September 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2014:1108-1: moderate: net-snmp: fix for remote denial of service issue
by opensuse-security＠opensuse.org 10 Sep '14

10 Sep '14

openSUSE Security Update: net-snmp: fix for remote denial of service issue ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1108-1 Rating: moderate References: #894361 Cross-References: CVE-2014-3565 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: net-snmp was updated to fix a remote denial of service problem inside snmptrapd when started with the "-OQ" option (CVE-2014-3565)(bnc#894361) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-533 - openSUSE 12.3: zypper in -t patch openSUSE-2014-533 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libsnmp30-5.7.2-9.8.1 libsnmp30-debuginfo-5.7.2-9.8.1 net-snmp-5.7.2-9.8.1 net-snmp-debuginfo-5.7.2-9.8.1 net-snmp-debugsource-5.7.2-9.8.1 net-snmp-devel-5.7.2-9.8.1 net-snmp-python-5.7.2-9.8.1 net-snmp-python-debuginfo-5.7.2-9.8.1 perl-SNMP-5.7.2-9.8.1 perl-SNMP-debuginfo-5.7.2-9.8.1 snmp-mibs-5.7.2-9.8.1 - openSUSE 13.1 (x86_64): libsnmp30-32bit-5.7.2-9.8.1 libsnmp30-debuginfo-32bit-5.7.2-9.8.1 net-snmp-devel-32bit-5.7.2-9.8.1 - openSUSE 12.3 (i586 x86_64): libsnmp30-5.7.2-3.12.1 libsnmp30-debuginfo-5.7.2-3.12.1 net-snmp-5.7.2-3.12.1 net-snmp-debuginfo-5.7.2-3.12.1 net-snmp-debugsource-5.7.2-3.12.1 net-snmp-devel-5.7.2-3.12.1 perl-SNMP-5.7.2-3.12.1 perl-SNMP-debuginfo-5.7.2-3.12.1 snmp-mibs-5.7.2-3.12.1 - openSUSE 12.3 (x86_64): libsnmp30-32bit-5.7.2-3.12.1 libsnmp30-debuginfo-32bit-5.7.2-3.12.1 net-snmp-devel-32bit-5.7.2-3.12.1 References: http://support.novell.com/security/cve/CVE-2014-3565.html https://bugzilla.novell.com/894361

1 0

openSUSE-SU-2014:1100-1: important: Firefox update to 31.1esr
by opensuse-security＠opensuse.org 09 Sep '14

09 Sep '14

1 0

openSUSE-SU-2014:1099-1: moderate: MozillaFirefox to Firefox 32
by opensuse-security＠opensuse.org 09 Sep '14

09 Sep '14

openSUSE Security Update: MozillaFirefox to Firefox 32 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1099-1 Rating: moderate References: #894201 #894370 Cross-References: CVE-2014-1553 CVE-2014-1562 CVE-2014-1563 CVE-2014-1564 CVE-2014-1565 CVE-2014-1567 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: Mozilla Firefox was updated to Firefox 32 fixing security issues and bugs. Security issues fixed: MFSA 2014-72 / CVE-2014-1567: Security researcher regenrecht reported, via TippingPoint's Zero Day Initiative, a use-after-free during text layout when interacting with the setting of text direction. This results in a use-after-free which can lead to arbitrary code execution. MFSA 2014-70 / CVE-2014-1565: Security researcher Holger Fuhrmannek discovered an out-of-bounds read during the creation of an audio timeline in Web Audio. This results in a crash and could allow for the reading of random memory values. MFSA 2014-69 / CVE-2014-1564: Google security researcher Michal Zalewski discovered that when a malformated GIF image is rendered in certain circumstances, memory is not properly initialized before use. The resulting image then uses this memory during rendering. This could allow for the a script in web content to access this unitialized memory using the <canvas> feature. MFSA 2014-68 / CVE-2014-1563: Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team used the Address Sanitizer tool to discover a use-after-free during cycle collection. This was found in interactions with the SVG content through the document object model (DOM) with animating SVG content. This leads to a potentially exploitable crash. MFSA 2014-67: Mozilla developers and community identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Jan de Mooij reported a memory safety problem that affects Firefox ESR 24.7, ESR 31 and Firefox 31. (CVE-2014-1562) Christian Holler, Jan de Mooij, Karl Tomlinson, Randell Jesup, Gary Kwong, Jesse Ruderman, and JW Wang reported memory safety problems and crashes that affect Firefox ESR 31 and Firefox 31. (CVE-2014-1553) Gary Kwong, Christian Holler, and David Weir reported memory safety problems and crashes that affect Firefox 31. (CVE-2014-1554) Mozilla NSS was updated to 3.16.4: Notable Changes: * The following 1024-bit root CA certificate was restored to allow more time to develop a better transition strategy for affected sites. It was removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy forum led to the decision to keep this root included longer in order to give website administrators more time to update their web servers. - CN = GTE CyberTrust Global Root * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit intermediate CA certificate has been included, without explicit trust. The intention is to mitigate the effects of the previous removal of the 1024-bit Entrust.net root certificate, because many public Internet sites still use the "USERTrust Legacy Secure Server CA" intermediate certificate that is signed by the 1024-bit Entrust.net root certificate. The inclusion of the intermediate certificate is a temporary measure to allow those sites to function, by allowing them to find a trust path to another 2048-bit root CA certificate. The temporarily included intermediate certificate expires November 1, 2015. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-530 - openSUSE 12.3: zypper in -t patch openSUSE-2014-530 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): MozillaFirefox-31.1.0-42.1 MozillaFirefox-branding-upstream-31.1.0-42.1 MozillaFirefox-buildsymbols-31.1.0-42.1 MozillaFirefox-debuginfo-31.1.0-42.1 MozillaFirefox-debugsource-31.1.0-42.1 MozillaFirefox-devel-31.1.0-42.1 MozillaFirefox-translations-common-31.1.0-42.1 MozillaFirefox-translations-other-31.1.0-42.1 libfreebl3-3.16.4-35.1 libfreebl3-debuginfo-3.16.4-35.1 libsoftokn3-3.16.4-35.1 libsoftokn3-debuginfo-3.16.4-35.1 mozilla-nss-3.16.4-35.1 mozilla-nss-certs-3.16.4-35.1 mozilla-nss-certs-debuginfo-3.16.4-35.1 mozilla-nss-debuginfo-3.16.4-35.1 mozilla-nss-debugsource-3.16.4-35.1 mozilla-nss-devel-3.16.4-35.1 mozilla-nss-sysinit-3.16.4-35.1 mozilla-nss-sysinit-debuginfo-3.16.4-35.1 mozilla-nss-tools-3.16.4-35.1 mozilla-nss-tools-debuginfo-3.16.4-35.1 - openSUSE 13.1 (x86_64): libfreebl3-32bit-3.16.4-35.1 libfreebl3-debuginfo-32bit-3.16.4-35.1 libsoftokn3-32bit-3.16.4-35.1 libsoftokn3-debuginfo-32bit-3.16.4-35.1 mozilla-nss-32bit-3.16.4-35.1 mozilla-nss-certs-32bit-3.16.4-35.1 mozilla-nss-certs-debuginfo-32bit-3.16.4-35.1 mozilla-nss-debuginfo-32bit-3.16.4-35.1 mozilla-nss-sysinit-32bit-3.16.4-35.1 mozilla-nss-sysinit-debuginfo-32bit-3.16.4-35.1 - openSUSE 12.3 (i586 x86_64): MozillaFirefox-31.1.0-1.86.1 MozillaFirefox-branding-upstream-31.1.0-1.86.1 MozillaFirefox-buildsymbols-31.1.0-1.86.1 MozillaFirefox-debuginfo-31.1.0-1.86.1 MozillaFirefox-debugsource-31.1.0-1.86.1 MozillaFirefox-devel-31.1.0-1.86.1 MozillaFirefox-translations-common-31.1.0-1.86.1 MozillaFirefox-translations-other-31.1.0-1.86.1 libfreebl3-3.16.4-1.51.1 libfreebl3-debuginfo-3.16.4-1.51.1 libsoftokn3-3.16.4-1.51.1 libsoftokn3-debuginfo-3.16.4-1.51.1 mozilla-nss-3.16.4-1.51.1 mozilla-nss-certs-3.16.4-1.51.1 mozilla-nss-certs-debuginfo-3.16.4-1.51.1 mozilla-nss-debuginfo-3.16.4-1.51.1 mozilla-nss-debugsource-3.16.4-1.51.1 mozilla-nss-devel-3.16.4-1.51.1 mozilla-nss-sysinit-3.16.4-1.51.1 mozilla-nss-sysinit-debuginfo-3.16.4-1.51.1 mozilla-nss-tools-3.16.4-1.51.1 mozilla-nss-tools-debuginfo-3.16.4-1.51.1 - openSUSE 12.3 (x86_64): libfreebl3-32bit-3.16.4-1.51.1 libfreebl3-debuginfo-32bit-3.16.4-1.51.1 libsoftokn3-32bit-3.16.4-1.51.1 libsoftokn3-debuginfo-32bit-3.16.4-1.51.1 mozilla-nss-32bit-3.16.4-1.51.1 mozilla-nss-certs-32bit-3.16.4-1.51.1 mozilla-nss-certs-debuginfo-32bit-3.16.4-1.51.1 mozilla-nss-debuginfo-32bit-3.16.4-1.51.1 mozilla-nss-sysinit-32bit-3.16.4-1.51.1 mozilla-nss-sysinit-debuginfo-32bit-3.16.4-1.51.1 References: http://support.novell.com/security/cve/CVE-2014-1553.html http://support.novell.com/security/cve/CVE-2014-1562.html http://support.novell.com/security/cve/CVE-2014-1563.html http://support.novell.com/security/cve/CVE-2014-1564.html http://support.novell.com/security/cve/CVE-2014-1565.html http://support.novell.com/security/cve/CVE-2014-1567.html https://bugzilla.novell.com/894201 https://bugzilla.novell.com/894370

