September 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:1655-1: moderate: Recommended update for WindowMaker
by maintenance＠opensuse.org 30 Sep '15

30 Sep '15

openSUSE Recommended Update: Recommended update for WindowMaker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1655-1 Rating: moderate References: #779179 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for WindowMaker fixes the following issue: - bsc#779179: Remove old SuSE wallpapers and add openSUSE ones. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-618=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-618=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): WindowMaker-0.95.5-4.3.1 WindowMaker-debuginfo-0.95.5-4.3.1 WindowMaker-debugsource-0.95.5-4.3.1 WindowMaker-devel-0.95.5-4.3.1 - openSUSE 13.1 (i586 x86_64): WindowMaker-0.95.4-5.7.1 WindowMaker-debuginfo-0.95.4-5.7.1 WindowMaker-debugsource-0.95.4-5.7.1 WindowMaker-devel-0.95.4-5.7.1 References: https://bugzilla.suse.com/779179

1 0

openSUSE-RU-2015:1650-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 29 Sep '15

29 Sep '15

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1650-1 Rating: moderate References: #927708 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for virtualbox fixes the following issues: - boo#927708: Add missing creation of the vboxsf group which is necessary for automount of shared folders to work. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-613=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): python-virtualbox-4.2.32-2.43.1 python-virtualbox-debuginfo-4.2.32-2.43.1 virtualbox-4.2.32-2.43.1 virtualbox-debuginfo-4.2.32-2.43.1 virtualbox-debugsource-4.2.32-2.43.1 virtualbox-devel-4.2.32-2.43.1 virtualbox-guest-kmp-default-4.2.32_k3.11.10_29-2.43.1 virtualbox-guest-kmp-default-debuginfo-4.2.32_k3.11.10_29-2.43.1 virtualbox-guest-kmp-desktop-4.2.32_k3.11.10_29-2.43.1 virtualbox-guest-kmp-desktop-debuginfo-4.2.32_k3.11.10_29-2.43.1 virtualbox-guest-tools-4.2.32-2.43.1 virtualbox-guest-tools-debuginfo-4.2.32-2.43.1 virtualbox-guest-x11-4.2.32-2.43.1 virtualbox-guest-x11-debuginfo-4.2.32-2.43.1 virtualbox-host-kmp-default-4.2.32_k3.11.10_29-2.43.1 virtualbox-host-kmp-default-debuginfo-4.2.32_k3.11.10_29-2.43.1 virtualbox-host-kmp-desktop-4.2.32_k3.11.10_29-2.43.1 virtualbox-host-kmp-desktop-debuginfo-4.2.32_k3.11.10_29-2.43.1 virtualbox-qt-4.2.32-2.43.1 virtualbox-qt-debuginfo-4.2.32-2.43.1 virtualbox-websrv-4.2.32-2.43.1 virtualbox-websrv-debuginfo-4.2.32-2.43.1 - openSUSE 13.1 (noarch): virtualbox-host-source-4.2.32-2.43.1 - openSUSE 13.1 (i586): virtualbox-guest-kmp-pae-4.2.32_k3.11.10_29-2.43.1 virtualbox-guest-kmp-pae-debuginfo-4.2.32_k3.11.10_29-2.43.1 virtualbox-host-kmp-pae-4.2.32_k3.11.10_29-2.43.1 virtualbox-host-kmp-pae-debuginfo-4.2.32_k3.11.10_29-2.43.1 References: https://bugzilla.suse.com/927708

1 0

openSUSE-RU-2015:1648-1: moderate: Recommended update for tftp
by maintenance＠opensuse.org 29 Sep '15

29 Sep '15

openSUSE Recommended Update: Recommended update for tftp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1648-1 Rating: moderate References: #793883 #928283 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for tftp fixes the following issues: - respond from the destination address taken from the first udp message's ancillary data (bnc#928283) * added tftp-multi-addresses.patch - tftp-hpa-0.48-macros-crash.patch: prevent buffer overflow in handling of \x macro (bnc#793883) - tftp-hpa-0.48-macros-v6mapped.patch: for \i and \x, expand v6-mapped addresses as native IPv4 (bnc#793883) - patches come from Michal Kubecek Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-612=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-612=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): tftp-5.2-10.3.1 tftp-debuginfo-5.2-10.3.1 tftp-debugsource-5.2-10.3.1 - openSUSE 13.1 (i586 x86_64): tftp-5.2-7.3.1 tftp-debuginfo-5.2-7.3.1 tftp-debugsource-5.2-7.3.1 References: https://bugzilla.suse.com/793883 https://bugzilla.suse.com/928283

