April 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:1121-1: moderate: Security update for xerces-c
by opensuse-security＠opensuse.org 21 Apr '16

21 Apr '16

openSUSE Security Update: Security update for xerces-c ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1121-1 Rating: moderate References: #966822 Cross-References: CVE-2016-0729 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xerces-c fixes the following security issue: - CVE-2016-0729: Fixed mishandling certain kinds of malformed input documents, that resulted in buffer overlows during processing and error reporting. The overflows can manifest as a segmentation fault or as memory corruption during a parse operation. (bsc#966822) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-499=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libxerces-c-3_1-3.1.1-16.1 libxerces-c-3_1-debuginfo-3.1.1-16.1 libxerces-c-devel-3.1.1-16.1 xerces-c-3.1.1-16.1 xerces-c-debuginfo-3.1.1-16.1 xerces-c-debugsource-3.1.1-16.1 - openSUSE Leap 42.1 (x86_64): libxerces-c-3_1-32bit-3.1.1-16.1 libxerces-c-3_1-debuginfo-32bit-3.1.1-16.1 References: https://www.suse.com/security/cve/CVE-2016-0729.html https://bugzilla.suse.com/966822

1 0

openSUSE-RU-2016:1120-1: moderate: Recommended update for wine
by maintenance＠opensuse.org 21 Apr '16

21 Apr '16

openSUSE Recommended Update: Recommended update for wine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1120-1 Rating: moderate References: #960661 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The Windows Emulator Wine was updated to the 1.8.2 stable release (boo#960661). It contains various bug fixes and small translation updates. Also the winetricks helper script was updated. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-498=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-498=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): wine-1.8.2-9.1 wine-debuginfo-1.8.2-9.1 wine-debugsource-1.8.2-9.1 wine-devel-1.8.2-9.1 wine-devel-debuginfo-1.8.2-9.1 - openSUSE Leap 42.1 (x86_64): wine-32bit-1.8.2-9.1 wine-debuginfo-32bit-1.8.2-9.1 wine-devel-32bit-1.8.2-9.1 wine-devel-debuginfo-32bit-1.8.2-9.1 - openSUSE 13.2 (i586 x86_64): wine-1.8.2-9.1 wine-debuginfo-1.8.2-9.1 wine-debugsource-1.8.2-9.1 wine-devel-1.8.2-9.1 wine-devel-debuginfo-1.8.2-9.1 - openSUSE 13.2 (x86_64): wine-32bit-1.8.2-9.1 wine-debuginfo-32bit-1.8.2-9.1 wine-devel-32bit-1.8.2-9.1 wine-devel-debuginfo-32bit-1.8.2-9.1 References: https://bugzilla.suse.com/960661

1 0

openSUSE-SU-2016:1118-1: moderate: Security update for giflib
by opensuse-security＠opensuse.org 20 Apr '16

20 Apr '16

openSUSE Security Update: Security update for giflib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1118-1 Rating: moderate References: #974847 Cross-References: CVE-2016-3977 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes the following issue: Heap buffer overflow in gif2rgb (CVE-2016-3977) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-497=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): giflib-debugsource-5.0.5-2.9.1 giflib-devel-5.0.5-2.9.1 giflib-progs-5.0.5-2.9.1 giflib-progs-debuginfo-5.0.5-2.9.1 libgif6-5.0.5-2.9.1 libgif6-debuginfo-5.0.5-2.9.1 - openSUSE 13.1 (x86_64): giflib-devel-32bit-5.0.5-2.9.1 libgif6-32bit-5.0.5-2.9.1 libgif6-debuginfo-32bit-5.0.5-2.9.1 References: https://www.suse.com/security/cve/CVE-2016-3977.html https://bugzilla.suse.com/974847

1 0

openSUSE-RU-2016:1117-1: moderate: Recommended update - GNOME Stack
by maintenance＠opensuse.org 20 Apr '16

