June 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:1702-1: moderate: Recommended update for clamav
by maintenance＠opensuse.org 29 Jun '16

29 Jun '16

openSUSE Recommended Update: Recommended update for clamav ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1702-1 Rating: moderate References: #958451 #960237 #969814 #978459 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for clamav fixes the following issues: - Update to version 0.99.2 (boo#978459) * 7z: Fix for FolderStartPackStreamIndex array index heck * Print all CDBNAME entries for a zip file when using the -z flag. * Try to minimize the err cleanup path * clamunrar: Notice if unpacking comment failed * Signature manual update. * Use temp var for realloc to prevent pointer loss. * Fix debug VI hex truncation * freshclam: Avoid random data in mirrors.dat. * libclamav: Print raw certificate metadata * freshclam manager check return code of strdup. * Additional suppress IP notification when using proxy * Fix download and verification of *.cld through PrivateMirrors * Suppress IP notification when using proxy * Remove redundant mempool assignment * Divide out dumpcerts output for better readability * Fix dconf and option handling for nocert and dumpcert * Patch by Jim Morris to increase clamd's soft file descriptor to its potential maximum on 64-bit systems * Move libfreshclam config to m4/reorganization. * Adding libfreshclam * Add 'cdb' datafile to sigtools list of datafile types. * NULL pointer check. * malloc() NULL pointer check. * clamscan 'block-macros' option. * Initialize cpio name buffer * Initialize mspack decompression buffers * Prevent memory allocations on used pointers (folder objects) * Prevent memory allocations on used pointers (boolvectors) * Initialize ARJ metadata structures * Change cli_malloc with cli_calloc * Check packSizes prior to dereference * Fixed inconsistent folder state on failure * Pre-check on (*unpackSizes) dereference * Fix on pre-checks on dereferenced array * Pre-checks on dereferenced array size values (not =0) * Adding sanity checks to 7z header parsing * Fixed mew source read issue * Documentation update on targets * Filetype consistency * Move llvm option flag handling to new m4 file * hwp5.x: Fix for streams without names Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-805=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): clamav-0.99.2-40.1 clamav-debuginfo-0.99.2-40.1 clamav-debugsource-0.99.2-40.1 References: https://bugzilla.suse.com/958451 https://bugzilla.suse.com/960237 https://bugzilla.suse.com/969814 https://bugzilla.suse.com/978459

1 0

openSUSE-RU-2016:1701-1: Recommended update for timezone
by maintenance＠opensuse.org 29 Jun '16

29 Jun '16

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1701-1 Rating: low References: #982833 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides the latest timezone information (2016e) for your system, including the following changes: - Africa/Cairo observes DST in 2016 from July 7 to the end of October. This release also includes changes affecting past time stamps. For a comprehensive list, please refer to the release announcement from ICANN: http://mm.icann.org/pipermail/tz-announce/2016-June/000039.html Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-807=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): timezone-2016e-52.1 timezone-debuginfo-2016e-52.1 timezone-debugsource-2016e-52.1 - openSUSE 13.1 (noarch): timezone-java-2016e-52.1 References: https://bugzilla.suse.com/982833

1 0

openSUSE-SU-2016:1700-1: moderate: phpMyAdmin
by opensuse-security＠opensuse.org 29 Jun '16

