October 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2012:1341-1: kdepim4: Make ktimetracker work
by maintenance＠opensuse.org 15 Oct '12

15 Oct '12

openSUSE Recommended Update: kdepim4: Make ktimetracker work ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1341-1 Rating: low References: #725090 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: kdepim4 was updated to make ktimetracker actually work (bnc#725090, kde#283479). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-704 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): akonadi-4.8.5-2.12.1 akonadi-debuginfo-4.8.5-2.12.1 akregator-4.8.5-2.12.1 akregator-debuginfo-4.8.5-2.12.1 blogilo-4.8.5-2.12.1 blogilo-debuginfo-4.8.5-2.12.1 kaddressbook-4.8.5-2.12.1 kaddressbook-debuginfo-4.8.5-2.12.1 kalarm-4.8.5-2.12.1 kalarm-debuginfo-4.8.5-2.12.1 kdepim4-4.8.5-2.12.1 kdepim4-debuginfo-4.8.5-2.12.1 kdepim4-debugsource-4.8.5-2.12.1 kjots-4.8.5-2.12.1 kjots-debuginfo-4.8.5-2.12.1 kmail-4.8.5-2.12.1 kmail-debuginfo-4.8.5-2.12.1 knode-4.8.5-2.12.1 knode-debuginfo-4.8.5-2.12.1 knotes-4.8.5-2.12.1 knotes-debuginfo-4.8.5-2.12.1 kontact-4.8.5-2.12.1 kontact-debuginfo-4.8.5-2.12.1 korganizer-4.8.5-2.12.1 korganizer-debuginfo-4.8.5-2.12.1 ktimetracker-4.8.5-2.12.1 ktimetracker-debuginfo-4.8.5-2.12.1 libkdepim4-4.8.5-2.12.1 libkdepim4-debuginfo-4.8.5-2.12.1 References: https://bugzilla.novell.com/725090

1 0

openSUSE-RU-2012:1340-1: kdepim4: Make ktimetracker work
by maintenance＠opensuse.org 15 Oct '12

15 Oct '12

openSUSE Recommended Update: kdepim4: Make ktimetracker work ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1340-1 Rating: low References: #725090 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: ktimetracker was not working as shipped, included the fix to make it work. (bnc#725090, kde#283479) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-703 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): akonadi-4.7.2-3.9.1 akonadi-debuginfo-4.7.2-3.9.1 akregator-4.7.2-3.9.1 akregator-debuginfo-4.7.2-3.9.1 blogilo-4.7.2-3.9.1 blogilo-debuginfo-4.7.2-3.9.1 kaddressbook-4.7.2-3.9.1 kaddressbook-debuginfo-4.7.2-3.9.1 kalarm-4.7.2-3.9.1 kalarm-debuginfo-4.7.2-3.9.1 kdepim4-4.7.2-3.9.1 kdepim4-debuginfo-4.7.2-3.9.1 kdepim4-debugsource-4.7.2-3.9.1 kdepim4-wizards-4.7.2-3.9.1 kdepim4-wizards-debuginfo-4.7.2-3.9.1 kjots-4.7.2-3.9.1 kjots-debuginfo-4.7.2-3.9.1 kmail-4.7.2-3.9.1 kmail-debuginfo-4.7.2-3.9.1 knode-4.7.2-3.9.1 knode-debuginfo-4.7.2-3.9.1 knotes-4.7.2-3.9.1 knotes-debuginfo-4.7.2-3.9.1 kontact-4.7.2-3.9.1 kontact-debuginfo-4.7.2-3.9.1 korganizer-4.7.2-3.9.1 korganizer-debuginfo-4.7.2-3.9.1 ktimetracker-4.7.2-3.9.1 ktimetracker-debuginfo-4.7.2-3.9.1 libkdepim4-4.7.2-3.9.1 libkdepim4-debuginfo-4.7.2-3.9.1 References: https://bugzilla.novell.com/725090

1 0

openSUSE-RU-2012:1339-1: udev: Don't run mkinitrd while installing/upgrading from Yast
by maintenance＠opensuse.org 15 Oct '12

