December 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:3092-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3092-1 Rating: moderate References: #1008029 #988486 Cross-References: CVE-2016-5385 CVE-2016-9137 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for php7 fixes the following security issues: - CVE-2016-5385: Setting HTTP_PROXY environment variable via Proxy header (httpoxy) (bsc#988486). - CVE-2016-9137: Fixing a Use After Free in unserialize() (bsc#1008029). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1440=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_php7-7.0.7-6.2 apache2-mod_php7-debuginfo-7.0.7-6.2 php7-7.0.7-6.2 php7-bcmath-7.0.7-6.2 php7-bcmath-debuginfo-7.0.7-6.2 php7-bz2-7.0.7-6.2 php7-bz2-debuginfo-7.0.7-6.2 php7-calendar-7.0.7-6.2 php7-calendar-debuginfo-7.0.7-6.2 php7-ctype-7.0.7-6.2 php7-ctype-debuginfo-7.0.7-6.2 php7-curl-7.0.7-6.2 php7-curl-debuginfo-7.0.7-6.2 php7-dba-7.0.7-6.2 php7-dba-debuginfo-7.0.7-6.2 php7-debuginfo-7.0.7-6.2 php7-debugsource-7.0.7-6.2 php7-devel-7.0.7-6.2 php7-dom-7.0.7-6.2 php7-dom-debuginfo-7.0.7-6.2 php7-enchant-7.0.7-6.2 php7-enchant-debuginfo-7.0.7-6.2 php7-exif-7.0.7-6.2 php7-exif-debuginfo-7.0.7-6.2 php7-fastcgi-7.0.7-6.2 php7-fastcgi-debuginfo-7.0.7-6.2 php7-fileinfo-7.0.7-6.2 php7-fileinfo-debuginfo-7.0.7-6.2 php7-firebird-7.0.7-6.2 php7-firebird-debuginfo-7.0.7-6.2 php7-fpm-7.0.7-6.2 php7-fpm-debuginfo-7.0.7-6.2 php7-ftp-7.0.7-6.2 php7-ftp-debuginfo-7.0.7-6.2 php7-gd-7.0.7-6.2 php7-gd-debuginfo-7.0.7-6.2 php7-gettext-7.0.7-6.2 php7-gettext-debuginfo-7.0.7-6.2 php7-gmp-7.0.7-6.2 php7-gmp-debuginfo-7.0.7-6.2 php7-iconv-7.0.7-6.2 php7-iconv-debuginfo-7.0.7-6.2 php7-imap-7.0.7-6.2 php7-imap-debuginfo-7.0.7-6.2 php7-intl-7.0.7-6.2 php7-intl-debuginfo-7.0.7-6.2 php7-json-7.0.7-6.2 php7-json-debuginfo-7.0.7-6.2 php7-ldap-7.0.7-6.2 php7-ldap-debuginfo-7.0.7-6.2 php7-mbstring-7.0.7-6.2 php7-mbstring-debuginfo-7.0.7-6.2 php7-mcrypt-7.0.7-6.2 php7-mcrypt-debuginfo-7.0.7-6.2 php7-mysql-7.0.7-6.2 php7-mysql-debuginfo-7.0.7-6.2 php7-odbc-7.0.7-6.2 php7-odbc-debuginfo-7.0.7-6.2 php7-opcache-7.0.7-6.2 php7-opcache-debuginfo-7.0.7-6.2 php7-openssl-7.0.7-6.2 php7-openssl-debuginfo-7.0.7-6.2 php7-pcntl-7.0.7-6.2 php7-pcntl-debuginfo-7.0.7-6.2 php7-pdo-7.0.7-6.2 php7-pdo-debuginfo-7.0.7-6.2 php7-pgsql-7.0.7-6.2 php7-pgsql-debuginfo-7.0.7-6.2 php7-phar-7.0.7-6.2 php7-phar-debuginfo-7.0.7-6.2 php7-posix-7.0.7-6.2 php7-posix-debuginfo-7.0.7-6.2 php7-pspell-7.0.7-6.2 php7-pspell-debuginfo-7.0.7-6.2 php7-readline-7.0.7-6.2 php7-readline-debuginfo-7.0.7-6.2 php7-shmop-7.0.7-6.2 php7-shmop-debuginfo-7.0.7-6.2 php7-snmp-7.0.7-6.2 php7-snmp-debuginfo-7.0.7-6.2 php7-soap-7.0.7-6.2 php7-soap-debuginfo-7.0.7-6.2 php7-sockets-7.0.7-6.2 php7-sockets-debuginfo-7.0.7-6.2 php7-sqlite-7.0.7-6.2 php7-sqlite-debuginfo-7.0.7-6.2 php7-sysvmsg-7.0.7-6.2 php7-sysvmsg-debuginfo-7.0.7-6.2 php7-sysvsem-7.0.7-6.2 php7-sysvsem-debuginfo-7.0.7-6.2 php7-sysvshm-7.0.7-6.2 php7-sysvshm-debuginfo-7.0.7-6.2 php7-tidy-7.0.7-6.2 php7-tidy-debuginfo-7.0.7-6.2 php7-tokenizer-7.0.7-6.2 php7-tokenizer-debuginfo-7.0.7-6.2 php7-wddx-7.0.7-6.2 php7-wddx-debuginfo-7.0.7-6.2 php7-xmlreader-7.0.7-6.2 php7-xmlreader-debuginfo-7.0.7-6.2 php7-xmlrpc-7.0.7-6.2 php7-xmlrpc-debuginfo-7.0.7-6.2 php7-xmlwriter-7.0.7-6.2 php7-xmlwriter-debuginfo-7.0.7-6.2 php7-xsl-7.0.7-6.2 php7-xsl-debuginfo-7.0.7-6.2 php7-zip-7.0.7-6.2 php7-zip-debuginfo-7.0.7-6.2 php7-zlib-7.0.7-6.2 php7-zlib-debuginfo-7.0.7-6.2 - openSUSE Leap 42.2 (noarch): php7-pear-7.0.7-6.2 php7-pear-Archive_Tar-7.0.7-6.2 References: https://www.suse.com/security/cve/CVE-2016-5385.html https://www.suse.com/security/cve/CVE-2016-9137.html https://bugzilla.suse.com/1008029 https://bugzilla.suse.com/988486

