December 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2012:1692-1: apport: use default CA certs instead of a custom one
by maintenance＠opensuse.org 27 Dec '12

27 Dec '12

openSUSE Recommended Update: apport: use default CA certs instead of a custom one ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1692-1 Rating: low References: #788860 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for apport: - use default CA certs instead of a custom one (as per bnc#788860) - Make it build with latest TeXLive 2012 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-875 - openSUSE 12.1: zypper in -t patch openSUSE-2012-875 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): apport-0.114-30.4.1 apport-crashdb-opensuse-0.114-30.4.1 apport-gtk-0.114-30.4.1 apport-qt-0.114-30.4.1 - openSUSE 12.1 (i586 x86_64): apport-0.114-27.4.1 apport-crashdb-opensuse-0.114-27.4.1 apport-gtk-0.114-27.4.1 apport-qt-0.114-27.4.1 References: https://bugzilla.novell.com/788860

1 0

openSUSE-RU-2012:1691-1: rhythmbox: ensure audiocd plugin is linked with libdiscid
by maintenance＠opensuse.org 27 Dec '12

27 Dec '12

openSUSE Recommended Update: rhythmbox: ensure audiocd plugin is linked with libdiscid ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1691-1 Rating: low References: #794272 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for rhythmbox: - bnc#794272: ensure audiocd plugin is linked with libdiscid - Add autoconf, automake, gtk-doc and libtool to BuildRequires Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-874 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): rhythmbox-2.97-1.9.1 rhythmbox-debuginfo-2.97-1.9.1 rhythmbox-debugsource-2.97-1.9.1 rhythmbox-devel-2.97-1.9.1 rhythmbox-devel-debuginfo-2.97-1.9.1 - openSUSE 12.2 (noarch): rhythmbox-lang-2.97-1.9.1 References: https://bugzilla.novell.com/794272

1 0

openSUSE-RU-2012:1690-1: gnome-control-center: fix mouse events in the display preview widget
by maintenance＠opensuse.org 27 Dec '12

27 Dec '12

openSUSE Recommended Update: gnome-control-center: fix mouse events in the display preview widget ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1690-1 Rating: low References: #776975 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for gnome-control-center: - bnc#776975: fix mouse events in the display preview widget Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-873 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): gnome-control-center-3.4.2-3.11.1 gnome-control-center-debuginfo-3.4.2-3.11.1 gnome-control-center-debugsource-3.4.2-3.11.1 gnome-control-center-devel-3.4.2-3.11.1 gnome-control-center-user-faces-3.4.2-3.11.1 - openSUSE 12.2 (noarch): gnome-control-center-branding-upstream-3.4.2-3.11.1 gnome-control-center-lang-3.4.2-3.11.1 References: https://bugzilla.novell.com/776975

1 0

openSUSE-RU-2012:1689-1: yast2-kerberos-client: Two bugfixes
by maintenance＠opensuse.org 27 Dec '12

27 Dec '12

openSUSE Recommended Update: yast2-kerberos-client: Two bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1689-1 Rating: low References: #778513 #792415 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for yast2-kerberos-client: - bnc#792415: read available Kerberos options from sssd if sssd is configured - bnc#778513: save Kerberos expert options to sssd.conf as well Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-882 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (noarch): yast2-kerberos-client-2.22.4-2.8.1 References: https://bugzilla.novell.com/778513 https://bugzilla.novell.com/792415

1 0

openSUSE-RU-2012:1688-1: vim: gvim package should depend on vim-data
by maintenance＠opensuse.org 27 Dec '12

27 Dec '12

openSUSE Recommended Update: vim: gvim package should depend on vim-data ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1688-1 Rating: low References: #793311 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for vim: - bnc#793311: gvim package should depend on vim-data Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-876 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): gvim-7.3.566-1.5.1 gvim-debuginfo-7.3.566-1.5.1 vim-7.3.566-1.5.1 vim-base-7.3.566-1.5.1 vim-base-debuginfo-7.3.566-1.5.1 vim-debuginfo-7.3.566-1.5.1 vim-debugsource-7.3.566-1.5.1 vim-enhanced-7.3.566-1.5.1 vim-enhanced-debuginfo-7.3.566-1.5.1 vim-python-7.3.566-1.5.1 vim-python-debuginfo-7.3.566-1.5.1 - openSUSE 12.2 (noarch): vim-data-7.3.566-1.5.1 References: https://bugzilla.novell.com/793311

