July 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2015:1326-1: important: Security update for bind
by opensuse-security＠opensuse.org 31 Jul '15

31 Jul '15

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1326-1 Rating: important References: #918330 #936476 #939567 Cross-References: CVE-2015-1349 CVE-2015-4620 CVE-2015-5477 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: bind was updated to fix one security issue. This security issue was fixed: - CVE-2015-5477: Remote DoS via TKEY queries (boo#939567) Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet handling. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-527=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): bind-9.9.4P2-66.1 bind-chrootenv-9.9.4P2-66.1 bind-debuginfo-9.9.4P2-66.1 bind-debugsource-9.9.4P2-66.1 bind-devel-9.9.4P2-66.1 bind-libs-9.9.4P2-66.1 bind-libs-debuginfo-9.9.4P2-66.1 bind-lwresd-9.9.4P2-66.1 bind-lwresd-debuginfo-9.9.4P2-66.1 bind-utils-9.9.4P2-66.1 bind-utils-debuginfo-9.9.4P2-66.1 - openSUSE Evergreen 11.4 (x86_64): bind-libs-32bit-9.9.4P2-66.1 bind-libs-debuginfo-32bit-9.9.4P2-66.1 - openSUSE Evergreen 11.4 (noarch): bind-doc-9.9.4P2-66.1 - openSUSE Evergreen 11.4 (ia64): bind-libs-debuginfo-x86-9.9.4P2-66.1 bind-libs-x86-9.9.4P2-66.1 References: https://www.suse.com/security/cve/CVE-2015-1349.html https://www.suse.com/security/cve/CVE-2015-4620.html https://www.suse.com/security/cve/CVE-2015-5477.html https://bugzilla.suse.com/918330 https://bugzilla.suse.com/936476 https://bugzilla.suse.com/939567

1 0

openSUSE-SU-2015:1325-1: moderate: Security update for openldap2
by opensuse-security＠opensuse.org 31 Jul '15

31 Jul '15

openSUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1325-1 Rating: moderate References: #905959 #916897 #916914 Cross-References: CVE-2015-1545 CVE-2015-1546 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: OpenLDAP was updated to fix two security issues and one bug. The following vulnerabilities were fixed: * CVE-2015-1546: slapd crash in valueReturnFilter cleanup (bnc#916914) * CVE-2015-1545: slapd crashes on search with deref control and empty attr list (bnc#916897) The following non-security bug was fixed: * boo#905959: Prevent connection-0 (internal connection) from show up in the monitor backend Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-526=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-526=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): compat-libldap-2_3-0-2.3.37-8.5.1 compat-libldap-2_3-0-debuginfo-2.3.37-8.5.1 libldap-2_4-2-2.4.39-8.5.1 libldap-2_4-2-debuginfo-2.4.39-8.5.1 openldap2-2.4.39-8.5.1 openldap2-back-meta-2.4.39-8.5.1 openldap2-back-meta-debuginfo-2.4.39-8.5.1 openldap2-back-perl-2.4.39-8.5.1 openldap2-back-perl-debuginfo-2.4.39-8.5.1 openldap2-back-sql-2.4.39-8.5.1 openldap2-back-sql-debuginfo-2.4.39-8.5.1 openldap2-client-2.4.39-8.5.1 openldap2-client-debuginfo-2.4.39-8.5.1 openldap2-client-debugsource-2.4.39-8.5.1 openldap2-debuginfo-2.4.39-8.5.1 openldap2-debugsource-2.4.39-8.5.1 openldap2-devel-2.4.39-8.5.1 openldap2-devel-static-2.4.39-8.5.1 - openSUSE 13.2 (x86_64): libldap-2_4-2-32bit-2.4.39-8.5.1 libldap-2_4-2-debuginfo-32bit-2.4.39-8.5.1 openldap2-devel-32bit-2.4.39-8.5.1 - openSUSE 13.2 (noarch): openldap2-doc-2.4.39-8.5.1 - openSUSE 13.1 (i586 x86_64): libldap-2_4-2-2.4.33-8.3.1 libldap-2_4-2-debuginfo-2.4.33-8.3.1 openldap2-2.4.33-8.3.1 openldap2-back-meta-2.4.33-8.3.1 openldap2-back-meta-debuginfo-2.4.33-8.3.1 openldap2-back-perl-2.4.33-8.3.1 openldap2-back-perl-debuginfo-2.4.33-8.3.1 openldap2-back-sql-2.4.33-8.3.1 openldap2-back-sql-debuginfo-2.4.33-8.3.1 openldap2-client-2.4.33-8.3.1 openldap2-client-debuginfo-2.4.33-8.3.1 openldap2-client-debugsource-2.4.33-8.3.1 openldap2-debuginfo-2.4.33-8.3.1 openldap2-debugsource-2.4.33-8.3.1 openldap2-devel-2.4.33-8.3.1 openldap2-devel-static-2.4.33-8.3.1 - openSUSE 13.1 (x86_64): libldap-2_4-2-32bit-2.4.33-8.3.1 libldap-2_4-2-debuginfo-32bit-2.4.33-8.3.1 openldap2-devel-32bit-2.4.33-8.3.1 - openSUSE 13.1 (noarch): openldap2-doc-2.4.33-8.3.1 References: https://www.suse.com/security/cve/CVE-2015-1545.html https://www.suse.com/security/cve/CVE-2015-1546.html https://bugzilla.suse.com/905959 https://bugzilla.suse.com/916897 https://bugzilla.suse.com/916914

1 0

openSUSE-RU-2015:1323-1: moderate: Handle tilde in package version
by maintenance＠opensuse.org 30 Jul '15

30 Jul '15

openSUSE Recommended Update: Handle tilde in package version ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1323-1 Rating: moderate References: Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: Tolerate tilde in package version. This allows building packages which use the tilde to indicate a pre version. Note: zypper will not handle tilde in 11.4, '1.0~rc1' is seen as newer than '1.0'. Handle also /etc/alternatives properly to fix buildfailures which happen with some newer packages. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-525=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): rpm-4.8.0-28.43.1 rpm-debuginfo-4.8.0-28.43.1 rpm-debugsource-4.8.0-28.43.1 rpm-devel-4.8.0-28.43.1 - openSUSE Evergreen 11.4 (x86_64): rpm-32bit-4.8.0-28.43.1 rpm-debuginfo-32bit-4.8.0-28.43.1 - openSUSE Evergreen 11.4 (ia64): rpm-debuginfo-x86-4.8.0-28.43.1 rpm-x86-4.8.0-28.43.1 References:

1 0

openSUSE-SU-2015:1317-1: moderate: Security update for lxc
by opensuse-security＠opensuse.org 30 Jul '15

30 Jul '15

openSUSE Security Update: Security update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1317-1 Rating: moderate References: #938523 Cross-References: CVE-2015-1334 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: lxc was updated to fix one security issue. The following vulnerability was fixed: * CVE-2015-1334: AppArmor or SELinux confinement escape via fake /proc (bnc#938523) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-524=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): lxc-0.9.0-3.8.1 lxc-debuginfo-0.9.0-3.8.1 lxc-debugsource-0.9.0-3.8.1 lxc-devel-0.9.0-3.8.1 References: https://www.suse.com/security/cve/CVE-2015-1334.html https://bugzilla.suse.com/938523

1 0

openSUSE-SU-2015:1315-1: moderate: Security update for lxc
by opensuse-security＠opensuse.org 30 Jul '15

30 Jul '15

openSUSE Security Update: Security update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1315-1 Rating: moderate References: #938522 #938523 Cross-References: CVE-2015-1331 CVE-2015-1334 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: lxc was updated to fix two security issues. The following vulnerabilities were fixed: * CVE-2015-1331: directory traversal flaw allowing arbitrary file creation as the root user (bnc#938522) * CVE-2015-1334: AppArmor or SELinux confinement escape via fake /proc (bnc#938523) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-523=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): lxc-1.0.6-3.1 lxc-debuginfo-1.0.6-3.1 lxc-debugsource-1.0.6-3.1 lxc-devel-1.0.6-3.1 References: https://www.suse.com/security/cve/CVE-2015-1331.html https://www.suse.com/security/cve/CVE-2015-1334.html https://bugzilla.suse.com/938522 https://bugzilla.suse.com/938523

1 0

openSUSE-RU-2015:1311-1: moderate: Recommended udpate for Qt5, KDE Frameworks 5 and Plasma 5
by maintenance＠opensuse.org 29 Jul '15

