May 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:1455-1: moderate: Security update for openssh
by opensuse-security＠opensuse.org 31 May '16

31 May '16

openSUSE Security Update: Security update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1455-1 Rating: moderate References: #729190 #932483 #945484 #945493 #947458 #948902 #960414 #961368 #962313 #965576 #970632 #975865 Cross-References: CVE-2015-8325 CVE-2016-1908 CVE-2016-3115 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has 9 fixes is now available. Description: This update for OpenSSH fixes three security issues. These security issues were fixed: - CVE-2016-3115: Sanitise input for xauth(1) (bsc#970632) - CVE-2016-1908: Prevent X11 SECURITY circumvention when forwarding X11 connections (bsc#962313) - CVE-2015-8325: Ignore PAM environment when using login (bsc#975865) These non-security issues were fixed: - Fix help output of sftp (bsc#945493) - Restarting openssh with openssh-fips installed was not working correctly (bsc#945484) - Fix crashes when /proc is not available in the chroot (bsc#947458) - Correctly parse GSSAPI KEX algorithms (bsc#961368) - More verbose FIPS mode/CC related documentation in README.FIPS (bsc#965576, bsc#960414) - Fix PRNG re-seeding (bsc#960414, bsc#729190) - Disable DH parameters under 2048 bits by default and allow lowering the limit back to the RFC 4419 specified minimum through an option (bsc#932483, bsc#948902) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-668=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): openssh-6.6p1-11.1 openssh-askpass-gnome-6.6p1-11.1 openssh-askpass-gnome-debuginfo-6.6p1-11.1 openssh-cavs-6.6p1-11.1 openssh-cavs-debuginfo-6.6p1-11.1 openssh-debuginfo-6.6p1-11.1 openssh-debugsource-6.6p1-11.1 openssh-fips-6.6p1-11.1 openssh-helpers-6.6p1-11.1 openssh-helpers-debuginfo-6.6p1-11.1 References: https://www.suse.com/security/cve/CVE-2015-8325.html https://www.suse.com/security/cve/CVE-2016-1908.html https://www.suse.com/security/cve/CVE-2016-3115.html https://bugzilla.suse.com/729190 https://bugzilla.suse.com/932483 https://bugzilla.suse.com/945484 https://bugzilla.suse.com/945493 https://bugzilla.suse.com/947458 https://bugzilla.suse.com/948902 https://bugzilla.suse.com/960414 https://bugzilla.suse.com/961368 https://bugzilla.suse.com/962313 https://bugzilla.suse.com/965576 https://bugzilla.suse.com/970632 https://bugzilla.suse.com/975865

1 0

openSUSE-SU-2016:1453-1: moderate: Security update for putty
by opensuse-security＠opensuse.org 31 May '16

31 May '16

openSUSE Security Update: Security update for putty ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1453-1 Rating: moderate References: #981407 Cross-References: CVE-2016-2563 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update to putty 0.67 fixes the following vulnerability: - CVE-2016-2563: old-style scp downloads may allow remote code execution (boo#981407) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-667=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-667=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): putty-0.67-9.1 putty-debuginfo-0.67-9.1 putty-debugsource-0.67-9.1 - openSUSE 13.2 (i586 x86_64): putty-0.67-4.10.1 putty-debuginfo-0.67-4.10.1 putty-debugsource-0.67-4.10.1 References: https://www.suse.com/security/cve/CVE-2016-2563.html https://bugzilla.suse.com/981407

1 0

openSUSE-SU-2016:1451-1: moderate: Security update for virtualbox
by opensuse-security＠opensuse.org 31 May '16

