June 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2012:0735-1: sudo: fixed pam session leak and tls option handling
by maintenance＠opensuse.org 14 Jun '12

14 Jun '12

openSUSE Recommended Update: sudo: fixed pam session leak and tls option handling ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0735-1 Rating: low References: #751453 #760697 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update of sudo fixes two bugs: The pam session could be leaked, e.g. when pam_mount is used. bnc#751453 tls_globalcert parameters were not evaluated correctly. bnc#760697 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-321 - openSUSE 11.4: zypper in -t patch openSUSE-2012-321 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): sudo-1.8.2-2.11.1 sudo-debuginfo-1.8.2-2.11.1 sudo-debugsource-1.8.2-2.11.1 sudo-devel-1.8.2-2.11.1 - openSUSE 11.4 (i586 x86_64): sudo-1.7.6p2-0.16.1 sudo-debuginfo-1.7.6p2-0.16.1 sudo-debugsource-1.7.6p2-0.16.1 References: https://bugzilla.novell.com/751453 https://bugzilla.novell.com/760697

1 0

openSUSE-SU-2012:0731-1: moderate: update for libxml2
by opensuse-security＠opensuse.org 13 Jun '12

13 Jun '12

openSUSE Security Update: update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0731-1 Rating: moderate References: #764538 Cross-References: CVE-2011-3102 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: specially crafted xpath statements could cause an out of bounds memory write Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-320 - openSUSE 11.4: zypper in -t patch openSUSE-2012-320 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libxml2-2.7.8+git20110708-3.8.1 libxml2-debuginfo-2.7.8+git20110708-3.8.1 libxml2-debugsource-2.7.8+git20110708-3.8.1 libxml2-devel-2.7.8+git20110708-3.8.1 - openSUSE 12.1 (x86_64): libxml2-32bit-2.7.8+git20110708-3.8.1 libxml2-debuginfo-32bit-2.7.8+git20110708-3.8.1 libxml2-devel-32bit-2.7.8+git20110708-3.8.1 - openSUSE 12.1 (noarch): libxml2-doc-2.7.8+git20110708-3.8.1 - openSUSE 12.1 (ia64): libxml2-debuginfo-x86-2.7.8+git20110708-3.8.1 libxml2-x86-2.7.8+git20110708-3.8.1 - openSUSE 11.4 (i586 x86_64): libxml2-2.7.8-31.1 libxml2-debuginfo-2.7.8-31.1 libxml2-debugsource-2.7.8-31.1 libxml2-devel-2.7.8-31.1 - openSUSE 11.4 (x86_64): libxml2-32bit-2.7.8-31.1 libxml2-debuginfo-32bit-2.7.8-31.1 libxml2-devel-32bit-2.7.8-31.1 - openSUSE 11.4 (noarch): libxml2-doc-2.7.8-31.1 - openSUSE 11.4 (ia64): libxml2-debuginfo-x86-2.7.8-31.1 libxml2-x86-2.7.8-31.1 References: http://support.novell.com/security/cve/CVE-2011-3102.html https://bugzilla.novell.com/764538

1 0

openSUSE-RU-2012:0728-1: Added missing files for bnx2 (bnc#765514).
by maintenance＠opensuse.org 12 Jun '12

12 Jun '12

openSUSE Recommended Update: Added missing files for bnx2 (bnc#765514). ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0728-1 Rating: low References: Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: Added missing files for bnx2 (bnc#765514). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-317 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): kernel-firmware-20111025git-1.10.1 References:

1 0

openSUSE-RU-2012:0727-1: moderate: mdadm: fixed some race conditions during startup
by maintenance＠opensuse.org 12 Jun '12

12 Jun '12

openSUSE Recommended Update: mdadm: fixed some race conditions during startup ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0727-1 Rating: moderate References: #752869 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: mdadm was updated for 12.1 to fix: - udev-rules.fix: make sure systemd doesn't try to mount array before it is fully assembled. (bnc#752869) - boot.md/mkinitrd-boot.sh: complete any incremental assembly before attempting to assemble arrays. If incremental assembly has partialy assembled degraded arrays, now is the time to start them going. (bnc#752869) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-318 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): mdadm-3.2.2-4.4.1 mdadm-debuginfo-3.2.2-4.4.1 mdadm-debugsource-3.2.2-4.4.1 References: https://bugzilla.novell.com/752869

