September 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:2321-1: moderate: Security update for tiff
by opensuse-security＠opensuse.org 16 Sep '16

16 Sep '16

openSUSE Security Update: Security update for tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2321-1 Rating: moderate References: #964225 #973340 #984808 #984831 #984837 #984842 #987351 Cross-References: CVE-2015-8781 CVE-2015-8782 CVE-2015-8783 CVE-2016-3186 CVE-2016-5314 CVE-2016-5316 CVE-2016-5317 CVE-2016-5320 CVE-2016-5875 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for tiff fixes the following issues: * CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds writes for invalid images (bsc#964225) * CVE-2016-3186: Buffer overflow in gif2tiff (bnc#973340). * CVE-2016-5875: heap-based buffer overflow when using the PixarLog compressionformat (bsc#987351) * CVE-2016-5316: Out-of-bounds read in PixarLogCleanup() function in tif_pixarlog.c (bsc#984837) * CVE-2016-5314: Out-of-bounds write in PixarLogDecode() function (bsc#984831) * CVE-2016-5317: Out-of-bounds write in PixarLogDecode() function in libtiff.so (bsc#984842) * CVE-2016-5320: Out-of-bounds write in PixarLogDecode() function in tif_pixarlog.c (bsc#984808) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1089=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libtiff-devel-4.0.6-6.1 libtiff5-4.0.6-6.1 libtiff5-debuginfo-4.0.6-6.1 tiff-4.0.6-6.1 tiff-debuginfo-4.0.6-6.1 tiff-debugsource-4.0.6-6.1 - openSUSE Leap 42.1 (x86_64): libtiff-devel-32bit-4.0.6-6.1 libtiff5-32bit-4.0.6-6.1 libtiff5-debuginfo-32bit-4.0.6-6.1 References: https://www.suse.com/security/cve/CVE-2015-8781.html https://www.suse.com/security/cve/CVE-2015-8782.html https://www.suse.com/security/cve/CVE-2015-8783.html https://www.suse.com/security/cve/CVE-2016-3186.html https://www.suse.com/security/cve/CVE-2016-5314.html https://www.suse.com/security/cve/CVE-2016-5316.html https://www.suse.com/security/cve/CVE-2016-5317.html https://www.suse.com/security/cve/CVE-2016-5320.html https://www.suse.com/security/cve/CVE-2016-5875.html https://bugzilla.suse.com/964225 https://bugzilla.suse.com/973340 https://bugzilla.suse.com/984808 https://bugzilla.suse.com/984831 https://bugzilla.suse.com/984837 https://bugzilla.suse.com/984842 https://bugzilla.suse.com/987351

1 0

openSUSE-SU-2016:2320-1: moderate: Security update for opera
by opensuse-security＠opensuse.org 16 Sep '16

16 Sep '16

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2320-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1:NonFree ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update to opera 39.0.2256.71 fixes the following issues: - Deadlock when closing a bubble opened by touch - Crash in opera::FreedomProxyConfigurationImpl::RetrieveProxyServers - No temporary or permanent error when unable to connect to API server - Some requests bypass the proxy on startup (again) - Hints are cut off if they fall outside the main window - SE-Proxy-Authorization header revealed for HTTPS - Whitelist some AV software certificates - Store custom user agent postfix in registry The bundled Chromium was updated to 52.0.2743.116. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1:NonFree: zypper in -t patch openSUSE-2016-1088=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1:NonFree (x86_64): opera-39.0.2256.71-25.1 References:

1 0

openSUSE-SU-2016:2314-1: moderate: Security update for virtualbox
by opensuse-security＠opensuse.org 15 Sep '16

