November 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2012:1507-1: moderate: update for phpMyAdmin
by opensuse-security＠opensuse.org 20 Nov '12

20 Nov '12

openSUSE Security Update: update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1507-1 Rating: moderate References: #788103 Cross-References: CVE-2012-5339 CVE-2012-5368 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of phpMyAdmin is a version upgrade to 3.5.3.0 to fix multiple XSS flaws. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-790 - openSUSE 12.1: zypper in -t patch openSUSE-2012-790 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (noarch): phpMyAdmin-3.5.3-1.8.1 - openSUSE 12.1 (noarch): phpMyAdmin-3.5.3-1.31.1 References: http://support.novell.com/security/cve/CVE-2012-5339.html http://support.novell.com/security/cve/CVE-2012-5368.html https://bugzilla.novell.com/788103

1 0

openSUSE-SU-2012:1506-1: important: update for plib
by opensuse-security＠opensuse.org 20 Nov '12

20 Nov '12

openSUSE Security Update: update for plib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1506-1 Rating: important References: #738207 #787305 Cross-References: CVE-2011-4620 CVE-2012-4552 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of plib fixed two stack-based buffer overflows. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-789 - openSUSE 12.1: zypper in -t patch openSUSE-2012-789 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): plib-1.8.5-76.4.1 plib-debuginfo-1.8.5-76.4.1 plib-debugsource-1.8.5-76.4.1 plib-devel-1.8.5-76.4.1 - openSUSE 12.1 (i586 x86_64): plib-1.8.5-71.4.1 plib-debuginfo-1.8.5-71.4.1 plib-debugsource-1.8.5-71.4.1 plib-devel-1.8.5-71.4.1 References: http://support.novell.com/security/cve/CVE-2011-4620.html http://support.novell.com/security/cve/CVE-2012-4552.html https://bugzilla.novell.com/738207 https://bugzilla.novell.com/787305

1 0

openSUSE-RU-2012:1502-1: timidity: Several bugfixes
by maintenance＠opensuse.org 19 Nov '12

19 Nov '12

openSUSE Recommended Update: timidity: Several bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1502-1 Rating: low References: #788444 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for timidity: - bnc#788444: Fixed init script TIM_ALSASEQPARAM -> TIM_ALSASEQPARAMS - Reversed value of the two pameters in /etc/sysconfig/timidity and added some extra parameters as default - Added some comment about the values of the paramters and two recommended package: fluid-soundfont-gm and fluid-soundfont-gs - README.SuSE copied in doc directory Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-781 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): timidity-2.13.2-272.4.1 timidity-debuginfo-2.13.2-272.4.1 timidity-debugsource-2.13.2-272.4.1 References: https://bugzilla.novell.com/788444

1 0

openSUSE-RU-2012:1501-1: freerdp: fix sound plugin not linked correctly against libpulse and a crash in the pulse plugin when encountering a NULL device name
by maintenance＠opensuse.org 19 Nov '12

19 Nov '12

openSUSE Recommended Update: freerdp: fix sound plugin not linked correctly against libpulse and a crash in the pulse plugin when encountering a NULL device name ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1501-1 Rating: low References: #785437 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with freerdp: - bnc#785437: fix sound plugin not linked correctly against libpulse and a crash in the pulse plugin when encountering a NULL device name Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-787 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): freerdp-1.0.1-4.4.1 freerdp-debuginfo-1.0.1-4.4.1 freerdp-debugsource-1.0.1-4.4.1 freerdp-devel-1.0.1-4.4.1 libfreerdp-1_0-1.0.1-4.4.1 libfreerdp-1_0-debuginfo-1.0.1-4.4.1 libfreerdp-1_0-plugins-1.0.1-4.4.1 libfreerdp-1_0-plugins-debuginfo-1.0.1-4.4.1 References: https://bugzilla.novell.com/785437

1 0

openSUSE-RU-2012:1499-1: firebird: update to 2.5.2 final
by maintenance＠opensuse.org 19 Nov '12