1 0

openSUSE-RU-2012:0726-1: kdump: Use correct script location in udev rule
by maintenance＠opensuse.org 12 Jun '12

12 Jun '12

openSUSE Recommended Update: kdump: Use correct script location in udev rule ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0726-1 Rating: low References: #762632 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Use correct script location in udev rule of kdump (bnc#762632). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-319 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): kdump-0.8.1-13.4.1 kdump-debuginfo-0.8.1-13.4.1 kdump-debugsource-0.8.1-13.4.1 References: https://bugzilla.novell.com/762632

1 0

openSUSE-SU-2012:0723-1: critical: flash-player: Update to 11.2.202.236 security release
by opensuse-security＠opensuse.org 11 Jun '12

11 Jun '12

openSUSE Security Update: flash-player: Update to 11.2.202.236 security release ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0723-1 Rating: critical References: #761975 #766241 Cross-References: CVE-2012-2034 CVE-2012-2035 CVE-2012-2036 CVE-2012-2037 CVE-2012-2038 CVE-2012-2039 CVE-2012-2040 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.236, fixing lots of bugs and critical security issues. We also disabled inclusion of mms.cfg again, as it caused trouble on hardware accelerated systems. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-315 - openSUSE 11.4: zypper in -t patch openSUSE-2012-315 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): flash-player-11.2.202.236-24.1 flash-player-gnome-11.2.202.236-24.1 flash-player-kde4-11.2.202.236-24.1 - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.236-17.1 flash-player-gnome-11.2.202.236-17.1 flash-player-kde4-11.2.202.236-17.1 References: http://support.novell.com/security/cve/CVE-2012-2034.html http://support.novell.com/security/cve/CVE-2012-2035.html http://support.novell.com/security/cve/CVE-2012-2036.html http://support.novell.com/security/cve/CVE-2012-2037.html http://support.novell.com/security/cve/CVE-2012-2038.html http://support.novell.com/security/cve/CVE-2012-2039.html http://support.novell.com/security/cve/CVE-2012-2040.html https://bugzilla.novell.com/761975 https://bugzilla.novell.com/766241

1 0

openSUSE-SU-2012:0722-1: important: bind: Fixed a remote denial of service
by opensuse-security＠opensuse.org 11 Jun '12

11 Jun '12

openSUSE Security Update: bind: Fixed a remote denial of service ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0722-1 Rating: important References: #765315 Cross-References: CVE-2012-1667 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: A remote denial of service in the bind nameserver via zero length rdata fields was fixed. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-316 - openSUSE 11.4: zypper in -t patch openSUSE-2012-316 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): bind-9.8.1P1-4.11.1 bind-chrootenv-9.8.1P1-4.11.1 bind-debuginfo-9.8.1P1-4.11.1 bind-debugsource-9.8.1P1-4.11.1 bind-devel-9.8.1P1-4.11.1 bind-libs-9.8.1P1-4.11.1 bind-libs-debuginfo-9.8.1P1-4.11.1 bind-lwresd-9.8.1P1-4.11.1 bind-lwresd-debuginfo-9.8.1P1-4.11.1 bind-utils-9.8.1P1-4.11.1 bind-utils-debuginfo-9.8.1P1-4.11.1 - openSUSE 12.1 (x86_64): bind-libs-32bit-9.8.1P1-4.11.1 bind-libs-debuginfo-32bit-9.8.1P1-4.11.1 - openSUSE 12.1 (noarch): bind-doc-9.8.1P1-4.11.1 - openSUSE 12.1 (ia64): bind-libs-debuginfo-x86-9.8.1P1-4.11.1 bind-libs-x86-9.8.1P1-4.11.1 - openSUSE 11.4 (i586 x86_64): bind-9.7.4P1-0.28.1 bind-chrootenv-9.7.4P1-0.28.1 bind-debuginfo-9.7.4P1-0.28.1 bind-debugsource-9.7.4P1-0.28.1 bind-devel-9.7.4P1-0.28.1 bind-libs-9.7.4P1-0.28.1 bind-libs-debuginfo-9.7.4P1-0.28.1 bind-lwresd-9.7.4P1-0.28.1 bind-lwresd-debuginfo-9.7.4P1-0.28.1 bind-utils-9.7.4P1-0.28.1 bind-utils-debuginfo-9.7.4P1-0.28.1 - openSUSE 11.4 (x86_64): bind-libs-32bit-9.7.4P1-0.28.1 bind-libs-debuginfo-32bit-9.7.4P1-0.28.1 - openSUSE 11.4 (noarch): bind-doc-9.7.4P1-0.28.1 - openSUSE 11.4 (ia64): bind-libs-debuginfo-x86-9.7.4P1-0.28.1 bind-libs-x86-9.7.4P1-0.28.1 References: http://support.novell.com/security/cve/CVE-2012-1667.html https://bugzilla.novell.com/765315

