December 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2014:1735-1: important: kernel update for Evergreen 11.4
by opensuse-security＠opensuse.org 31 Dec '14

31 Dec '14

openSUSE Security Update: kernel update for Evergreen 11.4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1735-1 Rating: important References: #907818 #909077 #910251 Cross-References: CVE-2014-8133 CVE-2014-9090 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: Kernel update for Evergreen 11.4, fixes * CVE-2014-8133 * CVE-2014-9090 * CVE-2014-9322 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2014-97 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): kernel-debug-3.0.101-95.1 kernel-debug-base-3.0.101-95.1 kernel-debug-base-debuginfo-3.0.101-95.1 kernel-debug-debuginfo-3.0.101-95.1 kernel-debug-debugsource-3.0.101-95.1 kernel-debug-devel-3.0.101-95.1 kernel-debug-devel-debuginfo-3.0.101-95.1 kernel-debug-hmac-3.0.101-95.1 kernel-default-3.0.101-95.1 kernel-default-base-3.0.101-95.1 kernel-default-base-debuginfo-3.0.101-95.1 kernel-default-debuginfo-3.0.101-95.1 kernel-default-debugsource-3.0.101-95.1 kernel-default-devel-3.0.101-95.1 kernel-default-devel-debuginfo-3.0.101-95.1 kernel-default-hmac-3.0.101-95.1 kernel-desktop-3.0.101-95.1 kernel-desktop-base-3.0.101-95.1 kernel-desktop-base-debuginfo-3.0.101-95.1 kernel-desktop-debuginfo-3.0.101-95.1 kernel-desktop-debugsource-3.0.101-95.1 kernel-desktop-devel-3.0.101-95.1 kernel-desktop-devel-debuginfo-3.0.101-95.1 kernel-desktop-hmac-3.0.101-95.1 kernel-ec2-3.0.101-95.1 kernel-ec2-base-3.0.101-95.1 kernel-ec2-base-debuginfo-3.0.101-95.1 kernel-ec2-debuginfo-3.0.101-95.1 kernel-ec2-debugsource-3.0.101-95.1 kernel-ec2-devel-3.0.101-95.1 kernel-ec2-devel-debuginfo-3.0.101-95.1 kernel-ec2-extra-3.0.101-95.1 kernel-ec2-extra-debuginfo-3.0.101-95.1 kernel-ec2-hmac-3.0.101-95.1 kernel-source-3.0.101-95.1 kernel-source-vanilla-3.0.101-95.1 kernel-syms-3.0.101-95.1 kernel-trace-3.0.101-95.1 kernel-trace-base-3.0.101-95.1 kernel-trace-base-debuginfo-3.0.101-95.1 kernel-trace-debuginfo-3.0.101-95.1 kernel-trace-debugsource-3.0.101-95.1 kernel-trace-devel-3.0.101-95.1 kernel-trace-devel-debuginfo-3.0.101-95.1 kernel-trace-hmac-3.0.101-95.1 kernel-vanilla-3.0.101-95.1 kernel-vanilla-base-3.0.101-95.1 kernel-vanilla-base-debuginfo-3.0.101-95.1 kernel-vanilla-debuginfo-3.0.101-95.1 kernel-vanilla-debugsource-3.0.101-95.1 kernel-vanilla-devel-3.0.101-95.1 kernel-vanilla-devel-debuginfo-3.0.101-95.1 kernel-vanilla-hmac-3.0.101-95.1 kernel-xen-3.0.101-95.1 kernel-xen-base-3.0.101-95.1 kernel-xen-base-debuginfo-3.0.101-95.1 kernel-xen-debuginfo-3.0.101-95.1 kernel-xen-debugsource-3.0.101-95.1 kernel-xen-devel-3.0.101-95.1 kernel-xen-devel-debuginfo-3.0.101-95.1 kernel-xen-hmac-3.0.101-95.1 preload-1.2-6.73.1 preload-debuginfo-1.2-6.73.1 preload-debugsource-1.2-6.73.1 preload-kmp-default-1.2_3.0.101_95-6.73.1 preload-kmp-default-debuginfo-1.2_3.0.101_95-6.73.1 preload-kmp-desktop-1.2_3.0.101_95-6.73.1 preload-kmp-desktop-debuginfo-1.2_3.0.101_95-6.73.1 - openSUSE Evergreen 11.4 (noarch): kernel-docs-3.0.101-95.2 - openSUSE Evergreen 11.4 (i586): kernel-pae-3.0.101-95.1 kernel-pae-base-3.0.101-95.1 kernel-pae-base-debuginfo-3.0.101-95.1 kernel-pae-debuginfo-3.0.101-95.1 kernel-pae-debugsource-3.0.101-95.1 kernel-pae-devel-3.0.101-95.1 kernel-pae-devel-debuginfo-3.0.101-95.1 kernel-pae-hmac-3.0.101-95.1 kernel-vmi-3.0.101-95.1 kernel-vmi-base-3.0.101-95.1 kernel-vmi-base-debuginfo-3.0.101-95.1 kernel-vmi-debuginfo-3.0.101-95.1 kernel-vmi-debugsource-3.0.101-95.1 kernel-vmi-devel-3.0.101-95.1 kernel-vmi-devel-debuginfo-3.0.101-95.1 kernel-vmi-hmac-3.0.101-95.1 References: http://support.novell.com/security/cve/CVE-2014-8133.html http://support.novell.com/security/cve/CVE-2014-9090.html https://bugzilla.suse.com/show_bug.cgi?id=907818 https://bugzilla.suse.com/show_bug.cgi?id=909077 https://bugzilla.suse.com/show_bug.cgi?id=910251

1 0

openSUSE-SU-2014:1734-1: moderate: update for python
by opensuse-security＠opensuse.org 31 Dec '14

