March 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2014:0419-1: important: Mozilla updates 2014/03
by opensuse-security＠opensuse.org 21 Mar '14

21 Mar '14

openSUSE Security Update: Mozilla updates 2014/03 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0419-1 Rating: important References: #861847 #862831 #865539 #868603 Cross-References: CVE-2014-1477 CVE-2014-1478 CVE-2014-1479 CVE-2014-1480 CVE-2014-1481 CVE-2014-1482 CVE-2014-1483 CVE-2014-1485 CVE-2014-1486 CVE-2014-1487 CVE-2014-1488 CVE-2014-1490 CVE-2014-1491 CVE-2014-1493 CVE-2014-1494 CVE-2014-1497 CVE-2014-1498 CVE-2014-1499 CVE-2014-1500 CVE-2014-1502 CVE-2014-1504 CVE-2014-1505 CVE-2014-1508 CVE-2014-1509 CVE-2014-1510 CVE-2014-1511 CVE-2014-1512 CVE-2014-1513 CVE-2014-1514 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: This patch contains a collection of security relevant updates for Mozilla applications. Update Firefox to 24.4.0 (bnc#868603) Update Thunderbird to 24.4.0 Update NSPR to 4.10.4 Update NSS to 3.15.5 * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494 Miscellaneous memory safety hazards * MFSA 2014-17/CVE-2014-1497 (bmo#966311) Out of bounds read during WAV file decoding * MFSA 2014-26/CVE-2014-1508 (bmo#963198) Information disclosure through polygon rendering in MathML * MFSA 2014-27/CVE-2014-1509 (bmo#966021) Memory corruption in Cairo during PDF font rendering * MFSA 2014-28/CVE-2014-1505 (bmo#941887) SVG filters information disclosure through feDisplacementMap * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909) Privilege escalation using WebIDL-implemented APIs * MFSA 2014-30/CVE-2014-1512 (bmo#982957) Use-after-free in TypeObject * MFSA 2014-31/CVE-2014-1513 (bmo#982974) Out-of-bounds read/write through neutering ArrayBuffer objects * MFSA 2014-32/CVE-2014-1514 (bmo#983344) Out-of-bounds write through TypedArrayObject after neutering Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-37 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): MozillaFirefox-24.4.0-107.3 MozillaFirefox-branding-upstream-24.4.0-107.3 MozillaFirefox-buildsymbols-24.4.0-107.3 MozillaFirefox-debuginfo-24.4.0-107.3 MozillaFirefox-debugsource-24.4.0-107.3 MozillaFirefox-devel-24.4.0-107.3 MozillaFirefox-translations-common-24.4.0-107.3 MozillaFirefox-translations-other-24.4.0-107.3 MozillaThunderbird-24.4.0-89.2 MozillaThunderbird-buildsymbols-24.4.0-89.2 MozillaThunderbird-debuginfo-24.4.0-89.2 MozillaThunderbird-debugsource-24.4.0-89.2 MozillaThunderbird-devel-24.4.0-89.2 MozillaThunderbird-translations-common-24.4.0-89.2 MozillaThunderbird-translations-other-24.4.0-89.2 enigmail-1.6.0+24.4.0-89.2 libfreebl3-3.15.5-82.1 libfreebl3-debuginfo-3.15.5-82.1 libsoftokn3-3.15.5-82.1 libsoftokn3-debuginfo-3.15.5-82.1 mozilla-nspr-4.10.4-40.1 mozilla-nspr-debuginfo-4.10.4-40.1 mozilla-nspr-debugsource-4.10.4-40.1 mozilla-nspr-devel-4.10.4-40.1 mozilla-nss-3.15.5-82.1 mozilla-nss-certs-3.15.5-82.1 mozilla-nss-certs-debuginfo-3.15.5-82.1 