July 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2014:0890-1: moderate: python, python3: Fixed JSON module
by opensuse-security＠opensuse.org 12 Jul '14

12 Jul '14

openSUSE Security Update: python, python3: Fixed JSON module ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0890-1 Rating: moderate References: #884075 Cross-References: CVE-2014-4616 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: python and python3 were updated to fix one security issue. This security issue was fixed: - Missing boundary check in JSON module (CVE-2014-4616) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-458 - openSUSE 12.3: zypper in -t patch openSUSE-2014-458 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libpython2_7-1_0-2.7.6-8.10.1 libpython2_7-1_0-debuginfo-2.7.6-8.10.1 libpython3_3m1_0-3.3.5-5.12.1 libpython3_3m1_0-debuginfo-3.3.5-5.12.1 python-2.7.6-8.10.1 python-base-2.7.6-8.10.1 python-base-debuginfo-2.7.6-8.10.1 python-base-debugsource-2.7.6-8.10.1 python-curses-2.7.6-8.10.1 python-curses-debuginfo-2.7.6-8.10.1 python-debuginfo-2.7.6-8.10.1 python-debugsource-2.7.6-8.10.1 python-demo-2.7.6-8.10.1 python-devel-2.7.6-8.10.1 python-gdbm-2.7.6-8.10.1 python-gdbm-debuginfo-2.7.6-8.10.1 python-idle-2.7.6-8.10.1 python-tk-2.7.6-8.10.1 python-tk-debuginfo-2.7.6-8.10.1 python-xml-2.7.6-8.10.1 python-xml-debuginfo-2.7.6-8.10.1 python3-3.3.5-5.12.1 python3-base-3.3.5-5.12.1 python3-base-debuginfo-3.3.5-5.12.1 python3-base-debugsource-3.3.5-5.12.1 python3-curses-3.3.5-5.12.1 python3-curses-debuginfo-3.3.5-5.12.1 python3-dbm-3.3.5-5.12.1 python3-dbm-debuginfo-3.3.5-5.12.1 python3-debuginfo-3.3.5-5.12.1 python3-debugsource-3.3.5-5.12.1 python3-devel-3.3.5-5.12.1 python3-devel-debuginfo-3.3.5-5.12.1 python3-idle-3.3.5-5.12.1 python3-testsuite-3.3.5-5.12.1 python3-testsuite-debuginfo-3.3.5-5.12.1 python3-tk-3.3.5-5.12.1 python3-tk-debuginfo-3.3.5-5.12.1 python3-tools-3.3.5-5.12.1 - openSUSE 13.1 (x86_64): libpython2_7-1_0-32bit-2.7.6-8.10.1 libpython2_7-1_0-debuginfo-32bit-2.7.6-8.10.1 libpython3_3m1_0-32bit-3.3.5-5.12.1 libpython3_3m1_0-debuginfo-32bit-3.3.5-5.12.1 python-32bit-2.7.6-8.10.1 python-base-32bit-2.7.6-8.10.1 python-base-debuginfo-32bit-2.7.6-8.10.1 python-debuginfo-32bit-2.7.6-8.10.1 python3-32bit-3.3.5-5.12.1 python3-base-32bit-3.3.5-5.12.1 python3-base-debuginfo-32bit-3.3.5-5.12.1 python3-debuginfo-32bit-3.3.5-5.12.1 - openSUSE 13.1 (noarch): python-doc-2.7.6-8.10.1 python-doc-pdf-2.7.6-8.10.1 python3-doc-3.3.5-5.12.1 python3-doc-pdf-3.3.5-5.12.1 - openSUSE 12.3 (i586 x86_64): libpython2_7-1_0-2.7.3-10.16.1 libpython2_7-1_0-debuginfo-2.7.3-10.16.1 libpython3_3m1_0-3.3.0-6.19.1 libpython3_3m1_0-debuginfo-3.3.0-6.19.1 python-2.7.3-10.16.1 python-base-2.7.3-10.16.1 python-base-debuginfo-2.7.3-10.16.1 python-base-debugsource-2.7.3-10.16.1 python-curses-2.7.3-10.16.1 python-curses-debuginfo-2.7.3-10.16.1 python-debuginfo-2.7.3-10.16.1 python-debugsource-2.7.3-10.16.1 python-demo-2.7.3-10.16.1 python-devel-2.7.3-10.16.1 python-gdbm-2.7.3-10.16.1 python-gdbm-debuginfo-2.7.3-10.16.1 python-idle-2.7.3-10.16.1 python-tk-2.7.3-10.16.1 python-tk-debuginfo-2.7.3-10.16.1 python-xml-2.7.3-10.16.1 python-xml-debuginfo-2.7.3-10.16.1 python3-3.3.0-6.19.1 python3-base-3.3.0-6.19.1 python3-base-debuginfo-3.3.0-6.19.1 python3-base-debugsource-3.3.0-6.19.1 python3-curses-3.3.0-6.19.1 python3-curses-debuginfo-3.3.0-6.19.1 python3-dbm-3.3.0-6.19.1 python3-dbm-debuginfo-3.3.0-6.19.1 python3-debuginfo-3.3.0-6.19.1 python3-debugsource-3.3.0-6.19.1 python3-devel-3.3.0-6.19.1 python3-devel-debuginfo-3.3.0-6.19.1 python3-idle-3.3.0-6.19.1 python3-testsuite-3.3.0-6.19.1 python3-testsuite-debuginfo-3.3.0-6.19.1 python3-tk-3.3.0-6.19.1 python3-tk-debuginfo-3.3.0-6.19.1 python3-tools-3.3.0-6.19.1 - openSUSE 12.3 (x86_64): libpython2_7-1_0-32bit-2.7.3-10.16.1 libpython2_7-1_0-debuginfo-32bit-2.7.3-10.16.1 libpython3_3m1_0-32bit-3.3.0-6.19.1 libpython3_3m1_0-debuginfo-32bit-3.3.0-6.19.1 python-32bit-2.7.3-10.16.1 python-base-32bit-2.7.3-10.16.1 python-base-debuginfo-32bit-2.7.3-10.16.1 python-debuginfo-32bit-2.7.3-10.16.1 python3-32bit-3.3.0-6.19.1 python3-base-32bit-3.3.0-6.19.1 python3-base-debuginfo-32bit-3.3.0-6.19.1 python3-debuginfo-32bit-3.3.0-6.19.1 - openSUSE 12.3 (noarch): python-doc-2.7-10.16.1 python-doc-pdf-2.7-10.16.1 python3-doc-3.3.0-6.19.1 python3-doc-pdf-3.3.0-6.19.1 References: http://support.novell.com/security/cve/CVE-2014-4616.html https://bugzilla.novell.com/884075

