January 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:0251-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 26 Jan '16

26 Jan '16

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0251-1 Rating: moderate References: #949961 #949962 #962057 Cross-References: CVE-2015-7803 CVE-2015-7804 CVE-2016-1903 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for php5 fixes the following issues: - CVE-2015-7803: Specially crafted .phar files with a crafted TAR archive entry allowed remote attackers to cause a Denial of Service (DoS) [bsc#949961] - CVE-2015-7804: Specially crafted .phar files with a crafted ZIP archive entry referencing a file "/" allowed remote attackers to cause a Denial of Service (DoS) or potentially leak unspecified memory content [bsc#949961] - CVE-2016-1903: Specially crafted image files could allowed remote attackers read unspecified memory when rotating images [bsc#962057] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-100=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_php5-5.6.1-39.1 apache2-mod_php5-debuginfo-5.6.1-39.1 php5-5.6.1-39.1 php5-bcmath-5.6.1-39.1 php5-bcmath-debuginfo-5.6.1-39.1 php5-bz2-5.6.1-39.1 php5-bz2-debuginfo-5.6.1-39.1 php5-calendar-5.6.1-39.1 php5-calendar-debuginfo-5.6.1-39.1 php5-ctype-5.6.1-39.1 php5-ctype-debuginfo-5.6.1-39.1 php5-curl-5.6.1-39.1 php5-curl-debuginfo-5.6.1-39.1 php5-dba-5.6.1-39.1 php5-dba-debuginfo-5.6.1-39.1 php5-debuginfo-5.6.1-39.1 php5-debugsource-5.6.1-39.1 php5-devel-5.6.1-39.1 php5-dom-5.6.1-39.1 php5-dom-debuginfo-5.6.1-39.1 php5-enchant-5.6.1-39.1 php5-enchant-debuginfo-5.6.1-39.1 php5-exif-5.6.1-39.1 php5-exif-debuginfo-5.6.1-39.1 php5-fastcgi-5.6.1-39.1 php5-fastcgi-debuginfo-5.6.1-39.1 php5-fileinfo-5.6.1-39.1 php5-fileinfo-debuginfo-5.6.1-39.1 php5-firebird-5.6.1-39.1 php5-firebird-debuginfo-5.6.1-39.1 php5-fpm-5.6.1-39.1 php5-fpm-debuginfo-5.6.1-39.1 php5-ftp-5.6.1-39.1 php5-ftp-debuginfo-5.6.1-39.1 php5-gd-5.6.1-39.1 php5-gd-debuginfo-5.6.1-39.1 php5-gettext-5.6.1-39.1 php5-gettext-debuginfo-5.6.1-39.1 php5-gmp-5.6.1-39.1 php5-gmp-debuginfo-5.6.1-39.1 php5-iconv-5.6.1-39.1 php5-iconv-debuginfo-5.6.1-39.1 php5-imap-5.6.1-39.1 php5-imap-debuginfo-5.6.1-39.1 php5-intl-5.6.1-39.1 php5-intl-debuginfo-5.6.1-39.1 php5-json-5.6.1-39.1 php5-json-debuginfo-5.6.1-39.1 php5-ldap-5.6.1-39.1 php5-ldap-debuginfo-5.6.1-39.1 php5-mbstring-5.6.1-39.1 php5-mbstring-debuginfo-5.6.1-39.1 php5-mcrypt-5.6.1-39.1 php5-mcrypt-debuginfo-5.6.1-39.1 php5-mssql-5.6.1-39.1 php5-mssql-debuginfo-5.6.1-39.1 php5-mysql-5.6.1-39.1 php5-mysql-debuginfo-5.6.1-39.1 php5-odbc-5.6.1-39.1 php5-odbc-debuginfo-5.6.1-39.1 php5-opcache-5.6.1-39.1 php5-opcache-debuginfo-5.6.1-39.1 php5-openssl-5.6.1-39.1 php5-openssl-debuginfo-5.6.1-39.1 php5-pcntl-5.6.1-39.1 php5-pcntl-debuginfo-5.6.1-39.1 php5-pdo-5.6.1-39.1 php5-pdo-debuginfo-5.6.1-39.1 php5-pgsql-5.6.1-39.1 php5-pgsql-debuginfo-5.6.1-39.1 php5-phar-5.6.1-39.1 php5-phar-debuginfo-5.6.1-39.1 php5-posix-5.6.1-39.1 php5-posix-debuginfo-5.6.1-39.1 php5-pspell-5.6.1-39.1 php5-pspell-debuginfo-5.6.1-39.1 php5-readline-5.6.1-39.1 php5-readline-debuginfo-5.6.1-39.1 php5-shmop-5.6.1-39.1 php5-shmop-debuginfo-5.6.1-39.1 php5-snmp-5.6.1-39.1 php5-snmp-debuginfo-5.6.1-39.1 php5-soap-5.6.1-39.1 php5-soap-debuginfo-5.6.1-39.1 php5-sockets-5.6.1-39.1 php5-sockets-debuginfo-5.6.1-39.1 php5-sqlite-5.6.1-39.1 php5-sqlite-debuginfo-5.6.1-39.1 php5-suhosin-5.6.1-39.1 php5-suhosin-debuginfo-5.6.1-39.1 php5-sysvmsg-5.6.1-39.1 php5-sysvmsg-debuginfo-5.6.1-39.1 php5-sysvsem-5.6.1-39.1 php5-sysvsem-debuginfo-5.6.1-39.1 php5-sysvshm-5.6.1-39.1 php5-sysvshm-debuginfo-5.6.1-39.1 php5-tidy-5.6.1-39.1 php5-tidy-debuginfo-5.6.1-39.1 php5-tokenizer-5.6.1-39.1 php5-tokenizer-debuginfo-5.6.1-39.1 php5-wddx-5.6.1-39.1 php5-wddx-debuginfo-5.6.1-39.1 php5-xmlreader-5.6.1-39.1 php5-xmlreader-debuginfo-5.6.1-39.1 php5-xmlrpc-5.6.1-39.1 php5-xmlrpc-debuginfo-5.6.1-39.1 php5-xmlwriter-5.6.1-39.1 php5-xmlwriter-debuginfo-5.6.1-39.1 php5-xsl-5.6.1-39.1 php5-xsl-debuginfo-5.6.1-39.1 php5-zip-5.6.1-39.1 php5-zip-debuginfo-5.6.1-39.1 php5-zlib-5.6.1-39.1 php5-zlib-debuginfo-5.6.1-39.1 - openSUSE 13.2 (noarch): php5-pear-5.6.1-39.1 References: https://www.suse.com/security/cve/CVE-2015-7803.html https://www.suse.com/security/cve/CVE-2015-7804.html https://www.suse.com/security/cve/CVE-2016-1903.html https://bugzilla.suse.com/949961 https://bugzilla.suse.com/949962 https://bugzilla.suse.com/962057

