August 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2014:0976-1: important: MozillaThunderbird: Update to 24.7.0
by opensuse-security＠opensuse.org 11 Aug '14

11 Aug '14

openSUSE Security Update: MozillaThunderbird: Update to 24.7.0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0976-1 Rating: important References: #887746 Cross-References: CVE-2014-1544 CVE-2014-1547 CVE-2014-1548 CVE-2014-1555 CVE-2014-1556 CVE-2014-1557 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: MozillaThunderbird was updated to Thunderbird 24.7.0 (bnc#887746) * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548 Miscellaneous memory safety hazards * MFSA 2014-61/CVE-2014-1555 (bmo#1023121) Use-after-free with FireOnStateChange event * MFSA 2014-62/CVE-2014-1556 (bmo#1028891) Exploitable WebGL crash with Cesium JavaScript library * MFSA 2014-63/CVE-2014-1544 (bmo#963150) Use-after-free while when manipulating certificates in the trusted cache (solved with NSS 3.16.2 requirement) * MFSA 2014-64/CVE-2014-1557 (bmo#913805) Crash in Skia library when scaling high quality images A standalone enigmail 1.7 package that was previously built as part of MozillaThunderbird was added. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-487 - openSUSE 12.3: zypper in -t patch openSUSE-2014-487 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): MozillaThunderbird-24.7.0-70.27.1 MozillaThunderbird-buildsymbols-24.7.0-70.27.1 MozillaThunderbird-debuginfo-24.7.0-70.27.1 MozillaThunderbird-debugsource-24.7.0-70.27.1 MozillaThunderbird-devel-24.7.0-70.27.1 MozillaThunderbird-translations-common-24.7.0-70.27.1 MozillaThunderbird-translations-other-24.7.0-70.27.1 enigmail-1.7-2.1 enigmail-debuginfo-1.7-2.1 enigmail-debugsource-1.7-2.1 - openSUSE 12.3 (i586 x86_64): MozillaThunderbird-24.7.0-61.55.1 MozillaThunderbird-buildsymbols-24.7.0-61.55.1 MozillaThunderbird-debuginfo-24.7.0-61.55.1 MozillaThunderbird-debugsource-24.7.0-61.55.1 MozillaThunderbird-devel-24.7.0-61.55.1 MozillaThunderbird-translations-common-24.7.0-61.55.1 MozillaThunderbird-translations-other-24.7.0-61.55.1 enigmail-1.7-2.1 enigmail-debuginfo-1.7-2.1 enigmail-debugsource-1.7-2.1 References: http://support.novell.com/security/cve/CVE-2014-1544.html http://support.novell.com/security/cve/CVE-2014-1547.html http://support.novell.com/security/cve/CVE-2014-1548.html http://support.novell.com/security/cve/CVE-2014-1555.html http://support.novell.com/security/cve/CVE-2014-1556.html http://support.novell.com/security/cve/CVE-2014-1557.html https://bugzilla.novell.com/887746

1 0

openSUSE-SU-2014:0975-1: moderate: update for tor
by opensuse-security＠opensuse.org 11 Aug '14

