December 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2013:1957-1: moderate: update for MozillaThunderbird
by opensuse-security＠opensuse.org 25 Dec '13

25 Dec '13

openSUSE Security Update: update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1957-1 Rating: moderate References: #854370 Cross-References: CVE-2013-5609 CVE-2013-5610 CVE-2013-5613 CVE-2013-5615 CVE-2013-5616 CVE-2013-5618 CVE-2013-6629 CVE-2013-6630 CVE-2013-6671 CVE-2013-6673 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: - update to Thunderbird 24.2.0 (bnc#854370) * requires NSS 3.15.3.1 or higher * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610 Miscellaneous memory safety hazards * MFSA 2013-108/CVE-2013-5616 (bmo#938341) Use-after-free in event listeners * MFSA 2013-109/CVE-2013-5618 (bmo#926361) Use-after-free during Table Editing * MFSA 2013-111/CVE-2013-6671 (bmo#930281) Segmentation violation when replacing ordered list elements * MFSA 2013-113/CVE-2013-6673 (bmo#970380) Trust settings for built-in roots ignored during EV certificate validation * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449) Use-after-free in synthetic mouse movement * MFSA 2013-115/CVE-2013-5615 (bmo#929261) GetElementIC typed array stubs can be generated outside observed typesets * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693) JPEG information leak * MFSA 2013-117 (bmo#946351) Mis-issued ANSSI/DCSSI certificate (fixed via NSS 3.15.3.1) - update to Thunderbird 24.1.1 * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons * fix binary compatibility issues for patch level updates (bmo#927073) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-1024 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): MozillaThunderbird-24.2.0-49.63.1 MozillaThunderbird-buildsymbols-24.2.0-49.63.1 MozillaThunderbird-debuginfo-24.2.0-49.63.1 MozillaThunderbird-debugsource-24.2.0-49.63.1 MozillaThunderbird-devel-24.2.0-49.63.1 MozillaThunderbird-translations-common-24.2.0-49.63.1 MozillaThunderbird-translations-other-24.2.0-49.63.1 enigmail-1.6.0+24.2.0-49.63.1 References: http://support.novell.com/security/cve/CVE-2013-5609.html http://support.novell.com/security/cve/CVE-2013-5610.html http://support.novell.com/security/cve/CVE-2013-5613.html http://support.novell.com/security/cve/CVE-2013-5615.html http://support.novell.com/security/cve/CVE-2013-5616.html http://support.novell.com/security/cve/CVE-2013-5618.html http://support.novell.com/security/cve/CVE-2013-6629.html http://support.novell.com/security/cve/CVE-2013-6630.html http://support.novell.com/security/cve/CVE-2013-6671.html http://support.novell.com/security/cve/CVE-2013-6673.html https://bugzilla.novell.com/854370

1 0

openSUSE-SU-2013:1956-1: moderate: update for apache2-mod_nss
by opensuse-security＠opensuse.org 25 Dec '13

25 Dec '13

openSUSE Security Update: update for apache2-mod_nss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1956-1 Rating: moderate References: #847216 #853039 Cross-References: CVE-2013-4566 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: - mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566: If 'NSSVerifyClient none' is set in the server / vhost context (i.e. when server is configured to not request or require client certificate authentication on the initial connection), and client certificate authentication is expected to be required for a specific directory via 'NSSVerifyClient require' setting, mod_nss fails to properly require certificate authentication. Remote attacker can use this to access content of the restricted directories. [bnc#853039] - glue documentation added to /etc/apache2/conf.d/mod_nss.conf: * simultaneaous usage of mod_ssl and mod_nss * SNI concurrency * SUSE framework for apache configuration, Listen directive * module initialization - mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in or mod_nss.conf, respectively. This also leads to the removal of nss.conf.in specific chunks in mod_nss-negotiate.patch and mod_nss-tlsv1_1.patch . - mod_nss_migrate.pl conversion script added; not patched from source, but partially rewritten. - README-SUSE.txt added with step-by-step instructions on how to convert and manage certificates and keys, as well as a rationale about why mod_nss was included in SLES. - package ready for submission [bnc#847216] - generic cleanup of the package: - explicit Requires: to mozilla-nss >= 3.15.1, as TLS-1.2 support came with this version - this is the objective behind this version update of apache2-mod_nss. Tracker bug [bnc#847216] - change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid ambiguously interpreted name of directory. - merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if /etc/apache2/alias exists. - set explicit filemodes 640 for %post generated *.db files in /etc/apache2/mod_nss.d Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-1030 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): apache2-mod_nss-1.0.8-0.4.6.4.1 apache2-mod_nss-debuginfo-1.0.8-0.4.6.4.1 apache2-mod_nss-debugsource-1.0.8-0.4.6.4.1 References: http://support.novell.com/security/cve/CVE-2013-4566.html https://bugzilla.novell.com/847216 https://bugzilla.novell.com/853039

