July 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:1266-1: moderate: xorg-x11-Xvnc: fix for memory leaks on keypresses
by maintenance＠opensuse.org 29 Jul '13

29 Jul '13

openSUSE Recommended Update: xorg-x11-Xvnc: fix for memory leaks on keypresses ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1266-1 Rating: moderate References: #818033 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: A memory leak on key pressing in Xvnc was fixed. (bnc#818033) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-613 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): xorg-x11-Xvnc-7.6_1.0.1-3.12.1 xorg-x11-Xvnc-debuginfo-7.6_1.0.1-3.12.1 xorg-x11-Xvnc-debugsource-7.6_1.0.1-3.12.1 References: https://bugzilla.novell.com/818033

1 0

openSUSE-RU-2013:1259-1: Softwarestack update 06/13
by maintenance＠opensuse.org 26 Jul '13

26 Jul '13

openSUSE Recommended Update: Softwarestack update 06/13 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1259-1 Rating: low References: #640403 #741758 #779740 #793809 #798290 #803316 #811997 #812608 #819354 #820444 #824110 #825490 #827609 #828389 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has 14 recommended fixes can now be installed. Description: This update fixes the following issues for the softwarestack: zypper: - bnc#825490: Set default zypper.log mode to 0640 - fate#314994: Add -E, --show-enabled-only option to list repos/services command - bnc#640403: Added new option 'download-only' to source-install - bnc#811997: Show the right product in summary - disable repo permanently if required by user - bnc#798290: also search in file list when searching for a path name in provides - add option --verbose to search command (show details about matches) - bnc#741758: enable substrings and wildcards for 'info' - add search for provides, requires, conflicts, suggests and obsoletes, search for capabilities - bnc#779740: Fix 'zypper lu' also listing products - bnc#793809: Fix -x printing edition values for arch-old libzypp: - bnc#820444: Fix multiversion update candidate to respect an installed objects arch and vendor - Fix logfile truncation introduced by previous fix for bnc#825490 - bnc#827609: Workaround bnc#819354 by executing rpm in /. - bnc#824110: Speedup scanning for modaliases - bnc#803316: Fix file probing via tftp:// - Add modalias and multiversion spec to testcase - bnc#825490: Set logfile permission upon file creation only - New zypp.conf option 'download.transfer_timeout = 180' - Fix $ZYPP_MEDIA_CURL_DEBUG documentation - added new function zypp::ZYpp::provideSrcPackage - bnc#812608: Treat opensuse-education as separate vendor - AArch64 support - bnc#803316: added tftp-support - Adapt to libsolv dataiterator fixes (returning random data in some cases) - Require and adapt to changes in libsolv-0.3.0 - updated translations libsolv: - bnc#828389: fix multiversion handling in dup mode - fix memory leaks in the bindings - do recommends pruning after selecting the highest versions - bnc#820444: fix multiversion updating that was broken when the installed package was no longer available in a repository - fix dataiterator returning random data in some cases - add changelog parser - fix nasty bug in selection_filter_rel - allow re-run of an existing solver libzypp-testsuite-tools: - Fix reporting of solver problems in distupgrade Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-609 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libqdialogsolver1-1.3.1-2.10.2 libqdialogsolver1-debuginfo-1.3.1-2.10.2 libqdialogsolver1-debugsource-1.3.1-2.10.2 libqdialogsolver1-devel-1.3.1-2.10.2 libsolv-debugsource-0.3.2-2.10.1 libsolv-demo-0.3.2-2.10.1 libsolv-demo-debuginfo-0.3.2-2.10.1 libsolv-devel-0.3.2-2.10.1 libsolv-devel-debuginfo-0.3.2-2.10.1 libsolv-tools-0.3.2-2.10.1 libsolv-tools-debuginfo-0.3.2-2.10.1 libzypp-12.13.3-1.11.1 libzypp-bindings-debugsource-0.5.14-1.10.1 libzypp-debuginfo-12.13.3-1.11.1 libzypp-debugsource-12.13.3-1.11.1 libzypp-devel-12.13.3-1.11.1 libzypp-testsuite-tools-4.3.1-2.10.2 perl-solv-0.3.2-2.10.1 perl-solv-debuginfo-0.3.2-2.10.1 perl-zypp-0.5.14-1.10.1 perl-zypp-debuginfo-0.5.14-1.10.1 python-solv-0.3.2-2.10.1 python-solv-debuginfo-0.3.2-2.10.1 python-zypp-0.5.14-1.10.1 python-zypp-debuginfo-0.5.14-1.10.1 ruby-solv-0.3.2-2.10.1 ruby-solv-debuginfo-0.3.2-2.10.1 ruby-zypp-0.5.14-1.10.1 ruby-zypp-debuginfo-0.5.14-1.10.1 zypp-plugin-python-0.3-8.11.1 zypper-1.8.16-1.10.1 zypper-debuginfo-1.8.16-1.10.1 zypper-debugsource-1.8.16-1.10.1 - openSUSE 12.3 (noarch): zypper-aptitude-1.8.16-1.10.1 zypper-log-1.8.16-1.10.1 References: https://bugzilla.novell.com/640403 https://bugzilla.novell.com/741758 https://bugzilla.novell.com/779740 https://bugzilla.novell.com/793809 https://bugzilla.novell.com/798290 https://bugzilla.novell.com/803316 https://bugzilla.novell.com/811997 https://bugzilla.novell.com/812608 https://bugzilla.novell.com/819354 https://bugzilla.novell.com/820444 https://bugzilla.novell.com/824110 https://bugzilla.novell.com/825490 https://bugzilla.novell.com/827609 https://bugzilla.novell.com/828389

