September 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2014:1132-1: moderate: python-django: security and bugfix update
by opensuse-security＠opensuse.org 16 Sep '14

16 Sep '14

openSUSE Security Update: python-django: security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1132-1 Rating: moderate References: #874950 #874955 #874956 #877993 #878641 #893087 #893088 #893089 #893090 Cross-References: CVE-2014-0472 CVE-2014-0473 CVE-2014-0474 CVE-2014-0480 CVE-2014-0481 CVE-2014-0482 CVE-2014-0483 CVE-2014-1418 CVE-2014-3730 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: Python Django was updated to fix security issues and bugs. Update to version 1.4.15 on openSUSE 12.3: + Prevented reverse() from generating URLs pointing to other hosts to prevent phishing attacks (bnc#893087, CVE-2014-0480) + Removed O(n) algorithm when uploading duplicate file names to fix file upload denial of service (bnc#893088, CVE-2014-0481) + Modified RemoteUserMiddleware to logout on REMOTE_USE change to prevent session hijacking (bnc#893089, CVE-2014-0482) + Prevented data leakage in contrib.admin via query string manipulation (bnc#893090, CVE-2014-0483) + Fixed: Caches may incorrectly be allowed to store and serve private data (bnc#877993, CVE-2014-1418) + Fixed: Malformed redirect URLs from user input not correctly validated (bnc#878641, CVE-2014-3730) + Fixed queries that may return unexpected results on MySQL due to typecasting (bnc#874956, CVE-2014-0474) + Prevented leaking the CSRF token through caching (bnc#874955, CVE-2014-0473) + Fixed a remote code execution vulnerabilty in URL reversing (bnc#874950, CVE-2014-0472) Update to version 1.5.10 on openSUSE 13.1: + Prevented reverse() from generating URLs pointing to other hosts to prevent phishing attacks (bnc#893087, CVE-2014-0480) + Removed O(n) algorithm when uploading duplicate file names to fix file upload denial of service (bnc#893088, CVE-2014-0481) + Modified RemoteUserMiddleware to logout on REMOTE_USE change to prevent session hijacking (bnc#893089, CVE-2014-0482) + Prevented data leakage in contrib.admin via query string manipulation (bnc#893090, CVE-2014-0483) - Update to version 1.5.8: + Fixed: Caches may incorrectly be allowed to store and serve private data (bnc#877993, CVE-2014-1418) + Fixed: Malformed redirect URLs from user input not correctly validated (bnc#878641, CVE-2014-3730) + Fixed queries that may return unexpected results on MySQL due to typecasting (bnc#874956, CVE-2014-0474) + Prevented leaking the CSRF token through caching (bnc#874955, CVE-2014-0473) + Fixed a remote code execution vulnerabilty in URL reversing (bnc#874950, CVE-2014-0472) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-542 - openSUSE 12.3: zypper in -t patch openSUSE-2014-542 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): python-django-1.5.10-0.2.8.1 - openSUSE 12.3 (noarch): python-django-1.4.15-2.12.1 References: http://support.novell.com/security/cve/CVE-2014-0472.html http://support.novell.com/security/cve/CVE-2014-0473.html http://support.novell.com/security/cve/CVE-2014-0474.html http://support.novell.com/security/cve/CVE-2014-0480.html http://support.novell.com/security/cve/CVE-2014-0481.html http://support.novell.com/security/cve/CVE-2014-0482.html http://support.novell.com/security/cve/CVE-2014-0483.html http://support.novell.com/security/cve/CVE-2014-1418.html http://support.novell.com/security/cve/CVE-2014-3730.html https://bugzilla.novell.com/874950 https://bugzilla.novell.com/874955 https://bugzilla.novell.com/874956 https://bugzilla.novell.com/877993 https://bugzilla.novell.com/878641 https://bugzilla.novell.com/893087 https://bugzilla.novell.com/893088 https://bugzilla.novell.com/893089 https://bugzilla.novell.com/893090

1 0

openSUSE-SU-2014:1130-1: important: update flash-player to 11.2.202.40
by opensuse-security＠opensuse.org 15 Sep '14

15 Sep '14

openSUSE Security Update: update flash-player to 11.2.202.40 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1130-1 Rating: important References: #895856 Cross-References: CVE-2014-0547 CVE-2014-0548 CVE-2014-0549 CVE-2014-0550 CVE-2014-0551 CVE-2014-0552 CVE-2014-0553 CVE-2014-0554 CVE-2014-0555 CVE-2014-0556 CVE-2014-0557 CVE-2014-0559 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.406 (bnc#895856): * APSB14-21, CVE-2014-0547, CVE-2014-0548, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, CVE-2014-0553, CVE-2014-0554, CVE-2014-0555, CVE-2014-0556, CVE-2014-0557, CVE-2014-0559 More information can be found on: http://helpx.adobe.com/security/products/flash-player/apsb14-21.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-83 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.406-127.1 flash-player-gnome-11.2.202.406-127.1 flash-player-kde4-11.2.202.406-127.1 References: http://support.novell.com/security/cve/CVE-2014-0547.html http://support.novell.com/security/cve/CVE-2014-0548.html http://support.novell.com/security/cve/CVE-2014-0549.html http://support.novell.com/security/cve/CVE-2014-0550.html http://support.novell.com/security/cve/CVE-2014-0551.html http://support.novell.com/security/cve/CVE-2014-0552.html http://support.novell.com/security/cve/CVE-2014-0553.html http://support.novell.com/security/cve/CVE-2014-0554.html http://support.novell.com/security/cve/CVE-2014-0555.html http://support.novell.com/security/cve/CVE-2014-0556.html http://support.novell.com/security/cve/CVE-2014-0557.html http://support.novell.com/security/cve/CVE-2014-0559.html https://bugzilla.novell.com/895856

