November 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2014:1482-1: moderate: zsh
by maintenance＠opensuse.org 24 Nov '14

24 Nov '14

openSUSE Recommended Update: zsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1482-1 Rating: moderate References: #888989 #896914 #902509 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This recommended update for zsh fixes the following issues: - Update from version 5.0.2 to 5.0.7 + Fixes for bnc#896914 (completion) and bnc#902509 (history) + Small bugfixes + Includes a security fix to disallow evaluation of the initial values of integer variables imported from the environment + Fix pcre_match() -n option + Rename Completion/openSUSE/Command/_SuSEconfig to _SUSEconfig (bnc#888989 fate#316521) + Update zypper completions + pipe fixes + For all changes, please see the package-changelog Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-700 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): zsh-5.0.7-8.4.1 zsh-debuginfo-5.0.7-8.4.1 zsh-debugsource-5.0.7-8.4.1 zsh-htmldoc-5.0.7-8.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=888989 https://bugzilla.suse.com/show_bug.cgi?id=896914 https://bugzilla.suse.com/show_bug.cgi?id=902509

1 0

openSUSE-RU-2014:1481-1: moderate: AppArmor
by maintenance＠opensuse.org 24 Nov '14

24 Nov '14

openSUSE Recommended Update: AppArmor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1481-1 Rating: moderate References: #846586 #848215 #850374 #851131 #852018 #853019 #856651 #857122 #863226 #869787 #870607 #885317 #886225 #889650 #889651 #889652 #892374 #899746 #904620 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has 19 recommended fixes can now be installed. Description: This recommended update for AppArmor fixes the following issues: - NOTE: Please consider a reboot after installing the update to resolve bnc#853019 - NOTE: The %postun from the previously installed apparmor-parser package will remove AppArmor protection from running processes a last time. Run aa-status to get a list of processes you need to restart, or reboot your computer. - Update from version 2.8.2 to 2.8.4 and several bugfixes + delete cache in apparmor-profiles %post (workaround for bnc#904620#c8 / lp#1392042) + mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes the regression in 2.8.3 (lp#1322778) + libapparmor: fix log parsing memory leaks (lp#1340927) + parser: Fix profile loads from cache files that contain multiple profiles + several profiles and abstractions/* updates (including bnc#857122#c2, bnc#899746, bnc#869787, bnc#886225) + see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details + add Provides: apparmor-abstractions to apparmor-profiles + Allow dnsmasq read access to interface mtu in /proc/sys/net/ipv6/conf/<ifacename>/mtu (bnc#892374) + Rename rpmlintrc to %{name}-rpmlintrc to follow the packaging guidelines. + perl-apparmor: Fix handling of network (or network all) (bnc#889650) + perl-apparmor: Fix handling of capability keyword (bnc#889651) + perl-apparmor: Properly handle bare file keyword (bnc#889652) + permit clustered Samba access to CTDB socket and databases (bnc#885317) + update usr.sbin.winbindd profile (bnc#870607) + restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/ + update usr.sbin.winbindd profile (bnc#870607) * treat passdb.tdb.tmp as passdb.tdb * allow rw access to /var/tmp/ + add Recommends: libnotify-tools to apparmor-utils (aa-notify -p needs notify-send) + fix some cache clearing bugs in apparmor_parser + various