31 Dec '14

openSUSE Security Update: update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1734-1 Rating: moderate References: #863741 #884075 #885882 #898572 #901715 Cross-References: CVE-2014-1912 CVE-2014-4616 CVE-2014-4650 CVE-2014-7185 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that solves four vulnerabilities and has one errata is now available. Description: This update fixes the following security issues: bnc#863741 (CVE-2014-1912): Fixed potential buffer overflow in socket.recvfrom_into bnc#884075 (CVE-2014-4616): Missing boundary check in JSON module bnc#885882 (CVE-2014-4650): CGIHTTPServer file disclosure and directory traversal through URL-encoded characters remove link count optimizations that are incorrect on btrfs (and possibly other filesystems) bnc#898572 (CVE-2014-7185): potential wraparound/overflow in buffer() bnc#901715: Disable SSL2 by default Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2014-98 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): libpython2_7-1_0-2.7.3-52.1 libpython2_7-1_0-debuginfo-2.7.3-52.1 python-2.7.3-52.1 python-base-2.7.3-52.1 python-base-debuginfo-2.7.3-52.1 python-base-debugsource-2.7.3-52.1 python-curses-2.7.3-52.1 python-curses-debuginfo-2.7.3-52.1 python-debuginfo-2.7.3-52.1 python-debugsource-2.7.3-52.1 python-demo-2.7.3-52.1 python-devel-2.7.3-52.1 python-gdbm-2.7.3-52.1 python-gdbm-debuginfo-2.7.3-52.1 python-idle-2.7.3-52.1 python-tk-2.7.3-52.1 python-tk-debuginfo-2.7.3-52.1 python-xml-2.7.3-52.1 python-xml-debuginfo-2.7.3-52.1 - openSUSE Evergreen 11.4 (x86_64): libpython2_7-1_0-32bit-2.7.3-52.1 libpython2_7-1_0-debuginfo-32bit-2.7.3-52.1 python-32bit-2.7.3-52.1 python-base-32bit-2.7.3-52.1 python-base-debuginfo-32bit-2.7.3-52.1 python-debuginfo-32bit-2.7.3-52.1 - openSUSE Evergreen 11.4 (noarch): python-doc-2.7-52.1 python-doc-pdf-2.7-52.1 - openSUSE Evergreen 11.4 (ia64): libpython2_7-1_0-debuginfo-x86-2.7.3-52.1 libpython2_7-1_0-x86-2.7.3-52.1 python-base-debuginfo-x86-2.7.3-52.1 python-base-x86-2.7.3-52.1 python-debuginfo-x86-2.7.3-52.1 python-x86-2.7.3-52.1 References: http://support.novell.com/security/cve/CVE-2014-1912.html http://support.novell.com/security/cve/CVE-2014-4616.html http://support.novell.com/security/cve/CVE-2014-4650.html http://support.novell.com/security/cve/CVE-2014-7185.html https://bugzilla.suse.com/show_bug.cgi?id=863741 https://bugzilla.suse.com/show_bug.cgi?id=884075 https://bugzilla.suse.com/show_bug.cgi?id=885882 https://bugzilla.suse.com/show_bug.cgi?id=898572 https://bugzilla.suse.com/show_bug.cgi?id=901715

1 0

openSUSE-SU-2014:1733-1: moderate: update for php5
by opensuse-security＠opensuse.org 31 Dec '14

31 Dec '14

openSUSE Security Update: update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1733-1 Rating: moderate References: #902357 #902360 #902368 Cross-References: CVE-2014-3668 CVE-2014-3669 CVE-2014-3670 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: - security update: * CVE-2014-3670 [bnc#902357] * CVE-2014-3669 [bnc#902360] * CVE-2014-3668 [bnc#902368] - added patches: * php-CVE-2014-3670.patch * php-CVE-2014-3669.patch * php-CVE-2014-3668.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2014-96 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): apache2-mod_php5-5.3.17-387.1 apache2-mod_php5-debuginfo-5.3.17-387.1 php5-5.3.17-387.1 php5-bcmath-5.3.17-387.1 php5-bcmath-debuginfo-5.3.17-387.1 php5-bz2-5.3.17-387.1 php5-bz2-debuginfo-5.3.17-387.1 php5-calendar-5.3.17-387.1 php5-calendar-debuginfo-5.3.17-387.1 php5-ctype-5.3.17-387.1 php5-ctype-debuginfo-5.3.17-387.1 php5-curl-5.3.17-387.1 php5-curl-debuginfo-5.3.17-387.1 php5-dba-5.3.17-387.1 php5-dba-debuginfo-5.3.17-387.1 php5-debuginfo-5.3.17-387.1 php5-debugsource-5.3.17-387.1 php5-devel-5.3.17-387.1 php5-dom-5.3.17-387.1 php5-dom-debuginfo-5.3.17-387.1 php5-enchant-5.3.17-387.1 php5-enchant-debuginfo-5.3.17-387.1 php5-exif-5.3.17-387.1 php5-exif-debuginfo-5.3.17-387.1 php5-fastcgi-5.3.17-387.1 php5-fastcgi-debuginfo-5.3.17-387.1 php5-fileinfo-5.3.17-387.1 php5-fileinfo-debuginfo-5.3.17-387.1 php5-fpm-5.3.17-387.1 php5-fpm-debuginfo-5.3.17-387.1 php5-ftp-5.3.17-387.1 php5-ftp-debuginfo-5.3.17-387.1 php5-gd-5.3.17-387.1 php5-gd-debuginfo-5.3.17-387.1 php5-gettext-5.3.17-387.1 php5-gettext-debuginfo-5.3.17-387.1 php5-gmp-5.3.17-387.1 php5-gmp-debuginfo-5.3.17-387.1 php5-iconv-5.3.17-387.1 php5-iconv-debuginfo-5.3.17-387.1 php5-imap-5.3.17-387.1 php5-imap-debuginfo-5.3.17-387.1 php5-intl-5.3.17-387.1 php5-intl-debuginfo-5.3.17-387.1 php5-json-5.3.17-387.1 php5-json-debuginfo-5.3.17-387.1 php5-ldap-5.3.17-387.1 php5-ldap-debuginfo-5.3.17-387.1 php5-mbstring-5.3.17-387.1 php5-mbstring-debuginfo-5.3.17-387.1 php5-mcrypt-5.3.17-387.1 php5-mcrypt-debuginfo-5.3.17-387.1 php5-mysql-5.3.17-387.1 php5-mysql-debuginfo-5.3.17-387.1 php5-odbc-5.3.17-387.1 php5-odbc-debuginfo-5.3.17-387.1 php5-openssl-5.3.17-387.1 php5-openssl-debuginfo-5.3.17-387.1 php5-pcntl-5.3.17-387.1 php5-pcntl-debuginfo-5.3.17-387.1 php5-pdo-5.3.17-387.1 php5-pdo-debuginfo-5.3.17-387.1 php5-pgsql-5.3.17-387.1 php5-pgsql-debuginfo-5.3.17-387.1 php5-phar-5.3.17-387.1 php5-phar-debuginfo-5.3.17-387.1 php5-posix-5.3.17-387.1 php5-posix-debuginfo-5.3.17-387.1 php5-pspell-5.3.17-387.1 php5-pspell-debuginfo-5.3.17-387.1 php5-readline-5.3.17-387.1 php5-readline-debuginfo-5.3.17-387.1 php5-shmop-5.3.17-387.1 php5-shmop-debuginfo-5.3.17-387.1 php5-snmp-5.3.17-387.1 php5-snmp-debuginfo-5.3.17-387.1 php5-soap-5.3.17-387.1 php5-soap-debuginfo-5.3.17-387.1 php5-sockets-5.3.17-387.1 php5-sockets-debuginfo-5.3.17-387.1 php5-sqlite-5.3.17-387.1 php5-sqlite-debuginfo-5.3.17-387.1 php5-suhosin-5.3.17-387.1 php5-suhosin-debuginfo-5.3.17-387.1 php5-sysvmsg-5.3.17-387.1 php5-sysvmsg-debuginfo-5.3.17-387.1 php5-sysvsem-5.3.17-387.1 php5-sysvsem-debuginfo-5.3.17-387.1 php5-sysvshm-5.3.17-387.1 php5-sysvshm-debuginfo-5.3.17-387.1 php5-tidy-5.3.17-387.1 php5-tidy-debuginfo-5.3.17-387.1 php5-tokenizer-5.3.17-387.1 php5-tokenizer-debuginfo-5.3.17-387.1 php5-wddx-5.3.17-387.1 php5-wddx-debuginfo-5.3.17-387.1 php5-xmlreader-5.3.17-387.1 php5-xmlreader-debuginfo-5.3.17-387.1 php5-xmlrpc-5.3.17-387.1 php5-xmlrpc-debuginfo-5.3.17-387.1 php5-xmlwriter-5.3.17-387.1 php5-xmlwriter-debuginfo-5.3.17-387.1 php5-xsl-5.3.17-387.1 php5-xsl-debuginfo-5.3.17-387.1 php5-zip-5.3.17-387.1 php5-zip-debuginfo-5.3.17-387.1 php5-zlib-5.3.17-387.1 php5-zlib-debuginfo-5.3.17-387.1 - openSUSE Evergreen 11.4 (noarch): php5-pear-5.3.17-387.1 References: http://support.novell.com/security/cve/CVE-2014-3668.html http://support.novell.com/security/cve/CVE-2014-3669.html http://support.novell.com/security/cve/CVE-2014-3670.html https://bugzilla.suse.com/show_bug.cgi?id=902357 https://bugzilla.suse.com/show_bug.cgi?id=902360 https://bugzilla.suse.com/show_bug.cgi?id=902368

