September 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:1655-1: moderate: Recommended update for WindowMaker
by maintenance＠opensuse.org 30 Sep '15

30 Sep '15

openSUSE Recommended Update: Recommended update for WindowMaker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1655-1 Rating: moderate References: #779179 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for WindowMaker fixes the following issue: - bsc#779179: Remove old SuSE wallpapers and add openSUSE ones. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-618=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-618=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): WindowMaker-0.95.5-4.3.1 WindowMaker-debuginfo-0.95.5-4.3.1 WindowMaker-debugsource-0.95.5-4.3.1 WindowMaker-devel-0.95.5-4.3.1 - openSUSE 13.1 (i586 x86_64): WindowMaker-0.95.4-5.7.1 WindowMaker-debuginfo-0.95.4-5.7.1 WindowMaker-debugsource-0.95.4-5.7.1 WindowMaker-devel-0.95.4-5.7.1 References: https://bugzilla.suse.com/779179

1 0

openSUSE-RU-2015:1650-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 29 Sep '15

29 Sep '15

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1650-1 Rating: moderate References: #927708 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for virtualbox fixes the following issues: - boo#927708: Add missing creation of the vboxsf group which is necessary for automount of shared folders to work. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-613=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): python-virtualbox-4.2.32-2.43.1 python-virtualbox-debuginfo-4.2.32-2.43.1 virtualbox-4.2.32-2.43.1 virtualbox-debuginfo-4.2.32-2.43.1 virtualbox-debugsource-4.2.32-2.43.1 virtualbox-devel-4.2.32-2.43.1 virtualbox-guest-kmp-default-4.2.32_k3.11.10_29-2.43.1 virtualbox-guest-kmp-default-debuginfo-4.2.32_k3.11.10_29-2.43.1 virtualbox-guest-kmp-desktop-4.2.32_k3.11.10_29-2.43.1 virtualbox-guest-kmp-desktop-debuginfo-4.2.32_k3.11.10_29-2.43.1 virtualbox-guest-tools-4.2.32-2.43.1 virtualbox-guest-tools-debuginfo-4.2.32-2.43.1 virtualbox-guest-x11-4.2.32-2.43.1 virtualbox-guest-x11-debuginfo-4.2.32-2.43.1 virtualbox-host-kmp-default-4.2.32_k3.11.10_29-2.43.1 virtualbox-host-kmp-default-debuginfo-4.2.32_k3.11.10_29-2.43.1 virtualbox-host-kmp-desktop-4.2.32_k3.11.10_29-2.43.1 virtualbox-host-kmp-desktop-debuginfo-4.2.32_k3.11.10_29-2.43.1 virtualbox-qt-4.2.32-2.43.1 virtualbox-qt-debuginfo-4.2.32-2.43.1 virtualbox-websrv-4.2.32-2.43.1 virtualbox-websrv-debuginfo-4.2.32-2.43.1 - openSUSE 13.1 (noarch): virtualbox-host-source-4.2.32-2.43.1 - openSUSE 13.1 (i586): virtualbox-guest-kmp-pae-4.2.32_k3.11.10_29-2.43.1 virtualbox-guest-kmp-pae-debuginfo-4.2.32_k3.11.10_29-2.43.1 virtualbox-host-kmp-pae-4.2.32_k3.11.10_29-2.43.1 virtualbox-host-kmp-pae-debuginfo-4.2.32_k3.11.10_29-2.43.1 References: https://bugzilla.suse.com/927708

1 0

openSUSE-RU-2015:1648-1: moderate: Recommended update for tftp
by maintenance＠opensuse.org 29 Sep '15

29 Sep '15

openSUSE Recommended Update: Recommended update for tftp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1648-1 Rating: moderate References: #793883 #928283 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for tftp fixes the following issues: - respond from the destination address taken from the first udp message's ancillary data (bnc#928283) * added tftp-multi-addresses.patch - tftp-hpa-0.48-macros-crash.patch: prevent buffer overflow in handling of \x macro (bnc#793883) - tftp-hpa-0.48-macros-v6mapped.patch: for \i and \x, expand v6-mapped addresses as native IPv4 (bnc#793883) - patches come from Michal Kubecek Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-612=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-612=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): tftp-5.2-10.3.1 tftp-debuginfo-5.2-10.3.1 tftp-debugsource-5.2-10.3.1 - openSUSE 13.1 (i586 x86_64): tftp-5.2-7.3.1 tftp-debuginfo-5.2-7.3.1 tftp-debugsource-5.2-7.3.1 References: https://bugzilla.suse.com/793883 https://bugzilla.suse.com/928283

1 0

openSUSE-RU-2015:1647-1: moderate: Recommended update for perl-Net-IP
by maintenance＠opensuse.org 29 Sep '15

29 Sep '15

openSUSE Recommended Update: Recommended update for perl-Net-IP ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1647-1 Rating: moderate References: #942108 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for perl-Net-IP fixes the following issue: - ipcount: fix the use of + in the address range (boo#942108) * added ipcount-invalid_chars_in_IP.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-614=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-614=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): perl-Net-IP-1.26-4.3.1 - openSUSE 13.1 (i586 x86_64): perl-Net-IP-1.26-2.3.1 References: https://bugzilla.suse.com/942108

1 0

openSUSE-RU-2015:1644-1: moderate: Recommended update for mariadb
by maintenance＠opensuse.org 26 Sep '15

26 Sep '15

openSUSE Recommended Update: Recommended update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1644-1 Rating: moderate References: #902396 #937767 #942908 #943096 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: On openSUSE 13.1 MariaDB was updated to MariaDB 5.5.45. A list of changes can be found on https://mariadb.com/kb/en/mariadb/mariadb-5545-release-notes/ * use syntax in mysql-systemd-helper that is accepted by both mariadb and mysql [bnc#937767] * install INFO_BIN and INFO_SRC, noticed in MDEV-6912 * replace readline-devel for readline5-devel (MDEV-6912) [bnc#902396] * remove superfluous '--group' parameter from mysql-systemd-helper * make -devel package installable in the presence of LibreSSL * cleanup after the update-message if it was displayed * add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly [bnc#943096] On openSUSE 13.2 MariaDB was updated to MariaDB 10.0.21. A list of changes can be found on https://mariadb.com/kb/en/mariadb/mariadb-10021-release-notes openSUSE changes: * use syntax in mysql-systemd-helper that is accepted by both mariadb and mysql [bnc#937767] * install INFO_BIN and INFO_SRC, noticed in MDEV-6912 * replace readline-devel for readline5-devel (MDEV-6912) [bnc#902396] * remove superfluous '--group' parameter from mysql-systemd-helper * make -devel package installable in the presence of LibreSSL * cleanup after the update-message if it was displayed * add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly [bnc#943096] Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-610=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-610=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libmysqlclient-devel-10.0.21-2.15.1 libmysqlclient18-10.0.21-2.15.1 libmysqlclient18-debuginfo-10.0.21-2.15.1 libmysqlclient_r18-10.0.21-2.15.1 libmysqld-devel-10.0.21-2.15.1 libmysqld18-10.0.21-2.15.1 libmysqld18-debuginfo-10.0.21-2.15.1 mariadb-10.0.21-2.15.1 mariadb-bench-10.0.21-2.15.1 mariadb-bench-debuginfo-10.0.21-2.15.1 mariadb-client-10.0.21-2.15.1 mariadb-client-debuginfo-10.0.21-2.15.1 mariadb-debuginfo-10.0.21-2.15.1 mariadb-debugsource-10.0.21-2.15.1 mariadb-errormessages-10.0.21-2.15.1 mariadb-test-10.0.21-2.15.1 mariadb-test-debuginfo-10.0.21-2.15.1 mariadb-tools-10.0.21-2.15.1 mariadb-tools-debuginfo-10.0.21-2.15.1 - openSUSE 13.2 (x86_64): libmysqlclient18-32bit-10.0.21-2.15.1 libmysqlclient18-debuginfo-32bit-10.0.21-2.15.1 libmysqlclient_r18-32bit-10.0.21-2.15.1 - openSUSE 13.1 (i586 x86_64): libmysqlclient-devel-5.5.45-10.1 libmysqlclient18-5.5.45-10.1 libmysqlclient18-debuginfo-5.5.45-10.1 libmysqlclient_r18-5.5.45-10.1 libmysqld-devel-5.5.45-10.1 libmysqld18-5.5.45-10.1 libmysqld18-debuginfo-5.5.45-10.1 mariadb-5.5.45-10.1 mariadb-bench-5.5.45-10.1 mariadb-bench-debuginfo-5.5.45-10.1 mariadb-client-5.5.45-10.1 mariadb-client-debuginfo-5.5.45-10.1 mariadb-debuginfo-5.5.45-10.1 mariadb-debugsource-5.5.45-10.1 mariadb-errormessages-5.5.45-10.1 mariadb-test-5.5.45-10.1 mariadb-test-debuginfo-5.5.45-10.1 mariadb-tools-5.5.45-10.1 mariadb-tools-debuginfo-5.5.45-10.1 - openSUSE 13.1 (x86_64): libmysqlclient18-32bit-5.5.45-10.1 libmysqlclient18-debuginfo-32bit-5.5.45-10.1 libmysqlclient_r18-32bit-5.5.45-10.1 References: https://bugzilla.suse.com/902396 https://bugzilla.suse.com/937767 https://bugzilla.suse.com/942908 https://bugzilla.suse.com/943096

1 0

openSUSE-SU-2015:1629-1: moderate: Security update for mysql-community-server
by opensuse-security＠opensuse.org 25 Sep '15

