August 2013 - openSUSE Security - openSUSE Mailing Lists

[opensuse-security] Custom iptables command doesn't work as expected
by Hans-Peter Jansen 19 Aug '13

19 Aug '13

Hi, I try to use an iptables command in conjunction with SuSEfirewall2 (version 3.6.295 on openSUSE 12.2, kernel-desktop-3.4.47-2.38.1.x86_64). Using it standalone, it works as expected: SuSEfirewall2 stop iptables -t nat -A OUTPUT -p tcp --dport 1935 -m owner \! --uid-owner root -j REDIRECT Running rtmpsuck (2.3) behaves as expected (mostly), it catches flv streams, that you display with your browser, and stores them.. (if not, try to restart rtmpsuck.) If this iptables command is integrated in /etc/sysconfig/scripts/SuSEfirewall2-custom it doesn't work anymore: rtmpsuck doesn't detect any streams. SuSEfirewall2 non-default settings (LAN-client): FW_DEV_INT="eth0 eth1" FW_ROUTE="yes" FW_MASQUERADE="yes" FW_PROTECT_FROM_INT="no" FW_KERNEL_SECURITY="no" FW_CUSTOMRULES="/etc/sysconfig/scripts/SuSEfirewall2-custom" The yes and no settings are an attempt to fix the issue in question. I would think, it doesn't matter, from which custom callback this command is executed, but I tried all of them without luck already. What's really strange is, SuSEfirewall2 status shows the relevant entry correctly: ### iptables nat ### Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 REDIRECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1935 ! owner UID match 0 and yes, I call rtmpsuck as root (for testing purposes). BTW, I got best results with rtmpsuck version 2.3. Neither Packmans git version, nor a self backed one based on current git "behaved" well. Since version 2.3 isn't easily available for openSUSE, you can fetch it here: https://build.opensuse.org/package/show/home:frispete:tools/rtmpdump Does somebody in the audience have an idea, why this doesn't work together with SuSEfirewall2? Thanks in advance, Pete -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

2 1

[opensuse-security] Re: [security-announce] SUSE-SU-2013:1351-1: important: Security update for PHP5
by dieter＠gruber-fotos.de 19 Aug '13

19 Aug '13

Guten Tag, bis einschließlich 01.09.2013 bin ich im Urlaub. Ihre Mail werde ich nach dem 01.09.2013 beantworten. Viele Grüße, Dieter Gruber -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

4 3

[opensuse-security] 12.3 update-non-oss outdated?
by Christian Boltz 14 Aug '13

14 Aug '13

Hello, just noticed on a 12.3 server: # zypper lp Loading repository data... Warning: Repository 'openSUSE-12.3-Update-Non-Oss' appears to outdated. Consider using a different mirror or server. Reading installed packages... No updates found. Looks like there are not enough non-oss updates ;-) Nevertheless, someone[tm] should regularly update the "best before" ;-) timestamp of the repo. # zypper lr -u -E # | Alias | Name | Enabled | Refresh | URI --+---------------------+------------------------------+---------+---------+---------------------------------------------------------------------- 1 | home:cboltz | home:cboltz | Yes | Yes | http://download.opensuse.org/repositories/home:/cboltz/openSUSE_12.3/ 4 | repo-non-oss | openSUSE-12.3-Non-Oss | Yes | Yes | http://download.opensuse.org/distribution/12.3/repo/non-oss/ 5 | repo-oss | openSUSE-12.3-Oss | Yes | Yes | http://download.opensuse.org/distribution/12.3/repo/oss/ 7 | repo-update | openSUSE-12.3-Update | Yes | Yes | http://download.opensuse.org/update/12.3/ 8 | repo-update-non-oss | openSUSE-12.3-Update-Non-Oss | Yes | Yes | http://download.opensuse.org/update/12.3-non-oss/ Regards, Christian Boltz -- > > Entwickelt mein Rechner ein Eigenleben? > Klar, das machen doch alle Rechner. Kann er das nicht in _seiner_ Freizeit ausleben? [> Helga Fischer und Hans-Alexander Leukert in suse-linux] -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

