February 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:0326-1: moderate: Recommended update for release-notes-openSUSE
by maintenance＠opensuse.org 04 Feb '16

04 Feb '16

openSUSE Recommended Update: Recommended update for release-notes-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0326-1 Rating: moderate References: #953985 #956173 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for release-notes-openSUSE fixes the following issues: - Added entries: + Btrfs disk space leak (boo#953985) + No screensaver in KDE (boo#956173) - Changed entries + Numerous spelling, grammar, punctuation fixes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-142=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): release-notes-openSUSE-42.1.20160127-6.1 References: https://bugzilla.suse.com/953985 https://bugzilla.suse.com/956173

1 0

openSUSE-RU-2016:0320-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 03 Feb '16

03 Feb '16

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0320-1 Rating: moderate References: #737690 #742774 #750845 #818044 #838475 #841544 #849870 #852015 #852021 #852232 #853293 #854884 #856389 #856392 #856858 #857204 #858864 #859072 #859365 #860574 #860937 #861316 #861489 #863217 #864745 #864904 #865834 #866732 #866933 #867128 #867663 #867664 #867840 #868019 #868230 #868439 #868931 #869142 #869603 #872929 #873432 #873444 #874665 #875502 #876587 #876694 #877021 #877674 #878525 #880438 #880732 #881125 #881559 #881942 #882393 #882714 #883565 #884271 #884403 #885232 #885288 #886211 #886599 #886852 #888178 #888215 #888612 #889297 #889357 #890977 #892096 #892162 #892300 #893797 #895087 #896664 #897799 #897801 #897803 #898233 #898240 #898432 #900558 #901481 #902240 #902901 #903009 #903963 #904214 #904517 #904828 #905550 #906709 #906900 #907318 #907393 #908476 #909358 #910643 #911347 #912030 #912334 #913517 #916420 #918118 #919095 #920195 #921831 #921898 #921920 #926169 #927250 #927457 #928265 #931388 #932284 #933365 #933512 #933521 #933533 #934077 #934901 #937512 #937900 #938908 #939571 #940264 #941576 #944132 #944799 #945282 #947212 #948458 #948555 #948705 #949574 #949683 #949739 #950510 #951265 #951663 #953241 #954336 #954781 #955635 #961576 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 146 recommended fixes can now be installed. Description: This recommended update provides version 210 of systemd with various fixes and improvements and aligns the sources with the one from openSUSE 13.2, to make openSUSE 13.1-Evergreen-maintenance possible. For a detailed description of all changes please refer to the changes file. (boo#955635) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2016-137=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libgudev-1_0-0-210-40.1 libgudev-1_0-0-debuginfo-210-40.1 libgudev-1_0-devel-210-40.1 libudev-devel-210-40.1 libudev-mini-devel-210-40.1 libudev-mini1-210-40.1 libudev-mini1-debuginfo-210-40.1 libudev1-210-40.1 libudev1-debuginfo-210-40.1 nss-myhostname-210-40.1 nss-myhostname-debuginfo-210-40.1 systemd-210-40.1 systemd-debuginfo-210-40.1 systemd-debugsource-210-40.1 systemd-devel-210-40.1 systemd-journal-gateway-210-40.1 systemd-journal-gateway-debuginfo-210-40.1 systemd-logger-210-40.1 systemd-mini-210-40.1 systemd-mini-debuginfo-210-40.1 systemd-mini-debugsource-210-40.1 systemd-mini-devel-210-40.1 systemd-mini-sysvinit-210-40.1 systemd-sysvinit-210-40.1 typelib-1_0-GUdev-1_0-210-40.1 udev-210-40.1 udev-debuginfo-210-40.1 udev-mini-210-40.1 udev-mini-debuginfo-210-40.1 - openSUSE 13.1 (x86_64): libgudev-1_0-0-32bit-210-40.1 libgudev-1_0-0-debuginfo-32bit-210-40.1 libudev1-32bit-210-40.1 libudev1-debuginfo-32bit-210-40.1 nss-myhostname-32bit-210-40.1 nss-myhostname-debuginfo-32bit-210-40.1 systemd-32bit-210-40.1 systemd-debuginfo-32bit-210-40.1 - openSUSE 13.1 (noarch): systemd-bash-completion-210-40.1 References: https://bugzilla.suse.com/737690 https://bugzilla.suse.com/742774 https://bugzilla.suse.com/750845 https://bugzilla.suse.com/818044 https://bugzilla.suse.com/838475 https://bugzilla.suse.com/841544 https://bugzilla.suse.com/849870 https://bugzilla.suse.com/852015 https://bugzilla.suse.com/852021 https://bugzilla.suse.com/852232 https://bugzilla.suse.com/853293 https://bugzilla.suse.com/854884 https://bugzilla.suse.com/856389 https://bugzilla.suse.com/856392 https://bugzilla.suse.com/856858 