1 0

openSUSE-SU-2013:1955-1: moderate: aaa_base: fixed root users default group and /etc/shadow permissions
by opensuse-security＠opensuse.org 25 Dec '13

25 Dec '13

openSUSE Security Update: aaa_base: fixed root users default group and /etc/shadow permissions ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1955-1 Rating: moderate References: #843230 #851908 Cross-References: CVE-2013-3713 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: On systems installed via the Live Media that /etc/shadow file was readable by the "users" group, which was not intended. (bnc#843230, CVE-2013-3713) Reason for this was that the user "root" was put into the "users" group. Also a commandline completion bug was fixed: - Use only bash and readline defaults for fallback completion (bnc#851908) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-1031 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): aaa_base-13.1-16.26.1 aaa_base-debuginfo-13.1-16.26.1 aaa_base-debugsource-13.1-16.26.1 aaa_base-extras-13.1-16.26.1 aaa_base-malloccheck-13.1-16.26.1 References: http://support.novell.com/security/cve/CVE-2013-3713.html https://bugzilla.novell.com/843230 https://bugzilla.novell.com/851908

1 0

openSUSE-SU-2013:1954-1: important: Fixes a local vulnerability
by opensuse-security＠opensuse.org 25 Dec '13

25 Dec '13

openSUSE Security Update: Fixes a local vulnerability ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1954-1 Rating: important References: #851116 Cross-References: CVE-2013-3709 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Fixed CVE-2013-3709: make the secret token file (secret_token.rb) readable only for the webyast user to avoid forging the session cookie (bnc#851116) (reported by joernchen of Phenoelit) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-1027 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (noarch): webyast-base-0.3.19.1-1.8.1 webyast-base-branding-default-0.3.19.1-1.8.1 webyast-base-testsuite-0.3.19.1-1.8.1 References: http://support.novell.com/security/cve/CVE-2013-3709.html https://bugzilla.novell.com/851116

1 0

openSUSE-SU-2013:1953-1: moderate: xen: security and bugfix update to 4.2.3
by opensuse-security＠opensuse.org 25 Dec '13

