June 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:1523-1: important: Security update for expat
by opensuse-security＠opensuse.org 08 Jun '16

08 Jun '16

openSUSE Security Update: Security update for expat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1523-1 Rating: important References: #979441 #980391 Cross-References: CVE-2015-1283 CVE-2016-0718 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for expat fixes the following issues: Security issue fixed: - CVE-2016-0718: Fix Expat XML parser that mishandles certain kinds of malformed input documents. (bsc#979441) - CVE-2015-1283: Fix multiple integer overflows. (bnc#980391) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-695=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): expat-2.1.0-17.1 expat-debuginfo-2.1.0-17.1 expat-debugsource-2.1.0-17.1 libexpat-devel-2.1.0-17.1 libexpat1-2.1.0-17.1 libexpat1-debuginfo-2.1.0-17.1 - openSUSE Leap 42.1 (x86_64): expat-debuginfo-32bit-2.1.0-17.1 libexpat-devel-32bit-2.1.0-17.1 libexpat1-32bit-2.1.0-17.1 libexpat1-debuginfo-32bit-2.1.0-17.1 References: https://www.suse.com/security/cve/CVE-2015-1283.html https://www.suse.com/security/cve/CVE-2016-0718.html https://bugzilla.suse.com/979441 https://bugzilla.suse.com/980391

1 0

openSUSE-SU-2016:1522-1: important: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 08 Jun '16

08 Jun '16

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1522-1 Rating: important References: #982178 Cross-References: CVE-2016-5118 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: - security update: * CVE-2016-5118 [boo#982178] + GraphicsMagick-CVE-2016-5118.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-694=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): GraphicsMagick-1.3.20-6.1 GraphicsMagick-debuginfo-1.3.20-6.1 GraphicsMagick-debugsource-1.3.20-6.1 GraphicsMagick-devel-1.3.20-6.1 libGraphicsMagick++-Q16-3-1.3.20-6.1 libGraphicsMagick++-Q16-3-debuginfo-1.3.20-6.1 libGraphicsMagick++-devel-1.3.20-6.1 libGraphicsMagick-Q16-3-1.3.20-6.1 libGraphicsMagick-Q16-3-debuginfo-1.3.20-6.1 libGraphicsMagick3-config-1.3.20-6.1 libGraphicsMagickWand-Q16-2-1.3.20-6.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.20-6.1 perl-GraphicsMagick-1.3.20-6.1 perl-GraphicsMagick-debuginfo-1.3.20-6.1 References: https://www.suse.com/security/cve/CVE-2016-5118.html https://bugzilla.suse.com/982178

1 0

openSUSE-SU-2016:1521-1: important: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 08 Jun '16

08 Jun '16

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1521-1 Rating: important References: #982178 Cross-References: CVE-2016-5118 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: - security update: * CVE-2016-5118 [boo#982178] + GraphicsMagick-CVE-2016-5118.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-693=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): GraphicsMagick-1.3.21-8.1 GraphicsMagick-debuginfo-1.3.21-8.1 GraphicsMagick-debugsource-1.3.21-8.1 GraphicsMagick-devel-1.3.21-8.1 libGraphicsMagick++-Q16-11-1.3.21-8.1 libGraphicsMagick++-Q16-11-debuginfo-1.3.21-8.1 libGraphicsMagick++-devel-1.3.21-8.1 libGraphicsMagick-Q16-3-1.3.21-8.1 libGraphicsMagick-Q16-3-debuginfo-1.3.21-8.1 libGraphicsMagick3-config-1.3.21-8.1 libGraphicsMagickWand-Q16-2-1.3.21-8.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.21-8.1 perl-GraphicsMagick-1.3.21-8.1 perl-GraphicsMagick-debuginfo-1.3.21-8.1 References: https://www.suse.com/security/cve/CVE-2016-5118.html https://bugzilla.suse.com/982178

1 0

openSUSE-RU-2016:1520-1: moderate: Recommended update for compcache
by maintenance＠opensuse.org 08 Jun '16

08 Jun '16

openSUSE Recommended Update: Recommended update for compcache ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1520-1 Rating: moderate References: #982279 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for compcache fixes the following issues: - Fix init script for 4.x and later kernels (boo#982279) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-690=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): compcache-0.6.2-26.1 References: https://bugzilla.suse.com/982279

1 0

openSUSE-RU-2016:1519-1: moderate: Recommended update for cloud-init
by maintenance＠opensuse.org 08 Jun '16

08 Jun '16

openSUSE Recommended Update: Recommended update for cloud-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1519-1 Rating: moderate References: #978048 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cloud-init fixes the following issues: - Avoid login prompt before cloud-init is finished (bsc#978048) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-689=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): cloud-init-0.7.6-23.1 cloud-init-doc-0.7.6-23.1 cloud-init-test-0.7.6-23.1 References: https://bugzilla.suse.com/978048

1 0

openSUSE-OU-2016:1518-1: Optional update for syslinux
by maintenance＠opensuse.org 08 Jun '16

