April 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:1083-1: moderate: Recommended update for ceph-deploy, python-execnet, python-remoto
by maintenance＠opensuse.org 18 Apr '16

18 Apr '16

openSUSE Recommended Update: Recommended update for ceph-deploy, python-execnet, python-remoto ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1083-1 Rating: moderate References: #886872 #893810 #929553 #933028 #938564 #938565 #938566 #938894 #939710 #940840 #942274 #942399 #942495 #948375 #948577 #963022 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has 15 fixes is now available. Description: This recommended update introduces the new packages ceph-deploy, python-execnet and python-remoto Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-480=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): ceph-deploy-1.5.25+git.1453390973.98e76c0-2.1 python-execnet-1.2post2-2.1 python-remoto-0.0.23-2.1 References: https://www.suse.com/security/cve/CVE-2015-4053.html https://bugzilla.suse.com/886872 https://bugzilla.suse.com/893810 https://bugzilla.suse.com/929553 https://bugzilla.suse.com/933028 https://bugzilla.suse.com/938564 https://bugzilla.suse.com/938565 https://bugzilla.suse.com/938566 https://bugzilla.suse.com/938894 https://bugzilla.suse.com/939710 https://bugzilla.suse.com/940840 https://bugzilla.suse.com/942274 https://bugzilla.suse.com/942399 https://bugzilla.suse.com/942495 https://bugzilla.suse.com/948375 https://bugzilla.suse.com/948577 https://bugzilla.suse.com/963022

1 0

openSUSE-SU-2016:1082-1: moderate: Security update for optipng
by opensuse-security＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Security Update: Security update for optipng ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1082-1 Rating: moderate References: #973992 Cross-References: CVE-2016-2191 CVE-2016-3981 CVE-2016-3982 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: optipng was updated to fix one security issue. This security issue was fixed: - CVE-2016-2191: Invalid write while processing bitmap images (bsc#973992). - CVE-2016-3981: Heap buffer overflow pngxrbmp.c bmp_read_rows - CVE-2016-3982: Heap buffer overflow pngxrbmp.c bmp_rle4_fread Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-469=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): optipng-0.7.5-2.3.2 optipng-debuginfo-0.7.5-2.3.2 optipng-debugsource-0.7.5-2.3.2 References: https://www.suse.com/security/cve/CVE-2016-2191.html https://www.suse.com/security/cve/CVE-2016-3981.html https://www.suse.com/security/cve/CVE-2016-3982.html https://bugzilla.suse.com/973992

1 0

openSUSE-SU-2016:1081-1: moderate: Security update for tiff
by opensuse-security＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Security Update: Security update for tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1081-1 Rating: moderate References: #973340 Cross-References: CVE-2016-3186 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: tiff was updated to fix one security issue. This security issue was fixed: - CVE-2016-3186: Buffer overflow in gif2tiff (bsc#973340). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-478=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libtiff-devel-4.0.6-10.23.1 libtiff5-4.0.6-10.23.1 libtiff5-debuginfo-4.0.6-10.23.1 tiff-4.0.6-10.23.1 tiff-debuginfo-4.0.6-10.23.1 tiff-debugsource-4.0.6-10.23.1 - openSUSE 13.2 (x86_64): libtiff-devel-32bit-4.0.6-10.23.1 libtiff5-32bit-4.0.6-10.23.1 libtiff5-debuginfo-32bit-4.0.6-10.23.1 References: https://www.suse.com/security/cve/CVE-2016-3186.html https://bugzilla.suse.com/973340

1 0

openSUSE-RU-2016:1080-1: moderate: Recommended update for cntlm
by maintenance＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Recommended Update: Recommended update for cntlm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1080-1 Rating: moderate References: #914157 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cntlm fixes the following issues: - Correct typo in changelog (boo#914157) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-465=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): cntlm-0.92.3-9.1 cntlm-debuginfo-0.92.3-9.1 cntlm-debugsource-0.92.3-9.1 References: https://bugzilla.suse.com/914157

1 0

openSUSE-RU-2016:1079-1: moderate: Recommended update for cloud-init
by maintenance＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Recommended Update: Recommended update for cloud-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1079-1 Rating: moderate References: #971275 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cloud-init fixes the following issue: - Properly handle the package_upgrade configuration option (bsc#971275) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-463=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): cloud-init-0.7.6-20.1 cloud-init-doc-0.7.6-20.1 cloud-init-test-0.7.6-20.1 References: https://bugzilla.suse.com/971275

1 0

openSUSE-SU-2016:1078-1: moderate: Security update for optipng
by opensuse-security＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Security Update: Security update for optipng ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1078-1 Rating: moderate References: #973992 Cross-References: CVE-2016-2191 CVE-2016-3981 CVE-2016-3982 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: optipng was updated to fix one security issue. This security issue was fixed: - CVE-2016-2191: Invalid write while processing bitmap images (bsc#973992). - CVE-2016-3981: Heap buffer overflow pngxrbmp.c bmp_read_rows - CVE-2016-3982: Heap buffer overflow pngxrbmp.c bmp_rle4_fread Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-468=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): optipng-0.7.5-8.2 optipng-debuginfo-0.7.5-8.2 optipng-debugsource-0.7.5-8.2 References: https://www.suse.com/security/cve/CVE-2016-2191.html https://www.suse.com/security/cve/CVE-2016-3981.html https://www.suse.com/security/cve/CVE-2016-3982.html https://bugzilla.suse.com/973992

1 0

openSUSE-RU-2016:1077-1: Recommended update for yast2-users
by maintenance＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Recommended Update: Recommended update for yast2-users ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1077-1 Rating: low References: #965852 #966867 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-users fixes the following issues: - Do not include inst-sys users when cloning the configuration after the installation. (bsc#965852) - Do not crash autoinstallation if the home directory of a user is directly under /. (bsc#966867) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-475=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): yast2-users-3.1.41.2-7.1 yast2-users-debuginfo-3.1.41.2-7.1 yast2-users-debugsource-3.1.41.2-7.1 yast2-users-devel-doc-3.1.41.2-7.1 References: https://bugzilla.suse.com/965852 https://bugzilla.suse.com/966867

1 0

openSUSE-OU-2016:1076-1: Optional update for yast2-samba-server
by maintenance＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Optional Update: Optional update for yast2-samba-server ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:1076-1 Rating: low References: #972197 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for yast2-samba-server fixes the following issues: - Don't require libsmbclient as it's pulled in by libsmbclient-devel. (bsc#972197) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-470=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): yast2-samba-server-3.1.14-16.1 References: https://bugzilla.suse.com/972197

1 0

openSUSE-RU-2016:1075-1: moderate: Recommended update for virtualbox
by maintenance＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1075-1 Rating: moderate References: #964765 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 5.0.16 for virtualbox: - Version bump to 5.0.16 (released 2016-03-04 by Oracle) This change should fix b.o.o #964765. This is a maintenance release. The following items were fixed and/or added: VMM: fixed a problem which could lead to a wrong guest behavior on AMD CPUs (tickets #14831 and #15186) GUI: don't try to synchronize the HID LEDs if the VM window is not active or if it's minimized (Windows / Mac OS X hosts only; bug #14302) GUI: prevent a crash during startup under rare conditions GUI: sub-menu option to disable the guest-OS type overlay in the application dock icon on Mac OS X GUI: position off-screen windows to be fully visible again on relaunch GUI: hide the VT-x/AMD-V checkbox if raw-mode is not supported (usually Mac OS X hosts; bug #15178) PC speaker passthrough: new experimental feature, available on Linux host only Audio: several fixes for Mac OS X hosts + guests Audio: properly handle default audio device changes (Windows hosts) USB: serveral fixes for the xHCI controller (e.g. for webcam passthrough) BIOS: fixed int15/AH=83/AL=00 function (4.2.0 regression) iPXE: enable the HTTP download protocol on non-Linux hosts (bug #13628) Shared folders: fixed a failure to load the saved state under certain circumstances (bug #6314) Guest Control: added support for (cached) Active Directory authentication in case the domain controller is not reachable (anymore) Serial ports: raised the number of serial ports per VM from 2 to 4 (bug #9109) Serial ports: fix for the TCP/IP backend (Windows hosts only; bug #15188) SDK: make the Python webservice API binding work again (5.0 regression) Seamless mode: fixed a crash under certain circumstances (bug #15106) Linux hosts: fixed the /sbin/rcvboxdrv script as well as the missing shebang in two scripts (bugs #15055 and #15057) Linux hosts: properly uninstall Python files installed by the .run installer Windows Additions: fixed guest property enumeration of logged-in users Windows Additions: fixed sporadical failure of the graphics driver in Windows 10 guests (bug #14409) Windows Additions: under rare circumstances no mouse movement events were delivered to the guest VirtualBox 5.0.14 (released 2016-01-19) This is a maintenance release. The following items were fixed and/or added: GUI: properly limit the number of VCPUs to the number of physical cores on Mac OS X (bug #15018) Audio: fixed a bug which prevented loading a saved state of a saved guests with HDA emulation (5.0.12 regression; bug #14981) Audio: don't crash if the backend is unable to initialize (bug #14960) Audio: fixed audio capture on Mac OS X (bug #14386) Storage: fixed a possible crash when attaching the same ISO image multiple times to the same VM (bug #14951) BIOS: properly report if two floppy drives are attached USB: fixed a problem with filters which would not capture the device under certain circumstances (5.0.10 regression; bug #15042) ExtPack: black-list Extension Packs older than 4.3.30 due to incompatible changes not being properly handled in the past Linux hosts: properly create the /sbin/rcvboxdrv symbolic link (5.0.12 regression; bug #14989) Linux Additions: fixes for Linux 4.5 (bug #15032) VirtualBox 5.0.12 (released 2015-12-18) This is a maintenance release. The following items were fixed and/or added: GUI: fixed wrong scrolling behaviour in the VM selector window when a VM item is dragged out of the chooser-pane area GUI: fixed the validation of IPv6 port-forwarding rules GUI: suppress the first-run wizard if a CD/DVD medium is inserted using the selector UI GUI: fixed the Ctrl+Break key sequence scan codes (bug #14927) GUI: improved handling of text selection mouse pointer (bug #750) Host services: fixed a crash during VM shutdown under rare conditions (5.0.6 regression; bug #14841) Shared folders: fixed a sharing violation if a file is opened to check the attributes (Windows hosts only; bug #14450) Webcam: passthrough fix for certain devices (Mac OS X hosts only) XHCI: fixed broken emulation if software virtualization is used XHCI: several fixes 3D: fixed state handling under certain conditions (bug #13487) Audio: several fixes BIOS: added LBA64 support for being able to boot from huge hard disks (bug #7415) EFI: fix for Windows 10 guests ExtPack: before installing an Extension Pack check if there are VMs running to prevent file system locking issues rdesktop-vrdp: source code tarball fixes Linux hosts: .desktop file compatibility issue (bug #14808) Linux hosts / guests: fixes for RHEL 7.2 (bug #14866) Linux hosts: The command for recompiling the host kernel modules was changed again, to /sbin/rcvboxdrv setup (bug #14723) Linux hosts: some fixes for PCI passthrough (still highly experimental) Linux/Mac OS X hosts: fixed a VM hang during startup under certain circumstances (bug #14933) Linux Additions: prevent the compiler from doing dead-code elemination on vital code in guest / host communication (bug #14497) Linux Additions: when mounting a shared folder, explicitly pass the share name so that /proc/mounts contains this name instead of 'none' Linux Additions: workaround for a systemd problem in conjunction with SELinux which prevented to properly enable the 'vboxadd' service during while upgrading the Additions Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-466=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): python-virtualbox-5.0.16-13.1 python-virtualbox-debuginfo-5.0.16-13.1 virtualbox-5.0.16-13.1 virtualbox-debuginfo-5.0.16-13.1 virtualbox-debugsource-5.0.16-13.1 virtualbox-devel-5.0.16-13.1 virtualbox-guest-kmp-default-5.0.16_k4.1.15_8-13.1 virtualbox-guest-kmp-default-debuginfo-5.0.16_k4.1.15_8-13.1 virtualbox-guest-tools-5.0.16-13.1 virtualbox-guest-tools-debuginfo-5.0.16-13.1 virtualbox-guest-x11-5.0.16-13.1 virtualbox-guest-x11-debuginfo-5.0.16-13.1 virtualbox-host-kmp-default-5.0.16_k4.1.15_8-13.1 virtualbox-host-kmp-default-debuginfo-5.0.16_k4.1.15_8-13.1 virtualbox-qt-5.0.16-13.1 virtualbox-qt-debuginfo-5.0.16-13.1 virtualbox-websrv-5.0.16-13.1 virtualbox-websrv-debuginfo-5.0.16-13.1 - openSUSE Leap 42.1 (noarch): virtualbox-guest-desktop-icons-5.0.16-13.1 virtualbox-host-source-5.0.16-13.1 References: https://bugzilla.suse.com/964765

1 0

openSUSE-RU-2016:1074-1: moderate: Recommended update for nmon
by maintenance＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Recommended Update: Recommended update for nmon ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1074-1 Rating: moderate References: #974718 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update to nmon 16e fixes a numer of issues fixed upstream (boo#974718): * Bug caused Seg Faults core dumps fixed while collecting to a file including top process stats. * Improved memory handling with many processes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-477=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): nmon-16e-6.1 nmon-debuginfo-16e-6.1 nmon-debugsource-16e-6.1 References: https://bugzilla.suse.com/974718

1 0

openSUSE-SU-2016:1073-1: important: Security update for mercurial
by opensuse-security＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Security Update: Security update for mercurial ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1073-1 Rating: important References: #973175 #973176 #973177 Cross-References: CVE-2016-3068 CVE-2016-3069 CVE-2016-3630 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: mercurial was updated to fix three security issues. These security issues were fixed: - CVE-2016-3069: Arbitrary code execution when converting Git repos (bsc#973176). - CVE-2016-3068: Arbitrary code execution with Git subrepos (bsc#973177). - CVE-2016-3630: Remote code execution in binary delta decoding (bsc#973175). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-467=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): mercurial-3.5.1-3.1 mercurial-debuginfo-3.5.1-3.1 mercurial-debugsource-3.5.1-3.1 - openSUSE Leap 42.1 (noarch): mercurial-lang-3.5.1-3.1 References: https://www.suse.com/security/cve/CVE-2016-3068.html https://www.suse.com/security/cve/CVE-2016-3069.html https://www.suse.com/security/cve/CVE-2016-3630.html https://bugzilla.suse.com/973175 https://bugzilla.suse.com/973176 https://bugzilla.suse.com/973177

1 0

openSUSE-SU-2016:1072-1: moderate: Security update for krb5
by opensuse-security＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Security Update: Security update for krb5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1072-1 Rating: moderate References: #971942 Cross-References: CVE-2016-3119 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for krb5 fixes the following security issue: - CVE-2016-3119: An authenticated attacker with permission to modify a principal entry could have caused kadmind to dereference a null pointer by supplying an empty DB argument to the modify_principal command, if kadmind is configured to use the LDAP KDB module. (bsc#971942) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-474=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): krb5-1.12.1-30.1 krb5-client-1.12.1-30.1 krb5-client-debuginfo-1.12.1-30.1 krb5-debuginfo-1.12.1-30.1 krb5-debugsource-1.12.1-30.1 krb5-devel-1.12.1-30.1 krb5-doc-1.12.1-30.1 krb5-mini-1.12.1-30.1 krb5-mini-debuginfo-1.12.1-30.1 krb5-mini-debugsource-1.12.1-30.1 krb5-mini-devel-1.12.1-30.1 krb5-plugin-kdb-ldap-1.12.1-30.1 krb5-plugin-kdb-ldap-debuginfo-1.12.1-30.1 krb5-plugin-preauth-otp-1.12.1-30.1 krb5-plugin-preauth-otp-debuginfo-1.12.1-30.1 krb5-plugin-preauth-pkinit-1.12.1-30.1 krb5-plugin-preauth-pkinit-debuginfo-1.12.1-30.1 krb5-server-1.12.1-30.1 krb5-server-debuginfo-1.12.1-30.1 - openSUSE Leap 42.1 (x86_64): krb5-32bit-1.12.1-30.1 krb5-debuginfo-32bit-1.12.1-30.1 krb5-devel-32bit-1.12.1-30.1 References: https://www.suse.com/security/cve/CVE-2016-3119.html https://bugzilla.suse.com/971942

1 0

openSUSE-RU-2016:1071-1: moderate: Recommended update for kdepim4, kdepim4-runtime, kdepimlibs4
by maintenance＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Recommended Update: Recommended update for kdepim4, kdepim4-runtime, kdepimlibs4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1071-1 Rating: moderate References: #973629 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kdepim4, kdepim4-runtime, kdepimlibs4 fixes the following issues: - boo#973629 - kdepim: resizing attached images in Kontact corrupts the images - prevent a kmail timeout error on startup, especially when started during login Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-464=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): akonadi-4.14.10-28.2 akonadi-debuginfo-4.14.10-28.2 akregator-4.14.10-28.2 akregator-debuginfo-4.14.10-28.2 blogilo-4.14.10-28.2 blogilo-debuginfo-4.14.10-28.2 kaddressbook-4.14.10-28.2 kaddressbook-debuginfo-4.14.10-28.2 kalarm-4.14.10-28.2 kalarm-debuginfo-4.14.10-28.2 kdepim4-4.14.10-28.2 kdepim4-debuginfo-4.14.10-28.2 kdepim4-debugsource-4.14.10-28.2 kdepim4-runtime-4.14.10-28.1 kdepim4-runtime-debuginfo-4.14.10-28.1 kdepim4-runtime-debugsource-4.14.10-28.1 kdepimlibs4-4.14.10-28.1 kdepimlibs4-debuginfo-4.14.10-28.1 kdepimlibs4-debugsource-4.14.10-28.1 kjots-4.14.10-28.2 kjots-debuginfo-4.14.10-28.2 kmail-4.14.10-28.2 kmail-debuginfo-4.14.10-28.2 knode-4.14.10-28.2 knode-debuginfo-4.14.10-28.2 knotes-4.14.10-28.2 knotes-debuginfo-4.14.10-28.2 kontact-4.14.10-28.2 kontact-debuginfo-4.14.10-28.2 korganizer-4.14.10-28.2 korganizer-debuginfo-4.14.10-28.2 ktimetracker-4.14.10-28.2 ktimetracker-debuginfo-4.14.10-28.2 ktnef-4.14.10-28.2 ktnef-debuginfo-4.14.10-28.2 libakonadi4-4.14.10-28.1 libakonadi4-debuginfo-4.14.10-28.1 libkdepim4-4.14.10-28.2 libkdepim4-debuginfo-4.14.10-28.2 libkdepimlibs4-4.14.10-28.1 libkdepimlibs4-debuginfo-4.14.10-28.1 libkdepimlibs4-devel-4.14.10-28.1 libkdepimlibs4-devel-debuginfo-4.14.10-28.1 - openSUSE 13.2 (x86_64): libakonadi4-32bit-4.14.10-28.1 libakonadi4-debuginfo-32bit-4.14.10-28.1 libkdepimlibs4-32bit-4.14.10-28.1 libkdepimlibs4-debuginfo-32bit-4.14.10-28.1 References: https://bugzilla.suse.com/973629