25 Sep '15

openSUSE Security Update: Security update for mysql-community-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1629-1 Rating: moderate References: #852477 #902396 #938412 #942908 #943096 Cross-References: CVE-2015-2582 CVE-2015-2611 CVE-2015-2617 CVE-2015-2620 CVE-2015-2639 CVE-2015-2641 CVE-2015-2643 CVE-2015-2648 CVE-2015-2661 CVE-2015-4737 CVE-2015-4752 CVE-2015-4756 CVE-2015-4757 CVE-2015-4761 CVE-2015-4767 CVE-2015-4769 CVE-2015-4771 CVE-2015-4772 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: The MySQL Community Server edition was updated to 5.6.26, fixing security issues and bugs. All changes: http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html * Fixed CVEs: CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582 CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772 CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771 CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641 CVE-2015-2661, CVE-2015-4767 * disable Performance Schema by default. Since MySQL 5.6.6 upstream enabled Performance Schema by default which results in increased memory usage. The added option disable Performance Schema again in order to decrease MySQL memory usage [bnc#852477]. * install INFO_BIN and INFO_SRC, noticed in MDEV-6912 * remove superfluous '--group' parameter from mysql-systemd-helper * make -devel package installable in the presence of LibreSSL * cleanup after the update-message if it was displayed * add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly [bnc#943096] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-608=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-608=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libmysql56client18-5.6.26-2.9.1 libmysql56client18-debuginfo-5.6.26-2.9.1 libmysql56client_r18-5.6.26-2.9.1 mysql-community-server-5.6.26-2.9.1 mysql-community-server-bench-5.6.26-2.9.1 mysql-community-server-bench-debuginfo-5.6.26-2.9.1 mysql-community-server-client-5.6.26-2.9.1 mysql-community-server-client-debuginfo-5.6.26-2.9.1 mysql-community-server-debuginfo-5.6.26-2.9.1 mysql-community-server-debugsource-5.6.26-2.9.1 mysql-community-server-errormessages-5.6.26-2.9.1 mysql-community-server-test-5.6.26-2.9.1 mysql-community-server-test-debuginfo-5.6.26-2.9.1 mysql-community-server-tools-5.6.26-2.9.1 mysql-community-server-tools-debuginfo-5.6.26-2.9.1 - openSUSE 13.2 (x86_64): libmysql56client18-32bit-5.6.26-2.9.1 libmysql56client18-debuginfo-32bit-5.6.26-2.9.1 libmysql56client_r18-32bit-5.6.26-2.9.1 - openSUSE 13.1 (i586 x86_64): libmysql56client18-5.6.26-7.10.1 libmysql56client18-debuginfo-5.6.26-7.10.1 libmysql56client_r18-5.6.26-7.10.1 mysql-community-server-5.6.26-7.10.1 mysql-community-server-bench-5.6.26-7.10.1 mysql-community-server-bench-debuginfo-5.6.26-7.10.1 mysql-community-server-client-5.6.26-7.10.1 mysql-community-server-client-debuginfo-5.6.26-7.10.1 mysql-community-server-debuginfo-5.6.26-7.10.1 mysql-community-server-debugsource-5.6.26-7.10.1 mysql-community-server-errormessages-5.6.26-7.10.1 mysql-community-server-test-5.6.26-7.10.1 mysql-community-server-test-debuginfo-5.6.26-7.10.1 mysql-community-server-tools-5.6.26-7.10.1 mysql-community-server-tools-debuginfo-5.6.26-7.10.1 - openSUSE 13.1 (x86_64): libmysql56client18-32bit-5.6.26-7.10.1 libmysql56client18-debuginfo-32bit-5.6.26-7.10.1 libmysql56client_r18-32bit-5.6.26-7.10.1 References: https://www.suse.com/security/cve/CVE-2015-2582.html https://www.suse.com/security/cve/CVE-2015-2611.html https://www.suse.com/security/cve/CVE-2015-2617.html https://www.suse.com/security/cve/CVE-2015-2620.html https://www.suse.com/security/cve/CVE-2015-2639.html https://www.suse.com/security/cve/CVE-2015-2641.html https://www.suse.com/security/cve/CVE-2015-2643.html https://www.suse.com/security/cve/CVE-2015-2648.html https://www.suse.com/security/cve/CVE-2015-2661.html https://www.suse.com/security/cve/CVE-2015-4737.html https://www.suse.com/security/cve/CVE-2015-4752.html https://www.suse.com/security/cve/CVE-2015-4756.html https://www.suse.com/security/cve/CVE-2015-4757.html https://www.suse.com/security/cve/CVE-2015-4761.html https://www.suse.com/security/cve/CVE-2015-4767.html https://www.suse.com/security/cve/CVE-2015-4769.html https://www.suse.com/security/cve/CVE-2015-4771.html https://www.suse.com/security/cve/CVE-2015-4772.html https://bugzilla.suse.com/852477 https://bugzilla.suse.com/902396 https://bugzilla.suse.com/938412 https://bugzilla.suse.com/942908 https://bugzilla.suse.com/943096

1 0

openSUSE-SU-2015:1628-1: important: Security update for php5
by opensuse-security＠opensuse.org 25 Sep '15

25 Sep '15

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1628-1 Rating: important References: #942291 #942293 #942294 #942295 #942296 #945402 #945403 #945412 #945428 Cross-References: CVE-2015-6831 CVE-2015-6832 CVE-2015-6833 CVE-2015-6834 CVE-2015-6835 CVE-2015-6836 CVE-2015-6837 CVE-2015-6838 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has one errata is now available. Description: The PHP5 script interpreter was updated to fix various security issues: * CVE-2015-6831: A use after free vulnerability in unserialize() has been fixed which could be used to crash php or potentially execute code. [bnc#942291] [bnc#942294] [bnc#942295] * CVE-2015-6832: A dangling pointer in the unserialization of ArrayObject items could be used to crash php or potentially execute code. [bnc#942293] * CVE-2015-6833: A directory traversal when extracting ZIP files could be used to overwrite files outside of intended area. [bnc#942296] * CVE-2015-6834: A Use After Free Vulnerability in unserialize() has been fixed which could be used to crash php or potentially execute code. [bnc#945403] * CVE-2015-6835: A Use After Free Vulnerability in session unserialize() has been fixed which could be used to crash php or potentially execute code. [bnc#945402] * CVE-2015-6836: A SOAP serialize_function_call() type confusion leading to remote code execution problem was fixed. [bnc#945428] * CVE-2015-6837 CVE-2015-6838: Two NULL pointer dereferences in the XSLTProcessor class were fixed. [bnc#945412] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-609=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-609=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_php5-5.6.1-36.1 apache2-mod_php5-debuginfo-5.6.1-36.1 php5-5.6.1-36.1 php5-bcmath-5.6.1-36.1 php5-bcmath-debuginfo-5.6.1-36.1 php5-bz2-5.6.1-36.1 php5-bz2-debuginfo-5.6.1-36.1 php5-calendar-5.6.1-36.1 php5-calendar-debuginfo-5.6.1-36.1 php5-ctype-5.6.1-36.1 php5-ctype-debuginfo-5.6.1-36.1 php5-curl-5.6.1-36.1 php5-curl-debuginfo-5.6.1-36.1 php5-dba-5.6.1-36.1 php5-dba-debuginfo-5.6.1-36.1 php5-debuginfo-5.6.1-36.1 php5-debugsource-5.6.1-36.1 php5-devel-5.6.1-36.1 php5-dom-5.6.1-36.1 php5-dom-debuginfo-5.6.1-36.1 php5-enchant-5.6.1-36.1 php5-enchant-debuginfo-5.6.1-36.1 php5-exif-5.6.1-36.1 php5-exif-debuginfo-5.6.1-36.1 php5-fastcgi-5.6.1-36.1 php5-fastcgi-debuginfo-5.6.1-36.1 php5-fileinfo-5.6.1-36.1 php5-fileinfo-debuginfo-5.6.1-36.1 php5-firebird-5.6.1-36.1 php5-firebird-debuginfo-5.6.1-36.1 php5-fpm-5.6.1-36.1 php5-fpm-debuginfo-5.6.1-36.1 php5-ftp-5.6.1-36.1 php5-ftp-debuginfo-5.6.1-36.1 php5-gd-5.6.1-36.1 php5-gd-debuginfo-5.6.1-36.1 php5-gettext-5.6.1-36.1 php5-gettext-debuginfo-5.6.1-36.1 php5-gmp-5.6.1-36.1 php5-gmp-debuginfo-5.6.1-36.1 php5-iconv-5.6.1-36.1 php5-iconv-debuginfo-5.6.1-36.1 php5-imap-5.6.1-36.1 php5-imap-debuginfo-5.6.1-36.1 php5-intl-5.6.1-36.1 php5-intl-debuginfo-5.6.1-36.1 php5-json-5.6.1-36.1 php5-json-debuginfo-5.6.1-36.1 php5-ldap-5.6.1-36.1 php5-ldap-debuginfo-5.6.1-36.1 php5-mbstring-5.6.1-36.1 php5-mbstring-debuginfo-5.6.1-36.1 php5-mcrypt-5.6.1-36.1 php5-mcrypt-debuginfo-5.6.1-36.1 php5-mssql-5.6.1-36.1 php5-mssql-debuginfo-5.6.1-36.1 php5-mysql-5.6.1-36.1 php5-mysql-debuginfo-5.6.1-36.1 php5-odbc-5.6.1-36.1 php5-odbc-debuginfo-5.6.1-36.1 php5-opcache-5.6.1-36.1 php5-opcache-debuginfo-5.6.1-36.1 php5-openssl-5.6.1-36.1 php5-openssl-debuginfo-5.6.1-36.1 php5-pcntl-5.6.1-36.1 php5-pcntl-debuginfo-5.6.1-36.1 php5-pdo-5.6.1-36.1 php5-pdo-debuginfo-5.6.1-36.1 php5-pgsql-5.6.1-36.1 php5-pgsql-debuginfo-5.6.1-36.1 php5-phar-5.6.1-36.1 php5-phar-debuginfo-5.6.1-36.1 php5-posix-5.6.1-36.1 php5-posix-debuginfo-5.6.1-36.1 php5-pspell-5.6.1-36.1 php5-pspell-debuginfo-5.6.1-36.1 php5-readline-5.6.1-36.1 php5-readline-debuginfo-5.6.1-36.1 php5-shmop-5.6.1-36.1 php5-shmop-debuginfo-5.6.1-36.1 php5-snmp-5.6.1-36.1 php5-snmp-debuginfo-5.6.1-36.1 php5-soap-5.6.1-36.1 php5-soap-debuginfo-5.6.1-36.1 php5-sockets-5.6.1-36.1 php5-sockets-debuginfo-5.6.1-36.1 php5-sqlite-5.6.1-36.1 php5-sqlite-debuginfo-5.6.1-36.1 php5-suhosin-5.6.1-36.1 php5-suhosin-debuginfo-5.6.1-36.1 php5-sysvmsg-5.6.1-36.1 php5-sysvmsg-debuginfo-5.6.1-36.1 php5-sysvsem-5.6.1-36.1 php5-sysvsem-debuginfo-5.6.1-36.1 php5-sysvshm-5.6.1-36.1 php5-sysvshm-debuginfo-5.6.1-36.1 php5-tidy-5.6.1-36.1 php5-tidy-debuginfo-5.6.1-36.1 php5-tokenizer-5.6.1-36.1 php5-tokenizer-debuginfo-5.6.1-36.1 php5-wddx-5.6.1-36.1 php5-wddx-debuginfo-5.6.1-36.1 php5-xmlreader-5.6.1-36.1 php5-xmlreader-debuginfo-5.6.1-36.1 php5-xmlrpc-5.6.1-36.1 php5-xmlrpc-debuginfo-5.6.1-36.1 php5-xmlwriter-5.6.1-36.1 php5-xmlwriter-debuginfo-5.6.1-36.1 php5-xsl-5.6.1-36.1 php5-xsl-debuginfo-5.6.1-36.1 php5-zip-5.6.1-36.1 php5-zip-debuginfo-5.6.1-36.1 php5-zlib-5.6.1-36.1 php5-zlib-debuginfo-5.6.1-36.1 - openSUSE 13.2 (noarch): php5-pear-5.6.1-36.1 - openSUSE 13.1 (i586 x86_64): apache2-mod_php5-5.4.20-67.1 apache2-mod_php5-debuginfo-5.4.20-67.1 php5-5.4.20-67.1 php5-bcmath-5.4.20-67.1 php5-bcmath-debuginfo-5.4.20-67.1 php5-bz2-5.4.20-67.1 php5-bz2-debuginfo-5.4.20-67.1 php5-calendar-5.4.20-67.1 php5-calendar-debuginfo-5.4.20-67.1 php5-ctype-5.4.20-67.1 php5-ctype-debuginfo-5.4.20-67.1 php5-curl-5.4.20-67.1 php5-curl-debuginfo-5.4.20-67.1 php5-dba-5.4.20-67.1 php5-dba-debuginfo-5.4.20-67.1 php5-debuginfo-5.4.20-67.1 php5-debugsource-5.4.20-67.1 php5-devel-5.4.20-67.1 php5-dom-5.4.20-67.1 php5-dom-debuginfo-5.4.20-67.1 php5-enchant-5.4.20-67.1 php5-enchant-debuginfo-5.4.20-67.1 php5-exif-5.4.20-67.1 php5-exif-debuginfo-5.4.20-67.1 php5-fastcgi-5.4.20-67.1 php5-fastcgi-debuginfo-5.4.20-67.1 php5-fileinfo-5.4.20-67.1 php5-fileinfo-debuginfo-5.4.20-67.1 php5-firebird-5.4.20-67.1 php5-firebird-debuginfo-5.4.20-67.1 php5-fpm-5.4.20-67.1 php5-fpm-debuginfo-5.4.20-67.1 php5-ftp-5.4.20-67.1 php5-ftp-debuginfo-5.4.20-67.1 php5-gd-5.4.20-67.1 php5-gd-debuginfo-5.4.20-67.1 php5-gettext-5.4.20-67.1 php5-gettext-debuginfo-5.4.20-67.1 php5-gmp-5.4.20-67.1 php5-gmp-debuginfo-5.4.20-67.1 php5-iconv-5.4.20-67.1 php5-iconv-debuginfo-5.4.20-67.1 php5-imap-5.4.20-67.1 php5-imap-debuginfo-5.4.20-67.1 php5-intl-5.4.20-67.1 php5-intl-debuginfo-5.4.20-67.1 php5-json-5.4.20-67.1 php5-json-debuginfo-5.4.20-67.1 php5-ldap-5.4.20-67.1 php5-ldap-debuginfo-5.4.20-67.1 php5-mbstring-5.4.20-67.1 php5-mbstring-debuginfo-5.4.20-67.1 php5-mcrypt-5.4.20-67.1 php5-mcrypt-debuginfo-5.4.20-67.1 php5-mssql-5.4.20-67.1 php5-mssql-debuginfo-5.4.20-67.1 php5-mysql-5.4.20-67.1 php5-mysql-debuginfo-5.4.20-67.1 php5-odbc-5.4.20-67.1 php5-odbc-debuginfo-5.4.20-67.1 php5-openssl-5.4.20-67.1 php5-openssl-debuginfo-5.4.20-67.1 php5-pcntl-5.4.20-67.1 php5-pcntl-debuginfo-5.4.20-67.1 php5-pdo-5.4.20-67.1 php5-pdo-debuginfo-5.4.20-67.1 php5-pgsql-5.4.20-67.1 php5-pgsql-debuginfo-5.4.20-67.1 php5-phar-5.4.20-67.1 php5-phar-debuginfo-5.4.20-67.1 php5-posix-5.4.20-67.1 php5-posix-debuginfo-5.4.20-67.1 php5-pspell-5.4.20-67.1 php5-pspell-debuginfo-5.4.20-67.1 php5-readline-5.4.20-67.1 php5-readline-debuginfo-5.4.20-67.1 php5-shmop-5.4.20-67.1 php5-shmop-debuginfo-5.4.20-67.1 php5-snmp-5.4.20-67.1 php5-snmp-debuginfo-5.4.20-67.1 php5-soap-5.4.20-67.1 php5-soap-debuginfo-5.4.20-67.1 php5-sockets-5.4.20-67.1 php5-sockets-debuginfo-5.4.20-67.1 php5-sqlite-5.4.20-67.1 php5-sqlite-debuginfo-5.4.20-67.1 php5-suhosin-5.4.20-67.1 php5-suhosin-debuginfo-5.4.20-67.1 php5-sysvmsg-5.4.20-67.1 php5-sysvmsg-debuginfo-5.4.20-67.1 php5-sysvsem-5.4.20-67.1 php5-sysvsem-debuginfo-5.4.20-67.1 php5-sysvshm-5.4.20-67.1 php5-sysvshm-debuginfo-5.4.20-67.1 php5-tidy-5.4.20-67.1 php5-tidy-debuginfo-5.4.20-67.1 php5-tokenizer-5.4.20-67.1 php5-tokenizer-debuginfo-5.4.20-67.1 php5-wddx-5.4.20-67.1 php5-wddx-debuginfo-5.4.20-67.1 php5-xmlreader-5.4.20-67.1 php5-xmlreader-debuginfo-5.4.20-67.1 php5-xmlrpc-5.4.20-67.1 php5-xmlrpc-debuginfo-5.4.20-67.1 php5-xmlwriter-5.4.20-67.1 php5-xmlwriter-debuginfo-5.4.20-67.1 php5-xsl-5.4.20-67.1 php5-xsl-debuginfo-5.4.20-67.1 php5-zip-5.4.20-67.1 php5-zip-debuginfo-5.4.20-67.1 php5-zlib-5.4.20-67.1 php5-zlib-debuginfo-5.4.20-67.1 - openSUSE 13.1 (noarch): php5-pear-5.4.20-67.1 References: https://www.suse.com/security/cve/CVE-2015-6831.html https://www.suse.com/security/cve/CVE-2015-6832.html https://www.suse.com/security/cve/CVE-2015-6833.html https://www.suse.com/security/cve/CVE-2015-6834.html https://www.suse.com/security/cve/CVE-2015-6835.html https://www.suse.com/security/cve/CVE-2015-6836.html https://www.suse.com/security/cve/CVE-2015-6837.html https://www.suse.com/security/cve/CVE-2015-6838.html https://bugzilla.suse.com/942291 https://bugzilla.suse.com/942293 https://bugzilla.suse.com/942294 https://bugzilla.suse.com/942295 https://bugzilla.suse.com/942296 https://bugzilla.suse.com/945402 https://bugzilla.suse.com/945403 https://bugzilla.suse.com/945412 https://bugzilla.suse.com/945428

