July 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:1823-1: Recommended update for x11vnc
by maintenance＠opensuse.org 19 Jul '16

19 Jul '16

openSUSE Recommended Update: Recommended update for x11vnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1823-1 Rating: low References: #987182 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for x11vnc fixes the following issues: - Fix two buffer overflows. (boo#987182) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-879=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-879=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): x11vnc-0.9.13-16.1 x11vnc-debuginfo-0.9.13-16.1 x11vnc-debugsource-0.9.13-16.1 x11vnc-frontend-0.9.13-16.1 - openSUSE 13.2 (i586 x86_64): x11vnc-0.9.13-9.3.1 x11vnc-debuginfo-0.9.13-9.3.1 x11vnc-debugsource-0.9.13-9.3.1 x11vnc-frontend-0.9.13-9.3.1 References: https://bugzilla.suse.com/987182

1 0

openSUSE-RU-2016:1821-1: Recommended update for clamav-database
by maintenance＠opensuse.org 19 Jul '16

19 Jul '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1821-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh July 18th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-878=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201607180003-129.1 References:

1 0

openSUSE-RU-2016:1816-1: important: Recommended update for libdlm
by maintenance＠opensuse.org 18 Jul '16

18 Jul '16

openSUSE Recommended Update: Recommended update for libdlm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1816-1 Rating: important References: #967332 #977201 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes a regression with libdlm: - Fixed an issue which caused rebooting all nodes of HA cluster with DLM resource agent when fencing happens. (bsc#977201, bsc#967332) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-877=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libdlm-4.0.4-12.1 libdlm-debuginfo-4.0.4-12.1 libdlm-debugsource-4.0.4-12.1 libdlm-devel-4.0.4-12.1 libdlm3-4.0.4-12.1 libdlm3-debuginfo-4.0.4-12.1 References: https://bugzilla.suse.com/967332 https://bugzilla.suse.com/977201

1 0

openSUSE-SU-2016:1810-1: moderate: Security update for libvirt
by opensuse-security＠opensuse.org 15 Jul '16

15 Jul '16

openSUSE Security Update: Security update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1810-1 Rating: moderate References: #987527 Cross-References: CVE-2016-5008 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libvirt fixes the following issue: - CVE-2016-5008: empty VNC password disables authentication (boo#987527) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-875=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libvirt-1.2.18.2-11.1 libvirt-client-1.2.18.2-11.1 libvirt-client-debuginfo-1.2.18.2-11.1 libvirt-daemon-1.2.18.2-11.1 libvirt-daemon-config-network-1.2.18.2-11.1 libvirt-daemon-config-nwfilter-1.2.18.2-11.1 libvirt-daemon-debuginfo-1.2.18.2-11.1 libvirt-daemon-driver-interface-1.2.18.2-11.1 libvirt-daemon-driver-interface-debuginfo-1.2.18.2-11.1 libvirt-daemon-driver-lxc-1.2.18.2-11.1 libvirt-daemon-driver-lxc-debuginfo-1.2.18.2-11.1 libvirt-daemon-driver-network-1.2.18.2-11.1 libvirt-daemon-driver-network-debuginfo-1.2.18.2-11.1 libvirt-daemon-driver-nodedev-1.2.18.2-11.1 libvirt-daemon-driver-nodedev-debuginfo-1.2.18.2-11.1 libvirt-daemon-driver-nwfilter-1.2.18.2-11.1 libvirt-daemon-driver-nwfilter-debuginfo-1.2.18.2-11.1 libvirt-daemon-driver-qemu-1.2.18.2-11.1 libvirt-daemon-driver-qemu-debuginfo-1.2.18.2-11.1 libvirt-daemon-driver-secret-1.2.18.2-11.1 libvirt-daemon-driver-secret-debuginfo-1.2.18.2-11.1 libvirt-daemon-driver-storage-1.2.18.2-11.1 libvirt-daemon-driver-storage-debuginfo-1.2.18.2-11.1 libvirt-daemon-driver-uml-1.2.18.2-11.1 libvirt-daemon-driver-uml-debuginfo-1.2.18.2-11.1 libvirt-daemon-driver-vbox-1.2.18.2-11.1 libvirt-daemon-driver-vbox-debuginfo-1.2.18.2-11.1 libvirt-daemon-lxc-1.2.18.2-11.1 libvirt-daemon-qemu-1.2.18.2-11.1 libvirt-daemon-uml-1.2.18.2-11.1 libvirt-daemon-vbox-1.2.18.2-11.1 libvirt-debugsource-1.2.18.2-11.1 libvirt-devel-1.2.18.2-11.1 libvirt-doc-1.2.18.2-11.1 libvirt-lock-sanlock-1.2.18.2-11.1 libvirt-lock-sanlock-debuginfo-1.2.18.2-11.1 libvirt-login-shell-1.2.18.2-11.1 libvirt-login-shell-debuginfo-1.2.18.2-11.1 - openSUSE Leap 42.1 (x86_64): libvirt-client-32bit-1.2.18.2-11.1 libvirt-client-debuginfo-32bit-1.2.18.2-11.1 libvirt-daemon-driver-libxl-1.2.18.2-11.1 libvirt-daemon-driver-libxl-debuginfo-1.2.18.2-11.1 libvirt-daemon-xen-1.2.18.2-11.1 libvirt-devel-32bit-1.2.18.2-11.1 References: https://www.suse.com/security/cve/CVE-2016-5008.html https://bugzilla.suse.com/987527

