November 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2014:1403-1: moderate: lightdm: fixed unlocking gnome-keyring
by maintenance＠opensuse.org 12 Nov '14

12 Nov '14

openSUSE Recommended Update: lightdm: fixed unlocking gnome-keyring ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1403-1 Rating: moderate References: #903744 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: lightdm was updated to change back to symlinks to the xdm PAM service files again, using a different PAM service name breaks automatic unlocking of gnome-keyring via PAM (bnc#903744) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-651 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): liblightdm-gobject-1-0-1.12.1-4.1 liblightdm-gobject-1-0-debuginfo-1.12.1-4.1 liblightdm-qt-3-0-1.12.1-4.1 liblightdm-qt-3-0-debuginfo-1.12.1-4.1 liblightdm-qt5-3-0-1.12.1-4.1 liblightdm-qt5-3-0-debuginfo-1.12.1-4.1 lightdm-1.12.1-4.1 lightdm-debuginfo-1.12.1-4.1 lightdm-debugsource-1.12.1-4.1 lightdm-gobject-devel-1.12.1-4.1 lightdm-qt-devel-1.12.1-4.1 lightdm-qt5-devel-1.12.1-4.1 typelib-1_0-LightDM-1-1.12.1-4.1 - openSUSE 13.2 (noarch): lightdm-lang-1.12.1-4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=903744

1 0

openSUSE-RU-2014:1402-1: moderate: python-keyring: update to work with current gnome keyring
by maintenance＠opensuse.org 12 Nov '14

12 Nov '14

openSUSE Recommended Update: python-keyring: update to work with current gnome keyring ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1402-1 Rating: moderate References: #901066 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The python keyring module was updated to version 4.0 (boo#901066): * Removed ``keyring_path`` parameter from ``load_keyring``. See release notes for 3.0.3 for more details. * Issue #22: Removed support for loading the config from the current directory. The config file must now be located in the platform-specific config location. * Issue #22: Deprecated loading of config from current directory. Support for loading the config in this manner will be removed in a future version. * Issue #131: Keyring now will prefer ``pywin32-ctypes <https://pypi.python.org/pypi/pywin32-ctypes>``_ to pywin32 if available. * Gnome keyring no longer relies on the GNOME_KEYRING_CONTROL environment variable. * Issue #140: Restore compatibility for older versions of PyWin32. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-657 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): python-keyring-4.0-2.5.1 References: https://bugzilla.suse.com/show_bug.cgi?id=901066

1 0

openSUSE-RU-2014:1401-1: moderate: util-linux: systemd enablement for uuidd and fstrim support
by maintenance＠opensuse.org 12 Nov '14

12 Nov '14

openSUSE Recommended Update: util-linux: systemd enablement for uuidd and fstrim support ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1401-1 Rating: moderate References: #900935 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: util-linux was updated to fix various uuidd issues and add fstrim support. The uuidd systemd service is activated by default. Add fstrim service scripts and rcfstrim helper. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-655 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libblkid-devel-2.25.1-5.1 libblkid-devel-static-2.25.1-5.1 libblkid1-2.25.1-5.1 libblkid1-debuginfo-2.25.1-5.1 libmount-devel-2.25.1-5.1 libmount-devel-static-2.25.1-5.1 libmount1-2.25.1-5.1 libmount1-debuginfo-2.25.1-5.1 libsmartcols-devel-2.25.1-5.1 libsmartcols-devel-static-2.25.1-5.1 libsmartcols1-2.25.1-5.1 libsmartcols1-debuginfo-2.25.1-5.1 libuuid-devel-2.25.1-5.1 libuuid-devel-static-2.25.1-5.1 libuuid1-2.25.1-5.1 libuuid1-debuginfo-2.25.1-5.1 python-libmount-2.25.1-5.1 python-libmount-debuginfo-2.25.1-5.1 python-libmount-debugsource-2.25.1-5.1 util-linux-2.25.1-5.1 util-linux-debuginfo-2.25.1-5.1 util-linux-debugsource-2.25.1-5.1 util-linux-systemd-2.25.1-5.1 util-linux-systemd-debuginfo-2.25.1-5.1 util-linux-systemd-debugsource-2.25.1-5.1 uuidd-2.25.1-5.1 uuidd-debuginfo-2.25.1-5.1 - openSUSE 13.2 (x86_64): libblkid-devel-32bit-2.25.1-5.1 libblkid1-32bit-2.25.1-5.1 libblkid1-debuginfo-32bit-2.25.1-5.1 libmount-devel-32bit-2.25.1-5.1 libmount1-32bit-2.25.1-5.1 libmount1-debuginfo-32bit-2.25.1-5.1 libuuid-devel-32bit-2.25.1-5.1 libuuid1-32bit-2.25.1-5.1 libuuid1-debuginfo-32bit-2.25.1-5.1 - openSUSE 13.2 (noarch): util-linux-lang-2.25.1-5.1 References: https://bugzilla.suse.com/show_bug.cgi?id=900935