1 0

openSUSE-RU-2015:1647-1: moderate: Recommended update for perl-Net-IP
by maintenance＠opensuse.org 29 Sep '15

29 Sep '15

openSUSE Recommended Update: Recommended update for perl-Net-IP ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1647-1 Rating: moderate References: #942108 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for perl-Net-IP fixes the following issue: - ipcount: fix the use of + in the address range (boo#942108) * added ipcount-invalid_chars_in_IP.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-614=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-614=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): perl-Net-IP-1.26-4.3.1 - openSUSE 13.1 (i586 x86_64): perl-Net-IP-1.26-2.3.1 References: https://bugzilla.suse.com/942108

1 0

openSUSE-RU-2015:1644-1: moderate: Recommended update for mariadb
by maintenance＠opensuse.org 26 Sep '15

26 Sep '15

openSUSE Recommended Update: Recommended update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1644-1 Rating: moderate References: #902396 #937767 #942908 #943096 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: On openSUSE 13.1 MariaDB was updated to MariaDB 5.5.45. A list of changes can be found on https://mariadb.com/kb/en/mariadb/mariadb-5545-release-notes/ * use syntax in mysql-systemd-helper that is accepted by both mariadb and mysql [bnc#937767] * install INFO_BIN and INFO_SRC, noticed in MDEV-6912 * replace readline-devel for readline5-devel (MDEV-6912) [bnc#902396] * remove superfluous '--group' parameter from mysql-systemd-helper * make -devel package installable in the presence of LibreSSL * cleanup after the update-message if it was displayed * add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly [bnc#943096] On openSUSE 13.2 MariaDB was updated to MariaDB 10.0.21. A list of changes can be found on https://mariadb.com/kb/en/mariadb/mariadb-10021-release-notes openSUSE changes: * use syntax in mysql-systemd-helper that is accepted by both mariadb and mysql [bnc#937767] * install INFO_BIN and INFO_SRC, noticed in MDEV-6912 * replace readline-devel for readline5-devel (MDEV-6912) [bnc#902396] * remove superfluous '--group' parameter from mysql-systemd-helper * make -devel package installable in the presence of LibreSSL * cleanup after the update-message if it was displayed * add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly [bnc#943096] Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-610=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-610=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libmysqlclient-devel-10.0.21-2.15.1 libmysqlclient18-10.0.21-2.15.1 libmysqlclient18-debuginfo-10.0.21-2.15.1 libmysqlclient_r18-10.0.21-2.15.1 libmysqld-devel-10.0.21-2.15.1 libmysqld18-10.0.21-2.15.1 libmysqld18-debuginfo-10.0.21-2.15.1 mariadb-10.0.21-2.15.1 mariadb-bench-10.0.21-2.15.1 mariadb-bench-debuginfo-10.0.21-2.15.1 mariadb-client-10.0.21-2.15.1 mariadb-client-debuginfo-10.0.21-2.15.1 mariadb-debuginfo-10.0.21-2.15.1 mariadb-debugsource-10.0.21-2.15.1 mariadb-errormessages-10.0.21-2.15.1 mariadb-test-10.0.21-2.15.1 mariadb-test-debuginfo-10.0.21-2.15.1 mariadb-tools-10.0.21-2.15.1 mariadb-tools-debuginfo-10.0.21-2.15.1 - openSUSE 13.2 (x86_64): libmysqlclient18-32bit-10.0.21-2.15.1 libmysqlclient18-debuginfo-32bit-10.0.21-2.15.1 libmysqlclient_r18-32bit-10.0.21-2.15.1 - openSUSE 13.1 (i586 x86_64): libmysqlclient-devel-5.5.45-10.1 libmysqlclient18-5.5.45-10.1 libmysqlclient18-debuginfo-5.5.45-10.1 libmysqlclient_r18-5.5.45-10.1 libmysqld-devel-5.5.45-10.1 libmysqld18-5.5.45-10.1 libmysqld18-debuginfo-5.5.45-10.1 mariadb-5.5.45-10.1 mariadb-bench-5.5.45-10.1 mariadb-bench-debuginfo-5.5.45-10.1 mariadb-client-5.5.45-10.1 mariadb-client-debuginfo-5.5.45-10.1 mariadb-debuginfo-5.5.45-10.1 mariadb-debugsource-5.5.45-10.1 mariadb-errormessages-5.5.45-10.1 mariadb-test-5.5.45-10.1 mariadb-test-debuginfo-5.5.45-10.1 mariadb-tools-5.5.45-10.1 mariadb-tools-debuginfo-5.5.45-10.1 - openSUSE 13.1 (x86_64): libmysqlclient18-32bit-5.5.45-10.1 libmysqlclient18-debuginfo-32bit-5.5.45-10.1 libmysqlclient_r18-32bit-5.5.45-10.1 References: https://bugzilla.suse.com/902396 https://bugzilla.suse.com/937767 https://bugzilla.suse.com/942908 https://bugzilla.suse.com/943096

