February 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2014:0224-1: moderate: update for plymouth
by maintenance＠opensuse.org 12 Feb '14

12 Feb '14

openSUSE Recommended Update: update for plymouth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0224-1 Rating: moderate References: #809806 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following non-security issue with plymouth: - add plymouth-honor-mode-changes.diff, otherwise plymout might hang during quit (bnc#809806, fdo#66824) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-124 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libply-boot-client2-0.8.8_git201309032142-2.5.1 libply-boot-client2-debuginfo-0.8.8_git201309032142-2.5.1 libply-splash-core2-0.8.8_git201309032142-2.5.1 libply-splash-core2-debuginfo-0.8.8_git201309032142-2.5.1 libply-splash-graphics2-0.8.8_git201309032142-2.5.1 libply-splash-graphics2-debuginfo-0.8.8_git201309032142-2.5.1 libply2-0.8.8_git201309032142-2.5.1 libply2-debuginfo-0.8.8_git201309032142-2.5.1 plymouth-0.8.8_git201309032142-2.5.1 plymouth-debuginfo-0.8.8_git201309032142-2.5.1 plymouth-debugsource-0.8.8_git201309032142-2.5.1 plymouth-devel-0.8.8_git201309032142-2.5.1 plymouth-dracut-0.8.8_git201309032142-2.5.1 plymouth-plugin-fade-throbber-0.8.8_git201309032142-2.5.1 plymouth-plugin-fade-throbber-debuginfo-0.8.8_git201309032142-2.5.1 plymouth-plugin-label-0.8.8_git201309032142-2.5.1 plymouth-plugin-label-debuginfo-0.8.8_git201309032142-2.5.1 plymouth-plugin-script-0.8.8_git201309032142-2.5.1 plymouth-plugin-script-debuginfo-0.8.8_git201309032142-2.5.1 plymouth-plugin-space-flares-0.8.8_git201309032142-2.5.1 plymouth-plugin-space-flares-debuginfo-0.8.8_git201309032142-2.5.1 plymouth-plugin-throbgress-0.8.8_git201309032142-2.5.1 plymouth-plugin-throbgress-debuginfo-0.8.8_git201309032142-2.5.1 plymouth-plugin-two-step-0.8.8_git201309032142-2.5.1 plymouth-plugin-two-step-debuginfo-0.8.8_git201309032142-2.5.1 plymouth-scripts-0.8.8_git201309032142-2.5.1 plymouth-utils-0.8.8_git201309032142-2.5.1 plymouth-utils-debuginfo-0.8.8_git201309032142-2.5.1 plymouth-x11-renderer-0.8.8_git201309032142-2.5.1 plymouth-x11-renderer-debuginfo-0.8.8_git201309032142-2.5.1 - openSUSE 13.1 (noarch): plymouth-theme-fade-in-0.8.8_git201309032142-2.5.1 plymouth-theme-script-0.8.8_git201309032142-2.5.1 plymouth-theme-solar-0.8.8_git201309032142-2.5.1 plymouth-theme-spinfinity-0.8.8_git201309032142-2.5.1 plymouth-theme-spinner-0.8.8_git201309032142-2.5.1 References: https://bugzilla.novell.com/809806

1 0

openSUSE-RU-2014:0218-1: important: kmps: Rebuild against current kernel
by maintenance＠opensuse.org 11 Feb '14

