March 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2012:0433-1: moderate: update for libreoffice
by opensuse-security＠opensuse.org 30 Mar '12

30 Mar '12

openSUSE Security Update: update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0433-1 Rating: moderate References: #101776 #116448 #117010 #31966 #32861 #35513 #35965 #37129 #37195 #38286 #38391 #38441 #39485 #39510 #39657 #39694 #40298 #40320 #40461 #40701 #41022 #41245 #41681 #417818 #41995 #42073 #42543 #44816 #45560 #46165 #46337 #621739 #653688 #655408 #657909 #667082 #677811 #685123 #693238 #693388 #695479 #699334 #703032 #704274 #705949 #705956 #705977 #705985 #705991 #706138 #706792 #707157 #714787 #715094 #715104 #715115 #715543 #717290 #718227 #718694 #718971 #719656 #719887 #719989 #720443 #720948 #722045 #722644 #722918 #723074 #724087 #726152 #726174 #727504 #728559 #728603 #733864 #734734 #734781 #735533 #736495 #737190 #737921 #738113 #740032 #740117 #740453 #741043 #741182 #742178 #746996 #747471 #748198 #748548 #794679 Cross-References: CVE-2012-0037 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves one vulnerability and has 94 fixes is now available. Description: - updated to libreoffice-3.4.5.4 (SUSE 3.4.5-rc2) * calc * pie charts colors messed in XLS import (fdo#40320) * correctly import data point formats in data series (fdo#40320) * components * crash when parsing XML signatures (fdo#39657) * broken getDataArray (fdo#46165, fdo#38441, i#117010) * don't paint a frame around the list of edit boxes (fdo#42543) * inconsistent compression method for encrypted documents (bnc#653688) * filters * more on bentConnectors (bnc#736495) * wrong text color in smartArt (bnc#746996) * reading of w:textbox contents (bnc#693388) * textbox position and size DOCX import (fdo#45560) * RTF/DOCX import of transparent frames (bnc#695479) * consecutive frames in RTF/DOCX import (bnc#703032) * handling of frame properties in RTF import (bnc#417818) * force imported XLSX active tab to be shown (bnc#748198) * create TableManager for inside shapes (bnc#747471, bnc#693238) * textboxes import with OLE objects inside (bnc#747471, bnc#693238) * impress * do not create an empty slide when printing handouts (fdo#31966) * libs-core * default shortcut for .uno:SearchDialog should be Ctrl+H * crash using instances dialog of dataform navigator (fdo#44816) * libs-extern * disable problematic reading of external entities in raptor * libs-gui * correctly calculate leap year * use proper Indian Rupee currency symbol U+20B9 (rh#794679) * writer * field refreshing (fdo#39694) * more layout crashers (i#101776, fdo#39510) * textbox borders style and width in DOCX import (fdo#45560) * expand all text fields when setting properties (fdo#42073) - updated to libreoffice-3.4.5.3 (SUSE 3.4.5-rc1) * version 3.4.5.3, tag suse-3.4.5.3 (SUSE LO 3.4.5-rc1) * SmartArt import * custom shapes import * Oracle Java 1.7.0 detection * reading AES-encrypted ODF 1.2 documents as generated by LO 3.5 * base * iterator misuse (fdo #44040, bnc#742178) * calc * allow pasting to multiple ranges (bnc#715094) * correctly convert chart data ranges (bnc#727504) * definedName corruption for XLSX export (bnc#741182) * adjust/shrink the ranges while copying (bnc#677811) * extra graph data is displayed for label (bnc#717290) * getCellRangeByName failure for named range (bnc#738113) * graph in XLS file has dates displayed wrong (bnc#720443) * improve performance of large Excel documents (bnc#715104) * display page background color/image properly (bnc#722045) * pivot table output becoming empty on re-save (bnc#715543) * encode virtual paths to local volume correctly (bnc#719887) * avoid adjusting cell-anchored objects on other sheets (bnc#726152) * make sure to adjust the sheet index of drawing objects (bnc#733864) * make the data validation popup more reliable (fdo #36851, bnc#737190) * filters * table style (bnc#705991) * text rotation fixes (bnc#734734) * crash in PPTX import (bnc#706792) * read w:sdt* contents (bnc#705949) * connector shape fixes (bnc#719989) * legacy fragment import (bnc#699334) * non-working Excel macros (bnc#705977) * free drawn curves import (bnc#657909) * group shape transformations (bnc#621739) * extLst of drawings in diagrams import (bnc#655408) * flip properties of custom shapes import (bnc#705985) * line spacing is used from previous values (bnc#734734) * missing ooxml customshape->mso shape name entries (bnc#737921) * word doesn't break the numberings and prefers hiding them (bnc#707157) * impress * undo corruption (bnc#685123) * do not set duplicate master slide names (bnc#735533) * libs-core * handle copy and paste from ConsoleOne (bnc#704274) * VBA control events not working, broken eventattacher (bnc#718227) * "General Error" when double-click graphic in presentation (bnc#720948) * libs-extern-sys * upgrade graphite to 1.0.3 fix surrogate support * libs-gui * crash at exit (bnc#728603) * radial gradient offset (bnc#714787) * horizontal scrollbars with KDE oxygen style (bnc#722918) * rendering of metafiles embedded in EMF+ (updated) (bnc#705956) * postprocess * make the 3D transitions work again (bnc#728559) * ure * make Duden Korrektor 5 and 6 work * writer * frame selection (bnc#740117) * crash when editing index (bnc#726174) * order database properties (bnc#740032) * numbering levels in DOC import (bnc#715115) * image size issue in DOC import (bnc#718971) * pointless forward moving of a table (bnc#706138) * tabs set after the end margin in DOCX import (bnc#693238) * add hyperlinks by default in Table of Contents (bnc#705956) - updated to libreoffice-3.4.4.3 (SUSE 3.4.4-rc1 == final): * base * crash when inserting a constant in a query (fdo#38286) * calc * crash when modifying a named range * speed up range name lookup by index (bnc#715104) * recalculate matrix formula dimension correctly (fdo#39485) * mark all formula cells dirty when appending a new sheet (fdo#35965) * components * handling of SAFEARRAY(s) in olebridge (fdo#38441) * filters * auto fit text VIEWING too small in PPT import (fdo#41245) * impress * hang in slideshow (fdo#32861) * crash while dropping texture (fdo#38391) * libs-core * recognize .svg in ODF container (fdo#41995) * dictionaries lost after LibO upgrade (fdo#37195) * crash when "Find Record" button is clicked in Base (fdo#40701) * fix the drawing of dotted and dashed borders in Calc (fdo#37129) * VBA control events not working; broken eventattacher (bnc#718227) * libs-extern-sys * upgrade graphite to 1.0.3 to fix surrogate support * libs-gui * crash when changing screen resolution * let Qt call XInitThreads() (fdo#40298) * activation order crashes address database (fdo#41022) * drawing of dotted and dashed borders in Calc (fdo#37129) * translations * update translations * writer * leak in PDF export (i#116448) * crash when editing index (bnc#726174) * crash while processing incorrect range of pages (fdo#35513) * crash on closing document with footnotes (fdo#39510, lp#854626) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-187 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libreoffice-3.4.5.5-97.1 libreoffice-base-3.4.5.5-97.1 libreoffice-base-debuginfo-3.4.5.5-97.1 libreoffice-base-drivers-mysql-3.4.5.5-97.1 libreoffice-base-drivers-mysql-debuginfo-3.4.5.5-97.1 libreoffice-base-drivers-postgresql-3.4.5.5-97.1 libreoffice-base-drivers-postgresql-debuginfo-3.4.5.5-97.1 libreoffice-base-extensions-3.4.5.5-97.1 libreoffice-calc-3.4.5.5-97.1 libreoffice-calc-debuginfo-3.4.5.5-97.1 libreoffice-calc-extensions-3.4.5.5-97.1 libreoffice-debuginfo-3.4.5.5-97.1 libreoffice-debugsource-3.4.5.5-97.1 libreoffice-draw-3.4.5.5-97.1 libreoffice-draw-extensions-3.4.5.5-97.1 libreoffice-draw-extensions-debuginfo-3.4.5.5-97.1 