February 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:0518-1: moderate: Security update for Chromium
by opensuse-security＠opensuse.org 20 Feb '16

20 Feb '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0518-1 Rating: moderate References: #965566 #965738 #965999 #966082 Cross-References: CVE-2016-1622 CVE-2016-1623 CVE-2016-1624 CVE-2016-1625 CVE-2016-1626 CVE-2016-1627 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update to Chromium 48.0.2564.109 fixes the following issues: Security fixes (boo#965999): - CVE-2016-1622: Same-origin bypass in Extensions - CVE-2016-1623: Same-origin bypass in DOM - CVE-2016-1624: Buffer overflow in Brotli - CVE-2016-1625: Navigation bypass in Chrome Instant - CVE-2016-1626: Out-of-bounds read in PDFium - CVE-2016-1627: Various fixes from internal audits, fuzzing and other initiatives Non-security bug fixes: - boo#965738: resolve issues with specific banking websites when built against system libraries - boo#966082: chromium: sandbox related stacktrace printed - boo#965566: Drop libva support - Prevent graphical issues related to libjpeg - On KDE 5 kwallet5 is the default password store now Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-238=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): chromedriver-48.0.2564.109-125.1 chromedriver-debuginfo-48.0.2564.109-125.1 chromium-48.0.2564.109-125.1 chromium-debuginfo-48.0.2564.109-125.1 chromium-debugsource-48.0.2564.109-125.1 chromium-desktop-gnome-48.0.2564.109-125.1 chromium-desktop-kde-48.0.2564.109-125.1 chromium-ffmpegsumo-48.0.2564.109-125.1 chromium-ffmpegsumo-debuginfo-48.0.2564.109-125.1 References: https://www.suse.com/security/cve/CVE-2016-1622.html https://www.suse.com/security/cve/CVE-2016-1623.html https://www.suse.com/security/cve/CVE-2016-1624.html https://www.suse.com/security/cve/CVE-2016-1625.html https://www.suse.com/security/cve/CVE-2016-1626.html https://www.suse.com/security/cve/CVE-2016-1627.html https://bugzilla.suse.com/965566 https://bugzilla.suse.com/965738 https://bugzilla.suse.com/965999 https://bugzilla.suse.com/966082

1 0

openSUSE-RU-2016:0515-1: Recommended update for emacs-vm
by maintenance＠opensuse.org 19 Feb '16

19 Feb '16

openSUSE Recommended Update: Recommended update for emacs-vm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0515-1 Rating: low References: #939497 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for emacs-vm fixes the following issues: - Require vm-reply.el from vm-compose-mail. (boo#939497, lp#913005) - Added a variable `vm-confirm-for-auto-archive' that controls the confirmation dialogue for `vm-auto-archive-messages'. (lp#793541) - Added autoload for `vm-select-recipient-from-sender'. (boo#939497, lp#907286) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-237=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-237=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): emacs-vm-8.2.0b-11.1 emacs-vm-debuginfo-8.2.0b-11.1 emacs-vm-debugsource-8.2.0b-11.1 - openSUSE 13.2 (i586 x86_64): emacs-vm-8.2.0b-2.3.1 emacs-vm-debuginfo-8.2.0b-2.3.1 emacs-vm-debugsource-8.2.0b-2.3.1 References: https://bugzilla.suse.com/939497

1 0

openSUSE-RU-2016:0514-1: Recommended update for digikam
by maintenance＠opensuse.org 19 Feb '16

19 Feb '16

openSUSE Recommended Update: Recommended update for digikam ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0514-1 Rating: low References: #965865 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for digikam fixes the following issues: - Drop the requires on digikam from the digikam-libs package. This would allow digikam-libs to replace the existing libkipi, libkexiv2, etc without pulling in digikam/kipi-plugins (boo#965865) - Make the dependency on marble-data from digikam-libs a recommends to allow more flexibility for users Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-236=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): digikam-4.14.0-11.1 digikam-debuginfo-4.14.0-11.1 digikam-debugsource-4.14.0-11.1 digikam-libs-4.14.0-11.1 digikam-libs-debuginfo-4.14.0-11.1 digikam-plugin-color-4.14.0-11.1 digikam-plugin-color-debuginfo-4.14.0-11.1 digikam-plugin-decorate-4.14.0-11.1 digikam-plugin-decorate-debuginfo-4.14.0-11.1 digikam-plugin-enhance-4.14.0-11.1 digikam-plugin-enhance-debuginfo-4.14.0-11.1 digikam-plugin-fxfilters-4.14.0-11.1 digikam-plugin-fxfilters-debuginfo-4.14.0-11.1 digikam-plugin-transform-4.14.0-11.1 digikam-plugin-transform-debuginfo-4.14.0-11.1 kipi-plugins-4.14.0-11.1 kipi-plugins-acquireimage-4.14.0-11.1 kipi-plugins-acquireimage-debuginfo-4.14.0-11.1 kipi-plugins-debuginfo-4.14.0-11.1 kipi-plugins-geolocation-4.14.0-11.1 kipi-plugins-geolocation-debuginfo-4.14.0-11.1 - openSUSE Leap 42.1 (noarch): digikam-doc-4.14.0-11.1 digikam-lang-4.14.0-11.1 kipi-plugins-lang-4.14.0-11.1 References: https://bugzilla.suse.com/965865

1 0

openSUSE-FU-2016:0513-1: moderate: Add Erlang to SLE 12 Backports
by maintenance＠opensuse.org 19 Feb '16

19 Feb '16

openSUSE Feature Update: Add Erlang to SLE 12 Backports ______________________________________________________________________________ Announcement ID: openSUSE-FU-2016:0513-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 feature fixes can now be installed. Description: This update adds Erlang to the SLE 12 Backports project. Patch Instructions: To install this openSUSE Feature Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-235=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): erlang-18.2.2-2.1 erlang-debugger-18.2.2-2.1 erlang-debugger-src-18.2.2-2.1 erlang-dialyzer-18.2.2-2.1 erlang-dialyzer-src-18.2.2-2.1 erlang-doc-18.2.2-2.1 erlang-epmd-18.2.2-2.1 erlang-et-18.2.2-2.1 erlang-et-src-18.2.2-2.1 erlang-gs-18.2.2-2.1 erlang-gs-src-18.2.2-2.1 erlang-jinterface-18.2.2-2.1 erlang-jinterface-src-18.2.2-2.1 erlang-observer-18.2.2-2.1 erlang-observer-src-18.2.2-2.1 erlang-reltool-18.2.2-2.1 erlang-reltool-src-18.2.2-2.1 erlang-src-18.2.2-2.1 erlang-wx-18.2.2-2.1 erlang-wx-src-18.2.2-2.1 References:

1 0

openSUSE-SU-2016:0512-1: critical: Security update for glibc
by opensuse-security＠opensuse.org 19 Feb '16

19 Feb '16

openSUSE Security Update: Security update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0512-1 Rating: critical References: Cross-References: CVE-2015-7547 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for glibc fixes the following security issues: * fix stack overflow in the glibc libresolv DNS resolver function getaddrinfo(), known as CVE-2015-7547. It is a client side networked/remote vulnerability. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-234=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): glibc-2.18-4.41.2 glibc-debuginfo-2.18-4.41.2 glibc-debugsource-2.18-4.41.2 glibc-devel-2.18-4.41.2 glibc-devel-debuginfo-2.18-4.41.2 glibc-devel-static-2.18-4.41.2 glibc-extra-2.18-4.41.2 glibc-extra-debuginfo-2.18-4.41.2 glibc-locale-2.18-4.41.2 glibc-locale-debuginfo-2.18-4.41.2 glibc-profile-2.18-4.41.2 glibc-utils-2.18-4.41.4 glibc-utils-debuginfo-2.18-4.41.4 glibc-utils-debugsource-2.18-4.41.4 nscd-2.18-4.41.2 nscd-debuginfo-2.18-4.41.2 - openSUSE 13.1 (x86_64): glibc-32bit-2.18-4.41.1 glibc-debuginfo-32bit-2.18-4.41.1 glibc-devel-32bit-2.18-4.41.1 glibc-devel-debuginfo-32bit-2.18-4.41.1 glibc-devel-static-32bit-2.18-4.41.1 glibc-locale-32bit-2.18-4.41.1 glibc-locale-debuginfo-32bit-2.18-4.41.1 glibc-profile-32bit-2.18-4.41.1 glibc-utils-32bit-2.18-4.41.4 glibc-utils-debuginfo-32bit-2.18-4.41.4 - openSUSE 13.1 (noarch): glibc-html-2.18-4.41.2 glibc-i18ndata-2.18-4.41.1 glibc-i18ndata-2.18-4.41.2 glibc-info-2.18-4.41.1 glibc-info-2.18-4.41.2 - openSUSE 13.1 (i686): glibc-2.18-4.41.1 glibc-debuginfo-2.18-4.41.1 glibc-debugsource-2.18-4.41.1 glibc-devel-2.18-4.41.1 glibc-devel-debuginfo-2.18-4.41.1 glibc-devel-static-2.18-4.41.1 glibc-extra-2.18-4.41.1 glibc-extra-debuginfo-2.18-4.41.1 glibc-locale-2.18-4.41.1 glibc-locale-debuginfo-2.18-4.41.1 glibc-obsolete-2.18-4.41.1 glibc-obsolete-debuginfo-2.18-4.41.1 glibc-profile-2.18-4.41.1 nscd-2.18-4.41.1 nscd-debuginfo-2.18-4.41.1 - openSUSE 13.1 (i586): glibc-obsolete-2.18-4.41.2 glibc-obsolete-debuginfo-2.18-4.41.2 References: https://www.suse.com/security/cve/CVE-2015-7547.html

1 0

openSUSE-SU-2016:0511-1: critical: Security update for glibc
by opensuse-security＠opensuse.org 19 Feb '16