11 Aug '14

openSUSE Security Update: update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0975-1 Rating: moderate References: #889688 Cross-References: CVE-2014-5117 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - Tor 0.2.4.23 [bnc#889688] [CVE-2014-5117] Slows down the risk from guard rotation and backports several important fixes from the Tor 0.2.5 alpha release series. - Major features: - Clients now look at the "usecreatefast" consensus parameter to decide whether to use CREATE_FAST or CREATE cells for the first hop of their circuit. This approach can improve security on connections where Tor's circuit handshake is stronger than the available TLS connection security levels, but the tradeoff is more computational load on guard relays. - Make the number of entry guards configurable via a new NumEntryGuards consensus parameter, and the number of directory guards configurable via a new NumDirectoryGuards consensus parameter. - Major bugfixes: - Fix a bug in the bounds-checking in the 32-bit curve25519-donna implementation that caused incorrect results on 32-bit implementations when certain malformed inputs were used along with a small class of private ntor keys. - Minor bugfixes: - Warn and drop the circuit if we receive an inbound 'relay early' cell. - Correct a confusing error message when trying to extend a circuit via the control protocol but we don't know a descriptor or microdescriptor for one of the specified relays. - Avoid an illegal read from stack when initializing the TLS module using a version of OpenSSL without all of the ciphers used by the v2 link handshake. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-492 - openSUSE 12.3: zypper in -t patch openSUSE-2014-492 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): tor-0.2.4.23-5.12.1 tor-debuginfo-0.2.4.23-5.12.1 tor-debugsource-0.2.4.23-5.12.1 - openSUSE 12.3 (i586 x86_64): tor-0.2.4.23-2.12.1 tor-debuginfo-0.2.4.23-2.12.1 tor-debugsource-0.2.4.23-2.12.1 References: http://support.novell.com/security/cve/CVE-2014-5117.html https://bugzilla.novell.com/889688

1 0

openSUSE-SU-2014:0974-1: elfutils
by opensuse-security＠opensuse.org 11 Aug '14

11 Aug '14

openSUSE Security Update: elfutils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0974-1 Rating: low References: #872785 Cross-References: CVE-2014-0172 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Fix integer overflow in check_section (CVE-2014-0172, bnc#872785) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-491 - openSUSE 12.3: zypper in -t patch openSUSE-2014-491 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): elfutils-0.155-6.4.1 elfutils-debuginfo-0.155-6.4.1 elfutils-debugsource-0.155-6.4.1 libasm-devel-0.155-6.4.1 libasm1-0.155-6.4.1 libasm1-debuginfo-0.155-6.4.1 libdw-devel-0.155-6.4.1 libdw1-0.155-6.4.1 libdw1-debuginfo-0.155-6.4.1 libebl-devel-0.155-6.4.1 libebl1-0.155-6.4.1 libebl1-debuginfo-0.155-6.4.1 libelf-devel-0.155-6.4.1 libelf1-0.155-6.4.1 libelf1-debuginfo-0.155-6.4.1 - openSUSE 13.1 (x86_64): libasm1-32bit-0.155-6.4.1 libasm1-debuginfo-32bit-0.155-6.4.1 libdw1-32bit-0.155-6.4.1 libdw1-debuginfo-32bit-0.155-6.4.1 libebl1-32bit-0.155-6.4.1 libebl1-debuginfo-32bit-0.155-6.4.1 libelf-devel-32bit-0.155-6.4.1 libelf1-32bit-0.155-6.4.1 libelf1-debuginfo-32bit-0.155-6.4.1 - openSUSE 12.3 (i586 x86_64): elfutils-0.155-2.4.1 elfutils-debuginfo-0.155-2.4.1 elfutils-debugsource-0.155-2.4.1 libasm-devel-0.155-2.4.1 libasm1-0.155-2.4.1 libasm1-debuginfo-0.155-2.4.1 libdw-devel-0.155-2.4.1 libdw1-0.155-2.4.1 libdw1-debuginfo-0.155-2.4.1 libebl-devel-0.155-2.4.1 libebl1-0.155-2.4.1 libebl1-debuginfo-0.155-2.4.1 libelf-devel-0.155-2.4.1 libelf1-0.155-2.4.1 libelf1-debuginfo-0.155-2.4.1 - openSUSE 12.3 (x86_64): libasm1-32bit-0.155-2.4.1 libasm1-debuginfo-32bit-0.155-2.4.1 libdw1-32bit-0.155-2.4.1 libdw1-debuginfo-32bit-0.155-2.4.1 libebl1-32bit-0.155-2.4.1 libebl1-debuginfo-32bit-0.155-2.4.1 libelf-devel-32bit-0.155-2.4.1 libelf1-32bit-0.155-2.4.1 libelf1-debuginfo-32bit-0.155-2.4.1 References: http://support.novell.com/security/cve/CVE-2014-0172.html https://bugzilla.novell.com/872785