https://bugzilla.suse.com/857204 https://bugzilla.suse.com/858864 https://bugzilla.suse.com/859072 https://bugzilla.suse.com/859365 https://bugzilla.suse.com/860574 https://bugzilla.suse.com/860937 https://bugzilla.suse.com/861316 https://bugzilla.suse.com/861489 https://bugzilla.suse.com/863217 https://bugzilla.suse.com/864745 https://bugzilla.suse.com/864904 https://bugzilla.suse.com/865834 https://bugzilla.suse.com/866732 https://bugzilla.suse.com/866933 https://bugzilla.suse.com/867128 https://bugzilla.suse.com/867663 https://bugzilla.suse.com/867664 https://bugzilla.suse.com/867840 https://bugzilla.suse.com/868019 https://bugzilla.suse.com/868230 https://bugzilla.suse.com/868439 https://bugzilla.suse.com/868931 https://bugzilla.suse.com/869142 https://bugzilla.suse.com/869603 https://bugzilla.suse.com/872929 https://bugzilla.suse.com/873432 https://bugzilla.suse.com/873444 https://bugzilla.suse.com/874665 https://bugzilla.suse.com/875502 https://bugzilla.suse.com/876587 https://bugzilla.suse.com/876694 https://bugzilla.suse.com/877021 https://bugzilla.suse.com/877674 https://bugzilla.suse.com/878525 https://bugzilla.suse.com/880438 https://bugzilla.suse.com/880732 https://bugzilla.suse.com/881125 https://bugzilla.suse.com/881559 https://bugzilla.suse.com/881942 https://bugzilla.suse.com/882393 https://bugzilla.suse.com/882714 https://bugzilla.suse.com/883565 https://bugzilla.suse.com/884271 https://bugzilla.suse.com/884403 https://bugzilla.suse.com/885232 https://bugzilla.suse.com/885288 https://bugzilla.suse.com/886211 https://bugzilla.suse.com/886599 https://bugzilla.suse.com/886852 https://bugzilla.suse.com/888178 https://bugzilla.suse.com/888215 https://bugzilla.suse.com/888612 https://bugzilla.suse.com/889297 https://bugzilla.suse.com/889357 https://bugzilla.suse.com/890977 https://bugzilla.suse.com/892096 https://bugzilla.suse.com/892162 https://bugzilla.suse.com/892300 https://bugzilla.suse.com/893797 https://bugzilla.suse.com/895087 https://bugzilla.suse.com/896664 https://bugzilla.suse.com/897799 https://bugzilla.suse.com/897801 https://bugzilla.suse.com/897803 https://bugzilla.suse.com/898233 https://bugzilla.suse.com/898240 https://bugzilla.suse.com/898432 https://bugzilla.suse.com/900558 https://bugzilla.suse.com/901481 https://bugzilla.suse.com/902240 https://bugzilla.suse.com/902901 https://bugzilla.suse.com/903009 https://bugzilla.suse.com/903963 https://bugzilla.suse.com/904214 https://bugzilla.suse.com/904517 https://bugzilla.suse.com/904828 https://bugzilla.suse.com/905550 https://bugzilla.suse.com/906709 https://bugzilla.suse.com/906900 https://bugzilla.suse.com/907318 https://bugzilla.suse.com/907393 https://bugzilla.suse.com/908476 https://bugzilla.suse.com/909358 https://bugzilla.suse.com/910643 https://bugzilla.suse.com/911347 https://bugzilla.suse.com/912030 https://bugzilla.suse.com/912334 https://bugzilla.suse.com/913517 https://bugzilla.suse.com/916420 https://bugzilla.suse.com/918118 https://bugzilla.suse.com/919095 https://bugzilla.suse.com/920195 https://bugzilla.suse.com/921831 https://bugzilla.suse.com/921898 https://bugzilla.suse.com/921920 https://bugzilla.suse.com/926169 https://bugzilla.suse.com/927250 https://bugzilla.suse.com/927457 https://bugzilla.suse.com/928265 https://bugzilla.suse.com/931388 https://bugzilla.suse.com/932284 https://bugzilla.suse.com/933365 https://bugzilla.suse.com/933512 https://bugzilla.suse.com/933521 https://bugzilla.suse.com/933533 https://bugzilla.suse.com/934077 https://bugzilla.suse.com/934901 https://bugzilla.suse.com/937512 https://bugzilla.suse.com/937900 https://bugzilla.suse.com/938908 https://bugzilla.suse.com/939571 https://bugzilla.suse.com/940264 https://bugzilla.suse.com/941576 https://bugzilla.suse.com/944132 https://bugzilla.suse.com/944799 https://bugzilla.suse.com/945282 https://bugzilla.suse.com/947212 https://bugzilla.suse.com/948458 https://bugzilla.suse.com/948555 https://bugzilla.suse.com/948705 https://bugzilla.suse.com/949574 https://bugzilla.suse.com/949683 https://bugzilla.suse.com/949739 https://bugzilla.suse.com/950510 https://bugzilla.suse.com/951265 https://bugzilla.suse.com/951663 https://bugzilla.suse.com/953241 https://bugzilla.suse.com/954336 https://bugzilla.suse.com/954781 https://bugzilla.suse.com/955635 https://bugzilla.suse.com/961576