08 Jun '16

openSUSE Optional Update: Optional update for syslinux ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:1518-1 Rating: low References: #964471 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for syslinux enables building of the syslinux-x86_64 package on s390x. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-692=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): syslinux-4.04-36.8 syslinux-debuginfo-4.04-36.8 syslinux-debugsource-4.04-36.8 - openSUSE Leap 42.1 (s390x): syslinux-debuginfo-x86_64-4.04-36.8 syslinux-x86_64-4.04-36.8 References: https://bugzilla.suse.com/964471

1 0

openSUSE-RU-2016:1517-1: Recommended update for autofs
by maintenance＠opensuse.org 08 Jun '16

08 Jun '16

openSUSE Recommended Update: Recommended update for autofs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1517-1 Rating: low References: #955477 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for autofs fixes a build issue which prevented automount from being linked to the reentrant version of libldap. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-691=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): autofs-5.0.9-9.1 autofs-debuginfo-5.0.9-9.1 autofs-debugsource-5.0.9-9.1 References: https://bugzilla.suse.com/955477

1 0

openSUSE-SU-2016:1516-1: moderate: Security update for gd
by opensuse-security＠opensuse.org 07 Jun '16

07 Jun '16

openSUSE Security Update: Security update for gd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1516-1 Rating: moderate References: #982176 Cross-References: CVE-2016-5116 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gd fixes the following issues: - security update: * CVE-2016-5116 [boo#982176] + gd-CVE-2016-5116.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-688=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gd-2.1.0-7.8.1 gd-debuginfo-2.1.0-7.8.1 gd-debugsource-2.1.0-7.8.1 gd-devel-2.1.0-7.8.1 libgd3-2.1.0-7.8.1 libgd3-debuginfo-2.1.0-7.8.1 - openSUSE 13.2 (x86_64): libgd3-32bit-2.1.0-7.8.1 libgd3-debuginfo-32bit-2.1.0-7.8.1 References: https://www.suse.com/security/cve/CVE-2016-5116.html https://bugzilla.suse.com/982176

1 0

openSUSE-SU-2016:1506-1: moderate: Security update for clamav-database
by opensuse-security＠opensuse.org 07 Jun '16

07 Jun '16

openSUSE Security Update: Security update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1506-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for clamav-database refreshes the database. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-687=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201606060002-105.1 References:

1 0

openSUSE-RU-2016:1500-1: moderate: Recommended update for plasma5-desktop
by maintenance＠opensuse.org 06 Jun '16

06 Jun '16

openSUSE Recommended Update: Recommended update for plasma5-desktop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1500-1 Rating: moderate References: #931316 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for plasma5-desktop fixes the following issue: - Fix set default browser in Plasma 5 (boo#931316) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-684=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): plasma5-desktop-5.5.5-20.1 plasma5-desktop-branding-upstream-5.5.5-20.1 plasma5-desktop-debuginfo-5.5.5-20.1 plasma5-desktop-debugsource-5.5.5-20.1 - openSUSE Leap 42.1 (noarch): plasma5-desktop-lang-5.5.5-20.1 References: https://bugzilla.suse.com/931316

1 0

openSUSE-RU-2016:1499-1: moderate: Recommended update for sessreg
by maintenance＠opensuse.org 06 Jun '16

06 Jun '16

openSUSE Recommended Update: Recommended update for sessreg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1499-1 Rating: moderate References: #981522 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for sessreg fixes the following issue: - Make largefile support work (boo#981522). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-685=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-685=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): sessreg-1.1.0-3.1 sessreg-debuginfo-1.1.0-3.1 sessreg-debugsource-1.1.0-3.1 - openSUSE 13.2 (i586 x86_64): sessreg-1.0.8-4.3.1 sessreg-debuginfo-1.0.8-4.3.1 sessreg-debugsource-1.0.8-4.3.1 References: https://bugzilla.suse.com/981522

1 0

openSUSE-RU-2016:1497-1: moderate: Recommended update for libstoragemgmt
by maintenance＠opensuse.org 06 Jun '16