19 Nov '12

openSUSE Recommended Update: firebird: update to 2.5.2 final ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1499-1 Rating: low References: #789171 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for firebird: - update to upstream version 2.5.2.26539 (2.5.2 final) * Optimizer level solution for CORE-2790/CORE-3449 * CORE-2666: Make it possible to use API to do remote backups/restores * backup state lock should be released at latch timeout, else lock state accounting becomes inconsistent * CORE-3873: Server crashes while switching to the shadow if the disk I/O fault happens while flushing the cache * CORE-3860: Trace API: Faulty database filter crashes server * CORE-3875: GBak does not check correctly parameters and backups random database with -B ":" * CORE-3879: Make fb_lock_print a bit more handy * CORE-3656: Support for sweep information in Trace API * CORE-2668: Write note into log when automatic sweep is started * Enabled per-table runtime stats for sweeper (necessary for CORE-3656) * CORE-3884: Server crashes on preparing empty query when trace is enabled * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary UUID * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in big/little endian architectures - problem similar to CORE-2898 * CORE-3895: High memory usage when PSQL code SELECT's from stored procedure which modified some data * Fixed the server crash in Stack::assign() * CORE-3902: Derived fields may not be optimized via an index * Fixed the broken (working as no-op) sweep in SuperServer * Use better name from trunk for CORE-3911 * Restored the ODS level compatibility with v2.5.1 index keys, while using the "old good" index key format in new indices. It allows to claim that CORE-3675 and CORE-3853 are fixed (after migration via backup/restore) but still operate almost correctly with keys created in v2.5.1. * CORE-3912: segfault in superclassic * Better diagnostic (CORE-3786) - fix broken unicode collations (bnc#789171, CORE-3946) - set libdir on powerpc correctly - don't start the daemon in runlevel 2 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-788 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): firebird-2.5.2.26539-2.4.1 firebird-classic-2.5.2.26539-2.4.1 firebird-classic-debuginfo-2.5.2.26539-2.4.1 firebird-classic-debugsource-2.5.2.26539-2.4.1 firebird-debuginfo-2.5.2.26539-2.4.1 firebird-debugsource-2.5.2.26539-2.4.1 firebird-devel-2.5.2.26539-2.4.1 firebird-superserver-2.5.2.26539-2.4.1 firebird-superserver-debuginfo-2.5.2.26539-2.4.1 libfbclient2-2.5.2.26539-2.4.1 libfbclient2-debuginfo-2.5.2.26539-2.4.1 libfbclient2-devel-2.5.2.26539-2.4.1 libfbembed-devel-2.5.2.26539-2.4.1 libfbembed2_5-2.5.2.26539-2.4.1 libfbembed2_5-debuginfo-2.5.2.26539-2.4.1 - openSUSE 12.2 (x86_64): firebird-32bit-2.5.2.26539-2.4.1 firebird-debuginfo-32bit-2.5.2.26539-2.4.1 libfbclient2-32bit-2.5.2.26539-2.4.1 libfbclient2-debuginfo-32bit-2.5.2.26539-2.4.1 - openSUSE 12.2 (noarch): firebird-doc-2.5.2.26539-2.4.1 References: https://bugzilla.novell.com/789171

1 0

openSUSE-RU-2012:1498-1: vim-plugins: fix for quilt-plugin
by maintenance＠opensuse.org 19 Nov '12

