May 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2015:0937-1: moderate: Security update for Wireshark
by opensuse-security＠opensuse.org 24 May '15

24 May '15

openSUSE Security Update: Security update for Wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0937-1 Rating: moderate References: #930691 Cross-References: CVE-2015-3811 CVE-2015-3812 CVE-2015-3814 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: Wireshark was updated to 1.10.14 to fix three security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-3811: The WCP dissector could crash while decompressing data (wnpa-sec-2015-14) * CVE-2015-3812: The X11 dissector could leak memory (wnpa-sec-2015-15) * CVE-2015-3814: The IEEE 802.11 dissector could go into an infinite loop (wnpa-sec-2015-17) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-380=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): wireshark-1.10.14-39.1 wireshark-debuginfo-1.10.14-39.1 wireshark-debugsource-1.10.14-39.1 wireshark-devel-1.10.14-39.1 References: https://www.suse.com/security/cve/CVE-2015-3811.html https://www.suse.com/security/cve/CVE-2015-3812.html https://www.suse.com/security/cve/CVE-2015-3814.html https://bugzilla.suse.com/930691

1 0

openSUSE-SU-2015:0936-1: moderate: Security update for Wireshark
by opensuse-security＠opensuse.org 24 May '15

24 May '15

openSUSE Security Update: Security update for Wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0936-1 Rating: moderate References: #930689 Cross-References: CVE-2015-3808 CVE-2015-3809 CVE-2015-3810 CVE-2015-3811 CVE-2015-3812 CVE-2015-3813 CVE-2015-3814 CVE-2015-3815 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: Wireshark was updated to 1.12.5 to fix security issues and bugs. The following vulnerabilities have been fixed: * CVE-2015-3808, CVE-2015-3809: The LBMR dissector could go into an infinite loop. (wnpa-sec-2015-12) * CVE-2015-3810: The WebSocket dissector could recurse excessively. (wnpa-sec-2015-13) * CVE-2015-3811: The WCP dissector could crash while decompressing data. (wnpa-sec-2015-14) * CVE-2015-3812: The X11 dissector could leak memory. (wnpa-sec-2015-15) * CVE-2015-3813: The packet reassembly code could leak memory. (wnpa-sec-2015-16) * CVE-2015-3814: The IEEE 802.11 dissector could go into an infinite loop. (wnpa-sec-2015-17) * CVE-2015-3815: The Android Logcat file parser could crash. (wnpa-sec-2015-18) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-379=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): wireshark-1.12.5-15.1 wireshark-debuginfo-1.12.5-15.1 wireshark-debugsource-1.12.5-15.1 wireshark-devel-1.12.5-15.1 wireshark-ui-gtk-1.12.5-15.1 wireshark-ui-gtk-debuginfo-1.12.5-15.1 wireshark-ui-qt-1.12.5-15.1 wireshark-ui-qt-debuginfo-1.12.5-15.1 References: https://www.suse.com/security/cve/CVE-2015-3808.html https://www.suse.com/security/cve/CVE-2015-3809.html https://www.suse.com/security/cve/CVE-2015-3810.html https://www.suse.com/security/cve/CVE-2015-3811.html https://www.suse.com/security/cve/CVE-2015-3812.html https://www.suse.com/security/cve/CVE-2015-3813.html https://www.suse.com/security/cve/CVE-2015-3814.html https://www.suse.com/security/cve/CVE-2015-3815.html https://bugzilla.suse.com/930689

1 0

openSUSE-SU-2015:0935-1: moderate: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 24 May '15