25 Dec '13

openSUSE Security Update: xen: security and bugfix update to 4.2.3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1953-1 Rating: moderate References: #828623 #833251 #833483 #833796 #834751 #835896 #836239 #839596 #839600 #840196 #840592 #841766 #842511 #842512 #842513 #842514 #842515 #845520 Cross-References: CVE-2013-1442 CVE-2013-4355 CVE-2013-4361 CVE-2013-4368 CVE-2013-4369 CVE-2013-4370 CVE-2013-4371 CVE-2013-4375 CVE-2013-4416 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves 9 vulnerabilities and has 9 fixes is now available. Description: Xen was updated to 4.2.3 c/s 26170 to fix various bugs and security issues. Following issues were fixed: - bnc#845520 - CVE-2013-4416: xen: ocaml xenstored mishandles oversized message replies - bnc#833483 - Boot Failure with xen kernel in UEFI mode with error "No memory for trampoline" - Improvements to block-dmmd script bnc#828623 - bnc#840196 - MTU size on Dom0 gets reset when booting DomU with e1000 device - bnc#840592 - CVE-2013-4355: XSA-63: xen: Information leaks through I/O instruction emulation - bnc#841766 - CVE-2013-4361: XSA-66: xen: Information leak through fbld instruction emulation - bnc#842511 - CVE-2013-4368: XSA-67: xen: Information leak through outs instruction emulation - bnc#842512 - CVE-2013-4369: XSA-68: xen: possible null dereference when parsing vif ratelimiting info - bnc#842513 - CVE-2013-4370: XSA-69: xen: misplaced free in ocaml xc_vcpu_getaffinity stub - bnc#842514 - CVE-2013-4371: XSA-70: xen: use-after-free in libxl_list_cpupool under memory pressure - bnc#842515 - CVE-2013-4375: XSA-71: xen: qemu disk backend (qdisk) resource leak - bnc#839596 - CVE-2013-1442: XSA-62: xen: Information leak on AVX and/or LWP capable CPUs - bnc#833251 - [HP BCS SLES11 Bug]: In HP’s UEFI x86_64 platform and with xen environment, in booting stage ,xen hypervisor will panic. - bnc#833796 - Xen: migration broken from xsave-capable to xsave-incapable host - bnc#834751 - [HP BCS SLES11 Bug]: In xen, “shutdown –y 0 –h” cannot power off system - bnc#839600 - [HP BCS SLES11 Bug]: In HP’s UEFI x86_64 platform and sles11sp3 with xen environment, xen hypervisor will panic on multiple blades nPar. - bnc#833251 - [HP BCS SLES11 Bug]: In HP’s UEFI x86_64 platform and with xen environment, in booting stage ,xen hypervisor will panic. - bnc#835896 - vcpus not started after upgrading Dom0 from 11SP2 to SP3 - bnc#836239 - SLES 11 SP3 Xen security patch does not automatically update UEFI boot binary Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-1021 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): xen-debugsource-4.2.3_01-1.22.4 xen-devel-4.2.3_01-1.22.4 xen-kmp-default-4.2.3_01_k3.7.10_1.16-1.22.4 xen-kmp-default-debuginfo-4.2.3_01_k3.7.10_1.16-1.22.4 xen-kmp-desktop-4.2.3_01_k3.7.10_1.16-1.22.4 xen-kmp-desktop-debuginfo-4.2.3_01_k3.7.10_1.16-1.22.4 xen-libs-4.2.3_01-1.22.4 xen-libs-debuginfo-4.2.3_01-1.22.4 xen-tools-domU-4.2.3_01-1.22.4 xen-tools-domU-debuginfo-4.2.3_01-1.22.4 - openSUSE 12.3 (x86_64): xen-4.2.3_01-1.22.4 xen-doc-html-4.2.3_01-1.22.4 xen-doc-pdf-4.2.3_01-1.22.4 xen-libs-32bit-4.2.3_01-1.22.4 xen-libs-debuginfo-32bit-4.2.3_01-1.22.4 xen-tools-4.2.3_01-1.22.4 xen-tools-debuginfo-4.2.3_01-1.22.4 - openSUSE 12.3 (i586): xen-kmp-pae-4.2.3_01_k3.7.10_1.16-1.22.4 xen-kmp-pae-debuginfo-4.2.3_01_k3.7.10_1.16-1.22.4 References: http://support.novell.com/security/cve/CVE-2013-1442.html http://support.novell.com/security/cve/CVE-2013-4355.html http://support.novell.com/security/cve/CVE-2013-4361.html http://support.novell.com/security/cve/CVE-2013-4368.html http://support.novell.com/security/cve/CVE-2013-4369.html http://support.novell.com/security/cve/CVE-2013-4370.html http://support.novell.com/security/cve/CVE-2013-4371.html http://support.novell.com/security/cve/CVE-2013-4375.html http://support.novell.com/security/cve/CVE-2013-4416.html https://bugzilla.novell.com/828623 https://bugzilla.novell.com/833251 https://bugzilla.novell.com/833483 https://bugzilla.novell.com/833796 https://bugzilla.novell.com/834751 https://bugzilla.novell.com/835896 https://bugzilla.novell.com/836239 https://bugzilla.novell.com/839596 https://bugzilla.novell.com/839600 https://bugzilla.novell.com/840196 https://bugzilla.novell.com/840592 https://bugzilla.novell.com/841766 https://bugzilla.novell.com/842511 https://bugzilla.novell.com/842512 https://bugzilla.novell.com/842513 https://bugzilla.novell.com/842514 https://bugzilla.novell.com/842515 https://bugzilla.novell.com/845520

1 0

openSUSE-SU-2013:1952-1: important: Fixes a local vulnerability
by opensuse-security＠opensuse.org 25 Dec '13

25 Dec '13

openSUSE Security Update: Fixes a local vulnerability ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1952-1 Rating: important References: #851116 Cross-References: CVE-2013-3709 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Fixed CVE-2013-3709: make the secret token file (secret_token.rb) readable only for the webyast user to avoid forging the session cookie (bnc#851116) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-1028 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): webyast-base-0.3.43.1-1.4.1 webyast-base-branding-default-0.3.43.1-1.4.1 webyast-base-testsuite-0.3.43.1-1.4.1 References: http://support.novell.com/security/cve/CVE-2013-3709.html https://bugzilla.novell.com/851116