1 0

openSUSE-SU-2016:0250-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 26 Jan '16

26 Jan '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0250-1 Rating: important References: #963184 #963185 #963186 #963187 #963188 #963189 #963190 #963191 #963192 Cross-References: CVE-2016-1612 CVE-2016-1613 CVE-2016-1614 CVE-2016-1615 CVE-2016-1616 CVE-2016-1617 CVE-2016-1618 CVE-2016-1619 CVE-2016-1620 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: Chromium was updated to 48.0.2564.82 to fix security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-1612: Bad cast in V8 (boo#963184) - CVE-2016-1613: Use-after-free in PDFium (boo#963185) - CVE-2016-1614: Information leak in Blink (boo#963186) - CVE-2016-1615: Origin confusion in Omnibox (boo#963187) - CVE-2016-1616: URL Spoofing (boo#963188) - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189) - CVE-2016-1618: Weak random number generator in Blink (boo#963190) - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191) - CVE-2016-1620 chromium-browser: various fixes (boo#963192) This update also enables SSE2 support on x86_64, VA-API hardware acceleration and fixes a crash when trying to enable the Chromecast extension. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-99=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-99=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): chromedriver-48.0.2564.82-13.1 chromedriver-debuginfo-48.0.2564.82-13.1 chromium-48.0.2564.82-13.1 chromium-debuginfo-48.0.2564.82-13.1 chromium-debugsource-48.0.2564.82-13.1 chromium-desktop-gnome-48.0.2564.82-13.1 chromium-desktop-kde-48.0.2564.82-13.1 chromium-ffmpegsumo-48.0.2564.82-13.1 chromium-ffmpegsumo-debuginfo-48.0.2564.82-13.1 - openSUSE 13.2 (i586 x86_64): chromedriver-48.0.2564.82-67.1 chromedriver-debuginfo-48.0.2564.82-67.1 chromium-48.0.2564.82-67.1 chromium-debuginfo-48.0.2564.82-67.1 chromium-debugsource-48.0.2564.82-67.1 chromium-desktop-gnome-48.0.2564.82-67.1 chromium-desktop-kde-48.0.2564.82-67.1 chromium-ffmpegsumo-48.0.2564.82-67.1 chromium-ffmpegsumo-debuginfo-48.0.2564.82-67.1 References: https://www.suse.com/security/cve/CVE-2016-1612.html https://www.suse.com/security/cve/CVE-2016-1613.html https://www.suse.com/security/cve/CVE-2016-1614.html https://www.suse.com/security/cve/CVE-2016-1615.html https://www.suse.com/security/cve/CVE-2016-1616.html https://www.suse.com/security/cve/CVE-2016-1617.html https://www.suse.com/security/cve/CVE-2016-1618.html https://www.suse.com/security/cve/CVE-2016-1619.html https://www.suse.com/security/cve/CVE-2016-1620.html https://bugzilla.suse.com/963184 https://bugzilla.suse.com/963185 https://bugzilla.suse.com/963186 https://bugzilla.suse.com/963187 https://bugzilla.suse.com/963188 https://bugzilla.suse.com/963189 https://bugzilla.suse.com/963190 https://bugzilla.suse.com/963191 https://bugzilla.suse.com/963192

