December 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:3163-1: moderate: Recommended update for release-notes-openSUSE
by maintenance＠opensuse.org 15 Dec '16

15 Dec '16

openSUSE Recommended Update: Recommended update for release-notes-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3163-1 Rating: moderate References: #1010575 #1014257 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for release-notes-openSUSE fixes the following issues: - Updated Leap 42.1 release notes.(boo#1014257) - Updated translations. - Added warning to section about Btrfs disk space leak.(boo#1010575) - Added reference to update and installtion chapter in documentation. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1486=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): release-notes-openSUSE-42.1.20161207-12.1 References: https://bugzilla.suse.com/1010575 https://bugzilla.suse.com/1014257

1 0

openSUSE-SU-2016:3160-1: moderate: Security update for flash-player
by opensuse-security＠opensuse.org 15 Dec '16

15 Dec '16

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3160-1 Rating: moderate References: #1015379 Cross-References: CVE-2016-7867 CVE-2016-7868 CVE-2016-7869 CVE-2016-7870 CVE-2016-7871 CVE-2016-7872 CVE-2016-7873 CVE-2016-7874 CVE-2016-7875 CVE-2016-7876 CVE-2016-7877 CVE-2016-7878 CVE-2016-7879 CVE-2016-7880 CVE-2016-7881 CVE-2016-7890 CVE-2016-7892 Affected Products: openSUSE 13.2 NonFree ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. Description: This update for flash-player fixes the following issues: - Security update to 24.0.0.186 (bsc#1015379) APSB16-39: * These updates resolve use-after-free vulnerabilities that could have lead to code execution (CVE-2016-7872, CVE-2016-7877, CVE-2016-7878, CVE-2016-7879, CVE-2016-7880, CVE-2016-7881, CVE-2016-7892). * These updates resolve buffer overflow vulnerabilities that could have lead to code execution (CVE-2016-7867, CVE-2016-7868, CVE-2016-7869, CVE-2016-7870). * These updates resolve memory corruption vulnerabilities that could have lead to code execution (CVE-2016-7871, CVE-2016-7873, CVE-2016-7874, CVE-2016-7875, CVE-2016-7876). * These updates resolve a security bypass vulnerability (CVE-2016-7890). - Update EULA to version 24.0. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2 NonFree: zypper in -t patch openSUSE-2016-1484=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 NonFree (i586 x86_64): flash-player-24.0.0.186-2.121.1 flash-player-gnome-24.0.0.186-2.121.1 flash-player-kde4-24.0.0.186-2.121.1 References: https://www.suse.com/security/cve/CVE-2016-7867.html https://www.suse.com/security/cve/CVE-2016-7868.html https://www.suse.com/security/cve/CVE-2016-7869.html https://www.suse.com/security/cve/CVE-2016-7870.html https://www.suse.com/security/cve/CVE-2016-7871.html https://www.suse.com/security/cve/CVE-2016-7872.html https://www.suse.com/security/cve/CVE-2016-7873.html https://www.suse.com/security/cve/CVE-2016-7874.html https://www.suse.com/security/cve/CVE-2016-7875.html https://www.suse.com/security/cve/CVE-2016-7876.html https://www.suse.com/security/cve/CVE-2016-7877.html https://www.suse.com/security/cve/CVE-2016-7878.html https://www.suse.com/security/cve/CVE-2016-7879.html https://www.suse.com/security/cve/CVE-2016-7880.html https://www.suse.com/security/cve/CVE-2016-7881.html https://www.suse.com/security/cve/CVE-2016-7890.html https://www.suse.com/security/cve/CVE-2016-7892.html https://bugzilla.suse.com/1015379

1 0

openSUSE-SU-2016:3158-1: important: Security update for gstreamer-plugins-bad
by opensuse-security＠opensuse.org 14 Dec '16

