January 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:0162-1: moderate: Security update for mbedtls
by opensuse-security＠opensuse.org 19 Jan '16

19 Jan '16

openSUSE Security Update: Security update for mbedtls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0162-1 Rating: moderate References: #961284 #961290 Cross-References: CVE-2015-7575 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update to mbedtls 1.3.16 fixes the following security issues: * CVE-2015-7575: Disables by default MD5 handshake signatures in TLS 1.2 to prevent the SLOTH attack on TLS 1.2 server authentication (boo#961284) * boo#961290: potential double free during certificate generation Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-59=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libmbedtls9-1.3.16-9.1 libmbedtls9-debuginfo-1.3.16-9.1 mbedtls-debugsource-1.3.16-9.1 mbedtls-devel-1.3.16-9.1 - openSUSE Leap 42.1 (x86_64): libmbedtls9-32bit-1.3.16-9.1 libmbedtls9-debuginfo-32bit-1.3.16-9.1 References: https://www.suse.com/security/cve/CVE-2015-7575.html https://bugzilla.suse.com/961284 https://bugzilla.suse.com/961290

1 0

openSUSE-SU-2016:0161-1: moderate: Security update for polarssl
by opensuse-security＠opensuse.org 19 Jan '16

19 Jan '16

openSUSE Security Update: Security update for polarssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0161-1 Rating: moderate References: #961284 #961290 Cross-References: CVE-2015-7575 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for polarssl fixes the following issues: * CVE-2015-7575: Disables by default MD5 handshake signatures in TLS 1.2 to prevent the SLOTH attack on TLS 1.2 server authentication (boo#961284) * boo#961290: potential double free during certificate generation Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-60=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libpolarssl7-1.3.9-14.1 libpolarssl7-debuginfo-1.3.9-14.1 polarssl-devel-1.3.9-14.1 References: https://www.suse.com/security/cve/CVE-2015-7575.html https://bugzilla.suse.com/961284 https://bugzilla.suse.com/961290

1 0

openSUSE-RU-2016:0158-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 18 Jan '16

18 Jan '16

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0158-1 Rating: moderate References: #961439 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xorg-x11-server fixes the following issues: - Only initialize pointer when matched (boo#961439). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-58=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-58=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xorg-x11-server-7.6_1.17.2-12.1 xorg-x11-server-debuginfo-7.6_1.17.2-12.1 xorg-x11-server-debugsource-7.6_1.17.2-12.1 xorg-x11-server-extra-7.6_1.17.2-12.1 xorg-x11-server-extra-debuginfo-7.6_1.17.2-12.1 xorg-x11-server-sdk-7.6_1.17.2-12.1 xorg-x11-server-source-7.6_1.17.2-12.1 - openSUSE 13.2 (i586 x86_64): xorg-x11-server-7.6_1.16.1-28.1 xorg-x11-server-debuginfo-7.6_1.16.1-28.1 xorg-x11-server-debugsource-7.6_1.16.1-28.1 xorg-x11-server-extra-7.6_1.16.1-28.1 xorg-x11-server-extra-debuginfo-7.6_1.16.1-28.1 xorg-x11-server-sdk-7.6_1.16.1-28.1 References: https://bugzilla.suse.com/961439

1 0

openSUSE-RU-2016:0157-1: moderate: Recommended update for mate-menu and mate-tweak
by maintenance＠opensuse.org 18 Jan '16

18 Jan '16

openSUSE Recommended Update: Recommended update for mate-menu and mate-tweak ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0157-1 Rating: moderate References: #959024 #959025 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for mate-menu and mate-tweak fixes the following issues: - mate-menu + Add missing lsb-release and python-gobject dependencies (boo#959024). + Fix crash in mate-menu configurator. + Update to 5.6.6. * Fix local code injection - mate-tweak + Update to 3.5.3 (boo#959025) * Added Keyboard LED Indicator. * Added capability to enable/disable animations. * Fixed non-translatable strings. * Updated translations. + Add missing python3-gobject and mate-panel dependencies. + Do not show Python warnings if no dock is present. + Use Mate-menu Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-57=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): mate-menu-5.6.6-4.1 mate-menu-lang-5.6.6-4.1 mate-tweak-3.5.3-3.1 mate-tweak-lang-3.5.3-3.1 References: https://bugzilla.suse.com/959024 https://bugzilla.suse.com/959025

1 0

openSUSE-RU-2016:0154-1: moderate: Recommended update for xf86-video-intel
by maintenance＠opensuse.org 18 Jan '16