20 Apr '16

openSUSE Recommended Update: Recommended update - GNOME Stack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1117-1 Rating: moderate References: #967731 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: GNOME Stack update for March 2016. The following packages were updated: easytag, geocode-glib, gnome-commander, gnome-control-center, gnome-settings-daemon, gom, gssdp, gthumb, gtk2, gupnp, gupnp-av, gupnp-dlna, gvfs, libwnck, totem-pl-parser, vte For detailed information pls view the change file. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-496=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): easytag-2.4.2-6.2 easytag-debuginfo-2.4.2-6.2 easytag-debugsource-2.4.2-6.2 geocode-glib-3.16.3-5.2 geocode-glib-debugsource-3.16.3-5.2 geocode-glib-devel-3.16.3-5.2 glade-catalog-vte-0.40.3-5.2 gnome-commander-1.4.8-4.2 gnome-commander-debuginfo-1.4.8-4.2 gnome-commander-debugsource-1.4.8-4.2 gnome-control-center-3.16.4-10.2 gnome-control-center-color-3.16.4-10.2 gnome-control-center-debuginfo-3.16.4-10.2 gnome-control-center-debugsource-3.16.4-10.2 gnome-control-center-devel-3.16.4-10.2 gnome-control-center-user-faces-3.16.4-10.2 gnome-pty-helper-0.40.3-5.2 gnome-pty-helper-debuginfo-0.40.3-5.2 gnome-settings-daemon-3.16.5-10.2 gnome-settings-daemon-debuginfo-3.16.5-10.2 gnome-settings-daemon-debugsource-3.16.5-10.2 gnome-settings-daemon-devel-3.16.5-10.2 gom-debugsource-0.3.2-6.2 gom-devel-0.3.2-6.2 gssdp-debugsource-0.14.14-5.2 gssdp-utils-0.14.14-5.2 gssdp-utils-debuginfo-0.14.14-5.2 gthumb-3.4.2-3.8 gthumb-debuginfo-3.4.2-3.8 gthumb-debugsource-3.4.2-3.8 gthumb-devel-3.4.2-3.8 gtk2-debugsource-2.24.30-8.3 gtk2-devel-2.24.30-8.3 gtk2-devel-debuginfo-2.24.30-8.3 gtk2-engine-clearlooks-2.20.2-26.3 gtk2-engine-clearlooks-debuginfo-2.20.2-26.3 gtk2-engine-crux-2.20.2-26.3 gtk2-engine-crux-debuginfo-2.20.2-26.3 gtk2-engine-glide-2.20.2-26.3 gtk2-engine-glide-debuginfo-2.20.2-26.3 gtk2-engine-hcengine-2.20.2-26.3 gtk2-engine-hcengine-debuginfo-2.20.2-26.3 gtk2-engine-industrial-2.20.2-26.3 gtk2-engine-industrial-debuginfo-2.20.2-26.3 gtk2-engine-mist-2.20.2-26.3 gtk2-engine-mist-debuginfo-2.20.2-26.3 gtk2-engine-redmond95-2.20.2-26.3 gtk2-engine-redmond95-debuginfo-2.20.2-26.3 gtk2-engine-thinice-2.20.2-26.3 gtk2-engine-thinice-debuginfo-2.20.2-26.3 gtk2-engines-2.20.2-26.3 gtk2-engines-debugsource-2.20.2-26.3 gtk2-engines-devel-2.20.2-26.3 gtk2-immodule-amharic-2.24.30-8.3 gtk2-immodule-amharic-debuginfo-2.24.30-8.3 gtk2-immodule-inuktitut-2.24.30-8.3 gtk2-immodule-inuktitut-debuginfo-2.24.30-8.3 