February 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2014:0268-1: moderate: update for libvirt
by opensuse-security＠opensuse.org 21 Feb '14

21 Feb '14

openSUSE Security Update: update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0268-1 Rating: moderate References: #817407 #857271 #857492 #858817 #858824 #859041 #859051 Cross-References: CVE-2013-6457 CVE-2013-6458 CVE-2014-0028 CVE-2014-1447 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves four vulnerabilities and has three fixes is now available. Description: This update fixes the following security and non security issues with libvirt: - bnc#857492: Fix libvirtd crash when hot-plugging disks for qemu domains (CVE-2013-6458) - bnc#858817: Don't crash if a connection closes early (CVE-2014-1447) - bnc#858824: avoid crashing libvirtd when calling `virsh numatune' on inactive Xen libxl domain (CVE-2013-6457) - bnc#859051: filter global events by domain:getattr ACL (CVE-2014-0028) - bnc#817407: Add CAP_SYS_PACCT capability to libvirtd AppArmor profile - bnc#859041: Following the upstream pattern, introduce the daemon-config-network subpackage to handle defining the default network - bnc#857271: Fix initialization of emulated NICs - bnc#857271: Fix potential segfault in libxl driver when domain create fails Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-154 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libvirt-1.1.2-2.18.3 libvirt-client-1.1.2-2.18.3 libvirt-client-debuginfo-1.1.2-2.18.3 libvirt-daemon-1.1.2-2.18.3 libvirt-daemon-config-network-1.1.2-2.18.3 libvirt-daemon-config-nwfilter-1.1.2-2.18.3 libvirt-daemon-debuginfo-1.1.2-2.18.3 libvirt-daemon-driver-interface-1.1.2-2.18.3 libvirt-daemon-driver-interface-debuginfo-1.1.2-2.18.3 libvirt-daemon-driver-lxc-1.1.2-2.18.3 libvirt-daemon-driver-lxc-debuginfo-1.1.2-2.18.3 libvirt-daemon-driver-network-1.1.2-2.18.3 libvirt-daemon-driver-network-debuginfo-1.1.2-2.18.3 libvirt-daemon-driver-nodedev-1.1.2-2.18.3 libvirt-daemon-driver-nodedev-debuginfo-1.1.2-2.18.3 libvirt-daemon-driver-nwfilter-1.1.2-2.18.3 libvirt-daemon-driver-nwfilter-debuginfo-1.1.2-2.18.3 libvirt-daemon-driver-qemu-1.1.2-2.18.3 libvirt-daemon-driver-qemu-debuginfo-1.1.2-2.18.3 libvirt-daemon-driver-secret-1.1.2-2.18.3 libvirt-daemon-driver-secret-debuginfo-1.1.2-2.18.3 libvirt-daemon-driver-storage-1.1.2-2.18.3 libvirt-daemon-driver-storage-debuginfo-1.1.2-2.18.3 libvirt-daemon-driver-uml-1.1.2-2.18.3 libvirt-daemon-driver-uml-debuginfo-1.1.2-2.18.3 libvirt-daemon-driver-vbox-1.1.2-2.18.3 libvirt-daemon-driver-vbox-debuginfo-1.1.2-2.18.3 libvirt-daemon-lxc-1.1.2-2.18.3 libvirt-daemon-qemu-1.1.2-2.18.3 libvirt-daemon-uml-1.1.2-2.18.3 libvirt-daemon-vbox-1.1.2-2.18.3 libvirt-debugsource-1.1.2-2.18.3 libvirt-devel-1.1.2-2.18.3 libvirt-doc-1.1.2-2.18.3 libvirt-lock-sanlock-1.1.2-2.18.3 libvirt-lock-sanlock-debuginfo-1.1.2-2.18.3 libvirt-login-shell-1.1.2-2.18.3 libvirt-login-shell-debuginfo-1.1.2-2.18.3 libvirt-python-1.1.2-2.18.3 libvirt-python-debuginfo-1.1.2-2.18.3 - openSUSE 13.1 (x86_64): libvirt-client-32bit-1.1.2-2.18.3 libvirt-client-debuginfo-32bit-1.1.2-2.18.3 libvirt-daemon-driver-libxl-1.1.2-2.18.3 libvirt-daemon-driver-libxl-debuginfo-1.1.2-2.18.3 libvirt-daemon-driver-xen-1.1.2-2.18.3 libvirt-daemon-driver-xen-debuginfo-1.1.2-2.18.3 libvirt-daemon-xen-1.1.2-2.18.3 libvirt-devel-32bit-1.1.2-2.18.3 References: http://support.novell.com/security/cve/CVE-2013-6457.html http://support.novell.com/security/cve/CVE-2013-6458.html http://support.novell.com/security/cve/CVE-2014-0028.html http://support.novell.com/security/cve/CVE-2014-1447.html https://bugzilla.novell.com/817407 https://bugzilla.novell.com/857271 https://bugzilla.novell.com/857492 https://bugzilla.novell.com/858817 https://bugzilla.novell.com/858824 https://bugzilla.novell.com/859041 https://bugzilla.novell.com/859051

