May 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:1437-1: moderate: Recommended update for gpaste
by maintenance＠opensuse.org 30 May '16

30 May '16

openSUSE Recommended Update: Recommended update for gpaste ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1437-1 Rating: moderate References: #980421 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gpaste fixes the following issues: - Allow compatibility with gnome-shell 3.16.x (boo#980421). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-658=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gpaste-3.14-6.1 gpaste-debuginfo-3.14-6.1 gpaste-debugsource-3.14-6.1 gpaste-devel-3.14-6.1 libgpaste2-3.14-6.1 libgpaste2-debuginfo-3.14-6.1 typelib-1_0-GPaste-1_0-3.14-6.1 - openSUSE Leap 42.1 (noarch): gnome-shell-extension-gpaste-3.14-6.1 gpaste-lang-3.14-6.1 References: https://bugzilla.suse.com/980421

1 0

openSUSE-RU-2016:1436-1: moderate: Recommended update for gdm
by maintenance＠opensuse.org 30 May '16

30 May '16

openSUSE Recommended Update: Recommended update for gdm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1436-1 Rating: moderate References: #978262 #981012 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for gdm fixes the following issues: - Use -listen intead of -nolisten for tcp connections to Xorg >= 1.17. (boo#978262, boo#981012, bgo#750026). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-657=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gdm-3.14.2-12.1 gdm-debuginfo-3.14.2-12.1 gdm-debugsource-3.14.2-12.1 gdm-devel-3.14.2-12.1 libgdm1-3.14.2-12.1 libgdm1-debuginfo-3.14.2-12.1 typelib-1_0-Gdm-1_0-3.14.2-12.1 - openSUSE Leap 42.1 (noarch): gdm-branding-upstream-3.14.2-12.1 gdm-lang-3.14.2-12.1 gdmflexiserver-3.14.2-12.1 References: https://bugzilla.suse.com/978262 https://bugzilla.suse.com/981012

1 0

openSUSE-RU-2016:1435-1: moderate: Recommended update for net-tools
by maintenance＠opensuse.org 30 May '16

30 May '16

openSUSE Recommended Update: Recommended update for net-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1435-1 Rating: moderate References: #872264 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for net-tools fixes the following issues: - Changes the hostname behavior to match other systems and its own documentation. Namely, that -s just parses the result of the active gethostname() and does not attempt any network/DNS traffic (boo#872264). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-656=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): net-tools-1.60-765.3.1 net-tools-debuginfo-1.60-765.3.1 net-tools-debugsource-1.60-765.3.1 References: https://bugzilla.suse.com/872264

1 0

openSUSE-SU-2016:1434-1: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 29 May '16

29 May '16

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1434-1 Rating: low References: #982128 Cross-References: CVE-2016-5099 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: phpMyAdmin was updated to fix one security issue. The following vulnerability was fixed: - CVE-2016-5099: Self XSS vulneratbility - A specially crafted attack could allow for special HTML characters to be passed as URL encoded values and displayed back as special characters in the page (boo#982128, PMASA-2016-16) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-655=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-655=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): phpMyAdmin-4.4.15.6-19.1 - openSUSE 13.2 (noarch): phpMyAdmin-4.4.15.6-33.1 References: https://www.suse.com/security/cve/CVE-2016-5099.html https://bugzilla.suse.com/982128

1 0

openSUSE-SU-2016:1433-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 27 May '16