06 Jun '16

openSUSE Recommended Update: Recommended update for libstoragemgmt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1497-1 Rating: moderate References: #980041 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libstoragemgmt fixes the following issues: - Upgrade to version 1.3.2 (boo#980041): * Fix local disk querying in fakeroot(change root) when '/dev' is not mounted. * Change the raid card cache split (%read, %write) * Retrieve/update cache information of both the card and physical disks (enable/disable caching etc.) * Turn on/off identify and fault LEDs * Retrieve information on batteries * Retrieve a physical disk RPM, link type and location string for a disk * Retrieve the vpd 0x83 for directly attached disk(s) * Given a vpd 0x83 return list of local disk paths * Given a disk path return the vpd 0x83 value * Retrieve list of local disks * Fix local disk VPD83 searching in fakeroot(change root) when '/dev' is not mounted. * New configure option to skip memory leak check test. * Fix regression introduced by 1.3.1 when run as non-root user. * New configure option '--without-test' to skip all test cases and their build requirements. - Removed package: * libstoragemgmt-rest -- droped by upstream. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-683=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libstoragemgmt-1.3.2-6.2 libstoragemgmt-debuginfo-1.3.2-6.2 libstoragemgmt-debugsource-1.3.2-6.2 libstoragemgmt-devel-1.3.2-6.2 libstoragemgmt-udev-1.3.2-6.2 libstoragemgmt-udev-debuginfo-1.3.2-6.2 libstoragemgmt1-1.3.2-6.2 libstoragemgmt1-debuginfo-1.3.2-6.2 python-libstoragemgmt-clibs-1.3.2-6.2 python-libstoragemgmt-clibs-debuginfo-1.3.2-6.2 - openSUSE Leap 42.1 (noarch): libstoragemgmt-hpsa-plugin-1.3.2-6.2 libstoragemgmt-megaraid-plugin-1.3.2-6.2 libstoragemgmt-netapp-plugin-1.3.2-6.2 libstoragemgmt-nstor-plugin-1.3.2-6.2 libstoragemgmt-smis-plugin-1.3.2-6.2 libstoragemgmt-targetd-plugin-1.3.2-6.2 python-libstoragemgmt-1.3.2-6.2 References: https://bugzilla.suse.com/980041

1 0

openSUSE-SU-2016:1496-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 05 Jun '16

05 Jun '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1496-1 Rating: important References: #981886 #982719 Cross-References: CVE-2016-1672 CVE-2016-1673 CVE-2016-1674 CVE-2016-1675 CVE-2016-1676 CVE-2016-1677 CVE-2016-1678 CVE-2016-1679 CVE-2016-1680 CVE-2016-1681 CVE-2016-1682 CVE-2016-1683 CVE-2016-1684 CVE-2016-1685 CVE-2016-1686 CVE-2016-1687 CVE-2016-1688 CVE-2016-1689 CVE-2016-1690 CVE-2016-1691 CVE-2016-1692 CVE-2016-1693 CVE-2016-1694 CVE-2016-1695 CVE-2016-1696 CVE-2016-1697 CVE-2016-1698 CVE-2016-1699 CVE-2016-1700 CVE-2016-1701 CVE-2016-1702 CVE-2016-1703 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 32 vulnerabilities is now available. Description: Chromium was updated to 51.0.2704.79 to fix the following vulnerabilities: - CVE-2016-1696: Cross-origin bypass in Extension bindings - CVE-2016-1697: Cross-origin bypass in Blink - CVE-2016-1698: Information leak in Extension bindings - CVE-2016-1699: Parameter sanitization failure in DevTools - CVE-2016-1700: Use-after-free in Extensions - CVE-2016-1701: Use-after-free in Autofill - CVE-2016-1702: Out-of-bounds read in Skia - CVE-2016-1703: Various fixes from internal audits, fuzzing and other initiatives Also includes vulnerabilities fixed in 51.0.2704.63 (boo#981886): - CVE-2016-1672: Cross-origin bypass in extension bindings - CVE-2016-1673: Cross-origin bypass in Blink - CVE-2016-1674: Cross-origin bypass in extensions - CVE-2016-1675: Cross-origin bypass in Blink - CVE-2016-1676: Cross-origin bypass in extension bindings - CVE-2016-1677: Type confusion in V8 - CVE-2016-1678: Heap overflow in V8 - CVE-2016-1679: Heap use-after-free in V8 bindings - CVE-2016-1680: Heap use-after-free in Skia - CVE-2016-1681: Heap overflow in PDFium - CVE-2016-1682: CSP bypass for ServiceWorker - CVE-2016-1683: Out-of-bounds access in libxslt - CVE-2016-1684: Integer overflow in libxslt - CVE-2016-1685: Out-of-bounds read in PDFium - CVE-2016-1686: Out-of-bounds read in PDFium - CVE-2016-1687: Information leak in extensions - CVE-2016-1688: Out-of-bounds read in V8 - CVE-2016-1689: Heap buffer overflow in media - CVE-2016-1690: Heap use-after-free in Autofill - CVE-2016-1691: Heap buffer-overflow in Skia - CVE-2016-1692: Limited cross-origin bypass in ServiceWorker - CVE-2016-1693: HTTP Download of Software Removal Tool - CVE-2016-1694: HPKP pins removed on cache clearance - CVE-2016-1695: Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-682=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): chromedriver-51.0.2704.79-105.2 chromedriver-debuginfo-51.0.2704.79-105.2 chromium-51.0.2704.79-105.2 chromium-debuginfo-51.0.2704.79-105.2 chromium-debugsource-51.0.2704.79-105.2 chromium-desktop-gnome-51.0.2704.79-105.2 chromium-desktop-kde-51.0.2704.79-105.2 chromium-ffmpegsumo-51.0.2704.79-105.2 chromium-ffmpegsumo-debuginfo-51.0.2704.79-105.2 References: https://www.suse.com/security/cve/CVE-2016-1672.html https://www.suse.com/security/cve/CVE-2016-1673.html https://www.suse.com/security/cve/CVE-2016-1674.html https://www.suse.com/security/cve/CVE-2016-1675.html https://www.suse.com/security/cve/CVE-2016-1676.html https://www.suse.com/security/cve/CVE-2016-1677.html https://www.suse.com/security/cve/CVE-2016-1678.html https://www.suse.com/security/cve/CVE-2016-1679.html https://www.suse.com/security/cve/CVE-2016-1680.html https://www.suse.com/security/cve/CVE-2016-1681.html https://www.suse.com/security/cve/CVE-2016-1682.html https://www.suse.com/security/cve/CVE-2016-1683.html https://www.suse.com/security/cve/CVE-2016-1684.html https://www.suse.com/security/cve/CVE-2016-1685.html https://www.suse.com/security/cve/CVE-2016-1686.html https://www.suse.com/security/cve/CVE-2016-1687.html https://www.suse.com/security/cve/CVE-2016-1688.html https://www.suse.com/security/cve/CVE-2016-1689.html https://www.suse.com/security/cve/CVE-2016-1690.html https://www.suse.com/security/cve/CVE-2016-1691.html https://www.suse.com/security/cve/CVE-2016-1692.html https://www.suse.com/security/cve/CVE-2016-1693.html https://www.suse.com/security/cve/CVE-2016-1694.html https://www.suse.com/security/cve/CVE-2016-1695.html https://www.suse.com/security/cve/CVE-2016-1696.html https://www.suse.com/security/cve/CVE-2016-1697.html https://www.suse.com/security/cve/CVE-2016-1698.html https://www.suse.com/security/cve/CVE-2016-1699.html https://www.suse.com/security/cve/CVE-2016-1700.html https://www.suse.com/security/cve/CVE-2016-1701.html https://www.suse.com/security/cve/CVE-2016-1702.html https://www.suse.com/security/cve/CVE-2016-1703.html https://bugzilla.suse.com/981886 https://bugzilla.suse.com/982719

