April 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:1143-1: moderate: Recommended update for puppet
by maintenance＠opensuse.org 25 Apr '16

25 Apr '16

openSUSE Recommended Update: Recommended update for puppet ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1143-1 Rating: moderate References: #971223 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for puppet fixes the following issues: - Fix non-ASCII user comment with ruby >= 2.1 (boo#971223) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-509=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): puppet-3.8.5-12.1 puppet-server-3.8.5-12.1 - openSUSE 13.2 (noarch): puppet-vim-3.8.5-12.1 References: https://bugzilla.suse.com/971223

1 0

openSUSE-RU-2016:1142-1: moderate: Recommended update for phonon-backend-vlc, phonon4qt5-backend-vlc
by maintenance＠opensuse.org 25 Apr '16

25 Apr '16

openSUSE Recommended Update: Recommended update for phonon-backend-vlc, phonon4qt5-backend-vlc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1142-1 Rating: moderate References: #968905 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for phonon-backend-vlc, phonon4qt5-backend-vlc fixes the following issue: - Conflict with newer VLC versions to prevent problems or even crashes (boo#968905) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-508=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-508=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): phonon-backend-vlc-0.8.2-3.2 phonon-backend-vlc-debuginfo-0.8.2-3.2 phonon-backend-vlc-debugsource-0.8.2-3.2 phonon4qt5-backend-vlc-0.8.2-4.2 phonon4qt5-backend-vlc-debuginfo-0.8.2-4.2 phonon4qt5-backend-vlc-debugsource-0.8.2-4.2 - openSUSE 13.2 (i586 x86_64): phonon-backend-vlc-0.8.0-2.7.2 phonon-backend-vlc-debuginfo-0.8.0-2.7.2 phonon-backend-vlc-debugsource-0.8.0-2.7.2 phonon4qt5-backend-vlc-0.8.2-2.11.2 phonon4qt5-backend-vlc-debuginfo-0.8.2-2.11.2 phonon4qt5-backend-vlc-debugsource-0.8.2-2.11.2 References: https://bugzilla.suse.com/968905

1 0

openSUSE-RU-2016:1141-1: moderate: Recommended update for mailman
by maintenance＠opensuse.org 25 Apr '16

25 Apr '16

openSUSE Recommended Update: Recommended update for mailman ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1141-1 Rating: moderate References: #975618 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mailman fixes the following issues: - updated mailman-apache2.conf to support "require" syntax of recent apache httpd (boo#975618) - update to 2.1.21 * new dmarc_none_moderation_action list setting * new feature to automatically turn on moderation for single list members (spam prevention) * new mm_cfg.py setting GLOBAL_BAN_LIST * translation updates and bug fixes * for more details see NEWS and Mailman/Defaults.py Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-510=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): mailman-2.1.21-4.1 mailman-debuginfo-2.1.21-4.1 mailman-debugsource-2.1.21-4.1 References: https://bugzilla.suse.com/975618

1 0

openSUSE-RU-2016:1137-1: Recommended update for timezone
by maintenance＠opensuse.org 24 Apr '16

24 Apr '16

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1137-1 Rating: low References: #972433 #975875 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update provides the latest timezone information (2016d) for your system, including the following changes: - Venezuela (America/Caracas) switches from -0430 to -04 on 2016-05-01 at 02:30 [boo#975875] - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00. - New zone Asia/Tomsk, split off from Asia/Novosibirsk. It covers Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29 at 02:00 - Changes for past time zones (corrections and new Europe/Kirov) - Corrections to historical time in Kazakhstan from 1991 through 2005. - Azerbaijan no longer observes DST. - Chile reverts from permanent to seasonal DST. - Correct past timestamps for Europe/Kaliningrad, Europe/Vilnius, Europe/Volgograd 1989-1991 - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on 2016-03-27 at 02:00 local time. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-506=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): timezone-2016d-49.1 timezone-debuginfo-2016d-49.1 timezone-debugsource-2016d-49.1 - openSUSE 13.1 (noarch): timezone-java-2016d-49.1 References: https://bugzilla.suse.com/972433 https://bugzilla.suse.com/975875

1 0

openSUSE-SU-2016:1136-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 24 Apr '16

24 Apr '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1136-1 Rating: important References: #975572 Cross-References: CVE-2016-1651 CVE-2016-1652 CVE-2016-1653 CVE-2016-1654 CVE-2016-1655 CVE-2016-1656 CVE-2016-1657 CVE-2016-1658 CVE-2016-1659 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: Chromium was updated to 50.0.2661.75 to fix the following vulnerabilities: - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding - CVE-2016-1652: Universal XSS in extension bindings - CVE-2016-1653: Out-of-bounds write in V8 - CVE-2016-1654: Uninitialized memory read in media - CVE-2016-1655: Use-after-free related to extensions - CVE-2016-1656: Android downloaded file path restriction bypass - CVE-2016-1657: Address bar spoofing - CVE-2016-1658: Potential leak of sensitive information to malicious extensions - CVE-2016-1659: Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-505=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): chromedriver-50.0.2661.75-144.1 chromedriver-debuginfo-50.0.2661.75-144.1 chromium-50.0.2661.75-144.1 chromium-debuginfo-50.0.2661.75-144.1 chromium-debugsource-50.0.2661.75-144.1 chromium-desktop-gnome-50.0.2661.75-144.1 chromium-desktop-kde-50.0.2661.75-144.1 chromium-ffmpegsumo-50.0.2661.75-144.1 chromium-ffmpegsumo-debuginfo-50.0.2661.75-144.1 References: https://www.suse.com/security/cve/CVE-2016-1651.html https://www.suse.com/security/cve/CVE-2016-1652.html https://www.suse.com/security/cve/CVE-2016-1653.html https://www.suse.com/security/cve/CVE-2016-1654.html https://www.suse.com/security/cve/CVE-2016-1655.html https://www.suse.com/security/cve/CVE-2016-1656.html https://www.suse.com/security/cve/CVE-2016-1657.html https://www.suse.com/security/cve/CVE-2016-1658.html https://www.suse.com/security/cve/CVE-2016-1659.html https://bugzilla.suse.com/975572