1 0

openSUSE-RU-2014:1400-1: moderate: xfce4-power-manager: fixed the critical battery action
by maintenance＠opensuse.org 12 Nov '14

12 Nov '14

openSUSE Recommended Update: xfce4-power-manager: fixed the critical battery action ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1400-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: The xfce4-power-manager had an incorrect critical battery action, this update fixes this. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-656 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): lxpanel-plugin-power-manager-1.4.1-4.1 lxpanel-plugin-power-manager-debuginfo-1.4.1-4.1 xfce4-panel-plugin-power-manager-1.4.1-4.1 xfce4-panel-plugin-power-manager-debuginfo-1.4.1-4.1 xfce4-power-manager-1.4.1-4.1 xfce4-power-manager-debuginfo-1.4.1-4.1 xfce4-power-manager-debugsource-1.4.1-4.1 - openSUSE 13.2 (noarch): xfce4-power-manager-branding-upstream-1.4.1-4.1 xfce4-power-manager-lang-1.4.1-4.1 References:

1 0

openSUSE-RU-2014:1399-1: moderate: gtk2: bugfix update to 2.24.25
by maintenance＠opensuse.org 12 Nov '14

12 Nov '14

openSUSE Recommended Update: gtk2: bugfix update to 2.24.25 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1399-1 Rating: moderate References: #903575 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: gtk2 was updated to version 2.24.25 (boo#903575) to fix various bugs and crashes. + Bug fixes: - bgo#689138 GtkButton: do not prelight in touchscreen mode - bgo#705054 Embed manifest into gtk-update-icon-cache.exe - bgo#729924 Crash while trying to print - bgo#733689 Editing a GtkEntry with completion, causes CRITI... - bgo#734563 Fails to install due to typo in modules/input/Ma... - bgo#734879 gdk_test_simulate_key() has no implementation on... - bgo#735005 gdk_drawable_get_screen() used for mask, which i... - bgo#735428 gtk_main() tries to unlock an unlocked mutex + Avoid a crash when using the pixbuf engine outside GTK+ + Translation updates: Hungarian. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-652 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gtk2-debugsource-2.24.25-4.4.1 gtk2-devel-2.24.25-4.4.1 gtk2-devel-debuginfo-2.24.25-4.4.1 gtk2-engine-clearlooks-2.20.2-18.4.2 gtk2-engine-clearlooks-debuginfo-2.20.2-18.4.2 gtk2-engine-crux-2.20.2-18.4.2 gtk2-engine-crux-debuginfo-2.20.2-18.4.2 gtk2-engine-glide-2.20.2-18.4.2 gtk2-engine-glide-debuginfo-2.20.2-18.4.2 gtk2-engine-hcengine-2.20.2-18.4.2 gtk2-engine-hcengine-debuginfo-2.20.2-18.4.2 gtk2-engine-industrial-2.20.2-18.4.2 gtk2-engine-industrial-debuginfo-2.20.2-18.4.2 gtk2-engine-mist-2.20.2-18.4.2 gtk2-engine-mist-debuginfo-2.20.2-18.4.2 gtk2-engine-redmond95-2.20.2-18.4.2 gtk2-engine-redmond95-debuginfo-2.20.2-18.4.2 gtk2-engine-thinice-2.20.2-18.4.2 gtk2-engine-thinice-debuginfo-2.20.2-18.4.2 