November 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2012:1493-1: coreutils: fixing an cp-, mv- and install-error
by maintenance＠opensuse.org 19 Nov '12

19 Nov '12

openSUSE Recommended Update: coreutils: fixing an cp-, mv- and install-error ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1493-1 Rating: low References: #788459 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issue for coreutils: - bnc#788459: cp could read from freed memory and could even make corrupt copies. This could happen with a very fragmented and sparse input-file, on GNU/Linux file-systems supporting fiemap extent scanning. This bug also affects mv when it resorts to copying, and install Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-782 - openSUSE 12.1: zypper in -t patch openSUSE-2012-782 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): coreutils-8.16-5.8.1 coreutils-debuginfo-8.16-5.8.1 coreutils-debugsource-8.16-5.8.1 - openSUSE 12.2 (noarch): coreutils-lang-8.16-5.8.1 - openSUSE 12.1 (i586 x86_64): coreutils-8.14-3.11.1 coreutils-debuginfo-8.14-3.11.1 coreutils-debugsource-8.14-3.11.1 - openSUSE 12.1 (noarch): coreutils-lang-8.14-3.11.1 - openSUSE 12.1 (ia64): coreutils-debuginfo-x86-8.14-3.11.1 coreutils-x86-8.14-3.11.1 References: https://bugzilla.novell.com/788459

1 0

openSUSE-RU-2012:1492-1: moderate: yast2-restore: Two bugfixes
by maintenance＠opensuse.org 19 Nov '12

19 Nov '12

openSUSE Recommended Update: yast2-restore: Two bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1492-1 Rating: moderate References: #682064 #776078 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for yast2-restore: - bnc#776078: Escaping shell paths that might contain spaces or special characters - bnc#682064: Checking, installing and/or adjusting rpcbind or portmap (as fallback) before mounting an NFS share - fix license to be in spdx.org format Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-778 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (noarch): yast2-restore-2.22.0.1-5.4.1 References: https://bugzilla.novell.com/682064 https://bugzilla.novell.com/776078

1 0

openSUSE-RU-2012:1491-1: moderate: yast2-backup: Escaping shell paths that might contain spaces or special-characters
by maintenance＠opensuse.org 19 Nov '12

19 Nov '12

openSUSE Recommended Update: yast2-backup: Escaping shell paths that might contain spaces or special-characters ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1491-1 Rating: moderate References: #776078 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for yast2-backup: - bnc#776078: Escaping shell paths that might contain spaces or special characters Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-779 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (noarch): yast2-backup-2.22.2.1-2.4.1 References: https://bugzilla.novell.com/776078

1 0

openSUSE-SU-2012:1481-1: important: opera to 12.10
by opensuse-security＠opensuse.org 14 Nov '12

14 Nov '12

openSUSE Security Update: opera to 12.10 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1481-1 Rating: important References: #788321 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This Opera 12.10 security update fixes following security issues: -an issue that could cause Opera not to correctly check for certificate revocation; -an issue where CORS requests could incorrectly retrieve contents of cross origin pages; -an issue where data URIs could be used to facilitate Cross-Site Scripting; -a high severity issue, as reported by Gareth Heyes; details will be disclosed at a later date -an issue where specially crafted SVG images could allow execution of arbitrary code; -a moderate severity issue, as reported by the Google Security Group; details will be disclosed at a later date Full changelog available at: http://www.opera.com/docs/changelogs/unix/1210 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-777 - openSUSE 12.1: zypper in -t patch openSUSE-2012-777 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): opera-12.10-6.1 opera-gtk-12.10-6.1 opera-kde4-12.10-6.1 - openSUSE 12.1 (i586 x86_64): opera-12.10-26.1 opera-gtk-12.10-26.1 opera-kde4-12.10-26.1 References: https://bugzilla.novell.com/788321

1 0

openSUSE-SU-2012:1480-1: important: flash-player: Update to 11.2.202.251
by opensuse-security＠opensuse.org 14 Nov '12

14 Nov '12

openSUSE Security Update: flash-player: Update to 11.2.202.251 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1480-1 Rating: important References: #788450 Cross-References: CVE-2012-5274 CVE-2012-5275 CVE-2012-5276 CVE-2012-5277 CVE-2012-5278 CVE-2012-5279 CVE-2012-5280 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Flash Player was updated to 11.2.202.251 (bnc#788450), fixing severe security issues: * CVE-2012-5274, CVE-2012-5275, CVE-2012-5276, CVE-2012-5277, CVE-2012-5278, CVE-2012-5279, CVE-2012-5280 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-776 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): flash-player-11.2.202.251-34.1 flash-player-gnome-11.2.202.251-34.1 flash-player-kde4-11.2.202.251-34.1 References: http://support.novell.com/security/cve/CVE-2012-5274.html http://support.novell.com/security/cve/CVE-2012-5275.html http://support.novell.com/security/cve/CVE-2012-5276.html http://support.novell.com/security/cve/CVE-2012-5277.html http://support.novell.com/security/cve/CVE-2012-5278.html http://support.novell.com/security/cve/CVE-2012-5279.html http://support.novell.com/security/cve/CVE-2012-5280.html https://bugzilla.novell.com/788450