11 Feb '14

openSUSE Recommended Update: kmps: Rebuild against current kernel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0218-1 Rating: important References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update rebuilds all kmp's against the current kernel Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-122 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): cloop-2.639-11.4.1 cloop-debuginfo-2.639-11.4.1 cloop-debugsource-2.639-11.4.1 cloop-kmp-default-2.639_k3.11.10_7-11.4.1 cloop-kmp-default-debuginfo-2.639_k3.11.10_7-11.4.1 cloop-kmp-desktop-2.639_k3.11.10_7-11.4.1 cloop-kmp-desktop-debuginfo-2.639_k3.11.10_7-11.4.1 cloop-kmp-xen-2.639_k3.11.10_7-11.4.1 cloop-kmp-xen-debuginfo-2.639_k3.11.10_7-11.4.1 crash-7.0.2-2.4.1 crash-debuginfo-7.0.2-2.4.1 crash-debugsource-7.0.2-2.4.1 crash-devel-7.0.2-2.4.1 crash-doc-7.0.2-2.4.1 crash-eppic-7.0.2-2.4.1 crash-eppic-debuginfo-7.0.2-2.4.1 crash-gcore-7.0.2-2.4.1 crash-gcore-debuginfo-7.0.2-2.4.1 crash-kmp-default-7.0.2_k3.11.10_7-2.4.1 crash-kmp-default-debuginfo-7.0.2_k3.11.10_7-2.4.1 crash-kmp-desktop-7.0.2_k3.11.10_7-2.4.1 crash-kmp-desktop-debuginfo-7.0.2_k3.11.10_7-2.4.1 crash-kmp-xen-7.0.2_k3.11.10_7-2.4.1 crash-kmp-xen-debuginfo-7.0.2_k3.11.10_7-2.4.1 hdjmod-debugsource-1.28-16.4.1 hdjmod-kmp-default-1.28_k3.11.10_7-16.4.1 hdjmod-kmp-default-debuginfo-1.28_k3.11.10_7-16.4.1 hdjmod-kmp-desktop-1.28_k3.11.10_7-16.4.1 hdjmod-kmp-desktop-debuginfo-1.28_k3.11.10_7-16.4.1 hdjmod-kmp-xen-1.28_k3.11.10_7-16.4.1 hdjmod-kmp-xen-debuginfo-1.28_k3.11.10_7-16.4.1 ipset-6.19-2.4.1 ipset-debuginfo-6.19-2.4.1 ipset-debugsource-6.19-2.4.1 ipset-devel-6.19-2.4.1 ipset-kmp-default-6.19_k3.11.10_7-2.4.1 ipset-kmp-default-debuginfo-6.19_k3.11.10_7-2.4.1 ipset-kmp-desktop-6.19_k3.11.10_7-2.4.1 ipset-kmp-desktop-debuginfo-6.19_k3.11.10_7-2.4.1 ipset-kmp-xen-6.19_k3.11.10_7-2.4.1 ipset-kmp-xen-debuginfo-6.19_k3.11.10_7-2.4.1 iscsitarget-1.4.20.3-13.4.1 iscsitarget-debuginfo-1.4.20.3-13.4.1 iscsitarget-debugsource-1.4.20.3-13.4.1 iscsitarget-kmp-default-1.4.20.3_k3.11.10_7-13.4.1 iscsitarget-kmp-default-debuginfo-1.4.20.3_k3.11.10_7-13.4.1 iscsitarget-kmp-desktop-1.4.20.3_k3.11.10_7-13.4.1 iscsitarget-kmp-desktop-debuginfo-1.4.20.3_k3.11.10_7-13.4.1 iscsitarget-kmp-xen-1.4.20.3_k3.11.10_7-13.4.1 iscsitarget-kmp-xen-debuginfo-1.4.20.3_k3.11.10_7-13.4.1 libipset3-6.19-2.4.1 libipset3-debuginfo-6.19-2.4.1 ndiswrapper-1.58-4.1 ndiswrapper-debuginfo-1.58-4.1 ndiswrapper-debugsource-1.58-4.1 ndiswrapper-kmp-default-1.58_k3.11.10_7-4.1 ndiswrapper-kmp-default-debuginfo-1.58_k3.11.10_7-4.1 ndiswrapper-kmp-desktop-1.58_k3.11.10_7-4.1 ndiswrapper-kmp-desktop-debuginfo-1.58_k3.11.10_7-4.1 openvswitch-1.11.0-0.22.1 openvswitch-controller-1.11.0-0.22.1 openvswitch-controller-debuginfo-1.11.0-0.22.1 openvswitch-debuginfo-1.11.0-0.22.1 openvswitch-debugsource-1.11.0-0.22.1 openvswitch-kmp-default-1.11.0_k3.11.10_7-0.22.1 openvswitch-kmp-default-debuginfo-1.11.0_k3.11.10_7-0.22.1 openvswitch-kmp-desktop-1.11.0_k3.11.10_7-0.22.1 openvswitch-kmp-desktop-debuginfo-1.11.0_k3.11.10_7-0.22.1 openvswitch-kmp-xen-1.11.0_k3.11.10_7-0.22.1 openvswitch-kmp-xen-debuginfo-1.11.0_k3.11.10_7-0.22.1 openvswitch-pki-1.11.0-0.22.1 openvswitch-switch-1.11.0-0.22.1 openvswitch-switch-debuginfo-1.11.0-0.22.1 openvswitch-test-1.11.0-0.22.1 pcfclock-0.44-258.4.1 pcfclock-debuginfo-0.44-258.4.1 pcfclock-debugsource-0.44-258.4.1 pcfclock-kmp-default-0.44_k3.11.10_7-258.4.1 pcfclock-kmp-default-debuginfo-0.44_k3.11.10_7-258.4.1 pcfclock-kmp-desktop-0.44_k3.11.10_7-258.4.1 pcfclock-kmp-desktop-debuginfo-0.44_k3.11.10_7-258.4.1 