December 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:2997-1: moderate: Recommended update for yast2-auth-client
by maintenance＠opensuse.org 05 Dec '16

05 Dec '16

openSUSE Recommended Update: Recommended update for yast2-auth-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2997-1 Rating: moderate References: #1000749 #1004083 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-auth-client provides the following fixes: - Don't fail to start when network interface has no address assigned. (bsc#1004083) - Change dialog return value to :next so that yast2-users will reload its summary upon completion of this dialog. (bsc#1000749) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1394=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): yast2-auth-client-3.3.13-3.1 References: https://bugzilla.suse.com/1000749 https://bugzilla.suse.com/1004083

1 0

openSUSE-RU-2016:2996-1: moderate: Recommended update for ha-cluster-bootstrap
by maintenance＠opensuse.org 05 Dec '16

05 Dec '16

openSUSE Recommended Update: Recommended update for ha-cluster-bootstrap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2996-1 Rating: moderate References: #1001164 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ha-cluster-bootstrap to version 0.4+git.1475739556.1088521 fixes the following issues: - Better corosync defaults (bsc#1001164) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1397=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): ha-cluster-bootstrap-0.4+git.1475739556.1088521-3.1 References: https://bugzilla.suse.com/1001164

1 0

openSUSE-RU-2016:2995-1: moderate: Recommended update for libvirt
by maintenance＠opensuse.org 05 Dec '16

05 Dec '16

openSUSE Recommended Update: Recommended update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2995-1 Rating: moderate References: #959297 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libvirt fixes the following issues: - Package org.libvirt.api.policy polkit file (boo#959297) - Fix postun systemd services cleanup - Mark /etc/libvirt/nwfilter/*.xml files as config files Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1395=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libvirt-1.2.18.4-17.2 libvirt-client-1.2.18.4-17.2 libvirt-client-debuginfo-1.2.18.4-17.2 libvirt-daemon-1.2.18.4-17.2 libvirt-daemon-config-network-1.2.18.4-17.2 libvirt-daemon-config-nwfilter-1.2.18.4-17.2 libvirt-daemon-debuginfo-1.2.18.4-17.2 libvirt-daemon-driver-interface-1.2.18.4-17.2 libvirt-daemon-driver-interface-debuginfo-1.2.18.4-17.2 libvirt-daemon-driver-lxc-1.2.18.4-17.2 libvirt-daemon-driver-lxc-debuginfo-1.2.18.4-17.2 libvirt-daemon-driver-network-1.2.18.4-17.2 libvirt-daemon-driver-network-debuginfo-1.2.18.4-17.2 libvirt-daemon-driver-nodedev-1.2.18.4-17.2 libvirt-daemon-driver-nodedev-debuginfo-1.2.18.4-17.2 libvirt-daemon-driver-nwfilter-1.2.18.4-17.2 libvirt-daemon-driver-nwfilter-debuginfo-1.2.18.4-17.2 libvirt-daemon-driver-qemu-1.2.18.4-17.2 libvirt-daemon-driver-qemu-debuginfo-1.2.18.4-17.2 libvirt-daemon-driver-secret-1.2.18.4-17.2 libvirt-daemon-driver-secret-debuginfo-1.2.18.4-17.2 libvirt-daemon-driver-storage-1.2.18.4-17.2 libvirt-daemon-driver-storage-debuginfo-1.2.18.4-17.2 libvirt-daemon-driver-uml-1.2.18.4-17.2 libvirt-daemon-driver-uml-debuginfo-1.2.18.4-17.2 libvirt-daemon-driver-vbox-1.2.18.4-17.2 libvirt-daemon-driver-vbox-debuginfo-1.2.18.4-17.2 libvirt-daemon-lxc-1.2.18.4-17.2 libvirt-daemon-qemu-1.2.18.4-17.2 libvirt-daemon-uml-1.2.18.4-17.2 libvirt-daemon-vbox-1.2.18.4-17.2 libvirt-debugsource-1.2.18.4-17.2 libvirt-devel-1.2.18.4-17.2 libvirt-doc-1.2.18.4-17.2 libvirt-lock-sanlock-1.2.18.4-17.2 libvirt-lock-sanlock-debuginfo-1.2.18.4-17.2 libvirt-login-shell-1.2.18.4-17.2 libvirt-login-shell-debuginfo-1.2.18.4-17.2 - openSUSE Leap 42.1 (x86_64): libvirt-client-32bit-1.2.18.4-17.2 libvirt-client-debuginfo-32bit-1.2.18.4-17.2 libvirt-daemon-driver-libxl-1.2.18.4-17.2 libvirt-daemon-driver-libxl-debuginfo-1.2.18.4-17.2 libvirt-daemon-xen-1.2.18.4-17.2 libvirt-devel-32bit-1.2.18.4-17.2 References: https://bugzilla.suse.com/959297

