January 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2015:0130-1: important: Security update for openssl
by opensuse-security＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Security Update: Security update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0130-1 Rating: important References: #911399 #912014 #912015 #912018 #912292 #912293 #912294 #912296 Cross-References: CVE-2014-3569 CVE-2014-3570 CVE-2014-3571 CVE-2014-3572 CVE-2014-8275 CVE-2015-0204 CVE-2015-0205 CVE-2015-0206 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: openssl was updated to 1.0.1k to fix various security issues and bugs. More information can be found in the openssl advisory: http://openssl.org/news/secadv_20150108.txt Following issues were fixed: * CVE-2014-3570 (bsc#912296): Bignum squaring (BN_sqr) may have produced incorrect results on some platforms, including x86_64. * CVE-2014-3571 (bsc#912294): Fixed crash in dtls1_get_record whilst in the listen state where you get two separate reads performed - one for the header and one for the body of the handshake record. * CVE-2014-3572 (bsc#912015): Don't accept a handshake using an ephemeral ECDH ciphersuites with the server key exchange message omitted. * CVE-2014-8275 (bsc#912018): Fixed various certificate fingerprint issues. * CVE-2015-0204 (bsc#912014): Only allow ephemeral RSA keys in export ciphersuites * CVE-2015-0205 (bsc#912293): A fixwas added to prevent use of DH client certificates without sending certificate verify message. * CVE-2015-0206 (bsc#912292): A memory leak was fixed in dtls1_buffer_record. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-67 - openSUSE 13.1: zypper in -t patch openSUSE-2015-67 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libopenssl-devel-1.0.1k-2.16.2 libopenssl1_0_0-1.0.1k-2.16.2 libopenssl1_0_0-debuginfo-1.0.1k-2.16.2 libopenssl1_0_0-hmac-1.0.1k-2.16.2 openssl-1.0.1k-2.16.2 openssl-debuginfo-1.0.1k-2.16.2 openssl-debugsource-1.0.1k-2.16.2 - openSUSE 13.2 (x86_64): libopenssl-devel-32bit-1.0.1k-2.16.2 libopenssl1_0_0-32bit-1.0.1k-2.16.2 libopenssl1_0_0-debuginfo-32bit-1.0.1k-2.16.2 libopenssl1_0_0-hmac-32bit-1.0.1k-2.16.2 - openSUSE 13.2 (noarch): openssl-doc-1.0.1k-2.16.2 - openSUSE 13.1 (i586 x86_64): libopenssl-devel-1.0.1k-11.64.2 libopenssl1_0_0-1.0.1k-11.64.2 libopenssl1_0_0-debuginfo-1.0.1k-11.64.2 openssl-1.0.1k-11.64.2 openssl-debuginfo-1.0.1k-11.64.2 openssl-debugsource-1.0.1k-11.64.2 - openSUSE 13.1 (x86_64): libopenssl-devel-32bit-1.0.1k-11.64.2 libopenssl1_0_0-32bit-1.0.1k-11.64.2 libopenssl1_0_0-debuginfo-32bit-1.0.1k-11.64.2 - openSUSE 13.1 (noarch): openssl-doc-1.0.1k-11.64.2 References: http://support.novell.com/security/cve/CVE-2014-3569.html http://support.novell.com/security/cve/CVE-2014-3570.html http://support.novell.com/security/cve/CVE-2014-3571.html http://support.novell.com/security/cve/CVE-2014-3572.html http://support.novell.com/security/cve/CVE-2014-8275.html http://support.novell.com/security/cve/CVE-2015-0204.html http://support.novell.com/security/cve/CVE-2015-0205.html http://support.novell.com/security/cve/CVE-2015-0206.html https://bugzilla.suse.com/show_bug.cgi?id=911399 https://bugzilla.suse.com/show_bug.cgi?id=912014 https://bugzilla.suse.com/show_bug.cgi?id=912015 https://bugzilla.suse.com/show_bug.cgi?id=912018 https://bugzilla.suse.com/show_bug.cgi?id=912292 https://bugzilla.suse.com/show_bug.cgi?id=912293 https://bugzilla.suse.com/show_bug.cgi?id=912294 https://bugzilla.suse.com/show_bug.cgi?id=912296