15 Oct '12

openSUSE Recommended Update: udev: Don't run mkinitrd while installing/upgrading from Yast ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1339-1 Rating: low References: #782539 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issue for udev: - bnc#782539: Don't run mkinitrd while installing/upgrading from Yast Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-706 - openSUSE 12.1: zypper in -t patch openSUSE-2012-706 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libgudev-1_0-0-182-4.21.1 libgudev-1_0-0-debuginfo-182-4.21.1 libgudev-1_0-devel-182-4.21.1 libudev-devel-182-4.21.1 libudev0-182-4.21.1 libudev0-debuginfo-182-4.21.1 typelib-1_0-GUdev-1_0-182-4.21.1 udev-182-4.21.1 udev-debuginfo-182-4.21.1 udev-debugsource-182-4.21.1 - openSUSE 12.2 (x86_64): libgudev-1_0-0-32bit-182-4.21.1 libgudev-1_0-0-debuginfo-32bit-182-4.21.1 libudev0-32bit-182-4.21.1 libudev0-debuginfo-32bit-182-4.21.1 - openSUSE 12.1 (i586 x86_64): libgudev-1_0-0-173-3.13.1 libgudev-1_0-0-debuginfo-173-3.13.1 libgudev-1_0-devel-173-3.13.1 libudev-devel-173-3.13.1 libudev0-173-3.13.1 libudev0-debuginfo-173-3.13.1 udev-173-3.13.1 udev-debuginfo-173-3.13.1 udev-debugsource-173-3.13.1 - openSUSE 12.1 (x86_64): libgudev-1_0-0-32bit-173-3.13.1 libgudev-1_0-0-debuginfo-32bit-173-3.13.1 libudev0-32bit-173-3.13.1 libudev0-debuginfo-32bit-173-3.13.1 - openSUSE 12.1 (ia64): libgudev-1_0-0-debuginfo-x86-173-3.13.1 libgudev-1_0-0-x86-173-3.13.1 libudev0-debuginfo-x86-173-3.13.1 libudev0-x86-173-3.13.1 References: https://bugzilla.novell.com/782539

1 0

openSUSE-RU-2012:1338-1: iscsitarget: some bugfixes
by maintenance＠opensuse.org 15 Oct '12

15 Oct '12

openSUSE Recommended Update: iscsitarget: some bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1338-1 Rating: low References: #781422 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: iscsitarget was updated to fix some small issues: - fixed service file to use correct PIDFILE (bnc#781422) - added missing ietadm.8 man page - move ietd.conf to new dir /etc/iet (2 commits for this) - deliever initiators.{allow,deny} and targets.allow conf files Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-702 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): iscsitarget-1.4.20.3-2.8.1 iscsitarget-debuginfo-1.4.20.3-2.8.1 iscsitarget-debugsource-1.4.20.3-2.8.1 iscsitarget-kmp-default-1.4.20.3_k3.4.6_2.10-2.8.1 iscsitarget-kmp-default-debuginfo-1.4.20.3_k3.4.6_2.10-2.8.1 iscsitarget-kmp-desktop-1.4.20.3_k3.4.6_2.10-2.8.1 iscsitarget-kmp-desktop-debuginfo-1.4.20.3_k3.4.6_2.10-2.8.1 iscsitarget-kmp-xen-1.4.20.3_k3.4.6_2.10-2.8.1 iscsitarget-kmp-xen-debuginfo-1.4.20.3_k3.4.6_2.10-2.8.1 - openSUSE 12.2 (i586): iscsitarget-kmp-pae-1.4.20.3_k3.4.6_2.10-2.8.1 iscsitarget-kmp-pae-debuginfo-1.4.20.3_k3.4.6_2.10-2.8.1 References: https://bugzilla.novell.com/781422

1 0

openSUSE-RU-2012:1337-1: kdebase4-openSUSE-theme: Fixed KDM theme for users upgrading from < 12.1
by maintenance＠opensuse.org 15 Oct '12

