July 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:1237-1: moderate: Recommended update for openvpn
by maintenance＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Recommended Update: Recommended update for openvpn ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1237-1 Rating: moderate References: #914166 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: OpenVPN received various bugfixes. - Fixed to use correct sha digest data length and in fips mode, use aes instead of the disallowed blowfish crypto (boo#914166). - Fixed to mention actual plugin/doc dirs in openvpn(8) man page. - Depend on systemd-devel for the daemon check functionality, Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-488=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): openvpn-2.3.4-2.7.1 openvpn-auth-pam-plugin-2.3.4-2.7.1 openvpn-auth-pam-plugin-debuginfo-2.3.4-2.7.1 openvpn-debuginfo-2.3.4-2.7.1 openvpn-debugsource-2.3.4-2.7.1 openvpn-down-root-plugin-2.3.4-2.7.1 openvpn-down-root-plugin-debuginfo-2.3.4-2.7.1 References: https://bugzilla.suse.com/914166

1 0

openSUSE-RU-2015:1236-1: Recommended update for osc
by maintenance＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Recommended Update: Recommended update for osc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1236-1 Rating: low References: Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: The Open Build Service Commander osc was updated to 0.152.0, The following changes are included: * add support searching for groups via "group:" prefix * show possible used incident projects on "maintained" command To support OBS 2.7 the following changes are included: * support buildtime source services * support maintenance_incident requests with acceptinfo data * support maintenance_release requests with acceptinfo data Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-486=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-486=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): osc-0.152.0-14.1 - openSUSE 13.1 (noarch): osc-0.152.0-2.30.1 References:

1 0

openSUSE-RU-2015:1235-1: moderate: Recommended update for kdesvn
by maintenance＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Recommended Update: Recommended update for kdesvn ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1235-1 Rating: moderate References: #931401 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: kdesvn was updated to fix a crash when getting logs with the current subversion (boo#931401, kde#325074, kde#330624) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-485=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-485=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): kdesvn-1.6.0-8.3.1 kdesvn-debuginfo-1.6.0-8.3.1 kdesvn-debugsource-1.6.0-8.3.1 libsvnqt-devel-1.6.0-8.3.1 libsvnqt7-1.6.0-8.3.1 libsvnqt7-debuginfo-1.6.0-8.3.1 - openSUSE 13.1 (i586 x86_64): kdesvn-1.6.0-5.3.1 kdesvn-debuginfo-1.6.0-5.3.1 kdesvn-debugsource-1.6.0-5.3.1 libsvnqt-devel-1.6.0-5.3.1 libsvnqt7-1.6.0-5.3.1 libsvnqt7-debuginfo-1.6.0-5.3.1 References: https://bugzilla.suse.com/931401

1 0

openSUSE-RU-2015:1234-1: moderate: Recommended update for virt-manager
by maintenance＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Recommended Update: Recommended update for virt-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1234-1 Rating: moderate References: #909602 #910929 #933242 #934270 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: virt-manager was updated to fix several bugs: - bnc#934270 - virt-convert could not handle .ova files. - bsc#933242 - summary=Error launching manager: list index out of range . - bnc#910929 - Unable to clone a qcow2 guest. - bsc#909602 - virt-manager did not show text console for container when started from details page. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-487=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): virt-install-1.0.1-14.14.1 virt-manager-1.0.1-14.14.1 virt-manager-common-1.0.1-14.14.1 References: https://bugzilla.suse.com/909602 https://bugzilla.suse.com/910929 https://bugzilla.suse.com/933242 https://bugzilla.suse.com/934270

