November 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2014:1417-1: moderate: polkit-default-privs: relax pcsc-lite rules to allow non-root usage
by maintenance＠opensuse.org 13 Nov '14

13 Nov '14

openSUSE Recommended Update: polkit-default-privs: relax pcsc-lite rules to allow non-root usage ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1417-1 Rating: moderate References: #864178 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The polkit default privileges were relaxed to allow the chipcard access toolkit pcsc-lite to work better. (bsc#864178) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-666 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): polkit-default-privs-13.2-7.5.1 References: https://bugzilla.suse.com/show_bug.cgi?id=864178

1 0

openSUSE-RU-2014:1416-1: moderate: dleyna-server: require dleyna-connector-dbus
by maintenance＠opensuse.org 13 Nov '14

13 Nov '14

openSUSE Recommended Update: dleyna-server: require dleyna-connector-dbus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1416-1 Rating: moderate References: #903992 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update makes dleyna-server require dleyna-connector-dbus allowing DBUS support. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-668 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): dleyna-server-0.4.0-4.1 dleyna-server-debuginfo-0.4.0-4.1 dleyna-server-debugsource-0.4.0-4.1 dleyna-server-devel-0.4.0-4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=903992

1 0

openSUSE-RU-2014:1415-1: moderate: policycoreutils: require YUM modules
by maintenance＠opensuse.org 13 Nov '14

13 Nov '14

openSUSE Recommended Update: policycoreutils: require YUM modules ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1415-1 Rating: moderate References: #903841 Affected Products: openSUSE 13.2 openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: policycoreutils was supplimented with with YUM requires to make the "sepolicy" command work. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-662 - openSUSE 13.1: zypper in -t patch openSUSE-2014-662 - openSUSE 12.3: zypper in -t patch openSUSE-2014-662 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): policycoreutils-2.3-2.5.1 policycoreutils-debuginfo-2.3-2.5.1 policycoreutils-debugsource-2.3-2.5.1 policycoreutils-gui-2.3-2.5.1 policycoreutils-newrole-2.3-2.5.1 policycoreutils-newrole-debuginfo-2.3-2.5.1 policycoreutils-python-2.3-2.5.1 policycoreutils-python-debuginfo-2.3-2.5.1 policycoreutils-sandbox-2.3-2.5.1 policycoreutils-sandbox-debuginfo-2.3-2.5.1 - openSUSE 13.2 (noarch): policycoreutils-lang-2.3-2.5.1 - openSUSE 13.1 (i586 x86_64): policycoreutils-2.1.14-3.4.1 policycoreutils-debuginfo-2.1.14-3.4.1 policycoreutils-debugsource-2.1.14-3.4.1 policycoreutils-gui-2.1.14-3.4.1 policycoreutils-newrole-2.1.14-3.4.1 policycoreutils-newrole-debuginfo-2.1.14-3.4.1 policycoreutils-python-2.1.14-3.4.1 policycoreutils-python-debuginfo-2.1.14-3.4.1 policycoreutils-sandbox-2.1.14-3.4.1 policycoreutils-sandbox-debuginfo-2.1.14-3.4.1 - openSUSE 13.1 (noarch): policycoreutils-lang-2.1.14-3.4.1 - openSUSE 12.3 (i586 x86_64): policycoreutils-2.1.10-5.4.1 policycoreutils-debuginfo-2.1.10-5.4.1 policycoreutils-debugsource-2.1.10-5.4.1 policycoreutils-gui-2.1.10-5.4.1 policycoreutils-newrole-2.1.10-5.4.1 policycoreutils-newrole-debuginfo-2.1.10-5.4.1 policycoreutils-python-2.1.10-5.4.1 policycoreutils-python-debuginfo-2.1.10-5.4.1 policycoreutils-sandbox-2.1.10-5.4.1 policycoreutils-sandbox-debuginfo-2.1.10-5.4.1 - openSUSE 12.3 (noarch): policycoreutils-lang-2.1.10-5.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=903841

1 0

openSUSE-RU-2014:1414-1: ibus-hangul:update to 1.5.0
by maintenance＠opensuse.org 13 Nov '14

