July 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2014:0859-1: moderate: samba: Update fixes four security issues
by opensuse-security＠opensuse.org 01 Jul '14

01 Jul '14

openSUSE Security Update: samba: Update fixes four security issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0859-1 Rating: moderate References: #846586 #866354 #866927 #869707 #870570 #870607 #870957 #871701 #872396 #873177 #873658 #874180 #874656 #875046 #879390 #880962 #883758 Cross-References: CVE-2014-0178 CVE-2014-0239 CVE-2014-0244 CVE-2014-3493 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves four vulnerabilities and has 13 fixes is now available. Description: samba was updated to version 4.1.9 to fix four security issues and various non-security bugs. These security issues were fixed: - Fix nmbd denial of service (CVE-2014-0244) - Fix segmentation fault in smbd_marshall_dir_entry()'s SMB_FIND_FILE_UNIX handler (CVE-2014-3493) - Malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response (CVE-2014-0178) - DNS: Don't reply to replies (CVE-2014-0239) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-450 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libdcerpc-atsvc-devel-4.1.9-3.22.1 libdcerpc-atsvc0-4.1.9-3.22.1 libdcerpc-atsvc0-debuginfo-4.1.9-3.22.1 libdcerpc-binding0-4.1.9-3.22.1 libdcerpc-binding0-debuginfo-4.1.9-3.22.1 libdcerpc-devel-4.1.9-3.22.1 libdcerpc-samr-devel-4.1.9-3.22.1 libdcerpc-samr0-4.1.9-3.22.1 libdcerpc-samr0-debuginfo-4.1.9-3.22.1 libdcerpc0-4.1.9-3.22.1 libdcerpc0-debuginfo-4.1.9-3.22.1 libgensec-devel-4.1.9-3.22.1 libgensec0-4.1.9-3.22.1 libgensec0-debuginfo-4.1.9-3.22.1 libndr-devel-4.1.9-3.22.1 libndr-krb5pac-devel-4.1.9-3.22.1 libndr-krb5pac0-4.1.9-3.22.1 libndr-krb5pac0-debuginfo-4.1.9-3.22.1 libndr-nbt-devel-4.1.9-3.22.1 libndr-nbt0-4.1.9-3.22.1 libndr-nbt0-debuginfo-4.1.9-3.22.1 libndr-standard-devel-4.1.9-3.22.1 libndr-standard0-4.1.9-3.22.1 libndr-standard0-debuginfo-4.1.9-3.22.1 libndr0-4.1.9-3.22.1 libndr0-debuginfo-4.1.9-3.22.1 libnetapi-devel-4.1.9-3.22.1 libnetapi0-4.1.9-3.22.1 libnetapi0-debuginfo-4.1.9-3.22.1 libpdb-devel-4.1.9-3.22.1 libpdb0-4.1.9-3.22.1 libpdb0-debuginfo-4.1.9-3.22.1 libregistry-devel-4.1.9-3.22.1 libregistry0-4.1.9-3.22.1 libregistry0-debuginfo-4.1.9-3.22.1 libsamba-credentials-devel-4.1.9-3.22.1 libsamba-credentials0-4.1.9-3.22.1 libsamba-credentials0-debuginfo-4.1.9-3.22.1 libsamba-hostconfig-devel-4.1.9-3.22.1 libsamba-hostconfig0-4.1.9-3.22.1 libsamba-hostconfig0-debuginfo-4.1.9-3.22.1 libsamba-policy-devel-4.1.9-3.22.1 libsamba-policy0-4.1.9-3.22.1 libsamba-policy0-debuginfo-4.1.9-3.22.1 libsamba-util-devel-4.1.9-3.22.1 libsamba-util0-4.1.9-3.22.1 libsamba-util0-debuginfo-4.1.9-3.22.1 libsamdb-devel-4.1.9-3.22.1 libsamdb0-4.1.9-3.22.1 libsamdb0-debuginfo-4.1.9-3.22.1 libsmbclient-devel-4.1.9-3.22.1 libsmbclient-raw-devel-4.1.9-3.22.1 libsmbclient-raw0-4.1.9-3.22.1 libsmbclient-raw0-debuginfo-4.1.9-3.22.1 libsmbclient0-4.1.9-3.22.1 libsmbclient0-debuginfo-4.1.9-3.22.1 libsmbconf-devel-4.1.9-3.22.1 libsmbconf0-4.1.9-3.22.1 libsmbconf0-debuginfo-4.1.9-3.22.1 libsmbldap-devel-4.1.9-3.22.1 libsmbldap0-4.1.9-3.22.1 libsmbldap0-debuginfo-4.1.9-3.22.1 libsmbsharemodes-devel-4.1.9-3.22.1 libsmbsharemodes0-4.1.9-3.22.1 libsmbsharemodes0-debuginfo-4.1.9-3.22.1 libtevent-util-devel-4.1.9-3.22.1 libtevent-util0-4.1.9-3.22.1 libtevent-util0-debuginfo-4.1.9-3.22.1 libwbclient-devel-4.1.9-3.22.1 libwbclient0-4.1.9-3.22.1 