December 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:3125-1: moderate: Recommended update for acpid
by maintenance＠opensuse.org 14 Dec '16

14 Dec '16

openSUSE Recommended Update: Recommended update for acpid ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3125-1 Rating: moderate References: #1012325 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for acpid fixes the following issues: Remove ExclusiveArch, as some ARM boards emulate ACPI events with their power button driver.(bsc#1012325) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1464=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): acpid-2.0.25-4.1 acpid-debuginfo-2.0.25-4.1 acpid-debugsource-2.0.25-4.1 References: https://bugzilla.suse.com/1012325

1 0

openSUSE-RU-2016:3124-1: Recommended update for k3b
by maintenance＠opensuse.org 14 Dec '16

14 Dec '16

openSUSE Recommended Update: Recommended update for k3b ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3124-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for k3b fixes the following issues: - Obsolete k3b-codecs, the additional codecs are part of the main package now. - Restore conditionals for lame and libmad. - Build with ffmpeg unconditional. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-1469=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): k3b-2.0.3-6.1 k3b-devel-2.0.3-6.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): k3b-lang-2.0.3-6.1 References:

1 0

openSUSE-RU-2016:3123-1: moderate: Recommended update for dolphin
by maintenance＠opensuse.org 14 Dec '16

14 Dec '16

openSUSE Recommended Update: Recommended update for dolphin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3123-1 Rating: moderate References: #1012670 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dolphin fixes the following issues: - Fix much too slow scrolling via mouse wheel in dolphin's side panels. (boo#1012670, kde#365968) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1463=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): dolphin-16.08.2-3.1 dolphin-debuginfo-16.08.2-3.1 dolphin-debugsource-16.08.2-3.1 dolphin-devel-16.08.2-3.1 dolphin-part-16.08.2-3.1 dolphin-part-debuginfo-16.08.2-3.1 libdolphinvcs5-16.08.2-3.1 libdolphinvcs5-debuginfo-16.08.2-3.1 References: https://bugzilla.suse.com/1012670

1 0

openSUSE-RU-2016:3122-1: Recommended update for xdm
by maintenance＠opensuse.org 14 Dec '16

14 Dec '16

openSUSE Recommended Update: Recommended update for xdm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3122-1 Rating: low References: #1013200 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xdm provides the following fixes: - Ensure that display managers will be started after systemd's login manager. (bsc#1013200) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1473=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xdm-1.1.11-13.1 xdm-debuginfo-1.1.11-13.1 xdm-debugsource-1.1.11-13.1 xdm-xsession-1.1.11-13.1 References: https://bugzilla.suse.com/1013200

1 0

openSUSE-SU-2016:3121-1: moderate: Security update for w3m
by opensuse-security＠opensuse.org 14 Dec '16

14 Dec '16

openSUSE Security Update: Security update for w3m ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3121-1 Rating: moderate References: #1011283 #1011284 #1011285 #1011286 #1011287 #1011288 #1011289 #1011290 #1011291 #1011292 #1011293 #1012021 #1012022 #1012023 #1012024 #1012025 #1012026 #1012027 #1012028 #1012029 #1012030 #1012031 #1012032 Cross-References: CVE-2016-9434 CVE-2016-9435 CVE-2016-9436 CVE-2016-9437 CVE-2016-9438 CVE-2016-9439 CVE-2016-9440 CVE-2016-9441 CVE-2016-9442 CVE-2016-9443 CVE-2016-9621 CVE-2016-9622 CVE-2016-9623 CVE-2016-9624 CVE-2016-9625 CVE-2016-9626 CVE-2016-9627 CVE-2016-9628 CVE-2016-9629 CVE-2016-9630 CVE-2016-9631 CVE-2016-9632 CVE-2016-9633 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 23 vulnerabilities is now available. Description: This update for w3m fixes the following security issues (bsc#1011293): - CVE-2016-9622: w3m: null deref (bsc#1012021) - CVE-2016-9623: w3m: null deref (bsc#1012022) - CVE-2016-9624: w3m: near-null deref (bsc#1012023) - CVE-2016-9625: w3m: stack overflow (bsc#1012024) - CVE-2016-9626: w3m: stack overflow (bsc#1012025) - CVE-2016-9627: w3m: heap overflow read + deref (bsc#1012026) - CVE-2016-9628: w3m: null deref (bsc#1012027) - CVE-2016-9629: w3m: null deref (bsc#1012028) - CVE-2016-9630: w3m: global-buffer-overflow read (bsc#1012029) - CVE-2016-9631: w3m: null deref (bsc#1012030) - CVE-2016-9632: w3m: global-buffer-overflow read (bsc#1012031) - CVE-2016-9633: w3m: OOM (bsc#1012032) - CVE-2016-9434: w3m: null deref (bsc#1011283) - CVE-2016-9435: w3m: use uninit value (bsc#1011284) - CVE-2016-9436: w3m: use uninit value (bsc#1011285) - CVE-2016-9437: w3m: write to rodata (bsc#1011286) - CVE-2016-9438: w3m: null deref (bsc#1011287) - CVE-2016-9439: w3m: stack overflow (bsc#1011288) - CVE-2016-9440: w3m: near-null deref (bsc#1011289) - CVE-2016-9441: w3m: near-null deref (bsc#1011290) - CVE-2016-9442: w3m: potential heap buffer corruption (bsc#1011291) - CVE-2016-9443: w3m: null deref (bsc#1011292) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1457=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1457=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): w3m-0.5.3.git20161120-160.1 w3m-debuginfo-0.5.3.git20161120-160.1 w3m-debugsource-0.5.3.git20161120-160.1 w3m-inline-image-0.5.3.git20161120-160.1 w3m-inline-image-debuginfo-0.5.3.git20161120-160.1 - openSUSE Leap 42.1 (i586 x86_64): w3m-0.5.3.git20161120-161.1 w3m-debuginfo-0.5.3.git20161120-161.1 w3m-debugsource-0.5.3.git20161120-161.1 w3m-inline-image-0.5.3.git20161120-161.1 w3m-inline-image-debuginfo-0.5.3.git20161120-161.1 References: https://www.suse.com/security/cve/CVE-2016-9434.html https://www.suse.com/security/cve/CVE-2016-9435.html https://www.suse.com/security/cve/CVE-2016-9436.html https://www.suse.com/security/cve/CVE-2016-9437.html https://www.suse.com/security/cve/CVE-2016-9438.html https://www.suse.com/security/cve/CVE-2016-9439.html https://www.suse.com/security/cve/CVE-2016-9440.html https://www.suse.com/security/cve/CVE-2016-9441.html https://www.suse.com/security/cve/CVE-2016-9442.html https://www.suse.com/security/cve/CVE-2016-9443.html https://www.suse.com/security/cve/CVE-2016-9621.html https://www.suse.com/security/cve/CVE-2016-9622.html https://www.suse.com/security/cve/CVE-2016-9623.html https://www.suse.com/security/cve/CVE-2016-9624.html https://www.suse.com/security/cve/CVE-2016-9625.html https://www.suse.com/security/cve/CVE-2016-9626.html https://www.suse.com/security/cve/CVE-2016-9627.html https://www.suse.com/security/cve/CVE-2016-9628.html https://www.suse.com/security/cve/CVE-2016-9629.html https://www.suse.com/security/cve/CVE-2016-9630.html https://www.suse.com/security/cve/CVE-2016-9631.html https://www.suse.com/security/cve/CVE-2016-9632.html https://www.suse.com/security/cve/CVE-2016-9633.html https://bugzilla.suse.com/1011283 https://bugzilla.suse.com/1011284 https://bugzilla.suse.com/1011285 https://bugzilla.suse.com/1011286 https://bugzilla.suse.com/1011287 https://bugzilla.suse.com/1011288 https://bugzilla.suse.com/1011289 https://bugzilla.suse.com/1011290 https://bugzilla.suse.com/1011291 https://bugzilla.suse.com/1011292 https://bugzilla.suse.com/1011293 https://bugzilla.suse.com/1012021 https://bugzilla.suse.com/1012022 https://bugzilla.suse.com/1012023 https://bugzilla.suse.com/1012024 https://bugzilla.suse.com/1012025 https://bugzilla.suse.com/1012026 https://bugzilla.suse.com/1012027 https://bugzilla.suse.com/1012028 https://bugzilla.suse.com/1012029 https://bugzilla.suse.com/1012030 https://bugzilla.suse.com/1012031 https://bugzilla.suse.com/1012032

1 0

openSUSE-RU-2016:3120-1: Recommended update for ispell
by maintenance＠opensuse.org 14 Dec '16

14 Dec '16

openSUSE Recommended Update: Recommended update for ispell ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3120-1 Rating: low References: #1010330 #966124 #981024 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for ispell removes a few incorrect words from the English dictionary. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1467=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1467=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ispell-3.3.02-113.1 ispell-american-3.3.02-113.1 ispell-british-3.3.02-113.1 ispell-debuginfo-3.3.02-113.1 ispell-debugsource-3.3.02-113.1 - openSUSE Leap 42.1 (i586 x86_64): ispell-3.3.02-112.1 ispell-american-3.3.02-112.1 ispell-british-3.3.02-112.1 ispell-debuginfo-3.3.02-112.1 ispell-debugsource-3.3.02-112.1 References: https://bugzilla.suse.com/1010330 https://bugzilla.suse.com/966124 https://bugzilla.suse.com/981024

1 0

openSUSE-SU-2016:3118-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 13 Dec '16

