February 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2014:0253-1: obs-service-set_version: Update to version 0.3.1
by maintenance＠opensuse.org 18 Feb '14

18 Feb '14

openSUSE Recommended Update: obs-service-set_version: Update to version 0.3.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0253-1 Rating: low References: Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issues with obs-service-set_version: - Update to version 0.3.1: + Check tarball content's root-dir for version + Use a for-loop for different endings - Move service to github.com/openSUSE/obs-service-set_version - Add _service file to update package from there - Drop local sources and use tarball from source services - some other minor-fixes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-141 - openSUSE 12.3: zypper in -t patch openSUSE-2014-141 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): obs-service-set_version-0.3.1-4.1 - openSUSE 12.3 (noarch): obs-service-set_version-0.3.1-5.4.1 References:

1 0

openSUSE-RU-2014:0252-1: xfig: Update to 3.2.5c
by maintenance＠opensuse.org 18 Feb '14

18 Feb '14

openSUSE Recommended Update: xfig: Update to 3.2.5c ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0252-1 Rating: low References: #860322 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with xfig: - Update to 3.2.5c + bnc#860322: fix Xfig crash on dash-dotted lines + Modify Imakefile to support new libXaw3d-1.6.2 + Updated tarball Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-138 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): xfig-3.2.5c-29.4.1 xfig-debuginfo-3.2.5c-29.4.1 xfig-debugsource-3.2.5c-29.4.1 References: https://bugzilla.novell.com/860322

1 0

openSUSE-RU-2014:0251-1: important: seamonkey: replaced locale source archive because the old one was broken by wrong upstream tagging
by maintenance＠opensuse.org 18 Feb '14

18 Feb '14

openSUSE Recommended Update: seamonkey: replaced locale source archive because the old one was broken by wrong upstream tagging ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0251-1 Rating: important References: #862831 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with seamonkey: - bnc#862831: replaced locale source archive because the old one was broken by wrong upstream tagging Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-140 - openSUSE 12.3: zypper in -t patch openSUSE-2014-140 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): seamonkey-2.24-12.1 seamonkey-debuginfo-2.24-12.1 seamonkey-debugsource-2.24-12.1 seamonkey-dom-inspector-2.24-12.1 seamonkey-irc-2.24-12.1 seamonkey-translations-common-2.24-12.1 seamonkey-translations-other-2.24-12.1 seamonkey-venkman-2.24-12.1 - openSUSE 12.3 (i586 x86_64): seamonkey-2.24-1.37.1 seamonkey-debuginfo-2.24-1.37.1 seamonkey-debugsource-2.24-1.37.1 seamonkey-dom-inspector-2.24-1.37.1 seamonkey-irc-2.24-1.37.1 seamonkey-translations-common-2.24-1.37.1 seamonkey-translations-other-2.24-1.37.1 seamonkey-venkman-2.24-1.37.1 References: https://bugzilla.novell.com/862831

1 0

openSUSE-RU-2014:0250-1: moderate: urfkill: support logind and nfc to avoid crash at startup
by maintenance＠opensuse.org 18 Feb '14

18 Feb '14

openSUSE Recommended Update: urfkill: support logind and nfc to avoid crash at startup ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0250-1 Rating: moderate References: #853492 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with urfkill: - bnc#853492: support logind and nfc to avoid the crash at startup, backported from upstream Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-139 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): liburfkill-glib-devel-0.4.0-7.4.1 liburfkill-glib0-0.4.0-7.4.1 liburfkill-glib0-debuginfo-0.4.0-7.4.1 typelib-1_0-Urfkill-0_0-0.4.0-7.4.1 urfkill-0.4.0-7.4.1 urfkill-debuginfo-0.4.0-7.4.1 urfkill-debugsource-0.4.0-7.4.1 References: https://bugzilla.novell.com/853492