3 6

[opensuse-security] Re: openSUSE-RU-2013:1299-1: moderate: texlive: roll up bugfix update
by Togan Muftuoglu 06 Aug '13

06 Aug '13

>>>>> On Mon, 5 Aug 2013 13:04:23 +0200 (CEST), maintenance(a)opensuse.org said: maintenance> openSUSE Recommended Update: texlive: roll up bugfix maintenance> update maintenance> ______________________________________________________________________________ maintenance> Announcement ID: openSUSE-RU-2013:1299-1 maintenance> Rating: moderate maintenance> References: #801727 #808731 #811162 #811258 #812286 #813032 maintenance> #814804 #819867 #823273 maintenance> Affected Products: maintenance> openSUSE 12.3 maintenance> ______________________________________________________________________________ maintenance> An update that has 9 recommended fixes can now be maintenance> installed. In addition to the package update there are 106 new packages to be installed. I can understand the ones that are texlive-xxxx but common why on the earth I would like to install all the other devel packages on a machine which is not used for building sofware, that is what obs is for. Here are the new packages that the patch wants to install: font-util freeglut-devel gccmakedep glu-devel imake libdmx-devel libdrm-devel libfontenc-devel libFS6 libFS-devel libgbm-devel libICE-devel libkms-devel liblbxutil1 liblbxutil-devel liboldX6 liboldX-devel libOSMesa9 libOSMesa-devel libpciaccess-devel libpixman-1-0-devel libSM-devel libudev-devel libvnc-devel libVncExt2 libWindowsWM7 libWindowsWM-devel libX11-devel libXau-devel libXaw6 libXaw7 libXaw8 libXaw-devel libxcb-devel libxcb-dpms0 libxcb-record0 libxcb-res0 libxcb-screensaver0 libxcb-sync0 libxcb-xevie0 libxcb-xf86dri0 libxcb-xinerama0 libxcb-xprint0 libxcb-xtest0 libxcb-xvmc0 libXcliplist1 libXcliplist-devel libXcomposite-devel libXcursor-devel libXdamage-devel libXdmcp-devel libXevie-devel libXext-devel libXfixes-devel libXfontcache-devel libXfont-devel libXft-devel libXi-devel libXinerama-devel libxkbfile-devel libxkbui1 libxkbui-devel libXmu-devel libXp-devel libXpm-devel libXprintAppUtil1 libXprintAppUtil-devel libXprintUtil-devel libXrandr-devel libXrender-devel libXres-devel libXScrnSaver-devel libXt-devel libXTrap6 libXTrap-devel libXtst-devel libXv-devel libXvMC-devel libXxf86dga-devel libXxf86misc-devel libXxf86vm-devel lndir makedepend Mesa-devel Mesa-libEGL-devel Mesa-libglapi-devel Mesa-libGL-devel Mesa-libGLESv1_CM1 Mesa-libGLESv1_CM-devel Mesa-libGLESv2-devel Mesa-libIndirectGL1 Mesa-libIndirectGL-devel python-xcb-proto-devel texlive-environ texlive-media9 texlive-movie15 texlive-preview texlive-pst-pdf xbitmaps-devel xcb-util-devel xorg-cf-files xorg-sgml-doctools xorg-x11-devel xorg-x11-proto-devel xorg-x11-util-devel xtrans maintenance> References: maintenance> https://bugzilla.novell.com/801727 maintenance> https://bugzilla.novell.com/808731 maintenance> https://bugzilla.novell.com/811162 maintenance> https://bugzilla.novell.com/811258 maintenance> https://bugzilla.novell.com/812286 maintenance> https://bugzilla.novell.com/813032 maintenance> https://bugzilla.novell.com/814804 maintenance> https://bugzilla.novell.com/819867 maintenance> https://bugzilla.novell.com/823273 -- Life is endless possibilities -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

2 2