December 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2014:1634-1: procps
by maintenance＠opensuse.org 15 Dec '14

15 Dec '14

openSUSE Recommended Update: procps ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1634-1 Rating: low References: #908516 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for procps fixes the following issue: - bsc#908516: Add patch to avoid leftover errno from setlocale() Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-767 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libprocps3-3.3.9-3.5.1 libprocps3-debuginfo-3.3.9-3.5.1 procps-3.3.9-3.5.1 procps-debuginfo-3.3.9-3.5.1 procps-debugsource-3.3.9-3.5.1 procps-devel-3.3.9-3.5.1 References: https://bugzilla.suse.com/show_bug.cgi?id=908516

1 0

openSUSE-RU-2014:1633-1: moderate: netcfg
by maintenance＠opensuse.org 15 Dec '14

15 Dec '14

openSUSE Recommended Update: netcfg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1633-1 Rating: moderate References: #858908 #887039 #899506 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This recommended update for netcfg fixes the following issues: - Redo the HOSTNAME -> hostname migration to support smallest possible step. Thus ensuring the migration is done just once and finished: # HOSTNAME migration supported scenarios [bnc#858908]: # /etc/HOSTNAME -> /etc/hostname content preservation. # If hostname and HOSTNAME both exist HOSTNAME wins. # Nothing apart from content of the document is preserved - Solves bnc#858908 and bnc#899506 while moves bnc#887039 to unsupported scenarios. - Remove the socket check from the defaultdomain checker as it was always false and thus not needed - Drop the scriptlet for the netgroup handling. It was caused by the aaa_base -> netcfg move Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-769 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): netcfg-11.5-24.5.1 References: https://bugzilla.suse.com/show_bug.cgi?id=858908 https://bugzilla.suse.com/show_bug.cgi?id=887039 https://bugzilla.suse.com/show_bug.cgi?id=899506

1 0

openSUSE-RU-2014:1632-1: moderate: xf86-video-intel
by maintenance＠opensuse.org 15 Dec '14

15 Dec '14

openSUSE Recommended Update: xf86-video-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1632-1 Rating: moderate References: #908323 #908326 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for xf86-video-intel fixes the following issues: - Disable DRI3 (boo#908323) - Fix SNA BLT on BDW/CHV (boo#908326) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-768 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xf86-video-intel-2.99.916-5.1 xf86-video-intel-debuginfo-2.99.916-5.1 xf86-video-intel-debugsource-2.99.916-5.1 - openSUSE 13.2 (x86_64): xf86-video-intel-32bit-2.99.916-5.1 xf86-video-intel-debuginfo-32bit-2.99.916-5.1 References: https://bugzilla.suse.com/show_bug.cgi?id=908323 https://bugzilla.suse.com/show_bug.cgi?id=908326

1 0

openSUSE-SU-2014:1629-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 12 Dec '14

12 Dec '14

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1629-1 Rating: important References: #909219 Cross-References: CVE-2014-0580 CVE-2014-0587 CVE-2014-8443 CVE-2014-9162 CVE-2014-9163 CVE-2014-9164 Affected Products: openSUSE 13.2:NonFree openSUSE 13.1:NonFree openSUSE 12.3:NonFree ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: flash-player received a security update to version to 11.2.202.425 (bsc#909219), which fixes: APSB14-27, CVE-2014-0580, CVE-2014-0587, CVE-2014-8443, CVE-2014-9162, CVE-2014-9163, CVE-2014-9164 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2:NonFree: zypper in -t patch openSUSE-2014-766 - openSUSE 13.1:NonFree: zypper in -t patch openSUSE-2014-766 - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2014-766 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2:NonFree (i586 x86_64): flash-player-11.2.202.425-2.17.1 flash-player-gnome-11.2.202.425-2.17.1 flash-player-kde4-11.2.202.425-2.17.1 - openSUSE 13.1:NonFree (i586 x86_64): flash-player-11.2.202.425-82.1 flash-player-gnome-11.2.202.425-82.1 flash-player-kde4-11.2.202.425-82.1 - openSUSE 12.3:NonFree (i586 x86_64): flash-player-11.2.202.425-2.108.1 flash-player-gnome-11.2.202.425-2.108.1 flash-player-kde4-11.2.202.425-2.108.1 References: http://support.novell.com/security/cve/CVE-2014-0580.html http://support.novell.com/security/cve/CVE-2014-0587.html http://support.novell.com/security/cve/CVE-2014-8443.html http://support.novell.com/security/cve/CVE-2014-9162.html http://support.novell.com/security/cve/CVE-2014-9163.html http://support.novell.com/security/cve/CVE-2014-9164.html https://bugzilla.suse.com/show_bug.cgi?id=909219

1 0

openSUSE-SU-2014:1626-1: important: Security update for chromium
by opensuse-security＠opensuse.org 12 Dec '14

