June 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:1629-1: Recommended update for yasm
by maintenance＠opensuse.org 19 Jun '16

19 Jun '16

openSUSE Recommended Update: Recommended update for yasm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1629-1 Rating: low References: #959429 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yasm increases the symbol hash table size from 31 to 4k entries. This has a significant effect on performance when building some applications. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-747=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): yasm-1.2.0-12.1 yasm-debuginfo-1.2.0-12.1 yasm-debugsource-1.2.0-12.1 yasm-devel-1.2.0-12.1 References: https://bugzilla.suse.com/959429

1 0

openSUSE-RU-2016:1628-1: Recommended update for mtools
by maintenance＠opensuse.org 19 Jun '16

19 Jun '16

openSUSE Recommended Update: Recommended update for mtools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1628-1 Rating: low References: #957007 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mtools provides the following fixes: - Add glibc-locale as a runtime dependency. Tools like mcopy(1) use it. (bsc#957007) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-746=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): mtools-4.0.18-8.1 mtools-debuginfo-4.0.18-8.1 mtools-debugsource-4.0.18-8.1 mtools-doc-4.0.18-8.1 mtools-floppyd-4.0.18-8.1 mtools-floppyd-debuginfo-4.0.18-8.1 References: https://bugzilla.suse.com/957007

1 0

openSUSE-RU-2016:1627-1: Recommended update for dmidecode
by maintenance＠opensuse.org 19 Jun '16

19 Jun '16

openSUSE Recommended Update: Recommended update for dmidecode ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1627-1 Rating: low References: #955705 #974862 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for dmidecode fixes the following issues: - Skip the SMBIOS version comparison in quiet mode. (bsc#974862) - Add support for DDR4 memory type. (bsc#955705) - Decode the CPUID of recent AMD processors. - Fix memory voltage labels. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-748=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): dmidecode-2.12-9.1 dmidecode-debuginfo-2.12-9.1 dmidecode-debugsource-2.12-9.1 References: https://bugzilla.suse.com/955705 https://bugzilla.suse.com/974862

1 0

openSUSE-SU-2016:1626-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 19 Jun '16

19 Jun '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1626-1 Rating: important References: #985397 Cross-References: CVE-2016-1704 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Chromium was updated to 51.0.2704.103 to fix three vulnerabilities: - CVE-2016-1704: Various fixes from internal audits, fuzzing and other initiatives (shared identifier) (boo#985397) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-744=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): chromedriver-51.0.2704.103-108.1 chromedriver-debuginfo-51.0.2704.103-108.1 chromium-51.0.2704.103-108.1 chromium-debuginfo-51.0.2704.103-108.1 chromium-debugsource-51.0.2704.103-108.1 chromium-desktop-gnome-51.0.2704.103-108.1 chromium-desktop-kde-51.0.2704.103-108.1 chromium-ffmpegsumo-51.0.2704.103-108.1 chromium-ffmpegsumo-debuginfo-51.0.2704.103-108.1 References: https://www.suse.com/security/cve/CVE-2016-1704.html https://bugzilla.suse.com/985397

1 0

openSUSE-SU-2016:1625-1: critical: Security update for flash-player
by opensuse-security＠opensuse.org 19 Jun '16

