May 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2013:0849-1: moderate: update for gpg2
by opensuse-security＠opensuse.org 31 May '13

31 May '13

openSUSE Security Update: update for gpg2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0849-1 Rating: moderate References: #780943 #798465 Cross-References: CVE-2012-6085 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update of gpg2 fixes two security issues: * fix for CVE-2012-6085 (bnc#798465) added gpg2-CVE-2012-6085.patch * fix for bnc#780943 added gpg2-set_umask_before_open_outfile.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-455 - openSUSE 12.1: zypper in -t patch openSUSE-2013-455 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): gpg2-2.0.19-2.4.1 gpg2-debuginfo-2.0.19-2.4.1 gpg2-debugsource-2.0.19-2.4.1 - openSUSE 12.2 (noarch): gpg2-lang-2.0.19-2.4.1 - openSUSE 12.1 (i586 x86_64): gpg2-2.0.18-7.4.1 gpg2-debuginfo-2.0.18-7.4.1 gpg2-debugsource-2.0.18-7.4.1 - openSUSE 12.1 (noarch): gpg2-lang-2.0.18-7.4.1 References: http://support.novell.com/security/cve/CVE-2012-6085.html https://bugzilla.novell.com/780943 https://bugzilla.novell.com/798465

1 0

openSUSE-SU-2013:0848-1: moderate: update for wireshark
by opensuse-security＠opensuse.org 31 May '13

31 May '13

openSUSE Security Update: update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0848-1 Rating: moderate References: #820566 Cross-References: CVE-2013-2486 CVE-2013-2487 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of wireshark includes several security and bug fixes. [bnc#820566] + vulnerabilities fixed: * The RELOAD dissector could go into an infinite loop. wnpa-sec-2013-23 CVE-2013-2486 CVE-2013-2487 * The GTPv2 dissector could crash. wnpa-sec-2013-24 * The ASN.1 BER dissector could crash. wnpa-sec-2013-25 * The PPP CCP dissector could crash. wnpa-sec-2013-26 * The DCP ETSI dissector could crash. wnpa-sec-2013-27 * The MPEG DSM-CC dissector could crash. wnpa-sec-2013-28 * The Websocket dissector could crash. wnpa-sec-2013-29 * The MySQL dissector could go into an infinite loop. wnpa-sec-2013-30 * The ETCH dissector could go into a large loop. wnpa-sec-2013-31 + Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.8.7.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-453 - openSUSE 12.1: zypper in -t patch openSUSE-2013-453 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): wireshark-1.8.7-1.27.1 wireshark-debuginfo-1.8.7-1.27.1 wireshark-debugsource-1.8.7-1.27.1 wireshark-devel-1.8.7-1.27.1 - openSUSE 12.1 (i586 x86_64): wireshark-1.8.7-3.45.1 wireshark-debuginfo-1.8.7-3.45.1 wireshark-debugsource-1.8.7-3.45.1 wireshark-devel-1.8.7-3.45.1 References: http://support.novell.com/security/cve/CVE-2013-2486.html http://support.novell.com/security/cve/CVE-2013-2487.html https://bugzilla.novell.com/820566

1 0

openSUSE-SU-2013:0847-1: important: kernel: security and bugfix update
by opensuse-security＠opensuse.org 31 May '13

31 May '13

openSUSE Security Update: kernel: security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0847-1 Rating: important References: #806138 #806976 #806980 #808829 #809748 #813735 #815745 #819519 #819789 Cross-References: CVE-2013-0913 CVE-2013-1767 CVE-2013-1774 CVE-2013-1796 CVE-2013-1797 CVE-2013-1798 CVE-2013-2094 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has two fixes is now available. Description: The openSUSE 12.1 kernel was updated to fix a severe secrutiy issue and various bugs. Security issues fixed: CVE-2013-2094: The perf_swevent_init function in kernel/events/core.c in the Linux kernel used an incorrect integer data type, which allowed local users to gain privileges via a crafted perf_event_open system call. CVE-2013-1774: The chase_port function in drivers/usb/serial/io_ti.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) via an attempted /dev/ttyUSB read or write operation on a disconnected Edgeport USB serial converter. CVE-2013-1928: The do_video_set_spu_palette function in fs/compat_ioctl.c in the Linux kernel lacked a certain error check, which might have allowed local users to obtain sensitive information from kernel stack memory via a crafted VIDEO_SET_SPU_PALETTE ioctl call on a /dev/dvb device. CVE-2013-1796: The kvm_set_msr_common function in arch/x86/kvm/x86.c in the Linux kernel did not ensure a required time_page alignment during an MSR_KVM_SYSTEM_TIME operation, which allowed guest OS users to cause a denial of service (buffer overflow and host OS memory corruption) or possibly have unspecified other impact via a crafted application. CVE-2013-1797: Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel allowed guest OS users to cause a denial of service (host OS memory corruption) or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address (GPA) in (1) movable or (2) removable memory during an MSR_KVM_SYSTEM_TIME kvm_set_msr_common operation. CVE-2013-1798: The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel did not properly handle a certain combination of invalid IOAPIC_REG_SELECT and IOAPIC_REG_WINDOW operations, which allowed guest OS users to obtain sensitive information from host OS memory or cause a denial of service (host OS OOPS) via a crafted application. CVE-2013-1767: Use-after-free vulnerability in the shmem_remount_fs function in mm/shmem.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (system crash) by remounting a tmpfs filesystem without specifying a required mpol (aka mempolicy) mount option. CVE-2013-0913: Integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel allowed local users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted application that triggers many relocation copies, and potentially leads to a race condition. Bugs fixed: - qlge: fix dma map leak when the last chunk is not allocated (bnc#819519). - TTY: fix atime/mtime regression (bnc#815745). - fs/compat_ioctl.c: VIDEO_SET_SPU_PALETTE missing error check (bnc#813735). - USB: io_ti: Fix NULL dereference in chase_port() (bnc#806976, CVE-2013-1774). - KVM: Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache_init (bnc#806980 CVE-2013-1797). - KVM: Fix bounds checking in ioapic indirect register read (bnc#806980 CVE-2013-1798). - KVM: Fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (bnc#806980 CVE-2013-1796). - kabi/severities: Allow kvm module abi changes - modules are self consistent - loopdev: fix a deadlock (bnc#809748). - block: use i_size_write() in bd_set_size() (bnc#809748). - drm/i915: bounds check execbuffer relocation count (bnc#808829,CVE-2013-0913). - tmpfs: fix use-after-free of mempolicy object (bnc#806138, CVE-2013-1767). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-454 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): kernel-debug-3.1.10-1.23.1.g8645a72 kernel-debug-base-3.1.10-1.23.1.g8645a72 kernel-debug-base-debuginfo-3.1.10-1.23.1.g8645a72 kernel-debug-debuginfo-3.1.10-1.23.1.g8645a72 kernel-debug-debugsource-3.1.10-1.23.1.g8645a72 kernel-debug-devel-3.1.10-1.23.1.g8645a72 kernel-debug-devel-debuginfo-3.1.10-1.23.1.g8645a72 kernel-default-3.1.10-1.23.1.g8645a72 kernel-default-base-3.1.10-1.23.1.g8645a72 kernel-default-base-debuginfo-3.1.10-1.23.1.g8645a72 kernel-default-debuginfo-3.1.10-1.23.1.g8645a72 kernel-default-debugsource-3.1.10-1.23.1.g8645a72 kernel-default-devel-3.1.10-1.23.1.g8645a72 kernel-default-devel-debuginfo-3.1.10-1.23.1.g8645a72 kernel-desktop-3.1.10-1.23.1.g8645a72 kernel-desktop-base-3.1.10-1.23.1.g8645a72 kernel-desktop-base-debuginfo-3.1.10-1.23.1.g8645a72 kernel-desktop-debuginfo-3.1.10-1.23.1.g8645a72 kernel-desktop-debugsource-3.1.10-1.23.1.g8645a72 kernel-desktop-devel-3.1.10-1.23.1.g8645a72 kernel-desktop-devel-debuginfo-3.1.10-1.23.1.g8645a72 kernel-ec2-3.1.10-1.23.1.g8645a72 kernel-ec2-base-3.1.10-1.23.1.g8645a72 kernel-ec2-base-debuginfo-3.1.10-1.23.1.g8645a72 kernel-ec2-debuginfo-3.1.10-1.23.1.g8645a72 kernel-ec2-debugsource-3.1.10-1.23.1.g8645a72 kernel-ec2-devel-3.1.10-1.23.1.g8645a72 kernel-ec2-devel-debuginfo-3.1.10-1.23.1.g8645a72 kernel-ec2-extra-3.1.10-1.23.1.g8645a72 kernel-ec2-extra-debuginfo-3.1.10-1.23.1.g8645a72 kernel-syms-3.1.10-1.23.1.g8645a72 kernel-trace-3.1.10-1.23.1.g8645a72 kernel-trace-base-3.1.10-1.23.1.g8645a72 kernel-trace-base-debuginfo-3.1.10-1.23.1.g8645a72 kernel-trace-debuginfo-3.1.10-1.23.1.g8645a72 kernel-trace-debugsource-3.1.10-1.23.1.g8645a72 kernel-trace-devel-3.1.10-1.23.1.g8645a72 kernel-trace-devel-debuginfo-3.1.10-1.23.1.g8645a72 kernel-vanilla-3.1.10-1.23.1.g8645a72 kernel-vanilla-base-3.1.10-1.23.1.g8645a72 kernel-vanilla-base-debuginfo-3.1.10-1.23.1.g8645a72 kernel-vanilla-debuginfo-3.1.10-1.23.1.g8645a72 kernel-vanilla-debugsource-3.1.10-1.23.1.g8645a72 kernel-vanilla-devel-3.1.10-1.23.1.g8645a72 kernel-vanilla-devel-debuginfo-3.1.10-1.23.1.g8645a72 kernel-xen-3.1.10-1.23.1.g8645a72 kernel-xen-base-3.1.10-1.23.1.g8645a72 kernel-xen-base-debuginfo-3.1.10-1.23.1.g8645a72 kernel-xen-debuginfo-3.1.10-1.23.1.g8645a72 kernel-xen-debugsource-3.1.10-1.23.1.g8645a72 kernel-xen-devel-3.1.10-1.23.1.g8645a72 kernel-xen-devel-debuginfo-3.1.10-1.23.1.g8645a72 - openSUSE 12.1 (noarch): kernel-devel-3.1.10-1.23.1.g8645a72 kernel-docs-3.1.10-1.23.2.g8645a72 kernel-source-3.1.10-1.23.1.g8645a72 kernel-source-vanilla-3.1.10-1.23.1.g8645a72 - openSUSE 12.1 (i586): kernel-pae-3.1.10-1.23.1.g8645a72 kernel-pae-base-3.1.10-1.23.1.g8645a72 kernel-pae-base-debuginfo-3.1.10-1.23.1.g8645a72 kernel-pae-debuginfo-3.1.10-1.23.1.g8645a72 kernel-pae-debugsource-3.1.10-1.23.1.g8645a72 kernel-pae-devel-3.1.10-1.23.1.g8645a72 kernel-pae-devel-debuginfo-3.1.10-1.23.1.g8645a72 References: http://support.novell.com/security/cve/CVE-2013-0913.html http://support.novell.com/security/cve/CVE-2013-1767.html http://support.novell.com/security/cve/CVE-2013-1774.html http://support.novell.com/security/cve/CVE-2013-1796.html http://support.novell.com/security/cve/CVE-2013-1797.html http://support.novell.com/security/cve/CVE-2013-1798.html http://support.novell.com/security/cve/CVE-2013-2094.html https://bugzilla.novell.com/806138 https://bugzilla.novell.com/806976 https://bugzilla.novell.com/806980 https://bugzilla.novell.com/808829 https://bugzilla.novell.com/809748 https://bugzilla.novell.com/813735 https://bugzilla.novell.com/815745 https://bugzilla.novell.com/819519 https://bugzilla.novell.com/819789

1 0

openSUSE-SU-2013:0834-1: important: MozillaThunderbird: update to 17.0.6
by opensuse-security＠opensuse.org 27 May '13