fixes in mod_apparmor + several profile updates, most of them were already included as patches (except abstractions/winbind (bnc#863226), abstractions/fonts and abstractions/p11-kit) + see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details + use current ruby macros, the rb_sitearch is obsolete since at least 12.1 + allow access to pid file and supplemental config directory + add Recommends: net-tools to apparmor-utils (needed by aa-unconfined) + allow dnsmasq read config created be recent NetworkManager + allow samba to mkdir /var/run/samba and /var/cache/samba (bnc#856651) + add abstractions/samba to usr.sbin.winbindd profile + add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131) + %restart_on_update (in parser %postun) is "translated" to stop/start by the systemd wrapper, which removes AppArmor protection from running processes. (bnc#853019) * NOTE: The %postun from the previously installed apparmor-parser package will remove AppArmor protection from running processes a last time. Run aa-status to get a list of processes you need to restart, or reboot your computer. + reload profiles in %post of the apparmor-profiles package + allow access to certificates in /var/lib/ca-certificates/ (bnc#852018) + updated driftfile location for ntpd (bnc#850374) + usr.sbin.winbindd: some more profile updates for samba 4.x and kerberos (bnc#846586#c12 and #c15) + add missing permissions for libvirt-generated files to dnsmasq profile (bnc#848215) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2014-708 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): apache2-mod_apparmor-2.8.4-3.8.1 apache2-mod_apparmor-debuginfo-2.8.4-3.8.1 apparmor-debugsource-2.8.4-3.8.1 apparmor-parser-2.8.4-3.8.1 apparmor-parser-debuginfo-2.8.4-3.8.1 libapparmor-devel-2.8.4-3.8.1 libapparmor1-2.8.4-3.8.1 libapparmor1-debuginfo-2.8.4-3.8.1 pam_apparmor-2.8.4-3.8.1 pam_apparmor-debuginfo-2.8.4-3.8.1 perl-apparmor-2.8.4-3.8.1 perl-apparmor-debuginfo-2.8.4-3.8.1 python3-apparmor-2.8.4-3.8.1 python3-apparmor-debuginfo-2.8.4-3.8.1 ruby-apparmor-2.8.4-3.8.1 ruby-apparmor-debuginfo-2.8.4-3.8.1 - openSUSE 12.3 (x86_64): libapparmor1-32bit-2.8.4-3.8.1 libapparmor1-debuginfo-32bit-2.8.4-3.8.1 pam_apparmor-32bit-2.8.4-3.8.1 pam_apparmor-debuginfo-32bit-2.8.4-3.8.1 - openSUSE 12.3 (noarch): apparmor-docs-2.8.4-3.8.1 apparmor-parser-lang-2.8.4-3.8.1 apparmor-profiles-2.8.4-3.8.1 apparmor-utils-2.8.4-3.8.1 apparmor-utils-lang-2.8.4-3.8.1 References: https://bugzilla.suse.com/show_bug.cgi?id=846586 https://bugzilla.suse.com/show_bug.cgi?id=848215 https://bugzilla.suse.com/show_bug.cgi?id=850374 https://bugzilla.suse.com/show_bug.cgi?id=851131 https://bugzilla.suse.com/show_bug.cgi?id=852018 https://bugzilla.suse.com/show_bug.cgi?id=853019 https://bugzilla.suse.com/show_bug.cgi?id=856651 https://bugzilla.suse.com/show_bug.cgi?id=857122 https://bugzilla.suse.com/show_bug.cgi?id=863226 https://bugzilla.suse.com/show_bug.cgi?id=869787 https://bugzilla.suse.com/show_bug.cgi?id=870607 https://bugzilla.suse.com/show_bug.cgi?id=885317 https://bugzilla.suse.com/show_bug.cgi?id=886225 https://bugzilla.suse.com/show_bug.cgi?id=889650 https://bugzilla.suse.com/show_bug.cgi?id=889651 https://bugzilla.suse.com/show_bug.cgi?id=889652 https://bugzilla.suse.com/show_bug.cgi?id=892374 https://bugzilla.suse.com/show_bug.cgi?id=899746 https://bugzilla.suse.com/show_bug.cgi?id=904620

1 0

openSUSE-RU-2014:1480-1: important: evolution-data-server
by maintenance＠opensuse.org 24 Nov '14

