August 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2014:1040-1: moderate: samba
by opensuse-security＠opensuse.org 20 Aug '14

20 Aug '14

openSUSE Security Update: samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1040-1 Rating: moderate References: #865627 #884056 #889429 #889539 #890005 #890008 Cross-References: CVE-2014-3560 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has 5 fixes is now available. Description: This samba update fixes the following security and non security issues: - Fix winbind service parameter usage; (bnc#890005). - lib/param: change the default for "winbind expand groups" to "0"; (bnc#890008). - Update to 4.1.11. + A malicious browser can send packets that may overwrite the heap of the target nmbd NetBIOS name services daemon; CVE-2014-3560; (bnc#889429). - Fix "net time" segfault; (bso#10728); (bnc#889539). - Update to 4.1.10. + net/doc: Make clear that net vampire is for NT4 domains only; (bso#3263). + dbcheck: Add check and test for various invalid userParameters values; (bso#8077). + s4:dsdb/samldb: Don't allow 'userParameters' to be modified over LDAP for now; (bso#8077). + Simple use case results in "no talloc stackframe around, leaking memory" error; (bso#8449). + s4:dsdb/repl_meta_data: Make sure objectGUID can't be deleted; (bso#9763). + dsdb: Always store and return the userParameters as a array of LE 16-bit values; (bso#10130). + s4:repl_meta_data: fix array assignment in replmd_process_linked_attribute(); (bso#10294). + ldb-samba: fix a memory leak in ldif_canonicalise_objectCategory(); (bso#10469). + dbchecker: Verify and fix broken dn values; (bso#10536). + dsdb: Rename private_data to rootdse_private_data in rootdse; (bso#10582). + s3: libsmbclient: Work around bugs in SLES cifsd and Apple smbx SMB1 servers; (bso#10587). + Fix "PANIC: assert failed at ../source3/smbd/open.c(1582): ret"; (bso#10593). + rid_array used before status checked - segmentation fault due to null pointer dereference; (bso#10627). + Samba won't start on a machine configured with only IPv4; (bso#10653). + msg_channel: Fix a 100% CPU loop; (bso#10663). + s3: smbd: Prevent file truncation on an open that fails with share mode violation; (bso#10671); (bnc#884056). + s3: SMB2: Fix leak of blocking lock records in the database; (bso#10673). + samba-tool: Add --site parameter to provision command; (bso#10674). + smbstatus: Fix an uninitialized variable; (bso#10680). + SMB1 blocking locks can fail notification on unlock, causing client timeout; (bso#10684). + s3: smbd: Locking, fix off-by one calculation in brl_pending_overlap(); (bso#10685). + 'RW2' smbtorture test fails when -N <numprocs> is set to 2 due to the invalid status check in the second client; (bso#10687). + wbcCredentialCache fails if challenge_blob is not first; (bso#10692). + Backport ldb-1.1.17 + changes from master; (bso#10693). + Fix SEGV from improperly formed SUBSTRING/PRESENCE