python-openvswitch-1.11.0-0.22.1 python-openvswitch-test-1.11.0-0.22.1 python-virtualbox-4.2.18-2.9.1 python-virtualbox-debuginfo-4.2.18-2.9.1 vhba-kmp-debugsource-20130607-2.4.1 vhba-kmp-default-20130607_k3.11.10_7-2.4.1 vhba-kmp-default-debuginfo-20130607_k3.11.10_7-2.4.1 vhba-kmp-desktop-20130607_k3.11.10_7-2.4.1 vhba-kmp-desktop-debuginfo-20130607_k3.11.10_7-2.4.1 vhba-kmp-xen-20130607_k3.11.10_7-2.4.1 vhba-kmp-xen-debuginfo-20130607_k3.11.10_7-2.4.1 virtualbox-4.2.18-2.9.1 virtualbox-debuginfo-4.2.18-2.9.1 virtualbox-debugsource-4.2.18-2.9.1 virtualbox-devel-4.2.18-2.9.1 virtualbox-guest-kmp-default-4.2.18_k3.11.10_7-2.9.1 virtualbox-guest-kmp-default-debuginfo-4.2.18_k3.11.10_7-2.9.1 virtualbox-guest-kmp-desktop-4.2.18_k3.11.10_7-2.9.1 virtualbox-guest-kmp-desktop-debuginfo-4.2.18_k3.11.10_7-2.9.1 virtualbox-guest-tools-4.2.18-2.9.1 virtualbox-guest-tools-debuginfo-4.2.18-2.9.1 virtualbox-guest-x11-4.2.18-2.9.1 virtualbox-guest-x11-debuginfo-4.2.18-2.9.1 virtualbox-host-kmp-default-4.2.18_k3.11.10_7-2.9.1 virtualbox-host-kmp-default-debuginfo-4.2.18_k3.11.10_7-2.9.1 virtualbox-host-kmp-desktop-4.2.18_k3.11.10_7-2.9.1 virtualbox-host-kmp-desktop-debuginfo-4.2.18_k3.11.10_7-2.9.1 virtualbox-qt-4.2.18-2.9.1 virtualbox-qt-debuginfo-4.2.18-2.9.1 virtualbox-websrv-4.2.18-2.9.1 virtualbox-websrv-debuginfo-4.2.18-2.9.1 xen-debugsource-4.3.1_02-8.1 xen-devel-4.3.1_02-8.1 xen-kmp-default-4.3.1_02_k3.11.10_7-8.1 xen-kmp-default-debuginfo-4.3.1_02_k3.11.10_7-8.1 xen-kmp-desktop-4.3.1_02_k3.11.10_7-8.1 xen-kmp-desktop-debuginfo-4.3.1_02_k3.11.10_7-8.1 xen-libs-4.3.1_02-8.1 xen-libs-debuginfo-4.3.1_02-8.1 xen-tools-domU-4.3.1_02-8.1 xen-tools-domU-debuginfo-4.3.1_02-8.1 xtables-addons-2.3-2.4.1 xtables-addons-debuginfo-2.3-2.4.1 xtables-addons-debugsource-2.3-2.4.1 xtables-addons-kmp-default-2.3_k3.11.10_7-2.4.1 xtables-addons-kmp-default-debuginfo-2.3_k3.11.10_7-2.4.1 xtables-addons-kmp-desktop-2.3_k3.11.10_7-2.4.1 xtables-addons-kmp-desktop-debuginfo-2.3_k3.11.10_7-2.4.1 xtables-addons-kmp-xen-2.3_k3.11.10_7-2.4.1 xtables-addons-kmp-xen-debuginfo-2.3_k3.11.10_7-2.4.1 - openSUSE 13.1 (x86_64): xen-4.3.1_02-8.1 xen-doc-html-4.3.1_02-8.1 xen-libs-32bit-4.3.1_02-8.1 xen-libs-debuginfo-32bit-4.3.1_02-8.1 xen-tools-4.3.1_02-8.1 xen-tools-debuginfo-4.3.1_02-8.1 xen-xend-tools-4.3.1_02-8.1 xen-xend-tools-debuginfo-4.3.1_02-8.1 - openSUSE 13.1 (i586): cloop-kmp-pae-2.639_k3.11.10_7-11.4.1 cloop-kmp-pae-debuginfo-2.639_k3.11.10_7-11.4.1 crash-kmp-pae-7.0.2_k3.11.10_7-2.4.1 crash-kmp-pae-debuginfo-7.0.2_k3.11.10_7-2.4.1 hdjmod-kmp-pae-1.28_k3.11.10_7-16.4.1 hdjmod-kmp-pae-debuginfo-1.28_k3.11.10_7-16.4.1 ipset-kmp-pae-6.19_k3.11.10_7-2.4.1 ipset-kmp-pae-debuginfo-6.19_k3.11.10_7-2.4.1 iscsitarget-kmp-pae-1.4.20.3_k3.11.10_7-13.4.1 iscsitarget-kmp-pae-debuginfo-1.4.20.3_k3.11.10_7-13.4.1 ndiswrapper-kmp-pae-1.58_k3.11.10_7-4.1 ndiswrapper-kmp-pae-debuginfo-1.58_k3.11.10_7-4.1 openvswitch-kmp-pae-1.11.0_k3.11.10_7-0.22.1 openvswitch-kmp-pae-debuginfo-1.11.0_k3.11.10_7-0.22.1 pcfclock-kmp-pae-0.44_k3.11.10_7-258.4.1 pcfclock-kmp-pae-debuginfo-0.44_k3.11.10_7-258.4.1 vhba-kmp-pae-20130607_k3.11.10_7-2.4.1 vhba-kmp-pae-debuginfo-20130607_k3.11.10_7-2.4.1 virtualbox-guest-kmp-pae-4.2.18_k3.11.10_7-2.9.1 virtualbox-guest-kmp-pae-debuginfo-4.2.18_k3.11.10_7-2.9.1 virtualbox-host-kmp-pae-4.2.18_k3.11.10_7-2.9.1 virtualbox-host-kmp-pae-debuginfo-4.2.18_k3.11.10_7-2.9.1 xen-kmp-pae-4.3.1_02_k3.11.10_7-8.1 xen-kmp-pae-debuginfo-4.3.1_02_k3.11.10_7-8.1 xtables-addons-kmp-pae-2.3_k3.11.10_7-2.4.1 xtables-addons-kmp-pae-debuginfo-2.3_k3.11.10_7-2.4.1 References:

1 0

openSUSE-SU-2014:0213-1: important: Mozilla updates February 2014
by opensuse-security＠opensuse.org 08 Feb '14

08 Feb '14

openSUSE Security Update: Mozilla updates February 2014 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0213-1 Rating: important References: #861847 Cross-References: CVE-2013-1740 CVE-2014-1477 CVE-2014-1478 CVE-2014-1479 CVE-2014-1481 CVE-2014-1482 CVE-2014-1486 CVE-2014-1487 CVE-2014-1490 CVE-2014-1491 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: Updates for mozilla-nss (3.15.4) MozillaFirefox (24.3.0esr) MozillaThunderbird (24.3.0) including fixes for the following issues: * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478 Miscellaneous memory safety hazards (rv:27.0 / rv:24.3) * MFSA 2014-02/CVE-2014-1479 (bmo#911864) Clone protected content with XBL scopes * MFSA 2014-04/CVE-2014-1482 (bmo#943803) Incorrect use of discarded images by RasterImage * MFSA 2014-08/CVE-2014-1486 (bmo#942164) Use-after-free with imgRequestProxy and image proccessing * MFSA 2014-09/CVE-2014-1487 (bmo#947592) Cross-origin information leak through web workers * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491 (bmo#934545, bmo#930874, bmo#930857) NSS ticket handling issues * MFSA 2014-13/CVE-2014-1481(bmo#936056) Inconsistent JavaScript handling of access to Window objects Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-16 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): MozillaFirefox-24.3.0-99.1 MozillaFirefox-branding-upstream-24.3.0-99.1 MozillaFirefox-buildsymbols-24.3.0-99.1 MozillaFirefox-debuginfo-24.3.0-99.1 MozillaFirefox-debugsource-24.3.0-99.1 MozillaFirefox-devel-24.3.0-99.1 MozillaFirefox-translations-common-24.3.0-99.1 MozillaFirefox-translations-other-24.3.0-99.1 MozillaThunderbird-24.3.0-85.1 MozillaThunderbird-buildsymbols-24.3.0-85.1 MozillaThunderbird-debuginfo-24.3.0-85.1 MozillaThunderbird-debugsource-24.3.0-85.1 MozillaThunderbird-devel-24.3.0-85.1 MozillaThunderbird-translations-common-24.3.0-85.1 MozillaThunderbird-translations-other-24.3.0-85.1 enigmail-1.6.0+24.3.0-85.1 libfreebl3-3.15.4-78.1 libfreebl3-debuginfo-3.15.4-78.1 libsoftokn3-3.15.4-78.1 libsoftokn3-debuginfo-3.15.4-78.1 mozilla-nss-3.15.4-78.1 mozilla-nss-certs-3.15.4-78.1 mozilla-nss-certs-debuginfo-3.15.4-78.1 mozilla-nss-debuginfo-3.15.4-78.1 mozilla-nss-debugsource-3.15.4-78.1 mozilla-nss-devel-3.15.4-78.1 mozilla-nss-sysinit-3.15.4-78.1 mozilla-nss-sysinit-debuginfo-3.15.4-78.1 mozilla-nss-tools-3.15.4-78.1 mozilla-nss-tools-debuginfo-3.15.4-78.1 - openSUSE 11.4 (x86_64): libfreebl3-32bit-3.15.4-78.1 libfreebl3-debuginfo-32bit-3.15.4-78.1 libsoftokn3-32bit-3.15.4-78.1 libsoftokn3-debuginfo-32bit-3.15.4-78.1 mozilla-nss-32bit-3.15.4-78.1 mozilla-nss-certs-32bit-3.15.4-78.1 mozilla-nss-certs-debuginfo-32bit-3.15.4-78.1 mozilla-nss-debuginfo-32bit-3.15.4-78.1 mozilla-nss-sysinit-32bit-3.15.4-78.1 mozilla-nss-sysinit-debuginfo-32bit-3.15.4-78.1 - openSUSE 11.4 (ia64): libfreebl3-debuginfo-x86-3.15.4-78.1 libfreebl3-x86-3.15.4-78.1 libsoftokn3-debuginfo-x86-3.15.4-78.1 libsoftokn3-x86-3.15.4-78.1 mozilla-nss-certs-debuginfo-x86-3.15.4-78.1 mozilla-nss-certs-x86-3.15.4-78.1 mozilla-nss-debuginfo-x86-3.15.4-78.1 mozilla-nss-sysinit-debuginfo-x86-3.15.4-78.1 mozilla-nss-sysinit-x86-3.15.4-78.1 mozilla-nss-x86-3.15.4-78.1 References: http://support.novell.com/security/cve/CVE-2013-1740.html http://support.novell.com/security/cve/CVE-2014-1477.html http://support.novell.com/security/cve/CVE-2014-1478.html http://support.novell.com/security/cve/CVE-2014-1479.html http://support.novell.com/security/cve/CVE-2014-1481.html http://support.novell.com/security/cve/CVE-2014-1482.html http://support.novell.com/security/cve/CVE-2014-1486.html http://support.novell.com/security/cve/CVE-2014-1487.html http://support.novell.com/security/cve/CVE-2014-1490.html http://support.novell.com/security/cve/CVE-2014-1491.html https://bugzilla.novell.com/861847

1 0

openSUSE-SU-2014:0212-1: important: Mozilla Firefox 27 release
by opensuse-security＠opensuse.org 08 Feb '14