1 0

openSUSE-RU-2014:0884-1: OpenLP: Updated from version 2.0.4 to version 2.0.5
by maintenance＠opensuse.org 10 Jul '14

10 Jul '14

openSUSE Recommended Update: OpenLP: Updated from version 2.0.4 to version 2.0.5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0884-1 Rating: low References: #884901 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with openLP: -bnc#884901: Update to version 2.0.5 * Upstream bugfix/stabilization release * Final release in the 2.0 branch * Change to BibleGateway URL to use legacy web interface * lp#719514 : Issues with Themes when comparing theme files * lp#1326664: Improved error messages with Easy Worship Song Imports * lp#1310523: Allow more than 26 equal verses within a Song * lp#1296104: Handle songs where two optional breaks follow each other * lp#1136278: Improve Database update error handling Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-456 - openSUSE 12.3: zypper in -t patch openSUSE-2014-456 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): OpenLP-2.0.5-8.1 - openSUSE 12.3 (noarch): OpenLP-2.0.5-2.16.1 References: https://bugzilla.novell.com/884901

1 0

openSUSE-SU-2014:0878-1: important: kernel update fixes local privilege escalation and a regression causing a crash if IPsec peer is unavailable
by opensuse-security＠opensuse.org 08 Jul '14

08 Jul '14

openSUSE Security Update: kernel update fixes local privilege escalation and a regression causing a crash if IPsec peer is unavailable ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0878-1 Rating: important References: #877775 #880892 Cross-References: CVE-2014-3153 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: kernel update for Evergreen 11.4 fixes local privilege escalation in futex code (bnc#880892 / CVE-2014-3153) and a regression causing a crash if IPsec peer is unavailable Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-69 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): kernel-debug-3.0.101-87.1 kernel-debug-base-3.0.101-87.1 kernel-debug-base-debuginfo-3.0.101-87.1 kernel-debug-debuginfo-3.0.101-87.1 kernel-debug-debugsource-3.0.101-87.1 kernel-debug-devel-3.0.101-87.1 kernel-debug-devel-debuginfo-3.0.101-87.1 kernel-debug-hmac-3.0.101-87.1 kernel-default-3.0.101-87.1 kernel-default-base-3.0.101-87.1 kernel-default-base-debuginfo-3.0.101-87.1 kernel-default-debuginfo-3.0.101-87.1 kernel-default-debugsource-3.0.101-87.1 kernel-default-devel-3.0.101-87.1 kernel-default-devel-debuginfo-3.0.101-87.1 kernel-default-hmac-3.0.101-87.1 kernel-desktop-3.0.101-87.1 kernel-desktop-base-3.0.101-87.1 kernel-desktop-base-debuginfo-3.0.101-87.1 kernel-desktop-debuginfo-3.0.101-87.1 kernel-desktop-debugsource-3.0.101-87.1 kernel-desktop-devel-3.0.101-87.1 kernel-desktop-devel-debuginfo-3.0.101-87.1 kernel-desktop-hmac-3.0.101-87.1 kernel-ec2-3.0.101-87.1 kernel-ec2-base-3.0.101-87.1 kernel-ec2-base-debuginfo-3.0.101-87.1 kernel-ec2-debuginfo-3.0.101-87.1 kernel-ec2-debugsource-3.0.101-87.1 kernel-ec2-devel-3.0.101-87.1 kernel-ec2-devel-debuginfo-3.0.101-87.1 kernel-ec2-extra-3.0.101-87.1 kernel-ec2-extra-debuginfo-3.0.101-87.1 kernel-ec2-hmac-3.0.101-87.1 kernel-source-3.0.101-87.1 kernel-source-vanilla-3.0.101-87.1 kernel-syms-3.0.101-87.1 kernel-trace-3.0.101-87.1 kernel-trace-base-3.0.101-87.1 kernel-trace-base-debuginfo-3.0.101-87.1 kernel-trace-debuginfo-3.0.101-87.1 kernel-trace-debugsource-3.0.101-87.1 kernel-trace-devel-3.0.101-87.1 kernel-trace-devel-debuginfo-3.0.101-87.1 kernel-trace-hmac-3.0.101-87.1 kernel-vanilla-3.0.101-87.1 kernel-vanilla-base-3.0.101-87.1 kernel-vanilla-base-debuginfo-3.0.101-87.1 kernel-vanilla-debuginfo-3.0.101-87.1 kernel-vanilla-debugsource-3.0.101-87.1 kernel-vanilla-devel-3.0.101-87.1 kernel-vanilla-devel-debuginfo-3.0.101-87.1 kernel-vanilla-hmac-3.0.101-87.1 kernel-xen-3.0.101-87.1 kernel-xen-base-3.0.101-87.1 kernel-xen-base-debuginfo-3.0.101-87.1 kernel-xen-debuginfo-3.0.101-87.1 kernel-xen-debugsource-3.0.101-87.1 kernel-xen-devel-3.0.101-87.1 kernel-xen-devel-debuginfo-3.0.101-87.1 kernel-xen-hmac-3.0.101-87.1 preload-1.2-6.65.1 preload-debuginfo-1.2-6.65.1 preload-debugsource-1.2-6.65.1 preload-kmp-default-1.2_3.0.101_87-6.65.1 preload-kmp-default-debuginfo-1.2_3.0.101_87-6.65.1 preload-kmp-desktop-1.2_3.0.101_87-6.65.1 preload-kmp-desktop-debuginfo-1.2_3.0.101_87-6.65.1 - openSUSE 11.4 (noarch): kernel-docs-3.0.101-87.2 - openSUSE 11.4 (i586): kernel-pae-3.0.101-87.1 kernel-pae-base-3.0.101-87.1 kernel-pae-base-debuginfo-3.0.101-87.1 kernel-pae-debuginfo-3.0.101-87.1 kernel-pae-debugsource-3.0.101-87.1 kernel-pae-devel-3.0.101-87.1 kernel-pae-devel-debuginfo-3.0.101-87.1 kernel-pae-hmac-3.0.101-87.1 kernel-vmi-3.0.101-87.1 kernel-vmi-base-3.0.101-87.1 kernel-vmi-base-debuginfo-3.0.101-87.1 kernel-vmi-debuginfo-3.0.101-87.1 kernel-vmi-debugsource-3.0.101-87.1 kernel-vmi-devel-3.0.101-87.1 kernel-vmi-devel-debuginfo-3.0.101-87.1 kernel-vmi-hmac-3.0.101-87.1 References: http://support.novell.com/security/cve/CVE-2014-3153.html https://bugzilla.novell.com/877775 https://bugzilla.novell.com/880892

1 0

openSUSE-SU-2014:0874-1: moderate: dbus-1: Fixed possible DoS
by opensuse-security＠opensuse.org 05 Jul '14