filter; (bso#10693). + ldb: Add a env variable to disable RTLD_DEEPBIND; (bso#10693). + ldb: Do not build libldb-cmdline when using system ldb; (bso#10693). + ldb: Fix 1138330 Dereference null return value, fix CIDs 241329, 240798, 1034791, 1034792 1034910, 1034910); (bso#10693). + ldb: make the successful ldb_transaction_start() message clearer; (bso#10693). + ldb:pyldb: Add some more helper functions for LdbDn; (bso#10693). + ldb: Use of NULL pointer bugfix; (bso#10693). + lib/ldb: Fix compiler warnings; (bso#10693). + pyldb: Decrement ref counters on py_results and quiet warnings; (bso#10693). + s4-openldap: Remove use of talloc_reference in ldb_map_outbound.c; (bso#10693). + dsdb: Return NO_SUCH_OBJECT if a basedn is a deleted object; (bso#10694). + s4:dsdb/extended_dn_in: Don't force DSDB_SEARCH_SHOW_RECYCLED; (bso#10694). + Backport autobuild/selftest fixes from master; (bso#10696). + Backport drs-crackname fixes from master; (bso#10698). + smbd: Avoid double-free in get_print_db_byname; (bso#10699). + Backport access check related fixes from master; (bso#10700). + Backport provision fixes from master; (bso#10703). + s3:smb2_read: let smb2_sendfile_send_data() behave like send_file_readX(); (bso#10706). + s3: Fix missing braces in nfs4_acls.c. - Add missing newline to debug message in daemon_ready(); (bnc#865627). - BuildRequire systemd-devel, configure --with-systemd, and modify the service files accordingly on post-12.2 systems; (bso#10517); (bnc#865627). - Prevent file truncation on an open that fails with share mode violation; (bso#10671); (bnc#884056). Dependend libraries were version updated: libtdb was updated to version 1.3.0. (lots of bugfixes, some new functionality) libtevent was updated to 0.9.21. (lots of bugfixes, some new functionality) libldb was updated to to 1.1.17 (lots of bugfixes, some new functionality) libtalloc was updated to 2.1.1. (lots of bugfixes, some new functionality) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-507 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): ldb-debugsource-1.1.17-3.4.1 ldb-tools-1.1.17-3.4.1 ldb-tools-debuginfo-1.1.17-3.4.1 libdcerpc-atsvc-devel-4.1.11-3.26.1 libdcerpc-atsvc0-4.1.11-3.26.1 libdcerpc-atsvc0-debuginfo-4.1.11-3.26.1 libdcerpc-binding0-4.1.11-3.26.1 libdcerpc-binding0-debuginfo-4.1.11-3.26.1 libdcerpc-devel-4.1.11-3.26.1 libdcerpc-samr-devel-4.1.11-3.26.1 libdcerpc-samr0-4.1.11-3.26.1 libdcerpc-samr0-debuginfo-4.1.11-3.26.1 libdcerpc0-4.1.11-3.26.1 libdcerpc0-debuginfo-4.1.11-3.26.1 libgensec-devel-4.1.11-3.26.1 libgensec0-4.1.11-3.26.1 libgensec0-debuginfo-4.1.11-3.26.1 libldb-devel-1.1.17-3.4.1 libldb-devel-debuginfo-1.1.17-3.4.1 libldb1-1.1.17-3.4.1 libldb1-debuginfo-1.1.17-3.4.1 libndr-devel-4.1.11-3.26.1 libndr-krb5pac-devel-4.1.11-3.26.1 libndr-krb5pac0-4.1.11-3.26.1 libndr-krb5pac0-debuginfo-4.1.11-3.26.1 libndr-nbt-devel-4.1.11-3.26.1 libndr-nbt0-4.1.11-3.26.1 