29 Jun '16

openSUSE Security Update: phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1700-1 Rating: moderate References: #986154 Cross-References: CVE-2016-5701 CVE-2016-5703 CVE-2016-5705 CVE-2016-5706 CVE-2016-5730 CVE-2016-5731 CVE-2016-5733 CVE-2016-5739 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This phpMyAdmin update to version 4.4.15.7 fixes the following issues: Issues fixed: Setup script doesn't use input type 'password' in all relevant locations Security issues fixed: - PMASA-2016-17 (CVE-2016-5701, CWE-661) https://www.phpmyadmin.net/security/PMASA-2016-17/ - BBCode injection vulnerability - PMASA-2016-19 (CVE-2016-5703, CWE-661) https://www.phpmyadmin.net/security/PMASA-2016-19/ - SQL injection attack - PMASA-2016-21 (CVE-2016-5705, CWE-661) https://www.phpmyadmin.net/security/PMASA-2016-21/ - Multiple XSS vulnerabilities - PMASA-2016-22 (CVE-2016-5706, CWE-661) https://www.phpmyadmin.net/security/PMASA-2016-22/ - DOS attack - PMASA-2016-23 (CVE-2016-5730, CWE-661) https://www.phpmyadmin.net/security/PMASA-2016-23/ - Multiple full path disclosure vulnerabilities - PMASA-2016-24 (CVE-2016-5731, CWE-661) https://www.phpmyadmin.net/security/PMASA-2016-24/ - XSS through FPD - PMASA-2016-26 (CVE-2016-5733, CWE-661) https://www.phpmyadmin.net/security/PMASA-2016-26/ - Multiple XSS vulnerabilities - PMASA-2016-28 (CVE-2016-5739, CWE-661) https://www.phpmyadmin.net/security/PMASA-2016-28/ - Referrer leak in transformations Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-806=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): phpMyAdmin-4.4.15.7-60.1 References: https://www.suse.com/security/cve/CVE-2016-5701.html https://www.suse.com/security/cve/CVE-2016-5703.html https://www.suse.com/security/cve/CVE-2016-5705.html https://www.suse.com/security/cve/CVE-2016-5706.html https://www.suse.com/security/cve/CVE-2016-5730.html https://www.suse.com/security/cve/CVE-2016-5731.html https://www.suse.com/security/cve/CVE-2016-5733.html https://www.suse.com/security/cve/CVE-2016-5739.html https://bugzilla.suse.com/986154

1 0

openSUSE-SU-2016:1699-1: moderate: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 28 Jun '16

28 Jun '16

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1699-1 Rating: moderate References: #986154 Cross-References: CVE-2016-5701 CVE-2016-5703 CVE-2016-5705 CVE-2016-5706 CVE-2016-5730 CVE-2016-5731 CVE-2016-5733 CVE-2016-5739 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: phpMyAdmin was updated to version 4.4.15.7 to fix eight security issues. These security issues were fixed: - CVE-2016-5701: BBCode injection vulnerability (boo#986154) - CVE-2016-5703: SQL injection attack (boo#986154) - CVE-2016-5705: Multiple XSS vulnerabilities (boo#986154) - CVE-2016-5706: DOS attack (boo#986154) - CVE-2016-5730: Multiple full path disclosure vulnerabilities (boo#986154) - CVE-2016-5731: XSS through FPD (boo#986154) - CVE-2016-5733: Multiple XSS vulnerabilities (boo#986154) - CVE-2016-5739: Referrer leak in transformations (boo#986154) This non-security issues was fixed: - Fix issue Setup script doesn't use input type 'password' in all relevant locations Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-804=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-804=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): phpMyAdmin-4.4.15.7-22.1 - openSUSE 13.2 (noarch): phpMyAdmin-4.4.15.7-36.1 References: https://www.suse.com/security/cve/CVE-2016-5701.html https://www.suse.com/security/cve/CVE-2016-5703.html https://www.suse.com/security/cve/CVE-2016-5705.html https://www.suse.com/security/cve/CVE-2016-5706.html https://www.suse.com/security/cve/CVE-2016-5730.html https://www.suse.com/security/cve/CVE-2016-5731.html https://www.suse.com/security/cve/CVE-2016-5733.html https://www.suse.com/security/cve/CVE-2016-5739.html https://bugzilla.suse.com/986154

1 0

openSUSE-SU-2016:1695-1: moderate: Security update for rsync
by opensuse-security＠opensuse.org 28 Jun '16