1 0

openSUSE-SU-2014:1098-1: important: MozillaThunderbird: Update to 31.1 release
by opensuse-security＠opensuse.org 09 Sep '14

09 Sep '14

openSUSE Security Update: MozillaThunderbird: Update to 31.1 release ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1098-1 Rating: important References: #894370 Cross-References: CVE-2014-1553 CVE-2014-1562 CVE-2014-1563 CVE-2014-1564 CVE-2014-1565 CVE-2014-1567 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: MozillaThunderbird was updated to Thunderbird 31.1.0 (bnc#894370), fixinfg security issues: * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562 Miscellaneous memory safety hazards * MFSA 2014-68/CVE-2014-1563 (bmo#1018524) Use-after-free during DOM interactions with SVG * MFSA 2014-69/CVE-2014-1564 (bmo#1045977) Uninitialized memory use during GIF rendering * MFSA 2014-70/CVE-2014-1565 (bmo#1047831) Out-of-bounds read in Web Audio audio timeline * MFSA 2014-72/CVE-2014-1567 (bmo#1037641) Use-after-free setting text directionality - update to Thunderbird 31.0 * based on Gecko 31 * Autocompleting email addresses now matches against any part of the name or email * Composing a mail to a newsgroup will now autocomplete newsgroup names * Insecure NTLM (pre-NTLMv2) authentication disabled Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-531 - openSUSE 12.3: zypper in -t patch openSUSE-2014-531 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): MozillaThunderbird-31.1.0-70.31.1 MozillaThunderbird-buildsymbols-31.1.0-70.31.1 MozillaThunderbird-debuginfo-31.1.0-70.31.1 MozillaThunderbird-debugsource-31.1.0-70.31.1 MozillaThunderbird-devel-31.1.0-70.31.1 MozillaThunderbird-translations-common-31.1.0-70.31.1 MozillaThunderbird-translations-other-31.1.0-70.31.1 - openSUSE 12.3 (i586 x86_64): MozillaThunderbird-31.1.0-61.59.1 MozillaThunderbird-buildsymbols-31.1.0-61.59.1 MozillaThunderbird-debuginfo-31.1.0-61.59.1 MozillaThunderbird-debugsource-31.1.0-61.59.1 MozillaThunderbird-devel-31.1.0-61.59.1 MozillaThunderbird-translations-common-31.1.0-61.59.1 MozillaThunderbird-translations-other-31.1.0-61.59.1 References: http://support.novell.com/security/cve/CVE-2014-1553.html http://support.novell.com/security/cve/CVE-2014-1562.html http://support.novell.com/security/cve/CVE-2014-1563.html http://support.novell.com/security/cve/CVE-2014-1564.html http://support.novell.com/security/cve/CVE-2014-1565.html http://support.novell.com/security/cve/CVE-2014-1567.html https://bugzilla.novell.com/894370

1 0

openSUSE-RU-2014:1097-1: GNOME Stack update to version 3.10.3/4
by maintenance＠opensuse.org 09 Sep '14

