December 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2014:1718-1: vsftpd.
by maintenance＠opensuse.org 27 Dec '14

27 Dec '14

openSUSE Recommended Update: vsftpd. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1718-1 Rating: low References: #870122 #872215 #872221 #890469 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This recommended update for vsftpd fixes the following issues: - solves bnc#910128. - No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify. - force using fork() instead of clone() on s390 - fixes bnc#890469 - Cleanup with spec-cleaner - Remove conditions about init files as we do not build for 12.1 anyway. - Update the README.SUSE file to describe more the listen option. - Add socket service for vsftpd to avoid the need for xinetd here. - Add comment about listen variables for xinetd configuration. Fixes bnc#872221. - Add default configuration as arg to xinetd started vsftpd. - Move the enabling of timeofday and alarm one level deeper to be sure it is whitelisted everytime. Also should possibly fix bnc#872215. - Remove forking from service type as it hangs in endless loop. - Updated patches - Fix warning about dangling symlink on rcvsftpd from rpmlint and Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-818 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): vsftpd-3.0.2-10.4.1 vsftpd-debuginfo-3.0.2-10.4.1 vsftpd-debugsource-3.0.2-10.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=870122 https://bugzilla.suse.com/show_bug.cgi?id=872215 https://bugzilla.suse.com/show_bug.cgi?id=872221 https://bugzilla.suse.com/show_bug.cgi?id=890469

1 0

openSUSE-RU-2014:1717-1: virt-sandbox
by maintenance＠opensuse.org 27 Dec '14

27 Dec '14

openSUSE Recommended Update: virt-sandbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1717-1 Rating: low References: #909249 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for virt-sandbox fixes the following issues: - Add AppArmor support (bsc#909249) - virt-sandbox-service: /var needs to be the last to be mounted. (bsc#909249) - renamed patch as it went upstream Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-819 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libvirt-sandbox-1_0-4-0.5.1-7.5.1 libvirt-sandbox-1_0-4-debuginfo-0.5.1-7.5.1 libvirt-sandbox-devel-0.5.1-7.5.1 typelib-1_0-LibvirtSandbox-1_0-0.5.1-7.5.1 virt-sandbox-0.5.1-7.5.1 virt-sandbox-debuginfo-0.5.1-7.5.1 virt-sandbox-debugsource-0.5.1-7.5.1 References: https://bugzilla.suse.com/show_bug.cgi?id=909249

1 0

openSUSE-SU-2014:1716-1: moderate: Security update for python3-rpm, rpm, rpm-python
by opensuse-security＠opensuse.org 27 Dec '14