1 0

openSUSE-SU-2012:1687-1: important: xen to fix various denial of service issues
by opensuse-security＠opensuse.org 23 Dec '12

23 Dec '12

openSUSE Security Update: xen to fix various denial of service issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1687-1 Rating: important References: #777628 #789940 #789944 #789945 #789948 #789950 #789951 #789988 #792476 Cross-References: CVE-2012-5510 CVE-2012-5511 CVE-2012-5512 CVE-2012-5513 CVE-2012-5514 CVE-2012-5515 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has three fixes is now available. Description: XEN was updated to fix various denial of service issues. - bnc#789945 - CVE-2012-5510: xen: Grant table version switch list corruption vulnerability (XSA-26) - bnc#789944 - CVE-2012-5511: xen: Several HVM operations do not validate the range of their inputs (XSA-27) - bnc#789940 - CVE-2012-5512: xen: HVMOP_get_mem_access crash / HVMOP_set_mem_access information leak (XSA-28) - bnc#789951 - CVE-2012-5513: xen: XENMEM_exchange may overwrite hypervisor memory (XSA-29) - bnc#789948 - CVE-2012-5514: xen: Missing unlock in guest_physmap_mark_populate_on_demand() (XSA-30) - bnc#789950 - CVE-2012-5515: xen: Several memory hypercall operations allow invalid extent order values (XSA-31) - bnc#789988 - FATAL PAGE FAULT in hypervisor (arch_do_domctl) - Upstream patches from Jan 26132-tmem-save-NULL-check.patch 26134-x86-shadow-invlpg-check.patch 26148-vcpu-timer-overflow.patch (Replaces CVE-2012-4535-xsa20.patch) 26149-x86-p2m-physmap-error-path.patch (Replaces CVE-2012-4537-xsa22.patch) 26150-x86-shadow-unhook-toplevel-check.patch (Replaces CVE-2012-4538-xsa23.patch) - bnc#777628 - guest "disappears" after live migration Updated block-dmmd script - Fix exception in balloon.py and osdep.py xen-max-free-mem.diff - bnc#792476 - efi files missing in latest XEN update Revert c/s 25751 EFI Makefile changes in 23614-x86_64-EFI-boot.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-869 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): xen-debugsource-4.1.3_06-1.25.1 xen-devel-4.1.3_06-1.25.1 xen-kmp-default-4.1.3_06_k3.1.10_1.16-1.25.1 xen-kmp-default-debuginfo-4.1.3_06_k3.1.10_1.16-1.25.1 xen-kmp-desktop-4.1.3_06_k3.1.10_1.16-1.25.1 xen-kmp-desktop-debuginfo-4.1.3_06_k3.1.10_1.16-1.25.1 xen-libs-4.1.3_06-1.25.1 xen-libs-debuginfo-4.1.3_06-1.25.1 xen-tools-domU-4.1.3_06-1.25.1 xen-tools-domU-debuginfo-4.1.3_06-1.25.1 - openSUSE 12.1 (x86_64): xen-4.1.3_06-1.25.1 xen-doc-html-4.1.3_06-1.25.1 xen-doc-pdf-4.1.3_06-1.25.1 xen-libs-32bit-4.1.3_06-1.25.1 xen-libs-debuginfo-32bit-4.1.3_06-1.25.1 xen-tools-4.1.3_06-1.25.1 xen-tools-debuginfo-4.1.3_06-1.25.1 - openSUSE 12.1 (ia64): xen-libs-debuginfo-x86-4.1.3_06-1.25.1 xen-libs-x86-4.1.3_06-1.25.1 - openSUSE 12.1 (i586): xen-kmp-pae-4.1.3_06_k3.1.10_1.16-1.25.1 xen-kmp-pae-debuginfo-4.1.3_06_k3.1.10_1.16-1.25.1 References: http://support.novell.com/security/cve/CVE-2012-5510.html http://support.novell.com/security/cve/CVE-2012-5511.html http://support.novell.com/security/cve/CVE-2012-5512.html http://support.novell.com/security/cve/CVE-2012-5513.html http://support.novell.com/security/cve/CVE-2012-5514.html http://support.novell.com/security/cve/CVE-2012-5515.html https://bugzilla.novell.com/777628 https://bugzilla.novell.com/789940 https://bugzilla.novell.com/789944 https://bugzilla.novell.com/789945 https://bugzilla.novell.com/789948 https://bugzilla.novell.com/789950 https://bugzilla.novell.com/789951 https://bugzilla.novell.com/789988 https://bugzilla.novell.com/792476