1 0

openSUSE-RU-2012:1471-1: moderate: postgresql: Update to 9.1.6 and change of the packaging scheme
by maintenance＠opensuse.org 12 Nov '12

12 Nov '12

openSUSE Recommended Update: postgresql: Update to 9.1.6 and change of the packaging scheme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1471-1 Rating: moderate References: #782251 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update splits the init script and other infrastructure from the postgresql-server. It updates postgresql to version 9.1.6, too. postgresql: - is a dummy-package which requires the new package postgresql91 postgresql91 (new package): - Bugfix release 9.1.6 (bnc#782251) to fix data corruption issues. * Users who upgrade from a previous 9.1 release should run REINDEX after applying this update. See also: http://wiki.postgresql.org/wiki/20120924updaterelease * For the full list of changes, see http://www.postgresql.org/docs/9.1/static/release.html - Change the base name of all PostgreSQL packages from postgresql to postgresql91 and adopt the new packaging schema, which allows the parallel installation of multiple PostgreSQL versions to simplify and speedup migration. - Move init script, sysconfig file and firewall configuration into a new package called postgresql-init which can work with different PostgreSQL versions. postgresql-init (new package): - separated from server Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-774 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libecpg6-9.1.6-9.1 libecpg6-debuginfo-9.1.6-9.1 libpq5-9.1.6-9.1 libpq5-debuginfo-9.1.6-9.1 postgresql-9.1.5+9.1-3.14.1 postgresql-contrib-9.1.5+9.1-3.14.1 postgresql-devel-9.1.5+9.1-3.14.1 postgresql-plperl-9.1.5+9.1-3.14.1 postgresql-plpython-9.1.5+9.1-3.14.1 postgresql-pltcl-9.1.5+9.1-3.14.1 postgresql-server-9.1.5+9.1-3.14.1 postgresql91-9.1.6-9.1 postgresql91-contrib-9.1.6-9.1 postgresql91-contrib-debuginfo-9.1.6-9.1 postgresql91-debuginfo-9.1.6-9.1 postgresql91-debugsource-9.1.6-9.1 postgresql91-devel-9.1.6-9.1 postgresql91-devel-debuginfo-9.1.6-9.1 postgresql91-libs-debugsource-9.1.6-9.1 postgresql91-plperl-9.1.6-9.1 postgresql91-plperl-debuginfo-9.1.6-9.1 postgresql91-plpython-9.1.6-9.1 postgresql91-plpython-debuginfo-9.1.6-9.1 postgresql91-pltcl-9.1.6-9.1 postgresql91-pltcl-debuginfo-9.1.6-9.1 postgresql91-server-9.1.6-9.1 postgresql91-server-debuginfo-9.1.6-9.1 - openSUSE 12.1 (x86_64): libecpg6-32bit-9.1.6-9.1 libecpg6-debuginfo-32bit-9.1.6-9.1 libpq5-32bit-9.1.6-9.1 libpq5-debuginfo-32bit-9.1.6-9.1 postgresql91-devel-32bit-9.1.6-9.1 postgresql91-devel-debuginfo-32bit-9.1.6-9.1 - openSUSE 12.1 (noarch): postgresql-docs-9.1.5+9.1-3.14.1 postgresql-init-9.2-0.6.2.1 postgresql91-docs-9.1.6-9.1 - openSUSE 12.1 (ia64): libecpg6-debuginfo-x86-9.1.6-9.1 libecpg6-x86-9.1.6-9.1 libpq5-debuginfo-x86-9.1.6-9.1 libpq5-x86-9.1.6-9.1 postgresql91-devel-debuginfo-x86-9.1.6-9.1 References: https://bugzilla.novell.com/782251

1 0

openSUSE-RU-2012:1470-1: tgt: Fixes shutdown hang
by maintenance＠opensuse.org 12 Nov '12

12 Nov '12

openSUSE Recommended Update: tgt: Fixes shutdown hang ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1470-1 Rating: low References: #767438 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for tgt: - bnc#767438: Add tgt-mgmt-fixed-m-system-o-delete-handling.patch to fix hang after shutdown - Removed use of PIDFILE in init script Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-769 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): tgt-1.0.28-2.7.1 tgt-debuginfo-1.0.28-2.7.1 tgt-debugsource-1.0.28-2.7.1 References: https://bugzilla.novell.com/767438

1 0

openSUSE-RU-2012:1469-1: moderate: lldpad: remove use of /var/lock/subsys in init file
by maintenance＠opensuse.org 12 Nov '12

