June 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:1063-1: moderate: Recommended update for mysql-connector-java
by maintenance＠opensuse.org 15 Jun '15

15 Jun '15

openSUSE Recommended Update: Recommended update for mysql-connector-java ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1063-1 Rating: moderate References: #927981 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a regression in previous update, which broke JDBC with Eclipselink, Libreoffice Base and others. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-423=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-423=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): mysql-connector-java-5.1.35-3.6.1 - openSUSE 13.1 (noarch): mysql-connector-java-5.1.35-6.1 References: https://bugzilla.suse.com/927981

1 0

openSUSE-SU-2015:1061-1: important: Security update for Adobe Flash Player
by opensuse-security＠opensuse.org 13 Jun '15

13 Jun '15

openSUSE Security Update: Security update for Adobe Flash Player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1061-1 Rating: important References: #934088 Cross-References: CVE-2015-3096 CVE-2015-3098 CVE-2015-3099 CVE-2015-3100 CVE-2015-3102 CVE-2015-3103 CVE-2015-3104 CVE-2015-3105 CVE-2015-3106 CVE-2015-3107 CVE-2015-3108 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.466 to fix multiple security issues. The following vulnerabilities were fixed: * CVE-2015-3096: bypass for CVE-2014-5333 * CVE-2015-3098: vulnerabilities that could be exploited to bypass the same-origin-policy and lead to information disclosure * CVE-2015-3099: vulnerabilities that could be exploited to bypass the same-origin-policy and lead to information disclosure * CVE-2015-3100: stack overflow vulnerability that could lead to code execution * CVE-2015-3102: vulnerabilities that could be exploited to bypass the same-origin-policy and lead to information disclosure * CVE-2015-3103: use-after-free vulnerabilities that could lead to code execution * CVE-2015-3104: integer overflow vulnerability that could lead to code execution * CVE-2015-3105: memory corruption vulnerability that could lead to code execution * CVE-2015-3106: use-after-free vulnerabilities that could lead to code execution * CVE-2015-3107: use-after-free vulnerabilities that could lead to code execution * CVE-2015-3108: memory leak vulnerability that could be used to bypass ASLR Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-17=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): flash-player-11.2.202.466-164.1 flash-player-gnome-11.2.202.466-164.1 flash-player-kde4-11.2.202.466-164.1 References: https://www.suse.com/security/cve/CVE-2015-3096.html https://www.suse.com/security/cve/CVE-2015-3098.html https://www.suse.com/security/cve/CVE-2015-3099.html https://www.suse.com/security/cve/CVE-2015-3100.html https://www.suse.com/security/cve/CVE-2015-3102.html https://www.suse.com/security/cve/CVE-2015-3103.html https://www.suse.com/security/cve/CVE-2015-3104.html https://www.suse.com/security/cve/CVE-2015-3105.html https://www.suse.com/security/cve/CVE-2015-3106.html https://www.suse.com/security/cve/CVE-2015-3107.html https://www.suse.com/security/cve/CVE-2015-3108.html https://bugzilla.suse.com/934088

1 0

openSUSE-RU-2015:1060-1: important: Recommended update for samba, permissions, samba-krb-printing and talloc
by maintenance＠opensuse.org 13 Jun '15