19 Feb '16

openSUSE Security Update: Security update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0511-1 Rating: critical References: Cross-References: CVE-2015-7547 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for glibc fixes the following security issues: * fix stack overflow in the glibc libresolv DNS resolver function getaddrinfo(), known as CVE-2015-7547. It is a client side networked/remote vulnerability. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2016-234=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): glibc-2.11.3-69.2 glibc-debuginfo-2.11.3-69.2 glibc-debugsource-2.11.3-69.2 glibc-devel-2.11.3-69.2 glibc-devel-debuginfo-2.11.3-69.2 glibc-html-2.11.3-69.2 glibc-i18ndata-2.11.3-69.2 glibc-info-2.11.3-69.2 glibc-locale-2.11.3-69.2 glibc-locale-debuginfo-2.11.3-69.2 glibc-obsolete-2.11.3-69.2 glibc-profile-2.11.3-69.2 nscd-2.11.3-69.2 nscd-debuginfo-2.11.3-69.2 - openSUSE Evergreen 11.4 (x86_64): glibc-32bit-2.11.3-69.1 glibc-debuginfo-32bit-2.11.3-69.1 glibc-devel-32bit-2.11.3-69.1 glibc-devel-debuginfo-32bit-2.11.3-69.1 glibc-locale-32bit-2.11.3-69.1 glibc-locale-debuginfo-32bit-2.11.3-69.1 glibc-profile-32bit-2.11.3-69.1 - openSUSE Evergreen 11.4 (ia64): glibc-debuginfo-x86-2.11.3-69.1 glibc-devel-debuginfo-x86-2.11.3-69.1 glibc-locale-debuginfo-x86-2.11.3-69.1 glibc-locale-x86-2.11.3-69.1 glibc-profile-x86-2.11.3-69.1 glibc-x86-2.11.3-69.1 - openSUSE Evergreen 11.4 (i686): glibc-2.11.3-69.1 glibc-debuginfo-2.11.3-69.1 glibc-debugsource-2.11.3-69.1 glibc-devel-2.11.3-69.1 glibc-devel-debuginfo-2.11.3-69.1 glibc-html-2.11.3-69.1 glibc-i18ndata-2.11.3-69.1 glibc-info-2.11.3-69.1 glibc-locale-2.11.3-69.1 glibc-locale-debuginfo-2.11.3-69.1 glibc-obsolete-2.11.3-69.1 glibc-obsolete-debuginfo-2.11.3-69.1 glibc-profile-2.11.3-69.1 nscd-2.11.3-69.1 nscd-debuginfo-2.11.3-69.1 - openSUSE Evergreen 11.4 (i586): glibc-obsolete-debuginfo-2.11.3-69.2 References: https://www.suse.com/security/cve/CVE-2015-7547.html

1 0

openSUSE-SU-2016:0510-1: important: Security update for glibc
by opensuse-security＠opensuse.org 18 Feb '16

18 Feb '16

openSUSE Security Update: Security update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0510-1 Rating: important References: #956716 #958315 #961721 #962736 #962737 #962738 #962739 Cross-References: CVE-2014-9761 CVE-2015-7547 CVE-2015-8776 CVE-2015-8778 CVE-2015-8779 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has two fixes is now available. Description: This update for glibc fixes the following issues: - errorcheck-mutex-no-elision.patch: Don't do lock elision on an error checking mutex (boo#956716, BZ #17514) - reinitialize-dl_load_write_lock.patch: Reinitialize dl_load_write_lock on fork (boo#958315, BZ #19282) - send-dg-buffer-overflow.patch: Fix getaddrinfo stack-based buffer overflow (CVE-2015-7547, boo#961721, BZ #18665) - strftime-range-check.patch: Add range check on time fields (CVE-2015-8776, boo#962736, BZ #18985) - hcreate-overflow-check.patch: Handle overflow in hcreate (CVE-2015-8778, boo#962737, BZ #18240) - refactor-nan-parsing.patch: Refactor strtod parsing of NaN payloads (CVE-2014-9761, boo#962738, BZ #16962) - catopen-unbound-alloca.patch: Fix unbound alloca in catopen (CVE-2015-8779, boo#962739, BZ #17905) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-233=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 i686 x86_64): glibc-2.19-16.22.2 glibc-debuginfo-2.19-16.22.2 glibc-debugsource-2.19-16.22.2 glibc-devel-2.19-16.22.2 glibc-devel-debuginfo-2.19-16.22.2 glibc-devel-static-2.19-16.22.2 glibc-locale-2.19-16.22.2 glibc-locale-debuginfo-2.19-16.22.2 glibc-profile-2.19-16.22.2 - openSUSE 13.2 (i586 x86_64): glibc-extra-2.19-16.22.2 glibc-extra-debuginfo-2.19-16.22.2 glibc-utils-2.19-16.22.2 glibc-utils-debuginfo-2.19-16.22.2 glibc-utils-debugsource-2.19-16.22.2 nscd-2.19-16.22.2 nscd-debuginfo-2.19-16.22.2 - openSUSE 13.2 (x86_64): glibc-32bit-2.19-16.22.2 glibc-debuginfo-32bit-2.19-16.22.2 glibc-devel-32bit-2.19-16.22.2 glibc-devel-debuginfo-32bit-2.19-16.22.2 glibc-devel-static-32bit-2.19-16.22.2 glibc-locale-32bit-2.19-16.22.2 glibc-locale-debuginfo-32bit-2.19-16.22.2 glibc-profile-32bit-2.19-16.22.2 glibc-utils-32bit-2.19-16.22.2 glibc-utils-debuginfo-32bit-2.19-16.22.2 - openSUSE 13.2 (noarch): glibc-html-2.19-16.22.2 glibc-i18ndata-2.19-16.22.2 glibc-info-2.19-16.22.2 - openSUSE 13.2 (i586): glibc-obsolete-2.19-16.22.2 glibc-obsolete-debuginfo-2.19-16.22.2 References: https://www.suse.com/security/cve/CVE-2014-9761.html https://www.suse.com/security/cve/CVE-2015-7547.html https://www.suse.com/security/cve/CVE-2015-8776.html https://www.suse.com/security/cve/CVE-2015-8778.html https://www.suse.com/security/cve/CVE-2015-8779.html https://bugzilla.suse.com/956716 https://bugzilla.suse.com/958315 https://bugzilla.suse.com/961721 https://bugzilla.suse.com/962736 https://bugzilla.suse.com/962737 https://bugzilla.suse.com/962738 https://bugzilla.suse.com/962739

1 0

openSUSE-RU-2016:0503-1: moderate: Recommended update for btrfsprogs
by maintenance＠opensuse.org 18 Feb '16

18 Feb '16

openSUSE Recommended Update: Recommended update for btrfsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0503-1 Rating: moderate References: #956819 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for btrfsprogs fixes a mkfs failure on architectures with sectorsize greater than 4 kbytes. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-232=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): btrfsprogs-4.1.2-10.1 btrfsprogs-debuginfo-4.1.2-10.1 btrfsprogs-debugsource-4.1.2-10.1 libbtrfs-devel-4.1.2-10.1 libbtrfs0-4.1.2-10.1 libbtrfs0-debuginfo-4.1.2-10.1 References: https://bugzilla.suse.com/956819

1 0

openSUSE-RU-2016:0502-1: moderate: Recommended update for squashfs
by maintenance＠opensuse.org 18 Feb '16

18 Feb '16

openSUSE Recommended Update: Recommended update for squashfs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0502-1 Rating: moderate References: #953723 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for squashfs fixes a file corruption issue caused by a rare race condition. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-231=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): squashfs-4.3-6.1 squashfs-debuginfo-4.3-6.1 squashfs-debugsource-4.3-6.1 References: https://bugzilla.suse.com/953723

1 0

openSUSE-SU-2016:0501-1: moderate: Security update for krb5
by opensuse-security＠opensuse.org 18 Feb '16

18 Feb '16

openSUSE Security Update: Security update for krb5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0501-1 Rating: moderate References: #963964 #963968 #963975 Cross-References: CVE-2015-8629 CVE-2015-8630 CVE-2015-8631 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for krb5 fixes the following issues: - CVE-2015-8629: Information leak authenticated attackers with permissions to modify the database (bsc#963968) - CVE-2015-8630: An authenticated attacker with permission to modify a principal entry may have caused kadmind to crash (bsc#963964) - CVE-2015-8631: An authenticated attacker could have caused a memory leak in auditd by supplying a null principal name in request (bsc#963975) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-230=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): krb5-1.12.1-27.1 krb5-client-1.12.1-27.1 krb5-client-debuginfo-1.12.1-27.1 krb5-debuginfo-1.12.1-27.1 krb5-debugsource-1.12.1-27.1 krb5-devel-1.12.1-27.1 krb5-doc-1.12.1-27.1 krb5-mini-1.12.1-27.1 krb5-mini-debuginfo-1.12.1-27.1 krb5-mini-debugsource-1.12.1-27.1 krb5-mini-devel-1.12.1-27.1 krb5-plugin-kdb-ldap-1.12.1-27.1 krb5-plugin-kdb-ldap-debuginfo-1.12.1-27.1 krb5-plugin-preauth-otp-1.12.1-27.1 krb5-plugin-preauth-otp-debuginfo-1.12.1-27.1 krb5-plugin-preauth-pkinit-1.12.1-27.1 krb5-plugin-preauth-pkinit-debuginfo-1.12.1-27.1 krb5-server-1.12.1-27.1 krb5-server-debuginfo-1.12.1-27.1 - openSUSE Leap 42.1 (x86_64): krb5-32bit-1.12.1-27.1 krb5-debuginfo-32bit-1.12.1-27.1 krb5-devel-32bit-1.12.1-27.1 References: https://www.suse.com/security/cve/CVE-2015-8629.html https://www.suse.com/security/cve/CVE-2015-8630.html https://www.suse.com/security/cve/CVE-2015-8631.html https://bugzilla.suse.com/963964 https://bugzilla.suse.com/963968 https://bugzilla.suse.com/963975