15 Sep '16

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2314-1 Rating: moderate References: #983927 #990369 #990370 Cross-References: CVE-2016-3597 CVE-2016-3612 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: Virtualbox was updated to 5.0.26 to fix the following issues: This update fixes various security issues. - CVE-2016-3612: An unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.22 allowed remote attackers to affect confidentiality via vectors related to Core. (boo#990369). - CVE-2016-3597: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.26 allows local users to affect availability via vectors related to Core. (bsc#990370) - Update the host <-> guest KMP conflict dependencies to no longer refer to the old name (boo#983927). This is a maintenance release. The following items were fixed and/or added: - VMM: fixed a bug in the task switching code (ticket #15571) - GUI: allow to overwrite an existing file when saving a log file (bug #8034) - GUI: fixed screenshot if the VM is started in separate mode - Audio: improved recording from USB headsets and other sources which might need conversion of captured data - Audio: fixed regression of not having any audio available on Solaris hosts - VGA: fixed an occasional hang when running Windows guests with 3D enabled - Storage: fixed a possible endless reconnect loop for the iSCSI backend if connecting to the target succeeds but further I/O requests cause a disconnect - Storage: fixed a bug when resizing certain VDI images which resulted in using the whole disk on the host (bug #15582) - EFI: fixed access to devices attached to SATA port 2 and higher (bug #15607) - API: fixed video recording with VBoxHeadless (bug #15443) - API: don't crash if there is no graphics controller configured (bug #15628) - VBoxSVC: fixed several memory leaks when handling .dmg images Version bump to 5.0.24 (released 2016-06-28 by Oracle) This is a maintenance release. The following items were fixed and/or added: - VMM: reverted to the old I/O-APIC code for now to fix certain regressions with 5.0.22 (bug #15529). This means that the networking performance with certain guests will drop to the 5.0.20 level (bug #15295). One workaround is to disable GRO for Linux guests. - Main: when taking a screenshot, don't save garbage for blanked screens - NAT: correctly parse resolv.conf file with multiple separators (5.0.22 regression) - Storage: fixed a possible corruption of stream optimized VMDK images from VMware when opened in read/write mode for the first time - Audio: imlemented dynamic re-attaching of input/output devices on Mac OS X hosts - ACPI: notify the guest when the battery / AC state changes instead of relying on guest polling - Linux hosts: fixed VERR_VMM_SET_JMP_ABORTED_RESUME Guru Meditations on hosts with Linux 4.6 or later (bug #15439) Version bump to 5.0.22 (released 2016-06-16 by Oracle) This is a maintenance release. The following items were fixed and/or added: - VMM: fixes for certain Intel Atom hosts (bug #14915) - VMM: properly restore the complete FPU state for 32-bit guests on 64-bit hosts on Intel Sandy Bridge and Ivy Bridge CPUs - VMM: new I/O-APIC implementation fixing several bugs and improving the performance under certain conditions (bug #15295 and others) - VMM: fixed a potential Linux guest panic on AMD hosts - VMM: fixed a potential hang with 32-bit EFI guests on Intel CPUs (VT-x without unrestricted guest execution) - GUI: don't allow to start subsequent separate VM instances - GUI: raised upper limit for video capture screen resolution (bug #15432) - GUI: warn if the VM has less than 128MB VRAM configured and 3D enabled - Main: when monitoring DNS configuration changes on Windows hosts avoid false positives from competing DHCP renewals. This should fix NAT link flaps when host has multiple DHCP configured interfaces, in particular when the host uses OpnVPN. - Main: properly display an error message if the VRDE server cannot be enabled at runtime, for example because another service is using the same port - NAT: Initialize guest address guess for wildcard port-forwarding rules with default guest address (bug #15412) - VGA: fix for a problem which made certain legacy guests crash under certain conditions (bug #14811) - OVF: fixed import problems for some appliances using an AHCI controller created by 3rd party applications - SDK: reduced memory usage in the webservice Java bindings - Windows Additions: fixes to retain the guest display layout when resizing or disabling the guest monitors - Linux hosts: EL 6.8 fix (bug #15411) - Linux hosts: Linux 4.7 fix (bug #15459) - Linux Additions: Linux 4.7 fixes (bug #15444) - Linux Additions: fix for certain 32-bit guests (5.0.18 regression; bug #15320) - Linux Additions: fixed mouse pointer offset (5.0.18 regression; bug #15324) - Linux Additions: made old X.Org releases work again with kernels 3.11 and later (5.0.18 regression; bug #15319) - Linux Additions: fixed X.Org crash after hard guest reset (5.0.18 regression; bug #15354) - Linux Additions: don't stop the X11 setup if loading the shared folders module fails (5.0.18 regression) - Linux Additions: don't complain if the Drag and Drop service is not available on the host - Solaris Additions: added support for X.org 1.18 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1087=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): python-virtualbox-5.0.26-51.1 python-virtualbox-debuginfo-5.0.26-51.1 virtualbox-5.0.26-51.1 virtualbox-debuginfo-5.0.26-51.1 virtualbox-debugsource-5.0.26-51.1 virtualbox-devel-5.0.26-51.1 virtualbox-guest-kmp-default-5.0.26_k3.16.7_42-51.1 virtualbox-guest-kmp-default-debuginfo-5.0.26_k3.16.7_42-51.1 virtualbox-guest-kmp-desktop-5.0.26_k3.16.7_42-51.1 virtualbox-guest-kmp-desktop-debuginfo-5.0.26_k3.16.7_42-51.1 virtualbox-guest-tools-5.0.26-51.1 virtualbox-guest-tools-debuginfo-5.0.26-51.1 virtualbox-guest-x11-5.0.26-51.1 virtualbox-guest-x11-debuginfo-5.0.26-51.1 virtualbox-host-kmp-default-5.0.26_k3.16.7_42-51.1 virtualbox-host-kmp-default-debuginfo-5.0.26_k3.16.7_42-51.1 virtualbox-host-kmp-desktop-5.0.26_k3.16.7_42-51.1 virtualbox-host-kmp-desktop-debuginfo-5.0.26_k3.16.7_42-51.1 virtualbox-qt-5.0.26-51.1 virtualbox-qt-debuginfo-5.0.26-51.1 virtualbox-websrv-5.0.26-51.1 virtualbox-websrv-debuginfo-5.0.26-51.1 - openSUSE 13.2 (noarch): virtualbox-guest-desktop-icons-5.0.26-51.1 virtualbox-host-source-5.0.26-51.1 - openSUSE 13.2 (i586): virtualbox-guest-kmp-pae-5.0.26_k3.16.7_42-51.1 virtualbox-guest-kmp-pae-debuginfo-5.0.26_k3.16.7_42-51.1 virtualbox-host-kmp-pae-5.0.26_k3.16.7_42-51.1 virtualbox-host-kmp-pae-debuginfo-5.0.26_k3.16.7_42-51.1 References: https://www.suse.com/security/cve/CVE-2016-3597.html https://www.suse.com/security/cve/CVE-2016-3612.html https://bugzilla.suse.com/983927 https://bugzilla.suse.com/990369 https://bugzilla.suse.com/990370