1 0

openSUSE-SU-2015:1629-1: moderate: Security update for mysql-community-server
by opensuse-security＠opensuse.org 25 Sep '15

25 Sep '15

openSUSE Security Update: Security update for mysql-community-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1629-1 Rating: moderate References: #852477 #902396 #938412 #942908 #943096 Cross-References: CVE-2015-2582 CVE-2015-2611 CVE-2015-2617 CVE-2015-2620 CVE-2015-2639 CVE-2015-2641 CVE-2015-2643 CVE-2015-2648 CVE-2015-2661 CVE-2015-4737 CVE-2015-4752 CVE-2015-4756 CVE-2015-4757 CVE-2015-4761 CVE-2015-4767 CVE-2015-4769 CVE-2015-4771 CVE-2015-4772 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: The MySQL Community Server edition was updated to 5.6.26, fixing security issues and bugs. All changes: http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-26.html * Fixed CVEs: CVE-2015-2617, CVE-2015-2648, CVE-2015-2611, CVE-2015-2582 CVE-2015-4752, CVE-2015-4756, CVE-2015-2643, CVE-2015-4772 CVE-2015-4761, CVE-2015-4757, CVE-2015-4737, CVE-2015-4771 CVE-2015-4769, CVE-2015-2639, CVE-2015-2620, CVE-2015-2641 CVE-2015-2661, CVE-2015-4767 * disable Performance Schema by default. Since MySQL 5.6.6 upstream enabled Performance Schema by default which results in increased memory usage. The added option disable Performance Schema again in order to decrease MySQL memory usage [bnc#852477]. * install INFO_BIN and INFO_SRC, noticed in MDEV-6912 * remove superfluous '--group' parameter from mysql-systemd-helper * make -devel package installable in the presence of LibreSSL * cleanup after the update-message if it was displayed * add 'exec' to mysql-systemd-helper to shutdown mysql/mariadb cleanly [bnc#943096] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-608=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-608=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libmysql56client18-5.6.26-2.9.1 libmysql56client18-debuginfo-5.6.26-2.9.1 libmysql56client_r18-5.6.26-2.9.1 mysql-community-server-5.6.26-2.9.1 mysql-community-server-bench-5.6.26-2.9.1 mysql-community-server-bench-debuginfo-5.6.26-2.9.1 mysql-community-server-client-5.6.26-2.9.1 mysql-community-server-client-debuginfo-5.6.26-2.9.1 mysql-community-server-debuginfo-5.6.26-2.9.1 mysql-community-server-debugsource-5.6.26-2.9.1 mysql-community-server-errormessages-5.6.26-2.9.1 mysql-community-server-test-5.6.26-2.9.1 mysql-community-server-test-debuginfo-5.6.26-2.9.1 mysql-community-server-tools-5.6.26-2.9.1 mysql-community-server-tools-debuginfo-5.6.26-2.9.1 - openSUSE 13.2 (x86_64): libmysql56client18-32bit-5.6.26-2.9.1 libmysql56client18-debuginfo-32bit-5.6.26-2.9.1 libmysql56client_r18-32bit-5.6.26-2.9.1 - openSUSE 13.1 (i586 x86_64): libmysql56client18-5.6.26-7.10.1 libmysql56client18-debuginfo-5.6.26-7.10.1 libmysql56client_r18-5.6.26-7.10.1 mysql-community-server-5.6.26-7.10.1 mysql-community-server-bench-5.6.26-7.10.1 mysql-community-server-bench-debuginfo-5.6.26-7.10.1 mysql-community-server-client-5.6.26-7.10.1 mysql-community-server-client-debuginfo-5.6.26-7.10.1 mysql-community-server-debuginfo-5.6.26-7.10.1 mysql-community-server-debugsource-5.6.26-7.10.1 mysql-community-server-errormessages-5.6.26-7.10.1 mysql-community-server-test-5.6.26-7.10.1 mysql-community-server-test-debuginfo-5.6.26-7.10.1 mysql-community-server-tools-5.6.26-7.10.1 mysql-community-server-tools-debuginfo-5.6.26-7.10.1 - openSUSE 13.1 (x86_64): libmysql56client18-32bit-5.6.26-7.10.1 libmysql56client18-debuginfo-32bit-5.6.26-7.10.1 libmysql56client_r18-32bit-5.6.26-7.10.1 References: https://www.suse.com/security/cve/CVE-2015-2582.html https://www.suse.com/security/cve/CVE-2015-2611.html https://www.suse.com/security/cve/CVE-2015-2617.html https://www.suse.com/security/cve/CVE-2015-2620.html https://www.suse.com/security/cve/CVE-2015-2639.html https://www.suse.com/security/cve/CVE-2015-2641.html https://www.suse.com/security/cve/CVE-2015-2643.html https://www.suse.com/security/cve/CVE-2015-2648.html https://www.suse.com/security/cve/CVE-2015-2661.html https://www.suse.com/security/cve/CVE-2015-4737.html https://www.suse.com/security/cve/CVE-2015-4752.html https://www.suse.com/security/cve/CVE-2015-4756.html https://www.suse.com/security/cve/CVE-2015-4757.html https://www.suse.com/security/cve/CVE-2015-4761.html https://www.suse.com/security/cve/CVE-2015-4767.html https://www.suse.com/security/cve/CVE-2015-4769.html https://www.suse.com/security/cve/CVE-2015-4771.html https://www.suse.com/security/cve/CVE-2015-4772.html https://bugzilla.suse.com/852477 https://bugzilla.suse.com/902396 https://bugzilla.suse.com/938412 https://bugzilla.suse.com/942908 https://bugzilla.suse.com/943096