1 0

openSUSE-RU-2016:0500-1: Recommended update for ant-contrib
by maintenance＠opensuse.org 18 Feb '16

18 Feb '16

openSUSE Recommended Update: Recommended update for ant-contrib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0500-1 Rating: low References: #922324 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ant-contrib enables the <antcontrib:for> task. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-227=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): ant-contrib-1.0b3-6.1 ant-contrib-javadoc-1.0b3-6.1 ant-contrib-manual-1.0b3-6.1 References: https://bugzilla.suse.com/922324

1 0

openSUSE-RU-2016:0499-1: moderate: Recommended update for desktop-translations
by maintenance＠opensuse.org 18 Feb '16

18 Feb '16

openSUSE Recommended Update: Recommended update for desktop-translations ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0499-1 Rating: moderate References: #964566 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 13.2 for desktop-translations: - Update translations (boo#964566). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-226=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): desktop-translations-13.2-11.9.1 References: https://bugzilla.suse.com/964566

1 0

openSUSE-RU-2016:0498-1: moderate: Recommended update for release-notes-openSUSE
by maintenance＠opensuse.org 18 Feb '16

18 Feb '16

openSUSE Recommended Update: Recommended update for release-notes-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0498-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for release-notes-openSUSE fixes the following issues: - Post-GA update (boo#967075) - Use Leap 42.1 release notes instread of those from Tumbleweed (boo#965691) - Add necessary CJK fonts to spec file (boo#965462) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-229=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): release-notes-openSUSE-42.1.20160217-9.1 References:

1 0

openSUSE-RU-2016:0497-1: moderate: Recommended update for xf86-video-intel
by maintenance＠opensuse.org 18 Feb '16

18 Feb '16

openSUSE Recommended Update: Recommended update for xf86-video-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0497-1 Rating: moderate References: #950666 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xf86-video-intel fixes the following issue: - Fix video playback using XV (boo#950666). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-228=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-228=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xf86-video-intel-2.99.917-9.1 xf86-video-intel-debuginfo-2.99.917-9.1 xf86-video-intel-debugsource-2.99.917-9.1 - openSUSE Leap 42.1 (x86_64): xf86-video-intel-32bit-2.99.917-9.1 xf86-video-intel-debuginfo-32bit-2.99.917-9.1 - openSUSE 13.2 (i586 x86_64): xf86-video-intel-2.99.916-27.1 xf86-video-intel-debuginfo-2.99.916-27.1 xf86-video-intel-debugsource-2.99.916-27.1 - openSUSE 13.2 (x86_64): xf86-video-intel-32bit-2.99.916-27.1 xf86-video-intel-debuginfo-32bit-2.99.916-27.1 References: https://bugzilla.suse.com/950666

1 0

openSUSE-SU-2016:0492-1: moderate: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 17 Feb '16

17 Feb '16

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0492-1 Rating: moderate References: #963520 #963632 #963635 Cross-References: CVE-2016-1930 CVE-2016-1935 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update Mozilla Thunderbird 38.6.0 fixes the following issues(boo#963520): - CVE-2016-1930: Miscellaneous memory safety hazards (boo#963632) - CVE-2016-1935: Buffer overflow in WebGL after out of memory allocation (boo#963635) The following upstream fixes are included: - Filters ran on a different folder than selected Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-222=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-222=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): MozillaThunderbird-38.6.0-10.1 MozillaThunderbird-buildsymbols-38.6.0-10.1 MozillaThunderbird-debuginfo-38.6.0-10.1 MozillaThunderbird-debugsource-38.6.0-10.1 MozillaThunderbird-devel-38.6.0-10.1 MozillaThunderbird-translations-common-38.6.0-10.1 MozillaThunderbird-translations-other-38.6.0-10.1 - openSUSE 13.2 (i586 x86_64): MozillaThunderbird-38.6.0-37.1 MozillaThunderbird-buildsymbols-38.6.0-37.1 MozillaThunderbird-debuginfo-38.6.0-37.1 MozillaThunderbird-debugsource-38.6.0-37.1 MozillaThunderbird-devel-38.6.0-37.1 MozillaThunderbird-translations-common-38.6.0-37.1 MozillaThunderbird-translations-other-38.6.0-37.1 References: https://www.suse.com/security/cve/CVE-2016-1930.html https://www.suse.com/security/cve/CVE-2016-1935.html https://bugzilla.suse.com/963520 https://bugzilla.suse.com/963632 https://bugzilla.suse.com/963635

1 0

openSUSE-SU-2016:0491-1: moderate: Security update for Chromium
by opensuse-security＠opensuse.org 17 Feb '16

17 Feb '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0491-1 Rating: moderate References: #965566 #965738 #965999 #966082 Cross-References: CVE-2016-1622 CVE-2016-1623 CVE-2016-1624 CVE-2016-1625 CVE-2016-1626 CVE-2016-1627 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update to Chromium 48.0.2564.109 fixes the following issues: Security fixes (boo#965999): - CVE-2016-1622: Same-origin bypass in Extensions - CVE-2016-1623: Same-origin bypass in DOM - CVE-2016-1624: Buffer overflow in Brotli - CVE-2016-1625: Navigation bypass in Chrome Instant - CVE-2016-1626: Out-of-bounds read in PDFium - CVE-2016-1627: Various fixes from internal audits, fuzzing and other initiatives Non-security bug fixes: - boo#965738: resolve issues with specific banking websites when built against system libraries - boo#966082: chromium: sandbox related stacktrace printed - boo#965566: Drop libva support - Prevent graphical issues related to libjpeg - On KDE 5 kwallet5 is the default password store now Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-221=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-48.0.2564.109-49.1 chromedriver-debuginfo-48.0.2564.109-49.1 chromium-48.0.2564.109-49.1 chromium-debuginfo-48.0.2564.109-49.1 chromium-debugsource-48.0.2564.109-49.1 chromium-desktop-gnome-48.0.2564.109-49.1 chromium-desktop-kde-48.0.2564.109-49.1 chromium-ffmpegsumo-48.0.2564.109-49.1 chromium-ffmpegsumo-debuginfo-48.0.2564.109-49.1 References: https://www.suse.com/security/cve/CVE-2016-1622.html https://www.suse.com/security/cve/CVE-2016-1623.html https://www.suse.com/security/cve/CVE-2016-1624.html https://www.suse.com/security/cve/CVE-2016-1625.html https://www.suse.com/security/cve/CVE-2016-1626.html https://www.suse.com/security/cve/CVE-2016-1627.html https://bugzilla.suse.com/965566 https://bugzilla.suse.com/965738 https://bugzilla.suse.com/965999 https://bugzilla.suse.com/966082

1 0

openSUSE-SU-2016:0490-1: important: Security update for glibc
by opensuse-security＠opensuse.org 17 Feb '16

17 Feb '16

openSUSE Security Update: Security update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0490-1 Rating: important References: #950944 #955647 #956716 #958315 #961721 #962736 #962737 #962738 #962739 Cross-References: CVE-2014-9761 CVE-2015-7547 CVE-2015-8776 CVE-2015-8777 CVE-2015-8778 CVE-2015-8779 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has three fixes is now available. Description: This update for glibc fixes the following security issues: - CVE-2015-7547: A stack-based buffer overflow in getaddrinfo allowed remote attackers to cause a crash or execute arbitrary code via crafted and timed DNS responses (bsc#961721) - CVE-2015-8777: Insufficient checking of LD_POINTER_GUARD environment variable allowed local attackers to bypass the pointer guarding protection of the dynamic loader on set-user-ID and set-group-ID programs (bsc#950944) - CVE-2015-8776: Out-of-range time values passed to the strftime function may cause it to crash, leading to a denial of service, or potentially disclosure information (bsc#962736) - CVE-2015-8778: Integer overflow in hcreate and hcreate_r could have caused an out-of-bound memory access. leading to application crashes or, potentially, arbitrary code execution (bsc#962737) - CVE-2014-9761: A stack overflow (unbounded alloca) could have caused applications which process long strings with the nan function to crash or, potentially, execute arbitrary code. (bsc#962738) - CVE-2015-8779: A stack overflow (unbounded alloca) in the catopen function could have caused applications which pass long strings to the catopen function to crash or, potentially execute arbitrary code. (bsc#962739) The following non-security bugs were fixed: - bsc#955647: Resource leak in resolver - bsc#956716: Don't do lock elision on an error checking mutex - bsc#958315: Reinitialize dl_load_write_lock on fork This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-224=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 i686 x86_64): glibc-2.19-19.1 glibc-debuginfo-2.19-19.1 glibc-debugsource-2.19-19.1 glibc-devel-2.19-19.1 glibc-devel-debuginfo-2.19-19.1 glibc-devel-static-2.19-19.1 glibc-locale-2.19-19.1 glibc-locale-debuginfo-2.19-19.1 glibc-profile-2.19-19.1 - openSUSE Leap 42.1 (i586 x86_64): glibc-extra-2.19-19.1 glibc-extra-debuginfo-2.19-19.1 glibc-utils-2.19-19.1 glibc-utils-debuginfo-2.19-19.1 glibc-utils-debugsource-2.19-19.1 nscd-2.19-19.1 nscd-debuginfo-2.19-19.1 - openSUSE Leap 42.1 (x86_64): glibc-32bit-2.19-19.1 glibc-debuginfo-32bit-2.19-19.1 glibc-devel-32bit-2.19-19.1 glibc-devel-debuginfo-32bit-2.19-19.1 glibc-devel-static-32bit-2.19-19.1 glibc-locale-32bit-2.19-19.1 glibc-locale-debuginfo-32bit-2.19-19.1 glibc-profile-32bit-2.19-19.1 glibc-utils-32bit-2.19-19.1 glibc-utils-debuginfo-32bit-2.19-19.1 - openSUSE Leap 42.1 (noarch): glibc-html-2.19-19.1 glibc-i18ndata-2.19-19.1 glibc-info-2.19-19.1 - openSUSE Leap 42.1 (i586): glibc-obsolete-2.19-19.1 glibc-obsolete-debuginfo-2.19-19.1 References: https://www.suse.com/security/cve/CVE-2014-9761.html https://www.suse.com/security/cve/CVE-2015-7547.html https://www.suse.com/security/cve/CVE-2015-8776.html https://www.suse.com/security/cve/CVE-2015-8777.html https://www.suse.com/security/cve/CVE-2015-8778.html https://www.suse.com/security/cve/CVE-2015-8779.html https://bugzilla.suse.com/950944 https://bugzilla.suse.com/955647 https://bugzilla.suse.com/956716 https://bugzilla.suse.com/958315 https://bugzilla.suse.com/961721 https://bugzilla.suse.com/962736 https://bugzilla.suse.com/962737 https://bugzilla.suse.com/962738 https://bugzilla.suse.com/962739

