May 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2015:0853-1: moderate: Security update for Chromium
by opensuse-security＠opensuse.org 12 May '15

12 May '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0853-1 Rating: moderate References: #929075 Cross-References: CVE-2015-1243 CVE-2015-1250 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Chromium was updated to 42.0.2311.135 to fix security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-1243: Use-after-free in DOM * CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-354=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-354=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): chromedriver-42.0.2311.135-26.1 chromedriver-debuginfo-42.0.2311.135-26.1 chromium-42.0.2311.135-26.1 chromium-debuginfo-42.0.2311.135-26.1 chromium-debugsource-42.0.2311.135-26.1 chromium-desktop-gnome-42.0.2311.135-26.1 chromium-desktop-kde-42.0.2311.135-26.1 chromium-ffmpegsumo-42.0.2311.135-26.1 chromium-ffmpegsumo-debuginfo-42.0.2311.135-26.1 - openSUSE 13.1 (i586 x86_64): chromedriver-42.0.2311.135-81.1 chromedriver-debuginfo-42.0.2311.135-81.1 chromium-42.0.2311.135-81.1 chromium-debuginfo-42.0.2311.135-81.1 chromium-debugsource-42.0.2311.135-81.1 chromium-desktop-gnome-42.0.2311.135-81.1 chromium-desktop-kde-42.0.2311.135-81.1 chromium-ffmpegsumo-42.0.2311.135-81.1 chromium-ffmpegsumo-debuginfo-42.0.2311.135-81.1 References: https://www.suse.com/security/cve/CVE-2015-1243.html https://www.suse.com/security/cve/CVE-2015-1250.html https://bugzilla.suse.com/929075

1 0

openSUSE-RU-2015:0842-1: Recommended update for prelink
by maintenance＠opensuse.org 08 May '15

08 May '15

openSUSE Recommended Update: Recommended update for prelink ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0842-1 Rating: low References: #923948 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update fixes the following issue with prelink: - fix the "dry run verbose" mode, which was actually executing the prelinking. (bnc#923948) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-350=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-350=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): prelink-20130503-2.3.1 prelink-debuginfo-20130503-2.3.1 prelink-debugsource-20130503-2.3.1 - openSUSE 13.1 (i586 x86_64): prelink-20130503-3.1 prelink-debuginfo-20130503-3.1 prelink-debugsource-20130503-3.1 References: https://bugzilla.suse.com/923948

1 0

openSUSE-RU-2015:0828-1: moderate: Recommended update for MyODBC-unixODBC
by maintenance＠opensuse.org 07 May '15

07 May '15

openSUSE Recommended Update: Recommended update for MyODBC-unixODBC ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0828-1 Rating: moderate References: #881624 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended updated fixes the following issue with MyODBC-unixODBC: - fix segfault in myodbc-install when freeing pointer (allocated with basic malloc()) using x_free()/my_free(). my_free() accesses 8 bytes before the pointer returned by malloc(), hence my_malloc() is needed [bnc#881624] Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-348=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-348=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): MyODBC-unixODBC-5.1.8-16.3.1 MyODBC-unixODBC-debuginfo-5.1.8-16.3.1 MyODBC-unixODBC-debugsource-5.1.8-16.3.1 - openSUSE 13.1 (i586 x86_64): MyODBC-unixODBC-5.1.8-13.3.1 MyODBC-unixODBC-debuginfo-5.1.8-13.3.1 MyODBC-unixODBC-debugsource-5.1.8-13.3.1 References: https://bugzilla.suse.com/881624

1 0

openSUSE-RU-2015:0827-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 07 May '15

07 May '15

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0827-1 Rating: moderate References: #928513 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: xorg-x11-server was updated to fix a regression from a previous security update. The following bug was fixed: * Fix a regression introduced by CVE-2014-8092: PutImage crashes when called with 0 height (bnc#928513). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-347=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-347=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xorg-x11-server-7.6_1.16.1-16.1 xorg-x11-server-debuginfo-7.6_1.16.1-16.1 xorg-x11-server-debugsource-7.6_1.16.1-16.1 xorg-x11-server-extra-7.6_1.16.1-16.1 xorg-x11-server-extra-debuginfo-7.6_1.16.1-16.1 xorg-x11-server-sdk-7.6_1.16.1-16.1 - openSUSE 13.1 (i586 x86_64): xorg-x11-server-7.6_1.14.3.901-19.1 xorg-x11-server-debuginfo-7.6_1.14.3.901-19.1 xorg-x11-server-debugsource-7.6_1.14.3.901-19.1 xorg-x11-server-extra-7.6_1.14.3.901-19.1 xorg-x11-server-extra-debuginfo-7.6_1.14.3.901-19.1 xorg-x11-server-sdk-7.6_1.14.3.901-19.1 References: https://www.suse.com/security/cve/CVE-2014-8092.html https://bugzilla.suse.com/928513