29 Jul '15

openSUSE Recommended Update: Recommended udpate for Qt5, KDE Frameworks 5 and Plasma 5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1311-1 Rating: moderate References: #931167 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides Qt 5.4.2, KDE Frameworks 5.11.0 and Plasma 5.3.2 with various fixes and improvements. For a detailed description of all changes and fixes please refer to: Qt5: https://blog.qt.io/blog/2015/06/02/qt-5-4-2-released/ KDE Frameworks 5: https://www.kde.org/announcements/kde-frameworks-5.11.0.php Plasma 5: https://www.kde.org/announcements/plasma-5.3.2.php Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-522=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): attica-qt5-debugsource-5.11.0-24.3 attica-qt5-devel-5.11.0-24.3 baloo5-5.9.2-18.3 baloo5-debugsource-5.9.2-18.3 baloo5-devel-5.9.2-18.3 baloo5-file-5.9.2-18.3 baloo5-file-debuginfo-5.9.2-18.3 baloo5-imports-5.9.2-18.3 baloo5-imports-debuginfo-5.9.2-18.3 baloo5-kioslaves-5.9.2-18.3 baloo5-kioslaves-debuginfo-5.9.2-18.3 baloo5-tools-5.9.2-18.3 baloo5-tools-debuginfo-5.9.2-18.3 bluedevil5-5.3.2-8.3 bluedevil5-debuginfo-5.3.2-8.3 bluedevil5-debugsource-5.3.2-8.3 bluez-qt-debugsource-5.11.0-2.5 bluez-qt-devel-5.11.0-2.5 bluez-qt-imports-5.11.0-2.5 bluez-qt-imports-debuginfo-5.11.0-2.5 bluez-qt-udev-5.11.0-2.5 breeze-5.3.2-21.3 breeze-debugsource-5.3.2-21.3 breeze4-style-5.3.2-21.1 breeze4-style-debuginfo-5.3.2-21.1 breeze4-style-debugsource-5.3.2-21.1 breeze5-decoration-5.3.2-21.3 breeze5-decoration-debuginfo-5.3.2-21.3 breeze5-style-5.3.2-21.3 breeze5-style-debuginfo-5.3.2-21.3 cmake-3.0.2-3.1 cmake-debuginfo-3.0.2-3.1 cmake-debugsource-3.0.2-3.1 cmake-gui-3.0.2-3.3 cmake-gui-debuginfo-3.0.2-3.3 cmake-gui-debugsource-3.0.2-3.3 cmake-man-3.0.2-3.3 drkonqi5-5.3.2-29.1 drkonqi5-debuginfo-5.3.2-29.1 extra-cmake-modules-5.11.0-24.1 fcitx-qt5-0.1.2-2.8.3 fcitx-qt5-debuginfo-0.1.2-2.8.3 fcitx-qt5-debugsource-0.1.2-2.8.3 fcitx-qt5-devel-0.1.2-2.8.3 frameworkintegration-debugsource-5.11.0-24.1 frameworkintegration-devel-5.11.0-24.1 frameworkintegration-plugin-5.11.0-24.1 frameworkintegration-plugin-debuginfo-5.11.0-24.1 kactivities5-5.11.0-24.1 kactivities5-debuginfo-5.11.0-24.1 kactivities5-debugsource-5.11.0-24.1 kactivities5-devel-5.11.0-24.1 kactivities5-imports-5.11.0-24.1 kactivities5-imports-debuginfo-5.11.0-24.1 kapidox-5.11.0-24.1 karchive-debugsource-5.11.0-24.3 karchive-devel-5.11.0-24.3 kauth-debugsource-5.11.0-24.3 kauth-devel-5.11.0-24.3 kbookmarks-debugsource-5.11.0-24.1 kbookmarks-devel-5.11.0-24.1 kcm_sddm-5.3.2-8.3 kcm_sddm-debuginfo-5.3.2-8.3 kcm_sddm-debugsource-5.3.2-8.3 kcmutils-debugsource-5.11.0-24.1 kcmutils-devel-5.11.0-24.1 kcodecs-debugsource-5.11.0-24.3 kcodecs-devel-5.11.0-24.3 kcompletion-debugsource-5.11.0-24.3 kcompletion-devel-5.11.0-24.3 kconf_update5-5.11.0-24.3 kconf_update5-debuginfo-5.11.0-24.3 kconfig-debugsource-5.11.0-24.3 kconfig-devel-5.11.0-24.3 kconfig-devel-debuginfo-5.11.0-24.3 kconfigwidgets-debugsource-5.11.0-24.3 kconfigwidgets-devel-5.11.0-24.3 kcoreaddons-5.11.0-24.3 kcoreaddons-debugsource-5.11.0-24.3 kcoreaddons-devel-5.11.0-24.3 kcoreaddons-devel-debuginfo-5.11.0-24.3 kcrash-debugsource-5.11.0-24.1 kcrash-devel-5.11.0-24.1 kdbusaddons-debugsource-5.11.0-24.3 kdbusaddons-devel-5.11.0-24.3 kdbusaddons-tools-5.11.0-24.3 kdbusaddons-tools-debuginfo-5.11.0-24.3 kde-cli-tools5-5.3.2-18.2 kde-cli-tools5-debuginfo-5.3.2-18.2 kde-cli-tools5-debugsource-5.3.2-18.2 kde-gtk-config5-5.3.2-8.2 kde-gtk-config5-debuginfo-5.3.2-8.2 kde-gtk-config5-debugsource-5.3.2-8.2 kdeclarative-components-5.11.0-24.1 kdeclarative-components-debuginfo-5.11.0-24.1 kdeclarative-debugsource-5.11.0-24.1 kdeclarative-devel-5.11.0-24.1 kdeclarative-tools-5.11.0-24.1 kdeclarative-tools-debuginfo-5.11.0-24.1 kded-5.11.0-24.1 kded-debuginfo-5.11.0-24.1 kded-debugsource-5.11.0-24.1 kded-devel-5.11.0-24.1 kdelibs4support-5.11.0-24.25 kdelibs4support-debuginfo-5.11.0-24.25 kdelibs4support-debugsource-5.11.0-24.25 kdelibs4support-devel-5.11.0-24.25 kdesignerplugin-5.11.0-24.18 kdesignerplugin-debuginfo-5.11.0-24.18 kdesignerplugin-debugsource-5.11.0-24.18 kdesignerplugin-devel-5.11.0-24.18 kdesu-debugsource-5.11.0-24.3 kdesu-devel-5.11.0-24.3 kdewebkit-debugsource-5.11.0-24.1 kdewebkit-devel-5.11.0-24.1 kdnssd-framework-debugsource-5.11.0-24.3 kdnssd-framework-devel-5.11.0-24.3 kdoctools-5.11.0-24.3 kdoctools-debuginfo-5.11.0-24.3 kdoctools-debugsource-5.11.0-24.3 kdoctools-devel-5.11.0-24.3 kemoticons-debugsource-5.11.0-24.3 kemoticons-devel-5.11.0-24.3 kfilemetadata5-5.9.2-18.3 kfilemetadata5-debuginfo-5.9.2-18.3 kfilemetadata5-debugsource-5.9.2-18.3 kfilemetadata5-devel-5.9.2-18.3 kglobalaccel-debugsource-5.11.0-24.3 kglobalaccel-devel-5.11.0-24.3 kglobalaccel5-5.11.0-24.3 kglobalaccel5-debuginfo-5.11.0-24.3 kguiaddons-debugsource-5.11.0-24.3 kguiaddons-devel-5.11.0-24.3 khelpcenter5-5.3.2-2.21 khelpcenter5-debuginfo-5.3.2-2.21 khelpcenter5-debugsource-5.3.2-2.21 khotkeys5-5.3.2-23.13 khotkeys5-debuginfo-5.3.2-23.13 khotkeys5-debugsource-5.3.2-23.13 khotkeys5-devel-5.3.2-23.13 khtml-debugsource-5.11.0-24.1 khtml-devel-5.11.0-24.1 ki18n-debugsource-5.11.0-24.5 ki18n-devel-5.11.0-24.5 kiconthemes-debugsource-5.11.0-24.2 kiconthemes-devel-5.11.0-24.2 kiconthemes-devel-debuginfo-5.11.0-24.2 kidletime-debugsource-5.11.0-24.4 kidletime-devel-5.11.0-24.4 kimageformats-5.11.0-24.3 kimageformats-debuginfo-5.11.0-24.3 kimageformats-debugsource-5.11.0-24.3 kinfocenter5-5.3.2-18.2 kinfocenter5-debuginfo-5.3.2-18.2 kinfocenter5-debugsource-5.3.2-18.2 kinit-5.11.0-24.1 kinit-debuginfo-5.11.0-24.1 kinit-debugsource-5.11.0-24.1 kinit-devel-5.11.0-24.1 kio-5.11.0-24.13 kio-core-5.11.0-24.13 kio-core-debuginfo-5.11.0-24.13 kio-debuginfo-5.11.0-24.13 kio-debugsource-5.11.0-24.13 kio-devel-5.11.0-24.13 kio-extras5-5.3.2-19.4 kio-extras5-debuginfo-5.3.2-19.4 kio-extras5-debugsource-5.3.2-19.4 kitemmodels-debugsource-5.11.0-24.3 kitemmodels-devel-5.11.0-24.3 kitemviews-debugsource-5.11.0-24.3 kitemviews-devel-5.11.0-24.3 kjobwidgets-debugsource-5.11.0-24.3 kjobwidgets-devel-5.11.0-24.3 kjs-debugsource-5.11.0-24.3 kjs-devel-5.11.0-24.3 kjs-devel-debuginfo-5.11.0-24.3 kjsembed-debugsource-5.11.0-24.3 kjsembed-devel-5.11.0-24.3 kjsembed-devel-debuginfo-5.11.0-24.3 kmediaplayer-debugsource-5.11.0-24.1 kmediaplayer-devel-5.11.0-24.1 kmenuedit5-5.3.2-18.9 kmenuedit5-debuginfo-5.3.2-18.9 kmenuedit5-debugsource-5.3.2-18.9 knewstuff-debugsource-5.11.0-24.1 knewstuff-devel-5.11.0-24.1 knotifications-debugsource-5.11.0-24.2 knotifications-devel-5.11.0-24.2 knotifyconfig-debugsource-5.11.0-24.1 knotifyconfig-devel-5.11.0-24.1 kpackage-5.11.0-18.3 kpackage-debuginfo-5.11.0-18.3 kpackage-debugsource-5.11.0-18.3 kpackage-devel-5.11.0-18.3 kparts-debugsource-5.11.0-24.1 kparts-devel-5.11.0-24.1 kpeople5-5.11.0-11.3 kpeople5-debuginfo-5.11.0-11.3 kpeople5-debugsource-5.11.0-11.3 kpeople5-devel-5.11.0-11.3 kplotting-debugsource-5.11.0-24.3 kplotting-devel-5.11.0-24.3 kpty-debugsource-5.11.0-24.3 kpty-devel-5.11.0-24.3 kross-5.11.0-24.1 kross-debuginfo-5.11.0-24.1 kross-debugsource-5.11.0-24.1 kross-devel-5.11.0-24.1 kross-devel-debuginfo-5.11.0-24.1 krunner-debugsource-5.11.0-24.1 krunner-devel-5.11.0-24.1 kscreen5-5.3.2-8.2 kscreen5-debuginfo-5.3.2-8.2 kscreen5-debugsource-5.3.2-8.2 kservice-5.11.0-24.3 kservice-debuginfo-5.11.0-24.3 kservice-debugsource-5.11.0-24.3 kservice-devel-5.11.0-24.3 ksshaskpass5-5.3.2-8.2 ksshaskpass5-debuginfo-5.3.2-8.2 ksshaskpass5-debugsource-5.3.2-8.2 kssl-5.11.0-24.25 kssl-debuginfo-5.11.0-24.25 ksysguard5-5.3.2-18.17 ksysguard5-debuginfo-5.3.2-18.17 ksysguard5-debugsource-5.3.2-18.17 ktexteditor-5.11.0-24.1 ktexteditor-debuginfo-5.11.0-24.1 ktexteditor-debugsource-5.11.0-24.1 ktexteditor-devel-5.11.0-24.1 ktextwidgets-debugsource-5.11.0-24.1 ktextwidgets-devel-5.11.0-24.1 kunitconversion-debugsource-5.11.0-24.1 kunitconversion-devel-5.11.0-24.1 kwallet-debugsource-5.11.0-24.2 kwallet-devel-5.11.0-24.2 kwalletd5-5.11.0-24.2 kwalletd5-debuginfo-5.11.0-24.2 kwayland-debugsource-5.3.2-18.3 kwayland-devel-5.3.2-18.3 kwidgetsaddons-debugsource-5.11.0-24.3 kwidgetsaddons-devel-5.11.0-24.3 kwin5-5.3.2-18.13 kwin5-debuginfo-5.3.2-18.13 kwin5-debugsource-5.3.2-18.13 kwin5-devel-5.3.2-18.13 kwindowsystem-debugsource-5.11.0-25.3 kwindowsystem-devel-5.11.0-25.3 kwrited5-5.3.2-18.2 kwrited5-debuginfo-5.3.2-18.2 kwrited5-debugsource-5.3.2-18.2 kxmlgui-debugsource-5.11.0-24.5 kxmlgui-devel-5.11.0-24.5 kxmlrpcclient5-debugsource-5.11.0-11.1 kxmlrpcclient5-devel-5.11.0-11.1 libKF5Activities5-5.11.0-24.1 libKF5Activities5-debuginfo-5.11.0-24.1 libKF5Archive5-5.11.0-24.3 libKF5Archive5-debuginfo-5.11.0-24.3 libKF5Attica5-5.11.0-24.3 libKF5Attica5-debuginfo-5.11.0-24.3 libKF5Auth5-5.11.0-24.3 libKF5Auth5-debuginfo-5.11.0-24.3 libKF5Baloo1-5.9.2-18.3 libKF5Baloo1-debuginfo-5.9.2-18.3 libKF5BalooXapian1-5.9.2-18.3 libKF5BalooXapian1-debuginfo-5.9.2-18.3 libKF5BluezQt6-5.11.0-2.5 libKF5BluezQt6-debuginfo-5.11.0-2.5 libKF5Bookmarks5-5.11.0-24.1 libKF5Bookmarks5-debuginfo-5.11.0-24.1 libKF5Codecs5-5.11.0-24.3 libKF5Codecs5-debuginfo-5.11.0-24.3 libKF5Completion5-5.11.0-24.3 libKF5Completion5-debuginfo-5.11.0-24.3 libKF5ConfigCore5-5.11.0-24.3 libKF5ConfigCore5-debuginfo-5.11.0-24.3 libKF5ConfigGui5-5.11.0-24.3 libKF5ConfigGui5-debuginfo-5.11.0-24.3 libKF5ConfigWidgets5-5.11.0-24.3 libKF5ConfigWidgets5-debuginfo-5.11.0-24.3 libKF5CoreAddons5-5.11.0-24.3 libKF5CoreAddons5-debuginfo-5.11.0-24.3 libKF5Crash5-5.11.0-24.1 libKF5Crash5-debuginfo-5.11.0-24.1 libKF5DBusAddons5-5.11.0-24.3 libKF5DBusAddons5-debuginfo-5.11.0-24.3 libKF5DNSSD5-5.11.0-24.3 libKF5DNSSD5-debuginfo-5.11.0-24.3 libKF5Declarative5-5.11.0-24.1 libKF5Declarative5-debuginfo-5.11.0-24.1 libKF5Emoticons5-5.11.0-24.3 libKF5Emoticons5-debuginfo-5.11.0-24.3 libKF5GlobalAccel5-5.11.0-24.3 libKF5GlobalAccel5-debuginfo-5.11.0-24.3 libKF5GuiAddons5-5.11.0-24.3 libKF5GuiAddons5-debuginfo-5.11.0-24.3 libKF5I18n5-5.11.0-24.5 libKF5I18n5-debuginfo-5.11.0-24.5 libKF5IconThemes5-5.11.0-24.2 libKF5IconThemes5-debuginfo-5.11.0-24.2 libKF5IdleTime5-5.11.0-24.4 libKF5IdleTime5-debuginfo-5.11.0-24.4 libKF5ItemModels5-5.11.0-24.3 libKF5ItemModels5-debuginfo-5.11.0-24.3 libKF5ItemViews5-5.11.0-24.3 libKF5ItemViews5-debuginfo-5.11.0-24.3 libKF5JS5-5.11.0-24.3 libKF5JS5-debuginfo-5.11.0-24.3 libKF5JSApi5-5.11.0-24.3 libKF5JSApi5-debuginfo-5.11.0-24.3 libKF5JobWidgets5-5.11.0-24.3 libKF5JobWidgets5-debuginfo-5.11.0-24.3 libKF5JsEmbed5-5.11.0-24.3 libKF5JsEmbed5-debuginfo-5.11.0-24.3 libKF5KCMUtils5-5.11.0-24.1 libKF5KCMUtils5-debuginfo-5.11.0-24.1 libKF5KDELibs4Support5-5.11.0-24.25 libKF5KDELibs4Support5-debuginfo-5.11.0-24.25 libKF5KHtml5-5.11.0-24.1 libKF5KHtml5-debuginfo-5.11.0-24.1 libKF5MediaPlayer5-5.11.0-24.1 libKF5MediaPlayer5-debuginfo-5.11.0-24.1 libKF5ModemManagerQt-debugsource-5.11.0-24.3 libKF5ModemManagerQt-devel-5.11.0-24.3 libKF5ModemManagerQt6-5.11.0-24.3 libKF5ModemManagerQt6-debuginfo-5.11.0-24.3 libKF5NetworkManagerQt-debugsource-5.11.0-24.3 libKF5NetworkManagerQt-devel-5.11.0-24.3 libKF5NetworkManagerQt6-5.11.0-24.3 libKF5NetworkManagerQt6-debuginfo-5.11.0-24.3 libKF5NewStuff5-5.11.0-24.1 libKF5NewStuff5-debuginfo-5.11.0-24.1 libKF5Notifications5-5.11.0-24.2 libKF5Notifications5-debuginfo-5.11.0-24.2 libKF5NotifyConfig5-5.11.0-24.1 libKF5NotifyConfig5-debuginfo-5.11.0-24.1 libKF5Parts5-5.11.0-24.1 libKF5Parts5-debuginfo-5.11.0-24.1 libKF5Plotting5-5.11.0-24.3 libKF5Plotting5-debuginfo-5.11.0-24.3 libKF5Pty5-5.11.0-24.3 libKF5Pty5-debuginfo-5.11.0-24.3 libKF5QuickAddons5-5.11.0-24.1 libKF5QuickAddons5-debuginfo-5.11.0-24.1 libKF5Runner5-5.11.0-24.1 libKF5Runner5-debuginfo-5.11.0-24.1 libKF5Screen6-5.3.2-18.3 libKF5Screen6-debuginfo-5.3.2-18.3 libKF5Solid5-5.11.0-24.1 libKF5Solid5-debuginfo-5.11.0-24.1 libKF5SonnetCore5-5.11.0-24.11 libKF5SonnetCore5-debuginfo-5.11.0-24.11 libKF5SonnetUi5-5.11.0-24.11 libKF5SonnetUi5-debuginfo-5.11.0-24.11 libKF5Style5-5.11.0-24.1 libKF5Style5-debuginfo-5.11.0-24.1 libKF5Su5-5.11.0-24.3 libKF5Su5-debuginfo-5.11.0-24.3 libKF5TextWidgets5-5.11.0-24.1 libKF5TextWidgets5-debuginfo-5.11.0-24.1 libKF5ThreadWeaver5-5.11.0-24.1 libKF5ThreadWeaver5-debuginfo-5.11.0-24.1 libKF5UnitConversion5-5.11.0-24.1 libKF5UnitConversion5-debuginfo-5.11.0-24.1 libKF5Wallet5-5.11.0-24.2 libKF5Wallet5-debuginfo-5.11.0-24.2 libKF5WaylandClient5-5.3.2-18.3 libKF5WaylandClient5-debuginfo-5.3.2-18.3 libKF5WaylandServer5-5.3.2-18.3 libKF5WaylandServer5-debuginfo-5.3.2-18.3 libKF5WebKit5-5.11.0-24.1 libKF5WebKit5-debuginfo-5.11.0-24.1 libKF5WidgetsAddons5-5.11.0-24.3 libKF5WidgetsAddons5-debuginfo-5.11.0-24.3 libKF5WindowSystem5-5.11.0-25.3 libKF5WindowSystem5-debuginfo-5.11.0-25.3 libKF5XmlGui5-5.11.0-24.5 libKF5XmlGui5-debuginfo-5.11.0-24.5 libKF5XmlRpcClient5-5.11.0-11.1 libKF5XmlRpcClient5-debuginfo-5.11.0-11.1 libQt5Bluetooth5-5.4.2-5.8 libQt5Bluetooth5-debuginfo-5.4.2-5.8 libQt5Bluetooth5-imports-5.4.2-5.8 libQt5Bluetooth5-imports-debuginfo-5.4.2-5.8 libQt5Bootstrap-devel-static-5.4.2-22.3 libQt5CLucene5-5.4.2-7.9 libQt5CLucene5-debuginfo-5.4.2-7.9 libQt5Compositor5-5.4.2-7.6 libQt5Compositor5-debuginfo-5.4.2-7.6 libQt5Concurrent-devel-5.4.2-22.3 libQt5Concurrent5-5.4.2-22.3 libQt5Concurrent5-debuginfo-5.4.2-22.3 libQt5Core-devel-5.4.2-22.3 libQt5Core5-5.4.2-22.3 libQt5Core5-debuginfo-5.4.2-22.3 libQt5DBus-devel-5.4.2-22.3 libQt5DBus-devel-debuginfo-5.4.2-22.3 libQt5DBus5-5.4.2-22.3 libQt5DBus5-debuginfo-5.4.2-22.3 libQt5Declarative5-5.4.2-7.7 libQt5Declarative5-debuginfo-5.4.2-7.7 libQt5Designer5-5.4.2-7.9 libQt5Designer5-debuginfo-5.4.2-7.9 libQt5DesignerComponents5-5.4.2-7.9 libQt5DesignerComponents5-debuginfo-5.4.2-7.9 libQt5Gui-devel-5.4.2-22.3 libQt5Gui5-5.4.2-22.3 libQt5Gui5-debuginfo-5.4.2-22.3 libQt5Help5-5.4.2-7.9 libQt5Help5-debuginfo-5.4.2-7.9 libQt5Location5-5.4.2-9.5 libQt5Location5-debuginfo-5.4.2-9.5 libQt5Multimedia5-5.4.2-7.5 libQt5Multimedia5-debuginfo-5.4.2-7.5 libQt5Network-devel-5.4.2-22.3 libQt5Network5-5.4.2-22.3 libQt5Network5-debuginfo-5.4.2-22.3 libQt5Nfc5-5.4.2-5.8 libQt5Nfc5-debuginfo-5.4.2-5.8 libQt5Nfc5-imports-5.4.2-5.8 libQt5Nfc5-imports-debuginfo-5.4.2-5.8 libQt5OpenGL-devel-5.4.2-22.3 libQt5OpenGL5-5.4.2-22.3 libQt5OpenGL5-debuginfo-5.4.2-22.3 libQt5OpenGLExtensions-devel-static-5.4.2-22.3 libQt5PlatformHeaders-devel-5.4.2-22.3 libQt5PlatformSupport-devel-static-5.4.2-22.3 libQt5Positioning5-5.4.2-9.5 libQt5Positioning5-debuginfo-5.4.2-9.5 libQt5PrintSupport-devel-5.4.2-22.3 libQt5PrintSupport5-5.4.2-22.3 libQt5PrintSupport5-debuginfo-5.4.2-22.3 libQt5Script5-5.4.2-7.4 libQt5Script5-debuginfo-5.4.2-7.4 libQt5Sensors5-5.4.2-9.3 libQt5Sensors5-debuginfo-5.4.2-9.3 libQt5Sensors5-imports-5.4.2-9.3 libQt5Sensors5-imports-debuginfo-5.4.2-9.3 libQt5SerialPort5-5.4.2-7.3 libQt5SerialPort5-debuginfo-5.4.2-7.3 libQt5Sql-devel-5.4.2-22.3 libQt5Sql5-5.4.2-22.3 libQt5Sql5-debuginfo-5.4.2-22.3 libQt5Sql5-mysql-5.4.2-22.3 libQt5Sql5-mysql-debuginfo-5.4.2-22.3 libQt5Sql5-postgresql-5.4.2-22.3 libQt5Sql5-postgresql-debuginfo-5.4.2-22.3 libQt5Sql5-sqlite-5.4.2-22.3 libQt5Sql5-sqlite-debuginfo-5.4.2-22.3 libQt5Sql5-unixODBC-5.4.2-22.3 libQt5Sql5-unixODBC-debuginfo-5.4.2-22.3 libQt5Svg5-5.4.2-7.3 libQt5Svg5-debuginfo-5.4.2-7.3 libQt5Test-devel-5.4.2-22.3 libQt5Test5-5.4.2-22.3 libQt5Test5-debuginfo-5.4.2-22.3 libQt5WaylandClient5-5.4.2-7.6 libQt5WaylandClient5-debuginfo-5.4.2-7.6 libQt5WebChannel5-5.4.2-7.3 libQt5WebChannel5-debuginfo-5.4.2-7.3 libQt5WebChannel5-imports-5.4.2-7.3 libQt5WebChannel5-imports-debuginfo-5.4.2-7.3 libQt5WebKit5-5.4.2-10.5 libQt5WebKit5-debuginfo-5.4.2-10.5 libQt5WebKit5-devel-5.4.2-10.5 libQt5WebKit5-imports-5.4.2-10.5 libQt5WebKit5-imports-debuginfo-5.4.2-10.5 libQt5WebKitWidgets-devel-5.4.2-10.5 libQt5WebKitWidgets5-5.4.2-10.5 libQt5WebKitWidgets5-debuginfo-5.4.2-10.5 libQt5WebSockets5-5.4.2-9.3 libQt5WebSockets5-debuginfo-5.4.2-9.3 libQt5WebSockets5-imports-5.4.2-9.3 libQt5WebSockets5-imports-debuginfo-5.4.2-9.3 libQt5Widgets-devel-5.4.2-22.3 libQt5Widgets5-5.4.2-22.3 libQt5Widgets5-debuginfo-5.4.2-22.3 libQt5X11Extras5-5.4.2-9.3 libQt5X11Extras5-debuginfo-5.4.2-9.3 libQt5Xml-devel-5.4.2-22.3 libQt5Xml5-5.4.2-22.3 libQt5Xml5-debuginfo-5.4.2-22.3 libQt5XmlPatterns5-5.4.2-9.3 libQt5XmlPatterns5-debuginfo-5.4.2-9.3 libQtQuick5-5.4.2-11.7 libQtQuick5-debuginfo-5.4.2-11.7 libdbusmenu-qt5-2-0.9.3+15.10.20150604-3.7 libdbusmenu-qt5-2-debuginfo-0.9.3+15.10.20150604-3.7 libdbusmenu-qt5-debugsource-0.9.3+15.10.20150604-3.7 libdbusmenu-qt5-devel-0.9.3+15.10.20150604-3.7 libkdecoration2-debugsource-5.3.2-8.3 libkdecoration2-devel-5.3.2-8.3 libkdecorations2-5-5.3.2-8.3 libkdecorations2-5-debuginfo-5.3.2-8.3 libkdecorations2private5-5.3.2-8.3 libkdecorations2private5-debuginfo-5.3.2-8.3 libkscreen2-debugsource-5.3.2-18.3 libkscreen2-devel-5.3.2-18.3 libkscreen2-plugin-5.3.2-18.3 libkscreen2-plugin-debuginfo-5.3.2-18.3 libksysguard5-5.3.2-18.2 libksysguard5-debuginfo-5.3.2-18.2 libksysguard5-debugsource-5.3.2-18.2 libksysguard5-devel-5.3.2-18.2 libksysguard5-helper-5.3.2-18.2 libksysguard5-helper-debuginfo-5.3.2-18.2 libkwalletbackend5-5-5.11.0-24.2 libkwalletbackend5-5-debuginfo-5.11.0-24.2 libqt5-creator-3.4.1-12.10 libqt5-creator-debuginfo-3.4.1-12.10 libqt5-creator-debugsource-3.4.1-12.10 libqt5-linguist-5.4.2-7.9 libqt5-linguist-debuginfo-5.4.2-7.9 libqt5-linguist-devel-5.4.2-7.9 libqt5-qtbase-common-devel-5.4.2-22.3 libqt5-qtbase-common-devel-debuginfo-5.4.2-22.3 libqt5-qtbase-debugsource-5.4.2-22.3 libqt5-qtbase-devel-5.4.2-22.3 libqt5-qtbase-doc-5.4.2-22.3 libqt5-qtbase-doc-debuginfo-5.4.2-22.3 libqt5-qtbase-examples-5.4.2-22.3 libqt5-qtbase-examples-debuginfo-5.4.2-22.3 libqt5-qtbase-platformtheme-gtk2-5.4.2-22.3 libqt5-qtbase-platformtheme-gtk2-debuginfo-5.4.2-22.3 libqt5-qtconnectivity-debugsource-5.4.2-5.8 libqt5-qtconnectivity-devel-5.4.2-5.8 libqt5-qtconnectivity-examples-5.4.2-5.8 libqt5-qtconnectivity-examples-debuginfo-5.4.2-5.8 libqt5-qtconnectivity-tools-5.4.2-5.8 libqt5-qtconnectivity-tools-debuginfo-5.4.2-5.8 libqt5-qtdeclarative-debugsource-5.4.2-11.7 libqt5-qtdeclarative-devel-5.4.2-11.7 libqt5-qtdeclarative-devel-debuginfo-5.4.2-11.7 libqt5-qtdeclarative-examples-5.4.2-11.7 libqt5-qtdeclarative-examples-debuginfo-5.4.2-11.7 libqt5-qtdeclarative-tools-5.4.2-11.7 libqt5-qtdeclarative-tools-debuginfo-5.4.2-11.7 libqt5-qtgraphicaleffects-5.4.2-7.1 libqt5-qtimageformats-5.4.2-7.1 libqt5-qtimageformats-debuginfo-5.4.2-7.1 libqt5-qtimageformats-debugsource-5.4.2-7.1 libqt5-qtimageformats-devel-5.4.2-7.1 libqt5-qtlocation-debugsource-5.4.2-9.5 libqt5-qtlocation-devel-5.4.2-9.5 libqt5-qtlocation-examples-5.4.2-9.5 libqt5-qtlocation-examples-debuginfo-5.4.2-9.5 libqt5-qtmultimedia-debugsource-5.4.2-7.5 libqt5-qtmultimedia-devel-5.4.2-7.5 libqt5-qtmultimedia-examples-5.4.2-7.5 libqt5-qtmultimedia-examples-debuginfo-5.4.2-7.5 libqt5-qtquick1-debugsource-5.4.2-7.7 libqt5-qtquick1-devel-5.4.2-7.7 libqt5-qtquick1-devel-debuginfo-5.4.2-7.7 libqt5-qtquick1-examples-5.4.2-7.7 libqt5-qtquick1-examples-debuginfo-5.4.2-7.7 libqt5-qtquickcontrols-5.4.2-11.1 libqt5-qtquickcontrols-debuginfo-5.4.2-11.1 libqt5-qtquickcontrols-debugsource-5.4.2-11.1 libqt5-qtquickcontrols-examples-5.4.2-11.1 libqt5-qtquickcontrols-examples-debuginfo-5.4.2-11.1 libqt5-qtscript-debugsource-5.4.2-7.4 libqt5-qtscript-devel-5.4.2-7.4 libqt5-qtscript-examples-5.4.2-7.4 libqt5-qtscript-examples-debuginfo-5.4.2-7.4 libqt5-qtsensors-debugsource-5.4.2-9.3 libqt5-qtsensors-devel-5.4.2-9.3 libqt5-qtsensors-examples-5.4.2-9.3 libqt5-qtsensors-examples-debuginfo-5.4.2-9.3 libqt5-qtserialport-debugsource-5.4.2-7.3 libqt5-qtserialport-devel-5.4.2-7.3 libqt5-qtsvg-debugsource-5.4.2-7.3 libqt5-qtsvg-devel-5.4.2-7.3 libqt5-qtsvg-examples-5.4.2-7.3 libqt5-qtsvg-examples-debuginfo-5.4.2-7.3 libqt5-qttools-5.4.2-7.9 libqt5-qttools-debuginfo-5.4.2-7.9 libqt5-qttools-debugsource-5.4.2-7.9 libqt5-qttools-devel-5.4.2-7.9 libqt5-qttools-examples-5.4.2-7.9 libqt5-qttools-examples-debuginfo-5.4.2-7.9 libqt5-qttranslations-5.4.2-7.1 libqt5-qtwayland-5.4.2-7.6 libqt5-qtwayland-debuginfo-5.4.2-7.6 libqt5-qtwayland-debugsource-5.4.2-7.6 libqt5-qtwayland-devel-5.4.2-7.6 libqt5-qtwayland-examples-5.4.2-7.6 libqt5-qtwayland-examples-debuginfo-5.4.2-7.6 libqt5-qtwebchannel-debugsource-5.4.2-7.3 libqt5-qtwebchannel-devel-5.4.2-7.3 libqt5-qtwebchannel-examples-5.4.2-7.3 libqt5-qtwebengine-5.4.2-5.6 libqt5-qtwebengine-debuginfo-5.4.2-5.6 libqt5-qtwebengine-debugsource-5.4.2-5.6 libqt5-qtwebengine-devel-5.4.2-5.6 libqt5-qtwebengine-examples-5.4.2-5.6 libqt5-qtwebengine-examples-debuginfo-5.4.2-5.6 libqt5-qtwebkit-debugsource-5.4.2-10.5 libqt5-qtwebkit-examples-5.4.1-7.1 libqt5-qtwebkit-examples-debuginfo-5.4.1-7.1 libqt5-qtwebkit-examples-debugsource-5.4.1-7.1 libqt5-qtwebsockets-debugsource-5.4.2-9.3 libqt5-qtwebsockets-devel-5.4.2-9.3 libqt5-qtwebsockets-examples-5.4.2-9.3 libqt5-qtx11extras-debugsource-5.4.2-9.3 libqt5-qtx11extras-devel-5.4.2-9.3 libqt5-qtxmlpatterns-debugsource-5.4.2-9.3 libqt5-qtxmlpatterns-devel-5.4.2-9.3 libqt5-qtxmlpatterns-examples-5.4.2-9.3 