January 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:0032-1: moderate: recommended udpate for apache2
by maintenance＠opensuse.org 13 Jan '15

13 Jan '15

openSUSE Recommended Update: recommended udpate for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0032-1 Rating: moderate References: #842377 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended udpate for apache2 fixes the following issue: - bnc#842377c11: fix IfModule directive around SSLSessionCache Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-8 - openSUSE 13.1: zypper in -t patch openSUSE-2015-8 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-2.4.10-8.1 apache2-debuginfo-2.4.10-8.1 apache2-debugsource-2.4.10-8.1 apache2-devel-2.4.10-8.1 apache2-event-2.4.10-8.1 apache2-event-debuginfo-2.4.10-8.1 apache2-example-pages-2.4.10-8.1 apache2-prefork-2.4.10-8.1 apache2-prefork-debuginfo-2.4.10-8.1 apache2-utils-2.4.10-8.1 apache2-utils-debuginfo-2.4.10-8.1 apache2-worker-2.4.10-8.1 apache2-worker-debuginfo-2.4.10-8.1 - openSUSE 13.2 (noarch): apache2-doc-2.4.10-8.1 - openSUSE 13.1 (i586 x86_64): apache2-2.4.6-6.41.1 apache2-debuginfo-2.4.6-6.41.1 apache2-debugsource-2.4.6-6.41.1 apache2-devel-2.4.6-6.41.1 apache2-event-2.4.6-6.41.1 apache2-event-debuginfo-2.4.6-6.41.1 apache2-example-pages-2.4.6-6.41.1 apache2-prefork-2.4.6-6.41.1 apache2-prefork-debuginfo-2.4.6-6.41.1 apache2-utils-2.4.6-6.41.1 apache2-utils-debuginfo-2.4.6-6.41.1 apache2-worker-2.4.6-6.41.1 apache2-worker-debuginfo-2.4.6-6.41.1 - openSUSE 13.1 (noarch): apache2-doc-2.4.6-6.41.1 References: https://bugzilla.suse.com/show_bug.cgi?id=842377

1 0

openSUSE-SU-2015:0017-1: moderate: Security update for libssh
by opensuse-security＠opensuse.org 08 Jan '15

08 Jan '15

openSUSE Security Update: Security update for libssh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0017-1 Rating: moderate References: #910790 Cross-References: CVE-2014-8132 Affected Products: openSUSE 13.2 openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixed the following security issue: - Fix CVE-2014-8132: Double free on dangling pointers in initial key exchange packet; (bsc#910790). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-7 - openSUSE 13.1: zypper in -t patch openSUSE-2015-7 - openSUSE 12.3: zypper in -t patch openSUSE-2015-7 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libssh-debugsource-0.6.3-2.4.1 libssh-devel-0.6.3-2.4.1 libssh-devel-doc-0.6.3-2.4.1 libssh4-0.6.3-2.4.1 libssh4-debuginfo-0.6.3-2.4.1 - openSUSE 13.2 (x86_64): libssh4-32bit-0.6.3-2.4.1 libssh4-debuginfo-32bit-0.6.3-2.4.1 - openSUSE 13.1 (i586 x86_64): libssh-debugsource-0.5.5-2.12.1 libssh-devel-0.5.5-2.12.1 libssh-devel-doc-0.5.5-2.12.1 libssh4-0.5.5-2.12.1 libssh4-debuginfo-0.5.5-2.12.1 - openSUSE 13.1 (x86_64): libssh4-32bit-0.5.5-2.12.1 libssh4-debuginfo-32bit-0.5.5-2.12.1 - openSUSE 12.3 (i586 x86_64): libssh-debugsource-0.5.3-2.12.1 libssh-devel-0.5.3-2.12.1 libssh-devel-doc-0.5.3-2.12.1 libssh4-0.5.3-2.12.1 libssh4-debuginfo-0.5.3-2.12.1 References: http://support.novell.com/security/cve/CVE-2014-8132.html https://bugzilla.suse.com/show_bug.cgi?id=910790

1 0

openSUSE-SU-2015:0014-1: moderate: update for php5
by opensuse-security＠opensuse.org 07 Jan '15

