February 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:0420-1: moderate: Recommended update for NetworkManager
by maintenance＠opensuse.org 11 Feb '16

11 Feb '16

openSUSE Recommended Update: Recommended update for NetworkManager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0420-1 Rating: moderate References: #954485 #958070 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for NetworkManager fixes the following issues: - vpn-connection set the MTU for the VPN IP interface (boo#954485, boo#958070, bgo#754781). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-193=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): NetworkManager-1.0.6-4.1 NetworkManager-debuginfo-1.0.6-4.1 NetworkManager-debugsource-1.0.6-4.1 NetworkManager-devel-1.0.6-4.1 libnm-glib-vpn1-1.0.6-4.1 libnm-glib-vpn1-debuginfo-1.0.6-4.1 libnm-glib4-1.0.6-4.1 libnm-glib4-debuginfo-1.0.6-4.1 libnm-util2-1.0.6-4.1 libnm-util2-debuginfo-1.0.6-4.1 libnm0-1.0.6-4.1 libnm0-debuginfo-1.0.6-4.1 typelib-1_0-NM-1_0-1.0.6-4.1 typelib-1_0-NMClient-1_0-1.0.6-4.1 typelib-1_0-NetworkManager-1_0-1.0.6-4.1 - openSUSE Leap 42.1 (x86_64): NetworkManager-devel-32bit-1.0.6-4.1 libnm-glib-vpn1-32bit-1.0.6-4.1 libnm-glib-vpn1-debuginfo-32bit-1.0.6-4.1 libnm-glib4-32bit-1.0.6-4.1 libnm-glib4-debuginfo-32bit-1.0.6-4.1 libnm-util2-32bit-1.0.6-4.1 libnm-util2-debuginfo-32bit-1.0.6-4.1 - openSUSE Leap 42.1 (noarch): NetworkManager-lang-1.0.6-4.1 References: https://bugzilla.suse.com/954485 https://bugzilla.suse.com/958070

1 0

openSUSE-OU-2016:0418-1: Initial release of neko and haxe
by maintenance＠opensuse.org 11 Feb '16

11 Feb '16

openSUSE Optional Update: Initial release of neko and haxe ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:0418-1 Rating: low References: #964750 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update provides the initial version of Neko and Haxe. Neko VM is a virtual machine and dynamic language that is both lightweight and efficient. Haxe is an open-source high-level multiplatform programming language and compiler that can produce applications and source code for many different platforms from a single code-base. The Haxe compiler can compile Haxe source code to Adobe Flash SWF files, ActionScript 3, JavaScript, C++, PHP, C#, Java, Python, and Neko VM binary files. The following packages have been added to openSUSE Leap 42.1: neko, haxe Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-197=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): haxe-3.2.1-2.1 haxe-debuginfo-3.2.1-2.1 haxe-debugsource-3.2.1-2.1 libneko1-2.0.0-2.1 libneko1-debuginfo-2.0.0-2.1 neko-2.0.0-2.1 neko-debuginfo-2.0.0-2.1 neko-debugsource-2.0.0-2.1 neko-devel-2.0.0-2.1 neko-mysql-2.0.0-2.1 neko-mysql-debuginfo-2.0.0-2.1 References: https://bugzilla.suse.com/964750

1 0

openSUSE-RU-2016:0417-1: moderate: Recommended update for targetcli, python-rtslib
by maintenance＠opensuse.org 11 Feb '16

11 Feb '16

openSUSE Recommended Update: Recommended update for targetcli, python-rtslib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0417-1 Rating: moderate References: #910538 #948529 #954234 #956509 #958274 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for targetcli and python-rtslib provides the following fixes: targetcli: - Remove trailing white spaces before parsing "exit" command. (boo#948529) - Update systemd service start to load current configuration, if any, using load_targetcli_config. (boo#954234) - Fix silent failure on backstore file creation when file size is not specified. (boo#910538) python-rtslib: - Add qla2xxx_wwn WWN type, allowing systems with existing targets to be validated by rtslib and for the configuration to be saved. (boo#954234) - Fix detection of 64-bit architectures. (boo#956509) - If the system hostname contains underscores, replace them by dashes before using it to create target names. (boo#958274) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-189=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): targetcli-2.1-4.1 - openSUSE Leap 42.1 (noarch): python-rtslib-2.2-9.1 References: https://bugzilla.suse.com/910538 https://bugzilla.suse.com/948529 https://bugzilla.suse.com/954234 https://bugzilla.suse.com/956509 https://bugzilla.suse.com/958274

1 0

openSUSE-RU-2016:0416-1: moderate: Recommended update for tigervnc
by maintenance＠opensuse.org 11 Feb '16

11 Feb '16

openSUSE Recommended Update: Recommended update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0416-1 Rating: moderate References: #963417 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tigervnc fixes the following issues: - Fix zlib stream reset in tight encoding. (boo#963417) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-196=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): tigervnc-1.5.0-18.1 tigervnc-debuginfo-1.5.0-18.1 tigervnc-debugsource-1.5.0-18.1 xorg-x11-Xvnc-1.5.0-18.1 xorg-x11-Xvnc-debuginfo-1.5.0-18.1 References: https://bugzilla.suse.com/963417

1 0

openSUSE-SU-2016:0415-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 11 Feb '16

11 Feb '16

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0415-1 Rating: important References: #965901 Cross-References: CVE-2016-0964 CVE-2016-0965 CVE-2016-0966 CVE-2016-0967 CVE-2016-0968 CVE-2016-0969 CVE-2016-0970 CVE-2016-0971 CVE-2016-0972 CVE-2016-0973 CVE-2016-0974 CVE-2016-0975 CVE-2016-0976 CVE-2016-0977 CVE-2016-0978 CVE-2016-0979 CVE-2016-0980 CVE-2016-0981 CVE-2016-0982 CVE-2016-0983 CVE-2016-0984 CVE-2016-0985 Affected Products: openSUSE 13.1 NonFree ______________________________________________________________________________ An update that fixes 22 vulnerabilities is now available. Description: This update for flash-player fixes the following issues: - Security update to 11.2.202.569 (bsc#965901): * APSB16-04, CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0971, CVE-2016-0972, CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, CVE-2016-0981, CVE-2016-0982, CVE-2016-0983, CVE-2016-0984, CVE-2016-0985 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1 NonFree: zypper in -t patch 2016-186=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 NonFree (i586 x86_64): flash-player-11.2.202.569-153.1 flash-player-gnome-11.2.202.569-153.1 flash-player-kde4-11.2.202.569-153.1 References: https://www.suse.com/security/cve/CVE-2016-0964.html https://www.suse.com/security/cve/CVE-2016-0965.html https://www.suse.com/security/cve/CVE-2016-0966.html https://www.suse.com/security/cve/CVE-2016-0967.html https://www.suse.com/security/cve/CVE-2016-0968.html https://www.suse.com/security/cve/CVE-2016-0969.html https://www.suse.com/security/cve/CVE-2016-0970.html https://www.suse.com/security/cve/CVE-2016-0971.html https://www.suse.com/security/cve/CVE-2016-0972.html https://www.suse.com/security/cve/CVE-2016-0973.html https://www.suse.com/security/cve/CVE-2016-0974.html https://www.suse.com/security/cve/CVE-2016-0975.html https://www.suse.com/security/cve/CVE-2016-0976.html https://www.suse.com/security/cve/CVE-2016-0977.html https://www.suse.com/security/cve/CVE-2016-0978.html https://www.suse.com/security/cve/CVE-2016-0979.html https://www.suse.com/security/cve/CVE-2016-0980.html https://www.suse.com/security/cve/CVE-2016-0981.html https://www.suse.com/security/cve/CVE-2016-0982.html https://www.suse.com/security/cve/CVE-2016-0983.html https://www.suse.com/security/cve/CVE-2016-0984.html https://www.suse.com/security/cve/CVE-2016-0985.html https://bugzilla.suse.com/965901

1 0

openSUSE-SU-2016:0414-1: moderate: Security update for tiff
by opensuse-security＠opensuse.org 10 Feb '16

10 Feb '16

openSUSE Security Update: Security update for tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0414-1 Rating: moderate References: #964225 Cross-References: CVE-2015-8781 CVE-2015-8782 CVE-2015-8783 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for tiff fixes the following issues: - CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds writes for invalid images (boo#964225) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-184=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libtiff-devel-4.0.6-8.16.1 libtiff5-4.0.6-8.16.1 libtiff5-debuginfo-4.0.6-8.16.1 tiff-4.0.6-8.16.1 tiff-debuginfo-4.0.6-8.16.1 tiff-debugsource-4.0.6-8.16.1 - openSUSE 13.1 (x86_64): libtiff-devel-32bit-4.0.6-8.16.1 libtiff5-32bit-4.0.6-8.16.1 libtiff5-debuginfo-32bit-4.0.6-8.16.1 References: https://www.suse.com/security/cve/CVE-2015-8781.html https://www.suse.com/security/cve/CVE-2015-8782.html https://www.suse.com/security/cve/CVE-2015-8783.html https://bugzilla.suse.com/964225

1 0

openSUSE-SU-2016:0413-1: moderate: Security update for jasper
by opensuse-security＠opensuse.org 10 Feb '16

10 Feb '16

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0413-1 Rating: moderate References: #963983 Cross-References: CVE-2016-2089 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes the following issue: * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip() function (bsc#963983) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-185=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): jasper-1.900.1-160.19.1 jasper-debuginfo-1.900.1-160.19.1 jasper-debugsource-1.900.1-160.19.1 libjasper-devel-1.900.1-160.19.1 libjasper1-1.900.1-160.19.1 libjasper1-debuginfo-1.900.1-160.19.1 - openSUSE 13.1 (x86_64): libjasper1-32bit-1.900.1-160.19.1 libjasper1-debuginfo-32bit-1.900.1-160.19.1 References: https://www.suse.com/security/cve/CVE-2016-2089.html https://bugzilla.suse.com/963983

1 0

openSUSE-SU-2016:0412-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 10 Feb '16

10 Feb '16

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0412-1 Rating: important References: #965901 Cross-References: CVE-2016-0964 CVE-2016-0965 CVE-2016-0966 CVE-2016-0967 CVE-2016-0968 CVE-2016-0969 CVE-2016-0970 CVE-2016-0971 CVE-2016-0972 CVE-2016-0973 CVE-2016-0974 CVE-2016-0975 CVE-2016-0976 CVE-2016-0977 CVE-2016-0978 CVE-2016-0979 CVE-2016-0980 CVE-2016-0981 CVE-2016-0982 CVE-2016-0983 CVE-2016-0984 CVE-2016-0985 Affected Products: openSUSE 13.2 NonFree ______________________________________________________________________________ An update that fixes 22 vulnerabilities is now available. Description: This update for flash-player fixes the following issues: - Security update to 11.2.202.569 (boo#965901): * APSB16-04, CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0971, CVE-2016-0972, CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, CVE-2016-0981, CVE-2016-0982, CVE-2016-0983, CVE-2016-0984, CVE-2016-0985 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2 NonFree: zypper in -t patch openSUSE-2016-183=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 NonFree (i586 x86_64): flash-player-11.2.202.569-2.88.1 flash-player-gnome-11.2.202.569-2.88.1 flash-player-kde4-11.2.202.569-2.88.1 References: https://www.suse.com/security/cve/CVE-2016-0964.html https://www.suse.com/security/cve/CVE-2016-0965.html https://www.suse.com/security/cve/CVE-2016-0966.html https://www.suse.com/security/cve/CVE-2016-0967.html https://www.suse.com/security/cve/CVE-2016-0968.html https://www.suse.com/security/cve/CVE-2016-0969.html https://www.suse.com/security/cve/CVE-2016-0970.html https://www.suse.com/security/cve/CVE-2016-0971.html https://www.suse.com/security/cve/CVE-2016-0972.html https://www.suse.com/security/cve/CVE-2016-0973.html https://www.suse.com/security/cve/CVE-2016-0974.html https://www.suse.com/security/cve/CVE-2016-0975.html https://www.suse.com/security/cve/CVE-2016-0976.html https://www.suse.com/security/cve/CVE-2016-0977.html https://www.suse.com/security/cve/CVE-2016-0978.html https://www.suse.com/security/cve/CVE-2016-0979.html https://www.suse.com/security/cve/CVE-2016-0980.html https://www.suse.com/security/cve/CVE-2016-0981.html https://www.suse.com/security/cve/CVE-2016-0982.html https://www.suse.com/security/cve/CVE-2016-0983.html https://www.suse.com/security/cve/CVE-2016-0984.html https://www.suse.com/security/cve/CVE-2016-0985.html https://bugzilla.suse.com/965901

