- openSUSE Updates

openSUSE-RU-2013:0952-1: yast2-security: ignore case for encryption method names
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: yast2-security: ignore case for encryption method names ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0952-1 Rating: low References: #810600 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with yast2-security: - bnc#810600: ignore case for encryption method names Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-406 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): yast2-security-2.23.6-1.8.1 References: https://bugzilla.novell.com/810600

1 0

openSUSE-SU-2013:0951-1: critical: kernel: security and bugfix update
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: kernel: security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0951-1 Rating: critical References: #803931 #813889 #815745 #818327 #818497 #819519 #819789 #820048 Cross-References: CVE-2013-0290 CVE-2013-2094 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has 6 fixes is now available. Description: The openSUSE 12.3 kernel was updated to fix a critical security issue, other security issues and several bugs. Security issues fixed: CVE-2013-2094: The perf_swevent_init function in kernel/events/core.c in the Linux kernel used an incorrect integer data type, which allowed local users to gain privileges via a crafted perf_event_open system call. CVE-2013-0290: The __skb_recv_datagram function in net/core/datagram.c in the Linux kernel did not properly handle the MSG_PEEK flag with zero-length data, which allowed local users to cause a denial of service (infinite loop and system hang) via a crafted application. Bugs fixed: - qlge: fix dma map leak when the last chunk is not allocated (bnc#819519). - ACPI / thermal: do not always return THERMAL_TREND_RAISING for active trip points (bnc#820048). - perf: Treat attr.config as u64 in perf_swevent_init() (bnc#819789, CVE-2013-2094). - cxgb4: fix error recovery when t4_fw_hello returns a positive value (bnc#818497). - kabi/severities: Ignore drivers/mfd/ucb1400_core It provides internal exports to UCB1400 drivers, that we have just disabled. - Fix -devel package for armv7hl armv7hl kernel flavors in the non-multiplatform configuration (which is the default for our openSUSE 12.3 release), needs more header files from the machine specific directories to be included in kernel-devel. - Update config files: disable UCB1400 on all but ARM Currently UCB1400 is only used on ARM OMAP systems, and part of the code is dead code that can't even be modularized. - CONFIG_UCB1400_CORE=n - CONFIG_TOUCHSCREEN_UCB1400=n - CONFIG_GPIO_UCB1400=n - rpm/config.sh: Drop the ARM repository, the KOTD will build against the "ports" repository of openSUSE:12.3 - mm/mmap: check for RLIMIT_AS before unmapping (bnc#818327). - rpm/kernel-spec-macros: Properly handle KOTD release numbers with .g<commit> suffix - rpm/kernel-spec-macros: Drop the %release_num macro We no longer put the -rcX tag into the release string. - xen-pciback: notify hypervisor about devices intended to be assigned to guests. - unix/stream: fix peeking with an offset larger than data in queue (bnc#803931 CVE-2013-0290). - unix/dgram: fix peeking with an offset larger than data in queue (bnc#803931 CVE-2013-0290). - unix/dgram: peek beyond 0-sized skbs (bnc#803931 CVE-2013-0290). - net: fix infinite loop in __skb_recv_datagram() (bnc#803931 CVE-2013-0290). - TTY: fix atime/mtime regression (bnc#815745). - md/raid1,raid10: fix deadlock with freeze_array() (813889). - md: raid1,10: Handle REQ_WRITE_SAME flag in write bios (bnc#813889). - KMS: fix EDID detailed timing vsync parsing. - KMS: fix EDID detailed timing frame rate. - Add Netfilter/ebtables support Those modues are needed for proper OpenStack support on ARM, and are also enabled on x86(_64) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-452 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): kernel-default-3.7.10-1.11.1 kernel-default-base-3.7.10-1.11.1 kernel-default-devel-3.7.10-1.11.1 kernel-syms-3.7.10-1.11.1 - openSUSE 12.3 (i686 x86_64): kernel-debug-3.7.10-1.11.1 kernel-debug-base-3.7.10-1.11.1 kernel-debug-devel-3.7.10-1.11.1 kernel-desktop-3.7.10-1.11.1 kernel-desktop-base-3.7.10-1.11.1 kernel-desktop-devel-3.7.10-1.11.1 kernel-ec2-3.7.10-1.11.1 kernel-ec2-base-3.7.10-1.11.1 kernel-ec2-base-debuginfo-3.7.10-1.11.1 kernel-ec2-debuginfo-3.7.10-1.11.1 kernel-ec2-debugsource-3.7.10-1.11.1 kernel-ec2-devel-3.7.10-1.11.1 kernel-ec2-devel-debuginfo-3.7.10-1.11.1 kernel-trace-3.7.10-1.11.1 kernel-trace-base-3.7.10-1.11.1 kernel-trace-devel-3.7.10-1.11.1 kernel-vanilla-3.7.10-1.11.1 kernel-vanilla-devel-3.7.10-1.11.1 kernel-xen-3.7.10-1.11.1 kernel-xen-base-3.7.10-1.11.1 kernel-xen-devel-3.7.10-1.11.1 - openSUSE 12.3 (noarch): kernel-devel-3.7.10-1.11.1 kernel-docs-3.7.10-1.11.1 kernel-source-3.7.10-1.11.1 kernel-source-vanilla-3.7.10-1.11.1 - openSUSE 12.3 (i686): kernel-debug-base-debuginfo-3.7.10-1.11.1 kernel-debug-debuginfo-3.7.10-1.11.1 kernel-debug-debugsource-3.7.10-1.11.1 kernel-debug-devel-debuginfo-3.7.10-1.11.1 kernel-desktop-base-debuginfo-3.7.10-1.11.1 kernel-desktop-debuginfo-3.7.10-1.11.1 kernel-desktop-debugsource-3.7.10-1.11.1 kernel-desktop-devel-debuginfo-3.7.10-1.11.1 kernel-pae-3.7.10-1.11.1 kernel-pae-base-3.7.10-1.11.1 kernel-pae-base-debuginfo-3.7.10-1.11.1 kernel-pae-debuginfo-3.7.10-1.11.1 kernel-pae-debugsource-3.7.10-1.11.1 kernel-pae-devel-3.7.10-1.11.1 kernel-pae-devel-debuginfo-3.7.10-1.11.1 kernel-trace-base-debuginfo-3.7.10-1.11.1 kernel-trace-debuginfo-3.7.10-1.11.1 kernel-trace-debugsource-3.7.10-1.11.1 kernel-trace-devel-debuginfo-3.7.10-1.11.1 kernel-vanilla-debuginfo-3.7.10-1.11.1 kernel-vanilla-debugsource-3.7.10-1.11.1 kernel-vanilla-devel-debuginfo-3.7.10-1.11.1 kernel-xen-base-debuginfo-3.7.10-1.11.1 kernel-xen-debuginfo-3.7.10-1.11.1 kernel-xen-debugsource-3.7.10-1.11.1 kernel-xen-devel-debuginfo-3.7.10-1.11.1 - openSUSE 12.3 (i586): kernel-default-base-debuginfo-3.7.10-1.11.1 kernel-default-debuginfo-3.7.10-1.11.1 kernel-default-debugsource-3.7.10-1.11.1 kernel-default-devel-debuginfo-3.7.10-1.11.1 References: http://support.novell.com/security/cve/CVE-2013-0290.html http://support.novell.com/security/cve/CVE-2013-2094.html https://bugzilla.novell.com/803931 https://bugzilla.novell.com/813889 https://bugzilla.novell.com/815745 https://bugzilla.novell.com/818327 https://bugzilla.novell.com/818497 https://bugzilla.novell.com/819519 https://bugzilla.novell.com/819789 https://bugzilla.novell.com/820048

