September 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:1582-1: moderate: Recommended update for NetworkManager-strongswan
by maintenance＠opensuse.org 21 Sep '15

21 Sep '15

openSUSE Recommended Update: Recommended update for NetworkManager-strongswan ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1582-1 Rating: moderate References: #944769 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The NetworkManager strongswan GNOME applet was updated to make it work. (boo#944769, boo#944769). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-593=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): NetworkManager-strongswan-1.3.1-2.6.1 NetworkManager-strongswan-debugsource-1.3.1-2.6.1 NetworkManager-strongswan-gnome-1.3.1-2.6.1 NetworkManager-strongswan-gnome-debuginfo-1.3.1-2.6.1 - openSUSE 13.2 (noarch): NetworkManager-strongswan-lang-1.3.1-2.6.1 References: https://bugzilla.suse.com/944769

1 0

openSUSE-SU-2015:1580-1: moderate: Security update for python-Django
by opensuse-security＠opensuse.org 19 Sep '15

19 Sep '15

openSUSE Security Update: Security update for python-Django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1580-1 Rating: moderate References: #941587 Cross-References: CVE-2015-5963 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: python Django was updated to fix a remote denial of service (resource exhaustion) possibility in the auth views module. (bsc#941587, CVE-2015-5963) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-592=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): python-Django-1.6.11-3.7.1 References: https://www.suse.com/security/cve/CVE-2015-5963.html https://bugzilla.suse.com/941587

1 0

openSUSE-SU-2015:1579-1: moderate: Security update for remind
by opensuse-security＠opensuse.org 19 Sep '15

19 Sep '15

openSUSE Security Update: Security update for remind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1579-1 Rating: moderate References: #940924 Cross-References: CVE-2015-5957 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: remind was updated to fix a buffer overflow in DumpSysVar (CVE-2015-5957) (bnc#940924) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-591=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-591=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): remind-3.1.13-4.3.1 remind-debuginfo-3.1.13-4.3.1 remind-debugsource-3.1.13-4.3.1 - openSUSE 13.1 (i586 x86_64): remind-3.1.13-2.3.1 remind-debuginfo-3.1.13-2.3.1 remind-debugsource-3.1.13-2.3.1 References: https://www.suse.com/security/cve/CVE-2015-5957.html https://bugzilla.suse.com/940924

1 0

openSUSE-RU-2015:1578-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 18 Sep '15

18 Sep '15

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1578-1 Rating: moderate References: #908669 #936254 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: VirtualBox received various improvements regarding to starting of vboxadd-service to provide better auto mounting of shared folders and time synchronization work. Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that vboxadd-service can find it, it cannot be run as user anyway Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-589=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): python-virtualbox-4.2.32-2.38.1 python-virtualbox-debuginfo-4.2.32-2.38.1 virtualbox-4.2.32-2.38.1 virtualbox-debuginfo-4.2.32-2.38.1 virtualbox-debugsource-4.2.32-2.38.1 virtualbox-devel-4.2.32-2.38.1 virtualbox-guest-kmp-default-4.2.32_k3.11.10_29-2.38.1 virtualbox-guest-kmp-default-debuginfo-4.2.32_k3.11.10_29-2.38.1 virtualbox-guest-kmp-desktop-4.2.32_k3.11.10_29-2.38.1 virtualbox-guest-kmp-desktop-debuginfo-4.2.32_k3.11.10_29-2.38.1 virtualbox-guest-tools-4.2.32-2.38.1 virtualbox-guest-tools-debuginfo-4.2.32-2.38.1 virtualbox-guest-x11-4.2.32-2.38.1 virtualbox-guest-x11-debuginfo-4.2.32-2.38.1 virtualbox-host-kmp-default-4.2.32_k3.11.10_29-2.38.1 virtualbox-host-kmp-default-debuginfo-4.2.32_k3.11.10_29-2.38.1 virtualbox-host-kmp-desktop-4.2.32_k3.11.10_29-2.38.1 virtualbox-host-kmp-desktop-debuginfo-4.2.32_k3.11.10_29-2.38.1 virtualbox-qt-4.2.32-2.38.1 virtualbox-qt-debuginfo-4.2.32-2.38.1 virtualbox-websrv-4.2.32-2.38.1 virtualbox-websrv-debuginfo-4.2.32-2.38.1 - openSUSE 13.1 (noarch): virtualbox-host-source-4.2.32-2.38.1 - openSUSE 13.1 (i586): virtualbox-guest-kmp-pae-4.2.32_k3.11.10_29-2.38.1 virtualbox-guest-kmp-pae-debuginfo-4.2.32_k3.11.10_29-2.38.1 virtualbox-host-kmp-pae-4.2.32_k3.11.10_29-2.38.1 virtualbox-host-kmp-pae-debuginfo-4.2.32_k3.11.10_29-2.38.1 References: https://bugzilla.suse.com/908669 https://bugzilla.suse.com/936254

1 0

openSUSE-RU-2015:1577-1: moderate: Recommended update for docker
by maintenance＠opensuse.org 18 Sep '15

18 Sep '15

openSUSE Recommended Update: Recommended update for docker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1577-1 Rating: moderate References: #942369 #942370 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: Docker was updated to version 1.8.1. See detailed changes on https://github.com/docker/docker/releases/tag/v1.8.0 and https://github.com/docker/docker/releases/tag/v1.8.1. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-587=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (x86_64): docker-1.8.1-37.1 docker-debuginfo-1.8.1-37.1 docker-debugsource-1.8.1-37.1 - openSUSE 13.2 (noarch): docker-bash-completion-1.8.1-37.1 docker-test-1.8.1-37.1 docker-zsh-completion-1.8.1-37.1 References: https://bugzilla.suse.com/942369 https://bugzilla.suse.com/942370