1 0

openSUSE-RU-2016:0409-1: important: Recommended update for calligra, calligra-l10n
by maintenance＠opensuse.org 10 Feb '16

10 Feb '16

openSUSE Recommended Update: Recommended update for calligra, calligra-l10n ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0409-1 Rating: important References: #963570 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for calligra fixes the following issues: Update from 2.9.8 to 2.9.10 + for more details please refer to * https://www.calligra.org/news/calligra-2-9-10-released/ * https://www.calligra.org/news/calligra-2-9-9-released/ Additionally the update includes the following fix: - Don't build with libkdcraw on Leap and Tumbleweed. It's KF5 based and breaks the build. (boo#963570) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-182=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): calligra-2.9.10-3.2 calligra-active-2.9.10-3.2 calligra-active-debuginfo-2.9.10-3.2 calligra-author-2.9.10-3.2 calligra-author-debuginfo-2.9.10-3.2 calligra-braindump-2.9.10-3.2 calligra-braindump-debuginfo-2.9.10-3.2 calligra-debuginfo-2.9.10-3.2 calligra-debugsource-2.9.10-3.2 calligra-devel-2.9.10-3.2 calligra-extras-converter-2.9.10-3.2 calligra-extras-converter-debuginfo-2.9.10-3.2 calligra-extras-dolphin-2.9.10-3.2 calligra-extras-dolphin-debuginfo-2.9.10-3.2 calligra-extras-okular-2.9.10-3.2 calligra-extras-okular-debuginfo-2.9.10-3.2 calligra-flow-2.9.10-3.2 calligra-flow-debuginfo-2.9.10-3.2 calligra-gemini-2.9.10-3.2 calligra-gemini-debuginfo-2.9.10-3.2 calligra-karbon-2.9.10-3.2 calligra-karbon-debuginfo-2.9.10-3.2 calligra-kexi-2.9.10-3.2 calligra-kexi-debuginfo-2.9.10-3.2 calligra-kexi-mssql-driver-2.9.10-3.2 calligra-kexi-mssql-driver-debuginfo-2.9.10-3.2 calligra-kexi-mysql-driver-2.9.10-3.2 calligra-kexi-mysql-driver-debuginfo-2.9.10-3.2 calligra-kexi-postgresql-driver-2.9.10-3.2 calligra-kexi-postgresql-driver-debuginfo-2.9.10-3.2 calligra-kexi-spreadsheet-import-2.9.10-3.2 calligra-kexi-spreadsheet-import-debuginfo-2.9.10-3.2 calligra-kexi-sqlite3-driver-2.9.10-3.2 calligra-kexi-sqlite3-driver-debuginfo-2.9.10-3.2 calligra-kexi-xbase-driver-2.9.10-3.2 calligra-kexi-xbase-driver-debuginfo-2.9.10-3.2 calligra-krita-2.9.10-3.2 calligra-krita-debuginfo-2.9.10-3.2 calligra-plan-2.9.10-3.2 calligra-plan-debuginfo-2.9.10-3.2 calligra-sheets-2.9.10-3.2 calligra-sheets-debuginfo-2.9.10-3.2 calligra-stage-2.9.10-3.2 calligra-stage-debuginfo-2.9.10-3.2 calligra-tools-2.9.10-3.2 calligra-tools-debuginfo-2.9.10-3.2 calligra-words-2.9.10-3.2 calligra-words-common-2.9.10-3.2 calligra-words-common-debuginfo-2.9.10-3.2 calligra-words-debuginfo-2.9.10-3.2 - openSUSE Leap 42.1 (noarch): calligra-doc-2.9.10-3.2 calligra-l10n-bs-2.9.10-3.2 calligra-l10n-ca-2.9.10-3.2 calligra-l10n-ca-doc-2.9.10-3.2 calligra-l10n-caValencia-2.9.10-3.2 calligra-l10n-cs-2.9.10-3.2 calligra-l10n-da-2.9.10-3.2 calligra-l10n-de-2.9.10-3.2 calligra-l10n-de-doc-2.9.10-3.2 calligra-l10n-el-2.9.10-3.2 calligra-l10n-en_GB-2.9.10-3.2 calligra-l10n-es-2.9.10-3.2 calligra-l10n-es-doc-2.9.10-3.2 calligra-l10n-et-2.9.10-3.2 calligra-l10n-et-doc-2.9.10-3.2 calligra-l10n-fi-2.9.10-3.2 calligra-l10n-fr-2.9.10-3.2 calligra-l10n-fr-doc-2.9.10-3.2 calligra-l10n-gl-2.9.10-3.2 calligra-l10n-hu-2.9.10-3.2 calligra-l10n-it-2.9.10-3.2 calligra-l10n-it-doc-2.9.10-3.2 calligra-l10n-ja-2.9.10-3.2 calligra-l10n-kk-2.9.10-3.2 calligra-l10n-nb-2.9.10-3.2 calligra-l10n-nl-2.9.10-3.2 calligra-l10n-nl-doc-2.9.10-3.2 calligra-l10n-pl-2.9.10-3.2 calligra-l10n-pt-2.9.10-3.2 calligra-l10n-pt-doc-2.9.10-3.2 calligra-l10n-pt_BR-2.9.10-3.2 calligra-l10n-pt_BR-doc-2.9.10-3.2 calligra-l10n-ru-2.9.10-3.2 calligra-l10n-ru-doc-2.9.10-3.2 calligra-l10n-sk-2.9.10-3.2 calligra-l10n-sv-2.9.10-3.2 calligra-l10n-sv-doc-2.9.10-3.2 calligra-l10n-tr-2.9.10-3.2 calligra-l10n-uk-2.9.10-3.2 calligra-l10n-uk-doc-2.9.10-3.2 calligra-l10n-zh_CN-2.9.10-3.2 calligra-l10n-zh_TW-2.9.10-3.2 References: https://bugzilla.suse.com/963570

1 0

openSUSE-SU-2016:0408-1: moderate: Security update for jasper
by opensuse-security＠opensuse.org 10 Feb '16

10 Feb '16

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0408-1 Rating: moderate References: #963983 Cross-References: CVE-2016-2089 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for jasper fixes the following issues: - CVE-2016-2089: Specially crafted JPEG 2000 may cause JasPer to crash (boo#963983) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-180=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): jasper-1.900.1-163.21.1 jasper-debuginfo-1.900.1-163.21.1 jasper-debugsource-1.900.1-163.21.1 libjasper-devel-1.900.1-163.21.1 libjasper1-1.900.1-163.21.1 libjasper1-debuginfo-1.900.1-163.21.1 - openSUSE 13.2 (x86_64): libjasper1-32bit-1.900.1-163.21.1 libjasper1-debuginfo-32bit-1.900.1-163.21.1 References: https://www.suse.com/security/cve/CVE-2016-2089.html https://bugzilla.suse.com/963983

1 0

openSUSE-SU-2016:0406-1: moderate: Security update for krb5
by opensuse-security＠opensuse.org 10 Feb '16

10 Feb '16

openSUSE Security Update: Security update for krb5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0406-1 Rating: moderate References: #963964 #963968 #963975 Cross-References: CVE-2015-8629 CVE-2015-8630 CVE-2015-8631 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for krb5 fixes the following issues: - CVE-2015-8629: Information leak authenticated attackers with permissions to modify the database (bsc#963968) - CVE-2015-8630: An authenticated attacker with permission to modify a principal entry may have caused kadmind to crash (bsc#963964) - CVE-2015-8631: An authenticated attacker could have caused a memory leak in auditd by supplying a null principal name in request (bsc#963975) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-181=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): krb5-1.12.2-21.1 krb5-client-1.12.2-21.1 krb5-client-debuginfo-1.12.2-21.1 krb5-debuginfo-1.12.2-21.1 krb5-debugsource-1.12.2-21.1 krb5-devel-1.12.2-21.1 krb5-doc-1.12.2-21.1 krb5-mini-1.12.2-21.1 krb5-mini-debuginfo-1.12.2-21.1 krb5-mini-debugsource-1.12.2-21.1 krb5-mini-devel-1.12.2-21.1 krb5-plugin-kdb-ldap-1.12.2-21.1 krb5-plugin-kdb-ldap-debuginfo-1.12.2-21.1 krb5-plugin-preauth-otp-1.12.2-21.1 krb5-plugin-preauth-otp-debuginfo-1.12.2-21.1 krb5-plugin-preauth-pkinit-1.12.2-21.1 krb5-plugin-preauth-pkinit-debuginfo-1.12.2-21.1 krb5-server-1.12.2-21.1 krb5-server-debuginfo-1.12.2-21.1 - openSUSE 13.2 (x86_64): krb5-32bit-1.12.2-21.1 krb5-debuginfo-32bit-1.12.2-21.1 krb5-devel-32bit-1.12.2-21.1 References: https://www.suse.com/security/cve/CVE-2015-8629.html https://www.suse.com/security/cve/CVE-2015-8630.html https://www.suse.com/security/cve/CVE-2015-8631.html https://bugzilla.suse.com/963964 https://bugzilla.suse.com/963968 https://bugzilla.suse.com/963975

1 0

openSUSE-SU-2016:0405-1: moderate: Security update for tiff
by opensuse-security＠opensuse.org 10 Feb '16

10 Feb '16

openSUSE Security Update: Security update for tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0405-1 Rating: moderate References: #964225 Cross-References: CVE-2015-8781 CVE-2015-8782 CVE-2015-8783 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for tiff fixes the following issues: - CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds writes for invalid images (boo#964225) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-179=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libtiff-devel-4.0.6-10.20.1 libtiff5-4.0.6-10.20.1 libtiff5-debuginfo-4.0.6-10.20.1 tiff-4.0.6-10.20.1 tiff-debuginfo-4.0.6-10.20.1 tiff-debugsource-4.0.6-10.20.1 - openSUSE 13.2 (x86_64): libtiff-devel-32bit-4.0.6-10.20.1 libtiff5-32bit-4.0.6-10.20.1 libtiff5-debuginfo-32bit-4.0.6-10.20.1 References: https://www.suse.com/security/cve/CVE-2015-8781.html https://www.suse.com/security/cve/CVE-2015-8782.html https://www.suse.com/security/cve/CVE-2015-8783.html https://bugzilla.suse.com/964225

1 0

openSUSE-RU-2016:0404-1: moderate: Recommended update for julia
by maintenance＠opensuse.org 10 Feb '16