gtk2-engines-2.20.2-18.4.2 gtk2-engines-debugsource-2.20.2-18.4.2 gtk2-engines-devel-2.20.2-18.4.2 gtk2-immodule-amharic-2.24.25-4.4.1 gtk2-immodule-amharic-debuginfo-2.24.25-4.4.1 gtk2-immodule-inuktitut-2.24.25-4.4.1 gtk2-immodule-inuktitut-debuginfo-2.24.25-4.4.1 gtk2-immodule-multipress-2.24.25-4.4.1 gtk2-immodule-multipress-debuginfo-2.24.25-4.4.1 gtk2-immodule-thai-2.24.25-4.4.1 gtk2-immodule-thai-debuginfo-2.24.25-4.4.1 gtk2-immodule-vietnamese-2.24.25-4.4.1 gtk2-immodule-vietnamese-debuginfo-2.24.25-4.4.1 gtk2-immodule-xim-2.24.25-4.4.1 gtk2-immodule-xim-debuginfo-2.24.25-4.4.1 gtk2-immodules-tigrigna-2.24.25-4.4.1 gtk2-immodules-tigrigna-debuginfo-2.24.25-4.4.1 gtk2-tools-2.24.25-4.4.1 gtk2-tools-debuginfo-2.24.25-4.4.1 libgtk-2_0-0-2.24.25-4.4.1 libgtk-2_0-0-debuginfo-2.24.25-4.4.1 typelib-1_0-Gtk-2_0-2.24.25-4.4.1 - openSUSE 13.2 (x86_64): gtk2-devel-32bit-2.24.25-4.4.1 gtk2-devel-debuginfo-32bit-2.24.25-4.4.1 gtk2-engine-clearlooks-32bit-2.20.2-18.4.2 gtk2-engine-clearlooks-debuginfo-32bit-2.20.2-18.4.2 gtk2-engine-crux-32bit-2.20.2-18.4.2 gtk2-engine-crux-debuginfo-32bit-2.20.2-18.4.2 gtk2-engine-glide-32bit-2.20.2-18.4.2 gtk2-engine-glide-debuginfo-32bit-2.20.2-18.4.2 gtk2-engine-industrial-32bit-2.20.2-18.4.2 gtk2-engine-industrial-debuginfo-32bit-2.20.2-18.4.2 gtk2-engine-mist-32bit-2.20.2-18.4.2 gtk2-engine-mist-debuginfo-32bit-2.20.2-18.4.2 gtk2-engine-redmond95-32bit-2.20.2-18.4.2 gtk2-engine-redmond95-debuginfo-32bit-2.20.2-18.4.2 gtk2-engine-thinice-32bit-2.20.2-18.4.2 gtk2-engine-thinice-debuginfo-32bit-2.20.2-18.4.2 gtk2-immodule-amharic-32bit-2.24.25-4.4.1 gtk2-immodule-amharic-debuginfo-32bit-2.24.25-4.4.1 gtk2-immodule-inuktitut-32bit-2.24.25-4.4.1 gtk2-immodule-inuktitut-debuginfo-32bit-2.24.25-4.4.1 gtk2-immodule-multipress-32bit-2.24.25-4.4.1 gtk2-immodule-multipress-debuginfo-32bit-2.24.25-4.4.1 gtk2-immodule-thai-32bit-2.24.25-4.4.1 gtk2-immodule-thai-debuginfo-32bit-2.24.25-4.4.1 gtk2-immodule-vietnamese-32bit-2.24.25-4.4.1 gtk2-immodule-vietnamese-debuginfo-32bit-2.24.25-4.4.1 gtk2-immodule-xim-32bit-2.24.25-4.4.1 gtk2-immodule-xim-debuginfo-32bit-2.24.25-4.4.1 gtk2-immodules-tigrigna-32bit-2.24.25-4.4.1 gtk2-immodules-tigrigna-debuginfo-32bit-2.24.25-4.4.1 gtk2-tools-32bit-2.24.25-4.4.1 gtk2-tools-debuginfo-32bit-2.24.25-4.4.1 libgtk-2_0-0-32bit-2.24.25-4.4.1 libgtk-2_0-0-debuginfo-32bit-2.24.25-4.4.1 - openSUSE 13.2 (noarch): gtk2-branding-SLED-13.2-4.3 gtk2-branding-openSUSE-13.2-4.2 gtk2-branding-upstream-2.24.25-4.4.1 gtk2-data-2.24.25-4.4.1 gtk2-lang-2.24.25-4.4.1 gtk2-theme-clearlooks-2.20.2-18.4.2 gtk2-theme-crux-2.20.2-18.4.2 gtk2-theme-industrial-2.20.2-18.4.2 gtk2-theme-mist-2.20.2-18.4.2 gtk2-theme-redmond95-2.20.2-18.4.2 gtk2-theme-thinice-2.20.2-18.4.2 References: https://bugzilla.suse.com/show_bug.cgi?id=903575