27 Dec '14

openSUSE Security Update: Security update for python3-rpm, rpm, rpm-python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1716-1 Rating: moderate References: #892431 #906803 #908128 Cross-References: CVE-2013-6435 CVE-2014-8118 Affected Products: openSUSE 13.2 openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This rpm update fixes the following security and non security issues: - honor --noglob in install mode [bnc#892431] - check for bad invalid name sizes [bnc#908128] [CVE-2014-8118] - create files with mode 0 [bnc#906803] [CVE-2013-6435] This update also includes version updates of rpm-python and python3-rpm. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-816 - openSUSE 13.1: zypper in -t patch openSUSE-2014-816 - openSUSE 12.3: zypper in -t patch openSUSE-2014-816 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): python3-rpm-4.11.3-4.2 python3-rpm-debuginfo-4.11.3-4.2 python3-rpm-debugsource-4.11.3-4.2 rpm-4.11.3-4.1 rpm-build-4.11.3-4.1 rpm-build-debuginfo-4.11.3-4.1 rpm-debuginfo-4.11.3-4.1 rpm-debugsource-4.11.3-4.1 rpm-devel-4.11.3-4.1 rpm-python-4.11.3-4.2 rpm-python-debuginfo-4.11.3-4.2 rpm-python-debugsource-4.11.3-4.2 - openSUSE 13.2 (x86_64): rpm-32bit-4.11.3-4.1 rpm-debuginfo-32bit-4.11.3-4.1 - openSUSE 13.1 (i586 x86_64): python3-rpm-4.11.1-6.9.1 python3-rpm-debuginfo-4.11.1-6.9.1 python3-rpm-debugsource-4.11.1-6.9.1 rpm-4.11.1-6.9.1 rpm-build-4.11.1-6.9.1 rpm-build-debuginfo-4.11.1-6.9.1 rpm-debuginfo-4.11.1-6.9.1 rpm-debugsource-4.11.1-6.9.1 rpm-devel-4.11.1-6.9.1 rpm-python-4.11.1-6.9.1 rpm-python-debuginfo-4.11.1-6.9.1 rpm-python-debugsource-4.11.1-6.9.1 - openSUSE 13.1 (x86_64): rpm-32bit-4.11.1-6.9.1 rpm-debuginfo-32bit-4.11.1-6.9.1 - openSUSE 12.3 (i586 x86_64): python3-rpm-4.10.2-2.4.1 python3-rpm-debuginfo-4.10.2-2.4.1 python3-rpm-debugsource-4.10.2-2.4.1 rpm-4.10.2-2.4.1 rpm-build-4.10.2-2.4.1 rpm-build-debuginfo-4.10.2-2.4.1 rpm-debuginfo-4.10.2-2.4.1 rpm-debugsource-4.10.2-2.4.1 rpm-devel-4.10.2-2.4.1 rpm-python-4.10.2-2.4.1 rpm-python-debuginfo-4.10.2-2.4.1 rpm-python-debugsource-4.10.2-2.4.1 - openSUSE 12.3 (x86_64): rpm-32bit-4.10.2-2.4.1 rpm-debuginfo-32bit-4.10.2-2.4.1 References: http://support.novell.com/security/cve/CVE-2013-6435.html http://support.novell.com/security/cve/CVE-2014-8118.html https://bugzilla.suse.com/show_bug.cgi?id=892431 https://bugzilla.suse.com/show_bug.cgi?id=906803 https://bugzilla.suse.com/show_bug.cgi?id=908128

1 0

openSUSE-RU-2014:1715-1: recommendend update for yast2-trans
by maintenance＠opensuse.org 27 Dec '14