1 0

openSUSE-RU-2014:1127-1: rdesktop: update to version 1.8.2 and fix of reacting to user input while connected to vbox
by maintenance＠opensuse.org 15 Sep '14

15 Sep '14

openSUSE Recommended Update: rdesktop: update to version 1.8.2 and fix of reacting to user input while connected to vbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1127-1 Rating: low References: #874452 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with rdesktop: - bnc#874452: fixes an issue where rdesktop doesn't react to user input (keyboard, mouse) when connected to VirtualBox - update to 1.8.2 * Support enhanced server redirection (Session broker 2012) * Support License Error Alert PDU * Changed default driver for printer redirection * Fix CredSSP login using non-ASCII username/password * Fix double login prompt bug with Win2008 server redirection * Fix keysym collisions * Fix mouse cursor with 2012 R2 * Fix local drive redirection with Win8 / Win2012 * Fix issue with mouse cursor hotspot * Fix issue with mouse / keyboard against VirtualBox RDP * Fix uncomplete czech keymap * Fix error in dutch keymap Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-541 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): rdesktop-1.8.2-2.8.1 rdesktop-debuginfo-1.8.2-2.8.1 rdesktop-debugsource-1.8.2-2.8.1 References: https://bugzilla.novell.com/874452

1 0

openSUSE-SU-2014:1126-1: important: LibreOffice: two security fixes
by opensuse-security＠opensuse.org 15 Sep '14

