September 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2015:1622-1: moderate: Security update for cyrus-imapd
by opensuse-security＠opensuse.org 24 Sep '15

24 Sep '15

openSUSE Security Update: Security update for cyrus-imapd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1622-1 Rating: moderate References: #945841 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This recommended update provides version 2.3.19 of cyrus-imapd * Security fix: handle urlfetch range starting outside message range * Disable use of SSLv2/SSLv3 * Support for Berkeley DB 5.x (thanks Ondrej Sury) * Support for newer glibc versions (thanks Thomas Jarosch) * Fixed bug #3465: support for perl 5.14 (thanks hsk(a)imb-jena.de) * Fixed bug #3640: reject NULL bytes in headers on LMTP delivery (thanks Julien Coloos) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-605=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): cyrus-imapd-2.3.19-34.3.1 cyrus-imapd-debuginfo-2.3.19-34.3.1 cyrus-imapd-debugsource-2.3.19-34.3.1 cyrus-imapd-devel-2.3.19-34.3.1 perl-Cyrus-IMAP-2.3.19-34.3.1 perl-Cyrus-IMAP-debuginfo-2.3.19-34.3.1 perl-Cyrus-SIEVE-managesieve-2.3.19-34.3.1 perl-Cyrus-SIEVE-managesieve-debuginfo-2.3.19-34.3.1 References: https://bugzilla.suse.com/945841

1 0

openSUSE-SU-2015:1616-1: critical: Security update for flash-player
by opensuse-security＠opensuse.org 23 Sep '15

23 Sep '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1616-1 Rating: critical References: #946880 Cross-References: CVE-2015-5567 CVE-2015-5568 CVE-2015-5570 CVE-2015-5571 CVE-2015-5572 CVE-2015-5573 CVE-2015-5574 CVE-2015-5575 CVE-2015-5576 CVE-2015-5577 CVE-2015-5578 CVE-2015-5579 CVE-2015-5580 CVE-2015-5581 CVE-2015-5582 CVE-2015-5584 CVE-2015-5587 CVE-2015-5588 CVE-2015-6676 CVE-2015-6677 CVE-2015-6678 CVE-2015-6679 CVE-2015-6682 Affected Products: openSUSE 13.2:NonFree openSUSE 13.1:NonFree ______________________________________________________________________________ An update that fixes 23 vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.521 (APSB15-23 bsc#946880) fixing several security issues: More information can be found on: https://helpx.adobe.com/security/products/flash-player/apsb15-23.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2:NonFree: zypper in -t patch openSUSE-2015-603=1 - openSUSE 13.1:NonFree: zypper in -t patch openSUSE-2015-603=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2:NonFree (i586 x86_64): flash-player-11.2.202.521-2.70.1 flash-player-gnome-11.2.202.521-2.70.1 flash-player-kde4-11.2.202.521-2.70.1 - openSUSE 13.1:NonFree (i586 x86_64): flash-player-11.2.202.521-135.1 flash-player-gnome-11.2.202.521-135.1 flash-player-kde4-11.2.202.521-135.1 References: https://www.suse.com/security/cve/CVE-2015-5567.html https://www.suse.com/security/cve/CVE-2015-5568.html https://www.suse.com/security/cve/CVE-2015-5570.html https://www.suse.com/security/cve/CVE-2015-5571.html https://www.suse.com/security/cve/CVE-2015-5572.html https://www.suse.com/security/cve/CVE-2015-5573.html https://www.suse.com/security/cve/CVE-2015-5574.html https://www.suse.com/security/cve/CVE-2015-5575.html https://www.suse.com/security/cve/CVE-2015-5576.html https://www.suse.com/security/cve/CVE-2015-5577.html https://www.suse.com/security/cve/CVE-2015-5578.html https://www.suse.com/security/cve/CVE-2015-5579.html https://www.suse.com/security/cve/CVE-2015-5580.html https://www.suse.com/security/cve/CVE-2015-5581.html https://www.suse.com/security/cve/CVE-2015-5582.html https://www.suse.com/security/cve/CVE-2015-5584.html https://www.suse.com/security/cve/CVE-2015-5587.html https://www.suse.com/security/cve/CVE-2015-5588.html https://www.suse.com/security/cve/CVE-2015-6676.html https://www.suse.com/security/cve/CVE-2015-6677.html https://www.suse.com/security/cve/CVE-2015-6678.html https://www.suse.com/security/cve/CVE-2015-6679.html https://www.suse.com/security/cve/CVE-2015-6682.html https://bugzilla.suse.com/946880