1 0

openSUSE-SU-2013:1258-1: moderate: srtp
by opensuse-security＠opensuse.org 26 Jul '13

26 Jul '13

openSUSE Security Update: srtp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1258-1 Rating: moderate References: #828009 Cross-References: CVE-2013-2139 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: A buffer overflow in srtp was fixed which could potentially be used by attackers to crash srtp using applications and potentially execute code (CVE-2013-2139, bnc828009). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-608 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libsrtp1-1.4.4-2.4.1 libsrtp1-debuginfo-1.4.4-2.4.1 srtp-debugsource-1.4.4-2.4.1 srtp-devel-1.4.4-2.4.1 References: http://support.novell.com/security/cve/CVE-2013-2139.html https://bugzilla.novell.com/828009

1 0

openSUSE-SU-2013:1253-1: moderate: update for kdebase4-workspace
by opensuse-security＠opensuse.org 25 Jul '13

25 Jul '13

openSUSE Security Update: update for kdebase4-workspace ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1253-1 Rating: moderate References: #829857 Cross-References: CVE-2013-4132 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - Added changeset_ra2bab28a.diff from upstream 4.11 branch, fixes kde#321576 - Added kdm-kcheckpass-Check-for-NULL-return-from-crypt-3-an.patch, (bnc#829857, CVE-2013-4132) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-607 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): kde4-kgreeter-plugins-4.10.5-1.111.1 kde4-kgreeter-plugins-debuginfo-4.10.5-1.111.1 kdebase4-workspace-4.10.5-1.111.1 kdebase4-workspace-branding-upstream-4.10.5-1.111.1 kdebase4-workspace-debuginfo-4.10.5-1.111.1 kdebase4-workspace-debugsource-4.10.5-1.111.1 kdebase4-workspace-devel-4.10.5-1.111.1 kdebase4-workspace-devel-debuginfo-4.10.5-1.111.1 kdebase4-workspace-ksysguardd-4.10.5-1.111.1 kdebase4-workspace-ksysguardd-debuginfo-4.10.5-1.111.1 kdebase4-workspace-liboxygenstyle-4.10.5-1.111.1 kdebase4-workspace-liboxygenstyle-debuginfo-4.10.5-1.111.1 kdebase4-workspace-plasma-calendar-4.10.5-1.111.1 kdebase4-workspace-plasma-calendar-debuginfo-4.10.5-1.111.1 kdm-4.10.5-1.111.1 kdm-branding-upstream-4.10.5-1.111.1 kdm-debuginfo-4.10.5-1.111.1 kwin-4.10.5-1.111.1 kwin-debuginfo-4.10.5-1.111.1 python-kdebase4-4.10.5-1.111.1 - openSUSE 12.3 (x86_64): kdebase4-workspace-liboxygenstyle-32bit-4.10.5-1.111.1 kdebase4-workspace-liboxygenstyle-debuginfo-32bit-4.10.5-1.111.1 References: http://support.novell.com/security/cve/CVE-2013-4132.html https://bugzilla.novell.com/829857