1 0

openSUSE-RU-2016:1070-1: Recommended update for open-iscsi
by maintenance＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Recommended Update: Recommended update for open-iscsi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1070-1 Rating: low References: #960438 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for open-iscsi provides fixes and enhancements for iscsiuio: - iscsiuio: Get the library to use based on uio sysfs name. - iscsiuio: Wait for interface to be ready before issuing the ping. - iscsiadm: Let ping be tried after interface configuration is initialized. - iscsiuio: Add ping support through iscsiuio. - iscsid: Changes to support ping through iscsiuio. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-471=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): iscsiuio-0.7.8.2-37.1 iscsiuio-debuginfo-0.7.8.2-37.1 open-iscsi-2.0.873-37.1 open-iscsi-debuginfo-2.0.873-37.1 open-iscsi-debugsource-2.0.873-37.1 open-isns-0.90-37.1 open-isns-debuginfo-0.90-37.1 References: https://bugzilla.suse.com/960438

1 0

openSUSE-SU-2016:1069-1: moderate: Security update for gcc5
by opensuse-security＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Security Update: Security update for gcc5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1069-1 Rating: moderate References: #939460 #945842 #952151 #953831 #954002 #955382 #962765 #964468 #966220 #968771 Cross-References: CVE-2015-5276 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has 9 fixes is now available. Description: The GNU Compiler Collection was updated to version 5.3.1, which brings several fixes and enhancements. The following security issue has been fixed: - Fix C++11 std::random_device short read issue that could lead to predictable randomness. (CVE-2015-5276, bsc#945842) The following non-security issues have been fixed: - Enable frame pointer for TARGET_64BIT_MS_ABI when stack is misaligned. Fixes internal compiler error when building Wine. (bsc#966220) - Fix a PowerPC specific issue in gcc-go that broke compilation of newer versions of Docker. (bsc#964468) - Fix HTM built-ins on PowerPC. (bsc#955382) - Fix libgo certificate lookup. (bsc#953831) - Suppress deprecated-declarations warnings for inline definitions of deprecated virtual methods. (bsc#939460) - Build s390[x] with "--with-tune=z9-109 --with-arch=z900" on SLE11 again. (bsc#954002) - Revert accidental libffi ABI breakage on aarch64. (bsc#968771) - On x86_64, set default 32bit code generation to -march=x86-64 rather than -march=i586. - Add experimental File System TS library. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-472=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): cpp5-5.3.1+r233831-6.1 cpp5-debuginfo-5.3.1+r233831-6.1 gcc5-5.3.1+r233831-6.1 gcc5-ada-5.3.1+r233831-6.1 gcc5-ada-debuginfo-5.3.1+r233831-6.1 gcc5-c++-5.3.1+r233831-6.1 gcc5-c++-debuginfo-5.3.1+r233831-6.1 gcc5-debuginfo-5.3.1+r233831-6.1 gcc5-debugsource-5.3.1+r233831-6.1 gcc5-fortran-5.3.1+r233831-6.1 gcc5-fortran-debuginfo-5.3.1+r233831-6.1 gcc5-go-5.3.1+r233831-6.1 gcc5-go-debuginfo-5.3.1+r233831-6.1 gcc5-locale-5.3.1+r233831-6.1 gcc5-testresults-5.3.1+r233831-6.2 libada5-5.3.1+r233831-6.1 libada5-debuginfo-5.3.1+r233831-6.1 libasan2-5.3.1+r233831-6.1 libasan2-debuginfo-5.3.1+r233831-6.1 libatomic1-5.3.1+r233831-6.1 libatomic1-debuginfo-5.3.1+r233831-6.1 libcilkrts5-5.3.1+r233831-6.1 libcilkrts5-debuginfo-5.3.1+r233831-6.1 libffi-devel-gcc5-5.3.1+r233831-6.1 libffi-gcc5-debugsource-5.3.1+r233831-6.1 libffi4-5.3.1+r233831-6.1 libffi4-debuginfo-5.3.1+r233831-6.1 libgcc_s1-5.3.1+r233831-6.1 libgcc_s1-debuginfo-5.3.1+r233831-6.1 libgfortran3-5.3.1+r233831-6.1 libgfortran3-debuginfo-5.3.1+r233831-6.1 libgo7-5.3.1+r233831-6.1 libgo7-debuginfo-5.3.1+r233831-6.1 libgomp1-5.3.1+r233831-6.1 libgomp1-debuginfo-5.3.1+r233831-6.1 libitm1-5.3.1+r233831-6.1 libitm1-debuginfo-5.3.1+r233831-6.1 libmpx0-5.3.1+r233831-6.1 libmpx0-debuginfo-5.3.1+r233831-6.1 libmpxwrappers0-5.3.1+r233831-6.1 libmpxwrappers0-debuginfo-5.3.1+r233831-6.1 libquadmath0-5.3.1+r233831-6.1 libquadmath0-debuginfo-5.3.1+r233831-6.1 libstdc++6-5.3.1+r233831-6.1 libstdc++6-debuginfo-5.3.1+r233831-6.1 libstdc++6-devel-gcc5-5.3.1+r233831-6.1 libstdc++6-locale-5.3.1+r233831-6.1 libubsan0-5.3.1+r233831-6.1 libubsan0-debuginfo-5.3.1+r233831-6.1 - openSUSE Leap 42.1 (noarch): gcc5-info-5.3.1+r233831-6.1 - openSUSE Leap 42.1 (x86_64): gcc5-32bit-5.3.1+r233831-6.1 gcc5-32bit-debuginfo-5.3.1+r233831-6.1 gcc5-ada-32bit-5.3.1+r233831-6.1 gcc5-c++-32bit-5.3.1+r233831-6.1 gcc5-fortran-32bit-5.3.1+r233831-6.1 gcc5-go-32bit-5.3.1+r233831-6.1 libada5-32bit-5.3.1+r233831-6.1 libada5-32bit-debuginfo-5.3.1+r233831-6.1 libasan2-32bit-5.3.1+r233831-6.1 libasan2-32bit-debuginfo-5.3.1+r233831-6.1 libatomic1-32bit-5.3.1+r233831-6.1 libatomic1-32bit-debuginfo-5.3.1+r233831-6.1 libcilkrts5-32bit-5.3.1+r233831-6.1 libcilkrts5-32bit-debuginfo-5.3.1+r233831-6.1 libffi-devel-gcc5-32bit-5.3.1+r233831-6.1 libffi4-32bit-5.3.1+r233831-6.1 libffi4-32bit-debuginfo-5.3.1+r233831-6.1 libgcc_s1-32bit-5.3.1+r233831-6.1 libgcc_s1-32bit-debuginfo-5.3.1+r233831-6.1 libgfortran3-32bit-5.3.1+r233831-6.1 libgfortran3-32bit-debuginfo-5.3.1+r233831-6.1 libgo7-32bit-5.3.1+r233831-6.1 libgo7-32bit-debuginfo-5.3.1+r233831-6.1 libgomp1-32bit-5.3.1+r233831-6.1 libgomp1-32bit-debuginfo-5.3.1+r233831-6.1 libitm1-32bit-5.3.1+r233831-6.1 libitm1-32bit-debuginfo-5.3.1+r233831-6.1 liblsan0-5.3.1+r233831-6.1 liblsan0-debuginfo-5.3.1+r233831-6.1 libmpx0-32bit-5.3.1+r233831-6.1 libmpx0-32bit-debuginfo-5.3.1+r233831-6.1 libmpxwrappers0-32bit-5.3.1+r233831-6.1 libmpxwrappers0-32bit-debuginfo-5.3.1+r233831-6.1 libquadmath0-32bit-5.3.1+r233831-6.1 libquadmath0-32bit-debuginfo-5.3.1+r233831-6.1 libstdc++6-32bit-5.3.1+r233831-6.1 libstdc++6-32bit-debuginfo-5.3.1+r233831-6.1 libstdc++6-devel-gcc5-32bit-5.3.1+r233831-6.1 libtsan0-5.3.1+r233831-6.1 libtsan0-debuginfo-5.3.1+r233831-6.1 libubsan0-32bit-5.3.1+r233831-6.1 libubsan0-32bit-debuginfo-5.3.1+r233831-6.1 References: https://www.suse.com/security/cve/CVE-2015-5276.html https://bugzilla.suse.com/939460 https://bugzilla.suse.com/945842 https://bugzilla.suse.com/952151 https://bugzilla.suse.com/953831 https://bugzilla.suse.com/954002 https://bugzilla.suse.com/955382 https://bugzilla.suse.com/962765 https://bugzilla.suse.com/964468 https://bugzilla.suse.com/966220 https://bugzilla.suse.com/968771

1 0

openSUSE-RU-2016:1068-1: moderate: Recommended update for nmon
by maintenance＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Recommended Update: Recommended update for nmon ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1068-1 Rating: moderate References: #974718 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update to nmon 16e fixes a numer of issues fixed upstream (boo#974718): * Bug caused Seg Faults core dumps fixed while collecting to a file including top process stats. * Improved memory handling with many processes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-477=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): nmon-16e-5.1 nmon-debuginfo-16e-5.1 nmon-debugsource-16e-5.1 References: https://bugzilla.suse.com/974718

1 0

openSUSE-SU-2016:1067-1: moderate: Security update for perl-YAML-LibYAML
by opensuse-security＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Security Update: Security update for perl-YAML-LibYAML ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1067-1 Rating: moderate References: #860617 #868944 #907809 #911782 Cross-References: CVE-2013-6393 CVE-2014-2525 CVE-2014-9130 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: perl-YAML-LibYAML was updated to fix three security issues. These security issues were fixed: - CVE-2013-6393: The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performed an incorrect cast, which allowed remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggered a heap-based buffer overflow (bnc#860617, bnc#911782). - CVE-2014-9130: scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allowed context-dependent attackers to cause a denial of service (assertion failure and crash) via vectors involving line-wrapping (bnc#907809, bnc#911782). - CVE-2014-2525: Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allowed context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file (bnc#868944, bnc#911782). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-473=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): perl-YAML-LibYAML-0.38-4.1 perl-YAML-LibYAML-debuginfo-0.38-4.1 perl-YAML-LibYAML-debugsource-0.38-4.1 References: https://www.suse.com/security/cve/CVE-2013-6393.html https://www.suse.com/security/cve/CVE-2014-2525.html https://www.suse.com/security/cve/CVE-2014-9130.html https://bugzilla.suse.com/860617 https://bugzilla.suse.com/868944 https://bugzilla.suse.com/907809 https://bugzilla.suse.com/911782

1 0

openSUSE-RU-2016:1066-1: moderate: Recommended update for ca-certificates-mozilla
by maintenance＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Recommended Update: Recommended update for ca-certificates-mozilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1066-1 Rating: moderate References: #973042 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The root SSL certificate store ca-certificates-mozilla was updated to version 2.7 of the Mozilla NSS equivalent. (bsc#973042) - Newly added CAs: * CA WoSign ECC Root * Certification Authority of WoSign * Certification Authority of WoSign G2 * Certinomis - Root CA * Certum Trusted Network CA 2 * CFCA EV ROOT * COMODO RSA Certification Authority * DigiCert Assured ID Root G2 * DigiCert Assured ID Root G3 * DigiCert Global Root G2 * DigiCert Global Root G3 * DigiCert Trusted Root G4 * Entrust Root Certification Authority - EC1 * Entrust Root Certification Authority - G2 * GlobalSign * IdenTrust Commercial Root CA 1 * IdenTrust Public Sector Root CA 1 * OISTE WISeKey Global Root GB CA * QuoVadis Root CA 1 G3 * QuoVadis Root CA 2 G3 * QuoVadis Root CA 3 G3 * Staat der Nederlanden EV Root CA * Staat der Nederlanden Root CA - G3 * S-TRUST Universal Root CA * SZAFIR ROOT CA2 * TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5 * TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6 * USERTrust ECC Certification Authority * USERTrust RSA Certification Authority * 沃通根证书 - Removed CAs: * AOL CA * A Trust nQual 03 * Buypass Class 3 CA 1 * CA Disig * Digital Signature Trust Co Global CA 1 * Digital Signature Trust Co Global CA 3 * E Guven Kok Elektronik Sertifika Hizmet Saglayicisi * NetLock Expressz (Class C) Tanusitvanykiado * NetLock Kozjegyzoi (Class A) Tanusitvanykiado * NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado * NetLock Uzleti (Class B) Tanusitvanykiado * SG TRUST SERVICES RACINE * Staat der Nederlanden Root CA * TC TrustCenter Class 2 CA II * TC TrustCenter Universal CA I * TDC Internet Root CA * UTN DATACorp SGC Root CA * Verisign Class 1 Public Primary Certification Authority - G2 * Verisign Class 3 Public Primary Certification Authority * Verisign Class 3 Public Primary Certification Authority - G2 - Removed server trust from: * AC Raíz Certicámara S.A. * ComSign Secured CA * NetLock Uzleti (Class B) Tanusitvanykiado * NetLock Business (Class B) Root * NetLock Expressz (Class C) Tanusitvanykiado * TC TrustCenter Class 3 CA II * TURKTRUST Certificate Services Provider Root 1 * TURKTRUST Certificate Services Provider Root 2 * Equifax Secure Global eBusiness CA-1 * Verisign Class 4 Public Primary Certification Authority G3 - Enable server trust for: * Actalis Authentication Root CA This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-476=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-476=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): ca-certificates-mozilla-2.7-7.1 - openSUSE 13.2 (noarch): ca-certificates-mozilla-2.7-3.7.1 References: https://bugzilla.suse.com/973042

1 0

openSUSE-RU-2016:1065-1: Recommended update for spec-cleaner
by maintenance＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1065-1 Rating: low References: Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update contains spec-cleaner 0.8.1 which fixes the following issues: - Sort out AUTHORS alphabetically and fix emails - Fix FIXME addition to all ./configure calls - Fix breakage on some buildrequires syntax - fix empty file processing issue - exclude %make_build from bracketing - various small fixes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-461=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-461=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): spec-cleaner-0.8.1-14.1 spec-cleaner-format_spec_file-0.8.1-14.1 - openSUSE 13.2 (noarch): spec-cleaner-0.8.1-36.1 spec-cleaner-format_spec_file-0.8.1-36.1 References:

1 0

openSUSE-SU-2016:1064-1: important: Security update for samba
by opensuse-security＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1064-1 Rating: important References: #898031 #901813 #912457 #913238 #913547 #914279 #917376 #919309 #924519 #936862 #942716 #946051 #947552 #949022 #958581 #958582 #958583 #958584 #958585 #958586 #964023 #966271 #968222 #968973 #971965 #972197 #973031 #973032 #973033 #973034 #973036 #973832 #974629 Cross-References: CVE-2014-8143 CVE-2015-0240 CVE-2015-3223 CVE-2015-5252 CVE-2015-5296 CVE-2015-5299 CVE-2015-5330 CVE-2015-5370 CVE-2015-7560 CVE-2015-8467 CVE-2016-2110 CVE-2016-2111 CVE-2016-2112 CVE-2016-2113 CVE-2016-2115 CVE-2016-2118 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves 16 vulnerabilities and has 17 fixes is now available. Description: samba was updated to version 4.2.4 to fix 14 security issues. These security issues were fixed: - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks (bsc#936862). - CVE-2016-2110: A man-in-the-middle could have downgraded NTLMSSP authentication (bsc#973031). - CVE-2016-2111: Domain controller netlogon member computer could have been spoofed (bsc#973032). - CVE-2016-2112: LDAP conenctions were vulnerable to downgrade and MITM attack (bsc#973033). - CVE-2016-2113: TLS certificate validation were missing (bsc#973034). - CVE-2016-2115: Named pipe IPC were vulnerable to MITM attacks (bsc#973036). - CVE-2016-2118: "Badlock" DCERPC impersonation of authenticated account were possible (bsc#971965). - CVE-2015-3223: Malicious request can cause Samba LDAP server to hang, spinning using CPU (boo#958581). - CVE-2015-5330: Remote read memory exploit in LDB (boo#958586). - CVE-2015-5252: Insufficient symlink verification (file access outside the share)(boo#958582). - CVE-2015-5296: No man in the middle protection when forcing smb encryption on the client side (boo#958584). - CVE-2015-5299: Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2) (boo#958583). - CVE-2015-8467: Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts (boo#958585). - CVE-2015-7560: Getting and setting Windows ACLs on symlinks can change permissions on link target (boo#968222). These non-security issues were fixed: - Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (boo#974629). - Align fsrvp feature sources with upstream version. - Obsolete libsmbsharemodes0 from samba-libs and libsmbsharemodes-devel from samba-core-devel; (boo#973832). - s3:utils/smbget: Fix recursive download; (bso#6482). - s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). - docs: Add example for domain logins to smbspool man page; (bso#11643). - s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). - loadparm: Fix memory leak issue; (bso#11708). - lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). - ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."; (bso#11719). - s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). - param: Fix str_list_v3 to accept ";" again; (bso#11732). - Real memeory leak(buildup) issue in loadparm; (bso#11740). - Obsolete libsmbclient from libsmbclient0 and libpdb-devel from libsamba-passdb-devel while not providing it; (boo#972197). - Upgrade on-disk FSRVP server state to new version; (boo#924519). - Only obsolete but do not provide gplv2/3 package names; (boo#968973). - Enable clustering (CTDB) support; (boo#966271). - s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (boo#964023). - vfs_fruit: Fix renaming directories with open files; (bso#11065). - Fix MacOS finder error 36 when copying folder to Samba; (bso#11347). - s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). - Fix copying files with vfs_fruit when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). - s3:libsmb: Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). - Reduce the memory footprint of empty string options; (bso#11625). - lib/async_req: Do not install async_connect_send_test; (bso#11639). - docs: Fix typos in man vfs_gpfs; (bso#11641). - smbd: make "hide dot files" option work with "store dos attributes = yes"; (bso#11645). - smbcacls: Fix uninitialized variable; (bso#11682). - s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). - Changing log level of two entries to from 1 to 3; (bso#9912). - vfs_gpfs: Re-enable share modes; (bso#11243). - wafsamba: Also build libraries with RELRO protection; (bso#11346). - ctdb: Strip trailing spaces from nodes file; (bso#11365). - s3-smbd: Fix old DOS client doing wildcard delete - gives a attribute type of zero; (bso#11452). - nss_wins: Do not run into use after free issues when we access memory allocated on the globals and the global being reinitialized; (bso#11563). - async_req: Fix non-blocking connect(); (bso#11564). - auth: gensec: Fix a memory leak; (bso#11565). - lib: util: Make non-critical message a warning; (bso#11566). - Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (boo#949022). - smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). - ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). - manpage: Correct small typo error; (bso#11584). - s3: smbd: If EA's are turned off on a share don't allow an SMB2 create containing them; (bso#11589). - Backport some valgrind fixes from upstream master; (bso#11597). - s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). - docs: Fix some typos in the idmap config section of man 5 smb.conf; (bso#11619). - Remove redundant configure options while adding with-relro. - s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). - smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). - kerberos: Make sure we only use prompter type when available; (bso#11038). - s3:ctdbd_conn: Make sure we destroy tevent_fd before closing the socket; (bso#11316). - dcerpc.idl: accept invalid dcerpc_bind_nak pdus; (bso#11327). - Fix a deadlock in tdb; (bso#11381). - s3: smbd: Fix mkdir race condition; (bso#11486). - pam_winbind: Fix a segfault if initialization fails; (bso#11502). - s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). - s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). - net: Fix a crash with 'net ads keytab create'; (bso#11528). - s3: smbd: Fix a crash in unix_convert() and a NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). - vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). - vfs_commit: Set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). - Fix bug in smbstatus where the lease info is not printed; (bso#11549). - s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). - Relocate the tmpfiles.d directory to the client package; (boo#947552). - Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf instead; (boo#942716). - Package /var/lib/samba/private/sock with 0700 permissions; (boo#946051). - auth/credentials: If credentials have principal set, they are not anonymous anymore; (bso#11265). - Fix stream names with colon with "fruit:encoding = native"; (bso#11278). - s4:rpc_server/netlogon: Fix for NetApp; (bso#11291). - lib: Fix rundown of open_socket_out(); (bso#11316). - s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316). - vfs:fruit: Implement copyfile style copy_chunk; (bso#11317). - ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM; (bso#11398). - ctdb-scripts: Support monitoring of interestingly named VLANs on bonds; (bso#11399). - ctdb-daemon: Improve error handling for running event scripts; (bso#11431). - ctdb-daemon: Check if updates are in flight when releasing all IPs; (bso#11432). - ctdb-build: Fix building of PCP PMDA module; (bso#11435). - Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454). - vfs_fruit: Handling of empty resource fork; (bso#11467). - Avoid quoting problems in user's DNs; (bso#11488). - s3-auth: Fix "map to guest = Bad uid"; (bso#9862). - s4:lib/tls: Fix build with gnutls 3.4; (bso#8780). - s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924). - winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991). - Logon via MS Remote Desktop hangs; (bso#11061). - s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068). - tevent: Add a note to tevent_add_fd(); (bso#11141). - s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170). - s3-unix_msg: Remove socket file after closing socket fd; (bso#11217). - smbd: Fix a use-after-free; (bso#11218); (boo#919309). - s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces; (bso#11245). - s3:smb2: Add padding to last command in compound requests; (bso#11277). - Add IPv6 support to ADS client side LDAP connects; (bso#11281). - Add IPv6 support for determining FQDN during ADS join; (bso#11282). - s3: IPv6 enabled DNS connections for ADS client; (bso#11283). - Fix invalid write in ctdb_lock_context_destructor; (bso#11293). - Excessive cli_resolve_path() usage can slow down transmission; (bso#11295). - vfs_fruit: Add option "veto_appledouble"; (bso#11305). - tstream: Make socketpair nonblocking; (bso#11312). - idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313). - Group creation: Add msSFU30Name only when --nis-domain was given; (bso#11315). - tevent_fd needs to be destroyed before closing the fd; (bso#11316). - Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared"; (bso#11319). - smbd/trans2: Add a useful diagnostic for files with bad encoding; (bso#11323). - Change sharesec output back to previous format; (bso#11324). - Robust mutex support broken in 1.3.5; (bso#11326). - Kerberos auth info3 should contain resource group ids available from pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC; (bso#11328); (boo#912457). - s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329). - tevent: Fix CID 1035381 Unchecked return value; (bso#11330). - tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331). - s3: smbd: Use separate flag to track become_root()/unbecome_root() state; (bso#11339). - s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342). - pidl: Make the compilation of PIDL producing the same results if the content hasn't change; (bso#11356). - winbindd: Disconnect child process if request is cancelled at main process; (bso#11358). - vfs_fruit: Check offset and length for AFP_AfpInfo read requests; (bso#11363). - docs: Overhaul the description of "smb encrypt" to include SMB3 encryption; (bso#11366). - s3:auth_domain: Fix talloc problem in connect_to_domain_password_server(); (bso#11367). - ncacn_http: Fix GNUism; (bso#11371). - Backport changes to use resource group sids obtained from pac logon_info; (bso#11328); (boo#912457). - Order winbind.service Before and Want nss-user-lookup target. - s3:smbXsrv: refactor duplicate code into smbXsrv_session_clear_and_logoff(); (bso#11182). - gencache: don't fail gencache_stabilize if there were records to delete; (bso#11260). - s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). - s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). - s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). - Mangled names do not work with acl_xattr; (bso#11249). - nmbd rewrites browse.dat when not required; (bso#11254). - vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff; (bso#11213). - s3:smbd: Add missing tevent_req_nterror; (bso#11224). - vfs: kernel_flock and named streams; (bso#11243). - vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244). - s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses are used; (bso#11284). - ctdb: check for talloc_asprintf() failure; (bso#11201). - spoolss: purge the printer name cache on name change; (bso#11210); (boo#901813). - CTDB statd-callout does not scale; (bso#11204). - vfs_fruit: also map characters below 0x20; (bso#11221). - ctdb: Coverity fix for CID 1291643; (bso#11201). - Multiplexed RPC connections are not handled by DCERPC server; (bso#11225). - Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). - ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007). - ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201). - SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the directory is deleted; (bso#11257). - s3:winbindd: make sure we remove pending io requests before closing client - 'sharesec' output no longer matches input format; (bso#11237). - waf: Fix systemd detection; (bso#11200). - CTDB: Fix portability issues; (bso#11202). - CTDB: Fix some IPv6-related issues; (bso#11203). - CTDB statd-callout does not scale; (bso#11204). - 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you enter invalid values; (bso#11234). - libads: record service ticket endtime for sealed ldap connections; - lib/util: Include DEBUG macro in internal header files before samba_util.h; (bso#11033). - Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791). - s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with servers that don't send the 2 unused fields; (bso#10016). - build:wafadmin: Fix use of spaces instead of tabs; (bso#10476). - waf: Fix the build on openbsd; (bso#10476). - s3: client: "client use spnego principal = yes" code checks wrong name; - spoolss: Retrieve published printer GUID if not in registry; (bso#11018). - vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125). - backupkey: Explicitly link to gnutls and gcrypt; (bso#11135). - replace: Remove superfluous check for gcrypt header; (bso#11135). - Backport subunit changes; (bso#11137). - libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with implementation; (bso#11140). - s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143). - talloc: Version 2.1.2; (bso#11144). - Update libwbclient version to 0.12; (bso#11149). - brlock: Use 0 instead of empty initializer list; (bso#11153). - s4:auth/gensec_gssapi: Let gensec_gssapi_update() return - backupkey: Use ndr_pull_struct_blob_all(); (bso#11174). - Fix lots of winbindd zombie processes on Solaris platform; (bso#11175). - Prevent samba package updates from disabling samba kerberos printing. - Add sparse file support for samba; (fate#318424). - Simplify libxslt build requirement and README.SUSE install. - Remove no longer required cleanup steps while populating the build root. - smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#1115). - pam_winbind: fix warn_pwd_expire implementation; (bso#9056). - nsswitch: Fix soname of linux nss_*.so.2 modules; (bso#9299). - Make 'profiles' work again; (bso#9629). - s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535"; (bso#9702). - Make validate_ldb of String(Generalized-Time) accept millisecond format ".000Z"; (bso#9810). - Use -R linker flag on Solaris, not -rpath; (bso#10112). - vfs: Add glusterfs manpage; (bso#10240). - Make 'smbclient' use cached creds; (bso#10279). - pdb: Fix build issues with shared modules; (bso#10355). - s4-dns: Add support for BIND 9.10; (bso#10620). - idmap: Return the correct id type to *id_to_sid methods; (bso#10720). - printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808). - Don't build vfs_snapper on FreeBSD; (bso#10834). - nss_winbind: Add getgroupmembership for FreeBSD; (bso#10835). - idmap_rfc2307: Fix a crash after connection problem to DC; (bso#10837). - s3: smb2cli: query info return length check was reversed; (bso#10848). - s3: lib, s3: modules: Fix compilation on Solaris; (bso#10849). - lib: uid_wrapper: Fix setgroups and syscall detection on a system without native uid_wrapper library; (bso#10851). - winbind3: Fix pwent variable substitution; (bso#10852). - Improve samba-regedit; (bso#10859). - registry: Don't leave dangling transactions; (bso#10860). - Fix build of socket_wrapper on systems without SO_PROTOCOL; (bso#10861). - build: Do not install 'texpect' binary anymore; (bso#10862). - Fix testparm to show hidden share defaults; (bso#10864). - libcli/smb: Fix smb2cli_validate_negotiate_info with min=PROTOCOL_NT1 max=PROTOCOL_SMB2_02; (bso#10866). - Integrate CTDB into top-level Samba build; (bso#10892). - samba-tool group add: Add option '--nis-domain' and '--gid'; (bso#10895). - s3-nmbd: Fix netbios name truncation; (bso#10896). - spoolss: Fix handling of bad EnumJobs levels; (bso#10898). - Fix smbclient loops doing a directory listing against Mac OS X 10 server with a non-wildcard path; (bso#10904). - Fix print job enumeration; (bso#10905); (boo#898031). - samba-tool: Create NIS enabled users and unixHomeDirectory attribute; (bso#10909). - Add support for SMB2 leases; (bso#10911). - btrfs: Don't leak opened directory handle; (bso#10918). - s3: nmbd: Ensure NetBIOS names are only 15 characters stored; (bso#10920). - s3:smbd: Fix file corruption using "write cache size != 0"; (bso#10921). - pdb_tdb: Fix a TALLOC/SAFE_FREE mixup; (bso#10932). - s3-keytab: fix keytab array NULL termination; (bso#10933). - s3:passdb: fix logic in pdb_set_pw_history(); (bso#10940). - Cleanup add_string_to_array and usage; (bso#10942). - dbwrap_ctdb: Pass on mutex flags to tdb_open; (bso#10942). - Fix RootDSE search with extended dn control; (bso#10949). - Fix 'samba-tool dns serverinfo <server>' for IPv6; (bso#10952). - libcli/smb: only force signing of smb2 session setups when binding a new session; (bso#10958). - s3-smbclient: Return success if we listed the shares; (bso#10960). - s3-smbstatus: Fix exit code of profile output; (bso#10961). - socket_wrapper: Add missing prototype check for eventfd; (bso#10965). - libcli: SMB2: Pure SMB2-only negprot fix to make us behave as a Windows client does; (bso#10966). - vfs_streams_xattr: Check stream type; (bso#10971). - s3: smbd: Fix *allocate* calls to follow POSIX error return convention; (bso#10982). - vfs_fruit: Add support for AAPL; (bso#10983). - Fix spoolss IDL response marshalling when returning error without clearing info; (bso#10984). - dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl; (bso#10993); CVE-2014-8143; (boo#914279). - Fix IPv6 support in CTDB; (bso#10996). - ctdb-daemon: Use correct tdb flags when enabling robust mutex support; (bso#11000). - vfs_streams_xattr: Add missing call to SMB_VFS_NEXT_CONNECT; (bso#11005). - s3-util: Fix authentication with long hostnames; (bso#11008). - ctdb-build: Fix build without xsltproc; (bso#11014). - packaging: Include CTDB man pages in the tarball; (bso#11014). - pdb_get_trusteddom_pw() fails with non valid UTF16 random passwords; (bso#11016). - Make Sharepoint search show user documents; (bso#11022). - nss_wrapper: check for nss.h; (bso#11026). - Enable mutexes in gencache_notrans.tdb; (bso#11032). - tdb_wrap: Make mutexes easier to use; (bso#11032). - lib/util: Avoid collision which alread defined consumer DEBUG macro; (bso#11033). - winbind: Retry after SESSION_EXPIRED error in ping-dc; (bso#11034). - s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). - vfs_fruit: Fix base_fsp name conversion; (bso#11039). - vfs_fruit: mmap under FreeBSD needs PROT_READ; (bso#11040). - Fix authentication using Kerberos (not AD); (bso#11044). - net: Fix sam addgroupmem; (bso#11051). - vfs_snapper: Correctly handles multi-byte DBus strings; (bso#11055); (boo#913238). - cli_connect_nb_send: Don't segfault on host == NULL; (bso#11058). - utils: Fix 'net time' segfault; (bso#11058). - libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). - s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). - vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). - vfs/glusterfs: Change xattr key to match gluster key; (bso#11069). - vfs_glusterfs: Implement AIO support; (bso#11069). - s3-vfs: Fix developer build of vfs_ceph module; (bso#11070). - s3: netlogon: Ensure we don't call talloc_free on an uninitialized pointer; (bso#11077); CVE-2015-0240; (boo#917376). - vfs: Add a brief vfs_ceph manpage; (bso#11088). - s3: smbclient: Allinfo leaves the file handle open; (bso#11094). - Fix Win8.1 Credentials Manager issue after KB2992611 on Samba domain; (bso#11097). - debug: Set close-on-exec for the main log file FD; (bso#11100). - s3: smbd: leases - losen paranoia check. Stat opens can grant leases; (bso#11102). - s3: smbd: SMB2 close. If a file has delete on close, store the return info before deleting; (bso#11104). - doc:man:vfs_glusterfs: improve the configuration section; (bso#11117). - snprintf: Try to support %j; (bso#11119). - ctdb-io: Do not use sys_write to write to client sockets; (bso#11124). - doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127). - Fix usage of freed memory on server exit; (bso#11218); (boo#919309). - Adjust baselibs.conf due to libpdb0 package rename to libsamba-passdb0. - Add libsamba-debug, libsocket-blocking, libsamba-cluster-support, and libhttp to the libs package; (boo#913547). - Rebase File Server Remote VSS Protocol (FSRVP) server against 4.2.0rc1; (fate#313346). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-462=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ctdb-4.2.4-34.1 ctdb-debuginfo-4.2.4-34.1 ctdb-devel-4.2.4-34.1 ctdb-pcp-pmda-4.2.4-34.1 ctdb-pcp-pmda-debuginfo-4.2.4-34.1 ctdb-tests-4.2.4-34.1 ctdb-tests-debuginfo-4.2.4-34.1 libdcerpc-atsvc-devel-4.2.4-34.1 libdcerpc-atsvc0-4.2.4-34.1 libdcerpc-atsvc0-debuginfo-4.2.4-34.1 libdcerpc-binding0-4.2.4-34.1 libdcerpc-binding0-debuginfo-4.2.4-34.1 libdcerpc-devel-4.2.4-34.1 libdcerpc-samr-devel-4.2.4-34.1 libdcerpc-samr0-4.2.4-34.1 libdcerpc-samr0-debuginfo-4.2.4-34.1 libdcerpc0-4.2.4-34.1 libdcerpc0-debuginfo-4.2.4-34.1 libgensec-devel-4.2.4-34.1 libgensec0-4.2.4-34.1 libgensec0-debuginfo-4.2.4-34.1 libndr-devel-4.2.4-34.1 libndr-krb5pac-devel-4.2.4-34.1 libndr-krb5pac0-4.2.4-34.1 libndr-krb5pac0-debuginfo-4.2.4-34.1 libndr-nbt-devel-4.2.4-34.1 libndr-nbt0-4.2.4-34.1 libndr-nbt0-debuginfo-4.2.4-34.1 libndr-standard-devel-4.2.4-34.1 libndr-standard0-4.2.4-34.1 libndr-standard0-debuginfo-4.2.4-34.1 libndr0-4.2.4-34.1 libndr0-debuginfo-4.2.4-34.1 libnetapi-devel-4.2.4-34.1 libnetapi0-4.2.4-34.1 libnetapi0-debuginfo-4.2.4-34.1 libregistry-devel-4.2.4-34.1 libregistry0-4.2.4-34.1 libregistry0-debuginfo-4.2.4-34.1 libsamba-credentials-devel-4.2.4-34.1 libsamba-credentials0-4.2.4-34.1 libsamba-credentials0-debuginfo-4.2.4-34.1 libsamba-hostconfig-devel-4.2.4-34.1 libsamba-hostconfig0-4.2.4-34.1 libsamba-hostconfig0-debuginfo-4.2.4-34.1 libsamba-passdb-devel-4.2.4-34.1 libsamba-passdb0-4.2.4-34.1 libsamba-passdb0-debuginfo-4.2.4-34.1 libsamba-policy-devel-4.2.4-34.1 libsamba-policy0-4.2.4-34.1 libsamba-policy0-debuginfo-4.2.4-34.1 libsamba-util-devel-4.2.4-34.1 libsamba-util0-4.2.4-34.1 libsamba-util0-debuginfo-4.2.4-34.1 libsamdb-devel-4.2.4-34.1 libsamdb0-4.2.4-34.1 libsamdb0-debuginfo-4.2.4-34.1 libsmbclient-devel-4.2.4-34.1 libsmbclient-raw-devel-4.2.4-34.1 libsmbclient-raw0-4.2.4-34.1 libsmbclient-raw0-debuginfo-4.2.4-34.1 libsmbclient0-4.2.4-34.1 libsmbclient0-debuginfo-4.2.4-34.1 libsmbconf-devel-4.2.4-34.1 libsmbconf0-4.2.4-34.1 libsmbconf0-debuginfo-4.2.4-34.1 libsmbldap-devel-4.2.4-34.1 libsmbldap0-4.2.4-34.1 libsmbldap0-debuginfo-4.2.4-34.1 libtevent-util-devel-4.2.4-34.1 libtevent-util0-4.2.4-34.1 libtevent-util0-debuginfo-4.2.4-34.1 libwbclient-devel-4.2.4-34.1 libwbclient0-4.2.4-34.1 libwbclient0-debuginfo-4.2.4-34.1 samba-4.2.4-34.1 samba-client-4.2.4-34.1 samba-client-debuginfo-4.2.4-34.1 samba-core-devel-4.2.4-34.1 samba-debuginfo-4.2.4-34.1 samba-debugsource-4.2.4-34.1 samba-libs-4.2.4-34.1 samba-libs-debuginfo-4.2.4-34.1 samba-pidl-4.2.4-34.1 samba-python-4.2.4-34.1 samba-python-debuginfo-4.2.4-34.1 samba-test-4.2.4-34.1 samba-test-debuginfo-4.2.4-34.1 samba-test-devel-4.2.4-34.1 samba-winbind-4.2.4-34.1 samba-winbind-debuginfo-4.2.4-34.1 - openSUSE 13.2 (x86_64): libdcerpc-atsvc0-32bit-4.2.4-34.1 libdcerpc-atsvc0-debuginfo-32bit-4.2.4-34.1 libdcerpc-binding0-32bit-4.2.4-34.1 libdcerpc-binding0-debuginfo-32bit-4.2.4-34.1 libdcerpc-samr0-32bit-4.2.4-34.1 libdcerpc-samr0-debuginfo-32bit-4.2.4-34.1 libdcerpc0-32bit-4.2.4-34.1 libdcerpc0-debuginfo-32bit-4.2.4-34.1 libgensec0-32bit-4.2.4-34.1 libgensec0-debuginfo-32bit-4.2.4-34.1 libndr-krb5pac0-32bit-4.2.4-34.1 libndr-krb5pac0-debuginfo-32bit-4.2.4-34.1 libndr-nbt0-32bit-4.2.4-34.1 libndr-nbt0-debuginfo-32bit-4.2.4-34.1 libndr-standard0-32bit-4.2.4-34.1 libndr-standard0-debuginfo-32bit-4.2.4-34.1 libndr0-32bit-4.2.4-34.1 libndr0-debuginfo-32bit-4.2.4-34.1 libnetapi0-32bit-4.2.4-34.1 libnetapi0-debuginfo-32bit-4.2.4-34.1 libregistry0-32bit-4.2.4-34.1 libregistry0-debuginfo-32bit-4.2.4-34.1 libsamba-credentials0-32bit-4.2.4-34.1 libsamba-credentials0-debuginfo-32bit-4.2.4-34.1 libsamba-hostconfig0-32bit-4.2.4-34.1 libsamba-hostconfig0-debuginfo-32bit-4.2.4-34.1 libsamba-passdb0-32bit-4.2.4-34.1 libsamba-passdb0-debuginfo-32bit-4.2.4-34.1 libsamba-policy0-32bit-4.2.4-34.1 libsamba-policy0-debuginfo-32bit-4.2.4-34.1 libsamba-util0-32bit-4.2.4-34.1 libsamba-util0-debuginfo-32bit-4.2.4-34.1 libsamdb0-32bit-4.2.4-34.1 libsamdb0-debuginfo-32bit-4.2.4-34.1 libsmbclient-raw0-32bit-4.2.4-34.1 libsmbclient-raw0-debuginfo-32bit-4.2.4-34.1 libsmbclient0-32bit-4.2.4-34.1 libsmbclient0-debuginfo-32bit-4.2.4-34.1 libsmbconf0-32bit-4.2.4-34.1 libsmbconf0-debuginfo-32bit-4.2.4-34.1 libsmbldap0-32bit-4.2.4-34.1 libsmbldap0-debuginfo-32bit-4.2.4-34.1 libtevent-util0-32bit-4.2.4-34.1 libtevent-util0-debuginfo-32bit-4.2.4-34.1 libwbclient0-32bit-4.2.4-34.1 libwbclient0-debuginfo-32bit-4.2.4-34.1 samba-32bit-4.2.4-34.1 samba-client-32bit-4.2.4-34.1 samba-client-debuginfo-32bit-4.2.4-34.1 samba-debuginfo-32bit-4.2.4-34.1 samba-libs-32bit-4.2.4-34.1 samba-libs-debuginfo-32bit-4.2.4-34.1 samba-winbind-32bit-4.2.4-34.1 samba-winbind-debuginfo-32bit-4.2.4-34.1 - openSUSE 13.2 (noarch): samba-doc-4.2.4-34.1 References: https://www.suse.com/security/cve/CVE-2014-8143.html https://www.suse.com/security/cve/CVE-2015-0240.html https://www.suse.com/security/cve/CVE-2015-3223.html https://www.suse.com/security/cve/CVE-2015-5252.html https://www.suse.com/security/cve/CVE-2015-5296.html https://www.suse.com/security/cve/CVE-2015-5299.html https://www.suse.com/security/cve/CVE-2015-5330.html https://www.suse.com/security/cve/CVE-2015-5370.html https://www.suse.com/security/cve/CVE-2015-7560.html https://www.suse.com/security/cve/CVE-2015-8467.html https://www.suse.com/security/cve/CVE-2016-2110.html https://www.suse.com/security/cve/CVE-2016-2111.html https://www.suse.com/security/cve/CVE-2016-2112.html https://www.suse.com/security/cve/CVE-2016-2113.html https://www.suse.com/security/cve/CVE-2016-2115.html https://www.suse.com/security/cve/CVE-2016-2118.html https://bugzilla.suse.com/898031 https://bugzilla.suse.com/901813 https://bugzilla.suse.com/912457 https://bugzilla.suse.com/913238 https://bugzilla.suse.com/913547 https://bugzilla.suse.com/914279 https://bugzilla.suse.com/917376 https://bugzilla.suse.com/919309 https://bugzilla.suse.com/924519 https://bugzilla.suse.com/936862 https://bugzilla.suse.com/942716 https://bugzilla.suse.com/946051 https://bugzilla.suse.com/947552 https://bugzilla.suse.com/949022 https://bugzilla.suse.com/958581 https://bugzilla.suse.com/958582 https://bugzilla.suse.com/958583 https://bugzilla.suse.com/958584 https://bugzilla.suse.com/958585 https://bugzilla.suse.com/958586 https://bugzilla.suse.com/964023 https://bugzilla.suse.com/966271 https://bugzilla.suse.com/968222 https://bugzilla.suse.com/968973 https://bugzilla.suse.com/971965 https://bugzilla.suse.com/972197 https://bugzilla.suse.com/973031 https://bugzilla.suse.com/973032 https://bugzilla.suse.com/973033 https://bugzilla.suse.com/973034 https://bugzilla.suse.com/973036 https://bugzilla.suse.com/973832 https://bugzilla.suse.com/974629