1 0

openSUSE-SU-2014:1727-1: moderate: Security update for libreoffice
by opensuse-security＠opensuse.org 29 Dec '14

29 Dec '14

openSUSE Security Update: Security update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1727-1 Rating: moderate References: #884942 #907636 Cross-References: CVE-2014-9093 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This libreoffice update fixes the following security and non secuirty issues: - Fix for CVE-2014-9093 bnc#907636. - Fix typo %{libdir} -> %{_libdir} - Remove dangling symlinks from previous versions bnc#884942. - Fix build with boost 1.56 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-823 - openSUSE 13.1: zypper in -t patch openSUSE-2014-823 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libreoffice-4.3.5.2-8.1 libreoffice-base-4.3.5.2-8.1 libreoffice-base-debuginfo-4.3.5.2-8.1 libreoffice-base-drivers-mysql-4.3.5.2-8.1 libreoffice-base-drivers-mysql-debuginfo-4.3.5.2-8.1 libreoffice-base-drivers-postgresql-4.3.5.2-8.1 libreoffice-base-drivers-postgresql-debuginfo-4.3.5.2-8.1 libreoffice-calc-4.3.5.2-8.1 libreoffice-calc-debuginfo-4.3.5.2-8.1 libreoffice-calc-extensions-4.3.5.2-8.1 libreoffice-debuginfo-4.3.5.2-8.1 libreoffice-debugsource-4.3.5.2-8.1 libreoffice-draw-4.3.5.2-8.1 libreoffice-draw-debuginfo-4.3.5.2-8.1 libreoffice-filters-optional-4.3.5.2-8.1 libreoffice-gnome-4.3.5.2-8.1 libreoffice-gnome-debuginfo-4.3.5.2-8.1 libreoffice-impress-4.3.5.2-8.1 libreoffice-impress-debuginfo-4.3.5.2-8.1 libreoffice-kde4-4.3.5.2-8.1 libreoffice-kde4-debuginfo-4.3.5.2-8.1 libreoffice-mailmerge-4.3.5.2-8.1 libreoffice-math-4.3.5.2-8.1 libreoffice-math-debuginfo-4.3.5.2-8.1 libreoffice-officebean-4.3.5.2-8.1 libreoffice-officebean-debuginfo-4.3.5.2-8.1 libreoffice-pyuno-4.3.5.2-8.1 libreoffice-pyuno-debuginfo-4.3.5.2-8.1 libreoffice-sdk-4.3.5.2-8.1 libreoffice-sdk-debuginfo-4.3.5.2-8.1 libreoffice-sdk-doc-4.3.5.2-8.1 libreoffice-writer-4.3.5.2-8.1 libreoffice-writer-debuginfo-4.3.5.2-8.1 libreoffice-writer-extensions-4.3.5.2-8.1 - openSUSE 13.2 (noarch): libreoffice-branding-upstream-4.3.5.2-8.1 libreoffice-icon-theme-crystal-4.3.5.2-8.1 libreoffice-icon-theme-galaxy-4.3.5.2-8.1 libreoffice-icon-theme-hicontrast-4.3.5.2-8.1 libreoffice-icon-theme-oxygen-4.3.5.2-8.1 libreoffice-icon-theme-sifr-4.3.5.2-8.1 libreoffice-icon-theme-tango-4.3.5.2-8.1 libreoffice-l10n-af-4.3.5.2-8.1 libreoffice-l10n-ar-4.3.5.2-8.1 libreoffice-l10n-as-4.3.5.2-8.1 libreoffice-l10n-bg-4.3.5.2-8.1 libreoffice-l10n-bn-4.3.5.2-8.1 libreoffice-l10n-br-4.3.5.2-8.1 libreoffice-l10n-ca-4.3.5.2-8.1 libreoffice-l10n-cs-4.3.5.2-8.1 libreoffice-l10n-cy-4.3.5.2-8.1 libreoffice-l10n-da-4.3.5.2-8.1 libreoffice-l10n-de-4.3.5.2-8.1 libreoffice-l10n-dz-4.3.5.2-8.1 libreoffice-l10n-el-4.3.5.2-8.1 libreoffice-l10n-en-4.3.5.2-8.1 libreoffice-l10n-es-4.3.5.2-8.1 libreoffice-l10n-et-4.3.5.2-8.1 libreoffice-l10n-eu-4.3.5.2-8.1 libreoffice-l10n-fa-4.3.5.2-8.1 libreoffice-l10n-fi-4.3.5.2-8.1 libreoffice-l10n-fr-4.3.5.2-8.1 libreoffice-l10n-ga-4.3.5.2-8.1 libreoffice-l10n-gl-4.3.5.2-8.1 libreoffice-l10n-gu-4.3.5.2-8.1 libreoffice-l10n-he-4.3.5.2-8.1 libreoffice-l10n-hi-4.3.5.2-8.1 libreoffice-l10n-hr-4.3.5.2-8.1 libreoffice-l10n-hu-4.3.5.2-8.1 libreoffice-l10n-it-4.3.5.2-8.1 libreoffice-l10n-ja-4.3.5.2-8.1 libreoffice-l10n-kk-4.3.5.2-8.1 libreoffice-l10n-kn-4.3.5.2-8.1 libreoffice-l10n-ko-4.3.5.2-8.1 libreoffice-l10n-lt-4.3.5.2-8.1 libreoffice-l10n-lv-4.3.5.2-8.1 libreoffice-l10n-mai-4.3.5.2-8.1 