1 0

openSUSE-SU-2015:1628-1: important: Security update for php5
by opensuse-security＠opensuse.org 25 Sep '15

25 Sep '15

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1628-1 Rating: important References: #942291 #942293 #942294 #942295 #942296 #945402 #945403 #945412 #945428 Cross-References: CVE-2015-6831 CVE-2015-6832 CVE-2015-6833 CVE-2015-6834 CVE-2015-6835 CVE-2015-6836 CVE-2015-6837 CVE-2015-6838 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has one errata is now available. Description: The PHP5 script interpreter was updated to fix various security issues: * CVE-2015-6831: A use after free vulnerability in unserialize() has been fixed which could be used to crash php or potentially execute code. [bnc#942291] [bnc#942294] [bnc#942295] * CVE-2015-6832: A dangling pointer in the unserialization of ArrayObject items could be used to crash php or potentially execute code. [bnc#942293] * CVE-2015-6833: A directory traversal when extracting ZIP files could be used to overwrite files outside of intended area. [bnc#942296] * CVE-2015-6834: A Use After Free Vulnerability in unserialize() has been fixed which could be used to crash php or potentially execute code. [bnc#945403] * CVE-2015-6835: A Use After Free Vulnerability in session unserialize() has been fixed which could be used to crash php or potentially execute code. [bnc#945402] * CVE-2015-6836: A SOAP serialize_function_call() type confusion leading to remote code execution problem was fixed. [bnc#945428] * CVE-2015-6837 CVE-2015-6838: Two NULL pointer dereferences in the XSLTProcessor class were fixed. [bnc#945412] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-609=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-609=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_php5-5.6.1-36.1 apache2-mod_php5-debuginfo-5.6.1-36.1 php5-5.6.1-36.1 php5-bcmath-5.6.1-36.1 php5-bcmath-debuginfo-5.6.1-36.1 php5-bz2-5.6.1-36.1 php5-bz2-debuginfo-5.6.1-36.1 php5-calendar-5.6.1-36.1 php5-calendar-debuginfo-5.6.1-36.1 php5-ctype-5.6.1-36.1 php5-ctype-debuginfo-5.6.1-36.1 php5-curl-5.6.1-36.1 php5-curl-debuginfo-5.6.1-36.1 php5-dba-5.6.1-36.1 php5-dba-debuginfo-5.6.1-36.1 php5-debuginfo-5.6.1-36.1 php5-debugsource-5.6.1-36.1 php5-devel-5.6.1-36.1 php5-dom-5.6.1-36.1 php5-dom-debuginfo-5.6.1-36.1 php5-enchant-5.6.1-36.1 php5-enchant-debuginfo-5.6.1-36.1 php5-exif-5.6.1-36.1 php5-exif-debuginfo-5.6.1-36.1 php5-fastcgi-5.6.1-36.1 php5-fastcgi-debuginfo-5.6.1-36.1 php5-fileinfo-5.6.1-36.1 php5-fileinfo-debuginfo-5.6.1-36.1 php5-firebird-5.6.1-36.1 php5-firebird-debuginfo-5.6.1-36.1 php5-fpm-5.6.1-36.1 php5-fpm-debuginfo-5.6.1-36.1 php5-ftp-5.6.1-36.1 php5-ftp-debuginfo-5.6.1-36.1 php5-gd-5.6.1-36.1 php5-gd-debuginfo-5.6.1-36.1 php5-gettext-5.6.1-36.1 php5-gettext-debuginfo-5.6.1-36.1 php5-gmp-5.6.1-36.1 php5-gmp-debuginfo-5.6.1-36.1 php5-iconv-5.6.1-36.1 php5-iconv-debuginfo-5.6.1-36.1 php5-imap-5.6.1-36.1 php5-imap-debuginfo-5.6.1-36.1 php5-intl-5.6.1-36.1 