June 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:1605-1: moderate: Recommended update for util-linux, bash-completion
by maintenance＠opensuse.org 17 Jun '16

17 Jun '16

openSUSE Recommended Update: Recommended update for util-linux, bash-completion ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1605-1 Rating: moderate References: #940837 #946875 #947494 #953691 #954482 #956540 #958462 #959299 #963140 #963399 #968733 #970404 #972684 #975082 #976141 #977259 #977336 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 17 recommended fixes can now be installed. Description: This update provides fixes and enhancements to util-linux and bash-completion util-linux: - Reuse existing loop device to prevent possible data corruption when multiple -o loop are used to mount a single file. (bsc#947494) - Remove incorrect --with-bashcompletiondir that breaks bash-completion, use path in bash-completion.pc instead. (bsc#977259) - Fix blkid to wipe correct area for probes with offset. (bsc#976141) - Fix and improve function of lscpu on Power Systems. (bsc#975082) - Fix crash while evaluating root of btrfs. (bsc#972684) - Make sulogin call tcfinal unconditionally. (bsc#970404) - Fix "mount -a" for loopdev (bsc#947494) - Prevent "mount -a" from mounting btrfs volumes multiple times. (bsc#947494) - Add support for locked root accounts in sulogin. (bsc#963399, bsc#968733) - Remove Persistent= directive from fstrim for systemd versions older than 212. (bsc#956540, bsc#953691, bsc#954482) bash-completion: - Improve completion of LVM commands. (bsc#946875) - Remove completions conflicting with util-linux. (bsc#977259) - Improve handling of sub commands which will be expanded by backticks. (bsc#963140) - Fix completion within a directory even if local sub directories exist. (bsc#977336) - Improve handling of completions of which result in variables. (bsc#940837, bsc#959299) - Allow completions list (bsc#958462) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-735=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libblkid-devel-2.25-15.2 libblkid1-2.25-15.2 libblkid1-debuginfo-2.25-15.2 libmount-devel-2.25-15.2 libmount1-2.25-15.2 libmount1-debuginfo-2.25-15.2 libsmartcols-devel-2.25-15.2 libsmartcols1-2.25-15.2 libsmartcols1-debuginfo-2.25-15.2 libuuid-devel-2.25-15.2 libuuid1-2.25-15.2 libuuid1-debuginfo-2.25-15.2 python-libmount-2.25-15.2 python-libmount-debuginfo-2.25-15.2 python-libmount-debugsource-2.25-15.2 util-linux-2.25-15.2 util-linux-debuginfo-2.25-15.2 util-linux-debugsource-2.25-15.2 util-linux-systemd-2.25-15.1 util-linux-systemd-debuginfo-2.25-15.1 util-linux-systemd-debugsource-2.25-15.1 uuidd-2.25-15.1 uuidd-debuginfo-2.25-15.1 - openSUSE Leap 42.1 (x86_64): libblkid-devel-32bit-2.25-15.2 libblkid1-32bit-2.25-15.2 libblkid1-debuginfo-32bit-2.25-15.2 libmount-devel-32bit-2.25-15.2 libmount1-32bit-2.25-15.2 libmount1-debuginfo-32bit-2.25-15.2 libuuid-devel-32bit-2.25-15.2 libuuid1-32bit-2.25-15.2 libuuid1-debuginfo-32bit-2.25-15.2 - openSUSE Leap 42.1 (noarch): bash-completion-2.1-9.1 util-linux-lang-2.25-15.2 References: https://bugzilla.suse.com/940837 https://bugzilla.suse.com/946875 https://bugzilla.suse.com/947494 https://bugzilla.suse.com/953691 https://bugzilla.suse.com/954482 https://bugzilla.suse.com/956540 https://bugzilla.suse.com/958462 https://bugzilla.suse.com/959299 https://bugzilla.suse.com/963140 https://bugzilla.suse.com/963399 https://bugzilla.suse.com/968733 https://bugzilla.suse.com/970404 https://bugzilla.suse.com/972684 https://bugzilla.suse.com/975082 https://bugzilla.suse.com/976141 https://bugzilla.suse.com/977259 https://bugzilla.suse.com/977336