07 Jan '15

openSUSE Security Update: update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0014-1 Rating: moderate References: #902357 #902360 #902368 Cross-References: CVE-2014-3668 CVE-2014-3669 CVE-2014-3670 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: - security update: * CVE-2014-3670 [bnc#902357] * CVE-2014-3669 [bnc#902360] * CVE-2014-3668 [bnc#902368] - added patches: * php-CVE-2014-3670.patch * php-CVE-2014-3669.patch * php-CVE-2014-3668.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): apache2-mod_php5-5.3.17-387.2 apache2-mod_php5-debuginfo-5.3.17-387.2 php5-5.3.17-387.2 php5-bcmath-5.3.17-387.2 php5-bcmath-debuginfo-5.3.17-387.2 php5-bz2-5.3.17-387.2 php5-bz2-debuginfo-5.3.17-387.2 php5-calendar-5.3.17-387.2 php5-calendar-debuginfo-5.3.17-387.2 php5-ctype-5.3.17-387.2 php5-ctype-debuginfo-5.3.17-387.2 php5-curl-5.3.17-387.2 php5-curl-debuginfo-5.3.17-387.2 php5-dba-5.3.17-387.2 php5-dba-debuginfo-5.3.17-387.2 php5-debuginfo-5.3.17-387.2 php5-debugsource-5.3.17-387.2 php5-devel-5.3.17-387.2 php5-dom-5.3.17-387.2 php5-dom-debuginfo-5.3.17-387.2 php5-enchant-5.3.17-387.2 php5-enchant-debuginfo-5.3.17-387.2 php5-exif-5.3.17-387.2 php5-exif-debuginfo-5.3.17-387.2 php5-fastcgi-5.3.17-387.2 php5-fastcgi-debuginfo-5.3.17-387.2 php5-fileinfo-5.3.17-387.2 php5-fileinfo-debuginfo-5.3.17-387.2 php5-fpm-5.3.17-387.2 php5-fpm-debuginfo-5.3.17-387.2 php5-ftp-5.3.17-387.2 php5-ftp-debuginfo-5.3.17-387.2 php5-gd-5.3.17-387.2 php5-gd-debuginfo-5.3.17-387.2 php5-gettext-5.3.17-387.2 php5-gettext-debuginfo-5.3.17-387.2 php5-gmp-5.3.17-387.2 php5-gmp-debuginfo-5.3.17-387.2 php5-iconv-5.3.17-387.2 php5-iconv-debuginfo-5.3.17-387.2 php5-imap-5.3.17-387.2 php5-imap-debuginfo-5.3.17-387.2 php5-intl-5.3.17-387.2 php5-intl-debuginfo-5.3.17-387.2 php5-json-5.3.17-387.2 php5-json-debuginfo-5.3.17-387.2 php5-ldap-5.3.17-387.2 php5-ldap-debuginfo-5.3.17-387.2 php5-mbstring-5.3.17-387.2 php5-mbstring-debuginfo-5.3.17-387.2 php5-mcrypt-5.3.17-387.2 php5-mcrypt-debuginfo-5.3.17-387.2 php5-mysql-5.3.17-387.2 php5-mysql-debuginfo-5.3.17-387.2 php5-odbc-5.3.17-387.2 php5-odbc-debuginfo-5.3.17-387.2 php5-openssl-5.3.17-387.2 php5-openssl-debuginfo-5.3.17-387.2 php5-pcntl-5.3.17-387.2 php5-pcntl-debuginfo-5.3.17-387.2 php5-pdo-5.3.17-387.2 php5-pdo-debuginfo-5.3.17-387.2 php5-pgsql-5.3.17-387.2 php5-pgsql-debuginfo-5.3.17-387.2 php5-phar-5.3.17-387.2 php5-phar-debuginfo-5.3.17-387.2 php5-posix-5.3.17-387.2 php5-posix-debuginfo-5.3.17-387.2 php5-pspell-5.3.17-387.2 php5-pspell-debuginfo-5.3.17-387.2 php5-readline-5.3.17-387.2 php5-readline-debuginfo-5.3.17-387.2 php5-shmop-5.3.17-387.2 php5-shmop-debuginfo-5.3.17-387.2 php5-snmp-5.3.17-387.2 php5-snmp-debuginfo-5.3.17-387.2 php5-soap-5.3.17-387.2 php5-soap-debuginfo-5.3.17-387.2 php5-sockets-5.3.17-387.2 php5-sockets-debuginfo-5.3.17-387.2 php5-sqlite-5.3.17-387.2 php5-sqlite-debuginfo-5.3.17-387.2 php5-suhosin-5.3.17-387.2 php5-suhosin-debuginfo-5.3.17-387.2 php5-sysvmsg-5.3.17-387.2 php5-sysvmsg-debuginfo-5.3.17-387.2 php5-sysvsem-5.3.17-387.2 php5-sysvsem-debuginfo-5.3.17-387.2 php5-sysvshm-5.3.17-387.2 php5-sysvshm-debuginfo-5.3.17-387.2 php5-tidy-5.3.17-387.2 php5-tidy-debuginfo-5.3.17-387.2 php5-tokenizer-5.3.17-387.2 php5-tokenizer-debuginfo-5.3.17-387.2 php5-wddx-5.3.17-387.2 php5-wddx-debuginfo-5.3.17-387.2 php5-xmlreader-5.3.17-387.2 php5-xmlreader-debuginfo-5.3.17-387.2 php5-xmlrpc-5.3.17-387.2 php5-xmlrpc-debuginfo-5.3.17-387.2 php5-xmlwriter-5.3.17-387.2 php5-xmlwriter-debuginfo-5.3.17-387.2 php5-xsl-5.3.17-387.2 php5-xsl-debuginfo-5.3.17-387.2 php5-zip-5.3.17-387.2 php5-zip-debuginfo-5.3.17-387.2 php5-zlib-5.3.17-387.2 php5-zlib-debuginfo-5.3.17-387.2 - openSUSE Evergreen 11.4 (noarch): php5-pear-5.3.17-387.2 References: http://support.novell.com/security/cve/CVE-2014-3668.html http://support.novell.com/security/cve/CVE-2014-3669.html http://support.novell.com/security/cve/CVE-2014-3670.html https://bugzilla.suse.com/show_bug.cgi?id=902357 https://bugzilla.suse.com/show_bug.cgi?id=902360 https://bugzilla.suse.com/show_bug.cgi?id=902368

