February 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:0591-1: moderate: Recommended update for yast2-packager, yast2-update
by maintenance＠opensuse.org 26 Feb '16

26 Feb '16

openSUSE Recommended Update: Recommended update for yast2-packager, yast2-update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0591-1 Rating: moderate References: #952112 #956597 #960460 #963036 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for yast2-packager and yast2-update provides the following fixes: - Fix selection of additional products during system installation: do not select previously unselected products after adding repositories from the registration server. (bsc#963036) - Do not crash when attempting to add repository of unknown type. (bsc#960460) - Do not remove the system repository when adding an add-on fails. Handle errors properly. (bsc#956597) - Do not check the free space on a CD/DVD mounted medium during online migration. (bsc#952112) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-277=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): yast2-packager-3.1.84.1-3.1 yast2-packager-devel-doc-3.1.84.1-3.1 yast2-update-3.1.34.1-3.1 yast2-update-FACTORY-3.1.34.1-3.1 References: https://bugzilla.suse.com/952112 https://bugzilla.suse.com/956597 https://bugzilla.suse.com/960460 https://bugzilla.suse.com/963036

1 0

openSUSE-RU-2016:0590-1: Recommended update for yast2-drbd
by maintenance＠opensuse.org 26 Feb '16

26 Feb '16

openSUSE Recommended Update: Recommended update for yast2-drbd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0590-1 Rating: low References: #955564 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-drbd allows users to configure whether lvmetad should be used or not. When lvmetad is enabled, the volume group metadata and PV state flags are obtained from the lvmetad instance and no scanning is done by the individual commands. Because lvmetad's cache cannot be synchronized between nodes, users are advised to disable lvmetad in cluster environments. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-276=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): yast2-drbd-3.1.19-6.1 References: https://bugzilla.suse.com/955564

1 0

openSUSE-RU-2016:0589-1: moderate: Recommended update for booth
by maintenance＠opensuse.org 26 Feb '16

26 Feb '16

openSUSE Recommended Update: Recommended update for booth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0589-1 Rating: moderate References: #956321 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for booth provides fixes and enhancements: - Implement attribute prerequisites. (fate#318182) - Keep attributes in the CIB. (fate#318182) - Better control of election cause. - Mark expired tickets as lost. (bsc#956321) - Add 'other' as possible site reference. - Implement GEO attributes OCF RA support. (fate#318182) - Add geostore sample RA. (fate#318182) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-274=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): booth-0.2.0-34.1 booth-debuginfo-0.2.0-34.1 booth-debugsource-0.2.0-34.1 booth-test-0.2.0-34.1 References: https://bugzilla.suse.com/956321

1 0

openSUSE-SU-2016:0588-1: moderate: Security update for LibreOffice and related libraries
by opensuse-security＠opensuse.org 26 Feb '16