27 May '13

openSUSE Security Update: MozillaThunderbird: update to 17.0.6 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0834-1 Rating: important References: #819204 Cross-References: CVE-2013-0801 CVE-2013-1669 CVE-2013-1670 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: MozillaThunderbird was updated to security update Thunderbird 17.0.6 (bnc#819204): * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards * MFSA 2013-42/CVE-2013-1670 (bmo#853709) Privileged access for content level constructor * MFSA 2013-46/CVE-2013-1674 (bmo#860971) Use-after-free with video and onresize event * MFSA 2013-47/CVE-2013-1675 (bmo#866825) Uninitialized functions in DOMSVGZoomEvent * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/ CVE-2013-1679/CVE-2013-1680/CVE-2013-1681 Memory corruption found using Address Sanitizer Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-447 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): MozillaThunderbird-17.0.6-49.43.1 MozillaThunderbird-buildsymbols-17.0.6-49.43.1 MozillaThunderbird-debuginfo-17.0.6-49.43.1 MozillaThunderbird-debugsource-17.0.6-49.43.1 MozillaThunderbird-devel-17.0.6-49.43.1 MozillaThunderbird-devel-debuginfo-17.0.6-49.43.1 MozillaThunderbird-translations-common-17.0.6-49.43.1 MozillaThunderbird-translations-other-17.0.6-49.43.1 enigmail-1.5.1+17.0.6-49.43.1 enigmail-debuginfo-1.5.1+17.0.6-49.43.1 References: http://support.novell.com/security/cve/CVE-2013-0801.html http://support.novell.com/security/cve/CVE-2013-1669.html http://support.novell.com/security/cve/CVE-2013-1670.html http://support.novell.com/security/cve/CVE-2013-1674.html http://support.novell.com/security/cve/CVE-2013-1675.html http://support.novell.com/security/cve/CVE-2013-1676.html http://support.novell.com/security/cve/CVE-2013-1677.html http://support.novell.com/security/cve/CVE-2013-1678.html http://support.novell.com/security/cve/CVE-2013-1679.html http://support.novell.com/security/cve/CVE-2013-1680.html http://support.novell.com/security/cve/CVE-2013-1681.html https://bugzilla.novell.com/819204

1 0

openSUSE-RU-2013:0833-1: phonon: Fixes loading of plugins
by maintenance＠opensuse.org 27 May '13

27 May '13

openSUSE Recommended Update: phonon: Fixes loading of plugins ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0833-1 Rating: low References: Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issue with phonon: - Fixes loading of plugins outside of KDE sessions although the plugins are installed in the KDE directory Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-445 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libphonon4-4.6.0-3.5.1 libphonon4-debuginfo-4.6.0-3.5.1 phonon-debugsource-4.6.0-3.5.1 phonon-devel-4.6.0-3.5.1 phonon-devel-debuginfo-4.6.0-3.5.1 - openSUSE 12.2 (x86_64): libphonon4-32bit-4.6.0-3.5.1 libphonon4-debuginfo-32bit-4.6.0-3.5.1 References:

1 0

openSUSE-RU-2013:0832-1: Rebuild kernel-kmps and perf against the current kernel to fix conflicts
by maintenance＠opensuse.org 27 May '13

27 May '13

openSUSE Recommended Update: Rebuild kernel-kmps and perf against the current kernel to fix conflicts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0832-1 Rating: low References: Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update rebuilds the kernel-kmps and perf against the current kernel to fix conflicts Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-444 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): cloop-2.639-6.6.1 cloop-debuginfo-2.639-6.6.1 cloop-debugsource-2.639-6.6.1 cloop-kmp-default-2.639_k3.4.33_2.24-6.6.1 cloop-kmp-default-debuginfo-2.639_k3.4.33_2.24-6.6.1 cloop-kmp-desktop-2.639_k3.4.33_2.24-6.6.1 cloop-kmp-desktop-debuginfo-2.639_k3.4.33_2.24-6.6.1 cloop-kmp-xen-2.639_k3.4.33_2.24-6.6.1 cloop-kmp-xen-debuginfo-2.639_k3.4.33_2.24-6.6.1 crash-6.0.7-2.7.1 crash-debuginfo-6.0.7-2.7.1 crash-debugsource-6.0.7-2.7.1 crash-devel-6.0.7-2.7.1 crash-doc-6.0.7-2.7.1 crash-gcore-6.0.7-2.7.1 crash-gcore-debuginfo-6.0.7-2.7.1 crash-kmp-default-6.0.7_k3.4.33_2.24-2.7.1 crash-kmp-default-debuginfo-6.0.7_k3.4.33_2.24-2.7.1 crash-kmp-desktop-6.0.7_k3.4.33_2.24-2.7.1 crash-kmp-desktop-debuginfo-6.0.7_k3.4.33_2.24-2.7.1 crash-kmp-xen-6.0.7_k3.4.33_2.24-2.7.1 crash-kmp-xen-debuginfo-6.0.7_k3.4.33_2.24-2.7.1 crash-sial-6.0.7-2.7.1 crash-sial-debuginfo-6.0.7-2.7.1 hdjmod-debugsource-1.28-10.6.1 hdjmod-kmp-default-1.28_k3.4.33_2.24-10.6.1 hdjmod-kmp-default-debuginfo-1.28_k3.4.33_2.24-10.6.1 hdjmod-kmp-desktop-1.28_k3.4.33_2.24-10.6.1 hdjmod-kmp-desktop-debuginfo-1.28_k3.4.33_2.24-10.6.1 hdjmod-kmp-xen-1.28_k3.4.33_2.24-10.6.1 hdjmod-kmp-xen-debuginfo-1.28_k3.4.33_2.24-10.6.1 ipset-6.12-2.6.1 ipset-debuginfo-6.12-2.6.1 ipset-debugsource-6.12-2.6.1 ipset-devel-6.12-2.6.1 ipset-kmp-default-6.12_k3.4.33_2.24-2.6.1 ipset-kmp-default-debuginfo-6.12_k3.4.33_2.24-2.6.1 ipset-kmp-desktop-6.12_k3.4.33_2.24-2.6.1 ipset-kmp-desktop-debuginfo-6.12_k3.4.33_2.24-2.6.1 ipset-kmp-xen-6.12_k3.4.33_2.24-2.6.1 ipset-kmp-xen-debuginfo-6.12_k3.4.33_2.24-2.6.1 libipset2-6.12-2.6.1 libipset2-debuginfo-6.12-2.6.1 libvmtools-devel-8.8.2-3.6.4 libvmtools0-8.8.2-3.6.4 libvmtools0-debuginfo-8.8.2-3.6.4 ndiswrapper-1.57.99-2.6.1 ndiswrapper-debuginfo-1.57.99-2.6.1 ndiswrapper-debugsource-1.57.99-2.6.1 ndiswrapper-kmp-default-1.57.99_k3.4.33_2.24-2.6.1 ndiswrapper-kmp-default-debuginfo-1.57.99_k3.4.33_2.24-2.6.1 ndiswrapper-kmp-desktop-1.57.99_k3.4.33_2.24-2.6.1 ndiswrapper-kmp-desktop-debuginfo-1.57.99_k3.4.33_2.24-2.6.1 omnibook-debugsource-20110911-5.6.1 omnibook-kmp-default-20110911_k3.4.33_2.24-5.6.1 omnibook-kmp-default-debuginfo-20110911_k3.4.33_2.24-5.6.1 omnibook-kmp-desktop-20110911_k3.4.33_2.24-5.6.1 omnibook-kmp-desktop-debuginfo-20110911_k3.4.33_2.24-5.6.1 omnibook-kmp-xen-20110911_k3.4.33_2.24-5.6.1 omnibook-kmp-xen-debuginfo-20110911_k3.4.33_2.24-5.6.1 open-vm-tools-8.8.2-3.6.4 open-vm-tools-debuginfo-8.8.2-3.6.4 open-vm-tools-debugsource-8.8.2-3.6.4 open-vm-tools-gui-8.8.2-3.6.4 open-vm-tools-gui-debuginfo-8.8.2-3.6.4 pcfclock-0.44-253.6.1 pcfclock-debuginfo-0.44-253.6.1 pcfclock-debugsource-0.44-253.6.1 pcfclock-kmp-default-0.44_k3.4.33_2.24-253.6.1 pcfclock-kmp-default-debuginfo-0.44_k3.4.33_2.24-253.6.1 pcfclock-kmp-desktop-0.44_k3.4.33_2.24-253.6.1 pcfclock-kmp-desktop-debuginfo-0.44_k3.4.33_2.24-253.6.1 perf-3.4.33-20.4.1 perf-debuginfo-3.4.33-20.4.1 perf-debugsource-3.4.33-20.4.1 python-virtualbox-4.1.22-1.14.6 python-virtualbox-debuginfo-4.1.22-1.14.6 vhba-kmp-debugsource-20120422-2.6.1 vhba-kmp-default-20120422_k3.4.33_2.24-2.6.1 vhba-kmp-default-debuginfo-20120422_k3.4.33_2.24-2.6.1 vhba-kmp-desktop-20120422_k3.4.33_2.24-2.6.1 vhba-kmp-desktop-debuginfo-20120422_k3.4.33_2.24-2.6.1 vhba-kmp-xen-20120422_k3.4.33_2.24-2.6.1 vhba-kmp-xen-debuginfo-20120422_k3.4.33_2.24-2.6.1 virtualbox-4.1.22-1.14.6 virtualbox-debuginfo-4.1.22-1.14.6 virtualbox-debugsource-4.1.22-1.14.6 virtualbox-devel-4.1.22-1.14.6 virtualbox-guest-kmp-default-4.1.22_k3.4.33_2.24-1.14.6 virtualbox-guest-kmp-default-debuginfo-4.1.22_k3.4.33_2.24-1.14.6 virtualbox-guest-kmp-desktop-4.1.22_k3.4.33_2.24-1.14.6 virtualbox-guest-kmp-desktop-debuginfo-4.1.22_k3.4.33_2.24-1.14.6 virtualbox-guest-tools-4.1.22-1.14.6 virtualbox-guest-tools-debuginfo-4.1.22-1.14.6 virtualbox-guest-x11-4.1.22-1.14.6 virtualbox-guest-x11-debuginfo-4.1.22-1.14.6 virtualbox-host-kmp-default-4.1.22_k3.4.33_2.24-1.14.6 virtualbox-host-kmp-default-debuginfo-4.1.22_k3.4.33_2.24-1.14.6 virtualbox-host-kmp-desktop-4.1.22_k3.4.33_2.24-1.14.6 virtualbox-host-kmp-desktop-debuginfo-4.1.22_k3.4.33_2.24-1.14.6 virtualbox-qt-4.1.22-1.14.6 virtualbox-qt-debuginfo-4.1.22-1.14.6 virtualbox-websrv-4.1.22-1.14.6 virtualbox-websrv-debuginfo-4.1.22-1.14.6 vmware-guest-kmp-default-8.8.2_k3.4.33_2.24-3.6.4 vmware-guest-kmp-default-debuginfo-8.8.2_k3.4.33_2.24-3.6.4 vmware-guest-kmp-desktop-8.8.2_k3.4.33_2.24-3.6.4 vmware-guest-kmp-desktop-debuginfo-8.8.2_k3.4.33_2.24-3.6.4 xen-debugsource-4.1.4_02-5.25.6 xen-devel-4.1.4_02-5.25.6 xen-kmp-default-4.1.4_02_k3.4.33_2.24-5.25.6 xen-kmp-default-debuginfo-4.1.4_02_k3.4.33_2.24-5.25.6 xen-kmp-desktop-4.1.4_02_k3.4.33_2.24-5.25.6 xen-kmp-desktop-debuginfo-4.1.4_02_k3.4.33_2.24-5.25.6 xen-libs-4.1.4_02-5.25.6 xen-libs-debuginfo-4.1.4_02-5.25.6 xen-tools-domU-4.1.4_02-5.25.6 xen-tools-domU-debuginfo-4.1.4_02-5.25.6 xtables-addons-1.42-2.13.1 xtables-addons-debuginfo-1.42-2.13.1 xtables-addons-debugsource-1.42-2.13.1 xtables-addons-kmp-default-1.42_k3.4.33_2.24-2.13.1 xtables-addons-kmp-default-debuginfo-1.42_k3.4.33_2.24-2.13.1 xtables-addons-kmp-desktop-1.42_k3.4.33_2.24-2.13.1 xtables-addons-kmp-desktop-debuginfo-1.42_k3.4.33_2.24-2.13.1 xtables-addons-kmp-xen-1.42_k3.4.33_2.24-2.13.1 xtables-addons-kmp-xen-debuginfo-1.42_k3.4.33_2.24-2.13.1 - openSUSE 12.2 (x86_64): xen-4.1.4_02-5.25.6 xen-doc-html-4.1.4_02-5.25.6 xen-doc-pdf-4.1.4_02-5.25.6 xen-libs-32bit-4.1.4_02-5.25.6 xen-libs-debuginfo-32bit-4.1.4_02-5.25.6 xen-tools-4.1.4_02-5.25.6 xen-tools-debuginfo-4.1.4_02-5.25.6 - openSUSE 12.2 (i586): cloop-kmp-pae-2.639_k3.4.33_2.24-6.6.1 cloop-kmp-pae-debuginfo-2.639_k3.4.33_2.24-6.6.1 crash-kmp-pae-6.0.7_k3.4.33_2.24-2.7.1 crash-kmp-pae-debuginfo-6.0.7_k3.4.33_2.24-2.7.1 hdjmod-kmp-pae-1.28_k3.4.33_2.24-10.6.1 hdjmod-kmp-pae-debuginfo-1.28_k3.4.33_2.24-10.6.1 ipset-kmp-pae-6.12_k3.4.33_2.24-2.6.1 ipset-kmp-pae-debuginfo-6.12_k3.4.33_2.24-2.6.1 ndiswrapper-kmp-pae-1.57.99_k3.4.33_2.24-2.6.1 ndiswrapper-kmp-pae-debuginfo-1.57.99_k3.4.33_2.24-2.6.1 omnibook-kmp-pae-20110911_k3.4.33_2.24-5.6.1 omnibook-kmp-pae-debuginfo-20110911_k3.4.33_2.24-5.6.1 pcfclock-kmp-pae-0.44_k3.4.33_2.24-253.6.1 pcfclock-kmp-pae-debuginfo-0.44_k3.4.33_2.24-253.6.1 vhba-kmp-pae-20120422_k3.4.33_2.24-2.6.1 vhba-kmp-pae-debuginfo-20120422_k3.4.33_2.24-2.6.1 virtualbox-guest-kmp-pae-4.1.22_k3.4.33_2.24-1.14.6 virtualbox-guest-kmp-pae-debuginfo-4.1.22_k3.4.33_2.24-1.14.6 virtualbox-host-kmp-pae-4.1.22_k3.4.33_2.24-1.14.6 virtualbox-host-kmp-pae-debuginfo-4.1.22_k3.4.33_2.24-1.14.6 vmware-guest-kmp-pae-8.8.2_k3.4.33_2.24-3.6.4 vmware-guest-kmp-pae-debuginfo-8.8.2_k3.4.33_2.24-3.6.4 xen-kmp-pae-4.1.4_02_k3.4.33_2.24-5.25.6 xen-kmp-pae-debuginfo-4.1.4_02_k3.4.33_2.24-5.25.6 xtables-addons-kmp-pae-1.42_k3.4.33_2.24-2.13.1 xtables-addons-kmp-pae-debuginfo-1.42_k3.4.33_2.24-2.13.1 References:

1 0

openSUSE-SU-2013:0831-1: important: xulrunner to 17.0.6esr
by opensuse-security＠opensuse.org 27 May '13

27 May '13

openSUSE Security Update: xulrunner to 17.0.6esr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0831-1 Rating: important References: #819204 Cross-References: CVE-2013-0801 CVE-2013-1669 CVE-2013-1670 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: Mozilla xulrunner was updated to 17.0.6esr (bnc#819204) * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards * MFSA 2013-42/CVE-2013-1670 (bmo#853709) Privileged access for content level constructor * MFSA 2013-46/CVE-2013-1674 (bmo#860971) Use-after-free with video and onresize event * MFSA 2013-47/CVE-2013-1675 (bmo#866825) Uninitialized functions in DOMSVGZoomEvent * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/ CVE-2013-1679/CVE-2013-1680/CVE-2013-1681 Memory corruption found using Address Sanitizer Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-448 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): mozilla-js-17.0.6-2.42.1 mozilla-js-debuginfo-17.0.6-2.42.1 xulrunner-17.0.6-2.42.1 xulrunner-buildsymbols-17.0.6-2.42.1 xulrunner-debuginfo-17.0.6-2.42.1 xulrunner-debugsource-17.0.6-2.42.1 xulrunner-devel-17.0.6-2.42.1 xulrunner-devel-debuginfo-17.0.6-2.42.1 - openSUSE 12.2 (x86_64): mozilla-js-32bit-17.0.6-2.42.1 mozilla-js-debuginfo-32bit-17.0.6-2.42.1 xulrunner-32bit-17.0.6-2.42.1 xulrunner-debuginfo-32bit-17.0.6-2.42.1 References: http://support.novell.com/security/cve/CVE-2013-0801.html http://support.novell.com/security/cve/CVE-2013-1669.html http://support.novell.com/security/cve/CVE-2013-1670.html http://support.novell.com/security/cve/CVE-2013-1674.html http://support.novell.com/security/cve/CVE-2013-1675.html http://support.novell.com/security/cve/CVE-2013-1676.html http://support.novell.com/security/cve/CVE-2013-1677.html http://support.novell.com/security/cve/CVE-2013-1678.html http://support.novell.com/security/cve/CVE-2013-1679.html http://support.novell.com/security/cve/CVE-2013-1680.html http://support.novell.com/security/cve/CVE-2013-1681.html https://bugzilla.novell.com/819204

1 0

openSUSE-RU-2013:0829-2: important: duplicity: fixed data corruption when resuming interrupted backup
by maintenance＠opensuse.org 27 May '13

27 May '13

openSUSE Recommended Update: duplicity: fixed data corruption when resuming interrupted backup ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0829-2 Rating: important References: #813319 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Duplicity was upgraded to prevent data corruption when resuming an interrupted backup. If you use the DejaDup backup tool, consider switching to a new backup location to ensure restorations from the new location are safe. This affects both encrypted and unencrypted backups. (bnc#813319) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-443 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): duplicity-0.6.18-2.4.1 duplicity-debuginfo-0.6.18-2.4.1 duplicity-debugsource-0.6.18-2.4.1 References: https://bugzilla.novell.com/813319

1 0

openSUSE-RU-2013:0829-1: important: duplicity: fixed data corruption when resuming interrupted backup
by maintenance＠opensuse.org 27 May '13

27 May '13

openSUSE Recommended Update: duplicity: fixed data corruption when resuming interrupted backup ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0829-1 Rating: important References: #813319 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Duplicity was upgraded to prevent data corruption when resuming an interrupted backup. If you use the DejaDup backup tool, consider switching to a new backup location to ensure restorations from the new location are safe. This affects both encrypted and unencrypted backups. (bnc#813319) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-443 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): duplicity-0.6.15-2.4.1 duplicity-debuginfo-0.6.15-2.4.1 duplicity-debugsource-0.6.15-2.4.1 References: https://bugzilla.novell.com/813319

1 0

openSUSE-SU-2013:0826-1: moderate: Package icedtea-web was updated to version 1.4.
by opensuse-security＠opensuse.org 24 May '13

24 May '13

openSUSE Security Update: Package icedtea-web was updated to version 1.4. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0826-1 Rating: moderate References: #818768 Cross-References: CVE-2012-3422 CVE-2012-3423 CVE-2013-1926 CVE-2013-1927 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Changes in icedtea-web with update to 1.4 (bnc#818768): * Added cs, de, pl localization * Splash screen for javaws and plugin * Better error reporting for plugin via Error-splash-screen * All IcedTea-Web dialogues are centered to middle of active screen * Download indicator made compact for more then one jar * User can select its own JVM via itw-settings and deploy.properties. * Added extended applets security settings and dialogue * Security updates - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path. - CVE-2013-1927, RH884705: fixed gifar vulnerabilit - CVE-2012-3422, RH840592: Potential read from an uninitialized memory location - CVE-2012-3423, RH841345: Incorrect handling of not 0-terminated strings * NetX - PR1027: DownloadService is not supported by IcedTea-Web - PR725: JNLP applications will prompt for creating desktop shortcuts every time they are run - PR1292: Javaws does not resolve versioned jar names with periods correctly * Plugin - PR1106: Buffer overflow in plugin table- - PR1166: Embedded JNLP File is not supported in applet tag - PR1217: Add command line arguments for plugins - PR1189: Icedtea-plugin requires code attribute when using jnlp_href - PR1198: JSObject is not passed to javascript correctly - PR1260: IcedTea-Web should not rely on GTK - PR1157: Applets can hang browser after fatal exception - PR580: http://www.horaoficial.cl/ loads improperly * Common - PR1049: Extension jnlp's signed jar with the content of only META-INF/* is considered - PR955: regression: SweetHome3D fails to run - PR1145: IcedTea-Web can cause ClassCircularityError - PR1161: X509VariableTrustManager does not work correctly with OpenJDK7 - PR822: Applets fail to load if jars have different signers - PR1186: System.getProperty("deployment.user.security.trusted.cacerts ") is null - PR909: The Java applet at http://de.gosupermodel.com/games/wardrobegame.jsp fails - PR1299: WebStart doesn't read socket proxy settings from firefox correctly Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-439 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): icedtea-web-1.4-1.17.1 icedtea-web-debuginfo-1.4-1.17.1 icedtea-web-debugsource-1.4-1.17.1 - openSUSE 12.2 (noarch): icedtea-web-javadoc-1.4-1.17.1 References: http://support.novell.com/security/cve/CVE-2012-3422.html http://support.novell.com/security/cve/CVE-2012-3423.html http://support.novell.com/security/cve/CVE-2013-1926.html http://support.novell.com/security/cve/CVE-2013-1927.html https://bugzilla.novell.com/818768

1 0

openSUSE-SU-2013:0825-1: important: MozillaFirefox: update to version 21.0
by opensuse-security＠opensuse.org 24 May '13

24 May '13

openSUSE Security Update: MozillaFirefox: update to version 21.0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0825-1 Rating: important References: #801121 #814101 #819204 Cross-References: CVE-2013-0801 CVE-2013-1669 CVE-2013-1670 CVE-2013-1671 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: MozillaFirefox was updated to Firefox 21.0 (bnc#819204) * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards * MFSA 2013-42/CVE-2013-1670 (bmo#853709) Privileged access for content level constructor * MFSA 2013-43/CVE-2013-1671 (bmo#842255) File input control has access to full path * MFSA 2013-46/CVE-2013-1674 (bmo#860971) Use-after-free with video and onresize event * MFSA 2013-47/CVE-2013-1675 (bmo#866825) Uninitialized functions in DOMSVGZoomEvent * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/ CVE-2013-1679/CVE-2013-1680/CVE-2013-1681 Memory corruption found using Address Sanitizer Changes in MozillaFirefox-branding-openSUSE: - modified file locations for Firefox 21 and above - added DuckDuckGo as search option (bnc#801121) Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-438 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): MozillaFirefox-21.0-2.47.1 MozillaFirefox-branding-openSUSE-21-1.4.1 MozillaFirefox-branding-upstream-21.0-2.47.1 MozillaFirefox-buildsymbols-21.0-2.47.1 MozillaFirefox-debuginfo-21.0-2.47.1 MozillaFirefox-debugsource-21.0-2.47.1 MozillaFirefox-devel-21.0-2.47.1 MozillaFirefox-translations-common-21.0-2.47.1 MozillaFirefox-translations-other-21.0-2.47.1 References: http://support.novell.com/security/cve/CVE-2013-0801.html http://support.novell.com/security/cve/CVE-2013-1669.html http://support.novell.com/security/cve/CVE-2013-1670.html http://support.novell.com/security/cve/CVE-2013-1671.html http://support.novell.com/security/cve/CVE-2013-1674.html http://support.novell.com/security/cve/CVE-2013-1675.html http://support.novell.com/security/cve/CVE-2013-1676.html http://support.novell.com/security/cve/CVE-2013-1677.html http://support.novell.com/security/cve/CVE-2013-1678.html http://support.novell.com/security/cve/CVE-2013-1679.html http://support.novell.com/security/cve/CVE-2013-1680.html http://support.novell.com/security/cve/CVE-2013-1681.html https://bugzilla.novell.com/801121 https://bugzilla.novell.com/814101 https://bugzilla.novell.com/819204

1 0

openSUSE-SU-2013:0824-1: moderate: kernel: Security and Bugfix update for 3.4.42
by opensuse-security＠opensuse.org 24 May '13

