August 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:1462-1: Recommended update for the GNOME-stack
by maintenance＠opensuse.org 31 Aug '15

31 Aug '15

openSUSE Recommended Update: Recommended update for the GNOME-stack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1462-1 Rating: low References: #938799 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides various fixes and improvements for the GNOME-stack: - gedit (3.14.3 -> 3.14.4): + Various bug fixes + Updated translations - gnome-initial-setup (3.14.2.1 -> 3.14.4): + Deal gracefully with absence of goa. + Updated translations. + Fix a crash in the network page. + Append ibus sources to input sources list. + Allow resizing on small screens. + Use header bars on goa dialogs. + Fix a crash in the language page. + Hide the window instead of letting gdm kill it. + Fix a crash in the keyboard page. + Updated translations. - gnome-packagekit (3.14.2 -> 3.14.3): + Bugfix: Don't use the gtk namespace for local functions. + Updated translations. - gnome-software (3.14.1 -> 3.14.7): + Show installation progress when installing apps. + Make sure apps that aren't installable are properly hidden in the category view. + Show a better UI for offline update failure dialog. + Several improvements to the sources dialog. + Fix a frequent crash in appstream plugin. + Fix a critical warning when opening the app folder dialog. + Fix a possible crash when changing the download-updates option in gsettings. + Fix a possible crash when dealing with apps that have no desktop ID associated. + Fix a crash with invalid screenshot URLs in appstream data. + Fix an issue that caused "Source: Unknown" to be shown on the details page even though the source info was available. + Update the styling of the history and sources dialogs to make sure unclickable rows don't appear clickable. + Correct the desktop file name for gnome-chess. + Hide updates UI on managed systems. + Workaround text coming up as selected in the updates dialog. + Fix a crash in the screenshot loader. + Fix a crash when installing rpms that lack description. + Wrap long descriptions in the update dialog. + Reduce network timeouts to one minute. + Avoid scaled up fonts on non-HiDPI displays. + Correctly save HiDPI images to HiDPI directories. + Scroll the contents of the error message dialog. + Correctly show the category for apps that only have a top-level category. + Fix a possible crash in the category code. + Fix a possible crash when pending apps change. + Updated translations. + Add the origin as a keyword if it's not the majority source. + Support the LOCAL AppStream icon type. + Do not fail to get popular apps if the AppStream data is invalid. + Do not show a random white line above the star rating widget. + Do not show empty app boxes if no popular results are available. + Do not try to download local web-app icons. + Fix screenshot loading with --details. + Use blue stars for the user-ratings rather than yellow/gold. - gtk3 (3.14.13 -> 3.14.15): + listbox: listen for adjustment changes. + Many coverity warning fixes. + Various other upstream-bugs fixed * bgo#741800, bgo#751401, bgo#752016,bgo#693738, bgo#738083, bgo#745957, bgo#750011, bgo#750605, bgo#750690, bgo#750870, bgo#750994, bgo#751050, bgo#751227, bgo#751443, bgo#751739, bgo#751752 + Updated translations. - nautilus (3.14.2 -> 3.14.3): + Don't create a window at start when using desktop. + Avoid unreadable names in list view. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-561=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gedit-3.14.4-11.3 gedit-debuginfo-3.14.4-11.3 gedit-debugsource-3.14.4-11.3 gedit-devel-3.14.4-11.3 gnome-initial-setup-3.14.4-7.1 gnome-initial-setup-debuginfo-3.14.4-7.1 gnome-initial-setup-debugsource-3.14.4-7.1 gnome-packagekit-3.14.3-8.1 gnome-packagekit-debuginfo-3.14.3-8.1 gnome-packagekit-debugsource-3.14.3-8.1 gnome-packagekit-extras-3.14.3-8.1 gnome-packagekit-extras-debuginfo-3.14.3-8.1 gnome-shell-search-provider-nautilus-3.14.3-15.1 gnome-software-3.14.7-12.3 gnome-software-debuginfo-3.14.7-12.3 gnome-software-debugsource-3.14.7-12.3 gtk3-debugsource-3.14.15-21.1 gtk3-devel-3.14.15-21.1 gtk3-devel-debuginfo-3.14.15-21.1 gtk3-immodule-amharic-3.14.15-21.1 gtk3-immodule-amharic-debuginfo-3.14.15-21.1 gtk3-immodule-broadway-3.14.15-21.1 gtk3-immodule-broadway-debuginfo-3.14.15-21.1 gtk3-immodule-inuktitut-3.14.15-21.1 gtk3-immodule-inuktitut-debuginfo-3.14.15-21.1 gtk3-immodule-multipress-3.14.15-21.1 gtk3-immodule-multipress-debuginfo-3.14.15-21.1 gtk3-immodule-thai-3.14.15-21.1 gtk3-immodule-thai-debuginfo-3.14.15-21.1 gtk3-immodule-vietnamese-3.14.15-21.1 gtk3-immodule-vietnamese-debuginfo-3.14.15-21.1 gtk3-immodule-xim-3.14.15-21.1 gtk3-immodule-xim-debuginfo-3.14.15-21.1 gtk3-immodules-tigrigna-3.14.15-21.1 gtk3-immodules-tigrigna-debuginfo-3.14.15-21.1 gtk3-tools-3.14.15-21.1 gtk3-tools-debuginfo-3.14.15-21.1 libgtk-3-0-3.14.15-21.1 libgtk-3-0-debuginfo-3.14.15-21.1 libnautilus-extension1-3.14.3-15.1 libnautilus-extension1-debuginfo-3.14.3-15.1 nautilus-3.14.3-15.1 nautilus-debuginfo-3.14.3-15.1 nautilus-debugsource-3.14.3-15.1 nautilus-devel-3.14.3-15.1 python3-gedit-3.14.4-11.3 typelib-1_0-Gtk-3_0-3.14.15-21.1 typelib-1_0-Nautilus-3_0-3.14.3-15.1 - openSUSE 13.2 (x86_64): gtk3-devel-32bit-3.14.15-21.1 gtk3-devel-debuginfo-32bit-3.14.15-21.1 gtk3-immodule-amharic-32bit-3.14.15-21.1 gtk3-immodule-amharic-debuginfo-32bit-3.14.15-21.1 gtk3-immodule-inuktitut-32bit-3.14.15-21.1 gtk3-immodule-inuktitut-debuginfo-32bit-3.14.15-21.1 gtk3-immodule-multipress-32bit-3.14.15-21.1 gtk3-immodule-multipress-debuginfo-32bit-3.14.15-21.1 gtk3-immodule-thai-32bit-3.14.15-21.1 gtk3-immodule-thai-debuginfo-32bit-3.14.15-21.1 gtk3-immodule-vietnamese-32bit-3.14.15-21.1 gtk3-immodule-vietnamese-debuginfo-32bit-3.14.15-21.1 gtk3-immodule-xim-32bit-3.14.15-21.1 gtk3-immodule-xim-debuginfo-32bit-3.14.15-21.1 gtk3-immodules-tigrigna-32bit-3.14.15-21.1 gtk3-immodules-tigrigna-debuginfo-32bit-3.14.15-21.1 gtk3-tools-32bit-3.14.15-21.1 gtk3-tools-debuginfo-32bit-3.14.15-21.1 libgtk-3-0-32bit-3.14.15-21.1 libgtk-3-0-debuginfo-32bit-3.14.15-21.1 libnautilus-extension1-32bit-3.14.3-15.1 libnautilus-extension1-debuginfo-32bit-3.14.3-15.1 - openSUSE 13.2 (noarch): gedit-lang-3.14.4-11.3 gnome-initial-setup-lang-3.14.4-7.1 gnome-packagekit-lang-3.14.3-8.1 gnome-software-lang-3.14.7-12.3 gtk3-branding-SLED-13.2-20.1 gtk3-branding-openSUSE-13.2-19.1 gtk3-branding-upstream-3.14.15-21.1 gtk3-data-3.14.15-21.1 gtk3-lang-3.14.15-21.1 nautilus-lang-3.14.3-15.1 References: https://bugzilla.suse.com/938799

1 0

openSUSE-OU-2015:1461-1: moderate: Optional update for xtables-geoip
by maintenance＠opensuse.org 31 Aug '15

31 Aug '15

openSUSE Optional Update: Optional update for xtables-geoip ______________________________________________________________________________ Announcement ID: openSUSE-OU-2015:1461-1 Rating: moderate References: Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: xtables-geoip was updated to the 2015.08 version of the MaxMind GeoLite database. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-564=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-564=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): xtables-geoip-2015.08-2.3.1 - openSUSE 13.1 (noarch): xtables-geoip-2015.08-2.3.1 References:

1 0

openSUSE-RU-2015:1460-1: Recommended update for ca-certificates-cacert
by maintenance＠opensuse.org 31 Aug '15

31 Aug '15

openSUSE Recommended Update: Recommended update for ca-certificates-cacert ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1460-1 Rating: low References: #86884 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides the following fix for ca-certificates-cacert: - replaced the "Class 3 PKI Key" by the current version. Changes its signature algorithm from RSA-MD5 to RSA-SHA256. (bnc#868884) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-562=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): ca-certificates-cacert-1-15.3.1 References: https://bugzilla.suse.com/86884

1 0

openSUSE-RU-2015:1459-1: Recommended update to time zone database 2015f
by maintenance＠opensuse.org 31 Aug '15

31 Aug '15

openSUSE Recommended Update: Recommended update to time zone database 2015f ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1459-1 Rating: low References: #941249 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The time zone database was updated to 2015f, incorporating the following changes: * North Korea switches to +0830 on 2015-08-15, abbreviation remains "KST". * Uruguay no longer observes DST. * Moldova starts and ends DST at 00:00 UTC, not at 01:00 UTC. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-563=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-563=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): timezone-2015f-29.1 timezone-debuginfo-2015f-29.1 timezone-debugsource-2015f-29.1 - openSUSE 13.2 (noarch): timezone-java-2015f-29.1 - openSUSE 13.1 (i586 x86_64): timezone-2015f-34.1 timezone-debuginfo-2015f-34.1 timezone-debugsource-2015f-34.1 - openSUSE 13.1 (noarch): timezone-java-2015f-34.1 References: https://bugzilla.suse.com/941249

1 0

openSUSE-RU-2015:1458-1: Recommended update for Docker, Go, golang-github-russross-blackfriday and golang-github-cpuguy83-go-md2man
by maintenance＠opensuse.org 31 Aug '15

31 Aug '15

openSUSE Recommended Update: Recommended update for Docker, Go, golang-github-russross-blackfriday and golang-github-cpuguy83-go-md2man ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1458-1 Rating: low References: #818502 #898901 #931301 #935570 #939067 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This recommended update for Docker, go, golang-github-russross-blackfriday and golang-github-cpuguy83-go-md2man provides the following fixes and improvements: - Docker + Update from version 1.6.1 to 1.7.0 * introduce go_arches for architectures that use the go compiler instead of gcc-go * enable build for aarch64 * Runtime - Experimental feature: support for out-of-process volume plugins - The userland proxy can be disabled in favor of hairpin NAT using the daemon’s `--userland-proxy=false` flag - The `exec` command supports the `-u|--user` flag to specify the new process owner - Default gateway for containers can be specified daemon-wide using the `--default-gateway` and `--default-gateway-v6` flags - The CPU CFS (Completely Fair Scheduler) quota can be set in `docker run` using `--cpu-quota` - Container block IO can be controlled in `docker run` using`--blkio-weight` - ZFS support - The `docker logs` command supports a `--since` argument - UTS namespace can be shared with the host with `docker run --uts=host` * Quality - Networking stack was entirely rewritten as part of the libnetwork effort - Engine internals refactoring - Volumes code was entirely rewritten to support the plugins effort - Sending SIGUSR1 to a daemon will dump all goroutines stacks without exiting * Build - Support ${variable:-value} and ${variable:+value} syntax for environment variables - Support resource management flags `--cgroup-parent`, `--cpu-period`, `--cpu-quota`, `--cpuset-cpus`, `--cpuset-mems` - git context changes with branches and directories - The .dockerignore file support exclusion rules * Distribution - Client support for v2 mirroring support for the official registry * Bugfixes - Firewalld is now supported and will automatically be used when available - mounting --device recursively * Build docker on PPC and S390x using gcc-go provided by gcc5 - added sysconfig.docker.ppc64le: make docker daemon start on ppc64le despite some iptables issues. To be removed soon - ignore-dockerinit-checksum.patch: applied only when building with gcc-go. Required to workaround a limitation of gcc-go - gcc-go-build-static-libgo.patch: used only when building with gcc-go, link libgo statically into docker itself. * build and install man pages + * re-enable debug_packge/debug_install_post macros from goprep() + * add ldflags to gobuild() to compute BUILD ID for debuginfo package * Revert change prohibiting mounting into /sys + Get rid of SocketUser and SocketGroup workarounds for docker.socket - Go + Update from version 1.3.3 to 1.4.2 * macros.go: - fix missing quotes in %goinstall (bsc#939067) - fix "summary-not-capitalized" - doc can't properly describe what the sub-package really is, and they're mostly source codes instead of the claimed "API, documentation, and examples". so rename to *-source. and not recommend to install them to save users' disk space. - %%go_requires should be handled automatically by golang-packaging - not recommend to install source package any more, so %%go_recommmends set to nil. - add a "WITH_FAKE_BUILDID" option to enable the fake build ID compution. - to fake build ID, you have to make sure your package has only one binary. It is nonsense that two or more nonidentical binaries have the same build ID. - re-enable debug_packge/debug_install_post macros from goprep() - add ldflags to gobuild() to compute BUILD ID for debuginfo package * cmd/ld: set alignment for the .rel.plt section on 32-bit architectures * go itself doesn't support BUILD ID yet * force Go to look for certificates only in the locations available on openSUSE and SLE. Also ensure certificates are found on SLE11 * This fixes i586 builds for openSUSE:Factory: - Too many levels of recursion in macro expansion - Failed to write file: invalid section alignment * Added Obsoletes for go-vim/emacs, they went to separate projects * Fix dangling-symlink /usr/lib64/go/src/pkg /usr/share/go/src/pkg * Support of editors has been dropped - golang-org-x-text + Initial update with version 1.4.2 * x-test holds supplementary Go libraries for text processing, many involving Unicode. - golang-org-x-net + Initial update with version 1.4.2 * x-net contains additional go.network libraries such as the websocket and SPDY protocols that are developed by the Go team but outside of the main source tree. - golang-github-russross-blackfriday + Initial update with version 1.2 * blackfriday is a Markdown processor implemented in Go. It is paranoid about its input (so you can safely feed it user-supplied data), it is fast, it supports common extensions (tables, smart punctuation substitutions, etc.), and it is safe for all utf-8 (unicode) input. * HTML output is currently supported, along with Smartypants extensions. An experimental LaTeX output engine is also included. - golang-github-cpuguy83-go-md2man + Initial update with version 1.0.2 * Tool to converts markdown into man pages Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-560=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): go-1.4.2-12.1 go-debuginfo-1.4.2-12.1 go-debugsource-1.4.2-12.1 go-doc-1.4.2-12.1 golang-github-cpuguy83-go-md2man-1.0.2+git20150617.e69ac41-2.2 golang-github-cpuguy83-go-md2man-debuginfo-1.0.2+git20150617.e69ac41-2.2 golang-github-cpuguy83-go-md2man-source-1.0.2+git20150617.e69ac41-2.2 golang-github-russross-blackfriday-1.2.0+git20150720.8cec3a8-2.3 golang-github-russross-blackfriday-source-1.2.0+git20150720.8cec3a8-2.3 golang-github-shurcool-sanitized_anchor_name-0.0.0+git20150514.11a20b7-2.2 golang-github-shurcool-sanitized_anchor_name-source-0.0.0+git20150514.11a20b7-2.2 golang-org-x-net-1.4.2+git20150629.d9558e5-2.3 golang-org-x-net-source-1.4.2+git20150629.d9558e5-2.3 golang-org-x-text-1.4.2+git20150710.7c0e16d-2.2 golang-org-x-text-debuginfo-1.4.2+git20150710.7c0e16d-2.2 golang-org-x-text-source-1.4.2+git20150710.7c0e16d-2.2 golang-packaging-6-2.1 - openSUSE 13.2 (x86_64): docker-1.7.1-34.3 docker-debuginfo-1.7.1-34.3 docker-debugsource-1.7.1-34.3 - openSUSE 13.2 (noarch): docker-bash-completion-1.7.1-34.3 docker-test-1.7.1-34.3 docker-zsh-completion-1.7.1-34.3 References: https://bugzilla.suse.com/818502 https://bugzilla.suse.com/898901 https://bugzilla.suse.com/931301 https://bugzilla.suse.com/935570 https://bugzilla.suse.com/939067

1 0

openSUSE-SU-2015:1454-1: moderate: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 28 Aug '15

