January 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:0292-1: moderate: Recommended update for the KDE Applications stack
by maintenance＠opensuse.org 31 Jan '16

31 Jan '16

openSUSE Recommended Update: Recommended update for the KDE Applications stack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0292-1 Rating: moderate References: #952460 #959490 #960473 #961265 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update provides version 15.12.1 of the KDE Applications stack with various fixes and improvements. (boo#961265) For a detailed description, please refer to https://www.kde.org/announcements/announce-applications-15.12.1.php. The following bugs were fixed for specific applications: Dolphin: - boo#952460: Dolphin crashes at "Configure Dolphin" Dolphin / KGPG: - boo#959490: "Action->Encrypt file" context menu in Dolphin is not available KDE PIM: - boo#960473: PIM applications crash on exit Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-120=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): akonadi-calendar-debugsource-15.12.1-9.1 akonadi-calendar-devel-15.12.1-9.1 akonadi-contact-15.12.1-9.1 akonadi-contact-debuginfo-15.12.1-9.1 akonadi-contact-devel-15.12.1-9.1 akonadi-devel-15.12.1-9.1 akonadi-devel-debuginfo-15.12.1-9.1 akonadi-mime-devel-15.12.1-9.1 akonadi-notes-devel-15.12.1-9.1 akonadi-search-15.12.1-9.1 akonadi-search-debuginfo-15.12.1-9.1 akonadi-search-debugsource-15.12.1-9.1 akonadi-search-devel-15.12.1-9.1 akonadi-server-15.12.1-9.1 akonadi-server-debuginfo-15.12.1-9.1 akonadi-server-debugsource-15.12.1-9.1 akonadi-socialutils-15.12.1-9.1 akonadi-socialutils-debuginfo-15.12.1-9.1 akonadi-socialutils-devel-15.12.1-9.1 akonadi5-15.12.1-9.1 akonadi5-debuginfo-15.12.1-9.1 akonadi_resources-15.12.1-9.2 akonadi_resources-debuginfo-15.12.1-9.2 akregator5-15.12.1-9.2 akregator5-debuginfo-15.12.1-9.2 analitza-15.12.1-9.1 analitza-debuginfo-15.12.1-9.1 analitza-debugsource-15.12.1-9.1 analitza-devel-15.12.1-9.1 ark-15.12.1-9.1 ark-debuginfo-15.12.1-9.1 ark-debugsource-15.12.1-9.1 artikulate-15.12.1-9.1 artikulate-debuginfo-15.12.1-9.1 artikulate-debugsource-15.12.1-9.1 baloo5-widgets-15.12.1-9.1 baloo5-widgets-debuginfo-15.12.1-9.1 baloo5-widgets-debugsource-15.12.1-9.1 baloo5-widgets-devel-15.12.1-9.1 blinken-15.12.1-9.1 blinken-debuginfo-15.12.1-9.1 blinken-debugsource-15.12.1-9.1 blogilo5-15.12.1-9.2 blogilo5-debuginfo-15.12.1-9.2 bomber-15.12.1-9.1 bomber-debuginfo-15.12.1-9.1 bomber-debugsource-15.12.1-9.1 bovo-15.12.1-9.2 bovo-debuginfo-15.12.1-9.2 bovo-debugsource-15.12.1-9.2 cantor-15.12.1-9.1 cantor-debuginfo-15.12.1-9.1 cantor-debugsource-15.12.1-9.1 cantor-devel-15.12.1-9.1 cervisia-15.12.1-9.2 cervisia-debuginfo-15.12.1-9.2 cervisia-debugsource-15.12.1-9.2 dolphin-15.12.1-10.2 dolphin-debuginfo-15.12.1-10.2 dolphin-debugsource-15.12.1-10.2 dolphin-devel-15.12.1-10.2 dolphin-part-15.12.1-10.2 dolphin-part-debuginfo-15.12.1-10.2 dolphin-plugins-15.12.1-9.1 dolphin-plugins-debuginfo-15.12.1-9.1 dolphin-plugins-debugsource-15.12.1-9.1 dragonplayer-15.12.1-9.1 dragonplayer-debuginfo-15.12.1-9.1 dragonplayer-debugsource-15.12.1-9.1 ffmpegthumbs-15.12.1-9.1 ffmpegthumbs-debuginfo-15.12.1-9.1 ffmpegthumbs-debugsource-15.12.1-9.1 filelight-15.12.1-9.1 filelight-debuginfo-15.12.1-9.1 filelight-debugsource-15.12.1-9.1 gpgmepp5-15.12.1-9.1 gpgmepp5-debuginfo-15.12.1-9.1 gpgmepp5-debugsource-15.12.1-9.1 gpgmepp5-devel-15.12.1-9.1 granatier-15.12.1-9.2 granatier-debuginfo-15.12.1-9.2 granatier-debugsource-15.12.1-9.2 gwenview5-15.12.1-9.3 gwenview5-debuginfo-15.12.1-9.3 gwenview5-debugsource-15.12.1-9.3 jovie-15.12.1-9.2 jovie-debuginfo-15.12.1-9.2 jovie-debugsource-15.12.1-9.2 juk-15.12.1-9.2 juk-debuginfo-15.12.1-9.2 juk-debugsource-15.12.1-9.2 kaccessible-15.12.1-9.1 kaccessible-debuginfo-15.12.1-9.1 kaccessible-debugsource-15.12.1-9.1 kaccounts-integration-15.12.1-9.1 kaccounts-integration-debuginfo-15.12.1-9.1 kaccounts-integration-debugsource-15.12.1-9.1 kaccounts-integration-devel-15.12.1-9.1 kaccounts-providers-15.12.1-9.1 kaccounts-providers-debuginfo-15.12.1-9.1 kaccounts-providers-debugsource-15.12.1-9.1 kaddressbook5-15.12.1-9.2 kaddressbook5-debuginfo-15.12.1-9.2 kajongg-15.12.1-9.4 kalarm5-15.12.1-9.2 kalarm5-debuginfo-15.12.1-9.2 kalarmcal-debugsource-15.12.1-9.1 kalarmcal-devel-15.12.1-9.1 kalgebra-15.12.1-9.1 kalgebra-debuginfo-15.12.1-9.1 kalgebra-debugsource-15.12.1-9.1 kalzium-15.12.1-9.2 kalzium-debuginfo-15.12.1-9.2 kalzium-debugsource-15.12.1-9.2 kalzium-devel-15.12.1-9.2 kamera-debugsource-15.12.1-11.1 kanagram-15.12.1-9.1 kanagram-debuginfo-15.12.1-9.1 kanagram-debugsource-15.12.1-9.1 kapman-15.12.1-9.2 kapman-debuginfo-15.12.1-9.2 kapman-debugsource-15.12.1-9.2 kapptemplate-15.12.1-9.1 kapptemplate-debuginfo-15.12.1-9.1 kapptemplate-debugsource-15.12.1-9.1 kate-15.12.1-9.1 kate-debuginfo-15.12.1-9.1 kate-debugsource-15.12.1-9.1 kate-plugins-15.12.1-9.1 kate-plugins-debuginfo-15.12.1-9.1 katomic-15.12.1-9.2 katomic-debuginfo-15.12.1-9.2 katomic-debugsource-15.12.1-9.2 kblackbox-15.12.1-9.2 kblackbox-debuginfo-15.12.1-9.2 kblackbox-debugsource-15.12.1-9.2 kblocks-15.12.1-9.2 kblocks-debuginfo-15.12.1-9.2 kblocks-debugsource-15.12.1-9.2 kblog-debugsource-15.12.1-9.1 kblog-devel-15.12.1-9.1 kbounce-15.12.1-9.2 kbounce-debuginfo-15.12.1-9.2 kbounce-debugsource-15.12.1-9.2 kbreakout-15.12.1-9.2 kbreakout-debuginfo-15.12.1-9.2 kbreakout-debugsource-15.12.1-9.2 kbruch-15.12.1-9.1 kbruch-debuginfo-15.12.1-9.1 kbruch-debugsource-15.12.1-9.1 kcachegrind-15.12.1-9.2 kcachegrind-debuginfo-15.12.1-9.2 kcachegrind-debugsource-15.12.1-9.2 kcalc-15.12.1-11.1 kcalc-debuginfo-15.12.1-11.1 kcalc-debugsource-15.12.1-11.1 kcalcore-debugsource-15.12.1-9.1 kcalcore-devel-15.12.1-9.1 kcalutils-15.12.1-9.1 kcalutils-debuginfo-15.12.1-9.1 kcalutils-debugsource-15.12.1-9.1 kcalutils-devel-15.12.1-9.1 kcharselect-15.12.1-11.1 kcharselect-debuginfo-15.12.1-11.1 kcharselect-debugsource-15.12.1-11.1 kcolorchooser-15.12.1-11.1 kcolorchooser-debuginfo-15.12.1-11.1 kcolorchooser-debugsource-15.12.1-11.1 kcontacts-debugsource-15.12.1-9.1 kcontacts-devel-15.12.1-9.1 kcron-15.12.0-9.1 kcron-debuginfo-15.12.0-9.1 kcron-debugsource-15.12.0-9.1 kde-dev-utils-debugsource-15.12.1-8.2 kde-l10n-devel-15.12.1-9.1 kde-l10n-devel-debuginfo-15.12.1-9.1 kde-mplayer-thumbnailer-15.12.1-9.1 kde-mplayer-thumbnailer-debuginfo-15.12.1-9.1 kde-mplayer-thumbnailer-debugsource-15.12.1-9.1 kde-print-manager-15.12.1-9.1 kde-print-manager-debuginfo-15.12.1-9.1 kde-print-manager-debugsource-15.12.1-9.1 kdebase4-debugsource-15.12.1-10.3 kdebase4-libkonq-15.12.1-10.3 kdebase4-libkonq-debuginfo-15.12.1-10.3 kdebase4-nsplugin-15.12.1-10.3 kdebase4-nsplugin-debuginfo-15.12.1-10.3 kdebase4-runtime-15.12.1-9.2 kdebase4-runtime-debuginfo-15.12.1-9.2 kdebase4-runtime-debugsource-15.12.1-9.2 kdebase4-runtime-devel-15.12.1-9.2 kdebugsettings-15.12.1-9.1 kdebugsettings-debuginfo-15.12.1-9.1 kdebugsettings-debugsource-15.12.1-9.1 kdegraphics-strigi-analyzer-15.12.1-9.1 kdegraphics-strigi-analyzer-debuginfo-15.12.1-9.1 kdegraphics-strigi-analyzer-debugsource-15.12.1-9.1 kdegraphics-thumbnailers-15.12.1-9.1 kdegraphics-thumbnailers-debuginfo-15.12.1-9.1 kdegraphics-thumbnailers-debugsource-15.12.1-9.1 kdelibs4-4.14.16-4.1 kdelibs4-branding-upstream-4.14.16-4.1 kdelibs4-core-4.14.16-4.1 kdelibs4-core-debuginfo-4.14.16-4.1 kdelibs4-debuginfo-4.14.16-4.1 kdelibs4-debugsource-4.14.16-4.1 kdelibs4-doc-4.14.16-4.1 kdelibs4-doc-debuginfo-4.14.16-4.1 kdenetwork-strigi-analyzers-15.12.1-9.1 kdenetwork-strigi-analyzers-debuginfo-15.12.1-9.1 kdenetwork-strigi-analyzers-debugsource-15.12.1-9.1 kdenetwork4-filesharing-15.12.1-11.1 kdenetwork4-filesharing-debuginfo-15.12.1-11.1 kdenetwork4-filesharing-debugsource-15.12.1-11.1 kdenlive-15.12.1-9.1 kdenlive-debuginfo-15.12.1-9.1 kdenlive-debugsource-15.12.1-9.1 kdepasswd-15.12.1-10.3 kdepasswd-debuginfo-15.12.1-10.3 kdepim-15.12.1-9.2 kdepim-debuginfo-15.12.1-9.2 kdepim-debugsource-15.12.1-9.2 kdepim-runtime-15.12.1-9.1 kdepim-runtime-debuginfo-15.12.1-9.1 kdepim-runtime-debugsource-15.12.1-9.1 kdepimlibs-debugsource-15.12.1-9.1 kdesdk-kioslaves-debugsource-15.12.1-10.1 kdesdk-strigi-analyzers-15.12.1-9.1 kdesdk-strigi-analyzers-debuginfo-15.12.1-9.1 kdesdk-strigi-analyzers-debugsource-15.12.1-9.1 kdesdk-thumbnailers-15.12.1-9.1 kdesdk-thumbnailers-debuginfo-15.12.1-9.1 kdesdk-thumbnailers-debugsource-15.12.1-9.1 kdesdk4-scripts-15.12.1-9.1 kdewebdev4-debugsource-15.12.1-9.1 kdf-15.12.1-9.1 kdf-debuginfo-15.12.1-9.1 kdf-debugsource-15.12.1-9.1 kdialog-15.12.1-10.3 kdialog-debuginfo-15.12.1-10.3 kdiamond-15.12.1-9.2 kdiamond-debuginfo-15.12.1-9.2 kdiamond-debugsource-15.12.1-9.2 kdnssd-15.12.1-11.1 kdnssd-debuginfo-15.12.1-11.1 kdnssd-debugsource-15.12.1-11.1 keditbookmarks-15.12.1-10.3 keditbookmarks-debuginfo-15.12.1-10.3 kfilereplace-15.12.1-9.1 kfilereplace-debuginfo-15.12.1-9.1 kfind-15.12.1-10.3 kfind-debuginfo-15.12.1-10.3 kfloppy-15.12.1-9.1 kfloppy-debuginfo-15.12.1-9.1 kfloppy-debugsource-15.12.1-9.1 kfourinline-15.12.1-9.2 kfourinline-debuginfo-15.12.1-9.2 kfourinline-debugsource-15.12.1-9.2 kgeography-15.12.1-9.1 kgeography-debuginfo-15.12.1-9.1 kgeography-debugsource-15.12.1-9.1 kget-15.12.1-11.1 kget-debuginfo-15.12.1-11.1 kget-debugsource-15.12.1-11.1 kgoldrunner-15.12.1-9.1 kgoldrunner-debuginfo-15.12.1-9.1 kgoldrunner-debugsource-15.12.1-9.1 kgpg-15.12.1-11.1 kgpg-debuginfo-15.12.1-11.1 kgpg-debugsource-15.12.1-11.1 khangman-15.12.1-9.2 khangman-debuginfo-15.12.1-9.2 khangman-debugsource-15.12.1-9.2 kholidays-15.12.1-9.1 kholidays-debugsource-15.12.1-9.1 kholidays-devel-15.12.1-9.1 kidentitymanagement-debugsource-15.12.1-9.1 kidentitymanagement-devel-15.12.1-9.1 kig-15.12.1-9.1 kig-debuginfo-15.12.1-9.1 kig-debugsource-15.12.1-9.1 kigo-15.12.1-9.1 kigo-debuginfo-15.12.1-9.1 kigo-debugsource-15.12.1-9.1 killbots-15.12.1-9.2 killbots-debuginfo-15.12.1-9.2 killbots-debugsource-15.12.1-9.2 kimagemapeditor-15.12.1-9.1 kimagemapeditor-debuginfo-15.12.1-9.1 kimap-debugsource-15.12.1-9.1 kimap-devel-15.12.1-9.1 kio-extras5-15.12.1-15.1 kio-extras5-debuginfo-15.12.1-15.1 kio-extras5-debugsource-15.12.1-15.1 kio-pimlibs-15.12.1-9.1 kio-pimlibs-debuginfo-15.12.1-9.1 kio_audiocd-15.12.1-11.1 kio_audiocd-debuginfo-15.12.1-11.1 kio_audiocd-debugsource-15.12.1-11.1 kio_kamera-15.12.1-11.1 kio_kamera-debuginfo-15.12.1-11.1 kio_svn-15.12.1-10.1 kio_svn-debuginfo-15.12.1-10.1 kiriki-15.12.1-9.2 kiriki-debuginfo-15.12.1-9.2 kiriki-debugsource-15.12.1-9.2 kiten-15.12.1-9.1 kiten-debuginfo-15.12.1-9.1 kiten-debugsource-15.12.1-9.1 kiten-devel-15.12.1-9.1 kjumpingcube-15.12.1-9.2 kjumpingcube-debuginfo-15.12.1-9.2 kjumpingcube-debugsource-15.12.1-9.2 kldap-debugsource-15.12.1-9.1 kldap-devel-15.12.1-9.1 kleopatra5-15.12.1-9.2 kleopatra5-debuginfo-15.12.1-9.2 klettres-15.12.1-9.1 klettres-debuginfo-15.12.1-9.1 klettres-debugsource-15.12.1-9.1 klickety-15.12.1-9.2 klickety-debuginfo-15.12.1-9.2 klickety-debugsource-15.12.1-9.2 klines-15.12.1-9.2 klines-debuginfo-15.12.1-9.2 klines-debugsource-15.12.1-9.2 klinkstatus-15.12.1-9.1 klinkstatus-debuginfo-15.12.1-9.1 kmag-15.12.1-11.1 kmag-debuginfo-15.12.1-11.1 kmag-debugsource-15.12.1-11.1 kmahjongg-15.12.1-11.1 kmahjongg-debuginfo-15.12.1-11.1 kmahjongg-debugsource-15.12.1-11.1 kmail5-15.12.1-9.2 kmail5-debuginfo-15.12.1-9.2 kmailtransport-15.12.1-9.1 kmailtransport-debuginfo-15.12.1-9.1 kmailtransport-debugsource-15.12.1-9.1 kmailtransport-devel-15.12.1-9.1 kmbox-debugsource-15.12.1-9.1 kmbox-devel-15.12.1-9.1 kmime-debugsource-15.12.1-9.1 kmime-devel-15.12.1-9.1 kmines-15.12.1-11.2 kmines-debuginfo-15.12.1-11.2 kmines-debugsource-15.12.1-11.2 kmix-15.12.1-9.1 kmix-debuginfo-15.12.1-9.1 kmix-debugsource-15.12.1-9.1 kmousetool-15.12.1-11.1 kmousetool-debuginfo-15.12.1-11.1 kmousetool-debugsource-15.12.1-11.1 kmouth-15.12.1-9.1 kmouth-debuginfo-15.12.1-9.1 kmouth-debugsource-15.12.1-9.1 kmplot-15.12.1-9.1 kmplot-debuginfo-15.12.1-9.1 kmplot-debugsource-15.12.1-9.1 kmtrace-15.12.1-8.2 knavalbattle-15.12.1-9.2 knavalbattle-debuginfo-15.12.1-9.2 knavalbattle-debugsource-15.12.1-9.2 knetwalk-15.12.1-9.2 knetwalk-debuginfo-15.12.1-9.2 knetwalk-debugsource-15.12.1-9.2 knotes5-15.12.1-9.2 knotes5-debuginfo-15.12.1-9.2 kolf-15.12.1-9.1 kolf-debuginfo-15.12.1-9.1 kolf-debugsource-15.12.1-9.1 kollision-15.12.1-9.2 kollision-debuginfo-15.12.1-9.2 kollision-debugsource-15.12.1-9.2 kolourpaint-15.12.1-9.1 kolourpaint-debuginfo-15.12.1-9.1 kolourpaint-debugsource-15.12.1-9.1 kommander-runtime-15.12.1-9.1 kommander-runtime-debuginfo-15.12.1-9.1 kommander-runtime-devel-15.12.1-9.1 kompare-15.12.1-11.1 kompare-debuginfo-15.12.1-11.1 kompare-debugsource-15.12.1-11.1 kompare-devel-15.12.1-11.1 konqueror-15.12.1-10.3 konqueror-debuginfo-15.12.1-10.3 konqueror-plugins-15.12.1-10.3 konqueror-plugins-debuginfo-15.12.1-10.3 konquest-15.12.1-9.1 konquest-debuginfo-15.12.1-9.1 konquest-debugsource-15.12.1-9.1 konsole-15.12.1-9.1 konsole-debuginfo-15.12.1-9.1 konsole-debugsource-15.12.1-9.1 konsole-part-15.12.1-9.1 konsole-part-debuginfo-15.12.1-9.1 kontact5-15.12.1-9.2 kontact5-debuginfo-15.12.1-9.2 kontactinterface-debugsource-15.12.1-9.1 kontactinterface-devel-15.12.1-9.1 kopete-15.12.1-11.1 kopete-debuginfo-15.12.1-11.1 kopete-debugsource-15.12.1-11.1 kopete-devel-15.12.1-11.1 korganizer5-15.12.1-9.2 korganizer5-debuginfo-15.12.1-9.2 kpartloader-15.12.1-8.2 