1 0

openSUSE-SU-2015:1598-1: moderate: Security update for python-django
by opensuse-security＠opensuse.org 22 Sep '15

22 Sep '15

openSUSE Security Update: Security update for python-django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1598-1 Rating: moderate References: #913053 #913054 #913055 #913056 #914706 #923176 #941587 Cross-References: CVE-2015-0219 CVE-2015-0220 CVE-2015-0221 CVE-2015-0222 CVE-2015-2317 CVE-2015-5963 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has one errata is now available. Description: python Django was updated to fix a remote denial of service (resource exhaustion) possibility in the auth views module. (bsc#941587, CVE-2015-5963) Also is_safe_url() was made to reject URLs that start with control characters to mitigate possible XSS attack via user-supplied redirect URLs (bnc#923176, CVE-2015-2317) - Method check_for_test_cookie is deprecated, bnc#914706 - Update to version 1.5.12 with various security fixes: + Fixed a regression with dynamically generated inlines and allowed field references in the admin + Allowed related many-to-many fields to be referenced in the admin + Allowed inline and hidden references to admin fields Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-598=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): python-django-1.5.12-0.2.11.1 References: https://www.suse.com/security/cve/CVE-2015-0219.html https://www.suse.com/security/cve/CVE-2015-0220.html https://www.suse.com/security/cve/CVE-2015-0221.html https://www.suse.com/security/cve/CVE-2015-0222.html https://www.suse.com/security/cve/CVE-2015-2317.html https://www.suse.com/security/cve/CVE-2015-5963.html https://bugzilla.suse.com/913053 https://bugzilla.suse.com/913054 https://bugzilla.suse.com/913055 https://bugzilla.suse.com/913056 https://bugzilla.suse.com/914706 https://bugzilla.suse.com/923176 https://bugzilla.suse.com/941587

1 0

openSUSE-SU-2015:1597-1: important: Security update for bind
by opensuse-security＠opensuse.org 22 Sep '15

22 Sep '15

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1597-1 Rating: important References: #944066 Cross-References: CVE-2015-5722 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: BIND was updated to fix a denial of service against servers performing validation on DNSSEC-signed records (CVE-2015-5722, bsc#944066). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-600=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-600=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): bind-9.9.6P1-2.10.1 bind-chrootenv-9.9.6P1-2.10.1 bind-debuginfo-9.9.6P1-2.10.1 bind-debugsource-9.9.6P1-2.10.1 bind-devel-9.9.6P1-2.10.1 bind-libs-9.9.6P1-2.10.1 bind-libs-debuginfo-9.9.6P1-2.10.1 bind-lwresd-9.9.6P1-2.10.1 bind-lwresd-debuginfo-9.9.6P1-2.10.1 bind-utils-9.9.6P1-2.10.1 bind-utils-debuginfo-9.9.6P1-2.10.1 - openSUSE 13.2 (x86_64): bind-libs-32bit-9.9.6P1-2.10.1 bind-libs-debuginfo-32bit-9.9.6P1-2.10.1 - openSUSE 13.2 (noarch): bind-doc-9.9.6P1-2.10.1 - openSUSE 13.1 (i586 x86_64): bind-9.9.4P2-2.17.1 bind-chrootenv-9.9.4P2-2.17.1 bind-debuginfo-9.9.4P2-2.17.1 bind-debugsource-9.9.4P2-2.17.1 bind-devel-9.9.4P2-2.17.1 bind-libs-9.9.4P2-2.17.1 bind-libs-debuginfo-9.9.4P2-2.17.1 bind-lwresd-9.9.4P2-2.17.1 bind-lwresd-debuginfo-9.9.4P2-2.17.1 bind-utils-9.9.4P2-2.17.1 bind-utils-debuginfo-9.9.4P2-2.17.1 - openSUSE 13.1 (x86_64): bind-libs-32bit-9.9.4P2-2.17.1 bind-libs-debuginfo-32bit-9.9.4P2-2.17.1 - openSUSE 13.1 (noarch): bind-doc-9.9.4P2-2.17.1 References: https://www.suse.com/security/cve/CVE-2015-5722.html https://bugzilla.suse.com/944066