13 Jun '15

openSUSE Recommended Update: Recommended update for samba, permissions, samba-krb-printing and talloc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1060-1 Rating: important References: #901813 #906336 #910378 #912457 #913304 #923374 #931854 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This recommended update provides version 4.1.18 of samba and fixes for permissions, talloc and samba-krb-printing: - samba: + Avoid a crash inside the tevent epoll backend (bso#11141, bnc#931854). + Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf. + s3:winbind:grent: Don't stop group enumeration when a group has no gid (bso#8905). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535" (bso#9702). + Fix NTLM authentication (bso#10016). + vfs: Add glusterfs manpage; (bso#10240). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808, bnc#910378). + s3: client - "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Clear PrinterInfo on GetPrinter error; (bso#10984). + s3-util: Fix authentication with long hostnames; (bso#11008). + smbd can't find the GUID for a printer in the registry and fails to publish printers; (bso#11018). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + smbd: Fix CID 1063259 Uninitialized scalar variable; (bso#11041). + net: Fix 'net sam addgroupmem'; (bso#11051). + cli_connect_nb_send: don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + debug: Set close-on-exec for the main log file FD; (bso#11100). + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#11115). + vfs_glusterfs manpage corrections; (bso#11117). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127). + s3-winbind: Fix chached user group lookup of trusted domains; (bso#11143). + Fix memory leak in SMB2 notify handling; (bso#11144). + Fix memory leak in SMB2 notify handling; (bso#11144). + s4:auth/gensec_gssapi: let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169, bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s3: Mac OS X 10.10.x fails validate negotiate request to 4.1.x; (bso#11187). + spoolss: Purge the printer name cache on name change; (bso#11210, bnc#901813). + s3:smbd: Missing tevent_req_nterror; (bso#11224). + s4:rpc_server: Add multiplex state to dcerpc flags and control over multiplex PFC flag in bind_ack and and dcesrv_alter replies; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + Fix crash in 'net ads dns gethostbyname' with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + vfs: kernel_flock and named streams; (bso#11243). + s3: nmbd: Don't set work_changed = True inside update_server_ttl(); (bso#11254). + Take resource group sids into account when caching netsamlogon data; (bnc#912457). + Prevent samba package updates from disabling samba kerberos printing. + Purge printer name cache on spoolss SetPrinter change; (bso#11210, bnc#901813). + Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374). + Fix tdb_store_flag_to_ntdb() gcc5 build failure. - talloc: + Fix memory leak in SMB2 notify handling; (bso#11144). + fix _talloc_total_limit_size prototype + build: improve detection of srcdir - permissions: + remove /usr/bin/get_printing_ticket; (bnc#906336) - samba-krb-printing: + new package to provide get_printing_ticket binary stand-alone. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-422=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-422=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libdcerpc-atsvc-devel-4.1.18-8.2 libdcerpc-atsvc0-4.1.18-8.2 libdcerpc-atsvc0-debuginfo-4.1.18-8.2 libdcerpc-binding0-4.1.18-8.2 libdcerpc-binding0-debuginfo-4.1.18-8.2 libdcerpc-devel-4.1.18-8.2 libdcerpc-samr-devel-4.1.18-8.2 libdcerpc-samr0-4.1.18-8.2 libdcerpc-samr0-debuginfo-4.1.18-8.2 libdcerpc0-4.1.18-8.2 libdcerpc0-debuginfo-4.1.18-8.2 libgensec-devel-4.1.18-8.2 libgensec0-4.1.18-8.2 libgensec0-debuginfo-4.1.18-8.2 libndr-devel-4.1.18-8.2 libndr-krb5pac-devel-4.1.18-8.2 libndr-krb5pac0-4.1.18-8.2 libndr-krb5pac0-debuginfo-4.1.18-8.2 libndr-nbt-devel-4.1.18-8.2 libndr-nbt0-4.1.18-8.2 libndr-nbt0-debuginfo-4.1.18-8.2 libndr-standard-devel-4.1.18-8.2 libndr-standard0-4.1.18-8.2 libndr-standard0-debuginfo-4.1.18-8.2 libndr0-4.1.18-8.2 libndr0-debuginfo-4.1.18-8.2 libnetapi-devel-4.1.18-8.2 libnetapi0-4.1.18-8.2 libnetapi0-debuginfo-4.1.18-8.2 libpdb-devel-4.1.18-8.2 libpdb0-4.1.18-8.2 libpdb0-debuginfo-4.1.18-8.2 libregistry-devel-4.1.18-8.2 libregistry0-4.1.18-8.2 libregistry0-debuginfo-4.1.18-8.2 libsamba-credentials-devel-4.1.18-8.2 libsamba-credentials0-4.1.18-8.2 libsamba-credentials0-debuginfo-4.1.18-8.2 libsamba-hostconfig-devel-4.1.18-8.2 libsamba-hostconfig0-4.1.18-8.2 libsamba-hostconfig0-debuginfo-4.1.18-8.2 libsamba-policy-devel-4.1.18-8.2 libsamba-policy0-4.1.18-8.2 libsamba-policy0-debuginfo-4.1.18-8.2 libsamba-util-devel-4.1.18-8.2 libsamba-util0-4.1.18-8.2 