- openSUSE Updates

openSUSE-RU-2016:0177-1: moderate: Recommended update for efivar
by maintenance＠opensuse.org 20 Jan '16

20 Jan '16

openSUSE Recommended Update: Recommended update for efivar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0177-1 Rating: moderate References: #961664 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for efivar fixes the following issues: - Fix the return value checking of _get_common_guidname(). (boo#961664) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-66=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): efivar-0.20-5.1 efivar-debuginfo-0.20-5.1 efivar-debugsource-0.20-5.1 efivar-devel-0.20-5.1 libefivar0-0.20-5.1 libefivar0-debuginfo-0.20-5.1 References: https://bugzilla.suse.com/961664

1 0

openSUSE-RU-2016:0172-1: Recommended update for suse-xsl-stylesheets
by maintenance＠opensuse.org 19 Jan '16

19 Jan '16

openSUSE Recommended Update: Recommended update for suse-xsl-stylesheets ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0172-1 Rating: low References: #929630 #954969 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for suse-xsl-stylesheets provides the following fixes: - Fix wrong company name displayed in PDF builds. (bsc#929630) - Make sure that FOP does not cut off long admonitions. - Make sure that the string "Publication Date" is always capitalized. - Add Hungarian translation for "Publication Date" string. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-62=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): suse-xsl-stylesheets-2.0.3.2-9.1 References: https://bugzilla.suse.com/929630 https://bugzilla.suse.com/954969

1 0

openSUSE-RU-2016:0171-1: Recommended update for deltarpm
by maintenance＠opensuse.org 19 Jan '16

19 Jan '16

openSUSE Recommended Update: Recommended update for deltarpm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0171-1 Rating: low References: #948504 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for deltarpm provides the following fixes: - Fix off-by-one error in delta generation code which could lead to a segmentation fault in some rare circumstances. (bsc#948504) - Return error rather than crashing if memory allocation fails. - Add newline in missing prelink error. - Do not finish applydeltarpm jobs when in the middle of a request. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-63=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): deltarpm-3.6.1-7.1 deltarpm-debuginfo-3.6.1-7.1 deltarpm-debugsource-3.6.1-7.1 python-deltarpm-3.6.1-7.1 python-deltarpm-debuginfo-3.6.1-7.1 References: https://bugzilla.suse.com/948504

1 0

openSUSE-RU-2016:0170-1: moderate: Recommended update for kio
by maintenance＠opensuse.org 19 Jan '16

19 Jan '16

openSUSE Recommended Update: Recommended update for kio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0170-1 Rating: moderate References: #960500 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kio fixes the following issues: - Fixed display of file/directory modification time in kio_ftp (boo#960500, kde#354597) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-64=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kio-5.16.0-9.1 kio-core-5.16.0-9.1 kio-core-debuginfo-5.16.0-9.1 kio-debuginfo-5.16.0-9.1 kio-debugsource-5.16.0-9.1 kio-devel-5.16.0-9.1 kio-devel-debuginfo-5.16.0-9.1 - openSUSE Leap 42.1 (x86_64): kio-32bit-5.16.0-9.1 kio-core-32bit-5.16.0-9.1 kio-core-debuginfo-32bit-5.16.0-9.1 kio-debuginfo-32bit-5.16.0-9.1 kio-devel-32bit-5.16.0-9.1 kio-devel-debuginfo-32bit-5.16.0-9.1 - openSUSE Leap 42.1 (noarch): kio-lang-5.16.0-9.1 References: https://bugzilla.suse.com/960500

1 0

openSUSE-SU-2016:0163-1: moderate: Security update for perl-Module-Signature
by opensuse-security＠opensuse.org 19 Jan '16

19 Jan '16

openSUSE Security Update: Security update for perl-Module-Signature ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0163-1 Rating: moderate References: #928382 Cross-References: CVE-2015-3406 CVE-2015-3407 CVE-2015-3408 CVE-2015-3409 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update to perl-Module-Signature 0.79 fixes the following security issues: * More protection of @INC from relative paths. (CVE-2015-3409) * Fix GPG signature parsing logic. (CVE-2015-3406) * MANIFEST.SKIP is no longer consulted unless --skip is given. (CVE-2015-3407) * Properly use open() modes to avoid injection attacks. (CVE-2015-3408) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-61=1 - openSUSE 13.1: zypper in -t patch openSUSE-2016-61=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): perl-Module-Signature-0.79-4.4.1 - openSUSE 13.1 (noarch): perl-Module-Signature-0.79-2.4.1 References: https://www.suse.com/security/cve/CVE-2015-3406.html https://www.suse.com/security/cve/CVE-2015-3407.html https://www.suse.com/security/cve/CVE-2015-3408.html https://www.suse.com/security/cve/CVE-2015-3409.html https://bugzilla.suse.com/928382

1 0

openSUSE-SU-2016:0162-1: moderate: Security update for mbedtls
by opensuse-security＠opensuse.org 19 Jan '16