1 0

openSUSE-RU-2015:1625-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 24 Sep '15

24 Sep '15

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1625-1 Rating: moderate References: #39842 #889287 #892678 #898250 #899104 #899363 #900352 #900466 #905738 #906694 #910337 #912904 #914833 #918356 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 14 recommended fixes can now be installed. Description: The Yast2 network module was updated to fix various bugs. - do not crash when adding new device and proposed configuration name is changed to new one (bnc#912904) - do not crash when renaming virtual device via hardware tab (bnc#914833) - initialize configuration name in Hardware tab correctly. It means according device type. Also uses custom name if user used nonstandard one. (bnc#910337) - udev rules provided by AutoYaST profile gets applied (bnc#905738) - populate bond slave candidates list with proper device names (bnc#918356) - Removed a bash specific post script with a workaround for an ancient bug (bnc#39842). - remove X-KDE-Library from desktop file (bnc#899104) - fixed exception raised due to modifying frozen string when running in localized mode (bnc#906694) - ignore /etc/install.inf:usessh flag when the file is present in installed system and always reload / restart network service in case of updated configuration (bnc#898250, bnc#899363) - AutoYaST Routing Import: Initialize device list correctly. (bnc#900352) - Do not set default_route to "no" in auto-configuration in inst-sys, just remove the entry completely (bnc#900466) - Improved help text in "global options" (bnc#892678) - during autoconfiguration at s390 use linuxrc's OSAHWAddr param for LLADDR when available. (bnc#889287) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-607=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): yast2-network-3.1.110.1-3.1 yast2-network-devel-doc-3.1.110.1-3.1 References: https://bugzilla.suse.com/39842 https://bugzilla.suse.com/889287 https://bugzilla.suse.com/892678 https://bugzilla.suse.com/898250 https://bugzilla.suse.com/899104 https://bugzilla.suse.com/899363 https://bugzilla.suse.com/900352 https://bugzilla.suse.com/900466 https://bugzilla.suse.com/905738 https://bugzilla.suse.com/906694 https://bugzilla.suse.com/910337 https://bugzilla.suse.com/912904 https://bugzilla.suse.com/914833 https://bugzilla.suse.com/918356

1 0

openSUSE-OU-2015:1624-1: Recommended update for nodejs
by maintenance＠opensuse.org 24 Sep '15

24 Sep '15

openSUSE Optional Update: Recommended update for nodejs ______________________________________________________________________________ Announcement ID: openSUSE-OU-2015:1624-1 Rating: low References: #895262 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Nodejs was updated to v4.0.0, bringing features, bug and security fixes. * child_process: ChildProcess.prototype.send() and process.send() operate asynchronously across all platforms so an optional callback parameter has been introduced that will be invoked once the message has been sent. * node: Rename "io.js" code to "Node.js". * node-gyp: This release bundles an updated version of node-gyp that works with all versions of Node.js and io.js including nightly and release candidate builds. From io.js v3 and Node.js v4 onward, it will only download a headers tarball when building addons rather than the entire source. * npm: Upgrade to version 2.14.2 from 2.13.3, includes a security update. * timers: Improved timer performance from porting the 0.12 implementation, plus minor fixes. * util: The util.is*() functions have been deprecated, beginning with deprecation warnings in the documentation for this release, users are encouraged to seek more robust alternatives in the npm registry. * v8: Upgrade to version 4.5.103.30 from 4.4.63.30 Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-604=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-604=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): nodejs-4.0.0-2.3.1 nodejs-debuginfo-4.0.0-2.3.1 nodejs-debugsource-4.0.0-2.3.1 nodejs-devel-4.0.0-2.3.1 - openSUSE 13.2 (noarch): nodejs-doc-4.0.0-2.3.1 - openSUSE 13.1 (i586 x86_64): nodejs-4.0.0-3.7.1 nodejs-debuginfo-4.0.0-3.7.1 nodejs-debugsource-4.0.0-3.7.1 nodejs-devel-4.0.0-3.7.1 - openSUSE 13.1 (noarch): nodejs-doc-4.0.0-3.7.1 References: https://www.suse.com/security/cve/CVE-2013-4450.html https://www.suse.com/security/cve/CVE-2014-5256.html https://bugzilla.suse.com/895262

1 0

openSUSE-SU-2015:1623-1: moderate: Security update for cyrus-imapd
by opensuse-security＠opensuse.org 24 Sep '15

24 Sep '15

openSUSE Security Update: Security update for cyrus-imapd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1623-1 Rating: moderate References: #945844 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update provides version 2.4.18 of cyrus-imapd * Security fix: handle urlfetch range starting outside message range * A bunch of cleanups and fixes to compiling * A bunch of sieve cleanups * Enhanced SSL/TLS configuration options * Disable use of SSLv2/SSLv3 * Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos) * Fixed T116: correct LIST response for domains starting with 'inbox.' * Fixed T76: fixed lmtpd userdeny db checks (thanks Leena Heino) * Fixed bug #3856: lmtpd now performs userdeny checks * Fixed bug #3848: support charset aliases in encoded headers * Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha) * Fixed bug #3415: fixed nntpd LIST/GROUP bug * Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves * Fixed bug #3757: don't segfault on mailbox close with no user Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-606=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): cyradm-2.4.18-2.7.1 cyrus-imapd-2.4.18-2.7.1 cyrus-imapd-debuginfo-2.4.18-2.7.1 cyrus-imapd-debugsource-2.4.18-2.7.1 cyrus-imapd-devel-2.4.18-2.7.1 cyrus-imapd-snmp-2.4.18-2.7.1 cyrus-imapd-snmp-mibs-2.4.18-2.7.1 cyrus-imapd-utils-2.4.18-2.7.1 perl-Cyrus-IMAP-2.4.18-2.7.1 perl-Cyrus-IMAP-debuginfo-2.4.18-2.7.1 perl-Cyrus-SIEVE-managesieve-2.4.18-2.7.1 perl-Cyrus-SIEVE-managesieve-debuginfo-2.4.18-2.7.1 References: https://bugzilla.suse.com/945844

1 0

openSUSE-SU-2015:1622-1: moderate: Security update for cyrus-imapd
by opensuse-security＠opensuse.org 24 Sep '15

24 Sep '15

openSUSE Security Update: Security update for cyrus-imapd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1622-1 Rating: moderate References: #945841 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This recommended update provides version 2.3.19 of cyrus-imapd * Security fix: handle urlfetch range starting outside message range * Disable use of SSLv2/SSLv3 * Support for Berkeley DB 5.x (thanks Ondrej Sury) * Support for newer glibc versions (thanks Thomas Jarosch) * Fixed bug #3465: support for perl 5.14 (thanks hsk(a)imb-jena.de) * Fixed bug #3640: reject NULL bytes in headers on LMTP delivery (thanks Julien Coloos) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-605=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): cyrus-imapd-2.3.19-34.3.1 cyrus-imapd-debuginfo-2.3.19-34.3.1 cyrus-imapd-debugsource-2.3.19-34.3.1 cyrus-imapd-devel-2.3.19-34.3.1 perl-Cyrus-IMAP-2.3.19-34.3.1 perl-Cyrus-IMAP-debuginfo-2.3.19-34.3.1 perl-Cyrus-SIEVE-managesieve-2.3.19-34.3.1 perl-Cyrus-SIEVE-managesieve-debuginfo-2.3.19-34.3.1 References: https://bugzilla.suse.com/945841

1 0

openSUSE-SU-2015:1616-1: critical: Security update for flash-player
by opensuse-security＠opensuse.org 23 Sep '15