12 Nov '12

openSUSE Recommended Update: lldpad: remove use of /var/lock/subsys in init file ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1469-1 Rating: moderate References: #714646 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for lldpad: - bnc#714646: Added lldpad-remove-var-lock-subsys-use.patch to remove use of /var/lock/subsys in init file Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-766 - openSUSE 12.1: zypper in -t patch openSUSE-2012-766 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): lldpad-0.9.32-9.4.1 lldpad-debuginfo-0.9.32-9.4.1 lldpad-debugsource-0.9.32-9.4.1 lldpad-devel-0.9.32-9.4.1 - openSUSE 12.1 (i586 x86_64): lldpad-0.9.32-5.4.1 lldpad-debuginfo-0.9.32-5.4.1 lldpad-debugsource-0.9.32-5.4.1 lldpad-devel-0.9.32-5.4.1 References: https://bugzilla.novell.com/714646

1 0

openSUSE-RU-2012:1468-1: moderate: postgresql: Changed and split packaging update to 9.1.6
by maintenance＠opensuse.org 12 Nov '12

12 Nov '12

openSUSE Recommended Update: postgresql: Changed and split packaging update to 9.1.6 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1468-1 Rating: moderate References: #782251 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The init script and other infrastructure got separated from postgresql-server. Also postgresql was updated to 9.1.6, Bugfix release 9.1.6 (bnc#782251) to fix data corruption issues. * Users who upgrade from a previous 9.1 release should run REINDEX after applying this update. See also: http://wiki.postgresql.org/wiki/20120924updaterelease * For the full list of changes, see http://www.postgresql.org/docs/9.1/static/release.html Change the base name of all PostgreSQL packages from postgresql to postgresql91 and adopt the new packaging schema, which allows the parallel installation of multiple PostgreSQL versions to simplify and speedup migration. Moved init script, sysconfig file and firewall configuration into a new package called postgresql-init which can work with different PostgreSQL versions. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-775 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libecpg6-9.1.6-4.1 libecpg6-debuginfo-9.1.6-4.1 libpq5-9.1.6-4.1 libpq5-debuginfo-9.1.6-4.1 postgresql-9.1.5+9.1-7.12.1 postgresql-contrib-9.1.5+9.1-7.12.1 postgresql-devel-9.1.5+9.1-7.12.1 postgresql-plperl-9.1.5+9.1-7.12.1 postgresql-plpython-9.1.5+9.1-7.12.1 postgresql-pltcl-9.1.5+9.1-7.12.1 postgresql-server-9.1.5+9.1-7.12.1 postgresql91-9.1.6-4.1 postgresql91-contrib-9.1.6-4.1 postgresql91-contrib-debuginfo-9.1.6-4.1 postgresql91-debuginfo-9.1.6-4.1 postgresql91-debugsource-9.1.6-4.1 postgresql91-devel-9.1.6-4.1 postgresql91-devel-debuginfo-9.1.6-4.1 postgresql91-libs-debugsource-9.1.6-4.1 postgresql91-plperl-9.1.6-4.1 postgresql91-plperl-debuginfo-9.1.6-4.1 postgresql91-plpython-9.1.6-4.1 postgresql91-plpython-debuginfo-9.1.6-4.1 postgresql91-pltcl-9.1.6-4.1 postgresql91-pltcl-debuginfo-9.1.6-4.1 postgresql91-server-9.1.6-4.1 postgresql91-server-debuginfo-9.1.6-4.1 - openSUSE 12.2 (x86_64): libecpg6-32bit-9.1.6-4.1 libecpg6-debuginfo-32bit-9.1.6-4.1 libpq5-32bit-9.1.6-4.1 libpq5-debuginfo-32bit-9.1.6-4.1 postgresql91-devel-32bit-9.1.6-4.1 postgresql91-devel-debuginfo-32bit-9.1.6-4.1 - openSUSE 12.2 (noarch): postgresql-docs-9.1.5+9.1-7.12.1 postgresql-init-9.2-0.6.2.1 postgresql91-docs-9.1.6-4.1 References: https://bugzilla.novell.com/782251

1 0

openSUSE-RU-2012:1467-1: aaa_base: Enforce creation of /etc/adjtime even if no /etc/sysconfig/clock exists
by maintenance＠opensuse.org 12 Nov '12

12 Nov '12

openSUSE Recommended Update: aaa_base: Enforce creation of /etc/adjtime even if no /etc/sysconfig/clock exists ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1467-1 Rating: low References: #779440 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issue for aaa_base: - bnc#779440: Enforce creation of /etc/adjtime even if no /etc/sysconfig/clock exists Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-768 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): aaa_base-12.2-2.14.1 aaa_base-debuginfo-12.2-2.14.1 aaa_base-debugsource-12.2-2.14.1 aaa_base-extras-12.2-2.14.1 aaa_base-malloccheck-12.2-2.14.1 References: https://bugzilla.novell.com/779440

1 0