15 Oct '12

openSUSE Recommended Update: kdebase4-openSUSE-theme: Fixed KDM theme for users upgrading from < 12.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1337-1 Rating: low References: #781687 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Fixed KDM theme for users upgrading from versions before openSUSE 12.1 (bnc#781687) (rename SUSE to openSUSE). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-701 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (noarch): bootsplash-branding-openSUSE-12.2-11.12.1 branding-openSUSE-12.2-11.12.1 dynamic-wallpaper-branding-openSUSE-12.2-11.12.1 gfxboot-branding-openSUSE-12.2-11.12.1 gimp-branding-openSUSE-12.2-11.12.1 grub2-branding-openSUSE-12.2-11.12.1 kdelibs4-branding-openSUSE-12.2-11.12.1 kdm-branding-openSUSE-12.2-11.12.1 ksplash-qml-branding-openSUSE-12.2-11.12.1 ksplashx-branding-openSUSE-12.2-11.12.1 plymouth-branding-openSUSE-12.2-11.12.1 susegreeter-branding-openSUSE-12.2-11.12.1 wallpaper-branding-openSUSE-12.2-11.12.1 xfce4-splash-branding-openSUSE-12.2-11.12.1 yast2-qt-branding-openSUSE-12.2-11.12.1 References: https://bugzilla.novell.com/781687

1 0

openSUSE-SU-2012:1330-1: important: kernel: security and bugfix update
by opensuse-security＠opensuse.org 12 Oct '12