1 0

openSUSE-SU-2015:1596-1: Security update for libgcrypt
by opensuse-security＠opensuse.org 22 Sep '15

22 Sep '15

openSUSE Security Update: Security update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1596-1 Rating: low References: #944835 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: libgcrypt was updated to include countermeasures against Lenstra's fault attack on RSA Chinese Remainder Theorem optimization in RSA. A signature verification step was updated to protect against leaks of private keys in case of hardware faults or implementation errors in numeric libraries. GnuPG already performed this check by itself and was not affected. This fix is equivalent, but not equal to CVE-2015-5738 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-597=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-597=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libgcrypt-cavs-1.6.1-8.10.1 libgcrypt-cavs-debuginfo-1.6.1-8.10.1 libgcrypt-debugsource-1.6.1-8.10.1 libgcrypt-devel-1.6.1-8.10.1 libgcrypt-devel-debuginfo-1.6.1-8.10.1 libgcrypt20-1.6.1-8.10.1 libgcrypt20-debuginfo-1.6.1-8.10.1 libgcrypt20-hmac-1.6.1-8.10.1 - openSUSE 13.2 (x86_64): libgcrypt-devel-32bit-1.6.1-8.10.1 libgcrypt-devel-debuginfo-32bit-1.6.1-8.10.1 libgcrypt20-32bit-1.6.1-8.10.1 libgcrypt20-debuginfo-32bit-1.6.1-8.10.1 libgcrypt20-hmac-32bit-1.6.1-8.10.1 - openSUSE 13.1 (i586 x86_64): libgcrypt-debugsource-1.5.4-2.12.1 libgcrypt-devel-1.5.4-2.12.1 libgcrypt-devel-debuginfo-1.5.4-2.12.1 libgcrypt11-1.5.4-2.12.1 libgcrypt11-debuginfo-1.5.4-2.12.1 - openSUSE 13.1 (x86_64): libgcrypt-devel-32bit-1.5.4-2.12.1 libgcrypt-devel-debuginfo-32bit-1.5.4-2.12.1 libgcrypt11-32bit-1.5.4-2.12.1 libgcrypt11-debuginfo-32bit-1.5.4-2.12.1 References: https://bugzilla.suse.com/944835

1 0

openSUSE-SU-2015:1595-1: important: Security update for icedtea-web
by opensuse-security＠opensuse.org 22 Sep '15