13 Nov '14

openSUSE Recommended Update: ibus-hangul:update to 1.5.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1414-1 Rating: low References: #898919 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes boo#898919 with other usage obstacles found by packager herself. * ibus-hangul can't be called out if it's the only engine. (So no ibus icon on systray) * ibus-hangul can't be switched from other engines by hot keys (Shift + Ctrl), have to click by mouse * ibus-hangul can't be toggled from, eg, English (Ctrl + Space) * ibus-hangul-setup can't be shown because of a Gobject error Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-663 - openSUSE 13.1: zypper in -t patch openSUSE-2014-663 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ibus-hangul-1.5.0-4.4.1 ibus-hangul-debuginfo-1.5.0-4.4.1 ibus-hangul-debugsource-1.5.0-4.4.1 - openSUSE 13.1 (i586 x86_64): ibus-hangul-1.5.0-2.4.1 ibus-hangul-debuginfo-1.5.0-2.4.1 ibus-hangul-debugsource-1.5.0-2.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=898919

1 0

openSUSE-SU-2014:1412-1: moderate: Security update for libreoffice
by opensuse-security＠opensuse.org 13 Nov '14

13 Nov '14

openSUSE Security Update: Security update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1412-1 Rating: moderate References: #900214 #900218 Cross-References: CVE-2014-3693 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: libreoffice was updated to fix two security issues. These security issues were fixed: - "Document as E-mail" vulnerability (bnc#900218). - Impress Remote Control Use-after-Free Vulnerability (CVE-2014-3693). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-661 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libreoffice-4.1.6.2-29.1 libreoffice-base-4.1.6.2-29.1 libreoffice-base-debuginfo-4.1.6.2-29.1 libreoffice-base-drivers-mysql-4.1.6.2-29.1 libreoffice-base-drivers-mysql-debuginfo-4.1.6.2-29.1 libreoffice-base-drivers-postgresql-4.1.6.2-29.1 libreoffice-base-drivers-postgresql-debuginfo-4.1.6.2-29.1 libreoffice-base-extensions-4.1.6.2-29.1 libreoffice-calc-4.1.6.2-29.1 libreoffice-calc-debuginfo-4.1.6.2-29.1 libreoffice-calc-extensions-4.1.6.2-29.1 libreoffice-debuginfo-4.1.6.2-29.1 libreoffice-debugsource-4.1.6.2-29.1 libreoffice-draw-4.1.6.2-29.1 libreoffice-draw-debuginfo-4.1.6.2-29.1 libreoffice-draw-extensions-4.1.6.2-29.1 libreoffice-filters-optional-4.1.6.2-29.1 libreoffice-gnome-4.1.6.2-29.1 libreoffice-gnome-debuginfo-4.1.6.2-29.1 libreoffice-icon-themes-prebuilt-4.1.6.2-29.1 