26 Feb '16

openSUSE Security Update: Security update for LibreOffice and related libraries ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0588-1 Rating: moderate References: #679938 #829430 #889755 #897903 #900186 #900214 #900218 #907636 #910805 #910806 #915996 #916181 #926375 #929793 #934423 #936188 #936190 #939996 #940838 #943075 #945047 #945692 #951579 #954345 Cross-References: CVE-2014-3693 CVE-2014-8146 CVE-2014-8147 CVE-2014-9093 CVE-2015-4551 CVE-2015-45513 CVE-2015-5212 CVE-2015-5213 CVE-2015-5214 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves 9 vulnerabilities and has 15 fixes is now available. Description: This update for LibreOffice and some library dependencies (cmis-client, libetonyek, libmwaw, libodfgen, libpagemaker, libreoffice-share-linker, mdds, libwps) fixes the following issues: Changes in libreoffice: - Provide l10n-pt from pt-PT - boo#945047 - LO-L3: LO is duplicating master pages, extended fix - boo#951579 - LO-L3: [LibreOffice] Calc 5.0 fails to open ods files * deleted RPATH prevented loading of bundled 3rd party RDF handler libs - Version update to 5.0.4.2: * Final of the 5.0.4 series - boo#945047 - LO-L3: LO is duplicating master pages - Version update to 5.0.4.1: * rc1 of 5.0.4 with various regression fixes - boo#954345 - LO-L3: Insert-->Image-->Insert as Link hangs writer - Version update to 5.0.3.2: * Final tag of 5.0.3 release - Fix boo#939996 - LO-L3: Some bits from DOCX file are not imported - Fix boo#889755 - LO-L3: PPTX: chart axis number format incorrect - boo#679938 - LO-L3: saving to doc file the chapter name in the header does not change with chapters - Version update to 5.0.3RC1 as it should fix i586 test failure - Update text2number extension to 1.5.0 - obsolete libreoffice-mono - pentaho-flow-reporting require is conditional on system_libs - Update icon theme dependencies * https://lists.debian.org/debian-openoffice/2015/09/msg00343.html - Version bump to 5.0.2 final fate#318856 fate#319071 boo#943075 boo#945692: * Small tweaks compared to rc1 - For sake of completion this release also contains security fixes for boo#910806 CVE-2014-8147, boo#907636 CVE-2014-9093, boo#934423 CVE-2015-4551, boo#910805 CVE-2014-8146, boo#940838 CVE-2015-5214, boo#936190 CVE-2015-5213, boo#936188 CVE-2015-5212, boo#934423 CVE-2015-45513, boo#934423 CVE-2015-4551, boo#910805 CVE-2014-8146, boo#940838 CVE-2015-5214, boo#936190 CVE-2015-5213, boo#936188 CVE-2015-5212, boo#934423 CVE-2015-45513, boo#934423 CVE-2015-4551, boo#910805 CVE-2014-8146, boo#940838 CVE-2015-5214, boo#936190 CVE-2015-5213, boo#936188 CVE-2015-5212, boo#934423 CVE-2015-4551 - Use gcc48 to build on sle11sp4 - Make debuginfo's smaller on IBS. - Fix chrpath call after the libs got -lo suffixing - Add patch to fix qt4 features detection: * kde4filepicker.patch - Split out gtk3 UI to separate subpkg that requires gnome subpkg * This is to allow people to test gtk3 while it not being default - Version update to 5.0.2 rc1: * Various small tweaks and integration of our SLE11 patchsets - Update constraints to 30 GB on disk - Version bump to 5.0.1 rc2: * breeze icons extension * Credits update * Various small fixes - Version bump to 5.0.1 rc1: * Various small fixes * Has some commits around screen rendering -> could fix kde bugs - Kill branding-openSUSE, stick to TDF branding. - Version bump to 5.0 rc5: * Bunch of final touchups here and there - Remove some upstreamed patches: * old-cairo.patch - Add explicit requires over libmysqlclient_r18, should cover boo#829430 - Add patch to build with old cairo (sle11). - Version bump to 5.0 rc3: * Various more fixes closing on the 5.0 release - Update to 5.0 rc2: * Few small fixes and updates in internal libraries - Version bump to 5.0 rc1, remove obsolete patches: * 0001-Fix-could-not-convert-.