libsamba-util0-debuginfo-4.1.18-8.2 libsamdb-devel-4.1.18-8.2 libsamdb0-4.1.18-8.2 libsamdb0-debuginfo-4.1.18-8.2 libsmbclient-devel-4.1.18-8.2 libsmbclient-raw-devel-4.1.18-8.2 libsmbclient-raw0-4.1.18-8.2 libsmbclient-raw0-debuginfo-4.1.18-8.2 libsmbclient0-4.1.18-8.2 libsmbclient0-debuginfo-4.1.18-8.2 libsmbconf-devel-4.1.18-8.2 libsmbconf0-4.1.18-8.2 libsmbconf0-debuginfo-4.1.18-8.2 libsmbldap-devel-4.1.18-8.2 libsmbldap0-4.1.18-8.2 libsmbldap0-debuginfo-4.1.18-8.2 libsmbsharemodes-devel-4.1.18-8.2 libsmbsharemodes0-4.1.18-8.2 libsmbsharemodes0-debuginfo-4.1.18-8.2 libtalloc-devel-2.1.2-2.3.1 libtalloc2-2.1.2-2.3.1 libtalloc2-debuginfo-2.1.2-2.3.1 libtevent-util-devel-4.1.18-8.2 libtevent-util0-4.1.18-8.2 libtevent-util0-debuginfo-4.1.18-8.2 libwbclient-devel-4.1.18-8.2 libwbclient0-4.1.18-8.2 libwbclient0-debuginfo-4.1.18-8.2 permissions-2014.08.26.1452.1-4.1 permissions-debuginfo-2014.08.26.1452.1-4.1 permissions-debugsource-2014.08.26.1452.1-4.1 pytalloc-2.1.2-2.3.1 pytalloc-debuginfo-2.1.2-2.3.1 pytalloc-devel-2.1.2-2.3.1 samba-4.1.18-8.2 samba-client-4.1.18-8.2 samba-client-debuginfo-4.1.18-8.2 samba-core-devel-4.1.18-8.2 samba-debuginfo-4.1.18-8.2 samba-debugsource-4.1.18-8.2 samba-krb-printing-3.7.0-3.1 samba-krb-printing-debuginfo-3.7.0-3.1 samba-krb-printing-debugsource-3.7.0-3.1 samba-libs-4.1.18-8.2 samba-libs-debuginfo-4.1.18-8.2 samba-pidl-4.1.18-8.2 samba-python-4.1.18-8.2 samba-python-debuginfo-4.1.18-8.2 samba-test-4.1.18-8.2 samba-test-debuginfo-4.1.18-8.2 samba-test-devel-4.1.18-8.2 samba-winbind-4.1.18-8.2 samba-winbind-debuginfo-4.1.18-8.2 talloc-debugsource-2.1.2-2.3.1 - openSUSE 13.2 (x86_64): libdcerpc-atsvc0-32bit-4.1.18-8.2 libdcerpc-atsvc0-debuginfo-32bit-4.1.18-8.2 libdcerpc-binding0-32bit-4.1.18-8.2 libdcerpc-binding0-debuginfo-32bit-4.1.18-8.2 libdcerpc-samr0-32bit-4.1.18-8.2 libdcerpc-samr0-debuginfo-32bit-4.1.18-8.2 libdcerpc0-32bit-4.1.18-8.2 libdcerpc0-debuginfo-32bit-4.1.18-8.2 libgensec0-32bit-4.1.18-8.2 libgensec0-debuginfo-32bit-4.1.18-8.2 libndr-krb5pac0-32bit-4.1.18-8.2 libndr-krb5pac0-debuginfo-32bit-4.1.18-8.2 libndr-nbt0-32bit-4.1.18-8.2 libndr-nbt0-debuginfo-32bit-4.1.18-8.2 libndr-standard0-32bit-4.1.18-8.2 libndr-standard0-debuginfo-32bit-4.1.18-8.2 libndr0-32bit-4.1.18-8.2 libndr0-debuginfo-32bit-4.1.18-8.2 libnetapi0-32bit-4.1.18-8.2 libnetapi0-debuginfo-32bit-4.1.18-8.2 libpdb0-32bit-4.1.18-8.2 libpdb0-debuginfo-32bit-4.1.18-8.2 libregistry0-32bit-4.1.18-8.2 libregistry0-debuginfo-32bit-4.1.18-8.2 libsamba-credentials0-32bit-4.1.18-8.2 libsamba-credentials0-debuginfo-32bit-4.1.18-8.2 libsamba-hostconfig0-32bit-4.1.18-8.2 libsamba-hostconfig0-debuginfo-32bit-4.1.18-8.2 libsamba-policy0-32bit-4.1.18-8.2 libsamba-policy0-debuginfo-32bit-4.1.18-8.2 libsamba-util0-32bit-4.1.18-8.2 libsamba-util0-debuginfo-32bit-4.1.18-8.2 libsamdb0-32bit-4.1.18-8.2 libsamdb0-debuginfo-32bit-4.1.18-8.2 libsmbclient-raw0-32bit-4.1.18-8.2 libsmbclient-raw0-debuginfo-32bit-4.1.18-8.2 libsmbclient0-32bit-4.1.18-8.2 libsmbclient0-debuginfo-32bit-4.1.18-8.2 libsmbconf0-32bit-4.1.18-8.2 libsmbconf0-debuginfo-32bit-4.1.18-8.2 libsmbldap0-32bit-4.1.18-8.2 libsmbldap0-debuginfo-32bit-4.1.18-8.2 libtalloc2-32bit-2.1.2-2.3.1 libtalloc2-debuginfo-32bit-2.1.2-2.3.1 libtevent-util0-32bit-4.1.18-8.2 libtevent-util0-debuginfo-32bit-4.1.18-8.2 libwbclient0-32bit-4.1.18-8.2 libwbclient0-debuginfo-32bit-4.1.18-8.2 pytalloc-32bit-2.1.2-2.3.1 pytalloc-debuginfo-32bit-2.1.2-2.3.1 samba-32bit-4.1.18-8.2 samba-client-32bit-4.1.18-8.2 samba-client-debuginfo-32bit-4.1.18-8.2 samba-debuginfo-32bit-4.1.18-8.2 samba-libs-32bit-4.1.18-8.2 samba-libs-debuginfo-32bit-4.1.18-8.2 samba-winbind-32bit-4.1.18-8.2 samba-winbind-debuginfo-32bit-4.1.18-8.2 - openSUSE 13.2 (noarch): samba-doc-4.1.18-8.2 - openSUSE 13.1 (i586 x86_64): libdcerpc-atsvc-devel-4.1.18-3.33.2 libdcerpc-atsvc0-4.1.18-3.33.2 libdcerpc-atsvc0-debuginfo-4.1.18-3.33.2 libdcerpc-binding0-4.1.18-3.33.2 libdcerpc-binding0-debuginfo-4.1.18-3.33.2 libdcerpc-devel-4.1.18-3.33.2 libdcerpc-samr-devel-4.1.18-3.33.2 libdcerpc-samr0-4.1.18-3.33.2 libdcerpc-samr0-debuginfo-4.1.18-3.33.2 libdcerpc0-4.1.18-3.33.2 libdcerpc0-debuginfo-4.1.18-3.33.2 libgensec-devel-4.1.18-3.33.2 libgensec0-4.1.18-3.33.2 libgensec0-debuginfo-4.1.18-3.33.2 libndr-devel-4.1.18-3.33.2 libndr-krb5pac-devel-4.1.18-3.33.2 libndr-krb5pac0-4.1.18-3.33.2 libndr-krb5pac0-debuginfo-4.1.18-3.33.2 libndr-nbt-devel-4.1.18-3.33.2 libndr-nbt0-4.1.18-3.33.2 libndr-nbt0-debuginfo-4.1.18-3.33.2 libndr-standard-devel-4.1.18-3.33.2 libndr-standard0-4.1.18-3.33.2 libndr-standard0-debuginfo-4.1.18-3.33.2 libndr0-4.1.18-3.33.2 libndr0-debuginfo-4.1.18-3.33.2 libnetapi-devel-4.1.18-3.33.2 libnetapi0-4.1.18-3.33.2 libnetapi0-debuginfo-4.1.18-3.33.2 libpdb-devel-4.1.18-3.33.2 libpdb0-4.1.18-3.33.2 libpdb0-debuginfo-4.1.18-3.33.2 