1 0

openSUSE-RU-2014:1398-1: moderate: glib2-branding-openSUSE: make plain text files open in gedit
by maintenance＠opensuse.org 12 Nov '14

12 Nov '14

openSUSE Recommended Update: glib2-branding-openSUSE: make plain text files open in gedit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1398-1 Rating: moderate References: #904010 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes an issue where clicking on a text file would open LibreOffice instead of just the lightweight gedit, as the gedit desktop file got renamed to org.gnome.gedit.desktop. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-653 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): gio-branding-openSUSE-13.2-5.1 References: https://bugzilla.suse.com/show_bug.cgi?id=904010

1 0

openSUSE-SU-2014:1397-1: moderate: update for pidgin
by opensuse-security＠opensuse.org 12 Nov '14

12 Nov '14

openSUSE Security Update: update for pidgin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1397-1 Rating: moderate References: #853038 #874606 #902408 #902409 #902410 #902495 Cross-References: CVE-2014-3694 CVE-2014-3695 CVE-2014-3696 CVE-2014-3697 CVE-2014-3698 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has one errata is now available. Description: - Update to version 2.10.10: + General: - Check the basic constraints extension when validating SSL/TLS certificates. This fixes a security hole that allowed a malicious man-in-the-middle to impersonate an IM server or any other https endpoint. This affected both the NSS and GnuTLS plugins (CVE-2014-3694, boo#902495). - Allow and prefer TLS 1.2 and 1.1 when using the NSS plugin for SSL (im#15909). + libpurple3 compatibility: - Encrypted account passwords are preserved until the new one is set. - Fix loading Google Talk and Facebook XMPP accounts. + Windows-Specific Changes: Don't allow overwriting arbitrary files on the file system when the user installs a smiley theme via drag-and-drop (CVE-2014-3697). + Finch: Fix build against Python 3 (im#15969). + Gadu-Gadu: Updated internal libgadu to version 1.12.0. + Groupwise: Fix potential remote crash parsing server message that indicates that a large amount of memory should be allocated (CVE-2014-3696, boo#902410). + IRC: Fix a possible leak of unencrypted data when using /me command with OTR (im#15750). + MXit: Fix potential remote crash parsing a malformed emoticon response (CVE-2014-3695, boo#902409). + XMPP: - Fix potential information leak where a malicious XMPP server and possibly even a malicious remote user could create a carefully crafted XMPP message that causes libpurple to send an XMPP message containing arbitrary memory (CVE-2014-3698, boo#902408). - Fix Facebook XMPP roster quirks (im#15041, im#15957). + Yahoo: Fix login when using the GnuTLS library for TLS connections (im#16172, boo#874606). - Drop pidgin-gstreamer1.patch: causes crashes and Video still does not work (boo#853038). Drop BuildRequires conditions switching to GStreamer 1.0. - Rebase pidgin-crash-missing-gst-registry.patch. + add pidgin-crash-missing-gst-registry.patch according to the GST doc, "gst_init" should be called before any other calls. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-648 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): finch-2.10.10-5.4.1 finch-debuginfo-2.10.10-5.4.1 finch-devel-2.10.10-5.4.1 libpurple-2.10.10-5.4.1 libpurple-debuginfo-2.10.10-5.4.1 libpurple-devel-2.10.10-5.4.1 libpurple-meanwhile-2.10.10-5.4.1 libpurple-meanwhile-debuginfo-2.10.10-5.4.1 libpurple-tcl-2.10.10-5.4.1 libpurple-tcl-debuginfo-2.10.10-5.4.1 pidgin-2.10.10-5.4.1 pidgin-debuginfo-2.10.10-5.4.1 pidgin-debugsource-2.10.10-5.4.1 pidgin-devel-2.10.10-5.4.1 - openSUSE 13.2 (noarch): libpurple-branding-openSUSE-13.2-2.3.1 libpurple-branding-upstream-2.10.10-5.4.1 libpurple-lang-2.10.10-5.4.1 References: http://support.novell.com/security/cve/CVE-2014-3694.html http://support.novell.com/security/cve/CVE-2014-3695.html http://support.novell.com/security/cve/CVE-2014-3696.html http://support.novell.com/security/cve/CVE-2014-3697.html http://support.novell.com/security/cve/CVE-2014-3698.html https://bugzilla.suse.com/show_bug.cgi?id=853038 https://bugzilla.suse.com/show_bug.cgi?id=874606 https://bugzilla.suse.com/show_bug.cgi?id=902408 https://bugzilla.suse.com/show_bug.cgi?id=902409 https://bugzilla.suse.com/show_bug.cgi?id=902410 https://bugzilla.suse.com/show_bug.cgi?id=902495