09 Sep '14

openSUSE Recommended Update: GNOME Stack update to version 3.10.3/4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1097-1 Rating: low References: #832386 #839089 #842730 #849913 #852362 #861076 #861365 #869685 #871232 #888442 #888787 #893775 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 12 recommended fixes can now be installed. Description: This update provides the latest version of the GNOME Stack: - various bugfixes and improvements Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-532 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): NetworkManager-0.9.8.8-10.1 NetworkManager-debuginfo-0.9.8.8-10.1 NetworkManager-debugsource-0.9.8.8-10.1 NetworkManager-devel-0.9.8.8-10.1 accountsservice-0.6.35-2.16.1 accountsservice-debuginfo-0.6.35-2.16.1 accountsservice-debugsource-0.6.35-2.16.1 accountsservice-devel-0.6.35-2.16.1 brasero-3.10.0-3.6.3 brasero-debuginfo-3.10.0-3.6.3 brasero-debugsource-3.10.0-3.6.3 brasero-devel-3.10.0-3.6.3 brasero-nautilus-3.10.0-3.6.3 brasero-nautilus-debuginfo-3.10.0-3.6.3 empathy-3.10.3-42.2 empathy-debuginfo-3.10.3-42.2 empathy-debugsource-3.10.3-42.2 epiphany-3.10.3-39.4 epiphany-debuginfo-3.10.3-39.4 epiphany-debugsource-3.10.3-39.4 evince-3.10.3-60.2 evince-debuginfo-3.10.3-60.2 evince-debugsource-3.10.3-60.2 evince-devel-3.10.3-60.2 evolution-3.10.4-24.1 evolution-data-server-3.10.4-38.1 evolution-data-server-debuginfo-3.10.4-38.1 evolution-data-server-debugsource-3.10.4-38.1 evolution-data-server-devel-3.10.4-38.1 evolution-data-server-doc-3.10.4-38.1 evolution-debuginfo-3.10.4-24.1 evolution-debugsource-3.10.4-24.1 evolution-devel-3.10.4-24.1 evolution-ews-3.10.4-36.1 evolution-ews-debuginfo-3.10.4-36.1 evolution-ews-debugsource-3.10.4-36.1 evolution-ews-devel-3.10.4-36.1 file-roller-3.10.2.1-22.2 file-roller-debuginfo-3.10.2.1-22.2 file-roller-debugsource-3.10.2.1-22.2 geary-0.6.1-3.6.2 geary-debuginfo-0.6.1-3.6.2 geary-debugsource-0.6.1-3.6.2 gedit-3.10.4-23.2 gedit-debuginfo-3.10.4-23.2 gedit-debugsource-3.10.4-23.2 gedit-devel-3.10.4-23.2 gedit-plugin-zeitgeist-3.10.4-23.2 gedit-plugin-zeitgeist-debuginfo-3.10.4-23.2 gedit-plugins-3.10.1-6.4 gedit-plugins-debuginfo-3.10.1-6.4 gedit-plugins-debugsource-3.10.1-6.4 ghex-3.10.1-6.3 ghex-debuginfo-3.10.1-6.3 ghex-debugsource-3.10.1-6.3 ghex-devel-3.10.1-6.3 glade-catalog-evolution-3.10.4-24.1 glade-catalog-evolution-debuginfo-3.10.4-24.1 gnome-chess-3.10.3-14.3 gnome-chess-debuginfo-3.10.3-14.3 gnome-chess-debugsource-3.10.3-14.3 gnome-control-center-3.10.3-18.2 gnome-control-center-color-3.10.3-18.2 gnome-control-center-debuginfo-3.10.3-18.2 gnome-control-center-debugsource-3.10.3-18.2 gnome-control-center-devel-3.10.3-18.2 gnome-control-center-user-faces-3.10.3-18.2 gnome-documents-3.10.2-15.1 gnome-documents-debuginfo-3.10.2-15.1 gnome-documents-debugsource-3.10.2-15.1 gnome-music-3.10.4-6.2 gnome-music-debuginfo-3.10.4-6.2 gnome-music-debugsource-3.10.4-6.2 gnome-online-accounts-3.10.5-14.7 gnome-online-accounts-debuginfo-3.10.5-14.7 gnome-online-accounts-debugsource-3.10.5-14.7 gnome-online-accounts-devel-3.10.5-14.7 gnome-online-miners-3.10.3-7.1 gnome-online-miners-debuginfo-3.10.3-7.1 gnome-online-miners-debugsource-3.10.3-7.1 gnome-packagekit-3.10.1-7.3 gnome-packagekit-debuginfo-3.10.1-7.3 gnome-packagekit-debugsource-3.10.1-7.3 gnome-packagekit-extras-3.10.1-7.3 gnome-packagekit-extras-debuginfo-3.10.1-7.3 gnome-robots-3.10.2-6.3 gnome-robots-debuginfo-3.10.2-6.3 gnome-robots-debugsource-3.10.2-6.3 gnome-screenshot-3.10.1-6.3 gnome-screenshot-debuginfo-3.10.1-6.3 gnome-screenshot-debugsource-3.10.1-6.3 gnome-settings-daemon-3.10.3-20.2 gnome-settings-daemon-debuginfo-3.10.3-20.2 gnome-settings-daemon-debugsource-3.10.3-20.2 gnome-settings-daemon-devel-3.10.3-20.2 gnome-shell-3.10.4-22.1 gnome-shell-browser-plugin-3.10.4-22.1 gnome-shell-browser-plugin-debuginfo-3.10.4-22.1 gnome-shell-debuginfo-3.10.4-22.1 gnome-shell-debugsource-3.10.4-22.1 gnome-shell-devel-3.10.4-22.1 gnome-shell-search-provider-documents-3.10.2-15.1 gnome-shell-search-provider-gnote-3.10.3-6.2 gnome-shell-search-provider-seahorse-3.10.2-10.1 gnome-sudoku-3.10.3-14.1 gnome-user-share-3.10.2-14.3 gnome-user-share-debuginfo-3.10.2-14.3 gnome-user-share-debugsource-3.10.2-14.3 gnote-3.10.3-6.2 gnote-debuginfo-3.10.3-6.2 gnote-debugsource-3.10.3-6.2 gthumb-3.2.7-7.4 gthumb-debuginfo-3.2.7-7.4 gthumb-debugsource-3.2.7-7.4 gthumb-devel-3.2.7-7.4 gtk2-debugsource-2.24.23-7.1 gtk2-devel-2.24.23-7.1 gtk2-devel-debuginfo-2.24.23-7.1 gtk2-engine-clearlooks-2.20.2-16.6.3 