libwbclient0-debuginfo-4.1.9-3.22.1 samba-4.1.9-3.22.1 samba-client-4.1.9-3.22.1 samba-client-debuginfo-4.1.9-3.22.1 samba-core-devel-4.1.9-3.22.1 samba-debuginfo-4.1.9-3.22.1 samba-debugsource-4.1.9-3.22.1 samba-libs-4.1.9-3.22.1 samba-libs-debuginfo-4.1.9-3.22.1 samba-pidl-4.1.9-3.22.1 samba-python-4.1.9-3.22.1 samba-python-debuginfo-4.1.9-3.22.1 samba-test-4.1.9-3.22.1 samba-test-debuginfo-4.1.9-3.22.1 samba-test-devel-4.1.9-3.22.1 samba-winbind-4.1.9-3.22.1 samba-winbind-debuginfo-4.1.9-3.22.1 - openSUSE 13.1 (x86_64): libdcerpc-atsvc0-32bit-4.1.9-3.22.1 libdcerpc-atsvc0-debuginfo-32bit-4.1.9-3.22.1 libdcerpc-binding0-32bit-4.1.9-3.22.1 libdcerpc-binding0-debuginfo-32bit-4.1.9-3.22.1 libdcerpc-samr0-32bit-4.1.9-3.22.1 libdcerpc-samr0-debuginfo-32bit-4.1.9-3.22.1 libdcerpc0-32bit-4.1.9-3.22.1 libdcerpc0-debuginfo-32bit-4.1.9-3.22.1 libgensec0-32bit-4.1.9-3.22.1 libgensec0-debuginfo-32bit-4.1.9-3.22.1 libndr-krb5pac0-32bit-4.1.9-3.22.1 libndr-krb5pac0-debuginfo-32bit-4.1.9-3.22.1 libndr-nbt0-32bit-4.1.9-3.22.1 libndr-nbt0-debuginfo-32bit-4.1.9-3.22.1 libndr-standard0-32bit-4.1.9-3.22.1 libndr-standard0-debuginfo-32bit-4.1.9-3.22.1 libndr0-32bit-4.1.9-3.22.1 libndr0-debuginfo-32bit-4.1.9-3.22.1 libnetapi0-32bit-4.1.9-3.22.1 libnetapi0-debuginfo-32bit-4.1.9-3.22.1 libpdb0-32bit-4.1.9-3.22.1 libpdb0-debuginfo-32bit-4.1.9-3.22.1 libregistry0-32bit-4.1.9-3.22.1 libregistry0-debuginfo-32bit-4.1.9-3.22.1 libsamba-credentials0-32bit-4.1.9-3.22.1 libsamba-credentials0-debuginfo-32bit-4.1.9-3.22.1 libsamba-hostconfig0-32bit-4.1.9-3.22.1 libsamba-hostconfig0-debuginfo-32bit-4.1.9-3.22.1 libsamba-policy0-32bit-4.1.9-3.22.1 libsamba-policy0-debuginfo-32bit-4.1.9-3.22.1 libsamba-util0-32bit-4.1.9-3.22.1 libsamba-util0-debuginfo-32bit-4.1.9-3.22.1 libsamdb0-32bit-4.1.9-3.22.1 libsamdb0-debuginfo-32bit-4.1.9-3.22.1 libsmbclient-raw0-32bit-4.1.9-3.22.1 libsmbclient-raw0-debuginfo-32bit-4.1.9-3.22.1 libsmbclient0-32bit-4.1.9-3.22.1 libsmbclient0-debuginfo-32bit-4.1.9-3.22.1 libsmbconf0-32bit-4.1.9-3.22.1 libsmbconf0-debuginfo-32bit-4.1.9-3.22.1 libsmbldap0-32bit-4.1.9-3.22.1 libsmbldap0-debuginfo-32bit-4.1.9-3.22.1 libtevent-util0-32bit-4.1.9-3.22.1 libtevent-util0-debuginfo-32bit-4.1.9-3.22.1 libwbclient0-32bit-4.1.9-3.22.1 libwbclient0-debuginfo-32bit-4.1.9-3.22.1 samba-32bit-4.1.9-3.22.1 samba-client-32bit-4.1.9-3.22.1 samba-client-debuginfo-32bit-4.1.9-3.22.1 samba-debuginfo-32bit-4.1.9-3.22.1 samba-libs-32bit-4.1.9-3.22.1 samba-libs-debuginfo-32bit-4.1.9-3.22.1 samba-winbind-32bit-4.1.9-3.22.1 samba-winbind-debuginfo-32bit-4.1.9-3.22.1 - openSUSE 13.1 (noarch): samba-doc-4.1.9-3.22.1 References: http://support.novell.com/security/cve/CVE-2014-0178.html http://support.novell.com/security/cve/CVE-2014-0239.html http://support.novell.com/security/cve/CVE-2014-0244.html http://support.novell.com/security/cve/CVE-2014-3493.html https://bugzilla.novell.com/846586 https://bugzilla.novell.com/866354 https://bugzilla.novell.com/866927 https://bugzilla.novell.com/869707 https://bugzilla.novell.com/870570 https://bugzilla.novell.com/870607 https://bugzilla.novell.com/870957 https://bugzilla.novell.com/871701 https://bugzilla.novell.com/872396 https://bugzilla.novell.com/873177 https://bugzilla.novell.com/873658 https://bugzilla.novell.com/874180 https://bugzilla.novell.com/874656 https://bugzilla.novell.com/875046 https://bugzilla.novell.com/879390 https://bugzilla.novell.com/880962 https://bugzilla.novell.com/883758