23 Sep '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1616-1 Rating: critical References: #946880 Cross-References: CVE-2015-5567 CVE-2015-5568 CVE-2015-5570 CVE-2015-5571 CVE-2015-5572 CVE-2015-5573 CVE-2015-5574 CVE-2015-5575 CVE-2015-5576 CVE-2015-5577 CVE-2015-5578 CVE-2015-5579 CVE-2015-5580 CVE-2015-5581 CVE-2015-5582 CVE-2015-5584 CVE-2015-5587 CVE-2015-5588 CVE-2015-6676 CVE-2015-6677 CVE-2015-6678 CVE-2015-6679 CVE-2015-6682 Affected Products: openSUSE 13.2:NonFree openSUSE 13.1:NonFree ______________________________________________________________________________ An update that fixes 23 vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.521 (APSB15-23 bsc#946880) fixing several security issues: More information can be found on: https://helpx.adobe.com/security/products/flash-player/apsb15-23.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2:NonFree: zypper in -t patch openSUSE-2015-603=1 - openSUSE 13.1:NonFree: zypper in -t patch openSUSE-2015-603=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2:NonFree (i586 x86_64): flash-player-11.2.202.521-2.70.1 flash-player-gnome-11.2.202.521-2.70.1 flash-player-kde4-11.2.202.521-2.70.1 - openSUSE 13.1:NonFree (i586 x86_64): flash-player-11.2.202.521-135.1 flash-player-gnome-11.2.202.521-135.1 flash-player-kde4-11.2.202.521-135.1 References: https://www.suse.com/security/cve/CVE-2015-5567.html https://www.suse.com/security/cve/CVE-2015-5568.html https://www.suse.com/security/cve/CVE-2015-5570.html https://www.suse.com/security/cve/CVE-2015-5571.html https://www.suse.com/security/cve/CVE-2015-5572.html https://www.suse.com/security/cve/CVE-2015-5573.html https://www.suse.com/security/cve/CVE-2015-5574.html https://www.suse.com/security/cve/CVE-2015-5575.html https://www.suse.com/security/cve/CVE-2015-5576.html https://www.suse.com/security/cve/CVE-2015-5577.html https://www.suse.com/security/cve/CVE-2015-5578.html https://www.suse.com/security/cve/CVE-2015-5579.html https://www.suse.com/security/cve/CVE-2015-5580.html https://www.suse.com/security/cve/CVE-2015-5581.html https://www.suse.com/security/cve/CVE-2015-5582.html https://www.suse.com/security/cve/CVE-2015-5584.html https://www.suse.com/security/cve/CVE-2015-5587.html https://www.suse.com/security/cve/CVE-2015-5588.html https://www.suse.com/security/cve/CVE-2015-6676.html https://www.suse.com/security/cve/CVE-2015-6677.html https://www.suse.com/security/cve/CVE-2015-6678.html https://www.suse.com/security/cve/CVE-2015-6679.html https://www.suse.com/security/cve/CVE-2015-6682.html https://bugzilla.suse.com/946880

1 0

openSUSE-SU-2015:1598-1: moderate: Security update for python-django
by opensuse-security＠opensuse.org 22 Sep '15

22 Sep '15

openSUSE Security Update: Security update for python-django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1598-1 Rating: moderate References: #913053 #913054 #913055 #913056 #914706 #923176 #941587 Cross-References: CVE-2015-0219 CVE-2015-0220 CVE-2015-0221 CVE-2015-0222 CVE-2015-2317 CVE-2015-5963 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has one errata is now available. Description: python Django was updated to fix a remote denial of service (resource exhaustion) possibility in the auth views module. (bsc#941587, CVE-2015-5963) Also is_safe_url() was made to reject URLs that start with control characters to mitigate possible XSS attack via user-supplied redirect URLs (bnc#923176, CVE-2015-2317) - Method check_for_test_cookie is deprecated, bnc#914706 - Update to version 1.5.12 with various security fixes: + Fixed a regression with dynamically generated inlines and allowed field references in the admin + Allowed related many-to-many fields to be referenced in the admin + Allowed inline and hidden references to admin fields Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-598=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): python-django-1.5.12-0.2.11.1 References: https://www.suse.com/security/cve/CVE-2015-0219.html https://www.suse.com/security/cve/CVE-2015-0220.html https://www.suse.com/security/cve/CVE-2015-0221.html https://www.suse.com/security/cve/CVE-2015-0222.html https://www.suse.com/security/cve/CVE-2015-2317.html https://www.suse.com/security/cve/CVE-2015-5963.html https://bugzilla.suse.com/913053 https://bugzilla.suse.com/913054 https://bugzilla.suse.com/913055 https://bugzilla.suse.com/913056 https://bugzilla.suse.com/914706 https://bugzilla.suse.com/923176 https://bugzilla.suse.com/941587

1 0

openSUSE-SU-2015:1597-1: important: Security update for bind
by opensuse-security＠opensuse.org 22 Sep '15

22 Sep '15

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1597-1 Rating: important References: #944066 Cross-References: CVE-2015-5722 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: BIND was updated to fix a denial of service against servers performing validation on DNSSEC-signed records (CVE-2015-5722, bsc#944066). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-600=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-600=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): bind-9.9.6P1-2.10.1 bind-chrootenv-9.9.6P1-2.10.1 bind-debuginfo-9.9.6P1-2.10.1 bind-debugsource-9.9.6P1-2.10.1 bind-devel-9.9.6P1-2.10.1 bind-libs-9.9.6P1-2.10.1 bind-libs-debuginfo-9.9.6P1-2.10.1 bind-lwresd-9.9.6P1-2.10.1 bind-lwresd-debuginfo-9.9.6P1-2.10.1 bind-utils-9.9.6P1-2.10.1 bind-utils-debuginfo-9.9.6P1-2.10.1 - openSUSE 13.2 (x86_64): bind-libs-32bit-9.9.6P1-2.10.1 bind-libs-debuginfo-32bit-9.9.6P1-2.10.1 - openSUSE 13.2 (noarch): bind-doc-9.9.6P1-2.10.1 - openSUSE 13.1 (i586 x86_64): bind-9.9.4P2-2.17.1 bind-chrootenv-9.9.4P2-2.17.1 bind-debuginfo-9.9.4P2-2.17.1 bind-debugsource-9.9.4P2-2.17.1 bind-devel-9.9.4P2-2.17.1 bind-libs-9.9.4P2-2.17.1 bind-libs-debuginfo-9.9.4P2-2.17.1 bind-lwresd-9.9.4P2-2.17.1 bind-lwresd-debuginfo-9.9.4P2-2.17.1 bind-utils-9.9.4P2-2.17.1 bind-utils-debuginfo-9.9.4P2-2.17.1 - openSUSE 13.1 (x86_64): bind-libs-32bit-9.9.4P2-2.17.1 bind-libs-debuginfo-32bit-9.9.4P2-2.17.1 - openSUSE 13.1 (noarch): bind-doc-9.9.4P2-2.17.1 References: https://www.suse.com/security/cve/CVE-2015-5722.html https://bugzilla.suse.com/944066

1 0

openSUSE-SU-2015:1596-1: Security update for libgcrypt
by opensuse-security＠opensuse.org 22 Sep '15

22 Sep '15

openSUSE Security Update: Security update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1596-1 Rating: low References: #944835 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: libgcrypt was updated to include countermeasures against Lenstra's fault attack on RSA Chinese Remainder Theorem optimization in RSA. A signature verification step was updated to protect against leaks of private keys in case of hardware faults or implementation errors in numeric libraries. GnuPG already performed this check by itself and was not affected. This fix is equivalent, but not equal to CVE-2015-5738 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-597=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-597=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libgcrypt-cavs-1.6.1-8.10.1 libgcrypt-cavs-debuginfo-1.6.1-8.10.1 libgcrypt-debugsource-1.6.1-8.10.1 libgcrypt-devel-1.6.1-8.10.1 libgcrypt-devel-debuginfo-1.6.1-8.10.1 libgcrypt20-1.6.1-8.10.1 libgcrypt20-debuginfo-1.6.1-8.10.1 libgcrypt20-hmac-1.6.1-8.10.1 - openSUSE 13.2 (x86_64): libgcrypt-devel-32bit-1.6.1-8.10.1 libgcrypt-devel-debuginfo-32bit-1.6.1-8.10.1 libgcrypt20-32bit-1.6.1-8.10.1 libgcrypt20-debuginfo-32bit-1.6.1-8.10.1 libgcrypt20-hmac-32bit-1.6.1-8.10.1 - openSUSE 13.1 (i586 x86_64): libgcrypt-debugsource-1.5.4-2.12.1 libgcrypt-devel-1.5.4-2.12.1 libgcrypt-devel-debuginfo-1.5.4-2.12.1 libgcrypt11-1.5.4-2.12.1 libgcrypt11-debuginfo-1.5.4-2.12.1 - openSUSE 13.1 (x86_64): libgcrypt-devel-32bit-1.5.4-2.12.1 libgcrypt-devel-debuginfo-32bit-1.5.4-2.12.1 libgcrypt11-32bit-1.5.4-2.12.1 libgcrypt11-debuginfo-32bit-1.5.4-2.12.1 References: https://bugzilla.suse.com/944835

1 0

openSUSE-SU-2015:1595-1: important: Security update for icedtea-web
by opensuse-security＠opensuse.org 22 Sep '15

22 Sep '15

openSUSE Security Update: Security update for icedtea-web ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1595-1 Rating: important References: #755054 #830880 #944208 #944209 Cross-References: CVE-2012-4540 CVE-2015-5234 CVE-2015-5235 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: The icedtea-web java plugin was updated to 1.6.1. Changes included: * Enabled Entry-Point attribute check * permissions sandbox and signed app and unsigned app with permissions all-permissions now run in sandbox instead of not at all. * fixed DownloadService * comments in deployment.properties now should persists load/save * fixed bug in caching of files with query * fixed issues with recreating of existing shortcut * trustAll/trustNone now processed correctly * headless no longer shows dialogues * RH1231441 Unable to read the text of the buttons of the security dialogue * Fixed RH1233697 icedtea-web: applet origin spoofing (CVE-2015-5235, bsc#944208) * Fixed RH1233667 icedtea-web: unexpected permanent authorization of unsigned applets (CVE-2015-5234, bsc#944209) * MissingALACAdialog made available also for unsigned applications (but ignoring actual manifest value) and fixed * NetX - fixed issues with -html shortcuts - fixed issue with -html receiving garbage in width and height * PolicyEditor - file flag made to work when used standalone - file flag and main argument cannot be used in combination * Fix generation of man-pages with some versions of "tail" Also included is the update to 1.6 * Massively improved offline abilities. Added Xoffline switch to force work without inet connection. * Improved to be able to run with any JDK * JDK 6 and older no longer supported * JDK 8 support added (URLPermission granted if applicable) * JDK 9 supported * Added support for Entry-Point manifest attribute * Added KEY_ENABLE_MANIFEST_ATTRIBUTES_CHECK deployment property to control scan of Manifest file * starting arguments now accept also -- abbreviations * Added new documentation * Added support for menu shortcuts - both javaws applications/applets and html applets are supported * added support for -html switch for javaws. Now you can run most of the applets without browser at all * Control Panel - PR1856: ControlPanel UI improvement for lower resolutions (800*600) * NetX - PR1858: Java Console accepts multi-byte encodings - PR1859: Java Console UI improvement for lower resolutions (800*600) - RH1091563: [abrt] icedtea-web-1.5-2.fc20: Uncaught exception java.lang.ClassCastException in method sun.applet.PluginAppletViewer$8.run() - Dropped support for long unmaintained -basedir argument - Returned support for -jnlp argument - RH1095311, PR574 - References class sun.misc.Ref removed in OpenJDK 9 - fixed, and so buildable on JDK9 * Plugin - PR1743 - Intermittant deadlock in PluginRequestProcessor - PR1298 - LiveConnect - problem setting array elements (applet variables) from JS - RH1121549: coverity defects - Resolves method overloading correctly with superclass heirarchy distance * PolicyEditor - codebases can be renamed in-place, copied, and pasted - codebase URLs can be copied to system clipboard - displays a progress dialog while opening or saving files - codebases without permissions assigned save to file anyway (and re-appear on next open) - PR1776: NullPointer on save-and-exit - PR1850: duplicate codebases when launching from security dialogs - Fixed bug where clicking "Cancel" on the "Save before Exiting" dialog could result in the editor exiting without saving changes - Keyboard accelerators and mnemonics greatly improved - "File - New" allows editing a new policy without first selecting the file to save to * Common - PR1769: support signed applets which specify Sandbox permissions in their manifests * Temporary Permissions in security dialog now multi-selectable and based on PolicyEditor permissions - Update to 1.5.2 * NetX - RH1095311, PR574 - References class sun.misc.Ref removed in OpenJDK 9 - fixed, and so buildable on JDK9 - RH1154177 - decoded file needed from cache - fixed NPE in https dialog - empty codebase behaves as "." Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-602=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-602=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): java-1_7_0-openjdk-plugin-1.6.1-6.1 java-1_7_0-openjdk-plugin-debuginfo-1.6.1-6.1 java-1_7_0-openjdk-plugin-debugsource-1.6.1-6.1 java-1_8_0-openjdk-plugin-1.6.1-6.2 java-1_8_0-openjdk-plugin-debuginfo-1.6.1-6.2 java-1_8_0-openjdk-plugin-debugsource-1.6.1-6.2 - openSUSE 13.2 (noarch): icedtea-web-javadoc-1.6.1-6.1 - openSUSE 13.1 (i586 x86_64): icedtea-web-1.5.3-0.7.1 icedtea-web-debuginfo-1.5.3-0.7.1 icedtea-web-debugsource-1.5.3-0.7.1 - openSUSE 13.1 (noarch): icedtea-web-javadoc-1.5.3-0.7.1 References: https://www.suse.com/security/cve/CVE-2012-4540.html https://www.suse.com/security/cve/CVE-2015-5234.html https://www.suse.com/security/cve/CVE-2015-5235.html https://bugzilla.suse.com/755054 https://bugzilla.suse.com/830880 https://bugzilla.suse.com/944208 https://bugzilla.suse.com/944209

