November 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2012:1466-1: subversion: update Apache Subversion to 1.7.7
by maintenance＠opensuse.org 12 Nov '12

12 Nov '12

openSUSE Recommended Update: subversion: update Apache Subversion to 1.7.7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1466-1 Rating: low References: #788015 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for subversion: - bnc#788015: update Apache Subversion to 1.7.7 - changes in 1.7.7: User-visible changes: - Client- and server-side bugfixes: * fix memory read bug * update Chinese translation - Client-side bugfixes: * fix issues with applying Git patch files * fix status does not descend into dir externals after upgrade * fix file externals don't update with old mod_dav_svn * fix external diff tool duplicates Index: lines with 'svn diff' * fix GNOME keyring library fails with very old glib * fix unknown password stores in config file cause error * fix assertions in ra_serf running against server root * fix ra_serf checkout/export aborts early on Windows - Server-side bugfixes: * fix an assert with SVNAutoVersioning in mod_dav_svn * fix unbounded memory use with SVNPathAuthz short_circuit * fix svndumpfilter exclude --targets requires leading slash * fix connection ttl for memcache should be 50 seconds * stabilize order of paths in dumpfiles with APR 1.4.6 Developer-visible changes: - General: * print "All tests successful" at the end of 'make check' * fix sandbox violation in a test * fix tests fail when running within a format 30 WC * fix return value of svn_client_update4() incorrect * fix make check summary missing test failures * fix build does not fail when apache httpd is not available - Bindings: * fix swig-pl build fails with swig 2.0.7 and newer. * fix swig-py runtime problems with swig 2.0.5 and newer - also contains changes from 1.7.6: User-visible changes: - Client-side bugfixes: * Fix "svn status -u --depth empty FILE" * Fix example output of 'svn help status' * svn propset of svn:eol-style might not notice related text changes * sort output of 'svn propget -R' * sort output of 'svn proplist' * sort output of 'svn status' * avoid a filestat per working copy find operation * optimize 'svn upgrade' performance on large working copies * allow 'file:///C:\repos' style arguments on Windows, like 1.6 * fix ra_serf against Subversion 1.2 servers * fix 'svn upgrade' on working copies with certain tree conflicts * avoid workqueue references to system temp dir * allow non-existant canonical paths * fix 'svn revert --depth files' to operate on files * fix ra_serf XML namespace handling against malicious server * fix relocate with server-relative externals * change two asserts into errors for TortoiseSVN * don't attempt to anchor an operation outside a wc root - Server-side bugfixes: * partial sync drops properties when converting to adds * replaying a copy and delete of an unreadable child fails * allow svnlook to operate on r0 * make FSFS revision files independent of APR hash order - Other tool improvements and bugfixes: * move mod_dontdothat to install-tools Developer-visible changes: - General: * fix running tests against httpd 2.4 * use constant struct initialisers for C89 compatibility - Bindings: * JavaHL: Don't assert on some invalid input * JavaHL: Add missing new in 1.7 notifications - refresh subversion-1.7.4-ruby-1.9-RbConfig.patch - refresh subversion-1.7.5-libsvn_auth_kwallet-r1345740.patch - refresh subversion-no-build-date.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-772 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.7.7-4.4.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.7.7-4.4.1 libsvn_auth_kwallet-1-0-1.7.7-4.4.1 libsvn_auth_kwallet-1-0-debuginfo-1.7.7-4.4.1 subversion-1.7.7-4.4.1 subversion-debuginfo-1.7.7-4.4.1 subversion-debugsource-1.7.7-4.4.1 subversion-devel-1.7.7-4.4.1 subversion-perl-1.7.7-4.4.1 subversion-perl-debuginfo-1.7.7-4.4.1 subversion-python-1.7.7-4.4.1 subversion-python-debuginfo-1.7.7-4.4.1 subversion-server-1.7.7-4.4.1 subversion-server-debuginfo-1.7.7-4.4.1 subversion-tools-1.7.7-4.4.1 subversion-tools-debuginfo-1.7.7-4.4.1 - openSUSE 12.2 (noarch): subversion-bash-completion-1.7.7-4.4.1 References: https://bugzilla.novell.com/788015