24 May '13

openSUSE Security Update: kernel: Security and Bugfix update for 3.4.42 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0824-1 Rating: moderate References: #792500 #802153 #805633 #806138 #806976 #806980 #808829 #809155 #809330 #809748 #813963 Cross-References: CVE-2013-0913 CVE-2013-1763 CVE-2013-1767 CVE-2013-1774 CVE-2013-1796 CVE-2013-1797 CVE-2013-1798 CVE-2013-1848 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has three fixes is now available. Description: Linux kernel was updated to kernel 3.4.42 fixing various bugs and security issues. - Refresh patches.suse/SUSE-bootsplash. Fix bootsplash breakage due to stable fix (bnc#813963) - Linux 3.4.39. - kABI: protect struct tracer. - Linux 3.4.38 (bnc#808829,CVE-2013-0913). - patches.kabi/kabi-protect-struct-sk_buff.patch: kABI: protect struct sk_buff. - patches.kabi/kabi-ipv4-remove-inclusion.patch: kABI: ipv4, remove inclusion. - USB: io_ti: Fix NULL dereference in chase_port() (bnc#806976, CVE-2013-1774). - Linux 3.4.37 (bnc#809155 bnc#809330 bnc#809748 CVE-2013-1848). - Linux 3.4.36. - KVM: Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache_init (bnc#806980 CVE-2013-1797). - KVM: Fix bounds checking in ioapic indirect register read (bnc#806980 CVE-2013-1798). - KVM: Fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (bnc#806980 CVE-2013-1796). - kabi/severities: Allow kvm abi changes - kvm modules are self consistent - loopdev: fix a deadlock (bnc#809748). - block: use i_size_write() in bd_set_size() (bnc#809748). - drm/i915: bounds check execbuffer relocation count (bnc#808829,CVE-2013-0913). - TTY: do not reset master's packet mode (bnc#809330). - Update patches.fixes/ext3-Fix-format-string-issues.patch (bnc#809155 CVE-2013-1848). - ext3: Fix format string issues (bnc#809155). - Linux 3.4.35 (bnc#802153). - Linux 3.4.34 (CVE-2013-1763 CVE-2013-1767 bnc#792500 bnc#806138 bnc#805633). - tmpfs: fix use-after-free of mempolicy object (bnc#806138, CVE-2013-1767). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-440 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): kernel-default-3.4.42-2.28.1 kernel-default-base-3.4.42-2.28.1 kernel-default-base-debuginfo-3.4.42-2.28.1 kernel-default-debuginfo-3.4.42-2.28.1 kernel-default-debugsource-3.4.42-2.28.1 kernel-default-devel-3.4.42-2.28.1 kernel-default-devel-debuginfo-3.4.42-2.28.1 kernel-syms-3.4.42-2.28.1 - openSUSE 12.2 (i686 x86_64): kernel-debug-3.4.42-2.28.1 kernel-debug-base-3.4.42-2.28.1 kernel-debug-base-debuginfo-3.4.42-2.28.1 kernel-debug-debuginfo-3.4.42-2.28.1 kernel-debug-debugsource-3.4.42-2.28.1 kernel-debug-devel-3.4.42-2.28.1 kernel-debug-devel-debuginfo-3.4.42-2.28.1 kernel-desktop-3.4.42-2.28.1 kernel-desktop-base-3.4.42-2.28.1 kernel-desktop-base-debuginfo-3.4.42-2.28.1 kernel-desktop-debuginfo-3.4.42-2.28.1 kernel-desktop-debugsource-3.4.42-2.28.1 kernel-desktop-devel-3.4.42-2.28.1 kernel-desktop-devel-debuginfo-3.4.42-2.28.1 kernel-ec2-3.4.42-2.28.1 kernel-ec2-base-3.4.42-2.28.1 kernel-ec2-base-debuginfo-3.4.42-2.28.1 kernel-ec2-debuginfo-3.4.42-2.28.1 kernel-ec2-debugsource-3.4.42-2.28.1 kernel-ec2-devel-3.4.42-2.28.1 kernel-ec2-devel-debuginfo-3.4.42-2.28.1 kernel-ec2-extra-3.4.42-2.28.1 kernel-ec2-extra-debuginfo-3.4.42-2.28.1 kernel-trace-3.4.42-2.28.1 kernel-trace-base-3.4.42-2.28.1 kernel-trace-base-debuginfo-3.4.42-2.28.1 kernel-trace-debuginfo-3.4.42-2.28.1 kernel-trace-debugsource-3.4.42-2.28.1 kernel-trace-devel-3.4.42-2.28.1 kernel-trace-devel-debuginfo-3.4.42-2.28.1 kernel-vanilla-3.4.42-2.28.1 kernel-vanilla-debuginfo-3.4.42-2.28.1 kernel-vanilla-debugsource-3.4.42-2.28.1 kernel-vanilla-devel-3.4.42-2.28.1 kernel-vanilla-devel-debuginfo-3.4.42-2.28.1 kernel-xen-3.4.42-2.28.1 kernel-xen-base-3.4.42-2.28.1 kernel-xen-base-debuginfo-3.4.42-2.28.1 kernel-xen-debuginfo-3.4.42-2.28.1 kernel-xen-debugsource-3.4.42-2.28.1 kernel-xen-devel-3.4.42-2.28.1 kernel-xen-devel-debuginfo-3.4.42-2.28.1 - openSUSE 12.2 (noarch): kernel-devel-3.4.42-2.28.1 kernel-docs-3.4.42-2.28.2 kernel-source-3.4.42-2.28.1 kernel-source-vanilla-3.4.42-2.28.1 - openSUSE 12.2 (i686): kernel-pae-3.4.42-2.28.1 kernel-pae-base-3.4.42-2.28.1 kernel-pae-base-debuginfo-3.4.42-2.28.1 kernel-pae-debuginfo-3.4.42-2.28.1 kernel-pae-debugsource-3.4.42-2.28.1 kernel-pae-devel-3.4.42-2.28.1 kernel-pae-devel-debuginfo-3.4.42-2.28.1 References: http://support.novell.com/security/cve/CVE-2013-0913.html http://support.novell.com/security/cve/CVE-2013-1763.html http://support.novell.com/security/cve/CVE-2013-1767.html http://support.novell.com/security/cve/CVE-2013-1774.html http://support.novell.com/security/cve/CVE-2013-1796.html http://support.novell.com/security/cve/CVE-2013-1797.html http://support.novell.com/security/cve/CVE-2013-1798.html http://support.novell.com/security/cve/CVE-2013-1848.html https://bugzilla.novell.com/792500 https://bugzilla.novell.com/802153 https://bugzilla.novell.com/805633 https://bugzilla.novell.com/806138 https://bugzilla.novell.com/806976 https://bugzilla.novell.com/806980 https://bugzilla.novell.com/808829 https://bugzilla.novell.com/809155 https://bugzilla.novell.com/809330 https://bugzilla.novell.com/809748 https://bugzilla.novell.com/813963

1 0

openSUSE-SU-2013:0823-1: This submission supersedes the Samba packages currently available from
by opensuse-security＠opensuse.org 23 May '13

23 May '13

openSUSE Security Update: This submission supersedes the Samba packages currently available from ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0823-1 Rating: low References: #786350 #792294 #800782 #802031 #807334 #811975 #815994 Cross-References: CVE-2013-0454 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This submission supersedes the Samba packages currently available from http://download.openSUSE.org/pub/opensuse/update/12.*-test/ - Add support for PFC_FLAG_OBJECT_UUID when parsing packets; (bso#9382). - Fix "guest ok", "force user" and "force group" for guest users; (bso#9746). - Fix 'map untrusted to domain' with NTLMv2; (bso#9817). - Fix crash bug in Winbind; (bso#9854). - Fix panic in nt_printer_publish_ads; (bso#9830). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-435 - openSUSE 12.1: zypper in -t patch openSUSE-2013-435 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): ldapsmb-1.34b-48.20.1 libnetapi-devel-3.6.7-48.20.1 libnetapi0-3.6.7-48.20.1 libnetapi0-debuginfo-3.6.7-48.20.1 libsmbclient-devel-3.6.7-48.20.1 libsmbclient0-3.6.7-48.20.1 libsmbclient0-debuginfo-3.6.7-48.20.1 libsmbsharemodes-devel-3.6.7-48.20.1 libsmbsharemodes0-3.6.7-48.20.1 libsmbsharemodes0-debuginfo-3.6.7-48.20.1 libwbclient-devel-3.6.7-48.20.1 libwbclient0-3.6.7-48.20.1 libwbclient0-debuginfo-3.6.7-48.20.1 samba-3.6.7-48.20.1 samba-client-3.6.7-48.20.1 samba-client-debuginfo-3.6.7-48.20.1 samba-debuginfo-3.6.7-48.20.1 samba-debugsource-3.6.7-48.20.1 samba-devel-3.6.7-48.20.1 samba-krb-printing-3.6.7-48.20.1 samba-krb-printing-debuginfo-3.6.7-48.20.1 samba-winbind-3.6.7-48.20.1 samba-winbind-debuginfo-3.6.7-48.20.1 - openSUSE 12.2 (x86_64): libsmbclient0-32bit-3.6.7-48.20.1 libsmbclient0-debuginfo-32bit-3.6.7-48.20.1 libwbclient0-32bit-3.6.7-48.20.1 libwbclient0-debuginfo-32bit-3.6.7-48.20.1 samba-32bit-3.6.7-48.20.1 samba-client-32bit-3.6.7-48.20.1 samba-client-debuginfo-32bit-3.6.7-48.20.1 samba-debuginfo-32bit-3.6.7-48.20.1 samba-winbind-32bit-3.6.7-48.20.1 samba-winbind-debuginfo-32bit-3.6.7-48.20.1 - openSUSE 12.2 (noarch): samba-doc-3.6.7-48.20.1 - openSUSE 12.1 (i586 x86_64): ldapsmb-1.34b-34.20.1 libldb-devel-1.0.2-34.20.1 libldb1-1.0.2-34.20.1 libldb1-debuginfo-1.0.2-34.20.1 libnetapi-devel-3.6.3-34.20.1 libnetapi0-3.6.3-34.20.1 libnetapi0-debuginfo-3.6.3-34.20.1 libsmbclient-devel-3.6.3-34.20.1 libsmbclient0-3.6.3-34.20.1 libsmbclient0-debuginfo-3.6.3-34.20.1 libsmbsharemodes-devel-3.6.3-34.20.1 libsmbsharemodes0-3.6.3-34.20.1 libsmbsharemodes0-debuginfo-3.6.3-34.20.1 libtalloc-devel-2.0.5-34.20.1 libtalloc2-2.0.5-34.20.1 libtalloc2-debuginfo-2.0.5-34.20.1 libtdb-devel-1.2.9-34.20.1 libtdb1-1.2.9-34.20.1 libtdb1-debuginfo-1.2.9-34.20.1 libtevent-devel-0.9.11-34.20.1 libtevent0-0.9.11-34.20.1 libtevent0-debuginfo-0.9.11-34.20.1 libwbclient-devel-3.6.3-34.20.1 libwbclient0-3.6.3-34.20.1 libwbclient0-debuginfo-3.6.3-34.20.1 samba-3.6.3-34.20.1 samba-client-3.6.3-34.20.1 samba-client-debuginfo-3.6.3-34.20.1 samba-debuginfo-3.6.3-34.20.1 samba-debugsource-3.6.3-34.20.1 samba-devel-3.6.3-34.20.1 samba-krb-printing-3.6.3-34.20.1 samba-krb-printing-debuginfo-3.6.3-34.20.1 samba-winbind-3.6.3-34.20.1 samba-winbind-debuginfo-3.6.3-34.20.1 - openSUSE 12.1 (x86_64): libldb1-32bit-1.0.2-34.20.1 libldb1-debuginfo-32bit-1.0.2-34.20.1 libsmbclient0-32bit-3.6.3-34.20.1 libsmbclient0-debuginfo-32bit-3.6.3-34.20.1 libtalloc2-32bit-2.0.5-34.20.1 libtalloc2-debuginfo-32bit-2.0.5-34.20.1 libtdb1-32bit-1.2.9-34.20.1 libtdb1-debuginfo-32bit-1.2.9-34.20.1 libtevent0-32bit-0.9.11-34.20.1 libtevent0-debuginfo-32bit-0.9.11-34.20.1 libwbclient0-32bit-3.6.3-34.20.1 libwbclient0-debuginfo-32bit-3.6.3-34.20.1 samba-32bit-3.6.3-34.20.1 samba-client-32bit-3.6.3-34.20.1 samba-client-debuginfo-32bit-3.6.3-34.20.1 samba-debuginfo-32bit-3.6.3-34.20.1 samba-winbind-32bit-3.6.3-34.20.1 samba-winbind-debuginfo-32bit-3.6.3-34.20.1 - openSUSE 12.1 (noarch): samba-doc-3.6.3-34.20.1 - openSUSE 12.1 (ia64): libldb1-debuginfo-x86-1.0.2-34.20.1 libldb1-x86-1.0.2-34.20.1 libsmbclient0-debuginfo-x86-3.6.3-34.20.1 libsmbclient0-x86-3.6.3-34.20.1 libtalloc2-debuginfo-x86-2.0.5-34.20.1 libtalloc2-x86-2.0.5-34.20.1 libtdb1-debuginfo-x86-1.2.9-34.20.1 libtdb1-x86-1.2.9-34.20.1 libtevent0-debuginfo-x86-0.9.11-34.20.1 libtevent0-x86-0.9.11-34.20.1 libwbclient0-debuginfo-x86-3.6.3-34.20.1 libwbclient0-x86-3.6.3-34.20.1 samba-client-debuginfo-x86-3.6.3-34.20.1 samba-client-x86-3.6.3-34.20.1 samba-debuginfo-x86-3.6.3-34.20.1 samba-winbind-debuginfo-x86-3.6.3-34.20.1 samba-winbind-x86-3.6.3-34.20.1 samba-x86-3.6.3-34.20.1 References: http://support.novell.com/security/cve/CVE-2013-0454.html https://bugzilla.novell.com/786350 https://bugzilla.novell.com/792294 https://bugzilla.novell.com/800782 https://bugzilla.novell.com/802031 https://bugzilla.novell.com/807334 https://bugzilla.novell.com/811975 https://bugzilla.novell.com/815994

1 0

openSUSE-RU-2013:0820-1: moderate: nodejs: update to match v8
by maintenance＠opensuse.org 22 May '13

22 May '13

openSUSE Recommended Update: nodejs: update to match v8 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0820-1 Rating: moderate References: #805253 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: nodejs was updated to fix bnc#805253 by removing bundled sources for shared dependencies This way we force nodejs to use v8 installed system headers. Otherwise, and that was the bug, it was using the embedded headers but linking against the system libraries. That is why updating v8 broke nodejs. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-432 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): nodejs-0.6.19-1.4.1 nodejs-debuginfo-0.6.19-1.4.1 nodejs-debugsource-0.6.19-1.4.1 nodejs-devel-0.6.19-1.4.1 References: https://bugzilla.novell.com/805253