1 0

openSUSE-SU-2016:1809-1: moderate: Security update for libvirt
by opensuse-security＠opensuse.org 15 Jul '16

15 Jul '16

openSUSE Security Update: Security update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1809-1 Rating: moderate References: #854343 #968483 #987527 Cross-References: CVE-2016-5008 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for libvirt fixes the following issues: - CVE-2016-5008: empty VNC password disables authentication (boo#987527) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-874=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libvirt-1.2.9-31.1 libvirt-client-1.2.9-31.1 libvirt-client-debuginfo-1.2.9-31.1 libvirt-daemon-1.2.9-31.1 libvirt-daemon-config-network-1.2.9-31.1 libvirt-daemon-config-nwfilter-1.2.9-31.1 libvirt-daemon-debuginfo-1.2.9-31.1 libvirt-daemon-driver-interface-1.2.9-31.1 libvirt-daemon-driver-interface-debuginfo-1.2.9-31.1 libvirt-daemon-driver-lxc-1.2.9-31.1 libvirt-daemon-driver-lxc-debuginfo-1.2.9-31.1 libvirt-daemon-driver-network-1.2.9-31.1 libvirt-daemon-driver-network-debuginfo-1.2.9-31.1 libvirt-daemon-driver-nodedev-1.2.9-31.1 libvirt-daemon-driver-nodedev-debuginfo-1.2.9-31.1 libvirt-daemon-driver-nwfilter-1.2.9-31.1 libvirt-daemon-driver-nwfilter-debuginfo-1.2.9-31.1 libvirt-daemon-driver-qemu-1.2.9-31.1 libvirt-daemon-driver-qemu-debuginfo-1.2.9-31.1 libvirt-daemon-driver-secret-1.2.9-31.1 libvirt-daemon-driver-secret-debuginfo-1.2.9-31.1 libvirt-daemon-driver-storage-1.2.9-31.1 libvirt-daemon-driver-storage-debuginfo-1.2.9-31.1 libvirt-daemon-driver-uml-1.2.9-31.1 libvirt-daemon-driver-uml-debuginfo-1.2.9-31.1 libvirt-daemon-driver-vbox-1.2.9-31.1 libvirt-daemon-driver-vbox-debuginfo-1.2.9-31.1 libvirt-daemon-lxc-1.2.9-31.1 libvirt-daemon-qemu-1.2.9-31.1 libvirt-daemon-uml-1.2.9-31.1 libvirt-daemon-vbox-1.2.9-31.1 libvirt-debugsource-1.2.9-31.1 libvirt-devel-1.2.9-31.1 libvirt-doc-1.2.9-31.1 libvirt-lock-sanlock-1.2.9-31.1 libvirt-lock-sanlock-debuginfo-1.2.9-31.1 libvirt-login-shell-1.2.9-31.1 libvirt-login-shell-debuginfo-1.2.9-31.1 - openSUSE 13.2 (x86_64): libvirt-client-32bit-1.2.9-31.1 libvirt-client-debuginfo-32bit-1.2.9-31.1 libvirt-daemon-driver-libxl-1.2.9-31.1 libvirt-daemon-driver-libxl-debuginfo-1.2.9-31.1 libvirt-daemon-driver-xen-1.2.9-31.1 libvirt-daemon-driver-xen-debuginfo-1.2.9-31.1 libvirt-daemon-xen-1.2.9-31.1 libvirt-devel-32bit-1.2.9-31.1 References: https://www.suse.com/security/cve/CVE-2016-5008.html https://bugzilla.suse.com/854343 https://bugzilla.suse.com/968483 https://bugzilla.suse.com/987527

1 0

openSUSE-SU-2016:1808-1: moderate: Security update for xerces-c
by opensuse-security＠opensuse.org 15 Jul '16