14 Dec '16

openSUSE Security Update: Security update for gstreamer-plugins-bad ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3158-1 Rating: important References: #1010829 Cross-References: CVE-2016-9445 CVE-2016-9446 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for gstreamer-plugins-bad fixes the following issues: - Maliciously crafted VMnc (VMware video) streams (typically contained in .avi files) could cause code execution during decoding or information leaks due to an unitialized buffer (CVE-2016-9445, CVE-2016-9446, boo#1010829). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1483=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1483=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gstreamer-plugins-bad-1.4.5-8.1 gstreamer-plugins-bad-debuginfo-1.4.5-8.1 gstreamer-plugins-bad-debugsource-1.4.5-8.1 gstreamer-plugins-bad-devel-1.4.5-8.1 gstreamer-plugins-bad-doc-1.4.5-8.1 libgstbadbase-1_0-0-1.4.5-8.1 libgstbadbase-1_0-0-debuginfo-1.4.5-8.1 libgstbadvideo-1_0-0-1.4.5-8.1 libgstbadvideo-1_0-0-debuginfo-1.4.5-8.1 libgstbasecamerabinsrc-1_0-0-1.4.5-8.1 libgstbasecamerabinsrc-1_0-0-debuginfo-1.4.5-8.1 libgstcodecparsers-1_0-0-1.4.5-8.1 libgstcodecparsers-1_0-0-debuginfo-1.4.5-8.1 libgstgl-1_0-0-1.4.5-8.1 libgstgl-1_0-0-debuginfo-1.4.5-8.1 libgstinsertbin-1_0-0-1.4.5-8.1 libgstinsertbin-1_0-0-debuginfo-1.4.5-8.1 libgstmpegts-1_0-0-1.4.5-8.1 libgstmpegts-1_0-0-debuginfo-1.4.5-8.1 libgstphotography-1_0-0-1.4.5-8.1 libgstphotography-1_0-0-debuginfo-1.4.5-8.1 libgsturidownloader-1_0-0-1.4.5-8.1 libgsturidownloader-1_0-0-debuginfo-1.4.5-8.1 libgstwayland-1_0-0-1.4.5-8.1 libgstwayland-1_0-0-debuginfo-1.4.5-8.1 - openSUSE Leap 42.1 (x86_64): gstreamer-plugins-bad-32bit-1.4.5-8.1 gstreamer-plugins-bad-debuginfo-32bit-1.4.5-8.1 libgstbadbase-1_0-0-32bit-1.4.5-8.1 libgstbadbase-1_0-0-debuginfo-32bit-1.4.5-8.1 libgstbadvideo-1_0-0-32bit-1.4.5-8.1 libgstbadvideo-1_0-0-debuginfo-32bit-1.4.5-8.1 libgstbasecamerabinsrc-1_0-0-32bit-1.4.5-8.1 libgstbasecamerabinsrc-1_0-0-debuginfo-32bit-1.4.5-8.1 libgstcodecparsers-1_0-0-32bit-1.4.5-8.1 libgstcodecparsers-1_0-0-debuginfo-32bit-1.4.5-8.1 libgstgl-1_0-0-32bit-1.4.5-8.1 libgstgl-1_0-0-debuginfo-32bit-1.4.5-8.1 libgstinsertbin-1_0-0-32bit-1.4.5-8.1 libgstinsertbin-1_0-0-debuginfo-32bit-1.4.5-8.1 libgstmpegts-1_0-0-32bit-1.4.5-8.1 libgstmpegts-1_0-0-debuginfo-32bit-1.4.5-8.1 