10 Feb '16

openSUSE Recommended Update: Recommended update for julia ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0404-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update provides version 0.4.3 for julia: - Add in _constraints the information to build julia package in a machine that supports the following extensions: mmx, sse, sse2, sse3, and ssse3. This is necessary because the main package is built for core2 architecture to improve the performance. The package julia-compat, on the other hand, is built for x86_64 and can be used if the user does not support core2 extensions. - Version bump to 0.4.3. * Bugfix release, no changelog available. - Version bump to 0.4.2. * Bugfix release, no changelog available. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-176=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): julia-0.4.3-7.1 julia-debuginfo-0.4.3-7.1 julia-debugsource-0.4.3-7.1 julia-devel-0.4.3-7.1 julia-devel-debuginfo-0.4.3-7.1 - openSUSE Leap 42.1 (x86_64): julia-compat-0.4.3-7.1 julia-compat-debuginfo-0.4.3-7.1 julia-compat-debugsource-0.4.3-7.1 julia-compat-devel-0.4.3-7.1 julia-compat-devel-debuginfo-0.4.3-7.1 - openSUSE Leap 42.1 (noarch): julia-doc-0.4.3-7.1 julia-examples-0.4.3-7.1 References:

1 0

openSUSE-RU-2016:0403-1: moderate: Recommended update for libqt5-qtdeclarative
by maintenance＠opensuse.org 10 Feb '16

10 Feb '16

openSUSE Recommended Update: Recommended update for libqt5-qtdeclarative ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0403-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for libqt5-qtdeclarative fixes the following issues: - Added sanitize-visibleItems-list-after-model-insertions and Refactor-FxViewItem-releasing-code to help in resolving kde#352055 and qtbug#48870 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-177=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libQtQuick5-5.5.1-6.1 libQtQuick5-debuginfo-5.5.1-6.1 libqt5-qtdeclarative-debugsource-5.5.1-6.1 libqt5-qtdeclarative-devel-5.5.1-6.1 libqt5-qtdeclarative-devel-debuginfo-5.5.1-6.1 libqt5-qtdeclarative-examples-5.5.1-6.1 libqt5-qtdeclarative-examples-debuginfo-5.5.1-6.1 libqt5-qtdeclarative-tools-5.5.1-6.1 libqt5-qtdeclarative-tools-debuginfo-5.5.1-6.1 - openSUSE Leap 42.1 (x86_64): libQtQuick5-32bit-5.5.1-6.1 libQtQuick5-debuginfo-32bit-5.5.1-6.1 libqt5-qtdeclarative-devel-32bit-5.5.1-6.1 libqt5-qtdeclarative-devel-debuginfo-32bit-5.5.1-6.1 - openSUSE Leap 42.1 (noarch): libqt5-qtdeclarative-private-headers-devel-5.5.1-6.1 References:

1 0

openSUSE-RU-2016:0402-1: moderate: Recommended update for libqt5-qtbase
by maintenance＠opensuse.org 10 Feb '16

10 Feb '16

openSUSE Recommended Update: Recommended update for libqt5-qtbase ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0402-1 Rating: moderate References: #955280 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for libqt5-qtbase fixes the following issues: - Added Add-option-to-disable-session-management-by-closing-windows API adition to QSessionManager as first step in resolving kde#354724 and boo#955280 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-178=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libQt5Bootstrap-devel-static-5.5.1-7.1 libQt5Concurrent-devel-5.5.1-7.1 libQt5Concurrent5-5.5.1-7.1 libQt5Concurrent5-debuginfo-5.5.1-7.1 libQt5Core-devel-5.5.1-7.1 libQt5Core5-5.5.1-7.1 libQt5Core5-debuginfo-5.5.1-7.1 libQt5DBus-devel-5.5.1-7.1 libQt5DBus-devel-debuginfo-5.5.1-7.1 libQt5DBus5-5.5.1-7.1 libQt5DBus5-debuginfo-5.5.1-7.1 libQt5Gui-devel-5.5.1-7.1 libQt5Gui5-5.5.1-7.1 libQt5Gui5-debuginfo-5.5.1-7.1 libQt5Network-devel-5.5.1-7.1 libQt5Network5-5.5.1-7.1 libQt5Network5-debuginfo-5.5.1-7.1 libQt5OpenGL-devel-5.5.1-7.1 libQt5OpenGL5-5.5.1-7.1 libQt5OpenGL5-debuginfo-5.5.1-7.1 libQt5OpenGLExtensions-devel-static-5.5.1-7.1 libQt5PlatformHeaders-devel-5.5.1-7.1 libQt5PlatformSupport-devel-static-5.5.1-7.1 libQt5PrintSupport-devel-5.5.1-7.1 libQt5PrintSupport5-5.5.1-7.1 libQt5PrintSupport5-debuginfo-5.5.1-7.1 libQt5Sql-devel-5.5.1-7.1 libQt5Sql5-5.5.1-7.1 libQt5Sql5-debuginfo-5.5.1-7.1 libQt5Sql5-mysql-5.5.1-7.1 libQt5Sql5-mysql-debuginfo-5.5.1-7.1 libQt5Sql5-postgresql-5.5.1-7.1 libQt5Sql5-postgresql-debuginfo-5.5.1-7.1 libQt5Sql5-sqlite-5.5.1-7.1 libQt5Sql5-sqlite-debuginfo-5.5.1-7.1 libQt5Sql5-unixODBC-5.5.1-7.1 libQt5Sql5-unixODBC-debuginfo-5.5.1-7.1 libQt5Test-devel-5.5.1-7.1 libQt5Test5-5.5.1-7.1 libQt5Test5-debuginfo-5.5.1-7.1 libQt5Widgets-devel-5.5.1-7.1 libQt5Widgets5-5.5.1-7.1 libQt5Widgets5-debuginfo-5.5.1-7.1 libQt5Xml-devel-5.5.1-7.1 libQt5Xml5-5.5.1-7.1 libQt5Xml5-debuginfo-5.5.1-7.1 libqt5-qtbase-common-devel-5.5.1-7.1 libqt5-qtbase-common-devel-debuginfo-5.5.1-7.1 libqt5-qtbase-debugsource-5.5.1-7.1 libqt5-qtbase-devel-5.5.1-7.1 libqt5-qtbase-doc-5.5.1-7.1 libqt5-qtbase-doc-debuginfo-5.5.1-7.1 libqt5-qtbase-examples-5.5.1-7.1 libqt5-qtbase-examples-debuginfo-5.5.1-7.1 libqt5-qtbase-platformtheme-gtk2-5.5.1-7.1 libqt5-qtbase-platformtheme-gtk2-debuginfo-5.5.1-7.1 - openSUSE Leap 42.1 (x86_64): libQt5Bootstrap-devel-static-32bit-5.5.1-7.1 libQt5Concurrent-devel-32bit-5.5.1-7.1 libQt5Concurrent5-32bit-5.5.1-7.1 libQt5Concurrent5-debuginfo-32bit-5.5.1-7.1 libQt5Core-devel-32bit-5.5.1-7.1 libQt5Core5-32bit-5.5.1-7.1 libQt5Core5-debuginfo-32bit-5.5.1-7.1 libQt5DBus-devel-32bit-5.5.1-7.1 libQt5DBus-devel-debuginfo-32bit-5.5.1-7.1 libQt5DBus5-32bit-5.5.1-7.1 libQt5DBus5-debuginfo-32bit-5.5.1-7.1 libQt5Gui-devel-32bit-5.5.1-7.1 libQt5Gui5-32bit-5.5.1-7.1 libQt5Gui5-debuginfo-32bit-5.5.1-7.1 libQt5Network-devel-32bit-5.5.1-7.1 libQt5Network5-32bit-5.5.1-7.1 libQt5Network5-debuginfo-32bit-5.5.1-7.1 libQt5OpenGL-devel-32bit-5.5.1-7.1 libQt5OpenGL5-32bit-5.5.1-7.1 libQt5OpenGL5-debuginfo-32bit-5.5.1-7.1 libQt5OpenGLExtensions-devel-static-32bit-5.5.1-7.1 libQt5PlatformSupport-devel-static-32bit-5.5.1-7.1 libQt5PrintSupport-devel-32bit-5.5.1-7.1 libQt5PrintSupport5-32bit-5.5.1-7.1 libQt5PrintSupport5-debuginfo-32bit-5.5.1-7.1 libQt5Sql-devel-32bit-5.5.1-7.1 libQt5Sql5-32bit-5.5.1-7.1 libQt5Sql5-debuginfo-32bit-5.5.1-7.1 libQt5Sql5-mysql-32bit-5.5.1-7.1 libQt5Sql5-mysql-debuginfo-32bit-5.5.1-7.1 libQt5Sql5-postgresql-32bit-5.5.1-7.1 libQt5Sql5-postgresql-debuginfo-32bit-5.5.1-7.1 libQt5Sql5-sqlite-32bit-5.5.1-7.1 libQt5Sql5-sqlite-debuginfo-32bit-5.5.1-7.1 libQt5Sql5-unixODBC-32bit-5.5.1-7.1 libQt5Sql5-unixODBC-debuginfo-32bit-5.5.1-7.1 libQt5Test-devel-32bit-5.5.1-7.1 libQt5Test5-32bit-5.5.1-7.1 libQt5Test5-debuginfo-32bit-5.5.1-7.1 libQt5Widgets-devel-32bit-5.5.1-7.1 libQt5Widgets5-32bit-5.5.1-7.1 libQt5Widgets5-debuginfo-32bit-5.5.1-7.1 libQt5Xml-devel-32bit-5.5.1-7.1 libQt5Xml5-32bit-5.5.1-7.1 libQt5Xml5-debuginfo-32bit-5.5.1-7.1 libqt5-qtbase-examples-32bit-5.5.1-7.1 libqt5-qtbase-examples-debuginfo-32bit-5.5.1-7.1 - openSUSE Leap 42.1 (noarch): libQt5Core-private-headers-devel-5.5.1-7.1 libQt5DBus-private-headers-devel-5.5.1-7.1 libQt5Gui-private-headers-devel-5.5.1-7.1 libQt5Network-private-headers-devel-5.5.1-7.1 libQt5OpenGL-private-headers-devel-5.5.1-7.1 libQt5PlatformSupport-private-headers-devel-5.5.1-7.1 libQt5PrintSupport-private-headers-devel-5.5.1-7.1 libQt5Sql-private-headers-devel-5.5.1-7.1 libQt5Test-private-headers-devel-5.5.1-7.1 libQt5Widgets-private-headers-devel-5.5.1-7.1 libqt5-qtbase-private-headers-devel-5.5.1-7.1 References: https://bugzilla.suse.com/955280

1 0

openSUSE-RU-2016:0397-1: moderate: Recommended update for clamav-database
by maintenance＠opensuse.org 09 Feb '16

09 Feb '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0397-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - database refresh February 8th 2016 This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-175=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201602080000-47.1 References:

1 0

openSUSE-RU-2016:0392-1: moderate: Recommended update for poppler, poppler-qt, poppler-qt5, kdepim
by maintenance＠opensuse.org 09 Feb '16