libndr-nbt0-debuginfo-4.1.11-3.26.1 libndr-standard-devel-4.1.11-3.26.1 libndr-standard0-4.1.11-3.26.1 libndr-standard0-debuginfo-4.1.11-3.26.1 libndr0-4.1.11-3.26.1 libndr0-debuginfo-4.1.11-3.26.1 libnetapi-devel-4.1.11-3.26.1 libnetapi0-4.1.11-3.26.1 libnetapi0-debuginfo-4.1.11-3.26.1 libpdb-devel-4.1.11-3.26.1 libpdb0-4.1.11-3.26.1 libpdb0-debuginfo-4.1.11-3.26.1 libregistry-devel-4.1.11-3.26.1 libregistry0-4.1.11-3.26.1 libregistry0-debuginfo-4.1.11-3.26.1 libsamba-credentials-devel-4.1.11-3.26.1 libsamba-credentials0-4.1.11-3.26.1 libsamba-credentials0-debuginfo-4.1.11-3.26.1 libsamba-hostconfig-devel-4.1.11-3.26.1 libsamba-hostconfig0-4.1.11-3.26.1 libsamba-hostconfig0-debuginfo-4.1.11-3.26.1 libsamba-policy-devel-4.1.11-3.26.1 libsamba-policy0-4.1.11-3.26.1 libsamba-policy0-debuginfo-4.1.11-3.26.1 libsamba-util-devel-4.1.11-3.26.1 libsamba-util0-4.1.11-3.26.1 libsamba-util0-debuginfo-4.1.11-3.26.1 libsamdb-devel-4.1.11-3.26.1 libsamdb0-4.1.11-3.26.1 libsamdb0-debuginfo-4.1.11-3.26.1 libsmbclient-devel-4.1.11-3.26.1 libsmbclient-raw-devel-4.1.11-3.26.1 libsmbclient-raw0-4.1.11-3.26.1 libsmbclient-raw0-debuginfo-4.1.11-3.26.1 libsmbclient0-4.1.11-3.26.1 libsmbclient0-debuginfo-4.1.11-3.26.1 libsmbconf-devel-4.1.11-3.26.1 libsmbconf0-4.1.11-3.26.1 libsmbconf0-debuginfo-4.1.11-3.26.1 libsmbldap-devel-4.1.11-3.26.1 libsmbldap0-4.1.11-3.26.1 libsmbldap0-debuginfo-4.1.11-3.26.1 libsmbsharemodes-devel-4.1.11-3.26.1 libsmbsharemodes0-4.1.11-3.26.1 libsmbsharemodes0-debuginfo-4.1.11-3.26.1 libtalloc-devel-2.1.1-7.4.1 libtalloc2-2.1.1-7.4.1 libtalloc2-debuginfo-2.1.1-7.4.1 libtdb-devel-1.3.0-4.4.1 libtdb1-1.3.0-4.4.1 libtdb1-debuginfo-1.3.0-4.4.1 libtevent-devel-0.9.21-4.4.1 libtevent-util-devel-4.1.11-3.26.1 libtevent-util0-4.1.11-3.26.1 libtevent-util0-debuginfo-4.1.11-3.26.1 libtevent0-0.9.21-4.4.1 libtevent0-debuginfo-0.9.21-4.4.1 libwbclient-devel-4.1.11-3.26.1 libwbclient0-4.1.11-3.26.1 libwbclient0-debuginfo-4.1.11-3.26.1 pyldb-1.1.17-3.4.1 pyldb-debuginfo-1.1.17-3.4.1 pyldb-devel-1.1.17-3.4.1 pytalloc-2.1.1-7.4.1 pytalloc-debuginfo-2.1.1-7.4.1 pytalloc-devel-2.1.1-7.4.1 python-tdb-1.3.0-4.4.1 python-tdb-debuginfo-1.3.0-4.4.1 python-tevent-0.9.21-4.4.1 python-tevent-debuginfo-0.9.21-4.4.1 samba-4.1.11-3.26.1 samba-client-4.1.11-3.26.1 samba-client-debuginfo-4.1.11-3.26.1 samba-core-devel-4.1.11-3.26.1 samba-debuginfo-4.1.11-3.26.1 samba-debugsource-4.1.11-3.26.1 samba-libs-4.1.11-3.26.1 samba-libs-debuginfo-4.1.11-3.26.1 samba-pidl-4.1.11-3.26.1 samba-python-4.1.11-3.26.1 samba-python-debuginfo-4.1.11-3.26.1 samba-test-4.1.11-3.26.1 samba-test-debuginfo-4.1.11-3.26.1 samba-test-devel-4.1.11-3.26.1 samba-winbind-4.1.11-3.26.1 samba-winbind-debuginfo-4.1.11-3.26.1 talloc-debugsource-2.1.1-7.4.1 tdb-debugsource-1.3.0-4.4.1 tdb-tools-1.3.0-4.4.1 tdb-tools-debuginfo-1.3.0-4.4.1 tevent-debugsource-0.9.21-4.4.1 - openSUSE 13.1 (x86_64): libdcerpc-atsvc0-32bit-4.1.11-3.26.1 