libqt5-qtxmlpatterns-examples-debuginfo-5.4.2-9.3 milou5-5.3.2-18.11 milou5-debuginfo-5.3.2-18.11 milou5-debugsource-5.3.2-18.11 oxygen5-5.3.2-18.1 oxygen5-cursors-5.3.2-18.1 oxygen5-debugsource-5.3.2-18.1 oxygen5-decoration-5.3.2-18.1 oxygen5-decoration-debuginfo-5.3.2-18.1 oxygen5-devel-5.3.2-18.1 oxygen5-sounds-5.3.2-18.1 oxygen5-style-5.3.2-18.1 oxygen5-style-debuginfo-5.3.2-18.1 plasma-framework-5.11.0-26.1 plasma-framework-components-5.11.0-26.1 plasma-framework-components-debuginfo-5.11.0-26.1 plasma-framework-debuginfo-5.11.0-26.1 plasma-framework-debugsource-5.11.0-26.1 plasma-framework-devel-5.11.0-26.1 plasma-framework-private-5.11.0-26.1 plasma-framework-private-debuginfo-5.11.0-26.1 plasma-nm5-5.3.2-23.6 plasma-nm5-debuginfo-5.3.2-23.6 plasma-nm5-debugsource-5.3.2-23.6 plasma-nm5-l2tp-5.3.2-23.6 plasma-nm5-l2tp-debuginfo-5.3.2-23.6 plasma-nm5-openconnect-5.3.2-23.6 plasma-nm5-openconnect-debuginfo-5.3.2-23.6 plasma-nm5-openswan-5.3.2-23.6 plasma-nm5-openswan-debuginfo-5.3.2-23.6 plasma-nm5-openvpn-5.3.2-23.6 plasma-nm5-openvpn-debuginfo-5.3.2-23.6 plasma-nm5-pptp-5.3.2-23.6 plasma-nm5-pptp-debuginfo-5.3.2-23.6 plasma-nm5-strongswan-5.3.2-23.6 plasma-nm5-strongswan-debuginfo-5.3.2-23.6 plasma-nm5-vpnc-5.3.2-23.6 plasma-nm5-vpnc-debuginfo-5.3.2-23.6 plasma5-addons-5.3.2-18.1 plasma5-addons-debuginfo-5.3.2-18.1 plasma5-addons-debugsource-5.3.2-18.1 plasma5-addons-kimpanel-5.3.2-18.1 plasma5-addons-kimpanel-debuginfo-5.3.2-18.1 plasma5-desktop-5.3.2-26.6 plasma5-desktop-branding-openSUSE-13.2-17.1 plasma5-desktop-branding-upstream-5.3.2-26.6 plasma5-desktop-debuginfo-5.3.2-26.6 plasma5-desktop-debugsource-5.3.2-26.6 plasma5-mediacenter-5.3.2-2.1 plasma5-mediacenter-debuginfo-5.3.2-2.1 plasma5-mediacenter-debugsource-5.3.2-2.1 plasma5-openSUSE-13.2-17.1 plasma5-openSUSE-debugsource-13.2-17.1 plasma5-sdk-5.3.2-2.1 plasma5-sdk-debuginfo-5.3.2-2.1 plasma5-sdk-debugsource-5.3.2-2.1 plasma5-workspace-5.3.2-29.1 plasma5-workspace-branding-openSUSE-13.2-17.1 plasma5-workspace-branding-openSUSE-debuginfo-13.2-17.1 plasma5-workspace-branding-upstream-5.3.2-29.1 plasma5-workspace-debuginfo-5.3.2-29.1 plasma5-workspace-debugsource-5.3.2-29.1 plasma5-workspace-devel-5.3.2-29.1 plasma5-workspace-libs-5.3.2-29.1 plasma5-workspace-libs-debuginfo-5.3.2-29.1 plasmaengineexplorer5-5.3.2-2.1 plasmaengineexplorer5-debuginfo-5.3.2-2.1 polkit-kde-agent-5-5.3.2-2.10.1 polkit-kde-agent-5-debuginfo-5.3.2-2.10.1 polkit-kde-agent-5-debugsource-5.3.2-2.10.1 powerdevil5-5.3.2-14.1 powerdevil5-debuginfo-5.3.2-14.1 powerdevil5-debugsource-5.3.2-14.1 solid-debugsource-5.11.0-24.1 solid-devel-5.11.0-24.1 solid-imports-5.11.0-24.1 solid-imports-debuginfo-5.11.0-24.1 solid-tools-5.11.0-24.1 solid-tools-debuginfo-5.11.0-24.1 sonnet-debugsource-5.11.0-24.11 sonnet-devel-5.11.0-24.11 systemsettings5-5.3.2-18.1 systemsettings5-debuginfo-5.3.2-18.1 systemsettings5-debugsource-5.3.2-18.1 systemsettings5-devel-5.3.2-18.1 threadweaver-debugsource-5.11.0-24.1 threadweaver-devel-5.11.0-24.1 - openSUSE 13.2 (x86_64): attica-qt5-devel-32bit-5.11.0-24.3 fcitx-qt5-32bit-0.1.2-2.8.3 fcitx-qt5-debuginfo-32bit-0.1.2-2.8.3 frameworkintegration-devel-32bit-5.11.0-24.1 frameworkintegration-plugin-32bit-5.11.0-24.1 frameworkintegration-plugin-debuginfo-32bit-5.11.0-24.1 kactivities5-devel-32bit-5.11.0-24.1 karchive-devel-32bit-5.11.0-24.3 kauth-devel-32bit-5.11.0-24.3 kbookmarks-devel-32bit-5.11.0-24.1 kcmutils-devel-32bit-5.11.0-24.1 kcodecs-devel-32bit-5.11.0-24.3 kcompletion-devel-32bit-5.11.0-24.3 kconfig-devel-32bit-5.11.0-24.3 kconfig-devel-debuginfo-32bit-5.11.0-24.3 kconfigwidgets-devel-32bit-5.11.0-24.3 kcoreaddons-devel-32bit-5.11.0-24.3 kcoreaddons-devel-debuginfo-32bit-5.11.0-24.3 kcrash-devel-32bit-5.11.0-24.1 kdbusaddons-devel-32bit-5.11.0-24.3 kdeclarative-components-32bit-5.11.0-24.1 kdeclarative-components-debuginfo-32bit-5.11.0-24.1 kdeclarative-devel-32bit-5.11.0-24.1 kdelibs4support-32bit-5.11.0-24.25 kdelibs4support-debuginfo-32bit-5.11.0-24.25 kdelibs4support-devel-32bit-5.11.0-24.25 kdesu-devel-32bit-5.11.0-24.3 kdewebkit-devel-32bit-5.11.0-24.1 kdnssd-framework-devel-32bit-5.11.0-24.3 kemoticons-devel-32bit-5.11.0-24.3 kfilemetadata5-32bit-5.9.2-18.3 kfilemetadata5-debuginfo-32bit-5.9.2-18.3 kglobalaccel-devel-32bit-5.11.0-24.3 kguiaddons-devel-32bit-5.11.0-24.3 khtml-devel-32bit-5.11.0-24.1 ki18n-devel-32bit-5.11.0-24.5 kiconthemes-devel-32bit-5.11.0-24.2 kiconthemes-devel-debuginfo-32bit-5.11.0-24.2 kidletime-devel-32bit-5.11.0-24.4 kimageformats-32bit-5.11.0-24.3 kimageformats-debuginfo-32bit-5.11.0-24.3 kinit-32bit-5.11.0-24.1 kinit-debuginfo-32bit-5.11.0-24.1 kio-32bit-5.11.0-24.13 kio-core-32bit-5.11.0-24.13 kio-core-debuginfo-32bit-5.11.0-24.13 kio-debuginfo-32bit-5.11.0-24.13 kio-devel-32bit-5.11.0-24.13 kitemmodels-devel-32bit-5.11.0-24.3 kitemviews-devel-32bit-5.11.0-24.3 kjobwidgets-devel-32bit-5.11.0-24.3 kjs-devel-32bit-5.11.0-24.3 kjs-devel-debuginfo-32bit-5.11.0-24.3 kjsembed-devel-32bit-5.11.0-24.3 kjsembed-devel-debuginfo-32bit-5.11.0-24.3 kmediaplayer-devel-32bit-5.11.0-24.1 knewstuff-devel-32bit-5.11.0-24.1 knotifications-devel-32bit-5.11.0-24.2 knotifyconfig-devel-32bit-5.11.0-24.1 kpackage-32bit-5.11.0-18.3 kpackage-debuginfo-32bit-5.11.0-18.3 kpackage-devel-32bit-5.11.0-18.3 kparts-devel-32bit-5.11.0-24.1 kpeople5-32bit-5.11.0-11.3 kpeople5-debuginfo-32bit-5.11.0-11.3 kpeople5-devel-32bit-5.11.0-11.3 kplotting-devel-32bit-5.11.0-24.3 kpty-devel-32bit-5.11.0-24.3 kross-32bit-5.11.0-24.1 kross-debuginfo-32bit-5.11.0-24.1 kross-devel-32bit-5.11.0-24.1 kross-devel-debuginfo-32bit-5.11.0-24.1 krunner-devel-32bit-5.11.0-24.1 kservice-32bit-5.11.0-24.3 kservice-debuginfo-32bit-5.11.0-24.3 kservice-devel-32bit-5.11.0-24.3 ktexteditor-32bit-5.11.0-24.1 ktexteditor-debuginfo-32bit-5.11.0-24.1 ktexteditor-devel-32bit-5.11.0-24.1 ktextwidgets-devel-32bit-5.11.0-24.1 kunitconversion-devel-32bit-5.11.0-24.1 kwallet-devel-32bit-5.11.0-24.2 kwayland-devel-32bit-5.3.2-18.3 kwidgetsaddons-devel-32bit-5.11.0-24.3 kwindowsystem-devel-32bit-5.11.0-25.3 kxmlgui-devel-32bit-5.11.0-24.5 kxmlrpcclient5-devel-32bit-5.11.0-11.1 libKF5Activities5-32bit-5.11.0-24.1 libKF5Activities5-debuginfo-32bit-5.11.0-24.1 libKF5Archive5-32bit-5.11.0-24.3 libKF5Archive5-debuginfo-32bit-5.11.0-24.3 libKF5Attica5-32bit-5.11.0-24.3 libKF5Attica5-debuginfo-32bit-5.11.0-24.3 libKF5Auth5-32bit-5.11.0-24.3 libKF5Auth5-debuginfo-32bit-5.11.0-24.3 libKF5Baloo1-32bit-5.9.2-18.3 libKF5Baloo1-debuginfo-32bit-5.9.2-18.3 libKF5BalooXapian1-32bit-5.9.2-18.3 libKF5BalooXapian1-debuginfo-32bit-5.9.2-18.3 libKF5Bookmarks5-32bit-5.11.0-24.1 libKF5Bookmarks5-debuginfo-32bit-5.11.0-24.1 libKF5Codecs5-32bit-5.11.0-24.3 libKF5Codecs5-debuginfo-32bit-5.11.0-24.3 libKF5Completion5-32bit-5.11.0-24.3 libKF5Completion5-debuginfo-32bit-5.11.0-24.3 libKF5ConfigCore5-32bit-5.11.0-24.3 libKF5ConfigCore5-debuginfo-32bit-5.11.0-24.3 libKF5ConfigGui5-32bit-5.11.0-24.3 libKF5ConfigGui5-debuginfo-32bit-5.11.0-24.3 libKF5ConfigWidgets5-32bit-5.11.0-24.3 libKF5ConfigWidgets5-debuginfo-32bit-5.11.0-24.3 libKF5CoreAddons5-32bit-5.11.0-24.3 libKF5CoreAddons5-debuginfo-32bit-5.11.0-24.3 libKF5Crash5-32bit-5.11.0-24.1 libKF5Crash5-debuginfo-32bit-5.11.0-24.1 libKF5DBusAddons5-32bit-5.11.0-24.3 libKF5DBusAddons5-debuginfo-32bit-5.11.0-24.3 libKF5DNSSD5-32bit-5.11.0-24.3 libKF5DNSSD5-debuginfo-32bit-5.11.0-24.3 libKF5Declarative5-32bit-5.11.0-24.1 libKF5Declarative5-debuginfo-32bit-5.11.0-24.1 libKF5Emoticons5-32bit-5.11.0-24.3 libKF5Emoticons5-debuginfo-32bit-5.11.0-24.3 libKF5GlobalAccel5-32bit-5.11.0-24.3 libKF5GlobalAccel5-debuginfo-32bit-5.11.0-24.3 libKF5GuiAddons5-32bit-5.11.0-24.3 libKF5GuiAddons5-debuginfo-32bit-5.11.0-24.3 libKF5I18n5-32bit-5.11.0-24.5 libKF5I18n5-debuginfo-32bit-5.11.0-24.5 libKF5IconThemes5-32bit-5.11.0-24.2 libKF5IconThemes5-debuginfo-32bit-5.11.0-24.2 libKF5IdleTime5-32bit-5.11.0-24.4 libKF5IdleTime5-debuginfo-32bit-5.11.0-24.4 libKF5ItemModels5-32bit-5.11.0-24.3 libKF5ItemModels5-debuginfo-32bit-5.11.0-24.3 libKF5ItemViews5-32bit-5.11.0-24.3 libKF5ItemViews5-debuginfo-32bit-5.11.0-24.3 libKF5JS5-32bit-5.11.0-24.3 libKF5JS5-debuginfo-32bit-5.11.0-24.3 libKF5JSApi5-32bit-5.11.0-24.3 libKF5JSApi5-debuginfo-32bit-5.11.0-24.3 libKF5JobWidgets5-32bit-5.11.0-24.3 libKF5JobWidgets5-debuginfo-32bit-5.11.0-24.3 libKF5JsEmbed5-32bit-5.11.0-24.3 libKF5JsEmbed5-debuginfo-32bit-5.11.0-24.3 libKF5KCMUtils5-32bit-5.11.0-24.1 libKF5KCMUtils5-debuginfo-32bit-5.11.0-24.1 libKF5KDELibs4Support5-32bit-5.11.0-24.25 libKF5KDELibs4Support5-debuginfo-32bit-5.11.0-24.25 libKF5KHtml5-32bit-5.11.0-24.1 libKF5KHtml5-debuginfo-32bit-5.11.0-24.1 libKF5MediaPlayer5-32bit-5.11.0-24.1 libKF5MediaPlayer5-debuginfo-32bit-5.11.0-24.1 libKF5NetworkManagerQt-devel-32bit-5.11.0-24.3 libKF5NetworkManagerQt6-32bit-5.11.0-24.3 libKF5NetworkManagerQt6-debuginfo-32bit-5.11.0-24.3 libKF5NewStuff5-32bit-5.11.0-24.1 libKF5NewStuff5-debuginfo-32bit-5.11.0-24.1 libKF5Notifications5-32bit-5.11.0-24.2 libKF5Notifications5-debuginfo-32bit-5.11.0-24.2 libKF5NotifyConfig5-32bit-5.11.0-24.1 libKF5NotifyConfig5-debuginfo-32bit-5.11.0-24.1 libKF5Parts5-32bit-5.11.0-24.1 libKF5Parts5-debuginfo-32bit-5.11.0-24.1 libKF5Plotting5-32bit-5.11.0-24.3 libKF5Plotting5-debuginfo-32bit-5.11.0-24.3 libKF5Pty5-32bit-5.11.0-24.3 libKF5Pty5-debuginfo-32bit-5.11.0-24.3 libKF5QuickAddons5-32bit-5.11.0-24.1 libKF5QuickAddons5-debuginfo-32bit-5.11.0-24.1 libKF5Runner5-32bit-5.11.0-24.1 libKF5Runner5-debuginfo-32bit-5.11.0-24.1 libKF5Screen6-32bit-5.3.2-18.3 libKF5Screen6-debuginfo-32bit-5.3.2-18.3 libKF5Solid5-32bit-5.11.0-24.1 libKF5Solid5-debuginfo-32bit-5.11.0-24.1 libKF5SonnetCore5-32bit-5.11.0-24.11 libKF5SonnetCore5-debuginfo-32bit-5.11.0-24.11 libKF5SonnetUi5-32bit-5.11.0-24.11 libKF5SonnetUi5-debuginfo-32bit-5.11.0-24.11 libKF5Style5-32bit-5.11.0-24.1 libKF5Style5-debuginfo-32bit-5.11.0-24.1 libKF5Su5-32bit-5.11.0-24.3 libKF5Su5-debuginfo-32bit-5.11.0-24.3 libKF5TextWidgets5-32bit-5.11.0-24.1 libKF5TextWidgets5-debuginfo-32bit-5.11.0-24.1 libKF5ThreadWeaver5-32bit-5.11.0-24.1 libKF5ThreadWeaver5-debuginfo-32bit-5.11.0-24.1 libKF5UnitConversion5-32bit-5.11.0-24.1 libKF5UnitConversion5-debuginfo-32bit-5.11.0-24.1 libKF5Wallet5-32bit-5.11.0-24.2 libKF5Wallet5-debuginfo-32bit-5.11.0-24.2 libKF5WaylandClient5-32bit-5.3.2-18.3 libKF5WaylandClient5-debuginfo-32bit-5.3.2-18.3 libKF5WaylandServer5-32bit-5.3.2-18.3 libKF5WaylandServer5-debuginfo-32bit-5.3.2-18.3 libKF5WebKit5-32bit-5.11.0-24.1 libKF5WebKit5-debuginfo-32bit-5.11.0-24.1 libKF5WidgetsAddons5-32bit-5.11.0-24.3 libKF5WidgetsAddons5-debuginfo-32bit-5.11.0-24.3 libKF5WindowSystem5-32bit-5.11.0-25.3 libKF5WindowSystem5-debuginfo-32bit-5.11.0-25.3 libKF5XmlGui5-32bit-5.11.0-24.5 libKF5XmlGui5-debuginfo-32bit-5.11.0-24.5 libKF5XmlRpcClient5-32bit-5.11.0-11.1 libKF5XmlRpcClient5-debuginfo-32bit-5.11.0-11.1 libQt5Bluetooth5-32bit-5.4.2-5.8 libQt5Bluetooth5-debuginfo-32bit-5.4.2-5.8 libQt5Bootstrap-devel-static-32bit-5.4.2-22.3 libQt5CLucene5-32bit-5.4.2-7.9 libQt5CLucene5-debuginfo-32bit-5.4.2-7.9 libQt5Compositor5-32bit-5.4.2-7.6 libQt5Compositor5-debuginfo-32bit-5.4.2-7.6 libQt5Concurrent-devel-32bit-5.4.2-22.3 libQt5Concurrent5-32bit-5.4.2-22.3 libQt5Concurrent5-debuginfo-32bit-5.4.2-22.3 libQt5Core-devel-32bit-5.4.2-22.3 libQt5Core5-32bit-5.4.2-22.3 libQt5Core5-debuginfo-32bit-5.4.2-22.3 libQt5DBus-devel-32bit-5.4.2-22.3 libQt5DBus-devel-debuginfo-32bit-5.4.2-22.3 libQt5DBus5-32bit-5.4.2-22.3 libQt5DBus5-debuginfo-32bit-5.4.2-22.3 libQt5Declarative5-32bit-5.4.2-7.7 libQt5Declarative5-debuginfo-32bit-5.4.2-7.7 libQt5Designer5-32bit-5.4.2-7.9 libQt5Designer5-debuginfo-32bit-5.4.2-7.9 libQt5DesignerComponents5-32bit-5.4.2-7.9 libQt5DesignerComponents5-debuginfo-32bit-5.4.2-7.9 libQt5Gui-devel-32bit-5.4.2-22.3 libQt5Gui5-32bit-5.4.2-22.3 libQt5Gui5-debuginfo-32bit-5.4.2-22.3 libQt5Help5-32bit-5.4.2-7.9 libQt5Help5-debuginfo-32bit-5.4.2-7.9 libQt5Location5-32bit-5.4.2-9.5 libQt5Location5-debuginfo-32bit-5.4.2-9.5 libQt5Multimedia5-32bit-5.4.2-7.5 libQt5Multimedia5-debuginfo-32bit-5.4.2-7.5 libQt5Network-devel-32bit-5.4.2-22.3 libQt5Network5-32bit-5.4.2-22.3 libQt5Network5-debuginfo-32bit-5.4.2-22.3 libQt5Nfc5-32bit-5.4.2-5.8 libQt5Nfc5-debuginfo-32bit-5.4.2-5.8 libQt5OpenGL-devel-32bit-5.4.2-22.3 libQt5OpenGL5-32bit-5.4.2-22.3 libQt5OpenGL5-debuginfo-32bit-5.4.2-22.3 libQt5OpenGLExtensions-devel-static-32bit-5.4.2-22.3 libQt5PlatformSupport-devel-static-32bit-5.4.2-22.3 libQt5Positioning5-32bit-5.4.2-9.5 libQt5Positioning5-debuginfo-32bit-5.4.2-9.5 libQt5PrintSupport-devel-32bit-5.4.2-22.3 libQt5PrintSupport5-32bit-5.4.2-22.3 libQt5PrintSupport5-debuginfo-32bit-5.4.2-22.3 libQt5Script5-32bit-5.4.2-7.4 libQt5Script5-debuginfo-32bit-5.4.2-7.4 libQt5Sensors5-32bit-5.4.2-9.3 libQt5Sensors5-debuginfo-32bit-5.4.2-9.3 libQt5SerialPort5-32bit-5.4.2-7.3 libQt5SerialPort5-debuginfo-32bit-5.4.2-7.3 libQt5Sql-devel-32bit-5.4.2-22.3 libQt5Sql5-32bit-5.4.2-22.3 libQt5Sql5-debuginfo-32bit-5.4.2-22.3 libQt5Sql5-mysql-32bit-5.4.2-22.3 libQt5Sql5-mysql-debuginfo-32bit-5.4.2-22.3 libQt5Sql5-postgresql-32bit-5.4.2-22.3 libQt5Sql5-postgresql-debuginfo-32bit-5.4.2-22.3 libQt5Sql5-sqlite-32bit-5.4.2-22.3 libQt5Sql5-sqlite-debuginfo-32bit-5.4.2-22.3 libQt5Sql5-unixODBC-32bit-5.4.2-22.3 libQt5Sql5-unixODBC-debuginfo-32bit-5.4.2-22.3 libQt5Svg5-32bit-5.4.2-7.3 libQt5Svg5-debuginfo-32bit-5.4.2-7.3 libQt5Test-devel-32bit-5.4.2-22.3 libQt5Test5-32bit-5.4.2-22.3 libQt5Test5-debuginfo-32bit-5.4.2-22.3 libQt5WaylandClient5-32bit-5.4.2-7.6 libQt5WaylandClient5-debuginfo-32bit-5.4.2-7.6 libQt5WebChannel5-32bit-5.4.2-7.3 libQt5WebChannel5-debuginfo-32bit-5.4.2-7.3 libQt5WebKit5-32bit-5.4.2-10.5 libQt5WebKit5-debuginfo-32bit-5.4.2-10.5 libQt5WebKit5-devel-32bit-5.4.2-10.5 libQt5WebKitWidgets-devel-32bit-5.4.2-10.5 libQt5WebKitWidgets5-32bit-5.4.2-10.5 libQt5WebKitWidgets5-debuginfo-32bit-5.4.2-10.5 libQt5WebSockets5-32bit-5.4.2-9.3 libQt5WebSockets5-debuginfo-32bit-5.4.2-9.3 libQt5Widgets-devel-32bit-5.4.2-22.3 libQt5Widgets5-32bit-5.4.2-22.3 libQt5Widgets5-debuginfo-32bit-5.4.2-22.3 libQt5X11Extras5-32bit-5.4.2-9.3 libQt5X11Extras5-debuginfo-32bit-5.4.2-9.3 libQt5Xml-devel-32bit-5.4.2-22.3 libQt5Xml5-32bit-5.4.2-22.3 libQt5Xml5-debuginfo-32bit-5.4.2-22.3 libQt5XmlPatterns5-32bit-5.4.2-9.3 libQt5XmlPatterns5-debuginfo-32bit-5.4.2-9.3 libQtQuick5-32bit-5.4.2-11.7 libQtQuick5-debuginfo-32bit-5.4.2-11.7 libdbusmenu-qt5-2-32bit-0.9.3+15.10.20150604-3.7 libdbusmenu-qt5-2-debuginfo-32bit-0.9.3+15.10.20150604-3.7 libdbusmenu-qt5-devel-32bit-0.9.3+15.10.20150604-3.7 libkdecoration2-devel-32bit-5.3.2-8.3 libkdecorations2-5-32bit-5.3.2-8.3 libkdecorations2-5-debuginfo-32bit-5.3.2-8.3 libkdecorations2private5-32bit-5.3.2-8.3 libkdecorations2private5-debuginfo-32bit-5.3.2-8.3 libkscreen2-devel-32bit-5.3.2-18.3 libkscreen2-plugin-32bit-5.3.2-18.3 libkscreen2-plugin-debuginfo-32bit-5.3.2-18.3 libksysguard5-32bit-5.3.2-18.2 libksysguard5-debuginfo-32bit-5.3.2-18.2 libksysguard5-devel-32bit-5.3.2-18.2 libkwalletbackend5-5-32bit-5.11.0-24.2 libkwalletbackend5-5-debuginfo-32bit-5.11.0-24.2 libqt5-qtbase-examples-32bit-5.4.2-22.3 libqt5-qtbase-examples-debuginfo-32bit-5.4.2-22.3 libqt5-qtconnectivity-devel-32bit-5.4.2-5.8 libqt5-qtdeclarative-devel-32bit-5.4.2-11.7 libqt5-qtdeclarative-devel-debuginfo-32bit-5.4.2-11.7 libqt5-qtimageformats-32bit-5.4.2-7.1 libqt5-qtimageformats-debuginfo-32bit-5.4.2-7.1 libqt5-qtlocation-devel-32bit-5.4.2-9.5 libqt5-qtmultimedia-devel-32bit-5.4.2-7.5 libqt5-qtquick1-devel-32bit-5.4.2-7.7 libqt5-qtquick1-devel-debuginfo-32bit-5.4.2-7.7 libqt5-qtscript-devel-32bit-5.4.2-7.4 libqt5-qtsensors-devel-32bit-5.4.2-9.3 libqt5-qtserialport-devel-32bit-5.4.2-7.3 libqt5-qtsvg-devel-32bit-5.4.2-7.3 libqt5-qttools-32bit-5.4.2-7.9 libqt5-qttools-debuginfo-32bit-5.4.2-7.9 libqt5-qttools-devel-32bit-5.4.2-7.9 libqt5-qtwayland-32bit-5.4.2-7.6 libqt5-qtwayland-debuginfo-32bit-5.4.2-7.6 libqt5-qtwayland-devel-32bit-5.4.2-7.6 libqt5-qtwebchannel-devel-32bit-5.4.2-7.3 libqt5-qtwebengine-32bit-5.4.2-5.6 libqt5-qtwebengine-debuginfo-32bit-5.4.2-5.6 libqt5-qtwebengine-devel-32bit-5.4.2-5.6 libqt5-qtwebsockets-devel-32bit-5.4.2-9.3 libqt5-qtx11extras-devel-32bit-5.4.2-9.3 libqt5-qtxmlpatterns-devel-32bit-5.4.2-9.3 oxygen5-style-32bit-5.3.2-18.1 oxygen5-style-debuginfo-32bit-5.3.2-18.1 plasma-framework-32bit-5.11.0-26.1 plasma-framework-components-32bit-5.11.0-26.1 plasma-framework-components-debuginfo-32bit-5.11.0-26.1 plasma-framework-debuginfo-32bit-5.11.0-26.1 plasma-framework-devel-32bit-5.11.0-26.1 plasma-framework-private-32bit-5.11.0-26.1 plasma-framework-private-debuginfo-32bit-5.11.0-26.1 plasma5-workspace-libs-32bit-5.3.2-29.1 plasma5-workspace-libs-debuginfo-32bit-5.3.2-29.1 solid-devel-32bit-5.11.0-24.1 sonnet-devel-32bit-5.11.0-24.11 threadweaver-devel-32bit-5.11.0-24.1 - openSUSE 13.2 (noarch): baloo5-lang-5.9.2-18.3 bluedevil5-lang-5.3.2-8.3 breeze5-cursors-5.3.2-21.3 breeze5-icons-5.3.2-21.3 breeze5-style-lang-5.3.2-21.3 breeze5-wallpapers-5.3.2-21.3 extra-cmake-modules-doc-5.11.0-24.1 kcm_sddm-lang-5.3.2-8.3 kcoreaddons-lang-5.11.0-24.3 kde-cli-tools5-lang-5.3.2-18.2 kde-gtk-config5-lang-5.3.2-8.2 kded-lang-5.11.0-24.1 kdelibs4support-lang-5.11.0-24.25 kdesignerplugin-lang-5.11.0-24.18 kdoctools-lang-5.11.0-24.3 kfilemetadata5-lang-5.9.2-18.3 khelpcenter5-lang-5.3.2-2.21 khotkeys5-lang-5.3.2-23.13 kinfocenter5-lang-5.3.2-18.2 kinit-lang-5.11.0-24.1 kio-extras5-lang-5.3.2-19.4 kio-lang-5.11.0-24.13 kmenuedit5-lang-5.3.2-18.9 kpackage-lang-5.11.0-18.3 kpeople5-lang-5.11.0-11.3 kross-lang-5.11.0-24.1 kscreen5-lang-5.3.2-8.2 kservice-lang-5.11.0-24.3 ksshaskpass5-lang-5.3.2-8.2 ksysguard5-lang-5.3.2-18.17 ktexteditor-lang-5.11.0-24.1 kwalletd5-lang-5.11.0-24.2 kwin5-lang-5.3.2-18.13 libKF5Activities5-lang-5.11.0-24.1 libKF5Auth5-lang-5.11.0-24.3 libKF5Bookmarks5-lang-5.11.0-24.1 libKF5Codecs5-lang-5.11.0-24.3 libKF5Completion5-lang-5.11.0-24.3 libKF5ConfigCore5-lang-5.11.0-24.3 libKF5ConfigWidgets5-lang-5.11.0-24.3 libKF5DBusAddons5-lang-5.11.0-24.3 libKF5DNSSD5-lang-5.11.0-24.3 libKF5Declarative5-lang-5.11.0-24.1 libKF5GlobalAccel5-lang-5.11.0-24.3 libKF5I18n5-lang-5.11.0-24.5 libKF5IconThemes5-lang-5.11.0-24.2 libKF5ItemViews5-lang-5.11.0-24.3 libKF5JobWidgets5-lang-5.11.0-24.3 libKF5JsEmbed5-lang-5.11.0-24.3 libKF5KCMUtils5-lang-5.11.0-24.1 libKF5KHtml5-lang-5.11.0-24.1 libKF5NewStuff5-lang-5.11.0-24.1 libKF5Notifications5-lang-5.11.0-24.2 libKF5NotifyConfig5-lang-5.11.0-24.1 libKF5Parts5-lang-5.11.0-24.1 libKF5Pty5-lang-5.11.0-24.3 libKF5Solid5-lang-5.11.0-24.1 libKF5SonnetCore5-lang-5.11.0-24.11 libKF5Style5-lang-5.11.0-24.1 libKF5Su5-lang-5.11.0-24.3 libKF5TextWidgets5-lang-5.11.0-24.1 libKF5UnitConversion5-lang-5.11.0-24.1 libKF5WidgetsAddons5-lang-5.11.0-24.3 libKF5WindowSystem5-lang-5.11.0-25.3 libKF5XmlGui5-lang-5.11.0-24.5 libKF5XmlRpcClient5-lang-5.11.0-11.1 libQt5Core-private-headers-devel-5.4.2-22.3 libQt5DBus-private-headers-devel-5.4.2-22.3 libQt5Gui-private-headers-devel-5.4.2-22.3 libQt5Network-private-headers-devel-5.4.2-22.3 libQt5OpenGL-private-headers-devel-5.4.2-22.3 libQt5PlatformSupport-private-headers-devel-5.4.2-22.3 libQt5PrintSupport-private-headers-devel-5.4.2-22.3 libQt5Sql-private-headers-devel-5.4.2-22.3 libQt5Test-private-headers-devel-5.4.2-22.3 libQt5WebKit-private-headers-devel-5.4.2-10.5 libQt5WebKitWidgets-private-headers-devel-5.4.2-10.5 libQt5Widgets-private-headers-devel-5.4.2-22.3 libksysguard5-lang-5.3.2-18.2 libqt5-qtbase-private-headers-devel-5.4.2-22.3 libqt5-qtconnectivity-private-headers-devel-5.4.2-5.8 libqt5-qtdeclarative-private-headers-devel-5.4.2-11.7 libqt5-qtdoc-5.4.2-8.1 libqt5-qtlocation-private-headers-devel-5.4.2-9.5 libqt5-qtmultimedia-private-headers-devel-5.4.2-7.5 libqt5-qtquick1-private-headers-devel-5.4.2-7.7 libqt5-qtscript-private-headers-devel-5.4.2-7.4 libqt5-qtsensors-private-headers-devel-5.4.2-9.3 libqt5-qtserialport-private-headers-devel-5.4.2-7.3 libqt5-qtsvg-private-headers-devel-5.4.2-7.3 libqt5-qttools-private-headers-devel-5.4.2-7.9 libqt5-qtwayland-private-headers-devel-5.4.2-7.6 libqt5-qtwebchannel-private-headers-devel-5.4.2-7.3 libqt5-qtwebengine-private-headers-devel-5.4.2-5.6 libqt5-qtwebsockets-private-headers-devel-5.4.2-9.3 libqt5-qtxmlpatterns-private-headers-devel-5.4.2-9.3 milou5-lang-5.3.2-18.11 oxygen5-lang-5.3.2-18.1 plasma-framework-lang-5.11.0-26.1 plasma-nm5-lang-5.3.2-23.6 plasma5-addons-lang-5.3.2-18.1 plasma5-desktop-lang-5.3.2-26.6 plasma5-mediacenter-lang-5.3.2-2.1 plasma5-sdk-lang-5.3.2-2.1 plasma5-session-5.3.2-10.1 plasma5-workspace-lang-5.3.2-29.1 plasma5-workspace-wallpapers-5.3.2-18.1 polkit-kde-agent-5-lang-5.3.2-2.10.1 powerdevil5-lang-5.3.2-14.1 susehelp-2009.10.06-21.3.1 susehelp_cz-2009.10.06-21.3.1 susehelp_de-2009.10.06-21.3.1 susehelp_en-2009.10.06-21.3.1 susehelp_es-2009.10.06-21.3.1 susehelp_fr-2009.10.06-21.3.1 susehelp_hu-2009.10.06-21.3.1 susehelp_it-2009.10.06-21.3.1 systemsettings5-lang-5.3.2-18.1 References: https://bugzilla.suse.com/931167