1 0

openSUSE-RU-2014:0249-1: moderate: openssl update to version 1.0.1
by maintenance＠opensuse.org 18 Feb '14

18 Feb '14

openSUSE Recommended Update: openssl update to version 1.0.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0249-1 Rating: moderate References: #670526 #720601 #784994 #793420 #802184 #803004 #849377 #856687 #857203 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves four vulnerabilities and has 5 fixes is now available. Description: This update lifts the openssl library to version 1.0.1 which contains new features such as protocol support for TLSv1.1 and TLSv1.2 and more improvements. The patch also contains a rebuild of openssh to reflect the version change dependency (actually a bug in openssh to consider the version). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-17 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libopenssl-devel-1.0.1e-53.1 libopenssl1_0_0-1.0.1e-53.1 libopenssl1_0_0-debuginfo-1.0.1e-53.1 openssh-5.8p1-7.2 openssh-askpass-5.8p1-7.2 openssh-askpass-debuginfo-5.8p1-7.2 openssh-askpass-gnome-5.8p1-7.1 openssh-askpass-gnome-debuginfo-5.8p1-7.1 openssh-debuginfo-5.8p1-7.2 openssh-debugsource-5.8p1-7.2 openssl-1.0.1e-53.1 openssl-debuginfo-1.0.1e-53.1 openssl-debugsource-1.0.1e-53.1 - openSUSE 11.4 (x86_64): libopenssl-devel-32bit-1.0.1e-53.1 libopenssl1_0_0-32bit-1.0.1e-53.1 libopenssl1_0_0-debuginfo-32bit-1.0.1e-53.1 - openSUSE 11.4 (noarch): openssl-doc-1.0.1e-53.1 - openSUSE 11.4 (ia64): libopenssl1_0_0-debuginfo-x86-1.0.1e-53.1 libopenssl1_0_0-x86-1.0.1e-53.1 References: http://support.novell.com/security/cve/CVE-2011-0014.html http://support.novell.com/security/cve/CVE-2012-4929.html http://support.novell.com/security/cve/CVE-2013-6449.html http://support.novell.com/security/cve/CVE-2013-6450.html https://bugzilla.novell.com/670526 https://bugzilla.novell.com/720601 https://bugzilla.novell.com/784994 https://bugzilla.novell.com/793420 https://bugzilla.novell.com/802184 https://bugzilla.novell.com/803004 https://bugzilla.novell.com/849377 https://bugzilla.novell.com/856687 https://bugzilla.novell.com/857203

1 0

openSUSE-SU-2014:0247-1: moderate: kernel update
by opensuse-security＠opensuse.org 18 Feb '14