libdcerpc-atsvc0-debuginfo-32bit-4.1.11-3.26.1 libdcerpc-binding0-32bit-4.1.11-3.26.1 libdcerpc-binding0-debuginfo-32bit-4.1.11-3.26.1 libdcerpc-samr0-32bit-4.1.11-3.26.1 libdcerpc-samr0-debuginfo-32bit-4.1.11-3.26.1 libdcerpc0-32bit-4.1.11-3.26.1 libdcerpc0-debuginfo-32bit-4.1.11-3.26.1 libgensec0-32bit-4.1.11-3.26.1 libgensec0-debuginfo-32bit-4.1.11-3.26.1 libldb1-32bit-1.1.17-3.4.1 libldb1-debuginfo-32bit-1.1.17-3.4.1 libndr-krb5pac0-32bit-4.1.11-3.26.1 libndr-krb5pac0-debuginfo-32bit-4.1.11-3.26.1 libndr-nbt0-32bit-4.1.11-3.26.1 libndr-nbt0-debuginfo-32bit-4.1.11-3.26.1 libndr-standard0-32bit-4.1.11-3.26.1 libndr-standard0-debuginfo-32bit-4.1.11-3.26.1 libndr0-32bit-4.1.11-3.26.1 libndr0-debuginfo-32bit-4.1.11-3.26.1 libnetapi0-32bit-4.1.11-3.26.1 libnetapi0-debuginfo-32bit-4.1.11-3.26.1 libpdb0-32bit-4.1.11-3.26.1 libpdb0-debuginfo-32bit-4.1.11-3.26.1 libregistry0-32bit-4.1.11-3.26.1 libregistry0-debuginfo-32bit-4.1.11-3.26.1 libsamba-credentials0-32bit-4.1.11-3.26.1 libsamba-credentials0-debuginfo-32bit-4.1.11-3.26.1 libsamba-hostconfig0-32bit-4.1.11-3.26.1 libsamba-hostconfig0-debuginfo-32bit-4.1.11-3.26.1 libsamba-policy0-32bit-4.1.11-3.26.1 libsamba-policy0-debuginfo-32bit-4.1.11-3.26.1 libsamba-util0-32bit-4.1.11-3.26.1 libsamba-util0-debuginfo-32bit-4.1.11-3.26.1 libsamdb0-32bit-4.1.11-3.26.1 libsamdb0-debuginfo-32bit-4.1.11-3.26.1 libsmbclient-raw0-32bit-4.1.11-3.26.1 libsmbclient-raw0-debuginfo-32bit-4.1.11-3.26.1 libsmbclient0-32bit-4.1.11-3.26.1 libsmbclient0-debuginfo-32bit-4.1.11-3.26.1 libsmbconf0-32bit-4.1.11-3.26.1 libsmbconf0-debuginfo-32bit-4.1.11-3.26.1 libsmbldap0-32bit-4.1.11-3.26.1 libsmbldap0-debuginfo-32bit-4.1.11-3.26.1 libtalloc2-32bit-2.1.1-7.4.1 libtalloc2-debuginfo-32bit-2.1.1-7.4.1 libtdb1-32bit-1.3.0-4.4.1 libtdb1-debuginfo-32bit-1.3.0-4.4.1 libtevent-util0-32bit-4.1.11-3.26.1 libtevent-util0-debuginfo-32bit-4.1.11-3.26.1 libtevent0-32bit-0.9.21-4.4.1 libtevent0-debuginfo-32bit-0.9.21-4.4.1 libwbclient0-32bit-4.1.11-3.26.1 libwbclient0-debuginfo-32bit-4.1.11-3.26.1 pyldb-32bit-1.1.17-3.4.1 pyldb-debuginfo-32bit-1.1.17-3.4.1 pytalloc-32bit-2.1.1-7.4.1 pytalloc-debuginfo-32bit-2.1.1-7.4.1 python-tdb-32bit-1.3.0-4.4.1 python-tdb-debuginfo-32bit-1.3.0-4.4.1 python-tevent-32bit-0.9.21-4.4.1 python-tevent-debuginfo-32bit-0.9.21-4.4.1 samba-32bit-4.1.11-3.26.1 samba-client-32bit-4.1.11-3.26.1 samba-client-debuginfo-32bit-4.1.11-3.26.1 samba-debuginfo-32bit-4.1.11-3.26.1 samba-libs-32bit-4.1.11-3.26.1 samba-libs-debuginfo-32bit-4.1.11-3.26.1 samba-winbind-32bit-4.1.11-3.26.1 samba-winbind-debuginfo-32bit-4.1.11-3.26.1 - openSUSE 13.1 (noarch): samba-doc-4.1.11-3.26.1 References: http://support.novell.com/security/cve/CVE-2014-3560.html https://bugzilla.novell.com/865627 https://bugzilla.novell.com/884056 https://bugzilla.novell.com/889429 https://bugzilla.novell.com/889539 https://bugzilla.novell.com/890005 https://bugzilla.novell.com/890008