09 Feb '16

openSUSE Recommended Update: Recommended update for poppler, poppler-qt, poppler-qt5, kdepim ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0392-1 Rating: moderate References: #914316 #927466 #953957 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for poppler, kfilemetadata5 and kdepim fixes the following issues: - poppler + Graphical issue with a fillable PDF file -fix annotations with transparent color in PDF files (boo#914316) + Poppler die not display standard ligatures correctly (boo#927466) This update also contains the new poppler-qt5 package. - kdepim + Make sure that akonadi-search gets installed as that it contains the search agents + Kjots is now offered as a separate package based on Frameworks. No longer obsolete or conflict it. This update was partially imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-174=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): akonadi_resources-15.12.1-12.2 akonadi_resources-debuginfo-15.12.1-12.2 akregator5-15.12.1-12.2 akregator5-debuginfo-15.12.1-12.2 blogilo5-15.12.1-12.2 blogilo5-debuginfo-15.12.1-12.2 kaddressbook5-15.12.1-12.2 kaddressbook5-debuginfo-15.12.1-12.2 kalarm5-15.12.1-12.2 kalarm5-debuginfo-15.12.1-12.2 kdepim-15.12.1-12.2 kdepim-debuginfo-15.12.1-12.2 kdepim-debugsource-15.12.1-12.2 kleopatra5-15.12.1-12.2 kleopatra5-debuginfo-15.12.1-12.2 kmail5-15.12.1-12.2 kmail5-debuginfo-15.12.1-12.2 knotes5-15.12.1-12.2 knotes5-debuginfo-15.12.1-12.2 kontact5-15.12.1-12.2 kontact5-debuginfo-15.12.1-12.2 korganizer5-15.12.1-12.2 korganizer5-debuginfo-15.12.1-12.2 ktnef5-15.12.1-12.2 ktnef5-debuginfo-15.12.1-12.2 libkdepim-15.12.1-12.2 libkdepim-debuginfo-15.12.1-12.2 libpoppler-cpp0-0.24.4-9.1 libpoppler-cpp0-debuginfo-0.24.4-9.1 libpoppler-devel-0.24.4-9.1 libpoppler-glib-devel-0.24.4-9.1 libpoppler-glib8-0.24.4-9.1 libpoppler-glib8-debuginfo-0.24.4-9.1 libpoppler-qt4-4-0.24.4-9.1 libpoppler-qt4-4-debuginfo-0.24.4-9.1 libpoppler-qt4-devel-0.24.4-9.1 libpoppler-qt5-1-0.24.4-9.1 libpoppler-qt5-1-debuginfo-0.24.4-9.1 libpoppler-qt5-devel-0.24.4-9.1 libpoppler44-0.24.4-9.1 libpoppler44-debuginfo-0.24.4-9.1 poppler-debugsource-0.24.4-9.1 poppler-qt-debugsource-0.24.4-9.1 poppler-qt5-debugsource-0.24.4-9.1 poppler-tools-0.24.4-9.1 poppler-tools-debuginfo-0.24.4-9.1 typelib-1_0-Poppler-0_18-0.24.4-9.1 References: https://bugzilla.suse.com/914316 https://bugzilla.suse.com/927466 https://bugzilla.suse.com/953957

1 0

openSUSE-RU-2016:0385-1: moderate: Recommended update for libzip
by maintenance＠opensuse.org 08 Feb '16

08 Feb '16

openSUSE Recommended Update: Recommended update for libzip ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0385-1 Rating: moderate References: #963071 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libzip fixes a segmentation fault when attempting to open an invalid zip file. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-173=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libzip-0.11.1-5.1 libzip-debuginfo-0.11.1-5.1 libzip-debugsource-0.11.1-5.1 libzip-devel-0.11.1-5.1 libzip2-0.11.1-5.1 libzip2-debuginfo-0.11.1-5.1 - openSUSE Leap 42.1 (x86_64): libzip2-32bit-0.11.1-5.1 libzip2-debuginfo-32bit-0.11.1-5.1 References: https://bugzilla.suse.com/963071

1 0

openSUSE-RU-2016:0382-1: moderate: Recommended update for wicked
by maintenance＠opensuse.org 08 Feb '16

08 Feb '16

openSUSE Recommended Update: Recommended update for wicked ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0382-1 Rating: moderate References: #927615 #936514 #944710 #953107 #955778 #955864 #957944 #959356 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This recommended update provides version 0.6.30 for wicked: - version 0.6.30 - wireless: fix EAP inconsistencies and add missing auth method names to translation maps (boo#936514, boo#927615). - ipv6: clear old address list before applying new fixing to not wait full time in the client-side tentative address check - fsm: do not segfault on device hierarchy loops but (boo#959356) - fsm: handle down/step back events in ifup flow instead to try to workaround in nanny (boo#955864). - man: documented how to declare several team link watches. - ethtool: map da,none,other port types (boo#957944). - ipv4: removed pointless broadcast calculations and send to the kernel only if explicitly requested in ifcfg file or by dhcp options. The kernel has an own logic to automatically calculate related settings as needed. Also removed broadcast setting from ifcfg-lo to not override kernel's setup (boo#944710). - version 0.6.29 - rpm: do not use systemctl show in scripts (boo#955778) systemctl show makes a systemd query and does not work in a chroot or when systemd is not available and using it in RPM scripts breaks offline update. Replaced with readlink. - team: fix to use proper names of ethtool delay options - nanny: skip recheck when no policy configured (boo#953107) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-172=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libwicked-0-6-0.6.30-27.1 libwicked-0-6-debuginfo-0.6.30-27.1 wicked-0.6.30-27.1 wicked-debuginfo-0.6.30-27.1 wicked-debugsource-0.6.30-27.1 wicked-service-0.6.30-27.1 References: https://bugzilla.suse.com/927615 https://bugzilla.suse.com/936514 https://bugzilla.suse.com/944710 https://bugzilla.suse.com/953107 https://bugzilla.suse.com/955778 https://bugzilla.suse.com/955864 https://bugzilla.suse.com/957944 https://bugzilla.suse.com/959356

1 0

openSUSE-SU-2016:0379-1: moderate: Security update for mariadb
by opensuse-security＠opensuse.org 08 Feb '16

08 Feb '16

openSUSE Security Update: Security update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0379-1 Rating: moderate References: #957174 Cross-References: CVE-2015-5969 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mariadb fixes the following security issue: - CVE-2015-5969: Fixed information leak via mysql-systemd-helper script. (boo#957174) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-171=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libmysqlclient-devel-10.0.22-2.21.2 libmysqlclient18-10.0.22-2.21.2 libmysqlclient18-debuginfo-10.0.22-2.21.2 libmysqlclient_r18-10.0.22-2.21.2 libmysqld-devel-10.0.22-2.21.2 libmysqld18-10.0.22-2.21.2 libmysqld18-debuginfo-10.0.22-2.21.2 mariadb-10.0.22-2.21.2 mariadb-bench-10.0.22-2.21.2 mariadb-bench-debuginfo-10.0.22-2.21.2 mariadb-client-10.0.22-2.21.2 mariadb-client-debuginfo-10.0.22-2.21.2 mariadb-debuginfo-10.0.22-2.21.2 mariadb-debugsource-10.0.22-2.21.2 mariadb-errormessages-10.0.22-2.21.2 mariadb-test-10.0.22-2.21.2 mariadb-test-debuginfo-10.0.22-2.21.2 mariadb-tools-10.0.22-2.21.2 mariadb-tools-debuginfo-10.0.22-2.21.2 - openSUSE 13.2 (x86_64): libmysqlclient18-32bit-10.0.22-2.21.2 libmysqlclient18-debuginfo-32bit-10.0.22-2.21.2 libmysqlclient_r18-32bit-10.0.22-2.21.2 References: https://www.suse.com/security/cve/CVE-2015-5969.html https://bugzilla.suse.com/957174

1 0

openSUSE-SU-2016:0378-1: moderate: Security update to phpMyAdmin 4.4.15.4
by opensuse-security＠opensuse.org 08 Feb '16

08 Feb '16

openSUSE Security Update: Security update to phpMyAdmin 4.4.15.4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0378-1 Rating: moderate References: #964024 Cross-References: CVE-2016-1927 CVE-2016-2038 CVE-2016-2039 CVE-2016-2040 CVE-2016-2041 CVE-2016-2042 CVE-2016-2043 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Security update to phpMyAdmin 4.4.15.4 The followinng vulnerabilities were fixed: (boo#964024) * CVE-2016-2038: Multiple full path disclosure vulnerabilities * CVE-2016-2039: Unsafe generation of XSRF/CSRF token * CVE-2016-2040: Multiple XSS vulnerabilities * CVE-2016-1927: Insecure password generation in JavaScript * CVE-2016-2041: Unsafe comparison of XSRF/CSRF token * CVE-2016-2042: Multiple full path disclosure vulnerabilities * CVE-2016-2043: XSS vulnerability in normalization page Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-168=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): phpMyAdmin-4.4.15.4-46.1 References: https://www.suse.com/security/cve/CVE-2016-1927.html https://www.suse.com/security/cve/CVE-2016-2038.html https://www.suse.com/security/cve/CVE-2016-2039.html https://www.suse.com/security/cve/CVE-2016-2040.html https://www.suse.com/security/cve/CVE-2016-2041.html https://www.suse.com/security/cve/CVE-2016-2042.html https://www.suse.com/security/cve/CVE-2016-2043.html https://bugzilla.suse.com/964024

1 0

openSUSE-SU-2016:0377-1: important: Security update for MySQL
by opensuse-security＠opensuse.org 08 Feb '16

08 Feb '16

openSUSE Security Update: Security update for MySQL ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0377-1 Rating: important References: #959724 #962779 Cross-References: CVE-2015-7744 CVE-2016-0502 CVE-2016-0503 CVE-2016-0504 CVE-2016-0505 CVE-2016-0546 CVE-2016-0594 CVE-2016-0595 CVE-2016-0596 CVE-2016-0597 CVE-2016-0598 CVE-2016-0600 CVE-2016-0605 CVE-2016-0606 CVE-2016-0607 CVE-2016-0608 CVE-2016-0609 CVE-2016-0610 CVE-2016-0611 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: This update to MySQL 5.6.28 fixes the following issues (bsc#962779): - CVE-2015-7744: Lack of verification against faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack. - CVE-2016-0502: Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer. - CVE-2016-0503: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0504. - CVE-2016-0504: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0503. - CVE-2016-0505: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Options. - CVE-2016-0546: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. - CVE-2016-0594: Unspecified vulnerability in Oracle MySQL 5.6.21 and earlier allows remote authenticated users to affect availability via vectors related to DML. - CVE-2016-0595: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier allows remote authenticated users to affect availability via vectors related to DML. - CVE-2016-0596: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier allows remote authenticated users to affect availability via vectors related to DML. - CVE-2016-0597: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer. - CVE-2016-0598: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML. - CVE-2016-0600: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to InnoDB. - CVE-2016-0605: Unspecified vulnerability in Oracle MySQL 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors. - CVE-2016-0606: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect integrity via unknown vectors related to encryption. - CVE-2016-0607: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to replication. - CVE-2016-0608: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via vectors related to UDF. - CVE-2016-0609: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to privileges. - CVE-2016-0610: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB. - CVE-2016-0611: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer. - bsc#959724: Possible buffer overflow from incorrect use of strcpy() and sprintf() Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-169=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libmysql56client18-5.6.28-7.16.1 libmysql56client18-debuginfo-5.6.28-7.16.1 libmysql56client_r18-5.6.28-7.16.1 mysql-community-server-5.6.28-7.16.1 mysql-community-server-bench-5.6.28-7.16.1 mysql-community-server-bench-debuginfo-5.6.28-7.16.1 mysql-community-server-client-5.6.28-7.16.1 mysql-community-server-client-debuginfo-5.6.28-7.16.1 mysql-community-server-debuginfo-5.6.28-7.16.1 mysql-community-server-debugsource-5.6.28-7.16.1 mysql-community-server-errormessages-5.6.28-7.16.1 mysql-community-server-test-5.6.28-7.16.1 mysql-community-server-test-debuginfo-5.6.28-7.16.1 mysql-community-server-tools-5.6.28-7.16.1 mysql-community-server-tools-debuginfo-5.6.28-7.16.1 - openSUSE 13.1 (x86_64): libmysql56client18-32bit-5.6.28-7.16.1 libmysql56client18-debuginfo-32bit-5.6.28-7.16.1 libmysql56client_r18-32bit-5.6.28-7.16.1 References: https://www.suse.com/security/cve/CVE-2015-7744.html https://www.suse.com/security/cve/CVE-2016-0502.html https://www.suse.com/security/cve/CVE-2016-0503.html https://www.suse.com/security/cve/CVE-2016-0504.html https://www.suse.com/security/cve/CVE-2016-0505.html https://www.suse.com/security/cve/CVE-2016-0546.html https://www.suse.com/security/cve/CVE-2016-0594.html https://www.suse.com/security/cve/CVE-2016-0595.html https://www.suse.com/security/cve/CVE-2016-0596.html https://www.suse.com/security/cve/CVE-2016-0597.html https://www.suse.com/security/cve/CVE-2016-0598.html https://www.suse.com/security/cve/CVE-2016-0600.html https://www.suse.com/security/cve/CVE-2016-0605.html https://www.suse.com/security/cve/CVE-2016-0606.html https://www.suse.com/security/cve/CVE-2016-0607.html https://www.suse.com/security/cve/CVE-2016-0608.html https://www.suse.com/security/cve/CVE-2016-0609.html https://www.suse.com/security/cve/CVE-2016-0610.html https://www.suse.com/security/cve/CVE-2016-0611.html https://bugzilla.suse.com/959724 https://bugzilla.suse.com/962779