1 0

openSUSE-SU-2016:0489-1: moderate: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 17 Feb '16

17 Feb '16

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0489-1 Rating: moderate References: #966438 Cross-References: CVE-2016-1949 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for MozillaFirefox fixes the following issues: - update to Firefox 44.0.2 * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438) Same-origin-policy violation using Service Workers with plugins * Fix issue which could lead to the removal of stored passwords under certain circumstances (bmo#1242176) * Allows spaces in cookie names (bmo#1244505) * Disable opus/vorbis audio with H.264 (bmo#1245696) * Fix for graphics startup crash (GNU/Linux) (bmo#1222171) * Fix a crash in cache networking (bmo#1244076) * Fix using WebSockets in service worker controlled pages (bmo#1243942) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-223=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-223=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): MozillaFirefox-44.0.2-15.2 MozillaFirefox-branding-upstream-44.0.2-15.2 MozillaFirefox-buildsymbols-44.0.2-15.2 MozillaFirefox-debuginfo-44.0.2-15.2 MozillaFirefox-debugsource-44.0.2-15.2 MozillaFirefox-devel-44.0.2-15.2 MozillaFirefox-translations-common-44.0.2-15.2 MozillaFirefox-translations-other-44.0.2-15.2 - openSUSE 13.2 (i586 x86_64): MozillaFirefox-44.0.2-62.1 MozillaFirefox-branding-upstream-44.0.2-62.1 MozillaFirefox-buildsymbols-44.0.2-62.1 MozillaFirefox-debuginfo-44.0.2-62.1 MozillaFirefox-debugsource-44.0.2-62.1 MozillaFirefox-devel-44.0.2-62.1 MozillaFirefox-translations-common-44.0.2-62.1 MozillaFirefox-translations-other-44.0.2-62.1 References: https://www.suse.com/security/cve/CVE-2016-1949.html https://bugzilla.suse.com/966438

1 0

openSUSE-SU-2016:0488-1: moderate: Security update for Thunderbird
by opensuse-security＠opensuse.org 17 Feb '16

17 Feb '16

openSUSE Security Update: Security update for Thunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0488-1 Rating: moderate References: #963520 Cross-References: CVE-2015-7575 CVE-2016-1930 CVE-2016-1935 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update to 38.6.0 fixes the following issues: * MFSA 2016-01/CVE-2016-1930 Miscellaneous memory safety hazards * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) Buffer overflow in WebGL after out of memory allocation Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-225=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): MozillaThunderbird-38.6.0-70.74.1 MozillaThunderbird-buildsymbols-38.6.0-70.74.1 MozillaThunderbird-debuginfo-38.6.0-70.74.1 MozillaThunderbird-debugsource-38.6.0-70.74.1 MozillaThunderbird-devel-38.6.0-70.74.1 MozillaThunderbird-translations-common-38.6.0-70.74.1 MozillaThunderbird-translations-other-38.6.0-70.74.1 References: https://www.suse.com/security/cve/CVE-2015-7575.html https://www.suse.com/security/cve/CVE-2016-1930.html https://www.suse.com/security/cve/CVE-2016-1935.html https://bugzilla.suse.com/963520

1 0

openSUSE-SU-2016:0486-1: moderate: Security update for libnettle
by opensuse-security＠opensuse.org 17 Feb '16

17 Feb '16

openSUSE Security Update: Security update for libnettle ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0486-1 Rating: moderate References: #964845 #964847 #964849 Cross-References: CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for libnettle fixes the following issues: - CVE-2015-8803: secp256 calculation bug (boo#964845) - CVE-2015-8804: Miscalculations on secp384 curve (boo#964847) - CVE-2015-8805: Fixed miscomputation bugs in secp-256r1 modulo functions. (boo#964849) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-217=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libhogweed2-2.7.1-2.3.1 libhogweed2-debuginfo-2.7.1-2.3.1 libnettle-debugsource-2.7.1-2.3.1 libnettle-devel-2.7.1-2.3.1 libnettle4-2.7.1-2.3.1 libnettle4-debuginfo-2.7.1-2.3.1 nettle-2.7.1-2.3.1 nettle-debuginfo-2.7.1-2.3.1 - openSUSE 13.1 (x86_64): libhogweed2-32bit-2.7.1-2.3.1 libhogweed2-debuginfo-32bit-2.7.1-2.3.1 libnettle-devel-32bit-2.7.1-2.3.1 libnettle4-32bit-2.7.1-2.3.1 libnettle4-debuginfo-32bit-2.7.1-2.3.1 References: https://www.suse.com/security/cve/CVE-2015-8803.html https://www.suse.com/security/cve/CVE-2015-8804.html https://www.suse.com/security/cve/CVE-2015-8805.html https://bugzilla.suse.com/964845 https://bugzilla.suse.com/964847 https://bugzilla.suse.com/964849

1 0

openSUSE-SU-2016:0485-1: moderate: Security update for claws-mail
by opensuse-security＠opensuse.org 17 Feb '16

17 Feb '16

openSUSE Security Update: Security update for claws-mail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0485-1 Rating: moderate References: #959993 Cross-References: CVE-2015-8614 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for claws-mail fixes the following issues: - CVE-2015-8614: additional fixes for buffer overrun issues which allowed remote attackers to cause a crash or have unspecified further impact (boo#959993) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-219=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): claws-mail-3.11.0-3.11.1 claws-mail-debuginfo-3.11.0-3.11.1 claws-mail-debugsource-3.11.0-3.11.1 claws-mail-devel-3.11.0-3.11.1 - openSUSE 13.1 (noarch): claws-mail-lang-3.11.0-3.11.1 References: https://www.suse.com/security/cve/CVE-2015-8614.html https://bugzilla.suse.com/959993

1 0

openSUSE-RU-2016:0484-1: Recommended update for clamav-database
by maintenance＠opensuse.org 17 Feb '16

17 Feb '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0484-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh February 15th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-220=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201602150000-50.1 References:

1 0

openSUSE-SU-2016:0483-1: moderate: Security update for socat
by opensuse-security＠opensuse.org 17 Feb '16

17 Feb '16

openSUSE Security Update: Security update for socat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0483-1 Rating: moderate References: #938913 #964844 Cross-References: CVE-2015-4000 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for socat fixes the following issues: Changes in socat: - update to 1.7.3.1, security fixes: * Socat security advisory 7 and MSVR-1499: "Bad DH p parameter in OpenSSL" (boo#938913 and CVE-2015-4000). * Socat security advisory 8: "Stack overflow in arguments parser" (boo#964844) - Update to version 1.7.3.0 * Too many changes to list; please read the CHANGES file for news Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-218=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): socat-1.7.3.1-2.6.1 socat-debuginfo-1.7.3.1-2.6.1 socat-debugsource-1.7.3.1-2.6.1 References: https://www.suse.com/security/cve/CVE-2015-4000.html https://bugzilla.suse.com/938913 https://bugzilla.suse.com/964844

1 0

openSUSE-RU-2016:0480-1: moderate: Recommended update for kactivities5
by maintenance＠opensuse.org 16 Feb '16

16 Feb '16

openSUSE Recommended Update: Recommended update for kactivities5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0480-1 Rating: moderate References: #952139 #965653 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for kactivities5 fixes the following issues: - Fixed a kactivitymanagerd crash on exit/logout (boo#965653, kde#348194) - Fixed a dolphin and desktop crash when right-clicking on a file and opening the "Activities" submenu (boo#952139, kde#351485) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-216=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kactivities5-5.16.0-8.1 kactivities5-debuginfo-5.16.0-8.1 kactivities5-debugsource-5.16.0-8.1 kactivities5-devel-5.16.0-8.1 kactivities5-imports-5.16.0-8.1 kactivities5-imports-debuginfo-5.16.0-8.1 libKF5Activities5-5.16.0-8.1 libKF5Activities5-debuginfo-5.16.0-8.1 - openSUSE Leap 42.1 (x86_64): kactivities5-devel-32bit-5.16.0-8.1 libKF5Activities5-32bit-5.16.0-8.1 libKF5Activities5-debuginfo-32bit-5.16.0-8.1 - openSUSE Leap 42.1 (noarch): libKF5Activities5-lang-5.16.0-8.1 References: https://bugzilla.suse.com/952139 https://bugzilla.suse.com/965653

1 0

openSUSE-SU-2016:0479-1: moderate: Security update for claws-mail
by opensuse-security＠opensuse.org 16 Feb '16

16 Feb '16

openSUSE Security Update: Security update for claws-mail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0479-1 Rating: moderate References: #959993 Cross-References: CVE-2015-8614 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for claws-mail fixes the following issues: - CVE-2015-8614: additional fixes for buffer overrun issues which allowed remote attackers to cause a crash or have unspecified further impact (boo#959993) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-214=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-214=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): claws-mail-3.12.0-7.1 claws-mail-debuginfo-3.12.0-7.1 claws-mail-debugsource-3.12.0-7.1 claws-mail-devel-3.12.0-7.1 - openSUSE Leap 42.1 (noarch): claws-mail-lang-3.12.0-7.1 - openSUSE 13.2 (i586 x86_64): claws-mail-3.11.0-2.10.1 claws-mail-debuginfo-3.11.0-2.10.1 claws-mail-debugsource-3.11.0-2.10.1 claws-mail-devel-3.11.0-2.10.1 - openSUSE 13.2 (noarch): claws-mail-lang-3.11.0-2.10.1 References: https://www.suse.com/security/cve/CVE-2015-8614.html https://bugzilla.suse.com/959993

