.1 glibc-profile-2.19-16.12.1 glibc-utils-2.19-16.12.1 glibc-utils-debuginfo-2.19-16.12.1 glibc-utils-debugsource-2.19-16.12.1 nscd-2.19-16.12.1 nscd-debuginfo-2.19-16.12.1 - openSUSE 13.2 (x86_64): glibc-32bit-2.19-16.12.2 glibc-debuginfo-32bit-2.19-16.12.2 glibc-devel-32bit-2.19-16.12.2 glibc-devel-debuginfo-32bit-2.19-16.12.2 glibc-devel-static-32bit-2.19-16.12.2 glibc-locale-32bit-2.19-16.12.2 glibc-locale-debuginfo-32bit-2.19-16.12.2 glibc-profile-32bit-2.19-16.12.2 glibc-utils-32bit-2.19-16.12.1 glibc-utils-debuginfo-32bit-2.19-16.12.1 - openSUSE 13.2 (noarch): glibc-html-2.19-16.12.1 glibc-i18ndata-2.19-16.12.1 glibc-info-2.19-16.12.1 - openSUSE 13.2 (i686): glibc-2.19-16.12.2 glibc-debuginfo-2.19-16.12.2 glibc-debugsource-2.19-16.12.2 glibc-devel-2.19-16.12.2 glibc-devel-debuginfo-2.19-16.12.2 glibc-devel-static-2.19-16.12.2 glibc-locale-2.19-16.12.2 glibc-locale-debuginfo-2.19-16.12.2 glibc-profile-2.19-16.12.2 - openSUSE 13.2 (i586): glibc-obsolete-2.19-16.12.1 glibc-obsolete-debuginfo-2.19-16.12.1 - openSUSE 13.1 (i586 x86_64): glibc-2.18-4.32.1 glibc-debuginfo-2.18-4.32.1 glibc-debugsource-2.18-4.32.1 glibc-devel-2.18-4.32.1 glibc-devel-debuginfo-2.18-4.32.1 glibc-devel-static-2.18-4.32.1 glibc-extra-2.18-4.32.1 glibc-extra-debuginfo-2.18-4.32.1 glibc-locale-2.18-4.32.1 glibc-locale-debuginfo-2.18-4.32.1 glibc-profile-2.18-4.32.1 glibc-utils-2.18-4.32.2 glibc-utils-debuginfo-2.18-4.32.2 glibc-utils-debugsource-2.18-4.32.2 nscd-2.18-4.32.1 nscd-debuginfo-2.18-4.32.1 - openSUSE 13.1 (x86_64): glibc-32bit-2.18-4.32.2 glibc-debuginfo-32bit-2.18-4.32.2 glibc-devel-32bit-2.18-4.32.2 glibc-devel-debuginfo-32bit-2.18-4.32.2 glibc-devel-static-32bit-2.18-4.32.2 glibc-locale-32bit-2.18-4.32.2 glibc-locale-debuginfo-32bit-2.18-4.32.2 glibc-profile-32bit-2.18-4.32.2 glibc-utils-32bit-2.18-4.32.2 glibc-utils-debuginfo-32bit-2.18-4.32.2 - openSUSE 13.1 (noarch): glibc-html-2.18-4.32.1 glibc-i18ndata-2.18-4.32.1 glibc-i18ndata-2.18-4.32.2 glibc-info-2.18-4.32.1 glibc-info-2.18-4.32.2 - openSUSE 13.1 (i686): glibc-2.18-4.32.2 glibc-debuginfo-2.18-4.32.2 glibc-debugsource-2.18-4.32.2 glibc-devel-2.18-4.32.2 glibc-devel-debuginfo-2.18-4.32.2 glibc-devel-static-2.18-4.32.2 glibc-extra-2.18-4.32.2 glibc-extra-debuginfo-2.18-4.32.2 glibc-locale-2.18-4.32.2 glibc-locale-debuginfo-2.18-4.32.2 glibc-obsolete-2.18-4.32.2 glibc-obsolete-debuginfo-2.18-4.32.2 glibc-profile-2.18-4.32.2 nscd-2.18-4.32.2 nscd-debuginfo-2.18-4.32.2 - openSUSE 13.1 (i586): glibc-obsolete-2.18-4.32.1 glibc-obsolete-debuginfo-2.18-4.32.1 References: https://www.suse.com/security/cve/CVE-2014-8121.html https://www.suse.com/security/cve/CVE-2015-1781.html https://bugzilla.suse.com/917539 https://bugzilla.suse.com/918187 https://bugzilla.suse.com/920338 https://bugzilla.suse.com/927080

1 0

openSUSE-RU-2015:0949-1: moderate: Recommended update for gnome-online-accounts
by maintenance＠opensuse.org 27 May '15

27 May '15

openSUSE Recommended Update: Recommended update for gnome-online-accounts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0949-1 Rating: moderate References: #931476 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides the latest stable version 3.10.7 with various bugfixes and improvements for gnome-online-accounts: - Update from 3.10.5 to 3.10.7 + Facebook is disabled by default, Facebook has dropped support for XMPP in version 2.0 of the Graph API (bgo#745004). + telepathy: "use this account for external calls" checkbox is not working (bgo#744165 + Add some spacing between the service name and its switch (bgo#746540) + A round of leak fixes (bgo#739590) + A pile of kerberos changes (bgo#739593) + ewsclient: httpclient: Crashes and deadlocks when destroying SoupSession (bgo#743044) + Updated translations. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-382=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): gnome-online-accounts-3.10.7-17.1 gnome-online-accounts-debuginfo-3.10.7-17.1 gnome-online-accounts-debugsource-3.10.7-17.1 gnome-online-accounts-devel-3.10.7-17.1 libgoa-1_0-0-3.10.7-17.1 libgoa-1_0-0-debuginfo-3.10.7-17.1 libgoa-backend-1_0-1-3.10.7-17.1 libgoa-backend-1_0-1-debuginfo-3.10.7-17.1 typelib-1_0-Goa-1_0-3.10.7-17.1 - openSUSE 13.1 (x86_64): libgoa-1_0-0-32bit-3.10.7-17.1 libgoa-1_0-0-debuginfo-32bit-3.10.7-17.1 libgoa-backend-1_0-1-32bit-3.10.7-17.1 libgoa-backend-1_0-1-debuginfo-32bit-3.10.7-17.1 - openSUSE 13.1 (noarch): gnome-online-accounts-lang-3.10.7-17.1 References: https://bugzilla.suse.com/931476

1 0

openSUSE-OU-2015:0948-1: moderate: openssl 1.0.1: fix certifcate path
by maintenance＠opensuse.org 26 May '15

26 May '15

openSUSE Optional Update: openssl 1.0.1: fix certifcate path ______________________________________________________________________________ Announcement ID: openSUSE-OU-2015:0948-1 Rating: moderate References: Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: The openssl update to 1.0.1 was using the wrong CA trust store path. This update makes openssl use /etc/ssl/certs again as the previous version. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-16=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): libopenssl-devel-1.0.1k-65.1 libopenssl1_0_0-1.0.1k-65.1 libopenssl1_0_0-debuginfo-1.0.1k-65.1 openssl-1.0.1k-65.1 openssl-debuginfo-1.0.1k-65.1 openssl-debugsource-1.0.1k-65.1 - openSUSE Evergreen 11.4 (x86_64): libopenssl-devel-32bit-1.0.1k-65.1 libopenssl1_0_0-32bit-1.0.1k-65.1 libopenssl1_0_0-debuginfo-32bit-1.0.1k-65.1 - openSUSE Evergreen 11.4 (noarch): openssl-doc-1.0.1k-65.1 - openSUSE Evergreen 11.4 (ia64): libopenssl1_0_0-debuginfo-x86-1.0.1k-65.1 libopenssl1_0_0-x86-1.0.1k-65.1 References:

1 0

openSUSE-SU-2015:0937-1: moderate: Security update for Wireshark
by opensuse-security＠opensuse.org 24 May '15

24 May '15

openSUSE Security Update: Security update for Wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0937-1 Rating: moderate References: #930691 Cross-References: CVE-2015-3811 CVE-2015-3812 CVE-2015-3814 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: Wireshark was updated to 1.10.14 to fix three security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-3811: The WCP dissector could crash while decompressing data (wnpa-sec-2015-14) * CVE-2015-3812: The X11 dissector could leak memory (wnpa-sec-2015-15) * CVE-2015-3814: The IEEE 802.11 dissector could go into an infinite loop (wnpa-sec-2015-17) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-380=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): wireshark-1.10.14-39.1 wireshark-debuginfo-1.10.14-39.1 wireshark-debugsource-1.10.14-39.1 wireshark-devel-1.10.14-39.1 References: https://www.suse.com/security/cve/CVE-2015-3811.html https://www.suse.com/security/cve/CVE-2015-3812.html https://www.suse.com/security/cve/CVE-2015-3814.html https://bugzilla.suse.com/930691

1 0

openSUSE-SU-2015:0936-1: moderate: Security update for Wireshark
by opensuse-security＠opensuse.org 24 May '15

24 May '15

openSUSE Security Update: Security update for Wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0936-1 Rating: moderate References: #930689 Cross-References: CVE-2015-3808 CVE-2015-3809 CVE-2015-3810 CVE-2015-3811 CVE-2015-3812 CVE-2015-3813 CVE-2015-3814 CVE-2015-3815 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: Wireshark was updated to 1.12.5 to fix security issues and bugs. The following vulnerabilities have been fixed: * CVE-2015-3808, CVE-2015-3809: The LBMR dissector could go into an infinite loop. (wnpa-sec-2015-12) * CVE-2015-3810: The WebSocket dissector could recurse excessively. (wnpa-sec-2015-13) * CVE-2015-3811: The WCP dissector could crash while decompressing data. (wnpa-sec-2015-14) * CVE-2015-3812: The X11 dissector could leak memory. (wnpa-sec-2015-15) * CVE-2015-3813: The packet reassembly code could leak memory. (wnpa-sec-2015-16) * CVE-2015-3814: The IEEE 802.11 dissector could go into an infinite loop. (wnpa-sec-2015-17) * CVE-2015-3815: The Android Logcat file parser could crash. (wnpa-sec-2015-18) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-379=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): wireshark-1.12.5-15.1 wireshark-debuginfo-1.12.5-15.1 wireshark-debugsource-1.12.5-15.1 wireshark-devel-1.12.5-15.1 wireshark-ui-gtk-1.12.5-15.1 wireshark-ui-gtk-debuginfo-1.12.5-15.1 wireshark-ui-qt-1.12.5-15.1 wireshark-ui-qt-debuginfo-1.12.5-15.1 References: https://www.suse.com/security/cve/CVE-2015-3808.html https://www.suse.com/security/cve/CVE-2015-3809.html https://www.suse.com/security/cve/CVE-2015-3810.html https://www.suse.com/security/cve/CVE-2015-3811.html https://www.suse.com/security/cve/CVE-2015-3812.html https://www.suse.com/security/cve/CVE-2015-3813.html https://www.suse.com/security/cve/CVE-2015-3814.html https://www.suse.com/security/cve/CVE-2015-3815.html https://bugzilla.suse.com/930689

1 0

openSUSE-SU-2015:0935-1: moderate: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 24 May '15

24 May '15

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0935-1 Rating: moderate References: #930622 Cross-References: CVE-2011-3079 CVE-2015-0797 CVE-2015-2708 CVE-2015-2710 CVE-2015-2713 CVE-2015-2716 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: The Mozilla Thunderbird email, news, and chat client was updated to version 31.7.0 to fix several security issues. The following vulnerabilities were fixed (bnc#930622): * MFSA 2015-46/CVE-2015-2708 Miscellaneous memory safety hazards * MFSA 2015-47/CVE-2015-0797 (bmo#1080995) Buffer overflow parsing H.264 video with Linux Gstreamer * MFSA 2015-48/CVE-2015-2710 (bmo#1149542) Buffer overflow with SVG content and CSS * MFSA 2015-51/CVE-2015-2713 (bmo#1153478) Use-after-free during text processing with vertical text enabled * MFSA 2015-54/CVE-2015-2716 (bmo#1140537) Buffer overflow when parsing compressed XML * MFSA 2015-57/CVE-2011-3079 (bmo#1087565) Privilege escalation through IPC channel messages Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-374=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-374=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): MozillaThunderbird-31.7.0-18.1 MozillaThunderbird-buildsymbols-31.7.0-18.1 MozillaThunderbird-debuginfo-31.7.0-18.1 MozillaThunderbird-debugsource-31.7.0-18.1 MozillaThunderbird-devel-31.7.0-18.1 MozillaThunderbird-translations-common-31.7.0-18.1 MozillaThunderbird-translations-other-31.7.0-18.1 - openSUSE 13.1 (i586 x86_64): MozillaThunderbird-31.7.0-70.53.1 MozillaThunderbird-buildsymbols-31.7.0-70.53.1 MozillaThunderbird-debuginfo-31.7.0-70.53.1 MozillaThunderbird-debugsource-31.7.0-70.53.1 MozillaThunderbird-devel-31.7.0-70.53.1 MozillaThunderbird-translations-common-31.7.0-70.53.1 MozillaThunderbird-translations-other-31.7.0-70.53.1 References: https://www.suse.com/security/cve/CVE-2011-3079.html https://www.suse.com/security/cve/CVE-2015-0797.html https://www.suse.com/security/cve/CVE-2015-2708.html https://www.suse.com/security/cve/CVE-2015-2710.html https://www.suse.com/security/cve/CVE-2015-2713.html https://www.suse.com/security/cve/CVE-2015-2716.html https://bugzilla.suse.com/930622

1 0

openSUSE-SU-2015:0934-1: moderate: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 24 May '15