1 0

openSUSE-SU-2014:1039-1: moderate: update for gpgme
by opensuse-security＠opensuse.org 20 Aug '14

20 Aug '14

openSUSE Security Update: update for gpgme ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1039-1 Rating: moderate References: #890123 Cross-References: CVE-2014-3564 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This gpgme update to version 1.4.4 fixes the following security and non i security issues: - Fixed possible overflow in gpgsm and uiserver engines. (CVE-2014-3564, bnc#890123) - Fixed possibled segv in gpgme_op_card_edit. - Fixed minor memleaks and possible zombie processes. - Fixed prototype inconsistencies and void pointer arithmetic. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-500 - openSUSE 12.3: zypper in -t patch openSUSE-2014-500 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): gpgme-1.4.4-2.4.1 gpgme-debugsource-1.4.4-2.4.1 libgpgme-devel-1.4.4-2.4.1 libgpgme11-1.4.4-2.4.1 libgpgme11-debuginfo-1.4.4-2.4.1 - openSUSE 13.1 (x86_64): libgpgme11-32bit-1.4.4-2.4.1 libgpgme11-debuginfo-32bit-1.4.4-2.4.1 - openSUSE 12.3 (i586 x86_64): gpgme-1.3.2-2.4.1 gpgme-debugsource-1.3.2-2.4.1 libgpgme-devel-1.3.2-2.4.1 libgpgme11-1.3.2-2.4.1 libgpgme11-debuginfo-1.3.2-2.4.1 - openSUSE 12.3 (x86_64): libgpgme11-32bit-1.3.2-2.4.1 libgpgme11-debuginfo-32bit-1.3.2-2.4.1 References: http://support.novell.com/security/cve/CVE-2014-3564.html https://bugzilla.novell.com/890123

1 0

openSUSE-SU-2014:1038-1: moderate: update for wireshark
by opensuse-security＠opensuse.org 20 Aug '14

20 Aug '14

openSUSE Security Update: update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1038-1 Rating: moderate References: #889899 #889900 #889901 #889906 Cross-References: CVE-2014-5161 CVE-2014-5162 CVE-2014-5163 CVE-2014-5164 CVE-2014-5165 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This wireshark version update to 1.10.9 fixes the following security issues: - fixes several crashes triggered by malformed protocol packages * The Catapult DCT2000 and IrDA dissectors could underrun a buffer wnpa-sec-2014-08 CVE-2014-5161 CVE-2014-5162 (bnc#889901) * The GSM Management dissector could crash wnpa-sec-2014-09 CVE-2014-5163 (bnc#889906) * The RLC dissector could crash wnpa-sec-2014-10 CVE-2014-5164 (bnc#889900) * The ASN.1 BER dissector could crash wnpa-sec-2014-11 CVE-2014-5165 (bnc#889899) - Further bug fixes as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.10.9.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-499 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): wireshark-1.10.9-20.1 wireshark-debuginfo-1.10.9-20.1 wireshark-debugsource-1.10.9-20.1 wireshark-devel-1.10.9-20.1 References: http://support.novell.com/security/cve/CVE-2014-5161.html http://support.novell.com/security/cve/CVE-2014-5162.html http://support.novell.com/security/cve/CVE-2014-5163.html http://support.novell.com/security/cve/CVE-2014-5164.html http://support.novell.com/security/cve/CVE-2014-5165.html https://bugzilla.novell.com/889899 https://bugzilla.novell.com/889900 https://bugzilla.novell.com/889901 https://bugzilla.novell.com/889906

1 0

openSUSE-RU-2014:1031-1: libyui-qt-pkg: Fix display of images in YaST QT's "Symbols" help
by maintenance＠opensuse.org 18 Aug '14

