April 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2014:0543-1: kernel-firmware: Fixes failure on missing microcode file
by maintenance＠opensuse.org 17 Apr '14

17 Apr '14

openSUSE Recommended Update: kernel-firmware: Fixes failure on missing microcode file ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0543-1 Rating: low References: #872266 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with kernel-firmware: -bnc#872266: setup-amd_microcode.sh don't fail anymore if microcode file is missing Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-303 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): kernel-firmware-20130714git-2.9.1 ucode-amd-20130714git-2.9.1 References: https://bugzilla.novell.com/872266

1 0

openSUSE-RU-2014:0542-1: sysconfig: fixed netconfig modify calls in ppp/ip-up
by maintenance＠opensuse.org 17 Apr '14

17 Apr '14

openSUSE Recommended Update: sysconfig: fixed netconfig modify calls in ppp/ip-up ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0542-1 Rating: low References: #872689 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with sysconfig: -bnc#872689: + ppp/ip-up: fixed netconfig modify calls + The global config file now explicitly sets the NETCONFIG_VERBOSE variable to yes/no, what breaks the netconfig call from ip-up using it to pass a "-v" as a command line option Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-305 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): sysconfig-0.81.5-30.1 sysconfig-debugsource-0.81.5-30.1 sysconfig-netconfig-0.81.5-30.1 sysconfig-network-0.81.5-30.1 sysconfig-network-debuginfo-0.81.5-30.1 udevmountd-0.81.5-30.1 udevmountd-debuginfo-0.81.5-30.1 References: https://bugzilla.novell.com/872689

1 0

openSUSE-RU-2014:0534-1: bcache-tools: Update to new upstream release 0.9
by maintenance＠opensuse.org 16 Apr '14

16 Apr '14

openSUSE Recommended Update: bcache-tools: Update to new upstream release 0.9 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0534-1 Rating: low References: #868938 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with bcache-tools: -bnc#868938: + Update to new upstream release 0.9 + Run probe-bcache a little later in the udev rule sequence (moving from position 61 to 69), fixing a machine hang on bcache reassemble + Move bcache rule from position 61 to position 74 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-302 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): bcache-tools-0.9-2.4.1 bcache-tools-debuginfo-0.9-2.4.1 bcache-tools-debugsource-0.9-2.4.1 References: https://bugzilla.novell.com/868938

1 0

openSUSE-RU-2014:0533-1: lvm2: modified lvm.conf by adding filter to exclude floppy and cdrom drives
by maintenance＠opensuse.org 16 Apr '14

16 Apr '14

openSUSE Recommended Update: lvm2: modified lvm.conf by adding filter to exclude floppy and cdrom drives ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0533-1 Rating: low References: #862403 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes following issue with lvm2: -bnc#862403: modified lvm.conf by adding filter to exclude floppy and cdrom drives Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-300 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): lvm2-2.02.98-0.28.18.1 lvm2-clvm-2.02.98-28.18.1 lvm2-clvm-debuginfo-2.02.98-28.18.1 lvm2-cmirrord-2.02.98-28.18.1 lvm2-cmirrord-debuginfo-2.02.98-28.18.1 lvm2-debuginfo-2.02.98-0.28.18.1 lvm2-debugsource-2.02.98-0.28.18.1 References: https://bugzilla.novell.com/862403

1 0

openSUSE-RU-2014:0532-1: spec-cleaner: Update from 0.2 to 0.5.5
by maintenance＠opensuse.org 16 Apr '14

16 Apr '14

openSUSE Recommended Update: spec-cleaner: Update from 0.2 to 0.5.5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0532-1 Rating: low References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This Update fixes the following issues with spec-cleaner: - Version bump to 0.5.5: + Few minor fixes as reported on github tracker. - Version bump to 0.5.4: + Plenty of bugfixes regarding to spec parsing as they were reported on github + Add more exceptions on adding curly brackets + Update licenses list to the latest. - Add comment on py3 conditional and depend on python-argparse - Version bump to 0.5.3: + Various parser fixes and extended testsuite coverage - Version bump to 0.5.2: + Fixes issues found while parsing libreoffice + Fixes issues 4 and 3 on github - Version bump to 0.5.1: + Fixes the conditionals placement and makes all tests pass. - Version bump to 0.4.2: + Fix inlining + Fix service shell script + Rename obs service to different from format_spec_file - Fix build on fedora as they bytecompile the py - Version bump to 0.4.1 + Fixes to actually be able to parse own specfile. - Version bump to 0.4.0: + Add extensive testsuite + Split the code for readability purposes + Mimic all the functionality from prep_spec + Provide and obsolete obs-service-format_spec_file Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-301 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): spec-cleaner-0.5.5-6.4.1 References:

1 0

openSUSE-SU-2014:0530-1: moderate: update for curl
by opensuse-security＠opensuse.org 15 Apr '14