1 0

openSUSE-SU-2016:2313-1: moderate: Security update for perl
by opensuse-security＠opensuse.org 15 Sep '16

15 Sep '16

openSUSE Security Update: Security update for perl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2313-1 Rating: moderate References: #928292 #932894 #967082 #984906 #987887 #988311 Cross-References: CVE-2015-8853 CVE-2016-1238 CVE-2016-2381 CVE-2016-6185 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves four vulnerabilities and has two fixes is now available. Description: This update for Perl fixes the following issues: - CVE-2016-6185: Xsloader looking at a "(eval)" directory. (bsc#988311) - CVE-2016-1238: Searching current directory for optional modules. (bsc#987887) - CVE-2015-8853: Regular expression engine hanging on bad utf8. (bsc) - CVE-2016-2381: Environment dup handling bug. (bsc#967082) - "Insecure dependency in require" error in taint mode. (bsc#984906) - Memory leak in 'use utf8' handling. (bsc#928292) - Missing lock prototype to the debugger. (bsc#932894) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1086=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): perl-5.18.2-5.1 perl-base-5.18.2-5.1 perl-base-debuginfo-5.18.2-5.1 perl-debuginfo-5.18.2-5.1 perl-debugsource-5.18.2-5.1 - openSUSE Leap 42.1 (x86_64): perl-32bit-5.18.2-5.1 perl-base-32bit-5.18.2-5.1 perl-base-debuginfo-32bit-5.18.2-5.1 perl-debuginfo-32bit-5.18.2-5.1 - openSUSE Leap 42.1 (noarch): perl-doc-5.18.2-5.1 References: https://www.suse.com/security/cve/CVE-2015-8853.html https://www.suse.com/security/cve/CVE-2016-1238.html https://www.suse.com/security/cve/CVE-2016-2381.html https://www.suse.com/security/cve/CVE-2016-6185.html https://bugzilla.suse.com/928292 https://bugzilla.suse.com/932894 https://bugzilla.suse.com/967082 https://bugzilla.suse.com/984906 https://bugzilla.suse.com/987887 https://bugzilla.suse.com/988311