05 Jul '14

openSUSE Security Update: dbus-1: Fixed possible DoS ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0874-1 Rating: moderate References: #881137 Cross-References: CVE-2014-3477 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: dbus-1 was updated to fix a possible DoS (CVE-2014-3477). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-68 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): dbus-1-1.4.1-7.35.1 dbus-1-debuginfo-1.4.1-7.35.1 dbus-1-debugsource-1.4.1-7.35.1 dbus-1-devel-1.4.1-7.35.1 dbus-1-x11-1.4.1-7.35.1 dbus-1-x11-debuginfo-1.4.1-7.35.1 dbus-1-x11-debugsource-1.4.1-7.35.1 - openSUSE 11.4 (x86_64): dbus-1-32bit-1.4.1-7.35.1 dbus-1-debuginfo-32bit-1.4.1-7.35.1 dbus-1-devel-32bit-1.4.1-7.35.1 - openSUSE 11.4 (noarch): dbus-1-devel-doc-1.4.1-7.35.1 - openSUSE 11.4 (ia64): dbus-1-debuginfo-x86-1.4.1-7.35.1 dbus-1-x86-1.4.1-7.35.1 References: http://support.novell.com/security/cve/CVE-2014-3477.html https://bugzilla.novell.com/881137

1 0

openSUSE-SU-2014:0867-1: moderate: memcached: Update fixes fixe security issues
by opensuse-security＠opensuse.org 03 Jul '14

03 Jul '14

openSUSE Security Update: memcached: Update fixes fixe security issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0867-1 Rating: moderate References: #798458 #817781 #857188 #858676 #858677 Cross-References: CVE-2011-4971 CVE-2013-0179 CVE-2013-7239 CVE-2013-7290 CVE-2013-7291 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: memcached was updated to version 1.4.20 to fix five security issues. These security issues were fixed: - DoS when printing out keys to be deleted in verbose mode (CVE-2013-0179) - Remote DoS (crash) via a request that triggers "unbounded key print" (CVE-2013-7291) - Remote DoS (segmentation fault) via a request to delete a key (CVE-2013-7290) - SASL authentication allows wrong credentials to access memcache (CVE-2013-7239) - Remote DoS (CVE-2011-4971) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-454 - openSUSE 12.3: zypper in -t patch openSUSE-2014-454 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): memcached-1.4.20-6.4.1 memcached-debuginfo-1.4.20-6.4.1 memcached-debugsource-1.4.20-6.4.1 - openSUSE 12.3 (i586 x86_64): memcached-1.4.20-3.4.1 memcached-debuginfo-1.4.20-3.4.1 memcached-debugsource-1.4.20-3.4.1 References: http://support.novell.com/security/cve/CVE-2011-4971.html http://support.novell.com/security/cve/CVE-2013-0179.html http://support.novell.com/security/cve/CVE-2013-7239.html http://support.novell.com/security/cve/CVE-2013-7290.html http://support.novell.com/security/cve/CVE-2013-7291.html https://bugzilla.novell.com/798458 https://bugzilla.novell.com/817781 https://bugzilla.novell.com/857188 https://bugzilla.novell.com/858676 https://bugzilla.novell.com/858677

1 0

openSUSE-SU-2014:0866-1: moderate: gpg2: Fixed possible DoS
by opensuse-security＠opensuse.org 03 Jul '14

03 Jul '14

openSUSE Security Update: gpg2: Fixed possible DoS ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0866-1 Rating: moderate References: #884130 Cross-References: CVE-2014-4617 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: gpg2 was patched to fix a possible DoS. This security issue was fixed: - Denial of service through infinite loop with garbled compressed data packets (CVE-2014-4617) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-455 - openSUSE 12.3: zypper in -t patch openSUSE-2014-455 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): gpg2-2.0.22-8.1 gpg2-debuginfo-2.0.22-8.1 gpg2-debugsource-2.0.22-8.1 - openSUSE 13.1 (noarch): gpg2-lang-2.0.22-8.1 - openSUSE 12.3 (i586 x86_64): gpg2-2.0.19-5.16.1 gpg2-debuginfo-2.0.19-5.16.1 gpg2-debugsource-2.0.19-5.16.1 - openSUSE 12.3 (noarch): gpg2-lang-2.0.19-5.16.1 References: http://support.novell.com/security/cve/CVE-2014-4617.html https://bugzilla.novell.com/884130

