January 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:0142-1: dosfstools
by maintenance＠opensuse.org 26 Jan '15

26 Jan '15

openSUSE Recommended Update: dosfstools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0142-1 Rating: low References: #912607 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for dosfstools fixes the following issues: - Fix attempt to rename root dir in fsck due to uninitialized fields [bnc#912607] Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-73 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): dosfstools-3.0.26-3.5.1 dosfstools-debuginfo-3.0.26-3.5.1 dosfstools-debugsource-3.0.26-3.5.1 References: https://bugzilla.suse.com/show_bug.cgi?id=912607

1 0

openSUSE-RU-2015:0141-1: cronie
by maintenance＠opensuse.org 26 Jan '15

26 Jan '15

openSUSE Recommended Update: cronie ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0141-1 Rating: low References: #900604 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for cronie fixes the following issues: - patch in order to fix loading the PAM environment from the pam_env module as documented in the manualpage. - fixes memory leak of environment returned by pam_getenvlist() (bnc#900604). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-75 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): cron-4.2-50.4.1 cronie-1.4.8-50.4.1 cronie-anacron-1.4.8-50.4.1 cronie-anacron-debuginfo-1.4.8-50.4.1 cronie-debuginfo-1.4.8-50.4.1 cronie-debugsource-1.4.8-50.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=900604

