October 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2014:1338-1: test update
by maintenance＠opensuse.org 31 Oct '14

31 Oct '14

openSUSE Recommended Update: test update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1338-1 Rating: low References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: test update Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-610 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libsolv-debugsource-0.6.6-1.0.5.1 libsolv-demo-0.6.6-1.0.5.1 libsolv-demo-debuginfo-0.6.6-1.0.5.1 libsolv-devel-0.6.6-1.0.5.1 libsolv-devel-debuginfo-0.6.6-1.0.5.1 libsolv-tools-0.6.6-1.0.5.1 libsolv-tools-debuginfo-0.6.6-1.0.5.1 perl-solv-0.6.6-1.0.5.1 perl-solv-debuginfo-0.6.6-1.0.5.1 python-solv-0.6.6-1.0.5.1 python-solv-debuginfo-0.6.6-1.0.5.1 ruby-solv-0.6.6-1.0.5.1 ruby-solv-debuginfo-0.6.6-1.0.5.1 References:

1 0

openSUSE-RU-2014:1337-1: util-linux: Added documentation to the files-section of the specfile
by maintenance＠opensuse.org 31 Oct '14

31 Oct '14

openSUSE Recommended Update: util-linux: Added documentation to the files-section of the specfile ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1337-1 Rating: low References: #823907 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with util-linux: - Added documentation to the files-section of the specfile (bnc#823907) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-609 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libblkid-devel-2.23.2-20.1 libblkid1-2.23.2-20.1 libblkid1-debuginfo-2.23.2-20.1 libmount-devel-2.23.2-20.1 libmount1-2.23.2-20.1 libmount1-debuginfo-2.23.2-20.1 libuuid-devel-2.23.2-20.1 libuuid1-2.23.2-20.1 libuuid1-debuginfo-2.23.2-20.1 util-linux-2.23.2-20.1 util-linux-debuginfo-2.23.2-20.1 util-linux-debugsource-2.23.2-20.1 uuidd-2.23.2-20.1 uuidd-debuginfo-2.23.2-20.1 - openSUSE 13.1 (x86_64): libblkid-devel-32bit-2.23.2-20.1 libblkid1-32bit-2.23.2-20.1 libblkid1-debuginfo-32bit-2.23.2-20.1 libmount-devel-32bit-2.23.2-20.1 libmount1-32bit-2.23.2-20.1 libmount1-debuginfo-32bit-2.23.2-20.1 libuuid-devel-32bit-2.23.2-20.1 libuuid1-32bit-2.23.2-20.1 libuuid1-debuginfo-32bit-2.23.2-20.1 - openSUSE 13.1 (noarch): util-linux-lang-2.23.2-20.1 References: https://bugzilla.suse.com/show_bug.cgi?id=823907

1 0

openSUSE-RU-2014:1336-1: critical: test update for libzypp
by maintenance＠opensuse.org 30 Oct '14

30 Oct '14

openSUSE Recommended Update: test update for libzypp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1336-1 Rating: critical References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: test update for libzypp Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-608 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libzypp-14.29.4-1.1.6.1 libzypp-debuginfo-14.29.4-1.1.6.1 libzypp-debugsource-14.29.4-1.1.6.1 libzypp-devel-14.29.4-1.1.6.1 References:

1 0

openSUSE-RU-2014:1335-1: test kernel update for 13.2
by maintenance＠opensuse.org 30 Oct '14