1 0

openSUSE-RU-2013:1951-1: moderate: openssl: fix compression disabling side effects
by maintenance＠opensuse.org 25 Dec '13

25 Dec '13

openSUSE Recommended Update: openssl: fix compression disabling side effects ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1951-1 Rating: moderate References: #849377 Affected Products: openSUSE 13.1 openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The disablement of compression by default in openssl to fix the BEAST and CRIME attacks was slightly flawed when openssl was used by sudo (via LDAP). The security patch was rewritten to fix this. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-1020 - openSUSE 12.3: zypper in -t patch openSUSE-2013-1020 - openSUSE 12.2: zypper in -t patch openSUSE-2013-1020 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libopenssl-devel-1.0.1e-11.5.1 libopenssl1_0_0-1.0.1e-11.5.1 libopenssl1_0_0-debuginfo-1.0.1e-11.5.1 openssl-1.0.1e-11.5.1 openssl-debuginfo-1.0.1e-11.5.1 openssl-debugsource-1.0.1e-11.5.1 - openSUSE 13.1 (x86_64): libopenssl-devel-32bit-1.0.1e-11.5.1 libopenssl1_0_0-32bit-1.0.1e-11.5.1 libopenssl1_0_0-debuginfo-32bit-1.0.1e-11.5.1 - openSUSE 13.1 (noarch): openssl-doc-1.0.1e-11.5.1 - openSUSE 12.3 (i586 x86_64): libopenssl-devel-1.0.1e-1.17.1 libopenssl1_0_0-1.0.1e-1.17.1 libopenssl1_0_0-debuginfo-1.0.1e-1.17.1 openssl-1.0.1e-1.17.1 openssl-debuginfo-1.0.1e-1.17.1 openssl-debugsource-1.0.1e-1.17.1 - openSUSE 12.3 (x86_64): libopenssl-devel-32bit-1.0.1e-1.17.1 libopenssl1_0_0-32bit-1.0.1e-1.17.1 libopenssl1_0_0-debuginfo-32bit-1.0.1e-1.17.1 - openSUSE 12.3 (noarch): openssl-doc-1.0.1e-1.17.1 - openSUSE 12.2 (i586 x86_64): libopenssl-devel-1.0.1e-2.16.1 libopenssl1_0_0-1.0.1e-2.16.1 libopenssl1_0_0-debuginfo-1.0.1e-2.16.1 openssl-1.0.1e-2.16.1 openssl-debuginfo-1.0.1e-2.16.1 openssl-debugsource-1.0.1e-2.16.1 - openSUSE 12.2 (x86_64): libopenssl-devel-32bit-1.0.1e-2.16.1 libopenssl1_0_0-32bit-1.0.1e-2.16.1 libopenssl1_0_0-debuginfo-32bit-1.0.1e-2.16.1 - openSUSE 12.2 (noarch): openssl-doc-1.0.1e-2.16.1 References: https://bugzilla.novell.com/849377

1 0

openSUSE-SU-2013:1950-1: 3.0.101-0.5 based kernel update for Evergreen 11.4
by opensuse-security＠opensuse.org 24 Dec '13