1 0

openSUSE-SU-2016:0478-1: moderate: Security update for socat
by opensuse-security＠opensuse.org 16 Feb '16

16 Feb '16

openSUSE Security Update: Security update for socat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0478-1 Rating: moderate References: #938913 #964844 Cross-References: CVE-2015-4000 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for socat fixes the following issues: Changes in socat: - update to 1.7.3.1, security fixes: * Socat security advisory 7 and MSVR-1499: "Bad DH p parameter in OpenSSL" (boo#938913 and CVE-2015-4000). * Socat security advisory 8: "Stack overflow in arguments parser" (boo#964844) - Update to version 1.7.3.0 * Too many changes to list; please read the CHANGES file for news Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-215=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-215=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): socat-1.7.3.1-6.1 socat-debuginfo-1.7.3.1-6.1 socat-debugsource-1.7.3.1-6.1 - openSUSE 13.2 (i586 x86_64): socat-1.7.3.1-2.3.1 socat-debuginfo-1.7.3.1-2.3.1 socat-debugsource-1.7.3.1-2.3.1 References: https://www.suse.com/security/cve/CVE-2015-4000.html https://bugzilla.suse.com/938913 https://bugzilla.suse.com/964844

1 0

openSUSE-SU-2016:0477-1: moderate: Security update for libnettle
by opensuse-security＠opensuse.org 16 Feb '16

16 Feb '16

openSUSE Security Update: Security update for libnettle ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0477-1 Rating: moderate References: #964845 #964847 #964849 Cross-References: CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for libnettle fixes the following issues: - CVE-2015-8803: secp256 calculation bug (boo#964845) - CVE-2015-8804: Miscalculations on secp384 curve (boo#964847) - CVE-2015-8805: Fixed miscomputation bugs in secp-256r1 modulo functions. (boo#964849) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-211=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libhogweed2-2.7.1-6.5.1 libhogweed2-debuginfo-2.7.1-6.5.1 libnettle-debugsource-2.7.1-6.5.1 libnettle-devel-2.7.1-6.5.1 libnettle4-2.7.1-6.5.1 libnettle4-debuginfo-2.7.1-6.5.1 nettle-2.7.1-6.5.1 nettle-debuginfo-2.7.1-6.5.1 - openSUSE 13.2 (x86_64): libhogweed2-32bit-2.7.1-6.5.1 libhogweed2-debuginfo-32bit-2.7.1-6.5.1 libnettle-devel-32bit-2.7.1-6.5.1 libnettle4-32bit-2.7.1-6.5.1 libnettle4-debuginfo-32bit-2.7.1-6.5.1 References: https://www.suse.com/security/cve/CVE-2015-8803.html https://www.suse.com/security/cve/CVE-2015-8804.html https://www.suse.com/security/cve/CVE-2015-8805.html https://bugzilla.suse.com/964845 https://bugzilla.suse.com/964847 https://bugzilla.suse.com/964849

1 0

openSUSE-SU-2016:0476-1: important: Security update for vlc
by opensuse-security＠opensuse.org 16 Feb '16

16 Feb '16

openSUSE Security Update: Security update for vlc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0476-1 Rating: important References: #965227 Cross-References: CVE-2015-5949 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for vlc fixes the following issues: - CVE-2015-5949: Remote attackers could have caused a denial of service (crash) and possibly execute arbitrary code via a crafted 3GP file (boo#965227) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-213=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libvlc5-2.2.1-24.1 libvlc5-debuginfo-2.2.1-24.1 libvlccore8-2.2.1-24.1 libvlccore8-debuginfo-2.2.1-24.1 vlc-2.2.1-24.1 vlc-debuginfo-2.2.1-24.1 vlc-debugsource-2.2.1-24.1 vlc-devel-2.2.1-24.1 vlc-gnome-2.2.1-24.1 vlc-gnome-debuginfo-2.2.1-24.1 vlc-noX-2.2.1-24.1 vlc-noX-debuginfo-2.2.1-24.1 vlc-qt-2.2.1-24.1 vlc-qt-debuginfo-2.2.1-24.1 - openSUSE Leap 42.1 (noarch): vlc-noX-lang-2.2.1-24.1 References: https://www.suse.com/security/cve/CVE-2015-5949.html https://bugzilla.suse.com/965227

1 0

openSUSE-SU-2016:0475-1: moderate: Security update for libnettle
by opensuse-security＠opensuse.org 16 Feb '16

16 Feb '16

openSUSE Security Update: Security update for libnettle ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0475-1 Rating: moderate References: #964845 #964847 #964849 Cross-References: CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for libnettle fixes the following security issues: - CVE-2015-8803: Fixed miscomputation bugs in secp-256r1 modulo functions. (bsc#964845) - CVE-2015-8804: Fixed carry folding bug in x86_64 ecc_384_modp. (bsc#964847) - CVE-2015-8805: Fixed miscomputation bugs in secp-256r1 modulo functions. (bsc#964849) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-212=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libhogweed2-2.7.1-9.1 libhogweed2-debuginfo-2.7.1-9.1 libnettle-debugsource-2.7.1-9.1 libnettle-devel-2.7.1-9.1 libnettle4-2.7.1-9.1 libnettle4-debuginfo-2.7.1-9.1 nettle-2.7.1-9.1 nettle-debuginfo-2.7.1-9.1 - openSUSE Leap 42.1 (x86_64): libhogweed2-32bit-2.7.1-9.1 libhogweed2-debuginfo-32bit-2.7.1-9.1 libnettle-devel-32bit-2.7.1-9.1 libnettle4-32bit-2.7.1-9.1 libnettle4-debuginfo-32bit-2.7.1-9.1 References: https://www.suse.com/security/cve/CVE-2015-8803.html https://www.suse.com/security/cve/CVE-2015-8804.html https://www.suse.com/security/cve/CVE-2015-8805.html https://bugzilla.suse.com/964845 https://bugzilla.suse.com/964847 https://bugzilla.suse.com/964849

1 0

openSUSE-RU-2016:0466-1: moderate: Recommended update for hugin
by maintenance＠opensuse.org 16 Feb '16

16 Feb '16

openSUSE Recommended Update: Recommended update for hugin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0466-1 Rating: moderate References: #952324 #962214 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for hugin fixes the following issues: - fix appdata.xml and desktop file consistency. see boo#952324 and boo#962214 - enable hugin to provide appdata.xml and desktop files to fix installation system problems. hugin didn't provide them due to the internal dependency generator having to be disabled to deal with complex wxWidget requires. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-208=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): hugin-2015.0.0-3.1 hugin-debuginfo-2015.0.0-3.1 hugin-debugsource-2015.0.0-3.1 References: https://bugzilla.suse.com/952324 https://bugzilla.suse.com/962214

1 0

openSUSE-RU-2016:0465-1: moderate: Recommended update for thunar
by maintenance＠opensuse.org 16 Feb '16

16 Feb '16

openSUSE Recommended Update: Recommended update for thunar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0465-1 Rating: moderate References: #952324 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for thunar fixes the following issues: - correct mismatched names between thunar.appdata.xml and thunar.desktop. Renamed Thunar.desktop to thunar.desktop to solve installation system problems see: boo#952324 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-209=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libthunarx-2-0-1.6.10-4.1 libthunarx-2-0-debuginfo-1.6.10-4.1 thunar-1.6.10-4.1 thunar-debuginfo-1.6.10-4.1 thunar-debugsource-1.6.10-4.1 thunar-devel-1.6.10-4.1 - openSUSE Leap 42.1 (noarch): thunar-lang-1.6.10-4.1 References: https://bugzilla.suse.com/952324

1 0

openSUSE-RU-2016:0464-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 16 Feb '16

16 Feb '16

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0464-1 Rating: moderate References: #962295 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for xorg-x11-server fixes the following issues: - Updated: fixed a regression (boo#962295). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-210=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-210=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xorg-x11-server-7.6_1.17.2-21.1 xorg-x11-server-debuginfo-7.6_1.17.2-21.1 xorg-x11-server-debugsource-7.6_1.17.2-21.1 xorg-x11-server-extra-7.6_1.17.2-21.1 xorg-x11-server-extra-debuginfo-7.6_1.17.2-21.1 xorg-x11-server-sdk-7.6_1.17.2-21.1 xorg-x11-server-source-7.6_1.17.2-21.1 - openSUSE 13.2 (i586 x86_64): xorg-x11-server-7.6_1.16.1-37.1 xorg-x11-server-debuginfo-7.6_1.16.1-37.1 xorg-x11-server-debugsource-7.6_1.16.1-37.1 xorg-x11-server-extra-7.6_1.16.1-37.1 xorg-x11-server-extra-debuginfo-7.6_1.16.1-37.1 xorg-x11-server-sdk-7.6_1.16.1-37.1 References: https://bugzilla.suse.com/962295

1 0

openSUSE-RU-2016:0454-1: moderate: Recommended update for ddclient
by maintenance＠opensuse.org 15 Feb '16

15 Feb '16

openSUSE Recommended Update: Recommended update for ddclient ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0454-1 Rating: moderate References: #881520 #903588 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ddclient fixes the following issues: - boo#903588: various file permission issues after distribution upgrade - systemd fixes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-207=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): ddclient-3.8.2-10.3.1 References: https://bugzilla.suse.com/881520 https://bugzilla.suse.com/903588

1 0

openSUSE-RU-2016:0453-1: moderate: Recommended update for wine
by maintenance＠opensuse.org 15 Feb '16