1 0

openSUSE-SU-2016:2994-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 04 Dec '16

04 Dec '16

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2994-1 Rating: important References: #1012807 #1012964 Cross-References: CVE-2016-9078 CVE-2016-9079 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: MozillaFirefox is updated to version 50.0.2 which fixes the following issues: * Firefox crashed with 3rd party Chinese IME when using IME text (fixed in version 50.0.1) * Redirection from an HTTP connection to a data: URL could inherit wrong origin after an HTTP redirect (fixed in version 50.0.1, bmo#1317641, MFSA 2016-91, boo#1012807, CVE-2016-9078) * Maliciously crafted SVG animations could cause remote code execution (fixed in version 50.0.2, bmo#1321066, MFSA 2016-92, boo##1012964, CVE-2016-9079) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1392=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1392=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1392=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): MozillaFirefox-50.0.2-42.2 MozillaFirefox-branding-upstream-50.0.2-42.2 MozillaFirefox-buildsymbols-50.0.2-42.2 MozillaFirefox-debuginfo-50.0.2-42.2 MozillaFirefox-debugsource-50.0.2-42.2 MozillaFirefox-devel-50.0.2-42.2 MozillaFirefox-translations-common-50.0.2-42.2 MozillaFirefox-translations-other-50.0.2-42.2 - openSUSE Leap 42.1 (x86_64): MozillaFirefox-50.0.2-42.1 MozillaFirefox-branding-upstream-50.0.2-42.1 MozillaFirefox-buildsymbols-50.0.2-42.1 MozillaFirefox-debuginfo-50.0.2-42.1 MozillaFirefox-debugsource-50.0.2-42.1 MozillaFirefox-devel-50.0.2-42.1 MozillaFirefox-translations-common-50.0.2-42.1 MozillaFirefox-translations-other-50.0.2-42.1 - openSUSE 13.2 (i586 x86_64): MozillaFirefox-50.0.2-91.1 MozillaFirefox-branding-upstream-50.0.2-91.1 MozillaFirefox-buildsymbols-50.0.2-91.1 MozillaFirefox-debuginfo-50.0.2-91.1 MozillaFirefox-debugsource-50.0.2-91.1 MozillaFirefox-devel-50.0.2-91.1 MozillaFirefox-translations-common-50.0.2-91.1 MozillaFirefox-translations-other-50.0.2-91.1 References: https://www.suse.com/security/cve/CVE-2016-9078.html https://www.suse.com/security/cve/CVE-2016-9079.html https://bugzilla.suse.com/1012807 https://bugzilla.suse.com/1012964

1 0

openSUSE-SU-2016:2993-1: important: Security update for vim
by opensuse-security＠opensuse.org 04 Dec '16

04 Dec '16

openSUSE Security Update: Security update for vim ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2993-1 Rating: important References: #1010685 #988903 Cross-References: CVE-2016-1248 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for vim fixes the following security issues: - Fixed CVE-2016-1248 an arbitrary command execution vulnerability (bsc#1010685) This update for vim fixes the following issues: - Fix build with Python 3.5. (bsc#988903) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1390=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gvim-7.4.326-8.2 gvim-debuginfo-7.4.326-8.2 vim-7.4.326-8.2 vim-debuginfo-7.4.326-8.2 vim-debugsource-7.4.326-8.2 - openSUSE Leap 42.2 (noarch): vim-data-7.4.326-8.2 References: https://www.suse.com/security/cve/CVE-2016-1248.html https://bugzilla.suse.com/1010685 https://bugzilla.suse.com/988903

1 0

openSUSE-SU-2016:2992-1: important: Security update for vim
by opensuse-security＠opensuse.org 04 Dec '16

