February 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:0528-1: moderate: Security update for ffmpeg
by opensuse-security＠opensuse.org 20 Feb '16

20 Feb '16

openSUSE Security Update: Security update for ffmpeg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0528-1 Rating: moderate References: #966674 Cross-References: CVE-2016-2329 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update to ffmpeg 2.8.6 fixes the following issues: - CVE-2016-2329: Remote DoS via crafted TIFF files (boo#966674) VLC was updated to 2.8.6, containing various other upstream bugfixes. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-246=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ffmpeg-2.8.6-16.1 ffmpeg-debuginfo-2.8.6-16.1 ffmpeg-debugsource-2.8.6-16.1 ffmpeg-devel-2.8.6-16.1 libavcodec-devel-2.8.6-16.1 libavcodec56-2.8.6-16.1 libavcodec56-debuginfo-2.8.6-16.1 libavdevice-devel-2.8.6-16.1 libavdevice56-2.8.6-16.1 libavdevice56-debuginfo-2.8.6-16.1 libavfilter-devel-2.8.6-16.1 libavfilter5-2.8.6-16.1 libavfilter5-debuginfo-2.8.6-16.1 libavformat-devel-2.8.6-16.1 libavformat56-2.8.6-16.1 libavformat56-debuginfo-2.8.6-16.1 libavresample-devel-2.8.6-16.1 libavresample2-2.8.6-16.1 libavresample2-debuginfo-2.8.6-16.1 libavutil-devel-2.8.6-16.1 libavutil54-2.8.6-16.1 libavutil54-debuginfo-2.8.6-16.1 libpostproc-devel-2.8.6-16.1 libpostproc53-2.8.6-16.1 libpostproc53-debuginfo-2.8.6-16.1 libswresample-devel-2.8.6-16.1 libswresample1-2.8.6-16.1 libswresample1-debuginfo-2.8.6-16.1 libswscale-devel-2.8.6-16.1 libswscale3-2.8.6-16.1 libswscale3-debuginfo-2.8.6-16.1 - openSUSE Leap 42.1 (x86_64): libavcodec56-32bit-2.8.6-16.1 libavcodec56-debuginfo-32bit-2.8.6-16.1 libavdevice56-32bit-2.8.6-16.1 libavdevice56-debuginfo-32bit-2.8.6-16.1 libavfilter5-32bit-2.8.6-16.1 libavfilter5-debuginfo-32bit-2.8.6-16.1 libavformat56-32bit-2.8.6-16.1 libavformat56-debuginfo-32bit-2.8.6-16.1 libavresample2-32bit-2.8.6-16.1 libavresample2-debuginfo-32bit-2.8.6-16.1 libavutil54-32bit-2.8.6-16.1 libavutil54-debuginfo-32bit-2.8.6-16.1 libpostproc53-32bit-2.8.6-16.1 libpostproc53-debuginfo-32bit-2.8.6-16.1 libswresample1-32bit-2.8.6-16.1 libswresample1-debuginfo-32bit-2.8.6-16.1 libswscale3-32bit-2.8.6-16.1 libswscale3-debuginfo-32bit-2.8.6-16.1 References: https://www.suse.com/security/cve/CVE-2016-2329.html https://bugzilla.suse.com/966674

1 0

openSUSE-FU-2016:0527-1: moderate: Add mmv to SLE 12 Backports
by maintenance＠opensuse.org 20 Feb '16

20 Feb '16

openSUSE Feature Update: Add mmv to SLE 12 Backports ______________________________________________________________________________ Announcement ID: openSUSE-FU-2016:0527-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 feature fixes can now be installed. Description: This update adds mmv to the SLE 12 Backports project. Patch Instructions: To install this openSUSE Feature Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-241=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): mmv-1.01b-2.1 References:

1 0

openSUSE-RU-2016:0526-1: moderate: Recommended update for plasma5-pk-updates
by maintenance＠opensuse.org 20 Feb '16