1 0

openSUSE-SU-2016:0249-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 26 Jan '16

26 Jan '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0249-1 Rating: important References: #963184 #963185 #963186 #963187 #963188 #963189 #963190 #963191 #963192 Cross-References: CVE-2016-1612 CVE-2016-1613 CVE-2016-1614 CVE-2016-1615 CVE-2016-1616 CVE-2016-1617 CVE-2016-1618 CVE-2016-1619 CVE-2016-1620 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: Chromium was updated to 48.0.2564.82 to fix security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-1612: Bad cast in V8 (boo#963184) - CVE-2016-1613: Use-after-free in PDFium (boo#963185) - CVE-2016-1614: Information leak in Blink (boo#963186) - CVE-2016-1615: Origin confusion in Omnibox (boo#963187) - CVE-2016-1616: URL Spoofing (boo#963188) - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189) - CVE-2016-1618: Weak random number generator in Blink (boo#963190) - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191) - CVE-2016-1620 chromium-browser: various fixes (boo#963192) This update also enables SSE2 support on x86_64, VA-API hardware acceleration and fixes a crash when trying to enable the Chromecast extension. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-99=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-48.0.2564.82-41.1 chromedriver-debuginfo-48.0.2564.82-41.1 chromium-48.0.2564.82-41.1 chromium-debuginfo-48.0.2564.82-41.1 chromium-debugsource-48.0.2564.82-41.1 chromium-desktop-gnome-48.0.2564.82-41.1 chromium-desktop-kde-48.0.2564.82-41.1 chromium-ffmpegsumo-48.0.2564.82-41.1 chromium-ffmpegsumo-debuginfo-48.0.2564.82-41.1 References: https://www.suse.com/security/cve/CVE-2016-1612.html https://www.suse.com/security/cve/CVE-2016-1613.html https://www.suse.com/security/cve/CVE-2016-1614.html https://www.suse.com/security/cve/CVE-2016-1615.html https://www.suse.com/security/cve/CVE-2016-1616.html https://www.suse.com/security/cve/CVE-2016-1617.html https://www.suse.com/security/cve/CVE-2016-1618.html https://www.suse.com/security/cve/CVE-2016-1619.html https://www.suse.com/security/cve/CVE-2016-1620.html https://bugzilla.suse.com/963184 https://bugzilla.suse.com/963185 https://bugzilla.suse.com/963186 https://bugzilla.suse.com/963187 https://bugzilla.suse.com/963188 https://bugzilla.suse.com/963189 https://bugzilla.suse.com/963190 https://bugzilla.suse.com/963191 https://bugzilla.suse.com/963192

1 0

openSUSE-RU-2016:0247-1: update for Xorg
by maintenance＠opensuse.org 26 Jan '16

26 Jan '16

openSUSE Recommended Update: update for Xorg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0247-1 Rating: low References: #771521 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Fix panning when configured in xorg.conf* (boo#771521). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-97=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): xorg-x11-server-7.6_1.14.3.901-31.1 xorg-x11-server-debuginfo-7.6_1.14.3.901-31.1 xorg-x11-server-debugsource-7.6_1.14.3.901-31.1 xorg-x11-server-extra-7.6_1.14.3.901-31.1 xorg-x11-server-extra-debuginfo-7.6_1.14.3.901-31.1 xorg-x11-server-sdk-7.6_1.14.3.901-31.1 References: https://bugzilla.suse.com/771521

1 0

openSUSE-SU-2016:0246-1: moderate: Security update for python-requests
by opensuse-security＠opensuse.org 26 Jan '16

26 Jan '16

openSUSE Security Update: Security update for python-requests ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0246-1 Rating: moderate References: #897658 Cross-References: CVE-2014-1830 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-requests fixes the following issue: - CVE-2014-1830: Proxy-Authorization header leak (bnc#897658) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-98=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): python-requests-1.2.3-4.3.1 References: https://www.suse.com/security/cve/CVE-2014-1830.html https://bugzilla.suse.com/897658

1 0

openSUSE-RU-2016:0245-1: Recommended update for clamav-database
by maintenance＠opensuse.org 26 Jan '16

26 Jan '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0245-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - database refresh 2016-01-15 This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-95=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201601250000-41.1 References:

1 0

openSUSE-RU-2016:0244-1: moderate: Recommended update for samba
by maintenance＠opensuse.org 26 Jan '16