1 0

openSUSE-SU-2015:0008-1: moderate: update for libvirt
by opensuse-security＠opensuse.org 02 Jan '15

02 Jan '15

openSUSE Security Update: update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0008-1 Rating: moderate References: #904432 #909274 #910860 #910862 Cross-References: CVE-2014-8131 CVE-2014-8135 CVE-2014-8136 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: - CVE-2014-8135: libvirt: local denial of service in storage driver 87b9437f-CVE-2014-8135.patch bsc#910860 - CVE-2014-8136: libvirt: local denial of service in qemu driver 2bdcd29c-CVE-2014-8136.patch bsc#910862 - CVE-2014-8131: Fix possible deadlock and segfault in qemuConnectGetAllDomainStats() 57023c0a-CVE-2014-8131.patch, cb104ef7-CVE-2014-8131.patch bsc#909274 - Get /proc/sys/net/ipv[46] read-write for wicked to work in containers. bsc#904432. ba9b7252-sys-net-rw.patch - Fix potential crasher in virt-aa-helper 2222123-virt-aa-helper-crash.patch - ip link add now needs the 'name' parameter. 433b427-iplink-name.patch - Fixes for virt-sandbox-service to work: - Allow adding virt-sandbox service config to apparmor rules. c264eea-virt-aa-helper-sandbox.patch - fix symlink resolving for containers to start. 72fecf1-lxc-resolve-symlinks.patch - fix unmounting file system if it contains the source to mount. e50457d-lxc-unmount-check.patch - Remove security_driver = "none" in qemu config. This completely disabled all security drivers instead of probing them. - Changed default value of QEMU's security_default_confined to 0 to keep QEMU domains unconfined by default. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-3 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libvirt-1.2.9-8.1 libvirt-client-1.2.9-8.1 libvirt-client-debuginfo-1.2.9-8.1 libvirt-daemon-1.2.9-8.1 libvirt-daemon-config-network-1.2.9-8.1 libvirt-daemon-config-nwfilter-1.2.9-8.1 libvirt-daemon-debuginfo-1.2.9-8.1 libvirt-daemon-driver-interface-1.2.9-8.1 libvirt-daemon-driver-interface-debuginfo-1.2.9-8.1 libvirt-daemon-driver-lxc-1.2.9-8.1 libvirt-daemon-driver-lxc-debuginfo-1.2.9-8.1 libvirt-daemon-driver-network-1.2.9-8.1 libvirt-daemon-driver-network-debuginfo-1.2.9-8.1 libvirt-daemon-driver-nodedev-1.2.9-8.1 libvirt-daemon-driver-nodedev-debuginfo-1.2.9-8.1 libvirt-daemon-driver-nwfilter-1.2.9-8.1 libvirt-daemon-driver-nwfilter-debuginfo-1.2.9-8.1 libvirt-daemon-driver-qemu-1.2.9-8.1 libvirt-daemon-driver-qemu-debuginfo-1.2.9-8.1 libvirt-daemon-driver-secret-1.2.9-8.1 libvirt-daemon-driver-secret-debuginfo-1.2.9-8.1 