gtk2-immodule-multipress-2.24.30-8.3 gtk2-immodule-multipress-debuginfo-2.24.30-8.3 gtk2-immodule-thai-2.24.30-8.3 gtk2-immodule-thai-debuginfo-2.24.30-8.3 gtk2-immodule-vietnamese-2.24.30-8.3 gtk2-immodule-vietnamese-debuginfo-2.24.30-8.3 gtk2-immodule-xim-2.24.30-8.3 gtk2-immodule-xim-debuginfo-2.24.30-8.3 gtk2-immodules-tigrigna-2.24.30-8.3 gtk2-immodules-tigrigna-debuginfo-2.24.30-8.3 gtk2-tools-2.24.30-8.3 gtk2-tools-debuginfo-2.24.30-8.3 gupnp-av-0.12.8-6.2 gupnp-av-debugsource-0.12.8-6.2 gupnp-debugsource-0.20.14-5.2 gupnp-dlna-debugsource-0.10.4-8.2 gupnp-dlna-tools-0.10.4-8.2 gupnp-dlna-tools-debuginfo-0.10.4-8.2 gvfs-1.24.3-7.2 gvfs-backend-afc-1.24.3-7.2 gvfs-backend-afc-debuginfo-1.24.3-7.2 gvfs-backends-1.24.3-7.2 gvfs-backends-debuginfo-1.24.3-7.2 gvfs-debuginfo-1.24.3-7.2 gvfs-debugsource-1.24.3-7.2 gvfs-devel-1.24.3-7.2 gvfs-fuse-1.24.3-7.2 gvfs-fuse-debuginfo-1.24.3-7.2 libgeocode-glib0-3.16.3-5.2 libgeocode-glib0-debuginfo-3.16.3-5.2 libgom-1_0-0-0.3.2-6.2 libgom-1_0-0-debuginfo-0.3.2-6.2 libgssdp-1_0-3-0.14.14-5.2 libgssdp-1_0-3-debuginfo-0.14.14-5.2 libgssdp-devel-0.14.14-5.2 libgtk-2_0-0-2.24.30-8.3 libgtk-2_0-0-debuginfo-2.24.30-8.3 libgupnp-1_0-4-0.20.14-5.2 libgupnp-1_0-4-debuginfo-0.20.14-5.2 libgupnp-av-1_0-2-0.12.8-6.2 libgupnp-av-1_0-2-debuginfo-0.12.8-6.2 libgupnp-av-devel-0.12.8-6.2 libgupnp-devel-0.20.14-5.2 libgupnp-dlna-2_0-3-0.10.4-8.2 libgupnp-dlna-2_0-3-debuginfo-0.10.4-8.2 libgupnp-dlna-backend-gstreamer-0.10.4-8.2 libgupnp-dlna-backend-gstreamer-debuginfo-0.10.4-8.2 libgupnp-dlna-devel-0.10.4-8.2 libtotem-plparser-mini18-3.10.6-5.2 libtotem-plparser-mini18-debuginfo-3.10.6-5.2 libtotem-plparser18-3.10.6-5.2 libtotem-plparser18-debuginfo-3.10.6-5.2 libvte-2_91-0-0.40.3-5.2 libvte-2_91-0-debuginfo-0.40.3-5.2 libwnck-3-0-3.14.1-5.2 libwnck-3-0-debuginfo-3.14.1-5.2 libwnck-debugsource-3.14.1-5.2 libwnck-devel-3.14.1-5.2 libwnck-tools-3.14.1-5.2 libwnck-tools-debuginfo-3.14.1-5.2 nautilus-plugin-easytag-2.4.2-6.2 nautilus-plugin-easytag-debuginfo-2.4.2-6.2 totem-pl-parser-3.10.6-5.2 totem-pl-parser-debuginfo-3.10.6-5.2 totem-pl-parser-debugsource-3.10.6-5.2 totem-pl-parser-devel-3.10.6-5.2 typelib-1_0-GSSDP-1_0-0.14.14-5.2 typelib-1_0-GUPnP-1_0-0.20.14-5.2 typelib-1_0-GUPnPAV-1_0-0.12.8-6.2 typelib-1_0-GUPnPDLNA-2_0-0.10.4-8.2 typelib-1_0-GUPnPDLNAGst-2_0-0.10.4-8.2 typelib-1_0-GeocodeGlib-1_0-3.16.3-5.2 typelib-1_0-Gom-1_0-0.3.2-6.2 typelib-1_0-Gtk-2_0-2.24.30-8.3 typelib-1_0-TotemPlParser-1_0-3.10.6-5.2 typelib-1_0-Vte-2.91-0.40.3-5.2 typelib-1_0-Wnck-3_0-3.14.1-5.2 vte-debugsource-0.40.3-5.2 