1 0

openSUSE-SU-2016:1595-1: important: Security update for libxml2
by opensuse-security＠opensuse.org 16 Jun '16

16 Jun '16

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1595-1 Rating: important References: #963963 #965283 #978395 #981040 #981041 #981108 #981109 #981111 #981112 #981114 #981115 #981548 #981549 #981550 Cross-References: CVE-2015-8806 CVE-2016-1762 CVE-2016-1833 CVE-2016-1834 CVE-2016-1835 CVE-2016-1837 CVE-2016-1838 CVE-2016-1839 CVE-2016-1840 CVE-2016-2073 CVE-2016-3705 CVE-2016-4447 CVE-2016-4448 CVE-2016-4449 CVE-2016-4483 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: This update for libxml2 fixes the following security issues: - CVE-2016-2073, CVE-2015-8806, CVE-2016-1839: A Heap-buffer overread was fixed in libxml2/dict.c [bsc#963963, bsc#965283, bsc#981114]. - CVE-2016-4483: Code was added to avoid an out of bound access when serializing malformed strings [bsc#978395]. - CVE-2016-1762: Fixed a heap-based buffer overread in xmlNextChar [bsc#981040]. - CVE-2016-1834: Fixed a heap-buffer-overflow in xmlStrncat [bsc#981041]. - CVE-2016-1833: Fixed a heap-based buffer overread in htmlCurrentChar [bsc#981108]. - CVE-2016-1835: Fixed a heap use-after-free in xmlSAX2AttributeNs [bsc#981109]. - CVE-2016-1837: Fixed a heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral [bsc#981111]. - CVE-2016-1838: Fixed a heap-based buffer overread in xmlParserPrintFileContextInternal [bsc#981112]. - CVE-2016-1840: Fixed a heap-buffer-overflow in xmlFAParsePosCharGroup [bsc#981115]. - CVE-2016-4447: Fixed a heap-based buffer-underreads due to xmlParseName [bsc#981548]. - CVE-2016-4448: Fixed some format string warnings with possible format string vulnerability [bsc#981549], - CVE-2016-4449: Fixed inappropriate fetch of entities content [bsc#981550]. - CVE-2016-3705: Fixed missing increment of recursion counter. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-733=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libxml2-2-2.9.1-19.1 libxml2-2-debuginfo-2.9.1-19.1 libxml2-debugsource-2.9.1-19.1 libxml2-devel-2.9.1-19.1 libxml2-tools-2.9.1-19.1 libxml2-tools-debuginfo-2.9.1-19.1 python-libxml2-2.9.1-19.1 python-libxml2-debuginfo-2.9.1-19.1 python-libxml2-debugsource-2.9.1-19.1 - openSUSE Leap 42.1 (x86_64): libxml2-2-32bit-2.9.1-19.1 libxml2-2-debuginfo-32bit-2.9.1-19.1 libxml2-devel-32bit-2.9.1-19.1 - openSUSE Leap 42.1 (noarch): libxml2-doc-2.9.1-19.1 References: https://www.suse.com/security/cve/CVE-2015-8806.html https://www.suse.com/security/cve/CVE-2016-1762.html https://www.suse.com/security/cve/CVE-2016-1833.html https://www.suse.com/security/cve/CVE-2016-1834.html https://www.suse.com/security/cve/CVE-2016-1835.html https://www.suse.com/security/cve/CVE-2016-1837.html https://www.suse.com/security/cve/CVE-2016-1838.html https://www.suse.com/security/cve/CVE-2016-1839.html https://www.suse.com/security/cve/CVE-2016-1840.html https://www.suse.com/security/cve/CVE-2016-2073.html https://www.suse.com/security/cve/CVE-2016-3705.html https://www.suse.com/security/cve/CVE-2016-4447.html https://www.suse.com/security/cve/CVE-2016-4448.html https://www.suse.com/security/cve/CVE-2016-4449.html https://www.suse.com/security/cve/CVE-2016-4483.html https://bugzilla.suse.com/963963 https://bugzilla.suse.com/965283 https://bugzilla.suse.com/978395 https://bugzilla.suse.com/981040 https://bugzilla.suse.com/981041 https://bugzilla.suse.com/981108 https://bugzilla.suse.com/981109 https://bugzilla.suse.com/981111 https://bugzilla.suse.com/981112 https://bugzilla.suse.com/981114 https://bugzilla.suse.com/981115 https://bugzilla.suse.com/981548 https://bugzilla.suse.com/981549 https://bugzilla.suse.com/981550