1 0

openSUSE-RU-2015:1301-1: important: Recommended update for Samba
by maintenance＠opensuse.org 28 Jul '15

28 Jul '15

openSUSE Recommended Update: Recommended update for Samba ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1301-1 Rating: important References: #902421 #931854 #936909 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This recommended update for Samba provides version 4.1.19 with the following fixes and improvements: - Disable rpath usage (boo#902421). - Make the winbind package depend on the matching libwbclient version and vice versa (boo#936909). - s4:lib/tls: Fix build with gnutls 3.4 (bso#8780). - s4.2/fsmo.py: Fix fsmo transfer exception (bso#10924). - s3: smbcacls: Ensure we read a hex number as %x, not %u (bso#11068). - s3:winbindd: Make sure we remove pending io requests before closing client sockets (bso#11141, boo#931854). - Fix panic triggered by smbd_smb2_request_notify_done() -> smbXsrv_session_find_channel() in smbd (bso#11182). - Error code path doesn't call END_PROFILE (bso#11244). - Make mangled names work with acl_xattr (bso#11249). - libads: Record service ticket endtime for sealed ldap connections (bso#11267). - s3:smb2: Add padding to last command in compound requests (bso#11277). - s3: IPv6 enabled DNS connections for ADS client (bso#11283). - s4: libcli/finddcs_cldap: Continue processing CLDAP until all addresses are used (bso#11284). - Excessive cli_resolve_path() usage can slow down transmission (bso#11295). - idmap_rfc2307: Fix 'wbinfo --gid-to-sid' query (bso#11313). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-521=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-521=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libdcerpc-atsvc-devel-4.1.19-11.1 libdcerpc-atsvc0-4.1.19-11.1 libdcerpc-atsvc0-debuginfo-4.1.19-11.1 libdcerpc-binding0-4.1.19-11.1 libdcerpc-binding0-debuginfo-4.1.19-11.1 libdcerpc-devel-4.1.19-11.1 libdcerpc-samr-devel-4.1.19-11.1 libdcerpc-samr0-4.1.19-11.1 libdcerpc-samr0-debuginfo-4.1.19-11.1 libdcerpc0-4.1.19-11.1 libdcerpc0-debuginfo-4.1.19-11.1 libgensec-devel-4.1.19-11.1 libgensec0-4.1.19-11.1 libgensec0-debuginfo-4.1.19-11.1 libndr-devel-4.1.19-11.1 libndr-krb5pac-devel-4.1.19-11.1 libndr-krb5pac0-4.1.19-11.1 libndr-krb5pac0-debuginfo-4.1.19-11.1 libndr-nbt-devel-4.1.19-11.1 libndr-nbt0-4.1.19-11.1 libndr-nbt0-debuginfo-4.1.19-11.1 libndr-standard-devel-4.1.19-11.1 libndr-standard0-4.1.19-11.1 libndr-standard0-debuginfo-4.1.19-11.1 libndr0-4.1.19-11.1 libndr0-debuginfo-4.1.19-11.1 libnetapi-devel-4.1.19-11.1 libnetapi0-4.1.19-11.1 libnetapi0-debuginfo-4.1.19-11.1 libpdb-devel-4.1.19-11.1 libpdb0-4.1.19-11.1 libpdb0-debuginfo-4.1.19-11.1 libregistry-devel-4.1.19-11.1 libregistry0-4.1.19-11.1 libregistry0-debuginfo-4.1.19-11.1 libsamba-credentials-devel-4.1.19-11.1 libsamba-credentials0-4.1.19-11.1 libsamba-credentials0-debuginfo-4.1.19-11.1 libsamba-hostconfig-devel-4.1.19-11.1 libsamba-hostconfig0-4.1.19-11.1 libsamba-hostconfig0-debuginfo-4.1.19-11.1 libsamba-policy-devel-4.1.19-11.1 libsamba-policy0-4.1.19-11.1 libsamba-policy0-debuginfo-4.1.19-11.1 libsamba-util-devel-4.1.19-11.1 libsamba-util0-4.1.19-11.1 libsamba-util0-debuginfo-4.1.19-11.1 libsamdb-devel-4.1.19-11.1 libsamdb0-4.1.19-11.1 libsamdb0-debuginfo-4.1.19-11.1 libsmbclient-devel-4.1.19-11.1 libsmbclient-raw-devel-4.1.19-11.1 libsmbclient-raw0-4.1.19-11.1 libsmbclient-raw0-debuginfo-4.1.19-11.1 libsmbclient0-4.1.19-11.1 libsmbclient0-debuginfo-4.1.19-11.1 libsmbconf-devel-4.1.19-11.1 libsmbconf0-4.1.19-11.1 libsmbconf0-debuginfo-4.1.19-11.1 libsmbldap-devel-4.1.19-11.1 libsmbldap0-4.1.19-11.1 libsmbldap0-debuginfo-4.1.19-11.1 libsmbsharemodes-devel-4.1.19-11.1 libsmbsharemodes0-4.1.19-11.1 libsmbsharemodes0-debuginfo-4.1.19-11.1 libtevent-util-devel-4.1.19-11.1 libtevent-util0-4.1.19-11.1 libtevent-util0-debuginfo-4.1.19-11.1 libwbclient-devel-4.1.19-11.1 libwbclient0-4.1.19-11.1 libwbclient0-debuginfo-4.1.19-11.1 samba-4.1.19-11.1 samba-client-4.1.19-11.1 samba-client-debuginfo-4.1.19-11.1 samba-core-devel-4.1.19-11.1 samba-debuginfo-4.1.19-11.1 samba-debugsource-4.1.19-11.1 samba-libs-4.1.19-11.1 samba-libs-debuginfo-4.1.19-11.1 samba-pidl-4.1.19-11.1 samba-python-4.1.19-11.1 samba-python-debuginfo-4.1.19-11.1 samba-test-4.1.19-11.1 samba-test-debuginfo-4.1.19-11.1 samba-test-devel-4.1.19-11.1 samba-winbind-4.1.19-11.1 samba-winbind-debuginfo-4.1.19-11.1 - openSUSE 13.2 (x86_64): libdcerpc-atsvc0-32bit-4.1.19-11.1 libdcerpc-atsvc0-debuginfo-32bit-4.1.19-11.1 libdcerpc-binding0-32bit-4.1.19-11.1 libdcerpc-binding0-debuginfo-32bit-4.1.19-11.1 libdcerpc-samr0-32bit-4.1.19-11.1 libdcerpc-samr0-debuginfo-32bit-4.1.19-11.1 libdcerpc0-32bit-4.1.19-11.1 libdcerpc0-debuginfo-32bit-4.1.19-11.1 libgensec0-32bit-4.1.19-11.1 libgensec0-debuginfo-32bit-4.1.19-11.1 libndr-krb5pac0-32bit-4.1.19-11.1 libndr-krb5pac0-debuginfo-32bit-4.1.19-11.1 libndr-nbt0-32bit-4.1.19-11.1 libndr-nbt0-debuginfo-32bit-4.1.19-11.1 libndr-standard0-32bit-4.1.19-11.1 libndr-standard0-debuginfo-32bit-4.1.19-11.1 libndr0-32bit-4.1.19-11.1 libndr0-debuginfo-32bit-4.1.19-11.1 libnetapi0-32bit-4.1.19-11.1 libnetapi0-debuginfo-32bit-4.1.19-11.1 libpdb0-32bit-4.1.19-11.1 libpdb0-debuginfo-32bit-4.1.19-11.1 libregistry0-32bit-4.1.19-11.1 libregistry0-debuginfo-32bit-4.1.19-11.1 libsamba-credentials0-32bit-4.1.19-11.1 libsamba-credentials0-debuginfo-32bit-4.1.19-11.1 libsamba-hostconfig0-32bit-4.1.19-11.1 libsamba-hostconfig0-debuginfo-32bit-4.1.19-11.1 libsamba-policy0-32bit-4.1.19-11.1 libsamba-policy0-debuginfo-32bit-4.1.19-11.1 libsamba-util0-32bit-4.1.19-11.1 libsamba-util0-debuginfo-32bit-4.1.19-11.1 libsamdb0-32bit-4.1.19-11.1 libsamdb0-debuginfo-32bit-4.1.19-11.1 libsmbclient-raw0-32bit-4.1.19-11.1 libsmbclient-raw0-debuginfo-32bit-4.1.19-11.1 libsmbclient0-32bit-4.1.19-11.1 libsmbclient0-debuginfo-32bit-4.1.19-11.1 libsmbconf0-32bit-4.1.19-11.1 libsmbconf0-debuginfo-32bit-4.1.19-11.1 libsmbldap0-32bit-4.1.19-11.1 libsmbldap0-debuginfo-32bit-4.1.19-11.1 libtevent-util0-32bit-4.1.19-11.1 libtevent-util0-debuginfo-32bit-4.1.19-11.1 libwbclient0-32bit-4.1.19-11.1 libwbclient0-debuginfo-32bit-4.1.19-11.1 samba-32bit-4.1.19-11.1 samba-client-32bit-4.1.19-11.1 samba-client-debuginfo-32bit-4.1.19-11.1 samba-debuginfo-32bit-4.1.19-11.1 samba-libs-32bit-4.1.19-11.1 samba-libs-debuginfo-32bit-4.1.19-11.1 samba-winbind-32bit-4.1.19-11.1 samba-winbind-debuginfo-32bit-4.1.19-11.1 - openSUSE 13.2 (noarch): samba-doc-4.1.19-11.1 - openSUSE 13.1 (i586 x86_64): libdcerpc-atsvc-devel-4.1.19-3.36.1 libdcerpc-atsvc0-4.1.19-3.36.1 libdcerpc-atsvc0-debuginfo-4.1.19-3.36.1 libdcerpc-binding0-4.1.19-3.36.1 libdcerpc-binding0-debuginfo-4.1.19-3.36.1 libdcerpc-devel-4.1.19-3.36.1 libdcerpc-samr-devel-4.1.19-3.36.1 libdcerpc-samr0-4.1.19-3.36.1 libdcerpc-samr0-debuginfo-4.1.19-3.36.1 libdcerpc0-4.1.19-3.36.1 libdcerpc0-debuginfo-4.1.19-3.36.1 libgensec-devel-4.1.19-3.36.1 libgensec0-4.1.19-3.36.1 libgensec0-debuginfo-4.1.19-3.36.1 libndr-devel-4.1.19-3.36.1 libndr-krb5pac-devel-4.1.19-3.36.1 libndr-krb5pac0-4.1.19-3.36.1 libndr-krb5pac0-debuginfo-4.1.19-3.36.1 libndr-nbt-devel-4.1.19-3.36.1 libndr-nbt0-4.1.19-3.36.1 libndr-nbt0-debuginfo-4.1.19-3.36.1 libndr-standard-devel-4.1.19-3.36.1 libndr-standard0-4.1.19-3.36.1 libndr-standard0-debuginfo-4.1.19-3.36.1 libndr0-4.1.19-3.36.1 libndr0-debuginfo-4.1.19-3.36.1 libnetapi-devel-4.1.19-3.36.1 libnetapi0-4.1.19-3.36.1 libnetapi0-debuginfo-4.1.19-3.36.1 libpdb-devel-4.1.19-3.36.1 libpdb0-4.1.19-3.36.1 libpdb0-debuginfo-4.1.19-3.36.1 libregistry-devel-4.1.19-3.36.1 libregistry0-4.1.19-3.36.1 libregistry0-debuginfo-4.1.19-3.36.1 libsamba-credentials-devel-4.1.19-3.36.1 libsamba-credentials0-4.1.19-3.36.1 libsamba-credentials0-debuginfo-4.1.19-3.36.1 libsamba-hostconfig-devel-4.1.19-3.36.1 libsamba-hostconfig0-4.1.19-3.36.1 libsamba-hostconfig0-debuginfo-4.1.19-3.36.1 libsamba-policy-devel-4.1.19-3.36.1 libsamba-policy0-4.1.19-3.36.1 libsamba-policy0-debuginfo-4.1.19-3.36.1 libsamba-util-devel-4.1.19-3.36.1 libsamba-util0-4.1.19-3.36.1 libsamba-util0-debuginfo-4.1.19-3.36.1 libsamdb-devel-4.1.19-3.36.1 libsamdb0-4.1.19-3.36.1 libsamdb0-debuginfo-4.1.19-3.36.1 libsmbclient-devel-4.1.19-3.36.1 libsmbclient-raw-devel-4.1.19-3.36.1 libsmbclient-raw0-4.1.19-3.36.1 libsmbclient-raw0-debuginfo-4.1.19-3.36.1 libsmbclient0-4.1.19-3.36.1 libsmbclient0-debuginfo-4.1.19-3.36.1 libsmbconf-devel-4.1.19-3.36.1 libsmbconf0-4.1.19-3.36.1 libsmbconf0-debuginfo-4.1.19-3.36.1 libsmbldap-devel-4.1.19-3.36.1 libsmbldap0-4.1.19-3.36.1 libsmbldap0-debuginfo-4.1.19-3.36.1 libsmbsharemodes-devel-4.1.19-3.36.1 libsmbsharemodes0-4.1.19-3.36.1 libsmbsharemodes0-debuginfo-4.1.19-3.36.1 libtevent-util-devel-4.1.19-3.36.1 libtevent-util0-4.1.19-3.36.1 libtevent-util0-debuginfo-4.1.19-3.36.1 libwbclient-devel-4.1.19-3.36.1 libwbclient0-4.1.19-3.36.1 libwbclient0-debuginfo-4.1.19-3.36.1 samba-4.1.19-3.36.1 samba-client-4.1.19-3.36.1 samba-client-debuginfo-4.1.19-3.36.1 samba-core-devel-4.1.19-3.36.1 samba-debuginfo-4.1.19-3.36.1 samba-debugsource-4.1.19-3.36.1 samba-libs-4.1.19-3.36.1 samba-libs-debuginfo-4.1.19-3.36.1 samba-pidl-4.1.19-3.36.1 samba-python-4.1.19-3.36.1 samba-python-debuginfo-4.1.19-3.36.1 samba-test-4.1.19-3.36.1 samba-test-debuginfo-4.1.19-3.36.1 samba-test-devel-4.1.19-3.36.1 samba-winbind-4.1.19-3.36.1 samba-winbind-debuginfo-4.1.19-3.36.1 - openSUSE 13.1 (x86_64): libdcerpc-atsvc0-32bit-4.1.19-3.36.1 libdcerpc-atsvc0-debuginfo-32bit-4.1.19-3.36.1 libdcerpc-binding0-32bit-4.1.19-3.36.1 libdcerpc-binding0-debuginfo-32bit-4.1.19-3.36.1 libdcerpc-samr0-32bit-4.1.19-3.36.1 libdcerpc-samr0-debuginfo-32bit-4.1.19-3.36.1 libdcerpc0-32bit-4.1.19-3.36.1 libdcerpc0-debuginfo-32bit-4.1.19-3.36.1 libgensec0-32bit-4.1.19-3.36.1 libgensec0-debuginfo-32bit-4.1.19-3.36.1 libndr-krb5pac0-32bit-4.1.19-3.36.1 libndr-krb5pac0-debuginfo-32bit-4.1.19-3.36.1 libndr-nbt0-32bit-4.1.19-3.36.1 libndr-nbt0-debuginfo-32bit-4.1.19-3.36.1 libndr-standard0-32bit-4.1.19-3.36.1 libndr-standard0-debuginfo-32bit-4.1.19-3.36.1 libndr0-32bit-4.1.19-3.36.1 libndr0-debuginfo-32bit-4.1.19-3.36.1 libnetapi0-32bit-4.1.19-3.36.1 libnetapi0-debuginfo-32bit-4.1.19-3.36.1 libpdb0-32bit-4.1.19-3.36.1 libpdb0-debuginfo-32bit-4.1.19-3.36.1 libregistry0-32bit-4.1.19-3.36.1 libregistry0-debuginfo-32bit-4.1.19-3.36.1 libsamba-credentials0-32bit-4.1.19-3.36.1 libsamba-credentials0-debuginfo-32bit-4.1.19-3.36.1 libsamba-hostconfig0-32bit-4.1.19-3.36.1 libsamba-hostconfig0-debuginfo-32bit-4.1.19-3.36.1 libsamba-policy0-32bit-4.1.19-3.36.1 libsamba-policy0-debuginfo-32bit-4.1.19-3.36.1 libsamba-util0-32bit-4.1.19-3.36.1 libsamba-util0-debuginfo-32bit-4.1.19-3.36.1 libsamdb0-32bit-4.1.19-3.36.1 libsamdb0-debuginfo-32bit-4.1.19-3.36.1 libsmbclient-raw0-32bit-4.1.19-3.36.1 libsmbclient-raw0-debuginfo-32bit-4.1.19-3.36.1 libsmbclient0-32bit-4.1.19-3.36.1 libsmbclient0-debuginfo-32bit-4.1.19-3.36.1 libsmbconf0-32bit-4.1.19-3.36.1 libsmbconf0-debuginfo-32bit-4.1.19-3.36.1 libsmbldap0-32bit-4.1.19-3.36.1 libsmbldap0-debuginfo-32bit-4.1.19-3.36.1 libtevent-util0-32bit-4.1.19-3.36.1 libtevent-util0-debuginfo-32bit-4.1.19-3.36.1 libwbclient0-32bit-4.1.19-3.36.1 libwbclient0-debuginfo-32bit-4.1.19-3.36.1 samba-32bit-4.1.19-3.36.1 samba-client-32bit-4.1.19-3.36.1 samba-client-debuginfo-32bit-4.1.19-3.36.1 samba-debuginfo-32bit-4.1.19-3.36.1 samba-libs-32bit-4.1.19-3.36.1 samba-libs-debuginfo-32bit-4.1.19-3.36.1 samba-winbind-32bit-4.1.19-3.36.1 samba-winbind-debuginfo-32bit-4.1.19-3.36.1 - openSUSE 13.1 (noarch): samba-doc-4.1.19-3.36.1 References: https://bugzilla.suse.com/902421 https://bugzilla.suse.com/931854 https://bugzilla.suse.com/936909

1 0

openSUSE-RU-2015:1296-1: moderate: Recommended update for procps
by maintenance＠opensuse.org 27 Jul '15

27 Jul '15

openSUSE Recommended Update: Recommended update for procps ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1296-1 Rating: moderate References: #938207 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for procps fixes the following issue: - fix, top(1) randomly hides processes (boo#938207) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-517=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libprocps1-3.3.8-5.7.1 libprocps1-debuginfo-3.3.8-5.7.1 procps-3.3.8-5.7.1 procps-debuginfo-3.3.8-5.7.1 procps-debugsource-3.3.8-5.7.1 procps-devel-3.3.8-5.7.1 References: https://bugzilla.suse.com/938207

1 0

openSUSE-RU-2015:1295-1: Recommended update for Amarok
by maintenance＠opensuse.org 27 Jul '15

27 Jul '15

openSUSE Recommended Update: Recommended update for Amarok ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1295-1 Rating: low References: #934730 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended udpate for Amarok provides the following fixes and improvements: - Fixes the wikipedia applet in Amarok - remove unneeded Strigi reference in the Ampache plugin build system - unbreak Ampache plugin connection due to wrong hashing algorithm being used - Require correct libtag.so to avoid undefined symbols at runtime Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-516=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): amarok-2.8.0-4.4.2 amarok-debuginfo-2.8.0-4.4.2 amarok-debugsource-2.8.0-4.4.2 - openSUSE 13.1 (noarch): amarok-lang-2.8.0-4.4.2 References: https://bugzilla.suse.com/934730

1 0

openSUSE-RU-2015:1294-1: moderate: Recommended udpate for virt-manager
by maintenance＠opensuse.org 27 Jul '15

27 Jul '15

openSUSE Recommended Update: Recommended udpate for virt-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1294-1 Rating: moderate References: #910929 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for virt-manager fixes the following issue: - Fixed cloning of qcow2 guests (boo#910929) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-514=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): virt-install-1.0.1-14.17.1 virt-manager-1.0.1-14.17.1 virt-manager-common-1.0.1-14.17.1 References: https://bugzilla.suse.com/910929

1 0

openSUSE-RU-2015:1293-1: moderate: Recommended update for apache2-mod_auth_ntlm_winbind
by maintenance＠opensuse.org 27 Jul '15

27 Jul '15

openSUSE Recommended Update: Recommended update for apache2-mod_auth_ntlm_winbind ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1293-1 Rating: moderate References: #866921 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for apache2-mod_auth_ntlml_winbind fixes the following issues: - Only send "Proxy-Authenticate" replies when we are in a forward proxy. - Clean up compile warnings on 64-bit architectures (boo#866921). - Ensure that the authenticated user context is set to NULL when freed. - Add a workaround for proxy authorization in IE. - Fix a typo in strcmp usage in process_msg(). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-518=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): apache2-mod_auth_ntlm_winbind-0.0.0.lorikeet_svn_785-191.3.1 apache2-mod_auth_ntlm_winbind-debuginfo-0.0.0.lorikeet_svn_785-191.3.1 apache2-mod_auth_ntlm_winbind-debugsource-0.0.0.lorikeet_svn_785-191.3.1 References: https://bugzilla.suse.com/866921

1 0

openSUSE-RU-2015:1292-1: Recommended update for Amarok
by maintenance＠opensuse.org 27 Jul '15

27 Jul '15

openSUSE Recommended Update: Recommended update for Amarok ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1292-1 Rating: low References: #934730 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for Amarok provides the following fixes and improvements: - Fixes the wikipedia applet in Amarok - remove unneeded Strigi reference in the Ampache plugin build system - unbreak Ampache plugin connection due to wrong hashing algorithm being used - Require correct libtag.so to avoid undefined symbols at runtime Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-520=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): amarok-2.8.0-9.3.2 amarok-debuginfo-2.8.0-9.3.2 amarok-debugsource-2.8.0-9.3.2 - openSUSE 13.2 (noarch): amarok-lang-2.8.0-9.3.2 References: https://bugzilla.suse.com/934730

1 0

openSUSE-RU-2015:1291-1: moderate: Recommended udpate for pm-utils
by maintenance＠opensuse.org 27 Jul '15

27 Jul '15

openSUSE Recommended Update: Recommended udpate for pm-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1291-1 Rating: moderate References: #925873 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for pm-utils provides the following fix: - use kernel method for suspend/hibernate by default instead of the problematic uswsusp (boo#925873) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-515=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): pm-utils-1.4.1-38.7.1 pm-utils-debuginfo-1.4.1-38.7.1 pm-utils-debugsource-1.4.1-38.7.1 pm-utils-ndiswrapper-1.4.1-38.7.1 References: https://bugzilla.suse.com/925873

1 0

openSUSE-RU-2015:1290-1: moderate: Recommended update for NetworkManager
by maintenance＠opensuse.org 27 Jul '15

27 Jul '15

openSUSE Recommended Update: Recommended update for NetworkManager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1290-1 Rating: moderate References: #937762 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for NetworkManager fixes the following issue: - ignore hop limits of zero (boo#937762, bgo#737252) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-519=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): NetworkManager-0.9.10.0-3.11.1 NetworkManager-debuginfo-0.9.10.0-3.11.1 NetworkManager-debugsource-0.9.10.0-3.11.1 NetworkManager-devel-0.9.10.0-3.11.1 libnm-glib-vpn1-0.9.10.0-3.11.1 libnm-glib-vpn1-debuginfo-0.9.10.0-3.11.1 libnm-glib4-0.9.10.0-3.11.1 libnm-glib4-debuginfo-0.9.10.0-3.11.1 libnm-util2-0.9.10.0-3.11.1 libnm-util2-debuginfo-0.9.10.0-3.11.1 typelib-1_0-NMClient-1_0-0.9.10.0-3.11.1 typelib-1_0-NetworkManager-1_0-0.9.10.0-3.11.1 - openSUSE 13.2 (x86_64): NetworkManager-devel-32bit-0.9.10.0-3.11.1 libnm-glib-vpn1-32bit-0.9.10.0-3.11.1 libnm-glib-vpn1-debuginfo-32bit-0.9.10.0-3.11.1 libnm-glib4-32bit-0.9.10.0-3.11.1 libnm-glib4-debuginfo-32bit-0.9.10.0-3.11.1 libnm-util2-32bit-0.9.10.0-3.11.1 libnm-util2-debuginfo-32bit-0.9.10.0-3.11.1 - openSUSE 13.2 (noarch): NetworkManager-lang-0.9.10.0-3.11.1 References: https://bugzilla.suse.com/937762

1 0

openSUSE-SU-2015:1289-1: important: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 26 Jul '15

26 Jul '15

openSUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1289-1 Rating: important References: #937828 #938248 Cross-References: CVE-2015-2590 CVE-2015-2597 CVE-2015-2601 CVE-2015-2613 CVE-2015-2619 CVE-2015-2621 CVE-2015-2625 CVE-2015-2627 CVE-2015-2628 CVE-2015-2632 CVE-2015-2637 CVE-2015-2638 CVE-2015-2659 CVE-2015-2664 CVE-2015-2808 CVE-2015-4000 CVE-2015-4729 CVE-2015-4731 CVE-2015-4732 CVE-2015-4733 CVE-2015-4736 CVE-2015-4748 CVE-2015-4749 CVE-2015-4760 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 24 vulnerabilities is now available. Description: OpenJDK was updated to 2.6.1 - OpenJDK 8u51 to fix security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-2597: Easily exploitable vulnerability in the Install component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2613: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. * CVE-2015-2619: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2627: Very difficult to exploit vulnerability in the Install component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2628: Easily exploitable vulnerability in the CORBA component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-2659: Easily exploitable vulnerability in the Security component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized ability to cause a partial denial of service (partial DOS). * CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-2808: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java accessible data. * CVE-2015-4000: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java Embedded accessible data. * CVE-2015-4729: Very difficult to exploit vulnerability in the Deployment component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java SE accessible data as well as read access to a subset of Java SE accessible data. * CVE-2015-4731: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-4732: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-4733: Easily exploitable vulnerability in the RMI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-4736: Difficult to exploit vulnerability in the Deployment component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-4748: Very difficult to exploit vulnerability in the Security component allowed successful unauthenticated network attacks via OCSP. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-4749: Difficult to exploit vulnerability in the JNDI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized ability to cause a partial denial of service (partial DOS). * CVE-2015-4760: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-512=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): java-1_8_0-openjdk-1.8.0.51-12.1 java-1_8_0-openjdk-accessibility-1.8.0.51-12.1 java-1_8_0-openjdk-debuginfo-1.8.0.51-12.1 java-1_8_0-openjdk-debugsource-1.8.0.51-12.1 java-1_8_0-openjdk-demo-1.8.0.51-12.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.51-12.1 java-1_8_0-openjdk-devel-1.8.0.51-12.1 java-1_8_0-openjdk-headless-1.8.0.51-12.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.51-12.1 java-1_8_0-openjdk-src-1.8.0.51-12.1 - openSUSE 13.2 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.51-12.1 References: https://www.suse.com/security/cve/CVE-2015-2590.html https://www.suse.com/security/cve/CVE-2015-2597.html https://www.suse.com/security/cve/CVE-2015-2601.html https://www.suse.com/security/cve/CVE-2015-2613.html https://www.suse.com/security/cve/CVE-2015-2619.html https://www.suse.com/security/cve/CVE-2015-2621.html https://www.suse.com/security/cve/CVE-2015-2625.html https://www.suse.com/security/cve/CVE-2015-2627.html https://www.suse.com/security/cve/CVE-2015-2628.html https://www.suse.com/security/cve/CVE-2015-2632.html https://www.suse.com/security/cve/CVE-2015-2637.html https://www.suse.com/security/cve/CVE-2015-2638.html https://www.suse.com/security/cve/CVE-2015-2659.html https://www.suse.com/security/cve/CVE-2015-2664.html https://www.suse.com/security/cve/CVE-2015-2808.html https://www.suse.com/security/cve/CVE-2015-4000.html https://www.suse.com/security/cve/CVE-2015-4729.html https://www.suse.com/security/cve/CVE-2015-4731.html https://www.suse.com/security/cve/CVE-2015-4732.html https://www.suse.com/security/cve/CVE-2015-4733.html https://www.suse.com/security/cve/CVE-2015-4736.html https://www.suse.com/security/cve/CVE-2015-4748.html https://www.suse.com/security/cve/CVE-2015-4749.html https://www.suse.com/security/cve/CVE-2015-4760.html https://bugzilla.suse.com/937828 https://bugzilla.suse.com/938248

1 0

openSUSE-SU-2015:1288-1: important: Security update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 26 Jul '15

26 Jul '15

openSUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1288-1 Rating: important References: #937828 #938248 Cross-References: CVE-2015-2590 CVE-2015-2596 CVE-2015-2597 CVE-2015-2601 CVE-2015-2613 CVE-2015-2619 CVE-2015-2621 CVE-2015-2625 CVE-2015-2627 CVE-2015-2628 CVE-2015-2632 CVE-2015-2637 CVE-2015-2638 CVE-2015-2664 CVE-2015-2808 CVE-2015-4000 CVE-2015-4729 CVE-2015-4731 CVE-2015-4732 CVE-2015-4733 CVE-2015-4736 CVE-2015-4748 CVE-2015-4749 CVE-2015-4760 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 24 vulnerabilities is now available. Description: OpenJDK was updated to 2.6.1 - OpenJDK 7u85 to fix security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-2596: Difficult to exploit vulnerability in the Hotspot component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data. * CVE-2015-2597: Easily exploitable vulnerability in the Install component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2613: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. * CVE-2015-2619: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2627: Very difficult to exploit vulnerability in the Install component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2628: Easily exploitable vulnerability in the CORBA component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-2808: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java accessible data. * CVE-2015-4000: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java Embedded accessible data. * CVE-2015-4729: Very difficult to exploit vulnerability in the Deployment component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java SE accessible data as well as read access to a subset of Java SE accessible data. * CVE-2015-4731: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-4732: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-4733: Easily exploitable vulnerability in the RMI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-4736: Difficult to exploit vulnerability in the Deployment component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-4748: Very difficult to exploit vulnerability in the Security component allowed successful unauthenticated network attacks via OCSP. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-4749: Difficult to exploit vulnerability in the JNDI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized ability to cause a partial denial of service (partial DOS). * CVE-2015-4760: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-511=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-511=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): java-1_7_0-openjdk-1.7.0.85-10.2 java-1_7_0-openjdk-accessibility-1.7.0.85-10.2 java-1_7_0-openjdk-bootstrap-1.7.0.85-10.1 java-1_7_0-openjdk-bootstrap-debuginfo-1.7.0.85-10.1 java-1_7_0-openjdk-bootstrap-debugsource-1.7.0.85-10.1 java-1_7_0-openjdk-bootstrap-devel-1.7.0.85-10.1 java-1_7_0-openjdk-bootstrap-devel-debuginfo-1.7.0.85-10.1 java-1_7_0-openjdk-bootstrap-headless-1.7.0.85-10.1 java-1_7_0-openjdk-bootstrap-headless-debuginfo-1.7.0.85-10.1 java-1_7_0-openjdk-debuginfo-1.7.0.85-10.2 java-1_7_0-openjdk-debugsource-1.7.0.85-10.2 java-1_7_0-openjdk-demo-1.7.0.85-10.2 java-1_7_0-openjdk-demo-debuginfo-1.7.0.85-10.2 java-1_7_0-openjdk-devel-1.7.0.85-10.2 java-1_7_0-openjdk-devel-debuginfo-1.7.0.85-10.2 java-1_7_0-openjdk-headless-1.7.0.85-10.2 java-1_7_0-openjdk-headless-debuginfo-1.7.0.85-10.2 java-1_7_0-openjdk-src-1.7.0.85-10.2 - openSUSE 13.2 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.85-10.2 - openSUSE 13.1 (i586 x86_64): java-1_7_0-openjdk-1.7.0.85-24.21.1 java-1_7_0-openjdk-accessibility-1.7.0.85-24.21.1 java-1_7_0-openjdk-debuginfo-1.7.0.85-24.21.1 java-1_7_0-openjdk-debugsource-1.7.0.85-24.21.1 java-1_7_0-openjdk-demo-1.7.0.85-24.21.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.85-24.21.1 java-1_7_0-openjdk-devel-1.7.0.85-24.21.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.85-24.21.1 java-1_7_0-openjdk-headless-1.7.0.85-24.21.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.85-24.21.1 java-1_7_0-openjdk-src-1.7.0.85-24.21.1 - openSUSE 13.1 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.85-24.21.1 References: https://www.suse.com/security/cve/CVE-2015-2590.html https://www.suse.com/security/cve/CVE-2015-2596.html https://www.suse.com/security/cve/CVE-2015-2597.html https://www.suse.com/security/cve/CVE-2015-2601.html https://www.suse.com/security/cve/CVE-2015-2613.html https://www.suse.com/security/cve/CVE-2015-2619.html https://www.suse.com/security/cve/CVE-2015-2621.html https://www.suse.com/security/cve/CVE-2015-2625.html https://www.suse.com/security/cve/CVE-2015-2627.html https://www.suse.com/security/cve/CVE-2015-2628.html https://www.suse.com/security/cve/CVE-2015-2632.html https://www.suse.com/security/cve/CVE-2015-2637.html https://www.suse.com/security/cve/CVE-2015-2638.html https://www.suse.com/security/cve/CVE-2015-2664.html https://www.suse.com/security/cve/CVE-2015-2808.html https://www.suse.com/security/cve/CVE-2015-4000.html https://www.suse.com/security/cve/CVE-2015-4729.html https://www.suse.com/security/cve/CVE-2015-4731.html https://www.suse.com/security/cve/CVE-2015-4732.html https://www.suse.com/security/cve/CVE-2015-4733.html https://www.suse.com/security/cve/CVE-2015-4736.html https://www.suse.com/security/cve/CVE-2015-4748.html https://www.suse.com/security/cve/CVE-2015-4749.html https://www.suse.com/security/cve/CVE-2015-4760.html https://bugzilla.suse.com/937828 https://bugzilla.suse.com/938248

