March 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:0672-1: moderate: Recommended update for ibus
by maintenance＠opensuse.org 07 Mar '16

07 Mar '16

openSUSE Recommended Update: Recommended update for ibus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0672-1 Rating: moderate References: #968486 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ibus fixes the following issues: - boo#968486: Fix invocation of ibus service, ibus now started via XDG autostart to avoid race - INPUT_METHOD environment variable is set explicitly in xim script at startup - explicit dbus-launch invocation was dropped Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-310=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ibus-1.5.11-5.1 ibus-debuginfo-1.5.11-5.1 ibus-debugsource-1.5.11-5.1 ibus-devel-1.5.11-5.1 ibus-gtk-1.5.11-5.1 ibus-gtk-debuginfo-1.5.11-5.1 ibus-gtk3-1.5.11-5.1 ibus-gtk3-debuginfo-1.5.11-5.1 libibus-1_0-5-1.5.11-5.1 libibus-1_0-5-debuginfo-1.5.11-5.1 python-ibus-1.5.11-5.1 typelib-1_0-IBus-1_0-1.5.11-5.1 - openSUSE Leap 42.1 (x86_64): ibus-gtk-32bit-1.5.11-5.1 ibus-gtk-debuginfo-32bit-1.5.11-5.1 ibus-gtk3-32bit-1.5.11-5.1 ibus-gtk3-debuginfo-32bit-1.5.11-5.1 libibus-1_0-5-32bit-1.5.11-5.1 libibus-1_0-5-debuginfo-32bit-1.5.11-5.1 - openSUSE Leap 42.1 (noarch): ibus-branding-openSUSE-KDE-1.5.11-5.1 ibus-lang-1.5.11-5.1 References: https://bugzilla.suse.com/968486

1 0

openSUSE-RU-2016:0671-1: moderate: Recommended update for xf86-video-intel
by maintenance＠opensuse.org 07 Mar '16

07 Mar '16

openSUSE Recommended Update: Recommended update for xf86-video-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0671-1 Rating: moderate References: #968598 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xf86-video-intel fixes the following issues: - boo#968598: Fix intel intel-virtual-output: check more carefully for DRI3 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-311=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xf86-video-intel-2.99.917-12.1 xf86-video-intel-debuginfo-2.99.917-12.1 xf86-video-intel-debugsource-2.99.917-12.1 - openSUSE Leap 42.1 (x86_64): xf86-video-intel-32bit-2.99.917-12.1 xf86-video-intel-debuginfo-32bit-2.99.917-12.1 References: https://bugzilla.suse.com/968598

1 0

openSUSE-RU-2016:0670-1: moderate: Recommended update for NetworkManager
by maintenance＠opensuse.org 07 Mar '16

07 Mar '16

openSUSE Recommended Update: Recommended update for NetworkManager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0670-1 Rating: moderate References: #962054 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for NetworkManager fixes the following issues: - increase the quit timer for vpn plugin service from 20 sec to 3 mins, so that it doesn't quit whilst asking for secrets (fixes boo#962054). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-309=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): NetworkManager-1.0.6-7.1 NetworkManager-debuginfo-1.0.6-7.1 NetworkManager-debugsource-1.0.6-7.1 NetworkManager-devel-1.0.6-7.1 libnm-glib-vpn1-1.0.6-7.1 libnm-glib-vpn1-debuginfo-1.0.6-7.1 libnm-glib4-1.0.6-7.1 libnm-glib4-debuginfo-1.0.6-7.1 libnm-util2-1.0.6-7.1 libnm-util2-debuginfo-1.0.6-7.1 libnm0-1.0.6-7.1 libnm0-debuginfo-1.0.6-7.1 typelib-1_0-NM-1_0-1.0.6-7.1 typelib-1_0-NMClient-1_0-1.0.6-7.1 typelib-1_0-NetworkManager-1_0-1.0.6-7.1 - openSUSE Leap 42.1 (x86_64): NetworkManager-devel-32bit-1.0.6-7.1 libnm-glib-vpn1-32bit-1.0.6-7.1 libnm-glib-vpn1-debuginfo-32bit-1.0.6-7.1 libnm-glib4-32bit-1.0.6-7.1 libnm-glib4-debuginfo-32bit-1.0.6-7.1 libnm-util2-32bit-1.0.6-7.1 libnm-util2-debuginfo-32bit-1.0.6-7.1 - openSUSE Leap 42.1 (noarch): NetworkManager-lang-1.0.6-7.1 References: https://bugzilla.suse.com/962054

1 0

openSUSE-RU-2016:0669-1: Recommended update for biosdevname
by maintenance＠opensuse.org 07 Mar '16