19 Nov '12

openSUSE Recommended Update: vim-plugins: fix for quilt-plugin ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1498-1 Rating: low References: #746971 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for vim-plugins: - Update to 0.9.7 - fix problem with line-history Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-783 - openSUSE 12.1: zypper in -t patch openSUSE-2012-783 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (noarch): vim-plugin-NERDcommenter-2.2.2-13.6.1 vim-plugin-NERDtree-4.1.0-13.6.1 vim-plugin-a-2.18-13.6.1 vim-plugin-align-35.41-13.6.1 vim-plugin-bufexplorer-7.2.6-13.6.1 vim-plugin-calendar-2.1-13.6.1 vim-plugin-colorschemes-1.0-13.6.1 vim-plugin-colorsel-20051121-13.6.1 vim-plugin-diffchanges-0.2.6-13.6.1 vim-plugin-gitdiff-2-13.6.1 vim-plugin-gnupg-3026-13.6.1 vim-plugin-latex-20100129-13.6.1 vim-plugin-locateopen-1.3-13.6.1 vim-plugin-matchit-1.13.2-13.6.1 vim-plugin-matrix-1.10-13.6.1 vim-plugin-minibufexpl-6.3.2-13.6.1 vim-plugin-multiplesearch-1.3-13.6.1 vim-plugin-project-1.4.1-13.6.1 vim-plugin-quilt-0.9.7-13.6.1 vim-plugin-rails-4.3-13.6.1 vim-plugin-searchcomplete-1.1-13.6.1 vim-plugin-showmarks-2.2-13.6.1 vim-plugin-snipmate-0.83-13.6.1 vim-plugin-supertab-1.0-13.6.1 vim-plugin-taglist-4.5-13.6.1 vim-plugin-tlib-0.36-13.6.1 vim-plugin-tregisters-0.2-13.6.1 vim-plugin-tselectbuffer-0.6-13.6.1 vim-plugin-tselectfiles-0.10-13.6.1 vim-plugin-utl-2.0-13.6.1 vim-plugin-vimwiki-1.1.1-13.6.1 vim-plugin-zoomwin-23-13.6.1 - openSUSE 12.1 (noarch): vim-plugin-NERDcommenter-2.2.2-11.6.1 vim-plugin-NERDtree-4.1.0-11.6.1 vim-plugin-a-2.18-11.6.1 vim-plugin-align-35.41-11.6.1 vim-plugin-bufexplorer-7.2.6-11.6.1 vim-plugin-calendar-2.1-11.6.1 vim-plugin-colorschemes-1.0-11.6.1 vim-plugin-colorsel-20051121-11.6.1 vim-plugin-diffchanges-0.2.6-11.6.1 vim-plugin-gitdiff-2-11.6.1 vim-plugin-gnupg-3026-11.6.1 vim-plugin-latex-20100129-11.6.1 vim-plugin-locateopen-1.3-11.6.1 vim-plugin-matchit-1.13.2-11.6.1 vim-plugin-matrix-1.10-11.6.1 vim-plugin-minibufexpl-6.3.2-11.6.1 vim-plugin-multiplesearch-1.3-11.6.1 vim-plugin-project-1.4.1-11.6.1 vim-plugin-quilt-0.9.7-11.6.1 vim-plugin-rails-4.3-11.6.1 vim-plugin-searchcomplete-1.1-11.6.1 vim-plugin-showmarks-2.2-11.6.1 vim-plugin-snipmate-0.83-11.6.1 vim-plugin-supertab-1.0-11.6.1 vim-plugin-taglist-4.5-11.6.1 vim-plugin-tlib-0.36-11.6.1 vim-plugin-tregisters-0.2-11.6.1 vim-plugin-tselectbuffer-0.6-11.6.1 vim-plugin-tselectfiles-0.10-11.6.1 vim-plugin-utl-2.0-11.6.1 vim-plugin-vimwiki-1.1.1-11.6.1 vim-plugin-zoomwin-23-11.6.1 References: https://bugzilla.novell.com/746971

1 0

openSUSE-RU-2012:1497-1: sysstat: fixed libdir-path in spec-file
by maintenance＠opensuse.org 19 Nov '12