mozilla-nss-debuginfo-3.15.5-82.1 mozilla-nss-debugsource-3.15.5-82.1 mozilla-nss-devel-3.15.5-82.1 mozilla-nss-sysinit-3.15.5-82.1 mozilla-nss-sysinit-debuginfo-3.15.5-82.1 mozilla-nss-tools-3.15.5-82.1 mozilla-nss-tools-debuginfo-3.15.5-82.1 - openSUSE 11.4 (x86_64): libfreebl3-32bit-3.15.5-82.1 libfreebl3-debuginfo-32bit-3.15.5-82.1 libsoftokn3-32bit-3.15.5-82.1 libsoftokn3-debuginfo-32bit-3.15.5-82.1 mozilla-nspr-32bit-4.10.4-40.1 mozilla-nspr-debuginfo-32bit-4.10.4-40.1 mozilla-nss-32bit-3.15.5-82.1 mozilla-nss-certs-32bit-3.15.5-82.1 mozilla-nss-certs-debuginfo-32bit-3.15.5-82.1 mozilla-nss-debuginfo-32bit-3.15.5-82.1 mozilla-nss-sysinit-32bit-3.15.5-82.1 mozilla-nss-sysinit-debuginfo-32bit-3.15.5-82.1 - openSUSE 11.4 (ia64): libfreebl3-debuginfo-x86-3.15.5-82.1 libfreebl3-x86-3.15.5-82.1 libsoftokn3-debuginfo-x86-3.15.5-82.1 libsoftokn3-x86-3.15.5-82.1 mozilla-nspr-debuginfo-x86-4.10.4-40.1 mozilla-nspr-x86-4.10.4-40.1 mozilla-nss-certs-debuginfo-x86-3.15.5-82.1 mozilla-nss-certs-x86-3.15.5-82.1 mozilla-nss-debuginfo-x86-3.15.5-82.1 mozilla-nss-sysinit-debuginfo-x86-3.15.5-82.1 mozilla-nss-sysinit-x86-3.15.5-82.1 mozilla-nss-x86-3.15.5-82.1 References: http://support.novell.com/security/cve/CVE-2014-1477.html http://support.novell.com/security/cve/CVE-2014-1478.html http://support.novell.com/security/cve/CVE-2014-1479.html http://support.novell.com/security/cve/CVE-2014-1480.html http://support.novell.com/security/cve/CVE-2014-1481.html http://support.novell.com/security/cve/CVE-2014-1482.html http://support.novell.com/security/cve/CVE-2014-1483.html http://support.novell.com/security/cve/CVE-2014-1485.html http://support.novell.com/security/cve/CVE-2014-1486.html http://support.novell.com/security/cve/CVE-2014-1487.html http://support.novell.com/security/cve/CVE-2014-1488.html http://support.novell.com/security/cve/CVE-2014-1490.html http://support.novell.com/security/cve/CVE-2014-1491.html http://support.novell.com/security/cve/CVE-2014-1493.html http://support.novell.com/security/cve/CVE-2014-1494.html http://support.novell.com/security/cve/CVE-2014-1497.html http://support.novell.com/security/cve/CVE-2014-1498.html http://support.novell.com/security/cve/CVE-2014-1499.html http://support.novell.com/security/cve/CVE-2014-1500.html http://support.novell.com/security/cve/CVE-2014-1502.html http://support.novell.com/security/cve/CVE-2014-1504.html http://support.novell.com/security/cve/CVE-2014-1505.html http://support.novell.com/security/cve/CVE-2014-1508.html http://support.novell.com/security/cve/CVE-2014-1509.html http://support.novell.com/security/cve/CVE-2014-1510.html http://support.novell.com/security/cve/CVE-2014-1511.html http://support.novell.com/security/cve/CVE-2014-1512.html http://support.novell.com/security/cve/CVE-2014-1513.html http://support.novell.com/security/cve/CVE-2014-1514.html https://bugzilla.novell.com/861847 https://bugzilla.novell.com/862831 https://bugzilla.novell.com/865539 https://bugzilla.novell.com/868603