13 Dec '16

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3118-1 Rating: important References: #1013533 #1013604 Cross-References: CVE-2016-9576 CVE-2016-9794 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The openSUSE 13.1 kernel was updated to fix two security issues. The following security bugs were fixed: - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg* or /dev/bsg* to elevate their privileges (bsc#1013604). - CVE-2016-9794: A use-after-free vulnerability in the ALSA pcm layer allowed local users to cause a denial of service, memory corruption or possibly even to elevate their privileges (bsc#1013533). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2016-1454=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): cloop-2.639-11.40.1 cloop-debuginfo-2.639-11.40.1 cloop-debugsource-2.639-11.40.1 cloop-kmp-default-2.639_k3.12.67_64-11.40.1 cloop-kmp-default-debuginfo-2.639_k3.12.67_64-11.40.1 cloop-kmp-desktop-2.639_k3.12.67_64-11.40.1 cloop-kmp-desktop-debuginfo-2.639_k3.12.67_64-11.40.1 cloop-kmp-xen-2.639_k3.12.67_64-11.40.1 cloop-kmp-xen-debuginfo-2.639_k3.12.67_64-11.40.1 crash-7.0.2-2.40.1 crash-debuginfo-7.0.2-2.40.1 crash-debugsource-7.0.2-2.40.1 crash-devel-7.0.2-2.40.1 crash-doc-7.0.2-2.40.1 crash-eppic-7.0.2-2.40.1 crash-eppic-debuginfo-7.0.2-2.40.1 crash-gcore-7.0.2-2.40.1 crash-gcore-debuginfo-7.0.2-2.40.1 crash-kmp-default-7.0.2_k3.12.67_64-2.40.1 crash-kmp-default-debuginfo-7.0.2_k3.12.67_64-2.40.1 crash-kmp-desktop-7.0.2_k3.12.67_64-2.40.1 crash-kmp-desktop-debuginfo-7.0.2_k3.12.67_64-2.40.1 crash-kmp-xen-7.0.2_k3.12.67_64-2.40.1 crash-kmp-xen-debuginfo-7.0.2_k3.12.67_64-2.40.1 hdjmod-debugsource-1.28-16.40.1 hdjmod-kmp-default-1.28_k3.12.67_64-16.40.1 hdjmod-kmp-default-debuginfo-1.28_k3.12.67_64-16.40.1 hdjmod-kmp-desktop-1.28_k3.12.67_64-16.40.1 hdjmod-kmp-desktop-debuginfo-1.28_k3.12.67_64-16.40.1 hdjmod-kmp-xen-1.28_k3.12.67_64-16.40.1 hdjmod-kmp-xen-debuginfo-1.28_k3.12.67_64-16.40.1 ipset-6.21.1-2.44.1 ipset-debuginfo-6.21.1-2.44.1 ipset-debugsource-6.21.1-2.44.1 ipset-devel-6.21.1-2.44.1 ipset-kmp-default-6.21.1_k3.12.67_64-2.44.1 ipset-kmp-default-debuginfo-6.21.1_k3.12.67_64-2.44.1 ipset-kmp-desktop-6.21.1_k3.12.67_64-2.44.1 ipset-kmp-desktop-debuginfo-6.21.1_k3.12.67_64-2.44.1 ipset-kmp-xen-6.21.1_k3.12.67_64-2.44.1 ipset-kmp-xen-debuginfo-6.21.1_k3.12.67_64-2.44.1 iscsitarget-1.4.20.3-13.40.1 iscsitarget-debuginfo-1.4.20.3-13.40.1 iscsitarget-debugsource-1.4.20.3-13.40.1 iscsitarget-kmp-default-1.4.20.3_k3.12.67_64-13.40.1 iscsitarget-kmp-default-debuginfo-1.4.20.3_k3.12.67_64-13.40.1 iscsitarget-kmp-desktop-1.4.20.3_k3.12.67_64-13.40.1 iscsitarget-kmp-desktop-debuginfo-1.4.20.3_k3.12.67_64-13.40.1 iscsitarget-kmp-xen-1.4.20.3_k3.12.67_64-13.40.1 iscsitarget-kmp-xen-debuginfo-1.4.20.3_k3.12.67_64-13.40.1 kernel-default-3.12.67-64.1 kernel-default-base-3.12.67-64.1 kernel-default-base-debuginfo-3.12.67-64.1 kernel-default-debuginfo-3.12.67-64.1 kernel-default-debugsource-3.12.67-64.1 kernel-default-devel-3.12.67-64.1 kernel-syms-3.12.67-64.1 libipset3-6.21.1-2.44.1 libipset3-debuginfo-6.21.1-2.44.1 ndiswrapper-1.58-41.1 ndiswrapper-debuginfo-1.58-41.1 ndiswrapper-debugsource-1.58-41.1 ndiswrapper-kmp-default-1.58_k3.12.67_64-41.1 ndiswrapper-kmp-default-debuginfo-1.58_k3.12.67_64-41.1 ndiswrapper-kmp-desktop-1.58_k3.12.67_64-41.1 ndiswrapper-kmp-desktop-debuginfo-1.58_k3.12.67_64-41.1 openvswitch-1.11.0-0.47.1 openvswitch-controller-1.11.0-0.47.1 openvswitch-controller-debuginfo-1.11.0-0.47.1 openvswitch-debuginfo-1.11.0-0.47.1 openvswitch-debugsource-1.11.0-0.47.1 openvswitch-kmp-default-1.11.0_k3.12.67_64-0.47.1 openvswitch-kmp-default-debuginfo-1.11.0_k3.12.67_64-0.47.1 openvswitch-kmp-desktop-1.11.0_k3.12.67_64-0.47.1 openvswitch-kmp-desktop-debuginfo-1.11.0_k3.12.67_64-0.47.1 openvswitch-kmp-xen-1.11.0_k3.12.67_64-0.47.1 openvswitch-kmp-xen-debuginfo-1.11.0_k3.12.67_64-0.47.1 openvswitch-pki-1.11.0-0.47.1 openvswitch-switch-1.11.0-0.47.1 openvswitch-switch-debuginfo-1.11.0-0.47.1 openvswitch-test-1.11.0-0.47.1 pcfclock-0.44-258.41.1 pcfclock-debuginfo-0.44-258.41.1 pcfclock-debugsource-0.44-258.41.1 pcfclock-kmp-default-0.44_k3.12.67_64-258.41.1 pcfclock-kmp-default-debuginfo-0.44_k3.12.67_64-258.41.1 pcfclock-kmp-desktop-0.44_k3.12.67_64-258.41.1 pcfclock-kmp-desktop-debuginfo-0.44_k3.12.67_64-258.41.1 python-openvswitch-1.11.0-0.47.1 python-openvswitch-test-1.11.0-0.47.1 python-virtualbox-4.2.36-2.72.1 python-virtualbox-debuginfo-4.2.36-2.72.1 vhba-kmp-debugsource-20130607-2.40.1 vhba-kmp-default-20130607_k3.12.67_64-2.40.1 vhba-kmp-default-debuginfo-20130607_k3.12.67_64-2.40.1 vhba-kmp-desktop-20130607_k3.12.67_64-2.40.1 vhba-kmp-desktop-debuginfo-20130607_k3.12.67_64-2.40.1 vhba-kmp-xen-20130607_k3.12.67_64-2.40.1 vhba-kmp-xen-debuginfo-20130607_k3.12.67_64-2.40.1 virtualbox-4.2.36-2.72.1 virtualbox-debuginfo-4.2.36-2.72.1 virtualbox-debugsource-4.2.36-2.72.1 virtualbox-devel-4.2.36-2.72.1 virtualbox-guest-kmp-default-4.2.36_k3.12.67_64-2.72.1 virtualbox-guest-kmp-default-debuginfo-4.2.36_k3.12.67_64-2.72.1 virtualbox-guest-kmp-desktop-4.2.36_k3.12.67_64-2.72.1 virtualbox-guest-kmp-desktop-debuginfo-4.2.36_k3.12.67_64-2.72.1 virtualbox-guest-tools-4.2.36-2.72.1 virtualbox-guest-tools-debuginfo-4.2.36-2.72.1 virtualbox-guest-x11-4.2.36-2.72.1 virtualbox-guest-x11-debuginfo-4.2.36-2.72.1 virtualbox-host-kmp-default-4.2.36_k3.12.67_64-2.72.1 virtualbox-host-kmp-default-debuginfo-4.2.36_k3.12.67_64-2.72.1 virtualbox-host-kmp-desktop-4.2.36_k3.12.67_64-2.72.1 virtualbox-host-kmp-desktop-debuginfo-4.2.36_k3.12.67_64-2.72.1 virtualbox-qt-4.2.36-2.72.1 virtualbox-qt-debuginfo-4.2.36-2.72.1 virtualbox-websrv-4.2.36-2.72.1 virtualbox-websrv-debuginfo-4.2.36-2.72.1 xen-debugsource-4.3.4_10-73.1 xen-devel-4.3.4_10-73.1 xen-kmp-default-4.3.4_10_k3.12.67_64-73.1 xen-kmp-default-debuginfo-4.3.4_10_k3.12.67_64-73.1 xen-kmp-desktop-4.3.4_10_k3.12.67_64-73.1 xen-kmp-desktop-debuginfo-4.3.4_10_k3.12.67_64-73.1 xen-libs-4.3.4_10-73.1 xen-libs-debuginfo-4.3.4_10-73.1 xen-tools-domU-4.3.4_10-73.1 xen-tools-domU-debuginfo-4.3.4_10-73.1 xtables-addons-2.3-2.39.1 xtables-addons-debuginfo-2.3-2.39.1 xtables-addons-debugsource-2.3-2.39.1 xtables-addons-kmp-default-2.3_k3.12.67_64-2.39.1 xtables-addons-kmp-default-debuginfo-2.3_k3.12.67_64-2.39.1 xtables-addons-kmp-desktop-2.3_k3.12.67_64-2.39.1 xtables-addons-kmp-desktop-debuginfo-2.3_k3.12.67_64-2.39.1 xtables-addons-kmp-xen-2.3_k3.12.67_64-2.39.1 xtables-addons-kmp-xen-debuginfo-2.3_k3.12.67_64-2.39.1 - openSUSE 13.1 (i686 x86_64): kernel-debug-3.12.67-64.1 kernel-debug-base-3.12.67-64.1 kernel-debug-base-debuginfo-3.12.67-64.1 kernel-debug-debuginfo-3.12.67-64.1 kernel-debug-debugsource-3.12.67-64.1 kernel-debug-devel-3.12.67-64.1 kernel-debug-devel-debuginfo-3.12.67-64.1 kernel-desktop-3.12.67-64.1 kernel-desktop-base-3.12.67-64.1 kernel-desktop-base-debuginfo-3.12.67-64.1 kernel-desktop-debuginfo-3.12.67-64.1 kernel-desktop-debugsource-3.12.67-64.1 kernel-desktop-devel-3.12.67-64.1 kernel-ec2-3.12.67-64.1 kernel-ec2-base-3.12.67-64.1 kernel-ec2-base-debuginfo-3.12.67-64.1 kernel-ec2-debuginfo-3.12.67-64.1 kernel-ec2-debugsource-3.12.67-64.1 kernel-ec2-devel-3.12.67-64.1 kernel-trace-3.12.67-64.1 kernel-trace-base-3.12.67-64.1 kernel-trace-base-debuginfo-3.12.67-64.1 kernel-trace-debuginfo-3.12.67-64.1 kernel-trace-debugsource-3.12.67-64.1 kernel-trace-devel-3.12.67-64.1 kernel-vanilla-3.12.67-64.1 kernel-vanilla-debuginfo-3.12.67-64.1 kernel-vanilla-debugsource-3.12.67-64.1 kernel-vanilla-devel-3.12.67-64.1 kernel-xen-3.12.67-64.1 kernel-xen-base-3.12.67-64.1 kernel-xen-base-debuginfo-3.12.67-64.1 kernel-xen-debuginfo-3.12.67-64.1 kernel-xen-debugsource-3.12.67-64.1 kernel-xen-devel-3.12.67-64.1 - openSUSE 13.1 (x86_64): xen-4.3.4_10-73.1 xen-doc-html-4.3.4_10-73.1 xen-libs-32bit-4.3.4_10-73.1 xen-libs-debuginfo-32bit-4.3.4_10-73.1 xen-tools-4.3.4_10-73.1 xen-tools-debuginfo-4.3.4_10-73.1 xen-xend-tools-4.3.4_10-73.1 xen-xend-tools-debuginfo-4.3.4_10-73.1 - openSUSE 13.1 (noarch): kernel-devel-3.12.67-64.1 kernel-docs-3.12.67-64.2 kernel-macros-3.12.67-64.1 kernel-source-3.12.67-64.1 kernel-source-vanilla-3.12.67-64.1 virtualbox-host-source-4.2.36-2.72.1 - openSUSE 13.1 (i686): kernel-pae-3.12.67-64.1 kernel-pae-base-3.12.67-64.1 kernel-pae-base-debuginfo-3.12.67-64.1 kernel-pae-debuginfo-3.12.67-64.1 kernel-pae-debugsource-3.12.67-64.1 kernel-pae-devel-3.12.67-64.1 - openSUSE 13.1 (i586): cloop-kmp-pae-2.639_k3.12.67_64-11.40.1 cloop-kmp-pae-debuginfo-2.639_k3.12.67_64-11.40.1 crash-kmp-pae-7.0.2_k3.12.67_64-2.40.1 crash-kmp-pae-debuginfo-7.0.2_k3.12.67_64-2.40.1 hdjmod-kmp-pae-1.28_k3.12.67_64-16.40.1 hdjmod-kmp-pae-debuginfo-1.28_k3.12.67_64-16.40.1 ipset-kmp-pae-6.21.1_k3.12.67_64-2.44.1 ipset-kmp-pae-debuginfo-6.21.1_k3.12.67_64-2.44.1 iscsitarget-kmp-pae-1.4.20.3_k3.12.67_64-13.40.1 iscsitarget-kmp-pae-debuginfo-1.4.20.3_k3.12.67_64-13.40.1 ndiswrapper-kmp-pae-1.58_k3.12.67_64-41.1 ndiswrapper-kmp-pae-debuginfo-1.58_k3.12.67_64-41.1 openvswitch-kmp-pae-1.11.0_k3.12.67_64-0.47.1 openvswitch-kmp-pae-debuginfo-1.11.0_k3.12.67_64-0.47.1 pcfclock-kmp-pae-0.44_k3.12.67_64-258.41.1 pcfclock-kmp-pae-debuginfo-0.44_k3.12.67_64-258.41.1 vhba-kmp-pae-20130607_k3.12.67_64-2.40.1 vhba-kmp-pae-debuginfo-20130607_k3.12.67_64-2.40.1 virtualbox-guest-kmp-pae-4.2.36_k3.12.67_64-2.72.1 virtualbox-guest-kmp-pae-debuginfo-4.2.36_k3.12.67_64-2.72.1 virtualbox-host-kmp-pae-4.2.36_k3.12.67_64-2.72.1 virtualbox-host-kmp-pae-debuginfo-4.2.36_k3.12.67_64-2.72.1 xen-kmp-pae-4.3.4_10_k3.12.67_64-73.1 xen-kmp-pae-debuginfo-4.3.4_10_k3.12.67_64-73.1 xtables-addons-kmp-pae-2.3_k3.12.67_64-2.39.1 xtables-addons-kmp-pae-debuginfo-2.3_k3.12.67_64-2.39.1 References: https://www.suse.com/security/cve/CVE-2016-9576.html https://www.suse.com/security/cve/CVE-2016-9794.html https://bugzilla.suse.com/1013533 https://bugzilla.suse.com/1013604

1 0

openSUSE-SU-2016:3108-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 13 Dec '16

13 Dec '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3108-1 Rating: important References: #1013236 Cross-References: CVE-2016-5203 CVE-2016-5204 CVE-2016-5205 CVE-2016-5206 CVE-2016-5207 CVE-2016-5208 CVE-2016-5209 CVE-2016-5210 CVE-2016-5211 CVE-2016-5212 CVE-2016-5213 CVE-2016-5214 CVE-2016-5215 CVE-2016-5216 CVE-2016-5217 CVE-2016-5218 CVE-2016-5219 CVE-2016-5220 CVE-2016-5221 CVE-2016-5222 CVE-2016-5223 CVE-2016-5224 CVE-2016-5225 CVE-2016-5226 CVE-2016-9650 CVE-2016-9651 CVE-2016-9652 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes 27 vulnerabilities is now available. Description: This update to Chromium 55.0.2883.75 fixes the following vulnerabilities: - CVE-2016-9651: Private property access in V8 - CVE-2016-5208: Universal XSS in Blink - CVE-2016-5207: Universal XSS in Blink - CVE-2016-5206: Same-origin bypass in PDFium - CVE-2016-5205: Universal XSS in Blink - CVE-2016-5204: Universal XSS in Blink - CVE-2016-5209: Out of bounds write in Blink - CVE-2016-5203: Use after free in PDFium - CVE-2016-5210: Out of bounds write in PDFium - CVE-2016-5212: Local file disclosure in DevTools - CVE-2016-5211: Use after free in PDFium - CVE-2016-5213: Use after free in V8 - CVE-2016-5214: File download protection bypass - CVE-2016-5216: Use after free in PDFium - CVE-2016-5215: Use after free in Webaudio - CVE-2016-5217: Use of unvalidated data in PDFium - CVE-2016-5218: Address spoofing in Omnibox - CVE-2016-5219: Use after free in V8 - CVE-2016-5221: Integer overflow in ANGLE - CVE-2016-5220: Local file access in PDFium - CVE-2016-5222: Address spoofing in Omnibox - CVE-2016-9650: CSP Referrer disclosure - CVE-2016-5223: Integer overflow in PDFium - CVE-2016-5226: Limited XSS in Blink - CVE-2016-5225: CSP bypass in Blink - CVE-2016-5224: Same-origin bypass in SVG - CVE-2016-9652: Various fixes from internal audits, fuzzing and other initiatives The default bookmarks override was removed. The following packaging changes are included: - Switch to system libraries: harfbuzz, zlib, ffmpeg, where available. - Chromium now requires harfbuzz >= 1.3.0 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1453=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1453=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1453=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): chromedriver-55.0.2883.75-99.2 chromedriver-debuginfo-55.0.2883.75-99.2 chromium-55.0.2883.75-99.2 chromium-debuginfo-55.0.2883.75-99.2 chromium-debugsource-55.0.2883.75-99.2 - openSUSE Leap 42.1 (x86_64): chromedriver-55.0.2883.75-99.2 chromedriver-debuginfo-55.0.2883.75-99.2 chromium-55.0.2883.75-99.2 chromium-debuginfo-55.0.2883.75-99.2 chromium-debugsource-55.0.2883.75-99.2 - openSUSE 13.2 (i586 x86_64): chromedriver-55.0.2883.75-148.1 chromedriver-debuginfo-55.0.2883.75-148.1 chromium-55.0.2883.75-148.1 chromium-debuginfo-55.0.2883.75-148.1 chromium-debugsource-55.0.2883.75-148.1 chromium-ffmpegsumo-55.0.2883.75-148.1 chromium-ffmpegsumo-debuginfo-55.0.2883.75-148.1 References: https://www.suse.com/security/cve/CVE-2016-5203.html https://www.suse.com/security/cve/CVE-2016-5204.html https://www.suse.com/security/cve/CVE-2016-5205.html https://www.suse.com/security/cve/CVE-2016-5206.html https://www.suse.com/security/cve/CVE-2016-5207.html https://www.suse.com/security/cve/CVE-2016-5208.html https://www.suse.com/security/cve/CVE-2016-5209.html https://www.suse.com/security/cve/CVE-2016-5210.html https://www.suse.com/security/cve/CVE-2016-5211.html https://www.suse.com/security/cve/CVE-2016-5212.html https://www.suse.com/security/cve/CVE-2016-5213.html https://www.suse.com/security/cve/CVE-2016-5214.html https://www.suse.com/security/cve/CVE-2016-5215.html https://www.suse.com/security/cve/CVE-2016-5216.html https://www.suse.com/security/cve/CVE-2016-5217.html https://www.suse.com/security/cve/CVE-2016-5218.html https://www.suse.com/security/cve/CVE-2016-5219.html https://www.suse.com/security/cve/CVE-2016-5220.html https://www.suse.com/security/cve/CVE-2016-5221.html https://www.suse.com/security/cve/CVE-2016-5222.html https://www.suse.com/security/cve/CVE-2016-5223.html https://www.suse.com/security/cve/CVE-2016-5224.html https://www.suse.com/security/cve/CVE-2016-5225.html https://www.suse.com/security/cve/CVE-2016-5226.html https://www.suse.com/security/cve/CVE-2016-9650.html https://www.suse.com/security/cve/CVE-2016-9651.html https://www.suse.com/security/cve/CVE-2016-9652.html https://bugzilla.suse.com/1013236

1 0

openSUSE-RU-2016:3106-1: Recommended update for clamav-database
by maintenance＠opensuse.org 13 Dec '16

13 Dec '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3106-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh Dec 12th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1452=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1452=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201612120615-15.1 - openSUSE Leap 42.1 (noarch): clamav-database-201612120615-194.1 References:

1 0

openSUSE-SU-2016:3103-1: important: Security update for qemu
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3103-1 Rating: important References: #1000345 #1001151 #1002116 #1002550 #1002557 #1003878 #1003893 #1003894 #1004702 #1004707 #1006536 #1006538 #1007391 #1007450 #1007454 #1007493 #1007494 #1007495 #996524 #998516 #999661 Cross-References: CVE-2016-7161 CVE-2016-7170 CVE-2016-7421 CVE-2016-7466 CVE-2016-7908 CVE-2016-7909 CVE-2016-8576 CVE-2016-8577 CVE-2016-8578 CVE-2016-8667 CVE-2016-8669 CVE-2016-8909 CVE-2016-8910 CVE-2016-9101 CVE-2016-9102 CVE-2016-9103 CVE-2016-9104 CVE-2016-9105 CVE-2016-9106 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 19 vulnerabilities and has two fixes is now available. Description: This update for qemu fixes the following issues: - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 - Change package post script udevadm trigger calls to be device specific (bsc#1002116) - Address various security/stability issues * Fix OOB access in xlnx.xpx-ethernetlite emulation (CVE-2016-7161 bsc#1001151) * Fix OOB access in VMware SVGA emulation (CVE-2016-7170 bsc#998516) * Fix DOS in USB xHCI emulation (CVE-2016-7466 bsc#1000345) * Fix DOS in Vmware pv scsi interface (CVE-2016-7421 bsc#999661) * Fix DOS in ColdFire Fast Ethernet Controller emulation (CVE-2016-7908 bsc#1002550) * Fix DOS in USB xHCI emulation (CVE-2016-8576 bsc#1003878) * Fix DOS in virtio-9pfs (CVE-2016-8578 bsc#1003894) * Fix DOS in virtio-9pfs (CVE-2016-9105 bsc#1007494) * Fix DOS in virtio-9pfs (CVE-2016-8577 bsc#1003893) * Plug data leak in virtio-9pfs interface (CVE-2016-9103 bsc#1007454) * Fix DOS in virtio-9pfs interface (CVE-2016-9102 bsc#1007450) * Fix DOS in virtio-9pfs (CVE-2016-9106 bsc#1007495) * Fix DOS in 16550A UART emulation (CVE-2016-8669 bsc#1004707) * Fix DOS in PC-Net II emulation (CVE-2016-7909 bsc#1002557) * Fix DOS in PRO100 emulation (CVE-2016-9101 bsc#1007391) * Fix DOS in RTL8139 emulation (CVE-2016-8910 bsc#1006538) * Fix DOS in Intel HDA controller emulation (CVE-2016-8909 bsc#1006536) * Fix DOS in virtio-9pfs (CVE-2016-9104 bsc#1007493) * Fix DOS in JAZZ RC4030 emulation (CVE-2016-8667 bsc#1004702) - Fix case of disk corruption with migration due to improper internal state tracking (bsc#996524) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1451=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): qemu-2.3.1-22.1 qemu-arm-2.3.1-22.1 qemu-arm-debuginfo-2.3.1-22.1 qemu-block-curl-2.3.1-22.1 qemu-block-curl-debuginfo-2.3.1-22.1 qemu-debugsource-2.3.1-22.1 qemu-extra-2.3.1-22.1 qemu-extra-debuginfo-2.3.1-22.1 qemu-guest-agent-2.3.1-22.1 qemu-guest-agent-debuginfo-2.3.1-22.1 qemu-kvm-2.3.1-22.1 qemu-lang-2.3.1-22.1 qemu-linux-user-2.3.1-22.1 qemu-linux-user-debuginfo-2.3.1-22.1 qemu-linux-user-debugsource-2.3.1-22.1 qemu-ppc-2.3.1-22.1 qemu-ppc-debuginfo-2.3.1-22.1 qemu-s390-2.3.1-22.1 qemu-s390-debuginfo-2.3.1-22.1 qemu-tools-2.3.1-22.1 qemu-tools-debuginfo-2.3.1-22.1 qemu-x86-2.3.1-22.1 qemu-x86-debuginfo-2.3.1-22.1 - openSUSE Leap 42.1 (x86_64): qemu-block-rbd-2.3.1-22.1 qemu-block-rbd-debuginfo-2.3.1-22.1 qemu-testsuite-2.3.1-22.2 - openSUSE Leap 42.1 (noarch): qemu-ipxe-1.0.0-22.1 qemu-seabios-1.8.1-22.1 qemu-sgabios-8-22.1 qemu-vgabios-1.8.1-22.1 References: https://www.suse.com/security/cve/CVE-2016-7161.html https://www.suse.com/security/cve/CVE-2016-7170.html https://www.suse.com/security/cve/CVE-2016-7421.html https://www.suse.com/security/cve/CVE-2016-7466.html https://www.suse.com/security/cve/CVE-2016-7908.html https://www.suse.com/security/cve/CVE-2016-7909.html https://www.suse.com/security/cve/CVE-2016-8576.html https://www.suse.com/security/cve/CVE-2016-8577.html https://www.suse.com/security/cve/CVE-2016-8578.html https://www.suse.com/security/cve/CVE-2016-8667.html https://www.suse.com/security/cve/CVE-2016-8669.html https://www.suse.com/security/cve/CVE-2016-8909.html https://www.suse.com/security/cve/CVE-2016-8910.html https://www.suse.com/security/cve/CVE-2016-9101.html https://www.suse.com/security/cve/CVE-2016-9102.html https://www.suse.com/security/cve/CVE-2016-9103.html https://www.suse.com/security/cve/CVE-2016-9104.html https://www.suse.com/security/cve/CVE-2016-9105.html https://www.suse.com/security/cve/CVE-2016-9106.html https://bugzilla.suse.com/1000345 https://bugzilla.suse.com/1001151 https://bugzilla.suse.com/1002116 https://bugzilla.suse.com/1002550 https://bugzilla.suse.com/1002557 https://bugzilla.suse.com/1003878 https://bugzilla.suse.com/1003893 https://bugzilla.suse.com/1003894 https://bugzilla.suse.com/1004702 https://bugzilla.suse.com/1004707 https://bugzilla.suse.com/1006536 https://bugzilla.suse.com/1006538 https://bugzilla.suse.com/1007391 https://bugzilla.suse.com/1007450 https://bugzilla.suse.com/1007454 https://bugzilla.suse.com/1007493 https://bugzilla.suse.com/1007494 https://bugzilla.suse.com/1007495 https://bugzilla.suse.com/996524 https://bugzilla.suse.com/998516 https://bugzilla.suse.com/999661

1 0

openSUSE-SU-2016:3102-1: moderate: Security update for util-linux
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3102-1 Rating: moderate References: #947494 #966891 #982331 #987176 #988361 #990531 #994399 Cross-References: CVE-2016-5011 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This update for util-linux fixes the following issues: - Consider redundant slashes when comparing paths (bsc#982331, util-linux-libmount-ignore-redundant-slashes.patch, affects backport of util-linux-libmount-cifs-is_mounted.patch). - Use upstream compatibility patches for --show-pt-geometry with obsolescence and deprecation warning (bsc#990531) - Replace cifs mount detection patch with upstream one that covers all cases (bsc#987176). - Reuse existing loop device to prevent possible data corruption when multiple -o loop are used to mount a single file (bsc#947494) - Safe loop re-use in libmount, mount and losetup (bsc#947494) - UPSTREAM DIVERGENCE!!! losetup -L continues to use SLE12 SP1 and SP2 specific meaning --logical-blocksize instead of upstream --nooverlap (bsc#966891). - Make release-dependent conflict with old sysvinit-tools SLE specific, as it is required only for SLE 11 upgrade, and breaks openSUSE staging builds (bsc#994399). - Extended partition loop in MBR partition table leads to DoS (bsc#988361, CVE-2016-5011) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1446=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libblkid-devel-2.28-7.1 libblkid-devel-static-2.28-7.1 libblkid1-2.28-7.1 libblkid1-debuginfo-2.28-7.1 libfdisk-devel-2.28-7.1 libfdisk-devel-static-2.28-7.1 libfdisk1-2.28-7.1 libfdisk1-debuginfo-2.28-7.1 libmount-devel-2.28-7.1 libmount-devel-static-2.28-7.1 libmount1-2.28-7.1 libmount1-debuginfo-2.28-7.1 libsmartcols-devel-2.28-7.1 libsmartcols-devel-static-2.28-7.1 libsmartcols1-2.28-7.1 libsmartcols1-debuginfo-2.28-7.1 libuuid-devel-2.28-7.1 libuuid-devel-static-2.28-7.1 libuuid1-2.28-7.1 libuuid1-debuginfo-2.28-7.1 python-libmount-2.28-7.2 python-libmount-debuginfo-2.28-7.2 python-libmount-debugsource-2.28-7.2 util-linux-2.28-7.1 util-linux-debuginfo-2.28-7.1 util-linux-debugsource-2.28-7.1 util-linux-systemd-2.28-7.1 util-linux-systemd-debuginfo-2.28-7.1 util-linux-systemd-debugsource-2.28-7.1 uuidd-2.28-7.1 uuidd-debuginfo-2.28-7.1 - openSUSE Leap 42.2 (noarch): util-linux-lang-2.28-7.1 - openSUSE Leap 42.2 (x86_64): libblkid-devel-32bit-2.28-7.1 libblkid1-32bit-2.28-7.1 libblkid1-debuginfo-32bit-2.28-7.1 libmount-devel-32bit-2.28-7.1 libmount1-32bit-2.28-7.1 libmount1-debuginfo-32bit-2.28-7.1 libuuid-devel-32bit-2.28-7.1 libuuid1-32bit-2.28-7.1 libuuid1-debuginfo-32bit-2.28-7.1 References: https://www.suse.com/security/cve/CVE-2016-5011.html https://bugzilla.suse.com/947494 https://bugzilla.suse.com/966891 https://bugzilla.suse.com/982331 https://bugzilla.suse.com/987176 https://bugzilla.suse.com/988361 https://bugzilla.suse.com/990531 https://bugzilla.suse.com/994399

1 0

openSUSE-SU-2016:3101-1: moderate: Security update for pacemaker
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for pacemaker ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3101-1 Rating: moderate References: #1000743 #1002767 #1003565 #1007433 #1009076 #967388 #986644 #987348 #995365 Cross-References: CVE-2016-7035 CVE-2016-7797 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has 7 fixes is now available. Description: This update for pacemaker fixes the following issues: - remote: Allow cluster and remote LRM API versions to diverge (bsc#1009076) - libcrmcommon: fix CVE-2016-7035 (improper IPC guarding) (bsc#1007433) - sysconfig: minor tweaks (typo, wording) - spec: more robust check for systemd being in use - spec: defines instead of some globals + error suppression - various: issues discovered via valgrind and coverity - attrd_updater: fix usage of HAVE_ATOMIC_ATTRD - crmd: cl#5185 - Record pending operations in the CIB before they are performed (bsc#1003565) - ClusterMon: fix to avoid matching other process with the same PID - mcp: improve comments for sysconfig options - remove openssl-devel and libselinux-devel as build dependencies - tools: crm_standby --version/--help should work without cluster - libpengine: only log startup-fencing warning once - pacemaker.service: do not mistakenly suggest killing fenced - libcrmcommon: report errors consistently when waiting for data on connection (bsc#986644) - remote: Correctly calculate the remaining timeouts when receiving messages (bsc#986644) - libfencing: report added node ID correctly - crm_mon: Do not call setenv with null value - pengine: Do not fence a maintenance node if it shuts down cleanly (bsc#1000743) - ping: Avoid temporary files for fping check (bsc#987348) - all: clarify licensing and copyrights - crmd: Resend the shutdown request if the DC forgets - ping: Avoid temp files in fping_check (bsc#987348) - crmd: Ensure the R_SHUTDOWN is set whenever we ask the DC to shut us down - crmd: clear remote node operation history only when it comes up - libcib,libfencing,libtransition: handle memory allocation errors without CRM_CHECK() - tools: make crm_mon XML schema handle resources with multiple active - pengine: set OCF_RESKEY_CRM_meta_notify_active_* for multistate resources - pengine: avoid null dereference in new same-node ordering option - lrmd,libcluster: ensure g_hash_table_foreach() is never passed a null table - crmd: don't log warning if abort_unless_down() can't find down event - lib: Correction of the deletion of the notice registration. - stonithd: Correction of the wrong connection process name. - crmd: Keep a state of LRMD in the DC node latest. - pengine: avoid transition loop for start-then-stop + unfencing - libpengine: allow pe_order_same_node option for constraints - cts: Restart systemd-journald with "systemctl restart systemd-journald.socket" (bsc#995365) - libcrmcommon: properly handle XML comments when comparing v2 patchset diffs - crmd: don't abort transitions for CIB comment changes - libcrmcommon: log XML comments correctly - libcrmcommon: remove extraneous format specifier from log message - remote: cl#5269 - Notify other clients of a new connection only if the handshake has completed (bsc#967388, bsc#1002767, CVE-2016-7797) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1447=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libpacemaker-devel-1.1.13-23.2 libpacemaker3-1.1.13-23.2 libpacemaker3-debuginfo-1.1.13-23.2 pacemaker-1.1.13-23.2 pacemaker-cli-1.1.13-23.2 pacemaker-cli-debuginfo-1.1.13-23.2 pacemaker-cts-1.1.13-23.2 pacemaker-cts-debuginfo-1.1.13-23.2 pacemaker-debuginfo-1.1.13-23.2 pacemaker-debugsource-1.1.13-23.2 pacemaker-remote-1.1.13-23.2 pacemaker-remote-debuginfo-1.1.13-23.2 References: https://www.suse.com/security/cve/CVE-2016-7035.html https://www.suse.com/security/cve/CVE-2016-7797.html https://bugzilla.suse.com/1000743 https://bugzilla.suse.com/1002767 https://bugzilla.suse.com/1003565 https://bugzilla.suse.com/1007433 https://bugzilla.suse.com/1009076 https://bugzilla.suse.com/967388 https://bugzilla.suse.com/986644 https://bugzilla.suse.com/987348 https://bugzilla.suse.com/995365