libgstphotography-1_0-0-32bit-1.4.5-8.1 libgstphotography-1_0-0-debuginfo-32bit-1.4.5-8.1 libgsturidownloader-1_0-0-32bit-1.4.5-8.1 libgsturidownloader-1_0-0-debuginfo-32bit-1.4.5-8.1 libgstwayland-1_0-0-32bit-1.4.5-8.1 libgstwayland-1_0-0-debuginfo-32bit-1.4.5-8.1 - openSUSE Leap 42.1 (noarch): gstreamer-plugins-bad-lang-1.4.5-8.1 - openSUSE 13.2 (i586 x86_64): gstreamer-plugins-bad-1.4.3-3.1 gstreamer-plugins-bad-debuginfo-1.4.3-3.1 gstreamer-plugins-bad-debugsource-1.4.3-3.1 gstreamer-plugins-bad-devel-1.4.3-3.1 gstreamer-plugins-bad-doc-1.4.3-3.1 libgstbadbase-1_0-0-1.4.3-3.1 libgstbadbase-1_0-0-debuginfo-1.4.3-3.1 libgstbadvideo-1_0-0-1.4.3-3.1 libgstbadvideo-1_0-0-debuginfo-1.4.3-3.1 libgstbasecamerabinsrc-1_0-0-1.4.3-3.1 libgstbasecamerabinsrc-1_0-0-debuginfo-1.4.3-3.1 libgstcodecparsers-1_0-0-1.4.3-3.1 libgstcodecparsers-1_0-0-debuginfo-1.4.3-3.1 libgstgl-1_0-0-1.4.3-3.1 libgstgl-1_0-0-debuginfo-1.4.3-3.1 libgstinsertbin-1_0-0-1.4.3-3.1 libgstinsertbin-1_0-0-debuginfo-1.4.3-3.1 libgstmpegts-1_0-0-1.4.3-3.1 libgstmpegts-1_0-0-debuginfo-1.4.3-3.1 libgstphotography-1_0-0-1.4.3-3.1 libgstphotography-1_0-0-debuginfo-1.4.3-3.1 libgsturidownloader-1_0-0-1.4.3-3.1 libgsturidownloader-1_0-0-debuginfo-1.4.3-3.1 - openSUSE 13.2 (x86_64): gstreamer-plugins-bad-32bit-1.4.3-3.1 gstreamer-plugins-bad-debuginfo-32bit-1.4.3-3.1 libgstbadbase-1_0-0-32bit-1.4.3-3.1 libgstbadbase-1_0-0-debuginfo-32bit-1.4.3-3.1 libgstbadvideo-1_0-0-32bit-1.4.3-3.1 libgstbadvideo-1_0-0-debuginfo-32bit-1.4.3-3.1 libgstbasecamerabinsrc-1_0-0-32bit-1.4.3-3.1 libgstbasecamerabinsrc-1_0-0-debuginfo-32bit-1.4.3-3.1 libgstcodecparsers-1_0-0-32bit-1.4.3-3.1 libgstcodecparsers-1_0-0-debuginfo-32bit-1.4.3-3.1 libgstgl-1_0-0-32bit-1.4.3-3.1 libgstgl-1_0-0-debuginfo-32bit-1.4.3-3.1 libgstinsertbin-1_0-0-32bit-1.4.3-3.1 libgstinsertbin-1_0-0-debuginfo-32bit-1.4.3-3.1 libgstmpegts-1_0-0-32bit-1.4.3-3.1 libgstmpegts-1_0-0-debuginfo-32bit-1.4.3-3.1 libgstphotography-1_0-0-32bit-1.4.3-3.1 libgstphotography-1_0-0-debuginfo-32bit-1.4.3-3.1 libgsturidownloader-1_0-0-32bit-1.4.3-3.1 libgsturidownloader-1_0-0-debuginfo-32bit-1.4.3-3.1 - openSUSE 13.2 (noarch): gstreamer-plugins-bad-lang-1.4.3-3.1 References: https://www.suse.com/security/cve/CVE-2016-9445.html https://www.suse.com/security/cve/CVE-2016-9446.html https://bugzilla.suse.com/1010829

