July 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:1193-1: Recommended update for SuSEfirewall2
by maintenance＠opensuse.org 04 Jul '15

04 Jul '15

openSUSE Recommended Update: Recommended update for SuSEfirewall2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1193-1 Rating: low References: #935716 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update of SuSEfirewall2 fixes broadcast handling for IPv6, which is now the same as for IPv4. (boo#935716) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-468=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): SuSEfirewall2-3.6.315-2.3.1 References: https://bugzilla.suse.com/935716

1 0

openSUSE-RU-2015:1192-1: moderate: Recommended update for exim
by maintenance＠opensuse.org 04 Jul '15

04 Jul '15

openSUSE Recommended Update: Recommended update for exim ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1192-1 Rating: moderate References: #922145 #926861 #935601 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: The MTA exim was updated to the current stable release 4.85 to fix a number of bugs. The following bugs were fixed: * boo#935601: exim packaging issues - removed executable permission bits from exim.service file * boo#922145: exim systemd file did not parse execution arguments from /etc/sysconfig/exim * bsc#926861: eximstats-html contained obsolete apache syntax - install fitting eximstats.conf depending on SUSE version Also contains all bugfixes from the exim 4.85 stable release. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-470=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-470=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): exim-4.85-3.3.1 exim-debuginfo-4.85-3.3.1 exim-debugsource-4.85-3.3.1 eximon-4.85-3.3.1 eximon-debuginfo-4.85-3.3.1 eximstats-html-4.85-3.3.1 - openSUSE 13.1 (i586 x86_64): exim-4.85-6.7.1 exim-debuginfo-4.85-6.7.1 exim-debugsource-4.85-6.7.1 eximon-4.85-6.7.1 eximon-debuginfo-4.85-6.7.1 eximstats-html-4.85-6.7.1 References: https://bugzilla.suse.com/922145 https://bugzilla.suse.com/926861 https://bugzilla.suse.com/935601

1 0

openSUSE-SU-2015:1191-1: moderate: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 04 Jul '15

04 Jul '15

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1191-1 Rating: moderate References: #920773 #930992 #930993 Cross-References: CVE-2015-2206 CVE-2015-3902 CVE-2015-3903 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: phpMyAdmin was updated to 4.2.13.3 to fix three security issues. The following vulnerabilities were fixed: * CVE-2015-3902: CSRF vulnerability in setup (PMASA-2015-2, boo#930992) * CVE-2015-3903: Vulnerability allowing man-in-the-middle attack (PMASA-2015-3, boo#930993) * CVE-2015-2206: Risk of BREACH attack (PMASA-2015-1, boo#920773) Also contains all upstream bug fixes in the 4.2.13 branch. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-466=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-466=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): phpMyAdmin-4.2.13.3-11.1 - openSUSE 13.1 (noarch): phpMyAdmin-4.2.13.3-31.1 References: https://www.suse.com/security/cve/CVE-2015-2206.html https://www.suse.com/security/cve/CVE-2015-3902.html https://www.suse.com/security/cve/CVE-2015-3903.html https://bugzilla.suse.com/920773 https://bugzilla.suse.com/930992 https://bugzilla.suse.com/930993

1 0

openSUSE-RU-2015:1190-1: moderate: Recommended update for at
by maintenance＠opensuse.org 04 Jul '15

04 Jul '15

openSUSE Recommended Update: Recommended update for at ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1190-1 Rating: moderate References: #889174 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for at fixes the following issue: - loadavg on Linux is a sum over all CPUs, so multiply LOADAVG_MX by the amount of CPUs when comparing to loadavg (bnc#889174) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-464=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-464=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): at-3.1.15-4.1 at-debuginfo-3.1.15-4.1 at-debugsource-3.1.15-4.1 - openSUSE 13.1 (i586 x86_64): at-3.1.13-5.17.1 at-debuginfo-3.1.13-5.17.1 at-debugsource-3.1.13-5.17.1 References: https://bugzilla.suse.com/889174

1 0

openSUSE-RU-2015:1189-1: moderate: Recommended update for less
by maintenance＠opensuse.org 04 Jul '15

04 Jul '15

openSUSE Recommended Update: Recommended update for less ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1189-1 Rating: moderate References: #915387 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for less fixes the following issue: - fix a crash in hilite_line (boo#915387) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-465=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-465=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): less-458-6.7.1 less-debuginfo-458-6.7.1 less-debugsource-458-6.7.1 - openSUSE 13.1 (i586 x86_64): less-458-2.11.1 less-debuginfo-458-2.11.1 less-debugsource-458-2.11.1 References: https://bugzilla.suse.com/915387