1 0

openSUSE-SU-2012:1686-1: moderate: libreoffice: update to 3.5.4.13 (3.5.6rc2 based)
by opensuse-security＠opensuse.org 23 Dec '12

23 Dec '12

openSUSE Security Update: libreoffice: update to 3.5.4.13 (3.5.6rc2 based) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1686-1 Rating: moderate References: #719988 #734733 #741480 #744510 #757602 #758565 #759172 #759180 #760019 #760997 #768027 #770708 #772094 #773048 #773061 #773515 #774167 #774681 #774921 #775899 #775906 #777181 #778669 Cross-References: CVE-2012-4233 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that solves one vulnerability and has 22 fixes is now available. Description: LibreOffice was updated to 3.5.4.13 (3.5.6rc2 based), fixing a security issue and lots of bugs: - NULL pointer dereference (bnc#778669, CVE-2012-4233) - bullet-color-pptx-import.diff: bullets should have same color as following text by default; missing part of the fix (bnc#734733) - update to suse-3.5.4.13 (SUSE 3.5 bugfix release 13, based on upstream 3.5.6-rc2) * polygon fill rule (bnc#759172) * open XML in Writer (bnc#777181) * undo in text objects (fdo#36138) * broken numbering level (bnc#760019) * better MathML detection (bnc#774921) * pictures in DOCX import (bnc#772094) * collapsing border painting (fdo#39415) * better DOCX text box export (fdo#45724) * hidden text in PPTX import (bnc#759180) * slide notes in PPTX import (bnc#768027) * RTL paragraphs in DOC import (fdo#43398) * better vertical text imports (bnc#744510) * HYPERLINK field in DOCX import (fdo#51034) * shadow color on partial redraw (bnc#773515) * floating objects in DOCX import (bnc#775899) * graphite2 hyphenation regression (fdo#49486) * missing shape position and size (bnc#760997) * page style attributes in ODF import (fdo#38056) * browsing in Template dialog crasher (fdo#46249) * wrong master slide shape being used (bnc#758565) * page borders regression in ODT import (fdo#38056) * invalidate bound rect after drag&drop (fdo#44534) * rotated shape margins in PPTX import (bnc#773048) * pasting into more than 1 sheet crasher (fdo#47311) * crashers in PPT/PPTX import (bnc#768027, bnc#774167 * missing footnote in DOCX/DOC/RTF export (fdo#46020) * checkbox no-label behaviour (fdo#51336, bnc#757602) * try somewhat harder to read w:position (bnc#773061) * FormatNumber can handle sal_uInt32 values (fdo#51793) * rectangle-paragraph tables