1 0

openSUSE-SU-2016:2311-1: important: Recommended update for chromium
by opensuse-security＠opensuse.org 15 Sep '16

15 Sep '16

openSUSE Security Update: Recommended update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2311-1 Rating: important References: #998328 #998743 Cross-References: CVE-2016-5170 CVE-2016-5171 CVE-2016-5172 CVE-2016-5173 CVE-2016-5174 CVE-2016-5175 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: Chromium was updated to 53.0.2785.113 to fix a number of security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-5170: Use after free in Blink - CVE-2016-5171: Use after free in Blink - CVE-2016-5172: Arbitrary Memory Read in v8 - CVE-2016-5173: Extension resource access - CVE-2016-5174: Popup not correctly suppressed - CVE-2016-5175: Various fixes from internal audits, fuzzing and other initiatives. The following upstream fixes are included: - SPDY crasher fixes - Disable NV12 DXGI video on AMD - Forward --password-store switch to os_crypt - Tell the kernel to discard USB requests when they time out. - disallow WKBackForwardListItem navigations for pushState pages - arc: bluetooth: Fix advertised uuid - fix conflicting PendingIntent for stop button and swipe away The widevine plugin was re-enabled (boo#998328). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1084=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): chromedriver-53.0.2785.113-74.1 chromedriver-debuginfo-53.0.2785.113-74.1 chromium-53.0.2785.113-74.1 chromium-debuginfo-53.0.2785.113-74.1 chromium-desktop-gnome-53.0.2785.113-74.1 chromium-desktop-kde-53.0.2785.113-74.1 chromium-ffmpegsumo-53.0.2785.113-74.1 chromium-ffmpegsumo-debuginfo-53.0.2785.113-74.1 References: https://www.suse.com/security/cve/CVE-2016-5170.html https://www.suse.com/security/cve/CVE-2016-5171.html https://www.suse.com/security/cve/CVE-2016-5172.html https://www.suse.com/security/cve/CVE-2016-5173.html https://www.suse.com/security/cve/CVE-2016-5174.html https://www.suse.com/security/cve/CVE-2016-5175.html https://bugzilla.suse.com/998328 https://bugzilla.suse.com/998743

1 0

openSUSE-SU-2016:2310-1: important: Security update for chromium
by opensuse-security＠opensuse.org 15 Sep '16

15 Sep '16

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2310-1 Rating: important References: #998743 Cross-References: CVE-2016-5170 CVE-2016-5171 CVE-2016-5172 CVE-2016-5173 CVE-2016-5174 CVE-2016-5175 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: Chromium was updated to 53.0.2785.113 to fix a number of security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-5170: Use after free in Blink - CVE-2016-5171: Use after free in Blink - CVE-2016-5172: Arbitrary Memory Read in v8 - CVE-2016-5173: Extension resource access - CVE-2016-5174: Popup not correctly suppressed - CVE-2016-5175: Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1085=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): chromedriver-53.0.2785.113-123.1 chromedriver-debuginfo-53.0.2785.113-123.1 chromium-53.0.2785.113-123.1 chromium-debuginfo-53.0.2785.113-123.1 chromium-desktop-gnome-53.0.2785.113-123.1 chromium-desktop-kde-53.0.2785.113-123.1 chromium-ffmpegsumo-53.0.2785.113-123.1 chromium-ffmpegsumo-debuginfo-53.0.2785.113-123.1 References: https://www.suse.com/security/cve/CVE-2016-5170.html https://www.suse.com/security/cve/CVE-2016-5171.html https://www.suse.com/security/cve/CVE-2016-5172.html https://www.suse.com/security/cve/CVE-2016-5173.html https://www.suse.com/security/cve/CVE-2016-5174.html https://www.suse.com/security/cve/CVE-2016-5175.html https://bugzilla.suse.com/998743