19 Jan '16

openSUSE Security Update: Security update for mbedtls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0162-1 Rating: moderate References: #961284 #961290 Cross-References: CVE-2015-7575 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update to mbedtls 1.3.16 fixes the following security issues: * CVE-2015-7575: Disables by default MD5 handshake signatures in TLS 1.2 to prevent the SLOTH attack on TLS 1.2 server authentication (boo#961284) * boo#961290: potential double free during certificate generation Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-59=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libmbedtls9-1.3.16-9.1 libmbedtls9-debuginfo-1.3.16-9.1 mbedtls-debugsource-1.3.16-9.1 mbedtls-devel-1.3.16-9.1 - openSUSE Leap 42.1 (x86_64): libmbedtls9-32bit-1.3.16-9.1 libmbedtls9-debuginfo-32bit-1.3.16-9.1 References: https://www.suse.com/security/cve/CVE-2015-7575.html https://bugzilla.suse.com/961284 https://bugzilla.suse.com/961290

1 0

openSUSE-SU-2016:0161-1: moderate: Security update for polarssl
by opensuse-security＠opensuse.org 19 Jan '16

19 Jan '16

openSUSE Security Update: Security update for polarssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0161-1 Rating: moderate References: #961284 #961290 Cross-References: CVE-2015-7575 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for polarssl fixes the following issues: * CVE-2015-7575: Disables by default MD5 handshake signatures in TLS 1.2 to prevent the SLOTH attack on TLS 1.2 server authentication (boo#961284) * boo#961290: potential double free during certificate generation Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-60=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libpolarssl7-1.3.9-14.1 libpolarssl7-debuginfo-1.3.9-14.1 polarssl-devel-1.3.9-14.1 References: https://www.suse.com/security/cve/CVE-2015-7575.html https://bugzilla.suse.com/961284 https://bugzilla.suse.com/961290

1 0

openSUSE-RU-2016:0158-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 18 Jan '16

18 Jan '16

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0158-1 Rating: moderate References: #961439 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xorg-x11-server fixes the following issues: - Only initialize pointer when matched (boo#961439). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-58=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-58=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xorg-x11-server-7.6_1.17.2-12.1 xorg-x11-server-debuginfo-7.6_1.17.2-12.1 xorg-x11-server-debugsource-7.6_1.17.2-12.1 xorg-x11-server-extra-7.6_1.17.2-12.1 xorg-x11-server-extra-debuginfo-7.6_1.17.2-12.1 xorg-x11-server-sdk-7.6_1.17.2-12.1 xorg-x11-server-source-7.6_1.17.2-12.1 - openSUSE 13.2 (i586 x86_64): xorg-x11-server-7.6_1.16.1-28.1 xorg-x11-server-debuginfo-7.6_1.16.1-28.1 xorg-x11-server-debugsource-7.6_1.16.1-28.1 xorg-x11-server-extra-7.6_1.16.1-28.1 xorg-x11-server-extra-debuginfo-7.6_1.16.1-28.1 xorg-x11-server-sdk-7.6_1.16.1-28.1 References: https://bugzilla.suse.com/961439

1 0

openSUSE-RU-2016:0157-1: moderate: Recommended update for mate-menu and mate-tweak
by maintenance＠opensuse.org 18 Jan '16

18 Jan '16

openSUSE Recommended Update: Recommended update for mate-menu and mate-tweak ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0157-1 Rating: moderate References: #959024 #959025 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for mate-menu and mate-tweak fixes the following issues: - mate-menu + Add missing lsb-release and python-gobject dependencies (boo#959024). + Fix crash in mate-menu configurator. + Update to 5.6.6. * Fix local code injection - mate-tweak + Update to 3.5.3 (boo#959025) * Added Keyboard LED Indicator. * Added capability to enable/disable animations. * Fixed non-translatable strings. * Updated translations. + Add missing python3-gobject and mate-panel dependencies. + Do not show Python warnings if no dock is present. + Use Mate-menu Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-57=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): mate-menu-5.6.6-4.1 mate-menu-lang-5.6.6-4.1 mate-tweak-3.5.3-3.1 mate-tweak-lang-3.5.3-3.1 References: https://bugzilla.suse.com/959024 https://bugzilla.suse.com/959025

1 0

openSUSE-RU-2016:0154-1: moderate: Recommended update for xf86-video-intel
by maintenance＠opensuse.org 18 Jan '16

18 Jan '16

openSUSE Recommended Update: Recommended update for xf86-video-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0154-1 Rating: moderate References: #942158 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xf86-video-intel fixes the following issues: - Avoid SIGBUS due to kernel issues (boo#942158). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-54=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xf86-video-intel-2.99.916-24.1 xf86-video-intel-debuginfo-2.99.916-24.1 xf86-video-intel-debugsource-2.99.916-24.1 - openSUSE 13.2 (x86_64): xf86-video-intel-32bit-2.99.916-24.1 xf86-video-intel-debuginfo-32bit-2.99.916-24.1 References: https://bugzilla.suse.com/942158

1 0