1 0

openSUSE-RU-2016:1063-1: moderate: Recommended update for apparmor
by maintenance＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Recommended Update: Recommended update for apparmor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1063-1 Rating: moderate References: #853019 #906858 #911001 #917577 #918787 #921098 #923201 #931792 #939568 #940749 #945592 #948584 #948753 #954104 #954958 #954959 #964971 #971790 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 18 recommended fixes can now be installed. Description: This update to apparmor 2.9.3 fixes the following issues: - aa-complain, aa-enforce, aa-audit: change flags of hats, not only the main profile (+ some bugfixes) - aa-notify: also display notifications for complain mode events - add python to the "no Px rule" list in logprof.conf - several bugfixes in the aa-* tools (including boo#954104 and several bugs on lp) - parser: set cache file timestamp to mtime of most recent policy file timestamp (lp#1460152) - add permissions in several profiles (including boo#948584, boo#948753, boo#939568, boo#954959, boo#954958, boo#940749, boo#971790, boo#945592, boo#964971, boo#921098, boo#923201 and boo#921098#c15) - systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792) - lots of bugfixes in the parser and the aa-* tools (including boo#918787) - update dovecot and dnsmasq profiles and several abstractions (including boo#911001) - make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition) - update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201) - allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858) - add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-460=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_apparmor-2.9.3-7.1 apache2-mod_apparmor-debuginfo-2.9.3-7.1 apparmor-debugsource-2.9.3-7.1 apparmor-parser-2.9.3-7.1 apparmor-parser-debuginfo-2.9.3-7.1 libapparmor-devel-2.9.3-7.1 libapparmor1-2.9.3-7.1 libapparmor1-debuginfo-2.9.3-7.1 pam_apparmor-2.9.3-7.1 pam_apparmor-debuginfo-2.9.3-7.1 perl-apparmor-2.9.3-7.1 perl-apparmor-debuginfo-2.9.3-7.1 python3-apparmor-2.9.3-7.1 python3-apparmor-debuginfo-2.9.3-7.1 ruby-apparmor-2.9.3-7.1 ruby-apparmor-debuginfo-2.9.3-7.1 - openSUSE 13.2 (noarch): apparmor-abstractions-2.9.3-7.1 apparmor-docs-2.9.3-7.1 apparmor-parser-lang-2.9.3-7.1 apparmor-profiles-2.9.3-7.1 apparmor-utils-2.9.3-7.1 apparmor-utils-lang-2.9.3-7.1 - openSUSE 13.2 (x86_64): libapparmor1-32bit-2.9.3-7.1 libapparmor1-debuginfo-32bit-2.9.3-7.1 pam_apparmor-32bit-2.9.3-7.1 pam_apparmor-debuginfo-32bit-2.9.3-7.1 References: https://bugzilla.suse.com/853019 https://bugzilla.suse.com/906858 https://bugzilla.suse.com/911001 https://bugzilla.suse.com/917577 https://bugzilla.suse.com/918787 https://bugzilla.suse.com/921098 https://bugzilla.suse.com/923201 https://bugzilla.suse.com/931792 https://bugzilla.suse.com/939568 https://bugzilla.suse.com/940749 https://bugzilla.suse.com/945592 https://bugzilla.suse.com/948584 https://bugzilla.suse.com/948753 https://bugzilla.suse.com/954104 https://bugzilla.suse.com/954958 https://bugzilla.suse.com/954959 https://bugzilla.suse.com/964971 https://bugzilla.suse.com/971790

1 0

openSUSE-RU-2016:1062-1: Recommended update for desktop-translations
by maintenance＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Recommended Update: Recommended update for desktop-translations ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1062-1 Rating: low References: #953643 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for desktop-translations fixes an issue with brokwn Swedish language files. - boo#953643: Choosing Swedish language at install did not match Swedish when booted Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch 4922=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): desktop-translations-20151007-4.1 References: https://bugzilla.suse.com/953643

1 0

openSUSE-SU-2016:1061-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 17 Apr '16

17 Apr '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1061-1 Rating: important References: #975572 Cross-References: CVE-2016-1651 CVE-2016-1652 CVE-2016-1653 CVE-2016-1654 CVE-2016-1655 CVE-2016-1656 CVE-2016-1657 CVE-2016-1658 CVE-2016-1659 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: Chromium was updated to 50.0.2661.75 to fix the following vulnerabilities: - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding - CVE-2016-1652: Universal XSS in extension bindings - CVE-2016-1653: Out-of-bounds write in V8 - CVE-2016-1654: Uninitialized memory read in media - CVE-2016-1655: Use-after-free related to extensions - CVE-2016-1656: Android downloaded file path restriction bypass - CVE-2016-1657: Address bar spoofing - CVE-2016-1658: Potential leak of sensitive information to malicious extensions - CVE-2016-1659: Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch 4965=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): chromedriver-50.0.2661.75-41.1 chromedriver-debuginfo-50.0.2661.75-41.1 chromium-50.0.2661.75-41.1 chromium-debuginfo-50.0.2661.75-41.1 chromium-debugsource-50.0.2661.75-41.1 chromium-desktop-gnome-50.0.2661.75-41.1 chromium-desktop-kde-50.0.2661.75-41.1 chromium-ffmpegsumo-50.0.2661.75-41.1 chromium-ffmpegsumo-debuginfo-50.0.2661.75-41.1 References: https://www.suse.com/security/cve/CVE-2016-1651.html https://www.suse.com/security/cve/CVE-2016-1652.html https://www.suse.com/security/cve/CVE-2016-1653.html https://www.suse.com/security/cve/CVE-2016-1654.html https://www.suse.com/security/cve/CVE-2016-1655.html https://www.suse.com/security/cve/CVE-2016-1656.html https://www.suse.com/security/cve/CVE-2016-1657.html https://www.suse.com/security/cve/CVE-2016-1658.html https://www.suse.com/security/cve/CVE-2016-1659.html https://bugzilla.suse.com/975572

1 0

openSUSE-SU-2016:1059-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 16 Apr '16

16 Apr '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1059-1 Rating: important References: #972834 Cross-References: CVE-2016-1646 CVE-2016-1647 CVE-2016-1648 CVE-2016-1649 CVE-2016-1650 CVE-2016-3679 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: Chromium was updated to 49.0.2623.110 to fix the following security issues: - CVE-2016-1646: Out-of-bounds read in V8 - CVE-2016-1647: Use-after-free in Navigation - CVE-2016-1648: Use-after-free in Extensions - CVE-2016-1649: Buffer overflow in libANGLE - CVE-2016-1650: Various fixes from internal audits, fuzzing and other initiatives - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the tip of the 4.9 branch (currently 4.9.385.33) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-459=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): chromedriver-49.0.2623.110-141.2 chromedriver-debuginfo-49.0.2623.110-141.2 chromium-49.0.2623.110-141.2 chromium-debuginfo-49.0.2623.110-141.2 chromium-debugsource-49.0.2623.110-141.2 chromium-desktop-gnome-49.0.2623.110-141.2 chromium-desktop-kde-49.0.2623.110-141.2 chromium-ffmpegsumo-49.0.2623.110-141.2 chromium-ffmpegsumo-debuginfo-49.0.2623.110-141.2 References: https://www.suse.com/security/cve/CVE-2016-1646.html https://www.suse.com/security/cve/CVE-2016-1647.html https://www.suse.com/security/cve/CVE-2016-1648.html https://www.suse.com/security/cve/CVE-2016-1649.html https://www.suse.com/security/cve/CVE-2016-1650.html https://www.suse.com/security/cve/CVE-2016-3679.html https://bugzilla.suse.com/972834

1 0

openSUSE-FU-2016:1058-1: moderate: Add go 1.4 to the SLE 12 backports project
by maintenance＠opensuse.org 16 Apr '16

16 Apr '16

openSUSE Feature Update: Add go 1.4 to the SLE 12 backports project ______________________________________________________________________________ Announcement ID: openSUSE-FU-2016:1058-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 feature fixes can now be installed. Description: This update adds go 1.4 to the SLE 12 backports project. Patch Instructions: To install this openSUSE Feature Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-458=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): go1.4-1.4.2-2.1 go1.4-doc-1.4.2-2.1 References:

1 0

openSUSE-SU-2016:1042-1: important: java-1_7_0-openjdk
by opensuse-security＠opensuse.org 14 Apr '16

14 Apr '16

openSUSE Security Update: java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1042-1 Rating: important References: #972468 Cross-References: CVE-2016-0636 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for java-1_7_0-openjdk fixes the following issues: java-1_7_0-openjdk was updated to 2.6.5 - OpenJDK 7u99 (boo#972468) * Security fixes - S8152335, CVE-2016-0636: Improve MethodHandle consistency * Import of OpenJDK 7 u99 build 0 - S6425769, PR2858: Allow specifying an address to bind JMX remote connector - S6961123: setWMClass fails to null-terminate WM_CLASS string - S8145982, PR2858: JMXInterfaceBindingTest is failing intermittently - S8146015, PR2858: JMXInterfaceBindingTest is failing intermittently for IPv6 addresses * Backports - S8028727, PR2814: [parfait] warnings from b116 for jdk.src.share.native.sun.security.ec: JNI pending exceptions - S8048512, PR2814: Uninitialised memory in jdk/src/share/native/sun/security/ec/ECC_JNI.cpp - S8071705. PR2819, RH1182694: Java application menu misbehaves when running multiple screen stacked vertically - S8150954, PR2866, RH1176206: AWT Robot not compatible with GNOME Shell * Bug fixes - PR2803: Make system CUPS optional - PR2886: Location of 'stap' executable is hard-coded - PR2893: test/tapset/jstaptest.pl should be executable - PR2894: Add missing test directory in make check. * CACAO - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays: Assertion `dest && result && x.any && y.any' failed * AArch64 port - PR2852: Add support for large code cache - PR2852: Apply ReservedCodeCacheSize default limiting to AArch64 only. - S8081289, PR2852: aarch64: add support for RewriteFrequentPairs in interpreter - S8131483, PR2852: aarch64: illegal stlxr instructions - S8133352, PR2852: aarch64: generates constrained unpredictable instructions - S8133842, PR2852: aarch64: C2 generates illegal instructions with int shifts >=32 - S8134322, PR2852: AArch64: Fix several errors in C2 biased locking implementation - S8136615, PR2852: aarch64: elide DecodeN when followed by CmpP 0 - S8138575, PR2852: Improve generated code for profile counters - S8138641, PR2852: Disable C2 peephole by default for aarch64 - S8138966, PR2852: Intermittent SEGV running ParallelGC - S8143067, PR2852: aarch64: guarantee failure in javac - S8143285, PR2852: aarch64: Missing load acquire when checking if ConstantPoolCacheEntry is resolved - S8143584, PR2852: Load constant pool tag and class status with load acquire - S8144201, PR2852: aarch64: jdk/test/com/sun/net/httpserver/Test6a.java fails with --enable-unlimited-crypto - S8144582, PR2852: AArch64 does not generate correct branch profile data - S8146709, PR2852: AArch64: Incorrect use of ADRP for byte_map_base - S8147805, PR2852: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject - S8148240, PR2852: aarch64: random infrequent null pointer exceptions in javac * PPC & AIX port - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in os_aix.cpp after 8028280 - S8139258, PR2851: PPC64LE: argument passing problem when passing 15 floats in native call - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable kill register R12 Update to 2.6.5 - OpenJDK 7u99 (boo#972468) * Security fixes - S8152335, CVE-2016-0636: Improve MethodHandle consistency * Import of OpenJDK 7 u99 build 0 - S6425769, PR2858: Allow specifying an address to bind JMX remote connector - S6961123: setWMClass fails to null-terminate WM_CLASS string - S8145982, PR2858: JMXInterfaceBindingTest is failing intermittently - S8146015, PR2858: JMXInterfaceBindingTest is failing intermittently for IPv6 addresses * Backports - S8028727, PR2814: [parfait] warnings from b116 for jdk.src.share.native.sun.security.ec: JNI pending exceptions - S8048512, PR2814: Uninitialised memory in jdk/src/share/native/sun/security/ec/ECC_JNI.cpp - S8071705. PR2819, RH1182694: Java application menu misbehaves when running multiple screen stacked vertically - S8150954, PR2866, RH1176206: AWT Robot not compatible with GNOME Shell * Bug fixes - PR2803: Make system CUPS optional - PR2886: Location of 'stap' executable is hard-coded - PR2893: test/tapset/jstaptest.pl should be executable - PR2894: Add missing test directory in make check. * CACAO - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays: Assertion `dest && result && x.any && y.any' failed * AArch64 port - PR2852: Add support for large code cache - PR2852: Apply ReservedCodeCacheSize default limiting to AArch64 only. - S8081289, PR2852: aarch64: add support for RewriteFrequentPairs in interpreter - S8131483, PR2852: aarch64: illegal stlxr instructions - S8133352, PR2852: aarch64: generates constrained unpredictable instructions - S8133842, PR2852: aarch64: C2 generates illegal instructions with int shifts >=32 - S8134322, PR2852: AArch64: Fix several errors in C2 biased locking implementation - S8136615, PR2852: aarch64: elide DecodeN when followed by CmpP 0 - S8138575, PR2852: Improve generated code for profile counters - S8138641, PR2852: Disable C2 peephole by default for aarch64 - S8138966, PR2852: Intermittent SEGV running ParallelGC - S8143067, PR2852: aarch64: guarantee failure in javac - S8143285, PR2852: aarch64: Missing load acquire when checking if ConstantPoolCacheEntry is resolved - S8143584, PR2852: Load constant pool tag and class status with load acquire - S8144201, PR2852: aarch64: jdk/test/com/sun/net/httpserver/Test6a.java fails with --enable-unlimited-crypto - S8144582, PR2852: AArch64 does not generate correct branch profile data - S8146709, PR2852: AArch64: Incorrect use of ADRP for byte_map_base - S8147805, PR2852: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject - S8148240, PR2852: aarch64: random infrequent null pointer exceptions in javac * PPC & AIX port - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in os_aix.cpp after 8028280 - S8139258, PR2851: PPC64LE: argument passing problem when passing 15 floats in native call - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable kill register R12 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-457=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): java-1_7_0-openjdk-1.7.0.99-24.33.2 java-1_7_0-openjdk-accessibility-1.7.0.99-24.33.2 java-1_7_0-openjdk-debuginfo-1.7.0.99-24.33.2 java-1_7_0-openjdk-debugsource-1.7.0.99-24.33.2 java-1_7_0-openjdk-demo-1.7.0.99-24.33.2 java-1_7_0-openjdk-demo-debuginfo-1.7.0.99-24.33.2 java-1_7_0-openjdk-devel-1.7.0.99-24.33.2 java-1_7_0-openjdk-devel-debuginfo-1.7.0.99-24.33.2 java-1_7_0-openjdk-headless-1.7.0.99-24.33.2 java-1_7_0-openjdk-headless-debuginfo-1.7.0.99-24.33.2 java-1_7_0-openjdk-src-1.7.0.99-24.33.2 - openSUSE 13.1 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.99-24.33.2 References: https://www.suse.com/security/cve/CVE-2016-0636.html https://bugzilla.suse.com/972468

