April 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:1181-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 28 Apr '16

28 Apr '16

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1181-1 Rating: moderate References: #971867 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for grub2 fixes the following issues: - Do not ignore settings in variables GRUB_DISABLE_LINUX_UUID and GRUB_DEVICE. (bsc#971867) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-519=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): grub2-2.02~beta2-83.5 grub2-branding-upstream-2.02~beta2-83.5 grub2-debuginfo-2.02~beta2-83.5 grub2-i386-pc-2.02~beta2-83.5 - openSUSE Leap 42.1 (x86_64): grub2-x86_64-efi-2.02~beta2-83.5 grub2-x86_64-xen-2.02~beta2-83.5 - openSUSE Leap 42.1 (noarch): grub2-snapper-plugin-2.02~beta2-83.5 - openSUSE Leap 42.1 (i586): grub2-i386-efi-2.02~beta2-83.5 References: https://bugzilla.suse.com/971867

1 0

openSUSE-RU-2016:1180-1: Recommended update for bzip2
by maintenance＠opensuse.org 28 Apr '16

28 Apr '16

openSUSE Recommended Update: Recommended update for bzip2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1180-1 Rating: low References: #970260 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for bzip2 fixes the following issues: - Fix bzgrep wrapper that always returns 0 as exit code when working on multiple archives, even when the pattern is not found. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-523=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): bzip2-1.0.6-32.1 bzip2-debuginfo-1.0.6-32.1 bzip2-debugsource-1.0.6-32.1 libbz2-1-1.0.6-32.1 libbz2-1-debuginfo-1.0.6-32.1 libbz2-devel-1.0.6-32.1 - openSUSE Leap 42.1 (x86_64): libbz2-1-32bit-1.0.6-32.1 libbz2-1-debuginfo-32bit-1.0.6-32.1 libbz2-devel-32bit-1.0.6-32.1 - openSUSE Leap 42.1 (noarch): bzip2-doc-1.0.6-32.1 References: https://bugzilla.suse.com/970260

1 0

openSUSE-SU-2016:1173-1: important: Security update for php5
by opensuse-security＠opensuse.org 28 Apr '16