1 0

openSUSE-SU-2016:3091-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3091-1 Rating: moderate References: #1001066 #1007245 Cross-References: CVE-2016-6823 CVE-2016-8862 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ImageMagick fixes the following issues: - Memory allocation failure in AcquireMagickMemory (CVE-2016-8862) [bsc#1007245] - update incomplete patch of CVE-2016-6823 [bsc#1001066] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1443=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ImageMagick-6.8.8.1-24.2 ImageMagick-debuginfo-6.8.8.1-24.2 ImageMagick-debugsource-6.8.8.1-24.2 ImageMagick-devel-6.8.8.1-24.2 ImageMagick-extra-6.8.8.1-24.2 ImageMagick-extra-debuginfo-6.8.8.1-24.2 libMagick++-6_Q16-3-6.8.8.1-24.2 libMagick++-6_Q16-3-debuginfo-6.8.8.1-24.2 libMagick++-devel-6.8.8.1-24.2 libMagickCore-6_Q16-1-6.8.8.1-24.2 libMagickCore-6_Q16-1-debuginfo-6.8.8.1-24.2 libMagickWand-6_Q16-1-6.8.8.1-24.2 libMagickWand-6_Q16-1-debuginfo-6.8.8.1-24.2 perl-PerlMagick-6.8.8.1-24.2 perl-PerlMagick-debuginfo-6.8.8.1-24.2 - openSUSE Leap 42.1 (x86_64): ImageMagick-devel-32bit-6.8.8.1-24.2 libMagick++-6_Q16-3-32bit-6.8.8.1-24.2 libMagick++-6_Q16-3-debuginfo-32bit-6.8.8.1-24.2 libMagick++-devel-32bit-6.8.8.1-24.2 libMagickCore-6_Q16-1-32bit-6.8.8.1-24.2 libMagickCore-6_Q16-1-debuginfo-32bit-6.8.8.1-24.2 libMagickWand-6_Q16-1-32bit-6.8.8.1-24.2 libMagickWand-6_Q16-1-debuginfo-32bit-6.8.8.1-24.2 - openSUSE Leap 42.1 (noarch): ImageMagick-doc-6.8.8.1-24.2 References: https://www.suse.com/security/cve/CVE-2016-6823.html https://www.suse.com/security/cve/CVE-2016-8862.html https://bugzilla.suse.com/1001066 https://bugzilla.suse.com/1007245

1 0

openSUSE-SU-2016:3090-1: moderate: Security update for perl-DBD-mysql
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for perl-DBD-mysql ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3090-1 Rating: moderate References: #1012546 Cross-References: CVE-2016-1251 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for perl-DBD-mysql fixes the following issues: - perl-DBD-mysql could crash when executing maliciously crafted prepared statements. (CVE-2016-1251, boo#1012546) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1441=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): perl-DBD-mysql-4.021-8.3.1 perl-DBD-mysql-debuginfo-4.021-8.3.1 perl-DBD-mysql-debugsource-4.021-8.3.1 References: https://www.suse.com/security/cve/CVE-2016-1251.html https://bugzilla.suse.com/1012546

1 0

openSUSE-SU-2016:3089-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3089-1 Rating: moderate References: #1001066 #1007245 Cross-References: CVE-2016-6823 CVE-2016-8862 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ImageMagick fixes the following issues: - Memory allocation failure in AcquireMagickMemory (CVE-2016-8862) [bsc#1007245] - update incomplete patch of CVE-2016-6823 [bsc#1001066] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1445=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ImageMagick-6.8.8.1-22.2 ImageMagick-debuginfo-6.8.8.1-22.2 ImageMagick-debugsource-6.8.8.1-22.2 ImageMagick-devel-6.8.8.1-22.2 ImageMagick-extra-6.8.8.1-22.2 ImageMagick-extra-debuginfo-6.8.8.1-22.2 libMagick++-6_Q16-3-6.8.8.1-22.2 libMagick++-6_Q16-3-debuginfo-6.8.8.1-22.2 libMagick++-devel-6.8.8.1-22.2 libMagickCore-6_Q16-1-6.8.8.1-22.2 libMagickCore-6_Q16-1-debuginfo-6.8.8.1-22.2 libMagickWand-6_Q16-1-6.8.8.1-22.2 libMagickWand-6_Q16-1-debuginfo-6.8.8.1-22.2 perl-PerlMagick-6.8.8.1-22.2 perl-PerlMagick-debuginfo-6.8.8.1-22.2 - openSUSE Leap 42.2 (x86_64): ImageMagick-devel-32bit-6.8.8.1-22.2 libMagick++-6_Q16-3-32bit-6.8.8.1-22.2 libMagick++-6_Q16-3-debuginfo-32bit-6.8.8.1-22.2 libMagick++-devel-32bit-6.8.8.1-22.2 libMagickCore-6_Q16-1-32bit-6.8.8.1-22.2 libMagickCore-6_Q16-1-debuginfo-32bit-6.8.8.1-22.2 libMagickWand-6_Q16-1-32bit-6.8.8.1-22.2 libMagickWand-6_Q16-1-debuginfo-32bit-6.8.8.1-22.2 - openSUSE Leap 42.2 (noarch): ImageMagick-doc-6.8.8.1-22.2 References: https://www.suse.com/security/cve/CVE-2016-6823.html https://www.suse.com/security/cve/CVE-2016-8862.html https://bugzilla.suse.com/1001066 https://bugzilla.suse.com/1007245