1 0

openSUSE-SU-2014:1396-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 12 Nov '14

12 Nov '14

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1396-1 Rating: moderate References: #903204 #903216 #903638 Cross-References: CVE-2014-8354 CVE-2014-8355 CVE-2014-8562 Affected Products: openSUSE 13.2 openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: ImageMagick was updated to fix three security issues. These security issues were fixed: - Out-of-bounds memory access in PCX parser (CVE-2014-8355). - Out-of-bounds memory access in resize code (CVE-2014-8354). - Out-of-bounds memory error in DCM decode (CVE-2014-8562). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-649 - openSUSE 13.1: zypper in -t patch openSUSE-2014-649 - openSUSE 12.3: zypper in -t patch openSUSE-2014-649 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ImageMagick-6.8.9.8-4.1 ImageMagick-debuginfo-6.8.9.8-4.1 ImageMagick-debugsource-6.8.9.8-4.1 ImageMagick-devel-6.8.9.8-4.1 ImageMagick-extra-6.8.9.8-4.1 ImageMagick-extra-debuginfo-6.8.9.8-4.1 libMagick++-6_Q16-5-6.8.9.8-4.1 libMagick++-6_Q16-5-debuginfo-6.8.9.8-4.1 libMagick++-devel-6.8.9.8-4.1 libMagickCore-6_Q16-2-6.8.9.8-4.1 libMagickCore-6_Q16-2-debuginfo-6.8.9.8-4.1 libMagickWand-6_Q16-2-6.8.9.8-4.1 libMagickWand-6_Q16-2-debuginfo-6.8.9.8-4.1 perl-PerlMagick-6.8.9.8-4.1 perl-PerlMagick-debuginfo-6.8.9.8-4.1 - openSUSE 13.2 (x86_64): ImageMagick-devel-32bit-6.8.9.8-4.1 libMagick++-6_Q16-5-32bit-6.8.9.8-4.1 libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-4.1 libMagick++-devel-32bit-6.8.9.8-4.1 libMagickCore-6_Q16-2-32bit-6.8.9.8-4.1 libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-4.1 libMagickWand-6_Q16-2-32bit-6.8.9.8-4.1 libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-4.1 - openSUSE 13.2 (noarch): ImageMagick-doc-6.8.9.8-4.1 - openSUSE 13.1 (i586 x86_64): ImageMagick-6.8.6.9-2.24.1 ImageMagick-debuginfo-6.8.6.9-2.24.1 ImageMagick-debugsource-6.8.6.9-2.24.1 ImageMagick-devel-6.8.6.9-2.24.1 ImageMagick-extra-6.8.6.9-2.24.1 ImageMagick-extra-debuginfo-6.8.6.9-2.24.1 libMagick++-6_Q16-2-6.8.6.9-2.24.1 libMagick++-6_Q16-2-debuginfo-6.8.6.9-2.24.1 libMagick++-devel-6.8.6.9-2.24.1 libMagickCore-6_Q16-1-6.8.6.9-2.24.1 libMagickCore-6_Q16-1-debuginfo-6.8.6.9-2.24.1 libMagickWand-6_Q16-1-6.8.6.9-2.24.1 libMagickWand-6_Q16-1-debuginfo-6.8.6.9-2.24.1 perl-PerlMagick-6.8.6.9-2.24.1 perl-PerlMagick-debuginfo-6.8.6.9-2.24.1 - openSUSE 13.1 (x86_64): ImageMagick-devel-32bit-6.8.6.9-2.24.1 libMagick++-6_Q16-2-32bit-6.8.6.9-2.24.1 libMagick++-6_Q16-2-debuginfo-32bit-6.8.6.9-2.24.1 libMagick++-devel-32bit-6.8.6.9-2.24.1 libMagickCore-6_Q16-1-32bit-6.8.6.9-2.24.1 libMagickCore-6_Q16-1-debuginfo-32bit-6.8.6.9-2.24.1 libMagickWand-6_Q16-1-32bit-6.8.6.9-2.24.1 libMagickWand-6_Q16-1-debuginfo-32bit-6.8.6.9-2.24.1 - openSUSE 13.1 (noarch): ImageMagick-doc-6.8.6.9-2.24.1 - openSUSE 12.3 (i586 x86_64): ImageMagick-6.7.8.8-4.17.1 ImageMagick-debuginfo-6.7.8.8-4.17.1 ImageMagick-debugsource-6.7.8.8-4.17.1 ImageMagick-devel-6.7.8.8-4.17.1 ImageMagick-extra-6.7.8.8-4.17.1 ImageMagick-extra-debuginfo-6.7.8.8-4.17.1 libMagick++-devel-6.7.8.8-4.17.1 libMagick++5-6.7.8.8-4.17.1 libMagick++5-debuginfo-6.7.8.8-4.17.1 libMagickCore5-6.7.8.8-4.17.1 libMagickCore5-debuginfo-6.7.8.8-4.17.1 libMagickWand5-6.7.8.8-4.17.1 libMagickWand5-debuginfo-6.7.8.8-4.17.1 perl-PerlMagick-6.7.8.8-4.17.1 perl-PerlMagick-debuginfo-6.7.8.8-4.17.1 - openSUSE 12.3 (x86_64): ImageMagick-devel-32bit-6.7.8.8-4.17.1 libMagickCore5-32bit-6.7.8.8-4.17.1 libMagickCore5-debuginfo-32bit-6.7.8.8-4.17.1 libMagickWand5-32bit-6.7.8.8-4.17.1 libMagickWand5-debuginfo-32bit-6.7.8.8-4.17.1 - openSUSE 12.3 (noarch): ImageMagick-doc-6.7.8.8-4.17.1 References: http://support.novell.com/security/cve/CVE-2014-8354.html http://support.novell.com/security/cve/CVE-2014-8355.html http://support.novell.com/security/cve/CVE-2014-8562.html https://bugzilla.suse.com/show_bug.cgi?id=903204 https://bugzilla.suse.com/show_bug.cgi?id=903216 https://bugzilla.suse.com/show_bug.cgi?id=903638

1 0

openSUSE-SU-2014:1395-1: moderate: libserf: Disable SSLv2 and SSLv3.
by opensuse-security＠opensuse.org 12 Nov '14