1 0

openSUSE-SU-2016:0318-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 03 Feb '16

03 Feb '16

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0318-1 Rating: important References: #814440 #906545 #912202 #921949 #937969 #937970 #938706 #944296 #945825 #949936 #950998 #951627 #951638 #952384 #952579 #952976 #953527 #954138 #954404 #955224 #955354 #955422 #956708 #956934 #957988 #957990 #958504 #958510 #958886 #958951 #959190 #959399 #959568 #960839 #961509 #961739 #962075 Cross-References: CVE-2014-8989 CVE-2014-9529 CVE-2015-5157 CVE-2015-5307 CVE-2015-6937 CVE-2015-7550 CVE-2015-7799 CVE-2015-7885 CVE-2015-7990 CVE-2015-8104 CVE-2015-8215 CVE-2015-8543 CVE-2015-8550 CVE-2015-8551 CVE-2015-8552 CVE-2015-8569 CVE-2015-8575 CVE-2015-8767 CVE-2016-0728 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves 19 vulnerabilities and has 18 fixes is now available. Description: The openSUSE 13.2 kernel was updated to receive various security and bugfixes. Following security bugs were fixed: - CVE-2016-0728: A reference leak in keyring handling with join_session_keyring() could lead to local attackers gain root privileges. (bsc#962075). - CVE-2015-7550: A local user could have triggered a race between read and revoke in keyctl (bnc#958951). - CVE-2015-8569: The (1) pptp_bind and (2) pptp_connect functions in drivers/net/ppp/pptp.c in the Linux kernel did not verify an address length, which allowed local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted application (bnc#959190). - CVE-2015-8543: The networking implementation in the Linux kernel did not validate protocol identifiers for certain protocol families, which allowed local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application (bnc#958886). - CVE-2014-8989: The Linux kernel did not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allowed local users to bypass intended file permissions by leveraging a POSIX ACL containing an entry for the group category that is more restrictive than the entry for the other category, aka a "negative groups" issue, related to kernel/groups.c, kernel/uid16.c, and kernel/user_namespace.c (bnc#906545). - CVE-2015-5157: arch/x86/entry/entry_64.S in the Linux kernel on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges by triggering an NMI (bnc#937969). - CVE-2015-7799: The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 did not ensure that certain slot numbers are valid, which allowed local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call (bnc#949936). - CVE-2015-8104: The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allowed guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c (bnc#954404). - CVE-2015-5307: The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allowed guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c (bnc#953527). - CVE-2014-9529: Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel allowed local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other impact via keyctl commands that trigger access to a key structure member during garbage collection of a key (bnc#912202). - CVE-2015-7990: Race condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6937 (bnc#952384 953052). - CVE-2015-6937: The __rds_conn_create function in net/rds/connection.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound (bnc#945825). - CVE-2015-7885: The dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in the Linux kernel through 4.3.3 did not initialize a certain structure member, which allowed local users to obtain sensitive information from kernel memory via a crafted application (bnc#951627). - CVE-2015-8215: net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel did not validate attempted changes to the MTU value, which allowed context-dependent attackers to cause a denial of service (packet loss) via a value that is (1) smaller than the minimum compliant value or (2) larger than the MTU of an interface, as demonstrated by a Router Advertisement (RA) message that is not validated by a daemon, a different vulnerability than CVE-2015-0272. NOTE: the scope of CVE-2015-0272 is limited to the NetworkManager product (bnc#955354). - CVE-2015-8767: A case can occur when sctp_accept() is called by the user during a heartbeat timeout event after the 4-way handshake. Since sctp_assoc_migrate() changes both assoc->base.sk and assoc->ep, the bh_sock_lock in sctp_generate_heartbeat_event() will be taken with the listening socket but released with the new association socket. The result is a deadlock on any future attempts to take the listening socket lock. (bsc#961509) - CVE-2015-8575: Validate socket address length in sco_sock_bind() to prevent information leak (bsc#959399). - CVE-2015-8551, CVE-2015-8552: xen/pciback: For XEN_PCI_OP_disable_msi[|x] only disable if device has MSI(X) enabled (bsc#957990). - CVE-2015-8550: Compiler optimizations in the XEN PV backend drivers could have lead to double fetch vulnerabilities, causing denial of service or arbitrary code execution (depending on the configuration) (bsc#957988). The following non-security bugs were fixed: - ALSA: hda - Disable 64bit address for Creative HDA controllers (bnc#814440). - ALSA: hda - Fix noise problems on Thinkpad T440s (boo#958504). - Input: aiptek - fix crash on detecting device without endpoints (bnc#956708). - KEYS: Make /proc/keys unconditional if CONFIG_KEYS=y (boo#956934). - KVM: x86: update masterclock values on TSC writes (bsc#961739). - NFS: Fix a NULL pointer dereference of migration recovery ops for v4.2 client (bsc#960839). - apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task (bsc#921949). - blktap: also call blkif_disconnect() when frontend switched to closed (bsc#952976). - blktap: refine mm tracking (bsc#952976). - cdrom: Random writing support for BD-RE media (bnc#959568). - genksyms: Handle string literals with spaces in reference files (bsc#958510). - ipv4: Do not increase PMTU with Datagram Too Big message (bsc#955224). - ipv6: distinguish frag queues by device for multicast and link-local packets (bsc#955422). - ipv6: fix tunnel error handling (bsc#952579). - route: Use ipv4_mtu instead of raw rt_pmtu (bsc#955224). - uas: Add response iu handling (bnc#954138). - usbvision fix overflow of interfaces array (bnc#950998). - x86/evtchn: make use of PHYSDEVOP_map_pirq. - xen/pciback: Do not allow MSI-X ops if PCI_COMMAND_MEMORY is not set (bsc#957990 XSA-157). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-136=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i686 x86_64): kernel-debug-3.16.7-32.1 kernel-debug-base-3.16.7-32.1 kernel-debug-base-debuginfo-3.16.7-32.1 kernel-debug-debuginfo-3.16.7-32.1 kernel-debug-debugsource-3.16.7-32.1 kernel-debug-devel-3.16.7-32.1 kernel-debug-devel-debuginfo-3.16.7-32.1 kernel-desktop-3.16.7-32.1 kernel-desktop-base-3.16.7-32.1 kernel-desktop-base-debuginfo-3.16.7-32.1 kernel-desktop-debuginfo-3.16.7-32.1 kernel-desktop-debugsource-3.16.7-32.1 kernel-desktop-devel-3.16.7-32.1 kernel-ec2-base-debuginfo-3.16.7-32.1 kernel-ec2-debuginfo-3.16.7-32.1 kernel-ec2-debugsource-3.16.7-32.1 kernel-vanilla-3.16.7-32.1 kernel-vanilla-debuginfo-3.16.7-32.1 kernel-vanilla-debugsource-3.16.7-32.1 kernel-vanilla-devel-3.16.7-32.1 kernel-xen-3.16.7-32.1 kernel-xen-base-3.16.7-32.1 kernel-xen-base-debuginfo-3.16.7-32.1 kernel-xen-debuginfo-3.16.7-32.1 kernel-xen-debugsource-3.16.7-32.1 kernel-xen-devel-3.16.7-32.1 - openSUSE 13.2 (i586 x86_64): bbswitch-0.8-3.15.1 bbswitch-debugsource-0.8-3.15.1 bbswitch-kmp-default-0.8_k3.16.7_32-3.15.1 bbswitch-kmp-default-debuginfo-0.8_k3.16.7_32-3.15.1 bbswitch-kmp-desktop-0.8_k3.16.7_32-3.15.1 bbswitch-kmp-desktop-debuginfo-0.8_k3.16.7_32-3.15.1 bbswitch-kmp-xen-0.8_k3.16.7_32-3.15.1 bbswitch-kmp-xen-debuginfo-0.8_k3.16.7_32-3.15.1 cloop-2.639-14.15.1 cloop-debuginfo-2.639-14.15.1 cloop-debugsource-2.639-14.15.1 cloop-kmp-default-2.639_k3.16.7_32-14.15.1 cloop-kmp-default-debuginfo-2.639_k3.16.7_32-14.15.1 