28 Apr '16

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1173-1 Rating: important References: #968284 #969821 #971611 #971612 #971912 #973351 #973792 Cross-References: CVE-2014-9767 CVE-2015-8835 CVE-2015-8838 CVE-2016-2554 CVE-2016-3141 CVE-2016-3142 CVE-2016-3185 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for php5 fixes the following security issues: - CVE-2015-8838: mysqlnd was vulnerable to BACKRONYM (bnc#973792). - CVE-2015-8835: SoapClient s_call method suffered from a type confusion issue that could have lead to crashes [bsc#973351] - CVE-2016-2554: A NULL pointer dereference in phar_get_fp_offset could lead to crashes. [bsc#968284] Note: we do not ship the phar extension currently, so we are not affected. - CVE-2016-3141: A use-after-free / double-free in the WDDX deserialization could lead to crashes or potential code execution. [bsc#969821] - CVE-2016-3142: An Out-of-bounds read in phar_parse_zipfile() could lead to crashes. [bsc#971912] Note: we do not ship the phar extension currently, so we are not affected. - CVE-2014-9767: A directory traversal when extracting zip files was fixed that could lead to overwritten files. [bsc#971612] - CVE-2016-3185: A type confusion vulnerability in make_http_soap_request() could lead to crashes or potentially code execution. [bsc#971611] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-517=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): apache2-mod_php5-5.5.14-44.1 apache2-mod_php5-debuginfo-5.5.14-44.1 php5-5.5.14-44.1 php5-bcmath-5.5.14-44.1 php5-bcmath-debuginfo-5.5.14-44.1 php5-bz2-5.5.14-44.1 php5-bz2-debuginfo-5.5.14-44.1 php5-calendar-5.5.14-44.1 php5-calendar-debuginfo-5.5.14-44.1 php5-ctype-5.5.14-44.1 php5-ctype-debuginfo-5.5.14-44.1 php5-curl-5.5.14-44.1 php5-curl-debuginfo-5.5.14-44.1 php5-dba-5.5.14-44.1 php5-dba-debuginfo-5.5.14-44.1 php5-debuginfo-5.5.14-44.1 php5-debugsource-5.5.14-44.1 php5-devel-5.5.14-44.1 php5-dom-5.5.14-44.1 php5-dom-debuginfo-5.5.14-44.1 php5-enchant-5.5.14-44.1 php5-enchant-debuginfo-5.5.14-44.1 php5-exif-5.5.14-44.1 php5-exif-debuginfo-5.5.14-44.1 php5-fastcgi-5.5.14-44.1 php5-fastcgi-debuginfo-5.5.14-44.1 php5-fileinfo-5.5.14-44.1 php5-fileinfo-debuginfo-5.5.14-44.1 php5-firebird-5.5.14-44.1 php5-firebird-debuginfo-5.5.14-44.1 php5-fpm-5.5.14-44.1 php5-fpm-debuginfo-5.5.14-44.1 php5-ftp-5.5.14-44.1 php5-ftp-debuginfo-5.5.14-44.1 php5-gd-5.5.14-44.1 php5-gd-debuginfo-5.5.14-44.1 php5-gettext-5.5.14-44.1 php5-gettext-debuginfo-5.5.14-44.1 php5-gmp-5.5.14-44.1 php5-gmp-debuginfo-5.5.14-44.1 php5-iconv-5.5.14-44.1 php5-iconv-debuginfo-5.5.14-44.1 php5-imap-5.5.14-44.1 php5-imap-debuginfo-5.5.14-44.1 