1 0

openSUSE-RU-2016:1495-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 04 Jun '16

04 Jun '16

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1495-1 Rating: moderate References: #960158 #964934 #973848 #976766 #978275 #980303 #980325 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - udev: Readd nvme entries to 60-persistent-storage.rules (boo#980303) - Always create dependencies for loop device mounts - Always create dependencies for bind mounts (boo#964934) - build: Fix build issue on TW with latest linux-glibc-devel package - transaction_add_job_and_dependencies(): Return ENOENT when a unit is not found (boo#960158) - Fix backport of "tmpfiles: add ability to mask access mode by pre-existing access mode on files/directories" (boo#973848) - Make sure that initrd-udevadm-cleanup-db.service is packaged only once. Previous change make it part to both systemd and udev packages. - Restore initrd-udevadm-cleanup-db.service (boo#978275, boo#976766, boo#980325) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-677=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libgudev-1_0-0-210.1463730809.e37fc98-25.40.2 libgudev-1_0-0-debuginfo-210.1463730809.e37fc98-25.40.2 libgudev-1_0-devel-210.1463730809.e37fc98-25.40.2 libudev-devel-210.1463730809.e37fc98-25.40.2 libudev-mini-devel-210.1463730809.e37fc98-25.40.1 libudev-mini1-210.1463730809.e37fc98-25.40.1 libudev-mini1-debuginfo-210.1463730809.e37fc98-25.40.1 libudev1-210.1463730809.e37fc98-25.40.2 libudev1-debuginfo-210.1463730809.e37fc98-25.40.2 nss-myhostname-210.1463730809.e37fc98-25.40.2 nss-myhostname-debuginfo-210.1463730809.e37fc98-25.40.2 systemd-210.1463730809.e37fc98-25.40.2 systemd-debuginfo-210.1463730809.e37fc98-25.40.2 systemd-debugsource-210.1463730809.e37fc98-25.40.2 systemd-devel-210.1463730809.e37fc98-25.40.2 systemd-journal-gateway-210.1463730809.e37fc98-25.40.2 systemd-journal-gateway-debuginfo-210.1463730809.e37fc98-25.40.2 systemd-logger-210.1463730809.e37fc98-25.40.2 systemd-mini-210.1463730809.e37fc98-25.40.1 systemd-mini-debuginfo-210.1463730809.e37fc98-25.40.1 systemd-mini-debugsource-210.1463730809.e37fc98-25.40.1 systemd-mini-devel-210.1463730809.e37fc98-25.40.1 systemd-mini-sysvinit-210.1463730809.e37fc98-25.40.1 systemd-sysvinit-210.1463730809.e37fc98-25.40.2 typelib-1_0-GUdev-1_0-210.1463730809.e37fc98-25.40.2 udev-210.1463730809.e37fc98-25.40.2 udev-debuginfo-210.1463730809.e37fc98-25.40.2 udev-mini-210.1463730809.e37fc98-25.40.1 udev-mini-debuginfo-210.1463730809.e37fc98-25.40.1 - openSUSE 13.2 (noarch): systemd-bash-completion-210.1463730809.e37fc98-25.40.2 - openSUSE 13.2 (x86_64): libgudev-1_0-0-32bit-210.1463730809.e37fc98-25.40.2 libgudev-1_0-0-debuginfo-32bit-210.1463730809.e37fc98-25.40.2 libudev1-32bit-210.1463730809.e37fc98-25.40.2 libudev1-debuginfo-32bit-210.1463730809.e37fc98-25.40.2 nss-myhostname-32bit-210.1463730809.e37fc98-25.40.2 nss-myhostname-debuginfo-32bit-210.1463730809.e37fc98-25.40.2 systemd-32bit-210.1463730809.e37fc98-25.40.2 systemd-debuginfo-32bit-210.1463730809.e37fc98-25.40.2 References: https://bugzilla.suse.com/960158 https://bugzilla.suse.com/964934 https://bugzilla.suse.com/973848 https://bugzilla.suse.com/976766 https://bugzilla.suse.com/978275 https://bugzilla.suse.com/980303 https://bugzilla.suse.com/980325