26 Jan '16

openSUSE Recommended Update: Recommended update for samba ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0244-1 Rating: moderate References: #960249 #962177 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for samba fixes the following issues: - Add quotes around path of update-apparmor-samba-profile (boo#962177). - Remove autoconf build-time requirement. - Prevent access denied if the share path is "/" (bso#11647, boo#960249). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-96=1 - openSUSE 13.1: zypper in -t patch openSUSE-2016-96=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libdcerpc-atsvc-devel-4.1.22-26.1 libdcerpc-atsvc0-4.1.22-26.1 libdcerpc-atsvc0-debuginfo-4.1.22-26.1 libdcerpc-binding0-4.1.22-26.1 libdcerpc-binding0-debuginfo-4.1.22-26.1 libdcerpc-devel-4.1.22-26.1 libdcerpc-samr-devel-4.1.22-26.1 libdcerpc-samr0-4.1.22-26.1 libdcerpc-samr0-debuginfo-4.1.22-26.1 libdcerpc0-4.1.22-26.1 libdcerpc0-debuginfo-4.1.22-26.1 libgensec-devel-4.1.22-26.1 libgensec0-4.1.22-26.1 libgensec0-debuginfo-4.1.22-26.1 libndr-devel-4.1.22-26.1 libndr-krb5pac-devel-4.1.22-26.1 libndr-krb5pac0-4.1.22-26.1 libndr-krb5pac0-debuginfo-4.1.22-26.1 libndr-nbt-devel-4.1.22-26.1 libndr-nbt0-4.1.22-26.1 libndr-nbt0-debuginfo-4.1.22-26.1 libndr-standard-devel-4.1.22-26.1 libndr-standard0-4.1.22-26.1 libndr-standard0-debuginfo-4.1.22-26.1 libndr0-4.1.22-26.1 libndr0-debuginfo-4.1.22-26.1 libnetapi-devel-4.1.22-26.1 libnetapi0-4.1.22-26.1 libnetapi0-debuginfo-4.1.22-26.1 libpdb-devel-4.1.22-26.1 libpdb0-4.1.22-26.1 libpdb0-debuginfo-4.1.22-26.1 libregistry-devel-4.1.22-26.1 libregistry0-4.1.22-26.1 libregistry0-debuginfo-4.1.22-26.1 libsamba-credentials-devel-4.1.22-26.1 libsamba-credentials0-4.1.22-26.1 libsamba-credentials0-debuginfo-4.1.22-26.1 libsamba-hostconfig-devel-4.1.22-26.1 libsamba-hostconfig0-4.1.22-26.1 libsamba-hostconfig0-debuginfo-4.1.22-26.1 libsamba-policy-devel-4.1.22-26.1 libsamba-policy0-4.1.22-26.1 libsamba-policy0-debuginfo-4.1.22-26.1 libsamba-util-devel-4.1.22-26.1 libsamba-util0-4.1.22-26.1 libsamba-util0-debuginfo-4.1.22-26.1 libsamdb-devel-4.1.22-26.1 libsamdb0-4.1.22-26.1 libsamdb0-debuginfo-4.1.22-26.1 libsmbclient-devel-4.1.22-26.1 libsmbclient-raw-devel-4.1.22-26.1 libsmbclient-raw0-4.1.22-26.1 libsmbclient-raw0-debuginfo-4.1.22-26.1 libsmbclient0-4.1.22-26.1 libsmbclient0-debuginfo-4.1.22-26.1 libsmbconf-devel-4.1.22-26.1 libsmbconf0-4.1.22-26.1 libsmbconf0-debuginfo-4.1.22-26.1 libsmbldap-devel-4.1.22-26.1 libsmbldap0-4.1.22-26.1 libsmbldap0-debuginfo-4.1.22-26.1 libsmbsharemodes-devel-4.1.22-26.1 libsmbsharemodes0-4.1.22-26.1 libsmbsharemodes0-debuginfo-4.1.22-26.1 libtevent-util-devel-4.1.22-26.1 libtevent-util0-4.1.22-26.1 libtevent-util0-debuginfo-4.1.22-26.1 libwbclient-devel-4.1.22-26.1 libwbclient0-4.1.22-26.1 libwbclient0-debuginfo-4.1.22-26.1 samba-4.1.22-26.1 samba-client-4.1.22-26.1 samba-client-debuginfo-4.1.22-26.1 samba-core-devel-4.1.22-26.1 samba-debuginfo-4.1.22-26.1 samba-debugsource-4.1.22-26.1 samba-libs-4.1.22-26.1 samba-libs-debuginfo-4.1.22-26.1 samba-pidl-4.1.22-26.1 samba-python-4.1.22-26.1 samba-python-debuginfo-4.1.22-26.1 samba-test-4.1.22-26.1 samba-test-debuginfo-4.1.22-26.1 samba-test-devel-4.1.22-26.1 samba-winbind-4.1.22-26.1 samba-winbind-debuginfo-4.1.22-26.1 - openSUSE 13.2 (x86_64): libdcerpc-atsvc0-32bit-4.1.22-26.1 libdcerpc-atsvc0-debuginfo-32bit-4.1.22-26.1 libdcerpc-binding0-32bit-4.1.22-26.1 libdcerpc-binding0-debuginfo-32bit-4.1.22-26.1 