February 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:0378-1: moderate: Security update to phpMyAdmin 4.4.15.4
by opensuse-security＠opensuse.org 08 Feb '16

08 Feb '16

openSUSE Security Update: Security update to phpMyAdmin 4.4.15.4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0378-1 Rating: moderate References: #964024 Cross-References: CVE-2016-1927 CVE-2016-2038 CVE-2016-2039 CVE-2016-2040 CVE-2016-2041 CVE-2016-2042 CVE-2016-2043 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Security update to phpMyAdmin 4.4.15.4 The followinng vulnerabilities were fixed: (boo#964024) * CVE-2016-2038: Multiple full path disclosure vulnerabilities * CVE-2016-2039: Unsafe generation of XSRF/CSRF token * CVE-2016-2040: Multiple XSS vulnerabilities * CVE-2016-1927: Insecure password generation in JavaScript * CVE-2016-2041: Unsafe comparison of XSRF/CSRF token * CVE-2016-2042: Multiple full path disclosure vulnerabilities * CVE-2016-2043: XSS vulnerability in normalization page Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-168=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): phpMyAdmin-4.4.15.4-46.1 References: https://www.suse.com/security/cve/CVE-2016-1927.html https://www.suse.com/security/cve/CVE-2016-2038.html https://www.suse.com/security/cve/CVE-2016-2039.html https://www.suse.com/security/cve/CVE-2016-2040.html https://www.suse.com/security/cve/CVE-2016-2041.html https://www.suse.com/security/cve/CVE-2016-2042.html https://www.suse.com/security/cve/CVE-2016-2043.html https://bugzilla.suse.com/964024

1 0

openSUSE-SU-2016:0377-1: important: Security update for MySQL
by opensuse-security＠opensuse.org 08 Feb '16

08 Feb '16

openSUSE Security Update: Security update for MySQL ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0377-1 Rating: important References: #959724 #962779 Cross-References: CVE-2015-7744 CVE-2016-0502 CVE-2016-0503 CVE-2016-0504 CVE-2016-0505 CVE-2016-0546 CVE-2016-0594 CVE-2016-0595 CVE-2016-0596 CVE-2016-0597 CVE-2016-0598 CVE-2016-0600 CVE-2016-0605 CVE-2016-0606 CVE-2016-0607 CVE-2016-0608 CVE-2016-0609 CVE-2016-0610 CVE-2016-0611 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: This update to MySQL 5.6.28 fixes the following issues (bsc#962779): - CVE-2015-7744: Lack of verification against faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack. - CVE-2016-0502: Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer. - CVE-2016-0503: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0504. - CVE-2016-0504: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0503. - CVE-2016-0505: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Options. - CVE-2016-0546: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. - CVE-2016-0594: Unspecified vulnerability in Oracle MySQL 5.6.21 and earlier allows remote authenticated users to affect availability via vectors related to DML. - CVE-2016-0595: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier allows remote authenticated users to affect availability via vectors related to DML. - CVE-2016-0596: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier allows remote authenticated users to affect availability via vectors related to DML. - CVE-2016-0597: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer. - CVE-2016-0598: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML. - CVE-2016-0600: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to InnoDB. - CVE-2016-0605: Unspecified vulnerability in Oracle MySQL 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors. - CVE-2016-0606: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect integrity via unknown vectors related to encryption. - CVE-2016-0607: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to replication. - CVE-2016-0608: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via vectors related to UDF. - CVE-2016-0609: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to privileges. - CVE-2016-0610: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB. - CVE-2016-0611: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer. - bsc#959724: Possible buffer overflow from incorrect use of strcpy() and sprintf() Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-169=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libmysql56client18-5.6.28-7.16.1 libmysql56client18-debuginfo-5.6.28-7.16.1 libmysql56client_r18-5.6.28-7.16.1 mysql-community-server-5.6.28-7.16.1 mysql-community-server-bench-5.6.28-7.16.1 mysql-community-server-bench-debuginfo-5.6.28-7.16.1 mysql-community-server-client-5.6.28-7.16.1 mysql-community-server-client-debuginfo-5.6.28-7.16.1 mysql-community-server-debuginfo-5.6.28-7.16.1 mysql-community-server-debugsource-5.6.28-7.16.1 mysql-community-server-errormessages-5.6.28-7.16.1 mysql-community-server-test-5.6.28-7.16.1 mysql-community-server-test-debuginfo-5.6.28-7.16.1 mysql-community-server-tools-5.6.28-7.16.1 mysql-community-server-tools-debuginfo-5.6.28-7.16.1 - openSUSE 13.1 (x86_64): libmysql56client18-32bit-5.6.28-7.16.1 libmysql56client18-debuginfo-32bit-5.6.28-7.16.1 libmysql56client_r18-32bit-5.6.28-7.16.1 References: https://www.suse.com/security/cve/CVE-2015-7744.html https://www.suse.com/security/cve/CVE-2016-0502.html https://www.suse.com/security/cve/CVE-2016-0503.html https://www.suse.com/security/cve/CVE-2016-0504.html https://www.suse.com/security/cve/CVE-2016-0505.html https://www.suse.com/security/cve/CVE-2016-0546.html https://www.suse.com/security/cve/CVE-2016-0594.html https://www.suse.com/security/cve/CVE-2016-0595.html https://www.suse.com/security/cve/CVE-2016-0596.html https://www.suse.com/security/cve/CVE-2016-0597.html https://www.suse.com/security/cve/CVE-2016-0598.html https://www.suse.com/security/cve/CVE-2016-0600.html https://www.suse.com/security/cve/CVE-2016-0605.html https://www.suse.com/security/cve/CVE-2016-0606.html https://www.suse.com/security/cve/CVE-2016-0607.html https://www.suse.com/security/cve/CVE-2016-0608.html https://www.suse.com/security/cve/CVE-2016-0609.html https://www.suse.com/security/cve/CVE-2016-0610.html https://www.suse.com/security/cve/CVE-2016-0611.html https://bugzilla.suse.com/959724 https://bugzilla.suse.com/962779