1 0

openSUSE-RU-2014:0865-1: lapack: Moved libraries to subdirectories for fixing update-alternatives
by maintenance＠opensuse.org 02 Jul '14

02 Jul '14

openSUSE Recommended Update: lapack: Moved libraries to subdirectories for fixing update-alternatives ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0865-1 Rating: low References: Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issues with lapack: -bnc#861081: * Move libraries to subdirectories for fixing update-alternatives * Add scripts for fixing migration problems Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-453 - openSUSE 12.3: zypper in -t patch openSUSE-2014-453 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): blas-devel-3.4.2-6.4.1 blas-devel-static-3.4.2-6.4.1 lapack-debugsource-3.4.2-6.4.1 lapack-devel-3.4.2-6.4.1 lapack-devel-static-3.4.2-6.4.1 lapacke-devel-3.4.2-6.4.1 lapacke-devel-static-3.4.2-6.4.1 libblas3-3.4.2-6.4.1 libblas3-debuginfo-3.4.2-6.4.1 liblapack3-3.4.2-6.4.1 liblapack3-debuginfo-3.4.2-6.4.1 liblapacke3-3.4.2-6.4.1 liblapacke3-debuginfo-3.4.2-6.4.1 - openSUSE 13.1 (x86_64): blas-devel-32bit-3.4.2-6.4.1 lapack-devel-32bit-3.4.2-6.4.1 lapacke-devel-32bit-3.4.2-6.4.1 libblas3-32bit-3.4.2-6.4.1 libblas3-debuginfo-32bit-3.4.2-6.4.1 liblapack3-32bit-3.4.2-6.4.1 liblapack3-debuginfo-32bit-3.4.2-6.4.1 liblapacke3-32bit-3.4.2-6.4.1 liblapacke3-debuginfo-32bit-3.4.2-6.4.1 - openSUSE 13.1 (noarch): blas-man-3.4.2-6.4.1 lapack-man-3.4.2-6.4.1 - openSUSE 12.3 (i586 x86_64): blas-devel-3.4.2-3.4.1 lapack-debugsource-3.4.2-3.4.1 lapack-devel-3.4.2-3.4.1 lapacke-devel-3.4.2-3.4.1 libblas3-3.4.2-3.4.1 libblas3-debuginfo-3.4.2-3.4.1 liblapack3-3.4.2-3.4.1 liblapack3-debuginfo-3.4.2-3.4.1 liblapacke3-3.4.2-3.4.1 liblapacke3-debuginfo-3.4.2-3.4.1 - openSUSE 12.3 (x86_64): blas-devel-32bit-3.4.2-3.4.1 lapack-devel-32bit-3.4.2-3.4.1 lapacke-devel-32bit-3.4.2-3.4.1 libblas3-32bit-3.4.2-3.4.1 libblas3-debuginfo-32bit-3.4.2-3.4.1 liblapack3-32bit-3.4.2-3.4.1 liblapack3-debuginfo-32bit-3.4.2-3.4.1 liblapacke3-32bit-3.4.2-3.4.1 liblapacke3-debuginfo-32bit-3.4.2-3.4.1 - openSUSE 12.3 (noarch): blas-man-3.4.2-3.4.1 lapack-man-3.4.2-3.4.1 References:

1 0

openSUSE-SU-2014:0862-1: moderate: freerdp: Fixes for integer overflows
by opensuse-security＠opensuse.org 01 Jul '14

01 Jul '14

openSUSE Security Update: freerdp: Fixes for integer overflows ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0862-1 Rating: moderate References: #857491 #880317 Cross-References: CVE-2014-0250 CVE-2014-0791 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: freerdp was patched to fix several integer overflows. These security issues were fixed: * Integer overflow (CVE-2014-0791) * Integer overflows in memory allocations in client/X11/xf_graphics.c (CVE-2014-0250) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-452 - openSUSE 12.3: zypper in -t patch openSUSE-2014-452 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): freerdp-1.0.2-3.4.1 freerdp-debuginfo-1.0.2-3.4.1 freerdp-debugsource-1.0.2-3.4.1 freerdp-devel-1.0.2-3.4.1 libfreerdp-1_0-1.0.2-3.4.1 libfreerdp-1_0-debuginfo-1.0.2-3.4.1 libfreerdp-1_0-plugins-1.0.2-3.4.1 libfreerdp-1_0-plugins-debuginfo-1.0.2-3.4.1 - openSUSE 12.3 (i586 x86_64): freerdp-1.0.2-11.12.1 freerdp-debuginfo-1.0.2-11.12.1 freerdp-debugsource-1.0.2-11.12.1 freerdp-devel-1.0.2-11.12.1 libfreerdp-1_0-1.0.2-11.12.1 libfreerdp-1_0-debuginfo-1.0.2-11.12.1 libfreerdp-1_0-plugins-1.0.2-11.12.1 libfreerdp-1_0-plugins-debuginfo-1.0.2-11.12.1 References: http://support.novell.com/security/cve/CVE-2014-0250.html http://support.novell.com/security/cve/CVE-2014-0791.html https://bugzilla.novell.com/857491 https://bugzilla.novell.com/880317