1 0

openSUSE-RU-2013:1252-1: important: plymouth: Fix possible hang for plymouth quit
by maintenance＠opensuse.org 25 Jul '13

25 Jul '13

openSUSE Recommended Update: plymouth: Fix possible hang for plymouth quit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1252-1 Rating: important References: #809806 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with plymouth: - bnc#809806, fdo#66824: Fix possible hang for plymouth quit Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-606 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libply-boot-client2-0.8.8_git201211022126-4.10.1 libply-boot-client2-debuginfo-0.8.8_git201211022126-4.10.1 libply-splash-core2-0.8.8_git201211022126-4.10.1 libply-splash-core2-debuginfo-0.8.8_git201211022126-4.10.1 libply-splash-graphics2-0.8.8_git201211022126-4.10.1 libply-splash-graphics2-debuginfo-0.8.8_git201211022126-4.10.1 libply2-0.8.8_git201211022126-4.10.1 libply2-debuginfo-0.8.8_git201211022126-4.10.1 plymouth-0.8.8_git201211022126-4.10.1 plymouth-debuginfo-0.8.8_git201211022126-4.10.1 plymouth-debugsource-0.8.8_git201211022126-4.10.1 plymouth-devel-0.8.8_git201211022126-4.10.1 plymouth-dracut-0.8.8_git201211022126-4.10.1 plymouth-plugin-fade-throbber-0.8.8_git201211022126-4.10.1 plymouth-plugin-fade-throbber-debuginfo-0.8.8_git201211022126-4.10.1 plymouth-plugin-label-0.8.8_git201211022126-4.10.1 plymouth-plugin-label-debuginfo-0.8.8_git201211022126-4.10.1 plymouth-plugin-script-0.8.8_git201211022126-4.10.1 plymouth-plugin-script-debuginfo-0.8.8_git201211022126-4.10.1 plymouth-plugin-space-flares-0.8.8_git201211022126-4.10.1 plymouth-plugin-space-flares-debuginfo-0.8.8_git201211022126-4.10.1 plymouth-plugin-throbgress-0.8.8_git201211022126-4.10.1 plymouth-plugin-throbgress-debuginfo-0.8.8_git201211022126-4.10.1 plymouth-plugin-two-step-0.8.8_git201211022126-4.10.1 plymouth-plugin-two-step-debuginfo-0.8.8_git201211022126-4.10.1 plymouth-scripts-0.8.8_git201211022126-4.10.1 plymouth-utils-0.8.8_git201211022126-4.10.1 plymouth-utils-debuginfo-0.8.8_git201211022126-4.10.1 plymouth-x11-renderer-0.8.8_git201211022126-4.10.1 plymouth-x11-renderer-debuginfo-0.8.8_git201211022126-4.10.1 - openSUSE 12.3 (noarch): plymouth-theme-fade-in-0.8.8_git201211022126-4.10.1 plymouth-theme-script-0.8.8_git201211022126-4.10.1 plymouth-theme-solar-0.8.8_git201211022126-4.10.1 plymouth-theme-spinfinity-0.8.8_git201211022126-4.10.1 plymouth-theme-spinner-0.8.8_git201211022126-4.10.1 References: https://bugzilla.novell.com/809806