1 0

openSUSE-RU-2015:0826-1: important: Recommended update for tiff
by maintenance＠opensuse.org 07 May '15

07 May '15

openSUSE Recommended Update: Recommended update for tiff ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0826-1 Rating: important References: #914890 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for tiff fixes a regression introduced with the latest security update Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-349=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-349=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libtiff-devel-4.0.3-10.7.1 libtiff5-4.0.3-10.7.1 libtiff5-debuginfo-4.0.3-10.7.1 tiff-4.0.3-10.7.1 tiff-debuginfo-4.0.3-10.7.1 tiff-debugsource-4.0.3-10.7.1 - openSUSE 13.2 (x86_64): libtiff-devel-32bit-4.0.3-10.7.1 libtiff5-32bit-4.0.3-10.7.1 libtiff5-debuginfo-32bit-4.0.3-10.7.1 - openSUSE 13.1 (i586 x86_64): libtiff-devel-4.0.3-8.7.1 libtiff5-4.0.3-8.7.1 libtiff5-debuginfo-4.0.3-8.7.1 tiff-4.0.3-8.7.1 tiff-debuginfo-4.0.3-8.7.1 tiff-debugsource-4.0.3-8.7.1 - openSUSE 13.1 (x86_64): libtiff-devel-32bit-4.0.3-8.7.1 libtiff5-32bit-4.0.3-8.7.1 libtiff5-debuginfo-32bit-4.0.3-8.7.1 References: https://bugzilla.suse.com/914890

1 0

openSUSE-RU-2015:0823-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 06 May '15

06 May '15

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0823-1 Rating: moderate References: #855160 #922536 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update fixes the following issues with systemd: - address wrong dbus socket connect error message (bsc922536) - Need to remove a commit that was reverted upstream (bsc922536) - fix XDG_RUNTIME_DIR checking (bsc#855160) - fix assert failures for s->user->slice (bsc#922536) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-346=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libgudev-1_0-0-208-35.1 libgudev-1_0-0-debuginfo-208-35.1 libgudev-1_0-devel-208-35.1 libudev-devel-208-35.1 libudev-mini-devel-208-35.1 libudev-mini1-208-35.1 libudev-mini1-debuginfo-208-35.1 libudev1-208-35.1 libudev1-debuginfo-208-35.1 nss-myhostname-208-35.1 nss-myhostname-debuginfo-208-35.1 systemd-208-35.1 systemd-debuginfo-208-35.1 systemd-debugsource-208-35.1 systemd-devel-208-35.1 systemd-journal-gateway-208-35.1 systemd-journal-gateway-debuginfo-208-35.1 systemd-logger-208-35.1 systemd-mini-208-35.1 systemd-mini-debuginfo-208-35.1 systemd-mini-debugsource-208-35.1 systemd-mini-devel-208-35.1 systemd-mini-sysvinit-208-35.1 systemd-sysvinit-208-35.1 typelib-1_0-GUdev-1_0-208-35.1 udev-208-35.1 udev-debuginfo-208-35.1 udev-mini-208-35.1 udev-mini-debuginfo-208-35.1 - openSUSE 13.1 (x86_64): libgudev-1_0-0-32bit-208-35.1 libgudev-1_0-0-debuginfo-32bit-208-35.1 libudev1-32bit-208-35.1 libudev1-debuginfo-32bit-208-35.1 nss-myhostname-32bit-208-35.1 nss-myhostname-debuginfo-32bit-208-35.1 systemd-32bit-208-35.1 systemd-debuginfo-32bit-208-35.1 - openSUSE 13.1 (noarch): systemd-rpm-macros-2-35.1 References: https://bugzilla.suse.com/855160 https://bugzilla.suse.com/922536

1 0

openSUSE-RU-2015:0822-1: moderate: Recommended update for alsa-utils
by maintenance＠opensuse.org 06 May '15