php5-intl-5.5.14-44.1 php5-intl-debuginfo-5.5.14-44.1 php5-json-5.5.14-44.1 php5-json-debuginfo-5.5.14-44.1 php5-ldap-5.5.14-44.1 php5-ldap-debuginfo-5.5.14-44.1 php5-mbstring-5.5.14-44.1 php5-mbstring-debuginfo-5.5.14-44.1 php5-mcrypt-5.5.14-44.1 php5-mcrypt-debuginfo-5.5.14-44.1 php5-mssql-5.5.14-44.1 php5-mssql-debuginfo-5.5.14-44.1 php5-mysql-5.5.14-44.1 php5-mysql-debuginfo-5.5.14-44.1 php5-odbc-5.5.14-44.1 php5-odbc-debuginfo-5.5.14-44.1 php5-opcache-5.5.14-44.1 php5-opcache-debuginfo-5.5.14-44.1 php5-openssl-5.5.14-44.1 php5-openssl-debuginfo-5.5.14-44.1 php5-pcntl-5.5.14-44.1 php5-pcntl-debuginfo-5.5.14-44.1 php5-pdo-5.5.14-44.1 php5-pdo-debuginfo-5.5.14-44.1 php5-pgsql-5.5.14-44.1 php5-pgsql-debuginfo-5.5.14-44.1 php5-phar-5.5.14-44.1 php5-phar-debuginfo-5.5.14-44.1 php5-posix-5.5.14-44.1 php5-posix-debuginfo-5.5.14-44.1 php5-pspell-5.5.14-44.1 php5-pspell-debuginfo-5.5.14-44.1 php5-readline-5.5.14-44.1 php5-readline-debuginfo-5.5.14-44.1 php5-shmop-5.5.14-44.1 php5-shmop-debuginfo-5.5.14-44.1 php5-snmp-5.5.14-44.1 php5-snmp-debuginfo-5.5.14-44.1 php5-soap-5.5.14-44.1 php5-soap-debuginfo-5.5.14-44.1 php5-sockets-5.5.14-44.1 php5-sockets-debuginfo-5.5.14-44.1 php5-sqlite-5.5.14-44.1 php5-sqlite-debuginfo-5.5.14-44.1 php5-suhosin-5.5.14-44.1 php5-suhosin-debuginfo-5.5.14-44.1 php5-sysvmsg-5.5.14-44.1 php5-sysvmsg-debuginfo-5.5.14-44.1 php5-sysvsem-5.5.14-44.1 php5-sysvsem-debuginfo-5.5.14-44.1 php5-sysvshm-5.5.14-44.1 php5-sysvshm-debuginfo-5.5.14-44.1 php5-tidy-5.5.14-44.1 php5-tidy-debuginfo-5.5.14-44.1 php5-tokenizer-5.5.14-44.1 php5-tokenizer-debuginfo-5.5.14-44.1 php5-wddx-5.5.14-44.1 php5-wddx-debuginfo-5.5.14-44.1 php5-xmlreader-5.5.14-44.1 php5-xmlreader-debuginfo-5.5.14-44.1 php5-xmlrpc-5.5.14-44.1 php5-xmlrpc-debuginfo-5.5.14-44.1 php5-xmlwriter-5.5.14-44.1 php5-xmlwriter-debuginfo-5.5.14-44.1 php5-xsl-5.5.14-44.1 php5-xsl-debuginfo-5.5.14-44.1 php5-zip-5.5.14-44.1 php5-zip-debuginfo-5.5.14-44.1 php5-zlib-5.5.14-44.1 php5-zlib-debuginfo-5.5.14-44.1 - openSUSE Leap 42.1 (noarch): php5-pear-5.5.14-44.1 References: https://www.suse.com/security/cve/CVE-2014-9767.html https://www.suse.com/security/cve/CVE-2015-8835.html https://www.suse.com/security/cve/CVE-2015-8838.html https://www.suse.com/security/cve/CVE-2016-2554.html https://www.suse.com/security/cve/CVE-2016-3141.html https://www.suse.com/security/cve/CVE-2016-3142.html https://www.suse.com/security/cve/CVE-2016-3185.html https://bugzilla.suse.com/968284 https://bugzilla.suse.com/969821 https://bugzilla.suse.com/971611 https://bugzilla.suse.com/971612 https://bugzilla.suse.com/971912 https://bugzilla.suse.com/973351 https://bugzilla.suse.com/973792