1 0

openSUSE-SU-2016:3157-1: moderate: Security update for python-Twisted
by opensuse-security＠opensuse.org 14 Dec '16

14 Dec '16

openSUSE Security Update: Security update for python-Twisted ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3157-1 Rating: moderate References: #989997 Cross-References: CVE-2016-1000111 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Twisted fixes the following issues: - No longer automatically export the http_proxy environment variable to avoid the proxy being trusted by unaware applications, if a Proxy request header is supplied (boo#989997, CVE-2016-1000111) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1482=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): python-Twisted-15.4.0-3.1 python-Twisted-debuginfo-15.4.0-3.1 python-Twisted-debugsource-15.4.0-3.1 python-Twisted-doc-15.4.0-3.1 References: https://www.suse.com/security/cve/CVE-2016-1000111.html https://bugzilla.suse.com/989997

1 0

openSUSE-SU-2016:3147-1: important: Security update for gstreamer-0_10-plugins-bad
by opensuse-security＠opensuse.org 14 Dec '16

14 Dec '16

openSUSE Security Update: Security update for gstreamer-0_10-plugins-bad ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3147-1 Rating: important References: #1010514 #1010829 Cross-References: CVE-2016-9445 CVE-2016-9446 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for gstreamer-0_10-plugins-bad fixes the following issues: - Maliciously crafted VMnc files (VMWare video format) could lead to crashes (CVE-2016-9445, CVE-2016-9446, boo#1010829). - Maliciously crafted NSF files (NES sound format) could lead to arbitrary code execution (CESA-2016-0001, boo#1010514). Therefore for security reasons the NSF plugin has been removed from the package. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1481=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1481=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gstreamer-0_10-plugins-bad-0.10.23-22.1 gstreamer-0_10-plugins-bad-debuginfo-0.10.23-22.1 gstreamer-0_10-plugins-bad-debugsource-0.10.23-22.1 gstreamer-0_10-plugins-bad-devel-0.10.23-22.1 gstreamer-0_10-plugins-bad-doc-0.10.23-22.1 libgstbasecamerabinsrc-0_10-23-0.10.23-22.1 libgstbasecamerabinsrc-0_10-23-debuginfo-0.10.23-22.1 libgstbasevideo-0_10-23-0.10.23-22.1 libgstbasevideo-0_10-23-debuginfo-0.10.23-22.1 libgstcodecparsers-0_10-23-0.10.23-22.1 libgstcodecparsers-0_10-23-debuginfo-0.10.23-22.1 libgstphotography-0_10-23-0.10.23-22.1 libgstphotography-0_10-23-debuginfo-0.10.23-22.1 libgstsignalprocessor-0_10-23-0.10.23-22.1 libgstsignalprocessor-0_10-23-debuginfo-0.10.23-22.1 libgstvdp-0_10-23-0.10.23-22.1 