March 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:0790-1: important: Security update for rubygem-actionview-4_2
by opensuse-security＠opensuse.org 16 Mar '16

16 Mar '16

openSUSE Security Update: Security update for rubygem-actionview-4_2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0790-1 Rating: important References: #968849 Cross-References: CVE-2016-2098 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rubygem-actionview-4_2 fixes the following issues: - CVE-2016-2098: rubygem-actionpack: Possible remote code execution vulnerability in Action Pack (boo#968849) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-352=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ruby2.1-rubygem-actionview-4_2-4.2.4-9.1 ruby2.1-rubygem-actionview-doc-4_2-4.2.4-9.1 References: https://www.suse.com/security/cve/CVE-2016-2098.html https://bugzilla.suse.com/968849

1 0

openSUSE-RU-2016:0789-1: moderate: Recommended update for perl-Net-IP
by maintenance＠opensuse.org 16 Mar '16

16 Mar '16

openSUSE Recommended Update: Recommended update for perl-Net-IP ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0789-1 Rating: moderate References: #942108 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for perl-Net-IP fixes the following issues: - boo#942108: fix the use of + in the address range Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-350=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): perl-Net-IP-1.26-7.1 References: https://bugzilla.suse.com/942108

1 0

openSUSE-SU-2016:0788-1: important: Security update for bsh2
by opensuse-security＠opensuse.org 16 Mar '16

16 Mar '16

openSUSE Security Update: Security update for bsh2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0788-1 Rating: important References: #967593 Cross-References: CVE-2016-2510 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bsh2 fixes the following issues: - CVE-2016-2510: An application that includes BeanShell on the classpath may be vulnerable if another part of the application uses Java serialization or XStream to deserialize data from an untrusted source. Please see https://github.com/beanshell/beanshell/releases/tag/2.0b6 for more information. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-351=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): bsh2-2.0.0.b5-30.1 bsh2-bsf-2.0.0.b5-30.1 bsh2-classgen-2.0.0.b5-30.1 bsh2-demo-2.0.0.b5-30.1 bsh2-javadoc-2.0.0.b5-30.1 bsh2-manual-2.0.0.b5-30.1 bsh2-src-2.0.0.b5-30.1 References: https://www.suse.com/security/cve/CVE-2016-2510.html https://bugzilla.suse.com/967593

1 0

openSUSE-OU-2016:0784-1: Optional update for sbc
by maintenance＠opensuse.org 16 Mar '16

16 Mar '16

openSUSE Optional Update: Optional update for sbc ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:0784-1 Rating: low References: #949416 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for sbc enables building of libsbc1-32bit. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-347=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libsbc1-1.0-9.1 libsbc1-debuginfo-1.0-9.1 sbc-1.0-9.1 sbc-debuginfo-1.0-9.1 sbc-debugsource-1.0-9.1 sbc-devel-1.0-9.1 - openSUSE Leap 42.1 (x86_64): libsbc1-32bit-1.0-9.1 libsbc1-debuginfo-32bit-1.0-9.1 References: https://bugzilla.suse.com/949416

1 0

openSUSE-OU-2016:0783-1: moderate: Optional update for yast2-cluster, hawk2
by maintenance＠opensuse.org 16 Mar '16

16 Mar '16

openSUSE Optional Update: Optional update for yast2-cluster, hawk2 ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:0783-1 Rating: moderate References: #957305 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update contains hawk2, the successor of hawk. The hawk2 package is inherited from SLE 12 SP1 HA. The YaST2 Cluster module was also updated to use the version of Hawk. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-345=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): hawk2-1.0.1+git.1456406635.49e230d-2.2 hawk2-debuginfo-1.0.1+git.1456406635.49e230d-2.2 hawk2-debugsource-1.0.1+git.1456406635.49e230d-2.2 - openSUSE Leap 42.1 (noarch): yast2-cluster-3.1.22-5.1 References: https://bugzilla.suse.com/957305

1 0

openSUSE-RU-2016:0782-1: Recommended update for insserv-compat
by maintenance＠opensuse.org 16 Mar '16