18 Aug '14

openSUSE Recommended Update: libyui-qt-pkg: Fix display of images in YaST QT's "Symbols" help ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1031-1 Rating: low References: #890718 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with libyui-qt-pkg: -bnc#890718: Fix display of images in YaST QT's "Symbols" help Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-497 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libyui-qt-pkg-debugsource-2.42.13-2.4.1 libyui-qt-pkg-devel-2.42.13-2.4.1 libyui-qt-pkg5-2.42.13-2.4.1 libyui-qt-pkg5-debuginfo-2.42.13-2.4.1 - openSUSE 13.1 (noarch): libyui-qt-pkg-doc-2.42.13-2.4.1 References: https://bugzilla.novell.com/890718

1 0

openSUSE-RU-2014:1030-1: libyui-qt-pkg: Fixes display of images in YaST QT's "Symbols" help
by maintenance＠opensuse.org 18 Aug '14

18 Aug '14

openSUSE Recommended Update: libyui-qt-pkg: Fixes display of images in YaST QT's "Symbols" help ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1030-1 Rating: low References: #831758 #890718 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues with libyui-qt-pkg: -bnc#890718: Fixes display of images in YaST QT's "Symbols" help -bnc#831758: added patch to actually install the "Symbols" help images Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2014-498 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libyui-qt-pkg-debugsource-2.42.5-1.5.1 libyui-qt-pkg-devel-2.42.5-1.5.1 libyui-qt-pkg4-2.42.5-1.5.1 libyui-qt-pkg4-debuginfo-2.42.5-1.5.1 - openSUSE 12.3 (noarch): libyui-qt-pkg-doc-2.42.5-1.5.1 References: https://bugzilla.novell.com/831758 https://bugzilla.novell.com/890718

1 0

openSUSE-SU-2014:1029-1: critical: update for flash-player
by opensuse-security＠opensuse.org 16 Aug '14

16 Aug '14

openSUSE Security Update: update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1029-1 Rating: critical References: #891688 Cross-References: CVE-2014-0538 CVE-2014-0540 CVE-2014-0541 CVE-2014-0542 CVE-2014-0543 CVE-2014-0544 CVE-2014-0545 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This critical flash-player update fixes the following CVEs: - Security update to 11.2.202.400 (bnc#891688): * APSB14-18, CVE-2014-0538, CVE-2014-0540, CVE-2014-0541, CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, CVE-2014-0545 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-75 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.400-123.1 flash-player-gnome-11.2.202.400-123.1 flash-player-kde4-11.2.202.400-123.1 References: http://support.novell.com/security/cve/CVE-2014-0538.html http://support.novell.com/security/cve/CVE-2014-0540.html http://support.novell.com/security/cve/CVE-2014-0541.html http://support.novell.com/security/cve/CVE-2014-0542.html http://support.novell.com/security/cve/CVE-2014-0543.html http://support.novell.com/security/cve/CVE-2014-0544.html http://support.novell.com/security/cve/CVE-2014-0545.html https://bugzilla.novell.com/891688

1 0

openSUSE-RU-2014:1025-1: moderate: Softwarestack update for openSUSE 13.1
by maintenance＠opensuse.org 15 Aug '14

15 Aug '14

openSUSE Recommended Update: Softwarestack update for openSUSE 13.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1025-1 Rating: moderate References: #883951 #885254 #888919 #889426 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes the following issues with the Softwarestack: -libzypp: + bnc#888919: * Remove orphaned package caches on refresh * Fix gpg key creation/modification date computation + bnc#885254: Fix wrong '//' when extending URLs with an empty path + updated translations -libzypp-testsuite-tools: +bnc#889426: Also install deptestomatic.noui + Add support for hardware dependencies, multiversion packages. -zypper: + updated translations + bnc#883951: fix zypper.8 man page format Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-495 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libzypp-13.10.4-23.1 libzypp-debuginfo-13.10.4-23.1 libzypp-debugsource-13.10.4-23.1 libzypp-devel-13.10.4-23.1 libzypp-testsuite-tools-4.4.1-2.4.1 zypper-1.9.17-26.1 zypper-debuginfo-1.9.17-26.1 zypper-debugsource-1.9.17-26.1 - openSUSE 13.1 (noarch): zypper-aptitude-1.9.17-26.1 zypper-log-1.9.17-26.1 References: https://bugzilla.novell.com/883951 https://bugzilla.novell.com/885254 https://bugzilla.novell.com/888919 https://bugzilla.novell.com/889426