cloop-kmp-desktop-2.639_k3.16.7_32-14.15.1 cloop-kmp-desktop-debuginfo-2.639_k3.16.7_32-14.15.1 cloop-kmp-xen-2.639_k3.16.7_32-14.15.1 cloop-kmp-xen-debuginfo-2.639_k3.16.7_32-14.15.1 crash-7.0.8-15.1 crash-debuginfo-7.0.8-15.1 crash-debugsource-7.0.8-15.1 crash-devel-7.0.8-15.1 crash-doc-7.0.8-15.1 crash-eppic-7.0.8-15.1 crash-eppic-debuginfo-7.0.8-15.1 crash-gcore-7.0.8-15.1 crash-gcore-debuginfo-7.0.8-15.1 crash-kmp-default-7.0.8_k3.16.7_32-15.1 crash-kmp-default-debuginfo-7.0.8_k3.16.7_32-15.1 crash-kmp-desktop-7.0.8_k3.16.7_32-15.1 crash-kmp-desktop-debuginfo-7.0.8_k3.16.7_32-15.1 crash-kmp-xen-7.0.8_k3.16.7_32-15.1 crash-kmp-xen-debuginfo-7.0.8_k3.16.7_32-15.1 hdjmod-debugsource-1.28-18.16.1 hdjmod-kmp-default-1.28_k3.16.7_32-18.16.1 hdjmod-kmp-default-debuginfo-1.28_k3.16.7_32-18.16.1 hdjmod-kmp-desktop-1.28_k3.16.7_32-18.16.1 hdjmod-kmp-desktop-debuginfo-1.28_k3.16.7_32-18.16.1 hdjmod-kmp-xen-1.28_k3.16.7_32-18.16.1 hdjmod-kmp-xen-debuginfo-1.28_k3.16.7_32-18.16.1 ipset-6.23-15.1 ipset-debuginfo-6.23-15.1 ipset-debugsource-6.23-15.1 ipset-devel-6.23-15.1 ipset-kmp-default-6.23_k3.16.7_32-15.1 ipset-kmp-default-debuginfo-6.23_k3.16.7_32-15.1 ipset-kmp-desktop-6.23_k3.16.7_32-15.1 ipset-kmp-desktop-debuginfo-6.23_k3.16.7_32-15.1 ipset-kmp-xen-6.23_k3.16.7_32-15.1 ipset-kmp-xen-debuginfo-6.23_k3.16.7_32-15.1 kernel-default-3.16.7-32.1 kernel-default-base-3.16.7-32.1 kernel-default-base-debuginfo-3.16.7-32.1 kernel-default-debuginfo-3.16.7-32.1 kernel-default-debugsource-3.16.7-32.1 kernel-default-devel-3.16.7-32.1 kernel-ec2-3.16.7-32.1 kernel-ec2-base-3.16.7-32.1 kernel-ec2-devel-3.16.7-32.1 kernel-obs-build-3.16.7-32.2 kernel-obs-build-debugsource-3.16.7-32.2 kernel-obs-qa-3.16.7-32.1 kernel-obs-qa-xen-3.16.7-32.1 kernel-syms-3.16.7-32.1 libipset3-6.23-15.1 libipset3-debuginfo-6.23-15.1 pcfclock-0.44-260.15.1 pcfclock-debuginfo-0.44-260.15.1 pcfclock-debugsource-0.44-260.15.1 pcfclock-kmp-default-0.44_k3.16.7_32-260.15.1 pcfclock-kmp-default-debuginfo-0.44_k3.16.7_32-260.15.1 pcfclock-kmp-desktop-0.44_k3.16.7_32-260.15.1 pcfclock-kmp-desktop-debuginfo-0.44_k3.16.7_32-260.15.1 python-virtualbox-4.3.34-37.1 python-virtualbox-debuginfo-4.3.34-37.1 vhba-kmp-debugsource-20140629-2.15.1 vhba-kmp-default-20140629_k3.16.7_32-2.15.1 vhba-kmp-default-debuginfo-20140629_k3.16.7_32-2.15.1 vhba-kmp-desktop-20140629_k3.16.7_32-2.15.1 vhba-kmp-desktop-debuginfo-20140629_k3.16.7_32-2.15.1 vhba-kmp-xen-20140629_k3.16.7_32-2.15.1 vhba-kmp-xen-debuginfo-20140629_k3.16.7_32-2.15.1 virtualbox-4.3.34-37.1 virtualbox-debuginfo-4.3.34-37.1 virtualbox-debugsource-4.3.34-37.1 virtualbox-devel-4.3.34-37.1 virtualbox-guest-kmp-default-4.3.34_k3.16.7_32-37.1 virtualbox-guest-kmp-default-debuginfo-4.3.34_k3.16.7_32-37.1 virtualbox-guest-kmp-desktop-4.3.34_k3.16.7_32-37.1 virtualbox-guest-kmp-desktop-debuginfo-4.3.34_k3.16.7_32-37.1 virtualbox-guest-tools-4.3.34-37.1 virtualbox-guest-tools-debuginfo-4.3.34-37.1 virtualbox-guest-x11-4.3.34-37.1 virtualbox-guest-x11-debuginfo-4.3.34-37.1 virtualbox-host-kmp-default-4.3.34_k3.16.7_32-37.1 virtualbox-host-kmp-default-debuginfo-4.3.34_k3.16.7_32-37.1 virtualbox-host-kmp-desktop-4.3.34_k3.16.7_32-37.1 virtualbox-host-kmp-desktop-debuginfo-4.3.34_k3.16.7_32-37.1 virtualbox-qt-4.3.34-37.1 virtualbox-qt-debuginfo-4.3.34-37.1 virtualbox-websrv-4.3.34-37.1 virtualbox-websrv-debuginfo-4.3.34-37.1 xen-debugsource-4.4.3_08-38.1 xen-devel-4.4.3_08-38.1 xen-libs-4.4.3_08-38.1 xen-libs-debuginfo-4.4.3_08-38.1 xen-tools-domU-4.4.3_08-38.1 xen-tools-domU-debuginfo-4.4.3_08-38.1 xtables-addons-2.6-15.1 xtables-addons-debuginfo-2.6-15.1 xtables-addons-debugsource-2.6-15.1 xtables-addons-kmp-default-2.6_k3.16.7_32-15.1 xtables-addons-kmp-default-debuginfo-2.6_k3.16.7_32-15.1 xtables-addons-kmp-desktop-2.6_k3.16.7_32-15.1 xtables-addons-kmp-desktop-debuginfo-2.6_k3.16.7_32-15.1 xtables-addons-kmp-xen-2.6_k3.16.7_32-15.1 xtables-addons-kmp-xen-debuginfo-2.6_k3.16.7_32-15.1 - openSUSE 13.2 (noarch): kernel-devel-3.16.7-32.1 kernel-docs-3.16.7-32.2 kernel-macros-3.16.7-32.1 kernel-source-3.16.7-32.1 kernel-source-vanilla-3.16.7-32.1 virtualbox-guest-desktop-icons-4.3.34-37.1 virtualbox-host-source-4.3.34-37.1 - openSUSE 13.2 (x86_64): xen-4.4.3_08-38.1 xen-doc-html-4.4.3_08-38.1 xen-kmp-default-4.4.3_08_k3.16.7_32-38.1 xen-kmp-default-debuginfo-4.4.3_08_k3.16.7_32-38.1 xen-kmp-desktop-4.4.3_08_k3.16.7_32-38.1 xen-kmp-desktop-debuginfo-4.4.3_08_k3.16.7_32-38.1 xen-libs-32bit-4.4.3_08-38.1 xen-libs-debuginfo-32bit-4.4.3_08-38.1 xen-tools-4.4.3_08-38.1 xen-tools-debuginfo-4.4.3_08-38.1 - openSUSE 13.2 (i686): kernel-pae-3.16.7-32.1 kernel-pae-base-3.16.7-32.1 kernel-pae-base-debuginfo-3.16.7-32.1 kernel-pae-debuginfo-3.16.7-32.1 kernel-pae-debugsource-3.16.7-32.1 kernel-pae-devel-3.16.7-32.1 - openSUSE 13.2 (i586): bbswitch-kmp-pae-0.8_k3.16.7_32-3.15.1 bbswitch-kmp-pae-debuginfo-0.8_k3.16.7_32-3.15.1 cloop-kmp-pae-2.639_k3.16.7_32-14.15.1 cloop-kmp-pae-debuginfo-2.639_k3.16.7_32-14.15.1 crash-kmp-pae-7.0.8_k3.16.7_32-15.1 crash-kmp-pae-debuginfo-7.0.8_k3.16.7_32-15.1 hdjmod-kmp-pae-1.28_k3.16.7_32-18.16.1 hdjmod-kmp-pae-debuginfo-1.28_k3.16.7_32-18.16.1 ipset-kmp-pae-6.23_k3.16.7_32-15.1 ipset-kmp-pae-debuginfo-6.23_k3.16.7_32-15.1 pcfclock-kmp-pae-0.44_k3.16.7_32-260.15.1 pcfclock-kmp-pae-debuginfo-0.44_k3.16.7_32-260.15.1 vhba-kmp-pae-20140629_k3.16.7_32-2.15.1 vhba-kmp-pae-debuginfo-20140629_k3.16.7_32-2.15.1 virtualbox-guest-kmp-pae-4.3.34_k3.16.7_32-37.1 virtualbox-guest-kmp-pae-debuginfo-4.3.34_k3.16.7_32-37.1 virtualbox-host-kmp-pae-4.3.34_k3.16.7_32-37.1 virtualbox-host-kmp-pae-debuginfo-4.3.34_k3.16.7_32-37.1 xtables-addons-kmp-pae-2.6_k3.16.7_32-15.1 xtables-addons-kmp-pae-debuginfo-2.6_k3.16.7_32-15.1 References: https://www.suse.com/security/cve/CVE-2014-8989.html https://www.suse.com/security/cve/CVE-2014-9529.html https://www.suse.com/security/cve/CVE-2015-5157.html https://www.suse.com/security/cve/CVE-2015-5307.html https://www.suse.com/security/cve/CVE-2015-6937.html https://www.suse.com/security/cve/CVE-2015-7550.html https://www.suse.com/security/cve/CVE-2015-7799.html https://www.suse.com/security/cve/CVE-2015-7885.html https://www.suse.com/security/cve/CVE-2015-7990.html https://www.suse.com/security/cve/CVE-2015-8104.html https://www.suse.com/security/cve/CVE-2015-8215.html https://www.suse.com/security/cve/CVE-2015-8543.html https://www.suse.com/security/cve/CVE-2015-8550.html https://www.suse.com/security/cve/CVE-2015-8551.html https://www.suse.com/security/cve/CVE-2015-8552.html https://www.suse.com/security/cve/CVE-2015-8569.html https://www.suse.com/security/cve/CVE-2015-8575.html https://www.suse.com/security/cve/CVE-2015-8767.html https://www.suse.com/security/cve/CVE-2016-0728.html https://bugzilla.suse.com/814440 https://bugzilla.suse.com/906545 https://bugzilla.suse.com/912202 https://bugzilla.suse.com/921949 https://bugzilla.suse.com/937969 https://bugzilla.suse.com/937970 https://bugzilla.suse.com/938706 https://bugzilla.suse.com/944296 https://bugzilla.suse.com/945825 https://bugzilla.suse.com/949936 https://bugzilla.suse.com/950998 https://bugzilla.suse.com/951627 https://bugzilla.suse.com/951638 https://bugzilla.suse.com/952384 https://bugzilla.suse.com/952579 https://bugzilla.suse.com/952976 https://bugzilla.suse.com/953527 https://bugzilla.suse.com/954138 https://bugzilla.suse.com/954404 https://bugzilla.suse.com/955224 https://bugzilla.suse.com/955354 https://bugzilla.suse.com/955422 https://bugzilla.suse.com/956708 https://bugzilla.suse.com/956934 https://bugzilla.suse.com/957988 https://bugzilla.suse.com/957990 https://bugzilla.suse.com/958504 https://bugzilla.suse.com/958510 https://bugzilla.suse.com/958886 https://bugzilla.suse.com/958951 https://bugzilla.suse.com/959190 https://bugzilla.suse.com/959399 https://bugzilla.suse.com/959568 https://bugzilla.suse.com/960839 https://bugzilla.suse.com/961509 https://bugzilla.suse.com/961739 https://bugzilla.suse.com/962075