in DOCX import (bnc#775899) * header and bullet in slideshow transition (bnc#759172) * default background color in DOC/DOCX export (fdo#45724) * font name / size attributes in DOCX import (bnc#774681) * zero rect. size causing wrong line positions (fdo#47434) * adjusted display of Bracket/BracePair in PPT (bnc#741480) * use Unicode functions for QuickStarter tooltip (fdo#52143) * TabRatio API and detect macro at group shape fixes (bnc#770708) * indented text in DOCX file does not wrap correctly (bnc#775906) * undocked toolbars do not show all icons in special ratio (fdo#47071) * cross-reference text when Caption order is Numbering first (fdo#50801) * bullet color same as following text by default (bnc#719988, bnc#734733) * misc RTF import fixes (rhbz#819304, fdo#49666, bnc#774681, fdo#51772, fdo#48033, fdo#52066, fdo#48335, fdo#48446, fdo#49892, fdo#46966) - update to libvisio 0.0.19: * file displays as blank page in Draw (fdo#50990) - use the vendor SUSE instead of Novell, Inc. - install-with-vendor-SUSE.diff: fix installation with the vendor "SUSE" Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-868 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libreoffice-3.5.4.13-1.4.5 libreoffice-base-3.5.4.13-1.4.5 libreoffice-base-debuginfo-3.5.4.13-1.4.5 libreoffice-base-drivers-mysql-3.5.4.13-1.4.5 libreoffice-base-drivers-mysql-debuginfo-3.5.4.13-1.4.5 libreoffice-base-drivers-postgresql-3.5.4.13-1.4.5 libreoffice-base-drivers-postgresql-debuginfo-3.5.4.13-1.4.5 libreoffice-base-extensions-3.5.4.13-1.4.5 libreoffice-calc-3.5.4.13-1.4.5 libreoffice-calc-debuginfo-3.5.4.13-1.4.5 libreoffice-calc-extensions-3.5.4.13-1.4.5 libreoffice-debuginfo-3.5.4.13-1.4.5 libreoffice-debugsource-3.5.4.13-1.4.5 libreoffice-draw-3.5.4.13-1.4.5 libreoffice-draw-extensions-3.5.4.13-1.4.5 libreoffice-draw-extensions-debuginfo-3.5.4.13-1.4.5 libreoffice-filters-optional-3.5.4.13-1.4.5 libreoffice-filters-optional-debuginfo-3.5.4.13-1.4.5 libreoffice-gnome-3.5.4.13-1.4.5 libreoffice-gnome-debuginfo-3.5.4.13-1.4.5 libreoffice-icon-themes-prebuilt-3.5.4.13-1.4.5 libreoffice-impress-3.5.4.13-1.4.5 libreoffice-impress-debuginfo-3.5.4.13-1.4.5 libreoffice-impress-extensions-3.5.4.13-1.4.5 libreoffice-impress-extensions-debuginfo-3.5.4.13-1.4.5 libreoffice-kde-3.5.4.13-1.4.5 libreoffice-kde-debuginfo-3.5.4.13-1.4.5 libreoffice-kde4-3.5.4.13-1.4.5 