15 Jul '16

openSUSE Security Update: Security update for xerces-c ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1808-1 Rating: moderate References: #979208 #985860 Cross-References: CVE-2016-0729 CVE-2016-2099 CVE-2016-4463 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for xerces-c fixes the following issues: * CVE-2016-4463 Apache Xerces-C XML Parser Crashes on Malformed DT (boo#985860) * CVE-2016-2099 Exception handling mistake causing use after free (boo#979208) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-876=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libxerces-c-3_1-3.1.4-13.9.2 libxerces-c-3_1-debuginfo-3.1.4-13.9.2 libxerces-c-devel-3.1.4-13.9.2 xerces-c-3.1.4-13.9.2 xerces-c-debuginfo-3.1.4-13.9.2 xerces-c-debugsource-3.1.4-13.9.2 xerces-c-doc-3.1.4-13.9.2 - openSUSE 13.2 (x86_64): libxerces-c-3_1-32bit-3.1.4-13.9.2 libxerces-c-3_1-debuginfo-32bit-3.1.4-13.9.2 References: https://www.suse.com/security/cve/CVE-2016-0729.html https://www.suse.com/security/cve/CVE-2016-2099.html https://www.suse.com/security/cve/CVE-2016-4463.html https://bugzilla.suse.com/979208 https://bugzilla.suse.com/985860

1 0

openSUSE-RU-2016:1807-1: moderate: Recommended update for w3m
by maintenance＠opensuse.org 15 Jul '16

15 Jul '16

openSUSE Recommended Update: Recommended update for w3m ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1807-1 Rating: moderate References: #950468 #950800 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for w3m fixes the following issues: - Segmentation fault when doing an https request to an unresolvable host. (bsc#950468) - w3mman(1) displays invalid characters. (bsc#950800) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-873=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): w3m-0.5.3-158.1 w3m-debuginfo-0.5.3-158.1 w3m-debugsource-0.5.3-158.1 w3m-inline-image-0.5.3-158.1 w3m-inline-image-debuginfo-0.5.3-158.1 References: https://bugzilla.suse.com/950468 https://bugzilla.suse.com/950800

1 0

openSUSE-OU-2016:1806-1: Optional update for libtommath
by maintenance＠opensuse.org 15 Jul '16

15 Jul '16

openSUSE Optional Update: Optional update for libtommath ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:1806-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update adds libtommath to the SLE 12 Backports Project. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-872=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libtommath-devel-1.0-2.1 libtommath-examples-1.0-2.1 libtommath1-1.0-2.1 References:

1 0

openSUSE-SU-2016:1805-1: moderate: Security update for LibreOffice
by opensuse-security＠opensuse.org 14 Jul '16