24 May '15

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0934-1 Rating: moderate References: #930622 Cross-References: CVE-2011-3079 CVE-2015-2708 CVE-2015-2709 CVE-2015-2710 CVE-2015-2711 CVE-2015-2712 CVE-2015-2713 CVE-2015-2715 CVE-2015-2716 CVE-2015-2717 CVE-2015-2718 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: The Mozilla Firefox web browser was updated to version 38.0.1 to fix several security and non-security issues. This update also includes a Mozilla Network Security Services (NSS) update to version 3.18.1. The following vulnerabilities and issues were fixed: Changes in Mozilla Firefox: - update to Firefox 38.0.1 stability and regression fixes * Systems with first generation NVidia Optimus graphics cards may crash on start-up * Users who import cookies from Google Chrome can end up with broken websites * Large animated images may fail to play and may stop other images from loading - update to Firefox 38.0 (bnc#930622) * New tab-based preferences * Ruby annotation support * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/ security fixes: * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709 Miscellaneous memory safety hazards * MFSA 2015-47/VE-2015-0797 (bmo#1080995) Buffer overflow parsing H.264 video with Linux Gstreamer * MFSA 2015-48/CVE-2015-2710 (bmo#1149542) Buffer overflow with SVG content and CSS * MFSA 2015-49/CVE-2015-2711 (bmo#1113431) Referrer policy ignored when links opened by middle-click and context menu * MFSA 2015-50/CVE-2015-2712 (bmo#1152280) Out-of-bounds read and write in asm.js validation * MFSA 2015-51/CVE-2015-2713 (bmo#1153478) Use-after-free during text processing with vertical text enabled * MFSA 2015-53/CVE-2015-2715 (bmo#988698) Use-after-free due to Media Decoder Thread creation during shutdown * MFSA 2015-54/CVE-2015-2716 (bmo#1140537) Buffer overflow when parsing compressed XML * MFSA 2015-55/CVE-2015-2717 (bmo#1154683) Buffer overflow and out-of-bounds read while parsing MP4 video metadata * MFSA 2015-56/CVE-2015-2718 (bmo#1146724) Untrusted site hosting trusted page can intercept webchannel responses * MFSA 2015-57/CVE-2011-3079 (bmo#1087565) Privilege escalation through IPC channel messages Changes in Mozilla NSS: - update to 3.18.1 * Firefox target release 38 * No new functionality is introduced in this release. Notable Changes: * The following CA certificate had the Websites and Code Signing trust bits restored to their original state to allow more time to develop a better transition strategy for affected sites: - OU = Equifax Secure Certificate Authority * The following CA certificate was removed: - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi * The following intermediate CA certificate has been added as actively distrusted because it was mis-used to issue certificates for domain names the holder did not own or control: - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG * The version number of the updated root CA list has been set to 2.4 - update to 3.18 * Firefox target release 38 New functionality: * When importing certificates and keys from a PKCS#12 source, it's now possible to override the nicknames, prior to importing them into the NSS database, using new API SEC_PKCS12DecoderRenameCertNicknames. * The tstclnt test utility program has new command-line options -C, -D, -b and -R. Use -C one, two or three times to print information about the certificates received from a server, and information about the locally found and trusted issuer certificates, to diagnose server side configuration issues. It is possible to run tstclnt Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-375=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-375=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): MozillaFirefox-38.0.1-30.1 MozillaFirefox-branding-upstream-38.0.1-30.1 MozillaFirefox-buildsymbols-38.0.1-30.1 MozillaFirefox-debuginfo-38.0.1-30.1 MozillaFirefox-debugsource-38.0.1-30.1 MozillaFirefox-devel-38.0.1-30.1 MozillaFirefox-translations-common-38.0.1-30.1 MozillaFirefox-translations-other-38.0.1-30.1 libfreebl3-3.18.1-12.1 libfreebl3-debuginfo-3.18.1-12.1 libsoftokn3-3.18.1-12.1 libsoftokn3-debuginfo-3.18.1-12.1 mozilla-nss-3.18.1-12.1 mozilla-nss-certs-3.18.1-12.1 mozilla-nss-certs-debuginfo-3.18.1-12.1 mozilla-nss-debuginfo-3.18.1-12.1 mozilla-nss-debugsource-3.18.1-12.1 mozilla-nss-devel-3.18.1-12.1 mozilla-nss-sysinit-3.18.1-12.1 mozilla-nss-sysinit-debuginfo-3.18.1-12.1 mozilla-nss-tools-3.18.1-12.1 mozilla-nss-tools-debuginfo-3.18.1-12.1 - openSUSE 13.2 (x86_64): libfreebl3-32bit-3.18.1-12.1 libfreebl3-debuginfo-32bit-3.18.1-12.1 libsoftokn3-32bit-3.18.1-12.1 libsoftokn3-debuginfo-32bit-3.18.1-12.1 mozilla-nss-32bit-3.18.1-12.1 mozilla-nss-certs-32bit-3.18.1-12.1 mozilla-nss-certs-debuginfo-32bit-3.18.1-12.1 mozilla-nss-debuginfo-32bit-3.18.1-12.1 mozilla-nss-sysinit-32bit-3.18.1-12.1 mozilla-nss-sysinit-debuginfo-32bit-3.18.1-12.1 - openSUSE 13.1 (i586 x86_64): MozillaFirefox-38.0.1-74.1 MozillaFirefox-branding-upstream-38.0.1-74.1 MozillaFirefox-buildsymbols-38.0.1-74.1 MozillaFirefox-debuginfo-38.0.1-74.1 MozillaFirefox-debugsource-38.0.1-74.1 MozillaFirefox-devel-38.0.1-74.1 MozillaFirefox-translations-common-38.0.1-74.1 MozillaFirefox-translations-other-38.0.1-74.1 libfreebl3-3.18.1-55.1 libfreebl3-debuginfo-3.18.1-55.1 libsoftokn3-3.18.1-55.1 libsoftokn3-debuginfo-3.18.1-55.1 mozilla-nss-3.18.1-55.1 mozilla-nss-certs-3.18.1-55.1 mozilla-nss-certs-debuginfo-3.18.1-55.1 mozilla-nss-debuginfo-3.18.1-55.1 mozilla-nss-debugsource-3.18.1-55.1 mozilla-nss-devel-3.18.1-55.1 mozilla-nss-sysinit-3.18.1-55.1 mozilla-nss-sysinit-debuginfo-3.18.1-55.1 mozilla-nss-tools-3.18.1-55.1 mozilla-nss-tools-debuginfo-3.18.1-55.1 - openSUSE 13.1 (x86_64): libfreebl3-32bit-3.18.1-55.1 libfreebl3-debuginfo-32bit-3.18.1-55.1 libsoftokn3-32bit-3.18.1-55.1 libsoftokn3-debuginfo-32bit-3.18.1-55.1 mozilla-nss-32bit-3.18.1-55.1 mozilla-nss-certs-32bit-3.18.1-55.1 mozilla-nss-certs-debuginfo-32bit-3.18.1-55.1 mozilla-nss-debuginfo-32bit-3.18.1-55.1 mozilla-nss-sysinit-32bit-3.18.1-55.1 mozilla-nss-sysinit-debuginfo-32bit-3.18.1-55.1 References: https://www.suse.com/security/cve/CVE-2011-3079.html https://www.suse.com/security/cve/CVE-2015-2708.html https://www.suse.com/security/cve/CVE-2015-2709.html https://www.suse.com/security/cve/CVE-2015-2710.html https://www.suse.com/security/cve/CVE-2015-2711.html https://www.suse.com/security/cve/CVE-2015-2712.html https://www.suse.com/security/cve/CVE-2015-2713.html https://www.suse.com/security/cve/CVE-2015-2715.html https://www.suse.com/security/cve/CVE-2015-2716.html https://www.suse.com/security/cve/CVE-2015-2717.html https://www.suse.com/security/cve/CVE-2015-2718.html https://bugzilla.suse.com/930622

1 0

openSUSE-SU-2015:0933-1: moderate: Security update for quassel
by opensuse-security＠opensuse.org 24 May '15

24 May '15

openSUSE Security Update: Security update for quassel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0933-1 Rating: moderate References: #928728 Cross-References: CVE-2015-3427 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The distributed IRC client quassel was updated to fix one security issue. The following vulnerability was fixed: * CVE-2015-3427: The SQL injection fix for CVE-2013-4422 was incomplete (boo#928728) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-376=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-376=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): quassel-base-0.10.0-3.10.1 quassel-client-0.10.0-3.10.1 quassel-client-debuginfo-0.10.0-3.10.1 quassel-core-0.10.0-3.10.1 quassel-core-debuginfo-0.10.0-3.10.1 quassel-debugsource-0.10.0-3.10.1 quassel-mono-0.10.0-3.10.1 quassel-mono-debuginfo-0.10.0-3.10.1 - openSUSE 13.1 (i586 x86_64): quassel-base-0.9.2-22.1 quassel-client-0.9.2-22.1 quassel-client-debuginfo-0.9.2-22.1 quassel-core-0.9.2-22.1 quassel-core-debuginfo-0.9.2-22.1 quassel-debugsource-0.9.2-22.1 quassel-mono-0.9.2-22.1 quassel-mono-debuginfo-0.9.2-22.1 References: https://www.suse.com/security/cve/CVE-2015-3427.html https://bugzilla.suse.com/928728

1 0

openSUSE-SU-2015:0932-1: moderate: Security update for LibVNCServer
by opensuse-security＠opensuse.org 24 May '15

24 May '15

openSUSE Security Update: Security update for LibVNCServer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0932-1 Rating: moderate References: Cross-References: CVE-2014-4607 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: LibVNCServer was updated to version 0.9.10 to fix several security and non-security issues. The following issues were fixed: - Remove xorg-x11-devel from buildRequires, X libraries are not directly used/linked - libvncserver-0.9.10-ossl.patch: Update, do not RAND_load_file("/dev/urandom", 1024) if the the PRNG is already seeded. (It always is on linux) - Update to version 0.9.10 + Moved the whole project from sourceforge to https://libvnc.github.io/. + Cleaned out the autotools build system which now uses autoreconf. + Updated noVNC HTML5 client to latest version. + Split out x11vnc sources into separate repository at https://github.com/LibVNC/x11vnc + Split out vncterm sources into separate repository at https://github.com/LibVNC/vncterm + Split out VisualNaCro sources into separate repository at https://github.com/LibVNC/VisualNaCro + Merged Debian patches. + Fixed some security-related buffer overflow cases. + Added compatibility headers to make LibVNCServer/LibVNCClient build on native Windows 8. + Update LZO to version 2.07, fixing CVE-2014-4607. + Merged patches from KDE/krfb. + Can now do IPv6 without IPv4. + Fixed a use-after-free issue in scale.c. - Update Url and download source to new project home - Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it out of main tarball - Rebase libvncserver-ossl.patch to upstream changes > libvncserver-0.9.10-ossl.patch - Remove linuxvnc subpackage; like x11vnc, it has been splited out but is depreciated and unmaintained. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-377=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): LibVNCServer-debugsource-0.9.10-10.4.1 LibVNCServer-devel-0.9.10-10.4.1 libvncclient0-0.9.10-10.4.1 libvncclient0-debuginfo-0.9.10-10.4.1 libvncserver0-0.9.10-10.4.1 libvncserver0-debuginfo-0.9.10-10.4.1 References: https://www.suse.com/security/cve/CVE-2014-4607.html

1 0

openSUSE-SU-2015:0931-1: moderate: Security update for libraw
by opensuse-security＠opensuse.org 24 May '15

24 May '15

openSUSE Security Update: Security update for libraw ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0931-1 Rating: moderate References: #930683 Cross-References: CVE-2015-3885 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The libraw library was updated to fix one security issue. The following vulnerability was fixed: * boo#930683: CVE-2015-3885: dcraw/libraw: input sanitization errors Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-378=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-378=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libraw-debugsource-0.16.0-2.3.1 libraw-devel-0.16.0-2.3.1 libraw-devel-static-0.16.0-2.3.1 libraw-tools-0.16.0-2.3.1 libraw-tools-debuginfo-0.16.0-2.3.1 libraw10-0.16.0-2.3.1 libraw10-debuginfo-0.16.0-2.3.1 - openSUSE 13.1 (i586 x86_64): libraw-debugsource-0.15.4-2.3.1 libraw-devel-0.15.4-2.3.1 libraw-devel-static-0.15.4-2.3.1 libraw-tools-0.15.4-2.3.1 libraw-tools-debuginfo-0.15.4-2.3.1 libraw9-0.15.4-2.3.1 libraw9-debuginfo-0.15.4-2.3.1 References: https://www.suse.com/security/cve/CVE-2015-3885.html https://bugzilla.suse.com/930683

1 0

openSUSE-SU-2015:0930-1: moderate: Recommended update for coreutils
by opensuse-security＠opensuse.org 24 May '15

24 May '15

openSUSE Security Update: Recommended update for coreutils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0930-1 Rating: moderate References: #928749 Cross-References: CVE-2013-0221 CVE-2013-0222 CVE-2013-0223 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: coreutils was updated to fix a bug in 'sort': Fixed memory handling error with case insensitive sort using UTF-8 (boo#928749). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-381=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): coreutils-8.23-2.9.1 coreutils-debuginfo-8.23-2.9.1 coreutils-debugsource-8.23-2.9.1 coreutils-testsuite-8.23-2.9.1 - openSUSE 13.2 (noarch): coreutils-lang-8.23-2.9.1 References: https://www.suse.com/security/cve/CVE-2013-0221.html https://www.suse.com/security/cve/CVE-2013-0222.html https://www.suse.com/security/cve/CVE-2013-0223.html https://bugzilla.suse.com/928749

1 0

openSUSE-OU-2015:0919-1: Update typelib creator to produce deterministic results
by maintenance＠opensuse.org 20 May '15

20 May '15

openSUSE Optional Update: Update typelib creator to produce deterministic results ______________________________________________________________________________ Announcement ID: openSUSE-OU-2015:0919-1 Rating: low References: #930584 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: The tool in gobject-introspection which creates typelib files failed to produce reproducible results. This causes a republish of packages which contain typelib files everytime such package was rebuilt. Multimedia packages from the packman repository are the ones which are affected. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-373=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): girepository-1_0-1.38.0-3.1 gobject-introspection-1.38.0-3.1 gobject-introspection-debuginfo-1.38.0-3.1 gobject-introspection-debugsource-1.38.0-3.1 gobject-introspection-devel-1.38.0-3.1 libgirepository-1_0-1-1.38.0-3.1 libgirepository-1_0-1-debuginfo-1.38.0-3.1 References: https://bugzilla.suse.com/930584

1 0

openSUSE-SU-2015:0914-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 19 May '15

19 May '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0914-1 Rating: important References: #930677 Cross-References: CVE-2015-3044 CVE-2015-3077 CVE-2015-3078 CVE-2015-3079 CVE-2015-3080 CVE-2015-3081 CVE-2015-3082 CVE-2015-3083 CVE-2015-3084 CVE-2015-3085 CVE-2015-3086 CVE-2015-3087 CVE-2015-3088 CVE-2015-3089 CVE-2015-3090 CVE-2015-3091 CVE-2015-3092 CVE-2015-3093 Affected Products: openSUSE 13.2:NonFree openSUSE 13.1:NonFree ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: The Adobe flash-player package was updated to version 11.2.202.460 to fix several security issues. The following vulnerabilities were fixed (bsc#930677): * APSB15-09, CVE-2015-3044, CVE-2015-3077, CVE-2015-3078, CVE-2015-3079, CVE-2015-3080, CVE-2015-3081, CVE-2015-3082, CVE-2015-3083, CVE-2015-3084, CVE-2015-3085, CVE-2015-3086, CVE-2015-3087, CVE-2015-3088, CVE-2015-3089, CVE-2015-3090, CVE-2015-3091, CVE-2015-3092, CVE-2015-3093 More information can be found at the Adobe Security Bulletin APSB15-09: https://helpx.adobe.com/security/products/flash-player/apsb15-09.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2:NonFree: zypper in -t patch openSUSE-2015-372=1 - openSUSE 13.1:NonFree: zypper in -t patch openSUSE-2015-372=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2:NonFree (i586 x86_64): flash-player-11.2.202.460-2.51.1 flash-player-gnome-11.2.202.460-2.51.1 flash-player-kde4-11.2.202.460-2.51.1 - openSUSE 13.1:NonFree (i586 x86_64): flash-player-11.2.202.460-116.1 flash-player-gnome-11.2.202.460-116.1 flash-player-kde4-11.2.202.460-116.1 References: https://www.suse.com/security/cve/CVE-2015-3044.html https://www.suse.com/security/cve/CVE-2015-3077.html https://www.suse.com/security/cve/CVE-2015-3078.html https://www.suse.com/security/cve/CVE-2015-3079.html https://www.suse.com/security/cve/CVE-2015-3080.html https://www.suse.com/security/cve/CVE-2015-3081.html https://www.suse.com/security/cve/CVE-2015-3082.html https://www.suse.com/security/cve/CVE-2015-3083.html https://www.suse.com/security/cve/CVE-2015-3084.html https://www.suse.com/security/cve/CVE-2015-3085.html https://www.suse.com/security/cve/CVE-2015-3086.html https://www.suse.com/security/cve/CVE-2015-3087.html https://www.suse.com/security/cve/CVE-2015-3088.html https://www.suse.com/security/cve/CVE-2015-3089.html https://www.suse.com/security/cve/CVE-2015-3090.html https://www.suse.com/security/cve/CVE-2015-3091.html https://www.suse.com/security/cve/CVE-2015-3092.html https://www.suse.com/security/cve/CVE-2015-3093.html https://bugzilla.suse.com/930677

1 0

openSUSE-RU-2015:0912-1: moderate: Recommended update for KDE framework
by maintenance＠opensuse.org 19 May '15