libreoffice-kde4-debuginfo-3.5.4.13-1.4.5 libreoffice-l10n-prebuilt-3.5.4.13-1.4.5 libreoffice-mailmerge-3.5.4.13-1.4.5 libreoffice-math-3.5.4.13-1.4.5 libreoffice-math-debuginfo-3.5.4.13-1.4.5 libreoffice-officebean-3.5.4.13-1.4.5 libreoffice-officebean-debuginfo-3.5.4.13-1.4.5 libreoffice-pyuno-3.5.4.13-1.4.5 libreoffice-pyuno-debuginfo-3.5.4.13-1.4.5 libreoffice-sdk-3.5.4.13-1.4.5 libreoffice-sdk-debuginfo-3.5.4.13-1.4.5 libreoffice-sdk-doc-3.5.4.13-1.4.5 libreoffice-writer-3.5.4.13-1.4.5 libreoffice-writer-debuginfo-3.5.4.13-1.4.5 libreoffice-writer-extensions-3.5.4.13-1.4.5 - openSUSE 12.2 (noarch): libreoffice-branding-upstream-3.5.4.13-1.4.1 libreoffice-help-cs-3.5.4.13-1.4.4 libreoffice-help-da-3.5.4.13-1.4.4 libreoffice-help-de-3.5.4.13-1.4.4 libreoffice-help-en-GB-3.5.4.13-1.4.4 libreoffice-help-en-US-3.5.4.13-1.4.4 libreoffice-help-en-ZA-3.5.4.13-1.4.4 libreoffice-help-es-3.5.4.13-1.4.4 libreoffice-help-et-3.5.4.13-1.4.4 libreoffice-help-fr-3.5.4.13-1.4.4 libreoffice-help-gl-3.5.4.13-1.4.4 libreoffice-help-gu-IN-3.5.4.13-1.4.4 libreoffice-help-hi-IN-3.5.4.13-1.4.4 libreoffice-help-hu-3.5.4.13-1.4.4 libreoffice-help-it-3.5.4.13-1.4.4 libreoffice-help-ja-3.5.4.13-1.4.4 libreoffice-help-km-3.5.4.13-1.4.4 libreoffice-help-ko-3.5.4.13-1.4.4 libreoffice-help-nl-3.5.4.13-1.4.4 libreoffice-help-pl-3.5.4.13-1.4.4 libreoffice-help-pt-3.5.4.13-1.4.4 libreoffice-help-pt-BR-3.5.4.13-1.4.4 libreoffice-help-ru-3.5.4.13-1.4.4 libreoffice-help-sl-3.5.4.13-1.4.4 libreoffice-help-sv-3.5.4.13-1.4.4 libreoffice-help-zh-CN-3.5.4.13-1.4.4 libreoffice-help-zh-TW-3.5.4.13-1.4.4 libreoffice-icon-theme-crystal-3.5.4.13-1.4.1 libreoffice-icon-theme-galaxy-3.5.4.13-1.4.1 libreoffice-icon-theme-hicontrast-3.5.4.13-1.4.1 libreoffice-icon-theme-oxygen-3.5.4.13-1.4.1 libreoffice-icon-theme-tango-3.5.4.13-1.4.1 libreoffice-l10n-af-3.5.4.13-1.4.8 libreoffice-l10n-ar-3.5.4.13-1.4.8 libreoffice-l10n-be-BY-3.5.4.13-1.4.8 libreoffice-l10n-bg-3.5.4.13-1.4.8 libreoffice-l10n-br-3.5.4.13-1.4.8 libreoffice-l10n-ca-3.5.4.13-1.4.8 libreoffice-l10n-cs-3.5.4.13-1.4.8 libreoffice-l10n-cy-3.5.4.13-1.4.8 libreoffice-l10n-da-3.5.4.13-1.4.8 libreoffice-l10n-de-3.5.4.13-1.4.8 libreoffice-l10n-el-3.5.4.13-1.4.8 libreoffice-l10n-en-GB-3.5.4.13-1.4.8 libreoffice-l10n-en-ZA-3.5.4.13-1.4.8 libreoffice-l10n-es-3.5.4.13-1.4.8 libreoffice-l10n-et-3.5.4.13-1.4.8 libreoffice-l10n-fi-3.5.4.13-1.4.8 