1 0

openSUSE-RU-2014:0416-1: radvd: fix the radvd.service file to use /etc/sysconfig/radvd
by maintenance＠opensuse.org 21 Mar '14

21 Mar '14

openSUSE Recommended Update: radvd: fix the radvd.service file to use /etc/sysconfig/radvd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0416-1 Rating: low References: #854316 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with radvd: - bnc#854316: fix the radvd.service file to use /etc/sysconfig/radvd Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-236 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): radvd-1.9.rc1_git201206030100-5.4.1 radvd-debuginfo-1.9.rc1_git201206030100-5.4.1 radvd-debugsource-1.9.rc1_git201206030100-5.4.1 References: https://bugzilla.novell.com/854316

1 0

openSUSE-RU-2014:0415-1: pam: remove 'libtirpc' support from 'pam'
by maintenance＠opensuse.org 21 Mar '14

21 Mar '14

openSUSE Recommended Update: pam: remove 'libtirpc' support from 'pam' ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0415-1 Rating: low References: #853944 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update removes 'libtirpc' support from 'pam'. This is needed before the new, fixed, libtirpc can be included into openSUSE:13.1. The effect on pam is that NIS lookup in pam_unix does not work over IPv6. (bnc#853944) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-235 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): pam-1.1.8-6.1 pam-debuginfo-1.1.8-6.1 pam-debugsource-1.1.8-6.1 pam-devel-1.1.8-6.1 - openSUSE 13.1 (x86_64): pam-32bit-1.1.8-6.1 pam-debuginfo-32bit-1.1.8-6.1 pam-devel-32bit-1.1.8-6.1 - openSUSE 13.1 (noarch): pam-doc-1.1.8-6.1 References: https://bugzilla.novell.com/853944