28 Jun '16

openSUSE Security Update: Security update for rsync ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1695-1 Rating: moderate References: #915410 Cross-References: CVE-2014-9512 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: rsync was updated to fix one security issue. This security issue was fixed: - CVE-2014-9512: rsync allowed remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path (boo#915410). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-803=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): rsync-3.1.1-2.10.2 rsync-debuginfo-3.1.1-2.10.2 rsync-debugsource-3.1.1-2.10.2 References: https://www.suse.com/security/cve/CVE-2014-9512.html https://bugzilla.suse.com/915410

1 0

openSUSE-RU-2016:1694-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 28 Jun '16

28 Jun '16

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1694-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update provides version 5.0.22 for virtualbox: - Version bump to 5.0.22 (released 2016-06-16 by Oracle) This is a maintenance release. The following items were fixed and/or added: VMM: fixes for certain Intel Atom hosts (bug #14915) VMM: properly restore the complete FPU state for 32-bit guests on 64-bit hosts on Intel Sandy Bridge and Ivy Bridge CPUs VMM: new I/O-APIC implementation fixing several bugs and improving the performance under certain conditions (bug #15295 and others) VMM: fixed a potential Linux guest panic on AMD hosts VMM: fixed a potential hang with 32-bit EFI guests on Intel CPUs (VT-x without unrestricted guest execution) GUI: don't allow to start subsequent separate VM instances GUI: raised upper limit for video capture screen resolution (bug #15432) GUI: warn if the VM has less than 128MB VRAM configured and 3D enabled Main: when monitoring DNS configuration changes on Windows hosts avoid false positives from competing DHCP renewals. This should fix NAT link flaps when host has multiple DHCP configured interfaces, in particular when the host uses OpnVPN. Main: properly display an error message if the VRDE server cannot be enabled at runtime, for example because another service is using the same port NAT: Initialize guest address guess for wildcard port-forwarding rules with default guest address (bug #15412) VGA: fix for a problem which made certain legacy guests crash under certain conditions (bug #14811) ACPI: properly notify the guest if the ACPI battery state changed OVF: fixed import problems for some appliances using an AHCI controller created by 3rd party applications SDK: reduced memory usage in the webservice Java bindings Linux hosts: EL 6.8 fix (bug #15411) Linux hosts: Linux 4.7 fix (bug #15459) Linux Additions: Linux 4.7 fixes (bug #15444) Linux Additions: fix for certain 32-bit guests (5.0.18 regression; bug #15320) Linux Additions: fixed mouse pointer offset (5.0.18 regression; bug #15324) Linux Additions: made old X.Org releases work again with kernels 3.11 and later (5.0.18 regression; bug #15319) Linux Additions: fixed X.Org crash after hard guest reset (5.0.18 regression; bug #15354) Linux Additions: don't stop the X11 setup if loading the shared folders module fails (5.0.18 regression) Linux Additions: don't complain if the Drag and Drop service is not available on the host Solaris Additions: added support for X.org 1.18 Local openSUSE specific changes: File "changeset_60565.diff" is no longer needced and has been removed. Version bump to 5.0.20 (released 2016-04-28 by Oracle) This is a maintenance release. The following items were fixed and/or added: Storage: fixed a regression causing write requests from the BIOS to cause a Guru Meditation with the LsiLogic SCSI controller (5.0.18 regression; bug #15317) Storage: several emulation fixes in the BusLogic SCSI controller emulation NAT Network: support TCP in DNS proxy (same problem as in bug #14736 for NAT) NAT: rework handling of port-forwarding rules (bug #13570) NAT: rewrite host resolver to handle more query types and make it asynchronous so that a stalled lookup doesn't block all NAT traffic Snapshots: don't crash when restoring a snapshot which has more network adapters than the current state (ie when the snapshot uses ICH9 and the current state uses PIIX3) Guest Control: various bugfixes for the copyfrom and copyto commands / API (bug #14336) VBoxManage: list processor features on list hostinfo (bug #15334) Linux hosts: fix for Linux 4.5 if CONFIG_NET_CLS_ACT is enabled (bug #15327) Windows Additions: fixed performance issues with PowerPoint 2010 and the WDDM graphics drivers if Aero is disabled Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-800=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): python-virtualbox-5.0.22-19.1 python-virtualbox-debuginfo-5.0.22-19.1 virtualbox-5.0.22-19.1 virtualbox-debuginfo-5.0.22-19.1 virtualbox-debugsource-5.0.22-19.1 virtualbox-devel-5.0.22-19.1 virtualbox-guest-kmp-default-5.0.22_k4.1.26_21-19.1 virtualbox-guest-kmp-default-debuginfo-5.0.22_k4.1.26_21-19.1 virtualbox-guest-tools-5.0.22-19.1 virtualbox-guest-tools-debuginfo-5.0.22-19.1 virtualbox-guest-x11-5.0.22-19.1 virtualbox-guest-x11-debuginfo-5.0.22-19.1 virtualbox-host-kmp-default-5.0.22_k4.1.26_21-19.1 virtualbox-host-kmp-default-debuginfo-5.0.22_k4.1.26_21-19.1 virtualbox-qt-5.0.22-19.1 virtualbox-qt-debuginfo-5.0.22-19.1 virtualbox-websrv-5.0.22-19.1 virtualbox-websrv-debuginfo-5.0.22-19.1 - openSUSE Leap 42.1 (noarch): virtualbox-guest-desktop-icons-5.0.22-19.1 virtualbox-host-source-5.0.22-19.1 References:

1 0

openSUSE-RU-2016:1693-1: Recommended update for clamav-database
by maintenance＠opensuse.org 28 Jun '16

28 Jun '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1693-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh June 27th This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-799=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201606270002-117.1 References:

1 0

openSUSE-RU-2016:1689-1: Recommended update for ffado
by maintenance＠opensuse.org 27 Jun '16

27 Jun '16

openSUSE Recommended Update: Recommended update for ffado ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1689-1 Rating: low References: #982957 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ffado fixes building of the package against newer versions of Gnome. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-778=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ffado-2.1.0-5.1 ffado-debuginfo-2.1.0-5.1 ffado-debugsource-2.1.0-5.1 libffado-devel-2.1.0-5.1 libffado2-2.1.0-5.1 libffado2-debuginfo-2.1.0-5.1 - openSUSE Leap 42.1 (noarch): ffado-doc-2.1.0-5.2 ffado-mixer-2.1.0-5.2 - openSUSE Leap 42.1 (x86_64): libffado2-32bit-2.1.0-5.1 libffado2-debuginfo-32bit-2.1.0-5.1 References: https://bugzilla.suse.com/982957

1 0

openSUSE-SU-2016:1688-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 27 Jun '16

27 Jun '16

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1688-1 Rating: moderate References: #981049 #981050 #981061 #982009 #982010 #982011 #982012 #982013 Cross-References: CVE-2013-7456 CVE-2015-8876 CVE-2015-8877 CVE-2015-8879 CVE-2016-5093 CVE-2016-5094 CVE-2016-5095 CVE-2016-5096 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for php5 fixes the following issues: - CVE-2013-7456: imagescale out-of-bounds read (bnc#982009). - CVE-2016-5093: get_icu_value_internal out-of-bounds read (bnc#982010). - CVE-2016-5094: Don't create strings with lengths outside of valid range (bnc#982011). - CVE-2016-5095: Don't create strings with lengths outside of valid range (bnc#982012). - CVE-2016-5096: int/size_t confusion in fread (bsc#982013). - CVE-2015-8877: The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) as used in PHP used inconsistent allocate and free approaches, which allowed remote attackers to cause a denial of service (memory consumption) via a crafted call, as demonstrated by a call to the PHP imagescale function (bsc#981061). - CVE-2015-8876: Zend/zend_exceptions.c in PHP did not validate certain Exception objects, which allowed remote attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger unintended method execution via crafted serialized data (bsc#981049). - CVE-2015-8879: The odbc_bindcols function in ext/odbc/php_odbc.c in PHP mishandles driver behavior for SQL_WVARCHAR columns, which allowed remote attackers to cause a denial of service (application crash) in opportunistic circumstances by leveraging use of the odbc_fetch_array function to access a certain type of Microsoft SQL Server table (bsc#981050). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-776=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): apache2-mod_php5-5.5.14-53.1 apache2-mod_php5-debuginfo-5.5.14-53.1 imap-2007e_suse-22.1 imap-debuginfo-2007e_suse-22.1 imap-debugsource-2007e_suse-22.1 imap-devel-2007e_suse-22.1 libc-client2007e_suse-2007e_suse-22.1 libc-client2007e_suse-debuginfo-2007e_suse-22.1 php5-5.5.14-53.1 php5-bcmath-5.5.14-53.1 php5-bcmath-debuginfo-5.5.14-53.1 php5-bz2-5.5.14-53.1 php5-bz2-debuginfo-5.5.14-53.1 php5-calendar-5.5.14-53.1 php5-calendar-debuginfo-5.5.14-53.1 php5-ctype-5.5.14-53.1 php5-ctype-debuginfo-5.5.14-53.1 php5-curl-5.5.14-53.1 php5-curl-debuginfo-5.5.14-53.1 php5-dba-5.5.14-53.1 php5-dba-debuginfo-5.5.14-53.1 php5-debuginfo-5.5.14-53.1 php5-debugsource-5.5.14-53.1 php5-devel-5.5.14-53.1 php5-dom-5.5.14-53.1 php5-dom-debuginfo-5.5.14-53.1 php5-enchant-5.5.14-53.1 php5-enchant-debuginfo-5.5.14-53.1 php5-exif-5.5.14-53.1 php5-exif-debuginfo-5.5.14-53.1 php5-fastcgi-5.5.14-53.1 php5-fastcgi-debuginfo-5.5.14-53.1 php5-fileinfo-5.5.14-53.1 php5-fileinfo-debuginfo-5.5.14-53.1 php5-firebird-5.5.14-53.1 php5-firebird-debuginfo-5.5.14-53.1 php5-fpm-5.5.14-53.1 php5-fpm-debuginfo-5.5.14-53.1 php5-ftp-5.5.14-53.1 php5-ftp-debuginfo-5.5.14-53.1 php5-gd-5.5.14-53.1 php5-gd-debuginfo-5.5.14-53.1 php5-gettext-5.5.14-53.1 php5-gettext-debuginfo-5.5.14-53.1 php5-gmp-5.5.14-53.1 php5-gmp-debuginfo-5.5.14-53.1 php5-iconv-5.5.14-53.1 php5-iconv-debuginfo-5.5.14-53.1 php5-imap-5.5.14-53.1 php5-imap-debuginfo-5.5.14-53.1 php5-intl-5.5.14-53.1 php5-intl-debuginfo-5.5.14-53.1 php5-json-5.5.14-53.1 php5-json-debuginfo-5.5.14-53.1 php5-ldap-5.5.14-53.1 php5-ldap-debuginfo-5.5.14-53.1 php5-mbstring-5.5.14-53.1 php5-mbstring-debuginfo-5.5.14-53.1 php5-mcrypt-5.5.14-53.1 php5-mcrypt-debuginfo-5.5.14-53.1 php5-mssql-5.5.14-53.1 php5-mssql-debuginfo-5.5.14-53.1 php5-mysql-5.5.14-53.1 php5-mysql-debuginfo-5.5.14-53.1 php5-odbc-5.5.14-53.1 php5-odbc-debuginfo-5.5.14-53.1 php5-opcache-5.5.14-53.1 php5-opcache-debuginfo-5.5.14-53.1 php5-openssl-5.5.14-53.1 php5-openssl-debuginfo-5.5.14-53.1 php5-pcntl-5.5.14-53.1 php5-pcntl-debuginfo-5.5.14-53.1 php5-pdo-5.5.14-53.1 php5-pdo-debuginfo-5.5.14-53.1 php5-pgsql-5.5.14-53.1 php5-pgsql-debuginfo-5.5.14-53.1 php5-phar-5.5.14-53.1 php5-phar-debuginfo-5.5.14-53.1 php5-posix-5.5.14-53.1 