1 0

openSUSE-RU-2015:0128-1: moderate: open-vm-tools
by maintenance＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Recommended Update: open-vm-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0128-1 Rating: moderate References: #905420 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for open-vm-tools fixes the following issues: - boo#905420: Enable building of kmps and split it into own spec file open-vm-tools-KMP. - Fix building of vmhgfs with Kernel 3.17.7+ and Kernel 3.18.0+. - Fix bashisms in vmware-user-autostart-wrapper script - Fix build with Linux 3.17.0. - Remove unused DEPRECATED-macro - Conditionally define g_info-macro - Add kuid_t- and kgid_t-compatibility-layer - Use new link helpers - Update hgfs file operations for newer kernels - Fix vmxnet-module on 3.16 kernels - Fix vmhgfs-module on 3.16 kernels - Fix segfault in vmhgfs - Fix bashisms in preun script. - Do not generate timestamps in the doxygen docs. - Add -Wno-cpp to CFLAGS. - Release matching the vSphere 5.5p02 release - "which" as separate package does not exist on older opensuse versions so removed from Requires for older distributions - used autoreconf as source package does not provide configure script anymore - removed vmsync module from OS12.3 build target as it does not compile Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-66 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libvmtools-devel-9.4.6-4.4.1 libvmtools0-9.4.6-4.4.1 libvmtools0-debuginfo-9.4.6-4.4.1 open-vm-tools-9.4.6-4.4.1 open-vm-tools-debuginfo-9.4.6-4.4.1 open-vm-tools-debugsource-9.4.6-4.4.1 open-vm-tools-desktop-9.4.6-4.4.1 open-vm-tools-desktop-debuginfo-9.4.6-4.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=905420

1 0

openSUSE-RU-2015:0126-1: Recommended update for lvm2
by maintenance＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Recommended Update: Recommended update for lvm2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0126-1 Rating: low References: #901859 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for lvm2 fixes the following issue: - Change default locking type to 1 (bnc#901859) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-65 - openSUSE 13.1: zypper in -t patch openSUSE-2015-65 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): lvm2-2.02.98-43.5.1 lvm2-clvm-2.02.98-43.5.1 lvm2-clvm-debuginfo-2.02.98-43.5.1 lvm2-cmirrord-2.02.98-43.5.1 lvm2-cmirrord-debuginfo-2.02.98-43.5.1 lvm2-debuginfo-2.02.98-43.5.1 lvm2-debugsource-2.02.98-43.5.1 lvm2-devel-2.02.98-43.5.1 - openSUSE 13.1 (i586 x86_64): lvm2-2.02.98-0.28.22.2 lvm2-clvm-2.02.98-28.22.2 lvm2-clvm-debuginfo-2.02.98-28.22.2 lvm2-cmirrord-2.02.98-28.22.2 lvm2-cmirrord-debuginfo-2.02.98-28.22.2 lvm2-debuginfo-2.02.98-0.28.22.2 lvm2-debugsource-2.02.98-0.28.22.2 References: https://bugzilla.suse.com/show_bug.cgi?id=901859

1 0

openSUSE-RU-2015:0125-1: moderate: Recommended update for docbook-xsl-stylesheets
by maintenance＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Recommended Update: Recommended update for docbook-xsl-stylesheets ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0125-1 Rating: moderate References: #912669 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for docbook-xsl-stylesheets provides the following fix: - Fixed missing image directory (bnc#912669) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-63 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): docbook-xsl-stylesheets-1.78.1+svn9743-3.4.2 docbook-xsl-stylesheets-scripts-1.78.1+svn9743-3.4.2 References: https://bugzilla.suse.com/show_bug.cgi?id=912669

1 0

openSUSE-RU-2015:0124-1: moderate: sysconfig
by maintenance＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Recommended Update: sysconfig ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0124-1 Rating: moderate References: #895447 #900982 #912891 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This recommended update for sysconfig provides version 0.83.8 with various fixes and improvements: - netconfig: use domain name from hostname (boo#912891) + When there is no dns domain or search list provided (by dhcp), but a hostname as FQDN, use it's domain for /etc/resolv.conf search list. - netconfig: merge NetworkManager settings on -m (boo#900982) - rpm: kill all NetworkManager child processes on migration + Before we stop (the always running) NetworkManager.service, ensure to kill all (child) processes when migrating from the NETWORKMANAGER=no variable (boo#895447). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-55 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): sysconfig-0.83.8-5.1 sysconfig-debuginfo-0.83.8-5.1 sysconfig-debugsource-0.83.8-5.1 sysconfig-netconfig-0.83.8-5.1 References: https://bugzilla.suse.com/show_bug.cgi?id=895447 https://bugzilla.suse.com/show_bug.cgi?id=900982 https://bugzilla.suse.com/show_bug.cgi?id=912891