libreoffice-filters-optional-3.4.5.5-97.1 libreoffice-filters-optional-debuginfo-3.4.5.5-97.1 libreoffice-gnome-3.4.5.5-97.1 libreoffice-gnome-debuginfo-3.4.5.5-97.1 libreoffice-icon-themes-prebuilt-3.4.5.5-97.1 libreoffice-impress-3.4.5.5-97.1 libreoffice-impress-debuginfo-3.4.5.5-97.1 libreoffice-impress-extensions-3.4.5.5-97.1 libreoffice-impress-extensions-debuginfo-3.4.5.5-97.1 libreoffice-kde-3.4.5.5-97.1 libreoffice-kde-debuginfo-3.4.5.5-97.1 libreoffice-kde4-3.4.5.5-97.1 libreoffice-kde4-debuginfo-3.4.5.5-97.1 libreoffice-l10n-prebuilt-3.4.5.5-97.1 libreoffice-mailmerge-3.4.5.5-97.1 libreoffice-math-3.4.5.5-97.1 libreoffice-math-debuginfo-3.4.5.5-97.1 libreoffice-officebean-3.4.5.5-97.1 libreoffice-officebean-debuginfo-3.4.5.5-97.1 libreoffice-pyuno-3.4.5.5-97.1 libreoffice-pyuno-debuginfo-3.4.5.5-97.1 libreoffice-sdk-3.4.5.5-97.1 libreoffice-sdk-debuginfo-3.4.5.5-97.1 libreoffice-sdk-doc-3.4.5.5-97.1 libreoffice-testtool-3.4.5.5-97.1 libreoffice-testtool-debuginfo-3.4.5.5-97.1 libreoffice-writer-3.4.5.5-97.1 libreoffice-writer-debuginfo-3.4.5.5-97.1 libreoffice-writer-extensions-3.4.5.5-97.1 - openSUSE 11.4 (noarch): libreoffice-branding-upstream-3.4.5.5-97.1 libreoffice-help-cs-3.4.5.5-97.1 libreoffice-help-da-3.4.5.5-97.1 libreoffice-help-de-3.4.5.5-97.1 libreoffice-help-en-GB-3.4.5.5-97.1 libreoffice-help-en-US-3.4.5.5-97.1 libreoffice-help-en-ZA-3.4.5.5-97.1 libreoffice-help-es-3.4.5.5-97.1 libreoffice-help-et-3.4.5.5-97.1 libreoffice-help-fr-3.4.5.5-97.1 libreoffice-help-gl-3.4.5.5-97.1 libreoffice-help-gu-IN-3.4.5.5-97.1 libreoffice-help-hi-IN-3.4.5.5-97.1 libreoffice-help-hu-3.4.5.5-97.1 libreoffice-help-it-3.4.5.5-97.1 libreoffice-help-ja-3.4.5.5-97.1 libreoffice-help-km-3.4.5.5-97.1 libreoffice-help-ko-3.4.5.5-97.1 libreoffice-help-nl-3.4.5.5-97.1 libreoffice-help-pl-3.4.5.5-97.1 libreoffice-help-pt-3.4.5.5-97.1 libreoffice-help-pt-BR-3.4.5.5-97.1 libreoffice-help-ru-3.4.5.5-97.1 libreoffice-help-sl-3.4.5.5-97.1 libreoffice-help-sv-3.4.5.5-97.1 libreoffice-help-zh-CN-3.4.5.5-97.1 libreoffice-help-zh-TW-3.4.5.5-97.1 libreoffice-icon-theme-crystal-3.4.5.5-14.1 libreoffice-icon-theme-galaxy-3.4.5.5-14.1 libreoffice-icon-theme-hicontrast-3.4.5.5-14.1 libreoffice-icon-theme-oxygen-3.4.5.5-14.1 libreoffice-icon-theme-tango-3.4.5.5-14.1 libreoffice-l10n-af-3.4.5.5-122.1 libreoffice-l10n-ar-3.4.5.5-122.1 libreoffice-l10n-be-BY-3.4.5.5-122.1 libreoffice-l10n-bg-3.4.5.5-122.1 libreoffice-l10n-br-3.4.5.5-122.1 libreoffice-l10n-ca-3.4.5.5-122.1 libreoffice-l10n-cs-3.4.5.5-122.1 libreoffice-l10n-cy-3.4.5.5-122.1 libreoffice-l10n-da-3.4.5.5-122.1 libreoffice-l10n-de-3.4.5.5-122.1 libreoffice-l10n-el-3.4.5.5-122.1 libreoffice-l10n-en-GB-3.4.5.5-122.1 libreoffice-l10n-en-ZA-3.4.5.5-122.1 libreoffice-l10n-es-3.4.5.5-122.1 libreoffice-l10n-et-3.4.5.5-122.1 libreoffice-l10n-fi-3.4.5.5-122.1 libreoffice-l10n-fr-3.4.5.5-122.1 libreoffice-l10n-ga-3.4.5.5-122.1 libreoffice-l10n-gl-3.4.5.5-122.1 libreoffice-l10n-gu-IN-3.4.5.5-122.1 libreoffice-l10n-he-3.4.5.5-122.1 libreoffice-l10n-hi-IN-3.4.5.5-122.1 libreoffice-l10n-hr-3.4.5.5-122.1 libreoffice-l10n-hu-3.4.5.5-122.1 libreoffice-l10n-it-3.4.5.5-122.1 libreoffice-l10n-ja-3.4.5.5-122.1 libreoffice-l10n-ka-3.4.5.5-122.1 libreoffice-l10n-km-3.4.5.5-122.1 libreoffice-l10n-ko-3.4.5.5-122.1 libreoffice-l10n-lt-3.4.5.5-122.1 libreoffice-l10n-mk-3.4.5.5-122.1 libreoffice-l10n-nb-3.4.5.5-122.1 libreoffice-l10n-nl-3.4.5.5-122.1 libreoffice-l10n-nn-3.4.5.5-122.1 libreoffice-l10n-nr-3.4.5.5-122.1 libreoffice-l10n-pa-IN-3.4.5.5-122.1 libreoffice-l10n-pl-3.4.5.5-122.1 libreoffice-l10n-pt-3.4.5.5-122.1 libreoffice-l10n-pt-BR-3.4.5.5-122.1 libreoffice-l10n-ru-3.4.5.5-122.1 libreoffice-l10n-rw-3.4.5.5-122.1 libreoffice-l10n-sh-3.4.5.5-122.1 libreoffice-l10n-sk-3.4.5.5-122.1 libreoffice-l10n-sl-3.4.5.5-122.1 libreoffice-l10n-sr-3.4.5.5-122.1 libreoffice-l10n-ss-3.4.5.5-122.1 libreoffice-l10n-st-3.4.5.5-122.1 libreoffice-l10n-sv-3.4.5.5-122.1 libreoffice-l10n-tg-3.4.5.5-122.1 libreoffice-l10n-th-3.4.5.5-122.1 libreoffice-l10n-tr-3.4.5.5-122.1 libreoffice-l10n-ts-3.4.5.5-122.1 libreoffice-l10n-uk-3.4.5.5-122.1 libreoffice-l10n-ve-3.4.5.5-122.1 libreoffice-l10n-vi-3.4.5.5-122.1 libreoffice-l10n-xh-3.4.5.5-122.1 libreoffice-l10n-zh-CN-3.4.5.5-122.1 libreoffice-l10n-zh-TW-3.4.5.5-122.1 libreoffice-l10n-zu-3.4.5.5-122.1 References: http://support.novell.com/security/cve/CVE-2012-0037.html https://bugzilla.novell.com/101776 https://bugzilla.novell.com/116448 https://bugzilla.novell.com/117010 https://bugzilla.novell.com/31966 https://bugzilla.novell.com/32861 https://bugzilla.novell.com/35513 https://bugzilla.novell.com/35965 https://bugzilla.novell.com/37129 https://bugzilla.novell.com/37195 https://bugzilla.novell.com/38286 https://bugzilla.novell.com/38391 https://bugzilla.novell.com/38441 https://bugzilla.novell.com/39485 https://bugzilla.novell.com/39510 https://bugzilla.novell.com/39657 https://bugzilla.novell.com/39694 https://bugzilla.novell.com/40298 https://bugzilla.novell.com/40320 https://bugzilla.novell.com/40461 https://bugzilla.novell.com/40701 https://bugzilla.novell.com/41022 https://bugzilla.novell.com/41245 https://bugzilla.novell.com/41681 https://bugzilla.novell.com/417818 https://bugzilla.novell.com/41995 https://bugzilla.novell.com/42073 https://bugzilla.novell.com/42543 https://bugzilla.novell.com/44816 https://bugzilla.novell.com/45560 https://bugzilla.novell.com/46165 https://bugzilla.novell.com/46337 https://bugzilla.novell.com/621739 https://bugzilla.novell.com/653688 https://bugzilla.novell.com/655408 https://bugzilla.novell.com/657909 https://bugzilla.novell.com/667082 https://bugzilla.novell.com/677811 https://bugzilla.novell.com/685123 https://bugzilla.novell.com/693238 https://bugzilla.novell.com/693388 https://bugzilla.novell.com/695479 https://bugzilla.novell.com/699334 https://bugzilla.novell.com/703032 https://bugzilla.novell.com/704274 https://bugzilla.novell.com/705949 https://bugzilla.novell.com/705956 https://bugzilla.novell.com/705977 https://bugzilla.novell.com/705985 https://bugzilla.novell.com/705991 https://bugzilla.novell.com/706138 https://bugzilla.novell.com/706792 https://bugzilla.novell.com/707157 https://bugzilla.novell.com/714787 https://bugzilla.novell.com/715094 https://bugzilla.novell.com/715104 https://bugzilla.novell.com/715115 https://bugzilla.novell.com/715543 https://bugzilla.novell.com/717290 https://bugzilla.novell.com/718227 https://bugzilla.novell.com/718694 https://bugzilla.novell.com/718971 https://bugzilla.novell.com/719656 https://bugzilla.novell.com/719887 https://bugzilla.novell.com/719989 https://bugzilla.novell.com/720443 https://bugzilla.novell.com/720948 https://bugzilla.novell.com/722045 https://bugzilla.novell.com/722644 https://bugzilla.novell.com/722918 https://bugzilla.novell.com/723074 https://bugzilla.novell.com/724087 https://bugzilla.novell.com/726152 https://bugzilla.novell.com/726174 https://bugzilla.novell.com/727504 https://bugzilla.novell.com/728559 https://bugzilla.novell.com/728603 https://bugzilla.novell.com/733864 https://bugzilla.novell.com/734734 https://bugzilla.novell.com/734781 https://bugzilla.novell.com/735533 https://bugzilla.novell.com/736495 https://bugzilla.novell.com/737190 https://bugzilla.novell.com/737921 https://bugzilla.novell.com/738113 https://bugzilla.novell.com/740032 https://bugzilla.novell.com/740117 https://bugzilla.novell.com/740453 https://bugzilla.novell.com/741043 https://bugzilla.novell.com/741182 https://bugzilla.novell.com/742178 https://bugzilla.novell.com/746996 https://bugzilla.novell.com/747471 https://bugzilla.novell.com/748198 https://bugzilla.novell.com/748548 https://bugzilla.novell.com/794679