kpartloader-debuginfo-15.12.1-8.2 kpat-15.12.1-9.2 kpat-debuginfo-15.12.1-9.2 kpat-debugsource-15.12.1-9.2 kpimtextedit-debugsource-15.12.1-9.1 kpimtextedit-devel-15.12.1-9.1 kppp-15.12.1-9.1 kppp-debuginfo-15.12.1-9.1 kppp-debugsource-15.12.1-9.1 kprofilemethod-15.12.1-8.2 kqtquickcharts-15.12.1-9.1 kqtquickcharts-debuginfo-15.12.1-9.1 kqtquickcharts-debugsource-15.12.1-9.1 krdc-15.12.1-11.1 krdc-debuginfo-15.12.1-11.1 krdc-debugsource-15.12.1-11.1 krdc-devel-15.12.1-11.1 kremotecontrol-15.12.1-9.1 kremotecontrol-debuginfo-15.12.1-9.1 kremotecontrol-debugsource-15.12.1-9.1 kremotecontrol-devel-15.12.1-9.1 kreversi-15.12.1-11.1 kreversi-debuginfo-15.12.1-11.1 kreversi-debugsource-15.12.1-11.1 krfb-15.12.1-11.1 krfb-debuginfo-15.12.1-11.1 krfb-debugsource-15.12.1-11.1 kross-interpreters-debugsource-15.12.1-10.1 kross-python-15.12.1-10.1 kross-python-debuginfo-15.12.1-10.1 kruler-15.12.1-11.1 kruler-debuginfo-15.12.1-11.1 kruler-debugsource-15.12.1-11.1 kshisen-15.12.1-9.3 kshisen-debuginfo-15.12.1-9.3 kshisen-debugsource-15.12.1-9.3 ksirk-15.12.1-9.1 ksirk-debuginfo-15.12.1-9.1 ksirk-debugsource-15.12.1-9.1 ksnakeduel-15.12.1-9.1 ksnakeduel-debuginfo-15.12.1-9.1 ksnakeduel-debugsource-15.12.1-9.1 kspaceduel-15.12.1-9.1 kspaceduel-debuginfo-15.12.1-9.1 kspaceduel-debugsource-15.12.1-9.1 ksquares-15.12.1-9.3 ksquares-debuginfo-15.12.1-9.3 ksquares-debugsource-15.12.1-9.3 kstars-15.12.1-9.1 kstars-debuginfo-15.12.1-9.1 kstars-debugsource-15.12.1-9.1 kstartperf-15.12.1-8.2 ksudoku-15.12.1-11.1 ksudoku-debuginfo-15.12.1-11.1 ksudoku-debugsource-15.12.1-11.1 ksystemlog-15.12.1-9.1 ksystemlog-debuginfo-15.12.1-9.1 ksystemlog-debugsource-15.12.1-9.1 kteatime-15.12.1-9.1 kteatime-debuginfo-15.12.1-9.1 kteatime-debugsource-15.12.1-9.1 ktimer-15.12.1-9.1 ktimer-debuginfo-15.12.1-9.1 ktimer-debugsource-15.12.1-9.1 ktnef-debugsource-15.12.1-9.1 ktnef-devel-15.12.1-9.1 ktnef5-15.12.1-9.2 ktnef5-debuginfo-15.12.1-9.2 ktouch-15.12.1-9.1 ktouch-debuginfo-15.12.1-9.1 ktouch-debugsource-15.12.1-9.1 ktp-accounts-kcm-15.12.1-9.1 ktp-accounts-kcm-debuginfo-15.12.1-9.1 ktp-accounts-kcm-debugsource-15.12.1-9.1 ktp-approver-15.12.1-9.1 ktp-approver-debuginfo-15.12.1-9.1 ktp-approver-debugsource-15.12.1-9.1 ktp-auth-handler-15.12.1-9.1 ktp-auth-handler-debuginfo-15.12.1-9.1 ktp-auth-handler-debugsource-15.12.1-9.1 ktp-common-internals-15.12.1-9.1 ktp-common-internals-debuginfo-15.12.1-9.1 ktp-common-internals-debugsource-15.12.1-9.1 ktp-common-internals-devel-15.12.1-9.1 ktp-contact-list-15.12.1-9.1 ktp-contact-list-debuginfo-15.12.1-9.1 ktp-contact-list-debugsource-15.12.1-9.1 ktp-contact-runner-15.12.1-9.1 ktp-contact-runner-debuginfo-15.12.1-9.1 ktp-contact-runner-debugsource-15.12.1-9.1 ktp-desktop-applets-15.12.1-9.1 ktp-desktop-applets-debuginfo-15.12.1-9.1 ktp-desktop-applets-debugsource-15.12.1-9.1 ktp-filetransfer-handler-15.12.1-9.1 ktp-filetransfer-handler-debuginfo-15.12.1-9.1 ktp-filetransfer-handler-debugsource-15.12.1-9.1 ktp-icons-15.12.1-9.1 ktp-kded-module-15.12.1-9.1 ktp-kded-module-debuginfo-15.12.1-9.1 ktp-kded-module-debugsource-15.12.1-9.1 ktp-send-file-15.12.1-9.1 ktp-send-file-debuginfo-15.12.1-9.1 ktp-send-file-debugsource-15.12.1-9.1 ktp-text-ui-15.12.1-9.1 ktp-text-ui-debuginfo-15.12.1-9.1 ktp-text-ui-debugsource-15.12.1-9.1 ktuberling-15.12.1-9.2 ktuberling-debuginfo-15.12.1-9.2 ktuberling-debugsource-15.12.1-9.2 kturtle-15.12.1-9.1 kturtle-debuginfo-15.12.1-9.1 kturtle-debugsource-15.12.1-9.1 kubrick-15.12.1-9.1 kubrick-debuginfo-15.12.1-9.1 kubrick-debugsource-15.12.1-9.1 kuiviewer-15.12.1-8.2 kuiviewer-debuginfo-15.12.1-8.2 kuser-15.12.1-9.1 kuser-debuginfo-15.12.1-9.1 kuser-debugsource-15.12.1-9.1 kwalletmanager5-15.12.1-9.1 kwalletmanager5-debuginfo-15.12.1-9.1 kwalletmanager5-debugsource-15.12.1-9.1 kwikdisk-15.12.1-9.1 kwikdisk-debuginfo-15.12.1-9.1 kwordquiz-15.12.1-9.2 kwordquiz-debuginfo-15.12.1-9.2 kwordquiz-debugsource-15.12.1-9.2 kwrite-15.12.1-9.1 kwrite-debuginfo-15.12.1-9.1 libAnalitza5-15.12.1-9.1 libAnalitza5-debuginfo-15.12.1-9.1 libKEduVocDocument5-15.12.1-9.1 libKEduVocDocument5-debuginfo-15.12.1-9.1 libKF5AkonadiCalendar5-15.12.1-9.1 libKF5AkonadiCalendar5-debuginfo-15.12.1-9.1 libKF5AkonadiMime5-15.12.1-9.1 libKF5AkonadiMime5-debuginfo-15.12.1-9.1 libKF5AkonadiNotes5-15.12.1-9.1 libKF5AkonadiNotes5-debuginfo-15.12.1-9.1 libKF5AkonadiPrivate-devel-15.12.1-9.1 libKF5AkonadiPrivate5-15.12.1-9.1 libKF5AkonadiPrivate5-debuginfo-15.12.1-9.1 libKF5AkonadiSearch-15.12.1-9.1 libKF5AkonadiSearch-debuginfo-15.12.1-9.1 libKF5AlarmCalendar5-15.12.1-9.1 libKF5AlarmCalendar5-debuginfo-15.12.1-9.1 libKF5Blog5-15.12.1-9.1 libKF5Blog5-debuginfo-15.12.1-9.1 libKF5CalendarCore5-15.12.1-9.1 libKF5CalendarCore5-debuginfo-15.12.1-9.1 libKF5CalendarUtils5-15.12.1-9.1 libKF5CalendarUtils5-debuginfo-15.12.1-9.1 libKF5Contacts5-15.12.1-9.1 libKF5Contacts5-debuginfo-15.12.1-9.1 libKF5Holidays5-15.12.1-9.1 libKF5Holidays5-debuginfo-15.12.1-9.1 libKF5IMAP5-15.12.1-9.1 libKF5IMAP5-debuginfo-15.12.1-9.1 libKF5IdentityManagement5-15.12.1-9.1 libKF5IdentityManagement5-debuginfo-15.12.1-9.1 libKF5KDcraw5-15.12.1-9.1 libKF5KDcraw5-debuginfo-15.12.1-9.1 libKF5KExiv2-15_0_0-15.12.1-9.1 libKF5KExiv2-15_0_0-debuginfo-15.12.1-9.1 libKF5KFace10_0_0-15.12.1-9.1 libKF5KFace10_0_0-debuginfo-15.12.1-9.1 libKF5KGeoMap10_0_0-15.12.1-9.1 libKF5KGeoMap10_0_0-debuginfo-15.12.1-9.1 libKF5KMahjongglib5-15.12.1-9.1 libKF5KMahjongglib5-debuginfo-15.12.1-9.1 libKF5Kipi30_0_0-15.12.1-9.1 libKF5Kipi30_0_0-debuginfo-15.12.1-9.1 libKF5KontactInterface5-15.12.1-9.1 libKF5KontactInterface5-debuginfo-15.12.1-9.1 libKF5Ldap5-15.12.1-9.1 libKF5Ldap5-debuginfo-15.12.1-9.1 libKF5Mbox5-15.12.1-9.1 libKF5Mbox5-debuginfo-15.12.1-9.1 libKF5Mime5-15.12.1-9.1 libKF5Mime5-debuginfo-15.12.1-9.1 libKF5PimTextEdit5-15.12.1-9.1 libKF5PimTextEdit5-debuginfo-15.12.1-9.1 libKF5QGpgme5-15.12.1-9.1 libKF5QGpgme5-debuginfo-15.12.1-9.1 libKF5Sane5-15.12.1-9.1 libKF5Sane5-debuginfo-15.12.1-9.1 libKF5Syndication5-15.12.1-9.1 libKF5Syndication5-debuginfo-15.12.1-9.1 libKF5Tnef5-15.12.1-9.1 libKF5Tnef5-debuginfo-15.12.1-9.1 libastro-qt5-1-15.12.1-9.1 libastro-qt5-1-debuginfo-15.12.1-9.1 libcantorlibs6-15.12.1-9.1 libcantorlibs6-debuginfo-15.12.1-9.1 libdolphinvcs5-15.12.1-10.2 libdolphinvcs5-debuginfo-15.12.1-10.2 libkcddb4-15.12.1-11.1 libkcddb4-debuginfo-15.12.1-11.1 libkcddb4-debugsource-15.12.1-11.1 libkcddb4-devel-15.12.1-11.1 libkcompactdisc4-15.12.1-11.1 libkcompactdisc4-debuginfo-15.12.1-11.1 libkcompactdisc4-debugsource-15.12.1-11.1 libkcompactdisc4-devel-15.12.1-11.1 libkdcraw-debugsource-15.12.1-9.1 libkdcraw-devel-15.12.1-9.1 libkde4-4.14.16-4.1 libkde4-debuginfo-4.14.16-4.1 libkde4-devel-4.14.16-4.1 libkdecore4-4.14.16-4.1 libkdecore4-debuginfo-4.14.16-4.1 libkdecore4-devel-4.14.16-4.1 libkdecore4-devel-debuginfo-4.14.16-4.1 libkdeedu4-debugsource-15.12.1-9.1 libkdeedu4-devel-15.12.1-9.1 libkdegames-15.12.1-11.1 libkdegames-debugsource-15.12.1-11.1 libkdegames-devel-15.12.1-11.1 libkdepim-15.12.1-9.2 libkdepim-debuginfo-15.12.1-9.2 libkeduvocdocument-debugsource-15.12.1-9.1 libkeduvocdocument-devel-15.12.1-9.1 libkeduvocdocument4-15.12.1-9.1 libkeduvocdocument4-debuginfo-15.12.1-9.1 libkerfuffle15-15.12.1-9.1 libkerfuffle15-debuginfo-15.12.1-9.1 libkexiv2-debugsource-15.12.1-9.1 libkexiv2-devel-15.12.1-9.1 libkf5kdegames6-15.12.1-11.1 libkf5kdegames6-debuginfo-15.12.1-11.1 libkface-15.12.1-9.1 libkface-debugsource-15.12.1-9.1 libkface-devel-15.12.1-9.1 libkgeomap-15.12.1-9.1 libkgeomap-debugsource-15.12.1-9.1 libkgeomap-devel-15.12.1-9.1 libkipi-debugsource-15.12.1-9.1 libkipi-devel-15.12.1-9.1 libkmahjongg-15.12.1-9.1 libkmahjongg-debugsource-15.12.1-9.1 libkmahjongg-devel-15.12.1-9.1 libkomparediff2-5-15.12.1-11.1 libkomparediff2-5-debuginfo-15.12.1-11.1 libkomparediff2-debugsource-15.12.1-11.1 libkomparediff2-devel-15.12.1-11.1 libkonq-devel-15.12.1-10.3 libkonq5-15.12.1-10.3 libkonq5-debuginfo-15.12.1-10.3 libksane-debugsource-15.12.1-9.1 libksane-devel-15.12.1-9.1 libksuseinstall-devel-4.14.16-4.1 libksuseinstall1-4.14.16-4.1 libksuseinstall1-debuginfo-4.14.16-4.1 libktpaccountskcminternal9-15.12.1-9.1 libktpaccountskcminternal9-debuginfo-15.12.1-9.1 liblibkremotecontrol1-15.12.1-9.1 liblibkremotecontrol1-debuginfo-15.12.1-9.1 libmarblewidget-qt5-23-15.12.1-9.1 libmarblewidget-qt5-23-debuginfo-15.12.1-9.1 librocsgraphtheory0-15.12.1-9.1 librocsgraphtheory0-debuginfo-15.12.1-9.1 lokalize-15.12.1-9.1 lokalize-debuginfo-15.12.1-9.1 lokalize-debugsource-15.12.1-9.1 lskat-15.12.1-9.1 lskat-debuginfo-15.12.1-9.1 lskat-debugsource-15.12.1-9.1 marble-15.12.1-9.1 marble-debuginfo-15.12.1-9.1 marble-devel-15.12.1-9.1 marble-kde-15.12.1-9.1 marble-kde-debuginfo-15.12.1-9.1 marble-qt-15.12.1-9.1 marble-qt-debuginfo-15.12.1-9.1 mobipocket-15.12.1-11.1 mobipocket-debuginfo-15.12.1-11.1 mobipocket-debugsource-15.12.1-11.1 mobipocket-devel-15.12.1-11.1 okteta-15.12.1-9.1 okteta-debuginfo-15.12.1-9.1 okteta-debugsource-15.12.1-9.1 okteta-devel-15.12.1-9.1 okular-15.12.1-9.1 okular-debuginfo-15.12.1-9.1 okular-debugsource-15.12.1-9.1 okular-devel-15.12.1-9.1 palapeli-15.12.1-9.1 palapeli-debuginfo-15.12.1-9.1 palapeli-debugsource-15.12.1-9.1 palapeli-devel-15.12.1-9.1 parley-15.12.1-9.1 parley-debuginfo-15.12.1-9.1 parley-debugsource-15.12.1-9.1 picmi-15.12.1-9.1 picmi-debuginfo-15.12.1-9.1 picmi-debugsource-15.12.1-9.1 plasma-theme-oxygen-15.12.1-9.2 plasmoid-folderview-15.12.1-10.3 plasmoid-folderview-debuginfo-15.12.1-10.3 poxml-debugsource-15.12.1-9.1 rocs-15.12.1-9.1 rocs-debuginfo-15.12.1-9.1 rocs-debugsource-15.12.1-9.1 rocs-devel-15.12.1-9.1 signon-kwallet-extension-15.12.1-9.1 signon-kwallet-extension-debuginfo-15.12.1-9.1 signon-kwallet-extension-debugsource-15.12.1-9.1 spectacle-15.12.1-5.1 spectacle-debuginfo-15.12.1-5.1 spectacle-debugsource-15.12.1-5.1 spectacle-doc-15.12.1-5.1 step-15.12.1-9.1 step-debuginfo-15.12.1-9.1 step-debugsource-15.12.1-9.1 svgpart-15.12.1-9.1 svgpart-debuginfo-15.12.1-9.1 svgpart-debugsource-15.12.1-9.1 sweeper-15.12.1-11.1 sweeper-debuginfo-15.12.1-11.1 sweeper-debugsource-15.12.1-11.1 syndication-debugsource-15.12.1-9.1 syndication-devel-15.12.1-9.1 umbrello-15.12.1-9.1 umbrello-debuginfo-15.12.1-9.1 umbrello-debugsource-15.12.1-9.1 - openSUSE Leap 42.1 (x86_64): gpgmepp5-32bit-15.12.1-9.1 gpgmepp5-debuginfo-32bit-15.12.1-9.1 gpgmepp5-devel-32bit-15.12.1-9.1 kaccounts-integration-32bit-15.12.1-9.1 kaccounts-integration-debuginfo-32bit-15.12.1-9.1 kcontacts-devel-32bit-15.12.1-9.1 libKF5Contacts5-32bit-15.12.1-9.1 libKF5Contacts5-debuginfo-32bit-15.12.1-9.1 libKF5QGpgme5-32bit-15.12.1-9.1 libKF5QGpgme5-debuginfo-32bit-15.12.1-9.1 libkde4-32bit-4.14.16-4.1 libkde4-debuginfo-32bit-4.14.16-4.1 libkdecore4-32bit-4.14.16-4.1 libkdecore4-debuginfo-32bit-4.14.16-4.1 libkonq5-32bit-15.12.1-10.3 libkonq5-debuginfo-32bit-15.12.1-10.3 libksuseinstall1-32bit-4.14.16-4.1 libksuseinstall1-debuginfo-32bit-4.14.16-4.1 - openSUSE Leap 42.1 (noarch): fonts-KanjiStrokeOrders-15.12.1-9.1 kde-l10n-ar-15.12.1-7.2 kde-l10n-bg-15.12.1-7.2 kde-l10n-bs-15.12.1-7.2 kde-l10n-ca-15.12.1-7.2 kde-l10n-caValencia-15.12.1-7.2 kde-l10n-cs-15.12.1-7.2 kde-l10n-da-15.12.1-7.2 kde-l10n-da-data-15.12.1-7.2 kde-l10n-da-doc-15.12.1-7.2 kde-l10n-de-15.12.1-7.2 kde-l10n-de-data-15.12.1-7.2 kde-l10n-de-doc-15.12.1-7.2 kde-l10n-el-15.12.1-7.2 kde-l10n-en_GB-15.12.1-7.2 kde-l10n-en_GB-data-15.12.1-7.2 kde-l10n-en_GB-doc-15.12.1-7.2 kde-l10n-eo-15.12.1-7.2 kde-l10n-es-15.12.1-7.2 kde-l10n-es-data-15.12.1-7.2 kde-l10n-es-doc-15.12.1-7.2 kde-l10n-et-15.12.1-7.2 kde-l10n-et-data-15.12.1-7.2 kde-l10n-et-doc-15.12.1-7.2 kde-l10n-eu-15.12.1-7.2 kde-l10n-fa-15.12.1-7.2 kde-l10n-fi-15.12.1-7.2 kde-l10n-fr-15.12.1-7.2 kde-l10n-fr-data-15.12.1-7.2 kde-l10n-fr-doc-15.12.1-7.2 kde-l10n-ga-15.12.1-7.2 kde-l10n-gl-15.12.1-7.2 kde-l10n-he-15.12.1-7.2 kde-l10n-hi-15.12.1-7.2 kde-l10n-hr-15.12.1-7.2 kde-l10n-hu-15.12.1-7.2 kde-l10n-ia-15.12.1-7.2 kde-l10n-id-15.12.1-7.2 kde-l10n-is-15.12.1-7.2 kde-l10n-it-15.12.1-7.2 kde-l10n-it-data-15.12.1-7.2 kde-l10n-it-doc-15.12.1-7.2 kde-l10n-ja-15.12.1-7.2 kde-l10n-kk-15.12.1-7.2 kde-l10n-km-15.12.1-7.2 kde-l10n-ko-15.12.1-7.2 kde-l10n-lt-15.12.1-7.2 kde-l10n-lv-15.12.1-7.2 kde-l10n-mr-15.12.1-7.2 kde-l10n-nb-15.12.1-7.2 kde-l10n-nds-15.12.1-7.2 kde-l10n-nl-15.12.1-7.2 kde-l10n-nl-data-15.12.1-7.2 kde-l10n-nl-doc-15.12.1-7.2 kde-l10n-nn-15.12.1-7.2 kde-l10n-pa-15.12.1-7.2 kde-l10n-pl-15.12.1-7.2 kde-l10n-pl-data-15.12.1-7.2 kde-l10n-pl-doc-15.12.1-7.2 kde-l10n-pt-15.12.1-7.2 kde-l10n-pt_BR-15.12.1-7.2 kde-l10n-pt_BR-data-15.12.1-7.2 kde-l10n-pt_BR-doc-15.12.1-7.2 kde-l10n-ro-15.12.1-7.2 kde-l10n-ru-15.12.1-7.2 kde-l10n-ru-data-15.12.1-7.2 kde-l10n-ru-doc-15.12.1-7.2 kde-l10n-sk-15.12.1-7.2 kde-l10n-sl-15.12.1-7.2 kde-l10n-sr-15.12.1-7.2 kde-l10n-sv-15.12.1-7.2 kde-l10n-sv-data-15.12.1-7.2 kde-l10n-sv-doc-15.12.1-7.2 kde-l10n-tr-15.12.1-7.2 kde-l10n-ug-15.12.1-7.2 kde-l10n-uk-15.12.1-7.2 kde-l10n-uk-data-15.12.1-7.2 kde-l10n-uk-doc-15.12.1-7.2 kde-l10n-wa-15.12.1-7.2 kde-l10n-zh_CN-15.12.1-7.2 kde-l10n-zh_TW-15.12.1-7.2 kdeedu-data-15.12.1-9.1 kdegames-carddecks-default-15.12.1-11.1 kdegames-carddecks-other-15.12.1-11.1 kdelibs4-apidocs-4.14.16-4.1 marble-data-15.12.1-9.1 marble-doc-15.12.1-9.1 palapeli-data-15.12.1-9.1 References: https://bugzilla.suse.com/952460 https://bugzilla.suse.com/959490 https://bugzilla.suse.com/960473 https://bugzilla.suse.com/961265