1 0

openSUSE-RU-2016:1494-1: moderate: Recommended update for libgcrypt
by maintenance＠opensuse.org 04 Jun '16

04 Jun '16

openSUSE Recommended Update: Recommended update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1494-1 Rating: moderate References: #979629 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libgcrypt fixes the following issue: - Fix failing reboot after installing fips pattern (bsc#979629) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-681=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libgcrypt-cavs-1.6.1-29.1 libgcrypt-cavs-debuginfo-1.6.1-29.1 libgcrypt-debugsource-1.6.1-29.1 libgcrypt-devel-1.6.1-29.1 libgcrypt-devel-debuginfo-1.6.1-29.1 libgcrypt20-1.6.1-29.1 libgcrypt20-debuginfo-1.6.1-29.1 libgcrypt20-hmac-1.6.1-29.1 - openSUSE Leap 42.1 (x86_64): libgcrypt-devel-32bit-1.6.1-29.1 libgcrypt-devel-debuginfo-32bit-1.6.1-29.1 libgcrypt20-32bit-1.6.1-29.1 libgcrypt20-debuginfo-32bit-1.6.1-29.1 libgcrypt20-hmac-32bit-1.6.1-29.1 References: https://bugzilla.suse.com/979629

1 0

openSUSE-RU-2016:1493-1: moderate: Recommended update for bash
by maintenance＠opensuse.org 04 Jun '16

04 Jun '16

openSUSE Recommended Update: Recommended update for bash ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1493-1 Rating: moderate References: #976776 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for bash fixes the following issue: - Fix crash if ~/.bash_history is empty (bsc#976776) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-680=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): bash-4.2-78.1 bash-debuginfo-4.2-78.1 bash-debugsource-4.2-78.1 bash-devel-4.2-78.1 bash-loadables-4.2-78.1 bash-loadables-debuginfo-4.2-78.1 libreadline6-6.2-78.1 libreadline6-debuginfo-6.2-78.1 readline-devel-6.2-78.1 - openSUSE Leap 42.1 (x86_64): bash-debuginfo-32bit-4.2-78.1 libreadline6-32bit-6.2-78.1 libreadline6-debuginfo-32bit-6.2-78.1 readline-devel-32bit-6.2-78.1 - openSUSE Leap 42.1 (noarch): bash-doc-4.2-78.1 bash-lang-4.2-78.1 readline-doc-6.2-78.1 References: https://bugzilla.suse.com/976776

1 0

openSUSE-RU-2016:1492-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 04 Jun '16

04 Jun '16

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1492-1 Rating: moderate References: #964934 #980303 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - Re-add NVMe entries to udev's 60-persistent-storage.rules. (bsc#980303) - Always create dependencies for bind mounts and loop devices. (bsc#964934) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-678=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libgudev-1_0-0-210-95.1 libgudev-1_0-0-debuginfo-210-95.1 libgudev-1_0-devel-210-95.1 libudev-devel-210-95.1 libudev-mini-devel-210-95.1 libudev-mini1-210-95.1 libudev-mini1-debuginfo-210-95.1 libudev1-210-95.1 libudev1-debuginfo-210-95.1 nss-myhostname-210-95.1 nss-myhostname-debuginfo-210-95.1 systemd-210-95.1 systemd-debuginfo-210-95.1 systemd-debugsource-210-95.1 systemd-devel-210-95.1 systemd-journal-gateway-210-95.1 systemd-journal-gateway-debuginfo-210-95.1 systemd-logger-210-95.1 systemd-mini-210-95.1 systemd-mini-debuginfo-210-95.1 systemd-mini-debugsource-210-95.1 systemd-mini-devel-210-95.1 systemd-mini-sysvinit-210-95.1 systemd-sysvinit-210-95.1 typelib-1_0-GUdev-1_0-210-95.1 udev-210-95.1 udev-debuginfo-210-95.1 udev-mini-210-95.1 udev-mini-debuginfo-210-95.1 - openSUSE Leap 42.1 (x86_64): libgudev-1_0-0-32bit-210-95.1 libgudev-1_0-0-debuginfo-32bit-210-95.1 libudev1-32bit-210-95.1 libudev1-debuginfo-32bit-210-95.1 nss-myhostname-32bit-210-95.1 nss-myhostname-debuginfo-32bit-210-95.1 systemd-32bit-210-95.1 systemd-debuginfo-32bit-210-95.1 - openSUSE Leap 42.1 (noarch): systemd-bash-completion-210-95.1 References: https://bugzilla.suse.com/964934 https://bugzilla.suse.com/980303