14 Jul '16

openSUSE Security Update: Security update for LibreOffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1805-1 Rating: moderate References: #718113 #856729 #939998 #945443 #945445 #955832 #965294 #965296 #967014 #967015 #977784 Cross-References: CVE-2016-0794 CVE-2016-0795 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has 9 fixes is now available. Description: LibreOffice was updated to version 5.1.3.2, bringing many new features and bug fixes. Two security issues have been fixed: - CVE-2016-0795: LibreOffice allowed remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LwpTocSuperLayout record in a LotusWordPro (lwp) document. - CVE-2016-0794: The lwp filter in LibreOffice allowed remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LotusWordPro (lwp) document. A comprehensive list of new features and improvements in this release is provided by the Document Foundation at https://wiki.documentfoundation.org/ReleaseNotes/5.1 . This update was imported from the SUSE:SLE-12:Update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-871=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): cmis-client-0.5.1-3.1 cmis-client-debuginfo-0.5.1-3.1 cmis-client-debugsource-0.5.1-3.1 hunspell-1.3.2-5.1 hunspell-debuginfo-1.3.2-5.1 hunspell-debugsource-1.3.2-5.1 hunspell-devel-1.3.2-5.1 hunspell-static-1.3.2-5.1 hunspell-tools-1.3.2-5.1 hunspell-tools-debuginfo-1.3.2-5.1 hyphen-2.8.8-6.1 hyphen-debugsource-2.8.8-6.1 hyphen-devel-2.8.8-6.1 libcmis-0_5-5-0.5.1-3.1 libcmis-0_5-5-debuginfo-0.5.1-3.1 libcmis-c-0_5-5-0.5.1-3.1 libcmis-c-0_5-5-debuginfo-0.5.1-3.1 libcmis-c-devel-0.5.1-3.1 libcmis-devel-0.5.1-3.1 libetonyek-0_1-1-0.1.6-3.2 libetonyek-0_1-1-debuginfo-0.1.6-3.2 libetonyek-debugsource-0.1.6-3.2 libetonyek-devel-0.1.6-3.2 libetonyek-tools-0.1.6-3.2 libetonyek-tools-debuginfo-0.1.6-3.2 libhyphen0-2.8.8-6.1 libhyphen0-debuginfo-2.8.8-6.1 libixion-0_11-0-0.11.0-3.1 libixion-0_11-0-debuginfo-0.11.0-3.1 libixion-debugsource-0.11.0-3.1 libixion-devel-0.11.0-3.1 libixion-python3-0.11.0-3.1 libixion-python3-debuginfo-0.11.0-3.1 libixion-tools-0.11.0-3.1 libixion-tools-debuginfo-0.11.0-3.1 liborcus-0_11-0-0.11.0-4.1 liborcus-0_11-0-debuginfo-0.11.0-4.1 liborcus-debugsource-0.11.0-4.1 liborcus-devel-0.11.0-4.1 liborcus-python3-0.11.0-4.1 liborcus-python3-debuginfo-0.11.0-4.1 liborcus-tools-0.11.0-4.1 liborcus-tools-debuginfo-0.11.0-4.1 libreoffice-5.1.3.2-8.1 libreoffice-base-5.1.3.2-8.1 libreoffice-base-debuginfo-5.1.3.2-8.1 libreoffice-base-drivers-mysql-5.1.3.2-8.1 libreoffice-base-drivers-mysql-debuginfo-5.1.3.2-8.1 libreoffice-base-drivers-postgresql-5.1.3.2-8.1 libreoffice-base-drivers-postgresql-debuginfo-5.1.3.2-8.1 libreoffice-calc-5.1.3.2-8.1 libreoffice-calc-debuginfo-5.1.3.2-8.1 libreoffice-calc-extensions-5.1.3.2-8.1 libreoffice-debuginfo-5.1.3.2-8.1 libreoffice-debugsource-5.1.3.2-8.1 libreoffice-draw-5.1.3.2-8.1 libreoffice-draw-debuginfo-5.1.3.2-8.1 libreoffice-filters-optional-5.1.3.2-8.1 libreoffice-gnome-5.1.3.2-8.1 libreoffice-gnome-debuginfo-5.1.3.2-8.1 libreoffice-gtk3-5.1.3.2-8.1 libreoffice-gtk3-debuginfo-5.1.3.2-8.1 libreoffice-impress-5.1.3.2-8.1 libreoffice-impress-debuginfo-5.1.3.2-8.1 libreoffice-kde4-5.1.3.2-8.1 libreoffice-kde4-debuginfo-5.1.3.2-8.1 libreoffice-mailmerge-5.1.3.2-8.1 libreoffice-math-5.1.3.2-8.1 libreoffice-math-debuginfo-5.1.3.2-8.1 libreoffice-officebean-5.1.3.2-8.1 libreoffice-officebean-debuginfo-5.1.3.2-8.1 libreoffice-pyuno-5.1.3.2-8.1 libreoffice-pyuno-debuginfo-5.1.3.2-8.1 libreoffice-sdk-5.1.3.2-8.1 libreoffice-sdk-debuginfo-5.1.3.2-8.1 libreoffice-sdk-doc-5.1.3.2-8.1 libreoffice-writer-5.1.3.2-8.1 libreoffice-writer-debuginfo-5.1.3.2-8.1 libreoffice-writer-extensions-5.1.3.2-8.1 libreofficekit-5.1.3.2-8.1 libreofficekit-devel-5.1.3.2-8.1 libvisio-0_1-1-0.1.5-3.1 