libregistry-devel-4.1.18-3.33.2 libregistry0-4.1.18-3.33.2 libregistry0-debuginfo-4.1.18-3.33.2 libsamba-credentials-devel-4.1.18-3.33.2 libsamba-credentials0-4.1.18-3.33.2 libsamba-credentials0-debuginfo-4.1.18-3.33.2 libsamba-hostconfig-devel-4.1.18-3.33.2 libsamba-hostconfig0-4.1.18-3.33.2 libsamba-hostconfig0-debuginfo-4.1.18-3.33.2 libsamba-policy-devel-4.1.18-3.33.2 libsamba-policy0-4.1.18-3.33.2 libsamba-policy0-debuginfo-4.1.18-3.33.2 libsamba-util-devel-4.1.18-3.33.2 libsamba-util0-4.1.18-3.33.2 libsamba-util0-debuginfo-4.1.18-3.33.2 libsamdb-devel-4.1.18-3.33.2 libsamdb0-4.1.18-3.33.2 libsamdb0-debuginfo-4.1.18-3.33.2 libsmbclient-devel-4.1.18-3.33.2 libsmbclient-raw-devel-4.1.18-3.33.2 libsmbclient-raw0-4.1.18-3.33.2 libsmbclient-raw0-debuginfo-4.1.18-3.33.2 libsmbclient0-4.1.18-3.33.2 libsmbclient0-debuginfo-4.1.18-3.33.2 libsmbconf-devel-4.1.18-3.33.2 libsmbconf0-4.1.18-3.33.2 libsmbconf0-debuginfo-4.1.18-3.33.2 libsmbldap-devel-4.1.18-3.33.2 libsmbldap0-4.1.18-3.33.2 libsmbldap0-debuginfo-4.1.18-3.33.2 libsmbsharemodes-devel-4.1.18-3.33.2 libsmbsharemodes0-4.1.18-3.33.2 libsmbsharemodes0-debuginfo-4.1.18-3.33.2 libtalloc-devel-2.1.2-7.7.1 libtalloc2-2.1.2-7.7.1 libtalloc2-debuginfo-2.1.2-7.7.1 libtevent-util-devel-4.1.18-3.33.2 libtevent-util0-4.1.18-3.33.2 libtevent-util0-debuginfo-4.1.18-3.33.2 libwbclient-devel-4.1.18-3.33.2 libwbclient0-4.1.18-3.33.2 libwbclient0-debuginfo-4.1.18-3.33.2 permissions-2013.08.22.1339.1-2.4.1 permissions-debuginfo-2013.08.22.1339.1-2.4.1 permissions-debugsource-2013.08.22.1339.1-2.4.1 pytalloc-2.1.2-7.7.1 pytalloc-debuginfo-2.1.2-7.7.1 pytalloc-devel-2.1.2-7.7.1 samba-4.1.18-3.33.2 samba-client-4.1.18-3.33.2 samba-client-debuginfo-4.1.18-3.33.2 samba-core-devel-4.1.18-3.33.2 samba-debuginfo-4.1.18-3.33.2 samba-debugsource-4.1.18-3.33.2 samba-krb-printing-3.7.0-3.1 samba-krb-printing-debuginfo-3.7.0-3.1 samba-krb-printing-debugsource-3.7.0-3.1 samba-libs-4.1.18-3.33.2 samba-libs-debuginfo-4.1.18-3.33.2 samba-pidl-4.1.18-3.33.2 samba-python-4.1.18-3.33.2 samba-python-debuginfo-4.1.18-3.33.2 samba-test-4.1.18-3.33.2 samba-test-debuginfo-4.1.18-3.33.2 samba-test-devel-4.1.18-3.33.2 samba-winbind-4.1.18-3.33.2 samba-winbind-debuginfo-4.1.18-3.33.2 talloc-debugsource-2.1.2-7.7.1 - openSUSE 13.1 (x86_64): libdcerpc-atsvc0-32bit-4.1.18-3.33.2 libdcerpc-atsvc0-debuginfo-32bit-4.1.18-3.33.2 libdcerpc-binding0-32bit-4.1.18-3.33.2 libdcerpc-binding0-debuginfo-32bit-4.1.18-3.33.2 libdcerpc-samr0-32bit-4.1.18-3.33.2 libdcerpc-samr0-debuginfo-32bit-4.1.18-3.33.2 libdcerpc0-32bit-4.1.18-3.33.2 libdcerpc0-debuginfo-32bit-4.1.18-3.33.2 libgensec0-32bit-4.1.18-3.33.2 libgensec0-debuginfo-32bit-4.1.18-3.33.2 libndr-krb5pac0-32bit-4.1.18-3.33.2 libndr-krb5pac0-debuginfo-32bit-4.1.18-3.33.2 libndr-nbt0-32bit-4.1.18-3.33.2 libndr-nbt0-debuginfo-32bit-4.1.18-3.33.2 libndr-standard0-32bit-4.1.18-3.33.2 libndr-standard0-debuginfo-32bit-4.1.18-3.33.2 libndr0-32bit-4.1.18-3.33.2 libndr0-debuginfo-32bit-4.1.18-3.33.2 libnetapi0-32bit-4.1.18-3.33.2 libnetapi0-debuginfo-32bit-4.1.18-3.33.2 libpdb0-32bit-4.1.18-3.33.2 libpdb0-debuginfo-32bit-4.1.18-3.33.2 libregistry0-32bit-4.1.18-3.33.2 libregistry0-debuginfo-32bit-4.1.18-3.33.2 libsamba-credentials0-32bit-4.1.18-3.33.2 libsamba-credentials0-debuginfo-32bit-4.1.18-3.33.2 libsamba-hostconfig0-32bit-4.1.18-3.33.2 libsamba-hostconfig0-debuginfo-32bit-4.1.18-3.33.2 libsamba-policy0-32bit-4.1.18-3.33.2 libsamba-policy0-debuginfo-32bit-4.1.18-3.33.2 libsamba-util0-32bit-4.1.18-3.33.2 libsamba-util0-debuginfo-32bit-4.1.18-3.33.2 libsamdb0-32bit-4.1.18-3.33.2 libsamdb0-debuginfo-32bit-4.1.18-3.33.2 libsmbclient-raw0-32bit-4.1.18-3.33.2 libsmbclient-raw0-debuginfo-32bit-4.1.18-3.33.2 libsmbclient0-32bit-4.1.18-3.33.2 libsmbclient0-debuginfo-32bit-4.1.18-3.33.2 libsmbconf0-32bit-4.1.18-3.33.2 libsmbconf0-debuginfo-32bit-4.1.18-3.33.2 libsmbldap0-32bit-4.1.18-3.33.2 libsmbldap0-debuginfo-32bit-4.1.18-3.33.2 libtalloc2-32bit-2.1.2-7.7.1 libtalloc2-debuginfo-32bit-2.1.2-7.7.1 libtevent-util0-32bit-4.1.18-3.33.2 libtevent-util0-debuginfo-32bit-4.1.18-3.33.2 libwbclient0-32bit-4.1.18-3.33.2 libwbclient0-debuginfo-32bit-4.1.18-3.33.2 pytalloc-32bit-2.1.2-7.7.1 pytalloc-debuginfo-32bit-2.1.2-7.7.1 samba-32bit-4.1.18-3.33.2 samba-client-32bit-4.1.18-3.33.2 samba-client-debuginfo-32bit-4.1.18-3.33.2 samba-debuginfo-32bit-4.1.18-3.33.2 samba-libs-32bit-4.1.18-3.33.2 samba-libs-debuginfo-32bit-4.1.18-3.33.2 samba-winbind-32bit-4.1.18-3.33.2 samba-winbind-debuginfo-32bit-4.1.18-3.33.2 - openSUSE 13.1 (noarch): samba-doc-4.1.18-3.33.2 References: https://bugzilla.suse.com/901813 https://bugzilla.suse.com/906336 https://bugzilla.suse.com/910378 https://bugzilla.suse.com/912457 https://bugzilla.suse.com/913304 https://bugzilla.suse.com/923374 https://bugzilla.suse.com/931854