php5-intl-debuginfo-5.6.1-36.1 php5-json-5.6.1-36.1 php5-json-debuginfo-5.6.1-36.1 php5-ldap-5.6.1-36.1 php5-ldap-debuginfo-5.6.1-36.1 php5-mbstring-5.6.1-36.1 php5-mbstring-debuginfo-5.6.1-36.1 php5-mcrypt-5.6.1-36.1 php5-mcrypt-debuginfo-5.6.1-36.1 php5-mssql-5.6.1-36.1 php5-mssql-debuginfo-5.6.1-36.1 php5-mysql-5.6.1-36.1 php5-mysql-debuginfo-5.6.1-36.1 php5-odbc-5.6.1-36.1 php5-odbc-debuginfo-5.6.1-36.1 php5-opcache-5.6.1-36.1 php5-opcache-debuginfo-5.6.1-36.1 php5-openssl-5.6.1-36.1 php5-openssl-debuginfo-5.6.1-36.1 php5-pcntl-5.6.1-36.1 php5-pcntl-debuginfo-5.6.1-36.1 php5-pdo-5.6.1-36.1 php5-pdo-debuginfo-5.6.1-36.1 php5-pgsql-5.6.1-36.1 php5-pgsql-debuginfo-5.6.1-36.1 php5-phar-5.6.1-36.1 php5-phar-debuginfo-5.6.1-36.1 php5-posix-5.6.1-36.1 php5-posix-debuginfo-5.6.1-36.1 php5-pspell-5.6.1-36.1 php5-pspell-debuginfo-5.6.1-36.1 php5-readline-5.6.1-36.1 php5-readline-debuginfo-5.6.1-36.1 php5-shmop-5.6.1-36.1 php5-shmop-debuginfo-5.6.1-36.1 php5-snmp-5.6.1-36.1 php5-snmp-debuginfo-5.6.1-36.1 php5-soap-5.6.1-36.1 php5-soap-debuginfo-5.6.1-36.1 php5-sockets-5.6.1-36.1 php5-sockets-debuginfo-5.6.1-36.1 php5-sqlite-5.6.1-36.1 php5-sqlite-debuginfo-5.6.1-36.1 php5-suhosin-5.6.1-36.1 php5-suhosin-debuginfo-5.6.1-36.1 php5-sysvmsg-5.6.1-36.1 php5-sysvmsg-debuginfo-5.6.1-36.1 php5-sysvsem-5.6.1-36.1 php5-sysvsem-debuginfo-5.6.1-36.1 php5-sysvshm-5.6.1-36.1 php5-sysvshm-debuginfo-5.6.1-36.1 php5-tidy-5.6.1-36.1 php5-tidy-debuginfo-5.6.1-36.1 php5-tokenizer-5.6.1-36.1 php5-tokenizer-debuginfo-5.6.1-36.1 php5-wddx-5.6.1-36.1 php5-wddx-debuginfo-5.6.1-36.1 php5-xmlreader-5.6.1-36.1 php5-xmlreader-debuginfo-5.6.1-36.1 php5-xmlrpc-5.6.1-36.1 php5-xmlrpc-debuginfo-5.6.1-36.1 php5-xmlwriter-5.6.1-36.1 php5-xmlwriter-debuginfo-5.6.1-36.1 php5-xsl-5.6.1-36.1 php5-xsl-debuginfo-5.6.1-36.1 php5-zip-5.6.1-36.1 php5-zip-debuginfo-5.6.1-36.1 php5-zlib-5.6.1-36.1 php5-zlib-debuginfo-5.6.1-36.1 - openSUSE 13.2 (noarch): php5-pear-5.6.1-36.1 - openSUSE 13.1 (i586 x86_64): apache2-mod_php5-5.4.20-67.1 apache2-mod_php5-debuginfo-5.4.20-67.1 php5-5.4.20-67.1 php5-bcmath-5.4.20-67.1 php5-bcmath-debuginfo-5.4.20-67.1 php5-bz2-5.4.20-67.1 php5-bz2-debuginfo-5.4.20-67.1 php5-calendar-5.4.20-67.1 php5-calendar-debuginfo-5.4.20-67.1 php5-ctype-5.4.20-67.1 php5-ctype-debuginfo-5.4.20-67.1 php5-curl-5.4.20-67.1 php5-curl-debuginfo-5.4.20-67.1 php5-dba-5.4.20-67.1 php5-dba-debuginfo-5.4.20-67.1 php5-debuginfo-5.4.20-67.1 php5-debugsource-5.4.20-67.1 php5-devel-5.4.20-67.1 php5-dom-5.4.20-67.1 php5-dom-debuginfo-5.4.20-67.1 php5-enchant-5.4.20-67.1 php5-enchant-debuginfo-5.4.20-67.1 php5-exif-5.4.20-67.1 php5-exif-debuginfo-5.4.20-67.1 php5-fastcgi-5.4.20-67.1 php5-fastcgi-debuginfo-5.4.20-67.1 php5-fileinfo-5.4.20-67.1 php5-fileinfo-debuginfo-5.4.20-67.1 php5-firebird-5.4.20-67.1 php5-firebird-debuginfo-5.4.20-67.1 php5-fpm-5.4.20-67.1 php5-fpm-debuginfo-5.4.20-67.1 php5-ftp-5.4.20-67.1 php5-ftp-debuginfo-5.4.20-67.1 php5-gd-5.4.20-67.1 