1 0

openSUSE-SU-2014:0267-1:
by opensuse-security＠opensuse.org 21 Feb '14

21 Feb '14

openSUSE Security Update: ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0267-1 Rating: low References: #858673 #862144 Cross-References: CVE-2014-0015 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: No description available. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-149 - openSUSE 12.3: zypper in -t patch openSUSE-2014-149 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): curl-7.32.0-2.8.1 curl-debuginfo-7.32.0-2.8.1 curl-debugsource-7.32.0-2.8.1 libcurl-devel-7.32.0-2.8.1 libcurl4-7.32.0-2.8.1 libcurl4-debuginfo-7.32.0-2.8.1 - openSUSE 13.1 (x86_64): libcurl4-32bit-7.32.0-2.8.1 libcurl4-debuginfo-32bit-7.32.0-2.8.1 - openSUSE 12.3 (i586 x86_64): curl-7.28.1-4.25.1 curl-debuginfo-7.28.1-4.25.1 curl-debugsource-7.28.1-4.25.1 libcurl-devel-7.28.1-4.25.1 libcurl4-7.28.1-4.25.1 libcurl4-debuginfo-7.28.1-4.25.1 - openSUSE 12.3 (x86_64): libcurl4-32bit-7.28.1-4.25.1 libcurl4-debuginfo-32bit-7.28.1-4.25.1 References: http://support.novell.com/security/cve/CVE-2014-0015.html https://bugzilla.novell.com/858673 https://bugzilla.novell.com/862144

1 0

openSUSE-RU-2014:0263-1: moderate: gvfs: Fix file browser hangs while copying from a Samba share
by maintenance＠opensuse.org 20 Feb '14

20 Feb '14

openSUSE Recommended Update: gvfs: Fix file browser hangs while copying from a Samba share ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0263-1 Rating: moderate References: #860882 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with gvfs: - bnc#860882, bgo#697782: Fix hangs in Nautilus and Thunar that could occur when copying files from a Samba share Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2014-146 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): gvfs-1.14.2-2.4.1 gvfs-backend-afc-1.14.2-2.4.1 gvfs-backend-afc-debuginfo-1.14.2-2.4.1 gvfs-backends-1.14.2-2.4.1 gvfs-backends-debuginfo-1.14.2-2.4.1 gvfs-debuginfo-1.14.2-2.4.1 gvfs-debugsource-1.14.2-2.4.1 gvfs-devel-1.14.2-2.4.1 gvfs-fuse-1.14.2-2.4.1 gvfs-fuse-debuginfo-1.14.2-2.4.1 libgvfscommon0-1.14.2-2.4.1 libgvfscommon0-debuginfo-1.14.2-2.4.1 - openSUSE 12.3 (x86_64): gvfs-32bit-1.14.2-2.4.1 gvfs-debuginfo-32bit-1.14.2-2.4.1 libgvfscommon0-32bit-1.14.2-2.4.1 libgvfscommon0-debuginfo-32bit-1.14.2-2.4.1 - openSUSE 12.3 (noarch): gvfs-lang-1.14.2-2.4.1 References: https://bugzilla.novell.com/860882

1 0

openSUSE-RU-2014:0262-1: moderate: bind: Fix generation of /etc/named.conf.include
by maintenance＠opensuse.org 20 Feb '14