1 0

openSUSE-RU-2013:0950-1: gnome-themes-standard: Fix GtkEntry text background override
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: gnome-themes-standard: Fix GtkEntry text background override ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0950-1 Rating: low References: #815078 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with gnome-themes-standard: - bnc#815078, bgo#685712: Fix GtkEntry text background override Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-409 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): gnome-themes-standard-debugsource-3.6.2-3.4.1 gtk2-theming-engine-adwaita-3.6.2-3.4.1 gtk2-theming-engine-adwaita-debuginfo-3.6.2-3.4.1 gtk3-theming-engine-adwaita-3.6.2-3.4.1 gtk3-theming-engine-adwaita-debuginfo-3.6.2-3.4.1 - openSUSE 12.3 (x86_64): gtk2-theming-engine-adwaita-32bit-3.6.2-3.4.1 gtk2-theming-engine-adwaita-debuginfo-32bit-3.6.2-3.4.1 gtk3-theming-engine-adwaita-32bit-3.6.2-3.4.1 gtk3-theming-engine-adwaita-debuginfo-32bit-3.6.2-3.4.1 - openSUSE 12.3 (noarch): gnome-themes-accessibility-3.6.2-3.4.1 gnome-themes-standard-lang-3.6.2-3.4.1 gtk2-metatheme-adwaita-3.6.2-3.4.1 gtk3-metatheme-adwaita-3.6.2-3.4.1 metatheme-adwaita-common-3.6.2-3.4.1 References: https://bugzilla.novell.com/815078