12 Oct '12

openSUSE Security Update: kernel: security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1330-1 Rating: important References: #762693 #765230 #771392 #772566 #772831 #772923 #773406 #774523 #774859 #776925 #778630 #779432 #780624 #781134 Cross-References: CVE-2012-3412 CVE-2012-3520 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has 12 fixes is now available. Description: This kernel update to 3.4.11 fixes various bugs and security issues. The changes up to 3.4.11 contain both security and bugfixes and are not explicitly listed here. Following security issues were fixed: CVE-2012-3520: Force passing credentials, otherwise local services could be fooled to assume requests coming from root. CVE-2012-3412: Do not allow extreme TSO parameters in the sfc driver and tcp stack. Following non-security bugs were fixed: - nbd: clear waiting_queue on shutdown (bnc#778630). - NFS: avoid warning from nfs_drop_nlink (bnc#780624). - net: do not disable sg for packets requiring no checksum (bnc#774859). - sfc: Fix maximum number of TSO segments and minimum TX queue size (bnc#774523 CVE-2012-3412). - net: Allow driver to limit number of GSO segments per skb (bnc#774523 CVE-2012-3412). - drm/nouveau: fix booting with plymouth + dumb support (bnc#771392). - memcg: warn on deeper hierarchies with use_hierarchy==0 (bnc#781134). - Linux 3.4.11. - Update config files. - Refresh patches.suse/scsi-error-test-unit-ready-timeout. - Btrfs: fix tree log remove space corner case (bnc#779432) - irq_remap: disable IRQ remapping if any IOAPIC lacks an IOMMU. - Linux 3.4.10. - Linux 3.4.9. - kABI: protect struct irq_desc. - Linux 3.4.8. - kABI: sdhci, remove inclusion. - reiserfs: fix deadlock with nfs racing on create/lookup (bnc#762693). - Properly update Xen patches to 3.4.7. - Refresh other Xen patches (bnc#772831). - config: enable various ARM errata workarounds to improve stability - Import kabi files for 12.2 - rpm/config.sh: Build the KOTD against 12.2 - ASoC: omap: Add missing modules aliases to get sound working on omap devices. - Update config files to fix build - rt2800: add chipset revision RT5390R support (bnc#772566). - reiserfs: fix deadlocks with quotas - ACPI, APEI: Fixup common access width firmware bug (bnc#765230). - i2c/busses: Fix build error if CONFIG_I2C_DESIGNWARE_PLATFORM=y and CONFIG_I2C_DESIGN. - Update ARM configs to match kernel 3.4.7 - Update ARM omap2plus config to match kernel 3.4.7 and add Smartreflex support (auto voltage) - ALSA: hda - Fix mute-LED GPIO initialization for IDT codecs (bnc#772923). - ALSA: hda - Fix polarity of mute LED on HP Mini 210 (bnc#772923). - Linux 3.4.7. - Refresh patches.suse/dm-raid45-26-Nov-2009.patch. - Enable RTL8150 for omap2plus Generic USB Network device that also works fine on ARM, so enable it - update RNDIS_OID_GEN_RNDIS_CONFIG_PARAMETER patch name - Drivers: hv: Cleanup the guest ID computation. - hyperv: Add a check for ring_size value. - hyperv: Add error handling to rndis_filter_device_add(). - Drivers: hv: Change the hex constant to a decimal constant. - hyperv: Add support for setting MAC from within guests. - net/hyperv: Use wait_event on outstanding sends during device removal. - hv: add RNDIS_OID_GEN_RNDIS_CONFIG_PARAMETER. - Refresh patches.suse/SUSE-bootsplash. Fix wrong vfree() (bnc#773406) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-700 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): kernel-default-3.4.11-2.16.1 kernel-default-base-3.4.11-2.16.1 kernel-default-base-debuginfo-3.4.11-2.16.1 kernel-default-debuginfo-3.4.11-2.16.1 kernel-default-debugsource-3.4.11-2.16.1 kernel-default-devel-3.4.11-2.16.1 kernel-default-devel-debuginfo-3.4.11-2.16.1 kernel-syms-3.4.11-2.16.1 - openSUSE 12.2 (i686 x86_64): kernel-debug-3.4.11-2.16.1 kernel-debug-base-3.4.11-2.16.1 kernel-debug-base-debuginfo-3.4.11-2.16.1 kernel-debug-debuginfo-3.4.11-2.16.1 kernel-debug-debugsource-3.4.11-2.16.1 kernel-debug-devel-3.4.11-2.16.1 kernel-debug-devel-debuginfo-3.4.11-2.16.1 kernel-desktop-3.4.11-2.16.1 kernel-desktop-base-3.4.11-2.16.1 kernel-desktop-base-debuginfo-3.4.11-2.16.1 kernel-desktop-debuginfo-3.4.11-2.16.1 kernel-desktop-debugsource-3.4.11-2.16.1 kernel-desktop-devel-3.4.11-2.16.1 kernel-desktop-devel-debuginfo-3.4.11-2.16.1 kernel-ec2-3.4.11-2.16.1 kernel-ec2-base-3.4.11-2.16.1 kernel-ec2-base-debuginfo-3.4.11-2.16.1 kernel-ec2-debuginfo-3.4.11-2.16.1 kernel-ec2-debugsource-3.4.11-2.16.1 kernel-ec2-devel-3.4.11-2.16.1 kernel-ec2-devel-debuginfo-3.4.11-2.16.1 kernel-ec2-extra-3.4.11-2.16.1 kernel-ec2-extra-debuginfo-3.4.11-2.16.1 kernel-trace-3.4.11-2.16.1 kernel-trace-base-3.4.11-2.16.1 kernel-trace-base-debuginfo-3.4.11-2.16.1 kernel-trace-debuginfo-3.4.11-2.16.1 kernel-trace-debugsource-3.4.11-2.16.1 kernel-trace-devel-3.4.11-2.16.1 kernel-trace-devel-debuginfo-3.4.11-2.16.1 kernel-vanilla-3.4.11-2.16.1 kernel-vanilla-debuginfo-3.4.11-2.16.1 kernel-vanilla-debugsource-3.4.11-2.16.1 kernel-vanilla-devel-3.4.11-2.16.1 kernel-vanilla-devel-debuginfo-3.4.11-2.16.1 kernel-xen-3.4.11-2.16.1 kernel-xen-base-3.4.11-2.16.1 kernel-xen-base-debuginfo-3.4.11-2.16.1 kernel-xen-debuginfo-3.4.11-2.16.1 kernel-xen-debugsource-3.4.11-2.16.1 kernel-xen-devel-3.4.11-2.16.1 kernel-xen-devel-debuginfo-3.4.11-2.16.1 - openSUSE 12.2 (noarch): kernel-devel-3.4.11-2.16.1 kernel-docs-3.4.11-2.16.2 kernel-source-3.4.11-2.16.1 kernel-source-vanilla-3.4.11-2.16.1 - openSUSE 12.2 (i686): kernel-pae-3.4.11-2.16.1 kernel-pae-base-3.4.11-2.16.1 kernel-pae-base-debuginfo-3.4.11-2.16.1 kernel-pae-debuginfo-3.4.11-2.16.1 kernel-pae-debugsource-3.4.11-2.16.1 kernel-pae-devel-3.4.11-2.16.1 kernel-pae-devel-debuginfo-3.4.11-2.16.1 References: http://support.novell.com/security/cve/CVE-2012-3412.html http://support.novell.com/security/cve/CVE-2012-3520.html https://bugzilla.novell.com/762693 https://bugzilla.novell.com/765230 https://bugzilla.novell.com/771392 https://bugzilla.novell.com/772566 https://bugzilla.novell.com/772831 https://bugzilla.novell.com/772923 https://bugzilla.novell.com/773406 https://bugzilla.novell.com/774523 https://bugzilla.novell.com/774859 https://bugzilla.novell.com/776925 https://bugzilla.novell.com/778630 https://bugzilla.novell.com/779432 https://bugzilla.novell.com/780624 https://bugzilla.novell.com/781134

