May 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:1455-1: moderate: Security update for openssh
by opensuse-security＠opensuse.org 31 May '16

31 May '16

openSUSE Security Update: Security update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1455-1 Rating: moderate References: #729190 #932483 #945484 #945493 #947458 #948902 #960414 #961368 #962313 #965576 #970632 #975865 Cross-References: CVE-2015-8325 CVE-2016-1908 CVE-2016-3115 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has 9 fixes is now available. Description: This update for OpenSSH fixes three security issues. These security issues were fixed: - CVE-2016-3115: Sanitise input for xauth(1) (bsc#970632) - CVE-2016-1908: Prevent X11 SECURITY circumvention when forwarding X11 connections (bsc#962313) - CVE-2015-8325: Ignore PAM environment when using login (bsc#975865) These non-security issues were fixed: - Fix help output of sftp (bsc#945493) - Restarting openssh with openssh-fips installed was not working correctly (bsc#945484) - Fix crashes when /proc is not available in the chroot (bsc#947458) - Correctly parse GSSAPI KEX algorithms (bsc#961368) - More verbose FIPS mode/CC related documentation in README.FIPS (bsc#965576, bsc#960414) - Fix PRNG re-seeding (bsc#960414, bsc#729190) - Disable DH parameters under 2048 bits by default and allow lowering the limit back to the RFC 4419 specified minimum through an option (bsc#932483, bsc#948902) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-668=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): openssh-6.6p1-11.1 openssh-askpass-gnome-6.6p1-11.1 openssh-askpass-gnome-debuginfo-6.6p1-11.1 openssh-cavs-6.6p1-11.1 openssh-cavs-debuginfo-6.6p1-11.1 openssh-debuginfo-6.6p1-11.1 openssh-debugsource-6.6p1-11.1 openssh-fips-6.6p1-11.1 openssh-helpers-6.6p1-11.1 openssh-helpers-debuginfo-6.6p1-11.1 References: https://www.suse.com/security/cve/CVE-2015-8325.html https://www.suse.com/security/cve/CVE-2016-1908.html https://www.suse.com/security/cve/CVE-2016-3115.html https://bugzilla.suse.com/729190 https://bugzilla.suse.com/932483 https://bugzilla.suse.com/945484 https://bugzilla.suse.com/945493 https://bugzilla.suse.com/947458 https://bugzilla.suse.com/948902 https://bugzilla.suse.com/960414 https://bugzilla.suse.com/961368 https://bugzilla.suse.com/962313 https://bugzilla.suse.com/965576 https://bugzilla.suse.com/970632 https://bugzilla.suse.com/975865

1 0

openSUSE-SU-2016:1453-1: moderate: Security update for putty
by opensuse-security＠opensuse.org 31 May '16

31 May '16

openSUSE Security Update: Security update for putty ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1453-1 Rating: moderate References: #981407 Cross-References: CVE-2016-2563 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update to putty 0.67 fixes the following vulnerability: - CVE-2016-2563: old-style scp downloads may allow remote code execution (boo#981407) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-667=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-667=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): putty-0.67-9.1 putty-debuginfo-0.67-9.1 putty-debugsource-0.67-9.1 - openSUSE 13.2 (i586 x86_64): putty-0.67-4.10.1 putty-debuginfo-0.67-4.10.1 putty-debugsource-0.67-4.10.1 References: https://www.suse.com/security/cve/CVE-2016-2563.html https://bugzilla.suse.com/981407

1 0

openSUSE-SU-2016:1451-1: moderate: Security update for virtualbox
by opensuse-security＠opensuse.org 31 May '16

31 May '16

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1451-1 Rating: moderate References: #976636 #977200 #977328 Cross-References: CVE-2016-0678 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: virtualbox was updated to 5.0.18 and also fixes the following issues: Version bump to 5.0.18 (released 2016-04-18 by Oracle) This is a maintenance release. The following items were fixed and/or added: GUI: position off-screen windows to be fully visible again on relaunch in consistence with default-behavior (bug #15226) GUI: fixed the View menu / Full-screen Mode behavior on Mac OS X El Capitan GUI: fixed a test which allowed to encrypt a hard disk with an empty password GUI: fixed a crash under certain conditions during VM shutdown GUI: fixed the size of the VM list scrollbar in the VM selector when entering a group PC speaker passthrough: fixes (Linux hosts only; bug #627) Drag and drop: several fixes SATA: fixed hotplug flag handling when EFI is used Storage: fixed handling of encrypted disk images with SCSI controllers (bug #14812) Storage: fixed possible crash with Solaris 7 if the BusLogic SCSI controller is used USB: properly purge non-ASCII characters from USB strings (bugs #8801, #15222) NAT Network: fixed 100% CPU load in VBoxNetNAT on Mac OS X under certain circumstances (bug #15223) ACPI: fixed ACPI tables to make the display color management settings available again for older Windows versions (4.3.22 regression) Guest Control: fixed VBoxManage copyfrom command (bug #14336) Snapshots: fixed several problems when removing older snapshots (bug #15206) VBoxManage: fixed --verbose output of the guestcontrol command Windows hosts: hardening fixes required for recent Windows 10 insider builds (bugs #15245, #15296) Windows hosts: fixed support of jumbo frames in with bridged networking (5.0.16 regression; bug #15209) Windows hosts: don't prevent receiving multicast traffic if host-only adapters are installed (bug #8698) Linux hosts: added support for the new naming scheme of NVME disks when creating raw disks Solaris hosts / guests: properly sign the kernel modules (bug #12608) Linux hosts / guests: Linux 4.5 fixes (bug #15251) Linux hosts / guests: Linux 4.6 fixes (bug #15298) Linux Additions: added a kernel graphics driver to support graphics when X.Org does not have root rights (bug #14732) Linux/Solaris Additions: fixed several issues causing Linux/Solatis guests using software rendering when 3D acceleration is available Windows Additions: fixed a hang with PowerPoint 2010 and the WDDM drivers if Aero is disabled Additional bugfixes: * Fix start failure of vboxadd service routine This script fails because /var/lib/VBoxGuestAdditions/config does not exist; however, there is no need for this file. That service routine is modified. (boo#977328). * Add missing initialization of scanout buffer base and size for proper fbdev support. * Add support for delayed_io in fbdev-layer. (boo#977200). - This submission fixes the bug in VB 5.0.18 that prevents proper operation for guest VMs configured to use a LsiLogic adapter for disks. See ticket: https://www.virtualbox.org/ticket/15317 for a description of the problem, and changeset: https://www.virtualbox.org/changeset/60565/vbox for the fix, which is implemented in file "changeset_60565.diff". This update contains a fix for CVE-2016-0678. Bug report boo#976636 discusses this vulnerability. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-666=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): python-virtualbox-5.0.18-16.1 python-virtualbox-debuginfo-5.0.18-16.1 virtualbox-5.0.18-16.1 virtualbox-debuginfo-5.0.18-16.1 virtualbox-debugsource-5.0.18-16.1 virtualbox-devel-5.0.18-16.1 virtualbox-guest-kmp-default-5.0.18_k4.1.21_14-16.1 virtualbox-guest-kmp-default-debuginfo-5.0.18_k4.1.21_14-16.1 virtualbox-guest-tools-5.0.18-16.1 virtualbox-guest-tools-debuginfo-5.0.18-16.1 virtualbox-guest-x11-5.0.18-16.1 virtualbox-guest-x11-debuginfo-5.0.18-16.1 virtualbox-host-kmp-default-5.0.18_k4.1.21_14-16.1 virtualbox-host-kmp-default-debuginfo-5.0.18_k4.1.21_14-16.1 virtualbox-qt-5.0.18-16.1 virtualbox-qt-debuginfo-5.0.18-16.1 virtualbox-websrv-5.0.18-16.1 virtualbox-websrv-debuginfo-5.0.18-16.1 - openSUSE Leap 42.1 (noarch): virtualbox-guest-desktop-icons-5.0.18-16.1 virtualbox-host-source-5.0.18-16.1 References: https://www.suse.com/security/cve/CVE-2016-0678.html https://bugzilla.suse.com/976636 https://bugzilla.suse.com/977200 https://bugzilla.suse.com/977328

1 0

openSUSE-RU-2016:1448-1: moderate: Recommended update for yast2-ntp-client
by maintenance＠opensuse.org 31 May '16

31 May '16

openSUSE Recommended Update: Recommended update for yast2-ntp-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1448-1 Rating: moderate References: #979421 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 3.1.12.1 for yast2-ntp-client: - Calls to sntp adjusted to the syntax of ntp 4.2.8 (boo#979421) - 3.1.12.1 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-665=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): yast2-ntp-client-3.1.12.1-3.1 yast2-ntp-client-devel-doc-3.1.12.1-3.1 References: https://bugzilla.suse.com/979421

1 0

openSUSE-RU-2016:1447-1: Recommended update for tcpdump
by maintenance＠opensuse.org 31 May '16

31 May '16

openSUSE Recommended Update: Recommended update for tcpdump ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1447-1 Rating: low References: #944294 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tcpdump removes a duplicated binary (/usr/sbin/tcpdump.4.5.1) from the package. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-664=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): tcpdump-4.5.1-4.1 tcpdump-debuginfo-4.5.1-4.1 tcpdump-debugsource-4.5.1-4.1 References: https://bugzilla.suse.com/944294

1 0

openSUSE-SU-2016:1446-1: moderate: Security update for libxml2
by opensuse-security＠opensuse.org 30 May '16

30 May '16

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1446-1 Rating: moderate References: #962796 #972335 #975947 Cross-References: CVE-2016-3627 CVE-2016-3705 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: libxml2 was updated to fix security issues and a regression from the last version update. Security issues fixed: - CVE-2016-3627: Fixed stack exhaustion while parsing certain XML files in recovery mode (bnc#972335). - CVE-2016-3705: Improved protection against the Billion Laughs Attack (bnc#975947). Regression fixed: - Fixed XML push parser that fails with bogus UTF-8 encoding error when multi-byte character in large CDATA section is split across buffer [bnc#962796] Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-662=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libxml2-2-2.9.3-7.11.1 libxml2-2-debuginfo-2.9.3-7.11.1 libxml2-debugsource-2.9.3-7.11.1 libxml2-devel-2.9.3-7.11.1 libxml2-tools-2.9.3-7.11.1 libxml2-tools-debuginfo-2.9.3-7.11.1 python-libxml2-2.9.3-7.11.1 python-libxml2-debuginfo-2.9.3-7.11.1 python-libxml2-debugsource-2.9.3-7.11.1 - openSUSE 13.2 (x86_64): libxml2-2-32bit-2.9.3-7.11.1 libxml2-2-debuginfo-32bit-2.9.3-7.11.1 libxml2-devel-32bit-2.9.3-7.11.1 - openSUSE 13.2 (noarch): libxml2-doc-2.9.3-7.11.1 References: https://www.suse.com/security/cve/CVE-2016-3627.html https://www.suse.com/security/cve/CVE-2016-3705.html https://bugzilla.suse.com/962796 https://bugzilla.suse.com/972335 https://bugzilla.suse.com/975947

1 0

openSUSE-SU-2016:1444-1: moderate: Security update for redis
by opensuse-security＠opensuse.org 30 May '16

30 May '16

openSUSE Security Update: Security update for redis ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1444-1 Rating: moderate References: #954199 Cross-References: CVE-2015-8080 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for redis fixes the following security issue: - CVE-2015-8080: Fixed an integer overflow resulting in stack-based overflow. (bsc#954199) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-663=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-663=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): redis-3.0.4-3.1 redis-debuginfo-3.0.4-3.1 redis-debugsource-3.0.4-3.1 - openSUSE 13.2 (i586 x86_64): redis-2.8.22-2.9.1 redis-debuginfo-2.8.22-2.9.1 redis-debugsource-2.8.22-2.9.1 References: https://www.suse.com/security/cve/CVE-2015-8080.html https://bugzilla.suse.com/954199

1 0

openSUSE-SU-2016:1441-1: important: Security update for expat
by opensuse-security＠opensuse.org 30 May '16

30 May '16

openSUSE Security Update: Security update for expat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1441-1 Rating: important References: #979441 #980391 Cross-References: CVE-2015-1283 CVE-2016-0718 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for expat fixes the following security issues: - CVE-2015-1283: Fixed multiple integer overflows that could lead to buffer overflows [boo#980391] - CVE-2016-0718: Fixed Expat XML parser that mishandles certain kinds of malformed input documents [boo#979441]. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-660=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): expat-2.1.0-14.3.1 expat-debuginfo-2.1.0-14.3.1 expat-debugsource-2.1.0-14.3.1 libexpat-devel-2.1.0-14.3.1 libexpat1-2.1.0-14.3.1 libexpat1-debuginfo-2.1.0-14.3.1 - openSUSE 13.2 (x86_64): expat-debuginfo-32bit-2.1.0-14.3.1 libexpat-devel-32bit-2.1.0-14.3.1 libexpat1-32bit-2.1.0-14.3.1 libexpat1-debuginfo-32bit-2.1.0-14.3.1 References: https://www.suse.com/security/cve/CVE-2015-1283.html https://www.suse.com/security/cve/CVE-2016-0718.html https://bugzilla.suse.com/979441 https://bugzilla.suse.com/980391

1 0

openSUSE-SU-2016:1440-1: moderate: Security update for samba
by opensuse-security＠opensuse.org 30 May '16

30 May '16

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1440-1 Rating: moderate References: #977669 #979268 Cross-References: CVE-2016-2110 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for samba fixes the following issues including some regressions from the BADLOCK security update: - libads: record session expiry for spnego sasl binds; (bso#11852); (boo#979268). - fix NT_STATUS_ACCESS_DENIED when accessing windows public share; (bso#11841). - Only validate MIC if "map to guest" is not being used; (bso#11847). - NetAPP SMB servers don't negotiate NTLMSSP_SIGN; (bso#11850); (boo#977669). - Fix non-working anonymous smb connections; (bso#11858). - handle broken mechListMIC response from Windows 2000; (bso#11870). - wbinfo -u or net ads search doesn't work anymore; (bso#11872). - fix regressions regarding the NTLMSSP hardening of CVE-2016-2110; (bso#11849). - Allow Domain member resolve trusted domains' users; (bso#11830). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-659=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ctdb-4.2.4-37.1 ctdb-debuginfo-4.2.4-37.1 ctdb-devel-4.2.4-37.1 ctdb-pcp-pmda-4.2.4-37.1 ctdb-pcp-pmda-debuginfo-4.2.4-37.1 ctdb-tests-4.2.4-37.1 ctdb-tests-debuginfo-4.2.4-37.1 libdcerpc-atsvc-devel-4.2.4-37.1 libdcerpc-atsvc0-4.2.4-37.1 libdcerpc-atsvc0-debuginfo-4.2.4-37.1 libdcerpc-binding0-4.2.4-37.1 libdcerpc-binding0-debuginfo-4.2.4-37.1 libdcerpc-devel-4.2.4-37.1 libdcerpc-samr-devel-4.2.4-37.1 libdcerpc-samr0-4.2.4-37.1 libdcerpc-samr0-debuginfo-4.2.4-37.1 libdcerpc0-4.2.4-37.1 libdcerpc0-debuginfo-4.2.4-37.1 libgensec-devel-4.2.4-37.1 libgensec0-4.2.4-37.1 libgensec0-debuginfo-4.2.4-37.1 libndr-devel-4.2.4-37.1 libndr-krb5pac-devel-4.2.4-37.1 libndr-krb5pac0-4.2.4-37.1 libndr-krb5pac0-debuginfo-4.2.4-37.1 libndr-nbt-devel-4.2.4-37.1 libndr-nbt0-4.2.4-37.1 libndr-nbt0-debuginfo-4.2.4-37.1 libndr-standard-devel-4.2.4-37.1 libndr-standard0-4.2.4-37.1 libndr-standard0-debuginfo-4.2.4-37.1 libndr0-4.2.4-37.1 libndr0-debuginfo-4.2.4-37.1 libnetapi-devel-4.2.4-37.1 libnetapi0-4.2.4-37.1 libnetapi0-debuginfo-4.2.4-37.1 libregistry-devel-4.2.4-37.1 libregistry0-4.2.4-37.1 libregistry0-debuginfo-4.2.4-37.1 libsamba-credentials-devel-4.2.4-37.1 libsamba-credentials0-4.2.4-37.1 libsamba-credentials0-debuginfo-4.2.4-37.1 libsamba-hostconfig-devel-4.2.4-37.1 libsamba-hostconfig0-4.2.4-37.1 libsamba-hostconfig0-debuginfo-4.2.4-37.1 libsamba-passdb-devel-4.2.4-37.1 libsamba-passdb0-4.2.4-37.1 libsamba-passdb0-debuginfo-4.2.4-37.1 libsamba-policy-devel-4.2.4-37.1 libsamba-policy0-4.2.4-37.1 libsamba-policy0-debuginfo-4.2.4-37.1 libsamba-util-devel-4.2.4-37.1 libsamba-util0-4.2.4-37.1 libsamba-util0-debuginfo-4.2.4-37.1 libsamdb-devel-4.2.4-37.1 libsamdb0-4.2.4-37.1 libsamdb0-debuginfo-4.2.4-37.1 libsmbclient-devel-4.2.4-37.1 libsmbclient-raw-devel-4.2.4-37.1 libsmbclient-raw0-4.2.4-37.1 libsmbclient-raw0-debuginfo-4.2.4-37.1 libsmbclient0-4.2.4-37.1 libsmbclient0-debuginfo-4.2.4-37.1 libsmbconf-devel-4.2.4-37.1 libsmbconf0-4.2.4-37.1 libsmbconf0-debuginfo-4.2.4-37.1 libsmbldap-devel-4.2.4-37.1 libsmbldap0-4.2.4-37.1 libsmbldap0-debuginfo-4.2.4-37.1 libtevent-util-devel-4.2.4-37.1 libtevent-util0-4.2.4-37.1 libtevent-util0-debuginfo-4.2.4-37.1 libwbclient-devel-4.2.4-37.1 libwbclient0-4.2.4-37.1 libwbclient0-debuginfo-4.2.4-37.1 samba-4.2.4-37.1 samba-client-4.2.4-37.1 samba-client-debuginfo-4.2.4-37.1 samba-core-devel-4.2.4-37.1 samba-debuginfo-4.2.4-37.1 samba-debugsource-4.2.4-37.1 samba-libs-4.2.4-37.1 samba-libs-debuginfo-4.2.4-37.1 samba-pidl-4.2.4-37.1 samba-python-4.2.4-37.1 samba-python-debuginfo-4.2.4-37.1 samba-test-4.2.4-37.1 samba-test-debuginfo-4.2.4-37.1 samba-test-devel-4.2.4-37.1 samba-winbind-4.2.4-37.1 samba-winbind-debuginfo-4.2.4-37.1 - openSUSE 13.2 (x86_64): libdcerpc-atsvc0-32bit-4.2.4-37.1 libdcerpc-atsvc0-debuginfo-32bit-4.2.4-37.1 libdcerpc-binding0-32bit-4.2.4-37.1 libdcerpc-binding0-debuginfo-32bit-4.2.4-37.1 libdcerpc-samr0-32bit-4.2.4-37.1 libdcerpc-samr0-debuginfo-32bit-4.2.4-37.1 libdcerpc0-32bit-4.2.4-37.1 libdcerpc0-debuginfo-32bit-4.2.4-37.1 libgensec0-32bit-4.2.4-37.1 libgensec0-debuginfo-32bit-4.2.4-37.1 libndr-krb5pac0-32bit-4.2.4-37.1 libndr-krb5pac0-debuginfo-32bit-4.2.4-37.1 libndr-nbt0-32bit-4.2.4-37.1 libndr-nbt0-debuginfo-32bit-4.2.4-37.1 libndr-standard0-32bit-4.2.4-37.1 libndr-standard0-debuginfo-32bit-4.2.4-37.1 libndr0-32bit-4.2.4-37.1 libndr0-debuginfo-32bit-4.2.4-37.1 libnetapi0-32bit-4.2.4-37.1 libnetapi0-debuginfo-32bit-4.2.4-37.1 libregistry0-32bit-4.2.4-37.1 libregistry0-debuginfo-32bit-4.2.4-37.1 libsamba-credentials0-32bit-4.2.4-37.1 libsamba-credentials0-debuginfo-32bit-4.2.4-37.1 libsamba-hostconfig0-32bit-4.2.4-37.1 libsamba-hostconfig0-debuginfo-32bit-4.2.4-37.1 libsamba-passdb0-32bit-4.2.4-37.1 libsamba-passdb0-debuginfo-32bit-4.2.4-37.1 libsamba-policy0-32bit-4.2.4-37.1 libsamba-policy0-debuginfo-32bit-4.2.4-37.1 libsamba-util0-32bit-4.2.4-37.1 libsamba-util0-debuginfo-32bit-4.2.4-37.1 libsamdb0-32bit-4.2.4-37.1 libsamdb0-debuginfo-32bit-4.2.4-37.1 libsmbclient-raw0-32bit-4.2.4-37.1 libsmbclient-raw0-debuginfo-32bit-4.2.4-37.1 libsmbclient0-32bit-4.2.4-37.1 libsmbclient0-debuginfo-32bit-4.2.4-37.1 libsmbconf0-32bit-4.2.4-37.1 libsmbconf0-debuginfo-32bit-4.2.4-37.1 libsmbldap0-32bit-4.2.4-37.1 libsmbldap0-debuginfo-32bit-4.2.4-37.1 libtevent-util0-32bit-4.2.4-37.1 libtevent-util0-debuginfo-32bit-4.2.4-37.1 libwbclient0-32bit-4.2.4-37.1 libwbclient0-debuginfo-32bit-4.2.4-37.1 samba-32bit-4.2.4-37.1 samba-client-32bit-4.2.4-37.1 samba-client-debuginfo-32bit-4.2.4-37.1 samba-debuginfo-32bit-4.2.4-37.1 samba-libs-32bit-4.2.4-37.1 samba-libs-debuginfo-32bit-4.2.4-37.1 samba-winbind-32bit-4.2.4-37.1 samba-winbind-debuginfo-32bit-4.2.4-37.1 - openSUSE 13.2 (noarch): samba-doc-4.2.4-37.1 References: https://www.suse.com/security/cve/CVE-2016-2110.html https://bugzilla.suse.com/977669 https://bugzilla.suse.com/979268

1 0

openSUSE-SU-2016:1439-1: moderate: Security update for libxslt
by opensuse-security＠opensuse.org 30 May '16

30 May '16

openSUSE Security Update: Security update for libxslt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1439-1 Rating: moderate References: #952474 Cross-References: CVE-2015-7995 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libxslt fixes the following issues: - CVE-2015-7995: A type confusion in preprocessing attributes was fixed [boo#952474]. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-661=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libxslt-debugsource-1.1.28-7.3.1 libxslt-devel-1.1.28-7.3.1 libxslt-python-1.1.28-7.3.1 libxslt-python-debuginfo-1.1.28-7.3.1 libxslt-python-debugsource-1.1.28-7.3.1 libxslt-tools-1.1.28-7.3.1 libxslt-tools-debuginfo-1.1.28-7.3.1 libxslt1-1.1.28-7.3.1 libxslt1-debuginfo-1.1.28-7.3.1 - openSUSE 13.2 (x86_64): libxslt-devel-32bit-1.1.28-7.3.1 libxslt1-32bit-1.1.28-7.3.1 libxslt1-debuginfo-32bit-1.1.28-7.3.1 References: https://www.suse.com/security/cve/CVE-2015-7995.html https://bugzilla.suse.com/952474

1 0

openSUSE-RU-2016:1437-1: moderate: Recommended update for gpaste
by maintenance＠opensuse.org 30 May '16

30 May '16

openSUSE Recommended Update: Recommended update for gpaste ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1437-1 Rating: moderate References: #980421 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gpaste fixes the following issues: - Allow compatibility with gnome-shell 3.16.x (boo#980421). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-658=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gpaste-3.14-6.1 gpaste-debuginfo-3.14-6.1 gpaste-debugsource-3.14-6.1 gpaste-devel-3.14-6.1 libgpaste2-3.14-6.1 libgpaste2-debuginfo-3.14-6.1 typelib-1_0-GPaste-1_0-3.14-6.1 - openSUSE Leap 42.1 (noarch): gnome-shell-extension-gpaste-3.14-6.1 gpaste-lang-3.14-6.1 References: https://bugzilla.suse.com/980421

1 0

openSUSE-RU-2016:1436-1: moderate: Recommended update for gdm
by maintenance＠opensuse.org 30 May '16

30 May '16

openSUSE Recommended Update: Recommended update for gdm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1436-1 Rating: moderate References: #978262 #981012 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for gdm fixes the following issues: - Use -listen intead of -nolisten for tcp connections to Xorg >= 1.17. (boo#978262, boo#981012, bgo#750026). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-657=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gdm-3.14.2-12.1 gdm-debuginfo-3.14.2-12.1 gdm-debugsource-3.14.2-12.1 gdm-devel-3.14.2-12.1 libgdm1-3.14.2-12.1 libgdm1-debuginfo-3.14.2-12.1 typelib-1_0-Gdm-1_0-3.14.2-12.1 - openSUSE Leap 42.1 (noarch): gdm-branding-upstream-3.14.2-12.1 gdm-lang-3.14.2-12.1 gdmflexiserver-3.14.2-12.1 References: https://bugzilla.suse.com/978262 https://bugzilla.suse.com/981012

1 0

openSUSE-RU-2016:1435-1: moderate: Recommended update for net-tools
by maintenance＠opensuse.org 30 May '16

30 May '16

openSUSE Recommended Update: Recommended update for net-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1435-1 Rating: moderate References: #872264 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for net-tools fixes the following issues: - Changes the hostname behavior to match other systems and its own documentation. Namely, that -s just parses the result of the active gethostname() and does not attempt any network/DNS traffic (boo#872264). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-656=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): net-tools-1.60-765.3.1 net-tools-debuginfo-1.60-765.3.1 net-tools-debugsource-1.60-765.3.1 References: https://bugzilla.suse.com/872264

1 0

openSUSE-SU-2016:1434-1: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 29 May '16

29 May '16

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1434-1 Rating: low References: #982128 Cross-References: CVE-2016-5099 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: phpMyAdmin was updated to fix one security issue. The following vulnerability was fixed: - CVE-2016-5099: Self XSS vulneratbility - A specially crafted attack could allow for special HTML characters to be passed as URL encoded values and displayed back as special characters in the page (boo#982128, PMASA-2016-16) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-655=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-655=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): phpMyAdmin-4.4.15.6-19.1 - openSUSE 13.2 (noarch): phpMyAdmin-4.4.15.6-33.1 References: https://www.suse.com/security/cve/CVE-2016-5099.html https://bugzilla.suse.com/982128

1 0

openSUSE-SU-2016:1433-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 27 May '16

27 May '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1433-1 Rating: important References: #981886 Cross-References: CVE-2016-1672 CVE-2016-1673 CVE-2016-1674 CVE-2016-1675 CVE-2016-1676 CVE-2016-1677 CVE-2016-1678 CVE-2016-1679 CVE-2016-1680 CVE-2016-1681 CVE-2016-1682 CVE-2016-1683 CVE-2016-1684 CVE-2016-1685 CVE-2016-1686 CVE-2016-1687 CVE-2016-1688 CVE-2016-1689 CVE-2016-1690 CVE-2016-1691 CVE-2016-1692 CVE-2016-1693 CVE-2016-1694 CVE-2016-1695 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 24 vulnerabilities is now available. Description: Chromium was updated to 51.0.2704.63 to fix the following vulnerabilities (boo#981886): - CVE-2016-1672: Cross-origin bypass in extension bindings - CVE-2016-1673: Cross-origin bypass in Blink - CVE-2016-1674: Cross-origin bypass in extensions - CVE-2016-1675: Cross-origin bypass in Blink - CVE-2016-1676: Cross-origin bypass in extension bindings - CVE-2016-1677: Type confusion in V8 - CVE-2016-1678: Heap overflow in V8 - CVE-2016-1679: Heap use-after-free in V8 bindings - CVE-2016-1680: Heap use-after-free in Skia - CVE-2016-1681: Heap overflow in PDFium - CVE-2016-1682: CSP bypass for ServiceWorker - CVE-2016-1683: Out-of-bounds access in libxslt - CVE-2016-1684: Integer overflow in libxslt - CVE-2016-1685: Out-of-bounds read in PDFium - CVE-2016-1686: Out-of-bounds read in PDFium - CVE-2016-1687: Information leak in extensions - CVE-2016-1688: Out-of-bounds read in V8 - CVE-2016-1689: Heap buffer overflow in media - CVE-2016-1690: Heap use-after-free in Autofill - CVE-2016-1691: Heap buffer-overflow in Skia - CVE-2016-1692: Limited cross-origin bypass in ServiceWorker - CVE-2016-1693: HTTP Download of Software Removal Tool - CVE-2016-1694: HPKP pins removed on cache clearance - CVE-2016-1695: Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-652=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-51.0.2704.63-78.1 chromedriver-debuginfo-51.0.2704.63-78.1 chromium-51.0.2704.63-78.1 chromium-debuginfo-51.0.2704.63-78.1 chromium-debugsource-51.0.2704.63-78.1 chromium-desktop-gnome-51.0.2704.63-78.1 chromium-desktop-kde-51.0.2704.63-78.1 chromium-ffmpegsumo-51.0.2704.63-78.1 chromium-ffmpegsumo-debuginfo-51.0.2704.63-78.1 References: https://www.suse.com/security/cve/CVE-2016-1672.html https://www.suse.com/security/cve/CVE-2016-1673.html https://www.suse.com/security/cve/CVE-2016-1674.html https://www.suse.com/security/cve/CVE-2016-1675.html https://www.suse.com/security/cve/CVE-2016-1676.html https://www.suse.com/security/cve/CVE-2016-1677.html https://www.suse.com/security/cve/CVE-2016-1678.html https://www.suse.com/security/cve/CVE-2016-1679.html https://www.suse.com/security/cve/CVE-2016-1680.html https://www.suse.com/security/cve/CVE-2016-1681.html https://www.suse.com/security/cve/CVE-2016-1682.html https://www.suse.com/security/cve/CVE-2016-1683.html https://www.suse.com/security/cve/CVE-2016-1684.html https://www.suse.com/security/cve/CVE-2016-1685.html https://www.suse.com/security/cve/CVE-2016-1686.html https://www.suse.com/security/cve/CVE-2016-1687.html https://www.suse.com/security/cve/CVE-2016-1688.html https://www.suse.com/security/cve/CVE-2016-1689.html https://www.suse.com/security/cve/CVE-2016-1690.html https://www.suse.com/security/cve/CVE-2016-1691.html https://www.suse.com/security/cve/CVE-2016-1692.html https://www.suse.com/security/cve/CVE-2016-1693.html https://www.suse.com/security/cve/CVE-2016-1694.html https://www.suse.com/security/cve/CVE-2016-1695.html https://bugzilla.suse.com/981886

1 0

openSUSE-OU-2016:1432-1: moderate: Optional update for xtables-addons
by maintenance＠opensuse.org 27 May '16

27 May '16

openSUSE Optional Update: Optional update for xtables-addons ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:1432-1 Rating: moderate References: #980137 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: The xtables-addons KMP was rebuilt to allow installation with a current kernel. - rebuild to adjust for kABI changes in ip6_route_output (boo#980137) Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-654=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-654=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xtables-addons-2.8-8.1 xtables-addons-debuginfo-2.8-8.1 xtables-addons-debugsource-2.8-8.1 xtables-addons-kmp-default-2.8_k4.1.21_14-8.1 xtables-addons-kmp-default-debuginfo-2.8_k4.1.21_14-8.1 xtables-addons-kmp-pv-2.8_k4.1.21_14-8.1 xtables-addons-kmp-pv-debuginfo-2.8_k4.1.21_14-8.1 xtables-addons-kmp-xen-2.8_k4.1.21_14-8.1 xtables-addons-kmp-xen-debuginfo-2.8_k4.1.21_14-8.1 - openSUSE Leap 42.1 (i586): xtables-addons-kmp-pae-2.8_k4.1.21_14-8.1 xtables-addons-kmp-pae-debuginfo-2.8_k4.1.21_14-8.1 - openSUSE 13.2 (i586 x86_64): xtables-addons-2.6-20.1 xtables-addons-debuginfo-2.6-20.1 xtables-addons-debugsource-2.6-20.1 xtables-addons-kmp-default-2.6_k3.16.7_35-20.1 xtables-addons-kmp-default-debuginfo-2.6_k3.16.7_35-20.1 xtables-addons-kmp-desktop-2.6_k3.16.7_35-20.1 xtables-addons-kmp-desktop-debuginfo-2.6_k3.16.7_35-20.1 xtables-addons-kmp-xen-2.6_k3.16.7_35-20.1 xtables-addons-kmp-xen-debuginfo-2.6_k3.16.7_35-20.1 - openSUSE 13.2 (i586): xtables-addons-kmp-pae-2.6_k3.16.7_35-20.1 xtables-addons-kmp-pae-debuginfo-2.6_k3.16.7_35-20.1 References: https://bugzilla.suse.com/980137

1 0

openSUSE-RU-2016:1431-1: Recommended update for clamav-database
by maintenance＠opensuse.org 27 May '16

27 May '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1431-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh May 23rd. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-653=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201605231325-97.1 References:

1 0

openSUSE-SU-2016:1430-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 27 May '16

27 May '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1430-1 Rating: important References: #981886 Cross-References: CVE-2016-1672 CVE-2016-1673 CVE-2016-1674 CVE-2016-1675 CVE-2016-1676 CVE-2016-1677 CVE-2016-1678 CVE-2016-1679 CVE-2016-1680 CVE-2016-1681 CVE-2016-1682 CVE-2016-1683 CVE-2016-1684 CVE-2016-1685 CVE-2016-1686 CVE-2016-1687 CVE-2016-1688 CVE-2016-1689 CVE-2016-1690 CVE-2016-1691 CVE-2016-1692 CVE-2016-1693 CVE-2016-1694 CVE-2016-1695 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 24 vulnerabilities is now available. Description: Chromium was updated to 51.0.2704.63 to fix the following vulnerabilities (boo#981886): - CVE-2016-1672: Cross-origin bypass in extension bindings - CVE-2016-1673: Cross-origin bypass in Blink - CVE-2016-1674: Cross-origin bypass in extensions - CVE-2016-1675: Cross-origin bypass in Blink - CVE-2016-1676: Cross-origin bypass in extension bindings - CVE-2016-1677: Type confusion in V8 - CVE-2016-1678: Heap overflow in V8 - CVE-2016-1679: Heap use-after-free in V8 bindings - CVE-2016-1680: Heap use-after-free in Skia - CVE-2016-1681: Heap overflow in PDFium - CVE-2016-1682: CSP bypass for ServiceWorker - CVE-2016-1683: Out-of-bounds access in libxslt - CVE-2016-1684: Integer overflow in libxslt - CVE-2016-1685: Out-of-bounds read in PDFium - CVE-2016-1686: Out-of-bounds read in PDFium - CVE-2016-1687: Information leak in extensions - CVE-2016-1688: Out-of-bounds read in V8 - CVE-2016-1689: Heap buffer overflow in media - CVE-2016-1690: Heap use-after-free in Autofill - CVE-2016-1691: Heap buffer-overflow in Skia - CVE-2016-1692: Limited cross-origin bypass in ServiceWorker - CVE-2016-1693: HTTP Download of Software Removal Tool - CVE-2016-1694: HPKP pins removed on cache clearance - CVE-2016-1695: Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-652=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): chromedriver-51.0.2704.63-51.1 chromedriver-debuginfo-51.0.2704.63-51.1 chromium-51.0.2704.63-51.1 chromium-debuginfo-51.0.2704.63-51.1 chromium-debugsource-51.0.2704.63-51.1 chromium-desktop-gnome-51.0.2704.63-51.1 chromium-desktop-kde-51.0.2704.63-51.1 chromium-ffmpegsumo-51.0.2704.63-51.1 chromium-ffmpegsumo-debuginfo-51.0.2704.63-51.1 References: https://www.suse.com/security/cve/CVE-2016-1672.html https://www.suse.com/security/cve/CVE-2016-1673.html https://www.suse.com/security/cve/CVE-2016-1674.html https://www.suse.com/security/cve/CVE-2016-1675.html https://www.suse.com/security/cve/CVE-2016-1676.html https://www.suse.com/security/cve/CVE-2016-1677.html https://www.suse.com/security/cve/CVE-2016-1678.html https://www.suse.com/security/cve/CVE-2016-1679.html https://www.suse.com/security/cve/CVE-2016-1680.html https://www.suse.com/security/cve/CVE-2016-1681.html https://www.suse.com/security/cve/CVE-2016-1682.html https://www.suse.com/security/cve/CVE-2016-1683.html https://www.suse.com/security/cve/CVE-2016-1684.html https://www.suse.com/security/cve/CVE-2016-1685.html https://www.suse.com/security/cve/CVE-2016-1686.html https://www.suse.com/security/cve/CVE-2016-1687.html https://www.suse.com/security/cve/CVE-2016-1688.html https://www.suse.com/security/cve/CVE-2016-1689.html https://www.suse.com/security/cve/CVE-2016-1690.html https://www.suse.com/security/cve/CVE-2016-1691.html https://www.suse.com/security/cve/CVE-2016-1692.html https://www.suse.com/security/cve/CVE-2016-1693.html https://www.suse.com/security/cve/CVE-2016-1694.html https://www.suse.com/security/cve/CVE-2016-1695.html https://bugzilla.suse.com/981886

1 0

openSUSE-SU-2016:1423-1: moderate: Security update for ntp
by opensuse-security＠opensuse.org 27 May '16