27 Dec '14

openSUSE Recommended Update: recommendend update for yast2-trans ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1715-1 Rating: low References: #903881 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for yast2-trans fixes the following issues: - Updated languages, xaused by bnc#903881 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-811 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): yast2-trans-3.1.0-9.1 yast2-trans-af-3.1.0-9.1 yast2-trans-am-3.1.0-9.1 yast2-trans-ar-3.1.0-9.1 yast2-trans-ast-3.1.0-9.1 yast2-trans-be-3.1.0-9.1 yast2-trans-bg-3.1.0-9.1 yast2-trans-bn-3.1.0-9.1 yast2-trans-bs-3.1.0-9.1 yast2-trans-ca-3.1.0-9.1 yast2-trans-cs-3.1.0-9.1 yast2-trans-cy-3.1.0-9.1 yast2-trans-da-3.1.0-9.1 yast2-trans-de-3.1.0-9.1 yast2-trans-el-3.1.0-9.1 yast2-trans-en_GB-3.1.0-9.1 yast2-trans-en_US-3.1.0-9.1 yast2-trans-eo-3.1.0-9.1 yast2-trans-es-3.1.0-9.1 yast2-trans-et-3.1.0-9.1 yast2-trans-eu-3.1.0-9.1 yast2-trans-fa-3.1.0-9.1 yast2-trans-fi-3.1.0-9.1 yast2-trans-fr-3.1.0-9.1 yast2-trans-gl-3.1.0-9.1 yast2-trans-gu-3.1.0-9.1 yast2-trans-he-3.1.0-9.1 yast2-trans-hi-3.1.0-9.1 yast2-trans-hr-3.1.0-9.1 yast2-trans-hu-3.1.0-9.1 yast2-trans-id-3.1.0-9.1 yast2-trans-it-3.1.0-9.1 yast2-trans-ja-3.1.0-9.1 yast2-trans-jv-3.1.0-9.1 yast2-trans-ka-3.1.0-9.1 yast2-trans-km-3.1.0-9.1 yast2-trans-kn-3.1.0-9.1 yast2-trans-ko-3.1.0-9.1 yast2-trans-ku-3.1.0-9.1 yast2-trans-lo-3.1.0-9.1 yast2-trans-lt-3.1.0-9.1 yast2-trans-mk-3.1.0-9.1 yast2-trans-mr-3.1.0-9.1 yast2-trans-ms-3.1.0-9.1 yast2-trans-my-3.1.0-9.1 yast2-trans-nb-3.1.0-9.1 yast2-trans-nds-3.1.0-9.1 yast2-trans-nl-3.1.0-9.1 yast2-trans-nn-3.1.0-9.1 yast2-trans-pa-3.1.0-9.1 yast2-trans-pl-3.1.0-9.1 yast2-trans-pt-3.1.0-9.1 yast2-trans-pt_BR-3.1.0-9.1 yast2-trans-ro-3.1.0-9.1 yast2-trans-ru-3.1.0-9.1 yast2-trans-si-3.1.0-9.1 yast2-trans-sk-3.1.0-9.1 yast2-trans-sl-3.1.0-9.1 yast2-trans-sr-3.1.0-9.1 yast2-trans-sv-3.1.0-9.1 yast2-trans-sw-3.1.0-9.1 yast2-trans-ta-3.1.0-9.1 yast2-trans-tg-3.1.0-9.1 yast2-trans-th-3.1.0-9.1 yast2-trans-tk-3.1.0-9.1 yast2-trans-tr-3.1.0-9.1 yast2-trans-uk-3.1.0-9.1 yast2-trans-vi-3.1.0-9.1 yast2-trans-wa-3.1.0-9.1 yast2-trans-xh-3.1.0-9.1 yast2-trans-zh_CN-3.1.0-9.1 yast2-trans-zh_TW-3.1.0-9.1 yast2-trans-zu-3.1.0-9.1 References: https://bugzilla.suse.com/show_bug.cgi?id=903881

1 0

openSUSE-RU-2014:1714-1: istgt
by maintenance＠opensuse.org 27 Dec '14

27 Dec '14

openSUSE Recommended Update: istgt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1714-1 Rating: low References: #910111 #910112 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for istgt fixes the following issues: - Fix paths in sample conf and doc files; (boo#910112). - Cleanup systemd services file: + Removed exec flags from service file; (boo#910111). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-814 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): istgt-0.10-20121036.4.1 istgt-debuginfo-0.10-20121036.4.1 istgt-debugsource-0.10-20121036.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=910111 https://bugzilla.suse.com/show_bug.cgi?id=910112

1 0

openSUSE-SU-2014:1713-1: moderate: Security update for mailx
by opensuse-security＠opensuse.org 27 Dec '14

27 Dec '14

openSUSE Security Update: Security update for mailx ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1713-1 Rating: moderate References: #909208 Cross-References: CVE-2004-2771 CVE-2014-7844 Affected Products: openSUSE 13.2 openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This mailx update fixes the following security issue: bsc#909208: shell command injection via crafted email addresses (CVE-2004-2771, CVE-2014-7844) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-812 - openSUSE 13.1: zypper in -t patch openSUSE-2014-812 - openSUSE 12.3: zypper in -t patch openSUSE-2014-812 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): mailx-12.5-20.4.1 mailx-debuginfo-12.5-20.4.1 mailx-debugsource-12.5-20.4.1 - openSUSE 13.1 (i586 x86_64): mailx-12.5-14.4.1 mailx-debuginfo-12.5-14.4.1 mailx-debugsource-12.5-14.4.1 - openSUSE 12.3 (i586 x86_64): mailx-12.5-9.4.1 mailx-debuginfo-12.5-9.4.1 mailx-debugsource-12.5-9.4.1 References: http://support.novell.com/security/cve/CVE-2004-2771.html http://support.novell.com/security/cve/CVE-2014-7844.html https://bugzilla.suse.com/show_bug.cgi?id=909208