1 0

openSUSE-SU-2012:1329-1: optipng
by opensuse-security＠opensuse.org 11 Oct '12

11 Oct '12

openSUSE Security Update: optipng ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1329-1 Rating: low References: #780874 Cross-References: CVE-2012-4432 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: optipng received a fix for a palette reduction use-after-free vulnerability. (CVE-2012-4432) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-699 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): optipng-0.7-2.4.1 optipng-debuginfo-0.7-2.4.1 optipng-debugsource-0.7-2.4.1 References: http://support.novell.com/security/cve/CVE-2012-4432.html https://bugzilla.novell.com/780874

1 0

openSUSE-SU-2012:1328-1: moderate: wireshark: update 1.8.3
by opensuse-security＠opensuse.org 11 Oct '12

11 Oct '12

openSUSE Security Update: wireshark: update 1.8.3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1328-1 Rating: moderate References: #781594 #783275 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: wireshark is updated to version 1.8.3 on all openSUSE distributions, bringing bug and security fixes. openSUSE 11.4 and 12.1 received a version upgrade, so also receiving lots of new features. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-698 - openSUSE 12.1: zypper in -t patch openSUSE-2012-698 - openSUSE 11.4: zypper in -t patch openSUSE-2012-698 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): wireshark-1.8.3-1.7.1 wireshark-debuginfo-1.8.3-1.7.1 wireshark-debugsource-1.8.3-1.7.1 wireshark-devel-1.8.3-1.7.1 - openSUSE 12.1 (i586 x86_64): wireshark-1.8.3-3.29.1 wireshark-debuginfo-1.8.3-3.29.1 wireshark-debugsource-1.8.3-3.29.1 wireshark-devel-1.8.3-3.29.1 - openSUSE 11.4 (i586 x86_64): wireshark-1.8.3-29.1 wireshark-debuginfo-1.8.3-29.1 wireshark-debugsource-1.8.3-29.1 wireshark-devel-1.8.3-29.1 References: https://bugzilla.novell.com/781594 https://bugzilla.novell.com/783275

1 0

openSUSE-SU-2012:1324-1: critical: flash-player: Update to 11.2.202.243
by opensuse-security＠opensuse.org 10 Oct '12