15 Sep '14

openSUSE Security Update: LibreOffice: two security fixes ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1126-1 Rating: important References: #831578 #893141 Cross-References: CVE-2013-4156 CVE-2014-3575 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update fixes memory corruption vulnerability in DOCM import and data exposure using crafted OLE objects. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-540 - openSUSE 12.3: zypper in -t patch openSUSE-2014-540 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libreoffice-4.1.6.2-25.1 libreoffice-base-4.1.6.2-25.1 libreoffice-base-debuginfo-4.1.6.2-25.1 libreoffice-base-drivers-mysql-4.1.6.2-25.1 libreoffice-base-drivers-mysql-debuginfo-4.1.6.2-25.1 libreoffice-base-drivers-postgresql-4.1.6.2-25.1 libreoffice-base-drivers-postgresql-debuginfo-4.1.6.2-25.1 libreoffice-base-extensions-4.1.6.2-25.1 libreoffice-calc-4.1.6.2-25.1 libreoffice-calc-debuginfo-4.1.6.2-25.1 libreoffice-calc-extensions-4.1.6.2-25.1 libreoffice-debuginfo-4.1.6.2-25.1 libreoffice-debugsource-4.1.6.2-25.1 libreoffice-draw-4.1.6.2-25.1 libreoffice-draw-debuginfo-4.1.6.2-25.1 libreoffice-draw-extensions-4.1.6.2-25.1 libreoffice-filters-optional-4.1.6.2-25.1 libreoffice-gnome-4.1.6.2-25.1 libreoffice-gnome-debuginfo-4.1.6.2-25.1 libreoffice-icon-themes-prebuilt-4.1.6.2-25.1 libreoffice-impress-4.1.6.2-25.1 libreoffice-impress-debuginfo-4.1.6.2-25.1 libreoffice-impress-extensions-4.1.6.2-25.1 libreoffice-impress-extensions-debuginfo-4.1.6.2-25.1 libreoffice-kde-4.1.6.2-25.1 libreoffice-kde-debuginfo-4.1.6.2-25.1 libreoffice-kde4-4.1.6.2-25.1 libreoffice-kde4-debuginfo-4.1.6.2-25.1 libreoffice-l10n-prebuilt-4.1.6.2-25.1 libreoffice-mailmerge-4.1.6.2-25.1 libreoffice-math-4.1.6.2-25.1 libreoffice-math-debuginfo-4.1.6.2-25.1 libreoffice-officebean-4.1.6.2-25.1 libreoffice-officebean-debuginfo-4.1.6.2-25.1 libreoffice-pyuno-4.1.6.2-25.1 libreoffice-pyuno-debuginfo-4.1.6.2-25.1 libreoffice-sdk-4.1.6.2-25.1 libreoffice-sdk-debuginfo-4.1.6.2-25.1 libreoffice-sdk-doc-4.1.6.2-25.1 libreoffice-writer-4.1.6.2-25.1 libreoffice-writer-debuginfo-4.1.6.2-25.1 libreoffice-writer-extensions-4.1.6.2-25.1 - openSUSE 13.1 (noarch): libreoffice-branding-upstream-4.1.6.2-25.1 libreoffice-help-ast-4.1.6.2-25.1 libreoffice-help-bg-4.1.6.2-25.1 libreoffice-help-ca-4.1.6.2-25.1 libreoffice-help-cs-4.1.6.2-25.1 libreoffice-help-da-4.1.6.2-25.1 libreoffice-help-de-4.1.6.2-25.1 libreoffice-help-el-4.1.6.2-25.1 libreoffice-help-en-GB-4.1.6.2-25.1 libreoffice-help-en-US-4.1.6.2-25.1 libreoffice-help-en-ZA-4.1.6.2-25.1 libreoffice-help-es-4.1.6.2-25.1 libreoffice-help-et-4.1.6.2-25.1 libreoffice-help-eu-4.1.6.2-25.1 libreoffice-help-fi-4.1.6.2-25.1 libreoffice-help-fr-4.1.6.2-25.1 libreoffice-help-gl-4.1.6.2-25.1 libreoffice-help-gu-IN-4.1.6.2-25.1 libreoffice-help-hi-IN-4.1.6.2-25.1 libreoffice-help-hu-4.1.6.2-25.1 libreoffice-help-it-4.1.6.2-25.1 libreoffice-help-ja-4.1.6.2-25.1 libreoffice-help-km-4.1.6.2-25.1 libreoffice-help-ko-4.1.6.2-25.1 libreoffice-help-mk-4.1.6.2-25.1 libreoffice-help-nb-4.1.6.2-25.1 libreoffice-help-nl-4.1.6.2-25.1 libreoffice-help-pl-4.1.6.2-25.1 libreoffice-help-pt-4.1.6.2-25.1 