1 0

openSUSE-SU-2014:0861-1: moderate: xalan-j2: Ensure secure processing
by opensuse-security＠opensuse.org 01 Jul '14

01 Jul '14

openSUSE Security Update: xalan-j2: Ensure secure processing ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0861-1 Rating: moderate References: #870082 Cross-References: CVE-2014-0107 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: xalan-j2 was updated to ensure secure processing can't be circumvented (CVE-2014-0107). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-445 - openSUSE 12.3: zypper in -t patch openSUSE-2014-445 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): xalan-j2-2.7.0-262.4.1 xalan-j2-demo-2.7.0-262.4.1 xalan-j2-manual-2.7.0-262.4.1 xalan-j2-xsltc-2.7.0-262.4.1 - openSUSE 12.3 (noarch): xalan-j2-2.7.0-259.4.1 xalan-j2-demo-2.7.0-259.4.1 xalan-j2-javadoc-2.7.0-259.4.1 xalan-j2-manual-2.7.0-259.4.1 xalan-j2-xsltc-2.7.0-259.4.1 References: http://support.novell.com/security/cve/CVE-2014-0107.html https://bugzilla.novell.com/870082

1 0

openSUSE-SU-2014:0860-1: moderate: libreoffice: Update fixes over 80 bugs
by opensuse-security＠opensuse.org 01 Jul '14