-const-char-to-const-rtl-OUSt.patch * 0001-writerperfect-fix-gcc-4.7-build.patch - More chrpat love for sle11 - Add python-importlib to build/requirements on py2 distros - Provide/obsolete crystal icons so they are purged and not left over - Fix breeze icons handling, drop crystal icons. - Version bump to 5.0.0.beta3: * Drop merged patch 0001-Make-cpp-poppler-version.h-header-optional.patch * Update some internal tarballs so we keep building - based on these bumps update the buildrequires too - Generate python cache files wrt boo#929793 - Update %post scriptlets to work on sle11 again - Split out the share -> lib linker to hopefully allow sle11 build - One more fix for help handling boo#915996 - Version bump to 4.4.3 release: * Various small fixes all around - Disable verbose build to pass check on maximal size of log - We need pre/post for libreoffice in langpkgs - Use old java for detection and old commons-lang/codec to pass brp check on java from sle11 * 0001-Make-HAVE_JAVA6-be-always-false.patch - Revert last changeset, it is caused by something else this time: * 0001-Set-source-and-target-params-for-java.patch - Set source/target for javac when building to work on SLE11: * 0001-Set-source-and-target-params-for-java.patch - Try to deal with rpath on bundled libs - Fix python3_sitelib not being around for py2 - Add internal make for too old system - One more stab on poppler switch: * 0001-Make-cpp-poppler-version.h-header-optional.patch - Update the old-poppler patch to work correctly: * 0001-Make-cpp-poppler-version.h-header-optional.patch - Sort out more external tarballs for the no-system-libs approach - Add basic external tarballs needed for without-system-libraries - Add patch to check for poppler more nicely to work on older distros: * 0001-Make-cpp-poppler-version.h-header-optional.patch - Try to pass configure without system libs - Allow switch between py2 and py3 - Move external dependencies in conditional thus allow build on SLE11 - Add conditional for noarch subpackages - Add switch in configure to detect more of internal/external stuff - Add conditional for appdatastore thing and redo it to impact the spec less - Add systemlibs switch to be used in attempt to build sle11 build - Silence more scarry messages by boo#900186 * Fixes autocorr symlinking * Cleans UNO cache in more pretty way - Clean up the uno cache removal to not display scarry message boo#900186 - Remove patch to look for help in /usr/share, we symlink it back to lib, so there is no actual need to search for it directly, migth fix boo#915996: * officecfg-help-in-usr-share.diff - --disable-collada * reportedly it does not work in LibreOffice 4.4 - added version numbers to some BuildRequires lines - Require flow engine too on base - Fix build on SLE12 and 13.1 by adding conditional for appdata install - Fixup the installed appdata.xml files: they reference a .desktop file that are not installed by libreoffice (boo#926375). - Version bump to 4.4.2: * 2nd bugfix update for the 4.4 series - BuildRequires: libodfgen-devel >= 0.1 - added version numbers to some BuildRequires lines - build does not require python3-lxml - build requires librevenge-devel >= 0.0.1 - vlc media backend is broken, don't use it. Only gstreamer should be used. - Install the .appdata.xml files shipped by upstream: allow LO to be shown in AppStream based software centers. - Move pretrans to pre - Version bump to 4.4.1 first bugfix release of the series - Reduce bit the compilation preparations as we prepped most of the things by _constraints and it is no longer needed - %pre is not enough the script needs to be rewritten in lua - Move removal of obsolete dirs from %pretrans to %pre boo#916181 - Version bump to 4.4.0 final: * First in the 4.4 series * First release to have the new UI elements without old hardcoded sizes * Various improvements all around. - Version bump to 4.4.0rc2: * Various bugfixes, just bumping to see if we still build fine. - That verbose switch for configure was really really bad idea - generic images.zip for galaxy icons seem gone so remove - Do not supplement kde3 stuff, it is way beyond obsolete - Remove vlc conditional - korea.xcd is no more so remove - Really use