1 0

openSUSE-RU-2012:1465-1: moderate: util-linux: search for (u)mount helpers also in /usr/sbin
by maintenance＠opensuse.org 12 Nov '12

12 Nov '12

openSUSE Recommended Update: util-linux: search for (u)mount helpers also in /usr/sbin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1465-1 Rating: moderate References: #775575 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for util-linux: - bnc#775575: search for (u)mount helpers also in /usr/sbin Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-770 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libblkid-devel-2.21.2-4.5.1 libblkid1-2.21.2-4.5.1 libblkid1-debuginfo-2.21.2-4.5.1 libmount-devel-2.21.2-4.5.1 libmount1-2.21.2-4.5.1 libmount1-debuginfo-2.21.2-4.5.1 libuuid-devel-2.21.2-4.5.1 libuuid1-2.21.2-4.5.1 libuuid1-debuginfo-2.21.2-4.5.1 util-linux-2.21.2-4.5.1 util-linux-debuginfo-2.21.2-4.5.1 util-linux-debugsource-2.21.2-4.5.1 uuidd-2.21.2-4.5.1 uuidd-debuginfo-2.21.2-4.5.1 - openSUSE 12.2 (x86_64): libblkid-devel-32bit-2.21.2-4.5.1 libblkid1-32bit-2.21.2-4.5.1 libblkid1-debuginfo-32bit-2.21.2-4.5.1 libmount-devel-32bit-2.21.2-4.5.1 libmount1-32bit-2.21.2-4.5.1 libmount1-debuginfo-32bit-2.21.2-4.5.1 libuuid-devel-32bit-2.21.2-4.5.1 libuuid1-32bit-2.21.2-4.5.1 libuuid1-debuginfo-32bit-2.21.2-4.5.1 - openSUSE 12.2 (noarch): util-linux-lang-2.21.2-4.5.1 References: https://bugzilla.novell.com/775575

1 0

openSUSE-RU-2012:1464-1: moderate: Hyper-V: Collective update
by maintenance＠opensuse.org 12 Nov '12

12 Nov '12

openSUSE Recommended Update: Hyper-V: Collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1464-1 Rating: moderate References: #761200 #770763 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update fixes the following issues for Hyper-V: This patchset expands the KVP (Key Value Pair) functionality to implement the mechanism to GET/SET IP addresses in the guest. This functionality is used in Windows Server 2012 to implement VM replication functionality. Adding support for IP injection resulted in some changes to the protocol between the user level daemon and the kernel driver. (will work with the next kernel-update) These changes have been implemented in way that would retain compatibility with older daemons. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-773 - openSUSE 12.1: zypper in -t patch openSUSE-2012-773 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): hyper-v-4-4.4.1 hyper-v-debuginfo-4-4.4.1 hyper-v-debugsource-4-4.4.1 - openSUSE 12.1 (i586 x86_64): hyper-v-4-7.1 hyper-v-debuginfo-4-7.1 hyper-v-debugsource-4-7.1 References: http://support.novell.com/security/cve/CVE-2012-2669.html https://bugzilla.novell.com/761200 https://bugzilla.novell.com/770763

1 0

openSUSE-RU-2012:1463-1: upower: Fix NULL pointer comparison in up_device_supply_coldplug()
by maintenance＠opensuse.org 12 Nov '12

12 Nov '12

openSUSE Recommended Update: upower: Fix NULL pointer comparison in up_device_supply_coldplug() ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1463-1 Rating: low References: #783589 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for upower: - bnc#783589, lp#1012578: Added upower-NULL-pointer-comp.patch to fix NULL pointer comparison in up_device_supply_coldplug() Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-771 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libupower-glib-devel-0.9.16-2.4.1 libupower-glib1-0.9.16-2.4.1 libupower-glib1-debuginfo-0.9.16-2.4.1 typelib-1_0-UpowerGlib-1_0-0.9.16-2.4.1 upower-0.9.16-2.4.1 upower-debuginfo-0.9.16-2.4.1 upower-debugsource-0.9.16-2.4.1 - openSUSE 12.2 (noarch): upower-lang-0.9.16-2.4.1 References: https://bugzilla.novell.com/783589