18 Feb '14

openSUSE Security Update: kernel update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0247-1 Rating: moderate References: #610783 #708296 #769644 #787843 #789359 #798050 #798466 #806988 #807434 #810323 #813245 #818545 #819979 #820102 #820338 #821980 #823618 #825696 #825896 #826602 #826756 #827767 #828236 #831168 #834473 #834708 #834808 #835074 #835186 #836718 #837739 #838623 #839407 #840226 #841445 #842239 #843419 #843429 #843445 #843642 #843645 #845621 #845729 #846036 #846984 #847261 #848321 #848336 #848544 #848652 #849021 #849029 #849034 #849404 #849675 #849809 #849848 #849950 #850640 #851066 #851314 #852373 #852558 #852559 #852624 #853050 #853051 #853052 #854546 #854634 #854722 #855037 #858831 Cross-References: CVE-2013-4483 CVE-2013-4511 CVE-2013-4514 CVE-2013-4515 CVE-2013-4587 CVE-2013-4592 CVE-2013-6367 CVE-2013-6368 CVE-2013-6378 CVE-2013-6380 CVE-2013-7027 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves 11 vulnerabilities and has 62 fixes is now available. Description: kernel update for Evergreen 11.4 - hotfix for bnc#858831 (possible crash on boot on certain systems) and including fixes for a lot of other issues Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-18 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): kernel-debug-3.0.101-79.1 kernel-debug-base-3.0.101-79.1 kernel-debug-base-debuginfo-3.0.101-79.1 kernel-debug-debuginfo-3.0.101-79.1 kernel-debug-debugsource-3.0.101-79.1 kernel-debug-devel-3.0.101-79.1 kernel-debug-devel-debuginfo-3.0.101-79.1 kernel-debug-hmac-3.0.101-79.1 kernel-default-3.0.101-79.1 kernel-default-base-3.0.101-79.1 kernel-default-base-debuginfo-3.0.101-79.1 kernel-default-debuginfo-3.0.101-79.1 kernel-default-debugsource-3.0.101-79.1 kernel-default-devel-3.0.101-79.1 kernel-default-devel-debuginfo-3.0.101-79.1 kernel-default-hmac-3.0.101-79.1 kernel-desktop-3.0.101-79.1 kernel-desktop-base-3.0.101-79.1 kernel-desktop-base-debuginfo-3.0.101-79.1 kernel-desktop-debuginfo-3.0.101-79.1 kernel-desktop-debugsource-3.0.101-79.1 kernel-desktop-devel-3.0.101-79.1 kernel-desktop-devel-debuginfo-3.0.101-79.1 kernel-desktop-hmac-3.0.101-79.1 kernel-ec2-3.0.101-79.1 kernel-ec2-base-3.0.101-79.1 kernel-ec2-base-debuginfo-3.0.101-79.1 kernel-ec2-debuginfo-3.0.101-79.1 kernel-ec2-debugsource-3.0.101-79.1 kernel-ec2-devel-3.0.101-79.1 kernel-ec2-devel-debuginfo-3.0.101-79.1 kernel-ec2-extra-3.0.101-79.1 kernel-ec2-extra-debuginfo-3.0.101-79.1 kernel-ec2-hmac-3.0.101-79.1 kernel-source-3.0.101-79.1 kernel-source-vanilla-3.0.101-79.1 kernel-syms-3.0.101-79.1 kernel-trace-3.0.101-79.1 kernel-trace-base-3.0.101-79.1 kernel-trace-base-debuginfo-3.0.101-79.1 kernel-trace-debuginfo-3.0.101-79.1 kernel-trace-debugsource-3.0.101-79.1 kernel-trace-devel-3.0.101-79.1 kernel-trace-devel-debuginfo-3.0.101-79.1 kernel-trace-hmac-3.0.101-79.1 kernel-vanilla-3.0.101-79.1 kernel-vanilla-base-3.0.101-79.1 kernel-vanilla-base-debuginfo-3.0.101-79.1 kernel-vanilla-debuginfo-3.0.101-79.1 kernel-vanilla-debugsource-3.0.101-79.1 kernel-vanilla-devel-3.0.101-79.1 kernel-vanilla-devel-debuginfo-3.0.101-79.1 kernel-vanilla-hmac-3.0.101-79.1 kernel-xen-3.0.101-79.1 kernel-xen-base-3.0.101-79.1 kernel-xen-base-debuginfo-3.0.101-79.1 kernel-xen-debuginfo-3.0.101-79.1 kernel-xen-debugsource-3.0.101-79.1 kernel-xen-devel-3.0.101-79.1 kernel-xen-devel-debuginfo-3.0.101-79.1 kernel-xen-hmac-3.0.101-79.1 preload-1.2-6.57.2 preload-debuginfo-1.2-6.57.2 preload-debugsource-1.2-6.57.2 preload-kmp-default-1.2_3.0.101_79-6.57.2 preload-kmp-default-debuginfo-1.2_3.0.101_79-6.57.2 preload-kmp-desktop-1.2_3.0.101_79-6.57.2 preload-kmp-desktop-debuginfo-1.2_3.0.101_79-6.57.2 - openSUSE 11.4 (noarch): kernel-docs-3.0.101-79.2 - openSUSE 11.4 (i586): kernel-pae-3.0.101-79.1 kernel-pae-base-3.0.101-79.1 kernel-pae-base-debuginfo-3.0.101-79.1 kernel-pae-debuginfo-3.0.101-79.1 kernel-pae-debugsource-3.0.101-79.1 kernel-pae-devel-3.0.101-79.1 kernel-pae-devel-debuginfo-3.0.101-79.1 kernel-pae-hmac-3.0.101-79.1 kernel-vmi-3.0.101-79.1 kernel-vmi-base-3.0.101-79.1 kernel-vmi-base-debuginfo-3.0.101-79.1 kernel-vmi-debuginfo-3.0.101-79.1 kernel-vmi-debugsource-3.0.101-79.1 kernel-vmi-devel-3.0.101-79.1 kernel-vmi-devel-debuginfo-3.0.101-79.1 kernel-vmi-hmac-3.0.101-79.1 References: http://support.novell.com/security/cve/CVE-2013-4483.html http://support.novell.com/security/cve/CVE-2013-4511.html http://support.novell.com/security/cve/CVE-2013-4514.html http://support.novell.com/security/cve/CVE-2013-4515.html http://support.novell.com/security/cve/CVE-2013-4587.html http://support.novell.com/security/cve/CVE-2013-4592.html http://support.novell.com/security/cve/CVE-2013-6367.html http://support.novell.com/security/cve/CVE-2013-6368.html http://support.novell.com/security/cve/CVE-2013-6378.html http://support.novell.com/security/cve/CVE-2013-6380.html http://support.novell.com/security/cve/CVE-2013-7027.html https://bugzilla.novell.com/610783 https://bugzilla.novell.com/708296 https://bugzilla.novell.com/769644 https://bugzilla.novell.com/787843 https://bugzilla.novell.com/789359 https://bugzilla.novell.com/798050 https://bugzilla.novell.com/798466 https://bugzilla.novell.com/806988 https://bugzilla.novell.com/807434 https://bugzilla.novell.com/810323 https://bugzilla.novell.com/813245 https://bugzilla.novell.com/818545 https://bugzilla.novell.com/819979 https://bugzilla.novell.com/820102 https://bugzilla.novell.com/820338 https://bugzilla.novell.com/821980 https://bugzilla.novell.com/823618 https://bugzilla.novell.com/825696 https://bugzilla.novell.com/825896 https://bugzilla.novell.com/826602 https://bugzilla.novell.com/826756 https://bugzilla.novell.com/827767 https://bugzilla.novell.com/828236 https://bugzilla.novell.com/831168 https://bugzilla.novell.com/834473 https://bugzilla.novell.com/834708 https://bugzilla.novell.com/834808 https://bugzilla.novell.com/835074 https://bugzilla.novell.com/835186 https://bugzilla.novell.com/836718 https://bugzilla.novell.com/837739 https://bugzilla.novell.com/838623 https://bugzilla.novell.com/839407 https://bugzilla.novell.com/840226 https://bugzilla.novell.com/841445 https://bugzilla.novell.com/842239 https://bugzilla.novell.com/843419 https://bugzilla.novell.com/843429 https://bugzilla.novell.com/843445 https://bugzilla.novell.com/843642 https://bugzilla.novell.com/843645 https://bugzilla.novell.com/845621 https://bugzilla.novell.com/845729 https://bugzilla.novell.com/846036 https://bugzilla.novell.com/846984 https://bugzilla.novell.com/847261 https://bugzilla.novell.com/848321 https://bugzilla.novell.com/848336 https://bugzilla.novell.com/848544 https://bugzilla.novell.com/848652 https://bugzilla.novell.com/849021 https://bugzilla.novell.com/849029 https://bugzilla.novell.com/849034 https://bugzilla.novell.com/849404 https://bugzilla.novell.com/849675 https://bugzilla.novell.com/849809 https://bugzilla.novell.com/849848 https://bugzilla.novell.com/849950 https://bugzilla.novell.com/850640 https://bugzilla.novell.com/851066 https://bugzilla.novell.com/851314 https://bugzilla.novell.com/852373 https://bugzilla.novell.com/852558 https://bugzilla.novell.com/852559 https://bugzilla.novell.com/852624 https://bugzilla.novell.com/853050 https://bugzilla.novell.com/853051 https://bugzilla.novell.com/853052 https://bugzilla.novell.com/854546 https://bugzilla.novell.com/854634 https://bugzilla.novell.com/854722 https://bugzilla.novell.com/855037 https://bugzilla.novell.com/858831