libvirt-daemon-driver-storage-1.2.9-8.1 libvirt-daemon-driver-storage-debuginfo-1.2.9-8.1 libvirt-daemon-driver-uml-1.2.9-8.1 libvirt-daemon-driver-uml-debuginfo-1.2.9-8.1 libvirt-daemon-driver-vbox-1.2.9-8.1 libvirt-daemon-driver-vbox-debuginfo-1.2.9-8.1 libvirt-daemon-lxc-1.2.9-8.1 libvirt-daemon-qemu-1.2.9-8.1 libvirt-daemon-uml-1.2.9-8.1 libvirt-daemon-vbox-1.2.9-8.1 libvirt-debugsource-1.2.9-8.1 libvirt-devel-1.2.9-8.1 libvirt-doc-1.2.9-8.1 libvirt-lock-sanlock-1.2.9-8.1 libvirt-lock-sanlock-debuginfo-1.2.9-8.1 libvirt-login-shell-1.2.9-8.1 libvirt-login-shell-debuginfo-1.2.9-8.1 - openSUSE 13.2 (x86_64): libvirt-client-32bit-1.2.9-8.1 libvirt-client-debuginfo-32bit-1.2.9-8.1 libvirt-daemon-driver-libxl-1.2.9-8.1 libvirt-daemon-driver-libxl-debuginfo-1.2.9-8.1 libvirt-daemon-driver-xen-1.2.9-8.1 libvirt-daemon-driver-xen-debuginfo-1.2.9-8.1 libvirt-daemon-xen-1.2.9-8.1 libvirt-devel-32bit-1.2.9-8.1 References: http://support.novell.com/security/cve/CVE-2014-8131.html http://support.novell.com/security/cve/CVE-2014-8135.html http://support.novell.com/security/cve/CVE-2014-8136.html https://bugzilla.suse.com/show_bug.cgi?id=904432 https://bugzilla.suse.com/show_bug.cgi?id=909274 https://bugzilla.suse.com/show_bug.cgi?id=910860 https://bugzilla.suse.com/show_bug.cgi?id=910862

1 0

openSUSE-SU-2015:0007-1: moderate: Security update for ruby2.1
by opensuse-security＠opensuse.org 02 Jan '15

02 Jan '15

openSUSE Security Update: Security update for ruby2.1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0007-1 Rating: moderate References: #902851 #905326 Cross-References: CVE-2014-8080 CVE-2014-8090 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The following issues were fixed in this update: - CVE-2014-8090: Denial Of Service XML Expansion (bnc#905326) - CVE-2014-8080: Denial Of Service XML Expansion (bnc#902851) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-6 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libruby2_1-2_1-2.1.3-4.1 libruby2_1-2_1-debuginfo-2.1.3-4.1 ruby2.1-2.1.3-4.1 ruby2.1-debuginfo-2.1.3-4.1 ruby2.1-debugsource-2.1.3-4.1 ruby2.1-devel-2.1.3-4.1 ruby2.1-devel-extra-2.1.3-4.1 ruby2.1-doc-2.1.3-4.1 ruby2.1-stdlib-2.1.3-4.1 ruby2.1-stdlib-debuginfo-2.1.3-4.1 - openSUSE 13.2 (noarch): ruby2.1-doc-ri-2.1.3-4.1 References: http://support.novell.com/security/cve/CVE-2014-8080.html http://support.novell.com/security/cve/CVE-2014-8090.html https://bugzilla.suse.com/show_bug.cgi?id=902851 https://bugzilla.suse.com/show_bug.cgi?id=905326