27 May '16

openSUSE Security Update: Security update for ntp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1423-1 Rating: moderate References: #782060 #905885 #910063 #916617 #920238 #926510 #936327 #942587 #944300 #946386 #951559 #951608 #951629 #954982 #956773 #957226 #962318 #962784 #962802 #962960 #962966 #962970 #962988 #962995 #963000 #963002 #975496 #977446 #977450 #977451 #977452 #977455 #977457 #977458 #977459 #977461 #977464 Cross-References: CVE-2015-5300 CVE-2015-7691 CVE-2015-7692 CVE-2015-7701 CVE-2015-7702 CVE-2015-7703 CVE-2015-7704 CVE-2015-7705 CVE-2015-7848 CVE-2015-7849 CVE-2015-7850 CVE-2015-7851 CVE-2015-7852 CVE-2015-7853 CVE-2015-7854 CVE-2015-7855 CVE-2015-7871 CVE-2015-7973 CVE-2015-7974 CVE-2015-7975 CVE-2015-7976 CVE-2015-7977 CVE-2015-7978 CVE-2015-7979 CVE-2015-8138 CVE-2015-8139 CVE-2015-8140 CVE-2015-8158 CVE-2016-1547 CVE-2016-1548 CVE-2016-1549 CVE-2016-1550 CVE-2016-1551 CVE-2016-2516 CVE-2016-2517 CVE-2016-2518 CVE-2016-2519 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 37 vulnerabilities is now available. Description: This update for ntp fixes the following issues: - Update to 4.2.8p7 (boo#977446): * CVE-2016-1547, boo#977459: Validate crypto-NAKs, AKA: CRYPTO-NAK DoS. * CVE-2016-1548, boo#977461: Interleave-pivot * CVE-2016-1549, boo#977451: Sybil vulnerability: ephemeral association attack. * CVE-2016-1550, boo#977464: Improve NTP security against buffer comparison timing attacks. * CVE-2016-1551, boo#977450: Refclock impersonation vulnerability * CVE-2016-2516, boo#977452: Duplicate IPs on unconfig directives will cause an assertion botch in ntpd. * CVE-2016-2517, boo#977455: remote configuration trustedkey/ requestkey/controlkey values are not properly validated. * CVE-2016-2518, boo#977457: Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC. * CVE-2016-2519, boo#977458: ctl_getitem() return value not always checked. * integrate ntp-fork.patch * Improve the fixes for: CVE-2015-7704, CVE-2015-7705, CVE-2015-7974 - Restrict the parser in the startup script to the first occurrance of "keys" and "controlkey" in ntp.conf (boo#957226). - Enable compile-time support for MS-SNTP (--enable-ntp-signd). This replaces the w32 patches in 4.2.4 that added the authreg directive. (fate#320758). - Fix ntp-sntp-dst.patch (boo#975496). - Call /usr/sbin/sntp with full path to synchronize in start-ntpd. When run as cron job, /usr/sbin/ is not in the path, which caused the synchronization to fail. (boo#962318) - Speedup ntpq (boo#782060, ntp-speedup-ntpq.patch). - Sync service files with openSUSE Factory. - Fix the TZ offset output of sntp during DST (boo#951559). - Add ntp-fork.patch and build with threads disabled to allow name resolution even when running chrooted. - Update to 4.2.8p6: * CVE-2015-8158, boo#962966: Potential Infinite Loop in ntpq. * CVE-2015-8138, boo#963002: origin: Zero Origin Timestamp Bypass. * CVE-2015-7979, boo#962784: Off-path Denial of Service (DoS) attack on authenticated broadcast mode. * CVE-2015-7978, boo#963000: Stack exhaustion in recursive traversal of restriction list. * CVE-2015-7977, boo#962970: reslist NULL pointer dereference. * CVE-2015-7976, boo#962802: ntpq saveconfig command allows dangerous characters in filenames. * CVE-2015-7975, boo#962988: nextvar() missing length check. * CVE-2015-7974, boo#962960: Skeleton Key: Missing key check allows impersonation between authenticated peers. * CVE-2015-7973, boo#962995: Deja Vu: Replay attack on authenticated broadcast mode. * CVE-2015-8140: ntpq vulnerable to replay attacks. * CVE-2015-8139: Origin Leak: ntpq and ntpdc, disclose origin. * CVE-2015-5300, boo#951629: Small-step/Big-step. - Add /var/db/ntp-kod (boo#916617). - Add ntp-ENOBUFS.patch to limit a warning that might happen quite a lot on loaded systems (boo#956773). - add ntp.bug2965.diff (boo#954982) * fixes regression in 4.2.8p4 update - Update to 4.2.8p4 to fix several security issues (boo#951608): * CVE-2015-7871: NAK to the Future: Symmetric association authentication bypass via crypto-NAK * CVE-2015-7855: decodenetnum() will ASSERT botch instead of returning FAIL on some bogus values * CVE-2015-7854: Password Length Memory Corruption Vulnerability * CVE-2015-7853: Invalid length data provided by a custom refclock driver could cause a buffer overflow * CVE-2015-7852 ntpq atoascii() Memory Corruption Vulnerability * CVE-2015-7851 saveconfig Directory Traversal Vulnerability * CVE-2015-7850 remote config logfile-keyfile * CVE-2015-7849 trusted key use-after-free * CVE-2015-7848 mode 7 loop counter underrun * CVE-2015-7701 Slow memory leak in CRYPTO_ASSOC * CVE-2015-7703 configuration directives "pidfile" and "driftfile" should only be allowed locally * CVE-2015-7704, CVE-2015-7705 Clients that receive a KoD should validate the origin timestamp field * CVE-2015-7691, CVE-2015-7692, CVE-2015-7702 Incomplete autokey data packet length checks * obsoletes ntp-memlock.patch. - Add a controlkey line to /etc/ntp.conf if one does not already exist to allow runtime configuuration via ntpq. - Temporarily disable memlock to avoid problems due to high memory usage during name resolution (boo#946386, ntp-memlock.patch). - Use SHA1 instead of MD5 for symmetric keys (boo#905885). - Improve runtime configuration: * Read keytype from ntp.conf * Don't write ntp keys to syslog. - Fix legacy action scripts to pass on command line arguments. - Remove ntp.1.gz, it wasn't installed anymore. - Remove ntp-4.2.7-rh-manpages.tar.gz and only keep ntptime.8.gz. The rest is partially irrelevant, partially redundant and potentially outdated (boo#942587). - Remove "kod" from the restrict line in ntp.conf (boo#944300). - Use ntpq instead of deprecated ntpdc in start-ntpd (boo#936327). - Add a controlkey to ntp.conf to make the above work. - Don't let "keysdir" lines in ntp.conf trigger the "keys" parser. - Disable mode 7 (ntpdc) again, now that we don't use it anymore. - Add "addserver" as a new legacy action. - Fix the comment regarding addserver in ntp.conf (boo#910063). - Update to version 4.2.8p3 which incorporates all security fixes and most other patches we have so far (fate#319040). More information on: http://archive.ntp.org/ntp4/ChangeLog-stable - Disable chroot by default (boo#926510). - Enable ntpdc for backwards compatibility (boo#920238). - Security fix: ntp-keygen may generate non-random symmetric keys Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-649=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ntp-4.2.8p7-25.15.1 ntp-debuginfo-4.2.8p7-25.15.1 ntp-debugsource-4.2.8p7-25.15.1 ntp-doc-4.2.8p7-25.15.1 References: https://www.suse.com/security/cve/CVE-2015-5300.html https://www.suse.com/security/cve/CVE-2015-7691.html https://www.suse.com/security/cve/CVE-2015-7692.html https://www.suse.com/security/cve/CVE-2015-7701.html https://www.suse.com/security/cve/CVE-2015-7702.html https://www.suse.com/security/cve/CVE-2015-7703.html https://www.suse.com/security/cve/CVE-2015-7704.html https://www.suse.com/security/cve/CVE-2015-7705.html https://www.suse.com/security/cve/CVE-2015-7848.html https://www.suse.com/security/cve/CVE-2015-7849.html https://www.suse.com/security/cve/CVE-2015-7850.html https://www.suse.com/security/cve/CVE-2015-7851.html https://www.suse.com/security/cve/CVE-2015-7852.html https://www.suse.com/security/cve/CVE-2015-7853.html https://www.suse.com/security/cve/CVE-2015-7854.html https://www.suse.com/security/cve/CVE-2015-7855.html https://www.suse.com/security/cve/CVE-2015-7871.html https://www.suse.com/security/cve/CVE-2015-7973.html https://www.suse.com/security/cve/CVE-2015-7974.html https://www.suse.com/security/cve/CVE-2015-7975.html https://www.suse.com/security/cve/CVE-2015-7976.html https://www.suse.com/security/cve/CVE-2015-7977.html https://www.suse.com/security/cve/CVE-2015-7978.html https://www.suse.com/security/cve/CVE-2015-7979.html https://www.suse.com/security/cve/CVE-2015-8138.html https://www.suse.com/security/cve/CVE-2015-8139.html https://www.suse.com/security/cve/CVE-2015-8140.html https://www.suse.com/security/cve/CVE-2015-8158.html https://www.suse.com/security/cve/CVE-2016-1547.html https://www.suse.com/security/cve/CVE-2016-1548.html https://www.suse.com/security/cve/CVE-2016-1549.html https://www.suse.com/security/cve/CVE-2016-1550.html https://www.suse.com/security/cve/CVE-2016-1551.html https://www.suse.com/security/cve/CVE-2016-2516.html https://www.suse.com/security/cve/CVE-2016-2517.html https://www.suse.com/security/cve/CVE-2016-2518.html https://www.suse.com/security/cve/CVE-2016-2519.html https://bugzilla.suse.com/782060 https://bugzilla.suse.com/905885 https://bugzilla.suse.com/910063 https://bugzilla.suse.com/916617 https://bugzilla.suse.com/920238 https://bugzilla.suse.com/926510 https://bugzilla.suse.com/936327 https://bugzilla.suse.com/942587 https://bugzilla.suse.com/944300 https://bugzilla.suse.com/946386 https://bugzilla.suse.com/951559 https://bugzilla.suse.com/951608 https://bugzilla.suse.com/951629 https://bugzilla.suse.com/954982 https://bugzilla.suse.com/956773 https://bugzilla.suse.com/957226 https://bugzilla.suse.com/962318 https://bugzilla.suse.com/962784 https://bugzilla.suse.com/962802 https://bugzilla.suse.com/962960 https://bugzilla.suse.com/962966 https://bugzilla.suse.com/962970 https://bugzilla.suse.com/962988 https://bugzilla.suse.com/962995 https://bugzilla.suse.com/963000 https://bugzilla.suse.com/963002 https://bugzilla.suse.com/975496 https://bugzilla.suse.com/977446 https://bugzilla.suse.com/977450 https://bugzilla.suse.com/977451 https://bugzilla.suse.com/977452 https://bugzilla.suse.com/977455 https://bugzilla.suse.com/977457 https://bugzilla.suse.com/977458 https://bugzilla.suse.com/977459 https://bugzilla.suse.com/977461 https://bugzilla.suse.com/977464

1 0

openSUSE-RU-2016:1421-1: moderate: Recommended update for asciidoc
by maintenance＠opensuse.org 27 May '16

27 May '16

openSUSE Recommended Update: Recommended update for asciidoc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1421-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for asciidoc provides version 8.6.9 and fixes the following issues: - html5, xhtml11 and slidy outputs now wrap pre element contents at right margin. - Vim syntax file: Highlight line breaks in lists. - Vim syntax file: Fixed highlighting of lines with spaces preceding an indented paragraph. - Vim syntax file: Dropped ) from list of illegal characters following opening quote. - Added + intrinsic attribute. - Allow tabsize=0 in configuration file. - Removed wordpress backend into the blogpost project (where it belongs) as an AsciiDoc backend plugin. - Added HTML5 footer badges. - Added favicon to AsciiDoc website. - Changed AsciiDoc website domain to asciidoc.org. - Vim syntax file: Closing quote character cannot be immediately followed by same closing quote character. - Documentation updates. - If admonition icons are embedded using the Data URI Scheme and the icons directory is undefined or does not exist then the iconsdir attribute is set to the location of the icons installed in the AsciiDoc configuration directory. - Updated ./stylesheets/pygments.css from pygments 1.4. - HTML backends: Align inline images to text-bottom. - html4 backend: Added hr attribute to make the inter-section horizontal ruler element optional. - Documented Callout lists cannot be used within tables. - Removed Vim related stuff from the installer makefile. - Dropped vim/ftdetect/asciidoc_filetype.vim from distribution, the file detection was broken and the default settings satisfied noone. - Vim syntax highlighter: Increase sync backtracking to catch changes to large block elements. - Added Romanian language configuration file. - Added ruler and line-break outputs to HTML Help outputs. - Added Czech language configuration file. - html4 backend: Allow embedded images and icons (data-uri attribute). - html4 backend: table and example block caption place at bottom for consistency. - html4 backend: Dropped border around example block. - html4 backend: Cellpaddings made equal to 4 for consistency. - Vim syntax highligher: Highlight closing OpenBlock delimiter when it immediately follows a list. - Updated html5 backend (previous commit was xhtml11 only). - Embedded data-uri images now figure file mimetype from file contents rather than the file extension. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-650=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): asciidoc-8.6.9-7.3.1 asciidoc-examples-8.6.9-7.3.1 References:

1 0

openSUSE-RU-2016:1418-1: moderate: Recommended update for Mesa
by maintenance＠opensuse.org 27 May '16

27 May '16

openSUSE Recommended Update: Recommended update for Mesa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1418-1 Rating: moderate References: #980382 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for Mesa fixes the following issues: - Fix crash due to oud of founds screen (boo#980382). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-651=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-651=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): Mesa-11.0.8-148.1 Mesa-debuginfo-11.0.8-148.1 Mesa-debugsource-11.0.8-148.1 Mesa-devel-11.0.8-148.1 Mesa-dri-devel-11.0.8-148.1 Mesa-libEGL-devel-11.0.8-148.1 Mesa-libEGL1-11.0.8-148.1 Mesa-libEGL1-debuginfo-11.0.8-148.1 Mesa-libGL-devel-11.0.8-148.1 Mesa-libGL1-11.0.8-148.1 Mesa-libGL1-debuginfo-11.0.8-148.1 Mesa-libGLESv1_CM-devel-11.0.8-148.1 Mesa-libGLESv1_CM1-11.0.8-148.1 Mesa-libGLESv1_CM1-debuginfo-11.0.8-148.1 Mesa-libGLESv2-2-11.0.8-148.1 Mesa-libGLESv2-2-debuginfo-11.0.8-148.1 Mesa-libGLESv2-devel-11.0.8-148.1 Mesa-libGLESv3-devel-11.0.8-148.1 Mesa-libd3d-11.0.8-148.1 Mesa-libd3d-debuginfo-11.0.8-148.1 Mesa-libd3d-devel-11.0.8-148.1 Mesa-libglapi-devel-11.0.8-148.1 Mesa-libglapi0-11.0.8-148.1 Mesa-libglapi0-debuginfo-11.0.8-148.1 libOSMesa-devel-11.0.8-148.1 libOSMesa9-11.0.8-148.1 libOSMesa9-debuginfo-11.0.8-148.1 libXvMC_nouveau-11.0.8-148.1 libXvMC_nouveau-debuginfo-11.0.8-148.1 libXvMC_r600-11.0.8-148.1 libgbm-devel-11.0.8-148.1 libgbm1-11.0.8-148.1 libgbm1-debuginfo-11.0.8-148.1 libvdpau_nouveau-11.0.8-148.1 libvdpau_nouveau-debuginfo-11.0.8-148.1 libvdpau_r300-11.0.8-148.1 libvdpau_r600-11.0.8-148.1 libvdpau_radeonsi-11.0.8-148.1 libwayland-egl-devel-11.0.8-148.1 libwayland-egl1-11.0.8-148.1 libwayland-egl1-debuginfo-11.0.8-148.1 libxatracker-devel-1.0.0-148.1 libxatracker2-1.0.0-148.1 libxatracker2-debuginfo-1.0.0-148.1 - openSUSE Leap 42.1 (x86_64): Mesa-32bit-11.0.8-148.1 Mesa-debuginfo-32bit-11.0.8-148.1 Mesa-libEGL-devel-32bit-11.0.8-148.1 Mesa-libEGL1-32bit-11.0.8-148.1 Mesa-libEGL1-debuginfo-32bit-11.0.8-148.1 Mesa-libGL-devel-32bit-11.0.8-148.1 Mesa-libGL1-32bit-11.0.8-148.1 Mesa-libGL1-debuginfo-32bit-11.0.8-148.1 Mesa-libGLESv1_CM-devel-32bit-11.0.8-148.1 Mesa-libGLESv1_CM1-32bit-11.0.8-148.1 Mesa-libGLESv1_CM1-debuginfo-32bit-11.0.8-148.1 Mesa-libGLESv2-2-32bit-11.0.8-148.1 Mesa-libGLESv2-2-debuginfo-32bit-11.0.8-148.1 Mesa-libGLESv2-devel-32bit-11.0.8-148.1 Mesa-libd3d-32bit-11.0.8-148.1 Mesa-libd3d-debuginfo-32bit-11.0.8-148.1 Mesa-libd3d-devel-32bit-11.0.8-148.1 Mesa-libglapi-devel-32bit-11.0.8-148.1 Mesa-libglapi0-32bit-11.0.8-148.1 Mesa-libglapi0-debuginfo-32bit-11.0.8-148.1 libOSMesa-devel-32bit-11.0.8-148.1 libOSMesa9-32bit-11.0.8-148.1 libOSMesa9-debuginfo-32bit-11.0.8-148.1 libXvMC_nouveau-32bit-11.0.8-148.1 libXvMC_nouveau-debuginfo-32bit-11.0.8-148.1 libXvMC_r600-32bit-11.0.8-148.1 libgbm-devel-32bit-11.0.8-148.1 libgbm1-32bit-11.0.8-148.1 libgbm1-debuginfo-32bit-11.0.8-148.1 libvdpau_nouveau-32bit-11.0.8-148.1 libvdpau_nouveau-debuginfo-32bit-11.0.8-148.1 libvdpau_r300-32bit-11.0.8-148.1 libvdpau_r600-32bit-11.0.8-148.1 libvdpau_radeonsi-32bit-11.0.8-148.1 libwayland-egl-devel-32bit-11.0.8-148.1 libwayland-egl1-32bit-11.0.8-148.1 libwayland-egl1-debuginfo-32bit-11.0.8-148.1 - openSUSE 13.2 (i586 x86_64): Mesa-10.3.7-91.18.1 Mesa-debuginfo-10.3.7-91.18.1 Mesa-debugsource-10.3.7-91.18.1 Mesa-devel-10.3.7-91.18.1 Mesa-libEGL-devel-10.3.7-91.18.1 Mesa-libEGL1-10.3.7-91.18.1 Mesa-libEGL1-debuginfo-10.3.7-91.18.1 Mesa-libGL-devel-10.3.7-91.18.1 Mesa-libGL1-10.3.7-91.18.1 Mesa-libGL1-debuginfo-10.3.7-91.18.1 Mesa-libGLESv1_CM-devel-10.3.7-91.18.1 Mesa-libGLESv1_CM1-10.3.7-91.18.1 Mesa-libGLESv1_CM1-debuginfo-10.3.7-91.18.1 Mesa-libGLESv2-2-10.3.7-91.18.1 Mesa-libGLESv2-2-debuginfo-10.3.7-91.18.1 Mesa-libGLESv2-devel-10.3.7-91.18.1 Mesa-libGLESv3-devel-10.3.7-91.18.1 Mesa-libglapi-devel-10.3.7-91.18.1 Mesa-libglapi0-10.3.7-91.18.1 Mesa-libglapi0-debuginfo-10.3.7-91.18.1 libOSMesa-devel-10.3.7-91.18.1 libOSMesa9-10.3.7-91.18.1 libOSMesa9-debuginfo-10.3.7-91.18.1 libXvMC_nouveau-10.3.7-91.18.1 libXvMC_nouveau-debuginfo-10.3.7-91.18.1 libXvMC_r600-10.3.7-91.18.1 libgbm-devel-10.3.7-91.18.1 libgbm1-10.3.7-91.18.1 libgbm1-debuginfo-10.3.7-91.18.1 libvdpau_nouveau-10.3.7-91.18.1 libvdpau_nouveau-debuginfo-10.3.7-91.18.1 libvdpau_r600-10.3.7-91.18.1 libvdpau_radeonsi-10.3.7-91.18.1 libwayland-egl-devel-10.3.7-91.18.1 libwayland-egl1-10.3.7-91.18.1 libwayland-egl1-debuginfo-10.3.7-91.18.1 libxatracker-devel-1.0.0-91.18.1 libxatracker2-1.0.0-91.18.1 libxatracker2-debuginfo-1.0.0-91.18.1 - openSUSE 13.2 (x86_64): Mesa-32bit-10.3.7-91.18.1 Mesa-debuginfo-32bit-10.3.7-91.18.1 Mesa-libEGL-devel-32bit-10.3.7-91.18.1 Mesa-libEGL1-32bit-10.3.7-91.18.1 Mesa-libEGL1-debuginfo-32bit-10.3.7-91.18.1 Mesa-libGL-devel-32bit-10.3.7-91.18.1 Mesa-libGL1-32bit-10.3.7-91.18.1 Mesa-libGL1-debuginfo-32bit-10.3.7-91.18.1 Mesa-libGLESv1_CM-devel-32bit-10.3.7-91.18.1 Mesa-libGLESv1_CM1-32bit-10.3.7-91.18.1 Mesa-libGLESv1_CM1-debuginfo-32bit-10.3.7-91.18.1 Mesa-libGLESv2-2-32bit-10.3.7-91.18.1 Mesa-libGLESv2-2-debuginfo-32bit-10.3.7-91.18.1 Mesa-libGLESv2-devel-32bit-10.3.7-91.18.1 Mesa-libglapi-devel-32bit-10.3.7-91.18.1 Mesa-libglapi0-32bit-10.3.7-91.18.1 Mesa-libglapi0-debuginfo-32bit-10.3.7-91.18.1 libOSMesa-devel-32bit-10.3.7-91.18.1 libOSMesa9-32bit-10.3.7-91.18.1 libOSMesa9-debuginfo-32bit-10.3.7-91.18.1 libXvMC_nouveau-32bit-10.3.7-91.18.1 libXvMC_nouveau-debuginfo-32bit-10.3.7-91.18.1 libXvMC_r600-32bit-10.3.7-91.18.1 libgbm-devel-32bit-10.3.7-91.18.1 libgbm1-32bit-10.3.7-91.18.1 libgbm1-debuginfo-32bit-10.3.7-91.18.1 libvdpau_nouveau-32bit-10.3.7-91.18.1 libvdpau_nouveau-debuginfo-32bit-10.3.7-91.18.1 libvdpau_r600-32bit-10.3.7-91.18.1 libvdpau_radeonsi-32bit-10.3.7-91.18.1 libwayland-egl-devel-32bit-10.3.7-91.18.1 libwayland-egl1-32bit-10.3.7-91.18.1 libwayland-egl1-debuginfo-32bit-10.3.7-91.18.1 References: https://bugzilla.suse.com/980382

1 0

openSUSE-SU-2016:1417-1: moderate: Security update for docker
by opensuse-security＠opensuse.org 27 May '16

27 May '16

openSUSE Security Update: Security update for docker ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1417-1 Rating: moderate References: #976777 Cross-References: CVE-2016-3697 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for docker fixes the following issues: Security issues fixed: - CVE-2016-3697: Potential privilege escalation via confusion of usernames and UIDs (boo#976777) Bugs fixed: - devicemapper: fix zero-sized field access - remove docker-netns-aarch64.patch: This patch was adding We'll fix that later if we want to release for those archs. - Exclude init scripts other than systemd from the test-package make it explicit. - Add test subpackage and fix line numbers in patches Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-643=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (x86_64): docker-1.9.1-56.1 docker-debuginfo-1.9.1-56.1 docker-debugsource-1.9.1-56.1 - openSUSE 13.2 (noarch): docker-bash-completion-1.9.1-56.1 docker-test-1.9.1-56.1 docker-zsh-completion-1.9.1-56.1 References: https://www.suse.com/security/cve/CVE-2016-3697.html https://bugzilla.suse.com/976777

1 0

openSUSE-SU-2016:1415-1: moderate: Security update for libreoffice
by opensuse-security＠opensuse.org 27 May '16

27 May '16

openSUSE Security Update: Security update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1415-1 Rating: moderate References: #967014 #967015 Cross-References: CVE-2016-0794 CVE-2016-0795 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This libreoffice update to version 5.0.6.3 fixes the following issues: Security issues fixed: - CVE-2016-0794: multiple lwp issues (boo#967014) - CVE-2016-0795: multiple lwp issues (boo#967015) Bugs fixed: - Version update to 5.0.6.3: * 5.0.6 release, various bugfixes on the 5.0 series, this is last release of the series - Version update to 5.0.5.2: * 91 bugs fixed Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-642=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libreoffice-5.0.6.3-31.3 libreoffice-base-5.0.6.3-31.3 libreoffice-base-debuginfo-5.0.6.3-31.3 libreoffice-base-drivers-mysql-5.0.6.3-31.3 libreoffice-base-drivers-mysql-debuginfo-5.0.6.3-31.3 libreoffice-base-drivers-postgresql-5.0.6.3-31.3 libreoffice-base-drivers-postgresql-debuginfo-5.0.6.3-31.3 libreoffice-calc-5.0.6.3-31.3 libreoffice-calc-debuginfo-5.0.6.3-31.3 libreoffice-calc-extensions-5.0.6.3-31.3 libreoffice-debuginfo-5.0.6.3-31.3 libreoffice-debugsource-5.0.6.3-31.3 libreoffice-draw-5.0.6.3-31.3 libreoffice-draw-debuginfo-5.0.6.3-31.3 libreoffice-filters-optional-5.0.6.3-31.3 libreoffice-gnome-5.0.6.3-31.3 libreoffice-gnome-debuginfo-5.0.6.3-31.3 libreoffice-gtk3-5.0.6.3-31.3 libreoffice-gtk3-debuginfo-5.0.6.3-31.3 libreoffice-impress-5.0.6.3-31.3 libreoffice-impress-debuginfo-5.0.6.3-31.3 libreoffice-kde4-5.0.6.3-31.3 libreoffice-kde4-debuginfo-5.0.6.3-31.3 libreoffice-mailmerge-5.0.6.3-31.3 libreoffice-math-5.0.6.3-31.3 libreoffice-math-debuginfo-5.0.6.3-31.3 libreoffice-officebean-5.0.6.3-31.3 libreoffice-officebean-debuginfo-5.0.6.3-31.3 libreoffice-pyuno-5.0.6.3-31.3 libreoffice-pyuno-debuginfo-5.0.6.3-31.3 libreoffice-sdk-5.0.6.3-31.3 libreoffice-sdk-debuginfo-5.0.6.3-31.3 libreoffice-sdk-doc-5.0.6.3-31.3 libreoffice-writer-5.0.6.3-31.3 libreoffice-writer-debuginfo-5.0.6.3-31.3 libreoffice-writer-extensions-5.0.6.3-31.3 - openSUSE 13.2 (noarch): libreoffice-branding-upstream-5.0.6.3-31.3 libreoffice-icon-theme-breeze-5.0.6.3-31.3 libreoffice-icon-theme-galaxy-5.0.6.3-31.3 libreoffice-icon-theme-hicontrast-5.0.6.3-31.3 libreoffice-icon-theme-oxygen-5.0.6.3-31.3 libreoffice-icon-theme-sifr-5.0.6.3-31.3 libreoffice-icon-theme-tango-5.0.6.3-31.3 libreoffice-l10n-af-5.0.6.3-31.3 libreoffice-l10n-ar-5.0.6.3-31.3 libreoffice-l10n-as-5.0.6.3-31.3 libreoffice-l10n-bg-5.0.6.3-31.3 libreoffice-l10n-bn-5.0.6.3-31.3 libreoffice-l10n-br-5.0.6.3-31.3 libreoffice-l10n-ca-5.0.6.3-31.3 libreoffice-l10n-cs-5.0.6.3-31.3 libreoffice-l10n-cy-5.0.6.3-31.3 libreoffice-l10n-da-5.0.6.3-31.3 libreoffice-l10n-de-5.0.6.3-31.3 libreoffice-l10n-dz-5.0.6.3-31.3 libreoffice-l10n-el-5.0.6.3-31.3 libreoffice-l10n-en-5.0.6.3-31.3 libreoffice-l10n-es-5.0.6.3-31.3 libreoffice-l10n-et-5.0.6.3-31.3 libreoffice-l10n-eu-5.0.6.3-31.3 libreoffice-l10n-fa-5.0.6.3-31.3 libreoffice-l10n-fi-5.0.6.3-31.3 libreoffice-l10n-fr-5.0.6.3-31.3 libreoffice-l10n-ga-5.0.6.3-31.3 libreoffice-l10n-gl-5.0.6.3-31.3 libreoffice-l10n-gu-5.0.6.3-31.3 libreoffice-l10n-he-5.0.6.3-31.3 libreoffice-l10n-hi-5.0.6.3-31.3 libreoffice-l10n-hr-5.0.6.3-31.3 libreoffice-l10n-hu-5.0.6.3-31.3 libreoffice-l10n-it-5.0.6.3-31.3 libreoffice-l10n-ja-5.0.6.3-31.3 libreoffice-l10n-kk-5.0.6.3-31.3 libreoffice-l10n-kn-5.0.6.3-31.3 libreoffice-l10n-ko-5.0.6.3-31.3 libreoffice-l10n-lt-5.0.6.3-31.3 libreoffice-l10n-lv-5.0.6.3-31.3 libreoffice-l10n-mai-5.0.6.3-31.3 libreoffice-l10n-ml-5.0.6.3-31.3 libreoffice-l10n-mr-5.0.6.3-31.3 libreoffice-l10n-nb-5.0.6.3-31.3 libreoffice-l10n-nl-5.0.6.3-31.3 libreoffice-l10n-nn-5.0.6.3-31.3 libreoffice-l10n-nr-5.0.6.3-31.3 libreoffice-l10n-nso-5.0.6.3-31.3 libreoffice-l10n-or-5.0.6.3-31.3 libreoffice-l10n-pa-5.0.6.3-31.3 libreoffice-l10n-pl-5.0.6.3-31.3 libreoffice-l10n-pt-BR-5.0.6.3-31.3 libreoffice-l10n-pt-PT-5.0.6.3-31.3 libreoffice-l10n-ro-5.0.6.3-31.3 libreoffice-l10n-ru-5.0.6.3-31.3 libreoffice-l10n-si-5.0.6.3-31.3 libreoffice-l10n-sk-5.0.6.3-31.3 libreoffice-l10n-sl-5.0.6.3-31.3 libreoffice-l10n-sr-5.0.6.3-31.3 libreoffice-l10n-ss-5.0.6.3-31.3 libreoffice-l10n-st-5.0.6.3-31.3 libreoffice-l10n-sv-5.0.6.3-31.3 libreoffice-l10n-ta-5.0.6.3-31.3 libreoffice-l10n-te-5.0.6.3-31.3 libreoffice-l10n-th-5.0.6.3-31.3 libreoffice-l10n-tn-5.0.6.3-31.3 libreoffice-l10n-tr-5.0.6.3-31.3 libreoffice-l10n-ts-5.0.6.3-31.3 libreoffice-l10n-uk-5.0.6.3-31.3 libreoffice-l10n-ve-5.0.6.3-31.3 libreoffice-l10n-xh-5.0.6.3-31.3 libreoffice-l10n-zh-Hans-5.0.6.3-31.3 libreoffice-l10n-zh-Hant-5.0.6.3-31.3 libreoffice-l10n-zu-5.0.6.3-31.3 References: https://www.suse.com/security/cve/CVE-2016-0794.html https://www.suse.com/security/cve/CVE-2016-0795.html https://bugzilla.suse.com/967014 https://bugzilla.suse.com/967015

1 0

openSUSE-SU-2016:1414-1: moderate: Security update for systemd
by opensuse-security＠opensuse.org 27 May '16

27 May '16

openSUSE Security Update: Security update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1414-1 Rating: moderate References: #959886 #960158 #963230 #965897 #967122 #970423 #970860 #972612 #972727 #973848 #976766 #978275 Cross-References: CVE-2014-9770 CVE-2015-8842 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has 10 fixes is now available. Description: This update for SystemD provides fixes and enhancements. The following security issue has been fixed: - Don't allow read access to journal files to users. (bsc#972612, CVE-2014-9770, CVE-2015-8842) The following non-security issues have been fixed: - Restore initrd-udevadm-cleanup-db.service. (bsc#978275, bsc#976766) - Incorrect permissions set after boot on journal files. (bsc#973848) - Exclude device-mapper from block device ownership event locking. (bsc#972727) - Explicitly set mode for /run/log. - Don't apply sgid and executable bit to journal files, only the directories they are contained in. - Add ability to mask access mode by pre-existing access mode on files/directories. - No need to pass --all if inactive is explicitly requested in list-units. (bsc#967122) - Fix automount option and don't start associated mount unit at boot. (bsc#970423) - Support more than just power-gpio-key. (fate#318444, bsc#970860) - Add standard gpio power button support. (fate#318444, bsc#970860) - Downgrade warnings about wanted unit which are not found. (bsc#960158) - Shorten hostname before checking for trailing dot. (bsc#965897) - Remove WorkingDirectory parameter from emergency, rescue and console-shell.service. (bsc#959886) - Don't ship boot.udev and systemd-journald.init anymore. - Revert "log: honour the kernel's quiet cmdline argument". (bsc#963230) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-648=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libgudev-1_0-0-210-92.1 libgudev-1_0-0-debuginfo-210-92.1 libgudev-1_0-devel-210-92.1 libudev-devel-210-92.1 libudev-mini-devel-210-92.1 libudev-mini1-210-92.1 libudev-mini1-debuginfo-210-92.1 libudev1-210-92.1 libudev1-debuginfo-210-92.1 nss-myhostname-210-92.1 nss-myhostname-debuginfo-210-92.1 systemd-210-92.1 systemd-debuginfo-210-92.1 systemd-debugsource-210-92.1 systemd-devel-210-92.1 systemd-journal-gateway-210-92.1 systemd-journal-gateway-debuginfo-210-92.1 systemd-logger-210-92.1 systemd-mini-210-92.1 systemd-mini-debuginfo-210-92.1 systemd-mini-debugsource-210-92.1 systemd-mini-devel-210-92.1 systemd-mini-sysvinit-210-92.1 systemd-sysvinit-210-92.1 typelib-1_0-GUdev-1_0-210-92.1 udev-210-92.1 udev-debuginfo-210-92.1 udev-mini-210-92.1 udev-mini-debuginfo-210-92.1 - openSUSE Leap 42.1 (noarch): systemd-bash-completion-210-92.1 - openSUSE Leap 42.1 (x86_64): libgudev-1_0-0-32bit-210-92.1 libgudev-1_0-0-debuginfo-32bit-210-92.1 libudev1-32bit-210-92.1 libudev1-debuginfo-32bit-210-92.1 nss-myhostname-32bit-210-92.1 nss-myhostname-debuginfo-32bit-210-92.1 systemd-32bit-210-92.1 systemd-debuginfo-32bit-210-92.1 References: https://www.suse.com/security/cve/CVE-2014-9770.html https://www.suse.com/security/cve/CVE-2015-8842.html https://bugzilla.suse.com/959886 https://bugzilla.suse.com/960158 https://bugzilla.suse.com/963230 https://bugzilla.suse.com/965897 https://bugzilla.suse.com/967122 https://bugzilla.suse.com/970423 https://bugzilla.suse.com/970860 https://bugzilla.suse.com/972612 https://bugzilla.suse.com/972727 https://bugzilla.suse.com/973848 https://bugzilla.suse.com/976766 https://bugzilla.suse.com/978275

1 0

openSUSE-RU-2016:1412-1: moderate: Recommended update for kernel-firmware
by maintenance＠opensuse.org 27 May '16

27 May '16

openSUSE Recommended Update: Recommended update for kernel-firmware ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1412-1 Rating: moderate References: #958562 #961416 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for kernel-firmware fixes the following issues: - radeon: Update CIK UVD firmware - ath10k: QCA6174 hw2.1: Update firmware-5.bin to SW_RM.1.1.1-00157-QCARMSWPZ-1 - ath10k: QCA6174 hw2.1: Add board-2.bin - ath10k: QCA6174 hw3.0: Add board-2.bin - ath10k: QCA9377 hw1.0: Add firmware and board files - amdgpu: Update CZ to new UVD fw that supports 40 sessions - linux-firmware: Update firmware file for Intel Bluetooth 8265 - linux-firmware: Update firmware patch for Intel Bluetooth 7265 (D1) - usb: host: xhci-plat: Add firmware for the R-Car M3-W xHCI controllers - wl18xx: Update firmware file - linux-firmware: intel: Update Skylake audio firmware - linux-firmware/i915: Major GuC release for Skylake - ver 6.1 - linux-firmware: Update AMD microcode patch firmware - Update radeon ucode images - Update amdgpu ucode images - Add amdgpu ucode images for Polaris family asics - radeon: Revert last kaveri mec ucode update - Add _service to make updating more easy - Update firmware patch for Intel Bluetooth 7265 (D1) - rtlwifi: v35 firmware for rtl8723bu - qed: Add firmware 8.7.3.0. - Clarified licensing terms for the current ath9k_htc firmware - brcm: Add firmware for BCM4350 rev 5 - Fix permissions on brcm/brcmfmac4371-pcie.bin - Add a symlink from qat_mmp.bin to its new file name - Add fw for new qat devices - WHENCE: Add version information for hfi1 - Update Skylake audio firmware - moxa: Refer to LICENCE.moxa for mxuport driver - moxa: Add firmware for Moxa 11x0 USB Serial devices - iwlwifi: Replace 7265D-10.ucode by 7265-10.ucode - Update Intel OPA hfi1 firmware - Update Marvell USB8797-B0 firmware image - Update Marvell 8897-B0 firmware images to 7.p53 - Update Marvell 8897-B0 firmware images to 7.p18 - Add Marvell SD/USB8801 B0 firmware images - Fix the Supplements dependency of ucode-amd. - WHENCE: Use https://linuxtv.org for LinuxTV URLs - Add firmware for mt7601u. version 34. - brcm: Add initial firmware for bcm4371 11ac wifi device - brcm: Update firmware for bcm43602 device - WHENCE: Remove claim that qed and bfa/bna firmware came from kernel source - WHENCE: Correct filename of qed firmware - Fix permissions on qed_init_values_zipped-8.4.2.0.bin - qla2xxx: Update firmware version to 8.03.00 - bnx2x: Add FW 7.13.1.0. - Merge tag 'iwlwifi-fw-2015-11-18' (boo#961416) - iwlwifi: Add new -16 firmware for iwlmvm devices - linux-firmware: Update firmware patch for Intel Bluetooth 7265 (C0/D0) - qed: Add FW 8.4.2.0 - Fix WHENCE, which for some reason became executable - Fix dependencies for initrd macros and ucode-amd (boo#958562) - Call missing initrd macro at postun (boo#958562) - radeon/amdgpu: Update to latest firmware - Remove executable bit from some firmware - Add Skylake audio firmware - brcm: Update firmware for the BCM4356 PCIe device - brcm: Adding firmware for BCM4350 PCIe device - New minor DMC release for Skylake - ver1_23 (already existed in the package, old tarball dropped) - Removing old Skylake DMC - Add FW binary used by mwlwifi driver - ath10k: QCA99X0 hw2.0: Add firmware 10.4.1.00030-1 and board.bin - ath10k: QCA6174 hw3.0: Add WLAN.RM.2.0-00180-QCARMSWPZ-1 - ath10k: QCA6174 hw2.1: Add firmware WLAN.RM.1.1-00141 and board.bin - ath10k: QCA988X hw2.0: Add firmware 10.2.4.70.9-2 - ath10k: QCA988X hw2.0: Add board.bin - Add firmware patch for Intel Bluetooth 7265 (D1) - brcmfmac: Firmware refresh for BCM43602 PCIE devices - Add support for the R-Car H3 xHCI controllers - Refresh / fix WHENCE and license descriptions Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-644=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): kernel-firmware-20160503-3.1 ucode-amd-20160503-3.1 References: https://bugzilla.suse.com/958562 https://bugzilla.suse.com/961416