27 May '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1433-1 Rating: important References: #981886 Cross-References: CVE-2016-1672 CVE-2016-1673 CVE-2016-1674 CVE-2016-1675 CVE-2016-1676 CVE-2016-1677 CVE-2016-1678 CVE-2016-1679 CVE-2016-1680 CVE-2016-1681 CVE-2016-1682 CVE-2016-1683 CVE-2016-1684 CVE-2016-1685 CVE-2016-1686 CVE-2016-1687 CVE-2016-1688 CVE-2016-1689 CVE-2016-1690 CVE-2016-1691 CVE-2016-1692 CVE-2016-1693 CVE-2016-1694 CVE-2016-1695 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 24 vulnerabilities is now available. Description: Chromium was updated to 51.0.2704.63 to fix the following vulnerabilities (boo#981886): - CVE-2016-1672: Cross-origin bypass in extension bindings - CVE-2016-1673: Cross-origin bypass in Blink - CVE-2016-1674: Cross-origin bypass in extensions - CVE-2016-1675: Cross-origin bypass in Blink - CVE-2016-1676: Cross-origin bypass in extension bindings - CVE-2016-1677: Type confusion in V8 - CVE-2016-1678: Heap overflow in V8 - CVE-2016-1679: Heap use-after-free in V8 bindings - CVE-2016-1680: Heap use-after-free in Skia - CVE-2016-1681: Heap overflow in PDFium - CVE-2016-1682: CSP bypass for ServiceWorker - CVE-2016-1683: Out-of-bounds access in libxslt - CVE-2016-1684: Integer overflow in libxslt - CVE-2016-1685: Out-of-bounds read in PDFium - CVE-2016-1686: Out-of-bounds read in PDFium - CVE-2016-1687: Information leak in extensions - CVE-2016-1688: Out-of-bounds read in V8 - CVE-2016-1689: Heap buffer overflow in media - CVE-2016-1690: Heap use-after-free in Autofill - CVE-2016-1691: Heap buffer-overflow in Skia - CVE-2016-1692: Limited cross-origin bypass in ServiceWorker - CVE-2016-1693: HTTP Download of Software Removal Tool - CVE-2016-1694: HPKP pins removed on cache clearance - CVE-2016-1695: Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-652=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-51.0.2704.63-78.1 chromedriver-debuginfo-51.0.2704.63-78.1 chromium-51.0.2704.63-78.1 chromium-debuginfo-51.0.2704.63-78.1 chromium-debugsource-51.0.2704.63-78.1 chromium-desktop-gnome-51.0.2704.63-78.1 chromium-desktop-kde-51.0.2704.63-78.1 chromium-ffmpegsumo-51.0.2704.63-78.1 chromium-ffmpegsumo-debuginfo-51.0.2704.63-78.1 References: https://www.suse.com/security/cve/CVE-2016-1672.html https://www.suse.com/security/cve/CVE-2016-1673.html https://www.suse.com/security/cve/CVE-2016-1674.html https://www.suse.com/security/cve/CVE-2016-1675.html https://www.suse.com/security/cve/CVE-2016-1676.html https://www.suse.com/security/cve/CVE-2016-1677.html https://www.suse.com/security/cve/CVE-2016-1678.html https://www.suse.com/security/cve/CVE-2016-1679.html https://www.suse.com/security/cve/CVE-2016-1680.html https://www.suse.com/security/cve/CVE-2016-1681.html https://www.suse.com/security/cve/CVE-2016-1682.html https://www.suse.com/security/cve/CVE-2016-1683.html https://www.suse.com/security/cve/CVE-2016-1684.html https://www.suse.com/security/cve/CVE-2016-1685.html https://www.suse.com/security/cve/CVE-2016-1686.html https://www.suse.com/security/cve/CVE-2016-1687.html https://www.suse.com/security/cve/CVE-2016-1688.html https://www.suse.com/security/cve/CVE-2016-1689.html https://www.suse.com/security/cve/CVE-2016-1690.html https://www.suse.com/security/cve/CVE-2016-1691.html https://www.suse.com/security/cve/CVE-2016-1692.html https://www.suse.com/security/cve/CVE-2016-1693.html https://www.suse.com/security/cve/CVE-2016-1694.html https://www.suse.com/security/cve/CVE-2016-1695.html https://bugzilla.suse.com/981886

1 0

openSUSE-OU-2016:1432-1: moderate: Optional update for xtables-addons
by maintenance＠opensuse.org 27 May '16