16 Mar '16

openSUSE Recommended Update: Recommended update for insserv-compat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0782-1 Rating: low References: #960820 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for insserv-compat fixes the name of the ntpd service. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-346=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): insserv-compat-0.1-15.1 References: https://bugzilla.suse.com/960820

1 0

openSUSE-RU-2016:0781-1: Recommended update for SDL
by maintenance＠opensuse.org 16 Mar '16

16 Mar '16

openSUSE Recommended Update: Recommended update for SDL ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0781-1 Rating: low References: #953861 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for SDL disables usage of backing storage by default due to tearing effects. Users who would like to enable it can set the SDL_VIDEO_X11_BACKINGSTORE environment variable. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-348=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): SDL-debugsource-1.2.15-17.1 libSDL-1_2-0-1.2.15-17.1 libSDL-1_2-0-debuginfo-1.2.15-17.1 libSDL-devel-1.2.15-17.1 - openSUSE Leap 42.1 (x86_64): libSDL-1_2-0-32bit-1.2.15-17.1 libSDL-1_2-0-debuginfo-32bit-1.2.15-17.1 libSDL-devel-32bit-1.2.15-17.1 References: https://bugzilla.suse.com/953861

1 0

openSUSE-RU-2016:0768-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 15 Mar '16

15 Mar '16

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0768-1 Rating: moderate References: #954433 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for xorg-x11-server fixes the following issues: - Ignore file descriptor if socket or devices dies. This prevents the Xserver to loop at 100% when dbus dies (boo#954433). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-344=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xorg-x11-server-7.6_1.17.2-24.2 xorg-x11-server-debuginfo-7.6_1.17.2-24.2 xorg-x11-server-debugsource-7.6_1.17.2-24.2 xorg-x11-server-extra-7.6_1.17.2-24.2 xorg-x11-server-extra-debuginfo-7.6_1.17.2-24.2 xorg-x11-server-sdk-7.6_1.17.2-24.2 xorg-x11-server-source-7.6_1.17.2-24.2 References: https://bugzilla.suse.com/954433

1 0

openSUSE-RU-2016:0767-1: Recommended update for yast2-firstboot
by maintenance＠opensuse.org 15 Mar '16

15 Mar '16

openSUSE Recommended Update: Recommended update for yast2-firstboot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0767-1 Rating: low References: #960081 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-firstboot fixes firstboot.xml to call the correct client for LAN configuration. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-342=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): yast2-firstboot-3.1.11-3.1 References: https://bugzilla.suse.com/960081

1 0

openSUSE-RU-2016:0766-1: moderate: Recommended update for wicked
by maintenance＠opensuse.org 15 Mar '16

15 Mar '16

openSUSE Recommended Update: Recommended update for wicked ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0766-1 Rating: moderate References: #927615 #936514 #944710 #953107 #955778 #955864 #957944 #959356 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update provides Wicked 0.6.30, which brings many fixes and enhancements: - wireless: Fix EAP inconsistencies and add missing auth method names to translation maps. (bsc#936514, bsc#927615) - fsm: Do not terminate with a segmentation fault on device hierarchy loops. (bsc#959356) - fsm: Handle down/step back events in ifup flow instead of trying to workaround in nanny. (bsc#955864) - ethtool: Map da,none,other port types. (bsc#957944) - ipv4: Remove pointless broadcast calculations and send to the kernel only if explicitly requested in ifcfg file or by dhcp options. The kernel has its own logic to automatically calculate related settings as needed. Also removed broadcast setting from ifcfg-lo to not override kernel's setup. (bsc#944710) - rpm: Do not use systemctl show in scripts. (bsc#955778) - nanny: Skip recheck when no policy configured. (bsc#953107) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-343=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libwicked-0-6-0.6.30-6.1 libwicked-0-6-debuginfo-0.6.30-6.1 wicked-0.6.30-6.1 wicked-debuginfo-0.6.30-6.1 wicked-debugsource-0.6.30-6.1 wicked-service-0.6.30-6.1 References: https://bugzilla.suse.com/927615 https://bugzilla.suse.com/936514 https://bugzilla.suse.com/944710 https://bugzilla.suse.com/953107 https://bugzilla.suse.com/955778 https://bugzilla.suse.com/955864 https://bugzilla.suse.com/957944 https://bugzilla.suse.com/959356

1 0