1 0

openSUSE-RU-2016:1491-1: moderate: Recommended update for gdb
by maintenance＠opensuse.org 04 Jun '16

04 Jun '16

openSUSE Recommended Update: Recommended update for gdb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1491-1 Rating: moderate References: #970589 #971556 #976404 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for gdb fixes the following issues: - GDB fails to attach to multi-threaded processes on the s390x architecture. (bsc#976404, bsc#970589) - GDB could terminate with a segmentation fault when printing values from binaries built with some non-standard build options. (bsc#971556) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-679=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gdb-7.9.1-10.1 gdb-debuginfo-7.9.1-10.1 gdb-debugsource-7.9.1-10.1 gdb-testresults-7.9.1-10.1 gdbserver-7.9.1-10.1 gdbserver-debuginfo-7.9.1-10.1 References: https://bugzilla.suse.com/970589 https://bugzilla.suse.com/971556 https://bugzilla.suse.com/976404

1 0

openSUSE-SU-2016:1489-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 04 Jun '16

04 Jun '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1489-1 Rating: important References: #982719 Cross-References: CVE-2016-1696 CVE-2016-1697 CVE-2016-1698 CVE-2016-1699 CVE-2016-1700 CVE-2016-1701 CVE-2016-1702 CVE-2016-1703 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: Chromium was updated to 51.0.2704.79 to fix a number of security issues. [boo#982719] - CVE-2016-1696: Cross-origin bypass in Extension bindings - CVE-2016-1697: Cross-origin bypass in Blink - CVE-2016-1698: Information leak in Extension bindings - CVE-2016-1699: Parameter sanitization failure in DevTools - CVE-2016-1700: Use-after-free in Extensions - CVE-2016-1701: Use-after-free in Autofill - CVE-2016-1702: Out-of-bounds read in Skia - CVE-2016-1703: Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch 5171=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): chromedriver-51.0.2704.79-54.1 chromedriver-debuginfo-51.0.2704.79-54.1 chromium-51.0.2704.79-54.1 chromium-debuginfo-51.0.2704.79-54.1 chromium-debugsource-51.0.2704.79-54.1 chromium-desktop-gnome-51.0.2704.79-54.1 chromium-desktop-kde-51.0.2704.79-54.1 chromium-ffmpegsumo-51.0.2704.79-54.1 chromium-ffmpegsumo-debuginfo-51.0.2704.79-54.1 References: https://www.suse.com/security/cve/CVE-2016-1696.html https://www.suse.com/security/cve/CVE-2016-1697.html https://www.suse.com/security/cve/CVE-2016-1698.html https://www.suse.com/security/cve/CVE-2016-1699.html https://www.suse.com/security/cve/CVE-2016-1700.html https://www.suse.com/security/cve/CVE-2016-1701.html https://www.suse.com/security/cve/CVE-2016-1702.html https://www.suse.com/security/cve/CVE-2016-1703.html https://bugzilla.suse.com/982719

1 0

openSUSE-RU-2016:1476-1: Recommended update for clamav-database
by maintenance＠opensuse.org 02 Jun '16

02 Jun '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1476-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh May 30th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-676=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201605300003-101.1 References:

1 0

openSUSE-SU-2016:1467-1: moderate: Security update for gdk-pixbuf
by opensuse-security＠opensuse.org 01 Jun '16

01 Jun '16

openSUSE Security Update: Security update for gdk-pixbuf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1467-1 Rating: moderate References: #948790 #948791 #958963 Cross-References: CVE-2015-7552 CVE-2015-7673 CVE-2015-7674 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for gdk-pixbuf fixes the following issues: - CVE-2015-7552: Fixed various overflows in image handling (boo#958963). - CVE-2015-7673: Fixed an overflow and DoS with a TGA file (boo#948790). - CVE-2015-7674: Fixed overflow when scaling a gif (boo#948791). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-669=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gdk-pixbuf-debugsource-2.31.6-4.1 gdk-pixbuf-devel-2.31.6-4.1 gdk-pixbuf-devel-debuginfo-2.31.6-4.1 gdk-pixbuf-query-loaders-2.31.6-4.1 gdk-pixbuf-query-loaders-debuginfo-2.31.6-4.1 libgdk_pixbuf-2_0-0-2.31.6-4.1 libgdk_pixbuf-2_0-0-debuginfo-2.31.6-4.1 typelib-1_0-GdkPixbuf-2_0-2.31.6-4.1 - openSUSE Leap 42.1 (x86_64): gdk-pixbuf-devel-32bit-2.31.6-4.1 gdk-pixbuf-devel-debuginfo-32bit-2.31.6-4.1 gdk-pixbuf-query-loaders-32bit-2.31.6-4.1 gdk-pixbuf-query-loaders-debuginfo-32bit-2.31.6-4.1 libgdk_pixbuf-2_0-0-32bit-2.31.6-4.1 libgdk_pixbuf-2_0-0-debuginfo-32bit-2.31.6-4.1 - openSUSE Leap 42.1 (noarch): gdk-pixbuf-lang-2.31.6-4.1 References: https://www.suse.com/security/cve/CVE-2015-7552.html https://www.suse.com/security/cve/CVE-2015-7673.html https://www.suse.com/security/cve/CVE-2015-7674.html https://bugzilla.suse.com/948790 https://bugzilla.suse.com/948791 https://bugzilla.suse.com/958963