27 May '16

openSUSE Optional Update: Optional update for xtables-addons ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:1432-1 Rating: moderate References: #980137 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: The xtables-addons KMP was rebuilt to allow installation with a current kernel. - rebuild to adjust for kABI changes in ip6_route_output (boo#980137) Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-654=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-654=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xtables-addons-2.8-8.1 xtables-addons-debuginfo-2.8-8.1 xtables-addons-debugsource-2.8-8.1 xtables-addons-kmp-default-2.8_k4.1.21_14-8.1 xtables-addons-kmp-default-debuginfo-2.8_k4.1.21_14-8.1 xtables-addons-kmp-pv-2.8_k4.1.21_14-8.1 xtables-addons-kmp-pv-debuginfo-2.8_k4.1.21_14-8.1 xtables-addons-kmp-xen-2.8_k4.1.21_14-8.1 xtables-addons-kmp-xen-debuginfo-2.8_k4.1.21_14-8.1 - openSUSE Leap 42.1 (i586): xtables-addons-kmp-pae-2.8_k4.1.21_14-8.1 xtables-addons-kmp-pae-debuginfo-2.8_k4.1.21_14-8.1 - openSUSE 13.2 (i586 x86_64): xtables-addons-2.6-20.1 xtables-addons-debuginfo-2.6-20.1 xtables-addons-debugsource-2.6-20.1 xtables-addons-kmp-default-2.6_k3.16.7_35-20.1 xtables-addons-kmp-default-debuginfo-2.6_k3.16.7_35-20.1 xtables-addons-kmp-desktop-2.6_k3.16.7_35-20.1 xtables-addons-kmp-desktop-debuginfo-2.6_k3.16.7_35-20.1 xtables-addons-kmp-xen-2.6_k3.16.7_35-20.1 xtables-addons-kmp-xen-debuginfo-2.6_k3.16.7_35-20.1 - openSUSE 13.2 (i586): xtables-addons-kmp-pae-2.6_k3.16.7_35-20.1 xtables-addons-kmp-pae-debuginfo-2.6_k3.16.7_35-20.1 References: https://bugzilla.suse.com/980137

1 0

openSUSE-RU-2016:1431-1: Recommended update for clamav-database
by maintenance＠opensuse.org 27 May '16

27 May '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1431-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh May 23rd. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-653=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201605231325-97.1 References:

1 0

openSUSE-SU-2016:1430-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 27 May '16