libreoffice-l10n-fr-3.5.4.13-1.4.8 libreoffice-l10n-ga-3.5.4.13-1.4.8 libreoffice-l10n-gl-3.5.4.13-1.4.8 libreoffice-l10n-gu-IN-3.5.4.13-1.4.8 libreoffice-l10n-he-3.5.4.13-1.4.8 libreoffice-l10n-hi-IN-3.5.4.13-1.4.8 libreoffice-l10n-hr-3.5.4.13-1.4.8 libreoffice-l10n-hu-3.5.4.13-1.4.8 libreoffice-l10n-it-3.5.4.13-1.4.8 libreoffice-l10n-ja-3.5.4.13-1.4.8 libreoffice-l10n-ka-3.5.4.13-1.4.8 libreoffice-l10n-km-3.5.4.13-1.4.8 libreoffice-l10n-ko-3.5.4.13-1.4.8 libreoffice-l10n-lt-3.5.4.13-1.4.8 libreoffice-l10n-mk-3.5.4.13-1.4.8 libreoffice-l10n-nb-3.5.4.13-1.4.8 libreoffice-l10n-nl-3.5.4.13-1.4.8 libreoffice-l10n-nn-3.5.4.13-1.4.8 libreoffice-l10n-nr-3.5.4.13-1.4.8 libreoffice-l10n-pa-IN-3.5.4.13-1.4.8 libreoffice-l10n-pl-3.5.4.13-1.4.8 libreoffice-l10n-pt-3.5.4.13-1.4.8 libreoffice-l10n-pt-BR-3.5.4.13-1.4.8 libreoffice-l10n-ru-3.5.4.13-1.4.8 libreoffice-l10n-rw-3.5.4.13-1.4.8 libreoffice-l10n-sh-3.5.4.13-1.4.8 libreoffice-l10n-sk-3.5.4.13-1.4.8 libreoffice-l10n-sl-3.5.4.13-1.4.8 libreoffice-l10n-sr-3.5.4.13-1.4.8 libreoffice-l10n-ss-3.5.4.13-1.4.8 libreoffice-l10n-st-3.5.4.13-1.4.8 libreoffice-l10n-sv-3.5.4.13-1.4.8 libreoffice-l10n-tg-3.5.4.13-1.4.8 libreoffice-l10n-th-3.5.4.13-1.4.8 libreoffice-l10n-tr-3.5.4.13-1.4.8 libreoffice-l10n-ts-3.5.4.13-1.4.8 libreoffice-l10n-uk-3.5.4.13-1.4.8 libreoffice-l10n-ve-3.5.4.13-1.4.8 libreoffice-l10n-vi-3.5.4.13-1.4.8 libreoffice-l10n-xh-3.5.4.13-1.4.8 libreoffice-l10n-zh-CN-3.5.4.13-1.4.8 libreoffice-l10n-zh-TW-3.5.4.13-1.4.8 libreoffice-l10n-zu-3.5.4.13-1.4.8 References: http://support.novell.com/security/cve/CVE-2012-4233.html https://bugzilla.novell.com/719988 https://bugzilla.novell.com/734733 https://bugzilla.novell.com/741480 https://bugzilla.novell.com/744510 https://bugzilla.novell.com/757602 https://bugzilla.novell.com/758565 https://bugzilla.novell.com/759172 https://bugzilla.novell.com/759180 https://bugzilla.novell.com/760019 https://bugzilla.novell.com/760997 https://bugzilla.novell.com/768027 https://bugzilla.novell.com/770708 https://bugzilla.novell.com/772094 https://bugzilla.novell.com/773048 https://bugzilla.novell.com/773061 https://bugzilla.novell.com/773515 https://bugzilla.novell.com/774167 https://bugzilla.novell.com/774681 https://bugzilla.novell.com/774921 https://bugzilla.novell.com/775899 https://bugzilla.novell.com/775906 https://bugzilla.novell.com/777181 https://bugzilla.novell.com/778669