30 Oct '14

openSUSE Recommended Update: test kernel update for 13.2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1335-1 Rating: low References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: test kernel update for 13.2 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-607 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): kernel-default-3.16.4-9.1.g7a8842b kernel-default-base-3.16.4-9.1.g7a8842b kernel-default-base-debuginfo-3.16.4-9.1.g7a8842b kernel-default-debuginfo-3.16.4-9.1.g7a8842b kernel-default-debugsource-3.16.4-9.1.g7a8842b kernel-default-devel-3.16.4-9.1.g7a8842b kernel-ec2-3.16.4-9.1.g7a8842b kernel-ec2-base-3.16.4-9.1.g7a8842b kernel-ec2-devel-3.16.4-9.1.g7a8842b kernel-obs-build-3.16.4-9.3.g7a8842b kernel-obs-build-debugsource-3.16.4-9.3.g7a8842b kernel-obs-qa-3.16.4-9.3.g7a8842b kernel-obs-qa-xen-3.16.4-9.3.g7a8842b kernel-syms-3.16.4-9.1.g7a8842b - openSUSE 13.2 (i686 x86_64): kernel-debug-3.16.4-9.1.g7a8842b kernel-debug-base-3.16.4-9.1.g7a8842b kernel-debug-base-debuginfo-3.16.4-9.1.g7a8842b kernel-debug-debuginfo-3.16.4-9.1.g7a8842b kernel-debug-debugsource-3.16.4-9.1.g7a8842b kernel-debug-devel-3.16.4-9.1.g7a8842b kernel-debug-devel-debuginfo-3.16.4-9.1.g7a8842b kernel-desktop-3.16.4-9.1.g7a8842b kernel-desktop-base-3.16.4-9.1.g7a8842b kernel-desktop-base-debuginfo-3.16.4-9.1.g7a8842b kernel-desktop-debuginfo-3.16.4-9.1.g7a8842b kernel-desktop-debugsource-3.16.4-9.1.g7a8842b kernel-desktop-devel-3.16.4-9.1.g7a8842b kernel-ec2-base-debuginfo-3.16.4-9.1.g7a8842b kernel-ec2-debuginfo-3.16.4-9.1.g7a8842b kernel-ec2-debugsource-3.16.4-9.1.g7a8842b kernel-vanilla-3.16.4-9.1.g7a8842b kernel-vanilla-debuginfo-3.16.4-9.1.g7a8842b kernel-vanilla-debugsource-3.16.4-9.1.g7a8842b kernel-vanilla-devel-3.16.4-9.1.g7a8842b kernel-xen-3.16.4-9.1.g7a8842b kernel-xen-base-3.16.4-9.1.g7a8842b kernel-xen-base-debuginfo-3.16.4-9.1.g7a8842b kernel-xen-debuginfo-3.16.4-9.1.g7a8842b kernel-xen-debugsource-3.16.4-9.1.g7a8842b kernel-xen-devel-3.16.4-9.1.g7a8842b - openSUSE 13.2 (noarch): kernel-devel-3.16.4-9.1.g7a8842b kernel-docs-3.16.4-9.2.g7a8842b kernel-macros-3.16.4-9.1.g7a8842b kernel-source-3.16.4-9.1.g7a8842b kernel-source-vanilla-3.16.4-9.1.g7a8842b - openSUSE 13.2 (i686): kernel-pae-3.16.4-9.1.g7a8842b kernel-pae-base-3.16.4-9.1.g7a8842b kernel-pae-base-debuginfo-3.16.4-9.1.g7a8842b kernel-pae-debuginfo-3.16.4-9.1.g7a8842b kernel-pae-debugsource-3.16.4-9.1.g7a8842b kernel-pae-devel-3.16.4-9.1.g7a8842b References:

1 0

openSUSE-SU-2014:1331-1: important: update for openssl
by opensuse-security＠opensuse.org 29 Oct '14

29 Oct '14

openSUSE Security Update: update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1331-1 Rating: important References: #901223 #901277 Cross-References: CVE-2014-3513 CVE-2014-3566 CVE-2014-3567 CVE-2014-3568 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: The following issues were fixed in this release: CVE-2014-3566: SSLv3 POODLE attack (bnc#901223) CVE-2014-3513, CVE-2014-3567: DTLS memory leak and session ticket memory leak Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-605 - openSUSE 12.3: zypper in -t patch openSUSE-2014-605 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libopenssl-devel-1.0.1j-11.56.1 libopenssl1_0_0-1.0.1j-11.56.1 libopenssl1_0_0-debuginfo-1.0.1j-11.56.1 openssl-1.0.1j-11.56.1 openssl-debuginfo-1.0.1j-11.56.1 openssl-debugsource-1.0.1j-11.56.1 - openSUSE 13.1 (x86_64): libopenssl-devel-32bit-1.0.1j-11.56.1 libopenssl1_0_0-32bit-1.0.1j-11.56.1 libopenssl1_0_0-debuginfo-32bit-1.0.1j-11.56.1 - openSUSE 13.1 (noarch): openssl-doc-1.0.1j-11.56.1 - openSUSE 12.3 (i586 x86_64): libopenssl-devel-1.0.1j-1.68.1 libopenssl1_0_0-1.0.1j-1.68.1 libopenssl1_0_0-debuginfo-1.0.1j-1.68.1 openssl-1.0.1j-1.68.1 openssl-debuginfo-1.0.1j-1.68.1 openssl-debugsource-1.0.1j-1.68.1 - openSUSE 12.3 (x86_64): libopenssl-devel-32bit-1.0.1j-1.68.1 libopenssl1_0_0-32bit-1.0.1j-1.68.1 libopenssl1_0_0-debuginfo-32bit-1.0.1j-1.68.1 - openSUSE 12.3 (noarch): openssl-doc-1.0.1j-1.68.1 References: http://support.novell.com/security/cve/CVE-2014-3513.html http://support.novell.com/security/cve/CVE-2014-3566.html http://support.novell.com/security/cve/CVE-2014-3567.html http://support.novell.com/security/cve/CVE-2014-3568.html https://bugzilla.suse.com/show_bug.cgi?id=901223 https://bugzilla.suse.com/show_bug.cgi?id=901277