1 0

openSUSE-RU-2016:1411-1: important: Recommended update for open-iscsi
by maintenance＠opensuse.org 27 May '16

27 May '16

openSUSE Recommended Update: Recommended update for open-iscsi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1411-1 Rating: important References: #974102 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for open-iscsi fixes the following issue: - Fix possible data corruption with iSCSI switch port flicker (bsc#974102) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-646=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): iscsiuio-0.7.8.2-40.1 iscsiuio-debuginfo-0.7.8.2-40.1 open-iscsi-2.0.873-40.1 open-iscsi-debuginfo-2.0.873-40.1 open-iscsi-debugsource-2.0.873-40.1 open-isns-0.90-40.1 open-isns-debuginfo-0.90-40.1 References: https://bugzilla.suse.com/974102

1 0

openSUSE-RU-2016:1410-1: moderate: Recommended update for clamav
by maintenance＠opensuse.org 27 May '16

27 May '16

openSUSE Recommended Update: Recommended update for clamav ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1410-1 Rating: moderate References: #978459 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for clamav fixes the following issues: - Update to version 0.99.2 (boo#978459) * 7z: Fix for FolderStartPackStreamIndex array index heck * Print all CDBNAME entries for a zip file when using the -z flag. * Try to minimize the err cleanup path * clamunrar: Notice if unpacking comment failed * Signature manual update. * Use temp var for realloc to prevent pointer loss. * Fix debug VI hex truncation * freshclam: Avoid random data in mirrors.dat. * libclamav: Print raw certificate metadata * freshclam manager check return code of strdup. * Additional suppress IP notification when using proxy * Fix download and verification of *.cld through PrivateMirrors * Suppress IP notification when using proxy * Remove redundant mempool assignment * Divide out dumpcerts output for better readability * Fix dconf and option handling for nocert and dumpcert * Patch by Jim Morris to increase clamd's soft file descriptor to its potential maximum on 64-bit systems * Move libfreshclam config to m4/reorganization. * Adding libfreshclam * Add 'cdb' datafile to sigtools list of datafile types. * NULL pointer check. * malloc() NULL pointer check. * clamscan 'block-macros' option. * Initialize cpio name buffer * Initialize mspack decompression buffers * Prevent memory allocations on used pointers (folder objects) * Prevent memory allocations on used pointers (boolvectors) * Initialize ARJ metadata structures * Change cli_malloc with cli_calloc * Check packSizes prior to dereference * Fixed inconsistent folder state on failure * Pre-check on (*unpackSizes) dereference * Fix on pre-checks on dereferenced array * Pre-checks on dereferenced array size values (not =0) * Adding sanity checks to 7z header parsing * Fixed mew source read issue * Documentation update on targets * Filetype consistency * Move llvm option flag handling to new m4 file * hwp5.x: Fix for streams without names Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-645=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): clamav-0.99.2-2.28.1 clamav-debuginfo-0.99.2-2.28.1 clamav-debugsource-0.99.2-2.28.1 References: https://bugzilla.suse.com/978459

1 0

openSUSE-RU-2016:1409-1: moderate: Recommended update for curl
by maintenance＠opensuse.org 27 May '16

27 May '16

openSUSE Recommended Update: Recommended update for curl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1409-1 Rating: moderate References: #915846 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for curl fixes the following issue: - Fix "Network is unreachable" error when ipv6 is not available but ipv4. This fixes the same error in applications using libcurl4 (like zypper). (bsc#915846) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-647=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): curl-7.37.0-10.1 curl-debuginfo-7.37.0-10.1 curl-debugsource-7.37.0-10.1 libcurl-devel-7.37.0-10.1 libcurl4-7.37.0-10.1 libcurl4-debuginfo-7.37.0-10.1 - openSUSE Leap 42.1 (x86_64): libcurl-devel-32bit-7.37.0-10.1 libcurl4-32bit-7.37.0-10.1 libcurl4-debuginfo-32bit-7.37.0-10.1 References: https://bugzilla.suse.com/915846

1 0

openSUSE-RU-2016:1401-1: moderate: Recommended update for kiwi
by maintenance＠opensuse.org 25 May '16

25 May '16

openSUSE Recommended Update: Recommended update for kiwi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1401-1 Rating: moderate References: #946648 #955939 #956484 #957008 #961334 #963276 #964204 #964472 #964474 #965830 #968270 #968475 #968601 #974651 #975898 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 15 recommended fixes can now be installed. Description: This recommended update provides version 7.03.68 for kiwi. For detailed information please refer to the change file. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-641=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kiwi-7.03.68-8.1 kiwi-debugsource-7.03.68-8.1 kiwi-desc-isoboot-7.03.68-8.1 kiwi-desc-isoboot-requires-7.03.68-8.1 kiwi-desc-netboot-7.03.68-8.1 kiwi-desc-netboot-requires-7.03.68-8.1 kiwi-desc-oemboot-7.03.68-8.1 kiwi-desc-oemboot-requires-7.03.68-8.1 kiwi-desc-vmxboot-7.03.68-8.1 kiwi-desc-vmxboot-requires-7.03.68-8.1 kiwi-instsource-7.03.68-8.1 kiwi-pxeboot-7.03.68-8.1 kiwi-templates-7.03.68-8.1 kiwi-tools-7.03.68-8.1 kiwi-tools-debuginfo-7.03.68-8.1 - openSUSE Leap 42.1 (noarch): kiwi-doc-7.03.68-8.1 kiwi-media-requires-7.03.68-8.1 kiwi-requires-7.03.68-8.1 kiwi-test-7.03.68-8.1 References: https://bugzilla.suse.com/946648 https://bugzilla.suse.com/955939 https://bugzilla.suse.com/956484 https://bugzilla.suse.com/957008 https://bugzilla.suse.com/961334 https://bugzilla.suse.com/963276 https://bugzilla.suse.com/964204 https://bugzilla.suse.com/964472 https://bugzilla.suse.com/964474 https://bugzilla.suse.com/965830 https://bugzilla.suse.com/968270 https://bugzilla.suse.com/968475 https://bugzilla.suse.com/968601 https://bugzilla.suse.com/974651 https://bugzilla.suse.com/975898

1 0

openSUSE-RU-2016:1400-1: Recommended update for zopfli
by maintenance＠opensuse.org 25 May '16

25 May '16

openSUSE Recommended Update: Recommended update for zopfli ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1400-1 Rating: low References: #980149 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for zopfli fixes the following issues: - Drop incorrectly generated manpage (boo#980149) - Update to version 1.0.1 * No changelog available Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-634=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libzopfli-devel-1.0.1+git.20160511-5.1 libzopfli1-1.0.1+git.20160511-5.1 libzopfli1-debuginfo-1.0.1+git.20160511-5.1 libzopflipng1-1.0.1+git.20160511-5.1 libzopflipng1-debuginfo-1.0.1+git.20160511-5.1 zopfli-1.0.1+git.20160511-5.1 zopfli-debuginfo-1.0.1+git.20160511-5.1 zopfli-debugsource-1.0.1+git.20160511-5.1 References: https://bugzilla.suse.com/980149

1 0

openSUSE-RU-2016:1399-1: moderate: Recommended update for libgcrypt
by maintenance＠opensuse.org 25 May '16

25 May '16

openSUSE Recommended Update: Recommended update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1399-1 Rating: moderate References: #979629 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libgcrypt fixes the following issues: - make the -hmac package depend on the same version of the library (boo#979629) fips pattern Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-639=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libgcrypt-cavs-1.6.1-8.16.1 libgcrypt-cavs-debuginfo-1.6.1-8.16.1 libgcrypt-debugsource-1.6.1-8.16.1 libgcrypt-devel-1.6.1-8.16.1 libgcrypt-devel-debuginfo-1.6.1-8.16.1 libgcrypt20-1.6.1-8.16.1 libgcrypt20-debuginfo-1.6.1-8.16.1 libgcrypt20-hmac-1.6.1-8.16.1 - openSUSE 13.2 (x86_64): libgcrypt-devel-32bit-1.6.1-8.16.1 libgcrypt-devel-debuginfo-32bit-1.6.1-8.16.1 libgcrypt20-32bit-1.6.1-8.16.1 libgcrypt20-debuginfo-32bit-1.6.1-8.16.1 libgcrypt20-hmac-32bit-1.6.1-8.16.1 References: https://bugzilla.suse.com/979629

1 0

openSUSE-RU-2016:1398-1: moderate: Recommended update for btrfsprogs
by maintenance＠opensuse.org 25 May '16

25 May '16

openSUSE Recommended Update: Recommended update for btrfsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1398-1 Rating: moderate References: #888215 #912170 #956819 #958562 #966257 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update provides version 4.5.3 of btrfsprogs and fixes the following issues: - Add udev rules for dm devices (boo#912170 boo#888215) - Hide min/max macros clashing with gcc 6 (boo#966257) - Fix missing dependency on coreutils for initrd macros (boo#958562) - Call missing initrd macro at post / postun (boo#958562) - Fix mkfs failure on ppc64 (or with sectorsize > 4k) (boo#956819) For a detailed description of all changes, please refer to the changelog. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-636=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): btrfsprogs-4.5.3-13.1 btrfsprogs-debuginfo-4.5.3-13.1 btrfsprogs-debugsource-4.5.3-13.1 libbtrfs-devel-4.5.3-13.1 libbtrfs0-4.5.3-13.1 libbtrfs0-debuginfo-4.5.3-13.1 References: https://bugzilla.suse.com/888215 https://bugzilla.suse.com/912170 https://bugzilla.suse.com/956819 https://bugzilla.suse.com/958562 https://bugzilla.suse.com/966257

1 0

openSUSE-RU-2016:1397-1: moderate: Recommended update for caffeine
by maintenance＠opensuse.org 25 May '16

25 May '16

openSUSE Recommended Update: Recommended update for caffeine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1397-1 Rating: moderate References: #961715 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for caffeine fixes the following issues: - Add coding: utf-8 definition to /usr/bin/caffeine: python2 does need help in knowing how to read the source files (boo#961715). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-637=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): caffeine-2.7.2-5.1 References: https://bugzilla.suse.com/961715

1 0

openSUSE-RU-2016:1396-1: moderate: Recommended update for docker-distribution
by maintenance＠opensuse.org 25 May '16

25 May '16

openSUSE Recommended Update: Recommended update for docker-distribution ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1396-1 Rating: moderate References: #948097 #970507 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for docker-distribution fixes the following issues: - Updated version 2.1.1 to 2.4.0 + New S3 storage driver * The default s3 storage driver is now implemented on top of the official Amazon S3 SDK, boasting major performance and stability goodness. The previous storage is still available, but deprecated. + Garbage Collector * A garbage collector tool has been added to the registry. For more details see the garbage collector documentation. + Tagged Manifest Events * Manifest push and pull events will now include the tag which was used in the operation (if applicable). + Relative URLs * The registry can now be configured to return relative URLs in Location headers. + V1 Signature disabled * With the ongoing adoption of the schema 2 manifest format and deprecation of signatures, this option will improve pull performance by generating and returning a single libtrust signature. + Gotchas * The RADOS storage driver has been removed. The registry can still be used with Ceph as the storage backend using the swift driver in conjunction with the Swift API gateway. * The command line format has changed to support subcommands. To run a registry as before an additional subcommand - serve - is required. * The legacy S3 storage driver, based on adroll/goamz is now deprecated and will be removed in a future release. + Allow uppercase characters in hostnames. + Fix schema1 manifest etag and docker content digest header. + Add option to disable signatures. + To avoid any network use unless necessary, delay establishing authorization. + Extend authChallenger interface to remove type cast. + Enable proxying registries to downgrade fetched manifests to Schema 1. + Support the Image Manifest Version 2, Schema 2 manifest format. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-638=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): docker-distribution-debugsource-2.4.0-3.1 docker-distribution-registry-2.4.0-3.1 docker-distribution-registry-debuginfo-2.4.0-3.1 References: https://bugzilla.suse.com/948097 https://bugzilla.suse.com/970507

1 0

openSUSE-RU-2016:1395-1: moderate: Recommended update for lvm2
by maintenance＠opensuse.org 25 May '16

25 May '16

openSUSE Recommended Update: Recommended update for lvm2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1395-1 Rating: moderate References: #940298 #955529 #960044 #960744 #963427 #966183 #969310 #970439 #971334 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: This update for lvm2 fixes the following issues: - Fix clvmd.ocf and cmirrord to remove "-d" option for cmirrord. (bsc#971334) - Fix clvmd.ocf to add lvmconf --enable-cluster before starting daemon when locking_type is not 3 or use_lvmetad is 1. (bsc#970439) - Fix pvchange returning with exit code 5 if another volume group which is not related to the PVs is exported. (bsc#969310) - Omit some warning messages from pvcreate. (bsc#966183) - Change default locking_dir from "/var/lock/lvm" back to "/run/lvm/lock". (bsc#963427) - Improve pvcreate's error messages to be more informative. (bsc#960744) - Add 'Also=lvm2-lvmetad.socket' to '[Install]' section of lvm2-lvmetad.service to trigger removal of the former when the latter is disabled. (bsc#960044) - Remove verbose message when re-scanning devices. (bsc#955529) - Do not output error message inside retry loops to avoid noisy error message in case of remove failure because device is busy. (bsc#940298) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-640=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): device-mapper-1.02.97-67.1 device-mapper-debuginfo-1.02.97-67.1 device-mapper-devel-1.02.97-67.1 lvm2-2.02.120-67.1 lvm2-clvm-2.02.120-67.1 lvm2-clvm-debuginfo-2.02.120-67.1 lvm2-cmirrord-2.02.120-67.1 lvm2-cmirrord-debuginfo-2.02.120-67.1 lvm2-debuginfo-2.02.120-67.1 lvm2-debugsource-2.02.120-67.1 lvm2-devel-2.02.120-67.1 - openSUSE Leap 42.1 (x86_64): device-mapper-32bit-1.02.97-67.1 device-mapper-debuginfo-32bit-1.02.97-67.1 device-mapper-devel-32bit-1.02.97-67.1 References: https://bugzilla.suse.com/940298 https://bugzilla.suse.com/955529 https://bugzilla.suse.com/960044 https://bugzilla.suse.com/960744 https://bugzilla.suse.com/963427 https://bugzilla.suse.com/966183 https://bugzilla.suse.com/969310 https://bugzilla.suse.com/970439 https://bugzilla.suse.com/971334

1 0

openSUSE-RU-2016:1394-1: moderate: Recommended update for xf86-input-vmmouse
by maintenance＠opensuse.org 25 May '16

25 May '16

openSUSE Recommended Update: Recommended update for xf86-input-vmmouse ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1394-1 Rating: moderate References: #978785 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xf86-input-vmmouse fixes the following issues: - Prevent crash when Uninit() is called due to a not successfully completed PreInit() (boo#978785). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-635=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xf86-input-vmmouse-13.0.0-11.3.1 xf86-input-vmmouse-debuginfo-13.0.0-11.3.1 xf86-input-vmmouse-debugsource-13.0.0-11.3.1 References: https://bugzilla.suse.com/978785

1 0

openSUSE-RU-2016:1393-1: Recommended update for fetchmail
by maintenance＠opensuse.org 25 May '16

25 May '16

openSUSE Recommended Update: Recommended update for fetchmail ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1393-1 Rating: low References: #979534 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fetchmail fixes the following issues: - Made the helper script introduced in last change return exit status 5 on configuration errors instead of 1, which should make it a bit less confusing (boo#979534) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-633=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-633=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): fetchmail-6.3.26-17.1 fetchmail-debuginfo-6.3.26-17.1 fetchmail-debugsource-6.3.26-17.1 fetchmailconf-6.3.26-17.1 - openSUSE 13.2 (i586 x86_64): fetchmail-6.3.26-6.6.1 fetchmail-debuginfo-6.3.26-6.6.1 fetchmail-debugsource-6.3.26-6.6.1 fetchmailconf-6.3.26-6.6.1 References: https://bugzilla.suse.com/979534

1 0

openSUSE-OU-2016:1387-1: Optional update for iperf
by maintenance＠opensuse.org 23 May '16

23 May '16

openSUSE Optional Update: Optional update for iperf ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:1387-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update provides iperf 3.1.2 for the SLE 12 backports project. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-632=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): iperf-3.1.2-2.1 iperf-devel-3.1.2-2.1 libiperf0-3.1.2-2.1 References:

1 0

openSUSE-RU-2016:1383-1: Recommended update for clamav-database
by maintenance＠opensuse.org 23 May '16

23 May '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1383-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh May 16th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-630=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201605160002-93.1 References:

1 0

openSUSE-SU-2016:1382-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 23 May '16

23 May '16

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1382-1 Rating: important References: #957988 #970892 #970911 #970948 #970955 #970956 #970958 #970970 #971124 #971360 #971628 #972174 #973378 #974418 #975868 Cross-References: CVE-2016-2185 CVE-2016-2186 CVE-2016-2188 CVE-2016-2847 CVE-2016-3136 CVE-2016-3137 CVE-2016-3138 CVE-2016-3140 CVE-2016-3156 CVE-2016-3689 CVE-2016-3951 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 11 vulnerabilities and has four fixes is now available. Description: The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-2847: Limit the per-user amount of pages allocated in pipes (bsc#970948). - CVE-2016-3136: mct_u232: add sanity checking in probe (bnc#970955). - CVE-2016-2188: iowarrior: fix oops with malicious USB descriptors (bnc#970956). - CVE-2016-3138: cdc-acm: more sanity checking (bnc#970911). - CVE-2016-3137: cypress_m8: add endpoint sanity check (bnc#970970). - CVE-2016-3951: cdc_ncm: do not call usbnet_link_change from cdc_ncm_bind (bnc#974418). - CVE-2016-3140: digi_acceleport: do sanity checking for the number of ports (bnc#970892). - CVE-2016-2186: powermate: fix oops with malicious USB descriptors (bnc#970958). - CVE-2016-2185: usb_driver_claim_interface: add sanity checking (bnc#971124). - CVE-2016-3689: ims-pcu: sanity check against missing interfaces (bnc#971628). - CVE-2016-3156: ipv4: Do not do expensive useless work during inetdev destroy (bsc#971360). The following non-security bugs were fixed: - ALSA: timer: Call notifier in the same spinlock (bsc#973378). - ALSA: timer: Protect the whole snd_timer_close() with open race (bsc#973378). - ALSA: timer: Sync timer deletion at closing the system timer (bsc#973378). - ALSA: timer: Use mod_timer() for rearming the system timer (bsc#973378). - Backport arm64 patches from SLE12-SP1-ARM - Fix kABI additions for pipe: limit the per-user amount of pages allocated in pipes. - Revert "drm/radeon: call hpd_irq_event on resume" (boo#975868). - Update config files. Enable RTC_HCTOSYS, build I2C_XGENE_SLIMPRO as a module. - backends: guarantee one time reads of shared ring contents (bsc#957988). - ext4: fix races between buffered IO and collapse / insert range (bsc#972174). - ext4: fix races between page faults and hole punching (bsc#972174). - ext4: fix races of writeback with punch hole and zero range (bsc#972174). - ext4: move unlocked dio protection from ext4_alloc_file_blocks() (bsc#972174). - net: thunderx: Use napi_schedule_irqoff() - netback: do not use last request to determine minimum Tx credit (bsc#957988). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-629=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i686 x86_64): kernel-debug-4.1.21-14.2 kernel-debug-base-4.1.21-14.2 kernel-debug-base-debuginfo-4.1.21-14.2 kernel-debug-debuginfo-4.1.21-14.2 kernel-debug-debugsource-4.1.21-14.2 kernel-debug-devel-4.1.21-14.2 kernel-debug-devel-debuginfo-4.1.21-14.2 kernel-ec2-4.1.21-14.2 kernel-ec2-base-4.1.21-14.2 kernel-ec2-base-debuginfo-4.1.21-14.2 kernel-ec2-debuginfo-4.1.21-14.2 kernel-ec2-debugsource-4.1.21-14.2 kernel-ec2-devel-4.1.21-14.2 kernel-pv-4.1.21-14.2 kernel-pv-base-4.1.21-14.2 kernel-pv-base-debuginfo-4.1.21-14.2 kernel-pv-debuginfo-4.1.21-14.2 kernel-pv-debugsource-4.1.21-14.2 kernel-pv-devel-4.1.21-14.2 kernel-vanilla-4.1.21-14.2 kernel-vanilla-debuginfo-4.1.21-14.2 kernel-vanilla-debugsource-4.1.21-14.2 kernel-vanilla-devel-4.1.21-14.2 kernel-xen-4.1.21-14.2 kernel-xen-base-4.1.21-14.2 kernel-xen-base-debuginfo-4.1.21-14.2 kernel-xen-debuginfo-4.1.21-14.2 kernel-xen-debugsource-4.1.21-14.2 kernel-xen-devel-4.1.21-14.2 - openSUSE Leap 42.1 (i586 x86_64): kernel-default-4.1.21-14.2 kernel-default-base-4.1.21-14.2 kernel-default-base-debuginfo-4.1.21-14.2 kernel-default-debuginfo-4.1.21-14.2 kernel-default-debugsource-4.1.21-14.2 kernel-default-devel-4.1.21-14.2 kernel-obs-build-4.1.21-14.4 kernel-obs-build-debugsource-4.1.21-14.4 kernel-obs-qa-4.1.21-14.2 kernel-obs-qa-xen-4.1.21-14.2 kernel-syms-4.1.21-14.2 - openSUSE Leap 42.1 (noarch): kernel-devel-4.1.21-14.2 kernel-docs-4.1.21-14.5 kernel-docs-html-4.1.21-14.5 kernel-docs-pdf-4.1.21-14.5 kernel-macros-4.1.21-14.2 kernel-source-4.1.21-14.2 kernel-source-vanilla-4.1.21-14.2 - openSUSE Leap 42.1 (i686): kernel-pae-4.1.21-14.2 kernel-pae-base-4.1.21-14.2 kernel-pae-base-debuginfo-4.1.21-14.2 kernel-pae-debuginfo-4.1.21-14.2 kernel-pae-debugsource-4.1.21-14.2 kernel-pae-devel-4.1.21-14.2 References: https://www.suse.com/security/cve/CVE-2016-2185.html https://www.suse.com/security/cve/CVE-2016-2186.html https://www.suse.com/security/cve/CVE-2016-2188.html https://www.suse.com/security/cve/CVE-2016-2847.html https://www.suse.com/security/cve/CVE-2016-3136.html https://www.suse.com/security/cve/CVE-2016-3137.html https://www.suse.com/security/cve/CVE-2016-3138.html https://www.suse.com/security/cve/CVE-2016-3140.html https://www.suse.com/security/cve/CVE-2016-3156.html https://www.suse.com/security/cve/CVE-2016-3689.html https://www.suse.com/security/cve/CVE-2016-3951.html https://bugzilla.suse.com/957988 https://bugzilla.suse.com/970892 https://bugzilla.suse.com/970911 https://bugzilla.suse.com/970948 https://bugzilla.suse.com/970955 https://bugzilla.suse.com/970956 https://bugzilla.suse.com/970958 https://bugzilla.suse.com/970970 https://bugzilla.suse.com/971124 https://bugzilla.suse.com/971360 https://bugzilla.suse.com/971628 https://bugzilla.suse.com/972174 https://bugzilla.suse.com/973378 https://bugzilla.suse.com/974418 https://bugzilla.suse.com/975868

1 0

openSUSE-RU-2016:1381-1: moderate: Recommended update for syncthing
by maintenance＠opensuse.org 23 May '16

23 May '16

openSUSE Recommended Update: Recommended update for syncthing ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1381-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for syncthing fixes the following issues: - Update to version 0.12.23: * lib/upgrade: Enforce limits on download archives. * lib/upgrade: Auto upgrade signature should cover version & arch. * gui: angular and angular-translate updates. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-628=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): syncthing-0.12.23-6.1 References:

1 0

openSUSE-OU-2016:1376-1: Optional update for redis
by maintenance＠opensuse.org 20 May '16

20 May '16

openSUSE Optional Update: Optional update for redis ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:1376-1 Rating: low References: #798455 #835815 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has two optional fixes can now be installed. Description: This update adds redis version 3.0.7 to the SLE 12 backports project. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-627=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): redis-3.0.7-2.1 References: https://bugzilla.suse.com/798455 https://bugzilla.suse.com/835815

1 0

openSUSE-SU-2016:1373-1: important: Security update for php5
by opensuse-security＠opensuse.org 20 May '16

20 May '16

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1373-1 Rating: important References: #976996 #976997 #977000 #977003 #977005 Cross-References: CVE-2015-8866 CVE-2015-8867 CVE-2016-4070 CVE-2016-4071 CVE-2016-4073 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for php5 fixes the following security issues: - CVE-2016-4073: A remote attacker could have caused denial of service, or possibly execute arbitrary code, due to incorrect handling of string length calculations in mb_strcut() (bsc#977003) - CVE-2015-8867: The PHP function openssl_random_pseudo_bytes() did not return cryptographically secure random bytes (bsc#977005) - CVE-2016-4070: The libxml_disable_entity_loader() setting was shared between threads, which could have resulted in XML external entity injection and entity expansion issues (bsc#976997) - CVE-2015-8866: A remote attacker could have caused denial of service due to incorrect handling of large strings in php_raw_url_encode() (bsc#976996) - CVE-2016-4071: A remote attacker could have caused denial of service, or possibly execute arbitrary code, due to incorrect handling of string formatting in php_snmp_error() (bsc#977000) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-626=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): apache2-mod_php5-5.5.14-47.1 apache2-mod_php5-debuginfo-5.5.14-47.1 php5-5.5.14-47.1 php5-bcmath-5.5.14-47.1 php5-bcmath-debuginfo-5.5.14-47.1 php5-bz2-5.5.14-47.1 php5-bz2-debuginfo-5.5.14-47.1 php5-calendar-5.5.14-47.1 php5-calendar-debuginfo-5.5.14-47.1 php5-ctype-5.5.14-47.1 php5-ctype-debuginfo-5.5.14-47.1 php5-curl-5.5.14-47.1 php5-curl-debuginfo-5.5.14-47.1 php5-dba-5.5.14-47.1 php5-dba-debuginfo-5.5.14-47.1 php5-debuginfo-5.5.14-47.1 php5-debugsource-5.5.14-47.1 php5-devel-5.5.14-47.1 php5-dom-5.5.14-47.1 php5-dom-debuginfo-5.5.14-47.1 php5-enchant-5.5.14-47.1 php5-enchant-debuginfo-5.5.14-47.1 php5-exif-5.5.14-47.1 php5-exif-debuginfo-5.5.14-47.1 php5-fastcgi-5.5.14-47.1 php5-fastcgi-debuginfo-5.5.14-47.1 php5-fileinfo-5.5.14-47.1 php5-fileinfo-debuginfo-5.5.14-47.1 php5-firebird-5.5.14-47.1 php5-firebird-debuginfo-5.5.14-47.1 php5-fpm-5.5.14-47.1 php5-fpm-debuginfo-5.5.14-47.1 php5-ftp-5.5.14-47.1 php5-ftp-debuginfo-5.5.14-47.1 php5-gd-5.5.14-47.1 php5-gd-debuginfo-5.5.14-47.1 php5-gettext-5.5.14-47.1 php5-gettext-debuginfo-5.5.14-47.1 php5-gmp-5.5.14-47.1 php5-gmp-debuginfo-5.5.14-47.1 php5-iconv-5.5.14-47.1 php5-iconv-debuginfo-5.5.14-47.1 php5-imap-5.5.14-47.1 php5-imap-debuginfo-5.5.14-47.1 php5-intl-5.5.14-47.1 php5-intl-debuginfo-5.5.14-47.1 php5-json-5.5.14-47.1 php5-json-debuginfo-5.5.14-47.1 php5-ldap-5.5.14-47.1 php5-ldap-debuginfo-5.5.14-47.1 php5-mbstring-5.5.14-47.1 php5-mbstring-debuginfo-5.5.14-47.1 php5-mcrypt-5.5.14-47.1 php5-mcrypt-debuginfo-5.5.14-47.1 php5-mssql-5.5.14-47.1 php5-mssql-debuginfo-5.5.14-47.1 php5-mysql-5.5.14-47.1 php5-mysql-debuginfo-5.5.14-47.1 php5-odbc-5.5.14-47.1 php5-odbc-debuginfo-5.5.14-47.1 php5-opcache-5.5.14-47.1 php5-opcache-debuginfo-5.5.14-47.1 php5-openssl-5.5.14-47.1 php5-openssl-debuginfo-5.5.14-47.1 php5-pcntl-5.5.14-47.1 php5-pcntl-debuginfo-5.5.14-47.1 php5-pdo-5.5.14-47.1 php5-pdo-debuginfo-5.5.14-47.1 php5-pgsql-5.5.14-47.1 php5-pgsql-debuginfo-5.5.14-47.1 php5-phar-5.5.14-47.1 php5-phar-debuginfo-5.5.14-47.1 php5-posix-5.5.14-47.1 php5-posix-debuginfo-5.5.14-47.1 php5-pspell-5.5.14-47.1 php5-pspell-debuginfo-5.5.14-47.1 php5-readline-5.5.14-47.1 php5-readline-debuginfo-5.5.14-47.1 php5-shmop-5.5.14-47.1 php5-shmop-debuginfo-5.5.14-47.1 php5-snmp-5.5.14-47.1 php5-snmp-debuginfo-5.5.14-47.1 php5-soap-5.5.14-47.1 php5-soap-debuginfo-5.5.14-47.1 php5-sockets-5.5.14-47.1 php5-sockets-debuginfo-5.5.14-47.1 php5-sqlite-5.5.14-47.1 php5-sqlite-debuginfo-5.5.14-47.1 php5-suhosin-5.5.14-47.1 php5-suhosin-debuginfo-5.5.14-47.1 php5-sysvmsg-5.5.14-47.1 php5-sysvmsg-debuginfo-5.5.14-47.1 php5-sysvsem-5.5.14-47.1 php5-sysvsem-debuginfo-5.5.14-47.1 php5-sysvshm-5.5.14-47.1 php5-sysvshm-debuginfo-5.5.14-47.1 php5-tidy-5.5.14-47.1 php5-tidy-debuginfo-5.5.14-47.1 php5-tokenizer-5.5.14-47.1 php5-tokenizer-debuginfo-5.5.14-47.1 php5-wddx-5.5.14-47.1 php5-wddx-debuginfo-5.5.14-47.1 php5-xmlreader-5.5.14-47.1 php5-xmlreader-debuginfo-5.5.14-47.1 php5-xmlrpc-5.5.14-47.1 php5-xmlrpc-debuginfo-5.5.14-47.1 php5-xmlwriter-5.5.14-47.1 php5-xmlwriter-debuginfo-5.5.14-47.1 php5-xsl-5.5.14-47.1 php5-xsl-debuginfo-5.5.14-47.1 php5-zip-5.5.14-47.1 php5-zip-debuginfo-5.5.14-47.1 php5-zlib-5.5.14-47.1 php5-zlib-debuginfo-5.5.14-47.1 - openSUSE Leap 42.1 (noarch): php5-pear-5.5.14-47.1 References: https://www.suse.com/security/cve/CVE-2015-8866.html https://www.suse.com/security/cve/CVE-2015-8867.html https://www.suse.com/security/cve/CVE-2016-4070.html https://www.suse.com/security/cve/CVE-2016-4071.html https://www.suse.com/security/cve/CVE-2016-4073.html https://bugzilla.suse.com/976996 https://bugzilla.suse.com/976997 https://bugzilla.suse.com/977000 https://bugzilla.suse.com/977003 https://bugzilla.suse.com/977005

1 0

openSUSE-RU-2016:1372-1: important: Recommended update for pure-ftpd
by maintenance＠opensuse.org 20 May '16

20 May '16

openSUSE Recommended Update: Recommended update for pure-ftpd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1372-1 Rating: important References: #872430 #971980 #979363 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This recommended update for pure-ftpd fixes the following issues: - boo#872430: An issue in the systemd unit file prevented the service from starting - boo#971980: conf files in /etc/security/limits.d would cause segmentation faults when used with pureftpd and pam_limits - boo#979363: Fix pure-ftpd with LDAP auth In addition, pure-ftpd was updated to 1.0.42 with a number of upstream bug fixes. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-623=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): pure-ftpd-1.0.42-5.1 pure-ftpd-debuginfo-1.0.42-5.1 pure-ftpd-debugsource-1.0.42-5.1 References: https://bugzilla.suse.com/872430 https://bugzilla.suse.com/971980 https://bugzilla.suse.com/979363

1 0

openSUSE-RU-2016:1371-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 20 May '16

20 May '16

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1371-1 Rating: moderate References: #965872 #973054 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for resource-agents fixes the following issues: - symlink: Handle missing directories in target (bsc#973054) - SAPInstance: Update version support statement (bsc#965872) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-625=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ldirectord-3.9.6+git.1442374860.7f3628a-10.1 monitoring-plugins-metadata-3.9.6+git.1442374860.7f3628a-10.1 resource-agents-3.9.6+git.1442374860.7f3628a-10.1 resource-agents-debuginfo-3.9.6+git.1442374860.7f3628a-10.1 resource-agents-debugsource-3.9.6+git.1442374860.7f3628a-10.1 References: https://bugzilla.suse.com/965872 https://bugzilla.suse.com/973054

1 0

openSUSE-SU-2016:1370-1: moderate: Security update for libksba
by opensuse-security＠opensuse.org 20 May '16

20 May '16

openSUSE Security Update: Security update for libksba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1370-1 Rating: moderate References: #979261 Cross-References: CVE-2016-4574 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libksba fixes the following issues: Security issue fixed: - boo#979261: OOB read access bugs remote DoS - CVE-2016-4574: off-by-one OOB read access (incomplete fix for CVE-2016-4356) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-624=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libksba-debugsource-1.3.1-12.1 libksba-devel-1.3.1-12.1 libksba8-1.3.1-12.1 libksba8-debuginfo-1.3.1-12.1 References: https://www.suse.com/security/cve/CVE-2016-4574.html https://bugzilla.suse.com/979261

1 0

openSUSE-SU-2016:1357-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 19 May '16

19 May '16

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1357-1 Rating: moderate References: #977991 #977992 #977994 #978827 #978828 #978829 #978830 Cross-References: CVE-2016-4342 CVE-2016-4343 CVE-2016-4346 CVE-2016-4537 CVE-2016-4538 CVE-2016-4539 CVE-2016-4540 CVE-2016-4541 CVE-2016-4542 CVE-2016-4543 CVE-2016-4544 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update of php5 fixes the following issues: Security issues fixed: - CVE-2016-4342: Heap corruption in tar/zip/phar parser (bsc#977991) - CVE-2016-4343: Uninitialized pointer in phar_make_dirstream() (bsc#977992) - CVE-2016-4346: heap overflow in ext/standard/string.c (bsc#977994) - CVE-2016-4537, CVE-2016-4538: bcpowmod accepts negative scale causing heap buffer overflow corrupting _one_ definition (bsc#978827) - CVE-2016-4539: Malformed input causes segmentation fault in xml_parse_into_struct() function (bsc#978828) - CVE-2016-4540, CVE-2016-4541: Out-of-bounds memory read in zif_grapheme_stripos when given negative offset (bsc#978829) - CVE-2016-4542, CVE-2016-4543, CVE-2016-4544: Out-of-bounds heap memory read in exif_read_data() caused by malformed input (bsc#978830) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-613=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_php5-5.6.1-61.1 apache2-mod_php5-debuginfo-5.6.1-61.1 php5-5.6.1-61.1 php5-bcmath-5.6.1-61.1 php5-bcmath-debuginfo-5.6.1-61.1 php5-bz2-5.6.1-61.1 php5-bz2-debuginfo-5.6.1-61.1 php5-calendar-5.6.1-61.1 php5-calendar-debuginfo-5.6.1-61.1 php5-ctype-5.6.1-61.1 php5-ctype-debuginfo-5.6.1-61.1 php5-curl-5.6.1-61.1 php5-curl-debuginfo-5.6.1-61.1 php5-dba-5.6.1-61.1 php5-dba-debuginfo-5.6.1-61.1 php5-debuginfo-5.6.1-61.1 php5-debugsource-5.6.1-61.1 php5-devel-5.6.1-61.1 php5-dom-5.6.1-61.1 php5-dom-debuginfo-5.6.1-61.1 php5-enchant-5.6.1-61.1 php5-enchant-debuginfo-5.6.1-61.1 php5-exif-5.6.1-61.1 php5-exif-debuginfo-5.6.1-61.1 php5-fastcgi-5.6.1-61.1 php5-fastcgi-debuginfo-5.6.1-61.1 php5-fileinfo-5.6.1-61.1 php5-fileinfo-debuginfo-5.6.1-61.1 php5-firebird-5.6.1-61.1 php5-firebird-debuginfo-5.6.1-61.1 php5-fpm-5.6.1-61.1 php5-fpm-debuginfo-5.6.1-61.1 php5-ftp-5.6.1-61.1 php5-ftp-debuginfo-5.6.1-61.1 php5-gd-5.6.1-61.1 php5-gd-debuginfo-5.6.1-61.1 php5-gettext-5.6.1-61.1 php5-gettext-debuginfo-5.6.1-61.1 php5-gmp-5.6.1-61.1 php5-gmp-debuginfo-5.6.1-61.1 php5-iconv-5.6.1-61.1 php5-iconv-debuginfo-5.6.1-61.1 php5-imap-5.6.1-61.1 php5-imap-debuginfo-5.6.1-61.1 php5-intl-5.6.1-61.1 php5-intl-debuginfo-5.6.1-61.1 php5-json-5.6.1-61.1 php5-json-debuginfo-5.6.1-61.1 php5-ldap-5.6.1-61.1 php5-ldap-debuginfo-5.6.1-61.1 php5-mbstring-5.6.1-61.1 php5-mbstring-debuginfo-5.6.1-61.1 php5-mcrypt-5.6.1-61.1 php5-mcrypt-debuginfo-5.6.1-61.1 php5-mssql-5.6.1-61.1 php5-mssql-debuginfo-5.6.1-61.1 php5-mysql-5.6.1-61.1 php5-mysql-debuginfo-5.6.1-61.1 php5-odbc-5.6.1-61.1 php5-odbc-debuginfo-5.6.1-61.1 php5-opcache-5.6.1-61.1 php5-opcache-debuginfo-5.6.1-61.1 php5-openssl-5.6.1-61.1 php5-openssl-debuginfo-5.6.1-61.1 php5-pcntl-5.6.1-61.1 php5-pcntl-debuginfo-5.6.1-61.1 php5-pdo-5.6.1-61.1 php5-pdo-debuginfo-5.6.1-61.1 php5-pgsql-5.6.1-61.1 php5-pgsql-debuginfo-5.6.1-61.1 php5-phar-5.6.1-61.1 php5-phar-debuginfo-5.6.1-61.1 php5-posix-5.6.1-61.1 php5-posix-debuginfo-5.6.1-61.1 php5-pspell-5.6.1-61.1 php5-pspell-debuginfo-5.6.1-61.1 php5-readline-5.6.1-61.1 php5-readline-debuginfo-5.6.1-61.1 php5-shmop-5.6.1-61.1 php5-shmop-debuginfo-5.6.1-61.1 php5-snmp-5.6.1-61.1 php5-snmp-debuginfo-5.6.1-61.1 php5-soap-5.6.1-61.1 php5-soap-debuginfo-5.6.1-61.1 php5-sockets-5.6.1-61.1 php5-sockets-debuginfo-5.6.1-61.1 php5-sqlite-5.6.1-61.1 php5-sqlite-debuginfo-5.6.1-61.1 php5-suhosin-5.6.1-61.1 php5-suhosin-debuginfo-5.6.1-61.1 php5-sysvmsg-5.6.1-61.1 php5-sysvmsg-debuginfo-5.6.1-61.1 php5-sysvsem-5.6.1-61.1 php5-sysvsem-debuginfo-5.6.1-61.1 php5-sysvshm-5.6.1-61.1 php5-sysvshm-debuginfo-5.6.1-61.1 php5-tidy-5.6.1-61.1 php5-tidy-debuginfo-5.6.1-61.1 php5-tokenizer-5.6.1-61.1 php5-tokenizer-debuginfo-5.6.1-61.1 php5-wddx-5.6.1-61.1 php5-wddx-debuginfo-5.6.1-61.1 php5-xmlreader-5.6.1-61.1 php5-xmlreader-debuginfo-5.6.1-61.1 php5-xmlrpc-5.6.1-61.1 php5-xmlrpc-debuginfo-5.6.1-61.1 php5-xmlwriter-5.6.1-61.1 php5-xmlwriter-debuginfo-5.6.1-61.1 php5-xsl-5.6.1-61.1 php5-xsl-debuginfo-5.6.1-61.1 php5-zip-5.6.1-61.1 php5-zip-debuginfo-5.6.1-61.1 php5-zlib-5.6.1-61.1 php5-zlib-debuginfo-5.6.1-61.1 - openSUSE 13.2 (noarch): php5-pear-5.6.1-61.1 References: https://www.suse.com/security/cve/CVE-2016-4342.html https://www.suse.com/security/cve/CVE-2016-4343.html https://www.suse.com/security/cve/CVE-2016-4346.html https://www.suse.com/security/cve/CVE-2016-4537.html https://www.suse.com/security/cve/CVE-2016-4538.html https://www.suse.com/security/cve/CVE-2016-4539.html https://www.suse.com/security/cve/CVE-2016-4540.html https://www.suse.com/security/cve/CVE-2016-4541.html https://www.suse.com/security/cve/CVE-2016-4542.html https://www.suse.com/security/cve/CVE-2016-4543.html https://www.suse.com/security/cve/CVE-2016-4544.html https://bugzilla.suse.com/977991 https://bugzilla.suse.com/977992 https://bugzilla.suse.com/977994 https://bugzilla.suse.com/978827 https://bugzilla.suse.com/978828 https://bugzilla.suse.com/978829 https://bugzilla.suse.com/978830