1 0

openSUSE-RU-2015:1594-1: moderate: Recommended update for iperf
by maintenance＠opensuse.org 22 Sep '15

22 Sep '15

openSUSE Recommended Update: Recommended update for iperf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1594-1 Rating: moderate References: #945818 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 3.0.11 of iperf. * Add a -1 flag to make the iperf3 execute a single test and exit, needed for an upcoming bwctl release. * Make the -w option work correctly with UDP tests. * Fix an issue for a situation in which attempting a UDP test with pathologically large (and illegal) packet sizes could put the iperf3 server in a state where it would stop accepting connections from clients, thus causing the clients to crash when interrupted. * A bug that caused some problems with bwctl / perfSONAR has been fixed. * A bug that made it possible to disrupt existing, running tests has been fixed. * Several problems with the -B option have been fixed. Also, API calls have been added to libiperf to extend this functionality to API clients. * A few other bugs are also fixed. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-601=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): iperf-3.0.11-2.3.1 iperf-debuginfo-3.0.11-2.3.1 iperf-debugsource-3.0.11-2.3.1 iperf-devel-3.0.11-2.3.1 libiperf0-3.0.11-2.3.1 libiperf0-debuginfo-3.0.11-2.3.1 References: https://bugzilla.suse.com/945818

1 0

openSUSE-SU-2015:1593-1: moderate: Security update for criu
by opensuse-security＠opensuse.org 22 Sep '15

22 Sep '15

openSUSE Security Update: Security update for criu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1593-1 Rating: moderate References: #943105 Cross-References: CVE-2015-5228 CVE-2015-5231 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The systemd service in criu was disabled as a temporary workaround for possibile security issues (CVE-2015-5228, CVE-2015-5231, bsc#943105) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-599=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (x86_64): criu-1.3.1-4.1 criu-debuginfo-1.3.1-4.1 criu-debugsource-1.3.1-4.1 criu-devel-1.3.1-4.1 libcriu1-1.3.1-4.1 libcriu1-debuginfo-1.3.1-4.1 References: https://www.suse.com/security/cve/CVE-2015-5228.html https://www.suse.com/security/cve/CVE-2015-5231.html https://bugzilla.suse.com/943105

1 0

openSUSE-SU-2015:1586-1: moderate: Security update for Chromium
by opensuse-security＠opensuse.org 21 Sep '15

21 Sep '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1586-1 Rating: moderate References: #944144 Cross-References: CVE-2015-1291 CVE-2015-1292 CVE-2015-1293 CVE-2015-1294 CVE-2015-1295 CVE-2015-1296 CVE-2015-1297 CVE-2015-1298 CVE-2015-1299 CVE-2015-1300 CVE-2015-1301 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: Chromium was updated to the 45.0.2454.85 of the stable channel to fix multiple security issues. The following vulnerabilities were fixed: * CVE-2015-1291: Cross-origin bypass in DOM * CVE-2015-1292: Cross-origin bypass in ServiceWorker * CVE-2015-1293: Cross-origin bypass in DOM * CVE-2015-1294: Use-after-free in Skia * CVE-2015-1295: Use-after-free in Printing * CVE-2015-1296: Character spoofing in omnibox * CVE-2015-1297: Permission scoping error in WebRequest * CVE-2015-1298: URL validation error in extensions * CVE-2015-1299: Use-after-free in Blink * CVE-2015-1300: Information leak in Blink * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-595=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-595=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): chromedriver-45.0.2454.85-43.1 chromedriver-debuginfo-45.0.2454.85-43.1 chromium-45.0.2454.85-43.1 chromium-debuginfo-45.0.2454.85-43.1 chromium-debugsource-45.0.2454.85-43.1 chromium-desktop-gnome-45.0.2454.85-43.1 chromium-desktop-kde-45.0.2454.85-43.1 chromium-ffmpegsumo-45.0.2454.85-43.1 chromium-ffmpegsumo-debuginfo-45.0.2454.85-43.1 - openSUSE 13.1 (i586 x86_64): chromedriver-45.0.2454.85-98.1 chromedriver-debuginfo-45.0.2454.85-98.1 chromium-45.0.2454.85-98.1 chromium-debuginfo-45.0.2454.85-98.1 chromium-debugsource-45.0.2454.85-98.1 chromium-desktop-gnome-45.0.2454.85-98.1 chromium-desktop-kde-45.0.2454.85-98.1 chromium-ffmpegsumo-45.0.2454.85-98.1 chromium-ffmpegsumo-debuginfo-45.0.2454.85-98.1 References: https://www.suse.com/security/cve/CVE-2015-1291.html https://www.suse.com/security/cve/CVE-2015-1292.html https://www.suse.com/security/cve/CVE-2015-1293.html https://www.suse.com/security/cve/CVE-2015-1294.html https://www.suse.com/security/cve/CVE-2015-1295.html https://www.suse.com/security/cve/CVE-2015-1296.html https://www.suse.com/security/cve/CVE-2015-1297.html https://www.suse.com/security/cve/CVE-2015-1298.html https://www.suse.com/security/cve/CVE-2015-1299.html https://www.suse.com/security/cve/CVE-2015-1300.html https://www.suse.com/security/cve/CVE-2015-1301.html https://bugzilla.suse.com/944144

1 0

openSUSE-RU-2015:1583-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 21 Sep '15

21 Sep '15

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1583-1 Rating: moderate References: #943312 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This dracut update fixes a vconsole fontmap problem in the initrd. (bsc#943312) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-594=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): dracut-037-17.21.1 dracut-debuginfo-037-17.21.1 dracut-debugsource-037-17.21.1 dracut-fips-037-17.21.1 References: https://bugzilla.suse.com/943312

1 0

openSUSE-RU-2015:1582-1: moderate: Recommended update for NetworkManager-strongswan
by maintenance＠opensuse.org 21 Sep '15

21 Sep '15

openSUSE Recommended Update: Recommended update for NetworkManager-strongswan ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1582-1 Rating: moderate References: #944769 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The NetworkManager strongswan GNOME applet was updated to make it work. (boo#944769, boo#944769). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-593=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): NetworkManager-strongswan-1.3.1-2.6.1 NetworkManager-strongswan-debugsource-1.3.1-2.6.1 NetworkManager-strongswan-gnome-1.3.1-2.6.1 NetworkManager-strongswan-gnome-debuginfo-1.3.1-2.6.1 - openSUSE 13.2 (noarch): NetworkManager-strongswan-lang-1.3.1-2.6.1 References: https://bugzilla.suse.com/944769

1 0

openSUSE-SU-2015:1580-1: moderate: Security update for python-Django
by opensuse-security＠opensuse.org 19 Sep '15

19 Sep '15

openSUSE Security Update: Security update for python-Django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1580-1 Rating: moderate References: #941587 Cross-References: CVE-2015-5963 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: python Django was updated to fix a remote denial of service (resource exhaustion) possibility in the auth views module. (bsc#941587, CVE-2015-5963) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-592=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): python-Django-1.6.11-3.7.1 References: https://www.suse.com/security/cve/CVE-2015-5963.html https://bugzilla.suse.com/941587

1 0

openSUSE-SU-2015:1579-1: moderate: Security update for remind
by opensuse-security＠opensuse.org 19 Sep '15

19 Sep '15

openSUSE Security Update: Security update for remind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1579-1 Rating: moderate References: #940924 Cross-References: CVE-2015-5957 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: remind was updated to fix a buffer overflow in DumpSysVar (CVE-2015-5957) (bnc#940924) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-591=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-591=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): remind-3.1.13-4.3.1 remind-debuginfo-3.1.13-4.3.1 remind-debugsource-3.1.13-4.3.1 - openSUSE 13.1 (i586 x86_64): remind-3.1.13-2.3.1 remind-debuginfo-3.1.13-2.3.1 remind-debugsource-3.1.13-2.3.1 References: https://www.suse.com/security/cve/CVE-2015-5957.html https://bugzilla.suse.com/940924

1 0

openSUSE-RU-2015:1578-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 18 Sep '15

18 Sep '15

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1578-1 Rating: moderate References: #908669 #936254 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: VirtualBox received various improvements regarding to starting of vboxadd-service to provide better auto mounting of shared folders and time synchronization work. Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that vboxadd-service can find it, it cannot be run as user anyway Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-589=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): python-virtualbox-4.2.32-2.38.1 python-virtualbox-debuginfo-4.2.32-2.38.1 virtualbox-4.2.32-2.38.1 virtualbox-debuginfo-4.2.32-2.38.1 virtualbox-debugsource-4.2.32-2.38.1 virtualbox-devel-4.2.32-2.38.1 virtualbox-guest-kmp-default-4.2.32_k3.11.10_29-2.38.1 virtualbox-guest-kmp-default-debuginfo-4.2.32_k3.11.10_29-2.38.1 virtualbox-guest-kmp-desktop-4.2.32_k3.11.10_29-2.38.1 virtualbox-guest-kmp-desktop-debuginfo-4.2.32_k3.11.10_29-2.38.1 virtualbox-guest-tools-4.2.32-2.38.1 virtualbox-guest-tools-debuginfo-4.2.32-2.38.1 virtualbox-guest-x11-4.2.32-2.38.1 virtualbox-guest-x11-debuginfo-4.2.32-2.38.1 virtualbox-host-kmp-default-4.2.32_k3.11.10_29-2.38.1 virtualbox-host-kmp-default-debuginfo-4.2.32_k3.11.10_29-2.38.1 virtualbox-host-kmp-desktop-4.2.32_k3.11.10_29-2.38.1 virtualbox-host-kmp-desktop-debuginfo-4.2.32_k3.11.10_29-2.38.1 virtualbox-qt-4.2.32-2.38.1 virtualbox-qt-debuginfo-4.2.32-2.38.1 virtualbox-websrv-4.2.32-2.38.1 virtualbox-websrv-debuginfo-4.2.32-2.38.1 - openSUSE 13.1 (noarch): virtualbox-host-source-4.2.32-2.38.1 - openSUSE 13.1 (i586): virtualbox-guest-kmp-pae-4.2.32_k3.11.10_29-2.38.1 virtualbox-guest-kmp-pae-debuginfo-4.2.32_k3.11.10_29-2.38.1 virtualbox-host-kmp-pae-4.2.32_k3.11.10_29-2.38.1 virtualbox-host-kmp-pae-debuginfo-4.2.32_k3.11.10_29-2.38.1 References: https://bugzilla.suse.com/908669 https://bugzilla.suse.com/936254