1 0

openSUSE-SU-2016:3099-1: moderate: Security update for pcre
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for pcre ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3099-1 Rating: moderate References: #906574 #924960 #933288 #933878 #936227 #942865 #957566 #957567 #957598 #957600 #960837 #971741 #972127 Cross-References: CVE-2014-8964 CVE-2015-2325 CVE-2015-2327 CVE-2015-2328 CVE-2015-3210 CVE-2015-3217 CVE-2015-5073 CVE-2015-8380 CVE-2015-8381 CVE-2015-8382 CVE-2015-8383 CVE-2015-8384 CVE-2015-8385 CVE-2015-8386 CVE-2015-8387 CVE-2015-8388 CVE-2015-8389 CVE-2015-8390 CVE-2015-8391 CVE-2015-8392 CVE-2015-8393 CVE-2015-8394 CVE-2015-8395 CVE-2016-1283 CVE-2016-3191 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 25 vulnerabilities is now available. Description: This update for pcre to version 8.39 (bsc#972127) fixes several issues. If you use pcre extensively please be aware that this is an update to a new version. Please make sure that your software works with the updated version. This version fixes a number of vulnerabilities that affect pcre and applications using the libary when accepting untrusted input as regular expressions or as part thereof. Remote attackers could have caused the application to crash, disclose information or potentially execute arbitrary code. These security issues were fixed: - CVE-2014-8964: Heap-based buffer overflow in PCRE allowed remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats (bsc#906574). - CVE-2015-2325: Heap buffer overflow in compile_branch() (bsc#924960). - CVE-2015-3210: Heap buffer overflow in pcre_compile2() / compile_regex() (bsc#933288) - CVE-2015-3217: PCRE Library Call Stack Overflow Vulnerability in match() (bsc#933878). - CVE-2015-5073: Library Heap Overflow Vulnerability in find_fixedlength() (bsc#936227). - bsc#942865: heap overflow in compile_regex() - CVE-2015-8380: The pcre_exec function in pcre_exec.c mishandled a // pattern with a \01 string, which allowed remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror (bsc#957566). - CVE-2015-2327: PCRE mishandled certain patterns with internal recursive back references, which allowed remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror (bsc#957567). - bsc#957598: Various security issues - CVE-2015-8381: Heap Overflow in compile_regex() (bsc#957598). - CVE-2015-8382: Regular Expression Uninitialized Pointer Information Disclosure Vulnerability (ZDI-CAN-2547)(bsc#957598). - CVE-2015-8383: Buffer overflow caused by repeated conditional group(bsc#957598). - CVE-2015-8384: Buffer overflow caused by recursive back reference by name within certain group(bsc#957598). - CVE-2015-8385: Buffer overflow caused by forward reference by name to certain group(bsc#957598). - CVE-2015-8386: Buffer overflow caused by lookbehind assertion(bsc#957598). - CVE-2015-8387: Integer overflow in subroutine calls(bsc#957598). - CVE-2015-8388: Buffer overflow caused by certain patterns with an unmatched closing parenthesis(bsc#957598). - CVE-2015-8389: Infinite recursion in JIT compiler when processing certain patterns(bsc#957598). - CVE-2015-8390: Reading from uninitialized memory when processing certain patterns(bsc#957598). - CVE-2015-8391: Some pathological patterns causes pcre_compile() to run for a very long time(bsc#957598). - CVE-2015-8392: Buffer overflow caused by certain patterns with duplicated named groups(bsc#957598). - CVE-2015-8393: Information leak when running pcgrep -q on crafted binary(bsc#957598). - CVE-2015-8394: Integer overflow caused by missing check for certain conditions(bsc#957598). - CVE-2015-8395: Buffer overflow caused by certain references(bsc#957598). - CVE-2015-2328: PCRE mishandled the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allowed remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression (bsc#957600). - CVE-2016-1283: The pcre_compile2 function in pcre_compile.c in PCRE mishandled certain patterns with named subgroups, which allowed remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression (bsc#960837). - CVE-2016-3191: The compile_branch function in pcre_compile.c in pcre2_compile.c mishandled patterns containing an (*ACCEPT) substring in conjunction with nested parentheses, which allowed remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted regular expression (bsc#971741). These non-security issues were fixed: - JIT compiler improvements - performance improvements - The Unicode data tables have been updated to Unicode 7.0.0. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1448=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1448=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libpcre1-8.39-6.1 libpcre1-debuginfo-8.39-6.1 libpcre16-0-8.39-6.1 libpcre16-0-debuginfo-8.39-6.1 libpcrecpp0-8.39-6.1 libpcrecpp0-debuginfo-8.39-6.1 libpcreposix0-8.39-6.1 libpcreposix0-debuginfo-8.39-6.1 pcre-debugsource-8.39-6.1 pcre-devel-8.39-6.1 pcre-devel-static-8.39-6.1 pcre-tools-8.39-6.1 pcre-tools-debuginfo-8.39-6.1 - openSUSE Leap 42.2 (x86_64): libpcre1-32bit-8.39-6.1 libpcre1-debuginfo-32bit-8.39-6.1 libpcre16-0-32bit-8.39-6.1 libpcre16-0-debuginfo-32bit-8.39-6.1 libpcrecpp0-32bit-8.39-6.1 libpcrecpp0-debuginfo-32bit-8.39-6.1 libpcreposix0-32bit-8.39-6.1 libpcreposix0-debuginfo-32bit-8.39-6.1 - openSUSE Leap 42.2 (noarch): pcre-doc-8.39-6.1 - openSUSE Leap 42.1 (i586 x86_64): libpcre1-8.39-5.1 libpcre1-debuginfo-8.39-5.1 libpcre16-0-8.39-5.1 libpcre16-0-debuginfo-8.39-5.1 libpcrecpp0-8.39-5.1 libpcrecpp0-debuginfo-8.39-5.1 libpcreposix0-8.39-5.1 libpcreposix0-debuginfo-8.39-5.1 pcre-debugsource-8.39-5.1 pcre-devel-8.39-5.1 pcre-devel-static-8.39-5.1 pcre-tools-8.39-5.1 pcre-tools-debuginfo-8.39-5.1 - openSUSE Leap 42.1 (x86_64): libpcre1-32bit-8.39-5.1 libpcre1-debuginfo-32bit-8.39-5.1 libpcre16-0-32bit-8.39-5.1 libpcre16-0-debuginfo-32bit-8.39-5.1 libpcrecpp0-32bit-8.39-5.1 libpcrecpp0-debuginfo-32bit-8.39-5.1 libpcreposix0-32bit-8.39-5.1 libpcreposix0-debuginfo-32bit-8.39-5.1 - openSUSE Leap 42.1 (noarch): pcre-doc-8.39-5.1 References: https://www.suse.com/security/cve/CVE-2014-8964.html https://www.suse.com/security/cve/CVE-2015-2325.html https://www.suse.com/security/cve/CVE-2015-2327.html https://www.suse.com/security/cve/CVE-2015-2328.html https://www.suse.com/security/cve/CVE-2015-3210.html https://www.suse.com/security/cve/CVE-2015-3217.html https://www.suse.com/security/cve/CVE-2015-5073.html https://www.suse.com/security/cve/CVE-2015-8380.html https://www.suse.com/security/cve/CVE-2015-8381.html https://www.suse.com/security/cve/CVE-2015-8382.html https://www.suse.com/security/cve/CVE-2015-8383.html https://www.suse.com/security/cve/CVE-2015-8384.html https://www.suse.com/security/cve/CVE-2015-8385.html https://www.suse.com/security/cve/CVE-2015-8386.html https://www.suse.com/security/cve/CVE-2015-8387.html https://www.suse.com/security/cve/CVE-2015-8388.html https://www.suse.com/security/cve/CVE-2015-8389.html https://www.suse.com/security/cve/CVE-2015-8390.html https://www.suse.com/security/cve/CVE-2015-8391.html https://www.suse.com/security/cve/CVE-2015-8392.html https://www.suse.com/security/cve/CVE-2015-8393.html https://www.suse.com/security/cve/CVE-2015-8394.html https://www.suse.com/security/cve/CVE-2015-8395.html https://www.suse.com/security/cve/CVE-2016-1283.html https://www.suse.com/security/cve/CVE-2016-3191.html https://bugzilla.suse.com/906574 https://bugzilla.suse.com/924960 https://bugzilla.suse.com/933288 https://bugzilla.suse.com/933878 https://bugzilla.suse.com/936227 https://bugzilla.suse.com/942865 https://bugzilla.suse.com/957566 https://bugzilla.suse.com/957567 https://bugzilla.suse.com/957598 https://bugzilla.suse.com/957600 https://bugzilla.suse.com/960837 https://bugzilla.suse.com/971741 https://bugzilla.suse.com/972127

1 0

openSUSE-SU-2016:3097-1: moderate: Security update for libgit2
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for libgit2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3097-1 Rating: moderate References: #1003810 Cross-References: CVE-2016-8568 CVE-2016-8569 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: libgit2 was updated to fix two security issues. These security issues were fixed: - CVE-2016-8568: Read out-of-bounds in git_oid_nfmt (bsc#1003810). - CVE-2016-8569: DoS caused by a NULL pointer dereference in git_commit_message (bsc#1003810). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1450=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libgit2-24-0.24.1-3.1 libgit2-24-debuginfo-0.24.1-3.1 libgit2-debugsource-0.24.1-3.1 libgit2-devel-0.24.1-3.1 - openSUSE Leap 42.2 (x86_64): libgit2-24-32bit-0.24.1-3.1 libgit2-24-debuginfo-32bit-0.24.1-3.1 References: https://www.suse.com/security/cve/CVE-2016-8568.html https://www.suse.com/security/cve/CVE-2016-8569.html https://bugzilla.suse.com/1003810

1 0

openSUSE-SU-2016:3095-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3095-1 Rating: moderate References: #1008029 #986247 Cross-References: CVE-2016-5773 CVE-2016-9137 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for php5 fixes the following issues: - CVE-2016-9137: Use After Free in unserialize() (bsc#1008029) - CVE-2016-5773: ZipArchive class Use After Free Vulnerability in PHP's GC (bsc#986247) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1449=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1449=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_php5-5.5.14-69.1 apache2-mod_php5-debuginfo-5.5.14-69.1 php5-5.5.14-69.1 php5-bcmath-5.5.14-69.1 php5-bcmath-debuginfo-5.5.14-69.1 php5-bz2-5.5.14-69.1 php5-bz2-debuginfo-5.5.14-69.1 php5-calendar-5.5.14-69.1 php5-calendar-debuginfo-5.5.14-69.1 php5-ctype-5.5.14-69.1 php5-ctype-debuginfo-5.5.14-69.1 php5-curl-5.5.14-69.1 php5-curl-debuginfo-5.5.14-69.1 php5-dba-5.5.14-69.1 php5-dba-debuginfo-5.5.14-69.1 php5-debuginfo-5.5.14-69.1 php5-debugsource-5.5.14-69.1 php5-devel-5.5.14-69.1 php5-dom-5.5.14-69.1 php5-dom-debuginfo-5.5.14-69.1 php5-enchant-5.5.14-69.1 php5-enchant-debuginfo-5.5.14-69.1 php5-exif-5.5.14-69.1 php5-exif-debuginfo-5.5.14-69.1 php5-fastcgi-5.5.14-69.1 php5-fastcgi-debuginfo-5.5.14-69.1 php5-fileinfo-5.5.14-69.1 php5-fileinfo-debuginfo-5.5.14-69.1 php5-firebird-5.5.14-69.1 php5-firebird-debuginfo-5.5.14-69.1 php5-fpm-5.5.14-69.1 php5-fpm-debuginfo-5.5.14-69.1 php5-ftp-5.5.14-69.1 php5-ftp-debuginfo-5.5.14-69.1 php5-gd-5.5.14-69.1 php5-gd-debuginfo-5.5.14-69.1 php5-gettext-5.5.14-69.1 php5-gettext-debuginfo-5.5.14-69.1 php5-gmp-5.5.14-69.1 php5-gmp-debuginfo-5.5.14-69.1 php5-iconv-5.5.14-69.1 php5-iconv-debuginfo-5.5.14-69.1 php5-imap-5.5.14-69.1 php5-imap-debuginfo-5.5.14-69.1 php5-intl-5.5.14-69.1 php5-intl-debuginfo-5.5.14-69.1 php5-json-5.5.14-69.1 php5-json-debuginfo-5.5.14-69.1 php5-ldap-5.5.14-69.1 php5-ldap-debuginfo-5.5.14-69.1 php5-mbstring-5.5.14-69.1 php5-mbstring-debuginfo-5.5.14-69.1 php5-mcrypt-5.5.14-69.1 php5-mcrypt-debuginfo-5.5.14-69.1 php5-mssql-5.5.14-69.1 php5-mssql-debuginfo-5.5.14-69.1 php5-mysql-5.5.14-69.1 php5-mysql-debuginfo-5.5.14-69.1 php5-odbc-5.5.14-69.1 php5-odbc-debuginfo-5.5.14-69.1 php5-opcache-5.5.14-69.1 php5-opcache-debuginfo-5.5.14-69.1 php5-openssl-5.5.14-69.1 php5-openssl-debuginfo-5.5.14-69.1 php5-pcntl-5.5.14-69.1 php5-pcntl-debuginfo-5.5.14-69.1 php5-pdo-5.5.14-69.1 php5-pdo-debuginfo-5.5.14-69.1 php5-pgsql-5.5.14-69.1 php5-pgsql-debuginfo-5.5.14-69.1 php5-phar-5.5.14-69.1 php5-phar-debuginfo-5.5.14-69.1 php5-posix-5.5.14-69.1 php5-posix-debuginfo-5.5.14-69.1 php5-pspell-5.5.14-69.1 php5-pspell-debuginfo-5.5.14-69.1 php5-readline-5.5.14-69.1 php5-readline-debuginfo-5.5.14-69.1 php5-shmop-5.5.14-69.1 php5-shmop-debuginfo-5.5.14-69.1 php5-snmp-5.5.14-69.1 php5-snmp-debuginfo-5.5.14-69.1 php5-soap-5.5.14-69.1 php5-soap-debuginfo-5.5.14-69.1 php5-sockets-5.5.14-69.1 php5-sockets-debuginfo-5.5.14-69.1 php5-sqlite-5.5.14-69.1 php5-sqlite-debuginfo-5.5.14-69.1 php5-suhosin-5.5.14-69.1 php5-suhosin-debuginfo-5.5.14-69.1 php5-sysvmsg-5.5.14-69.1 php5-sysvmsg-debuginfo-5.5.14-69.1 php5-sysvsem-5.5.14-69.1 php5-sysvsem-debuginfo-5.5.14-69.1 php5-sysvshm-5.5.14-69.1 php5-sysvshm-debuginfo-5.5.14-69.1 php5-tidy-5.5.14-69.1 php5-tidy-debuginfo-5.5.14-69.1 php5-tokenizer-5.5.14-69.1 php5-tokenizer-debuginfo-5.5.14-69.1 php5-wddx-5.5.14-69.1 php5-wddx-debuginfo-5.5.14-69.1 php5-xmlreader-5.5.14-69.1 php5-xmlreader-debuginfo-5.5.14-69.1 php5-xmlrpc-5.5.14-69.1 php5-xmlrpc-debuginfo-5.5.14-69.1 php5-xmlwriter-5.5.14-69.1 php5-xmlwriter-debuginfo-5.5.14-69.1 php5-xsl-5.5.14-69.1 php5-xsl-debuginfo-5.5.14-69.1 php5-zip-5.5.14-69.1 php5-zip-debuginfo-5.5.14-69.1 php5-zlib-5.5.14-69.1 php5-zlib-debuginfo-5.5.14-69.1 - openSUSE Leap 42.2 (noarch): php5-pear-5.5.14-69.1 - openSUSE Leap 42.1 (i586 x86_64): apache2-mod_php5-5.5.14-68.3 apache2-mod_php5-debuginfo-5.5.14-68.3 php5-5.5.14-68.3 php5-bcmath-5.5.14-68.3 php5-bcmath-debuginfo-5.5.14-68.3 php5-bz2-5.5.14-68.3 php5-bz2-debuginfo-5.5.14-68.3 php5-calendar-5.5.14-68.3 php5-calendar-debuginfo-5.5.14-68.3 php5-ctype-5.5.14-68.3 php5-ctype-debuginfo-5.5.14-68.3 php5-curl-5.5.14-68.3 php5-curl-debuginfo-5.5.14-68.3 php5-dba-5.5.14-68.3 php5-dba-debuginfo-5.5.14-68.3 php5-debuginfo-5.5.14-68.3 php5-debugsource-5.5.14-68.3 php5-devel-5.5.14-68.3 php5-dom-5.5.14-68.3 php5-dom-debuginfo-5.5.14-68.3 php5-enchant-5.5.14-68.3 php5-enchant-debuginfo-5.5.14-68.3 php5-exif-5.5.14-68.3 php5-exif-debuginfo-5.5.14-68.3 php5-fastcgi-5.5.14-68.3 php5-fastcgi-debuginfo-5.5.14-68.3 php5-fileinfo-5.5.14-68.3 php5-fileinfo-debuginfo-5.5.14-68.3 php5-firebird-5.5.14-68.3 php5-firebird-debuginfo-5.5.14-68.3 php5-fpm-5.5.14-68.3 php5-fpm-debuginfo-5.5.14-68.3 php5-ftp-5.5.14-68.3 php5-ftp-debuginfo-5.5.14-68.3 php5-gd-5.5.14-68.3 php5-gd-debuginfo-5.5.14-68.3 php5-gettext-5.5.14-68.3 php5-gettext-debuginfo-5.5.14-68.3 php5-gmp-5.5.14-68.3 php5-gmp-debuginfo-5.5.14-68.3 php5-iconv-5.5.14-68.3 php5-iconv-debuginfo-5.5.14-68.3 php5-imap-5.5.14-68.3 php5-imap-debuginfo-5.5.14-68.3 php5-intl-5.5.14-68.3 php5-intl-debuginfo-5.5.14-68.3 php5-json-5.5.14-68.3 php5-json-debuginfo-5.5.14-68.3 php5-ldap-5.5.14-68.3 php5-ldap-debuginfo-5.5.14-68.3 php5-mbstring-5.5.14-68.3 php5-mbstring-debuginfo-5.5.14-68.3 php5-mcrypt-5.5.14-68.3 php5-mcrypt-debuginfo-5.5.14-68.3 php5-mssql-5.5.14-68.3 php5-mssql-debuginfo-5.5.14-68.3 php5-mysql-5.5.14-68.3 php5-mysql-debuginfo-5.5.14-68.3 php5-odbc-5.5.14-68.3 php5-odbc-debuginfo-5.5.14-68.3 php5-opcache-5.5.14-68.3 php5-opcache-debuginfo-5.5.14-68.3 php5-openssl-5.5.14-68.3 php5-openssl-debuginfo-5.5.14-68.3 php5-pcntl-5.5.14-68.3 php5-pcntl-debuginfo-5.5.14-68.3 php5-pdo-5.5.14-68.3 php5-pdo-debuginfo-5.5.14-68.3 php5-pgsql-5.5.14-68.3 php5-pgsql-debuginfo-5.5.14-68.3 php5-phar-5.5.14-68.3 php5-phar-debuginfo-5.5.14-68.3 php5-posix-5.5.14-68.3 php5-posix-debuginfo-5.5.14-68.3 php5-pspell-5.5.14-68.3 php5-pspell-debuginfo-5.5.14-68.3 php5-readline-5.5.14-68.3 php5-readline-debuginfo-5.5.14-68.3 php5-shmop-5.5.14-68.3 php5-shmop-debuginfo-5.5.14-68.3 php5-snmp-5.5.14-68.3 php5-snmp-debuginfo-5.5.14-68.3 php5-soap-5.5.14-68.3 php5-soap-debuginfo-5.5.14-68.3 php5-sockets-5.5.14-68.3 php5-sockets-debuginfo-5.5.14-68.3 php5-sqlite-5.5.14-68.3 php5-sqlite-debuginfo-5.5.14-68.3 php5-suhosin-5.5.14-68.3 php5-suhosin-debuginfo-5.5.14-68.3 php5-sysvmsg-5.5.14-68.3 php5-sysvmsg-debuginfo-5.5.14-68.3 php5-sysvsem-5.5.14-68.3 php5-sysvsem-debuginfo-5.5.14-68.3 php5-sysvshm-5.5.14-68.3 php5-sysvshm-debuginfo-5.5.14-68.3 php5-tidy-5.5.14-68.3 php5-tidy-debuginfo-5.5.14-68.3 php5-tokenizer-5.5.14-68.3 php5-tokenizer-debuginfo-5.5.14-68.3 php5-wddx-5.5.14-68.3 php5-wddx-debuginfo-5.5.14-68.3 php5-xmlreader-5.5.14-68.3 php5-xmlreader-debuginfo-5.5.14-68.3 php5-xmlrpc-5.5.14-68.3 php5-xmlrpc-debuginfo-5.5.14-68.3 php5-xmlwriter-5.5.14-68.3 php5-xmlwriter-debuginfo-5.5.14-68.3 php5-xsl-5.5.14-68.3 php5-xsl-debuginfo-5.5.14-68.3 php5-zip-5.5.14-68.3 php5-zip-debuginfo-5.5.14-68.3 php5-zlib-5.5.14-68.3 php5-zlib-debuginfo-5.5.14-68.3 - openSUSE Leap 42.1 (noarch): php5-pear-5.5.14-68.3 References: https://www.suse.com/security/cve/CVE-2016-5773.html https://www.suse.com/security/cve/CVE-2016-9137.html https://bugzilla.suse.com/1008029 https://bugzilla.suse.com/986247