1 0

openSUSE-SU-2016:0376-1: moderate: Security update for curl
by opensuse-security＠opensuse.org 08 Feb '16

08 Feb '16

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0376-1 Rating: moderate References: #962983 #962996 Cross-References: CVE-2016-0755 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for curl fixes the following issues: - CVE-2016-0755: libcurl would reuse NTLM-authenticated proxy connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer (bsc#962983) The following tracked bugs only affect the test suite: - bsc#962996: Expired cookie in test 46 caused test failures Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-170=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): curl-7.42.1-2.50.1 curl-debuginfo-7.42.1-2.50.1 curl-debugsource-7.42.1-2.50.1 libcurl-devel-7.42.1-2.50.1 libcurl4-7.42.1-2.50.1 libcurl4-debuginfo-7.42.1-2.50.1 - openSUSE 13.1 (x86_64): libcurl-devel-32bit-7.42.1-2.50.1 libcurl4-32bit-7.42.1-2.50.1 libcurl4-debuginfo-32bit-7.42.1-2.50.1 References: https://www.suse.com/security/cve/CVE-2016-0755.html https://bugzilla.suse.com/962983 https://bugzilla.suse.com/962996

1 0

openSUSE-RU-2016:0375-1: Update to resolve dependency-issues introduced with previous updates
by maintenance＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Recommended Update: Update to resolve dependency-issues introduced with previous updates ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0375-1 Rating: low References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update does not contain any fixes, but fixes several dependency issues for pitivi and rubygem-mail. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-167=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): pitivi-0.94-2.11.1 pitivi-debuginfo-0.94-2.11.1 pitivi-debugsource-0.94-2.11.1 python3-gst-1.2.1-2.1 python3-gst-debuginfo-1.2.1-2.1 python3-gst-debugsource-1.2.1-2.1 python3-numpy-1.9.0-2.2 python3-numpy-debuginfo-1.9.0-2.2 python3-numpy-debugsource-1.9.0-2.2 python3-numpy-devel-1.9.0-2.2 rubygem-i18n-0.6.11-2.2.1 rubygem-i18n-doc-0.6.11-2.2.1 rubygem-i18n-testsuite-0.6.11-2.2.1 rubygem-mail-2.5.4-4.6.1 rubygem-mail-2_4-2.4.4-6.5.1 rubygem-mail-2_4-doc-2.4.4-6.5.1 rubygem-mail-doc-2.5.4-4.6.1 rubygem-mime-types-1-1.25.1-2.2.1 rubygem-mime-types-1-doc-1.25.1-2.2.1 rubygem-mime-types-1-testsuite-1.25.1-2.2.1 rubygem-treetop-1_4-1.4.15-2.2.1 rubygem-treetop-1_4-doc-1.4.15-2.2.1 rubygem-treetop-1_4-testsuite-1.4.15-2.2.1 - openSUSE 13.2 (noarch): pitivi-lang-0.94-2.11.1 python3-numpy-doc-1.9.0-2.2 References:

1 0

openSUSE-RU-2016:0374-1: Update to resolve dependency-issues introduced with previous updates
by maintenance＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Recommended Update: Update to resolve dependency-issues introduced with previous updates ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0374-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update does not contain any fixes, but fixes several dependency issues for kaccounts-integration. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-166=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kaccounts-integration-15.12.1-11.1 kaccounts-integration-debuginfo-15.12.1-11.1 kaccounts-integration-debugsource-15.12.1-11.1 kaccounts-integration-devel-15.12.1-11.1 libaccounts-qt5-1-1.13-3.1 libaccounts-qt5-1-debuginfo-1.13-3.1 libaccounts-qt5-debugsource-1.13-3.1 libaccounts-qt5-devel-1.13-3.1 libaccounts-qt5-tools-1.13-3.1 libaccounts-qt5-tools-debuginfo-1.13-3.1 libsignon-qt5-1-8.57-5.1 libsignon-qt5-1-debuginfo-8.57-5.1 libsignon-qt5-devel-8.57-5.1 signon-debugsource-8.57-5.1 signon-plugins-8.57-5.1 signon-plugins-debuginfo-8.57-5.1 signon-plugins-devel-8.57-5.1 signond-8.57-5.1 signond-debuginfo-8.57-5.1 signond-libs-8.57-5.1 signond-libs-debuginfo-8.57-5.1 signond-libs-devel-8.57-5.1 - openSUSE Leap 42.1 (x86_64): kaccounts-integration-32bit-15.12.1-11.1 kaccounts-integration-debuginfo-32bit-15.12.1-11.1 - openSUSE Leap 42.1 (noarch): libaccounts-qt5-doc-1.13-3.1 libsignon-qt5-docs-8.57-5.1 signon-plugins-docs-8.57-5.1 signond-docs-8.57-5.1 References:

1 0

openSUSE-SU-2016:0373-1: moderate: Security update for curl
by opensuse-security＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0373-1 Rating: moderate References: #962983 #962996 Cross-References: CVE-2016-0755 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for curl fixes the following issues: - CVE-2016-0755: libcurl would reuse NTLM-authenticated proxy connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer (bsc#962983) The following tracked bugs only affect the test suite: - bsc#962996: Expired cookie in test 46 caused test failures Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-153=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): curl-7.42.1-19.1 curl-debuginfo-7.42.1-19.1 curl-debugsource-7.42.1-19.1 libcurl-devel-7.42.1-19.1 libcurl4-7.42.1-19.1 libcurl4-debuginfo-7.42.1-19.1 - openSUSE 13.2 (x86_64): libcurl-devel-32bit-7.42.1-19.1 libcurl4-32bit-7.42.1-19.1 libcurl4-debuginfo-32bit-7.42.1-19.1 References: https://www.suse.com/security/cve/CVE-2016-0755.html https://bugzilla.suse.com/962983 https://bugzilla.suse.com/962996

1 0

openSUSE-SU-2016:0372-1: moderate: Security update for rubygem-actionpack-4_2, rubygem-actionview-4_2, rubygem-activemodel-4_2, rubygem-activerecord-4_2, rubygem-activesupport-4_2
by opensuse-security＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Security Update: Security update for rubygem-actionpack-4_2, rubygem-actionview-4_2, rubygem-activemodel-4_2, rubygem-activerecord-4_2, rubygem-activesupport-4_2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0372-1 Rating: moderate References: #963329 #963330 #963331 #963332 #963334 #963335 Cross-References: CVE-2015-7576 CVE-2015-7577 CVE-2015-7581 CVE-2016-0751 CVE-2016-0752 CVE-2016-0753 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for rubygem-actionpack-4_2, rubygem-actionview-4_2, rubygem-activemodel-4_2, rubygem-activerecord-4_2, rubygem-activesupport-4_2 fixes the following issues: - CVE-2015-7576: Timing attack vulnerability in basic authentication in Action Controller (boo#963329) - CVE-2016-0752: directory traversal and information leak in Action View (boo#963332) - CVE-2015-7581: unbounded memory growth DoS via wildcard controller routes (boo#963335) - CVE-2016-0751: rubygem-actionpack: Object Leak DoS (boo#963331) - CVE-2016-0753: Input Validation Circumvention (boo#963334) - CVE-2015-7577: Nested attributes rejection proc bypass (boo#963330) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-159=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ruby2.1-rubygem-actionpack-4_2-4.2.4-6.1 ruby2.1-rubygem-actionpack-doc-4_2-4.2.4-6.1 ruby2.1-rubygem-actionview-4_2-4.2.4-6.1 ruby2.1-rubygem-actionview-doc-4_2-4.2.4-6.1 ruby2.1-rubygem-activemodel-4_2-4.2.4-6.1 ruby2.1-rubygem-activemodel-doc-4_2-4.2.4-6.1 ruby2.1-rubygem-activerecord-4_2-4.2.4-6.1 ruby2.1-rubygem-activerecord-doc-4_2-4.2.4-6.1 ruby2.1-rubygem-activesupport-4_2-4.2.4-6.1 ruby2.1-rubygem-activesupport-doc-4_2-4.2.4-6.1 References: https://www.suse.com/security/cve/CVE-2015-7576.html https://www.suse.com/security/cve/CVE-2015-7577.html https://www.suse.com/security/cve/CVE-2015-7581.html https://www.suse.com/security/cve/CVE-2016-0751.html https://www.suse.com/security/cve/CVE-2016-0752.html https://www.suse.com/security/cve/CVE-2016-0753.html https://bugzilla.suse.com/963329 https://bugzilla.suse.com/963330 https://bugzilla.suse.com/963331 https://bugzilla.suse.com/963332 https://bugzilla.suse.com/963334 https://bugzilla.suse.com/963335

1 0

openSUSE-SU-2016:0371-1: moderate: Security update for nginx
by opensuse-security＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Security Update: Security update for nginx ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0371-1 Rating: moderate References: #963775 #963778 #963781 Cross-References: CVE-2016-0742 CVE-2016-0746 CVE-2016-0747 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update to nginx 1.8.1 fixes the following issues: - CVE-2016-0742: Invalid pointer dereference during DNS server response processing (boo#963781) - CVE-2016-0746: Use-after-free condition during CNAME response processing (boo#963778) - CVE-2016-0747: Resource exhaustion through unlimited CNAME resolution (boo#963775) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-161=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): nginx-1.8.1-5.1 nginx-debuginfo-1.8.1-5.1 nginx-debugsource-1.8.1-5.1 References: https://www.suse.com/security/cve/CVE-2016-0742.html https://www.suse.com/security/cve/CVE-2016-0746.html https://www.suse.com/security/cve/CVE-2016-0747.html https://bugzilla.suse.com/963775 https://bugzilla.suse.com/963778 https://bugzilla.suse.com/963781