19 Jun '16

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1625-1 Rating: critical References: #984695 Cross-References: CVE-2016-4122 CVE-2016-4123 CVE-2016-4124 CVE-2016-4125 CVE-2016-4127 CVE-2016-4128 CVE-2016-4129 CVE-2016-4130 CVE-2016-4131 CVE-2016-4132 CVE-2016-4133 CVE-2016-4134 CVE-2016-4135 CVE-2016-4136 CVE-2016-4137 CVE-2016-4138 CVE-2016-4139 CVE-2016-4140 CVE-2016-4141 CVE-2016-4142 CVE-2016-4143 CVE-2016-4144 CVE-2016-4145 CVE-2016-4146 CVE-2016-4147 CVE-2016-4148 CVE-2016-4149 CVE-2016-4150 CVE-2016-4151 CVE-2016-4152 CVE-2016-4153 CVE-2016-4154 CVE-2016-4155 CVE-2016-4156 CVE-2016-4166 CVE-2016-4171 Affected Products: openSUSE 13.1 NonFree ______________________________________________________________________________ An update that fixes 36 vulnerabilities is now available. Description: Adobe flash-player was updated to 11.2.202.626 to fix the following security issues: Security update to 11.2.202.626 (boo#984695): * APSB16-18, CVE-2016-4122, CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4130, CVE-2016-4131, CVE-2016-4132, CVE-2016-4133, CVE-2016-4134, CVE-2016-4135, CVE-2016-4136, CVE-2016-4137, CVE-2016-4138, CVE-2016-4139, CVE-2016-4140, CVE-2016-4141, CVE-2016-4142, CVE-2016-4143, CVE-2016-4144, CVE-2016-4145, CVE-2016-4146, CVE-2016-4147, CVE-2016-4148, CVE-2016-4149, CVE-2016-4150, CVE-2016-4151, CVE-2016-4152, CVE-2016-4153, CVE-2016-4154, CVE-2016-4155, CVE-2016-4156, CVE-2016-4166, CVE-2016-4171 Please see https://helpx.adobe.com/security/products/flash-player/apsb16-18.html for more information. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1 NonFree: zypper in -t patch 2016-743=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 NonFree (i586 x86_64): flash-player-11.2.202.626-165.1 flash-player-gnome-11.2.202.626-165.1 flash-player-kde4-11.2.202.626-165.1 References: https://www.suse.com/security/cve/CVE-2016-4122.html https://www.suse.com/security/cve/CVE-2016-4123.html https://www.suse.com/security/cve/CVE-2016-4124.html https://www.suse.com/security/cve/CVE-2016-4125.html https://www.suse.com/security/cve/CVE-2016-4127.html https://www.suse.com/security/cve/CVE-2016-4128.html https://www.suse.com/security/cve/CVE-2016-4129.html https://www.suse.com/security/cve/CVE-2016-4130.html https://www.suse.com/security/cve/CVE-2016-4131.html https://www.suse.com/security/cve/CVE-2016-4132.html https://www.suse.com/security/cve/CVE-2016-4133.html https://www.suse.com/security/cve/CVE-2016-4134.html https://www.suse.com/security/cve/CVE-2016-4135.html https://www.suse.com/security/cve/CVE-2016-4136.html https://www.suse.com/security/cve/CVE-2016-4137.html https://www.suse.com/security/cve/CVE-2016-4138.html https://www.suse.com/security/cve/CVE-2016-4139.html https://www.suse.com/security/cve/CVE-2016-4140.html https://www.suse.com/security/cve/CVE-2016-4141.html https://www.suse.com/security/cve/CVE-2016-4142.html https://www.suse.com/security/cve/CVE-2016-4143.html https://www.suse.com/security/cve/CVE-2016-4144.html https://www.suse.com/security/cve/CVE-2016-4145.html https://www.suse.com/security/cve/CVE-2016-4146.html https://www.suse.com/security/cve/CVE-2016-4147.html https://www.suse.com/security/cve/CVE-2016-4148.html https://www.suse.com/security/cve/CVE-2016-4149.html https://www.suse.com/security/cve/CVE-2016-4150.html https://www.suse.com/security/cve/CVE-2016-4151.html https://www.suse.com/security/cve/CVE-2016-4152.html https://www.suse.com/security/cve/CVE-2016-4153.html https://www.suse.com/security/cve/CVE-2016-4154.html https://www.suse.com/security/cve/CVE-2016-4155.html https://www.suse.com/security/cve/CVE-2016-4156.html https://www.suse.com/security/cve/CVE-2016-4166.html https://www.suse.com/security/cve/CVE-2016-4171.html https://bugzilla.suse.com/984695

1 0

openSUSE-SU-2016:1624-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 18 Jun '16

18 Jun '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1624-1 Rating: important References: #985397 Cross-References: CVE-2016-1704 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Chromium was updated to 51.0.2704.103 to fix three vulnerabilities: - CVE-2016-1704: Various fixes from internal audits, fuzzing and other initiatives (shared identifier) (boo#985397) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-741=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): chromedriver-51.0.2704.103-57.1 chromedriver-debuginfo-51.0.2704.103-57.1 chromium-51.0.2704.103-57.1 chromium-debuginfo-51.0.2704.103-57.1 chromium-debugsource-51.0.2704.103-57.1 chromium-desktop-gnome-51.0.2704.103-57.1 chromium-desktop-kde-51.0.2704.103-57.1 chromium-ffmpegsumo-51.0.2704.103-57.1 chromium-ffmpegsumo-debuginfo-51.0.2704.103-57.1 References: https://www.suse.com/security/cve/CVE-2016-1704.html https://bugzilla.suse.com/985397