1 0

openSUSE-SU-2015:1287-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 26 Jul '15

26 Jul '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1287-1 Rating: important References: #939077 Cross-References: CVE-2015-1270 CVE-2015-1271 CVE-2015-1272 CVE-2015-1273 CVE-2015-1274 CVE-2015-1275 CVE-2015-1276 CVE-2015-1277 CVE-2015-1278 CVE-2015-1279 CVE-2015-1280 CVE-2015-1281 CVE-2015-1282 CVE-2015-1283 CVE-2015-1284 CVE-2015-1285 CVE-2015-1286 CVE-2015-1287 CVE-2015-1288 CVE-2015-1289 CVE-2015-5605 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: Chromium was updated to 44.0.2403.89 to fix multiple security issues. The following vulnerabilities were fixed: * CVE-2015-1271: Heap-buffer-overflow in pdfium * CVE-2015-1273: Heap-buffer-overflow in pdfium * CVE-2015-1274: Settings allowed executable files to run immediately after download * CVE-2015-1275: UXSS in Chrome for Android * CVE-2015-1276: Use-after-free in IndexedDB * CVE-2015-1279: Heap-buffer-overflow in pdfium * CVE-2015-1280: Memory corruption in skia * CVE-2015-1281: CSP bypass * CVE-2015-1282: Use-after-free in pdfium * CVE-2015-1283: Heap-buffer-overflow in expat * CVE-2015-1284: Use-after-free in blink * CVE-2015-1286: UXSS in blink * CVE-2015-1287: SOP bypass with CSS * CVE-2015-1270: Uninitialized memory read in ICU * CVE-2015-1272: Use-after-free related to unexpected GPU process termination * CVE-2015-1277: Use-after-free in accessibility * CVE-2015-1278: URL spoofing using pdf files * CVE-2015-1285: Information leak in XSS auditor * CVE-2015-1288: Spell checking dictionaries fetched over HTTP * CVE-2015-1289: Various fixes from internal audits, fuzzing and other initiatives * CVE-2015-5605: Rgular-expression implementation mishandles interrupts, DoS via JS The following non-security changes are included: * A number of new apps/extension APIs * Lots of under the hood changes for stability and performance * Pepper Flash plugin updated to 18.0.0.209 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-513=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-513=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): chromedriver-44.0.2403.89-38.1 chromedriver-debuginfo-44.0.2403.89-38.1 chromium-44.0.2403.89-38.1 chromium-debuginfo-44.0.2403.89-38.1 chromium-debugsource-44.0.2403.89-38.1 chromium-desktop-gnome-44.0.2403.89-38.1 chromium-desktop-kde-44.0.2403.89-38.1 chromium-ffmpegsumo-44.0.2403.89-38.1 chromium-ffmpegsumo-debuginfo-44.0.2403.89-38.1 - openSUSE 13.1 (i586 x86_64): chromedriver-44.0.2403.89-93.1 chromedriver-debuginfo-44.0.2403.89-93.1 chromium-44.0.2403.89-93.1 chromium-debuginfo-44.0.2403.89-93.1 chromium-debugsource-44.0.2403.89-93.1 chromium-desktop-gnome-44.0.2403.89-93.1 chromium-desktop-kde-44.0.2403.89-93.1 chromium-ffmpegsumo-44.0.2403.89-93.1 chromium-ffmpegsumo-debuginfo-44.0.2403.89-93.1 References: https://www.suse.com/security/cve/CVE-2015-1270.html https://www.suse.com/security/cve/CVE-2015-1271.html https://www.suse.com/security/cve/CVE-2015-1272.html https://www.suse.com/security/cve/CVE-2015-1273.html https://www.suse.com/security/cve/CVE-2015-1274.html https://www.suse.com/security/cve/CVE-2015-1275.html https://www.suse.com/security/cve/CVE-2015-1276.html https://www.suse.com/security/cve/CVE-2015-1277.html https://www.suse.com/security/cve/CVE-2015-1278.html https://www.suse.com/security/cve/CVE-2015-1279.html https://www.suse.com/security/cve/CVE-2015-1280.html https://www.suse.com/security/cve/CVE-2015-1281.html https://www.suse.com/security/cve/CVE-2015-1282.html https://www.suse.com/security/cve/CVE-2015-1283.html https://www.suse.com/security/cve/CVE-2015-1284.html https://www.suse.com/security/cve/CVE-2015-1285.html https://www.suse.com/security/cve/CVE-2015-1286.html https://www.suse.com/security/cve/CVE-2015-1287.html https://www.suse.com/security/cve/CVE-2015-1288.html https://www.suse.com/security/cve/CVE-2015-1289.html https://www.suse.com/security/cve/CVE-2015-5605.html https://bugzilla.suse.com/939077

1 0

openSUSE-RU-2015:1286-1: moderate: Recommended update for mysql-community-server
by maintenance＠opensuse.org 26 Jul '15

26 Jul '15

openSUSE Recommended Update: Recommended update for mysql-community-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1286-1 Rating: moderate References: #937754 #937767 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for mysql-community-server provides the following fixes: - Update syntax of systemd helper (boo#937767) - Create correct symlinks for libmysqlclient_r18 (boo#937754) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-509=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-509=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libmysql56client18-5.6.25-2.6.2 libmysql56client18-debuginfo-5.6.25-2.6.2 libmysql56client_r18-5.6.25-2.6.2 mysql-community-server-5.6.25-2.6.2 mysql-community-server-bench-5.6.25-2.6.2 mysql-community-server-bench-debuginfo-5.6.25-2.6.2 mysql-community-server-client-5.6.25-2.6.2 mysql-community-server-client-debuginfo-5.6.25-2.6.2 mysql-community-server-debuginfo-5.6.25-2.6.2 mysql-community-server-debugsource-5.6.25-2.6.2 mysql-community-server-errormessages-5.6.25-2.6.2 mysql-community-server-test-5.6.25-2.6.2 mysql-community-server-test-debuginfo-5.6.25-2.6.2 mysql-community-server-tools-5.6.25-2.6.2 mysql-community-server-tools-debuginfo-5.6.25-2.6.2 - openSUSE 13.2 (x86_64): libmysql56client18-32bit-5.6.25-2.6.2 libmysql56client18-debuginfo-32bit-5.6.25-2.6.2 libmysql56client_r18-32bit-5.6.25-2.6.2 - openSUSE 13.1 (i586 x86_64): libmysql56client18-5.6.25-7.7.2 libmysql56client18-debuginfo-5.6.25-7.7.2 libmysql56client_r18-5.6.25-7.7.2 mysql-community-server-5.6.25-7.7.2 mysql-community-server-bench-5.6.25-7.7.2 mysql-community-server-bench-debuginfo-5.6.25-7.7.2 mysql-community-server-client-5.6.25-7.7.2 mysql-community-server-client-debuginfo-5.6.25-7.7.2 mysql-community-server-debuginfo-5.6.25-7.7.2 mysql-community-server-debugsource-5.6.25-7.7.2 mysql-community-server-errormessages-5.6.25-7.7.2 mysql-community-server-test-5.6.25-7.7.2 mysql-community-server-test-debuginfo-5.6.25-7.7.2 mysql-community-server-tools-5.6.25-7.7.2 mysql-community-server-tools-debuginfo-5.6.25-7.7.2 - openSUSE 13.1 (x86_64): libmysql56client18-32bit-5.6.25-7.7.2 libmysql56client18-debuginfo-32bit-5.6.25-7.7.2 libmysql56client_r18-32bit-5.6.25-7.7.2 References: https://bugzilla.suse.com/937754 https://bugzilla.suse.com/937767

1 0

openSUSE-SU-2015:1285-1: moderate: Security update for cacti
by opensuse-security＠opensuse.org 26 Jul '15

26 Jul '15

openSUSE Security Update: Security update for cacti ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1285-1 Rating: moderate References: #937997 Cross-References: CVE-2015-4634 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Cacti was updated to 0.8.8e to fix several security issues. The following vulnerabilities were fixed: * Multiple XSS and SQL injection vulnerabilities [boo#937997] * CVE-2015-4634: SQL injection in graphs.php [boo#937997] In addition, this update contains upstream bug fixes. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-510=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-510=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): cacti-0.8.8e-4.10.1 - openSUSE 13.1 (noarch): cacti-0.8.8e-14.1 References: https://www.suse.com/security/cve/CVE-2015-4634.html https://bugzilla.suse.com/937997

1 0

openSUSE-SU-2015:1280-1: moderate: Security update for ansible
by opensuse-security＠opensuse.org 22 Jul '15

22 Jul '15

openSUSE Security Update: Security update for ansible ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1280-1 Rating: moderate References: #938161 Cross-References: CVE-2015-3908 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: ansible was updated to fix one security issue. This security issue was fixed: - CVE-2015-3908: Fixed improper TLS Certificate Validation (bsc#938161). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-508=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): ansible-1.7.1-2.5.1 References: https://www.suse.com/security/cve/CVE-2015-3908.html https://bugzilla.suse.com/938161

1 0

openSUSE-SU-2015:1279-1: moderate: Security update for rubygem-activesupport-3_2
by opensuse-security＠opensuse.org 22 Jul '15

22 Jul '15

openSUSE Security Update: Security update for rubygem-activesupport-3_2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1279-1 Rating: moderate References: #934800 Cross-References: CVE-2015-3227 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: rubygem-activesupport-3_2 was updated to fix one security issue. This security issue was fixed: - CVE-2015-3227: Possible Denial of Service attack in Active Support (bsc#934800). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-506=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-506=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): rubygem-activesupport-3_2-3.2.17-2.3.1 rubygem-activesupport-3_2-doc-3.2.17-2.3.1 - openSUSE 13.1 (i586 x86_64): rubygem-activesupport-3_2-3.2.13-3.17.1 rubygem-activesupport-3_2-doc-3.2.13-3.17.1 References: https://www.suse.com/security/cve/CVE-2015-3227.html https://bugzilla.suse.com/934800

1 0

openSUSE-SU-2015:1278-1: moderate: Security update for pdns, pdns-recursor
by opensuse-security＠opensuse.org 22 Jul '15

22 Jul '15

openSUSE Security Update: Security update for pdns, pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1278-1 Rating: moderate References: #927569 Cross-References: CVE-2015-1868 CVE-2015-5470 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: pdns, pdns-recursor were updated to fix two security issues. These security issues were fixed: - CVE-2015-1868: The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allowed remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself (bsc#927569). - CVE-2015-5470: Complete fix for CVE-2015-1868 (bsc#927569). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-505=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-505=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): pdns-3.3.1-2.3.1 pdns-backend-ldap-3.3.1-2.3.1 pdns-backend-ldap-debuginfo-3.3.1-2.3.1 pdns-backend-lua-3.3.1-2.3.1 pdns-backend-lua-debuginfo-3.3.1-2.3.1 pdns-backend-mydns-3.3.1-2.3.1 pdns-backend-mydns-debuginfo-3.3.1-2.3.1 pdns-backend-mysql-3.3.1-2.3.1 pdns-backend-mysql-debuginfo-3.3.1-2.3.1 pdns-backend-postgresql-3.3.1-2.3.1 pdns-backend-postgresql-debuginfo-3.3.1-2.3.1 pdns-backend-sqlite3-3.3.1-2.3.1 pdns-backend-sqlite3-debuginfo-3.3.1-2.3.1 pdns-debuginfo-3.3.1-2.3.1 pdns-debugsource-3.3.1-2.3.1 - openSUSE 13.1 (i586 x86_64): pdns-recursor-3.6.2-8.7.1 pdns-recursor-debuginfo-3.6.2-8.7.1 pdns-recursor-debugsource-3.6.2-8.7.1 References: https://www.suse.com/security/cve/CVE-2015-1868.html https://www.suse.com/security/cve/CVE-2015-5470.html https://bugzilla.suse.com/927569

1 0

openSUSE-SU-2015:1277-1: important: Security update for libressl
by opensuse-security＠opensuse.org 22 Jul '15

22 Jul '15

openSUSE Security Update: Security update for libressl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1277-1 Rating: important References: #912015 #912018 #912292 #912293 #912296 #919648 #920236 #922496 #922499 #922500 #931600 #934487 #934489 #934491 #934493 #934494 #937891 Cross-References: CVE-2014-3570 CVE-2014-3572 CVE-2014-8176 CVE-2014-8275 CVE-2015-0205 CVE-2015-0206 CVE-2015-0209 CVE-2015-0286 CVE-2015-0287 CVE-2015-0288 CVE-2015-0289 CVE-2015-1788 CVE-2015-1789 CVE-2015-1790 CVE-2015-1792 CVE-2015-4000 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves 16 vulnerabilities and has one errata is now available. Description: libressl was updated to version 2.2.1 to fix 16 security issues. LibreSSL is a fork of OpenSSL. Because of that CVEs affecting OpenSSL often also affect LibreSSL. These security issues were fixed: - CVE-2014-3570: The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k did not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c (bsc#912296). - CVE-2014-3572: The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allowed remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message (bsc#912015). - CVE-2015-1792: The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allowed remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function (bsc#934493). - CVE-2014-8275: OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k did not enforce certain constraints on certificate data, which allowed remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism by including crafted data within a certificate's unsigned portion, related to crypto/asn1/a_verify.c, crypto/dsa/dsa_asn1.c, crypto/ecdsa/ecs_vrf.c, and crypto/x509/x_all.c (bsc#912018). - CVE-2015-0209: Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allowed remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import (bsc#919648). - CVE-2015-1789: The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allowed remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in ASN1_TIME data, as demonstrated by an attack against a server that supports client authentication with a custom verification callback (bsc#934489). - CVE-2015-1788: The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b did not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allowed remote attackers to cause a denial of service (infinite loop) via a session that used an Elliptic Curve algorithm, as demonstrated by an attack against a server that supports client authentication (bsc#934487). - CVE-2015-1790: The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allowed remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PKCS#7 blob that used ASN.1 encoding and lacks inner EncryptedContent data (bsc#934491). - CVE-2015-0287: The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a did not reinitialize CHOICE and ADB data structures, which might allowed attackers to cause a denial of service (invalid write operation and memory corruption) by leveraging an application that relies on ASN.1 structure reuse (bsc#922499). - CVE-2015-0286: The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a did not properly perform boolean-type comparisons, which allowed remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted X.509 certificate to an endpoint that used the certificate-verification feature (bsc#922496). - CVE-2015-0289: The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a did not properly handle a lack of outer ContentInfo, which allowed attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c (bsc#922500). - CVE-2015-0288: The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allowed attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key (bsc#920236). - CVE-2014-8176: The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allowed remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data (bsc#934494). - CVE-2015-4000: The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, did not properly convey a DHE_EXPORT choice, which allowed man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue (bsc#931600). - CVE-2015-0205: The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a CertificateVerify message, which allowed remote attackers to obtain access without knowledge of a private key via crafted TLS Handshake Protocol traffic to a server that recognizes a Certification Authority with DH support (bsc#912293). - CVE-2015-0206: Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allowed remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay detection (bsc#912292). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-507=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libcrypto34-2.2.1-2.3.1 libcrypto34-debuginfo-2.2.1-2.3.1 libressl-2.2.1-2.3.1 libressl-debuginfo-2.2.1-2.3.1 libressl-debugsource-2.2.1-2.3.1 libressl-devel-2.2.1-2.3.1 libssl33-2.2.1-2.3.1 libssl33-debuginfo-2.2.1-2.3.1 libtls4-2.2.1-2.3.1 libtls4-debuginfo-2.2.1-2.3.1 - openSUSE 13.2 (x86_64): libcrypto34-32bit-2.2.1-2.3.1 libcrypto34-debuginfo-32bit-2.2.1-2.3.1 libressl-devel-32bit-2.2.1-2.3.1 libssl33-32bit-2.2.1-2.3.1 libssl33-debuginfo-32bit-2.2.1-2.3.1 libtls4-32bit-2.2.1-2.3.1 libtls4-debuginfo-32bit-2.2.1-2.3.1 - openSUSE 13.2 (noarch): libressl-devel-doc-2.2.1-2.3.1 References: https://www.suse.com/security/cve/CVE-2014-3570.html https://www.suse.com/security/cve/CVE-2014-3572.html https://www.suse.com/security/cve/CVE-2014-8176.html https://www.suse.com/security/cve/CVE-2014-8275.html https://www.suse.com/security/cve/CVE-2015-0205.html https://www.suse.com/security/cve/CVE-2015-0206.html https://www.suse.com/security/cve/CVE-2015-0209.html https://www.suse.com/security/cve/CVE-2015-0286.html https://www.suse.com/security/cve/CVE-2015-0287.html https://www.suse.com/security/cve/CVE-2015-0288.html https://www.suse.com/security/cve/CVE-2015-0289.html https://www.suse.com/security/cve/CVE-2015-1788.html https://www.suse.com/security/cve/CVE-2015-1789.html https://www.suse.com/security/cve/CVE-2015-1790.html https://www.suse.com/security/cve/CVE-2015-1792.html https://www.suse.com/security/cve/CVE-2015-4000.html https://bugzilla.suse.com/912015 https://bugzilla.suse.com/912018 https://bugzilla.suse.com/912292 https://bugzilla.suse.com/912293 https://bugzilla.suse.com/912296 https://bugzilla.suse.com/919648 https://bugzilla.suse.com/920236 https://bugzilla.suse.com/922496 https://bugzilla.suse.com/922499 https://bugzilla.suse.com/922500 https://bugzilla.suse.com/931600 https://bugzilla.suse.com/934487 https://bugzilla.suse.com/934489 https://bugzilla.suse.com/934491 https://bugzilla.suse.com/934493 https://bugzilla.suse.com/934494 https://bugzilla.suse.com/937891

1 0

openSUSE-SU-2015:1271-1: moderate: Security update for libcryptopp
by opensuse-security＠opensuse.org 20 Jul '15

20 Jul '15

openSUSE Security Update: Security update for libcryptopp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1271-1 Rating: moderate References: #936435 Cross-References: CVE-2015-2141 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: libcryptopp was updated to fix one security issue. This security issue was fixed: - CVE-2015-2141: The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 did not properly blind private key operations for the Rabin-Williams digital signature algorithm, which allowed remote attackers to obtain private keys via a timing attack (bsc#936435). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-504=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-504=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libcryptopp-5_6_2-0-5.6.2-7.4.1 libcryptopp-5_6_2-0-debuginfo-5.6.2-7.4.1 libcryptopp-debugsource-5.6.2-7.4.1 libcryptopp-devel-5.6.2-7.4.1 libcryptopp-devel-static-5.6.2-7.4.1 - openSUSE 13.2 (x86_64): libcryptopp-5_6_2-0-32bit-5.6.2-7.4.1 libcryptopp-5_6_2-0-debuginfo-32bit-5.6.2-7.4.1 - openSUSE 13.1 (i586 x86_64): libcryptopp-5_6_2-0-5.6.2-2.4.2 libcryptopp-5_6_2-0-debuginfo-5.6.2-2.4.2 libcryptopp-debugsource-5.6.2-2.4.2 libcryptopp-devel-5.6.2-2.4.2 libcryptopp-devel-static-5.6.2-2.4.2 - openSUSE 13.1 (x86_64): libcryptopp-5_6_2-0-32bit-5.6.2-2.4.2 libcryptopp-5_6_2-0-debuginfo-32bit-5.6.2-2.4.2 References: https://www.suse.com/security/cve/CVE-2015-2141.html https://bugzilla.suse.com/936435

1 0

openSUSE-SU-2015:1267-1: critical: flash-player
by opensuse-security＠opensuse.org 18 Jul '15

18 Jul '15

openSUSE Security Update: flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1267-1 Rating: critical References: #937752 Cross-References: CVE-2015-5122 CVE-2015-5123 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: flash-player was updated to fix two security issues. These security issues were fixed: - CVE-2015-5123: Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function (bsc#937752). - CVE-2015-5122: Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property (bsc#937752). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-502=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): flash-player-11.2.202.491-173.1 flash-player-gnome-11.2.202.491-173.1 flash-player-kde4-11.2.202.491-173.1 References: https://www.suse.com/security/cve/CVE-2015-5122.html https://www.suse.com/security/cve/CVE-2015-5123.html https://bugzilla.suse.com/937752

1 0

openSUSE-SU-2015:1266-1: important: Mozilla (Firefox/Thunderbird) updates to 31.8.0
by opensuse-security＠opensuse.org 18 Jul '15

18 Jul '15

openSUSE Security Update: Mozilla (Firefox/Thunderbird) updates to 31.8.0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1266-1 Rating: important References: #894370 #900639 #900941 #908009 #910669 #917597 #925368 #930622 #935979 Cross-References: CVE-2011-3079 CVE-2014-1553 CVE-2014-1562 CVE-2014-1563 CVE-2014-1564 CVE-2014-1565 CVE-2014-1567 CVE-2014-1574 CVE-2014-1576 CVE-2014-1577 CVE-2014-1578 CVE-2014-1581 CVE-2014-1585 CVE-2014-1586 CVE-2014-1587 CVE-2014-1590 CVE-2014-1592 CVE-2014-1593 CVE-2014-1594 CVE-2014-8634 CVE-2014-8635 CVE-2014-8638 CVE-2014-8639 CVE-2015-0801 CVE-2015-0807 CVE-2015-0813 CVE-2015-0815 CVE-2015-0816 CVE-2015-0822 CVE-2015-0827 CVE-2015-0831 CVE-2015-0833 CVE-2015-0836 CVE-2015-2708 CVE-2015-2710 CVE-2015-2713 CVE-2015-2716 CVE-2015-2721 CVE-2015-2722 CVE-2015-2724 CVE-2015-2728 CVE-2015-2730 CVE-2015-2733 CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 CVE-2015-2743 CVE-2015-4000 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes 52 vulnerabilities is now available. Description: Combined Mozilla update: - Update Firefox to 31.8.0 - Update Thunderbird to 31.8.0 - Update mozilla-nspr to 4.10.6 - Update mozilla-nss to 3.19.2 to fix several security issues. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-503=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): MozillaFirefox-31.8.0-143.1 MozillaFirefox-branding-upstream-31.8.0-143.1 MozillaFirefox-buildsymbols-31.8.0-143.1 MozillaFirefox-debuginfo-31.8.0-143.1 MozillaFirefox-debugsource-31.8.0-143.1 MozillaFirefox-devel-31.8.0-143.1 MozillaFirefox-translations-common-31.8.0-143.1 MozillaFirefox-translations-other-31.8.0-143.1 MozillaThunderbird-31.8.0-110.1 MozillaThunderbird-buildsymbols-31.8.0-110.1 MozillaThunderbird-debuginfo-31.8.0-110.1 MozillaThunderbird-debugsource-31.8.0-110.1 MozillaThunderbird-devel-31.8.0-110.1 MozillaThunderbird-translations-common-31.8.0-110.1 MozillaThunderbird-translations-other-31.8.0-110.1 libfreebl3-3.19.2-107.1 libfreebl3-debuginfo-3.19.2-107.1 libsoftokn3-3.19.2-107.1 libsoftokn3-debuginfo-3.19.2-107.1 mozilla-nspr-4.10.8-52.1 mozilla-nspr-debuginfo-4.10.8-52.1 mozilla-nspr-debugsource-4.10.8-52.1 mozilla-nspr-devel-4.10.8-52.1 mozilla-nss-3.19.2-107.1 mozilla-nss-certs-3.19.2-107.1 mozilla-nss-certs-debuginfo-3.19.2-107.1 mozilla-nss-debuginfo-3.19.2-107.1 mozilla-nss-debugsource-3.19.2-107.1 mozilla-nss-devel-3.19.2-107.1 mozilla-nss-sysinit-3.19.2-107.1 mozilla-nss-sysinit-debuginfo-3.19.2-107.1 mozilla-nss-tools-3.19.2-107.1 mozilla-nss-tools-debuginfo-3.19.2-107.1 - openSUSE Evergreen 11.4 (x86_64): libfreebl3-32bit-3.19.2-107.1 libfreebl3-debuginfo-32bit-3.19.2-107.1 libsoftokn3-32bit-3.19.2-107.1 libsoftokn3-debuginfo-32bit-3.19.2-107.1 mozilla-nspr-32bit-4.10.8-52.1 mozilla-nspr-debuginfo-32bit-4.10.8-52.1 mozilla-nss-32bit-3.19.2-107.1 mozilla-nss-certs-32bit-3.19.2-107.1 mozilla-nss-certs-debuginfo-32bit-3.19.2-107.1 mozilla-nss-debuginfo-32bit-3.19.2-107.1 mozilla-nss-sysinit-32bit-3.19.2-107.1 mozilla-nss-sysinit-debuginfo-32bit-3.19.2-107.1 - openSUSE Evergreen 11.4 (ia64): libfreebl3-debuginfo-x86-3.19.2-107.1 libfreebl3-x86-3.19.2-107.1 libsoftokn3-debuginfo-x86-3.19.2-107.1 libsoftokn3-x86-3.19.2-107.1 mozilla-nspr-debuginfo-x86-4.10.8-52.1 mozilla-nspr-x86-4.10.8-52.1 mozilla-nss-certs-debuginfo-x86-3.19.2-107.1 mozilla-nss-certs-x86-3.19.2-107.1 mozilla-nss-debuginfo-x86-3.19.2-107.1 mozilla-nss-sysinit-debuginfo-x86-3.19.2-107.1 mozilla-nss-sysinit-x86-3.19.2-107.1 mozilla-nss-x86-3.19.2-107.1 References: https://www.suse.com/security/cve/CVE-2011-3079.html https://www.suse.com/security/cve/CVE-2014-1553.html https://www.suse.com/security/cve/CVE-2014-1562.html https://www.suse.com/security/cve/CVE-2014-1563.html https://www.suse.com/security/cve/CVE-2014-1564.html https://www.suse.com/security/cve/CVE-2014-1565.html https://www.suse.com/security/cve/CVE-2014-1567.html https://www.suse.com/security/cve/CVE-2014-1574.html https://www.suse.com/security/cve/CVE-2014-1576.html https://www.suse.com/security/cve/CVE-2014-1577.html https://www.suse.com/security/cve/CVE-2014-1578.html https://www.suse.com/security/cve/CVE-2014-1581.html https://www.suse.com/security/cve/CVE-2014-1585.html https://www.suse.com/security/cve/CVE-2014-1586.html https://www.suse.com/security/cve/CVE-2014-1587.html https://www.suse.com/security/cve/CVE-2014-1590.html https://www.suse.com/security/cve/CVE-2014-1592.html https://www.suse.com/security/cve/CVE-2014-1593.html https://www.suse.com/security/cve/CVE-2014-1594.html https://www.suse.com/security/cve/CVE-2014-8634.html https://www.suse.com/security/cve/CVE-2014-8635.html https://www.suse.com/security/cve/CVE-2014-8638.html https://www.suse.com/security/cve/CVE-2014-8639.html https://www.suse.com/security/cve/CVE-2015-0801.html https://www.suse.com/security/cve/CVE-2015-0807.html https://www.suse.com/security/cve/CVE-2015-0813.html https://www.suse.com/security/cve/CVE-2015-0815.html https://www.suse.com/security/cve/CVE-2015-0816.html https://www.suse.com/security/cve/CVE-2015-0822.html https://www.suse.com/security/cve/CVE-2015-0827.html https://www.suse.com/security/cve/CVE-2015-0831.html https://www.suse.com/security/cve/CVE-2015-0833.html https://www.suse.com/security/cve/CVE-2015-0836.html https://www.suse.com/security/cve/CVE-2015-2708.html https://www.suse.com/security/cve/CVE-2015-2710.html https://www.suse.com/security/cve/CVE-2015-2713.html https://www.suse.com/security/cve/CVE-2015-2716.html https://www.suse.com/security/cve/CVE-2015-2721.html https://www.suse.com/security/cve/CVE-2015-2722.html https://www.suse.com/security/cve/CVE-2015-2724.html https://www.suse.com/security/cve/CVE-2015-2728.html https://www.suse.com/security/cve/CVE-2015-2730.html https://www.suse.com/security/cve/CVE-2015-2733.html https://www.suse.com/security/cve/CVE-2015-2734.html https://www.suse.com/security/cve/CVE-2015-2735.html https://www.suse.com/security/cve/CVE-2015-2736.html https://www.suse.com/security/cve/CVE-2015-2737.html https://www.suse.com/security/cve/CVE-2015-2738.html https://www.suse.com/security/cve/CVE-2015-2739.html https://www.suse.com/security/cve/CVE-2015-2740.html https://www.suse.com/security/cve/CVE-2015-2743.html https://www.suse.com/security/cve/CVE-2015-4000.html https://bugzilla.suse.com/894370 https://bugzilla.suse.com/900639 https://bugzilla.suse.com/900941 https://bugzilla.suse.com/908009 https://bugzilla.suse.com/910669 https://bugzilla.suse.com/917597 https://bugzilla.suse.com/925368 https://bugzilla.suse.com/930622 https://bugzilla.suse.com/935979