1 0

openSUSE-RU-2016:1356-1: moderate: Recommended update for augeas
by maintenance＠opensuse.org 19 May '16

19 May '16

openSUSE Recommended Update: Recommended update for augeas ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1356-1 Rating: moderate References: #933210 #975729 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for augeas fixes the following issues: - Improved inputrc, host.conf and shellvars lenses. (bsc#975729) - Temporarily rule out everything in if-up.d and if-down.d from the shellvars lens. (bsc#933210) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-612=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): augeas-1.2.0-8.1 augeas-debuginfo-1.2.0-8.1 augeas-debugsource-1.2.0-8.1 augeas-devel-1.2.0-8.1 augeas-lense-tests-1.2.0-8.1 augeas-lenses-1.2.0-8.1 libaugeas0-1.2.0-8.1 libaugeas0-debuginfo-1.2.0-8.1 - openSUSE Leap 42.1 (x86_64): augeas-devel-32bit-1.2.0-8.1 libaugeas0-32bit-1.2.0-8.1 libaugeas0-debuginfo-32bit-1.2.0-8.1 References: https://bugzilla.suse.com/933210 https://bugzilla.suse.com/975729

1 0

openSUSE-RU-2016:1354-1: moderate: Recommended update for ocfs2-tools
by maintenance＠opensuse.org 18 May '16

18 May '16

openSUSE Recommended Update: Recommended update for ocfs2-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1354-1 Rating: moderate References: #963959 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for ocfs2-tools fixes the following issues: - fix o2cb.service fails to start Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-611=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ocfs2-tools-1.8.4-12.1 ocfs2-tools-debuginfo-1.8.4-12.1 ocfs2-tools-debugsource-1.8.4-12.1 ocfs2-tools-devel-1.8.4-12.1 ocfs2-tools-devel-static-1.8.4-12.1 ocfs2-tools-o2cb-1.8.4-12.1 ocfs2-tools-o2cb-debuginfo-1.8.4-12.1 ocfs2console-1.8.4-12.1 ocfs2console-debuginfo-1.8.4-12.1 References: https://bugzilla.suse.com/963959

1 0

openSUSE-RU-2016:1353-1: moderate: Recommended update for autoyast2
by maintenance＠opensuse.org 18 May '16

18 May '16

openSUSE Recommended Update: Recommended update for autoyast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1353-1 Rating: moderate References: #956730 #960059 #962034 #963137 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for autoyast2 fixes the following issues: - Evaluate the correct domain, network, product and product version when applying rules. (bsc#963137) - Check uptime instead of system time while waiting for systemd services to be restarted. (bsc#956730) - Report user friendlier error when "auto" is used on LVM setups. (bsc#962034) - Adapt sntp call to new API (version 4.2.8). (bsc#960059) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-610=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): autoyast2-3.1.101.15-12.1 autoyast2-installation-3.1.101.15-12.1 References: https://bugzilla.suse.com/956730 https://bugzilla.suse.com/960059 https://bugzilla.suse.com/962034 https://bugzilla.suse.com/963137

1 0

openSUSE-SU-2016:1336-1: moderate: Security update for mercurial
by opensuse-security＠opensuse.org 18 May '16

18 May '16

openSUSE Security Update: Security update for mercurial ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1336-1 Rating: moderate References: #978391 Cross-References: CVE-2016-3105 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mercurial fixes the following issues: Security issue fixed: - CVE-2016-3105: Fixed arbitrary code execution whenusing the convert extension on Git repo. (boo#978391) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-609=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-609=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): mercurial-3.5.1-6.1 mercurial-debuginfo-3.5.1-6.1 mercurial-debugsource-3.5.1-6.1 - openSUSE Leap 42.1 (noarch): mercurial-lang-3.5.1-6.1 - openSUSE 13.2 (i586 x86_64): mercurial-3.1.2-10.1 mercurial-debuginfo-3.1.2-10.1 mercurial-debugsource-3.1.2-10.1 - openSUSE 13.2 (noarch): mercurial-lang-3.1.2-10.1 References: https://www.suse.com/security/cve/CVE-2016-3105.html https://bugzilla.suse.com/978391

1 0

openSUSE-SU-2016:1335-1: moderate: Security update for ocaml
by opensuse-security＠opensuse.org 18 May '16

18 May '16

openSUSE Security Update: Security update for ocaml ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1335-1 Rating: moderate References: #977990 Cross-References: CVE-2015-8869 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ocaml fixes the following issues: Security issue fixed: - CVE-2015-8869: prevent buffer overflow and information leak (boo#977990) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-605=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ocaml-4.01.0-6.4.1 ocaml-camlp4-4.01.0-6.4.1 ocaml-camlp4-devel-4.01.0-6.4.1 ocaml-camlp4-devel-debuginfo-4.01.0-6.4.1 ocaml-compiler-libs-4.01.0-6.4.1 ocaml-compiler-libs-devel-4.01.0-6.4.1 ocaml-debuginfo-4.01.0-6.4.1 ocaml-debugsource-4.01.0-6.4.1 ocaml-docs-4.01.0-6.4.1 ocaml-emacs-4.01.0-6.4.1 ocaml-labltk-4.01.0-6.4.1 ocaml-labltk-debuginfo-4.01.0-6.4.1 ocaml-labltk-devel-4.01.0-6.4.1 ocaml-ocamldoc-4.01.0-6.4.1 ocaml-ocamldoc-debuginfo-4.01.0-6.4.1 ocaml-runtime-4.01.0-6.4.1 ocaml-runtime-debuginfo-4.01.0-6.4.1 ocaml-source-4.01.0-6.4.1 ocaml-x11-4.01.0-6.4.1 References: https://www.suse.com/security/cve/CVE-2015-8869.html https://bugzilla.suse.com/977990

1 0

openSUSE-SU-2016:1334-1: moderate: Security update for proftpd
by opensuse-security＠opensuse.org 18 May '16

18 May '16

openSUSE Security Update: Security update for proftpd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1334-1 Rating: moderate References: #970890 Cross-References: CVE-2016-3125 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This proftpd update to version 1.3.5b fixes the following issues: Security issues fixed: - CVE-2016-3125: Fixed selection of DH groups from TLSDHParamFile. (boo#970890) Bugs fixed: - update to 1.3.5b: http://www.proftpd.org/docs/RELEASE_NOTES-1.3.5b * SSH RSA hostkeys smaller than 2048 bits now work properly. * MLSD response lines are now properly CRLF terminated. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-603=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-603=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): proftpd-1.3.5b-4.1 proftpd-debuginfo-1.3.5b-4.1 proftpd-debugsource-1.3.5b-4.1 proftpd-devel-1.3.5b-4.1 proftpd-doc-1.3.5b-4.1 proftpd-ldap-1.3.5b-4.1 proftpd-ldap-debuginfo-1.3.5b-4.1 proftpd-mysql-1.3.5b-4.1 proftpd-mysql-debuginfo-1.3.5b-4.1 proftpd-pgsql-1.3.5b-4.1 proftpd-pgsql-debuginfo-1.3.5b-4.1 proftpd-radius-1.3.5b-4.1 proftpd-radius-debuginfo-1.3.5b-4.1 proftpd-sqlite-1.3.5b-4.1 proftpd-sqlite-debuginfo-1.3.5b-4.1 - openSUSE Leap 42.1 (noarch): proftpd-lang-1.3.5b-4.1 - openSUSE 13.2 (i586 x86_64): proftpd-1.3.5b-6.1 proftpd-debuginfo-1.3.5b-6.1 proftpd-debugsource-1.3.5b-6.1 proftpd-devel-1.3.5b-6.1 proftpd-doc-1.3.5b-6.1 proftpd-ldap-1.3.5b-6.1 proftpd-ldap-debuginfo-1.3.5b-6.1 proftpd-mysql-1.3.5b-6.1 proftpd-mysql-debuginfo-1.3.5b-6.1 proftpd-pgsql-1.3.5b-6.1 proftpd-pgsql-debuginfo-1.3.5b-6.1 proftpd-radius-1.3.5b-6.1 proftpd-radius-debuginfo-1.3.5b-6.1 proftpd-sqlite-1.3.5b-6.1 proftpd-sqlite-debuginfo-1.3.5b-6.1 - openSUSE 13.2 (noarch): proftpd-lang-1.3.5b-6.1 References: https://www.suse.com/security/cve/CVE-2016-3125.html https://bugzilla.suse.com/970890

1 0

openSUSE-SU-2016:1333-1: moderate: Security update for librsvg
by opensuse-security＠opensuse.org 18 May '16

18 May '16

openSUSE Security Update: Security update for librsvg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1333-1 Rating: moderate References: #977986 Cross-References: CVE-2016-4348 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This librsvg update to version 2.40.15 fixes the following issues: Security issues fixed: - CVE-2016-4348: DoS parsing SVGs with circular definitions _rsvg_css_normalize_font_size() function (boo#977986) Bugs fixed: - Actually scale the image if required, regression fix from upstream git (bgo#760262). - Fixed bgo#759084: Don't crash when filters don't actually exist. - Updated our autogen.sh to use modern autotools. - Fixed bgo#761728: Memory leak in the PrimitiveComponentTransfer filter. - Added basic support for the "baseline-shift" attribute in text objects (bgo#340047). - Fixed some duplicate logic when rendering paths (bgo#749415). - Rewrote the markers engine (bgo#685906, bgo#760180). - Refactoring of the test harness to use Glib's gtest infrastructure, instead of using home-grown machinery. Tests can simply be put as SVG files in the tests/subdirectories; it is not necessary to list them explicitly in some text file. - Gzipped SVGs now work if read from streams. - References to objects/filters/URIs/etc. are now handled lazily. Also, there is a general-purpose cycle detector so malformed SVGs don't cause infinite loops. - Removed parsing of Adobe blend modes; they were not implemented, anyway. - Add project files for building on Visual Studio (bgo#753555). - Added an "--export-id" option to rsvg-convert(1). This lets you select a single object to export, for example, to pick out a group from a multi-part drawing. Note that this is mostly useful for PNG output right now; for SVG output we don't preserve many attributes which could be useful in the extracted version. Doing this properly requires an internal "output to SVG" backend instead of just telling Cairo to render to SVG. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-608=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-608=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gdk-pixbuf-loader-rsvg-2.40.15-7.1 gdk-pixbuf-loader-rsvg-debuginfo-2.40.15-7.1 librsvg-2-2-2.40.15-7.1 librsvg-2-2-debuginfo-2.40.15-7.1 librsvg-debugsource-2.40.15-7.1 librsvg-devel-2.40.15-7.1 rsvg-view-2.40.15-7.1 rsvg-view-debuginfo-2.40.15-7.1 typelib-1_0-Rsvg-2_0-2.40.15-7.1 - openSUSE Leap 42.1 (x86_64): gdk-pixbuf-loader-rsvg-32bit-2.40.15-7.1 gdk-pixbuf-loader-rsvg-debuginfo-32bit-2.40.15-7.1 librsvg-2-2-32bit-2.40.15-7.1 librsvg-2-2-debuginfo-32bit-2.40.15-7.1 - openSUSE 13.2 (i586 x86_64): gdk-pixbuf-loader-rsvg-2.40.15-10.1 gdk-pixbuf-loader-rsvg-debuginfo-2.40.15-10.1 librsvg-2-2-2.40.15-10.1 librsvg-2-2-debuginfo-2.40.15-10.1 librsvg-debugsource-2.40.15-10.1 librsvg-devel-2.40.15-10.1 rsvg-view-2.40.15-10.1 rsvg-view-debuginfo-2.40.15-10.1 typelib-1_0-Rsvg-2_0-2.40.15-10.1 - openSUSE 13.2 (x86_64): gdk-pixbuf-loader-rsvg-32bit-2.40.15-10.1 gdk-pixbuf-loader-rsvg-debuginfo-32bit-2.40.15-10.1 librsvg-2-2-32bit-2.40.15-10.1 librsvg-2-2-debuginfo-32bit-2.40.15-10.1 References: https://www.suse.com/security/cve/CVE-2016-4348.html https://bugzilla.suse.com/977986

1 0

openSUSE-SU-2016:1332-1: important: Security update for mysql-community-server
by opensuse-security＠opensuse.org 18 May '16

18 May '16

openSUSE Security Update: Security update for mysql-community-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1332-1 Rating: important References: #959724 #962779 #963810 Cross-References: CVE-2015-3194 CVE-2016-0639 CVE-2016-0640 CVE-2016-0641 CVE-2016-0642 CVE-2016-0643 CVE-2016-0644 CVE-2016-0646 CVE-2016-0647 CVE-2016-0648 CVE-2016-0649 CVE-2016-0650 CVE-2016-0655 CVE-2016-0661 CVE-2016-0665 CVE-2016-0666 CVE-2016-0668 CVE-2016-0705 CVE-2016-2047 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: This mysql-community-server version update to 5.6.30 fixes the following issues: Security issues fixed: - fixed CVEs (boo#962779, boo#959724): CVE-2016-0705, CVE-2016-0639, CVE-2015-3194, CVE-2016-0640, CVE-2016-2047, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647, CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0665, CVE-2016-0666, CVE-2016-0641, CVE-2016-0642, CVE-2016-0655, CVE-2016-0661, CVE-2016-0668, CVE-2016-0643 - changes http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-30.html http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-29.html Bugs fixed: - don't delete the log data when migration fails - add 'log-error' and 'secure-file-priv' configuration options (added via configuration-tweaks.tar.bz2) [boo#963810] * add '/etc/my.cnf.d/error_log.conf' that specifies 'log-error = /var/log/mysql/mysqld.log'. If no path is set, the error log is written to '/var/lib/mysql/$HOSTNAME.err', which is not picked up by logrotate. * add '/etc/my.cnf.d/secure_file_priv.conf' which specifies that 'LOAD DATA', 'SELECT ... INTO' and 'LOAD FILE()' will only work with files in the directory specified by 'secure-file-priv' option (='/var/lib/mysql-files'). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-607=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-607=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libmysql56client18-5.6.30-16.2 libmysql56client18-debuginfo-5.6.30-16.2 libmysql56client_r18-5.6.30-16.2 mysql-community-server-5.6.30-16.2 mysql-community-server-bench-5.6.30-16.2 mysql-community-server-bench-debuginfo-5.6.30-16.2 mysql-community-server-client-5.6.30-16.2 mysql-community-server-client-debuginfo-5.6.30-16.2 mysql-community-server-debuginfo-5.6.30-16.2 mysql-community-server-debugsource-5.6.30-16.2 mysql-community-server-errormessages-5.6.30-16.2 mysql-community-server-test-5.6.30-16.2 mysql-community-server-test-debuginfo-5.6.30-16.2 mysql-community-server-tools-5.6.30-16.2 mysql-community-server-tools-debuginfo-5.6.30-16.2 - openSUSE Leap 42.1 (x86_64): libmysql56client18-32bit-5.6.30-16.2 libmysql56client18-debuginfo-32bit-5.6.30-16.2 libmysql56client_r18-32bit-5.6.30-16.2 - openSUSE 13.2 (i586 x86_64): libmysql56client18-5.6.30-2.20.2 libmysql56client18-debuginfo-5.6.30-2.20.2 libmysql56client_r18-5.6.30-2.20.2 mysql-community-server-5.6.30-2.20.2 mysql-community-server-bench-5.6.30-2.20.2 mysql-community-server-bench-debuginfo-5.6.30-2.20.2 mysql-community-server-client-5.6.30-2.20.2 mysql-community-server-client-debuginfo-5.6.30-2.20.2 mysql-community-server-debuginfo-5.6.30-2.20.2 mysql-community-server-debugsource-5.6.30-2.20.2 mysql-community-server-errormessages-5.6.30-2.20.2 mysql-community-server-test-5.6.30-2.20.2 mysql-community-server-test-debuginfo-5.6.30-2.20.2 mysql-community-server-tools-5.6.30-2.20.2 mysql-community-server-tools-debuginfo-5.6.30-2.20.2 - openSUSE 13.2 (x86_64): libmysql56client18-32bit-5.6.30-2.20.2 libmysql56client18-debuginfo-32bit-5.6.30-2.20.2 libmysql56client_r18-32bit-5.6.30-2.20.2 References: https://www.suse.com/security/cve/CVE-2015-3194.html https://www.suse.com/security/cve/CVE-2016-0639.html https://www.suse.com/security/cve/CVE-2016-0640.html https://www.suse.com/security/cve/CVE-2016-0641.html https://www.suse.com/security/cve/CVE-2016-0642.html https://www.suse.com/security/cve/CVE-2016-0643.html https://www.suse.com/security/cve/CVE-2016-0644.html https://www.suse.com/security/cve/CVE-2016-0646.html https://www.suse.com/security/cve/CVE-2016-0647.html https://www.suse.com/security/cve/CVE-2016-0648.html https://www.suse.com/security/cve/CVE-2016-0649.html https://www.suse.com/security/cve/CVE-2016-0650.html https://www.suse.com/security/cve/CVE-2016-0655.html https://www.suse.com/security/cve/CVE-2016-0661.html https://www.suse.com/security/cve/CVE-2016-0665.html https://www.suse.com/security/cve/CVE-2016-0666.html https://www.suse.com/security/cve/CVE-2016-0668.html https://www.suse.com/security/cve/CVE-2016-0705.html https://www.suse.com/security/cve/CVE-2016-2047.html https://bugzilla.suse.com/959724 https://bugzilla.suse.com/962779 https://bugzilla.suse.com/963810

1 0

openSUSE-SU-2016:1331-1: moderate: Security update for go
by opensuse-security＠opensuse.org 18 May '16

18 May '16

openSUSE Security Update: Security update for go ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1331-1 Rating: moderate References: #960151 #974232 Cross-References: CVE-2015-8618 CVE-2016-3959 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This go update to version 1.6 fixes the following issues: Security issues fixed: - CVE-2016-3959: Infinite loop in several big integer routines (boo#974232) - CVE-2015-8618: Carry propagation in Int.Exp Montgomery code in math/big library (boo#960151) Bugs fixed: - Update to version 1.6: * On Linux on little-endian 64-bit PowerPC (linux/ppc64le), Go 1.6 now supports cgo with external linking and is roughly feature complete. * Vendoring support * HTTP2 transparent support * fix gc and gccgo incompatibility regarding embedded unexported struct types containing exported fields * Linux on 64-bit MIPS and Android on 32-bit x86 * enforced rules for sharing Go pointers with C * new mechanism for template reuse * performance improvements ... and more! see more in https://tip.golang.org/doc/go1.6 - Updated to version 1.5.2: This release includes bug fixes to the compiler, linker, and the mime/multipart, net, and runtime packages. https://golang.org/doc/devel/release.html#go1.5.minor - Updated to version 1.5.1: This release includes bug fixes to the go command, the compiler, assembler, and the fmt, net/textproto, net/http, and runtime packages. https://golang.org/doc/devel/release.html#go1.5.minor - Update to version 1.5: * see https://golang.org/doc/go1.5 - install shared stdlib on x86_64 - add go.gdbinit for debug friendly - Adapt to Leap * use gcc5-go than go1.4 is the proper requirement for Leap Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-606=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): go-1.6.1-14.1 go-debuginfo-1.6.1-14.1 go-debugsource-1.6.1-14.1 go-doc-1.6.1-14.1 References: https://www.suse.com/security/cve/CVE-2015-8618.html https://www.suse.com/security/cve/CVE-2016-3959.html https://bugzilla.suse.com/960151 https://bugzilla.suse.com/974232

1 0

openSUSE-SU-2016:1330-1: moderate: Security update for imlib2
by opensuse-security＠opensuse.org 18 May '16

18 May '16

openSUSE Security Update: Security update for imlib2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1330-1 Rating: moderate References: #963796 #963797 #963800 #973759 #973761 #974202 #974854 #975703 Cross-References: CVE-2011-5326 CVE-2014-9762 CVE-2014-9763 CVE-2014-9764 CVE-2014-9771 CVE-2016-3993 CVE-2016-3994 CVE-2016-4024 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This imlib2 update to version 1.4.9 fixes the following issues: Security issues fixed: - CVE-2011-5326: divide by 0 when drawing an ellipse of height 1 (boo#974202) - CVE-2014-9762: segmentation fault on images without colormap (boo#963796) - CVE-2014-9764: segmentation fault when opening specifically crafted input (boo#963797) - CVE-2014-9763: division-by-zero crashes when opening images (boo#963800) - CVE-2014-9771: exploitable integer overflow in _imlib_SaveImage (boo#974854) - CVE-2016-3994: imlib2/evas Potential DOS in giflib loader (boo#973759) - CVE-2016-3993: off by 1 Potential DOS (boo#973761) - CVE-2016-4024: integer overflow resulting in insufficient heap allocation (boo#975703) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-600=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): imlib2-1.4.9-17.4.1 imlib2-debuginfo-1.4.9-17.4.1 imlib2-debugsource-1.4.9-17.4.1 imlib2-devel-1.4.9-17.4.1 imlib2-filters-1.4.9-17.4.1 imlib2-filters-debuginfo-1.4.9-17.4.1 imlib2-loaders-1.4.9-17.4.1 imlib2-loaders-debuginfo-1.4.9-17.4.1 libImlib2-1-1.4.9-17.4.1 libImlib2-1-debuginfo-1.4.9-17.4.1 References: https://www.suse.com/security/cve/CVE-2011-5326.html https://www.suse.com/security/cve/CVE-2014-9762.html https://www.suse.com/security/cve/CVE-2014-9763.html https://www.suse.com/security/cve/CVE-2014-9764.html https://www.suse.com/security/cve/CVE-2014-9771.html https://www.suse.com/security/cve/CVE-2016-3993.html https://www.suse.com/security/cve/CVE-2016-3994.html https://www.suse.com/security/cve/CVE-2016-4024.html https://bugzilla.suse.com/963796 https://bugzilla.suse.com/963797 https://bugzilla.suse.com/963800 https://bugzilla.suse.com/973759 https://bugzilla.suse.com/973761 https://bugzilla.suse.com/974202 https://bugzilla.suse.com/974854 https://bugzilla.suse.com/975703

1 0

openSUSE-SU-2016:1329-1: important: Security update for ntp
by opensuse-security＠opensuse.org 18 May '16

18 May '16

openSUSE Security Update: Security update for ntp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1329-1 Rating: important References: #957226 #977446 #977450 #977451 #977452 #977455 #977457 #977458 #977459 #977461 #977464 Cross-References: CVE-2015-7704 CVE-2015-7705 CVE-2015-7974 CVE-2016-1547 CVE-2016-1548 CVE-2016-1549 CVE-2016-1550 CVE-2016-1551 CVE-2016-2516 CVE-2016-2517 CVE-2016-2518 CVE-2016-2519 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for ntp to 4.2.8p7 fixes the following issues: * CVE-2016-1547, bsc#977459: Validate crypto-NAKs, AKA: CRYPTO-NAK DoS. * CVE-2016-1548, bsc#977461: Interleave-pivot * CVE-2016-1549, bsc#977451: Sybil vulnerability: ephemeral association attack. * CVE-2016-1550, bsc#977464: Improve NTP security against buffer comparison timing attacks. * CVE-2016-1551, bsc#977450: Refclock impersonation vulnerability * CVE-2016-2516, bsc#977452: Duplicate IPs on unconfig directives will cause an assertion botch in ntpd. * CVE-2016-2517, bsc#977455: remote configuration trustedkey/ requestkey/controlkey values are not properly validated. * CVE-2016-2518, bsc#977457: Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC. * CVE-2016-2519, bsc#977458: ctl_getitem() return value not always checked. * This update also improves the fixes for: CVE-2015-7704, CVE-2015-7705, CVE-2015-7974 Bugs fixed: - Restrict the parser in the startup script to the first occurrance of "keys" and "controlkey" in ntp.conf (bsc#957226). This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-599=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ntp-4.2.8p7-21.1 ntp-debuginfo-4.2.8p7-21.1 ntp-debugsource-4.2.8p7-21.1 ntp-doc-4.2.8p7-21.1 References: https://www.suse.com/security/cve/CVE-2015-7704.html https://www.suse.com/security/cve/CVE-2015-7705.html https://www.suse.com/security/cve/CVE-2015-7974.html https://www.suse.com/security/cve/CVE-2016-1547.html https://www.suse.com/security/cve/CVE-2016-1548.html https://www.suse.com/security/cve/CVE-2016-1549.html https://www.suse.com/security/cve/CVE-2016-1550.html https://www.suse.com/security/cve/CVE-2016-1551.html https://www.suse.com/security/cve/CVE-2016-2516.html https://www.suse.com/security/cve/CVE-2016-2517.html https://www.suse.com/security/cve/CVE-2016-2518.html https://www.suse.com/security/cve/CVE-2016-2519.html https://bugzilla.suse.com/957226 https://bugzilla.suse.com/977446 https://bugzilla.suse.com/977450 https://bugzilla.suse.com/977451 https://bugzilla.suse.com/977452 https://bugzilla.suse.com/977455 https://bugzilla.suse.com/977457 https://bugzilla.suse.com/977458 https://bugzilla.suse.com/977459 https://bugzilla.suse.com/977461 https://bugzilla.suse.com/977464

1 0

openSUSE-SU-2016:1328-1: moderate: Security update for cacti
by opensuse-security＠opensuse.org 18 May '16

18 May '16

openSUSE Security Update: Security update for cacti ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1328-1 Rating: moderate References: #971357 #974013 Cross-References: CVE-2016-3172 CVE-2016-3659 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for cacti fixes the following issues: Security issues fixed: - CVE-2016-3172: SQL injection in tree.php (boo#971357) - CVE-2016-3659: SQL injection in lib/functions.php (boo#974013) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-601=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-601=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): cacti-0.8.8f-11.1 - openSUSE 13.2 (noarch): cacti-0.8.8f-4.16.1 References: https://www.suse.com/security/cve/CVE-2016-3172.html https://www.suse.com/security/cve/CVE-2016-3659.html https://bugzilla.suse.com/971357 https://bugzilla.suse.com/974013

1 0

openSUSE-SU-2016:1327-1: moderate: Security update for libressl
by opensuse-security＠opensuse.org 18 May '16

18 May '16

openSUSE Security Update: Security update for libressl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1327-1 Rating: moderate References: #950707 #950708 #957812 #957815 #977584 #978492 Cross-References: CVE-2015-3194 CVE-2015-3195 CVE-2015-5333 CVE-2015-5334 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves four vulnerabilities and has two fixes is now available. Description: This libressl update to version 2.2.7 fixes the following issues: Security issues fixed: - Fix multiple vulnerabilities in libcrypto relating to ASN.1 and encoding. [boo#978492, boo#977584] - CVE-2015-3194: Certificate verify crash with missing PSS parameter (boo#957815) - CVE-2015-3195: X509_ATTRIBUTE memory leak (boo#957812) - CVE-2015-5333: Memory Leak (boo#950707) - CVE-2015-5334: Buffer Overflow (boo#950708) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-604=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libcrypto34-2.2.7-2.13.1 libcrypto34-debuginfo-2.2.7-2.13.1 libressl-2.2.7-2.13.1 libressl-debuginfo-2.2.7-2.13.1 libressl-debugsource-2.2.7-2.13.1 libressl-devel-2.2.7-2.13.1 libssl33-2.2.7-2.13.1 libssl33-debuginfo-2.2.7-2.13.1 libtls4-2.2.7-2.13.1 libtls4-debuginfo-2.2.7-2.13.1 - openSUSE 13.2 (x86_64): libcrypto34-32bit-2.2.7-2.13.1 libcrypto34-debuginfo-32bit-2.2.7-2.13.1 libressl-devel-32bit-2.2.7-2.13.1 libssl33-32bit-2.2.7-2.13.1 libssl33-debuginfo-32bit-2.2.7-2.13.1 libtls4-32bit-2.2.7-2.13.1 libtls4-debuginfo-32bit-2.2.7-2.13.1 - openSUSE 13.2 (noarch): libressl-devel-doc-2.2.7-2.13.1 References: https://www.suse.com/security/cve/CVE-2015-3194.html https://www.suse.com/security/cve/CVE-2015-3195.html https://www.suse.com/security/cve/CVE-2015-5333.html https://www.suse.com/security/cve/CVE-2015-5334.html https://bugzilla.suse.com/950707 https://bugzilla.suse.com/950708 https://bugzilla.suse.com/957812 https://bugzilla.suse.com/957815 https://bugzilla.suse.com/977584 https://bugzilla.suse.com/978492

1 0

openSUSE-SU-2016:1326-1: important: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 18 May '16

18 May '16

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1326-1 Rating: important References: #978061 Cross-References: CVE-2016-3714 CVE-2016-3715 CVE-2016-3717 CVE-2016-3718 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for GraphicsMagick fixes the following issues: Security issues fixed: - Multiple security issues in GraphicsMagick/ImageMagick [boo#978061] (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-602=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-602=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): GraphicsMagick-1.3.21-5.1 GraphicsMagick-debuginfo-1.3.21-5.1 GraphicsMagick-debugsource-1.3.21-5.1 GraphicsMagick-devel-1.3.21-5.1 libGraphicsMagick++-Q16-11-1.3.21-5.1 libGraphicsMagick++-Q16-11-debuginfo-1.3.21-5.1 libGraphicsMagick++-devel-1.3.21-5.1 libGraphicsMagick-Q16-3-1.3.21-5.1 libGraphicsMagick-Q16-3-debuginfo-1.3.21-5.1 libGraphicsMagick3-config-1.3.21-5.1 libGraphicsMagickWand-Q16-2-1.3.21-5.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.21-5.1 perl-GraphicsMagick-1.3.21-5.1 perl-GraphicsMagick-debuginfo-1.3.21-5.1 - openSUSE 13.2 (i586 x86_64): GraphicsMagick-1.3.20-3.1 GraphicsMagick-debuginfo-1.3.20-3.1 GraphicsMagick-debugsource-1.3.20-3.1 GraphicsMagick-devel-1.3.20-3.1 libGraphicsMagick++-Q16-3-1.3.20-3.1 libGraphicsMagick++-Q16-3-debuginfo-1.3.20-3.1 libGraphicsMagick++-devel-1.3.20-3.1 libGraphicsMagick-Q16-3-1.3.20-3.1 libGraphicsMagick-Q16-3-debuginfo-1.3.20-3.1 libGraphicsMagick3-config-1.3.20-3.1 libGraphicsMagickWand-Q16-2-1.3.20-3.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.20-3.1 perl-GraphicsMagick-1.3.20-3.1 perl-GraphicsMagick-debuginfo-1.3.20-3.1 References: https://www.suse.com/security/cve/CVE-2016-3714.html https://www.suse.com/security/cve/CVE-2016-3715.html https://www.suse.com/security/cve/CVE-2016-3717.html https://www.suse.com/security/cve/CVE-2016-3718.html https://bugzilla.suse.com/978061

1 0

openSUSE-RU-2016:1325-1: moderate: Recommended update for tigervnc
by maintenance＠opensuse.org 17 May '16

17 May '16

openSUSE Recommended Update: Recommended update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1325-1 Rating: moderate References: #977019 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tigervnc fixes the following issues: - Added missing dependency on xauth and xorg-x11-fonts-core. (boo#977019) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-597=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-597=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): tigervnc-1.5.0-21.1 tigervnc-debuginfo-1.5.0-21.1 tigervnc-debugsource-1.5.0-21.1 xorg-x11-Xvnc-1.5.0-21.1 xorg-x11-Xvnc-debuginfo-1.5.0-21.1 - openSUSE 13.2 (i586 x86_64): tigervnc-1.4.1-6.51.1 tigervnc-debuginfo-1.4.1-6.51.1 tigervnc-debugsource-1.4.1-6.51.1 xorg-x11-Xvnc-1.4.1-6.51.1 xorg-x11-Xvnc-debuginfo-1.4.1-6.51.1 References: https://bugzilla.suse.com/977019

1 0

openSUSE-RU-2016:1324-1: moderate: Recommended update for python3-requests
by maintenance＠opensuse.org 17 May '16

17 May '16

openSUSE Recommended Update: Recommended update for python3-requests ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1324-1 Rating: moderate References: #912903 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for python3-requests fixes the following issue: - Make https requests use verification based on openSUSE's default CA bundle. This didn't work at all before. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-596=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): python3-requests-2.4.1-3.1 References: https://bugzilla.suse.com/912903

1 0

openSUSE-RU-2016:1323-1: Recommended update for pciutils-ids
by maintenance＠opensuse.org 17 May '16

17 May '16

openSUSE Recommended Update: Recommended update for pciutils-ids ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1323-1 Rating: low References: #958712 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The system's PCI IDs database has been updated to version 2016.04.04. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-592=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): pciutils-ids-2016.04.04-3.1 References: https://bugzilla.suse.com/958712

1 0

openSUSE-SU-2016:1322-1: moderate: Security update for poppler
by opensuse-security＠opensuse.org 17 May '16

17 May '16

openSUSE Security Update: Security update for poppler ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1322-1 Rating: moderate References: #976844 Cross-References: CVE-2015-8868 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for poppler fixes the following issues: Security issues fixed: - CVE-2015-8868: Corrupted PDF file can corrupt heap, causing DoS (boo#976844) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-595=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libpoppler-cpp0-0.26.5-6.1 libpoppler-cpp0-debuginfo-0.26.5-6.1 libpoppler-devel-0.26.5-6.1 libpoppler-glib-devel-0.26.5-6.1 libpoppler-glib8-0.26.5-6.1 libpoppler-glib8-debuginfo-0.26.5-6.1 libpoppler-qt4-4-0.26.5-6.1 libpoppler-qt4-4-debuginfo-0.26.5-6.1 libpoppler-qt4-devel-0.26.5-6.1 libpoppler-qt5-1-0.26.5-6.1 libpoppler-qt5-1-debuginfo-0.26.5-6.1 libpoppler-qt5-devel-0.26.5-6.1 libpoppler46-0.26.5-6.1 libpoppler46-debuginfo-0.26.5-6.1 poppler-debugsource-0.26.5-6.1 poppler-qt-debugsource-0.26.5-6.1 poppler-qt5-debugsource-0.26.5-6.1 poppler-tools-0.26.5-6.1 poppler-tools-debuginfo-0.26.5-6.1 typelib-1_0-Poppler-0_18-0.26.5-6.1 - openSUSE 13.2 (x86_64): libpoppler-cpp0-32bit-0.26.5-6.1 libpoppler-cpp0-debuginfo-32bit-0.26.5-6.1 libpoppler-glib8-32bit-0.26.5-6.1 libpoppler-glib8-debuginfo-32bit-0.26.5-6.1 libpoppler-qt4-4-32bit-0.26.5-6.1 libpoppler-qt4-4-debuginfo-32bit-0.26.5-6.1 libpoppler-qt5-1-32bit-0.26.5-6.1 libpoppler-qt5-1-debuginfo-32bit-0.26.5-6.1 libpoppler46-32bit-0.26.5-6.1 libpoppler46-debuginfo-32bit-0.26.5-6.1 References: https://www.suse.com/security/cve/CVE-2015-8868.html https://bugzilla.suse.com/976844

1 0

openSUSE-RU-2016:1321-1: moderate: Recommended update for curl
by maintenance＠opensuse.org 17 May '16