vte-devel-0.40.3-5.2 vte-tools-0.40.3-5.2 vte-tools-debuginfo-0.40.3-5.2 - openSUSE Leap 42.1 (noarch): easytag-lang-2.4.2-6.2 gnome-commander-lang-1.4.8-4.2 gnome-control-center-lang-3.16.4-10.2 gnome-settings-daemon-lang-3.16.5-10.2 gom-lang-0.3.2-6.2 gthumb-lang-3.4.2-3.8 gtk2-branding-SLED-42.1-9.3 gtk2-branding-openSUSE-42.1-9.3 gtk2-branding-upstream-2.24.30-8.3 gtk2-data-2.24.30-8.3 gtk2-lang-2.24.30-8.3 gtk2-theme-clearlooks-2.20.2-26.3 gtk2-theme-crux-2.20.2-26.3 gtk2-theme-industrial-2.20.2-26.3 gtk2-theme-mist-2.20.2-26.3 gtk2-theme-redmond95-2.20.2-26.3 gtk2-theme-thinice-2.20.2-26.3 gvfs-lang-1.24.3-7.2 libwnck-lang-3.14.1-5.2 totem-pl-parser-lang-3.10.6-5.2 vte-lang-0.40.3-5.2 - openSUSE Leap 42.1 (x86_64): gtk2-devel-32bit-2.24.30-8.3 gtk2-devel-debuginfo-32bit-2.24.30-8.3 gtk2-engine-clearlooks-32bit-2.20.2-26.3 gtk2-engine-clearlooks-debuginfo-32bit-2.20.2-26.3 gtk2-engine-crux-32bit-2.20.2-26.3 gtk2-engine-crux-debuginfo-32bit-2.20.2-26.3 gtk2-engine-glide-32bit-2.20.2-26.3 gtk2-engine-glide-debuginfo-32bit-2.20.2-26.3 gtk2-engine-industrial-32bit-2.20.2-26.3 gtk2-engine-industrial-debuginfo-32bit-2.20.2-26.3 gtk2-engine-mist-32bit-2.20.2-26.3 gtk2-engine-mist-debuginfo-32bit-2.20.2-26.3 gtk2-engine-redmond95-32bit-2.20.2-26.3 gtk2-engine-redmond95-debuginfo-32bit-2.20.2-26.3 gtk2-engine-thinice-32bit-2.20.2-26.3 gtk2-engine-thinice-debuginfo-32bit-2.20.2-26.3 gtk2-immodule-amharic-32bit-2.24.30-8.3 gtk2-immodule-amharic-debuginfo-32bit-2.24.30-8.3 gtk2-immodule-inuktitut-32bit-2.24.30-8.3 gtk2-immodule-inuktitut-debuginfo-32bit-2.24.30-8.3 gtk2-immodule-multipress-32bit-2.24.30-8.3 gtk2-immodule-multipress-debuginfo-32bit-2.24.30-8.3 gtk2-immodule-thai-32bit-2.24.30-8.3 gtk2-immodule-thai-debuginfo-32bit-2.24.30-8.3 gtk2-immodule-vietnamese-32bit-2.24.30-8.3 gtk2-immodule-vietnamese-debuginfo-32bit-2.24.30-8.3 gtk2-immodule-xim-32bit-2.24.30-8.3 gtk2-immodule-xim-debuginfo-32bit-2.24.30-8.3 gtk2-immodules-tigrigna-32bit-2.24.30-8.3 gtk2-immodules-tigrigna-debuginfo-32bit-2.24.30-8.3 gtk2-tools-32bit-2.24.30-8.3 gtk2-tools-debuginfo-32bit-2.24.30-8.3 gvfs-32bit-1.24.3-7.2 gvfs-debuginfo-32bit-1.24.3-7.2 libgeocode-glib0-32bit-3.16.3-5.2 libgeocode-glib0-debuginfo-32bit-3.16.3-5.2 libgssdp-1_0-3-32bit-0.14.14-5.2 libgssdp-1_0-3-debuginfo-32bit-0.14.14-5.2 libgtk-2_0-0-32bit-2.24.30-8.3 libgtk-2_0-0-debuginfo-32bit-2.24.30-8.3 libgupnp-1_0-4-32bit-0.20.14-5.2 libgupnp-1_0-4-debuginfo-32bit-0.20.14-5.2 libwnck-3-0-32bit-3.14.1-5.2 libwnck-3-0-debuginfo-32bit-3.14.1-5.2 References: https://bugzilla.suse.com/967731