24 Nov '14

openSUSE Recommended Update: evolution-data-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1480-1 Rating: important References: #901361 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended udpate for evolution-data-server provides the following fixes: - Enable all available SSL/TLS algorithms available (boo#901361, rh#1153052). - Disable SSLv3 unless CAMEL_SSL_V3_ENABLE environmnent variable is set to 1. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-704 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): evolution-data-server-3.10.4-42.1 evolution-data-server-debuginfo-3.10.4-42.1 evolution-data-server-debugsource-3.10.4-42.1 evolution-data-server-devel-3.10.4-42.1 evolution-data-server-doc-3.10.4-42.1 libcamel-1_2-45-3.10.4-42.1 libcamel-1_2-45-debuginfo-3.10.4-42.1 libebackend-1_2-7-3.10.4-42.1 libebackend-1_2-7-debuginfo-3.10.4-42.1 libebook-1_2-14-3.10.4-42.1 libebook-1_2-14-debuginfo-3.10.4-42.1 libebook-contacts-1_2-0-3.10.4-42.1 libebook-contacts-1_2-0-debuginfo-3.10.4-42.1 libecal-1_2-16-3.10.4-42.1 libecal-1_2-16-debuginfo-3.10.4-42.1 libedata-book-1_2-20-3.10.4-42.1 libedata-book-1_2-20-debuginfo-3.10.4-42.1 libedata-cal-1_2-23-3.10.4-42.1 libedata-cal-1_2-23-debuginfo-3.10.4-42.1 libedataserver-1_2-18-3.10.4-42.1 libedataserver-1_2-18-debuginfo-3.10.4-42.1 typelib-1_0-EBook-1_2-3.10.4-42.1 typelib-1_0-EBookContacts-1_2-3.10.4-42.1 typelib-1_0-EDataServer-1_2-3.10.4-42.1 - openSUSE 13.1 (x86_64): libcamel-1_2-45-32bit-3.10.4-42.1 libcamel-1_2-45-debuginfo-32bit-3.10.4-42.1 libebackend-1_2-7-32bit-3.10.4-42.1 libebackend-1_2-7-debuginfo-32bit-3.10.4-42.1 libebook-1_2-14-32bit-3.10.4-42.1 libebook-1_2-14-debuginfo-32bit-3.10.4-42.1 libebook-contacts-1_2-0-32bit-3.10.4-42.1 libebook-contacts-1_2-0-debuginfo-32bit-3.10.4-42.1 libecal-1_2-16-32bit-3.10.4-42.1 libecal-1_2-16-debuginfo-32bit-3.10.4-42.1 libedata-book-1_2-20-32bit-3.10.4-42.1 libedata-book-1_2-20-debuginfo-32bit-3.10.4-42.1 libedata-cal-1_2-23-32bit-3.10.4-42.1 libedata-cal-1_2-23-debuginfo-32bit-3.10.4-42.1 libedataserver-1_2-18-32bit-3.10.4-42.1 libedataserver-1_2-18-debuginfo-32bit-3.10.4-42.1 - openSUSE 13.1 (noarch): evolution-data-server-lang-3.10.4-42.1 References: https://bugzilla.suse.com/show_bug.cgi?id=901361

1 0

openSUSE-RU-2014:1479-1: moderate: thunar-plugin-archive
by maintenance＠opensuse.org 24 Nov '14

24 Nov '14

openSUSE Recommended Update: thunar-plugin-archive ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1479-1 Rating: moderate References: #905666 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for thunar-plugin-archive fixes the following issue: - fix file-roller symlink name and target (boo#905666) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-703 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): thunar-plugin-archive-0.3.1-5.4.1 thunar-plugin-archive-debuginfo-0.3.1-5.4.1 thunar-plugin-archive-debugsource-0.3.1-5.4.1 - openSUSE 13.2 (noarch): thunar-plugin-archive-lang-0.3.1-5.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=905666

1 0

openSUSE-RU-2014:1478-1: several libqt5-packages
by maintenance＠opensuse.org 24 Nov '14