1 0

openSUSE-SU-2016:1167-1: important: Security update for php5
by opensuse-security＠opensuse.org 27 Apr '16

27 Apr '16

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1167-1 Rating: important References: #969821 #971611 #971612 #971912 #973351 #973792 #974305 Cross-References: CVE-2014-9767 CVE-2015-8835 CVE-2015-8838 CVE-2016-3141 CVE-2016-3142 CVE-2016-3185 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has one errata is now available. Description: This update for php5 fixes the following security issues: - bsc#974305: buffer overflow in libmagic - CVE-2015-8838: mysqlnd was vulnerable to BACKRONYM (bnc#973792). - CVE-2015-8835: SoapClient s__call method suffered from type confusion issue (bnc#973351). - CVE-2016-3141: A use-after-free / double-free in the WDDX deserialization could lead to crashes or potential code execution. [bsc#969821] - CVE-2016-3142: An Out-of-bounds read in phar_parse_zipfile() could lead to crashes. [bsc#971912] - CVE-2014-9767: A directory traversal when extracting zip files was fixed that could lead to overwritten files. [bsc#971612] - CVE-2016-3185: A type confusion vulnerability in make_http_soap_request() could lead to crashes or potentially code execution. [bsc#971611] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-516=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_php5-5.6.1-53.3 apache2-mod_php5-debuginfo-5.6.1-53.3 php5-5.6.1-53.3 php5-bcmath-5.6.1-53.3 php5-bcmath-debuginfo-5.6.1-53.3 php5-bz2-5.6.1-53.3 php5-bz2-debuginfo-5.6.1-53.3 php5-calendar-5.6.1-53.3 php5-calendar-debuginfo-5.6.1-53.3 php5-ctype-5.6.1-53.3 php5-ctype-debuginfo-5.6.1-53.3 php5-curl-5.6.1-53.3 php5-curl-debuginfo-5.6.1-53.3 php5-dba-5.6.1-53.3 php5-dba-debuginfo-5.6.1-53.3 php5-debuginfo-5.6.1-53.3 php5-debugsource-5.6.1-53.3 php5-devel-5.6.1-53.3 php5-dom-5.6.1-53.3 php5-dom-debuginfo-5.6.1-53.3 php5-enchant-5.6.1-53.3 php5-enchant-debuginfo-5.6.1-53.3 php5-exif-5.6.1-53.3 php5-exif-debuginfo-5.6.1-53.3 php5-fastcgi-5.6.1-53.3 php5-fastcgi-debuginfo-5.6.1-53.3 php5-fileinfo-5.6.1-53.3 php5-fileinfo-debuginfo-5.6.1-53.3 php5-firebird-5.6.1-53.3 php5-firebird-debuginfo-5.6.1-53.3 php5-fpm-5.6.1-53.3 php5-fpm-debuginfo-5.6.1-53.3 php5-ftp-5.6.1-53.3 php5-ftp-debuginfo-5.6.1-53.3 php5-gd-5.6.1-53.3 php5-gd-debuginfo-5.6.1-53.3 php5-gettext-5.6.1-53.3 php5-gettext-debuginfo-5.6.1-53.3 php5-gmp-5.6.1-53.3 php5-gmp-debuginfo-5.6.1-53.3 php5-iconv-5.6.1-53.3 php5-iconv-debuginfo-5.6.1-53.3 php5-imap-5.6.1-53.3 php5-imap-debuginfo-5.6.1-53.3 php5-intl-5.6.1-53.3 php5-intl-debuginfo-5.6.1-53.3 php5-json-5.6.1-53.3 php5-json-debuginfo-5.6.1-53.3 php5-ldap-5.6.1-53.3 php5-ldap-debuginfo-5.6.1-53.3 php5-mbstring-5.6.1-53.3 php5-mbstring-debuginfo-5.6.1-53.3 php5-mcrypt-5.6.1-53.3 php5-mcrypt-debuginfo-5.6.1-53.3 php5-mssql-5.6.1-53.3 php5-mssql-debuginfo-5.6.1-53.3 php5-mysql-5.6.1-53.3 php5-mysql-debuginfo-5.6.1-53.3 php5-odbc-5.6.1-53.3 php5-odbc-debuginfo-5.6.1-53.3 php5-opcache-5.6.1-53.3 php5-opcache-debuginfo-5.6.1-53.3 php5-openssl-5.6.1-53.3 php5-openssl-debuginfo-5.6.1-53.3 php5-pcntl-5.6.1-53.3 php5-pcntl-debuginfo-5.6.1-53.3 php5-pdo-5.6.1-53.3 php5-pdo-debuginfo-5.6.1-53.3 php5-pgsql-5.6.1-53.3 php5-pgsql-debuginfo-5.6.1-53.3 php5-phar-5.6.1-53.3 php5-phar-debuginfo-5.6.1-53.3 php5-posix-5.6.1-53.3 php5-posix-debuginfo-5.6.1-53.3 php5-pspell-5.6.1-53.3 php5-pspell-debuginfo-5.6.1-53.3 php5-readline-5.6.1-53.3 php5-readline-debuginfo-5.6.1-53.3 php5-shmop-5.6.1-53.3 php5-shmop-debuginfo-5.6.1-53.3 php5-snmp-5.6.1-53.3 php5-snmp-debuginfo-5.6.1-53.3 php5-soap-5.6.1-53.3 php5-soap-debuginfo-5.6.1-53.3 php5-sockets-5.6.1-53.3 php5-sockets-debuginfo-5.6.1-53.3 php5-sqlite-5.6.1-53.3 php5-sqlite-debuginfo-5.6.1-53.3 php5-suhosin-5.6.1-53.3 php5-suhosin-debuginfo-5.6.1-53.3 php5-sysvmsg-5.6.1-53.3 php5-sysvmsg-debuginfo-5.6.1-53.3 php5-sysvsem-5.6.1-53.3 php5-sysvsem-debuginfo-5.6.1-53.3 php5-sysvshm-5.6.1-53.3 php5-sysvshm-debuginfo-5.6.1-53.3 php5-tidy-5.6.1-53.3 php5-tidy-debuginfo-5.6.1-53.3 php5-tokenizer-5.6.1-53.3 php5-tokenizer-debuginfo-5.6.1-53.3 php5-wddx-5.6.1-53.3 php5-wddx-debuginfo-5.6.1-53.3 php5-xmlreader-5.6.1-53.3 php5-xmlreader-debuginfo-5.6.1-53.3 php5-xmlrpc-5.6.1-53.3 php5-xmlrpc-debuginfo-5.6.1-53.3 php5-xmlwriter-5.6.1-53.3 php5-xmlwriter-debuginfo-5.6.1-53.3 php5-xsl-5.6.1-53.3 php5-xsl-debuginfo-5.6.1-53.3 php5-zip-5.6.1-53.3 php5-zip-debuginfo-5.6.1-53.3 php5-zlib-5.6.1-53.3 php5-zlib-debuginfo-5.6.1-53.3 - openSUSE 13.2 (noarch): php5-pear-5.6.1-53.3 References: https://www.suse.com/security/cve/CVE-2014-9767.html https://www.suse.com/security/cve/CVE-2015-8835.html https://www.suse.com/security/cve/CVE-2015-8838.html https://www.suse.com/security/cve/CVE-2016-3141.html https://www.suse.com/security/cve/CVE-2016-3142.html https://www.suse.com/security/cve/CVE-2016-3185.html https://bugzilla.suse.com/969821 https://bugzilla.suse.com/971611 https://bugzilla.suse.com/971612 https://bugzilla.suse.com/971912 https://bugzilla.suse.com/973351 https://bugzilla.suse.com/973792 https://bugzilla.suse.com/974305