17 May '16

openSUSE Recommended Update: Recommended update for curl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1321-1 Rating: moderate References: #915846 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for curl fixes the following issues: - Fixes "Network is unreachable" errors in valid situations when ipv6 is not available but ipv4 is working fine. This also fixes the same error from happening in applications using libcurl4 (like zypper). (boo#915846) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-594=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): curl-7.42.1-22.1 curl-debuginfo-7.42.1-22.1 curl-debugsource-7.42.1-22.1 libcurl-devel-7.42.1-22.1 libcurl4-7.42.1-22.1 libcurl4-debuginfo-7.42.1-22.1 - openSUSE 13.2 (x86_64): libcurl-devel-32bit-7.42.1-22.1 libcurl4-32bit-7.42.1-22.1 libcurl4-debuginfo-32bit-7.42.1-22.1 References: https://bugzilla.suse.com/915846

1 0

openSUSE-RU-2016:1320-1: moderate: Recommended update for lightdm, xdm
by maintenance＠opensuse.org 17 May '16

17 May '16

openSUSE Recommended Update: Recommended update for lightdm, xdm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1320-1 Rating: moderate References: #978262 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lightdm, xdm fixes the following issues: Changes in xdm: - boo#978262: Make SUSEconfig handler for DISPLAYMANAGER_XSERVER_TCP_PORT_6000_OPEN robust against changes to the default setting of -listen/-nolisten tcp Changes in lightdm: - boo#978262: Handle new type of -liste/-nolisten tcp Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-593=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): liblightdm-gobject-1-0-1.15.0-6.1 liblightdm-gobject-1-0-debuginfo-1.15.0-6.1 liblightdm-qt-3-0-1.15.0-6.1 liblightdm-qt-3-0-debuginfo-1.15.0-6.1 liblightdm-qt5-3-0-1.15.0-6.1 liblightdm-qt5-3-0-debuginfo-1.15.0-6.1 lightdm-1.15.0-6.1 lightdm-debuginfo-1.15.0-6.1 lightdm-debugsource-1.15.0-6.1 lightdm-gobject-devel-1.15.0-6.1 lightdm-qt-devel-1.15.0-6.1 lightdm-qt5-devel-1.15.0-6.1 typelib-1_0-LightDM-1-1.15.0-6.1 xdm-1.1.11-10.1 xdm-debuginfo-1.1.11-10.1 xdm-debugsource-1.1.11-10.1 - openSUSE Leap 42.1 (noarch): lightdm-lang-1.15.0-6.1 References: https://bugzilla.suse.com/978262

1 0

openSUSE-SU-2016:1319-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 17 May '16

17 May '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1319-1 Rating: important References: #979859 Cross-References: CVE-2016-1667 CVE-2016-1668 CVE-2016-1669 CVE-2016-1670 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Chromium was updated to 50.0.2661.102 to fix four vulnerabilities (boo#979859): - CVE-2016-1667: Same origin bypass in DOM - CVE-2016-1668: Same origin bypass in Blink V8 bindings - CVE-2016-1669: Buffer overflow in V8 - CVE-2016-1670: Race condition in loader Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-598=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-50.0.2661.102-75.1 chromium-50.0.2661.102-75.1 chromium-desktop-gnome-50.0.2661.102-75.1 chromium-desktop-kde-50.0.2661.102-75.1 chromium-ffmpegsumo-50.0.2661.102-75.1 References: https://www.suse.com/security/cve/CVE-2016-1667.html https://www.suse.com/security/cve/CVE-2016-1668.html https://www.suse.com/security/cve/CVE-2016-1669.html https://www.suse.com/security/cve/CVE-2016-1670.html https://bugzilla.suse.com/979859

1 0

openSUSE-SU-2016:1316-1: moderate: Security update for varnish
by opensuse-security＠opensuse.org 17 May '16

17 May '16

openSUSE Security Update: Security update for varnish ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1316-1 Rating: moderate References: #976097 Cross-References: CVE-2015-8852 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This varnish update to version 3.0.7 fixes the following issues: Security issues fixed: - CVE-2015-8852: Vulnerable to HTTP Smuggling issues: Double Content Length and bad EOL. (boo#976097) Bugs fixed: - Stop recognizing a single CR (\r) as a HTTP line separator. - Improved error detection on master-child process communication, leading to faster recovery (child restart) if communication loses sync. - Fix a corner-case where Content-Length was wrong for HTTP 1.0 clients, when using gzip and streaming. - More robust handling of hop-by-hop headers. - Avoid memory leak when adding bans. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-588=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libvarnishapi1-3.0.7-2.3.1 libvarnishapi1-debuginfo-3.0.7-2.3.1 varnish-3.0.7-2.3.1 varnish-debuginfo-3.0.7-2.3.1 varnish-debugsource-3.0.7-2.3.1 varnish-devel-3.0.7-2.3.1 References: https://www.suse.com/security/cve/CVE-2015-8852.html https://bugzilla.suse.com/976097

1 0

openSUSE-SU-2016:1314-1: moderate: Security update for quassel
by opensuse-security＠opensuse.org 17 May '16

17 May '16

openSUSE Security Update: Security update for quassel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1314-1 Rating: moderate References: #978002 Cross-References: CVE-2016-4414 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for quassel fixes the following issues: - CVE-2016-4414: Denial of service vulnerability by unauthenticated clients (boo#978002) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-589=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-589=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): quassel-base-0.12.2-10.1 quassel-client-0.12.2-10.1 quassel-client-debuginfo-0.12.2-10.1 quassel-core-0.12.2-10.1 quassel-core-debuginfo-0.12.2-10.1 quassel-debugsource-0.12.2-10.1 quassel-mono-0.12.2-10.1 quassel-mono-debuginfo-0.12.2-10.1 - openSUSE 13.2 (i586 x86_64): quassel-base-0.10.0-3.16.1 quassel-client-0.10.0-3.16.1 quassel-client-debuginfo-0.10.0-3.16.1 quassel-core-0.10.0-3.16.1 quassel-core-debuginfo-0.10.0-3.16.1 quassel-debugsource-0.10.0-3.16.1 quassel-mono-0.10.0-3.16.1 quassel-mono-debuginfo-0.10.0-3.16.1 References: https://www.suse.com/security/cve/CVE-2016-4414.html https://bugzilla.suse.com/978002

1 0

openSUSE-SU-2016:1313-1: moderate: Security update for quagga
by opensuse-security＠opensuse.org 17 May '16

17 May '16

openSUSE Security Update: Security update for quagga ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1313-1 Rating: moderate References: #977012 Cross-References: CVE-2016-4049 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for quagga fixes the following security issues: - CVE-2016-4049: Remote crash vulerability with specially crafted packages due to a buffer overflow error in bgp_dump_routes_func (boo#977012) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-591=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-591=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): quagga-0.99.24.1-11.1 quagga-debuginfo-0.99.24.1-11.1 quagga-debugsource-0.99.24.1-11.1 quagga-devel-0.99.24.1-11.1 - openSUSE 13.2 (i586 x86_64): quagga-0.99.23-2.9.1 quagga-debuginfo-0.99.23-2.9.1 quagga-debugsource-0.99.23-2.9.1 quagga-devel-0.99.23-2.9.1 References: https://www.suse.com/security/cve/CVE-2016-4049.html https://bugzilla.suse.com/977012

1 0

openSUSE-SU-2016:1312-1: moderate: Security update for atheme
by opensuse-security＠opensuse.org 17 May '16

17 May '16

openSUSE Security Update: Security update for atheme ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1312-1 Rating: moderate References: #978170 Cross-References: CVE-2014-9773 CVE-2016-4478 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for atheme fixes the following issues: - CVE-2016-4478: Under certain circumstances, a remote attacker could cause denial of service due to a buffer overflow in the XMLRPC response encoding code (boo#978170) - CVE-2014-9773: Remote attacker could change Atheme's behavior by registering/dropping certain accounts/nicks (boo#978170) The version update to 7.2.6 also contains a number of upstream fixes. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-590=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-590=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): atheme-7.2.6-5.1 atheme-debuginfo-7.2.6-5.1 atheme-debugsource-7.2.6-5.1 atheme-devel-7.2.6-5.1 libathemecore1-7.2.6-5.1 libathemecore1-debuginfo-7.2.6-5.1 - openSUSE 13.2 (i586 x86_64): atheme-7.2.6-2.3.1 atheme-debuginfo-7.2.6-2.3.1 atheme-debugsource-7.2.6-2.3.1 atheme-devel-7.2.6-2.3.1 libathemecore1-7.2.6-2.3.1 libathemecore1-debuginfo-7.2.6-2.3.1 References: https://www.suse.com/security/cve/CVE-2014-9773.html https://www.suse.com/security/cve/CVE-2016-4478.html https://bugzilla.suse.com/978170

1 0

openSUSE-SU-2016:1309-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 17 May '16

17 May '16

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1309-1 Rating: important References: #979422 Cross-References: CVE-2016-4117 Affected Products: openSUSE 13.1 NonFree ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This security update for flash-player to 11.2.202.621 fixes the following issues (boo#979422): A critical vulnerability (CVE-2016-4117) exists in Adobe Flash Player 21.0.0.226 and earlier versions for Windows, Macintosh, Linux, and Chrome OS. Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected system. (APSA16-02) https://helpx.adobe.com/security/products/flash-player/apsa16-02.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1 NonFree: zypper in -t patch 2016-587=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 NonFree (i586 x86_64): flash-player-11.2.202.621-162.1 flash-player-gnome-11.2.202.621-162.1 flash-player-kde4-11.2.202.621-162.1 References: https://www.suse.com/security/cve/CVE-2016-4117.html https://bugzilla.suse.com/979422

1 0

openSUSE-SU-2016:1308-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 17 May '16

17 May '16

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1308-1 Rating: important References: #979422 Cross-References: CVE-2016-4117 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This security update for flash-player to 11.2.202.621 fixes the following issues (boo#979422): A critical vulnerability (CVE-2016-4117) exists in Adobe Flash Player 21.0.0.226 and earlier versions for Windows, Macintosh, Linux, and Chrome OS. Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected system. (APSA16-02) https://helpx.adobe.com/security/products/flash-player/apsa16-02.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2016-587=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): flash-player-11.2.202.621-185.1 flash-player-gnome-11.2.202.621-185.1 flash-player-kde4-11.2.202.621-185.1 References: https://www.suse.com/security/cve/CVE-2016-4117.html https://bugzilla.suse.com/979422

1 0

openSUSE-RU-2016:1307-1: Recommended update for python3-requests
by maintenance＠opensuse.org 17 May '16

17 May '16

openSUSE Recommended Update: Recommended update for python3-requests ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1307-1 Rating: low References: #912903 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes an issue which prevented python3-requests to work with HTTPS. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-586=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): python3-requests-1.2.3-3.3.1 References: https://bugzilla.suse.com/912903

1 0

openSUSE-SU-2016:1306-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 17 May '16

17 May '16

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1306-1 Rating: important References: #979422 Cross-References: CVE-2016-1006 CVE-2016-1011 CVE-2016-1012 CVE-2016-1013 CVE-2016-1014 CVE-2016-1015 CVE-2016-1016 CVE-2016-1017 CVE-2016-1018 CVE-2016-1019 CVE-2016-1020 CVE-2016-1021 CVE-2016-1022 CVE-2016-1023 CVE-2016-1024 CVE-2016-1025 CVE-2016-1026 CVE-2016-1027 CVE-2016-1028 CVE-2016-1029 CVE-2016-1030 CVE-2016-1031 CVE-2016-1032 CVE-2016-1033 CVE-2016-4117 Affected Products: openSUSE 13.2 NonFree ______________________________________________________________________________ An update that fixes 25 vulnerabilities is now available. Description: This security update for flash-player to 11.2.202.621 fixes the following issues (boo#979422): A critical vulnerability (CVE-2016-4117) exists in Adobe Flash Player 21.0.0.226 and earlier versions for Windows, Macintosh, Linux, and Chrome OS. Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected system. (APSA16-02) https://helpx.adobe.com/security/products/flash-player/apsa16-02.html Some CVEs were not listed in the last submission: * APSA16-01, APSB16-10, CVE-2016-1006, CVE-2016-1011, CVE-2016-1012, CVE-2016-1013, CVE-2016-1014, CVE-2016-1015, CVE-2016-1016, CVE-2016-1017, CVE-2016-1018, CVE-2016-1019, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1030, CVE-2016-1031, CVE-2016-1032, CVE-2016-1033 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2 NonFree: zypper in -t patch openSUSE-2016-585=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 NonFree (i586 x86_64): flash-player-11.2.202.621-2.97.1 flash-player-gnome-11.2.202.621-2.97.1 flash-player-kde4-11.2.202.621-2.97.1 References: https://www.suse.com/security/cve/CVE-2016-1006.html https://www.suse.com/security/cve/CVE-2016-1011.html https://www.suse.com/security/cve/CVE-2016-1012.html https://www.suse.com/security/cve/CVE-2016-1013.html https://www.suse.com/security/cve/CVE-2016-1014.html https://www.suse.com/security/cve/CVE-2016-1015.html https://www.suse.com/security/cve/CVE-2016-1016.html https://www.suse.com/security/cve/CVE-2016-1017.html https://www.suse.com/security/cve/CVE-2016-1018.html https://www.suse.com/security/cve/CVE-2016-1019.html https://www.suse.com/security/cve/CVE-2016-1020.html https://www.suse.com/security/cve/CVE-2016-1021.html https://www.suse.com/security/cve/CVE-2016-1022.html https://www.suse.com/security/cve/CVE-2016-1023.html https://www.suse.com/security/cve/CVE-2016-1024.html https://www.suse.com/security/cve/CVE-2016-1025.html https://www.suse.com/security/cve/CVE-2016-1026.html https://www.suse.com/security/cve/CVE-2016-1027.html https://www.suse.com/security/cve/CVE-2016-1028.html https://www.suse.com/security/cve/CVE-2016-1029.html https://www.suse.com/security/cve/CVE-2016-1030.html https://www.suse.com/security/cve/CVE-2016-1031.html https://www.suse.com/security/cve/CVE-2016-1032.html https://www.suse.com/security/cve/CVE-2016-1033.html https://www.suse.com/security/cve/CVE-2016-4117.html https://bugzilla.suse.com/979422

1 0

openSUSE-SU-2016:1304-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 16 May '16

16 May '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1304-1 Rating: important References: #979859 Cross-References: CVE-2016-1667 CVE-2016-1668 CVE-2016-1669 CVE-2016-1670 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Chromium was updated to 50.0.2661.102 to fix four vulnerabilities (boo#979859): - CVE-2016-1667: Same origin bypass in DOM - CVE-2016-1668: Same origin bypass in Blink V8 bindings - CVE-2016-1669: Buffer overflow in V8 - CVE-2016-1670: Race condition in loader Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-584=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-584=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): chromedriver-50.0.2661.102-48.1 chromedriver-debuginfo-50.0.2661.102-48.1 chromium-50.0.2661.102-48.1 chromium-debuginfo-50.0.2661.102-48.1 chromium-debugsource-50.0.2661.102-48.1 chromium-desktop-gnome-50.0.2661.102-48.1 chromium-desktop-kde-50.0.2661.102-48.1 chromium-ffmpegsumo-50.0.2661.102-48.1 chromium-ffmpegsumo-debuginfo-50.0.2661.102-48.1 - openSUSE 13.2 (i586 x86_64): chromedriver-50.0.2661.102-100.1 chromedriver-debuginfo-50.0.2661.102-100.1 chromium-50.0.2661.102-100.1 chromium-debuginfo-50.0.2661.102-100.1 chromium-debugsource-50.0.2661.102-100.1 chromium-desktop-gnome-50.0.2661.102-100.1 chromium-desktop-kde-50.0.2661.102-100.1 chromium-ffmpegsumo-50.0.2661.102-100.1 chromium-ffmpegsumo-debuginfo-50.0.2661.102-100.1 References: https://www.suse.com/security/cve/CVE-2016-1667.html https://www.suse.com/security/cve/CVE-2016-1668.html https://www.suse.com/security/cve/CVE-2016-1669.html https://www.suse.com/security/cve/CVE-2016-1670.html https://bugzilla.suse.com/979859

1 0

openSUSE-SU-2016:1298-1: moderate: Security update for libxml2
by opensuse-security＠opensuse.org 13 May '16

13 May '16

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1298-1 Rating: moderate References: #972335 #975947 Cross-References: CVE-2016-3627 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for libxml2 fixes two security issues: - libxml2 limits the number of recursions an XML document can contain so to protect against the "Billion Laughs" denial-of-service attack. Unfortunately, the underlying counter was not incremented properly in all necessary locations. Therefore, specially crafted XML documents could exhaust all available stack space and crash the XML parser without running into the recursion limit. This vulnerability has been fixed. (bsc#975947) - When running in recovery mode, certain invalid XML documents would trigger an infinite recursion in libxml2 that ran until all stack space was exhausted. This vulnerability could have been used to facilitate a denial-of-sevice attack. (CVE-2016-3627, bsc#972335) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-583=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libxml2-2-2.9.1-16.1 libxml2-2-debuginfo-2.9.1-16.1 libxml2-debugsource-2.9.1-16.1 libxml2-devel-2.9.1-16.1 libxml2-tools-2.9.1-16.1 libxml2-tools-debuginfo-2.9.1-16.1 python-libxml2-2.9.1-16.1 python-libxml2-debuginfo-2.9.1-16.1 python-libxml2-debugsource-2.9.1-16.1 - openSUSE Leap 42.1 (noarch): libxml2-doc-2.9.1-16.1 - openSUSE Leap 42.1 (x86_64): libxml2-2-32bit-2.9.1-16.1 libxml2-2-debuginfo-32bit-2.9.1-16.1 libxml2-devel-32bit-2.9.1-16.1 References: https://www.suse.com/security/cve/CVE-2016-3627.html https://bugzilla.suse.com/972335 https://bugzilla.suse.com/975947

1 0

openSUSE-RU-2016:1297-1: moderate: Recommended update for opera
by maintenance＠opensuse.org 13 May '16

13 May '16

openSUSE Recommended Update: Recommended update for opera ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1297-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1:NonFree ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update to Opera 37.0.2178.32 fixes the following issues: - HiDPI: page scrollbar too narrow. - Pinch to zoom is not working. - Crash in web_modal::WebContentsModalDialogManager::ShowDialogWithManager with simplified printing option. - Download resumption not working after restart. - Tabs page view sticks permanently when “Adjust Speed Dial animations for slower hardware” is enabled. - Tablet mode layout and tablet mode fullscreen button not working. - Chromium is updated to version 49.0.2623.110. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1:NonFree: zypper in -t patch openSUSE-2016-581=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1:NonFree (x86_64): opera-37.0.2178.32-13.1 References:

1 0

openSUSE-RU-2016:1296-1: moderate: Recommended update for Software Update Stack
by maintenance＠opensuse.org 13 May '16

13 May '16

openSUSE Recommended Update: Recommended update for Software Update Stack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1296-1 Rating: moderate References: #933760 #956480 #964932 #967006 #967828 #971018 #971637 #972768 #974275 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: This update for the Software Update Stack fixes the following issues: libsolv: - Simplify handling of pseudo package updates. (bsc#967006) - Improve speed of rpmmd metadata parsing. libzypp: - Fix credential file parser losing entries with known URL but different user name. (bsc#933760) - RepoManager: Allow extraction of multiple baseurls for service repositories. (bsc#964932) - Fix service metadata TTL default value. (bsc#967828) - DiskUsageCounter: Limit estimated waste per file. (bsc#974275) - Use PluginExecutor for commit- and system-hooks. (bnc#971637) - Set libsolv-devel >= 0.6.19 as BuildRequires. (bnc#971018) zypper: - Fix testing for '-- download*' options. (bsc#956480) - Update sle-zypper-po.tar.bz2. (bsc#972768) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-580=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libsolv-debugsource-0.6.20-9.1 libsolv-demo-0.6.20-9.1 libsolv-demo-debuginfo-0.6.20-9.1 libsolv-devel-0.6.20-9.1 libsolv-devel-debuginfo-0.6.20-9.1 libsolv-tools-0.6.20-9.1 libsolv-tools-debuginfo-0.6.20-9.1 libzypp-15.22.0-9.1 libzypp-debuginfo-15.22.0-9.1 libzypp-debugsource-15.22.0-9.1 libzypp-devel-15.22.0-9.1 libzypp-devel-doc-15.22.0-9.1 perl-solv-0.6.20-9.1 perl-solv-debuginfo-0.6.20-9.1 python-solv-0.6.20-9.1 python-solv-debuginfo-0.6.20-9.1 ruby-solv-0.6.20-9.1 ruby-solv-debuginfo-0.6.20-9.1 zypper-1.12.40-9.1 zypper-debuginfo-1.12.40-9.1 zypper-debugsource-1.12.40-9.1 - openSUSE Leap 42.1 (noarch): zypper-aptitude-1.12.40-9.1 zypper-log-1.12.40-9.1 References: https://bugzilla.suse.com/933760 https://bugzilla.suse.com/956480 https://bugzilla.suse.com/964932 https://bugzilla.suse.com/967006 https://bugzilla.suse.com/967828 https://bugzilla.suse.com/971018 https://bugzilla.suse.com/971637 https://bugzilla.suse.com/972768 https://bugzilla.suse.com/974275

1 0

openSUSE-RU-2016:1295-1: Recommended update for clamav-database
by maintenance＠opensuse.org 13 May '16

13 May '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1295-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - database refresh on May 9th This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-582=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201605090001-89.1 References:

1 0

openSUSE-RU-2016:1294-1: Recommended update for the Softwarestack
by maintenance＠opensuse.org 13 May '16

13 May '16

openSUSE Recommended Update: Recommended update for the Softwarestack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1294-1 Rating: low References: #949945 #956480 #967006 #969186 #970575 #971018 #971637 #974275 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update for the Softwarestack fixes the following issues: zypper: - Fix testing for '-- download*' options (boo#956480) - versioncmp: Don't check for zypp lock (boo#970575) - man: Rephrase unclear explanation of --non-interactive (boo#969186) - man: add missing --non-interactive-include-reboot-patches option libzypp: - Provide 'libzypp(plugin:services) = 1' after fixing boo#933760 - Fix credential file parser losing entries with known URL but different user name (boo#933760) - RepoManager: allow extraction of multiple baseurls for service repos (boo#964932) - addRepository: fix to use the correct history file for logging - DiskUsageCounter: Limit estimated waste per file (boo#974275) - Filter unwanted btrfs subvolumes (boo#949945) - Use PluginExecutor for commit- and system-hooks (boo#971637) - BuildRequires: libsolv-devel >= 0.6.19 (boo#971018) libsolv: - Better support of complex deps in pool_match_dep and selection_make_matchdeps - Make SOLVER_REASON_CLEANDEPS_ERASE introspection reason work again - Make dep2str use rpm-like output if disttype is rpm - Implement filtering of Requires(pre,post) for installed packages - Simplify handling of pseudo package updates (boo#967006) - Improve speed of rpmmd metadata parsing Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-579=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libsolv-debugsource-0.6.20-23.1 libsolv-demo-0.6.20-23.1 libsolv-demo-debuginfo-0.6.20-23.1 libsolv-devel-0.6.20-23.1 libsolv-devel-debuginfo-0.6.20-23.1 libsolv-tools-0.6.20-23.1 libsolv-tools-debuginfo-0.6.20-23.1 libzypp-14.43.0-41.1 libzypp-debuginfo-14.43.0-41.1 libzypp-debugsource-14.43.0-41.1 libzypp-devel-14.43.0-41.1 libzypp-devel-doc-14.43.0-41.1 perl-solv-0.6.20-23.1 perl-solv-debuginfo-0.6.20-23.1 python-solv-0.6.20-23.1 python-solv-debuginfo-0.6.20-23.1 ruby-solv-0.6.20-23.1 ruby-solv-debuginfo-0.6.20-23.1 zypper-1.11.54-40.2 zypper-debuginfo-1.11.54-40.2 zypper-debugsource-1.11.54-40.2 - openSUSE 13.2 (noarch): zypper-aptitude-1.11.54-40.2 zypper-log-1.11.54-40.2 References: https://bugzilla.suse.com/949945 https://bugzilla.suse.com/956480 https://bugzilla.suse.com/967006 https://bugzilla.suse.com/969186 https://bugzilla.suse.com/970575 https://bugzilla.suse.com/971018 https://bugzilla.suse.com/971637 https://bugzilla.suse.com/974275

1 0

openSUSE-SU-2016:1292-1: important: Security update for ntp
by opensuse-security＠opensuse.org 12 May '16

12 May '16

openSUSE Security Update: Security update for ntp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1292-1 Rating: important References: #782060 #916617 #937837 #951559 #951629 #956773 #962318 #962784 #962802 #962960 #962966 #962970 #962988 #962994 #962995 #962997 #963000 #963002 #975496 #975981 Cross-References: CVE-2015-5300 CVE-2015-7973 CVE-2015-7974 CVE-2015-7975 CVE-2015-7976 CVE-2015-7977 CVE-2015-7978 CVE-2015-7979 CVE-2015-8138 CVE-2015-8139 CVE-2015-8140 CVE-2015-8158 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 12 vulnerabilities and has 8 fixes is now available. Description: ntp was updated to version 4.2.8p6 to fix 12 security issues. Also yast2-ntp-client was updated to match some sntp syntax changes. (bsc#937837) These security issues were fixed: - CVE-2015-8158: Fixed potential infinite loop in ntpq (bsc#962966). - CVE-2015-8138: Zero Origin Timestamp Bypass (bsc#963002). - CVE-2015-7979: Off-path Denial of Service (DoS) attack on authenticated broadcast mode (bsc#962784). - CVE-2015-7978: Stack exhaustion in recursive traversal of restriction list (bsc#963000). - CVE-2015-7977: reslist NULL pointer dereference (bsc#962970). - CVE-2015-7976: ntpq saveconfig command allows dangerous characters in filenames (bsc#962802). - CVE-2015-7975: nextvar() missing length check (bsc#962988). - CVE-2015-7974: Skeleton Key: Missing key check allows impersonation between authenticated peers (bsc#962960). - CVE-2015-7973: Replay attack on authenticated broadcast mode (bsc#962995). - CVE-2015-8140: ntpq vulnerable to replay attacks (bsc#962994). - CVE-2015-8139: Origin Leak: ntpq and ntpdc, disclose origin (bsc#962997). - CVE-2015-5300: MITM attacker could have forced ntpd to make a step larger than the panic threshold (bsc#951629). These non-security issues were fixed: - fate#320758 bsc#975981: Enable compile-time support for MS-SNTP (--enable-ntp-signd). This replaces the w32 patches in 4.2.4 that added the authreg directive. - bsc#962318: Call /usr/sbin/sntp with full path to synchronize in start-ntpd. When run as cron job, /usr/sbin/ is not in the path, which caused the synchronization to fail. - bsc#782060: Speedup ntpq. - bsc#916617: Add /var/db/ntp-kod. - bsc#956773: Add ntp-ENOBUFS.patch to limit a warning that might happen quite a lot on loaded systems. - bsc#951559,bsc#975496: Fix the TZ offset output of sntp during DST. - Add ntp-fork.patch and build with threads disabled to allow name resolution even when running chrooted. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-578=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ntp-4.2.8p6-15.1 ntp-debuginfo-4.2.8p6-15.1 ntp-debugsource-4.2.8p6-15.1 ntp-doc-4.2.8p6-15.1 - openSUSE Leap 42.1 (noarch): yast2-ntp-client-3.1.22-6.1 yast2-ntp-client-devel-doc-3.1.22-6.1 References: https://www.suse.com/security/cve/CVE-2015-5300.html https://www.suse.com/security/cve/CVE-2015-7973.html https://www.suse.com/security/cve/CVE-2015-7974.html https://www.suse.com/security/cve/CVE-2015-7975.html https://www.suse.com/security/cve/CVE-2015-7976.html https://www.suse.com/security/cve/CVE-2015-7977.html https://www.suse.com/security/cve/CVE-2015-7978.html https://www.suse.com/security/cve/CVE-2015-7979.html https://www.suse.com/security/cve/CVE-2015-8138.html https://www.suse.com/security/cve/CVE-2015-8139.html https://www.suse.com/security/cve/CVE-2015-8140.html https://www.suse.com/security/cve/CVE-2015-8158.html https://bugzilla.suse.com/782060 https://bugzilla.suse.com/916617 https://bugzilla.suse.com/937837 https://bugzilla.suse.com/951559 https://bugzilla.suse.com/951629 https://bugzilla.suse.com/956773 https://bugzilla.suse.com/962318 https://bugzilla.suse.com/962784 https://bugzilla.suse.com/962802 https://bugzilla.suse.com/962960 https://bugzilla.suse.com/962966 https://bugzilla.suse.com/962970 https://bugzilla.suse.com/962988 https://bugzilla.suse.com/962994 https://bugzilla.suse.com/962995 https://bugzilla.suse.com/962997 https://bugzilla.suse.com/963000 https://bugzilla.suse.com/963002 https://bugzilla.suse.com/975496 https://bugzilla.suse.com/975981

1 0

openSUSE-RU-2016:1282-1: Recommended update for mosh
by maintenance＠opensuse.org 11 May '16

11 May '16

openSUSE Recommended Update: Recommended update for mosh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1282-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for mosh provides version 1.2.5 and fixes the following issues: - Bind to a specific IP address with --bind-server. - MOSH_ESCAPE_KEY configures escape character. - Support non-roaming IPv6. - Implement XTerm mouse mode. - Report Git revision along with version if available. - Add pselect() emulation. - ARM Neon: fix gcc4.8 compiling problem. - NaCl: Conditionally rename main to mosh_main. - Debian: Improve bash-completion install and functionality. - Automake/autoconf workarounds. - mosh-server: Allow startup without PTY. - network.cc: Properly close old fd on Socket assignment operator. - mosh-server: Allow startup with zero-window-size PTY. - AddrInfo: Fix error message generation when node == NULL. - Timestamp: Prevent integer overflow on Darwin PPC 32-bit. - scripts/mosh: Fix hang when remote closes the connection. - Fix issues with parsing of 256-color SGR sequences. - Numerous code hygiene, Coverity, and Clang static analyzer fixes. - Remove mosh-1.2.4-ipv6.patch: merged upstream. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-577=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): mosh-1.2.5-5.1 References:

1 0

openSUSE-SU-2016:1274-1: important: Security update for php5
by opensuse-security＠opensuse.org 11 May '16

11 May '16

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1274-1 Rating: important References: #976775 #976996 #976997 #977000 #977003 #977005 Cross-References: CVE-2015-8866 CVE-2015-8867 CVE-2016-3074 CVE-2016-4070 CVE-2016-4071 CVE-2016-4073 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for php5 fixes the following issues: - CVE-2016-4073: A remote attacker could have caused denial of service, or possibly execute arbitrary code, due to incorrect handling of string length calculations in mb_strcut() (bsc#977003) - CVE-2016-3074: Signedness vulnerability in bundled libgd may have resulted in a heap overflow when processing compressed gd2 data. (boo#976775) - CVE-2015-8867: The PHP function openssl_random_pseudo_bytes() did not return cryptographically secure random bytes (bsc#977005) - CVE-2016-4070: The libxml_disable_entity_loader() setting was shared between threads, which could have resulted in XML external entity injection and entity expansion issues (bsc#976997) - CVE-2015-8866: A remote attacker could have caused denial of service due to incorrect handling of large strings in php_raw_url_encode() (bsc#976996) - CVE-2016-4071: A remote attacker could have caused denial of service, or possibly execute arbitrary code, due to incorrect handling of string formatting in php_snmp_error() (bsc#977000) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-576=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_php5-5.6.1-57.1 apache2-mod_php5-debuginfo-5.6.1-57.1 php5-5.6.1-57.1 php5-bcmath-5.6.1-57.1 php5-bcmath-debuginfo-5.6.1-57.1 php5-bz2-5.6.1-57.1 php5-bz2-debuginfo-5.6.1-57.1 php5-calendar-5.6.1-57.1 php5-calendar-debuginfo-5.6.1-57.1 php5-ctype-5.6.1-57.1 php5-ctype-debuginfo-5.6.1-57.1 php5-curl-5.6.1-57.1 php5-curl-debuginfo-5.6.1-57.1 php5-dba-5.6.1-57.1 php5-dba-debuginfo-5.6.1-57.1 php5-debuginfo-5.6.1-57.1 php5-debugsource-5.6.1-57.1 php5-devel-5.6.1-57.1 php5-dom-5.6.1-57.1 php5-dom-debuginfo-5.6.1-57.1 php5-enchant-5.6.1-57.1 php5-enchant-debuginfo-5.6.1-57.1 php5-exif-5.6.1-57.1 php5-exif-debuginfo-5.6.1-57.1 php5-fastcgi-5.6.1-57.1 php5-fastcgi-debuginfo-5.6.1-57.1 php5-fileinfo-5.6.1-57.1 php5-fileinfo-debuginfo-5.6.1-57.1 php5-firebird-5.6.1-57.1 php5-firebird-debuginfo-5.6.1-57.1 php5-fpm-5.6.1-57.1 php5-fpm-debuginfo-5.6.1-57.1 php5-ftp-5.6.1-57.1 php5-ftp-debuginfo-5.6.1-57.1 php5-gd-5.6.1-57.1 php5-gd-debuginfo-5.6.1-57.1 php5-gettext-5.6.1-57.1 php5-gettext-debuginfo-5.6.1-57.1 php5-gmp-5.6.1-57.1 php5-gmp-debuginfo-5.6.1-57.1 php5-iconv-5.6.1-57.1 php5-iconv-debuginfo-5.6.1-57.1 php5-imap-5.6.1-57.1 php5-imap-debuginfo-5.6.1-57.1 php5-intl-5.6.1-57.1 php5-intl-debuginfo-5.6.1-57.1 php5-json-5.6.1-57.1 php5-json-debuginfo-5.6.1-57.1 php5-ldap-5.6.1-57.1 php5-ldap-debuginfo-5.6.1-57.1 php5-mbstring-5.6.1-57.1 php5-mbstring-debuginfo-5.6.1-57.1 php5-mcrypt-5.6.1-57.1 php5-mcrypt-debuginfo-5.6.1-57.1 php5-mssql-5.6.1-57.1 php5-mssql-debuginfo-5.6.1-57.1 php5-mysql-5.6.1-57.1 php5-mysql-debuginfo-5.6.1-57.1 php5-odbc-5.6.1-57.1 php5-odbc-debuginfo-5.6.1-57.1 php5-opcache-5.6.1-57.1 php5-opcache-debuginfo-5.6.1-57.1 php5-openssl-5.6.1-57.1 php5-openssl-debuginfo-5.6.1-57.1 php5-pcntl-5.6.1-57.1 php5-pcntl-debuginfo-5.6.1-57.1 php5-pdo-5.6.1-57.1 php5-pdo-debuginfo-5.6.1-57.1 php5-pgsql-5.6.1-57.1 php5-pgsql-debuginfo-5.6.1-57.1 php5-phar-5.6.1-57.1 php5-phar-debuginfo-5.6.1-57.1 php5-posix-5.6.1-57.1 php5-posix-debuginfo-5.6.1-57.1 php5-pspell-5.6.1-57.1 php5-pspell-debuginfo-5.6.1-57.1 php5-readline-5.6.1-57.1 php5-readline-debuginfo-5.6.1-57.1 php5-shmop-5.6.1-57.1 php5-shmop-debuginfo-5.6.1-57.1 php5-snmp-5.6.1-57.1 php5-snmp-debuginfo-5.6.1-57.1 php5-soap-5.6.1-57.1 php5-soap-debuginfo-5.6.1-57.1 php5-sockets-5.6.1-57.1 php5-sockets-debuginfo-5.6.1-57.1 php5-sqlite-5.6.1-57.1 php5-sqlite-debuginfo-5.6.1-57.1 php5-suhosin-5.6.1-57.1 php5-suhosin-debuginfo-5.6.1-57.1 php5-sysvmsg-5.6.1-57.1 php5-sysvmsg-debuginfo-5.6.1-57.1 php5-sysvsem-5.6.1-57.1 php5-sysvsem-debuginfo-5.6.1-57.1 php5-sysvshm-5.6.1-57.1 php5-sysvshm-debuginfo-5.6.1-57.1 php5-tidy-5.6.1-57.1 php5-tidy-debuginfo-5.6.1-57.1 php5-tokenizer-5.6.1-57.1 php5-tokenizer-debuginfo-5.6.1-57.1 php5-wddx-5.6.1-57.1 php5-wddx-debuginfo-5.6.1-57.1 php5-xmlreader-5.6.1-57.1 php5-xmlreader-debuginfo-5.6.1-57.1 php5-xmlrpc-5.6.1-57.1 php5-xmlrpc-debuginfo-5.6.1-57.1 php5-xmlwriter-5.6.1-57.1 php5-xmlwriter-debuginfo-5.6.1-57.1 php5-xsl-5.6.1-57.1 php5-xsl-debuginfo-5.6.1-57.1 php5-zip-5.6.1-57.1 php5-zip-debuginfo-5.6.1-57.1 php5-zlib-5.6.1-57.1 php5-zlib-debuginfo-5.6.1-57.1 - openSUSE 13.2 (noarch): php5-pear-5.6.1-57.1 References: https://www.suse.com/security/cve/CVE-2015-8866.html https://www.suse.com/security/cve/CVE-2015-8867.html https://www.suse.com/security/cve/CVE-2016-3074.html https://www.suse.com/security/cve/CVE-2016-4070.html https://www.suse.com/security/cve/CVE-2016-4071.html https://www.suse.com/security/cve/CVE-2016-4073.html https://bugzilla.suse.com/976775 https://bugzilla.suse.com/976996 https://bugzilla.suse.com/976997 https://bugzilla.suse.com/977000 https://bugzilla.suse.com/977003 https://bugzilla.suse.com/977005

1 0

openSUSE-SU-2016:1273-1: important: Security update for compat-openssl098
by opensuse-security＠opensuse.org 10 May '16

10 May '16

openSUSE Security Update: Security update for compat-openssl098 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1273-1 Rating: important References: #889013 #968050 #976942 #976943 #977614 #977615 #977617 Cross-References: CVE-2016-0702 CVE-2016-2105 CVE-2016-2106 CVE-2016-2108 CVE-2016-2109 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has two fixes is now available. Description: This update for compat-openssl098 fixes the following issues: - CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617) - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942) - CVE-2016-0702: Side channel attack on modular exponentiation "CacheBleed" (bsc#968050) - bsc#976943: Buffer overrun in ASN1_parse The following non-security bugs were fixed: - bsc#889013: Rename README.SuSE to the new spelling (bsc#889013) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-575=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): compat-openssl098-debugsource-0.9.8j-12.2 libopenssl0_9_8-0.9.8j-12.2 libopenssl0_9_8-debuginfo-0.9.8j-12.2 - openSUSE Leap 42.1 (x86_64): libopenssl0_9_8-32bit-0.9.8j-12.2 libopenssl0_9_8-debuginfo-32bit-0.9.8j-12.2 References: https://www.suse.com/security/cve/CVE-2016-0702.html https://www.suse.com/security/cve/CVE-2016-2105.html https://www.suse.com/security/cve/CVE-2016-2106.html https://www.suse.com/security/cve/CVE-2016-2108.html https://www.suse.com/security/cve/CVE-2016-2109.html https://bugzilla.suse.com/889013 https://bugzilla.suse.com/968050 https://bugzilla.suse.com/976942 https://bugzilla.suse.com/976943 https://bugzilla.suse.com/977614 https://bugzilla.suse.com/977615 https://bugzilla.suse.com/977617