gtk2-engine-clearlooks-debuginfo-2.20.2-16.6.3 gtk2-engine-crux-2.20.2-16.6.3 gtk2-engine-crux-debuginfo-2.20.2-16.6.3 gtk2-engine-glide-2.20.2-16.6.3 gtk2-engine-glide-debuginfo-2.20.2-16.6.3 gtk2-engine-hcengine-2.20.2-16.6.3 gtk2-engine-hcengine-debuginfo-2.20.2-16.6.3 gtk2-engine-industrial-2.20.2-16.6.3 gtk2-engine-industrial-debuginfo-2.20.2-16.6.3 gtk2-engine-mist-2.20.2-16.6.3 gtk2-engine-mist-debuginfo-2.20.2-16.6.3 gtk2-engine-redmond95-2.20.2-16.6.3 gtk2-engine-redmond95-debuginfo-2.20.2-16.6.3 gtk2-engine-thinice-2.20.2-16.6.3 gtk2-engine-thinice-debuginfo-2.20.2-16.6.3 gtk2-engines-2.20.2-16.6.3 gtk2-engines-debugsource-2.20.2-16.6.3 gtk2-engines-devel-2.20.2-16.6.3 gtk2-immodule-amharic-2.24.23-7.1 gtk2-immodule-amharic-debuginfo-2.24.23-7.1 gtk2-immodule-inuktitut-2.24.23-7.1 gtk2-immodule-inuktitut-debuginfo-2.24.23-7.1 gtk2-immodule-multipress-2.24.23-7.1 gtk2-immodule-multipress-debuginfo-2.24.23-7.1 gtk2-immodule-thai-2.24.23-7.1 gtk2-immodule-thai-debuginfo-2.24.23-7.1 gtk2-immodule-vietnamese-2.24.23-7.1 gtk2-immodule-vietnamese-debuginfo-2.24.23-7.1 gtk2-immodule-xim-2.24.23-7.1 gtk2-immodule-xim-debuginfo-2.24.23-7.1 gtk2-immodules-tigrigna-2.24.23-7.1 gtk2-immodules-tigrigna-debuginfo-2.24.23-7.1 gtk2-tools-2.24.23-7.1 gtk2-tools-debuginfo-2.24.23-7.1 gtk3-debugsource-3.10.9-18.1 gtk3-devel-3.10.9-18.1 gtk3-devel-debuginfo-3.10.9-18.1 gtk3-immodule-amharic-3.10.9-18.1 gtk3-immodule-amharic-debuginfo-3.10.9-18.1 gtk3-immodule-inuktitut-3.10.9-18.1 gtk3-immodule-inuktitut-debuginfo-3.10.9-18.1 gtk3-immodule-multipress-3.10.9-18.1 gtk3-immodule-multipress-debuginfo-3.10.9-18.1 gtk3-immodule-thai-3.10.9-18.1 gtk3-immodule-thai-debuginfo-3.10.9-18.1 gtk3-immodule-vietnamese-3.10.9-18.1 gtk3-immodule-vietnamese-debuginfo-3.10.9-18.1 gtk3-immodule-xim-3.10.9-18.1 gtk3-immodule-xim-debuginfo-3.10.9-18.1 gtk3-immodules-tigrigna-3.10.9-18.1 gtk3-immodules-tigrigna-debuginfo-3.10.9-18.1 gtk3-tools-3.10.9-18.1 gtk3-tools-debuginfo-3.10.9-18.1 gvfs-1.18.3-15.1 gvfs-backend-afc-1.18.3-15.1 gvfs-backend-afc-debuginfo-1.18.3-15.1 gvfs-backends-1.18.3-15.1 gvfs-backends-debuginfo-1.18.3-15.1 gvfs-debuginfo-1.18.3-15.1 gvfs-debugsource-1.18.3-15.1 gvfs-devel-1.18.3-15.1 gvfs-fuse-1.18.3-15.1 gvfs-fuse-debuginfo-1.18.3-15.1 libaccountsservice0-0.6.35-2.16.1 libaccountsservice0-debuginfo-0.6.35-2.16.1 libbrasero-burn3-1-3.10.0-3.6.3 libbrasero-burn3-1-debuginfo-3.10.0-3.6.3 libbrasero-media3-1-3.10.0-3.6.3 libbrasero-media3-1-debuginfo-3.10.0-3.6.3 libbrasero-utils3-1-3.10.0-3.6.3 libbrasero-utils3-1-debuginfo-3.10.0-3.6.3 libcamel-1_2-45-3.10.4-38.1 libcamel-1_2-45-debuginfo-3.10.4-38.1 libebackend-1_2-7-3.10.4-38.1 libebackend-1_2-7-debuginfo-3.10.4-38.1 libebook-1_2-14-3.10.4-38.1 libebook-1_2-14-debuginfo-3.10.4-38.1 libebook-contacts-1_2-0-3.10.4-38.1 libebook-contacts-1_2-0-debuginfo-3.10.4-38.1 libecal-1_2-16-3.10.4-38.1 libecal-1_2-16-debuginfo-3.10.4-38.1 libedata-book-1_2-20-3.10.4-38.1 libedata-book-1_2-20-debuginfo-3.10.4-38.1 libedata-cal-1_2-23-3.10.4-38.1 libedata-cal-1_2-23-debuginfo-3.10.4-38.1 libedataserver-1_2-18-3.10.4-38.1 libedataserver-1_2-18-debuginfo-3.10.4-38.1 libeews-1_2-0-3.10.4-36.1 libeews-1_2-0-debuginfo-3.10.4-36.1 libevdocument3-4-3.10.3-60.2 libevdocument3-4-debuginfo-3.10.3-60.2 libevview3-3-3.10.3-60.2 libevview3-3-debuginfo-3.10.3-60.2 libewsutils0-3.10.4-36.1 libewsutils0-debuginfo-3.10.4-36.1 libgoa-1_0-0-3.10.5-14.7 libgoa-1_0-0-debuginfo-3.10.5-14.7 libgoa-backend-1_0-1-3.10.5-14.7 libgoa-backend-1_0-1-debuginfo-3.10.5-14.7 libgtk-2_0-0-2.24.23-7.1 libgtk-2_0-0-debuginfo-2.24.23-7.1 libgtk-3-0-3.10.9-18.1 libgtk-3-0-debuginfo-3.10.9-18.1 libgtkhex-3-0-3.10.1-6.3 libgtkhex-3-0-debuginfo-3.10.1-6.3 libgvfscommon0-1.18.3-15.1 libgvfscommon0-debuginfo-1.18.3-15.1 libgweather-3-6-3.10.2-6.1 libgweather-3-6-debuginfo-3.10.2-6.1 libgweather-debugsource-3.10.2-6.1 libgweather-devel-3.10.2-6.1 libjavascriptcoregtk-1_0-0-2.2.7-10.1 libjavascriptcoregtk-1_0-0-debuginfo-2.2.7-10.1 libjavascriptcoregtk-3_0-0-2.2.7-10.1 libjavascriptcoregtk-3_0-0-debuginfo-2.2.7-10.1 libmutter0-3.10.4-26.1 libmutter0-debuginfo-3.10.4-26.1 libnm-glib-vpn1-0.9.8.8-10.1 libnm-glib-vpn1-debuginfo-0.9.8.8-10.1 libnm-glib4-0.9.8.8-10.1 libnm-glib4-debuginfo-0.9.8.8-10.1 libnm-util2-0.9.8.8-10.1 libnm-util2-debuginfo-0.9.8.8-10.1 libtelepathy-glib0-0.22.1-6.1 libtelepathy-glib0-debuginfo-0.22.1-6.1 libtotem-plparser-mini18-3.10.1-10.1 libtotem-plparser-mini18-debuginfo-3.10.1-10.1 libtotem-plparser18-3.10.1-10.1 libtotem-plparser18-debuginfo-3.10.1-10.1 