mergelib - Disable telepathy, it really is experimental like hell - Version bump to 4.4.0rc1: * New 4.4 branch release with additional features - Enable collada: * New bundled collada2gltf tarball: 4b87018f7fff1d054939d19920b751a0-collada2gltf-master-cb1d97788a.tar.bz2 - Remove errorous self-obsolete in lang pkgs. - Version bump to 4.3.3.2: * Various bugfixes from maintenance branch to copy openSUSE. * Also contains fix for boo#900214 and boo#900218 CVE-2014-3693 - fix regression in bullets (boo#897903). - Add masterpage_style_parent.odp as new file for regression test for bullets. Changes in cmis-client: - Update to version 0.5.0 + Completely removed the dependency on InMemory server for unit tests + Minimized the number of HTTP requests sent by SessionFactory::createSession + Added Session::getBaseTypes() - Bump soname to 0_5-5 - Bump incname to 0.5 Changes in libetonyek: - Version bump to 0.1.3: * Various small fixes * More imported now imported * Now use mdds to help with some hashing - Version bump to 0.1.2: * Initial support for pages and numbers * Ditch libetonyek-0.1.1-constants.patch as we do not require us to build for older boost Changes in libmwaw: - Version bump to 0.3.6: - Added a minimal parser for ApplePict v1.v2, ie. no clipping, does not take in account the copy mode: srcCopy, srcOr, ... - Extended the --with-docs configure option to allow to build doc only for the API classes: --with-docs=no|api|full . - Added a parser for MacDraft v4-v5 documents. - RagTime v5-v6 parser: try to retrieve the main layouts and the picture/shape/textbox, ie. now, it generates result but it is still very imcomplete... - MWAW{Graphic,Presentation,Text}Listener: corrected a problem in openGroup which may create to incorrect document. - Created an MWAWEmbeddedObject class to store a picture with various representations. - MWAW*Listener: renamed insertPicture to insertShape, added a function to insert a texbox in a MWAWGraphicShape (which only insert a basic textbox). - Fixed many crashes and hangs when importing broken files, found with the help of american-fuzzy-lop. - And several other minor fixes and improvements. - Version bump to 0.3.5 * Various small fixes on 0.3 series, nothing big woth mention Changes in libodfgen: - Version bump to 0.1.4: - drawing interface: do no forget to call startDocument/endDocument when writing in the manifest - metadata: added handler for 'template' metadata, unknown metadata are written in a meta:user-defined elements, - defineSheetNumberingStyle: can now define styles for the whole document (and not only for the actual sheet) - update doxygen configuration file + add a make astyle command - Allow writing meta:creation-date metadata element for drawings and presentations too. - Improve handling of headings. Most importantly, write valid ODF. - Write meta:generator metadata element. - Add initial support for embedded fonts. It is currently limited to Flat ODF output. - Upgrade to version 0.1.2 * Use text:h element for headings. Any paragraph with text:outline-level property is recognized as a heading. * Handle layers. * Improve handling of styles. Particularly, do not emit duplicate styles. * Slightly improve documentation. * Handle master pages. * Do not expect that integer properties are always in inches. * Fix misspelled style:paragraph-properties element in presentation notes. * Only export public symbols on Linux. * Fix bogus XML-escaping of metadata values. * And many other improvements and fixes. Changes in libpagemaker: - Initial package based on upstream libpagemaker 0.0.2 Changes in libreoffice-share-linker: - Initial commit, split out from main libreoffice package to workaround issues on SLE11 build Changes in mdds: - Update to version 0.12.1: * Various small fixes on 0.12 series * Just move define up and comment why we redefine docdir * more types are possible in segment_tree data structures (previously only pointers were possible) * added sorted_string_map * multi_type_vector bugfixes Changes