1 0

openSUSE-SU-2015:0006-1: moderate: update for libvirt
by opensuse-security＠opensuse.org 02 Jan '15

02 Jan '15

openSUSE Security Update: update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0006-1 Rating: moderate References: #910862 Cross-References: CVE-2014-8136 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - CVE-2014-8136: libvirt: local denial of service in qemu driver 2bdcd29c-CVE-2014-8136.patch bsc#910862 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-2 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libvirt-1.1.2-2.44.1 libvirt-client-1.1.2-2.44.1 libvirt-client-debuginfo-1.1.2-2.44.1 libvirt-daemon-1.1.2-2.44.1 libvirt-daemon-config-network-1.1.2-2.44.1 libvirt-daemon-config-nwfilter-1.1.2-2.44.1 libvirt-daemon-debuginfo-1.1.2-2.44.1 libvirt-daemon-driver-interface-1.1.2-2.44.1 libvirt-daemon-driver-interface-debuginfo-1.1.2-2.44.1 libvirt-daemon-driver-lxc-1.1.2-2.44.1 libvirt-daemon-driver-lxc-debuginfo-1.1.2-2.44.1 libvirt-daemon-driver-network-1.1.2-2.44.1 libvirt-daemon-driver-network-debuginfo-1.1.2-2.44.1 libvirt-daemon-driver-nodedev-1.1.2-2.44.1 libvirt-daemon-driver-nodedev-debuginfo-1.1.2-2.44.1 libvirt-daemon-driver-nwfilter-1.1.2-2.44.1 libvirt-daemon-driver-nwfilter-debuginfo-1.1.2-2.44.1 libvirt-daemon-driver-qemu-1.1.2-2.44.1 libvirt-daemon-driver-qemu-debuginfo-1.1.2-2.44.1 libvirt-daemon-driver-secret-1.1.2-2.44.1 libvirt-daemon-driver-secret-debuginfo-1.1.2-2.44.1 libvirt-daemon-driver-storage-1.1.2-2.44.1 libvirt-daemon-driver-storage-debuginfo-1.1.2-2.44.1 libvirt-daemon-driver-uml-1.1.2-2.44.1 libvirt-daemon-driver-uml-debuginfo-1.1.2-2.44.1 libvirt-daemon-driver-vbox-1.1.2-2.44.1 libvirt-daemon-driver-vbox-debuginfo-1.1.2-2.44.1 libvirt-daemon-lxc-1.1.2-2.44.1 libvirt-daemon-qemu-1.1.2-2.44.1 libvirt-daemon-uml-1.1.2-2.44.1 libvirt-daemon-vbox-1.1.2-2.44.1 libvirt-debugsource-1.1.2-2.44.1 libvirt-devel-1.1.2-2.44.1 libvirt-doc-1.1.2-2.44.1 libvirt-lock-sanlock-1.1.2-2.44.1 libvirt-lock-sanlock-debuginfo-1.1.2-2.44.1 libvirt-login-shell-1.1.2-2.44.1 libvirt-login-shell-debuginfo-1.1.2-2.44.1 libvirt-python-1.1.2-2.44.1 libvirt-python-debuginfo-1.1.2-2.44.1 - openSUSE 13.1 (x86_64): libvirt-client-32bit-1.1.2-2.44.1 libvirt-client-debuginfo-32bit-1.1.2-2.44.1 libvirt-daemon-driver-libxl-1.1.2-2.44.1 libvirt-daemon-driver-libxl-debuginfo-1.1.2-2.44.1 libvirt-daemon-driver-xen-1.1.2-2.44.1 libvirt-daemon-driver-xen-debuginfo-1.1.2-2.44.1 libvirt-daemon-xen-1.1.2-2.44.1 libvirt-devel-32bit-1.1.2-2.44.1 References: http://support.novell.com/security/cve/CVE-2014-8136.html https://bugzilla.suse.com/show_bug.cgi?id=910862

1 0

openSUSE-RU-2015:0005-1: moderate: Recommended update for release-notes-openSUSE
by maintenance＠opensuse.org 02 Jan '15

02 Jan '15

openSUSE Recommended Update: Recommended update for release-notes-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0005-1 Rating: moderate References: #906936 #907273 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The openSUSE release notes were updated: - Update translations; bnc#907273. - .spec: Add missing fonts; bnc#906936. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-5 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): release-notes-openSUSE-13.2.20141216-8.1 References: https://bugzilla.suse.com/show_bug.cgi?id=906936 https://bugzilla.suse.com/show_bug.cgi?id=907273

