May 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2014:0617-1: moderate: alsa-oss: bugfix update
by maintenance＠opensuse.org 07 May '14

07 May '14

openSUSE Recommended Update: alsa-oss: bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0617-1 Rating: moderate References: #874331 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The ALSA OSS plugin was updated to fix bugs: - Fix for dmix with unaligned sample rate: - Revert patch 0001-Fix-path-to-libaoss.so.patch, as this causes regressions on multi-arch (bnc#874331) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-346 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): alsa-oss-1.0.25-8.4.1 alsa-oss-debuginfo-1.0.25-8.4.1 alsa-oss-debugsource-1.0.25-8.4.1 - openSUSE 13.1 (x86_64): alsa-oss-32bit-1.0.25-8.4.1 alsa-oss-debuginfo-32bit-1.0.25-8.4.1 References: https://bugzilla.novell.com/874331

1 0

openSUSE-SU-2014:0616-1: moderate: update for libpng15
by opensuse-security＠opensuse.org 07 May '14

07 May '14

openSUSE Security Update: update for libpng15 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0616-1 Rating: moderate References: #873123 #873124 Cross-References: CVE-2013-7353 CVE-2013-7354 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This libpng update fixes the following security issue: - bnc#873124: Fixed integer overflow leading to a heap-based buffer overflow in png_set_unknown_chunks() (CVE-2013-7353). - bnc#873123: integer overflow leading to a heap-based buffer overflow in png_set_sPLT() and png_set_text_2() (CVE-2013-7354) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2014-345 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libpng15-15-1.5.13-3.5.1 libpng15-15-debuginfo-1.5.13-3.5.1 libpng15-compat-devel-1.5.13-3.5.1 libpng15-debugsource-1.5.13-3.5.1 libpng15-devel-1.5.13-3.5.1 - openSUSE 12.3 (x86_64): libpng15-15-32bit-1.5.13-3.5.1 libpng15-15-debuginfo-32bit-1.5.13-3.5.1 libpng15-compat-devel-32bit-1.5.13-3.5.1 libpng15-devel-32bit-1.5.13-3.5.1 References: http://support.novell.com/security/cve/CVE-2013-7353.html http://support.novell.com/security/cve/CVE-2013-7354.html https://bugzilla.novell.com/873123 https://bugzilla.novell.com/873124

1 0

openSUSE-RU-2014:0615-1: moderate: libeXosip2: specify default SSL certificate location
by maintenance＠opensuse.org 07 May '14

07 May '14

openSUSE Recommended Update: libeXosip2: specify default SSL certificate location ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0615-1 Rating: moderate References: #871099 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: libeXosip2 was updated to have the default SSL certificate location specified, so TLS/DTLS connections can verify the remote server. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-344 - openSUSE 12.3: zypper in -t patch openSUSE-2014-344 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libeXosip2-3.5.0-15.4.1 libeXosip2-6-3.5.0-15.4.1 libeXosip2-6-debuginfo-3.5.0-15.4.1 libeXosip2-debuginfo-3.5.0-15.4.1 libeXosip2-debugsource-3.5.0-15.4.1 libeXosip2-devel-3.5.0-15.4.1 - openSUSE 12.3 (i586 x86_64): libeXosip2-3.5.0-11.4.1 libeXosip2-6-3.5.0-11.4.1 libeXosip2-6-debuginfo-3.5.0-11.4.1 libeXosip2-debuginfo-3.5.0-11.4.1 libeXosip2-debugsource-3.5.0-11.4.1 libeXosip2-devel-3.5.0-11.4.1 References: https://bugzilla.novell.com/871099

1 0

openSUSE-SU-2014:0612-1: moderate: update for wireshark
by opensuse-security＠opensuse.org 05 May '14

05 May '14

openSUSE Security Update: update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0612-1 Rating: moderate References: #874760 Cross-References: CVE-2014-2907 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This wireshark update to version 1.10.7 fixes the following security issue: - bnc#874760: Fixed RTP dissector vulnerabilities (CVE-2014-2907). - Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.10.7.htm l Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-343 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): wireshark-1.10.7-12.1 wireshark-debuginfo-1.10.7-12.1 wireshark-debugsource-1.10.7-12.1 wireshark-devel-1.10.7-12.1 References: http://support.novell.com/security/cve/CVE-2014-2907.html https://bugzilla.novell.com/874760

1 0

openSUSE-RU-2014:0611-1: moderate: enblend-enfuse: Update to 4.1.3
by maintenance＠opensuse.org 05 May '14