24 Dec '13

openSUSE Security Update: 3.0.101-0.5 based kernel update for Evergreen 11.4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1950-1 Rating: low References: #763463 #789115 #794824 #797526 #804950 #813733 #816099 #817377 #820848 #821259 #821465 #822942 #826102 #827246 #827416 #828714 #828894 #829682 #831029 #831143 #831380 #832292 #833321 #833588 #833635 #833820 #833858 #834204 #834600 #834905 #835094 #835684 #835930 #836218 #836347 #836801 #837372 #837803 #838346 #838448 #840830 #841094 #841402 #841498 #842063 #842231 #842604 #844513 #845549 Cross-References: CVE-2013-1929 CVE-2013-2015 CVE-2013-2206 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves three vulnerabilities and has 46 fixes is now available. Description: Kernel for Evergreen 11.4 was updated to version 3.0.101 providing lots of security and bug related fixes. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-174 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): kernel-debug-3.0.101-71.1 kernel-debug-base-3.0.101-71.1 kernel-debug-base-debuginfo-3.0.101-71.1 kernel-debug-debuginfo-3.0.101-71.1 kernel-debug-debugsource-3.0.101-71.1 kernel-debug-devel-3.0.101-71.1 kernel-debug-devel-debuginfo-3.0.101-71.1 kernel-debug-hmac-3.0.101-71.1 kernel-default-3.0.101-71.1 kernel-default-base-3.0.101-71.1 kernel-default-base-debuginfo-3.0.101-71.1 kernel-default-debuginfo-3.0.101-71.1 kernel-default-debugsource-3.0.101-71.1 kernel-default-devel-3.0.101-71.1 kernel-default-devel-debuginfo-3.0.101-71.1 kernel-default-hmac-3.0.101-71.1 kernel-desktop-3.0.101-71.1 kernel-desktop-base-3.0.101-71.1 kernel-desktop-base-debuginfo-3.0.101-71.1 kernel-desktop-debuginfo-3.0.101-71.1 kernel-desktop-debugsource-3.0.101-71.1 kernel-desktop-devel-3.0.101-71.1 kernel-desktop-devel-debuginfo-3.0.101-71.1 kernel-desktop-hmac-3.0.101-71.1 kernel-ec2-3.0.101-71.1 kernel-ec2-base-3.0.101-71.1 kernel-ec2-base-debuginfo-3.0.101-71.1 kernel-ec2-debuginfo-3.0.101-71.1 kernel-ec2-debugsource-3.0.101-71.1 kernel-ec2-devel-3.0.101-71.1 kernel-ec2-devel-debuginfo-3.0.101-71.1 kernel-ec2-extra-3.0.101-71.1 kernel-ec2-extra-debuginfo-3.0.101-71.1 kernel-ec2-hmac-3.0.101-71.1 kernel-source-3.0.101-71.1 kernel-source-vanilla-3.0.101-71.1 kernel-syms-3.0.101-71.1 kernel-trace-3.0.101-71.1 kernel-trace-base-3.0.101-71.1 kernel-trace-base-debuginfo-3.0.101-71.1 kernel-trace-debuginfo-3.0.101-71.1 kernel-trace-debugsource-3.0.101-71.1 kernel-trace-devel-3.0.101-71.1 kernel-trace-devel-debuginfo-3.0.101-71.1 kernel-trace-hmac-3.0.101-71.1 kernel-vanilla-3.0.101-71.1 kernel-vanilla-base-3.0.101-71.1 kernel-vanilla-base-debuginfo-3.0.101-71.1 kernel-vanilla-debuginfo-3.0.101-71.1 kernel-vanilla-debugsource-3.0.101-71.1 kernel-vanilla-devel-3.0.101-71.1 kernel-vanilla-devel-debuginfo-3.0.101-71.1 kernel-vanilla-hmac-3.0.101-71.1 kernel-xen-3.0.101-71.1 kernel-xen-base-3.0.101-71.1 kernel-xen-base-debuginfo-3.0.101-71.1 kernel-xen-debuginfo-3.0.101-71.1 kernel-xen-debugsource-3.0.101-71.1 kernel-xen-devel-3.0.101-71.1 kernel-xen-devel-debuginfo-3.0.101-71.1 kernel-xen-hmac-3.0.101-71.1 preload-1.2-6.53.1 preload-debuginfo-1.2-6.53.1 preload-debugsource-1.2-6.53.1 preload-kmp-default-1.2_3.0.101_71-6.53.1 preload-kmp-default-debuginfo-1.2_3.0.101_71-6.53.1 preload-kmp-desktop-1.2_3.0.101_71-6.53.1 preload-kmp-desktop-debuginfo-1.2_3.0.101_71-6.53.1 - openSUSE 11.4 (noarch): kernel-docs-3.0.101-71.2 - openSUSE 11.4 (i586): kernel-pae-3.0.101-71.1 kernel-pae-base-3.0.101-71.1 kernel-pae-base-debuginfo-3.0.101-71.1 kernel-pae-debuginfo-3.0.101-71.1 kernel-pae-debugsource-3.0.101-71.1 kernel-pae-devel-3.0.101-71.1 kernel-pae-devel-debuginfo-3.0.101-71.1 kernel-pae-hmac-3.0.101-71.1 kernel-vmi-3.0.101-71.1 kernel-vmi-base-3.0.101-71.1 kernel-vmi-base-debuginfo-3.0.101-71.1 kernel-vmi-debuginfo-3.0.101-71.1 kernel-vmi-debugsource-3.0.101-71.1 kernel-vmi-devel-3.0.101-71.1 kernel-vmi-devel-debuginfo-3.0.101-71.1 kernel-vmi-hmac-3.0.101-71.1 References: http://support.novell.com/security/cve/CVE-2013-1929.html http://support.novell.com/security/cve/CVE-2013-2015.html http://support.novell.com/security/cve/CVE-2013-2206.html https://bugzilla.novell.com/763463 https://bugzilla.novell.com/789115 https://bugzilla.novell.com/794824 https://bugzilla.novell.com/797526 https://bugzilla.novell.com/804950 https://bugzilla.novell.com/813733 https://bugzilla.novell.com/816099 https://bugzilla.novell.com/817377 https://bugzilla.novell.com/820848 https://bugzilla.novell.com/821259 https://bugzilla.novell.com/821465 https://bugzilla.novell.com/822942 https://bugzilla.novell.com/826102 https://bugzilla.novell.com/827246 https://bugzilla.novell.com/827416 https://bugzilla.novell.com/828714 https://bugzilla.novell.com/828894 https://bugzilla.novell.com/829682 https://bugzilla.novell.com/831029 https://bugzilla.novell.com/831143 https://bugzilla.novell.com/831380 https://bugzilla.novell.com/832292 https://bugzilla.novell.com/833321 https://bugzilla.novell.com/833588 https://bugzilla.novell.com/833635 https://bugzilla.novell.com/833820 https://bugzilla.novell.com/833858 https://bugzilla.novell.com/834204 https://bugzilla.novell.com/834600 https://bugzilla.novell.com/834905 https://bugzilla.novell.com/835094 https://bugzilla.novell.com/835684 https://bugzilla.novell.com/835930 https://bugzilla.novell.com/836218 https://bugzilla.novell.com/836347 https://bugzilla.novell.com/836801 https://bugzilla.novell.com/837372 https://bugzilla.novell.com/837803 https://bugzilla.novell.com/838346 https://bugzilla.novell.com/838448 https://bugzilla.novell.com/840830 https://bugzilla.novell.com/841094 https://bugzilla.novell.com/841402 https://bugzilla.novell.com/841498 https://bugzilla.novell.com/842063 https://bugzilla.novell.com/842231 https://bugzilla.novell.com/842604 https://bugzilla.novell.com/844513 https://bugzilla.novell.com/845549