1 0

openSUSE-SU-2016:1594-1: important: Security update for libxml2
by opensuse-security＠opensuse.org 16 Jun '16

16 Jun '16

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1594-1 Rating: important References: #972335 #975947 #978395 #981040 #981041 #981108 #981109 #981110 #981111 #981112 #981114 #981115 #983288 Cross-References: CVE-2016-1762 CVE-2016-1833 CVE-2016-1834 CVE-2016-1835 CVE-2016-1836 CVE-2016-1837 CVE-2016-1838 CVE-2016-1839 CVE-2016-1840 CVE-2016-3627 CVE-2016-3705 CVE-2016-4483 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves 12 vulnerabilities and has one errata is now available. Description: This update brings libxml2 to version 2.9.4. These security issues were fixed: - CVE-2016-3627: The xmlStringGetNodeList function in tree.c, when used in recovery mode, allowed context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document (bsc#972335). - CVE-2016-1833: libxml2 allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document, a different vulnerability than CVE-2016-1834, CVE-2016-1836, CVE-2016-1837, CVE-2016-1838, CVE-2016-1839, and CVE-2016-1840 (bsc#981108). - CVE-2016-1835: libxml2 allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document (bsc#981109). - CVE-2016-1837: libxml2 allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document, a different vulnerability than CVE-2016-1833, CVE-2016-1834, CVE-2016-1836, CVE-2016-1838, CVE-2016-1839, and CVE-2016-1840 (bsc#981111). - CVE-2016-1836: libxml2 allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document, a different vulnerability than CVE-2016-1833, CVE-2016-1834, CVE-2016-1837, CVE-2016-1838, CVE-2016-1839, and CVE-2016-1840 (bsc#981110). - CVE-2016-1839: libxml2 allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document, a different vulnerability than CVE-2016-1833, CVE-2016-1834, CVE-2016-1836, CVE-2016-1837, CVE-2016-1838, and CVE-2016-1840 (bsc#981114). - CVE-2016-1838: libxml2 allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document, a different vulnerability than CVE-2016-1833, CVE-2016-1834, CVE-2016-1836, CVE-2016-1837, CVE-2016-1839, and CVE-2016-1840 (bsc#981112). - CVE-2016-1840: libxml2 allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document, a different vulnerability than CVE-2016-1833, CVE-2016-1834, CVE-2016-1836, CVE-2016-1837, CVE-2016-1838, and CVE-2016-1839 (bsc#981115). - CVE-2016-4483: out-of-bounds read parsing an XML using recover mode (bnc#978395). - CVE-2016-1834: libxml2 allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document, a different vulnerability than CVE-2016-1833, CVE-2016-1836, CVE-2016-1837, CVE-2016-1838, CVE-2016-1839, and CVE-2016-1840 (bsc#981041). - CVE-2016-3705: The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 did not properly keep track of the recursion depth, which allowed context-dependent attackers to cause a denial of service (stack consumption and application crash) via a crafted XML document containing a large number of nested entity references (bsc#975947). - CVE-2016-1762: libxml2 allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document (bsc#981040). This non-security issue was fixed: - bnc#983288: Fix attribute decoding during XML schema validation Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-734=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libxml2-2-2.9.4-7.17.1 libxml2-2-debuginfo-2.9.4-7.17.1 libxml2-debugsource-2.9.4-7.17.1 libxml2-devel-2.9.4-7.17.1 libxml2-tools-2.9.4-7.17.1 libxml2-tools-debuginfo-2.9.4-7.17.1 python-libxml2-2.9.4-7.17.1 python-libxml2-debuginfo-2.9.4-7.17.1 python-libxml2-debugsource-2.9.4-7.17.1 - openSUSE 13.2 (x86_64): libxml2-2-32bit-2.9.4-7.17.1 libxml2-2-debuginfo-32bit-2.9.4-7.17.1 libxml2-devel-32bit-2.9.4-7.17.1 - openSUSE 13.2 (noarch): libxml2-doc-2.9.4-7.17.1 References: https://www.suse.com/security/cve/CVE-2016-1762.html https://www.suse.com/security/cve/CVE-2016-1833.html https://www.suse.com/security/cve/CVE-2016-1834.html https://www.suse.com/security/cve/CVE-2016-1835.html https://www.suse.com/security/cve/CVE-2016-1836.html https://www.suse.com/security/cve/CVE-2016-1837.html https://www.suse.com/security/cve/CVE-2016-1838.html https://www.suse.com/security/cve/CVE-2016-1839.html https://www.suse.com/security/cve/CVE-2016-1840.html https://www.suse.com/security/cve/CVE-2016-3627.html https://www.suse.com/security/cve/CVE-2016-3705.html https://www.suse.com/security/cve/CVE-2016-4483.html https://bugzilla.suse.com/972335 https://bugzilla.suse.com/975947 https://bugzilla.suse.com/978395 https://bugzilla.suse.com/981040 https://bugzilla.suse.com/981041 https://bugzilla.suse.com/981108 https://bugzilla.suse.com/981109 https://bugzilla.suse.com/981110 https://bugzilla.suse.com/981111 https://bugzilla.suse.com/981112 https://bugzilla.suse.com/981114 https://bugzilla.suse.com/981115 https://bugzilla.suse.com/983288