php5-posix-debuginfo-5.5.14-53.1 php5-pspell-5.5.14-53.1 php5-pspell-debuginfo-5.5.14-53.1 php5-readline-5.5.14-53.1 php5-readline-debuginfo-5.5.14-53.1 php5-shmop-5.5.14-53.1 php5-shmop-debuginfo-5.5.14-53.1 php5-snmp-5.5.14-53.1 php5-snmp-debuginfo-5.5.14-53.1 php5-soap-5.5.14-53.1 php5-soap-debuginfo-5.5.14-53.1 php5-sockets-5.5.14-53.1 php5-sockets-debuginfo-5.5.14-53.1 php5-sqlite-5.5.14-53.1 php5-sqlite-debuginfo-5.5.14-53.1 php5-suhosin-5.5.14-53.1 php5-suhosin-debuginfo-5.5.14-53.1 php5-sysvmsg-5.5.14-53.1 php5-sysvmsg-debuginfo-5.5.14-53.1 php5-sysvsem-5.5.14-53.1 php5-sysvsem-debuginfo-5.5.14-53.1 php5-sysvshm-5.5.14-53.1 php5-sysvshm-debuginfo-5.5.14-53.1 php5-tidy-5.5.14-53.1 php5-tidy-debuginfo-5.5.14-53.1 php5-tokenizer-5.5.14-53.1 php5-tokenizer-debuginfo-5.5.14-53.1 php5-wddx-5.5.14-53.1 php5-wddx-debuginfo-5.5.14-53.1 php5-xmlreader-5.5.14-53.1 php5-xmlreader-debuginfo-5.5.14-53.1 php5-xmlrpc-5.5.14-53.1 php5-xmlrpc-debuginfo-5.5.14-53.1 php5-xmlwriter-5.5.14-53.1 php5-xmlwriter-debuginfo-5.5.14-53.1 php5-xsl-5.5.14-53.1 php5-xsl-debuginfo-5.5.14-53.1 php5-zip-5.5.14-53.1 php5-zip-debuginfo-5.5.14-53.1 php5-zlib-5.5.14-53.1 php5-zlib-debuginfo-5.5.14-53.1 - openSUSE Leap 42.1 (noarch): php5-pear-5.5.14-53.1 References: https://www.suse.com/security/cve/CVE-2013-7456.html https://www.suse.com/security/cve/CVE-2015-8876.html https://www.suse.com/security/cve/CVE-2015-8877.html https://www.suse.com/security/cve/CVE-2015-8879.html https://www.suse.com/security/cve/CVE-2016-5093.html https://www.suse.com/security/cve/CVE-2016-5094.html https://www.suse.com/security/cve/CVE-2016-5095.html https://www.suse.com/security/cve/CVE-2016-5096.html https://bugzilla.suse.com/981049 https://bugzilla.suse.com/981050 https://bugzilla.suse.com/981061 https://bugzilla.suse.com/982009 https://bugzilla.suse.com/982010 https://bugzilla.suse.com/982011 https://bugzilla.suse.com/982012 https://bugzilla.suse.com/982013

1 0

openSUSE-RU-2016:1687-1: Recommended update for perl-Net-SSLeay
by maintenance＠opensuse.org 27 Jun '16

27 Jun '16

openSUSE Recommended Update: Recommended update for perl-Net-SSLeay ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1687-1 Rating: low References: #982234 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for perl-Net-SSLeay removes a test which is executed at build time and is now obsolete with newer (1.0.1n+) versions of OpenSSL. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-777=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): perl-Net-SSLeay-1.64-5.1 perl-Net-SSLeay-debuginfo-1.64-5.1 perl-Net-SSLeay-debugsource-1.64-5.1 References: https://bugzilla.suse.com/982234

1 0