1 0

openSUSE-RU-2015:1575-1: moderate: Recommended update for apache2-mod_nss
by maintenance＠opensuse.org 18 Sep '15

18 Sep '15

openSUSE Recommended Update: Recommended update for apache2-mod_nss ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1575-1 Rating: moderate References: #927402 #928039 #930186 #930922 #933265 #933832 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: The Apache mod_nss module was updated to fix various issues. * Unified the ciphers with SUSE Linux Enterprise 11. * Send TLS server name extension (SNI) on proxy connections (bsc#933832) * Various bugfixes for SNI support have been done (bnc#927402, bsc#927402, bsc#928039, bsc#930922, bsc#930186) * Add an alert about permission on the certificate database (bsc#933265) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-586=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-586=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (aarch64 armv7hl ppc ppc64 ppc64le): apache2-mod_nss-1.0.8-11.14.1 apache2-mod_nss-debuginfo-1.0.8-11.14.1 apache2-mod_nss-debugsource-1.0.8-11.14.1 - openSUSE 13.1 (aarch64 armv7hl ppc ppc64): apache2-mod_nss-1.0.8-6.29.1 apache2-mod_nss-debuginfo-1.0.8-6.29.1 apache2-mod_nss-debugsource-1.0.8-6.29.1 References: https://bugzilla.suse.com/927402 https://bugzilla.suse.com/928039 https://bugzilla.suse.com/930186 https://bugzilla.suse.com/930922 https://bugzilla.suse.com/933265 https://bugzilla.suse.com/933832

1 0

openSUSE-RU-2015:1574-1: moderate: Recommended update for libgdiplus0
by maintenance＠opensuse.org 18 Sep '15

18 Sep '15

openSUSE Recommended Update: Recommended update for libgdiplus0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1574-1 Rating: moderate References: #944912 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The libgdiplus pkgconfig file had an unexpanded libjpeg_prefix variable that would lead to errors on using it to build other packages. (boo#944912) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-590=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-590=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (aarch64 armv7hl ppc ppc64 ppc64le): libgdiplus-devel-3.8-3.1 libgdiplus0-3.8-3.1 libgdiplus0-debuginfo-3.8-3.1 libgdiplus0-debugsource-3.8-3.1 - openSUSE 13.1 (aarch64 armv7hl ppc ppc64): libgdiplus-devel-2.10.9-3.3.1 libgdiplus0-2.10.9-3.3.1 libgdiplus0-debuginfo-2.10.9-3.3.1 libgdiplus0-debugsource-2.10.9-3.3.1 References: https://bugzilla.suse.com/944912

1 0

openSUSE-RU-2015:1572-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 18 Sep '15

18 Sep '15

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:1572-1 Rating: moderate References: #867863 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The X.Org X Server was updated to fix a crash in the libvnc module. (bnc#867863) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-588=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (aarch64 armv7hl ppc ppc64): xorg-x11-server-7.6_1.14.3.901-22.1 xorg-x11-server-debuginfo-7.6_1.14.3.901-22.1 xorg-x11-server-debugsource-7.6_1.14.3.901-22.1 xorg-x11-server-extra-7.6_1.14.3.901-22.1 xorg-x11-server-extra-debuginfo-7.6_1.14.3.901-22.1 xorg-x11-server-sdk-7.6_1.14.3.901-22.1 References: https://bugzilla.suse.com/867863

1 0

openSUSE-SU-2015:1571-1: moderate: Security update for sblim-sfcb
by opensuse-security＠opensuse.org 18 Sep '15

18 Sep '15

openSUSE Security Update: Security update for sblim-sfcb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1571-1 Rating: moderate References: #942628 Cross-References: CVE-2015-5185 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: sblim-sfcb was updated to fix a security issue with a crash due to a null pointer dereference in lookupProviders() (CVE-2015-5185) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-585=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-585=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): sblim-sfcb-1.4.8-4.4.1 sblim-sfcb-debuginfo-1.4.8-4.4.1 sblim-sfcb-debugsource-1.4.8-4.4.1 - openSUSE 13.1 (i586 x86_64): sblim-sfcb-1.3.17-2.3.1 sblim-sfcb-debuginfo-1.3.17-2.3.1 sblim-sfcb-debugsource-1.3.17-2.3.1 References: https://www.suse.com/security/cve/CVE-2015-5185.html https://bugzilla.suse.com/942628

1 0

openSUSE-SU-2015:1566-1: moderate: Security update for spice
by opensuse-security＠opensuse.org 17 Sep '15

17 Sep '15

openSUSE Security Update: Security update for spice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1566-1 Rating: moderate References: #944460 Cross-References: CVE-2015-3247 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Spice was updated to fix a heap corruption in the spice server (CVE-2015-3247). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-583=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libspice-server-devel-0.12.4-4.3.1 libspice-server1-0.12.4-4.3.1 libspice-server1-debuginfo-0.12.4-4.3.1 spice-client-0.12.4-4.3.1 spice-client-debuginfo-0.12.4-4.3.1 spice-debugsource-0.12.4-4.3.1 References: https://www.suse.com/security/cve/CVE-2015-3247.html https://bugzilla.suse.com/944460

1 0