07 Mar '16

openSUSE Recommended Update: Recommended update for biosdevname ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0669-1 Rating: low References: #965581 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for biosdevname provides the following fixes: - In ConnectX-4 based devices, each physical port has a dedicated PCI function. Apply special handling for only ConnectX-3 based devices where single PCI function is shared by multiple physical ports. (bsc#965581) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-312=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): biosdevname-0.6.2-7.1 biosdevname-debuginfo-0.6.2-7.1 biosdevname-debugsource-0.6.2-7.1 References: https://bugzilla.suse.com/965581

1 0

openSUSE-RU-2016:0668-1: moderate: Recommended update for dolphin
by maintenance＠opensuse.org 07 Mar '16

07 Mar '16

openSUSE Recommended Update: Recommended update for dolphin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0668-1 Rating: moderate References: #965514 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dolphin fixes the following issues: - boo#965514: Dolphin would crash on exit due to an unneccessary icon parameter in the dolphinsu.desktop file Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-308=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): dolphin-15.12.2-16.1 dolphin-debuginfo-15.12.2-16.1 dolphin-debugsource-15.12.2-16.1 dolphin-devel-15.12.2-16.1 dolphin-part-15.12.2-16.1 dolphin-part-debuginfo-15.12.2-16.1 libdolphinvcs5-15.12.2-16.1 libdolphinvcs5-debuginfo-15.12.2-16.1 References: https://bugzilla.suse.com/965514

1 0

openSUSE-RU-2016:0667-1: moderate: Recommended update for fcitx
by maintenance＠opensuse.org 07 Mar '16

07 Mar '16

openSUSE Recommended Update: Recommended update for fcitx ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0667-1 Rating: moderate References: #968486 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fcitx fixes the following issues: - boo#968486: Delay invocation of fcitx inat session start - Add NoDisplay=true in autostart desktop file so that it won't be shown Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-313=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): fcitx-4.2.9-8.1 fcitx-debuginfo-4.2.9-8.1 fcitx-debugsource-4.2.9-8.1 fcitx-devel-4.2.9-8.1 fcitx-devel-debuginfo-4.2.9-8.1 fcitx-gtk2-4.2.9-8.1 fcitx-gtk2-debuginfo-4.2.9-8.1 fcitx-gtk3-4.2.9-8.1 fcitx-gtk3-debuginfo-4.2.9-8.1 fcitx-pinyin-4.2.9-8.1 fcitx-pinyin-debuginfo-4.2.9-8.1 fcitx-pinyin-tools-4.2.9-8.1 fcitx-pinyin-tools-debuginfo-4.2.9-8.1 fcitx-qt4-4.2.9-8.1 fcitx-qt4-debuginfo-4.2.9-8.1 fcitx-quwei-4.2.9-8.1 fcitx-quwei-debuginfo-4.2.9-8.1 fcitx-table-4.2.9-8.1 fcitx-table-debuginfo-4.2.9-8.1 fcitx-table-tools-4.2.9-8.1 fcitx-table-tools-debuginfo-4.2.9-8.1 libfcitx-4_2_9-4.2.9-8.1 libfcitx-4_2_9-debuginfo-4.2.9-8.1 typelib-1_0-Fcitx-1_0-4.2.9-8.1 - openSUSE Leap 42.1 (x86_64): fcitx-gtk2-32bit-4.2.9-8.1 fcitx-gtk2-debuginfo-32bit-4.2.9-8.1 fcitx-gtk3-32bit-4.2.9-8.1 fcitx-gtk3-debuginfo-32bit-4.2.9-8.1 fcitx-qt4-32bit-4.2.9-8.1 fcitx-qt4-debuginfo-32bit-4.2.9-8.1 libfcitx-4_2_9-32bit-4.2.9-8.1 libfcitx-4_2_9-debuginfo-32bit-4.2.9-8.1 - openSUSE Leap 42.1 (noarch): fcitx-branding-openSUSE-4.2.9-8.1 fcitx-skin-classic-4.2.9-8.1 fcitx-skin-dark-4.2.9-8.1 fcitx-skin-new-air-4.2.9-8.1 fcitx-table-cn-bingchan-4.2.9-8.1 fcitx-table-cn-cangjie-4.2.9-8.1 fcitx-table-cn-dianbao-4.2.9-8.1 fcitx-table-cn-erbi-4.2.9-8.1 fcitx-table-cn-wanfeng-4.2.9-8.1 fcitx-table-cn-wubi-4.2.9-8.1 fcitx-table-cn-wubi-pinyin-4.2.9-8.1 fcitx-table-cn-ziran-4.2.9-8.1 References: https://bugzilla.suse.com/968486

1 0

openSUSE-SU-2016:0666-1: moderate: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 06 Mar '16

06 Mar '16

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0666-1 Rating: moderate References: #968938 #968941 Cross-References: CVE-2016-2560 CVE-2016-2561 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update to phpMyAdmin 4.4.15.4 fixes the following security issues: - CVE-2016-2560: Multiple XSS vulnerabilities (PMASA-2016-11 boo#968938) - CVE-2016-2561: Multiple XSS vulnerabilities (PMASA-2016-12 boo#968941) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-305=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): phpMyAdmin-4.4.15.5-52.1 References: https://www.suse.com/security/cve/CVE-2016-2560.html https://www.suse.com/security/cve/CVE-2016-2561.html https://bugzilla.suse.com/968938 https://bugzilla.suse.com/968941