1 0

openSUSE-SU-2016:3088-1: moderate: Security update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3088-1 Rating: moderate References: #1005522 #1005523 #1005524 #1005525 #1005526 #1005527 #1005528 Cross-References: CVE-2016-5542 CVE-2016-5554 CVE-2016-5556 CVE-2016-5568 CVE-2016-5573 CVE-2016-5582 CVE-2016-5597 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for java-1_7_0-openjdk fixes the following issues: - Update to 2.6.8 - OpenJDK 7u121 * Security fixes + S8151921: Improved page resolution + S8155968: Update command line options + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522) + S8157176: Improved classfile parsing + S8157739, CVE-2016-5554: Classloader Consistency Checking (bsc#1005523) + S8157749: Improve handling of DNS error replies + S8157753: Audio replay enhancement + S8157759: LCMS Transform Sampling Enhancement + S8157764: Better handling of interpolation plugins + S8158302: Handle contextual glyph substitutions + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525) + S8159495: Fix index offsets + S8159503: Amend Annotation Actions + S8159511: Stack map validation + S8159515: Improve indy validation + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526) + S8160090: Better signature handling in pack200 + S8160094: Improve pack200 layout + S8160098: Clean up color profiles + S8160591, CVE-2016-5582: Improve internal array handling (bsc#1005527) + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528) + PR3207, RH1367357: lcms2: Out-of-bounds read in Type_MLU_Read() + CVE-2016-5556 (bsc#1005524) * Import of OpenJDK 7 u121 build 0 + S6624200: Regression test fails: test/closed/javax/swing/JMenuItem/4654927/bug4654927.java + S6882559: new JEditorPane("text/plain","") fails for null context class loader + S7090158: Networking Libraries don't build with javac -Werror + S7125055: ContentHandler.getContent API changed in error + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on windows + S7187051: ShortRSAKeynnn.sh tests should do cleanup before start test + S8000626: Implement dead key detection for KeyEvent on Linux + S8003890: corelibs test scripts should pass TESTVMOPTS + S8005629: javac warnings compiling java.awt.EventDispatchThread and sun.awt.X11.XIconWindow + S8010297: Missing isLoggable() checks in logging code + S8010782: clean up source files containing carriage return characters + S8014431: cleanup warnings indicated by the -Wunused-value compiler option on linux + S8015265: revise the fix for 8007037 + S8016747: Replace deprecated PlatformLogger isLoggable(int) with isLoggable(Level) + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame demo + S8024756: method grouping tabs are not selectable + S8026741: jdk8 l10n resource file translation update 5 + S8048147: Privilege tests with JAAS Subject.doAs + S8048357: PKCS basic tests + S8049171: Additional tests for jarsigner's warnings + S8059177: jdk8u40 l10n resource file translation update 1 + S8075584: test for 8067364 depends on hardwired text advance + S8076486: [TESTBUG] javax/security/auth/Subject/doAs/NestedActions.java fails if extra VM options are given + S8077953: [TEST_BUG] com/sun/management/OperatingSystemMXBean/TestTotalSwap.java Compilation failed after JDK-8077387 + S8080628: No mnemonics on Open and Save buttons in JFileChooser + S8083601: jdk8u60 l10n resource file translation update 2 + S8140530: Creating a VolatileImage with size 0,0 results in no longer working g2d.drawString + S8142926: OutputAnalyzer's shouldXXX() calls return this + S8143134: L10n resource file translation update + S8147077: IllegalArgumentException thrown by api/java_awt/Component/FlipBufferStrategy/indexTGF_General + S8148127: IllegalArgumentException thrown by JCK test api/java_awt/Component/FlipBufferStrategy/indexTGF_General in opengl pipeline + S8150611: Security problem on sun.misc.resources.Messages* + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp + S8158734: JEditorPane.createEditorKitForContentType throws NPE after 6882559 + S8159684: (tz) Support tzdata2016f + S8160934: isnan() is not available on older MSVC compilers + S8162411: Service Menu services 2 + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh failing after JDK-8155968 + S8162511: 8u111 L10n resource file updates + S8162792: Remove constraint DSA keySize < 1024 from jdk.jar.disabledAlgorithms in jdk8 + S8164452: 8u111 L10n resource file update - msgdrop 20 + S8165816: jarsigner -verify shows jar unsigned if it was signed with a weak algorithm + S8166381: Back out changes to the java.security file to not disable MD5 * Backports + S6604109, PR3162: javax.print.PrintServiceLookup.lookupPrintServices fails SOMETIMES for Cups + S6907252, PR3162: ZipFileInputStream Not Thread-Safe + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh failed on 7u45 Embedded linux-ppc* + S8028479, PR3162: runNameEquals still cannot precisely detect if a usable native krb5 is available + S8034057, PR3162: Files.getFileStore and Files.isWritable do not work with SUBST'ed drives (win) + S8038491, PR3162: Improve synchronization in ZipFile.read() + S8038502, PR3162: Deflater.needsInput() should use synchronization + S8059411, PR3162: RowSetWarning does not correctly chain warnings + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column range validation to isdefinitlyWritable + S8066188, PR3162: BaseRowSet returns the wrong default value for escape processing + S8072466, PR3162: Deadlock when initializing MulticastSocket and DatagramSocket + S8075118, PR3162: JVM stuck in infinite loop during verification + S8076579, PR3162: Popping a stack frame after exception breakpoint sets last method param to exception + S8078495, PR3162: End time checking for native TGT is wrong + S8078668, PR3162: jar usage string mentions unsupported option '-n' + S8080115, PR3162: (fs) Crash in libgio when calling Files.probeContentType(path) from parallel threads + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for TimeZone parsing problem + S8129957, PR3162: Deadlock in JNDI LDAP implementation when closing the LDAP context + S8130136, PR3162: Swing window sometimes fails to repaint partially when it becomes exposed + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails when two successive stores in an iteration are determined to be equal + S8132551, PR3162: Initialize local variables before returning them in p11_convert.c + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails after changes for JDK-8080115 + S8133666, PR3162: OperatingSystemMXBean reports abnormally high machine CPU consumption on Linux + S8135002, PR3162: Fix or remove broken links in objectMonitor.cpp comments + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate + S8137230, PR3162: TEST_BUG: java/nio/channels/FileChannel/LoopingTruncate.java timed out + S8139373, PR3162: [TEST_BUG] java/net/MulticastSocket/MultiDead.java failed with timeout + S8140249, PR3162: JVM Crashing During startUp If Flight Recording is enabled + S8141491, PR3160, G592292: Unaligned memory access in Bits.c + S8144483, PR3162: One long Safepoint pause directly after each GC log rotation + S8149611, PR3160, G592292: Add tests for Unsafe.copySwapMemory * Bug fixes + S8078628, PR3151: Zero build fails with pre-compiled headers disabled + PR3128: pax-mark-vm script calls "exit -1" which is invalid in dash + PR3131: PaX marking fails on filesystems which don't support extended attributes + PR3135: Makefile.am rule stamps/add/tzdata-support-debug.stamp has a typo in add-tzdata dependency + PR3141: Pass $(CC) and $(CXX) to OpenJDK build + PR3166: invalid zip timestamp handling leads to error building bootstrap-javac + PR3202: Update infinality configure test + PR3212: Disable ARM32 JIT by default * CACAO + PR3136: CACAO is broken due to 2 new native methods in sun.misc.Unsafe (from S8158260) * JamVM + PR3134: JamVM is broken due to 2 new native methods in sun.misc.Unsafe (from S8158260) * AArch64 port + S8167200, PR3204: AArch64: Broken stack pointer adjustment in interpreter + S8168888: Port 8160591: Improve internal array handling to AArch64. + PR3211: AArch64 build fails with pre-compiled headers disabled - Changed patch: * java-1_7_0-openjdk-gcc6.patch + Rediff to changed context - Disable arm32 JIT, since its build broken (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1444=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1444=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): java-1_7_0-openjdk-1.7.0.121-37.2 java-1_7_0-openjdk-accessibility-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-debugsource-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-devel-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-headless-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-debugsource-1.7.0.121-37.2 java-1_7_0-openjdk-demo-1.7.0.121-37.2 java-1_7_0-openjdk-demo-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-devel-1.7.0.121-37.2 java-1_7_0-openjdk-devel-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-headless-1.7.0.121-37.2 java-1_7_0-openjdk-headless-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-src-1.7.0.121-37.2 - openSUSE Leap 42.2 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.121-37.2 - openSUSE Leap 42.1 (i586 x86_64): java-1_7_0-openjdk-1.7.0.121-37.2 java-1_7_0-openjdk-accessibility-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-debugsource-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-devel-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-headless-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-debugsource-1.7.0.121-37.2 java-1_7_0-openjdk-demo-1.7.0.121-37.2 java-1_7_0-openjdk-demo-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-devel-1.7.0.121-37.2 java-1_7_0-openjdk-devel-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-headless-1.7.0.121-37.2 java-1_7_0-openjdk-headless-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-src-1.7.0.121-37.2 - openSUSE Leap 42.1 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.121-37.2 References: https://www.suse.com/security/cve/CVE-2016-5542.html https://www.suse.com/security/cve/CVE-2016-5554.html https://www.suse.com/security/cve/CVE-2016-5556.html https://www.suse.com/security/cve/CVE-2016-5568.html https://www.suse.com/security/cve/CVE-2016-5573.html https://www.suse.com/security/cve/CVE-2016-5582.html https://www.suse.com/security/cve/CVE-2016-5597.html https://bugzilla.suse.com/1005522 https://bugzilla.suse.com/1005523 https://bugzilla.suse.com/1005524 https://bugzilla.suse.com/1005525 https://bugzilla.suse.com/1005526 https://bugzilla.suse.com/1005527 https://bugzilla.suse.com/1005528