24 May '15

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0935-1 Rating: moderate References: #930622 Cross-References: CVE-2011-3079 CVE-2015-0797 CVE-2015-2708 CVE-2015-2710 CVE-2015-2713 CVE-2015-2716 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: The Mozilla Thunderbird email, news, and chat client was updated to version 31.7.0 to fix several security issues. The following vulnerabilities were fixed (bnc#930622): * MFSA 2015-46/CVE-2015-2708 Miscellaneous memory safety hazards * MFSA 2015-47/CVE-2015-0797 (bmo#1080995) Buffer overflow parsing H.264 video with Linux Gstreamer * MFSA 2015-48/CVE-2015-2710 (bmo#1149542) Buffer overflow with SVG content and CSS * MFSA 2015-51/CVE-2015-2713 (bmo#1153478) Use-after-free during text processing with vertical text enabled * MFSA 2015-54/CVE-2015-2716 (bmo#1140537) Buffer overflow when parsing compressed XML * MFSA 2015-57/CVE-2011-3079 (bmo#1087565) Privilege escalation through IPC channel messages Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-374=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-374=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): MozillaThunderbird-31.7.0-18.1 MozillaThunderbird-buildsymbols-31.7.0-18.1 MozillaThunderbird-debuginfo-31.7.0-18.1 MozillaThunderbird-debugsource-31.7.0-18.1 MozillaThunderbird-devel-31.7.0-18.1 MozillaThunderbird-translations-common-31.7.0-18.1 MozillaThunderbird-translations-other-31.7.0-18.1 - openSUSE 13.1 (i586 x86_64): MozillaThunderbird-31.7.0-70.53.1 MozillaThunderbird-buildsymbols-31.7.0-70.53.1 MozillaThunderbird-debuginfo-31.7.0-70.53.1 MozillaThunderbird-debugsource-31.7.0-70.53.1 MozillaThunderbird-devel-31.7.0-70.53.1 MozillaThunderbird-translations-common-31.7.0-70.53.1 MozillaThunderbird-translations-other-31.7.0-70.53.1 References: https://www.suse.com/security/cve/CVE-2011-3079.html https://www.suse.com/security/cve/CVE-2015-0797.html https://www.suse.com/security/cve/CVE-2015-2708.html https://www.suse.com/security/cve/CVE-2015-2710.html https://www.suse.com/security/cve/CVE-2015-2713.html https://www.suse.com/security/cve/CVE-2015-2716.html https://bugzilla.suse.com/930622

1 0

openSUSE-SU-2015:0934-1: moderate: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 24 May '15