1 0

openSUSE-RU-2015:0140-1: aws-cli
by maintenance＠opensuse.org 26 Jan '15

26 Jan '15

openSUSE Recommended Update: aws-cli ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0140-1 Rating: low References: #905354 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for aws-cli fixes the following issues: - Update to version 1.7.1 (bnc#905354) + bugfix:``aws s3 cp``: Fix issue with parts of a file being downloaded more than once when streaming to stdout (`issue 1087 <https://github.com/aws/aws-cli/pull/1087>`__) + bugfix:``--no-sign-request``: Fix issue where requests were still trying to be signed even though user used the ``--no-sign-request`` flag. (`botocore issue 433 <https://github.com/boto/botocore/pull/433>`__) + bugfix:``aws cloudsearchdomain search``: Fix invalid signatures when using the ``aws cloudsearchdomain search`` command (`issue 976 <https://github.com/aws/aws-cli/issues/976>`__) + feature:``aws cloudhsm``: Add support for AWS CloudHSM. + feature:``aws ecs``: Add support for ``aws ecs``, the Amazon EC2 Container Service (ECS) + feature:``aws rds``: Add Encryption at Rest and CloudHSM Support. + feature:``aws ec2``: Add Classic Link support + feature:``aws cloudsearch``: Update ``aws cloudsearch`` command to latest version + bugfix:``aws cloudfront wait``: Fix issue where wait commands did not stop waiting when a success state was reached. (`botocore issue 426 <https://github.com/boto/botocore/pull/426>`_) + bugfix:``aws ec2 run-instances``: Allow binary files to be passed to ``--user-data`` (`botocore issue 416 <https://github.com/boto/botocore/pull/416>`_) + bugfix:``aws cloudsearchdomain suggest``: Add ``--suggest-query`` option to fix the argument being shadowed by the top level ``--query`` option. (`issue 1068 <https://github.com/aws/aws-cli/pull/1068>`__) + bugfix:``aws emr``: Fix issue with endpoints for ``eu-central-1`` and ``cn-north-1`` (`botocore issue 423 <https://github.com/boto/botocore/pull/423>`__) + bugfix:``aws s3``: Fix issue where empty XML nodes are now parsed as an empty string ``""`` instead of ``null``, which allows for round tripping ``aws s3 get/put-bucket-lifecycle`` (`issue 1076 <https://github.com/aws/aws-cli/issues/1076>`__) + bugfix:AssumeRole: Fix issue with cache filenames when assuming a role on Windows (`issue 1063 <https://github.com/aws/aws-cli/issues/1063>`__) + bugfix:``aws s3 ls``: Fix issue when listing Amazon S3 objects containing non-ascii characters in eu-central-1 (`issue 1046 <https://github.com/aws/aws-cli/issues/1046>`__) + feature:``aws storagegateway``: Update the ``aws storagegateway`` command to the latest version + feature:``aws emr``: Update the ``aws emr`` command to the latest version + bugfix:``aws emr create-cluster``: Fix script runnner jar to the current region location when ``--enable-debugging`` is specified in the ``aws emr create-cluster`` command + bugfix:``aws datapipeline get-pipeline-definition``: Rename operation parameter ``--version`` to ``--pipeline-version`` to avoid shadowinga built in parameter (`issue 1058 <https://github.com/aws/aws-cli/pull/1058>`__) + bugfix:pip installation: Fix issue where pip installations would cause an error due to the system's python configuration (`issue 1051 <https://github.com/aws/aws-cli/issues/1051>`__) + feature:``aws elastictranscoder``: Update the ``aws elastictranscoder`` command to the latest version + bugfix:Non-ascii chars: Fix issue where escape sequences were being printed instead of the non-ascii chars (`issue 1048 <https://github.com/aws/aws-cli/issues/1048>`__) + bugfix:``aws iam create-virtual-mfa-device``: Fix issue with ``--outfile`` not supporting relative paths (`issue 1002 <https://github.com/aws/aws-cli/pull/1002>`__) + feature:``aws sqs``: Add support for Amazon Simple Queue Service purge queue which allows users to delete the messages in their queue. + feature:``aws opsworks``: Add AWS OpsWorks support for registering and assigning existing Amazon EC2 instances and on-premises servers. + feature:``aws opsworks register``: Registers an EC2 instance or machine with AWS OpsWorks. Registering a machine using this command will install the AWS OpsWorks agent on the target machine and register it with an existing OpsWorks stack. + bugfix:``aws s3``: Fix issue with expired signatures when retrying failed requests (`botocore issue 399 <https://github.com/boto/botocore/pull/399>`__) + bugfix:``aws cloudformation get-template``: Fix error message when template does not exist (`issue 1044 <https://github.com/aws/aws-cli/issues/1044>`__) + feature:``aws kinesis put-records``: Add support for PutRecord operation. It writes multiple data records from a producer into an Amazon Kinesis stream in a single call + feature:``aws iam get-account-authorization-details``: Add support for GetAccountAuthorizationDetails operation. It retrieves information about all IAM users, groups, and roles in your account, including their relationships to one another and their attached policies. + feature:``aws route53 update-hosted-zone-comment``: Add support for updating the comment of a hosted zone. + bugfix:Timestamp Arguments: Fix issue where certain timestamps were not being accepted as valid input (`botocore issue 389 <https://github.com/boto/botocore/pull/389>`__) + bugfix:``aws s3``: Skip files whose names cannot be properly decoded (`issue 1038 <https://github.com/aws/aws-cli/pull/1038>`__) + bugfix:``aws kinesis put-record``: Fix issue where ``--data`` argument was not being base64 encoded (`issue 1033 <https://github.com/aws/aws-cli/issues/1033>`__) + bugfix:``aws cloudwatch put-metric-data``: Fix issue where the values for ``--statistic-values`` were not being parsed properly (`issue 1036 <https://github.com/aws/aws-cli/issues/1036>`__) + feature:``aws datapipeline``: Add support for using AWS Data Pipeline templates to create pipelines and bind values to parameters