libdcerpc-samr0-32bit-4.1.22-26.1 libdcerpc-samr0-debuginfo-32bit-4.1.22-26.1 libdcerpc0-32bit-4.1.22-26.1 libdcerpc0-debuginfo-32bit-4.1.22-26.1 libgensec0-32bit-4.1.22-26.1 libgensec0-debuginfo-32bit-4.1.22-26.1 libndr-krb5pac0-32bit-4.1.22-26.1 libndr-krb5pac0-debuginfo-32bit-4.1.22-26.1 libndr-nbt0-32bit-4.1.22-26.1 libndr-nbt0-debuginfo-32bit-4.1.22-26.1 libndr-standard0-32bit-4.1.22-26.1 libndr-standard0-debuginfo-32bit-4.1.22-26.1 libndr0-32bit-4.1.22-26.1 libndr0-debuginfo-32bit-4.1.22-26.1 libnetapi0-32bit-4.1.22-26.1 libnetapi0-debuginfo-32bit-4.1.22-26.1 libpdb0-32bit-4.1.22-26.1 libpdb0-debuginfo-32bit-4.1.22-26.1 libregistry0-32bit-4.1.22-26.1 libregistry0-debuginfo-32bit-4.1.22-26.1 libsamba-credentials0-32bit-4.1.22-26.1 libsamba-credentials0-debuginfo-32bit-4.1.22-26.1 libsamba-hostconfig0-32bit-4.1.22-26.1 libsamba-hostconfig0-debuginfo-32bit-4.1.22-26.1 libsamba-policy0-32bit-4.1.22-26.1 libsamba-policy0-debuginfo-32bit-4.1.22-26.1 libsamba-util0-32bit-4.1.22-26.1 libsamba-util0-debuginfo-32bit-4.1.22-26.1 libsamdb0-32bit-4.1.22-26.1 libsamdb0-debuginfo-32bit-4.1.22-26.1 libsmbclient-raw0-32bit-4.1.22-26.1 libsmbclient-raw0-debuginfo-32bit-4.1.22-26.1 libsmbclient0-32bit-4.1.22-26.1 libsmbclient0-debuginfo-32bit-4.1.22-26.1 libsmbconf0-32bit-4.1.22-26.1 libsmbconf0-debuginfo-32bit-4.1.22-26.1 libsmbldap0-32bit-4.1.22-26.1 libsmbldap0-debuginfo-32bit-4.1.22-26.1 libtevent-util0-32bit-4.1.22-26.1 libtevent-util0-debuginfo-32bit-4.1.22-26.1 libwbclient0-32bit-4.1.22-26.1 libwbclient0-debuginfo-32bit-4.1.22-26.1 samba-32bit-4.1.22-26.1 samba-client-32bit-4.1.22-26.1 samba-client-debuginfo-32bit-4.1.22-26.1 samba-debuginfo-32bit-4.1.22-26.1 samba-libs-32bit-4.1.22-26.1 samba-libs-debuginfo-32bit-4.1.22-26.1 samba-winbind-32bit-4.1.22-26.1 samba-winbind-debuginfo-32bit-4.1.22-26.1 - openSUSE 13.2 (noarch): samba-doc-4.1.22-26.1 - openSUSE 13.1 (i586 x86_64): libdcerpc-atsvc-devel-4.1.22-3.51.1 libdcerpc-atsvc0-4.1.22-3.51.1 libdcerpc-atsvc0-debuginfo-4.1.22-3.51.1 libdcerpc-binding0-4.1.22-3.51.1 libdcerpc-binding0-debuginfo-4.1.22-3.51.1 libdcerpc-devel-4.1.22-3.51.1 libdcerpc-samr-devel-4.1.22-3.51.1 libdcerpc-samr0-4.1.22-3.51.1 libdcerpc-samr0-debuginfo-4.1.22-3.51.1 libdcerpc0-4.1.22-3.51.1 libdcerpc0-debuginfo-4.1.22-3.51.1 libgensec-devel-4.1.22-3.51.1 libgensec0-4.1.22-3.51.1 libgensec0-debuginfo-4.1.22-3.51.1 libndr-devel-4.1.22-3.51.1 libndr-krb5pac-devel-4.1.22-3.51.1 libndr-krb5pac0-4.1.22-3.51.1 libndr-krb5pac0-debuginfo-4.1.22-3.51.1 libndr-nbt-devel-4.1.22-3.51.1 libndr-nbt0-4.1.22-3.51.1 libndr-nbt0-debuginfo-4.1.22-3.51.1 libndr-standard-devel-4.1.22-3.51.1 libndr-standard0-4.1.22-3.51.1 libndr-standard0-debuginfo-4.1.22-3.51.1 libndr0-4.1.22-3.51.1 libndr0-debuginfo-4.1.22-3.51.1 libnetapi-devel-4.1.22-3.51.1 libnetapi0-4.1.22-3.51.1 libnetapi0-debuginfo-4.1.22-3.51.1 libpdb-devel-4.1.22-3.51.1 libpdb0-4.1.22-3.51.1 libpdb0-debuginfo-4.1.22-3.51.1 libregistry-devel-4.1.22-3.51.1 libregistry0-4.1.22-3.51.1 libregistry0-debuginfo-4.1.22-3.51.1 libsamba-credentials-devel-4.1.22-3.51.1 libsamba-credentials0-4.1.22-3.51.1 libsamba-credentials0-debuginfo-4.1.22-3.51.1 libsamba-hostconfig-devel-4.1.22-3.51.1 libsamba-hostconfig0-4.1.22-3.51.1 libsamba-hostconfig0-debuginfo-4.1.22-3.51.1 libsamba-policy-devel-4.1.22-3.51.1 libsamba-policy0-4.1.22-3.51.1 libsamba-policy0-debuginfo-4.1.22-3.51.1 libsamba-util-devel-4.1.22-3.51.1 libsamba-util0-4.1.22-3.51.1 libsamba-util0-debuginfo-4.1.22-3.51.1 libsamdb-devel-4.1.22-3.51.1 