20 Feb '16

openSUSE Recommended Update: Recommended update for plasma5-pk-updates ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0526-1 Rating: moderate References: #966410 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for plasma5-pk-updates fixes the following issues: - Add translations - Change the obsoletes for apper to a higher version number to make sure that it gets removed. Current apper version is 0.9.2 and therefore higher than the version of plasma5-pk-updates (boo#966410) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-244=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): plasma5-pk-updates-0.2-5.1 plasma5-pk-updates-debuginfo-0.2-5.1 plasma5-pk-updates-debugsource-0.2-5.1 - openSUSE Leap 42.1 (noarch): plasma5-pk-updates-lang-0.2-5.1 References: https://bugzilla.suse.com/966410

1 0

openSUSE-SU-2016:0525-1: critical: Security update to Chromium 48.0.2564.116
by opensuse-security＠opensuse.org 20 Feb '16

20 Feb '16

openSUSE Security Update: Security update to Chromium 48.0.2564.116 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0525-1 Rating: critical References: #967376 Cross-References: CVE-2016-1629 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update contains Chromium 48.0.2564.116 ans fixes the following security flaw: - CVE-2016-1629: Same-origin bypass in Blink and Sandbox escape in Chrome. (boo#967376) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-239=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-239=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): chromedriver-48.0.2564.116-24.1 chromedriver-debuginfo-48.0.2564.116-24.1 chromium-48.0.2564.116-24.1 chromium-debuginfo-48.0.2564.116-24.1 chromium-debugsource-48.0.2564.116-24.1 chromium-desktop-gnome-48.0.2564.116-24.1 chromium-desktop-kde-48.0.2564.116-24.1 chromium-ffmpegsumo-48.0.2564.116-24.1 chromium-ffmpegsumo-debuginfo-48.0.2564.116-24.1 - openSUSE 13.2 (i586 x86_64): chromedriver-48.0.2564.116-78.1 chromedriver-debuginfo-48.0.2564.116-78.1 chromium-48.0.2564.116-78.1 chromium-debuginfo-48.0.2564.116-78.1 chromium-debugsource-48.0.2564.116-78.1 chromium-desktop-gnome-48.0.2564.116-78.1 chromium-desktop-kde-48.0.2564.116-78.1 chromium-ffmpegsumo-48.0.2564.116-78.1 chromium-ffmpegsumo-debuginfo-48.0.2564.116-78.1 References: https://www.suse.com/security/cve/CVE-2016-1629.html https://bugzilla.suse.com/967376

1 0

openSUSE-SU-2016:0524-1: moderate: Security update for xdelta3
by opensuse-security＠opensuse.org 20 Feb '16

20 Feb '16

openSUSE Security Update: Security update for xdelta3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0524-1 Rating: moderate References: #965791 Cross-References: CVE-2014-9765 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xdelta3 fixes the following security issue: - CVE-2014-9765: Fixed buffer overflow in main_get_appheader. (boo#965791) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-240=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xdelta3-3.0.8-2.3.1 References: https://www.suse.com/security/cve/CVE-2014-9765.html https://bugzilla.suse.com/965791

1 0

openSUSE-SU-2016:0523-1: moderate: Security update for erlang
by opensuse-security＠opensuse.org 20 Feb '16

20 Feb '16

openSUSE Security Update: Security update for erlang ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0523-1 Rating: moderate References: #924915 Cross-References: CVE-2015-2774 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for erlang fixes the following issues: - CVE-2015-2774: Erlang/OTP was vulnerable to Poodle in its TLS-1.0 implementation - removed default support for SSL 3.0 and added padding check for TLS 1.0 (boo#924915) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-245=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): erlang-17.1-3.3.1 erlang-debugger-17.1-3.3.1 erlang-debugger-src-17.1-3.3.1 erlang-debuginfo-17.1-3.3.1 erlang-debugsource-17.1-3.3.1 erlang-dialyzer-17.1-3.3.1 erlang-dialyzer-debuginfo-17.1-3.3.1 erlang-dialyzer-src-17.1-3.3.1 erlang-doc-17.1-3.3.1 erlang-epmd-17.1-3.3.1 erlang-epmd-debuginfo-17.1-3.3.1 erlang-et-17.1-3.3.1 erlang-et-src-17.1-3.3.1 erlang-gs-17.1-3.3.1 erlang-gs-src-17.1-3.3.1 erlang-jinterface-17.1-3.3.1 erlang-jinterface-src-17.1-3.3.1 erlang-observer-17.1-3.3.1 erlang-observer-src-17.1-3.3.1 erlang-reltool-17.1-3.3.1 erlang-reltool-src-17.1-3.3.1 erlang-src-17.1-3.3.1 erlang-wx-17.1-3.3.1 erlang-wx-debuginfo-17.1-3.3.1 erlang-wx-src-17.1-3.3.1 References: https://www.suse.com/security/cve/CVE-2015-2774.html https://bugzilla.suse.com/924915