1 0

openSUSE-SU-2016:1135-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 24 Apr '16

24 Apr '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1135-1 Rating: important References: #975572 Cross-References: CVE-2016-1651 CVE-2016-1652 CVE-2016-1653 CVE-2016-1654 CVE-2016-1655 CVE-2016-1656 CVE-2016-1657 CVE-2016-1658 CVE-2016-1659 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: Chromium was updated to 50.0.2661.75 to fix the following vulnerabilities: - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding - CVE-2016-1652: Universal XSS in extension bindings - CVE-2016-1653: Out-of-bounds write in V8 - CVE-2016-1654: Uninitialized memory read in media - CVE-2016-1655: Use-after-free related to extensions - CVE-2016-1656: Android downloaded file path restriction bypass - CVE-2016-1657: Address bar spoofing - CVE-2016-1658: Potential leak of sensitive information to malicious extensions - CVE-2016-1659: Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-504=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): chromedriver-50.0.2661.75-94.3 chromedriver-debuginfo-50.0.2661.75-94.3 chromium-50.0.2661.75-94.3 chromium-debuginfo-50.0.2661.75-94.3 chromium-debugsource-50.0.2661.75-94.3 chromium-desktop-gnome-50.0.2661.75-94.3 chromium-desktop-kde-50.0.2661.75-94.3 chromium-ffmpegsumo-50.0.2661.75-94.3 chromium-ffmpegsumo-debuginfo-50.0.2661.75-94.3 References: https://www.suse.com/security/cve/CVE-2016-1651.html https://www.suse.com/security/cve/CVE-2016-1652.html https://www.suse.com/security/cve/CVE-2016-1653.html https://www.suse.com/security/cve/CVE-2016-1654.html https://www.suse.com/security/cve/CVE-2016-1655.html https://www.suse.com/security/cve/CVE-2016-1656.html https://www.suse.com/security/cve/CVE-2016-1657.html https://www.suse.com/security/cve/CVE-2016-1658.html https://www.suse.com/security/cve/CVE-2016-1659.html https://bugzilla.suse.com/975572

1 0

openSUSE-RU-2016:1134-1: Recommended update for timezone
by maintenance＠opensuse.org 23 Apr '16

23 Apr '16

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1134-1 Rating: low References: #975875 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides the latest timezone information (2016d) for your system, including the following changes: - Venezuela (America/Caracas) switches from -0430 to -04 on 2016-05-01 at 02:30. - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00. - New zone Asia/Tomsk, split off from Asia/Novosibirsk. It covers Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29 at 02:00. This release also includes changes affecting past time stamps. For a comprehensive list, please refer to the release announcement from ICANN: http://mm.icann.org/pipermail/tz/2016-April/023563.html This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-503=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): timezone-2016d-0.14.1 timezone-debuginfo-2016d-0.14.1 timezone-debugsource-2016d-0.14.1 - openSUSE Leap 42.1 (noarch): timezone-java-2016d-0.14.1 References: https://bugzilla.suse.com/975875

1 0

openSUSE-RU-2016:1133-1: Recommended update for timezone
by maintenance＠opensuse.org 23 Apr '16

23 Apr '16

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1133-1 Rating: low References: #975875 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides time zone update (version 2016d), including the following changes: - Venezuela (America/Caracas) switches from -0430 to -04 on 2016-05-01 at 02:30 [boo#975875] - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00. - New zone Asia/Tomsk, split off from Asia/Novosibirsk. It covers Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29 at 02:00 - Changes for past time zones (corrections and new Europe/Kirov) - Corrections to historical time in Kazakhstan from 1991 through 2005 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-502=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): timezone-2016d-41.1 timezone-debuginfo-2016d-41.1 timezone-debugsource-2016d-41.1 - openSUSE 13.2 (noarch): timezone-java-2016d-41.1 References: https://bugzilla.suse.com/975875

1 0

openSUSE-SU-2016:1132-1: moderate: This update refreshes the clamav database.
by opensuse-security＠opensuse.org 22 Apr '16

22 Apr '16

openSUSE Security Update: This update refreshes the clamav database. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1132-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Security update for clamav-database on April 18th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-501=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201604180001-77.1 References:

1 0

openSUSE-RU-2016:1126-1: moderate: Recommended update for kwin5
by maintenance＠opensuse.org 22 Apr '16

22 Apr '16

openSUSE Recommended Update: Recommended update for kwin5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1126-1 Rating: moderate References: #970598 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for kwin5 fixes the following issues: - makes kwin successfully restart when it crashes so at least the user session keeps being usable (boo#970598, kde#348834, kde#353030, kde#353428) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-500=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-500=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kwin5-5.5.5-15.3 kwin5-debuginfo-5.5.5-15.3 kwin5-debugsource-5.5.5-15.3 kwin5-devel-5.5.5-15.3 - openSUSE Leap 42.1 (noarch): kwin5-lang-5.5.5-15.3 - openSUSE 13.2 (i586 x86_64): kwin5-5.3.2-21.5 kwin5-debuginfo-5.3.2-21.5 kwin5-debugsource-5.3.2-21.5 kwin5-devel-5.3.2-21.5 - openSUSE 13.2 (noarch): kwin5-lang-5.3.2-21.5 References: https://bugzilla.suse.com/970598

1 0