libsamdb0-4.1.22-3.51.1 libsamdb0-debuginfo-4.1.22-3.51.1 libsmbclient-devel-4.1.22-3.51.1 libsmbclient-raw-devel-4.1.22-3.51.1 libsmbclient-raw0-4.1.22-3.51.1 libsmbclient-raw0-debuginfo-4.1.22-3.51.1 libsmbclient0-4.1.22-3.51.1 libsmbclient0-debuginfo-4.1.22-3.51.1 libsmbconf-devel-4.1.22-3.51.1 libsmbconf0-4.1.22-3.51.1 libsmbconf0-debuginfo-4.1.22-3.51.1 libsmbldap-devel-4.1.22-3.51.1 libsmbldap0-4.1.22-3.51.1 libsmbldap0-debuginfo-4.1.22-3.51.1 libsmbsharemodes-devel-4.1.22-3.51.1 libsmbsharemodes0-4.1.22-3.51.1 libsmbsharemodes0-debuginfo-4.1.22-3.51.1 libtevent-util-devel-4.1.22-3.51.1 libtevent-util0-4.1.22-3.51.1 libtevent-util0-debuginfo-4.1.22-3.51.1 libwbclient-devel-4.1.22-3.51.1 libwbclient0-4.1.22-3.51.1 libwbclient0-debuginfo-4.1.22-3.51.1 samba-4.1.22-3.51.1 samba-client-4.1.22-3.51.1 samba-client-debuginfo-4.1.22-3.51.1 samba-core-devel-4.1.22-3.51.1 samba-debuginfo-4.1.22-3.51.1 samba-debugsource-4.1.22-3.51.1 samba-libs-4.1.22-3.51.1 samba-libs-debuginfo-4.1.22-3.51.1 samba-pidl-4.1.22-3.51.1 samba-python-4.1.22-3.51.1 samba-python-debuginfo-4.1.22-3.51.1 samba-test-4.1.22-3.51.1 samba-test-debuginfo-4.1.22-3.51.1 samba-test-devel-4.1.22-3.51.1 samba-winbind-4.1.22-3.51.1 samba-winbind-debuginfo-4.1.22-3.51.1 - openSUSE 13.1 (x86_64): libdcerpc-atsvc0-32bit-4.1.22-3.51.1 libdcerpc-atsvc0-debuginfo-32bit-4.1.22-3.51.1 libdcerpc-binding0-32bit-4.1.22-3.51.1 libdcerpc-binding0-debuginfo-32bit-4.1.22-3.51.1 libdcerpc-samr0-32bit-4.1.22-3.51.1 libdcerpc-samr0-debuginfo-32bit-4.1.22-3.51.1 libdcerpc0-32bit-4.1.22-3.51.1 libdcerpc0-debuginfo-32bit-4.1.22-3.51.1 libgensec0-32bit-4.1.22-3.51.1 libgensec0-debuginfo-32bit-4.1.22-3.51.1 libndr-krb5pac0-32bit-4.1.22-3.51.1 libndr-krb5pac0-debuginfo-32bit-4.1.22-3.51.1 libndr-nbt0-32bit-4.1.22-3.51.1 libndr-nbt0-debuginfo-32bit-4.1.22-3.51.1 libndr-standard0-32bit-4.1.22-3.51.1 libndr-standard0-debuginfo-32bit-4.1.22-3.51.1 libndr0-32bit-4.1.22-3.51.1 libndr0-debuginfo-32bit-4.1.22-3.51.1 libnetapi0-32bit-4.1.22-3.51.1 libnetapi0-debuginfo-32bit-4.1.22-3.51.1 libpdb0-32bit-4.1.22-3.51.1 libpdb0-debuginfo-32bit-4.1.22-3.51.1 libregistry0-32bit-4.1.22-3.51.1 libregistry0-debuginfo-32bit-4.1.22-3.51.1 libsamba-credentials0-32bit-4.1.22-3.51.1 libsamba-credentials0-debuginfo-32bit-4.1.22-3.51.1 libsamba-hostconfig0-32bit-4.1.22-3.51.1 libsamba-hostconfig0-debuginfo-32bit-4.1.22-3.51.1 libsamba-policy0-32bit-4.1.22-3.51.1 libsamba-policy0-debuginfo-32bit-4.1.22-3.51.1 libsamba-util0-32bit-4.1.22-3.51.1 libsamba-util0-debuginfo-32bit-4.1.22-3.51.1 libsamdb0-32bit-4.1.22-3.51.1 libsamdb0-debuginfo-32bit-4.1.22-3.51.1 libsmbclient-raw0-32bit-4.1.22-3.51.1 libsmbclient-raw0-debuginfo-32bit-4.1.22-3.51.1 libsmbclient0-32bit-4.1.22-3.51.1 libsmbclient0-debuginfo-32bit-4.1.22-3.51.1 libsmbconf0-32bit-4.1.22-3.51.1 libsmbconf0-debuginfo-32bit-4.1.22-3.51.1 libsmbldap0-32bit-4.1.22-3.51.1 libsmbldap0-debuginfo-32bit-4.1.22-3.51.1 libtevent-util0-32bit-4.1.22-3.51.1 libtevent-util0-debuginfo-32bit-4.1.22-3.51.1 libwbclient0-32bit-4.1.22-3.51.1 libwbclient0-debuginfo-32bit-4.1.22-3.51.1 samba-32bit-4.1.22-3.51.1 samba-client-32bit-4.1.22-3.51.1 samba-client-debuginfo-32bit-4.1.22-3.51.1 samba-debuginfo-32bit-4.1.22-3.51.1 samba-libs-32bit-4.1.22-3.51.1 samba-libs-debuginfo-32bit-4.1.22-3.51.1 samba-winbind-32bit-4.1.22-3.51.1 samba-winbind-debuginfo-32bit-4.1.22-3.51.1 - openSUSE 13.1 (noarch): samba-doc-4.1.22-3.51.1 References: https://bugzilla.suse.com/960249 https://bugzilla.suse.com/962177