1 0

openSUSE-RU-2016:0317-1: moderate: Recommended update for kdelibs4
by maintenance＠opensuse.org 03 Feb '16

03 Feb '16

openSUSE Recommended Update: Recommended update for kdelibs4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0317-1 Rating: moderate References: #942810 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for kdelibs4 fixes the following issue: - Add remove-noisy-qDebug.patch from upstream: removes left-over debug output that logs keypresses to stderr (boo#942810) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-138=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): kdelibs4-4.14.9-27.1 kdelibs4-branding-upstream-4.14.9-27.1 kdelibs4-core-4.14.9-27.1 kdelibs4-core-debuginfo-4.14.9-27.1 kdelibs4-debuginfo-4.14.9-27.1 kdelibs4-debugsource-4.14.9-27.1 kdelibs4-doc-4.14.9-27.1 kdelibs4-doc-debuginfo-4.14.9-27.1 libkde4-4.14.9-27.1 libkde4-debuginfo-4.14.9-27.1 libkde4-devel-4.14.9-27.1 libkdecore4-4.14.9-27.1 libkdecore4-debuginfo-4.14.9-27.1 libkdecore4-devel-4.14.9-27.1 libkdecore4-devel-debuginfo-4.14.9-27.1 libksuseinstall-devel-4.14.9-27.1 libksuseinstall1-4.14.9-27.1 libksuseinstall1-debuginfo-4.14.9-27.1 - openSUSE 13.2 (x86_64): libkde4-32bit-4.14.9-27.1 libkde4-debuginfo-32bit-4.14.9-27.1 libkdecore4-32bit-4.14.9-27.1 libkdecore4-debuginfo-32bit-4.14.9-27.1 libksuseinstall1-32bit-4.14.9-27.1 libksuseinstall1-debuginfo-32bit-4.14.9-27.1 - openSUSE 13.2 (noarch): kdelibs4-apidocs-4.14.9-27.1 References: https://bugzilla.suse.com/942810

1 0

openSUSE-RU-2016:0316-1: moderate: Recommended update for libgcrypt
by maintenance＠opensuse.org 03 Feb '16

03 Feb '16

openSUSE Recommended Update: Recommended update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0316-1 Rating: moderate References: #932232 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update libgcrypt fixes issues when the system operates in FIPS mode. libgcrypt was adjusted to free the DRBG on exit to avoid crashes. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-139=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libgcrypt-cavs-1.6.1-20.1 libgcrypt-cavs-debuginfo-1.6.1-20.1 libgcrypt-debugsource-1.6.1-20.1 libgcrypt-devel-1.6.1-20.1 libgcrypt-devel-debuginfo-1.6.1-20.1 libgcrypt20-1.6.1-20.1 libgcrypt20-debuginfo-1.6.1-20.1 libgcrypt20-hmac-1.6.1-20.1 - openSUSE Leap 42.1 (x86_64): libgcrypt-devel-32bit-1.6.1-20.1 libgcrypt-devel-debuginfo-32bit-1.6.1-20.1 libgcrypt20-32bit-1.6.1-20.1 libgcrypt20-debuginfo-32bit-1.6.1-20.1 libgcrypt20-hmac-32bit-1.6.1-20.1 References: https://bugzilla.suse.com/932232