19 May '15

openSUSE Recommended Update: Recommended update for KDE framework ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0912-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: KDE framwork update to 5.10.0 - For more details please see: https://www.kde.org/announcements/kde-frameworks-5.10.0.php Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-371=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): attica-qt5-debugsource-5.10.0-21.1 attica-qt5-devel-5.10.0-21.1 extra-cmake-modules-5.10.0-21.1 frameworkintegration-debugsource-5.10.0-21.1 frameworkintegration-devel-5.10.0-21.1 frameworkintegration-plugin-5.10.0-21.1 frameworkintegration-plugin-debuginfo-5.10.0-21.1 kactivities5-5.10.0-21.1 kactivities5-debuginfo-5.10.0-21.1 kactivities5-debugsource-5.10.0-21.1 kactivities5-devel-5.10.0-21.1 kactivities5-imports-5.10.0-21.1 kactivities5-imports-debuginfo-5.10.0-21.1 kapidox-5.10.0-21.1 karchive-debugsource-5.10.0-21.1 karchive-devel-5.10.0-21.1 kauth-debugsource-5.10.0-21.1 kauth-devel-5.10.0-21.1 kbookmarks-debugsource-5.10.0-21.1 kbookmarks-devel-5.10.0-21.1 kcmutils-debugsource-5.10.0-21.1 kcmutils-devel-5.10.0-21.1 kcodecs-debugsource-5.10.0-21.1 kcodecs-devel-5.10.0-21.1 kcompletion-debugsource-5.10.0-21.1 kcompletion-devel-5.10.0-21.1 kconf_update5-5.10.0-21.1 kconf_update5-debuginfo-5.10.0-21.1 kconfig-debugsource-5.10.0-21.1 kconfig-devel-5.10.0-21.1 kconfig-devel-debuginfo-5.10.0-21.1 kconfigwidgets-debugsource-5.10.0-21.1 kconfigwidgets-devel-5.10.0-21.1 kcoreaddons-5.10.0-21.1 kcoreaddons-debugsource-5.10.0-21.1 kcoreaddons-devel-5.10.0-21.1 kcoreaddons-devel-debuginfo-5.10.0-21.1 kcrash-debugsource-5.10.0-21.1 kcrash-devel-5.10.0-21.1 kdbusaddons-debugsource-5.10.0-21.1 kdbusaddons-devel-5.10.0-21.1 kdbusaddons-tools-5.10.0-21.1 kdbusaddons-tools-debuginfo-5.10.0-21.1 kdeclarative-components-5.10.0-21.1 kdeclarative-components-debuginfo-5.10.0-21.1 kdeclarative-debugsource-5.10.0-21.1 kdeclarative-devel-5.10.0-21.1 kdeclarative-tools-5.10.0-21.1 kdeclarative-tools-debuginfo-5.10.0-21.1 kded-5.10.0-21.1 kded-debuginfo-5.10.0-21.1 kded-debugsource-5.10.0-21.1 kded-devel-5.10.0-21.1 kdelibs4support-5.10.0-21.19 kdelibs4support-debuginfo-5.10.0-21.19 kdelibs4support-debugsource-5.10.0-21.19 kdelibs4support-devel-5.10.0-21.19 kdesignerplugin-5.10.0-21.14 kdesignerplugin-debuginfo-5.10.0-21.14 kdesignerplugin-debugsource-5.10.0-21.14 kdesignerplugin-devel-5.10.0-21.14 kdesu-debugsource-5.10.0-21.1 kdesu-devel-5.10.0-21.1 kdewebkit-debugsource-5.10.0-21.1 kdewebkit-devel-5.10.0-21.1 kdnssd-framework-debugsource-5.10.0-21.1 kdnssd-framework-devel-5.10.0-21.1 kdoctools-5.10.0-21.1 kdoctools-debuginfo-5.10.0-21.1 kdoctools-debugsource-5.10.0-21.1 kdoctools-devel-5.10.0-21.1 kemoticons-debugsource-5.10.0-21.1 kemoticons-devel-5.10.0-21.1 kf5-filesystem-5.6.0-7.1 kglobalaccel-debugsource-5.10.0-21.1 kglobalaccel-devel-5.10.0-21.1 kglobalaccel5-5.10.0-21.1 kglobalaccel5-debuginfo-5.10.0-21.1 kguiaddons-debugsource-5.10.0-21.1 kguiaddons-devel-5.10.0-21.1 khtml-debugsource-5.10.0-21.1 khtml-devel-5.10.0-21.1 ki18n-debugsource-5.10.0-21.1 ki18n-devel-5.10.0-21.1 kiconthemes-debugsource-5.10.0-21.1 kiconthemes-devel-5.10.0-21.1 kiconthemes-devel-debuginfo-5.10.0-21.1 kidletime-debugsource-5.10.0-21.1 kidletime-devel-5.10.0-21.1 kimageformats-5.10.0-21.1 kimageformats-debuginfo-5.10.0-21.1 kimageformats-debugsource-5.10.0-21.1 kinit-5.10.0-21.1 kinit-debuginfo-5.10.0-21.1 kinit-debugsource-5.10.0-21.1 kinit-devel-5.10.0-21.1 kio-5.10.0-21.4 kio-core-5.10.0-21.4 kio-core-debuginfo-5.10.0-21.4 kio-debuginfo-5.10.0-21.4 kio-debugsource-5.10.0-21.4 kio-devel-5.10.0-21.4 kitemmodels-debugsource-5.10.0-21.1 kitemmodels-devel-5.10.0-21.1 kitemviews-debugsource-5.10.0-21.1 kitemviews-devel-5.10.0-21.1 kjobwidgets-debugsource-5.10.0-21.1 kjobwidgets-devel-5.10.0-21.1 kjs-debugsource-5.10.0-21.1 kjs-devel-5.10.0-21.1 kjs-devel-debuginfo-5.10.0-21.1 kjsembed-debugsource-5.10.0-21.1 kjsembed-devel-5.10.0-21.1 kjsembed-devel-debuginfo-5.10.0-21.1 kmediaplayer-debugsource-5.10.0-21.1 kmediaplayer-devel-5.10.0-21.1 knewstuff-debugsource-5.10.0-21.1 knewstuff-devel-5.10.0-21.1 knotifications-debugsource-5.10.0-21.1 knotifications-devel-5.10.0-21.1 knotifyconfig-debugsource-5.10.0-21.1 knotifyconfig-devel-5.10.0-21.1 kpackage-5.10.0-15.1 kpackage-debuginfo-5.10.0-15.1 kpackage-debugsource-5.10.0-15.1 kpackage-devel-5.10.0-15.1 kparts-debugsource-5.10.0-21.1 kparts-devel-5.10.0-21.1 kpeople5-5.10.0-8.1 kpeople5-debuginfo-5.10.0-8.1 kpeople5-debugsource-5.10.0-8.1 kpeople5-devel-5.10.0-8.1 kplotting-debugsource-5.10.0-21.1 kplotting-devel-5.10.0-21.1 kpty-debugsource-5.10.0-21.1 kpty-devel-5.10.0-21.1 kross-5.10.0-21.1 kross-debuginfo-5.10.0-21.1 kross-debugsource-5.10.0-21.1 kross-devel-5.10.0-21.1 kross-devel-debuginfo-5.10.0-21.1 krunner-debugsource-5.10.0-21.1 krunner-devel-5.10.0-21.1 kservice-5.10.0-21.1 kservice-debuginfo-5.10.0-21.1 kservice-debugsource-5.10.0-21.1 kservice-devel-5.10.0-21.1 kssl-5.10.0-21.19 kssl-debuginfo-5.10.0-21.19 ktexteditor-5.10.0-21.1 ktexteditor-debuginfo-5.10.0-21.1 ktexteditor-debugsource-5.10.0-21.1 ktexteditor-devel-5.10.0-21.1 ktextwidgets-debugsource-5.10.0-21.1 ktextwidgets-devel-5.10.0-21.1 kunitconversion-debugsource-5.10.0-21.1 kunitconversion-devel-5.10.0-21.1 kwallet-debugsource-5.10.0-21.1 kwallet-devel-5.10.0-21.1 kwalletd5-5.10.0-21.1 kwalletd5-debuginfo-5.10.0-21.1 kwidgetsaddons-debugsource-5.10.0-21.1 kwidgetsaddons-devel-5.10.0-21.1 kwindowsystem-debugsource-5.10.0-22.1 kwindowsystem-devel-5.10.0-22.1 kxmlgui-debugsource-5.10.0-21.1 kxmlgui-devel-5.10.0-21.1 kxmlrpcclient5-debugsource-5.10.0-8.1 kxmlrpcclient5-devel-5.10.0-8.1 libKF5Activities5-5.10.0-21.1 libKF5Activities5-debuginfo-5.10.0-21.1 libKF5Archive5-5.10.0-21.1 libKF5Archive5-debuginfo-5.10.0-21.1 libKF5Attica5-5.10.0-21.1 libKF5Attica5-debuginfo-5.10.0-21.1 libKF5Auth5-5.10.0-21.1 libKF5Auth5-debuginfo-5.10.0-21.1 libKF5Bookmarks5-5.10.0-21.1 libKF5Bookmarks5-debuginfo-5.10.0-21.1 libKF5Codecs5-5.10.0-21.1 libKF5Codecs5-debuginfo-5.10.0-21.1 libKF5Completion5-5.10.0-21.1 libKF5Completion5-debuginfo-5.10.0-21.1 libKF5ConfigCore5-5.10.0-21.1 libKF5ConfigCore5-debuginfo-5.10.0-21.1 libKF5ConfigGui5-5.10.0-21.1 libKF5ConfigGui5-debuginfo-5.10.0-21.1 libKF5ConfigWidgets5-5.10.0-21.1 libKF5ConfigWidgets5-debuginfo-5.10.0-21.1 libKF5CoreAddons5-5.10.0-21.1 libKF5CoreAddons5-debuginfo-5.10.0-21.1 libKF5Crash5-5.10.0-21.1 libKF5Crash5-debuginfo-5.10.0-21.1 libKF5DBusAddons5-5.10.0-21.1 libKF5DBusAddons5-debuginfo-5.10.0-21.1 libKF5DNSSD5-5.10.0-21.1 libKF5DNSSD5-debuginfo-5.10.0-21.1 libKF5Declarative5-5.10.0-21.1 libKF5Declarative5-debuginfo-5.10.0-21.1 libKF5Emoticons5-5.10.0-21.1 libKF5Emoticons5-debuginfo-5.10.0-21.1 libKF5GlobalAccel5-5.10.0-21.1 libKF5GlobalAccel5-debuginfo-5.10.0-21.1 libKF5GuiAddons5-5.10.0-21.1 libKF5GuiAddons5-debuginfo-5.10.0-21.1 libKF5I18n5-5.10.0-21.1 libKF5I18n5-debuginfo-5.10.0-21.1 libKF5IconThemes5-5.10.0-21.1 libKF5IconThemes5-debuginfo-5.10.0-21.1 libKF5IdleTime5-5.10.0-21.1 libKF5IdleTime5-debuginfo-5.10.0-21.1 libKF5ItemModels5-5.10.0-21.1 libKF5ItemModels5-debuginfo-5.10.0-21.1 libKF5ItemViews5-5.10.0-21.1 libKF5ItemViews5-debuginfo-5.10.0-21.1 libKF5JS5-5.10.0-21.1 libKF5JS5-debuginfo-5.10.0-21.1 libKF5JSApi5-5.10.0-21.1 libKF5JSApi5-debuginfo-5.10.0-21.1 libKF5JobWidgets5-5.10.0-21.1 libKF5JobWidgets5-debuginfo-5.10.0-21.1 libKF5JsEmbed5-5.10.0-21.1 libKF5JsEmbed5-debuginfo-5.10.0-21.1 libKF5KCMUtils5-5.10.0-21.1 libKF5KCMUtils5-debuginfo-5.10.0-21.1 libKF5KDELibs4Support5-5.10.0-21.19 libKF5KDELibs4Support5-debuginfo-5.10.0-21.19 libKF5KHtml5-5.10.0-21.1 libKF5KHtml5-debuginfo-5.10.0-21.1 libKF5MediaPlayer5-5.10.0-21.1 libKF5MediaPlayer5-debuginfo-5.10.0-21.1 libKF5ModemManagerQt-debugsource-5.10.0-21.1 libKF5ModemManagerQt-devel-5.10.0-21.1 libKF5ModemManagerQt6-5.10.0-21.1 libKF5ModemManagerQt6-debuginfo-5.10.0-21.1 libKF5NetworkManagerQt-debugsource-5.10.0-21.1 libKF5NetworkManagerQt-devel-5.10.0-21.1 libKF5NetworkManagerQt6-5.10.0-21.1 libKF5NetworkManagerQt6-debuginfo-5.10.0-21.1 libKF5NewStuff5-5.10.0-21.1 libKF5NewStuff5-debuginfo-5.10.0-21.1 libKF5Notifications5-5.10.0-21.1 libKF5Notifications5-debuginfo-5.10.0-21.1 libKF5NotifyConfig5-5.10.0-21.1 libKF5NotifyConfig5-debuginfo-5.10.0-21.1 libKF5Parts5-5.10.0-21.1 libKF5Parts5-debuginfo-5.10.0-21.1 libKF5Plotting5-5.10.0-21.1 libKF5Plotting5-debuginfo-5.10.0-21.1 libKF5Pty5-5.10.0-21.1 libKF5Pty5-debuginfo-5.10.0-21.1 libKF5QuickAddons5-5.10.0-21.1 libKF5QuickAddons5-debuginfo-5.10.0-21.1 libKF5Runner5-5.10.0-21.1 libKF5Runner5-debuginfo-5.10.0-21.1 libKF5Solid5-5.10.0-21.1 libKF5Solid5-debuginfo-5.10.0-21.1 libKF5SonnetCore5-5.10.0-21.3 libKF5SonnetCore5-debuginfo-5.10.0-21.3 libKF5SonnetUi5-5.10.0-21.3 libKF5SonnetUi5-debuginfo-5.10.0-21.3 libKF5Style5-5.10.0-21.1 libKF5Style5-debuginfo-5.10.0-21.1 libKF5Su5-5.10.0-21.1 libKF5Su5-debuginfo-5.10.0-21.1 libKF5TextWidgets5-5.10.0-21.1 libKF5TextWidgets5-debuginfo-5.10.0-21.1 libKF5ThreadWeaver5-5.10.0-21.1 libKF5ThreadWeaver5-debuginfo-5.10.0-21.1 libKF5UnitConversion5-5.10.0-21.1 libKF5UnitConversion5-debuginfo-5.10.0-21.1 libKF5Wallet5-5.10.0-21.1 libKF5Wallet5-debuginfo-5.10.0-21.1 libKF5WebKit5-5.10.0-21.1 libKF5WebKit5-debuginfo-5.10.0-21.1 libKF5WidgetsAddons5-5.10.0-21.1 libKF5WidgetsAddons5-debuginfo-5.10.0-21.1 libKF5WindowSystem5-5.10.0-22.1 libKF5WindowSystem5-debuginfo-5.10.0-22.1 libKF5XmlGui5-5.10.0-21.1 libKF5XmlGui5-debuginfo-5.10.0-21.1 libKF5XmlRpcClient5-5.10.0-8.1 libKF5XmlRpcClient5-debuginfo-5.10.0-8.1 libQt5Bootstrap-devel-static-5.4.1-19.1 libQt5Concurrent-devel-5.4.1-19.1 libQt5Concurrent5-5.4.1-19.1 libQt5Concurrent5-debuginfo-5.4.1-19.1 libQt5Core-devel-5.4.1-19.1 libQt5Core5-5.4.1-19.1 libQt5Core5-debuginfo-5.4.1-19.1 libQt5DBus-devel-5.4.1-19.1 libQt5DBus-devel-debuginfo-5.4.1-19.1 libQt5DBus5-5.4.1-19.1 libQt5DBus5-debuginfo-5.4.1-19.1 libQt5Gui-devel-5.4.1-19.1 libQt5Gui5-5.4.1-19.1 libQt5Gui5-debuginfo-5.4.1-19.1 libQt5Location5-5.4.1-6.1 libQt5Location5-debuginfo-5.4.1-6.1 libQt5Network-devel-5.4.1-19.1 libQt5Network5-5.4.1-19.1 libQt5Network5-debuginfo-5.4.1-19.1 libQt5OpenGL-devel-5.4.1-19.1 libQt5OpenGL5-5.4.1-19.1 libQt5OpenGL5-debuginfo-5.4.1-19.1 libQt5OpenGLExtensions-devel-static-5.4.1-19.1 libQt5PlatformHeaders-devel-5.4.1-19.1 libQt5PlatformSupport-devel-static-5.4.1-19.1 libQt5Positioning5-5.4.1-6.1 libQt5Positioning5-debuginfo-5.4.1-6.1 libQt5PrintSupport-devel-5.4.1-19.1 libQt5PrintSupport5-5.4.1-19.1 libQt5PrintSupport5-debuginfo-5.4.1-19.1 libQt5Sensors5-5.4.1-6.1 libQt5Sensors5-debuginfo-5.4.1-6.1 libQt5Sensors5-imports-5.4.1-6.1 libQt5Sensors5-imports-debuginfo-5.4.1-6.1 libQt5Sql-devel-5.4.1-19.1 libQt5Sql5-5.4.1-19.1 libQt5Sql5-debuginfo-5.4.1-19.1 libQt5Sql5-mysql-5.4.1-19.1 libQt5Sql5-mysql-debuginfo-5.4.1-19.1 libQt5Sql5-postgresql-5.4.1-19.1 libQt5Sql5-postgresql-debuginfo-5.4.1-19.1 libQt5Sql5-sqlite-5.4.1-19.1 libQt5Sql5-sqlite-debuginfo-5.4.1-19.1 libQt5Sql5-unixODBC-5.4.1-19.1 libQt5Sql5-unixODBC-debuginfo-5.4.1-19.1 libQt5Test-devel-5.4.1-19.1 libQt5Test5-5.4.1-19.1 libQt5Test5-debuginfo-5.4.1-19.1 libQt5WebChannel5-5.4.1-4.1 libQt5WebChannel5-debuginfo-5.4.1-4.1 libQt5WebChannel5-imports-5.4.1-4.1 libQt5WebChannel5-imports-debuginfo-5.4.1-4.1 libQt5WebKit5-5.4.1-7.2 libQt5WebKit5-debuginfo-5.4.1-7.2 libQt5WebKit5-devel-5.4.1-7.2 libQt5WebKit5-imports-5.4.1-7.2 libQt5WebKit5-imports-debuginfo-5.4.1-7.2 libQt5WebKitWidgets-devel-5.4.1-7.2 libQt5WebKitWidgets5-5.4.1-7.2 libQt5WebKitWidgets5-debuginfo-5.4.1-7.2 libQt5WebSockets5-5.4.1-6.1 libQt5WebSockets5-debuginfo-5.4.1-6.1 libQt5WebSockets5-imports-5.4.1-6.1 libQt5WebSockets5-imports-debuginfo-5.4.1-6.1 libQt5Widgets-devel-5.4.1-19.1 libQt5Widgets5-5.4.1-19.1 libQt5Widgets5-debuginfo-5.4.1-19.1 libQt5X11Extras5-5.4.1-6.1 libQt5X11Extras5-debuginfo-5.4.1-6.1 libQt5Xml-devel-5.4.1-19.1 libQt5Xml5-5.4.1-19.1 libQt5Xml5-debuginfo-5.4.1-19.1 libQt5XmlPatterns5-5.4.1-6.1 libQt5XmlPatterns5-debuginfo-5.4.1-6.1 libQtQuick5-5.4.1-8.2 libQtQuick5-debuginfo-5.4.1-8.2 libkwalletbackend5-5-5.10.0-21.1 libkwalletbackend5-5-debuginfo-5.10.0-21.1 libqt5-qtbase-common-devel-5.4.1-19.1 libqt5-qtbase-common-devel-debuginfo-5.4.1-19.1 libqt5-qtbase-debugsource-5.4.1-19.1 libqt5-qtbase-devel-5.4.1-19.1 libqt5-qtbase-doc-5.4.1-19.1 libqt5-qtbase-doc-debuginfo-5.4.1-19.1 libqt5-qtbase-examples-5.4.1-19.1 libqt5-qtbase-examples-debuginfo-5.4.1-19.1 libqt5-qtbase-platformtheme-gtk2-5.4.1-19.1 libqt5-qtbase-platformtheme-gtk2-debuginfo-5.4.1-19.1 libqt5-qtdeclarative-debugsource-5.4.1-8.2 libqt5-qtdeclarative-devel-5.4.1-8.2 libqt5-qtdeclarative-devel-debuginfo-5.4.1-8.2 libqt5-qtdeclarative-examples-5.4.1-8.2 libqt5-qtdeclarative-examples-debuginfo-5.4.1-8.2 libqt5-qtdeclarative-tools-5.4.1-8.2 libqt5-qtdeclarative-tools-debuginfo-5.4.1-8.2 libqt5-qtlocation-debugsource-5.4.1-6.1 libqt5-qtlocation-devel-5.4.1-6.1 libqt5-qtlocation-examples-5.4.1-6.1 libqt5-qtlocation-examples-debuginfo-5.4.1-6.1 libqt5-qtsensors-debugsource-5.4.1-6.1 libqt5-qtsensors-devel-5.4.1-6.1 libqt5-qtsensors-examples-5.4.1-6.1 libqt5-qtsensors-examples-debuginfo-5.4.1-6.1 libqt5-qtwebchannel-debugsource-5.4.1-4.1 libqt5-qtwebchannel-devel-5.4.1-4.1 libqt5-qtwebchannel-examples-5.4.1-4.1 libqt5-qtwebkit-debugsource-5.4.1-7.2 libqt5-qtwebsockets-debugsource-5.4.1-6.1 libqt5-qtwebsockets-devel-5.4.1-6.1 libqt5-qtwebsockets-examples-5.4.1-6.1 libqt5-qtx11extras-debugsource-5.4.1-6.1 libqt5-qtx11extras-devel-5.4.1-6.1 libqt5-qtxmlpatterns-debugsource-5.4.1-6.1 libqt5-qtxmlpatterns-devel-5.4.1-6.1 libqt5-qtxmlpatterns-examples-5.4.1-6.1 libqt5-qtxmlpatterns-examples-debuginfo-5.4.1-6.1 plasma-framework-5.10.0-23.1 plasma-framework-components-5.10.0-23.1 