1 0

openSUSE-SU-2016:3087-1: moderate: Security update for libass
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for libass ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3087-1 Rating: moderate References: #1002982 Cross-References: CVE-2016-7969 CVE-2016-7972 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libass fixes the following issues: - Fixed situations that could cause uninitialised memory to be used, leading to undefined behaviour. (boo#1002982, CVE-2016-7969, CVE-2016-7972) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1442=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1442=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libass-debugsource-0.12.3-6.1 libass-devel-0.12.3-6.1 libass5-0.12.3-6.1 libass5-debuginfo-0.12.3-6.1 - openSUSE Leap 42.1 (x86_64): libass5-32bit-0.12.3-6.1 libass5-debuginfo-32bit-0.12.3-6.1 - openSUSE 13.2 (i586 x86_64): libass-debugsource-0.12.1-2.8.1 libass-devel-0.12.1-2.8.1 libass5-0.12.1-2.8.1 libass5-debuginfo-0.12.1-2.8.1 - openSUSE 13.2 (x86_64): libass5-32bit-0.12.1-2.8.1 libass5-debuginfo-32bit-0.12.1-2.8.1 References: https://www.suse.com/security/cve/CVE-2016-7969.html https://www.suse.com/security/cve/CVE-2016-7972.html https://bugzilla.suse.com/1002982

1 0

openSUSE-SU-2016:3086-1: important: Security update for the openSUSE Leap 42.1 kernel.
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for the openSUSE Leap 42.1 kernel. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3086-1 Rating: important References: #1013604 Cross-References: CVE-2016-9576 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The openSUSE Leap 42.1 kernel has been updated to fix a security issue: - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg* or /dev/bsg* to elevate their privileges (bsc#1013604). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1439=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i686 x86_64): kernel-debug-4.1.36-41.1 kernel-debug-base-4.1.36-41.1 kernel-debug-base-debuginfo-4.1.36-41.1 kernel-debug-debuginfo-4.1.36-41.1 kernel-debug-debugsource-4.1.36-41.1 kernel-debug-devel-4.1.36-41.1 kernel-debug-devel-debuginfo-4.1.36-41.1 kernel-ec2-4.1.36-41.1 kernel-ec2-base-4.1.36-41.1 kernel-ec2-base-debuginfo-4.1.36-41.1 kernel-ec2-debuginfo-4.1.36-41.1 kernel-ec2-debugsource-4.1.36-41.1 kernel-ec2-devel-4.1.36-41.1 kernel-pv-4.1.36-41.1 kernel-pv-base-4.1.36-41.1 kernel-pv-base-debuginfo-4.1.36-41.1 kernel-pv-debuginfo-4.1.36-41.1 kernel-pv-debugsource-4.1.36-41.1 kernel-pv-devel-4.1.36-41.1 kernel-vanilla-4.1.36-41.1 kernel-vanilla-debuginfo-4.1.36-41.1 kernel-vanilla-debugsource-4.1.36-41.1 kernel-vanilla-devel-4.1.36-41.1 kernel-xen-4.1.36-41.1 kernel-xen-base-4.1.36-41.1 kernel-xen-base-debuginfo-4.1.36-41.1 kernel-xen-debuginfo-4.1.36-41.1 kernel-xen-debugsource-4.1.36-41.1 kernel-xen-devel-4.1.36-41.1 - openSUSE Leap 42.1 (i586 x86_64): kernel-default-4.1.36-41.1 kernel-default-base-4.1.36-41.1 kernel-default-base-debuginfo-4.1.36-41.1 kernel-default-debuginfo-4.1.36-41.1 kernel-default-debugsource-4.1.36-41.1 kernel-default-devel-4.1.36-41.1 kernel-obs-build-4.1.36-41.1 kernel-obs-build-debugsource-4.1.36-41.1 kernel-obs-qa-4.1.36-41.1 kernel-syms-4.1.36-41.1 - openSUSE Leap 42.1 (noarch): kernel-devel-4.1.36-41.1 kernel-docs-4.1.36-41.2 kernel-docs-html-4.1.36-41.2 kernel-docs-pdf-4.1.36-41.2 kernel-macros-4.1.36-41.1 kernel-source-4.1.36-41.1 kernel-source-vanilla-4.1.36-41.1 - openSUSE Leap 42.1 (i686): kernel-pae-4.1.36-41.1 kernel-pae-base-4.1.36-41.1 kernel-pae-base-debuginfo-4.1.36-41.1 kernel-pae-debuginfo-4.1.36-41.1 kernel-pae-debugsource-4.1.36-41.1 kernel-pae-devel-4.1.36-41.1 References: https://www.suse.com/security/cve/CVE-2016-9576.html https://bugzilla.suse.com/1013604

1 0

openSUSE-SU-2016:3085-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3085-1 Rating: important References: #1003606 #1006827 #1008557 #1011913 #1013001 #1013604 #1014120 #981825 Cross-References: CVE-2016-9576 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has 7 fixes is now available. Description: The openSUSE 14.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg* or /dev/bsg* to elevate their privileges (bsc#1013604). The following non-security bugs were fixed: - 8250_pci: Fix potential use-after-free in error path (bsc#1013001). - block_dev: do not test bdev->bd_contains when it is not stable (bsc#1008557). - drm/i915/vlv: Disable HPD in valleyview_crt_detect_hotplug() (bsc#1014120). - drm/i915/vlv: Make intel_crt_reset() per-encoder (bsc#1014120). - drm/i915/vlv: Reset the ADPA in vlv_display_power_well_init() (bsc#1014120). - drm/i915: Enable polling when we do not have hpd (bsc#1014120). - i2c: designware-baytrail: Add support for cherrytrail (bsc#1011913). - i2c: designware-baytrail: Pass dw_i2c_dev into helper functions (bsc#1011913). - i2c: designware: Prevent runtime suspend during adapter registration (bsc#1011913). - i2c: designware: Use transfer timeout from ioctl I2C_TIMEOUT (bsc#1011913). - i2c: designware: retry transfer on transient failure (bsc#1011913). - powerpc/xmon: Add xmon command to dump process/task similar to ps(1) (fate#322020). - sched/fair: Fix incorrect task group ->load_avg (bsc#981825). - serial: 8250_pci: Detach low-level driver during PCI error recovery (bsc#1013001). - target: fix tcm_rbd_gen_it_nexus for emulated XCOPY state (bsc#1003606). - x86/PCI: VMD: Synchronize with RCU freeing MSI IRQ descs (bsc#1006827). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1438=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): kernel-debug-4.4.36-8.1 kernel-debug-base-4.4.36-8.1 kernel-debug-base-debuginfo-4.4.36-8.1 kernel-debug-debuginfo-4.4.36-8.1 kernel-debug-debugsource-4.4.36-8.1 kernel-debug-devel-4.4.36-8.1 kernel-debug-devel-debuginfo-4.4.36-8.1 kernel-default-4.4.36-8.1 kernel-default-base-4.4.36-8.1 kernel-default-base-debuginfo-4.4.36-8.1 kernel-default-debuginfo-4.4.36-8.1 kernel-default-debugsource-4.4.36-8.1 kernel-default-devel-4.4.36-8.1 kernel-obs-build-4.4.36-8.1 kernel-obs-build-debugsource-4.4.36-8.1 kernel-obs-qa-4.4.36-8.1 kernel-syms-4.4.36-8.1 kernel-vanilla-4.4.36-8.1 kernel-vanilla-base-4.4.36-8.1 kernel-vanilla-base-debuginfo-4.4.36-8.1 kernel-vanilla-debuginfo-4.4.36-8.1 kernel-vanilla-debugsource-4.4.36-8.1 kernel-vanilla-devel-4.4.36-8.1 - openSUSE Leap 42.2 (noarch): kernel-devel-4.4.36-8.1 kernel-docs-4.4.36-8.2 kernel-docs-html-4.4.36-8.2 kernel-docs-pdf-4.4.36-8.2 kernel-macros-4.4.36-8.1 kernel-source-4.4.36-8.1 kernel-source-vanilla-4.4.36-8.1 References: https://www.suse.com/security/cve/CVE-2016-9576.html https://bugzilla.suse.com/1003606 https://bugzilla.suse.com/1006827 https://bugzilla.suse.com/1008557 https://bugzilla.suse.com/1011913 https://bugzilla.suse.com/1013001 https://bugzilla.suse.com/1013604 https://bugzilla.suse.com/1014120 https://bugzilla.suse.com/981825