1 0

openSUSE-RU-2015:1233-1: moderate: Recommended update for gtk-vnc, gtk-vnc2
by maintenance＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Recommended Update: Recommended update for gtk-vnc, gtk-vnc2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1233-1 Rating: moderate References: #936312 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The GTK VNC viewer was updated to allow virtual manager to be able to drop out of fullscreen mode (bsc#936312) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-489=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gtk-vnc-debugsource-0.5.3-2.3.1 gtk-vnc-devel-0.5.3-2.3.1 gtk-vnc-tools-0.5.3-2.3.1 gtk-vnc-tools-debuginfo-0.5.3-2.3.1 gtk-vnc2-debugsource-0.5.3-2.3.1 gtk-vnc2-devel-0.5.3-2.3.1 libgtk-vnc-1_0-0-0.5.3-2.3.1 libgtk-vnc-1_0-0-debuginfo-0.5.3-2.3.1 libgtk-vnc-2_0-0-0.5.3-2.3.1 libgtk-vnc-2_0-0-debuginfo-0.5.3-2.3.1 libgvnc-1_0-0-0.5.3-2.3.1 libgvnc-1_0-0-debuginfo-0.5.3-2.3.1 libgvncpulse-1_0-0-0.5.3-2.3.1 libgvncpulse-1_0-0-debuginfo-0.5.3-2.3.1 python-gtk-vnc-0.5.3-2.3.1 python-gtk-vnc-debuginfo-0.5.3-2.3.1 typelib-1_0-GVnc-1_0-0.5.3-2.3.1 typelib-1_0-GVncPulse-1_0-0.5.3-2.3.1 typelib-1_0-GtkVnc-1_0-0.5.3-2.3.1 typelib-1_0-GtkVnc-2_0-0.5.3-2.3.1 - openSUSE 13.2 (noarch): gtk-vnc-lang-0.5.3-2.3.1 References: https://bugzilla.suse.com/936312

1 0

openSUSE-RU-2015:1232-1: moderate: Recommended update for wicked
by maintenance＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Recommended Update: Recommended update for wicked ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1232-1 Rating: moderate References: #903759 #911310 #915025 #916402 #918069 #919573 #927615 #931288 #934067 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: wicked was updated to version 0.6.19, bringing several changes and bugfixes: - dhcp4: improve invalid dhcp options handling (boo#918069) - dhcp6: just drop an info lease on release request and stop - dhcp6: refresh ipv6 link on newprefix in auto mode to workaround, that the kernel does not send us events about mode change when RA timers are unspecified (bsc#934067) - ethtool: do not warn when reading ethtool settings while netlink newlink processing and the device is already gone. - ibft: ignore invalid default gateway (0.0.0.0 and ::) provided by the firmware (bsc#903759) - wireless: handle ANY for WPA-EAP methods and send passwd when phase2 method isn't set (boo#927615) - bonding: don't insist, that arp_validate=none default is valid in active-backup mode only (boo#919573) - wickedd: fix to send requested device-up event ack - nanny: fix error handling for NULL policy objects and fix to not compare iftype to a dbus class name (boo#931288) - nanny: ensure a device is ready to satisfy a policy match - nanny: fixes improving delete and hotplug handling - ifup: do not recurse when generating nanny policy matches - ifreload: properly handle some config rename cases - fsm: ensure to process events in order and don't advance fsm state from events when device state outdistances it. - schema: cleanup netif-reference meta:require checks. - spec: require util-linux-systemd providing logger (bsc#911310) - conditionally enable nanny use (boo#915025,bsc#916402) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-481=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libwicked-0-6-0.6.19-18.1 libwicked-0-6-debuginfo-0.6.19-18.1 wicked-0.6.19-18.1 wicked-debuginfo-0.6.19-18.1 wicked-debugsource-0.6.19-18.1 wicked-service-0.6.19-18.1 References: https://bugzilla.suse.com/903759 https://bugzilla.suse.com/911310 https://bugzilla.suse.com/915025 https://bugzilla.suse.com/916402 https://bugzilla.suse.com/918069 https://bugzilla.suse.com/919573 https://bugzilla.suse.com/927615 https://bugzilla.suse.com/931288 https://bugzilla.suse.com/934067