05 May '14

openSUSE Recommended Update: enblend-enfuse: Update to 4.1.3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0611-1 Rating: moderate References: #852185 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with enblend-enfuse: - bnc#852185: Update to 4.1.3 + Bug Fixes: * [Enblend only] Fix problem of multiple, almost-identical seamlines that produce inexplicable black areas in the output panorama. + LCMS 2.5 is now required to build. - Ensure only -Os is used for compilation, not -O2 - update to version 4.1.2: + Bug Fixes: * lp#1214004: [Enblend and Enfuse] Fix a bug in the highlight-recovery that caused Enfuse to bail out with the uncaught exception "Minimizer1D::set_bracket: minimum not bracketed". * [Enfuse] Clean up seemingly random, bright-colored pixels that sometimes show up when fusing images with high contrast and "large" color profiles. * [Enblend only] Fix a race condition in the seam-line optimizer that can cause wrongly placed seams. * [Enblend and Enfuse] Use a per-thread storage of all OpenMP Vigra-functors. This avoids data races. * [Enblend and Enfuse] The Boost implementation of the `Mersenne Twister' random number generator caused segmentation faults when used in the OpenMP-enabled versions of Enblend and Enfuse. The new implementation is based on the GNU Scientific Library (GSL), which plays nicely with concurrent accesses. * [Enblend only] Correct a mistake that causes overlapping images with multiple seams to be blended incorrectly. * [Enblend only] Require the OpenGL extension `GL_ARB_texture_rectangle' for the `--gpu' option to work. This does away with a pesky warning of OpenGL drivers that do support this extension and avoids crashes with drivers that don't. The GPU performance improvement of Enblend via `--gpu' now is only available with drivers that feature `GL_ARB_texture_rectangle' (among many other required OpenGL extensions). The OpenGL warning about odd texture sizes is unaffected by this change. * [Enblend and Enfuse] Fix a longstanding quirk, which allowed to load masks that were unsuitable for processing. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-337 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): enblend-enfuse-4.1.3-3.4.1 enblend-enfuse-debuginfo-4.1.3-3.4.1 enblend-enfuse-debugsource-4.1.3-3.4.1 References: https://bugzilla.novell.com/852185

1 0

openSUSE-RU-2014:0610-1: moderate: yast2-ruby-bindings: Fix hang out of YaST2 in Turkish locale
by maintenance＠opensuse.org 05 May '14

05 May '14

openSUSE Recommended Update: yast2-ruby-bindings: Fix hang out of YaST2 in Turkish locale ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0610-1 Rating: moderate References: #852242 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with yast2-ruby-bindings: - bnc#852242: Fix hang out of YaST2 in Turkish locale. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-339 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): yast2-ruby-bindings-3.0.5-4.1 yast2-ruby-bindings-debuginfo-3.0.5-4.1 yast2-ruby-bindings-debugsource-3.0.5-4.1 References: https://bugzilla.novell.com/852242

1 0

openSUSE-RU-2014:0609-1: moderate: Wireshark: Update to 1.8.14
by maintenance＠opensuse.org 05 May '14

05 May '14

openSUSE Recommended Update: Wireshark: Update to 1.8.14 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0609-1 Rating: moderate References: #874692 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following non-security issues with Wireshark: - bnc#874692: update to 1.8.14 + bugs fixed: * Lua: Trying to get/access a Preference before its registered causes a segfault * Some value_string strings contain newlines * Tighten the NO_MORE_DATA_CHECK macros + Further bug fixes and updated protocol support as listed in: * https://www.wireshark.org/docs/relnotes/wireshark-1.8.14.htm l Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2014-341 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): wireshark-1.8.14-1.36.1 wireshark-debuginfo-1.8.14-1.36.1 wireshark-debugsource-1.8.14-1.36.1 wireshark-devel-1.8.14-1.36.1 References: https://bugzilla.novell.com/874692

1 0

openSUSE-RU-2014:0608-1: screen: Update to 4.2.0
by maintenance＠opensuse.org 05 May '14

05 May '14

openSUSE Recommended Update: screen: Update to 4.2.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0608-1 Rating: low References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issues with screen: - Update to 4.2.0 + some of the changes (for all changes, please see the changelog) * layouts * window groups * better mouse support * vertical split * new and expanded commands - added %rundir with /var/run for 1310 and before; but /run afterwards. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-338 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): screen-4.2.0-15.4.1 screen-debuginfo-4.2.0-15.4.1 screen-debugsource-4.2.0-15.4.1 References:

1 0

openSUSE-RU-2014:0607-1: important: kernel-firmware: Use qlogic firmware from linux-firmware instead of the separate archive
by maintenance＠opensuse.org 05 May '14

05 May '14

openSUSE Recommended Update: kernel-firmware: Use qlogic firmware from linux-firmware instead of the separate archive ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0607-1 Rating: important References: #846629 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with kernel-firmware: - bnc#846629: Use qlogic firmware from linux-firmware instead of the separate archive. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-340 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): kernel-firmware-20130714git-2.13.1 ucode-amd-20130714git-2.13.1 References: https://bugzilla.novell.com/846629

1 0

openSUSE-RU-2014:0606-1: yast2-network: enlarged nic name input field
by maintenance＠opensuse.org 05 May '14

05 May '14

openSUSE Recommended Update: yast2-network: enlarged nic name input field ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0606-1 Rating: low References: #869224 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with yast2-network: - bnc#869224: enlarged nic name input field in "Edit Nic Name" dialogue in ncurses mode Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-342 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): yast2-network-3.0.9-10.2 yast2-network-devel-doc-3.0.9-10.2 References: https://bugzilla.novell.com/869224

1 0