1 0

openSUSE-SU-2015:1059-1: moderate: Security update for coreutils, coreutils-testsuite
by opensuse-security＠opensuse.org 12 Jun '15

12 Jun '15

openSUSE Security Update: Security update for coreutils, coreutils-testsuite ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1059-1 Rating: moderate References: #928749 #933396 Cross-References: CVE-2015-4041 CVE-2015-4042 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: coreutils was updated to fix one security issue and one non-security bug. The following vulnerability was fixed: * CVE-2015-4042: Use a later version of the patch that fixed (boo#928749, CVE-2015-4041), also avoiding I18N issue The following bug was fixed: * boo#933396: adjust reference to info nodes in man pages Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-420=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): coreutils-8.23-2.12.1 coreutils-debuginfo-8.23-2.12.1 coreutils-debugsource-8.23-2.12.1 coreutils-testsuite-8.23-2.12.1 - openSUSE 13.2 (noarch): coreutils-lang-8.23-2.12.1 References: https://www.suse.com/security/cve/CVE-2015-4041.html https://www.suse.com/security/cve/CVE-2015-4042.html https://bugzilla.suse.com/928749 https://bugzilla.suse.com/933396

1 0

openSUSE-SU-2015:1058-1: moderate: Security update for dpkg, update-alternatives
by opensuse-security＠opensuse.org 12 Jun '15

12 Jun '15

openSUSE Security Update: Security update for dpkg, update-alternatives ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1058-1 Rating: moderate References: #926749 Cross-References: CVE-2015-0840 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: dpkg and update-alternatives were updated to 1.16.16 to fix one security issue and severan non-security bugs. The following vulnerabilities were fixed: * CVE-2015-0840: Specially crafted deb packages could have been used to bypass source package integrity verification in local installs (boo#926749) Also contains a number of upstream bugs and improvements. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-421=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-421=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): dpkg-1.16.16-8.3.1 dpkg-debuginfo-1.16.16-8.3.1 dpkg-debugsource-1.16.16-8.3.1 dpkg-devel-1.16.16-8.3.1 update-alternatives-1.16.16-8.3.1 update-alternatives-debuginfo-1.16.16-8.3.1 update-alternatives-debugsource-1.16.16-8.3.1 - openSUSE 13.2 (noarch): dpkg-lang-1.16.16-8.3.1 - openSUSE 13.1 (i586 x86_64): dpkg-1.16.16-3.3.1 dpkg-debuginfo-1.16.16-3.3.1 dpkg-debugsource-1.16.16-3.3.1 dpkg-devel-1.16.16-3.3.1 update-alternatives-1.16.16-3.3.1 update-alternatives-debuginfo-1.16.16-3.3.1 update-alternatives-debugsource-1.16.16-3.3.1 - openSUSE 13.1 (noarch): dpkg-lang-1.16.16-3.3.1 References: https://www.suse.com/security/cve/CVE-2015-0840.html https://bugzilla.suse.com/926749

1 0

openSUSE-SU-2015:1057-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 12 Jun '15