libreoffice-l10n-ml-4.3.5.2-8.1 libreoffice-l10n-mr-4.3.5.2-8.1 libreoffice-l10n-nb-4.3.5.2-8.1 libreoffice-l10n-nl-4.3.5.2-8.1 libreoffice-l10n-nn-4.3.5.2-8.1 libreoffice-l10n-nr-4.3.5.2-8.1 libreoffice-l10n-nso-4.3.5.2-8.1 libreoffice-l10n-or-4.3.5.2-8.1 libreoffice-l10n-pa-4.3.5.2-8.1 libreoffice-l10n-pl-4.3.5.2-8.1 libreoffice-l10n-pt-BR-4.3.5.2-8.1 libreoffice-l10n-pt-PT-4.3.5.2-8.1 libreoffice-l10n-ro-4.3.5.2-8.1 libreoffice-l10n-ru-4.3.5.2-8.1 libreoffice-l10n-si-4.3.5.2-8.1 libreoffice-l10n-sk-4.3.5.2-8.1 libreoffice-l10n-sl-4.3.5.2-8.1 libreoffice-l10n-sr-4.3.5.2-8.1 libreoffice-l10n-ss-4.3.5.2-8.1 libreoffice-l10n-st-4.3.5.2-8.1 libreoffice-l10n-sv-4.3.5.2-8.1 libreoffice-l10n-ta-4.3.5.2-8.1 libreoffice-l10n-te-4.3.5.2-8.1 libreoffice-l10n-th-4.3.5.2-8.1 libreoffice-l10n-tn-4.3.5.2-8.1 libreoffice-l10n-tr-4.3.5.2-8.1 libreoffice-l10n-ts-4.3.5.2-8.1 libreoffice-l10n-uk-4.3.5.2-8.1 libreoffice-l10n-ve-4.3.5.2-8.1 libreoffice-l10n-xh-4.3.5.2-8.1 libreoffice-l10n-zh-Hans-4.3.5.2-8.1 libreoffice-l10n-zh-Hant-4.3.5.2-8.1 libreoffice-l10n-zu-4.3.5.2-8.1 - openSUSE 13.1 (i586 x86_64): libreoffice-4.1.6.2-37.1 libreoffice-base-4.1.6.2-37.1 libreoffice-base-debuginfo-4.1.6.2-37.1 libreoffice-base-drivers-mysql-4.1.6.2-37.1 libreoffice-base-drivers-mysql-debuginfo-4.1.6.2-37.1 libreoffice-base-drivers-postgresql-4.1.6.2-37.1 libreoffice-base-drivers-postgresql-debuginfo-4.1.6.2-37.1 libreoffice-base-extensions-4.1.6.2-37.1 libreoffice-calc-4.1.6.2-37.1 libreoffice-calc-debuginfo-4.1.6.2-37.1 libreoffice-calc-extensions-4.1.6.2-37.1 libreoffice-debuginfo-4.1.6.2-37.1 libreoffice-debugsource-4.1.6.2-37.1 libreoffice-draw-4.1.6.2-37.1 libreoffice-draw-debuginfo-4.1.6.2-37.1 libreoffice-draw-extensions-4.1.6.2-37.1 libreoffice-filters-optional-4.1.6.2-37.1 libreoffice-gnome-4.1.6.2-37.1 libreoffice-gnome-debuginfo-4.1.6.2-37.1 libreoffice-icon-themes-prebuilt-4.1.6.2-37.1 libreoffice-impress-4.1.6.2-37.1 libreoffice-impress-debuginfo-4.1.6.2-37.1 libreoffice-impress-extensions-4.1.6.2-37.1 libreoffice-impress-extensions-debuginfo-4.1.6.2-37.1 libreoffice-kde-4.1.6.2-37.1 libreoffice-kde-debuginfo-4.1.6.2-37.1 libreoffice-kde4-4.1.6.2-37.1 libreoffice-kde4-debuginfo-4.1.6.2-37.1 libreoffice-l10n-prebuilt-4.1.6.2-37.1 libreoffice-mailmerge-4.1.6.2-37.1 libreoffice-math-4.1.6.2-37.1 libreoffice-math-debuginfo-4.1.6.2-37.1 libreoffice-officebean-4.1.6.2-37.1 libreoffice-officebean-debuginfo-4.1.6.2-37.1 libreoffice-pyuno-4.1.6.2-37.1 libreoffice-pyuno-debuginfo-4.1.6.2-37.1 libreoffice-sdk-4.1.6.2-37.1 libreoffice-sdk-debuginfo-4.1.6.2-37.1 libreoffice-sdk-doc-4.1.6.2-37.1 libreoffice-writer-4.1.6.2-37.1 libreoffice-writer-debuginfo-4.1.6.2-37.1 libreoffice-writer-extensions-4.1.6.2-37.1 - openSUSE 13.1 (noarch): libreoffice-branding-upstream-4.1.6.2-37.1 libreoffice-help-ast-4.1.6.2-37.1 libreoffice-help-bg-4.1.6.2-37.1 libreoffice-help-ca-4.1.6.2-37.1 libreoffice-help-cs-4.1.6.2-37.1 libreoffice-help-da-4.1.6.2-37.1 libreoffice-help-de-4.1.6.2-37.1 libreoffice-help-el-4.1.6.2-37.1 libreoffice-help-en-GB-4.1.6.2-37.1 libreoffice-help-en-US-4.1.6.2-37.1 libreoffice-help-en-ZA-4.1.6.2-37.1 libreoffice-help-es-4.1.6.2-37.1 libreoffice-help-et-4.1.6.2-37.1 libreoffice-help-eu-4.1.6.2-37.1 libreoffice-help-fi-4.1.6.2-37.1 libreoffice-help-fr-4.1.6.2-37.1 libreoffice-help-gl-4.1.6.2-37.1 libreoffice-help-gu-IN-4.1.6.2-37.1 libreoffice-help-hi-IN-4.1.6.2-37.1 libreoffice-help-hu-4.1.6.2-37.1 libreoffice-help-it-4.1.6.2-37.1 libreoffice-help-ja-4.1.6.2-37.1 