1 0

openSUSE-RU-2016:0370-1: Recommended update for WALinuxAgent
by maintenance＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Recommended Update: Recommended update for WALinuxAgent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0370-1 Rating: low References: #962589 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for WALinuxAgent fixes the following issues: - Add support for rdma driver installation and update. - Handle 410 when reporting health. - Add timeout to HTTP requests. - Fix multiple issues with extension handling. - Fix descriptions for naming of the product. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-156=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): WALinuxAgent-2.0.17-8.1 References: https://bugzilla.suse.com/962589

1 0

openSUSE-RU-2016:0369-1: Recommended update for suse-xsl-stylesheets
by maintenance＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Recommended Update: Recommended update for suse-xsl-stylesheets ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0369-1 Rating: low References: #955663 #962402 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: suse-xsl-stylesheets was updated to version 2.0.4, which brings several fixes and enhancements: Schema: - Allow constant and see (inside <indexterm>); make db.all.blocks zero or more (*) for question - Remove XLinks from DB5 elements - Disallow db.all.blocks in lists - Remove <menuchoice> from guiinlines (Novdoc) - Allow <menuchoice> in titles (Novdoc) Stylesheets (PDF): - "Unbolded" admonition titles - Odd space in footer where <productname> used to be, <productname> not displayed on book title page - Fix style of <sect5> titles (bsc#955663) - FOP doesn't like empty <fo:table-cell>s - Make <remark> handling a little more elegant - Attribute sets: fix logic for replacing bold/italic in CJK languages Stylesheets (XHTML): - Make Callouts "uncopyable" - Don't link inline images - Publication date is incorrectly capitalized - Create better plain-text output via DAPS - debug.filename-id: Use xml:id for metadata - Various fixes for JS code for tracker - Style for <package> Common Stylesheet Changes: - xrefs to variablelists in another book are broken - Trim spaces/newlines at beginning/end of verbatim elements - Fix bugtracker for db4. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-158=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): suse-xsl-stylesheets-2.0.4-12.2 References: https://bugzilla.suse.com/955663 https://bugzilla.suse.com/962402

1 0

openSUSE-SU-2016:0368-1: moderate: Security update for mariadb
by opensuse-security＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Security Update: Security update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0368-1 Rating: moderate References: #937787 #957174 #958789 Cross-References: CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858 CVE-2015-4861 CVE-2015-4870 CVE-2015-4913 CVE-2015-5969 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: MariaDB has been updated to version 10.0.22, which brings fixes for many security issues and other improvements. The following CVEs have been fixed: - 10.0.22: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4870, CVE-2015-4913, CVE-2015-4792 - Fix information leak via mysql-systemd-helper script. (CVE-2015-5969, bsc#957174) For a comprehensive list of changes refer to the upstream Release Notes and Change Log documents: - https://kb.askmonty.org/en/mariadb-10022-release-notes/ - https://kb.askmonty.org/en/mariadb-10022-changelog/ This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-164=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libmysqlclient-devel-10.0.22-3.1 libmysqlclient18-10.0.22-3.1 libmysqlclient18-debuginfo-10.0.22-3.1 libmysqlclient_r18-10.0.22-3.1 libmysqld-devel-10.0.22-3.1 libmysqld18-10.0.22-3.1 libmysqld18-debuginfo-10.0.22-3.1 mariadb-10.0.22-3.1 mariadb-bench-10.0.22-3.1 mariadb-bench-debuginfo-10.0.22-3.1 mariadb-client-10.0.22-3.1 mariadb-client-debuginfo-10.0.22-3.1 mariadb-debuginfo-10.0.22-3.1 mariadb-debugsource-10.0.22-3.1 mariadb-errormessages-10.0.22-3.1 mariadb-test-10.0.22-3.1 mariadb-test-debuginfo-10.0.22-3.1 mariadb-tools-10.0.22-3.1 mariadb-tools-debuginfo-10.0.22-3.1 - openSUSE Leap 42.1 (x86_64): libmysqlclient18-32bit-10.0.22-3.1 libmysqlclient18-debuginfo-32bit-10.0.22-3.1 libmysqlclient_r18-32bit-10.0.22-3.1 References: https://www.suse.com/security/cve/CVE-2015-4792.html https://www.suse.com/security/cve/CVE-2015-4802.html https://www.suse.com/security/cve/CVE-2015-4807.html https://www.suse.com/security/cve/CVE-2015-4815.html https://www.suse.com/security/cve/CVE-2015-4826.html https://www.suse.com/security/cve/CVE-2015-4830.html https://www.suse.com/security/cve/CVE-2015-4836.html https://www.suse.com/security/cve/CVE-2015-4858.html https://www.suse.com/security/cve/CVE-2015-4861.html https://www.suse.com/security/cve/CVE-2015-4870.html https://www.suse.com/security/cve/CVE-2015-4913.html https://www.suse.com/security/cve/CVE-2015-5969.html https://bugzilla.suse.com/937787 https://bugzilla.suse.com/957174 https://bugzilla.suse.com/958789

1 0

openSUSE-SU-2016:0367-1: important: Security update for MySQL
by opensuse-security＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Security Update: Security update for MySQL ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0367-1 Rating: important References: #957174 #959724 #962779 Cross-References: CVE-2015-5969 CVE-2015-7744 CVE-2016-0502 CVE-2016-0503 CVE-2016-0504 CVE-2016-0505 CVE-2016-0546 CVE-2016-0594 CVE-2016-0595 CVE-2016-0596 CVE-2016-0597 CVE-2016-0598 CVE-2016-0600 CVE-2016-0605 CVE-2016-0606 CVE-2016-0607 CVE-2016-0608 CVE-2016-0609 CVE-2016-0610 CVE-2016-0611 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes 20 vulnerabilities is now available. Description: This update to MySQL 5.6.28 fixes the following issues (bsc#962779): - CVE-2015-7744: Lack of verification against faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack. - CVE-2016-0502: Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer. - CVE-2016-0503: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0504. - CVE-2016-0504: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0503. - CVE-2016-0505: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Options. - CVE-2016-0546: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. - CVE-2016-0594: Unspecified vulnerability in Oracle MySQL 5.6.21 and earlier allows remote authenticated users to affect availability via vectors related to DML. - CVE-2016-0595: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier allows remote authenticated users to affect availability via vectors related to DML. - CVE-2016-0596: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier allows remote authenticated users to affect availability via vectors related to DML. - CVE-2016-0597: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer. - CVE-2016-0598: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML. - CVE-2016-0600: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to InnoDB. - CVE-2016-0605: Unspecified vulnerability in Oracle MySQL 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors. - CVE-2016-0606: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect integrity via unknown vectors related to encryption. - CVE-2016-0607: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to replication. - CVE-2016-0608: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via vectors related to UDF. - CVE-2016-0609: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to privileges. - CVE-2016-0610: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB. - CVE-2016-0611: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer. - CVE-2015-5969: Fixed information leak via mysql-systemd-helper script. (bsc#957174) - bsc#959724: Possible buffer overflow from incorrect use of strcpy() and sprintf() Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-165=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-165=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libmysql56client18-5.6.28-13.1 libmysql56client18-debuginfo-5.6.28-13.1 libmysql56client_r18-5.6.28-13.1 mysql-community-server-5.6.28-13.1 mysql-community-server-bench-5.6.28-13.1 mysql-community-server-bench-debuginfo-5.6.28-13.1 mysql-community-server-client-5.6.28-13.1 mysql-community-server-client-debuginfo-5.6.28-13.1 mysql-community-server-debuginfo-5.6.28-13.1 mysql-community-server-debugsource-5.6.28-13.1 mysql-community-server-errormessages-5.6.28-13.1 mysql-community-server-test-5.6.28-13.1 mysql-community-server-test-debuginfo-5.6.28-13.1 mysql-community-server-tools-5.6.28-13.1 mysql-community-server-tools-debuginfo-5.6.28-13.1 - openSUSE Leap 42.1 (x86_64): libmysql56client18-32bit-5.6.28-13.1 libmysql56client18-debuginfo-32bit-5.6.28-13.1 libmysql56client_r18-32bit-5.6.28-13.1 - openSUSE 13.2 (i586 x86_64): libmysql56client18-5.6.28-2.17.1 libmysql56client18-debuginfo-5.6.28-2.17.1 libmysql56client_r18-5.6.28-2.17.1 mysql-community-server-5.6.28-2.17.1 mysql-community-server-bench-5.6.28-2.17.1 mysql-community-server-bench-debuginfo-5.6.28-2.17.1 mysql-community-server-client-5.6.28-2.17.1 mysql-community-server-client-debuginfo-5.6.28-2.17.1 mysql-community-server-debuginfo-5.6.28-2.17.1 mysql-community-server-debugsource-5.6.28-2.17.1 mysql-community-server-errormessages-5.6.28-2.17.1 mysql-community-server-test-5.6.28-2.17.1 mysql-community-server-test-debuginfo-5.6.28-2.17.1 mysql-community-server-tools-5.6.28-2.17.1 mysql-community-server-tools-debuginfo-5.6.28-2.17.1 - openSUSE 13.2 (x86_64): libmysql56client18-32bit-5.6.28-2.17.1 libmysql56client18-debuginfo-32bit-5.6.28-2.17.1 libmysql56client_r18-32bit-5.6.28-2.17.1 References: https://www.suse.com/security/cve/CVE-2015-5969.html https://www.suse.com/security/cve/CVE-2015-7744.html https://www.suse.com/security/cve/CVE-2016-0502.html https://www.suse.com/security/cve/CVE-2016-0503.html https://www.suse.com/security/cve/CVE-2016-0504.html https://www.suse.com/security/cve/CVE-2016-0505.html https://www.suse.com/security/cve/CVE-2016-0546.html https://www.suse.com/security/cve/CVE-2016-0594.html https://www.suse.com/security/cve/CVE-2016-0595.html https://www.suse.com/security/cve/CVE-2016-0596.html https://www.suse.com/security/cve/CVE-2016-0597.html https://www.suse.com/security/cve/CVE-2016-0598.html https://www.suse.com/security/cve/CVE-2016-0600.html https://www.suse.com/security/cve/CVE-2016-0605.html https://www.suse.com/security/cve/CVE-2016-0606.html https://www.suse.com/security/cve/CVE-2016-0607.html https://www.suse.com/security/cve/CVE-2016-0608.html https://www.suse.com/security/cve/CVE-2016-0609.html https://www.suse.com/security/cve/CVE-2016-0610.html https://www.suse.com/security/cve/CVE-2016-0611.html https://bugzilla.suse.com/957174 https://bugzilla.suse.com/959724 https://bugzilla.suse.com/962779