12 Dec '14

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1626-1 Rating: important References: #906317 #906318 #906319 #906320 #906321 #906322 #906323 #906324 #906326 #906327 #906328 #906330 Cross-References: CVE-2014-0574 CVE-2014-7899 CVE-2014-7900 CVE-2014-7901 CVE-2014-7902 CVE-2014-7903 CVE-2014-7904 CVE-2014-7905 CVE-2014-7906 CVE-2014-7907 CVE-2014-7908 CVE-2014-7909 CVE-2014-7910 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: chromium was updated to version 39.0.2171.65 to fix 13 security issues. These security issues were fixed: - Use-after-free in pepper plugins (CVE-2014-7906). - Buffer overflow in OpenJPEG before r2911 in PDFium, as used in Google Chromebefore 39.0.2171.65, al... (CVE-2014-7903). - Uninitialized memory read in Skia (CVE-2014-7909). - Unspecified security issues (CVE-2014-7910). - Integer overflow in media (CVE-2014-7908). - Integer overflow in the opj_t2_read_packet_data function infxcodec/fx_libopenjpeg/libopenjpeg20/t2.... (CVE-2014-7901). - Use-after-free in blink (CVE-2014-7907). - Address bar spoofing (CVE-2014-7899). - Buffer overflow in Skia (CVE-2014-7904). - Use-after-free vulnerability in the CPDF_Parser (CVE-2014-7900). - Use-after-free vulnerability in PDFium allows DoS (CVE-2014-7902). - Flaw allowing navigation to intents that do not have the BROWSABLE category (CVE-2014-7905). - Double-free in Flash (CVE-2014-0574). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-764 - openSUSE 13.1: zypper in -t patch openSUSE-2014-764 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): chromedriver-39.0.2171.65-4.4 chromedriver-debuginfo-39.0.2171.65-4.4 chromium-39.0.2171.65-4.4 chromium-debuginfo-39.0.2171.65-4.4 chromium-debugsource-39.0.2171.65-4.4 chromium-desktop-gnome-39.0.2171.65-4.4 chromium-desktop-kde-39.0.2171.65-4.4 chromium-ffmpegsumo-39.0.2171.65-4.4 chromium-ffmpegsumo-debuginfo-39.0.2171.65-4.4 - openSUSE 13.1 (i586 x86_64): chromedriver-39.0.2171.65-58.4 chromedriver-debuginfo-39.0.2171.65-58.4 chromium-39.0.2171.65-58.4 chromium-debuginfo-39.0.2171.65-58.4 chromium-debugsource-39.0.2171.65-58.4 chromium-desktop-gnome-39.0.2171.65-58.4 chromium-desktop-kde-39.0.2171.65-58.4 chromium-ffmpegsumo-39.0.2171.65-58.4 chromium-ffmpegsumo-debuginfo-39.0.2171.65-58.4 References: http://support.novell.com/security/cve/CVE-2014-0574.html http://support.novell.com/security/cve/CVE-2014-7899.html http://support.novell.com/security/cve/CVE-2014-7900.html http://support.novell.com/security/cve/CVE-2014-7901.html http://support.novell.com/security/cve/CVE-2014-7902.html http://support.novell.com/security/cve/CVE-2014-7903.html http://support.novell.com/security/cve/CVE-2014-7904.html http://support.novell.com/security/cve/CVE-2014-7905.html http://support.novell.com/security/cve/CVE-2014-7906.html http://support.novell.com/security/cve/CVE-2014-7907.html http://support.novell.com/security/cve/CVE-2014-7908.html http://support.novell.com/security/cve/CVE-2014-7909.html http://support.novell.com/security/cve/CVE-2014-7910.html https://bugzilla.suse.com/show_bug.cgi?id=906317 https://bugzilla.suse.com/show_bug.cgi?id=906318 https://bugzilla.suse.com/show_bug.cgi?id=906319 https://bugzilla.suse.com/show_bug.cgi?id=906320 https://bugzilla.suse.com/show_bug.cgi?id=906321 https://bugzilla.suse.com/show_bug.cgi?id=906322 https://bugzilla.suse.com/show_bug.cgi?id=906323 https://bugzilla.suse.com/show_bug.cgi?id=906324 https://bugzilla.suse.com/show_bug.cgi?id=906326 https://bugzilla.suse.com/show_bug.cgi?id=906327 https://bugzilla.suse.com/show_bug.cgi?id=906328 https://bugzilla.suse.com/show_bug.cgi?id=906330

1 0

openSUSE-SU-2014:1625-1: moderate: Security update for libyaml
by opensuse-security＠opensuse.org 12 Dec '14