28 Aug '15

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1454-1 Rating: moderate References: #940806 Cross-References: CVE-2015-4473 CVE-2015-4475 CVE-2015-4478 CVE-2015-4479 CVE-2015-4480 CVE-2015-4481 CVE-2015-4482 CVE-2015-4484 CVE-2015-4485 CVE-2015-4486 CVE-2015-4487 CVE-2015-4488 CVE-2015-4489 CVE-2015-4491 CVE-2015-4492 CVE-2015-4493 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 16 vulnerabilities is now available. Description: This update to Thunderbird 38.2.0 fixes the following issues (bnc#940806): * MFSA 2015-79/CVE-2015-4473 Miscellaneous memory safety hazards * MFSA 2015-80/CVE-2015-4475 (bmo#1175396) Out-of-bounds read with malformed MP3 file * MFSA 2015-82/CVE-2015-4478 (bmo#1105914) Redefinition of non-configurable JavaScript object properties * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493 Overflow issues in libstagefright * MFSA 2015-84/CVE-2015-4481 (bmo1171518) Arbitrary file overwriting through Mozilla Maintenance Service with hard links (only affected Windows) * MFSA 2015-85/CVE-2015-4482 (bmo#1184500) Out-of-bounds write with Updater and malicious MAR file (does not affect openSUSE RPM packages which do not ship the updater) * MFSA 2015-87/CVE-2015-4484 (bmo#1171540) Crash when using shared memory in JavaScript * MFSA 2015-88/CVE-2015-4491 (bmo#1184009) Heap overflow in gdk-pixbuf when scaling bitmap images * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148) Buffer overflows on Libvpx when decoding WebM video * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489 Vulnerabilities found through code inspection * MFSA 2015-92/CVE-2015-4492 (bmo#1185820) Use-after-free in XMLHttpRequest with shared workers Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-558=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): MozillaThunderbird-38.2.0-70.60.2 MozillaThunderbird-buildsymbols-38.2.0-70.60.2 MozillaThunderbird-debuginfo-38.2.0-70.60.2 MozillaThunderbird-debugsource-38.2.0-70.60.2 MozillaThunderbird-devel-38.2.0-70.60.2 MozillaThunderbird-translations-common-38.2.0-70.60.2 MozillaThunderbird-translations-other-38.2.0-70.60.2 References: https://www.suse.com/security/cve/CVE-2015-4473.html https://www.suse.com/security/cve/CVE-2015-4475.html https://www.suse.com/security/cve/CVE-2015-4478.html https://www.suse.com/security/cve/CVE-2015-4479.html https://www.suse.com/security/cve/CVE-2015-4480.html https://www.suse.com/security/cve/CVE-2015-4481.html https://www.suse.com/security/cve/CVE-2015-4482.html https://www.suse.com/security/cve/CVE-2015-4484.html https://www.suse.com/security/cve/CVE-2015-4485.html https://www.suse.com/security/cve/CVE-2015-4486.html https://www.suse.com/security/cve/CVE-2015-4487.html https://www.suse.com/security/cve/CVE-2015-4488.html https://www.suse.com/security/cve/CVE-2015-4489.html https://www.suse.com/security/cve/CVE-2015-4491.html https://www.suse.com/security/cve/CVE-2015-4492.html https://www.suse.com/security/cve/CVE-2015-4493.html https://bugzilla.suse.com/940806

1 0

openSUSE-SU-2015:1453-1: moderate: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 28 Aug '15

28 Aug '15

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1453-1 Rating: moderate References: #940806 Cross-References: CVE-2015-4473 CVE-2015-4475 CVE-2015-4478 CVE-2015-4479 CVE-2015-4480 CVE-2015-4481 CVE-2015-4482 CVE-2015-4484 CVE-2015-4485 CVE-2015-4486 CVE-2015-4487 CVE-2015-4488 CVE-2015-4489 CVE-2015-4491 CVE-2015-4492 CVE-2015-4493 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 16 vulnerabilities is now available. Description: This update to Thunderbird 38.2.0 fixes the following issues (bnc#940806): * MFSA 2015-79/CVE-2015-4473 Miscellaneous memory safety hazards * MFSA 2015-80/CVE-2015-4475 (bmo#1175396) Out-of-bounds read with malformed MP3 file * MFSA 2015-82/CVE-2015-4478 (bmo#1105914) Redefinition of non-configurable JavaScript object properties * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493 Overflow issues in libstagefright * MFSA 2015-84/CVE-2015-4481 (bmo1171518) Arbitrary file overwriting through Mozilla Maintenance Service with hard links (only affected Windows) * MFSA 2015-85/CVE-2015-4482 (bmo#1184500) Out-of-bounds write with Updater and malicious MAR file (does not affect openSUSE RPM packages which do not ship the updater) * MFSA 2015-87/CVE-2015-4484 (bmo#1171540) Crash when using shared memory in JavaScript * MFSA 2015-88/CVE-2015-4491 (bmo#1184009) Heap overflow in gdk-pixbuf when scaling bitmap images * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148) Buffer overflows on Libvpx when decoding WebM video * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489 Vulnerabilities found through code inspection * MFSA 2015-92/CVE-2015-4492 (bmo#1185820) Use-after-free in XMLHttpRequest with shared workers Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-559=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): MozillaThunderbird-38.2.0-25.2 MozillaThunderbird-buildsymbols-38.2.0-25.2 MozillaThunderbird-debuginfo-38.2.0-25.2 MozillaThunderbird-debugsource-38.2.0-25.2 MozillaThunderbird-devel-38.2.0-25.2 MozillaThunderbird-translations-common-38.2.0-25.2 MozillaThunderbird-translations-other-38.2.0-25.2 References: https://www.suse.com/security/cve/CVE-2015-4473.html https://www.suse.com/security/cve/CVE-2015-4475.html https://www.suse.com/security/cve/CVE-2015-4478.html https://www.suse.com/security/cve/CVE-2015-4479.html https://www.suse.com/security/cve/CVE-2015-4480.html https://www.suse.com/security/cve/CVE-2015-4481.html https://www.suse.com/security/cve/CVE-2015-4482.html https://www.suse.com/security/cve/CVE-2015-4484.html https://www.suse.com/security/cve/CVE-2015-4485.html https://www.suse.com/security/cve/CVE-2015-4486.html https://www.suse.com/security/cve/CVE-2015-4487.html https://www.suse.com/security/cve/CVE-2015-4488.html https://www.suse.com/security/cve/CVE-2015-4489.html https://www.suse.com/security/cve/CVE-2015-4491.html https://www.suse.com/security/cve/CVE-2015-4492.html https://www.suse.com/security/cve/CVE-2015-4493.html https://bugzilla.suse.com/940806

1 0

openSUSE-SU-2015:1452-1: moderate: Security update for ansible
by opensuse-security＠opensuse.org 28 Aug '15

28 Aug '15

openSUSE Security Update: Security update for ansible ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1452-1 Rating: moderate References: #941863 Cross-References: CVE-2015-3908 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - Fix CVE-2015-3908 to remove tabs and use spaces instead. This broke python parsing and in consequence Ansible. (bnc #941863) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-557=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): ansible-1.7.1-2.8.1 References: https://www.suse.com/security/cve/CVE-2015-3908.html https://bugzilla.suse.com/941863

1 0

openSUSE-RU-2015:1440-1: moderate: Recommended update for subversion
by maintenance＠opensuse.org 26 Aug '15

26 Aug '15

openSUSE Recommended Update: Recommended update for subversion ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1440-1 Rating: moderate References: #942819 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Apache Subversion was updated to fix one packaging bug introduced in a previous update. The following bug was fixed: * boo#942819: subversion would cause a large number of new packages to be recommended for installation in minimal installs due to new Recommendation of subversion-password-store Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-556=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.8.14-2.20.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.8.14-2.20.1 libsvn_auth_kwallet-1-0-1.8.14-2.20.1 libsvn_auth_kwallet-1-0-debuginfo-1.8.14-2.20.1 subversion-1.8.14-2.20.1 subversion-debuginfo-1.8.14-2.20.1 subversion-debugsource-1.8.14-2.20.1 subversion-devel-1.8.14-2.20.1 subversion-perl-1.8.14-2.20.1 subversion-perl-debuginfo-1.8.14-2.20.1 subversion-python-1.8.14-2.20.1 subversion-python-ctypes-1.8.14-2.20.1 subversion-python-debuginfo-1.8.14-2.20.1 subversion-ruby-1.8.14-2.20.1 subversion-ruby-debuginfo-1.8.14-2.20.1 subversion-server-1.8.14-2.20.1 subversion-server-debuginfo-1.8.14-2.20.1 subversion-tools-1.8.14-2.20.1 subversion-tools-debuginfo-1.8.14-2.20.1 - openSUSE 13.2 (noarch): subversion-bash-completion-1.8.14-2.20.1 References: https://bugzilla.suse.com/942819

1 0

openSUSE-SU-2015:1429-1: moderate: Security update for xfsprogs
by opensuse-security＠opensuse.org 24 Aug '15

24 Aug '15

openSUSE Security Update: Security update for xfsprogs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1429-1 Rating: moderate References: #939367 Cross-References: CVE-2012-2150 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: xfsprogs was updated to fix one security vulnerability and bugs. - Handle unwanted data disclosure in xfs_metadump (bsc#939367, CVE-2012-2150) - Fix definition of leaf attribute block to avoid gcc optimization xfsprogs-fix-leaf-block-definition Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-555=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-555=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xfsprogs-3.2.1-2.3.1 xfsprogs-debuginfo-3.2.1-2.3.1 xfsprogs-debugsource-3.2.1-2.3.1 xfsprogs-devel-3.2.1-2.3.1 - openSUSE 13.1 (i586 x86_64): xfsprogs-3.1.11-2.3.1 xfsprogs-debuginfo-3.1.11-2.3.1 xfsprogs-debugsource-3.1.11-2.3.1 xfsprogs-devel-3.1.11-2.3.1 References: https://www.suse.com/security/cve/CVE-2012-2150.html https://bugzilla.suse.com/939367

1 0

openSUSE-SU-2015:1428-1: Security update for wireshark
by opensuse-security＠opensuse.org 24 Aug '15

24 Aug '15

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1428-1 Rating: low References: #941500 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Wireshark was updated to fix several security vulnerabilities and bugs. - Wireshark 1.12.7 [boo#941500] The following vulnerabilities have been fixed: * Wireshark could crash when adding an item to the protocol tree. wnpa-sec-2015-21 * Wireshark could attempt to free invalid memory. wnpa-sec-2015-22 * Wireshark could crash when searching for a protocol dissector. wnpa-sec-2015-23 * The ZigBee dissector could crash. wnpa-sec-2015-24 * The GSM RLC/MAC dissector could go into an infinite loop. wnpa-sec-2015-25 * The WaveAgent dissector could crash. wnpa-sec-2015-26 * The OpenFlow dissector could go into an infinite loop. wnpa-sec-2015-27 * Wireshark could crash due to invalid ptvcursor length checking. wnpa-sec-2015-28 * The WCCP dissector could crash. wnpa-sec-2015-29 * Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-554=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): wireshark-1.12.7-21.1 wireshark-debuginfo-1.12.7-21.1 wireshark-debugsource-1.12.7-21.1 wireshark-devel-1.12.7-21.1 wireshark-ui-gtk-1.12.7-21.1 wireshark-ui-gtk-debuginfo-1.12.7-21.1 wireshark-ui-qt-1.12.7-21.1 wireshark-ui-qt-debuginfo-1.12.7-21.1 References: https://bugzilla.suse.com/941500

1 0

openSUSE-RU-2015:1422-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 21 Aug '15

21 Aug '15

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1422-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update is a rebuild of the virtualbox kmps to match the recently released kernel update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-553=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): python-virtualbox-4.3.30-20.1 python-virtualbox-debuginfo-4.3.30-20.1 virtualbox-4.3.30-20.1 virtualbox-debuginfo-4.3.30-20.1 virtualbox-debugsource-4.3.30-20.1 virtualbox-devel-4.3.30-20.1 virtualbox-guest-kmp-default-4.3.30_k3.16.7_24-20.1 virtualbox-guest-kmp-default-debuginfo-4.3.30_k3.16.7_24-20.1 virtualbox-guest-kmp-desktop-4.3.30_k3.16.7_24-20.1 virtualbox-guest-kmp-desktop-debuginfo-4.3.30_k3.16.7_24-20.1 virtualbox-guest-tools-4.3.30-20.1 virtualbox-guest-tools-debuginfo-4.3.30-20.1 virtualbox-guest-x11-4.3.30-20.1 virtualbox-guest-x11-debuginfo-4.3.30-20.1 virtualbox-host-kmp-default-4.3.30_k3.16.7_24-20.1 virtualbox-host-kmp-default-debuginfo-4.3.30_k3.16.7_24-20.1 virtualbox-host-kmp-desktop-4.3.30_k3.16.7_24-20.1 virtualbox-host-kmp-desktop-debuginfo-4.3.30_k3.16.7_24-20.1 virtualbox-qt-4.3.30-20.1 virtualbox-qt-debuginfo-4.3.30-20.1 virtualbox-websrv-4.3.30-20.1 virtualbox-websrv-debuginfo-4.3.30-20.1 - openSUSE 13.2 (noarch): virtualbox-guest-desktop-icons-4.3.30-20.1 virtualbox-host-source-4.3.30-20.1 - openSUSE 13.2 (i586): virtualbox-guest-kmp-pae-4.3.30_k3.16.7_24-20.1 virtualbox-guest-kmp-pae-debuginfo-4.3.30_k3.16.7_24-20.1 virtualbox-host-kmp-pae-4.3.30_k3.16.7_24-20.1 virtualbox-host-kmp-pae-debuginfo-4.3.30_k3.16.7_24-20.1 References:

1 0

openSUSE-RU-2015:1403-1: moderate: Recommended update for freeradius-server
by maintenance＠opensuse.org 18 Aug '15

18 Aug '15

openSUSE Recommended Update: Recommended update for freeradius-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1403-1 Rating: moderate References: #912714 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for freeradius-server fixes the following issue: - Fix boo#912714: freeradius can't use ntlm_auth * Create winbind group * Add radiusd to winbind group Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-552=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-552=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): freeradius-server-3.0.3-3.11.1 freeradius-server-debuginfo-3.0.3-3.11.1 freeradius-server-debugsource-3.0.3-3.11.1 freeradius-server-devel-3.0.3-3.11.1 freeradius-server-doc-3.0.3-3.11.1 freeradius-server-krb5-3.0.3-3.11.1 freeradius-server-krb5-debuginfo-3.0.3-3.11.1 freeradius-server-ldap-3.0.3-3.11.1 freeradius-server-ldap-debuginfo-3.0.3-3.11.1 freeradius-server-libs-3.0.3-3.11.1 freeradius-server-libs-debuginfo-3.0.3-3.11.1 freeradius-server-mysql-3.0.3-3.11.1 freeradius-server-mysql-debuginfo-3.0.3-3.11.1 freeradius-server-perl-3.0.3-3.11.1 freeradius-server-perl-debuginfo-3.0.3-3.11.1 freeradius-server-postgresql-3.0.3-3.11.1 freeradius-server-postgresql-debuginfo-3.0.3-3.11.1 freeradius-server-python-3.0.3-3.11.1 freeradius-server-python-debuginfo-3.0.3-3.11.1 freeradius-server-sqlite-3.0.3-3.11.1 freeradius-server-sqlite-debuginfo-3.0.3-3.11.1 freeradius-server-utils-3.0.3-3.11.1 freeradius-server-utils-debuginfo-3.0.3-3.11.1 - openSUSE 13.1 (i586 x86_64): freeradius-server-2.2.0-7.11.1 freeradius-server-debuginfo-2.2.0-7.11.1 freeradius-server-debugsource-2.2.0-7.11.1 freeradius-server-devel-2.2.0-7.11.1 freeradius-server-dialupadmin-2.2.0-7.11.1 freeradius-server-doc-2.2.0-7.11.1 freeradius-server-libs-2.2.0-7.11.1 freeradius-server-libs-debuginfo-2.2.0-7.11.1 freeradius-server-utils-2.2.0-7.11.1 freeradius-server-utils-debuginfo-2.2.0-7.11.1 References: https://bugzilla.suse.com/912714

1 0

openSUSE-RU-2015:1402-1: moderate: Recommended update for alsa-utils
by maintenance＠opensuse.org 18 Aug '15

18 Aug '15

openSUSE Recommended Update: Recommended update for alsa-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1402-1 Rating: moderate References: #940950 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for alsa-utils fixes the following issue: - Suppress alsactl invocation on systems without sound cards (bsc#940950) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-551=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): alsa-utils-1.0.28-5.6.1 alsa-utils-debuginfo-1.0.28-5.6.1 alsa-utils-debugsource-1.0.28-5.6.1 References: https://bugzilla.suse.com/940950

1 0

openSUSE-SU-2015:1401-1: moderate: Security update for subversion
by opensuse-security＠opensuse.org 18 Aug '15