1 0

openSUSE-SU-2013:0949-1: moderate: openstack-keystone: was updated to fix token invalidation
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: openstack-keystone: was updated to fix token invalidation ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0949-1 Rating: moderate References: #818596 Cross-References: CVE-2013-2059 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: OpenStack Keystone was updated to fix (bnc#818596, CVE-2013-2059): Keystone tokens not immediately invalidated when user is deleted. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-434 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): openstack-keystone-2012.2.4+git.1363796849.255b1d4-3.12.1 openstack-keystone-doc-2012.2.4+git.1363796849.255b1d4-3.12.1 openstack-keystone-test-2012.2.4+git.1363796849.255b1d4-3.12.1 python-keystone-2012.2.4+git.1363796849.255b1d4-3.12.1 References: http://support.novell.com/security/cve/CVE-2013-2059.html https://bugzilla.novell.com/818596

1 0

openSUSE-RU-2013:0948-1: xtables-addons: Update to new upstream release 2.2
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: xtables-addons: Update to new upstream release 2.2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0948-1 Rating: low References: #807155 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for xtables-addons: - Update to new upstream release 2.2 * support for Linux 3.9 * avoid iptaccount being optimized away (bnc#807155) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-474 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): xtables-addons-2.2-2.4.3 xtables-addons-debuginfo-2.2-2.4.3 xtables-addons-debugsource-2.2-2.4.3 xtables-addons-kmp-default-2.2_k3.7.10_1.11-2.4.3 xtables-addons-kmp-default-debuginfo-2.2_k3.7.10_1.11-2.4.3 xtables-addons-kmp-desktop-2.2_k3.7.10_1.11-2.4.3 xtables-addons-kmp-desktop-debuginfo-2.2_k3.7.10_1.11-2.4.3 xtables-addons-kmp-xen-2.2_k3.7.10_1.11-2.4.3 xtables-addons-kmp-xen-debuginfo-2.2_k3.7.10_1.11-2.4.3 - openSUSE 12.3 (i586): xtables-addons-kmp-pae-2.2_k3.7.10_1.11-2.4.3 xtables-addons-kmp-pae-debuginfo-2.2_k3.7.10_1.11-2.4.3 References: https://bugzilla.novell.com/807155

1 0

openSUSE-SU-2013:0947-1: moderate: update for wireshark
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0947-1 Rating: moderate References: #820566 Cross-References: CVE-2013-2486 CVE-2013-2487 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of wireshark includes several security and bug fixes. [bnc#820566] + vulnerabilities fixed: * The RELOAD dissector could go into an infinite loop. wnpa-sec-2013-23 CVE-2013-2486 CVE-2013-2487 * The GTPv2 dissector could crash. wnpa-sec-2013-24 * The ASN.1 BER dissector could crash. wnpa-sec-2013-25 * The PPP CCP dissector could crash. wnpa-sec-2013-26 * The DCP ETSI dissector could crash. wnpa-sec-2013-27 * The MPEG DSM-CC dissector could crash. wnpa-sec-2013-28 * The Websocket dissector could crash. wnpa-sec-2013-29 * The MySQL dissector could go into an infinite loop. wnpa-sec-2013-30 * The ETCH dissector could go into a large loop. wnpa-sec-2013-31 + Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.8.7.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-453 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): wireshark-1.8.7-1.8.1 wireshark-debuginfo-1.8.7-1.8.1 wireshark-debugsource-1.8.7-1.8.1 wireshark-devel-1.8.7-1.8.1 References: http://support.novell.com/security/cve/CVE-2013-2486.html http://support.novell.com/security/cve/CVE-2013-2487.html https://bugzilla.novell.com/820566