1 0

openSUSE-SU-2016:0291-1: moderate: Security update for ecryptfs-utils
by opensuse-security＠opensuse.org 30 Jan '16

30 Jan '16

openSUSE Security Update: Security update for ecryptfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0291-1 Rating: moderate References: #920160 #962052 Cross-References: CVE-2014-9687 CVE-2016-1572 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ecryptfs-utils fixes the following issues: - CVE-2016-1572: A local user could have escalated privileges by mounting over special filesystems (bsc#962052) - CVE-2014-9687: A default salt value reduced complexity of offline precomputation attacks (bsc#920160) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-119=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ecryptfs-utils-103-3.1 ecryptfs-utils-debuginfo-103-3.1 ecryptfs-utils-debugsource-103-3.1 - openSUSE Leap 42.1 (x86_64): ecryptfs-utils-32bit-103-3.1 ecryptfs-utils-debuginfo-32bit-103-3.1 References: https://www.suse.com/security/cve/CVE-2014-9687.html https://www.suse.com/security/cve/CVE-2016-1572.html https://bugzilla.suse.com/920160 https://bugzilla.suse.com/962052

1 0

openSUSE-SU-2016:0289-1: moderate: Security update for giflib
by opensuse-security＠opensuse.org 29 Jan '16

29 Jan '16

openSUSE Security Update: Security update for giflib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0289-1 Rating: moderate References: #949160 #960319 Cross-References: CVE-2015-7555 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for giflib fixes the following issues: - CVE-2015-7555: Heap overflow in giffix (bsc#960319) - bsc#949160: Fix a memory leak This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-118=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): giflib-debugsource-5.0.5-7.1 giflib-devel-5.0.5-7.1 giflib-progs-5.0.5-7.1 giflib-progs-debuginfo-5.0.5-7.1 libgif6-5.0.5-7.1 libgif6-debuginfo-5.0.5-7.1 - openSUSE Leap 42.1 (x86_64): giflib-devel-32bit-5.0.5-7.1 libgif6-32bit-5.0.5-7.1 libgif6-debuginfo-32bit-5.0.5-7.1 References: https://www.suse.com/security/cve/CVE-2015-7555.html https://bugzilla.suse.com/949160 https://bugzilla.suse.com/960319