22 Sep '15

openSUSE Security Update: Security update for icedtea-web ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1595-1 Rating: important References: #755054 #830880 #944208 #944209 Cross-References: CVE-2012-4540 CVE-2015-5234 CVE-2015-5235 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: The icedtea-web java plugin was updated to 1.6.1. Changes included: * Enabled Entry-Point attribute check * permissions sandbox and signed app and unsigned app with permissions all-permissions now run in sandbox instead of not at all. * fixed DownloadService * comments in deployment.properties now should persists load/save * fixed bug in caching of files with query * fixed issues with recreating of existing shortcut * trustAll/trustNone now processed correctly * headless no longer shows dialogues * RH1231441 Unable to read the text of the buttons of the security dialogue * Fixed RH1233697 icedtea-web: applet origin spoofing (CVE-2015-5235, bsc#944208) * Fixed RH1233667 icedtea-web: unexpected permanent authorization of unsigned applets (CVE-2015-5234, bsc#944209) * MissingALACAdialog made available also for unsigned applications (but ignoring actual manifest value) and fixed * NetX - fixed issues with -html shortcuts - fixed issue with -html receiving garbage in width and height * PolicyEditor - file flag made to work when used standalone - file flag and main argument cannot be used in combination * Fix generation of man-pages with some versions of "tail" Also included is the update to 1.6 * Massively improved offline abilities. Added Xoffline switch to force work without inet connection. * Improved to be able to run with any JDK * JDK 6 and older no longer supported * JDK 8 support added (URLPermission granted if applicable) * JDK 9 supported * Added support for Entry-Point manifest attribute * Added KEY_ENABLE_MANIFEST_ATTRIBUTES_CHECK deployment property to control scan of Manifest file * starting arguments now accept also -- abbreviations * Added new documentation * Added support for menu shortcuts - both javaws applications/applets and html applets are supported * added support for -html switch for javaws. Now you can run most of the applets without browser at all * Control Panel - PR1856: ControlPanel UI improvement for lower resolutions (800*600) * NetX - PR1858: Java Console accepts multi-byte encodings - PR1859: Java Console UI improvement for lower resolutions (800*600) - RH1091563: [abrt] icedtea-web-1.5-2.fc20: Uncaught exception java.lang.ClassCastException in method sun.applet.PluginAppletViewer$8.run() - Dropped support for long unmaintained -basedir argument - Returned support for -jnlp argument - RH1095311, PR574 - References class sun.misc.Ref removed in OpenJDK 9 - fixed, and so buildable on JDK9 * Plugin - PR1743 - Intermittant deadlock in PluginRequestProcessor - PR1298 - LiveConnect - problem setting array elements (applet variables) from JS - RH1121549: coverity defects - Resolves method overloading correctly with superclass heirarchy distance * PolicyEditor - codebases can be renamed in-place, copied, and pasted - codebase URLs can be copied to system clipboard - displays a progress dialog while opening or saving files - codebases without permissions assigned save to file anyway (and re-appear on next open) - PR1776: NullPointer on save-and-exit - PR1850: duplicate codebases when launching from security dialogs - Fixed bug where clicking "Cancel" on the "Save before Exiting" dialog could result in the editor exiting without saving changes - Keyboard accelerators and mnemonics greatly improved - "File - New" allows editing a new policy without first selecting the file to save to * Common - PR1769: support signed applets which specify Sandbox permissions in their manifests * Temporary Permissions in security dialog now multi-selectable and based on PolicyEditor permissions - Update to 1.5.2 * NetX - RH1095311, PR574 - References class sun.misc.Ref removed in OpenJDK 9 - fixed, and so buildable on JDK9 - RH1154177 - decoded file needed from cache - fixed NPE in https dialog - empty codebase behaves as "." Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-602=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-602=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): java-1_7_0-openjdk-plugin-1.6.1-6.1 java-1_7_0-openjdk-plugin-debuginfo-1.6.1-6.1 java-1_7_0-openjdk-plugin-debugsource-1.6.1-6.1 java-1_8_0-openjdk-plugin-1.6.1-6.2 java-1_8_0-openjdk-plugin-debuginfo-1.6.1-6.2 java-1_8_0-openjdk-plugin-debugsource-1.6.1-6.2 - openSUSE 13.2 (noarch): icedtea-web-javadoc-1.6.1-6.1 - openSUSE 13.1 (i586 x86_64): icedtea-web-1.5.3-0.7.1 icedtea-web-debuginfo-1.5.3-0.7.1 icedtea-web-debugsource-1.5.3-0.7.1 - openSUSE 13.1 (noarch): icedtea-web-javadoc-1.5.3-0.7.1 References: https://www.suse.com/security/cve/CVE-2012-4540.html https://www.suse.com/security/cve/CVE-2015-5234.html https://www.suse.com/security/cve/CVE-2015-5235.html https://bugzilla.suse.com/755054 https://bugzilla.suse.com/830880 https://bugzilla.suse.com/944208 https://bugzilla.suse.com/944209

1 0

openSUSE-RU-2015:1594-1: moderate: Recommended update for iperf
by maintenance＠opensuse.org 22 Sep '15

22 Sep '15

openSUSE Recommended Update: Recommended update for iperf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1594-1 Rating: moderate References: #945818 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 3.0.11 of iperf. * Add a -1 flag to make the iperf3 execute a single test and exit, needed for an upcoming bwctl release. * Make the -w option work correctly with UDP tests. * Fix an issue for a situation in which attempting a UDP test with pathologically large (and illegal) packet sizes could put the iperf3 server in a state where it would stop accepting connections from clients, thus causing the clients to crash when interrupted. * A bug that caused some problems with bwctl / perfSONAR has been fixed. * A bug that made it possible to disrupt existing, running tests has been fixed. * Several problems with the -B option have been fixed. Also, API calls have been added to libiperf to extend this functionality to API clients. * A few other bugs are also fixed. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-601=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): iperf-3.0.11-2.3.1 iperf-debuginfo-3.0.11-2.3.1 iperf-debugsource-3.0.11-2.3.1 iperf-devel-3.0.11-2.3.1 libiperf0-3.0.11-2.3.1 libiperf0-debuginfo-3.0.11-2.3.1 References: https://bugzilla.suse.com/945818

1 0

openSUSE-SU-2015:1593-1: moderate: Security update for criu
by opensuse-security＠opensuse.org 22 Sep '15