1 0

openSUSE-SU-2013:0813-2: moderate: Update for clamav to version 0.97.8.
by opensuse-security＠opensuse.org 21 May '13

21 May '13

openSUSE Security Update: Update for clamav to version 0.97.8. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0813-2 Rating: moderate References: #816865 Cross-References: CVE-2013-2020 CVE-2013-2021 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: New clamav version 0.97.8 (bnc#816865): * CVE-2013-2020: Fix heap corruption * CVE-2013-2021: Fix overflow due to PDF key length computation. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-430 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): clamav-0.97.8-1.12.1 clamav-debuginfo-0.97.8-1.12.1 clamav-debugsource-0.97.8-1.12.1 - openSUSE 12.2 (noarch): clamav-db-0.97.8-1.12.1 References: http://support.novell.com/security/cve/CVE-2013-2020.html http://support.novell.com/security/cve/CVE-2013-2021.html https://bugzilla.novell.com/816865

1 0

openSUSE-SU-2013:0812-2: moderate: tiff
by opensuse-security＠opensuse.org 21 May '13

21 May '13

openSUSE Security Update: tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0812-2 Rating: moderate References: #817573 #818117 Cross-References: CVE-2013-1960 CVE-2013-1961 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: libtiff security update: * CVE-2013-1961.patch [bnc#818117] * CVE-2013-1960.patch [bnc#817573] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-431 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libtiff-devel-4.0.2-1.16.1 libtiff5-4.0.2-1.16.1 libtiff5-debuginfo-4.0.2-1.16.1 tiff-4.0.2-1.16.1 tiff-debuginfo-4.0.2-1.16.1 tiff-debugsource-4.0.2-1.16.1 - openSUSE 12.2 (x86_64): libtiff-devel-32bit-4.0.2-1.16.1 libtiff5-32bit-4.0.2-1.16.1 libtiff5-debuginfo-32bit-4.0.2-1.16.1 References: http://support.novell.com/security/cve/CVE-2013-1960.html http://support.novell.com/security/cve/CVE-2013-1961.html https://bugzilla.novell.com/817573 https://bugzilla.novell.com/818117

1 0

openSUSE-SU-2013:0813-1: moderate: Update for clamav to version 0.97.8.
by opensuse-security＠opensuse.org 21 May '13

21 May '13

openSUSE Security Update: Update for clamav to version 0.97.8. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0813-1 Rating: moderate References: #816865 Cross-References: CVE-2013-2020 CVE-2013-2021 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: New clamav version 0.97.8 (bnc#816865): * CVE-2013-2020: Fix heap corruption * CVE-2013-2021: Fix overflow due to PDF key length computation. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-430 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): clamav-0.97.8-15.1 clamav-debuginfo-0.97.8-15.1 clamav-debugsource-0.97.8-15.1 - openSUSE 12.1 (noarch): clamav-db-0.97.8-15.1 References: http://support.novell.com/security/cve/CVE-2013-2020.html http://support.novell.com/security/cve/CVE-2013-2021.html https://bugzilla.novell.com/816865

1 0

openSUSE-SU-2013:0812-1: moderate: tiff
by opensuse-security＠opensuse.org 21 May '13

21 May '13

openSUSE Security Update: tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0812-1 Rating: moderate References: #817573 #818117 Cross-References: CVE-2013-1960 CVE-2013-1961 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: libtiff security update: * CVE-2013-1961.patch [bnc#818117] * CVE-2013-1960.patch [bnc#817573] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-431 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libtiff-devel-3.9.5-8.17.1 libtiff3-3.9.5-8.17.1 libtiff3-debuginfo-3.9.5-8.17.1 tiff-3.9.5-8.17.1 tiff-debuginfo-3.9.5-8.17.1 tiff-debugsource-3.9.5-8.17.1 - openSUSE 12.1 (x86_64): libtiff-devel-32bit-3.9.5-8.17.1 libtiff3-32bit-3.9.5-8.17.1 libtiff3-debuginfo-32bit-3.9.5-8.17.1 - openSUSE 12.1 (ia64): libtiff3-debuginfo-x86-3.9.5-8.17.1 libtiff3-x86-3.9.5-8.17.1 References: http://support.novell.com/security/cve/CVE-2013-1960.html http://support.novell.com/security/cve/CVE-2013-1961.html https://bugzilla.novell.com/817573 https://bugzilla.novell.com/818117

1 0

openSUSE-SU-2013:0807-1: moderate: update for gnutls
by opensuse-security＠opensuse.org 17 May '13

17 May '13

openSUSE Security Update: update for gnutls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0807-1 Rating: moderate References: #802651 Cross-References: CVE-2013-1619 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Changes in gnutls: - Fix bug[ bnc#802651] CVE-2013-1619( gnutls): Luck-13 issue Add patch file: CVE-2013-1619.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-428 - openSUSE 12.1: zypper in -t patch openSUSE-2013-428 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): gnutls-3.0.20-1.4.1 gnutls-debuginfo-3.0.20-1.4.1 gnutls-debugsource-3.0.20-1.4.1 libgnutls-devel-3.0.20-1.4.1 libgnutls-openssl-devel-3.0.20-1.4.1 libgnutls-openssl27-3.0.20-1.4.1 libgnutls-openssl27-debuginfo-3.0.20-1.4.1 libgnutls28-3.0.20-1.4.1 libgnutls28-debuginfo-3.0.20-1.4.1 libgnutlsxx-devel-3.0.20-1.4.1 libgnutlsxx28-3.0.20-1.4.1 libgnutlsxx28-debuginfo-3.0.20-1.4.1 - openSUSE 12.2 (x86_64): libgnutls-devel-32bit-3.0.20-1.4.1 libgnutls28-32bit-3.0.20-1.4.1 libgnutls28-debuginfo-32bit-3.0.20-1.4.1 - openSUSE 12.1 (i586 x86_64): gnutls-3.0.3-5.15.1 gnutls-debuginfo-3.0.3-5.15.1 gnutls-debugsource-3.0.3-5.15.1 libgnutls-devel-3.0.3-5.15.1 libgnutls-extra-devel-3.0.3-5.15.1 libgnutls-extra28-3.0.3-5.15.1 libgnutls-extra28-debuginfo-3.0.3-5.15.1 libgnutls-openssl-devel-3.0.3-5.15.1 libgnutls-openssl27-3.0.3-5.15.1 libgnutls-openssl27-debuginfo-3.0.3-5.15.1 libgnutls28-3.0.3-5.15.1 libgnutls28-debuginfo-3.0.3-5.15.1 libgnutlsxx-devel-3.0.3-5.15.1 libgnutlsxx28-3.0.3-5.15.1 libgnutlsxx28-debuginfo-3.0.3-5.15.1 - openSUSE 12.1 (x86_64): libgnutls-devel-32bit-3.0.3-5.15.1 libgnutls28-32bit-3.0.3-5.15.1 libgnutls28-debuginfo-32bit-3.0.3-5.15.1 - openSUSE 12.1 (ia64): libgnutls28-debuginfo-x86-3.0.3-5.15.1 libgnutls28-x86-3.0.3-5.15.1 References: http://support.novell.com/security/cve/CVE-2013-1619.html https://bugzilla.novell.com/802651

1 0

openSUSE-SU-2013:0806-1: moderate: update for telepathy-idle
by opensuse-security＠opensuse.org 17 May '13

17 May '13

openSUSE Security Update: update for telepathy-idle ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0806-1 Rating: moderate References: #817120 Cross-References: CVE-2007-6746 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Changes in telepathy-idle: - Add telepathy-idle-require-tls-validation.patch (bnc#817120, CVE-2007-6746). This fixes flaws in the SSL certificate validation. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-427 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): telepathy-idle-0.1.11-3.4.1 telepathy-idle-debuginfo-0.1.11-3.4.1 telepathy-idle-debugsource-0.1.11-3.4.1 References: http://support.novell.com/security/cve/CVE-2007-6746.html https://bugzilla.novell.com/817120

1 0

openSUSE-SU-2013:0797-1:
by opensuse-security＠opensuse.org 16 May '13

16 May '13

openSUSE Security Update: ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0797-1 Rating: low References: #819916 Cross-References: CVE-2013-2728 CVE-2013-3324 CVE-2013-3325 CVE-2013-3326 CVE-2013-3327 CVE-2013-3328 CVE-2013-3329 CVE-2013-3330 CVE-2013-3331 CVE-2013-3332 CVE-2013-3333 CVE-2013-3334 CVE-2013-3335 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: No description available. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-425 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): flash-player-11.2.202.285-66.1 flash-player-gnome-11.2.202.285-66.1 flash-player-kde4-11.2.202.285-66.1 References: http://support.novell.com/security/cve/CVE-2013-2728.html http://support.novell.com/security/cve/CVE-2013-3324.html http://support.novell.com/security/cve/CVE-2013-3325.html http://support.novell.com/security/cve/CVE-2013-3326.html http://support.novell.com/security/cve/CVE-2013-3327.html http://support.novell.com/security/cve/CVE-2013-3328.html http://support.novell.com/security/cve/CVE-2013-3329.html http://support.novell.com/security/cve/CVE-2013-3330.html http://support.novell.com/security/cve/CVE-2013-3331.html http://support.novell.com/security/cve/CVE-2013-3332.html http://support.novell.com/security/cve/CVE-2013-3333.html http://support.novell.com/security/cve/CVE-2013-3334.html http://support.novell.com/security/cve/CVE-2013-3335.html https://bugzilla.novell.com/819916

1 0

openSUSE-RU-2013:0788-1: python-py2pack: Update to 0.4.3.4
by maintenance＠opensuse.org 14 May '13

14 May '13

openSUSE Recommended Update: python-py2pack: Update to 0.4.3.4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0788-1 Rating: low References: Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update pushes python-py2pack to the current version 0.4.3.4. - 0.4.3.4: + catch more doc files - 0.4.3.3: + Various bugfixes - 0.4.3: + Generate SPDX-style licenses + Find documentation files from local tarball + Detect C extensions from local tarball Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-419 - openSUSE 12.1: zypper in -t patch openSUSE-2013-419 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (noarch): python-py2pack-0.4.3.4-2.4.1 - openSUSE 12.1 (noarch): python-py2pack-0.4.3.4-2.4.1 References:

1 0

openSUSE-RU-2013:0787-1: iscsitarget: list previous config file location as a %ghost file
by maintenance＠opensuse.org 14 May '13

14 May '13

openSUSE Recommended Update: iscsitarget: list previous config file location as a %ghost file ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0787-1 Rating: low References: #801469 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with iscsitarget: - bnc#801469: updated spec file to list previous config file location as a %ghost file Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-422 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): iscsitarget-1.4.20.3-2.20.1 iscsitarget-debuginfo-1.4.20.3-2.20.1 iscsitarget-debugsource-1.4.20.3-2.20.1 iscsitarget-kmp-default-1.4.20.3_k3.4.33_2.24-2.20.1 iscsitarget-kmp-default-debuginfo-1.4.20.3_k3.4.33_2.24-2.20.1 iscsitarget-kmp-desktop-1.4.20.3_k3.4.33_2.24-2.20.1 iscsitarget-kmp-desktop-debuginfo-1.4.20.3_k3.4.33_2.24-2.20.1 iscsitarget-kmp-xen-1.4.20.3_k3.4.33_2.24-2.20.1 iscsitarget-kmp-xen-debuginfo-1.4.20.3_k3.4.33_2.24-2.20.1 - openSUSE 12.2 (i586): iscsitarget-kmp-pae-1.4.20.3_k3.4.33_2.24-2.20.1 iscsitarget-kmp-pae-debuginfo-1.4.20.3_k3.4.33_2.24-2.20.1 References: https://bugzilla.novell.com/801469

1 0

openSUSE-SU-2013:0778-1: moderate: update for python-httplib2
by opensuse-security＠opensuse.org 10 May '13

10 May '13

openSUSE Security Update: update for python-httplib2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0778-1 Rating: moderate References: #818100 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update of python-httplib2 fixed broken SSL certification verification. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-415 - openSUSE 12.1: zypper in -t patch openSUSE-2013-415 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (noarch): python-httplib2-0.7.4-2.7.1 - openSUSE 12.1 (noarch): python-httplib2-0.7.1-3.7.1 References: https://bugzilla.novell.com/818100

1 0

openSUSE-SU-2013:0777-1: moderate: java-1_6_0-openjdk to Icedtea6-1.12.5
by opensuse-security＠opensuse.org 10 May '13