libreoffice-help-pt-BR-4.1.6.2-25.1 libreoffice-help-ru-4.1.6.2-25.1 libreoffice-help-sk-4.1.6.2-25.1 libreoffice-help-sl-4.1.6.2-25.1 libreoffice-help-sv-4.1.6.2-25.1 libreoffice-help-tr-4.1.6.2-25.1 libreoffice-help-vi-4.1.6.2-25.1 libreoffice-help-zh-CN-4.1.6.2-25.1 libreoffice-help-zh-TW-4.1.6.2-25.1 libreoffice-icon-theme-crystal-4.1.6.2-25.1 libreoffice-icon-theme-galaxy-4.1.6.2-25.1 libreoffice-icon-theme-hicontrast-4.1.6.2-25.1 libreoffice-icon-theme-oxygen-4.1.6.2-25.1 libreoffice-icon-theme-tango-4.1.6.2-25.1 libreoffice-l10n-af-4.1.6.2-25.2 libreoffice-l10n-am-4.1.6.2-25.2 libreoffice-l10n-ar-4.1.6.2-25.2 libreoffice-l10n-as-4.1.6.2-25.2 libreoffice-l10n-ast-4.1.6.2-25.2 libreoffice-l10n-be-BY-4.1.6.2-25.2 libreoffice-l10n-bg-4.1.6.2-25.2 libreoffice-l10n-br-4.1.6.2-25.2 libreoffice-l10n-ca-4.1.6.2-25.2 libreoffice-l10n-cs-4.1.6.2-25.2 libreoffice-l10n-cy-4.1.6.2-25.2 libreoffice-l10n-da-4.1.6.2-25.2 libreoffice-l10n-de-4.1.6.2-25.2 libreoffice-l10n-el-4.1.6.2-25.2 libreoffice-l10n-en-GB-4.1.6.2-25.2 libreoffice-l10n-en-ZA-4.1.6.2-25.2 libreoffice-l10n-eo-4.1.6.2-25.2 libreoffice-l10n-es-4.1.6.2-25.2 libreoffice-l10n-et-4.1.6.2-25.2 libreoffice-l10n-eu-4.1.6.2-25.2 libreoffice-l10n-fi-4.1.6.2-25.2 libreoffice-l10n-fr-4.1.6.2-25.2 libreoffice-l10n-ga-4.1.6.2-25.2 libreoffice-l10n-gd-4.1.6.2-25.2 libreoffice-l10n-gl-4.1.6.2-25.2 libreoffice-l10n-gu-IN-4.1.6.2-25.2 libreoffice-l10n-he-4.1.6.2-25.2 libreoffice-l10n-hi-IN-4.1.6.2-25.2 libreoffice-l10n-hr-4.1.6.2-25.2 libreoffice-l10n-hu-4.1.6.2-25.2 libreoffice-l10n-id-4.1.6.2-25.2 libreoffice-l10n-is-4.1.6.2-25.2 libreoffice-l10n-it-4.1.6.2-25.2 libreoffice-l10n-ja-4.1.6.2-25.2 libreoffice-l10n-ka-4.1.6.2-25.2 libreoffice-l10n-km-4.1.6.2-25.2 libreoffice-l10n-kn-4.1.6.2-25.2 libreoffice-l10n-ko-4.1.6.2-25.2 libreoffice-l10n-lt-4.1.6.2-25.2 libreoffice-l10n-mk-4.1.6.2-25.2 libreoffice-l10n-ml-4.1.6.2-25.2 libreoffice-l10n-mr-4.1.6.2-25.2 libreoffice-l10n-nb-4.1.6.2-25.2 libreoffice-l10n-nl-4.1.6.2-25.2 libreoffice-l10n-nn-4.1.6.2-25.2 libreoffice-l10n-nr-4.1.6.2-25.2 libreoffice-l10n-om-4.1.6.2-25.2 libreoffice-l10n-or-4.1.6.2-25.2 libreoffice-l10n-pa-IN-4.1.6.2-25.2 libreoffice-l10n-pl-4.1.6.2-25.2 libreoffice-l10n-pt-4.1.6.2-25.2 libreoffice-l10n-pt-BR-4.1.6.2-25.2 libreoffice-l10n-ro-4.1.6.2-25.2 libreoffice-l10n-ru-4.1.6.2-25.2 libreoffice-l10n-rw-4.1.6.2-25.2 libreoffice-l10n-sh-4.1.6.2-25.2 libreoffice-l10n-sk-4.1.6.2-25.2 libreoffice-l10n-sl-4.1.6.2-25.2 libreoffice-l10n-sr-4.1.6.2-25.2 libreoffice-l10n-ss-4.1.6.2-25.2 libreoffice-l10n-st-4.1.6.2-25.2 libreoffice-l10n-sv-4.1.6.2-25.2 libreoffice-l10n-ta-4.1.6.2-25.2 libreoffice-l10n-te-4.1.6.2-25.2 libreoffice-l10n-tg-4.1.6.2-25.2 libreoffice-l10n-th-4.1.6.2-25.2 libreoffice-l10n-tr-4.1.6.2-25.2 libreoffice-l10n-ts-4.1.6.2-25.2 libreoffice-l10n-ug-4.1.6.2-25.2 libreoffice-l10n-uk-4.1.6.2-25.2 libreoffice-l10n-ve-4.1.6.2-25.2 libreoffice-l10n-vi-4.1.6.2-25.2 libreoffice-l10n-xh-4.1.6.2-25.2 libreoffice-l10n-zh-CN-4.1.6.2-25.2 libreoffice-l10n-zh-TW-4.1.6.2-25.2 libreoffice-l10n-zu-4.1.6.2-25.2 - openSUSE 12.3 (i586 x86_64): libreoffice-3.6.3.2.4-2.9.1 libreoffice-base-3.6.3.2.4-2.9.1 libreoffice-base-debuginfo-3.6.3.2.4-2.9.1 