06 May '15

openSUSE Recommended Update: Recommended update for alsa-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0822-1 Rating: moderate References: #928394 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for alsa-utils fixes the following issue: - Fix empty file overwrite of alsa-info.sh without wget (boo#928394) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-345=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): alsa-utils-1.0.28-5.3.1 alsa-utils-debuginfo-1.0.28-5.3.1 alsa-utils-debugsource-1.0.28-5.3.1 References: https://bugzilla.suse.com/928394

1 0

openSUSE-RU-2015:0821-1: moderate: Recommended update for q4wine
by maintenance＠opensuse.org 06 May '15

06 May '15

openSUSE Recommended Update: Recommended update for q4wine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0821-1 Rating: moderate References: #926859 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update fixes the following issues with q4wine: - Use web.archive.org until project website will be repaired. Also disable automatic opening this documentation after initial program configuring. (boo#926859) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-344=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-344=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): q4wine-1.1+r2-2.3.1 q4wine-debuginfo-1.1+r2-2.3.1 q4wine-debugsource-1.1+r2-2.3.1 - openSUSE 13.2 (noarch): q4wine-lang-1.1+r2-2.3.1 - openSUSE 13.1 (i586 x86_64): q4wine-1.0+r3-3.3.1 q4wine-debuginfo-1.0+r3-3.3.1 q4wine-debugsource-1.0+r3-3.3.1 - openSUSE 13.1 (noarch): q4wine-lang-1.0+r3-3.3.1 References: https://bugzilla.suse.com/926859

1 0

openSUSE-RU-2015:0820-1: moderate: Recommended update for wicked
by maintenance＠opensuse.org 06 May '15

06 May '15

openSUSE Recommended Update: Recommended update for wicked ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0820-1 Rating: moderate References: #907215 #907694 #918662 #920070 #920889 #921218 #927065 #927616 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This recommended update for wicked provides version 0.6.18 with various bugfixes: - initial pre/post-up/down script and systemd service start support (boo#920070,boo#907215) - fixed lease address owner and lifetime tracking to update address lifetimes on dhcp6 renewal, correctly drop (requesting/deferred) leases in wickedd not (yet) existing as lease in dhcp supplicants and avoid address exists error messages (boo#920889,boo#907694) - add missed wpa_supplicant's wireless mode names (boo#927616) - schema: require macvlan lower device same as vlan (boo#927065) - fixes to use only ready devices by name to avoid dependency confusion mapping config to wrong device, event races and wrong use of the link-up instead of the wireless link-associated event (boo#918662,boo#921218). - Build with -std=gnu89 to deal with GCC 5 defaulting to -std=gnu11 and that changing the semantics of 'inline' Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-343=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libwicked-0-6-0.6.18-15.1 libwicked-0-6-debuginfo-0.6.18-15.1 wicked-0.6.18-15.1 wicked-debuginfo-0.6.18-15.1 wicked-debugsource-0.6.18-15.1 wicked-service-0.6.18-15.1 References: https://bugzilla.suse.com/907215 https://bugzilla.suse.com/907694 https://bugzilla.suse.com/918662 https://bugzilla.suse.com/920070 https://bugzilla.suse.com/920889 https://bugzilla.suse.com/921218 https://bugzilla.suse.com/927065 https://bugzilla.suse.com/927616

1 0

openSUSE-SU-2015:0813-1: important: Security update for wpa_supplicant
by opensuse-security＠opensuse.org 01 May '15

01 May '15

openSUSE Security Update: Security update for wpa_supplicant ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0813-1 Rating: important References: #927558 Cross-References: CVE-2015-1863 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The wireless network encryption and authentication daemon wpa_supplicant was updated to fix a security issue. The following vulnerability was fixed: * CVE-2015-1863: A buffer overflow in handling SSIDs in P2P management frames allowed attackers in radio range to crash, expose memory content or potentially execute arbitrary code. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-341=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-341=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): wpa_supplicant-2.2-5.4.1 wpa_supplicant-debuginfo-2.2-5.4.1 wpa_supplicant-debugsource-2.2-5.4.1 wpa_supplicant-gui-2.2-5.4.1 wpa_supplicant-gui-debuginfo-2.2-5.4.1 - openSUSE 13.1 (i586 x86_64): wpa_supplicant-2.0-3.11.1 wpa_supplicant-debuginfo-2.0-3.11.1 wpa_supplicant-debugsource-2.0-3.11.1 wpa_supplicant-gui-2.0-3.11.1 wpa_supplicant-gui-debuginfo-2.0-3.11.1 References: https://www.suse.com/security/cve/CVE-2015-1863.html https://bugzilla.suse.com/927558

1 0