1 0

openSUSE-SU-2014:0858-1: moderate: MozillaThunderbird: Update fixes six security issues
by opensuse-security＠opensuse.org 01 Jul '14

01 Jul '14

openSUSE Security Update: MozillaThunderbird: Update fixes six security issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0858-1 Rating: moderate References: #881874 Cross-References: CVE-2014-1533 CVE-2014-1534 CVE-2014-1536 CVE-2014-1537 CVE-2014-1538 CVE-2014-1541 CVE-2014-1545 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: MozillaThunderbird was updated to version 24.6.0 to fix six security issues: * Miscellaneous memory safety hazards (CVE-2014-1533/CVE-2014-1534) * Use-after-free and out of bounds issues found using Address Sanitizer (CVE-2014-1536/CVE-2014-1537/CVE-2014-1538) * Use-after-free with SMIL Animation Controller (CVE-2014-1541) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-447 - openSUSE 12.3: zypper in -t patch openSUSE-2014-447 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): MozillaThunderbird-24.6.0-70.23.3 MozillaThunderbird-buildsymbols-24.6.0-70.23.3 MozillaThunderbird-debuginfo-24.6.0-70.23.3 MozillaThunderbird-debugsource-24.6.0-70.23.3 MozillaThunderbird-devel-24.6.0-70.23.3 MozillaThunderbird-translations-common-24.6.0-70.23.3 MozillaThunderbird-translations-other-24.6.0-70.23.3 enigmail-1.6.0+24.6.0-70.23.3 enigmail-debuginfo-1.6.0+24.6.0-70.23.3 - openSUSE 12.3 (i586 x86_64): MozillaThunderbird-24.6.0-61.51.3 MozillaThunderbird-buildsymbols-24.6.0-61.51.3 MozillaThunderbird-debuginfo-24.6.0-61.51.3 MozillaThunderbird-debugsource-24.6.0-61.51.3 MozillaThunderbird-devel-24.6.0-61.51.3 MozillaThunderbird-translations-common-24.6.0-61.51.3 MozillaThunderbird-translations-other-24.6.0-61.51.3 enigmail-1.6.0+24.6.0-61.51.3 enigmail-debuginfo-1.6.0+24.6.0-61.51.3 References: http://support.novell.com/security/cve/CVE-2014-1533.html http://support.novell.com/security/cve/CVE-2014-1534.html http://support.novell.com/security/cve/CVE-2014-1536.html http://support.novell.com/security/cve/CVE-2014-1537.html http://support.novell.com/security/cve/CVE-2014-1538.html http://support.novell.com/security/cve/CVE-2014-1541.html http://support.novell.com/security/cve/CVE-2014-1545.html https://bugzilla.novell.com/881874