18 Aug '15

openSUSE Security Update: Security update for subversion ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1401-1 Rating: moderate References: #939514 #939517 Cross-References: CVE-2015-3184 CVE-2015-3187 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: subversion was updated to version 1.8.14 to fix two security issues. These security issues were fixed: - CVE-2015-3187: Information leak (only paths) that were hidden by path-based authz (bsc#939517). - CVE-2015-3184: Information leak in mixed anonymous/authenticated httpd (dav) configurations (bsc#939514). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-549=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-549=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.8.14-2.17.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.8.14-2.17.1 libsvn_auth_kwallet-1-0-1.8.14-2.17.1 libsvn_auth_kwallet-1-0-debuginfo-1.8.14-2.17.1 subversion-1.8.14-2.17.1 subversion-debuginfo-1.8.14-2.17.1 subversion-debugsource-1.8.14-2.17.1 subversion-devel-1.8.14-2.17.1 subversion-perl-1.8.14-2.17.1 subversion-perl-debuginfo-1.8.14-2.17.1 subversion-python-1.8.14-2.17.1 subversion-python-ctypes-1.8.14-2.17.1 subversion-python-debuginfo-1.8.14-2.17.1 subversion-ruby-1.8.14-2.17.1 subversion-ruby-debuginfo-1.8.14-2.17.1 subversion-server-1.8.14-2.17.1 subversion-server-debuginfo-1.8.14-2.17.1 subversion-tools-1.8.14-2.17.1 subversion-tools-debuginfo-1.8.14-2.17.1 - openSUSE 13.2 (noarch): subversion-bash-completion-1.8.14-2.17.1 - openSUSE 13.1 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.8.14-2.39.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.8.14-2.39.1 libsvn_auth_kwallet-1-0-1.8.14-2.39.1 libsvn_auth_kwallet-1-0-debuginfo-1.8.14-2.39.1 subversion-1.8.14-2.39.1 subversion-debuginfo-1.8.14-2.39.1 subversion-debugsource-1.8.14-2.39.1 subversion-devel-1.8.14-2.39.1 subversion-perl-1.8.14-2.39.1 subversion-perl-debuginfo-1.8.14-2.39.1 subversion-python-1.8.14-2.39.1 subversion-python-debuginfo-1.8.14-2.39.1 subversion-ruby-1.8.14-2.39.1 subversion-ruby-debuginfo-1.8.14-2.39.1 subversion-server-1.8.14-2.39.1 subversion-server-debuginfo-1.8.14-2.39.1 subversion-tools-1.8.14-2.39.1 subversion-tools-debuginfo-1.8.14-2.39.1 - openSUSE 13.1 (noarch): subversion-bash-completion-1.8.14-2.39.1 References: https://www.suse.com/security/cve/CVE-2015-3184.html https://www.suse.com/security/cve/CVE-2015-3187.html https://bugzilla.suse.com/939514 https://bugzilla.suse.com/939517

1 0

openSUSE-SU-2015:1400-1: moderate: Security update for virtualbox
by opensuse-security＠opensuse.org 18 Aug '15

18 Aug '15

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1400-1 Rating: moderate References: #925663 #935900 #938408 Cross-References: CVE-2015-2594 CVE-2015-3456 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: - Version bump to 4.2.32 bnc#938408 CVE-2015-2594 * Storage: fixed a crash when taking snapshots (4.2.30 regression) * ExtPack: don't fail if the TMP directory contains non-latin1 characters (bug #14159) * Main: implemented dedicated event processing queue * Linux hosts: fixed a bug which made the netfilter driver ignore certain events (bug #12264) Also included from Version bump to 4.2.30 bnc#935900 CVE-2015-3456: * Various small fixes here and there - Fix the multiinstall on kernel modules to avoid conflicts bnc#925663 - Drop smap.diff fails to apply to the latest release Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-550=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-550=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): python-virtualbox-4.3.30-17.1 python-virtualbox-debuginfo-4.3.30-17.1 virtualbox-4.3.30-17.1 virtualbox-debuginfo-4.3.30-17.1 virtualbox-debugsource-4.3.30-17.1 virtualbox-devel-4.3.30-17.1 virtualbox-guest-kmp-default-4.3.30_k3.16.7_21-17.1 virtualbox-guest-kmp-default-debuginfo-4.3.30_k3.16.7_21-17.1 virtualbox-guest-kmp-desktop-4.3.30_k3.16.7_21-17.1 virtualbox-guest-kmp-desktop-debuginfo-4.3.30_k3.16.7_21-17.1 virtualbox-guest-tools-4.3.30-17.1 virtualbox-guest-tools-debuginfo-4.3.30-17.1 virtualbox-guest-x11-4.3.30-17.1 virtualbox-guest-x11-debuginfo-4.3.30-17.1 virtualbox-host-kmp-default-4.3.30_k3.16.7_21-17.1 virtualbox-host-kmp-default-debuginfo-4.3.30_k3.16.7_21-17.1 virtualbox-host-kmp-desktop-4.3.30_k3.16.7_21-17.1 virtualbox-host-kmp-desktop-debuginfo-4.3.30_k3.16.7_21-17.1 virtualbox-qt-4.3.30-17.1 virtualbox-qt-debuginfo-4.3.30-17.1 virtualbox-websrv-4.3.30-17.1 virtualbox-websrv-debuginfo-4.3.30-17.1 - openSUSE 13.2 (noarch): virtualbox-guest-desktop-icons-4.3.30-17.1 virtualbox-host-source-4.3.30-17.1 - openSUSE 13.2 (i586): virtualbox-guest-kmp-pae-4.3.30_k3.16.7_21-17.1 virtualbox-guest-kmp-pae-debuginfo-4.3.30_k3.16.7_21-17.1 virtualbox-host-kmp-pae-4.3.30_k3.16.7_21-17.1 virtualbox-host-kmp-pae-debuginfo-4.3.30_k3.16.7_21-17.1 - openSUSE 13.1 (i586 x86_64): python-virtualbox-4.2.32-2.35.1 python-virtualbox-debuginfo-4.2.32-2.35.1 virtualbox-4.2.32-2.35.1 virtualbox-debuginfo-4.2.32-2.35.1 virtualbox-debugsource-4.2.32-2.35.1 virtualbox-devel-4.2.32-2.35.1 virtualbox-guest-kmp-default-4.2.32_k3.11.10_29-2.35.1 virtualbox-guest-kmp-default-debuginfo-4.2.32_k3.11.10_29-2.35.1 virtualbox-guest-kmp-desktop-4.2.32_k3.11.10_29-2.35.1 virtualbox-guest-kmp-desktop-debuginfo-4.2.32_k3.11.10_29-2.35.1 virtualbox-guest-tools-4.2.32-2.35.1 virtualbox-guest-tools-debuginfo-4.2.32-2.35.1 virtualbox-guest-x11-4.2.32-2.35.1 virtualbox-guest-x11-debuginfo-4.2.32-2.35.1 virtualbox-host-kmp-default-4.2.32_k3.11.10_29-2.35.1 virtualbox-host-kmp-default-debuginfo-4.2.32_k3.11.10_29-2.35.1 virtualbox-host-kmp-desktop-4.2.32_k3.11.10_29-2.35.1 virtualbox-host-kmp-desktop-debuginfo-4.2.32_k3.11.10_29-2.35.1 virtualbox-qt-4.2.32-2.35.1 virtualbox-qt-debuginfo-4.2.32-2.35.1 virtualbox-websrv-4.2.32-2.35.1 virtualbox-websrv-debuginfo-4.2.32-2.35.1 - openSUSE 13.1 (noarch): virtualbox-host-source-4.2.32-2.35.1 - openSUSE 13.1 (i586): virtualbox-guest-kmp-pae-4.2.32_k3.11.10_29-2.35.1 virtualbox-guest-kmp-pae-debuginfo-4.2.32_k3.11.10_29-2.35.1 virtualbox-host-kmp-pae-4.2.32_k3.11.10_29-2.35.1 virtualbox-host-kmp-pae-debuginfo-4.2.32_k3.11.10_29-2.35.1 References: https://www.suse.com/security/cve/CVE-2015-2594.html https://www.suse.com/security/cve/CVE-2015-3456.html https://bugzilla.suse.com/925663 https://bugzilla.suse.com/935900 https://bugzilla.suse.com/938408

1 0

openSUSE-SU-2015:1391-1: critical: Security update for flash-player
by opensuse-security＠opensuse.org 14 Aug '15

14 Aug '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1391-1 Rating: critical References: #941239 Cross-References: CVE-2015-3107 CVE-2015-5124 CVE-2015-5125 CVE-2015-5127 CVE-2015-5128 CVE-2015-5129 CVE-2015-5130 CVE-2015-5131 CVE-2015-5132 CVE-2015-5133 CVE-2015-5134 CVE-2015-5539 CVE-2015-5540 CVE-2015-5541 CVE-2015-5544 CVE-2015-5545 CVE-2015-5546 CVE-2015-5547 CVE-2015-5548 CVE-2015-5549 CVE-2015-5550 CVE-2015-5551 CVE-2015-5552 CVE-2015-5553 CVE-2015-5554 CVE-2015-5555 CVE-2015-5556 CVE-2015-5557 CVE-2015-5558 CVE-2015-5559 CVE-2015-5560 CVE-2015-5561 CVE-2015-5562 CVE-2015-5563 Affected Products: openSUSE 13.2:NonFree ______________________________________________________________________________ An update that fixes 34 vulnerabilities is now available. Description: - Security update to 11.2.202.508 (bsc#941239): * APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5550, CVE-2015-5551, CVE-2015-5552, CVE-2015-5553, CVE-2015-5554, CVE-2015-5555, CVE-2015-5556, CVE-2015-5557, CVE-2015-5558, CVE-2015-5559, CVE-2015-5560, CVE-2015-5561, CVE-2015-5562, CVE-2015-5563 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2:NonFree: zypper in -t patch openSUSE-2015-546=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2:NonFree (i586 x86_64): flash-player-11.2.202.508-2.67.1 flash-player-gnome-11.2.202.508-2.67.1 flash-player-kde4-11.2.202.508-2.67.1 References: https://www.suse.com/security/cve/CVE-2015-3107.html https://www.suse.com/security/cve/CVE-2015-5124.html https://www.suse.com/security/cve/CVE-2015-5125.html https://www.suse.com/security/cve/CVE-2015-5127.html https://www.suse.com/security/cve/CVE-2015-5128.html https://www.suse.com/security/cve/CVE-2015-5129.html https://www.suse.com/security/cve/CVE-2015-5130.html https://www.suse.com/security/cve/CVE-2015-5131.html https://www.suse.com/security/cve/CVE-2015-5132.html https://www.suse.com/security/cve/CVE-2015-5133.html https://www.suse.com/security/cve/CVE-2015-5134.html https://www.suse.com/security/cve/CVE-2015-5539.html https://www.suse.com/security/cve/CVE-2015-5540.html https://www.suse.com/security/cve/CVE-2015-5541.html https://www.suse.com/security/cve/CVE-2015-5544.html https://www.suse.com/security/cve/CVE-2015-5545.html https://www.suse.com/security/cve/CVE-2015-5546.html https://www.suse.com/security/cve/CVE-2015-5547.html https://www.suse.com/security/cve/CVE-2015-5548.html https://www.suse.com/security/cve/CVE-2015-5549.html https://www.suse.com/security/cve/CVE-2015-5550.html https://www.suse.com/security/cve/CVE-2015-5551.html https://www.suse.com/security/cve/CVE-2015-5552.html https://www.suse.com/security/cve/CVE-2015-5553.html https://www.suse.com/security/cve/CVE-2015-5554.html https://www.suse.com/security/cve/CVE-2015-5555.html https://www.suse.com/security/cve/CVE-2015-5556.html https://www.suse.com/security/cve/CVE-2015-5557.html https://www.suse.com/security/cve/CVE-2015-5558.html https://www.suse.com/security/cve/CVE-2015-5559.html https://www.suse.com/security/cve/CVE-2015-5560.html https://www.suse.com/security/cve/CVE-2015-5561.html https://www.suse.com/security/cve/CVE-2015-5562.html https://www.suse.com/security/cve/CVE-2015-5563.html https://bugzilla.suse.com/941239

1 0

openSUSE-SU-2015:1390-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 14 Aug '15

14 Aug '15

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1390-1 Rating: important References: #940806 #940918 Cross-References: CVE-2015-4473 CVE-2015-4474 CVE-2015-4475 CVE-2015-4477 CVE-2015-4478 CVE-2015-4479 CVE-2015-4480 CVE-2015-4481 CVE-2015-4482 CVE-2015-4483 CVE-2015-4484 CVE-2015-4485 CVE-2015-4486 CVE-2015-4487 CVE-2015-4488 CVE-2015-4489 CVE-2015-4490 CVE-2015-4491 CVE-2015-4492 CVE-2015-4493 CVE-2015-4495 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: - update to Firefox 40.0 (bnc#940806) * Added protection against unwanted software downloads * Suggested Tiles show sites of interest, based on categories from your recent browsing history * Hello allows adding a link to conversations to provide context on what the conversation will be about * New style for add-on manager based on the in-content preferences style * Improved scrolling, graphics, and video playback performance with off main thread compositing (GNU/Linux only) * Graphic blocklist mechanism improved: Firefox version ranges can be specified, limiting the number of devices blocked security fixes: * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474 Miscellaneous memory safety hazards * MFSA 2015-80/CVE-2015-4475 (bmo#1175396) Out-of-bounds read with malformed MP3 file * MFSA 2015-81/CVE-2015-4477 (bmo#1179484) Use-after-free in MediaStream playback * MFSA 2015-82/CVE-2015-4478 (bmo#1105914) Redefinition of non-configurable JavaScript object properties * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493 Overflow issues in libstagefright * MFSA 2015-84/CVE-2015-4481 (bmo1171518) Arbitrary file overwriting through Mozilla Maintenance Service with hard links (only affected Windows) * MFSA 2015-85/CVE-2015-4482 (bmo#1184500) Out-of-bounds write with Updater and malicious MAR file (does not affect openSUSE RPM packages which do not ship the updater) * MFSA 2015-86/CVE-2015-4483 (bmo#1148732) Feed protocol with POST bypasses mixed content protections * MFSA 2015-87/CVE-2015-4484 (bmo#1171540) Crash when using shared memory in JavaScript * MFSA 2015-88/CVE-2015-4491 (bmo#1184009) Heap overflow in gdk-pixbuf when scaling bitmap images * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148) Buffer overflows on Libvpx when decoding WebM video * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489 Vulnerabilities found through code inspection * MFSA 2015-91/CVE-2015-4490 (bmo#1086999) Mozilla Content Security Policy allows for asterisk wildcards in violation of CSP specification * MFSA 2015-92/CVE-2015-4492 (bmo#1185820) Use-after-free in XMLHttpRequest with shared workers - added mozilla-no-stdcxx-check.patch - removed obsolete patches * mozilla-add-glibcxx_use_cxx11_abi.patch * firefox-multilocale-chrome.patch - rebased patches - requires version 40 of the branding package - removed browser/searchplugins/ location as it's not valid anymore - includes security update to Firefox 39.0.3 (bnc#940918) * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058) Same origin violation and local file stealing via PDF reader Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-547=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): MozillaFirefox-40.0-82.1 MozillaFirefox-branding-openSUSE-40-2.3.1 MozillaFirefox-branding-upstream-40.0-82.1 MozillaFirefox-buildsymbols-40.0-82.1 MozillaFirefox-debuginfo-40.0-82.1 MozillaFirefox-debugsource-40.0-82.1 MozillaFirefox-devel-40.0-82.1 MozillaFirefox-translations-common-40.0-82.1 MozillaFirefox-translations-other-40.0-82.1 References: https://www.suse.com/security/cve/CVE-2015-4473.html https://www.suse.com/security/cve/CVE-2015-4474.html https://www.suse.com/security/cve/CVE-2015-4475.html https://www.suse.com/security/cve/CVE-2015-4477.html https://www.suse.com/security/cve/CVE-2015-4478.html https://www.suse.com/security/cve/CVE-2015-4479.html https://www.suse.com/security/cve/CVE-2015-4480.html https://www.suse.com/security/cve/CVE-2015-4481.html https://www.suse.com/security/cve/CVE-2015-4482.html https://www.suse.com/security/cve/CVE-2015-4483.html https://www.suse.com/security/cve/CVE-2015-4484.html https://www.suse.com/security/cve/CVE-2015-4485.html https://www.suse.com/security/cve/CVE-2015-4486.html https://www.suse.com/security/cve/CVE-2015-4487.html https://www.suse.com/security/cve/CVE-2015-4488.html https://www.suse.com/security/cve/CVE-2015-4489.html https://www.suse.com/security/cve/CVE-2015-4490.html https://www.suse.com/security/cve/CVE-2015-4491.html https://www.suse.com/security/cve/CVE-2015-4492.html https://www.suse.com/security/cve/CVE-2015-4493.html https://www.suse.com/security/cve/CVE-2015-4495.html https://bugzilla.suse.com/940806 https://bugzilla.suse.com/940918

1 0

openSUSE-SU-2015:1389-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 14 Aug '15