1 0

openSUSE-RU-2015:1231-1: moderate: Recommended update for util-linux
by maintenance＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Recommended Update: Recommended update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1231-1 Rating: moderate References: #936751 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The losetup utility in util-linux was updated to fix not not return busy under specific conditins (bnc#936751). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-484=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libblkid-devel-2.23.2-31.1 libblkid1-2.23.2-31.1 libblkid1-debuginfo-2.23.2-31.1 libmount-devel-2.23.2-31.1 libmount1-2.23.2-31.1 libmount1-debuginfo-2.23.2-31.1 libuuid-devel-2.23.2-31.1 libuuid1-2.23.2-31.1 libuuid1-debuginfo-2.23.2-31.1 util-linux-2.23.2-31.1 util-linux-debuginfo-2.23.2-31.1 util-linux-debugsource-2.23.2-31.1 uuidd-2.23.2-31.1 uuidd-debuginfo-2.23.2-31.1 - openSUSE 13.1 (x86_64): libblkid-devel-32bit-2.23.2-31.1 libblkid1-32bit-2.23.2-31.1 libblkid1-debuginfo-32bit-2.23.2-31.1 libmount-devel-32bit-2.23.2-31.1 libmount1-32bit-2.23.2-31.1 libmount1-debuginfo-32bit-2.23.2-31.1 libuuid-devel-32bit-2.23.2-31.1 libuuid1-32bit-2.23.2-31.1 libuuid1-debuginfo-32bit-2.23.2-31.1 - openSUSE 13.1 (noarch): util-linux-lang-2.23.2-31.1 References: https://bugzilla.suse.com/936751

1 0

openSUSE-RU-2015:1230-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1230-1 Rating: moderate References: #905746 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: dracut was updated to use kpartx udev rules to create dmraid devices (bnc#905746) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-483=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): dracut-037-17.15.1 dracut-debuginfo-037-17.15.1 dracut-debugsource-037-17.15.1 dracut-fips-037-17.15.1 References: https://bugzilla.suse.com/905746

1 0

openSUSE-SU-2015:1229-1: important: Security update for MozillaFirefox, mozilla-nss
by opensuse-security＠opensuse.org 13 Jul '15