1 0

openSUSE-SU-2014:1330-1: moderate: update to fix CVE-2014-3660
by opensuse-security＠opensuse.org 29 Oct '14

29 Oct '14

openSUSE Security Update: update to fix CVE-2014-3660 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1330-1 Rating: moderate References: #901546 Cross-References: CVE-2014-3660 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes a denial of service vulnerability when expanding recursive entity (CVE-2014-3660) bnc#901546 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-606 - openSUSE 12.3: zypper in -t patch openSUSE-2014-606 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libxml2-2-2.9.1-2.16.1 libxml2-2-debuginfo-2.9.1-2.16.1 libxml2-debugsource-2.9.1-2.16.1 libxml2-devel-2.9.1-2.16.1 libxml2-tools-2.9.1-2.16.1 libxml2-tools-debuginfo-2.9.1-2.16.1 python-libxml2-2.9.1-2.16.1 python-libxml2-debuginfo-2.9.1-2.16.1 python-libxml2-debugsource-2.9.1-2.16.1 - openSUSE 13.1 (x86_64): libxml2-2-32bit-2.9.1-2.16.1 libxml2-2-debuginfo-32bit-2.9.1-2.16.1 libxml2-devel-32bit-2.9.1-2.16.1 - openSUSE 13.1 (noarch): libxml2-doc-2.9.1-2.16.1 - openSUSE 12.3 (i586 x86_64): libxml2-2-2.9.0-2.33.1 libxml2-2-debuginfo-2.9.0-2.33.1 libxml2-debugsource-2.9.0-2.33.1 libxml2-devel-2.9.0-2.33.1 libxml2-tools-2.9.0-2.33.1 libxml2-tools-debuginfo-2.9.0-2.33.1 python-libxml2-2.9.0-2.33.1 python-libxml2-debuginfo-2.9.0-2.33.1 python-libxml2-debugsource-2.9.0-2.33.1 - openSUSE 12.3 (x86_64): libxml2-2-32bit-2.9.0-2.33.1 libxml2-2-debuginfo-32bit-2.9.0-2.33.1 libxml2-devel-32bit-2.9.0-2.33.1 - openSUSE 12.3 (noarch): libxml2-doc-2.9.0-2.33.1 References: http://support.novell.com/security/cve/CVE-2014-3660.html https://bugzilla.suse.com/show_bug.cgi?id=901546

1 0

openSUSE-SU-2014:1329-1: moderate: update for flash-player
by opensuse-security＠opensuse.org 28 Oct '14

28 Oct '14

openSUSE Security Update: update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1329-1 Rating: moderate References: #901334 Cross-References: CVE-2014-0558 CVE-2014-0564 CVE-2014-0569 Affected Products: openSUSE 13.1:NonFree openSUSE 12.3:NonFree ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: - Security update to 11.2.202.411 (bnc#901334): * APSB14-22, CVE-2014-0569 (ZDI-14-365), CVE-2014-0564, CVE-2014-0558 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1:NonFree: zypper in -t patch openSUSE-2014-603 - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2014-603 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1:NonFree (i586 x86_64): flash-player-11.2.202.411-70.1 flash-player-gnome-11.2.202.411-70.1 flash-player-kde4-11.2.202.411-70.1 - openSUSE 12.3:NonFree (i586 x86_64): flash-player-11.2.202.411-2.96.1 flash-player-gnome-11.2.202.411-2.96.1 flash-player-kde4-11.2.202.411-2.96.1 References: http://support.novell.com/security/cve/CVE-2014-0558.html http://support.novell.com/security/cve/CVE-2014-0564.html http://support.novell.com/security/cve/CVE-2014-0569.html https://bugzilla.suse.com/show_bug.cgi?id=901334