1 0

openSUSE-RU-2014:0410-1: oxygen-gtk3: Update to latest bugfix release 1.3.4
by maintenance＠opensuse.org 20 Mar '14

20 Mar '14

openSUSE Recommended Update: oxygen-gtk3: Update to latest bugfix release 1.3.4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0410-1 Rating: low References: #867253 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with oxygen-gtk3: - Update from version 1.2.0 to version 1.3.4 (no changelog provided from upstream) - Bump minimal pkgconfig(gtk+-3.0) BuildRequires to >= 3.10.0 - bnc#867253: Fixed segfault in gnucash 2.6.2 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-231 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): gtk3-engine-oxygen-1.3.4-2.4.1 gtk3-engine-oxygen-debuginfo-1.3.4-2.4.1 gtk3-theme-oxygen-1.3.4-2.4.1 gtk3-theme-oxygen-debuginfo-1.3.4-2.4.1 oxygen-gtk3-debugsource-1.3.4-2.4.1 - openSUSE 13.1 (x86_64): gtk3-engine-oxygen-32bit-1.3.4-2.4.1 gtk3-engine-oxygen-debuginfo-32bit-1.3.4-2.4.1 gtk3-theme-oxygen-debuginfo-32bit-1.3.4-2.4.1 References: https://bugzilla.novell.com/867253

1 0

openSUSE-RU-2014:0409-1: ipsec-tools: Two recommended fixes
by maintenance＠opensuse.org 20 Mar '14

20 Mar '14

openSUSE Recommended Update: ipsec-tools: Two recommended fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0409-1 Rating: low References: #856625 #867055 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues with ipsec-tools: - bnc#856625: add RemainAfterExit=yes to the .service file - bnc#867055: Remove ipsec-tools-linux-3.7-compat.diff which caused bnc#867055 by including wrong headers; fix by installing linux-glibc-devel and including /usr/include for kernel headers Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-233 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (x86_64): ipsec-tools-0.7.3-29.5.1 ipsec-tools-debuginfo-0.7.3-29.5.1 ipsec-tools-debugsource-0.7.3-29.5.1 - openSUSE 13.1 (i586): ipsec-tools-0.7.3-29.5.2 ipsec-tools-debuginfo-0.7.3-29.5.2 ipsec-tools-debugsource-0.7.3-29.5.2 References: https://bugzilla.novell.com/856625 https://bugzilla.novell.com/867055

1 0

openSUSE-RU-2014:0408-1: moderate: osc: Update to current version 0.144.1
by maintenance＠opensuse.org 20 Mar '14

20 Mar '14

openSUSE Recommended Update: osc: Update to current version 0.144.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0408-1 Rating: moderate References: #699224 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with osc: - 0.144.1 + fixed "osc meta pkg -e" regression for special package names - 0.144.0 + allow commiting to package sources from linked projects. osc will ask to branch it first. + group support in bugowner and maintainer command - 0.143.0 + add option to add a auto-accept in future for delete requests (handy for admins) + many bugfixes: * plugin loading * bugowner handling * download of server side generated source "up -S" * wipebinaries command - bnc#699224: Include COPYING file Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-232 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): osc-0.144.1-2.8.1 References: https://bugzilla.novell.com/699224

1 0

openSUSE-RU-2014:0407-1: ipsec-tools: One recommended fix
by maintenance＠opensuse.org 20 Mar '14

20 Mar '14

openSUSE Recommended Update: ipsec-tools: One recommended fix ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0407-1 Rating: low References: #867055 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with ipsec-tools: - Remove ipsec-tools-linux-3.7-compat.diff which caused bnc#867055 by including wrong headers; fix by installing linux-glibc-devel and including /usr/include for kernel headers Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2014-234 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): ipsec-tools-0.7.3-26.5.1 ipsec-tools-debuginfo-0.7.3-26.5.1 ipsec-tools-debugsource-0.7.3-26.5.1 References: https://bugzilla.novell.com/867055

1 0

openSUSE-RU-2014:0406-1: oxygen-gtk2: Update to latest bugfix release 1.4.4
by maintenance＠opensuse.org 20 Mar '14