1 0

openSUSE-RU-2016:3082-1: moderate: Recommended update for mpv
by maintenance＠opensuse.org 11 Dec '16

11 Dec '16

openSUSE Recommended Update: Recommended update for mpv ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3082-1 Rating: moderate References: #1012600 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mpv fixes the following issues: - Update to version 0.22.0. - audio/out: Add AudioUnit output driver for iOS. - demux_mkv: Parse Matroska colorimetry metadata. - filter_kernels: Add ability to taper kernels/windows and add tukey window. - osc: Add seekbarstyle=knob. - video/out: Add tct as modern caca alternative for true-color and 256-color terminals. - video: Add --hwdec=vdpau-copy mode. - Add --opengl-early-flush=auto. - Add --scale-taper, --scale-wtaper. - Add --scale-wblur. - osc: Add script message handlers for chapter/track/playlists. - Apply --autofit-larger after --autofit-smaller. - ao_alsa: Set subtitle track title to indicate hearing/visual impaired tracks. - ao_alsa: Disable chmap API use for mono/stereo. - build: Add required failure message for libavfilter check. - build: Fix compilation with mingw-w64/Clang. - build: Make VideoToolbox available on iOS. - command: Fix reset-on-next-file=all and tv-freq option. - command: If window-scale can't be set properly, set it as option. - demux_mkv: Don't recursively resolve timeline for opened reference files. - demux_mkv: Fix ordered chapter sources with ordered editions. - opengl: Compile against iOS OpenGLES implementation. - options: Handle legacy no-* sub-options. - osc: Add alpha animation to tooltip. (Fix lingering tooltip) - osc: Change default deadzonesize to 0.5. - osc: Don't wrap the title. - osc: Fix crash after reaching a certain position in limited lists. - osc: Fix crash with no chapters. - osc: Fix crashes when dragging seekbar across file changes. - osc: Fix displaying only half of the entries when at the end of a list. - osc: Fix missing chapter ticks with seekbarstyle=bar. - osc: slimbox: Fix clipping with seekbarstyle=bar. - osc: top/bottombar: Also scale when min-width is reached to match box/slimbox behavior. - osc: top/bottombar: Dynamically size timecodes according to timems. - osc: top/bottombar: Rescale layout to same size with scale=1. - osc: top/bottombar: Scale title if too large like box. - player: Consistently initialize screensaver state with --force-window. - player: Enable no-video subtitle display on coverart too. - player: Make --start-time work with --rebase-start-time=no. - player: Make sure non-video subtitle rendering is reset if video resumes. - player: Removing last playlist entry while looping should not stop. - player: Show subtitles on VO if --force-window is used. - player: Speed up audio/video re-sync when there is a huge delay. - vdpau: Fix hwdec uninit. - vo_opengl: Blend against background color for --alpha=blend. - vo_opengl: context_rpi: Fix stdatomic usage. - vo_opengl: Fix --blend-subtitles handling. - vo_opengl: Fix redrawing with hardware decoding. - vo_opengl: Partially re-enable glFlush() calls. - ytdl_hook: Sort chapters by time. - Fix incompatibility of the current version of mpv in obs with ffmpeg in packman. (boo#1012600) - config: Allow profile forward-references in default profile. - demux_lavf: Support mov edit lists and log errors if used. (FFmpeg only) - hwdec: Add support for CUDA and cuvid/NvDecode. (Useful on Linux where VDPAU still lacks HEVC Main 10 support) - osc: Add right-click behavior to playlist and chapter buttons. - osc: Add user-alterable margin for top/bottombar. - rpi: Add --hwdec=rpi-copy. - sd_lavc: Enable teletext. - vaapi: Support drm devices when running in vaapi-copy mode. - vd_lavc: Add hwdec wrapper for crystalhd. - vo_opengl: Add hw overlay support and use it for RPI. - vo_opengl: Basic mali fbdev support. - vo_opengl: rpi: Merge vo_rpi features. - vo_opengl: Remove pre/post/scale-shaders in favor of user-shaders. - Add --teletext-page option. - af_pan: Add af-command support to change the matrix. - af_rubberband: Add af-command and option to change the pitch. - command: Add a load-script command. - command: Add a video-dec-params property. - command: Add an apply-profile command. - command: Add audio-pts property to get the audio pts. - command: Add options to property list. - command: Add sub-text property for current subtitle text. - command: Export profile list as a property. - options: Add --hwdec=yes as alias for --hwdec=auto. - player: Add --player-operation-mode=pseudo-gui. - player: Add --video-osd=no option to disable video OSD. - player: Add --watch-later-directory option. - stream_bluray: Select title by playlist. (bd://mpls/[playlist]) - vo_opengl: Disable glFlush() by default, and add an option to enable it for testing. - af_rubberband: Default to channels=together. - command: Allow absolute seeks relative to end of stream. - command: Make bitrate properties observable. - command: Make most options observable. - msg: Make --log-file and --dump-stats accept config path expansion. - options: Deprecate --playlist-pos to --playlist-start. - options: Make input options generally runtime-settable. - Options: Rename subtitle options (--sub-text- → --sub; --ass- → --sub-ass-). - osc: Change default layout to bottombar, seekbarstyle to bar, use larger scalewindowed and scalefullscreen. - player: Make --terminal, --log-file, --dump-stats, --osc, --ytdl, --audio-*, --priority and --stop-screensaver settable at runtime. - vo_drm: Change CLI options - Change connector selection to accept human readable names (such as eDP-1, HDMI-A-2) rather than arbitrary numbers. - Change GPU selection to accept GPU number rather than device paths. - Merge connector and GPU selection into one --drm-connector. - Add support for --drm-connector=help. - Add support for --drm-* in EGL backend. - vo_opengl: Rename 3dlut-size to icc-3dlut-size. - command: Removed hwdec-active and hwdec-detected properties - command: Removed vo-cmdline - options: Drop unreferenced --bluray-angle option. - vo, ao: Disable positional parameter suboptions. - vo_xv: Replace no-colorkey with ck-method=none - TOOLS/zsh.pl: Die if main options cannot be parsed. - TOOLS/zsh.pl: Don't filter files by extension. - ao_alsa: Try to fallback to "hdmi" before "iec958" for spdif. - ao_rsound: Fix compilation. - aspect: Use nominal width instead of actual width for video-unscaled. - audio/out: Prevent underruns with spdif under certain