1 0

openSUSE-RU-2013:1948-1: moderate: kernel-firmware: already load AMD CPU microcode in the initial ramdisk
by maintenance＠opensuse.org 23 Dec '13

23 Dec '13

openSUSE Recommended Update: kernel-firmware: already load AMD CPU microcode in the initial ramdisk ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1948-1 Rating: moderate References: #847158 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: kernel-firmware was updated to also load AMD microcode in the initial ramdisk, hooking into mkinitrd if necessary. - Add mkinitrd script to add AMD microcode to initrd. This is needed because microcode driver is built in or gets loaded automatically via udev early. Therefore the microcode has to be available in initrd already. This must not be mixed up with early micorcode loading. This feature will not be implemented via mkinitrd. Dracut is doing early microcode loading. - bnc#847158 - mkinitrd scripts: - mkinitrd_setup-amd_microcode.sh Adding microcode to the initrd - mkinitrd_boot-amd_microcode.sh Triggering the reload at boot - Correct Supplements string so that the package gets correctly installed on machines with AMD CPUs bnc#847158 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-1011 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): kernel-firmware-20130714git-2.5.1 ucode-amd-20130714git-2.5.1 References: https://bugzilla.novell.com/847158

1 0

openSUSE-RU-2013:1947-1: mc: Several fixes and improvements
by maintenance＠opensuse.org 23 Dec '13

23 Dec '13

openSUSE Recommended Update: mc: Several fixes and improvements ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1947-1 Rating: low References: #826700 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with mc (Midnight Commander): - bnc#849082: + Reimplementation of mcrar5fs_list in vfs/extfs/helpers/urar using 'unrar vt' fixing the "trailing space" problem with 'unrar [lv]' + fix urar extfs failing on files with spaces when unrar5 is used - fixed description in spec-file Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-1005 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): mc-4.8.10-2.5.1 mc-debuginfo-4.8.10-2.5.1 mc-debugsource-4.8.10-2.5.1 - openSUSE 13.1 (noarch): mc-lang-4.8.10-2.5.1 References: https://bugzilla.novell.com/826700

1 0