in libwps: - Update to version 0.4.1: + QuattroPro: correct a mistake when reading negative cell's position. + Fix some Windows build problems. + Fix more than 10 hangs when reading damaged files, found with the help of american-fuzzy-lop. + Performance: improve the sheet's output generation. + add support for unknown encoding files (ie. DOS file) + add potential support for converting Lotus, ... documents, + accept to convert all Lotus Wk1 files and Symphony Wk1 files, + add support for Lotus Wk3 and Wk4 documents, + add support for Quattro Pro Wq1 and Wq2 documents, + only in debug mode, add pre-support for Lotus Wk5..., must allow to retrieve the main sheets content's with no formatting, + add potential support for asking the document's password ( but do nothing ) + correct some compiler warnings when compiling in debug mode. + Fix parsing of floating-point numbers in specific cases. + Fix several minor issues reported by Coverity and Clang. + Check arguments of public functions. Passing NULL no longer causes a crash. + Use symbol visibility on Linux. The library only exports the public functions now. + Import @TERM and @CTERM functions (fdo#86241). + Handle LICS character encoding in spreadsheets (fdo#87222). + Fix a crash when reading a broken file, found with the help of american-fuzzy-lop. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-273=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): cmis-client-0.5.0-4.3.2 cmis-client-debuginfo-0.5.0-4.3.2 cmis-client-debugsource-0.5.0-4.3.2 libcmis-0_5-5-0.5.0-4.3.2 libcmis-0_5-5-debuginfo-0.5.0-4.3.2 libcmis-c-0_5-5-0.5.0-4.3.2 libcmis-c-0_5-5-debuginfo-0.5.0-4.3.2 libcmis-c-devel-0.5.0-4.3.2 libcmis-devel-0.5.0-4.3.2 libetonyek-0_1-1-0.1.3-2.3.2 libetonyek-0_1-1-debuginfo-0.1.3-2.3.2 libetonyek-debugsource-0.1.3-2.3.2 libetonyek-devel-0.1.3-2.3.2 libetonyek-tools-0.1.3-2.3.2 libetonyek-tools-debuginfo-0.1.3-2.3.2 libmwaw-0_3-3-0.3.6-2.7.2 libmwaw-0_3-3-debuginfo-0.3.6-2.7.2 libmwaw-debugsource-0.3.6-2.7.2 libmwaw-devel-0.3.6-2.7.2 libmwaw-tools-0.3.6-2.7.2 libmwaw-tools-debuginfo-0.3.6-2.7.2 libodfgen-0_1-1-0.1.4-2.3.2 libodfgen-0_1-1-debuginfo-0.1.4-2.3.2 libodfgen-debugsource-0.1.4-2.3.2 libodfgen-devel-0.1.4-2.3.2 libpagemaker-0_0-0-0.0.2-2.2 libpagemaker-0_0-0-debuginfo-0.0.2-2.2 libpagemaker-debugsource-0.0.2-2.2 libpagemaker-devel-0.0.2-2.2 libpagemaker-tools-0.0.2-2.2 libpagemaker-tools-debuginfo-0.0.2-2.2 libreoffice-5.0.4.2-28.1 libreoffice-base-5.0.4.2-28.1 libreoffice-base-debuginfo-5.0.4.2-28.1 libreoffice-base-drivers-mysql-5.0.4.2-28.1 libreoffice-base-drivers-mysql-debuginfo-5.0.4.2-28.1 libreoffice-base-drivers-postgresql-5.0.4.2-28.1 libreoffice-base-drivers-postgresql-debuginfo-5.0.4.2-28.1 libreoffice-calc-5.0.4.2-28.1 libreoffice-calc-debuginfo-5.0.4.2-28.1 libreoffice-calc-extensions-5.0.4.2-28.1 libreoffice-debuginfo-5.0.4.2-28.1 libreoffice-debugsource-5.0.4.2-28.1 libreoffice-draw-5.0.4.2-28.1 libreoffice-draw-debuginfo-5.0.4.2-28.1 libreoffice-filters-optional-5.0.4.2-28.1 libreoffice-gnome-5.0.4.2-28.1 libreoffice-gnome-debuginfo-5.0.4.2-28.1 libreoffice-gtk3-5.0.4.2-28.1 libreoffice-gtk3-debuginfo-5.0.4.2-28.1 libreoffice-impress-5.0.4.2-28.1 libreoffice-impress-debuginfo-5.0.4.2-28.1 libreoffice-kde4-5.0.4.2-28.1 libreoffice-kde4-debuginfo-5.0.4.2-28.1 libreoffice-mailmerge-5.0.4.2-28.1 libreoffice-math-5.0.4.2-28.1 libreoffice-math-debuginfo-5.0.4.2-28.1 libreoffice-officebean-5.0.4.2-28.1 libreoffice-officebean-debuginfo-5.0.4.2-28.1 libreoffice-pyuno-5.0.4.2-28.1 libreoffice-pyuno-debuginfo-5.0.4.2-28.1 libreoffice-sdk-5.0.4.2-28.1 libreoffice-sdk-debuginfo-5.0.4.2-28.1 libreoffice-sdk-doc-5.0.4.2-28.1 libreoffice-writer-5.0.4.2-28.1 libreoffice-writer-debuginfo-5.0.4.2-28.1 libreoffice-writer-extensions-5.0.4.2-28.1 libwps-0_4-4-0.4.1-2.4.2 libwps-0_4-4-debuginfo-0.4.1-2.4.2 libwps-debugsource-0.4.1-2.4.2 libwps-devel-0.4.1-2.4.2 libwps-tools-0.4.1-2.4.2 libwps-tools-debuginfo-0.4.1-2.4.2 - openSUSE 13.2 (noarch): libetonyek-devel-doc-0.1.3-2.3.2 