24 Nov '14

openSUSE Recommended Update: several libqt5-packages ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1478-1 Rating: low References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for libqt5-* fixes the following issues: - libqt5-creator: + Update to 3.2.2 * Editing - Fixed crash with Toggle Comment Selection - Fixed that Select All set the cursor to top of document * Help - Fixed crash with help index locator filter * Managing and Building Projects - Fixed that closing Qt Creator while Projects mode is active lost all session data * CMake Projects - Fixed crash when selecting make target * Generic Projects - Fixed that include paths were not updated when files are added * Version Control Systems - ClearCase - Fixed that reserved checkout was performed even when unchecking the checkbox + Added explicit libQt5Sql5-sqlite BuildRequires - libqt5-qtquickcontrols: + Correct sizing of combobox items - libqt5-qtbase: + Allow panels outside of availableGeometry + Always lock the DBus dispatcher before dbus_connection_send* + QDBusConnection: Merge the dispatch and the watch-and-timeout locks + Fixed race condition introduced with "Fix-a-deadlock-introduced-by-the-ra.patch" + Don't install CMake files for plugins, they are useful only for bundled Qt builds + Downgrade sql-plugins from libQt5Sql-devel's requires to suggests + Improve font rendering Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-707 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libQt5Bootstrap-devel-static-5.3.2-8.4 libQt5Concurrent-devel-5.3.2-8.4 libQt5Concurrent5-5.3.2-8.4 libQt5Concurrent5-debuginfo-5.3.2-8.4 libQt5Core-devel-5.3.2-8.4 libQt5Core5-5.3.2-8.4 libQt5Core5-debuginfo-5.3.2-8.4 libQt5DBus-devel-5.3.2-8.4 libQt5DBus-devel-debuginfo-5.3.2-8.4 libQt5DBus5-5.3.2-8.4 libQt5DBus5-debuginfo-5.3.2-8.4 libQt5Gui-devel-5.3.2-8.4 libQt5Gui5-5.3.2-8.4 libQt5Gui5-debuginfo-5.3.2-8.4 libQt5Network-devel-5.3.2-8.4 libQt5Network5-5.3.2-8.4 libQt5Network5-debuginfo-5.3.2-8.4 libQt5OpenGL-devel-5.3.2-8.4 libQt5OpenGL5-5.3.2-8.4 libQt5OpenGL5-debuginfo-5.3.2-8.4 libQt5OpenGLExtensions-devel-static-5.3.2-8.4 libQt5PlatformSupport-devel-static-5.3.2-8.4 libQt5PrintSupport-devel-5.3.2-8.4 libQt5PrintSupport5-5.3.2-8.4 libQt5PrintSupport5-debuginfo-5.3.2-8.4 libQt5Sql-devel-5.3.2-8.4 libQt5Sql5-5.3.2-8.4 libQt5Sql5-debuginfo-5.3.2-8.4 libQt5Sql5-mysql-5.3.2-8.4 libQt5Sql5-mysql-debuginfo-5.3.2-8.4 libQt5Sql5-postgresql-5.3.2-8.4 libQt5Sql5-postgresql-debuginfo-5.3.2-8.4 libQt5Sql5-sqlite-5.3.2-8.4 libQt5Sql5-sqlite-debuginfo-5.3.2-8.4 libQt5Sql5-unixODBC-5.3.2-8.4 libQt5Sql5-unixODBC-debuginfo-5.3.2-8.4 libQt5Test-devel-5.3.2-8.4 libQt5Test5-5.3.2-8.4 libQt5Test5-debuginfo-5.3.2-8.4 libQt5Widgets-devel-5.3.2-8.4 libQt5Widgets5-5.3.2-8.4 libQt5Widgets5-debuginfo-5.3.2-8.4 libQt5Xml-devel-5.3.2-8.4 libQt5Xml5-5.3.2-8.4 libQt5Xml5-debuginfo-5.3.2-8.4 