1 0

openSUSE-SU-2015:1263-1: moderate: Security update for rubygem-rack-1_3
by opensuse-security＠opensuse.org 17 Jul '15

17 Jul '15

openSUSE Security Update: Security update for rubygem-rack-1_3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1263-1 Rating: moderate References: #934797 Cross-References: CVE-2015-3225 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: rubygem-rack-1_3 was updated to fix one security issue. This security issue was fixed: - CVE-2015-3225: Potential Denial of Service Vulnerability in Rack (bsc#934797). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-499=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-499=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): rubygem-rack-1_3-1.3.10-5.3.1 rubygem-rack-1_3-doc-1.3.10-5.3.1 rubygem-rack-1_3-testsuite-1.3.10-5.3.1 - openSUSE 13.1 (i586 x86_64): rubygem-rack-1_3-1.3.10-3.3.1 rubygem-rack-1_3-doc-1.3.10-3.3.1 rubygem-rack-1_3-testsuite-1.3.10-3.3.1 References: https://www.suse.com/security/cve/CVE-2015-3225.html https://bugzilla.suse.com/934797

1 0

openSUSE-SU-2015:1262-1: moderate: Security update for rubygem-rack-1_4
by opensuse-security＠opensuse.org 17 Jul '15

17 Jul '15

openSUSE Security Update: Security update for rubygem-rack-1_4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1262-1 Rating: moderate References: #934797 Cross-References: CVE-2015-3225 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: rubygem-rack-1_4 was updated to fix one security issue. This security issue was fixed: - CVE-2015-3225: Potential Denial of Service Vulnerability in Rack (bsc#934797). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-500=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-500=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): rubygem-rack-1_4-1.4.5-5.3.1 rubygem-rack-1_4-doc-1.4.5-5.3.1 rubygem-rack-1_4-testsuite-1.4.5-5.3.1 - openSUSE 13.1 (i586 x86_64): rubygem-rack-1_4-1.4.5-3.3.1 rubygem-rack-1_4-doc-1.4.5-3.3.1 rubygem-rack-1_4-testsuite-1.4.5-3.3.1 References: https://www.suse.com/security/cve/CVE-2015-3225.html https://bugzilla.suse.com/934797

1 0

openSUSE-SU-2015:1261-1: moderate: Security update for libidn
by opensuse-security＠opensuse.org 17 Jul '15

17 Jul '15

openSUSE Security Update: Security update for libidn ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1261-1 Rating: moderate References: #923241 Cross-References: CVE-2015-2059 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: libidn was updated to version 1.31 to fix one security issue. This security issue was fixed: - CVE-2015-2059: Out-of-bounds read with stringprep on invalid UTF-8 (bsc#923241). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-497=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-497=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libidn-debugsource-1.31-3.3.1 libidn-devel-1.31-3.3.1 libidn-tools-1.31-3.3.1 libidn-tools-debuginfo-1.31-3.3.1 libidn11-1.31-3.3.1 libidn11-debuginfo-1.31-3.3.1 - openSUSE 13.2 (x86_64): libidn11-32bit-1.31-3.3.1 libidn11-debuginfo-32bit-1.31-3.3.1 - openSUSE 13.1 (i586 x86_64): libidn-debugsource-1.31-7.3.1 libidn-devel-1.31-7.3.1 libidn-tools-1.31-7.3.1 libidn-tools-debuginfo-1.31-7.3.1 libidn11-1.31-7.3.1 libidn11-debuginfo-1.31-7.3.1 - openSUSE 13.1 (x86_64): libidn11-32bit-1.31-7.3.1 libidn11-debuginfo-32bit-1.31-7.3.1 References: https://www.suse.com/security/cve/CVE-2015-2059.html https://bugzilla.suse.com/923241

1 0

openSUSE-SU-2015:1260-1: moderate: Security update for rubygem-jquery-rails
by opensuse-security＠opensuse.org 17 Jul '15

17 Jul '15

openSUSE Security Update: Security update for rubygem-jquery-rails ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1260-1 Rating: moderate References: #934795 Cross-References: CVE-2015-1840 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: rubygem-jquery-rails was updated to fix one security issue. This security issue was fixed: - CVE-2015-1840: CSRF Vulnerability in jquery-ujs and jquery-rails (bsc#934795). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-501=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-501=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): rubygem-jquery-rails-3.1.1-2.3.1 rubygem-jquery-rails-doc-3.1.1-2.3.1 - openSUSE 13.1 (i586 x86_64): rubygem-jquery-rails-3.0.4-2.3.1 rubygem-jquery-rails-doc-3.0.4-2.3.1 References: https://www.suse.com/security/cve/CVE-2015-1840.html https://bugzilla.suse.com/934795

1 0

openSUSE-SU-2015:1259-1: moderate: Security update for rubygem-rack
by opensuse-security＠opensuse.org 17 Jul '15

17 Jul '15

openSUSE Security Update: Security update for rubygem-rack ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1259-1 Rating: moderate References: #934797 Cross-References: CVE-2015-3225 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: rubygem-rack was updated to fix one security issue. This security issue was fixed: - CVE-2015-3225: Potential Denial of Service Vulnerability in Rack (bsc#934797). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-498=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-498=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): rubygem-rack-1.5.2-4.3.1 rubygem-rack-doc-1.5.2-4.3.1 rubygem-rack-testsuite-1.5.2-4.3.1 - openSUSE 13.1 (i586 x86_64): rubygem-rack-1.5.2-2.3.1 rubygem-rack-doc-1.5.2-2.3.1 rubygem-rack-testsuite-1.5.2-2.3.1 References: https://www.suse.com/security/cve/CVE-2015-3225.html https://bugzilla.suse.com/934797

1 0

openSUSE-SU-2015:1250-2: moderate: Security update for bind
by opensuse-security＠opensuse.org 16 Jul '15

16 Jul '15

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1250-2 Rating: moderate References: #908994 #918330 #936476 #937028 Cross-References: CVE-2014-8500 CVE-2015-1349 CVE-2015-4620 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: bind was updated to fix three security issues. These security issues were fixed: - CVE-2015-1349: named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allowed remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an incorrect trust-anchor management scenario in which no key is ready for use (bsc#918330). - CVE-2014-8500: ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 did not limit delegation chaining, which allowed remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals (bsc#908994). - CVE-2015-4620: Resolver crash when validating (bsc#936476). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-494=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): bind-9.9.4P2-2.11.1 bind-chrootenv-9.9.4P2-2.11.1 bind-debuginfo-9.9.4P2-2.11.1 bind-debugsource-9.9.4P2-2.11.1 bind-devel-9.9.4P2-2.11.1 bind-libs-9.9.4P2-2.11.1 bind-libs-debuginfo-9.9.4P2-2.11.1 bind-lwresd-9.9.4P2-2.11.1 bind-lwresd-debuginfo-9.9.4P2-2.11.1 bind-utils-9.9.4P2-2.11.1 bind-utils-debuginfo-9.9.4P2-2.11.1 - openSUSE 13.1 (x86_64): bind-libs-32bit-9.9.4P2-2.11.1 bind-libs-debuginfo-32bit-9.9.4P2-2.11.1 - openSUSE 13.1 (noarch): bind-doc-9.9.4P2-2.11.1 References: https://www.suse.com/security/cve/CVE-2014-8500.html https://www.suse.com/security/cve/CVE-2015-1349.html https://www.suse.com/security/cve/CVE-2015-4620.html https://bugzilla.suse.com/908994 https://bugzilla.suse.com/918330 https://bugzilla.suse.com/936476 https://bugzilla.suse.com/937028

1 0

openSUSE-SU-2015:1250-1: moderate: Security update for bind
by opensuse-security＠opensuse.org 16 Jul '15

16 Jul '15

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1250-1 Rating: moderate References: #908994 #918330 #936476 #937028 Cross-References: CVE-2014-8500 CVE-2015-1349 CVE-2015-4620 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: bind was updated to fix three security issues. These security issues were fixed: - CVE-2015-1349: named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allowed remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an incorrect trust-anchor management scenario in which no key is ready for use (bsc#918330). - CVE-2014-8500: ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 did not limit delegation chaining, which allowed remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals (bsc#908994). - CVE-2015-4620: Resolver crash when validating (bsc#936476). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-494=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): bind-9.9.6P1-2.4.1 bind-chrootenv-9.9.6P1-2.4.1 bind-debuginfo-9.9.6P1-2.4.1 bind-debugsource-9.9.6P1-2.4.1 bind-devel-9.9.6P1-2.4.1 bind-libs-9.9.6P1-2.4.1 bind-libs-debuginfo-9.9.6P1-2.4.1 bind-lwresd-9.9.6P1-2.4.1 bind-lwresd-debuginfo-9.9.6P1-2.4.1 bind-utils-9.9.6P1-2.4.1 bind-utils-debuginfo-9.9.6P1-2.4.1 - openSUSE 13.2 (x86_64): bind-libs-32bit-9.9.6P1-2.4.1 bind-libs-debuginfo-32bit-9.9.6P1-2.4.1 - openSUSE 13.2 (noarch): bind-doc-9.9.6P1-2.4.1 References: https://www.suse.com/security/cve/CVE-2014-8500.html https://www.suse.com/security/cve/CVE-2015-1349.html https://www.suse.com/security/cve/CVE-2015-4620.html https://bugzilla.suse.com/908994 https://bugzilla.suse.com/918330 https://bugzilla.suse.com/936476 https://bugzilla.suse.com/937028

1 0

openSUSE-RU-2015:1247-2: important: Recommended update for MariaDB
by maintenance＠opensuse.org 14 Jul '15

14 Jul '15

openSUSE Recommended Update: Recommended update for MariaDB ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1247-2 Rating: important References: #937630 #937754 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: MariaDB was updated to fix two bugs. * boo#937630: A regression from a previous security update caused the resolvable mysql-devel to be no longer provided even though used by some packages. * boo#937754: Correct symbolic links of libmysqlclient_r18 package Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-493=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libmysqlclient-devel-10.0.20-2.12.1 libmysqlclient18-10.0.20-2.12.1 libmysqlclient18-debuginfo-10.0.20-2.12.1 libmysqlclient_r18-10.0.20-2.12.1 libmysqld-devel-10.0.20-2.12.1 libmysqld18-10.0.20-2.12.1 libmysqld18-debuginfo-10.0.20-2.12.1 mariadb-10.0.20-2.12.1 mariadb-bench-10.0.20-2.12.1 mariadb-bench-debuginfo-10.0.20-2.12.1 mariadb-client-10.0.20-2.12.1 mariadb-client-debuginfo-10.0.20-2.12.1 mariadb-debuginfo-10.0.20-2.12.1 mariadb-debugsource-10.0.20-2.12.1 mariadb-errormessages-10.0.20-2.12.1 mariadb-test-10.0.20-2.12.1 mariadb-test-debuginfo-10.0.20-2.12.1 mariadb-tools-10.0.20-2.12.1 mariadb-tools-debuginfo-10.0.20-2.12.1 - openSUSE 13.2 (x86_64): libmysqlclient18-32bit-10.0.20-2.12.1 libmysqlclient18-debuginfo-32bit-10.0.20-2.12.1 libmysqlclient_r18-32bit-10.0.20-2.12.1 References: https://bugzilla.suse.com/937630 https://bugzilla.suse.com/937754

1 0

openSUSE-RU-2015:1247-1: important: Recommended update for MariaDB
by maintenance＠opensuse.org 14 Jul '15

14 Jul '15

openSUSE Recommended Update: Recommended update for MariaDB ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1247-1 Rating: important References: #937630 #937754 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: MariaDB was updated to fix two bugs. * boo#937630: A regression from a previous security update caused the resolvable mysql-devel to be no longer provided even though used by some packages. * boo#937754: Correct symbolic links of libmysqlclient_r18 package Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-493=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libmysqlclient-devel-5.5.44-7.2 libmysqlclient18-5.5.44-7.2 libmysqlclient18-debuginfo-5.5.44-7.2 libmysqlclient_r18-5.5.44-7.2 libmysqld-devel-5.5.44-7.2 libmysqld18-5.5.44-7.2 libmysqld18-debuginfo-5.5.44-7.2 mariadb-5.5.44-7.2 mariadb-bench-5.5.44-7.2 mariadb-bench-debuginfo-5.5.44-7.2 mariadb-client-5.5.44-7.2 mariadb-client-debuginfo-5.5.44-7.2 mariadb-debuginfo-5.5.44-7.2 mariadb-debugsource-5.5.44-7.2 mariadb-errormessages-5.5.44-7.2 mariadb-test-5.5.44-7.2 mariadb-test-debuginfo-5.5.44-7.2 mariadb-tools-5.5.44-7.2 mariadb-tools-debuginfo-5.5.44-7.2 - openSUSE 13.1 (x86_64): libmysqlclient18-32bit-5.5.44-7.2 libmysqlclient18-debuginfo-32bit-5.5.44-7.2 libmysqlclient_r18-32bit-5.5.44-7.2 References: https://bugzilla.suse.com/937630 https://bugzilla.suse.com/937754

1 0

openSUSE-SU-2015:1245-2: Security update for libunwind
by opensuse-security＠opensuse.org 14 Jul '15

14 Jul '15

openSUSE Security Update: Security update for libunwind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1245-2 Rating: low References: #936786 Cross-References: CVE-2015-3239 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: libunwind was updated to fix one security issue. This security issue was fixed: - CVE-2015-3239: Off-by-one in dwarf_to_unw_regnum() (bsc#936786). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-491=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libunwind-1.1-6.3.1 libunwind-debuginfo-1.1-6.3.1 libunwind-debugsource-1.1-6.3.1 libunwind-devel-1.1-6.3.1 - openSUSE 13.1 (x86_64): libunwind-32bit-1.1-6.3.1 libunwind-debuginfo-32bit-1.1-6.3.1 References: https://www.suse.com/security/cve/CVE-2015-3239.html https://bugzilla.suse.com/936786

1 0

openSUSE-SU-2015:1245-1: Security update for libunwind
by opensuse-security＠opensuse.org 14 Jul '15

14 Jul '15

openSUSE Security Update: Security update for libunwind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1245-1 Rating: low References: #936786 Cross-References: CVE-2015-3239 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: libunwind was updated to fix one security issue. This security issue was fixed: - CVE-2015-3239: Off-by-one in dwarf_to_unw_regnum() (bsc#936786). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-491=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libunwind-1.1-10.3.1 libunwind-debuginfo-1.1-10.3.1 libunwind-debugsource-1.1-10.3.1 libunwind-devel-1.1-10.3.1 - openSUSE 13.2 (x86_64): libunwind-32bit-1.1-10.3.1 libunwind-debuginfo-32bit-1.1-10.3.1 References: https://www.suse.com/security/cve/CVE-2015-3239.html https://bugzilla.suse.com/936786

1 0

openSUSE-SU-2015:1244-1: moderate: Security update for cups-filters
by opensuse-security＠opensuse.org 14 Jul '15

14 Jul '15

openSUSE Security Update: Security update for cups-filters ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1244-1 Rating: moderate References: #921753 #936281 #937018 Cross-References: CVE-2015-2265 CVE-2015-3258 CVE-2015-3279 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: cups-filters was updated to fix three security issues. These security issues were fixed: - CVE-2015-2265: The remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allowed remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the (1) model or (2) PDL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707 (bsc#921753). - CVE-2015-3279: Texttopdf integer overflow (incomplete fix for CVE-2015-3258) (bsc#937018). - CVE-2015-3258: Texttopdf heap-based buffer overflow (bsc#936281). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-492=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): cups-filters-1.0.58-2.7.1 cups-filters-cups-browsed-1.0.58-2.7.1 cups-filters-cups-browsed-debuginfo-1.0.58-2.7.1 cups-filters-debuginfo-1.0.58-2.7.1 cups-filters-debugsource-1.0.58-2.7.1 cups-filters-devel-1.0.58-2.7.1 cups-filters-foomatic-rip-1.0.58-2.7.1 cups-filters-foomatic-rip-debuginfo-1.0.58-2.7.1 cups-filters-ghostscript-1.0.58-2.7.1 cups-filters-ghostscript-debuginfo-1.0.58-2.7.1 References: https://www.suse.com/security/cve/CVE-2015-2265.html https://www.suse.com/security/cve/CVE-2015-3258.html https://www.suse.com/security/cve/CVE-2015-3279.html https://bugzilla.suse.com/921753 https://bugzilla.suse.com/936281 https://bugzilla.suse.com/937018

1 0

openSUSE-SU-2015:1240-1: Security update for roundcubemail
by opensuse-security＠opensuse.org 14 Jul '15

14 Jul '15

openSUSE Security Update: Security update for roundcubemail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1240-1 Rating: low References: Cross-References: CVE-2015-2180 CVE-2015-2181 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: roundcubemail was updated to version 1.0.6 to fix many minor bugs and three security issues. The following vulnerabilities were fixed: * CVE-2015-2180: security improvement in DBMail driver of password plugin (shell execution) * CVE-2015-2181: security improvement in DBMail driver of password plugin (multiple buffer overflows) * security improvement in contact photo handling Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-490=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): roundcubemail-1.0.6-2.21.1 References: https://www.suse.com/security/cve/CVE-2015-2180.html https://www.suse.com/security/cve/CVE-2015-2181.html

1 0

openSUSE-RU-2015:1238-1: moderate: Recommended update for akonadi-runtime
by maintenance＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Recommended Update: Recommended update for akonadi-runtime ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1238-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for akonadi-runtime fixes the following issues: - do not leak external payload files, fixes disk usage of akonadi file_db_data (kde#341884) - Package sqldrivers depending on its availibility instead of a given suse_version number Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-482=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): akonadi-runtime-1.13.0-2.4.1 akonadi-runtime-debuginfo-1.13.0-2.4.1 akonadi-runtime-debugsource-1.13.0-2.4.1 libakonadiprotocolinternals-devel-1.13.0-2.4.1 libakonadiprotocolinternals1-1.13.0-2.4.1 libakonadiprotocolinternals1-debuginfo-1.13.0-2.4.1 - openSUSE 13.2 (x86_64): libakonadiprotocolinternals1-32bit-1.13.0-2.4.1 libakonadiprotocolinternals1-debuginfo-32bit-1.13.0-2.4.1 References:

1 0

openSUSE-RU-2015:1237-1: moderate: Recommended update for openvpn
by maintenance＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Recommended Update: Recommended update for openvpn ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1237-1 Rating: moderate References: #914166 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: OpenVPN received various bugfixes. - Fixed to use correct sha digest data length and in fips mode, use aes instead of the disallowed blowfish crypto (boo#914166). - Fixed to mention actual plugin/doc dirs in openvpn(8) man page. - Depend on systemd-devel for the daemon check functionality, Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-488=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): openvpn-2.3.4-2.7.1 openvpn-auth-pam-plugin-2.3.4-2.7.1 openvpn-auth-pam-plugin-debuginfo-2.3.4-2.7.1 openvpn-debuginfo-2.3.4-2.7.1 openvpn-debugsource-2.3.4-2.7.1 openvpn-down-root-plugin-2.3.4-2.7.1 openvpn-down-root-plugin-debuginfo-2.3.4-2.7.1 References: https://bugzilla.suse.com/914166

1 0

openSUSE-RU-2015:1236-1: Recommended update for osc
by maintenance＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Recommended Update: Recommended update for osc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1236-1 Rating: low References: Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: The Open Build Service Commander osc was updated to 0.152.0, The following changes are included: * add support searching for groups via "group:" prefix * show possible used incident projects on "maintained" command To support OBS 2.7 the following changes are included: * support buildtime source services * support maintenance_incident requests with acceptinfo data * support maintenance_release requests with acceptinfo data Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-486=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-486=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): osc-0.152.0-14.1 - openSUSE 13.1 (noarch): osc-0.152.0-2.30.1 References:

1 0

openSUSE-RU-2015:1235-1: moderate: Recommended update for kdesvn
by maintenance＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Recommended Update: Recommended update for kdesvn ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1235-1 Rating: moderate References: #931401 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: kdesvn was updated to fix a crash when getting logs with the current subversion (boo#931401, kde#325074, kde#330624) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-485=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-485=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): kdesvn-1.6.0-8.3.1 kdesvn-debuginfo-1.6.0-8.3.1 kdesvn-debugsource-1.6.0-8.3.1 libsvnqt-devel-1.6.0-8.3.1 libsvnqt7-1.6.0-8.3.1 libsvnqt7-debuginfo-1.6.0-8.3.1 - openSUSE 13.1 (i586 x86_64): kdesvn-1.6.0-5.3.1 kdesvn-debuginfo-1.6.0-5.3.1 kdesvn-debugsource-1.6.0-5.3.1 libsvnqt-devel-1.6.0-5.3.1 libsvnqt7-1.6.0-5.3.1 libsvnqt7-debuginfo-1.6.0-5.3.1 References: https://bugzilla.suse.com/931401

1 0

openSUSE-RU-2015:1234-1: moderate: Recommended update for virt-manager
by maintenance＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Recommended Update: Recommended update for virt-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1234-1 Rating: moderate References: #909602 #910929 #933242 #934270 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: virt-manager was updated to fix several bugs: - bnc#934270 - virt-convert could not handle .ova files. - bsc#933242 - summary=Error launching manager: list index out of range . - bnc#910929 - Unable to clone a qcow2 guest. - bsc#909602 - virt-manager did not show text console for container when started from details page. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-487=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): virt-install-1.0.1-14.14.1 virt-manager-1.0.1-14.14.1 virt-manager-common-1.0.1-14.14.1 References: https://bugzilla.suse.com/909602 https://bugzilla.suse.com/910929 https://bugzilla.suse.com/933242 https://bugzilla.suse.com/934270

1 0

openSUSE-RU-2015:1233-1: moderate: Recommended update for gtk-vnc, gtk-vnc2
by maintenance＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Recommended Update: Recommended update for gtk-vnc, gtk-vnc2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1233-1 Rating: moderate References: #936312 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The GTK VNC viewer was updated to allow virtual manager to be able to drop out of fullscreen mode (bsc#936312) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-489=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gtk-vnc-debugsource-0.5.3-2.3.1 gtk-vnc-devel-0.5.3-2.3.1 gtk-vnc-tools-0.5.3-2.3.1 gtk-vnc-tools-debuginfo-0.5.3-2.3.1 gtk-vnc2-debugsource-0.5.3-2.3.1 gtk-vnc2-devel-0.5.3-2.3.1 libgtk-vnc-1_0-0-0.5.3-2.3.1 libgtk-vnc-1_0-0-debuginfo-0.5.3-2.3.1 libgtk-vnc-2_0-0-0.5.3-2.3.1 libgtk-vnc-2_0-0-debuginfo-0.5.3-2.3.1 libgvnc-1_0-0-0.5.3-2.3.1 libgvnc-1_0-0-debuginfo-0.5.3-2.3.1 libgvncpulse-1_0-0-0.5.3-2.3.1 libgvncpulse-1_0-0-debuginfo-0.5.3-2.3.1 python-gtk-vnc-0.5.3-2.3.1 python-gtk-vnc-debuginfo-0.5.3-2.3.1 typelib-1_0-GVnc-1_0-0.5.3-2.3.1 typelib-1_0-GVncPulse-1_0-0.5.3-2.3.1 typelib-1_0-GtkVnc-1_0-0.5.3-2.3.1 typelib-1_0-GtkVnc-2_0-0.5.3-2.3.1 - openSUSE 13.2 (noarch): gtk-vnc-lang-0.5.3-2.3.1 References: https://bugzilla.suse.com/936312

1 0

openSUSE-RU-2015:1232-1: moderate: Recommended update for wicked
by maintenance＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Recommended Update: Recommended update for wicked ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1232-1 Rating: moderate References: #903759 #911310 #915025 #916402 #918069 #919573 #927615 #931288 #934067 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: wicked was updated to version 0.6.19, bringing several changes and bugfixes: - dhcp4: improve invalid dhcp options handling (boo#918069) - dhcp6: just drop an info lease on release request and stop - dhcp6: refresh ipv6 link on newprefix in auto mode to workaround, that the kernel does not send us events about mode change when RA timers are unspecified (bsc#934067) - ethtool: do not warn when reading ethtool settings while netlink newlink processing and the device is already gone. - ibft: ignore invalid default gateway (0.0.0.0 and ::) provided by the firmware (bsc#903759) - wireless: handle ANY for WPA-EAP methods and send passwd when phase2 method isn't set (boo#927615) - bonding: don't insist, that arp_validate=none default is valid in active-backup mode only (boo#919573) - wickedd: fix to send requested device-up event ack - nanny: fix error handling for NULL policy objects and fix to not compare iftype to a dbus class name (boo#931288) - nanny: ensure a device is ready to satisfy a policy match - nanny: fixes improving delete and hotplug handling - ifup: do not recurse when generating nanny policy matches - ifreload: properly handle some config rename cases - fsm: ensure to process events in order and don't advance fsm state from events when device state outdistances it. - schema: cleanup netif-reference meta:require checks. - spec: require util-linux-systemd providing logger (bsc#911310) - conditionally enable nanny use (boo#915025,bsc#916402) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-481=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libwicked-0-6-0.6.19-18.1 libwicked-0-6-debuginfo-0.6.19-18.1 wicked-0.6.19-18.1 wicked-debuginfo-0.6.19-18.1 wicked-debugsource-0.6.19-18.1 wicked-service-0.6.19-18.1 References: https://bugzilla.suse.com/903759 https://bugzilla.suse.com/911310 https://bugzilla.suse.com/915025 https://bugzilla.suse.com/916402 https://bugzilla.suse.com/918069 https://bugzilla.suse.com/919573 https://bugzilla.suse.com/927615 https://bugzilla.suse.com/931288 https://bugzilla.suse.com/934067