1 0

openSUSE-SU-2016:2309-1: important: Recommended update for chromium
by opensuse-security＠opensuse.org 15 Sep '16

15 Sep '16

openSUSE Security Update: Recommended update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2309-1 Rating: important References: #998328 #998743 Cross-References: CVE-2016-5170 CVE-2016-5171 CVE-2016-5172 CVE-2016-5173 CVE-2016-5174 CVE-2016-5175 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: Chromium was updated to 53.0.2785.113 to fix a number of security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-5170: Use after free in Blink - CVE-2016-5171: Use after free in Blink - CVE-2016-5172: Arbitrary Memory Read in v8 - CVE-2016-5173: Extension resource access - CVE-2016-5174: Popup not correctly suppressed - CVE-2016-5175: Various fixes from internal audits, fuzzing and other initiatives. The following upstream fixes are included: - SPDY crasher fixes - Disable NV12 DXGI video on AMD - Forward --password-store switch to os_crypt - Tell the kernel to discard USB requests when they time out. - disallow WKBackForwardListItem navigations for pushState pages - arc: bluetooth: Fix advertised uuid - fix conflicting PendingIntent for stop button and swipe away The widevine plugin was re-enabled (boo#998328). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-1084=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-53.0.2785.113-100.1 chromedriver-debuginfo-53.0.2785.113-100.1 chromium-53.0.2785.113-100.1 chromium-debuginfo-53.0.2785.113-100.1 chromium-desktop-gnome-53.0.2785.113-100.1 chromium-desktop-kde-53.0.2785.113-100.1 chromium-ffmpegsumo-53.0.2785.113-100.1 chromium-ffmpegsumo-debuginfo-53.0.2785.113-100.1 References: https://www.suse.com/security/cve/CVE-2016-5170.html https://www.suse.com/security/cve/CVE-2016-5171.html https://www.suse.com/security/cve/CVE-2016-5172.html https://www.suse.com/security/cve/CVE-2016-5173.html https://www.suse.com/security/cve/CVE-2016-5174.html https://www.suse.com/security/cve/CVE-2016-5175.html https://bugzilla.suse.com/998328 https://bugzilla.suse.com/998743

1 0

openSUSE-SU-2016:2308-1: important: Recommended update for flash-player
by opensuse-security＠opensuse.org 14 Sep '16