1 0

openSUSE-RU-2016:1116-1: moderate: Recommended update for pacemaker
by maintenance＠opensuse.org 20 Apr '16

20 Apr '16

openSUSE Recommended Update: Recommended update for pacemaker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1116-1 Rating: moderate References: #938545 #942491 #950483 #956459 #961392 #962309 #964183 #967388 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update for pacemaker fixes the following issues: - remote: Simplify calls to accept() and inet_ntop() by using "struct sockaddr_storage". (bsc#964183) - remote: Notify other clients of a new connection only if the handshake has completed. (bsc#967388) - remote: Correctly display the IP address of the remote client. (bsc#964183) - crmd: Prevent use-after-free when an unexpected remote client takes over. (bsc#964183) - crmd: Disconnect the relevant remote proxies as well when disconnecting a remote node. (bsc#964183) - crmd: Prevent potential use-after-free. (bsc#964183) - liblrmd: Prevent potential use-after-free issues. (bsc#964183) - fencing: Correctly track active stonith actions. (bsc#938545) - fencing: Functionize adding and removing active pids of device. (bsc#938545) - crm_shadow: Do not invoke shells with --noprofile option other than bash. (bsc#961392) - fencing: Support concurrent fencing actions on each device. (bsc#938545) - pengine: Support concurrent fencing. (bsc#938545) - fencing, libfencing: Remap fence agent error codes before async callback. (bsc#962309) - stonithd: Do not intermingle stdout & stderr coming from stonith-RAs. (bsc#962309) - ping: Clarify the description of host_list parameter in ping metadata. (bsc#956459) - pengine: Support of multiple-active=block for resource groups. (bsc#942491) - crm_report: Call "crm report" if available. (bsc#950483) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-495=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libpacemaker-devel-1.1.13-17.1 libpacemaker3-1.1.13-17.1 libpacemaker3-debuginfo-1.1.13-17.1 pacemaker-1.1.13-17.1 pacemaker-cli-1.1.13-17.1 pacemaker-cli-debuginfo-1.1.13-17.1 pacemaker-cts-1.1.13-17.1 pacemaker-cts-debuginfo-1.1.13-17.1 pacemaker-debuginfo-1.1.13-17.1 pacemaker-debugsource-1.1.13-17.1 pacemaker-remote-1.1.13-17.1 pacemaker-remote-debuginfo-1.1.13-17.1 References: https://bugzilla.suse.com/938545 https://bugzilla.suse.com/942491 https://bugzilla.suse.com/950483 https://bugzilla.suse.com/956459 https://bugzilla.suse.com/961392 https://bugzilla.suse.com/962309 https://bugzilla.suse.com/964183 https://bugzilla.suse.com/967388

1 0

openSUSE-RU-2016:1115-1: moderate: Recommended update for pulseaudio
by maintenance＠opensuse.org 20 Apr '16

20 Apr '16

openSUSE Recommended Update: Recommended update for pulseaudio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1115-1 Rating: moderate References: #968568 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pulseaudio fixes the following issues: - Move libpulsedsp.so into pulseaudio-utils subpackage and add it to baselibs.conf so that 32bit compat lib is built (boo#968568); also recommends is added in libpulse0-32bit for easy installation - Fix padsp script to support bi-arch libs (boo#968568) - Call bootstrap.sh for rebuilding properly with patches Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-493=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libpulse-devel-7.0-5.1 libpulse-mainloop-glib0-7.0-5.1 libpulse-mainloop-glib0-debuginfo-7.0-5.1 libpulse0-7.0-5.1 libpulse0-debuginfo-7.0-5.1 pulseaudio-7.0-5.1 pulseaudio-bash-completion-7.0-5.1 pulseaudio-debuginfo-7.0-5.1 pulseaudio-debugsource-7.0-5.1 pulseaudio-esound-compat-7.0-5.1 pulseaudio-gdm-hooks-7.0-5.1 pulseaudio-module-bluetooth-7.0-5.1 pulseaudio-module-bluetooth-debuginfo-7.0-5.1 pulseaudio-module-gconf-7.0-5.1 pulseaudio-module-gconf-debuginfo-7.0-5.1 pulseaudio-module-jack-7.0-5.1 pulseaudio-module-jack-debuginfo-7.0-5.1 pulseaudio-module-lirc-7.0-5.1 pulseaudio-module-lirc-debuginfo-7.0-5.1 pulseaudio-module-x11-7.0-5.1 pulseaudio-module-x11-debuginfo-7.0-5.1 pulseaudio-module-zeroconf-7.0-5.1 pulseaudio-module-zeroconf-debuginfo-7.0-5.1 pulseaudio-system-wide-7.0-5.1 pulseaudio-utils-7.0-5.1 pulseaudio-utils-debuginfo-7.0-5.1 pulseaudio-zsh-completion-7.0-5.1 - openSUSE Leap 42.1 (x86_64): libpulse-mainloop-glib0-32bit-7.0-5.1 libpulse-mainloop-glib0-debuginfo-32bit-7.0-5.1 libpulse0-32bit-7.0-5.1 libpulse0-debuginfo-32bit-7.0-5.1 pulseaudio-utils-32bit-7.0-5.1 pulseaudio-utils-debuginfo-32bit-7.0-5.1 - openSUSE Leap 42.1 (noarch): pulseaudio-lang-7.0-5.1 References: https://bugzilla.suse.com/968568