1 0

openSUSE-RU-2016:0522-1: moderate: Recommended update for KDE Plasma
by maintenance＠opensuse.org 20 Feb '16

20 Feb '16

openSUSE Recommended Update: Recommended update for KDE Plasma ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0522-1 Rating: moderate References: #954623 #964548 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update provides version 5.5.4 of Plasma with various fixes and improvements. For a detailed description, please refer to https://www.kde.org/announcements/plasma-5.5.4.php Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-243=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): bluedevil5-5.5.4-6.1 bluedevil5-debuginfo-5.5.4-6.1 bluedevil5-debugsource-5.5.4-6.1 breeze-5.5.4-7.1 breeze-debugsource-5.5.4-7.1 breeze4-style-5.5.4-7.1 breeze4-style-debuginfo-5.5.4-7.1 breeze4-style-debugsource-5.5.4-7.1 breeze5-decoration-5.5.4-7.1 breeze5-decoration-debuginfo-5.5.4-7.1 breeze5-style-5.5.4-7.1 breeze5-style-debuginfo-5.5.4-7.1 drkonqi5-5.5.4-9.1 drkonqi5-debuginfo-5.5.4-9.1 kcm_sddm-5.5.4-7.1 kcm_sddm-debuginfo-5.5.4-7.1 kcm_sddm-debugsource-5.5.4-7.1 kde-cli-tools5-5.5.4-6.1 kde-cli-tools5-debuginfo-5.5.4-6.1 kde-cli-tools5-debugsource-5.5.4-6.1 kde-gtk-config5-5.5.4-6.1 kde-gtk-config5-debuginfo-5.5.4-6.1 kde-gtk-config5-debugsource-5.5.4-6.1 kde-user-manager-5.5.4-6.1 kde-user-manager-debuginfo-5.5.4-6.1 kde-user-manager-debugsource-5.5.4-6.1 kgamma5-5.5.4-6.1 kgamma5-debuginfo-5.5.4-6.1 kgamma5-debugsource-5.5.4-6.1 khelpcenter5-5.5.4-6.2 khelpcenter5-debuginfo-5.5.4-6.2 khelpcenter5-debugsource-5.5.4-6.2 khotkeys5-5.5.4-6.2 khotkeys5-debuginfo-5.5.4-6.2 khotkeys5-debugsource-5.5.4-6.2 khotkeys5-devel-5.5.4-6.2 kinfocenter5-5.5.4-6.1 kinfocenter5-debuginfo-5.5.4-6.1 kinfocenter5-debugsource-5.5.4-6.1 kmenuedit5-5.5.3-6.5 kmenuedit5-debuginfo-5.5.3-6.5 kmenuedit5-debugsource-5.5.3-6.5 kscreen5-5.5.4-7.1 kscreen5-debuginfo-5.5.4-7.1 kscreen5-debugsource-5.5.4-7.1 kscreenlocker-5.5.4-4.1 kscreenlocker-debuginfo-5.5.4-4.1 kscreenlocker-debugsource-5.5.4-4.1 kscreenlocker-devel-5.5.4-4.1 ksshaskpass5-5.5.4-6.1 ksshaskpass5-debuginfo-5.5.4-6.1 ksshaskpass5-debugsource-5.5.4-6.1 ksysguard5-5.5.4-8.2 ksysguard5-debuginfo-5.5.4-8.2 ksysguard5-debugsource-5.5.4-8.2 kwayland-5.5.4-9.1 kwayland-debuginfo-5.5.4-9.1 kwayland-debugsource-5.5.4-9.1 kwayland-devel-5.5.4-9.1 kwayland-integration-5.5.4-6.1 kwayland-integration-debuginfo-5.5.4-6.1 kwayland-integration-debugsource-5.5.4-6.1 kwin5-5.5.4-9.3 kwin5-debuginfo-5.5.4-9.3 kwin5-debugsource-5.5.4-9.3 