12 Jun '15

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1057-1 Rating: moderate References: #933227 Cross-References: CVE-2015-4148 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: PHP was updated to fix one security issue. The following vulnerability was fixed: * CVE-2015-4148: A type confusion flay in SoapClient could lead to information disclosure [bnc#933227] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-419=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-419=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_php5-5.6.1-27.1 apache2-mod_php5-debuginfo-5.6.1-27.1 php5-5.6.1-27.1 php5-bcmath-5.6.1-27.1 php5-bcmath-debuginfo-5.6.1-27.1 php5-bz2-5.6.1-27.1 php5-bz2-debuginfo-5.6.1-27.1 php5-calendar-5.6.1-27.1 php5-calendar-debuginfo-5.6.1-27.1 php5-ctype-5.6.1-27.1 php5-ctype-debuginfo-5.6.1-27.1 php5-curl-5.6.1-27.1 php5-curl-debuginfo-5.6.1-27.1 php5-dba-5.6.1-27.1 php5-dba-debuginfo-5.6.1-27.1 php5-debuginfo-5.6.1-27.1 php5-debugsource-5.6.1-27.1 php5-devel-5.6.1-27.1 php5-dom-5.6.1-27.1 php5-dom-debuginfo-5.6.1-27.1 php5-enchant-5.6.1-27.1 php5-enchant-debuginfo-5.6.1-27.1 php5-exif-5.6.1-27.1 php5-exif-debuginfo-5.6.1-27.1 php5-fastcgi-5.6.1-27.1 php5-fastcgi-debuginfo-5.6.1-27.1 php5-fileinfo-5.6.1-27.1 php5-fileinfo-debuginfo-5.6.1-27.1 php5-firebird-5.6.1-27.1 php5-firebird-debuginfo-5.6.1-27.1 php5-fpm-5.6.1-27.1 php5-fpm-debuginfo-5.6.1-27.1 php5-ftp-5.6.1-27.1 php5-ftp-debuginfo-5.6.1-27.1 php5-gd-5.6.1-27.1 php5-gd-debuginfo-5.6.1-27.1 php5-gettext-5.6.1-27.1 php5-gettext-debuginfo-5.6.1-27.1 php5-gmp-5.6.1-27.1 php5-gmp-debuginfo-5.6.1-27.1 php5-iconv-5.6.1-27.1 php5-iconv-debuginfo-5.6.1-27.1 php5-imap-5.6.1-27.1 php5-imap-debuginfo-5.6.1-27.1 php5-intl-5.6.1-27.1 php5-intl-debuginfo-5.6.1-27.1 php5-json-5.6.1-27.1 php5-json-debuginfo-5.6.1-27.1 php5-ldap-5.6.1-27.1 php5-ldap-debuginfo-5.6.1-27.1 php5-mbstring-5.6.1-27.1 php5-mbstring-debuginfo-5.6.1-27.1 php5-mcrypt-5.6.1-27.1 php5-mcrypt-debuginfo-5.6.1-27.1 php5-mssql-5.6.1-27.1 php5-mssql-debuginfo-5.6.1-27.1 php5-mysql-5.6.1-27.1 php5-mysql-debuginfo-5.6.1-27.1 php5-odbc-5.6.1-27.1 php5-odbc-debuginfo-5.6.1-27.1 php5-opcache-5.6.1-27.1 php5-opcache-debuginfo-5.6.1-27.1 php5-openssl-5.6.1-27.1 php5-openssl-debuginfo-5.6.1-27.1 php5-pcntl-5.6.1-27.1 php5-pcntl-debuginfo-5.6.1-27.1 php5-pdo-5.6.1-27.1 php5-pdo-debuginfo-5.6.1-27.1 php5-pgsql-5.6.1-27.1 php5-pgsql-debuginfo-5.6.1-27.1 php5-phar-5.6.1-27.1 php5-phar-debuginfo-5.6.1-27.1 php5-posix-5.6.1-27.1 php5-posix-debuginfo-5.6.1-27.1 php5-pspell-5.6.1-27.1 php5-pspell-debuginfo-5.6.1-27.1 php5-readline-5.6.1-27.1 php5-readline-debuginfo-5.6.1-27.1 php5-shmop-5.6.1-27.1 php5-shmop-debuginfo-5.6.1-27.1 php5-snmp-5.6.1-27.1 php5-snmp-debuginfo-5.6.1-27.1 php5-soap-5.6.1-27.1 php5-soap-debuginfo-5.6.1-27.1 php5-sockets-5.6.1-27.1 php5-sockets-debuginfo-5.6.1-27.1 php5-sqlite-5.6.1-27.1 php5-sqlite-debuginfo-5.6.1-27.1 php5-suhosin-5.6.1-27.1 php5-suhosin-debuginfo-5.6.1-27.1 php5-sysvmsg-5.6.1-27.1 php5-sysvmsg-debuginfo-5.6.1-27.1 php5-sysvsem-5.6.1-27.1 php5-sysvsem-debuginfo-5.6.1-27.1 php5-sysvshm-5.6.1-27.1 php5-sysvshm-debuginfo-5.6.1-27.1 php5-tidy-5.6.1-27.1 php5-tidy-debuginfo-5.6.1-27.1 php5-tokenizer-5.6.1-27.1 php5-tokenizer-debuginfo-5.6.1-27.1 php5-wddx-5.6.1-27.1 php5-wddx-debuginfo-5.6.1-27.1 php5-xmlreader-5.6.1-27.1 php5-xmlreader-debuginfo-5.6.1-27.1 php5-xmlrpc-5.6.1-27.1 php5-xmlrpc-debuginfo-5.6.1-27.1 php5-xmlwriter-5.6.1-27.1 php5-xmlwriter-debuginfo-5.6.1-27.1 php5-xsl-5.6.1-27.1 php5-xsl-debuginfo-5.6.1-27.1 php5-zip-5.6.1-27.1 php5-zip-debuginfo-5.6.1-27.1 php5-zlib-5.6.1-27.1 php5-zlib-debuginfo-5.6.1-27.1 - openSUSE 13.2 (noarch): php5-pear-5.6.1-27.1 - openSUSE 13.1 (i586 x86_64): apache2-mod_php5-5.4.20-58.1 apache2-mod_php5-debuginfo-5.4.20-58.1 php5-5.4.20-58.1 php5-bcmath-5.4.20-58.1 php5-bcmath-debuginfo-5.4.20-58.1 php5-bz2-5.4.20-58.1 php5-bz2-debuginfo-5.4.20-58.1 php5-calendar-5.4.20-58.1 php5-calendar-debuginfo-5.4.20-58.1 php5-ctype-5.4.20-58.1 php5-ctype-debuginfo-5.4.20-58.1 php5-curl-5.4.20-58.1 php5-curl-debuginfo-5.4.20-58.1 php5-dba-5.4.20-58.1 php5-dba-debuginfo-5.4.20-58.1 php5-debuginfo-5.4.20-58.1 php5-debugsource-5.4.20-58.1 php5-devel-5.4.20-58.1 php5-dom-5.4.20-58.1 php5-dom-debuginfo-5.4.20-58.1 php5-enchant-5.4.20-58.1 php5-enchant-debuginfo-5.4.20-58.1 php5-exif-5.4.20-58.1 php5-exif-debuginfo-5.4.20-58.1 php5-fastcgi-5.4.20-58.1 php5-fastcgi-debuginfo-5.4.20-58.1 php5-fileinfo-5.4.20-58.1 php5-fileinfo-debuginfo-5.4.20-58.1 php5-firebird-5.4.20-58.1 php5-firebird-debuginfo-5.4.20-58.1 php5-fpm-5.4.20-58.1 php5-fpm-debuginfo-5.4.20-58.1 php5-ftp-5.4.20-58.1 php5-ftp-debuginfo-5.4.20-58.1 php5-gd-5.4.20-58.1 php5-gd-debuginfo-5.4.20-58.1 php5-gettext-5.4.20-58.1 php5-gettext-debuginfo-5.4.20-58.1 php5-gmp-5.4.20-58.1 php5-gmp-debuginfo-5.4.20-58.1 php5-iconv-5.4.20-58.1 php5-iconv-debuginfo-5.4.20-58.1 php5-imap-5.4.20-58.1 php5-imap-debuginfo-5.4.20-58.1 php5-intl-5.4.20-58.1 php5-intl-debuginfo-5.4.20-58.1 php5-json-5.4.20-58.1 php5-json-debuginfo-5.4.20-58.1 php5-ldap-5.4.20-58.1 php5-ldap-debuginfo-5.4.20-58.1 php5-mbstring-5.4.20-58.1 php5-mbstring-debuginfo-5.4.20-58.1 php5-mcrypt-5.4.20-58.1 php5-mcrypt-debuginfo-5.4.20-58.1 php5-mssql-5.4.20-58.1 php5-mssql-debuginfo-5.4.20-58.1 php5-mysql-5.4.20-58.1 php5-mysql-debuginfo-5.4.20-58.1 php5-odbc-5.4.20-58.1 php5-odbc-debuginfo-5.4.20-58.1 php5-openssl-5.4.20-58.1 php5-openssl-debuginfo-5.4.20-58.1 php5-pcntl-5.4.20-58.1 php5-pcntl-debuginfo-5.4.20-58.1 php5-pdo-5.4.20-58.1 php5-pdo-debuginfo-5.4.20-58.1 php5-pgsql-5.4.20-58.1 php5-pgsql-debuginfo-5.4.20-58.1 php5-phar-5.4.20-58.1 php5-phar-debuginfo-5.4.20-58.1 php5-posix-5.4.20-58.1 php5-posix-debuginfo-5.4.20-58.1 php5-pspell-5.4.20-58.1 php5-pspell-debuginfo-5.4.20-58.1 php5-readline-5.4.20-58.1 php5-readline-debuginfo-5.4.20-58.1 php5-shmop-5.4.20-58.1 php5-shmop-debuginfo-5.4.20-58.1 php5-snmp-5.4.20-58.1 php5-snmp-debuginfo-5.4.20-58.1 php5-soap-5.4.20-58.1 php5-soap-debuginfo-5.4.20-58.1 php5-sockets-5.4.20-58.1 php5-sockets-debuginfo-5.4.20-58.1 php5-sqlite-5.4.20-58.1 php5-sqlite-debuginfo-5.4.20-58.1 php5-suhosin-5.4.20-58.1 php5-suhosin-debuginfo-5.4.20-58.1 php5-sysvmsg-5.4.20-58.1 php5-sysvmsg-debuginfo-5.4.20-58.1 php5-sysvsem-5.4.20-58.1 php5-sysvsem-debuginfo-5.4.20-58.1 php5-sysvshm-5.4.20-58.1 php5-sysvshm-debuginfo-5.4.20-58.1 php5-tidy-5.4.20-58.1 php5-tidy-debuginfo-5.4.20-58.1 php5-tokenizer-5.4.20-58.1 php5-tokenizer-debuginfo-5.4.20-58.1 php5-wddx-5.4.20-58.1 php5-wddx-debuginfo-5.4.20-58.1 php5-xmlreader-5.4.20-58.1 php5-xmlreader-debuginfo-5.4.20-58.1 php5-xmlrpc-5.4.20-58.1 php5-xmlrpc-debuginfo-5.4.20-58.1 php5-xmlwriter-5.4.20-58.1 php5-xmlwriter-debuginfo-5.4.20-58.1 php5-xsl-5.4.20-58.1 php5-xsl-debuginfo-5.4.20-58.1 php5-zip-5.4.20-58.1 php5-zip-debuginfo-5.4.20-58.1 php5-zlib-5.4.20-58.1 php5-zlib-debuginfo-5.4.20-58.1 - openSUSE 13.1 (noarch): php5-pear-5.4.20-58.1 References: https://www.suse.com/security/cve/CVE-2015-4148.html https://bugzilla.suse.com/933227