libqt5-creator-3.2.2-5.7 libqt5-creator-debuginfo-3.2.2-5.7 libqt5-qtbase-common-devel-5.3.2-8.4 libqt5-qtbase-common-devel-debuginfo-5.3.2-8.4 libqt5-qtbase-debugsource-5.3.2-8.4 libqt5-qtbase-devel-5.3.2-8.4 libqt5-qtbase-doc-5.3.2-8.4 libqt5-qtbase-doc-debuginfo-5.3.2-8.4 libqt5-qtbase-examples-5.3.2-8.4 libqt5-qtbase-examples-debuginfo-5.3.2-8.4 libqt5-qtquickcontrols-5.3.2-4.1 libqt5-qtquickcontrols-debuginfo-5.3.2-4.1 libqt5-qtquickcontrols-debugsource-5.3.2-4.1 libqt5-qtquickcontrols-examples-5.3.2-4.1 libqt5-qtquickcontrols-examples-debuginfo-5.3.2-4.1 - openSUSE 13.2 (x86_64): libQt5Bootstrap-devel-static-32bit-5.3.2-8.4 libQt5Concurrent-devel-32bit-5.3.2-8.4 libQt5Concurrent5-32bit-5.3.2-8.4 libQt5Concurrent5-debuginfo-32bit-5.3.2-8.4 libQt5Core-devel-32bit-5.3.2-8.4 libQt5Core5-32bit-5.3.2-8.4 libQt5Core5-debuginfo-32bit-5.3.2-8.4 libQt5DBus-devel-32bit-5.3.2-8.4 libQt5DBus-devel-debuginfo-32bit-5.3.2-8.4 libQt5DBus5-32bit-5.3.2-8.4 libQt5DBus5-debuginfo-32bit-5.3.2-8.4 libQt5Gui-devel-32bit-5.3.2-8.4 libQt5Gui5-32bit-5.3.2-8.4 libQt5Gui5-debuginfo-32bit-5.3.2-8.4 libQt5Network-devel-32bit-5.3.2-8.4 libQt5Network5-32bit-5.3.2-8.4 libQt5Network5-debuginfo-32bit-5.3.2-8.4 libQt5OpenGL-devel-32bit-5.3.2-8.4 libQt5OpenGL5-32bit-5.3.2-8.4 libQt5OpenGL5-debuginfo-32bit-5.3.2-8.4 libQt5OpenGLExtensions-devel-static-32bit-5.3.2-8.4 libQt5PlatformSupport-devel-static-32bit-5.3.2-8.4 libQt5PrintSupport-devel-32bit-5.3.2-8.4 libQt5PrintSupport5-32bit-5.3.2-8.4 libQt5PrintSupport5-debuginfo-32bit-5.3.2-8.4 libQt5Sql-devel-32bit-5.3.2-8.4 libQt5Sql5-32bit-5.3.2-8.4 libQt5Sql5-debuginfo-32bit-5.3.2-8.4 libQt5Sql5-mysql-32bit-5.3.2-8.4 libQt5Sql5-mysql-debuginfo-32bit-5.3.2-8.4 libQt5Sql5-postgresql-32bit-5.3.2-8.4 libQt5Sql5-postgresql-debuginfo-32bit-5.3.2-8.4 libQt5Sql5-sqlite-32bit-5.3.2-8.4 libQt5Sql5-sqlite-debuginfo-32bit-5.3.2-8.4 libQt5Sql5-unixODBC-32bit-5.3.2-8.4 libQt5Sql5-unixODBC-debuginfo-32bit-5.3.2-8.4 libQt5Test-devel-32bit-5.3.2-8.4 libQt5Test5-32bit-5.3.2-8.4 libQt5Test5-debuginfo-32bit-5.3.2-8.4 libQt5Widgets-devel-32bit-5.3.2-8.4 libQt5Widgets5-32bit-5.3.2-8.4 libQt5Widgets5-debuginfo-32bit-5.3.2-8.4 libQt5Xml-devel-32bit-5.3.2-8.4 libQt5Xml5-32bit-5.3.2-8.4 libQt5Xml5-debuginfo-32bit-5.3.2-8.4 libqt5-qtbase-examples-32bit-5.3.2-8.4 libqt5-qtbase-examples-debuginfo-32bit-5.3.2-8.4 - openSUSE 13.2 (noarch): libQt5Core-private-headers-devel-5.3.2-8.4 libQt5DBus-private-headers-devel-5.3.2-8.4 libQt5Gui-private-headers-devel-5.3.2-8.4 libQt5Network-private-headers-devel-5.3.2-8.4 libQt5OpenGL-private-headers-devel-5.3.2-8.4 libQt5PlatformSupport-private-headers-devel-5.3.2-8.4 libQt5PrintSupport-private-headers-devel-5.3.2-8.4 libQt5Sql-private-headers-devel-5.3.2-8.4 libQt5Test-private-headers-devel-5.3.2-8.4 libQt5Widgets-private-headers-devel-5.3.2-8.4 libqt5-qtbase-private-headers-devel-5.3.2-8.4 References:

1 0

openSUSE-RU-2014:1477-1: moderate: the openSUSE release-notes
by maintenance＠opensuse.org 24 Nov '14

24 Nov '14

openSUSE Recommended Update: the openSUSE release-notes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1477-1 Rating: moderate References: #897847 #898023 #899895 #900813 #900954 #901013 #901511 #902947 #902977 #904268 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This recommended udpate for the openSUSE release notes adds the following fixes and additions: - Update translations. - Updated entries: + BtrFS and Windows (bnc#904268). - New entries: + Modem Authorization After Suspend (bnc#900813). + Warning: No Location for Bootloader Stage1 Selected (bnc#898023). + Btrfs and Windows 7 (bnc#900954). + Unbranded Grub2 on New Installs From Live (bnc#897847). + Old KDE Wallpaper After Upgrade. + MATE Desktop official integration + Unable to Search Packages in GTK YaST (bnc#901511). + NET Installation Using Wifi (bnc#899895). + Slow startup in GNOME (bnc#901013). + FGLRX Driver for openSUSE 13.2. openSUSE pre-13.2 cifstab Migration (bnc#902947). - Remove misleading skype statement (bnc#902977). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-699 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): release-notes-openSUSE-13.2.20141113-4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=897847 https://bugzilla.suse.com/show_bug.cgi?id=898023 https://bugzilla.suse.com/show_bug.cgi?id=899895 https://bugzilla.suse.com/show_bug.cgi?id=900813 https://bugzilla.suse.com/show_bug.cgi?id=900954 https://bugzilla.suse.com/show_bug.cgi?id=901013 https://bugzilla.suse.com/show_bug.cgi?id=901511 https://bugzilla.suse.com/show_bug.cgi?id=902947 https://bugzilla.suse.com/show_bug.cgi?id=902977 https://bugzilla.suse.com/show_bug.cgi?id=904268

1 0

openSUSE-RU-2014:1476-1: moderate: recommended udpate for flickcurl
by maintenance＠opensuse.org 24 Nov '14

24 Nov '14

openSUSE Recommended Update: recommended udpate for flickcurl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1476-1 Rating: moderate References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for flickcurl fixes the following issues: - Update from version 1.23 to 1.26: + Switch all API endpoints and image URLs to https protocol (http for Flickr API is deprecated since 2014-04-30). + Fixed utility documentation: args consistency for PER-PAGE / PAGE. + Added new extras: url_q, url_n and url_c for new image sizes. + Configuration and build improvements for newer automake and autoconf. Add new internal convienience libraries libmtwist and libgetopt. + Added build-time utility mangen to generate manpage and extras. + Generate and accept the new staticflickr.com domain for image URIs as well as the existing static.flickr.com. + Multiple error path allocation fixes, several memory leak fixes and a few overflows found via Coverity. + more OAuth fixes, including uploading fully working + Multiple internal OAuth changes to simplify code. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-705 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): flickcurl-1.26-4.4.1 flickcurl-debuginfo-1.26-4.4.1 flickcurl-debugsource-1.26-4.4.1 flickcurl-doc-1.26-4.4.1 libflickcurl-devel-1.26-4.4.1 libflickcurl0-1.26-4.4.1 libflickcurl0-debuginfo-1.26-4.4.1 - openSUSE 13.1 (x86_64): libflickcurl0-32bit-1.26-4.4.1 libflickcurl0-debuginfo-32bit-1.26-4.4.1 References:

1 0

openSUSE-RU-2014:1475-1: moderate: spec-cleaner
by maintenance＠opensuse.org 24 Nov '14

24 Nov '14

openSUSE Recommended Update: spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1475-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for spec-cleaner fixes the following issues: - Remove PKGBUILD until service-download_files is fixed to work fine with them - Fix diff mode - Various %if macro whitespacing issues squashing - Base pkgconf conversions from 13.2 - Various small fixes and macro expansion. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-702 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): spec-cleaner-0.6.4-4.1 References:

1 0

openSUSE-SU-2014:1474-1: openssl: fixed elliptic curve handshake failure
by opensuse-security＠opensuse.org 24 Nov '14

24 Nov '14

openSUSE Security Update: openssl: fixed elliptic curve handshake failure ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1474-1 Rating: low References: #905037 Affected Products: openSUSE 13.2 openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This openssl update fixes a TLS handshake problem when elliptic curves are in use. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-697 - openSUSE 13.1: zypper in -t patch openSUSE-2014-697 - openSUSE 12.3: zypper in -t patch openSUSE-2014-697 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libopenssl-devel-1.0.1j-2.10.1 libopenssl1_0_0-1.0.1j-2.10.1 libopenssl1_0_0-debuginfo-1.0.1j-2.10.1 libopenssl1_0_0-hmac-1.0.1j-2.10.1 openssl-1.0.1j-2.10.1 openssl-debuginfo-1.0.1j-2.10.1 openssl-debugsource-1.0.1j-2.10.1 - openSUSE 13.2 (x86_64): libopenssl-devel-32bit-1.0.1j-2.10.1 libopenssl1_0_0-32bit-1.0.1j-2.10.1 libopenssl1_0_0-debuginfo-32bit-1.0.1j-2.10.1 libopenssl1_0_0-hmac-32bit-1.0.1j-2.10.1 - openSUSE 13.2 (noarch): openssl-doc-1.0.1j-2.10.1 - openSUSE 13.1 (i586 x86_64): libopenssl-devel-1.0.1j-11.59.1 libopenssl1_0_0-1.0.1j-11.59.1 libopenssl1_0_0-debuginfo-1.0.1j-11.59.1 openssl-1.0.1j-11.59.1 openssl-debuginfo-1.0.1j-11.59.1 openssl-debugsource-1.0.1j-11.59.1 - openSUSE 13.1 (x86_64): libopenssl-devel-32bit-1.0.1j-11.59.1 libopenssl1_0_0-32bit-1.0.1j-11.59.1 libopenssl1_0_0-debuginfo-32bit-1.0.1j-11.59.1 - openSUSE 13.1 (noarch): openssl-doc-1.0.1j-11.59.1 - openSUSE 12.3 (i586 x86_64): libopenssl-devel-1.0.1j-1.71.1 libopenssl1_0_0-1.0.1j-1.71.1 libopenssl1_0_0-debuginfo-1.0.1j-1.71.1 openssl-1.0.1j-1.71.1 openssl-debuginfo-1.0.1j-1.71.1 openssl-debugsource-1.0.1j-1.71.1 - openSUSE 12.3 (x86_64): libopenssl-devel-32bit-1.0.1j-1.71.1 libopenssl1_0_0-32bit-1.0.1j-1.71.1 libopenssl1_0_0-debuginfo-32bit-1.0.1j-1.71.1 - openSUSE 12.3 (noarch): openssl-doc-1.0.1j-1.71.1 References: https://bugzilla.suse.com/show_bug.cgi?id=905037