19 Nov '12

openSUSE Recommended Update: sysstat: fixed libdir-path in spec-file ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1497-1 Rating: low References: #783886 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with sysstat: - bnc#783886: service unit included hardcoded /usr/lib, however sysstat is installed to /usr/lib64 on 64 bit systems - bnc#783886: Fixed two typos in spec related to service unit, which prevented successful startup Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-786 - openSUSE 12.1: zypper in -t patch openSUSE-2012-786 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): sysstat-10.0.5-2.4.1 sysstat-debuginfo-10.0.5-2.4.1 sysstat-debugsource-10.0.5-2.4.1 sysstat-isag-10.0.5-2.4.1 - openSUSE 12.1 (i586 x86_64): sysstat-10.0.2-20.21.1 sysstat-debuginfo-10.0.2-20.21.1 sysstat-debugsource-10.0.2-20.21.1 sysstat-isag-10.0.2-20.21.1 References: https://bugzilla.novell.com/783886

1 0

openSUSE-RU-2012:1496-1: kdbg: Update to 2.5.2
by maintenance＠opensuse.org 19 Nov '12

19 Nov '12

openSUSE Recommended Update: kdbg: Update to 2.5.2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1496-1 Rating: low References: #784634 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for kdbg: - bnc#784634: Update to 2.5.2 - Support for GDB 7.5. - More of GDB's output is recognized in some corner cases - The thread list parser introduced in 2.5.1 sometimes stripped two letters from the function name. - Added opensuse-gdb.diff: ignore messages about debuginfo-packages from openSUSE's gdb Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-785 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): kdbg-2.5.2-2.4.1 kdbg-debuginfo-2.5.2-2.4.1 kdbg-debugsource-2.5.2-2.4.1 kdbg-doc-2.5.2-2.4.1 - openSUSE 12.2 (noarch): kdbg-lang-2.5.2-2.4.1 References: https://bugzilla.novell.com/784634

1 0

openSUSE-RU-2012:1495-1: LibVNCServer: enable gnutls support
by maintenance＠opensuse.org 19 Nov '12

19 Nov '12

openSUSE Recommended Update: LibVNCServer: enable gnutls support ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1495-1 Rating: low References: #775609 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for LibVNCServer: - bnc#775609: enable gnutls support Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-784 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): LibVNCServer-0.9.8_git201104301110-14.4.1 LibVNCServer-debuginfo-0.9.8_git201104301110-14.4.1 LibVNCServer-debugsource-0.9.8_git201104301110-14.4.1 LibVNCServer-devel-0.9.8_git201104301110-14.4.1 - openSUSE 12.2 (x86_64): LibVNCServer-32bit-0.9.8_git201104301110-14.4.1 LibVNCServer-debuginfo-32bit-0.9.8_git201104301110-14.4.1 References: https://bugzilla.novell.com/775609

1 0

openSUSE-RU-2012:1494-1: moderate: xfce4-session: handle multiple interactive session save correctly
by maintenance＠opensuse.org 19 Nov '12

19 Nov '12

openSUSE Recommended Update: xfce4-session: handle multiple interactive session save correctly ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1494-1 Rating: moderate References: Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issue for xfce4-session: - bxo#5379: handle multiple interactive session save correctly, this should fix a lot of cases where xfwm4 was not saved and thus missing in the next session Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-780 - openSUSE 12.1: zypper in -t patch openSUSE-2012-780 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libxfsm-4_6-0-4.10.0-3.4.1 libxfsm-4_6-0-debuginfo-4.10.0-3.4.1 xfce4-session-4.10.0-3.4.1 xfce4-session-debuginfo-4.10.0-3.4.1 xfce4-session-debugsource-4.10.0-3.4.1 xfce4-session-devel-4.10.0-3.4.1 - openSUSE 12.2 (noarch): xfce4-session-branding-upstream-4.10.0-3.4.1 xfce4-session-lang-4.10.0-3.4.1 - openSUSE 12.1 (i586 x86_64): xfce4-session-4.8.2-15.20.1 xfce4-session-debuginfo-4.8.2-15.20.1 xfce4-session-debugsource-4.8.2-15.20.1 xfce4-session-devel-4.8.2-15.20.1 - openSUSE 12.1 (noarch): xfce4-session-branding-upstream-4.8.2-15.20.1 References:

1 0