1 0

openSUSE-SU-2012:1685-1: important: xen to fix various denial of service issues
by opensuse-security＠opensuse.org 23 Dec '12

23 Dec '12

openSUSE Security Update: xen to fix various denial of service issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1685-1 Rating: important References: #777628 #789940 #789944 #789945 #789948 #789950 #789951 #789988 #792476 Cross-References: CVE-2012-5510 CVE-2012-5511 CVE-2012-5512 CVE-2012-5513 CVE-2012-5514 CVE-2012-5515 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has three fixes is now available. Description: This update of XEN fixes various denial of service bugs. - bnc#789945 - CVE-2012-5510: xen: Grant table version switch list corruption vulnerability (XSA-26) - bnc#789944 - CVE-2012-5511: xen: Several HVM operations do not validate the range of their inputs (XSA-27) - bnc#789940 - CVE-2012-5512: xen: HVMOP_get_mem_access crash / HVMOP_set_mem_access information leak (XSA-28) - bnc#789951 - CVE-2012-5513: xen: XENMEM_exchange may overwrite hypervisor memory (XSA-29) - bnc#789948 - CVE-2012-5514: xen: Missing unlock in guest_physmap_mark_populate_on_demand() (XSA-30) - bnc#789950 - CVE-2012-5515: xen: Several memory hypercall operations allow invalid extent order values (XSA-31) - bnc#789988 - FATAL PAGE FAULT in hypervisor (arch_do_domctl) 25931-x86-domctl-iomem-mapping-checks.patch - Upstream patches from Jan 26132-tmem-save-NULL-check.patch 26134-x86-shadow-invlpg-check.patch 26148-vcpu-timer-overflow.patch (Replaces CVE-2012-4535-xsa20.patch) 26149-x86-p2m-physmap-error-path.patch (Replaces CVE-2012-4537-xsa22.patch) 26150-x86-shadow-unhook-toplevel-check.patch (Replaces CVE-2012-4538-xsa23.patch) 26151-gnttab-compat-get-status-frames.patch (Replaces CVE-2012-4539-xsa24.patch) - bnc#777628 - guest "disappears" after live migration Updated block-dmmd script - Fix exception in balloon.py and osdep.py xen-max-free-mem.diff - bnc#792476 - efi files missing in latest XEN update Revert c/s 25751 EFI Makefile changes in 23614-x86_64-EFI-boot.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-870 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): xen-debugsource-4.1.3_06-5.17.1 xen-devel-4.1.3_06-5.17.1 xen-kmp-default-4.1.3_06_k3.4.11_2.16-5.17.1 xen-kmp-default-debuginfo-4.1.3_06_k3.4.11_2.16-5.17.1 xen-kmp-desktop-4.1.3_06_k3.4.11_2.16-5.17.1 xen-kmp-desktop-debuginfo-4.1.3_06_k3.4.11_2.16-5.17.1 xen-libs-4.1.3_06-5.17.1 xen-libs-debuginfo-4.1.3_06-5.17.1 xen-tools-domU-4.1.3_06-5.17.1 xen-tools-domU-debuginfo-4.1.3_06-5.17.1 - openSUSE 12.2 (x86_64): xen-4.1.3_06-5.17.1 xen-doc-html-4.1.3_06-5.17.1 xen-doc-pdf-4.1.3_06-5.17.1 xen-libs-32bit-4.1.3_06-5.17.1 xen-libs-debuginfo-32bit-4.1.3_06-5.17.1 xen-tools-4.1.3_06-5.17.1 xen-tools-debuginfo-4.1.3_06-5.17.1 - openSUSE 12.2 (i586): xen-kmp-pae-4.1.3_06_k3.4.11_2.16-5.17.1 xen-kmp-pae-debuginfo-4.1.3_06_k3.4.11_2.16-5.17.1 References: http://support.novell.com/security/cve/CVE-2012-5510.html http://support.novell.com/security/cve/CVE-2012-5511.html http://support.novell.com/security/cve/CVE-2012-5512.html http://support.novell.com/security/cve/CVE-2012-5513.html http://support.novell.com/security/cve/CVE-2012-5514.html http://support.novell.com/security/cve/CVE-2012-5515.html https://bugzilla.novell.com/777628 https://bugzilla.novell.com/789940 https://bugzilla.novell.com/789944 https://bugzilla.novell.com/789945 https://bugzilla.novell.com/789948 https://bugzilla.novell.com/789950 https://bugzilla.novell.com/789951 https://bugzilla.novell.com/789988 https://bugzilla.novell.com/792476

1 0

openSUSE-SU-2012:1682-1: moderate: update for chromium
by opensuse-security＠opensuse.org 21 Dec '12