libwebkit2gtk-3_0-25-2.2.7-10.1 libwebkit2gtk-3_0-25-debuginfo-2.2.7-10.1 libwebkitgtk-1_0-0-2.2.7-10.1 libwebkitgtk-1_0-0-debuginfo-2.2.7-10.1 libwebkitgtk-3_0-0-2.2.7-10.1 libwebkitgtk-3_0-0-debuginfo-2.2.7-10.1 libwebkitgtk-devel-2.2.7-10.1 libwebkitgtk3-devel-2.2.7-10.1 libyelp0-3.10.2-6.1 libyelp0-debuginfo-3.10.2-6.1 mutter-3.10.4-26.1 mutter-data-3.10.4-26.1 mutter-debuginfo-3.10.4-26.1 mutter-debugsource-3.10.4-26.1 mutter-devel-3.10.4-26.1 nautilus-evince-3.10.3-60.2 nautilus-evince-debuginfo-3.10.3-60.2 nautilus-file-roller-3.10.2.1-22.2 nautilus-file-roller-debuginfo-3.10.2.1-22.2 orca-3.10.3-14.1 python3-gedit-3.10.4-23.2 seahorse-3.10.2-10.1 seahorse-debuginfo-3.10.2-10.1 seahorse-debugsource-3.10.2-10.1 system-config-printer-1.4.4-2.10.1 system-config-printer-debugsource-1.4.4-2.10.1 telepathy-gabble-0.18.2-2.6.2 telepathy-gabble-debuginfo-0.18.2-2.6.2 telepathy-gabble-debugsource-0.18.2-2.6.2 telepathy-gabble-xmpp-console-0.18.2-2.6.2 telepathy-gabble-xmpp-console-debuginfo-0.18.2-2.6.2 telepathy-glib-debugsource-0.22.1-6.1 telepathy-glib-devel-0.22.1-6.1 telepathy-glib-doc-0.22.1-6.1 telepathy-mission-control-plugin-goa-3.10.3-42.2 telepathy-mission-control-plugin-goa-debuginfo-3.10.3-42.2 totem-pl-parser-3.10.1-10.1 totem-pl-parser-debuginfo-3.10.1-10.1 totem-pl-parser-debugsource-3.10.1-10.1 totem-pl-parser-devel-3.10.1-10.1 typelib-1_0-AccountsService-1_0-0.6.35-2.16.1 typelib-1_0-BraseroBurn-3_2_0-3.10.0-3.6.3 typelib-1_0-BraseroMedia-3_2_0-3.10.0-3.6.3 typelib-1_0-EBook-1_2-3.10.4-38.1 typelib-1_0-EBookContacts-1_2-3.10.4-38.1 typelib-1_0-EDataServer-1_2-3.10.4-38.1 typelib-1_0-EvinceDocument-3_0-3.10.3-60.2 typelib-1_0-EvinceView-3_0-3.10.3-60.2 typelib-1_0-GWeather-3_0-3.10.2-6.1 typelib-1_0-Goa-1_0-3.10.5-14.7 typelib-1_0-Gtk-2_0-2.24.23-7.1 typelib-1_0-Gtk-3_0-3.10.9-18.1 typelib-1_0-JavaScriptCore-1_0-2.2.7-10.1 typelib-1_0-JavaScriptCore-3_0-2.2.7-10.1 typelib-1_0-Meta-3_0-3.10.4-26.1 typelib-1_0-NMClient-1_0-0.9.8.8-10.1 typelib-1_0-NetworkManager-1_0-0.9.8.8-10.1 typelib-1_0-TelepathyGlib-0_12-0.22.1-6.1 typelib-1_0-TotemPlParser-1_0-3.10.1-10.1 typelib-1_0-WebKit-1_0-2.2.7-10.1 typelib-1_0-WebKit-3_0-2.2.7-10.1 typelib-1_0-WebKit2-3_0-2.2.7-10.1 udev-configure-printer-1.4.4-2.10.1 udev-configure-printer-debuginfo-1.4.4-2.10.1 webkit-jsc-1-2.2.7-10.1 webkit-jsc-1-debuginfo-2.2.7-10.1 webkit-jsc-3-2.2.7-10.1 webkit-jsc-3-debuginfo-2.2.7-10.1 webkit2gtk-3_0-injected-bundles-2.2.7-10.1 webkit2gtk-3_0-injected-bundles-debuginfo-2.2.7-10.1 yelp-3.10.2-6.1 yelp-debuginfo-3.10.2-6.1 yelp-debugsource-3.10.2-6.1 yelp-devel-3.10.2-6.1 - openSUSE 13.1 (x86_64): NetworkManager-devel-32bit-0.9.8.8-10.1 gtk2-devel-32bit-2.24.23-7.1 gtk2-devel-debuginfo-32bit-2.24.23-7.1 gtk2-engine-clearlooks-32bit-2.20.2-16.6.3 gtk2-engine-clearlooks-debuginfo-32bit-2.20.2-16.6.3 gtk2-engine-crux-32bit-2.20.2-16.6.3 gtk2-engine-crux-debuginfo-32bit-2.20.2-16.6.3 gtk2-engine-glide-32bit-2.20.2-16.6.3 gtk2-engine-glide-debuginfo-32bit-2.20.2-16.6.3 gtk2-engine-industrial-32bit-2.20.2-16.6.3 gtk2-engine-industrial-debuginfo-32bit-2.20.2-16.6.3 gtk2-engine-mist-32bit-2.20.2-16.6.3 gtk2-engine-mist-debuginfo-32bit-2.20.2-16.6.3 gtk2-engine-redmond95-32bit-2.20.2-16.6.3 gtk2-engine-redmond95-debuginfo-32bit-2.20.2-16.6.3 gtk2-engine-thinice-32bit-2.20.2-16.6.3 gtk2-engine-thinice-debuginfo-32bit-2.20.2-16.6.3 gtk2-immodule-amharic-32bit-2.24.23-7.1 gtk2-immodule-amharic-debuginfo-32bit-2.24.23-7.1 gtk2-immodule-inuktitut-32bit-2.24.23-7.1 gtk2-immodule-inuktitut-debuginfo-32bit-2.24.23-7.1 gtk2-immodule-multipress-32bit-2.24.23-7.1 gtk2-immodule-multipress-debuginfo-32bit-2.24.23-7.1 gtk2-immodule-thai-32bit-2.24.23-7.1 gtk2-immodule-thai-debuginfo-32bit-2.24.23-7.1 gtk2-immodule-vietnamese-32bit-2.24.23-7.1 gtk2-immodule-vietnamese-debuginfo-32bit-2.24.23-7.1 gtk2-immodule-xim-32bit-2.24.23-7.1 gtk2-immodule-xim-debuginfo-32bit-2.24.23-7.1 gtk2-immodules-tigrigna-32bit-2.24.23-7.1 gtk2-immodules-tigrigna-debuginfo-32bit-2.24.23-7.1 gtk2-tools-32bit-2.24.23-7.1 gtk2-tools-debuginfo-32bit-2.24.23-7.1 gtk3-devel-32bit-3.10.9-18.1 gtk3-devel-debuginfo-32bit-3.10.9-18.1 gtk3-immodule-amharic-32bit-3.10.9-18.1 gtk3-immodule-amharic-debuginfo-32bit-3.10.9-18.1 gtk3-immodule-inuktitut-32bit-3.10.9-18.1 gtk3-immodule-inuktitut-debuginfo-32bit-3.10.9-18.1 gtk3-immodule-multipress-32bit-3.10.9-18.1 gtk3-immodule-multipress-debuginfo-32bit-3.10.9-18.1 gtk3-immodule-thai-32bit-3.10.9-18.1 gtk3-immodule-thai-debuginfo-32bit-3.10.9-18.1 gtk3-immodule-vietnamese-32bit-3.10.9-18.1 