14 Aug '15

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1389-1 Rating: important References: #940806 #940918 Cross-References: CVE-2015-4473 CVE-2015-4474 CVE-2015-4475 CVE-2015-4477 CVE-2015-4478 CVE-2015-4479 CVE-2015-4480 CVE-2015-4481 CVE-2015-4482 CVE-2015-4483 CVE-2015-4484 CVE-2015-4485 CVE-2015-4486 CVE-2015-4487 CVE-2015-4488 CVE-2015-4489 CVE-2015-4490 CVE-2015-4491 CVE-2015-4492 CVE-2015-4493 CVE-2015-4495 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: - update to Firefox 40.0 (bnc#940806) * Added protection against unwanted software downloads * Suggested Tiles show sites of interest, based on categories from your recent browsing history * Hello allows adding a link to conversations to provide context on what the conversation will be about * New style for add-on manager based on the in-content preferences style * Improved scrolling, graphics, and video playback performance with off main thread compositing (GNU/Linux only) * Graphic blocklist mechanism improved: Firefox version ranges can be specified, limiting the number of devices blocked security fixes: * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474 Miscellaneous memory safety hazards * MFSA 2015-80/CVE-2015-4475 (bmo#1175396) Out-of-bounds read with malformed MP3 file * MFSA 2015-81/CVE-2015-4477 (bmo#1179484) Use-after-free in MediaStream playback * MFSA 2015-82/CVE-2015-4478 (bmo#1105914) Redefinition of non-configurable JavaScript object properties * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493 Overflow issues in libstagefright * MFSA 2015-84/CVE-2015-4481 (bmo1171518) Arbitrary file overwriting through Mozilla Maintenance Service with hard links (only affected Windows) * MFSA 2015-85/CVE-2015-4482 (bmo#1184500) Out-of-bounds write with Updater and malicious MAR file (does not affect openSUSE RPM packages which do not ship the updater) * MFSA 2015-86/CVE-2015-4483 (bmo#1148732) Feed protocol with POST bypasses mixed content protections * MFSA 2015-87/CVE-2015-4484 (bmo#1171540) Crash when using shared memory in JavaScript * MFSA 2015-88/CVE-2015-4491 (bmo#1184009) Heap overflow in gdk-pixbuf when scaling bitmap images * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148) Buffer overflows on Libvpx when decoding WebM video * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489 Vulnerabilities found through code inspection * MFSA 2015-91/CVE-2015-4490 (bmo#1086999) Mozilla Content Security Policy allows for asterisk wildcards in violation of CSP specification * MFSA 2015-92/CVE-2015-4492 (bmo#1185820) Use-after-free in XMLHttpRequest with shared workers - added mozilla-no-stdcxx-check.patch - removed obsolete patches * mozilla-add-glibcxx_use_cxx11_abi.patch * firefox-multilocale-chrome.patch - rebased patches - requires version 40 of the branding package - removed browser/searchplugins/ location as it's not valid anymore - includes security update to Firefox 39.0.3 (bnc#940918) * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058) Same origin violation and local file stealing via PDF reader Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-548=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): MozillaFirefox-40.0-38.1 MozillaFirefox-branding-openSUSE-40-4.3.1 MozillaFirefox-branding-upstream-40.0-38.1 MozillaFirefox-buildsymbols-40.0-38.1 MozillaFirefox-debuginfo-40.0-38.1 MozillaFirefox-debugsource-40.0-38.1 MozillaFirefox-devel-40.0-38.1 MozillaFirefox-translations-common-40.0-38.1 MozillaFirefox-translations-other-40.0-38.1 References: https://www.suse.com/security/cve/CVE-2015-4473.html https://www.suse.com/security/cve/CVE-2015-4474.html https://www.suse.com/security/cve/CVE-2015-4475.html https://www.suse.com/security/cve/CVE-2015-4477.html https://www.suse.com/security/cve/CVE-2015-4478.html https://www.suse.com/security/cve/CVE-2015-4479.html https://www.suse.com/security/cve/CVE-2015-4480.html https://www.suse.com/security/cve/CVE-2015-4481.html https://www.suse.com/security/cve/CVE-2015-4482.html https://www.suse.com/security/cve/CVE-2015-4483.html https://www.suse.com/security/cve/CVE-2015-4484.html https://www.suse.com/security/cve/CVE-2015-4485.html https://www.suse.com/security/cve/CVE-2015-4486.html https://www.suse.com/security/cve/CVE-2015-4487.html https://www.suse.com/security/cve/CVE-2015-4488.html https://www.suse.com/security/cve/CVE-2015-4489.html https://www.suse.com/security/cve/CVE-2015-4490.html https://www.suse.com/security/cve/CVE-2015-4491.html https://www.suse.com/security/cve/CVE-2015-4492.html https://www.suse.com/security/cve/CVE-2015-4493.html https://www.suse.com/security/cve/CVE-2015-4495.html https://bugzilla.suse.com/940806 https://bugzilla.suse.com/940918

1 0

openSUSE-SU-2015:1388-1: critical: Security update for flash-player
by opensuse-security＠opensuse.org 14 Aug '15

14 Aug '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1388-1 Rating: critical References: #941239 Cross-References: CVE-2015-3107 CVE-2015-5124 CVE-2015-5125 CVE-2015-5127 CVE-2015-5128 CVE-2015-5129 CVE-2015-5130 CVE-2015-5131 CVE-2015-5132 CVE-2015-5133 CVE-2015-5134 CVE-2015-5539 CVE-2015-5540 CVE-2015-5541 CVE-2015-5544 CVE-2015-5545 CVE-2015-5546 CVE-2015-5547 CVE-2015-5548 CVE-2015-5549 CVE-2015-5550 CVE-2015-5551 CVE-2015-5552 CVE-2015-5553 CVE-2015-5554 CVE-2015-5555 CVE-2015-5556 CVE-2015-5557 CVE-2015-5558 CVE-2015-5559 CVE-2015-5560 CVE-2015-5561 CVE-2015-5562 CVE-2015-5563 Affected Products: openSUSE 13.1:NonFree ______________________________________________________________________________ An update that fixes 34 vulnerabilities is now available. Description: Security update to 11.2.202.508 (bsc#941239): * APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5550, CVE-2015-5551, CVE-2015-5552, CVE-2015-5553, CVE-2015-5554, CVE-2015-5555, CVE-2015-5556, CVE-2015-5557, CVE-2015-5558, CVE-2015-5559, CVE-2015-5560, CVE-2015-5561, CVE-2015-5562, CVE-2015-5563 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1:NonFree: zypper in -t patch openSUSE-2015-545=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1:NonFree (i586 x86_64): flash-player-11.2.202.508-132.1 flash-player-gnome-11.2.202.508-132.1 flash-player-kde4-11.2.202.508-132.1 References: https://www.suse.com/security/cve/CVE-2015-3107.html https://www.suse.com/security/cve/CVE-2015-5124.html https://www.suse.com/security/cve/CVE-2015-5125.html https://www.suse.com/security/cve/CVE-2015-5127.html https://www.suse.com/security/cve/CVE-2015-5128.html https://www.suse.com/security/cve/CVE-2015-5129.html https://www.suse.com/security/cve/CVE-2015-5130.html https://www.suse.com/security/cve/CVE-2015-5131.html https://www.suse.com/security/cve/CVE-2015-5132.html https://www.suse.com/security/cve/CVE-2015-5133.html https://www.suse.com/security/cve/CVE-2015-5134.html https://www.suse.com/security/cve/CVE-2015-5539.html https://www.suse.com/security/cve/CVE-2015-5540.html https://www.suse.com/security/cve/CVE-2015-5541.html https://www.suse.com/security/cve/CVE-2015-5544.html https://www.suse.com/security/cve/CVE-2015-5545.html https://www.suse.com/security/cve/CVE-2015-5546.html https://www.suse.com/security/cve/CVE-2015-5547.html https://www.suse.com/security/cve/CVE-2015-5548.html https://www.suse.com/security/cve/CVE-2015-5549.html https://www.suse.com/security/cve/CVE-2015-5550.html https://www.suse.com/security/cve/CVE-2015-5551.html https://www.suse.com/security/cve/CVE-2015-5552.html https://www.suse.com/security/cve/CVE-2015-5553.html https://www.suse.com/security/cve/CVE-2015-5554.html https://www.suse.com/security/cve/CVE-2015-5555.html https://www.suse.com/security/cve/CVE-2015-5556.html https://www.suse.com/security/cve/CVE-2015-5557.html https://www.suse.com/security/cve/CVE-2015-5558.html https://www.suse.com/security/cve/CVE-2015-5559.html https://www.suse.com/security/cve/CVE-2015-5560.html https://www.suse.com/security/cve/CVE-2015-5561.html https://www.suse.com/security/cve/CVE-2015-5562.html https://www.suse.com/security/cve/CVE-2015-5563.html https://bugzilla.suse.com/941239

1 0

openSUSE-SU-2015:1387-1: important: Security update for glibc
by opensuse-security＠opensuse.org 14 Aug '15

14 Aug '15

openSUSE Security Update: Security update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1387-1 Rating: important References: #882600 Cross-References: CVE-2014-4043 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: glibc was updated to fix one security issue. This security issue was fixed: - CVE-2014-4043: The posix_spawn_file_actions_addopen function in glibc did not copy its path argument in accordance with the POSIX specification, which allowed context-dependent attackers to trigger use-after-free vulnerabilities (bsc#882600). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-544=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): glibc-2.18-4.38.1 glibc-debuginfo-2.18-4.38.1 glibc-debugsource-2.18-4.38.1 glibc-devel-2.18-4.38.1 glibc-devel-debuginfo-2.18-4.38.1 glibc-devel-static-2.18-4.38.1 glibc-extra-2.18-4.38.1 glibc-extra-debuginfo-2.18-4.38.1 glibc-locale-2.18-4.38.1 glibc-locale-debuginfo-2.18-4.38.1 glibc-profile-2.18-4.38.1 glibc-utils-2.18-4.38.2 glibc-utils-debuginfo-2.18-4.38.2 glibc-utils-debugsource-2.18-4.38.2 nscd-2.18-4.38.1 nscd-debuginfo-2.18-4.38.1 - openSUSE 13.1 (x86_64): glibc-32bit-2.18-4.38.2 glibc-debuginfo-32bit-2.18-4.38.2 glibc-devel-32bit-2.18-4.38.2 glibc-devel-debuginfo-32bit-2.18-4.38.2 glibc-devel-static-32bit-2.18-4.38.2 glibc-locale-32bit-2.18-4.38.2 glibc-locale-debuginfo-32bit-2.18-4.38.2 glibc-profile-32bit-2.18-4.38.2 glibc-utils-32bit-2.18-4.38.2 glibc-utils-debuginfo-32bit-2.18-4.38.2 - openSUSE 13.1 (noarch): glibc-html-2.18-4.38.1 glibc-i18ndata-2.18-4.38.1 glibc-i18ndata-2.18-4.38.2 glibc-info-2.18-4.38.1 glibc-info-2.18-4.38.2 - openSUSE 13.1 (i686): glibc-2.18-4.38.2 glibc-debuginfo-2.18-4.38.2 glibc-debugsource-2.18-4.38.2 glibc-devel-2.18-4.38.2 glibc-devel-debuginfo-2.18-4.38.2 glibc-devel-static-2.18-4.38.2 glibc-extra-2.18-4.38.2 glibc-extra-debuginfo-2.18-4.38.2 glibc-locale-2.18-4.38.2 glibc-locale-debuginfo-2.18-4.38.2 glibc-obsolete-2.18-4.38.2 glibc-obsolete-debuginfo-2.18-4.38.2 glibc-profile-2.18-4.38.2 nscd-2.18-4.38.2 nscd-debuginfo-2.18-4.38.2 - openSUSE 13.1 (i586): glibc-obsolete-2.18-4.38.1 glibc-obsolete-debuginfo-2.18-4.38.1 References: https://www.suse.com/security/cve/CVE-2014-4043.html https://bugzilla.suse.com/882600

1 0

openSUSE-SU-2015:1382-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 14 Aug '15