21 Dec '12

openSUSE Security Update: update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1682-1 Rating: moderate References: #794075 Cross-References: CVE-2012-5139 CVE-2012-5140 CVE-2012-5141 CVE-2012-5142 CVE-2012-5143 CVE-2012-5144 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: - Update to 25.0.1362 * Security fixes (bnc#794075): - CVE-2012-5139: Use-after-free with visibility events - CVE-2012-5140: Use-after-free in URL loader - CVE-2012-5141: Limit Chromoting client plug-in instantiation. - CVE-2012-5142: Crash in history navigation. - CVE-2012-5143: Integer overflow in PPAPI image buffers - CVE-2012-5144: Stack corruption in AAC decoding * Fixed garbled header and footer text in print preview. [Issue: 152893] * Fixed extension action badges with long text. [Issue: 160069] * Disable find if constrained window is shown. [Issue: 156969] * Enable fullscreen for apps windows. [Issue: 161246] * Fixed broken profile with system-wide installation and UserDataDir & DiskCacheDir policy. [Issue: 161336] * Fixed stability crashes like 158747, 159437, 149139, 160914, 160401, 161858, 158747, 156878 * Fixed graphical corruption in Dust. [Issue: 155258] * Fixed scrolling issue. [Issue: 163553] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-867 - openSUSE 12.1: zypper in -t patch openSUSE-2012-867 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): chromedriver-25.0.1362.0-1.27.2 chromedriver-debuginfo-25.0.1362.0-1.27.2 chromium-25.0.1362.0-1.27.2 chromium-debuginfo-25.0.1362.0-1.27.2 chromium-debugsource-25.0.1362.0-1.27.2 chromium-desktop-gnome-25.0.1362.0-1.27.2 chromium-desktop-kde-25.0.1362.0-1.27.2 chromium-ffmpegsumo-25.0.1362.0-1.27.2 chromium-ffmpegsumo-debuginfo-25.0.1362.0-1.27.2 chromium-suid-helper-25.0.1362.0-1.27.2 chromium-suid-helper-debuginfo-25.0.1362.0-1.27.2 - openSUSE 12.1 (i586 x86_64): chromedriver-25.0.1362.0-1.47.1 chromedriver-debuginfo-25.0.1362.0-1.47.1 chromium-25.0.1362.0-1.47.1 chromium-debuginfo-25.0.1362.0-1.47.1 chromium-debugsource-25.0.1362.0-1.47.1 chromium-desktop-gnome-25.0.1362.0-1.47.1 chromium-desktop-kde-25.0.1362.0-1.47.1 chromium-ffmpegsumo-25.0.1362.0-1.47.1 chromium-ffmpegsumo-debuginfo-25.0.1362.0-1.47.1 chromium-suid-helper-25.0.1362.0-1.47.1 chromium-suid-helper-debuginfo-25.0.1362.0-1.47.1 References: http://support.novell.com/security/cve/CVE-2012-5139.html http://support.novell.com/security/cve/CVE-2012-5140.html http://support.novell.com/security/cve/CVE-2012-5141.html http://support.novell.com/security/cve/CVE-2012-5142.html http://support.novell.com/security/cve/CVE-2012-5143.html http://support.novell.com/security/cve/CVE-2012-5144.html https://bugzilla.novell.com/794075

1 0

openSUSE-RU-2012:1681-1: glibc: Two bugfixes
by maintenance＠opensuse.org 20 Dec '12

20 Dec '12

openSUSE Recommended Update: glibc: Two bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1681-1 Rating: low References: #793619 #794347 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for glibc: - bnc#794347: Build complete locales and profile package for i686 - bnc#793619: Fix crash resolving ifunc reloc with LD_AUDIT Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch 1176 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 i686 x86_64): glibc-2.15-22.17.1 glibc-debuginfo-2.15-22.17.1 glibc-debugsource-2.15-22.17.1 glibc-devel-2.15-22.17.1 glibc-devel-debuginfo-2.15-22.17.1 glibc-devel-static-2.15-22.17.1 glibc-extra-2.15-22.17.1 glibc-extra-debuginfo-2.15-22.17.1 glibc-locale-2.15-22.17.1 glibc-locale-debuginfo-2.15-22.17.1 glibc-profile-2.15-22.17.1 glibc-utils-2.15-22.17.1 glibc-utils-debuginfo-2.15-22.17.1 nscd-2.15-22.17.1 nscd-debuginfo-2.15-22.17.1 - openSUSE 12.2 (i586 i686): glibc-obsolete-2.15-22.17.1 glibc-obsolete-debuginfo-2.15-22.17.1 - openSUSE 12.2 (x86_64): glibc-32bit-2.15-22.17.1 glibc-debuginfo-32bit-2.15-22.17.1 glibc-devel-32bit-2.15-22.17.1 glibc-devel-debuginfo-32bit-2.15-22.17.1 glibc-devel-static-32bit-2.15-22.17.1 glibc-locale-32bit-2.15-22.17.1 glibc-locale-debuginfo-32bit-2.15-22.17.1 glibc-profile-32bit-2.15-22.17.1 glibc-utils-32bit-2.15-22.17.1 glibc-utils-debuginfo-32bit-2.15-22.17.1 - openSUSE 12.2 (noarch): glibc-html-2.15-22.17.1 glibc-i18ndata-2.15-22.17.1 glibc-info-2.15-22.17.1 References: https://bugzilla.novell.com/793619 https://bugzilla.novell.com/794347

1 0