12 Dec '14

openSUSE Security Update: Security update for libyaml ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1625-1 Rating: moderate References: #907809 Cross-References: CVE-2014-9130 Affected Products: openSUSE 13.2 openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This libyaml update fixes the following security issue: - bnc#907809: assert failure when processing wrapped strings (CVE-2014-9130) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-765 - openSUSE 13.1: zypper in -t patch openSUSE-2014-765 - openSUSE 12.3: zypper in -t patch openSUSE-2014-765 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libyaml-0-2-0.1.6-2.4.1 libyaml-0-2-debuginfo-0.1.6-2.4.1 libyaml-debugsource-0.1.6-2.4.1 libyaml-devel-0.1.6-2.4.1 - openSUSE 13.1 (i586 x86_64): libyaml-0-2-0.1.4-2.16.1 libyaml-0-2-debuginfo-0.1.4-2.16.1 libyaml-debugsource-0.1.4-2.16.1 libyaml-devel-0.1.4-2.16.1 - openSUSE 12.3 (i586 x86_64): libyaml-0-2-0.1.3-11.16.1 libyaml-0-2-debuginfo-0.1.3-11.16.1 libyaml-debugsource-0.1.3-11.16.1 libyaml-devel-0.1.3-11.16.1 References: http://support.novell.com/security/cve/CVE-2014-9130.html https://bugzilla.suse.com/show_bug.cgi?id=907809

1 0

openSUSE-SU-2014:1622-1: critical: Security update for flash-player
by opensuse-security＠opensuse.org 11 Dec '14

11 Dec '14

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1622-1 Rating: critical References: Cross-References: CVE-2014-0580 CVE-2014-0587 CVE-2014-8443 CVE-2014-9162 CVE-2014-9163 CVE-2014-9164 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: Flash-player was updated to version 11.2.202.245 fixing numerous vulnerabilities: *memory corruption vulnerabilities that could lead to code execution (CVE-2014-0587, CVE-2014-9164). *use-after-free vulnerability that could lead to code execution (CVE-2014-8443). *stack-based buffer overflow vulnerability that could lead to code execution (CVE-2014-9163). *information disclosure vulnerability (CVE-2014-9162). *vulnerability that could be exploited to circumvent the same-origin policy (CVE-2014-0580). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2014-92 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): flash-player-11.2.202.425-135.1 flash-player-gnome-11.2.202.425-135.1 flash-player-kde4-11.2.202.425-135.1 References: http://support.novell.com/security/cve/CVE-2014-0580.html http://support.novell.com/security/cve/CVE-2014-0587.html http://support.novell.com/security/cve/CVE-2014-8443.html http://support.novell.com/security/cve/CVE-2014-9162.html http://support.novell.com/security/cve/CVE-2014-9163.html http://support.novell.com/security/cve/CVE-2014-9164.html

1 0

openSUSE-SU-2014:1621-1: important: fix server crash caused by malformed network packet.
by opensuse-security＠opensuse.org 11 Dec '14

11 Dec '14

openSUSE Security Update: fix server crash caused by malformed network packet. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1621-1 Rating: important References: #908127 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This patch contains a fix for Firebird server crashes when handling a malformed network packet. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2014-93 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): firebird-2.1.3.18185.0-20.1 firebird-classic-2.1.3.18185.0-20.1 firebird-classic-debuginfo-2.1.3.18185.0-20.1 firebird-debuginfo-2.1.3.18185.0-20.1 firebird-debugsource-2.1.3.18185.0-20.1 firebird-devel-2.1.3.18185.0-20.1 firebird-devel-debuginfo-2.1.3.18185.0-20.1 firebird-doc-2.1.3.18185.0-20.1 firebird-filesystem-2.1.3.18185.0-20.1 firebird-superserver-2.1.3.18185.0-20.1 firebird-superserver-debuginfo-2.1.3.18185.0-20.1 libfbclient2-2.1.3.18185.0-20.1 libfbclient2-debuginfo-2.1.3.18185.0-20.1 libfbembed2-2.1.3.18185.0-20.1 libfbembed2-debuginfo-2.1.3.18185.0-20.1 References: https://bugzilla.suse.com/show_bug.cgi?id=908127

1 0

openSUSE-RU-2014:1618-1: yast2-services-manager
by maintenance＠opensuse.org 11 Dec '14

11 Dec '14

openSUSE Recommended Update: yast2-services-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1618-1 Rating: low References: #893622 #895023 #906730 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This recommended update for yast2-services-manager fixes the following issues: - Fixes adjusting service state according to new settings, already loaded services were ignored (bnc#906730) - Update to version 3.1.34.1 - Fixes installation to use the localized version of the default target name (bnc#895023). - Added minimal commandline support: just 'help' (bnc#893622) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2014-762 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): yast2-services-manager-3.1.34.1-4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=893622 https://bugzilla.suse.com/show_bug.cgi?id=895023 https://bugzilla.suse.com/show_bug.cgi?id=906730

1 0

openSUSE-RU-2014:1617-1: quota
by maintenance＠opensuse.org 11 Dec '14

11 Dec '14

openSUSE Recommended Update: quota ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1617-1 Rating: low References: #817891 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for quote fixes the following issues: - Version update to 4.01 - Fixes bnc#817891 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2014-761 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): quota-4.01-26.5.1 quota-debuginfo-4.01-26.5.1 quota-debugsource-4.01-26.5.1 quota-nfs-4.01-26.5.1 quota-nfs-debuginfo-4.01-26.5.1 References: https://bugzilla.suse.com/show_bug.cgi?id=817891

1 0