kwin5-devel-5.5.4-9.3 kwrited5-5.5.4-6.1 kwrited5-debuginfo-5.5.4-6.1 kwrited5-debugsource-5.5.4-6.1 libKF5Screen6-5.5.4-6.1 libKF5Screen6-debuginfo-5.5.4-6.1 libKScreenLocker5-5.5.4-4.1 libKScreenLocker5-debuginfo-5.5.4-4.1 libkdecoration2-debugsource-5.5.4-6.1 libkdecoration2-devel-5.5.4-6.1 libkdecorations2-5-5.5.4-6.1 libkdecorations2-5-debuginfo-5.5.4-6.1 libkdecorations2private5-5.5.4-6.1 libkdecorations2private5-debuginfo-5.5.4-6.1 libkscreen2-debugsource-5.5.4-6.1 libkscreen2-devel-5.5.4-6.1 libkscreen2-plugin-5.5.4-6.1 libkscreen2-plugin-debuginfo-5.5.4-6.1 libksysguard5-5.5.4-6.1 libksysguard5-debuginfo-5.5.4-6.1 libksysguard5-debugsource-5.5.4-6.1 libksysguard5-devel-5.5.4-6.1 libksysguard5-helper-5.5.4-6.1 libksysguard5-helper-debuginfo-5.5.4-6.1 milou5-5.5.4-6.1 milou5-debuginfo-5.5.4-6.1 milou5-debugsource-5.5.4-6.1 oxygen5-5.5.4-6.1 oxygen5-cursors-5.5.4-6.1 oxygen5-debugsource-5.5.4-6.1 oxygen5-decoration-5.5.4-6.1 oxygen5-decoration-debuginfo-5.5.4-6.1 oxygen5-devel-5.5.4-6.1 oxygen5-sounds-5.5.4-6.1 oxygen5-style-5.5.4-6.1 oxygen5-style-debuginfo-5.5.4-6.1 plasma-nm5-5.5.4-6.3 plasma-nm5-debuginfo-5.5.4-6.3 plasma-nm5-debugsource-5.5.4-6.3 plasma-nm5-l2tp-5.5.4-6.3 plasma-nm5-l2tp-debuginfo-5.5.4-6.3 plasma-nm5-openconnect-5.5.4-6.3 plasma-nm5-openconnect-debuginfo-5.5.4-6.3 plasma-nm5-openswan-5.5.4-6.3 plasma-nm5-openswan-debuginfo-5.5.4-6.3 plasma-nm5-openvpn-5.5.4-6.3 plasma-nm5-openvpn-debuginfo-5.5.4-6.3 plasma-nm5-pptp-5.5.4-6.3 plasma-nm5-pptp-debuginfo-5.5.4-6.3 plasma-nm5-ssh-5.5.4-6.3 plasma-nm5-ssh-debuginfo-5.5.4-6.3 plasma-nm5-sstp-5.5.4-6.3 plasma-nm5-sstp-debuginfo-5.5.4-6.3 plasma-nm5-strongswan-5.5.4-6.3 plasma-nm5-strongswan-debuginfo-5.5.4-6.3 plasma-nm5-vpnc-5.5.4-6.3 plasma-nm5-vpnc-debuginfo-5.5.4-6.3 plasma5-addons-5.5.4-6.1 plasma5-addons-debuginfo-5.5.4-6.1 plasma5-addons-debugsource-5.5.4-6.1 plasma5-addons-kimpanel-5.5.4-6.1 plasma5-addons-kimpanel-debuginfo-5.5.4-6.1 plasma5-desktop-5.5.4-9.2 plasma5-desktop-branding-openSUSE-13.3-29.1 plasma5-desktop-branding-upstream-5.5.4-9.2 plasma5-desktop-debuginfo-5.5.4-9.2 plasma5-desktop-debugsource-5.5.4-9.2 plasma5-mediacenter-5.5.4-6.1 plasma5-mediacenter-debuginfo-5.5.4-6.1 plasma5-mediacenter-debugsource-5.5.4-6.1 plasma5-openSUSE-13.3-29.1 plasma5-pa-5.5.4-6.1 plasma5-pa-debuginfo-5.5.4-6.1 plasma5-pa-debugsource-5.5.4-6.1 plasma5-sdk-5.5.4-6.1 plasma5-sdk-debuginfo-5.5.4-6.1 plasma5-sdk-debugsource-5.5.4-6.1 plasma5-workspace-5.5.4-9.1 plasma5-workspace-branding-openSUSE-13.3-29.1 