libreoffice-help-km-4.1.6.2-37.1 libreoffice-help-ko-4.1.6.2-37.1 libreoffice-help-mk-4.1.6.2-37.1 libreoffice-help-nb-4.1.6.2-37.1 libreoffice-help-nl-4.1.6.2-37.1 libreoffice-help-pl-4.1.6.2-37.1 libreoffice-help-pt-4.1.6.2-37.1 libreoffice-help-pt-BR-4.1.6.2-37.1 libreoffice-help-ru-4.1.6.2-37.1 libreoffice-help-sk-4.1.6.2-37.1 libreoffice-help-sl-4.1.6.2-37.1 libreoffice-help-sv-4.1.6.2-37.1 libreoffice-help-tr-4.1.6.2-37.1 libreoffice-help-vi-4.1.6.2-37.1 libreoffice-help-zh-CN-4.1.6.2-37.1 libreoffice-help-zh-TW-4.1.6.2-37.1 libreoffice-icon-theme-crystal-4.1.6.2-37.1 libreoffice-icon-theme-galaxy-4.1.6.2-37.1 libreoffice-icon-theme-hicontrast-4.1.6.2-37.1 libreoffice-icon-theme-oxygen-4.1.6.2-37.1 libreoffice-icon-theme-tango-4.1.6.2-37.1 libreoffice-l10n-af-4.1.6.2-37.3 libreoffice-l10n-am-4.1.6.2-37.3 libreoffice-l10n-ar-4.1.6.2-37.3 libreoffice-l10n-as-4.1.6.2-37.3 libreoffice-l10n-ast-4.1.6.2-37.3 libreoffice-l10n-be-BY-4.1.6.2-37.3 libreoffice-l10n-bg-4.1.6.2-37.3 libreoffice-l10n-br-4.1.6.2-37.3 libreoffice-l10n-ca-4.1.6.2-37.3 libreoffice-l10n-cs-4.1.6.2-37.3 libreoffice-l10n-cy-4.1.6.2-37.3 libreoffice-l10n-da-4.1.6.2-37.3 libreoffice-l10n-de-4.1.6.2-37.3 libreoffice-l10n-el-4.1.6.2-37.3 libreoffice-l10n-en-GB-4.1.6.2-37.3 libreoffice-l10n-en-ZA-4.1.6.2-37.3 libreoffice-l10n-eo-4.1.6.2-37.3 libreoffice-l10n-es-4.1.6.2-37.3 libreoffice-l10n-et-4.1.6.2-37.3 libreoffice-l10n-eu-4.1.6.2-37.3 libreoffice-l10n-fi-4.1.6.2-37.3 libreoffice-l10n-fr-4.1.6.2-37.3 libreoffice-l10n-ga-4.1.6.2-37.3 libreoffice-l10n-gd-4.1.6.2-37.3 libreoffice-l10n-gl-4.1.6.2-37.3 libreoffice-l10n-gu-IN-4.1.6.2-37.3 libreoffice-l10n-he-4.1.6.2-37.3 libreoffice-l10n-hi-IN-4.1.6.2-37.3 libreoffice-l10n-hr-4.1.6.2-37.3 libreoffice-l10n-hu-4.1.6.2-37.3 libreoffice-l10n-id-4.1.6.2-37.3 libreoffice-l10n-is-4.1.6.2-37.3 libreoffice-l10n-it-4.1.6.2-37.3 libreoffice-l10n-ja-4.1.6.2-37.3 libreoffice-l10n-ka-4.1.6.2-37.3 libreoffice-l10n-km-4.1.6.2-37.3 libreoffice-l10n-kn-4.1.6.2-37.3 libreoffice-l10n-ko-4.1.6.2-37.3 libreoffice-l10n-lt-4.1.6.2-37.3 libreoffice-l10n-mk-4.1.6.2-37.3 libreoffice-l10n-ml-4.1.6.2-37.3 libreoffice-l10n-mr-4.1.6.2-37.3 libreoffice-l10n-nb-4.1.6.2-37.3 libreoffice-l10n-nl-4.1.6.2-37.3 libreoffice-l10n-nn-4.1.6.2-37.3 libreoffice-l10n-nr-4.1.6.2-37.3 libreoffice-l10n-om-4.1.6.2-37.3 libreoffice-l10n-or-4.1.6.2-37.3 libreoffice-l10n-pa-IN-4.1.6.2-37.3 libreoffice-l10n-pl-4.1.6.2-37.3 libreoffice-l10n-pt-4.1.6.2-37.3 libreoffice-l10n-pt-BR-4.1.6.2-37.3 libreoffice-l10n-ro-4.1.6.2-37.3 libreoffice-l10n-ru-4.1.6.2-37.3 libreoffice-l10n-rw-4.1.6.2-37.3 libreoffice-l10n-sh-4.1.6.2-37.3 libreoffice-l10n-sk-4.1.6.2-37.3 libreoffice-l10n-sl-4.1.6.2-37.3 libreoffice-l10n-sr-4.1.6.2-37.3 libreoffice-l10n-ss-4.1.6.2-37.3 libreoffice-l10n-st-4.1.6.2-37.3 libreoffice-l10n-sv-4.1.6.2-37.3 libreoffice-l10n-ta-4.1.6.2-37.3 libreoffice-l10n-te-4.1.6.2-37.3 libreoffice-l10n-tg-4.1.6.2-37.3 libreoffice-l10n-th-4.1.6.2-37.3 libreoffice-l10n-tr-4.1.6.2-37.3 libreoffice-l10n-ts-4.1.6.2-37.3 libreoffice-l10n-ug-4.1.6.2-37.3 libreoffice-l10n-uk-4.1.6.2-37.3 libreoffice-l10n-ve-4.1.6.2-37.3 libreoffice-l10n-vi-4.1.6.2-37.3 libreoffice-l10n-xh-4.1.6.2-37.3 libreoffice-l10n-zh-CN-4.1.6.2-37.3 libreoffice-l10n-zh-TW-4.1.6.2-37.3 libreoffice-l10n-zu-4.1.6.2-37.3 References: http://support.novell.com/security/cve/CVE-2014-9093.html https://bugzilla.suse.com/show_bug.cgi?id=884942 https://bugzilla.suse.com/show_bug.cgi?id=907636