1 0

openSUSE-RU-2015:1231-1: moderate: Recommended update for util-linux
by maintenance＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Recommended Update: Recommended update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1231-1 Rating: moderate References: #936751 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The losetup utility in util-linux was updated to fix not not return busy under specific conditins (bnc#936751). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-484=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libblkid-devel-2.23.2-31.1 libblkid1-2.23.2-31.1 libblkid1-debuginfo-2.23.2-31.1 libmount-devel-2.23.2-31.1 libmount1-2.23.2-31.1 libmount1-debuginfo-2.23.2-31.1 libuuid-devel-2.23.2-31.1 libuuid1-2.23.2-31.1 libuuid1-debuginfo-2.23.2-31.1 util-linux-2.23.2-31.1 util-linux-debuginfo-2.23.2-31.1 util-linux-debugsource-2.23.2-31.1 uuidd-2.23.2-31.1 uuidd-debuginfo-2.23.2-31.1 - openSUSE 13.1 (x86_64): libblkid-devel-32bit-2.23.2-31.1 libblkid1-32bit-2.23.2-31.1 libblkid1-debuginfo-32bit-2.23.2-31.1 libmount-devel-32bit-2.23.2-31.1 libmount1-32bit-2.23.2-31.1 libmount1-debuginfo-32bit-2.23.2-31.1 libuuid-devel-32bit-2.23.2-31.1 libuuid1-32bit-2.23.2-31.1 libuuid1-debuginfo-32bit-2.23.2-31.1 - openSUSE 13.1 (noarch): util-linux-lang-2.23.2-31.1 References: https://bugzilla.suse.com/936751

1 0

openSUSE-RU-2015:1230-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1230-1 Rating: moderate References: #905746 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: dracut was updated to use kpartx udev rules to create dmraid devices (bnc#905746) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-483=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): dracut-037-17.15.1 dracut-debuginfo-037-17.15.1 dracut-debugsource-037-17.15.1 dracut-fips-037-17.15.1 References: https://bugzilla.suse.com/905746

1 0

openSUSE-SU-2015:1229-1: important: Security update for MozillaFirefox, mozilla-nss
by opensuse-security＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Security Update: Security update for MozillaFirefox, mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1229-1 Rating: important References: #932142 #933439 #935979 Cross-References: CVE-2015-2721 CVE-2015-2722 CVE-2015-2724 CVE-2015-2725 CVE-2015-2726 CVE-2015-2727 CVE-2015-2728 CVE-2015-2729 CVE-2015-2730 CVE-2015-2731 CVE-2015-2733 CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 CVE-2015-2741 CVE-2015-2743 CVE-2015-4000 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: MozillaFirefox was updated to version 39.0 to fix 21 security issues. These security issues were fixed: - CVE-2015-2724/CVE-2015-2725/CVE-2015-2726: Miscellaneous memory safety hazards (bsc#935979). - CVE-2015-2727: Local files or privileged URLs in pages can be opened into new tabs (bsc#935979). - CVE-2015-2728: Type confusion in Indexed Database Manager (bsc#935979). - CVE-2015-2729: Out-of-bound read while computing an oscillator rendering range in Web Audio (bsc#935979). - CVE-2015-2731: Use-after-free in Content Policy due to microtask execution error (bsc#935979). - CVE-2015-2730: ECDSA signature validation fails to handle some signatures correctly (bsc#935979). - CVE-2015-2722/CVE-2015-2733: Use-after-free in workers while using XMLHttpRequest (bsc#935979). - CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737/CVE-2015-2738/CVE-2 015-2739/CVE-2015-2740: Vulnerabilities found through code inspection (bsc#935979). - CVE-2015-2741: Key pinning is ignored when overridable errors are encountered (bsc#935979). - CVE-2015-2743: Privilege escalation in PDF.js (bsc#935979). - CVE-2015-4000: NSS accepts export-length DHE keys with regular DHE cipher suites (bsc#935979). - CVE-2015-2721: NSS incorrectly permits skipping of ServerKeyExchange (bsc#935979). New features: - Share Hello URLs with social networks - Support for 'switch' role in ARIA 1.1 (web accessibility) - SafeBrowsing malware detection lookups enabled for downloads (Mac OS X and Linux) - Support for new Unicode 8.0 skin tone emoji - Removed support for insecure SSLv3 for network communications - Disable use of RC4 except for temporarily whitelisted hosts - NPAPI Plug-in performance improved via asynchronous initialization mozilla-nss was updated to version 3.19.2 to fix some of the security issues listed above. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-480=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-480=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): MozillaFirefox-39.0-34.2 MozillaFirefox-branding-upstream-39.0-34.2 MozillaFirefox-buildsymbols-39.0-34.2 MozillaFirefox-debuginfo-39.0-34.2 MozillaFirefox-debugsource-39.0-34.2 MozillaFirefox-devel-39.0-34.2 MozillaFirefox-translations-common-39.0-34.2 MozillaFirefox-translations-other-39.0-34.2 libfreebl3-3.19.2-16.1 libfreebl3-debuginfo-3.19.2-16.1 libsoftokn3-3.19.2-16.1 libsoftokn3-debuginfo-3.19.2-16.1 mozilla-nss-3.19.2-16.1 mozilla-nss-certs-3.19.2-16.1 mozilla-nss-certs-debuginfo-3.19.2-16.1 mozilla-nss-debuginfo-3.19.2-16.1 mozilla-nss-debugsource-3.19.2-16.1 mozilla-nss-devel-3.19.2-16.1 mozilla-nss-sysinit-3.19.2-16.1 mozilla-nss-sysinit-debuginfo-3.19.2-16.1 mozilla-nss-tools-3.19.2-16.1 mozilla-nss-tools-debuginfo-3.19.2-16.1 - openSUSE 13.2 (x86_64): libfreebl3-32bit-3.19.2-16.1 libfreebl3-debuginfo-32bit-3.19.2-16.1 libsoftokn3-32bit-3.19.2-16.1 libsoftokn3-debuginfo-32bit-3.19.2-16.1 mozilla-nss-32bit-3.19.2-16.1 mozilla-nss-certs-32bit-3.19.2-16.1 mozilla-nss-certs-debuginfo-32bit-3.19.2-16.1 mozilla-nss-debuginfo-32bit-3.19.2-16.1 mozilla-nss-sysinit-32bit-3.19.2-16.1 mozilla-nss-sysinit-debuginfo-32bit-3.19.2-16.1 - openSUSE 13.1 (i586 x86_64): MozillaFirefox-39.0-78.1 MozillaFirefox-branding-upstream-39.0-78.1 MozillaFirefox-buildsymbols-39.0-78.1 MozillaFirefox-debuginfo-39.0-78.1 MozillaFirefox-debugsource-39.0-78.1 MozillaFirefox-devel-39.0-78.1 MozillaFirefox-translations-common-39.0-78.1 MozillaFirefox-translations-other-39.0-78.1 libfreebl3-3.19.2-59.1 libfreebl3-debuginfo-3.19.2-59.1 libsoftokn3-3.19.2-59.1 libsoftokn3-debuginfo-3.19.2-59.1 mozilla-nss-3.19.2-59.1 mozilla-nss-certs-3.19.2-59.1 mozilla-nss-certs-debuginfo-3.19.2-59.1 mozilla-nss-debuginfo-3.19.2-59.1 mozilla-nss-debugsource-3.19.2-59.1 mozilla-nss-devel-3.19.2-59.1 mozilla-nss-sysinit-3.19.2-59.1 mozilla-nss-sysinit-debuginfo-3.19.2-59.1 mozilla-nss-tools-3.19.2-59.1 mozilla-nss-tools-debuginfo-3.19.2-59.1 - openSUSE 13.1 (x86_64): libfreebl3-32bit-3.19.2-59.1 libfreebl3-debuginfo-32bit-3.19.2-59.1 libsoftokn3-32bit-3.19.2-59.1 libsoftokn3-debuginfo-32bit-3.19.2-59.1 mozilla-nss-32bit-3.19.2-59.1 mozilla-nss-certs-32bit-3.19.2-59.1 mozilla-nss-certs-debuginfo-32bit-3.19.2-59.1 mozilla-nss-debuginfo-32bit-3.19.2-59.1 mozilla-nss-sysinit-32bit-3.19.2-59.1 mozilla-nss-sysinit-debuginfo-32bit-3.19.2-59.1 References: https://www.suse.com/security/cve/CVE-2015-2721.html https://www.suse.com/security/cve/CVE-2015-2722.html https://www.suse.com/security/cve/CVE-2015-2724.html https://www.suse.com/security/cve/CVE-2015-2725.html https://www.suse.com/security/cve/CVE-2015-2726.html https://www.suse.com/security/cve/CVE-2015-2727.html https://www.suse.com/security/cve/CVE-2015-2728.html https://www.suse.com/security/cve/CVE-2015-2729.html https://www.suse.com/security/cve/CVE-2015-2730.html https://www.suse.com/security/cve/CVE-2015-2731.html https://www.suse.com/security/cve/CVE-2015-2733.html https://www.suse.com/security/cve/CVE-2015-2734.html https://www.suse.com/security/cve/CVE-2015-2735.html https://www.suse.com/security/cve/CVE-2015-2736.html https://www.suse.com/security/cve/CVE-2015-2737.html https://www.suse.com/security/cve/CVE-2015-2738.html https://www.suse.com/security/cve/CVE-2015-2739.html https://www.suse.com/security/cve/CVE-2015-2740.html https://www.suse.com/security/cve/CVE-2015-2741.html https://www.suse.com/security/cve/CVE-2015-2743.html https://www.suse.com/security/cve/CVE-2015-4000.html https://bugzilla.suse.com/932142 https://bugzilla.suse.com/933439 https://bugzilla.suse.com/935979

1 0

openSUSE-SU-2015:1216-1: important: Security update for MariaDB
by opensuse-security＠opensuse.org 09 Jul '15

09 Jul '15

openSUSE Security Update: Security update for MariaDB ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1216-1 Rating: important References: #859345 #914370 #924663 #934789 #936407 #936408 #936409 Cross-References: CVE-2014-6464 CVE-2014-6469 CVE-2014-6491 CVE-2014-6494 CVE-2014-6496 CVE-2014-6500 CVE-2014-6507 CVE-2014-6555 CVE-2014-6559 CVE-2014-6568 CVE-2014-8964 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382 CVE-2015-0411 CVE-2015-0432 CVE-2015-0433 CVE-2015-0441 CVE-2015-0499 CVE-2015-0501 CVE-2015-0505 CVE-2015-2325 CVE-2015-2326 CVE-2015-2568 CVE-2015-2571 CVE-2015-2573 CVE-2015-3152 CVE-2015-4000 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 28 vulnerabilities is now available. Description: MariaDB was updated to its current minor version, fixing bugs and security issues. These updates include a fix for Logjam (CVE-2015-4000), making MariaDB work with client software that no longer allows short DH groups over SSL, as e.g. our current openssl packages. On openSUSE 13.1, MariaDB was updated to 5.5.44. On openSUSE 13.2, MariaDB was updated from 10.0.13 to 10.0.20. Please read the release notes of MariaDB https://mariadb.com/kb/en/mariadb/mariadb-10020-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10019-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10018-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10017-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10016-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10015-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10014-release-notes/ for more information. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-479=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-479=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libmysqlclient-devel-10.0.20-2.9.1 libmysqlclient18-10.0.20-2.9.1 libmysqlclient18-debuginfo-10.0.20-2.9.1 libmysqlclient_r18-10.0.20-2.9.1 libmysqld-devel-10.0.20-2.9.1 libmysqld18-10.0.20-2.9.1 libmysqld18-debuginfo-10.0.20-2.9.1 mariadb-10.0.20-2.9.1 mariadb-bench-10.0.20-2.9.1 mariadb-bench-debuginfo-10.0.20-2.9.1 mariadb-client-10.0.20-2.9.1 mariadb-client-debuginfo-10.0.20-2.9.1 mariadb-debuginfo-10.0.20-2.9.1 mariadb-debugsource-10.0.20-2.9.1 mariadb-errormessages-10.0.20-2.9.1 mariadb-test-10.0.20-2.9.1 mariadb-test-debuginfo-10.0.20-2.9.1 mariadb-tools-10.0.20-2.9.1 mariadb-tools-debuginfo-10.0.20-2.9.1 - openSUSE 13.2 (x86_64): libmysqlclient18-32bit-10.0.20-2.9.1 libmysqlclient18-debuginfo-32bit-10.0.20-2.9.1 libmysqlclient_r18-32bit-10.0.20-2.9.1 - openSUSE 13.1 (i586 x86_64): libmysqlclient-devel-5.5.44-4.1 libmysqlclient18-5.5.44-4.1 libmysqlclient18-debuginfo-5.5.44-4.1 libmysqlclient_r18-5.5.44-4.1 libmysqld-devel-5.5.44-4.1 libmysqld18-5.5.44-4.1 libmysqld18-debuginfo-5.5.44-4.1 mariadb-5.5.44-4.1 mariadb-bench-5.5.44-4.1 mariadb-bench-debuginfo-5.5.44-4.1 mariadb-client-5.5.44-4.1 mariadb-client-debuginfo-5.5.44-4.1 mariadb-debuginfo-5.5.44-4.1 mariadb-debugsource-5.5.44-4.1 mariadb-errormessages-5.5.44-4.1 mariadb-test-5.5.44-4.1 mariadb-test-debuginfo-5.5.44-4.1 mariadb-tools-5.5.44-4.1 mariadb-tools-debuginfo-5.5.44-4.1 - openSUSE 13.1 (x86_64): libmysqlclient18-32bit-5.5.44-4.1 libmysqlclient18-debuginfo-32bit-5.5.44-4.1 libmysqlclient_r18-32bit-5.5.44-4.1 References: https://www.suse.com/security/cve/CVE-2014-6464.html https://www.suse.com/security/cve/CVE-2014-6469.html https://www.suse.com/security/cve/CVE-2014-6491.html https://www.suse.com/security/cve/CVE-2014-6494.html https://www.suse.com/security/cve/CVE-2014-6496.html https://www.suse.com/security/cve/CVE-2014-6500.html https://www.suse.com/security/cve/CVE-2014-6507.html https://www.suse.com/security/cve/CVE-2014-6555.html https://www.suse.com/security/cve/CVE-2014-6559.html https://www.suse.com/security/cve/CVE-2014-6568.html https://www.suse.com/security/cve/CVE-2014-8964.html https://www.suse.com/security/cve/CVE-2015-0374.html https://www.suse.com/security/cve/CVE-2015-0381.html https://www.suse.com/security/cve/CVE-2015-0382.html https://www.suse.com/security/cve/CVE-2015-0411.html https://www.suse.com/security/cve/CVE-2015-0432.html https://www.suse.com/security/cve/CVE-2015-0433.html https://www.suse.com/security/cve/CVE-2015-0441.html https://www.suse.com/security/cve/CVE-2015-0499.html https://www.suse.com/security/cve/CVE-2015-0501.html https://www.suse.com/security/cve/CVE-2015-0505.html https://www.suse.com/security/cve/CVE-2015-2325.html https://www.suse.com/security/cve/CVE-2015-2326.html https://www.suse.com/security/cve/CVE-2015-2568.html https://www.suse.com/security/cve/CVE-2015-2571.html https://www.suse.com/security/cve/CVE-2015-2573.html https://www.suse.com/security/cve/CVE-2015-3152.html https://www.suse.com/security/cve/CVE-2015-4000.html https://bugzilla.suse.com/859345 https://bugzilla.suse.com/914370 https://bugzilla.suse.com/924663 https://bugzilla.suse.com/934789 https://bugzilla.suse.com/936407 https://bugzilla.suse.com/936408 https://bugzilla.suse.com/936409

1 0

openSUSE-SU-2015:1215-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 09 Jul '15

09 Jul '15

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1215-1 Rating: moderate References: #935157 #935158 Cross-References: CVE-2015-4651 CVE-2015-4652 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Wireshark was updated to 1.12.6 to fix two security issues. The following vulnerabilities were fixed: - CVE-2015-4651: The WCCP dissector crashed when reading specially crafted packages from the network or a capture files (wnpa-sec-2015-19, boo#935157). - CVE-2015-4652: The GSM DTAP dissector crashed when reading specially crafted packages from the network or a capture file (wnpa-sec-2015-20, boo#935158). This update also contains further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.12.6.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-478=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): wireshark-1.12.6-18.1 wireshark-debuginfo-1.12.6-18.1 wireshark-debugsource-1.12.6-18.1 wireshark-devel-1.12.6-18.1 wireshark-ui-gtk-1.12.6-18.1 wireshark-ui-gtk-debuginfo-1.12.6-18.1 wireshark-ui-qt-1.12.6-18.1 wireshark-ui-qt-debuginfo-1.12.6-18.1 References: https://www.suse.com/security/cve/CVE-2015-4651.html https://www.suse.com/security/cve/CVE-2015-4652.html https://bugzilla.suse.com/935157 https://bugzilla.suse.com/935158

1 0

openSUSE-SU-2015:1213-1: moderate: Security update for tiff
by opensuse-security＠opensuse.org 09 Jul '15

09 Jul '15

openSUSE Security Update: Security update for tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1213-1 Rating: moderate References: #914890 #916925 #916927 Cross-References: CVE-2014-8127 CVE-2014-8128 CVE-2014-8129 CVE-2014-8130 CVE-2014-9655 CVE-2015-1547 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: tiff was updated to version 4.0.4 to fix six security issues found by fuzzing initiatives. These security issues were fixed: - CVE-2014-8127: Out-of-bounds write (bnc#914890). - CVE-2014-9655: Access of uninitialized memory (bnc#916927). - CVE-2014-8130: Out-of-bounds write (bnc#914890). - CVE-2015-1547: Use of uninitialized memory in NeXTDecode (bnc#916925). - CVE-2014-8129: Out-of-bounds write (bnc#914890). - CVE-2014-8128: Out-of-bounds write (bnc#914890). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-476=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-476=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libtiff-devel-4.0.4-10.10.1 libtiff5-4.0.4-10.10.1 libtiff5-debuginfo-4.0.4-10.10.1 tiff-4.0.4-10.10.1 tiff-debuginfo-4.0.4-10.10.1 tiff-debugsource-4.0.4-10.10.1 - openSUSE 13.2 (x86_64): libtiff-devel-32bit-4.0.4-10.10.1 libtiff5-32bit-4.0.4-10.10.1 libtiff5-debuginfo-32bit-4.0.4-10.10.1 - openSUSE 13.1 (i586 x86_64): libtiff-devel-4.0.4-8.10.1 libtiff5-4.0.4-8.10.1 libtiff5-debuginfo-4.0.4-8.10.1 tiff-4.0.4-8.10.1 tiff-debuginfo-4.0.4-8.10.1 tiff-debugsource-4.0.4-8.10.1 - openSUSE 13.1 (x86_64): libtiff-devel-32bit-4.0.4-8.10.1 libtiff5-32bit-4.0.4-8.10.1 libtiff5-debuginfo-32bit-4.0.4-8.10.1 References: https://www.suse.com/security/cve/CVE-2014-8127.html https://www.suse.com/security/cve/CVE-2014-8128.html https://www.suse.com/security/cve/CVE-2014-8129.html https://www.suse.com/security/cve/CVE-2014-8130.html https://www.suse.com/security/cve/CVE-2014-9655.html https://www.suse.com/security/cve/CVE-2015-1547.html https://bugzilla.suse.com/914890 https://bugzilla.suse.com/916925 https://bugzilla.suse.com/916927

1 0

openSUSE-SU-2015:1212-1: moderate: Security update for libwmf
by opensuse-security＠opensuse.org 09 Jul '15

09 Jul '15

openSUSE Security Update: Security update for libwmf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1212-1 Rating: moderate References: #933109 #936058 #936062 Cross-References: CVE-2015-0848 CVE-2015-4588 CVE-2015-4695 CVE-2015-4696 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: libwmf was updated to fix four security issues. These security issues were fixed: - CVE-2015-4588: Heap overflow (bnc#933109). - CVE-2015-4696: Use after free (bnc#936062). - CVE-2015-4695: Heap buffer over read (bnc#936058). - CVE-2015-0848: Heap overflow (bnc#933109). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-477=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-477=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libwmf-0_2-7-0.2.8.4-239.7.1 libwmf-0_2-7-debuginfo-0.2.8.4-239.7.1 libwmf-debugsource-0.2.8.4-239.7.1 libwmf-devel-0.2.8.4-239.7.1 libwmf-gnome-0.2.8.4-239.7.1 libwmf-gnome-debuginfo-0.2.8.4-239.7.1 libwmf-tools-0.2.8.4-239.7.1 libwmf-tools-debuginfo-0.2.8.4-239.7.1 - openSUSE 13.2 (x86_64): libwmf-0_2-7-32bit-0.2.8.4-239.7.1 libwmf-0_2-7-debuginfo-32bit-0.2.8.4-239.7.1 libwmf-gnome-32bit-0.2.8.4-239.7.1 libwmf-gnome-debuginfo-32bit-0.2.8.4-239.7.1 - openSUSE 13.1 (i586 x86_64): libwmf-0_2-7-0.2.8.4-234.7.1 libwmf-0_2-7-debuginfo-0.2.8.4-234.7.1 libwmf-debugsource-0.2.8.4-234.7.1 libwmf-devel-0.2.8.4-234.7.1 libwmf-gnome-0.2.8.4-234.7.1 libwmf-gnome-debuginfo-0.2.8.4-234.7.1 libwmf-tools-0.2.8.4-234.7.1 libwmf-tools-debuginfo-0.2.8.4-234.7.1 - openSUSE 13.1 (x86_64): libwmf-0_2-7-32bit-0.2.8.4-234.7.1 libwmf-0_2-7-debuginfo-32bit-0.2.8.4-234.7.1 libwmf-gnome-32bit-0.2.8.4-234.7.1 libwmf-gnome-debuginfo-32bit-0.2.8.4-234.7.1 References: https://www.suse.com/security/cve/CVE-2015-0848.html https://www.suse.com/security/cve/CVE-2015-4588.html https://www.suse.com/security/cve/CVE-2015-4695.html https://www.suse.com/security/cve/CVE-2015-4696.html https://bugzilla.suse.com/933109 https://bugzilla.suse.com/936058 https://bugzilla.suse.com/936062

1 0

openSUSE-SU-2015:1210-1: critical: Security update for flash-player
by opensuse-security＠opensuse.org 08 Jul '15

08 Jul '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1210-1 Rating: critical References: #937339 Cross-References: CVE-2015-5119 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2015-5119: Unspecified vulnerability allowing remote attackers to take over the system (bsc#937339). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-475=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): flash-player-11.2.202.481-170.1 flash-player-gnome-11.2.202.481-170.1 flash-player-kde4-11.2.202.481-170.1 References: https://www.suse.com/security/cve/CVE-2015-5119.html https://bugzilla.suse.com/937339

1 0

openSUSE-SU-2015:1209-1: moderate: Security update for mysql-community-server
by opensuse-security＠opensuse.org 08 Jul '15

08 Jul '15

openSUSE Security Update: Security update for mysql-community-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1209-1 Rating: moderate References: #934789 Cross-References: CVE-2015-4000 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: mysql-community-server was updated to version 5.6.25 to fix one security issue. This security issue was fixed: * CVE-2015-4000: Logjam Attack: mysql uses 512 bit dh groups in SSL (bsc#934789). For other changes and details please check http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-25.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-474=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-474=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libmysql56client18-5.6.25-2.3.1 libmysql56client18-debuginfo-5.6.25-2.3.1 libmysql56client_r18-5.6.25-2.3.1 mysql-community-server-5.6.25-2.3.1 mysql-community-server-bench-5.6.25-2.3.1 mysql-community-server-bench-debuginfo-5.6.25-2.3.1 mysql-community-server-client-5.6.25-2.3.1 mysql-community-server-client-debuginfo-5.6.25-2.3.1 mysql-community-server-debuginfo-5.6.25-2.3.1 mysql-community-server-debugsource-5.6.25-2.3.1 mysql-community-server-errormessages-5.6.25-2.3.1 mysql-community-server-test-5.6.25-2.3.1 mysql-community-server-test-debuginfo-5.6.25-2.3.1 mysql-community-server-tools-5.6.25-2.3.1 mysql-community-server-tools-debuginfo-5.6.25-2.3.1 - openSUSE 13.2 (x86_64): libmysql56client18-32bit-5.6.25-2.3.1 libmysql56client18-debuginfo-32bit-5.6.25-2.3.1 libmysql56client_r18-32bit-5.6.25-2.3.1 - openSUSE 13.1 (i586 x86_64): libmysql56client18-5.6.25-7.4.1 libmysql56client18-debuginfo-5.6.25-7.4.1 libmysql56client_r18-5.6.25-7.4.1 mysql-community-server-5.6.25-7.4.1 mysql-community-server-bench-5.6.25-7.4.1 mysql-community-server-bench-debuginfo-5.6.25-7.4.1 mysql-community-server-client-5.6.25-7.4.1 mysql-community-server-client-debuginfo-5.6.25-7.4.1 mysql-community-server-debuginfo-5.6.25-7.4.1 mysql-community-server-debugsource-5.6.25-7.4.1 mysql-community-server-errormessages-5.6.25-7.4.1 mysql-community-server-test-5.6.25-7.4.1 mysql-community-server-test-debuginfo-5.6.25-7.4.1 mysql-community-server-tools-5.6.25-7.4.1 mysql-community-server-tools-debuginfo-5.6.25-7.4.1 - openSUSE 13.1 (x86_64): libmysql56client18-32bit-5.6.25-7.4.1 libmysql56client18-debuginfo-32bit-5.6.25-7.4.1 libmysql56client_r18-32bit-5.6.25-7.4.1 References: https://www.suse.com/security/cve/CVE-2015-4000.html https://bugzilla.suse.com/934789

1 0

openSUSE-SU-2015:1207-1: critical: Security update for flash-player
by opensuse-security＠opensuse.org 08 Jul '15

08 Jul '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1207-1 Rating: critical References: #937339 Cross-References: CVE-2015-5119 Affected Products: openSUSE 13.2:NonFree openSUSE 13.1:NonFree ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2015-5119: Unspecified vulnerability allowing remote attackers to take over the system (bsc#937339). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2:NonFree: zypper in -t patch openSUSE-2015-473=1 - openSUSE 13.1:NonFree: zypper in -t patch openSUSE-2015-473=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2:NonFree (i586 x86_64): flash-player-11.2.202.481-2.61.1 flash-player-gnome-11.2.202.481-2.61.1 flash-player-kde4-11.2.202.481-2.61.1 - openSUSE 13.1:NonFree (i586 x86_64): flash-player-11.2.202.481-126.1 flash-player-gnome-11.2.202.481-126.1 flash-player-kde4-11.2.202.481-126.1 References: https://www.suse.com/security/cve/CVE-2015-5119.html https://bugzilla.suse.com/937339