1 0

openSUSE-SU-2012:0432-1: moderate: update for libpng12, libpng14
by opensuse-security＠opensuse.org 30 Mar '12

30 Mar '12

openSUSE Security Update: update for libpng12, libpng14 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0432-1 Rating: moderate References: #752008 Cross-References: CVE-2011-3045 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: specially crafted png files could cause a buffer overflow in libpng Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-186 - openSUSE 11.4: zypper in -t patch openSUSE-2012-186 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libpng12-0-1.2.48-9.6.1 libpng12-0-debuginfo-1.2.48-9.6.1 libpng12-compat-devel-1.2.48-9.6.1 libpng12-debugsource-1.2.48-9.6.1 libpng12-devel-1.2.48-9.6.1 libpng14-14-1.4.10-3.6.1 libpng14-14-debuginfo-1.4.10-3.6.1 libpng14-compat-devel-1.4.10-3.6.1 libpng14-debugsource-1.4.10-3.6.1 libpng14-devel-1.4.10-3.6.1 - openSUSE 12.1 (x86_64): libpng12-0-32bit-1.2.48-9.6.1 libpng12-0-debuginfo-32bit-1.2.48-9.6.1 libpng12-compat-devel-32bit-1.2.48-9.6.1 libpng12-devel-32bit-1.2.48-9.6.1 libpng14-14-32bit-1.4.10-3.6.1 libpng14-14-debuginfo-32bit-1.4.10-3.6.1 libpng14-compat-devel-32bit-1.4.10-3.6.1 libpng14-devel-32bit-1.4.10-3.6.1 - openSUSE 11.4 (i586 x86_64): libpng12-0-1.2.48-13.1 libpng12-0-debuginfo-1.2.48-13.1 libpng12-compat-devel-1.2.48-13.1 libpng12-debugsource-1.2.48-13.1 libpng12-devel-1.2.48-13.1 libpng14-14-1.4.4-17.1 libpng14-14-debuginfo-1.4.4-17.1 libpng14-compat-devel-1.4.4-17.1 libpng14-debugsource-1.4.4-17.1 libpng14-devel-1.4.4-17.1 - openSUSE 11.4 (x86_64): libpng12-0-32bit-1.2.48-13.1 libpng12-0-debuginfo-32bit-1.2.48-13.1 libpng12-compat-devel-32bit-1.2.48-13.1 libpng12-devel-32bit-1.2.48-13.1 libpng14-14-32bit-1.4.4-17.1 libpng14-14-debuginfo-32bit-1.4.4-17.1 libpng14-compat-devel-32bit-1.4.4-17.1 libpng14-devel-32bit-1.4.4-17.1 References: http://support.novell.com/security/cve/CVE-2011-3045.html https://bugzilla.novell.com/752008