12 Nov '14

openSUSE Security Update: libserf: Disable SSLv2 and SSLv3. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1395-1 Rating: moderate References: Cross-References: CVE-2014-3566 Affected Products: openSUSE 13.2 openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: libserf was updated to disable SSLv2 and SSLv3. libserf was updated to version 1.3.8 on openSUSE 13.1 and 13.2. This release also fixes a problem with handling very large gzip-encoded HTTP responses. For openSUSE 12.3 libserf 1.1.1 was patched to disable SSLv2 and SSLv3. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-647 - openSUSE 13.1: zypper in -t patch openSUSE-2014-647 - openSUSE 12.3: zypper in -t patch openSUSE-2014-647 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libserf-1-1-1.3.8-2.4.1 libserf-1-1-debuginfo-1.3.8-2.4.1 libserf-debugsource-1.3.8-2.4.1 libserf-devel-1.3.8-2.4.1 - openSUSE 13.1 (i586 x86_64): libserf-1-1-1.3.8-20.1 libserf-1-1-debuginfo-1.3.8-20.1 libserf-debugsource-1.3.8-20.1 libserf-devel-1.3.8-20.1 - openSUSE 12.3 (i586 x86_64): libserf-1-0-1.1.1-2.8.1 libserf-1-0-debuginfo-1.1.1-2.8.1 libserf-debugsource-1.1.1-2.8.1 libserf-devel-1.1.1-2.8.1 References: http://support.novell.com/security/cve/CVE-2014-3566.html

1 0

openSUSE-SU-2014:1391-1: moderate: update for php5
by opensuse-security＠opensuse.org 11 Nov '14