1 0

openSUSE-RU-2016:0281-1: moderate: Recommended update for Mesa
by maintenance＠opensuse.org 29 Jan '16

29 Jan '16

openSUSE Recommended Update: Recommended update for Mesa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0281-1 Rating: moderate References: #962609 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for Mesa fixes the following issues: - Check for dummyContext to see if the glx_context is valid (boo#962609). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-117=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-117=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): Mesa-11.0.8-137.1 Mesa-debuginfo-11.0.8-137.1 Mesa-debugsource-11.0.8-137.1 Mesa-devel-11.0.8-137.1 Mesa-dri-devel-11.0.8-137.1 Mesa-libEGL-devel-11.0.8-137.1 Mesa-libEGL1-11.0.8-137.1 Mesa-libEGL1-debuginfo-11.0.8-137.1 Mesa-libGL-devel-11.0.8-137.1 Mesa-libGL1-11.0.8-137.1 Mesa-libGL1-debuginfo-11.0.8-137.1 Mesa-libGLESv1_CM-devel-11.0.8-137.1 Mesa-libGLESv1_CM1-11.0.8-137.1 Mesa-libGLESv1_CM1-debuginfo-11.0.8-137.1 Mesa-libGLESv2-2-11.0.8-137.1 Mesa-libGLESv2-2-debuginfo-11.0.8-137.1 Mesa-libGLESv2-devel-11.0.8-137.1 Mesa-libGLESv3-devel-11.0.8-137.1 Mesa-libd3d-11.0.8-137.1 Mesa-libd3d-debuginfo-11.0.8-137.1 Mesa-libd3d-devel-11.0.8-137.1 Mesa-libglapi-devel-11.0.8-137.1 Mesa-libglapi0-11.0.8-137.1 Mesa-libglapi0-debuginfo-11.0.8-137.1 libOSMesa-devel-11.0.8-137.1 libOSMesa9-11.0.8-137.1 libOSMesa9-debuginfo-11.0.8-137.1 libXvMC_nouveau-11.0.8-137.1 libXvMC_nouveau-debuginfo-11.0.8-137.1 libXvMC_r600-11.0.8-137.1 libgbm-devel-11.0.8-137.1 libgbm1-11.0.8-137.1 libgbm1-debuginfo-11.0.8-137.1 libvdpau_nouveau-11.0.8-137.1 libvdpau_nouveau-debuginfo-11.0.8-137.1 libvdpau_r300-11.0.8-137.1 libvdpau_r600-11.0.8-137.1 libvdpau_radeonsi-11.0.8-137.1 libwayland-egl-devel-11.0.8-137.1 libwayland-egl1-11.0.8-137.1 libwayland-egl1-debuginfo-11.0.8-137.1 libxatracker-devel-1.0.0-137.1 libxatracker2-1.0.0-137.1 libxatracker2-debuginfo-1.0.0-137.1 - openSUSE Leap 42.1 (x86_64): Mesa-32bit-11.0.8-137.1 Mesa-debuginfo-32bit-11.0.8-137.1 Mesa-libEGL-devel-32bit-11.0.8-137.1 Mesa-libEGL1-32bit-11.0.8-137.1 Mesa-libEGL1-debuginfo-32bit-11.0.8-137.1 Mesa-libGL-devel-32bit-11.0.8-137.1 Mesa-libGL1-32bit-11.0.8-137.1 Mesa-libGL1-debuginfo-32bit-11.0.8-137.1 Mesa-libGLESv1_CM-devel-32bit-11.0.8-137.1 Mesa-libGLESv1_CM1-32bit-11.0.8-137.1 Mesa-libGLESv1_CM1-debuginfo-32bit-11.0.8-137.1 Mesa-libGLESv2-2-32bit-11.0.8-137.1 Mesa-libGLESv2-2-debuginfo-32bit-11.0.8-137.1 Mesa-libGLESv2-devel-32bit-11.0.8-137.1 Mesa-libd3d-32bit-11.0.8-137.1 Mesa-libd3d-debuginfo-32bit-11.0.8-137.1 Mesa-libd3d-devel-32bit-11.0.8-137.1 Mesa-libglapi-devel-32bit-11.0.8-137.1 Mesa-libglapi0-32bit-11.0.8-137.1 Mesa-libglapi0-debuginfo-32bit-11.0.8-137.1 libOSMesa-devel-32bit-11.0.8-137.1 libOSMesa9-32bit-11.0.8-137.1 libOSMesa9-debuginfo-32bit-11.0.8-137.1 libXvMC_nouveau-32bit-11.0.8-137.1 libXvMC_nouveau-debuginfo-32bit-11.0.8-137.1 libXvMC_r600-32bit-11.0.8-137.1 libgbm-devel-32bit-11.0.8-137.1 libgbm1-32bit-11.0.8-137.1 libgbm1-debuginfo-32bit-11.0.8-137.1 libvdpau_nouveau-32bit-11.0.8-137.1 libvdpau_nouveau-debuginfo-32bit-11.0.8-137.1 libvdpau_r300-32bit-11.0.8-137.1 libvdpau_r600-32bit-11.0.8-137.1 libvdpau_radeonsi-32bit-11.0.8-137.1 libwayland-egl-devel-32bit-11.0.8-137.1 libwayland-egl1-32bit-11.0.8-137.1 libwayland-egl1-debuginfo-32bit-11.0.8-137.1 - openSUSE 13.2 (i586 x86_64): Mesa-10.3.7-91.12.1 Mesa-debuginfo-10.3.7-91.12.1 Mesa-debugsource-10.3.7-91.12.1 Mesa-devel-10.3.7-91.12.1 Mesa-libEGL-devel-10.3.7-91.12.1 Mesa-libEGL1-10.3.7-91.12.1 Mesa-libEGL1-debuginfo-10.3.7-91.12.1 Mesa-libGL-devel-10.3.7-91.12.1 Mesa-libGL1-10.3.7-91.12.1 Mesa-libGL1-debuginfo-10.3.7-91.12.1 Mesa-libGLESv1_CM-devel-10.3.7-91.12.1 Mesa-libGLESv1_CM1-10.3.7-91.12.1 Mesa-libGLESv1_CM1-debuginfo-10.3.7-91.12.1 Mesa-libGLESv2-2-10.3.7-91.12.1 Mesa-libGLESv2-2-debuginfo-10.3.7-91.12.1 Mesa-libGLESv2-devel-10.3.7-91.12.1 Mesa-libGLESv3-devel-10.3.7-91.12.1 Mesa-libglapi-devel-10.3.7-91.12.1 Mesa-libglapi0-10.3.7-91.12.1 Mesa-libglapi0-debuginfo-10.3.7-91.12.1 libOSMesa-devel-10.3.7-91.12.1 libOSMesa9-10.3.7-91.12.1 libOSMesa9-debuginfo-10.3.7-91.12.1 libXvMC_nouveau-10.3.7-91.12.1 libXvMC_nouveau-debuginfo-10.3.7-91.12.1 libXvMC_r600-10.3.7-91.12.1 libgbm-devel-10.3.7-91.12.1 libgbm1-10.3.7-91.12.1 libgbm1-debuginfo-10.3.7-91.12.1 libvdpau_nouveau-10.3.7-91.12.1 libvdpau_nouveau-debuginfo-10.3.7-91.12.1 libvdpau_r600-10.3.7-91.12.1 libvdpau_radeonsi-10.3.7-91.12.1 libwayland-egl-devel-10.3.7-91.12.1 libwayland-egl1-10.3.7-91.12.1 libwayland-egl1-debuginfo-10.3.7-91.12.1 libxatracker-devel-1.0.0-91.12.1 libxatracker2-1.0.0-91.12.1 libxatracker2-debuginfo-1.0.0-91.12.1 - openSUSE 13.2 (x86_64): Mesa-32bit-10.3.7-91.12.1 Mesa-debuginfo-32bit-10.3.7-91.12.1 Mesa-libEGL-devel-32bit-10.3.7-91.12.1 Mesa-libEGL1-32bit-10.3.7-91.12.1 Mesa-libEGL1-debuginfo-32bit-10.3.7-91.12.1 Mesa-libGL-devel-32bit-10.3.7-91.12.1 Mesa-libGL1-32bit-10.3.7-91.12.1 Mesa-libGL1-debuginfo-32bit-10.3.7-91.12.1 Mesa-libGLESv1_CM-devel-32bit-10.3.7-91.12.1 Mesa-libGLESv1_CM1-32bit-10.3.7-91.12.1 Mesa-libGLESv1_CM1-debuginfo-32bit-10.3.7-91.12.1 Mesa-libGLESv2-2-32bit-10.3.7-91.12.1 Mesa-libGLESv2-2-debuginfo-32bit-10.3.7-91.12.1 Mesa-libGLESv2-devel-32bit-10.3.7-91.12.1 Mesa-libglapi-devel-32bit-10.3.7-91.12.1 Mesa-libglapi0-32bit-10.3.7-91.12.1 Mesa-libglapi0-debuginfo-32bit-10.3.7-91.12.1 libOSMesa-devel-32bit-10.3.7-91.12.1 libOSMesa9-32bit-10.3.7-91.12.1 libOSMesa9-debuginfo-32bit-10.3.7-91.12.1 libXvMC_nouveau-32bit-10.3.7-91.12.1 libXvMC_nouveau-debuginfo-32bit-10.3.7-91.12.1 libXvMC_r600-32bit-10.3.7-91.12.1 libgbm-devel-32bit-10.3.7-91.12.1 libgbm1-32bit-10.3.7-91.12.1 libgbm1-debuginfo-32bit-10.3.7-91.12.1 libvdpau_nouveau-32bit-10.3.7-91.12.1 libvdpau_nouveau-debuginfo-32bit-10.3.7-91.12.1 libvdpau_r600-32bit-10.3.7-91.12.1 libvdpau_radeonsi-32bit-10.3.7-91.12.1 libwayland-egl-devel-32bit-10.3.7-91.12.1 libwayland-egl1-32bit-10.3.7-91.12.1 libwayland-egl1-debuginfo-32bit-10.3.7-91.12.1 References: https://bugzilla.suse.com/962609

1 0

openSUSE-SU-2016:0280-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 29 Jan '16