1 0

openSUSE-SU-2014:1328-1: update to fix CVE-2014-0477
by opensuse-security＠opensuse.org 28 Oct '14

28 Oct '14

openSUSE Security Update: update to fix CVE-2014-0477 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1328-1 Rating: low References: #883225 Cross-References: CVE-2014-0477 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes a denial of service vulnerability when parsing an empty quoted string (CVE-2014-0477) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-604 - openSUSE 12.3: zypper in -t patch openSUSE-2014-604 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): perl-Email-Address-1.899-2.4.1 - openSUSE 12.3 (noarch): perl-Email-Address-1.892-11.4.1 References: http://support.novell.com/security/cve/CVE-2014-0477.html https://bugzilla.suse.com/show_bug.cgi?id=883225

1 0

openSUSE-RU-2014:1323-1: pulseaudio: Fixes resource leak
by maintenance＠opensuse.org 24 Oct '14

24 Oct '14

openSUSE Recommended Update: pulseaudio: Fixes resource leak ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1323-1 Rating: low References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issue with pulseaudio: - Fixes resource leak Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-602 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libpulse-devel-4.0.git.270.g9490a-20.1 libpulse-mainloop-glib0-4.0.git.270.g9490a-20.1 libpulse-mainloop-glib0-debuginfo-4.0.git.270.g9490a-20.1 libpulse0-4.0.git.270.g9490a-20.1 libpulse0-debuginfo-4.0.git.270.g9490a-20.1 pulseaudio-4.0.git.270.g9490a-20.1 pulseaudio-debuginfo-4.0.git.270.g9490a-20.1 pulseaudio-debugsource-4.0.git.270.g9490a-20.1 pulseaudio-esound-compat-4.0.git.270.g9490a-20.1 pulseaudio-gdm-hooks-4.0.git.270.g9490a-20.1 pulseaudio-module-bluetooth-4.0.git.270.g9490a-20.1 pulseaudio-module-bluetooth-debuginfo-4.0.git.270.g9490a-20.1 pulseaudio-module-gconf-4.0.git.270.g9490a-20.1 pulseaudio-module-gconf-debuginfo-4.0.git.270.g9490a-20.1 pulseaudio-module-jack-4.0.git.270.g9490a-20.1 pulseaudio-module-jack-debuginfo-4.0.git.270.g9490a-20.1 pulseaudio-module-lirc-4.0.git.270.g9490a-20.1 pulseaudio-module-lirc-debuginfo-4.0.git.270.g9490a-20.1 pulseaudio-module-x11-4.0.git.270.g9490a-20.1 pulseaudio-module-x11-debuginfo-4.0.git.270.g9490a-20.1 pulseaudio-module-zeroconf-4.0.git.270.g9490a-20.1 pulseaudio-module-zeroconf-debuginfo-4.0.git.270.g9490a-20.1 pulseaudio-system-wide-4.0.git.270.g9490a-20.1 pulseaudio-utils-4.0.git.270.g9490a-20.1 pulseaudio-utils-debuginfo-4.0.git.270.g9490a-20.1 - openSUSE 13.1 (x86_64): libpulse-mainloop-glib0-32bit-4.0.git.270.g9490a-20.1 libpulse-mainloop-glib0-debuginfo-32bit-4.0.git.270.g9490a-20.1 libpulse0-32bit-4.0.git.270.g9490a-20.1 libpulse0-debuginfo-32bit-4.0.git.270.g9490a-20.1 - openSUSE 13.1 (noarch): pulseaudio-lang-4.0.git.270.g9490a-20.1 References:

1 0

openSUSE-RU-2014:1320-1: rss-glx: fix for broken package
by maintenance＠opensuse.org 23 Oct '14

23 Oct '14

openSUSE Recommended Update: rss-glx: fix for broken package ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1320-1 Rating: low References: #901450 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with rss-glx: - boo#901450: rss-glx screensavers can't be previewed/tested/activated in KDE System Settings as well as other desktop environments. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-601 - openSUSE 12.3: zypper in -t patch openSUSE-2014-601 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): rss-glx-0.9.1-15.4.1 rss-glx-debuginfo-0.9.1-15.4.1 rss-glx-debugsource-0.9.1-15.4.1 - openSUSE 12.3 (i586 x86_64): rss-glx-0.9.1-13.4.1 rss-glx-debuginfo-0.9.1-13.4.1 rss-glx-debugsource-0.9.1-13.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=901450

1 0