1 0

openSUSE-RU-2016:1590-1: moderate: Recommended update for webkitgtk3
by maintenance＠opensuse.org 15 Jun '16

15 Jun '16

openSUSE Recommended Update: Recommended update for webkitgtk3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1590-1 Rating: moderate References: #983422 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for webkitgtk3 fixes the following issues: - boo#983422: crash in Evolution and Geary Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-728=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libjavascriptcoregtk-3_0-0-2.4.10-10.1 libjavascriptcoregtk-3_0-0-debuginfo-2.4.10-10.1 libwebkitgtk-3_0-0-2.4.10-10.1 libwebkitgtk-3_0-0-debuginfo-2.4.10-10.1 libwebkitgtk3-devel-2.4.10-10.1 typelib-1_0-JavaScriptCore-3_0-2.4.10-10.1 typelib-1_0-WebKit-3_0-2.4.10-10.1 webkit-jsc-3-2.4.10-10.1 webkit-jsc-3-debuginfo-2.4.10-10.1 - openSUSE Leap 42.1 (x86_64): libjavascriptcoregtk-3_0-0-32bit-2.4.10-10.1 libjavascriptcoregtk-3_0-0-debuginfo-32bit-2.4.10-10.1 libwebkitgtk-3_0-0-32bit-2.4.10-10.1 libwebkitgtk-3_0-0-debuginfo-32bit-2.4.10-10.1 - openSUSE Leap 42.1 (noarch): libwebkitgtk3-lang-2.4.10-10.1 References: https://bugzilla.suse.com/983422

1 0

openSUSE-RU-2016:1589-1: moderate: Recommended update for xdg-utils
by maintenance＠opensuse.org 15 Jun '16

15 Jun '16

openSUSE Recommended Update: Recommended update for xdg-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1589-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for xdg-utils fixes the following issues: - Fix issues related to xdg-open/xdg-mime generic code paths. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-730=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-730=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): xdg-utils-20150119-3.1 - openSUSE 13.2 (noarch): xdg-utils-20140922-18.1 References:

1 0

openSUSE-RU-2016:1587-1: moderate: Recommended update for inkscape
by maintenance＠opensuse.org 15 Jun '16

15 Jun '16

openSUSE Recommended Update: Recommended update for inkscape ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1587-1 Rating: moderate References: #972343 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for inkscape fixes the following issues: - boo#972343: Excessive memory consumption Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-729=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): inkscape-0.91-4.1 inkscape-debuginfo-0.91-4.1 inkscape-debugsource-0.91-4.1 inkscape-extensions-dia-0.91-4.1 inkscape-extensions-extra-0.91-4.1 inkscape-extensions-fig-0.91-4.1 inkscape-extensions-gimp-0.91-4.1 inkscape-extensions-skencil-0.91-4.1 - openSUSE Leap 42.1 (noarch): inkscape-lang-0.91-4.1 References: https://bugzilla.suse.com/972343