15 Feb '16

openSUSE Recommended Update: Recommended update for wine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0453-1 Rating: moderate References: #960661 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for wine fixes the following issues: - Updated to 1.8.1 release (boo#960661) - Various bug fixes. - Small translation updates. - For detailed description of all fixes and changes please refer to: https://www.winehq.org/announce/1.8.1 - Updated winetricks Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-205=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-205=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): wine-1.8.1-6.1 wine-debuginfo-1.8.1-6.1 wine-debugsource-1.8.1-6.1 wine-devel-1.8.1-6.1 wine-devel-debuginfo-1.8.1-6.1 - openSUSE Leap 42.1 (x86_64): wine-32bit-1.8.1-6.1 wine-debuginfo-32bit-1.8.1-6.1 wine-devel-32bit-1.8.1-6.1 wine-devel-debuginfo-32bit-1.8.1-6.1 - openSUSE 13.2 (i586 x86_64): wine-1.8.1-6.1 wine-debuginfo-1.8.1-6.1 wine-debugsource-1.8.1-6.1 wine-devel-1.8.1-6.1 wine-devel-debuginfo-1.8.1-6.1 - openSUSE 13.2 (x86_64): wine-32bit-1.8.1-6.1 wine-debuginfo-32bit-1.8.1-6.1 wine-devel-32bit-1.8.1-6.1 wine-devel-debuginfo-32bit-1.8.1-6.1 References: https://bugzilla.suse.com/960661

1 0

openSUSE-RU-2016:0452-1: moderate: Recommended update for sk1
by maintenance＠opensuse.org 15 Feb '16

15 Feb '16

openSUSE Recommended Update: Recommended update for sk1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0452-1 Rating: moderate References: #960401 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sk1 fixes a dependency issue: - boo#960401: SK1 would not start in some installations due to missing requirement on python-imaging-tk python-Pillow-tk) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-206=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-206=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): sk1-0.9.1pre_rev730-30.1 sk1-debuginfo-0.9.1pre_rev730-30.1 sk1-debugsource-0.9.1pre_rev730-30.1 - openSUSE 13.2 (i586 x86_64): sk1-0.9.1pre_rev730-27.3.1 sk1-debuginfo-0.9.1pre_rev730-27.3.1 sk1-debugsource-0.9.1pre_rev730-27.3.1 References: https://bugzilla.suse.com/960401

1 0

openSUSE-RU-2016:0451-1: moderate: Recommended update for ddclient
by maintenance＠opensuse.org 15 Feb '16

15 Feb '16

openSUSE Recommended Update: Recommended update for ddclient ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0451-1 Rating: moderate References: #903588 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ddclient fixes the following issues: - boo#903588: various file permission issues after distribution upgrade - systemd fixes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch 4641=1 - openSUSE 13.2: zypper in -t patch 4641=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): ddclient-3.8.2-9.1 - openSUSE 13.2 (noarch): ddclient-3.8.2-4.5.1 References: https://bugzilla.suse.com/903588

1 0

openSUSE-RU-2016:0450-1: Recommended update for timezone
by maintenance＠opensuse.org 13 Feb '16

13 Feb '16

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0450-1 Rating: low References: #963921 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides the latest timezone information (2016a) for your system, including the following changes: - America/Cayman will not observe daylight saving this year. - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00. - Asia/Tehran now has DST predictions for the year 2038 and later. - America/Metlakatla switched from PST all year to AKST/AKDT on 2015-11-01 at 02:00. - America/Santa_Isabel has been removed, and replaced with a backward compatibility link to America/Tijuana. - Asia/Karachi's two transition times in 2002 were off by a minute. This release also includes changes affecting past time stamps, documentation and some minor code fixes. For a comprehensive list, refer to the release announcement from ICANN: http://mm.icann.org/pipermail/tz/2016-January/023106.html This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-204=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): timezone-2016a-0.5.1 timezone-debuginfo-2016a-0.5.1 timezone-debugsource-2016a-0.5.1 - openSUSE Leap 42.1 (noarch): timezone-java-2016a-0.5.1 References: https://bugzilla.suse.com/963921

1 0

openSUSE-SU-2016:0442-1: Security update for openssl
by opensuse-security＠opensuse.org 12 Feb '16

12 Feb '16

openSUSE Security Update: Security update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0442-1 Rating: low References: #963415 Cross-References: CVE-2015-3197 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openssl fixes the following issues: - CVE-2015-3197: A malicious client can negotiate SSLv2 ciphers that have been disabled on the server and complete SSLv2 handshakes even if all SSLv2 ciphers have been disabled, provided that the SSLv2 protocol was not also disabled via SSL_OP_NO_SSLv2. (boo#963415) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-203=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libopenssl-devel-1.0.1k-11.78.1 libopenssl1_0_0-1.0.1k-11.78.1 libopenssl1_0_0-debuginfo-1.0.1k-11.78.1 openssl-1.0.1k-11.78.1 openssl-debuginfo-1.0.1k-11.78.1 openssl-debugsource-1.0.1k-11.78.1 - openSUSE 13.1 (x86_64): libopenssl-devel-32bit-1.0.1k-11.78.1 libopenssl1_0_0-32bit-1.0.1k-11.78.1 libopenssl1_0_0-debuginfo-32bit-1.0.1k-11.78.1 - openSUSE 13.1 (noarch): openssl-doc-1.0.1k-11.78.1 References: https://www.suse.com/security/cve/CVE-2015-3197.html https://bugzilla.suse.com/963415

1 0

openSUSE-SU-2016:0441-1: moderate: Security update for cacti-spine
by opensuse-security＠opensuse.org 12 Feb '16

12 Feb '16

openSUSE Security Update: Security update for cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0441-1 Rating: moderate References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: cacti-spine was updated to match the cacti version, fixing a number of upstream bugs. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-202=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): cacti-spine-0.8.8f-2.3.1 cacti-spine-debuginfo-0.8.8f-2.3.1 cacti-spine-debugsource-0.8.8f-2.3.1 References:

1 0

openSUSE-SU-2016:0440-1: moderate: Security update for cacti
by opensuse-security＠opensuse.org 12 Feb '16

12 Feb '16

openSUSE Security Update: Security update for cacti ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0440-1 Rating: moderate References: #958863 #958977 #960678 #965864 #965930 Cross-References: CVE-2015-8369 CVE-2015-8377 CVE-2015-8604 CVE-2016-2313 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves four vulnerabilities and has one errata is now available. Description: cacti was updated to fix the following vulnerabilities: * CVE-2015-8369: SQL injection in graph.php (boo#958863) * CVE-2015-8604: SQL injection in graphs_new.php (boo#960678) * CVE-2015-8377: SQL injection vulnerability in the host_new_graphs_save function in graphs_new.php (boo#958977) * CVE-2016-2313: Authentication using web authentication as a user not in the cacti database allows complete access (boo#965930) The following non-security bugs were fixed: boo#965864: Poller Script Parser was broken (boo#965864) cacti-spine was updated to match the cacti version, fixing a number of upstream bugs. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-201=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): cacti-0.8.8f-17.1 References: https://www.suse.com/security/cve/CVE-2015-8369.html https://www.suse.com/security/cve/CVE-2015-8377.html https://www.suse.com/security/cve/CVE-2015-8604.html https://www.suse.com/security/cve/CVE-2016-2313.html https://bugzilla.suse.com/958863 https://bugzilla.suse.com/958977 https://bugzilla.suse.com/960678 https://bugzilla.suse.com/965864 https://bugzilla.suse.com/965930

1 0

openSUSE-RU-2016:0439-1: moderate: Recommended update for LibreOffice
by maintenance＠opensuse.org 12 Feb '16