14 Aug '15

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1382-1 Rating: important References: #907092 #907714 #915517 #916225 #919007 #919596 #921769 #922583 #925567 #925961 #927786 #928693 #929624 #930488 #930599 #931580 #932348 #932844 #933934 #934202 #934397 #934755 #935530 #935542 #935705 #935913 #937226 #938976 #939394 Cross-References: CVE-2014-9728 CVE-2014-9729 CVE-2014-9730 CVE-2014-9731 CVE-2015-1420 CVE-2015-1465 CVE-2015-2041 CVE-2015-2922 CVE-2015-3212 CVE-2015-3290 CVE-2015-3339 CVE-2015-3636 CVE-2015-4001 CVE-2015-4002 CVE-2015-4003 CVE-2015-4036 CVE-2015-4167 CVE-2015-4692 CVE-2015-4700 CVE-2015-5364 CVE-2015-5366 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves 21 vulnerabilities and has 8 fixes is now available. Description: The openSUSE 13.2 kernel was updated to receive various security and bugfixes. Following security bugs were fixed: - CVE-2015-3290: A flaw was found in the way the Linux kernels nested NMI handler and espfix64 functionalities interacted during NMI processing. A local, unprivileged user could use this flaw to crash the system or, potentially, escalate their privileges on the system. - CVE-2015-3212: A race condition flaw was found in the way the Linux kernels SCTP implementation handled Address Configuration lists when performing Address Configuration Change (ASCONF). A local attacker could use this flaw to crash the system via a race condition triggered by setting certain ASCONF options on a socket. - CVE-2015-5364: A remote denial of service (hang) via UDP flood with incorrect package checksums was fixed. (bsc#936831). - CVE-2015-5366: A remote denial of service (unexpected error returns) via UDP flood with incorrect package checksums was fixed. (bsc#936831). - CVE-2015-4700: A local user could have created a bad instruction in the JIT processed BPF code, leading to a kernel crash (bnc#935705). - CVE-2015-1420: Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel allowed local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handle_bytes value of a file handle during the execution of this function (bnc#915517). - CVE-2015-4692: The kvm_apic_has_events function in arch/x86/kvm/lapic.h in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call (bnc#935542). - CVE-2015-4167 CVE-2014-9728 CVE-2014-9730 CVE-2014-9729 CVE-2014-9731: Various problems in the UDF filesystem were fixed that could lead to crashes when mounting prepared udf filesystems. - CVE-2015-4002: drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel did not ensure that certain length values are sufficiently large, which allowed remote attackers to cause a denial of service (system crash or large loop) or possibly execute arbitrary code via a crafted packet, related to the (1) oz_usb_rx and (2) oz_usb_handle_ep_data functions (bnc#933934). - CVE-2015-4003: The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel allowed remote attackers to cause a denial of service (divide-by-zero error and system crash) via a crafted packet (bnc#933934). - CVE-2015-4001: Integer signedness error in the oz_hcd_get_desc_cnf function in drivers/staging/ozwpan/ozhcd.c in the OZWPAN driver in the Linux kernel allowed remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted packet (bnc#933934). - CVE-2015-4036: A potential memory corruption in vhost/scsi was fixed. - CVE-2015-2922: The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel allowed remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message (bnc#922583). - CVE-2015-3636: It was found that the Linux kernels ping socket implementation did not properly handle socket unhashing during spurious disconnects, which could lead to a use-after-free flaw. On x86-64 architecture systems, a local user able to create ping sockets could use this flaw to crash the system. On non-x86-64 architecture systems, a local user able to create ping sockets could use this flaw to escalate their privileges on the system. - CVE-2015-2041: net/llc/sysctl_net_llc.c in the Linux kernel used an incorrect data type in a sysctl table, which allowed local users to obtain potentially sensitive information from kernel memory or possibly have unspecified other impact by accessing a sysctl entry (bnc#919007). - CVE-2015-3339: Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel allowed local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped. - CVE-2015-1465: The IPv4 implementation in the Linux kernel did not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups in the absence of caching, which allowed remote attackers to cause a denial of service (memory consumption or system crash) via a flood of packets (bnc#916225). The following non-security bugs were fixed: - ALSA: ak411x: Fix stall in work callback (boo#934755). - ALSA: emu10k1: Emu10k2 32 bit DMA mode (boo#934755). - ALSA: emu10k1: Fix card shortname string buffer overflow (boo#934755). - ALSA: emu10k1: do not deadlock in proc-functions (boo#934755). - ALSA: emux: Fix mutex deadlock at unloading (boo#934755). - ALSA: emux: Fix mutex deadlock in OSS emulation (boo#934755). - ALSA: hda - Add AZX_DCAPS_SNOOP_OFF (and refactor snoop setup) (boo#934755). - ALSA: hda - Add Conexant codecs CX20721, CX20722, CX20723 and CX20724 (boo#934755). - ALSA: hda - Add common pin macros for ALC269 family (boo#934755). - ALSA: hda - Add dock support for ThinkPad X250 (17aa:2226) (boo#934755). - ALSA: hda - Add dock support for Thinkpad T450s (17aa:5036) (boo#934755). - ALSA: hda - Add headphone quirk for Lifebook E752 (boo#934755). - ALSA: hda - Add headset mic quirk for Dell Inspiron 5548 (boo#934755). - ALSA: hda - Add mute-LED mode control to Thinkpad (boo#934755). - ALSA: hda - Add one more node in the EAPD supporting candidate list (boo#934755). - ALSA: hda - Add pin configs for ASUS mobo with IDT 92HD73XX codec (boo#934755). - ALSA: hda - Add ultra dock support for Thinkpad X240 (boo#934755). - ALSA: hda - Add workaround for CMI8888 snoop behavior (boo#934755). - ALSA: hda - Add workaround for MacBook Air 5,2 built-in mic (boo#934755). - ALSA: hda - Disable runtime PM for Panther Point again (boo#934755). - ALSA: hda - Do not access stereo amps for mono channel widgets (boo#934755). - ALSA: hda - Fix Dock Headphone on Thinkpad X250 seen as a Line Out (boo#934755). - ALSA: hda - Fix headphone pin config for Lifebook T731 (boo#934755). - ALSA: hda - Fix noise on AMD radeon 290x controller (boo#934755). - ALSA: hda - Fix probing and stuttering on CMI8888 HD-audio controller (boo#934755). - ALSA: hda - One more Dell macine needs DELL1_MIC_NO_PRESENCE quirk (boo#934755). - ALSA: hda - One more HP machine needs to change mute led quirk (boo#934755). - ALSA: hda - Set GPIO 4 low for a few HP machines (boo#934755). - ALSA: hda - Set single_adc_amp flag for CS420x codecs (boo#934755). - ALSA: hda - Treat stereo-to-mono mix properly (boo#934755). - ALSA: hda - change three SSID quirks to one pin quirk (boo#934755). - ALSA: hda - fix "num_steps = 0" error on ALC256 (boo#934755). - ALSA: hda - fix a typo by changing mute_led_nid to cap_mute_led_nid (boo#934755). - ALSA: hda - fix headset mic detection problem for one more machine (boo#934755). - ALSA: hda - fix mute led problem for three HP laptops (boo#934755). - ALSA: hda - set proper caps for newer AMD hda audio in KB/KV (boo#934755). - ALSA: hda/realtek - ALC292 dock fix for Thinkpad L450 (boo#934755). - ALSA: hda/realtek - Add a fixup for another Acer Aspire 9420 (boo#934755). - ALSA: hda/realtek - Enable the ALC292 dock fixup on the Thinkpad T450 (boo#934755). - ALSA: hda/realtek - Fix Headphone Mic does not recording for ALC256 (boo#934755). - ALSA: hda/realtek - Make more stable to get pin sense for ALC283 (boo#934755). - ALSA: hda/realtek - Support Dell headset mode for ALC256 (boo#934755). - ALSA: hda/realtek - Support HP mute led for output and input (boo#934755). - ALSA: hda/realtek - move HP_LINE1_MIC1_LED quirk for alc282 (boo#934755). - ALSA: hda/realtek - move HP_MUTE_LED_MIC1 quirk for alc282 (boo#934755). - ALSA: hdspm - Constrain periods to 2 on older cards (boo#934755). - ALSA: pcm: Do not leave PREPARED state after draining (boo#934755). - ALSA: snd-usb: add quirks for Roland UA-22 (boo#934755). - ALSA: usb - Creative USB X-Fi Pro SB1095 volume knob support (boo#934755). - ALSA: usb-audio: Add mic volume fix quirk for Logitech Quickcam Fusion (boo#934755). - ALSA: usb-audio: Add quirk for MS LifeCam HD-3000 (boo#934755). - ALSA: usb-audio: Add quirk for MS LifeCam Studio (boo#934755). - ALSA: usb-audio: Do not attempt to get Lifecam HD-5000 sample rate (boo#934755). - ALSA: usb-audio: Do not attempt to get Microsoft Lifecam Cinema sample rate (boo#934755). - ALSA: usb-audio: add MAYA44 USB+ mixer control names (boo#934755). - ALSA: usb-audio: do not try to get Benchmark DAC1 sample rate (boo#934755). - ALSA: usb-audio: do not try to get Outlaw RR2150 sample rate (boo#934755). - ALSA: usb-audio: fix missing input volume controls in MAYA44 USB(+) (boo#934755). - Automatically Provide/Obsolete all subpackages of old flavors (bnc#925567) - Fix kABI for ak411x structs (boo#934755). - Fix kABI for snd_emu10k1 struct (boo#934755). - HID: add ALWAYS_POLL quirk for a Logitech 0xc007 (bnc#929624). - HID: add HP OEM mouse to quirk ALWAYS_POLL (bnc#929624). - HID: add quirk for PIXART OEM mouse used by HP (bnc#929624). - HID: usbhid: add always-poll quirk (bnc#929624). - HID: usbhid: add another mouse that needs QUIRK_ALWAYS_POLL (bnc#929624). - HID: usbhid: enable always-poll quirk for Elan Touchscreen (bnc#929624). - HID: usbhid: enable always-poll quirk for Elan Touchscreen 009b (bnc#929624). - HID: usbhid: enable always-poll quirk for Elan Touchscreen 0103 (bnc#929624). - HID: usbhid: enable always-poll quirk for Elan Touchscreen 016f (bnc#929624). - HID: usbhid: fix PIXART optical mouse (bnc#929624). - HID: usbhid: more mice with ALWAYS_POLL (bnc#929624). - HID: usbhid: yet another mouse with ALWAYS_POLL (bnc#929624). - HID: yet another buggy ELAN touchscreen (bnc#929624). - Input: synaptics - handle spurious release of trackstick buttons (bnc#928693). - Input: synaptics - re-route tracksticks buttons on the Lenovo 2015 series (bnc#928693). - Input: synaptics - remove TOPBUTTONPAD property for Lenovos 2015 (bnc#928693). - Input: synaptics - retrieve the extended capabilities in query $10 (bnc#928693). - NFSv4: When returning a delegation, do not reclaim an incompatible open mode (bnc#934202). - Refresh patches.xen/xen-blkfront-indirect (bsc#922235). - Update config files: extend CONFIG_DPM_WATCHDOG_TIMEOUT to 60 (bnc#934397) - arm64: mm: Remove hack in mmap randomized layout Fix commit id and mainlined information - bnx2x: Fix kdump when iommu=on (bug#921769). - client MUST ignore EncryptionKeyLength if CAP_EXTENDED_SECURITY is set (bnc#932348). - config/armv7hl: Disable AMD_XGBE_PHY The AMD XGBE ethernet chip is only used on ARM64 systems. - config: disable XGBE on non-ARM hardware It is documented as being present only on AMD SoCs. - cpufreq: fix a NULL pointer dereference in __cpufreq_governor() (bsc#924664). - drm/i915/bdw: PCI IDs ending in 0xb are ULT (boo#935913). - drm/i915/chv: Remove Wait for a previous gfx force-off (boo#935913). - drm/i915/dp: only use training pattern 3 on platforms that support it (boo#935913). - drm/i915/dp: there is no audio on port A (boo#935913). - drm/i915/hsw: Fix workaround for server AUX channel clock divisor (boo#935913). - drm/i915/vlv: remove wait for previous GFX clk disable request (boo#935913). - drm/i915/vlv: save/restore the power context base reg (boo#935913). - drm/i915: Add missing MacBook Pro models with dual channel LVDS (boo#935913). - drm/i915: BDW Fix Halo PCI IDs marked as ULT (boo#935913). - drm/i915: Ban Haswell from using RCS flips (boo#935913). - drm/i915: Check obj->vma_list under the struct_mutex (boo#935913). - drm/i915: Correct the IOSF Dev_FN field for IOSF transfers (boo#935913). - drm/i915: Dell Chromebook 11 has PWM backlight (boo#935913). - drm/i915: Disable caches for Global GTT (boo#935913). - drm/i915: Do a dummy DPCD read before the actual read (bnc#907714). - drm/i915: Do not complain about stolen conflicts on gen3 (boo#935913). - drm/i915: Do not leak pages when freeing userptr objects (boo#935913). - drm/i915: Dont enable CS_PARSER_ERROR interrupts at all (boo#935913). - drm/i915: Evict CS TLBs between batches (boo#935913). - drm/i915: Fix DDC probe for passive adapters (boo#935913). - drm/i915: Fix and clean BDW PCH identification (boo#935913). - drm/i915: Force the CS stall for invalidate flushes (boo#935913). - drm/i915: Handle failure to kick out a conflicting fb driver (boo#935913). - drm/i915: Ignore SURFLIVE and flip counter when the GPU gets reset (boo#935913). - drm/i915: Ignore VBT backlight check on Macbook 2, 1 (boo#935913). - drm/i915: Invalidate media caches on gen7 (boo#935913). - drm/i915: Kick fbdev before vgacon (boo#935913). - drm/i915: Only fence tiled region of object (boo#935913). - drm/i915: Only warn the first time we attempt to mmio whilst suspended (boo#935913). - drm/i915: Unlock panel even when LVDS is disabled (boo#935913). - drm/i915: Use IS_HSW_ULT() in a HSW specific code path (boo#935913). - drm/i915: cope with large i2c transfers (boo#935913). - drm/i915: do not warn if backlight unexpectedly enabled (boo#935913). - drm/i915: drop WaSetupGtModeTdRowDispatch:snb (boo#935913). - drm/i915: save/restore GMBUS freq across suspend/resume on gen4 (boo#935913). - drm/i915: vlv: fix IRQ masking when uninstalling interrupts (boo#935913). - drm/i915: vlv: fix save/restore of GFX_MAX_REQ_COUNT reg (boo#935913). - drm/radeon: retry dcpd fetch (bnc#931580). - ftrace/x86/xen: use kernel identity mapping only when really needed (bsc#873195, bsc#886272, bsc#903727, bsc#927725) - guards: Add support for an external filelist in --check mode This will allow us to run --check without a kernel-source.git work tree. - guards: Include the file name also in the "Not found" error - guards: Simplify help text - hyperv: Add processing of MTU reduced by the host (bnc#919596). - ideapad_laptop: Lenovo G50-30 fix rfkill reports wireless blocked (boo#939394). - ipv6: do not delete previously existing ECMP routes if add fails (bsc#930399). - ipv6: fix ECMP route replacement (bsc#930399). - ipv6: replacing a rt6_info needs to purge possible propagated rt6_infos too (bsc#930399). - kABI: protect linux/slab.h include in of/address. - kabi/severities: ignore already-broken but acceptable kABI changes - SYSTEM_TRUSTED_KEYRING=n change removed system_trusted_keyring - Commits 3688875f852 and ea5ed8c70e9 changed iov_iter_get_pages prototype - KVM changes are intermodule dependencies - kabi: Fix CRC for dma_get_required_mask. - kabi: add kABI reference files - libata: Blacklist queued TRIM on Samsung SSD 850 Pro (bsc#926156). - libata: Blacklist queued TRIM on all Samsung 800-series (bnc#930599). - net: ppp: Do not call bpf_prog_create() in ppp_lock (bnc#930488). - rpm/kernel-obs-qa.spec.in: Do not fail if the kernel versions do not match - rt2x00: do not align payload on modern H/W (bnc#932844). - rtlwifi: rtl8192cu: Fix kernel deadlock (bnc#927786). - thermal: step_wise: Revert optimization (boo#925961). - tty: Fix pty master poll() after slave closes v2 (bsc#937138). arm64: mm: Remove hack in mmap randomize layout (bsc#937033) - udf: Remove repeated loads blocksize (bsc#933907). - usb: core: Fix USB 3.0 devices lost in NOTATTACHED state after a hub port reset (bnc#937226). - x86, apic: Handle a bad TSC more gracefully (boo#935530). - x86/PCI: Use host bridge _CRS info on Foxconn K8M890-8237A (bnc#907092). - x86/PCI: Use host bridge _CRS info on systems with >32 bit addressing (bnc#907092). - x86/microcode/amd: Do not overwrite final patch levels (bsc#913996). - x86/microcode/amd: Extract current patch level read to a function (bsc#913996). - x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032). - xenbus: add proper handling of XS_ERROR from Xenbus for transactions. - xhci: Calculate old endpoints correctly on device reset (bnc#938976). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-543=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i686 x86_64): kernel-debug-3.16.7-24.1 kernel-debug-base-3.16.7-24.1 kernel-debug-base-debuginfo-3.16.7-24.1 kernel-debug-debuginfo-3.16.7-24.1 kernel-debug-debugsource-3.16.7-24.1 kernel-debug-devel-3.16.7-24.1 kernel-debug-devel-debuginfo-3.16.7-24.1 kernel-desktop-3.16.7-24.1 kernel-desktop-base-3.16.7-24.1 kernel-desktop-base-debuginfo-3.16.7-24.1 kernel-desktop-debuginfo-3.16.7-24.1 kernel-desktop-debugsource-3.16.7-24.1 kernel-desktop-devel-3.16.7-24.1 kernel-ec2-3.16.7-24.1 kernel-ec2-base-3.16.7-24.1 kernel-ec2-base-debuginfo-3.16.7-24.1 kernel-ec2-debuginfo-3.16.7-24.1 kernel-ec2-debugsource-3.16.7-24.1 kernel-ec2-devel-3.16.7-24.1 kernel-vanilla-3.16.7-24.1 kernel-vanilla-debuginfo-3.16.7-24.1 kernel-vanilla-debugsource-3.16.7-24.1 kernel-vanilla-devel-3.16.7-24.1 kernel-xen-3.16.7-24.1 kernel-xen-base-3.16.7-24.1 kernel-xen-base-debuginfo-3.16.7-24.1 kernel-xen-debuginfo-3.16.7-24.1 kernel-xen-debugsource-3.16.7-24.1 kernel-xen-devel-3.16.7-24.1 - openSUSE 13.2 (i586 x86_64): bbswitch-0.8-3.11.1 bbswitch-debugsource-0.8-3.11.1 bbswitch-kmp-default-0.8_k3.16.7_24-3.11.1 bbswitch-kmp-default-debuginfo-0.8_k3.16.7_24-3.11.1 bbswitch-kmp-desktop-0.8_k3.16.7_24-3.11.1 bbswitch-kmp-desktop-debuginfo-0.8_k3.16.7_24-3.11.1 bbswitch-kmp-xen-0.8_k3.16.7_24-3.11.1 bbswitch-kmp-xen-debuginfo-0.8_k3.16.7_24-3.11.1 cloop-2.639-14.11.1 cloop-debuginfo-2.639-14.11.1 cloop-debugsource-2.639-14.11.1 cloop-kmp-default-2.639_k3.16.7_24-14.11.1 cloop-kmp-default-debuginfo-2.639_k3.16.7_24-14.11.1 cloop-kmp-desktop-2.639_k3.16.7_24-14.11.1 cloop-kmp-desktop-debuginfo-2.639_k3.16.7_24-14.11.1 cloop-kmp-xen-2.639_k3.16.7_24-14.11.1 cloop-kmp-xen-debuginfo-2.639_k3.16.7_24-14.11.1 crash-7.0.8-11.1 crash-debuginfo-7.0.8-11.1 crash-debugsource-7.0.8-11.1 crash-devel-7.0.8-11.1 crash-doc-7.0.8-11.1 crash-eppic-7.0.8-11.1 crash-eppic-debuginfo-7.0.8-11.1 crash-gcore-7.0.8-11.1 crash-gcore-debuginfo-7.0.8-11.1 crash-kmp-default-7.0.8_k3.16.7_24-11.1 crash-kmp-default-debuginfo-7.0.8_k3.16.7_24-11.1 crash-kmp-desktop-7.0.8_k3.16.7_24-11.1 crash-kmp-desktop-debuginfo-7.0.8_k3.16.7_24-11.1 crash-kmp-xen-7.0.8_k3.16.7_24-11.1 crash-kmp-xen-debuginfo-7.0.8_k3.16.7_24-11.1 hdjmod-debugsource-1.28-18.12.1 hdjmod-kmp-default-1.28_k3.16.7_24-18.12.1 hdjmod-kmp-default-debuginfo-1.28_k3.16.7_24-18.12.1 hdjmod-kmp-desktop-1.28_k3.16.7_24-18.12.1 hdjmod-kmp-desktop-debuginfo-1.28_k3.16.7_24-18.12.1 hdjmod-kmp-xen-1.28_k3.16.7_24-18.12.1 hdjmod-kmp-xen-debuginfo-1.28_k3.16.7_24-18.12.1 ipset-6.23-11.1 ipset-debuginfo-6.23-11.1 ipset-debugsource-6.23-11.1 ipset-devel-6.23-11.1 ipset-kmp-default-6.23_k3.16.7_24-11.1 ipset-kmp-default-debuginfo-6.23_k3.16.7_24-11.1 ipset-kmp-desktop-6.23_k3.16.7_24-11.1 ipset-kmp-desktop-debuginfo-6.23_k3.16.7_24-11.1 ipset-kmp-xen-6.23_k3.16.7_24-11.1 ipset-kmp-xen-debuginfo-6.23_k3.16.7_24-11.1 kernel-default-3.16.7-24.1 kernel-default-base-3.16.7-24.1 kernel-default-base-debuginfo-3.16.7-24.1 kernel-default-debuginfo-3.16.7-24.1 kernel-default-debugsource-3.16.7-24.1 kernel-default-devel-3.16.7-24.1 kernel-obs-build-3.16.7-24.2 kernel-obs-build-debugsource-3.16.7-24.2 kernel-obs-qa-3.16.7-24.1 kernel-obs-qa-xen-3.16.7-24.1 kernel-syms-3.16.7-24.1 libipset3-6.23-11.1 libipset3-debuginfo-6.23-11.1 pcfclock-0.44-260.11.1 pcfclock-debuginfo-0.44-260.11.1 pcfclock-debugsource-0.44-260.11.1 pcfclock-kmp-default-0.44_k3.16.7_24-260.11.1 pcfclock-kmp-default-debuginfo-0.44_k3.16.7_24-260.11.1 pcfclock-kmp-desktop-0.44_k3.16.7_24-260.11.1 pcfclock-kmp-desktop-debuginfo-0.44_k3.16.7_24-260.11.1 vhba-kmp-debugsource-20140629-2.11.1 vhba-kmp-default-20140629_k3.16.7_24-2.11.1 vhba-kmp-default-debuginfo-20140629_k3.16.7_24-2.11.1 vhba-kmp-desktop-20140629_k3.16.7_24-2.11.1 vhba-kmp-desktop-debuginfo-20140629_k3.16.7_24-2.11.1 vhba-kmp-xen-20140629_k3.16.7_24-2.11.1 vhba-kmp-xen-debuginfo-20140629_k3.16.7_24-2.11.1 xen-debugsource-4.4.2_06-25.1 xen-devel-4.4.2_06-25.1 xen-libs-4.4.2_06-25.1 xen-libs-debuginfo-4.4.2_06-25.1 xen-tools-domU-4.4.2_06-25.1 xen-tools-domU-debuginfo-4.4.2_06-25.1 xtables-addons-2.6-11.1 xtables-addons-debuginfo-2.6-11.1 xtables-addons-debugsource-2.6-11.1 xtables-addons-kmp-default-2.6_k3.16.7_24-11.1 xtables-addons-kmp-default-debuginfo-2.6_k3.16.7_24-11.1 xtables-addons-kmp-desktop-2.6_k3.16.7_24-11.1 xtables-addons-kmp-desktop-debuginfo-2.6_k3.16.7_24-11.1 xtables-addons-kmp-xen-2.6_k3.16.7_24-11.1 xtables-addons-kmp-xen-debuginfo-2.6_k3.16.7_24-11.1 - openSUSE 13.2 (noarch): kernel-devel-3.16.7-24.1 kernel-docs-3.16.7-24.2 kernel-macros-3.16.7-24.1 kernel-source-3.16.7-24.1 kernel-source-vanilla-3.16.7-24.1 - openSUSE 13.2 (x86_64): xen-4.4.2_06-25.1 xen-doc-html-4.4.2_06-25.1 xen-kmp-default-4.4.2_06_k3.16.7_24-25.1 xen-kmp-default-debuginfo-4.4.2_06_k3.16.7_24-25.1 xen-kmp-desktop-4.4.2_06_k3.16.7_24-25.1 xen-kmp-desktop-debuginfo-4.4.2_06_k3.16.7_24-25.1 xen-libs-32bit-4.4.2_06-25.1 xen-libs-debuginfo-32bit-4.4.2_06-25.1 xen-tools-4.4.2_06-25.1 xen-tools-debuginfo-4.4.2_06-25.1 - openSUSE 13.2 (i686): kernel-pae-3.16.7-24.1 kernel-pae-base-3.16.7-24.1 kernel-pae-base-debuginfo-3.16.7-24.1 kernel-pae-debuginfo-3.16.7-24.1 kernel-pae-debugsource-3.16.7-24.1 kernel-pae-devel-3.16.7-24.1 - openSUSE 13.2 (i586): bbswitch-kmp-pae-0.8_k3.16.7_24-3.11.1 bbswitch-kmp-pae-debuginfo-0.8_k3.16.7_24-3.11.1 cloop-kmp-pae-2.639_k3.16.7_24-14.11.1 cloop-kmp-pae-debuginfo-2.639_k3.16.7_24-14.11.1 crash-kmp-pae-7.0.8_k3.16.7_24-11.1 crash-kmp-pae-debuginfo-7.0.8_k3.16.7_24-11.1 hdjmod-kmp-pae-1.28_k3.16.7_24-18.12.1 hdjmod-kmp-pae-debuginfo-1.28_k3.16.7_24-18.12.1 ipset-kmp-pae-6.23_k3.16.7_24-11.1 ipset-kmp-pae-debuginfo-6.23_k3.16.7_24-11.1 pcfclock-kmp-pae-0.44_k3.16.7_24-260.11.1 pcfclock-kmp-pae-debuginfo-0.44_k3.16.7_24-260.11.1 vhba-kmp-pae-20140629_k3.16.7_24-2.11.1 vhba-kmp-pae-debuginfo-20140629_k3.16.7_24-2.11.1 xtables-addons-kmp-pae-2.6_k3.16.7_24-11.1 xtables-addons-kmp-pae-debuginfo-2.6_k3.16.7_24-11.1 References: https://www.suse.com/security/cve/CVE-2014-9728.html https://www.suse.com/security/cve/CVE-2014-9729.html https://www.suse.com/security/cve/CVE-2014-9730.html https://www.suse.com/security/cve/CVE-2014-9731.html https://www.suse.com/security/cve/CVE-2015-1420.html https://www.suse.com/security/cve/CVE-2015-1465.html https://www.suse.com/security/cve/CVE-2015-2041.html https://www.suse.com/security/cve/CVE-2015-2922.html https://www.suse.com/security/cve/CVE-2015-3212.html https://www.suse.com/security/cve/CVE-2015-3290.html https://www.suse.com/security/cve/CVE-2015-3339.html https://www.suse.com/security/cve/CVE-2015-3636.html https://www.suse.com/security/cve/CVE-2015-4001.html https://www.suse.com/security/cve/CVE-2015-4002.html https://www.suse.com/security/cve/CVE-2015-4003.html https://www.suse.com/security/cve/CVE-2015-4036.html https://www.suse.com/security/cve/CVE-2015-4167.html https://www.suse.com/security/cve/CVE-2015-4692.html https://www.suse.com/security/cve/CVE-2015-4700.html https://www.suse.com/security/cve/CVE-2015-5364.html https://www.suse.com/security/cve/CVE-2015-5366.html https://bugzilla.suse.com/907092 https://bugzilla.suse.com/907714 https://bugzilla.suse.com/915517 https://bugzilla.suse.com/916225 https://bugzilla.suse.com/919007 https://bugzilla.suse.com/919596 https://bugzilla.suse.com/921769 https://bugzilla.suse.com/922583 https://bugzilla.suse.com/925567 https://bugzilla.suse.com/925961 https://bugzilla.suse.com/927786 https://bugzilla.suse.com/928693 https://bugzilla.suse.com/929624 https://bugzilla.suse.com/930488 https://bugzilla.suse.com/930599 https://bugzilla.suse.com/931580 https://bugzilla.suse.com/932348 https://bugzilla.suse.com/932844 https://bugzilla.suse.com/933934 https://bugzilla.suse.com/934202 https://bugzilla.suse.com/934397 https://bugzilla.suse.com/934755 https://bugzilla.suse.com/935530 https://bugzilla.suse.com/935542 https://bugzilla.suse.com/935705 https://bugzilla.suse.com/935913 https://bugzilla.suse.com/937226 https://bugzilla.suse.com/938976 https://bugzilla.suse.com/939394