10 May '13

openSUSE Security Update: java-1_6_0-openjdk to Icedtea6-1.12.5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0777-1 Rating: moderate References: #817157 Cross-References: CVE-2013-0401 CVE-2013-1488 CVE-2013-1518 CVE-2013-1537 CVE-2013-1557 CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2415 CVE-2013-2417 CVE-2013-2419 CVE-2013-2420 CVE-2013-2421 CVE-2013-2422 CVE-2013-2424 CVE-2013-2426 CVE-2013-2429 CVE-2013-2430 CVE-2013-2431 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: java-1_6_0-openjdk was updated to 1.12.5 (bnc#817157) * Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization - S8001031, CVE-2013-2419: Better font processing - S8001040, CVE-2013-1537: Rework RMI model - S8001322: Refactor deserialization - S8001329, CVE-2013-1557: Augment RMI logging - S8003335: Better handling of Finalizer thread - S8003445: Adjust JAX-WS to focus on API - S8003543, CVE-2013-2415: Improve processing of MTOM attachments - S8004261: Improve input validation - S8004336, CVE-2013-2431: Better handling of method handle intrinsic frames - S8004986, CVE-2013-2383: Better handling of glyph table - S8004987, CVE-2013-2384: Improve font layout - S8004994, CVE-2013-1569: Improve checking of glyph table - S8005432: Update access to JAX-WS - S8005943: (process) Improved Runtime.exec - S8006309: More reliable control panel operation - S8006435, CVE-2013-2424: Improvements in JMX - S8006790: Improve checking for windows - S8006795: Improve font warning messages - S8007406: Improve accessibility of AccessBridge - S8007617, CVE-2013-2420: Better validation of images - S8007667, CVE-2013-2430: Better image reading - S8007918, CVE-2013-2429: Better image writing - S8009063, CVE-2013-2426: Improve reliability of ConcurrentHashMap - S8009305, CVE-2013-0401: Improve AWT data transfer - S8009699, CVE-2013-2421: Methodhandle lookup - S8009814, CVE-2013-1488: Better driver management - S8009857, CVE-2013-2422: Problem with plugin - RH952389: Temporary files created with insecure permissions * Backports - S7197906: BlockOffsetArray::power_to_cards_back() needs to handle > 32 bit shifts - S7036559: ConcurrentHashMap footprint and contention improvements - S5102804: Memory leak in Introspector.getBeanInfo(Class) for custom BeanInfo: Class param (with WeakCache from S6397609) - S6501644: sync LayoutEngine *code* structure to match ICU - S6886358: layout code update - S6963811: Deadlock-prone locking changes in Introspector - S7017324: Kerning crash in JDK 7 since ICU layout update - S7064279: Introspector.getBeanInfo() should release some resources in timely manner - S8004302: javax/xml/soap/Test7013971.java fails since jdk6u39b01 - S7133220: Additional patches to JAXP 1.4.5 update 1 for 7u4 (partial for S6657673) - S8009530: ICU Kern table support broken * Bug fixes - OJ3: Fix get_stack_bounds memory leak (alternate fix for S7197906) - PR1362: Fedora 19 / rawhide FTBFS SIGILL - PR1338: Remove dependence on libXp - PR1339: Simplify the rhino class rewriter to avoid use of concurrency - PR1336: Bootstrap failure on Fedora 17/18 - PR1319: Correct #ifdef to #if - PR1402: Support glibc < 2.17 with AArch64 patch - Give xalan/xerces access to their own internal packages. * New features - JAXP, JAXWS & JAF supplied as patches rather than drops to aid subsequent patching. - PR1380: Add AArch64 support to Zero - openjdk-7-src-b147-awt-crasher.patch (bnc#792951) - fix build for non-jit packages Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-410 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b27.1.12.5-36.2 java-1_6_0-openjdk-debuginfo-1.6.0.0_b27.1.12.5-36.2 java-1_6_0-openjdk-debugsource-1.6.0.0_b27.1.12.5-36.2 java-1_6_0-openjdk-demo-1.6.0.0_b27.1.12.5-36.2 java-1_6_0-openjdk-demo-debuginfo-1.6.0.0_b27.1.12.5-36.2 java-1_6_0-openjdk-devel-1.6.0.0_b27.1.12.5-36.2 java-1_6_0-openjdk-devel-debuginfo-1.6.0.0_b27.1.12.5-36.2 java-1_6_0-openjdk-javadoc-1.6.0.0_b27.1.12.5-36.2 java-1_6_0-openjdk-src-1.6.0.0_b27.1.12.5-36.2 References: http://support.novell.com/security/cve/CVE-2013-0401.html http://support.novell.com/security/cve/CVE-2013-1488.html http://support.novell.com/security/cve/CVE-2013-1518.html http://support.novell.com/security/cve/CVE-2013-1537.html http://support.novell.com/security/cve/CVE-2013-1557.html http://support.novell.com/security/cve/CVE-2013-1569.html http://support.novell.com/security/cve/CVE-2013-2383.html http://support.novell.com/security/cve/CVE-2013-2384.html http://support.novell.com/security/cve/CVE-2013-2415.html http://support.novell.com/security/cve/CVE-2013-2417.html http://support.novell.com/security/cve/CVE-2013-2419.html http://support.novell.com/security/cve/CVE-2013-2420.html http://support.novell.com/security/cve/CVE-2013-2421.html http://support.novell.com/security/cve/CVE-2013-2422.html http://support.novell.com/security/cve/CVE-2013-2424.html http://support.novell.com/security/cve/CVE-2013-2426.html http://support.novell.com/security/cve/CVE-2013-2429.html http://support.novell.com/security/cve/CVE-2013-2430.html http://support.novell.com/security/cve/CVE-2013-2431.html https://bugzilla.novell.com/817157

1 0

openSUSE-SU-2013:0776-1: moderate: update for xorg-x11-server
by opensuse-security＠opensuse.org 10 May '13

10 May '13

openSUSE Security Update: update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0776-1 Rating: moderate References: #814653 Cross-References: CVE-2013-1940 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - U_xf86-fix-flush-input-to-work-with-Linux-evdev-device.patch * So when we VT switch back and attempt to flush the input devices, we don't succeed because evdev won't return part of an event, since we were only asking for 4 bytes, we'd only get -EINVAL back. This could later cause events to be flushed that we shouldn't have gotten. This is a fix for CVE-2013-1940. (bnc#814653) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-411 - openSUSE 12.1: zypper in -t patch openSUSE-2013-411 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): xorg-x11-Xvnc-7.6_1.12.3-1.29.1 xorg-x11-Xvnc-debuginfo-7.6_1.12.3-1.29.1 xorg-x11-server-7.6_1.12.3-1.29.1 xorg-x11-server-debuginfo-7.6_1.12.3-1.29.1 xorg-x11-server-debugsource-7.6_1.12.3-1.29.1 xorg-x11-server-extra-7.6_1.12.3-1.29.1 xorg-x11-server-extra-debuginfo-7.6_1.12.3-1.29.1 xorg-x11-server-sdk-7.6_1.12.3-1.29.1 - openSUSE 12.1 (i586 x86_64): xorg-x11-Xvnc-7.6_1.10.4-36.9.2 xorg-x11-Xvnc-debuginfo-7.6_1.10.4-36.9.2 xorg-x11-server-7.6_1.10.4-36.9.2 xorg-x11-server-debuginfo-7.6_1.10.4-36.9.2 xorg-x11-server-debugsource-7.6_1.10.4-36.9.2 xorg-x11-server-extra-7.6_1.10.4-36.9.2 xorg-x11-server-extra-debuginfo-7.6_1.10.4-36.9.2 xorg-x11-server-sdk-7.6_1.10.4-36.9.2 References: http://support.novell.com/security/cve/CVE-2013-1940.html https://bugzilla.novell.com/814653

1 0

openSUSE-SU-2013:0775-1: moderate: update for strongswan
by opensuse-security＠opensuse.org 10 May '13

10 May '13

openSUSE Security Update: update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0775-1 Rating: moderate References: #815236 Cross-References: CVE-2013-2944 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - Applied upstream patch for security vulnerability discovered by Kevin Wojtysiak in ECDSA signature verification of the strongswan openssl plugin (bnc#815236, CVE-2013-2944) [0003-Check-return-value-of-ECDSA_Verify-correctly.patch] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-413 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): strongswan-4.6.4-2.8.1 strongswan-debugsource-4.6.4-2.8.1 strongswan-ikev1-4.6.4-2.8.1 strongswan-ikev1-debuginfo-4.6.4-2.8.1 strongswan-ikev2-4.6.4-2.8.1 strongswan-ikev2-debuginfo-4.6.4-2.8.1 strongswan-ipsec-4.6.4-2.8.1 strongswan-ipsec-debuginfo-4.6.4-2.8.1 strongswan-libs0-4.6.4-2.8.1 strongswan-libs0-debuginfo-4.6.4-2.8.1 strongswan-mysql-4.6.4-2.8.1 strongswan-mysql-debuginfo-4.6.4-2.8.1 strongswan-nm-4.6.4-2.8.1 strongswan-nm-debuginfo-4.6.4-2.8.1 strongswan-sqlite-4.6.4-2.8.1 strongswan-sqlite-debuginfo-4.6.4-2.8.1 - openSUSE 12.2 (noarch): strongswan-doc-4.6.4-2.8.1 References: http://support.novell.com/security/cve/CVE-2013-2944.html https://bugzilla.novell.com/815236

1 0

openSUSE-SU-2013:0774-1: moderate: update for strongswan
by opensuse-security＠opensuse.org 10 May '13

10 May '13

openSUSE Security Update: update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0774-1 Rating: moderate References: #815236 Cross-References: CVE-2013-2944 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - Applied upstream patch for security vulnerability discovered by Kevin Wojtysiak in ECDSA signature verification of the strongswan openssl plugin (bnc#815236, CVE-2013-2944) [0003-Check-return-value-of-ECDSA_Verify-correctly.patch] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-414 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): strongswan-4.5.3-5.11.1 strongswan-debugsource-4.5.3-5.11.1 strongswan-doc-4.5.3-5.11.1 strongswan-ikev1-4.5.3-5.11.1 strongswan-ikev1-debuginfo-4.5.3-5.11.1 strongswan-ikev2-4.5.3-5.11.1 strongswan-ikev2-debuginfo-4.5.3-5.11.1 strongswan-ipsec-4.5.3-5.11.1 strongswan-ipsec-debuginfo-4.5.3-5.11.1 strongswan-libs0-4.5.3-5.11.1 strongswan-libs0-debuginfo-4.5.3-5.11.1 strongswan-mysql-4.5.3-5.11.1 strongswan-mysql-debuginfo-4.5.3-5.11.1 strongswan-nm-4.5.3-5.11.1 strongswan-nm-debuginfo-4.5.3-5.11.1 strongswan-sqlite-4.5.3-5.11.1 strongswan-sqlite-debuginfo-4.5.3-5.11.1 References: http://support.novell.com/security/cve/CVE-2013-2944.html https://bugzilla.novell.com/815236

1 0

openSUSE-RU-2013:0752-1: moderate: bash-completion: Fix some missing tilde escapes resulting in hangs
by maintenance＠opensuse.org 06 May '13

06 May '13

openSUSE Recommended Update: bash-completion: Fix some missing tilde escapes resulting in hangs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0752-1 Rating: moderate References: #794686 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with bash-completion: - bnc#794686: Fix some missing tilde escapes resulting in hangs Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-407 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (noarch): bash-completion-1.99-2.5.1 References: https://bugzilla.novell.com/794686

1 0

openSUSE-RU-2013:0751-1: moderate: hawk: Fixed loading main status page
by maintenance＠opensuse.org 06 May '13

06 May '13

openSUSE Recommended Update: hawk: Fixed loading main status page ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0751-1 Rating: moderate References: #800338 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with hawk: - bnc#800338: Force UTF-8 encoding to fix ActionView::TemplateError when loading main status page - Workaround deprecated Gem::SourceIndex#add_spec (required to work with rubygems 1.8) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-405 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): hawk-0.5.2-3.6.1 hawk-debuginfo-0.5.2-3.6.1 hawk-debugsource-0.5.2-3.6.1 hawk-templates-0.5.2-3.6.1 References: https://bugzilla.novell.com/800338

1 0

openSUSE-SU-2013:0746-1: moderate: krb5
by opensuse-security＠opensuse.org 03 May '13