10 Oct '12

openSUSE Security Update: flash-player: Update to 11.2.202.243 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1324-1 Rating: critical References: #784168 Cross-References: CVE-2012-5252 CVE-2012-5256 CVE-2012-5260 CVE-2012-5264 CVE-2012-5268 CVE-2012-5272 CVE-2012-5248 CVE-2012-5249 CVE-2012-5250 CVE-2012-5251 CVE-2012-5253 CVE-2012-5254 CVE-2012-5255 CVE-2012-5257 CVE-2012-5258 CVE-2012-5259 CVE-2012-5261 CVE-2012-5262 CVE-2012-5263 CVE-2012-5265 CVE-2012-5266 CVE-2012-5267 CVE-2012-5269 CVE-2012-5270 CVE-2012-5271 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 25 vulnerabilities is now available. Description: Flash Player was updated to 11.2.202.243 * CVE-2012-5248, CVE-2012-5249, CVE-2012-5250, CVE-2012-5251, CVE-2012-5252, CVE-2012-5253, CVE-2012-5254, CVE-2012-5255, CVE-2012-5256, CVE-2012-5257, CVE-2012-5258, CVE-2012-5259, CVE-2012-5260, CVE-2012-5261, CVE-2012-5262, CVE-2012-5263, CVE-2012-5264, CVE-2012-5265, CVE-2012-5266, CVE-2012-5267, CVE-2012-5268, CVE-2012-5269, CVE-2012-5270, CVE-2012-5271, CVE-2012-5272 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-697 - openSUSE 11.4: zypper in -t patch openSUSE-2012-697 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): flash-player-11.2.202.243-30.1 flash-player-gnome-11.2.202.243-30.1 flash-player-kde4-11.2.202.243-30.1 - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.243-23.1 flash-player-gnome-11.2.202.243-23.1 flash-player-kde4-11.2.202.243-23.1 References: http://support.novell.com/security/cve/ CVE-2012-5252.html http://support.novell.com/security/cve/ CVE-2012-5256.html http://support.novell.com/security/cve/ CVE-2012-5260.html http://support.novell.com/security/cve/ CVE-2012-5264.html http://support.novell.com/security/cve/ CVE-2012-5268.html http://support.novell.com/security/cve/ CVE-2012-5272.html http://support.novell.com/security/cve/CVE-2012-5248.html http://support.novell.com/security/cve/CVE-2012-5249.html http://support.novell.com/security/cve/CVE-2012-5250.html http://support.novell.com/security/cve/CVE-2012-5251.html http://support.novell.com/security/cve/CVE-2012-5253.html http://support.novell.com/security/cve/CVE-2012-5254.html http://support.novell.com/security/cve/CVE-2012-5255.html http://support.novell.com/security/cve/CVE-2012-5257.html http://support.novell.com/security/cve/CVE-2012-5258.html http://support.novell.com/security/cve/CVE-2012-5259.html http://support.novell.com/security/cve/CVE-2012-5261.html http://support.novell.com/security/cve/CVE-2012-5262.html http://support.novell.com/security/cve/CVE-2012-5263.html http://support.novell.com/security/cve/CVE-2012-5265.html http://support.novell.com/security/cve/CVE-2012-5266.html http://support.novell.com/security/cve/CVE-2012-5267.html http://support.novell.com/security/cve/CVE-2012-5269.html http://support.novell.com/security/cve/CVE-2012-5270.html http://support.novell.com/security/cve/CVE-2012-5271.html https://bugzilla.novell.com/784168

1 0

openSUSE-SU-2012:1323-1: virtualbox: update to 4.1.22 stable release
by opensuse-security＠opensuse.org 10 Oct '12