1 0

openSUSE-SU-2015:1372-1: moderate: Security update for gnutls
by opensuse-security＠opensuse.org 12 Aug '15

12 Aug '15

openSUSE Security Update: Security update for gnutls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1372-1 Rating: moderate References: #929414 #929690 Cross-References: CVE-2015-3622 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: - fix for CVE-2015-3622 in bundled libtasn1 (bsc#929414) * invalid read in octet string * added gnutls-CVE-2015-3622.patch - fix for GNUTLS-SA-2015-2 (bsc#929690) * ServerKeyExchange signature issue * added gnutls-GNUTLS-SA-2015-2.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-542=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-542=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gnutls-3.2.18-11.1 gnutls-debuginfo-3.2.18-11.1 gnutls-debugsource-3.2.18-11.1 libgnutls-devel-3.2.18-11.1 libgnutls-openssl-devel-3.2.18-11.1 libgnutls-openssl27-3.2.18-11.1 libgnutls-openssl27-debuginfo-3.2.18-11.1 libgnutls28-3.2.18-11.1 libgnutls28-debuginfo-3.2.18-11.1 libgnutlsxx-devel-3.2.18-11.1 libgnutlsxx28-3.2.18-11.1 libgnutlsxx28-debuginfo-3.2.18-11.1 - openSUSE 13.2 (x86_64): libgnutls-devel-32bit-3.2.18-11.1 libgnutls28-32bit-3.2.18-11.1 libgnutls28-debuginfo-32bit-3.2.18-11.1 - openSUSE 13.1 (i586 x86_64): gnutls-3.2.4-2.35.1 gnutls-debuginfo-3.2.4-2.35.1 gnutls-debugsource-3.2.4-2.35.1 libgnutls-devel-3.2.4-2.35.1 libgnutls-openssl-devel-3.2.4-2.35.1 libgnutls-openssl27-3.2.4-2.35.1 libgnutls-openssl27-debuginfo-3.2.4-2.35.1 libgnutls28-3.2.4-2.35.1 libgnutls28-debuginfo-3.2.4-2.35.1 libgnutlsxx-devel-3.2.4-2.35.1 libgnutlsxx28-3.2.4-2.35.1 libgnutlsxx28-debuginfo-3.2.4-2.35.1 - openSUSE 13.1 (x86_64): libgnutls-devel-32bit-3.2.4-2.35.1 libgnutls28-32bit-3.2.4-2.35.1 libgnutls28-debuginfo-32bit-3.2.4-2.35.1 References: https://www.suse.com/security/cve/CVE-2015-3622.html https://bugzilla.suse.com/929414 https://bugzilla.suse.com/929690

1 0

openSUSE-RU-2015:1371-1: moderate: Recommended update for libreoffice
by maintenance＠opensuse.org 12 Aug '15

12 Aug '15

openSUSE Recommended Update: Recommended update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1371-1 Rating: moderate References: #829430 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for libreoffice fixes the following issue: - Add a libmysqlclient_r18 requirement to libreoffice-base-drivers-mysql: without that installed, LibreOffice just crashes when trying to connect to a MySQL database (boo#829430) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-541=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-541=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libreoffice-4.3.7.2-21.1 libreoffice-base-4.3.7.2-21.1 libreoffice-base-debuginfo-4.3.7.2-21.1 libreoffice-base-drivers-mysql-4.3.7.2-21.1 libreoffice-base-drivers-mysql-debuginfo-4.3.7.2-21.1 libreoffice-base-drivers-postgresql-4.3.7.2-21.1 libreoffice-base-drivers-postgresql-debuginfo-4.3.7.2-21.1 libreoffice-calc-4.3.7.2-21.1 libreoffice-calc-debuginfo-4.3.7.2-21.1 libreoffice-calc-extensions-4.3.7.2-21.1 libreoffice-debuginfo-4.3.7.2-21.1 libreoffice-debugsource-4.3.7.2-21.1 libreoffice-draw-4.3.7.2-21.1 libreoffice-draw-debuginfo-4.3.7.2-21.1 libreoffice-filters-optional-4.3.7.2-21.1 libreoffice-gnome-4.3.7.2-21.1 libreoffice-gnome-debuginfo-4.3.7.2-21.1 libreoffice-impress-4.3.7.2-21.1 libreoffice-impress-debuginfo-4.3.7.2-21.1 libreoffice-kde4-4.3.7.2-21.1 libreoffice-kde4-debuginfo-4.3.7.2-21.1 libreoffice-mailmerge-4.3.7.2-21.1 libreoffice-math-4.3.7.2-21.1 libreoffice-math-debuginfo-4.3.7.2-21.1 libreoffice-officebean-4.3.7.2-21.1 libreoffice-officebean-debuginfo-4.3.7.2-21.1 libreoffice-pyuno-4.3.7.2-21.1 libreoffice-pyuno-debuginfo-4.3.7.2-21.1 libreoffice-sdk-4.3.7.2-21.1 libreoffice-sdk-debuginfo-4.3.7.2-21.1 libreoffice-sdk-doc-4.3.7.2-21.1 libreoffice-writer-4.3.7.2-21.1 libreoffice-writer-debuginfo-4.3.7.2-21.1 libreoffice-writer-extensions-4.3.7.2-21.1 - openSUSE 13.2 (noarch): libreoffice-branding-upstream-4.3.7.2-21.1 libreoffice-icon-theme-crystal-4.3.7.2-21.1 libreoffice-icon-theme-galaxy-4.3.7.2-21.1 libreoffice-icon-theme-hicontrast-4.3.7.2-21.1 libreoffice-icon-theme-oxygen-4.3.7.2-21.1 libreoffice-icon-theme-sifr-4.3.7.2-21.1 libreoffice-icon-theme-tango-4.3.7.2-21.1 libreoffice-l10n-af-4.3.7.2-21.1 libreoffice-l10n-ar-4.3.7.2-21.1 libreoffice-l10n-as-4.3.7.2-21.1 libreoffice-l10n-bg-4.3.7.2-21.1 libreoffice-l10n-bn-4.3.7.2-21.1 libreoffice-l10n-br-4.3.7.2-21.1 libreoffice-l10n-ca-4.3.7.2-21.1 libreoffice-l10n-cs-4.3.7.2-21.1 libreoffice-l10n-cy-4.3.7.2-21.1 libreoffice-l10n-da-4.3.7.2-21.1 libreoffice-l10n-de-4.3.7.2-21.1 libreoffice-l10n-dz-4.3.7.2-21.1 libreoffice-l10n-el-4.3.7.2-21.1 libreoffice-l10n-en-4.3.7.2-21.1 libreoffice-l10n-es-4.3.7.2-21.1 libreoffice-l10n-et-4.3.7.2-21.1 libreoffice-l10n-eu-4.3.7.2-21.1 libreoffice-l10n-fa-4.3.7.2-21.1 libreoffice-l10n-fi-4.3.7.2-21.1 libreoffice-l10n-fr-4.3.7.2-21.1 libreoffice-l10n-ga-4.3.7.2-21.1 libreoffice-l10n-gl-4.3.7.2-21.1 libreoffice-l10n-gu-4.3.7.2-21.1 libreoffice-l10n-he-4.3.7.2-21.1 libreoffice-l10n-hi-4.3.7.2-21.1 libreoffice-l10n-hr-4.3.7.2-21.1 libreoffice-l10n-hu-4.3.7.2-21.1 libreoffice-l10n-it-4.3.7.2-21.1 libreoffice-l10n-ja-4.3.7.2-21.1 libreoffice-l10n-kk-4.3.7.2-21.1 libreoffice-l10n-kn-4.3.7.2-21.1 libreoffice-l10n-ko-4.3.7.2-21.1 libreoffice-l10n-lt-4.3.7.2-21.1 libreoffice-l10n-lv-4.3.7.2-21.1 libreoffice-l10n-mai-4.3.7.2-21.1 libreoffice-l10n-ml-4.3.7.2-21.1 libreoffice-l10n-mr-4.3.7.2-21.1 libreoffice-l10n-nb-4.3.7.2-21.1 libreoffice-l10n-nl-4.3.7.2-21.1 libreoffice-l10n-nn-4.3.7.2-21.1 libreoffice-l10n-nr-4.3.7.2-21.1 libreoffice-l10n-nso-4.3.7.2-21.1 libreoffice-l10n-or-4.3.7.2-21.1 libreoffice-l10n-pa-4.3.7.2-21.1 libreoffice-l10n-pl-4.3.7.2-21.1 libreoffice-l10n-pt-BR-4.3.7.2-21.1 libreoffice-l10n-pt-PT-4.3.7.2-21.1 libreoffice-l10n-ro-4.3.7.2-21.1 libreoffice-l10n-ru-4.3.7.2-21.1 libreoffice-l10n-si-4.3.7.2-21.1 libreoffice-l10n-sk-4.3.7.2-21.1 libreoffice-l10n-sl-4.3.7.2-21.1 libreoffice-l10n-sr-4.3.7.2-21.1 libreoffice-l10n-ss-4.3.7.2-21.1 libreoffice-l10n-st-4.3.7.2-21.1 libreoffice-l10n-sv-4.3.7.2-21.1 libreoffice-l10n-ta-4.3.7.2-21.1 libreoffice-l10n-te-4.3.7.2-21.1 libreoffice-l10n-th-4.3.7.2-21.1 libreoffice-l10n-tn-4.3.7.2-21.1 libreoffice-l10n-tr-4.3.7.2-21.1 libreoffice-l10n-ts-4.3.7.2-21.1 libreoffice-l10n-uk-4.3.7.2-21.1 libreoffice-l10n-ve-4.3.7.2-21.1 libreoffice-l10n-xh-4.3.7.2-21.1 libreoffice-l10n-zh-Hans-4.3.7.2-21.1 libreoffice-l10n-zh-Hant-4.3.7.2-21.1 libreoffice-l10n-zu-4.3.7.2-21.1 - openSUSE 13.1 (i586 x86_64): libreoffice-4.1.6.2-40.1 libreoffice-base-4.1.6.2-40.1 libreoffice-base-debuginfo-4.1.6.2-40.1 libreoffice-base-drivers-mysql-4.1.6.2-40.1 libreoffice-base-drivers-mysql-debuginfo-4.1.6.2-40.1 libreoffice-base-drivers-postgresql-4.1.6.2-40.1 libreoffice-base-drivers-postgresql-debuginfo-4.1.6.2-40.1 libreoffice-base-extensions-4.1.6.2-40.1 libreoffice-calc-4.1.6.2-40.1 libreoffice-calc-debuginfo-4.1.6.2-40.1 libreoffice-calc-extensions-4.1.6.2-40.1 libreoffice-debuginfo-4.1.6.2-40.1 libreoffice-debugsource-4.1.6.2-40.1 libreoffice-draw-4.1.6.2-40.1 libreoffice-draw-debuginfo-4.1.6.2-40.1 libreoffice-draw-extensions-4.1.6.2-40.1 libreoffice-filters-optional-4.1.6.2-40.1 libreoffice-gnome-4.1.6.2-40.1 libreoffice-gnome-debuginfo-4.1.6.2-40.1 libreoffice-icon-themes-prebuilt-4.1.6.2-40.1 libreoffice-impress-4.1.6.2-40.1 libreoffice-impress-debuginfo-4.1.6.2-40.1 libreoffice-impress-extensions-4.1.6.2-40.1 libreoffice-impress-extensions-debuginfo-4.1.6.2-40.1 libreoffice-kde-4.1.6.2-40.1 libreoffice-kde-debuginfo-4.1.6.2-40.1 libreoffice-kde4-4.1.6.2-40.1 libreoffice-kde4-debuginfo-4.1.6.2-40.1 libreoffice-l10n-prebuilt-4.1.6.2-40.1 libreoffice-mailmerge-4.1.6.2-40.1 libreoffice-math-4.1.6.2-40.1 libreoffice-math-debuginfo-4.1.6.2-40.1 libreoffice-officebean-4.1.6.2-40.1 libreoffice-officebean-debuginfo-4.1.6.2-40.1 libreoffice-pyuno-4.1.6.2-40.1 libreoffice-pyuno-debuginfo-4.1.6.2-40.1 libreoffice-sdk-4.1.6.2-40.1 libreoffice-sdk-debuginfo-4.1.6.2-40.1 libreoffice-sdk-doc-4.1.6.2-40.1 libreoffice-writer-4.1.6.2-40.1 libreoffice-writer-debuginfo-4.1.6.2-40.1 libreoffice-writer-extensions-4.1.6.2-40.1 - openSUSE 13.1 (noarch): libreoffice-branding-upstream-4.1.6.2-40.1 libreoffice-help-ast-4.1.6.2-40.1 libreoffice-help-bg-4.1.6.2-40.1 libreoffice-help-ca-4.1.6.2-40.1 libreoffice-help-cs-4.1.6.2-40.1 libreoffice-help-da-4.1.6.2-40.1 libreoffice-help-de-4.1.6.2-40.1 libreoffice-help-el-4.1.6.2-40.1 libreoffice-help-en-GB-4.1.6.2-40.1 libreoffice-help-en-US-4.1.6.2-40.1 libreoffice-help-en-ZA-4.1.6.2-40.1 libreoffice-help-es-4.1.6.2-40.1 libreoffice-help-et-4.1.6.2-40.1 libreoffice-help-eu-4.1.6.2-40.1 libreoffice-help-fi-4.1.6.2-40.1 libreoffice-help-fr-4.1.6.2-40.1 libreoffice-help-gl-4.1.6.2-40.1 libreoffice-help-gu-IN-4.1.6.2-40.1 libreoffice-help-hi-IN-4.1.6.2-40.1 libreoffice-help-hu-4.1.6.2-40.1 libreoffice-help-it-4.1.6.2-40.1 libreoffice-help-ja-4.1.6.2-40.1 libreoffice-help-km-4.1.6.2-40.1 libreoffice-help-ko-4.1.6.2-40.1 libreoffice-help-mk-4.1.6.2-40.1 libreoffice-help-nb-4.1.6.2-40.1 libreoffice-help-nl-4.1.6.2-40.1 libreoffice-help-pl-4.1.6.2-40.1 libreoffice-help-pt-4.1.6.2-40.1 libreoffice-help-pt-BR-4.1.6.2-40.1 libreoffice-help-ru-4.1.6.2-40.1 libreoffice-help-sk-4.1.6.2-40.1 libreoffice-help-sl-4.1.6.2-40.1 libreoffice-help-sv-4.1.6.2-40.1 libreoffice-help-tr-4.1.6.2-40.1 libreoffice-help-vi-4.1.6.2-40.1 libreoffice-help-zh-CN-4.1.6.2-40.1 libreoffice-help-zh-TW-4.1.6.2-40.1 libreoffice-icon-theme-crystal-4.1.6.2-40.1 libreoffice-icon-theme-galaxy-4.1.6.2-40.1 libreoffice-icon-theme-hicontrast-4.1.6.2-40.1 libreoffice-icon-theme-oxygen-4.1.6.2-40.1 libreoffice-icon-theme-tango-4.1.6.2-40.1 libreoffice-l10n-af-4.1.6.2-40.3 libreoffice-l10n-am-4.1.6.2-40.3 libreoffice-l10n-ar-4.1.6.2-40.3 libreoffice-l10n-as-4.1.6.2-40.3 libreoffice-l10n-ast-4.1.6.2-40.3 libreoffice-l10n-be-BY-4.1.6.2-40.3 libreoffice-l10n-bg-4.1.6.2-40.3 libreoffice-l10n-br-4.1.6.2-40.3 libreoffice-l10n-ca-4.1.6.2-40.3 libreoffice-l10n-cs-4.1.6.2-40.3 libreoffice-l10n-cy-4.1.6.2-40.3 libreoffice-l10n-da-4.1.6.2-40.3 libreoffice-l10n-de-4.1.6.2-40.3 libreoffice-l10n-el-4.1.6.2-40.3 libreoffice-l10n-en-GB-4.1.6.2-40.3 libreoffice-l10n-en-ZA-4.1.6.2-40.3 libreoffice-l10n-eo-4.1.6.2-40.3 libreoffice-l10n-es-4.1.6.2-40.3 libreoffice-l10n-et-4.1.6.2-40.3 libreoffice-l10n-eu-4.1.6.2-40.3 libreoffice-l10n-fi-4.1.6.2-40.3 libreoffice-l10n-fr-4.1.6.2-40.3 libreoffice-l10n-ga-4.1.6.2-40.3 libreoffice-l10n-gd-4.1.6.2-40.3 libreoffice-l10n-gl-4.1.6.2-40.3 libreoffice-l10n-gu-IN-4.1.6.2-40.3 libreoffice-l10n-he-4.1.6.2-40.3 libreoffice-l10n-hi-IN-4.1.6.2-40.3 libreoffice-l10n-hr-4.1.6.2-40.3 libreoffice-l10n-hu-4.1.6.2-40.3 libreoffice-l10n-id-4.1.6.2-40.3 libreoffice-l10n-is-4.1.6.2-40.3 libreoffice-l10n-it-4.1.6.2-40.3 libreoffice-l10n-ja-4.1.6.2-40.3 libreoffice-l10n-ka-4.1.6.2-40.3 libreoffice-l10n-km-4.1.6.2-40.3 libreoffice-l10n-kn-4.1.6.2-40.3 libreoffice-l10n-ko-4.1.6.2-40.3 libreoffice-l10n-lt-4.1.6.2-40.3 libreoffice-l10n-mk-4.1.6.2-40.3 libreoffice-l10n-ml-4.1.6.2-40.3 libreoffice-l10n-mr-4.1.6.2-40.3 libreoffice-l10n-nb-4.1.6.2-40.3 libreoffice-l10n-nl-4.1.6.2-40.3 libreoffice-l10n-nn-4.1.6.2-40.3 libreoffice-l10n-nr-4.1.6.2-40.3 libreoffice-l10n-om-4.1.6.2-40.3 libreoffice-l10n-or-4.1.6.2-40.3 libreoffice-l10n-pa-IN-4.1.6.2-40.3 libreoffice-l10n-pl-4.1.6.2-40.3 libreoffice-l10n-pt-4.1.6.2-40.3 libreoffice-l10n-pt-BR-4.1.6.2-40.3 libreoffice-l10n-ro-4.1.6.2-40.3 libreoffice-l10n-ru-4.1.6.2-40.3 libreoffice-l10n-rw-4.1.6.2-40.3 libreoffice-l10n-sh-4.1.6.2-40.3 libreoffice-l10n-sk-4.1.6.2-40.3 libreoffice-l10n-sl-4.1.6.2-40.3 libreoffice-l10n-sr-4.1.6.2-40.3 libreoffice-l10n-ss-4.1.6.2-40.3 libreoffice-l10n-st-4.1.6.2-40.3 libreoffice-l10n-sv-4.1.6.2-40.3 libreoffice-l10n-ta-4.1.6.2-40.3 libreoffice-l10n-te-4.1.6.2-40.3 libreoffice-l10n-tg-4.1.6.2-40.3 libreoffice-l10n-th-4.1.6.2-40.3 libreoffice-l10n-tr-4.1.6.2-40.3 libreoffice-l10n-ts-4.1.6.2-40.3 libreoffice-l10n-ug-4.1.6.2-40.3 libreoffice-l10n-uk-4.1.6.2-40.3 libreoffice-l10n-ve-4.1.6.2-40.3 libreoffice-l10n-vi-4.1.6.2-40.3 libreoffice-l10n-xh-4.1.6.2-40.3 libreoffice-l10n-zh-CN-4.1.6.2-40.3 libreoffice-l10n-zh-TW-4.1.6.2-40.3 libreoffice-l10n-zu-4.1.6.2-40.3 References: https://bugzilla.suse.com/829430