20 Mar '14

openSUSE Recommended Update: oxygen-gtk2: Update to latest bugfix release 1.4.4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0406-1 Rating: low References: #867253 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with oxygen-gtk2: - Update from version 1.4.0 to version 1.4.4 (no changelog provided from upstream) + fixes for kde#329112, kde#324438, kde#328495 and kde#325196. + bnc#867253: Fixed segfault in gnucash 2.6.2 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-230 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): gtk2-engine-oxygen-1.4.4-2.4.1 gtk2-engine-oxygen-debuginfo-1.4.4-2.4.1 gtk2-theme-oxygen-1.4.4-2.4.1 gtk2-theme-oxygen-debuginfo-1.4.4-2.4.1 oxygen-gtk2-debugsource-1.4.4-2.4.1 - openSUSE 13.1 (x86_64): gtk2-engine-oxygen-32bit-1.4.4-2.4.1 gtk2-engine-oxygen-debuginfo-32bit-1.4.4-2.4.1 gtk2-theme-oxygen-debuginfo-32bit-1.4.4-2.4.1 References: https://bugzilla.novell.com/867253

1 0

openSUSE-SU-2014:0405-1: moderate: samba: security and bugfix update
by opensuse-security＠opensuse.org 20 Mar '14

20 Mar '14

openSUSE Security Update: samba: security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0405-1 Rating: moderate References: #437293 #741623 #755663 #786677 #844307 #844720 #849224 #853021 #853347 #854520 #863748 #865561 Cross-References: CVE-2012-6150 CVE-2013-4408 CVE-2013-4496 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has 9 fixes is now available. Description: Samba was updated to fix security issues and bugs: Security issues fixed: - Password lockout was not enforced for SAMR password changes, this allowed brute force attacks on passwords. CVE-2013-4496; (bnc#849224). - The DCE-RPC fragment length field is incorrectly checked, which could expose samba clients to buffer overflow exploits caused by malicious servers; CVE-2013-4408; (bnc#844720). - The pam_winbind login without require_membership_of restrictions could allow fallbacks to local users even if they were not intended to be allowed; CVE-2012-6150; (bnc#853347). Also non security bugs were fixed: - Fix problem with server taking too long to respond to a MSG_PRINTER_DRVUPGRADE message; (bso#9942); (bnc#863748). - Fix memory leak in printer_list_get_printer(); (bso#9993); (bnc#865561). - Depend on %version-%release with all manual Provides and Requires; (bnc#844307). - Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293). - Fix Winbind 100% CPU utilization caused by domain list corruption; (bso#10358); (bnc#786677). - Samba is chatty about being unable to open a printer; (bso#10118). - nsswitch: Fix short writes in winbind_write_sock; (bso#10195). - xattr: fix listing EAs on *BSD for non-root users; (bso#10247). - spoolss: accept XPS_PASS datatype used by Windows 8; (bso#10267). - The preceding bugs are tracked by (bnc#854520) too. - Make use of the full gpg pub key file name including the key ID. - Remove bogus libsmbclient0 package description and cleanup the libsmbclient line from baselibs.conf; (bnc#853021). - Allow smbcacls to take a '--propagate-inheritance' flag to indicate that the add, delete, modify and set operations now support automatic propagation of inheritable ACE(s); (FATE#316474). - Attempt to use samlogon validation level 6; (bso#7945); (bnc#741623). - Recover from ncacn_ip_tcp ACCESS_DENIED/SEC_PKG_ERROR lsa errors; (bso#7944); (bnc#755663). - Fix lsa_LookupSids3 and lsa_LookupNames4 arguments. - Use simplified smb signing infrastructure; (bnc#741623). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2014-229 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libnetapi-devel-3.6.12-59.19.1 libnetapi0-3.6.12-59.19.1 libnetapi0-debuginfo-3.6.12-59.19.1 libsmbclient-devel-3.6.12-59.19.1 libsmbclient0-3.6.12-59.19.1 libsmbclient0-debuginfo-3.6.12-59.19.1 libsmbsharemodes-devel-3.6.12-59.19.1 libsmbsharemodes0-3.6.12-59.19.1 libsmbsharemodes0-debuginfo-3.6.12-59.19.1 libwbclient-devel-3.6.12-59.19.1 libwbclient0-3.6.12-59.19.1 libwbclient0-debuginfo-3.6.12-59.19.1 samba-3.6.12-59.19.1 samba-client-3.6.12-59.19.1 samba-client-debuginfo-3.6.12-59.19.1 samba-debuginfo-3.6.12-59.19.1 samba-debugsource-3.6.12-59.19.1 samba-devel-3.6.12-59.19.1 samba-krb-printing-3.6.12-59.19.1 samba-krb-printing-debuginfo-3.6.12-59.19.1 samba-winbind-3.6.12-59.19.1 samba-winbind-debuginfo-3.6.12-59.19.1 - openSUSE 12.3 (x86_64): libsmbclient0-32bit-3.6.12-59.19.1 libsmbclient0-debuginfo-32bit-3.6.12-59.19.1 libwbclient0-32bit-3.6.12-59.19.1 libwbclient0-debuginfo-32bit-3.6.12-59.19.1 samba-32bit-3.6.12-59.19.1 samba-client-32bit-3.6.12-59.19.1 samba-client-debuginfo-32bit-3.6.12-59.19.1 samba-debuginfo-32bit-3.6.12-59.19.1 samba-winbind-32bit-3.6.12-59.19.1 samba-winbind-debuginfo-32bit-3.6.12-59.19.1 - openSUSE 12.3 (noarch): samba-doc-3.6.12-59.19.1 References: http://support.novell.com/security/cve/CVE-2012-6150.html http://support.novell.com/security/cve/CVE-2013-4408.html http://support.novell.com/security/cve/CVE-2013-4496.html https://bugzilla.novell.com/437293 https://bugzilla.novell.com/741623 https://bugzilla.novell.com/755663 https://bugzilla.novell.com/786677 https://bugzilla.novell.com/844307 https://bugzilla.novell.com/844720 https://bugzilla.novell.com/849224 https://bugzilla.novell.com/853021 https://bugzilla.novell.com/853347 https://bugzilla.novell.com/854520 https://bugzilla.novell.com/863748 https://bugzilla.novell.com/865561