29 Jan '16

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0280-1 Rating: important References: #865096 #865259 #913996 #950178 #950998 #952621 #954324 #954532 #954647 #955422 #956708 #957152 #957988 #957990 #958439 #958463 #958504 #958510 #958886 #958951 #959190 #959399 #960021 #960710 #961263 #961509 #962075 #962597 Cross-References: CVE-2015-7550 CVE-2015-8539 CVE-2015-8543 CVE-2015-8550 CVE-2015-8551 CVE-2015-8552 CVE-2015-8569 CVE-2015-8575 CVE-2015-8767 CVE-2016-0728 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 10 vulnerabilities and has 18 fixes is now available. Description: The Linux kernel for openSUSE Leap 42.1 was updated to the 4.1.15 stable release, and also includes security and bugfixes. Following security bugs were fixed: - CVE-2016-0728: A reference leak in keyring handling with join_session_keyring() could lead to local attackers gain root privileges. (bsc#962075). - CVE-2015-7550: A local user could have triggered a race between read and revoke in keyctl (bnc#958951). - CVE-2015-8767: A case can occur when sctp_accept() is called by the user during a heartbeat timeout event after the 4-way handshake. Since sctp_assoc_migrate() changes both assoc->base.sk and assoc->ep, the bh_sock_lock in sctp_generate_heartbeat_event() will be taken with the listening socket but released with the new association socket. The result is a deadlock on any future attempts to take the listening socket lock. (bsc#961509) - CVE-2015-8539: A negatively instantiated user key could have been used by a local user to leverage privileges (bnc#958463). - CVE-2015-8569: The (1) pptp_bind and (2) pptp_connect functions in drivers/net/ppp/pptp.c in the Linux kernel did not verify an address length, which allowed local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted application (bnc#959190). - CVE-2015-8543: The networking implementation in the Linux kernel did not validate protocol identifiers for certain protocol families, which allowed local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application (bnc#958886). - CVE-2015-8575: Validate socket address length in sco_sock_bind() to prevent information leak (bsc#959399). - CVE-2015-8551, CVE-2015-8552: xen/pciback: For XEN_PCI_OP_disable_msi[|x] only disable if device has MSI(X) enabled (bsc#957990). - CVE-2015-8550: Compiler optimizations in the XEN PV backend drivers could have lead to double fetch vulnerabilities, causing denial of service or arbitrary code execution (depending on the configuration) (bsc#957988). The following non-security bugs were fixed: - ALSA: hda - Add a fixup for Thinkpad X1 Carbon 2nd (bsc#958439). - ALSA: hda - Apply click noise workaround for Thinkpads generically (bsc#958439). - ALSA: hda - Fix noise problems on Thinkpad T440s (boo#958504). - ALSA: hda - Flush the pending probe work at remove (boo#960710). - ALSA: hda - Set codec to D3 at reboot/shutdown on Thinkpads (bsc#958439). - Add Cavium Thunderx network enhancements - Add RHEL to kernel-obs-build - Backport amd xgbe fixes and features - Backport arm64 patches from SLE12-SP1-ARM. - Btrfs: fix the number of transaction units needed to remove a block group (bsc#950178). - Btrfs: use global reserve when deleting unused block group after ENOSPC (bsc#950178). - Documentation: nousb is a module parameter (bnc#954324). - Driver for IBM System i/p VNIC protocol. - Enable CONFIG_PINCTRL_CHERRYVIEW (boo#954532) Needed for recent tablets/laptops. CONFIG_PINCTRL_BAYTRAIL is still disabled as it can't be built as a module. - Fix PCI generic host controller - Fix kABI breakage for max_dev_sectors addition to queue_limits (boo#961263). - HID: multitouch: Fetch feature reports on demand for Win8 devices (boo#954532). - HID: multitouch: fix input mode switching on some Elan panels (boo#954532). - Implement enable/disable for Display C6 state (boo#960021). - Input: aiptek - fix crash on detecting device without endpoints (bnc#956708). - Linux 4.1.15 (boo#954647 bsc#955422). - Move kabi patch to patches.kabi directory - Obsolete compat-wireless, rts5229 and rts_pstor KMPs These are found in SLE11-SP3, now replaced with the upstream drivers. - PCI: generic: Pass starting bus number to pci_scan_root_bus(). - Revert "block: remove artifical max_hw_sectors cap" (boo#961263). - Set system time through RTC device - Update arm64 config files. Enabled DRM_AST in the vanilla kernel since it is now enabled in the default kernel. - Update config files: CONFIG_IBMVNIC=m - block/sd: Fix device-imposed transfer length limits (boo#961263). - block: bump BLK_DEF_MAX_SECTORS to 2560 (boo#961263). - drm/i915/skl: Add DC5 Trigger Sequence (boo#960021). - drm/i915/skl: Add DC6 Trigger sequence (boo#960021). - drm/i915/skl: Add support to load SKL CSR firmware (boo#960021). - drm/i915/skl: Add the INIT power domain to the MISC I/O power well (boo#960021). - drm/i915/skl: Deinit/init the display at suspend/resume (boo#960021). - drm/i915/skl: Fix DMC API version in firmware file name (boo#960021). - drm/i915/skl: Fix WaDisableChickenBitTSGBarrierAckForFFSliceCS (boo#960021). - drm/i915/skl: Fix stepping check for a couple of W/As (boo#960021). - drm/i915/skl: Fix the CTRL typo in the DPLL_CRTL1 defines (boo#960021). - drm/i915/skl: Implement WaDisableVFUnitClockGating (boo#960021). - drm/i915/skl: Implement enable/disable for Display C5 state (boo#960021). - drm/i915/skl: Make the Misc I/O power well part of the PLLS domain (boo#960021). - drm/i915/skl: add F0 stepping ID (boo#960021). - drm/i915/skl: enable WaForceContextSaveRestoreNonCoherent (boo#960021). - drm/i915: Clear crtc atomic flags at beginning of transaction (boo#960021). - drm/i915: Fix CSR MMIO address check (boo#960021). - drm/i915: Switch to full atomic helpers for plane updates/disable, take two (boo#960021). - drm/i915: set CDCLK if DPLL0 enabled during resuming from S3 (boo#960021). - ethernet/atheros/alx: sanitize buffer sizing and padding (boo#952621). - genksyms: Handle string literals with spaces in reference files (bsc#958510). - group-source-files: mark module.lds as devel file ld: cannot open linker script file /usr/src/linux-4.2.5-1/arch/arm/kernel/module.lds: No such file or directory - hwrng: core - sleep interruptible in read (bnc#962597). - ipv6: distinguish frag queues by device for multicast and link-local packets (bsc#955422). - kABI fixes for linux-4.1.15. - rpm/compute-PATCHVERSION.sh: Skip stale directories in the package dir - rpm/constraints.in: Bump disk space requirements up a bit Require 10GB on s390x, 20GB elsewhere. - rpm/constraints.in: Require 14GB worth of disk space on POWER The builds started to fail randomly due to ENOSPC errors. - rpm/kernel-binary.spec.in: Do not explicitly set DEBUG_SECTION_MISMATCH CONFIG_DEBUG_SECTION_MISMATCH is a selectable Kconfig option since 2.6.39 and is enabled in our configs. - rpm/kernel-binary.spec.in: Do not obsolete ocfs2-kmp (bnc#865259)865259 - rpm/kernel-binary.spec.in: Fix build if no UEFI certs are installed - rpm/kernel-binary.spec.in: Install libopenssl-devel for newer sign-file - rpm/kernel-binary.spec.in: No scriptlets in kernel-zfcpdump The kernel should not be added to the bootloader nor are there any KMPs. - rpm/kernel-binary.spec.in: Obsolete the -base package from SLE11 (bnc#865096) - rpm/kernel-binary.spec.in: Use parallel make in all invocations Also, remove the lengthy comment, since we are using a standard rpm macro now. - thinkpad_acpi: Do not yell on unsupported brightness interfaces (boo#957152). - usb: make "nousb" a clear module parameter (bnc#954324). - usbvision fix overflow of interfaces array (bnc#950998). - x86/microcode/amd: Do not overwrite final patch levels (bsc#913996). - x86/microcode/amd: Extract current patch level read to a function (bsc#913996). - xen/pciback: Do not allow MSI-X ops if PCI_COMMAND_MEMORY is not set (bsc#957990 XSA-157). - xhci: refuse loading if nousb is used (bnc#954324). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-116=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kernel-default-4.1.15-8.1 kernel-default-base-4.1.15-8.1 kernel-default-base-debuginfo-4.1.15-8.1 kernel-default-debuginfo-4.1.15-8.1 kernel-default-debugsource-4.1.15-8.1 kernel-default-devel-4.1.15-8.1 kernel-obs-build-4.1.15-8.2 kernel-obs-build-debugsource-4.1.15-8.2 kernel-obs-qa-4.1.15-8.1 kernel-obs-qa-xen-4.1.15-8.1 kernel-syms-4.1.15-8.1 - openSUSE Leap 42.1 (i686 x86_64): kernel-debug-4.1.15-8.1 kernel-debug-base-4.1.15-8.1 kernel-debug-base-debuginfo-4.1.15-8.1 kernel-debug-debuginfo-4.1.15-8.1 kernel-debug-debugsource-4.1.15-8.1 kernel-debug-devel-4.1.15-8.1 kernel-debug-devel-debuginfo-4.1.15-8.1 kernel-ec2-4.1.15-8.1 kernel-ec2-base-4.1.15-8.1 kernel-ec2-base-debuginfo-4.1.15-8.1 kernel-ec2-debuginfo-4.1.15-8.1 kernel-ec2-debugsource-4.1.15-8.1 kernel-ec2-devel-4.1.15-8.1 kernel-pv-4.1.15-8.1 kernel-pv-base-4.1.15-8.1 kernel-pv-base-debuginfo-4.1.15-8.1 kernel-pv-debuginfo-4.1.15-8.1 kernel-pv-debugsource-4.1.15-8.1 kernel-pv-devel-4.1.15-8.1 kernel-vanilla-4.1.15-8.1 kernel-vanilla-debuginfo-4.1.15-8.1 kernel-vanilla-debugsource-4.1.15-8.1 kernel-vanilla-devel-4.1.15-8.1 kernel-xen-4.1.15-8.1 kernel-xen-base-4.1.15-8.1 kernel-xen-base-debuginfo-4.1.15-8.1 kernel-xen-debuginfo-4.1.15-8.1 kernel-xen-debugsource-4.1.15-8.1 kernel-xen-devel-4.1.15-8.1 - openSUSE Leap 42.1 (noarch): kernel-devel-4.1.15-8.1 kernel-docs-4.1.15-8.3 kernel-docs-html-4.1.15-8.3 kernel-docs-pdf-4.1.15-8.3 kernel-macros-4.1.15-8.1 kernel-source-4.1.15-8.1 kernel-source-vanilla-4.1.15-8.1 - openSUSE Leap 42.1 (i686): kernel-pae-4.1.15-8.1 kernel-pae-base-4.1.15-8.1 kernel-pae-base-debuginfo-4.1.15-8.1 kernel-pae-debuginfo-4.1.15-8.1 kernel-pae-debugsource-4.1.15-8.1 kernel-pae-devel-4.1.15-8.1 References: https://www.suse.com/security/cve/CVE-2015-7550.html https://www.suse.com/security/cve/CVE-2015-8539.html https://www.suse.com/security/cve/CVE-2015-8543.html https://www.suse.com/security/cve/CVE-2015-8550.html https://www.suse.com/security/cve/CVE-2015-8551.html https://www.suse.com/security/cve/CVE-2015-8552.html https://www.suse.com/security/cve/CVE-2015-8569.html https://www.suse.com/security/cve/CVE-2015-8575.html https://www.suse.com/security/cve/CVE-2015-8767.html https://www.suse.com/security/cve/CVE-2016-0728.html https://bugzilla.suse.com/865096 https://bugzilla.suse.com/865259 https://bugzilla.suse.com/913996 https://bugzilla.suse.com/950178 https://bugzilla.suse.com/950998 https://bugzilla.suse.com/952621 https://bugzilla.suse.com/954324 https://bugzilla.suse.com/954532 https://bugzilla.suse.com/954647 https://bugzilla.suse.com/955422 https://bugzilla.suse.com/956708 https://bugzilla.suse.com/957152 https://bugzilla.suse.com/957988 https://bugzilla.suse.com/957990 https://bugzilla.suse.com/958439 https://bugzilla.suse.com/958463 https://bugzilla.suse.com/958504 https://bugzilla.suse.com/958510 https://bugzilla.suse.com/958886 https://bugzilla.suse.com/958951 https://bugzilla.suse.com/959190 https://bugzilla.suse.com/959399 https://bugzilla.suse.com/960021 https://bugzilla.suse.com/960710 https://bugzilla.suse.com/961263 https://bugzilla.suse.com/961509 https://bugzilla.suse.com/962075 https://bugzilla.suse.com/962597

1 0

openSUSE-SU-2016:0279-1: critical: Security update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 28 Jan '16

28 Jan '16

openSUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0279-1 Rating: critical References: #939523 #960996 #962743 Cross-References: CVE-2015-4871 CVE-2015-7575 CVE-2015-8126 CVE-2015-8472 CVE-2016-0402 CVE-2016-0448 CVE-2016-0466 CVE-2016-0483 CVE-2016-0494 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: java-1_7_0-openjdk was updated to version 7u95 to fix 9 security issues. (bsc#962743) - CVE-2015-4871: Rebinding of the receiver of a DirectMethodHandle may allow a protected method to be accessed - CVE-2015-7575: Further reduce use of MD5 (SLOTH) (bsc#960996) - CVE-2015-8126: Vulnerability in the AWT component related to splashscreen displays - CVE-2015-8472: Vulnerability in the AWT component, addressed by same fix - CVE-2016-0402: Vulnerability in the Networking component related to URL processing - CVE-2016-0448: Vulnerability in the JMX comonent related to attribute processing - CVE-2016-0466: Vulnerability in the JAXP component, related to limits - CVE-2016-0483: Vulnerability in the AWT component related to image decoding - CVE-2016-0494: Vulnerability in 2D component related to font actions The following bugs were fixed: - bsc#939523: java-1_7_0-openjdk-headless had X dependencies, move libjavagtk to full package This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-115=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): java-1_7_0-openjdk-1.7.0.95-25.1 java-1_7_0-openjdk-accessibility-1.7.0.95-25.1 java-1_7_0-openjdk-debuginfo-1.7.0.95-25.1 java-1_7_0-openjdk-debugsource-1.7.0.95-25.1 java-1_7_0-openjdk-demo-1.7.0.95-25.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.95-25.1 java-1_7_0-openjdk-devel-1.7.0.95-25.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.95-25.1 java-1_7_0-openjdk-headless-1.7.0.95-25.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.95-25.1 java-1_7_0-openjdk-src-1.7.0.95-25.1 - openSUSE Leap 42.1 (x86_64): java-1_7_0-openjdk-bootstrap-1.7.0.95-25.1 java-1_7_0-openjdk-bootstrap-debuginfo-1.7.0.95-25.1 java-1_7_0-openjdk-bootstrap-debugsource-1.7.0.95-25.1 java-1_7_0-openjdk-bootstrap-devel-1.7.0.95-25.1 java-1_7_0-openjdk-bootstrap-devel-debuginfo-1.7.0.95-25.1 java-1_7_0-openjdk-bootstrap-headless-1.7.0.95-25.1 java-1_7_0-openjdk-bootstrap-headless-debuginfo-1.7.0.95-25.1 - openSUSE Leap 42.1 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.95-25.1 References: https://www.suse.com/security/cve/CVE-2015-4871.html https://www.suse.com/security/cve/CVE-2015-7575.html https://www.suse.com/security/cve/CVE-2015-8126.html https://www.suse.com/security/cve/CVE-2015-8472.html https://www.suse.com/security/cve/CVE-2016-0402.html https://www.suse.com/security/cve/CVE-2016-0448.html https://www.suse.com/security/cve/CVE-2016-0466.html https://www.suse.com/security/cve/CVE-2016-0483.html https://www.suse.com/security/cve/CVE-2016-0494.html https://bugzilla.suse.com/939523 https://bugzilla.suse.com/960996 https://bugzilla.suse.com/962743

1 0

openSUSE-RU-2016:0277-1: important: Recommended update for mate-menu
by maintenance＠opensuse.org 28 Jan '16

28 Jan '16

openSUSE Recommended Update: Recommended update for mate-menu ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0277-1 Rating: important References: #959024 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This is an follow-up-update for mate-menu 5.6.7 to fix some crashes at startup (boo#959024) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-114=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): mate-menu-5.6.7-10.1 mate-menu-lang-5.6.7-10.1 References: https://bugzilla.suse.com/959024

1 0

openSUSE-RU-2016:0276-1: important: Recommended update for systemd
by maintenance＠opensuse.org 28 Jan '16

28 Jan '16

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0276-1 Rating: important References: #942946 #955469 #955770 #958295 #958935 #958937 #961226 #962080 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - Revert "disable device timeout when nofail is set" (boo#962080) - Revert "0001-make-fortify-happy-with-ppoll" (boo#958937) - udev: Set udev max children logging to debug level (boo#958295) - journald: Properly sum up entry size counter (boo#961226) - shutdown: Rework messages during shutdown (boo#955469) - Don't track units/systemd-udev-root-symlink.service - Move net_persistent_rule generator to SCRIPTS (boo#958935) - Revert "Skip persistent device link creation on multipath device paths" (boo#942946) - udev: Remove userspace firmware loading support - Make sure all swap units are ordered before the swap target (boo#955770) - fstab-generator: Restore parsing and handling of 'nofail'/'noauto' options for swap devices - Fix build for systemd-mini package Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-113=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libgudev-1_0-0-210.1453291613.c8d5bdf-25.30.1 libgudev-1_0-0-debuginfo-210.1453291613.c8d5bdf-25.30.1 libgudev-1_0-devel-210.1453291613.c8d5bdf-25.30.1 libudev-devel-210.1453291613.c8d5bdf-25.30.1 libudev-mini-devel-210.1453291613.c8d5bdf-25.30.1 libudev-mini1-210.1453291613.c8d5bdf-25.30.1 libudev-mini1-debuginfo-210.1453291613.c8d5bdf-25.30.1 libudev1-210.1453291613.c8d5bdf-25.30.1 libudev1-debuginfo-210.1453291613.c8d5bdf-25.30.1 nss-myhostname-210.1453291613.c8d5bdf-25.30.1 nss-myhostname-debuginfo-210.1453291613.c8d5bdf-25.30.1 systemd-210.1453291613.c8d5bdf-25.30.1 systemd-debuginfo-210.1453291613.c8d5bdf-25.30.1 systemd-debugsource-210.1453291613.c8d5bdf-25.30.1 systemd-devel-210.1453291613.c8d5bdf-25.30.1 systemd-journal-gateway-210.1453291613.c8d5bdf-25.30.1 systemd-journal-gateway-debuginfo-210.1453291613.c8d5bdf-25.30.1 systemd-logger-210.1453291613.c8d5bdf-25.30.1 systemd-mini-210.1453291613.c8d5bdf-25.30.1 systemd-mini-debuginfo-210.1453291613.c8d5bdf-25.30.1 systemd-mini-debugsource-210.1453291613.c8d5bdf-25.30.1 systemd-mini-devel-210.1453291613.c8d5bdf-25.30.1 systemd-mini-sysvinit-210.1453291613.c8d5bdf-25.30.1 systemd-sysvinit-210.1453291613.c8d5bdf-25.30.1 typelib-1_0-GUdev-1_0-210.1453291613.c8d5bdf-25.30.1 udev-210.1453291613.c8d5bdf-25.30.1 udev-debuginfo-210.1453291613.c8d5bdf-25.30.1 udev-mini-210.1453291613.c8d5bdf-25.30.1 udev-mini-debuginfo-210.1453291613.c8d5bdf-25.30.1 - openSUSE 13.2 (x86_64): libgudev-1_0-0-32bit-210.1453291613.c8d5bdf-25.30.1 libgudev-1_0-0-debuginfo-32bit-210.1453291613.c8d5bdf-25.30.1 libudev1-32bit-210.1453291613.c8d5bdf-25.30.1 libudev1-debuginfo-32bit-210.1453291613.c8d5bdf-25.30.1 nss-myhostname-32bit-210.1453291613.c8d5bdf-25.30.1 nss-myhostname-debuginfo-32bit-210.1453291613.c8d5bdf-25.30.1 systemd-32bit-210.1453291613.c8d5bdf-25.30.1 systemd-debuginfo-32bit-210.1453291613.c8d5bdf-25.30.1 - openSUSE 13.2 (noarch): systemd-bash-completion-210.1453291613.c8d5bdf-25.30.1 References: https://bugzilla.suse.com/942946 https://bugzilla.suse.com/955469 https://bugzilla.suse.com/955770 https://bugzilla.suse.com/958295 https://bugzilla.suse.com/958935 https://bugzilla.suse.com/958937 https://bugzilla.suse.com/961226 https://bugzilla.suse.com/962080