libreoffice-impress-4.1.6.2-29.1 libreoffice-impress-debuginfo-4.1.6.2-29.1 libreoffice-impress-extensions-4.1.6.2-29.1 libreoffice-impress-extensions-debuginfo-4.1.6.2-29.1 libreoffice-kde-4.1.6.2-29.1 libreoffice-kde-debuginfo-4.1.6.2-29.1 libreoffice-kde4-4.1.6.2-29.1 libreoffice-kde4-debuginfo-4.1.6.2-29.1 libreoffice-l10n-prebuilt-4.1.6.2-29.1 libreoffice-mailmerge-4.1.6.2-29.1 libreoffice-math-4.1.6.2-29.1 libreoffice-math-debuginfo-4.1.6.2-29.1 libreoffice-officebean-4.1.6.2-29.1 libreoffice-officebean-debuginfo-4.1.6.2-29.1 libreoffice-pyuno-4.1.6.2-29.1 libreoffice-pyuno-debuginfo-4.1.6.2-29.1 libreoffice-sdk-4.1.6.2-29.1 libreoffice-sdk-debuginfo-4.1.6.2-29.1 libreoffice-sdk-doc-4.1.6.2-29.1 libreoffice-writer-4.1.6.2-29.1 libreoffice-writer-debuginfo-4.1.6.2-29.1 libreoffice-writer-extensions-4.1.6.2-29.1 - openSUSE 13.1 (noarch): libreoffice-branding-upstream-4.1.6.2-29.1 libreoffice-help-ast-4.1.6.2-29.1 libreoffice-help-bg-4.1.6.2-29.1 libreoffice-help-ca-4.1.6.2-29.1 libreoffice-help-cs-4.1.6.2-29.1 libreoffice-help-da-4.1.6.2-29.1 libreoffice-help-de-4.1.6.2-29.1 libreoffice-help-el-4.1.6.2-29.1 libreoffice-help-en-GB-4.1.6.2-29.1 libreoffice-help-en-US-4.1.6.2-29.1 libreoffice-help-en-ZA-4.1.6.2-29.1 libreoffice-help-es-4.1.6.2-29.1 libreoffice-help-et-4.1.6.2-29.1 libreoffice-help-eu-4.1.6.2-29.1 libreoffice-help-fi-4.1.6.2-29.1 libreoffice-help-fr-4.1.6.2-29.1 libreoffice-help-gl-4.1.6.2-29.1 libreoffice-help-gu-IN-4.1.6.2-29.1 libreoffice-help-hi-IN-4.1.6.2-29.1 libreoffice-help-hu-4.1.6.2-29.1 libreoffice-help-it-4.1.6.2-29.1 libreoffice-help-ja-4.1.6.2-29.1 libreoffice-help-km-4.1.6.2-29.1 libreoffice-help-ko-4.1.6.2-29.1 libreoffice-help-mk-4.1.6.2-29.1 libreoffice-help-nb-4.1.6.2-29.1 libreoffice-help-nl-4.1.6.2-29.1 libreoffice-help-pl-4.1.6.2-29.1 libreoffice-help-pt-4.1.6.2-29.1 libreoffice-help-pt-BR-4.1.6.2-29.1 libreoffice-help-ru-4.1.6.2-29.1 libreoffice-help-sk-4.1.6.2-29.1 libreoffice-help-sl-4.1.6.2-29.1 libreoffice-help-sv-4.1.6.2-29.1 libreoffice-help-tr-4.1.6.2-29.1 libreoffice-help-vi-4.1.6.2-29.1 libreoffice-help-zh-CN-4.1.6.2-29.1 libreoffice-help-zh-TW-4.1.6.2-29.1 libreoffice-icon-theme-crystal-4.1.6.2-29.1 libreoffice-icon-theme-galaxy-4.1.6.2-29.1 libreoffice-icon-theme-hicontrast-4.1.6.2-29.1 libreoffice-icon-theme-oxygen-4.1.6.2-29.1 libreoffice-icon-theme-tango-4.1.6.2-29.1 libreoffice-l10n-af-4.1.6.2-29.3 libreoffice-l10n-am-4.1.6.2-29.3 libreoffice-l10n-ar-4.1.6.2-29.3 libreoffice-l10n-as-4.1.6.2-29.3 libreoffice-l10n-ast-4.1.6.2-29.3 