libvisio-0_1-1-debuginfo-0.1.5-3.1 libvisio-debugsource-0.1.5-3.1 libvisio-devel-0.1.5-3.1 libvisio-tools-0.1.5-3.1 libvisio-tools-debuginfo-0.1.5-3.1 libwps-0_4-4-0.4.2-3.1 libwps-0_4-4-debuginfo-0.4.2-3.1 libwps-debugsource-0.4.2-3.1 libwps-devel-0.4.2-3.1 libwps-tools-0.4.2-3.1 libwps-tools-debuginfo-0.4.2-3.1 myspell-dictionaries-20160511-4.1 myspell-lightproof-en-20160511-4.1 myspell-lightproof-hu_HU-20160511-4.1 myspell-lightproof-pt_BR-20160511-4.1 myspell-lightproof-ru_RU-20160511-4.1 - openSUSE Leap 42.1 (noarch): libetonyek-devel-doc-0.1.6-3.2 libreoffice-branding-upstream-5.1.3.2-8.1 libreoffice-gdb-pretty-printers-5.1.3.2-8.1 libreoffice-glade-5.1.3.2-8.1 libreoffice-icon-theme-breeze-5.1.3.2-8.1 libreoffice-icon-theme-galaxy-5.1.3.2-8.1 libreoffice-icon-theme-hicontrast-5.1.3.2-8.1 libreoffice-icon-theme-oxygen-5.1.3.2-8.1 libreoffice-icon-theme-sifr-5.1.3.2-8.1 libreoffice-icon-theme-tango-5.1.3.2-8.1 libreoffice-l10n-af-5.1.3.2-8.1 libreoffice-l10n-ar-5.1.3.2-8.1 libreoffice-l10n-as-5.1.3.2-8.1 libreoffice-l10n-bg-5.1.3.2-8.1 libreoffice-l10n-bn-5.1.3.2-8.1 libreoffice-l10n-br-5.1.3.2-8.1 libreoffice-l10n-ca-5.1.3.2-8.1 libreoffice-l10n-cs-5.1.3.2-8.1 libreoffice-l10n-cy-5.1.3.2-8.1 libreoffice-l10n-da-5.1.3.2-8.1 libreoffice-l10n-de-5.1.3.2-8.1 libreoffice-l10n-dz-5.1.3.2-8.1 libreoffice-l10n-el-5.1.3.2-8.1 libreoffice-l10n-en-5.1.3.2-8.1 libreoffice-l10n-es-5.1.3.2-8.1 libreoffice-l10n-et-5.1.3.2-8.1 libreoffice-l10n-eu-5.1.3.2-8.1 libreoffice-l10n-fa-5.1.3.2-8.1 libreoffice-l10n-fi-5.1.3.2-8.1 libreoffice-l10n-fr-5.1.3.2-8.1 libreoffice-l10n-ga-5.1.3.2-8.1 libreoffice-l10n-gl-5.1.3.2-8.1 libreoffice-l10n-gu-5.1.3.2-8.1 libreoffice-l10n-he-5.1.3.2-8.1 libreoffice-l10n-hi-5.1.3.2-8.1 libreoffice-l10n-hr-5.1.3.2-8.1 libreoffice-l10n-hu-5.1.3.2-8.1 libreoffice-l10n-it-5.1.3.2-8.1 libreoffice-l10n-ja-5.1.3.2-8.1 libreoffice-l10n-kk-5.1.3.2-8.1 libreoffice-l10n-kn-5.1.3.2-8.1 libreoffice-l10n-ko-5.1.3.2-8.1 libreoffice-l10n-lt-5.1.3.2-8.1 libreoffice-l10n-lv-5.1.3.2-8.1 libreoffice-l10n-mai-5.1.3.2-8.1 libreoffice-l10n-ml-5.1.3.2-8.1 libreoffice-l10n-mr-5.1.3.2-8.1 libreoffice-l10n-nb-5.1.3.2-8.1 libreoffice-l10n-nl-5.1.3.2-8.1 libreoffice-l10n-nn-5.1.3.2-8.1 libreoffice-l10n-nr-5.1.3.2-8.1 libreoffice-l10n-nso-5.1.3.2-8.1 libreoffice-l10n-or-5.1.3.2-8.1 libreoffice-l10n-pa-5.1.3.2-8.1 libreoffice-l10n-pl-5.1.3.2-8.1 libreoffice-l10n-pt-BR-5.1.3.2-8.1 libreoffice-l10n-pt-PT-5.1.3.2-8.1 libreoffice-l10n-ro-5.1.3.2-8.1 libreoffice-l10n-ru-5.1.3.2-8.1 libreoffice-l10n-si-5.1.3.2-8.1 libreoffice-l10n-sk-5.1.3.2-8.1 libreoffice-l10n-sl-5.1.3.2-8.1 libreoffice-l10n-sr-5.1.3.2-8.1 libreoffice-l10n-ss-5.1.3.2-8.1 libreoffice-l10n-st-5.1.3.2-8.1 libreoffice-l10n-sv-5.1.3.2-8.1 libreoffice-l10n-ta-5.1.3.2-8.1 libreoffice-l10n-te-5.1.3.2-8.1 libreoffice-l10n-th-5.1.3.2-8.1 libreoffice-l10n-tn-5.1.3.2-8.1 libreoffice-l10n-tr-5.1.3.2-8.1 libreoffice-l10n-ts-5.1.3.2-8.1 libreoffice-l10n-uk-5.1.3.2-8.1 libreoffice-l10n-ve-5.1.3.2-8.1 libreoffice-l10n-xh-5.1.3.2-8.1 libreoffice-l10n-zh-Hans-5.1.3.2-8.1 libreoffice-l10n-zh-Hant-5.1.3.2-8.1 libreoffice-l10n-zu-5.1.3.2-8.1 libvisio-devel-doc-0.1.5-3.1 mdds-1_0-devel-1.1.0-2.1 myspell-af_NA-20160511-4.1 myspell-af_ZA-20160511-4.1 myspell-an-20160511-4.1 myspell-an_ES-20160511-4.1 myspell-ar-20160511-4.1 myspell-ar_AE-20160511-4.1 myspell-ar_BH-20160511-4.1 myspell-ar_DZ-20160511-4.1 myspell-ar_EG-20160511-4.1 myspell-ar_IQ-20160511-4.1 myspell-ar_JO-20160511-4.1 myspell-ar_KW-20160511-4.1 myspell-ar_LB-20160511-4.1 myspell-ar_LY-20160511-4.1 myspell-ar_MA-20160511-4.1 myspell-ar_OM-20160511-4.1 myspell-ar_QA-20160511-4.1 myspell-ar_SA-20160511-4.1 myspell-ar_SD-20160511-4.1 myspell-ar_SY-20160511-4.1 myspell-ar_TN-20160511-4.1 myspell-ar_YE-20160511-4.1 myspell-be_BY-20160511-4.1 