04 Dec '16

openSUSE Security Update: Security update for vim ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2992-1 Rating: important References: #1010685 Cross-References: CVE-2016-1248 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for vim fixes the following security issues: - Fixed CVE-2016-1248 an arbitrary command execution vulnerability (bsc#1010685) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1391=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1391=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gvim-7.4.326-8.1 gvim-debuginfo-7.4.326-8.1 vim-7.4.326-8.1 vim-debuginfo-7.4.326-8.1 vim-debugsource-7.4.326-8.1 - openSUSE Leap 42.1 (noarch): vim-data-7.4.326-8.1 - openSUSE 13.2 (i586 x86_64): gvim-7.4.461.hg.6253-3.1 gvim-debuginfo-7.4.461.hg.6253-3.1 vim-7.4.461.hg.6253-3.1 vim-debuginfo-7.4.461.hg.6253-3.1 vim-debugsource-7.4.461.hg.6253-3.1 - openSUSE 13.2 (noarch): vim-data-7.4.461.hg.6253-3.1 References: https://www.suse.com/security/cve/CVE-2016-1248.html https://bugzilla.suse.com/1010685

1 0

openSUSE-SU-2016:2991-1: important: Security update for Mozilla Thunderbird
by opensuse-security＠opensuse.org 04 Dec '16

04 Dec '16

openSUSE Security Update: Security update for Mozilla Thunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2991-1 Rating: important References: #1012964 Cross-References: CVE-2016-9079 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update contains Mozilla Thunderbird 45.5.1 and fixes one vulnerability. In Mozilla Thunderbird, this vulnerability may be exploited when used in a browser-like context. - CVE-2016-9079: SVG Animation Remote Code Execution (MFSA 2016-92, bsc#1012964, bmo#1321066) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1393=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1393=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1393=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): MozillaThunderbird-45.5.1-28.2 MozillaThunderbird-buildsymbols-45.5.1-28.2 MozillaThunderbird-debuginfo-45.5.1-28.2 MozillaThunderbird-debugsource-45.5.1-28.2 MozillaThunderbird-devel-45.5.1-28.2 MozillaThunderbird-translations-common-45.5.1-28.2 MozillaThunderbird-translations-other-45.5.1-28.2 - openSUSE Leap 42.1 (i586 x86_64): MozillaThunderbird-45.5.1-28.2 MozillaThunderbird-buildsymbols-45.5.1-28.2 MozillaThunderbird-debuginfo-45.5.1-28.2 MozillaThunderbird-debugsource-45.5.1-28.2 MozillaThunderbird-devel-45.5.1-28.2 MozillaThunderbird-translations-common-45.5.1-28.2 MozillaThunderbird-translations-other-45.5.1-28.2 - openSUSE 13.2 (i586 x86_64): MozillaThunderbird-45.5.1-55.1 MozillaThunderbird-buildsymbols-45.5.1-55.1 MozillaThunderbird-debuginfo-45.5.1-55.1 MozillaThunderbird-debugsource-45.5.1-55.1 MozillaThunderbird-devel-45.5.1-55.1 MozillaThunderbird-translations-common-45.5.1-55.1 MozillaThunderbird-translations-other-45.5.1-55.1 References: https://www.suse.com/security/cve/CVE-2016-9079.html https://bugzilla.suse.com/1012964

1 0

openSUSE-SU-2016:2990-1: moderate: Security update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 04 Dec '16