1 0

openSUSE-RU-2015:1577-1: moderate: Recommended update for docker
by maintenance＠opensuse.org 18 Sep '15

18 Sep '15

openSUSE Recommended Update: Recommended update for docker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1577-1 Rating: moderate References: #942369 #942370 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: Docker was updated to version 1.8.1. See detailed changes on https://github.com/docker/docker/releases/tag/v1.8.0 and https://github.com/docker/docker/releases/tag/v1.8.1. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-587=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (x86_64): docker-1.8.1-37.1 docker-debuginfo-1.8.1-37.1 docker-debugsource-1.8.1-37.1 - openSUSE 13.2 (noarch): docker-bash-completion-1.8.1-37.1 docker-test-1.8.1-37.1 docker-zsh-completion-1.8.1-37.1 References: https://bugzilla.suse.com/942369 https://bugzilla.suse.com/942370

1 0

openSUSE-RU-2015:1575-1: moderate: Recommended update for apache2-mod_nss
by maintenance＠opensuse.org 18 Sep '15

18 Sep '15

openSUSE Recommended Update: Recommended update for apache2-mod_nss ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1575-1 Rating: moderate References: #927402 #928039 #930186 #930922 #933265 #933832 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: The Apache mod_nss module was updated to fix various issues. * Unified the ciphers with SUSE Linux Enterprise 11. * Send TLS server name extension (SNI) on proxy connections (bsc#933832) * Various bugfixes for SNI support have been done (bnc#927402, bsc#927402, bsc#928039, bsc#930922, bsc#930186) * Add an alert about permission on the certificate database (bsc#933265) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-586=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-586=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (aarch64 armv7hl ppc ppc64 ppc64le): apache2-mod_nss-1.0.8-11.14.1 apache2-mod_nss-debuginfo-1.0.8-11.14.1 apache2-mod_nss-debugsource-1.0.8-11.14.1 - openSUSE 13.1 (aarch64 armv7hl ppc ppc64): apache2-mod_nss-1.0.8-6.29.1 apache2-mod_nss-debuginfo-1.0.8-6.29.1 apache2-mod_nss-debugsource-1.0.8-6.29.1 References: https://bugzilla.suse.com/927402 https://bugzilla.suse.com/928039 https://bugzilla.suse.com/930186 https://bugzilla.suse.com/930922 https://bugzilla.suse.com/933265 https://bugzilla.suse.com/933832

1 0

openSUSE-RU-2015:1574-1: moderate: Recommended update for libgdiplus0
by maintenance＠opensuse.org 18 Sep '15

18 Sep '15

openSUSE Recommended Update: Recommended update for libgdiplus0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1574-1 Rating: moderate References: #944912 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The libgdiplus pkgconfig file had an unexpanded libjpeg_prefix variable that would lead to errors on using it to build other packages. (boo#944912) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-590=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-590=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (aarch64 armv7hl ppc ppc64 ppc64le): libgdiplus-devel-3.8-3.1 libgdiplus0-3.8-3.1 libgdiplus0-debuginfo-3.8-3.1 libgdiplus0-debugsource-3.8-3.1 - openSUSE 13.1 (aarch64 armv7hl ppc ppc64): libgdiplus-devel-2.10.9-3.3.1 libgdiplus0-2.10.9-3.3.1 libgdiplus0-debuginfo-2.10.9-3.3.1 libgdiplus0-debugsource-2.10.9-3.3.1 References: https://bugzilla.suse.com/944912

1 0

openSUSE-RU-2015:1572-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 18 Sep '15

18 Sep '15

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1572-1 Rating: moderate References: #867863 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The X.Org X Server was updated to fix a crash in the libvnc module. (bnc#867863) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-588=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (aarch64 armv7hl ppc ppc64): xorg-x11-server-7.6_1.14.3.901-22.1 xorg-x11-server-debuginfo-7.6_1.14.3.901-22.1 xorg-x11-server-debugsource-7.6_1.14.3.901-22.1 xorg-x11-server-extra-7.6_1.14.3.901-22.1 xorg-x11-server-extra-debuginfo-7.6_1.14.3.901-22.1 xorg-x11-server-sdk-7.6_1.14.3.901-22.1 References: https://bugzilla.suse.com/867863

1 0

openSUSE-SU-2015:1571-1: moderate: Security update for sblim-sfcb
by opensuse-security＠opensuse.org 18 Sep '15

18 Sep '15

openSUSE Security Update: Security update for sblim-sfcb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1571-1 Rating: moderate References: #942628 Cross-References: CVE-2015-5185 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: sblim-sfcb was updated to fix a security issue with a crash due to a null pointer dereference in lookupProviders() (CVE-2015-5185) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-585=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-585=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): sblim-sfcb-1.4.8-4.4.1 sblim-sfcb-debuginfo-1.4.8-4.4.1 sblim-sfcb-debugsource-1.4.8-4.4.1 - openSUSE 13.1 (i586 x86_64): sblim-sfcb-1.3.17-2.3.1 sblim-sfcb-debuginfo-1.3.17-2.3.1 sblim-sfcb-debugsource-1.3.17-2.3.1 References: https://www.suse.com/security/cve/CVE-2015-5185.html https://bugzilla.suse.com/942628

1 0

openSUSE-SU-2015:1566-1: moderate: Security update for spice
by opensuse-security＠opensuse.org 17 Sep '15

17 Sep '15

openSUSE Security Update: Security update for spice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1566-1 Rating: moderate References: #944460 Cross-References: CVE-2015-3247 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Spice was updated to fix a heap corruption in the spice server (CVE-2015-3247). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-583=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libspice-server-devel-0.12.4-4.3.1 libspice-server1-0.12.4-4.3.1 libspice-server1-debuginfo-0.12.4-4.3.1 spice-client-0.12.4-4.3.1 spice-client-debuginfo-0.12.4-4.3.1 spice-debugsource-0.12.4-4.3.1 References: https://www.suse.com/security/cve/CVE-2015-3247.html https://bugzilla.suse.com/944460

1 0

openSUSE-RU-2015:1558-1: moderate: Recommended update for java-1_8_0-openjdk
by maintenance＠opensuse.org 15 Sep '15

15 Sep '15

openSUSE Recommended Update: Recommended update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1558-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update provides version 8u60 of java-1_8_0-openjdk - Release of JDK 8u60 - Add constraints file Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-582=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): java-1_8_0-openjdk-1.8.0.60-15.2 java-1_8_0-openjdk-accessibility-1.8.0.60-15.2 java-1_8_0-openjdk-debuginfo-1.8.0.60-15.2 java-1_8_0-openjdk-debugsource-1.8.0.60-15.2 java-1_8_0-openjdk-demo-1.8.0.60-15.2 java-1_8_0-openjdk-demo-debuginfo-1.8.0.60-15.2 java-1_8_0-openjdk-devel-1.8.0.60-15.2 java-1_8_0-openjdk-headless-1.8.0.60-15.2 java-1_8_0-openjdk-headless-debuginfo-1.8.0.60-15.2 java-1_8_0-openjdk-src-1.8.0.60-15.2 - openSUSE 13.2 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.60-15.2 References:

1 0

openSUSE-SU-2015:1546-1: moderate: Security update for squid
by opensuse-security＠opensuse.org 11 Sep '15

11 Sep '15

openSUSE Security Update: Security update for squid ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1546-1 Rating: moderate References: #929493 Cross-References: CVE-2015-3455 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Squid was updated to fix a security issue. If the Squid HTTP Proxy configured with client-first SSL bumping did not correctly validate server certificate. (CVE-2015-3455) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-581=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-581=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): squid-3.4.4-3.7.1 squid-debuginfo-3.4.4-3.7.1 squid-debugsource-3.4.4-3.7.1 - openSUSE 13.1 (i586 x86_64): squid-3.3.13-2.17.1 squid-debuginfo-3.3.13-2.17.1 squid-debugsource-3.3.13-2.17.1 References: https://www.suse.com/security/cve/CVE-2015-3455.html https://bugzilla.suse.com/929493

1 0

openSUSE-RU-2015:1540-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 11 Sep '15

11 Sep '15

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1540-1 Rating: moderate References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update provides version 0.7.3 for spec-cleaner: - Version bump to 0.7.3: * Fix wrong bracketing of kernel_module macro Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-574=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): spec-cleaner-0.7.3-6.38.1 References:

1 0

openSUSE-RU-2015:1539-1: moderate: Recommended update for gnome-control-center
by maintenance＠opensuse.org 11 Sep '15

11 Sep '15

openSUSE Recommended Update: Recommended update for gnome-control-center ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1539-1 Rating: moderate References: #941249 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for gnome-control-center fixes the following issue: - Fix a regression in gnome-control-center related to a North Korea time zone change caused by the timezone update 2015f [boo#941249] Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-577=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-577=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gnome-control-center-3.14.5-21.1 gnome-control-center-color-3.14.5-21.1 gnome-control-center-debuginfo-3.14.5-21.1 gnome-control-center-debugsource-3.14.5-21.1 gnome-control-center-devel-3.14.5-21.1 gnome-control-center-user-faces-3.14.5-21.1 - openSUSE 13.2 (noarch): gnome-control-center-lang-3.14.5-21.1 - openSUSE 13.1 (i586 x86_64): gnome-control-center-3.10.4-24.1 gnome-control-center-color-3.10.4-24.1 gnome-control-center-debuginfo-3.10.4-24.1 gnome-control-center-debugsource-3.10.4-24.1 gnome-control-center-devel-3.10.4-24.1 gnome-control-center-user-faces-3.10.4-24.1 - openSUSE 13.1 (noarch): gnome-control-center-lang-3.10.4-24.1 References: https://bugzilla.suse.com/941249

1 0

openSUSE-RU-2015:1538-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 11 Sep '15

11 Sep '15

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1538-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update provides version 0.7.3 of spec-cleaner: - Version bump to 0.7.3: * Fix wrong bracketing of kernel_module macro Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-575=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): spec-cleaner-0.7.3-22.1 References:

1 0

openSUSE-SU-2015:1537-1: moderate: Security update for libvdpau
by opensuse-security＠opensuse.org 11 Sep '15