myspell-bg_BG-20160511-4.1 myspell-bn_BD-20160511-4.1 myspell-bn_IN-20160511-4.1 myspell-br_FR-20160511-4.1 myspell-bs-20160511-4.1 myspell-bs_BA-20160511-4.1 myspell-ca-20160511-4.1 myspell-ca_AD-20160511-4.1 myspell-ca_ES-20160511-4.1 myspell-ca_ES_valencia-20160511-4.1 myspell-ca_FR-20160511-4.1 myspell-ca_IT-20160511-4.1 myspell-cs_CZ-20160511-4.1 myspell-da_DK-20160511-4.1 myspell-de-20160511-4.1 myspell-de_AT-20160511-4.1 myspell-de_CH-20160511-4.1 myspell-de_DE-20160511-4.1 myspell-el_GR-20160511-4.1 myspell-en-20160511-4.1 myspell-en_AU-20160511-4.1 myspell-en_BS-20160511-4.1 myspell-en_BZ-20160511-4.1 myspell-en_CA-20160511-4.1 myspell-en_GB-20160511-4.1 myspell-en_GH-20160511-4.1 myspell-en_IE-20160511-4.1 myspell-en_IN-20160511-4.1 myspell-en_JM-20160511-4.1 myspell-en_MW-20160511-4.1 myspell-en_NA-20160511-4.1 myspell-en_NZ-20160511-4.1 myspell-en_PH-20160511-4.1 myspell-en_TT-20160511-4.1 myspell-en_US-20160511-4.1 myspell-en_ZA-20160511-4.1 myspell-en_ZW-20160511-4.1 myspell-es-20160511-4.1 myspell-es_AR-20160511-4.1 myspell-es_BO-20160511-4.1 myspell-es_CL-20160511-4.1 myspell-es_CO-20160511-4.1 myspell-es_CR-20160511-4.1 myspell-es_CU-20160511-4.1 myspell-es_DO-20160511-4.1 myspell-es_EC-20160511-4.1 myspell-es_ES-20160511-4.1 myspell-es_GT-20160511-4.1 myspell-es_HN-20160511-4.1 myspell-es_MX-20160511-4.1 myspell-es_NI-20160511-4.1 myspell-es_PA-20160511-4.1 myspell-es_PE-20160511-4.1 myspell-es_PR-20160511-4.1 myspell-es_PY-20160511-4.1 myspell-es_SV-20160511-4.1 myspell-es_UY-20160511-4.1 myspell-es_VE-20160511-4.1 myspell-et_EE-20160511-4.1 myspell-fr_BE-20160511-4.1 myspell-fr_CA-20160511-4.1 myspell-fr_CH-20160511-4.1 myspell-fr_FR-20160511-4.1 myspell-fr_LU-20160511-4.1 myspell-fr_MC-20160511-4.1 myspell-gd_GB-20160511-4.1 myspell-gl-20160511-4.1 myspell-gl_ES-20160511-4.1 myspell-gu_IN-20160511-4.1 myspell-gug-20160511-4.1 myspell-gug_PY-20160511-4.1 myspell-he_IL-20160511-4.1 myspell-hi_IN-20160511-4.1 myspell-hr_HR-20160511-4.1 myspell-hu_HU-20160511-4.1 myspell-is-20160511-4.1 myspell-is_IS-20160511-4.1 myspell-it_IT-20160511-4.1 myspell-kmr_Latn-20160511-4.1 myspell-kmr_Latn_SY-20160511-4.1 myspell-kmr_Latn_TR-20160511-4.1 myspell-lo_LA-20160511-4.1 myspell-lt_LT-20160511-4.1 myspell-lv_LV-20160511-4.1 myspell-nb_NO-20160511-4.1 myspell-ne_NP-20160511-4.1 myspell-nl_BE-20160511-4.1 myspell-nl_NL-20160511-4.1 myspell-nn_NO-20160511-4.1 myspell-no-20160511-4.1 myspell-oc_FR-20160511-4.1 myspell-pl_PL-20160511-4.1 myspell-pt_AO-20160511-4.1 myspell-pt_BR-20160511-4.1 myspell-pt_PT-20160511-4.1 myspell-ro-20160511-4.1 myspell-ro_RO-20160511-4.1 myspell-ru_RU-20160511-4.1 myspell-si_LK-20160511-4.1 myspell-sk_SK-20160511-4.1 myspell-sl_SI-20160511-4.1 myspell-sr-20160511-4.1 myspell-sr_CS-20160511-4.1 myspell-sr_Latn_CS-20160511-4.1 myspell-sr_Latn_RS-20160511-4.1 myspell-sr_RS-20160511-4.1 myspell-sv_FI-20160511-4.1 myspell-sv_SE-20160511-4.1 myspell-sw_TZ-20160511-4.1 myspell-te-20160511-4.1 myspell-te_IN-20160511-4.1 myspell-th_TH-20160511-4.1 myspell-uk_UA-20160511-4.1 myspell-vi-20160511-4.1 myspell-vi_VN-20160511-4.1 myspell-zu_ZA-20160511-4.1 - openSUSE Leap 42.1 (x86_64): hunspell-32bit-1.3.2-5.1 hunspell-debuginfo-32bit-1.3.2-5.1 hunspell-devel-32bit-1.3.2-5.1 libhyphen0-32bit-2.8.8-6.1 libhyphen0-debuginfo-32bit-2.8.8-6.1 References: https://www.suse.com/security/cve/CVE-2016-0794.html https://www.suse.com/security/cve/CVE-2016-0795.html https://bugzilla.suse.com/718113 https://bugzilla.suse.com/856729 https://bugzilla.suse.com/939998 https://bugzilla.suse.com/945443 https://bugzilla.suse.com/945445 https://bugzilla.suse.com/955832 https://bugzilla.suse.com/965294 https://bugzilla.suse.com/965296 https://bugzilla.suse.com/967014 https://bugzilla.suse.com/967015 https://bugzilla.suse.com/977784