20 Feb '14

openSUSE Recommended Update: bind: Fix generation of /etc/named.conf.include ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0262-1 Rating: moderate References: #814978 #828678 #848777 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update fixes the following issue with bind: - bnc#828678, bnc#848777, bnc#814978: Fix generation of /etc/named.conf.include Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-147 - openSUSE 12.3: zypper in -t patch openSUSE-2014-147 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): bind-9.9.4P2-2.8.1 bind-chrootenv-9.9.4P2-2.8.1 bind-debuginfo-9.9.4P2-2.8.1 bind-debugsource-9.9.4P2-2.8.1 bind-devel-9.9.4P2-2.8.1 bind-libs-9.9.4P2-2.8.1 bind-libs-debuginfo-9.9.4P2-2.8.1 bind-lwresd-9.9.4P2-2.8.1 bind-lwresd-debuginfo-9.9.4P2-2.8.1 bind-utils-9.9.4P2-2.8.1 bind-utils-debuginfo-9.9.4P2-2.8.1 - openSUSE 13.1 (x86_64): bind-libs-32bit-9.9.4P2-2.8.1 bind-libs-debuginfo-32bit-9.9.4P2-2.8.1 - openSUSE 13.1 (noarch): bind-doc-9.9.4P2-2.8.1 - openSUSE 12.3 (i586 x86_64): bind-9.9.4P2-2.15.1 bind-chrootenv-9.9.4P2-2.15.1 bind-debuginfo-9.9.4P2-2.15.1 bind-debugsource-9.9.4P2-2.15.1 bind-devel-9.9.4P2-2.15.1 bind-libs-9.9.4P2-2.15.1 bind-libs-debuginfo-9.9.4P2-2.15.1 bind-lwresd-9.9.4P2-2.15.1 bind-lwresd-debuginfo-9.9.4P2-2.15.1 bind-utils-9.9.4P2-2.15.1 bind-utils-debuginfo-9.9.4P2-2.15.1 - openSUSE 12.3 (x86_64): bind-libs-32bit-9.9.4P2-2.15.1 bind-libs-debuginfo-32bit-9.9.4P2-2.15.1 - openSUSE 12.3 (noarch): bind-doc-9.9.4P2-2.15.1 References: https://bugzilla.novell.com/814978 https://bugzilla.novell.com/828678 https://bugzilla.novell.com/848777

1 0

openSUSE-RU-2014:0261-1: xf86-input-vmmouse: Revert iopl() format that broke vmmouse on QEMU/KVM
by maintenance＠opensuse.org 20 Feb '14

20 Feb '14

openSUSE Recommended Update: xf86-input-vmmouse: Revert iopl() format that broke vmmouse on QEMU/KVM ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0261-1 Rating: low References: #863750 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with xf86-input-vmmouse: - bnc#863750: Revert iopl() removal that broke vmmouse on QEMU/KVM Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-148 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): xf86-input-vmmouse-13.0.0-5.4.1 xf86-input-vmmouse-debuginfo-13.0.0-5.4.1 xf86-input-vmmouse-debugsource-13.0.0-5.4.1 References: https://bugzilla.novell.com/863750

1 0

openSUSE-RU-2014:0259-1: moderate: update for icecast
by maintenance＠opensuse.org 19 Feb '14

19 Feb '14

openSUSE Recommended Update: update for icecast ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0259-1 Rating: moderate References: #862096 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with icecast: - Remove the obsoleted icecast-2.3.2-CVE-2011-4612.diff that leads to invalid access to freed memory (bnc#862096) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-145 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): icecast-2.3.3-2.8.1 icecast-debuginfo-2.3.3-2.8.1 icecast-debugsource-2.3.3-2.8.1 icecast-doc-2.3.3-2.8.1 References: https://bugzilla.novell.com/862096

1 0

openSUSE-RU-2014:0258-1: moderate: sysconfig: make sure that remote filesystems are unmounted before network interfaces are stopped
by maintenance＠opensuse.org 19 Feb '14