libreoffice-l10n-be-BY-4.1.6.2-29.3 libreoffice-l10n-bg-4.1.6.2-29.3 libreoffice-l10n-br-4.1.6.2-29.3 libreoffice-l10n-ca-4.1.6.2-29.3 libreoffice-l10n-cs-4.1.6.2-29.3 libreoffice-l10n-cy-4.1.6.2-29.3 libreoffice-l10n-da-4.1.6.2-29.3 libreoffice-l10n-de-4.1.6.2-29.3 libreoffice-l10n-el-4.1.6.2-29.3 libreoffice-l10n-en-GB-4.1.6.2-29.3 libreoffice-l10n-en-ZA-4.1.6.2-29.3 libreoffice-l10n-eo-4.1.6.2-29.3 libreoffice-l10n-es-4.1.6.2-29.3 libreoffice-l10n-et-4.1.6.2-29.3 libreoffice-l10n-eu-4.1.6.2-29.3 libreoffice-l10n-fi-4.1.6.2-29.3 libreoffice-l10n-fr-4.1.6.2-29.3 libreoffice-l10n-ga-4.1.6.2-29.3 libreoffice-l10n-gd-4.1.6.2-29.3 libreoffice-l10n-gl-4.1.6.2-29.3 libreoffice-l10n-gu-IN-4.1.6.2-29.3 libreoffice-l10n-he-4.1.6.2-29.3 libreoffice-l10n-hi-IN-4.1.6.2-29.3 libreoffice-l10n-hr-4.1.6.2-29.3 libreoffice-l10n-hu-4.1.6.2-29.3 libreoffice-l10n-id-4.1.6.2-29.3 libreoffice-l10n-is-4.1.6.2-29.3 libreoffice-l10n-it-4.1.6.2-29.3 libreoffice-l10n-ja-4.1.6.2-29.3 libreoffice-l10n-ka-4.1.6.2-29.3 libreoffice-l10n-km-4.1.6.2-29.3 libreoffice-l10n-kn-4.1.6.2-29.3 libreoffice-l10n-ko-4.1.6.2-29.3 libreoffice-l10n-lt-4.1.6.2-29.3 libreoffice-l10n-mk-4.1.6.2-29.3 libreoffice-l10n-ml-4.1.6.2-29.3 libreoffice-l10n-mr-4.1.6.2-29.3 libreoffice-l10n-nb-4.1.6.2-29.3 libreoffice-l10n-nl-4.1.6.2-29.3 libreoffice-l10n-nn-4.1.6.2-29.3 libreoffice-l10n-nr-4.1.6.2-29.3 libreoffice-l10n-om-4.1.6.2-29.3 libreoffice-l10n-or-4.1.6.2-29.3 libreoffice-l10n-pa-IN-4.1.6.2-29.3 libreoffice-l10n-pl-4.1.6.2-29.3 libreoffice-l10n-pt-4.1.6.2-29.3 libreoffice-l10n-pt-BR-4.1.6.2-29.3 libreoffice-l10n-ro-4.1.6.2-29.3 libreoffice-l10n-ru-4.1.6.2-29.3 libreoffice-l10n-rw-4.1.6.2-29.3 libreoffice-l10n-sh-4.1.6.2-29.3 libreoffice-l10n-sk-4.1.6.2-29.3 libreoffice-l10n-sl-4.1.6.2-29.3 libreoffice-l10n-sr-4.1.6.2-29.3 libreoffice-l10n-ss-4.1.6.2-29.3 libreoffice-l10n-st-4.1.6.2-29.3 libreoffice-l10n-sv-4.1.6.2-29.3 libreoffice-l10n-ta-4.1.6.2-29.3 libreoffice-l10n-te-4.1.6.2-29.3 libreoffice-l10n-tg-4.1.6.2-29.3 libreoffice-l10n-th-4.1.6.2-29.3 libreoffice-l10n-tr-4.1.6.2-29.3 libreoffice-l10n-ts-4.1.6.2-29.3 libreoffice-l10n-ug-4.1.6.2-29.3 libreoffice-l10n-uk-4.1.6.2-29.3 libreoffice-l10n-ve-4.1.6.2-29.3 libreoffice-l10n-vi-4.1.6.2-29.3 libreoffice-l10n-xh-4.1.6.2-29.3 libreoffice-l10n-zh-CN-4.1.6.2-29.3 libreoffice-l10n-zh-TW-4.1.6.2-29.3 libreoffice-l10n-zu-4.1.6.2-29.3 References: http://support.novell.com/security/cve/CVE-2014-3693.html https://bugzilla.suse.com/show_bug.cgi?id=900214 https://bugzilla.suse.com/show_bug.cgi?id=900218