31 May '16

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1451-1 Rating: moderate References: #976636 #977200 #977328 Cross-References: CVE-2016-0678 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: virtualbox was updated to 5.0.18 and also fixes the following issues: Version bump to 5.0.18 (released 2016-04-18 by Oracle) This is a maintenance release. The following items were fixed and/or added: GUI: position off-screen windows to be fully visible again on relaunch in consistence with default-behavior (bug #15226) GUI: fixed the View menu / Full-screen Mode behavior on Mac OS X El Capitan GUI: fixed a test which allowed to encrypt a hard disk with an empty password GUI: fixed a crash under certain conditions during VM shutdown GUI: fixed the size of the VM list scrollbar in the VM selector when entering a group PC speaker passthrough: fixes (Linux hosts only; bug #627) Drag and drop: several fixes SATA: fixed hotplug flag handling when EFI is used Storage: fixed handling of encrypted disk images with SCSI controllers (bug #14812) Storage: fixed possible crash with Solaris 7 if the BusLogic SCSI controller is used USB: properly purge non-ASCII characters from USB strings (bugs #8801, #15222) NAT Network: fixed 100% CPU load in VBoxNetNAT on Mac OS X under certain circumstances (bug #15223) ACPI: fixed ACPI tables to make the display color management settings available again for older Windows versions (4.3.22 regression) Guest Control: fixed VBoxManage copyfrom command (bug #14336) Snapshots: fixed several problems when removing older snapshots (bug #15206) VBoxManage: fixed --verbose output of the guestcontrol command Windows hosts: hardening fixes required for recent Windows 10 insider builds (bugs #15245, #15296) Windows hosts: fixed support of jumbo frames in with bridged networking (5.0.16 regression; bug #15209) Windows hosts: don't prevent receiving multicast traffic if host-only adapters are installed (bug #8698) Linux hosts: added support for the new naming scheme of NVME disks when creating raw disks Solaris hosts / guests: properly sign the kernel modules (bug #12608) Linux hosts / guests: Linux 4.5 fixes (bug #15251) Linux hosts / guests: Linux 4.6 fixes (bug #15298) Linux Additions: added a kernel graphics driver to support graphics when X.Org does not have root rights (bug #14732) Linux/Solaris Additions: fixed several issues causing Linux/Solatis guests using software rendering when 3D acceleration is available Windows Additions: fixed a hang with PowerPoint 2010 and the WDDM drivers if Aero is disabled Additional bugfixes: * Fix start failure of vboxadd service routine This script fails because /var/lib/VBoxGuestAdditions/config does not exist; however, there is no need for this file. That service routine is modified. (boo#977328). * Add missing initialization of scanout buffer base and size for proper fbdev support. * Add support for delayed_io in fbdev-layer. (boo#977200). - This submission fixes the bug in VB 5.0.18 that prevents proper operation for guest VMs configured to use a LsiLogic adapter for disks. See ticket: https://www.virtualbox.org/ticket/15317 for a description of the problem, and changeset: https://www.virtualbox.org/changeset/60565/vbox for the fix, which is implemented in file "changeset_60565.diff". This update contains a fix for CVE-2016-0678. Bug report boo#976636 discusses this vulnerability. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-666=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): python-virtualbox-5.0.18-16.1 python-virtualbox-debuginfo-5.0.18-16.1 virtualbox-5.0.18-16.1 virtualbox-debuginfo-5.0.18-16.1 virtualbox-debugsource-5.0.18-16.1 virtualbox-devel-5.0.18-16.1 virtualbox-guest-kmp-default-5.0.18_k4.1.21_14-16.1 virtualbox-guest-kmp-default-debuginfo-5.0.18_k4.1.21_14-16.1 virtualbox-guest-tools-5.0.18-16.1 virtualbox-guest-tools-debuginfo-5.0.18-16.1 virtualbox-guest-x11-5.0.18-16.1 virtualbox-guest-x11-debuginfo-5.0.18-16.1 virtualbox-host-kmp-default-5.0.18_k4.1.21_14-16.1 virtualbox-host-kmp-default-debuginfo-5.0.18_k4.1.21_14-16.1 virtualbox-qt-5.0.18-16.1 virtualbox-qt-debuginfo-5.0.18-16.1 virtualbox-websrv-5.0.18-16.1 virtualbox-websrv-debuginfo-5.0.18-16.1 - openSUSE Leap 42.1 (noarch): virtualbox-guest-desktop-icons-5.0.18-16.1 virtualbox-host-source-5.0.18-16.1 References: https://www.suse.com/security/cve/CVE-2016-0678.html https://bugzilla.suse.com/976636 https://bugzilla.suse.com/977200 https://bugzilla.suse.com/977328