13 Jul '15

openSUSE Security Update: Security update for MozillaFirefox, mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1229-1 Rating: important References: #932142 #933439 #935979 Cross-References: CVE-2015-2721 CVE-2015-2722 CVE-2015-2724 CVE-2015-2725 CVE-2015-2726 CVE-2015-2727 CVE-2015-2728 CVE-2015-2729 CVE-2015-2730 CVE-2015-2731 CVE-2015-2733 CVE-2015-2734 CVE-2015-2735 CVE-2015-2736 CVE-2015-2737 CVE-2015-2738 CVE-2015-2739 CVE-2015-2740 CVE-2015-2741 CVE-2015-2743 CVE-2015-4000 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: MozillaFirefox was updated to version 39.0 to fix 21 security issues. These security issues were fixed: - CVE-2015-2724/CVE-2015-2725/CVE-2015-2726: Miscellaneous memory safety hazards (bsc#935979). - CVE-2015-2727: Local files or privileged URLs in pages can be opened into new tabs (bsc#935979). - CVE-2015-2728: Type confusion in Indexed Database Manager (bsc#935979). - CVE-2015-2729: Out-of-bound read while computing an oscillator rendering range in Web Audio (bsc#935979). - CVE-2015-2731: Use-after-free in Content Policy due to microtask execution error (bsc#935979). - CVE-2015-2730: ECDSA signature validation fails to handle some signatures correctly (bsc#935979). - CVE-2015-2722/CVE-2015-2733: Use-after-free in workers while using XMLHttpRequest (bsc#935979). - CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737/CVE-2015-2738/CVE-2 015-2739/CVE-2015-2740: Vulnerabilities found through code inspection (bsc#935979). - CVE-2015-2741: Key pinning is ignored when overridable errors are encountered (bsc#935979). - CVE-2015-2743: Privilege escalation in PDF.js (bsc#935979). - CVE-2015-4000: NSS accepts export-length DHE keys with regular DHE cipher suites (bsc#935979). - CVE-2015-2721: NSS incorrectly permits skipping of ServerKeyExchange (bsc#935979). New features: - Share Hello URLs with social networks - Support for 'switch' role in ARIA 1.1 (web accessibility) - SafeBrowsing malware detection lookups enabled for downloads (Mac OS X and Linux) - Support for new Unicode 8.0 skin tone emoji - Removed support for insecure SSLv3 for network communications - Disable use of RC4 except for temporarily whitelisted hosts - NPAPI Plug-in performance improved via asynchronous initialization mozilla-nss was updated to version 3.19.2 to fix some of the security issues listed above. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-480=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-480=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): MozillaFirefox-39.0-34.2 MozillaFirefox-branding-upstream-39.0-34.2 MozillaFirefox-buildsymbols-39.0-34.2 MozillaFirefox-debuginfo-39.0-34.2 MozillaFirefox-debugsource-39.0-34.2 MozillaFirefox-devel-39.0-34.2 MozillaFirefox-translations-common-39.0-34.2 MozillaFirefox-translations-other-39.0-34.2 libfreebl3-3.19.2-16.1 libfreebl3-debuginfo-3.19.2-16.1 libsoftokn3-3.19.2-16.1 libsoftokn3-debuginfo-3.19.2-16.1 mozilla-nss-3.19.2-16.1 mozilla-nss-certs-3.19.2-16.1 mozilla-nss-certs-debuginfo-3.19.2-16.1 