24 May '15

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0934-1 Rating: moderate References: #930622 Cross-References: CVE-2011-3079 CVE-2015-2708 CVE-2015-2709 CVE-2015-2710 CVE-2015-2711 CVE-2015-2712 CVE-2015-2713 CVE-2015-2715 CVE-2015-2716 CVE-2015-2717 CVE-2015-2718 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: The Mozilla Firefox web browser was updated to version 38.0.1 to fix several security and non-security issues. This update also includes a Mozilla Network Security Services (NSS) update to version 3.18.1. The following vulnerabilities and issues were fixed: Changes in Mozilla Firefox: - update to Firefox 38.0.1 stability and regression fixes * Systems with first generation NVidia Optimus graphics cards may crash on start-up * Users who import cookies from Google Chrome can end up with broken websites * Large animated images may fail to play and may stop other images from loading - update to Firefox 38.0 (bnc#930622) * New tab-based preferences * Ruby annotation support * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/ security fixes: * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709 Miscellaneous memory safety hazards * MFSA 2015-47/VE-2015-0797 (bmo#1080995) Buffer overflow parsing H.264 video with Linux Gstreamer * MFSA 2015-48/CVE-2015-2710 (bmo#1149542) Buffer overflow with SVG content and CSS * MFSA 2015-49/CVE-2015-2711 (bmo#1113431) Referrer policy ignored when links opened by middle-click and context menu * MFSA 2015-50/CVE-2015-2712 (bmo#1152280) Out-of-bounds read and write in asm.js validation * MFSA 2015-51/CVE-2015-2713 (bmo#1153478) Use-after-free during text processing with vertical text enabled * MFSA 2015-53/CVE-2015-2715 (bmo#988698) Use-after-free due to Media Decoder Thread creation during shutdown * MFSA 2015-54/CVE-2015-2716 (bmo#1140537) Buffer overflow when parsing compressed XML * MFSA 2015-55/CVE-2015-2717 (bmo#1154683) Buffer overflow and out-of-bounds read while parsing MP4 video metadata * MFSA 2015-56/CVE-2015-2718 (bmo#1146724) Untrusted site hosting trusted page can intercept webchannel responses * MFSA 2015-57/CVE-2011-3079 (bmo#1087565) Privilege escalation through IPC channel messages Changes in Mozilla NSS: - update to 3.18.1 * Firefox target release 38 * No new functionality is introduced in this release. Notable Changes: * The following CA certificate had the Websites and Code Signing trust bits restored to their original state to allow more time to develop a better transition strategy for affected sites: - OU = Equifax Secure Certificate Authority * The following CA certificate was removed: - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi * The following intermediate CA certificate has been added as actively distrusted because it was mis-used to issue certificates for domain names the holder did not own or control: - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG * The version number of the updated root CA list has been set to 2.4 - update to 3.18 * Firefox target release 38 New functionality: * When importing certificates and keys from a PKCS#12 source, it's now possible to override the nicknames, prior to importing them into the NSS database, using new API SEC_PKCS12DecoderRenameCertNicknames. * The tstclnt test utility program has new command-line options -C, -D, -b and -R. Use -C one, two or three times to print information about the certificates received from a server, and information about the locally found and trusted issuer certificates, to diagnose server side configuration issues. It is possible to run tstclnt Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-375=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-375=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): MozillaFirefox-38.0.1-30.1 MozillaFirefox-branding-upstream-38.0.1-30.1 MozillaFirefox-buildsymbols-38.0.1-30.1 MozillaFirefox-debuginfo-38.0.1-30.1 MozillaFirefox-debugsource-38.0.1-30.1 MozillaFirefox-devel-38.0.1-30.1 MozillaFirefox-translations-common-38.0.1-30.1 MozillaFirefox-translations-other-38.0.1-30.1 libfreebl3-3.18.1-12.1 libfreebl3-debuginfo-3.18.1-12.1 libsoftokn3-3.18.1-12.1 libsoftokn3-debuginfo-3.18.1-12.1 mozilla-nss-3.18.1-12.1 mozilla-nss-certs-3.18.1-12.1 mozilla-nss-certs-debuginfo-3.18.1-12.1 mozilla-nss-debuginfo-3.18.1-12.1 mozilla-nss-debugsource-3.18.1-12.1 mozilla-nss-devel-3.18.1-12.1 mozilla-nss-sysinit-3.18.1-12.1 mozilla-nss-sysinit-debuginfo-3.18.1-12.1 mozilla-nss-tools-3.18.1-12.1 mozilla-nss-tools-debuginfo-3.18.1-12.1 - openSUSE 13.2 (x86_64): libfreebl3-32bit-3.18.1-12.1 libfreebl3-debuginfo-32bit-3.18.1-12.1 libsoftokn3-32bit-3.18.1-12.1 libsoftokn3-debuginfo-32bit-3.18.1-12.1 mozilla-nss-32bit-3.18.1-12.1 mozilla-nss-certs-32bit-3.18.1-12.1 mozilla-nss-certs-debuginfo-32bit-3.18.1-12.1 mozilla-nss-debuginfo-32bit-3.18.1-12.1 mozilla-nss-sysinit-32bit-3.18.1-12.1 mozilla-nss-sysinit-debuginfo-32bit-3.18.1-12.1 - openSUSE 13.1 (i586 x86_64): MozillaFirefox-38.0.1-74.1 MozillaFirefox-branding-upstream-38.0.1-74.1 MozillaFirefox-buildsymbols-38.0.1-74.1 MozillaFirefox-debuginfo-38.0.1-74.1 MozillaFirefox-debugsource-38.0.1-74.1 MozillaFirefox-devel-38.0.1-74.1 MozillaFirefox-translations-common-38.0.1-74.1 MozillaFirefox-translations-other-38.0.1-74.1 libfreebl3-3.18.1-55.1 libfreebl3-debuginfo-3.18.1-55.1 libsoftokn3-3.18.1-55.1 libsoftokn3-debuginfo-3.18.1-55.1 mozilla-nss-3.18.1-55.1 mozilla-nss-certs-3.18.1-55.1 mozilla-nss-certs-debuginfo-3.18.1-55.1 mozilla-nss-debuginfo-3.18.1-55.1 mozilla-nss-debugsource-3.18.1-55.1 mozilla-nss-devel-3.18.1-55.1 mozilla-nss-sysinit-3.18.1-55.1 mozilla-nss-sysinit-debuginfo-3.18.1-55.1 mozilla-nss-tools-3.18.1-55.1 mozilla-nss-tools-debuginfo-3.18.1-55.1 - openSUSE 13.1 (x86_64): libfreebl3-32bit-3.18.1-55.1 libfreebl3-debuginfo-32bit-3.18.1-55.1 libsoftokn3-32bit-3.18.1-55.1 libsoftokn3-debuginfo-32bit-3.18.1-55.1 mozilla-nss-32bit-3.18.1-55.1 mozilla-nss-certs-32bit-3.18.1-55.1 mozilla-nss-certs-debuginfo-32bit-3.18.1-55.1 mozilla-nss-debuginfo-32bit-3.18.1-55.1 mozilla-nss-sysinit-32bit-3.18.1-55.1 mozilla-nss-sysinit-debuginfo-32bit-3.18.1-55.1 References: https://www.suse.com/security/cve/CVE-2011-3079.html https://www.suse.com/security/cve/CVE-2015-2708.html https://www.suse.com/security/cve/CVE-2015-2709.html https://www.suse.com/security/cve/CVE-2015-2710.html https://www.suse.com/security/cve/CVE-2015-2711.html https://www.suse.com/security/cve/CVE-2015-2712.html https://www.suse.com/security/cve/CVE-2015-2713.html https://www.suse.com/security/cve/CVE-2015-2715.html https://www.suse.com/security/cve/CVE-2015-2716.html https://www.suse.com/security/cve/CVE-2015-2717.html https://www.suse.com/security/cve/CVE-2015-2718.html https://bugzilla.suse.com/930622