12 Feb '16

openSUSE Recommended Update: Recommended update for LibreOffice ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0439-1 Rating: moderate References: #679938 #889755 #939996 #945047 #951579 #954345 #959716 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update to LibreOffice 5.0.4.2 fixes the following issues: - Calc: Problem opening certain ODS files - Remove RPATH on some 3rd party bundled libs. (bsc#951579) - Impress: Upon slide copy/paste the master page was duplicated. (bsc#945047) - Writer: Certain documents with graphics inserted via "Insert - Image - Insert as Link" could hang writer. bsc#954345) - When importing DOCX files, some indentation elements were not imported. (bsc#939996) - When importing PPTX files, certain chart axis number format was incorrect. (bsc#889755) - When saving files to doc format, the chapter name in the header does did not change with chapters. (bsc#679938) This update was imported from SUSE:SLE-12:Update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-200=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): hyphen-2.8.8-3.2 hyphen-debugsource-2.8.8-3.2 hyphen-devel-2.8.8-3.2 libabw-0_1-1-0.1.1-3.8 libabw-0_1-1-debuginfo-0.1.1-3.8 libabw-debugsource-0.1.1-3.8 libabw-devel-0.1.1-3.8 libabw-tools-0.1.1-3.8 libabw-tools-debuginfo-0.1.1-3.8 libcdr-0_1-1-0.1.1-3.8 libcdr-0_1-1-debuginfo-0.1.1-3.8 libcdr-debugsource-0.1.1-3.8 libcdr-devel-0.1.1-3.8 libcdr-tools-0.1.1-3.8 libcdr-tools-debuginfo-0.1.1-3.8 libe-book-0_1-1-0.1.2-3.8 libe-book-0_1-1-debuginfo-0.1.2-3.8 libe-book-debugsource-0.1.2-3.8 libe-book-devel-0.1.2-3.8 libe-book-tools-0.1.2-3.8 libe-book-tools-debuginfo-0.1.2-3.8 libhyphen0-2.8.8-3.2 libhyphen0-debuginfo-2.8.8-3.2 libmspub-0_1-1-0.1.2-3.2 libmspub-0_1-1-debuginfo-0.1.2-3.2 libmspub-debugsource-0.1.2-3.2 libmspub-devel-0.1.2-3.2 libmspub-tools-0.1.2-3.2 libmspub-tools-debuginfo-0.1.2-3.2 libreoffice-5.0.4.2-4.1 libreoffice-base-5.0.4.2-4.1 libreoffice-base-debuginfo-5.0.4.2-4.1 libreoffice-base-drivers-mysql-5.0.4.2-4.1 libreoffice-base-drivers-mysql-debuginfo-5.0.4.2-4.1 libreoffice-base-drivers-postgresql-5.0.4.2-4.1 libreoffice-base-drivers-postgresql-debuginfo-5.0.4.2-4.1 libreoffice-calc-5.0.4.2-4.1 libreoffice-calc-debuginfo-5.0.4.2-4.1 libreoffice-calc-extensions-5.0.4.2-4.1 libreoffice-debuginfo-5.0.4.2-4.1 libreoffice-debugsource-5.0.4.2-4.1 libreoffice-draw-5.0.4.2-4.1 libreoffice-draw-debuginfo-5.0.4.2-4.1 libreoffice-filters-optional-5.0.4.2-4.1 libreoffice-gnome-5.0.4.2-4.1 libreoffice-gnome-debuginfo-5.0.4.2-4.1 libreoffice-gtk3-5.0.4.2-4.1 libreoffice-gtk3-debuginfo-5.0.4.2-4.1 libreoffice-impress-5.0.4.2-4.1 libreoffice-impress-debuginfo-5.0.4.2-4.1 libreoffice-kde4-5.0.4.2-4.1 libreoffice-kde4-debuginfo-5.0.4.2-4.1 libreoffice-mailmerge-5.0.4.2-4.1 libreoffice-math-5.0.4.2-4.1 libreoffice-math-debuginfo-5.0.4.2-4.1 libreoffice-officebean-5.0.4.2-4.1 libreoffice-officebean-debuginfo-5.0.4.2-4.1 libreoffice-pyuno-5.0.4.2-4.1 libreoffice-pyuno-debuginfo-5.0.4.2-4.1 libreoffice-sdk-5.0.4.2-4.1 libreoffice-sdk-debuginfo-5.0.4.2-4.1 libreoffice-sdk-doc-5.0.4.2-4.1 libreoffice-writer-5.0.4.2-4.1 libreoffice-writer-debuginfo-5.0.4.2-4.1 libreoffice-writer-extensions-5.0.4.2-4.1 librevenge-0_0-0-0.0.2-3.3 librevenge-0_0-0-debuginfo-0.0.2-3.3 librevenge-debugsource-0.0.2-3.3 librevenge-devel-0.0.2-3.3 librevenge-generators-0_0-0-0.0.2-3.3 librevenge-generators-0_0-0-debuginfo-0.0.2-3.3 librevenge-stream-0_0-0-0.0.2-3.3 librevenge-stream-0_0-0-debuginfo-0.0.2-3.3 - openSUSE Leap 42.1 (noarch): apache-commons-logging-1.1.3-10.2 flute-1.3.0-6.2 flute-javadoc-1.3.0-6.2 libabw-devel-doc-0.1.1-3.8 libbase-1.1.3-6.21 libbase-javadoc-1.1.3-6.21 libcdr-devel-doc-0.1.1-3.8 libe-book-devel-doc-0.1.2-3.8 libfonts-1.1.3-6.31 libfonts-javadoc-1.1.3-6.31 libformula-1.1.3-6.21 libformula-javadoc-1.1.3-6.21 liblayout-0.2.10-6.2 liblayout-javadoc-0.2.10-6.2 libloader-1.1.3-6.21 libloader-javadoc-1.1.3-6.21 libmspub-devel-doc-0.1.2-3.2 libreoffice-branding-upstream-5.0.4.2-4.1 libreoffice-icon-theme-breeze-5.0.4.2-4.1 libreoffice-icon-theme-galaxy-5.0.4.2-4.1 libreoffice-icon-theme-hicontrast-5.0.4.2-4.1 libreoffice-icon-theme-oxygen-5.0.4.2-4.1 libreoffice-icon-theme-sifr-5.0.4.2-4.1 libreoffice-icon-theme-tango-5.0.4.2-4.1 libreoffice-l10n-af-5.0.4.2-4.1 libreoffice-l10n-ar-5.0.4.2-4.1 libreoffice-l10n-as-5.0.4.2-4.1 libreoffice-l10n-bg-5.0.4.2-4.1 libreoffice-l10n-bn-5.0.4.2-4.1 libreoffice-l10n-br-5.0.4.2-4.1 libreoffice-l10n-ca-5.0.4.2-4.1 libreoffice-l10n-cs-5.0.4.2-4.1 libreoffice-l10n-cy-5.0.4.2-4.1 libreoffice-l10n-da-5.0.4.2-4.1 libreoffice-l10n-de-5.0.4.2-4.1 libreoffice-l10n-dz-5.0.4.2-4.1 libreoffice-l10n-el-5.0.4.2-4.1 libreoffice-l10n-en-5.0.4.2-4.1 libreoffice-l10n-es-5.0.4.2-4.1 libreoffice-l10n-et-5.0.4.2-4.1 libreoffice-l10n-eu-5.0.4.2-4.1 libreoffice-l10n-fa-5.0.4.2-4.1 libreoffice-l10n-fi-5.0.4.2-4.1 libreoffice-l10n-fr-5.0.4.2-4.1 libreoffice-l10n-ga-5.0.4.2-4.1 libreoffice-l10n-gl-5.0.4.2-4.1 libreoffice-l10n-gu-5.0.4.2-4.1 libreoffice-l10n-he-5.0.4.2-4.1 libreoffice-l10n-hi-5.0.4.2-4.1 libreoffice-l10n-hr-5.0.4.2-4.1 libreoffice-l10n-hu-5.0.4.2-4.1 libreoffice-l10n-it-5.0.4.2-4.1 libreoffice-l10n-ja-5.0.4.2-4.1 libreoffice-l10n-kk-5.0.4.2-4.1 libreoffice-l10n-kn-5.0.4.2-4.1 libreoffice-l10n-ko-5.0.4.2-4.1 libreoffice-l10n-lt-5.0.4.2-4.1 libreoffice-l10n-lv-5.0.4.2-4.1 libreoffice-l10n-mai-5.0.4.2-4.1 libreoffice-l10n-ml-5.0.4.2-4.1 libreoffice-l10n-mr-5.0.4.2-4.1 libreoffice-l10n-nb-5.0.4.2-4.1 libreoffice-l10n-nl-5.0.4.2-4.1 libreoffice-l10n-nn-5.0.4.2-4.1 libreoffice-l10n-nr-5.0.4.2-4.1 libreoffice-l10n-nso-5.0.4.2-4.1 libreoffice-l10n-or-5.0.4.2-4.1 libreoffice-l10n-pa-5.0.4.2-4.1 libreoffice-l10n-pl-5.0.4.2-4.1 libreoffice-l10n-pt-BR-5.0.4.2-4.1 libreoffice-l10n-pt-PT-5.0.4.2-4.1 libreoffice-l10n-ro-5.0.4.2-4.1 libreoffice-l10n-ru-5.0.4.2-4.1 libreoffice-l10n-si-5.0.4.2-4.1 libreoffice-l10n-sk-5.0.4.2-4.1 libreoffice-l10n-sl-5.0.4.2-4.1 libreoffice-l10n-sr-5.0.4.2-4.1 libreoffice-l10n-ss-5.0.4.2-4.1 libreoffice-l10n-st-5.0.4.2-4.1 libreoffice-l10n-sv-5.0.4.2-4.1 libreoffice-l10n-ta-5.0.4.2-4.1 libreoffice-l10n-te-5.0.4.2-4.1 libreoffice-l10n-th-5.0.4.2-4.1 libreoffice-l10n-tn-5.0.4.2-4.1 libreoffice-l10n-tr-5.0.4.2-4.1 libreoffice-l10n-ts-5.0.4.2-4.1 libreoffice-l10n-uk-5.0.4.2-4.1 libreoffice-l10n-ve-5.0.4.2-4.1 libreoffice-l10n-xh-5.0.4.2-4.1 libreoffice-l10n-zh-Hans-5.0.4.2-4.1 libreoffice-l10n-zh-Hant-5.0.4.2-4.1 libreoffice-l10n-zu-5.0.4.2-4.1 librepository-1.1.3-6.21 librepository-javadoc-1.1.3-6.21 librevenge-doc-0.0.2-3.3 libserializer-1.1.2-6.2 libserializer-javadoc-1.1.2-6.2 pentaho-libxml-1.1.3-6.19 pentaho-libxml-javadoc-1.1.3-6.19 pentaho-reporting-flow-engine-0.9.4-6.2 pentaho-reporting-flow-engine-javadoc-0.9.4-6.2 sac-1.3-6.2 sac-javadoc-1.3-6.2 References: https://bugzilla.suse.com/679938 https://bugzilla.suse.com/889755 https://bugzilla.suse.com/939996 https://bugzilla.suse.com/945047 https://bugzilla.suse.com/951579 https://bugzilla.suse.com/954345 https://bugzilla.suse.com/959716

1 0

openSUSE-SU-2016:0438-1: moderate: Security update for cacti
by opensuse-security＠opensuse.org 12 Feb '16

12 Feb '16

openSUSE Security Update: Security update for cacti ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0438-1 Rating: moderate References: #958863 #958977 #960678 #965930 Cross-References: CVE-2015-8369 CVE-2015-8377 CVE-2015-8604 CVE-2016-2313 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: cacti was updated to fix the following vulnerabilities: - CVE-2015-8369: SQL injection in graph.php (boo#958863) - CVE-2015-8604: SQL injection in graphs_new.php (boo#960678) - CVE-2015-8377: SQL injection vulnerability in the host_new_graphs_save function in graphs_new.php (boo#958977) - CVE-2016-2313: Authentication using web authentication as a user not in the cacti database allows complete access (boo#965930) cacti-spine was updated to match the cacti version, fixing a number of upstream bugs. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-198=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): cacti-spine-0.8.8f-5.1 cacti-spine-debuginfo-0.8.8f-5.1 cacti-spine-debugsource-0.8.8f-5.1 - openSUSE Leap 42.1 (noarch): cacti-0.8.8f-8.1 References: https://www.suse.com/security/cve/CVE-2015-8369.html https://www.suse.com/security/cve/CVE-2015-8377.html https://www.suse.com/security/cve/CVE-2015-8604.html https://www.suse.com/security/cve/CVE-2016-2313.html https://bugzilla.suse.com/958863 https://bugzilla.suse.com/958977 https://bugzilla.suse.com/960678 https://bugzilla.suse.com/965930