03 May '13

openSUSE Security Update: krb5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0746-1 Rating: moderate References: #816413 Cross-References: CVE-2013-1416 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - fix prep_reprocess_req NULL pointer deref CVE-2013-1416 (bnc#816413) bug-816413-CVE-2013-1416-prep_reprocess_req-NULL-ptr-deref.d if Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-401 - openSUSE 12.1: zypper in -t patch openSUSE-2013-401 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): krb5-1.10.2-3.16.1 krb5-client-1.10.2-3.16.1 krb5-client-debuginfo-1.10.2-3.16.1 krb5-debuginfo-1.10.2-3.16.1 krb5-debugsource-1.10.2-3.16.1 krb5-devel-1.10.2-3.16.1 krb5-mini-1.10.2-3.16.1 krb5-mini-debuginfo-1.10.2-3.16.1 krb5-mini-debugsource-1.10.2-3.16.1 krb5-mini-devel-1.10.2-3.16.1 krb5-plugin-kdb-ldap-1.10.2-3.16.1 krb5-plugin-kdb-ldap-debuginfo-1.10.2-3.16.1 krb5-plugin-preauth-pkinit-1.10.2-3.16.1 krb5-plugin-preauth-pkinit-debuginfo-1.10.2-3.16.1 krb5-server-1.10.2-3.16.1 krb5-server-debuginfo-1.10.2-3.16.1 - openSUSE 12.2 (x86_64): krb5-32bit-1.10.2-3.16.1 krb5-debuginfo-32bit-1.10.2-3.16.1 krb5-devel-32bit-1.10.2-3.16.1 - openSUSE 12.2 (noarch): krb5-doc-1.10.2-3.16.2 - openSUSE 12.1 (i586 x86_64): krb5-1.9.1-24.20.1 krb5-client-1.9.1-24.20.1 krb5-client-debuginfo-1.9.1-24.20.1 krb5-debuginfo-1.9.1-24.20.1 krb5-debugsource-1.9.1-24.20.1 krb5-devel-1.9.1-24.20.1 krb5-plugin-kdb-ldap-1.9.1-24.20.1 krb5-plugin-kdb-ldap-debuginfo-1.9.1-24.20.1 krb5-plugin-preauth-pkinit-1.9.1-24.20.1 krb5-plugin-preauth-pkinit-debuginfo-1.9.1-24.20.1 krb5-server-1.9.1-24.20.1 krb5-server-debuginfo-1.9.1-24.20.1 - openSUSE 12.1 (x86_64): krb5-32bit-1.9.1-24.20.1 krb5-debuginfo-32bit-1.9.1-24.20.1 krb5-devel-32bit-1.9.1-24.20.1 - openSUSE 12.1 (ia64): krb5-debuginfo-x86-1.9.1-24.20.1 krb5-x86-1.9.1-24.20.1 References: http://support.novell.com/security/cve/CVE-2013-1416.html https://bugzilla.novell.com/816413

1 0

openSUSE-SU-2013:0745-1: moderate: update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 03 May '13

03 May '13

openSUSE Security Update: update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0745-1 Rating: moderate References: #816720 Cross-References: CVE-2013-0401 CVE-2013-1488 CVE-2013-1518 CVE-2013-1537 CVE-2013-1557 CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2415 CVE-2013-2417 CVE-2013-2419 CVE-2013-2420 CVE-2013-2421 CVE-2013-2422 CVE-2013-2423 CVE-2013-2424 CVE-2013-2426 CVE-2013-2429 CVE-2013-2430 CVE-2013-2431 CVE-2013-2436 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: - apply aarch64 patches on openSUSE 12.3+, EM_AARCH64 is not defined in earlier releases - update to icedtea-2.3.9 (bnc#816720) * Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization - S8001031, CVE-2013-2419: Better font processing - S8001040, CVE-2013-1537: Rework RMI model - S8001322: Refactor deserialization - S8001329, CVE-2013-1557: Augment RMI logging - S8003335: Better handling of Finalizer thread - S8003445: Adjust JAX-WS to focus on API - S8003543, CVE-2013-2415: Improve processing of MTOM attachments - S8004261: Improve input validation - S8004336, CVE-2013-2431: Better handling of method handle intrinsic frames - S8004986, CVE-2013-2383: Better handling of glyph table - S8004987, CVE-2013-2384: Improve font layout - S8004994, CVE-2013-1569: Improve checking of glyph table - S8005432: Update access to JAX-WS - S8005943: (process) Improved Runtime.exec - S8006309: More reliable control panel operation - S8006435, CVE-2013-2424: Improvements in JMX - S8006790: Improve checking for windows - S8006795: Improve font warning messages - S8007406: Improve accessibility of AccessBridge - S8007617, CVE-2013-2420: Better validation of images - S8007667, CVE-2013-2430: Better image reading - S8007918, CVE-2013-2429: Better image writing - S8008140: Better method handle resolution - S8009049, CVE-2013-2436: Better method handle binding - S8009063, CVE-2013-2426: Improve reliability of ConcurrentHashMap - S8009305, CVE-2013-0401: Improve AWT data transfer - S8009677, CVE-2013-2423: Better setting of setters - S8009699, CVE-2013-2421: Methodhandle lookup - S8009814, CVE-2013-1488: Better driver management - S8009857, CVE-2013-2422: Problem with plugin * Backports - S7130662, RH928500: GTK file dialog crashes with a NPE * Bug fixes - PR1363: Fedora 19 / rawhide FTBFS SIGILL - PR1401: Fix Zero build on 2.3.8 - Fix offset problem in ICU LETableReference. - Change -Werror fix to preserve OpenJDK default. - PR1303: Correct #ifdef to #if - PR1404: Failure to bootstrap with ecj 4.2 - Added url as source. Please see http://en.opensuse.org/SourceUrls - icedtea-2.3.8-zero-patches.patch: remove patch not applicable to zero compatible hotspot - java-1.7.0-openjdk-fork.patch: Add support for architectures without fork syscall - java-1.7.0-openjdk-aarch64.patch: Add support for aarch64 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-402 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): java-1_7_0-openjdk-1.7.0.6-3.37.1 java-1_7_0-openjdk-debuginfo-1.7.0.6-3.37.1 java-1_7_0-openjdk-debugsource-1.7.0.6-3.37.1 java-1_7_0-openjdk-demo-1.7.0.6-3.37.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.6-3.37.1 java-1_7_0-openjdk-devel-1.7.0.6-3.37.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.6-3.37.1 java-1_7_0-openjdk-javadoc-1.7.0.6-3.37.1 java-1_7_0-openjdk-src-1.7.0.6-3.37.1 References: http://support.novell.com/security/cve/CVE-2013-0401.html http://support.novell.com/security/cve/CVE-2013-1488.html http://support.novell.com/security/cve/CVE-2013-1518.html http://support.novell.com/security/cve/CVE-2013-1537.html http://support.novell.com/security/cve/CVE-2013-1557.html http://support.novell.com/security/cve/CVE-2013-1569.html http://support.novell.com/security/cve/CVE-2013-2383.html http://support.novell.com/security/cve/CVE-2013-2384.html http://support.novell.com/security/cve/CVE-2013-2415.html http://support.novell.com/security/cve/CVE-2013-2417.html http://support.novell.com/security/cve/CVE-2013-2419.html http://support.novell.com/security/cve/CVE-2013-2420.html http://support.novell.com/security/cve/CVE-2013-2421.html http://support.novell.com/security/cve/CVE-2013-2422.html http://support.novell.com/security/cve/CVE-2013-2423.html http://support.novell.com/security/cve/CVE-2013-2424.html http://support.novell.com/security/cve/CVE-2013-2426.html http://support.novell.com/security/cve/CVE-2013-2429.html http://support.novell.com/security/cve/CVE-2013-2430.html http://support.novell.com/security/cve/CVE-2013-2431.html http://support.novell.com/security/cve/CVE-2013-2436.html https://bugzilla.novell.com/816720

1 0

openSUSE-RU-2013:0742-1: moderate: zsh: Don't set globdots option, it might lead to unexpected problems
by maintenance＠opensuse.org 02 May '13

02 May '13

openSUSE Recommended Update: zsh: Don't set globdots option, it might lead to unexpected problems ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0742-1 Rating: moderate References: #815556 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with zsh: - bnc#815556: Don't set globdots option. The globdots option leads to '*' matching dotfiles, which could cause unexpected problems Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-381 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): zsh-4.3.17-2.4.1 zsh-debuginfo-4.3.17-2.4.1 zsh-debugsource-4.3.17-2.4.1 zsh-htmldoc-4.3.17-2.4.1 References: https://bugzilla.novell.com/815556

1 0

openSUSE-RU-2013:0741-1: gkrellm: build against libsensors
by maintenance＠opensuse.org 02 May '13

02 May '13

openSUSE Recommended Update: gkrellm: build against libsensors ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0741-1 Rating: low References: #803081 #803967 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issue with gkrellm: - bnc#803081, bnc#803967: really build against libsensors Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-387 - openSUSE 12.1: zypper in -t patch openSUSE-2013-387 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): gkrellm-2.3.5-12.6.1 gkrellm-debuginfo-2.3.5-12.6.1 gkrellm-devel-2.3.5-12.6.1 - openSUSE 12.2 (noarch): gkrellm-lang-2.3.5-12.6.1 - openSUSE 12.1 (i586 x86_64): gkrellm-2.3.5-7.6.1 gkrellm-debuginfo-2.3.5-7.6.1 gkrellm-devel-2.3.5-7.6.1 - openSUSE 12.1 (noarch): gkrellm-lang-2.3.5-7.6.1 References: https://bugzilla.novell.com/803081 https://bugzilla.novell.com/803967

1 0

openSUSE-RU-2013:0739-1: gnome-control-center: reallow changing timezone by default
by maintenance＠opensuse.org 02 May '13

02 May '13

openSUSE Recommended Update: gnome-control-center: reallow changing timezone by default ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0739-1 Rating: low References: #796055 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: gnome-control-center should not require the root password for changing timezone when system policy allows all users to do so, a regression caused by a previous update (bnc#796055) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-386 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): gnome-control-center-3.4.3.1-3.25.1 gnome-control-center-debuginfo-3.4.3.1-3.25.1 gnome-control-center-debugsource-3.4.3.1-3.25.1 gnome-control-center-devel-3.4.3.1-3.25.1 gnome-control-center-user-faces-3.4.3.1-3.25.1 gnome-settings-daemon-3.4.2-3.14.1 gnome-settings-daemon-debuginfo-3.4.2-3.14.1 gnome-settings-daemon-debugsource-3.4.2-3.14.1 gnome-settings-daemon-devel-3.4.2-3.14.1 - openSUSE 12.2 (noarch): gnome-control-center-branding-upstream-3.4.3.1-3.25.1 gnome-control-center-lang-3.4.3.1-3.25.1 gnome-settings-daemon-lang-3.4.2-3.14.1 References: https://bugzilla.novell.com/796055

1 0

openSUSE-RU-2013:0738-1: gnome-games: several fixes
by maintenance＠opensuse.org 02 May '13

02 May '13

openSUSE Recommended Update: gnome-games: several fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0738-1 Rating: low References: #815331 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: gnome-games was updated to a crash with glines and several issues with glchess (bnc#815331): - glines: fix segfault in 32-bit version (on openSUSE 12.2) - glchess: fix being able to castle when square being moved over is threatened by a pawn - glchess: fix AI hang when Phalanx attempts to promote - glchess: only allow pawns to move en passant - glchess: when moving en passant, remove captured pawn from the board - glchess: do not allow castling if the rook has been taken - glchess: fix "human" board orientation when playing as Black Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-376 - openSUSE 12.1: zypper in -t patch openSUSE-2013-376 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): glchess-3.4.2-3.6.1 glchess-debuginfo-3.4.2-3.6.1 glines-3.4.2-3.6.1 glines-debuginfo-3.4.2-3.6.1 gnect-3.4.2-3.6.1 gnect-debuginfo-3.4.2-3.6.1 gnibbles-3.4.2-3.6.1 gnibbles-debuginfo-3.4.2-3.6.1 gnobots2-3.4.2-3.6.1 gnobots2-debuginfo-3.4.2-3.6.1 gnome-games-3.4.2-3.6.1 gnome-games-debugsource-3.4.2-3.6.1 gnome-games-recommended-3.4.2-3.6.1 gnome-games-support-3.4.2-3.6.1 gnome-games-support-debuginfo-3.4.2-3.6.1 gnome-sudoku-3.4.2-3.6.1 gnomine-3.4.2-3.6.1 gnomine-debuginfo-3.4.2-3.6.1 gnotravex-3.4.2-3.6.1 gnotravex-debuginfo-3.4.2-3.6.1 gnotski-3.4.2-3.6.1 gnotski-debuginfo-3.4.2-3.6.1 gtali-3.4.2-3.6.1 gtali-debuginfo-3.4.2-3.6.1 iagno-3.4.2-3.6.1 iagno-debuginfo-3.4.2-3.6.1 lightsoff-3.4.2-3.6.1 lightsoff-debuginfo-3.4.2-3.6.1 mahjongg-3.4.2-3.6.1 mahjongg-debuginfo-3.4.2-3.6.1 quadrapassel-3.4.2-3.6.1 quadrapassel-debuginfo-3.4.2-3.6.1 swell-foop-3.4.2-3.6.1 swell-foop-debuginfo-3.4.2-3.6.1 - openSUSE 12.2 (noarch): glchess-lang-3.4.2-3.6.1 glines-lang-3.4.2-3.6.1 gnect-lang-3.4.2-3.6.1 gnibbles-lang-3.4.2-3.6.1 gnobots2-lang-3.4.2-3.6.1 gnome-games-support-lang-3.4.2-3.6.1 gnome-sudoku-lang-3.4.2-3.6.1 gnomine-lang-3.4.2-3.6.1 gnotravex-lang-3.4.2-3.6.1 gnotski-lang-3.4.2-3.6.1 gtali-lang-3.4.2-3.6.1 iagno-lang-3.4.2-3.6.1 lightsoff-lang-3.4.2-3.6.1 mahjongg-lang-3.4.2-3.6.1 quadrapassel-lang-3.4.2-3.6.1 swell-foop-lang-3.4.2-3.6.1 - openSUSE 12.1 (i586 x86_64): glchess-3.2.1-2.9.1 glchess-debuginfo-3.2.1-2.9.1 glines-3.2.1-2.9.1 glines-debuginfo-3.2.1-2.9.1 gnect-3.2.1-2.9.1 gnect-debuginfo-3.2.1-2.9.1 gnibbles-3.2.1-2.9.1 gnibbles-debuginfo-3.2.1-2.9.1 gnobots2-3.2.1-2.9.1 gnobots2-debuginfo-3.2.1-2.9.1 gnome-games-3.2.1-2.9.1 gnome-games-debugsource-3.2.1-2.9.1 gnome-games-recommended-3.2.1-2.9.1 gnome-games-support-3.2.1-2.9.1 gnome-games-support-debuginfo-3.2.1-2.9.1 gnome-sudoku-3.2.1-2.9.1 gnomine-3.2.1-2.9.1 gnomine-debuginfo-3.2.1-2.9.1 gnotravex-3.2.1-2.9.1 gnotravex-debuginfo-3.2.1-2.9.1 gnotski-3.2.1-2.9.1 gnotski-debuginfo-3.2.1-2.9.1 gtali-3.2.1-2.9.1 gtali-debuginfo-3.2.1-2.9.1 iagno-3.2.1-2.9.1 iagno-debuginfo-3.2.1-2.9.1 lightsoff-3.2.1-2.9.1 mahjongg-3.2.1-2.9.1 mahjongg-debuginfo-3.2.1-2.9.1 quadrapassel-3.2.1-2.9.1 quadrapassel-debuginfo-3.2.1-2.9.1 swell-foop-3.2.1-2.9.1 - openSUSE 12.1 (noarch): glchess-lang-3.2.1-2.9.1 glines-lang-3.2.1-2.9.1 gnect-lang-3.2.1-2.9.1 gnibbles-lang-3.2.1-2.9.1 gnobots2-lang-3.2.1-2.9.1 gnome-games-support-lang-3.2.1-2.9.1 gnome-sudoku-lang-3.2.1-2.9.1 gnomine-lang-3.2.1-2.9.1 gnotravex-lang-3.2.1-2.9.1 gnotski-lang-3.2.1-2.9.1 gtali-lang-3.2.1-2.9.1 iagno-lang-3.2.1-2.9.1 lightsoff-lang-3.2.1-2.9.1 mahjongg-lang-3.2.1-2.9.1 quadrapassel-lang-3.2.1-2.9.1 swell-foop-lang-3.2.1-2.9.1 References: https://bugzilla.novell.com/815331