1 0

openSUSE-SU-2016:1266-1: important: Security update for ImageMagick
by opensuse-security＠opensuse.org 07 May '16

07 May '16

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1266-1 Rating: important References: #978061 Cross-References: CVE-2016-3714 CVE-2016-3715 CVE-2016-3716 CVE-2016-3717 CVE-2016-3718 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for ImageMagick fixes the following issues: Security issues fixed: - Several coders were vulnerable to remote code execution attacks, these coders have now been disabled by default but can be re-enabled by editing "/etc/ImageMagick-*/policy.xml" (bsc#978061) - CVE-2016-3714: Insufficient shell characters filtering leads to (potentially remote) code execution - CVE-2016-3715: Possible file deletion by using ImageMagick's 'ephemeral' pseudo protocol which deletes files after reading. - CVE-2016-3716: Possible file moving by using ImageMagick's 'msl' pseudo protocol with any extension in any folder. - CVE-2016-3717: Possible local file read by using ImageMagick's 'label' pseudo protocol to get content of the files from the server. - CVE-2016-3718: Possible Server Side Request Forgery (SSRF) to make HTTP GET or FTP request. Bugs fixed: - Use external svg loader (rsvg) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-574=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ImageMagick-6.8.8.1-9.1 ImageMagick-debuginfo-6.8.8.1-9.1 ImageMagick-debugsource-6.8.8.1-9.1 ImageMagick-devel-6.8.8.1-9.1 ImageMagick-extra-6.8.8.1-9.1 ImageMagick-extra-debuginfo-6.8.8.1-9.1 libMagick++-6_Q16-3-6.8.8.1-9.1 libMagick++-6_Q16-3-debuginfo-6.8.8.1-9.1 libMagick++-devel-6.8.8.1-9.1 libMagickCore-6_Q16-1-6.8.8.1-9.1 libMagickCore-6_Q16-1-debuginfo-6.8.8.1-9.1 libMagickWand-6_Q16-1-6.8.8.1-9.1 libMagickWand-6_Q16-1-debuginfo-6.8.8.1-9.1 perl-PerlMagick-6.8.8.1-9.1 perl-PerlMagick-debuginfo-6.8.8.1-9.1 - openSUSE Leap 42.1 (noarch): ImageMagick-doc-6.8.8.1-9.1 - openSUSE Leap 42.1 (x86_64): ImageMagick-devel-32bit-6.8.8.1-9.1 libMagick++-6_Q16-3-32bit-6.8.8.1-9.1 libMagick++-6_Q16-3-debuginfo-32bit-6.8.8.1-9.1 libMagick++-devel-32bit-6.8.8.1-9.1 libMagickCore-6_Q16-1-32bit-6.8.8.1-9.1 libMagickCore-6_Q16-1-debuginfo-32bit-6.8.8.1-9.1 libMagickWand-6_Q16-1-32bit-6.8.8.1-9.1 libMagickWand-6_Q16-1-debuginfo-32bit-6.8.8.1-9.1 References: https://www.suse.com/security/cve/CVE-2016-3714.html https://www.suse.com/security/cve/CVE-2016-3715.html https://www.suse.com/security/cve/CVE-2016-3716.html https://www.suse.com/security/cve/CVE-2016-3717.html https://www.suse.com/security/cve/CVE-2016-3718.html https://bugzilla.suse.com/978061

1 0

openSUSE-SU-2016:1265-1: important: Security update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 07 May '16

07 May '16

openSUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1265-1 Rating: important References: #976340 Cross-References: CVE-2016-0686 CVE-2016-0687 CVE-2016-0695 CVE-2016-3425 CVE-2016-3427 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for java-1_7_0-openjdk to version 2.6.6 fixes five security issues. These security issues were fixed: - CVE-2016-0686: Ensure thread consistency (bsc#976340). - CVE-2016-0687: Better byte behavior (bsc#976340). - CVE-2016-0695: Make DSA more fair (bsc#976340). - CVE-2016-3425: Better buffering of XML strings (bsc#976340). - CVE-2016-3427: Improve JMX connections (bsc#976340). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-573=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): java-1_7_0-openjdk-1.7.0.101-31.1 java-1_7_0-openjdk-accessibility-1.7.0.101-31.1 java-1_7_0-openjdk-debuginfo-1.7.0.101-31.1 java-1_7_0-openjdk-debugsource-1.7.0.101-31.1 java-1_7_0-openjdk-demo-1.7.0.101-31.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.101-31.1 java-1_7_0-openjdk-devel-1.7.0.101-31.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.101-31.1 java-1_7_0-openjdk-headless-1.7.0.101-31.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.101-31.1 java-1_7_0-openjdk-src-1.7.0.101-31.1 - openSUSE Leap 42.1 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.101-31.1 - openSUSE Leap 42.1 (x86_64): java-1_7_0-openjdk-bootstrap-1.7.0.101-31.1 java-1_7_0-openjdk-bootstrap-debuginfo-1.7.0.101-31.1 java-1_7_0-openjdk-bootstrap-debugsource-1.7.0.101-31.1 java-1_7_0-openjdk-bootstrap-devel-1.7.0.101-31.1 java-1_7_0-openjdk-bootstrap-devel-debuginfo-1.7.0.101-31.1 java-1_7_0-openjdk-bootstrap-headless-1.7.0.101-31.1 java-1_7_0-openjdk-bootstrap-headless-debuginfo-1.7.0.101-31.1 References: https://www.suse.com/security/cve/CVE-2016-0686.html https://www.suse.com/security/cve/CVE-2016-0687.html https://www.suse.com/security/cve/CVE-2016-0695.html https://www.suse.com/security/cve/CVE-2016-3425.html https://www.suse.com/security/cve/CVE-2016-3427.html https://bugzilla.suse.com/976340

1 0

openSUSE-SU-2016:1264-1: moderate: Security update for subversion
by opensuse-security＠opensuse.org 07 May '16

07 May '16

openSUSE Security Update: Security update for subversion ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1264-1 Rating: moderate References: #976849 #976850 #977424 Cross-References: CVE-2016-2167 CVE-2016-2168 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for subversion fixes the following issues: - CVE-2016-2167: mod_authz_svn: DoS in MOVE/COPY authorization check (bsc#976849) - CVE-2016-2168: svnserve/sasl may authenticate users using the wrong realm (bsc#976850) The following non-security bugs were fixed: - mod_authz_svn: fix authz with mod_auth_kerb/mod_auth_ntlm (boo#977424) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-571=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.8.16-2.26.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.8.16-2.26.1 libsvn_auth_kwallet-1-0-1.8.16-2.26.1 libsvn_auth_kwallet-1-0-debuginfo-1.8.16-2.26.1 subversion-1.8.16-2.26.1 subversion-debuginfo-1.8.16-2.26.1 subversion-debugsource-1.8.16-2.26.1 subversion-devel-1.8.16-2.26.1 subversion-perl-1.8.16-2.26.1 subversion-perl-debuginfo-1.8.16-2.26.1 subversion-python-1.8.16-2.26.1 subversion-python-ctypes-1.8.16-2.26.1 subversion-python-debuginfo-1.8.16-2.26.1 subversion-ruby-1.8.16-2.26.1 subversion-ruby-debuginfo-1.8.16-2.26.1 subversion-server-1.8.16-2.26.1 subversion-server-debuginfo-1.8.16-2.26.1 subversion-tools-1.8.16-2.26.1 subversion-tools-debuginfo-1.8.16-2.26.1 - openSUSE 13.2 (noarch): subversion-bash-completion-1.8.16-2.26.1 References: https://www.suse.com/security/cve/CVE-2016-2167.html https://www.suse.com/security/cve/CVE-2016-2168.html https://bugzilla.suse.com/976849 https://bugzilla.suse.com/976850 https://bugzilla.suse.com/977424

1 0

openSUSE-SU-2016:1263-1: moderate: Security update for subversion
by opensuse-security＠opensuse.org 07 May '16

07 May '16

openSUSE Security Update: Security update for subversion ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1263-1 Rating: moderate References: #911620 #969159 #976849 #976850 Cross-References: CVE-2016-2167 CVE-2016-2168 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for subversion fixes the following issues: - CVE-2016-2167: mod_authz_svn: DoS in MOVE/COPY authorization check (bsc#976849) - CVE-2016-2168: svnserve/sasl may authenticate users using the wrong realm (bsc#976850) The following non-security bugs were fixed: - bsc#969159: subversion dependencies did not enforce matching password store - bsc#911620: svnserve could not be started via YaST Service manager This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-570=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): libsvn_auth_gnome_keyring-1-0-1.8.10-9.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.8.10-9.1 libsvn_auth_kwallet-1-0-1.8.10-9.1 libsvn_auth_kwallet-1-0-debuginfo-1.8.10-9.1 subversion-1.8.10-9.1 subversion-debuginfo-1.8.10-9.1 subversion-debugsource-1.8.10-9.1 subversion-devel-1.8.10-9.1 subversion-perl-1.8.10-9.1 subversion-perl-debuginfo-1.8.10-9.1 subversion-python-1.8.10-9.1 subversion-python-debuginfo-1.8.10-9.1 subversion-ruby-1.8.10-9.1 subversion-ruby-debuginfo-1.8.10-9.1 subversion-server-1.8.10-9.1 subversion-server-debuginfo-1.8.10-9.1 subversion-tools-1.8.10-9.1 subversion-tools-debuginfo-1.8.10-9.1 - openSUSE Leap 42.1 (noarch): subversion-bash-completion-1.8.10-9.1 References: https://www.suse.com/security/cve/CVE-2016-2167.html https://www.suse.com/security/cve/CVE-2016-2168.html https://bugzilla.suse.com/911620 https://bugzilla.suse.com/969159 https://bugzilla.suse.com/976849 https://bugzilla.suse.com/976850

1 0

openSUSE-SU-2016:1262-1: important: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 07 May '16

07 May '16

openSUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1262-1 Rating: important References: #976340 Cross-References: CVE-2016-0686 CVE-2016-0687 CVE-2016-0695 CVE-2016-3425 CVE-2016-3426 CVE-2016-3427 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for java-1_8_0-openjdk fixes the following security issues - April 2016 Oracle CPU (bsc#976340): - CVE-2016-0686: Unspecified vulnerability allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to Serialization. - CVE-2016-0687: Unspecified vulnerability allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to the Hotspot sub-component - CVE-2016-0695: Unspecified vulnerability allowed remote attackers to affect confidentiality via vectors related to the Security Component - CVE-2016-3425: Unspecified vulnerability allowed remote attackers to affect availability via vectors related to JAXP - CVE-2016-3426: Unspecified vulnerability allowed remote attackers to affect confidentiality via vectors related to JCE - CVE-2016-3427: Unspecified vulnerability allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-572=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): java-1_8_0-openjdk-1.8.0.91-12.1 java-1_8_0-openjdk-accessibility-1.8.0.91-12.1 java-1_8_0-openjdk-debuginfo-1.8.0.91-12.1 java-1_8_0-openjdk-debugsource-1.8.0.91-12.1 java-1_8_0-openjdk-demo-1.8.0.91-12.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.91-12.1 java-1_8_0-openjdk-devel-1.8.0.91-12.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.91-12.1 java-1_8_0-openjdk-headless-1.8.0.91-12.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.91-12.1 java-1_8_0-openjdk-src-1.8.0.91-12.1 - openSUSE Leap 42.1 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.91-12.1 References: https://www.suse.com/security/cve/CVE-2016-0686.html https://www.suse.com/security/cve/CVE-2016-0687.html https://www.suse.com/security/cve/CVE-2016-0695.html https://www.suse.com/security/cve/CVE-2016-3425.html https://www.suse.com/security/cve/CVE-2016-3426.html https://www.suse.com/security/cve/CVE-2016-3427.html https://bugzilla.suse.com/976340

1 0

openSUSE-SU-2016:1261-1: important: Security update for ImageMagick
by opensuse-security＠opensuse.org 07 May '16

07 May '16

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1261-1 Rating: important References: #978061 Cross-References: CVE-2016-3714 CVE-2016-3715 CVE-2016-3716 CVE-2016-3717 CVE-2016-3718 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for ImageMagick fixes the following issues: The update disables various insecure coders [boo#978061] These fix issues tracked in CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717, CVE-2016-3718 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-569=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ImageMagick-6.8.9.8-18.1 ImageMagick-debuginfo-6.8.9.8-18.1 ImageMagick-debugsource-6.8.9.8-18.1 ImageMagick-devel-6.8.9.8-18.1 ImageMagick-extra-6.8.9.8-18.1 ImageMagick-extra-debuginfo-6.8.9.8-18.1 libMagick++-6_Q16-5-6.8.9.8-18.1 libMagick++-6_Q16-5-debuginfo-6.8.9.8-18.1 libMagick++-devel-6.8.9.8-18.1 libMagickCore-6_Q16-2-6.8.9.8-18.1 libMagickCore-6_Q16-2-debuginfo-6.8.9.8-18.1 libMagickWand-6_Q16-2-6.8.9.8-18.1 libMagickWand-6_Q16-2-debuginfo-6.8.9.8-18.1 perl-PerlMagick-6.8.9.8-18.1 perl-PerlMagick-debuginfo-6.8.9.8-18.1 - openSUSE 13.2 (noarch): ImageMagick-doc-6.8.9.8-18.1 - openSUSE 13.2 (x86_64): ImageMagick-devel-32bit-6.8.9.8-18.1 libMagick++-6_Q16-5-32bit-6.8.9.8-18.1 libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-18.1 libMagick++-devel-32bit-6.8.9.8-18.1 libMagickCore-6_Q16-2-32bit-6.8.9.8-18.1 libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-18.1 libMagickWand-6_Q16-2-32bit-6.8.9.8-18.1 libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-18.1 References: https://www.suse.com/security/cve/CVE-2016-3714.html https://www.suse.com/security/cve/CVE-2016-3715.html https://www.suse.com/security/cve/CVE-2016-3716.html https://www.suse.com/security/cve/CVE-2016-3717.html https://www.suse.com/security/cve/CVE-2016-3718.html https://bugzilla.suse.com/978061

1 0

openSUSE-RU-2016:1256-1: Recommended update for ruby2.1
by maintenance＠opensuse.org 06 May '16

06 May '16

openSUSE Recommended Update: Recommended update for ruby2.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1256-1 Rating: low References: #973073 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ruby2.1 brings performance improvements of Ruby on the IBM POWER platform. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-568=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libruby2_1-2_1-2.1.2-7.1 libruby2_1-2_1-debuginfo-2.1.2-7.1 ruby2.1-2.1.2-7.1 ruby2.1-debuginfo-2.1.2-7.1 ruby2.1-debugsource-2.1.2-7.1 ruby2.1-devel-2.1.2-7.1 ruby2.1-devel-extra-2.1.2-7.1 ruby2.1-doc-2.1.2-7.1 ruby2.1-stdlib-2.1.2-7.1 ruby2.1-stdlib-debuginfo-2.1.2-7.1 - openSUSE Leap 42.1 (noarch): ruby2.1-doc-ri-2.1.2-7.1 References: https://bugzilla.suse.com/973073

1 0

openSUSE-RU-2016:1252-1: Recommended update for hwinfo
by maintenance＠opensuse.org 06 May '16

06 May '16

openSUSE Recommended Update: Recommended update for hwinfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1252-1 Rating: low References: #974737 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for hwinfo adjusts the DMI parser to read memory size according to the latest SMBIOS spec. (bsc#974737) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-567=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): hwinfo-21.24-3.1 hwinfo-debuginfo-21.24-3.1 hwinfo-debugsource-21.24-3.1 hwinfo-devel-21.24-3.1 hwinfo-devel-debuginfo-21.24-3.1 References: https://bugzilla.suse.com/974737

1 0

openSUSE-SU-2016:1251-1: moderate: Security update to Firefox 46.0
by opensuse-security＠opensuse.org 06 May '16

06 May '16

openSUSE Security Update: Security update to Firefox 46.0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1251-1 Rating: moderate References: #977333 #977373 #977375 #977376 #977377 #977378 #977379 #977380 #977381 #977382 #977384 #977386 #977388 Cross-References: CVE-2016-2804 CVE-2016-2806 CVE-2016-2807 CVE-2016-2808 CVE-2016-2809 CVE-2016-2810 CVE-2016-2811 CVE-2016-2812 CVE-2016-2813 CVE-2016-2814 CVE-2016-2816 CVE-2016-2817 CVE-2016-2820 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update to Mozilla Firefox 46.0 fixes several security issues and bugs (boo#977333). The following vulnerabilities were fixed: - CVE-2016-2804: Miscellaneous memory safety hazards - MFSA 2016-39 (boo#977373) - CVE-2016-2806: Miscellaneous memory safety hazards - MFSA 2016-39 (boo#977375) - CVE-2016-2807: Miscellaneous memory safety hazards - MFSA 2016-39 (boo#977376) - CVE-2016-2808: Write to invalid HashMap entry through JavaScript.watch() - MFSA 2016-47 (boo#977386) - CVE-2016-2811: Use-after-free in Service Worker - MFSA 2016-42 (boo#977379) - CVE-2016-2812: Buffer overflow in Service Worker - MFSA 2016-42 (boo#977379) - CVE-2016-2814: Buffer overflow in libstagefright with CENC offsets - MFSA 2016-44 (boo#977381) - CVE-2016-2816: CSP not applied to pages sent with multipart/x-mixed-replace - MFSA 2016-45 (boo#977382) - CVE-2016-2817: Elevation of privilege with chrome.tabs.update API in web extensions - MFSA 2016-46 (boo#977384) - CVE-2016-2820: Firefox Health Reports could accept events from untrusted domains - MFSA 2016-48 (boo#977388) The following miscellaneous changes are included: - Improved security of the JavaScript Just In Time (JIT) Compiler - WebRTC fixes to improve performance and stability - Added support for document.elementsFromPoint - Added HKDF support for Web Crypto API The minimum requirements increased to NSPR 4.12 and NSS 3.22.3. Mozilla NSS was updated to 3.22.3 as a dependency for Mozilla Firefox 46.0, with the following changes: - Increase compatibility of TLS extended master secret, don't send an empty TLS extension last in the handshake (bmo#1243641) - RSA-PSS signatures are now supported - Pseudorandom functions based on hashes other than SHA-1 are now supported - Enforce an External Policy on NSS from a config file Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-566=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): MozillaFirefox-46.0-113.2 MozillaFirefox-branding-upstream-46.0-113.2 MozillaFirefox-buildsymbols-46.0-113.2 MozillaFirefox-debuginfo-46.0-113.2 MozillaFirefox-debugsource-46.0-113.2 MozillaFirefox-devel-46.0-113.2 MozillaFirefox-translations-common-46.0-113.2 MozillaFirefox-translations-other-46.0-113.2 libfreebl3-3.22.3-77.1 libfreebl3-debuginfo-3.22.3-77.1 libsoftokn3-3.22.3-77.1 libsoftokn3-debuginfo-3.22.3-77.1 mozilla-nss-3.22.3-77.1 mozilla-nss-certs-3.22.3-77.1 mozilla-nss-certs-debuginfo-3.22.3-77.1 mozilla-nss-debuginfo-3.22.3-77.1 mozilla-nss-debugsource-3.22.3-77.1 mozilla-nss-devel-3.22.3-77.1 mozilla-nss-sysinit-3.22.3-77.1 mozilla-nss-sysinit-debuginfo-3.22.3-77.1 mozilla-nss-tools-3.22.3-77.1 mozilla-nss-tools-debuginfo-3.22.3-77.1 - openSUSE 13.1 (x86_64): libfreebl3-32bit-3.22.3-77.1 libfreebl3-debuginfo-32bit-3.22.3-77.1 libsoftokn3-32bit-3.22.3-77.1 libsoftokn3-debuginfo-32bit-3.22.3-77.1 mozilla-nss-32bit-3.22.3-77.1 mozilla-nss-certs-32bit-3.22.3-77.1 mozilla-nss-certs-debuginfo-32bit-3.22.3-77.1 mozilla-nss-debuginfo-32bit-3.22.3-77.1 mozilla-nss-sysinit-32bit-3.22.3-77.1 mozilla-nss-sysinit-debuginfo-32bit-3.22.3-77.1 References: https://www.suse.com/security/cve/CVE-2016-2804.html https://www.suse.com/security/cve/CVE-2016-2806.html https://www.suse.com/security/cve/CVE-2016-2807.html https://www.suse.com/security/cve/CVE-2016-2808.html https://www.suse.com/security/cve/CVE-2016-2809.html https://www.suse.com/security/cve/CVE-2016-2810.html https://www.suse.com/security/cve/CVE-2016-2811.html https://www.suse.com/security/cve/CVE-2016-2812.html https://www.suse.com/security/cve/CVE-2016-2813.html https://www.suse.com/security/cve/CVE-2016-2814.html https://www.suse.com/security/cve/CVE-2016-2816.html https://www.suse.com/security/cve/CVE-2016-2817.html https://www.suse.com/security/cve/CVE-2016-2820.html https://bugzilla.suse.com/977333 https://bugzilla.suse.com/977373 https://bugzilla.suse.com/977375 https://bugzilla.suse.com/977376 https://bugzilla.suse.com/977377 https://bugzilla.suse.com/977378 https://bugzilla.suse.com/977379 https://bugzilla.suse.com/977380 https://bugzilla.suse.com/977381 https://bugzilla.suse.com/977382 https://bugzilla.suse.com/977384 https://bugzilla.suse.com/977386 https://bugzilla.suse.com/977388

1 0

openSUSE-SU-2016:1243-1: important: Security update for openssl
by opensuse-security＠opensuse.org 05 May '16

05 May '16

openSUSE Security Update: Security update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1243-1 Rating: important References: #958501 #976942 #976943 #977614 #977615 #977616 #977617 #977621 Cross-References: CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2108 CVE-2016-2109 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has three fixes is now available. Description: This update for openssl fixes the following issues: - CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617) - CVE-2016-2107: Padding oracle in AES-NI CBC MAC check (bsc#977616) - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942) - bsc#976943: Buffer overrun in ASN1_parse - bsc#977621: Preserve negotiated digests for SNI (bsc#977621) - bsc#958501: Fix openssl enc -non-fips-allow option in FIPS mode (bsc#958501) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-564=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libopenssl-devel-1.0.1i-15.1 libopenssl1_0_0-1.0.1i-15.1 libopenssl1_0_0-debuginfo-1.0.1i-15.1 libopenssl1_0_0-hmac-1.0.1i-15.1 openssl-1.0.1i-15.1 openssl-debuginfo-1.0.1i-15.1 openssl-debugsource-1.0.1i-15.1 - openSUSE Leap 42.1 (x86_64): libopenssl-devel-32bit-1.0.1i-15.1 libopenssl1_0_0-32bit-1.0.1i-15.1 libopenssl1_0_0-debuginfo-32bit-1.0.1i-15.1 libopenssl1_0_0-hmac-32bit-1.0.1i-15.1 - openSUSE Leap 42.1 (noarch): openssl-doc-1.0.1i-15.1 References: https://www.suse.com/security/cve/CVE-2016-2105.html https://www.suse.com/security/cve/CVE-2016-2106.html https://www.suse.com/security/cve/CVE-2016-2107.html https://www.suse.com/security/cve/CVE-2016-2108.html https://www.suse.com/security/cve/CVE-2016-2109.html https://bugzilla.suse.com/958501 https://bugzilla.suse.com/976942 https://bugzilla.suse.com/976943 https://bugzilla.suse.com/977614 https://bugzilla.suse.com/977615 https://bugzilla.suse.com/977616 https://bugzilla.suse.com/977617 https://bugzilla.suse.com/977621

1 0

openSUSE-SU-2016:1242-1: important: Security update for libopenssl0_9_8
by opensuse-security＠opensuse.org 05 May '16

05 May '16

openSUSE Security Update: Security update for libopenssl0_9_8 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1242-1 Rating: important References: #968050 #976942 #976943 #977614 #977615 #977617 Cross-References: CVE-2016-0702 CVE-2016-2105 CVE-2016-2106 CVE-2016-2108 CVE-2016-2109 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has one errata is now available. Description: This update for libopenssl0_9_8 fixes the following issues: - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615) - CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942) - CVE-2016-0702: Side channel attack on modular exponentiation "CacheBleed" (bsc#968050) - bsc#976943: Buffer overrun in ASN1_parse Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-565=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-565=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libopenssl0_9_8-0.9.8zh-17.1 libopenssl0_9_8-debuginfo-0.9.8zh-17.1 libopenssl0_9_8-debugsource-0.9.8zh-17.1 - openSUSE Leap 42.1 (x86_64): libopenssl0_9_8-32bit-0.9.8zh-17.1 libopenssl0_9_8-debuginfo-32bit-0.9.8zh-17.1 - openSUSE 13.2 (i586 x86_64): libopenssl0_9_8-0.9.8zh-9.6.1 libopenssl0_9_8-debuginfo-0.9.8zh-9.6.1 libopenssl0_9_8-debugsource-0.9.8zh-9.6.1 - openSUSE 13.2 (x86_64): libopenssl0_9_8-32bit-0.9.8zh-9.6.1 libopenssl0_9_8-debuginfo-32bit-0.9.8zh-9.6.1 References: https://www.suse.com/security/cve/CVE-2016-0702.html https://www.suse.com/security/cve/CVE-2016-2105.html https://www.suse.com/security/cve/CVE-2016-2106.html https://www.suse.com/security/cve/CVE-2016-2108.html https://www.suse.com/security/cve/CVE-2016-2109.html https://bugzilla.suse.com/968050 https://bugzilla.suse.com/976942 https://bugzilla.suse.com/976943 https://bugzilla.suse.com/977614 https://bugzilla.suse.com/977615 https://bugzilla.suse.com/977617

1 0

openSUSE-SU-2016:1241-1: important: Security update for libopenssl0_9_8
by opensuse-security＠opensuse.org 05 May '16

05 May '16

openSUSE Security Update: Security update for libopenssl0_9_8 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1241-1 Rating: important References: #963415 #968046 #968048 #968050 #968374 #976942 #976943 #977614 #977615 #977617 Cross-References: CVE-2015-3197 CVE-2016-0702 CVE-2016-0797 CVE-2016-0799 CVE-2016-0800 CVE-2016-2105 CVE-2016-2106 CVE-2016-2108 CVE-2016-2109 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves 9 vulnerabilities and has one errata is now available. Description: This update for libopenssl0_9_8 fixes the following issues: - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615) - CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942) - CVE-2016-0702: Side channel attack on modular exponentiation "CacheBleed" (bsc#968050) - bsc#976943: Buffer overrun in ASN1_parse and updates the package to version 0.9.8zh which collects many other fixes, including security ones. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-563=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libopenssl0_9_8-0.9.8zh-5.3.1 libopenssl0_9_8-debuginfo-0.9.8zh-5.3.1 libopenssl0_9_8-debugsource-0.9.8zh-5.3.1 - openSUSE 13.1 (x86_64): libopenssl0_9_8-32bit-0.9.8zh-5.3.1 libopenssl0_9_8-debuginfo-32bit-0.9.8zh-5.3.1 References: https://www.suse.com/security/cve/CVE-2015-3197.html https://www.suse.com/security/cve/CVE-2016-0702.html https://www.suse.com/security/cve/CVE-2016-0797.html https://www.suse.com/security/cve/CVE-2016-0799.html https://www.suse.com/security/cve/CVE-2016-0800.html https://www.suse.com/security/cve/CVE-2016-2105.html https://www.suse.com/security/cve/CVE-2016-2106.html https://www.suse.com/security/cve/CVE-2016-2108.html https://www.suse.com/security/cve/CVE-2016-2109.html https://bugzilla.suse.com/963415 https://bugzilla.suse.com/968046 https://bugzilla.suse.com/968048 https://bugzilla.suse.com/968050 https://bugzilla.suse.com/968374 https://bugzilla.suse.com/976942 https://bugzilla.suse.com/976943 https://bugzilla.suse.com/977614 https://bugzilla.suse.com/977615 https://bugzilla.suse.com/977617

1 0

openSUSE-SU-2016:1240-1: important: Security update for openssl
by opensuse-security＠opensuse.org 05 May '16

05 May '16

openSUSE Security Update: Security update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1240-1 Rating: important References: #976942 #976943 #977614 #977615 #977616 #977617 Cross-References: CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2108 CVE-2016-2109 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has one errata is now available. Description: This update for openssl fixes the following issues: - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615) - CVE-2016-2107: Padding oracle in AES-NI CBC MAC check (bsc#977616) - CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942) - bsc#976943: Buffer overrun in ASN1_parse Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-562=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libopenssl-devel-1.0.1k-11.87.1 libopenssl1_0_0-1.0.1k-11.87.1 libopenssl1_0_0-debuginfo-1.0.1k-11.87.1 openssl-1.0.1k-11.87.1 openssl-debuginfo-1.0.1k-11.87.1 openssl-debugsource-1.0.1k-11.87.1 - openSUSE 13.1 (x86_64): libopenssl-devel-32bit-1.0.1k-11.87.1 libopenssl1_0_0-32bit-1.0.1k-11.87.1 libopenssl1_0_0-debuginfo-32bit-1.0.1k-11.87.1 - openSUSE 13.1 (noarch): openssl-doc-1.0.1k-11.87.1 References: https://www.suse.com/security/cve/CVE-2016-2105.html https://www.suse.com/security/cve/CVE-2016-2106.html https://www.suse.com/security/cve/CVE-2016-2107.html https://www.suse.com/security/cve/CVE-2016-2108.html https://www.suse.com/security/cve/CVE-2016-2109.html https://bugzilla.suse.com/976942 https://bugzilla.suse.com/976943 https://bugzilla.suse.com/977614 https://bugzilla.suse.com/977615 https://bugzilla.suse.com/977616 https://bugzilla.suse.com/977617

1 0

openSUSE-SU-2016:1239-1: important: Security update for libopenssl0_9_8
by opensuse-security＠opensuse.org 05 May '16

05 May '16

openSUSE Security Update: Security update for libopenssl0_9_8 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1239-1 Rating: important References: #963415 #968046 #968048 #968050 #968374 #976942 #976943 #977614 #977615 #977617 Cross-References: CVE-2015-3197 CVE-2016-0702 CVE-2016-0797 CVE-2016-0799 CVE-2016-0800 CVE-2016-2105 CVE-2016-2106 CVE-2016-2108 CVE-2016-2109 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that solves 9 vulnerabilities and has one errata is now available. Description: This update for libopenssl0_9_8 fixes the following issues: - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615) - CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942) - CVE-2016-0702: Side channel attack on modular exponentiation "CacheBleed" (bsc#968050) - bsc#976943: Buffer overrun in ASN1_parse and updates the package to version 0.9.8zh which collects many other fixes, including security ones. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2016-563=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): libopenssl0_9_8-0.9.8zh-14.1 libopenssl0_9_8-debuginfo-0.9.8zh-14.1 libopenssl0_9_8-debugsource-0.9.8zh-14.1 - openSUSE Evergreen 11.4 (x86_64): libopenssl0_9_8-32bit-0.9.8zh-14.1 libopenssl0_9_8-debuginfo-32bit-0.9.8zh-14.1 - openSUSE Evergreen 11.4 (ia64): libopenssl0_9_8-debuginfo-x86-0.9.8zh-14.1 libopenssl0_9_8-x86-0.9.8zh-14.1 References: https://www.suse.com/security/cve/CVE-2015-3197.html https://www.suse.com/security/cve/CVE-2016-0702.html https://www.suse.com/security/cve/CVE-2016-0797.html https://www.suse.com/security/cve/CVE-2016-0799.html https://www.suse.com/security/cve/CVE-2016-0800.html https://www.suse.com/security/cve/CVE-2016-2105.html https://www.suse.com/security/cve/CVE-2016-2106.html https://www.suse.com/security/cve/CVE-2016-2108.html https://www.suse.com/security/cve/CVE-2016-2109.html https://bugzilla.suse.com/963415 https://bugzilla.suse.com/968046 https://bugzilla.suse.com/968048 https://bugzilla.suse.com/968050 https://bugzilla.suse.com/968374 https://bugzilla.suse.com/976942 https://bugzilla.suse.com/976943 https://bugzilla.suse.com/977614 https://bugzilla.suse.com/977615 https://bugzilla.suse.com/977617

1 0

openSUSE-SU-2016:1238-1: important: Security update for openssl
by opensuse-security＠opensuse.org 05 May '16

05 May '16

openSUSE Security Update: Security update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1238-1 Rating: important References: #958501 #976942 #976943 #977614 #977615 #977616 #977617 #977621 Cross-References: CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2108 CVE-2016-2109 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has three fixes is now available. Description: This update for openssl fixes the following issues: - CVE-2016-2108: Memory corruption in the ASN.1 encoder (boo#977617) - CVE-2016-2107: Padding oracle in AES-NI CBC MAC check (boo#977616) - CVE-2016-2105: EVP_EncodeUpdate overflow (boo#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (boo#977615) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (boo#976942) - boo#976943: Buffer overrun in ASN1_parse - boo#977621: Preserve digests for SNI - boo#958501: Fix openssl enc -non-fips-allow option in FIPS mode Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-561=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libopenssl-devel-1.0.1k-2.36.1 libopenssl1_0_0-1.0.1k-2.36.1 libopenssl1_0_0-debuginfo-1.0.1k-2.36.1 libopenssl1_0_0-hmac-1.0.1k-2.36.1 openssl-1.0.1k-2.36.1 openssl-debuginfo-1.0.1k-2.36.1 openssl-debugsource-1.0.1k-2.36.1 - openSUSE 13.2 (noarch): openssl-doc-1.0.1k-2.36.1 - openSUSE 13.2 (x86_64): libopenssl-devel-32bit-1.0.1k-2.36.1 libopenssl1_0_0-32bit-1.0.1k-2.36.1 libopenssl1_0_0-debuginfo-32bit-1.0.1k-2.36.1 libopenssl1_0_0-hmac-32bit-1.0.1k-2.36.1 References: https://www.suse.com/security/cve/CVE-2016-2105.html https://www.suse.com/security/cve/CVE-2016-2106.html https://www.suse.com/security/cve/CVE-2016-2107.html https://www.suse.com/security/cve/CVE-2016-2108.html https://www.suse.com/security/cve/CVE-2016-2109.html https://bugzilla.suse.com/958501 https://bugzilla.suse.com/976942 https://bugzilla.suse.com/976943 https://bugzilla.suse.com/977614 https://bugzilla.suse.com/977615 https://bugzilla.suse.com/977616 https://bugzilla.suse.com/977617 https://bugzilla.suse.com/977621

1 0

openSUSE-SU-2016:1237-1: important: Security update for openssl
by opensuse-security＠opensuse.org 05 May '16

05 May '16

openSUSE Security Update: Security update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1237-1 Rating: important References: #976942 #976943 #977614 #977615 #977616 #977617 Cross-References: CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2108 CVE-2016-2109 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has one errata is now available. Description: This update for openssl fixes the following issues: - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614) - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615) - CVE-2016-2107: Padding oracle in AES-NI CBC MAC check (bsc#977616) - CVE-2016-2108: Memory corruption in the ASN.1 encoder (bsc#977617) - CVE-2016-2109: ASN.1 BIO excessive memory allocation (bsc#976942) - bsc#976943: Buffer overrun in ASN1_parse Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2016-562=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): libopenssl-devel-1.0.1p-74.1 libopenssl1_0_0-1.0.1p-74.1 libopenssl1_0_0-debuginfo-1.0.1p-74.1 openssl-1.0.1p-74.1 openssl-debuginfo-1.0.1p-74.1 openssl-debugsource-1.0.1p-74.1 - openSUSE Evergreen 11.4 (x86_64): libopenssl-devel-32bit-1.0.1p-74.1 libopenssl1_0_0-32bit-1.0.1p-74.1 libopenssl1_0_0-debuginfo-32bit-1.0.1p-74.1 - openSUSE Evergreen 11.4 (noarch): openssl-doc-1.0.1p-74.1 - openSUSE Evergreen 11.4 (ia64): libopenssl1_0_0-debuginfo-x86-1.0.1p-74.1 libopenssl1_0_0-x86-1.0.1p-74.1 References: https://www.suse.com/security/cve/CVE-2016-2105.html https://www.suse.com/security/cve/CVE-2016-2106.html https://www.suse.com/security/cve/CVE-2016-2107.html https://www.suse.com/security/cve/CVE-2016-2108.html https://www.suse.com/security/cve/CVE-2016-2109.html https://bugzilla.suse.com/976942 https://bugzilla.suse.com/976943 https://bugzilla.suse.com/977614 https://bugzilla.suse.com/977615 https://bugzilla.suse.com/977616 https://bugzilla.suse.com/977617

1 0

openSUSE-SU-2016:1235-1: important: Security update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 04 May '16

04 May '16

openSUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1235-1 Rating: important References: #976340 Cross-References: CVE-2016-0686 CVE-2016-0687 CVE-2016-0695 CVE-2016-3425 CVE-2016-3427 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for java-1_7_0-openjdk to version 2.6.6 fixes five security issues. These security issues were fixed: - CVE-2016-0686: Ensure thread consistency (bsc#976340). - CVE-2016-0687: Better byte behavior (bsc#976340). - CVE-2016-0695: Make DSA more fair (bsc#976340). - CVE-2016-3425: Better buffering of XML strings (bsc#976340). - CVE-2016-3427: Improve JMX connections (bsc#976340). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-560=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): java-1_7_0-openjdk-1.7.0.101-24.36.2 java-1_7_0-openjdk-accessibility-1.7.0.101-24.36.2 java-1_7_0-openjdk-debuginfo-1.7.0.101-24.36.2 java-1_7_0-openjdk-debugsource-1.7.0.101-24.36.2 java-1_7_0-openjdk-demo-1.7.0.101-24.36.2 java-1_7_0-openjdk-demo-debuginfo-1.7.0.101-24.36.2 java-1_7_0-openjdk-devel-1.7.0.101-24.36.2 java-1_7_0-openjdk-devel-debuginfo-1.7.0.101-24.36.2 java-1_7_0-openjdk-headless-1.7.0.101-24.36.2 java-1_7_0-openjdk-headless-debuginfo-1.7.0.101-24.36.2 java-1_7_0-openjdk-src-1.7.0.101-24.36.2 - openSUSE 13.1 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.101-24.36.2 References: https://www.suse.com/security/cve/CVE-2016-0686.html https://www.suse.com/security/cve/CVE-2016-0687.html https://www.suse.com/security/cve/CVE-2016-0695.html https://www.suse.com/security/cve/CVE-2016-3425.html https://www.suse.com/security/cve/CVE-2016-3427.html https://bugzilla.suse.com/976340