php5-gd-debuginfo-5.4.20-67.1 php5-gettext-5.4.20-67.1 php5-gettext-debuginfo-5.4.20-67.1 php5-gmp-5.4.20-67.1 php5-gmp-debuginfo-5.4.20-67.1 php5-iconv-5.4.20-67.1 php5-iconv-debuginfo-5.4.20-67.1 php5-imap-5.4.20-67.1 php5-imap-debuginfo-5.4.20-67.1 php5-intl-5.4.20-67.1 php5-intl-debuginfo-5.4.20-67.1 php5-json-5.4.20-67.1 php5-json-debuginfo-5.4.20-67.1 php5-ldap-5.4.20-67.1 php5-ldap-debuginfo-5.4.20-67.1 php5-mbstring-5.4.20-67.1 php5-mbstring-debuginfo-5.4.20-67.1 php5-mcrypt-5.4.20-67.1 php5-mcrypt-debuginfo-5.4.20-67.1 php5-mssql-5.4.20-67.1 php5-mssql-debuginfo-5.4.20-67.1 php5-mysql-5.4.20-67.1 php5-mysql-debuginfo-5.4.20-67.1 php5-odbc-5.4.20-67.1 php5-odbc-debuginfo-5.4.20-67.1 php5-openssl-5.4.20-67.1 php5-openssl-debuginfo-5.4.20-67.1 php5-pcntl-5.4.20-67.1 php5-pcntl-debuginfo-5.4.20-67.1 php5-pdo-5.4.20-67.1 php5-pdo-debuginfo-5.4.20-67.1 php5-pgsql-5.4.20-67.1 php5-pgsql-debuginfo-5.4.20-67.1 php5-phar-5.4.20-67.1 php5-phar-debuginfo-5.4.20-67.1 php5-posix-5.4.20-67.1 php5-posix-debuginfo-5.4.20-67.1 php5-pspell-5.4.20-67.1 php5-pspell-debuginfo-5.4.20-67.1 php5-readline-5.4.20-67.1 php5-readline-debuginfo-5.4.20-67.1 php5-shmop-5.4.20-67.1 php5-shmop-debuginfo-5.4.20-67.1 php5-snmp-5.4.20-67.1 php5-snmp-debuginfo-5.4.20-67.1 php5-soap-5.4.20-67.1 php5-soap-debuginfo-5.4.20-67.1 php5-sockets-5.4.20-67.1 php5-sockets-debuginfo-5.4.20-67.1 php5-sqlite-5.4.20-67.1 php5-sqlite-debuginfo-5.4.20-67.1 php5-suhosin-5.4.20-67.1 php5-suhosin-debuginfo-5.4.20-67.1 php5-sysvmsg-5.4.20-67.1 php5-sysvmsg-debuginfo-5.4.20-67.1 php5-sysvsem-5.4.20-67.1 php5-sysvsem-debuginfo-5.4.20-67.1 php5-sysvshm-5.4.20-67.1 php5-sysvshm-debuginfo-5.4.20-67.1 php5-tidy-5.4.20-67.1 php5-tidy-debuginfo-5.4.20-67.1 php5-tokenizer-5.4.20-67.1 php5-tokenizer-debuginfo-5.4.20-67.1 php5-wddx-5.4.20-67.1 php5-wddx-debuginfo-5.4.20-67.1 php5-xmlreader-5.4.20-67.1 php5-xmlreader-debuginfo-5.4.20-67.1 php5-xmlrpc-5.4.20-67.1 php5-xmlrpc-debuginfo-5.4.20-67.1 php5-xmlwriter-5.4.20-67.1 php5-xmlwriter-debuginfo-5.4.20-67.1 php5-xsl-5.4.20-67.1 php5-xsl-debuginfo-5.4.20-67.1 php5-zip-5.4.20-67.1 php5-zip-debuginfo-5.4.20-67.1 php5-zlib-5.4.20-67.1 php5-zlib-debuginfo-5.4.20-67.1 - openSUSE 13.1 (noarch): php5-pear-5.4.20-67.1 References: https://www.suse.com/security/cve/CVE-2015-6831.html https://www.suse.com/security/cve/CVE-2015-6832.html https://www.suse.com/security/cve/CVE-2015-6833.html https://www.suse.com/security/cve/CVE-2015-6834.html https://www.suse.com/security/cve/CVE-2015-6835.html https://www.suse.com/security/cve/CVE-2015-6836.html https://www.suse.com/security/cve/CVE-2015-6837.html https://www.suse.com/security/cve/CVE-2015-6838.html https://bugzilla.suse.com/942291 https://bugzilla.suse.com/942293 https://bugzilla.suse.com/942294 https://bugzilla.suse.com/942295 https://bugzilla.suse.com/942296 https://bugzilla.suse.com/945402 https://bugzilla.suse.com/945403 https://bugzilla.suse.com/945412 https://bugzilla.suse.com/945428

