June 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:1523-1: important: Security update for expat
by opensuse-security＠opensuse.org 08 Jun '16

08 Jun '16

openSUSE Security Update: Security update for expat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1523-1 Rating: important References: #979441 #980391 Cross-References: CVE-2015-1283 CVE-2016-0718 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for expat fixes the following issues: Security issue fixed: - CVE-2016-0718: Fix Expat XML parser that mishandles certain kinds of malformed input documents. (bsc#979441) - CVE-2015-1283: Fix multiple integer overflows. (bnc#980391) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-695=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): expat-2.1.0-17.1 expat-debuginfo-2.1.0-17.1 expat-debugsource-2.1.0-17.1 libexpat-devel-2.1.0-17.1 libexpat1-2.1.0-17.1 libexpat1-debuginfo-2.1.0-17.1 - openSUSE Leap 42.1 (x86_64): expat-debuginfo-32bit-2.1.0-17.1 libexpat-devel-32bit-2.1.0-17.1 libexpat1-32bit-2.1.0-17.1 libexpat1-debuginfo-32bit-2.1.0-17.1 References: https://www.suse.com/security/cve/CVE-2015-1283.html https://www.suse.com/security/cve/CVE-2016-0718.html https://bugzilla.suse.com/979441 https://bugzilla.suse.com/980391

1 0

openSUSE-SU-2016:1522-1: important: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 08 Jun '16

08 Jun '16

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1522-1 Rating: important References: #982178 Cross-References: CVE-2016-5118 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: - security update: * CVE-2016-5118 [boo#982178] + GraphicsMagick-CVE-2016-5118.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-694=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): GraphicsMagick-1.3.20-6.1 GraphicsMagick-debuginfo-1.3.20-6.1 GraphicsMagick-debugsource-1.3.20-6.1 GraphicsMagick-devel-1.3.20-6.1 libGraphicsMagick++-Q16-3-1.3.20-6.1 libGraphicsMagick++-Q16-3-debuginfo-1.3.20-6.1 libGraphicsMagick++-devel-1.3.20-6.1 libGraphicsMagick-Q16-3-1.3.20-6.1 libGraphicsMagick-Q16-3-debuginfo-1.3.20-6.1 libGraphicsMagick3-config-1.3.20-6.1 libGraphicsMagickWand-Q16-2-1.3.20-6.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.20-6.1 perl-GraphicsMagick-1.3.20-6.1 perl-GraphicsMagick-debuginfo-1.3.20-6.1 References: https://www.suse.com/security/cve/CVE-2016-5118.html https://bugzilla.suse.com/982178

1 0

openSUSE-SU-2016:1521-1: important: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 08 Jun '16

08 Jun '16

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1521-1 Rating: important References: #982178 Cross-References: CVE-2016-5118 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issues: - security update: * CVE-2016-5118 [boo#982178] + GraphicsMagick-CVE-2016-5118.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-693=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): GraphicsMagick-1.3.21-8.1 GraphicsMagick-debuginfo-1.3.21-8.1 GraphicsMagick-debugsource-1.3.21-8.1 GraphicsMagick-devel-1.3.21-8.1 libGraphicsMagick++-Q16-11-1.3.21-8.1 libGraphicsMagick++-Q16-11-debuginfo-1.3.21-8.1 libGraphicsMagick++-devel-1.3.21-8.1 libGraphicsMagick-Q16-3-1.3.21-8.1 libGraphicsMagick-Q16-3-debuginfo-1.3.21-8.1 libGraphicsMagick3-config-1.3.21-8.1 libGraphicsMagickWand-Q16-2-1.3.21-8.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.21-8.1 perl-GraphicsMagick-1.3.21-8.1 perl-GraphicsMagick-debuginfo-1.3.21-8.1 References: https://www.suse.com/security/cve/CVE-2016-5118.html https://bugzilla.suse.com/982178

1 0

openSUSE-RU-2016:1520-1: moderate: Recommended update for compcache
by maintenance＠opensuse.org 08 Jun '16