1 0

openSUSE-SU-2014:1472-1: moderate: Security update for gnutls
by opensuse-security＠opensuse.org 21 Nov '14

21 Nov '14

openSUSE Security Update: Security update for gnutls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1472-1 Rating: moderate References: #904603 Cross-References: CVE-2014-8564 Affected Products: openSUSE 13.2 openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: gnutls was updated to fix one security issue. This security issue was fixed: - Parsing problem in elliptic curve blobs over TLS that could lead to remote crashes (CVE-2014-8564). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-696 - openSUSE 13.1: zypper in -t patch openSUSE-2014-696 - openSUSE 12.3: zypper in -t patch openSUSE-2014-696 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gnutls-3.2.18-4.1 gnutls-debuginfo-3.2.18-4.1 gnutls-debugsource-3.2.18-4.1 libgnutls-devel-3.2.18-4.1 libgnutls-openssl-devel-3.2.18-4.1 libgnutls-openssl27-3.2.18-4.1 libgnutls-openssl27-debuginfo-3.2.18-4.1 libgnutls28-3.2.18-4.1 libgnutls28-debuginfo-3.2.18-4.1 libgnutlsxx-devel-3.2.18-4.1 libgnutlsxx28-3.2.18-4.1 libgnutlsxx28-debuginfo-3.2.18-4.1 - openSUSE 13.2 (x86_64): libgnutls-devel-32bit-3.2.18-4.1 libgnutls28-32bit-3.2.18-4.1 libgnutls28-debuginfo-32bit-3.2.18-4.1 - openSUSE 13.1 (i586 x86_64): gnutls-3.2.4-2.28.1 gnutls-debuginfo-3.2.4-2.28.1 gnutls-debugsource-3.2.4-2.28.1 libgnutls-devel-3.2.4-2.28.1 libgnutls-openssl-devel-3.2.4-2.28.1 libgnutls-openssl27-3.2.4-2.28.1 libgnutls-openssl27-debuginfo-3.2.4-2.28.1 libgnutls28-3.2.4-2.28.1 libgnutls28-debuginfo-3.2.4-2.28.1 libgnutlsxx-devel-3.2.4-2.28.1 libgnutlsxx28-3.2.4-2.28.1 libgnutlsxx28-debuginfo-3.2.4-2.28.1 - openSUSE 13.1 (x86_64): libgnutls-devel-32bit-3.2.4-2.28.1 libgnutls28-32bit-3.2.4-2.28.1 libgnutls28-debuginfo-32bit-3.2.4-2.28.1 - openSUSE 12.3 (i586 x86_64): gnutls-3.0.28-1.18.1 gnutls-debuginfo-3.0.28-1.18.1 gnutls-debugsource-3.0.28-1.18.1 libgnutls-devel-3.0.28-1.18.1 libgnutls-openssl-devel-3.0.28-1.18.1 libgnutls-openssl27-3.0.28-1.18.1 libgnutls-openssl27-debuginfo-3.0.28-1.18.1 libgnutls28-3.0.28-1.18.1 libgnutls28-debuginfo-3.0.28-1.18.1 libgnutlsxx-devel-3.0.28-1.18.1 libgnutlsxx28-3.0.28-1.18.1 libgnutlsxx28-debuginfo-3.0.28-1.18.1 - openSUSE 12.3 (x86_64): libgnutls-devel-32bit-3.0.28-1.18.1 libgnutls28-32bit-3.0.28-1.18.1 libgnutls28-debuginfo-32bit-3.0.28-1.18.1 References: http://support.novell.com/security/cve/CVE-2014-8564.html https://bugzilla.suse.com/show_bug.cgi?id=904603

1 0