libreoffice-base-drivers-mysql-3.6.3.2.4-2.9.1 libreoffice-base-drivers-mysql-debuginfo-3.6.3.2.4-2.9.1 libreoffice-base-drivers-postgresql-3.6.3.2.4-2.9.1 libreoffice-base-drivers-postgresql-debuginfo-3.6.3.2.4-2.9.1 libreoffice-base-extensions-3.6.3.2.4-2.9.1 libreoffice-calc-3.6.3.2.4-2.9.1 libreoffice-calc-debuginfo-3.6.3.2.4-2.9.1 libreoffice-calc-extensions-3.6.3.2.4-2.9.1 libreoffice-debuginfo-3.6.3.2.4-2.9.1 libreoffice-debugsource-3.6.3.2.4-2.9.1 libreoffice-draw-3.6.3.2.4-2.9.1 libreoffice-draw-extensions-3.6.3.2.4-2.9.1 libreoffice-draw-extensions-debuginfo-3.6.3.2.4-2.9.1 libreoffice-filters-optional-3.6.3.2.4-2.9.1 libreoffice-filters-optional-debuginfo-3.6.3.2.4-2.9.1 libreoffice-gnome-3.6.3.2.4-2.9.1 libreoffice-gnome-debuginfo-3.6.3.2.4-2.9.1 libreoffice-icon-themes-prebuilt-3.6.3.2.4-2.9.1 libreoffice-impress-3.6.3.2.4-2.9.1 libreoffice-impress-debuginfo-3.6.3.2.4-2.9.1 libreoffice-impress-extensions-3.6.3.2.4-2.9.1 libreoffice-impress-extensions-debuginfo-3.6.3.2.4-2.9.1 libreoffice-kde-3.6.3.2.4-2.9.1 libreoffice-kde-debuginfo-3.6.3.2.4-2.9.1 libreoffice-kde4-3.6.3.2.4-2.9.1 libreoffice-kde4-debuginfo-3.6.3.2.4-2.9.1 libreoffice-l10n-prebuilt-3.6.3.2.4-2.9.1 libreoffice-mailmerge-3.6.3.2.4-2.9.1 libreoffice-math-3.6.3.2.4-2.9.1 libreoffice-math-debuginfo-3.6.3.2.4-2.9.1 libreoffice-officebean-3.6.3.2.4-2.9.1 libreoffice-officebean-debuginfo-3.6.3.2.4-2.9.1 libreoffice-pyuno-3.6.3.2.4-2.9.1 libreoffice-pyuno-debuginfo-3.6.3.2.4-2.9.1 libreoffice-sdk-3.6.3.2.4-2.9.1 libreoffice-sdk-debuginfo-3.6.3.2.4-2.9.1 libreoffice-sdk-doc-3.6.3.2.4-2.9.1 libreoffice-writer-3.6.3.2.4-2.9.1 libreoffice-writer-debuginfo-3.6.3.2.4-2.9.1 libreoffice-writer-extensions-3.6.3.2.4-2.9.1 - openSUSE 12.3 (noarch): libreoffice-branding-upstream-3.6.3.2.4-2.9.1 libreoffice-help-ast-3.6.3.2.4-2.9.1 libreoffice-help-bg-3.6.3.2.4-2.9.1 libreoffice-help-ca-3.6.3.2.4-2.9.1 libreoffice-help-cs-3.6.3.2.4-2.9.1 libreoffice-help-da-3.6.3.2.4-2.9.1 libreoffice-help-de-3.6.3.2.4-2.9.1 libreoffice-help-el-3.6.3.2.4-2.9.1 libreoffice-help-en-GB-3.6.3.2.4-2.9.1 libreoffice-help-en-US-3.6.3.2.4-2.9.1 libreoffice-help-en-ZA-3.6.3.2.4-2.9.1 libreoffice-help-es-3.6.3.2.4-2.9.1 libreoffice-help-et-3.6.3.2.4-2.9.1 libreoffice-help-eu-3.6.3.2.4-2.9.1 libreoffice-help-fi-3.6.3.2.4-2.9.1 libreoffice-help-fr-3.6.3.2.4-2.9.1 libreoffice-help-gl-3.6.3.2.4-2.9.1 libreoffice-help-gu-IN-3.6.3.2.4-2.9.1 libreoffice-help-hi-IN-3.6.3.2.4-2.9.1 libreoffice-help-hu-3.6.3.2.4-2.9.1 libreoffice-help-it-3.6.3.2.4-2.9.1 libreoffice-help-ja-3.6.3.2.4-2.9.1 libreoffice-help-km-3.6.3.2.4-2.9.1 libreoffice-help-ko-3.6.3.2.4-2.9.1 libreoffice-help-mk-3.6.3.2.4-2.9.1 libreoffice-help-nb-3.6.3.2.4-2.9.1 libreoffice-help-nl-3.6.3.2.4-2.9.1 libreoffice-help-pl-3.6.3.2.4-2.9.1 libreoffice-help-pt-3.6.3.2.4-2.9.1 libreoffice-help-pt-BR-3.6.3.2.4-2.9.1 libreoffice-help-ru-3.6.3.2.4-2.9.1 libreoffice-help-sk-3.6.3.2.4-2.9.1 libreoffice-help-sl-3.6.3.2.4-2.9.1 libreoffice-help-sv-3.6.3.2.4-2.9.1 libreoffice-help-tr-3.6.3.2.4-2.9.1 libreoffice-help-vi-3.6.3.2.4-2.9.1 libreoffice-help-zh-CN-3.6.3.2.4-2.9.1 libreoffice-help-zh-TW-3.6.3.2.4-2.9.1 