1 0

openSUSE-SU-2014:1726-1: moderate: Security update for apache2
by opensuse-security＠opensuse.org 29 Dec '14

29 Dec '14

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1726-1 Rating: moderate References: #792309 #842377 #849445 #864166 #871310 #909715 Cross-References: CVE-2013-5704 CVE-2014-8109 Affected Products: openSUSE 13.2 openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has four fixes is now available. Description: Apache2 was updated to fix bugs and security issues. Security issues fixed: CVE-2013-5704: Added a change to fix a flaw in the way mod_headers handled chunked requests. Adds "MergeTrailers" directive to restore legacy behavior [bnc#871310], CVE-2014-8109: Fixes handling of the Require line when a LuaAuthzProvider is used in multiple Require directives with different arguments. Bugfixes: - changed apache2.service file to fix situation where apache won't start at boot when using an encrypted certificate because user isn't prompted for password during boot [bnc#792309]. - added <IfModule> around SSLSessionCache to avoid failing to start [bnc#842377], [bnc#849445] and [bnc#864166]. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-822 - openSUSE 13.1: zypper in -t patch openSUSE-2014-822 - openSUSE 12.3: zypper in -t patch openSUSE-2014-822 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-2.4.10-4.1 apache2-debuginfo-2.4.10-4.1 apache2-debugsource-2.4.10-4.1 apache2-devel-2.4.10-4.1 apache2-event-2.4.10-4.1 apache2-event-debuginfo-2.4.10-4.1 apache2-example-pages-2.4.10-4.1 apache2-prefork-2.4.10-4.1 apache2-prefork-debuginfo-2.4.10-4.1 apache2-utils-2.4.10-4.1 apache2-utils-debuginfo-2.4.10-4.1 apache2-worker-2.4.10-4.1 apache2-worker-debuginfo-2.4.10-4.1 - openSUSE 13.2 (noarch): apache2-doc-2.4.10-4.1 - openSUSE 13.1 (i586 x86_64): apache2-2.4.6-6.37.1 apache2-debuginfo-2.4.6-6.37.1 apache2-debugsource-2.4.6-6.37.1 apache2-devel-2.4.6-6.37.1 apache2-event-2.4.6-6.37.1 apache2-event-debuginfo-2.4.6-6.37.1 apache2-example-pages-2.4.6-6.37.1 apache2-prefork-2.4.6-6.37.1 apache2-prefork-debuginfo-2.4.6-6.37.1 apache2-utils-2.4.6-6.37.1 apache2-utils-debuginfo-2.4.6-6.37.1 apache2-worker-2.4.6-6.37.1 apache2-worker-debuginfo-2.4.6-6.37.1 - openSUSE 13.1 (noarch): apache2-doc-2.4.6-6.37.1 - openSUSE 12.3 (i586 x86_64): apache2-2.2.29-10.20.1 apache2-debuginfo-2.2.29-10.20.1 apache2-debugsource-2.2.29-10.20.1 apache2-devel-2.2.29-10.20.1 apache2-event-2.2.29-10.20.1 apache2-event-debuginfo-2.2.29-10.20.1 apache2-example-pages-2.2.29-10.20.1 apache2-itk-2.2.29-10.20.1 apache2-itk-debuginfo-2.2.29-10.20.1 apache2-prefork-2.2.29-10.20.1 apache2-prefork-debuginfo-2.2.29-10.20.1 apache2-utils-2.2.29-10.20.1 apache2-utils-debuginfo-2.2.29-10.20.1 apache2-worker-2.2.29-10.20.1 apache2-worker-debuginfo-2.2.29-10.20.1 - openSUSE 12.3 (noarch): apache2-doc-2.2.29-10.20.1 References: http://support.novell.com/security/cve/CVE-2013-5704.html http://support.novell.com/security/cve/CVE-2014-8109.html https://bugzilla.suse.com/show_bug.cgi?id=792309 https://bugzilla.suse.com/show_bug.cgi?id=842377 https://bugzilla.suse.com/show_bug.cgi?id=849445 https://bugzilla.suse.com/show_bug.cgi?id=864166 https://bugzilla.suse.com/show_bug.cgi?id=871310 https://bugzilla.suse.com/show_bug.cgi?id=909715

1 0

openSUSE-SU-2014:1725-1: moderate: Security update for subversion
by opensuse-security＠opensuse.org 29 Dec '14