1 0

openSUSE-RU-2015:1370-1: moderate: Recommended update for lxc
by maintenance＠opensuse.org 12 Aug '15

12 Aug '15

openSUSE Recommended Update: Recommended update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1370-1 Rating: moderate References: #940174 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for lxc fixes the following issue: - fix a bug in backported patch (bnc#940174) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-540=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): lxc-1.0.6-6.1 lxc-debuginfo-1.0.6-6.1 lxc-debugsource-1.0.6-6.1 lxc-devel-1.0.6-6.1 References: https://bugzilla.suse.com/940174

1 0

openSUSE-RU-2015:1369-1: moderate: Recommended update for munin
by maintenance＠opensuse.org 12 Aug '15

12 Aug '15

openSUSE Recommended Update: Recommended update for munin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1369-1 Rating: moderate References: #940287 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for munin fixes the following issues: - fix munin-node start (bnc#940287) - update to version 2.0.25 Bugfix release. Closes: GH:304, D:769415, D:770745, D:770746, D:770826 * p/irqstats: Improve generated labels * ip/iostat_ios: also support /dev/xvdX devices * p/iostat_ios: also support /dev/vdX devices * plugins/df_abs: fix the naming for regular devices * p/pgsql: Detect "rc" postgresql versions * p/ping_: honor ping env variable - cleanup sysvinit scriptlets to fix the issue which always disabled the service on update - update to version 2.0.24 * bugfix release compatibility with perl 5.20 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-538=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): munin-2.0.25-3.1 munin-node-2.0.25-3.1 References: https://bugzilla.suse.com/940287

1 0

openSUSE-RU-2015:1368-1: moderate: Recommended update for usb_modeswitch
by maintenance＠opensuse.org 12 Aug '15

12 Aug '15

openSUSE Recommended Update: Recommended update for usb_modeswitch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1368-1 Rating: moderate References: #903753 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for usb_modeswitch fixes the following issues: - new upstream version 2.2.0 * Introduction of parameter "HuaweiNewMode", wrapping the standard bulk message for all newer Huawei devices; support for generic fall-back config files, combined with OS switch (per vendor ID), implementation to use a specific switching command on Android for all Huawei devices (see README of data package for details); this change was suggested by Huawei - removed patch obsolete huawei-timing.patch to fix (boo#903753) - add usb_modeswitch-fix_fsf_address.patch * Update FSF address. - Update to version 2.2.1 * Fixed unreliable switching function for Cisco AM10 - Update the data package to version 20150115 - Update device_reference.txt - use pkgconfig to detect udev install directory to avoid problems during bootstrap - Removed unused usb_modeswitch-data.rpmlintrc - Removed changelog from documentation - Cleaned up specfile - Update to version 2.2.5 * Fixed bug in configuration check, possibly leading to segfault (thanks, Leonid Lisovskiy); * fixed Pantech commandline parameter evaluation (was not working at all); * added driver unbind step via sysfs in wrapper, getting rid of the USB subsystem complaint "interface 0 claimed by usb-storage while 'usb_modeswitch' <does this and that>" - Update to version 2.2.4 * Fixed buggy check of USB configuration selection (possibly leading to segfault), tested with Alcatel X602D; * removed call to 'libusb_strerror' from libusb initialization - not available in earlier libusb1 versions - Update to version 2.2.3 * Fixed problem arising with systemd version 221 (220 untested), which affects starting the usb_modeswitch systemd unit from the sh script (reported by Archlinux users) - Update to version 2.2.2, 2015/06/27 * Added catch for libusb init error (thanks, Henrik Gustafsson); * removed global function result variable; added catch for USB configuration read error (both thanks to "otila"); * fixed wrapper script where port search for symlinking modem port was broken ("/dev/gsmmodem"); * changed PantechMode parameter to represent different targets; * added global config option to disable MBIM checking and setting alltogether (request from "kai"); * changed udev sh script so that systemd processing takes precedence over upstart; * changed systemd template unit parameter to avoid escaping problems - Update the data package to version 20150627 - Update the package in openSUSE 13.2 to the devel version fix handling of Huawei devices (bsc#903753). - Add usb_modeswitch-ansification.patch to provide proper prototypes and thus discover calls where an argument was needlessly passed. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-539=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): usb_modeswitch-2.2.5-2.5.1 usb_modeswitch-debuginfo-2.2.5-2.5.1 usb_modeswitch-debugsource-2.2.5-2.5.1 - openSUSE 13.2 (noarch): usb_modeswitch-data-2.2.5-2.5.1 References: https://bugzilla.suse.com/903753

1 0

openSUSE-SU-2015:1352-1: Security update for ghostscript
by opensuse-security＠opensuse.org 06 Aug '15

06 Aug '15

openSUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1352-1 Rating: low References: #939342 Cross-References: CVE-2015-3228 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Ghostscript was updated to fix one security issue. The following vulnerability was fixed: * CVE-2015-3228: Specially crafted files could have caused an interger overflow, resulting in a crash of the application or unspecified other impact (bsc#939342) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-537=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-537=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ghostscript-9.15-3.1 ghostscript-debuginfo-9.15-3.1 ghostscript-debugsource-9.15-3.1 ghostscript-devel-9.15-3.1 ghostscript-mini-9.15-3.1 ghostscript-mini-debuginfo-9.15-3.1 ghostscript-mini-debugsource-9.15-3.1 ghostscript-mini-devel-9.15-3.1 ghostscript-x11-9.15-3.1 ghostscript-x11-debuginfo-9.15-3.1 - openSUSE 13.1 (i586 x86_64): ghostscript-9.07-3.3.1 ghostscript-debuginfo-9.07-3.3.1 ghostscript-debugsource-9.07-3.3.1 ghostscript-devel-9.07-3.3.1 ghostscript-mini-9.07-3.3.1 ghostscript-mini-debuginfo-9.07-3.3.1 ghostscript-mini-debugsource-9.07-3.3.1 ghostscript-mini-devel-9.07-3.3.1 ghostscript-x11-9.07-3.3.1 ghostscript-x11-debuginfo-9.07-3.3.1 References: https://www.suse.com/security/cve/CVE-2015-3228.html https://bugzilla.suse.com/939342

1 0

openSUSE-SU-2015:1351-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 06 Aug '15

