February 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:0465-1: moderate: Recommended update for thunar
by maintenance＠opensuse.org 16 Feb '16

16 Feb '16

openSUSE Recommended Update: Recommended update for thunar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0465-1 Rating: moderate References: #952324 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for thunar fixes the following issues: - correct mismatched names between thunar.appdata.xml and thunar.desktop. Renamed Thunar.desktop to thunar.desktop to solve installation system problems see: boo#952324 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-209=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libthunarx-2-0-1.6.10-4.1 libthunarx-2-0-debuginfo-1.6.10-4.1 thunar-1.6.10-4.1 thunar-debuginfo-1.6.10-4.1 thunar-debugsource-1.6.10-4.1 thunar-devel-1.6.10-4.1 - openSUSE Leap 42.1 (noarch): thunar-lang-1.6.10-4.1 References: https://bugzilla.suse.com/952324

1 0

openSUSE-RU-2016:0464-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 16 Feb '16

16 Feb '16

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0464-1 Rating: moderate References: #962295 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for xorg-x11-server fixes the following issues: - Updated: fixed a regression (boo#962295). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-210=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-210=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xorg-x11-server-7.6_1.17.2-21.1 xorg-x11-server-debuginfo-7.6_1.17.2-21.1 xorg-x11-server-debugsource-7.6_1.17.2-21.1 xorg-x11-server-extra-7.6_1.17.2-21.1 xorg-x11-server-extra-debuginfo-7.6_1.17.2-21.1 xorg-x11-server-sdk-7.6_1.17.2-21.1 xorg-x11-server-source-7.6_1.17.2-21.1 - openSUSE 13.2 (i586 x86_64): xorg-x11-server-7.6_1.16.1-37.1 xorg-x11-server-debuginfo-7.6_1.16.1-37.1 xorg-x11-server-debugsource-7.6_1.16.1-37.1 xorg-x11-server-extra-7.6_1.16.1-37.1 xorg-x11-server-extra-debuginfo-7.6_1.16.1-37.1 xorg-x11-server-sdk-7.6_1.16.1-37.1 References: https://bugzilla.suse.com/962295

1 0

openSUSE-RU-2016:0454-1: moderate: Recommended update for ddclient
by maintenance＠opensuse.org 15 Feb '16

15 Feb '16

openSUSE Recommended Update: Recommended update for ddclient ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0454-1 Rating: moderate References: #881520 #903588 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ddclient fixes the following issues: - boo#903588: various file permission issues after distribution upgrade - systemd fixes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-207=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): ddclient-3.8.2-10.3.1 References: https://bugzilla.suse.com/881520 https://bugzilla.suse.com/903588

1 0

openSUSE-RU-2016:0453-1: moderate: Recommended update for wine
by maintenance＠opensuse.org 15 Feb '16

15 Feb '16

openSUSE Recommended Update: Recommended update for wine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0453-1 Rating: moderate References: #960661 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for wine fixes the following issues: - Updated to 1.8.1 release (boo#960661) - Various bug fixes. - Small translation updates. - For detailed description of all fixes and changes please refer to: https://www.winehq.org/announce/1.8.1 - Updated winetricks Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-205=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-205=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): wine-1.8.1-6.1 wine-debuginfo-1.8.1-6.1 wine-debugsource-1.8.1-6.1 wine-devel-1.8.1-6.1 wine-devel-debuginfo-1.8.1-6.1 - openSUSE Leap 42.1 (x86_64): wine-32bit-1.8.1-6.1 wine-debuginfo-32bit-1.8.1-6.1 wine-devel-32bit-1.8.1-6.1 wine-devel-debuginfo-32bit-1.8.1-6.1 - openSUSE 13.2 (i586 x86_64): wine-1.8.1-6.1 wine-debuginfo-1.8.1-6.1 wine-debugsource-1.8.1-6.1 wine-devel-1.8.1-6.1 wine-devel-debuginfo-1.8.1-6.1 - openSUSE 13.2 (x86_64): wine-32bit-1.8.1-6.1 wine-debuginfo-32bit-1.8.1-6.1 wine-devel-32bit-1.8.1-6.1 wine-devel-debuginfo-32bit-1.8.1-6.1 References: https://bugzilla.suse.com/960661

1 0

openSUSE-RU-2016:0452-1: moderate: Recommended update for sk1
by maintenance＠opensuse.org 15 Feb '16

15 Feb '16

openSUSE Recommended Update: Recommended update for sk1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0452-1 Rating: moderate References: #960401 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sk1 fixes a dependency issue: - boo#960401: SK1 would not start in some installations due to missing requirement on python-imaging-tk python-Pillow-tk) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-206=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-206=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): sk1-0.9.1pre_rev730-30.1 sk1-debuginfo-0.9.1pre_rev730-30.1 sk1-debugsource-0.9.1pre_rev730-30.1 - openSUSE 13.2 (i586 x86_64): sk1-0.9.1pre_rev730-27.3.1 sk1-debuginfo-0.9.1pre_rev730-27.3.1 sk1-debugsource-0.9.1pre_rev730-27.3.1 References: https://bugzilla.suse.com/960401