04 Dec '16

openSUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2990-1 Rating: moderate References: #1005522 #1005523 #1005524 #1005525 #1005526 #1005527 #1005528 Cross-References: CVE-2016-5542 CVE-2016-5554 CVE-2016-5556 CVE-2016-5568 CVE-2016-5573 CVE-2016-5582 CVE-2016-5597 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: - Update to 2.6.8 - OpenJDK 7u121 * Security fixes + S8151921: Improved page resolution + S8155968: Update command line options + S8155973, CVE-2016-5542: Tighten jar checks (boo#1005522) + S8157176: Improved classfile parsing + S8157739, CVE-2016-5554: Classloader Consistency Checking (boo#1005523) + S8157749: Improve handling of DNS error replies + S8157753: Audio replay enhancement + S8157759: LCMS Transform Sampling Enhancement + S8157764: Better handling of interpolation plugins + S8158302: Handle contextual glyph substitutions + S8158993, CVE-2016-5568: Service Menu services (boo#1005525) + S8159495: Fix index offsets + S8159503: Amend Annotation Actions + S8159511: Stack map validation + S8159515: Improve indy validation + S8159519, CVE-2016-5573: Reformat JDWP messages (boo#1005526) + S8160090: Better signature handling in pack200 + S8160094: Improve pack200 layout + S8160098: Clean up color profiles + S8160591, CVE-2016-5582: Improve internal array handling (boo#1005527) + S8160838, CVE-2016-5597: Better HTTP service (boo#1005528) + PR3207, RH1367357: lcms2: Out-of-bounds read in Type_MLU_Read() + CVE-2016-5556 (boo#1005524) * Import of OpenJDK 7 u121 build 0 + S6624200: Regression test fails: test/closed/javax/swing/JMenuItem/4654927/bug4654927.java + S6882559: new JEditorPane("text/plain","") fails for null context class loader + S7090158: Networking Libraries don't build with javac -Werror + S7125055: ContentHandler.getContent API changed in error + S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on windows + S7187051: ShortRSAKeynnn.sh tests should do cleanup before start test + S8000626: Implement dead key detection for KeyEvent on Linux + S8003890: corelibs test scripts should pass TESTVMOPTS + S8005629: javac warnings compiling java.awt.EventDispatchThread and sun.awt.X11.XIconWindow + S8010297: Missing isLoggable() checks in logging code + S8010782: clean up source files containing carriage return characters + S8014431: cleanup warnings indicated by the -Wunused-value compiler option on linux + S8015265: revise the fix for 8007037 + S8016747: Replace deprecated PlatformLogger isLoggable(int) with isLoggable(Level) + S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame demo + S8024756: method grouping tabs are not selectable + S8026741: jdk8 l10n resource file translation update 5 + S8048147: Privilege tests with JAAS Subject.doAs + S8048357: PKCS basic tests + S8049171: Additional tests for jarsigner's warnings + S8059177: jdk8u40 l10n resource file translation update 1 + S8075584: test for 8067364 depends on hardwired text advance + S8076486: [TESTBUG] javax/security/auth/Subject/doAs/NestedActions.java fails if extra VM options are given + S8077953: [TEST_BUG] com/sun/management/OperatingSystemMXBean/TestTotalSwap.java Compilation failed after JDK-8077387 + S8080628: No mnemonics on Open and Save buttons in JFileChooser + S8083601: jdk8u60 l10n resource file translation update 2 + S8140530: Creating a VolatileImage with size 0,0 results in no longer working g2d.drawString + S8142926: OutputAnalyzer's shouldXXX() calls return this + S8143134: L10n resource file translation update + S8147077: IllegalArgumentException thrown by api/java_awt/Component/FlipBufferStrategy/indexTGF_General + S8148127: IllegalArgumentException thrown by JCK test api/java_awt/Component/FlipBufferStrategy/indexTGF_General in opengl pipeline + S8150611: Security problem on sun.misc.resources.Messages* + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp + S8158734: JEditorPane.createEditorKitForContentType throws NPE after 6882559 + S8159684: (tz) Support tzdata2016f + S8160934: isnan() is not available on older MSVC compilers + S8162411: Service Menu services 2 + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh failing after JDK-8155968 + S8162511: 8u111 L10n resource file updates + S8162792: Remove constraint DSA keySize < 1024 from jdk.jar.disabledAlgorithms in jdk8 + S8164452: 8u111 L10n resource file update - msgdrop 20 + S8165816: jarsigner -verify shows jar unsigned if it was signed with a weak algorithm + S8166381: Back out changes to the java.security file to not disable MD5 * Backports + S6604109, PR3162: javax.print.PrintServiceLookup.lookupPrintServices fails SOMETIMES for Cups + S6907252, PR3162: ZipFileInputStream Not Thread-Safe + S8024046, PR3162: Test sun/security/krb5/runNameEquals.sh failed on 7u45 Embedded linux-ppc* + S8028479, PR3162: runNameEquals still cannot precisely