08 Jun '16

openSUSE Recommended Update: Recommended update for compcache ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1520-1 Rating: moderate References: #982279 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for compcache fixes the following issues: - Fix init script for 4.x and later kernels (boo#982279) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-690=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): compcache-0.6.2-26.1 References: https://bugzilla.suse.com/982279

1 0

openSUSE-RU-2016:1519-1: moderate: Recommended update for cloud-init
by maintenance＠opensuse.org 08 Jun '16

08 Jun '16

openSUSE Recommended Update: Recommended update for cloud-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1519-1 Rating: moderate References: #978048 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cloud-init fixes the following issues: - Avoid login prompt before cloud-init is finished (bsc#978048) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-689=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): cloud-init-0.7.6-23.1 cloud-init-doc-0.7.6-23.1 cloud-init-test-0.7.6-23.1 References: https://bugzilla.suse.com/978048

1 0

openSUSE-OU-2016:1518-1: Optional update for syslinux
by maintenance＠opensuse.org 08 Jun '16

08 Jun '16

openSUSE Optional Update: Optional update for syslinux ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:1518-1 Rating: low References: #964471 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for syslinux enables building of the syslinux-x86_64 package on s390x. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-692=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): syslinux-4.04-36.8 syslinux-debuginfo-4.04-36.8 syslinux-debugsource-4.04-36.8 - openSUSE Leap 42.1 (s390x): syslinux-debuginfo-x86_64-4.04-36.8 syslinux-x86_64-4.04-36.8 References: https://bugzilla.suse.com/964471

1 0

openSUSE-RU-2016:1517-1: Recommended update for autofs
by maintenance＠opensuse.org 08 Jun '16

08 Jun '16

openSUSE Recommended Update: Recommended update for autofs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1517-1 Rating: low References: #955477 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for autofs fixes a build issue which prevented automount from being linked to the reentrant version of libldap. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-691=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): autofs-5.0.9-9.1 autofs-debuginfo-5.0.9-9.1 autofs-debugsource-5.0.9-9.1 References: https://bugzilla.suse.com/955477

1 0

openSUSE-SU-2016:1516-1: moderate: Security update for gd
by opensuse-security＠opensuse.org 07 Jun '16

07 Jun '16

openSUSE Security Update: Security update for gd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1516-1 Rating: moderate References: #982176 Cross-References: CVE-2016-5116 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gd fixes the following issues: - security update: * CVE-2016-5116 [boo#982176] + gd-CVE-2016-5116.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-688=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gd-2.1.0-7.8.1 gd-debuginfo-2.1.0-7.8.1 gd-debugsource-2.1.0-7.8.1 gd-devel-2.1.0-7.8.1 libgd3-2.1.0-7.8.1 libgd3-debuginfo-2.1.0-7.8.1 - openSUSE 13.2 (x86_64): libgd3-32bit-2.1.0-7.8.1 libgd3-debuginfo-32bit-2.1.0-7.8.1 References: https://www.suse.com/security/cve/CVE-2016-5116.html https://bugzilla.suse.com/982176

1 0

openSUSE-SU-2016:1506-1: moderate: Security update for clamav-database
by opensuse-security＠opensuse.org 07 Jun '16

07 Jun '16

openSUSE Security Update: Security update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1506-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for clamav-database refreshes the database. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-687=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201606060002-105.1 References:

1 0

openSUSE-RU-2016:1500-1: moderate: Recommended update for plasma5-desktop
by maintenance＠opensuse.org 06 Jun '16

06 Jun '16

openSUSE Recommended Update: Recommended update for plasma5-desktop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1500-1 Rating: moderate References: #931316 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for plasma5-desktop fixes the following issue: - Fix set default browser in Plasma 5 (boo#931316) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-684=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): plasma5-desktop-5.5.5-20.1 plasma5-desktop-branding-upstream-5.5.5-20.1 plasma5-desktop-debuginfo-5.5.5-20.1 plasma5-desktop-debugsource-5.5.5-20.1 - openSUSE Leap 42.1 (noarch): plasma5-desktop-lang-5.5.5-20.1 References: https://bugzilla.suse.com/931316

1 0