1 0

openSUSE-SU-2016:0376-1: moderate: Security update for curl
by opensuse-security＠opensuse.org 08 Feb '16

08 Feb '16

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0376-1 Rating: moderate References: #962983 #962996 Cross-References: CVE-2016-0755 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for curl fixes the following issues: - CVE-2016-0755: libcurl would reuse NTLM-authenticated proxy connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer (bsc#962983) The following tracked bugs only affect the test suite: - bsc#962996: Expired cookie in test 46 caused test failures Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-170=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): curl-7.42.1-2.50.1 curl-debuginfo-7.42.1-2.50.1 curl-debugsource-7.42.1-2.50.1 libcurl-devel-7.42.1-2.50.1 libcurl4-7.42.1-2.50.1 libcurl4-debuginfo-7.42.1-2.50.1 - openSUSE 13.1 (x86_64): libcurl-devel-32bit-7.42.1-2.50.1 libcurl4-32bit-7.42.1-2.50.1 libcurl4-debuginfo-32bit-7.42.1-2.50.1 References: https://www.suse.com/security/cve/CVE-2016-0755.html https://bugzilla.suse.com/962983 https://bugzilla.suse.com/962996

1 0

openSUSE-RU-2016:0375-1: Update to resolve dependency-issues introduced with previous updates
by maintenance＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Recommended Update: Update to resolve dependency-issues introduced with previous updates ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0375-1 Rating: low References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update does not contain any fixes, but fixes several dependency issues for pitivi and rubygem-mail. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-167=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): pitivi-0.94-2.11.1 pitivi-debuginfo-0.94-2.11.1 pitivi-debugsource-0.94-2.11.1 python3-gst-1.2.1-2.1 python3-gst-debuginfo-1.2.1-2.1 python3-gst-debugsource-1.2.1-2.1 python3-numpy-1.9.0-2.2 python3-numpy-debuginfo-1.9.0-2.2 python3-numpy-debugsource-1.9.0-2.2 python3-numpy-devel-1.9.0-2.2 rubygem-i18n-0.6.11-2.2.1 rubygem-i18n-doc-0.6.11-2.2.1 rubygem-i18n-testsuite-0.6.11-2.2.1 rubygem-mail-2.5.4-4.6.1 rubygem-mail-2_4-2.4.4-6.5.1 rubygem-mail-2_4-doc-2.4.4-6.5.1 rubygem-mail-doc-2.5.4-4.6.1 rubygem-mime-types-1-1.25.1-2.2.1 rubygem-mime-types-1-doc-1.25.1-2.2.1 rubygem-mime-types-1-testsuite-1.25.1-2.2.1 rubygem-treetop-1_4-1.4.15-2.2.1 rubygem-treetop-1_4-doc-1.4.15-2.2.1 rubygem-treetop-1_4-testsuite-1.4.15-2.2.1 - openSUSE 13.2 (noarch): pitivi-lang-0.94-2.11.1 python3-numpy-doc-1.9.0-2.2 References:

1 0

openSUSE-RU-2016:0374-1: Update to resolve dependency-issues introduced with previous updates
by maintenance＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Recommended Update: Update to resolve dependency-issues introduced with previous updates ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0374-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update does not contain any fixes, but fixes several dependency issues for kaccounts-integration. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-166=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kaccounts-integration-15.12.1-11.1 kaccounts-integration-debuginfo-15.12.1-11.1 kaccounts-integration-debugsource-15.12.1-11.1 kaccounts-integration-devel-15.12.1-11.1 libaccounts-qt5-1-1.13-3.1 libaccounts-qt5-1-debuginfo-1.13-3.1 libaccounts-qt5-debugsource-1.13-3.1 libaccounts-qt5-devel-1.13-3.1 libaccounts-qt5-tools-1.13-3.1 libaccounts-qt5-tools-debuginfo-1.13-3.1 libsignon-qt5-1-8.57-5.1 libsignon-qt5-1-debuginfo-8.57-5.1 libsignon-qt5-devel-8.57-5.1 signon-debugsource-8.57-5.1 signon-plugins-8.57-5.1 signon-plugins-debuginfo-8.57-5.1 signon-plugins-devel-8.57-5.1 signond-8.57-5.1 signond-debuginfo-8.57-5.1 signond-libs-8.57-5.1 signond-libs-debuginfo-8.57-5.1 signond-libs-devel-8.57-5.1 - openSUSE Leap 42.1 (x86_64): kaccounts-integration-32bit-15.12.1-11.1 kaccounts-integration-debuginfo-32bit-15.12.1-11.1 - openSUSE Leap 42.1 (noarch): libaccounts-qt5-doc-1.13-3.1 libsignon-qt5-docs-8.57-5.1 signon-plugins-docs-8.57-5.1 signond-docs-8.57-5.1 References:

1 0

openSUSE-SU-2016:0373-1: moderate: Security update for curl
by opensuse-security＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0373-1 Rating: moderate References: #962983 #962996 Cross-References: CVE-2016-0755 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for curl fixes the following issues: - CVE-2016-0755: libcurl would reuse NTLM-authenticated proxy connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer (bsc#962983) The following tracked bugs only affect the test suite: - bsc#962996: Expired cookie in test 46 caused test failures Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-153=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): curl-7.42.1-19.1 curl-debuginfo-7.42.1-19.1 curl-debugsource-7.42.1-19.1 libcurl-devel-7.42.1-19.1 libcurl4-7.42.1-19.1 libcurl4-debuginfo-7.42.1-19.1 - openSUSE 13.2 (x86_64): libcurl-devel-32bit-7.42.1-19.1 libcurl4-32bit-7.42.1-19.1 libcurl4-debuginfo-32bit-7.42.1-19.1 References: https://www.suse.com/security/cve/CVE-2016-0755.html https://bugzilla.suse.com/962983 https://bugzilla.suse.com/962996

1 0

openSUSE-SU-2016:0372-1: moderate: Security update for rubygem-actionpack-4_2, rubygem-actionview-4_2, rubygem-activemodel-4_2, rubygem-activerecord-4_2, rubygem-activesupport-4_2
by opensuse-security＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Security Update: Security update for rubygem-actionpack-4_2, rubygem-actionview-4_2, rubygem-activemodel-4_2, rubygem-activerecord-4_2, rubygem-activesupport-4_2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0372-1 Rating: moderate References: #963329 #963330 #963331 #963332 #963334 #963335 Cross-References: CVE-2015-7576 CVE-2015-7577 CVE-2015-7581 CVE-2016-0751 CVE-2016-0752 CVE-2016-0753 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for rubygem-actionpack-4_2, rubygem-actionview-4_2, rubygem-activemodel-4_2, rubygem-activerecord-4_2, rubygem-activesupport-4_2 fixes the following issues: - CVE-2015-7576: Timing attack vulnerability in basic authentication in Action Controller (boo#963329) - CVE-2016-0752: directory traversal and information leak in Action View (boo#963332) - CVE-2015-7581: unbounded memory growth DoS via wildcard controller routes (boo#963335) - CVE-2016-0751: rubygem-actionpack: Object Leak DoS (boo#963331) - CVE-2016-0753: Input Validation Circumvention (boo#963334) - CVE-2015-7577: Nested attributes rejection proc bypass (boo#963330) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-159=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ruby2.1-rubygem-actionpack-4_2-4.2.4-6.1 ruby2.1-rubygem-actionpack-doc-4_2-4.2.4-6.1 ruby2.1-rubygem-actionview-4_2-4.2.4-6.1 ruby2.1-rubygem-actionview-doc-4_2-4.2.4-6.1 ruby2.1-rubygem-activemodel-4_2-4.2.4-6.1 ruby2.1-rubygem-activemodel-doc-4_2-4.2.4-6.1 ruby2.1-rubygem-activerecord-4_2-4.2.4-6.1 ruby2.1-rubygem-activerecord-doc-4_2-4.2.4-6.1 ruby2.1-rubygem-activesupport-4_2-4.2.4-6.1 ruby2.1-rubygem-activesupport-doc-4_2-4.2.4-6.1 References: https://www.suse.com/security/cve/CVE-2015-7576.html https://www.suse.com/security/cve/CVE-2015-7577.html https://www.suse.com/security/cve/CVE-2015-7581.html https://www.suse.com/security/cve/CVE-2016-0751.html https://www.suse.com/security/cve/CVE-2016-0752.html https://www.suse.com/security/cve/CVE-2016-0753.html https://bugzilla.suse.com/963329 https://bugzilla.suse.com/963330 https://bugzilla.suse.com/963331 https://bugzilla.suse.com/963332 https://bugzilla.suse.com/963334 https://bugzilla.suse.com/963335