08 Feb '14

openSUSE Security Update: Mozilla Firefox 27 release ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0212-1 Rating: important References: Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Mozilla Firefox was updated to version 27. Mozilla Seamonkey was updated to 2.24, fixing similar issues as Firefox 27. Mozilla Thunderbird was updated to 24.3.0, fixing similar issues as Firefox 27. The Firefox 27 release brings TLS 1.2 support as a major security feature. It also fixes following security issues: * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478 Miscellaneous memory safety hazards (rv:27.0 / rv:24.3) * MFSA 2014-02/CVE-2014-1479 (bmo#911864) Clone protected content with XBL scopes * MFSA 2014-03/CVE-2014-1480 (bmo#916726) UI selection timeout missing on download prompts * MFSA 2014-04/CVE-2014-1482 (bmo#943803) Incorrect use of discarded images by RasterImage * MFSA 2014-05/CVE-2014-1483 (bmo#950427) Information disclosure with *FromPoint on iframes * MFSA 2014-06/CVE-2014-1484 (bmo#953993) Profile path leaks to Android system log * MFSA 2014-07/CVE-2014-1485 (bmo#910139) XSLT stylesheets treated as styles in Content Security Policy * MFSA 2014-08/CVE-2014-1486 (bmo#942164) Use-after-free with imgRequestProxy and image proccessing * MFSA 2014-09/CVE-2014-1487 (bmo#947592) Cross-origin information leak through web workers * MFSA 2014-10/CVE-2014-1489 (bmo#959531) Firefox default start page UI content invokable by script * MFSA 2014-11/CVE-2014-1488 (bmo#950604) Crash when using web workers with asm.js * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491 (bmo#934545, bmo#930874, bmo#930857) NSS ticket handling issues * MFSA 2014-13/CVE-2014-1481(bmo#936056) Inconsistent JavaScript handling of access to Window objects Mozilla NSS was updated to 3.15.4: * required for Firefox 27 * regular CA root store update (1.96) * Reordered the cipher suites offered in SSL/TLS client hello messages to match modern best practices. * Improved SSL/TLS false start. In addition to enabling the SSL_ENABLE_FALSE_START option, an application must now register a callback using the SSL_SetCanFalseStartCallback function. * When false start is enabled, libssl will sometimes return unencrypted, unauthenticated data from PR_Recv (CVE-2013-1740, bmo#919877) * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491 NSS ticket handling issues New functionality * Implemented OCSP querying using the HTTP GET method, which is the new default, and will fall back to the HTTP POST method. * Implemented OCSP server functionality for testing purposes (httpserv utility). * Support SHA-1 signatures with TLS 1.2 client authentication. * Added the --empty-password command-line option to certutil, to be used with -N: use an empty password when creating a new database. * Added the -w command-line option to pp: don't wrap long output lines. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-119 - openSUSE 12.3: zypper in -t patch openSUSE-2014-119 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): MozillaFirefox-27.0-8.1 MozillaFirefox-branding-upstream-27.0-8.1 MozillaFirefox-buildsymbols-27.0-8.1 MozillaFirefox-debuginfo-27.0-8.1 MozillaFirefox-debugsource-27.0-8.1 MozillaFirefox-devel-27.0-8.1 MozillaFirefox-translations-common-27.0-8.1 MozillaFirefox-translations-other-27.0-8.1 MozillaThunderbird-24.3.0-70.11.1 MozillaThunderbird-buildsymbols-24.3.0-70.11.1 MozillaThunderbird-debuginfo-24.3.0-70.11.1 MozillaThunderbird-debugsource-24.3.0-70.11.1 MozillaThunderbird-devel-24.3.0-70.11.1 MozillaThunderbird-translations-common-24.3.0-70.11.1 MozillaThunderbird-translations-other-24.3.0-70.11.1 enigmail-1.6.0+24.3.0-70.11.1 enigmail-debuginfo-1.6.0+24.3.0-70.11.1 libfreebl3-3.15.4-12.1 libfreebl3-debuginfo-3.15.4-12.1 libsoftokn3-3.15.4-12.1 libsoftokn3-debuginfo-3.15.4-12.1 mozilla-nss-3.15.4-12.1 mozilla-nss-certs-3.15.4-12.1 mozilla-nss-certs-debuginfo-3.15.4-12.1 mozilla-nss-debuginfo-3.15.4-12.1 mozilla-nss-debugsource-3.15.4-12.1 mozilla-nss-devel-3.15.4-12.1 mozilla-nss-sysinit-3.15.4-12.1 mozilla-nss-sysinit-debuginfo-3.15.4-12.1 mozilla-nss-tools-3.15.4-12.1 mozilla-nss-tools-debuginfo-3.15.4-12.1 seamonkey-2.24-8.1 seamonkey-debuginfo-2.24-8.1 seamonkey-debugsource-2.24-8.1 seamonkey-dom-inspector-2.24-8.1 seamonkey-irc-2.24-8.1 seamonkey-translations-common-2.24-8.1 seamonkey-translations-other-2.24-8.1 seamonkey-venkman-2.24-8.1 - openSUSE 13.1 (x86_64): libfreebl3-32bit-3.15.4-12.1 libfreebl3-debuginfo-32bit-3.15.4-12.1 libsoftokn3-32bit-3.15.4-12.1 libsoftokn3-debuginfo-32bit-3.15.4-12.1 mozilla-nss-32bit-3.15.4-12.1 mozilla-nss-certs-32bit-3.15.4-12.1 mozilla-nss-certs-debuginfo-32bit-3.15.4-12.1 mozilla-nss-debuginfo-32bit-3.15.4-12.1 mozilla-nss-sysinit-32bit-3.15.4-12.1 mozilla-nss-sysinit-debuginfo-32bit-3.15.4-12.1 - openSUSE 12.3 (i586 x86_64): MozillaFirefox-27.0-1.47.2 MozillaFirefox-branding-upstream-27.0-1.47.2 MozillaFirefox-buildsymbols-27.0-1.47.2 MozillaFirefox-debuginfo-27.0-1.47.2 MozillaFirefox-debugsource-27.0-1.47.2 MozillaFirefox-devel-27.0-1.47.2 MozillaFirefox-translations-common-27.0-1.47.2 MozillaFirefox-translations-other-27.0-1.47.2 MozillaThunderbird-24.3.0-61.39.2 MozillaThunderbird-buildsymbols-24.3.0-61.39.2 MozillaThunderbird-debuginfo-24.3.0-61.39.2 MozillaThunderbird-debugsource-24.3.0-61.39.2 MozillaThunderbird-devel-24.3.0-61.39.2 MozillaThunderbird-translations-common-24.3.0-61.39.2 MozillaThunderbird-translations-other-24.3.0-61.39.2 enigmail-1.6.0+24.3.0-61.39.2 enigmail-debuginfo-1.6.0+24.3.0-61.39.2 libfreebl3-3.15.4-1.28.1 libfreebl3-debuginfo-3.15.4-1.28.1 libsoftokn3-3.15.4-1.28.1 libsoftokn3-debuginfo-3.15.4-1.28.1 mozilla-nss-3.15.4-1.28.1 mozilla-nss-certs-3.15.4-1.28.1 mozilla-nss-certs-debuginfo-3.15.4-1.28.1 mozilla-nss-debuginfo-3.15.4-1.28.1 mozilla-nss-debugsource-3.15.4-1.28.1 mozilla-nss-devel-3.15.4-1.28.1 mozilla-nss-sysinit-3.15.4-1.28.1 mozilla-nss-sysinit-debuginfo-3.15.4-1.28.1 mozilla-nss-tools-3.15.4-1.28.1 mozilla-nss-tools-debuginfo-3.15.4-1.28.1 seamonkey-2.24-1.33.2 seamonkey-debuginfo-2.24-1.33.2 seamonkey-debugsource-2.24-1.33.2 seamonkey-dom-inspector-2.24-1.33.2 seamonkey-irc-2.24-1.33.2 seamonkey-translations-common-2.24-1.33.2 seamonkey-translations-other-2.24-1.33.2 seamonkey-venkman-2.24-1.33.2 - openSUSE 12.3 (x86_64): libfreebl3-32bit-3.15.4-1.28.1 libfreebl3-debuginfo-32bit-3.15.4-1.28.1 libsoftokn3-32bit-3.15.4-1.28.1 libsoftokn3-debuginfo-32bit-3.15.4-1.28.1 mozilla-nss-32bit-3.15.4-1.28.1 mozilla-nss-certs-32bit-3.15.4-1.28.1 mozilla-nss-certs-debuginfo-32bit-3.15.4-1.28.1 mozilla-nss-debuginfo-32bit-3.15.4-1.28.1 mozilla-nss-sysinit-32bit-3.15.4-1.28.1 mozilla-nss-sysinit-debuginfo-32bit-3.15.4-1.28.1 References:

1 0

openSUSE-RU-2014:0210-1: libqdialogsolver1: moved libyui plugin to correct place.
by maintenance＠opensuse.org 07 Feb '14

07 Feb '14

openSUSE Recommended Update: libqdialogsolver1: moved libyui plugin to correct place. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0210-1 Rating: low References: #785431 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with libqdialogsolver1: - bnc#785431: Package libyui plugin to correct place. This makes Yast Qt's resolution information dialog work again. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-116 - openSUSE 12.3: zypper in -t patch openSUSE-2014-116 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libqdialogsolver1-1.3.1-5.4.1 libqdialogsolver1-debuginfo-1.3.1-5.4.1 libqdialogsolver1-debugsource-1.3.1-5.4.1 libqdialogsolver1-devel-1.3.1-5.4.1 - openSUSE 12.3 (i586 x86_64): libqdialogsolver1-1.3.1-2.14.1 libqdialogsolver1-debuginfo-1.3.1-2.14.1 libqdialogsolver1-debugsource-1.3.1-2.14.1 libqdialogsolver1-devel-1.3.1-2.14.1 References: https://bugzilla.novell.com/785431

1 0

openSUSE-RU-2014:0209-1: fontconfig: fix crash for special bdf font
by maintenance＠opensuse.org 07 Feb '14

07 Feb '14

openSUSE Recommended Update: fontconfig: fix crash for special bdf font ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0209-1 Rating: low References: #860596 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with fontconfig: - bnc#860596: fix fontconfig crash for special bdf font Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-115 - openSUSE 12.3: zypper in -t patch openSUSE-2014-115 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): fontconfig-2.11.0-4.1 fontconfig-debuginfo-2.11.0-4.1 fontconfig-debugsource-2.11.0-4.1 fontconfig-devel-2.11.0-4.1 - openSUSE 13.1 (x86_64): fontconfig-32bit-2.11.0-4.1 fontconfig-debuginfo-32bit-2.11.0-4.1 fontconfig-devel-32bit-2.11.0-4.1 - openSUSE 12.3 (i586 x86_64): fontconfig-2.10.2-2.5.1 fontconfig-debuginfo-2.10.2-2.5.1 fontconfig-debugsource-2.10.2-2.5.1 fontconfig-devel-2.10.2-2.5.1 - openSUSE 12.3 (x86_64): fontconfig-32bit-2.10.2-2.5.1 fontconfig-debuginfo-32bit-2.10.2-2.5.1 fontconfig-devel-32bit-2.10.2-2.5.1 References: https://bugzilla.novell.com/860596

1 0

openSUSE-RU-2014:0208-1: exo: fix a typo where custom preference files to be saved in the wrong location
by maintenance＠opensuse.org 07 Feb '14

07 Feb '14

openSUSE Recommended Update: exo: fix a typo where custom preference files to be saved in the wrong location ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0208-1 Rating: low References: #860479 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with exo: - bnc#860479: fix a typo in use-versioned-helpers-db.patch causing custom preference files to be saved in the wrong location Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-118 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): exo-debugsource-0.10.2-5.4.1 exo-devel-0.10.2-5.4.1 exo-tools-0.10.2-5.4.1 exo-tools-debuginfo-0.10.2-5.4.1 libexo-1-0-0.10.2-5.4.1 libexo-1-0-debuginfo-0.10.2-5.4.1 - openSUSE 13.1 (noarch): exo-lang-0.10.2-5.4.1 libexo-1-0-branding-upstream-0.10.2-5.4.1 References: https://bugzilla.novell.com/860479

1 0

openSUSE-RU-2014:0207-1: hylafax: Update to latest version 6.0.6
by maintenance＠opensuse.org 07 Feb '14

07 Feb '14

openSUSE Recommended Update: hylafax: Update to latest version 6.0.6 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0207-1 Rating: low References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issues with hylafax: - Update to version 6.0.6 * Re-order library files in fchmod() configure check * faxalter: Wire up the nissing page range -Z options * man: JobReqError/JobRetryError were missing in hylafax-config.4 * typerules: adding missing comma to typeNames array * Do not warn about one of the Fontpath directories not existing * Reworked how faxsetup looks for Fontmap * Use a private Fontmap.HylaFAX file of .pfb files * Combine all Fontmap files in memory, including new Fontmap.HylaFAX * Bug 934: We need to avoid a 0-index in playList * hfaxd: Eliminte extraneous debug logging * hfaxd: Make source port for active connections be ctrl port - 1 * hfaxd: Release old accept fd * Support libtiff 4.0 * faxsend: JobRetryOther/JobRequeueOther weren't actually being used * Make sure not to cut faxq FIFO messages in two when reaching end of buffer * hfaxd: Port is network byte order, correct logging of it (2011-06-03) - removed patch for TIFF 4.0 - configure.patch adapted Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-117 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): hylafax-6.0.6-6.4.1 hylafax-client-6.0.6-6.4.1 hylafax-client-debuginfo-6.0.6-6.4.1 hylafax-debuginfo-6.0.6-6.4.1 hylafax-debugsource-6.0.6-6.4.1 References:

1 0

openSUSE-SU-2014:0205-1: important: kernel to 3.11.10
by opensuse-security＠opensuse.org 06 Feb '14