1 0

openSUSE-SU-2013:0946-1: important: MozillaFirefox: update to version 21.0
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: MozillaFirefox: update to version 21.0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0946-1 Rating: important References: #801121 #814101 #819204 Cross-References: CVE-2013-0801 CVE-2013-1669 CVE-2013-1670 CVE-2013-1671 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: MozillaFirefox was updated to Firefox 21.0 (bnc#819204) * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards * MFSA 2013-42/CVE-2013-1670 (bmo#853709) Privileged access for content level constructor * MFSA 2013-43/CVE-2013-1671 (bmo#842255) File input control has access to full path * MFSA 2013-46/CVE-2013-1674 (bmo#860971) Use-after-free with video and onresize event * MFSA 2013-47/CVE-2013-1675 (bmo#866825) Uninitialized functions in DOMSVGZoomEvent * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/ CVE-2013-1679/CVE-2013-1680/CVE-2013-1681 Memory corruption found using Address Sanitizer Changes in MozillaFirefox-branding-openSUSE: - modified file locations for Firefox 21 and above - added DuckDuckGo as search option (bnc#801121) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-438 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): MozillaFirefox-21.0-1.18.1 MozillaFirefox-branding-openSUSE-21-2.5.1 MozillaFirefox-branding-upstream-21.0-1.18.1 MozillaFirefox-buildsymbols-21.0-1.18.1 MozillaFirefox-debuginfo-21.0-1.18.1 MozillaFirefox-debugsource-21.0-1.18.1 MozillaFirefox-devel-21.0-1.18.1 MozillaFirefox-translations-common-21.0-1.18.1 MozillaFirefox-translations-other-21.0-1.18.1 mozilla-nspr-4.9.6-1.7.1 mozilla-nspr-debuginfo-4.9.6-1.7.1 mozilla-nspr-debugsource-4.9.6-1.7.1 mozilla-nspr-devel-4.9.6-1.7.1 - openSUSE 12.3 (x86_64): mozilla-nspr-32bit-4.9.6-1.7.1 mozilla-nspr-debuginfo-32bit-4.9.6-1.7.1 References: http://support.novell.com/security/cve/CVE-2013-0801.html http://support.novell.com/security/cve/CVE-2013-1669.html http://support.novell.com/security/cve/CVE-2013-1670.html http://support.novell.com/security/cve/CVE-2013-1671.html http://support.novell.com/security/cve/CVE-2013-1674.html http://support.novell.com/security/cve/CVE-2013-1675.html http://support.novell.com/security/cve/CVE-2013-1676.html http://support.novell.com/security/cve/CVE-2013-1677.html http://support.novell.com/security/cve/CVE-2013-1678.html http://support.novell.com/security/cve/CVE-2013-1679.html http://support.novell.com/security/cve/CVE-2013-1680.html http://support.novell.com/security/cve/CVE-2013-1681.html https://bugzilla.novell.com/801121 https://bugzilla.novell.com/814101 https://bugzilla.novell.com/819204

1 0

openSUSE-SU-2013:0945-1: moderate: libxml2
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0945-1 Rating: moderate References: #815665 Cross-References: CVE-2013-1969 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - fix for CVE-2013-1969 (bnc#815665) * libxml2-CVE-2013-1969.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-374 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libxml2-2-2.9.0-2.9.1 libxml2-2-debuginfo-2.9.0-2.9.1 libxml2-debugsource-2.9.0-2.9.1 libxml2-devel-2.9.0-2.9.1 libxml2-tools-2.9.0-2.9.1 libxml2-tools-debuginfo-2.9.0-2.9.1 python-libxml2-2.9.0-2.9.1 python-libxml2-debuginfo-2.9.0-2.9.1 python-libxml2-debugsource-2.9.0-2.9.1 - openSUSE 12.3 (x86_64): libxml2-2-32bit-2.9.0-2.9.1 libxml2-2-debuginfo-32bit-2.9.0-2.9.1 libxml2-devel-32bit-2.9.0-2.9.1 - openSUSE 12.3 (noarch): libxml2-doc-2.9.0-2.9.1 References: http://support.novell.com/security/cve/CVE-2013-1969.html https://bugzilla.novell.com/815665

1 0

openSUSE-SU-2013:0944-1: moderate: tiff
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0944-1 Rating: moderate References: #817573 #818117 Cross-References: CVE-2013-1960 CVE-2013-1961 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: libtiff security update: * CVE-2013-1961.patch [bnc#818117] * CVE-2013-1960.patch [bnc#817573] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-431 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libtiff-devel-4.0.3-2.4.1 libtiff5-4.0.3-2.4.1 libtiff5-debuginfo-4.0.3-2.4.1 tiff-4.0.3-2.4.1 tiff-debuginfo-4.0.3-2.4.1 tiff-debugsource-4.0.3-2.4.1 - openSUSE 12.3 (x86_64): libtiff-devel-32bit-4.0.3-2.4.1 libtiff5-32bit-4.0.3-2.4.1 libtiff5-debuginfo-32bit-4.0.3-2.4.1 References: http://support.novell.com/security/cve/CVE-2013-1960.html http://support.novell.com/security/cve/CVE-2013-1961.html https://bugzilla.novell.com/817573 https://bugzilla.novell.com/818117

1 0

openSUSE-RU-2013:0943-1: important: collectl: fix init script
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: collectl: fix init script ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0943-1 Rating: important References: #793027 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes an issue with the init script that prevents the collectl-service from being started Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-367 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): collectl-3.4.3-12.7.1 References: https://bugzilla.novell.com/793027

1 0