22 Sep '15

openSUSE Security Update: Security update for criu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1593-1 Rating: moderate References: #943105 Cross-References: CVE-2015-5228 CVE-2015-5231 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The systemd service in criu was disabled as a temporary workaround for possibile security issues (CVE-2015-5228, CVE-2015-5231, bsc#943105) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-599=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (x86_64): criu-1.3.1-4.1 criu-debuginfo-1.3.1-4.1 criu-debugsource-1.3.1-4.1 criu-devel-1.3.1-4.1 libcriu1-1.3.1-4.1 libcriu1-debuginfo-1.3.1-4.1 References: https://www.suse.com/security/cve/CVE-2015-5228.html https://www.suse.com/security/cve/CVE-2015-5231.html https://bugzilla.suse.com/943105

1 0

openSUSE-SU-2015:1586-1: moderate: Security update for Chromium
by opensuse-security＠opensuse.org 21 Sep '15

21 Sep '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1586-1 Rating: moderate References: #944144 Cross-References: CVE-2015-1291 CVE-2015-1292 CVE-2015-1293 CVE-2015-1294 CVE-2015-1295 CVE-2015-1296 CVE-2015-1297 CVE-2015-1298 CVE-2015-1299 CVE-2015-1300 CVE-2015-1301 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: Chromium was updated to the 45.0.2454.85 of the stable channel to fix multiple security issues. The following vulnerabilities were fixed: * CVE-2015-1291: Cross-origin bypass in DOM * CVE-2015-1292: Cross-origin bypass in ServiceWorker * CVE-2015-1293: Cross-origin bypass in DOM * CVE-2015-1294: Use-after-free in Skia * CVE-2015-1295: Use-after-free in Printing * CVE-2015-1296: Character spoofing in omnibox * CVE-2015-1297: Permission scoping error in WebRequest * CVE-2015-1298: URL validation error in extensions * CVE-2015-1299: Use-after-free in Blink * CVE-2015-1300: Information leak in Blink * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-595=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-595=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): chromedriver-45.0.2454.85-43.1 chromedriver-debuginfo-45.0.2454.85-43.1 chromium-45.0.2454.85-43.1 chromium-debuginfo-45.0.2454.85-43.1 chromium-debugsource-45.0.2454.85-43.1 chromium-desktop-gnome-45.0.2454.85-43.1 chromium-desktop-kde-45.0.2454.85-43.1 chromium-ffmpegsumo-45.0.2454.85-43.1 chromium-ffmpegsumo-debuginfo-45.0.2454.85-43.1 - openSUSE 13.1 (i586 x86_64): chromedriver-45.0.2454.85-98.1 chromedriver-debuginfo-45.0.2454.85-98.1 chromium-45.0.2454.85-98.1 chromium-debuginfo-45.0.2454.85-98.1 chromium-debugsource-45.0.2454.85-98.1 chromium-desktop-gnome-45.0.2454.85-98.1 chromium-desktop-kde-45.0.2454.85-98.1 chromium-ffmpegsumo-45.0.2454.85-98.1 chromium-ffmpegsumo-debuginfo-45.0.2454.85-98.1 References: https://www.suse.com/security/cve/CVE-2015-1291.html https://www.suse.com/security/cve/CVE-2015-1292.html https://www.suse.com/security/cve/CVE-2015-1293.html https://www.suse.com/security/cve/CVE-2015-1294.html https://www.suse.com/security/cve/CVE-2015-1295.html https://www.suse.com/security/cve/CVE-2015-1296.html https://www.suse.com/security/cve/CVE-2015-1297.html https://www.suse.com/security/cve/CVE-2015-1298.html https://www.suse.com/security/cve/CVE-2015-1299.html https://www.suse.com/security/cve/CVE-2015-1300.html https://www.suse.com/security/cve/CVE-2015-1301.html https://bugzilla.suse.com/944144

1 0

openSUSE-RU-2015:1583-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 21 Sep '15

21 Sep '15

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1583-1 Rating: moderate References: #943312 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This dracut update fixes a vconsole fontmap problem in the initrd. (bsc#943312) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-594=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): dracut-037-17.21.1 dracut-debuginfo-037-17.21.1 dracut-debugsource-037-17.21.1 dracut-fips-037-17.21.1 References: https://bugzilla.suse.com/943312

1 0