1 0

openSUSE-SU-2015:1056-1: critical: Security update for cups
by opensuse-security＠opensuse.org 12 Jun '15

12 Jun '15

openSUSE Security Update: Security update for cups ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1056-1 Rating: critical References: #924208 Cross-References: CVE-2012-5519 CVE-2015-1158 CVE-2015-1159 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update fixes the following issues: - CVE-2015-1158 and CVE-2015-1159 fixes a possible privilege escalation via cross-site scripting and bad print job submission used to replace cupsd.conf on server (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159 bugzilla.suse.com bsc#924208). In general it is crucial to limit access to CUPS to trustworthy users who do not misuse their permission to submit print jobs which means to upload arbitrary data onto the CUPS server, see https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings and cf. the entries about CVE-2012-5519 below. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-418=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-418=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): cups-1.5.4-21.9.1 cups-client-1.5.4-21.9.1 cups-client-debuginfo-1.5.4-21.9.1 cups-ddk-1.5.4-21.9.1 cups-ddk-debuginfo-1.5.4-21.9.1 cups-debuginfo-1.5.4-21.9.1 cups-debugsource-1.5.4-21.9.1 cups-devel-1.5.4-21.9.1 cups-libs-1.5.4-21.9.1 cups-libs-debuginfo-1.5.4-21.9.1 - openSUSE 13.2 (x86_64): cups-libs-32bit-1.5.4-21.9.1 cups-libs-debuginfo-32bit-1.5.4-21.9.1 - openSUSE 13.1 (i586 x86_64): cups-1.5.4-12.20.1 cups-client-1.5.4-12.20.1 cups-client-debuginfo-1.5.4-12.20.1 cups-ddk-1.5.4-12.20.1 cups-ddk-debuginfo-1.5.4-12.20.1 cups-debuginfo-1.5.4-12.20.1 cups-debugsource-1.5.4-12.20.1 cups-devel-1.5.4-12.20.1 cups-libs-1.5.4-12.20.1 cups-libs-debuginfo-1.5.4-12.20.1 - openSUSE 13.1 (x86_64): cups-libs-32bit-1.5.4-12.20.1 cups-libs-debuginfo-32bit-1.5.4-12.20.1 References: https://www.suse.com/security/cve/CVE-2012-5519.html https://www.suse.com/security/cve/CVE-2015-1158.html https://www.suse.com/security/cve/CVE-2015-1159.html https://bugzilla.suse.com/924208

