|
Bugzilla – Full Text Bug Listing |
| Summary: | VUL-0: new v8 updates fix multiple vulnerabilities | ||
|---|---|---|---|
| Product: | [Novell Products] SUSE Security Incidents | Reporter: | Sebastian Krahmer <krahmer> |
| Component: | Incidents | Assignee: | Raymond Wooninck <tittiatcoke> |
| Status: | RESOLVED FIXED | QA Contact: | Security Team bot <security-team> |
| Severity: | Normal | ||
| Priority: | P3 - Medium | CC: | abergmann, aj, meissner, security-team |
| Version: | unspecified | ||
| Target Milestone: | --- | ||
| Hardware: | Other | ||
| OS: | openSUSE 13.1 | ||
| Whiteboard: | |||
| Found By: | --- | Services Priority: | |
| Business Priority: | Blocker: | --- | |
| Marketing QA Status: | --- | IT Deployment: | --- |
|
Description
Sebastian Krahmer
2013-12-09 12:23:19 UTC
bugbot adjusting priority Created maintenance update for v8 Standalone for targets 12.2, 12.3 and 13.1. Also submitted the update to Factory This is an autogenerated message for OBS integration: This bug (854473) was mentioned in https://build.opensuse.org/request/show/210336 12.2 / v8 https://build.opensuse.org/request/show/210337 12.3 / v8 https://build.opensuse.org/request/show/210338 13.1 / v8 https://build.opensuse.org/request/show/210344 Factory / v8 The patch is broken: # zypper patch ... Problem: nothing provides libicui18n.so()(64bit) needed by libv8-3-3.22.24.8-2.4.1.x86_64 Solution 1: deinstallation of libv8-3-3.20.0.1-2.1.3.x86_64 Solution 2: do not install patch:openSUSE_Maintenance_2353-1.noarch Solution 3: break libv8-3-3.22.24.8-2.4.1.x86_64 by ignoring some of its dependencies It should install libv8-3.3.22 but it cannot. Raymond? Raymond, there seams to be a problem with armv7l port. Can you please check? It seems that Google has decided that also V8 could benefit from an internal ICU, this causes now issues as that the icu library is not really build. This is also causing the failure on ARM. I am currently revising the spec-file for v8 so that we can utilize the system ICU and have everything correct again. Please let me know to which repo I should submit the update ? you resubmit it like before , we can fold it into the running ones. Ok, I submitted a new Maintenance request for V8 to 12.2,12.3 and 13.1 update repo's. This one is now adjusted to build against system libicu. Also the ARM build for 13.1 is working. One of the submits has been declined, please check here: https://build.opensuse.org/request/show/211140#request_history ("Don't drop " (based on bnc#797599)" from changes.") openSUSE-SU-2013:1927-1: An update that fixes 7 vulnerabilities is now available. Category: security (moderate) Bug References: 847971,854472,854473 CVE References: CVE-2013-6634,CVE-2013-6635,CVE-2013-6636,CVE-2013-6637,CVE-2013-6638,CVE-2013-6639,CVE-2013-6640 Sources used: openSUSE 12.3 (src): chromium-31.0.1650.63-1.21.1 openSUSE-SU-2013:1933-1: An update that fixes 7 vulnerabilities is now available. Category: security (moderate) Bug References: 847971,854472,854473 CVE References: CVE-2013-6634,CVE-2013-6635,CVE-2013-6636,CVE-2013-6637,CVE-2013-6638,CVE-2013-6639,CVE-2013-6640 Sources used: openSUSE 12.2 (src): chromium-31.0.1650.63-1.58.1 openSUSE-SU-2013:1960-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 854473 CVE References: CVE-2013-6638,CVE-2013-6639,CVE-2013-6640 Sources used: openSUSE 12.3 (src): v8-3.22.24.8-2.4.1 openSUSE-SU-2013:1962-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 854473 CVE References: CVE-2013-6638,CVE-2013-6639,CVE-2013-6640 Sources used: openSUSE 13.1 (src): v8-3.22.24.8-2.4.1 i fixed the declined v8 rr myself released openSUSE-SU-2014:0065-1: An update that fixes 43 vulnerabilities is now available. Category: security (moderate) Bug References: 847971,854472,854473 CVE References: CVE-2013-2906,CVE-2013-2907,CVE-2013-2908,CVE-2013-2909,CVE-2013-2910,CVE-2013-2911,CVE-2013-2912,CVE-2013-2913,CVE-2013-2914,CVE-2013-2915,CVE-2013-2916,CVE-2013-2917,CVE-2013-2918,CVE-2013-2919,CVE-2013-2920,CVE-2013-2921,CVE-2013-2922,CVE-2013-2923,CVE-2013-2924,CVE-2013-2925,CVE-2013-2926,CVE-2013-2927,CVE-2013-2928,CVE-2013-2931,CVE-2013-6621,CVE-2013-6622,CVE-2013-6623,CVE-2013-6624,CVE-2013-6625,CVE-2013-6626,CVE-2013-6627,CVE-2013-6628,CVE-2013-6629,CVE-2013-6630,CVE-2013-6631,CVE-2013-6632,CVE-2013-6634,CVE-2013-6635,CVE-2013-6636,CVE-2013-6637,CVE-2013-6638,CVE-2013-6639,CVE-2013-6640 Sources used: openSUSE 13.1 (src): chromium-31.0.1650.63-13.7 openSUSE-SU-2014:0092-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 854473 CVE References: CVE-2013-6638,CVE-2013-6639,CVE-2013-6640 Sources used: openSUSE 12.2 (src): v8-3.22.24.8-1.17.1 |