1 0

openSUSE-RU-2014:1024-1: sg3_utils: Fixed error reversion from openSUSE 12.2
by maintenance＠opensuse.org 15 Aug '14

15 Aug '14

openSUSE Recommended Update: sg3_utils: Fixed error reversion from openSUSE 12.2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1024-1 Rating: low References: #815156 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with sg3_utils: - replaced old files - bnc#815156: removed patch to fix error reversion from openSUSE 12.2 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-496 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libsgutils-devel-1.36-3.4.1 libsgutils2-2-1.36-3.4.1 libsgutils2-2-debuginfo-1.36-3.4.1 sg3_utils-1.36-3.4.1 sg3_utils-debuginfo-1.36-3.4.1 sg3_utils-debugsource-1.36-3.4.1 References: https://bugzilla.novell.com/815156

1 0

openSUSE-SU-2014:1020-1: critical: update for flash-player
by opensuse-security＠opensuse.org 14 Aug '14

14 Aug '14

openSUSE Security Update: update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1020-1 Rating: critical References: #891688 Cross-References: CVE-2014-0538 CVE-2014-0540 CVE-2014-0541 CVE-2014-0542 CVE-2014-0543 CVE-2014-0544 CVE-2014-0545 Affected Products: openSUSE 13.1:NonFree openSUSE 12.3:NonFree ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This critical flash-player update fixes the following CVEs: - Security update to 11.2.202.400 (bnc#891688): * APSB14-18, CVE-2014-0538, CVE-2014-0540, CVE-2014-0541, CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, CVE-2014-0545 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1:NonFree: zypper in -t patch openSUSE-2014-494 - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2014-494 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1:NonFree (i586 x86_64): flash-player-11.2.202.400-62.1 flash-player-gnome-11.2.202.400-62.1 flash-player-kde4-11.2.202.400-62.1 - openSUSE 12.3:NonFree (i586 x86_64): flash-player-11.2.202.400-2.88.1 flash-player-gnome-11.2.202.400-2.88.1 flash-player-kde4-11.2.202.400-2.88.1 References: http://support.novell.com/security/cve/CVE-2014-0538.html http://support.novell.com/security/cve/CVE-2014-0540.html http://support.novell.com/security/cve/CVE-2014-0541.html http://support.novell.com/security/cve/CVE-2014-0542.html http://support.novell.com/security/cve/CVE-2014-0543.html http://support.novell.com/security/cve/CVE-2014-0544.html http://support.novell.com/security/cve/CVE-2014-0545.html https://bugzilla.novell.com/891688

1 0

openSUSE-SU-2014:0987-1: moderate: cipher upgrade and SNI support for apache2-mod_nss
by opensuse-security＠opensuse.org 11 Aug '14

11 Aug '14

openSUSE Security Update: cipher upgrade and SNI support for apache2-mod_nss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0987-1 Rating: moderate References: #859439 #863518 #878681 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update introduces Server Name Indication support to mod_nss, which was not available previously. In addition to SNI, GCM ciphers have been added to the cipher list of mod_nss. A bug was corrected that prevented the entry of the certificate store passphrase if such a passphrase was set. Please note that the configuration presets were slightly changed so that the new ciphers are preferred (NSSCipherSuite directive), and the VirtualHost directive is now contained in /etc/apache2/vhosts.d/vhost-nss.templace (not used by apache because not named *.conf). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-74 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apache2-mod_nss-1.0.8-6.1 apache2-mod_nss-debuginfo-1.0.8-6.1 apache2-mod_nss-debugsource-1.0.8-6.1 References: https://bugzilla.novell.com/859439 https://bugzilla.novell.com/863518 https://bugzilla.novell.com/878681

1 0