detect if a usable native krb5 is available + S8034057, PR3162: Files.getFileStore and Files.isWritable do not work with SUBST'ed drives (win) + S8038491, PR3162: Improve synchronization in ZipFile.read() + S8038502, PR3162: Deflater.needsInput() should use synchronization + S8059411, PR3162: RowSetWarning does not correctly chain warnings + S8062198, PR3162: Add RowSetMetaDataImpl Tests and add column range validation to isdefinitlyWritable + S8066188, PR3162: BaseRowSet returns the wrong default value for escape processing + S8072466, PR3162: Deadlock when initializing MulticastSocket and DatagramSocket + S8075118, PR3162: JVM stuck in infinite loop during verification + S8076579, PR3162: Popping a stack frame after exception breakpoint sets last method param to exception + S8078495, PR3162: End time checking for native TGT is wrong + S8078668, PR3162: jar usage string mentions unsupported option '-n' + S8080115, PR3162: (fs) Crash in libgio when calling Files.probeContentType(path) from parallel threads + S8081794, PR3162: ParsePosition getErrorIndex returns 0 for TimeZone parsing problem + S8129957, PR3162: Deadlock in JNDI LDAP implementation when closing the LDAP context + S8130136, PR3162: Swing window sometimes fails to repaint partially when it becomes exposed + S8130274, PR3162: java/nio/file/FileStore/Basic.java fails when two successive stores in an iteration are determined to be equal + S8132551, PR3162: Initialize local variables before returning them in p11_convert.c + S8133207, PR3162: [TEST_BUG] ParallelProbes.java test fails after changes for JDK-8080115 + S8133666, PR3162: OperatingSystemMXBean reports abnormally high machine CPU consumption on Linux + S8135002, PR3162: Fix or remove broken links in objectMonitor.cpp comments + S8137121, PR3162: (fc) Infinite loop FileChannel.truncate + S8137230, PR3162: TEST_BUG: java/nio/channels/FileChannel/LoopingTruncate.java timed out + S8139373, PR3162: [TEST_BUG] java/net/MulticastSocket/MultiDead.java failed with timeout + S8140249, PR3162: JVM Crashing During startUp If Flight Recording is enabled + S8141491, PR3160, G592292: Unaligned memory access in Bits.c + S8144483, PR3162: One long Safepoint pause directly after each GC log rotation + S8149611, PR3160, G592292: Add tests for Unsafe.copySwapMemory * Bug fixes + S8078628, PR3151: Zero build fails with pre-compiled headers disabled + PR3128: pax-mark-vm script calls "exit -1" which is invalid in dash + PR3131: PaX marking fails on filesystems which don't support extended attributes + PR3135: Makefile.am rule stamps/add/tzdata-support-debug.stamp has a typo in add-tzdata dependency + PR3141: Pass $(CC) and $(CXX) to OpenJDK build + PR3166: invalid zip timestamp handling leads to error building bootstrap-javac + PR3202: Update infinality configure test + PR3212: Disable ARM32 JIT by default * CACAO + PR3136: CACAO is broken due to 2 new native methods in sun.misc.Unsafe (from S8158260) * JamVM + PR3134: JamVM is broken due to 2 new native methods in sun.misc.Unsafe (from S8158260) * AArch64 port + S8167200, PR3204: AArch64: Broken stack pointer adjustment in interpreter + S8168888: Port 8160591: Improve internal array handling to AArch64. + PR3211: AArch64 build fails with pre-compiled headers disabled - Changed patch: * java-1_7_0-openjdk-gcc6.patch + Rediff to changed context - Disable arm32 JIT, since its build broken (http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2942) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-1389=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): java-1_7_0-openjdk-1.7.0.121-24.42.1 java-1_7_0-openjdk-accessibility-1.7.0.121-24.42.1 java-1_7_0-openjdk-debuginfo-1.7.0.121-24.42.1 java-1_7_0-openjdk-debugsource-1.7.0.121-24.42.1 java-1_7_0-openjdk-demo-1.7.0.121-24.42.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.121-24.42.1 java-1_7_0-openjdk-devel-1.7.0.121-24.42.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.121-24.42.1 java-1_7_0-openjdk-headless-1.7.0.121-24.42.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.121-24.42.1 java-1_7_0-openjdk-src-1.7.0.121-24.42.1 - openSUSE 13.1 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.121-24.42.1 References: https://www.suse.com/security/cve/CVE-2016-5542.html https://www.suse.com/security/cve/CVE-2016-5554.html https://www.suse.com/security/cve/CVE-2016-5556.html https://www.suse.com/security/cve/CVE-2016-5568.html https://www.suse.com/security/cve/CVE-2016-5573.html https://www.suse.com/security/cve/CVE-2016-5582.html https://www.suse.com/security/cve/CVE-2016-5597.html https://bugzilla.suse.com/1005522 https://bugzilla.suse.com/1005523 https://bugzilla.suse.com/1005524 https://bugzilla.suse.com/1005525 https://bugzilla.suse.com/1005526 https://bugzilla.suse.com/1005527 https://bugzilla.suse.com/1005528