1 0

openSUSE-RU-2014:0971-1: hunspell: Make hunspell work with emacs and UTF-8
by maintenance＠opensuse.org 08 Aug '14

08 Aug '14

openSUSE Recommended Update: hunspell: Make hunspell work with emacs and UTF-8 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0971-1 Rating: low References: #883505 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with hunspell: -bnc#883505: fixes behaviour in emacs when fed with UTF-8 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-481 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): hunspell-1.3.2-15.4.1 hunspell-debuginfo-1.3.2-15.4.1 hunspell-debugsource-1.3.2-15.4.1 hunspell-devel-1.3.2-15.4.1 hunspell-static-1.3.2-15.4.1 hunspell-tools-1.3.2-15.4.1 hunspell-tools-debuginfo-1.3.2-15.4.1 - openSUSE 13.1 (x86_64): hunspell-32bit-1.3.2-15.4.1 hunspell-debuginfo-32bit-1.3.2-15.4.1 References: https://bugzilla.novell.com/883505

1 0

openSUSE-SU-2014:0969-1: important: security issues addressed, most notably the mod_security heap overflow known as CVE-2014-0226
by opensuse-security＠opensuse.org 07 Aug '14

07 Aug '14

openSUSE Security Update: security issues addressed, most notably the mod_security heap overflow known as CVE-2014-0226 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0969-1 Rating: important References: #859916 #869105 #869106 #871309 #887765 #887768 Cross-References: CVE-2013-5705 CVE-2013-6438 CVE-2014-0098 CVE-2014-0226 CVE-2014-0231 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has one errata is now available. Description: apache2: - ECC support was added to mod_ssl - fix for a race condition in mod_status known as CVE-2014-0226 can lead to information disclosure; mod_status is not active by default, and is normally only open for connects from localhost. - fix for bug known as CVE-2014-0098 that can crash the apache process if a specially designed cookie is sent to the server (log_cookie.c) - fix for crash bug in mod_dav known as CVE-2013-6438 - fix for a problem with non-responsive CGI scripts that would otherwise cause the server to stall and deny service. CVE-2014-0231, new configuration parameter CGIDScriptTimeout defaults to 60s. apache2-mod_security2: - specially drafted chunked http requests allow an attacker to bypass filters configured in mod_security2. This vulnerability is known as CVE-2013-5705. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-72 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apache2-2.2.17-80.1 apache2-debuginfo-2.2.17-80.1 apache2-debugsource-2.2.17-80.1 apache2-devel-2.2.17-80.1 apache2-event-2.2.17-80.1 apache2-event-debuginfo-2.2.17-80.1 apache2-example-certificates-2.2.17-80.1 apache2-example-pages-2.2.17-80.1 apache2-itk-2.2.17-80.1 apache2-itk-debuginfo-2.2.17-80.1 apache2-mod_security2-2.7.5-16.1 apache2-mod_security2-debuginfo-2.7.5-16.1 apache2-mod_security2-debugsource-2.7.5-16.1 apache2-prefork-2.2.17-80.1 apache2-prefork-debuginfo-2.2.17-80.1 apache2-utils-2.2.17-80.1 apache2-utils-debuginfo-2.2.17-80.1 apache2-worker-2.2.17-80.1 apache2-worker-debuginfo-2.2.17-80.1 - openSUSE 11.4 (noarch): apache2-doc-2.2.17-80.1 References: http://support.novell.com/security/cve/CVE-2013-5705.html http://support.novell.com/security/cve/CVE-2013-6438.html http://support.novell.com/security/cve/CVE-2014-0098.html http://support.novell.com/security/cve/CVE-2014-0226.html http://support.novell.com/security/cve/CVE-2014-0231.html https://bugzilla.novell.com/859916 https://bugzilla.novell.com/869105 https://bugzilla.novell.com/869106 https://bugzilla.novell.com/871309 https://bugzilla.novell.com/887765 https://bugzilla.novell.com/887768