1 0

openSUSE-RU-2016:0315-1: Recommended update for clamav-database
by maintenance＠opensuse.org 03 Feb '16

03 Feb '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0315-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh February 1st. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-135=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201602010000-44.1 References:

1 0

openSUSE-RU-2016:0313-1: moderate: Recommended update for wrk
by maintenance＠opensuse.org 02 Feb '16

02 Feb '16

openSUSE Recommended Update: Recommended update for wrk ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0313-1 Rating: moderate References: #963355 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for wrk fixes the following issues: - Install to /usr/bin (boo#963355) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-133=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): wrk-4.0.1-6.1 wrk-debuginfo-4.0.1-6.1 wrk-debugsource-4.0.1-6.1 References: https://bugzilla.suse.com/963355

1 0

openSUSE-RU-2016:0312-1: moderate: Recommended update for docker
by maintenance＠opensuse.org 02 Feb '16

02 Feb '16

openSUSE Recommended Update: Recommended update for docker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0312-1 Rating: moderate References: #958255 #963177 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for docker fixes the following issues: - use_fs_cgroups_by_default.patch: fix boo#963177 - Use fs cgroups by default in docker - fix_cgroup.parent_path_sanitisation.patch: fix boo# 963198 - fix cgroup.Parent path sanitisation in docker - fix_bnc_958255.patch: fix boo#958255 - Docker creates strange apparmor profile Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-134=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-134=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): docker-1.9.1-13.1 docker-debuginfo-1.9.1-13.1 docker-debugsource-1.9.1-13.1 - openSUSE Leap 42.1 (noarch): docker-bash-completion-1.9.1-13.1 docker-test-1.9.1-13.1 docker-zsh-completion-1.9.1-13.1 - openSUSE 13.2 (x86_64): docker-1.9.1-52.1 docker-debuginfo-1.9.1-52.1 docker-debugsource-1.9.1-52.1 - openSUSE 13.2 (noarch): docker-bash-completion-1.9.1-52.1 docker-test-1.9.1-52.1 docker-zsh-completion-1.9.1-52.1 References: https://bugzilla.suse.com/958255 https://bugzilla.suse.com/963177

1 0

openSUSE-SU-2016:0311-1: Security update for Privoxy
by opensuse-security＠opensuse.org 02 Feb '16

02 Feb '16

openSUSE Security Update: Security update for Privoxy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0311-1 Rating: low References: #963151 #963152 Cross-References: CVE-2016-1982 CVE-2016-1983 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update to Privoxy 3.0.24 fixes two minor security issues. The vulnerabilities should not be exploitable in the binary as compiled in openSUSE. * CVE-2016-1982: Corrupt chunk-encoded content could cause an invalid read (boo#963151) * CVE-2016-1983: Empty Host headers in client requests could result in invalid reads (boo#963152) This update also contains general bug fixes and improvements as well as white and blacklist updates. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-132=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): privoxy-3.0.24-2.23.1 privoxy-debuginfo-3.0.24-2.23.1 privoxy-debugsource-3.0.24-2.23.1 privoxy-doc-3.0.24-2.23.1 References: https://www.suse.com/security/cve/CVE-2016-1982.html https://www.suse.com/security/cve/CVE-2016-1983.html https://bugzilla.suse.com/963151 https://bugzilla.suse.com/963152

1 0

openSUSE-SU-2016:0310-1: important: Security update for xulrunner
by opensuse-security＠opensuse.org 02 Feb '16

02 Feb '16

openSUSE Security Update: Security update for xulrunner ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0310-1 Rating: important References: #963632 #963635 Cross-References: CVE-2016-1930 CVE-2016-1935 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: XULRunner was updated to 38.6.0 to fix two security issues. The following vulnerabilities were fixed: * CVE-2016-1930: Miscellaneous memory safety hazards (boo#963632) * CVE-2016-1935: Buffer overflow in WebGL after out of memory allocation (boo#963635) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-127=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xulrunner-38.6.0-10.2 xulrunner-debuginfo-38.6.0-10.2 xulrunner-debugsource-38.6.0-10.2 xulrunner-devel-38.6.0-10.2 - openSUSE Leap 42.1 (x86_64): xulrunner-32bit-38.6.0-10.2 xulrunner-debuginfo-32bit-38.6.0-10.2 References: https://www.suse.com/security/cve/CVE-2016-1930.html https://www.suse.com/security/cve/CVE-2016-1935.html https://bugzilla.suse.com/963632 https://bugzilla.suse.com/963635

1 0