plasma5-workspace-branding-upstream-5.5.4-9.1 plasma5-workspace-debuginfo-5.5.4-9.1 plasma5-workspace-debugsource-5.5.4-9.1 plasma5-workspace-devel-5.5.4-9.1 plasma5-workspace-libs-5.5.4-9.1 plasma5-workspace-libs-debuginfo-5.5.4-9.1 plasmaengineexplorer5-5.5.4-6.1 plasmaengineexplorer5-debuginfo-5.5.4-6.1 polkit-kde-agent-5-5.5.4-6.1 polkit-kde-agent-5-debuginfo-5.5.4-6.1 polkit-kde-agent-5-debugsource-5.5.4-6.1 powerdevil5-5.5.4-6.1 powerdevil5-debuginfo-5.5.4-6.1 powerdevil5-debugsource-5.5.4-6.1 systemsettings5-5.5.4-6.1 systemsettings5-debuginfo-5.5.4-6.1 systemsettings5-debugsource-5.5.4-6.1 systemsettings5-devel-5.5.4-6.1 - openSUSE Leap 42.1 (x86_64): kwayland-32bit-5.5.4-9.1 kwayland-debuginfo-32bit-5.5.4-9.1 kwayland-devel-32bit-5.5.4-9.1 libKF5Screen6-32bit-5.5.4-6.1 libKF5Screen6-debuginfo-32bit-5.5.4-6.1 libkdecoration2-devel-32bit-5.5.4-6.1 libkdecorations2-5-32bit-5.5.4-6.1 libkdecorations2-5-debuginfo-32bit-5.5.4-6.1 libkdecorations2private5-32bit-5.5.4-6.1 libkdecorations2private5-debuginfo-32bit-5.5.4-6.1 libkscreen2-devel-32bit-5.5.4-6.1 libkscreen2-plugin-32bit-5.5.4-6.1 libkscreen2-plugin-debuginfo-32bit-5.5.4-6.1 libksysguard5-32bit-5.5.4-6.1 libksysguard5-debuginfo-32bit-5.5.4-6.1 libksysguard5-devel-32bit-5.5.4-6.1 oxygen5-style-32bit-5.5.4-6.1 oxygen5-style-debuginfo-32bit-5.5.4-6.1 plasma5-workspace-libs-32bit-5.5.4-9.1 plasma5-workspace-libs-debuginfo-32bit-5.5.4-9.1 - openSUSE Leap 42.1 (noarch): bluedevil5-lang-5.5.4-6.1 breeze5-cursors-5.5.4-7.1 breeze5-style-lang-5.5.4-7.1 breeze5-wallpapers-5.5.4-7.1 kcm_sddm-lang-5.5.4-7.1 kde-cli-tools5-lang-5.5.4-6.1 kde-gtk-config5-lang-5.5.4-6.1 kde-user-manager-lang-5.5.4-6.1 kgamma5-lang-5.5.4-6.1 khelpcenter5-lang-5.5.4-6.2 khotkeys5-lang-5.5.4-6.2 kinfocenter5-lang-5.5.4-6.1 kmenuedit5-lang-5.5.3-6.5 kscreen5-lang-5.5.4-7.1 kscreenlocker-lang-5.5.4-4.1 ksshaskpass5-lang-5.5.4-6.1 ksysguard5-lang-5.5.4-8.2 kwin5-lang-5.5.4-9.3 libksysguard5-lang-5.5.4-6.1 milou5-lang-5.5.4-6.1 oxygen5-lang-5.5.4-6.1 plasma-nm5-lang-5.5.4-6.3 plasma5-addons-lang-5.5.4-6.1 plasma5-desktop-lang-5.5.4-9.2 plasma5-mediacenter-lang-5.5.4-6.1 plasma5-pa-lang-5.5.4-6.1 plasma5-sdk-lang-5.5.4-6.1 plasma5-session-5.5.4-6.1 plasma5-workspace-lang-5.5.4-9.1 plasma5-workspace-wallpapers-5.5.4-6.1 polkit-kde-agent-5-lang-5.5.4-6.1 powerdevil5-lang-5.5.4-6.1 systemsettings5-lang-5.5.4-6.1 References: https://www.suse.com/security/cve/CVE-2016-2312.html https://bugzilla.suse.com/954623 https://bugzilla.suse.com/964548