1 0

openSUSE-SU-2016:3092-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3092-1 Rating: moderate References: #1008029 #988486 Cross-References: CVE-2016-5385 CVE-2016-9137 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for php7 fixes the following security issues: - CVE-2016-5385: Setting HTTP_PROXY environment variable via Proxy header (httpoxy) (bsc#988486). - CVE-2016-9137: Fixing a Use After Free in unserialize() (bsc#1008029). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1440=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_php7-7.0.7-6.2 apache2-mod_php7-debuginfo-7.0.7-6.2 php7-7.0.7-6.2 php7-bcmath-7.0.7-6.2 php7-bcmath-debuginfo-7.0.7-6.2 php7-bz2-7.0.7-6.2 php7-bz2-debuginfo-7.0.7-6.2 php7-calendar-7.0.7-6.2 php7-calendar-debuginfo-7.0.7-6.2 php7-ctype-7.0.7-6.2 php7-ctype-debuginfo-7.0.7-6.2 php7-curl-7.0.7-6.2 php7-curl-debuginfo-7.0.7-6.2 php7-dba-7.0.7-6.2 php7-dba-debuginfo-7.0.7-6.2 php7-debuginfo-7.0.7-6.2 php7-debugsource-7.0.7-6.2 php7-devel-7.0.7-6.2 php7-dom-7.0.7-6.2 php7-dom-debuginfo-7.0.7-6.2 php7-enchant-7.0.7-6.2 php7-enchant-debuginfo-7.0.7-6.2 php7-exif-7.0.7-6.2 php7-exif-debuginfo-7.0.7-6.2 php7-fastcgi-7.0.7-6.2 php7-fastcgi-debuginfo-7.0.7-6.2 php7-fileinfo-7.0.7-6.2 php7-fileinfo-debuginfo-7.0.7-6.2 php7-firebird-7.0.7-6.2 php7-firebird-debuginfo-7.0.7-6.2 php7-fpm-7.0.7-6.2 php7-fpm-debuginfo-7.0.7-6.2 php7-ftp-7.0.7-6.2 php7-ftp-debuginfo-7.0.7-6.2 php7-gd-7.0.7-6.2 php7-gd-debuginfo-7.0.7-6.2 php7-gettext-7.0.7-6.2 php7-gettext-debuginfo-7.0.7-6.2 php7-gmp-7.0.7-6.2 php7-gmp-debuginfo-7.0.7-6.2 php7-iconv-7.0.7-6.2 php7-iconv-debuginfo-7.0.7-6.2 php7-imap-7.0.7-6.2 php7-imap-debuginfo-7.0.7-6.2 php7-intl-7.0.7-6.2 php7-intl-debuginfo-7.0.7-6.2 php7-json-7.0.7-6.2 php7-json-debuginfo-7.0.7-6.2 php7-ldap-7.0.7-6.2 php7-ldap-debuginfo-7.0.7-6.2 php7-mbstring-7.0.7-6.2 php7-mbstring-debuginfo-7.0.7-6.2 php7-mcrypt-7.0.7-6.2 php7-mcrypt-debuginfo-7.0.7-6.2 php7-mysql-7.0.7-6.2 php7-mysql-debuginfo-7.0.7-6.2 php7-odbc-7.0.7-6.2 php7-odbc-debuginfo-7.0.7-6.2 php7-opcache-7.0.7-6.2 php7-opcache-debuginfo-7.0.7-6.2 php7-openssl-7.0.7-6.2 php7-openssl-debuginfo-7.0.7-6.2 php7-pcntl-7.0.7-6.2 php7-pcntl-debuginfo-7.0.7-6.2 php7-pdo-7.0.7-6.2 php7-pdo-debuginfo-7.0.7-6.2 php7-pgsql-7.0.7-6.2 php7-pgsql-debuginfo-7.0.7-6.2 php7-phar-7.0.7-6.2 php7-phar-debuginfo-7.0.7-6.2 php7-posix-7.0.7-6.2 php7-posix-debuginfo-7.0.7-6.2 php7-pspell-7.0.7-6.2 php7-pspell-debuginfo-7.0.7-6.2 php7-readline-7.0.7-6.2 php7-readline-debuginfo-7.0.7-6.2 php7-shmop-7.0.7-6.2 php7-shmop-debuginfo-7.0.7-6.2 php7-snmp-7.0.7-6.2 php7-snmp-debuginfo-7.0.7-6.2 php7-soap-7.0.7-6.2 php7-soap-debuginfo-7.0.7-6.2 php7-sockets-7.0.7-6.2 php7-sockets-debuginfo-7.0.7-6.2 php7-sqlite-7.0.7-6.2 php7-sqlite-debuginfo-7.0.7-6.2 php7-sysvmsg-7.0.7-6.2 php7-sysvmsg-debuginfo-7.0.7-6.2 php7-sysvsem-7.0.7-6.2 php7-sysvsem-debuginfo-7.0.7-6.2 php7-sysvshm-7.0.7-6.2 php7-sysvshm-debuginfo-7.0.7-6.2 php7-tidy-7.0.7-6.2 php7-tidy-debuginfo-7.0.7-6.2 php7-tokenizer-7.0.7-6.2 php7-tokenizer-debuginfo-7.0.7-6.2 php7-wddx-7.0.7-6.2 php7-wddx-debuginfo-7.0.7-6.2 php7-xmlreader-7.0.7-6.2 php7-xmlreader-debuginfo-7.0.7-6.2 php7-xmlrpc-7.0.7-6.2 php7-xmlrpc-debuginfo-7.0.7-6.2 php7-xmlwriter-7.0.7-6.2 php7-xmlwriter-debuginfo-7.0.7-6.2 php7-xsl-7.0.7-6.2 php7-xsl-debuginfo-7.0.7-6.2 php7-zip-7.0.7-6.2 php7-zip-debuginfo-7.0.7-6.2 php7-zlib-7.0.7-6.2 php7-zlib-debuginfo-7.0.7-6.2 - openSUSE Leap 42.2 (noarch): php7-pear-7.0.7-6.2 php7-pear-Archive_Tar-7.0.7-6.2 References: https://www.suse.com/security/cve/CVE-2016-5385.html https://www.suse.com/security/cve/CVE-2016-9137.html https://bugzilla.suse.com/1008029 https://bugzilla.suse.com/988486

1 0

openSUSE-SU-2016:3091-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3091-1 Rating: moderate References: #1001066 #1007245 Cross-References: CVE-2016-6823 CVE-2016-8862 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ImageMagick fixes the following issues: - Memory allocation failure in AcquireMagickMemory (CVE-2016-8862) [bsc#1007245] - update incomplete patch of CVE-2016-6823 [bsc#1001066] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1443=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ImageMagick-6.8.8.1-24.2 ImageMagick-debuginfo-6.8.8.1-24.2 ImageMagick-debugsource-6.8.8.1-24.2 ImageMagick-devel-6.8.8.1-24.2 ImageMagick-extra-6.8.8.1-24.2 ImageMagick-extra-debuginfo-6.8.8.1-24.2 libMagick++-6_Q16-3-6.8.8.1-24.2 libMagick++-6_Q16-3-debuginfo-6.8.8.1-24.2 libMagick++-devel-6.8.8.1-24.2 libMagickCore-6_Q16-1-6.8.8.1-24.2 libMagickCore-6_Q16-1-debuginfo-6.8.8.1-24.2 libMagickWand-6_Q16-1-6.8.8.1-24.2 libMagickWand-6_Q16-1-debuginfo-6.8.8.1-24.2 perl-PerlMagick-6.8.8.1-24.2 perl-PerlMagick-debuginfo-6.8.8.1-24.2 - openSUSE Leap 42.1 (x86_64): ImageMagick-devel-32bit-6.8.8.1-24.2 libMagick++-6_Q16-3-32bit-6.8.8.1-24.2 libMagick++-6_Q16-3-debuginfo-32bit-6.8.8.1-24.2 libMagick++-devel-32bit-6.8.8.1-24.2 libMagickCore-6_Q16-1-32bit-6.8.8.1-24.2 libMagickCore-6_Q16-1-debuginfo-32bit-6.8.8.1-24.2 libMagickWand-6_Q16-1-32bit-6.8.8.1-24.2 libMagickWand-6_Q16-1-debuginfo-32bit-6.8.8.1-24.2 - openSUSE Leap 42.1 (noarch): ImageMagick-doc-6.8.8.1-24.2 References: https://www.suse.com/security/cve/CVE-2016-6823.html https://www.suse.com/security/cve/CVE-2016-8862.html https://bugzilla.suse.com/1001066 https://bugzilla.suse.com/1007245

1 0

openSUSE-SU-2016:3090-1: moderate: Security update for perl-DBD-mysql
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for perl-DBD-mysql ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3090-1 Rating: moderate References: #1012546 Cross-References: CVE-2016-1251 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for perl-DBD-mysql fixes the following issues: - perl-DBD-mysql could crash when executing maliciously crafted prepared statements. (CVE-2016-1251, boo#1012546) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1441=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): perl-DBD-mysql-4.021-8.3.1 perl-DBD-mysql-debuginfo-4.021-8.3.1 perl-DBD-mysql-debugsource-4.021-8.3.1 References: https://www.suse.com/security/cve/CVE-2016-1251.html https://bugzilla.suse.com/1012546

1 0

openSUSE-SU-2016:3089-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3089-1 Rating: moderate References: #1001066 #1007245 Cross-References: CVE-2016-6823 CVE-2016-8862 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ImageMagick fixes the following issues: - Memory allocation failure in AcquireMagickMemory (CVE-2016-8862) [bsc#1007245] - update incomplete patch of CVE-2016-6823 [bsc#1001066] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1445=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ImageMagick-6.8.8.1-22.2 ImageMagick-debuginfo-6.8.8.1-22.2 ImageMagick-debugsource-6.8.8.1-22.2 ImageMagick-devel-6.8.8.1-22.2 ImageMagick-extra-6.8.8.1-22.2 ImageMagick-extra-debuginfo-6.8.8.1-22.2 libMagick++-6_Q16-3-6.8.8.1-22.2 libMagick++-6_Q16-3-debuginfo-6.8.8.1-22.2 libMagick++-devel-6.8.8.1-22.2 libMagickCore-6_Q16-1-6.8.8.1-22.2 libMagickCore-6_Q16-1-debuginfo-6.8.8.1-22.2 libMagickWand-6_Q16-1-6.8.8.1-22.2 libMagickWand-6_Q16-1-debuginfo-6.8.8.1-22.2 perl-PerlMagick-6.8.8.1-22.2 perl-PerlMagick-debuginfo-6.8.8.1-22.2 - openSUSE Leap 42.2 (x86_64): ImageMagick-devel-32bit-6.8.8.1-22.2 libMagick++-6_Q16-3-32bit-6.8.8.1-22.2 libMagick++-6_Q16-3-debuginfo-32bit-6.8.8.1-22.2 libMagick++-devel-32bit-6.8.8.1-22.2 libMagickCore-6_Q16-1-32bit-6.8.8.1-22.2 libMagickCore-6_Q16-1-debuginfo-32bit-6.8.8.1-22.2 libMagickWand-6_Q16-1-32bit-6.8.8.1-22.2 libMagickWand-6_Q16-1-debuginfo-32bit-6.8.8.1-22.2 - openSUSE Leap 42.2 (noarch): ImageMagick-doc-6.8.8.1-22.2 References: https://www.suse.com/security/cve/CVE-2016-6823.html https://www.suse.com/security/cve/CVE-2016-8862.html https://bugzilla.suse.com/1001066 https://bugzilla.suse.com/1007245