10 Oct '12

openSUSE Security Update: virtualbox: update to 4.1.22 stable release ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1323-1 Rating: low References: #737525 #742115 #743143 #761923 #780711 Cross-References: CVE-2011-3571 CVE-2012-0105 CVE-2012-0111 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: VirtualBox was updated to 4.1.22 stable release, bringing lots of security and also bugfixes. The 4.1.22 release is brought to all openSUSE distributions to align their versions. changes in virtualbox 4.1.22 (maintenance release) * VMM: fixed a potential host crash triggered by shutting down a VM when another VM was running * VMM: fixed a potential host crash under a high guest memory pressure (seen with Windows 8 guests) * VMM: respect RAM preallocation while restoring saved state. * VMM: fixed handling of task gates if VT-x/AMD-V is disabled * Storage: fixed audio CD passthrough for certain media players * USB: don't crash if a USB device is plugged or unplugged when saving or loading the VM state (SMP guests only) * RTC: fixed a potential corruption of CMOS bank 1 * Mac OS X hosts: installer fixes for Leopard (4.1.20 regression) * Windows Additions: fixed memory leak in VBoxTray (bug #10808) - changes in virtualbox 4.1.20 (maintenance release) * VMM: fixed a crash under rare circumstances for VMs running without hardware virtualization * VMM: fixed a code analysis bug for certain displacement instructions for VMs running without hardware virtualization * VMM: fixed an interpretion bug for TPR read instructions under rare conditions (AMD-V only) * Snapshots: fixed a crash when restoring an old snapshot when powering off a VM (bugs #9604, #10491) * VBoxSVC: be more tolerant against environment variables with strange encodings (bug #8780) * VGA: fixed wrong access check which might cause a crash under certain conditions * NAT: final fix for crashes under rare conditions (bug #10513) * Virtio-net: fixed the problem with receiving of GSO packets in Windows XP guests causing packet loss in host-to-VM transfers * HPET: several fixes (bugs #10170, #10306) * Clipboard: disable the clipboard by default for new VMs * BIOS: the PCI BIOS was not properly detected with the chipset type set to ICH9 (bugs #9301, #10327) * Mac OS X hosts: adaptions to Mountain Lion * Linux Installer: fixes for Gentoo Linux (bug #10642) * Linux guests: fixed mouse integration on Fedora 17 guests (bug #2306) * Linux Additions: compile fixes for RHEL/CentOS 6.3 (bug #10756) * Linux Additions: compile fixes for Linux 3.5-rc1 and Linux 3.6-rc1 (bug #10709) * Solaris host: fixed a guru meditation while allocating large pages (bug #10600) * Solaris host: fixed possible kernel panics while freeing memory * Solaris Installer: fixed missing icon for menu and desktop shortcuts Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-696 - openSUSE 12.1: zypper in -t patch openSUSE-2012-696 - openSUSE 11.4: zypper in -t patch openSUSE-2012-696 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): python-virtualbox-4.1.22-1.6.1 python-virtualbox-debuginfo-4.1.22-1.6.1 virtualbox-4.1.22-1.6.1 virtualbox-debuginfo-4.1.22-1.6.1 virtualbox-debugsource-4.1.22-1.6.1 virtualbox-devel-4.1.22-1.6.1 virtualbox-guest-kmp-default-4.1.22_k3.4.6_2.10-1.6.1 virtualbox-guest-kmp-default-debuginfo-4.1.22_k3.4.6_2.10-1.6.1 virtualbox-guest-kmp-desktop-4.1.22_k3.4.6_2.10-1.6.1 virtualbox-guest-kmp-desktop-debuginfo-4.1.22_k3.4.6_2.10-1.6.1 virtualbox-guest-tools-4.1.22-1.6.1 