11 Nov '14

openSUSE Security Update: update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1391-1 Rating: moderate References: #902357 #902360 #902368 Cross-References: CVE-2014-3668 CVE-2014-3669 CVE-2014-3670 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: - security update: * CVE-2014-3670 [bnc#902357] * CVE-2014-3669 [bnc#902360] * CVE-2014-3668 [bnc#902368] - added patches: * php-CVE-2014-3670.patch * php-CVE-2014-3669.patch * php-CVE-2014-3668.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-645 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_php5-5.6.1-4.1 apache2-mod_php5-debuginfo-5.6.1-4.1 php5-5.6.1-4.1 php5-bcmath-5.6.1-4.1 php5-bcmath-debuginfo-5.6.1-4.1 php5-bz2-5.6.1-4.1 php5-bz2-debuginfo-5.6.1-4.1 php5-calendar-5.6.1-4.1 php5-calendar-debuginfo-5.6.1-4.1 php5-ctype-5.6.1-4.1 php5-ctype-debuginfo-5.6.1-4.1 php5-curl-5.6.1-4.1 php5-curl-debuginfo-5.6.1-4.1 php5-dba-5.6.1-4.1 php5-dba-debuginfo-5.6.1-4.1 php5-debuginfo-5.6.1-4.1 php5-debugsource-5.6.1-4.1 php5-devel-5.6.1-4.1 php5-dom-5.6.1-4.1 php5-dom-debuginfo-5.6.1-4.1 php5-enchant-5.6.1-4.1 php5-enchant-debuginfo-5.6.1-4.1 php5-exif-5.6.1-4.1 php5-exif-debuginfo-5.6.1-4.1 php5-fastcgi-5.6.1-4.1 php5-fastcgi-debuginfo-5.6.1-4.1 php5-fileinfo-5.6.1-4.1 php5-fileinfo-debuginfo-5.6.1-4.1 php5-firebird-5.6.1-4.1 php5-firebird-debuginfo-5.6.1-4.1 php5-fpm-5.6.1-4.1 php5-fpm-debuginfo-5.6.1-4.1 php5-ftp-5.6.1-4.1 php5-ftp-debuginfo-5.6.1-4.1 php5-gd-5.6.1-4.1 php5-gd-debuginfo-5.6.1-4.1 php5-gettext-5.6.1-4.1 php5-gettext-debuginfo-5.6.1-4.1 php5-gmp-5.6.1-4.1 php5-gmp-debuginfo-5.6.1-4.1 php5-iconv-5.6.1-4.1 php5-iconv-debuginfo-5.6.1-4.1 php5-imap-5.6.1-4.1 php5-imap-debuginfo-5.6.1-4.1 php5-intl-5.6.1-4.1 php5-intl-debuginfo-5.6.1-4.1 php5-json-5.6.1-4.1 php5-json-debuginfo-5.6.1-4.1 php5-ldap-5.6.1-4.1 php5-ldap-debuginfo-5.6.1-4.1 php5-mbstring-5.6.1-4.1 php5-mbstring-debuginfo-5.6.1-4.1 php5-mcrypt-5.6.1-4.1 php5-mcrypt-debuginfo-5.6.1-4.1 