1 0

openSUSE-SU-2016:1230-1: important: Security update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 04 May '16

04 May '16

openSUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1230-1 Rating: important References: #976340 Cross-References: CVE-2016-0686 CVE-2016-0687 CVE-2016-0695 CVE-2016-3425 CVE-2016-3427 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for java-1_7_0-openjdk to version 2.6.6 fixes five security issues. These security issues were fixed: - CVE-2016-0686: Ensure thread consistency (bsc#976340). - CVE-2016-0687: Better byte behavior (bsc#976340). - CVE-2016-0695: Make DSA more fair (bsc#976340). - CVE-2016-3425: Better buffering of XML strings (bsc#976340). - CVE-2016-3427: Improve JMX connections (bsc#976340). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-553=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): java-1_7_0-openjdk-1.7.0.101-22.1 java-1_7_0-openjdk-accessibility-1.7.0.101-22.1 java-1_7_0-openjdk-bootstrap-1.7.0.101-22.1 java-1_7_0-openjdk-bootstrap-debuginfo-1.7.0.101-22.1 java-1_7_0-openjdk-bootstrap-debugsource-1.7.0.101-22.1 java-1_7_0-openjdk-bootstrap-devel-1.7.0.101-22.1 java-1_7_0-openjdk-bootstrap-devel-debuginfo-1.7.0.101-22.1 java-1_7_0-openjdk-bootstrap-headless-1.7.0.101-22.1 java-1_7_0-openjdk-bootstrap-headless-debuginfo-1.7.0.101-22.1 java-1_7_0-openjdk-debuginfo-1.7.0.101-22.1 java-1_7_0-openjdk-debugsource-1.7.0.101-22.1 java-1_7_0-openjdk-demo-1.7.0.101-22.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.101-22.1 java-1_7_0-openjdk-devel-1.7.0.101-22.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.101-22.1 java-1_7_0-openjdk-headless-1.7.0.101-22.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.101-22.1 java-1_7_0-openjdk-src-1.7.0.101-22.1 - openSUSE 13.2 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.101-22.1 References: https://www.suse.com/security/cve/CVE-2016-0686.html https://www.suse.com/security/cve/CVE-2016-0687.html https://www.suse.com/security/cve/CVE-2016-0695.html https://www.suse.com/security/cve/CVE-2016-3425.html https://www.suse.com/security/cve/CVE-2016-3427.html https://bugzilla.suse.com/976340

1 0

openSUSE-FU-2016:1229-1: moderate: Add go 1.6 to the SUSE Package Hub
by maintenance＠opensuse.org 04 May '16

04 May '16

openSUSE Feature Update: Add go 1.6 to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-FU-2016:1229-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 feature fixes can now be installed. Description: This update adds go 1.6 to the SUSE Package Hub. Patch Instructions: To install this openSUSE Feature Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-552=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): go-1.6.1-2.1 go-doc-1.6.1-2.1 References:

1 0

openSUSE-SU-2016:1227-1: moderate: Security update for libgcrypt
by opensuse-security＠opensuse.org 04 May '16

04 May '16

openSUSE Security Update: Security update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1227-1 Rating: moderate References: #965902 Cross-References: CVE-2015-7511 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: libgcrypt was updated to fix one security issue. This security issue was fixed: - CVE-2015-7511: Side-channel attack on ECDH with Weierstrass curves (bsc#965902). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-559=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libgcrypt-cavs-1.6.1-26.1 libgcrypt-cavs-debuginfo-1.6.1-26.1 libgcrypt-debugsource-1.6.1-26.1 libgcrypt-devel-1.6.1-26.1 libgcrypt-devel-debuginfo-1.6.1-26.1 libgcrypt20-1.6.1-26.1 libgcrypt20-debuginfo-1.6.1-26.1 libgcrypt20-hmac-1.6.1-26.1 - openSUSE Leap 42.1 (x86_64): libgcrypt-devel-32bit-1.6.1-26.1 libgcrypt-devel-debuginfo-32bit-1.6.1-26.1 libgcrypt20-32bit-1.6.1-26.1 libgcrypt20-debuginfo-32bit-1.6.1-26.1 libgcrypt20-hmac-32bit-1.6.1-26.1 References: https://www.suse.com/security/cve/CVE-2015-7511.html https://bugzilla.suse.com/965902

1 0

openSUSE-SU-2016:1226-1: important: Security update for yast2-users
by opensuse-security＠opensuse.org 04 May '16

04 May '16

openSUSE Security Update: Security update for yast2-users ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1226-1 Rating: important References: #971804 #973639 #974220 Cross-References: CVE-2016-1601 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: yast2-users was updated to fix one security issue. This security issue was fixed: - CVE-2016-1601: Empty passwords fields in /etc/shadow after SLES 12 SP1 autoyast installation (bsc#974220). This update includes a script that fixes installations that we're affected by this problem. It is run automatically upon installing the update. This non-security issue was fixed: - bsc#971804: Set root password correctly when using a minimal profile This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-555=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): yast2-users-3.1.41.3-10.1 yast2-users-debuginfo-3.1.41.3-10.1 yast2-users-debugsource-3.1.41.3-10.1 yast2-users-devel-doc-3.1.41.3-10.1 References: https://www.suse.com/security/cve/CVE-2016-1601.html https://bugzilla.suse.com/971804 https://bugzilla.suse.com/973639 https://bugzilla.suse.com/974220

1 0

openSUSE-RU-2016:1225-1: Recommended update for postgrey
by maintenance＠opensuse.org 04 May '16

04 May '16

openSUSE Recommended Update: Recommended update for postgrey ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1225-1 Rating: low References: #976963 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This patch fixes the missing sysconfig template for postgrey. Without the sysconfig template the service cannot correctly start. (boo#976963) The package is also updated to version 1.36 which includes a few minor improvements: - Improved support for IPv6 addresses: new --ipv4cidr and --ipv6cidr options for proper subnetting of IPv6 - Updated whitelist - user-settable unix socket permission: --socketmode Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-545=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): postgrey-1.36-6.1 References: https://bugzilla.suse.com/976963

1 0

openSUSE-RU-2016:1224-1: Recommended update for python-boto3, python-botocore
by maintenance＠opensuse.org 04 May '16

04 May '16

openSUSE Recommended Update: Recommended update for python-boto3, python-botocore ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1224-1 Rating: low References: #974705 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides newer versions of python-boto3 and python-botocore, which bring several fixes and enhancements. python-boto3 (updated to version 1.3.0): - Session: Add get_available_partitions and get_available_regions methods to determine partitions and a service's available regions. - EC2: Update resource model to include Route resources. - Resources: Properly alias identifiers which are also in the shape. - S3: Forward extra_args when using multipart downloads. - EC2: Add delete_tags() action to Instance resource. - Session: Add region_name property on session. - S3: Fix issue with hanging downloads. python-botocore (updated to version 1.4.10): - Lambda: Added support for setting the function runtime as nodejs4.3, as well as updating function configuration to set the runtime. - DS: Added support for Directory Service Conditional Forwarder APIs. - Elasticbeanstalk: Adds support for three additional elements in AWS Elasticbeanstalk's DescribeInstancesHealthResponse: Deployment, AvailabilityZone, and InstanceType. Additionally adds support for increased EnvironmentName length from 23 to 40. - APIGateway: Added support for API Import. - Route53: Added support for metric-based health checks and regional health checks. - STS: Added support for GetCallerIdentity, which returns details about the credentials used to make the API call. The details include name and account, as well as the type of entity making the call, such as an IAM user vs. federated user. - S3: Added support for VersionId in PutObjectAcl. - DeviceFarm: Add support to pay a flat monthly fee for unlimited testing of your Android and iOS apps with AWS Device Farm device slots - RDS: Add support for customizing the order in which Aurora Replicas are promoted to primary instance during a failover. - MeteringMarketplace: The AWS Marketplace Metering Service enables sellers to price their products along new pricing dimensions. - S3: Added support for delete marker and abort multipart upload lifecycle configuration. - IOT: Added support for Amazon Elasticsearch Service and Amazon Cloudwatch actions for the AWS IoT rules engine. - CloudHSM: Added support for tagging resources. - DMS: Added support for AWS Database Migration Service. - SES: Added support for white-labeling. - CodeDeploy: Added support for BatchGetDeploymentGroups. - Config: Moved Config to its own class to boost import speed. - EC2: Add support for VPC peering with security groups. - DirectoryService: Add SNS event notification support. - Regions: Add ability to list regions and endpoints for services in a partition. - DynamoDB: Add support for DescribeLimits. - APIGateway: Add support for TestInvokeAuthorizer and FlushStageAuthorizersCache operations. - CloudSearchDomain: Add support for stats. - StorageGateway: Added support for user-supplied barcodes. - CodeDeploy: Added support for setting up triggers for a deployment group. - RDS: Added support for Cross-account Encrypted (KMS) snapshot sharing. - EMR: Added support for adding EBS storage to EMR instances. For a comprehensive list of changes please refer to the package's change logs. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-546=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): python-boto3-1.3.0-2.1 python-botocore-1.4.10-6.1 References: https://bugzilla.suse.com/974705

1 0

openSUSE-RU-2016:1223-1: moderate: Recommended update for syncthing and syncthing-gtk
by maintenance＠opensuse.org 04 May '16

04 May '16

openSUSE Recommended Update: Recommended update for syncthing and syncthing-gtk ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1223-1 Rating: moderate References: #975873 #976937 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update provides version 0.8.3 for syncthing-gtk and version 0.12.22 for syncthing. For detailed information please refere to: https://github.com/syncthing/syncthing-gtk/releases https://github.com/syncthing/syncthing/releases Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-547=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): syncthing-0.12.22-3.1 - openSUSE Leap 42.1 (noarch): syncthing-gtk-0.8.3-3.1 syncthing-gtk-lang-0.8.3-3.1 References: https://bugzilla.suse.com/975873 https://bugzilla.suse.com/976937

1 0

openSUSE-SU-2016:1222-1: important: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 04 May '16

04 May '16

openSUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1222-1 Rating: important References: #976340 Cross-References: CVE-2016-0686 CVE-2016-0687 CVE-2016-0695 CVE-2016-3425 CVE-2016-3426 CVE-2016-3427 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for java-1_8_0-openjdk fixes the following security issues - April 2016 Oracle CPU (bsc#976340): - CVE-2016-0686: Unspecified vulnerability allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to Serialization. - CVE-2016-0687: Unspecified vulnerability allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to the Hotspot sub-component - CVE-2016-0695: Unspecified vulnerability allowed remote attackers to affect confidentiality via vectors related to the Security Component - CVE-2016-3425: Unspecified vulnerability allowed remote attackers to affect availability via vectors related to JAXP - CVE-2016-3426: Unspecified vulnerability allowed remote attackers to affect confidentiality via vectors related to JCE - CVE-2016-3427: Unspecified vulnerability allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-554=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): java-1_8_0-openjdk-1.8.0.91-27.1 java-1_8_0-openjdk-accessibility-1.8.0.91-27.1 java-1_8_0-openjdk-debuginfo-1.8.0.91-27.1 java-1_8_0-openjdk-debugsource-1.8.0.91-27.1 java-1_8_0-openjdk-demo-1.8.0.91-27.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.91-27.1 java-1_8_0-openjdk-devel-1.8.0.91-27.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.91-27.1 java-1_8_0-openjdk-headless-1.8.0.91-27.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.91-27.1 java-1_8_0-openjdk-src-1.8.0.91-27.1 - openSUSE 13.2 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.91-27.1 References: https://www.suse.com/security/cve/CVE-2016-0686.html https://www.suse.com/security/cve/CVE-2016-0687.html https://www.suse.com/security/cve/CVE-2016-0695.html https://www.suse.com/security/cve/CVE-2016-3425.html https://www.suse.com/security/cve/CVE-2016-3426.html https://www.suse.com/security/cve/CVE-2016-3427.html https://bugzilla.suse.com/976340

1 0

openSUSE-RU-2016:1221-1: Recommended update for nfs-utils
by maintenance＠opensuse.org 04 May '16

04 May '16

openSUSE Recommended Update: Recommended update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1221-1 Rating: low References: #945937 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nfs-utils fixes the following issue: - mount.nfs should fail if statd is being slow to start due to DNS issues (bsc#945937) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-542=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): nfs-client-1.3.0-17.1 nfs-client-debuginfo-1.3.0-17.1 nfs-doc-1.3.0-17.1 nfs-kernel-server-1.3.0-17.1 nfs-kernel-server-debuginfo-1.3.0-17.1 nfs-utils-debugsource-1.3.0-17.1 References: https://bugzilla.suse.com/945937

1 0

openSUSE-SU-2016:1220-1: Security update for wireshark
by opensuse-security＠opensuse.org 04 May '16

04 May '16

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1220-1 Rating: low References: #976944 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update to wireshark 1.12.11 fixes a number issues in protocol dissectors that could have allowed a remote attacker to crash Wireshark or cause excessive CPU usage through specially crafted packages inserted into the network or a capture file. - The PKTC dissector could crash (wnpa-sec-2016-22) - The PKTC dissector could crash (wnpa-sec-2016-23) - The IAX2 dissector could go into an infinite loop (wnpa-sec-2016-24) - Wireshark and TShark could exhaust the stack (wnpa-sec-2016-25) - The GSM CBCH dissector could crash (wnpa-sec-2016-26) - The NCP dissector could crash (wnpa-sec-2016-28) - Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.12.11.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-557=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-557=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): wireshark-1.12.11-20.1 wireshark-debuginfo-1.12.11-20.1 wireshark-debugsource-1.12.11-20.1 wireshark-devel-1.12.11-20.1 wireshark-ui-gtk-1.12.11-20.1 wireshark-ui-gtk-debuginfo-1.12.11-20.1 wireshark-ui-qt-1.12.11-20.1 wireshark-ui-qt-debuginfo-1.12.11-20.1 - openSUSE 13.2 (i586 x86_64): wireshark-1.12.11-35.1 wireshark-debuginfo-1.12.11-35.1 wireshark-debugsource-1.12.11-35.1 wireshark-devel-1.12.11-35.1 wireshark-ui-gtk-1.12.11-35.1 wireshark-ui-gtk-debuginfo-1.12.11-35.1 wireshark-ui-qt-1.12.11-35.1 wireshark-ui-qt-debuginfo-1.12.11-35.1 References: https://bugzilla.suse.com/976944

1 0

openSUSE-SU-2016:1219-1: moderate: Security update for giflib
by opensuse-security＠opensuse.org 04 May '16

04 May '16

openSUSE Security Update: Security update for giflib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1219-1 Rating: moderate References: #974847 Cross-References: CVE-2016-3977 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: giflib was updated to fix one security issue. This security issue was fixed: - CVE-2016-3977: Heap buffer overflow in gif2rgb (bsc#974847). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-556=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): giflib-debugsource-5.0.5-10.1 giflib-devel-5.0.5-10.1 giflib-progs-5.0.5-10.1 giflib-progs-debuginfo-5.0.5-10.1 libgif6-5.0.5-10.1 libgif6-debuginfo-5.0.5-10.1 - openSUSE Leap 42.1 (x86_64): giflib-devel-32bit-5.0.5-10.1 libgif6-32bit-5.0.5-10.1 libgif6-debuginfo-32bit-5.0.5-10.1 References: https://www.suse.com/security/cve/CVE-2016-3977.html https://bugzilla.suse.com/974847

1 0

openSUSE-RU-2016:1218-1: moderate: Recommended update for Mesa
by maintenance＠opensuse.org 04 May '16

04 May '16

openSUSE Recommended Update: Recommended update for Mesa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1218-1 Rating: moderate References: #977047 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for Mesa fixes the following issues: - Fix Nouveau crashing when starting xterm (boo#977047) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-544=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): Mesa-11.0.8-145.1 Mesa-debuginfo-11.0.8-145.1 Mesa-debugsource-11.0.8-145.1 Mesa-devel-11.0.8-145.1 Mesa-dri-devel-11.0.8-145.1 Mesa-libEGL-devel-11.0.8-145.1 Mesa-libEGL1-11.0.8-145.1 Mesa-libEGL1-debuginfo-11.0.8-145.1 Mesa-libGL-devel-11.0.8-145.1 Mesa-libGL1-11.0.8-145.1 Mesa-libGL1-debuginfo-11.0.8-145.1 Mesa-libGLESv1_CM-devel-11.0.8-145.1 Mesa-libGLESv1_CM1-11.0.8-145.1 Mesa-libGLESv1_CM1-debuginfo-11.0.8-145.1 Mesa-libGLESv2-2-11.0.8-145.1 Mesa-libGLESv2-2-debuginfo-11.0.8-145.1 Mesa-libGLESv2-devel-11.0.8-145.1 Mesa-libGLESv3-devel-11.0.8-145.1 Mesa-libd3d-11.0.8-145.1 Mesa-libd3d-debuginfo-11.0.8-145.1 Mesa-libd3d-devel-11.0.8-145.1 Mesa-libglapi-devel-11.0.8-145.1 Mesa-libglapi0-11.0.8-145.1 Mesa-libglapi0-debuginfo-11.0.8-145.1 libOSMesa-devel-11.0.8-145.1 libOSMesa9-11.0.8-145.1 libOSMesa9-debuginfo-11.0.8-145.1 libXvMC_nouveau-11.0.8-145.1 libXvMC_nouveau-debuginfo-11.0.8-145.1 libXvMC_r600-11.0.8-145.1 libgbm-devel-11.0.8-145.1 libgbm1-11.0.8-145.1 libgbm1-debuginfo-11.0.8-145.1 libvdpau_nouveau-11.0.8-145.1 libvdpau_nouveau-debuginfo-11.0.8-145.1 libvdpau_r300-11.0.8-145.1 libvdpau_r600-11.0.8-145.1 libvdpau_radeonsi-11.0.8-145.1 libwayland-egl-devel-11.0.8-145.1 libwayland-egl1-11.0.8-145.1 libwayland-egl1-debuginfo-11.0.8-145.1 libxatracker-devel-1.0.0-145.1 libxatracker2-1.0.0-145.1 libxatracker2-debuginfo-1.0.0-145.1 - openSUSE Leap 42.1 (x86_64): Mesa-32bit-11.0.8-145.1 Mesa-debuginfo-32bit-11.0.8-145.1 Mesa-libEGL-devel-32bit-11.0.8-145.1 Mesa-libEGL1-32bit-11.0.8-145.1 Mesa-libEGL1-debuginfo-32bit-11.0.8-145.1 Mesa-libGL-devel-32bit-11.0.8-145.1 Mesa-libGL1-32bit-11.0.8-145.1 Mesa-libGL1-debuginfo-32bit-11.0.8-145.1 Mesa-libGLESv1_CM-devel-32bit-11.0.8-145.1 Mesa-libGLESv1_CM1-32bit-11.0.8-145.1 Mesa-libGLESv1_CM1-debuginfo-32bit-11.0.8-145.1 Mesa-libGLESv2-2-32bit-11.0.8-145.1 Mesa-libGLESv2-2-debuginfo-32bit-11.0.8-145.1 Mesa-libGLESv2-devel-32bit-11.0.8-145.1 Mesa-libd3d-32bit-11.0.8-145.1 Mesa-libd3d-debuginfo-32bit-11.0.8-145.1 Mesa-libd3d-devel-32bit-11.0.8-145.1 Mesa-libglapi-devel-32bit-11.0.8-145.1 Mesa-libglapi0-32bit-11.0.8-145.1 Mesa-libglapi0-debuginfo-32bit-11.0.8-145.1 libOSMesa-devel-32bit-11.0.8-145.1 libOSMesa9-32bit-11.0.8-145.1 libOSMesa9-debuginfo-32bit-11.0.8-145.1 libXvMC_nouveau-32bit-11.0.8-145.1 libXvMC_nouveau-debuginfo-32bit-11.0.8-145.1 libXvMC_r600-32bit-11.0.8-145.1 libgbm-devel-32bit-11.0.8-145.1 libgbm1-32bit-11.0.8-145.1 libgbm1-debuginfo-32bit-11.0.8-145.1 libvdpau_nouveau-32bit-11.0.8-145.1 libvdpau_nouveau-debuginfo-32bit-11.0.8-145.1 libvdpau_r300-32bit-11.0.8-145.1 libvdpau_r600-32bit-11.0.8-145.1 libvdpau_radeonsi-32bit-11.0.8-145.1 libwayland-egl-devel-32bit-11.0.8-145.1 libwayland-egl1-32bit-11.0.8-145.1 libwayland-egl1-debuginfo-32bit-11.0.8-145.1 References: https://bugzilla.suse.com/977047

1 0

openSUSE-RU-2016:1217-1: moderate: Recommended update for autofs
by maintenance＠opensuse.org 04 May '16

04 May '16

openSUSE Recommended Update: Recommended update for autofs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1217-1 Rating: moderate References: #955477 #966573 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for autofs fixes the following issues: - Improve scalability of direct mount path component creation. (bsc#966573) - Use libldap_r instead of libldap for thread safety. (bsc#955477) - Don't overwrite tirpc version of auth_destroy. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-543=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): autofs-5.0.9-6.1 autofs-debuginfo-5.0.9-6.1 autofs-debugsource-5.0.9-6.1 References: https://bugzilla.suse.com/955477 https://bugzilla.suse.com/966573

1 0

openSUSE-SU-2016:1216-1: moderate: Security update for xerces-j2
by opensuse-security＠opensuse.org 04 May '16

04 May '16

openSUSE Security Update: Security update for xerces-j2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1216-1 Rating: moderate References: #814241 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: xerces-j2 was updated to fix one security issue. This security issue was fixed: - bsc#814241: Fixed possible DoS through very long attribute names Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-558=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): xerces-j2-2.11.0-3.3.1 xerces-j2-demo-2.11.0-3.3.1 xerces-j2-scripts-2.11.0-3.3.1 xerces-j2-xml-apis-2.11.0-3.3.1 xerces-j2-xml-resolver-2.11.0-3.3.1 References: https://bugzilla.suse.com/814241

1 0

openSUSE-RU-2016:1215-1: Recommended update for postfix
by maintenance＠opensuse.org 04 May '16

04 May '16

openSUSE Recommended Update: Recommended update for postfix ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1215-1 Rating: low References: #947519 #947707 #972346 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for postfix fixes the following issues: - Incorrect path to smtp_tls_session_cache_database in config.postfix script. (bsc#972346) - Mail generated by Amavis prevented from being re-addressed by /etc/postfix/virtual. (bsc#947707) - SuSEconfig.postfix should enforce umask 022. (bsc#947519) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-549=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): postfix-2.11.6-3.1 postfix-debuginfo-2.11.6-3.1 postfix-debugsource-2.11.6-3.1 postfix-devel-2.11.6-3.1 postfix-mysql-2.11.6-3.1 postfix-mysql-debuginfo-2.11.6-3.1 postfix-postgresql-2.11.6-3.1 postfix-postgresql-debuginfo-2.11.6-3.1 - openSUSE Leap 42.1 (noarch): postfix-doc-2.11.6-3.1 References: https://bugzilla.suse.com/947519 https://bugzilla.suse.com/947707 https://bugzilla.suse.com/972346

1 0

openSUSE-SU-2016:1214-1: moderate: Security update for jq
by opensuse-security＠opensuse.org 04 May '16

04 May '16

openSUSE Security Update: Security update for jq ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1214-1 Rating: moderate References: #976992 Cross-References: CVE-2015-8863 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: jq was updated to fix one security issue. This security issue was fixed: - CVE-2015-8863: Heap buffer overflow in tokenadd() function (boo#976992). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-550=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): jq-1.5-7.1 jq-debuginfo-1.5-7.1 jq-debugsource-1.5-7.1 libjq-devel-1.5-7.1 libjq1-1.5-7.1 libjq1-debuginfo-1.5-7.1 References: https://www.suse.com/security/cve/CVE-2015-8863.html https://bugzilla.suse.com/976992

1 0

openSUSE-RU-2016:1213-1: moderate: Recommended update for audacity
by maintenance＠opensuse.org 04 May '16

04 May '16

openSUSE Recommended Update: Recommended update for audacity ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1213-1 Rating: moderate References: #976964 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for audacity fixes the following issues: - fix usage of custom temp directories (boo#976964). - Build with ffmpeg support in openSUSE Leap 42.1 and newer. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-548=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): audacity-2.1.1-5.1 audacity-debuginfo-2.1.1-5.1 audacity-debugsource-2.1.1-5.1 - openSUSE Leap 42.1 (noarch): audacity-lang-2.1.1-5.1 References: https://bugzilla.suse.com/976964

1 0

openSUSE-SU-2016:1212-1: moderate: Security update for jq
by opensuse-security＠opensuse.org 04 May '16

04 May '16

openSUSE Security Update: Security update for jq ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1212-1 Rating: moderate References: #976992 Cross-References: CVE-2015-8863 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: jq was updated to fix one security issue. This security issue was fixed: - CVE-2015-8863: Heap buffer overflow in tokenadd() function (boo#976992). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-551=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): jq-1.4-2.3.1 jq-debuginfo-1.4-2.3.1 jq-debugsource-1.4-2.3.1 libjq-devel-1.4-2.3.1 libjq1-1.4-2.3.1 libjq1-debuginfo-1.4-2.3.1 References: https://www.suse.com/security/cve/CVE-2015-8863.html https://bugzilla.suse.com/976992

1 0

openSUSE-SU-2016:1211-1: important: Security update update for MozillaFirefox, mozilla-nss
by opensuse-security＠opensuse.org 04 May '16

04 May '16

openSUSE Security Update: Security update update for MozillaFirefox, mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1211-1 Rating: important References: #977333 #977373 #977375 #977376 #977379 #977381 #977382 #977384 #977386 #977388 Cross-References: CVE-2016-2804 CVE-2016-2806 CVE-2016-2807 CVE-2016-2808 CVE-2016-2811 CVE-2016-2812 CVE-2016-2814 CVE-2016-2816 CVE-2016-2817 CVE-2016-2820 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update to Mozilla Firefox 46.0 fixes several security issues and bugs (boo#977333). The following vulnerabilities were fixed: - CVE-2016-2804: Miscellaneous memory safety hazards - MFSA 2016-39 (boo#977373) - CVE-2016-2806: Miscellaneous memory safety hazards - MFSA 2016-39 (boo#977375) - CVE-2016-2807: Miscellaneous memory safety hazards - MFSA 2016-39 (boo#977376) - CVE-2016-2808: Write to invalid HashMap entry through JavaScript.watch() - MFSA 2016-47 (boo#977386) - CVE-2016-2811: Use-after-free in Service Worker - MFSA 2016-42 (boo#977379) - CVE-2016-2812: Buffer overflow in Service Worker - MFSA 2016-42 (boo#977379) - CVE-2016-2814: Buffer overflow in libstagefright with CENC offsets - MFSA 2016-44 (boo#977381) - CVE-2016-2816: CSP not applied to pages sent with multipart/x-mixed-replace - MFSA 2016-45 (boo#977382) - CVE-2016-2817: Elevation of privilege with chrome.tabs.update API in web extensions - MFSA 2016-46 (boo#977384) - CVE-2016-2820: Firefox Health Reports could accept events from untrusted domains - MFSA 2016-48 (boo#977388) The following miscellaneous changes are included: - Improved security of the JavaScript Just In Time (JIT) Compiler - WebRTC fixes to improve performance and stability - Added support for document.elementsFromPoint - Added HKDF support for Web Crypto API The following changes from Mozilla Firefox 45.0.2 are included: - Fix an issue impacting the cookie header when third-party cookies are blocked - Fix a web compatibility regression impacting the srcset attribute of the image tag - Fix a crash impacting the video playback with Media Source Extension - Fix a regression impacting some specific uploads - Fix a regression with the copy and paste with some old versions of some Gecko applications like Thunderbird The following changes from Mozilla Firefox 45.0.2 are included: - Fix a regression causing search engine settings to be lost in some context - Bring back non-standard jar: URIs to fix a regression in IBM iNotes - XSLTProcessor.importStylesheet was failing when import was used - Fix an issue which could cause the list of search provider to be empty - Fix a regression when using the location bar (bmo#1254503) - Fix some loading issues when Accept third-party cookies: was set to Never - Disabled Graphite font shaping library The minimum requirements increased to NSPR 4.12 and NSS 3.22.3. Mozilla NSS was updated to 3.22.3 as a dependency for Mozilla Firefox 46.0, with the following changes: - Increase compatibility of TLS extended master secret, don't send an empty TLS extension last in the handshake (bmo#1243641) - RSA-PSS signatures are now supported - Pseudorandom functions based on hashes other than SHA-1 are now supported - Enforce an External Policy on NSS from a config file Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-541=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-541=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): MozillaFirefox-46.0-21.1 MozillaFirefox-branding-upstream-46.0-21.1 MozillaFirefox-buildsymbols-46.0-21.1 MozillaFirefox-debuginfo-46.0-21.1 MozillaFirefox-debugsource-46.0-21.1 MozillaFirefox-devel-46.0-21.1 MozillaFirefox-translations-common-46.0-21.1 MozillaFirefox-translations-other-46.0-21.1 libfreebl3-3.22.3-15.2 libfreebl3-debuginfo-3.22.3-15.2 libsoftokn3-3.22.3-15.2 libsoftokn3-debuginfo-3.22.3-15.2 mozilla-nss-3.22.3-15.2 mozilla-nss-certs-3.22.3-15.2 mozilla-nss-certs-debuginfo-3.22.3-15.2 mozilla-nss-debuginfo-3.22.3-15.2 mozilla-nss-debugsource-3.22.3-15.2 mozilla-nss-devel-3.22.3-15.2 mozilla-nss-sysinit-3.22.3-15.2 mozilla-nss-sysinit-debuginfo-3.22.3-15.2 mozilla-nss-tools-3.22.3-15.2 mozilla-nss-tools-debuginfo-3.22.3-15.2 - openSUSE Leap 42.1 (x86_64): libfreebl3-32bit-3.22.3-15.2 libfreebl3-debuginfo-32bit-3.22.3-15.2 libsoftokn3-32bit-3.22.3-15.2 libsoftokn3-debuginfo-32bit-3.22.3-15.2 mozilla-nss-32bit-3.22.3-15.2 mozilla-nss-certs-32bit-3.22.3-15.2 mozilla-nss-certs-debuginfo-32bit-3.22.3-15.2 mozilla-nss-debuginfo-32bit-3.22.3-15.2 mozilla-nss-sysinit-32bit-3.22.3-15.2 mozilla-nss-sysinit-debuginfo-32bit-3.22.3-15.2 - openSUSE 13.2 (i586 x86_64): MozillaFirefox-46.0-68.1 MozillaFirefox-branding-upstream-46.0-68.1 MozillaFirefox-buildsymbols-46.0-68.1 MozillaFirefox-debuginfo-46.0-68.1 MozillaFirefox-debugsource-46.0-68.1 MozillaFirefox-devel-46.0-68.1 MozillaFirefox-translations-common-46.0-68.1 MozillaFirefox-translations-other-46.0-68.1 libfreebl3-3.22.3-31.1 libfreebl3-debuginfo-3.22.3-31.1 libsoftokn3-3.22.3-31.1 libsoftokn3-debuginfo-3.22.3-31.1 mozilla-nss-3.22.3-31.1 mozilla-nss-certs-3.22.3-31.1 mozilla-nss-certs-debuginfo-3.22.3-31.1 mozilla-nss-debuginfo-3.22.3-31.1 mozilla-nss-debugsource-3.22.3-31.1 mozilla-nss-devel-3.22.3-31.1 mozilla-nss-sysinit-3.22.3-31.1 mozilla-nss-sysinit-debuginfo-3.22.3-31.1 mozilla-nss-tools-3.22.3-31.1 mozilla-nss-tools-debuginfo-3.22.3-31.1 - openSUSE 13.2 (x86_64): libfreebl3-32bit-3.22.3-31.1 libfreebl3-debuginfo-32bit-3.22.3-31.1 libsoftokn3-32bit-3.22.3-31.1 libsoftokn3-debuginfo-32bit-3.22.3-31.1 mozilla-nss-32bit-3.22.3-31.1 mozilla-nss-certs-32bit-3.22.3-31.1 mozilla-nss-certs-debuginfo-32bit-3.22.3-31.1 mozilla-nss-debuginfo-32bit-3.22.3-31.1 mozilla-nss-sysinit-32bit-3.22.3-31.1 mozilla-nss-sysinit-debuginfo-32bit-3.22.3-31.1 References: https://www.suse.com/security/cve/CVE-2016-2804.html https://www.suse.com/security/cve/CVE-2016-2806.html https://www.suse.com/security/cve/CVE-2016-2807.html https://www.suse.com/security/cve/CVE-2016-2808.html https://www.suse.com/security/cve/CVE-2016-2811.html https://www.suse.com/security/cve/CVE-2016-2812.html https://www.suse.com/security/cve/CVE-2016-2814.html https://www.suse.com/security/cve/CVE-2016-2816.html https://www.suse.com/security/cve/CVE-2016-2817.html https://www.suse.com/security/cve/CVE-2016-2820.html https://bugzilla.suse.com/977333 https://bugzilla.suse.com/977373 https://bugzilla.suse.com/977375 https://bugzilla.suse.com/977376 https://bugzilla.suse.com/977379 https://bugzilla.suse.com/977381 https://bugzilla.suse.com/977382 https://bugzilla.suse.com/977384 https://bugzilla.suse.com/977386 https://bugzilla.suse.com/977388

1 0

openSUSE-SU-2016:1209-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 03 May '16

03 May '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1209-1 Rating: important References: #977830 Cross-References: CVE-2016-1660 CVE-2016-1661 CVE-2016-1662 CVE-2016-1663 CVE-2016-1664 CVE-2016-1665 CVE-2016-1666 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Chromium was updated to 50.0.2661.94 to fix a number of vulnerabilities (boo#977830): - CVE-2016-1660: Out-of-bounds write in Blink - CVE-2016-1661: Memory corruption in cross-process frames - CVE-2016-1662: Use-after-free in extensions - CVE-2016-1663: Use-after-free in Blink’s V8 bindings - CVE-2016-1664: Address bar spoofing - CVE-2016-1665: Information leak in V8 - CVE-2016-1666: Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-538=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): chromedriver-50.0.2661.94-97.1 chromedriver-debuginfo-50.0.2661.94-97.1 chromium-50.0.2661.94-97.1 chromium-debuginfo-50.0.2661.94-97.1 chromium-debugsource-50.0.2661.94-97.1 chromium-desktop-gnome-50.0.2661.94-97.1 chromium-desktop-kde-50.0.2661.94-97.1 chromium-ffmpegsumo-50.0.2661.94-97.1 chromium-ffmpegsumo-debuginfo-50.0.2661.94-97.1 References: https://www.suse.com/security/cve/CVE-2016-1660.html https://www.suse.com/security/cve/CVE-2016-1661.html https://www.suse.com/security/cve/CVE-2016-1662.html https://www.suse.com/security/cve/CVE-2016-1663.html https://www.suse.com/security/cve/CVE-2016-1664.html https://www.suse.com/security/cve/CVE-2016-1665.html https://www.suse.com/security/cve/CVE-2016-1666.html https://bugzilla.suse.com/977830

1 0

openSUSE-SU-2016:1208-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 03 May '16

03 May '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1208-1 Rating: important References: #977830 Cross-References: CVE-2016-1660 CVE-2016-1661 CVE-2016-1662 CVE-2016-1663 CVE-2016-1664 CVE-2016-1665 CVE-2016-1666 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Chromium was updated to 50.0.2661.94 to fix a number of vulnerabilities (boo#977830): - CVE-2016-1660: Out-of-bounds write in Blink - CVE-2016-1661: Memory corruption in cross-process frames - CVE-2016-1662: Use-after-free in extensions - CVE-2016-1663: Use-after-free in Blink’s V8 bindings - CVE-2016-1664: Address bar spoofing - CVE-2016-1665: Information leak in V8 - CVE-2016-1666: Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-539=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): chromedriver-50.0.2661.94-45.1 chromedriver-debuginfo-50.0.2661.94-45.1 chromium-50.0.2661.94-45.1 chromium-debuginfo-50.0.2661.94-45.1 chromium-debugsource-50.0.2661.94-45.1 chromium-desktop-gnome-50.0.2661.94-45.1 chromium-desktop-kde-50.0.2661.94-45.1 chromium-ffmpegsumo-50.0.2661.94-45.1 chromium-ffmpegsumo-debuginfo-50.0.2661.94-45.1 References: https://www.suse.com/security/cve/CVE-2016-1660.html https://www.suse.com/security/cve/CVE-2016-1661.html https://www.suse.com/security/cve/CVE-2016-1662.html https://www.suse.com/security/cve/CVE-2016-1663.html https://www.suse.com/security/cve/CVE-2016-1664.html https://www.suse.com/security/cve/CVE-2016-1665.html https://www.suse.com/security/cve/CVE-2016-1666.html https://bugzilla.suse.com/977830

1 0

openSUSE-SU-2016:1207-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 03 May '16

03 May '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1207-1 Rating: important References: #977830 Cross-References: CVE-2016-1660 CVE-2016-1661 CVE-2016-1662 CVE-2016-1663 CVE-2016-1664 CVE-2016-1665 CVE-2016-1666 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Chromium was updated to 50.0.2661.94 to fix a number of vulnerabilities (boo#977830): - CVE-2016-1660: Out-of-bounds write in Blink - CVE-2016-1661: Memory corruption in cross-process frames - CVE-2016-1662: Use-after-free in extensions - CVE-2016-1663: Use-after-free in Blink’s V8 bindings - CVE-2016-1664: Address bar spoofing - CVE-2016-1665: Information leak in V8 - CVE-2016-1666: Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-540=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-50.0.2661.94-71.1 chromium-50.0.2661.94-71.1 chromium-desktop-gnome-50.0.2661.94-71.1 chromium-desktop-kde-50.0.2661.94-71.1 chromium-ffmpegsumo-50.0.2661.94-71.1 References: https://www.suse.com/security/cve/CVE-2016-1660.html https://www.suse.com/security/cve/CVE-2016-1661.html https://www.suse.com/security/cve/CVE-2016-1662.html https://www.suse.com/security/cve/CVE-2016-1663.html https://www.suse.com/security/cve/CVE-2016-1664.html https://www.suse.com/security/cve/CVE-2016-1665.html https://www.suse.com/security/cve/CVE-2016-1666.html https://bugzilla.suse.com/977830

1 0

openSUSE-RU-2016:1202-1: moderate: Update to KDE Frameworks 5.21.0
by maintenance＠opensuse.org 03 May '16