1 0

openSUSE-SU-2014:0857-1: moderate: samba: Threes
by opensuse-security＠opensuse.org 01 Jul '14

01 Jul '14

openSUSE Security Update: samba: Threes ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0857-1 Rating: moderate References: #685093 #872396 #879390 #880962 #883758 Cross-References: CVE-2014-0178 CVE-2014-0244 CVE-2014-3493 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: samba was updated to fix three security issues and two non-security issues. These security issues were fixed: - Fix segmentation fault in smbd_marshall_dir_entry()'s SMB_FIND_FILE_UNIX handler (CVE-2014-3493) - Fix nmbd denial of service (CVE-2014-0244) - Fix malformed FSCTL_SRV_ENUMERATE_SNAPSHOTS response (CVE-2014-0178) These non-security issues were fixed: - Fix printer job purging; (bso#10612); (bnc#879390). - Package the get_printing_ticket binary with 0700 permissions on post-11.4 systems; (bnc#685093). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2014-449 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libnetapi-devel-3.6.12-59.23.1 libnetapi0-3.6.12-59.23.1 libnetapi0-debuginfo-3.6.12-59.23.1 libsmbclient-devel-3.6.12-59.23.1 libsmbclient0-3.6.12-59.23.1 libsmbclient0-debuginfo-3.6.12-59.23.1 libsmbsharemodes-devel-3.6.12-59.23.1 libsmbsharemodes0-3.6.12-59.23.1 libsmbsharemodes0-debuginfo-3.6.12-59.23.1 libwbclient-devel-3.6.12-59.23.1 libwbclient0-3.6.12-59.23.1 libwbclient0-debuginfo-3.6.12-59.23.1 samba-3.6.12-59.23.1 samba-client-3.6.12-59.23.1 samba-client-debuginfo-3.6.12-59.23.1 samba-debuginfo-3.6.12-59.23.1 samba-debugsource-3.6.12-59.23.1 samba-devel-3.6.12-59.23.1 samba-krb-printing-3.6.12-59.23.1 samba-krb-printing-debuginfo-3.6.12-59.23.1 samba-winbind-3.6.12-59.23.1 samba-winbind-debuginfo-3.6.12-59.23.1 - openSUSE 12.3 (x86_64): libsmbclient0-32bit-3.6.12-59.23.1 libsmbclient0-debuginfo-32bit-3.6.12-59.23.1 libwbclient0-32bit-3.6.12-59.23.1 libwbclient0-debuginfo-32bit-3.6.12-59.23.1 samba-32bit-3.6.12-59.23.1 samba-client-32bit-3.6.12-59.23.1 samba-client-debuginfo-32bit-3.6.12-59.23.1 samba-debuginfo-32bit-3.6.12-59.23.1 samba-winbind-32bit-3.6.12-59.23.1 samba-winbind-debuginfo-32bit-3.6.12-59.23.1 - openSUSE 12.3 (noarch): samba-doc-3.6.12-59.23.1 References: http://support.novell.com/security/cve/CVE-2014-0178.html http://support.novell.com/security/cve/CVE-2014-0244.html http://support.novell.com/security/cve/CVE-2014-3493.html https://bugzilla.novell.com/685093 https://bugzilla.novell.com/872396 https://bugzilla.novell.com/879390 https://bugzilla.novell.com/880962 https://bugzilla.novell.com/883758

1 0

openSUSE-SU-2014:0856-1: important: kernel: security and bugfix release
by opensuse-security＠opensuse.org 01 Jul '14