1 0

openSUSE-RU-2016:1466-1: moderate: Recommended update for mgp
by maintenance＠opensuse.org 01 Jun '16

01 Jun '16

openSUSE Recommended Update: Recommended update for mgp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1466-1 Rating: moderate References: #980768 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mgp fixes the following issues: - Implement the alpha channel support for fix the rendering bug of images with transparent color (boo#980768) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-675=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): mgp-1.13a-119.1 mgp-debuginfo-1.13a-119.1 mgp-debugsource-1.13a-119.1 References: https://bugzilla.suse.com/980768

1 0

openSUSE-SU-2016:1464-1: moderate: Security update for p7zip
by opensuse-security＠opensuse.org 01 Jun '16

01 Jun '16

openSUSE Security Update: Security update for p7zip ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1464-1 Rating: moderate References: #979823 Cross-References: CVE-2016-2335 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for p7zip fixes the following issues: - add p7zip-9.20.1-CVE-2016-2335.patch to fix 7zip UDF CInArchive::ReadFileItem code execution vulnerability [boo#979823], [CVE-2016-2335] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-673=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): p7zip-9.20.1-12.6.1 p7zip-debuginfo-9.20.1-12.6.1 p7zip-debugsource-9.20.1-12.6.1 References: https://www.suse.com/security/cve/CVE-2016-2335.html https://bugzilla.suse.com/979823

1 0

openSUSE-SU-2016:1463-1: moderate: Security update for libarchive
by opensuse-security＠opensuse.org 01 Jun '16

01 Jun '16

openSUSE Security Update: Security update for libarchive ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1463-1 Rating: moderate References: #979005 Cross-References: CVE-2016-1541 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libarchive fixes the following issue: - Fix a heap-based buffer overflow (CVE-2016-1541, bsc#979005) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-670=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): bsdtar-3.1.2-7.8.1 bsdtar-debuginfo-3.1.2-7.8.1 libarchive-debugsource-3.1.2-7.8.1 libarchive-devel-3.1.2-7.8.1 libarchive13-3.1.2-7.8.1 libarchive13-debuginfo-3.1.2-7.8.1 - openSUSE 13.2 (x86_64): libarchive13-32bit-3.1.2-7.8.1 libarchive13-debuginfo-32bit-3.1.2-7.8.1 References: https://www.suse.com/security/cve/CVE-2016-1541.html https://bugzilla.suse.com/979005

1 0

openSUSE-SU-2016:1462-1: moderate: Security update for virtualbox
by opensuse-security＠opensuse.org 01 Jun '16