01 Jul '14

openSUSE Security Update: libreoffice: Update fixes over 80 bugs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0860-1 Rating: moderate References: #249775 #404254 #407958 #410982 #411855 #414248 #417316 #417320 #418307 #421939 #422206 #422559 #422569 #422677 #758883 #766481 #766487 #779697 #821208 #879996 Cross-References: CVE-2014-0247 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has 19 fixes is now available. Description: libreoffice was updated to version 4.1.6.2, thereby fixing over 80 bugs. This security issue was fixed: - VBA macros executed unconditionally (CVE-2014-0247) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-446 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libreoffice-4.1.6.2-21.1 libreoffice-base-4.1.6.2-21.1 libreoffice-base-debuginfo-4.1.6.2-21.1 libreoffice-base-drivers-mysql-4.1.6.2-21.1 libreoffice-base-drivers-mysql-debuginfo-4.1.6.2-21.1 libreoffice-base-drivers-postgresql-4.1.6.2-21.1 libreoffice-base-drivers-postgresql-debuginfo-4.1.6.2-21.1 libreoffice-base-extensions-4.1.6.2-21.1 libreoffice-calc-4.1.6.2-21.1 libreoffice-calc-debuginfo-4.1.6.2-21.1 libreoffice-calc-extensions-4.1.6.2-21.1 libreoffice-debuginfo-4.1.6.2-21.1 libreoffice-debugsource-4.1.6.2-21.1 libreoffice-draw-4.1.6.2-21.1 libreoffice-draw-debuginfo-4.1.6.2-21.1 libreoffice-draw-extensions-4.1.6.2-21.1 libreoffice-filters-optional-4.1.6.2-21.1 libreoffice-gnome-4.1.6.2-21.1 libreoffice-gnome-debuginfo-4.1.6.2-21.1 libreoffice-icon-themes-prebuilt-4.1.6.2-21.1 libreoffice-impress-4.1.6.2-21.1 libreoffice-impress-debuginfo-4.1.6.2-21.1 libreoffice-impress-extensions-4.1.6.2-21.1 libreoffice-impress-extensions-debuginfo-4.1.6.2-21.1 libreoffice-kde-4.1.6.2-21.1 libreoffice-kde-debuginfo-4.1.6.2-21.1 libreoffice-kde4-4.1.6.2-21.1 libreoffice-kde4-debuginfo-4.1.6.2-21.1 libreoffice-l10n-prebuilt-4.1.6.2-21.1 libreoffice-mailmerge-4.1.6.2-21.1 libreoffice-math-4.1.6.2-21.1 libreoffice-math-debuginfo-4.1.6.2-21.1 libreoffice-officebean-4.1.6.2-21.1 libreoffice-officebean-debuginfo-4.1.6.2-21.1 libreoffice-pyuno-4.1.6.2-21.1 libreoffice-pyuno-debuginfo-4.1.6.2-21.1 libreoffice-sdk-4.1.6.2-21.1 libreoffice-sdk-debuginfo-4.1.6.2-21.1 libreoffice-sdk-doc-4.1.6.2-21.1 libreoffice-writer-4.1.6.2-21.1 libreoffice-writer-debuginfo-4.1.6.2-21.1 libreoffice-writer-extensions-4.1.6.2-21.1 - openSUSE 13.1 (noarch): libreoffice-branding-upstream-4.1.6.2-21.1 