1 0

openSUSE-SU-2015:0933-1: moderate: Security update for quassel
by opensuse-security＠opensuse.org 24 May '15

24 May '15

openSUSE Security Update: Security update for quassel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0933-1 Rating: moderate References: #928728 Cross-References: CVE-2015-3427 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The distributed IRC client quassel was updated to fix one security issue. The following vulnerability was fixed: * CVE-2015-3427: The SQL injection fix for CVE-2013-4422 was incomplete (boo#928728) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-376=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-376=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): quassel-base-0.10.0-3.10.1 quassel-client-0.10.0-3.10.1 quassel-client-debuginfo-0.10.0-3.10.1 quassel-core-0.10.0-3.10.1 quassel-core-debuginfo-0.10.0-3.10.1 quassel-debugsource-0.10.0-3.10.1 quassel-mono-0.10.0-3.10.1 quassel-mono-debuginfo-0.10.0-3.10.1 - openSUSE 13.1 (i586 x86_64): quassel-base-0.9.2-22.1 quassel-client-0.9.2-22.1 quassel-client-debuginfo-0.9.2-22.1 quassel-core-0.9.2-22.1 quassel-core-debuginfo-0.9.2-22.1 quassel-debugsource-0.9.2-22.1 quassel-mono-0.9.2-22.1 quassel-mono-debuginfo-0.9.2-22.1 References: https://www.suse.com/security/cve/CVE-2015-3427.html https://bugzilla.suse.com/928728

1 0

openSUSE-SU-2015:0932-1: moderate: Security update for LibVNCServer
by opensuse-security＠opensuse.org 24 May '15