1 0

openSUSE-SU-2016:0243-1: important: Security update for ffmpeg
by opensuse-security＠opensuse.org 25 Jan '16

25 Jan '16

openSUSE Security Update: Security update for ffmpeg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0243-1 Rating: important References: #961937 Cross-References: CVE-2016-1897 CVE-2016-1898 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update to ffmpeg 2.8.5 fixes the following issues: * CVE-2016-1897: Cross-origin issue in URL processing (concat) - local file disclosure (boo#961937) * CVE-2016-1898: Cross-origin issue in URL processing (subfile) - local file disclosure (boo#961937) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-94=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ffmpeg-2.8.5-12.1 ffmpeg-debuginfo-2.8.5-12.1 ffmpeg-debugsource-2.8.5-12.1 ffmpeg-devel-2.8.5-12.1 libavcodec-devel-2.8.5-12.1 libavcodec56-2.8.5-12.1 libavcodec56-debuginfo-2.8.5-12.1 libavdevice-devel-2.8.5-12.1 libavdevice56-2.8.5-12.1 libavdevice56-debuginfo-2.8.5-12.1 libavfilter-devel-2.8.5-12.1 libavfilter5-2.8.5-12.1 libavfilter5-debuginfo-2.8.5-12.1 libavformat-devel-2.8.5-12.1 libavformat56-2.8.5-12.1 libavformat56-debuginfo-2.8.5-12.1 libavresample-devel-2.8.5-12.1 libavresample2-2.8.5-12.1 libavresample2-debuginfo-2.8.5-12.1 libavutil-devel-2.8.5-12.1 libavutil54-2.8.5-12.1 libavutil54-debuginfo-2.8.5-12.1 libpostproc-devel-2.8.5-12.1 libpostproc53-2.8.5-12.1 libpostproc53-debuginfo-2.8.5-12.1 libswresample-devel-2.8.5-12.1 libswresample1-2.8.5-12.1 libswresample1-debuginfo-2.8.5-12.1 libswscale-devel-2.8.5-12.1 libswscale3-2.8.5-12.1 libswscale3-debuginfo-2.8.5-12.1 - openSUSE Leap 42.1 (x86_64): libavcodec56-32bit-2.8.5-12.1 libavcodec56-debuginfo-32bit-2.8.5-12.1 libavdevice56-32bit-2.8.5-12.1 libavdevice56-debuginfo-32bit-2.8.5-12.1 libavfilter5-32bit-2.8.5-12.1 libavfilter5-debuginfo-32bit-2.8.5-12.1 libavformat56-32bit-2.8.5-12.1 libavformat56-debuginfo-32bit-2.8.5-12.1 libavresample2-32bit-2.8.5-12.1 libavresample2-debuginfo-32bit-2.8.5-12.1 libavutil54-32bit-2.8.5-12.1 libavutil54-debuginfo-32bit-2.8.5-12.1 libpostproc53-32bit-2.8.5-12.1 libpostproc53-debuginfo-32bit-2.8.5-12.1 libswresample1-32bit-2.8.5-12.1 libswresample1-debuginfo-32bit-2.8.5-12.1 libswscale3-32bit-2.8.5-12.1 libswscale3-debuginfo-32bit-2.8.5-12.1 References: https://www.suse.com/security/cve/CVE-2016-1897.html https://www.suse.com/security/cve/CVE-2016-1898.html https://bugzilla.suse.com/961937