1 0

openSUSE-RU-2016:1112-1: moderate: Recommended update for clamav
by maintenance＠opensuse.org 20 Apr '16

20 Apr '16

openSUSE Recommended Update: Recommended update for clamav ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1112-1 Rating: moderate References: #958451 #969814 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The virus scan engine clamav was updated to 0.99.1: * Add support for parsing Hancom Office files including extracting and scanning embedded objects. * Several bug fixes. For details, see http://blog.clamav.net/2016/03/clamav-0991-has-been-released.html /usr/share/doc/packages/clamav/ChangeLog Bugs fixed: * bsc#958451: Remove updateclamconf, because it breaks configurations that have multiple occurances of the same keyword. Henceforth the configuration files have to be merged manually, if a ClamAV update adds or removes options. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-494=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): clamav-0.99.1-10.1 clamav-debuginfo-0.99.1-10.1 clamav-debugsource-0.99.1-10.1 References: https://bugzilla.suse.com/958451 https://bugzilla.suse.com/969814

1 0

openSUSE-SU-2016:1111-1: moderate: Security update for giflib
by opensuse-security＠opensuse.org 20 Apr '16

20 Apr '16

openSUSE Security Update: Security update for giflib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1111-1 Rating: moderate References: #974847 Cross-References: CVE-2016-3977 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: giflib was updated to fix one security issue. This security issue was fixed: - CVE-2016-3977: Heap buffer overflow in gif2rgb (bsc#974847). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-492=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): giflib-debugsource-5.0.5-4.6.1 giflib-devel-5.0.5-4.6.1 giflib-progs-5.0.5-4.6.1 giflib-progs-debuginfo-5.0.5-4.6.1 libgif6-5.0.5-4.6.1 libgif6-debuginfo-5.0.5-4.6.1 - openSUSE 13.2 (x86_64): giflib-devel-32bit-5.0.5-4.6.1 libgif6-32bit-5.0.5-4.6.1 libgif6-debuginfo-32bit-5.0.5-4.6.1 References: https://www.suse.com/security/cve/CVE-2016-3977.html https://bugzilla.suse.com/974847

1 0

openSUSE-SU-2016:1108-1: moderate: Security update for apparmor
by opensuse-security＠opensuse.org 20 Apr '16

20 Apr '16

openSUSE Security Update: Security update for apparmor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1108-1 Rating: moderate References: #905368 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for apparmor updates some profiles. It is specifically required for the Samba security update. profile updates: - sbin.syslog-ng - usr.sbin.identd - usr.sbin.nscd (allows nscd paranoia mode) - usr.sbin.smbd - usr.sbin.smbldap-useradd - apache2.d/phpsysinfo updated abstractions: - aspell - base - cups-client - fonts - freedesktop.org - nameservice - p11-kit - php5 - samba (including the changes needed for Samba 4.2.x) - ssl_certs - ssl_keys - ubuntu-browsers.d/java - ubuntu-browsers.d/multimedia - ubuntu-browsers.d/plugins-common - ubuntu-browsers.d/ubuntu-integration - ubuntu-email - ubuntu-helpers - user-mail - X Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-491=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): apache2-mod_apparmor-2.8.4-4.20.1 apache2-mod_apparmor-debuginfo-2.8.4-4.20.1 apparmor-debugsource-2.8.4-4.20.1 apparmor-parser-2.8.4-4.20.1 apparmor-parser-debuginfo-2.8.4-4.20.1 libapparmor-devel-2.8.4-4.20.1 libapparmor1-2.8.4-4.20.1 libapparmor1-debuginfo-2.8.4-4.20.1 pam_apparmor-2.8.4-4.20.1 pam_apparmor-debuginfo-2.8.4-4.20.1 perl-apparmor-2.8.4-4.20.1 perl-apparmor-debuginfo-2.8.4-4.20.1 python3-apparmor-2.8.4-4.20.1 python3-apparmor-debuginfo-2.8.4-4.20.1 ruby-apparmor-2.8.4-4.20.1 ruby-apparmor-debuginfo-2.8.4-4.20.1 - openSUSE 13.1 (noarch): apparmor-docs-2.8.4-4.20.1 apparmor-parser-lang-2.8.4-4.20.1 apparmor-profiles-2.8.4-4.20.1 apparmor-utils-2.8.4-4.20.1 apparmor-utils-lang-2.8.4-4.20.1 - openSUSE 13.1 (x86_64): libapparmor1-32bit-2.8.4-4.20.1 libapparmor1-debuginfo-32bit-2.8.4-4.20.1 pam_apparmor-32bit-2.8.4-4.20.1 pam_apparmor-debuginfo-32bit-2.8.4-4.20.1 References: https://bugzilla.suse.com/905368