06 Feb '14

openSUSE Security Update: kernel to 3.11.10 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0205-1 Rating: important References: #733022 #773058 #838024 #844513 #845621 #846529 #848042 #849021 #850072 #852652 #852656 #852931 #853050 #853051 #853052 #853053 #854175 #854722 #856294 #859804 #860993 Cross-References: CVE-2013-4511 CVE-2013-4563 CVE-2013-4587 CVE-2013-6367 CVE-2013-6368 CVE-2013-6376 CVE-2013-6432 CVE-2014-0038 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has 13 fixes is now available. Description: The Linux Kernel was updated to version 3.11.10, fixing security issues and bugs: - floppy: bail out in open() if drive is not responding to block0 read (bnc#773058). - compat_sys_recvmmsg X32 fix (bnc#860993 CVE-2014-0038). - HID: usbhid: fix sis quirk (bnc#859804). - hwmon: (coretemp) Fix truncated name of alarm attributes - HID: usbhid: quirk for Synaptics Quad HD touchscreen (bnc#859804). - HID: usbhid: quirk for Synaptics HD touchscreen (bnc#859804). - HID: usbhid: merge the sis quirk (bnc#859804). - HID: hid-multitouch: add support for SiS panels (bnc#859804). - HID: usbhid: quirk for SiS Touchscreen (bnc#859804). - HID: usbhid: quirk for Synaptics Large Touchccreen (bnc#859804). - drivers: net: cpsw: fix dt probe for one port ethernet. - drivers: net: cpsw: fix for cpsw crash when build as modules. - dma: edma: Remove limits on number of slots. - dma: edma: Leave linked to Null slot instead of DUMMY slot. - dma: edma: Find missed events and issue them. - dma: edma: Write out and handle MAX_NR_SG at a given time. - dma: edma: Setup parameters to DMA MAX_NR_SG at a time. - ARM: edma: Add function to manually trigger an EDMA channel. - ARM: edma: Fix clearing of unused list for DT DMA resources. - ACPI: Add Toshiba NB100 to Vista _OSI blacklist. - ACPI: add missing win8 OSI comment to blacklist (bnc#856294). - ACPI: update win8 OSI blacklist. - ACPI: blacklist win8 OSI for buggy laptops. - ACPI: blacklist win8 OSI for ASUS Zenbook Prime UX31A (bnc#856294). - ACPI: Blacklist Win8 OSI for some HP laptop 2013 models (bnc#856294). - floppy: bail out in open() if drive is not responding to block0 read (bnc#773058). - ping: prevent NULL pointer dereference on write to msg_name (bnc#854175 CVE-2013-6432). - x86/dumpstack: Fix printk_address for direct addresses (bnc#845621). - Refresh patches.suse/stack-unwind. - Refresh patches.xen/xen-x86_64-dump-user-pgt. - KVM: x86: Convert vapic synchronization to _cached functions (CVE-2013-6368) (bnc#853052 CVE-2013-6368). - KVM: x86: fix guest-initiated crash with x2apic (CVE-2013-6376) (bnc#853053 CVE-2013-6376). - Build the KOTD against openSUSE:13.1:Update - xencons: generalize use of add_preferred_console() (bnc#733022, bnc#852652). - Update Xen patches to 3.11.10. - Rename patches.xen/xen-pcpu-hotplug to patches.xen/xen-pcpu. - KVM: x86: Fix potential divide by 0 in lapic (CVE-2013-6367) (bnc#853051 CVE-2013-6367). - KVM: Improve create VCPU parameter (CVE-2013-4587) (bnc#853050 CVE-2013-4587). - ipv6: fix headroom calculation in udp6_ufo_fragment (bnc#848042 CVE-2013-4563). - net: rework recvmsg handler msg_name and msg_namelen logic (bnc#854722). - patches.drivers/gpio-ucb1400-add-module_alias.patch: Update upstream reference - patches.drivers/gpio-ucb1400-can-be-built-as-a-module.patch: Update upstream reference - Delete patches.suse/ida-remove-warning-dump-stack.patch. Already included in kernel 3.11 (WARN calls dump_stack.) - xhci: Limit the spurious wakeup fix only to HP machines (bnc#852931). - iscsi_target: race condition on shutdown (bnc#850072). - Linux 3.11.10. - Refresh patches.xen/xen3-patch-2.6.29. - Delete patches.suse/btrfs-relocate-csums-properly-with-prealloc-ext ents.patch. - patches.drivers/xhci-Fix-spurious-wakeups-after-S5-on-Haswel l.patch: (bnc#852931). - Build mei and mei_me as modules (bnc#852656) - Linux 3.11.9. - Linux 3.11.8 (CVE-2013-4511 bnc#846529 bnc#849021). - Delete patches.drivers/ALSA-hda-Add-a-fixup-for-ASUS-N76VZ. - Delete patches.fixes/Fix-a-few-incorrectly-checked-io_-remap_pfn_ra nge-ca.patch. - Add USB PHY support (needed to get USB and Ethernet working on beagle and panda boards) Add CONFIG_PINCTRL_SINGLE=y to be able to use Device tree (at least for beagle and panda boards) Add ARM SoC sound support Add SPI bus support Add user-space access to I2C and SPI - patches.arch/iommu-vt-d-remove-stack-trace-from-broken-irq-r emapping-warning.patch: Fix forward porting, sorry. - iommu: Remove stack trace from broken irq remapping warning (bnc#844513). - gpio: ucb1400: Add MODULE_ALIAS. - Allow NFSv4 username mapping to work properly (bnc#838024). - nfs: check if gssd is running before attempting to use krb5i auth in SETCLIENTID call. - sunrpc: replace sunrpc_net->gssd_running flag with a more reliable check. - sunrpc: create a new dummy pipe for gssd to hold open. - Set CONFIG_GPIO_TWL4030 as built-in (instead of module) as a requirement to boot on SD card on beagleboard xM - armv6hl, armv7hl: Update config files. Set CONFIG_BATMAN_ADV_BLA=y as all other kernel configuration files have. - Update config files: * CONFIG_BATMAN_ADV_NC=y, because other BATMAN_ADV options are all enabled so why not this one. * CONFIG_GPIO_SCH=m, CONFIG_GPIO_PCH=m, because we support all other features of these pieces of hardware. * CONFIG_INTEL_POWERCLAMP=m, because this small driver might be useful in specific cases, and there's no obvious reason not to include it. - Fix a few incorrectly checked [io_]remap_pfn_range() calls (bnc#849021, CVE-2013-4511). - Linux 3.11.7. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-114 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): kernel-default-3.11.10-7.1 kernel-default-base-3.11.10-7.1 kernel-default-base-debuginfo-3.11.10-7.1 kernel-default-debuginfo-3.11.10-7.1 kernel-default-debugsource-3.11.10-7.1 kernel-default-devel-3.11.10-7.1 kernel-default-devel-debuginfo-3.11.10-7.1 kernel-syms-3.11.10-7.1 - openSUSE 13.1 (i686 x86_64): kernel-debug-3.11.10-7.1 kernel-debug-base-3.11.10-7.1 kernel-debug-base-debuginfo-3.11.10-7.1 kernel-debug-debuginfo-3.11.10-7.1 kernel-debug-debugsource-3.11.10-7.1 kernel-debug-devel-3.11.10-7.1 kernel-debug-devel-debuginfo-3.11.10-7.1 kernel-desktop-3.11.10-7.1 kernel-desktop-base-3.11.10-7.1 kernel-desktop-base-debuginfo-3.11.10-7.1 kernel-desktop-debuginfo-3.11.10-7.1 kernel-desktop-debugsource-3.11.10-7.1 kernel-desktop-devel-3.11.10-7.1 kernel-desktop-devel-debuginfo-3.11.10-7.1 kernel-ec2-3.11.10-7.1 kernel-ec2-base-3.11.10-7.1 kernel-ec2-base-debuginfo-3.11.10-7.1 kernel-ec2-debuginfo-3.11.10-7.1 kernel-ec2-debugsource-3.11.10-7.1 kernel-ec2-devel-3.11.10-7.1 kernel-ec2-devel-debuginfo-3.11.10-7.1 kernel-trace-3.11.10-7.1 kernel-trace-base-3.11.10-7.1 kernel-trace-base-debuginfo-3.11.10-7.1 kernel-trace-debuginfo-3.11.10-7.1 kernel-trace-debugsource-3.11.10-7.1 kernel-trace-devel-3.11.10-7.1 kernel-trace-devel-debuginfo-3.11.10-7.1 kernel-vanilla-3.11.10-7.1 kernel-vanilla-debuginfo-3.11.10-7.1 kernel-vanilla-debugsource-3.11.10-7.1 kernel-vanilla-devel-3.11.10-7.1 kernel-vanilla-devel-debuginfo-3.11.10-7.1 kernel-xen-3.11.10-7.1 kernel-xen-base-3.11.10-7.1 kernel-xen-base-debuginfo-3.11.10-7.1 kernel-xen-debuginfo-3.11.10-7.1 kernel-xen-debugsource-3.11.10-7.1 kernel-xen-devel-3.11.10-7.1 kernel-xen-devel-debuginfo-3.11.10-7.1 - openSUSE 13.1 (noarch): kernel-devel-3.11.10-7.1 kernel-docs-3.11.10-7.3 kernel-source-3.11.10-7.1 kernel-source-vanilla-3.11.10-7.1 - openSUSE 13.1 (i686): kernel-pae-3.11.10-7.1 kernel-pae-base-3.11.10-7.1 kernel-pae-base-debuginfo-3.11.10-7.1 kernel-pae-debuginfo-3.11.10-7.1 kernel-pae-debugsource-3.11.10-7.1 kernel-pae-devel-3.11.10-7.1 kernel-pae-devel-debuginfo-3.11.10-7.1 References: http://support.novell.com/security/cve/CVE-2013-4511.html http://support.novell.com/security/cve/CVE-2013-4563.html http://support.novell.com/security/cve/CVE-2013-4587.html http://support.novell.com/security/cve/CVE-2013-6367.html http://support.novell.com/security/cve/CVE-2013-6368.html http://support.novell.com/security/cve/CVE-2013-6376.html http://support.novell.com/security/cve/CVE-2013-6432.html http://support.novell.com/security/cve/CVE-2014-0038.html https://bugzilla.novell.com/733022 https://bugzilla.novell.com/773058 https://bugzilla.novell.com/838024 https://bugzilla.novell.com/844513 https://bugzilla.novell.com/845621 https://bugzilla.novell.com/846529 https://bugzilla.novell.com/848042 https://bugzilla.novell.com/849021 https://bugzilla.novell.com/850072 https://bugzilla.novell.com/852652 https://bugzilla.novell.com/852656 https://bugzilla.novell.com/852931 https://bugzilla.novell.com/853050 https://bugzilla.novell.com/853051 https://bugzilla.novell.com/853052 https://bugzilla.novell.com/853053 https://bugzilla.novell.com/854175 https://bugzilla.novell.com/854722 https://bugzilla.novell.com/856294 https://bugzilla.novell.com/859804 https://bugzilla.novell.com/860993