18 Jan '16

openSUSE Recommended Update: Recommended update for xf86-video-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0154-1 Rating: moderate References: #942158 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xf86-video-intel fixes the following issues: - Avoid SIGBUS due to kernel issues (boo#942158). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-54=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xf86-video-intel-2.99.916-24.1 xf86-video-intel-debuginfo-2.99.916-24.1 xf86-video-intel-debugsource-2.99.916-24.1 - openSUSE 13.2 (x86_64): xf86-video-intel-32bit-2.99.916-24.1 xf86-video-intel-debuginfo-32bit-2.99.916-24.1 References: https://bugzilla.suse.com/942158

1 0

openSUSE-RU-2016:0153-1: important: Recommended update for scilab
by maintenance＠opensuse.org 18 Jan '16

18 Jan '16

openSUSE Recommended Update: Recommended update for scilab ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0153-1 Rating: important References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for scilab fixes the following issues: - Removed patch which caused unforeseen issues (see e.g. http://bugzilla.scilab.org/14262) e.g. the menubar and several GUI elements of the core scilab application were not working. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-56=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libscilab5-5.5.2-4.1 libscilab5-debuginfo-5.5.2-4.1 scilab-5.5.2-4.1 scilab-debuginfo-5.5.2-4.1 scilab-debugsource-5.5.2-4.1 scilab-devel-5.5.2-4.1 - openSUSE Leap 42.1 (noarch): scilab-lang-5.5.2-4.1 scilab-modules-5.5.2-4.1 scilab-modules-doc-5.5.2-4.1 scilab-modules-doc-lang-5.5.2-4.1 scilab-tests-5.5.2-4.1 References:

1 0

openSUSE-RU-2016:0152-1: moderate: Recommended update for ocfs2-tools
by maintenance＠opensuse.org 18 Jan '16

18 Jan '16

openSUSE Recommended Update: Recommended update for ocfs2-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0152-1 Rating: moderate References: #959660 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ocfs2-tools fixes the following issues: - Make pcmk as default stack for ocfs2 (boo#959660) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-55=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ocfs2-tools-1.8.4-6.1 ocfs2-tools-debuginfo-1.8.4-6.1 ocfs2-tools-debugsource-1.8.4-6.1 ocfs2-tools-devel-1.8.4-6.1 ocfs2-tools-devel-static-1.8.4-6.1 ocfs2-tools-o2cb-1.8.4-6.1 ocfs2-tools-o2cb-debuginfo-1.8.4-6.1 ocfs2console-1.8.4-6.1 ocfs2console-debuginfo-1.8.4-6.1 References: https://bugzilla.suse.com/959660

1 0

openSUSE-RU-2016:0151-1: moderate: Recommended update for clamav-database
by maintenance＠opensuse.org 18 Jan '16

18 Jan '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0151-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh on January 11th 2016. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-53=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201601110000-35.1 References:

1 0

openSUSE-RU-2016:0148-1: Resolve a dependency issue with libmatroska
by maintenance＠opensuse.org 16 Jan '16

16 Jan '16

openSUSE Recommended Update: Resolve a dependency issue with libmatroska ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0148-1 Rating: low References: #961994 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Resolve a dependency issue with libmatroska - boo#961994 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-52=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libvlc5-2.1.5-17.1 libvlc5-debuginfo-2.1.5-17.1 libvlccore7-2.1.5-17.1 libvlccore7-debuginfo-2.1.5-17.1 vlc-2.1.5-17.1 vlc-debuginfo-2.1.5-17.1 vlc-debugsource-2.1.5-17.1 vlc-devel-2.1.5-17.1 vlc-gnome-2.1.5-17.1 vlc-gnome-debuginfo-2.1.5-17.1 vlc-noX-2.1.5-17.1 vlc-noX-debuginfo-2.1.5-17.1 vlc-qt-2.1.5-17.1 vlc-qt-debuginfo-2.1.5-17.1 - openSUSE 13.1 (noarch): vlc-noX-lang-2.1.5-17.1 References: https://bugzilla.suse.com/961994

1 0

openSUSE-RU-2016:0147-1: Resolve a dependency issue with libmatroska
by maintenance＠opensuse.org 16 Jan '16

16 Jan '16

openSUSE Recommended Update: Resolve a dependency issue with libmatroska ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0147-1 Rating: low References: #961994 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Resolve a dependency issue with libmatroska - boo#961994 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-51=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): mkvtoolnix-6.3.0-2.3.1 mkvtoolnix-debuginfo-6.3.0-2.3.1 mkvtoolnix-debugsource-6.3.0-2.3.1 References: https://bugzilla.suse.com/961994

1 0