1 0

openSUSE-RU-2016:0451-1: moderate: Recommended update for ddclient
by maintenance＠opensuse.org 15 Feb '16

15 Feb '16

openSUSE Recommended Update: Recommended update for ddclient ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0451-1 Rating: moderate References: #903588 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ddclient fixes the following issues: - boo#903588: various file permission issues after distribution upgrade - systemd fixes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch 4641=1 - openSUSE 13.2: zypper in -t patch 4641=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): ddclient-3.8.2-9.1 - openSUSE 13.2 (noarch): ddclient-3.8.2-4.5.1 References: https://bugzilla.suse.com/903588

1 0

openSUSE-RU-2016:0450-1: Recommended update for timezone
by maintenance＠opensuse.org 13 Feb '16

13 Feb '16

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0450-1 Rating: low References: #963921 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides the latest timezone information (2016a) for your system, including the following changes: - America/Cayman will not observe daylight saving this year. - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00. - Asia/Tehran now has DST predictions for the year 2038 and later. - America/Metlakatla switched from PST all year to AKST/AKDT on 2015-11-01 at 02:00. - America/Santa_Isabel has been removed, and replaced with a backward compatibility link to America/Tijuana. - Asia/Karachi's two transition times in 2002 were off by a minute. This release also includes changes affecting past time stamps, documentation and some minor code fixes. For a comprehensive list, refer to the release announcement from ICANN: http://mm.icann.org/pipermail/tz/2016-January/023106.html This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-204=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): timezone-2016a-0.5.1 timezone-debuginfo-2016a-0.5.1 timezone-debugsource-2016a-0.5.1 - openSUSE Leap 42.1 (noarch): timezone-java-2016a-0.5.1 References: https://bugzilla.suse.com/963921

1 0

openSUSE-SU-2016:0442-1: Security update for openssl
by opensuse-security＠opensuse.org 12 Feb '16

12 Feb '16

openSUSE Security Update: Security update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0442-1 Rating: low References: #963415 Cross-References: CVE-2015-3197 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openssl fixes the following issues: - CVE-2015-3197: A malicious client can negotiate SSLv2 ciphers that have been disabled on the server and complete SSLv2 handshakes even if all SSLv2 ciphers have been disabled, provided that the SSLv2 protocol was not also disabled via SSL_OP_NO_SSLv2. (boo#963415) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-203=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libopenssl-devel-1.0.1k-11.78.1 libopenssl1_0_0-1.0.1k-11.78.1 libopenssl1_0_0-debuginfo-1.0.1k-11.78.1 openssl-1.0.1k-11.78.1 openssl-debuginfo-1.0.1k-11.78.1 openssl-debugsource-1.0.1k-11.78.1 - openSUSE 13.1 (x86_64): libopenssl-devel-32bit-1.0.1k-11.78.1 libopenssl1_0_0-32bit-1.0.1k-11.78.1 libopenssl1_0_0-debuginfo-32bit-1.0.1k-11.78.1 - openSUSE 13.1 (noarch): openssl-doc-1.0.1k-11.78.1 References: https://www.suse.com/security/cve/CVE-2015-3197.html https://bugzilla.suse.com/963415

1 0

openSUSE-SU-2016:0441-1: moderate: Security update for cacti-spine
by opensuse-security＠opensuse.org 12 Feb '16

12 Feb '16

openSUSE Security Update: Security update for cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0441-1 Rating: moderate References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: cacti-spine was updated to match the cacti version, fixing a number of upstream bugs. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-202=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): cacti-spine-0.8.8f-2.3.1 cacti-spine-debuginfo-0.8.8f-2.3.1 cacti-spine-debugsource-0.8.8f-2.3.1 References:

1 0

openSUSE-SU-2016:0440-1: moderate: Security update for cacti
by opensuse-security＠opensuse.org 12 Feb '16

12 Feb '16

openSUSE Security Update: Security update for cacti ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0440-1 Rating: moderate References: #958863 #958977 #960678 #965864 #965930 Cross-References: CVE-2015-8369 CVE-2015-8377 CVE-2015-8604 CVE-2016-2313 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves four vulnerabilities and has one errata is now available. Description: cacti was updated to fix the following vulnerabilities: * CVE-2015-8369: SQL injection in graph.php (boo#958863) * CVE-2015-8604: SQL injection in graphs_new.php (boo#960678) * CVE-2015-8377: SQL injection vulnerability in the host_new_graphs_save function in graphs_new.php (boo#958977) * CVE-2016-2313: Authentication using web authentication as a user not in the cacti database allows complete access (boo#965930) The following non-security bugs were fixed: boo#965864: Poller Script Parser was broken (boo#965864) cacti-spine was updated to match the cacti version, fixing a number of upstream bugs. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-201=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): cacti-0.8.8f-17.1 References: https://www.suse.com/security/cve/CVE-2015-8369.html https://www.suse.com/security/cve/CVE-2015-8377.html https://www.suse.com/security/cve/CVE-2015-8604.html https://www.suse.com/security/cve/CVE-2016-2313.html https://bugzilla.suse.com/958863 https://bugzilla.suse.com/958977 https://bugzilla.suse.com/960678 https://bugzilla.suse.com/965864 https://bugzilla.suse.com/965930

1 0