1 0

openSUSE-SU-2013:1249-1: moderate: update for php5
by opensuse-security＠opensuse.org 24 Jul '13

24 Jul '13

openSUSE Security Update: update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1249-1 Rating: moderate References: #807707 #828020 #829207 Cross-References: CVE-2013-1635 CVE-2013-1643 CVE-2013-4113 CVE-2013-4635 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: - fixing the following security issues: * CVE-2013-4635.patch (bnc#828020): - Integer overflow in the SdnToJewish * CVE-2013-1635.patch and CVE-2013-1643.patch (bnc#807707): - reading system files via untrusted SOAP input - soap.wsdl_cache_dir function did not honour PHP open_basedir * CVE-2013-4113.patch (bnc#829207): - heap corruption due to badly formed xml Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-116 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apache2-mod_php5-5.3.5-355.1 apache2-mod_php5-debuginfo-5.3.5-355.1 php5-5.3.5-355.1 php5-bcmath-5.3.5-355.1 php5-bcmath-debuginfo-5.3.5-355.1 php5-bz2-5.3.5-355.1 php5-bz2-debuginfo-5.3.5-355.1 php5-calendar-5.3.5-355.1 php5-calendar-debuginfo-5.3.5-355.1 php5-ctype-5.3.5-355.1 php5-ctype-debuginfo-5.3.5-355.1 php5-curl-5.3.5-355.1 php5-curl-debuginfo-5.3.5-355.1 php5-dba-5.3.5-355.1 php5-dba-debuginfo-5.3.5-355.1 php5-debuginfo-5.3.5-355.1 php5-debugsource-5.3.5-355.1 php5-devel-5.3.5-355.1 php5-dom-5.3.5-355.1 php5-dom-debuginfo-5.3.5-355.1 php5-enchant-5.3.5-355.1 php5-enchant-debuginfo-5.3.5-355.1 php5-exif-5.3.5-355.1 php5-exif-debuginfo-5.3.5-355.1 php5-fastcgi-5.3.5-355.1 php5-fastcgi-debuginfo-5.3.5-355.1 php5-fileinfo-5.3.5-355.1 php5-fileinfo-debuginfo-5.3.5-355.1 php5-fpm-5.3.5-355.1 php5-fpm-debuginfo-5.3.5-355.1 php5-ftp-5.3.5-355.1 php5-ftp-debuginfo-5.3.5-355.1 php5-gd-5.3.5-355.1 php5-gd-debuginfo-5.3.5-355.1 php5-gettext-5.3.5-355.1 php5-gettext-debuginfo-5.3.5-355.1 php5-gmp-5.3.5-355.1 php5-gmp-debuginfo-5.3.5-355.1 php5-hash-5.3.5-355.1 php5-hash-debuginfo-5.3.5-355.1 php5-iconv-5.3.5-355.1 php5-iconv-debuginfo-5.3.5-355.1 php5-imap-5.3.5-355.1 php5-imap-debuginfo-5.3.5-355.1 php5-intl-5.3.5-355.1 php5-intl-debuginfo-5.3.5-355.1 php5-json-5.3.5-355.1 php5-json-debuginfo-5.3.5-355.1 php5-ldap-5.3.5-355.1 php5-ldap-debuginfo-5.3.5-355.1 php5-mbstring-5.3.5-355.1 php5-mbstring-debuginfo-5.3.5-355.1 php5-mcrypt-5.3.5-355.1 php5-mcrypt-debuginfo-5.3.5-355.1 php5-mysql-5.3.5-355.1 php5-mysql-debuginfo-5.3.5-355.1 php5-odbc-5.3.5-355.1 php5-odbc-debuginfo-5.3.5-355.1 php5-openssl-5.3.5-355.1 php5-openssl-debuginfo-5.3.5-355.1 php5-pcntl-5.3.5-355.1 php5-pcntl-debuginfo-5.3.5-355.1 php5-pdo-5.3.5-355.1 php5-pdo-debuginfo-5.3.5-355.1 php5-pgsql-5.3.5-355.1 php5-pgsql-debuginfo-5.3.5-355.1 php5-phar-5.3.5-355.1 php5-phar-debuginfo-5.3.5-355.1 php5-posix-5.3.5-355.1 php5-posix-debuginfo-5.3.5-355.1 php5-pspell-5.3.5-355.1 php5-pspell-debuginfo-5.3.5-355.1 php5-readline-5.3.5-355.1 php5-readline-debuginfo-5.3.5-355.1 php5-shmop-5.3.5-355.1 php5-shmop-debuginfo-5.3.5-355.1 php5-snmp-5.3.5-355.1 php5-snmp-debuginfo-5.3.5-355.1 php5-soap-5.3.5-355.1 php5-soap-debuginfo-5.3.5-355.1 php5-sockets-5.3.5-355.1 php5-sockets-debuginfo-5.3.5-355.1 php5-sqlite-5.3.5-355.1 php5-sqlite-debuginfo-5.3.5-355.1 php5-suhosin-5.3.5-355.1 php5-suhosin-debuginfo-5.3.5-355.1 php5-sysvmsg-5.3.5-355.1 php5-sysvmsg-debuginfo-5.3.5-355.1 php5-sysvsem-5.3.5-355.1 php5-sysvsem-debuginfo-5.3.5-355.1 php5-sysvshm-5.3.5-355.1 php5-sysvshm-debuginfo-5.3.5-355.1 php5-tidy-5.3.5-355.1 php5-tidy-debuginfo-5.3.5-355.1 php5-tokenizer-5.3.5-355.1 php5-tokenizer-debuginfo-5.3.5-355.1 php5-wddx-5.3.5-355.1 php5-wddx-debuginfo-5.3.5-355.1 php5-xmlreader-5.3.5-355.1 php5-xmlreader-debuginfo-5.3.5-355.1 php5-xmlrpc-5.3.5-355.1 php5-xmlrpc-debuginfo-5.3.5-355.1 php5-xmlwriter-5.3.5-355.1 php5-xmlwriter-debuginfo-5.3.5-355.1 php5-xsl-5.3.5-355.1 php5-xsl-debuginfo-5.3.5-355.1 php5-zip-5.3.5-355.1 php5-zip-debuginfo-5.3.5-355.1 php5-zlib-5.3.5-355.1 php5-zlib-debuginfo-5.3.5-355.1 - openSUSE 11.4 (noarch): php5-pear-5.3.5-355.1 References: http://support.novell.com/security/cve/CVE-2013-1635.html http://support.novell.com/security/cve/CVE-2013-1643.html http://support.novell.com/security/cve/CVE-2013-4113.html http://support.novell.com/security/cve/CVE-2013-4635.html https://bugzilla.novell.com/807707 https://bugzilla.novell.com/828020 https://bugzilla.novell.com/829207