1 0

openSUSE-SU-2016:3088-1: moderate: Security update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3088-1 Rating: moderate References: #1005522 #1005523 #1005524 #1005525 #1005526 #1005527 #1005528 Cross-References: CVE-2016-5542 CVE-2016-5554 CVE-2016-5556 CVE-2016-5568 CVE-2016-5573 CVE-2016-5582 CVE-2016-5597 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for java-1_7_0-openjdk fixes the following issues: - Update to 2.6.8 - OpenJDK 7u121 * Security fixes + S8151921: Improved page resolution + S8155968: Update command line options + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522) + S8157176: Improved classfile parsing + S8157739, CVE-2016-5554: Classloader Consistency Checking (bsc#1005523) + S8157749: Improve handling of DNS error replies + S8157753: Audio replay enhancement + S8157759: LCMS Transform Sampling Enhancement + S8157764: Better handling of interpolation plugins + S8158302: Handle contextual glyph substitutions + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525) + S8159495: Fix index offsets + S8159503: Amend Annotation Actions + S8159511: Stack map validation + S8159515: Improve indy validation + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526) + S8160090: Better signature handling in pack200 + S8160094: Improve pack200 layout + S8160098: Clean up color profiles + S8160591, CVE-2016-5582: Improve internal array handling (bsc#1005527) + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528) + PR3207, RH1367357: lcms2: Out-of-bounds read in Type_MLU_Read() + CVE-2016-5556 (bsc#1005524) * Import of OpenJDK 7 u121 build 0 + S6624200: Regression test fails: test/closed/javax/swing/JMenuItem/4654927/bug4654927.java + S6882559: new JEditorPane("text/plain","") fails for null context class loader + S7090158: Networking Libraries don't build with javac -Werror + S7125055: ContentHandler.getContent API changed in error + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on windows + S7187051: ShortRSAKeynnn.sh tests should do cleanup before start test + S8000626: Implement dead key detection for KeyEvent on Linux + S8003890: corelibs test scripts should pass TESTVMOPTS + S8005629: javac warnings compiling java.awt.EventDispatchThread and sun.awt.X11.XIconWindow + S8010297: Missing isLoggable() checks in logging code + S8010782: clean up source files containing carriage return characters + S8014431: cleanup warnings indicated by the -Wunused-value compiler option on linux + S8015265: revise the fix for 8007037 + S8016747: Replace deprecated PlatformLogger isLoggable(int) with isLoggable(Level) + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame demo + S8024756: method grouping tabs are not selectable + S8026741: jdk8 l10n resource file translation update 5 + S8048147: Privilege tests with JAAS Subject.doAs + S8048357: PKCS basic tests + S8049171: Additional tests for jarsigner's warnings + S8059177: jdk8u40 l10n resource file translation update 1 + S8075584: test for 8067364 depends on hardwired text advance + S8076486: [TESTBUG] javax/security/auth/Subject/doAs/NestedActions.java fails if extra VM options are given + S8077953: [TEST_BUG] com/sun/management/OperatingSystemMXBean/TestTotalSwap.java Compilation failed after JDK-8077387 + S8080628: No mnemonics on Open and Save buttons in JFileChooser + S8083601: jdk8u60 l10n resource file translation update 2 + S8140530: Creating a VolatileImage with size 0,0 results in no longer working g2d.drawString + S8142926: OutputAnalyzer's shouldXXX() calls return this + S8143134: L10n resource file translation update + S8147077: IllegalArgumentException thrown by api/java_awt/Component/FlipBufferStrategy/indexTGF_General + S8148127: IllegalArgumentException thrown by JCK test api/java_awt/Component/FlipBufferStrategy/indexTGF_General in opengl pipeline + S8150611: Security problem on sun.misc.resources.Messages* + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp + S8158734: JEditorPane.createEditorKitForContentType throws NPE after 6882559 + S8159684: (tz) Support tzdata2016f + S8160934: isnan() is not available on older MSVC compilers + S8162411: Service Menu services 2 + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh failing after JDK-8155968 + S8162511: 8u111 L10n resource file updates + S8162792: Remove constraint DSA keySize < 1024 from jdk.jar.disabledAlgorithms in jdk8 + S8164452: 8u111 L10n resource file update - msgdrop 20 + S8165816: jarsigner -verify shows jar unsigned if it was signed with a weak algorithm + S8166381: Back out changes to the java.security file to not disable MD5 * Backports + S6604109, PR3162: javax.print.PrintServiceLookup.lookupPrintServices fails SOMETIMES for Cups + S6907252, PR3162: ZipFileInputStream Not Thread-Safe + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh failed on 7u45 Embedded linux-ppc* + S8028479, PR3162: runNameEquals still cannot precisely detect if a usable native krb5 is available + S8034057, PR3162: Files.getFileStore and Files.isWritable do not work with SUBST'ed drives (win) + S8038491, PR3162: Improve synchronization in ZipFile.read() + S8038502, PR3162: Deflater.needsInput() should use synchronization + S8059411, PR3162: RowSetWarning does not correctly chain warnings + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column range validation to isdefinitlyWritable + S8066188, PR3162: BaseRowSet returns the wrong default value for escape processing + S8072466, PR3162: Deadlock when initializing MulticastSocket and DatagramSocket + S8075118, PR3162: JVM stuck in infinite loop during verification + S8076579, PR3162: Popping a stack frame after exception breakpoint sets last method param to exception + S8078495, PR3162: End time checking for native TGT is wrong + S8078668, PR3162: jar usage string mentions unsupported option '-n' + S8080115, PR3162: (fs) Crash in libgio when calling Files.probeContentType(path) from parallel threads + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for TimeZone parsing problem + S8129957, PR3162: Deadlock in JNDI LDAP implementation when closing the LDAP context + S8130136, PR3162: Swing window sometimes fails to repaint partially when it becomes exposed + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails when two successive stores in an iteration are determined to be equal + S8132551, PR3162: Initialize local variables before returning them in p11_convert.c + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails after changes for JDK-8080115 + S8133666, PR3162: OperatingSystemMXBean reports abnormally high machine CPU consumption on Linux + S8135002, PR3162: Fix or remove broken links in objectMonitor.cpp comments + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate + S8137230, PR3162: TEST_BUG: java/nio/channels/FileChannel/LoopingTruncate.java timed out + S8139373, PR3162: [TEST_BUG] java/net/MulticastSocket/MultiDead.java failed with timeout + S8140249, PR3162: JVM Crashing During startUp If Flight Recording is enabled + S8141491, PR3160, G592292: Unaligned memory access in Bits.c + S8144483, PR3162: One long Safepoint pause directly after each GC log rotation + S8149611, PR3160, G592292: Add tests for Unsafe.copySwapMemory * Bug fixes + S8078628, PR3151: Zero build fails with pre-compiled headers disabled + PR3128: pax-mark-vm script calls "exit -1" which is invalid in dash + PR3131: PaX marking fails on filesystems which don't support extended attributes + PR3135: Makefile.am rule stamps/add/tzdata-support-debug.stamp has a typo in add-tzdata dependency + PR3141: Pass $(CC) and $(CXX) to OpenJDK build + PR3166: invalid zip timestamp handling leads to error building bootstrap-javac + PR3202: Update infinality configure test + PR3212: Disable ARM32 JIT by default * CACAO + PR3136: CACAO is broken due to 2 new native methods in sun.misc.Unsafe (from S8158260) * JamVM + PR3134: JamVM is broken due to 2 new native methods in sun.misc.Unsafe (from S8158260) * AArch64 port + S8167200, PR3204: AArch64: Broken stack pointer adjustment in interpreter + S8168888: Port 8160591: Improve internal array handling to AArch64. + PR3211: AArch64 build fails with pre-compiled headers disabled - Changed patch: * java-1_7_0-openjdk-gcc6.patch + Rediff to changed context - Disable arm32 JIT, since its build broken (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1444=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1444=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): java-1_7_0-openjdk-1.7.0.121-37.2 java-1_7_0-openjdk-accessibility-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-debugsource-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-devel-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-headless-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-debugsource-1.7.0.121-37.2 java-1_7_0-openjdk-demo-1.7.0.121-37.2 java-1_7_0-openjdk-demo-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-devel-1.7.0.121-37.2 java-1_7_0-openjdk-devel-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-headless-1.7.0.121-37.2 java-1_7_0-openjdk-headless-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-src-1.7.0.121-37.2 - openSUSE Leap 42.2 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.121-37.2 - openSUSE Leap 42.1 (i586 x86_64): java-1_7_0-openjdk-1.7.0.121-37.2 java-1_7_0-openjdk-accessibility-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-debugsource-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-devel-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-devel-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-headless-1.7.0.121-37.2 java-1_7_0-openjdk-bootstrap-headless-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-debugsource-1.7.0.121-37.2 java-1_7_0-openjdk-demo-1.7.0.121-37.2 java-1_7_0-openjdk-demo-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-devel-1.7.0.121-37.2 java-1_7_0-openjdk-devel-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-headless-1.7.0.121-37.2 java-1_7_0-openjdk-headless-debuginfo-1.7.0.121-37.2 java-1_7_0-openjdk-src-1.7.0.121-37.2 - openSUSE Leap 42.1 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.121-37.2 References: https://www.suse.com/security/cve/CVE-2016-5542.html https://www.suse.com/security/cve/CVE-2016-5554.html https://www.suse.com/security/cve/CVE-2016-5556.html https://www.suse.com/security/cve/CVE-2016-5568.html https://www.suse.com/security/cve/CVE-2016-5573.html https://www.suse.com/security/cve/CVE-2016-5582.html https://www.suse.com/security/cve/CVE-2016-5597.html https://bugzilla.suse.com/1005522 https://bugzilla.suse.com/1005523 https://bugzilla.suse.com/1005524 https://bugzilla.suse.com/1005525 https://bugzilla.suse.com/1005526 https://bugzilla.suse.com/1005527 https://bugzilla.suse.com/1005528

1 0

openSUSE-SU-2016:3087-1: moderate: Security update for libass
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for libass ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3087-1 Rating: moderate References: #1002982 Cross-References: CVE-2016-7969 CVE-2016-7972 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libass fixes the following issues: - Fixed situations that could cause uninitialised memory to be used, leading to undefined behaviour. (boo#1002982, CVE-2016-7969, CVE-2016-7972) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1442=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1442=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libass-debugsource-0.12.3-6.1 libass-devel-0.12.3-6.1 libass5-0.12.3-6.1 libass5-debuginfo-0.12.3-6.1 - openSUSE Leap 42.1 (x86_64): libass5-32bit-0.12.3-6.1 libass5-debuginfo-32bit-0.12.3-6.1 - openSUSE 13.2 (i586 x86_64): libass-debugsource-0.12.1-2.8.1 libass-devel-0.12.1-2.8.1 libass5-0.12.1-2.8.1 libass5-debuginfo-0.12.1-2.8.1 - openSUSE 13.2 (x86_64): libass5-32bit-0.12.1-2.8.1 libass5-debuginfo-32bit-0.12.1-2.8.1 References: https://www.suse.com/security/cve/CVE-2016-7969.html https://www.suse.com/security/cve/CVE-2016-7972.html https://bugzilla.suse.com/1002982

1 0

openSUSE-SU-2016:3086-1: important: Security update for the openSUSE Leap 42.1 kernel.
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for the openSUSE Leap 42.1 kernel. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3086-1 Rating: important References: #1013604 Cross-References: CVE-2016-9576 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The openSUSE Leap 42.1 kernel has been updated to fix a security issue: - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg* or /dev/bsg* to elevate their privileges (bsc#1013604). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1439=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i686 x86_64): kernel-debug-4.1.36-41.1 kernel-debug-base-4.1.36-41.1 kernel-debug-base-debuginfo-4.1.36-41.1 kernel-debug-debuginfo-4.1.36-41.1 kernel-debug-debugsource-4.1.36-41.1 kernel-debug-devel-4.1.36-41.1 kernel-debug-devel-debuginfo-4.1.36-41.1 kernel-ec2-4.1.36-41.1 kernel-ec2-base-4.1.36-41.1 kernel-ec2-base-debuginfo-4.1.36-41.1 kernel-ec2-debuginfo-4.1.36-41.1 kernel-ec2-debugsource-4.1.36-41.1 kernel-ec2-devel-4.1.36-41.1 kernel-pv-4.1.36-41.1 kernel-pv-base-4.1.36-41.1 kernel-pv-base-debuginfo-4.1.36-41.1 kernel-pv-debuginfo-4.1.36-41.1 kernel-pv-debugsource-4.1.36-41.1 kernel-pv-devel-4.1.36-41.1 kernel-vanilla-4.1.36-41.1 kernel-vanilla-debuginfo-4.1.36-41.1 kernel-vanilla-debugsource-4.1.36-41.1 kernel-vanilla-devel-4.1.36-41.1 kernel-xen-4.1.36-41.1 kernel-xen-base-4.1.36-41.1 kernel-xen-base-debuginfo-4.1.36-41.1 kernel-xen-debuginfo-4.1.36-41.1 kernel-xen-debugsource-4.1.36-41.1 kernel-xen-devel-4.1.36-41.1 - openSUSE Leap 42.1 (i586 x86_64): kernel-default-4.1.36-41.1 kernel-default-base-4.1.36-41.1 kernel-default-base-debuginfo-4.1.36-41.1 kernel-default-debuginfo-4.1.36-41.1 kernel-default-debugsource-4.1.36-41.1 kernel-default-devel-4.1.36-41.1 kernel-obs-build-4.1.36-41.1 kernel-obs-build-debugsource-4.1.36-41.1 kernel-obs-qa-4.1.36-41.1 kernel-syms-4.1.36-41.1 - openSUSE Leap 42.1 (noarch): kernel-devel-4.1.36-41.1 kernel-docs-4.1.36-41.2 kernel-docs-html-4.1.36-41.2 kernel-docs-pdf-4.1.36-41.2 kernel-macros-4.1.36-41.1 kernel-source-4.1.36-41.1 kernel-source-vanilla-4.1.36-41.1 - openSUSE Leap 42.1 (i686): kernel-pae-4.1.36-41.1 kernel-pae-base-4.1.36-41.1 kernel-pae-base-debuginfo-4.1.36-41.1 kernel-pae-debuginfo-4.1.36-41.1 kernel-pae-debugsource-4.1.36-41.1 kernel-pae-devel-4.1.36-41.1 References: https://www.suse.com/security/cve/CVE-2016-9576.html https://bugzilla.suse.com/1013604