1 0

openSUSE-RU-2015:1625-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 24 Sep '15

24 Sep '15

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1625-1 Rating: moderate References: #39842 #889287 #892678 #898250 #899104 #899363 #900352 #900466 #905738 #906694 #910337 #912904 #914833 #918356 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 14 recommended fixes can now be installed. Description: The Yast2 network module was updated to fix various bugs. - do not crash when adding new device and proposed configuration name is changed to new one (bnc#912904) - do not crash when renaming virtual device via hardware tab (bnc#914833) - initialize configuration name in Hardware tab correctly. It means according device type. Also uses custom name if user used nonstandard one. (bnc#910337) - udev rules provided by AutoYaST profile gets applied (bnc#905738) - populate bond slave candidates list with proper device names (bnc#918356) - Removed a bash specific post script with a workaround for an ancient bug (bnc#39842). - remove X-KDE-Library from desktop file (bnc#899104) - fixed exception raised due to modifying frozen string when running in localized mode (bnc#906694) - ignore /etc/install.inf:usessh flag when the file is present in installed system and always reload / restart network service in case of updated configuration (bnc#898250, bnc#899363) - AutoYaST Routing Import: Initialize device list correctly. (bnc#900352) - Do not set default_route to "no" in auto-configuration in inst-sys, just remove the entry completely (bnc#900466) - Improved help text in "global options" (bnc#892678) - during autoconfiguration at s390 use linuxrc's OSAHWAddr param for LLADDR when available. (bnc#889287) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-607=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): yast2-network-3.1.110.1-3.1 yast2-network-devel-doc-3.1.110.1-3.1 References: https://bugzilla.suse.com/39842 https://bugzilla.suse.com/889287 https://bugzilla.suse.com/892678 https://bugzilla.suse.com/898250 https://bugzilla.suse.com/899104 https://bugzilla.suse.com/899363 https://bugzilla.suse.com/900352 https://bugzilla.suse.com/900466 https://bugzilla.suse.com/905738 https://bugzilla.suse.com/906694 https://bugzilla.suse.com/910337 https://bugzilla.suse.com/912904 https://bugzilla.suse.com/914833 https://bugzilla.suse.com/918356