29 Dec '14

openSUSE Security Update: Security update for subversion ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1725-1 Rating: moderate References: #909935 Cross-References: CVE-2014-3580 CVE-2014-8108 Affected Products: openSUSE 13.2 openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This Apache Subversion update fixes the following security and non security issues. - Apache Subversion 1.8.11 - This release addresses two security issues: [boo#909935] * CVE-2014-3580: mod_dav_svn DoS from invalid REPORT requests. * CVE-2014-8108: mod_dav_svn DoS from use of invalid transaction names. - Client-side bugfixes: * checkout/update: fix file externals failing to follow history and subsequently silently failing * patch: don't skip targets in valid --git difs * diff: make property output in diffs stable * diff: fix diff of local copied directory with props * diff: fix changelist filter for repos-WC and WC-WC * remove broken conflict resolver menu options that always error out * improve gpg-agent support * fix crash in eclipse IDE with GNOME Keyring * fix externals shadowing a versioned directory * fix problems working on unix file systems that don't support permissions * upgrade: keep external registrations * cleanup: iprove performance of recorded timestamp fixups * translation updates for German - Server-side bugfixes: * disable revprop caching feature due to cache invalidation problems * skip generating uniquifiers if rep-sharing is not supported * mod_dav_svn: reject requests with missing repository paths * mod_dav_svn: reject requests with invalid virtual transaction names * mod_dav_svn: avoid unneeded memory growth in resource walking Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-821 - openSUSE 13.1: zypper in -t patch openSUSE-2014-821 - openSUSE 12.3: zypper in -t patch openSUSE-2014-821 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.8.11-2.7.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.8.11-2.7.1 libsvn_auth_kwallet-1-0-1.8.11-2.7.1 libsvn_auth_kwallet-1-0-debuginfo-1.8.11-2.7.1 subversion-1.8.11-2.7.1 subversion-debuginfo-1.8.11-2.7.1 subversion-debugsource-1.8.11-2.7.1 subversion-devel-1.8.11-2.7.1 subversion-perl-1.8.11-2.7.1 subversion-perl-debuginfo-1.8.11-2.7.1 subversion-python-1.8.11-2.7.1 subversion-python-ctypes-1.8.11-2.7.1 subversion-python-debuginfo-1.8.11-2.7.1 subversion-ruby-1.8.11-2.7.1 subversion-ruby-debuginfo-1.8.11-2.7.1 subversion-server-1.8.11-2.7.1 subversion-server-debuginfo-1.8.11-2.7.1 subversion-tools-1.8.11-2.7.1 subversion-tools-debuginfo-1.8.11-2.7.1 - openSUSE 13.2 (noarch): subversion-bash-completion-1.8.11-2.7.1 - openSUSE 13.1 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.8.11-2.33.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.8.11-2.33.1 libsvn_auth_kwallet-1-0-1.8.11-2.33.1 libsvn_auth_kwallet-1-0-debuginfo-1.8.11-2.33.1 subversion-1.8.11-2.33.1 subversion-debuginfo-1.8.11-2.33.1 subversion-debugsource-1.8.11-2.33.1 subversion-devel-1.8.11-2.33.1 subversion-perl-1.8.11-2.33.1 subversion-perl-debuginfo-1.8.11-2.33.1 subversion-python-1.8.11-2.33.1 subversion-python-debuginfo-1.8.11-2.33.1 subversion-ruby-1.8.11-2.33.1 subversion-ruby-debuginfo-1.8.11-2.33.1 subversion-server-1.8.11-2.33.1 subversion-server-debuginfo-1.8.11-2.33.1 subversion-tools-1.8.11-2.33.1 subversion-tools-debuginfo-1.8.11-2.33.1 - openSUSE 13.1 (noarch): subversion-bash-completion-1.8.11-2.33.1 - openSUSE 12.3 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.7.19-2.40.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.7.19-2.40.1 libsvn_auth_kwallet-1-0-1.7.19-2.40.1 libsvn_auth_kwallet-1-0-debuginfo-1.7.19-2.40.1 subversion-1.7.19-2.40.1 subversion-debuginfo-1.7.19-2.40.1 subversion-debugsource-1.7.19-2.40.1 subversion-devel-1.7.19-2.40.1 subversion-perl-1.7.19-2.40.1 subversion-perl-debuginfo-1.7.19-2.40.1 subversion-python-1.7.19-2.40.1 subversion-python-debuginfo-1.7.19-2.40.1 subversion-server-1.7.19-2.40.1 subversion-server-debuginfo-1.7.19-2.40.1 subversion-tools-1.7.19-2.40.1 subversion-tools-debuginfo-1.7.19-2.40.1 - openSUSE 12.3 (noarch): subversion-bash-completion-1.7.19-2.40.1 References: http://support.novell.com/security/cve/CVE-2014-3580.html http://support.novell.com/security/cve/CVE-2014-8108.html https://bugzilla.suse.com/show_bug.cgi?id=909935

1 0

openSUSE-SU-2014:1722-1: moderate: Security update for docker
by opensuse-security＠opensuse.org 27 Dec '14

27 Dec '14

openSUSE Security Update: Security update for docker ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1722-1 Rating: moderate References: #909709 #909710 #909712 Cross-References: CVE-2014-9356 CVE-2014-9357 CVE-2014-9358 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This docker version update fixes the following security and non security issues and adds additional features. - Updated to 1.4.0 (2014-12-11): * Notable Features since 1.3.0: - Set key=value labels to the daemon (displayed in `docker info`), applied with new `-label` daemon flag - Add support for `ENV` in Dockerfile of the form: `ENV name=value name2=value2...` - New Overlayfs Storage Driver - `docker info` now returns an `ID` and `Name` field - Filter events by event name, container, or image - `docker cp` now supports copying from container volumes - Fixed `docker tag`, so it honors `--force` when overriding a tag for existing image. - Changes introduced by 1.3.3 (2014-12-11): * Security: - Fix path traversal vulnerability in processing of absolute symbolic links (CVE-2014-9356) - (bnc#909709) - Fix decompression of xz image archives, preventing privilege escalation (CVE-2014-9357) - (bnc#909710) - Validate image IDs (CVE-2014-9358) - (bnc#909712) * Runtime: - Fix an issue when image archives are being read slowly * Client: - Fix a regression related to stdin redirection - Fix a regression with `docker cp` when destination is the current directory Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-820 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (x86_64): docker-1.4.0-13.1 docker-debuginfo-1.4.0-13.1 docker-debugsource-1.4.0-13.1 - openSUSE 13.2 (noarch): docker-bash-completion-1.4.0-13.1 docker-zsh-completion-1.4.0-13.1 References: http://support.novell.com/security/cve/CVE-2014-9356.html http://support.novell.com/security/cve/CVE-2014-9357.html http://support.novell.com/security/cve/CVE-2014-9358.html https://bugzilla.suse.com/show_bug.cgi?id=909709 https://bugzilla.suse.com/show_bug.cgi?id=909710 https://bugzilla.suse.com/show_bug.cgi?id=909712