27 May '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1430-1 Rating: important References: #981886 Cross-References: CVE-2016-1672 CVE-2016-1673 CVE-2016-1674 CVE-2016-1675 CVE-2016-1676 CVE-2016-1677 CVE-2016-1678 CVE-2016-1679 CVE-2016-1680 CVE-2016-1681 CVE-2016-1682 CVE-2016-1683 CVE-2016-1684 CVE-2016-1685 CVE-2016-1686 CVE-2016-1687 CVE-2016-1688 CVE-2016-1689 CVE-2016-1690 CVE-2016-1691 CVE-2016-1692 CVE-2016-1693 CVE-2016-1694 CVE-2016-1695 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 24 vulnerabilities is now available. Description: Chromium was updated to 51.0.2704.63 to fix the following vulnerabilities (boo#981886): - CVE-2016-1672: Cross-origin bypass in extension bindings - CVE-2016-1673: Cross-origin bypass in Blink - CVE-2016-1674: Cross-origin bypass in extensions - CVE-2016-1675: Cross-origin bypass in Blink - CVE-2016-1676: Cross-origin bypass in extension bindings - CVE-2016-1677: Type confusion in V8 - CVE-2016-1678: Heap overflow in V8 - CVE-2016-1679: Heap use-after-free in V8 bindings - CVE-2016-1680: Heap use-after-free in Skia - CVE-2016-1681: Heap overflow in PDFium - CVE-2016-1682: CSP bypass for ServiceWorker - CVE-2016-1683: Out-of-bounds access in libxslt - CVE-2016-1684: Integer overflow in libxslt - CVE-2016-1685: Out-of-bounds read in PDFium - CVE-2016-1686: Out-of-bounds read in PDFium - CVE-2016-1687: Information leak in extensions - CVE-2016-1688: Out-of-bounds read in V8 - CVE-2016-1689: Heap buffer overflow in media - CVE-2016-1690: Heap use-after-free in Autofill - CVE-2016-1691: Heap buffer-overflow in Skia - CVE-2016-1692: Limited cross-origin bypass in ServiceWorker - CVE-2016-1693: HTTP Download of Software Removal Tool - CVE-2016-1694: HPKP pins removed on cache clearance - CVE-2016-1695: Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-652=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): chromedriver-51.0.2704.63-51.1 chromedriver-debuginfo-51.0.2704.63-51.1 chromium-51.0.2704.63-51.1 chromium-debuginfo-51.0.2704.63-51.1 chromium-debugsource-51.0.2704.63-51.1 chromium-desktop-gnome-51.0.2704.63-51.1 chromium-desktop-kde-51.0.2704.63-51.1 chromium-ffmpegsumo-51.0.2704.63-51.1 chromium-ffmpegsumo-debuginfo-51.0.2704.63-51.1 References: https://www.suse.com/security/cve/CVE-2016-1672.html https://www.suse.com/security/cve/CVE-2016-1673.html https://www.suse.com/security/cve/CVE-2016-1674.html https://www.suse.com/security/cve/CVE-2016-1675.html https://www.suse.com/security/cve/CVE-2016-1676.html https://www.suse.com/security/cve/CVE-2016-1677.html https://www.suse.com/security/cve/CVE-2016-1678.html https://www.suse.com/security/cve/CVE-2016-1679.html https://www.suse.com/security/cve/CVE-2016-1680.html https://www.suse.com/security/cve/CVE-2016-1681.html https://www.suse.com/security/cve/CVE-2016-1682.html https://www.suse.com/security/cve/CVE-2016-1683.html https://www.suse.com/security/cve/CVE-2016-1684.html https://www.suse.com/security/cve/CVE-2016-1685.html https://www.suse.com/security/cve/CVE-2016-1686.html https://www.suse.com/security/cve/CVE-2016-1687.html https://www.suse.com/security/cve/CVE-2016-1688.html https://www.suse.com/security/cve/CVE-2016-1689.html https://www.suse.com/security/cve/CVE-2016-1690.html https://www.suse.com/security/cve/CVE-2016-1691.html https://www.suse.com/security/cve/CVE-2016-1692.html https://www.suse.com/security/cve/CVE-2016-1693.html https://www.suse.com/security/cve/CVE-2016-1694.html https://www.suse.com/security/cve/CVE-2016-1695.html https://bugzilla.suse.com/981886

1 0

openSUSE-SU-2016:1423-1: moderate: Security update for ntp
by opensuse-security＠opensuse.org 27 May '16