plasma-framework-components-debuginfo-5.10.0-23.1 plasma-framework-debuginfo-5.10.0-23.1 plasma-framework-debugsource-5.10.0-23.1 plasma-framework-devel-5.10.0-23.1 plasma-framework-private-5.10.0-23.1 plasma-framework-private-debuginfo-5.10.0-23.1 solid-debugsource-5.10.0-21.1 solid-devel-5.10.0-21.1 solid-imports-5.10.0-21.1 solid-imports-debuginfo-5.10.0-21.1 solid-tools-5.10.0-21.1 solid-tools-debuginfo-5.10.0-21.1 sonnet-debugsource-5.10.0-21.3 sonnet-devel-5.10.0-21.3 threadweaver-debugsource-5.10.0-21.1 threadweaver-devel-5.10.0-21.1 - openSUSE 13.2 (x86_64): attica-qt5-devel-32bit-5.10.0-21.1 frameworkintegration-devel-32bit-5.10.0-21.1 frameworkintegration-plugin-32bit-5.10.0-21.1 frameworkintegration-plugin-debuginfo-32bit-5.10.0-21.1 kactivities5-devel-32bit-5.10.0-21.1 karchive-devel-32bit-5.10.0-21.1 kauth-devel-32bit-5.10.0-21.1 kbookmarks-devel-32bit-5.10.0-21.1 kcmutils-devel-32bit-5.10.0-21.1 kcodecs-devel-32bit-5.10.0-21.1 kcompletion-devel-32bit-5.10.0-21.1 kconfig-devel-32bit-5.10.0-21.1 kconfig-devel-debuginfo-32bit-5.10.0-21.1 kconfigwidgets-devel-32bit-5.10.0-21.1 kcoreaddons-devel-32bit-5.10.0-21.1 kcoreaddons-devel-debuginfo-32bit-5.10.0-21.1 kcrash-devel-32bit-5.10.0-21.1 kdbusaddons-devel-32bit-5.10.0-21.1 kdeclarative-components-32bit-5.10.0-21.1 kdeclarative-components-debuginfo-32bit-5.10.0-21.1 kdeclarative-devel-32bit-5.10.0-21.1 kdelibs4support-32bit-5.10.0-21.19 kdelibs4support-debuginfo-32bit-5.10.0-21.19 kdelibs4support-devel-32bit-5.10.0-21.19 kdesu-devel-32bit-5.10.0-21.1 kdewebkit-devel-32bit-5.10.0-21.1 kdnssd-framework-devel-32bit-5.10.0-21.1 kemoticons-devel-32bit-5.10.0-21.1 kglobalaccel-devel-32bit-5.10.0-21.1 kguiaddons-devel-32bit-5.10.0-21.1 khtml-devel-32bit-5.10.0-21.1 ki18n-devel-32bit-5.10.0-21.1 kiconthemes-devel-32bit-5.10.0-21.1 kiconthemes-devel-debuginfo-32bit-5.10.0-21.1 kidletime-devel-32bit-5.10.0-21.1 kimageformats-32bit-5.10.0-21.1 kimageformats-debuginfo-32bit-5.10.0-21.1 kinit-32bit-5.10.0-21.1 kinit-debuginfo-32bit-5.10.0-21.1 kio-32bit-5.10.0-21.4 kio-core-32bit-5.10.0-21.4 kio-core-debuginfo-32bit-5.10.0-21.4 kio-debuginfo-32bit-5.10.0-21.4 kio-devel-32bit-5.10.0-21.4 kitemmodels-devel-32bit-5.10.0-21.1 kitemviews-devel-32bit-5.10.0-21.1 kjobwidgets-devel-32bit-5.10.0-21.1 kjs-devel-32bit-5.10.0-21.1 kjs-devel-debuginfo-32bit-5.10.0-21.1 kjsembed-devel-32bit-5.10.0-21.1 kjsembed-devel-debuginfo-32bit-5.10.0-21.1 kmediaplayer-devel-32bit-5.10.0-21.1 knewstuff-devel-32bit-5.10.0-21.1 knotifications-devel-32bit-5.10.0-21.1 knotifyconfig-devel-32bit-5.10.0-21.1 kpackage-32bit-5.10.0-15.1 kpackage-debuginfo-32bit-5.10.0-15.1 kpackage-devel-32bit-5.10.0-15.1 kparts-devel-32bit-5.10.0-21.1 kpeople5-32bit-5.10.0-8.1 kpeople5-debuginfo-32bit-5.10.0-8.1 kpeople5-devel-32bit-5.10.0-8.1 kplotting-devel-32bit-5.10.0-21.1 kpty-devel-32bit-5.10.0-21.1 kross-32bit-5.10.0-21.1 kross-debuginfo-32bit-5.10.0-21.1 kross-devel-32bit-5.10.0-21.1 kross-devel-debuginfo-32bit-5.10.0-21.1 krunner-devel-32bit-5.10.0-21.1 kservice-32bit-5.10.0-21.1 kservice-debuginfo-32bit-5.10.0-21.1 kservice-devel-32bit-5.10.0-21.1 ktexteditor-32bit-5.10.0-21.1 ktexteditor-debuginfo-32bit-5.10.0-21.1 ktexteditor-devel-32bit-5.10.0-21.1 ktextwidgets-devel-32bit-5.10.0-21.1 kunitconversion-devel-32bit-5.10.0-21.1 kwallet-devel-32bit-5.10.0-21.1 kwidgetsaddons-devel-32bit-5.10.0-21.1 kwindowsystem-devel-32bit-5.10.0-22.1 kxmlgui-devel-32bit-5.10.0-21.1 kxmlrpcclient5-devel-32bit-5.10.0-8.1 libKF5Activities5-32bit-5.10.0-21.1 libKF5Activities5-debuginfo-32bit-5.10.0-21.1 libKF5Archive5-32bit-5.10.0-21.1 libKF5Archive5-debuginfo-32bit-5.10.0-21.1 libKF5Attica5-32bit-5.10.0-21.1 libKF5Attica5-debuginfo-32bit-5.10.0-21.1 libKF5Auth5-32bit-5.10.0-21.1 libKF5Auth5-debuginfo-32bit-5.10.0-21.1 libKF5Bookmarks5-32bit-5.10.0-21.1 libKF5Bookmarks5-debuginfo-32bit-5.10.0-21.1 libKF5Codecs5-32bit-5.10.0-21.1 libKF5Codecs5-debuginfo-32bit-5.10.0-21.1 libKF5Completion5-32bit-5.10.0-21.1 libKF5Completion5-debuginfo-32bit-5.10.0-21.1 libKF5ConfigCore5-32bit-5.10.0-21.1 libKF5ConfigCore5-debuginfo-32bit-5.10.0-21.1 libKF5ConfigGui5-32bit-5.10.0-21.1 libKF5ConfigGui5-debuginfo-32bit-5.10.0-21.1 libKF5ConfigWidgets5-32bit-5.10.0-21.1 libKF5ConfigWidgets5-debuginfo-32bit-5.10.0-21.1 libKF5CoreAddons5-32bit-5.10.0-21.1 libKF5CoreAddons5-debuginfo-32bit-5.10.0-21.1 libKF5Crash5-32bit-5.10.0-21.1 libKF5Crash5-debuginfo-32bit-5.10.0-21.1 libKF5DBusAddons5-32bit-5.10.0-21.1 libKF5DBusAddons5-debuginfo-32bit-5.10.0-21.1 libKF5DNSSD5-32bit-5.10.0-21.1 libKF5DNSSD5-debuginfo-32bit-5.10.0-21.1 libKF5Declarative5-32bit-5.10.0-21.1 libKF5Declarative5-debuginfo-32bit-5.10.0-21.1 libKF5Emoticons5-32bit-5.10.0-21.1 libKF5Emoticons5-debuginfo-32bit-5.10.0-21.1 libKF5GlobalAccel5-32bit-5.10.0-21.1 libKF5GlobalAccel5-debuginfo-32bit-5.10.0-21.1 libKF5GuiAddons5-32bit-5.10.0-21.1 libKF5GuiAddons5-debuginfo-32bit-5.10.0-21.1 libKF5I18n5-32bit-5.10.0-21.1 libKF5I18n5-debuginfo-32bit-5.10.0-21.1 libKF5IconThemes5-32bit-5.10.0-21.1 libKF5IconThemes5-debuginfo-32bit-5.10.0-21.1 libKF5IdleTime5-32bit-5.10.0-21.1 libKF5IdleTime5-debuginfo-32bit-5.10.0-21.1 libKF5ItemModels5-32bit-5.10.0-21.1 libKF5ItemModels5-debuginfo-32bit-5.10.0-21.1 libKF5ItemViews5-32bit-5.10.0-21.1 libKF5ItemViews5-debuginfo-32bit-5.10.0-21.1 libKF5JS5-32bit-5.10.0-21.1 libKF5JS5-debuginfo-32bit-5.10.0-21.1 libKF5JSApi5-32bit-5.10.0-21.1 libKF5JSApi5-debuginfo-32bit-5.10.0-21.1 libKF5JobWidgets5-32bit-5.10.0-21.1 libKF5JobWidgets5-debuginfo-32bit-5.10.0-21.1 libKF5JsEmbed5-32bit-5.10.0-21.1 libKF5JsEmbed5-debuginfo-32bit-5.10.0-21.1 libKF5KCMUtils5-32bit-5.10.0-21.1 libKF5KCMUtils5-debuginfo-32bit-5.10.0-21.1 libKF5KDELibs4Support5-32bit-5.10.0-21.19 libKF5KDELibs4Support5-debuginfo-32bit-5.10.0-21.19 libKF5KHtml5-32bit-5.10.0-21.1 libKF5KHtml5-debuginfo-32bit-5.10.0-21.1 libKF5MediaPlayer5-32bit-5.10.0-21.1 libKF5MediaPlayer5-debuginfo-32bit-5.10.0-21.1 libKF5NetworkManagerQt-devel-32bit-5.10.0-21.1 libKF5NetworkManagerQt6-32bit-5.10.0-21.1 libKF5NetworkManagerQt6-debuginfo-32bit-5.10.0-21.1 libKF5NewStuff5-32bit-5.10.0-21.1 libKF5NewStuff5-debuginfo-32bit-5.10.0-21.1 libKF5Notifications5-32bit-5.10.0-21.1 libKF5Notifications5-debuginfo-32bit-5.10.0-21.1 libKF5NotifyConfig5-32bit-5.10.0-21.1 libKF5NotifyConfig5-debuginfo-32bit-5.10.0-21.1 libKF5Parts5-32bit-5.10.0-21.1 libKF5Parts5-debuginfo-32bit-5.10.0-21.1 libKF5Plotting5-32bit-5.10.0-21.1 libKF5Plotting5-debuginfo-32bit-5.10.0-21.1 libKF5Pty5-32bit-5.10.0-21.1 libKF5Pty5-debuginfo-32bit-5.10.0-21.1 libKF5QuickAddons5-32bit-5.10.0-21.1 libKF5QuickAddons5-debuginfo-32bit-5.10.0-21.1 libKF5Runner5-32bit-5.10.0-21.1 libKF5Runner5-debuginfo-32bit-5.10.0-21.1 libKF5Solid5-32bit-5.10.0-21.1 libKF5Solid5-debuginfo-32bit-5.10.0-21.1 libKF5SonnetCore5-32bit-5.10.0-21.3 libKF5SonnetCore5-debuginfo-32bit-5.10.0-21.3 libKF5SonnetUi5-32bit-5.10.0-21.3 libKF5SonnetUi5-debuginfo-32bit-5.10.0-21.3 libKF5Style5-32bit-5.10.0-21.1 libKF5Style5-debuginfo-32bit-5.10.0-21.1 libKF5Su5-32bit-5.10.0-21.1 libKF5Su5-debuginfo-32bit-5.10.0-21.1 libKF5TextWidgets5-32bit-5.10.0-21.1 libKF5TextWidgets5-debuginfo-32bit-5.10.0-21.1 libKF5ThreadWeaver5-32bit-5.10.0-21.1 libKF5ThreadWeaver5-debuginfo-32bit-5.10.0-21.1 libKF5UnitConversion5-32bit-5.10.0-21.1 libKF5UnitConversion5-debuginfo-32bit-5.10.0-21.1 libKF5Wallet5-32bit-5.10.0-21.1 libKF5Wallet5-debuginfo-32bit-5.10.0-21.1 libKF5WebKit5-32bit-5.10.0-21.1 libKF5WebKit5-debuginfo-32bit-5.10.0-21.1 libKF5WidgetsAddons5-32bit-5.10.0-21.1 libKF5WidgetsAddons5-debuginfo-32bit-5.10.0-21.1 libKF5WindowSystem5-32bit-5.10.0-22.1 libKF5WindowSystem5-debuginfo-32bit-5.10.0-22.1 libKF5XmlGui5-32bit-5.10.0-21.1 libKF5XmlGui5-debuginfo-32bit-5.10.0-21.1 libKF5XmlRpcClient5-32bit-5.10.0-8.1 libKF5XmlRpcClient5-debuginfo-32bit-5.10.0-8.1 libQt5Bootstrap-devel-static-32bit-5.4.1-19.1 libQt5Concurrent-devel-32bit-5.4.1-19.1 libQt5Concurrent5-32bit-5.4.1-19.1 libQt5Concurrent5-debuginfo-32bit-5.4.1-19.1 libQt5Core-devel-32bit-5.4.1-19.1 libQt5Core5-32bit-5.4.1-19.1 libQt5Core5-debuginfo-32bit-5.4.1-19.1 libQt5DBus-devel-32bit-5.4.1-19.1 libQt5DBus-devel-debuginfo-32bit-5.4.1-19.1 libQt5DBus5-32bit-5.4.1-19.1 libQt5DBus5-debuginfo-32bit-5.4.1-19.1 libQt5Gui-devel-32bit-5.4.1-19.1 libQt5Gui5-32bit-5.4.1-19.1 libQt5Gui5-debuginfo-32bit-5.4.1-19.1 libQt5Location5-32bit-5.4.1-6.1 libQt5Location5-debuginfo-32bit-5.4.1-6.1 libQt5Network-devel-32bit-5.4.1-19.1 libQt5Network5-32bit-5.4.1-19.1 libQt5Network5-debuginfo-32bit-5.4.1-19.1 libQt5OpenGL-devel-32bit-5.4.1-19.1 libQt5OpenGL5-32bit-5.4.1-19.1 libQt5OpenGL5-debuginfo-32bit-5.4.1-19.1 libQt5OpenGLExtensions-devel-static-32bit-5.4.1-19.1 libQt5PlatformSupport-devel-static-32bit-5.4.1-19.1 libQt5Positioning5-32bit-5.4.1-6.1 libQt5Positioning5-debuginfo-32bit-5.4.1-6.1 libQt5PrintSupport-devel-32bit-5.4.1-19.1 libQt5PrintSupport5-32bit-5.4.1-19.1 libQt5PrintSupport5-debuginfo-32bit-5.4.1-19.1 libQt5Sensors5-32bit-5.4.1-6.1 libQt5Sensors5-debuginfo-32bit-5.4.1-6.1 libQt5Sql-devel-32bit-5.4.1-19.1 libQt5Sql5-32bit-5.4.1-19.1 libQt5Sql5-debuginfo-32bit-5.4.1-19.1 libQt5Sql5-mysql-32bit-5.4.1-19.1 libQt5Sql5-mysql-debuginfo-32bit-5.4.1-19.1 libQt5Sql5-postgresql-32bit-5.4.1-19.1 libQt5Sql5-postgresql-debuginfo-32bit-5.4.1-19.1 libQt5Sql5-sqlite-32bit-5.4.1-19.1 libQt5Sql5-sqlite-debuginfo-32bit-5.4.1-19.1 libQt5Sql5-unixODBC-32bit-5.4.1-19.1 libQt5Sql5-unixODBC-debuginfo-32bit-5.4.1-19.1 libQt5Test-devel-32bit-5.4.1-19.1 libQt5Test5-32bit-5.4.1-19.1 libQt5Test5-debuginfo-32bit-5.4.1-19.1 libQt5WebChannel5-32bit-5.4.1-4.1 libQt5WebChannel5-debuginfo-32bit-5.4.1-4.1 libQt5WebKit5-32bit-5.4.1-7.2 libQt5WebKit5-debuginfo-32bit-5.4.1-7.2 libQt5WebKit5-devel-32bit-5.4.1-7.2 libQt5WebKitWidgets-devel-32bit-5.4.1-7.2 libQt5WebKitWidgets5-32bit-5.4.1-7.2 libQt5WebKitWidgets5-debuginfo-32bit-5.4.1-7.2 libQt5WebSockets5-32bit-5.4.1-6.1 libQt5WebSockets5-debuginfo-32bit-5.4.1-6.1 libQt5Widgets-devel-32bit-5.4.1-19.1 libQt5Widgets5-32bit-5.4.1-19.1 libQt5Widgets5-debuginfo-32bit-5.4.1-19.1 libQt5X11Extras5-32bit-5.4.1-6.1 libQt5X11Extras5-debuginfo-32bit-5.4.1-6.1 libQt5Xml-devel-32bit-5.4.1-19.1 libQt5Xml5-32bit-5.4.1-19.1 libQt5Xml5-debuginfo-32bit-5.4.1-19.1 libQt5XmlPatterns5-32bit-5.4.1-6.1 libQt5XmlPatterns5-debuginfo-32bit-5.4.1-6.1 libQtQuick5-32bit-5.4.1-8.2 libQtQuick5-debuginfo-32bit-5.4.1-8.2 libkwalletbackend5-5-32bit-5.10.0-21.1 libkwalletbackend5-5-debuginfo-32bit-5.10.0-21.1 libqt5-qtbase-examples-32bit-5.4.1-19.1 libqt5-qtbase-examples-debuginfo-32bit-5.4.1-19.1 libqt5-qtdeclarative-devel-32bit-5.4.1-8.2 libqt5-qtdeclarative-devel-debuginfo-32bit-5.4.1-8.2 libqt5-qtlocation-devel-32bit-5.4.1-6.1 libqt5-qtsensors-devel-32bit-5.4.1-6.1 libqt5-qtwebchannel-devel-32bit-5.4.1-4.1 libqt5-qtwebsockets-devel-32bit-5.4.1-6.1 libqt5-qtx11extras-devel-32bit-5.4.1-6.1 libqt5-qtxmlpatterns-devel-32bit-5.4.1-6.1 plasma-framework-32bit-5.10.0-23.1 plasma-framework-components-32bit-5.10.0-23.1 plasma-framework-components-debuginfo-32bit-5.10.0-23.1 plasma-framework-debuginfo-32bit-5.10.0-23.1 plasma-framework-devel-32bit-5.10.0-23.1 plasma-framework-private-32bit-5.10.0-23.1 plasma-framework-private-debuginfo-32bit-5.10.0-23.1 solid-devel-32bit-5.10.0-21.1 sonnet-devel-32bit-5.10.0-21.3 threadweaver-devel-32bit-5.10.0-21.1 - openSUSE 13.2 (noarch): extra-cmake-modules-doc-5.10.0-21.1 kcoreaddons-lang-5.10.0-21.1 kded-lang-5.10.0-21.1 kdelibs4support-lang-5.10.0-21.19 kdesignerplugin-lang-5.10.0-21.14 kdoctools-lang-5.10.0-21.1 kinit-lang-5.10.0-21.1 kio-lang-5.10.0-21.4 kpackage-lang-5.10.0-15.1 kpeople5-lang-5.10.0-8.1 kross-lang-5.10.0-21.1 kservice-lang-5.10.0-21.1 ktexteditor-lang-5.10.0-21.1 kwalletd5-lang-5.10.0-21.1 libKF5Activities5-lang-5.10.0-21.1 libKF5Auth5-lang-5.10.0-21.1 libKF5Bookmarks5-lang-5.10.0-21.1 libKF5Codecs5-lang-5.10.0-21.1 libKF5Completion5-lang-5.10.0-21.1 libKF5ConfigCore5-lang-5.10.0-21.1 libKF5ConfigWidgets5-lang-5.10.0-21.1 libKF5DBusAddons5-lang-5.10.0-21.1 libKF5DNSSD5-lang-5.10.0-21.1 libKF5Declarative5-lang-5.10.0-21.1 libKF5GlobalAccel5-lang-5.10.0-21.1 libKF5I18n5-lang-5.10.0-21.1 libKF5IconThemes5-lang-5.10.0-21.1 libKF5ItemViews5-lang-5.10.0-21.1 libKF5JobWidgets5-lang-5.10.0-21.1 libKF5JsEmbed5-lang-5.10.0-21.1 libKF5KCMUtils5-lang-5.10.0-21.1 libKF5KHtml5-lang-5.10.0-21.1 libKF5NewStuff5-lang-5.10.0-21.1 libKF5Notifications5-lang-5.10.0-21.1 libKF5NotifyConfig5-lang-5.10.0-21.1 libKF5Parts5-lang-5.10.0-21.1 libKF5Pty5-lang-5.10.0-21.1 libKF5Solid5-lang-5.10.0-21.1 libKF5SonnetCore5-lang-5.10.0-21.3 libKF5Style5-lang-5.10.0-21.1 libKF5Su5-lang-5.10.0-21.1 libKF5TextWidgets5-lang-5.10.0-21.1 libKF5UnitConversion5-lang-5.10.0-21.1 libKF5WidgetsAddons5-lang-5.10.0-21.1 libKF5WindowSystem5-lang-5.10.0-22.1 libKF5XmlGui5-lang-5.10.0-21.1 libKF5XmlRpcClient5-lang-5.10.0-8.1 libQt5Core-private-headers-devel-5.4.1-19.1 libQt5DBus-private-headers-devel-5.4.1-19.1 libQt5Gui-private-headers-devel-5.4.1-19.1 libQt5Network-private-headers-devel-5.4.1-19.1 libQt5OpenGL-private-headers-devel-5.4.1-19.1 libQt5PlatformSupport-private-headers-devel-5.4.1-19.1 libQt5PrintSupport-private-headers-devel-5.4.1-19.1 libQt5Sql-private-headers-devel-5.4.1-19.1 libQt5Test-private-headers-devel-5.4.1-19.1 libQt5WebKit-private-headers-devel-5.4.1-7.2 libQt5WebKitWidgets-private-headers-devel-5.4.1-7.2 libQt5Widgets-private-headers-devel-5.4.1-19.1 libqt5-qtbase-private-headers-devel-5.4.1-19.1 libqt5-qtdeclarative-private-headers-devel-5.4.1-8.2 libqt5-qtlocation-private-headers-devel-5.4.1-6.1 libqt5-qtsensors-private-headers-devel-5.4.1-6.1 libqt5-qtwebchannel-private-headers-devel-5.4.1-4.1 libqt5-qtwebsockets-private-headers-devel-5.4.1-6.1 libqt5-qtxmlpatterns-private-headers-devel-5.4.1-6.1 plasma-framework-lang-5.10.0-23.1 References:

1 0

openSUSE-RU-2015:0911-1: moderate: Recommended update for docbook-xsl-stylesheets
by maintenance＠opensuse.org 19 May '15

19 May '15

openSUSE Recommended Update: Recommended update for docbook-xsl-stylesheets ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0911-1 Rating: moderate References: #928753 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update fixes the following issue with docbook-xsl-stylesheets: - added missing template directory (bsc#928753) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-370=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): docbook-xsl-stylesheets-1.78.1+svn9743-3.7.1 docbook-xsl-stylesheets-scripts-1.78.1+svn9743-3.7.1 References: https://bugzilla.suse.com/928753

1 0

openSUSE-RU-2015:0910-1: moderate: Recommended update for fetchmsttfonts
by maintenance＠opensuse.org 19 May '15

19 May '15

openSUSE Recommended Update: Recommended update for fetchmsttfonts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0910-1 Rating: moderate References: #930338 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update of fetchmsttfonts removes the server "voxel" from the download rotation list, as it is not present anymore. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-368=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-368=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): fetchmsttfonts-11.4-17.3.1 - openSUSE 13.1 (noarch): fetchmsttfonts-11.4-15.3.1 References: https://bugzilla.suse.com/930338

1 0

openSUSE-RU-2015:0909-1: moderate: Recommended update for apache2
by maintenance＠opensuse.org 19 May '15

19 May '15

openSUSE Recommended Update: Recommended update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0909-1 Rating: moderate References: #869790 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides fixes the following issue for apache2: - fix split-logfile2 script (bnc#869790) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-369=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-369=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-2.4.10-22.1 apache2-debuginfo-2.4.10-22.1 apache2-debugsource-2.4.10-22.1 apache2-devel-2.4.10-22.1 apache2-event-2.4.10-22.1 apache2-event-debuginfo-2.4.10-22.1 apache2-example-pages-2.4.10-22.1 apache2-prefork-2.4.10-22.1 apache2-prefork-debuginfo-2.4.10-22.1 apache2-utils-2.4.10-22.1 apache2-utils-debuginfo-2.4.10-22.1 apache2-worker-2.4.10-22.1 apache2-worker-debuginfo-2.4.10-22.1 - openSUSE 13.2 (noarch): apache2-doc-2.4.10-22.1 - openSUSE 13.1 (i586 x86_64): apache2-2.4.6-6.44.1 apache2-debuginfo-2.4.6-6.44.1 apache2-debugsource-2.4.6-6.44.1 apache2-devel-2.4.6-6.44.1 apache2-event-2.4.6-6.44.1 apache2-event-debuginfo-2.4.6-6.44.1 apache2-example-pages-2.4.6-6.44.1 apache2-prefork-2.4.6-6.44.1 apache2-prefork-debuginfo-2.4.6-6.44.1 apache2-utils-2.4.6-6.44.1 apache2-utils-debuginfo-2.4.6-6.44.1 apache2-worker-2.4.6-6.44.1 apache2-worker-debuginfo-2.4.6-6.44.1 - openSUSE 13.1 (noarch): apache2-doc-2.4.6-6.44.1 References: https://bugzilla.suse.com/869790

1 0

openSUSE-RU-2015:0908-1: moderate: Recommended update for i3lock
by maintenance＠opensuse.org 19 May '15

19 May '15

openSUSE Recommended Update: Recommended update for i3lock ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0908-1 Rating: moderate References: #930330 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update adds xdpyinfo as a missing dependency to the i3lock-xlock-compat package. (boo#930330) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-367=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-367=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): i3lock-2.5-3.3.1 i3lock-debuginfo-2.5-3.3.1 i3lock-debugsource-2.5-3.3.1 i3lock-xlock-compat-2.5-3.3.1 - openSUSE 13.1 (i586 x86_64): i3lock-2.4.1-2.3.1 i3lock-debuginfo-2.4.1-2.3.1 i3lock-debugsource-2.4.1-2.3.1 References: https://bugzilla.suse.com/930330

1 0

openSUSE-SU-2015:0906-1: moderate: Security update for clamav
by opensuse-security＠opensuse.org 19 May '15

19 May '15

openSUSE Security Update: Security update for clamav ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0906-1 Rating: moderate References: #929192 Cross-References: CVE-2015-2170 CVE-2015-2221 CVE-2015-2222 CVE-2015-2305 CVE-2015-2668 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: The ClamAV antivirus engine was updated to version 0.98.7 to fix several security and non-security issues. The following vulnerabilities were fixed (bsc#929192): * CVE-2015-2170: Fix crash in upx decoder with crafted file. Discovered and patch supplied by Sebastian Andrzej Siewior. * CVE-2015-2221: Fix infinite loop condition on crafted y0da cryptor file. Identified and patch suggested by Sebastian Andrzej Siewior. * CVE-2015-2222: Fix crash on crafted petite packed file. Reported and patch supplied by Sebastian Andrzej Siewior. * CVE-2015-2668: Fix an infinite loop condition on a crafted "xz" archive file. This was reported by Dimitri Kirchner and Goulven Guiheux. * CVE-2015-2305: Apply upstream patch for possible heap overflow in Henry Spencer's regex library. The following bugfixes were applyed (bsc#929192): * Fix false negatives on files within iso9660 containers. This issue was reported by Minzhuan Gong. * Fix a couple crashes on crafted upack packed file. Identified and patches supplied by Sebastian Andrzej Siewior. * Fix a crash during algorithmic detection on crafted PE file. Identified and patch supplied by Sebastian Andrzej Siewior. * Fix compilation error after ./configure --disable-pthreads. Reported and fix suggested by John E. Krokes. * Fix segfault scanning certain HTML files. Reported with sample by Kai Risku. * Improve detections within xar/pkg files. * Improvements to PDF processing: decryption, escape sequence handling, and file property collection. * Scanning/analysis of additional Microsoft Office 2003 XML format. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-366=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-366=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): clamav-0.98.7-2.16.1 clamav-debuginfo-0.98.7-2.16.1 clamav-debugsource-0.98.7-2.16.1 - openSUSE 13.1 (i586 x86_64): clamav-0.98.7-33.1 clamav-debuginfo-0.98.7-33.1 clamav-debugsource-0.98.7-33.1 References: https://www.suse.com/security/cve/CVE-2015-2170.html https://www.suse.com/security/cve/CVE-2015-2221.html https://www.suse.com/security/cve/CVE-2015-2222.html https://www.suse.com/security/cve/CVE-2015-2305.html https://www.suse.com/security/cve/CVE-2015-2668.html https://bugzilla.suse.com/929192

1 0

openSUSE-SU-2015:0905-1: moderate: Security update for docker
by opensuse-security＠opensuse.org 19 May '15

19 May '15

openSUSE Security Update: Security update for docker ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0905-1 Rating: moderate References: #930235 Cross-References: CVE-2015-3627 CVE-2015-3629 CVE-2015-3630 CVE-2015-3631 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: docker was updated to version 1.6.1 to fix several security and non-security issues. - Updated to version 1.6.1 (2015-05-07) [bnc#930235] * Security - Fix read/write /proc paths (CVE-2015-3630) - Prohibit VOLUME /proc and VOLUME / (CVE-2015-3631) - Fix opening of file-descriptor 1 (CVE-2015-3627) - Fix symlink traversal on container respawn allowing local privilege escalation (CVE-2015-3629) - Prohibit mount of /sys * Runtime - Update Apparmor policy to not allow mounts - Updated libcontainer-apparmor-fixes.patch: adapt patch to reflect changes introduced by docker 1.6.1 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-365=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (x86_64): docker-1.6.1-28.1 docker-debuginfo-1.6.1-28.1 docker-debugsource-1.6.1-28.1 - openSUSE 13.2 (noarch): docker-bash-completion-1.6.1-28.1 docker-zsh-completion-1.6.1-28.1 References: https://www.suse.com/security/cve/CVE-2015-3627.html https://www.suse.com/security/cve/CVE-2015-3629.html https://www.suse.com/security/cve/CVE-2015-3630.html https://www.suse.com/security/cve/CVE-2015-3631.html https://bugzilla.suse.com/930235

1 0

openSUSE-SU-2015:0894-1: important: Security update for qemu
by opensuse-security＠opensuse.org 18 May '15

18 May '15

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0894-1 Rating: important References: #929339 Cross-References: CVE-2015-3456 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: qemu was updated to fix a security issue: * CVE-2015-3456: Fixed a buffer overflow in the floppy drive emulation, which could be used to denial of service attacks or potential code execution against the host. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-363=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): qemu-1.6.2-4.8.1 qemu-debuginfo-1.6.2-4.8.1 qemu-debugsource-1.6.2-4.8.1 qemu-guest-agent-1.6.2-4.8.1 qemu-guest-agent-debuginfo-1.6.2-4.8.1 qemu-lang-1.6.2-4.8.1 qemu-linux-user-1.6.2-4.8.1 qemu-linux-user-debuginfo-1.6.2-4.8.1 qemu-linux-user-debugsource-1.6.2-4.8.1 qemu-tools-1.6.2-4.8.1 qemu-tools-debuginfo-1.6.2-4.8.1 - openSUSE 13.1 (noarch): qemu-ipxe-1.0.0-4.8.1 qemu-seabios-1.7.2.2-4.8.1 qemu-sgabios-8-4.8.1 qemu-vgabios-0.6c-4.8.1 References: https://www.suse.com/security/cve/CVE-2015-3456.html https://bugzilla.suse.com/929339