15 Apr '14

openSUSE Security Update: update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0530-1 Rating: moderate References: #868627 #868629 Cross-References: CVE-2014-0138 CVE-2014-0139 CVE-2014-138 CVE-2014-139 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Curl was updated to fix following problems: CVE-2014-0138: libcurl wrong re-use of connections CVE-2014-0139: libcurl IP address wildcard certificate validation Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-47 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): curl-7.21.2-45.1 curl-debuginfo-7.21.2-45.1 libcurl-devel-7.21.2-45.1 libcurl4-7.21.2-45.1 - openSUSE 11.4 (x86_64): libcurl4-32bit-7.21.2-45.1 libcurl4-debuginfo-32bit-7.21.2-45.1 - openSUSE 11.4 (ia64): libcurl4-debuginfo-x86-7.21.2-45.1 libcurl4-x86-7.21.2-45.1 - openSUSE 11.4 (i586): libcurl4-debuginfo-7.21.2-45.1 References: http://support.novell.com/security/cve/CVE-2014-0138.html http://support.novell.com/security/cve/CVE-2014-0139.html http://support.novell.com/security/cve/CVE-2014-138.html http://support.novell.com/security/cve/CVE-2014-139.html https://bugzilla.novell.com/868627 https://bugzilla.novell.com/868629

1 0

openSUSE-SU-2014:0528-1: moderate: update for jakarta-commons-fileupload
by opensuse-security＠opensuse.org 15 Apr '14

15 Apr '14

openSUSE Security Update: update for jakarta-commons-fileupload ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0528-1 Rating: moderate References: #862781 Cross-References: CVE-2014-0050 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This jakarta-commons-fileupload update fixes the follwoing security and non security issues: - bnc#862781: Fixed buffer overflow and resulting DoS (CVE-2014-0050). - Removed gcj part and deprecated macros. - Moved from jpackage-utils to javapackage-tools. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2014-297 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): jakarta-commons-fileupload-1.1.1-114.8.1 jakarta-commons-fileupload-javadoc-1.1.1-114.8.1 References: http://support.novell.com/security/cve/CVE-2014-0050.html https://bugzilla.novell.com/862781

1 0

openSUSE-SU-2014:0527-1: moderate: update for jakarta-commons-fileupload
by opensuse-security＠opensuse.org 15 Apr '14

15 Apr '14

openSUSE Security Update: update for jakarta-commons-fileupload ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0527-1 Rating: moderate References: #862781 Cross-References: CVE-2014-0050 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This jakarta-commons-fileupload update fixes the follwoing security issue: - bnc#862781: Fixed buffer overflow and resulting DoS (CVE-2014-0050). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-298 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): jakarta-commons-fileupload-1.1.1-117.121.1 jakarta-commons-fileupload-javadoc-1.1.1-117.121.1 References: http://support.novell.com/security/cve/CVE-2014-0050.html https://bugzilla.novell.com/862781

1 0

openSUSE-SU-2014:0526-1: moderate: update for couchdb
by opensuse-security＠opensuse.org 15 Apr '14

15 Apr '14

openSUSE Security Update: update for couchdb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0526-1 Rating: moderate References: #871111 Cross-References: CVE-2014-2668 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This couchdb update fixes one security issue: - bnc#871111: Fixed remote denial of service via /_uuids that allowed remote attackers to cause CPU and memory consumption. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-299 - openSUSE 12.3: zypper in -t patch openSUSE-2014-299 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): couchdb-1.3.0-2.4.1 couchdb-debuginfo-1.3.0-2.4.1 couchdb-debugsource-1.3.0-2.4.1 - openSUSE 12.3 (i586 x86_64): couchdb-1.2.0-6.4.1 couchdb-debuginfo-1.2.0-6.4.1 couchdb-debugsource-1.2.0-6.4.1 References: http://support.novell.com/security/cve/CVE-2014-2668.html https://bugzilla.novell.com/871111

1 0

openSUSE-RU-2014:0522-1: logrotate: Fix a bug where empty RUN_UPDATEDB_AS="" caused cron fail with unknown arguments if the compat values were empty
by maintenance＠opensuse.org 14 Apr '14

14 Apr '14

openSUSE Recommended Update: logrotate: Fix a bug where empty RUN_UPDATEDB_AS="" caused cron fail with unknown arguments if the compat values were empty ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0522-1 Rating: low References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issue with logrotate: - Fix a bug where empty RUN_UPDATEDB_AS="" caused cron fail with unknown arguments if the compat values were empty. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-296 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): mlocate-0.26-4.13.1 mlocate-debuginfo-0.26-4.13.1 mlocate-debugsource-0.26-4.13.1 - openSUSE 13.1 (noarch): mlocate-lang-0.26-4.13.1 References:

1 0