1 0

openSUSE-RU-2016:1448-1: moderate: Recommended update for yast2-ntp-client
by maintenance＠opensuse.org 31 May '16

31 May '16

openSUSE Recommended Update: Recommended update for yast2-ntp-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1448-1 Rating: moderate References: #979421 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 3.1.12.1 for yast2-ntp-client: - Calls to sntp adjusted to the syntax of ntp 4.2.8 (boo#979421) - 3.1.12.1 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-665=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): yast2-ntp-client-3.1.12.1-3.1 yast2-ntp-client-devel-doc-3.1.12.1-3.1 References: https://bugzilla.suse.com/979421

1 0

openSUSE-RU-2016:1447-1: Recommended update for tcpdump
by maintenance＠opensuse.org 31 May '16

31 May '16

openSUSE Recommended Update: Recommended update for tcpdump ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1447-1 Rating: low References: #944294 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tcpdump removes a duplicated binary (/usr/sbin/tcpdump.4.5.1) from the package. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-664=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): tcpdump-4.5.1-4.1 tcpdump-debuginfo-4.5.1-4.1 tcpdump-debugsource-4.5.1-4.1 References: https://bugzilla.suse.com/944294

1 0

openSUSE-SU-2016:1446-1: moderate: Security update for libxml2
by opensuse-security＠opensuse.org 30 May '16

30 May '16

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1446-1 Rating: moderate References: #962796 #972335 #975947 Cross-References: CVE-2016-3627 CVE-2016-3705 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: libxml2 was updated to fix security issues and a regression from the last version update. Security issues fixed: - CVE-2016-3627: Fixed stack exhaustion while parsing certain XML files in recovery mode (bnc#972335). - CVE-2016-3705: Improved protection against the Billion Laughs Attack (bnc#975947). Regression fixed: - Fixed XML push parser that fails with bogus UTF-8 encoding error when multi-byte character in large CDATA section is split across buffer [bnc#962796] Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-662=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libxml2-2-2.9.3-7.11.1 libxml2-2-debuginfo-2.9.3-7.11.1 libxml2-debugsource-2.9.3-7.11.1 libxml2-devel-2.9.3-7.11.1 libxml2-tools-2.9.3-7.11.1 libxml2-tools-debuginfo-2.9.3-7.11.1 python-libxml2-2.9.3-7.11.1 python-libxml2-debuginfo-2.9.3-7.11.1 python-libxml2-debugsource-2.9.3-7.11.1 - openSUSE 13.2 (x86_64): libxml2-2-32bit-2.9.3-7.11.1 libxml2-2-debuginfo-32bit-2.9.3-7.11.1 libxml2-devel-32bit-2.9.3-7.11.1 - openSUSE 13.2 (noarch): libxml2-doc-2.9.3-7.11.1 References: https://www.suse.com/security/cve/CVE-2016-3627.html https://www.suse.com/security/cve/CVE-2016-3705.html https://bugzilla.suse.com/962796 https://bugzilla.suse.com/972335 https://bugzilla.suse.com/975947

1 0

openSUSE-SU-2016:1444-1: moderate: Security update for redis
by opensuse-security＠opensuse.org 30 May '16

30 May '16

openSUSE Security Update: Security update for redis ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1444-1 Rating: moderate References: #954199 Cross-References: CVE-2015-8080 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for redis fixes the following security issue: - CVE-2015-8080: Fixed an integer overflow resulting in stack-based overflow. (bsc#954199) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-663=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-663=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): redis-3.0.4-3.1 redis-debuginfo-3.0.4-3.1 redis-debugsource-3.0.4-3.1 - openSUSE 13.2 (i586 x86_64): redis-2.8.22-2.9.1 redis-debuginfo-2.8.22-2.9.1 redis-debugsource-2.8.22-2.9.1 References: https://www.suse.com/security/cve/CVE-2015-8080.html https://bugzilla.suse.com/954199