01 Jul '14

openSUSE Security Update: kernel: security and bugfix release ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0856-1 Rating: important References: #869563 #870173 #870576 #871561 #873374 #876102 #878274 #880892 Cross-References: CVE-2013-7339 CVE-2014-0055 CVE-2014-0077 CVE-2014-2678 CVE-2014-2851 CVE-2014-3122 CVE-2014-3153 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has one errata is now available. Description: The Linux kernel was updated to fix security issues and bugs: Security issues fixed: CVE-2014-3153: The futex_requeue function in kernel/futex.c in the Linux kernel did not ensure that calls have two different futex addresses, which allowed local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification. CVE-2014-0077: drivers/vhost/net.c in the Linux kernel, when mergeable buffers are disabled, did not properly validate packet lengths, which allowed guest OS users to cause a denial of service (memory corruption and host OS crash) or possibly gain privileges on the host OS via crafted packets, related to the handle_rx and get_rx_bufs functions. CVE-2014-0055: The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package did not properly handle vhost_get_vq_desc errors, which allowed guest OS users to cause a denial of service (host OS crash) via unspecified vectors. CVE-2014-2678: The rds_iw_laddr_check function in net/rds/iw.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a bind system call for an RDS socket on a system that lacks RDS transports. CVE-2013-7339: The rds_ib_laddr_check function in net/rds/ib.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a bind system call for an RDS socket on a system that lacks RDS transports. CVE-2014-2851: Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel allowed local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that leverages an improperly managed reference counter. CVE-2014-3122: The try_to_unmap_cluster function in mm/rmap.c in the Linux kernel did not properly consider which pages must be locked, which allowed local users to cause a denial of service (system crash) by triggering a memory-usage pattern that requires removal of page-table mappings. Bugs fixed: - memcg: deprecate memory.force_empty knob (bnc#878274). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2014-451 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): kernel-default-3.7.10-1.36.1 kernel-default-base-3.7.10-1.36.1 kernel-default-base-debuginfo-3.7.10-1.36.1 kernel-default-debuginfo-3.7.10-1.36.1 kernel-default-debugsource-3.7.10-1.36.1 kernel-default-devel-3.7.10-1.36.1 kernel-default-devel-debuginfo-3.7.10-1.36.1 kernel-syms-3.7.10-1.36.1 - openSUSE 12.3 (i686 x86_64): kernel-debug-3.7.10-1.36.1 kernel-debug-base-3.7.10-1.36.1 kernel-debug-base-debuginfo-3.7.10-1.36.1 kernel-debug-debuginfo-3.7.10-1.36.1 kernel-debug-debugsource-3.7.10-1.36.1 kernel-debug-devel-3.7.10-1.36.1 kernel-debug-devel-debuginfo-3.7.10-1.36.1 kernel-desktop-3.7.10-1.36.1 kernel-desktop-base-3.7.10-1.36.1 kernel-desktop-base-debuginfo-3.7.10-1.36.1 kernel-desktop-debuginfo-3.7.10-1.36.1 kernel-desktop-debugsource-3.7.10-1.36.1 kernel-desktop-devel-3.7.10-1.36.1 kernel-desktop-devel-debuginfo-3.7.10-1.36.1 kernel-ec2-3.7.10-1.36.1 kernel-ec2-base-3.7.10-1.36.1 kernel-ec2-base-debuginfo-3.7.10-1.36.1 kernel-ec2-debuginfo-3.7.10-1.36.1 kernel-ec2-debugsource-3.7.10-1.36.1 kernel-ec2-devel-3.7.10-1.36.1 kernel-ec2-devel-debuginfo-3.7.10-1.36.1 kernel-trace-3.7.10-1.36.1 kernel-trace-base-3.7.10-1.36.1 kernel-trace-base-debuginfo-3.7.10-1.36.1 kernel-trace-debuginfo-3.7.10-1.36.1 kernel-trace-debugsource-3.7.10-1.36.1 kernel-trace-devel-3.7.10-1.36.1 kernel-trace-devel-debuginfo-3.7.10-1.36.1 kernel-vanilla-3.7.10-1.36.1 kernel-vanilla-debuginfo-3.7.10-1.36.1 kernel-vanilla-debugsource-3.7.10-1.36.1 kernel-vanilla-devel-3.7.10-1.36.1 kernel-vanilla-devel-debuginfo-3.7.10-1.36.1 kernel-xen-3.7.10-1.36.1 kernel-xen-base-3.7.10-1.36.1 kernel-xen-base-debuginfo-3.7.10-1.36.1 kernel-xen-debuginfo-3.7.10-1.36.1 kernel-xen-debugsource-3.7.10-1.36.1 kernel-xen-devel-3.7.10-1.36.1 kernel-xen-devel-debuginfo-3.7.10-1.36.1 - openSUSE 12.3 (noarch): kernel-devel-3.7.10-1.36.1 kernel-docs-3.7.10-1.36.2 kernel-source-3.7.10-1.36.1 kernel-source-vanilla-3.7.10-1.36.1 - openSUSE 12.3 (i686): kernel-pae-3.7.10-1.36.1 kernel-pae-base-3.7.10-1.36.1 kernel-pae-base-debuginfo-3.7.10-1.36.1 kernel-pae-debuginfo-3.7.10-1.36.1 kernel-pae-debugsource-3.7.10-1.36.1 kernel-pae-devel-3.7.10-1.36.1 kernel-pae-devel-debuginfo-3.7.10-1.36.1 References: http://support.novell.com/security/cve/CVE-2013-7339.html http://support.novell.com/security/cve/CVE-2014-0055.html http://support.novell.com/security/cve/CVE-2014-0077.html http://support.novell.com/security/cve/CVE-2014-2678.html http://support.novell.com/security/cve/CVE-2014-2851.html http://support.novell.com/security/cve/CVE-2014-3122.html http://support.novell.com/security/cve/CVE-2014-3153.html https://bugzilla.novell.com/869563 https://bugzilla.novell.com/870173 https://bugzilla.novell.com/870576 https://bugzilla.novell.com/871561 https://bugzilla.novell.com/873374 https://bugzilla.novell.com/876102 https://bugzilla.novell.com/878274 https://bugzilla.novell.com/880892