1 0

openSUSE-RU-2013:0737-1: freerdp: Upstream upgrade to bugfix release 1.0.2 and several fixes
by maintenance＠opensuse.org 02 May '13

02 May '13

openSUSE Recommended Update: freerdp: Upstream upgrade to bugfix release 1.0.2 and several fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0737-1 Rating: low References: #785437 #793611 #809412 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update fixes the following issues for freerdp: - bnc#809412: Update to 1.0.2 + xfreerdp: * new parameter --from-stdin - prompts for unspecified arguments username, password, domain and host. * fix compability with x2go * fix keyboard state in remote app * documentation fixes * fixed crash when started with --authonly + libfreerdp-core: * several memory leaks and double frees were fixed * support for FastPath PDUs up to 32767 * register audio only if plugin is registered * load extensions after argument parsing + libfreerdp-utils: * fixed crash when HOME environment variable wasn't set + xfreerdp-server * deadlock fixed * accept TLSv1 and SSLv3 + smartcard * don't incorrectly set SCARD_STATE_IGNORE + libfreerdp-codec * performance improvement + libfreerdp-gdi + support for PatBlt DPa operation + plugin * ignore CHANNEL_FLAG_SUSPEND/CHANNEL_FLAG_RESUME to prevent possible crash + known problems: * If windows input language is set to german pressing the divde key (/) on the keypad results in minus (-) - only enable SSE2 on x86* - disable SSE2 for ARM and powerpc - bnc#793611: build with WITH_SSE2=ON as freerdp now uses runtime detection - bnc#785437: fixed a segfault in case device name is not provided - fixed divide key (/) on keypad for 1.0x series Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-359 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): freerdp-1.0.2-4.8.1 freerdp-debuginfo-1.0.2-4.8.1 freerdp-debugsource-1.0.2-4.8.1 freerdp-devel-1.0.2-4.8.1 libfreerdp-1_0-1.0.2-4.8.1 libfreerdp-1_0-debuginfo-1.0.2-4.8.1 libfreerdp-1_0-plugins-1.0.2-4.8.1 libfreerdp-1_0-plugins-debuginfo-1.0.2-4.8.1 References: https://bugzilla.novell.com/785437 https://bugzilla.novell.com/793611 https://bugzilla.novell.com/809412

1 0

openSUSE-RU-2013:0736-1: moderate: Softwarestack update 04/13
by maintenance＠opensuse.org 02 May '13

02 May '13

openSUSE Recommended Update: Softwarestack update 04/13 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0736-1 Rating: moderate References: #772965 #773467 #779740 #793809 #804219 #806568 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update fixes the following issues for the softwarestack: - zypper: * bnc#779740: Fix 'zypper lu' also listing products * bnc#793809: Fix -x printing edition values for arch-old * bnc#804219: Allow re-install with different arch upon explicit request * bnc#806568: fix zypper disregarding zypp.conf cache path settings * translation-updates - libzypp: * bnc#772965: Implement $ZYPP_LOCK_TIMEOUT: number of seconds to wait for a zypplock becoming available * Fix unnecessary creation of temporary Resolavbles * Relax evaluation of patch category tags (case insensitive) * bnc#773467: Fixed typo * Erase any old repo instance from pool when (re)loading from cache * translation-updates Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-364 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libqdialogsolver1-1.3.0-14.8.2 libqdialogsolver1-debuginfo-1.3.0-14.8.2 libqdialogsolver1-debugsource-1.3.0-14.8.2 libqdialogsolver1-devel-1.3.0-14.8.2 libsolv-debugsource-0.1.1-4.9.1 libsolv-demo-0.1.1-4.9.1 libsolv-demo-debuginfo-0.1.1-4.9.1 libsolv-devel-0.1.1-4.9.1 libsolv-devel-debuginfo-0.1.1-4.9.1 libsolv-tools-0.1.1-4.9.1 libsolv-tools-debuginfo-0.1.1-4.9.1 libzypp-11.9.0-2.12.2 libzypp-bindings-debugsource-0.5.13-2.4.1 libzypp-debuginfo-11.9.0-2.12.2 libzypp-debugsource-11.9.0-2.12.2 libzypp-devel-11.9.0-2.12.2 libzypp-testsuite-tools-4.2.11-14.12.1 perl-solv-0.1.1-4.9.1 perl-solv-debuginfo-0.1.1-4.9.1 perl-zypp-0.5.13-2.4.1 perl-zypp-debuginfo-0.5.13-2.4.1 python-solv-0.1.1-4.9.1 python-solv-debuginfo-0.1.1-4.9.1 python-zypp-0.5.13-2.4.1 python-zypp-debuginfo-0.5.13-2.4.1 ruby-solv-0.1.1-4.9.1 ruby-solv-debuginfo-0.1.1-4.9.1 ruby-zypp-0.5.13-2.4.1 ruby-zypp-debuginfo-0.5.13-2.4.1 zypp-plugin-python-0.3-5.5.1 zypper-1.7.12-1.13.1 zypper-debuginfo-1.7.12-1.13.1 zypper-debugsource-1.7.12-1.13.1 - openSUSE 12.2 (noarch): libzypp-testsuite-tools-data-4.2.11-14.12.1 zypper-aptitude-1.7.12-1.13.1 zypper-log-1.7.12-1.13.1 References: https://bugzilla.novell.com/772965 https://bugzilla.novell.com/773467 https://bugzilla.novell.com/779740 https://bugzilla.novell.com/793809 https://bugzilla.novell.com/804219 https://bugzilla.novell.com/806568

1 0

openSUSE-SU-2013:0735-1: moderate: update for icedtea-web
by opensuse-security＠opensuse.org 02 May '13

02 May '13

openSUSE Security Update: update for icedtea-web ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0735-1 Rating: moderate References: #815596 Cross-References: CVE-2013-1926 CVE-2013-1927 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: - update to 1.3.2 (bnc#815596) - Security Updates * CVE-2013-1927, RH884705: fixed gifar vulnerability * CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path. - Common * Added new option in itw-settings which allows users to set JVM arguments when plugin is initialized. - NetX * PR580: http://www.horaoficial.cl/ loads improperly - Plugin * PR1260: IcedTea-Web should not rely on GTK obsoletes icedtea-web-remove-gtk-dep.patch * PR1157: Applets can hang browser after fatal exception Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-372 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): icedtea-web-1.3.2-22.1 icedtea-web-debuginfo-1.3.2-22.1 icedtea-web-debugsource-1.3.2-22.1 - openSUSE 12.1 (noarch): icedtea-web-javadoc-1.3.2-22.1 References: http://support.novell.com/security/cve/CVE-2013-1926.html http://support.novell.com/security/cve/CVE-2013-1927.html https://bugzilla.novell.com/815596

1 0

openSUSE-RU-2013:0734-1: gnuchess: update to version 6.0.2
by maintenance＠opensuse.org 02 May '13

02 May '13

openSUSE Recommended Update: gnuchess: update to version 6.0.2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0734-1 Rating: low References: #786745 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with gnuchess: - update to 6.0.2 + New option --addbook to compile a book. + Maximum file name length of EPD files extended to 127 characters. + Book file allowed to be read only unless the BookLearn option is set (bnc#786745) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-356 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): gnuchess-6.0.2-2.4.1 gnuchess-debuginfo-6.0.2-2.4.1 gnuchess-debugsource-6.0.2-2.4.1 References: https://bugzilla.novell.com/786745

1 0

openSUSE-RU-2013:0733-1: moderate: pm-utils: lots of bugfixes
by maintenance＠opensuse.org 02 May '13

02 May '13

openSUSE Recommended Update: pm-utils: lots of bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0733-1 Rating: moderate References: #633491 #768867 #782891 #797966 #806632 #806635 #806641 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: pm-utils was updated to fix various bugs: -Changed licence to GPL 2.0 (without +) - bnc#768867 -Removed 99Zgrub-grub2.patch - fixed in git repo -be more verbose on modunload failures (inspired by bnc#633491) -correction for bnc#797966 intel-audio-powersave creates error entries in /var/log/pm-powersave.log when it finds supported hw looping over /sys/module/snd_* these errors are caused by simple typos. - Adopted to query network.service alias, that obsoletes the NETWORKMANAGER variable in /etc/sysconfig/network/config introduced in sysconfig-0.80. - bnc#782891 unified grub2 and grub2-efi making grub2-efi just an architecture of GRUB 2. Unify handling of both loaders to not depend on compatibility grub2-efi-* links. - Deleted 80acpi-fan, since it used /proc/acpi/fan/ and it was removed from kernel long ago. bnc#806635 - bnc#806632: rm pm/sleep.d/55NetworkManager, networkmanager now uses Upower and listens to dbus resume/suspend signals. - remove rc.cpufreq - bnc#806641 - Removed patches pm-utils-dont-fail-modunload-silently.diff and intel-audio-powersave_logoutput.diff - applied them in git repo. - Deleted 80acpi-fan, since it used /proc/acpi/fan/ and it was removed from kernel long ago. bnc#806635 - bnc#806632: rm pm/sleep.d/55NetworkManager, networkmanager now uses Upower and listens to dbus resume/suspend signals. - remove rc.cpufreq - bnc#806641 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-355 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): pm-utils-1.4.1-18.10.1 pm-utils-debuginfo-1.4.1-18.10.1 pm-utils-debugsource-1.4.1-18.10.1 pm-utils-ndiswrapper-1.4.1-18.10.1 References: https://bugzilla.novell.com/633491 https://bugzilla.novell.com/768867 https://bugzilla.novell.com/782891 https://bugzilla.novell.com/797966 https://bugzilla.novell.com/806632 https://bugzilla.novell.com/806635 https://bugzilla.novell.com/806641

1 0

openSUSE-RU-2013:0732-1: rabbitmq-server: fix init-script
by maintenance＠opensuse.org 02 May '13

02 May '13

openSUSE Recommended Update: rabbitmq-server: fix init-script ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0732-1 Rating: low References: #807540 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with rabbitmq-server: - bnc#807540: fixed init-script to properly daemonize Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-363 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): erlang-rabbitmq-client-2.8.2-2.4.1 rabbitmq-server-2.8.2-2.4.1 rabbitmq-server-plugins-2.8.2-2.4.1 References: https://bugzilla.novell.com/807540

1 0