1 0

openSUSE-SU-2015:0893-1: important: Security update for qemu
by opensuse-security＠opensuse.org 18 May '15

18 May '15

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0893-1 Rating: important References: #929339 Cross-References: CVE-2015-3456 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Qemu was updated to v2.1.3: See http://wiki.qemu-project.org/ChangeLog/2.1 for more information. This update includes a security fix: * CVE-2015-3456: Fixed a buffer overflow in the floppy drive emulation, which could be used to denial of service attacks or potential code execution against the host. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-364=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libcacard-debugsource-2.1.3-4.1 libcacard-devel-2.1.3-4.1 libcacard0-2.1.3-4.1 libcacard0-debuginfo-2.1.3-4.1 qemu-2.1.3-4.1 qemu-arm-2.1.3-4.1 qemu-arm-debuginfo-2.1.3-4.1 qemu-block-curl-2.1.3-4.1 qemu-block-curl-debuginfo-2.1.3-4.1 qemu-debugsource-2.1.3-4.1 qemu-extra-2.1.3-4.1 qemu-extra-debuginfo-2.1.3-4.1 qemu-guest-agent-2.1.3-4.1 qemu-guest-agent-debuginfo-2.1.3-4.1 qemu-ksm-2.1.3-4.1 qemu-kvm-2.1.3-4.1 qemu-lang-2.1.3-4.1 qemu-linux-user-2.1.3-4.1 qemu-linux-user-debuginfo-2.1.3-4.1 qemu-linux-user-debugsource-2.1.3-4.1 qemu-ppc-2.1.3-4.1 qemu-ppc-debuginfo-2.1.3-4.1 qemu-s390-2.1.3-4.1 qemu-s390-debuginfo-2.1.3-4.1 qemu-tools-2.1.3-4.1 qemu-tools-debuginfo-2.1.3-4.1 qemu-x86-2.1.3-4.1 qemu-x86-debuginfo-2.1.3-4.1 - openSUSE 13.2 (noarch): qemu-ipxe-1.0.0-4.1 qemu-seabios-1.7.5-4.1 qemu-sgabios-8-4.1 qemu-vgabios-1.7.5-4.1 References: https://www.suse.com/security/cve/CVE-2015-3456.html https://bugzilla.suse.com/929339

1 0

openSUSE-SU-2015:0892-1: important: Update to Firefox 31.7.0esr
by opensuse-security＠opensuse.org 18 May '15

18 May '15

openSUSE Security Update: Update to Firefox 31.7.0esr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0892-1 Rating: important References: #925368 #930622 Cross-References: CVE-2011-3079 CVE-2015-0801 CVE-2015-0807 CVE-2015-0813 CVE-2015-0815 CVE-2015-0816 CVE-2015-2708 CVE-2015-2710 CVE-2015-2713 CVE-2015-2716 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: - update to Firefox 31.7.0esr (bnc#930622) * MFSA 2015-46/CVE-2015-2708 Miscellaneous memory safety hazards * MFSA 2015-47/VE-2015-0797 (bmo#1080995) Buffer overflow parsing H.264 video with Linux Gstreamer * MFSA 2015-48/CVE-2015-2710 (bmo#1149542) Buffer overflow with SVG content and CSS * MFSA 2015-51/CVE-2015-2713 (bmo#1153478) Use-after-free during text processing with vertical text enabled * MFSA 2015-54/CVE-2015-2716 (bmo#1140537) Buffer overflow when parsing compressed XML * MFSA 2015-57/CVE-2011-3079 (bmo#1087565) Privilege escalation through IPC channel messages Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-15=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): MozillaFirefox-31.7.0-140.1 MozillaFirefox-branding-upstream-31.7.0-140.1 MozillaFirefox-buildsymbols-31.7.0-140.1 MozillaFirefox-debuginfo-31.7.0-140.1 MozillaFirefox-debugsource-31.7.0-140.1 MozillaFirefox-devel-31.7.0-140.1 MozillaFirefox-translations-common-31.7.0-140.1 MozillaFirefox-translations-other-31.7.0-140.1 References: https://www.suse.com/security/cve/CVE-2011-3079.html https://www.suse.com/security/cve/CVE-2015-0801.html https://www.suse.com/security/cve/CVE-2015-0807.html https://www.suse.com/security/cve/CVE-2015-0813.html https://www.suse.com/security/cve/CVE-2015-0815.html https://www.suse.com/security/cve/CVE-2015-0816.html https://www.suse.com/security/cve/CVE-2015-2708.html https://www.suse.com/security/cve/CVE-2015-2710.html https://www.suse.com/security/cve/CVE-2015-2713.html https://www.suse.com/security/cve/CVE-2015-2716.html https://bugzilla.suse.com/925368 https://bugzilla.suse.com/930622

1 0

openSUSE-SU-2015:0890-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 15 May '15

15 May '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0890-1 Rating: important References: #930677 Cross-References: CVE-2015-3044 CVE-2015-3077 CVE-2015-3078 CVE-2015-3079 CVE-2015-3080 CVE-2015-3081 CVE-2015-3082 CVE-2015-3083 CVE-2015-3084 CVE-2015-3085 CVE-2015-3086 CVE-2015-3087 CVE-2015-3088 CVE-2015-3089 CVE-2015-3090 CVE-2015-3091 CVE-2015-3092 CVE-2015-3093 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: The Adobe flash-player package was updated to version 11.2.202.460 to fix several security issues. The following vulnerabilities were fixed (bsc#930677): * APSB15-09, CVE-2015-3044, CVE-2015-3077, CVE-2015-3078, CVE-2015-3079, CVE-2015-3080, CVE-2015-3081, CVE-2015-3082, CVE-2015-3083, CVE-2015-3084, CVE-2015-3085, CVE-2015-3086, CVE-2015-3087, CVE-2015-3088, CVE-2015-3089, CVE-2015-3090, CVE-2015-3091, CVE-2015-3092, CVE-2015-3093 More information can be found at the Adobe Security Bulletin APSB15-09: https://helpx.adobe.com/security/products/flash-player/apsb15-09.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-14=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): flash-player-11.2.202.460-161.1 flash-player-gnome-11.2.202.460-161.1 flash-player-kde4-11.2.202.460-161.1 References: https://www.suse.com/security/cve/CVE-2015-3044.html https://www.suse.com/security/cve/CVE-2015-3077.html https://www.suse.com/security/cve/CVE-2015-3078.html https://www.suse.com/security/cve/CVE-2015-3079.html https://www.suse.com/security/cve/CVE-2015-3080.html https://www.suse.com/security/cve/CVE-2015-3081.html https://www.suse.com/security/cve/CVE-2015-3082.html https://www.suse.com/security/cve/CVE-2015-3083.html https://www.suse.com/security/cve/CVE-2015-3084.html https://www.suse.com/security/cve/CVE-2015-3085.html https://www.suse.com/security/cve/CVE-2015-3086.html https://www.suse.com/security/cve/CVE-2015-3087.html https://www.suse.com/security/cve/CVE-2015-3088.html https://www.suse.com/security/cve/CVE-2015-3089.html https://www.suse.com/security/cve/CVE-2015-3090.html https://www.suse.com/security/cve/CVE-2015-3091.html https://www.suse.com/security/cve/CVE-2015-3092.html https://www.suse.com/security/cve/CVE-2015-3093.html https://bugzilla.suse.com/930677

1 0

openSUSE-RU-2015:0883-1: moderate: Recommended update for tigervnc
by maintenance＠opensuse.org 15 May '15

15 May '15

openSUSE Recommended Update: Recommended update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0883-1 Rating: moderate References: #929685 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update fixes the following issue with tigervnc: - fix building on armv7l (bnc#929685) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-362=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): tigervnc-1.4.1-6.32.1 tigervnc-debuginfo-1.4.1-6.32.1 tigervnc-debugsource-1.4.1-6.32.1 xorg-x11-Xvnc-1.4.1-6.32.1 xorg-x11-Xvnc-debuginfo-1.4.1-6.32.1 References: https://bugzilla.suse.com/929685

1 0

openSUSE-SU-2015:0861-1: moderate: Security update for curl
by opensuse-security＠opensuse.org 12 May '15

12 May '15

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0861-1 Rating: moderate References: #928533 Cross-References: CVE-2015-3153 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: curl was updated to 7.42.1 to fix one security issue. The following vulnerability was fixed: * CVE-2015-3153: curl could have sent sensitive HTTP headers also to proxies (bnc#928533) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-356=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-356=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): curl-7.42.1-11.1 curl-debuginfo-7.42.1-11.1 curl-debugsource-7.42.1-11.1 libcurl-devel-7.42.1-11.1 libcurl4-7.42.1-11.1 libcurl4-debuginfo-7.42.1-11.1 - openSUSE 13.2 (x86_64): libcurl-devel-32bit-7.42.1-11.1 libcurl4-32bit-7.42.1-11.1 libcurl4-debuginfo-32bit-7.42.1-11.1 - openSUSE 13.1 (i586 x86_64): curl-7.42.1-2.42.1 curl-debuginfo-7.42.1-2.42.1 curl-debugsource-7.42.1-2.42.1 libcurl-devel-7.42.1-2.42.1 libcurl4-7.42.1-2.42.1 libcurl4-debuginfo-7.42.1-2.42.1 - openSUSE 13.1 (x86_64): libcurl-devel-32bit-7.42.1-2.42.1 libcurl4-32bit-7.42.1-2.42.1 libcurl4-debuginfo-32bit-7.42.1-2.42.1 References: https://www.suse.com/security/cve/CVE-2015-3153.html https://bugzilla.suse.com/928533

1 0

openSUSE-SU-2015:0860-1: Security update for libssh
by opensuse-security＠opensuse.org 12 May '15

12 May '15

openSUSE Security Update: Security update for libssh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0860-1 Rating: low References: #928323 Cross-References: CVE-2015-3146 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: libssh was updated to fix one security issue. The following vulnerability was fixed: * CVE-2015-3146: Specially crafted packages inserted into a connection could have lead to a client or server process crash via a null pointer dereference. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-355=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-355=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libssh-debugsource-0.6.3-2.7.1 libssh-devel-0.6.3-2.7.1 libssh-devel-doc-0.6.3-2.7.1 libssh4-0.6.3-2.7.1 libssh4-debuginfo-0.6.3-2.7.1 - openSUSE 13.2 (x86_64): libssh4-32bit-0.6.3-2.7.1 libssh4-debuginfo-32bit-0.6.3-2.7.1 - openSUSE 13.1 (i586 x86_64): libssh-debugsource-0.5.5-2.15.1 libssh-devel-0.5.5-2.15.1 libssh-devel-doc-0.5.5-2.15.1 libssh4-0.5.5-2.15.1 libssh4-debuginfo-0.5.5-2.15.1 - openSUSE 13.1 (x86_64): libssh4-32bit-0.5.5-2.15.1 libssh4-debuginfo-32bit-0.5.5-2.15.1 References: https://www.suse.com/security/cve/CVE-2015-3146.html https://bugzilla.suse.com/928323

1 0

openSUSE-SU-2015:0859-1: moderate: Security update for libreoffice
by opensuse-security＠opensuse.org 12 May '15

12 May '15

openSUSE Security Update: Security update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0859-1 Rating: moderate References: #881214 #919409 Cross-References: CVE-2015-1774 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: LibreOffice was updated to 4.3.7 to fix one security issue and a number of bugs. The following vulnerability was fixed: * CVE-2015-1774: Specially crafted HWP documents could have led to an application crash or possibly the execution of arbitrary code (boo#919409) The following non-security bugs were fixed: * boo#881214: Failed to launch reprots wizard in libreoffice-base with error "java.lang.NoClassDefFoundError" In addition this update contains all upstream fixes of the 4.3.7 series. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-357=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libreoffice-4.3.7.2-18.1 libreoffice-base-4.3.7.2-18.1 libreoffice-base-debuginfo-4.3.7.2-18.1 libreoffice-base-drivers-mysql-4.3.7.2-18.1 libreoffice-base-drivers-mysql-debuginfo-4.3.7.2-18.1 libreoffice-base-drivers-postgresql-4.3.7.2-18.1 libreoffice-base-drivers-postgresql-debuginfo-4.3.7.2-18.1 libreoffice-calc-4.3.7.2-18.1 libreoffice-calc-debuginfo-4.3.7.2-18.1 libreoffice-calc-extensions-4.3.7.2-18.1 libreoffice-debuginfo-4.3.7.2-18.1 libreoffice-debugsource-4.3.7.2-18.1 libreoffice-draw-4.3.7.2-18.1 libreoffice-draw-debuginfo-4.3.7.2-18.1 libreoffice-filters-optional-4.3.7.2-18.1 libreoffice-gnome-4.3.7.2-18.1 libreoffice-gnome-debuginfo-4.3.7.2-18.1 libreoffice-impress-4.3.7.2-18.1 libreoffice-impress-debuginfo-4.3.7.2-18.1 libreoffice-kde4-4.3.7.2-18.1 libreoffice-kde4-debuginfo-4.3.7.2-18.1 libreoffice-mailmerge-4.3.7.2-18.1 libreoffice-math-4.3.7.2-18.1 libreoffice-math-debuginfo-4.3.7.2-18.1 libreoffice-officebean-4.3.7.2-18.1 libreoffice-officebean-debuginfo-4.3.7.2-18.1 libreoffice-pyuno-4.3.7.2-18.1 libreoffice-pyuno-debuginfo-4.3.7.2-18.1 libreoffice-sdk-4.3.7.2-18.1 libreoffice-sdk-debuginfo-4.3.7.2-18.1 libreoffice-sdk-doc-4.3.7.2-18.1 libreoffice-writer-4.3.7.2-18.1 libreoffice-writer-debuginfo-4.3.7.2-18.1 libreoffice-writer-extensions-4.3.7.2-18.1 - openSUSE 13.2 (noarch): libreoffice-branding-upstream-4.3.7.2-18.1 libreoffice-icon-theme-crystal-4.3.7.2-18.1 libreoffice-icon-theme-galaxy-4.3.7.2-18.1 libreoffice-icon-theme-hicontrast-4.3.7.2-18.1 libreoffice-icon-theme-oxygen-4.3.7.2-18.1 libreoffice-icon-theme-sifr-4.3.7.2-18.1 libreoffice-icon-theme-tango-4.3.7.2-18.1 libreoffice-l10n-af-4.3.7.2-18.1 libreoffice-l10n-ar-4.3.7.2-18.1 libreoffice-l10n-as-4.3.7.2-18.1 libreoffice-l10n-bg-4.3.7.2-18.1 libreoffice-l10n-bn-4.3.7.2-18.1 libreoffice-l10n-br-4.3.7.2-18.1 libreoffice-l10n-ca-4.3.7.2-18.1 libreoffice-l10n-cs-4.3.7.2-18.1 libreoffice-l10n-cy-4.3.7.2-18.1 libreoffice-l10n-da-4.3.7.2-18.1 libreoffice-l10n-de-4.3.7.2-18.1 libreoffice-l10n-dz-4.3.7.2-18.1 libreoffice-l10n-el-4.3.7.2-18.1 libreoffice-l10n-en-4.3.7.2-18.1 libreoffice-l10n-es-4.3.7.2-18.1 libreoffice-l10n-et-4.3.7.2-18.1 libreoffice-l10n-eu-4.3.7.2-18.1 libreoffice-l10n-fa-4.3.7.2-18.1 libreoffice-l10n-fi-4.3.7.2-18.1 libreoffice-l10n-fr-4.3.7.2-18.1 libreoffice-l10n-ga-4.3.7.2-18.1 libreoffice-l10n-gl-4.3.7.2-18.1 libreoffice-l10n-gu-4.3.7.2-18.1 libreoffice-l10n-he-4.3.7.2-18.1 libreoffice-l10n-hi-4.3.7.2-18.1 libreoffice-l10n-hr-4.3.7.2-18.1 libreoffice-l10n-hu-4.3.7.2-18.1 libreoffice-l10n-it-4.3.7.2-18.1 libreoffice-l10n-ja-4.3.7.2-18.1 libreoffice-l10n-kk-4.3.7.2-18.1 libreoffice-l10n-kn-4.3.7.2-18.1 libreoffice-l10n-ko-4.3.7.2-18.1 libreoffice-l10n-lt-4.3.7.2-18.1 libreoffice-l10n-lv-4.3.7.2-18.1 libreoffice-l10n-mai-4.3.7.2-18.1 libreoffice-l10n-ml-4.3.7.2-18.1 libreoffice-l10n-mr-4.3.7.2-18.1 libreoffice-l10n-nb-4.3.7.2-18.1 libreoffice-l10n-nl-4.3.7.2-18.1 libreoffice-l10n-nn-4.3.7.2-18.1 libreoffice-l10n-nr-4.3.7.2-18.1 libreoffice-l10n-nso-4.3.7.2-18.1 libreoffice-l10n-or-4.3.7.2-18.1 libreoffice-l10n-pa-4.3.7.2-18.1 libreoffice-l10n-pl-4.3.7.2-18.1 libreoffice-l10n-pt-BR-4.3.7.2-18.1 libreoffice-l10n-pt-PT-4.3.7.2-18.1 libreoffice-l10n-ro-4.3.7.2-18.1 libreoffice-l10n-ru-4.3.7.2-18.1 libreoffice-l10n-si-4.3.7.2-18.1 libreoffice-l10n-sk-4.3.7.2-18.1 libreoffice-l10n-sl-4.3.7.2-18.1 libreoffice-l10n-sr-4.3.7.2-18.1 libreoffice-l10n-ss-4.3.7.2-18.1 libreoffice-l10n-st-4.3.7.2-18.1 libreoffice-l10n-sv-4.3.7.2-18.1 libreoffice-l10n-ta-4.3.7.2-18.1 libreoffice-l10n-te-4.3.7.2-18.1 libreoffice-l10n-th-4.3.7.2-18.1 libreoffice-l10n-tn-4.3.7.2-18.1 libreoffice-l10n-tr-4.3.7.2-18.1 libreoffice-l10n-ts-4.3.7.2-18.1 libreoffice-l10n-uk-4.3.7.2-18.1 libreoffice-l10n-ve-4.3.7.2-18.1 libreoffice-l10n-xh-4.3.7.2-18.1 libreoffice-l10n-zh-Hans-4.3.7.2-18.1 libreoffice-l10n-zh-Hant-4.3.7.2-18.1 libreoffice-l10n-zu-4.3.7.2-18.1 References: https://www.suse.com/security/cve/CVE-2015-1774.html https://bugzilla.suse.com/881214 https://bugzilla.suse.com/919409