in the pipeline + feature:``aws elastictranscoder``: Add support for encryption of files in Amazon S3 + bugfix:``aws s3``: Fix issue where requests were not being resigned correctly when using Signature Version 4 (`botocore issue 388 <https://github.com/boto/botocore/pull/388>`__) + bugfix:``aws s3``: Fix issue where KMS encrypted objects could not be downloaded (`issue 1026 <https://github.com/aws/aws-cli/pull/1026>`__) + bugfix:``aws s3``: Fix issue where datetime's were not being parsed properly when a profile was specified (`issue 1020 <https://github.com/aws/aws-cli/issues/1020>`__) + bugfix:Assume Role Credential Provider: Fix issue with parsing expiry time from assume role credential provider (`botocore issue 387 <https://github.com/boto/botocore/pull/387>`__) + feature:``aws redshift``: Add support for integration with KMS + bugfix:``aws cloudtrail create-subscription``: Set a bucket config location constraint on buckets created outside of us-east-1. (`issue 1013 <https://github.com/aws/aws-cli/pull/1013>`__) + bugfix:``aws deploy push``: Fix s3 multipart uploads + bugfix:``aws s3 ls``: Fix return codes for non existing objects (`issue 1008 <https://github.com/aws/aws-cli/pull/1008>`__) + bugfix:Retrying Signed Requests: Fix issue where requests using Signature Version 4 signed with temporary credentials were not being retried properly, resulting in auth errors (`botocore issue 379 <https://github.com/boto/botocore/pull/379>`__) + bugfix:``aws s3api get-bucket-location``: Fix issue where getting the bucket location for a bucket in eu-central-1 required specifying ``--region eu-central-1`` (`botocore issue 380 <https://github.com/boto/botocore/pull/380>`__) + bugfix:Timestamp Input: Fix regression where timestamps without any timezone information were not being handled properly (`issue 982 <https://github.com/aws/aws-cli/issues/982>`__) + bugfix:Signature Version 4: You can enable Signature Version 4 for Amazon S3 commands by running ``aws configure set default.s3.signature_version s3v4`` (`issue 1006 <https://github.com/aws/aws-cli/issues/1006>`__, `botocore issue 382 <https://github.com/boto/botocore/pull/382>`__) + bugfix:``aws emr``: Fix issue where ``--ssh``, ``--get``, ``--put`` would not work when the cluster was in a waiting state (`issue 1007 <https://github.com/aws/aws-cli/issues/1007>`__) + feature:Binary File Input: Add support for reading file contents as binary by prepending the filename with ``fileb://`` (`issue 1010 <https://github.com/aws/aws-cli/pull/1010>`__) + bugfix:Streaming Output File: Fix issue when streaming a response to a file and an error response is returned (`issue 1012 <https://github.com/aws/aws-cli/pull/1012>`__) + bugfix:Binary Output: Fix regression where binary output was no longer being base64 encoded (`issue 1001 <https://github.com/aws/aws-cli/pull/1001>`__, `issue 970 <https://github.com/aws/aws-cli/pull/970>`__) + feature:``aws lambda``: Add support for Amazon Lambda + feature:``aws s3``: Add support for S3 notifications + bugfix:``aws configservice get-status``: Fix connecting to endpoint without using ssl. (`issue 998 <https://github.com/aws/aws-cli/pull/998>`__) + bugfix:``aws deploy push``: Fix some python compatibility issues (`issue 1000 <https://github.com/aws/aws-cli/pull/1000>`__) + feature:``aws deploy``: Adds support for AWS CodeDeploy + feature:``aws configservice``: Adds support for AWS Config + feature:``aws kms``: Adds support AWS Key Management Service + feature:``aws s3api``: Adds support for S3 server-side encryption using KMS + feature:``aws ec2``: Adds support for EBS encryption using KMS + feature:``aws cloudtrail``: Adds support for CloudWatch Logs delivery + feature:``aws cloudformation``: Adds support for template summary. + feature:AssumeRole Credential Provider: Add support for assuming a role by configuring a ``role_arn`` and a ``source_profile`` in the AWS config file (`issue 991 <https://github.com/aws/aws-cli/pull/991>`__, `issue 990 <https://github.com/aws/aws-cli/pull/990>`__) + feature:Waiters: Add a ``wait`` subcommand that allows for a command to block until an AWS resource reaches a given state (`issue 992 <https://github.com/aws/aws-cli/pull/992>`__, `issue 985 <https://github.com/aws/aws-cli/pull/985>`__) + bugfix:``aws s3``: Fix issue where request was not properly signed on retried requests for ``aws s3`` (`issue 986 <https://github.com/aws/aws-cli/issues/986>`__, `botocore issue 375 <https://github.com/boto/botocore/pull/375>`__) + bugfix:``aws s3``: Fix issue where ``--exclude`` and ``--include`` were not being properly applied when a s3 prefix was provided. (`issue 993 <https://github.com/aws/aws-cli/pull/993>`__) + feature:``aws cloudfront``: Adds support for wildcard cookie names and options caching. + feature:``aws route53``: Add further support for private dns and sigv4. + feature:``aws cognito-sync``: Add support for push sync. + bugfix:Pagination: Only display ``--page-size`` when an operation can be paginated (`issue 956 <https://github.com/aws/aws-cli/pull/956>`__) + feature:``--generate-cli-skeleton``: Generates a JSON skeleton to fill out and be used as input to ``--cli-input-json``. (`issue 963 <https://github.com/aws/aws-cli/pull/963>`_) + feature:``--cli-input-json``: Runs an operation using a global JSON file that supplies all of the operation's arguments. This JSON file can be generated by ``--generate-cli-skeleton``. (`issue 963 <https://github.com/aws/aws-cli/pull/963>`_) + feature:``aws s3/s3api``: Show hint about using the correct region when the corresponding error occurs (`issue 968 <https://github.com/aws/aws-cli/pull/968>`__) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-72 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): aws-cli-1.7.1-2.8.1 python-botocore-0.82.0-2.8.1 python-jmespath-0.5.0-2.8.1 References: https://bugzilla.suse.com/show_bug.cgi?id=905354