virtualbox-guest-tools-debuginfo-4.1.22-1.6.1 virtualbox-guest-x11-4.1.22-1.6.1 virtualbox-guest-x11-debuginfo-4.1.22-1.6.1 virtualbox-host-kmp-default-4.1.22_k3.4.6_2.10-1.6.1 virtualbox-host-kmp-default-debuginfo-4.1.22_k3.4.6_2.10-1.6.1 virtualbox-host-kmp-desktop-4.1.22_k3.4.6_2.10-1.6.1 virtualbox-host-kmp-desktop-debuginfo-4.1.22_k3.4.6_2.10-1.6.1 virtualbox-qt-4.1.22-1.6.1 virtualbox-qt-debuginfo-4.1.22-1.6.1 virtualbox-websrv-4.1.22-1.6.1 virtualbox-websrv-debuginfo-4.1.22-1.6.1 - openSUSE 12.2 (i586): virtualbox-guest-kmp-pae-4.1.22_k3.4.6_2.10-1.6.1 virtualbox-guest-kmp-pae-debuginfo-4.1.22_k3.4.6_2.10-1.6.1 virtualbox-host-kmp-pae-4.1.22_k3.4.6_2.10-1.6.1 virtualbox-host-kmp-pae-debuginfo-4.1.22_k3.4.6_2.10-1.6.1 - openSUSE 12.1 (i586 x86_64): python-virtualbox-4.1.22-3.5.1 python-virtualbox-debuginfo-4.1.22-3.5.1 virtualbox-4.1.22-3.5.1 virtualbox-debuginfo-4.1.22-3.5.1 virtualbox-debugsource-4.1.22-3.5.1 virtualbox-devel-4.1.22-3.5.1 virtualbox-guest-kmp-default-4.1.22_k3.1.10_1.16-3.5.1 virtualbox-guest-kmp-default-debuginfo-4.1.22_k3.1.10_1.16-3.5.1 virtualbox-guest-kmp-desktop-4.1.22_k3.1.10_1.16-3.5.1 virtualbox-guest-kmp-desktop-debuginfo-4.1.22_k3.1.10_1.16-3.5.1 virtualbox-guest-tools-4.1.22-3.5.1 virtualbox-guest-tools-debuginfo-4.1.22-3.5.1 virtualbox-guest-x11-4.1.22-3.5.1 virtualbox-guest-x11-debuginfo-4.1.22-3.5.1 virtualbox-host-kmp-default-4.1.22_k3.1.10_1.16-3.5.1 virtualbox-host-kmp-default-debuginfo-4.1.22_k3.1.10_1.16-3.5.1 virtualbox-host-kmp-desktop-4.1.22_k3.1.10_1.16-3.5.1 virtualbox-host-kmp-desktop-debuginfo-4.1.22_k3.1.10_1.16-3.5.1 virtualbox-qt-4.1.22-3.5.1 virtualbox-qt-debuginfo-4.1.22-3.5.1 - openSUSE 12.1 (i586): virtualbox-guest-kmp-pae-4.1.22_k3.1.10_1.16-3.5.1 virtualbox-guest-kmp-pae-debuginfo-4.1.22_k3.1.10_1.16-3.5.1 virtualbox-host-kmp-pae-4.1.22_k3.1.10_1.16-3.5.1 virtualbox-host-kmp-pae-debuginfo-4.1.22_k3.1.10_1.16-3.5.1 - openSUSE 11.4 (i586 x86_64): python-virtualbox-4.0.12-0.48.1 python-virtualbox-debuginfo-4.0.12-0.48.1 virtualbox-4.0.12-0.48.1 virtualbox-debuginfo-4.0.12-0.48.1 virtualbox-debugsource-4.0.12-0.48.1 virtualbox-devel-4.0.12-0.48.1 virtualbox-guest-kmp-default-4.0.12_k2.6.37.6_0.20-0.48.1 virtualbox-guest-kmp-default-debuginfo-4.0.12_k2.6.37.6_0.20-0.48.1 virtualbox-guest-kmp-desktop-4.0.12_k2.6.37.6_0.20-0.48.1 virtualbox-guest-kmp-desktop-debuginfo-4.0.12_k2.6.37.6_0.20-0.48.1 virtualbox-guest-tools-4.0.12-0.48.1 virtualbox-guest-tools-debuginfo-4.0.12-0.48.1 virtualbox-guest-x11-4.0.12-0.48.1 virtualbox-guest-x11-debuginfo-4.0.12-0.48.1 virtualbox-host-kmp-default-4.0.12_k2.6.37.6_0.20-0.48.1 virtualbox-host-kmp-default-debuginfo-4.0.12_k2.6.37.6_0.20-0.48.1 virtualbox-host-kmp-desktop-4.0.12_k2.6.37.6_0.20-0.48.1 virtualbox-host-kmp-desktop-debuginfo-4.0.12_k2.6.37.6_0.20-0.48.1 virtualbox-qt-4.0.12-0.48.1 virtualbox-qt-debuginfo-4.0.12-0.48.1 - openSUSE 11.4 (i586): virtualbox-guest-kmp-pae-4.0.12_k2.6.37.6_0.20-0.48.1 virtualbox-guest-kmp-pae-debuginfo-4.0.12_k2.6.37.6_0.20-0.48.1 virtualbox-host-kmp-pae-4.0.12_k2.6.37.6_0.20-0.48.1 virtualbox-host-kmp-pae-debuginfo-4.0.12_k2.6.37.6_0.20-0.48.1 References: http://support.novell.com/security/cve/CVE-2011-3571.html http://support.novell.com/security/cve/CVE-2012-0105.html http://support.novell.com/security/cve/CVE-2012-0111.html https://bugzilla.novell.com/737525 https://bugzilla.novell.com/742115 https://bugzilla.novell.com/743143 https://bugzilla.novell.com/761923 https://bugzilla.novell.com/780711

1 0