March 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2012:0370-1: moderate: update for csound
by opensuse-security＠opensuse.org 14 Mar '12

14 Mar '12

openSUSE Security Update: update for csound ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0370-1 Rating: moderate References: #749073 Cross-References: CVE-2012-0270 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: specially crafted hetro and pvoc files could cause buffer overflows in csound Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-162 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): csound-5.06.0-142.3.2 References: http://support.novell.com/security/cve/CVE-2012-0270.html https://bugzilla.novell.com/749073

1 0

openSUSE-SU-2012:0369-1: moderate: update for gnash
by opensuse-security＠opensuse.org 14 Mar '12

14 Mar '12

openSUSE Security Update: update for gnash ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0369-1 Rating: moderate References: #732324 Cross-References: CVE-2011-4328 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: gnash used predictable and world readable temporary file names to store HTTP cookies Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-164 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): gnash-0.8.8-9.3.1 gnash-debuginfo-0.8.8-9.3.1 gnash-debugsource-0.8.8-9.3.1 gnash-devel-0.8.8-9.3.1 References: http://support.novell.com/security/cve/CVE-2011-4328.html https://bugzilla.novell.com/732324

1 0

openSUSE-RU-2012:0362-1: moderate: sysconfig: collective update
by maintenance＠opensuse.org 13 Mar '12

13 Mar '12

openSUSE Recommended Update: sysconfig: collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0362-1 Rating: moderate References: #737636 #741453 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for sysconfig: - 737636: Enabled to always enable the -o boot under systemd, improved to use PID in log messages and extradebug outputs - 741453: Filter out labeled ipv4 addresses in get_ipv4address used to fetch the 1st address from the TUNNEL_DEVICE interface. Allows to configure a label for each address that should be skipped. - Updated ifcfg-tunnel.5 man page. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-158 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): sysconfig-0.75.4-2.7.1 sysconfig-debuginfo-0.75.4-2.7.1 sysconfig-debugsource-0.75.4-2.7.1 References: https://bugzilla.novell.com/737636 https://bugzilla.novell.com/741453

1 0

openSUSE-RU-2012:0361-1: moderate: nemiver: update to 0.9.1
by maintenance＠opensuse.org 13 Mar '12

13 Mar '12

openSUSE Recommended Update: nemiver: update to 0.9.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0361-1 Rating: moderate References: #750099 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for nemiver: - Update to version 0.9.1: + Handle deprecated functions on glibmm-2.4 2.30.0 and glib-2.0 2.31.0 + Bye bye gziped tarballs, welcome xz + Source code tab label completely ellipsized [bgo#664385] + Allow shrinking of the memory view widget + Relax the fixed minimum sizes preventing shrinking [bnc#750099] + Allow selecting current frame twice consecutively + Add cmd line option to choose the gdb binary [bgo#646698] + Handle plural form of a string [bgo#659462] + Use local time instead of UTC time + Updated translations. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-161 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): nemiver-0.9.1-3.3.1 nemiver-debuginfo-0.9.1-3.3.1 nemiver-debugsource-0.9.1-3.3.1 nemiver-devel-0.9.1-3.3.1 - openSUSE 12.1 (noarch): nemiver-lang-0.9.1-3.3.1 References: https://bugzilla.novell.com/750099

1 0

openSUSE-RU-2012:0360-1: moderate: glibc: fix clock_gettime call
by maintenance＠opensuse.org 13 Mar '12

13 Mar '12

openSUSE Recommended Update: glibc: fix clock_gettime call ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0360-1 Rating: moderate References: #747768 #749126 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update fixes the following issues in glibc: - 747768: format string protection bypass via "nargs" integer overflow - 749126: Fix clock_gettime call Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-160 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): glibc-2.14.1-14.25.1 glibc-debuginfo-2.14.1-14.25.1 glibc-debugsource-2.14.1-14.25.1 glibc-devel-2.14.1-14.25.1 glibc-devel-debuginfo-2.14.1-14.25.1 glibc-devel-static-2.14.1-14.25.1 glibc-locale-2.14.1-14.25.1 glibc-locale-debuginfo-2.14.1-14.25.1 glibc-profile-2.14.1-14.25.1 glibc-utils-2.14.1-14.25.1 glibc-utils-debuginfo-2.14.1-14.25.1 nscd-2.14.1-14.25.1 nscd-debuginfo-2.14.1-14.25.1 - openSUSE 12.1 (noarch): glibc-html-2.14.1-14.25.1 glibc-i18ndata-2.14.1-14.25.1 glibc-info-2.14.1-14.25.1 - openSUSE 12.1 (i586): glibc-obsolete-2.14.1-14.25.1 glibc-obsolete-debuginfo-2.14.1-14.25.1 References: http://support.novell.com/security/cve/CVE-2012-0864.html https://bugzilla.novell.com/747768 https://bugzilla.novell.com/749126