php5-mssql-5.6.1-4.1 php5-mssql-debuginfo-5.6.1-4.1 php5-mysql-5.6.1-4.1 php5-mysql-debuginfo-5.6.1-4.1 php5-odbc-5.6.1-4.1 php5-odbc-debuginfo-5.6.1-4.1 php5-opcache-5.6.1-4.1 php5-opcache-debuginfo-5.6.1-4.1 php5-openssl-5.6.1-4.1 php5-openssl-debuginfo-5.6.1-4.1 php5-pcntl-5.6.1-4.1 php5-pcntl-debuginfo-5.6.1-4.1 php5-pdo-5.6.1-4.1 php5-pdo-debuginfo-5.6.1-4.1 php5-pgsql-5.6.1-4.1 php5-pgsql-debuginfo-5.6.1-4.1 php5-phar-5.6.1-4.1 php5-phar-debuginfo-5.6.1-4.1 php5-posix-5.6.1-4.1 php5-posix-debuginfo-5.6.1-4.1 php5-pspell-5.6.1-4.1 php5-pspell-debuginfo-5.6.1-4.1 php5-readline-5.6.1-4.1 php5-readline-debuginfo-5.6.1-4.1 php5-shmop-5.6.1-4.1 php5-shmop-debuginfo-5.6.1-4.1 php5-snmp-5.6.1-4.1 php5-snmp-debuginfo-5.6.1-4.1 php5-soap-5.6.1-4.1 php5-soap-debuginfo-5.6.1-4.1 php5-sockets-5.6.1-4.1 php5-sockets-debuginfo-5.6.1-4.1 php5-sqlite-5.6.1-4.1 php5-sqlite-debuginfo-5.6.1-4.1 php5-suhosin-5.6.1-4.1 php5-suhosin-debuginfo-5.6.1-4.1 php5-sysvmsg-5.6.1-4.1 php5-sysvmsg-debuginfo-5.6.1-4.1 php5-sysvsem-5.6.1-4.1 php5-sysvsem-debuginfo-5.6.1-4.1 php5-sysvshm-5.6.1-4.1 php5-sysvshm-debuginfo-5.6.1-4.1 php5-tidy-5.6.1-4.1 php5-tidy-debuginfo-5.6.1-4.1 php5-tokenizer-5.6.1-4.1 php5-tokenizer-debuginfo-5.6.1-4.1 php5-wddx-5.6.1-4.1 php5-wddx-debuginfo-5.6.1-4.1 php5-xmlreader-5.6.1-4.1 php5-xmlreader-debuginfo-5.6.1-4.1 php5-xmlrpc-5.6.1-4.1 php5-xmlrpc-debuginfo-5.6.1-4.1 php5-xmlwriter-5.6.1-4.1 php5-xmlwriter-debuginfo-5.6.1-4.1 php5-xsl-5.6.1-4.1 php5-xsl-debuginfo-5.6.1-4.1 php5-zip-5.6.1-4.1 php5-zip-debuginfo-5.6.1-4.1 php5-zlib-5.6.1-4.1 php5-zlib-debuginfo-5.6.1-4.1 - openSUSE 13.2 (noarch): php5-pear-5.6.1-4.1 References: http://support.novell.com/security/cve/CVE-2014-3668.html http://support.novell.com/security/cve/CVE-2014-3669.html http://support.novell.com/security/cve/CVE-2014-3670.html https://bugzilla.suse.com/show_bug.cgi?id=902357 https://bugzilla.suse.com/show_bug.cgi?id=902360 https://bugzilla.suse.com/show_bug.cgi?id=902368

1 0