1 0

openSUSE-SU-2014:0245-1: moderate: update for xtrabackup
by opensuse-security＠opensuse.org 18 Feb '14

18 Feb '14

openSUSE Security Update: update for xtrabackup ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0245-1 Rating: moderate References: #852224 #860488 Cross-References: CVE-2013-6394 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update fixes the following security and non-security issues with xtrabackup: - update to 2.1.7 [bnc#860488] - general changes: * rebased on MySQL versions 5.5.35 and 5.6.15 * now uses libgcrypt randomization functions for setting the IV [lp#1255300] [bnc#852224] CVE-2013-6394 - bugs fixed: * After being rebased on MySQL 5.6.11 Percona XtraBackup has been affected by the upstream bug #69780 (backward compatibility for InnoDB recovery) [lp#1203669] * Backup directory would need to be specified even for running the innobackupex with --help and --version options. [lp#1223716] - bugs fixed specific to MySQL 5.6: * xtrabackpu did not roll back prepared XA transactions when applying the log. [lp#1254227] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-137 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): xtrabackup-2.1.7-9.1 xtrabackup-debuginfo-2.1.7-9.1 xtrabackup-debugsource-2.1.7-9.1 References: http://support.novell.com/security/cve/CVE-2013-6394.html https://bugzilla.novell.com/852224 https://bugzilla.novell.com/860488

1 0

openSUSE-SU-2014:0244-1: moderate: opera was updated to 12.16
by opensuse-security＠opensuse.org 18 Feb '14

18 Feb '14

openSUSE Security Update: opera was updated to 12.16 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0244-1 Rating: moderate References: #832559 Affected Products: openSUSE 13.1:NonFree ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Opera was upgraded to 12.16 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1:NonFree: zypper in -t patch openSUSE-2014-136 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1:NonFree (i586 x86_64): opera-12.16-2.4.1 opera-gtk-12.16-2.4.1 opera-kde4-12.16-2.4.1 References: https://bugzilla.novell.com/832559

1 0

openSUSE-SU-2014:0243-1: important: chromium to 32.0.1700.102
by opensuse-security＠opensuse.org 18 Feb '14