1 0

openSUSE-RU-2016:2989-1: Recommended update for clamav-database
by maintenance＠opensuse.org 03 Dec '16

03 Dec '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2989-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh Nov. 28th 2016. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1388=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1388=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201611280004-9.1 - openSUSE Leap 42.1 (noarch): clamav-database-201611280004-188.1 References:

1 0

openSUSE-RU-2016:2986-1: moderate: Recommended update for gcc48
by maintenance＠opensuse.org 02 Dec '16

02 Dec '16

openSUSE Recommended Update: Recommended update for gcc48 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2986-1 Rating: moderate References: #988274 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: gcc48 was updated to fix the following issues: - gcc issues with armv7l (boo#988274) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1387=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): cpp48-4.8.3+r212056-2.4.4 cpp48-debuginfo-4.8.3+r212056-2.4.4 gcc48-4.8.3+r212056-2.4.4 gcc48-ada-4.8.3+r212056-2.4.4 gcc48-ada-debuginfo-4.8.3+r212056-2.4.4 gcc48-c++-4.8.3+r212056-2.4.4 gcc48-c++-debuginfo-4.8.3+r212056-2.4.4 gcc48-debuginfo-4.8.3+r212056-2.4.4 gcc48-debugsource-4.8.3+r212056-2.4.4 gcc48-fortran-4.8.3+r212056-2.4.4 gcc48-fortran-debuginfo-4.8.3+r212056-2.4.4 gcc48-gij-4.8.3+r212056-2.4.4 gcc48-gij-debuginfo-4.8.3+r212056-2.4.4 gcc48-java-4.8.3+r212056-2.4.4 gcc48-java-debuginfo-4.8.3+r212056-2.4.4 gcc48-locale-4.8.3+r212056-2.4.4 gcc48-obj-c++-4.8.3+r212056-2.4.4 gcc48-obj-c++-debuginfo-4.8.3+r212056-2.4.4 gcc48-objc-4.8.3+r212056-2.4.4 gcc48-objc-debuginfo-4.8.3+r212056-2.4.4 libada48-4.8.3+r212056-2.4.4 libada48-debuginfo-4.8.3+r212056-2.4.4 libasan0-4.8.3+r212056-2.4.4 libasan0-debuginfo-4.8.3+r212056-2.4.4 libatomic1-4.8.3+r212056-2.4.4 libatomic1-debuginfo-4.8.3+r212056-2.4.4 libffi4-4.8.3+r212056-2.4.4 libffi4-debuginfo-4.8.3+r212056-2.4.4 libffi48-debugsource-4.8.3+r212056-2.4.4 libffi48-devel-4.8.3+r212056-2.4.4 libgcc_s1-4.8.3+r212056-2.4.4 libgcc_s1-debuginfo-4.8.3+r212056-2.4.4 libgcj48-4.8.3+r212056-2.4.4 libgcj48-debuginfo-4.8.3+r212056-2.4.4 libgcj48-debugsource-4.8.3+r212056-2.4.4 libgcj48-devel-4.8.3+r212056-2.4.4 libgcj48-devel-debuginfo-4.8.3+r212056-2.4.4 libgcj48-jar-4.8.3+r212056-2.4.4 libgcj_bc1-4.8.3+r212056-2.4.4 libgfortran3-4.8.3+r212056-2.4.4 libgfortran3-debuginfo-4.8.3+r212056-2.4.4 libgomp1-4.8.3+r212056-2.4.4 libgomp1-debuginfo-4.8.3+r212056-2.4.4 