1 0

openSUSE-SU-2012:0717-1: moderate: update for pidgin-otr
by opensuse-security＠opensuse.org 08 Jun '12

08 Jun '12

openSUSE Security Update: update for pidgin-otr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0717-1 Rating: moderate References: #762498 Cross-References: CVE-2012-2369 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: pidgin-otr was prone to a format string flaw in log_message_cb Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-314 - openSUSE 11.4: zypper in -t patch openSUSE-2012-314 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): pidgin-otr-3.2.0-151.5.1 pidgin-otr-debuginfo-3.2.0-151.5.1 pidgin-otr-debugsource-3.2.0-151.5.1 - openSUSE 11.4 (i586 x86_64): pidgin-otr-3.2.0-151.1 pidgin-otr-debuginfo-3.2.0-151.1 pidgin-otr-debugsource-3.2.0-151.1 References: http://support.novell.com/security/cve/CVE-2012-2369.html https://bugzilla.novell.com/762498

1 0

openSUSE-RU-2012:0697-1: softwaremgmt: Update for 2012/04
by maintenance＠opensuse.org 05 Jun '12

05 Jun '12

openSUSE Recommended Update: softwaremgmt: Update for 2012/04 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0697-1 Rating: low References: #679322 #710872 #735016 #743634 #748144 #749418 #751221 #752497 #754286 #755239 #755815 #756192 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has 12 recommended fixes can now be installed. Description: This softwaremgmt update fixes the following issues: zypper: - Update zypper-po.tar.bz2 - 755239: Improve source package related messages upon install and remove - 710872: Show note about possibly incomplete 'zypper ps' if not run as root - 748144: Fix augeas lense enforcing a non empty anonymous section - 735016: Fix eating terminal lines - 756192: Fix typo libzypp: - Update zypp-po.tar.bz2 - 755239: Support (source)package download by non-root user - Fix buddy handling in solver results - 754286: Don't cache defaultCandidate as it depends on solver::allowVendorChange flag - 751221: Cleanup orphaned media attach points - 752497: Parse proxy user/pass from url - 679322: Force libproxy into using "/etc/sysconfig/proxy" if it exists - 749418: Apply soft locks by name and not per package - 755239: Try to create a missing destination dir before switching to tmp space - 755815: Always consider (block) devices passed as url option - 755815: Fix lost device info when changeing CD/DVD libsolv: - backport cleandeps changes from master - improve obsolete pruning in the case that there is an obsoletes cycle - prune to installed packages so that packages don't change if there is an obsoletes cycle - support severity/rights/updated in updateinfo.xml - 743634: add findutils to the requires of libsolv-tools libzypp-bindings: - fix testcases libzypp-testsuite-tools - add libtool as buildrequire to avoid implicit dependency Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-313 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libsolv-debugsource-0.0.1-3.6.1 libsolv-demo-0.0.1-3.6.1 libsolv-demo-debuginfo-0.0.1-3.6.1 libsolv-devel-0.0.1-3.6.1 libsolv-devel-debuginfo-0.0.1-3.6.1 libsolv-tools-0.0.1-3.6.1 libsolv-tools-debuginfo-0.0.1-3.6.1 libzypp-10.4.4-1.14.1 libzypp-bindings-debugsource-0.5.10-2.6.1 libzypp-debuginfo-10.4.4-1.14.1 libzypp-debugsource-10.4.4-1.14.1 libzypp-devel-10.4.4-1.14.1 libzypp-testsuite-tools-4.2.11-10.7.1 perl-solv-0.0.1-3.6.1 perl-solv-debuginfo-0.0.1-3.6.1 perl-zypp-0.5.10-2.6.1 perl-zypp-debuginfo-0.5.10-2.6.1 python-solv-0.0.1-3.6.1 python-solv-debuginfo-0.0.1-3.6.1 python-zypp-0.5.10-2.6.1 python-zypp-debuginfo-0.5.10-2.6.1 ruby-solv-0.0.1-3.6.1 ruby-solv-debuginfo-0.0.1-3.6.1 ruby-zypp-0.5.10-2.6.1 ruby-zypp-debuginfo-0.5.10-2.6.1 zypper-1.6.25-5.19.1 zypper-debuginfo-1.6.25-5.19.1 zypper-debugsource-1.6.25-5.19.1 - openSUSE 12.1 (noarch): libzypp-testsuite-tools-data-4.2.11-10.7.1 zypper-log-1.6.25-5.19.1 References: https://bugzilla.novell.com/679322 https://bugzilla.novell.com/710872 https://bugzilla.novell.com/735016 https://bugzilla.novell.com/743634 https://bugzilla.novell.com/748144 https://bugzilla.novell.com/749418 https://bugzilla.novell.com/751221 https://bugzilla.novell.com/752497 https://bugzilla.novell.com/754286 https://bugzilla.novell.com/755239 https://bugzilla.novell.com/755815 https://bugzilla.novell.com/756192