1 0

openSUSE-RU-2015:0139-1: namazu
by maintenance＠opensuse.org 26 Jan '15

26 Jan '15

openSUSE Recommended Update: namazu ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0139-1 Rating: low References: #912784 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for namazu fixes the following issues: - fixes bnc#912784: /usr/bin/mknz gives Perl warning: "Useless use of greediness modifier '?' in regex Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-74 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): namazu-2.0.21-8.4.1 namazu-cgi-2.0.21-8.4.1 namazu-cgi-debuginfo-2.0.21-8.4.1 namazu-debuginfo-2.0.21-8.4.1 namazu-debugsource-2.0.21-8.4.1 namazu-devel-2.0.21-8.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=912784

1 0

openSUSE-SU-2015:0138-1: important: Firefox update to latest 31ESR release
by opensuse-security＠opensuse.org 25 Jan '15

25 Jan '15

openSUSE Security Update: Firefox update to latest 31ESR release ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0138-1 Rating: important References: #876833 #894370 #900639 #900941 #908009 #910669 Cross-References: 2013-5611 2013-5612 2013-5614 2013-5619 2013-6672 2014-1480 2014-1483 2014-1484 2014-1485 2014-1488 2014-1489 2014-1492 2014-1498 2014-1499 2014-1500 2014-1502 2014-1504 2014-1519 2014-1522 2014-1525 2014-1526 2014-1528 2014-1539 2014-1540 2014-1542 2014-1543 2014-1549 2014-1550 2014-1552 2014-1553 2014-1558 2014-1559 2014-1560 2014-1561 2014-1563 2014-1564 2014-1565 2014-1574 2014-1576 2014-1577 2014-1578 2014-1581 2014-1583 2014-1585 2014-1586 2014-1587 2014-1590 2014-1592 2014-1593 2014-1594 2014-8634 2014-8635 2014-8638 2014-8639 2014-8641 CVE-2014-1553 CVE-2014-1562 CVE-2014-1563 CVE-2014-1564 CVE-2014-1565 CVE-2014-1567 CVE-2014-1569 CVE-2014-1574 CVE-2014-1576 CVE-2014-1577 CVE-2014-1578 CVE-2014-1581 CVE-2014-1585 CVE-2014-1586 CVE-2014-1587 CVE-2014-1590 CVE-2014-1592 CVE-2014-1593 CVE-2014-1594 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes 74 vulnerabilities is now available. Description: This update lifts Firefox to the latest 31 ESR release to fix known security issues. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-4 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): MozillaFirefox-31.4.0-133.1 MozillaFirefox-branding-upstream-31.4.0-133.1 MozillaFirefox-buildsymbols-31.4.0-133.1 MozillaFirefox-debuginfo-31.4.0-133.1 MozillaFirefox-debugsource-31.4.0-133.1 MozillaFirefox-devel-31.4.0-133.1 MozillaFirefox-translations-common-31.4.0-133.1 MozillaFirefox-translations-other-31.4.0-133.1 libfreebl3-3.17.3-104.1 libfreebl3-debuginfo-3.17.3-104.1 libsoftokn3-3.17.3-104.1 libsoftokn3-debuginfo-3.17.3-104.1 mozilla-nspr-4.10.7-49.1 mozilla-nspr-debuginfo-4.10.7-49.1 mozilla-nspr-debugsource-4.10.7-49.1 mozilla-nspr-devel-4.10.7-49.1 mozilla-nss-3.17.3-104.1 mozilla-nss-certs-3.17.3-104.1 mozilla-nss-certs-debuginfo-3.17.3-104.1 mozilla-nss-debuginfo-3.17.3-104.1 mozilla-nss-debugsource-3.17.3-104.1 mozilla-nss-devel-3.17.3-104.1 mozilla-nss-sysinit-3.17.3-104.1 mozilla-nss-sysinit-debuginfo-3.17.3-104.1 mozilla-nss-tools-3.17.3-104.1 mozilla-nss-tools-debuginfo-3.17.3-104.1 - openSUSE Evergreen 11.4 (x86_64): libfreebl3-32bit-3.17.3-104.1 libfreebl3-debuginfo-32bit-3.17.3-104.1 libsoftokn3-32bit-3.17.3-104.1 libsoftokn3-debuginfo-32bit-3.17.3-104.1 mozilla-nspr-32bit-4.10.7-49.1 mozilla-nspr-debuginfo-32bit-4.10.7-49.1 mozilla-nss-32bit-3.17.3-104.1 mozilla-nss-certs-32bit-3.17.3-104.1 mozilla-nss-certs-debuginfo-32bit-3.17.3-104.1 mozilla-nss-debuginfo-32bit-3.17.3-104.1 mozilla-nss-sysinit-32bit-3.17.3-104.1 mozilla-nss-sysinit-debuginfo-32bit-3.17.3-104.1 - openSUSE Evergreen 11.4 (ia64): libfreebl3-debuginfo-x86-3.17.3-104.1 libfreebl3-x86-3.17.3-104.1 libsoftokn3-debuginfo-x86-3.17.3-104.1 libsoftokn3-x86-3.17.3-104.1 mozilla-nspr-debuginfo-x86-4.10.7-49.1 mozilla-nspr-x86-4.10.7-49.1 mozilla-nss-certs-debuginfo-x86-3.17.3-104.1 mozilla-nss-certs-x86-3.17.3-104.1 mozilla-nss-debuginfo-x86-3.17.3-104.1 mozilla-nss-sysinit-debuginfo-x86-3.17.3-104.1 mozilla-nss-sysinit-x86-3.17.3-104.1 mozilla-nss-x86-3.17.3-104.1 References: http://support.novell.com/security/cve/2013-5611.html http://support.novell.com/security/cve/2013-5612.html