1 0

openSUSE-SU-2014:0204-1: important: kernel: security and bugfix update
by opensuse-security＠opensuse.org 06 Feb '14

06 Feb '14

openSUSE Security Update: kernel: security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0204-1 Rating: important References: #804950 #805226 #808358 #811746 #825006 #831836 #838024 #840226 #840656 #844513 #848079 #848255 #849021 #849023 #849029 #849034 #849362 #852373 #852558 #852559 #853050 #853051 #853052 #853053 #854173 #854634 #854722 #860993 Cross-References: CVE-2013-0343 CVE-2013-1792 CVE-2013-4348 CVE-2013-4511 CVE-2013-4513 CVE-2013-4514 CVE-2013-4515 CVE-2013-4587 CVE-2013-6367 CVE-2013-6368 CVE-2013-6376 CVE-2013-6378 CVE-2013-6380 CVE-2013-6431 CVE-2013-7027 CVE-2014-0038 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves 16 vulnerabilities and has 12 fixes is now available. Description: The Linux kernel was updated to fix various bugs and security issues: - mm/page-writeback.c: do not count anon pages as dirtyable memory (reclaim stalls). - mm/page-writeback.c: fix dirty_balance_reserve subtraction from dirtyable memory (reclaim stalls). - compat_sys_recvmmsg X32 fix (bnc#860993 CVE-2014-0038). - hwmon: (coretemp) Fix truncated name of alarm attributes - net: fib: fib6_add: fix potential NULL pointer dereference (bnc#854173 CVE-2013-6431). - keys: fix race with concurrent install_user_keyrings() (bnc#808358)(CVE-2013-1792). - KVM: x86: Convert vapic synchronization to _cached functions (CVE-2013-6368) (bnc#853052 CVE-2013-6368). - wireless: radiotap: fix parsing buffer overrun (bnc#854634 CVE-2013-7027). - KVM: x86: fix guest-initiated crash with x2apic (CVE-2013-6376) (bnc#853053 CVE-2013-6376). - KVM: x86: Fix potential divide by 0 in lapic (CVE-2013-6367) (bnc#853051 CVE-2013-6367). - KVM: Improve create VCPU parameter (CVE-2013-4587) (bnc#853050 CVE-2013-4587). - staging: ozwpan: prevent overflow in oz_cdev_write() (bnc#849023 CVE-2013-4513). - perf/x86: Fix offcore_rsp valid mask for SNB/IVB (bnc#825006). - perf/x86: Add Intel IvyBridge event scheduling constraints (bnc#825006). - libertas: potential oops in debugfs (bnc#852559 CVE-2013-6378). - aacraid: prevent invalid pointer dereference (bnc#852373 CVE-2013-6380). - staging: wlags49_h2: buffer overflow setting station name (bnc#849029 CVE-2013-4514). - net: flow_dissector: fail on evil iph->ihl (bnc#848079 CVE-2013-4348). - Staging: bcm: info leak in ioctl (bnc#849034 CVE-2013-4515). - Refresh patches.fixes/net-rework-recvmsg-handler-msg_name-and-msg_na melen-logic.patch. - ipv6: remove max_addresses check from ipv6_create_tempaddr (bnc#805226, CVE-2013-0343). - net: rework recvmsg handler msg_name and msg_namelen logic (bnc#854722). - crypto: ansi_cprng - Fix off by one error in non-block size request (bnc#840226). - x6: Fix reserve_initrd so that acpi_initrd_override is reached (bnc#831836). - Refresh other Xen patches. - aacraid: missing capable() check in compat ioctl (bnc#852558). - patches.fixes/gpio-ich-fix-ichx_gpio_check_available-return. patch: Update upstream reference - perf/ftrace: Fix paranoid level for enabling function tracer (bnc#849362). - xhci: fix null pointer dereference on ring_doorbell_for_active_rings (bnc#848255). - xhci: Fix oops happening after address device timeout (bnc#848255). - xhci: Ensure a command structure points to the correct trb on the command ring (bnc#848255). - patches.arch/iommu-vt-d-remove-stack-trace-from-broken-irq-r emapping-warning.patch: Update upstream reference. - Allow NFSv4 username mapping to work properly (bnc#838024). - Refresh btrfs attribute publishing patchset to match openSUSE-13.1 No user-visible changes, but uses kobj_sysfs_ops and better kobject lifetime management. - Fix a few incorrectly checked [io_]remap_pfn_range() calls (bnc#849021, CVE-2013-4511). - drm/radeon: don't set hpd, afmt interrupts when interrupts are disabled. - patches.fixes/cifs-fill-TRANS2_QUERY_FILE_INFO-ByteCount-fie lds.patch: Fix TRANS2_QUERY_FILE_INFO ByteCount fields (bnc#804950). - iommu: Remove stack trace from broken irq remapping warning (bnc#844513). - Disable patches related to bnc#840656 patches.suse/btrfs-cleanup-don-t-check-the-same-thing-twice patches.suse/btrfs-0220-fix-for-patch-cleanup-don-t-check-th e-same-thi.patch - btrfs: use feature attribute names to print better error messages. - btrfs: add ability to change features via sysfs. - btrfs: add publishing of unknown features in sysfs. - btrfs: publish per-super features to sysfs. - btrfs: add per-super attributes to sysfs. - btrfs: export supported featured to sysfs. - kobject: introduce kobj_completion. - btrfs: add ioctls to query/change feature bits online. - btrfs: use btrfs_commit_transaction when setting fslabel. - x86/iommu/vt-d: Expand interrupt remapping quirk to cover x58 chipset (bnc#844513). - NFSv4: Fix issues in nfs4_discover_server_trunking (bnc#811746). - iommu/vt-d: add quirk for broken interrupt remapping on 55XX chipsets (bnc#844513). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2014-113 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): kernel-default-3.7.10-1.28.1 kernel-default-base-3.7.10-1.28.1 kernel-default-base-debuginfo-3.7.10-1.28.1 kernel-default-debuginfo-3.7.10-1.28.1 kernel-default-debugsource-3.7.10-1.28.1 kernel-default-devel-3.7.10-1.28.1 kernel-default-devel-debuginfo-3.7.10-1.28.1 kernel-syms-3.7.10-1.28.1 - openSUSE 12.3 (i686 x86_64): kernel-debug-3.7.10-1.28.1 kernel-debug-base-3.7.10-1.28.1 kernel-debug-base-debuginfo-3.7.10-1.28.1 kernel-debug-debuginfo-3.7.10-1.28.1 kernel-debug-debugsource-3.7.10-1.28.1 kernel-debug-devel-3.7.10-1.28.1 kernel-debug-devel-debuginfo-3.7.10-1.28.1 kernel-desktop-3.7.10-1.28.1 kernel-desktop-base-3.7.10-1.28.1 kernel-desktop-base-debuginfo-3.7.10-1.28.1 kernel-desktop-debuginfo-3.7.10-1.28.1 kernel-desktop-debugsource-3.7.10-1.28.1 kernel-desktop-devel-3.7.10-1.28.1 kernel-desktop-devel-debuginfo-3.7.10-1.28.1 kernel-ec2-3.7.10-1.28.1 kernel-ec2-base-3.7.10-1.28.1 kernel-ec2-base-debuginfo-3.7.10-1.28.1 kernel-ec2-debuginfo-3.7.10-1.28.1 kernel-ec2-debugsource-3.7.10-1.28.1 kernel-ec2-devel-3.7.10-1.28.1 kernel-ec2-devel-debuginfo-3.7.10-1.28.1 kernel-trace-3.7.10-1.28.1 kernel-trace-base-3.7.10-1.28.1 kernel-trace-base-debuginfo-3.7.10-1.28.1 kernel-trace-debuginfo-3.7.10-1.28.1 kernel-trace-debugsource-3.7.10-1.28.1 kernel-trace-devel-3.7.10-1.28.1 kernel-trace-devel-debuginfo-3.7.10-1.28.1 kernel-vanilla-3.7.10-1.28.1 kernel-vanilla-debuginfo-3.7.10-1.28.1 kernel-vanilla-debugsource-3.7.10-1.28.1 kernel-vanilla-devel-3.7.10-1.28.1 kernel-vanilla-devel-debuginfo-3.7.10-1.28.1 kernel-xen-3.7.10-1.28.1 kernel-xen-base-3.7.10-1.28.1 kernel-xen-base-debuginfo-3.7.10-1.28.1 kernel-xen-debuginfo-3.7.10-1.28.1 kernel-xen-debugsource-3.7.10-1.28.1 kernel-xen-devel-3.7.10-1.28.1 kernel-xen-devel-debuginfo-3.7.10-1.28.1 - openSUSE 12.3 (noarch): kernel-devel-3.7.10-1.28.1 kernel-docs-3.7.10-1.28.2 kernel-source-3.7.10-1.28.1 kernel-source-vanilla-3.7.10-1.28.1 - openSUSE 12.3 (i686): kernel-pae-3.7.10-1.28.1 kernel-pae-base-3.7.10-1.28.1 kernel-pae-base-debuginfo-3.7.10-1.28.1 kernel-pae-debuginfo-3.7.10-1.28.1 kernel-pae-debugsource-3.7.10-1.28.1 kernel-pae-devel-3.7.10-1.28.1 kernel-pae-devel-debuginfo-3.7.10-1.28.1 References: http://support.novell.com/security/cve/CVE-2013-0343.html http://support.novell.com/security/cve/CVE-2013-1792.html http://support.novell.com/security/cve/CVE-2013-4348.html http://support.novell.com/security/cve/CVE-2013-4511.html http://support.novell.com/security/cve/CVE-2013-4513.html http://support.novell.com/security/cve/CVE-2013-4514.html http://support.novell.com/security/cve/CVE-2013-4515.html http://support.novell.com/security/cve/CVE-2013-4587.html http://support.novell.com/security/cve/CVE-2013-6367.html http://support.novell.com/security/cve/CVE-2013-6368.html http://support.novell.com/security/cve/CVE-2013-6376.html http://support.novell.com/security/cve/CVE-2013-6378.html http://support.novell.com/security/cve/CVE-2013-6380.html http://support.novell.com/security/cve/CVE-2013-6431.html http://support.novell.com/security/cve/CVE-2013-7027.html http://support.novell.com/security/cve/CVE-2014-0038.html https://bugzilla.novell.com/804950 https://bugzilla.novell.com/805226 https://bugzilla.novell.com/808358 https://bugzilla.novell.com/811746 https://bugzilla.novell.com/825006 https://bugzilla.novell.com/831836 https://bugzilla.novell.com/838024 https://bugzilla.novell.com/840226 https://bugzilla.novell.com/840656 https://bugzilla.novell.com/844513 https://bugzilla.novell.com/848079 https://bugzilla.novell.com/848255 https://bugzilla.novell.com/849021 https://bugzilla.novell.com/849023 https://bugzilla.novell.com/849029 https://bugzilla.novell.com/849034 https://bugzilla.novell.com/849362 https://bugzilla.novell.com/852373 https://bugzilla.novell.com/852558 https://bugzilla.novell.com/852559 https://bugzilla.novell.com/853050 https://bugzilla.novell.com/853051 https://bugzilla.novell.com/853052 https://bugzilla.novell.com/853053 https://bugzilla.novell.com/854173 https://bugzilla.novell.com/854634 https://bugzilla.novell.com/854722 https://bugzilla.novell.com/860993

1 0