1 0

openSUSE-SU-2016:3085-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3085-1 Rating: important References: #1003606 #1006827 #1008557 #1011913 #1013001 #1013604 #1014120 #981825 Cross-References: CVE-2016-9576 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has 7 fixes is now available. Description: The openSUSE 14.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg* or /dev/bsg* to elevate their privileges (bsc#1013604). The following non-security bugs were fixed: - 8250_pci: Fix potential use-after-free in error path (bsc#1013001). - block_dev: do not test bdev->bd_contains when it is not stable (bsc#1008557). - drm/i915/vlv: Disable HPD in valleyview_crt_detect_hotplug() (bsc#1014120). - drm/i915/vlv: Make intel_crt_reset() per-encoder (bsc#1014120). - drm/i915/vlv: Reset the ADPA in vlv_display_power_well_init() (bsc#1014120). - drm/i915: Enable polling when we do not have hpd (bsc#1014120). - i2c: designware-baytrail: Add support for cherrytrail (bsc#1011913). - i2c: designware-baytrail: Pass dw_i2c_dev into helper functions (bsc#1011913). - i2c: designware: Prevent runtime suspend during adapter registration (bsc#1011913). - i2c: designware: Use transfer timeout from ioctl I2C_TIMEOUT (bsc#1011913). - i2c: designware: retry transfer on transient failure (bsc#1011913). - powerpc/xmon: Add xmon command to dump process/task similar to ps(1) (fate#322020). - sched/fair: Fix incorrect task group ->load_avg (bsc#981825). - serial: 8250_pci: Detach low-level driver during PCI error recovery (bsc#1013001). - target: fix tcm_rbd_gen_it_nexus for emulated XCOPY state (bsc#1003606). - x86/PCI: VMD: Synchronize with RCU freeing MSI IRQ descs (bsc#1006827). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1438=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): kernel-debug-4.4.36-8.1 kernel-debug-base-4.4.36-8.1 kernel-debug-base-debuginfo-4.4.36-8.1 kernel-debug-debuginfo-4.4.36-8.1 kernel-debug-debugsource-4.4.36-8.1 kernel-debug-devel-4.4.36-8.1 kernel-debug-devel-debuginfo-4.4.36-8.1 kernel-default-4.4.36-8.1 kernel-default-base-4.4.36-8.1 kernel-default-base-debuginfo-4.4.36-8.1 kernel-default-debuginfo-4.4.36-8.1 kernel-default-debugsource-4.4.36-8.1 kernel-default-devel-4.4.36-8.1 kernel-obs-build-4.4.36-8.1 kernel-obs-build-debugsource-4.4.36-8.1 kernel-obs-qa-4.4.36-8.1 kernel-syms-4.4.36-8.1 kernel-vanilla-4.4.36-8.1 kernel-vanilla-base-4.4.36-8.1 kernel-vanilla-base-debuginfo-4.4.36-8.1 kernel-vanilla-debuginfo-4.4.36-8.1 kernel-vanilla-debugsource-4.4.36-8.1 kernel-vanilla-devel-4.4.36-8.1 - openSUSE Leap 42.2 (noarch): kernel-devel-4.4.36-8.1 kernel-docs-4.4.36-8.2 kernel-docs-html-4.4.36-8.2 kernel-docs-pdf-4.4.36-8.2 kernel-macros-4.4.36-8.1 kernel-source-4.4.36-8.1 kernel-source-vanilla-4.4.36-8.1 References: https://www.suse.com/security/cve/CVE-2016-9576.html https://bugzilla.suse.com/1003606 https://bugzilla.suse.com/1006827 https://bugzilla.suse.com/1008557 https://bugzilla.suse.com/1011913 https://bugzilla.suse.com/1013001 https://bugzilla.suse.com/1013604 https://bugzilla.suse.com/1014120 https://bugzilla.suse.com/981825

1 0

openSUSE-RU-2016:3082-1: moderate: Recommended update for mpv
by maintenance＠opensuse.org 11 Dec '16

11 Dec '16

openSUSE Recommended Update: Recommended update for mpv ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3082-1 Rating: moderate References: #1012600 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mpv fixes the following issues: - Update to version 0.22.0. - audio/out: Add AudioUnit output driver for iOS. - demux_mkv: Parse Matroska colorimetry metadata. - filter_kernels: Add ability to taper kernels/windows and add tukey window. - osc: Add seekbarstyle=knob. - video/out: Add tct as modern caca alternative for true-color and 256-color terminals. - video: Add --hwdec=vdpau-copy mode. - Add --opengl-early-flush=auto. - Add --scale-taper, --scale-wtaper. - Add --scale-wblur. - osc: Add script message handlers for chapter/track/playlists. - Apply --autofit-larger after --autofit-smaller. - ao_alsa: Set subtitle track title to indicate hearing/visual impaired tracks. - ao_alsa: Disable chmap API use for mono/stereo. - build: Add required failure message for libavfilter check. - build: Fix compilation with mingw-w64/Clang. - build: Make VideoToolbox available on iOS. - command: Fix reset-on-next-file=all and tv-freq option. - command: If window-scale can't be set properly, set it as option. - demux_mkv: Don't recursively resolve timeline for opened reference files. - demux_mkv: Fix ordered chapter sources with ordered editions. - opengl: Compile against iOS OpenGLES implementation. - options: Handle legacy no-* sub-options. - osc: Add alpha animation to tooltip. (Fix lingering tooltip) - osc: Change default deadzonesize to 0.5. - osc: Don't wrap the title. - osc: Fix crash after reaching a certain position in limited lists. - osc: Fix crash with no chapters. - osc: Fix crashes when dragging seekbar across file changes. - osc: Fix displaying only half of the entries when at the end of a list. - osc: Fix missing chapter ticks with seekbarstyle=bar. - osc: slimbox: Fix clipping with seekbarstyle=bar. - osc: top/bottombar: Also scale when min-width is reached to match box/slimbox behavior. - osc: top/bottombar: Dynamically size timecodes according to timems. - osc: top/bottombar: Rescale layout to same size with scale=1. - osc: top/bottombar: Scale title if too large like box. - player: Consistently initialize screensaver state with --force-window. - player: Enable no-video subtitle display on coverart too. - player: Make --start-time work with --rebase-start-time=no. - player: Make sure non-video subtitle rendering is reset if video resumes. - player: Removing last playlist entry while looping should not stop. - player: Show subtitles on VO if --force-window is used. - player: Speed up audio/video re-sync when there is a huge delay. - vdpau: Fix hwdec uninit. - vo_opengl: Blend against background color for --alpha=blend. - vo_opengl: context_rpi: Fix stdatomic usage. - vo_opengl: Fix --blend-subtitles handling. - vo_opengl: Fix redrawing with hardware decoding. - vo_opengl: Partially re-enable glFlush() calls. - ytdl_hook: Sort chapters by time. - Fix incompatibility of the current version of mpv in obs with ffmpeg in packman. (boo#1012600) - config: Allow profile forward-references in default profile. - demux_lavf: Support mov edit lists and log errors if used. (FFmpeg only) - hwdec: Add support for CUDA and cuvid/NvDecode. (Useful on Linux where VDPAU still lacks HEVC Main 10 support) - osc: Add right-click behavior to playlist and chapter buttons. - osc: Add user-alterable margin for top/bottombar. - rpi: Add --hwdec=rpi-copy. - sd_lavc: Enable teletext. - vaapi: Support drm devices when running in vaapi-copy mode. - vd_lavc: Add hwdec wrapper for crystalhd. - vo_opengl: Add hw overlay support and use it for RPI. - vo_opengl: Basic mali fbdev support. - vo_opengl: rpi: Merge vo_rpi features. - vo_opengl: Remove pre/post/scale-shaders in favor of user-shaders. - Add --teletext-page option. - af_pan: Add af-command support to change the matrix. - af_rubberband: Add af-command and option to change the pitch. - command: Add a load-script command. - command: Add a video-dec-params property. - command: Add an apply-profile command. - command: Add audio-pts property to get the audio pts. - command: Add options to property list. - command: Add sub-text property for current subtitle text. - command: Export profile list as a property. - options: Add --hwdec=yes as alias for --hwdec=auto. - player: Add --player-operation-mode=pseudo-gui. - player: Add --video-osd=no option to disable video OSD. - player: Add --watch-later-directory option. - stream_bluray: Select title by playlist. (bd://mpls/[playlist]) - vo_opengl: Disable glFlush() by default, and add an option to enable it for testing. - af_rubberband: Default to channels=together. - command: Allow absolute seeks relative to end of stream. - command: Make bitrate properties observable. - command: Make most options observable. - msg: Make --log-file and --dump-stats accept config path expansion. - options: Deprecate --playlist-pos to --playlist-start. - options: Make input options generally runtime-settable. - Options: Rename subtitle options (--sub-text- → --sub; --ass- → --sub-ass-). - osc: Change default layout to bottombar, seekbarstyle to bar, use larger scalewindowed and scalefullscreen. - player: Make --terminal, --log-file, --dump-stats, --osc, --ytdl, --audio-*, --priority and --stop-screensaver settable at runtime. - vo_drm: Change CLI options - Change connector selection to accept human readable names (such as eDP-1, HDMI-A-2) rather than arbitrary numbers. - Change GPU selection to accept GPU number rather than device paths. - Merge connector and GPU selection into one --drm-connector. - Add support for --drm-connector=help. - Add support for --drm-* in EGL backend. - vo_opengl: Rename 3dlut-size to icc-3dlut-size. - command: Removed hwdec-active and hwdec-detected properties - command: Removed vo-cmdline - options: Drop unreferenced --bluray-angle option. - vo, ao: Disable positional parameter suboptions. - vo_xv: Replace no-colorkey with ck-method=none - TOOLS/zsh.pl: Die if main options cannot be parsed. - TOOLS/zsh.pl: Don't filter files by extension. - ao_alsa: Try to fallback to "hdmi" before "iec958" for spdif. - ao_rsound: Fix compilation. - aspect: Use nominal width instead of actual width for video-unscaled. - audio/out: Prevent underruns with spdif under certain conditions. - audio: Fix late audio start. - audio: Fix missed wakeup when changing audio output device. - audio: Fix segfault when yanking USB DAC. - charset_conv: Use CP949 instead of EUC-KR. - command: Don't log "ignore" command with -v verbosity. - command: Try selecting the next track if track switching fails. - demux_mkv: Fix crash if --ordered-chapters-files fails. - displayconfig: Treat a refresh rate of 1 as invalid. - ipc: Start log when listening to IPC socket. - mp_image: Fix clearing to black with p010 format. - osc: Fix scaling issues when toggling fullscreen. - osc: Align text vertically in top/bottombar. - osc: Change seekbar background's alpha scaling. - osc: Fix display of chapters and playlist scaling. - osc: Move tooltip to inside seekbar for top/bottombar. - osc: Show playlist/chapter list on prev/next instead of osd. - path: Set default ~~ paths to home directory. - player: Do not let pseudo-gui override user config settings. - player: Enable reading from stdin after loading input.conf. - player: Fix instant subtitle refresh on track switches. - player: Make --force-window work with opengl-cb. - stream_file: Don't use poll() on directories. - stream_lavf: Fix determining seekability. - sub: Actually apply text alignment options to non-ASS subtitles. - terminal-win: Support modifier keys in console input. - vo_drm: Fix segfault when using invalid card. - vo_opengl: apply 90° rotation to chroma texture size. - vo_opengl: Fix incorrect video rendering after vdpau preemption recovery. - vo_opengl: Partially fix dumb-mode cropping with rotation. - vo_opengl: rpi: Use overlay for yuv420p too. - w32_common: Initialize playback status as soon as possible. - wayland: Reject resize events with either dimension being 0. - x11: Fix external fullscreen update. - ytdl_hook: Add title to playlist items if available. - ytdl_hook: Set aspect ratio for anamorphic video - ytdl_hook: Support playlist entries without subtitles - ytdl_hook: Add chapters by parsing video's description - ytdl_hook: Don't add subtitles with unknown duration - ytdl_hook: Temporarily force disable dash segments formats - Update waf to 1.9.5 - Enable libarchive support - Add exact dependency on all libav* packages not just libavcodec. - aspect: Add --video-unscaled=downscale-big. - Player: Add --image-display-duration option to control duration of image display. - vo_opengl: angle: New flag (dcomposition) to control DirectComposition. - af_lavrresample: Fix error if resampler could not be recreated. - audio: Avoid missed wakeups with ab-loops. - audio: Fo not apply --audio-channels if spdif passthrough is in use. - cache: Don't use a backbuffer if the cache is as large as the file. - command: Prevent O(n^2) behaviour for playlist property. - demux: Close underlying stream if it's fully read anyway. - demux: Fix undefined behavior with ogg metadata update. - player: Make looping slightly more seamless. - player: Refresh very low framerate video on filter changes. - stream_memory: Disable stream cache - vf_rotate: Allow arbitrary rotation. - vo: Be more trusting to estimated display FPS. - w32_common: Use hooks to detect parent window resize. - x11: Work around mutter fullscreen issue. - build: Add --htmldir option. - build: Always require atomics. - wscript: Add proper unversioned SONAME for Android. - client API: Add stream_cb API for user-defined stream implementations. (bumps client API version to 1.22) - vf_d3d11vpp: Add video processor selection. - videotoolbox: Add --hwdec=videotoolbox-copy for h/w accelerated decoding with video filters. - vo_opengl: Add a tscale=linear direct implementation. - audio/filter: Remove delay audio filter. - command: Add filename/no-ext sub-property that returns filename without extension. - command: Add properties for HDR metadata. - command: Add replaygain information properties to track-list. - options: Add vp9 to --hwdec-codecs. - player: Add --audio-stream-silence. - player: Add --audio-wait-open. - player: Add --no-autoload-files. - videotoolbox: Add yuv420p to --videotoolbox-format. - options: Un-restrict --audio-delay. - Use - as command-name separator everywhere. - vo_opengl: Reduce default 3dlut-size to 64x64x64. (since accuracy is improved) - af_lavcac3enc: Error out properly if encoding fails. - af_volume: Don't let softvol overwrite af_volume volumedb sub-option - ao_pulse: Fix some volume control rounding issues. - ao_wasapi: No multichannel output by default in exclusive mode. - audio: Add heuristic to move auto-downmixing before other filters. - audio: Show an osd bar when changing ao-volume. - demux: Make ALBUM replaygain tags optional. - demux_raw: Fix small typo to add s16be support. - demux_timeline: Restore mkv edition switching. - libarchive: Sanitize non-UTF8 archive entries. - player: Disable display-sync with spdif transcoding. - player: No terminal status line cut-off if it contains newlines. - player: Fix display-sync timing if audio resumes slowly. - player: Improve instant track switching. - player: Improve non-hr seeking with external audio tracks. - player: Offset demuxer on start/seek properly with audio/sub delay. - player: Sync audio as well when enabling it mid-stream. - stream/stream_bluray: Display list of available titles in verbose mode. - sub: Don't potentially discard too many subtitles on seek. - video: respect --deinterlace=auto. - vo_direct3d: Add missing header. (fixes Cygwin build) - vo_opengl: angle: Try D3D9 when D3D11 fails eglInitialize. - vo_opengl: angle: Use WARP if there are no hw adapters. - vo_opengl: Increase 3DLUT accuracy at smaller LUT sizes. - vo_opengl: Remove the 3dlut-size npot2 restriction. - vo_wayland: Fix high CPU usage due to busy polling. - wayland_common: Clip window size to the display output size. - wayland_common: Fix crashes when switching to fullscreen before the video output is fully initialized. - wayland_common: Fix fullscreen image switching bug. - wayland_common: Prevent black bars on most non-native aspect ratios - wayland_common: Remove untested/unusable wayland dnd code. - win32: mpv.rc: Re-add version info. - x11: Skip ICC update on every window move. - ytdl: Error out with http_dash_segments. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1437=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libmpv1-0.22.0-3.1 libmpv1-debuginfo-0.22.0-3.1 mpv-0.22.0-3.1 mpv-debuginfo-0.22.0-3.1 mpv-devel-0.22.0-3.1 References: https://bugzilla.suse.com/1012600

1 0

openSUSE-SU-2016:3077-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 10 Dec '16