1 0

openSUSE-OU-2015:1624-1: Recommended update for nodejs
by maintenance＠opensuse.org 24 Sep '15

24 Sep '15

openSUSE Optional Update: Recommended update for nodejs ______________________________________________________________________________ Announcement ID: openSUSE-OU-2015:1624-1 Rating: low References: #895262 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Nodejs was updated to v4.0.0, bringing features, bug and security fixes. * child_process: ChildProcess.prototype.send() and process.send() operate asynchronously across all platforms so an optional callback parameter has been introduced that will be invoked once the message has been sent. * node: Rename "io.js" code to "Node.js". * node-gyp: This release bundles an updated version of node-gyp that works with all versions of Node.js and io.js including nightly and release candidate builds. From io.js v3 and Node.js v4 onward, it will only download a headers tarball when building addons rather than the entire source. * npm: Upgrade to version 2.14.2 from 2.13.3, includes a security update. * timers: Improved timer performance from porting the 0.12 implementation, plus minor fixes. * util: The util.is*() functions have been deprecated, beginning with deprecation warnings in the documentation for this release, users are encouraged to seek more robust alternatives in the npm registry. * v8: Upgrade to version 4.5.103.30 from 4.4.63.30 Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-604=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-604=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): nodejs-4.0.0-2.3.1 nodejs-debuginfo-4.0.0-2.3.1 nodejs-debugsource-4.0.0-2.3.1 nodejs-devel-4.0.0-2.3.1 - openSUSE 13.2 (noarch): nodejs-doc-4.0.0-2.3.1 - openSUSE 13.1 (i586 x86_64): nodejs-4.0.0-3.7.1 nodejs-debuginfo-4.0.0-3.7.1 nodejs-debugsource-4.0.0-3.7.1 nodejs-devel-4.0.0-3.7.1 - openSUSE 13.1 (noarch): nodejs-doc-4.0.0-3.7.1 References: https://www.suse.com/security/cve/CVE-2013-4450.html https://www.suse.com/security/cve/CVE-2014-5256.html https://bugzilla.suse.com/895262

1 0

openSUSE-SU-2015:1623-1: moderate: Security update for cyrus-imapd
by opensuse-security＠opensuse.org 24 Sep '15

24 Sep '15

openSUSE Security Update: Security update for cyrus-imapd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1623-1 Rating: moderate References: #945844 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update provides version 2.4.18 of cyrus-imapd * Security fix: handle urlfetch range starting outside message range * A bunch of cleanups and fixes to compiling * A bunch of sieve cleanups * Enhanced SSL/TLS configuration options * Disable use of SSLv2/SSLv3 * Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos) * Fixed T116: correct LIST response for domains starting with 'inbox.' * Fixed T76: fixed lmtpd userdeny db checks (thanks Leena Heino) * Fixed bug #3856: lmtpd now performs userdeny checks * Fixed bug #3848: support charset aliases in encoded headers * Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha) * Fixed bug #3415: fixed nntpd LIST/GROUP bug * Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves * Fixed bug #3757: don't segfault on mailbox close with no user Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-606=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): cyradm-2.4.18-2.7.1 cyrus-imapd-2.4.18-2.7.1 cyrus-imapd-debuginfo-2.4.18-2.7.1 cyrus-imapd-debugsource-2.4.18-2.7.1 cyrus-imapd-devel-2.4.18-2.7.1 cyrus-imapd-snmp-2.4.18-2.7.1 cyrus-imapd-snmp-mibs-2.4.18-2.7.1 cyrus-imapd-utils-2.4.18-2.7.1 perl-Cyrus-IMAP-2.4.18-2.7.1 perl-Cyrus-IMAP-debuginfo-2.4.18-2.7.1 perl-Cyrus-SIEVE-managesieve-2.4.18-2.7.1 perl-Cyrus-SIEVE-managesieve-debuginfo-2.4.18-2.7.1 References: https://bugzilla.suse.com/945844

1 0