1 0

openSUSE-RU-2016:0274-1: moderate: Recommended update for Machinery
by maintenance＠opensuse.org 28 Jan '16

28 Jan '16

openSUSE Recommended Update: Recommended update for Machinery ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0274-1 Rating: moderate References: #959558 #961011 #961176 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update provides Machinery 1.16.4, which brings the following fixes and enhancements: - The unmanaged-files scope filter will not include "/boot" by default anymore. - Fix crash during image build on SLES 12-SP1. - Reduce version restrictions for gems to the major version. (bnc#961176) - Remove concept of "supported systems" in favor of letting Machinery run everywhere. Whether a system can be built, exported, etc will be validated from its related task by checking if the proper tooling is installed. - Remove hint for `show`, when `inspect-container` is run with `--show` option. - Rephrase the startup messages and warn messages when starting the HTTP server for compare, show, or serve system descriptions. - Change `serve` command to always list all system descriptions. - Fix crash when the user does not have enough permissions to create the image directory for the `build` command. - Fix wrong hint for docker containers while running `analyze` command. - Add a new hint when using the `--public` option for the `serve` command that it makes all descriptions publicly available. - Fix Machinery failing to inspect changed config files in case of restrictive permissions. - Remove hint for `show`, when `inspect` is run with `--show` option. - Fix repository inspection on hosts that have a LANGUAGE variable set. - Empty scopes now display a message in HTML and CLI views. - Fix SLES 11 SP4 inspector output to be similar to SLES 11 SP3. - Fix AutoYaST export on openSUSE Leap and Tumbleweed. - Allow building of openSUSE Leap and Tumbleweed on openSUSE Leap and Tumbleweed. - Allow building of SLES 11 and SLES 12 on openSUSE Leap. - Add HTML landing page, which lists all system descriptions on your system. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-112=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): machinery-1.16.4-6.1 machinery-debuginfo-1.16.4-6.1 machinery-debugsource-1.16.4-6.1 machinery-doc-1.16.4-6.1 References: https://bugzilla.suse.com/959558 https://bugzilla.suse.com/961011 https://bugzilla.suse.com/961176

1 0

openSUSE-RU-2016:0273-1: important: Recommended update for nodejs
by maintenance＠opensuse.org 28 Jan '16

28 Jan '16

openSUSE Recommended Update: Recommended update for nodejs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0273-1 Rating: important References: #962297 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nodejs fixes the following issues: - Fixed a packaging issue, introduced with the latest update, that nodejs-npm was not obsoleted properly (boo#962297) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-111=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): nodejs-4.2.4-18.1 nodejs-debuginfo-4.2.4-18.1 nodejs-debugsource-4.2.4-18.1 nodejs-devel-4.2.4-18.1 npm-4.2.4-18.1 - openSUSE Leap 42.1 (noarch): nodejs-docs-4.2.4-18.1 References: https://bugzilla.suse.com/962297

1 0

openSUSE-SU-2016:0272-1: important: Security update for Java7
by opensuse-security＠opensuse.org 28 Jan '16

28 Jan '16

openSUSE Security Update: Security update for Java7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0272-1 Rating: important References: #939523 #962743 Cross-References: CVE-2015-4871 CVE-2015-7575 CVE-2015-8126 CVE-2015-8472 CVE-2016-0402 CVE-2016-0448 CVE-2016-0466 CVE-2016-0483 CVE-2016-0494 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: Update OpenJDK to 7u95 / IcedTea 2.6.4 including the following fixes: * Security fixes - S8059054, CVE-2016-0402: Better URL processing - S8130710, CVE-2016-0448: Better attributes processing - S8132210: Reinforce JMX collector internals - S8132988: Better printing dialogues - S8133962, CVE-2016-0466: More general limits - S8137060: JMX memory management improvements - S8139012: Better font substitutions - S8139017, CVE-2016-0483: More stable image decoding - S8140543, CVE-2016-0494: Arrange font actions - S8143185: Cleanup for handling proxies - S8143941, CVE-2015-8126, CVE-2015-8472: Update splashscreen displays - S8144773, CVE-2015-7575: Further reduce use of MD5 (SLOTH) - S8142882, CVE-2015-4871: rebinding of the receiver of a DirectMethodHandle may allow a protected method to be accessed * Import of OpenJDK 7 u95 build 0 - S7167988: PKIX CertPathBuilder in reverse mode doesn't work if more than one trust anchor is specified - S8068761: [TEST_BUG] java/nio/channels/ServerSocketChannel/AdaptServerSocket.java failed with SocketTimeoutException - S8074068: Cleanup in src/share/classes/sun/security/x509/ - S8075773: jps running as root fails after the fix of JDK-8050807 - S8081297: SSL Problem with Tomcat - S8131181: Increment minor version of HSx for 7u95 and initialize the build number - S8132082: Let OracleUcrypto accept RSAPrivateKey - S8134605: Partial rework of the fix for 8081297 - S8134861: XSLT: Extension func call cause exception if namespace URI contains partial package name - S8135307: CompletionFailure thrown when calling FieldDoc.type, if the field's type is missing - S8138716: (tz) Support tzdata2015g - S8140244: Port fix of JDK-8075773 to MacOSX - S8141213: [Parfait]Potentially blocking function GetArrayLength called in JNI critical region at line 239 of jdk/src/share/native/sun/awt/image/jpeg/jpegdecoder.c in function GET_ARRAYS - S8141287: Add MD5 to jdk.certpath.disabledAlgorithms - Take 2 - S8142928: [TEST_BUG] sun/security/provider/certpath/ReverseBuilder/ReverseBuild.java 8u71 failure - S8143132: L10n resource file translation update - S8144955: Wrong changes were pushed with 8143942 - S8145551: Test failed with Crash for Improved font lookups - S8147466: Add -fno-strict-overflow to IndicRearrangementProcessor{,2}.cpp * Backports - S8140244: Port fix of JDK-8075773 to AIX - S8133196, PR2712, RH1251935: HTTPS hostname invalid issue with InetAddress - S8140620, PR2710: Find and load default.sf2 as the default soundbank on Linux Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-110=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): java-1_7_0-openjdk-1.7.0.95-24.27.1 java-1_7_0-openjdk-accessibility-1.7.0.95-24.27.1 java-1_7_0-openjdk-debuginfo-1.7.0.95-24.27.1 java-1_7_0-openjdk-debugsource-1.7.0.95-24.27.1 java-1_7_0-openjdk-demo-1.7.0.95-24.27.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.95-24.27.1 java-1_7_0-openjdk-devel-1.7.0.95-24.27.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.95-24.27.1 java-1_7_0-openjdk-headless-1.7.0.95-24.27.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.95-24.27.1 java-1_7_0-openjdk-src-1.7.0.95-24.27.1 - openSUSE 13.1 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.95-24.27.1 References: https://www.suse.com/security/cve/CVE-2015-4871.html https://www.suse.com/security/cve/CVE-2015-7575.html https://www.suse.com/security/cve/CVE-2015-8126.html https://www.suse.com/security/cve/CVE-2015-8472.html https://www.suse.com/security/cve/CVE-2016-0402.html https://www.suse.com/security/cve/CVE-2016-0448.html https://www.suse.com/security/cve/CVE-2016-0466.html https://www.suse.com/security/cve/CVE-2016-0483.html https://www.suse.com/security/cve/CVE-2016-0494.html https://bugzilla.suse.com/939523 https://bugzilla.suse.com/962743

1 0

openSUSE-SU-2016:0271-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 27 Jan '16

27 Jan '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0271-1 Rating: important References: #963184 #963185 #963186 #963187 #963188 #963189 #963190 #963191 #963192 Cross-References: CVE-2016-1612 CVE-2016-1613 CVE-2016-1614 CVE-2016-1615 CVE-2016-1616 CVE-2016-1617 CVE-2016-1618 CVE-2016-1619 CVE-2016-1620 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: Chromium was updated to 48.0.2564.82 to fix security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-1612: Bad cast in V8 (boo#963184) - CVE-2016-1613: Use-after-free in PDFium (boo#963185) - CVE-2016-1614: Information leak in Blink (boo#963186) - CVE-2016-1615: Origin confusion in Omnibox (boo#963187) - CVE-2016-1616: URL Spoofing (boo#963188) - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189) - CVE-2016-1618: Weak random number generator in Blink (boo#963190) - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191) - CVE-2016-1620 chromium-browser: various fixes (boo#963192) This update also enables SSE2 support on x86_64, VA-API hardware acceleration and fixes a crash when trying to enable the Chromecast extension. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-109=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): chromedriver-48.0.2564.82-122.1 chromedriver-debuginfo-48.0.2564.82-122.1 chromium-48.0.2564.82-122.1 chromium-debuginfo-48.0.2564.82-122.1 chromium-debugsource-48.0.2564.82-122.1 chromium-desktop-gnome-48.0.2564.82-122.1 chromium-desktop-kde-48.0.2564.82-122.1 chromium-ffmpegsumo-48.0.2564.82-122.1 chromium-ffmpegsumo-debuginfo-48.0.2564.82-122.1 References: https://www.suse.com/security/cve/CVE-2016-1612.html https://www.suse.com/security/cve/CVE-2016-1613.html https://www.suse.com/security/cve/CVE-2016-1614.html https://www.suse.com/security/cve/CVE-2016-1615.html https://www.suse.com/security/cve/CVE-2016-1616.html https://www.suse.com/security/cve/CVE-2016-1617.html https://www.suse.com/security/cve/CVE-2016-1618.html https://www.suse.com/security/cve/CVE-2016-1619.html https://www.suse.com/security/cve/CVE-2016-1620.html https://bugzilla.suse.com/963184 https://bugzilla.suse.com/963185 https://bugzilla.suse.com/963186 https://bugzilla.suse.com/963187 https://bugzilla.suse.com/963188 https://bugzilla.suse.com/963189 https://bugzilla.suse.com/963190 https://bugzilla.suse.com/963191 https://bugzilla.suse.com/963192

1 0

openSUSE-SU-2016:0270-1: critical: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 27 Jan '16

27 Jan '16

openSUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0270-1 Rating: critical References: #951376 #960996 #962743 Cross-References: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4868 CVE-2015-4872 CVE-2015-4881 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4901 CVE-2015-4902 CVE-2015-4903 CVE-2015-4906 CVE-2015-4908 CVE-2015-4911 CVE-2015-4916 CVE-2015-7575 CVE-2015-8126 CVE-2015-8472 CVE-2016-0402 CVE-2016-0448 CVE-2016-0466 CVE-2016-0483 CVE-2016-0494 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 32 vulnerabilities is now available. Description: java-1_8_0-openjdk was updated to version 7u95 to fix several security issues. (bsc#962743) The following vulnerabilities were fixed: - CVE-2015-7575: Further reduce use of MD5 (SLOTH) (bsc#960996) - CVE-2015-8126: Vulnerability in the AWT component related to splashscreen displays - CVE-2015-8472: Vulnerability in the AWT component, addressed by same fix - CVE-2016-0402: Vulnerability in the Networking component related to URL processing - CVE-2016-0448: Vulnerability in the JMX comonent related to attribute processing - CVE-2016-0466: Vulnerability in the JAXP component, related to limits - CVE-2016-0483: Vulnerability in the AWT component related to image decoding - CVE-2016-0494: Vulnerability in 2D component related to font actions Includes the following fixes from the October 2015 update: (bsc#951376) - CVE-2015-4734: A remote user can exploit a flaw in the Embedded JGSS component to partially access data - CVE-2015-4803: A remote user can exploit a flaw in the JRockit JAXP component to cause partial denial of service conditions - CVE-2015-4805: A remote user can exploit a flaw in the Embedded Serialization component to gain elevated privileges - CVE-2015-4806: A remote user can exploit a flaw in the Java SE Embedded Libraries component to partially access and partially modify data - CVE-2015-4835: A remote user can exploit a flaw in the Embedded CORBA component to gain elevated privileges - CVE-2015-4842: A remote user can exploit a flaw in the Embedded JAXP component to partially access data - CVE-2015-4843: A remote user can exploit a flaw in the Java SE Embedded Libraries component to gain elevated privileges - CVE-2015-4844: A remote user can exploit a flaw in the Embedded 2D component to gain elevated privileges - CVE-2015-4860: A remote user can exploit a flaw in the Embedded RMI component to gain elevated privileges - CVE-2015-4872: A remote user can exploit a flaw in the JRockit Security component to partially modify data []. - CVE-2015-4881: A remote user can exploit a flaw in the Embedded CORBA component to gain elevated privileges - CVE-2015-4882: A remote user can exploit a flaw in the Embedded CORBA component to cause partial denial of service conditions - CVE-2015-4883: A remote user can exploit a flaw in the Embedded RMI component to gain elevated privileges - CVE-2015-4893: A remote user can exploit a flaw in the JRockit JAXP component to cause partial denial of service conditions - CVE-2015-4902: A remote user can exploit a flaw in the Java SE Deployment component to partially modify data - CVE-2015-4903: A remote user can exploit a flaw in the Embedded RMI component to partially access data - CVE-2015-4911: A remote user can exploit a flaw in the JRockit JAXP component to cause partial denial of service conditions - CVE-2015-4810: A local user can exploit a flaw in the Java SE Deployment component to gain elevated privileges - CVE-2015-4840: A remote user can exploit a flaw in the Embedded 2D component to partially access data - CVE-2015-4868: A remote user can exploit a flaw in the Java SE Embedded Libraries component to gain elevated privileges - CVE-2015-4901: A remote user can exploit a flaw in the JavaFX component to gain elevated privileges - CVE-2015-4906: A remote user can exploit a flaw in the JavaFX component to partially access data - CVE-2015-4908: A remote user can exploit a flaw in the JavaFX component to partially access data - CVE-2015-4916: A remote user can exploit a flaw in the JavaFX component to partially access data Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-106=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): java-1_8_0-openjdk-1.8.0.72-6.1 java-1_8_0-openjdk-accessibility-1.8.0.72-6.1 java-1_8_0-openjdk-debuginfo-1.8.0.72-6.1 java-1_8_0-openjdk-debugsource-1.8.0.72-6.1 java-1_8_0-openjdk-demo-1.8.0.72-6.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.72-6.1 java-1_8_0-openjdk-devel-1.8.0.72-6.1 java-1_8_0-openjdk-headless-1.8.0.72-6.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.72-6.1 java-1_8_0-openjdk-src-1.8.0.72-6.1 - openSUSE Leap 42.1 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.72-6.1 References: https://www.suse.com/security/cve/CVE-2015-4734.html https://www.suse.com/security/cve/CVE-2015-4803.html https://www.suse.com/security/cve/CVE-2015-4805.html https://www.suse.com/security/cve/CVE-2015-4806.html https://www.suse.com/security/cve/CVE-2015-4810.html https://www.suse.com/security/cve/CVE-2015-4835.html https://www.suse.com/security/cve/CVE-2015-4840.html https://www.suse.com/security/cve/CVE-2015-4842.html https://www.suse.com/security/cve/CVE-2015-4843.html https://www.suse.com/security/cve/CVE-2015-4844.html https://www.suse.com/security/cve/CVE-2015-4860.html https://www.suse.com/security/cve/CVE-2015-4868.html https://www.suse.com/security/cve/CVE-2015-4872.html https://www.suse.com/security/cve/CVE-2015-4881.html https://www.suse.com/security/cve/CVE-2015-4882.html https://www.suse.com/security/cve/CVE-2015-4883.html https://www.suse.com/security/cve/CVE-2015-4893.html https://www.suse.com/security/cve/CVE-2015-4901.html https://www.suse.com/security/cve/CVE-2015-4902.html https://www.suse.com/security/cve/CVE-2015-4903.html https://www.suse.com/security/cve/CVE-2015-4906.html https://www.suse.com/security/cve/CVE-2015-4908.html https://www.suse.com/security/cve/CVE-2015-4911.html https://www.suse.com/security/cve/CVE-2015-4916.html https://www.suse.com/security/cve/CVE-2015-7575.html https://www.suse.com/security/cve/CVE-2015-8126.html https://www.suse.com/security/cve/CVE-2015-8472.html https://www.suse.com/security/cve/CVE-2016-0402.html https://www.suse.com/security/cve/CVE-2016-0448.html https://www.suse.com/security/cve/CVE-2016-0466.html https://www.suse.com/security/cve/CVE-2016-0483.html https://www.suse.com/security/cve/CVE-2016-0494.html https://bugzilla.suse.com/951376 https://bugzilla.suse.com/960996 https://bugzilla.suse.com/962743