1 0

openSUSE-RU-2012:0696-1: moderate: softwaremgmt: Update for 2012/04
by maintenance＠opensuse.org 05 Jun '12

05 Jun '12

openSUSE Recommended Update: softwaremgmt: Update for 2012/04 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0696-1 Rating: moderate References: #679322 #710269 #716972 #719690 #740764 #749418 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This softwaremgmt update fixes the following issues: zypper: - Update zypper-po.tar.bz2 - 719690: Return nonzero (104 - INF_CAP_NOT_FOUND) when query matches no package libzypp: - Update zypp-po.tar.bz2 - 679322: Force libproxy into using "/etc/sysconfig/proxy" if it exists - 740764: Correctly use user:pass directly embedded in a proxy url - 749418: Apply soft locks by name and not per package - 716972: CheckAccessDeleted: avoid duplicate entries for the same PID - 710269: Fix mount entry comparison libzypp-bindings: - disable use of %jobs to avoid swapping during compilation libsatsolver: - updated specfile libqdialogsolver1: - updated specfile libzypp-testsuite-tools: - updated specfile Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-312 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libqdialogsolver1-1.3.0-11.2 libqdialogsolver1-debuginfo-1.3.0-11.2 libqdialogsolver1-debugsource-1.3.0-11.2 libqdialogsolver1-devel-1.3.0-11.2 libsatsolver-debugsource-0.16.3-28.1 libsatsolver-demo-0.16.3-28.1 libsatsolver-demo-debuginfo-0.16.3-28.1 libsatsolver-devel-0.16.3-28.1 libsatsolver-devel-debuginfo-0.16.3-28.1 libzypp-8.13.5-15.1 libzypp-bindings-debugsource-0.5.9-9.1 libzypp-debuginfo-8.13.5-15.1 libzypp-debugsource-8.13.5-15.1 libzypp-devel-8.13.5-15.1 libzypp-testsuite-tools-4.2.11-9.1 perl-satsolver-0.16.3-28.1 perl-satsolver-debuginfo-0.16.3-28.1 perl-zypp-0.5.9-9.1 perl-zypp-debuginfo-0.5.9-9.1 python-satsolver-0.16.3-28.1 python-satsolver-debuginfo-0.16.3-28.1 python-zypp-0.5.9-9.1 python-zypp-debuginfo-0.5.9-9.1 ruby-satsolver-0.16.3-28.1 ruby-satsolver-debuginfo-0.16.3-28.1 ruby-zypp-0.5.9-9.1 ruby-zypp-debuginfo-0.5.9-9.1 satsolver-tools-0.16.3-28.1 satsolver-tools-debuginfo-0.16.3-28.1 zypper-1.5.9-12.1 zypper-debuginfo-1.5.9-12.1 zypper-debugsource-1.5.9-12.1 - openSUSE 11.4 (noarch): libzypp-testsuite-tools-data-4.2.11-9.1 References: https://bugzilla.novell.com/679322 https://bugzilla.novell.com/710269 https://bugzilla.novell.com/716972 https://bugzilla.novell.com/719690 https://bugzilla.novell.com/740764 https://bugzilla.novell.com/749418

1 0