24 May '15

openSUSE Security Update: Security update for LibVNCServer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0932-1 Rating: moderate References: Cross-References: CVE-2014-4607 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: LibVNCServer was updated to version 0.9.10 to fix several security and non-security issues. The following issues were fixed: - Remove xorg-x11-devel from buildRequires, X libraries are not directly used/linked - libvncserver-0.9.10-ossl.patch: Update, do not RAND_load_file("/dev/urandom", 1024) if the the PRNG is already seeded. (It always is on linux) - Update to version 0.9.10 + Moved the whole project from sourceforge to https://libvnc.github.io/. + Cleaned out the autotools build system which now uses autoreconf. + Updated noVNC HTML5 client to latest version. + Split out x11vnc sources into separate repository at https://github.com/LibVNC/x11vnc + Split out vncterm sources into separate repository at https://github.com/LibVNC/vncterm + Split out VisualNaCro sources into separate repository at https://github.com/LibVNC/VisualNaCro + Merged Debian patches. + Fixed some security-related buffer overflow cases. + Added compatibility headers to make LibVNCServer/LibVNCClient build on native Windows 8. + Update LZO to version 2.07, fixing CVE-2014-4607. + Merged patches from KDE/krfb. + Can now do IPv6 without IPv4. + Fixed a use-after-free issue in scale.c. - Update Url and download source to new project home - Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it out of main tarball - Rebase libvncserver-ossl.patch to upstream changes > libvncserver-0.9.10-ossl.patch - Remove linuxvnc subpackage; like x11vnc, it has been splited out but is depreciated and unmaintained. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-377=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): LibVNCServer-debugsource-0.9.10-10.4.1 LibVNCServer-devel-0.9.10-10.4.1 libvncclient0-0.9.10-10.4.1 libvncclient0-debuginfo-0.9.10-10.4.1 libvncserver0-0.9.10-10.4.1 libvncserver0-debuginfo-0.9.10-10.4.1 References: https://www.suse.com/security/cve/CVE-2014-4607.html

1 0

openSUSE-SU-2015:0931-1: moderate: Security update for libraw
by opensuse-security＠opensuse.org 24 May '15

24 May '15

openSUSE Security Update: Security update for libraw ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0931-1 Rating: moderate References: #930683 Cross-References: CVE-2015-3885 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The libraw library was updated to fix one security issue. The following vulnerability was fixed: * boo#930683: CVE-2015-3885: dcraw/libraw: input sanitization errors Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-378=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-378=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libraw-debugsource-0.16.0-2.3.1 libraw-devel-0.16.0-2.3.1 libraw-devel-static-0.16.0-2.3.1 libraw-tools-0.16.0-2.3.1 libraw-tools-debuginfo-0.16.0-2.3.1 libraw10-0.16.0-2.3.1 libraw10-debuginfo-0.16.0-2.3.1 - openSUSE 13.1 (i586 x86_64): libraw-debugsource-0.15.4-2.3.1 libraw-devel-0.15.4-2.3.1 libraw-devel-static-0.15.4-2.3.1 libraw-tools-0.15.4-2.3.1 libraw-tools-debuginfo-0.15.4-2.3.1 libraw9-0.15.4-2.3.1 libraw9-debuginfo-0.15.4-2.3.1 References: https://www.suse.com/security/cve/CVE-2015-3885.html https://bugzilla.suse.com/930683

1 0

openSUSE-SU-2015:0930-1: moderate: Recommended update for coreutils
by opensuse-security＠opensuse.org 24 May '15

24 May '15

openSUSE Security Update: Recommended update for coreutils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0930-1 Rating: moderate References: #928749 Cross-References: CVE-2013-0221 CVE-2013-0222 CVE-2013-0223 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: coreutils was updated to fix a bug in 'sort': Fixed memory handling error with case insensitive sort using UTF-8 (boo#928749). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-381=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): coreutils-8.23-2.9.1 coreutils-debuginfo-8.23-2.9.1 coreutils-debugsource-8.23-2.9.1 coreutils-testsuite-8.23-2.9.1 - openSUSE 13.2 (noarch): coreutils-lang-8.23-2.9.1 References: https://www.suse.com/security/cve/CVE-2013-0221.html https://www.suse.com/security/cve/CVE-2013-0222.html https://www.suse.com/security/cve/CVE-2013-0223.html https://bugzilla.suse.com/928749

1 0

openSUSE-OU-2015:0919-1: Update typelib creator to produce deterministic results
by maintenance＠opensuse.org 20 May '15