1 0

openSUSE-RU-2014:1712-1: istgt
by maintenance＠opensuse.org 27 Dec '14

27 Dec '14

openSUSE Recommended Update: istgt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1712-1 Rating: low References: #910112 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for istgt fixes the following issues: - Fix paths in sample conf and doc files (boo#910112) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-813 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): istgt-0.10-20121033.4.1 istgt-debuginfo-0.10-20121033.4.1 istgt-debugsource-0.10-20121033.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=910112

1 0

openSUSE-RU-2014:1711-1: yast2-firstboot
by maintenance＠opensuse.org 27 Dec '14

27 Dec '14

openSUSE Recommended Update: yast2-firstboot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1711-1 Rating: low References: #895359 #904527 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for yast2-firstboot fixes the following issues: - Update to version 3.1.5 - Added missing module for DHCP (bnc#895359, bnc#904527) - Fixed errors in keyboard and language configuration (bnc#904527) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-810 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): yast2-firstboot-3.1.5-4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=895359 https://bugzilla.suse.com/show_bug.cgi?id=904527

1 0

openSUSE-RU-2014:1709-1: seccheck
by maintenance＠opensuse.org 24 Dec '14

24 Dec '14

openSUSE Recommended Update: seccheck ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1709-1 Rating: low References: #864534 #904544 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for seccheck fixes the following issues: - bnc#904544: mentioned patches applied - refactoring: each security test, has its own helper - Update to Version 3.0 + refactored codebase + added new security tests - bnc#864534: Disable autologout as default - Added new autologout functionality Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-808 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): seccheck-3.0-680.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=864534 https://bugzilla.suse.com/show_bug.cgi?id=904544

1 0

openSUSE-RU-2014:1708-1: ImageMagick
by maintenance＠opensuse.org 24 Dec '14

24 Dec '14

openSUSE Recommended Update: ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1708-1 Rating: low References: #904545 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for ImageMagick fixes the following issues: - do not use -march/-mtune [bnc#904545] Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-804 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ImageMagick-6.8.9.8-12.1 ImageMagick-debuginfo-6.8.9.8-12.1 ImageMagick-debugsource-6.8.9.8-12.1 ImageMagick-devel-6.8.9.8-12.1 ImageMagick-extra-6.8.9.8-12.1 ImageMagick-extra-debuginfo-6.8.9.8-12.1 libMagick++-6_Q16-5-6.8.9.8-12.1 libMagick++-6_Q16-5-debuginfo-6.8.9.8-12.1 libMagick++-devel-6.8.9.8-12.1 libMagickCore-6_Q16-2-6.8.9.8-12.1 libMagickCore-6_Q16-2-debuginfo-6.8.9.8-12.1 libMagickWand-6_Q16-2-6.8.9.8-12.1 libMagickWand-6_Q16-2-debuginfo-6.8.9.8-12.1 perl-PerlMagick-6.8.9.8-12.1 perl-PerlMagick-debuginfo-6.8.9.8-12.1 - openSUSE 13.2 (x86_64): ImageMagick-devel-32bit-6.8.9.8-12.1 libMagick++-6_Q16-5-32bit-6.8.9.8-12.1 libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-12.1 libMagick++-devel-32bit-6.8.9.8-12.1 libMagickCore-6_Q16-2-32bit-6.8.9.8-12.1 libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-12.1 libMagickWand-6_Q16-2-32bit-6.8.9.8-12.1 libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-12.1 - openSUSE 13.2 (noarch): ImageMagick-doc-6.8.9.8-12.1 References: https://bugzilla.suse.com/show_bug.cgi?id=904545

1 0