gtk3-immodule-vietnamese-debuginfo-32bit-3.10.9-18.1 gtk3-immodule-xim-32bit-3.10.9-18.1 gtk3-immodule-xim-debuginfo-32bit-3.10.9-18.1 gtk3-immodules-tigrigna-32bit-3.10.9-18.1 gtk3-immodules-tigrigna-debuginfo-32bit-3.10.9-18.1 gtk3-tools-32bit-3.10.9-18.1 gtk3-tools-debuginfo-32bit-3.10.9-18.1 gvfs-32bit-1.18.3-15.1 gvfs-debuginfo-32bit-1.18.3-15.1 libcamel-1_2-45-32bit-3.10.4-38.1 libcamel-1_2-45-debuginfo-32bit-3.10.4-38.1 libebackend-1_2-7-32bit-3.10.4-38.1 libebackend-1_2-7-debuginfo-32bit-3.10.4-38.1 libebook-1_2-14-32bit-3.10.4-38.1 libebook-1_2-14-debuginfo-32bit-3.10.4-38.1 libebook-contacts-1_2-0-32bit-3.10.4-38.1 libebook-contacts-1_2-0-debuginfo-32bit-3.10.4-38.1 libecal-1_2-16-32bit-3.10.4-38.1 libecal-1_2-16-debuginfo-32bit-3.10.4-38.1 libedata-book-1_2-20-32bit-3.10.4-38.1 libedata-book-1_2-20-debuginfo-32bit-3.10.4-38.1 libedata-cal-1_2-23-32bit-3.10.4-38.1 libedata-cal-1_2-23-debuginfo-32bit-3.10.4-38.1 libedataserver-1_2-18-32bit-3.10.4-38.1 libedataserver-1_2-18-debuginfo-32bit-3.10.4-38.1 libgoa-1_0-0-32bit-3.10.5-14.7 libgoa-1_0-0-debuginfo-32bit-3.10.5-14.7 libgoa-backend-1_0-1-32bit-3.10.5-14.7 libgoa-backend-1_0-1-debuginfo-32bit-3.10.5-14.7 libgtk-2_0-0-32bit-2.24.23-7.1 libgtk-2_0-0-debuginfo-32bit-2.24.23-7.1 libgtk-3-0-32bit-3.10.9-18.1 libgtk-3-0-debuginfo-32bit-3.10.9-18.1 libgvfscommon0-32bit-1.18.3-15.1 libgvfscommon0-debuginfo-32bit-1.18.3-15.1 libgweather-3-6-32bit-3.10.2-6.1 libgweather-3-6-debuginfo-32bit-3.10.2-6.1 libjavascriptcoregtk-1_0-0-32bit-2.2.7-10.1 libjavascriptcoregtk-1_0-0-debuginfo-32bit-2.2.7-10.1 libjavascriptcoregtk-3_0-0-32bit-2.2.7-10.1 libjavascriptcoregtk-3_0-0-debuginfo-32bit-2.2.7-10.1 libnm-glib-vpn1-32bit-0.9.8.8-10.1 libnm-glib-vpn1-debuginfo-32bit-0.9.8.8-10.1 libnm-glib4-32bit-0.9.8.8-10.1 libnm-glib4-debuginfo-32bit-0.9.8.8-10.1 libnm-util2-32bit-0.9.8.8-10.1 libnm-util2-debuginfo-32bit-0.9.8.8-10.1 libtelepathy-glib0-32bit-0.22.1-6.1 libtelepathy-glib0-debuginfo-32bit-0.22.1-6.1 libwebkitgtk-1_0-0-32bit-2.2.7-10.1 libwebkitgtk-1_0-0-debuginfo-32bit-2.2.7-10.1 libwebkitgtk-3_0-0-32bit-2.2.7-10.1 libwebkitgtk-3_0-0-debuginfo-32bit-2.2.7-10.1 - openSUSE 13.1 (noarch): NetworkManager-lang-0.9.8.8-10.1 accountsservice-lang-0.6.35-2.16.1 brasero-lang-3.10.0-3.6.3 empathy-lang-3.10.3-42.2 epiphany-branding-upstream-3.10.3-39.4 epiphany-lang-3.10.3-39.4 evince-lang-3.10.3-60.2 evolution-data-server-lang-3.10.4-38.1 evolution-ews-lang-3.10.4-36.1 evolution-lang-3.10.4-24.1 file-roller-lang-3.10.2.1-22.2 geary-lang-0.6.1-3.6.2 gedit-lang-3.10.4-23.2 gedit-plugins-lang-3.10.1-6.4 ghex-lang-3.10.1-6.3 gnome-chess-lang-3.10.3-14.3 gnome-control-center-lang-3.10.3-18.2 gnome-devel-docs-3.10.3-14.1 gnome-devel-docs-lang-3.10.3-14.1 gnome-documents-lang-3.10.2-15.1 gnome-music-lang-3.10.4-6.2 gnome-online-accounts-lang-3.10.5-14.7 gnome-packagekit-lang-3.10.1-7.3 gnome-robots-lang-3.10.2-6.3 gnome-screenshot-lang-3.10.1-6.3 gnome-settings-daemon-lang-3.10.3-20.2 gnome-shell-lang-3.10.4-22.1 gnome-sudoku-lang-3.10.3-14.1 gnome-user-docs-3.10.3-14.1 gnome-user-docs-lang-3.10.3-14.1 gnome-user-share-lang-3.10.2-14.3 gnote-lang-3.10.3-6.2 gthumb-lang-3.2.7-7.4 gtk2-branding-SLED-13.1-6.3 gtk2-branding-openSUSE-13.1-6.3 gtk2-branding-upstream-2.24.23-7.1 gtk2-data-2.24.23-7.1 gtk2-lang-2.24.23-7.1 gtk2-theme-clearlooks-2.20.2-16.6.3 gtk2-theme-crux-2.20.2-16.6.3 gtk2-theme-industrial-2.20.2-16.6.3 gtk2-theme-mist-2.20.2-16.6.3 gtk2-theme-redmond95-2.20.2-16.6.3 gtk2-theme-thinice-2.20.2-16.6.3 gtk3-branding-SLED-13.1-2.14.3 gtk3-branding-openSUSE-13.1-2.14.3 gtk3-branding-upstream-3.10.9-18.1 gtk3-data-3.10.9-18.1 gtk3-lang-3.10.9-18.1 gvfs-lang-1.18.3-15.1 libgweather-data-3.10.2-6.1 libgweather-lang-3.10.2-6.1 libwebkitgtk2-lang-2.2.7-10.1 libwebkitgtk3-lang-2.2.7-10.1 mutter-lang-3.10.4-26.1 orca-lang-3.10.3-14.1 python-cupshelpers-1.4.4-2.10.1 seahorse-lang-3.10.2-10.1 system-config-printer-applet-1.4.4-2.10.1 system-config-printer-common-1.4.4-2.10.1 system-config-printer-common-lang-1.4.4-2.10.1 system-config-printer-dbus-service-1.4.4-2.10.1 totem-pl-parser-lang-3.10.1-10.1 yelp-lang-3.10.2-6.1 References: https://bugzilla.novell.com/832386 https://bugzilla.novell.com/839089 https://bugzilla.novell.com/842730 https://bugzilla.novell.com/849913 https://bugzilla.novell.com/852362 https://bugzilla.novell.com/861076 https://bugzilla.novell.com/861365 https://bugzilla.novell.com/869685 https://bugzilla.novell.com/871232 https://bugzilla.novell.com/888442 https://bugzilla.novell.com/888787 https://bugzilla.novell.com/893775