1 0

openSUSE-SU-2015:0858-1: moderate: Security update for pcre
by opensuse-security＠opensuse.org 12 May '15

12 May '15

openSUSE Security Update: Security update for pcre ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0858-1 Rating: moderate References: #906574 #924960 #924961 Cross-References: CVE-2014-8964 CVE-2015-2325 CVE-2015-2326 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: The regular expression library pcre was updated to 8.37 to fix three security issues and a number of bugs and correctness issues. The following vulnerabilities were fixed: * CVE-2015-2325: Specially crafted regular expressions could have caused a heap buffer overlow in compile_branch(), potentially allowing the execution of arbitrary code. (boo#924960) * CVE-2015-2326: Specially crafted regular expressions could have caused a heap buffer overlow in pcre_compile2(), potentially allowing the execution of arbitrary code. [boo#924961] * CVE-2014-8964: Specially crafted regular expression could have caused a denial of service (crash) or have other unspecified impact. [boo#906574] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-353=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-353=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libpcre1-8.37-3.5.1 libpcre1-debuginfo-8.37-3.5.1 libpcre16-0-8.37-3.5.1 libpcre16-0-debuginfo-8.37-3.5.1 libpcrecpp0-8.37-3.5.1 libpcrecpp0-debuginfo-8.37-3.5.1 libpcreposix0-8.37-3.5.1 libpcreposix0-debuginfo-8.37-3.5.1 pcre-debugsource-8.37-3.5.1 pcre-devel-8.37-3.5.1 pcre-devel-static-8.37-3.5.1 pcre-tools-8.37-3.5.1 pcre-tools-debuginfo-8.37-3.5.1 - openSUSE 13.2 (x86_64): libpcre1-32bit-8.37-3.5.1 libpcre1-debuginfo-32bit-8.37-3.5.1 libpcre16-0-32bit-8.37-3.5.1 libpcre16-0-debuginfo-32bit-8.37-3.5.1 libpcrecpp0-32bit-8.37-3.5.1 libpcrecpp0-debuginfo-32bit-8.37-3.5.1 libpcreposix0-32bit-8.37-3.5.1 libpcreposix0-debuginfo-32bit-8.37-3.5.1 - openSUSE 13.2 (noarch): pcre-doc-8.37-3.5.1 - openSUSE 13.1 (i586 x86_64): libpcre1-8.37-2.4.1 libpcre1-debuginfo-8.37-2.4.1 libpcre16-0-8.37-2.4.1 libpcre16-0-debuginfo-8.37-2.4.1 libpcrecpp0-8.37-2.4.1 libpcrecpp0-debuginfo-8.37-2.4.1 libpcreposix0-8.37-2.4.1 libpcreposix0-debuginfo-8.37-2.4.1 pcre-debugsource-8.37-2.4.1 pcre-devel-8.37-2.4.1 pcre-devel-static-8.37-2.4.1 pcre-tools-8.37-2.4.1 pcre-tools-debuginfo-8.37-2.4.1 - openSUSE 13.1 (x86_64): libpcre1-32bit-8.37-2.4.1 libpcre1-debuginfo-32bit-8.37-2.4.1 libpcre16-0-32bit-8.37-2.4.1 libpcre16-0-debuginfo-32bit-8.37-2.4.1 libpcrecpp0-32bit-8.37-2.4.1 libpcrecpp0-debuginfo-32bit-8.37-2.4.1 libpcreposix0-32bit-8.37-2.4.1 libpcreposix0-debuginfo-32bit-8.37-2.4.1 - openSUSE 13.1 (noarch): pcre-doc-8.37-2.4.1 References: https://www.suse.com/security/cve/CVE-2014-8964.html https://www.suse.com/security/cve/CVE-2015-2325.html https://www.suse.com/security/cve/CVE-2015-2326.html https://bugzilla.suse.com/906574 https://bugzilla.suse.com/924960 https://bugzilla.suse.com/924961

1 0

openSUSE-SU-2015:0857-1: moderate: Security update for dnsmasq
by opensuse-security＠opensuse.org 12 May '15

12 May '15

openSUSE Security Update: Security update for dnsmasq ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0857-1 Rating: moderate References: #928867 Cross-References: CVE-2015-3294 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The DNS server dnsmasq was updated to fix one security issue. The following vulnerability was fixed: * CVE-2015-3294: A remote unauthenticated attacker could have caused a denial of service (DoS) or read heap memory, potentially disclosing information such as performed DNS queries or encryption keys. (bsc#928867) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-359=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-359=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): dnsmasq-2.71-3.4.1 dnsmasq-debuginfo-2.71-3.4.1 dnsmasq-debugsource-2.71-3.4.1 dnsmasq-utils-2.71-3.4.1 dnsmasq-utils-debuginfo-2.71-3.4.1 - openSUSE 13.1 (i586 x86_64): dnsmasq-2.65-7.3.1 dnsmasq-debuginfo-2.65-7.3.1 dnsmasq-debugsource-2.65-7.3.1 dnsmasq-utils-2.65-7.3.1 dnsmasq-utils-debuginfo-2.65-7.3.1 References: https://www.suse.com/security/cve/CVE-2015-3294.html https://bugzilla.suse.com/928867

1 0

openSUSE-SU-2015:0856-1: Security update for gnu_parallel
by opensuse-security＠opensuse.org 12 May '15

12 May '15

openSUSE Security Update: Security update for gnu_parallel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0856-1 Rating: low References: #928664 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: GNU parallel was updated to version 20150422 to fix one security issue, several bugs and add functionality. The following vulnerability was fixed: * A local attacker could make a user overwrite one of his own files with a single byte when using --compress, --tmux, --pipe, --cat or --fifo when guessing random file names within a time window of 15 ms. [boo#928664] In addition, the update to 20150422 adds a number of bug fixes, improvements and new features. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-358=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-358=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): gnu_parallel-20150422-2.3.1 gnu_parallel-doc-20150422-2.3.1 - openSUSE 13.1 (noarch): gnu_parallel-20150422-2.3.1 gnu_parallel-doc-20150422-2.3.1 References: https://bugzilla.suse.com/928664

1 0

openSUSE-SU-2015:0855-1: important: Security update for php5
by opensuse-security＠opensuse.org 12 May '15

12 May '15

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0855-1 Rating: important References: #927147 #928408 #928506 #928511 Cross-References: CVE-2015-2783 CVE-2015-3329 CVE-2015-3330 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: PHP was updated to fix three security issues. The following vulnerabilities were fixed: * CVE-2015-3330: Specially crafted PHAR files could, when executed under Apache httpd 2.4 (apache2handler), allow arbitrary code execution (bnc#928506) * CVE-2015-3329: Specially crafted PHAR data could lead to disclosure of sensitive information due to a buffer overflow (bnc#928506) * CVE-2015-2783: Specially crafted PHAR data could lead to disclosure of sensitive information due to a buffer over-read (bnc#928511) On openSUSE 13.2, the following bug was fixed: * boo#927147: php5-fpm did not start correctly Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-352=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-352=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_php5-5.6.1-21.1 apache2-mod_php5-debuginfo-5.6.1-21.1 php5-5.6.1-21.1 php5-bcmath-5.6.1-21.1 php5-bcmath-debuginfo-5.6.1-21.1 php5-bz2-5.6.1-21.1 php5-bz2-debuginfo-5.6.1-21.1 php5-calendar-5.6.1-21.1 php5-calendar-debuginfo-5.6.1-21.1 php5-ctype-5.6.1-21.1 php5-ctype-debuginfo-5.6.1-21.1 php5-curl-5.6.1-21.1 php5-curl-debuginfo-5.6.1-21.1 php5-dba-5.6.1-21.1 php5-dba-debuginfo-5.6.1-21.1 php5-debuginfo-5.6.1-21.1 php5-debugsource-5.6.1-21.1 php5-devel-5.6.1-21.1 php5-dom-5.6.1-21.1 php5-dom-debuginfo-5.6.1-21.1 php5-enchant-5.6.1-21.1 php5-enchant-debuginfo-5.6.1-21.1 php5-exif-5.6.1-21.1 php5-exif-debuginfo-5.6.1-21.1 php5-fastcgi-5.6.1-21.1 php5-fastcgi-debuginfo-5.6.1-21.1 php5-fileinfo-5.6.1-21.1 php5-fileinfo-debuginfo-5.6.1-21.1 php5-firebird-5.6.1-21.1 php5-firebird-debuginfo-5.6.1-21.1 php5-fpm-5.6.1-21.1 php5-fpm-debuginfo-5.6.1-21.1 php5-ftp-5.6.1-21.1 php5-ftp-debuginfo-5.6.1-21.1 php5-gd-5.6.1-21.1 php5-gd-debuginfo-5.6.1-21.1 php5-gettext-5.6.1-21.1 php5-gettext-debuginfo-5.6.1-21.1 php5-gmp-5.6.1-21.1 php5-gmp-debuginfo-5.6.1-21.1 php5-iconv-5.6.1-21.1 php5-iconv-debuginfo-5.6.1-21.1 php5-imap-5.6.1-21.1 php5-imap-debuginfo-5.6.1-21.1 php5-intl-5.6.1-21.1 php5-intl-debuginfo-5.6.1-21.1 php5-json-5.6.1-21.1 php5-json-debuginfo-5.6.1-21.1 php5-ldap-5.6.1-21.1 php5-ldap-debuginfo-5.6.1-21.1 php5-mbstring-5.6.1-21.1 php5-mbstring-debuginfo-5.6.1-21.1 php5-mcrypt-5.6.1-21.1 php5-mcrypt-debuginfo-5.6.1-21.1 php5-mssql-5.6.1-21.1 php5-mssql-debuginfo-5.6.1-21.1 php5-mysql-5.6.1-21.1 php5-mysql-debuginfo-5.6.1-21.1 php5-odbc-5.6.1-21.1 php5-odbc-debuginfo-5.6.1-21.1 php5-opcache-5.6.1-21.1 php5-opcache-debuginfo-5.6.1-21.1 php5-openssl-5.6.1-21.1 php5-openssl-debuginfo-5.6.1-21.1 php5-pcntl-5.6.1-21.1 php5-pcntl-debuginfo-5.6.1-21.1 php5-pdo-5.6.1-21.1 php5-pdo-debuginfo-5.6.1-21.1 php5-pgsql-5.6.1-21.1 php5-pgsql-debuginfo-5.6.1-21.1 php5-phar-5.6.1-21.1 php5-phar-debuginfo-5.6.1-21.1 php5-posix-5.6.1-21.1 php5-posix-debuginfo-5.6.1-21.1 php5-pspell-5.6.1-21.1 php5-pspell-debuginfo-5.6.1-21.1 php5-readline-5.6.1-21.1 php5-readline-debuginfo-5.6.1-21.1 php5-shmop-5.6.1-21.1 php5-shmop-debuginfo-5.6.1-21.1 php5-snmp-5.6.1-21.1 php5-snmp-debuginfo-5.6.1-21.1 php5-soap-5.6.1-21.1 php5-soap-debuginfo-5.6.1-21.1 php5-sockets-5.6.1-21.1 php5-sockets-debuginfo-5.6.1-21.1 php5-sqlite-5.6.1-21.1 php5-sqlite-debuginfo-5.6.1-21.1 php5-suhosin-5.6.1-21.1 php5-suhosin-debuginfo-5.6.1-21.1 php5-sysvmsg-5.6.1-21.1 php5-sysvmsg-debuginfo-5.6.1-21.1 php5-sysvsem-5.6.1-21.1 php5-sysvsem-debuginfo-5.6.1-21.1 php5-sysvshm-5.6.1-21.1 php5-sysvshm-debuginfo-5.6.1-21.1 php5-tidy-5.6.1-21.1 php5-tidy-debuginfo-5.6.1-21.1 php5-tokenizer-5.6.1-21.1 php5-tokenizer-debuginfo-5.6.1-21.1 php5-wddx-5.6.1-21.1 php5-wddx-debuginfo-5.6.1-21.1 php5-xmlreader-5.6.1-21.1 php5-xmlreader-debuginfo-5.6.1-21.1 php5-xmlrpc-5.6.1-21.1 php5-xmlrpc-debuginfo-5.6.1-21.1 php5-xmlwriter-5.6.1-21.1 php5-xmlwriter-debuginfo-5.6.1-21.1 php5-xsl-5.6.1-21.1 php5-xsl-debuginfo-5.6.1-21.1 php5-zip-5.6.1-21.1 php5-zip-debuginfo-5.6.1-21.1 php5-zlib-5.6.1-21.1 php5-zlib-debuginfo-5.6.1-21.1 - openSUSE 13.2 (noarch): php5-pear-5.6.1-21.1 - openSUSE 13.1 (i586 x86_64): apache2-mod_php5-5.4.20-52.1 apache2-mod_php5-debuginfo-5.4.20-52.1 php5-5.4.20-52.1 php5-bcmath-5.4.20-52.1 php5-bcmath-debuginfo-5.4.20-52.1 php5-bz2-5.4.20-52.1 php5-bz2-debuginfo-5.4.20-52.1 php5-calendar-5.4.20-52.1 php5-calendar-debuginfo-5.4.20-52.1 php5-ctype-5.4.20-52.1 php5-ctype-debuginfo-5.4.20-52.1 php5-curl-5.4.20-52.1 php5-curl-debuginfo-5.4.20-52.1 php5-dba-5.4.20-52.1 php5-dba-debuginfo-5.4.20-52.1 php5-debuginfo-5.4.20-52.1 php5-debugsource-5.4.20-52.1 php5-devel-5.4.20-52.1 php5-dom-5.4.20-52.1 php5-dom-debuginfo-5.4.20-52.1 php5-enchant-5.4.20-52.1 php5-enchant-debuginfo-5.4.20-52.1 php5-exif-5.4.20-52.1 php5-exif-debuginfo-5.4.20-52.1 php5-fastcgi-5.4.20-52.1 php5-fastcgi-debuginfo-5.4.20-52.1 php5-fileinfo-5.4.20-52.1 php5-fileinfo-debuginfo-5.4.20-52.1 php5-firebird-5.4.20-52.1 php5-firebird-debuginfo-5.4.20-52.1 php5-fpm-5.4.20-52.1 php5-fpm-debuginfo-5.4.20-52.1 php5-ftp-5.4.20-52.1 php5-ftp-debuginfo-5.4.20-52.1 php5-gd-5.4.20-52.1 php5-gd-debuginfo-5.4.20-52.1 php5-gettext-5.4.20-52.1 php5-gettext-debuginfo-5.4.20-52.1 php5-gmp-5.4.20-52.1 php5-gmp-debuginfo-5.4.20-52.1 php5-iconv-5.4.20-52.1 php5-iconv-debuginfo-5.4.20-52.1 php5-imap-5.4.20-52.1 php5-imap-debuginfo-5.4.20-52.1 php5-intl-5.4.20-52.1 php5-intl-debuginfo-5.4.20-52.1 php5-json-5.4.20-52.1 php5-json-debuginfo-5.4.20-52.1 php5-ldap-5.4.20-52.1 php5-ldap-debuginfo-5.4.20-52.1 php5-mbstring-5.4.20-52.1 php5-mbstring-debuginfo-5.4.20-52.1 php5-mcrypt-5.4.20-52.1 php5-mcrypt-debuginfo-5.4.20-52.1 php5-mssql-5.4.20-52.1 php5-mssql-debuginfo-5.4.20-52.1 php5-mysql-5.4.20-52.1 php5-mysql-debuginfo-5.4.20-52.1 php5-odbc-5.4.20-52.1 php5-odbc-debuginfo-5.4.20-52.1 php5-openssl-5.4.20-52.1 php5-openssl-debuginfo-5.4.20-52.1 php5-pcntl-5.4.20-52.1 php5-pcntl-debuginfo-5.4.20-52.1 php5-pdo-5.4.20-52.1 php5-pdo-debuginfo-5.4.20-52.1 php5-pgsql-5.4.20-52.1 php5-pgsql-debuginfo-5.4.20-52.1 php5-phar-5.4.20-52.1 php5-phar-debuginfo-5.4.20-52.1 php5-posix-5.4.20-52.1 php5-posix-debuginfo-5.4.20-52.1 php5-pspell-5.4.20-52.1 php5-pspell-debuginfo-5.4.20-52.1 php5-readline-5.4.20-52.1 php5-readline-debuginfo-5.4.20-52.1 php5-shmop-5.4.20-52.1 php5-shmop-debuginfo-5.4.20-52.1 php5-snmp-5.4.20-52.1 php5-snmp-debuginfo-5.4.20-52.1 php5-soap-5.4.20-52.1 php5-soap-debuginfo-5.4.20-52.1 php5-sockets-5.4.20-52.1 php5-sockets-debuginfo-5.4.20-52.1 php5-sqlite-5.4.20-52.1 php5-sqlite-debuginfo-5.4.20-52.1 php5-suhosin-5.4.20-52.1 php5-suhosin-debuginfo-5.4.20-52.1 php5-sysvmsg-5.4.20-52.1 php5-sysvmsg-debuginfo-5.4.20-52.1 php5-sysvsem-5.4.20-52.1 php5-sysvsem-debuginfo-5.4.20-52.1 php5-sysvshm-5.4.20-52.1 php5-sysvshm-debuginfo-5.4.20-52.1 php5-tidy-5.4.20-52.1 php5-tidy-debuginfo-5.4.20-52.1 php5-tokenizer-5.4.20-52.1 php5-tokenizer-debuginfo-5.4.20-52.1 php5-wddx-5.4.20-52.1 php5-wddx-debuginfo-5.4.20-52.1 php5-xmlreader-5.4.20-52.1 php5-xmlreader-debuginfo-5.4.20-52.1 php5-xmlrpc-5.4.20-52.1 php5-xmlrpc-debuginfo-5.4.20-52.1 php5-xmlwriter-5.4.20-52.1 php5-xmlwriter-debuginfo-5.4.20-52.1 php5-xsl-5.4.20-52.1 php5-xsl-debuginfo-5.4.20-52.1 php5-zip-5.4.20-52.1 php5-zip-debuginfo-5.4.20-52.1 php5-zlib-5.4.20-52.1 php5-zlib-debuginfo-5.4.20-52.1 - openSUSE 13.1 (noarch): php5-pear-5.4.20-52.1 References: https://www.suse.com/security/cve/CVE-2015-2783.html https://www.suse.com/security/cve/CVE-2015-3329.html https://www.suse.com/security/cve/CVE-2015-3330.html https://bugzilla.suse.com/927147 https://bugzilla.suse.com/928408 https://bugzilla.suse.com/928506 https://bugzilla.suse.com/928511