1 0

openSUSE-RU-2016:1163-1: moderate: Recommended update for docker-compose, python-cached-property, python-docker-py, python-dockerpty
by maintenance＠opensuse.org 27 Apr '16

27 Apr '16

openSUSE Recommended Update: Recommended update for docker-compose, python-cached-property, python-docker-py, python-dockerpty ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1163-1 Rating: moderate References: #954145 #954486 #954690 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for docker-compose, python-cached-property, python-docker-py, python-dockerpty fixes the following issues: docker-compose: - Update from version 1.2.0 to version 1.6.2: + Add failing test for --abort-on-container-exit + Stop other containers if the flag is set. + Revert "Change special case from '_', None to ()" + Make environment variables without a value the same as docker-cli. + Updating Dockerfile + Update docker-py version in requirements to 1.7.2 + Add cached-property requirement + Review version requirements so we don't have surprises if python packages are updated + Fix fix-requirements.patch based on versions in Factory (boo#954145) + Fixed a bug which broke the use of environment and env_file with extends, and caused environment keys without values to have a None value, instead of a value from the host environment. + Fixed a regression in 1.5.1 that caused a warning about volumes to be raised incorrectly when containers were recreated. + Fixed a bug which prevented building a Dockerfile that used ADD <url> + Fixed a bug with docker-compose restart which prevented it from starting stopped containers. + Fixed handling of SIGTERM and SIGINT to properly stop containers + Add support for using a url as the value of build + Improved the validation of the expose option + Require the version of python-enum34 shipped with SLE and openSUSE. The original version is not really needed. + Fix python-request requirement python-docker-py: - Update from version 1.3.1 to 1.7.2 (boo#954486, boo#954690): + Added support for the since param in Client.logs (introduced in API version 1.19) + Added support for the DOCKER_CONFIG environment variable when looking up auth config + Added support for the stream param in Client.stats (when set to False, allows user to retrieve a single snapshot instead of a constant data stream) + Added support for the mem_swappiness, oom_kill_disable params in Client.create_host_config + Added support for build arguments in Client.build through the buildargs param. + Added support for cusom IPAM configuration in Client.create_network + Added input support to Client.exec_create + Added support for stop_signal in Client.create_host_config + Added support for custom HTTP headers in Docker config file. + Added support for unspecified transfer protocol in base_url when TLS is enabled. + Fixed a bug where TLS verification was improperly executed when providing a custom CA certificate. + Added support for shm_size in Client.create_host_config + Added support for the networking API introduced in Docker 1.9.0 + Added support for the volumes API introduced in Docker 1.9.0 + Added support for the group_add parameter in create_host_config. + Added support for the CPU CFS (cpu_quota and cpu_period) parameteres in create_host_config. + Added support for the archive API endpoint (Client.get_archive, Client.put_archive). + Added support for ps_args parameter in Client.top. + Added utils.parse_env_file to support env-files. See docs for usage. + Added support for arbitrary log drivers + Added support for URL paths in the docker host URL (base_url) + Fixed a bug where exec_inspect would allow invocation when the API version was too low. + Fixed a bug where docker.utils.ports.split_port would break if an open range was provided. + Fixed a bug where invalid image IDs / container IDs could be provided to bypass or reroute request URLs python-dockerpty: - Update from version 0.3.4 to version 0.4.2: + no changelog available python-cached-property: - initial commit with version 1.3.0 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-514=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): docker-compose-1.6.2-7.1 python-cached-property-1.3.0-2.1 python-docker-py-1.7.2-4.1 python-docker-py-test-1.7.2-4.1 python-dockerpty-0.4.1-4.1 References: https://bugzilla.suse.com/954145 https://bugzilla.suse.com/954486 https://bugzilla.suse.com/954690