1 0

openSUSE-RU-2012:0429-1: Maintenance update for net-snmp
by maintenance＠opensuse.org 29 Mar '12

29 Mar '12

openSUSE Recommended Update: Maintenance update for net-snmp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0429-1 Rating: low References: #670789 #707636 #712174 #715199 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes the following bugs: - fix agent crash when reloading a subagent (AgentX) during a query (bnc#670789) - avoid an unnecessary stop/start cycle in the agent after log rotation (bnc#707636) - fix logging option in snmptrapd init script (bnc#712174) - add VxFS, ReiserFS and OCFS2 to the list of known file systems (bnc#715199) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-185 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libsnmp25-5.6.1-4.29.1 libsnmp25-debuginfo-5.6.1-4.29.1 net-snmp-5.6.1-4.29.1 net-snmp-debuginfo-5.6.1-4.29.1 net-snmp-debugsource-5.6.1-4.29.1 net-snmp-devel-5.6.1-4.29.1 perl-SNMP-5.6.1-4.29.1 perl-SNMP-debuginfo-5.6.1-4.29.1 snmp-mibs-5.6.1-4.29.1 - openSUSE 11.4 (x86_64): libsnmp25-32bit-5.6.1-4.29.1 libsnmp25-debuginfo-32bit-5.6.1-4.29.1 References: https://bugzilla.novell.com/670789 https://bugzilla.novell.com/707636 https://bugzilla.novell.com/712174 https://bugzilla.novell.com/715199

1 0

openSUSE-SU-2012:0428-1: moderate: update for libreoffice
by opensuse-security＠opensuse.org 29 Mar '12