1 0

openSUSE-SU-2016:1586-1: moderate: Security update for monit
by opensuse-security＠opensuse.org 15 Jun '16

15 Jun '16

openSUSE Security Update: Security update for monit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1586-1 Rating: moderate References: #974763 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for monit fixes the following issues: - boo#974763: disable SSLv3 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-732=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): monit-5.10-10.1 monit-debuginfo-5.10-10.1 monit-debugsource-5.10-10.1 - openSUSE Leap 42.1 (noarch): monit-doc-5.10-10.1 References: https://bugzilla.suse.com/974763

1 0

openSUSE-RU-2016:1585-1: important: Recommended update for samba
by maintenance＠opensuse.org 15 Jun '16

15 Jun '16

openSUSE Recommended Update: Recommended update for samba ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1585-1 Rating: important References: #977669 #979268 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for Samba provides the following fixes: - Fix libads' record session expiry for spnego sasl binds. (bsc#979268) - Fix NT_STATUS_ACCESS_DENIED when accessing windows public share. - Only validate MIC if "map to guest" is not being used. - NetAPP SMB servers don't negotiate NTLMSSP_SIGN. (bsc#977669) - Fix non-working anonymous smb connections. - Handle broken mechListMIC response from Windows 2000. - wbinfo -u or net ads search doesn't work anymore. - Fix regressions regarding the NTLMSSP hardening of CVE-2016-2110. - Allow Domain member resolve trusted domains' users. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-731=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ctdb-4.2.4-18.1 ctdb-debuginfo-4.2.4-18.1 ctdb-devel-4.2.4-18.1 ctdb-tests-4.2.4-18.1 ctdb-tests-debuginfo-4.2.4-18.1 libdcerpc-atsvc-devel-4.2.4-18.1 libdcerpc-atsvc0-4.2.4-18.1 libdcerpc-atsvc0-debuginfo-4.2.4-18.1 libdcerpc-binding0-4.2.4-18.1 libdcerpc-binding0-debuginfo-4.2.4-18.1 libdcerpc-devel-4.2.4-18.1 libdcerpc-samr-devel-4.2.4-18.1 libdcerpc-samr0-4.2.4-18.1 libdcerpc-samr0-debuginfo-4.2.4-18.1 libdcerpc0-4.2.4-18.1 libdcerpc0-debuginfo-4.2.4-18.1 libgensec-devel-4.2.4-18.1 libgensec0-4.2.4-18.1 libgensec0-debuginfo-4.2.4-18.1 libndr-devel-4.2.4-18.1 libndr-krb5pac-devel-4.2.4-18.1 libndr-krb5pac0-4.2.4-18.1 libndr-krb5pac0-debuginfo-4.2.4-18.1 libndr-nbt-devel-4.2.4-18.1 libndr-nbt0-4.2.4-18.1 libndr-nbt0-debuginfo-4.2.4-18.1 libndr-standard-devel-4.2.4-18.1 libndr-standard0-4.2.4-18.1 libndr-standard0-debuginfo-4.2.4-18.1 libndr0-4.2.4-18.1 libndr0-debuginfo-4.2.4-18.1 libnetapi-devel-4.2.4-18.1 libnetapi0-4.2.4-18.1 libnetapi0-debuginfo-4.2.4-18.1 libregistry-devel-4.2.4-18.1 libregistry0-4.2.4-18.1 libregistry0-debuginfo-4.2.4-18.1 libsamba-credentials-devel-4.2.4-18.1 libsamba-credentials0-4.2.4-18.1 libsamba-credentials0-debuginfo-4.2.4-18.1 libsamba-hostconfig-devel-4.2.4-18.1 libsamba-hostconfig0-4.2.4-18.1 libsamba-hostconfig0-debuginfo-4.2.4-18.1 libsamba-passdb-devel-4.2.4-18.1 libsamba-passdb0-4.2.4-18.1 libsamba-passdb0-debuginfo-4.2.4-18.1 libsamba-policy-devel-4.2.4-18.1 libsamba-policy0-4.2.4-18.1 libsamba-policy0-debuginfo-4.2.4-18.1 libsamba-util-devel-4.2.4-18.1 