libmwaw-devel-doc-0.3.6-2.7.2 libodfgen-devel-doc-0.1.4-2.3.2 libpagemaker-devel-doc-0.0.2-2.2 libreoffice-branding-upstream-5.0.4.2-28.1 libreoffice-icon-theme-breeze-5.0.4.2-28.1 libreoffice-icon-theme-galaxy-5.0.4.2-28.1 libreoffice-icon-theme-hicontrast-5.0.4.2-28.1 libreoffice-icon-theme-oxygen-5.0.4.2-28.1 libreoffice-icon-theme-sifr-5.0.4.2-28.1 libreoffice-icon-theme-tango-5.0.4.2-28.1 libreoffice-l10n-af-5.0.4.2-28.1 libreoffice-l10n-ar-5.0.4.2-28.1 libreoffice-l10n-as-5.0.4.2-28.1 libreoffice-l10n-bg-5.0.4.2-28.1 libreoffice-l10n-bn-5.0.4.2-28.1 libreoffice-l10n-br-5.0.4.2-28.1 libreoffice-l10n-ca-5.0.4.2-28.1 libreoffice-l10n-cs-5.0.4.2-28.1 libreoffice-l10n-cy-5.0.4.2-28.1 libreoffice-l10n-da-5.0.4.2-28.1 libreoffice-l10n-de-5.0.4.2-28.1 libreoffice-l10n-dz-5.0.4.2-28.1 libreoffice-l10n-el-5.0.4.2-28.1 libreoffice-l10n-en-5.0.4.2-28.1 libreoffice-l10n-es-5.0.4.2-28.1 libreoffice-l10n-et-5.0.4.2-28.1 libreoffice-l10n-eu-5.0.4.2-28.1 libreoffice-l10n-fa-5.0.4.2-28.1 libreoffice-l10n-fi-5.0.4.2-28.1 libreoffice-l10n-fr-5.0.4.2-28.1 libreoffice-l10n-ga-5.0.4.2-28.1 libreoffice-l10n-gl-5.0.4.2-28.1 libreoffice-l10n-gu-5.0.4.2-28.1 libreoffice-l10n-he-5.0.4.2-28.1 libreoffice-l10n-hi-5.0.4.2-28.1 libreoffice-l10n-hr-5.0.4.2-28.1 libreoffice-l10n-hu-5.0.4.2-28.1 libreoffice-l10n-it-5.0.4.2-28.1 libreoffice-l10n-ja-5.0.4.2-28.1 libreoffice-l10n-kk-5.0.4.2-28.1 libreoffice-l10n-kn-5.0.4.2-28.1 libreoffice-l10n-ko-5.0.4.2-28.1 libreoffice-l10n-lt-5.0.4.2-28.1 libreoffice-l10n-lv-5.0.4.2-28.1 libreoffice-l10n-mai-5.0.4.2-28.1 libreoffice-l10n-ml-5.0.4.2-28.1 libreoffice-l10n-mr-5.0.4.2-28.1 libreoffice-l10n-nb-5.0.4.2-28.1 libreoffice-l10n-nl-5.0.4.2-28.1 libreoffice-l10n-nn-5.0.4.2-28.1 libreoffice-l10n-nr-5.0.4.2-28.1 libreoffice-l10n-nso-5.0.4.2-28.1 libreoffice-l10n-or-5.0.4.2-28.1 libreoffice-l10n-pa-5.0.4.2-28.1 libreoffice-l10n-pl-5.0.4.2-28.1 libreoffice-l10n-pt-BR-5.0.4.2-28.1 libreoffice-l10n-pt-PT-5.0.4.2-28.1 libreoffice-l10n-ro-5.0.4.2-28.1 libreoffice-l10n-ru-5.0.4.2-28.1 libreoffice-l10n-si-5.0.4.2-28.1 libreoffice-l10n-sk-5.0.4.2-28.1 libreoffice-l10n-sl-5.0.4.2-28.1 libreoffice-l10n-sr-5.0.4.2-28.1 libreoffice-l10n-ss-5.0.4.2-28.1 libreoffice-l10n-st-5.0.4.2-28.1 libreoffice-l10n-sv-5.0.4.2-28.1 libreoffice-l10n-ta-5.0.4.2-28.1 libreoffice-l10n-te-5.0.4.2-28.1 libreoffice-l10n-th-5.0.4.2-28.1 libreoffice-l10n-tn-5.0.4.2-28.1 libreoffice-l10n-tr-5.0.4.2-28.1 libreoffice-l10n-ts-5.0.4.2-28.1 libreoffice-l10n-uk-5.0.4.2-28.1 libreoffice-l10n-ve-5.0.4.2-28.1 libreoffice-l10n-xh-5.0.4.2-28.1 libreoffice-l10n-zh-Hans-5.0.4.2-28.1 libreoffice-l10n-zh-Hant-5.0.4.2-28.1 libreoffice-l10n-zu-5.0.4.2-28.1 libreoffice-share-linker-1-2.2 mdds-devel-0.12.1-2.4.2 References: https://www.suse.com/security/cve/CVE-2014-3693.html https://www.suse.com/security/cve/CVE-2014-8146.html https://www.suse.com/security/cve/CVE-2014-8147.html https://www.suse.com/security/cve/CVE-2014-9093.html https://www.suse.com/security/cve/CVE-2015-4551.html https://www.suse.com/security/cve/CVE-2015-45513.html https://www.suse.com/security/cve/CVE-2015-5212.html https://www.suse.com/security/cve/CVE-2015-5213.html https://www.suse.com/security/cve/CVE-2015-5214.html https://bugzilla.suse.com/679938 https://bugzilla.suse.com/829430 https://bugzilla.suse.com/889755 https://bugzilla.suse.com/897903 https://bugzilla.suse.com/900186 https://bugzilla.suse.com/900214 https://bugzilla.suse.com/900218 https://bugzilla.suse.com/907636 https://bugzilla.suse.com/910805 https://bugzilla.suse.com/910806 https://bugzilla.suse.com/915996 https://bugzilla.suse.com/916181 https://bugzilla.suse.com/926375 https://bugzilla.suse.com/929793 https://bugzilla.suse.com/934423 https://bugzilla.suse.com/936188 https://bugzilla.suse.com/936190 https://bugzilla.suse.com/939996 https://bugzilla.suse.com/940838 https://bugzilla.suse.com/943075 https://bugzilla.suse.com/945047 https://bugzilla.suse.com/945692 https://bugzilla.suse.com/951579 https://bugzilla.suse.com/954345