1 0

openSUSE-RU-2012:0359-1: moderate: shorewall: add /sbin/shorewall-init
by maintenance＠opensuse.org 13 Mar '12

13 Mar '12

openSUSE Recommended Update: shorewall: add /sbin/shorewall-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0359-1 Rating: moderate References: #749724 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for shorewall: - 749724: Add /sbin/shorewall-init Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-159 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): shorewall-4.4.24.1-2.3.1 shorewall-docs-4.4.24.1-2.3.1 shorewall-init-4.4.24.1-2.3.1 shorewall-lite-4.4.24.1-2.3.1 shorewall6-4.4.24.1-2.3.1 shorewall6-lite-4.4.24.1-2.3.1 References: https://bugzilla.novell.com/749724

1 0

openSUSE-RU-2012:0358-1: moderate: kdebase3: use updower instead of hal for hibernate and suspend
by maintenance＠opensuse.org 13 Mar '12

13 Mar '12

openSUSE Recommended Update: kdebase3: use updower instead of hal for hibernate and suspend ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0358-1 Rating: moderate References: #749028 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for kdebase3: - 749028: use upower instead of hal for hibernate and suspend - add a konq patch from KDE3 svn - remove qt3-devel-doc dependency - remove openmotif dependency - do not provide sysguardd for kde4 - build fileshareset with PIE option - add small patch from Slackware Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-156 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): fileshareset-2.0-24.5.1 fileshareset-debuginfo-2.0-24.5.1 kdebase3-3.5.10.1-24.5.1 kdebase3-apps-3.5.10.1-24.5.1 kdebase3-apps-debuginfo-3.5.10.1-24.5.1 kdebase3-debuginfo-3.5.10.1-24.5.1 kdebase3-debugsource-3.5.10.1-24.5.1 kdebase3-devel-3.5.10.1-24.5.1 kdebase3-extra-3.5.10.1-24.5.1 kdebase3-extra-debuginfo-3.5.10.1-24.5.1 kdebase3-kdm-3.5.10.1-24.5.1 kdebase3-kdm-debuginfo-3.5.10.1-24.5.1 kdebase3-ksysguardd-3.5.10.1-24.5.1 kdebase3-ksysguardd-debuginfo-3.5.10.1-24.5.1 kdebase3-nsplugin-3.5.10.1-24.5.1 kdebase3-nsplugin-debuginfo-3.5.10.1-24.5.1 kdebase3-runtime-3.5.10.1-24.5.1 kdebase3-runtime-debuginfo-3.5.10.1-24.5.1 kdebase3-samba-3.5.10.1-24.5.1 kdebase3-samba-debuginfo-3.5.10.1-24.5.1 kdebase3-session-3.5.10.1-24.5.1 kdebase3-workspace-3.5.10.1-24.5.1 kdebase3-workspace-debuginfo-3.5.10.1-24.5.1 misc-console-font-3.5.10.1-24.5.1 - openSUSE 12.1 (x86_64): kdebase3-32bit-3.5.10.1-24.5.1 kdebase3-debuginfo-32bit-3.5.10.1-24.5.1 kdebase3-runtime-32bit-3.5.10.1-24.5.1 kdebase3-runtime-debuginfo-32bit-3.5.10.1-24.5.1 References: https://bugzilla.novell.com/749028

1 0

openSUSE-RU-2012:0357-1: moderate: update for python-virtinst, virt-manager
by maintenance＠opensuse.org 13 Mar '12