1 0

openSUSE-SU-2016:1802-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 14 Jul '16

14 Jul '16

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1802-1 Rating: important References: #988579 Cross-References: CVE-2016-4172 CVE-2016-4173 CVE-2016-4174 CVE-2016-4175 CVE-2016-4176 CVE-2016-4177 CVE-2016-4178 CVE-2016-4179 CVE-2016-4180 CVE-2016-4181 CVE-2016-4182 CVE-2016-4183 CVE-2016-4184 CVE-2016-4185 CVE-2016-4186 CVE-2016-4187 CVE-2016-4188 CVE-2016-4189 CVE-2016-4190 CVE-2016-4217 CVE-2016-4218 CVE-2016-4219 CVE-2016-4220 CVE-2016-4221 CVE-2016-4222 CVE-2016-4223 CVE-2016-4224 CVE-2016-4225 CVE-2016-4226 CVE-2016-4227 CVE-2016-4228 CVE-2016-4229 CVE-2016-4230 CVE-2016-4231 CVE-2016-4232 CVE-2016-4233 CVE-2016-4234 CVE-2016-4235 CVE-2016-4236 CVE-2016-4237 CVE-2016-4238 CVE-2016-4239 CVE-2016-4240 CVE-2016-4241 CVE-2016-4242 CVE-2016-4243 CVE-2016-4244 CVE-2016-4245 CVE-2016-4246 CVE-2016-4247 CVE-2016-4248 CVE-2016-4249 Affected Products: openSUSE 13.1 NonFree ______________________________________________________________________________ An update that fixes 52 vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.632 to fix many security issues tracked under the upstream advisory APSB16-25, allowing remote attackers to execute arbitrary code when delivering specially crafted Flash content. The following vulnerabilities were fixed: - CVE-2016-4172: memory corruption vulnerability that could lead to code execution - CVE-2016-4173: use-after-free vulnerability that could lead to code execution - CVE-2016-4174: use-after-free vulnerability that could lead to code execution - CVE-2016-4175: memory corruption vulnerability that could lead to code execution - CVE-2016-4176: stack corruption vulnerability that could lead to code execution - CVE-2016-4177: stack corruption vulnerability that could lead to code execution - CVE-2016-4178: security bypass vulnerability that could lead to information disclosure - CVE-2016-4179: memory corruption vulnerability that could lead to code execution - CVE-2016-4180: memory corruption vulnerability that could lead to code execution - CVE-2016-4181: memory corruption vulnerability that could lead to code execution - CVE-2016-4182: memory corruption vulnerability that could lead to code execution - CVE-2016-4183: memory corruption vulnerability that could lead to code execution - CVE-2016-4184: memory corruption vulnerability that could lead to code execution - CVE-2016-4185: memory corruption vulnerability that could lead to code execution - CVE-2016-4186: memory corruption vulnerability that could lead to code execution - CVE-2016-4187: memory corruption vulnerability that could lead to code execution - CVE-2016-4188: memory corruption vulnerability that could lead to code execution - CVE-2016-4189: memory corruption vulnerability that could lead to code execution - CVE-2016-4190: memory corruption vulnerability that could lead to code execution - CVE-2016-4217: memory corruption vulnerability that could lead to code execution - CVE-2016-4218: memory corruption vulnerability that could lead to code execution - CVE-2016-4219: memory corruption vulnerability that could lead to code execution - CVE-2016-4220: memory corruption vulnerability that could lead to code execution - CVE-2016-4221: memory corruption vulnerability that could lead to code execution - CVE-2016-4222: use-after-free vulnerability that could lead to code execution - CVE-2016-4223: type confusion vulnerability that could lead to code execution - CVE-2016-4224: type confusion vulnerability that could lead to code execution - CVE-2016-4225: type confusion vulnerability that could lead to code execution - CVE-2016-4226: use-after-free vulnerability that could lead to code execution - CVE-2016-4227: use-after-free vulnerability that could lead to code execution - CVE-2016-4228: use-after-free vulnerability that could lead to code execution - CVE-2016-4229: use-after-free vulnerability that could lead to code execution - CVE-2016-4230: use-after-free vulnerability that could lead to code execution - CVE-2016-4231: use-after-free vulnerability that could lead to code execution - CVE-2016-4232: memory leak vulnerability - CVE-2016-4233: memory corruption vulnerability that could lead to code execution - CVE-2016-4234: memory corruption vulnerability that could lead