1 0

openSUSE-SU-2014:1411-1: moderate: Security update for docker, go
by opensuse-security＠opensuse.org 13 Nov '14

13 Nov '14

openSUSE Security Update: Security update for docker, go ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1411-1 Rating: moderate References: #898901 Cross-References: CVE-2014-5277 CVE-2014-7189 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Docker was updated to version 1.3.1 to fix two security issues and several other bugs. These security issues were fixed: - Prevent fallback to SSL protocols lower than TLS 1.0 for client, daemon and registry (CVE-2014-5277). - Secure HTTPS connection to registries with certificate verification and without HTTP fallback unless `--insecure-registry` is specified. These non-security issues were fixed: - Fix issue where volumes would not be shared - Fix issue with `--iptables=false` not automatically setting `--ip-masq=false` - Fix docker run output to non-TTY stdout - Fix escaping `$` for environment variables - Fix issue with lowercase `onbuild` Dockerfile instruction - Restrict envrionment variable expansion to `ENV`, `ADD`, `COPY`, `WORKDIR`, `EXPOSE`, `VOLUME` and `USER` - docker `exec` allows you to run additional processes inside existing containers - docker `create` gives you the ability to create a container via the cli without executing a process - `--security-opts` options to allow user to customize container labels and apparmor profiles - docker `ps` filters - Wildcard support to copy/add - Move production urls to get.docker.com from get.docker.io - Allocate ip address on the bridge inside a valid cidr - Use drone.io for pr and ci testing - Ability to setup an official registry mirror - Ability to save multiple images with docker `save` go was updated to version 1.3.3 to fix one security issue and several other bugs. This security issue was fixed: - TLS client authentication issue (CVE-2014-7189). These non-security issues were fixed: - Avoid stripping debuginfo on arm, it fails (and is not necessary) - Revert the /usr/share/go/contrib symlink as it caused problems during update. Moved all go sources to /usr/share/go/contrib/src instead of /usr/share/go/contrib/src/pkg and created pkg and src symlinks in contrib to add it to GOPATH - Fixed %go_contribsrcdir value - Copy temporary macros.go as go.macros to avoid it to be built - Do not modify Source: files, because that makes the .src.rpm being tied to one specific arch. - Removed extra src folder in /usr/share/go/contrib: the goal is to transform this folder into a proper entry for GOPATH. This folder is now linked to %{_libdir}/go/contrib - go requires gcc to build sources using cgo - tools-packaging.patch: Allow building cover and vet tools in $GOROOT_TARGET/pkg/tool instead of $GOROOT/pkg/tool. This will allow building go tools as a separate package Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-660 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): go-1.3.3-5.1 go-debuginfo-1.3.3-5.1 go-debugsource-1.3.3-5.1 go-doc-1.3.3-5.1 go-emacs-1.3.3-5.1 go-vim-1.3.3-5.1 - openSUSE 13.2 (x86_64): docker-1.3.1-5.2 docker-debuginfo-1.3.1-5.2 docker-debugsource-1.3.1-5.2 - openSUSE 13.2 (noarch): docker-bash-completion-1.3.1-5.2 docker-zsh-completion-1.3.1-5.2 References: http://support.novell.com/security/cve/CVE-2014-5277.html http://support.novell.com/security/cve/CVE-2014-7189.html https://bugzilla.suse.com/show_bug.cgi?id=898901

1 0

openSUSE-SU-2014:1407-1: moderate: sssd: security and bugfix update to 1.12.2
by opensuse-security＠opensuse.org 12 Nov '14