1 0

openSUSE-SU-2015:1052-1: moderate: Security update for python-setuptools
by opensuse-security＠opensuse.org 11 Jun '15

11 Jun '15

openSUSE Security Update: Security update for python-setuptools ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1052-1 Rating: moderate References: #930189 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Python-setup tools was updated to fix one security issues. The following vulnerability was fixed: * non-RFC6125-compliant host name matching - substring wildcard should not match IDNA prefix (booc#930189) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-413=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): python-setuptools-0.9.8-3.3.1 References: https://bugzilla.suse.com/930189

1 0

openSUSE-RU-2015:1051-1: moderate: Recommended update for libvirt
by maintenance＠opensuse.org 11 Jun '15

11 Jun '15

openSUSE Recommended Update: Recommended update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1051-1 Rating: moderate References: #875216 #926765 #933043 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This recommended update for libvirt fixes the following issues: - Remove unsupported settings in libvirtd.socket unit file when systemd version lt; 214 (bsc#933043) - libxl: support virtual sound devices in HVM domains (bsc#875216) - add libvirt-daemon-driver-qemu dependency on libvirt-daemon-driver-storage (boo#926765) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-414=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libvirt-1.2.9-23.1 libvirt-client-1.2.9-23.1 libvirt-client-debuginfo-1.2.9-23.1 libvirt-daemon-1.2.9-23.1 libvirt-daemon-config-network-1.2.9-23.1 libvirt-daemon-config-nwfilter-1.2.9-23.1 libvirt-daemon-debuginfo-1.2.9-23.1 libvirt-daemon-driver-interface-1.2.9-23.1 libvirt-daemon-driver-interface-debuginfo-1.2.9-23.1 libvirt-daemon-driver-lxc-1.2.9-23.1 libvirt-daemon-driver-lxc-debuginfo-1.2.9-23.1 libvirt-daemon-driver-network-1.2.9-23.1 libvirt-daemon-driver-network-debuginfo-1.2.9-23.1 libvirt-daemon-driver-nodedev-1.2.9-23.1 libvirt-daemon-driver-nodedev-debuginfo-1.2.9-23.1 libvirt-daemon-driver-nwfilter-1.2.9-23.1 libvirt-daemon-driver-nwfilter-debuginfo-1.2.9-23.1 libvirt-daemon-driver-qemu-1.2.9-23.1 libvirt-daemon-driver-qemu-debuginfo-1.2.9-23.1 libvirt-daemon-driver-secret-1.2.9-23.1 libvirt-daemon-driver-secret-debuginfo-1.2.9-23.1 libvirt-daemon-driver-storage-1.2.9-23.1 libvirt-daemon-driver-storage-debuginfo-1.2.9-23.1 libvirt-daemon-driver-uml-1.2.9-23.1 libvirt-daemon-driver-uml-debuginfo-1.2.9-23.1 libvirt-daemon-driver-vbox-1.2.9-23.1 libvirt-daemon-driver-vbox-debuginfo-1.2.9-23.1 libvirt-daemon-lxc-1.2.9-23.1 libvirt-daemon-qemu-1.2.9-23.1 libvirt-daemon-uml-1.2.9-23.1 libvirt-daemon-vbox-1.2.9-23.1 libvirt-debugsource-1.2.9-23.1 libvirt-devel-1.2.9-23.1 libvirt-doc-1.2.9-23.1 libvirt-lock-sanlock-1.2.9-23.1 libvirt-lock-sanlock-debuginfo-1.2.9-23.1 libvirt-login-shell-1.2.9-23.1 libvirt-login-shell-debuginfo-1.2.9-23.1 - openSUSE 13.2 (x86_64): libvirt-client-32bit-1.2.9-23.1 libvirt-client-debuginfo-32bit-1.2.9-23.1 libvirt-daemon-driver-libxl-1.2.9-23.1 libvirt-daemon-driver-libxl-debuginfo-1.2.9-23.1 libvirt-daemon-driver-xen-1.2.9-23.1 libvirt-daemon-driver-xen-debuginfo-1.2.9-23.1 libvirt-daemon-xen-1.2.9-23.1 libvirt-devel-32bit-1.2.9-23.1 References: https://bugzilla.suse.com/875216 https://bugzilla.suse.com/926765 https://bugzilla.suse.com/933043

1 0

openSUSE-SU-2015:1050-1: moderate: Security update for tidy
by opensuse-security＠opensuse.org 11 Jun '15

11 Jun '15

openSUSE Security Update: Security update for tidy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1050-1 Rating: moderate References: #933588 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Tidy was updated to fix one security issue. The following vulnerability was fixed: * A heap-based buffer overflow in tidy could have unspecified impact when processing user-supplied input. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-416=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-416=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libtidy-0_99-0-1.0.20100204cvs-19.3.1 libtidy-0_99-0-debuginfo-1.0.20100204cvs-19.3.1 libtidy-0_99-0-devel-1.0.20100204cvs-19.3.1 tidy-1.0.20100204cvs-19.3.1 tidy-debuginfo-1.0.20100204cvs-19.3.1 tidy-debugsource-1.0.20100204cvs-19.3.1 - openSUSE 13.2 (noarch): tidy-doc-1.0.20100204cvs-19.3.1 - openSUSE 13.1 (i586 x86_64): libtidy-0_99-0-1.0.20100204cvs-17.3.1 libtidy-0_99-0-debuginfo-1.0.20100204cvs-17.3.1 libtidy-0_99-0-devel-1.0.20100204cvs-17.3.1 tidy-1.0.20100204cvs-17.3.1 tidy-debuginfo-1.0.20100204cvs-17.3.1 tidy-debugsource-1.0.20100204cvs-17.3.1 - openSUSE 13.1 (noarch): tidy-doc-1.0.20100204cvs-17.3.1 References: https://bugzilla.suse.com/933588

1 0