13 Mar '12

openSUSE Recommended Update: update for python-virtinst, virt-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0357-1 Rating: moderate References: #732617 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Changes in virt-manager: - 732617 - virt-manager does not start when python-virtinst is installed - Remove the virt-install sources from the virt-manager package. The virt-install applications are now found in python-virtinst. - Update to virt-manager 0.9.1 * Support for adding usb redirection devices (Marc-André Lureau) * Option to switch usb controller to support usb2.0 (Marc-André Lureau) * Option to specify machine type for non-x86 guests (Li Zhang) * Support for filesystem device type and write policy (Deepak C Shetty) * Many bug fixes! - Update to virtinst 0.600.1 * virt-install: --redir option for usb redirection (Marc-André Lureau) * virt-install: Advanced --controller support for usb2 (Marc-André Lureau) * Many bug fixes and minor improvments. Changes in python-virtinst: - Update to virtinst 0.600.1 * virt-install: --redir option for usb redirection (Marc-André Lureau) * virt-install: Advanced --controller support for usb2 (Marc-André Lureau) * Many bug fixes and minor improvments. - Include patches from the virtinst contained in the virt-manager package. - Update to upstream git version for various bug fixes virtinst: 15d4901a3c8b855838931976e023158b8cda1c37 - Compatibility update to virtinst 0.600.0 for virt-manager in os12.1 * virt-install: Various improvements to enable LXC/container guests: * New --filesystem option for <filesystem> devices * New --init option for container <init> path * New --container option (similar to --paravirt or --hvm) * virt-install: Make --location remotely (with latest libvirt) * virt-install: New --smartcard option for <smartcard> devices * (Marc-André Lureau) * virt-install: New --numatune option for building guest <numatune> XML * virt-install: option to set --disk error_policy= * virt-install: option to set --disk serial= Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-157 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): python-virtinst-0.600.1-4.3.1 virt-manager-0.9.1-5.6.1 References: https://bugzilla.novell.com/732617

1 0

openSUSE-SU-2012:0354-1: moderate: update for lightdm
by opensuse-security＠opensuse.org 12 Mar '12

12 Mar '12

openSUSE Security Update: update for lightdm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0354-1 Rating: moderate References: #745339 Cross-References: CVE-2012-1111 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - update to version 1.0.9 - stop file descriptors leaking into the session processes (bnc#745339, lp#927060, CVE-2012-1111) - fix compilation against gthread - change session directory once user permissions are set so it works on NFS filesystems that don't allow root to access files - fix object cleanup on exit - fix lightdm --debug not working on newer GLib - drop privileges when reading ~/.dmrc (CVE-2011-3153) - fix crash calling lightdm_get_layout - drop lightdm-CVE-2011-3153.patch which has been included upstream Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-154 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): liblightdm-gobject-1-0-1.0.9-8.1 liblightdm-gobject-1-0-debuginfo-1.0.9-8.1 liblightdm-qt-1-0-1.0.9-8.1 liblightdm-qt-1-0-debuginfo-1.0.9-8.1 lightdm-1.0.9-8.1 lightdm-debuginfo-1.0.9-8.1 lightdm-debugsource-1.0.9-8.1 lightdm-gobject-devel-1.0.9-8.1 lightdm-gtk-greeter-1.0.9-8.1 lightdm-gtk-greeter-debuginfo-1.0.9-8.1 lightdm-qt-devel-1.0.9-8.1 lightdm-qt-greeter-1.0.9-8.1 lightdm-qt-greeter-debuginfo-1.0.9-8.1 - openSUSE 12.1 (noarch): lightdm-gtk-greeter-branding-openSUSE-12.1-4.4.1 lightdm-gtk-greeter-branding-upstream-1.0.9-8.1 lightdm-lang-1.0.9-8.1 References: http://support.novell.com/security/cve/CVE-2012-1111.html https://bugzilla.novell.com/745339

1 0

openSUSE-RU-2012:0353-1: moderate: timezone: update to 2012b
by maintenance＠opensuse.org 12 Mar '12

12 Mar '12

openSUSE Recommended Update: timezone: update to 2012b ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0353-1 Rating: moderate References: #748550 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides 2012b which provides the following important changes: * Cuba has delayed start of DST by 3 weeks (now starts April 1 rather than March 11) * Chile 2011/2012 and 2012/2013 summer time date adjustments. * Falkland Islands onto permanent summer time (we're assuming for the foreseeable future, though 2012 is all we're fairly certain of.) * Armenia has abolished Summer Time. * Tokelau jumped the International Date Line back last December (just the same as their near neighbour, Samoa). * America/Creston is a new zone for a small area of British Columbia * There will be a leapsecod 2012-06-30 23:59:60 UTC. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-155 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): timezone-2012b-1.3.1 timezone-debuginfo-2012b-1.3.1 timezone-debugsource-2012b-1.3.1 - openSUSE 12.1 (noarch): timezone-java-2012b-1.3.1 References: https://bugzilla.novell.com/748550