10 Dec '16

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3077-1 Rating: important References: #1008831 #1011685 #1012754 Cross-References: CVE-2016-8632 CVE-2016-8655 CVE-2016-9555 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: The openSUSE 13.1 kernel was updated to receive various critical security fixes. The following security bugs were fixed: - CVE-2016-8655: A race condition in the af_packet packet_set_ring function could be used by local attackers to crash the kernel or gain privileges (bsc#1012754). - CVE-2016-8632: The tipc_msg_build function in net/tipc/msg.c in the Linux kernel did not validate the relationship between the minimum fragment length and the maximum packet size, which allowed local users to gain privileges or cause a denial of service (heap-based buffer overflow) by leveraging the CAP_NET_ADMIN capability (bnc#1008831). - CVE-2016-9555: The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel lacks chunk-length checking for the first chunk, which allowed remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data (bnc#1011685). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2016-1436=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i686 x86_64): kernel-debug-3.12.67-61.1 kernel-debug-base-3.12.67-61.1 kernel-debug-base-debuginfo-3.12.67-61.1 kernel-debug-debuginfo-3.12.67-61.1 kernel-debug-debugsource-3.12.67-61.1 kernel-debug-devel-3.12.67-61.1 kernel-debug-devel-debuginfo-3.12.67-61.1 kernel-desktop-3.12.67-61.1 kernel-desktop-base-3.12.67-61.1 kernel-desktop-base-debuginfo-3.12.67-61.1 kernel-desktop-debuginfo-3.12.67-61.1 kernel-desktop-debugsource-3.12.67-61.1 kernel-desktop-devel-3.12.67-61.1 kernel-ec2-3.12.67-61.1 kernel-ec2-base-3.12.67-61.1 kernel-ec2-base-debuginfo-3.12.67-61.1 kernel-ec2-debuginfo-3.12.67-61.1 kernel-ec2-debugsource-3.12.67-61.1 kernel-ec2-devel-3.12.67-61.1 kernel-trace-3.12.67-61.1 kernel-trace-base-3.12.67-61.1 kernel-trace-base-debuginfo-3.12.67-61.1 kernel-trace-debuginfo-3.12.67-61.1 kernel-trace-debugsource-3.12.67-61.1 kernel-trace-devel-3.12.67-61.1 kernel-vanilla-3.12.67-61.1 kernel-vanilla-debuginfo-3.12.67-61.1 kernel-vanilla-debugsource-3.12.67-61.1 kernel-vanilla-devel-3.12.67-61.1 kernel-xen-3.12.67-61.1 kernel-xen-base-3.12.67-61.1 kernel-xen-base-debuginfo-3.12.67-61.1 kernel-xen-debuginfo-3.12.67-61.1 kernel-xen-debugsource-3.12.67-61.1 kernel-xen-devel-3.12.67-61.1 - openSUSE 13.1 (i586 x86_64): cloop-2.639-11.38.1 cloop-debuginfo-2.639-11.38.1 cloop-debugsource-2.639-11.38.1 cloop-kmp-default-2.639_k3.12.67_61-11.38.1 cloop-kmp-default-debuginfo-2.639_k3.12.67_61-11.38.1 cloop-kmp-desktop-2.639_k3.12.67_61-11.38.1 cloop-kmp-desktop-debuginfo-2.639_k3.12.67_61-11.38.1 cloop-kmp-xen-2.639_k3.12.67_61-11.38.1 cloop-kmp-xen-debuginfo-2.639_k3.12.67_61-11.38.1 crash-7.0.2-2.38.1 crash-debuginfo-7.0.2-2.38.1 crash-debugsource-7.0.2-2.38.1 crash-devel-7.0.2-2.38.1 crash-doc-7.0.2-2.38.1 crash-eppic-7.0.2-2.38.1 crash-eppic-debuginfo-7.0.2-2.38.1 crash-gcore-7.0.2-2.38.1 crash-gcore-debuginfo-7.0.2-2.38.1 crash-kmp-default-7.0.2_k3.12.67_61-2.38.1 crash-kmp-default-debuginfo-7.0.2_k3.12.67_61-2.38.1 crash-kmp-desktop-7.0.2_k3.12.67_61-2.38.1 crash-kmp-desktop-debuginfo-7.0.2_k3.12.67_61-2.38.1 crash-kmp-xen-7.0.2_k3.12.67_61-2.38.1 crash-kmp-xen-debuginfo-7.0.2_k3.12.67_61-2.38.1 hdjmod-debugsource-1.28-16.38.1 hdjmod-kmp-default-1.28_k3.12.67_61-16.38.1 hdjmod-kmp-default-debuginfo-1.28_k3.12.67_61-16.38.1 hdjmod-kmp-desktop-1.28_k3.12.67_61-16.38.1 hdjmod-kmp-desktop-debuginfo-1.28_k3.12.67_61-16.38.1 hdjmod-kmp-xen-1.28_k3.12.67_61-16.38.1 hdjmod-kmp-xen-debuginfo-1.28_k3.12.67_61-16.38.1 ipset-6.21.1-2.42.1 ipset-debuginfo-6.21.1-2.42.1 ipset-debugsource-6.21.1-2.42.1 ipset-devel-6.21.1-2.42.1 ipset-kmp-default-6.21.1_k3.12.67_61-2.42.1 ipset-kmp-default-debuginfo-6.21.1_k3.12.67_61-2.42.1 ipset-kmp-desktop-6.21.1_k3.12.67_61-2.42.1 ipset-kmp-desktop-debuginfo-6.21.1_k3.12.67_61-2.42.1 ipset-kmp-xen-6.21.1_k3.12.67_61-2.42.1 ipset-kmp-xen-debuginfo-6.21.1_k3.12.67_61-2.42.1 iscsitarget-1.4.20.3-13.38.1 iscsitarget-debuginfo-1.4.20.3-13.38.1 iscsitarget-debugsource-1.4.20.3-13.38.1 iscsitarget-kmp-default-1.4.20.3_k3.12.67_61-13.38.1 iscsitarget-kmp-default-debuginfo-1.4.20.3_k3.12.67_61-13.38.1 iscsitarget-kmp-desktop-1.4.20.3_k3.12.67_61-13.38.1 iscsitarget-kmp-desktop-debuginfo-1.4.20.3_k3.12.67_61-13.38.1 iscsitarget-kmp-xen-1.4.20.3_k3.12.67_61-13.38.1 iscsitarget-kmp-xen-debuginfo-1.4.20.3_k3.12.67_61-13.38.1 kernel-default-3.12.67-61.1 kernel-default-base-3.12.67-61.1 kernel-default-base-debuginfo-3.12.67-61.1 kernel-default-debuginfo-3.12.67-61.1 kernel-default-debugsource-3.12.67-61.1 kernel-default-devel-3.12.67-61.1 kernel-syms-3.12.67-61.1 libipset3-6.21.1-2.42.1 libipset3-debuginfo-6.21.1-2.42.1 ndiswrapper-1.58-39.1 ndiswrapper-debuginfo-1.58-39.1 ndiswrapper-debugsource-1.58-39.1 ndiswrapper-kmp-default-1.58_k3.12.67_61-39.1 ndiswrapper-kmp-default-debuginfo-1.58_k3.12.67_61-39.1 ndiswrapper-kmp-desktop-1.58_k3.12.67_61-39.1 ndiswrapper-kmp-desktop-debuginfo-1.58_k3.12.67_61-39.1 openvswitch-1.11.0-0.45.1 openvswitch-controller-1.11.0-0.45.1 openvswitch-controller-debuginfo-1.11.0-0.45.1 openvswitch-debuginfo-1.11.0-0.45.1 openvswitch-debugsource-1.11.0-0.45.1 openvswitch-kmp-default-1.11.0_k3.12.67_61-0.45.1 openvswitch-kmp-default-debuginfo-1.11.0_k3.12.67_61-0.45.1 openvswitch-kmp-desktop-1.11.0_k3.12.67_61-0.45.1 openvswitch-kmp-desktop-debuginfo-1.11.0_k3.12.67_61-0.45.1 openvswitch-kmp-xen-1.11.0_k3.12.67_61-0.45.1 openvswitch-kmp-xen-debuginfo-1.11.0_k3.12.67_61-0.45.1 openvswitch-pki-1.11.0-0.45.1 openvswitch-switch-1.11.0-0.45.1 openvswitch-switch-debuginfo-1.11.0-0.45.1 openvswitch-test-1.11.0-0.45.1 pcfclock-0.44-258.39.1 pcfclock-debuginfo-0.44-258.39.1 pcfclock-debugsource-0.44-258.39.1 pcfclock-kmp-default-0.44_k3.12.67_61-258.39.1 pcfclock-kmp-default-debuginfo-0.44_k3.12.67_61-258.39.1 pcfclock-kmp-desktop-0.44_k3.12.67_61-258.39.1 pcfclock-kmp-desktop-debuginfo-0.44_k3.12.67_61-258.39.1 python-openvswitch-1.11.0-0.45.1 python-openvswitch-test-1.11.0-0.45.1 python-virtualbox-4.2.36-2.70.1 python-virtualbox-debuginfo-4.2.36-2.70.1 vhba-kmp-debugsource-20130607-2.38.1 vhba-kmp-default-20130607_k3.12.67_61-2.38.1 vhba-kmp-default-debuginfo-20130607_k3.12.67_61-2.38.1 vhba-kmp-desktop-20130607_k3.12.67_61-2.38.1 vhba-kmp-desktop-debuginfo-20130607_k3.12.67_61-2.38.1 vhba-kmp-xen-20130607_k3.12.67_61-2.38.1 vhba-kmp-xen-debuginfo-20130607_k3.12.67_61-2.38.1 virtualbox-4.2.36-2.70.1 virtualbox-debuginfo-4.2.36-2.70.1 virtualbox-debugsource-4.2.36-2.70.1 virtualbox-devel-4.2.36-2.70.1 virtualbox-guest-kmp-default-4.2.36_k3.12.67_61-2.70.1 virtualbox-guest-kmp-default-debuginfo-4.2.36_k3.12.67_61-2.70.1 virtualbox-guest-kmp-desktop-4.2.36_k3.12.67_61-2.70.1 virtualbox-guest-kmp-desktop-debuginfo-4.2.36_k3.12.67_61-2.70.1 virtualbox-guest-tools-4.2.36-2.70.1 virtualbox-guest-tools-debuginfo-4.2.36-2.70.1 virtualbox-guest-x11-4.2.36-2.70.1 virtualbox-guest-x11-debuginfo-4.2.36-2.70.1 virtualbox-host-kmp-default-4.2.36_k3.12.67_61-2.70.1 virtualbox-host-kmp-default-debuginfo-4.2.36_k3.12.67_61-2.70.1 virtualbox-host-kmp-desktop-4.2.36_k3.12.67_61-2.70.1 virtualbox-host-kmp-desktop-debuginfo-4.2.36_k3.12.67_61-2.70.1 virtualbox-qt-4.2.36-2.70.1 virtualbox-qt-debuginfo-4.2.36-2.70.1 virtualbox-websrv-4.2.36-2.70.1 virtualbox-websrv-debuginfo-4.2.36-2.70.1 xen-debugsource-4.3.4_10-71.1 xen-devel-4.3.4_10-71.1 xen-kmp-default-4.3.4_10_k3.12.67_61-71.1 xen-kmp-default-debuginfo-4.3.4_10_k3.12.67_61-71.1 xen-kmp-desktop-4.3.4_10_k3.12.67_61-71.1 xen-kmp-desktop-debuginfo-4.3.4_10_k3.12.67_61-71.1 xen-libs-4.3.4_10-71.1 xen-libs-debuginfo-4.3.4_10-71.1 xen-tools-domU-4.3.4_10-71.1 xen-tools-domU-debuginfo-4.3.4_10-71.1 xtables-addons-2.3-2.37.1 xtables-addons-debuginfo-2.3-2.37.1 xtables-addons-debugsource-2.3-2.37.1 xtables-addons-kmp-default-2.3_k3.12.67_61-2.37.1 xtables-addons-kmp-default-debuginfo-2.3_k3.12.67_61-2.37.1 xtables-addons-kmp-desktop-2.3_k3.12.67_61-2.37.1 xtables-addons-kmp-desktop-debuginfo-2.3_k3.12.67_61-2.37.1 xtables-addons-kmp-xen-2.3_k3.12.67_61-2.37.1 xtables-addons-kmp-xen-debuginfo-2.3_k3.12.67_61-2.37.1 - openSUSE 13.1 (x86_64): xen-4.3.4_10-71.1 xen-doc-html-4.3.4_10-71.1 xen-libs-32bit-4.3.4_10-71.1 xen-libs-debuginfo-32bit-4.3.4_10-71.1 xen-tools-4.3.4_10-71.1 xen-tools-debuginfo-4.3.4_10-71.1 xen-xend-tools-4.3.4_10-71.1 xen-xend-tools-debuginfo-4.3.4_10-71.1 - openSUSE 13.1 (noarch): kernel-devel-3.12.67-61.1 kernel-docs-3.12.67-61.2 kernel-macros-3.12.67-61.1 kernel-source-3.12.67-61.1 kernel-source-vanilla-3.12.67-61.1 virtualbox-host-source-4.2.36-2.70.1 - openSUSE 13.1 (i586): cloop-kmp-pae-2.639_k3.12.67_61-11.38.1 cloop-kmp-pae-debuginfo-2.639_k3.12.67_61-11.38.1 crash-kmp-pae-7.0.2_k3.12.67_61-2.38.1 crash-kmp-pae-debuginfo-7.0.2_k3.12.67_61-2.38.1 hdjmod-kmp-pae-1.28_k3.12.67_61-16.38.1 hdjmod-kmp-pae-debuginfo-1.28_k3.12.67_61-16.38.1 ipset-kmp-pae-6.21.1_k3.12.67_61-2.42.1 ipset-kmp-pae-debuginfo-6.21.1_k3.12.67_61-2.42.1 iscsitarget-kmp-pae-1.4.20.3_k3.12.67_61-13.38.1 iscsitarget-kmp-pae-debuginfo-1.4.20.3_k3.12.67_61-13.38.1 ndiswrapper-kmp-pae-1.58_k3.12.67_61-39.1 ndiswrapper-kmp-pae-debuginfo-1.58_k3.12.67_61-39.1 openvswitch-kmp-pae-1.11.0_k3.12.67_61-0.45.1 openvswitch-kmp-pae-debuginfo-1.11.0_k3.12.67_61-0.45.1 pcfclock-kmp-pae-0.44_k3.12.67_61-258.39.1 pcfclock-kmp-pae-debuginfo-0.44_k3.12.67_61-258.39.1 vhba-kmp-pae-20130607_k3.12.67_61-2.38.1 vhba-kmp-pae-debuginfo-20130607_k3.12.67_61-2.38.1 virtualbox-guest-kmp-pae-4.2.36_k3.12.67_61-2.70.1 virtualbox-guest-kmp-pae-debuginfo-4.2.36_k3.12.67_61-2.70.1 virtualbox-host-kmp-pae-4.2.36_k3.12.67_61-2.70.1 virtualbox-host-kmp-pae-debuginfo-4.2.36_k3.12.67_61-2.70.1 xen-kmp-pae-4.3.4_10_k3.12.67_61-71.1 xen-kmp-pae-debuginfo-4.3.4_10_k3.12.67_61-71.1 xtables-addons-kmp-pae-2.3_k3.12.67_61-2.37.1 xtables-addons-kmp-pae-debuginfo-2.3_k3.12.67_61-2.37.1 - openSUSE 13.1 (i686): kernel-pae-3.12.67-61.1 kernel-pae-base-3.12.67-61.1 kernel-pae-base-debuginfo-3.12.67-61.1 kernel-pae-debuginfo-3.12.67-61.1 kernel-pae-debugsource-3.12.67-61.1 kernel-pae-devel-3.12.67-61.1 References: https://www.suse.com/security/cve/CVE-2016-8632.html https://www.suse.com/security/cve/CVE-2016-8655.html https://www.suse.com/security/cve/CVE-2016-9555.html https://bugzilla.suse.com/1008831 https://bugzilla.suse.com/1011685 https://bugzilla.suse.com/1012754

1 0