1 0

openSUSE-SU-2016:1623-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 18 Jun '16

18 Jun '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1623-1 Rating: important References: #985397 Cross-References: CVE-2016-1704 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Chromium was updated to 51.0.2704.103 to fix three vulnerabilities: - CVE-2016-1704: Various fixes from internal audits, fuzzing and other initiatives (shared identifier) (boo#985397) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-742=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-51.0.2704.103-84.1 chromium-51.0.2704.103-84.1 chromium-desktop-gnome-51.0.2704.103-84.1 chromium-desktop-kde-51.0.2704.103-84.1 chromium-ffmpegsumo-51.0.2704.103-84.1 References: https://www.suse.com/security/cve/CVE-2016-1704.html https://bugzilla.suse.com/985397

1 0

openSUSE-SU-2016:1621-1: critical: Security update for flash-player
by opensuse-security＠opensuse.org 17 Jun '16

17 Jun '16

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1621-1 Rating: critical References: #984695 Cross-References: CVE-2016-4122 CVE-2016-4123 CVE-2016-4124 CVE-2016-4125 CVE-2016-4127 CVE-2016-4128 CVE-2016-4129 CVE-2016-4130 CVE-2016-4131 CVE-2016-4132 CVE-2016-4133 CVE-2016-4134 CVE-2016-4135 CVE-2016-4136 CVE-2016-4137 CVE-2016-4138 CVE-2016-4139 CVE-2016-4140 CVE-2016-4141 CVE-2016-4142 CVE-2016-4143 CVE-2016-4144 CVE-2016-4145 CVE-2016-4146 CVE-2016-4147 CVE-2016-4148 CVE-2016-4149 CVE-2016-4150 CVE-2016-4151 CVE-2016-4152 CVE-2016-4153 CVE-2016-4154 CVE-2016-4155 CVE-2016-4156 CVE-2016-4166 CVE-2016-4171 Affected Products: openSUSE 13.2 NonFree ______________________________________________________________________________ An update that fixes 36 vulnerabilities is now available. Description: Adobe flash-player was updated to 11.2.202.626 to fix the following security issues: Security update to 11.2.202.626 (boo#984695): * APSB16-18, CVE-2016-4122, CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4130, CVE-2016-4131, CVE-2016-4132, CVE-2016-4133, CVE-2016-4134, CVE-2016-4135, CVE-2016-4136, CVE-2016-4137, CVE-2016-4138, CVE-2016-4139, CVE-2016-4140, CVE-2016-4141, CVE-2016-4142, CVE-2016-4143, CVE-2016-4144, CVE-2016-4145, CVE-2016-4146, CVE-2016-4147, CVE-2016-4148, CVE-2016-4149, CVE-2016-4150, CVE-2016-4151, CVE-2016-4152, CVE-2016-4153, CVE-2016-4154, CVE-2016-4155, CVE-2016-4156, CVE-2016-4166, CVE-2016-4171 Please see https://helpx.adobe.com/security/products/flash-player/apsb16-18.html for more information. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2 NonFree: zypper in -t patch openSUSE-2016-740=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 NonFree (i586 x86_64): flash-player-11.2.202.626-2.100.1 flash-player-gnome-11.2.202.626-2.100.1 flash-player-kde4-11.2.202.626-2.100.1 References: https://www.suse.com/security/cve/CVE-2016-4122.html https://www.suse.com/security/cve/CVE-2016-4123.html https://www.suse.com/security/cve/CVE-2016-4124.html https://www.suse.com/security/cve/CVE-2016-4125.html https://www.suse.com/security/cve/CVE-2016-4127.html https://www.suse.com/security/cve/CVE-2016-4128.html https://www.suse.com/security/cve/CVE-2016-4129.html https://www.suse.com/security/cve/CVE-2016-4130.html https://www.suse.com/security/cve/CVE-2016-4131.html https://www.suse.com/security/cve/CVE-2016-4132.html https://www.suse.com/security/cve/CVE-2016-4133.html https://www.suse.com/security/cve/CVE-2016-4134.html https://www.suse.com/security/cve/CVE-2016-4135.html https://www.suse.com/security/cve/CVE-2016-4136.html https://www.suse.com/security/cve/CVE-2016-4137.html https://www.suse.com/security/cve/CVE-2016-4138.html https://www.suse.com/security/cve/CVE-2016-4139.html https://www.suse.com/security/cve/CVE-2016-4140.html https://www.suse.com/security/cve/CVE-2016-4141.html https://www.suse.com/security/cve/CVE-2016-4142.html https://www.suse.com/security/cve/CVE-2016-4143.html https://www.suse.com/security/cve/CVE-2016-4144.html https://www.suse.com/security/cve/CVE-2016-4145.html https://www.suse.com/security/cve/CVE-2016-4146.html https://www.suse.com/security/cve/CVE-2016-4147.html https://www.suse.com/security/cve/CVE-2016-4148.html https://www.suse.com/security/cve/CVE-2016-4149.html https://www.suse.com/security/cve/CVE-2016-4150.html https://www.suse.com/security/cve/CVE-2016-4151.html https://www.suse.com/security/cve/CVE-2016-4152.html https://www.suse.com/security/cve/CVE-2016-4153.html https://www.suse.com/security/cve/CVE-2016-4154.html https://www.suse.com/security/cve/CVE-2016-4155.html https://www.suse.com/security/cve/CVE-2016-4156.html https://www.suse.com/security/cve/CVE-2016-4166.html https://www.suse.com/security/cve/CVE-2016-4171.html https://bugzilla.suse.com/984695