1 0

openSUSE-SU-2016:0437-1: moderate: Security update for cacti
by opensuse-security＠opensuse.org 12 Feb '16

12 Feb '16

openSUSE Security Update: Security update for cacti ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0437-1 Rating: moderate References: #958863 #958977 #960678 #965864 #965930 Cross-References: CVE-2015-8369 CVE-2015-8377 CVE-2015-8604 CVE-2016-2313 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves four vulnerabilities and has one errata is now available. Description: cacti was updated to fix the following vulnerabilities: - CVE-2015-8369: SQL injection in graph.php (boo#958863) - CVE-2015-8604: SQL injection in graphs_new.php (boo#960678) - CVE-2015-8377: SQL injection vulnerability in the host_new_graphs_save function in graphs_new.php (boo#958977) - CVE-2016-2313: Authentication using web authentication as a user not in the cacti database allows complete access (boo#965930) The following non-security bugs were fixed: - boo#965864: Poller Script Parser was broken cacti-spine was updated to match the cacti version, fixing a number of upstream bugs. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-199=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): cacti-spine-0.8.8f-4.3.1 cacti-spine-debuginfo-0.8.8f-4.3.1 cacti-spine-debugsource-0.8.8f-4.3.1 - openSUSE 13.2 (noarch): cacti-0.8.8f-4.13.1 References: https://www.suse.com/security/cve/CVE-2015-8369.html https://www.suse.com/security/cve/CVE-2015-8377.html https://www.suse.com/security/cve/CVE-2015-8604.html https://www.suse.com/security/cve/CVE-2016-2313.html https://bugzilla.suse.com/958863 https://bugzilla.suse.com/958977 https://bugzilla.suse.com/960678 https://bugzilla.suse.com/965864 https://bugzilla.suse.com/965930

1 0

openSUSE-RU-2016:0427-1: moderate: Recommended update for konsole
by maintenance＠opensuse.org 11 Feb '16

11 Feb '16

openSUSE Recommended Update: Recommended update for konsole ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0427-1 Rating: moderate References: #962239 #964165 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for konsole fixes the following issues: - Resolve no characters are shown on Chinese and Japanese environment (boo#962239) + For some monospaced fonts with ligatures or the ambiguous-width problem, QFontInfo::fixedPitch does not return true. When such font is selected for "Monospace", Konsole did not print anything. - Allow profile's terminal size to work again (boo#964165, kde#345403) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-191=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): konsole-15.12.1-14.1 konsole-debuginfo-15.12.1-14.1 konsole-debugsource-15.12.1-14.1 konsole-part-15.12.1-14.1 konsole-part-debuginfo-15.12.1-14.1 References: https://bugzilla.suse.com/962239 https://bugzilla.suse.com/964165

1 0

openSUSE-RU-2016:0426-1: Recommended update for ibus-pinyin
by maintenance＠opensuse.org 11 Feb '16

11 Feb '16

openSUSE Recommended Update: Recommended update for ibus-pinyin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0426-1 Rating: low References: #955325 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ibus-pinyin fixes the following issues: - Set ibus-pinyin engine to full pinyin by default when dconf data does not exist. (boo#955325) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-190=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ibus-pinyin-1.5.0-11.1 ibus-pinyin-debuginfo-1.5.0-11.1 ibus-pinyin-debugsource-1.5.0-11.1 References: https://bugzilla.suse.com/955325

1 0

openSUSE-RU-2016:0425-1: Recommended update for permissions
by maintenance＠opensuse.org 11 Feb '16

11 Feb '16

openSUSE Recommended Update: Recommended update for permissions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0425-1 Rating: low References: #950557 #961363 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for permissions fixes the following issues: - Change pinger owner to squid:root instead of root:squid, as there is no squid group. (boo#961363) - Add missing "/" to the squid specific directories. (boo#950557) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-192=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): permissions-2015.09.28.1626-8.1 permissions-debuginfo-2015.09.28.1626-8.1 permissions-debugsource-2015.09.28.1626-8.1 References: https://bugzilla.suse.com/950557 https://bugzilla.suse.com/961363

1 0

openSUSE-RU-2016:0424-1: moderate: Recommended update for tigervnc
by maintenance＠opensuse.org 11 Feb '16

11 Feb '16

openSUSE Recommended Update: Recommended update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0424-1 Rating: moderate References: #952057 #963417 #964352 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for tigervnc fixes the following issues: - Fix zlib stream reset in tight encoding. (boo#963417) - Bind to all addresses on given interface. (boo#952057) - Add dependency on xkbcomp. (boo#964352) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-195=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): tigervnc-1.4.1-6.48.1 tigervnc-debuginfo-1.4.1-6.48.1 tigervnc-debugsource-1.4.1-6.48.1 xorg-x11-Xvnc-1.4.1-6.48.1 xorg-x11-Xvnc-debuginfo-1.4.1-6.48.1 References: https://bugzilla.suse.com/952057 https://bugzilla.suse.com/963417 https://bugzilla.suse.com/964352

1 0

openSUSE-RU-2016:0423-1: moderate: Recommended update for puppet
by maintenance＠opensuse.org 11 Feb '16

11 Feb '16

openSUSE Recommended Update: Recommended update for puppet ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0423-1 Rating: moderate References: #951553 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for puppet fixes the following issues: - Fix a problem with passing explicit undef res parameter (boo#951553) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-187=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): puppet-3.7.1-6.1 puppet-server-3.7.1-6.1 - openSUSE 13.2 (noarch): puppet-vim-3.7.1-6.1 References: https://bugzilla.suse.com/951553

1 0

openSUSE-RU-2016:0422-1: moderate: Recommended update for python-qt5
by maintenance＠opensuse.org 11 Feb '16

11 Feb '16

openSUSE Recommended Update: Recommended update for python-qt5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0422-1 Rating: moderate References: #964256 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-qt5 fixes the following issues: - BuildRequire libqt5-connectivity-devel to gain support for QtBluetooth (boo#964256) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-194=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): python-qt5-5.4-5.1 python-qt5-debuginfo-5.4-5.1 python-qt5-debugsource-5.4-5.1 python-qt5-devel-5.4-5.1 python-qt5-devel-debuginfo-5.4-5.1 python-qt5-utils-5.4-5.1 References: https://bugzilla.suse.com/964256

1 0

openSUSE-RU-2016:0421-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 11 Feb '16

11 Feb '16

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0421-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for virtualbox provides version 4.3.36 with the following fixes and improvements: - GUI: Improved handling of text selection mouse pointer - GUI: Properly limit the number of VCPUs to the number of physical cores on Mac OS X - 3D: Fixed state handling under certain conditions - Host services: Fixed a crash during VM shutdown under rare conditions - ExtPack: Black-list Extension Packs older than 4.3.30 due to incompatible changes not being properly handled in the past - Linux hosts: .desktop file compatibility issue - Linux hosts / guests: Fixes for RHEL 7.2 - Linux/Mac OS X hosts: Fixed a VM hang during startup under certain circumstances - Linux Additions: Prevent the compiler from doing dead-code elemination on vital code in guest / host communication - Linux Additions: Fixes for Linux 4.5 - X11 Additions: Added basic support for X.Org Server 1.18 (3D requires additional fixes) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-188=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): python-virtualbox-4.3.36-40.1 python-virtualbox-debuginfo-4.3.36-40.1 virtualbox-4.3.36-40.1 virtualbox-debuginfo-4.3.36-40.1 virtualbox-debugsource-4.3.36-40.1 virtualbox-devel-4.3.36-40.1 virtualbox-guest-kmp-default-4.3.36_k3.16.7_32-40.1 virtualbox-guest-kmp-default-debuginfo-4.3.36_k3.16.7_32-40.1 virtualbox-guest-kmp-desktop-4.3.36_k3.16.7_32-40.1 virtualbox-guest-kmp-desktop-debuginfo-4.3.36_k3.16.7_32-40.1 virtualbox-guest-tools-4.3.36-40.1 virtualbox-guest-tools-debuginfo-4.3.36-40.1 virtualbox-guest-x11-4.3.36-40.1 virtualbox-guest-x11-debuginfo-4.3.36-40.1 virtualbox-host-kmp-default-4.3.36_k3.16.7_32-40.1 virtualbox-host-kmp-default-debuginfo-4.3.36_k3.16.7_32-40.1 virtualbox-host-kmp-desktop-4.3.36_k3.16.7_32-40.1 virtualbox-host-kmp-desktop-debuginfo-4.3.36_k3.16.7_32-40.1 virtualbox-qt-4.3.36-40.1 virtualbox-qt-debuginfo-4.3.36-40.1 virtualbox-websrv-4.3.36-40.1 virtualbox-websrv-debuginfo-4.3.36-40.1 - openSUSE 13.2 (noarch): virtualbox-guest-desktop-icons-4.3.36-40.1 virtualbox-host-source-4.3.36-40.1 - openSUSE 13.2 (i586): virtualbox-guest-kmp-pae-4.3.36_k3.16.7_32-40.1 virtualbox-guest-kmp-pae-debuginfo-4.3.36_k3.16.7_32-40.1 virtualbox-host-kmp-pae-4.3.36_k3.16.7_32-40.1 virtualbox-host-kmp-pae-debuginfo-4.3.36_k3.16.7_32-40.1 References:

1 0