1 0

openSUSE-RU-2014:0965-1: moderate: NetworkManager: simplify netlink msg validation
by maintenance＠opensuse.org 06 Aug '14

06 Aug '14

openSUSE Recommended Update: NetworkManager: simplify netlink msg validation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0965-1 Rating: moderate References: #888210 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with NetworkManager: - bnc#888210: Simplify netlink msg validation to fix regression with the latest libnl3 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-480 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): NetworkManager-0.9.8.8-4.1 NetworkManager-debuginfo-0.9.8.8-4.1 NetworkManager-debugsource-0.9.8.8-4.1 NetworkManager-devel-0.9.8.8-4.1 libnm-glib-vpn1-0.9.8.8-4.1 libnm-glib-vpn1-debuginfo-0.9.8.8-4.1 libnm-glib4-0.9.8.8-4.1 libnm-glib4-debuginfo-0.9.8.8-4.1 libnm-util2-0.9.8.8-4.1 libnm-util2-debuginfo-0.9.8.8-4.1 typelib-1_0-NMClient-1_0-0.9.8.8-4.1 typelib-1_0-NetworkManager-1_0-0.9.8.8-4.1 - openSUSE 13.1 (x86_64): NetworkManager-devel-32bit-0.9.8.8-4.1 libnm-glib-vpn1-32bit-0.9.8.8-4.1 libnm-glib-vpn1-debuginfo-32bit-0.9.8.8-4.1 libnm-glib4-32bit-0.9.8.8-4.1 libnm-glib4-debuginfo-32bit-0.9.8.8-4.1 libnm-util2-32bit-0.9.8.8-4.1 libnm-util2-debuginfo-32bit-0.9.8.8-4.1 - openSUSE 13.1 (noarch): NetworkManager-lang-0.9.8.8-4.1 References: https://bugzilla.novell.com/888210

1 0

openSUSE-RU-2014:0962-1: at: Introduce switch to specify time format for atq
by maintenance＠opensuse.org 05 Aug '14

05 Aug '14

openSUSE Recommended Update: at: Introduce switch to specify time format for atq ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0962-1 Rating: low References: #879402 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with at: -bnc#879402: Introduced -o switch for atq to specify strftime-like format for displayed list of tasks Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-479 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): at-3.1.13-5.8.1 at-debuginfo-3.1.13-5.8.1 at-debugsource-3.1.13-5.8.1 References: https://bugzilla.novell.com/879402

1 0

openSUSE-SU-2014:0957-1: important: kernel: security and bugfix update
by opensuse-security＠opensuse.org 01 Aug '14