01 Jun '16

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1462-1 Rating: moderate References: #908383 #939299 #953018 #964765 Cross-References: CVE-2016-0678 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: Virtualbox was updated to 5.0.20 to fix the following issues: Version bump to 5.0.20 (released 2016-04-28 by Oracle) This is a maintenance release. The following items were fixed and/or added: * NAT Network: File VBoxNetNAT no longer requires suid * Storage: fixed a regression causing write requests from the BIOS to cause a Guru Meditation with the LsiLogic SCSI controller (5.0.18 regression; bug #15317) * Storage: several emulation fixes in the BusLogic SCSI controller emulation * NAT Network: support TCP in DNS proxy (same problem as in bug #14736 for NAT) * NAT: rework handling of port-forwarding rules (bug #13570) * NAT: rewrite host resolver to handle more query types and make it asynchronous so that a stalled lookup doesn't block all NAT traffic * Snapshots: don't crash when restoring a snapshot which has more network adapters than the current state (ie when the snapshot uses ICH9 and the current state uses PIIX3) * Guest Control: various bugfixes for the copyfrom and copyto commands / API (bug #14336) * VBoxManage: list processor features on list hostinfo (bug #15334) * Linux hosts: fix for Linux 4.5 if CONFIG_NET_CLS_ACT is enabled (bug #15327) * Windows Additions: fixed performance issues with PowerPoint 2010 and the WDDM graphics drivers if Aero is disabled Bugfixes: - Apply proper fix for boo#964765 that causes guest VMs using NAT Network attachments to fail to get network access. The basic problem is that file /usr/lib/virtualbox/VBoxNetNAT needs to have suid privilege, and the spec file was failing to set the appropriate permissions. - Implement VirtualBox version 5.0.18 in openSUSE 13.2. Previous to this point, oS 13.2 had been using 4.3.X, which was the VB series when 13.2 was released. This policy has been changed so that a fix for CVE-2016-0678 can be included in 13.2. Bug report b.o.o #97366 discusses this vulnerability. This submission also fixes the bug in VB 5.0.18 that prevents proper operation for guest VMs configured to use LsiLogic adapter for disks. See ticket: https://www.virtualbox.org/ticket/15317 for a description of the problem, and changeset: https://www.virtualbox.org/changeset/60565/vbox for the fix, which is implemented in file "changeset_60565.diff". Version bump to 5.0.18 (released 2016-04-18 by Oracle) This is a maintenance release. The following items were fixed and/or added: * GUI: position off-screen windows to be fully visible again on relaunch in consistence with default-behavior (bug #15226) * GUI: fixed the View menu / Full-screen Mode behavior on Mac OS X El Capitan * GUI: fixed a test which allowed to encrypt a hard disk with an empty password * GUI: fixed a crash under certain conditions during VM shutdown * GUI: fixed the size of the VM list scrollbar in the VM selector when entering a group * PC speaker passthrough: fixes (Linux hosts only; bug #627) * Drag and drop: several fixes * SATA: fixed hotplug flag handling when EFI is used * Storage: fixed handling of encrypted disk images with SCSI controllers (bug #14812) * Storage: fixed possible crash with Solaris 7 if the BusLogic SCSI controller is used * USB: properly purge non-ASCII characters from USB strings (bugs #8801, #15222) * NAT Network: fixed 100% CPU load in VBoxNetNAT on Mac OS X under certain circumstances (bug #15223) * ACPI: fixed ACPI tables to make the display color management settings available again for older Windows versions (4.3.22 regression) * Guest Control: fixed VBoxManage copyfrom command (bug #14336) * Snapshots: fixed several problems when removing older snapshots (bug #15206) * VBoxManage: fixed --verbose output of the guestcontrol command * Windows hosts: hardening fixes required for recent Windows 10 insider builds (bugs #15245, #15296) * Windows hosts: fixed support of jumbo frames in with bridged networking (5.0.16 regression; bug #15209) * Windows hosts: don't prevent receiving multicast traffic if host-only adapters are installed (bug #8698) * Linux hosts: added support for the new naming scheme of NVME disks when creating raw disks * Solaris hosts / guests: properly sign the kernel modules (bug #12608) * Linux hosts / guests: Linux 4.5 fixes (bug #15251) * Linux hosts / guests: Linux 4.6 fixes (bug #15298) * Linux Additions: added a kernel graphics driver to support graphics when X.Org does not have root rights (bug #14732) * Linux/Solaris Additions: fixed several issues causing Linux/Solatis guests using software rendering when 3D acceleration is available * Windows Additions: fixed a hang with PowerPoint 2010 and the WDDM drivers if Aero is disabled Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-672=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): python-virtualbox-5.0.20-46.1 python-virtualbox-debuginfo-5.0.20-46.1 virtualbox-5.0.20-46.1 virtualbox-debuginfo-5.0.20-46.1 virtualbox-debugsource-5.0.20-46.1 virtualbox-devel-5.0.20-46.1 virtualbox-guest-kmp-default-5.0.20_k3.16.7_35-46.1 virtualbox-guest-kmp-default-debuginfo-5.0.20_k3.16.7_35-46.1 virtualbox-guest-kmp-desktop-5.0.20_k3.16.7_35-46.1 virtualbox-guest-kmp-desktop-debuginfo-5.0.20_k3.16.7_35-46.1 virtualbox-guest-tools-5.0.20-46.1 virtualbox-guest-tools-debuginfo-5.0.20-46.1 virtualbox-guest-x11-5.0.20-46.1 virtualbox-guest-x11-debuginfo-5.0.20-46.1 virtualbox-host-kmp-default-5.0.20_k3.16.7_35-46.1 virtualbox-host-kmp-default-debuginfo-5.0.20_k3.16.7_35-46.1 virtualbox-host-kmp-desktop-5.0.20_k3.16.7_35-46.1 virtualbox-host-kmp-desktop-debuginfo-5.0.20_k3.16.7_35-46.1 virtualbox-qt-5.0.20-46.1 virtualbox-qt-debuginfo-5.0.20-46.1 virtualbox-websrv-5.0.20-46.1 virtualbox-websrv-debuginfo-5.0.20-46.1 - openSUSE 13.2 (noarch): virtualbox-guest-desktop-icons-5.0.20-46.1 virtualbox-host-source-5.0.20-46.1 - openSUSE 13.2 (i586): virtualbox-guest-kmp-pae-5.0.20_k3.16.7_35-46.1 virtualbox-guest-kmp-pae-debuginfo-5.0.20_k3.16.7_35-46.1 virtualbox-host-kmp-pae-5.0.20_k3.16.7_35-46.1 virtualbox-host-kmp-pae-debuginfo-5.0.20_k3.16.7_35-46.1 References: https://www.suse.com/security/cve/CVE-2016-0678.html https://bugzilla.suse.com/908383 https://bugzilla.suse.com/939299 https://bugzilla.suse.com/953018 https://bugzilla.suse.com/964765

1 0