to code execution - CVE-2016-4235: memory corruption vulnerability that could lead to code execution - CVE-2016-4236: memory corruption vulnerability that could lead to code execution - CVE-2016-4237: memory corruption vulnerability that could lead to code execution - CVE-2016-4238: memory corruption vulnerability that could lead to code execution - CVE-2016-4239: memory corruption vulnerability that could lead to code execution - CVE-2016-4240: memory corruption vulnerability that could lead to code execution - CVE-2016-4241: memory corruption vulnerability that could lead to code execution - CVE-2016-4242: memory corruption vulnerability that could lead to code execution - CVE-2016-4243: memory corruption vulnerability that could lead to code execution - CVE-2016-4244: memory corruption vulnerability that could lead to code execution - CVE-2016-4245: memory corruption vulnerability that could lead to code execution - CVE-2016-4246: memory corruption vulnerability that could lead to code execution - CVE-2016-4247: race condition vulnerability that could lead to information disclosure - CVE-2016-4248: use-after-free vulnerability that could lead to code execution - CVE-2016-4249: heap buffer overflow vulnerability that could lead to code execution Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1 NonFree: zypper in -t patch 2016-870=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 NonFree (i586 x86_64): flash-player-11.2.202.632-168.1 flash-player-gnome-11.2.202.632-168.1 flash-player-kde4-11.2.202.632-168.1 References: https://www.suse.com/security/cve/CVE-2016-4172.html https://www.suse.com/security/cve/CVE-2016-4173.html https://www.suse.com/security/cve/CVE-2016-4174.html https://www.suse.com/security/cve/CVE-2016-4175.html https://www.suse.com/security/cve/CVE-2016-4176.html https://www.suse.com/security/cve/CVE-2016-4177.html https://www.suse.com/security/cve/CVE-2016-4178.html https://www.suse.com/security/cve/CVE-2016-4179.html https://www.suse.com/security/cve/CVE-2016-4180.html https://www.suse.com/security/cve/CVE-2016-4181.html https://www.suse.com/security/cve/CVE-2016-4182.html https://www.suse.com/security/cve/CVE-2016-4183.html https://www.suse.com/security/cve/CVE-2016-4184.html https://www.suse.com/security/cve/CVE-2016-4185.html https://www.suse.com/security/cve/CVE-2016-4186.html https://www.suse.com/security/cve/CVE-2016-4187.html https://www.suse.com/security/cve/CVE-2016-4188.html https://www.suse.com/security/cve/CVE-2016-4189.html https://www.suse.com/security/cve/CVE-2016-4190.html https://www.suse.com/security/cve/CVE-2016-4217.html https://www.suse.com/security/cve/CVE-2016-4218.html https://www.suse.com/security/cve/CVE-2016-4219.html https://www.suse.com/security/cve/CVE-2016-4220.html https://www.suse.com/security/cve/CVE-2016-4221.html https://www.suse.com/security/cve/CVE-2016-4222.html https://www.suse.com/security/cve/CVE-2016-4223.html https://www.suse.com/security/cve/CVE-2016-4224.html https://www.suse.com/security/cve/CVE-2016-4225.html https://www.suse.com/security/cve/CVE-2016-4226.html https://www.suse.com/security/cve/CVE-2016-4227.html https://www.suse.com/security/cve/CVE-2016-4228.html https://www.suse.com/security/cve/CVE-2016-4229.html https://www.suse.com/security/cve/CVE-2016-4230.html https://www.suse.com/security/cve/CVE-2016-4231.html https://www.suse.com/security/cve/CVE-2016-4232.html https://www.suse.com/security/cve/CVE-2016-4233.html https://www.suse.com/security/cve/CVE-2016-4234.html https://www.suse.com/security/cve/CVE-2016-4235.html https://www.suse.com/security/cve/CVE-2016-4236.html https://www.suse.com/security/cve/CVE-2016-4237.html https://www.suse.com/security/cve/CVE-2016-4238.html https://www.suse.com/security/cve/CVE-2016-4239.html https://www.suse.com/security/cve/CVE-2016-4240.html https://www.suse.com/security/cve/CVE-2016-4241.html https://www.suse.com/security/cve/CVE-2016-4242.html https://www.suse.com/security/cve/CVE-2016-4243.html https://www.suse.com/security/cve/CVE-2016-4244.html https://www.suse.com/security/cve/CVE-2016-4245.html https://www.suse.com/security/cve/CVE-2016-4246.html https://www.suse.com/security/cve/CVE-2016-4247.html https://www.suse.com/security/cve/CVE-2016-4248.html https://www.suse.com/security/cve/CVE-2016-4249.html https://bugzilla.suse.com/988579

1 0