libgstvdp-0_10-23-debuginfo-0.10.23-22.1 - openSUSE Leap 42.1 (x86_64): gstreamer-0_10-plugins-bad-32bit-0.10.23-22.1 gstreamer-0_10-plugins-bad-debuginfo-32bit-0.10.23-22.1 libgstbasecamerabinsrc-0_10-23-32bit-0.10.23-22.1 libgstbasecamerabinsrc-0_10-23-debuginfo-32bit-0.10.23-22.1 libgstbasevideo-0_10-23-32bit-0.10.23-22.1 libgstbasevideo-0_10-23-debuginfo-32bit-0.10.23-22.1 libgstcodecparsers-0_10-23-32bit-0.10.23-22.1 libgstcodecparsers-0_10-23-debuginfo-32bit-0.10.23-22.1 libgstphotography-0_10-23-32bit-0.10.23-22.1 libgstphotography-0_10-23-debuginfo-32bit-0.10.23-22.1 libgstsignalprocessor-0_10-23-32bit-0.10.23-22.1 libgstsignalprocessor-0_10-23-debuginfo-32bit-0.10.23-22.1 libgstvdp-0_10-23-32bit-0.10.23-22.1 libgstvdp-0_10-23-debuginfo-32bit-0.10.23-22.1 - openSUSE Leap 42.1 (noarch): gstreamer-0_10-plugins-bad-lang-0.10.23-22.1 - openSUSE 13.2 (i586 x86_64): gstreamer-0_10-plugins-bad-0.10.23-15.3.1 gstreamer-0_10-plugins-bad-debuginfo-0.10.23-15.3.1 gstreamer-0_10-plugins-bad-debugsource-0.10.23-15.3.1 gstreamer-0_10-plugins-bad-devel-0.10.23-15.3.1 gstreamer-0_10-plugins-bad-doc-0.10.23-15.3.1 libgstbasecamerabinsrc-0_10-23-0.10.23-15.3.1 libgstbasecamerabinsrc-0_10-23-debuginfo-0.10.23-15.3.1 libgstbasevideo-0_10-23-0.10.23-15.3.1 libgstbasevideo-0_10-23-debuginfo-0.10.23-15.3.1 libgstcodecparsers-0_10-23-0.10.23-15.3.1 libgstcodecparsers-0_10-23-debuginfo-0.10.23-15.3.1 libgstphotography-0_10-23-0.10.23-15.3.1 libgstphotography-0_10-23-debuginfo-0.10.23-15.3.1 libgstsignalprocessor-0_10-23-0.10.23-15.3.1 libgstsignalprocessor-0_10-23-debuginfo-0.10.23-15.3.1 libgstvdp-0_10-23-0.10.23-15.3.1 libgstvdp-0_10-23-debuginfo-0.10.23-15.3.1 - openSUSE 13.2 (noarch): gstreamer-0_10-plugins-bad-lang-0.10.23-15.3.1 - openSUSE 13.2 (x86_64): gstreamer-0_10-plugins-bad-32bit-0.10.23-15.3.1 gstreamer-0_10-plugins-bad-debuginfo-32bit-0.10.23-15.3.1 libgstbasecamerabinsrc-0_10-23-32bit-0.10.23-15.3.1 libgstbasecamerabinsrc-0_10-23-debuginfo-32bit-0.10.23-15.3.1 libgstbasevideo-0_10-23-32bit-0.10.23-15.3.1 libgstbasevideo-0_10-23-debuginfo-32bit-0.10.23-15.3.1 libgstcodecparsers-0_10-23-32bit-0.10.23-15.3.1 libgstcodecparsers-0_10-23-debuginfo-32bit-0.10.23-15.3.1 libgstphotography-0_10-23-32bit-0.10.23-15.3.1 libgstphotography-0_10-23-debuginfo-32bit-0.10.23-15.3.1 libgstsignalprocessor-0_10-23-32bit-0.10.23-15.3.1 libgstsignalprocessor-0_10-23-debuginfo-32bit-0.10.23-15.3.1 libgstvdp-0_10-23-32bit-0.10.23-15.3.1 libgstvdp-0_10-23-debuginfo-32bit-0.10.23-15.3.1 References: https://www.suse.com/security/cve/CVE-2016-9445.html https://www.suse.com/security/cve/CVE-2016-9446.html https://bugzilla.suse.com/1010514 https://bugzilla.suse.com/1010829