1 0

openSUSE-SU-2014:0404-1: moderate: samba: security and bugfix update to 4.1.6
by opensuse-security＠opensuse.org 20 Mar '14

20 Mar '14

openSUSE Security Update: samba: security and bugfix update to 4.1.6 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0404-1 Rating: moderate References: #437293 #726937 #786677 #844307 #846586 #849224 #855866 #856759 #857454 #860648 #860809 #860832 #861135 #862370 #862558 #863079 #863748 #865095 #865397 #865561 #865641 #865771 #867665 Cross-References: CVE-2013-4496 CVE-2013-6442 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has 21 fixes is now available. Description: Samba was updated to 4.1.6, fixing bugs and security issues: - Password lockout not enforced for SAMR password changes, this allowed brute forcing of passwords; CVE-2013-4496; (bnc#849224). - smbcacls can remove a file or directory ACL by mistake; CVE-2013-6442; (bnc#855866). Also the following bugs were fixed: - Call update-apparmor-samba-profile via ExecStartPre too; (bnc#867665). - Retry named pipe open requests on STATUS_PIPE_NOT_AVAILABLE; (bso#10484); (bnc#865095). - Propagate snapshot enumeration permissions errors to SMB clients; (bnc#865641). - Properly handle empty 'requires_membership_of' entries in /etc/security/pam_winbind.conf; (bnc#865771). - Fix problem with server taking too long to respond to a MSG_PRINTER_DRVUPGRADE message; (bso#9942); (bnc#863748). - Fix memory leak in printer_list_get_printer(); (bso#9993); (bnc#865561). - Fix stream_depot VFS module on Btrfs; (bso#10467); (bnc#865397). - Use libarchive to provide improved smbclient tarmode functionality; (bso#9667); (bnc#861135). - Depend on %version-%release with all manual Provides and Requires; (bnc#844307). - Update to 4.1.5. + Fix 100% CPU utilization in winbindd when trying to free memory in winbindd_reinit_after_fork; (bso#10358); (bnc#786677). + smbd: Fix memory overwrites; (bso#10415). + s3-winbind: Improve performance of wb_fill_pwent_sid2uid_done(); (bso#2191). + ntlm_auth sometimes returns the wrong username to mod_ntlm_auth_winbind; (bso#10087). + s3: smbpasswd: Fix crashes on invalid input; (bso#10320). + s3: vfs_dirsort module: Allow dirsort to work when multiple simultaneous directories are open; (bso#10406). + Add support for Heimdal's unified krb5 and hdb plugin system, cope with first element in hdb_method having a different name in different heimdal versions and fix INTERNAL ERROR: Signal 11 in the kdc pid; (bso#10418). + vfs_btrfs: Fix incorrect zero length server-side copy request handling; (bso#10424). + s3: modules: streaminfo: As we have no VFS function SMB_VFS_LLISTXATTR we can't cope with a symlink when lp_posix_pathnames() is true; (bso#10429). + smbd: Fix an ancient oplock bug; (bso#10436). + Fix crash bug in smb2_notify code; (bso#10442). - Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293). - Migrate @GMT token parsing functionality into vfs_snapper; (bnc#863079). + Improve vfs_snapper documentation. - Fix Winbind 100% CPU utilization caused by domain list corruption; (bso#10358); (bnc#786677). - Fix memory overwrite in FSCTL_VALIDATE_NEGOTIATE_INFO handler; (bso#10415); (bnc#862370). - Streamline the vendor suffix handling and add support for SLE 12. - Fix zero length server-side copy request handling; (bso#10424); (bnc#862558). - Set the PID directory to /run/samba on post-12.2 systems. - Make use of the tmpfilesdir macro while calling systemd-tmpfiles. - Make winbindd print the interface version when it gets an INTERFACE_VERSION request; (bnc#726937). - Fix vfs_btrfs build on older platforms with duplicate WRITE_FLUSH definitions; (bnc#860832). - Check for NULL gensec_security in gensec_security_by_auth_type(); (bnc#860809). - Ensure ndr table initialization; (bnc#860648). - Add File Server Remote VSS Protocol (FSRVP) server for SMB share shadow-copies; (fate#313346). - s3-dir: Fix the DOS clients against 64-bit smbd's; (bso#2662). - shadow_copy2: module "Previous Version" not working in Windows 7; (bso#10259). - s3-passdb: Fix string duplication to pointers; (bso#10367). - vfs/glusterfs: in case atime is not