1 0

openSUSE-SU-2013:1248-1: moderate: python-django to 1.4.5
by opensuse-security＠opensuse.org 24 Jul '13

24 Jul '13

openSUSE Security Update: python-django to 1.4.5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1248-1 Rating: moderate References: #787521 #807175 Cross-References: CVE-2012-4520 CVE-2013-0305 CVE-2013-0306 CVE-2013-1665 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: python-django was updated to 1.4.5 to fix various security issues and bugs. Update to 1.4.5: - Security release. - Fix bnc#807175 / bnc#787521 / CVE-2012-4520 / CVE-2013-0305 / CVE-2013-0306 and CVE-2013-1665. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-115 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): python-django-1.4.5-9.1 References: http://support.novell.com/security/cve/CVE-2012-4520.html http://support.novell.com/security/cve/CVE-2013-0305.html http://support.novell.com/security/cve/CVE-2013-0306.html http://support.novell.com/security/cve/CVE-2013-1665.html https://bugzilla.novell.com/787521 https://bugzilla.novell.com/807175

1 0

openSUSE-SU-2013:1247-1: moderate: java-1_6_0-openjdk to IcedTea 1.12.6
by opensuse-security＠opensuse.org 24 Jul '13

24 Jul '13

openSUSE Security Update: java-1_6_0-openjdk to IcedTea 1.12.6 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1247-1 Rating: moderate References: Cross-References: CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2450 CVE-2013-2451 CVE-2013-2452 CVE-2013-2453 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2459 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 26 vulnerabilities is now available. Description: These releases update our OpenJDK 6 support to include the latest security updates. The security fixes are as follows: * S6741606, CVE-2013-2407: Integrate Apache Santuario * S7158805, CVE-2013-2445: Better rewriting of nested subroutine calls * S7170730, CVE-2013-2451: Improve Windows network stack support. * S8000638, CVE-2013-2450: Improve deserialization * S8000642, CVE-2013-2446: Better handling of objects for transportation * S8001032: Restrict object access * S8001033, CVE-2013-2452: Refactor network address handling in virtual machine identifiers * S8001034, CVE-2013-1500: Memory management improvements * S8001038, CVE-2013-2444: Resourcefully handle resources * S8001043: Clarify definition restrictions * S8001309: Better handling of annotation interfaces * S8001318, CVE-2013-2447: Socket.getLocalAddress not consistent with InetAddress.getLocalHost * S8001330, CVE-2013-2443: Improve on checking order * S8003703, CVE-2013-2412: Update RMI connection dialog box * S8004584: Augment applet contextualization * S8005007: Better glyph processing * S8006328, CVE-2013-2448: Improve robustness of sound classes * S8006611: Improve scripting * S8007467: Improve robustness of JMX internal APIs * S8007471: Improve MBean notifications * S8007812, CVE-2013-2455: (reflect) Class.getEnclosingMethod problematic for some classes * S8008120, CVE-2013-2457: Improve JMX class checking * S8008124, CVE-2013-2453: Better compliance testing * S8008128: Better API coherence for JMX * S8008132, CVE-2013-2456: Better serialization support * S8008585: Better JMX data handling * S8008593: Better URLClassLoader resource management * S8008603: Improve provision