1 0

openSUSE-RU-2015:0004-1: moderate: Recommended update for wicked
by maintenance＠opensuse.org 02 Jan '15

02 Jan '15

openSUSE Recommended Update: Recommended update for wicked ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0004-1 Rating: moderate References: #895600 #900951 #901337 #901402 #904061 #904380 #904432 #904776 #904903 #905421 #905750 #906217 #907683 #908554 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 14 recommended fixes can now be installed. Description: The network management framework wicked was updated to version 0.6.14. Following issues were fixed: - client: fixed segfault in status (bsc#908554) - bonding: add new/missed bonding options (bsc#905750) - systemd: service ordering dependencies (bsc#895600,bsc#901337) - sysctl: do not fail on read-only proc e.g. in LXC (bsc#904432) - netlink: recover from netlink event socket errors and allow to configure the event socket buffer sizes (bsc#905421) - fixed some memory and a file descriptor leak - bonding: add encap2+3 and 3+4 xmit-hash-policies (bsc#905750) - client: apply suse ifcfg alias label (bsc#907683) - netlink: retry on DUMP_INTR and AGAIN (bsc#904776) - gcrypt: do not fail when wicked has been build using a newer but compatible library than the currently used (bsc#906217) - compat: use info level on unspecified ip (bsc#904903) - compat: fix tap group node generation (bsc#904380) - sit,ipip,gre: generate tunnel config on change (bsc#901402) - fsm: always refresh worker on device-ready event and match only ready devices against config workers (bsc#904061) - fsm: perform tentative check on all started interfaces with nanny (bsc#900951) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-4 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libwicked-0-6-0.6.14-4.1 libwicked-0-6-debuginfo-0.6.14-4.1 wicked-0.6.14-4.1 wicked-debuginfo-0.6.14-4.1 wicked-debugsource-0.6.14-4.1 wicked-service-0.6.14-4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=895600 https://bugzilla.suse.com/show_bug.cgi?id=900951 https://bugzilla.suse.com/show_bug.cgi?id=901337 https://bugzilla.suse.com/show_bug.cgi?id=901402 https://bugzilla.suse.com/show_bug.cgi?id=904061 https://bugzilla.suse.com/show_bug.cgi?id=904380 https://bugzilla.suse.com/show_bug.cgi?id=904432 https://bugzilla.suse.com/show_bug.cgi?id=904776 https://bugzilla.suse.com/show_bug.cgi?id=904903 https://bugzilla.suse.com/show_bug.cgi?id=905421 https://bugzilla.suse.com/show_bug.cgi?id=905750 https://bugzilla.suse.com/show_bug.cgi?id=906217 https://bugzilla.suse.com/show_bug.cgi?id=907683 https://bugzilla.suse.com/show_bug.cgi?id=908554

1 0

openSUSE-SU-2015:0002-1: moderate: Security update for ruby20
by opensuse-security＠opensuse.org 02 Jan '15

02 Jan '15

openSUSE Security Update: Security update for ruby20 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0002-1 Rating: moderate References: #902851 #905326 Cross-References: CVE-2014-8080 CVE-2014-8090 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This ruby update fixes the following two security issues: - bnc#902851: fix CVE-2014-8080: Denial Of Service XML Expansion - bnc#905326: fix CVE-2014-8090: Another Denial Of Service XML Expansion - Enable tests to run during the build. This way we can compare the results on different builds. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): ruby20-2.0.0.p247-3.19.1 ruby20-debuginfo-2.0.0.p247-3.19.1 ruby20-debugsource-2.0.0.p247-3.19.1 ruby20-devel-2.0.0.p247-3.19.1 ruby20-devel-extra-2.0.0.p247-3.19.1 ruby20-tk-2.0.0.p247-3.19.1 ruby20-tk-debuginfo-2.0.0.p247-3.19.1 - openSUSE 13.1 (noarch): ruby20-doc-ri-2.0.0.p247-3.19.1 References: http://support.novell.com/security/cve/CVE-2014-8080.html http://support.novell.com/security/cve/CVE-2014-8090.html https://bugzilla.suse.com/show_bug.cgi?id=902851 https://bugzilla.suse.com/show_bug.cgi?id=905326

1 0