passed, set it to the current atime; (bso#10384) - s3: winbindd: Move calling setup_domain_child() into add_trusted_domain(); (bso#10358); (bnc#786677). - Default sysconfig daemon options to -D; (bso#10388); (bnc#857454). - Add /var/cache/samba to the client file list; (bnc#846586). - Really add the WINBINDDOPTIONS sysconfig variable on install; (bnc#857454). - Correct sysconfig variable names by adding the missing D char; (bnc#857454). - Update to 4.1.4. + Fix segfault in smbd; (bso#10284). + Fix SMB2 server panic when a smb2 brlock times out; (bso#10311). - Call stop_on_removal from preun and restart_on_update and insserv_cleanup from postun on pre-12.3 systems only; (bnc#857454). - BuildRequire gamin-devel instead of unmaintained fam-devel package on post-12.1 systems. - smbd: allow updates on directory write times on open handles; (bso#9870). - lib/util: use proper include for struct stat; (bso#10276). - s3:winbindd fix use of uninitialized variables; (bso#10280). - s3-winbindd: Fix DEBUG statement in winbind_msg_offline(); (bso#10285). - s3-lib: Fix %G substitution for domain users in smbd; (bso#10286). - smbd: Always use UCF_PREP_CREATEFILE for filename_convert calls to resolve a path for open; (bso#10297). - smb2_server processing overhead; (bso#10298). - ldb: bad if test in ldb_comparison_fold(); (bso#10305). - Fix AIO with SMB2 and locks; (bso#10310). - smbd: Fix a panic when a smb2 brlock times out; (bso#10311). - vfs_glusterfs: Enable per client log file; (bso#10337). - Add /etc/sysconfig/samba to the main and winbind package; (bnc#857454). - Create /var/run/samba with systemd-tmpfiles on post-12.2 systems; (bnc#856759). - Fix broken rc{nmb,smb,winbind} sym links which should point to the service binary on post-12.2 systems; (bnc#856759). - Add Snapper VFS module for snapshot manipulation; (fate#313347). + dbus-1-devel required at build time. - Add File Server Remote VSS Protocol (FSRVP) client for SMB share shadow-copies; (fate#313345). - Do not BuildRequire perl ExtUtils::MakeMaker and Parse::Yapp as they're part of the minimum build environment. - Allow smbcacls to take a '--propagate-inheritance' flag to indicate that the add, delete, modify and set operations now support automatic propagation of inheritable ACE(s); (FATE#316474). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-228 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libdcerpc-atsvc-devel-4.1.6-3.18.1 libdcerpc-atsvc0-4.1.6-3.18.1 libdcerpc-atsvc0-debuginfo-4.1.6-3.18.1 libdcerpc-binding0-4.1.6-3.18.1 libdcerpc-binding0-debuginfo-4.1.6-3.18.1 libdcerpc-devel-4.1.6-3.18.1 libdcerpc-samr-devel-4.1.6-3.18.1 libdcerpc-samr0-4.1.6-3.18.1 libdcerpc-samr0-debuginfo-4.1.6-3.18.1 libdcerpc0-4.1.6-3.18.1 libdcerpc0-debuginfo-4.1.6-3.18.1 libgensec-devel-4.1.6-3.18.1 libgensec0-4.1.6-3.18.1 libgensec0-debuginfo-4.1.6-3.18.1 libndr-devel-4.1.6-3.18.1 libndr-krb5pac-devel-4.1.6-3.18.1 libndr-krb5pac0-4.1.6-3.18.1 libndr-krb5pac0-debuginfo-4.1.6-3.18.1 libndr-nbt-devel-4.1.6-3.18.1 libndr-nbt0-4.1.6-3.18.1 libndr-nbt0-debuginfo-4.1.6-3.18.1 libndr-standard-devel-4.1.6-3.18.1 libndr-standard0-4.1.6-3.18.1 libndr-standard0-debuginfo-4.1.6-3.18.1 libndr0-4.1.6-3.18.1 libndr0-debuginfo-4.1.6-3.18.1 libnetapi-devel-4.1.6-3.18.1 libnetapi0-4.1.6-3.18.1 libnetapi0-debuginfo-4.1.6-3.18.1 libpdb-devel-4.1.6-3.18.1 libpdb0-4.1.6-3.18.1 libpdb0-debuginfo-4.1.6-3.18.1 libregistry-devel-4.1.6-3.18.1 libregistry0-4.1.6-3.18.1 libregistry0-debuginfo-4.1.6-3.18.1 libsamba-credentials-devel-4.1.6-3.18.1 libsamba-credentials0-4.1.6-3.18.1 libsamba-credentials0-debuginfo-4.1.6-3.18.1 libsamba-hostconfig-devel-4.1.6-3.18.1 libsamba-hostconfig0-4.1.6-3.18.1 libsamba-hostconfig0-debuginfo-4.1.6-3.18.1 libsamba-policy-devel-4.1.6-3.18.1 libsamba-policy0-4.1.6-3.18.1 libsamba-policy0-debuginfo-4.1.6-3.18.1 libsamba-util-devel-4.1.6-3.18.1 libsamba-util0-4.1.6-3.18.1 libsamba-util0-debuginfo-4.1.6-3.18.1 libsamdb-devel-4.1.6-3.18.1 libsamdb0-4.1.6-3.18.1 libsamdb0-debuginfo-4.1.6-3.18.1 libsmbclient-devel-4.1.6-3.18.1 libsmbclient-raw-devel-4.1.6-3.18.1 libsmbclient-raw0-4.1.6-3.18.1 