19 Feb '14

openSUSE Recommended Update: sysconfig: make sure that remote filesystems are unmounted before network interfaces are stopped ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0258-1 Rating: moderate References: #857031 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with sysconfig: - bnc#857031: make sure that remote filesystems are unmounted before network interfaces are stopped Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-143 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): sysconfig-0.81.5-18.1 sysconfig-debugsource-0.81.5-18.1 sysconfig-netconfig-0.81.5-18.1 sysconfig-network-0.81.5-18.1 sysconfig-network-debuginfo-0.81.5-18.1 udevmountd-0.81.5-18.1 udevmountd-debuginfo-0.81.5-18.1 References: https://bugzilla.novell.com/857031

1 0

openSUSE-RU-2014:0257-1: kiwi: Update to version 5.05.53
by maintenance＠opensuse.org 19 Feb '14

19 Feb '14

openSUSE Recommended Update: kiwi: Update to version 5.05.53 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0257-1 Rating: low References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update provides version 5.05.53 of kiwi. It's required to allow builds of EC2 images for openSUSE 13.1 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-144 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): kiwi-5.05.53-8.1 kiwi-debugsource-5.05.53-8.1 kiwi-desc-isoboot-requires-5.05.53-8.1 kiwi-desc-netboot-requires-5.05.53-8.1 kiwi-desc-oemboot-requires-5.05.53-8.1 kiwi-desc-vmxboot-requires-5.05.53-8.1 kiwi-tools-5.05.53-8.1 kiwi-tools-debuginfo-5.05.53-8.1 - openSUSE 13.1 (noarch): kiwi-desc-isoboot-5.05.53-8.1 kiwi-desc-netboot-5.05.53-8.1 kiwi-desc-oemboot-5.05.53-8.1 kiwi-desc-vmxboot-5.05.53-8.1 kiwi-doc-5.05.53-8.1 kiwi-instsource-5.05.53-8.1 kiwi-media-requires-5.05.53-8.1 kiwi-pxeboot-5.05.53-8.1 kiwi-templates-5.05.53-8.1 kiwi-test-5.05.53-8.1 References:

1 0

openSUSE-RU-2014:0256-1: liferea: Update to version 1.10.5
by maintenance＠opensuse.org 19 Feb '14

19 Feb '14

openSUSE Recommended Update: liferea: Update to version 1.10.5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0256-1 Rating: low References: #859043 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with liferea: - bnc#859043: Update to version 1.10.5 + sf#1056, sf#1089, sf#1098: Honor preferences when opening links. + sf#1096: missing installation of liferea.convert file. + rh#947358: popup notification only for new items. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-142 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): liferea-1.10.5-2.8.1 liferea-debuginfo-1.10.5-2.8.1 liferea-debugsource-1.10.5-2.8.1 - openSUSE 13.1 (noarch): liferea-lang-1.10.5-2.8.1 References: https://bugzilla.novell.com/859043

1 0

openSUSE-SU-2014:0255-1: update for poppler
by opensuse-security＠opensuse.org 19 Feb '14

19 Feb '14

openSUSE Security Update: update for poppler ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0255-1 Rating: low References: #806793 #859427 Cross-References: CVE-2013-1788 CVE-2013-1789 CVE-2013-1790 CVE-2013-7296 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: poppler was updated to fix a security issues: - Fix a DoS due to a format string error (bnc#859427 CVE-2013-7296) - fix various memory access vulnerability(CVE-2013-1788, CVE-2013-1789,CVE-2013-1790 - bnc#806793) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-19 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libpoppler-cpp0-0.14.4-13.1 libpoppler-cpp0-debuginfo-0.14.4-13.1 libpoppler-devel-0.14.4-13.1 libpoppler-glib-devel-0.14.4-13.1 libpoppler-glib5-0.14.4-13.1 libpoppler-glib5-debuginfo-0.14.4-13.1 libpoppler7-0.14.4-13.1 libpoppler7-debuginfo-0.14.4-13.1 poppler-debugsource-0.14.4-13.1 poppler-tools-0.14.4-13.1 poppler-tools-debuginfo-0.14.4-13.1 - openSUSE 11.4 (noarch): libpoppler-doc-0.14.4-13.1 References: http://support.novell.com/security/cve/CVE-2013-1788.html http://support.novell.com/security/cve/CVE-2013-1789.html http://support.novell.com/security/cve/CVE-2013-1790.html http://support.novell.com/security/cve/CVE-2013-7296.html https://bugzilla.novell.com/806793 https://bugzilla.novell.com/859427

1 0