1 0

openSUSE-SU-2016:0366-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0366-1 Rating: moderate References: #949961 #962057 Cross-References: CVE-2015-7803 CVE-2016-1903 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for php5 fixes the following issues: - CVE-2015-7803: Specially crafted .phar files with a crafted TAR archive entry allowed remote attackers to cause a Denial of Service (DoS) [bsc#949961] - CVE-2016-1903: Specially crafted image files could could allow remote attackers read unspecified memory when rotating images [bsc#962057] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-157=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): apache2-mod_php5-5.5.14-41.1 apache2-mod_php5-debuginfo-5.5.14-41.1 php5-5.5.14-41.1 php5-bcmath-5.5.14-41.1 php5-bcmath-debuginfo-5.5.14-41.1 php5-bz2-5.5.14-41.1 php5-bz2-debuginfo-5.5.14-41.1 php5-calendar-5.5.14-41.1 php5-calendar-debuginfo-5.5.14-41.1 php5-ctype-5.5.14-41.1 php5-ctype-debuginfo-5.5.14-41.1 php5-curl-5.5.14-41.1 php5-curl-debuginfo-5.5.14-41.1 php5-dba-5.5.14-41.1 php5-dba-debuginfo-5.5.14-41.1 php5-debuginfo-5.5.14-41.1 php5-debugsource-5.5.14-41.1 php5-devel-5.5.14-41.1 php5-dom-5.5.14-41.1 php5-dom-debuginfo-5.5.14-41.1 php5-enchant-5.5.14-41.1 php5-enchant-debuginfo-5.5.14-41.1 php5-exif-5.5.14-41.1 php5-exif-debuginfo-5.5.14-41.1 php5-fastcgi-5.5.14-41.1 php5-fastcgi-debuginfo-5.5.14-41.1 php5-fileinfo-5.5.14-41.1 php5-fileinfo-debuginfo-5.5.14-41.1 php5-firebird-5.5.14-41.1 php5-firebird-debuginfo-5.5.14-41.1 php5-fpm-5.5.14-41.1 php5-fpm-debuginfo-5.5.14-41.1 php5-ftp-5.5.14-41.1 php5-ftp-debuginfo-5.5.14-41.1 php5-gd-5.5.14-41.1 php5-gd-debuginfo-5.5.14-41.1 php5-gettext-5.5.14-41.1 php5-gettext-debuginfo-5.5.14-41.1 php5-gmp-5.5.14-41.1 php5-gmp-debuginfo-5.5.14-41.1 php5-iconv-5.5.14-41.1 php5-iconv-debuginfo-5.5.14-41.1 php5-imap-5.5.14-41.1 php5-imap-debuginfo-5.5.14-41.1 php5-intl-5.5.14-41.1 php5-intl-debuginfo-5.5.14-41.1 php5-json-5.5.14-41.1 php5-json-debuginfo-5.5.14-41.1 php5-ldap-5.5.14-41.1 php5-ldap-debuginfo-5.5.14-41.1 php5-mbstring-5.5.14-41.1 php5-mbstring-debuginfo-5.5.14-41.1 php5-mcrypt-5.5.14-41.1 php5-mcrypt-debuginfo-5.5.14-41.1 php5-mssql-5.5.14-41.1 php5-mssql-debuginfo-5.5.14-41.1 php5-mysql-5.5.14-41.1 php5-mysql-debuginfo-5.5.14-41.1 php5-odbc-5.5.14-41.1 php5-odbc-debuginfo-5.5.14-41.1 php5-opcache-5.5.14-41.1 php5-opcache-debuginfo-5.5.14-41.1 php5-openssl-5.5.14-41.1 php5-openssl-debuginfo-5.5.14-41.1 php5-pcntl-5.5.14-41.1 php5-pcntl-debuginfo-5.5.14-41.1 php5-pdo-5.5.14-41.1 php5-pdo-debuginfo-5.5.14-41.1 php5-pgsql-5.5.14-41.1 php5-pgsql-debuginfo-5.5.14-41.1 php5-phar-5.5.14-41.1 php5-phar-debuginfo-5.5.14-41.1 php5-posix-5.5.14-41.1 php5-posix-debuginfo-5.5.14-41.1 php5-pspell-5.5.14-41.1 php5-pspell-debuginfo-5.5.14-41.1 php5-readline-5.5.14-41.1 php5-readline-debuginfo-5.5.14-41.1 php5-shmop-5.5.14-41.1 php5-shmop-debuginfo-5.5.14-41.1 php5-snmp-5.5.14-41.1 php5-snmp-debuginfo-5.5.14-41.1 php5-soap-5.5.14-41.1 php5-soap-debuginfo-5.5.14-41.1 php5-sockets-5.5.14-41.1 php5-sockets-debuginfo-5.5.14-41.1 php5-sqlite-5.5.14-41.1 php5-sqlite-debuginfo-5.5.14-41.1 php5-suhosin-5.5.14-41.1 php5-suhosin-debuginfo-5.5.14-41.1 php5-sysvmsg-5.5.14-41.1 php5-sysvmsg-debuginfo-5.5.14-41.1 php5-sysvsem-5.5.14-41.1 php5-sysvsem-debuginfo-5.5.14-41.1 php5-sysvshm-5.5.14-41.1 php5-sysvshm-debuginfo-5.5.14-41.1 php5-tidy-5.5.14-41.1 php5-tidy-debuginfo-5.5.14-41.1 php5-tokenizer-5.5.14-41.1 php5-tokenizer-debuginfo-5.5.14-41.1 php5-wddx-5.5.14-41.1 php5-wddx-debuginfo-5.5.14-41.1 php5-xmlreader-5.5.14-41.1 php5-xmlreader-debuginfo-5.5.14-41.1 php5-xmlrpc-5.5.14-41.1 php5-xmlrpc-debuginfo-5.5.14-41.1 php5-xmlwriter-5.5.14-41.1 php5-xmlwriter-debuginfo-5.5.14-41.1 php5-xsl-5.5.14-41.1 php5-xsl-debuginfo-5.5.14-41.1 php5-zip-5.5.14-41.1 php5-zip-debuginfo-5.5.14-41.1 php5-zlib-5.5.14-41.1 php5-zlib-debuginfo-5.5.14-41.1 - openSUSE Leap 42.1 (noarch): php5-pear-5.5.14-41.1 References: https://www.suse.com/security/cve/CVE-2015-7803.html https://www.suse.com/security/cve/CVE-2016-1903.html https://bugzilla.suse.com/949961 https://bugzilla.suse.com/962057

1 0

openSUSE-RU-2016:0365-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0365-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update provides version 0.7.5 for spec-cleaner: - Version update to 0.7.5: * Replace jobs in install section too * Do not curlify gconf_schemas * Work with defines in sections not just as global declarations * Quote optflags properly when replacing RPM_OPT_FLAGS * Do not add empty line after oneline scriptlet - Version bump to 0.7.4: * Use license digger from format_spec_file * Provide optional subpkg providing format_spec_file OBS bindings Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-163=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): spec-cleaner-0.7.5-25.1 spec-cleaner-format_spec_file-0.7.5-25.1 References:

1 0

openSUSE-RU-2016:0364-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0364-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update provides version 0.7.5 for spec-cleaner: - Version update to 0.7.5: * Replace jobs in install section too * Do not curlify gconf_schemas * Work with defines in sections not just as global declarations * Quote optflags properly when replacing RPM_OPT_FLAGS * Do not add empty line after oneline scriptlet Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-162=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): spec-cleaner-0.7.5-3.1 spec-cleaner-format_spec_file-0.7.5-3.1 References:

1 0

openSUSE-SU-2016:0363-1: moderate: Security update for rubygem-actionpack-3_2, rubygem-activesupport-3_2
by opensuse-security＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Security Update: Security update for rubygem-actionpack-3_2, rubygem-activesupport-3_2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0363-1 Rating: moderate References: #963329 #963330 #963331 #963332 Cross-References: CVE-2015-7576 CVE-2015-7577 CVE-2016-0751 CVE-2016-0752 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for rubygem-actionpack-3_2, rubygem-activesupport-3_2 fixes the following issues: - CVE-2015-7576: Timing attack vulnerability in basic authentication in Action Controller (boo#963329) - CVE-2016-0752: directory traversal and information leak in Action View (boo#963332) - CVE-2016-0751: rubygem-actionpack: Object Leak DoS (boo#963331) - CVE-2015-7577: Nested attributes rejection proc bypass (boo#963330) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-160=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): rubygem-actionpack-3_2-3.2.17-3.7.1 rubygem-actionpack-3_2-doc-3.2.17-3.7.1 rubygem-activerecord-3_2-3.2.17-3.3.1 rubygem-activerecord-3_2-doc-3.2.17-3.3.1 rubygem-activesupport-3_2-3.2.17-2.6.1 rubygem-activesupport-3_2-doc-3.2.17-2.6.1 References: https://www.suse.com/security/cve/CVE-2015-7576.html https://www.suse.com/security/cve/CVE-2015-7577.html https://www.suse.com/security/cve/CVE-2016-0751.html https://www.suse.com/security/cve/CVE-2016-0752.html https://bugzilla.suse.com/963329 https://bugzilla.suse.com/963330 https://bugzilla.suse.com/963331 https://bugzilla.suse.com/963332

1 0

openSUSE-SU-2016:0362-1: Security update for openssl
by opensuse-security＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Security Update: Security update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0362-1 Rating: low References: #963415 Cross-References: CVE-2015-3197 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openssl fixes the following issues: - CVE-2015-3197: A malicious client can negotiate SSLv2 ciphers that have been disabled on the server and complete SSLv2 handshakes even if all SSLv2 ciphers have been disabled, provided that the SSLv2 protocol was not also disabled via SSL_OP_NO_SSLv2. (boo#963415) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-154=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libopenssl-devel-1.0.1k-2.30.1 libopenssl1_0_0-1.0.1k-2.30.1 libopenssl1_0_0-debuginfo-1.0.1k-2.30.1 libopenssl1_0_0-hmac-1.0.1k-2.30.1 openssl-1.0.1k-2.30.1 openssl-debuginfo-1.0.1k-2.30.1 openssl-debugsource-1.0.1k-2.30.1 - openSUSE 13.2 (x86_64): libopenssl-devel-32bit-1.0.1k-2.30.1 libopenssl1_0_0-32bit-1.0.1k-2.30.1 libopenssl1_0_0-debuginfo-32bit-1.0.1k-2.30.1 libopenssl1_0_0-hmac-32bit-1.0.1k-2.30.1 - openSUSE 13.2 (noarch): openssl-doc-1.0.1k-2.30.1 References: https://www.suse.com/security/cve/CVE-2015-3197.html https://bugzilla.suse.com/963415

1 0

openSUSE-RU-2016:0361-1: moderate: Recommended update for xf86-input-wacom
by maintenance＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Recommended Update: Recommended update for xf86-input-wacom ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0361-1 Rating: moderate References: #912589 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xf86-input-wacom fixes the following issues: - Add workaround for a Wacom Bamboo Pad (model CTH-300, usb vendor:product 056a:0319). This requires the option usbhid.quirks=0x056a:0x0319:0x40000000 on the kernel command line (boo#912589). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-155=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xf86-input-wacom-0.24.0-2.3.1 xf86-input-wacom-debuginfo-0.24.0-2.3.1 xf86-input-wacom-debugsource-0.24.0-2.3.1 xf86-input-wacom-devel-0.24.0-2.3.1 xf86-input-wacom-devel-debuginfo-0.24.0-2.3.1 References: https://bugzilla.suse.com/912589

1 0

openSUSE-SU-2016:0360-1: moderate: Security update for curl
by opensuse-security＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0360-1 Rating: moderate References: #934333 #936676 #962983 #962996 Cross-References: CVE-2016-0755 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for curl fixes the following issues: - CVE-2016-0755: libcurl would reuse NTLM-authenticated proxy connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer (bsc#962983) The following non-security bugs were fixed: - boo#936676: secure_getenv or __secure_getenv may not be detected correctly at build time The following tracked bugs only affect the test suite: - boo#962996: Expired cookie in test 46 caused test failures - boo#934333: Curl test suite was not run, is now enabled during build This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-152=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): curl-7.37.0-7.1 curl-debuginfo-7.37.0-7.1 curl-debugsource-7.37.0-7.1 libcurl-devel-7.37.0-7.1 libcurl4-7.37.0-7.1 libcurl4-debuginfo-7.37.0-7.1 - openSUSE Leap 42.1 (x86_64): libcurl-devel-32bit-7.37.0-7.1 libcurl4-32bit-7.37.0-7.1 libcurl4-debuginfo-32bit-7.37.0-7.1 References: https://www.suse.com/security/cve/CVE-2016-0755.html https://bugzilla.suse.com/934333 https://bugzilla.suse.com/936676 https://bugzilla.suse.com/962983 https://bugzilla.suse.com/962996