http://support.novell.com/security/cve/2013-5614.html http://support.novell.com/security/cve/2013-5619.html http://support.novell.com/security/cve/2013-6672.html http://support.novell.com/security/cve/2014-1480.html http://support.novell.com/security/cve/2014-1483.html http://support.novell.com/security/cve/2014-1484.html http://support.novell.com/security/cve/2014-1485.html http://support.novell.com/security/cve/2014-1488.html http://support.novell.com/security/cve/2014-1489.html http://support.novell.com/security/cve/2014-1492.html http://support.novell.com/security/cve/2014-1498.html http://support.novell.com/security/cve/2014-1499.html http://support.novell.com/security/cve/2014-1500.html http://support.novell.com/security/cve/2014-1502.html http://support.novell.com/security/cve/2014-1504.html http://support.novell.com/security/cve/2014-1519.html http://support.novell.com/security/cve/2014-1522.html http://support.novell.com/security/cve/2014-1525.html http://support.novell.com/security/cve/2014-1526.html http://support.novell.com/security/cve/2014-1528.html http://support.novell.com/security/cve/2014-1539.html http://support.novell.com/security/cve/2014-1540.html http://support.novell.com/security/cve/2014-1542.html http://support.novell.com/security/cve/2014-1543.html http://support.novell.com/security/cve/2014-1549.html http://support.novell.com/security/cve/2014-1550.html http://support.novell.com/security/cve/2014-1552.html http://support.novell.com/security/cve/2014-1553.html http://support.novell.com/security/cve/2014-1558.html http://support.novell.com/security/cve/2014-1559.html http://support.novell.com/security/cve/2014-1560.html http://support.novell.com/security/cve/2014-1561.html http://support.novell.com/security/cve/2014-1563.html http://support.novell.com/security/cve/2014-1564.html http://support.novell.com/security/cve/2014-1565.html http://support.novell.com/security/cve/2014-1574.html http://support.novell.com/security/cve/2014-1576.html http://support.novell.com/security/cve/2014-1577.html http://support.novell.com/security/cve/2014-1578.html http://support.novell.com/security/cve/2014-1581.html http://support.novell.com/security/cve/2014-1583.html http://support.novell.com/security/cve/2014-1585.html http://support.novell.com/security/cve/2014-1586.html http://support.novell.com/security/cve/2014-1587.html http://support.novell.com/security/cve/2014-1590.html http://support.novell.com/security/cve/2014-1592.html http://support.novell.com/security/cve/2014-1593.html http://support.novell.com/security/cve/2014-1594.html http://support.novell.com/security/cve/2014-8634.html http://support.novell.com/security/cve/2014-8635.html http://support.novell.com/security/cve/2014-8638.html http://support.novell.com/security/cve/2014-8639.html http://support.novell.com/security/cve/2014-8641.html http://support.novell.com/security/cve/CVE-2014-1553.html http://support.novell.com/security/cve/CVE-2014-1562.html http://support.novell.com/security/cve/CVE-2014-1563.html http://support.novell.com/security/cve/CVE-2014-1564.html http://support.novell.com/security/cve/CVE-2014-1565.html http://support.novell.com/security/cve/CVE-2014-1567.html http://support.novell.com/security/cve/CVE-2014-1569.html http://support.novell.com/security/cve/CVE-2014-1574.html http://support.novell.com/security/cve/CVE-2014-1576.html http://support.novell.com/security/cve/CVE-2014-1577.html http://support.novell.com/security/cve/CVE-2014-1578.html http://support.novell.com/security/cve/CVE-2014-1581.html http://support.novell.com/security/cve/CVE-2014-1585.html http://support.novell.com/security/cve/CVE-2014-1586.html http://support.novell.com/security/cve/CVE-2014-1587.html http://support.novell.com/security/cve/CVE-2014-1590.html http://support.novell.com/security/cve/CVE-2014-1592.html http://support.novell.com/security/cve/CVE-2014-1593.html http://support.novell.com/security/cve/CVE-2014-1594.html https://bugzilla.suse.com/show_bug.cgi?id=876833 https://bugzilla.suse.com/show_bug.cgi?id=894370 https://bugzilla.suse.com/show_bug.cgi?id=900639 https://bugzilla.suse.com/show_bug.cgi?id=900941 https://bugzilla.suse.com/show_bug.cgi?id=908009 https://bugzilla.suse.com/show_bug.cgi?id=910669