of JMX providers * S8008611: Better handling of annotations in JMX * S8008615: Improve robustness of JMX internal APIs * S8008623: Better handling of MBeanServers * S8008744, CVE-2013-2407: Rework part of fix for JDK-6741606 * S8008982: Adjust JMX for underlying interface changes * S8009004: Better implementation of RMI connections * S8009013: Better handling of T2K glyphs * S8009034: Improve resulting notifications in JMX * S8009038: Improve JMX notification support * S8009067: Improve storing keys in KeyStore * S8009071, CVE-2013-2459: Improve shape handling * S8009235: Improve handling of TSA data * S8011243, CVE-2013-2470: Improve ImagingLib * S8011248, CVE-2013-2471: Better Component Rasters * S8011253, CVE-2013-2472: Better Short Component Rasters * S8011257, CVE-2013-2473: Better Byte Component Rasters * S8012375, CVE-2013-1571: Improve Javadoc framing * S8012421: Better positioning of PairPositioning * S8012438, CVE-2013-2463: Better image validation * S8012597, CVE-2013-2465: Better image channel verification * S8012601, CVE-2013-2469: Better validation of image layouts * S8014281, CVE-2013-2461: Better checking of XML signature * S8015997: Additional improvement in Javadoc framing Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-113 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b27.1.12.6-41.1 java-1_6_0-openjdk-debuginfo-1.6.0.0_b27.1.12.6-41.1 java-1_6_0-openjdk-debugsource-1.6.0.0_b27.1.12.6-41.1 java-1_6_0-openjdk-demo-1.6.0.0_b27.1.12.6-41.1 java-1_6_0-openjdk-demo-debuginfo-1.6.0.0_b27.1.12.6-41.1 java-1_6_0-openjdk-devel-1.6.0.0_b27.1.12.6-41.1 java-1_6_0-openjdk-devel-debuginfo-1.6.0.0_b27.1.12.6-41.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b27.1.12.6-41.1 java-1_6_0-openjdk-src-1.6.0.0_b27.1.12.6-41.1 References: http://support.novell.com/security/cve/CVE-2013-1500.html http://support.novell.com/security/cve/CVE-2013-1571.html http://support.novell.com/security/cve/CVE-2013-2407.html http://support.novell.com/security/cve/CVE-2013-2412.html http://support.novell.com/security/cve/CVE-2013-2443.html http://support.novell.com/security/cve/CVE-2013-2444.html http://support.novell.com/security/cve/CVE-2013-2445.html http://support.novell.com/security/cve/CVE-2013-2446.html http://support.novell.com/security/cve/CVE-2013-2447.html http://support.novell.com/security/cve/CVE-2013-2448.html http://support.novell.com/security/cve/CVE-2013-2450.html http://support.novell.com/security/cve/CVE-2013-2451.html http://support.novell.com/security/cve/CVE-2013-2452.html http://support.novell.com/security/cve/CVE-2013-2453.html http://support.novell.com/security/cve/CVE-2013-2455.html http://support.novell.com/security/cve/CVE-2013-2456.html http://support.novell.com/security/cve/CVE-2013-2457.html http://support.novell.com/security/cve/CVE-2013-2459.html http://support.novell.com/security/cve/CVE-2013-2461.html http://support.novell.com/security/cve/CVE-2013-2463.html http://support.novell.com/security/cve/CVE-2013-2465.html http://support.novell.com/security/cve/CVE-2013-2469.html http://support.novell.com/security/cve/CVE-2013-2470.html http://support.novell.com/security/cve/CVE-2013-2471.html http://support.novell.com/security/cve/CVE-2013-2472.html http://support.novell.com/security/cve/CVE-2013-2473.html