1 0

openSUSE-RU-2016:3145-1: Recommended update for libtorrent-rasterbar
by maintenance＠opensuse.org 14 Dec '16

14 Dec '16

openSUSE Recommended Update: Recommended update for libtorrent-rasterbar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3145-1 Rating: low References: #1013570 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libtorrent-rasterbar fixes the following issues: - Require boost 1.54+ instead of 1.61+ again. - Fix building with Boost 1.54. - Fix Python bindings crash with non-default C++11. (boo#1013570) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1471=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libtorrent-rasterbar-debugsource-1.1.1-3.1 libtorrent-rasterbar-devel-1.1.1-3.1 libtorrent-rasterbar-doc-1.1.1-3.1 libtorrent-rasterbar9-1.1.1-3.1 libtorrent-rasterbar9-debuginfo-1.1.1-3.1 python-libtorrent-rasterbar-1.1.1-3.1 python-libtorrent-rasterbar-debuginfo-1.1.1-3.1 References: https://bugzilla.suse.com/1013570

1 0

openSUSE-SU-2016:3144-1: important: Security update for tomcat
by opensuse-security＠opensuse.org 14 Dec '16

14 Dec '16

openSUSE Security Update: Security update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3144-1 Rating: important References: #1002639 #1007853 #1007854 #1007855 #1007857 #1007858 #1010893 #1011805 #1011812 Cross-References: CVE-2016-0762 CVE-2016-5018 CVE-2016-6794 CVE-2016-6796 CVE-2016-6797 CVE-2016-6816 CVE-2016-8735 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has two fixes is now available. Description: This update for tomcat fixes the following issues: Feature changes: The embedded Apache Commons DBCP component was updated to version 2.0. (bsc#1010893 fate#321029) Security fixes: - CVE-2016-0762: Realm Timing Attack (bsc#1007854) - CVE-2016-5018: Security Manager Bypass (bsc#1007855) - CVE-2016-6794: System Property Disclosure (bsc#1007857) - CVE-2016-6796: Security Manager Bypass (bsc#1007858) - CVE-2016-6797: Unrestricted Access to Global Resources (bsc#1007853) - CVE-2016-8735: Remote code execution vulnerability in JmxRemoteLifecycleListener (bsc#1011805) - CVE-2016-6816: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests (bsc#1011812) Bug fixes: - Enabled optional setenv.sh script. See section '(3.4) Using the "setenv" script' in http://tomcat.apache.org/tomcat-8.0-doc/RUNNING.txt. (bsc#1002639) This update supplies the new packages apache-commons-pool2 and apache-commons-dbcp in version 2 to allow tomcat to use the DBCP 2.0 interface. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1456=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): apache-commons-dbcp-2.1.1-2.1 apache-commons-dbcp-javadoc-2.1.1-2.1 apache-commons-pool2-2.4.2-2.1 apache-commons-pool2-javadoc-2.4.2-2.1 tomcat-8.0.36-4.1 tomcat-admin-webapps-8.0.36-4.1 tomcat-docs-webapp-8.0.36-4.1 tomcat-el-3_0-api-8.0.36-4.1 tomcat-embed-8.0.36-4.1 tomcat-javadoc-8.0.36-4.1 tomcat-jsp-2_3-api-8.0.36-4.1 tomcat-jsvc-8.0.36-4.1 tomcat-lib-8.0.36-4.1 tomcat-servlet-3_1-api-8.0.36-4.1 tomcat-webapps-8.0.36-4.1 References: https://www.suse.com/security/cve/CVE-2016-0762.html https://www.suse.com/security/cve/CVE-2016-5018.html https://www.suse.com/security/cve/CVE-2016-6794.html https://www.suse.com/security/cve/CVE-2016-6796.html https://www.suse.com/security/cve/CVE-2016-6797.html https://www.suse.com/security/cve/CVE-2016-6816.html https://www.suse.com/security/cve/CVE-2016-8735.html https://bugzilla.suse.com/1002639 https://bugzilla.suse.com/1007853 https://bugzilla.suse.com/1007854 https://bugzilla.suse.com/1007855 https://bugzilla.suse.com/1007857 https://bugzilla.suse.com/1007858 https://bugzilla.suse.com/1010893 https://bugzilla.suse.com/1011805 https://bugzilla.suse.com/1011812

1 0

openSUSE-RU-2016:3143-1: Recommended update for yast2-network
by maintenance＠opensuse.org 14 Dec '16

14 Dec '16

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3143-1 Rating: low References: #954412 #985905 #991968 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for yast2-network provides the following fixes: - Fix sorting of bonding slaves. (bsc#991968) - Do not limit number of bonding slaves to 10. (bsc#985905) - Add more missing entries to the RNC file. (bsc#954412) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1472=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): yast2-network-3.1.140.8-12.3 yast2-network-devel-doc-3.1.140.8-12.3 References: https://bugzilla.suse.com/954412 https://bugzilla.suse.com/985905 https://bugzilla.suse.com/991968

1 0

openSUSE-OU-2016:3142-1: Optional update for rubygem-docker-api
by maintenance＠opensuse.org 14 Dec '16

14 Dec '16

openSUSE Optional Update: Optional update for rubygem-docker-api ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:3142-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update for rubygem-docker-api contains the following changes: - compatibility for updated versions of docker - Updated version from 1.17.0 to 1.31.0. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1480=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1480=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ruby2.1-rubygem-docker-api-1.31.0-8.1 ruby2.1-rubygem-docker-api-doc-1.31.0-8.1 ruby2.1-rubygem-docker-api-testsuite-1.31.0-8.1 - openSUSE Leap 42.1 (i586 x86_64): ruby2.1-rubygem-docker-api-1.31.0-7.1 ruby2.1-rubygem-docker-api-doc-1.31.0-7.1 ruby2.1-rubygem-docker-api-testsuite-1.31.0-7.1 References:

1 0

openSUSE-RU-2016:3141-1: Recommended update for k3b
by maintenance＠opensuse.org 14 Dec '16

14 Dec '16

openSUSE Recommended Update: Recommended update for k3b ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3141-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for k3b fixes the following issues: - Obsolete k3b-codecs, the additional codecs are part of the main package now. - Restore conditionals for lame and libmad. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1470=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): k3b-lang-2.0.3-9.1 - openSUSE Leap 42.2 (x86_64): k3b-2.0.3-9.1 k3b-debuginfo-2.0.3-9.1 k3b-debugsource-2.0.3-9.1 k3b-devel-2.0.3-9.1 References:

1 0