1 0

openSUSE-SU-2016:0239-1: moderate: Security update for ecryptfs-utils
by opensuse-security＠opensuse.org 25 Jan '16

25 Jan '16

openSUSE Security Update: Security update for ecryptfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0239-1 Rating: moderate References: #962052 Cross-References: CVE-2016-1572 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ecryptfs-utils fixes the following issues: - CVE-2016-1572: A local user could have escalated privileges by mounting over special filesystems (bsc#962052) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-93=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ecryptfs-utils-104-3.1 ecryptfs-utils-debuginfo-104-3.1 ecryptfs-utils-debugsource-104-3.1 - openSUSE 13.2 (x86_64): ecryptfs-utils-32bit-104-3.1 ecryptfs-utils-debuginfo-32bit-104-3.1 References: https://www.suse.com/security/cve/CVE-2016-1572.html https://bugzilla.suse.com/962052

1 0

openSUSE-SU-2016:0226-1: important: Security update for openldap2
by opensuse-security＠opensuse.org 25 Jan '16

25 Jan '16

openSUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0226-1 Rating: important References: #904028 #937766 #945582 #955210 Cross-References: CVE-2015-4000 CVE-2015-6908 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update fixes the following security issues: - CVE-2015-6908: The ber_get_next function allowed remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd. (bsc#945582) - CVE-2015-4000: Fix weak Diffie-Hellman size vulnerability. (bsc#937766) It also fixes the following non-security bugs: - bsc#955210: Unresponsive LDAP host lookups in IPv6 environment - bsc#904028: Add missing dependency binutils used by %pre. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-92=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): compat-libldap-2_3-0-2.3.37-8.9.1 compat-libldap-2_3-0-debuginfo-2.3.37-8.9.1 libldap-2_4-2-2.4.39-8.9.1 libldap-2_4-2-debuginfo-2.4.39-8.9.1 openldap2-2.4.39-8.9.1 openldap2-back-meta-2.4.39-8.9.1 openldap2-back-meta-debuginfo-2.4.39-8.9.1 openldap2-back-perl-2.4.39-8.9.1 openldap2-back-perl-debuginfo-2.4.39-8.9.1 openldap2-back-sql-2.4.39-8.9.1 openldap2-back-sql-debuginfo-2.4.39-8.9.1 openldap2-client-2.4.39-8.9.1 openldap2-client-debuginfo-2.4.39-8.9.1 openldap2-client-debugsource-2.4.39-8.9.1 openldap2-debuginfo-2.4.39-8.9.1 openldap2-debugsource-2.4.39-8.9.1 openldap2-devel-2.4.39-8.9.1 openldap2-devel-static-2.4.39-8.9.1 - openSUSE 13.2 (x86_64): libldap-2_4-2-32bit-2.4.39-8.9.1 libldap-2_4-2-debuginfo-32bit-2.4.39-8.9.1 openldap2-devel-32bit-2.4.39-8.9.1 - openSUSE 13.2 (noarch): openldap2-doc-2.4.39-8.9.1 References: https://www.suse.com/security/cve/CVE-2015-4000.html https://www.suse.com/security/cve/CVE-2015-6908.html https://bugzilla.suse.com/904028 https://bugzilla.suse.com/937766 https://bugzilla.suse.com/945582 https://bugzilla.suse.com/955210

1 0