27 May '16

openSUSE Security Update: Security update for ntp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1423-1 Rating: moderate References: #782060 #905885 #910063 #916617 #920238 #926510 #936327 #942587 #944300 #946386 #951559 #951608 #951629 #954982 #956773 #957226 #962318 #962784 #962802 #962960 #962966 #962970 #962988 #962995 #963000 #963002 #975496 #977446 #977450 #977451 #977452 #977455 #977457 #977458 #977459 #977461 #977464 Cross-References: CVE-2015-5300 CVE-2015-7691 CVE-2015-7692 CVE-2015-7701 CVE-2015-7702 CVE-2015-7703 CVE-2015-7704 CVE-2015-7705 CVE-2015-7848 CVE-2015-7849 CVE-2015-7850 CVE-2015-7851 CVE-2015-7852 CVE-2015-7853 CVE-2015-7854 CVE-2015-7855 CVE-2015-7871 CVE-2015-7973 CVE-2015-7974 CVE-2015-7975 CVE-2015-7976 CVE-2015-7977 CVE-2015-7978 CVE-2015-7979 CVE-2015-8138 CVE-2015-8139 CVE-2015-8140 CVE-2015-8158 CVE-2016-1547 CVE-2016-1548 CVE-2016-1549 CVE-2016-1550 CVE-2016-1551 CVE-2016-2516 CVE-2016-2517 CVE-2016-2518 CVE-2016-2519 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 37 vulnerabilities is now available. Description: This update for ntp fixes the following issues: - Update to 4.2.8p7 (boo#977446): * CVE-2016-1547, boo#977459: Validate crypto-NAKs, AKA: CRYPTO-NAK DoS. * CVE-2016-1548, boo#977461: Interleave-pivot * CVE-2016-1549, boo#977451: Sybil vulnerability: ephemeral association attack. * CVE-2016-1550, boo#977464: Improve NTP security against buffer comparison timing attacks. * CVE-2016-1551, boo#977450: Refclock impersonation vulnerability * CVE-2016-2516, boo#977452: Duplicate IPs on unconfig directives will cause an assertion botch in ntpd. * CVE-2016-2517, boo#977455: remote configuration trustedkey/ requestkey/controlkey values are not properly validated. * CVE-2016-2518, boo#977457: Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC. * CVE-2016-2519, boo#977458: ctl_getitem() return value not always checked. * integrate ntp-fork.patch * Improve the fixes for: CVE-2015-7704, CVE-2015-7705, CVE-2015-7974 - Restrict the parser in the startup script to the first occurrance of "keys" and "controlkey" in ntp.conf (boo#957226). - Enable compile-time support for MS-SNTP (--enable-ntp-signd). This replaces the w32 patches in 4.2.4 that added the authreg directive. (fate#320758). - Fix ntp-sntp-dst.patch (boo#975496). - Call /usr/sbin/sntp with full path to synchronize in start-ntpd. When run as cron job, /usr/sbin/ is not in the path, which caused the synchronization to fail. (boo#962318) - Speedup ntpq (boo#782060, ntp-speedup-ntpq.patch). - Sync service files with openSUSE Factory. - Fix the TZ offset output of sntp during DST (boo#951559). - Add ntp-fork.patch and build with threads disabled to allow name resolution even when running chrooted. - Update to 4.2.8p6: * CVE-2015-8158, boo#962966: Potential Infinite Loop in ntpq. * CVE-2015-8138, boo#963002: origin: Zero Origin Timestamp Bypass. * CVE-2015-7979, boo#962784: Off-path Denial of Service (DoS) attack on authenticated broadcast mode. * CVE-2015-7978, boo#963000: Stack exhaustion in recursive traversal of restriction list. * CVE-2015-7977, boo#962970: reslist NULL pointer dereference. * CVE-2015-7976, boo#962802: ntpq saveconfig command allows dangerous characters in filenames. * CVE-2015-7975, boo#962988: nextvar() missing length check. * CVE-2015-7974, boo#962960: Skeleton Key: Missing key check allows impersonation between authenticated peers. * CVE-2015-7973, boo#962995: Deja Vu: Replay attack on authenticated broadcast mode. * CVE-2015-8140: ntpq vulnerable to replay attacks. * CVE-2015-8139: Origin Leak: ntpq and ntpdc, disclose origin. * CVE-2015-5300, boo#951629: Small-step/Big-step. - Add /var/db/ntp-kod (boo#916617). - Add ntp-ENOBUFS.patch to limit a warning that might happen quite a lot on loaded systems (boo#956773). - add ntp.bug2965.diff (boo#954982) * fixes regression in 4.2.8p4 update - Update to 4.2.8p4 to fix several security issues (boo#951608): * CVE-2015-7871: NAK to the Future: Symmetric association authentication bypass via crypto-NAK * CVE-2015-7855: decodenetnum() will ASSERT botch instead of returning FAIL on some bogus values * CVE-2015-7854: Password Length Memory Corruption Vulnerability * CVE-2015-7853: Invalid length data provided by a custom refclock driver could cause a buffer overflow * CVE-2015-7852 ntpq atoascii() Memory Corruption Vulnerability * CVE-2015-7851 saveconfig Directory Traversal Vulnerability * CVE-2015-7850 remote config logfile-keyfile * CVE-2015-7849 trusted key use-after-free * CVE-2015-7848 mode 7 loop counter underrun * CVE-2015-7701 Slow memory leak in CRYPTO_ASSOC * CVE-2015-7703 configuration directives "pidfile" and "driftfile" should only be allowed locally * CVE-2015-7704, CVE-2015-7705 Clients that receive a KoD should validate the origin timestamp field * CVE-2015-7691, CVE-2015-7692, CVE-2015-7702 Incomplete autokey data packet