libitm1-4.8.3+r212056-2.4.4 libitm1-debuginfo-4.8.3+r212056-2.4.4 libobjc4-4.8.3+r212056-2.4.4 libobjc4-debuginfo-4.8.3+r212056-2.4.4 libquadmath0-4.8.3+r212056-2.4.4 libquadmath0-debuginfo-4.8.3+r212056-2.4.4 libstdc++48-devel-4.8.3+r212056-2.4.4 libstdc++6-4.8.3+r212056-2.4.4 libstdc++6-debuginfo-4.8.3+r212056-2.4.4 libstdc++6-locale-4.8.3+r212056-2.4.4 - openSUSE 13.2 (noarch): gcc48-info-4.8.3+r212056-2.4.4 libstdc++48-doc-4.8.3+r212056-2.4.4 - openSUSE 13.2 (x86_64): cross-aarch64-gcc48-icecream-backend-4.8.3+r212056-2.4.4 cross-armv6hl-gcc48-icecream-backend-4.8.3+r212056-2.4.4 cross-armv7hl-gcc48-icecream-backend-4.8.3+r212056-2.4.4 cross-hppa-gcc48-icecream-backend-4.8.3+r212056-2.4.4 cross-i386-gcc48-icecream-backend-4.8.3+r212056-2.4.4 cross-ia64-gcc48-icecream-backend-4.8.3+r212056-2.4.4 cross-ppc-gcc48-icecream-backend-4.8.3+r212056-2.4.4 cross-ppc64-gcc48-icecream-backend-4.8.3+r212056-2.4.4 cross-ppc64le-gcc48-icecream-backend-4.8.3+r212056-2.4.4 cross-s390-gcc48-icecream-backend-4.8.3+r212056-2.4.4 cross-s390x-gcc48-icecream-backend-4.8.3+r212056-2.4.4 gcc48-32bit-4.8.3+r212056-2.4.4 gcc48-ada-32bit-4.8.3+r212056-2.4.4 gcc48-fortran-32bit-4.8.3+r212056-2.4.4 gcc48-gij-32bit-4.8.3+r212056-2.4.4 gcc48-gij-debuginfo-32bit-4.8.3+r212056-2.4.4 gcc48-objc-32bit-4.8.3+r212056-2.4.4 libada48-32bit-4.8.3+r212056-2.4.4 libada48-32bit-debuginfo-4.8.3+r212056-2.4.4 libasan0-32bit-4.8.3+r212056-2.4.4 libasan0-32bit-debuginfo-4.8.3+r212056-2.4.4 libatomic1-32bit-4.8.3+r212056-2.4.4 libatomic1-32bit-debuginfo-4.8.3+r212056-2.4.4 libffi4-32bit-4.8.3+r212056-2.4.4 libffi4-32bit-debuginfo-4.8.3+r212056-2.4.4 libffi48-devel-32bit-4.8.3+r212056-2.4.4 libgcc_s1-32bit-4.8.3+r212056-2.4.4 libgcc_s1-32bit-debuginfo-4.8.3+r212056-2.4.4 libgcj48-32bit-4.8.3+r212056-2.4.4 libgcj48-debuginfo-32bit-4.8.3+r212056-2.4.4 libgcj48-devel-32bit-4.8.3+r212056-2.4.4 libgcj48-devel-debuginfo-32bit-4.8.3+r212056-2.4.4 libgfortran3-32bit-4.8.3+r212056-2.4.4 libgfortran3-32bit-debuginfo-4.8.3+r212056-2.4.4 libgomp1-32bit-4.8.3+r212056-2.4.4 libgomp1-32bit-debuginfo-4.8.3+r212056-2.4.4 libitm1-32bit-4.8.3+r212056-2.4.4 libitm1-32bit-debuginfo-4.8.3+r212056-2.4.4 libobjc4-32bit-4.8.3+r212056-2.4.4 libobjc4-32bit-debuginfo-4.8.3+r212056-2.4.4 libquadmath0-32bit-4.8.3+r212056-2.4.4 libquadmath0-32bit-debuginfo-4.8.3+r212056-2.4.4 libstdc++48-devel-32bit-4.8.3+r212056-2.4.4 libstdc++6-32bit-4.8.3+r212056-2.4.4 libstdc++6-32bit-debuginfo-4.8.3+r212056-2.4.4 libtsan0-4.8.3+r212056-2.4.4 libtsan0-debuginfo-4.8.3+r212056-2.4.4 References: https://bugzilla.suse.com/988274

1 0