29 Mar '12

openSUSE Security Update: update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0428-1 Rating: moderate References: #417818 #621739 #653688 #655408 #657909 #677811 #685123 #693238 #693388 #695479 #699334 #703032 #704274 #705949 #705956 #705977 #705985 #705991 #706138 #706792 #707157 #714787 #715094 #715104 #715115 #715543 #717290 #718227 #718971 #719887 #719989 #720443 #720948 #722045 #722644 #722918 #724087 #726152 #726174 #727504 #728559 #728603 #733864 #734734 #734781 #735533 #736495 #737190 #737921 #738113 #740032 #740117 #740453 #741043 #741182 #742178 #746996 #747471 #748198 #748548 Cross-References: CVE-2012-0037 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that solves one vulnerability and has 59 fixes is now available. Description: - updated to libreoffice-3.4.5.5 (SUSE 3.4.5-rc3): * extras * add SUSE color palette (fate#312645) * filters * crash when loading embedded elements (bnc#693238) * crash when importing an empty paragraph (rh#667082) * writer * do not use an invalidated iterator (fdo#46337) - updated to libreoffice-3.4.5.4 (SUSE 3.4.5-rc2) * calc * pie charts colors messed in XLS import (fdo#40320) * correctly import data point formats in data series (fdo#40320) * components * crash when parsing XML signatures (fdo#39657) * broken getDataArray (fdo#46165, fdo#38441, i#117010) * don't paint a frame around the list of edit boxes (fdo#42543) * inconsistent compression method for encrypted documents (bnc#653688) * filters * more on bentConnectors (bnc#736495) * wrong text color in smartArt (bnc#746996) * reading of w:textbox contents (bnc#693388) * textbox position and size DOCX import (fdo#45560) * RTF/DOCX import of transparent frames (bnc#695479) * consecutive frames in RTF/DOCX import (bnc#703032) * handling of frame properties in RTF import (bnc#417818) * force imported XLSX active tab to be shown (bnc#748198) * create TableManager for inside shapes (bnc#747471, bnc#693238) * textboxes import with OLE objects inside (bnc#747471, bnc#693238) * impress * do not create an empty slide when printing handouts (fdo#31966) * libs-core * default shortcut for .uno:SearchDialog should be Ctrl+H * crash using instances dialog of dataform navigator (fdo#44816) * libs-extern * disable problematic reading of external entities in raptor * libs-gui * correctly calculate leap year * use proper Indian Rupee currency symbol U+20B9 (rh#794679) * writer * field refreshing (fdo#39694) * more layout crashers (i#101776, fdo#39510) * textbox borders style and width in DOCX import (fdo#45560) * expand all text fields when setting properties (fdo#42073) - updated to libreoffice-3.4.5.3 (SUSE 3.4.5-rc1) * version 3.4.5.3, tag suse-3.4.5.3 (SUSE LO 3.4.5-rc1) * SmartArt import * custom shapes import * Oracle Java 1.7.0 detection * reading AES-encrypted ODF 1.2 documents as generated by LO 3.5 * base * iterator misuse (fdo #44040, bnc#742178) * calc * allow pasting to multiple ranges (bnc#715094) * correctly convert chart data ranges (bnc#727504) * definedName corruption for XLSX export (bnc#741182) * adjust/shrink the ranges while copying (bnc#677811) * extra graph data is displayed for label (bnc#717290) * getCellRangeByName failure for named range (bnc#738113) * graph in XLS file has dates displayed wrong (bnc#720443) * improve performance of large Excel documents (bnc#715104) * display page background color/image properly (bnc#722045) * pivot table output becoming empty on re-save (bnc#715543) * encode virtual paths to local volume correctly (bnc#719887) * avoid adjusting cell-anchored objects on other sheets (bnc#726152) * make sure to adjust the sheet index of drawing objects (bnc#733864) * make the data validation popup more reliable (fdo #36851, bnc#737190) * filters * table style (bnc#705991) * text rotation fixes (bnc#734734) * crash in PPTX import (bnc#706792) * read w:sdt* contents (bnc#705949) * connector shape fixes (bnc#719989) * legacy fragment import (bnc#699334) * non-working Excel macros (bnc#705977) * free drawn curves import (bnc#657909) * group shape transformations (bnc#621739) * extLst of drawings in diagrams import (bnc#655408) * flip properties of custom shapes import (bnc#705985) * line spacing is used from previous values (bnc#734734) * missing ooxml customshape->mso shape name entries (bnc#737921) * word doesn't break the numberings and prefers hiding them (bnc#707157) * impress * undo corruption (bnc#685123) * do not set duplicate master slide names (bnc#735533) * libs-core * handle copy and paste from ConsoleOne (bnc#704274) * VBA control events not working, broken eventattacher (bnc#718227) * "General Error" when double-click graphic in presentation (bnc#720948) * libs-extern-sys * upgrade graphite to 1.0.3 fix surrogate support * libs-gui * crash at exit (bnc#728603) * radial gradient offset (bnc#714787) * horizontal scrollbars with KDE oxygen style (bnc#722918) * rendering of metafiles embedded in EMF+ (updated) (bnc#705956) * postprocess * make the 3D transitions work again (bnc#728559) * ure * make Duden Korrektor 5 and 6 work * writer * frame selection (bnc#740117) * crash when editing index (bnc#726174) * order database properties (bnc#740032) * numbering levels in DOC import (bnc#715115) * image size issue in DOC import (bnc#718971) * pointless forward moving of a table (bnc#706138) * tabs set after the end margin in DOCX import (bnc#693238) * add hyperlinks by default in Table of Contents (bnc#705956) - updated to libreoffice-3.4.4.3 (SUSE 3.4.4-rc1 == final): * base * crash when inserting a constant in a query (fdo#38286) * calc * crash when modifying a named range * speed up range name lookup by index (bnc#715104) * recalculate matrix formula dimension correctly (fdo#39485) * mark all formula cells dirty when appending a new sheet (fdo#35965) * components * handling of SAFEARRAY(s) in olebridge (fdo#38441) * filters * auto fit text VIEWING too small in PPT import (fdo#41245) * impress * hang in slideshow (fdo#32861) * crash while dropping texture (fdo#38391) * libs-core * recognize .svg in ODF container (fdo#41995) * dictionaries lost after LibO upgrade (fdo#37195) * crash when "Find Record" button is clicked in Base (fdo#40701) * fix the drawing of dotted and dashed borders in Calc (fdo#37129) * VBA control events not working; broken eventattacher (bnc#718227) * libs-extern-sys * upgrade graphite to 1.0.3 to fix surrogate support * libs-gui * crash when changing screen resolution * let Qt call XInitThreads() (fdo#40298) * activation order crashes address database (fdo#41022) * drawing of dotted and dashed borders in Calc (fdo#37129) * translations * update translations * writer * leak in PDF export (i#116448) * crash when editing index (bnc#726174) * crash while processing incorrect range of pages (fdo#35513) * crash on closing document with footnotes (fdo#39510, lp#854626) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-183 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libreoffice-3.4.5.5-4.5.1 libreoffice-base-3.4.5.5-4.5.1 libreoffice-base-debuginfo-3.4.5.5-4.5.1 libreoffice-base-drivers-mysql-3.4.5.5-4.5.1 