1 0

openSUSE-RU-2012:1462-1: moderate: iscsitarget: Fixed Wrong CONFIG file, and fixed wrong bnc-entry
by maintenance＠opensuse.org 12 Nov '12

12 Nov '12

openSUSE Recommended Update: iscsitarget: Fixed Wrong CONFIG file, and fixed wrong bnc-entry ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1462-1 Rating: moderate References: #743562 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for iscsitarget: - bnc#743562: Fixed Wrong CONFIG file, and changes bnc was still incorrect - Removed bnc#781422 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-767 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): iscsitarget-1.4.20.3-2.12.1 iscsitarget-debuginfo-1.4.20.3-2.12.1 iscsitarget-debugsource-1.4.20.3-2.12.1 iscsitarget-kmp-default-1.4.20.3_k3.4.11_2.16-2.12.1 iscsitarget-kmp-default-debuginfo-1.4.20.3_k3.4.11_2.16-2.12.1 iscsitarget-kmp-desktop-1.4.20.3_k3.4.11_2.16-2.12.1 iscsitarget-kmp-desktop-debuginfo-1.4.20.3_k3.4.11_2.16-2.12.1 iscsitarget-kmp-xen-1.4.20.3_k3.4.11_2.16-2.12.1 iscsitarget-kmp-xen-debuginfo-1.4.20.3_k3.4.11_2.16-2.12.1 - openSUSE 12.2 (i586): iscsitarget-kmp-pae-1.4.20.3_k3.4.11_2.16-2.12.1 iscsitarget-kmp-pae-debuginfo-1.4.20.3_k3.4.11_2.16-2.12.1 References: https://bugzilla.novell.com/743562

1 0

openSUSE-SU-2012:1461-1: important: update for cgit
by opensuse-security＠opensuse.org 12 Nov '12

12 Nov '12

openSUSE Security Update: update for cgit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1461-1 Rating: important References: #787074 Cross-References: CVE-2012-4548 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Specially-crafted commits can cause code to be executed on the clients due to improperly quoted arguments. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-765 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): cgit-0.9.0.2-9.4.1 cgit-debuginfo-0.9.0.2-9.4.1 cgit-debugsource-0.9.0.2-9.4.1 References: http://support.novell.com/security/cve/CVE-2012-4548.html https://bugzilla.novell.com/787074

1 0

openSUSE-SU-2012:1460-1: important: update for cgit
by opensuse-security＠opensuse.org 12 Nov '12

12 Nov '12

openSUSE Security Update: update for cgit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1460-1 Rating: important References: #787074 Cross-References: CVE-2012-4548 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Specially-crafted commits can cause code to be executed on the clients due to improperly quoted arguments. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-764 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): cgit-0.9.0.2-14.4.1 cgit-debuginfo-0.9.0.2-14.4.1 cgit-debugsource-0.9.0.2-14.4.1 References: http://support.novell.com/security/cve/CVE-2012-4548.html https://bugzilla.novell.com/787074

1 0

openSUSE-SU-2012:1443-1: moderate: update for ruby, ruby19
by opensuse-security＠opensuse.org 05 Nov '12