libsamba-util0-4.2.4-18.1 libsamba-util0-debuginfo-4.2.4-18.1 libsamdb-devel-4.2.4-18.1 libsamdb0-4.2.4-18.1 libsamdb0-debuginfo-4.2.4-18.1 libsmbclient-devel-4.2.4-18.1 libsmbclient-raw-devel-4.2.4-18.1 libsmbclient-raw0-4.2.4-18.1 libsmbclient-raw0-debuginfo-4.2.4-18.1 libsmbclient0-4.2.4-18.1 libsmbclient0-debuginfo-4.2.4-18.1 libsmbconf-devel-4.2.4-18.1 libsmbconf0-4.2.4-18.1 libsmbconf0-debuginfo-4.2.4-18.1 libsmbldap-devel-4.2.4-18.1 libsmbldap0-4.2.4-18.1 libsmbldap0-debuginfo-4.2.4-18.1 libtevent-util-devel-4.2.4-18.1 libtevent-util0-4.2.4-18.1 libtevent-util0-debuginfo-4.2.4-18.1 libwbclient-devel-4.2.4-18.1 libwbclient0-4.2.4-18.1 libwbclient0-debuginfo-4.2.4-18.1 samba-4.2.4-18.1 samba-client-4.2.4-18.1 samba-client-debuginfo-4.2.4-18.1 samba-core-devel-4.2.4-18.1 samba-debuginfo-4.2.4-18.1 samba-debugsource-4.2.4-18.1 samba-libs-4.2.4-18.1 samba-libs-debuginfo-4.2.4-18.1 samba-pidl-4.2.4-18.1 samba-python-4.2.4-18.1 samba-python-debuginfo-4.2.4-18.1 samba-test-4.2.4-18.1 samba-test-debuginfo-4.2.4-18.1 samba-test-devel-4.2.4-18.1 samba-winbind-4.2.4-18.1 samba-winbind-debuginfo-4.2.4-18.1 - openSUSE Leap 42.1 (x86_64): libdcerpc-atsvc0-32bit-4.2.4-18.1 libdcerpc-atsvc0-debuginfo-32bit-4.2.4-18.1 libdcerpc-binding0-32bit-4.2.4-18.1 libdcerpc-binding0-debuginfo-32bit-4.2.4-18.1 libdcerpc-samr0-32bit-4.2.4-18.1 libdcerpc-samr0-debuginfo-32bit-4.2.4-18.1 libdcerpc0-32bit-4.2.4-18.1 libdcerpc0-debuginfo-32bit-4.2.4-18.1 libgensec0-32bit-4.2.4-18.1 libgensec0-debuginfo-32bit-4.2.4-18.1 libndr-krb5pac0-32bit-4.2.4-18.1 libndr-krb5pac0-debuginfo-32bit-4.2.4-18.1 libndr-nbt0-32bit-4.2.4-18.1 libndr-nbt0-debuginfo-32bit-4.2.4-18.1 libndr-standard0-32bit-4.2.4-18.1 libndr-standard0-debuginfo-32bit-4.2.4-18.1 libndr0-32bit-4.2.4-18.1 libndr0-debuginfo-32bit-4.2.4-18.1 libnetapi0-32bit-4.2.4-18.1 libnetapi0-debuginfo-32bit-4.2.4-18.1 libregistry0-32bit-4.2.4-18.1 libregistry0-debuginfo-32bit-4.2.4-18.1 libsamba-credentials0-32bit-4.2.4-18.1 libsamba-credentials0-debuginfo-32bit-4.2.4-18.1 libsamba-hostconfig0-32bit-4.2.4-18.1 libsamba-hostconfig0-debuginfo-32bit-4.2.4-18.1 libsamba-passdb0-32bit-4.2.4-18.1 libsamba-passdb0-debuginfo-32bit-4.2.4-18.1 libsamba-policy0-32bit-4.2.4-18.1 libsamba-policy0-debuginfo-32bit-4.2.4-18.1 libsamba-util0-32bit-4.2.4-18.1 libsamba-util0-debuginfo-32bit-4.2.4-18.1 libsamdb0-32bit-4.2.4-18.1 libsamdb0-debuginfo-32bit-4.2.4-18.1 libsmbclient-raw0-32bit-4.2.4-18.1 libsmbclient-raw0-debuginfo-32bit-4.2.4-18.1 libsmbclient0-32bit-4.2.4-18.1 libsmbclient0-debuginfo-32bit-4.2.4-18.1 libsmbconf0-32bit-4.2.4-18.1 libsmbconf0-debuginfo-32bit-4.2.4-18.1 libsmbldap0-32bit-4.2.4-18.1 libsmbldap0-debuginfo-32bit-4.2.4-18.1 libtevent-util0-32bit-4.2.4-18.1 libtevent-util0-debuginfo-32bit-4.2.4-18.1 libwbclient0-32bit-4.2.4-18.1 libwbclient0-debuginfo-32bit-4.2.4-18.1 samba-32bit-4.2.4-18.1 samba-client-32bit-4.2.4-18.1 samba-client-debuginfo-32bit-4.2.4-18.1 samba-debuginfo-32bit-4.2.4-18.1 samba-libs-32bit-4.2.4-18.1 samba-libs-debuginfo-32bit-4.2.4-18.1 samba-winbind-32bit-4.2.4-18.1 samba-winbind-debuginfo-32bit-4.2.4-18.1 - openSUSE Leap 42.1 (noarch): samba-doc-4.2.4-18.1 References: https://bugzilla.suse.com/977669 https://bugzilla.suse.com/979268