1 0

openSUSE-SU-2015:0854-1: Security update for libtasn1
by opensuse-security＠opensuse.org 12 May '15

12 May '15

openSUSE Security Update: Security update for libtasn1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0854-1 Rating: low References: #924828 Cross-References: CVE-2015-2806 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The ASN.1 parsing library libtasn1 was updated to fix one memory handling issue. The following vulnerability was fixed: * CVE-2015-2806: A stack-based buffer overflow in libtasn1 allowed remote attackers to have unspecified impact via unknown vectors. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-360=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-360=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libtasn1-3.7-2.4.1 libtasn1-6-3.7-2.4.1 libtasn1-6-debuginfo-3.7-2.4.1 libtasn1-debuginfo-3.7-2.4.1 libtasn1-debugsource-3.7-2.4.1 libtasn1-devel-3.7-2.4.1 - openSUSE 13.2 (x86_64): libtasn1-6-32bit-3.7-2.4.1 libtasn1-6-debuginfo-32bit-3.7-2.4.1 libtasn1-devel-32bit-3.7-2.4.1 - openSUSE 13.1 (i586 x86_64): libtasn1-3.3-3.4.1 libtasn1-6-3.3-3.4.1 libtasn1-6-debuginfo-3.3-3.4.1 libtasn1-debuginfo-3.3-3.4.1 libtasn1-debugsource-3.3-3.4.1 libtasn1-devel-3.3-3.4.1 - openSUSE 13.1 (x86_64): libtasn1-6-32bit-3.3-3.4.1 libtasn1-6-debuginfo-32bit-3.3-3.4.1 References: https://www.suse.com/security/cve/CVE-2015-2806.html https://bugzilla.suse.com/924828

1 0

openSUSE-SU-2015:0853-1: moderate: Security update for Chromium
by opensuse-security＠opensuse.org 12 May '15

12 May '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0853-1 Rating: moderate References: #929075 Cross-References: CVE-2015-1243 CVE-2015-1250 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Chromium was updated to 42.0.2311.135 to fix security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-1243: Use-after-free in DOM * CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-354=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-354=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): chromedriver-42.0.2311.135-26.1 chromedriver-debuginfo-42.0.2311.135-26.1 chromium-42.0.2311.135-26.1 chromium-debuginfo-42.0.2311.135-26.1 chromium-debugsource-42.0.2311.135-26.1 chromium-desktop-gnome-42.0.2311.135-26.1 chromium-desktop-kde-42.0.2311.135-26.1 chromium-ffmpegsumo-42.0.2311.135-26.1 chromium-ffmpegsumo-debuginfo-42.0.2311.135-26.1 - openSUSE 13.1 (i586 x86_64): chromedriver-42.0.2311.135-81.1 chromedriver-debuginfo-42.0.2311.135-81.1 chromium-42.0.2311.135-81.1 chromium-debuginfo-42.0.2311.135-81.1 chromium-debugsource-42.0.2311.135-81.1 chromium-desktop-gnome-42.0.2311.135-81.1 chromium-desktop-kde-42.0.2311.135-81.1 chromium-ffmpegsumo-42.0.2311.135-81.1 chromium-ffmpegsumo-debuginfo-42.0.2311.135-81.1 References: https://www.suse.com/security/cve/CVE-2015-1243.html https://www.suse.com/security/cve/CVE-2015-1250.html https://bugzilla.suse.com/929075

1 0

openSUSE-RU-2015:0842-1: Recommended update for prelink
by maintenance＠opensuse.org 08 May '15

08 May '15

openSUSE Recommended Update: Recommended update for prelink ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0842-1 Rating: low References: #923948 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update fixes the following issue with prelink: - fix the "dry run verbose" mode, which was actually executing the prelinking. (bnc#923948) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-350=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-350=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): prelink-20130503-2.3.1 prelink-debuginfo-20130503-2.3.1 prelink-debugsource-20130503-2.3.1 - openSUSE 13.1 (i586 x86_64): prelink-20130503-3.1 prelink-debuginfo-20130503-3.1 prelink-debugsource-20130503-3.1 References: https://bugzilla.suse.com/923948

1 0

openSUSE-RU-2015:0828-1: moderate: Recommended update for MyODBC-unixODBC
by maintenance＠opensuse.org 07 May '15

07 May '15

openSUSE Recommended Update: Recommended update for MyODBC-unixODBC ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0828-1 Rating: moderate References: #881624 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended updated fixes the following issue with MyODBC-unixODBC: - fix segfault in myodbc-install when freeing pointer (allocated with basic malloc()) using x_free()/my_free(). my_free() accesses 8 bytes before the pointer returned by malloc(), hence my_malloc() is needed [bnc#881624] Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-348=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-348=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): MyODBC-unixODBC-5.1.8-16.3.1 MyODBC-unixODBC-debuginfo-5.1.8-16.3.1 MyODBC-unixODBC-debugsource-5.1.8-16.3.1 - openSUSE 13.1 (i586 x86_64): MyODBC-unixODBC-5.1.8-13.3.1 MyODBC-unixODBC-debuginfo-5.1.8-13.3.1 MyODBC-unixODBC-debugsource-5.1.8-13.3.1 References: https://bugzilla.suse.com/881624

1 0

openSUSE-RU-2015:0827-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 07 May '15

07 May '15

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0827-1 Rating: moderate References: #928513 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: xorg-x11-server was updated to fix a regression from a previous security update. The following bug was fixed: * Fix a regression introduced by CVE-2014-8092: PutImage crashes when called with 0 height (bnc#928513). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-347=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-347=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xorg-x11-server-7.6_1.16.1-16.1 xorg-x11-server-debuginfo-7.6_1.16.1-16.1 xorg-x11-server-debugsource-7.6_1.16.1-16.1 xorg-x11-server-extra-7.6_1.16.1-16.1 xorg-x11-server-extra-debuginfo-7.6_1.16.1-16.1 xorg-x11-server-sdk-7.6_1.16.1-16.1 - openSUSE 13.1 (i586 x86_64): xorg-x11-server-7.6_1.14.3.901-19.1 xorg-x11-server-debuginfo-7.6_1.14.3.901-19.1 xorg-x11-server-debugsource-7.6_1.14.3.901-19.1 xorg-x11-server-extra-7.6_1.14.3.901-19.1 xorg-x11-server-extra-debuginfo-7.6_1.14.3.901-19.1 xorg-x11-server-sdk-7.6_1.14.3.901-19.1 References: https://www.suse.com/security/cve/CVE-2014-8092.html https://bugzilla.suse.com/928513

1 0

openSUSE-RU-2015:0826-1: important: Recommended update for tiff
by maintenance＠opensuse.org 07 May '15

07 May '15

openSUSE Recommended Update: Recommended update for tiff ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0826-1 Rating: important References: #914890 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for tiff fixes a regression introduced with the latest security update Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-349=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-349=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libtiff-devel-4.0.3-10.7.1 libtiff5-4.0.3-10.7.1 libtiff5-debuginfo-4.0.3-10.7.1 tiff-4.0.3-10.7.1 tiff-debuginfo-4.0.3-10.7.1 tiff-debugsource-4.0.3-10.7.1 - openSUSE 13.2 (x86_64): libtiff-devel-32bit-4.0.3-10.7.1 libtiff5-32bit-4.0.3-10.7.1 libtiff5-debuginfo-32bit-4.0.3-10.7.1 - openSUSE 13.1 (i586 x86_64): libtiff-devel-4.0.3-8.7.1 libtiff5-4.0.3-8.7.1 libtiff5-debuginfo-4.0.3-8.7.1 tiff-4.0.3-8.7.1 tiff-debuginfo-4.0.3-8.7.1 tiff-debugsource-4.0.3-8.7.1 - openSUSE 13.1 (x86_64): libtiff-devel-32bit-4.0.3-8.7.1 libtiff5-32bit-4.0.3-8.7.1 libtiff5-debuginfo-32bit-4.0.3-8.7.1 References: https://bugzilla.suse.com/914890

1 0

openSUSE-RU-2015:0823-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 06 May '15

06 May '15

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0823-1 Rating: moderate References: #855160 #922536 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update fixes the following issues with systemd: - address wrong dbus socket connect error message (bsc922536) - Need to remove a commit that was reverted upstream (bsc922536) - fix XDG_RUNTIME_DIR checking (bsc#855160) - fix assert failures for s->user->slice (bsc#922536) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-346=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libgudev-1_0-0-208-35.1 libgudev-1_0-0-debuginfo-208-35.1 libgudev-1_0-devel-208-35.1 libudev-devel-208-35.1 libudev-mini-devel-208-35.1 libudev-mini1-208-35.1 libudev-mini1-debuginfo-208-35.1 libudev1-208-35.1 libudev1-debuginfo-208-35.1 nss-myhostname-208-35.1 nss-myhostname-debuginfo-208-35.1 systemd-208-35.1 systemd-debuginfo-208-35.1 systemd-debugsource-208-35.1 systemd-devel-208-35.1 systemd-journal-gateway-208-35.1 systemd-journal-gateway-debuginfo-208-35.1 systemd-logger-208-35.1 systemd-mini-208-35.1 systemd-mini-debuginfo-208-35.1 systemd-mini-debugsource-208-35.1 systemd-mini-devel-208-35.1 systemd-mini-sysvinit-208-35.1 systemd-sysvinit-208-35.1 typelib-1_0-GUdev-1_0-208-35.1 udev-208-35.1 udev-debuginfo-208-35.1 udev-mini-208-35.1 udev-mini-debuginfo-208-35.1 - openSUSE 13.1 (x86_64): libgudev-1_0-0-32bit-208-35.1 libgudev-1_0-0-debuginfo-32bit-208-35.1 libudev1-32bit-208-35.1 libudev1-debuginfo-32bit-208-35.1 nss-myhostname-32bit-208-35.1 nss-myhostname-debuginfo-32bit-208-35.1 systemd-32bit-208-35.1 systemd-debuginfo-32bit-208-35.1 - openSUSE 13.1 (noarch): systemd-rpm-macros-2-35.1 References: https://bugzilla.suse.com/855160 https://bugzilla.suse.com/922536

1 0

openSUSE-RU-2015:0822-1: moderate: Recommended update for alsa-utils
by maintenance＠opensuse.org 06 May '15

06 May '15

openSUSE Recommended Update: Recommended update for alsa-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0822-1 Rating: moderate References: #928394 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for alsa-utils fixes the following issue: - Fix empty file overwrite of alsa-info.sh without wget (boo#928394) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-345=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): alsa-utils-1.0.28-5.3.1 alsa-utils-debuginfo-1.0.28-5.3.1 alsa-utils-debugsource-1.0.28-5.3.1 References: https://bugzilla.suse.com/928394

1 0

openSUSE-RU-2015:0821-1: moderate: Recommended update for q4wine
by maintenance＠opensuse.org 06 May '15

06 May '15

openSUSE Recommended Update: Recommended update for q4wine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0821-1 Rating: moderate References: #926859 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update fixes the following issues with q4wine: - Use web.archive.org until project website will be repaired. Also disable automatic opening this documentation after initial program configuring. (boo#926859) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-344=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-344=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): q4wine-1.1+r2-2.3.1 q4wine-debuginfo-1.1+r2-2.3.1 q4wine-debugsource-1.1+r2-2.3.1 - openSUSE 13.2 (noarch): q4wine-lang-1.1+r2-2.3.1 - openSUSE 13.1 (i586 x86_64): q4wine-1.0+r3-3.3.1 q4wine-debuginfo-1.0+r3-3.3.1 q4wine-debugsource-1.0+r3-3.3.1 - openSUSE 13.1 (noarch): q4wine-lang-1.0+r3-3.3.1 References: https://bugzilla.suse.com/926859

1 0

openSUSE-RU-2015:0820-1: moderate: Recommended update for wicked
by maintenance＠opensuse.org 06 May '15

06 May '15

openSUSE Recommended Update: Recommended update for wicked ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0820-1 Rating: moderate References: #907215 #907694 #918662 #920070 #920889 #921218 #927065 #927616 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This recommended update for wicked provides version 0.6.18 with various bugfixes: - initial pre/post-up/down script and systemd service start support (boo#920070,boo#907215) - fixed lease address owner and lifetime tracking to update address lifetimes on dhcp6 renewal, correctly drop (requesting/deferred) leases in wickedd not (yet) existing as lease in dhcp supplicants and avoid address exists error messages (boo#920889,boo#907694) - add missed wpa_supplicant's wireless mode names (boo#927616) - schema: require macvlan lower device same as vlan (boo#927065) - fixes to use only ready devices by name to avoid dependency confusion mapping config to wrong device, event races and wrong use of the link-up instead of the wireless link-associated event (boo#918662,boo#921218). - Build with -std=gnu89 to deal with GCC 5 defaulting to -std=gnu11 and that changing the semantics of 'inline' Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-343=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libwicked-0-6-0.6.18-15.1 libwicked-0-6-debuginfo-0.6.18-15.1 wicked-0.6.18-15.1 wicked-debuginfo-0.6.18-15.1 wicked-debugsource-0.6.18-15.1 wicked-service-0.6.18-15.1 References: https://bugzilla.suse.com/907215 https://bugzilla.suse.com/907694 https://bugzilla.suse.com/918662 https://bugzilla.suse.com/920070 https://bugzilla.suse.com/920889 https://bugzilla.suse.com/921218 https://bugzilla.suse.com/927065 https://bugzilla.suse.com/927616

1 0

openSUSE-SU-2015:0813-1: important: Security update for wpa_supplicant
by opensuse-security＠opensuse.org 01 May '15

01 May '15

openSUSE Security Update: Security update for wpa_supplicant ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0813-1 Rating: important References: #927558 Cross-References: CVE-2015-1863 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The wireless network encryption and authentication daemon wpa_supplicant was updated to fix a security issue. The following vulnerability was fixed: * CVE-2015-1863: A buffer overflow in handling SSIDs in P2P management frames allowed attackers in radio range to crash, expose memory content or potentially execute arbitrary code. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-341=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-341=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): wpa_supplicant-2.2-5.4.1 wpa_supplicant-debuginfo-2.2-5.4.1 wpa_supplicant-debugsource-2.2-5.4.1 wpa_supplicant-gui-2.2-5.4.1 wpa_supplicant-gui-debuginfo-2.2-5.4.1 - openSUSE 13.1 (i586 x86_64): wpa_supplicant-2.0-3.11.1 wpa_supplicant-debuginfo-2.0-3.11.1 wpa_supplicant-debugsource-2.0-3.11.1 wpa_supplicant-gui-2.0-3.11.1 wpa_supplicant-gui-debuginfo-2.0-3.11.1 References: https://www.suse.com/security/cve/CVE-2015-1863.html https://bugzilla.suse.com/927558

1 0