05 Nov '12

openSUSE Security Update: update for ruby, ruby19 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1443-1 Rating: moderate References: #783511 #783525 Cross-References: CVE-2012-4464 CVE-2012-4466 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of ruby fixed multiple SAFE level bypass flaws. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-763 - openSUSE 12.1: zypper in -t patch openSUSE-2012-763 - openSUSE 11.4: zypper in -t patch openSUSE-2012-763 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): ruby19-1.9.3.p194-3.4.1 ruby19-debuginfo-1.9.3.p194-3.4.1 ruby19-debugsource-1.9.3.p194-3.4.1 ruby19-devel-1.9.3.p194-3.4.1 ruby19-tk-1.9.3.p194-3.4.1 ruby19-tk-debuginfo-1.9.3.p194-3.4.1 - openSUSE 12.2 (noarch): ruby19-doc-ri-1.9.3.p194-3.4.1 - openSUSE 12.1 (i586 x86_64): ruby-1.8.7.p357-2.6.1 ruby-debuginfo-1.8.7.p357-2.6.1 ruby-debugsource-1.8.7.p357-2.6.1 ruby-devel-1.8.7.p357-2.6.1 ruby-examples-1.8.7.p357-2.6.1 ruby-test-suite-1.8.7.p357-2.6.1 ruby-tk-1.8.7.p357-2.6.1 ruby-tk-debuginfo-1.8.7.p357-2.6.1 - openSUSE 12.1 (noarch): ruby-doc-html-1.8.7.p357-2.6.1 ruby-doc-ri-1.8.7.p357-2.6.1 - openSUSE 11.4 (i586 x86_64): ruby-1.8.7.p357-0.28.1 ruby-debuginfo-1.8.7.p357-0.28.1 ruby-debugsource-1.8.7.p357-0.28.1 ruby-devel-1.8.7.p357-0.28.1 ruby-examples-1.8.7.p357-0.28.1 ruby-test-suite-1.8.7.p357-0.28.1 ruby-tk-1.8.7.p357-0.28.1 ruby-tk-debuginfo-1.8.7.p357-0.28.1 - openSUSE 11.4 (noarch): ruby-doc-html-1.8.7.p357-0.28.1 ruby-doc-ri-1.8.7.p357-0.28.1 References: http://support.novell.com/security/cve/CVE-2012-4464.html http://support.novell.com/security/cve/CVE-2012-4466.html https://bugzilla.novell.com/783511 https://bugzilla.novell.com/783525

1 0

openSUSE-RU-2012:1442-1: enblend-enfuse: workaround vigra bug where arithmetic coded JPEG is always created with libjpeg-turbo
by maintenance＠opensuse.org 05 Nov '12

05 Nov '12

openSUSE Recommended Update: enblend-enfuse: workaround vigra bug where arithmetic coded JPEG is always created with libjpeg-turbo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1442-1 Rating: low References: #786566 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issue for enblend-enfuse: - bnc#786566: workaround vigra bug where arithmetic coded JPEG is always created with libjpeg-turbo Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-762 - openSUSE 12.1: zypper in -t patch openSUSE-2012-762 - openSUSE 11.4: zypper in -t patch openSUSE-2012-762 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): enblend-enfuse-4.0-19.4.1 enblend-enfuse-debuginfo-4.0-19.4.1 enblend-enfuse-debugsource-4.0-19.4.1 - openSUSE 12.1 (i586 x86_64): enblend-enfuse-4.0-13.4.1 enblend-enfuse-debuginfo-4.0-13.4.1 enblend-enfuse-debugsource-4.0-13.4.1 - openSUSE 11.4 (i586 x86_64): enblend-enfuse-4.0-9.1 enblend-enfuse-debuginfo-4.0-9.1 enblend-enfuse-debugsource-4.0-9.1 References: https://bugzilla.novell.com/786566

1 0

openSUSE-RU-2012:1441-1: xorg-x11-server: fix glyph corruption with some drivers
by maintenance＠opensuse.org 05 Nov '12

05 Nov '12

openSUSE Recommended Update: xorg-x11-server: fix glyph corruption with some drivers ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1441-1 Rating: low References: #786153 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for xorg-x11-server: - bnc#786153, fdo#47266: fix glyph corruption with some drivers (like nouveau) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-760 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): xorg-x11-Xvnc-7.6_1.12.3-1.17.1 xorg-x11-Xvnc-debuginfo-7.6_1.12.3-1.17.1 xorg-x11-server-7.6_1.12.3-1.17.1 xorg-x11-server-debuginfo-7.6_1.12.3-1.17.1 xorg-x11-server-debugsource-7.6_1.12.3-1.17.1 xorg-x11-server-extra-7.6_1.12.3-1.17.1 xorg-x11-server-extra-debuginfo-7.6_1.12.3-1.17.1 xorg-x11-server-sdk-7.6_1.12.3-1.17.1 References: https://bugzilla.novell.com/786153

1 0