December 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:3186-1: moderate: Recommended update for julia
by maintenance＠opensuse.org 16 Dec '16

16 Dec '16

openSUSE Recommended Update: Recommended update for julia ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3186-1 Rating: moderate References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update provides the latest bugfix release for julia. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1493=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1493=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): julia-0.4.7-3.1 julia-compat-0.4.7-3.1 julia-compat-debuginfo-0.4.7-3.1 julia-compat-debugsource-0.4.7-3.1 julia-compat-devel-0.4.7-3.1 julia-compat-devel-debuginfo-0.4.7-3.1 julia-debuginfo-0.4.7-3.1 julia-debugsource-0.4.7-3.1 julia-devel-0.4.7-3.1 julia-devel-debuginfo-0.4.7-3.1 - openSUSE Leap 42.2 (noarch): julia-doc-0.4.7-3.1 julia-examples-0.4.7-3.1 - openSUSE Leap 42.1 (i586 x86_64): julia-0.4.7-10.2 julia-debuginfo-0.4.7-10.2 julia-debugsource-0.4.7-10.2 julia-devel-0.4.7-10.2 julia-devel-debuginfo-0.4.7-10.2 - openSUSE Leap 42.1 (noarch): julia-doc-0.4.7-10.2 julia-examples-0.4.7-10.2 - openSUSE Leap 42.1 (x86_64): julia-compat-0.4.7-10.2 julia-compat-debuginfo-0.4.7-10.2 julia-compat-debugsource-0.4.7-10.2 julia-compat-devel-0.4.7-10.2 julia-compat-devel-debuginfo-0.4.7-10.2 References:

1 0

openSUSE-OU-2016:3185-1: moderate: Add sshpass to the SUSE Package Hub
by maintenance＠opensuse.org 16 Dec '16

16 Dec '16

openSUSE Optional Update: Add sshpass to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:3185-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update add sshpass to the SUSE Package Hub. Sshpass is a tool for non-interactively performing password authentication with SSH's so called "interactive keyboard password authentication". This is an alternative to the more secure public key authentication method. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-1495=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): sshpass-1.06-2.1 References:

1 0

openSUSE-SU-2016:3184-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 16 Dec '16

16 Dec '16

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3184-1 Rating: important References: #1011922 #1015422 Cross-References: CVE-2016-9080 CVE-2016-9893 CVE-2016-9894 CVE-2016-9895 CVE-2016-9896 CVE-2016-9897 CVE-2016-9898 CVE-2016-9899 CVE-2016-9900 CVE-2016-9901 CVE-2016-9902 CVE-2016-9903 CVE-2016-9904 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update to MozillaFirefox 50.1.0 fixes the following vulnerabilities: - CVE-2016-9894: Buffer overflow in SkiaGL - CVE-2016-9899: Use-after-free while manipulating DOM events and audio elements - CVE-2016-9895: CSP bypass using marquee tag - CVE-2016-9896: Use-after-free with WebVR - CVE-2016-9897: Memory corruption in libGLES - CVE-2016-9898: Use-after-free in Editor while manipulating DOM subtrees - CVE-2016-9900: Restricted external resources can be loaded by SVG images through data URLs - CVE-2016-9904: Cross-origin information leak in shared atoms - CVE-2016-9901: Data from Pocket server improperly sanitized before execution - CVE-2016-9902: Pocket extension does not validate the origin of events - CVE-2016-9903: XSS injection vulnerability in add-ons SDK - CVE-2016-9080: Memory safety bugs fixed in Firefox 50.1 - CVE-2016-9893: Memory safety bugs fixed in Firefox 50.1 and Firefox ESR 45.6 The following bugs were fixed: - boo#1011922: fix crash after a few seconds of usage on AArch64 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1490=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1490=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1490=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): MozillaFirefox-50.1.0-45.1 MozillaFirefox-branding-upstream-50.1.0-45.1 MozillaFirefox-buildsymbols-50.1.0-45.1 MozillaFirefox-debuginfo-50.1.0-45.1 MozillaFirefox-debugsource-50.1.0-45.1 MozillaFirefox-devel-50.1.0-45.1 MozillaFirefox-translations-common-50.1.0-45.1 MozillaFirefox-translations-other-50.1.0-45.1 - openSUSE Leap 42.1 (i586 x86_64): MozillaFirefox-50.1.0-45.1 MozillaFirefox-branding-upstream-50.1.0-45.1 MozillaFirefox-buildsymbols-50.1.0-45.1 MozillaFirefox-debuginfo-50.1.0-45.1 MozillaFirefox-debugsource-50.1.0-45.1 MozillaFirefox-devel-50.1.0-45.1 MozillaFirefox-translations-common-50.1.0-45.1 MozillaFirefox-translations-other-50.1.0-45.1 - openSUSE 13.2 (i586 x86_64): MozillaFirefox-50.1.0-94.1 MozillaFirefox-branding-upstream-50.1.0-94.1 MozillaFirefox-buildsymbols-50.1.0-94.1 MozillaFirefox-debuginfo-50.1.0-94.1 MozillaFirefox-debugsource-50.1.0-94.1 MozillaFirefox-devel-50.1.0-94.1 MozillaFirefox-translations-common-50.1.0-94.1 MozillaFirefox-translations-other-50.1.0-94.1 References: https://www.suse.com/security/cve/CVE-2016-9080.html https://www.suse.com/security/cve/CVE-2016-9893.html https://www.suse.com/security/cve/CVE-2016-9894.html https://www.suse.com/security/cve/CVE-2016-9895.html https://www.suse.com/security/cve/CVE-2016-9896.html https://www.suse.com/security/cve/CVE-2016-9897.html https://www.suse.com/security/cve/CVE-2016-9898.html https://www.suse.com/security/cve/CVE-2016-9899.html https://www.suse.com/security/cve/CVE-2016-9900.html https://www.suse.com/security/cve/CVE-2016-9901.html https://www.suse.com/security/cve/CVE-2016-9902.html https://www.suse.com/security/cve/CVE-2016-9903.html https://www.suse.com/security/cve/CVE-2016-9904.html https://bugzilla.suse.com/1011922 https://bugzilla.suse.com/1015422