1 0

openSUSE-SU-2013:1246-1: moderate: libxml2 to fix out of bounds reads
by opensuse-security＠opensuse.org 24 Jul '13

24 Jul '13

openSUSE Security Update: libxml2 to fix out of bounds reads ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1246-1 Rating: moderate References: #829077 Cross-References: CVE-2013-2877 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Libxml2 was updated to fix buffer overread problems which could lead to crashes (out of bounds read). (CVE-2013-2877) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-114 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libxml2-2.7.8-45.1 libxml2-debuginfo-2.7.8-45.1 libxml2-debugsource-2.7.8-45.1 libxml2-devel-2.7.8-45.1 - openSUSE 11.4 (x86_64): libxml2-32bit-2.7.8-45.1 libxml2-debuginfo-32bit-2.7.8-45.1 libxml2-devel-32bit-2.7.8-45.1 - openSUSE 11.4 (noarch): libxml2-doc-2.7.8-45.1 - openSUSE 11.4 (ia64): libxml2-debuginfo-x86-2.7.8-45.1 libxml2-x86-2.7.8-45.1 References: http://support.novell.com/security/cve/CVE-2013-2877.html https://bugzilla.novell.com/829077

1 0

openSUSE-RU-2013:1245-1: grub2: recommanded update to fix grub2-mkconfig in xen domU
by maintenance＠opensuse.org 24 Jul '13

24 Jul '13

openSUSE Recommended Update: grub2: recommanded update to fix grub2-mkconfig in xen domU ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1245-1 Rating: low References: #825528 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with grub2: - bnc#825528: the grub2-mkconfig doesn't find kernel in xen domU Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-605 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): grub2-2.00-19.23.1 grub2-debuginfo-2.00-19.23.1 grub2-debugsource-2.00-19.23.1 grub2-efi-2.00-19.23.1 grub2-i386-pc-2.00-19.23.1 grub2-i386-pc-debuginfo-2.00-19.23.1 - openSUSE 12.3 (x86_64): grub2-x86_64-efi-2.00-19.23.1 grub2-x86_64-efi-debuginfo-2.00-19.23.1 - openSUSE 12.3 (i586): grub2-i386-efi-2.00-19.23.1 grub2-i386-efi-debuginfo-2.00-19.23.1 References: https://bugzilla.novell.com/825528

1 0