1 0

openSUSE-SU-2016:0268-1: critical: Security update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 27 Jan '16

27 Jan '16

openSUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0268-1 Rating: critical References: #939523 #960996 #962743 Cross-References: CVE-2015-4871 CVE-2015-7575 CVE-2015-8126 CVE-2015-8472 CVE-2016-0402 CVE-2016-0448 CVE-2016-0466 CVE-2016-0483 CVE-2016-0494 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: java-1_7_0-openjdk was updated to version 7u95 to fix 9 security issues. (bsc#962743) - CVE-2015-4871: Rebinding of the receiver of a DirectMethodHandle may allow a protected method to be accessed - CVE-2015-7575: Further reduce use of MD5 (SLOTH) (bsc#960996) - CVE-2015-8126: Vulnerability in the AWT component related to splashscreen displays - CVE-2015-8472: Vulnerability in the AWT component, addressed by same fix - CVE-2016-0402: Vulnerability in the Networking component related to URL processing - CVE-2016-0448: Vulnerability in the JMX comonent related to attribute processing - CVE-2016-0466: Vulnerability in the JAXP component, related to limits - CVE-2016-0483: Vulnerability in the AWT component related to image decoding - CVE-2016-0494: Vulnerability in 2D component related to font actions The following bugs were fixed: - bsc#939523: java-1_7_0-openjdk-headless had X dependencies, move libjavagtk to full package Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-107=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): java-1_7_0-openjdk-1.7.0.95-16.1 java-1_7_0-openjdk-accessibility-1.7.0.95-16.1 java-1_7_0-openjdk-bootstrap-1.7.0.95-16.1 java-1_7_0-openjdk-bootstrap-debuginfo-1.7.0.95-16.1 java-1_7_0-openjdk-bootstrap-debugsource-1.7.0.95-16.1 java-1_7_0-openjdk-bootstrap-devel-1.7.0.95-16.1 java-1_7_0-openjdk-bootstrap-devel-debuginfo-1.7.0.95-16.1 java-1_7_0-openjdk-bootstrap-headless-1.7.0.95-16.1 java-1_7_0-openjdk-bootstrap-headless-debuginfo-1.7.0.95-16.1 java-1_7_0-openjdk-debuginfo-1.7.0.95-16.1 java-1_7_0-openjdk-debugsource-1.7.0.95-16.1 java-1_7_0-openjdk-demo-1.7.0.95-16.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.95-16.1 java-1_7_0-openjdk-devel-1.7.0.95-16.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.95-16.1 java-1_7_0-openjdk-headless-1.7.0.95-16.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.95-16.1 java-1_7_0-openjdk-src-1.7.0.95-16.1 - openSUSE 13.2 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.95-16.1 References: https://www.suse.com/security/cve/CVE-2015-4871.html https://www.suse.com/security/cve/CVE-2015-7575.html https://www.suse.com/security/cve/CVE-2015-8126.html https://www.suse.com/security/cve/CVE-2015-8472.html https://www.suse.com/security/cve/CVE-2016-0402.html https://www.suse.com/security/cve/CVE-2016-0448.html https://www.suse.com/security/cve/CVE-2016-0466.html https://www.suse.com/security/cve/CVE-2016-0483.html https://www.suse.com/security/cve/CVE-2016-0494.html https://bugzilla.suse.com/939523 https://bugzilla.suse.com/960996 https://bugzilla.suse.com/962743

1 0

openSUSE-RU-2016:0264-1: moderate: Recommended update for librecad and libdxfrw
by maintenance＠opensuse.org 27 Jan '16

27 Jan '16

openSUSE Recommended Update: Recommended update for librecad and libdxfrw ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0264-1 Rating: moderate References: #962604 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for librecad and libdxfrw fixes the following issues: librecad: - Update to new upstream release 2.0.9 (boo#962604): * Mostly a bug fixing release * Fixed a few crashes due to undo and deleted entities * More at: http://forum.librecad.org/2-0-9-released-td5712809.html libdxfrw was updated to 0.6.3 as a dependency. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-108=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libdxfrw-debugsource-0.6.3-3.1 libdxfrw-devel-0.6.3-3.1 libdxfrw-tools-0.6.3-3.1 libdxfrw-tools-debuginfo-0.6.3-3.1 libdxfrw0-0.6.3-3.1 libdxfrw0-debuginfo-0.6.3-3.1 librecad-2.0.9-3.1 librecad-debuginfo-2.0.9-3.1 librecad-debugsource-2.0.9-3.1 - openSUSE Leap 42.1 (noarch): librecad-parts-2.0.9-3.1 References: https://bugzilla.suse.com/962604

1 0

openSUSE-SU-2016:0263-1: critical: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 27 Jan '16

27 Jan '16

openSUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0263-1 Rating: critical References: #960996 #962743 Cross-References: CVE-2015-7575 CVE-2015-8126 CVE-2015-8472 CVE-2016-0402 CVE-2016-0448 CVE-2016-0466 CVE-2016-0483 CVE-2016-0494 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: java-1_8_0-openjdk was updated to version 7u95 to fix 9 security issues. (bsc#962743) - CVE-2015-7575: Further reduce use of MD5 (SLOTH) (bsc#960996) - CVE-2015-8126: Vulnerability in the AWT component related to splashscreen displays - CVE-2015-8472: Vulnerability in the AWT component, addressed by same fix - CVE-2016-0402: Vulnerability in the Networking component related to URL processing - CVE-2016-0448: Vulnerability in the JMX comonent related to attribute processing - CVE-2016-0466: Vulnerability in the JAXP component, related to limits - CVE-2016-0483: Vulnerability in the AWT component related to image decoding - CVE-2016-0494: Vulnerability in 2D component related to font actions Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-105=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): java-1_8_0-openjdk-1.8.0.72-21.1 java-1_8_0-openjdk-accessibility-1.8.0.72-21.1 java-1_8_0-openjdk-debuginfo-1.8.0.72-21.1 java-1_8_0-openjdk-debugsource-1.8.0.72-21.1 java-1_8_0-openjdk-demo-1.8.0.72-21.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.72-21.1 java-1_8_0-openjdk-devel-1.8.0.72-21.1 java-1_8_0-openjdk-headless-1.8.0.72-21.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.72-21.1 java-1_8_0-openjdk-src-1.8.0.72-21.1 - openSUSE 13.2 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.72-21.1 References: https://www.suse.com/security/cve/CVE-2015-7575.html https://www.suse.com/security/cve/CVE-2015-8126.html https://www.suse.com/security/cve/CVE-2015-8472.html https://www.suse.com/security/cve/CVE-2016-0402.html https://www.suse.com/security/cve/CVE-2016-0448.html https://www.suse.com/security/cve/CVE-2016-0466.html https://www.suse.com/security/cve/CVE-2016-0483.html https://www.suse.com/security/cve/CVE-2016-0494.html https://bugzilla.suse.com/960996 https://bugzilla.suse.com/962743

1 0

openSUSE-SU-2016:0261-1: important: Security update for openldap2
by opensuse-security＠opensuse.org 27 Jan '16

27 Jan '16

openSUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0261-1 Rating: important References: #937766 #945582 #955210 Cross-References: CVE-2015-4000 CVE-2015-6908 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update fixes the following security issues: - CVE-2015-6908: The ber_get_next function allowed remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd. (bsc#945582) - CVE-2015-4000: Fix weak Diffie-Hellman size vulnerability. (bsc#937766) It also fixes the following non-security bugs: - bsc#955210: Unresponsive LDAP host lookups in IPv6 environment This update adds the following functionality: - fate#319300: SHA2 password hashing module that can be loaded on-demand. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-104=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): compat-libldap-2_3-0-2.3.37-11.1 compat-libldap-2_3-0-debuginfo-2.3.37-11.1 libldap-2_4-2-2.4.41-11.1 libldap-2_4-2-debuginfo-2.4.41-11.1 openldap2-2.4.41-11.1 openldap2-back-meta-2.4.41-11.1 openldap2-back-meta-debuginfo-2.4.41-11.1 openldap2-back-perl-2.4.41-11.1 openldap2-back-perl-debuginfo-2.4.41-11.1 openldap2-back-sql-2.4.41-11.1 openldap2-back-sql-debuginfo-2.4.41-11.1 openldap2-client-2.4.41-11.1 openldap2-client-debuginfo-2.4.41-11.1 openldap2-client-debugsource-2.4.41-11.1 openldap2-debuginfo-2.4.41-11.1 openldap2-debugsource-2.4.41-11.1 openldap2-devel-2.4.41-11.1 openldap2-devel-static-2.4.41-11.1 - openSUSE Leap 42.1 (x86_64): libldap-2_4-2-32bit-2.4.41-11.1 libldap-2_4-2-debuginfo-32bit-2.4.41-11.1 openldap2-devel-32bit-2.4.41-11.1 - openSUSE Leap 42.1 (noarch): openldap2-doc-2.4.41-11.1 References: https://www.suse.com/security/cve/CVE-2015-4000.html https://www.suse.com/security/cve/CVE-2015-6908.html https://bugzilla.suse.com/937766 https://bugzilla.suse.com/945582 https://bugzilla.suse.com/955210

1 0

openSUSE-RU-2016:0258-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 27 Jan '16

27 Jan '16

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0258-1 Rating: moderate References: #771521 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xorg-x11-server fixes the following issues: - Fix panning when configured in xorg.conf* (boo#771521). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-103=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-103=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xorg-x11-server-7.6_1.17.2-15.1 xorg-x11-server-debuginfo-7.6_1.17.2-15.1 xorg-x11-server-debugsource-7.6_1.17.2-15.1 xorg-x11-server-extra-7.6_1.17.2-15.1 xorg-x11-server-extra-debuginfo-7.6_1.17.2-15.1 xorg-x11-server-sdk-7.6_1.17.2-15.1 xorg-x11-server-source-7.6_1.17.2-15.1 - openSUSE 13.2 (i586 x86_64): xorg-x11-server-7.6_1.16.1-31.1 xorg-x11-server-debuginfo-7.6_1.16.1-31.1 xorg-x11-server-debugsource-7.6_1.16.1-31.1 xorg-x11-server-extra-7.6_1.16.1-31.1 xorg-x11-server-extra-debuginfo-7.6_1.16.1-31.1 xorg-x11-server-sdk-7.6_1.16.1-31.1 References: https://bugzilla.suse.com/771521

1 0

openSUSE-SU-2016:0255-1: important: Security update for openldap2
by opensuse-security＠opensuse.org 27 Jan '16

27 Jan '16

openSUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0255-1 Rating: important References: #904028 #937766 #945582 #955210 Cross-References: CVE-2015-4000 CVE-2015-6908 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update fixes the following security issues: - CVE-2015-6908: The ber_get_next function allowed remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd. (bsc#945582) - CVE-2015-4000: Fix weak Diffie-Hellman size vulnerability. (bsc#937766) It also fixes the following non-security bugs: - bsc#955210: Unresponsive LDAP host lookups in IPv6 environment - bsc#904028: Add missing dependency binutils used by %pre. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-102=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libldap-2_4-2-2.4.33-8.6.1 libldap-2_4-2-debuginfo-2.4.33-8.6.1 openldap2-2.4.33-8.6.1 openldap2-back-meta-2.4.33-8.6.1 openldap2-back-meta-debuginfo-2.4.33-8.6.1 openldap2-back-perl-2.4.33-8.6.1 openldap2-back-perl-debuginfo-2.4.33-8.6.1 openldap2-back-sql-2.4.33-8.6.1 openldap2-back-sql-debuginfo-2.4.33-8.6.1 openldap2-client-2.4.33-8.6.1 openldap2-client-debuginfo-2.4.33-8.6.1 openldap2-client-debugsource-2.4.33-8.6.1 openldap2-debuginfo-2.4.33-8.6.1 openldap2-debugsource-2.4.33-8.6.1 openldap2-devel-2.4.33-8.6.1 openldap2-devel-static-2.4.33-8.6.1 - openSUSE 13.1 (x86_64): libldap-2_4-2-32bit-2.4.33-8.6.1 libldap-2_4-2-debuginfo-32bit-2.4.33-8.6.1 openldap2-devel-32bit-2.4.33-8.6.1 - openSUSE 13.1 (noarch): openldap2-doc-2.4.33-8.6.1 References: https://www.suse.com/security/cve/CVE-2015-4000.html https://www.suse.com/security/cve/CVE-2015-6908.html https://bugzilla.suse.com/904028 https://bugzilla.suse.com/937766 https://bugzilla.suse.com/945582 https://bugzilla.suse.com/955210