1 0

openSUSE-RU-2015:1200-1: Recommended update for spec-cleaner
by maintenance＠opensuse.org 07 Jul '15

07 Jul '15

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1200-1 Rating: low References: Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: spec-cleaner was updated to 0.7.2 to fix some spec file cleaning bugs. * Do not curlify %20 which is usually space in Source lines * Few more excludes for bracket Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-472=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-472=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): spec-cleaner-0.7.2-19.1 - openSUSE 13.1 (noarch): spec-cleaner-0.7.2-6.35.1 References:

1 0

openSUSE-SU-2015:1197-1: important: Security update for php5
by opensuse-security＠opensuse.org 06 Jul '15

06 Jul '15

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1197-1 Rating: important References: #935224 #935225 #935226 #935227 #935232 #935234 #935274 #935275 Cross-References: CVE-2015-3411 CVE-2015-3412 CVE-2015-4598 CVE-2015-4599 CVE-2015-4600 CVE-2015-4601 CVE-2015-4602 CVE-2015-4603 CVE-2015-4604 CVE-2015-4605 CVE-2015-4643 CVE-2015-4644 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: The PHP script interpreter was updated to receive various security fixes: * CVE-2015-4602 [bnc#935224]: Fixed an incomplete Class unserialization type confusion. * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]: Fixed type confusion issues in unserialize() with various SOAP methods. * CVE-2015-4603 [bnc#935234]: Fixed exception::getTraceAsString type confusion issue after unserialize. * CVE-2015-4644 [bnc#935274]: Fixed a crash in php_pgsql_meta_data. * CVE-2015-4643 [bnc#935275]: Fixed an integer overflow in ftp_genlist() that could result in a heap overflow. * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935227], [bnc#935232]: Added missing null byte checks for paths in various PHP extensions. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-471=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-471=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_php5-5.6.1-30.6 apache2-mod_php5-debuginfo-5.6.1-30.6 php5-5.6.1-30.6 php5-bcmath-5.6.1-30.6 php5-bcmath-debuginfo-5.6.1-30.6 php5-bz2-5.6.1-30.6 php5-bz2-debuginfo-5.6.1-30.6 php5-calendar-5.6.1-30.6 php5-calendar-debuginfo-5.6.1-30.6 php5-ctype-5.6.1-30.6 php5-ctype-debuginfo-5.6.1-30.6 php5-curl-5.6.1-30.6 php5-curl-debuginfo-5.6.1-30.6 php5-dba-5.6.1-30.6 php5-dba-debuginfo-5.6.1-30.6 php5-debuginfo-5.6.1-30.6 php5-debugsource-5.6.1-30.6 php5-devel-5.6.1-30.6 php5-dom-5.6.1-30.6 php5-dom-debuginfo-5.6.1-30.6 php5-enchant-5.6.1-30.6 php5-enchant-debuginfo-5.6.1-30.6 php5-exif-5.6.1-30.6 php5-exif-debuginfo-5.6.1-30.6 php5-fastcgi-5.6.1-30.6 php5-fastcgi-debuginfo-5.6.1-30.6 php5-fileinfo-5.6.1-30.6 php5-fileinfo-debuginfo-5.6.1-30.6 php5-firebird-5.6.1-30.6 php5-firebird-debuginfo-5.6.1-30.6 php5-fpm-5.6.1-30.6 php5-fpm-debuginfo-5.6.1-30.6 php5-ftp-5.6.1-30.6 php5-ftp-debuginfo-5.6.1-30.6 php5-gd-5.6.1-30.6 php5-gd-debuginfo-5.6.1-30.6 php5-gettext-5.6.1-30.6 php5-gettext-debuginfo-5.6.1-30.6 php5-gmp-5.6.1-30.6 php5-gmp-debuginfo-5.6.1-30.6 php5-iconv-5.6.1-30.6 php5-iconv-debuginfo-5.6.1-30.6 php5-imap-5.6.1-30.6 php5-imap-debuginfo-5.6.1-30.6 php5-intl-5.6.1-30.6 php5-intl-debuginfo-5.6.1-30.6 php5-json-5.6.1-30.6 php5-json-debuginfo-5.6.1-30.6 php5-ldap-5.6.1-30.6 php5-ldap-debuginfo-5.6.1-30.6 php5-mbstring-5.6.1-30.6 php5-mbstring-debuginfo-5.6.1-30.6 php5-mcrypt-5.6.1-30.6 php5-mcrypt-debuginfo-5.6.1-30.6 php5-mssql-5.6.1-30.6 php5-mssql-debuginfo-5.6.1-30.6 php5-mysql-5.6.1-30.6 php5-mysql-debuginfo-5.6.1-30.6 php5-odbc-5.6.1-30.6 php5-odbc-debuginfo-5.6.1-30.6 php5-opcache-5.6.1-30.6 php5-opcache-debuginfo-5.6.1-30.6 php5-openssl-5.6.1-30.6 php5-openssl-debuginfo-5.6.1-30.6 php5-pcntl-5.6.1-30.6 php5-pcntl-debuginfo-5.6.1-30.6 php5-pdo-5.6.1-30.6 php5-pdo-debuginfo-5.6.1-30.6 php5-pgsql-5.6.1-30.6 php5-pgsql-debuginfo-5.6.1-30.6 php5-phar-5.6.1-30.6 php5-phar-debuginfo-5.6.1-30.6 php5-posix-5.6.1-30.6 php5-posix-debuginfo-5.6.1-30.6 php5-pspell-5.6.1-30.6 php5-pspell-debuginfo-5.6.1-30.6 php5-readline-5.6.1-30.6 php5-readline-debuginfo-5.6.1-30.6 php5-shmop-5.6.1-30.6 php5-shmop-debuginfo-5.6.1-30.6 php5-snmp-5.6.1-30.6 php5-snmp-debuginfo-5.6.1-30.6 php5-soap-5.6.1-30.6 php5-soap-debuginfo-5.6.1-30.6 php5-sockets-5.6.1-30.6 php5-sockets-debuginfo-5.6.1-30.6 php5-sqlite-5.6.1-30.6 php5-sqlite-debuginfo-5.6.1-30.6 php5-suhosin-5.6.1-30.6 php5-suhosin-debuginfo-5.6.1-30.6 php5-sysvmsg-5.6.1-30.6 php5-sysvmsg-debuginfo-5.6.1-30.6 php5-sysvsem-5.6.1-30.6 php5-sysvsem-debuginfo-5.6.1-30.6 php5-sysvshm-5.6.1-30.6 php5-sysvshm-debuginfo-5.6.1-30.6 php5-tidy-5.6.1-30.6 php5-tidy-debuginfo-5.6.1-30.6 php5-tokenizer-5.6.1-30.6 php5-tokenizer-debuginfo-5.6.1-30.6 php5-wddx-5.6.1-30.6 php5-wddx-debuginfo-5.6.1-30.6 php5-xmlreader-5.6.1-30.6 php5-xmlreader-debuginfo-5.6.1-30.6 php5-xmlrpc-5.6.1-30.6 php5-xmlrpc-debuginfo-5.6.1-30.6 php5-xmlwriter-5.6.1-30.6 php5-xmlwriter-debuginfo-5.6.1-30.6 php5-xsl-5.6.1-30.6 php5-xsl-debuginfo-5.6.1-30.6 php5-zip-5.6.1-30.6 php5-zip-debuginfo-5.6.1-30.6 php5-zlib-5.6.1-30.6 php5-zlib-debuginfo-5.6.1-30.6 - openSUSE 13.2 (noarch): php5-pear-5.6.1-30.6 - openSUSE 13.1 (i586 x86_64): apache2-mod_php5-5.4.20-61.5 apache2-mod_php5-debuginfo-5.4.20-61.5 php5-5.4.20-61.5 php5-bcmath-5.4.20-61.5 php5-bcmath-debuginfo-5.4.20-61.5 php5-bz2-5.4.20-61.5 php5-bz2-debuginfo-5.4.20-61.5 php5-calendar-5.4.20-61.5 php5-calendar-debuginfo-5.4.20-61.5 php5-ctype-5.4.20-61.5 php5-ctype-debuginfo-5.4.20-61.5 php5-curl-5.4.20-61.5 php5-curl-debuginfo-5.4.20-61.5 php5-dba-5.4.20-61.5 php5-dba-debuginfo-5.4.20-61.5 php5-debuginfo-5.4.20-61.5 php5-debugsource-5.4.20-61.5 php5-devel-5.4.20-61.5 php5-dom-5.4.20-61.5 php5-dom-debuginfo-5.4.20-61.5 php5-enchant-5.4.20-61.5 php5-enchant-debuginfo-5.4.20-61.5 php5-exif-5.4.20-61.5 php5-exif-debuginfo-5.4.20-61.5 php5-fastcgi-5.4.20-61.5 php5-fastcgi-debuginfo-5.4.20-61.5 php5-fileinfo-5.4.20-61.5 php5-fileinfo-debuginfo-5.4.20-61.5 php5-firebird-5.4.20-61.5 php5-firebird-debuginfo-5.4.20-61.5 php5-fpm-5.4.20-61.5 php5-fpm-debuginfo-5.4.20-61.5 php5-ftp-5.4.20-61.5 php5-ftp-debuginfo-5.4.20-61.5 php5-gd-5.4.20-61.5 php5-gd-debuginfo-5.4.20-61.5 php5-gettext-5.4.20-61.5 php5-gettext-debuginfo-5.4.20-61.5 php5-gmp-5.4.20-61.5 php5-gmp-debuginfo-5.4.20-61.5 php5-iconv-5.4.20-61.5 php5-iconv-debuginfo-5.4.20-61.5 php5-imap-5.4.20-61.5 php5-imap-debuginfo-5.4.20-61.5 php5-intl-5.4.20-61.5 php5-intl-debuginfo-5.4.20-61.5 php5-json-5.4.20-61.5 php5-json-debuginfo-5.4.20-61.5 php5-ldap-5.4.20-61.5 php5-ldap-debuginfo-5.4.20-61.5 php5-mbstring-5.4.20-61.5 php5-mbstring-debuginfo-5.4.20-61.5 php5-mcrypt-5.4.20-61.5 php5-mcrypt-debuginfo-5.4.20-61.5 php5-mssql-5.4.20-61.5 php5-mssql-debuginfo-5.4.20-61.5 php5-mysql-5.4.20-61.5 php5-mysql-debuginfo-5.4.20-61.5 php5-odbc-5.4.20-61.5 php5-odbc-debuginfo-5.4.20-61.5 php5-openssl-5.4.20-61.5 php5-openssl-debuginfo-5.4.20-61.5 php5-pcntl-5.4.20-61.5 php5-pcntl-debuginfo-5.4.20-61.5 php5-pdo-5.4.20-61.5 php5-pdo-debuginfo-5.4.20-61.5 php5-pgsql-5.4.20-61.5 php5-pgsql-debuginfo-5.4.20-61.5 php5-phar-5.4.20-61.5 php5-phar-debuginfo-5.4.20-61.5 php5-posix-5.4.20-61.5 php5-posix-debuginfo-5.4.20-61.5 php5-pspell-5.4.20-61.5 php5-pspell-debuginfo-5.4.20-61.5 php5-readline-5.4.20-61.5 php5-readline-debuginfo-5.4.20-61.5 php5-shmop-5.4.20-61.5 php5-shmop-debuginfo-5.4.20-61.5 php5-snmp-5.4.20-61.5 php5-snmp-debuginfo-5.4.20-61.5 php5-soap-5.4.20-61.5 php5-soap-debuginfo-5.4.20-61.5 php5-sockets-5.4.20-61.5 php5-sockets-debuginfo-5.4.20-61.5 php5-sqlite-5.4.20-61.5 php5-sqlite-debuginfo-5.4.20-61.5 php5-suhosin-5.4.20-61.5 php5-suhosin-debuginfo-5.4.20-61.5 php5-sysvmsg-5.4.20-61.5 php5-sysvmsg-debuginfo-5.4.20-61.5 php5-sysvsem-5.4.20-61.5 php5-sysvsem-debuginfo-5.4.20-61.5 php5-sysvshm-5.4.20-61.5 php5-sysvshm-debuginfo-5.4.20-61.5 php5-tidy-5.4.20-61.5 php5-tidy-debuginfo-5.4.20-61.5 php5-tokenizer-5.4.20-61.5 php5-tokenizer-debuginfo-5.4.20-61.5 php5-wddx-5.4.20-61.5 php5-wddx-debuginfo-5.4.20-61.5 php5-xmlreader-5.4.20-61.5 php5-xmlreader-debuginfo-5.4.20-61.5 php5-xmlrpc-5.4.20-61.5 php5-xmlrpc-debuginfo-5.4.20-61.5 php5-xmlwriter-5.4.20-61.5 php5-xmlwriter-debuginfo-5.4.20-61.5 php5-xsl-5.4.20-61.5 php5-xsl-debuginfo-5.4.20-61.5 php5-zip-5.4.20-61.5 php5-zip-debuginfo-5.4.20-61.5 php5-zlib-5.4.20-61.5 php5-zlib-debuginfo-5.4.20-61.5 - openSUSE 13.1 (noarch): php5-pear-5.4.20-61.5 References: https://www.suse.com/security/cve/CVE-2015-3411.html https://www.suse.com/security/cve/CVE-2015-3412.html https://www.suse.com/security/cve/CVE-2015-4598.html https://www.suse.com/security/cve/CVE-2015-4599.html https://www.suse.com/security/cve/CVE-2015-4600.html https://www.suse.com/security/cve/CVE-2015-4601.html https://www.suse.com/security/cve/CVE-2015-4602.html https://www.suse.com/security/cve/CVE-2015-4603.html https://www.suse.com/security/cve/CVE-2015-4604.html https://www.suse.com/security/cve/CVE-2015-4605.html https://www.suse.com/security/cve/CVE-2015-4643.html https://www.suse.com/security/cve/CVE-2015-4644.html https://bugzilla.suse.com/935224 https://bugzilla.suse.com/935225 https://bugzilla.suse.com/935226 https://bugzilla.suse.com/935227 https://bugzilla.suse.com/935232 https://bugzilla.suse.com/935234 https://bugzilla.suse.com/935274 https://bugzilla.suse.com/935275

1 0

openSUSE-RU-2015:1195-1: moderate: Recommended update for sensors
by maintenance＠opensuse.org 04 Jul '15

04 Jul '15

openSUSE Recommended Update: Recommended update for sensors ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1195-1 Rating: moderate References: #903520 #933072 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for sensors fixes the following issues: - fancontrol: Fix shell error when FCFANS is not set (bsc#903520) - sensors-detect: Detect graphics card in all cases (bsc#933072) - sensors-detect: Skip addresses 0x37 and 0x4f on DDC channels (bsc#933072) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-463=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-463=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libsensors4-3.3.5-3.3.1 libsensors4-debuginfo-3.3.5-3.3.1 libsensors4-devel-3.3.5-3.3.1 sensord-3.3.5-3.3.1 sensord-debuginfo-3.3.5-3.3.1 sensors-3.3.5-3.3.1 sensors-debuginfo-3.3.5-3.3.1 sensors-debugsource-3.3.5-3.3.1 - openSUSE 13.2 (x86_64): libsensors4-32bit-3.3.5-3.3.1 libsensors4-debuginfo-32bit-3.3.5-3.3.1 - openSUSE 13.1 (i586 x86_64): libsensors4-3.3.4-3.3.1 libsensors4-debuginfo-3.3.4-3.3.1 libsensors4-devel-3.3.4-3.3.1 sensord-3.3.4-3.3.1 sensord-debuginfo-3.3.4-3.3.1 sensors-3.3.4-3.3.1 sensors-debuginfo-3.3.4-3.3.1 sensors-debugsource-3.3.4-3.3.1 - openSUSE 13.1 (x86_64): libsensors4-32bit-3.3.4-3.3.1 libsensors4-debuginfo-32bit-3.3.4-3.3.1 References: https://bugzilla.suse.com/903520 https://bugzilla.suse.com/933072

1 0

openSUSE-RU-2015:1194-1: moderate: Recommended update for mkinitrd
by maintenance＠opensuse.org 04 Jul '15

04 Jul '15

openSUSE Recommended Update: Recommended update for mkinitrd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1194-1 Rating: moderate References: #803760 #830968 #848038 #848293 #858663 #873919 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: mkinitrd was updated to fix a number of bugs relating to general boot and installation issues as well as specific hardware or configurations. The following bugs were fixed: * bnc#873919: root file system should not get mounted ro when fsck failes with uncorrected errors - Start emergency shell if fsck left filesystem errors uncorrected instead of booting into the system * bnc#848038: Fix code which handles missing or incomplete fstab * bnc#803760: Do not overwrite the drvlink variable * bnc#858663: Missing /dev/disk/by-id/cciss-* symlinks when using hpsa - Add cciss compat rules to mkinitrd * bnc#830968: iSCSI BFS: System does not connect to 2nd targets as indicated in the iBFT - Support second ibft iscsi interface * bnc#848293: Multipath maps not discovered on boot when using boot from SAN and md-raid - Wait for multipath devices when MD is active Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-469=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): mkinitrd-2.8.1-12.1 mkinitrd-debuginfo-2.8.1-12.1 mkinitrd-debugsource-2.8.1-12.1 References: https://bugzilla.suse.com/803760 https://bugzilla.suse.com/830968 https://bugzilla.suse.com/848038 https://bugzilla.suse.com/848293 https://bugzilla.suse.com/858663 https://bugzilla.suse.com/873919

1 0

openSUSE-RU-2015:1193-1: Recommended update for SuSEfirewall2
by maintenance＠opensuse.org 04 Jul '15

04 Jul '15

openSUSE Recommended Update: Recommended update for SuSEfirewall2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1193-1 Rating: low References: #935716 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update of SuSEfirewall2 fixes broadcast handling for IPv6, which is now the same as for IPv4. (boo#935716) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-468=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): SuSEfirewall2-3.6.315-2.3.1 References: https://bugzilla.suse.com/935716

1 0

openSUSE-RU-2015:1192-1: moderate: Recommended update for exim
by maintenance＠opensuse.org 04 Jul '15

04 Jul '15

openSUSE Recommended Update: Recommended update for exim ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1192-1 Rating: moderate References: #922145 #926861 #935601 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: The MTA exim was updated to the current stable release 4.85 to fix a number of bugs. The following bugs were fixed: * boo#935601: exim packaging issues - removed executable permission bits from exim.service file * boo#922145: exim systemd file did not parse execution arguments from /etc/sysconfig/exim * bsc#926861: eximstats-html contained obsolete apache syntax - install fitting eximstats.conf depending on SUSE version Also contains all bugfixes from the exim 4.85 stable release. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-470=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-470=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): exim-4.85-3.3.1 exim-debuginfo-4.85-3.3.1 exim-debugsource-4.85-3.3.1 eximon-4.85-3.3.1 eximon-debuginfo-4.85-3.3.1 eximstats-html-4.85-3.3.1 - openSUSE 13.1 (i586 x86_64): exim-4.85-6.7.1 exim-debuginfo-4.85-6.7.1 exim-debugsource-4.85-6.7.1 eximon-4.85-6.7.1 eximon-debuginfo-4.85-6.7.1 eximstats-html-4.85-6.7.1 References: https://bugzilla.suse.com/922145 https://bugzilla.suse.com/926861 https://bugzilla.suse.com/935601

1 0

openSUSE-SU-2015:1191-1: moderate: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 04 Jul '15

04 Jul '15

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1191-1 Rating: moderate References: #920773 #930992 #930993 Cross-References: CVE-2015-2206 CVE-2015-3902 CVE-2015-3903 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: phpMyAdmin was updated to 4.2.13.3 to fix three security issues. The following vulnerabilities were fixed: * CVE-2015-3902: CSRF vulnerability in setup (PMASA-2015-2, boo#930992) * CVE-2015-3903: Vulnerability allowing man-in-the-middle attack (PMASA-2015-3, boo#930993) * CVE-2015-2206: Risk of BREACH attack (PMASA-2015-1, boo#920773) Also contains all upstream bug fixes in the 4.2.13 branch. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-466=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-466=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): phpMyAdmin-4.2.13.3-11.1 - openSUSE 13.1 (noarch): phpMyAdmin-4.2.13.3-31.1 References: https://www.suse.com/security/cve/CVE-2015-2206.html https://www.suse.com/security/cve/CVE-2015-3902.html https://www.suse.com/security/cve/CVE-2015-3903.html https://bugzilla.suse.com/920773 https://bugzilla.suse.com/930992 https://bugzilla.suse.com/930993

1 0

openSUSE-RU-2015:1190-1: moderate: Recommended update for at
by maintenance＠opensuse.org 04 Jul '15

04 Jul '15

openSUSE Recommended Update: Recommended update for at ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1190-1 Rating: moderate References: #889174 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for at fixes the following issue: - loadavg on Linux is a sum over all CPUs, so multiply LOADAVG_MX by the amount of CPUs when comparing to loadavg (bnc#889174) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-464=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-464=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): at-3.1.15-4.1 at-debuginfo-3.1.15-4.1 at-debugsource-3.1.15-4.1 - openSUSE 13.1 (i586 x86_64): at-3.1.13-5.17.1 at-debuginfo-3.1.13-5.17.1 at-debugsource-3.1.13-5.17.1 References: https://bugzilla.suse.com/889174

1 0

openSUSE-RU-2015:1189-1: moderate: Recommended update for less
by maintenance＠opensuse.org 04 Jul '15

04 Jul '15

openSUSE Recommended Update: Recommended update for less ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1189-1 Rating: moderate References: #915387 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for less fixes the following issue: - fix a crash in hilite_line (boo#915387) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-465=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-465=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): less-458-6.7.1 less-debuginfo-458-6.7.1 less-debugsource-458-6.7.1 - openSUSE 13.1 (i586 x86_64): less-458-2.11.1 less-debuginfo-458-2.11.1 less-debugsource-458-2.11.1 References: https://bugzilla.suse.com/915387

1 0

openSUSE-SU-2015:1180-1: important: Security update for Adobe Flash Player
by opensuse-security＠opensuse.org 03 Jul '15

03 Jul '15

openSUSE Security Update: Security update for Adobe Flash Player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1180-1 Rating: important References: #935701 Cross-References: CVE-2015-3113 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Adobe Flash Player was updated to 11.2.202.468 to fix one security issue. The following vulnerability was fixed: * CVE-2015-3113: A heap buffer overflow vulnerability could have allowed code execution (bsc#935701, APSB15-14) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-462=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): flash-player-11.2.202.468-167.1 flash-player-gnome-11.2.202.468-167.1 flash-player-kde4-11.2.202.468-167.1 References: https://www.suse.com/security/cve/CVE-2015-3113.html https://bugzilla.suse.com/935701

1 0

openSUSE-RU-2015:1172-1: moderate: Recommended update for cronie
by maintenance＠opensuse.org 02 Jul '15

02 Jul '15

openSUSE Recommended Update: Recommended update for cronie ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1172-1 Rating: moderate References: #926961 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for cronie fixes the following issue: - Sync cron.service with Factory, fixing (bnc#926961) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-460=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): cron-4.2-56.5.1 cronie-1.4.12-56.5.1 cronie-anacron-1.4.12-56.5.1 cronie-anacron-debuginfo-1.4.12-56.5.1 cronie-debuginfo-1.4.12-56.5.1 cronie-debugsource-1.4.12-56.5.1 References: https://bugzilla.suse.com/926961

1 0

openSUSE-RU-2015:1171-1: moderate: Recommended update for mtr
by maintenance＠opensuse.org 02 Jul '15

02 Jul '15

openSUSE Recommended Update: Recommended update for mtr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1171-1 Rating: moderate References: #933854 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for mtr fixes the following issue: - fix crash if '--xml' option is used [bnc#933854] Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-459=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-459=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): mtr-0.85_p20140126-3.1 mtr-debuginfo-0.85_p20140126-3.1 mtr-debugsource-0.85_p20140126-3.1 mtr-gtk-0.85_p20140126-3.1 mtr-gtk-debuginfo-0.85_p20140126-3.1 - openSUSE 13.1 (i586 x86_64): mtr-0.82-9.5.1 mtr-debuginfo-0.82-9.5.1 mtr-debugsource-0.82-9.5.1 mtr-gtk-0.82-9.5.1 mtr-gtk-debuginfo-0.82-9.5.1 References: https://bugzilla.suse.com/933854

1 0

openSUSE-RU-2015:1169-1: moderate: Recommended update for atftp
by maintenance＠opensuse.org 02 Jul '15

02 Jul '15

openSUSE Recommended Update: Recommended update for atftp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1169-1 Rating: moderate References: #864187 #921219 #932161 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This recommended update for atftp fixes the following issues: * boo#921219: Use ATFTPD_BIND_ADDRESSES in init script * boo#932161: Fix atftpd.socket * boo#864187: Add systemd support Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-458=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-458=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (x86_64): atftp-0.7.0-160.4.1 atftp-debuginfo-0.7.0-160.4.1 atftp-debugsource-0.7.0-160.4.1 - openSUSE 13.2 (i586): atftp-0.7.0-160.8.1 atftp-debuginfo-0.7.0-160.8.1 atftp-debugsource-0.7.0-160.8.1 - openSUSE 13.1 (i586 x86_64): atftp-0.7.0-157.4.1 atftp-debuginfo-0.7.0-157.4.1 atftp-debugsource-0.7.0-157.4.1 References: https://bugzilla.suse.com/864187 https://bugzilla.suse.com/921219 https://bugzilla.suse.com/932161

1 0

openSUSE-RU-2015:1168-1: moderate: Recommended update for Glabels
by maintenance＠opensuse.org 02 Jul '15

02 Jul '15

openSUSE Recommended Update: Recommended update for Glabels ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1168-1 Rating: moderate References: #921140 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Glabels was updated to 3.2.1 to fix two bugs. The following bugs were fixed: * Fixed "new label dialog" crash introduced with Gtk 3.14. * Fixed text box layout problems with center and right alignment. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-461=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): glabels-3.2.1-3.3.2 glabels-debuginfo-3.2.1-3.3.2 glabels-debugsource-3.2.1-3.3.2 glabels-devel-3.2.1-3.3.2 - openSUSE 13.2 (noarch): glabels-lang-3.2.1-3.3.2 References: https://bugzilla.suse.com/921140

1 0

openSUSE-SU-2015:1162-1: moderate: Security update for p7zip
by opensuse-security＠opensuse.org 01 Jul '15

01 Jul '15

openSUSE Security Update: Security update for p7zip ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1162-1 Rating: moderate References: #912878 Cross-References: CVE-2015-1038 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: p7zip was update to fix one security issue. The following vulnerability was fixed: * CVE-2015-1038: Attackers could have written to arbitrary files via a symlink attack in a specially crafted archive (boo#912878) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-456=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-456=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): p7zip-9.20.1-12.3.1 p7zip-debuginfo-9.20.1-12.3.1 p7zip-debugsource-9.20.1-12.3.1 - openSUSE 13.1 (i586 x86_64): p7zip-9.20.1-10.3.1 p7zip-debuginfo-9.20.1-10.3.1 p7zip-debugsource-9.20.1-10.3.1 References: https://www.suse.com/security/cve/CVE-2015-1038.html https://bugzilla.suse.com/912878

1 0