libreoffice-icon-theme-crystal-3.6.3.2.4-2.9.1 libreoffice-icon-theme-galaxy-3.6.3.2.4-2.9.1 libreoffice-icon-theme-hicontrast-3.6.3.2.4-2.9.1 libreoffice-icon-theme-oxygen-3.6.3.2.4-2.9.1 libreoffice-icon-theme-tango-3.6.3.2.4-2.9.1 libreoffice-l10n-af-3.6.3.2.4-2.9.3 libreoffice-l10n-am-3.6.3.2.4-2.9.3 libreoffice-l10n-ar-3.6.3.2.4-2.9.3 libreoffice-l10n-as-3.6.3.2.4-2.9.3 libreoffice-l10n-ast-3.6.3.2.4-2.9.3 libreoffice-l10n-be-BY-3.6.3.2.4-2.9.3 libreoffice-l10n-bg-3.6.3.2.4-2.9.3 libreoffice-l10n-br-3.6.3.2.4-2.9.3 libreoffice-l10n-ca-3.6.3.2.4-2.9.3 libreoffice-l10n-cs-3.6.3.2.4-2.9.3 libreoffice-l10n-cy-3.6.3.2.4-2.9.3 libreoffice-l10n-da-3.6.3.2.4-2.9.3 libreoffice-l10n-de-3.6.3.2.4-2.9.3 libreoffice-l10n-el-3.6.3.2.4-2.9.3 libreoffice-l10n-en-GB-3.6.3.2.4-2.9.3 libreoffice-l10n-en-ZA-3.6.3.2.4-2.9.3 libreoffice-l10n-eo-3.6.3.2.4-2.9.3 libreoffice-l10n-es-3.6.3.2.4-2.9.3 libreoffice-l10n-et-3.6.3.2.4-2.9.3 libreoffice-l10n-eu-3.6.3.2.4-2.9.3 libreoffice-l10n-fi-3.6.3.2.4-2.9.3 libreoffice-l10n-fr-3.6.3.2.4-2.9.3 libreoffice-l10n-ga-3.6.3.2.4-2.9.3 libreoffice-l10n-gd-3.6.3.2.4-2.9.3 libreoffice-l10n-gl-3.6.3.2.4-2.9.3 libreoffice-l10n-gu-IN-3.6.3.2.4-2.9.3 libreoffice-l10n-he-3.6.3.2.4-2.9.3 libreoffice-l10n-hi-IN-3.6.3.2.4-2.9.3 libreoffice-l10n-hr-3.6.3.2.4-2.9.3 libreoffice-l10n-hu-3.6.3.2.4-2.9.3 libreoffice-l10n-id-3.6.3.2.4-2.9.3 libreoffice-l10n-is-3.6.3.2.4-2.9.3 libreoffice-l10n-it-3.6.3.2.4-2.9.3 libreoffice-l10n-ja-3.6.3.2.4-2.9.3 libreoffice-l10n-ka-3.6.3.2.4-2.9.3 libreoffice-l10n-km-3.6.3.2.4-2.9.3 libreoffice-l10n-kn-3.6.3.2.4-2.9.3 libreoffice-l10n-ko-3.6.3.2.4-2.9.3 libreoffice-l10n-lt-3.6.3.2.4-2.9.3 libreoffice-l10n-mk-3.6.3.2.4-2.9.3 libreoffice-l10n-ml-3.6.3.2.4-2.9.3 libreoffice-l10n-mr-3.6.3.2.4-2.9.3 libreoffice-l10n-nb-3.6.3.2.4-2.9.3 libreoffice-l10n-nl-3.6.3.2.4-2.9.3 libreoffice-l10n-nn-3.6.3.2.4-2.9.3 libreoffice-l10n-nr-3.6.3.2.4-2.9.3 libreoffice-l10n-om-3.6.3.2.4-2.9.3 libreoffice-l10n-or-3.6.3.2.4-2.9.3 libreoffice-l10n-pa-IN-3.6.3.2.4-2.9.3 libreoffice-l10n-pl-3.6.3.2.4-2.9.3 libreoffice-l10n-pt-3.6.3.2.4-2.9.3 libreoffice-l10n-pt-BR-3.6.3.2.4-2.9.3 libreoffice-l10n-ro-3.6.3.2.4-2.9.3 libreoffice-l10n-ru-3.6.3.2.4-2.9.3 libreoffice-l10n-rw-3.6.3.2.4-2.9.3 libreoffice-l10n-sh-3.6.3.2.4-2.9.3 libreoffice-l10n-sk-3.6.3.2.4-2.9.3 libreoffice-l10n-sl-3.6.3.2.4-2.9.3 libreoffice-l10n-sr-3.6.3.2.4-2.9.3 libreoffice-l10n-ss-3.6.3.2.4-2.9.3 libreoffice-l10n-st-3.6.3.2.4-2.9.3 libreoffice-l10n-sv-3.6.3.2.4-2.9.3 libreoffice-l10n-ta-3.6.3.2.4-2.9.3 libreoffice-l10n-te-3.6.3.2.4-2.9.3 libreoffice-l10n-tg-3.6.3.2.4-2.9.3 libreoffice-l10n-th-3.6.3.2.4-2.9.3 libreoffice-l10n-tr-3.6.3.2.4-2.9.3 libreoffice-l10n-ts-3.6.3.2.4-2.9.3 libreoffice-l10n-ug-3.6.3.2.4-2.9.3 libreoffice-l10n-uk-3.6.3.2.4-2.9.3 libreoffice-l10n-ve-3.6.3.2.4-2.9.3 libreoffice-l10n-vi-3.6.3.2.4-2.9.3 libreoffice-l10n-xh-3.6.3.2.4-2.9.3 libreoffice-l10n-zh-CN-3.6.3.2.4-2.9.3 libreoffice-l10n-zh-TW-3.6.3.2.4-2.9.3 libreoffice-l10n-zu-3.6.3.2.4-2.9.3 References: http://support.novell.com/security/cve/CVE-2013-4156.html http://support.novell.com/security/cve/CVE-2014-3575.html https://bugzilla.novell.com/831578 https://bugzilla.novell.com/893141