1 0

openSUSE-SU-2016:1441-1: important: Security update for expat
by opensuse-security＠opensuse.org 30 May '16

30 May '16

openSUSE Security Update: Security update for expat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1441-1 Rating: important References: #979441 #980391 Cross-References: CVE-2015-1283 CVE-2016-0718 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for expat fixes the following security issues: - CVE-2015-1283: Fixed multiple integer overflows that could lead to buffer overflows [boo#980391] - CVE-2016-0718: Fixed Expat XML parser that mishandles certain kinds of malformed input documents [boo#979441]. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-660=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): expat-2.1.0-14.3.1 expat-debuginfo-2.1.0-14.3.1 expat-debugsource-2.1.0-14.3.1 libexpat-devel-2.1.0-14.3.1 libexpat1-2.1.0-14.3.1 libexpat1-debuginfo-2.1.0-14.3.1 - openSUSE 13.2 (x86_64): expat-debuginfo-32bit-2.1.0-14.3.1 libexpat-devel-32bit-2.1.0-14.3.1 libexpat1-32bit-2.1.0-14.3.1 libexpat1-debuginfo-32bit-2.1.0-14.3.1 References: https://www.suse.com/security/cve/CVE-2015-1283.html https://www.suse.com/security/cve/CVE-2016-0718.html https://bugzilla.suse.com/979441 https://bugzilla.suse.com/980391

1 0

openSUSE-SU-2016:1440-1: moderate: Security update for samba
by opensuse-security＠opensuse.org 30 May '16