1 0

openSUSE-RU-2016:3182-1: moderate: Recommended update for haproxy
by maintenance＠opensuse.org 16 Dec '16

16 Dec '16

openSUSE Recommended Update: Recommended update for haproxy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3182-1 Rating: moderate References: #1003264 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides haproxy version 1.6.9, which brings fixes and enhancements: - Properly mark the server address as unset on connect retry. - Fix possible crash when using sc_trackers with wrong table. - Fix random problems with the "sni" directive. - Initialize avail_in/next_in even during flush. - Fix listening IP address storage for frontends. - Fix breakage of "reqdeny" causing random crashes. - Use asynchronous signal delivery and do not unblock undesired signals. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1491=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): haproxy-1.6.9-3.1 haproxy-debuginfo-1.6.9-3.1 haproxy-debugsource-1.6.9-3.1 References: https://bugzilla.suse.com/1003264

1 0

openSUSE-RU-2016:3181-1: moderate: Recommended update for opera
by maintenance＠opensuse.org 16 Dec '16

16 Dec '16

openSUSE Recommended Update: Recommended update for opera ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3181-1 Rating: moderate References: Affected Products: openSUSE Leap 42.2:NonFree openSUSE Leap 42.1:NonFree ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: Opera was updated to version 42.0.2393.85 to deliver a number of upstream improvements: - built-in currency converter - improved start-up performance - improved news feed handling Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2:NonFree: zypper in -t patch openSUSE-2016-1494=1 - openSUSE Leap 42.1:NonFree: zypper in -t patch openSUSE-2016-1494=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2:NonFree (x86_64): opera-42.0.2393.85-9.1 - openSUSE Leap 42.1:NonFree (x86_64): opera-42.0.2393.85-46.1 References:

1 0

openSUSE-RU-2016:3180-1: Recommended update for ninja
by maintenance＠opensuse.org 16 Dec '16

16 Dec '16

openSUSE Recommended Update: Recommended update for ninja ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3180-1 Rating: low References: #1014177 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ninja fixes the following issues: - Add macros.ninja (bsc#1014177) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1489=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ninja-1.6.0-9.1 ninja-debuginfo-1.6.0-9.1 ninja-debugsource-1.6.0-9.1 References: https://bugzilla.suse.com/1014177

1 0

openSUSE-SU-2016:3179-1: important: Security update for lxc
by opensuse-security＠opensuse.org 16 Dec '16

16 Dec '16

openSUSE Security Update: Security update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3179-1 Rating: important References: #1010933 Cross-References: CVE-2016-8649 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lxc fixes the following issue: - CVE-2016-8649: guest escape via ptrace of lxc-attach (boo#1010933). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1488=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1488=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1488=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): lxc-1.1.2-10.1 lxc-debuginfo-1.1.2-10.1 lxc-debugsource-1.1.2-10.1 lxc-devel-1.1.2-10.1 - openSUSE Leap 42.1 (i586 x86_64): lxc-1.1.2-9.1 lxc-debuginfo-1.1.2-9.1 lxc-debugsource-1.1.2-9.1 lxc-devel-1.1.2-9.1 - openSUSE 13.2 (i586 x86_64): lxc-1.0.6-12.1 lxc-debuginfo-1.0.6-12.1 lxc-debugsource-1.0.6-12.1 lxc-devel-1.0.6-12.1 References: https://www.suse.com/security/cve/CVE-2016-8649.html https://bugzilla.suse.com/1010933

1 0

openSUSE-RU-2016:3178-1: moderate: Recommended update for xdg-utils
by maintenance＠opensuse.org 16 Dec '16

16 Dec '16

openSUSE Recommended Update: Recommended update for xdg-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3178-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for xdg-utils fixes the following issue: - Fix upstream typo in xdg-open-no-extra-slash.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1492=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): xdg-utils-20150119-9.1 References:

1 0

openSUSE-SU-2016:3177-1: moderate: Security update for gc
by opensuse-security＠opensuse.org 16 Dec '16

16 Dec '16

openSUSE Security Update: Security update for gc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3177-1 Rating: moderate References: #1011276 Cross-References: CVE-2016-9427 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gc fixes the following issues: - integer overflow in GC_MALLOC_ATOMIC() (CVE-2016-9427, bsc#1011276) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1487=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gc-debugsource-7.2d-4.3.1 gc-devel-7.2d-4.3.1 libgc1-7.2d-4.3.1 libgc1-debuginfo-7.2d-4.3.1 References: https://www.suse.com/security/cve/CVE-2016-9427.html https://bugzilla.suse.com/1011276

1 0

openSUSE-RU-2016:3164-1: moderate: Recommended update for python-Twisted
by maintenance＠opensuse.org 15 Dec '16

15 Dec '16

openSUSE Recommended Update: Recommended update for python-Twisted ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3164-1 Rating: moderate References: #1001523 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-Twisted fixes the following issues: - alternative twistd could not be master (bnc #1001523) python-Twisted was updated to 16.4.0, including all upstream improvements and bug fixes. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1485=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): python-Twisted-16.4.0-4.1 python-Twisted-debuginfo-16.4.0-4.1 python-Twisted-debugsource-16.4.0-4.1 python-Twisted-doc-16.4.0-4.1 References: https://bugzilla.suse.com/1001523

1 0