1 0

openSUSE-RU-2014:1123-1: at: Update to 3.1.13
by maintenance＠opensuse.org 12 Sep '14

12 Sep '14

openSUSE Recommended Update: at: Update to 3.1.13 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1123-1 Rating: low References: #870763 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with at: - update to 3.1.13: + bnc#870763: Fixed issue with daylight saving time + Several other fixes and improvements. For the detailed changes, please see the changelog Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2014-539 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): at-3.1.13-1116.5.1 at-debuginfo-3.1.13-1116.5.1 at-debugsource-3.1.13-1116.5.1 References: https://bugzilla.novell.com/870763

1 0

openSUSE-RU-2014:1117-1: fail2ban: Update to Version 0.8.14
by maintenance＠opensuse.org 11 Sep '14

11 Sep '14

openSUSE Recommended Update: fail2ban: Update to Version 0.8.14 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1117-1 Rating: low References: #878028 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with fail2ban: - Fixed build error under older systems. - Changes in spec file - update to 0.8.14 * minor fixes for claimed Python 2.4 and 2.5 compatibility * Handle case when inotify watch is auto deleted on file deletion to stop error messages * tests - fixed few "leaky" file descriptors when files were not closed while being removed physically * grep in mail*-whois-lines.conf now also matches end of line to work with the recidive filter - bnc#878028: added patch to fix default locations - update to 0.8.13: + Fixes: - rh#1046816: action firewallcmd-ipset had non-working actioncheck. Removed. - filter pureftpd - added _daemon which got removed. Added + New Features: - filter nagios - detects unauthorized access to the nrpe daemon (Ivo Truxa) - filter sendmail-{auth,reject} (jserrachinha and cepheid666 and fab23). + Enhancements: - filter asterisk now supports syslog format - filter pureftpd - added all translations of "Authentication failed for user" - filter dovecot - lip= was optional and extended TLS errors can occur. - split out nagios-plugins-fail2ban package - Add a new subpackage to install systemd drop-ins that couple SuSEfirewall2 and fail2ban. Added sfw-fail2ban.conf, f2b-restart.conf. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-538 - openSUSE 12.3: zypper in -t patch openSUSE-2014-538 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): SuSEfirewall2-fail2ban-0.8.14-2.9.1 fail2ban-0.8.14-2.9.1 nagios-plugins-fail2ban-0.8.14-2.9.1 - openSUSE 12.3 (noarch): SuSEfirewall2-fail2ban-0.8.14-2.16.1 fail2ban-0.8.14-2.16.1 nagios-plugins-fail2ban-0.8.14-2.16.1 References: https://bugzilla.novell.com/878028

1 0

openSUSE-SU-2014:1115-1: important: glibc
by opensuse-security＠opensuse.org 11 Sep '14

11 Sep '14

openSUSE Security Update: glibc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1115-1 Rating: important References: #887022 #892073 #894553 Cross-References: CVE-2014-0475 CVE-2014-5119 CVE-2014-6040 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: glibc was updated to fix three security issues: - A directory traversal in locale environment handling was fixed (CVE-2014-0475, bnc#887022, GLIBC BZ #17137) - Disable gconv transliteration module loading which could be used for code execution (CVE-2014-5119, bnc#892073, GLIBC BZ #17187) - Fix crashes on invalid input in IBM gconv modules (CVE-2014-6040, bnc#894553, BZ #17325) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-536 - openSUSE 12.3: zypper in -t patch openSUSE-2014-536 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 i686 x86_64): glibc-2.18-4.21.1 glibc-debuginfo-2.18-4.21.1 glibc-debugsource-2.18-4.21.1 glibc-devel-2.18-4.21.1 glibc-devel-debuginfo-2.18-4.21.1 glibc-devel-static-2.18-4.21.1 glibc-extra-2.18-4.21.1 glibc-extra-debuginfo-2.18-4.21.1 glibc-locale-2.18-4.21.1 glibc-locale-debuginfo-2.18-4.21.1 glibc-profile-2.18-4.21.1 nscd-2.18-4.21.1 nscd-debuginfo-2.18-4.21.1 - openSUSE 13.1 (i586 x86_64): glibc-utils-2.18-4.21.1 glibc-utils-debuginfo-2.18-4.21.1 glibc-utils-debugsource-2.18-4.21.1 - openSUSE 13.1 (i586 i686): glibc-obsolete-2.18-4.21.1 glibc-obsolete-debuginfo-2.18-4.21.1 - openSUSE 13.1 (x86_64): glibc-32bit-2.18-4.21.1 glibc-debuginfo-32bit-2.18-4.21.1 glibc-devel-32bit-2.18-4.21.1 glibc-devel-debuginfo-32bit-2.18-4.21.1 glibc-devel-static-32bit-2.18-4.21.1 glibc-locale-32bit-2.18-4.21.1 glibc-locale-debuginfo-32bit-2.18-4.21.1 glibc-profile-32bit-2.18-4.21.1 glibc-utils-32bit-2.18-4.21.1 glibc-utils-debuginfo-32bit-2.18-4.21.1 - openSUSE 13.1 (noarch): glibc-html-2.18-4.21.1 glibc-i18ndata-2.18-4.21.1 glibc-info-2.18-4.21.1 - openSUSE 12.3 (i586 i686 x86_64): glibc-2.17-4.13.1 glibc-debuginfo-2.17-4.13.1 glibc-debugsource-2.17-4.13.1 glibc-devel-2.17-4.13.1 glibc-devel-debuginfo-2.17-4.13.1 glibc-devel-static-2.17-4.13.1 glibc-extra-2.17-4.13.1 glibc-extra-debuginfo-2.17-4.13.1 glibc-locale-2.17-4.13.1 glibc-locale-debuginfo-2.17-4.13.1 glibc-profile-2.17-4.13.1 nscd-2.17-4.13.1 nscd-debuginfo-2.17-4.13.1 - openSUSE 12.3 (i586 x86_64): glibc-utils-2.17-4.13.1 glibc-utils-debuginfo-2.17-4.13.1 glibc-utils-debugsource-2.17-4.13.1 - openSUSE 12.3 (i586 i686): glibc-obsolete-2.17-4.13.1 glibc-obsolete-debuginfo-2.17-4.13.1 - openSUSE 12.3 (x86_64): glibc-32bit-2.17-4.13.1 glibc-debuginfo-32bit-2.17-4.13.1 glibc-devel-32bit-2.17-4.13.1 glibc-devel-debuginfo-32bit-2.17-4.13.1 glibc-devel-static-32bit-2.17-4.13.1 glibc-locale-32bit-2.17-4.13.1 glibc-locale-debuginfo-32bit-2.17-4.13.1 glibc-profile-32bit-2.17-4.13.1 glibc-utils-32bit-2.17-4.13.1 glibc-utils-debuginfo-32bit-2.17-4.13.1 - openSUSE 12.3 (noarch): glibc-html-2.17-4.13.1 glibc-i18ndata-2.17-4.13.1 glibc-info-2.17-4.13.1 References: http://support.novell.com/security/cve/CVE-2014-0475.html http://support.novell.com/security/cve/CVE-2014-5119.html http://support.novell.com/security/cve/CVE-2014-6040.html https://bugzilla.novell.com/887022 https://bugzilla.novell.com/892073 https://bugzilla.novell.com/894553