1 0

openSUSE-RU-2016:0579-1: Recommended update for clamav
by maintenance＠opensuse.org 25 Feb '16

25 Feb '16

openSUSE Recommended Update: Recommended update for clamav ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0579-1 Rating: low References: #960237 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ClamAV enables support for new regular expression signatures by using the Perl-compatible regex library (pcre). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-270=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): clamav-0.99-7.1 clamav-debuginfo-0.99-7.1 clamav-debugsource-0.99-7.1 References: https://bugzilla.suse.com/960237

1 0

openSUSE-SU-2016:0578-1: important: Security update for postgresql94
by opensuse-security＠opensuse.org 25 Feb '16

25 Feb '16

openSUSE Security Update: Security update for postgresql94 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0578-1 Rating: important References: #578053 #966435 #966436 Cross-References: CVE-2007-4772 CVE-2016-0766 CVE-2016-0773 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for postgresql94 fixes the following issues: - Security and bugfix release 9.4.6: * *** IMPORTANT *** Users of version 9.4 will need to reindex any jsonb_path_ops indexes they have created, in order to fix a persistent issue with missing index entries. * Fix infinite loops and buffer-overrun problems in regular expressions (CVE-2016-0773, bsc#966436). * Fix regular-expression compiler to handle loops of constraint arcs (CVE-2007-4772). * Prevent certain PL/Java parameters from being set by non-superusers (CVE-2016-0766, bsc#966435). * Fix many issues in pg_dump with specific object types * Prevent over-eager pushdown of HAVING clauses for GROUPING SETS * Fix deparsing error with ON CONFLICT ... WHERE clauses * Fix tableoid errors for postgres_fdw * Prevent floating-point exceptions in pgbench * Make \det search Foreign Table names consistently * Fix quoting of domain constraint names in pg_dump * Prevent putting expanded objects into Const nodes * Allow compile of PL/Java on Windows * Fix "unresolved symbol" errors in PL/Python execution * Allow Python2 and Python3 to be used in the same database * Add support for Python 3.5 in PL/Python * Fix issue with subdirectory creation during initdb * Make pg_ctl report status correctly on Windows * Suppress confusing error when using pg_receivexlog with older servers * Multiple documentation corrections and additions * Fix erroneous hash calculations in gin_extract_jsonb_path() - For the full release notse, see: http://www.postgresql.org/docs/9.4/static/release-9-4-6.html - PL/Perl still needs to be linked with rpath, so that it can find libperl.so at runtime. bsc#578053, postgresql-plperl-keep-rpath.patch This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-271=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libecpg6-9.4.6-4.1 libecpg6-debuginfo-9.4.6-4.1 libpq5-9.4.6-4.1 libpq5-debuginfo-9.4.6-4.1 postgresql94-9.4.6-4.1 postgresql94-contrib-9.4.6-4.1 postgresql94-contrib-debuginfo-9.4.6-4.1 postgresql94-debuginfo-9.4.6-4.1 postgresql94-debugsource-9.4.6-4.1 postgresql94-devel-9.4.6-4.1 postgresql94-devel-debuginfo-9.4.6-4.1 postgresql94-libs-debugsource-9.4.6-4.1 postgresql94-plperl-9.4.6-4.1 postgresql94-plperl-debuginfo-9.4.6-4.1 postgresql94-plpython-9.4.6-4.1 postgresql94-plpython-debuginfo-9.4.6-4.1 postgresql94-pltcl-9.4.6-4.1 postgresql94-pltcl-debuginfo-9.4.6-4.1 postgresql94-server-9.4.6-4.1 postgresql94-server-debuginfo-9.4.6-4.1 postgresql94-test-9.4.6-4.1 - openSUSE Leap 42.1 (x86_64): libecpg6-32bit-9.4.6-4.1 libecpg6-debuginfo-32bit-9.4.6-4.1 libpq5-32bit-9.4.6-4.1 libpq5-debuginfo-32bit-9.4.6-4.1 - openSUSE Leap 42.1 (noarch): postgresql94-docs-9.4.6-4.1 References: https://www.suse.com/security/cve/CVE-2007-4772.html https://www.suse.com/security/cve/CVE-2016-0766.html https://www.suse.com/security/cve/CVE-2016-0773.html https://bugzilla.suse.com/578053 https://bugzilla.suse.com/966435 https://bugzilla.suse.com/966436