1 0

openSUSE-SU-2016:1107-1: important: Security update for samba
by opensuse-security＠opensuse.org 20 Apr '16

20 Apr '16

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1107-1 Rating: important References: #844720 #849224 #853347 #917376 #936862 #958582 #958583 #958584 #958586 #968222 #971965 #973031 #973032 #973033 #973034 #973035 #973036 Cross-References: CVE-2012-6150 CVE-2013-4408 CVE-2013-4496 CVE-2015-0240 CVE-2015-5252 CVE-2015-5296 CVE-2015-5299 CVE-2015-5330 CVE-2015-5370 CVE-2015-7560 CVE-2016-2110 CVE-2016-2111 CVE-2016-2112 CVE-2016-2113 CVE-2016-2114 CVE-2016-2115 CVE-2016-2118 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. Description: This update fixes these security vulnerabilities: - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks (bsc#936862). - CVE-2016-2110: A man-in-the-middle could have downgraded NTLMSSP authentication (bsc#973031). - CVE-2016-2111: Domain controller netlogon member computer could have been spoofed (bsc#973032). - CVE-2016-2112: LDAP conenctions were vulnerable to downgrade and MITM attack (bsc#973033). - CVE-2016-2113: TLS certificate validation were missing (bsc#973034). - CVE-2016-2114: "server signing = mandatory" not enforced (bsc#973035). - CVE-2016-2115: Named pipe IPC were vulnerable to MITM attacks (bsc#973036). - CVE-2016-2118: "Badlock" DCERPC impersonation of authenticated account were possible (bsc#971965). The openSUSE 13.1 update also upgrades to samba 4.2.4 as 4.1.x versions are no longer supported by upstream. As a side effect, libpdb0 package was replaced by libsamba-passdb0. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2016-490=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): ldapsmb-1.34b-141.1 libldb-devel-1.0.2-141.1 libldb1-1.0.2-141.1 libldb1-debuginfo-1.0.2-141.1 libnetapi-devel-3.6.3-141.1 libnetapi0-3.6.3-141.1 libnetapi0-debuginfo-3.6.3-141.1 libsmbclient-devel-3.6.3-141.1 libsmbclient0-3.6.3-141.1 libsmbclient0-debuginfo-3.6.3-141.1 libsmbsharemodes-devel-3.6.3-141.1 libsmbsharemodes0-3.6.3-141.1 libsmbsharemodes0-debuginfo-3.6.3-141.1 libtalloc-devel-2.0.5-141.1 libtalloc2-2.0.5-141.1 libtalloc2-debuginfo-2.0.5-141.1 libtdb-devel-1.2.9-141.1 libtdb1-1.2.9-141.1 libtdb1-debuginfo-1.2.9-141.1 libtevent-devel-0.9.11-141.1 libtevent0-0.9.11-141.1 libtevent0-debuginfo-0.9.11-141.1 libwbclient-devel-3.6.3-141.1 libwbclient0-3.6.3-141.1 libwbclient0-debuginfo-3.6.3-141.1 samba-3.6.3-141.1 samba-client-3.6.3-141.1 samba-client-debuginfo-3.6.3-141.1 samba-debuginfo-3.6.3-141.1 samba-debugsource-3.6.3-141.1 samba-devel-3.6.3-141.1 samba-krb-printing-3.6.3-141.1 samba-krb-printing-debuginfo-3.6.3-141.1 samba-winbind-3.6.3-141.1 samba-winbind-debuginfo-3.6.3-141.1 - openSUSE Evergreen 11.4 (noarch): samba-doc-3.6.3-141.1 - openSUSE Evergreen 11.4 (x86_64): libldb1-32bit-1.0.2-141.1 libldb1-debuginfo-32bit-1.0.2-141.1 libsmbclient0-32bit-3.6.3-141.1 libsmbclient0-debuginfo-32bit-3.6.3-141.1 libtalloc2-32bit-2.0.5-141.1 libtalloc2-debuginfo-32bit-2.0.5-141.1 libtdb1-32bit-1.2.9-141.1 libtdb1-debuginfo-32bit-1.2.9-141.1 libtevent0-32bit-0.9.11-141.1 libtevent0-debuginfo-32bit-0.9.11-141.1 libwbclient0-32bit-3.6.3-141.1 libwbclient0-debuginfo-32bit-3.6.3-141.1 samba-32bit-3.6.3-141.1 samba-client-32bit-3.6.3-141.1 samba-client-debuginfo-32bit-3.6.3-141.1 samba-debuginfo-32bit-3.6.3-141.1 samba-winbind-32bit-3.6.3-141.1 samba-winbind-debuginfo-32bit-3.6.3-141.1 - openSUSE Evergreen 11.4 (ia64): libldb1-debuginfo-x86-1.0.2-141.1 libldb1-x86-1.0.2-141.1 libsmbclient0-debuginfo-x86-3.6.3-141.1 libsmbclient0-x86-3.6.3-141.1 libtalloc2-debuginfo-x86-2.0.5-141.1 libtalloc2-x86-2.0.5-141.1 libtdb1-debuginfo-x86-1.2.9-141.1 libtdb1-x86-1.2.9-141.1 libtevent0-debuginfo-x86-0.9.11-141.1 libtevent0-x86-0.9.11-141.1 libwbclient0-debuginfo-x86-3.6.3-141.1 libwbclient0-x86-3.6.3-141.1 samba-client-debuginfo-x86-3.6.3-141.1 samba-client-x86-3.6.3-141.1 samba-debuginfo-x86-3.6.3-141.1 samba-winbind-debuginfo-x86-3.6.3-141.1 samba-winbind-x86-3.6.3-141.1 samba-x86-3.6.3-141.1 References: https://www.suse.com/security/cve/CVE-2012-6150.html https://www.suse.com/security/cve/CVE-2013-4408.html https://www.suse.com/security/cve/CVE-2013-4496.html https://www.suse.com/security/cve/CVE-2015-0240.html https://www.suse.com/security/cve/CVE-2015-5252.html https://www.suse.com/security/cve/CVE-2015-5296.html https://www.suse.com/security/cve/CVE-2015-5299.html https://www.suse.com/security/cve/CVE-2015-5330.html https://www.suse.com/security/cve/CVE-2015-5370.html https://www.suse.com/security/cve/CVE-2015-7560.html https://www.suse.com/security/cve/CVE-2016-2110.html https://www.suse.com/security/cve/CVE-2016-2111.html https://www.suse.com/security/cve/CVE-2016-2112.html https://www.suse.com/security/cve/CVE-2016-2113.html https://www.suse.com/security/cve/CVE-2016-2114.html https://www.suse.com/security/cve/CVE-2016-2115.html https://www.suse.com/security/cve/CVE-2016-2118.html https://bugzilla.suse.com/844720 https://bugzilla.suse.com/849224 https://bugzilla.suse.com/853347 https://bugzilla.suse.com/917376 https://bugzilla.suse.com/936862 https://bugzilla.suse.com/958582 https://bugzilla.suse.com/958583 https://bugzilla.suse.com/958584 https://bugzilla.suse.com/958586 https://bugzilla.suse.com/968222 https://bugzilla.suse.com/971965 https://bugzilla.suse.com/973031 https://bugzilla.suse.com/973032 https://bugzilla.suse.com/973033 https://bugzilla.suse.com/973034 https://bugzilla.suse.com/973035 https://bugzilla.suse.com/973036

1 0