1 0

openSUSE-SU-2016:1612-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 17 Jun '16

17 Jun '16

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1612-1 Rating: moderate References: #983671 Cross-References: CVE-2016-5350 CVE-2016-5351 CVE-2016-5353 CVE-2016-5354 CVE-2016-5355 CVE-2016-5356 CVE-2016-5357 CVE-2016-5358 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for wireshark fixes an number of security issues. Issues in protocol dissectors could have allowed a remote attacker to crash Wireshark or cause excessive CPU usage through specially crafted packages inserted into the network or a capture file. - CVE-2016-5350: The SPOOLS dissector could go into an infinite loop - CVE-2016-5351: The IEEE 802.11 dissector could crash - CVE-2016-5353: The UMTS FP dissector could crash - CVE-2016-5354: Some USB dissectors could crash - CVE-2016-5355: The Toshiba file parser could crash - CVE-2016-5356: The CoSine file parser could crash - CVE-2016-5357: The NetScreen file parser could crash - CVE-2016-5358: The Ethernet dissector could crash Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-737=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-737=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): wireshark-1.12.12-23.1 wireshark-debuginfo-1.12.12-23.1 wireshark-debugsource-1.12.12-23.1 wireshark-devel-1.12.12-23.1 wireshark-ui-gtk-1.12.12-23.1 wireshark-ui-gtk-debuginfo-1.12.12-23.1 wireshark-ui-qt-1.12.12-23.1 wireshark-ui-qt-debuginfo-1.12.12-23.1 - openSUSE 13.2 (i586 x86_64): wireshark-1.12.12-38.1 wireshark-debuginfo-1.12.12-38.1 wireshark-debugsource-1.12.12-38.1 wireshark-devel-1.12.12-38.1 wireshark-ui-gtk-1.12.12-38.1 wireshark-ui-gtk-debuginfo-1.12.12-38.1 wireshark-ui-qt-1.12.12-38.1 wireshark-ui-qt-debuginfo-1.12.12-38.1 References: https://www.suse.com/security/cve/CVE-2016-5350.html https://www.suse.com/security/cve/CVE-2016-5351.html https://www.suse.com/security/cve/CVE-2016-5353.html https://www.suse.com/security/cve/CVE-2016-5354.html https://www.suse.com/security/cve/CVE-2016-5355.html https://www.suse.com/security/cve/CVE-2016-5356.html https://www.suse.com/security/cve/CVE-2016-5357.html https://www.suse.com/security/cve/CVE-2016-5358.html https://bugzilla.suse.com/983671

1 0

openSUSE-RU-2016:1611-1: moderate: Recommended update for sysconfig
by maintenance＠opensuse.org 17 Jun '16

17 Jun '16

openSUSE Recommended Update: Recommended update for sysconfig ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1611-1 Rating: moderate References: #865573 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sysconfig fixes the following issue: - ppp: install refactored ip-up and related scripts (bsc#865573) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-736=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): sysconfig-0.83.9-7.1 sysconfig-debuginfo-0.83.9-7.1 sysconfig-debugsource-0.83.9-7.1 sysconfig-netconfig-0.83.9-7.1 References: https://bugzilla.suse.com/865573

1 0