1 0

openSUSE-SU-2016:0664-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 06 Mar '16

06 Mar '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0664-1 Rating: important References: #969333 Cross-References: CVE-2015-8126 CVE-2016-1630 CVE-2016-1631 CVE-2016-1632 CVE-2016-1633 CVE-2016-1634 CVE-2016-1635 CVE-2016-1636 CVE-2016-1637 CVE-2016-1638 CVE-2016-1639 CVE-2016-1640 CVE-2016-1641 CVE-2016-1642 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: Chromium was updated to 49.0.2623.75 to fix the following security issues: (boo#969333) - CVE-2016-1630: Same-origin bypass in Blink - CVE-2016-1631: Same-origin bypass in Pepper Plugin - CVE-2016-1632: Bad cast in Extensions - CVE-2016-1633: Use-after-free in Blink - CVE-2016-1634: Use-after-free in Blink - CVE-2016-1635: Use-after-free in Blink - CVE-2016-1636: SRI Validation Bypass - CVE-2015-8126: Out-of-bounds access in libpng - CVE-2016-1637: Information Leak in Skia - CVE-2016-1638: WebAPI Bypass - CVE-2016-1639: Use-after-free in WebRTC - CVE-2016-1640: Origin confusion in Extensions UI - CVE-2016-1641: Use-after-free in Favicon - CVE-2016-1642: Various fixes from internal audits, fuzzing and other initiatives - Multiple vulnerabilities in V8 fixed at the tip of the 4.9 branch (currently 4.9.385.26) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch 4789=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): chromedriver-49.0.2623.75-27.1 chromedriver-debuginfo-49.0.2623.75-27.1 chromium-49.0.2623.75-27.1 chromium-debuginfo-49.0.2623.75-27.1 chromium-debugsource-49.0.2623.75-27.1 chromium-desktop-gnome-49.0.2623.75-27.1 chromium-desktop-kde-49.0.2623.75-27.1 chromium-ffmpegsumo-49.0.2623.75-27.1 chromium-ffmpegsumo-debuginfo-49.0.2623.75-27.1 References: https://www.suse.com/security/cve/CVE-2015-8126.html https://www.suse.com/security/cve/CVE-2016-1630.html https://www.suse.com/security/cve/CVE-2016-1631.html https://www.suse.com/security/cve/CVE-2016-1632.html https://www.suse.com/security/cve/CVE-2016-1633.html https://www.suse.com/security/cve/CVE-2016-1634.html https://www.suse.com/security/cve/CVE-2016-1635.html https://www.suse.com/security/cve/CVE-2016-1636.html https://www.suse.com/security/cve/CVE-2016-1637.html https://www.suse.com/security/cve/CVE-2016-1638.html https://www.suse.com/security/cve/CVE-2016-1639.html https://www.suse.com/security/cve/CVE-2016-1640.html https://www.suse.com/security/cve/CVE-2016-1641.html https://www.suse.com/security/cve/CVE-2016-1642.html https://bugzilla.suse.com/969333

1 0

openSUSE-SU-2016:0663-1: moderate: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 06 Mar '16

06 Mar '16

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0663-1 Rating: moderate References: #968938 #968941 Cross-References: CVE-2016-2560 CVE-2016-2561 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update to phpMyAdmin 4.4.15.4 fixes the following security issues: - CVE-2016-2560: Multiple XSS vulnerabilities (PMASA-2016-11 boo#968938) - CVE-2016-2561: Multiple XSS vulnerabilities (PMASA-2016-12 boo#968941) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-304=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-304=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): phpMyAdmin-4.4.15.5-16.1 - openSUSE 13.2 (noarch): phpMyAdmin-4.4.15.5-30.1 References: https://www.suse.com/security/cve/CVE-2016-2560.html https://www.suse.com/security/cve/CVE-2016-2561.html https://bugzilla.suse.com/968938 https://bugzilla.suse.com/968941

1 0

openSUSE-SU-2016:0662-1: moderate: Security update for pigz
by opensuse-security＠opensuse.org 06 Mar '16

06 Mar '16

openSUSE Security Update: Security update for pigz ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0662-1 Rating: moderate References: #913627 Cross-References: CVE-2015-1191 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Pigz, a multi-threaded implementation of gzip, was updated to fix one vulnerability. The following vulnerability was fixed: * A crafted file could have caused an unwanted directory traversal on extract (CVE-2015-1191) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-303=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): pigz-2.3-2.3.1 pigz-debuginfo-2.3-2.3.1 pigz-debugsource-2.3-2.3.1 References: https://www.suse.com/security/cve/CVE-2015-1191.html https://bugzilla.suse.com/913627

1 0