1 0

openSUSE-SU-2014:1096-1: moderate: enigmail: security fix
by opensuse-security＠opensuse.org 08 Sep '14

08 Sep '14

openSUSE Security Update: enigmail: security fix ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1096-1 Rating: moderate References: #893330 Cross-References: CVE-2014-5369 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: enigmail was updated to version 1.7.2 (bnc#893330) * bugfix release which contains several bugfixes including mail with only Bcc recipients sent in plain text (CVE-2014-5369) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-529 - openSUSE 12.3: zypper in -t patch openSUSE-2014-529 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): enigmail-1.7.2-6.1 enigmail-debuginfo-1.7.2-6.1 enigmail-debugsource-1.7.2-6.1 - openSUSE 12.3 (i586 x86_64): enigmail-1.7.2-6.1 enigmail-debuginfo-1.7.2-6.1 enigmail-debugsource-1.7.2-6.1 References: http://support.novell.com/security/cve/CVE-2014-5369.html https://bugzilla.novell.com/893330

1 0

openSUSE-RU-2014:1095-1: rsyslog: Stop syslog socket to avoid process keep running after package uninstall
by maintenance＠opensuse.org 08 Sep '14

08 Sep '14

openSUSE Recommended Update: rsyslog: Stop syslog socket to avoid process keep running after package uninstall ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1095-1 Rating: low References: #840815 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with rsyslog: - bnc#840815: Stop syslog.socket in %preun to avoid the daemon we uninstall gets started by a log message due to dependencies Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-528 - openSUSE 12.3: zypper in -t patch openSUSE-2014-528 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): rsyslog-7.4.7-2.12.1 rsyslog-debuginfo-7.4.7-2.12.1 rsyslog-debugsource-7.4.7-2.12.1 rsyslog-diag-tools-7.4.7-2.12.1 rsyslog-diag-tools-debuginfo-7.4.7-2.12.1 rsyslog-doc-7.4.7-2.12.1 rsyslog-module-dbi-7.4.7-2.12.1 rsyslog-module-dbi-debuginfo-7.4.7-2.12.1 rsyslog-module-elasticsearch-7.4.7-2.12.1 rsyslog-module-elasticsearch-debuginfo-7.4.7-2.12.1 rsyslog-module-gcrypt-7.4.7-2.12.1 rsyslog-module-gcrypt-debuginfo-7.4.7-2.12.1 rsyslog-module-gssapi-7.4.7-2.12.1 rsyslog-module-gssapi-debuginfo-7.4.7-2.12.1 rsyslog-module-gtls-7.4.7-2.12.1 rsyslog-module-gtls-debuginfo-7.4.7-2.12.1 rsyslog-module-guardtime-7.4.7-2.12.1 rsyslog-module-guardtime-debuginfo-7.4.7-2.12.1 rsyslog-module-mmnormalize-7.4.7-2.12.1 rsyslog-module-mmnormalize-debuginfo-7.4.7-2.12.1 rsyslog-module-mysql-7.4.7-2.12.1 rsyslog-module-mysql-debuginfo-7.4.7-2.12.1 rsyslog-module-pgsql-7.4.7-2.12.1 rsyslog-module-pgsql-debuginfo-7.4.7-2.12.1 rsyslog-module-relp-7.4.7-2.12.1 rsyslog-module-relp-debuginfo-7.4.7-2.12.1 rsyslog-module-snmp-7.4.7-2.12.1 rsyslog-module-snmp-debuginfo-7.4.7-2.12.1 rsyslog-module-udpspoof-7.4.7-2.12.1 rsyslog-module-udpspoof-debuginfo-7.4.7-2.12.1 - openSUSE 12.3 (i586 x86_64): rsyslog-7.2.7-2.9.1 rsyslog-debuginfo-7.2.7-2.9.1 rsyslog-debugsource-7.2.7-2.9.1 rsyslog-diag-tools-7.2.7-2.9.1 rsyslog-diag-tools-debuginfo-7.2.7-2.9.1 rsyslog-doc-7.2.7-2.9.1 rsyslog-module-dbi-7.2.7-2.9.1 rsyslog-module-dbi-debuginfo-7.2.7-2.9.1 rsyslog-module-elasticsearch-7.2.7-2.9.1 rsyslog-module-elasticsearch-debuginfo-7.2.7-2.9.1 rsyslog-module-gssapi-7.2.7-2.9.1 rsyslog-module-gssapi-debuginfo-7.2.7-2.9.1 rsyslog-module-gtls-7.2.7-2.9.1 rsyslog-module-gtls-debuginfo-7.2.7-2.9.1 rsyslog-module-mmnormalize-7.2.7-2.9.1 rsyslog-module-mmnormalize-debuginfo-7.2.7-2.9.1 rsyslog-module-mysql-7.2.7-2.9.1 rsyslog-module-mysql-debuginfo-7.2.7-2.9.1 rsyslog-module-pgsql-7.2.7-2.9.1 rsyslog-module-pgsql-debuginfo-7.2.7-2.9.1 rsyslog-module-relp-7.2.7-2.9.1 rsyslog-module-relp-debuginfo-7.2.7-2.9.1 rsyslog-module-snmp-7.2.7-2.9.1 rsyslog-module-snmp-debuginfo-7.2.7-2.9.1 rsyslog-module-udpspoof-7.2.7-2.9.1 rsyslog-module-udpspoof-debuginfo-7.2.7-2.9.1 References: https://bugzilla.novell.com/840815