1 0

openSUSE-RU-2015:0137-1: moderate: fix compatibility with latest Python upgrade
by maintenance＠opensuse.org 25 Jan '15

25 Jan '15

openSUSE Recommended Update: fix compatibility with latest Python upgrade ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0137-1 Rating: moderate References: Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This patch contains a set of packages which needed a rebuild against latest Python because of binary incompatiblity. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-3 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): apache2-mod_python-3.3.1-161.8.1 apache2-mod_python-debuginfo-3.3.1-161.8.1 apache2-mod_python-debugsource-3.3.1-161.8.1 xchat-2.8.8-8.1 xchat-debuginfo-2.8.8-8.1 xchat-debugsource-2.8.8-8.1 xchat-perl-2.8.8-8.1 xchat-perl-debuginfo-2.8.8-8.1 xchat-python-2.8.8-8.1 xchat-python-debuginfo-2.8.8-8.1 xchat-tcl-2.8.8-8.1 xchat-tcl-debuginfo-2.8.8-8.1 - openSUSE Evergreen 11.4 (noarch): xchat-lang-2.8.8-8.1 References:

1 0

openSUSE-RU-2015:0134-1: xdg-utils
by maintenance＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Recommended Update: xdg-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:0134-1 Rating: low References: #906625 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for xdg-utils fixes the following issues: - added patch to fix not opening files with standard application (bnc#906625) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-71 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): xdg-utils-20140922-8.1 References: https://bugzilla.suse.com/show_bug.cgi?id=906625