1 0

openSUSE-SU-2016:1030-1: moderate: Security update for quagga
by opensuse-security＠opensuse.org 14 Apr '16

14 Apr '16

openSUSE Security Update: Security update for quagga ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1030-1 Rating: moderate References: #770619 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: quagga was updated to fix one security issue. This security issue was fixed: - boo#770619: /etc/quagga and its contents were world-readable despite containing passwords. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-456=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-456=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): quagga-0.99.24.1-8.1 quagga-debuginfo-0.99.24.1-8.1 quagga-debugsource-0.99.24.1-8.1 quagga-devel-0.99.24.1-8.1 - openSUSE 13.2 (i586 x86_64): quagga-0.99.23-2.6.1 quagga-debuginfo-0.99.23-2.6.1 quagga-debugsource-0.99.23-2.6.1 quagga-devel-0.99.23-2.6.1 References: https://bugzilla.suse.com/770619

1 0

openSUSE-SU-2016:1029-1: moderate: Security update for lhasa
by opensuse-security＠opensuse.org 13 Apr '16

13 Apr '16

openSUSE Security Update: Security update for lhasa ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1029-1 Rating: moderate References: #973790 Cross-References: CVE-2016-2347 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lhasa to 0.3.1 fixes the following issues: These security issues were fixed: * CVE-2016-2347: Integer underflow vulnerability in the code for doing LZH level 3 header decodes (boo#973790)[ These non-security issues were fixed: * PMarc -pm1- archives that contain truncated compressed data (the decompressed length is longer than what can be read from the compressed data) now decompress as intended. Certain archives in the wild make the assumption that this can be done. * LArc -lz5- archives that make use of the initial history buffer now decompress correctly. * The tests no longer use predictable temporary paths. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-455=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): lhasa-0.3.1-10.1 lhasa-debuginfo-0.3.1-10.1 lhasa-debugsource-0.3.1-10.1 lhasa-devel-0.3.1-10.1 liblhasa0-0.3.1-10.1 liblhasa0-debuginfo-0.3.1-10.1 References: https://www.suse.com/security/cve/CVE-2016-2347.html https://bugzilla.suse.com/973790

1 0

openSUSE-SU-2016:1027-1: moderate: Security update for lhasa
by opensuse-security＠opensuse.org 13 Apr '16

13 Apr '16

openSUSE Security Update: Security update for lhasa ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1027-1 Rating: moderate References: #973790 Cross-References: CVE-2016-2347 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lhasa to 0.3.1 fixes the following issues: These security issues were fixed: * CVE-2016-2347: Integer underflow vulnerability in the code for doing LZH level 3 header decodes (boo#973790)[ These non-security issues were fixed: * PMarc -pm1- archives that contain truncated compressed data (the decompressed length is longer than what can be read from the compressed data) now decompress as intended. Certain archives in the wild make the assumption that this can be done. * LArc -lz5- archives that make use of the initial history buffer now decompress correctly. * The tests no longer use predictable temporary paths. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-454=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): lhasa-0.3.1-4.4.1 lhasa-debuginfo-0.3.1-4.4.1 lhasa-debugsource-0.3.1-4.4.1 lhasa-devel-0.3.1-4.4.1 liblhasa0-0.3.1-4.4.1 liblhasa0-debuginfo-0.3.1-4.4.1 References: https://www.suse.com/security/cve/CVE-2016-2347.html https://bugzilla.suse.com/973790

1 0

openSUSE-SU-2016:1025-1: important: Security update for samba
by opensuse-security＠opensuse.org 13 Apr '16

13 Apr '16

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1025-1 Rating: important References: #924519 #936862 #968973 #971965 #972197 #973031 #973032 #973033 #973034 #973036 #973832 #974629 Cross-References: CVE-2015-5370 CVE-2016-2110 CVE-2016-2111 CVE-2016-2112 CVE-2016-2113 CVE-2016-2115 CVE-2016-2118 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has 5 fixes is now available. Description: samba was updated to fix seven security issues. These security issues were fixed: - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks (bsc#936862). - CVE-2016-2110: A man-in-the-middle could have downgraded NTLMSSP authentication (bsc#973031). - CVE-2016-2111: Domain controller netlogon member computer could have been spoofed (bsc#973032). - CVE-2016-2112: LDAP conenctions were vulnerable to downgrade and MITM attack (bsc#973033). - CVE-2016-2113: TLS certificate validation were missing (bsc#973034). - CVE-2016-2115: Named pipe IPC were vulnerable to MITM attacks (bsc#973036). - CVE-2016-2118: "Badlock" DCERPC impersonation of authenticated account were possible (bsc#971965). These non-security issues were fixed: - bsc#974629: Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call. - bsc#973832: Obsolete libsmbsharemodes0 from samba-libs and libsmbsharemodes-devel from samba-core-devel. - bsc#972197: Obsolete libsmbclient from libsmbclient0 and libpdb-devel from libsamba-passdb-devel while not providing it. - Getting and setting Windows ACLs on symlinks can change permissions on link - bsc#924519: Upgrade on-disk FSRVP server state to new version. - bsc#968973: Only obsolete but do not provide gplv2/3 package names. - bso#6482: s3:utils/smbget: Fix recursive download. - bso#10489: s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support. - bso#11643: docs: Add example for domain logins to smbspool man page. - bso#11690: s3-client: Add a KRB5 wrapper for smbspool. - bso#11708: loadparm: Fix memory leak issue. - bso#11714: lib/tsocket: Work around sockets not supporting FIONREAD. - bso#11719: ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ...". - bso#11727: s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file. - bso#11732: param: Fix str_list_v3 to accept ";" again. - bso#11740: Real memeory leak(buildup) issue in loadparm. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-453=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ctdb-4.2.4-15.1 ctdb-debuginfo-4.2.4-15.1 ctdb-devel-4.2.4-15.1 ctdb-tests-4.2.4-15.1 ctdb-tests-debuginfo-4.2.4-15.1 libdcerpc-atsvc-devel-4.2.4-15.1 libdcerpc-atsvc0-4.2.4-15.1 libdcerpc-atsvc0-debuginfo-4.2.4-15.1 libdcerpc-binding0-4.2.4-15.1 libdcerpc-binding0-debuginfo-4.2.4-15.1 libdcerpc-devel-4.2.4-15.1 libdcerpc-samr-devel-4.2.4-15.1 libdcerpc-samr0-4.2.4-15.1 libdcerpc-samr0-debuginfo-4.2.4-15.1 libdcerpc0-4.2.4-15.1 libdcerpc0-debuginfo-4.2.4-15.1 libgensec-devel-4.2.4-15.1 libgensec0-4.2.4-15.1 libgensec0-debuginfo-4.2.4-15.1 libndr-devel-4.2.4-15.1 libndr-krb5pac-devel-4.2.4-15.1 libndr-krb5pac0-4.2.4-15.1 libndr-krb5pac0-debuginfo-4.2.4-15.1 libndr-nbt-devel-4.2.4-15.1 libndr-nbt0-4.2.4-15.1 libndr-nbt0-debuginfo-4.2.4-15.1 libndr-standard-devel-4.2.4-15.1 libndr-standard0-4.2.4-15.1 libndr-standard0-debuginfo-4.2.4-15.1 libndr0-4.2.4-15.1 libndr0-debuginfo-4.2.4-15.1 libnetapi-devel-4.2.4-15.1 libnetapi0-4.2.4-15.1 libnetapi0-debuginfo-4.2.4-15.1 libregistry-devel-4.2.4-15.1 libregistry0-4.2.4-15.1 libregistry0-debuginfo-4.2.4-15.1 libsamba-credentials-devel-4.2.4-15.1 libsamba-credentials0-4.2.4-15.1 libsamba-credentials0-debuginfo-4.2.4-15.1 libsamba-hostconfig-devel-4.2.4-15.1 libsamba-hostconfig0-4.2.4-15.1 libsamba-hostconfig0-debuginfo-4.2.4-15.1 libsamba-passdb-devel-4.2.4-15.1 libsamba-passdb0-4.2.4-15.1 libsamba-passdb0-debuginfo-4.2.4-15.1 libsamba-policy-devel-4.2.4-15.1 libsamba-policy0-4.2.4-15.1 libsamba-policy0-debuginfo-4.2.4-15.1 libsamba-util-devel-4.2.4-15.1 libsamba-util0-4.2.4-15.1 libsamba-util0-debuginfo-4.2.4-15.1 libsamdb-devel-4.2.4-15.1 libsamdb0-4.2.4-15.1 libsamdb0-debuginfo-4.2.4-15.1 libsmbclient-devel-4.2.4-15.1 libsmbclient-raw-devel-4.2.4-15.1 libsmbclient-raw0-4.2.4-15.1 libsmbclient-raw0-debuginfo-4.2.4-15.1 libsmbclient0-4.2.4-15.1 libsmbclient0-debuginfo-4.2.4-15.1 libsmbconf-devel-4.2.4-15.1 libsmbconf0-4.2.4-15.1 libsmbconf0-debuginfo-4.2.4-15.1 libsmbldap-devel-4.2.4-15.1 libsmbldap0-4.2.4-15.1 libsmbldap0-debuginfo-4.2.4-15.1 libtevent-util-devel-4.2.4-15.1 libtevent-util0-4.2.4-15.1 libtevent-util0-debuginfo-4.2.4-15.1 libwbclient-devel-4.2.4-15.1 libwbclient0-4.2.4-15.1 libwbclient0-debuginfo-4.2.4-15.1 samba-4.2.4-15.1 samba-client-4.2.4-15.1 samba-client-debuginfo-4.2.4-15.1 samba-core-devel-4.2.4-15.1 samba-debuginfo-4.2.4-15.1 samba-debugsource-4.2.4-15.1 samba-libs-4.2.4-15.1 samba-libs-debuginfo-4.2.4-15.1 samba-pidl-4.2.4-15.1 samba-python-4.2.4-15.1 samba-python-debuginfo-4.2.4-15.1 samba-test-4.2.4-15.1 samba-test-debuginfo-4.2.4-15.1 samba-test-devel-4.2.4-15.1 samba-winbind-4.2.4-15.1 samba-winbind-debuginfo-4.2.4-15.1 - openSUSE Leap 42.1 (noarch): samba-doc-4.2.4-15.1 - openSUSE Leap 42.1 (x86_64): libdcerpc-atsvc0-32bit-4.2.4-15.1 libdcerpc-atsvc0-debuginfo-32bit-4.2.4-15.1 libdcerpc-binding0-32bit-4.2.4-15.1 libdcerpc-binding0-debuginfo-32bit-4.2.4-15.1 libdcerpc-samr0-32bit-4.2.4-15.1 libdcerpc-samr0-debuginfo-32bit-4.2.4-15.1 libdcerpc0-32bit-4.2.4-15.1 libdcerpc0-debuginfo-32bit-4.2.4-15.1 libgensec0-32bit-4.2.4-15.1 libgensec0-debuginfo-32bit-4.2.4-15.1 libndr-krb5pac0-32bit-4.2.4-15.1 libndr-krb5pac0-debuginfo-32bit-4.2.4-15.1 libndr-nbt0-32bit-4.2.4-15.1 libndr-nbt0-debuginfo-32bit-4.2.4-15.1 libndr-standard0-32bit-4.2.4-15.1 libndr-standard0-debuginfo-32bit-4.2.4-15.1 libndr0-32bit-4.2.4-15.1 libndr0-debuginfo-32bit-4.2.4-15.1 libnetapi0-32bit-4.2.4-15.1 libnetapi0-debuginfo-32bit-4.2.4-15.1 libregistry0-32bit-4.2.4-15.1 libregistry0-debuginfo-32bit-4.2.4-15.1 libsamba-credentials0-32bit-4.2.4-15.1 libsamba-credentials0-debuginfo-32bit-4.2.4-15.1 libsamba-hostconfig0-32bit-4.2.4-15.1 libsamba-hostconfig0-debuginfo-32bit-4.2.4-15.1 libsamba-passdb0-32bit-4.2.4-15.1 libsamba-passdb0-debuginfo-32bit-4.2.4-15.1 libsamba-policy0-32bit-4.2.4-15.1 libsamba-policy0-debuginfo-32bit-4.2.4-15.1 libsamba-util0-32bit-4.2.4-15.1 libsamba-util0-debuginfo-32bit-4.2.4-15.1 libsamdb0-32bit-4.2.4-15.1 libsamdb0-debuginfo-32bit-4.2.4-15.1 libsmbclient-raw0-32bit-4.2.4-15.1 libsmbclient-raw0-debuginfo-32bit-4.2.4-15.1 libsmbclient0-32bit-4.2.4-15.1 libsmbclient0-debuginfo-32bit-4.2.4-15.1 libsmbconf0-32bit-4.2.4-15.1 libsmbconf0-debuginfo-32bit-4.2.4-15.1 libsmbldap0-32bit-4.2.4-15.1 libsmbldap0-debuginfo-32bit-4.2.4-15.1 libtevent-util0-32bit-4.2.4-15.1 libtevent-util0-debuginfo-32bit-4.2.4-15.1 libwbclient0-32bit-4.2.4-15.1 libwbclient0-debuginfo-32bit-4.2.4-15.1 samba-32bit-4.2.4-15.1 samba-client-32bit-4.2.4-15.1 samba-client-debuginfo-32bit-4.2.4-15.1 samba-debuginfo-32bit-4.2.4-15.1 samba-libs-32bit-4.2.4-15.1 samba-libs-debuginfo-32bit-4.2.4-15.1 samba-winbind-32bit-4.2.4-15.1 samba-winbind-debuginfo-32bit-4.2.4-15.1 References: https://www.suse.com/security/cve/CVE-2015-5370.html https://www.suse.com/security/cve/CVE-2016-2110.html https://www.suse.com/security/cve/CVE-2016-2111.html https://www.suse.com/security/cve/CVE-2016-2112.html https://www.suse.com/security/cve/CVE-2016-2113.html https://www.suse.com/security/cve/CVE-2016-2115.html https://www.suse.com/security/cve/CVE-2016-2118.html https://bugzilla.suse.com/924519 https://bugzilla.suse.com/936862 https://bugzilla.suse.com/968973 https://bugzilla.suse.com/971965 https://bugzilla.suse.com/972197 https://bugzilla.suse.com/973031 https://bugzilla.suse.com/973032 https://bugzilla.suse.com/973033 https://bugzilla.suse.com/973034 https://bugzilla.suse.com/973036 https://bugzilla.suse.com/973832 https://bugzilla.suse.com/974629

1 0

openSUSE-SU-2016:1016-1: important: Security update for mercurial
by opensuse-security＠opensuse.org 12 Apr '16

12 Apr '16

openSUSE Security Update: Security update for mercurial ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1016-1 Rating: important References: #973175 #973176 #973177 Cross-References: CVE-2016-3068 CVE-2016-3069 CVE-2016-3630 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: mercurial was updated to fix three security issues. These security issues were fixed: - CVE-2016-3069: Arbitrary code execution when converting Git repos (bsc#973176). - CVE-2016-3068: Arbitrary code execution with Git subrepos (bsc#973177). - CVE-2016-3630: Remote code execution in binary delta decoding (bsc#973175). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-452=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): mercurial-3.1.2-7.1 mercurial-debuginfo-3.1.2-7.1 mercurial-debugsource-3.1.2-7.1 - openSUSE 13.2 (noarch): mercurial-lang-3.1.2-7.1 References: https://www.suse.com/security/cve/CVE-2016-3068.html https://www.suse.com/security/cve/CVE-2016-3069.html https://www.suse.com/security/cve/CVE-2016-3630.html https://bugzilla.suse.com/973175 https://bugzilla.suse.com/973176 https://bugzilla.suse.com/973177

1 0

openSUSE-SU-2016:1015-1: moderate: Security update for clamav-database
by opensuse-security＠opensuse.org 12 Apr '16

12 Apr '16

openSUSE Security Update: Security update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1015-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update provides a database refresh for the clamav-database. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-451=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201604110002-74.1 References:

1 0

openSUSE-RU-2016:1014-1: Recommended update for python-M2Crypto
by maintenance＠opensuse.org 12 Apr '16