libreoffice-base-drivers-mysql-debuginfo-3.4.5.5-4.5.1 libreoffice-base-drivers-postgresql-3.4.5.5-4.5.1 libreoffice-base-drivers-postgresql-debuginfo-3.4.5.5-4.5.1 libreoffice-base-extensions-3.4.5.5-4.5.1 libreoffice-calc-3.4.5.5-4.5.1 libreoffice-calc-debuginfo-3.4.5.5-4.5.1 libreoffice-calc-extensions-3.4.5.5-4.5.1 libreoffice-debuginfo-3.4.5.5-4.5.1 libreoffice-debugsource-3.4.5.5-4.5.1 libreoffice-draw-3.4.5.5-4.5.1 libreoffice-draw-extensions-3.4.5.5-4.5.1 libreoffice-draw-extensions-debuginfo-3.4.5.5-4.5.1 libreoffice-filters-optional-3.4.5.5-4.5.1 libreoffice-filters-optional-debuginfo-3.4.5.5-4.5.1 libreoffice-gnome-3.4.5.5-4.5.1 libreoffice-gnome-debuginfo-3.4.5.5-4.5.1 libreoffice-icon-themes-prebuilt-3.4.5.5-4.5.1 libreoffice-impress-3.4.5.5-4.5.1 libreoffice-impress-debuginfo-3.4.5.5-4.5.1 libreoffice-impress-extensions-3.4.5.5-4.5.1 libreoffice-impress-extensions-debuginfo-3.4.5.5-4.5.1 libreoffice-kde-3.4.5.5-4.5.1 libreoffice-kde-debuginfo-3.4.5.5-4.5.1 libreoffice-kde4-3.4.5.5-4.5.1 libreoffice-kde4-debuginfo-3.4.5.5-4.5.1 libreoffice-l10n-prebuilt-3.4.5.5-4.5.1 libreoffice-mailmerge-3.4.5.5-4.5.1 libreoffice-math-3.4.5.5-4.5.1 libreoffice-math-debuginfo-3.4.5.5-4.5.1 libreoffice-officebean-3.4.5.5-4.5.1 libreoffice-officebean-debuginfo-3.4.5.5-4.5.1 libreoffice-pyuno-3.4.5.5-4.5.1 libreoffice-pyuno-debuginfo-3.4.5.5-4.5.1 libreoffice-sdk-3.4.5.5-4.5.1 libreoffice-sdk-debuginfo-3.4.5.5-4.5.1 libreoffice-sdk-doc-3.4.5.5-4.5.1 libreoffice-testtool-3.4.5.5-4.5.1 libreoffice-testtool-debuginfo-3.4.5.5-4.5.1 libreoffice-writer-3.4.5.5-4.5.1 libreoffice-writer-debuginfo-3.4.5.5-4.5.1 libreoffice-writer-extensions-3.4.5.5-4.5.1 - openSUSE 12.1 (noarch): libreoffice-branding-upstream-3.4.5.5-4.5.1 libreoffice-help-cs-3.4.5.5-4.5.1 libreoffice-help-da-3.4.5.5-4.5.1 libreoffice-help-de-3.4.5.5-4.5.1 libreoffice-help-en-GB-3.4.5.5-4.5.1 libreoffice-help-en-US-3.4.5.5-4.5.1 libreoffice-help-en-ZA-3.4.5.5-4.5.1 libreoffice-help-es-3.4.5.5-4.5.1 libreoffice-help-et-3.4.5.5-4.5.1 libreoffice-help-fr-3.4.5.5-4.5.1 libreoffice-help-gl-3.4.5.5-4.5.1 libreoffice-help-gu-IN-3.4.5.5-4.5.1 libreoffice-help-hi-IN-3.4.5.5-4.5.1 libreoffice-help-hu-3.4.5.5-4.5.1 libreoffice-help-it-3.4.5.5-4.5.1 libreoffice-help-ja-3.4.5.5-4.5.1 libreoffice-help-km-3.4.5.5-4.5.1 libreoffice-help-ko-3.4.5.5-4.5.1 libreoffice-help-nl-3.4.5.5-4.5.1 libreoffice-help-pl-3.4.5.5-4.5.1 libreoffice-help-pt-3.4.5.5-4.5.1 libreoffice-help-pt-BR-3.4.5.5-4.5.1 libreoffice-help-ru-3.4.5.5-4.5.1 libreoffice-help-sl-3.4.5.5-4.5.1 libreoffice-help-sv-3.4.5.5-4.5.1 libreoffice-help-zh-CN-3.4.5.5-4.5.1 libreoffice-help-zh-TW-3.4.5.5-4.5.1 libreoffice-icon-theme-crystal-3.4.5.5-2.4.1 libreoffice-icon-theme-galaxy-3.4.5.5-2.4.1 libreoffice-icon-theme-hicontrast-3.4.5.5-2.4.1 libreoffice-icon-theme-oxygen-3.4.5.5-2.4.1 libreoffice-icon-theme-tango-3.4.5.5-2.4.1 libreoffice-l10n-af-3.4.5.5-2.4.1 libreoffice-l10n-ar-3.4.5.5-2.4.1 libreoffice-l10n-be-BY-3.4.5.5-2.4.1 libreoffice-l10n-bg-3.4.5.5-2.4.1 libreoffice-l10n-br-3.4.5.5-2.4.1 libreoffice-l10n-ca-3.4.5.5-2.4.1 libreoffice-l10n-cs-3.4.5.5-2.4.1 libreoffice-l10n-cy-3.4.5.5-2.4.1 libreoffice-l10n-da-3.4.5.5-2.4.1 libreoffice-l10n-de-3.4.5.5-2.4.1 libreoffice-l10n-el-3.4.5.5-2.4.1 libreoffice-l10n-en-GB-3.4.5.5-2.4.1 libreoffice-l10n-en-ZA-3.4.5.5-2.4.1 libreoffice-l10n-es-3.4.5.5-2.4.1 libreoffice-l10n-et-3.4.5.5-2.4.1 libreoffice-l10n-fi-3.4.5.5-2.4.1 libreoffice-l10n-fr-3.4.5.5-2.4.1 libreoffice-l10n-ga-3.4.5.5-2.4.1 libreoffice-l10n-gl-3.4.5.5-2.4.1 libreoffice-l10n-gu-IN-3.4.5.5-2.4.1 libreoffice-l10n-he-3.4.5.5-2.4.1 libreoffice-l10n-hi-IN-3.4.5.5-2.4.1 libreoffice-l10n-hr-3.4.5.5-2.4.1 libreoffice-l10n-hu-3.4.5.5-2.4.1 libreoffice-l10n-it-3.4.5.5-2.4.1 libreoffice-l10n-ja-3.4.5.5-2.4.1 libreoffice-l10n-ka-3.4.5.5-2.4.1 libreoffice-l10n-km-3.4.5.5-2.4.1 libreoffice-l10n-ko-3.4.5.5-2.4.1 libreoffice-l10n-lt-3.4.5.5-2.4.1 libreoffice-l10n-mk-3.4.5.5-2.4.1 libreoffice-l10n-nb-3.4.5.5-2.4.1 libreoffice-l10n-nl-3.4.5.5-2.4.1 libreoffice-l10n-nn-3.4.5.5-2.4.1 libreoffice-l10n-nr-3.4.5.5-2.4.1 libreoffice-l10n-pa-IN-3.4.5.5-2.4.1 libreoffice-l10n-pl-3.4.5.5-2.4.1 libreoffice-l10n-pt-3.4.5.5-2.4.1 libreoffice-l10n-pt-BR-3.4.5.5-2.4.1 libreoffice-l10n-ru-3.4.5.5-2.4.1 libreoffice-l10n-rw-3.4.5.5-2.4.1 libreoffice-l10n-sh-3.4.5.5-2.4.1 libreoffice-l10n-sk-3.4.5.5-2.4.1 libreoffice-l10n-sl-3.4.5.5-2.4.1 libreoffice-l10n-sr-3.4.5.5-2.4.1 libreoffice-l10n-ss-3.4.5.5-2.4.1 libreoffice-l10n-st-3.4.5.5-2.4.1 libreoffice-l10n-sv-3.4.5.5-2.4.1 libreoffice-l10n-tg-3.4.5.5-2.4.1 libreoffice-l10n-th-3.4.5.5-2.4.1 libreoffice-l10n-tr-3.4.5.5-2.4.1 libreoffice-l10n-ts-3.4.5.5-2.4.1 libreoffice-l10n-uk-3.4.5.5-2.4.1 libreoffice-l10n-ve-3.4.5.5-2.4.1 libreoffice-l10n-vi-3.4.5.5-2.4.1 libreoffice-l10n-xh-3.4.5.5-2.4.1 libreoffice-l10n-zh-CN-3.4.5.5-2.4.1 libreoffice-l10n-zh-TW-3.4.5.5-2.4.1 libreoffice-l10n-zu-3.4.5.5-2.4.1 References: http://support.novell.com/security/cve/CVE-2012-0037.html https://bugzilla.novell.com/417818 https://bugzilla.novell.com/621739 https://bugzilla.novell.com/653688 https://bugzilla.novell.com/655408 https://bugzilla.novell.com/657909 https://bugzilla.novell.com/677811 https://bugzilla.novell.com/685123 https://bugzilla.novell.com/693238 https://bugzilla.novell.com/693388 https://bugzilla.novell.com/695479 https://bugzilla.novell.com/699334 https://bugzilla.novell.com/703032 https://bugzilla.novell.com/704274 https://bugzilla.novell.com/705949 https://bugzilla.novell.com/705956 https://bugzilla.novell.com/705977 https://bugzilla.novell.com/705985 https://bugzilla.novell.com/705991 https://bugzilla.novell.com/706138 https://bugzilla.novell.com/706792 https://bugzilla.novell.com/707157 https://bugzilla.novell.com/714787 https://bugzilla.novell.com/715094 https://bugzilla.novell.com/715104 https://bugzilla.novell.com/715115 https://bugzilla.novell.com/715543 https://bugzilla.novell.com/717290 https://bugzilla.novell.com/718227 https://bugzilla.novell.com/718971 https://bugzilla.novell.com/719887 https://bugzilla.novell.com/719989 https://bugzilla.novell.com/720443 https://bugzilla.novell.com/720948 https://bugzilla.novell.com/722045 https://bugzilla.novell.com/722644 https://bugzilla.novell.com/722918 https://bugzilla.novell.com/724087 https://bugzilla.novell.com/726152 https://bugzilla.novell.com/726174 https://bugzilla.novell.com/727504 https://bugzilla.novell.com/728559 https://bugzilla.novell.com/728603 https://bugzilla.novell.com/733864 https://bugzilla.novell.com/734734 https://bugzilla.novell.com/734781 https://bugzilla.novell.com/735533 https://bugzilla.novell.com/736495 https://bugzilla.novell.com/737190 https://bugzilla.novell.com/737921 https://bugzilla.novell.com/738113 https://bugzilla.novell.com/740032 https://bugzilla.novell.com/740117 https://bugzilla.novell.com/740453 https://bugzilla.novell.com/741043 https://bugzilla.novell.com/741182 https://bugzilla.novell.com/742178 https://bugzilla.novell.com/746996 https://bugzilla.novell.com/747471 https://bugzilla.novell.com/748198 https://bugzilla.novell.com/748548