1 0

openSUSE-SU-2015:0133-1: moderate: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0133-1 Rating: moderate References: #910669 Cross-References: CVE-2014-8634 CVE-2014-8635 CVE-2014-8638 CVE-2014-8639 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: MozillaThunderbird was updated to Thunderbird 31.4.0 (bnc#910669) * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635 Miscellaneous memory safety hazards * MFSA 2015-03/CVE-2014-8638 (bmo#1080987) sendBeacon requests lack an Origin header * MFSA 2015-04/CVE-2014-8639 (bmo#1095859) Cookie injection through Proxy Authenticate responses Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-69 - openSUSE 13.1: zypper in -t patch openSUSE-2015-69 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): MozillaThunderbird-31.4.0-8.1 MozillaThunderbird-buildsymbols-31.4.0-8.1 MozillaThunderbird-debuginfo-31.4.0-8.1 MozillaThunderbird-debugsource-31.4.0-8.1 MozillaThunderbird-devel-31.4.0-8.1 MozillaThunderbird-translations-common-31.4.0-8.1 MozillaThunderbird-translations-other-31.4.0-8.1 - openSUSE 13.1 (i586 x86_64): MozillaThunderbird-31.4.0-70.43.1 MozillaThunderbird-buildsymbols-31.4.0-70.43.1 MozillaThunderbird-debuginfo-31.4.0-70.43.1 MozillaThunderbird-debugsource-31.4.0-70.43.1 MozillaThunderbird-devel-31.4.0-70.43.1 MozillaThunderbird-translations-common-31.4.0-70.43.1 MozillaThunderbird-translations-other-31.4.0-70.43.1 References: http://support.novell.com/security/cve/CVE-2014-8634.html http://support.novell.com/security/cve/CVE-2014-8635.html http://support.novell.com/security/cve/CVE-2014-8638.html http://support.novell.com/security/cve/CVE-2014-8639.html https://bugzilla.suse.com/show_bug.cgi?id=910669

1 0

openSUSE-SU-2015:0132-1: moderate: Security update for libevent
by opensuse-security＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Security Update: Security update for libevent ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0132-1 Rating: moderate References: #897243 Cross-References: CVE-2014-6272 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: libevent was updated to fixed heap overflows in buffer API (bsc#897243 CVE-2014-6272) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-68 - openSUSE 13.1: zypper in -t patch openSUSE-2015-68 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libevent-2_0-5-2.0.21-4.4.1 libevent-2_0-5-debuginfo-2.0.21-4.4.1 libevent-debugsource-2.0.21-4.4.1 libevent-devel-2.0.21-4.4.1 - openSUSE 13.2 (x86_64): libevent-2_0-5-32bit-2.0.21-4.4.1 libevent-2_0-5-debuginfo-32bit-2.0.21-4.4.1 - openSUSE 13.1 (i586 x86_64): libevent-2_0-5-2.0.21-2.4.1 libevent-2_0-5-debuginfo-2.0.21-2.4.1 libevent-debugsource-2.0.21-2.4.1 libevent-devel-2.0.21-2.4.1 - openSUSE 13.1 (x86_64): libevent-2_0-5-32bit-2.0.21-2.4.1 libevent-2_0-5-debuginfo-32bit-2.0.21-2.4.1 References: http://support.novell.com/security/cve/CVE-2014-6272.html https://bugzilla.suse.com/show_bug.cgi?id=897243

1 0

openSUSE-SU-2015:0131-1: moderate: Security update for shotwell, vala
by opensuse-security＠opensuse.org 23 Jan '15

23 Jan '15

openSUSE Security Update: Security update for shotwell, vala ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0131-1 Rating: moderate References: #913071 Cross-References: CVE-2014-8154 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: vala was updated to fix a heap buffer overflow in generated code during build (boo#913071, CVE-2014-8154). shotwell was rebuilt using above fixed vala. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-70 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libvala-0_26-0-0.26.1-4.1 libvala-0_26-0-debuginfo-0.26.1-4.1 libvala-0_26-devel-0.26.1-4.1 shotwell-0.20.1-5.2 shotwell-debuginfo-0.20.1-5.2 shotwell-debugsource-0.20.1-5.2 vala-0.26.1-4.1 vala-debuginfo-0.26.1-4.1 vala-debugsource-0.26.1-4.1 - openSUSE 13.2 (noarch): shotwell-lang-0.20.1-5.2 References: http://support.novell.com/security/cve/CVE-2014-8154.html https://bugzilla.suse.com/show_bug.cgi?id=913071

1 0