06 Aug '15

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1351-1 Rating: moderate References: #938719 #938721 Cross-References: CVE-2015-5589 CVE-2015-5590 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: PHP was updated to fix two security issues. The following vulnerabilities were fixed: * CVE-2015-5589: PHP could be crashed when processing an invalid file with the "phar" extension with a segfault in Phar::convertToData, leading to Denial of Service (DOS) (boo#938721) * CVE-2015-5590: PHP could be crashed or have unspecified other impact due to a buffer overlow in phar_fix_filepath (boo#938719) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-536=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-536=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_php5-5.6.1-33.1 apache2-mod_php5-debuginfo-5.6.1-33.1 php5-5.6.1-33.1 php5-bcmath-5.6.1-33.1 php5-bcmath-debuginfo-5.6.1-33.1 php5-bz2-5.6.1-33.1 php5-bz2-debuginfo-5.6.1-33.1 php5-calendar-5.6.1-33.1 php5-calendar-debuginfo-5.6.1-33.1 php5-ctype-5.6.1-33.1 php5-ctype-debuginfo-5.6.1-33.1 php5-curl-5.6.1-33.1 php5-curl-debuginfo-5.6.1-33.1 php5-dba-5.6.1-33.1 php5-dba-debuginfo-5.6.1-33.1 php5-debuginfo-5.6.1-33.1 php5-debugsource-5.6.1-33.1 php5-devel-5.6.1-33.1 php5-dom-5.6.1-33.1 php5-dom-debuginfo-5.6.1-33.1 php5-enchant-5.6.1-33.1 php5-enchant-debuginfo-5.6.1-33.1 php5-exif-5.6.1-33.1 php5-exif-debuginfo-5.6.1-33.1 php5-fastcgi-5.6.1-33.1 php5-fastcgi-debuginfo-5.6.1-33.1 php5-fileinfo-5.6.1-33.1 php5-fileinfo-debuginfo-5.6.1-33.1 php5-firebird-5.6.1-33.1 php5-firebird-debuginfo-5.6.1-33.1 php5-fpm-5.6.1-33.1 php5-fpm-debuginfo-5.6.1-33.1 php5-ftp-5.6.1-33.1 php5-ftp-debuginfo-5.6.1-33.1 php5-gd-5.6.1-33.1 php5-gd-debuginfo-5.6.1-33.1 php5-gettext-5.6.1-33.1 php5-gettext-debuginfo-5.6.1-33.1 php5-gmp-5.6.1-33.1 php5-gmp-debuginfo-5.6.1-33.1 php5-iconv-5.6.1-33.1 php5-iconv-debuginfo-5.6.1-33.1 php5-imap-5.6.1-33.1 php5-imap-debuginfo-5.6.1-33.1 php5-intl-5.6.1-33.1 php5-intl-debuginfo-5.6.1-33.1 php5-json-5.6.1-33.1 php5-json-debuginfo-5.6.1-33.1 php5-ldap-5.6.1-33.1 php5-ldap-debuginfo-5.6.1-33.1 php5-mbstring-5.6.1-33.1 php5-mbstring-debuginfo-5.6.1-33.1 php5-mcrypt-5.6.1-33.1 php5-mcrypt-debuginfo-5.6.1-33.1 php5-mssql-5.6.1-33.1 php5-mssql-debuginfo-5.6.1-33.1 php5-mysql-5.6.1-33.1 php5-mysql-debuginfo-5.6.1-33.1 php5-odbc-5.6.1-33.1 php5-odbc-debuginfo-5.6.1-33.1 php5-opcache-5.6.1-33.1 php5-opcache-debuginfo-5.6.1-33.1 php5-openssl-5.6.1-33.1 php5-openssl-debuginfo-5.6.1-33.1 php5-pcntl-5.6.1-33.1 php5-pcntl-debuginfo-5.6.1-33.1 php5-pdo-5.6.1-33.1 php5-pdo-debuginfo-5.6.1-33.1 php5-pgsql-5.6.1-33.1 php5-pgsql-debuginfo-5.6.1-33.1 php5-phar-5.6.1-33.1 php5-phar-debuginfo-5.6.1-33.1 php5-posix-5.6.1-33.1 php5-posix-debuginfo-5.6.1-33.1 php5-pspell-5.6.1-33.1 php5-pspell-debuginfo-5.6.1-33.1 php5-readline-5.6.1-33.1 php5-readline-debuginfo-5.6.1-33.1 php5-shmop-5.6.1-33.1 php5-shmop-debuginfo-5.6.1-33.1 php5-snmp-5.6.1-33.1 php5-snmp-debuginfo-5.6.1-33.1 php5-soap-5.6.1-33.1 php5-soap-debuginfo-5.6.1-33.1 php5-sockets-5.6.1-33.1 php5-sockets-debuginfo-5.6.1-33.1 php5-sqlite-5.6.1-33.1 php5-sqlite-debuginfo-5.6.1-33.1 php5-suhosin-5.6.1-33.1 php5-suhosin-debuginfo-5.6.1-33.1 php5-sysvmsg-5.6.1-33.1 php5-sysvmsg-debuginfo-5.6.1-33.1 php5-sysvsem-5.6.1-33.1 php5-sysvsem-debuginfo-5.6.1-33.1 php5-sysvshm-5.6.1-33.1 php5-sysvshm-debuginfo-5.6.1-33.1 php5-tidy-5.6.1-33.1 php5-tidy-debuginfo-5.6.1-33.1 php5-tokenizer-5.6.1-33.1 php5-tokenizer-debuginfo-5.6.1-33.1 php5-wddx-5.6.1-33.1 php5-wddx-debuginfo-5.6.1-33.1 php5-xmlreader-5.6.1-33.1 php5-xmlreader-debuginfo-5.6.1-33.1 php5-xmlrpc-5.6.1-33.1 php5-xmlrpc-debuginfo-5.6.1-33.1 php5-xmlwriter-5.6.1-33.1 php5-xmlwriter-debuginfo-5.6.1-33.1 php5-xsl-5.6.1-33.1 php5-xsl-debuginfo-5.6.1-33.1 php5-zip-5.6.1-33.1 php5-zip-debuginfo-5.6.1-33.1 php5-zlib-5.6.1-33.1 php5-zlib-debuginfo-5.6.1-33.1 - openSUSE 13.2 (noarch): php5-pear-5.6.1-33.1 - openSUSE 13.1 (i586 x86_64): apache2-mod_php5-5.4.20-64.1 apache2-mod_php5-debuginfo-5.4.20-64.1 php5-5.4.20-64.1 php5-bcmath-5.4.20-64.1 php5-bcmath-debuginfo-5.4.20-64.1 php5-bz2-5.4.20-64.1 php5-bz2-debuginfo-5.4.20-64.1 php5-calendar-5.4.20-64.1 php5-calendar-debuginfo-5.4.20-64.1 php5-ctype-5.4.20-64.1 php5-ctype-debuginfo-5.4.20-64.1 php5-curl-5.4.20-64.1 php5-curl-debuginfo-5.4.20-64.1 php5-dba-5.4.20-64.1 php5-dba-debuginfo-5.4.20-64.1 php5-debuginfo-5.4.20-64.1 php5-debugsource-5.4.20-64.1 php5-devel-5.4.20-64.1 php5-dom-5.4.20-64.1 php5-dom-debuginfo-5.4.20-64.1 php5-enchant-5.4.20-64.1 php5-enchant-debuginfo-5.4.20-64.1 php5-exif-5.4.20-64.1 php5-exif-debuginfo-5.4.20-64.1 php5-fastcgi-5.4.20-64.1 php5-fastcgi-debuginfo-5.4.20-64.1 php5-fileinfo-5.4.20-64.1 php5-fileinfo-debuginfo-5.4.20-64.1 php5-firebird-5.4.20-64.1 php5-firebird-debuginfo-5.4.20-64.1 php5-fpm-5.4.20-64.1 php5-fpm-debuginfo-5.4.20-64.1 php5-ftp-5.4.20-64.1 php5-ftp-debuginfo-5.4.20-64.1 php5-gd-5.4.20-64.1 php5-gd-debuginfo-5.4.20-64.1 php5-gettext-5.4.20-64.1 php5-gettext-debuginfo-5.4.20-64.1 php5-gmp-5.4.20-64.1 php5-gmp-debuginfo-5.4.20-64.1 php5-iconv-5.4.20-64.1 php5-iconv-debuginfo-5.4.20-64.1 php5-imap-5.4.20-64.1 php5-imap-debuginfo-5.4.20-64.1 php5-intl-5.4.20-64.1 php5-intl-debuginfo-5.4.20-64.1 php5-json-5.4.20-64.1 php5-json-debuginfo-5.4.20-64.1 php5-ldap-5.4.20-64.1 php5-ldap-debuginfo-5.4.20-64.1 php5-mbstring-5.4.20-64.1 php5-mbstring-debuginfo-5.4.20-64.1 php5-mcrypt-5.4.20-64.1 php5-mcrypt-debuginfo-5.4.20-64.1 php5-mssql-5.4.20-64.1 php5-mssql-debuginfo-5.4.20-64.1 php5-mysql-5.4.20-64.1 php5-mysql-debuginfo-5.4.20-64.1 php5-odbc-5.4.20-64.1 php5-odbc-debuginfo-5.4.20-64.1 php5-openssl-5.4.20-64.1 php5-openssl-debuginfo-5.4.20-64.1 php5-pcntl-5.4.20-64.1 php5-pcntl-debuginfo-5.4.20-64.1 php5-pdo-5.4.20-64.1 php5-pdo-debuginfo-5.4.20-64.1 php5-pgsql-5.4.20-64.1 php5-pgsql-debuginfo-5.4.20-64.1 php5-phar-5.4.20-64.1 php5-phar-debuginfo-5.4.20-64.1 php5-posix-5.4.20-64.1 php5-posix-debuginfo-5.4.20-64.1 php5-pspell-5.4.20-64.1 php5-pspell-debuginfo-5.4.20-64.1 php5-readline-5.4.20-64.1 php5-readline-debuginfo-5.4.20-64.1 php5-shmop-5.4.20-64.1 php5-shmop-debuginfo-5.4.20-64.1 php5-snmp-5.4.20-64.1 php5-snmp-debuginfo-5.4.20-64.1 php5-soap-5.4.20-64.1 php5-soap-debuginfo-5.4.20-64.1 php5-sockets-5.4.20-64.1 php5-sockets-debuginfo-5.4.20-64.1 php5-sqlite-5.4.20-64.1 php5-sqlite-debuginfo-5.4.20-64.1 php5-suhosin-5.4.20-64.1 php5-suhosin-debuginfo-5.4.20-64.1 php5-sysvmsg-5.4.20-64.1 php5-sysvmsg-debuginfo-5.4.20-64.1 php5-sysvsem-5.4.20-64.1 php5-sysvsem-debuginfo-5.4.20-64.1 php5-sysvshm-5.4.20-64.1 php5-sysvshm-debuginfo-5.4.20-64.1 php5-tidy-5.4.20-64.1 php5-tidy-debuginfo-5.4.20-64.1 php5-tokenizer-5.4.20-64.1 php5-tokenizer-debuginfo-5.4.20-64.1 php5-wddx-5.4.20-64.1 php5-wddx-debuginfo-5.4.20-64.1 php5-xmlreader-5.4.20-64.1 php5-xmlreader-debuginfo-5.4.20-64.1 php5-xmlrpc-5.4.20-64.1 php5-xmlrpc-debuginfo-5.4.20-64.1 php5-xmlwriter-5.4.20-64.1 php5-xmlwriter-debuginfo-5.4.20-64.1 php5-xsl-5.4.20-64.1 php5-xsl-debuginfo-5.4.20-64.1 php5-zip-5.4.20-64.1 php5-zip-debuginfo-5.4.20-64.1 php5-zlib-5.4.20-64.1 php5-zlib-debuginfo-5.4.20-64.1 - openSUSE 13.1 (noarch): php5-pear-5.4.20-64.1 References: https://www.suse.com/security/cve/CVE-2015-5589.html https://www.suse.com/security/cve/CVE-2015-5590.html https://bugzilla.suse.com/938719 https://bugzilla.suse.com/938721

1 0

openSUSE-RU-2015:1348-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 05 Aug '15

05 Aug '15

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1348-1 Rating: moderate References: #905746 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for dracut fixes the following issue: - Fix typo, missing inst_rules key word introduced in previous patch (bnc#905746) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-534=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): dracut-037-17.18.1 dracut-debuginfo-037-17.18.1 dracut-debugsource-037-17.18.1 dracut-fips-037-17.18.1 References: https://bugzilla.suse.com/905746

1 0

openSUSE-RU-2015:1347-1: important: Recommended update for grub2
by maintenance＠opensuse.org 05 Aug '15

05 Aug '15

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1347-1 Rating: important References: #909359 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for grub2 provides the following fix: - grub2-snapper-plugin.sh: cleanup grub-snapshot.cfg not referring to any snapshot (boo#909359) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-535=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): grub2-2.02~beta2-20.7.1 grub2-branding-upstream-2.02~beta2-20.7.1 grub2-debuginfo-2.02~beta2-20.7.1 grub2-debugsource-2.02~beta2-20.7.1 grub2-i386-pc-2.02~beta2-20.7.1 - openSUSE 13.2 (x86_64): grub2-x86_64-efi-2.02~beta2-20.7.1 grub2-x86_64-xen-2.02~beta2-20.7.1 - openSUSE 13.2 (noarch): grub2-snapper-plugin-2.02~beta2-20.7.1 - openSUSE 13.2 (i586): grub2-i386-efi-2.02~beta2-20.7.1 References: https://bugzilla.suse.com/909359

1 0

openSUSE-RU-2015:1343-1: moderate: Recommended update for apcupsd
by maintenance＠opensuse.org 04 Aug '15

04 Aug '15

openSUSE Recommended Update: Recommended update for apcupsd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1343-1 Rating: moderate References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for apcupsd fixes the following issue: - reduce amount of debug messages (rh#1053324). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-532=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): apcupsd-3.14.10-6.8.1 apcupsd-cgi-3.14.10-6.8.1 apcupsd-debuginfo-3.14.10-6.8.1 apcupsd-debugsource-3.14.10-6.8.1 apcupsd-gui-3.14.10-6.8.1 apcupsd-gui-debuginfo-3.14.10-6.8.1 References:

1 0

openSUSE-RU-2015:1342-1: moderate: Recommended update for ffado and ffado-mixer
by maintenance＠opensuse.org 04 Aug '15

04 Aug '15

openSUSE Recommended Update: Recommended update for ffado and ffado-mixer ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1342-1 Rating: moderate References: #937060 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: ffado and ffado-mixer were updated to fix a runtime dependency issue: * boo#937060: add runtime requirement for PyQT4 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-533=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ffado-2.2.1-7.1 ffado-debuginfo-2.2.1-7.1 ffado-debugsource-2.2.1-7.1 libffado-devel-2.2.1-7.1 libffado2-2.2.1-7.1 libffado2-debuginfo-2.2.1-7.1 - openSUSE 13.2 (x86_64): libffado2-32bit-2.2.1-7.1 libffado2-debuginfo-32bit-2.2.1-7.1 - openSUSE 13.2 (noarch): ffado-doc-2.2.1-7.2 ffado-mixer-2.2.1-7.2 References: https://bugzilla.suse.com/937060

1 0

openSUSE-SU-2015:1340-1: Security update for gpsm
by opensuse-security＠opensuse.org 04 Aug '15

04 Aug '15

openSUSE Security Update: Security update for gpsm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1340-1 Rating: low References: #818136 Cross-References: CVE-2013-2038 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: gpsm was updated to fix one security issue. The following vulnerability was fixed: * CVE-2013-2038: Denial of service by a remote attacker via specially crafted packages (boo#818136) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-531=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): gpsd-3.5-7.8.1 gpsd-clients-3.5-7.8.1 gpsd-clients-debuginfo-3.5-7.8.1 gpsd-debuginfo-3.5-7.8.1 gpsd-debugsource-3.5-7.8.1 gpsd-devel-3.5-7.8.1 gpsd-devel-debuginfo-3.5-7.8.1 libQgpsmm20-3.5-7.8.1 libQgpsmm20-debuginfo-3.5-7.8.1 libgps20-3.5-7.8.1 libgps20-debuginfo-3.5-7.8.1 python-gpsd-3.5-7.8.1 python-gpsd-debuginfo-3.5-7.8.1 References: https://www.suse.com/security/cve/CVE-2013-2038.html https://bugzilla.suse.com/818136

1 0

openSUSE-SU-2015:1335-1: important: Security update for bind
by opensuse-security＠opensuse.org 03 Aug '15

03 Aug '15

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1335-1 Rating: important References: #939567 Cross-References: CVE-2015-5477 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: bind was updated to fix one security issue. This security issue was fixed: - CVE-2015-5477: Remote DoS via TKEY queries (boo#939567) Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet handling. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-530=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-530=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): bind-9.9.6P1-2.7.1 bind-chrootenv-9.9.6P1-2.7.1 bind-debuginfo-9.9.6P1-2.7.1 bind-debugsource-9.9.6P1-2.7.1 bind-devel-9.9.6P1-2.7.1 bind-libs-9.9.6P1-2.7.1 bind-libs-debuginfo-9.9.6P1-2.7.1 bind-lwresd-9.9.6P1-2.7.1 bind-lwresd-debuginfo-9.9.6P1-2.7.1 bind-utils-9.9.6P1-2.7.1 bind-utils-debuginfo-9.9.6P1-2.7.1 - openSUSE 13.2 (x86_64): bind-libs-32bit-9.9.6P1-2.7.1 bind-libs-debuginfo-32bit-9.9.6P1-2.7.1 - openSUSE 13.2 (noarch): bind-doc-9.9.6P1-2.7.1 - openSUSE 13.1 (i586 x86_64): bind-9.9.4P2-2.14.1 bind-chrootenv-9.9.4P2-2.14.1 bind-debuginfo-9.9.4P2-2.14.1 bind-debugsource-9.9.4P2-2.14.1 bind-devel-9.9.4P2-2.14.1 bind-libs-9.9.4P2-2.14.1 bind-libs-debuginfo-9.9.4P2-2.14.1 bind-lwresd-9.9.4P2-2.14.1 bind-lwresd-debuginfo-9.9.4P2-2.14.1 bind-utils-9.9.4P2-2.14.1 bind-utils-debuginfo-9.9.4P2-2.14.1 - openSUSE 13.1 (x86_64): bind-libs-32bit-9.9.4P2-2.14.1 bind-libs-debuginfo-32bit-9.9.4P2-2.14.1 - openSUSE 13.1 (noarch): bind-doc-9.9.4P2-2.14.1 References: https://www.suse.com/security/cve/CVE-2015-5477.html https://bugzilla.suse.com/939567

1 0

openSUSE-RU-2015:1333-1: moderate: Recommended update for SUSE blinux
by maintenance＠opensuse.org 03 Aug '15

03 Aug '15

openSUSE Recommended Update: Recommended update for SUSE blinux ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1333-1 Rating: moderate References: #851625 #931036 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: sbl was updated to support current hardware and fix bugs. The following bugs were fixed: * boo#931036: sbl daemons dont start with systemd * boo#851625: correct permissions on /usr/sbin/brld sbl was updated to the latest git snapshot. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-528=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-528=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): sbl-3.5.0.20130317.git7a75bc29-24.4.1 sbl-debuginfo-3.5.0.20130317.git7a75bc29-24.4.1 sbl-debugsource-3.5.0.20130317.git7a75bc29-24.4.1 sbl-orca-3.5.0.20130317.git7a75bc29-24.4.1 - openSUSE 13.1 (i586 x86_64): sbl-3.5.0.20130317.git7a75bc29-21.3.1 sbl-debuginfo-3.5.0.20130317.git7a75bc29-21.3.1 sbl-debugsource-3.5.0.20130317.git7a75bc29-21.3.1 sbl-orca-3.5.0.20130317.git7a75bc29-21.3.1 References: https://bugzilla.suse.com/851625 https://bugzilla.suse.com/931036

1 0

openSUSE-SU-2015:1332-1: important: Security update for libuser
by opensuse-security＠opensuse.org 03 Aug '15

03 Aug '15

openSUSE Security Update: Security update for libuser ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1332-1 Rating: important References: #937533 Cross-References: CVE-2015-3246 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: libuser was updated to fix on security issue. The following vulnerability was fixed: * CVE-2015-3246: local root exploit through passwd file handling (boo#937533) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-529=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libuser-0.60-3.3.1 libuser-debuginfo-0.60-3.3.1 libuser-debugsource-0.60-3.3.1 libuser-devel-0.60-3.3.1 libuser-python-0.60-3.3.1 libuser-python-debuginfo-0.60-3.3.1 libuser1-0.60-3.3.1 libuser1-debuginfo-0.60-3.3.1 - openSUSE 13.2 (noarch): libuser-lang-0.60-3.3.1 References: https://www.suse.com/security/cve/CVE-2015-3246.html https://bugzilla.suse.com/937533

1 0