conditions. - audio: Fix late audio start. - audio: Fix missed wakeup when changing audio output device. - audio: Fix segfault when yanking USB DAC. - charset_conv: Use CP949 instead of EUC-KR. - command: Don't log "ignore" command with -v verbosity. - command: Try selecting the next track if track switching fails. - demux_mkv: Fix crash if --ordered-chapters-files fails. - displayconfig: Treat a refresh rate of 1 as invalid. - ipc: Start log when listening to IPC socket. - mp_image: Fix clearing to black with p010 format. - osc: Fix scaling issues when toggling fullscreen. - osc: Align text vertically in top/bottombar. - osc: Change seekbar background's alpha scaling. - osc: Fix display of chapters and playlist scaling. - osc: Move tooltip to inside seekbar for top/bottombar. - osc: Show playlist/chapter list on prev/next instead of osd. - path: Set default ~~ paths to home directory. - player: Do not let pseudo-gui override user config settings. - player: Enable reading from stdin after loading input.conf. - player: Fix instant subtitle refresh on track switches. - player: Make --force-window work with opengl-cb. - stream_file: Don't use poll() on directories. - stream_lavf: Fix determining seekability. - sub: Actually apply text alignment options to non-ASS subtitles. - terminal-win: Support modifier keys in console input. - vo_drm: Fix segfault when using invalid card. - vo_opengl: apply 90° rotation to chroma texture size. - vo_opengl: Fix incorrect video rendering after vdpau preemption recovery. - vo_opengl: Partially fix dumb-mode cropping with rotation. - vo_opengl: rpi: Use overlay for yuv420p too. - w32_common: Initialize playback status as soon as possible. - wayland: Reject resize events with either dimension being 0. - x11: Fix external fullscreen update. - ytdl_hook: Add title to playlist items if available. - ytdl_hook: Set aspect ratio for anamorphic video - ytdl_hook: Support playlist entries without subtitles - ytdl_hook: Add chapters by parsing video's description - ytdl_hook: Don't add subtitles with unknown duration - ytdl_hook: Temporarily force disable dash segments formats - Update waf to 1.9.5 - Enable libarchive support - Add exact dependency on all libav* packages not just libavcodec. - aspect: Add --video-unscaled=downscale-big. - Player: Add --image-display-duration option to control duration of image display. - vo_opengl: angle: New flag (dcomposition) to control DirectComposition. - af_lavrresample: Fix error if resampler could not be recreated. - audio: Avoid missed wakeups with ab-loops. - audio: Fo not apply --audio-channels if spdif passthrough is in use. - cache: Don't use a backbuffer if the cache is as large as the file. - command: Prevent O(n^2) behaviour for playlist property. - demux: Close underlying stream if it's fully read anyway. - demux: Fix undefined behavior with ogg metadata update. - player: Make looping slightly more seamless. - player: Refresh very low framerate video on filter changes. - stream_memory: Disable stream cache - vf_rotate: Allow arbitrary rotation. - vo: Be more trusting to estimated display FPS. - w32_common: Use hooks to detect parent window resize. - x11: Work around mutter fullscreen issue. - build: Add --htmldir option. - build: Always require atomics. - wscript: Add proper unversioned SONAME for Android. - client API: Add stream_cb API for user-defined stream implementations. (bumps client API version to 1.22) - vf_d3d11vpp: Add video processor selection. - videotoolbox: Add --hwdec=videotoolbox-copy for h/w accelerated decoding with video filters. - vo_opengl: Add a tscale=linear direct implementation. - audio/filter: Remove delay audio filter. - command: Add filename/no-ext sub-property that returns filename without extension. - command: Add properties for HDR metadata. - command: Add replaygain information properties to track-list. - options: Add vp9 to --hwdec-codecs. - player: Add --audio-stream-silence. - player: Add --audio-wait-open. - player: Add --no-autoload-files. - videotoolbox: Add yuv420p to --videotoolbox-format. - options: Un-restrict --audio-delay. - Use - as command-name separator everywhere. - vo_opengl: Reduce default 3dlut-size to 64x64x64. (since accuracy is improved) - af_lavcac3enc: Error out properly if encoding fails. - af_volume: Don't let softvol overwrite af_volume volumedb sub-option - ao_pulse: Fix some volume control rounding issues. - ao_wasapi: No multichannel output by default in exclusive mode. - audio: Add heuristic to move auto-downmixing before other filters. - audio: Show an osd bar when changing ao-volume. - demux: Make ALBUM replaygain tags optional. - demux_raw: Fix small typo to add s16be support. - demux_timeline: Restore mkv edition switching. - libarchive: Sanitize non-UTF8 archive entries. - player: Disable display-sync with spdif transcoding. - player: No terminal status line cut-off if it contains newlines. - player: Fix display-sync timing if audio resumes slowly. - player: Improve instant track switching. - player: Improve non-hr seeking with external audio tracks. - player: Offset demuxer on start/seek properly with audio/sub delay. - player: Sync audio as well when enabling it mid-stream. - stream/stream_bluray: Display list of available titles in verbose mode. - sub: Don't potentially discard too many subtitles on seek. - video: respect --deinterlace=auto. - vo_direct3d: Add missing header. (fixes Cygwin build) - vo_opengl: angle: Try D3D9 when D3D11 fails eglInitialize. - vo_opengl: angle: Use WARP if there are no hw adapters. - vo_opengl: Increase 3DLUT accuracy at smaller LUT sizes. - vo_opengl: Remove the 3dlut-size npot2 restriction. - vo_wayland: Fix high CPU usage due to busy polling. - wayland_common: Clip window size to the display output size. - wayland_common: Fix crashes when switching to fullscreen before the video output is fully initialized. - wayland_common: Fix fullscreen image switching bug. - wayland_common: Prevent black bars on most non-native aspect ratios - wayland_common: Remove untested/unusable wayland dnd code. - win32: mpv.rc: Re-add version info. - x11: Skip ICC update on every window move. - ytdl: Error out with http_dash_segments. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1437=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libmpv1-0.22.0-3.1 libmpv1-debuginfo-0.22.0-3.1 mpv-0.22.0-3.1 mpv-debuginfo-0.22.0-3.1 mpv-devel-0.22.0-3.1 References: https://bugzilla.suse.com/1012600