mozilla-nss-debuginfo-3.19.2-16.1 mozilla-nss-debugsource-3.19.2-16.1 mozilla-nss-devel-3.19.2-16.1 mozilla-nss-sysinit-3.19.2-16.1 mozilla-nss-sysinit-debuginfo-3.19.2-16.1 mozilla-nss-tools-3.19.2-16.1 mozilla-nss-tools-debuginfo-3.19.2-16.1 - openSUSE 13.2 (x86_64): libfreebl3-32bit-3.19.2-16.1 libfreebl3-debuginfo-32bit-3.19.2-16.1 libsoftokn3-32bit-3.19.2-16.1 libsoftokn3-debuginfo-32bit-3.19.2-16.1 mozilla-nss-32bit-3.19.2-16.1 mozilla-nss-certs-32bit-3.19.2-16.1 mozilla-nss-certs-debuginfo-32bit-3.19.2-16.1 mozilla-nss-debuginfo-32bit-3.19.2-16.1 mozilla-nss-sysinit-32bit-3.19.2-16.1 mozilla-nss-sysinit-debuginfo-32bit-3.19.2-16.1 - openSUSE 13.1 (i586 x86_64): MozillaFirefox-39.0-78.1 MozillaFirefox-branding-upstream-39.0-78.1 MozillaFirefox-buildsymbols-39.0-78.1 MozillaFirefox-debuginfo-39.0-78.1 MozillaFirefox-debugsource-39.0-78.1 MozillaFirefox-devel-39.0-78.1 MozillaFirefox-translations-common-39.0-78.1 MozillaFirefox-translations-other-39.0-78.1 libfreebl3-3.19.2-59.1 libfreebl3-debuginfo-3.19.2-59.1 libsoftokn3-3.19.2-59.1 libsoftokn3-debuginfo-3.19.2-59.1 mozilla-nss-3.19.2-59.1 mozilla-nss-certs-3.19.2-59.1 mozilla-nss-certs-debuginfo-3.19.2-59.1 mozilla-nss-debuginfo-3.19.2-59.1 mozilla-nss-debugsource-3.19.2-59.1 mozilla-nss-devel-3.19.2-59.1 mozilla-nss-sysinit-3.19.2-59.1 mozilla-nss-sysinit-debuginfo-3.19.2-59.1 mozilla-nss-tools-3.19.2-59.1 mozilla-nss-tools-debuginfo-3.19.2-59.1 - openSUSE 13.1 (x86_64): libfreebl3-32bit-3.19.2-59.1 libfreebl3-debuginfo-32bit-3.19.2-59.1 libsoftokn3-32bit-3.19.2-59.1 libsoftokn3-debuginfo-32bit-3.19.2-59.1 mozilla-nss-32bit-3.19.2-59.1 mozilla-nss-certs-32bit-3.19.2-59.1 mozilla-nss-certs-debuginfo-32bit-3.19.2-59.1 mozilla-nss-debuginfo-32bit-3.19.2-59.1 mozilla-nss-sysinit-32bit-3.19.2-59.1 mozilla-nss-sysinit-debuginfo-32bit-3.19.2-59.1 References: https://www.suse.com/security/cve/CVE-2015-2721.html https://www.suse.com/security/cve/CVE-2015-2722.html https://www.suse.com/security/cve/CVE-2015-2724.html https://www.suse.com/security/cve/CVE-2015-2725.html https://www.suse.com/security/cve/CVE-2015-2726.html https://www.suse.com/security/cve/CVE-2015-2727.html https://www.suse.com/security/cve/CVE-2015-2728.html https://www.suse.com/security/cve/CVE-2015-2729.html https://www.suse.com/security/cve/CVE-2015-2730.html https://www.suse.com/security/cve/CVE-2015-2731.html https://www.suse.com/security/cve/CVE-2015-2733.html https://www.suse.com/security/cve/CVE-2015-2734.html https://www.suse.com/security/cve/CVE-2015-2735.html https://www.suse.com/security/cve/CVE-2015-2736.html https://www.suse.com/security/cve/CVE-2015-2737.html https://www.suse.com/security/cve/CVE-2015-2738.html https://www.suse.com/security/cve/CVE-2015-2739.html https://www.suse.com/security/cve/CVE-2015-2740.html https://www.suse.com/security/cve/CVE-2015-2741.html https://www.suse.com/security/cve/CVE-2015-2743.html https://www.suse.com/security/cve/CVE-2015-4000.html https://bugzilla.suse.com/932142 https://bugzilla.suse.com/933439 https://bugzilla.suse.com/935979