1 0

openSUSE-SU-2016:0252-1: moderate: Security update for tiff
by opensuse-security＠opensuse.org 26 Jan '16

26 Jan '16

openSUSE Security Update: Security update for tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0252-1 Rating: moderate References: #942690 #960341 Cross-References: CVE-2015-7554 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update to tiff 4.0.6 fixes the following issues: - CVE-2015-7554: Out-of-bounds write in the thumbnail and tiffcmp tools allowed attacker to cause a denial of service or have unspecified further impact (bsc#960341) - bsc#942690: potential out-of-bound write in NeXTDecode() (#2508) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-101=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libtiff-devel-4.0.6-3.1 libtiff5-4.0.6-3.1 libtiff5-debuginfo-4.0.6-3.1 tiff-4.0.6-3.1 tiff-debuginfo-4.0.6-3.1 tiff-debugsource-4.0.6-3.1 - openSUSE Leap 42.1 (x86_64): libtiff-devel-32bit-4.0.6-3.1 libtiff5-32bit-4.0.6-3.1 libtiff5-debuginfo-32bit-4.0.6-3.1 References: https://www.suse.com/security/cve/CVE-2015-7554.html https://bugzilla.suse.com/942690 https://bugzilla.suse.com/960341

1 0

openSUSE-SU-2016:0251-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 26 Jan '16

26 Jan '16

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0251-1 Rating: moderate References: #949961 #949962 #962057 Cross-References: CVE-2015-7803 CVE-2015-7804 CVE-2016-1903 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for php5 fixes the following issues: - CVE-2015-7803: Specially crafted .phar files with a crafted TAR archive entry allowed remote attackers to cause a Denial of Service (DoS) [bsc#949961] - CVE-2015-7804: Specially crafted .phar files with a crafted ZIP archive entry referencing a file "/" allowed remote attackers to cause a Denial of Service (DoS) or potentially leak unspecified memory content [bsc#949961] - CVE-2016-1903: Specially crafted image files could allowed remote attackers read unspecified memory when rotating images [bsc#962057] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-100=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_php5-5.6.1-39.1 apache2-mod_php5-debuginfo-5.6.1-39.1 php5-5.6.1-39.1 php5-bcmath-5.6.1-39.1 php5-bcmath-debuginfo-5.6.1-39.1 php5-bz2-5.6.1-39.1 php5-bz2-debuginfo-5.6.1-39.1 php5-calendar-5.6.1-39.1 php5-calendar-debuginfo-5.6.1-39.1 php5-ctype-5.6.1-39.1 php5-ctype-debuginfo-5.6.1-39.1 php5-curl-5.6.1-39.1 php5-curl-debuginfo-5.6.1-39.1 php5-dba-5.6.1-39.1 php5-dba-debuginfo-5.6.1-39.1 php5-debuginfo-5.6.1-39.1 php5-debugsource-5.6.1-39.1 php5-devel-5.6.1-39.1 php5-dom-5.6.1-39.1 php5-dom-debuginfo-5.6.1-39.1 php5-enchant-5.6.1-39.1 php5-enchant-debuginfo-5.6.1-39.1 php5-exif-5.6.1-39.1 php5-exif-debuginfo-5.6.1-39.1 php5-fastcgi-5.6.1-39.1 php5-fastcgi-debuginfo-5.6.1-39.1 php5-fileinfo-5.6.1-39.1 php5-fileinfo-debuginfo-5.6.1-39.1 php5-firebird-5.6.1-39.1 php5-firebird-debuginfo-5.6.1-39.1 php5-fpm-5.6.1-39.1 php5-fpm-debuginfo-5.6.1-39.1 php5-ftp-5.6.1-39.1 php5-ftp-debuginfo-5.6.1-39.1 php5-gd-5.6.1-39.1 php5-gd-debuginfo-5.6.1-39.1 php5-gettext-5.6.1-39.1 php5-gettext-debuginfo-5.6.1-39.1 php5-gmp-5.6.1-39.1 php5-gmp-debuginfo-5.6.1-39.1 php5-iconv-5.6.1-39.1 php5-iconv-debuginfo-5.6.1-39.1 php5-imap-5.6.1-39.1 php5-imap-debuginfo-5.6.1-39.1 php5-intl-5.6.1-39.1 php5-intl-debuginfo-5.6.1-39.1 php5-json-5.6.1-39.1 php5-json-debuginfo-5.6.1-39.1 php5-ldap-5.6.1-39.1 php5-ldap-debuginfo-5.6.1-39.1 php5-mbstring-5.6.1-39.1 php5-mbstring-debuginfo-5.6.1-39.1 php5-mcrypt-5.6.1-39.1 php5-mcrypt-debuginfo-5.6.1-39.1 php5-mssql-5.6.1-39.1 php5-mssql-debuginfo-5.6.1-39.1 php5-mysql-5.6.1-39.1 php5-mysql-debuginfo-5.6.1-39.1 php5-odbc-5.6.1-39.1 php5-odbc-debuginfo-5.6.1-39.1 php5-opcache-5.6.1-39.1 php5-opcache-debuginfo-5.6.1-39.1 php5-openssl-5.6.1-39.1 php5-openssl-debuginfo-5.6.1-39.1 php5-pcntl-5.6.1-39.1 php5-pcntl-debuginfo-5.6.1-39.1 php5-pdo-5.6.1-39.1 php5-pdo-debuginfo-5.6.1-39.1 php5-pgsql-5.6.1-39.1 php5-pgsql-debuginfo-5.6.1-39.1 php5-phar-5.6.1-39.1 php5-phar-debuginfo-5.6.1-39.1 php5-posix-5.6.1-39.1 php5-posix-debuginfo-5.6.1-39.1 php5-pspell-5.6.1-39.1 php5-pspell-debuginfo-5.6.1-39.1 php5-readline-5.6.1-39.1 php5-readline-debuginfo-5.6.1-39.1 php5-shmop-5.6.1-39.1 php5-shmop-debuginfo-5.6.1-39.1 php5-snmp-5.6.1-39.1 php5-snmp-debuginfo-5.6.1-39.1 php5-soap-5.6.1-39.1 php5-soap-debuginfo-5.6.1-39.1 php5-sockets-5.6.1-39.1 php5-sockets-debuginfo-5.6.1-39.1 php5-sqlite-5.6.1-39.1 php5-sqlite-debuginfo-5.6.1-39.1 php5-suhosin-5.6.1-39.1 php5-suhosin-debuginfo-5.6.1-39.1 php5-sysvmsg-5.6.1-39.1 php5-sysvmsg-debuginfo-5.6.1-39.1 php5-sysvsem-5.6.1-39.1 php5-sysvsem-debuginfo-5.6.1-39.1 php5-sysvshm-5.6.1-39.1 php5-sysvshm-debuginfo-5.6.1-39.1 php5-tidy-5.6.1-39.1 php5-tidy-debuginfo-5.6.1-39.1 php5-tokenizer-5.6.1-39.1 php5-tokenizer-debuginfo-5.6.1-39.1 php5-wddx-5.6.1-39.1 php5-wddx-debuginfo-5.6.1-39.1 php5-xmlreader-5.6.1-39.1 php5-xmlreader-debuginfo-5.6.1-39.1 php5-xmlrpc-5.6.1-39.1 php5-xmlrpc-debuginfo-5.6.1-39.1 php5-xmlwriter-5.6.1-39.1 php5-xmlwriter-debuginfo-5.6.1-39.1 php5-xsl-5.6.1-39.1 php5-xsl-debuginfo-5.6.1-39.1 php5-zip-5.6.1-39.1 php5-zip-debuginfo-5.6.1-39.1 php5-zlib-5.6.1-39.1 php5-zlib-debuginfo-5.6.1-39.1 - openSUSE 13.2 (noarch): php5-pear-5.6.1-39.1 References: https://www.suse.com/security/cve/CVE-2015-7803.html https://www.suse.com/security/cve/CVE-2015-7804.html https://www.suse.com/security/cve/CVE-2016-1903.html https://bugzilla.suse.com/949961 https://bugzilla.suse.com/949962 https://bugzilla.suse.com/962057

1 0

openSUSE-SU-2016:0250-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 26 Jan '16

26 Jan '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0250-1 Rating: important References: #963184 #963185 #963186 #963187 #963188 #963189 #963190 #963191 #963192 Cross-References: CVE-2016-1612 CVE-2016-1613 CVE-2016-1614 CVE-2016-1615 CVE-2016-1616 CVE-2016-1617 CVE-2016-1618 CVE-2016-1619 CVE-2016-1620 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: Chromium was updated to 48.0.2564.82 to fix security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-1612: Bad cast in V8 (boo#963184) - CVE-2016-1613: Use-after-free in PDFium (boo#963185) - CVE-2016-1614: Information leak in Blink (boo#963186) - CVE-2016-1615: Origin confusion in Omnibox (boo#963187) - CVE-2016-1616: URL Spoofing (boo#963188) - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189) - CVE-2016-1618: Weak random number generator in Blink (boo#963190) - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191) - CVE-2016-1620 chromium-browser: various fixes (boo#963192) This update also enables SSE2 support on x86_64, VA-API hardware acceleration and fixes a crash when trying to enable the Chromecast extension. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-99=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-99=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): chromedriver-48.0.2564.82-13.1 chromedriver-debuginfo-48.0.2564.82-13.1 chromium-48.0.2564.82-13.1 chromium-debuginfo-48.0.2564.82-13.1 chromium-debugsource-48.0.2564.82-13.1 chromium-desktop-gnome-48.0.2564.82-13.1 chromium-desktop-kde-48.0.2564.82-13.1 chromium-ffmpegsumo-48.0.2564.82-13.1 chromium-ffmpegsumo-debuginfo-48.0.2564.82-13.1 - openSUSE 13.2 (i586 x86_64): chromedriver-48.0.2564.82-67.1 chromedriver-debuginfo-48.0.2564.82-67.1 chromium-48.0.2564.82-67.1 chromium-debuginfo-48.0.2564.82-67.1 chromium-debugsource-48.0.2564.82-67.1 chromium-desktop-gnome-48.0.2564.82-67.1 chromium-desktop-kde-48.0.2564.82-67.1 chromium-ffmpegsumo-48.0.2564.82-67.1 chromium-ffmpegsumo-debuginfo-48.0.2564.82-67.1 References: https://www.suse.com/security/cve/CVE-2016-1612.html https://www.suse.com/security/cve/CVE-2016-1613.html https://www.suse.com/security/cve/CVE-2016-1614.html https://www.suse.com/security/cve/CVE-2016-1615.html https://www.suse.com/security/cve/CVE-2016-1616.html https://www.suse.com/security/cve/CVE-2016-1617.html https://www.suse.com/security/cve/CVE-2016-1618.html https://www.suse.com/security/cve/CVE-2016-1619.html https://www.suse.com/security/cve/CVE-2016-1620.html https://bugzilla.suse.com/963184 https://bugzilla.suse.com/963185 https://bugzilla.suse.com/963186 https://bugzilla.suse.com/963187 https://bugzilla.suse.com/963188 https://bugzilla.suse.com/963189 https://bugzilla.suse.com/963190 https://bugzilla.suse.com/963191 https://bugzilla.suse.com/963192

1 0

openSUSE-SU-2016:0249-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 26 Jan '16

26 Jan '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0249-1 Rating: important References: #963184 #963185 #963186 #963187 #963188 #963189 #963190 #963191 #963192 Cross-References: CVE-2016-1612 CVE-2016-1613 CVE-2016-1614 CVE-2016-1615 CVE-2016-1616 CVE-2016-1617 CVE-2016-1618 CVE-2016-1619 CVE-2016-1620 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: Chromium was updated to 48.0.2564.82 to fix security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-1612: Bad cast in V8 (boo#963184) - CVE-2016-1613: Use-after-free in PDFium (boo#963185) - CVE-2016-1614: Information leak in Blink (boo#963186) - CVE-2016-1615: Origin confusion in Omnibox (boo#963187) - CVE-2016-1616: URL Spoofing (boo#963188) - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189) - CVE-2016-1618: Weak random number generator in Blink (boo#963190) - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191) - CVE-2016-1620 chromium-browser: various fixes (boo#963192) This update also enables SSE2 support on x86_64, VA-API hardware acceleration and fixes a crash when trying to enable the Chromecast extension. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-99=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-48.0.2564.82-41.1 chromedriver-debuginfo-48.0.2564.82-41.1 chromium-48.0.2564.82-41.1 chromium-debuginfo-48.0.2564.82-41.1 chromium-debugsource-48.0.2564.82-41.1 chromium-desktop-gnome-48.0.2564.82-41.1 chromium-desktop-kde-48.0.2564.82-41.1 chromium-ffmpegsumo-48.0.2564.82-41.1 chromium-ffmpegsumo-debuginfo-48.0.2564.82-41.1 References: https://www.suse.com/security/cve/CVE-2016-1612.html https://www.suse.com/security/cve/CVE-2016-1613.html https://www.suse.com/security/cve/CVE-2016-1614.html https://www.suse.com/security/cve/CVE-2016-1615.html https://www.suse.com/security/cve/CVE-2016-1616.html https://www.suse.com/security/cve/CVE-2016-1617.html https://www.suse.com/security/cve/CVE-2016-1618.html https://www.suse.com/security/cve/CVE-2016-1619.html https://www.suse.com/security/cve/CVE-2016-1620.html https://bugzilla.suse.com/963184 https://bugzilla.suse.com/963185 https://bugzilla.suse.com/963186 https://bugzilla.suse.com/963187 https://bugzilla.suse.com/963188 https://bugzilla.suse.com/963189 https://bugzilla.suse.com/963190 https://bugzilla.suse.com/963191 https://bugzilla.suse.com/963192

1 0

openSUSE-RU-2016:0247-1: update for Xorg
by maintenance＠opensuse.org 26 Jan '16

26 Jan '16

openSUSE Recommended Update: update for Xorg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0247-1 Rating: low References: #771521 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Fix panning when configured in xorg.conf* (boo#771521). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-97=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): xorg-x11-server-7.6_1.14.3.901-31.1 xorg-x11-server-debuginfo-7.6_1.14.3.901-31.1 xorg-x11-server-debugsource-7.6_1.14.3.901-31.1 xorg-x11-server-extra-7.6_1.14.3.901-31.1 xorg-x11-server-extra-debuginfo-7.6_1.14.3.901-31.1 xorg-x11-server-sdk-7.6_1.14.3.901-31.1 References: https://bugzilla.suse.com/771521

1 0

openSUSE-SU-2016:0246-1: moderate: Security update for python-requests
by opensuse-security＠opensuse.org 26 Jan '16

26 Jan '16

openSUSE Security Update: Security update for python-requests ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0246-1 Rating: moderate References: #897658 Cross-References: CVE-2014-1830 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-requests fixes the following issue: - CVE-2014-1830: Proxy-Authorization header leak (bnc#897658) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-98=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): python-requests-1.2.3-4.3.1 References: https://www.suse.com/security/cve/CVE-2014-1830.html https://bugzilla.suse.com/897658

1 0