length checks * obsoletes ntp-memlock.patch. - Add a controlkey line to /etc/ntp.conf if one does not already exist to allow runtime configuuration via ntpq. - Temporarily disable memlock to avoid problems due to high memory usage during name resolution (boo#946386, ntp-memlock.patch). - Use SHA1 instead of MD5 for symmetric keys (boo#905885). - Improve runtime configuration: * Read keytype from ntp.conf * Don't write ntp keys to syslog. - Fix legacy action scripts to pass on command line arguments. - Remove ntp.1.gz, it wasn't installed anymore. - Remove ntp-4.2.7-rh-manpages.tar.gz and only keep ntptime.8.gz. The rest is partially irrelevant, partially redundant and potentially outdated (boo#942587). - Remove "kod" from the restrict line in ntp.conf (boo#944300). - Use ntpq instead of deprecated ntpdc in start-ntpd (boo#936327). - Add a controlkey to ntp.conf to make the above work. - Don't let "keysdir" lines in ntp.conf trigger the "keys" parser. - Disable mode 7 (ntpdc) again, now that we don't use it anymore. - Add "addserver" as a new legacy action. - Fix the comment regarding addserver in ntp.conf (boo#910063). - Update to version 4.2.8p3 which incorporates all security fixes and most other patches we have so far (fate#319040). More information on: http://archive.ntp.org/ntp4/ChangeLog-stable - Disable chroot by default (boo#926510). - Enable ntpdc for backwards compatibility (boo#920238). - Security fix: ntp-keygen may generate non-random symmetric keys Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-649=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ntp-4.2.8p7-25.15.1 ntp-debuginfo-4.2.8p7-25.15.1 ntp-debugsource-4.2.8p7-25.15.1 ntp-doc-4.2.8p7-25.15.1 References: https://www.suse.com/security/cve/CVE-2015-5300.html https://www.suse.com/security/cve/CVE-2015-7691.html https://www.suse.com/security/cve/CVE-2015-7692.html https://www.suse.com/security/cve/CVE-2015-7701.html https://www.suse.com/security/cve/CVE-2015-7702.html https://www.suse.com/security/cve/CVE-2015-7703.html https://www.suse.com/security/cve/CVE-2015-7704.html https://www.suse.com/security/cve/CVE-2015-7705.html https://www.suse.com/security/cve/CVE-2015-7848.html https://www.suse.com/security/cve/CVE-2015-7849.html https://www.suse.com/security/cve/CVE-2015-7850.html https://www.suse.com/security/cve/CVE-2015-7851.html https://www.suse.com/security/cve/CVE-2015-7852.html https://www.suse.com/security/cve/CVE-2015-7853.html https://www.suse.com/security/cve/CVE-2015-7854.html https://www.suse.com/security/cve/CVE-2015-7855.html https://www.suse.com/security/cve/CVE-2015-7871.html https://www.suse.com/security/cve/CVE-2015-7973.html https://www.suse.com/security/cve/CVE-2015-7974.html https://www.suse.com/security/cve/CVE-2015-7975.html https://www.suse.com/security/cve/CVE-2015-7976.html https://www.suse.com/security/cve/CVE-2015-7977.html https://www.suse.com/security/cve/CVE-2015-7978.html https://www.suse.com/security/cve/CVE-2015-7979.html https://www.suse.com/security/cve/CVE-2015-8138.html https://www.suse.com/security/cve/CVE-2015-8139.html https://www.suse.com/security/cve/CVE-2015-8140.html https://www.suse.com/security/cve/CVE-2015-8158.html https://www.suse.com/security/cve/CVE-2016-1547.html https://www.suse.com/security/cve/CVE-2016-1548.html https://www.suse.com/security/cve/CVE-2016-1549.html https://www.suse.com/security/cve/CVE-2016-1550.html https://www.suse.com/security/cve/CVE-2016-1551.html https://www.suse.com/security/cve/CVE-2016-2516.html https://www.suse.com/security/cve/CVE-2016-2517.html https://www.suse.com/security/cve/CVE-2016-2518.html https://www.suse.com/security/cve/CVE-2016-2519.html https://bugzilla.suse.com/782060 https://bugzilla.suse.com/905885 https://bugzilla.suse.com/910063 https://bugzilla.suse.com/916617 https://bugzilla.suse.com/920238 https://bugzilla.suse.com/926510 https://bugzilla.suse.com/936327 https://bugzilla.suse.com/942587 https://bugzilla.suse.com/944300 https://bugzilla.suse.com/946386 https://bugzilla.suse.com/951559 https://bugzilla.suse.com/951608 https://bugzilla.suse.com/951629 https://bugzilla.suse.com/954982 https://bugzilla.suse.com/956773 https://bugzilla.suse.com/957226 https://bugzilla.suse.com/962318 https://bugzilla.suse.com/962784 https://bugzilla.suse.com/962802 https://bugzilla.suse.com/962960 https://bugzilla.suse.com/962966 https://bugzilla.suse.com/962970 https://bugzilla.suse.com/962988 https://bugzilla.suse.com/962995 https://bugzilla.suse.com/963000 https://bugzilla.suse.com/963002 https://bugzilla.suse.com/975496 https://bugzilla.suse.com/977446 https://bugzilla.suse.com/977450 https://bugzilla.suse.com/977451 https://bugzilla.suse.com/977452 https://bugzilla.suse.com/977455 https://bugzilla.suse.com/977457 https://bugzilla.suse.com/977458 https://bugzilla.suse.com/977459 https://bugzilla.suse.com/977461 https://bugzilla.suse.com/977464