1 0

openSUSE-SU-2015:1216-1: important: Security update for MariaDB
by opensuse-security＠opensuse.org 09 Jul '15

09 Jul '15

openSUSE Security Update: Security update for MariaDB ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1216-1 Rating: important References: #859345 #914370 #924663 #934789 #936407 #936408 #936409 Cross-References: CVE-2014-6464 CVE-2014-6469 CVE-2014-6491 CVE-2014-6494 CVE-2014-6496 CVE-2014-6500 CVE-2014-6507 CVE-2014-6555 CVE-2014-6559 CVE-2014-6568 CVE-2014-8964 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382 CVE-2015-0411 CVE-2015-0432 CVE-2015-0433 CVE-2015-0441 CVE-2015-0499 CVE-2015-0501 CVE-2015-0505 CVE-2015-2325 CVE-2015-2326 CVE-2015-2568 CVE-2015-2571 CVE-2015-2573 CVE-2015-3152 CVE-2015-4000 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 28 vulnerabilities is now available. Description: MariaDB was updated to its current minor version, fixing bugs and security issues. These updates include a fix for Logjam (CVE-2015-4000), making MariaDB work with client software that no longer allows short DH groups over SSL, as e.g. our current openssl packages. On openSUSE 13.1, MariaDB was updated to 5.5.44. On openSUSE 13.2, MariaDB was updated from 10.0.13 to 10.0.20. Please read the release notes of MariaDB https://mariadb.com/kb/en/mariadb/mariadb-10020-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10019-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10018-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10017-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10016-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10015-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-10014-release-notes/ for more information. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-479=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-479=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libmysqlclient-devel-10.0.20-2.9.1 libmysqlclient18-10.0.20-2.9.1 libmysqlclient18-debuginfo-10.0.20-2.9.1 libmysqlclient_r18-10.0.20-2.9.1 libmysqld-devel-10.0.20-2.9.1 libmysqld18-10.0.20-2.9.1 libmysqld18-debuginfo-10.0.20-2.9.1 mariadb-10.0.20-2.9.1 mariadb-bench-10.0.20-2.9.1 mariadb-bench-debuginfo-10.0.20-2.9.1 mariadb-client-10.0.20-2.9.1 mariadb-client-debuginfo-10.0.20-2.9.1 mariadb-debuginfo-10.0.20-2.9.1 mariadb-debugsource-10.0.20-2.9.1 mariadb-errormessages-10.0.20-2.9.1 mariadb-test-10.0.20-2.9.1 mariadb-test-debuginfo-10.0.20-2.9.1 mariadb-tools-10.0.20-2.9.1 mariadb-tools-debuginfo-10.0.20-2.9.1 - openSUSE 13.2 (x86_64): libmysqlclient18-32bit-10.0.20-2.9.1 libmysqlclient18-debuginfo-32bit-10.0.20-2.9.1 libmysqlclient_r18-32bit-10.0.20-2.9.1 - openSUSE 13.1 (i586 x86_64): libmysqlclient-devel-5.5.44-4.1 libmysqlclient18-5.5.44-4.1 libmysqlclient18-debuginfo-5.5.44-4.1 libmysqlclient_r18-5.5.44-4.1 libmysqld-devel-5.5.44-4.1 libmysqld18-5.5.44-4.1 libmysqld18-debuginfo-5.5.44-4.1 mariadb-5.5.44-4.1 mariadb-bench-5.5.44-4.1 mariadb-bench-debuginfo-5.5.44-4.1 mariadb-client-5.5.44-4.1 mariadb-client-debuginfo-5.5.44-4.1 mariadb-debuginfo-5.5.44-4.1 mariadb-debugsource-5.5.44-4.1 mariadb-errormessages-5.5.44-4.1 mariadb-test-5.5.44-4.1 mariadb-test-debuginfo-5.5.44-4.1 mariadb-tools-5.5.44-4.1 mariadb-tools-debuginfo-5.5.44-4.1 - openSUSE 13.1 (x86_64): libmysqlclient18-32bit-5.5.44-4.1 libmysqlclient18-debuginfo-32bit-5.5.44-4.1 libmysqlclient_r18-32bit-5.5.44-4.1 References: https://www.suse.com/security/cve/CVE-2014-6464.html https://www.suse.com/security/cve/CVE-2014-6469.html https://www.suse.com/security/cve/CVE-2014-6491.html https://www.suse.com/security/cve/CVE-2014-6494.html https://www.suse.com/security/cve/CVE-2014-6496.html https://www.suse.com/security/cve/CVE-2014-6500.html https://www.suse.com/security/cve/CVE-2014-6507.html https://www.suse.com/security/cve/CVE-2014-6555.html https://www.suse.com/security/cve/CVE-2014-6559.html https://www.suse.com/security/cve/CVE-2014-6568.html https://www.suse.com/security/cve/CVE-2014-8964.html https://www.suse.com/security/cve/CVE-2015-0374.html https://www.suse.com/security/cve/CVE-2015-0381.html https://www.suse.com/security/cve/CVE-2015-0382.html https://www.suse.com/security/cve/CVE-2015-0411.html https://www.suse.com/security/cve/CVE-2015-0432.html https://www.suse.com/security/cve/CVE-2015-0433.html https://www.suse.com/security/cve/CVE-2015-0441.html https://www.suse.com/security/cve/CVE-2015-0499.html https://www.suse.com/security/cve/CVE-2015-0501.html https://www.suse.com/security/cve/CVE-2015-0505.html https://www.suse.com/security/cve/CVE-2015-2325.html https://www.suse.com/security/cve/CVE-2015-2326.html https://www.suse.com/security/cve/CVE-2015-2568.html https://www.suse.com/security/cve/CVE-2015-2571.html https://www.suse.com/security/cve/CVE-2015-2573.html https://www.suse.com/security/cve/CVE-2015-3152.html https://www.suse.com/security/cve/CVE-2015-4000.html https://bugzilla.suse.com/859345 https://bugzilla.suse.com/914370 https://bugzilla.suse.com/924663 https://bugzilla.suse.com/934789 https://bugzilla.suse.com/936407 https://bugzilla.suse.com/936408 https://bugzilla.suse.com/936409

1 0