01 Aug '14

openSUSE Security Update: kernel: security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0957-1 Rating: important References: #788080 #867531 #867723 #877257 #880484 #882189 #883518 #883724 #883795 #885422 #885725 Cross-References: CVE-2014-0131 CVE-2014-2309 CVE-2014-3144 CVE-2014-3145 CVE-2014-3917 CVE-2014-4014 CVE-2014-4171 CVE-2014-4508 CVE-2014-4652 CVE-2014-4653 CVE-2014-4654 CVE-2014-4655 CVE-2014-4656 CVE-2014-4667 CVE-2014-4699 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: The Linux Kernel was updated to fix various bugs and security issues. CVE-2014-4699: The Linux kernel on Intel processors did not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allowed local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls. CVE-2014-4667: The sctp_association_free function in net/sctp/associola.c in the Linux kernel did not properly manage a certain backlog value, which allowed remote attackers to cause a denial of service (socket outage) via a crafted SCTP packet. CVE-2014-4171: mm/shmem.c in the Linux kernel did not properly implement the interaction between range notification and hole punching, which allowed local users to cause a denial of service (i_mutex hold) by using the mmap system call to access a hole, as demonstrated by interfering with intended shmem activity by blocking completion of (1) an MADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call. CVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allowed local users to cause a denial of service (OOPS and system crash) via an invalid syscall number, as demonstrated by number 1000. CVE-2014-4656: Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel allowed local users to cause a denial of service by leveraging /dev/snd/controlCX access, related to (1) index values in the snd_ctl_add function and (2) numid values in the snd_ctl_remove_numid_conflict function. CVE-2014-4655: The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel did not properly maintain the user_ctl_count value, which allowed local users to cause a denial of service (integer overflow and limit bypass) by leveraging /dev/snd/controlCX access for a large number of SNDRV_CTL_IOCTL_ELEM_REPLACE ioctl calls. CVE-2014-4654: The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel did not check authorization for SNDRV_CTL_IOCTL_ELEM_REPLACE commands, which allowed local users to remove kernel controls and cause a denial of service (use-after-free and system crash) by leveraging /dev/snd/controlCX access for an ioctl call. CVE-2014-4653: sound/core/control.c in the ALSA control implementation in the Linux kernel did not ensure possession of a read/write lock, which allowed local users to cause a denial of service (use-after-free) and obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX access. CVE-2014-4652: Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control.c in the ALSA control implementation in the Linux kernel allowed local users to obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX access. CVE-2014-4014: The capabilities implementation in the Linux kernel did not properly consider that namespaces are inapplicable to inodes, which allowed local users to bypass intended chmod restrictions by first creating a user namespace, as demonstrated by setting the setgid bit on a file with group ownership of root. CVE-2014-2309: The ip6_route_add function in net/ipv6/route.c in the Linux kernel did not properly count the addition of routes, which allowed remote attackers to cause a denial of service (memory consumption) via a flood of ICMPv6 Router Advertisement packets. CVE-2014-3917: kernel/auditsc.c in the Linux kernel, when CONFIG_AUDITSYSCALL is enabled with certain syscall rules, allowed local users to obtain potentially sensitive single-bit values from kernel memory or cause a denial of service (OOPS) via a large value of a syscall number. CVE-2014-0131: Use-after-free vulnerability in the skb_segment function in net/core/skbuff.c in the Linux kernel allowed attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. CVE-2014-3144: The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/core/filter.c in the Linux kernel did not check whether a certain length value is sufficiently large, which allowed local users to cause a denial of service (integer underflow and system crash) via crafted BPF instructions. CVE-2014-3145: The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel used the reverse order in a certain subtraction, which allowed local users to cause a denial of service (over-read and system crash) via crafted BPF instructions. NOTE: the affected code was moved to the __skb_get_nlattr_nest function before the vulnerability was announced. Additional Bug fixed: - HID: logitech-dj: Fix USB 3.0 issue (bnc#788080). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2014-478 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): kernel-default-3.7.10-1.40.1 kernel-default-base-3.7.10-1.40.1 kernel-default-base-debuginfo-3.7.10-1.40.1 kernel-default-debuginfo-3.7.10-1.40.1 kernel-default-debugsource-3.7.10-1.40.1 kernel-default-devel-3.7.10-1.40.1 kernel-default-devel-debuginfo-3.7.10-1.40.1 kernel-syms-3.7.10-1.40.1 - openSUSE 12.3 (i686 x86_64): kernel-debug-3.7.10-1.40.1 kernel-debug-base-3.7.10-1.40.1 kernel-debug-base-debuginfo-3.7.10-1.40.1 kernel-debug-debuginfo-3.7.10-1.40.1 kernel-debug-debugsource-3.7.10-1.40.1 kernel-debug-devel-3.7.10-1.40.1 kernel-debug-devel-debuginfo-3.7.10-1.40.1 kernel-desktop-3.7.10-1.40.1 kernel-desktop-base-3.7.10-1.40.1 kernel-desktop-base-debuginfo-3.7.10-1.40.1 kernel-desktop-debuginfo-3.7.10-1.40.1 kernel-desktop-debugsource-3.7.10-1.40.1 kernel-desktop-devel-3.7.10-1.40.1 kernel-desktop-devel-debuginfo-3.7.10-1.40.1 kernel-ec2-3.7.10-1.40.1 kernel-ec2-base-3.7.10-1.40.1 kernel-ec2-base-debuginfo-3.7.10-1.40.1 kernel-ec2-debuginfo-3.7.10-1.40.1 kernel-ec2-debugsource-3.7.10-1.40.1 kernel-ec2-devel-3.7.10-1.40.1 kernel-ec2-devel-debuginfo-3.7.10-1.40.1 kernel-trace-3.7.10-1.40.1 kernel-trace-base-3.7.10-1.40.1 kernel-trace-base-debuginfo-3.7.10-1.40.1 kernel-trace-debuginfo-3.7.10-1.40.1 kernel-trace-debugsource-3.7.10-1.40.1 kernel-trace-devel-3.7.10-1.40.1 kernel-trace-devel-debuginfo-3.7.10-1.40.1 kernel-vanilla-3.7.10-1.40.1 kernel-vanilla-debuginfo-3.7.10-1.40.1 kernel-vanilla-debugsource-3.7.10-1.40.1 kernel-vanilla-devel-3.7.10-1.40.1 kernel-vanilla-devel-debuginfo-3.7.10-1.40.1 kernel-xen-3.7.10-1.40.1 kernel-xen-base-3.7.10-1.40.1 kernel-xen-base-debuginfo-3.7.10-1.40.1 kernel-xen-debuginfo-3.7.10-1.40.1 kernel-xen-debugsource-3.7.10-1.40.1 kernel-xen-devel-3.7.10-1.40.1 kernel-xen-devel-debuginfo-3.7.10-1.40.1 - openSUSE 12.3 (noarch): kernel-devel-3.7.10-1.40.1 kernel-docs-3.7.10-1.40.2 kernel-source-3.7.10-1.40.1 kernel-source-vanilla-3.7.10-1.40.1 - openSUSE 12.3 (i686): kernel-pae-3.7.10-1.40.1 kernel-pae-base-3.7.10-1.40.1 kernel-pae-base-debuginfo-3.7.10-1.40.1 kernel-pae-debuginfo-3.7.10-1.40.1 kernel-pae-debugsource-3.7.10-1.40.1 kernel-pae-devel-3.7.10-1.40.1 kernel-pae-devel-debuginfo-3.7.10-1.40.1 References: http://support.novell.com/security/cve/CVE-2014-0131.html http://support.novell.com/security/cve/CVE-2014-2309.html http://support.novell.com/security/cve/CVE-2014-3144.html http://support.novell.com/security/cve/CVE-2014-3145.html http://support.novell.com/security/cve/CVE-2014-3917.html http://support.novell.com/security/cve/CVE-2014-4014.html http://support.novell.com/security/cve/CVE-2014-4171.html http://support.novell.com/security/cve/CVE-2014-4508.html http://support.novell.com/security/cve/CVE-2014-4652.html http://support.novell.com/security/cve/CVE-2014-4653.html http://support.novell.com/security/cve/CVE-2014-4654.html http://support.novell.com/security/cve/CVE-2014-4655.html http://support.novell.com/security/cve/CVE-2014-4656.html http://support.novell.com/security/cve/CVE-2014-4667.html http://support.novell.com/security/cve/CVE-2014-4699.html https://bugzilla.novell.com/788080 https://bugzilla.novell.com/867531 https://bugzilla.novell.com/867723 https://bugzilla.novell.com/877257 https://bugzilla.novell.com/880484 https://bugzilla.novell.com/882189 https://bugzilla.novell.com/883518 https://bugzilla.novell.com/883724 https://bugzilla.novell.com/883795 https://bugzilla.novell.com/885422 https://bugzilla.novell.com/885725

1 0