14 Sep '16

openSUSE Security Update: Recommended update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2308-1 Rating: important References: #977664 #998589 Cross-References: CVE-2016-4182 CVE-2016-4237 CVE-2016-4238 CVE-2016-4271 CVE-2016-4272 CVE-2016-4274 CVE-2016-4275 CVE-2016-4276 CVE-2016-4277 CVE-2016-4278 CVE-2016-4279 CVE-2016-4280 CVE-2016-4281 CVE-2016-4282 CVE-2016-4283 CVE-2016-4284 CVE-2016-4285 CVE-2016-4287 CVE-2016-6921 CVE-2016-6922 CVE-2016-6923 CVE-2016-6924 CVE-2016-6925 CVE-2016-6926 CVE-2016-6927 CVE-2016-6929 CVE-2016-6930 CVE-2016-6931 CVE-2016-6932 Affected Products: openSUSE 13.2 NonFree ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: This update for flash-player fixes the following security issues (APSB16-29, boo#998589): * integer overflow vulnerability that could lead to code execution (CVE-2016-4287). * use-after-free vulnerabilities that could lead to code execution (CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, CVE-2016-6931, CVE-2016-6932) * security bypass vulnerabilities that could lead to information disclosure (CVE-2016-4271, CVE-2016-4277, CVE-2016-4278) * memory corruption vulnerabilities that could lead to code execution (CVE-2016-4182, CVE-2016-4237, CVE-2016-4238, CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, CVE-2016-6924) The package description was update to reflex that the stand-alone Flash is no longer provided on x86_64 architectures (boo#977664). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2 NonFree: zypper in -t patch openSUSE-2016-1083=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 NonFree (i586 x86_64): flash-player-11.2.202.635-2.108.1 flash-player-gnome-11.2.202.635-2.108.1 flash-player-kde4-11.2.202.635-2.108.1 References: https://www.suse.com/security/cve/CVE-2016-4182.html https://www.suse.com/security/cve/CVE-2016-4237.html https://www.suse.com/security/cve/CVE-2016-4238.html https://www.suse.com/security/cve/CVE-2016-4271.html https://www.suse.com/security/cve/CVE-2016-4272.html https://www.suse.com/security/cve/CVE-2016-4274.html https://www.suse.com/security/cve/CVE-2016-4275.html https://www.suse.com/security/cve/CVE-2016-4276.html https://www.suse.com/security/cve/CVE-2016-4277.html https://www.suse.com/security/cve/CVE-2016-4278.html https://www.suse.com/security/cve/CVE-2016-4279.html https://www.suse.com/security/cve/CVE-2016-4280.html https://www.suse.com/security/cve/CVE-2016-4281.html https://www.suse.com/security/cve/CVE-2016-4282.html https://www.suse.com/security/cve/CVE-2016-4283.html https://www.suse.com/security/cve/CVE-2016-4284.html https://www.suse.com/security/cve/CVE-2016-4285.html https://www.suse.com/security/cve/CVE-2016-4287.html https://www.suse.com/security/cve/CVE-2016-6921.html https://www.suse.com/security/cve/CVE-2016-6922.html https://www.suse.com/security/cve/CVE-2016-6923.html https://www.suse.com/security/cve/CVE-2016-6924.html https://www.suse.com/security/cve/CVE-2016-6925.html https://www.suse.com/security/cve/CVE-2016-6926.html https://www.suse.com/security/cve/CVE-2016-6927.html https://www.suse.com/security/cve/CVE-2016-6929.html https://www.suse.com/security/cve/CVE-2016-6930.html https://www.suse.com/security/cve/CVE-2016-6931.html https://www.suse.com/security/cve/CVE-2016-6932.html https://bugzilla.suse.com/977664 https://bugzilla.suse.com/998589

1 0

openSUSE-SU-2016:2304-1: moderate: Security update for mysql-connector-java
by opensuse-security＠opensuse.org 14 Sep '16

14 Sep '16

openSUSE Security Update: Security update for mysql-connector-java ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2304-1 Rating: moderate References: #927981 Cross-References: CVE-2015-2575 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: mysql-connector-java was updated to 5.1.35, fixing multiple bugs and a security issues. - CVE-2015-2575: Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J. (bnc#927981) Please see http://dev.mysql.com/doc/relnotes/connector-j/en/news-5-1.html This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1082=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): mysql-connector-java-5.1.35-6.1 References: https://www.suse.com/security/cve/CVE-2015-2575.html https://bugzilla.suse.com/927981

1 0

openSUSE-RU-2016:2299-1: moderate: Recommended update for NetworkManager-vpnc
by maintenance＠opensuse.org 13 Sep '16

13 Sep '16

openSUSE Recommended Update: Recommended update for NetworkManager-vpnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2299-1 Rating: moderate References: #997343 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 1.0.8 for NetworkManager-vpnc: - Move Requires: gnome-keyring from core package to gnome frontend package (boo#997343). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1081=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): NetworkManager-vpnc-1.0.8-3.1 NetworkManager-vpnc-debuginfo-1.0.8-3.1 NetworkManager-vpnc-debugsource-1.0.8-3.1 NetworkManager-vpnc-gnome-1.0.8-3.1 NetworkManager-vpnc-gnome-debuginfo-1.0.8-3.1 - openSUSE Leap 42.1 (noarch): NetworkManager-vpnc-lang-1.0.8-3.1 References: https://bugzilla.suse.com/997343

1 0