1 0

openSUSE-SU-2016:0371-1: moderate: Security update for nginx
by opensuse-security＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Security Update: Security update for nginx ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0371-1 Rating: moderate References: #963775 #963778 #963781 Cross-References: CVE-2016-0742 CVE-2016-0746 CVE-2016-0747 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update to nginx 1.8.1 fixes the following issues: - CVE-2016-0742: Invalid pointer dereference during DNS server response processing (boo#963781) - CVE-2016-0746: Use-after-free condition during CNAME response processing (boo#963778) - CVE-2016-0747: Resource exhaustion through unlimited CNAME resolution (boo#963775) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-161=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): nginx-1.8.1-5.1 nginx-debuginfo-1.8.1-5.1 nginx-debugsource-1.8.1-5.1 References: https://www.suse.com/security/cve/CVE-2016-0742.html https://www.suse.com/security/cve/CVE-2016-0746.html https://www.suse.com/security/cve/CVE-2016-0747.html https://bugzilla.suse.com/963775 https://bugzilla.suse.com/963778 https://bugzilla.suse.com/963781

1 0

openSUSE-RU-2016:0370-1: Recommended update for WALinuxAgent
by maintenance＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Recommended Update: Recommended update for WALinuxAgent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0370-1 Rating: low References: #962589 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for WALinuxAgent fixes the following issues: - Add support for rdma driver installation and update. - Handle 410 when reporting health. - Add timeout to HTTP requests. - Fix multiple issues with extension handling. - Fix descriptions for naming of the product. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-156=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): WALinuxAgent-2.0.17-8.1 References: https://bugzilla.suse.com/962589

1 0

openSUSE-RU-2016:0369-1: Recommended update for suse-xsl-stylesheets
by maintenance＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Recommended Update: Recommended update for suse-xsl-stylesheets ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0369-1 Rating: low References: #955663 #962402 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: suse-xsl-stylesheets was updated to version 2.0.4, which brings several fixes and enhancements: Schema: - Allow constant and see (inside <indexterm>); make db.all.blocks zero or more (*) for question - Remove XLinks from DB5 elements - Disallow db.all.blocks in lists - Remove <menuchoice> from guiinlines (Novdoc) - Allow <menuchoice> in titles (Novdoc) Stylesheets (PDF): - "Unbolded" admonition titles - Odd space in footer where <productname> used to be, <productname> not displayed on book title page - Fix style of <sect5> titles (bsc#955663) - FOP doesn't like empty <fo:table-cell>s - Make <remark> handling a little more elegant - Attribute sets: fix logic for replacing bold/italic in CJK languages Stylesheets (XHTML): - Make Callouts "uncopyable" - Don't link inline images - Publication date is incorrectly capitalized - Create better plain-text output via DAPS - debug.filename-id: Use xml:id for metadata - Various fixes for JS code for tracker - Style for <package> Common Stylesheet Changes: - xrefs to variablelists in another book are broken - Trim spaces/newlines at beginning/end of verbatim elements - Fix bugtracker for db4. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-158=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): suse-xsl-stylesheets-2.0.4-12.2 References: https://bugzilla.suse.com/955663 https://bugzilla.suse.com/962402

1 0