libreoffice-help-ast-4.1.6.2-21.1 libreoffice-help-bg-4.1.6.2-21.1 libreoffice-help-ca-4.1.6.2-21.1 libreoffice-help-cs-4.1.6.2-21.1 libreoffice-help-da-4.1.6.2-21.1 libreoffice-help-de-4.1.6.2-21.1 libreoffice-help-el-4.1.6.2-21.1 libreoffice-help-en-GB-4.1.6.2-21.1 libreoffice-help-en-US-4.1.6.2-21.1 libreoffice-help-en-ZA-4.1.6.2-21.1 libreoffice-help-es-4.1.6.2-21.1 libreoffice-help-et-4.1.6.2-21.1 libreoffice-help-eu-4.1.6.2-21.1 libreoffice-help-fi-4.1.6.2-21.1 libreoffice-help-fr-4.1.6.2-21.1 libreoffice-help-gl-4.1.6.2-21.1 libreoffice-help-gu-IN-4.1.6.2-21.1 libreoffice-help-hi-IN-4.1.6.2-21.1 libreoffice-help-hu-4.1.6.2-21.1 libreoffice-help-it-4.1.6.2-21.1 libreoffice-help-ja-4.1.6.2-21.1 libreoffice-help-km-4.1.6.2-21.1 libreoffice-help-ko-4.1.6.2-21.1 libreoffice-help-mk-4.1.6.2-21.1 libreoffice-help-nb-4.1.6.2-21.1 libreoffice-help-nl-4.1.6.2-21.1 libreoffice-help-pl-4.1.6.2-21.1 libreoffice-help-pt-4.1.6.2-21.1 libreoffice-help-pt-BR-4.1.6.2-21.1 libreoffice-help-ru-4.1.6.2-21.1 libreoffice-help-sk-4.1.6.2-21.1 libreoffice-help-sl-4.1.6.2-21.1 libreoffice-help-sv-4.1.6.2-21.1 libreoffice-help-tr-4.1.6.2-21.1 libreoffice-help-vi-4.1.6.2-21.1 libreoffice-help-zh-CN-4.1.6.2-21.1 libreoffice-help-zh-TW-4.1.6.2-21.1 libreoffice-icon-theme-crystal-4.1.6.2-21.1 libreoffice-icon-theme-galaxy-4.1.6.2-21.1 libreoffice-icon-theme-hicontrast-4.1.6.2-21.1 libreoffice-icon-theme-oxygen-4.1.6.2-21.1 libreoffice-icon-theme-tango-4.1.6.2-21.1 libreoffice-l10n-af-4.1.6.2-21.1 libreoffice-l10n-am-4.1.6.2-21.1 libreoffice-l10n-ar-4.1.6.2-21.1 libreoffice-l10n-as-4.1.6.2-21.1 libreoffice-l10n-ast-4.1.6.2-21.1 libreoffice-l10n-be-BY-4.1.6.2-21.1 libreoffice-l10n-bg-4.1.6.2-21.1 libreoffice-l10n-br-4.1.6.2-21.1 libreoffice-l10n-ca-4.1.6.2-21.1 libreoffice-l10n-cs-4.1.6.2-21.1 libreoffice-l10n-cy-4.1.6.2-21.1 libreoffice-l10n-da-4.1.6.2-21.1 libreoffice-l10n-de-4.1.6.2-21.1 libreoffice-l10n-el-4.1.6.2-21.1 libreoffice-l10n-en-GB-4.1.6.2-21.1 libreoffice-l10n-en-ZA-4.1.6.2-21.1 libreoffice-l10n-eo-4.1.6.2-21.1 libreoffice-l10n-es-4.1.6.2-21.1 libreoffice-l10n-et-4.1.6.2-21.1 libreoffice-l10n-eu-4.1.6.2-21.1 libreoffice-l10n-fi-4.1.6.2-21.1 libreoffice-l10n-fr-4.1.6.2-21.1 libreoffice-l10n-ga-4.1.6.2-21.1 libreoffice-l10n-gd-4.1.6.2-21.1 libreoffice-l10n-gl-4.1.6.2-21.1 libreoffice-l10n-gu-IN-4.1.6.2-21.1 libreoffice-l10n-he-4.1.6.2-21.1 