03 May '16

openSUSE Recommended Update: Update to KDE Frameworks 5.21.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1202-1 Rating: moderate References: #974793 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update contains KDE Frameworks 5.21.0 with various bug fixes and improvements. The minimum Qt version was incremented to 5.4.0. https://www.kde.org/announcements/kde-frameworks-5.21.0.php Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-537=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): attica-qt5-debugsource-5.21.0-12.1 attica-qt5-devel-5.21.0-12.1 baloo5-5.21.0-12.1 baloo5-debugsource-5.21.0-12.1 baloo5-devel-5.21.0-12.1 baloo5-file-5.21.0-12.1 baloo5-file-debuginfo-5.21.0-12.1 baloo5-imports-5.21.0-12.1 baloo5-imports-debuginfo-5.21.0-12.1 baloo5-kioslaves-5.21.0-12.1 baloo5-kioslaves-debuginfo-5.21.0-12.1 baloo5-tools-5.21.0-12.1 baloo5-tools-debuginfo-5.21.0-12.1 bluez-qt-debugsource-5.21.0-12.1 bluez-qt-devel-5.21.0-12.1 bluez-qt-imports-5.21.0-12.1 bluez-qt-imports-debuginfo-5.21.0-12.1 bluez-qt-udev-5.21.0-12.1 extra-cmake-modules-5.21.0-12.1 frameworkintegration-debugsource-5.21.0-15.1 frameworkintegration-devel-5.21.0-15.1 frameworkintegration-plugin-5.21.0-15.1 frameworkintegration-plugin-debuginfo-5.21.0-15.1 kapidox-5.21.0-12.1 karchive-debugsource-5.21.0-12.1 karchive-devel-5.21.0-12.1 kauth-debugsource-5.21.0-12.1 kauth-devel-5.21.0-12.1 kbookmarks-debugsource-5.21.0-12.1 kbookmarks-devel-5.21.0-12.1 kcmutils-debugsource-5.21.0-12.1 kcmutils-devel-5.21.0-12.1 kcodecs-debugsource-5.21.0-12.1 kcodecs-devel-5.21.0-12.1 kcompletion-debugsource-5.21.0-12.1 kcompletion-devel-5.21.0-12.1 kconf_update5-5.21.0-12.1 kconf_update5-debuginfo-5.21.0-12.1 kconfig-debugsource-5.21.0-12.1 kconfig-devel-5.21.0-12.1 kconfig-devel-debuginfo-5.21.0-12.1 kconfigwidgets-debugsource-5.21.0-12.1 kconfigwidgets-devel-5.21.0-12.1 kcoreaddons-5.21.0-12.1 kcoreaddons-debugsource-5.21.0-12.1 kcoreaddons-devel-5.21.0-12.1 kcoreaddons-devel-debuginfo-5.21.0-12.1 kcrash-debugsource-5.21.0-14.1 kcrash-devel-5.21.0-14.1 kdbusaddons-debugsource-5.21.0-12.1 kdbusaddons-devel-5.21.0-12.1 kdbusaddons-tools-5.21.0-12.1 kdbusaddons-tools-debuginfo-5.21.0-12.1 kdeclarative-components-5.21.0-15.1 kdeclarative-components-debuginfo-5.21.0-15.1 kdeclarative-debugsource-5.21.0-15.1 kdeclarative-devel-5.21.0-15.1 kdeclarative-tools-5.21.0-15.1 kdeclarative-tools-debuginfo-5.21.0-15.1 kded-5.21.0-12.1 kded-debuginfo-5.21.0-12.1 kded-debugsource-5.21.0-12.1 kded-devel-5.21.0-12.1 kdelibs4support-5.21.0-12.1 kdelibs4support-debuginfo-5.21.0-12.1 kdelibs4support-debugsource-5.21.0-12.1 kdelibs4support-devel-5.21.0-12.1 kdesignerplugin-5.21.0-12.1 kdesignerplugin-debuginfo-5.21.0-12.1 kdesignerplugin-debugsource-5.21.0-12.1 kdesignerplugin-devel-5.21.0-12.1 kdesu-debugsource-5.21.0-12.1 kdesu-devel-5.21.0-12.1 kdewebkit-debugsource-5.21.0-12.1 kdewebkit-devel-5.21.0-12.1 kdnssd-framework-debugsource-5.21.0-12.1 kdnssd-framework-devel-5.21.0-12.1 kdoctools-5.21.0-12.1 kdoctools-debuginfo-5.21.0-12.1 kdoctools-debugsource-5.21.0-12.1 kdoctools-devel-5.21.0-12.1 kemoticons-debugsource-5.21.0-12.1 kemoticons-devel-5.21.0-12.1 kfilemetadata5-5.21.0-15.1 kfilemetadata5-debuginfo-5.21.0-15.1 kfilemetadata5-debugsource-5.21.0-15.1 kfilemetadata5-devel-5.21.0-15.1 kglobalaccel-debugsource-5.21.0-14.1 kglobalaccel-devel-5.21.0-14.1 kglobalaccel5-5.21.0-14.1 kglobalaccel5-debuginfo-5.21.0-14.1 kguiaddons-debugsource-5.21.0-12.1 kguiaddons-devel-5.21.0-12.1 khtml-debugsource-5.21.0-12.1 khtml-devel-5.21.0-12.1 ki18n-debugsource-5.21.0-12.1 ki18n-devel-5.21.0-12.1 kiconthemes-debugsource-5.21.0-12.1 kiconthemes-devel-5.21.0-12.1 kiconthemes-devel-debuginfo-5.21.0-12.1 kidletime-debugsource-5.21.0-12.1 kidletime-devel-5.21.0-12.1 kimageformats-5.21.0-12.1 kimageformats-debuginfo-5.21.0-12.1 kimageformats-debugsource-5.21.0-12.1 kinit-5.21.0-12.1 kinit-debuginfo-5.21.0-12.1 kinit-debugsource-5.21.0-12.1 kinit-devel-5.21.0-12.1 kio-5.21.0-18.1 kio-core-5.21.0-18.1 kio-core-debuginfo-5.21.0-18.1 kio-debuginfo-5.21.0-18.1 kio-debugsource-5.21.0-18.1 kio-devel-5.21.0-18.1 kio-devel-debuginfo-5.21.0-18.1 kitemmodels-debugsource-5.21.0-12.1 kitemmodels-devel-5.21.0-12.1 kitemviews-debugsource-5.21.0-12.1 kitemviews-devel-5.21.0-12.1 kjobwidgets-debugsource-5.21.0-12.1 kjobwidgets-devel-5.21.0-12.1 kjs-debugsource-5.21.0-12.1 kjs-devel-5.21.0-12.1 kjs-devel-debuginfo-5.21.0-12.1 kjsembed-debugsource-5.21.0-12.1 kjsembed-devel-5.21.0-12.1 kjsembed-devel-debuginfo-5.21.0-12.1 kmediaplayer-debugsource-5.21.0-12.1 kmediaplayer-devel-5.21.0-12.1 knewstuff-debugsource-5.21.0-12.1 knewstuff-devel-5.21.0-12.1 knotifications-debugsource-5.21.0-12.1 knotifications-devel-5.21.0-12.1 knotifyconfig-debugsource-5.21.0-12.1 knotifyconfig-devel-5.21.0-12.1 kpackage-5.21.0-12.1 kpackage-debuginfo-5.21.0-12.1 kpackage-debugsource-5.21.0-12.1 kpackage-devel-5.21.0-12.1 kparts-debugsource-5.21.0-12.1 kparts-devel-5.21.0-12.1 kpeople5-5.21.0-12.1 kpeople5-debuginfo-5.21.0-12.1 kpeople5-debugsource-5.21.0-12.1 kpeople5-devel-5.21.0-12.1 kplotting-debugsource-5.21.0-12.1 kplotting-devel-5.21.0-12.1 kpty-debugsource-5.21.0-12.1 kpty-devel-5.21.0-12.1 kross-5.21.0-12.1 kross-debuginfo-5.21.0-12.1 kross-debugsource-5.21.0-12.1 kross-devel-5.21.0-12.1 kross-devel-debuginfo-5.21.0-12.1 krunner-debugsource-5.21.0-12.1 krunner-devel-5.21.0-12.1 kservice-5.21.0-16.1 kservice-debuginfo-5.21.0-16.1 kservice-debugsource-5.21.0-16.1 kservice-devel-5.21.0-16.1 kssl-5.21.0-12.1 kssl-debuginfo-5.21.0-12.1 ktexteditor-5.21.0-14.1 ktexteditor-debuginfo-5.21.0-14.1 ktexteditor-debugsource-5.21.0-14.1 ktexteditor-devel-5.21.0-14.1 ktextwidgets-debugsource-5.21.0-12.1 ktextwidgets-devel-5.21.0-12.1 kunitconversion-debugsource-5.21.0-12.1 kunitconversion-devel-5.21.0-12.1 kwallet-debugsource-5.21.0-12.1 kwallet-devel-5.21.0-12.1 kwallet-tools-5.21.0-12.1 kwallet-tools-debuginfo-5.21.0-12.1 kwallet-tools-lang-5.21.0-12.1 kwalletd5-5.21.0-12.1 kwalletd5-debuginfo-5.21.0-12.1 kwidgetsaddons-debugsource-5.21.0-12.1 kwidgetsaddons-devel-5.21.0-12.1 kwindowsystem-debugsource-5.21.0-12.1 kwindowsystem-devel-5.21.0-12.1 kxmlgui-debugsource-5.21.0-12.1 kxmlgui-devel-5.21.0-12.1 kxmlrpcclient5-debugsource-5.21.0-12.1 kxmlrpcclient5-devel-5.21.0-12.1 libKF5Archive5-5.21.0-12.1 libKF5Archive5-debuginfo-5.21.0-12.1 libKF5Attica5-5.21.0-12.1 libKF5Attica5-debuginfo-5.21.0-12.1 libKF5Auth5-5.21.0-12.1 libKF5Auth5-debuginfo-5.21.0-12.1 libKF5Baloo5-5.21.0-12.1 libKF5Baloo5-debuginfo-5.21.0-12.1 libKF5BalooEngine5-5.21.0-12.1 libKF5BalooEngine5-debuginfo-5.21.0-12.1 libKF5BluezQt6-5.21.0-12.1 libKF5BluezQt6-debuginfo-5.21.0-12.1 libKF5Bookmarks5-5.21.0-12.1 libKF5Bookmarks5-debuginfo-5.21.0-12.1 libKF5CalendarEvents5-5.21.0-15.1 libKF5CalendarEvents5-debuginfo-5.21.0-15.1 libKF5Codecs5-5.21.0-12.1 libKF5Codecs5-debuginfo-5.21.0-12.1 libKF5Completion5-5.21.0-12.1 libKF5Completion5-debuginfo-5.21.0-12.1 libKF5ConfigCore5-5.21.0-12.1 libKF5ConfigCore5-debuginfo-5.21.0-12.1 libKF5ConfigGui5-5.21.0-12.1 libKF5ConfigGui5-debuginfo-5.21.0-12.1 libKF5ConfigWidgets5-5.21.0-12.1 libKF5ConfigWidgets5-debuginfo-5.21.0-12.1 libKF5CoreAddons5-5.21.0-12.1 libKF5CoreAddons5-debuginfo-5.21.0-12.1 libKF5Crash5-5.21.0-14.1 libKF5Crash5-debuginfo-5.21.0-14.1 libKF5DBusAddons5-5.21.0-12.1 libKF5DBusAddons5-debuginfo-5.21.0-12.1 libKF5DNSSD5-5.21.0-12.1 libKF5DNSSD5-debuginfo-5.21.0-12.1 libKF5Declarative5-5.21.0-15.1 libKF5Declarative5-debuginfo-5.21.0-15.1 libKF5Emoticons5-5.21.0-12.1 libKF5Emoticons5-debuginfo-5.21.0-12.1 libKF5GlobalAccel5-5.21.0-14.1 libKF5GlobalAccel5-debuginfo-5.21.0-14.1 libKF5GlobalAccelPrivate5-5.21.0-14.1 libKF5GlobalAccelPrivate5-debuginfo-5.21.0-14.1 libKF5GuiAddons5-5.21.0-12.1 libKF5GuiAddons5-debuginfo-5.21.0-12.1 libKF5I18n5-5.21.0-12.1 libKF5I18n5-debuginfo-5.21.0-12.1 libKF5IconThemes5-5.21.0-12.1 libKF5IconThemes5-debuginfo-5.21.0-12.1 libKF5IdleTime5-5.21.0-12.1 libKF5IdleTime5-debuginfo-5.21.0-12.1 libKF5ItemModels5-5.21.0-12.1 libKF5ItemModels5-debuginfo-5.21.0-12.1 libKF5ItemViews5-5.21.0-12.1 libKF5ItemViews5-debuginfo-5.21.0-12.1 libKF5JS5-5.21.0-12.1 libKF5JS5-debuginfo-5.21.0-12.1 libKF5JSApi5-5.21.0-12.1 libKF5JSApi5-debuginfo-5.21.0-12.1 libKF5JobWidgets5-5.21.0-12.1 libKF5JobWidgets5-debuginfo-5.21.0-12.1 libKF5JsEmbed5-5.21.0-12.1 libKF5JsEmbed5-debuginfo-5.21.0-12.1 libKF5KCMUtils5-5.21.0-12.1 libKF5KCMUtils5-debuginfo-5.21.0-12.1 libKF5KDELibs4Support5-5.21.0-12.1 libKF5KDELibs4Support5-debuginfo-5.21.0-12.1 libKF5KHtml5-5.21.0-12.1 libKF5KHtml5-debuginfo-5.21.0-12.1 libKF5MediaPlayer5-5.21.0-12.1 libKF5MediaPlayer5-debuginfo-5.21.0-12.1 libKF5ModemManagerQt-debugsource-5.21.0-12.1 libKF5ModemManagerQt-devel-5.21.0-12.1 libKF5ModemManagerQt6-5.21.0-12.1 libKF5ModemManagerQt6-debuginfo-5.21.0-12.1 libKF5NetworkManagerQt-debugsource-5.21.0-12.1 libKF5NetworkManagerQt-devel-5.21.0-12.1 libKF5NetworkManagerQt6-5.21.0-12.1 libKF5NetworkManagerQt6-debuginfo-5.21.0-12.1 libKF5NewStuff5-5.21.0-12.1 libKF5NewStuff5-debuginfo-5.21.0-12.1 libKF5Notifications5-5.21.0-12.1 libKF5Notifications5-debuginfo-5.21.0-12.1 libKF5NotifyConfig5-5.21.0-12.1 libKF5NotifyConfig5-debuginfo-5.21.0-12.1 libKF5Parts5-5.21.0-12.1 libKF5Parts5-debuginfo-5.21.0-12.1 libKF5Plotting5-5.21.0-12.1 libKF5Plotting5-debuginfo-5.21.0-12.1 libKF5Pty5-5.21.0-12.1 libKF5Pty5-debuginfo-5.21.0-12.1 libKF5QuickAddons5-5.21.0-15.1 libKF5QuickAddons5-debuginfo-5.21.0-15.1 libKF5Runner5-5.21.0-12.1 libKF5Runner5-debuginfo-5.21.0-12.1 libKF5Solid5-5.21.0-12.1 libKF5Solid5-debuginfo-5.21.0-12.1 libKF5SonnetCore5-5.21.0-12.1 libKF5SonnetCore5-debuginfo-5.21.0-12.1 libKF5SonnetUi5-5.21.0-12.1 libKF5SonnetUi5-debuginfo-5.21.0-12.1 libKF5Style5-5.21.0-15.1 libKF5Style5-debuginfo-5.21.0-15.1 libKF5Su5-5.21.0-12.1 libKF5Su5-debuginfo-5.21.0-12.1 libKF5TextWidgets5-5.21.0-12.1 libKF5TextWidgets5-debuginfo-5.21.0-12.1 libKF5ThreadWeaver5-5.21.0-12.1 libKF5ThreadWeaver5-debuginfo-5.21.0-12.1 libKF5UnitConversion5-5.21.0-12.1 libKF5UnitConversion5-debuginfo-5.21.0-12.1 libKF5Wallet5-5.21.0-12.1 libKF5Wallet5-debuginfo-5.21.0-12.1 libKF5WebKit5-5.21.0-12.1 libKF5WebKit5-debuginfo-5.21.0-12.1 libKF5WidgetsAddons5-5.21.0-12.1 libKF5WidgetsAddons5-debuginfo-5.21.0-12.1 libKF5WindowSystem5-5.21.0-12.1 libKF5WindowSystem5-debuginfo-5.21.0-12.1 libKF5XmlGui5-5.21.0-12.1 libKF5XmlGui5-debuginfo-5.21.0-12.1 libKF5XmlRpcClient5-5.21.0-12.1 libKF5XmlRpcClient5-debuginfo-5.21.0-12.1 libkwalletbackend5-5-5.21.0-12.1 libkwalletbackend5-5-debuginfo-5.21.0-12.1 plasma-framework-5.21.0-15.1 plasma-framework-components-5.21.0-15.1 plasma-framework-components-debuginfo-5.21.0-15.1 plasma-framework-debuginfo-5.21.0-15.1 plasma-framework-debugsource-5.21.0-15.1 plasma-framework-devel-5.21.0-15.1 plasma-framework-private-5.21.0-15.1 plasma-framework-private-debuginfo-5.21.0-15.1 solid-debugsource-5.21.0-12.1 solid-devel-5.21.0-12.1 solid-imports-5.21.0-12.1 solid-imports-debuginfo-5.21.0-12.1 solid-tools-5.21.0-12.1 solid-tools-debuginfo-5.21.0-12.1 sonnet-debugsource-5.21.0-12.1 sonnet-devel-5.21.0-12.1 threadweaver-debugsource-5.21.0-12.1 threadweaver-devel-5.21.0-12.1 - openSUSE Leap 42.1 (noarch): baloo5-lang-5.21.0-12.1 breeze5-icons-5.21.0-11.1 kcoreaddons-lang-5.21.0-12.1 kded-lang-5.21.0-12.1 kdelibs4support-lang-5.21.0-12.1 kdesignerplugin-lang-5.21.0-12.1 kdoctools-lang-5.21.0-12.1 kfilemetadata5-lang-5.21.0-15.1 kinit-lang-5.21.0-12.1 kio-lang-5.21.0-18.1 kpackage-lang-5.21.0-12.1 kpeople5-lang-5.21.0-12.1 kross-lang-5.21.0-12.1 kservice-lang-5.21.0-16.1 ktexteditor-lang-5.21.0-14.1 kwalletd5-lang-5.21.0-12.1 libKF5Auth5-lang-5.21.0-12.1 libKF5Bookmarks5-lang-5.21.0-12.1 libKF5Codecs5-lang-5.21.0-12.1 libKF5Completion5-lang-5.21.0-12.1 libKF5ConfigCore5-lang-5.21.0-12.1 libKF5ConfigWidgets5-lang-5.21.0-12.1 libKF5DBusAddons5-lang-5.21.0-12.1 libKF5DNSSD5-lang-5.21.0-12.1 libKF5Declarative5-lang-5.21.0-15.1 libKF5GlobalAccel5-lang-5.21.0-14.1 libKF5I18n5-lang-5.21.0-12.1 libKF5IconThemes5-lang-5.21.0-12.1 libKF5ItemViews5-lang-5.21.0-12.1 libKF5JobWidgets5-lang-5.21.0-12.1 libKF5JsEmbed5-lang-5.21.0-12.1 libKF5KCMUtils5-lang-5.21.0-12.1 libKF5KHtml5-lang-5.21.0-12.1 libKF5NewStuff5-lang-5.21.0-12.1 libKF5Notifications5-lang-5.21.0-12.1 libKF5NotifyConfig5-lang-5.21.0-12.1 libKF5Parts5-lang-5.21.0-12.1 libKF5Pty5-lang-5.21.0-12.1 libKF5Solid5-lang-5.21.0-12.1 libKF5SonnetCore5-lang-5.21.0-12.1 libKF5Style5-lang-5.21.0-15.1 libKF5Su5-lang-5.21.0-12.1 libKF5TextWidgets5-lang-5.21.0-12.1 libKF5UnitConversion5-lang-5.21.0-12.1 libKF5WidgetsAddons5-lang-5.21.0-12.1 libKF5WindowSystem5-lang-5.21.0-12.1 libKF5XmlGui5-lang-5.21.0-12.1 libKF5XmlRpcClient5-lang-5.21.0-12.1 plasma-framework-lang-5.21.0-15.1 - openSUSE Leap 42.1 (x86_64): attica-qt5-devel-32bit-5.21.0-12.1 frameworkintegration-devel-32bit-5.21.0-15.1 frameworkintegration-plugin-32bit-5.21.0-15.1 frameworkintegration-plugin-debuginfo-32bit-5.21.0-15.1 karchive-devel-32bit-5.21.0-12.1 kauth-devel-32bit-5.21.0-12.1 kbookmarks-devel-32bit-5.21.0-12.1 kcmutils-devel-32bit-5.21.0-12.1 kcodecs-devel-32bit-5.21.0-12.1 kcompletion-devel-32bit-5.21.0-12.1 kconfig-devel-32bit-5.21.0-12.1 kconfig-devel-debuginfo-32bit-5.21.0-12.1 kconfigwidgets-devel-32bit-5.21.0-12.1 kcoreaddons-devel-32bit-5.21.0-12.1 kcoreaddons-devel-debuginfo-32bit-5.21.0-12.1 kcrash-devel-32bit-5.21.0-14.1 kdbusaddons-devel-32bit-5.21.0-12.1 kdeclarative-components-32bit-5.21.0-15.1 kdeclarative-components-debuginfo-32bit-5.21.0-15.1 kdeclarative-devel-32bit-5.21.0-15.1 kdelibs4support-32bit-5.21.0-12.1 kdelibs4support-debuginfo-32bit-5.21.0-12.1 kdelibs4support-devel-32bit-5.21.0-12.1 kdesu-devel-32bit-5.21.0-12.1 kdewebkit-devel-32bit-5.21.0-12.1 kdnssd-framework-devel-32bit-5.21.0-12.1 kemoticons-devel-32bit-5.21.0-12.1 kfilemetadata5-32bit-5.21.0-15.1 kfilemetadata5-debuginfo-32bit-5.21.0-15.1 kglobalaccel-devel-32bit-5.21.0-14.1 kguiaddons-devel-32bit-5.21.0-12.1 khtml-devel-32bit-5.21.0-12.1 ki18n-devel-32bit-5.21.0-12.1 kiconthemes-devel-32bit-5.21.0-12.1 kiconthemes-devel-debuginfo-32bit-5.21.0-12.1 kidletime-devel-32bit-5.21.0-12.1 kimageformats-32bit-5.21.0-12.1 kimageformats-debuginfo-32bit-5.21.0-12.1 kinit-32bit-5.21.0-12.1 kinit-debuginfo-32bit-5.21.0-12.1 kio-32bit-5.21.0-18.1 kio-core-32bit-5.21.0-18.1 kio-core-debuginfo-32bit-5.21.0-18.1 kio-debuginfo-32bit-5.21.0-18.1 kio-devel-32bit-5.21.0-18.1 kio-devel-debuginfo-32bit-5.21.0-18.1 kitemmodels-devel-32bit-5.21.0-12.1 kitemviews-devel-32bit-5.21.0-12.1 kjobwidgets-devel-32bit-5.21.0-12.1 kjs-devel-32bit-5.21.0-12.1 kjs-devel-debuginfo-32bit-5.21.0-12.1 kjsembed-devel-32bit-5.21.0-12.1 kjsembed-devel-debuginfo-32bit-5.21.0-12.1 kmediaplayer-devel-32bit-5.21.0-12.1 knewstuff-devel-32bit-5.21.0-12.1 knotifications-devel-32bit-5.21.0-12.1 knotifyconfig-devel-32bit-5.21.0-12.1 kpackage-32bit-5.21.0-12.1 kpackage-debuginfo-32bit-5.21.0-12.1 kpackage-devel-32bit-5.21.0-12.1 kparts-devel-32bit-5.21.0-12.1 kpeople5-32bit-5.21.0-12.1 kpeople5-debuginfo-32bit-5.21.0-12.1 kpeople5-devel-32bit-5.21.0-12.1 kplotting-devel-32bit-5.21.0-12.1 kpty-devel-32bit-5.21.0-12.1 kross-32bit-5.21.0-12.1 kross-debuginfo-32bit-5.21.0-12.1 kross-devel-32bit-5.21.0-12.1 kross-devel-debuginfo-32bit-5.21.0-12.1 krunner-devel-32bit-5.21.0-12.1 kservice-32bit-5.21.0-16.1 kservice-debuginfo-32bit-5.21.0-16.1 kservice-devel-32bit-5.21.0-16.1 ktexteditor-32bit-5.21.0-14.1 ktexteditor-debuginfo-32bit-5.21.0-14.1 ktexteditor-devel-32bit-5.21.0-14.1 ktextwidgets-devel-32bit-5.21.0-12.1 kunitconversion-devel-32bit-5.21.0-12.1 kwallet-devel-32bit-5.21.0-12.1 kwidgetsaddons-devel-32bit-5.21.0-12.1 kwindowsystem-devel-32bit-5.21.0-12.1 kxmlgui-devel-32bit-5.21.0-12.1 kxmlrpcclient5-devel-32bit-5.21.0-12.1 libKF5Archive5-32bit-5.21.0-12.1 libKF5Archive5-debuginfo-32bit-5.21.0-12.1 libKF5Attica5-32bit-5.21.0-12.1 libKF5Attica5-debuginfo-32bit-5.21.0-12.1 libKF5Auth5-32bit-5.21.0-12.1 libKF5Auth5-debuginfo-32bit-5.21.0-12.1 libKF5Baloo5-32bit-5.21.0-12.1 libKF5Baloo5-debuginfo-32bit-5.21.0-12.1 libKF5BalooEngine5-32bit-5.21.0-12.1 libKF5BalooEngine5-debuginfo-32bit-5.21.0-12.1 libKF5Bookmarks5-32bit-5.21.0-12.1 libKF5Bookmarks5-debuginfo-32bit-5.21.0-12.1 libKF5CalendarEvents5-32bit-5.21.0-15.1 libKF5CalendarEvents5-debuginfo-32bit-5.21.0-15.1 libKF5Codecs5-32bit-5.21.0-12.1 libKF5Codecs5-debuginfo-32bit-5.21.0-12.1 libKF5Completion5-32bit-5.21.0-12.1 libKF5Completion5-debuginfo-32bit-5.21.0-12.1 libKF5ConfigCore5-32bit-5.21.0-12.1 libKF5ConfigCore5-debuginfo-32bit-5.21.0-12.1 libKF5ConfigGui5-32bit-5.21.0-12.1 libKF5ConfigGui5-debuginfo-32bit-5.21.0-12.1 libKF5ConfigWidgets5-32bit-5.21.0-12.1 libKF5ConfigWidgets5-debuginfo-32bit-5.21.0-12.1 libKF5CoreAddons5-32bit-5.21.0-12.1 libKF5CoreAddons5-debuginfo-32bit-5.21.0-12.1 libKF5Crash5-32bit-5.21.0-14.1 libKF5Crash5-debuginfo-32bit-5.21.0-14.1 libKF5DBusAddons5-32bit-5.21.0-12.1 libKF5DBusAddons5-debuginfo-32bit-5.21.0-12.1 libKF5DNSSD5-32bit-5.21.0-12.1 libKF5DNSSD5-debuginfo-32bit-5.21.0-12.1 libKF5Declarative5-32bit-5.21.0-15.1 libKF5Declarative5-debuginfo-32bit-5.21.0-15.1 libKF5Emoticons5-32bit-5.21.0-12.1 libKF5Emoticons5-debuginfo-32bit-5.21.0-12.1 libKF5GlobalAccel5-32bit-5.21.0-14.1 libKF5GlobalAccel5-debuginfo-32bit-5.21.0-14.1 libKF5GuiAddons5-32bit-5.21.0-12.1 libKF5GuiAddons5-debuginfo-32bit-5.21.0-12.1 libKF5I18n5-32bit-5.21.0-12.1 libKF5I18n5-debuginfo-32bit-5.21.0-12.1 libKF5IconThemes5-32bit-5.21.0-12.1 libKF5IconThemes5-debuginfo-32bit-5.21.0-12.1 libKF5IdleTime5-32bit-5.21.0-12.1 libKF5IdleTime5-debuginfo-32bit-5.21.0-12.1 libKF5ItemModels5-32bit-5.21.0-12.1 libKF5ItemModels5-debuginfo-32bit-5.21.0-12.1 libKF5ItemViews5-32bit-5.21.0-12.1 libKF5ItemViews5-debuginfo-32bit-5.21.0-12.1 libKF5JS5-32bit-5.21.0-12.1 libKF5JS5-debuginfo-32bit-5.21.0-12.1 libKF5JSApi5-32bit-5.21.0-12.1 libKF5JSApi5-debuginfo-32bit-5.21.0-12.1 libKF5JobWidgets5-32bit-5.21.0-12.1 libKF5JobWidgets5-debuginfo-32bit-5.21.0-12.1 libKF5JsEmbed5-32bit-5.21.0-12.1 libKF5JsEmbed5-debuginfo-32bit-5.21.0-12.1 libKF5KCMUtils5-32bit-5.21.0-12.1 libKF5KCMUtils5-debuginfo-32bit-5.21.0-12.1 libKF5KDELibs4Support5-32bit-5.21.0-12.1 libKF5KDELibs4Support5-debuginfo-32bit-5.21.0-12.1 libKF5KHtml5-32bit-5.21.0-12.1 libKF5KHtml5-debuginfo-32bit-5.21.0-12.1 libKF5MediaPlayer5-32bit-5.21.0-12.1 libKF5MediaPlayer5-debuginfo-32bit-5.21.0-12.1 libKF5NetworkManagerQt-devel-32bit-5.21.0-12.1 libKF5NetworkManagerQt6-32bit-5.21.0-12.1 libKF5NetworkManagerQt6-debuginfo-32bit-5.21.0-12.1 libKF5NewStuff5-32bit-5.21.0-12.1 libKF5NewStuff5-debuginfo-32bit-5.21.0-12.1 libKF5Notifications5-32bit-5.21.0-12.1 libKF5Notifications5-debuginfo-32bit-5.21.0-12.1 libKF5NotifyConfig5-32bit-5.21.0-12.1 libKF5NotifyConfig5-debuginfo-32bit-5.21.0-12.1 libKF5Parts5-32bit-5.21.0-12.1 libKF5Parts5-debuginfo-32bit-5.21.0-12.1 libKF5Plotting5-32bit-5.21.0-12.1 libKF5Plotting5-debuginfo-32bit-5.21.0-12.1 libKF5Pty5-32bit-5.21.0-12.1 libKF5Pty5-debuginfo-32bit-5.21.0-12.1 libKF5QuickAddons5-32bit-5.21.0-15.1 libKF5QuickAddons5-debuginfo-32bit-5.21.0-15.1 libKF5Runner5-32bit-5.21.0-12.1 libKF5Runner5-debuginfo-32bit-5.21.0-12.1 libKF5Solid5-32bit-5.21.0-12.1 libKF5Solid5-debuginfo-32bit-5.21.0-12.1 libKF5SonnetCore5-32bit-5.21.0-12.1 libKF5SonnetCore5-debuginfo-32bit-5.21.0-12.1 libKF5SonnetUi5-32bit-5.21.0-12.1 libKF5SonnetUi5-debuginfo-32bit-5.21.0-12.1 libKF5Style5-32bit-5.21.0-15.1 libKF5Style5-debuginfo-32bit-5.21.0-15.1 libKF5Su5-32bit-5.21.0-12.1 libKF5Su5-debuginfo-32bit-5.21.0-12.1 libKF5TextWidgets5-32bit-5.21.0-12.1 libKF5TextWidgets5-debuginfo-32bit-5.21.0-12.1 libKF5ThreadWeaver5-32bit-5.21.0-12.1 libKF5ThreadWeaver5-debuginfo-32bit-5.21.0-12.1 libKF5UnitConversion5-32bit-5.21.0-12.1 libKF5UnitConversion5-debuginfo-32bit-5.21.0-12.1 libKF5Wallet5-32bit-5.21.0-12.1 libKF5Wallet5-debuginfo-32bit-5.21.0-12.1 libKF5WebKit5-32bit-5.21.0-12.1 libKF5WebKit5-debuginfo-32bit-5.21.0-12.1 libKF5WidgetsAddons5-32bit-5.21.0-12.1 libKF5WidgetsAddons5-debuginfo-32bit-5.21.0-12.1 libKF5WindowSystem5-32bit-5.21.0-12.1 libKF5WindowSystem5-debuginfo-32bit-5.21.0-12.1 libKF5XmlGui5-32bit-5.21.0-12.1 libKF5XmlGui5-debuginfo-32bit-5.21.0-12.1 libKF5XmlRpcClient5-32bit-5.21.0-12.1 libKF5XmlRpcClient5-debuginfo-32bit-5.21.0-12.1 libkwalletbackend5-5-32bit-5.21.0-12.1 libkwalletbackend5-5-debuginfo-32bit-5.21.0-12.1 plasma-framework-32bit-5.21.0-15.1 plasma-framework-components-32bit-5.21.0-15.1 plasma-framework-components-debuginfo-32bit-5.21.0-15.1 plasma-framework-debuginfo-32bit-5.21.0-15.1 plasma-framework-devel-32bit-5.21.0-15.1 plasma-framework-private-32bit-5.21.0-15.1 plasma-framework-private-debuginfo-32bit-5.21.0-15.1 solid-devel-32bit-5.21.0-12.1 sonnet-devel-32bit-5.21.0-12.1 threadweaver-devel-32bit-5.21.0-12.1 References: https://bugzilla.suse.com/974793

1 0

openSUSE-RU-2016:1201-1: moderate: Recommended update for apparmor
by maintenance＠opensuse.org 03 May '16

03 May '16

openSUSE Recommended Update: Recommended update for apparmor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1201-1 Rating: moderate References: #921098 #923201 #948584 #948753 #954104 #954958 #954959 #964971 #971790 #971917 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This recommended update for apparmor fixes the following issues: - update to AppArmor 2.10.1: - fix incorrect output of child profile names (apparmor_parser -N) which caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950) - fix a crash in aa-logprof / logparser.py for change_hat log events (lp#1523297) and log events that look like file events, but aren't (lp#1540562, lp#1525119, lp#1466812) - write unix rules when saving a profile (lp#1522938, boo#954104#c3) - several fixes for variable handling in aa-logprof - map c (create) log events to w instead of a - add python to the "no Px rule" list in logprof.conf - let aa-logprof check for duplicate profiles - let aa-status work without the apparmor.fail python module (boo#971917, lp#1480492) - add permissions in several profiles (including boo#948584, boo#948753, boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and boo#921098#c15). - and many more fixes, see the full changelog at http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-534=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): apache2-mod_apparmor-2.10.1-5.1 apache2-mod_apparmor-debuginfo-2.10.1-5.1 apparmor-debugsource-2.10.1-5.1 apparmor-parser-2.10.1-5.1 apparmor-parser-debuginfo-2.10.1-5.1 libapparmor-devel-2.10.1-5.1 libapparmor1-2.10.1-5.1 libapparmor1-debuginfo-2.10.1-5.1 pam_apparmor-2.10.1-5.1 pam_apparmor-debuginfo-2.10.1-5.1 perl-apparmor-2.10.1-5.1 perl-apparmor-debuginfo-2.10.1-5.1 python3-apparmor-2.10.1-5.1 python3-apparmor-debuginfo-2.10.1-5.1 ruby-apparmor-2.10.1-5.1 ruby-apparmor-debuginfo-2.10.1-5.1 - openSUSE Leap 42.1 (x86_64): libapparmor1-32bit-2.10.1-5.1 libapparmor1-debuginfo-32bit-2.10.1-5.1 pam_apparmor-32bit-2.10.1-5.1 pam_apparmor-debuginfo-32bit-2.10.1-5.1 - openSUSE Leap 42.1 (noarch): apparmor-abstractions-2.10.1-5.1 apparmor-docs-2.10.1-5.1 apparmor-parser-lang-2.10.1-5.1 apparmor-profiles-2.10.1-5.1 apparmor-utils-2.10.1-5.1 apparmor-utils-lang-2.10.1-5.1 References: https://bugzilla.suse.com/921098 https://bugzilla.suse.com/923201 https://bugzilla.suse.com/948584 https://bugzilla.suse.com/948753 https://bugzilla.suse.com/954104 https://bugzilla.suse.com/954958 https://bugzilla.suse.com/954959 https://bugzilla.suse.com/964971 https://bugzilla.suse.com/971790 https://bugzilla.suse.com/971917

1 0

openSUSE-RU-2016:1200-1: Recommended update for gnome-tweak-tool
by maintenance＠opensuse.org 03 May '16

03 May '16

openSUSE Recommended Update: Recommended update for gnome-tweak-tool ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1200-1 Rating: low References: #976952 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-tweak-tool fixes the following issues: - boo#976952: issue with visibility of some options in tweaks tools Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-535=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): gnome-tweak-tool-3.16.2-5.1 gnome-tweak-tool-lang-3.16.2-5.1 References: https://bugzilla.suse.com/976952

1 0

openSUSE-RU-2016:1199-1: moderate: Recommended update for tmux
by maintenance＠opensuse.org 03 May '16

03 May '16

openSUSE Recommended Update: Recommended update for tmux ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1199-1 Rating: moderate References: #976922 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tmux fixes the following issues: - boo#976922: fix a problem/warning with the postinstall scriptlet when tmux is installed before system Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-536=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): tmux-2.0-7.1 tmux-debuginfo-2.0-7.1 tmux-debugsource-2.0-7.1 References: https://bugzilla.suse.com/976922

1 0

openSUSE-RU-2016:1198-1: moderate: Recommended update for tmux
by maintenance＠opensuse.org 03 May '16

03 May '16

openSUSE Recommended Update: Recommended update for tmux ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1198-1 Rating: moderate References: #976922 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tmux fixes the following issues: - boo#976922: fix a problem/warning with the postinstall scriptlet when tmux is installed before system Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-536=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): tmux-2.0-5.1 tmux-debuginfo-2.0-5.1 tmux-debugsource-2.0-5.1 References: https://bugzilla.suse.com/976922

1 0

openSUSE-RU-2016:1197-1: moderate: Recommended update for ebtables
by maintenance＠opensuse.org 03 May '16

03 May '16

openSUSE Recommended Update: Recommended update for ebtables ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1197-1 Rating: moderate References: #976919 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ebtables fixes the following issues: - Fix problem with missing sed during the installation (boo#976919) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-533=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ebtables-2.0.10.4-10.3.1 ebtables-debuginfo-2.0.10.4-10.3.1 ebtables-debugsource-2.0.10.4-10.3.1 References: https://bugzilla.suse.com/976919

1 0

openSUSE-RU-2016:1196-1: moderate: Recommended update for clamav-database
by maintenance＠opensuse.org 02 May '16

02 May '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1196-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - database refresh on May 2nd. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-532=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201605020001-85.1 References:

1 0

openSUSE-RU-2016:1194-1: Recommended update for clamav-database
by maintenance＠opensuse.org 02 May '16

02 May '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1194-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh April 25th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-531=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201604250002-81.1 References:

1 0