20 May '15

openSUSE Optional Update: Update typelib creator to produce deterministic results ______________________________________________________________________________ Announcement ID: openSUSE-OU-2015:0919-1 Rating: low References: #930584 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: The tool in gobject-introspection which creates typelib files failed to produce reproducible results. This causes a republish of packages which contain typelib files everytime such package was rebuilt. Multimedia packages from the packman repository are the ones which are affected. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-373=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): girepository-1_0-1.38.0-3.1 gobject-introspection-1.38.0-3.1 gobject-introspection-debuginfo-1.38.0-3.1 gobject-introspection-debugsource-1.38.0-3.1 gobject-introspection-devel-1.38.0-3.1 libgirepository-1_0-1-1.38.0-3.1 libgirepository-1_0-1-debuginfo-1.38.0-3.1 References: https://bugzilla.suse.com/930584

1 0

openSUSE-SU-2015:0914-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 19 May '15

19 May '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0914-1 Rating: important References: #930677 Cross-References: CVE-2015-3044 CVE-2015-3077 CVE-2015-3078 CVE-2015-3079 CVE-2015-3080 CVE-2015-3081 CVE-2015-3082 CVE-2015-3083 CVE-2015-3084 CVE-2015-3085 CVE-2015-3086 CVE-2015-3087 CVE-2015-3088 CVE-2015-3089 CVE-2015-3090 CVE-2015-3091 CVE-2015-3092 CVE-2015-3093 Affected Products: openSUSE 13.2:NonFree openSUSE 13.1:NonFree ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: The Adobe flash-player package was updated to version 11.2.202.460 to fix several security issues. The following vulnerabilities were fixed (bsc#930677): * APSB15-09, CVE-2015-3044, CVE-2015-3077, CVE-2015-3078, CVE-2015-3079, CVE-2015-3080, CVE-2015-3081, CVE-2015-3082, CVE-2015-3083, CVE-2015-3084, CVE-2015-3085, CVE-2015-3086, CVE-2015-3087, CVE-2015-3088, CVE-2015-3089, CVE-2015-3090, CVE-2015-3091, CVE-2015-3092, CVE-2015-3093 More information can be found at the Adobe Security Bulletin APSB15-09: https://helpx.adobe.com/security/products/flash-player/apsb15-09.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2:NonFree: zypper in -t patch openSUSE-2015-372=1 - openSUSE 13.1:NonFree: zypper in -t patch openSUSE-2015-372=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2:NonFree (i586 x86_64): flash-player-11.2.202.460-2.51.1 flash-player-gnome-11.2.202.460-2.51.1 flash-player-kde4-11.2.202.460-2.51.1 - openSUSE 13.1:NonFree (i586 x86_64): flash-player-11.2.202.460-116.1 flash-player-gnome-11.2.202.460-116.1 flash-player-kde4-11.2.202.460-116.1 References: https://www.suse.com/security/cve/CVE-2015-3044.html https://www.suse.com/security/cve/CVE-2015-3077.html https://www.suse.com/security/cve/CVE-2015-3078.html https://www.suse.com/security/cve/CVE-2015-3079.html https://www.suse.com/security/cve/CVE-2015-3080.html https://www.suse.com/security/cve/CVE-2015-3081.html https://www.suse.com/security/cve/CVE-2015-3082.html https://www.suse.com/security/cve/CVE-2015-3083.html https://www.suse.com/security/cve/CVE-2015-3084.html https://www.suse.com/security/cve/CVE-2015-3085.html https://www.suse.com/security/cve/CVE-2015-3086.html https://www.suse.com/security/cve/CVE-2015-3087.html https://www.suse.com/security/cve/CVE-2015-3088.html https://www.suse.com/security/cve/CVE-2015-3089.html https://www.suse.com/security/cve/CVE-2015-3090.html https://www.suse.com/security/cve/CVE-2015-3091.html https://www.suse.com/security/cve/CVE-2015-3092.html https://www.suse.com/security/cve/CVE-2015-3093.html https://bugzilla.suse.com/930677

1 0