1 0

openSUSE-RU-2016:1421-1: moderate: Recommended update for asciidoc
by maintenance＠opensuse.org 27 May '16

27 May '16

openSUSE Recommended Update: Recommended update for asciidoc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1421-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for asciidoc provides version 8.6.9 and fixes the following issues: - html5, xhtml11 and slidy outputs now wrap pre element contents at right margin. - Vim syntax file: Highlight line breaks in lists. - Vim syntax file: Fixed highlighting of lines with spaces preceding an indented paragraph. - Vim syntax file: Dropped ) from list of illegal characters following opening quote. - Added + intrinsic attribute. - Allow tabsize=0 in configuration file. - Removed wordpress backend into the blogpost project (where it belongs) as an AsciiDoc backend plugin. - Added HTML5 footer badges. - Added favicon to AsciiDoc website. - Changed AsciiDoc website domain to asciidoc.org. - Vim syntax file: Closing quote character cannot be immediately followed by same closing quote character. - Documentation updates. - If admonition icons are embedded using the Data URI Scheme and the icons directory is undefined or does not exist then the iconsdir attribute is set to the location of the icons installed in the AsciiDoc configuration directory. - Updated ./stylesheets/pygments.css from pygments 1.4. - HTML backends: Align inline images to text-bottom. - html4 backend: Added hr attribute to make the inter-section horizontal ruler element optional. - Documented Callout lists cannot be used within tables. - Removed Vim related stuff from the installer makefile. - Dropped vim/ftdetect/asciidoc_filetype.vim from distribution, the file detection was broken and the default settings satisfied noone. - Vim syntax highlighter: Increase sync backtracking to catch changes to large block elements. - Added Romanian language configuration file. - Added ruler and line-break outputs to HTML Help outputs. - Added Czech language configuration file. - html4 backend: Allow embedded images and icons (data-uri attribute). - html4 backend: table and example block caption place at bottom for consistency. - html4 backend: Dropped border around example block. - html4 backend: Cellpaddings made equal to 4 for consistency. - Vim syntax highligher: Highlight closing OpenBlock delimiter when it immediately follows a list. - Updated html5 backend (previous commit was xhtml11 only). - Embedded data-uri images now figure file mimetype from file contents rather than the file extension. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-650=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): asciidoc-8.6.9-7.3.1 asciidoc-examples-8.6.9-7.3.1 References:

1 0