12 Apr '16

openSUSE Recommended Update: Recommended update for python-M2Crypto ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1014-1 Rating: low References: #917759 #917815 #969731 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for python-M2Crypto fixes the following issues: - Manually install _m2crypto shadow file: setup.py misses it. (bsc#917759, bsc#917815) - Fix SSLv2 link error for 13.2 and Leap 42.1. (bsc#969731) - Fix generation of M2Crypto module when using SWIG 3.0.5. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-447=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): python-M2Crypto-0.22.5-5.1 python-M2Crypto-debuginfo-0.22.5-5.1 python-M2Crypto-debugsource-0.22.5-5.1 References: https://bugzilla.suse.com/917759 https://bugzilla.suse.com/917815 https://bugzilla.suse.com/969731

1 0

openSUSE-RU-2016:1013-1: moderate: Recommended update for virt-manager, libosinfo
by maintenance＠opensuse.org 12 Apr '16

12 Apr '16

openSUSE Recommended Update: Recommended update for virt-manager, libosinfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1013-1 Rating: moderate References: #947129 #955401 #956756 #960724 #960828 #963173 #964407 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for virt-manager and libosinfo fixes the following issues: - Installer wrongly detects SLE-12-GA media as SLE-12-SP1. (bsc#964407, bsc#956756) - Dependencies for VNC client are not met on PPC. (bsc#963173) - Unable to create qcow2 volumes on remote KVM with virt-manager. (bsc#960828) - Failure to create virtual machines on a CentOS 7 host. (bsc#960724) - Can't create VM without disk: "list index out of range". (bsc#955401) - Error launching manager: 'URI' is not in list. (bsc#947129) Part of this update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-449=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libosinfo-0.2.12-13.1 libosinfo-1_0-0-0.2.12-13.1 libosinfo-1_0-0-debuginfo-0.2.12-13.1 libosinfo-debuginfo-0.2.12-13.1 libosinfo-debugsource-0.2.12-13.1 libosinfo-devel-0.2.12-13.1 typelib-1_0-Libosinfo-1_0-0.2.12-13.1 - openSUSE Leap 42.1 (noarch): libosinfo-lang-0.2.12-13.1 virt-install-1.2.1-7.2 virt-manager-1.2.1-7.2 virt-manager-common-1.2.1-7.2 References: https://bugzilla.suse.com/947129 https://bugzilla.suse.com/955401 https://bugzilla.suse.com/956756 https://bugzilla.suse.com/960724 https://bugzilla.suse.com/960828 https://bugzilla.suse.com/963173 https://bugzilla.suse.com/964407

1 0

openSUSE-RU-2016:1012-1: moderate: Recommended update for libzypp, zypper
by maintenance＠opensuse.org 12 Apr '16

12 Apr '16

openSUSE Recommended Update: Recommended update for libzypp, zypper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1012-1 Rating: moderate References: #580902 #948924 #953214 #955801 #965027 #966760 #967673 #968006 #968254 #969186 #970575 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 11 recommended fixes can now be installed. Description: This update for the Software Update Stack provides fixes and enhancements. libzypp: - Send stats header to download.opensuse.org only. (bsc#955801) - Show progress bar when installing source packages. (bsc#580902) zypper: - Don't check for zypp lock in command versioncmp. (bsc#970575) - Rephrase unclear explanation of --non-interactive in man page. (bsc#969186) - Add missing --non-interactive-include-reboot-patches option to man page. - Enhance description of Download-and-install mode options in man page. (bsc#968254) - Return error code 106 (ZYPPER_EXIT_INF_REPOS_SKIPPED) if repos were skipped due to a failing refresh. (bsc#968006) - Fix repository import to honor enable and auto-refresh flags. (bsc#967673) - Fix addlock man page header. (bsc#966760) - Fix spec file to use the correct translation set. (bsc#948924) - Fix typos in man page. (bsc#953214) - Fail if tty is bad or at EOF when reading user input. (bsc#965027) - Show progress bar when installing source packages. (bsc#580902) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-448=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libsolv-debugsource-0.6.19-6.1 libsolv-demo-0.6.19-6.1 libsolv-demo-debuginfo-0.6.19-6.1 libsolv-devel-0.6.19-6.1 libsolv-devel-debuginfo-0.6.19-6.1 libsolv-tools-0.6.19-6.1 libsolv-tools-debuginfo-0.6.19-6.1 libzypp-15.21.4-6.1 libzypp-debuginfo-15.21.4-6.1 libzypp-debugsource-15.21.4-6.1 libzypp-devel-15.21.4-6.1 libzypp-devel-doc-15.21.4-6.1 perl-solv-0.6.19-6.1 perl-solv-debuginfo-0.6.19-6.1 python-solv-0.6.19-6.1 python-solv-debuginfo-0.6.19-6.1 ruby-solv-0.6.19-6.1 ruby-solv-debuginfo-0.6.19-6.1 zypper-1.12.37-6.1 zypper-debuginfo-1.12.37-6.1 zypper-debugsource-1.12.37-6.1 - openSUSE Leap 42.1 (noarch): zypper-aptitude-1.12.37-6.1 zypper-log-1.12.37-6.1 References: https://bugzilla.suse.com/580902 https://bugzilla.suse.com/948924 https://bugzilla.suse.com/953214 https://bugzilla.suse.com/955801 https://bugzilla.suse.com/965027 https://bugzilla.suse.com/966760 https://bugzilla.suse.com/967673 https://bugzilla.suse.com/968006 https://bugzilla.suse.com/968254 https://bugzilla.suse.com/969186 https://bugzilla.suse.com/970575

1 0

openSUSE-RU-2016:1009-1: moderate: Recommended update for libgcrypt
by maintenance＠opensuse.org 12 Apr '16

12 Apr '16

openSUSE Recommended Update: Recommended update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1009-1 Rating: moderate References: #970882 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libgcrypt fixes a crash in GPG key generation when operating in FIPS mode. (bsc#970882) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-450=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libgcrypt-cavs-1.6.1-23.1 libgcrypt-cavs-debuginfo-1.6.1-23.1 libgcrypt-debugsource-1.6.1-23.1 libgcrypt-devel-1.6.1-23.1 libgcrypt-devel-debuginfo-1.6.1-23.1 libgcrypt20-1.6.1-23.1 libgcrypt20-debuginfo-1.6.1-23.1 libgcrypt20-hmac-1.6.1-23.1 - openSUSE Leap 42.1 (x86_64): libgcrypt-devel-32bit-1.6.1-23.1 libgcrypt-devel-debuginfo-32bit-1.6.1-23.1 libgcrypt20-32bit-1.6.1-23.1 libgcrypt20-debuginfo-32bit-1.6.1-23.1 libgcrypt20-hmac-32bit-1.6.1-23.1 References: https://bugzilla.suse.com/970882

1 0

openSUSE-SU-2016:1008-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 12 Apr '16

12 Apr '16

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1008-1 Rating: important References: #814440 #884701 #949936 #951440 #951542 #951626 #951638 #953527 #954018 #954404 #954405 #954876 #958439 #958463 #958504 #959709 #960561 #960563 #960710 #961263 #961500 #961509 #962257 #962866 #962977 #963746 #963765 #963767 #963931 #965125 #966137 #966179 #966259 #966437 #966684 #966693 #968018 #969356 #969582 #970845 #971125 Cross-References: CVE-2015-1339 CVE-2015-7799 CVE-2015-7872 CVE-2015-7884 CVE-2015-8104 CVE-2015-8709 CVE-2015-8767 CVE-2015-8785 CVE-2015-8787 CVE-2015-8812 CVE-2016-0723 CVE-2016-2069 CVE-2016-2184 CVE-2016-2383 CVE-2016-2384 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 15 vulnerabilities and has 26 fixes is now available. Description: The openSUSE Leap 42.1 kernel was updated to 4.1.20 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2015-1339: A memory leak in cuse could be used to exhaust kernel memory. (bsc#969356). - CVE-2015-7799: The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel did not ensure that certain slot numbers are valid, which allowed local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call (bnc#949936 951638). - CVE-2015-7872: The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel allowed local users to cause a denial of service (OOPS) via crafted keyctl commands (bnc#951440). - CVE-2015-7884: The vivid_fb_ioctl function in drivers/media/platform/vivid/vivid-osd.c in the Linux kernel did not initialize a certain structure member, which allowed local users to obtain sensitive information from kernel memory via a crafted application (bnc#951626). - CVE-2015-8104: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c (bnc#954404). - CVE-2015-8709: kernel/ptrace.c in the Linux kernel mishandled uid and gid mappings, which allowed local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call. NOTE: the vendor states "there is no kernel bug here (bnc#959709). - CVE-2015-8767: net/sctp/sm_sideeffect.c in the Linux kernel did not properly manage the relationship between a lock and a socket, which allowed local users to cause a denial of service (deadlock) via a crafted sctp_accept call. (bsc#961509) - CVE-2015-8785: The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel allowed local users to cause a denial of service (infinite loop) via a writev system call that triggers a zero length for the first segment of an iov (bnc#963765). - CVE-2015-8787: The nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the Linux kernel allowed remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by sending certain IPv4 packets to an incompletely configured interface, a related issue to CVE-2003-1604 (bnc#963931). - CVE-2015-8812: A flaw was found in the CXGB3 kernel driver when the network was considered congested. The kernel would incorrectly misinterpret the congestion as an error condition and incorrectly free/clean up the skb. When the device would then send the skb's queued, these structures would be referenced and may panic the system or allow an attacker to escalate privileges in a use-after-free scenario. (bsc#966437). - CVE-2016-0723: Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel allowed local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free and system crash) by making a TIOCGETD ioctl call during processing of a TIOCSETD ioctl call (bnc#961500). - CVE-2016-2069: When Linux invalidated a paging structure that is not in use locally, it could, in principle, race against another CPU that is switching to a process that uses the paging structure in question. (bsc#963767) - CVE-2016-2184: A malicious USB device could cause a kernel crash in the alsa usb-audio driver. (bsc#971125) - CVE-2016-2383: Incorrect branch fixups for eBPF allow arbitrary read of kernel memory. (bsc#966684) - CVE-2016-2384: A malicious USB device could cause a kernel crash in the alsa usb-audio driver. (bsc#966693) The following non-security bugs were fixed: - alsa: hda - Apply clock gate workaround to Skylake, too (bsc#966137). - alsa: hda - disable dynamic clock gating on Broxton before reset (bsc#966137). - alsa: hda - Fix playback noise with 24/32 bit sample size on BXT (bsc#966137). - alsa: seq: Fix double port list deletion (bsc#968018). - alsa: seq: Fix leak of pool buffer at concurrent writes (bsc#968018). - alsa: timer: Fix race between stop and interrupt (bsc#968018). - alsa: timer: Fix wrong instance passed to slave callbacks (bsc#968018). - arm64: Add workaround for Cavium erratum 27456. - arm64: Backport arm64 patches from SLE12-SP1-ARM - btrfs: teach backref walking about backrefs with underflowed (bsc#966259). - cgroup kabi fix for 4.1.19. - config: Disable CONFIG_DDR. CONFIG_DDR is selected automatically by drivers which need it. - config: Disable MFD_TPS65218 The TPS65218 is a power management IC for 32-bit ARM systems. - config: Modularize NF_REJECT_IPV4/V6 There is no reason why these helper modules should be built-in when the rest of netfilter is built as modules. - config: Update x86 config files: Enable Intel RAPL This driver is useful when power caping is needed. It was enabled in the SLE kernel 2 years ago. - Delete patches.fixes/bridge-module-get-put.patch. As discussed in http://lists.opensuse.org/opensuse-kernel/2015-11/msg00046.html - drm/i915: Fix double unref in intelfb_alloc failure path (boo#962866, boo#966179). - drm/i915: Fix failure paths around initial fbdev allocation (boo#962866, boo#966179). - drm/i915: Pin the ifbdev for the info->system_base GGTT mmapping (boo#962866, boo#966179). - e1000e: Avoid divide by zero error (bsc#965125). - e1000e: fix division by zero on jumbo MTUs (bsc#965125). - e1000e: fix systim issues (bsc#965125). - e1000e: Fix tight loop implementation of systime read algorithm (bsc#965125). - ibmvnic: Fix ibmvnic_capability struct. - intel: Disable Skylake support in intel_idle driver again (boo#969582) This turned out to bring a regression on some machines, unfortunately. It should be addressed in the upstream at first. - intel_idle: allow idle states to be freeze-mode specific (boo#969582). - intel_idle: Skylake Client Support (boo#969582). - intel_idle: Skylake Client Support - updated (boo#969582). - libceph: fix scatterlist last_piece calculation (bsc#963746). - lio: Add LIO clustered RBD backend (fate#318836) - net kabi fixes for 4.1.19. - numa patches updated to v15 - ocfs2: fix dlmglue deadlock issue(bnc#962257) - pci: thunder: Add driver for ThunderX-pass{1,2} on-chip devices - pci: thunder: Add PCIe host driver for ThunderX processors - sd: Optimal I/O size is in bytes, not sectors (boo#961263). - sd: Reject optimal transfer length smaller than page size (boo#961263). - series.conf: move cxgb3 patch to network drivers section Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-445=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kernel-default-4.1.20-11.1 kernel-default-base-4.1.20-11.1 kernel-default-base-debuginfo-4.1.20-11.1 kernel-default-debuginfo-4.1.20-11.1 kernel-default-debugsource-4.1.20-11.1 kernel-default-devel-4.1.20-11.1 kernel-obs-build-4.1.20-11.2 kernel-obs-build-debugsource-4.1.20-11.2 kernel-obs-qa-4.1.20-11.1 kernel-obs-qa-xen-4.1.20-11.1 kernel-syms-4.1.20-11.1 - openSUSE Leap 42.1 (i686 x86_64): kernel-debug-4.1.20-11.1 kernel-debug-base-4.1.20-11.1 kernel-debug-base-debuginfo-4.1.20-11.1 kernel-debug-debuginfo-4.1.20-11.1 kernel-debug-debugsource-4.1.20-11.1 kernel-debug-devel-4.1.20-11.1 kernel-debug-devel-debuginfo-4.1.20-11.1 kernel-ec2-4.1.20-11.1 kernel-ec2-base-4.1.20-11.1 kernel-ec2-base-debuginfo-4.1.20-11.1 kernel-ec2-debuginfo-4.1.20-11.1 kernel-ec2-debugsource-4.1.20-11.1 kernel-ec2-devel-4.1.20-11.1 kernel-pv-4.1.20-11.1 kernel-pv-base-4.1.20-11.1 kernel-pv-base-debuginfo-4.1.20-11.1 kernel-pv-debuginfo-4.1.20-11.1 kernel-pv-debugsource-4.1.20-11.1 kernel-pv-devel-4.1.20-11.1 kernel-vanilla-4.1.20-11.1 kernel-vanilla-debuginfo-4.1.20-11.1 kernel-vanilla-debugsource-4.1.20-11.1 kernel-vanilla-devel-4.1.20-11.1 kernel-xen-4.1.20-11.1 kernel-xen-base-4.1.20-11.1 kernel-xen-base-debuginfo-4.1.20-11.1 kernel-xen-debuginfo-4.1.20-11.1 kernel-xen-debugsource-4.1.20-11.1 kernel-xen-devel-4.1.20-11.1 - openSUSE Leap 42.1 (noarch): kernel-devel-4.1.20-11.1 kernel-docs-4.1.20-11.3 kernel-docs-html-4.1.20-11.3 kernel-docs-pdf-4.1.20-11.3 kernel-macros-4.1.20-11.1 kernel-source-4.1.20-11.1 kernel-source-vanilla-4.1.20-11.1 - openSUSE Leap 42.1 (i686): kernel-pae-4.1.20-11.1 kernel-pae-base-4.1.20-11.1 kernel-pae-base-debuginfo-4.1.20-11.1 kernel-pae-debuginfo-4.1.20-11.1 kernel-pae-debugsource-4.1.20-11.1 kernel-pae-devel-4.1.20-11.1 References: https://www.suse.com/security/cve/CVE-2015-1339.html https://www.suse.com/security/cve/CVE-2015-7799.html https://www.suse.com/security/cve/CVE-2015-7872.html https://www.suse.com/security/cve/CVE-2015-7884.html https://www.suse.com/security/cve/CVE-2015-8104.html https://www.suse.com/security/cve/CVE-2015-8709.html https://www.suse.com/security/cve/CVE-2015-8767.html https://www.suse.com/security/cve/CVE-2015-8785.html https://www.suse.com/security/cve/CVE-2015-8787.html https://www.suse.com/security/cve/CVE-2015-8812.html https://www.suse.com/security/cve/CVE-2016-0723.html https://www.suse.com/security/cve/CVE-2016-2069.html https://www.suse.com/security/cve/CVE-2016-2184.html https://www.suse.com/security/cve/CVE-2016-2383.html https://www.suse.com/security/cve/CVE-2016-2384.html https://bugzilla.suse.com/814440 https://bugzilla.suse.com/884701 https://bugzilla.suse.com/949936 https://bugzilla.suse.com/951440 https://bugzilla.suse.com/951542 https://bugzilla.suse.com/951626 https://bugzilla.suse.com/951638 https://bugzilla.suse.com/953527 https://bugzilla.suse.com/954018 https://bugzilla.suse.com/954404 https://bugzilla.suse.com/954405 https://bugzilla.suse.com/954876 https://bugzilla.suse.com/958439 https://bugzilla.suse.com/958463 https://bugzilla.suse.com/958504 https://bugzilla.suse.com/959709 https://bugzilla.suse.com/960561 https://bugzilla.suse.com/960563 https://bugzilla.suse.com/960710 https://bugzilla.suse.com/961263 https://bugzilla.suse.com/961500 https://bugzilla.suse.com/961509 https://bugzilla.suse.com/962257 https://bugzilla.suse.com/962866 https://bugzilla.suse.com/962977 https://bugzilla.suse.com/963746 https://bugzilla.suse.com/963765 https://bugzilla.suse.com/963767 https://bugzilla.suse.com/963931 https://bugzilla.suse.com/965125 https://bugzilla.suse.com/966137 https://bugzilla.suse.com/966179 https://bugzilla.suse.com/966259 https://bugzilla.suse.com/966437 https://bugzilla.suse.com/966684 https://bugzilla.suse.com/966693 https://bugzilla.suse.com/968018 https://bugzilla.suse.com/969356 https://bugzilla.suse.com/969582 https://bugzilla.suse.com/970845 https://bugzilla.suse.com/971125

1 0

openSUSE-SU-2016:1007-1: moderate: Security update for cairo
by opensuse-security＠opensuse.org 12 Apr '16