1 0

openSUSE-SU-2016:1583-1: important: Security update for ntp
by opensuse-security＠opensuse.org 15 Jun '16

15 Jun '16

openSUSE Security Update: Security update for ntp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1583-1 Rating: important References: #979302 #979981 #981422 #982056 #982064 #982065 #982066 #982067 #982068 Cross-References: CVE-2016-4953 CVE-2016-4954 CVE-2016-4955 CVE-2016-4956 CVE-2016-4957 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has four fixes is now available. Description: ntp was updated to fix five security issues. These security issues were fixed: - CVE-2016-4953: Bad authentication demobilizes ephemeral associations (bsc#982065). - CVE-2016-4954: Processing spoofed server packets (bsc#982066). - CVE-2016-4955: Autokey association reset (bsc#982067). - CVE-2016-4956: Broadcast interleave (bsc#982068). - CVE-2016-4957: CRYPTO_NAK crash (bsc#982064). These non-security issues were fixed: - bsc#979302: Change the process name of the forking DNS worker process to avoid the impression that ntpd is started twice. - bsc#979981: ntp-wait does not accept fractional seconds, so use 1 instead of 0.2 in ntp-wait.service. - bsc#981422: Don't ignore SIGCHILD because it breaks wait(). - Separate the creation of ntp.keys and key #1 in it to avoid problems when upgrading installations that have the file, but no key #1, which is needed e.g. by "rcntp addserver". Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-727=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ntp-4.2.8p8-25.18.1 ntp-debuginfo-4.2.8p8-25.18.1 ntp-debugsource-4.2.8p8-25.18.1 ntp-doc-4.2.8p8-25.18.1 References: https://www.suse.com/security/cve/CVE-2016-4953.html https://www.suse.com/security/cve/CVE-2016-4954.html https://www.suse.com/security/cve/CVE-2016-4955.html https://www.suse.com/security/cve/CVE-2016-4956.html https://www.suse.com/security/cve/CVE-2016-4957.html https://bugzilla.suse.com/979302 https://bugzilla.suse.com/979981 https://bugzilla.suse.com/981422 https://bugzilla.suse.com/982056 https://bugzilla.suse.com/982064 https://bugzilla.suse.com/982065 https://bugzilla.suse.com/982066 https://bugzilla.suse.com/982067 https://bugzilla.suse.com/982068

1 0

openSUSE-SU-2016:1582-1: moderate: Security update for clamav-database
by opensuse-security＠opensuse.org 14 Jun '16

14 Jun '16

openSUSE Security Update: Security update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1582-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for clamav-database refreshes the database. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-726=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201606130003-109.1 References:

1 0