1 0

openSUSE-RU-2014:1094-1: p11-kit: apply patches to avoid errors from certificates with invalid public key
by maintenance＠opensuse.org 08 Sep '14

08 Sep '14

openSUSE Recommended Update: p11-kit: apply patches to avoid errors from certificates with invalid public key ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1094-1 Rating: low References: #890908 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with p11-kit: - fdo#82328/bnc#890908: applied patches to avoid errors from certificates with invalid public key Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-527 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libp11-kit0-0.20.1-2.4.1 libp11-kit0-debuginfo-0.20.1-2.4.1 p11-kit-0.20.1-2.4.1 p11-kit-debuginfo-0.20.1-2.4.1 p11-kit-debugsource-0.20.1-2.4.1 p11-kit-devel-0.20.1-2.4.1 p11-kit-nss-trust-0.20.1-2.4.1 p11-kit-tools-0.20.1-2.4.1 p11-kit-tools-debuginfo-0.20.1-2.4.1 - openSUSE 13.1 (x86_64): libp11-kit0-32bit-0.20.1-2.4.1 libp11-kit0-debuginfo-32bit-0.20.1-2.4.1 p11-kit-32bit-0.20.1-2.4.1 p11-kit-debuginfo-32bit-0.20.1-2.4.1 References: https://bugzilla.novell.com/890908

1 0

openSUSE-RU-2014:1090-1: mcelog: Fix typo in spec-file
by maintenance＠opensuse.org 04 Sep '14

04 Sep '14

openSUSE Recommended Update: mcelog: Fix typo in spec-file ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1090-1 Rating: low References: Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issues with mcelog: - Fixes typo in spec-file Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-526 - openSUSE 12.3: zypper in -t patch openSUSE-2014-526 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): mcelog-1.0pre3.6e4e2a000124-19.4.1 mcelog-debuginfo-1.0pre3.6e4e2a000124-19.4.1 mcelog-debugsource-1.0pre3.6e4e2a000124-19.4.1 - openSUSE 12.3 (i586 x86_64): mcelog-1.0pre3.6e4e2a000124-16.5.1 mcelog-debuginfo-1.0pre3.6e4e2a000124-16.5.1 mcelog-debugsource-1.0pre3.6e4e2a000124-16.5.1 References:

1 0

openSUSE-SU-2014:1086-1: moderate: update for enigmail
by opensuse-security＠opensuse.org 03 Sep '14

03 Sep '14

openSUSE Security Update: update for enigmail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1086-1 Rating: moderate References: Cross-References: CVE-2014-5369 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: update to version 1.7.2 * bugfix release which contains several bugfixes including mail with only Bcc recipients sent in plain text unexpectedly (CVE-2014-5369) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-81 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): enigmail-1.7.2-9.1 enigmail-debuginfo-1.7.2-9.1 enigmail-debugsource-1.7.2-9.1 References: http://support.novell.com/security/cve/CVE-2014-5369.html

1 0

openSUSE-RU-2014:1085-1: xscreensaver: disable nagging messages about upgrading to a newer version
by maintenance＠opensuse.org 03 Sep '14

03 Sep '14

openSUSE Recommended Update: xscreensaver: disable nagging messages about upgrading to a newer version ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1085-1 Rating: low References: #890595 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with xscreensaver: - bnc#890595: Added fix to disable nagging messages about upgrading to a newer version Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-525 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): xscreensaver-5.22-2.22.1 xscreensaver-data-5.22-2.22.1 xscreensaver-data-debuginfo-5.22-2.22.1 xscreensaver-data-extra-5.22-2.22.1 xscreensaver-data-extra-debuginfo-5.22-2.22.1 xscreensaver-debuginfo-5.22-2.22.1 xscreensaver-debugsource-5.22-2.22.1 References: https://bugzilla.novell.com/890595

1 0

openSUSE-RU-2014:1079-1: e2fsprogs: Fixes periodic checking of ext? filesystems
by maintenance＠opensuse.org 02 Sep '14

02 Sep '14

openSUSE Recommended Update: e2fsprogs: Fixes periodic checking of ext? filesystems ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1079-1 Rating: low References: #866283 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with e2fsprogs: -bnc#866283: fixes periodic checking of ext? filesystems, caused by setting broken-system-clock in e2fsck.conf Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-524 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): e2fsprogs-1.42.8-2.5.1 References: https://bugzilla.novell.com/866283

1 0

openSUSE-RU-2014:1078-1: kup: fix Requires in spec-file
by maintenance＠opensuse.org 02 Sep '14

02 Sep '14

openSUSE Recommended Update: kup: fix Requires in spec-file ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1078-1 Rating: low References: #893387 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with kup: - fix Requires in .spec Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-523 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): kup-client-0.3.2-6.4.1 kup-server-0.3.2-6.4.1 References: https://bugzilla.novell.com/893387

1 0

openSUSE-RU-2014:1076-1: hostapd: enables wired driver to support wired IEEE 802.1X authentication
by maintenance＠opensuse.org 01 Sep '14

01 Sep '14

openSUSE Recommended Update: hostapd: enables wired driver to support wired IEEE 802.1X authentication ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1076-1 Rating: low References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issues with hostapd: - enables wired driver which is required to support wired IEEE 802.1X authentication via any ethernet driver Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-522 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): hostapd-2.0-2.6.1 hostapd-debuginfo-2.0-2.6.1 hostapd-debugsource-2.0-2.6.1 References:

1 0