12 Nov '14

openSUSE Security Update: sssd: security and bugfix update to 1.12.2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1407-1 Rating: moderate References: #900159 Cross-References: CVE-2014-0249 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: sssd was updated to new upstream release 1.12.2 (bugfix release, bnc#900159) Changes: * Fixed a regression where the IPA provider did not fetch User Private Groups correctly * An important bug in the GPO access control which resulted in a wrong principal being used, was fixed. * Several new options are available for deployments that need to restrict a certain PAM service from connecting to a certain SSSD domain. For more details, see the description of pam_trusted_users and pam_public_domains options in the sssd.conf(5) man page and the domains option in the pam_sss(8) man page. * When SSSD is acting as an IPA client in setup with trusted AD domains, it is able to return group members or full group memberships for users from trusted AD domains. * Support for the "views" feature of IPA. * The GPO access control was further enhanced to allow the access control decisions while offline and map the Windows logon rights onto Linux PAM services. * The SSSD now ships a plugin for the rpc.idmapd daemon, sss_rpcidmapd(5). * A MIT Kerberos localauth plugin was added to SSSD. This plugin helps translating principals to user names in IPA-AD trust scenarios, allowing the krb5.conf configuration to be less complex. * A libwbclient plugin implementation is now part of the SSSD. The main purpose is to map Active Directory users and groups identified by their SID to POSIX users and groups for the file-server use-case. * Active Directory users ca nnow use their User Logon Name to log in. * The sss_cache tool was enhanced to allow invalidating the SSH host keys. * Groups without full POSIX information can now be used to enroll group membership (CVE-2014-0249). * Detection of transition from offline to online state was improved, resulting in fewer timeouts when SSSD is offline. * The Active Directory provider now correctly detects Windows Server 2012 R2. Previous versions would fall back to the slower non-AD path with 2012 R2. * Several other bugs related to deployments where SSSD is acting as an AD client were fixed. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-658 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libipa_hbac-devel-1.12.2-3.4.1 libipa_hbac0-1.12.2-3.4.1 libipa_hbac0-debuginfo-1.12.2-3.4.1 libnfsidmap-sss-1.12.2-3.4.1 libnfsidmap-sss-debuginfo-1.12.2-3.4.1 libsss_idmap-devel-1.12.2-3.4.1 libsss_idmap0-1.12.2-3.4.1 libsss_idmap0-debuginfo-1.12.2-3.4.1 libsss_nss_idmap-devel-1.12.2-3.4.1 libsss_nss_idmap0-1.12.2-3.4.1 libsss_nss_idmap0-debuginfo-1.12.2-3.4.1 libsss_simpleifp-devel-1.12.2-3.4.1 libsss_simpleifp0-1.12.2-3.4.1 libsss_simpleifp0-debuginfo-1.12.2-3.4.1 libsss_sudo-1.12.2-3.4.1 libsss_sudo-debuginfo-1.12.2-3.4.1 python-ipa_hbac-1.12.2-3.4.1 python-ipa_hbac-debuginfo-1.12.2-3.4.1 python-sss_nss_idmap-1.12.2-3.4.1 python-sss_nss_idmap-debuginfo-1.12.2-3.4.1 python-sssd-config-1.12.2-3.4.1 python-sssd-config-debuginfo-1.12.2-3.4.1 sssd-1.12.2-3.4.1 sssd-ad-1.12.2-3.4.1 sssd-ad-debuginfo-1.12.2-3.4.1 sssd-dbus-1.12.2-3.4.1 sssd-dbus-debuginfo-1.12.2-3.4.1 sssd-debuginfo-1.12.2-3.4.1 sssd-debugsource-1.12.2-3.4.1 sssd-ipa-1.12.2-3.4.1 sssd-ipa-debuginfo-1.12.2-3.4.1 sssd-krb5-1.12.2-3.4.1 sssd-krb5-common-1.12.2-3.4.1 sssd-krb5-common-debuginfo-1.12.2-3.4.1 sssd-krb5-debuginfo-1.12.2-3.4.1 sssd-ldap-1.12.2-3.4.1 sssd-ldap-debuginfo-1.12.2-3.4.1 sssd-proxy-1.12.2-3.4.1 sssd-proxy-debuginfo-1.12.2-3.4.1 sssd-tools-1.12.2-3.4.1 sssd-tools-debuginfo-1.12.2-3.4.1 sssd-wbclient-1.12.2-3.4.1 sssd-wbclient-debuginfo-1.12.2-3.4.1 sssd-wbclient-devel-1.12.2-3.4.1 - openSUSE 13.2 (x86_64): sssd-32bit-1.12.2-3.4.1 sssd-debuginfo-32bit-1.12.2-3.4.1 References: http://support.novell.com/security/cve/CVE-2014-0249.html https://bugzilla.suse.com/show_bug.cgi?id=900159

1 0

openSUSE-SU-2014:1406-1: moderate: konversation: security and bugfix release to 1.5.1
by opensuse-security＠opensuse.org 12 Nov '14