1 0

openSUSE-SU-2014:0855-1: moderate: seamonkey: Update fixes nine security issues
by opensuse-security＠opensuse.org 01 Jul '14

01 Jul '14

openSUSE Security Update: seamonkey: Update fixes nine security issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0855-1 Rating: moderate References: #881874 Cross-References: CVE-2014-1533 CVE-2014-1534 CVE-2014-1536 CVE-2014-1537 CVE-2014-1538 CVE-2014-1539 CVE-2014-1540 CVE-2014-1541 CVE-2014-1542 CVE-2014-1543 CVE-2014-1545 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: seamonkey was updated to version 2.26.1 to fix nine security issues. These security issues were fixed: * Miscellaneous memory safety hazards (CVE-2014-1533/CVE-2014-1534) * Use-after-free and out of bounds issues found using Address Sanitizer (CVE-2014-1536/CVE-2014-1537/CVE-2014-1538) * Use-after-free in Event Listener Manager (CVE-2014-1540) * Use-after-free with SMIL Animation Controller (CVE-2014-1541) * Buffer overflow in Web Audio Speex resampler (CVE-2014-1542) * Out of bounds write in NSPR (CVE-2014-1545) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-448 - openSUSE 12.3: zypper in -t patch openSUSE-2014-448 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): seamonkey-2.26.1-28.3 seamonkey-debuginfo-2.26.1-28.3 seamonkey-debugsource-2.26.1-28.3 seamonkey-dom-inspector-2.26.1-28.3 seamonkey-irc-2.26.1-28.3 seamonkey-translations-common-2.26.1-28.3 seamonkey-translations-other-2.26.1-28.3 seamonkey-venkman-2.26.1-28.3 - openSUSE 12.3 (i586 x86_64): seamonkey-2.26.1-1.53.3 seamonkey-debuginfo-2.26.1-1.53.3 seamonkey-debugsource-2.26.1-1.53.3 seamonkey-dom-inspector-2.26.1-1.53.3 seamonkey-irc-2.26.1-1.53.3 seamonkey-translations-common-2.26.1-1.53.3 seamonkey-translations-other-2.26.1-1.53.3 seamonkey-venkman-2.26.1-1.53.3 References: http://support.novell.com/security/cve/CVE-2014-1533.html http://support.novell.com/security/cve/CVE-2014-1534.html http://support.novell.com/security/cve/CVE-2014-1536.html http://support.novell.com/security/cve/CVE-2014-1537.html http://support.novell.com/security/cve/CVE-2014-1538.html http://support.novell.com/security/cve/CVE-2014-1539.html http://support.novell.com/security/cve/CVE-2014-1540.html http://support.novell.com/security/cve/CVE-2014-1541.html http://support.novell.com/security/cve/CVE-2014-1542.html http://support.novell.com/security/cve/CVE-2014-1543.html http://support.novell.com/security/cve/CVE-2014-1545.html https://bugzilla.novell.com/881874

1 0

openSUSE-RU-2014:0854-1: spec-cleaner: Version update to 0.5.8
by maintenance＠opensuse.org 01 Jul '14

01 Jul '14

openSUSE Recommended Update: spec-cleaner: Version update to 0.5.8 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0854-1 Rating: low References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issues with spec-cleaner: - update version to 0.5.8: * brown paperbag release fixing tests on py3. * Updates about smp_mflags parsing * makeinstall macro replacing improvements. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-444 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): spec-cleaner-0.5.8-6.12.1 References:

1 0