1 0

openSUSE-SU-2014:1114-1: important: procmail: fixed a heap overflow in formail
by opensuse-security＠opensuse.org 11 Sep '14

11 Sep '14

openSUSE Security Update: procmail: fixed a heap overflow in formail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1114-1 Rating: important References: #894999 Cross-References: CVE-2014-3618 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: procmail was updated to fix a heap-overflow in procmail's formail utility when processing specially-crafted email headers (bnc#894999, CVE-2014-3618) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-537 - openSUSE 12.3: zypper in -t patch openSUSE-2014-537 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): procmail-3.22-264.6.1 procmail-debuginfo-3.22-264.6.1 procmail-debugsource-3.22-264.6.1 - openSUSE 12.3 (i586 x86_64): procmail-3.22-260.6.1 procmail-debuginfo-3.22-260.6.1 procmail-debugsource-3.22-260.6.1 References: http://support.novell.com/security/cve/CVE-2014-3618.html https://bugzilla.novell.com/894999

1 0

openSUSE-SU-2014:1110-1: important: flash-player to 11.2.202.40
by opensuse-security＠opensuse.org 10 Sep '14

10 Sep '14

openSUSE Security Update: flash-player to 11.2.202.40 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1110-1 Rating: important References: #895856 Cross-References: CVE-2014-0547 CVE-2014-0548 CVE-2014-0549 CVE-2014-0550 CVE-2014-0551 CVE-2014-0552 CVE-2014-0553 CVE-2014-0554 CVE-2014-0555 CVE-2014-0556 CVE-2014-0557 CVE-2014-0559 Affected Products: openSUSE 13.1:NonFree openSUSE 12.3:NonFree ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.406 (bnc#895856): * APSB14-21, CVE-2014-0547, CVE-2014-0548, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, CVE-2014-0553, CVE-2014-0554, CVE-2014-0555, CVE-2014-0556, CVE-2014-0557, CVE-2014-0559 More information can be found on: http://helpx.adobe.com/security/products/flash-player/apsb14-21.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1:NonFree: zypper in -t patch openSUSE-2014-535 - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2014-535 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1:NonFree (i586 x86_64): flash-player-11.2.202.406-66.1 flash-player-gnome-11.2.202.406-66.1 flash-player-kde4-11.2.202.406-66.1 - openSUSE 12.3:NonFree (i586 x86_64): flash-player-11.2.202.406-2.92.1 flash-player-gnome-11.2.202.406-2.92.1 flash-player-kde4-11.2.202.406-2.92.1 References: http://support.novell.com/security/cve/CVE-2014-0547.html http://support.novell.com/security/cve/CVE-2014-0548.html http://support.novell.com/security/cve/CVE-2014-0549.html http://support.novell.com/security/cve/CVE-2014-0550.html http://support.novell.com/security/cve/CVE-2014-0551.html http://support.novell.com/security/cve/CVE-2014-0552.html http://support.novell.com/security/cve/CVE-2014-0553.html http://support.novell.com/security/cve/CVE-2014-0554.html http://support.novell.com/security/cve/CVE-2014-0555.html http://support.novell.com/security/cve/CVE-2014-0556.html http://support.novell.com/security/cve/CVE-2014-0557.html http://support.novell.com/security/cve/CVE-2014-0559.html https://bugzilla.novell.com/895856

1 0

openSUSE-RU-2014:1109-1: epiphany: This package needs a rebuild due to updated GNOME Stack
by maintenance＠opensuse.org 10 Sep '14

10 Sep '14

openSUSE Recommended Update: epiphany: This package needs a rebuild due to updated GNOME Stack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1109-1 Rating: low References: #871232 #895871 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues with epiphany: -bnc#871232: GNOME Stack Update -bnc#895871: This package needs a rebuild due to updated GNOME Stack Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-534 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): epiphany-branding-SLED-13.1-2.4.1 epiphany-branding-openSUSE-13.1-2.4.1 References: https://bugzilla.novell.com/871232 https://bugzilla.novell.com/895871

1 0