30 May '16

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1440-1 Rating: moderate References: #977669 #979268 Cross-References: CVE-2016-2110 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for samba fixes the following issues including some regressions from the BADLOCK security update: - libads: record session expiry for spnego sasl binds; (bso#11852); (boo#979268). - fix NT_STATUS_ACCESS_DENIED when accessing windows public share; (bso#11841). - Only validate MIC if "map to guest" is not being used; (bso#11847). - NetAPP SMB servers don't negotiate NTLMSSP_SIGN; (bso#11850); (boo#977669). - Fix non-working anonymous smb connections; (bso#11858). - handle broken mechListMIC response from Windows 2000; (bso#11870). - wbinfo -u or net ads search doesn't work anymore; (bso#11872). - fix regressions regarding the NTLMSSP hardening of CVE-2016-2110; (bso#11849). - Allow Domain member resolve trusted domains' users; (bso#11830). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-659=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ctdb-4.2.4-37.1 ctdb-debuginfo-4.2.4-37.1 ctdb-devel-4.2.4-37.1 ctdb-pcp-pmda-4.2.4-37.1 ctdb-pcp-pmda-debuginfo-4.2.4-37.1 ctdb-tests-4.2.4-37.1 ctdb-tests-debuginfo-4.2.4-37.1 libdcerpc-atsvc-devel-4.2.4-37.1 libdcerpc-atsvc0-4.2.4-37.1 libdcerpc-atsvc0-debuginfo-4.2.4-37.1 libdcerpc-binding0-4.2.4-37.1 libdcerpc-binding0-debuginfo-4.2.4-37.1 libdcerpc-devel-4.2.4-37.1 libdcerpc-samr-devel-4.2.4-37.1 libdcerpc-samr0-4.2.4-37.1 libdcerpc-samr0-debuginfo-4.2.4-37.1 libdcerpc0-4.2.4-37.1 libdcerpc0-debuginfo-4.2.4-37.1 libgensec-devel-4.2.4-37.1 libgensec0-4.2.4-37.1 libgensec0-debuginfo-4.2.4-37.1 libndr-devel-4.2.4-37.1 libndr-krb5pac-devel-4.2.4-37.1 libndr-krb5pac0-4.2.4-37.1 libndr-krb5pac0-debuginfo-4.2.4-37.1 libndr-nbt-devel-4.2.4-37.1 libndr-nbt0-4.2.4-37.1 libndr-nbt0-debuginfo-4.2.4-37.1 libndr-standard-devel-4.2.4-37.1 libndr-standard0-4.2.4-37.1 libndr-standard0-debuginfo-4.2.4-37.1 libndr0-4.2.4-37.1 libndr0-debuginfo-4.2.4-37.1 libnetapi-devel-4.2.4-37.1 libnetapi0-4.2.4-37.1 libnetapi0-debuginfo-4.2.4-37.1 libregistry-devel-4.2.4-37.1 libregistry0-4.2.4-37.1 libregistry0-debuginfo-4.2.4-37.1 libsamba-credentials-devel-4.2.4-37.1 libsamba-credentials0-4.2.4-37.1 libsamba-credentials0-debuginfo-4.2.4-37.1 libsamba-hostconfig-devel-4.2.4-37.1 libsamba-hostconfig0-4.2.4-37.1 libsamba-hostconfig0-debuginfo-4.2.4-37.1 libsamba-passdb-devel-4.2.4-37.1 libsamba-passdb0-4.2.4-37.1 libsamba-passdb0-debuginfo-4.2.4-37.1 libsamba-policy-devel-4.2.4-37.1 libsamba-policy0-4.2.4-37.1 libsamba-policy0-debuginfo-4.2.4-37.1 libsamba-util-devel-4.2.4-37.1 libsamba-util0-4.2.4-37.1 libsamba-util0-debuginfo-4.2.4-37.1 libsamdb-devel-4.2.4-37.1 libsamdb0-4.2.4-37.1 libsamdb0-debuginfo-4.2.4-37.1 libsmbclient-devel-4.2.4-37.1 libsmbclient-raw-devel-4.2.4-37.1 libsmbclient-raw0-4.2.4-37.1 libsmbclient-raw0-debuginfo-4.2.4-37.1 libsmbclient0-4.2.4-37.1 libsmbclient0-debuginfo-4.2.4-37.1 libsmbconf-devel-4.2.4-37.1 libsmbconf0-4.2.4-37.1 libsmbconf0-debuginfo-4.2.4-37.1 libsmbldap-devel-4.2.4-37.1 libsmbldap0-4.2.4-37.1 libsmbldap0-debuginfo-4.2.4-37.1 libtevent-util-devel-4.2.4-37.1 libtevent-util0-4.2.4-37.1 libtevent-util0-debuginfo-4.2.4-37.1 libwbclient-devel-4.2.4-37.1 libwbclient0-4.2.4-37.1 libwbclient0-debuginfo-4.2.4-37.1 samba-4.2.4-37.1 samba-client-4.2.4-37.1 samba-client-debuginfo-4.2.4-37.1 samba-core-devel-4.2.4-37.1 samba-debuginfo-4.2.4-37.1 samba-debugsource-4.2.4-37.1 samba-libs-4.2.4-37.1 