11 Sep '15

openSUSE Security Update: Security update for libvdpau ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1537-1 Rating: moderate References: #943967 #943968 #943969 Cross-References: CVE-2015-5198 CVE-2015-5199 CVE-2015-5200 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: libvdpau was updated to use secure_getenv() instead of getenv() for several variables so it can be more safely used in setuid applications. * CVE-2015-5198: libvdpau: incorrect check for security transition (bnc#943967) * CVE-2015-5199: libvdpau: directory traversal in dlopen (bnc#943968) * CVE-2015-5200: libvdpau: vulnerability in trace functionality (bnc#943969) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-576=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-576=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libvdpau-debugsource-0.8-2.3.1 libvdpau-devel-0.8-2.3.1 libvdpau1-0.8-2.3.1 libvdpau1-debuginfo-0.8-2.3.1 libvdpau_trace1-0.8-2.3.1 libvdpau_trace1-debuginfo-0.8-2.3.1 - openSUSE 13.2 (x86_64): libvdpau-devel-32bit-0.8-2.3.1 libvdpau1-32bit-0.8-2.3.1 libvdpau1-debuginfo-32bit-0.8-2.3.1 libvdpau_trace1-32bit-0.8-2.3.1 libvdpau_trace1-debuginfo-32bit-0.8-2.3.1 - openSUSE 13.1 (i586 x86_64): libvdpau-debugsource-0.6-3.3.1 libvdpau-devel-0.6-3.3.1 libvdpau1-0.6-3.3.1 libvdpau1-debuginfo-0.6-3.3.1 libvdpau_trace1-0.6-3.3.1 libvdpau_trace1-debuginfo-0.6-3.3.1 - openSUSE 13.1 (x86_64): libvdpau-devel-32bit-0.6-3.3.1 libvdpau1-32bit-0.6-3.3.1 libvdpau1-debuginfo-32bit-0.6-3.3.1 libvdpau_trace1-32bit-0.6-3.3.1 libvdpau_trace1-debuginfo-32bit-0.6-3.3.1 References: https://www.suse.com/security/cve/CVE-2015-5198.html https://www.suse.com/security/cve/CVE-2015-5199.html https://www.suse.com/security/cve/CVE-2015-5200.html https://bugzilla.suse.com/943967 https://bugzilla.suse.com/943968 https://bugzilla.suse.com/943969

1 0

openSUSE-RU-2015:1536-1: moderate: Recommended update for MyODBC-unixODBC
by maintenance＠opensuse.org 11 Sep '15

11 Sep '15

openSUSE Recommended Update: Recommended update for MyODBC-unixODBC ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1536-1 Rating: moderate References: #921143 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for MyODBC-unixODBC fixes the following issues: - add MyODBC-unixODBC-is_minimum_version.patch to backport fix from v5.2.3 related to incorrect implementation of is_minimum_version() [bnc#921143] - add MyODBC-unixODBC-remove_use_of_test_macro.patch to port changes found in v5.2 and beyond to prevent "isql: symbol lookup error: /usr/lib64/libmyodbc5.so: undefined" error caused by an undefined test() macro in libmyodbc5.so and also not found in libmysqlclient. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-579=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-579=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): MyODBC-unixODBC-5.1.8-16.6.1 MyODBC-unixODBC-debuginfo-5.1.8-16.6.1 MyODBC-unixODBC-debugsource-5.1.8-16.6.1 - openSUSE 13.1 (i586 x86_64): MyODBC-unixODBC-5.1.8-13.6.1 MyODBC-unixODBC-debuginfo-5.1.8-13.6.1 MyODBC-unixODBC-debugsource-5.1.8-13.6.1 References: https://bugzilla.suse.com/921143

1 0

openSUSE-RU-2015:1535-1: moderate: Recommended update for NetworkManager
by maintenance＠opensuse.org 11 Sep '15

11 Sep '15

openSUSE Recommended Update: Recommended update for NetworkManager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1535-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for NetworkManager fixes the following issue: Fix network manager nfs dispatcher in cases where the correct ipv4/ipv6 address is not available directly after if up. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-578=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): NetworkManager-0.9.10.0-3.14.1 NetworkManager-debuginfo-0.9.10.0-3.14.1 NetworkManager-debugsource-0.9.10.0-3.14.1 NetworkManager-devel-0.9.10.0-3.14.1 libnm-glib-vpn1-0.9.10.0-3.14.1 libnm-glib-vpn1-debuginfo-0.9.10.0-3.14.1 libnm-glib4-0.9.10.0-3.14.1 libnm-glib4-debuginfo-0.9.10.0-3.14.1 libnm-util2-0.9.10.0-3.14.1 libnm-util2-debuginfo-0.9.10.0-3.14.1 typelib-1_0-NMClient-1_0-0.9.10.0-3.14.1 typelib-1_0-NetworkManager-1_0-0.9.10.0-3.14.1 - openSUSE 13.2 (x86_64): NetworkManager-devel-32bit-0.9.10.0-3.14.1 libnm-glib-vpn1-32bit-0.9.10.0-3.14.1 libnm-glib-vpn1-debuginfo-32bit-0.9.10.0-3.14.1 libnm-glib4-32bit-0.9.10.0-3.14.1 libnm-glib4-debuginfo-32bit-0.9.10.0-3.14.1 libnm-util2-32bit-0.9.10.0-3.14.1 libnm-util2-debuginfo-32bit-0.9.10.0-3.14.1 - openSUSE 13.2 (noarch): NetworkManager-lang-0.9.10.0-3.14.1 References:

1 0

openSUSE-RU-2015:1534-1: moderate: Recommended update for tigervnc
by maintenance＠opensuse.org 11 Sep '15

11 Sep '15

openSUSE Recommended Update: Recommended update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1534-1 Rating: moderate References: #942982 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for tigervnc fixes the following issue: - Remove commented out DefaultDepth 16 from 10-libvnc.conf file. Using 16 bit depth can cause troubles and does not have any positives anymore, so lets not suggest it to users. (bnc#942982) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-573=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): tigervnc-1.4.1-6.35.1 tigervnc-debuginfo-1.4.1-6.35.1 tigervnc-debugsource-1.4.1-6.35.1 xorg-x11-Xvnc-1.4.1-6.35.1 xorg-x11-Xvnc-debuginfo-1.4.1-6.35.1 References: https://bugzilla.suse.com/942982

1 0

openSUSE-RU-2015:1533-1: moderate: Recommended update for python3-SQLAlchemy
by maintenance＠opensuse.org 11 Sep '15

11 Sep '15

openSUSE Recommended Update: Recommended update for python3-SQLAlchemy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1533-1 Rating: moderate References: #936311 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 1.0.7 of python3-SQLAlchemy: - update to version 1.0.7: (boo#936311) * see http://docs.sqlalchemy.org/en/latest/changelog/changelog_10.html#change-1.0 .7 - update to version 1.0.6: * see http://docs.sqlalchemy.org/en/latest/changelog/changelog_10.html#change-1.0 .6 - update to version 1.0.5: * see http://docs.sqlalchemy.org/en/latest/changelog/changelog_10.html#change-1.0 .5 - update to version 1.0.4: * see http://docs.sqlalchemy.org/en/latest/changelog/changelog_10.html#change-1.0 .4 - update to version 1.0.3: * see http://docs.sqlalchemy.org/en/latest/changelog/changelog_10.html#change-1.0 .3 - update to version 1.0.2: * see http://docs.sqlalchemy.org/en/latest/changelog/changelog_10.html#change-1.0 .2 - update to version 1.0.1: * see http://docs.sqlalchemy.org/en/latest/changelog/changelog_10.html#change-1.0 .1 for detailed list of changes - update to version 1.0.0: * long list of changes, see http://docs.sqlalchemy.org/en/latest/changelog/changelog_10.html#change-1.0 .0 - update to version 0.9.9: * long changelog, see http://docs.sqlalchemy.org/en/latest/changelog/changelog_09.html for details - update to version 0.9.8: * http://docs.sqlalchemy.org/en/latest/changelog/changelog_09.html * http://docs.sqlalchemy.org/en/latest/changelog/changelog_08.html Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-580=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): python3-SQLAlchemy-1.0.7-2.3.1 python3-SQLAlchemy-debuginfo-1.0.7-2.3.1 python3-SQLAlchemy-debugsource-1.0.7-2.3.1 - openSUSE 13.2 (noarch): python3-SQLAlchemy-doc-1.0.7-2.3.1 References: https://bugzilla.suse.com/936311

1 0

openSUSE-RU-2015:1532-1: moderate: Recommended update for digikam
by maintenance＠opensuse.org 11 Sep '15

11 Sep '15

openSUSE Recommended Update: Recommended update for digikam ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1532-1 Rating: moderate References: #939431 #940857 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for digikam fixes the following issues: - explicitly enable (external) mysql support, this is disabled by default since 4.6.0 (boo#939431) - Add fix-crash-with-tags-manager-add-tag-with-null-parent.patch: fix crash in tag manager when adding tags with no parent tag selected (boo#940857, kde#343548) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-572=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): digikam-4.6.0-17.1 digikam-debuginfo-4.6.0-17.1 digikam-debugsource-4.6.0-17.1 kipi-plugins-4.6.0-17.1 kipi-plugins-acquireimage-4.6.0-17.1 kipi-plugins-acquireimage-debuginfo-4.6.0-17.1 kipi-plugins-debuginfo-4.6.0-17.1 kipi-plugins-geolocation-4.6.0-17.1 kipi-plugins-geolocation-debuginfo-4.6.0-17.1 libkgeomap-devel-4.6.0-17.1 libkgeomap2-4.6.0-17.1 libkgeomap2-debuginfo-4.6.0-17.1 libmediawiki-devel-4.6.0-17.1 libmediawiki1-4.6.0-17.1 libmediawiki1-debuginfo-4.6.0-17.1 - openSUSE 13.2 (noarch): digikam-doc-4.6.0-17.1 digikam-lang-4.6.0-17.1 kipi-plugins-lang-4.6.0-17.1 libkgeomap-lang-4.6.0-17.1 References: https://bugzilla.suse.com/939431 https://bugzilla.suse.com/940857

1 0

openSUSE-SU-2015:1506-1: moderate: Security update for perl-XML-LibXML
by opensuse-security＠opensuse.org 07 Sep '15

07 Sep '15

openSUSE Security Update: Security update for perl-XML-LibXML ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1506-1 Rating: moderate References: #929237 Cross-References: CVE-2015-3451 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: perl-XML-LibXML was updated to version 2.0.121 to fix one security vulnerability. - Fix "expand_entities" option that was not preserved under some circumstances. (bsc#929237, CVE-2015-3451) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-571=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-571=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): perl-XML-LibXML-2.0121-2.3.1 perl-XML-LibXML-debuginfo-2.0121-2.3.1 perl-XML-LibXML-debugsource-2.0121-2.3.1 - openSUSE 13.1 (i586 x86_64): perl-XML-LibXML-2.0121-2.3.1 perl-XML-LibXML-debuginfo-2.0121-2.3.1 perl-XML-LibXML-debugsource-2.0121-2.3.1 References: https://www.suse.com/security/cve/CVE-2015-3451.html https://bugzilla.suse.com/929237

1 0

openSUSE-SU-2015:1503-1: moderate: This update fixes two security vulnerabilities (CVE-2014-3591,CVE-2015-0837)
by opensuse-security＠opensuse.org 07 Sep '15

07 Sep '15

openSUSE Security Update: This update fixes two security vulnerabilities (CVE-2014-3591,CVE-2015-0837) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1503-1 Rating: moderate References: #920057 Cross-References: CVE-2014-3591 CVE-2015-0837 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update fixes two security vulnerabilities (bsc#920057): * Use ciphertext blinding for Elgamal decryption [CVE-2014-3591]. See http://www.cs.tau.ac.il/~tromer/radioexp/ for details. * Fixed data-dependent timing variations in modular exponentiation [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks are Practical] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-566=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-566=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libgcrypt-cavs-1.6.1-8.6.1 libgcrypt-cavs-debuginfo-1.6.1-8.6.1 libgcrypt-debugsource-1.6.1-8.6.1 libgcrypt-devel-1.6.1-8.6.1 libgcrypt-devel-debuginfo-1.6.1-8.6.1 libgcrypt20-1.6.1-8.6.1 libgcrypt20-debuginfo-1.6.1-8.6.1 libgcrypt20-hmac-1.6.1-8.6.1 - openSUSE 13.2 (x86_64): libgcrypt-devel-32bit-1.6.1-8.6.1 libgcrypt-devel-debuginfo-32bit-1.6.1-8.6.1 libgcrypt20-32bit-1.6.1-8.6.1 libgcrypt20-debuginfo-32bit-1.6.1-8.6.1 libgcrypt20-hmac-32bit-1.6.1-8.6.1 - openSUSE 13.1 (i586 x86_64): libgcrypt-debugsource-1.5.4-2.8.1 libgcrypt-devel-1.5.4-2.8.1 libgcrypt-devel-debuginfo-1.5.4-2.8.1 libgcrypt11-1.5.4-2.8.1 libgcrypt11-debuginfo-1.5.4-2.8.1 - openSUSE 13.1 (x86_64): libgcrypt-devel-32bit-1.5.4-2.8.1 libgcrypt-devel-debuginfo-32bit-1.5.4-2.8.1 libgcrypt11-32bit-1.5.4-2.8.1 libgcrypt11-debuginfo-32bit-1.5.4-2.8.1 References: https://www.suse.com/security/cve/CVE-2014-3591.html https://www.suse.com/security/cve/CVE-2015-0837.html https://bugzilla.suse.com/920057