1 0

openSUSE-SU-2015:0123-1: moderate: Security update for elfutils
by opensuse-security＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Security Update: Security update for elfutils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0123-1 Rating: moderate References: #911662 Cross-References: CVE-2014-9447 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: elfutils was updated to fix a directory traversal vulnerability (bnc#911662 CVE-2014-9447) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-59 - openSUSE 13.1: zypper in -t patch openSUSE-2015-59 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): elfutils-0.158-4.5.1 elfutils-debuginfo-0.158-4.5.1 elfutils-debugsource-0.158-4.5.1 libasm-devel-0.158-4.5.1 libasm1-0.158-4.5.1 libasm1-debuginfo-0.158-4.5.1 libdw-devel-0.158-4.5.1 libdw1-0.158-4.5.1 libdw1-debuginfo-0.158-4.5.1 libebl-devel-0.158-4.5.1 libebl1-0.158-4.5.1 libebl1-debuginfo-0.158-4.5.1 libelf-devel-0.158-4.5.1 libelf1-0.158-4.5.1 libelf1-debuginfo-0.158-4.5.1 - openSUSE 13.2 (x86_64): libasm1-32bit-0.158-4.5.1 libasm1-debuginfo-32bit-0.158-4.5.1 libdw1-32bit-0.158-4.5.1 libdw1-debuginfo-32bit-0.158-4.5.1 libebl1-32bit-0.158-4.5.1 libebl1-debuginfo-32bit-0.158-4.5.1 libelf-devel-32bit-0.158-4.5.1 libelf1-32bit-0.158-4.5.1 libelf1-debuginfo-32bit-0.158-4.5.1 - openSUSE 13.1 (i586 x86_64): elfutils-0.155-6.8.1 elfutils-debuginfo-0.155-6.8.1 elfutils-debugsource-0.155-6.8.1 libasm-devel-0.155-6.8.1 libasm1-0.155-6.8.1 libasm1-debuginfo-0.155-6.8.1 libdw-devel-0.155-6.8.1 libdw1-0.155-6.8.1 libdw1-debuginfo-0.155-6.8.1 libebl-devel-0.155-6.8.1 libebl1-0.155-6.8.1 libebl1-debuginfo-0.155-6.8.1 libelf-devel-0.155-6.8.1 libelf1-0.155-6.8.1 libelf1-debuginfo-0.155-6.8.1 - openSUSE 13.1 (x86_64): libasm1-32bit-0.155-6.8.1 libasm1-debuginfo-32bit-0.155-6.8.1 libdw1-32bit-0.155-6.8.1 libdw1-debuginfo-32bit-0.155-6.8.1 libebl1-32bit-0.155-6.8.1 libebl1-debuginfo-32bit-0.155-6.8.1 libelf-devel-32bit-0.155-6.8.1 libelf1-32bit-0.155-6.8.1 libelf1-debuginfo-32bit-0.155-6.8.1 References: http://support.novell.com/security/cve/CVE-2014-9447.html https://bugzilla.suse.com/show_bug.cgi?id=911662

1 0

openSUSE-RU-2015:0122-1: moderate: recommended udpate for llvm
by maintenance＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Recommended Update: recommended udpate for llvm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0122-1 Rating: moderate References: Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended udpate for llvm fixes the following issue: - Conditionalize libcxx{abi} build on build_libcxx variable - Turn libc++.so into an ldscript so it links to libc++abi automatically. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-61 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libLLVM-3.5.0-7.1 libLLVM-debuginfo-3.5.0-7.1 libclang-3.5.0-7.1 libclang-debuginfo-3.5.0-7.1 llvm-3.5.0-7.1 llvm-clang-3.5.0-7.1 llvm-clang-debuginfo-3.5.0-7.1 llvm-clang-devel-3.5.0-7.1 llvm-debuginfo-3.5.0-7.1 llvm-debugsource-3.5.0-7.1 llvm-devel-3.5.0-7.1 llvm-devel-debuginfo-3.5.0-7.1 llvm-vim-plugins-3.5.0-7.1 python-clang-3.5.0-7.1 - openSUSE 13.2 (x86_64): libLLVM-32bit-3.5.0-7.1 libLLVM-debuginfo-32bit-3.5.0-7.1 libclang-32bit-3.5.0-7.1 libclang-debuginfo-32bit-3.5.0-7.1 lldb-3.5.0-7.1 lldb-debuginfo-3.5.0-7.1 lldb-devel-3.5.0-7.1 References:

1 0

openSUSE-RU-2015:0121-1: moderate: Recommended update for docker
by maintenance＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Recommended Update: Recommended update for docker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0121-1 Rating: moderate References: #913211 #913213 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for docker provides the following fixes: - Update from 1.4.0 to 1.4.1 + Runtime: * Fix issue with volumes-from and bind mounts not being honored after create (bnc#913213) + Added e2fsprogs as runtime dependency, this is required when the devicemapper driver is used. (bnc#913211). + Fixed owner and group for docker.socket Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-57 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (x86_64): docker-1.4.1-17.1 docker-debuginfo-1.4.1-17.1 docker-debugsource-1.4.1-17.1 - openSUSE 13.2 (noarch): docker-bash-completion-1.4.1-17.1 docker-zsh-completion-1.4.1-17.1 References: https://bugzilla.suse.com/show_bug.cgi?id=913211 https://bugzilla.suse.com/show_bug.cgi?id=913213

1 0

openSUSE-RU-2015:0120-1: python-wxWidgets
by maintenance＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Recommended Update: python-wxWidgets ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0120-1 Rating: low References: #907703 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for python-wxWidgets fixes the following issues: - bnc#907703: fixes plot library to make it compatible with a new version of NumPy. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-64 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): python-wxWidgets-2.8.12.1-10.4.1 python-wxWidgets-debuginfo-2.8.12.1-10.4.1 python-wxWidgets-debugsource-2.8.12.1-10.4.1 python-wxWidgets-devel-2.8.12.1-10.4.1 python-wxWidgets-lang-2.8.12.1-10.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=907703

1 0

openSUSE-RU-2015:0119-1: moderate: Recommended update for ca-certificates-mozilla
by maintenance＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Recommended Update: Recommended update for ca-certificates-mozilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0119-1 Rating: moderate References: #888534 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The system root SSL certificates were updated to match Mozilla NSS 2.2. Some removed/disabled 1024 bit certificates were temporarily reenabled/readded, as openssl and gnutls have a different handling of intermediates than mozilla nss and would otherwise not recognize SSL certificates from sites like Amazon. Updated to 2.2 (bnc#888534) - The following CAs were added: + COMODO_RSA_Certification_Authority codeSigning emailProtection serverAuth + GlobalSign_ECC_Root_CA_-_R4 codeSigning emailProtection serverAuth + GlobalSign_ECC_Root_CA_-_R5 codeSigning emailProtection serverAuth + USERTrust_ECC_Certification_Authority codeSigning emailProtection serverAuth + USERTrust_RSA_Certification_Authority codeSigning emailProtection serverAuth + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal - The following CAs were changed: + Equifax_Secure_eBusiness_CA_1 remote code signing and https trust, leave email trust + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2 only trust emailProtection - Updated to 2.1 (bnc#888534) - The following 1024-bit CA certificates were removed - Entrust.net Secure Server Certification Authority - ValiCert Class 1 Policy Validation Authority - ValiCert Class 2 Policy Validation Authority - ValiCert Class 3 Policy Validation Authority - TDC Internet Root CA - The following CA certificates were added: - Certification Authority of WoSign - CA 沃通根证书 - DigiCert Assured ID Root G2 - DigiCert Assured ID Root G3 - DigiCert Global Root G2 - DigiCert Global Root G3 - DigiCert Trusted Root G4 - QuoVadis Root CA 1 G3 - QuoVadis Root CA 2 G3 - QuoVadis Root CA 3 G3 - The Trust Bits were changed for the following CA certificates - Class 3 Public Primary Certification Authority - Class 3 Public Primary Certification Authority - Class 2 Public Primary Certification Authority - G2 - VeriSign Class 2 Public Primary Certification Authority - G3 - AC Raíz Certicámara S.A. - NetLock Uzleti (Class B) Tanusitvanykiado - NetLock Expressz (Class C) Tanusitvanykiado Temporary reenable some root ca trusts, as openssl/gnutls have trouble using intermediates as root CA. - GTE CyberTrust Global Root - Thawte Server CA - Thawte Premium Server CA - ValiCert Class 1 VA - ValiCert Class 2 VA - RSA Root Certificate 1 - Entrust.net Secure Server CA - America Online Root Certification Authority 1 - America Online Root Certification Authority 2 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-56 - openSUSE 13.1: zypper in -t patch openSUSE-2015-56 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): ca-certificates-mozilla-2.2-3.4.1 - openSUSE 13.1 (noarch): ca-certificates-mozilla-2.2-3.17.1 References: https://bugzilla.suse.com/show_bug.cgi?id=888534

1 0