1 0

openSUSE-SU-2016:3077-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 10 Dec '16

10 Dec '16

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3077-1 Rating: important References: #1008831 #1011685 #1012754 Cross-References: CVE-2016-8632 CVE-2016-8655 CVE-2016-9555 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: The openSUSE 13.1 kernel was updated to receive various critical security fixes. The following security bugs were fixed: - CVE-2016-8655: A race condition in the af_packet packet_set_ring function could be used by local attackers to crash the kernel or gain privileges (bsc#1012754). - CVE-2016-8632: The tipc_msg_build function in net/tipc/msg.c in the Linux kernel did not validate the relationship between the minimum fragment length and the maximum packet size, which allowed local users to gain privileges or cause a denial of service (heap-based buffer overflow) by leveraging the CAP_NET_ADMIN capability (bnc#1008831). - CVE-2016-9555: The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel lacks chunk-length checking for the first chunk, which allowed remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data (bnc#1011685). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2016-1436=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i686 x86_64): kernel-debug-3.12.67-61.1 kernel-debug-base-3.12.67-61.1 kernel-debug-base-debuginfo-3.12.67-61.1 kernel-debug-debuginfo-3.12.67-61.1 kernel-debug-debugsource-3.12.67-61.1 kernel-debug-devel-3.12.67-61.1 kernel-debug-devel-debuginfo-3.12.67-61.1 kernel-desktop-3.12.67-61.1 kernel-desktop-base-3.12.67-61.1 kernel-desktop-base-debuginfo-3.12.67-61.1 kernel-desktop-debuginfo-3.12.67-61.1 kernel-desktop-debugsource-3.12.67-61.1 kernel-desktop-devel-3.12.67-61.1 kernel-ec2-3.12.67-61.1 kernel-ec2-base-3.12.67-61.1 kernel-ec2-base-debuginfo-3.12.67-61.1 kernel-ec2-debuginfo-3.12.67-61.1 kernel-ec2-debugsource-3.12.67-61.1 kernel-ec2-devel-3.12.67-61.1 kernel-trace-3.12.67-61.1 kernel-trace-base-3.12.67-61.1 kernel-trace-base-debuginfo-3.12.67-61.1 kernel-trace-debuginfo-3.12.67-61.1 kernel-trace-debugsource-3.12.67-61.1 kernel-trace-devel-3.12.67-61.1 kernel-vanilla-3.12.67-61.1 kernel-vanilla-debuginfo-3.12.67-61.1 kernel-vanilla-debugsource-3.12.67-61.1 kernel-vanilla-devel-3.12.67-61.1 kernel-xen-3.12.67-61.1 kernel-xen-base-3.12.67-61.1 kernel-xen-base-debuginfo-3.12.67-61.1 kernel-xen-debuginfo-3.12.67-61.1 kernel-xen-debugsource-3.12.67-61.1 kernel-xen-devel-3.12.67-61.1 - openSUSE 13.1 (i586 x86_64): cloop-2.639-11.38.1 cloop-debuginfo-2.639-11.38.1 cloop-debugsource-2.639-11.38.1 cloop-kmp-default-2.639_k3.12.67_61-11.38.1 cloop-kmp-default-debuginfo-2.639_k3.12.67_61-11.38.1 cloop-kmp-desktop-2.639_k3.12.67_61-11.38.1 cloop-kmp-desktop-debuginfo-2.639_k3.12.67_61-11.38.1 cloop-kmp-xen-2.639_k3.12.67_61-11.38.1 cloop-kmp-xen-debuginfo-2.639_k3.12.67_61-11.38.1 crash-7.0.2-2.38.1 crash-debuginfo-7.0.2-2.38.1 crash-debugsource-7.0.2-2.38.1 crash-devel-7.0.2-2.38.1 crash-doc-7.0.2-2.38.1 crash-eppic-7.0.2-2.38.1 crash-eppic-debuginfo-7.0.2-2.38.1 crash-gcore-7.0.2-2.38.1 crash-gcore-debuginfo-7.0.2-2.38.1 crash-kmp-default-7.0.2_k3.12.67_61-2.38.1 crash-kmp-default-debuginfo-7.0.2_k3.12.67_61-2.38.1 crash-kmp-desktop-7.0.2_k3.12.67_61-2.38.1 crash-kmp-desktop-debuginfo-7.0.2_k3.12.67_61-2.38.1 crash-kmp-xen-7.0.2_k3.12.67_61-2.38.1 crash-kmp-xen-debuginfo-7.0.2_k3.12.67_61-2.38.1 hdjmod-debugsource-1.28-16.38.1 hdjmod-kmp-default-1.28_k3.12.67_61-16.38.1 hdjmod-kmp-default-debuginfo-1.28_k3.12.67_61-16.38.1 hdjmod-kmp-desktop-1.28_k3.12.67_61-16.38.1 hdjmod-kmp-desktop-debuginfo-1.28_k3.12.67_61-16.38.1 hdjmod-kmp-xen-1.28_k3.12.67_61-16.38.1 hdjmod-kmp-xen-debuginfo-1.28_k3.12.67_61-16.38.1 ipset-6.21.1-2.42.1 ipset-debuginfo-6.21.1-2.42.1 ipset-debugsource-6.21.1-2.42.1 ipset-devel-6.21.1-2.42.1 ipset-kmp-default-6.21.1_k3.12.67_61-2.42.1 ipset-kmp-default-debuginfo-6.21.1_k3.12.67_61-2.42.1 ipset-kmp-desktop-6.21.1_k3.12.67_61-2.42.1 ipset-kmp-desktop-debuginfo-6.21.1_k3.12.67_61-2.42.1 ipset-kmp-xen-6.21.1_k3.12.67_61-2.42.1 ipset-kmp-xen-debuginfo-6.21.1_k3.12.67_61-2.42.1 iscsitarget-1.4.20.3-13.38.1 iscsitarget-debuginfo-1.4.20.3-13.38.1 iscsitarget-debugsource-1.4.20.3-13.38.1 iscsitarget-kmp-default-1.4.20.3_k3.12.67_61-13.38.1 iscsitarget-kmp-default-debuginfo-1.4.20.3_k3.12.67_61-13.38.1 iscsitarget-kmp-desktop-1.4.20.3_k3.12.67_61-13.38.1 iscsitarget-kmp-desktop-debuginfo-1.4.20.3_k3.12.67_61-13.38.1 iscsitarget-kmp-xen-1.4.20.3_k3.12.67_61-13.38.1 iscsitarget-kmp-xen-debuginfo-1.4.20.3_k3.12.67_61-13.38.1 kernel-default-3.12.67-61.1 kernel-default-base-3.12.67-61.1 kernel-default-base-debuginfo-3.12.67-61.1 kernel-default-debuginfo-3.12.67-61.1 kernel-default-debugsource-3.12.67-61.1 kernel-default-devel-3.12.67-61.1 kernel-syms-3.12.67-61.1 libipset3-6.21.1-2.42.1 libipset3-debuginfo-6.21.1-2.42.1 ndiswrapper-1.58-39.1 ndiswrapper-debuginfo-1.58-39.1 ndiswrapper-debugsource-1.58-39.1 ndiswrapper-kmp-default-1.58_k3.12.67_61-39.1 ndiswrapper-kmp-default-debuginfo-1.58_k3.12.67_61-39.1 ndiswrapper-kmp-desktop-1.58_k3.12.67_61-39.1 ndiswrapper-kmp-desktop-debuginfo-1.58_k3.12.67_61-39.1 openvswitch-1.11.0-0.45.1 openvswitch-controller-1.11.0-0.45.1 openvswitch-controller-debuginfo-1.11.0-0.45.1 