libsmbclient-raw0-debuginfo-4.1.6-3.18.1 libsmbclient0-4.1.6-3.18.1 libsmbclient0-debuginfo-4.1.6-3.18.1 libsmbconf-devel-4.1.6-3.18.1 libsmbconf0-4.1.6-3.18.1 libsmbconf0-debuginfo-4.1.6-3.18.1 libsmbldap-devel-4.1.6-3.18.1 libsmbldap0-4.1.6-3.18.1 libsmbldap0-debuginfo-4.1.6-3.18.1 libsmbsharemodes-devel-4.1.6-3.18.1 libsmbsharemodes0-4.1.6-3.18.1 libsmbsharemodes0-debuginfo-4.1.6-3.18.1 libtevent-util-devel-4.1.6-3.18.1 libtevent-util0-4.1.6-3.18.1 libtevent-util0-debuginfo-4.1.6-3.18.1 libwbclient-devel-4.1.6-3.18.1 libwbclient0-4.1.6-3.18.1 libwbclient0-debuginfo-4.1.6-3.18.1 samba-4.1.6-3.18.1 samba-client-4.1.6-3.18.1 samba-client-debuginfo-4.1.6-3.18.1 samba-core-devel-4.1.6-3.18.1 samba-debuginfo-4.1.6-3.18.1 samba-debugsource-4.1.6-3.18.1 samba-libs-4.1.6-3.18.1 samba-libs-debuginfo-4.1.6-3.18.1 samba-pidl-4.1.6-3.18.1 samba-python-4.1.6-3.18.1 samba-python-debuginfo-4.1.6-3.18.1 samba-test-4.1.6-3.18.1 samba-test-debuginfo-4.1.6-3.18.1 samba-test-devel-4.1.6-3.18.1 samba-winbind-4.1.6-3.18.1 samba-winbind-debuginfo-4.1.6-3.18.1 - openSUSE 13.1 (x86_64): libdcerpc-atsvc0-32bit-4.1.6-3.18.1 libdcerpc-atsvc0-debuginfo-32bit-4.1.6-3.18.1 libdcerpc-binding0-32bit-4.1.6-3.18.1 libdcerpc-binding0-debuginfo-32bit-4.1.6-3.18.1 libdcerpc-samr0-32bit-4.1.6-3.18.1 libdcerpc-samr0-debuginfo-32bit-4.1.6-3.18.1 libdcerpc0-32bit-4.1.6-3.18.1 libdcerpc0-debuginfo-32bit-4.1.6-3.18.1 libgensec0-32bit-4.1.6-3.18.1 libgensec0-debuginfo-32bit-4.1.6-3.18.1 libndr-krb5pac0-32bit-4.1.6-3.18.1 libndr-krb5pac0-debuginfo-32bit-4.1.6-3.18.1 libndr-nbt0-32bit-4.1.6-3.18.1 libndr-nbt0-debuginfo-32bit-4.1.6-3.18.1 libndr-standard0-32bit-4.1.6-3.18.1 libndr-standard0-debuginfo-32bit-4.1.6-3.18.1 libndr0-32bit-4.1.6-3.18.1 libndr0-debuginfo-32bit-4.1.6-3.18.1 libnetapi0-32bit-4.1.6-3.18.1 libnetapi0-debuginfo-32bit-4.1.6-3.18.1 libpdb0-32bit-4.1.6-3.18.1 libpdb0-debuginfo-32bit-4.1.6-3.18.1 libregistry0-32bit-4.1.6-3.18.1 libregistry0-debuginfo-32bit-4.1.6-3.18.1 libsamba-credentials0-32bit-4.1.6-3.18.1 libsamba-credentials0-debuginfo-32bit-4.1.6-3.18.1 libsamba-hostconfig0-32bit-4.1.6-3.18.1 libsamba-hostconfig0-debuginfo-32bit-4.1.6-3.18.1 libsamba-policy0-32bit-4.1.6-3.18.1 libsamba-policy0-debuginfo-32bit-4.1.6-3.18.1 libsamba-util0-32bit-4.1.6-3.18.1 libsamba-util0-debuginfo-32bit-4.1.6-3.18.1 libsamdb0-32bit-4.1.6-3.18.1 libsamdb0-debuginfo-32bit-4.1.6-3.18.1 libsmbclient-raw0-32bit-4.1.6-3.18.1 libsmbclient-raw0-debuginfo-32bit-4.1.6-3.18.1 libsmbclient0-32bit-4.1.6-3.18.1 libsmbclient0-debuginfo-32bit-4.1.6-3.18.1 libsmbconf0-32bit-4.1.6-3.18.1 libsmbconf0-debuginfo-32bit-4.1.6-3.18.1 libsmbldap0-32bit-4.1.6-3.18.1 libsmbldap0-debuginfo-32bit-4.1.6-3.18.1 libtevent-util0-32bit-4.1.6-3.18.1 libtevent-util0-debuginfo-32bit-4.1.6-3.18.1 libwbclient0-32bit-4.1.6-3.18.1 libwbclient0-debuginfo-32bit-4.1.6-3.18.1 samba-32bit-4.1.6-3.18.1 samba-client-32bit-4.1.6-3.18.1 samba-client-debuginfo-32bit-4.1.6-3.18.1 samba-debuginfo-32bit-4.1.6-3.18.1 samba-libs-32bit-4.1.6-3.18.1 samba-libs-debuginfo-32bit-4.1.6-3.18.1 samba-winbind-32bit-4.1.6-3.18.1 samba-winbind-debuginfo-32bit-4.1.6-3.18.1 - openSUSE 13.1 (noarch): samba-doc-4.1.6-3.18.1 References: http://support.novell.com/security/cve/CVE-2013-4496.html http://support.novell.com/security/cve/CVE-2013-6442.html https://bugzilla.novell.com/437293 https://bugzilla.novell.com/726937 https://bugzilla.novell.com/786677 https://bugzilla.novell.com/844307 https://bugzilla.novell.com/846586 https://bugzilla.novell.com/849224 https://bugzilla.novell.com/855866 https://bugzilla.novell.com/856759 https://bugzilla.novell.com/857454 https://bugzilla.novell.com/860648 https://bugzilla.novell.com/860809 https://bugzilla.novell.com/860832 https://bugzilla.novell.com/861135 https://bugzilla.novell.com/862370 https://bugzilla.novell.com/862558 https://bugzilla.novell.com/863079 https://bugzilla.novell.com/863748 https://bugzilla.novell.com/865095 https://bugzilla.novell.com/865397 https://bugzilla.novell.com/865561 https://bugzilla.novell.com/865641 https://bugzilla.novell.com/865771 https://bugzilla.novell.com/867665

1 0