libreoffice-l10n-hi-IN-4.1.6.2-21.1 libreoffice-l10n-hr-4.1.6.2-21.1 libreoffice-l10n-hu-4.1.6.2-21.1 libreoffice-l10n-id-4.1.6.2-21.1 libreoffice-l10n-is-4.1.6.2-21.1 libreoffice-l10n-it-4.1.6.2-21.1 libreoffice-l10n-ja-4.1.6.2-21.1 libreoffice-l10n-ka-4.1.6.2-21.1 libreoffice-l10n-km-4.1.6.2-21.1 libreoffice-l10n-kn-4.1.6.2-21.1 libreoffice-l10n-ko-4.1.6.2-21.1 libreoffice-l10n-lt-4.1.6.2-21.1 libreoffice-l10n-mk-4.1.6.2-21.1 libreoffice-l10n-ml-4.1.6.2-21.1 libreoffice-l10n-mr-4.1.6.2-21.1 libreoffice-l10n-nb-4.1.6.2-21.1 libreoffice-l10n-nl-4.1.6.2-21.1 libreoffice-l10n-nn-4.1.6.2-21.1 libreoffice-l10n-nr-4.1.6.2-21.1 libreoffice-l10n-om-4.1.6.2-21.1 libreoffice-l10n-or-4.1.6.2-21.1 libreoffice-l10n-pa-IN-4.1.6.2-21.1 libreoffice-l10n-pl-4.1.6.2-21.1 libreoffice-l10n-pt-4.1.6.2-21.1 libreoffice-l10n-pt-BR-4.1.6.2-21.1 libreoffice-l10n-ro-4.1.6.2-21.1 libreoffice-l10n-ru-4.1.6.2-21.1 libreoffice-l10n-rw-4.1.6.2-21.1 libreoffice-l10n-sh-4.1.6.2-21.1 libreoffice-l10n-sk-4.1.6.2-21.1 libreoffice-l10n-sl-4.1.6.2-21.1 libreoffice-l10n-sr-4.1.6.2-21.1 libreoffice-l10n-ss-4.1.6.2-21.1 libreoffice-l10n-st-4.1.6.2-21.1 libreoffice-l10n-sv-4.1.6.2-21.1 libreoffice-l10n-ta-4.1.6.2-21.1 libreoffice-l10n-te-4.1.6.2-21.1 libreoffice-l10n-tg-4.1.6.2-21.1 libreoffice-l10n-th-4.1.6.2-21.1 libreoffice-l10n-tr-4.1.6.2-21.1 libreoffice-l10n-ts-4.1.6.2-21.1 libreoffice-l10n-ug-4.1.6.2-21.1 libreoffice-l10n-uk-4.1.6.2-21.1 libreoffice-l10n-ve-4.1.6.2-21.1 libreoffice-l10n-vi-4.1.6.2-21.1 libreoffice-l10n-xh-4.1.6.2-21.1 libreoffice-l10n-zh-CN-4.1.6.2-21.1 libreoffice-l10n-zh-TW-4.1.6.2-21.1 libreoffice-l10n-zu-4.1.6.2-21.1 References: http://support.novell.com/security/cve/CVE-2014-0247.html https://bugzilla.novell.com/249775 https://bugzilla.novell.com/404254 https://bugzilla.novell.com/407958 https://bugzilla.novell.com/410982 https://bugzilla.novell.com/411855 https://bugzilla.novell.com/414248 https://bugzilla.novell.com/417316 https://bugzilla.novell.com/417320 https://bugzilla.novell.com/418307 https://bugzilla.novell.com/421939 https://bugzilla.novell.com/422206 https://bugzilla.novell.com/422559 https://bugzilla.novell.com/422569 https://bugzilla.novell.com/422677 https://bugzilla.novell.com/758883 https://bugzilla.novell.com/766481 https://bugzilla.novell.com/766487 https://bugzilla.novell.com/779697 https://bugzilla.novell.com/821208 https://bugzilla.novell.com/879996

1 0