12 Apr '16

openSUSE Security Update: Security update for cairo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1007-1 Rating: moderate References: #971964 Cross-References: CVE-2016-3190 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: cairo was updated to fix one security issue. This security issue was fixed: - CVE-2016-3190: Out of bounds read in fill_xrgb32_lerp_opaque_spans (bsc#971964). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-446=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): cairo-debugsource-1.14.0-7.11.1 cairo-devel-1.14.0-7.11.1 cairo-tools-1.14.0-7.11.1 cairo-tools-debuginfo-1.14.0-7.11.1 libcairo-gobject2-1.14.0-7.11.1 libcairo-gobject2-debuginfo-1.14.0-7.11.1 libcairo-script-interpreter2-1.14.0-7.11.1 libcairo-script-interpreter2-debuginfo-1.14.0-7.11.1 libcairo2-1.14.0-7.11.1 libcairo2-debuginfo-1.14.0-7.11.1 - openSUSE 13.2 (x86_64): cairo-devel-32bit-1.14.0-7.11.1 libcairo-gobject2-32bit-1.14.0-7.11.1 libcairo-gobject2-debuginfo-32bit-1.14.0-7.11.1 libcairo-script-interpreter2-32bit-1.14.0-7.11.1 libcairo-script-interpreter2-debuginfo-32bit-1.14.0-7.11.1 libcairo2-32bit-1.14.0-7.11.1 libcairo2-debuginfo-32bit-1.14.0-7.11.1 References: https://www.suse.com/security/cve/CVE-2016-3190.html https://bugzilla.suse.com/971964

1 0

openSUSE-SU-2016:1005-1: important: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 11 Apr '16

11 Apr '16

openSUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1005-1 Rating: important References: #972468 Cross-References: CVE-2016-0636 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for java-1_8_0-openjdk to version jdk8u77-b03 fixes the following security issue: * CVE-2016-0636: Improve MethodHandle consistency, which had allowed attackers to execute code. (bsc#972468) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-443=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): java-1_8_0-openjdk-1.8.0.77-9.1 java-1_8_0-openjdk-accessibility-1.8.0.77-9.1 java-1_8_0-openjdk-debuginfo-1.8.0.77-9.1 java-1_8_0-openjdk-debugsource-1.8.0.77-9.1 java-1_8_0-openjdk-demo-1.8.0.77-9.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.77-9.1 java-1_8_0-openjdk-devel-1.8.0.77-9.1 java-1_8_0-openjdk-headless-1.8.0.77-9.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.77-9.1 java-1_8_0-openjdk-src-1.8.0.77-9.1 - openSUSE Leap 42.1 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.77-9.1 References: https://www.suse.com/security/cve/CVE-2016-0636.html https://bugzilla.suse.com/972468

1 0

openSUSE-SU-2016:1004-1: important: Security update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 11 Apr '16

11 Apr '16

openSUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1004-1 Rating: important References: #972468 Cross-References: CVE-2016-0636 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The OpenJDK Java java-1_7_0-openjdk was updated to 2.6.5 to fix the following issues: Update to 2.6.5 - OpenJDK 7u99 (bsc#972468) * Security fixes - S8152335, CVE-2016-0636: Improve MethodHandle consistency * Import of OpenJDK 7 u99 build 0 - S6425769, PR2858: Allow specifying an address to bind JMX remote connector - S6961123: setWMClass fails to null-terminate WM_CLASS string - S8145982, PR2858: JMXInterfaceBindingTest is failing intermittently - S8146015, PR2858: JMXInterfaceBindingTest is failing intermittently for IPv6 addresses * Backports - S8028727, PR2814: [parfait] warnings from b116 for jdk.src.share.native.sun.security.ec: JNI pending exceptions - S8048512, PR2814: Uninitialised memory in jdk/src/share/native/sun/security/ec/ECC_JNI.cpp - S8071705. PR2819, RH1182694: Java application menu misbehaves when running multiple screen stacked vertically - S8150954, PR2866, RH1176206: AWT Robot not compatible with GNOME Shell * Bug fixes - PR2803: Make system CUPS optional - PR2886: Location of 'stap' executable is hard-coded - PR2893: test/tapset/jstaptest.pl should be executable - PR2894: Add missing test directory in make check. * CACAO - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays: Assertion `dest && result && x.any && y.any' failed * AArch64 port - PR2852: Add support for large code cache - PR2852: Apply ReservedCodeCacheSize default limiting to AArch64 only. - S8081289, PR2852: aarch64: add support for RewriteFrequentPairs in interpreter - S8131483, PR2852: aarch64: illegal stlxr instructions - S8133352, PR2852: aarch64: generates constrained unpredictable instructions - S8133842, PR2852: aarch64: C2 generates illegal instructions with int shifts >=32 - S8134322, PR2852: AArch64: Fix several errors in C2 biased locking implementation - S8136615, PR2852: aarch64: elide DecodeN when followed by CmpP 0 - S8138575, PR2852: Improve generated code for profile counters - S8138641, PR2852: Disable C2 peephole by default for aarch64 - S8138966, PR2852: Intermittent SEGV running ParallelGC - S8143067, PR2852: aarch64: guarantee failure in javac - S8143285, PR2852: aarch64: Missing load acquire when checking if ConstantPoolCacheEntry is resolved - S8143584, PR2852: Load constant pool tag and class status with load acquire - S8144201, PR2852: aarch64: jdk/test/com/sun/net/httpserver/Test6a.java fails with --enable-unlimited-crypto - S8144582, PR2852: AArch64 does not generate correct branch profile data - S8146709, PR2852: AArch64: Incorrect use of ADRP for byte_map_base - S8147805, PR2852: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject - S8148240, PR2852: aarch64: random infrequent null pointer exceptions in javac * PPC & AIX port - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in os_aix.cpp after 8028280 - S8139258, PR2851: PPC64LE: argument passing problem when passing 15 floats in native call - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable kill register R12 Update to 2.6.5 - OpenJDK 7u99 (bsc#972468) * Security fixes - S8152335, CVE-2016-0636: Improve MethodHandle consistency * Import of OpenJDK 7 u99 build 0 - S6425769, PR2858: Allow specifying an address to bind JMX remote connector - S6961123: setWMClass fails to null-terminate WM_CLASS string - S8145982, PR2858: JMXInterfaceBindingTest is failing intermittently - S8146015, PR2858: JMXInterfaceBindingTest is failing intermittently for IPv6 addresses * Backports - S8028727, PR2814: [parfait] warnings from b116 for jdk.src.share.native.sun.security.ec: JNI pending exceptions - S8048512, PR2814: Uninitialised memory in jdk/src/share/native/sun/security/ec/ECC_JNI.cpp - S8071705. PR2819, RH1182694: Java application menu misbehaves when running multiple screen stacked vertically - S8150954, PR2866, RH1176206: AWT Robot not compatible with GNOME Shell * Bug fixes - PR2803: Make system CUPS optional - PR2886: Location of 'stap' executable is hard-coded - PR2893: test/tapset/jstaptest.pl should be executable - PR2894: Add missing test directory in make check. * CACAO - PR2781, CA195: typeinfo.cpp: typeinfo_merge_nonarrays: Assertion `dest && result && x.any && y.any' failed * AArch64 port - PR2852: Add support for large code cache - PR2852: Apply ReservedCodeCacheSize default limiting to AArch64 only. - S8081289, PR2852: aarch64: add support for RewriteFrequentPairs in interpreter - S8131483, PR2852: aarch64: illegal stlxr instructions - S8133352, PR2852: aarch64: generates constrained unpredictable instructions - S8133842, PR2852: aarch64: C2 generates illegal instructions with int shifts >=32 - S8134322, PR2852: AArch64: Fix several errors in C2 biased locking implementation - S8136615, PR2852: aarch64: elide DecodeN when followed by CmpP 0 - S8138575, PR2852: Improve generated code for profile counters - S8138641, PR2852: Disable C2 peephole by default for aarch64 - S8138966, PR2852: Intermittent SEGV running ParallelGC - S8143067, PR2852: aarch64: guarantee failure in javac - S8143285, PR2852: aarch64: Missing load acquire when checking if ConstantPoolCacheEntry is resolved - S8143584, PR2852: Load constant pool tag and class status with load acquire - S8144201, PR2852: aarch64: jdk/test/com/sun/net/httpserver/Test6a.java fails with --enable-unlimited-crypto - S8144582, PR2852: AArch64 does not generate correct branch profile data - S8146709, PR2852: AArch64: Incorrect use of ADRP for byte_map_base - S8147805, PR2852: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject - S8148240, PR2852: aarch64: random infrequent null pointer exceptions in javac * PPC & AIX port - S8034797, PR2851: AIX: Fix os::naked_short_sleep() in os_aix.cpp after 8028280 - S8139258, PR2851: PPC64LE: argument passing problem when passing 15 floats in native call - S8139421, PR2851: PPC64LE: MacroAssembler::bxx64_patchable kill register R12 This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-444=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): java-1_7_0-openjdk-1.7.0.99-28.1 java-1_7_0-openjdk-accessibility-1.7.0.99-28.1 java-1_7_0-openjdk-bootstrap-1.7.0.99-28.1 java-1_7_0-openjdk-bootstrap-debuginfo-1.7.0.99-28.1 java-1_7_0-openjdk-bootstrap-debugsource-1.7.0.99-28.1 java-1_7_0-openjdk-bootstrap-devel-1.7.0.99-28.1 java-1_7_0-openjdk-bootstrap-devel-debuginfo-1.7.0.99-28.1 java-1_7_0-openjdk-bootstrap-headless-1.7.0.99-28.1 java-1_7_0-openjdk-bootstrap-headless-debuginfo-1.7.0.99-28.1 java-1_7_0-openjdk-debuginfo-1.7.0.99-28.1 java-1_7_0-openjdk-debugsource-1.7.0.99-28.1 java-1_7_0-openjdk-demo-1.7.0.99-28.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.99-28.1 java-1_7_0-openjdk-devel-1.7.0.99-28.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.99-28.1 java-1_7_0-openjdk-headless-1.7.0.99-28.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.99-28.1 java-1_7_0-openjdk-src-1.7.0.99-28.1 - openSUSE Leap 42.1 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.99-28.1 References: https://www.suse.com/security/cve/CVE-2016-0636.html https://bugzilla.suse.com/972468

1 0

openSUSE-RU-2016:1000-1: moderate: Recommended update for poedit
by maintenance＠opensuse.org 11 Apr '16

11 Apr '16

openSUSE Recommended Update: Recommended update for poedit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1000-1 Rating: moderate References: #973731 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for poedit fixes the following issues: - boo#973731: poedit not available as an option to open po files Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-442=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-442=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): poedit-1.8.5-3.1 poedit-debuginfo-1.8.5-3.1 poedit-debugsource-1.8.5-3.1 - openSUSE Leap 42.1 (noarch): poedit-lang-1.8.5-3.1 - openSUSE 13.2 (i586 x86_64): poedit-1.5.4-6.3.2 poedit-debuginfo-1.5.4-6.3.2 poedit-debugsource-1.5.4-6.3.2 - openSUSE 13.2 (noarch): poedit-lang-1.5.4-6.3.2 References: https://bugzilla.suse.com/973731

1 0

openSUSE-RU-2016:0999-1: moderate: Recommended update for opera
by maintenance＠opensuse.org 09 Apr '16

09 Apr '16

openSUSE Recommended Update: Recommended update for opera ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0999-1 Rating: moderate References: #974251 Affected Products: openSUSE Leap 42.1:NonFree ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Opera was updated to 36.0.2130.46 to fix a number of bugs: - issues playing h264 videos - Crash when refreshing page with mouse locked sliding toolbar notification - Go to browser settings not translated to any language - User-deleted speed dials with an “added” field are re-added on browser update without DPC version change The following bugs in the packaging were fixed: - boo#974251: Prevent build service "have choice" errors and unspecified runtime problems - no longer provide or require bundled libffmpeg and libfreetype libraries Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1:NonFree: zypper in -t patch openSUSE-2016-441=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1:NonFree (x86_64): opera-36.0.2130.46-10.1 References: https://bugzilla.suse.com/974251

1 0

openSUSE-SU-2016:0997-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 08 Apr '16

08 Apr '16

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0997-1 Rating: important References: #974209 Cross-References: CVE-2016-1019 Affected Products: openSUSE 13.1 NonFree ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2016-1019: Adobe Flash Player earlier allowed remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016 Aliased: (bsc#974209). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1 NonFree: zypper in -t patch 2016-440=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 NonFree (i586 x86_64): flash-player-11.2.202.616-159.1 flash-player-gnome-11.2.202.616-159.1 flash-player-kde4-11.2.202.616-159.1 References: https://www.suse.com/security/cve/CVE-2016-1019.html https://bugzilla.suse.com/974209

1 0

openSUSE-SU-2016:0995-1: important: Security update for xen
by opensuse-security＠opensuse.org 08 Apr '16

08 Apr '16

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0995-1 Rating: important References: #944463 #944697 #945989 #956829 #960334 #960707 #960725 #960835 #960861 #960862 #961332 #961358 #961691 #962335 #962360 #962611 #962627 #962632 #962642 #962758 #963782 #964413 #964431 #964452 #964644 #964925 #964929 #964950 #965156 #965315 #965317 #967012 #967969 Cross-References: CVE-2013-4529 CVE-2013-4530 CVE-2013-4533 CVE-2013-4534 CVE-2013-4537 CVE-2013-4538 CVE-2013-4539 CVE-2014-0222 CVE-2014-3689 CVE-2014-7815 CVE-2014-9718 CVE-2015-1779 CVE-2015-5239 CVE-2015-5278 CVE-2015-6815 CVE-2015-6855 CVE-2015-7512 CVE-2015-8345 CVE-2015-8613 CVE-2015-8619 CVE-2015-8743 CVE-2015-8744 CVE-2015-8745 CVE-2016-1568 CVE-2016-1570 CVE-2016-1571 CVE-2016-1714 CVE-2016-1981 CVE-2016-2198 CVE-2016-2270 CVE-2016-2271 CVE-2016-2392 CVE-2016-2538 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 33 vulnerabilities is now available. Description: xen was updated to version 4.4.4 to fix 33 security issues. These security issues were fixed: - CVE-2016-2392: NULL pointer dereference in remote NDIS control message handling (bsc#967012). - CVE-2015-5239: Integer overflow in vnc_client_read() and protocol_client_msg() (bsc#944463). - CVE-2016-2270: Xen allowed local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings (boo#965315). - CVE-2016-2538: Integer overflow in remote NDIS control message handling (bsc#967969). - CVE-2015-7512: Buffer overflow in the pcnet_receive function in hw/net/pcnet.c, when a guest NIC has a larger MTU, allowed remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet (boo#962360). - CVE-2014-3689: The vmware-vga driver (hw/display/vmware_vga.c) allowed local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling (boo#962611). - CVE-2015-5278: Infinite loop in ne2000_receive() function (bsc#945989). - CVE-2016-1568: AHCI use-after-free vulnerability in aio port commands (bsc#961332). - CVE-2016-1981: e1000 infinite loop in start_xmit and e1000_receive_iov routines (bsc#963782). - CVE-2016-2198: EHCI NULL pointer dereference in ehci_caps_write (bsc#964413). - CVE-2015-6815: e1000: infinite loop issue (bsc#944697). - CVE-2014-0222: Integer overflow in the qcow_open function in block/qcow.c allowed remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image (boo#964925). - CVE-2015-6855: hw/ide/core.c did not properly restrict the commands accepted by an ATAPI device, which allowed guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash (boo#965156). - CVE-2016-2271: VMX in using an Intel or Cyrix CPU, allowed local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP (boo#965317). - CVE-2013-4534: Buffer overflow in hw/intc/openpic.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements (boo#964452). - CVE-2013-4537: The ssi_sd_transfer function in hw/sd/ssi-sd.c allowed remote attackers to execute arbitrary code via a crafted arglen value in a savevm image (boo#962642). - CVE-2015-1779: The VNC websocket frame decoder allowed remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section (boo#962632). - CVE-2013-4530: Buffer overflow in hw/ssi/pl022.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head and rx_fifo_head values in a savevm image (boo#964950). - CVE-2013-4533: Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s->rx_level value in a savevm image (boo#964644). - CVE-2013-4539: Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c allowed remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image (boo#962758). - CVE-2013-4538: Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c allowed remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image (boo#962335). - CVE-2015-8345: eepro100: infinite loop in processing command block list (bsc#956829). - CVE-2015-8613: scsi: stack based buffer overflow in megasas_ctrl_get_info (bsc#961358). - CVE-2015-8619: Stack based OOB write in hmp_sendkey routine (bsc#960334). - CVE-2016-1571: The paging_invlpg function in include/asm-x86/paging.h, when using shadow mode paging or nested virtualization is enabled, allowed local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check (boo#960862). - CVE-2016-1570: The PV superpage functionality in arch/x86/mm.c allowed local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates (boo#960861). - CVE-2014-9718: The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality had multiple interpretations of a function's return value, which allowed guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions (boo#964431). - CVE-2016-1714: nvram: OOB r/w access in processing firmware configurations (bsc#961691). - CVE-2015-8743: ne2000: OOB memory access in ioport r/w functions (bsc#960725). - CVE-2015-8744: vmxnet3: incorrect l2 header validation leads to a crash via assert(2) call (bsc#960835). - CVE-2015-8745: Reading IMR registers could have lead to a crash via assert(2) call (bsc#960707). - CVE-2014-7815: The set_pixel_format function in ui/vnc.c allowed remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value (boo#962627). - CVE-2013-4529: Buffer overflow in hw/pci/pcie_aer.c allowed remote attackers to cause a denial of service and possibly execute arbitrary code via a large log_num value in a savevm image (boo#964929). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-439=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xen-debugsource-4.4.4_02-43.1 xen-devel-4.4.4_02-43.1 xen-libs-4.4.4_02-43.1 xen-libs-debuginfo-4.4.4_02-43.1 xen-tools-domU-4.4.4_02-43.1 xen-tools-domU-debuginfo-4.4.4_02-43.1 - openSUSE 13.2 (x86_64): xen-4.4.4_02-43.1 xen-doc-html-4.4.4_02-43.1 xen-kmp-default-4.4.4_02_k3.16.7_35-43.1 xen-kmp-default-debuginfo-4.4.4_02_k3.16.7_35-43.1 xen-kmp-desktop-4.4.4_02_k3.16.7_35-43.1 xen-kmp-desktop-debuginfo-4.4.4_02_k3.16.7_35-43.1 xen-libs-32bit-4.4.4_02-43.1 xen-libs-debuginfo-32bit-4.4.4_02-43.1 xen-tools-4.4.4_02-43.1 xen-tools-debuginfo-4.4.4_02-43.1 References: https://www.suse.com/security/cve/CVE-2013-4529.html https://www.suse.com/security/cve/CVE-2013-4530.html https://www.suse.com/security/cve/CVE-2013-4533.html https://www.suse.com/security/cve/CVE-2013-4534.html https://www.suse.com/security/cve/CVE-2013-4537.html https://www.suse.com/security/cve/CVE-2013-4538.html https://www.suse.com/security/cve/CVE-2013-4539.html https://www.suse.com/security/cve/CVE-2014-0222.html https://www.suse.com/security/cve/CVE-2014-3689.html https://www.suse.com/security/cve/CVE-2014-7815.html https://www.suse.com/security/cve/CVE-2014-9718.html https://www.suse.com/security/cve/CVE-2015-1779.html https://www.suse.com/security/cve/CVE-2015-5239.html https://www.suse.com/security/cve/CVE-2015-5278.html https://www.suse.com/security/cve/CVE-2015-6815.html https://www.suse.com/security/cve/CVE-2015-6855.html https://www.suse.com/security/cve/CVE-2015-7512.html https://www.suse.com/security/cve/CVE-2015-8345.html https://www.suse.com/security/cve/CVE-2015-8613.html https://www.suse.com/security/cve/CVE-2015-8619.html https://www.suse.com/security/cve/CVE-2015-8743.html https://www.suse.com/security/cve/CVE-2015-8744.html https://www.suse.com/security/cve/CVE-2015-8745.html https://www.suse.com/security/cve/CVE-2016-1568.html https://www.suse.com/security/cve/CVE-2016-1570.html https://www.suse.com/security/cve/CVE-2016-1571.html https://www.suse.com/security/cve/CVE-2016-1714.html https://www.suse.com/security/cve/CVE-2016-1981.html https://www.suse.com/security/cve/CVE-2016-2198.html https://www.suse.com/security/cve/CVE-2016-2270.html https://www.suse.com/security/cve/CVE-2016-2271.html https://www.suse.com/security/cve/CVE-2016-2392.html https://www.suse.com/security/cve/CVE-2016-2538.html https://bugzilla.suse.com/944463 https://bugzilla.suse.com/944697 https://bugzilla.suse.com/945989 https://bugzilla.suse.com/956829 https://bugzilla.suse.com/960334 https://bugzilla.suse.com/960707 https://bugzilla.suse.com/960725 https://bugzilla.suse.com/960835 https://bugzilla.suse.com/960861 https://bugzilla.suse.com/960862 https://bugzilla.suse.com/961332 https://bugzilla.suse.com/961358 https://bugzilla.suse.com/961691 https://bugzilla.suse.com/962335 https://bugzilla.suse.com/962360 https://bugzilla.suse.com/962611 https://bugzilla.suse.com/962627 https://bugzilla.suse.com/962632 https://bugzilla.suse.com/962642 https://bugzilla.suse.com/962758 https://bugzilla.suse.com/963782 https://bugzilla.suse.com/964413 https://bugzilla.suse.com/964431 https://bugzilla.suse.com/964452 https://bugzilla.suse.com/964644 https://bugzilla.suse.com/964925 https://bugzilla.suse.com/964929 https://bugzilla.suse.com/964950 https://bugzilla.suse.com/965156 https://bugzilla.suse.com/965315 https://bugzilla.suse.com/965317 https://bugzilla.suse.com/967012 https://bugzilla.suse.com/967969