1 0

openSUSE-SU-2012:0427-1: critical: flash-player update
by opensuse-security＠opensuse.org 29 Mar '12

29 Mar '12

openSUSE Security Update: flash-player update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0427-1 Rating: critical References: #754689 Cross-References: CVE-2012-0773 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Adobe Flash Player 11.1.102.63 fixes a memory corruption vulnerability in the NetStream class that could lead to code execution Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-184 - openSUSE 11.4: zypper in -t patch openSUSE-2012-184 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): flash-player-11.2.202.228-12.1 flash-player-gnome-11.2.202.228-12.1 flash-player-kde4-11.2.202.228-12.1 - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.228-6.1 flash-player-gnome-11.2.202.228-6.1 flash-player-kde4-11.2.202.228-6.1 References: http://support.novell.com/security/cve/CVE-2012-0773.html https://bugzilla.novell.com/754689

1 0

openSUSE-SU-2012:0426-1: important: update for php5
by opensuse-security＠opensuse.org 29 Mar '12

29 Mar '12

openSUSE Security Update: update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0426-1 Rating: important References: #728671 #733590 #736169 #738221 #741520 #741859 #742273 #742806 #743308 #744966 #746661 #749111 Cross-References: CVE-2011-1466 CVE-2011-4153 CVE-2011-4566 CVE-2011-4885 CVE-2012-0057 CVE-2012-0781 CVE-2012-0788 CVE-2012-0789 CVE-2012-0807 CVE-2012-0830 CVE-2012-0831 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that solves 11 vulnerabilities and has one errata is now available. Description: php5 security update Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-182 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): apache2-mod_php5-5.3.8-4.9.2 apache2-mod_php5-debuginfo-5.3.8-4.9.2 php5-5.3.8-4.9.2 php5-bcmath-5.3.8-4.9.2 php5-bcmath-debuginfo-5.3.8-4.9.2 php5-bz2-5.3.8-4.9.2 php5-bz2-debuginfo-5.3.8-4.9.2 php5-calendar-5.3.8-4.9.2 php5-calendar-debuginfo-5.3.8-4.9.2 php5-ctype-5.3.8-4.9.2 php5-ctype-debuginfo-5.3.8-4.9.2 php5-curl-5.3.8-4.9.2 php5-curl-debuginfo-5.3.8-4.9.2 php5-dba-5.3.8-4.9.2 php5-dba-debuginfo-5.3.8-4.9.2 php5-debuginfo-5.3.8-4.9.2 php5-debugsource-5.3.8-4.9.2 php5-devel-5.3.8-4.9.2 php5-dom-5.3.8-4.9.2 php5-dom-debuginfo-5.3.8-4.9.2 php5-enchant-5.3.8-4.9.2 php5-enchant-debuginfo-5.3.8-4.9.2 php5-exif-5.3.8-4.9.2 php5-exif-debuginfo-5.3.8-4.9.2 php5-fastcgi-5.3.8-4.9.2 php5-fastcgi-debuginfo-5.3.8-4.9.2 php5-fileinfo-5.3.8-4.9.2 php5-fileinfo-debuginfo-5.3.8-4.9.2 php5-fpm-5.3.8-4.9.2 php5-fpm-debuginfo-5.3.8-4.9.2 php5-ftp-5.3.8-4.9.2 php5-ftp-debuginfo-5.3.8-4.9.2 php5-gd-5.3.8-4.9.2 php5-gd-debuginfo-5.3.8-4.9.2 php5-gettext-5.3.8-4.9.2 php5-gettext-debuginfo-5.3.8-4.9.2 php5-gmp-5.3.8-4.9.2 php5-gmp-debuginfo-5.3.8-4.9.2 php5-iconv-5.3.8-4.9.2 php5-iconv-debuginfo-5.3.8-4.9.2 php5-imap-5.3.8-4.9.2 php5-imap-debuginfo-5.3.8-4.9.2 php5-intl-5.3.8-4.9.2 php5-intl-debuginfo-5.3.8-4.9.2 php5-json-5.3.8-4.9.2 php5-json-debuginfo-5.3.8-4.9.2 php5-ldap-5.3.8-4.9.2 php5-ldap-debuginfo-5.3.8-4.9.2 php5-mbstring-5.3.8-4.9.2 php5-mbstring-debuginfo-5.3.8-4.9.2 php5-mcrypt-5.3.8-4.9.2 php5-mcrypt-debuginfo-5.3.8-4.9.2 php5-mssql-5.3.8-4.9.2 php5-mssql-debuginfo-5.3.8-4.9.2 php5-mysql-5.3.8-4.9.2 php5-mysql-debuginfo-5.3.8-4.9.2 php5-odbc-5.3.8-4.9.2 php5-odbc-debuginfo-5.3.8-4.9.2 php5-openssl-5.3.8-4.9.2 php5-openssl-debuginfo-5.3.8-4.9.2 php5-pcntl-5.3.8-4.9.2 php5-pcntl-debuginfo-5.3.8-4.9.2 php5-pdo-5.3.8-4.9.2 php5-pdo-debuginfo-5.3.8-4.9.2 php5-pgsql-5.3.8-4.9.2 php5-pgsql-debuginfo-5.3.8-4.9.2 php5-phar-5.3.8-4.9.2 php5-phar-debuginfo-5.3.8-4.9.2 php5-posix-5.3.8-4.9.2 php5-posix-debuginfo-5.3.8-4.9.2 php5-pspell-5.3.8-4.9.2 php5-pspell-debuginfo-5.3.8-4.9.2 php5-readline-5.3.8-4.9.2 php5-readline-debuginfo-5.3.8-4.9.2 php5-shmop-5.3.8-4.9.2 php5-shmop-debuginfo-5.3.8-4.9.2 php5-snmp-5.3.8-4.9.2 php5-snmp-debuginfo-5.3.8-4.9.2 php5-soap-5.3.8-4.9.2 php5-soap-debuginfo-5.3.8-4.9.2 php5-sockets-5.3.8-4.9.2 php5-sockets-debuginfo-5.3.8-4.9.2 php5-sqlite-5.3.8-4.9.2 php5-sqlite-debuginfo-5.3.8-4.9.2 php5-suhosin-5.3.8-4.9.2 php5-suhosin-debuginfo-5.3.8-4.9.2 php5-sysvmsg-5.3.8-4.9.2 php5-sysvmsg-debuginfo-5.3.8-4.9.2 php5-sysvsem-5.3.8-4.9.2 php5-sysvsem-debuginfo-5.3.8-4.9.2 php5-sysvshm-5.3.8-4.9.2 php5-sysvshm-debuginfo-5.3.8-4.9.2 php5-tidy-5.3.8-4.9.2 php5-tidy-debuginfo-5.3.8-4.9.2 php5-tokenizer-5.3.8-4.9.2 php5-tokenizer-debuginfo-5.3.8-4.9.2 php5-wddx-5.3.8-4.9.2 php5-wddx-debuginfo-5.3.8-4.9.2 php5-xmlreader-5.3.8-4.9.2 php5-xmlreader-debuginfo-5.3.8-4.9.2 php5-xmlrpc-5.3.8-4.9.2 php5-xmlrpc-debuginfo-5.3.8-4.9.2 php5-xmlwriter-5.3.8-4.9.2 php5-xmlwriter-debuginfo-5.3.8-4.9.2 php5-xsl-5.3.8-4.9.2 php5-xsl-debuginfo-5.3.8-4.9.2 php5-zip-5.3.8-4.9.2 php5-zip-debuginfo-5.3.8-4.9.2 php5-zlib-5.3.8-4.9.2 php5-zlib-debuginfo-5.3.8-4.9.2 - openSUSE 12.1 (noarch): php5-pear-5.3.8-4.9.2 References: http://support.novell.com/security/cve/CVE-2011-1466.html http://support.novell.com/security/cve/CVE-2011-4153.html http://support.novell.com/security/cve/CVE-2011-4566.html http://support.novell.com/security/cve/CVE-2011-4885.html http://support.novell.com/security/cve/CVE-2012-0057.html http://support.novell.com/security/cve/CVE-2012-0781.html http://support.novell.com/security/cve/CVE-2012-0788.html http://support.novell.com/security/cve/CVE-2012-0789.html http://support.novell.com/security/cve/CVE-2012-0807.html http://support.novell.com/security/cve/CVE-2012-0830.html http://support.novell.com/security/cve/CVE-2012-0831.html https://bugzilla.novell.com/728671 https://bugzilla.novell.com/733590 https://bugzilla.novell.com/736169 https://bugzilla.novell.com/738221 https://bugzilla.novell.com/741520 https://bugzilla.novell.com/741859 https://bugzilla.novell.com/742273 https://bugzilla.novell.com/742806 https://bugzilla.novell.com/743308 https://bugzilla.novell.com/744966 https://bugzilla.novell.com/746661 https://bugzilla.novell.com/749111