18 Feb '14

openSUSE Security Update: chromium to 32.0.1700.102 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0243-1 Rating: important References: #861013 Cross-References: CVE-2013-6641 CVE-2013-6643 CVE-2013-6644 CVE-2013-6645 CVE-2013-6646 CVE-2013-6649 CVE-2013-6650 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Chromium was updated to version 32.0.1700.102: Stable channel update: - Security Fixes: * CVE-2013-6649: Use-after-free in SVG images * CVE-2013-6650: Memory corruption in V8 * and 12 other fixes - Other: * Mouse Pointer disappears after exiting full-screen mode * Drag and drop files into Chromium may not work properly * Quicktime Plugin crashes in Chromium * Chromium becomes unresponsive * Trackpad users may not be able to scroll horizontally * Scrolling does not work in combo box * Chromium does not work with all CSS minifiers such as whitespace around a media query's `and` keyword - Update to Chromium 32.0.1700.77 Stable channel update: - Security fixes: * CVE-2013-6646: Use-after-free in web workers * CVE-2013-6641: Use-after-free related to forms * CVE-2013-6643: Unprompted sync with an attacker’s Google account * CVE-2013-6645: Use-after-free related to speech input elements * CVE-2013-6644: Various fixes from internal audits, fuzzing and other initiatives - Other: * Tab indicators for sound, webcam and casting * Automatically blocking malware files * Lots of under the hood changes for stability and performance - Remove patch chromium-fix-chromedriver-build.diff as that chromedriver is fixed upstream - Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le. This is based on missing build requires (valgrind, v8, etc) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-135 - openSUSE 12.3: zypper in -t patch openSUSE-2014-135 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): chromedriver-32.0.1700.102-17.2 chromedriver-debuginfo-32.0.1700.102-17.2 chromium-32.0.1700.102-17.2 chromium-debuginfo-32.0.1700.102-17.2 chromium-debugsource-32.0.1700.102-17.2 chromium-desktop-gnome-32.0.1700.102-17.2 chromium-desktop-kde-32.0.1700.102-17.2 chromium-ffmpegsumo-32.0.1700.102-17.2 chromium-ffmpegsumo-debuginfo-32.0.1700.102-17.2 chromium-suid-helper-32.0.1700.102-17.2 chromium-suid-helper-debuginfo-32.0.1700.102-17.2 - openSUSE 12.3 (i586 x86_64): chromedriver-32.0.1700.102-1.25.2 chromedriver-debuginfo-32.0.1700.102-1.25.2 chromium-32.0.1700.102-1.25.2 chromium-debuginfo-32.0.1700.102-1.25.2 chromium-debugsource-32.0.1700.102-1.25.2 chromium-desktop-gnome-32.0.1700.102-1.25.2 chromium-desktop-kde-32.0.1700.102-1.25.2 chromium-ffmpegsumo-32.0.1700.102-1.25.2 chromium-ffmpegsumo-debuginfo-32.0.1700.102-1.25.2 chromium-suid-helper-32.0.1700.102-1.25.2 chromium-suid-helper-debuginfo-32.0.1700.102-1.25.2 References: http://support.novell.com/security/cve/CVE-2013-6641.html http://support.novell.com/security/cve/CVE-2013-6643.html http://support.novell.com/security/cve/CVE-2013-6644.html http://support.novell.com/security/cve/CVE-2013-6645.html http://support.novell.com/security/cve/CVE-2013-6646.html http://support.novell.com/security/cve/CVE-2013-6649.html http://support.novell.com/security/cve/CVE-2013-6650.html https://bugzilla.novell.com/861013

1 0

openSUSE-RU-2014:0241-1: libserf: update to Serf 1.3.4
by maintenance＠opensuse.org 17 Feb '14

17 Feb '14

openSUSE Recommended Update: libserf: update to Serf 1.3.4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0241-1 Rating: low References: #862983 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with libserf: - bnc#862983: update to Serf 1.3.4 This release fixes a race condition during OpenSSL initialisation and two ssl tunnel setup failures * Endless loop during ssl tunnel setup with Negotiate authn * Can't setup ssl tunnel which sends Connection close header * race condition when initializing OpenSSL from multiple threads * Incorrect pkg-config file when GSSAPI isn't configured - also includes changes from 1.3.3 This is a small patch release containing a fix to solve a problem connecting to multi-homed servers (e.g. ipv4/ipv6) and some improvements in the use of error codes during ssl certificate validation and handling of timed out connections. * Try more addresses of multihomed servers * Handle X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE correctly * Return APR_TIMEUP from poll() to enable detecting connection timeouts Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-133 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libserf-1-1-1.3.4-4.1 libserf-1-1-debuginfo-1.3.4-4.1 libserf-debugsource-1.3.4-4.1 libserf-devel-1.3.4-4.1 References: https://bugzilla.novell.com/862983

1 0