1 0

openSUSE-RU-2016:0989-1: moderate: Recommended update for gdm
by maintenance＠opensuse.org 08 Apr '16

08 Apr '16

openSUSE Recommended Update: Recommended update for gdm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0989-1 Rating: moderate References: #938874 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for gdm fixes the following issues: - don't crash if systemd is shutting down while we're starting up (boo#938874). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-437=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gdm-3.14.2-9.1 gdm-debuginfo-3.14.2-9.1 gdm-debugsource-3.14.2-9.1 gdm-devel-3.14.2-9.1 libgdm1-3.14.2-9.1 libgdm1-debuginfo-3.14.2-9.1 typelib-1_0-Gdm-1_0-3.14.2-9.1 - openSUSE Leap 42.1 (noarch): gdm-branding-upstream-3.14.2-9.1 gdm-lang-3.14.2-9.1 gdmflexiserver-3.14.2-9.1 References: https://bugzilla.suse.com/938874

1 0

openSUSE-SU-2016:0988-1: moderate: Security update for clamav-database
by opensuse-security＠opensuse.org 08 Apr '16

08 Apr '16

openSUSE Security Update: Security update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0988-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update refreshes the clamav-database. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-434=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201604040002-71.1 References:

1 0

openSUSE-SU-2016:0987-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 08 Apr '16

08 Apr '16

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0987-1 Rating: important References: #974209 Cross-References: CVE-2016-1019 Affected Products: openSUSE 13.2 NonFree ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2016-1019: Adobe Flash Player earlier allowed remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016 Aliased: (bsc#974209). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2 NonFree: zypper in -t patch openSUSE-2016-433=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 NonFree (i586 x86_64): flash-player-11.2.202.616-2.94.1 flash-player-gnome-11.2.202.616-2.94.1 flash-player-kde4-11.2.202.616-2.94.1 References: https://www.suse.com/security/cve/CVE-2016-1019.html https://bugzilla.suse.com/974209

1 0

openSUSE-RU-2016:0986-1: moderate: Recommended update for speedtest-cli
by maintenance＠opensuse.org 08 Apr '16

08 Apr '16

openSUSE Recommended Update: Recommended update for speedtest-cli ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0986-1 Rating: moderate References: #959814 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for speedtest-cli fixes the following issues: - Switch to a python3 implementation - Updated dependencies - boo#959814 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-438=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): speedtest-cli-0.3.2-6.1 References: https://bugzilla.suse.com/959814

1 0

openSUSE-RU-2016:0985-1: moderate: Recommended update for cntlm
by maintenance＠opensuse.org 08 Apr '16

08 Apr '16

openSUSE Recommended Update: Recommended update for cntlm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0985-1 Rating: moderate References: #914157 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cntlm fixes the following issues: - Fixed non-working installation (boo#914157) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-435=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): cntlm-0.92.3-3.3.1 cntlm-debuginfo-0.92.3-3.3.1 cntlm-debugsource-0.92.3-3.3.1 References: https://bugzilla.suse.com/914157

1 0

openSUSE-RU-2016:0984-1: moderate: Recommended update for Mesa
by maintenance＠opensuse.org 08 Apr '16

08 Apr '16

openSUSE Recommended Update: Recommended update for Mesa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0984-1 Rating: moderate References: #970725 Affected Products: openSUSE Leap 42.1:NonFree openSUSE Leap 42.1 openSUSE 13.2 NonFree openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for Mesa fixes the following issues: - Backported 53cbb117 from Mesa 11.1.0, which fixes a crash in Nouveau. - Add separate definition GLAPIVAR as GLAPI doesn't have the an 'extern' for some compiler versions. This is needed for GLw (bsc#970725). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1:NonFree: zypper in -t patch openSUSE-2016-436=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-436=1 - openSUSE 13.2 NonFree: zypper in -t patch openSUSE-2016-436=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-436=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1:NonFree (i586 x86_64): libGLw-debugsource-8.0.0-6.1 libGLw-devel-8.0.0-6.1 libGLw1-8.0.0-6.1 libGLw1-debuginfo-8.0.0-6.1 libGLwM1-8.0.0-6.1 libGLwM1-debuginfo-8.0.0-6.1 - openSUSE Leap 42.1:NonFree (x86_64): libGLw1-32bit-8.0.0-6.1 libGLw1-debuginfo-32bit-8.0.0-6.1 libGLwM1-32bit-8.0.0-6.1 libGLwM1-debuginfo-32bit-8.0.0-6.1 - openSUSE Leap 42.1 (i586 x86_64): Mesa-11.0.8-142.2 Mesa-debuginfo-11.0.8-142.2 Mesa-debugsource-11.0.8-142.2 Mesa-devel-11.0.8-142.2 Mesa-dri-devel-11.0.8-142.2 Mesa-libEGL-devel-11.0.8-142.2 Mesa-libEGL1-11.0.8-142.2 Mesa-libEGL1-debuginfo-11.0.8-142.2 Mesa-libGL-devel-11.0.8-142.2 Mesa-libGL1-11.0.8-142.2 Mesa-libGL1-debuginfo-11.0.8-142.2 Mesa-libGLESv1_CM-devel-11.0.8-142.2 Mesa-libGLESv1_CM1-11.0.8-142.2 Mesa-libGLESv1_CM1-debuginfo-11.0.8-142.2 Mesa-libGLESv2-2-11.0.8-142.2 Mesa-libGLESv2-2-debuginfo-11.0.8-142.2 Mesa-libGLESv2-devel-11.0.8-142.2 Mesa-libGLESv3-devel-11.0.8-142.2 Mesa-libd3d-11.0.8-142.2 Mesa-libd3d-debuginfo-11.0.8-142.2 Mesa-libd3d-devel-11.0.8-142.2 Mesa-libglapi-devel-11.0.8-142.2 Mesa-libglapi0-11.0.8-142.2 Mesa-libglapi0-debuginfo-11.0.8-142.2 libGLw-debugsource-8.0.0-5.1 libGLw-devel-8.0.0-5.1 libGLw1-8.0.0-5.1 libGLw1-debuginfo-8.0.0-5.1 libOSMesa-devel-11.0.8-142.2 libOSMesa9-11.0.8-142.2 libOSMesa9-debuginfo-11.0.8-142.2 libXvMC_nouveau-11.0.8-142.2 libXvMC_nouveau-debuginfo-11.0.8-142.2 libXvMC_r600-11.0.8-142.2 libgbm-devel-11.0.8-142.2 libgbm1-11.0.8-142.2 libgbm1-debuginfo-11.0.8-142.2 libvdpau_nouveau-11.0.8-142.2 libvdpau_nouveau-debuginfo-11.0.8-142.2 libvdpau_r300-11.0.8-142.2 libvdpau_r600-11.0.8-142.2 libvdpau_radeonsi-11.0.8-142.2 libwayland-egl-devel-11.0.8-142.2 libwayland-egl1-11.0.8-142.2 libwayland-egl1-debuginfo-11.0.8-142.2 libxatracker-devel-1.0.0-142.2 libxatracker2-1.0.0-142.2 libxatracker2-debuginfo-1.0.0-142.2 - openSUSE Leap 42.1 (x86_64): Mesa-32bit-11.0.8-142.2 Mesa-debuginfo-32bit-11.0.8-142.2 Mesa-libEGL-devel-32bit-11.0.8-142.2 Mesa-libEGL1-32bit-11.0.8-142.2 Mesa-libEGL1-debuginfo-32bit-11.0.8-142.2 Mesa-libGL-devel-32bit-11.0.8-142.2 Mesa-libGL1-32bit-11.0.8-142.2 Mesa-libGL1-debuginfo-32bit-11.0.8-142.2 Mesa-libGLESv1_CM-devel-32bit-11.0.8-142.2 Mesa-libGLESv1_CM1-32bit-11.0.8-142.2 Mesa-libGLESv1_CM1-debuginfo-32bit-11.0.8-142.2 Mesa-libGLESv2-2-32bit-11.0.8-142.2 Mesa-libGLESv2-2-debuginfo-32bit-11.0.8-142.2 Mesa-libGLESv2-devel-32bit-11.0.8-142.2 Mesa-libd3d-32bit-11.0.8-142.2 Mesa-libd3d-debuginfo-32bit-11.0.8-142.2 Mesa-libd3d-devel-32bit-11.0.8-142.2 Mesa-libglapi-devel-32bit-11.0.8-142.2 Mesa-libglapi0-32bit-11.0.8-142.2 Mesa-libglapi0-debuginfo-32bit-11.0.8-142.2 libGLw-devel-32bit-8.0.0-5.1 libGLw1-32bit-8.0.0-5.1 libGLw1-debuginfo-32bit-8.0.0-5.1 libOSMesa-devel-32bit-11.0.8-142.2 libOSMesa9-32bit-11.0.8-142.2 libOSMesa9-debuginfo-32bit-11.0.8-142.2 libXvMC_nouveau-32bit-11.0.8-142.2 libXvMC_nouveau-debuginfo-32bit-11.0.8-142.2 libXvMC_r600-32bit-11.0.8-142.2 libgbm-devel-32bit-11.0.8-142.2 libgbm1-32bit-11.0.8-142.2 libgbm1-debuginfo-32bit-11.0.8-142.2 libvdpau_nouveau-32bit-11.0.8-142.2 libvdpau_nouveau-debuginfo-32bit-11.0.8-142.2 libvdpau_r300-32bit-11.0.8-142.2 libvdpau_r600-32bit-11.0.8-142.2 libvdpau_radeonsi-32bit-11.0.8-142.2 libwayland-egl-devel-32bit-11.0.8-142.2 libwayland-egl1-32bit-11.0.8-142.2 libwayland-egl1-debuginfo-32bit-11.0.8-142.2 - openSUSE 13.2 NonFree (i586 x86_64): libGLw-debugsource-8.0.0-6.1 libGLw-devel-8.0.0-6.1 libGLw1-8.0.0-6.1 libGLw1-debuginfo-8.0.0-6.1 libGLwM1-8.0.0-6.1 libGLwM1-debuginfo-8.0.0-6.1 - openSUSE 13.2 NonFree (x86_64): libGLw1-32bit-8.0.0-6.1 libGLw1-debuginfo-32bit-8.0.0-6.1 libGLwM1-32bit-8.0.0-6.1 libGLwM1-debuginfo-32bit-8.0.0-6.1 - openSUSE 13.2 (i586 x86_64): Mesa-10.3.7-91.15.3 Mesa-debuginfo-10.3.7-91.15.3 Mesa-debugsource-10.3.7-91.15.3 Mesa-devel-10.3.7-91.15.3 Mesa-libEGL-devel-10.3.7-91.15.3 Mesa-libEGL1-10.3.7-91.15.3 Mesa-libEGL1-debuginfo-10.3.7-91.15.3 Mesa-libGL-devel-10.3.7-91.15.3 Mesa-libGL1-10.3.7-91.15.3 Mesa-libGL1-debuginfo-10.3.7-91.15.3 Mesa-libGLESv1_CM-devel-10.3.7-91.15.3 Mesa-libGLESv1_CM1-10.3.7-91.15.3 Mesa-libGLESv1_CM1-debuginfo-10.3.7-91.15.3 Mesa-libGLESv2-2-10.3.7-91.15.3 Mesa-libGLESv2-2-debuginfo-10.3.7-91.15.3 Mesa-libGLESv2-devel-10.3.7-91.15.3 Mesa-libGLESv3-devel-10.3.7-91.15.3 Mesa-libglapi-devel-10.3.7-91.15.3 Mesa-libglapi0-10.3.7-91.15.3 Mesa-libglapi0-debuginfo-10.3.7-91.15.3 libGLw-debugsource-7.11.2-13.3.1 libGLw-devel-7.11.2-13.3.1 libGLw1-7.11.2-13.3.1 libGLw1-debuginfo-7.11.2-13.3.1 libOSMesa-devel-10.3.7-91.15.3 libOSMesa9-10.3.7-91.15.3 libOSMesa9-debuginfo-10.3.7-91.15.3 libXvMC_nouveau-10.3.7-91.15.3 libXvMC_nouveau-debuginfo-10.3.7-91.15.3 libXvMC_r600-10.3.7-91.15.3 libgbm-devel-10.3.7-91.15.3 libgbm1-10.3.7-91.15.3 libgbm1-debuginfo-10.3.7-91.15.3 libvdpau_nouveau-10.3.7-91.15.3 libvdpau_nouveau-debuginfo-10.3.7-91.15.3 libvdpau_r600-10.3.7-91.15.3 libvdpau_radeonsi-10.3.7-91.15.3 libwayland-egl-devel-10.3.7-91.15.3 libwayland-egl1-10.3.7-91.15.3 libwayland-egl1-debuginfo-10.3.7-91.15.3 libxatracker-devel-1.0.0-91.15.3 libxatracker2-1.0.0-91.15.3 libxatracker2-debuginfo-1.0.0-91.15.3 - openSUSE 13.2 (x86_64): Mesa-32bit-10.3.7-91.15.3 Mesa-debuginfo-32bit-10.3.7-91.15.3 Mesa-libEGL-devel-32bit-10.3.7-91.15.3 Mesa-libEGL1-32bit-10.3.7-91.15.3 Mesa-libEGL1-debuginfo-32bit-10.3.7-91.15.3 Mesa-libGL-devel-32bit-10.3.7-91.15.3 Mesa-libGL1-32bit-10.3.7-91.15.3 Mesa-libGL1-debuginfo-32bit-10.3.7-91.15.3 Mesa-libGLESv1_CM-devel-32bit-10.3.7-91.15.3 Mesa-libGLESv1_CM1-32bit-10.3.7-91.15.3 Mesa-libGLESv1_CM1-debuginfo-32bit-10.3.7-91.15.3 Mesa-libGLESv2-2-32bit-10.3.7-91.15.3 Mesa-libGLESv2-2-debuginfo-32bit-10.3.7-91.15.3 Mesa-libGLESv2-devel-32bit-10.3.7-91.15.3 Mesa-libglapi-devel-32bit-10.3.7-91.15.3 Mesa-libglapi0-32bit-10.3.7-91.15.3 Mesa-libglapi0-debuginfo-32bit-10.3.7-91.15.3 libGLw-devel-32bit-7.11.2-13.3.1 libGLw1-32bit-7.11.2-13.3.1 libGLw1-debuginfo-32bit-7.11.2-13.3.1 libOSMesa-devel-32bit-10.3.7-91.15.3 libOSMesa9-32bit-10.3.7-91.15.3 libOSMesa9-debuginfo-32bit-10.3.7-91.15.3 libXvMC_nouveau-32bit-10.3.7-91.15.3 libXvMC_nouveau-debuginfo-32bit-10.3.7-91.15.3 libXvMC_r600-32bit-10.3.7-91.15.3 libgbm-devel-32bit-10.3.7-91.15.3 libgbm1-32bit-10.3.7-91.15.3 libgbm1-debuginfo-32bit-10.3.7-91.15.3 libvdpau_nouveau-32bit-10.3.7-91.15.3 libvdpau_nouveau-debuginfo-32bit-10.3.7-91.15.3 libvdpau_r600-32bit-10.3.7-91.15.3 libvdpau_radeonsi-32bit-10.3.7-91.15.3 libwayland-egl-devel-32bit-10.3.7-91.15.3 libwayland-egl1-32bit-10.3.7-91.15.3 libwayland-egl1-debuginfo-32bit-10.3.7-91.15.3 References: https://bugzilla.suse.com/970725

1 0