1 0

openSUSE-SU-2014:1721-1: moderate: Security update for file
by opensuse-security＠opensuse.org 27 Dec '14

27 Dec '14

openSUSE Security Update: Security update for file ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1721-1 Rating: moderate References: #910252 #910253 Cross-References: CVE-2014-8116 CVE-2014-8117 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This file update fixes the following two security issues: - bsc#910252: multiple denial of service issues (resource consumption) (CVE-2014-8116) - bsc#910253: denial of service issue (resource consumption) (CVE-2014-8117) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-817 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): file-5.15-4.28.1 file-debuginfo-5.15-4.28.1 file-debugsource-5.15-4.28.1 file-devel-5.15-4.28.1 file-magic-5.15-4.28.1 libmagic1-5.15-4.28.1 libmagic1-debuginfo-5.15-4.28.1 python-magic-5.15-4.28.1 - openSUSE 13.1 (x86_64): libmagic1-32bit-5.15-4.28.1 libmagic1-debuginfo-32bit-5.15-4.28.1 References: http://support.novell.com/security/cve/CVE-2014-8116.html http://support.novell.com/security/cve/CVE-2014-8117.html https://bugzilla.suse.com/show_bug.cgi?id=910252 https://bugzilla.suse.com/show_bug.cgi?id=910253

1 0

openSUSE-SU-2014:1720-1: moderate: Security update for file
by opensuse-security＠opensuse.org 27 Dec '14

27 Dec '14

openSUSE Security Update: Security update for file ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1720-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This file update fixes the following two security issues: - bsc#910252: multiple denial of service issues (resource consumption) (CVE-2014-8116) - bsc#910253: denial of service issue (resource consumption) (CVE-2014-8117) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-817 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): file-5.19-3.8.1 file-debuginfo-5.19-3.8.1 file-debugsource-5.19-3.8.1 file-devel-5.19-3.8.1 file-magic-5.19-3.8.1 libmagic1-5.19-3.8.1 libmagic1-debuginfo-5.19-3.8.1 python-magic-5.19-3.8.1 - openSUSE 13.2 (x86_64): libmagic1-32bit-5.19-3.8.1 libmagic1-debuginfo-32bit-5.19-3.8.1 References:

1 0

openSUSE-SU-2014:1719-1: moderate: Security update for xorg-x11-server
by opensuse-security＠opensuse.org 27 Dec '14

27 Dec '14

openSUSE Security Update: Security update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1719-1 Rating: moderate References: #856931 #907268 #908258 Cross-References: CVE-2014-8091 CVE-2014-8092 CVE-2014-8093 CVE-2014-8094 CVE-2014-8095 CVE-2014-8096 CVE-2014-8097 CVE-2014-8098 CVE-2014-8099 CVE-2014-8100 CVE-2014-8101 CVE-2014-8102 CVE-2014-8103 Affected Products: openSUSE 13.2 openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This X.Org update fixes the following security and non security issues: - Add and update security patches. (bnc#907268, CVE-2014-8091, CVE-2014-8092, CVE-2014-8093, CVE-2014-8094, CVE-2014-8095, CVE-2014-8096, CVE-2014-8097, CVE-2014-8098, CVE-2014-8099, CVE-2014-8100, CVE-2014-8101, CVE-2014-8102, CVE-2014-8103) http://lists.x.org/archives/xorg-announce/2014-December/002501.html - Fixes rendering of some icewm and xfwm themes. (bnc#908258, bnc#856931) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-815 - openSUSE 13.1: zypper in -t patch openSUSE-2014-815 - openSUSE 12.3: zypper in -t patch openSUSE-2014-815 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xorg-x11-server-7.6_1.16.1-5.1 xorg-x11-server-debuginfo-7.6_1.16.1-5.1 xorg-x11-server-debugsource-7.6_1.16.1-5.1 xorg-x11-server-extra-7.6_1.16.1-5.1 xorg-x11-server-extra-debuginfo-7.6_1.16.1-5.1 xorg-x11-server-sdk-7.6_1.16.1-5.1 - openSUSE 13.1 (i586 x86_64): xorg-x11-server-7.6_1.14.3.901-12.1 xorg-x11-server-debuginfo-7.6_1.14.3.901-12.1 xorg-x11-server-debugsource-7.6_1.14.3.901-12.1 xorg-x11-server-extra-7.6_1.14.3.901-12.1 xorg-x11-server-extra-debuginfo-7.6_1.14.3.901-12.1 xorg-x11-server-sdk-7.6_1.14.3.901-12.1 - openSUSE 12.3 (i586 x86_64): xorg-x11-server-7.6_1.13.2-1.29.1 xorg-x11-server-debuginfo-7.6_1.13.2-1.29.1 xorg-x11-server-debugsource-7.6_1.13.2-1.29.1 xorg-x11-server-extra-7.6_1.13.2-1.29.1 xorg-x11-server-extra-debuginfo-7.6_1.13.2-1.29.1 xorg-x11-server-sdk-7.6_1.13.2-1.29.1 References: http://support.novell.com/security/cve/CVE-2014-8091.html http://support.novell.com/security/cve/CVE-2014-8092.html http://support.novell.com/security/cve/CVE-2014-8093.html http://support.novell.com/security/cve/CVE-2014-8094.html http://support.novell.com/security/cve/CVE-2014-8095.html http://support.novell.com/security/cve/CVE-2014-8096.html http://support.novell.com/security/cve/CVE-2014-8097.html http://support.novell.com/security/cve/CVE-2014-8098.html http://support.novell.com/security/cve/CVE-2014-8099.html http://support.novell.com/security/cve/CVE-2014-8100.html http://support.novell.com/security/cve/CVE-2014-8101.html http://support.novell.com/security/cve/CVE-2014-8102.html http://support.novell.com/security/cve/CVE-2014-8103.html https://bugzilla.suse.com/show_bug.cgi?id=856931 https://bugzilla.suse.com/show_bug.cgi?id=907268 https://bugzilla.suse.com/show_bug.cgi?id=908258

1 0