1 0

openSUSE-FU-2016:0359-1: moderate: Add nginx to SLE 12 Backports
by maintenance＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Feature Update: Add nginx to SLE 12 Backports ______________________________________________________________________________ Announcement ID: openSUSE-FU-2016:0359-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 feature fixes can now be installed. Description: This update provides the nginx webserver 1.8.1 to the SUSE Linux Enterprise 12 Backports repository. Patch Instructions: To install this openSUSE Feature Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-150=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): nginx-1.8.1-4.1 nginx-debuginfo-1.8.1-4.1 nginx-debugsource-1.8.1-4.1 References:

1 0

openSUSE-RU-2016:0358-1: moderate: Recommended update for digikam
by maintenance＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Recommended Update: Recommended update for digikam ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0358-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update provides version 4.14.0 for digikam. - Users can now import images from the device notifier applet in Plasma5 A number of upstream bugs were fixed. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-149=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): digikam-4.14.0-8.1 digikam-debuginfo-4.14.0-8.1 digikam-debugsource-4.14.0-8.1 digikam-libs-4.14.0-8.1 digikam-libs-debuginfo-4.14.0-8.1 digikam-plugin-color-4.14.0-8.1 digikam-plugin-color-debuginfo-4.14.0-8.1 digikam-plugin-decorate-4.14.0-8.1 digikam-plugin-decorate-debuginfo-4.14.0-8.1 digikam-plugin-enhance-4.14.0-8.1 digikam-plugin-enhance-debuginfo-4.14.0-8.1 digikam-plugin-fxfilters-4.14.0-8.1 digikam-plugin-fxfilters-debuginfo-4.14.0-8.1 digikam-plugin-transform-4.14.0-8.1 digikam-plugin-transform-debuginfo-4.14.0-8.1 kipi-plugins-4.14.0-8.1 kipi-plugins-acquireimage-4.14.0-8.1 kipi-plugins-acquireimage-debuginfo-4.14.0-8.1 kipi-plugins-debuginfo-4.14.0-8.1 kipi-plugins-geolocation-4.14.0-8.1 kipi-plugins-geolocation-debuginfo-4.14.0-8.1 - openSUSE Leap 42.1 (noarch): digikam-doc-4.14.0-8.1 digikam-lang-4.14.0-8.1 kipi-plugins-lang-4.14.0-8.1 References:

1 0

openSUSE-SU-2016:0357-1: moderate: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0357-1 Rating: moderate References: #964024 Cross-References: CVE-2016-1927 CVE-2016-2038 CVE-2016-2039 CVE-2016-2040 CVE-2016-2041 CVE-2016-2042 CVE-2016-2043 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update to phpMyAdmin 4.4.15.4 fixes the following issues (boo#964024) * CVE-2016-2038: Multiple full path disclosure vulnerabilities * CVE-2016-2039: Unsafe generation of XSRF/CSRF token * CVE-2016-2040: Multiple XSS vulnerabilities * CVE-2016-1927: Insecure password generation in JavaScript * CVE-2016-2041: Unsafe comparison of XSRF/CSRF token * CVE-2016-2042: Multiple full path disclosure vulnerabilities * CVE-2016-2043: XSS vulnerability in normalization page Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-151=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-151=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): phpMyAdmin-4.4.15.4-13.1 - openSUSE 13.2 (noarch): phpMyAdmin-4.4.15.4-27.1 References: https://www.suse.com/security/cve/CVE-2016-1927.html https://www.suse.com/security/cve/CVE-2016-2038.html https://www.suse.com/security/cve/CVE-2016-2039.html https://www.suse.com/security/cve/CVE-2016-2040.html https://www.suse.com/security/cve/CVE-2016-2041.html https://www.suse.com/security/cve/CVE-2016-2042.html https://www.suse.com/security/cve/CVE-2016-2043.html https://bugzilla.suse.com/964024

1 0

openSUSE-SU-2016:0356-1: important: Security update for rubygem-rails-html-sanitizer
by opensuse-security＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Security Update: Security update for rubygem-rails-html-sanitizer ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0356-1 Rating: important References: #963326 #963327 #963328 Cross-References: CVE-2015-7578 CVE-2015-7579 CVE-2015-7580 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for rubygem-rails-html-sanitizer fixes the following issues: - CVE-2015-7579: XSS vulnerability in rails-html-sanitizer (bsc#963327) - CVE-2015-7578: XSS vulnerability via attributes (bsc#963326) - CVE-2015-7580: XSS via whitelist sanitizer (bsc#963328) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-148=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ruby2.1-rubygem-rails-html-sanitizer-1.0.2-5.1 ruby2.1-rubygem-rails-html-sanitizer-doc-1.0.2-5.1 ruby2.1-rubygem-rails-html-sanitizer-testsuite-1.0.2-5.1 References: https://www.suse.com/security/cve/CVE-2015-7578.html https://www.suse.com/security/cve/CVE-2015-7579.html https://www.suse.com/security/cve/CVE-2015-7580.html https://bugzilla.suse.com/963326 https://bugzilla.suse.com/963327 https://bugzilla.suse.com/963328

1 0

openSUSE-RU-2016:0355-1: moderate: timezone update 2016a
by maintenance＠opensuse.org 07 Feb '16

07 Feb '16

openSUSE Recommended Update: timezone update 2016a ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0355-1 Rating: moderate References: #963921 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This patch updates timezone definitions to version 2016a to reflect international changes for timezones. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-147=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): timezone-2016a-40.1 timezone-debuginfo-2016a-40.1 timezone-debugsource-2016a-40.1 - openSUSE 13.1 (noarch): timezone-java-2016a-40.1 References: https://bugzilla.suse.com/963921

1 0

openSUSE-RU-2016:0345-1: moderate: Recommended update for timezone
by maintenance＠opensuse.org 05 Feb '16

05 Feb '16

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0345-1 Rating: moderate References: #963921 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for timezone fixes the following issues: - timezone update 2016a (boo#963921) + America/Cayman will not observe DTS this year + Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00. + Asia/Tehran now has DST predictions for the year 2038 and later + America/Metlakatla switched from PST all year to AKST/AKDT on 2015-11-01 at 02:00. + America/Santa_Isabel has been removed, and replaced with a backward compatibility link to America/Tijuana. + Asia/Karachi's two transition times in 2002 were off by a minute. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-146=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): timezone-2016a-35.1 timezone-debuginfo-2016a-35.1 timezone-debugsource-2016a-35.1 - openSUSE 13.2 (noarch): timezone-java-2016a-35.1 References: https://bugzilla.suse.com/963921

1 0

openSUSE-RU-2016:0332-1: moderate: Recommended update for python-websocket-client
by maintenance＠opensuse.org 04 Feb '16

04 Feb '16

openSUSE Recommended Update: Recommended update for python-websocket-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0332-1 Rating: moderate References: #954486 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-websocket-client fixes the following issues: - Update to 0.32.0 (boo#954486): - Fix http proxy bug - Avoid deprecated BaseException.message - Add travis builds - Fix wsdump to work with piped input - Fix output of wsdump.py with python3 - Add raw mode to wsdump.py Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-143=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): python-websocket-client-0.32.0-4.1 python-websocket-client-test-0.32.0-4.1 References: https://bugzilla.suse.com/954486

1 0

openSUSE-RU-2016:0331-1: moderate: Recommended update for fontforge
by maintenance＠opensuse.org 04 Feb '16

04 Feb '16

openSUSE Recommended Update: Recommended update for fontforge ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0331-1 Rating: moderate References: #963023 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for fontforge fixes the following issue: boo#963023: do not crash on invalid input data (when eof reached) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-145=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): fontforge-20120731-12.3.1 fontforge-debuginfo-20120731-12.3.1 fontforge-debugsource-20120731-12.3.1 fontforge-devel-20120731-12.3.1 - openSUSE 13.2 (noarch): fontforge-doc-20120731-12.3.1 References: https://bugzilla.suse.com/963023

1 0

openSUSE-RU-2016:0330-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 04 Feb '16

04 Feb '16

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0330-1 Rating: moderate References: #962295 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xorg-x11-server fixes the following issues: - Disable rotation and other transformation from GPU screens (boo#962295). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-140=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-140=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xorg-x11-server-7.6_1.17.2-18.1 xorg-x11-server-debuginfo-7.6_1.17.2-18.1 xorg-x11-server-debugsource-7.6_1.17.2-18.1 xorg-x11-server-extra-7.6_1.17.2-18.1 xorg-x11-server-extra-debuginfo-7.6_1.17.2-18.1 xorg-x11-server-sdk-7.6_1.17.2-18.1 xorg-x11-server-source-7.6_1.17.2-18.1 - openSUSE 13.2 (i586 x86_64): xorg-x11-server-7.6_1.16.1-34.1 xorg-x11-server-debuginfo-7.6_1.16.1-34.1 xorg-x11-server-debugsource-7.6_1.16.1-34.1 xorg-x11-server-extra-7.6_1.16.1-34.1 xorg-x11-server-extra-debuginfo-7.6_1.16.1-34.1 xorg-x11-server-sdk-7.6_1.16.1-34.1 References: https://bugzilla.suse.com/962295

1 0

openSUSE-RU-2016:0328-1: moderate: Recommended update for clusterssh
by maintenance＠opensuse.org 04 Feb '16

04 Feb '16

openSUSE Recommended Update: Recommended update for clusterssh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0328-1 Rating: moderate References: #956316 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for clusterssh fixes the following issues: - Resolve an issue where windows become unmoveable after executing cssh in KDE5. (boo#956316) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-141=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-141=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clusterssh-4.02.01-7.1 - openSUSE 13.2 (noarch): clusterssh-4.02.01-4.3.1 References: https://bugzilla.suse.com/956316

1 0

openSUSE-RU-2016:0327-1: moderate: Recommended update for wine
by maintenance＠opensuse.org 04 Feb '16

04 Feb '16

openSUSE Recommended Update: Recommended update for wine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0327-1 Rating: moderate References: #960661 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for wine fixes the following issues: - Updated to 1.8 Release (boo#960661) This release represents 17 months of development effort and around 13,000 individual changes. The main highlights are the implementation of DirectWrite and Direct2D, and the new Pulse Audio driver. + for a detailed description of all changes, please refer to https://www.winehq.org/announce/1.8 - updated winetricks - updated some buildrequires - disable non working gpg checking Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-144=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-144=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): wine-1.8-3.1 wine-debuginfo-1.8-3.1 wine-debugsource-1.8-3.1 wine-devel-1.8-3.1 wine-devel-debuginfo-1.8-3.1 - openSUSE Leap 42.1 (x86_64): wine-32bit-1.8-3.1 wine-debuginfo-32bit-1.8-3.1 wine-devel-32bit-1.8-3.1 wine-devel-debuginfo-32bit-1.8-3.1 - openSUSE 13.2 (i586 x86_64): wine-1.8-3.1 wine-debuginfo-1.8-3.1 wine-debugsource-1.8-3.1 wine-devel-1.8-3.1 wine-devel-debuginfo-1.8-3.1 - openSUSE 13.2 (x86_64): wine-32bit-1.8-3.1 wine-debuginfo-32bit-1.8-3.1 wine-devel-32bit-1.8-3.1 wine-devel-debuginfo-32bit-1.8-3.1 References: https://bugzilla.suse.com/960661

1 0