12 Nov '14

openSUSE Security Update: konversation: security and bugfix release to 1.5.1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1406-1 Rating: moderate References: #902670 Cross-References: CVE-2014-8483 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: konversation was updated to version 1.5.1, fixing bugs and one security issue. Changes: * Konversation 1.5.1 is a maintenance release containing only bug fixes. The included changes address several minor behavioral defects and a low-risk DoS security defect in the Blowfish ECB support. The KDE Platform version dependency has increased to v4.9.0 to gain access to newer Qt socket transport security flags. * Fixed a bug causing wildcards in command alias replacement patterns not to be expanded. * Fixed a bug causing auto-joining of channels not starting in # or & to sometimes fail because the auto-join command was generated before we got the CHANTYPES pronouncement by the server. * Added a size sanity check for incoming Blowfish ECB blocks. The blind assumption of incoming blocks being the expected 12 bytes could lead to a crash or up to 11 byte information leak due to an out-of-bounds read. CVE-2014-8483. * Enabling SSL/TLS support for connections will now advertise the protocols Qt considers secure by default, instead of being hardcoded to TLSv1. * Fixed the bundled 'sysinfo' script not coping with empty lines in /etc/os-release. * Made disk space info in the bundled 'sysinfo' script more robust by forcing the C locale for 'df'. * Added an audio player type hint for Cantata to the bundled 'media' script. * Fixed some minor comparison logic errors turned up by static analysis. * Konversation now depends on KDE Platform v4.9.0 or higher. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-659 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): konversation-1.5.1-3.4.1 konversation-debuginfo-1.5.1-3.4.1 konversation-debugsource-1.5.1-3.4.1 - openSUSE 13.2 (noarch): konversation-lang-1.5.1-3.4.1 References: http://support.novell.com/security/cve/CVE-2014-8483.html https://bugzilla.suse.com/show_bug.cgi?id=902670

1 0

openSUSE-RU-2014:1405-1: moderate: pulseaudio: fix wrong mixer setup
by maintenance＠opensuse.org 12 Nov '14

12 Nov '14

openSUSE Recommended Update: pulseaudio: fix wrong mixer setup ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1405-1 Rating: moderate References: #851362 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Pulseaudio was updated to fix wrong mixer setup / jack detection issues (bnc#851362). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-654 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libpulse-devel-5.0-4.5.1 libpulse-mainloop-glib0-5.0-4.5.1 libpulse-mainloop-glib0-debuginfo-5.0-4.5.1 libpulse0-5.0-4.5.1 libpulse0-debuginfo-5.0-4.5.1 pulseaudio-5.0-4.5.1 pulseaudio-debuginfo-5.0-4.5.1 pulseaudio-debugsource-5.0-4.5.1 pulseaudio-esound-compat-5.0-4.5.1 pulseaudio-gdm-hooks-5.0-4.5.1 pulseaudio-module-bluetooth-5.0-4.5.1 pulseaudio-module-bluetooth-debuginfo-5.0-4.5.1 pulseaudio-module-gconf-5.0-4.5.1 pulseaudio-module-gconf-debuginfo-5.0-4.5.1 pulseaudio-module-jack-5.0-4.5.1 pulseaudio-module-jack-debuginfo-5.0-4.5.1 pulseaudio-module-lirc-5.0-4.5.1 pulseaudio-module-lirc-debuginfo-5.0-4.5.1 pulseaudio-module-x11-5.0-4.5.1 pulseaudio-module-x11-debuginfo-5.0-4.5.1 pulseaudio-module-zeroconf-5.0-4.5.1 pulseaudio-module-zeroconf-debuginfo-5.0-4.5.1 pulseaudio-system-wide-5.0-4.5.1 pulseaudio-utils-5.0-4.5.1 pulseaudio-utils-debuginfo-5.0-4.5.1 - openSUSE 13.2 (x86_64): libpulse-mainloop-glib0-32bit-5.0-4.5.1 libpulse-mainloop-glib0-debuginfo-32bit-5.0-4.5.1 libpulse0-32bit-5.0-4.5.1 libpulse0-debuginfo-32bit-5.0-4.5.1 - openSUSE 13.2 (noarch): pulseaudio-lang-5.0-4.5.1 References: https://bugzilla.suse.com/show_bug.cgi?id=851362

1 0

openSUSE-RU-2014:1404-1: moderate: khotkeys5: actually make setting hotkeys work
by maintenance＠opensuse.org 12 Nov '14

12 Nov '14

openSUSE Recommended Update: khotkeys5: actually make setting hotkeys work ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1404-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: khotkeys5 was updated to make setting the hotkeys setting to work. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-650 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): khotkeys5-5.1.0-4.1 khotkeys5-debuginfo-5.1.0-4.1 khotkeys5-debugsource-5.1.0-4.1 khotkeys5-devel-5.1.0-4.1 - openSUSE 13.2 (noarch): khotkeys5-lang-5.1.0-4.1 References:

1 0