1 0

openSUSE-SU-2016:0521-1: important: Security update for obs-service-download_files, obs-service-extract_file, obs-service-recompress, obs-service-source_validator, obs-service-verify_file
by opensuse-security＠opensuse.org 20 Feb '16

20 Feb '16

openSUSE Security Update: Security update for obs-service-download_files, obs-service-extract_file, obs-service-recompress, obs-service-source_validator, obs-service-verify_file ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0521-1 Rating: important References: Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for a number of source services fixes the following issues: - boo#967265: Various code/parameter injection issues could have allowed malicious service definition to execute commands or make changes to the user's file system The following source services are affected - obs-service-source_validator - obs-service-extract_file - obs-service-download_files - obs-service-recompress - obs-service-verify_file Also contains all bug fixes and improvements from the openSUSE:Tools versions. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-247=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-247=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): obs-service-download_files-0.5.1.git.1455712026.9c0a4a0-6.1 obs-service-extract_file-0.3-5.1 obs-service-recompress-0.3.1+git20160217.7897d3f-7.1 obs-service-source_validator-0.6+git20160218.73d6618-5.1 obs-service-verify_file-0.1.1-20.1 - openSUSE 13.2 (noarch): obs-service-download_files-0.5.1.git.1455712026.9c0a4a0-2.6.1 obs-service-extract_file-0.3-3.1 obs-service-recompress-0.3.1+git20160217.7897d3f-3.3.1 obs-service-source_validator-0.6+git20160218.73d6618-3.1 obs-service-verify_file-0.1.1-12.3.1 References:

1 0

openSUSE-SU-2016:0520-1: critical: Security update to Chromium 48.0.2564.116
by opensuse-security＠opensuse.org 20 Feb '16

20 Feb '16

openSUSE Security Update: Security update to Chromium 48.0.2564.116 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0520-1 Rating: critical References: #967376 Cross-References: CVE-2016-1629 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update contains Chromium 48.0.2564.116 ans fixes the following security flaw: - CVE-2016-1629: Same-origin bypass in Blink and Sandbox escape in Chrome. (boo#967376) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-239=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-48.0.2564.116-52.1 chromedriver-debuginfo-48.0.2564.116-52.1 chromium-48.0.2564.116-52.1 chromium-debuginfo-48.0.2564.116-52.1 chromium-debugsource-48.0.2564.116-52.1 chromium-desktop-gnome-48.0.2564.116-52.1 chromium-desktop-kde-48.0.2564.116-52.1 chromium-ffmpegsumo-48.0.2564.116-52.1 chromium-ffmpegsumo-debuginfo-48.0.2564.116-52.1 References: https://www.suse.com/security/cve/CVE-2016-1629.html https://bugzilla.suse.com/967376

1 0

openSUSE-RU-2016:0519-1: moderate: Recommended update for clamav
by maintenance＠opensuse.org 20 Feb '16

20 Feb '16

openSUSE Recommended Update: Recommended update for clamav ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0519-1 Rating: moderate References: #960237 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for clamav fixes the following issues: - Buildrequire pcre-devel for the new regexp signatures (boo#960237). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-242=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): clamav-0.99-2.22.1 clamav-debuginfo-0.99-2.22.1 clamav-debugsource-0.99-2.22.1 References: https://bugzilla.suse.com/960237

1 0