1 0

openSUSE-RU-2016:0577-1: Recommended update for clamav-database
by maintenance＠opensuse.org 25 Feb '16

25 Feb '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0577-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh February 22nd. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-272=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201602220000-53.1 References:

1 0

openSUSE-RU-2016:0576-1: Recommended update for openslp
by maintenance＠opensuse.org 25 Feb '16

25 Feb '16

openSUSE Recommended Update: Recommended update for openslp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0576-1 Rating: low References: #950777 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for OpenSLP adjusts slpd's initialization to use SystemD's forking mechanism, avoiding stale PID files after the daemon is stopped. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-269=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): openslp-2.0.0-10.1 openslp-debuginfo-2.0.0-10.1 openslp-debugsource-2.0.0-10.1 openslp-devel-2.0.0-10.1 openslp-server-2.0.0-10.1 openslp-server-debuginfo-2.0.0-10.1 - openSUSE Leap 42.1 (x86_64): openslp-32bit-2.0.0-10.1 openslp-debuginfo-32bit-2.0.0-10.1 References: https://bugzilla.suse.com/950777

1 0

openSUSE-SU-2016:0575-1: moderate: Security update for libgcrypt
by opensuse-security＠opensuse.org 25 Feb '16

25 Feb '16

openSUSE Security Update: Security update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0575-1 Rating: moderate References: #965902 Cross-References: CVE-2015-7511 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libgcrypt fixes the following issues: - CVE-2015-7511: side-channel attack on ECDH with Weierstrass curves (boo#965902) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-267=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libgcrypt-cavs-1.6.1-8.13.1 libgcrypt-cavs-debuginfo-1.6.1-8.13.1 libgcrypt-debugsource-1.6.1-8.13.1 libgcrypt-devel-1.6.1-8.13.1 libgcrypt-devel-debuginfo-1.6.1-8.13.1 libgcrypt20-1.6.1-8.13.1 libgcrypt20-debuginfo-1.6.1-8.13.1 libgcrypt20-hmac-1.6.1-8.13.1 - openSUSE 13.2 (x86_64): libgcrypt-devel-32bit-1.6.1-8.13.1 libgcrypt-devel-debuginfo-32bit-1.6.1-8.13.1 libgcrypt20-32bit-1.6.1-8.13.1 libgcrypt20-debuginfo-32bit-1.6.1-8.13.1 libgcrypt20-hmac-32bit-1.6.1-8.13.1 References: https://www.suse.com/security/cve/CVE-2015-7511.html https://bugzilla.suse.com/965902

1 0

openSUSE-SU-2016:0574-1: moderate: Security update for gummi
by opensuse-security＠opensuse.org 25 Feb '16

25 Feb '16

openSUSE Security Update: Security update for gummi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0574-1 Rating: moderate References: #949682 Cross-References: CVE-2015-7758 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gummi fixes the following issues: - CVE-2015-7758: predictable filenames in /tmp based on basename - use final upstream patch (boo#949682) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-266=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-266=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gummi-0.7.1-8.1 gummi-debuginfo-0.7.1-8.1 gummi-debugsource-0.7.1-8.1 - openSUSE Leap 42.1 (noarch): gummi-lang-0.7.1-8.1 - openSUSE 13.2 (i586 x86_64): gummi-0.6.5-5.6.1 gummi-debuginfo-0.6.5-5.6.1 gummi-debugsource-0.6.5-5.6.1 References: https://www.suse.com/security/cve/CVE-2015-7758.html https://bugzilla.suse.com/949682

1 0