1 0

openSUSE-RU-2016:1162-1: moderate: Recommended update for polkit-default-privs
by maintenance＠opensuse.org 27 Apr '16

27 Apr '16

openSUSE Recommended Update: Recommended update for polkit-default-privs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1162-1 Rating: moderate References: #948728 #951830 #955626 #959297 #964935 #967436 #971580 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This recommended update for polkit-default-privs fixes the following issues: - added brltty (boo#967436) - add importd privs as default tracked (boo#964935) - polkit-default-privs: relaxing firewalld polkit rule for desktop (boo#971580) - polkit-default-privs: adding libvirt action ids (boo#959297) - polkit-default-privs: Adding new systemd actions (boo#955626) - polkit-default-privs: create files with consistent permissions - polkit-default-privs: adding rules for cinnamon settings-daemon (boo#951830) - polkit-default-privs: relaxing some ModemManager rules to avoid typing password after screenlock/hibernate (boo#948728) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-515=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): polkit-default-privs-13.2-10.1 References: https://bugzilla.suse.com/948728 https://bugzilla.suse.com/951830 https://bugzilla.suse.com/955626 https://bugzilla.suse.com/959297 https://bugzilla.suse.com/964935 https://bugzilla.suse.com/967436 https://bugzilla.suse.com/971580

1 0

openSUSE-SU-2016:1157-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 26 Apr '16

26 Apr '16

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1157-1 Rating: important References: #974209 Cross-References: CVE-2016-1019 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2016-1019: Adobe Flash Player earlier allowed remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016 Aliased: (bsc#974209). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2016-513=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): flash-player-11.2.202.616-182.1 flash-player-gnome-11.2.202.616-182.1 flash-player-kde4-11.2.202.616-182.1 References: https://www.suse.com/security/cve/CVE-2016-1019.html https://bugzilla.suse.com/974209

1 0

openSUSE-RU-2016:1152-1: Recommended update for mailx
by maintenance＠opensuse.org 26 Apr '16

26 Apr '16

openSUSE Recommended Update: Recommended update for mailx ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1152-1 Rating: low References: #922543 #974561 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for mailx fixes the following issues: - Correct parenthese expansion to fulfill natural order (boo#974561) - Allow Form Feed as valid characters within mail messages (boo#922543) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-511=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): mailx-12.5-20.7.2 mailx-debuginfo-12.5-20.7.2 mailx-debugsource-12.5-20.7.2 References: https://bugzilla.suse.com/922543 https://bugzilla.suse.com/974561

1 0

openSUSE-RU-2016:1151-1: Recommended update for perl-Gtk2
by maintenance＠opensuse.org 26 Apr '16

26 Apr '16

openSUSE Recommended Update: Recommended update for perl-Gtk2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1151-1 Rating: low References: #919669 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for perl-Gtk2 fixes the following issues: - Fixed double free (boo#919669) - Fixed test suite crash on invalid pointer Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-512=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): perl-Gtk2-1.2492-2.3.1 perl-Gtk2-debuginfo-1.2492-2.3.1 perl-Gtk2-debugsource-1.2492-2.3.1 References: https://bugzilla.suse.com/919669

1 0

openSUSE-RU-2016:1144-1: moderate: Recommended update for getmail
by maintenance＠opensuse.org 25 Apr '16

25 Apr '16

openSUSE Recommended Update: Recommended update for getmail ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1144-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update provides version 4.48.0 for getmail: - Update getmail to 4.48.0: * work around brain-damaged change in Python's poplib which causes message retrieval errors if any line of a message has more than 2048 characters in it. * restore link to moved Marc mailing list archive. - Changes from 4.47.0: * try to work around pathological breakage in one random POP server implementation. * remove dead marc.theaimsgroup.com list archive from docs. * bugfix: if you combined IMAP IDLE mode with delete_after, getmail would, after remaining connected to the server for the number of days configured, begin deleting messages immediately after retrieval instead of after the configured delay. Now fixed. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-507=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): getmail-4.48.0-5.1 getmail-doc-4.48.0-5.1 References:

1 0