samba-libs-debuginfo-4.2.4-37.1 samba-pidl-4.2.4-37.1 samba-python-4.2.4-37.1 samba-python-debuginfo-4.2.4-37.1 samba-test-4.2.4-37.1 samba-test-debuginfo-4.2.4-37.1 samba-test-devel-4.2.4-37.1 samba-winbind-4.2.4-37.1 samba-winbind-debuginfo-4.2.4-37.1 - openSUSE 13.2 (x86_64): libdcerpc-atsvc0-32bit-4.2.4-37.1 libdcerpc-atsvc0-debuginfo-32bit-4.2.4-37.1 libdcerpc-binding0-32bit-4.2.4-37.1 libdcerpc-binding0-debuginfo-32bit-4.2.4-37.1 libdcerpc-samr0-32bit-4.2.4-37.1 libdcerpc-samr0-debuginfo-32bit-4.2.4-37.1 libdcerpc0-32bit-4.2.4-37.1 libdcerpc0-debuginfo-32bit-4.2.4-37.1 libgensec0-32bit-4.2.4-37.1 libgensec0-debuginfo-32bit-4.2.4-37.1 libndr-krb5pac0-32bit-4.2.4-37.1 libndr-krb5pac0-debuginfo-32bit-4.2.4-37.1 libndr-nbt0-32bit-4.2.4-37.1 libndr-nbt0-debuginfo-32bit-4.2.4-37.1 libndr-standard0-32bit-4.2.4-37.1 libndr-standard0-debuginfo-32bit-4.2.4-37.1 libndr0-32bit-4.2.4-37.1 libndr0-debuginfo-32bit-4.2.4-37.1 libnetapi0-32bit-4.2.4-37.1 libnetapi0-debuginfo-32bit-4.2.4-37.1 libregistry0-32bit-4.2.4-37.1 libregistry0-debuginfo-32bit-4.2.4-37.1 libsamba-credentials0-32bit-4.2.4-37.1 libsamba-credentials0-debuginfo-32bit-4.2.4-37.1 libsamba-hostconfig0-32bit-4.2.4-37.1 libsamba-hostconfig0-debuginfo-32bit-4.2.4-37.1 libsamba-passdb0-32bit-4.2.4-37.1 libsamba-passdb0-debuginfo-32bit-4.2.4-37.1 libsamba-policy0-32bit-4.2.4-37.1 libsamba-policy0-debuginfo-32bit-4.2.4-37.1 libsamba-util0-32bit-4.2.4-37.1 libsamba-util0-debuginfo-32bit-4.2.4-37.1 libsamdb0-32bit-4.2.4-37.1 libsamdb0-debuginfo-32bit-4.2.4-37.1 libsmbclient-raw0-32bit-4.2.4-37.1 libsmbclient-raw0-debuginfo-32bit-4.2.4-37.1 libsmbclient0-32bit-4.2.4-37.1 libsmbclient0-debuginfo-32bit-4.2.4-37.1 libsmbconf0-32bit-4.2.4-37.1 libsmbconf0-debuginfo-32bit-4.2.4-37.1 libsmbldap0-32bit-4.2.4-37.1 libsmbldap0-debuginfo-32bit-4.2.4-37.1 libtevent-util0-32bit-4.2.4-37.1 libtevent-util0-debuginfo-32bit-4.2.4-37.1 libwbclient0-32bit-4.2.4-37.1 libwbclient0-debuginfo-32bit-4.2.4-37.1 samba-32bit-4.2.4-37.1 samba-client-32bit-4.2.4-37.1 samba-client-debuginfo-32bit-4.2.4-37.1 samba-debuginfo-32bit-4.2.4-37.1 samba-libs-32bit-4.2.4-37.1 samba-libs-debuginfo-32bit-4.2.4-37.1 samba-winbind-32bit-4.2.4-37.1 samba-winbind-debuginfo-32bit-4.2.4-37.1 - openSUSE 13.2 (noarch): samba-doc-4.2.4-37.1 References: https://www.suse.com/security/cve/CVE-2016-2110.html https://bugzilla.suse.com/977669 https://bugzilla.suse.com/979268

1 0

openSUSE-SU-2016:1439-1: moderate: Security update for libxslt
by opensuse-security＠opensuse.org 30 May '16

30 May '16

openSUSE Security Update: Security update for libxslt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1439-1 Rating: moderate References: #952474 Cross-References: CVE-2015-7995 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libxslt fixes the following issues: - CVE-2015-7995: A type confusion in preprocessing attributes was fixed [boo#952474]. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-661=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libxslt-debugsource-1.1.28-7.3.1 libxslt-devel-1.1.28-7.3.1 libxslt-python-1.1.28-7.3.1 libxslt-python-debuginfo-1.1.28-7.3.1 libxslt-python-debugsource-1.1.28-7.3.1 libxslt-tools-1.1.28-7.3.1 libxslt-tools-debuginfo-1.1.28-7.3.1 libxslt1-1.1.28-7.3.1 libxslt1-debuginfo-1.1.28-7.3.1 - openSUSE 13.2 (x86_64): libxslt-devel-32bit-1.1.28-7.3.1 libxslt1-32bit-1.1.28-7.3.1 libxslt1-debuginfo-32bit-1.1.28-7.3.1 References: https://www.suse.com/security/cve/CVE-2015-7995.html https://bugzilla.suse.com/952474

1 0