1 0

openSUSE-SU-2012:0423-1: moderate: update for expat
by opensuse-security＠opensuse.org 28 Mar '12

28 Mar '12

openSUSE Security Update: update for expat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0423-1 Rating: moderate References: #750914 #751464 #751465 Cross-References: CVE-2012-0876 CVE-2012-1147 CVE-2012-1148 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: expat was prone to a hash collision attack that could lead to exessive CPU usage and resource leaks Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-181 - openSUSE 11.4: zypper in -t patch openSUSE-2012-181 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): expat-2.0.1-109.4.1 expat-debuginfo-2.0.1-109.4.1 expat-debugsource-2.0.1-109.4.1 libexpat-devel-2.0.1-109.4.1 libexpat1-2.0.1-109.4.1 libexpat1-debuginfo-2.0.1-109.4.1 - openSUSE 12.1 (x86_64): expat-debuginfo-32bit-2.0.1-109.4.1 libexpat-devel-32bit-2.0.1-109.4.1 libexpat1-32bit-2.0.1-109.4.1 libexpat1-debuginfo-32bit-2.0.1-109.4.1 - openSUSE 11.4 (i586 x86_64): expat-2.0.1-102.105.1 expat-debuginfo-2.0.1-102.105.1 expat-debugsource-2.0.1-102.105.1 libexpat-devel-2.0.1-102.105.1 libexpat1-2.0.1-102.105.1 libexpat1-debuginfo-2.0.1-102.105.1 - openSUSE 11.4 (x86_64): expat-debuginfo-32bit-2.0.1-102.105.1 libexpat-devel-32bit-2.0.1-102.105.1 libexpat1-32bit-2.0.1-102.105.1 libexpat1-debuginfo-32bit-2.0.1-102.105.1 References: http://support.novell.com/security/cve/CVE-2012-0876.html http://support.novell.com/security/cve/CVE-2012-1147.html http://support.novell.com/security/cve/CVE-2012-1148.html https://bugzilla.novell.com/750914 https://bugzilla.novell.com/751464 https://bugzilla.novell.com/751465

1 0

openSUSE-SU-2012:0422-1: update for perl-DBD-Pg
by opensuse-security＠opensuse.org 28 Mar '12

28 Mar '12

openSUSE Security Update: update for perl-DBD-Pg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0422-1 Rating: low References: #751500 Cross-References: CVE-2012-1151 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: perl-DBD-Pg was prone to format string errors which could crash applications Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-180 - openSUSE 11.4: zypper in -t patch openSUSE-2012-180 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): perl-DBD-Pg-2.18.0-3.4.1 perl-DBD-Pg-debuginfo-2.18.0-3.4.1 perl-DBD-Pg-debugsource-2.18.0-3.4.1 - openSUSE 11.4 (i586 x86_64): perl-DBD-Pg-2.17.2-8.1 perl-DBD-Pg-debuginfo-2.17.2-8.1 perl-DBD-Pg-debugsource-2.17.2-8.1 References: http://support.novell.com/security/cve/CVE-2012-1151.html https://bugzilla.novell.com/751500

1 0

openSUSE-SU-2012:0421-1: moderate: update for libxml2
by opensuse-security＠opensuse.org 28 Mar '12

28 Mar '12

openSUSE Security Update: update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0421-1 Rating: moderate References: #748561 Cross-References: CVE-2012-0841 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - add fix for hash table collisions CVE-2012-0841 (bnc#748561) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-179 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libxml2-2.7.8+git20110708-3.5.1 libxml2-debuginfo-2.7.8+git20110708-3.5.1 libxml2-debugsource-2.7.8+git20110708-3.5.1 libxml2-devel-2.7.8+git20110708-3.5.1 - openSUSE 12.1 (x86_64): libxml2-32bit-2.7.8+git20110708-3.5.1 libxml2-debuginfo-32bit-2.7.8+git20110708-3.5.1 libxml2-devel-32bit-2.7.8+git20110708-3.5.1 - openSUSE 12.1 (noarch): libxml2-doc-2.7.8+git20110708-3.5.1 References: http://support.novell.com/security/cve/CVE-2012-0841.html https://bugzilla.novell.com/748561

1 0

openSUSE-RU-2012:0420-1: - Update resolves bnc#752031
by maintenance＠opensuse.org 28 Mar '12

28 Mar '12

openSUSE Recommended Update: - Update resolves bnc#752031 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0420-1 Rating: low References: #752031 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: - Update resolves bnc#752031 - Update the tarball to revision 3032, which seems to be what all other distributions are using; this is needed by some apps like smuxi. Note that it's still version 0.4.0 somehow, since there was no official release. - Add notify-sharp-fix-app-name-derivation.patch: fixes an issue with notification naming with banshee. Taken from Debian. - Replace notify-sharp-use-dbus-sharp.patch with patch from https://github.com/hyperair/notify-sharp. - Add autoconf and automake BuildRequires, needed for the autoreconf call. - Add notify-sharp-use-dbus-sharp.patch - uses dbus-sharp instead of deprecated ndesk-dbus. - Spec changes: + Add devel sub-package. + Add pkgconfig() calls for >= 1130. + Package is noarch, installs on %{_libexecdir} and .pc file goes to %{_datadir} (compliant with other mono packages). + Removed %clean section (not required) anymore. + Minor cleanups. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-178 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): notify-sharp-0.4.0.r3032-220.4.1 notify-sharp-devel-0.4.0.r3032-220.4.1 References: https://bugzilla.novell.com/752031

1 0