1 0

openSUSE-SU-2015:1180-1: important: Security update for Adobe Flash Player
by opensuse-security＠opensuse.org 03 Jul '15

03 Jul '15

openSUSE Security Update: Security update for Adobe Flash Player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1180-1 Rating: important References: #935701 Cross-References: CVE-2015-3113 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Adobe Flash Player was updated to 11.2.202.468 to fix one security issue. The following vulnerability was fixed: * CVE-2015-3113: A heap buffer overflow vulnerability could have allowed code execution (bsc#935701, APSB15-14) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-462=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): flash-player-11.2.202.468-167.1 flash-player-gnome-11.2.202.468-167.1 flash-player-kde4-11.2.202.468-167.1 References: https://www.suse.com/security/cve/CVE-2015-3113.html https://bugzilla.suse.com/935701

1 0

openSUSE-RU-2015:1172-1: moderate: Recommended update for cronie
by maintenance＠opensuse.org 02 Jul '15

02 Jul '15

openSUSE Recommended Update: Recommended update for cronie ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1172-1 Rating: moderate References: #926961 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for cronie fixes the following issue: - Sync cron.service with Factory, fixing (bnc#926961) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-460=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): cron-4.2-56.5.1 cronie-1.4.12-56.5.1 cronie-anacron-1.4.12-56.5.1 cronie-anacron-debuginfo-1.4.12-56.5.1 cronie-debuginfo-1.4.12-56.5.1 cronie-debugsource-1.4.12-56.5.1 References: https://bugzilla.suse.com/926961

1 0

openSUSE-RU-2015:1171-1: moderate: Recommended update for mtr
by maintenance＠opensuse.org 02 Jul '15

02 Jul '15

openSUSE Recommended Update: Recommended update for mtr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1171-1 Rating: moderate References: #933854 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for mtr fixes the following issue: - fix crash if '--xml' option is used [bnc#933854] Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-459=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-459=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): mtr-0.85_p20140126-3.1 mtr-debuginfo-0.85_p20140126-3.1 mtr-debugsource-0.85_p20140126-3.1 mtr-gtk-0.85_p20140126-3.1 mtr-gtk-debuginfo-0.85_p20140126-3.1 - openSUSE 13.1 (i586 x86_64): mtr-0.82-9.5.1 mtr-debuginfo-0.82-9.5.1 mtr-debugsource-0.82-9.5.1 mtr-gtk-0.82-9.5.1 mtr-gtk-debuginfo-0.82-9.5.1 References: https://bugzilla.suse.com/933854

1 0

openSUSE-RU-2015:1169-1: moderate: Recommended update for atftp
by maintenance＠opensuse.org 02 Jul '15

02 Jul '15

openSUSE Recommended Update: Recommended update for atftp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1169-1 Rating: moderate References: #864187 #921219 #932161 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This recommended update for atftp fixes the following issues: * boo#921219: Use ATFTPD_BIND_ADDRESSES in init script * boo#932161: Fix atftpd.socket * boo#864187: Add systemd support Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-458=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-458=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (x86_64): atftp-0.7.0-160.4.1 atftp-debuginfo-0.7.0-160.4.1 atftp-debugsource-0.7.0-160.4.1 - openSUSE 13.2 (i586): atftp-0.7.0-160.8.1 atftp-debuginfo-0.7.0-160.8.1 atftp-debugsource-0.7.0-160.8.1 - openSUSE 13.1 (i586 x86_64): atftp-0.7.0-157.4.1 atftp-debuginfo-0.7.0-157.4.1 atftp-debugsource-0.7.0-157.4.1 References: https://bugzilla.suse.com/864187 https://bugzilla.suse.com/921219 https://bugzilla.suse.com/932161

1 0

openSUSE-RU-2015:1168-1: moderate: Recommended update for Glabels
by maintenance＠opensuse.org 02 Jul '15

02 Jul '15

openSUSE Recommended Update: Recommended update for Glabels ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1168-1 Rating: moderate References: #921140 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Glabels was updated to 3.2.1 to fix two bugs. The following bugs were fixed: * Fixed "new label dialog" crash introduced with Gtk 3.14. * Fixed text box layout problems with center and right alignment. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-461=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): glabels-3.2.1-3.3.2 glabels-debuginfo-3.2.1-3.3.2 glabels-debugsource-3.2.1-3.3.2 glabels-devel-3.2.1-3.3.2 - openSUSE 13.2 (noarch): glabels-lang-3.2.1-3.3.2 References: https://bugzilla.suse.com/921140

1 0