openvswitch-debuginfo-1.11.0-0.45.1 openvswitch-debugsource-1.11.0-0.45.1 openvswitch-kmp-default-1.11.0_k3.12.67_61-0.45.1 openvswitch-kmp-default-debuginfo-1.11.0_k3.12.67_61-0.45.1 openvswitch-kmp-desktop-1.11.0_k3.12.67_61-0.45.1 openvswitch-kmp-desktop-debuginfo-1.11.0_k3.12.67_61-0.45.1 openvswitch-kmp-xen-1.11.0_k3.12.67_61-0.45.1 openvswitch-kmp-xen-debuginfo-1.11.0_k3.12.67_61-0.45.1 openvswitch-pki-1.11.0-0.45.1 openvswitch-switch-1.11.0-0.45.1 openvswitch-switch-debuginfo-1.11.0-0.45.1 openvswitch-test-1.11.0-0.45.1 pcfclock-0.44-258.39.1 pcfclock-debuginfo-0.44-258.39.1 pcfclock-debugsource-0.44-258.39.1 pcfclock-kmp-default-0.44_k3.12.67_61-258.39.1 pcfclock-kmp-default-debuginfo-0.44_k3.12.67_61-258.39.1 pcfclock-kmp-desktop-0.44_k3.12.67_61-258.39.1 pcfclock-kmp-desktop-debuginfo-0.44_k3.12.67_61-258.39.1 python-openvswitch-1.11.0-0.45.1 python-openvswitch-test-1.11.0-0.45.1 python-virtualbox-4.2.36-2.70.1 python-virtualbox-debuginfo-4.2.36-2.70.1 vhba-kmp-debugsource-20130607-2.38.1 vhba-kmp-default-20130607_k3.12.67_61-2.38.1 vhba-kmp-default-debuginfo-20130607_k3.12.67_61-2.38.1 vhba-kmp-desktop-20130607_k3.12.67_61-2.38.1 vhba-kmp-desktop-debuginfo-20130607_k3.12.67_61-2.38.1 vhba-kmp-xen-20130607_k3.12.67_61-2.38.1 vhba-kmp-xen-debuginfo-20130607_k3.12.67_61-2.38.1 virtualbox-4.2.36-2.70.1 virtualbox-debuginfo-4.2.36-2.70.1 virtualbox-debugsource-4.2.36-2.70.1 virtualbox-devel-4.2.36-2.70.1 virtualbox-guest-kmp-default-4.2.36_k3.12.67_61-2.70.1 virtualbox-guest-kmp-default-debuginfo-4.2.36_k3.12.67_61-2.70.1 virtualbox-guest-kmp-desktop-4.2.36_k3.12.67_61-2.70.1 virtualbox-guest-kmp-desktop-debuginfo-4.2.36_k3.12.67_61-2.70.1 virtualbox-guest-tools-4.2.36-2.70.1 virtualbox-guest-tools-debuginfo-4.2.36-2.70.1 virtualbox-guest-x11-4.2.36-2.70.1 virtualbox-guest-x11-debuginfo-4.2.36-2.70.1 virtualbox-host-kmp-default-4.2.36_k3.12.67_61-2.70.1 virtualbox-host-kmp-default-debuginfo-4.2.36_k3.12.67_61-2.70.1 virtualbox-host-kmp-desktop-4.2.36_k3.12.67_61-2.70.1 virtualbox-host-kmp-desktop-debuginfo-4.2.36_k3.12.67_61-2.70.1 virtualbox-qt-4.2.36-2.70.1 virtualbox-qt-debuginfo-4.2.36-2.70.1 virtualbox-websrv-4.2.36-2.70.1 virtualbox-websrv-debuginfo-4.2.36-2.70.1 xen-debugsource-4.3.4_10-71.1 xen-devel-4.3.4_10-71.1 xen-kmp-default-4.3.4_10_k3.12.67_61-71.1 xen-kmp-default-debuginfo-4.3.4_10_k3.12.67_61-71.1 xen-kmp-desktop-4.3.4_10_k3.12.67_61-71.1 xen-kmp-desktop-debuginfo-4.3.4_10_k3.12.67_61-71.1 xen-libs-4.3.4_10-71.1 xen-libs-debuginfo-4.3.4_10-71.1 xen-tools-domU-4.3.4_10-71.1 xen-tools-domU-debuginfo-4.3.4_10-71.1 xtables-addons-2.3-2.37.1 xtables-addons-debuginfo-2.3-2.37.1 xtables-addons-debugsource-2.3-2.37.1 xtables-addons-kmp-default-2.3_k3.12.67_61-2.37.1 xtables-addons-kmp-default-debuginfo-2.3_k3.12.67_61-2.37.1 xtables-addons-kmp-desktop-2.3_k3.12.67_61-2.37.1 xtables-addons-kmp-desktop-debuginfo-2.3_k3.12.67_61-2.37.1 xtables-addons-kmp-xen-2.3_k3.12.67_61-2.37.1 xtables-addons-kmp-xen-debuginfo-2.3_k3.12.67_61-2.37.1 - openSUSE 13.1 (x86_64): xen-4.3.4_10-71.1 xen-doc-html-4.3.4_10-71.1 xen-libs-32bit-4.3.4_10-71.1 xen-libs-debuginfo-32bit-4.3.4_10-71.1 xen-tools-4.3.4_10-71.1 xen-tools-debuginfo-4.3.4_10-71.1 xen-xend-tools-4.3.4_10-71.1 xen-xend-tools-debuginfo-4.3.4_10-71.1 - openSUSE 13.1 (noarch): kernel-devel-3.12.67-61.1 kernel-docs-3.12.67-61.2 kernel-macros-3.12.67-61.1 kernel-source-3.12.67-61.1 kernel-source-vanilla-3.12.67-61.1 virtualbox-host-source-4.2.36-2.70.1 - openSUSE 13.1 (i586): cloop-kmp-pae-2.639_k3.12.67_61-11.38.1 cloop-kmp-pae-debuginfo-2.639_k3.12.67_61-11.38.1 crash-kmp-pae-7.0.2_k3.12.67_61-2.38.1 crash-kmp-pae-debuginfo-7.0.2_k3.12.67_61-2.38.1 hdjmod-kmp-pae-1.28_k3.12.67_61-16.38.1 hdjmod-kmp-pae-debuginfo-1.28_k3.12.67_61-16.38.1 ipset-kmp-pae-6.21.1_k3.12.67_61-2.42.1 ipset-kmp-pae-debuginfo-6.21.1_k3.12.67_61-2.42.1 iscsitarget-kmp-pae-1.4.20.3_k3.12.67_61-13.38.1 iscsitarget-kmp-pae-debuginfo-1.4.20.3_k3.12.67_61-13.38.1 ndiswrapper-kmp-pae-1.58_k3.12.67_61-39.1 ndiswrapper-kmp-pae-debuginfo-1.58_k3.12.67_61-39.1 openvswitch-kmp-pae-1.11.0_k3.12.67_61-0.45.1 openvswitch-kmp-pae-debuginfo-1.11.0_k3.12.67_61-0.45.1 pcfclock-kmp-pae-0.44_k3.12.67_61-258.39.1 pcfclock-kmp-pae-debuginfo-0.44_k3.12.67_61-258.39.1 vhba-kmp-pae-20130607_k3.12.67_61-2.38.1 vhba-kmp-pae-debuginfo-20130607_k3.12.67_61-2.38.1 virtualbox-guest-kmp-pae-4.2.36_k3.12.67_61-2.70.1 virtualbox-guest-kmp-pae-debuginfo-4.2.36_k3.12.67_61-2.70.1 virtualbox-host-kmp-pae-4.2.36_k3.12.67_61-2.70.1 virtualbox-host-kmp-pae-debuginfo-4.2.36_k3.12.67_61-2.70.1 xen-kmp-pae-4.3.4_10_k3.12.67_61-71.1 xen-kmp-pae-debuginfo-4.3.4_10_k3.12.67_61-71.1 xtables-addons-kmp-pae-2.3_k3.12.67_61-2.37.1 xtables-addons-kmp-pae-debuginfo-2.3_k3.12.67_61-2.37.1 - openSUSE 13.1 (i686): kernel-pae-3.12.67-61.1 kernel-pae-base-3.12.67-61.1 kernel-pae-base-debuginfo-3.12.67-61.1 kernel-pae-debuginfo-3.12.67-61.1 kernel-pae-debugsource-3.12.67-61.1 kernel-pae-devel-3.12.67-61.1 References: https://www.suse.com/security/cve/CVE-2016-8632.html https://www.suse.com/security/cve/CVE-2016-8655.html https://www.suse.com/security/cve/CVE-2016-9555.html https://bugzilla.suse.com/1008831 https://bugzilla.suse.com/1011685 https://bugzilla.suse.com/1012754

1 0