1 0

openSUSE-SU-2015:1502-1: moderate: Security update for net-snmp
by opensuse-security＠opensuse.org 07 Sep '15

07 Sep '15

openSUSE Security Update: Security update for net-snmp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1502-1 Rating: moderate References: #935863 #940188 Cross-References: CVE-2015-5621 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: net-snmp was updated to fix one secuirty vulnerability and 2 bugs. - Fix an incompletely initialized vulnerability within the snmp_pdu_parse() function of snmp_api.c. (bnc#940188, CVE-2015-5621) - Add build requirement 'procps' to fix a net-snmp-config error. (bsc#935863) - Stop snmptrapd on removal. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-568=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-568=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libsnmp30-5.7.3-3.1 libsnmp30-debuginfo-5.7.3-3.1 net-snmp-5.7.3-3.1 net-snmp-debuginfo-5.7.3-3.1 net-snmp-debugsource-5.7.3-3.1 net-snmp-devel-5.7.3-3.1 net-snmp-python-5.7.3-3.1 net-snmp-python-debuginfo-5.7.3-3.1 perl-SNMP-5.7.3-3.1 perl-SNMP-debuginfo-5.7.3-3.1 snmp-mibs-5.7.3-3.1 - openSUSE 13.2 (x86_64): libsnmp30-32bit-5.7.3-3.1 libsnmp30-debuginfo-32bit-5.7.3-3.1 net-snmp-devel-32bit-5.7.3-3.1 - openSUSE 13.1 (i586 x86_64): libsnmp30-5.7.2-9.11.1 libsnmp30-debuginfo-5.7.2-9.11.1 net-snmp-5.7.2-9.11.1 net-snmp-debuginfo-5.7.2-9.11.1 net-snmp-debugsource-5.7.2-9.11.1 net-snmp-devel-5.7.2-9.11.1 net-snmp-python-5.7.2-9.11.1 net-snmp-python-debuginfo-5.7.2-9.11.1 perl-SNMP-5.7.2-9.11.1 perl-SNMP-debuginfo-5.7.2-9.11.1 snmp-mibs-5.7.2-9.11.1 - openSUSE 13.1 (x86_64): libsnmp30-32bit-5.7.2-9.11.1 libsnmp30-debuginfo-32bit-5.7.2-9.11.1 net-snmp-devel-32bit-5.7.2-9.11.1 References: https://www.suse.com/security/cve/CVE-2015-5621.html https://bugzilla.suse.com/935863 https://bugzilla.suse.com/940188

1 0

openSUSE-SU-2015:1501-1: Security update for tor
by opensuse-security＠opensuse.org 07 Sep '15

07 Sep '15

openSUSE Security Update: Security update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1501-1 Rating: low References: #943362 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Tor was updated to fix one logging privacy issue. The following issue was fixed: * Malformed hostnames in socks5 requests were written to the log regardless of SafeLogging option (CWE-532) [boo#943362] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-569=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-569=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): tor-0.2.4.27-16.1 tor-debuginfo-0.2.4.27-16.1 tor-debugsource-0.2.4.27-16.1 - openSUSE 13.1 (i586 x86_64): tor-0.2.4.27-5.33.1 tor-debuginfo-0.2.4.27-5.33.1 tor-debugsource-0.2.4.27-5.33.1 References: https://bugzilla.suse.com/943362

1 0

openSUSE-SU-2015:1500-1: moderate: Security update for gdk-pixbuf
by opensuse-security＠opensuse.org 07 Sep '15

07 Sep '15

openSUSE Security Update: Security update for gdk-pixbuf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1500-1 Rating: moderate References: #942801 Cross-References: CVE-2015-4491 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: gdk-pixbuf was updated to version 2.31.6 to fix a secuirty vulnerability and several bugs. - Update to version 2.31.6 (boo#942801): + Really fix bgo#752297. This is CVE-2015-4491. + Updated translations. - Update to version 2.31.5: + Add support for g_autoptr for all object types (bgo#750497). + Avoid a possible divide-by-zero in the pixbuf loader (bgo#750440). + Remove gettext .pot file hack (bgo#743574). + Be more careful about integer overflow (bgo#752297). + Updated translations. - Drop README from docs as it is now empty. - Add generic www.gnome.org URL to silence a few lint warnings. - Update to version 2.31.4: + SVGZ icons in notification GNOME3 (bgo#648815). + gdk_pixbuf_apply_embedded_orientation is not working (bgo#725582). + Updated translations. - Update to version 2.31.3: + API changes: Revert an annotation change that broke bindings. + Build fixes: - Clean up configure - Fix Visual Studio build - Define MAP_ANONYMOUS when needed - Include gi18n-lib.h where needed + Updated translations. - Update to version 2.31.2: + API changes: - Deprecate GdkPixdata. - Add gdk_pixbuf_get_options() helper to list set options. - Annotations fixes for various functions. - Remove incorrect info about area-prepared signal. + Image format support changes: - Flag multi-page TIFF files. - Fix memory usage for GIF animations, add note about minimum frame length. - Return an error for truncated PNG files. - Add density (DPI) support for JPEG, PNG and TIFF. - Fix reading CMYK JPEG files generated by Photoshop. - Allow saving 1-bit mono TIFF files as used in faxes. - Simplify loader names. - Fix loading GIF files when the first write is short. - Add progressive loading to ICNS files. - Add support for 256x256 ICO files. - Fix reading MS AMCap2 BMP files. + Other: - Honour requested depth in Xlib. - Special-case compositing/copying with no scaling. - Add relocation support to OSX and Linux. - Prefer gdk-pixbuf's loaders to the GDI+ ones on Windows. - fix bashism in post script Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-570=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gdk-pixbuf-debugsource-2.31.6-3.1 gdk-pixbuf-devel-2.31.6-3.1 gdk-pixbuf-devel-debuginfo-2.31.6-3.1 gdk-pixbuf-query-loaders-2.31.6-3.1 gdk-pixbuf-query-loaders-debuginfo-2.31.6-3.1 libgdk_pixbuf-2_0-0-2.31.6-3.1 libgdk_pixbuf-2_0-0-debuginfo-2.31.6-3.1 typelib-1_0-GdkPixbuf-2_0-2.31.6-3.1 - openSUSE 13.2 (x86_64): gdk-pixbuf-devel-32bit-2.31.6-3.1 gdk-pixbuf-devel-debuginfo-32bit-2.31.6-3.1 gdk-pixbuf-query-loaders-32bit-2.31.6-3.1 gdk-pixbuf-query-loaders-debuginfo-32bit-2.31.6-3.1 libgdk_pixbuf-2_0-0-32bit-2.31.6-3.1 libgdk_pixbuf-2_0-0-debuginfo-32bit-2.31.6-3.1 - openSUSE 13.2 (noarch): gdk-pixbuf-lang-2.31.6-3.1 References: https://www.suse.com/security/cve/CVE-2015-4491.html https://bugzilla.suse.com/942801

1 0

openSUSE-SU-2015:1499-1: moderate: Security update for gnutls
by opensuse-security＠opensuse.org 07 Sep '15

07 Sep '15

openSUSE Security Update: Security update for gnutls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1499-1 Rating: moderate References: #941794 Cross-References: CVE-2015-6251 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Gnutls was updated to fix one security issue. The following vulnerability was fixed: * CVE-2015-6251: Decoding specific certificates with very long DistinguishedName (DN) entries could have caused a double free, which may have resulted in a Denial of Service (GNUTLS-SA-2015-3) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-567=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-567=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gnutls-3.2.18-14.1 gnutls-debuginfo-3.2.18-14.1 gnutls-debugsource-3.2.18-14.1 libgnutls-devel-3.2.18-14.1 libgnutls-openssl-devel-3.2.18-14.1 libgnutls-openssl27-3.2.18-14.1 libgnutls-openssl27-debuginfo-3.2.18-14.1 libgnutls28-3.2.18-14.1 libgnutls28-debuginfo-3.2.18-14.1 libgnutlsxx-devel-3.2.18-14.1 libgnutlsxx28-3.2.18-14.1 libgnutlsxx28-debuginfo-3.2.18-14.1 - openSUSE 13.2 (x86_64): libgnutls-devel-32bit-3.2.18-14.1 libgnutls28-32bit-3.2.18-14.1 libgnutls28-debuginfo-32bit-3.2.18-14.1 - openSUSE 13.1 (i586 x86_64): gnutls-3.2.4-2.38.1 gnutls-debuginfo-3.2.4-2.38.1 gnutls-debugsource-3.2.4-2.38.1 libgnutls-devel-3.2.4-2.38.1 libgnutls-openssl-devel-3.2.4-2.38.1 libgnutls-openssl27-3.2.4-2.38.1 libgnutls-openssl27-debuginfo-3.2.4-2.38.1 libgnutls28-3.2.4-2.38.1 libgnutls28-debuginfo-3.2.4-2.38.1 libgnutlsxx-devel-3.2.4-2.38.1 libgnutlsxx28-3.2.4-2.38.1 libgnutlsxx28-debuginfo-3.2.4-2.38.1 - openSUSE 13.1 (x86_64): libgnutls-devel-32bit-3.2.4-2.38.1 libgnutls28-32bit-3.2.4-2.38.1 libgnutls28-debuginfo-32bit-3.2.4-2.38.1 References: https://www.suse.com/security/cve/CVE-2015-6251.html https://bugzilla.suse.com/941794

1 0

openSUSE-SU-2015:1492-1: moderate: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 04 Sep '15

04 Sep '15

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1492-1 Rating: moderate References: #943550 Cross-References: CVE-2015-4497 CVE-2015-4498 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: MozillaFirefox was updated to version 40.0.3 to fix two security issues and several bugs. Changes in MozillaFirefox: - update to Firefox 40.0.3 (bnc#943550) * Disable the asynchronous plugin initialization (bmo#1198590) * Fix a segmentation fault in the GStreamer support (bmo#1145230) * Fix a regression with some Japanese fonts used in the <input> field (bmo#1194055) * On some sites, the selection in a select combox box using the mouse could be broken (bmo#1194733) security fixes * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278, bsc#943557) Use-after-free when resizing canvas element during restyling * MFSA 2015-95/CVE-2015-4498 (bmo#1042699, bsc#943558) Add-on notification bypass through data URLs Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-565=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-565=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): MozillaFirefox-40.0.3-41.2 MozillaFirefox-branding-upstream-40.0.3-41.2 MozillaFirefox-buildsymbols-40.0.3-41.2 MozillaFirefox-debuginfo-40.0.3-41.2 MozillaFirefox-debugsource-40.0.3-41.2 MozillaFirefox-devel-40.0.3-41.2 MozillaFirefox-translations-common-40.0.3-41.2 MozillaFirefox-translations-other-40.0.3-41.2 - openSUSE 13.1 (i586 x86_64): MozillaFirefox-40.0.3-85.2 MozillaFirefox-branding-upstream-40.0.3-85.2 MozillaFirefox-buildsymbols-40.0.3-85.2 MozillaFirefox-debuginfo-40.0.3-85.2 MozillaFirefox-debugsource-40.0.3-85.2 MozillaFirefox-devel-40.0.3-85.2 MozillaFirefox-translations-common-40.0.3-85.2 MozillaFirefox-translations-other-40.0.3-85.2 References: https://www.suse.com/security/cve/CVE-2015-4497.html https://www.suse.com/security/cve/CVE-2015-4498.html https://bugzilla.suse.com/943550

1 0