1 0

openSUSE-SU-2012:0352-1: update for icecast
by opensuse-security＠opensuse.org 10 Mar '12

10 Mar '12

openSUSE Security Update: update for icecast ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0352-1 Rating: low References: #737255 Cross-References: CVE-2011-4612 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Icecast didn't strip newlines from log entries, therefore allowing uses to forge log entries. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-153 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): icecast-2.3.2-65.3.1 icecast-debuginfo-2.3.2-65.3.1 icecast-debugsource-2.3.2-65.3.1 References: http://support.novell.com/security/cve/CVE-2011-4612.html https://bugzilla.novell.com/737255

1 0

openSUSE-RU-2012:0351-1: moderate: pm-utils: fix script 50rcnetwork error and update savestate/restorestate functions
by maintenance＠opensuse.org 10 Mar '12

10 Mar '12

openSUSE Recommended Update: pm-utils: fix script 50rcnetwork error and update savestate/restorestate functions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0351-1 Rating: moderate References: #749031 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for pm-utils: - 749031: fix script 50rcnetwork error and update savestate/restorestate functions - Format pm-utils-1.4.1-vtXX-upower-battery-AC-adapter.patch to standard, use pushd/popd in spec. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-152 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): pm-utils-1.4.1-12.6.1 pm-utils-debuginfo-1.4.1-12.6.1 pm-utils-debugsource-1.4.1-12.6.1 pm-utils-ndiswrapper-1.4.1-12.6.1 References: https://bugzilla.novell.com/749031

1 0

openSUSE-RU-2012:0350-1: moderate: update for kadu
by maintenance＠opensuse.org 10 Mar '12

10 Mar '12

openSUSE Recommended Update: update for kadu ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0350-1 Rating: moderate References: #749036 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Specially crafted messages could inject Javascript code Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-150 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): kadu-0.10.1-2.5.1 kadu-anonymous_check-0.10.1-2.5.1 kadu-anonymous_check-debuginfo-0.10.1-2.5.1 kadu-debuginfo-0.10.1-2.5.1 kadu-debugsource-0.10.1-2.5.1 kadu-devel-0.10.1-2.5.1 kadu-globalhotkeys-0.10.1-2.5.1 kadu-globalhotkeys-debuginfo-0.10.1-2.5.1 kadu-import_history-0.10.1-2.5.1 kadu-import_history-debuginfo-0.10.1-2.5.1 kadu-lednotify-0.10.1-2.5.1 kadu-lednotify-debuginfo-0.10.1-2.5.1 kadu-messagessplitter-0.10.1-2.5.1 kadu-messagessplitter-debuginfo-0.10.1-2.5.1 kadu-mimetex-0.10.1-2.5.1 kadu-mimetex-debuginfo-0.10.1-2.5.1 kadu-networkping-0.10.1-2.5.1 kadu-networkping-debuginfo-0.10.1-2.5.1 kadu-nextinfo-0.10.1-2.5.1 kadu-nextinfo-debuginfo-0.10.1-2.5.1 kadu-panelkadu-0.10.1-2.5.1 kadu-panelkadu-debuginfo-0.10.1-2.5.1 kadu-senthistory-0.10.1-2.5.1 kadu-senthistory-debuginfo-0.10.1-2.5.1 kadu-sound-bns-0.10.1-2.5.1 kadu-sound-drums-0.10.1-2.5.1 kadu-sound-florkus-0.10.1-2.5.1 kadu-sound-michalsrodek-0.10.1-2.5.1 kadu-sound-percussion-0.10.1-2.5.1 kadu-sound-ultr-0.10.1-2.5.1 References: http://support.novell.com/security/cve/CVE-2012-1410.html https://bugzilla.novell.com/749036

1 0

openSUSE-SU-2012:0349-1: moderate: update for flash-player
by opensuse-security＠opensuse.org 10 Mar '12

10 Mar '12

openSUSE Security Update: update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0349-1 Rating: moderate References: #750614 Cross-References: CVE-2012-0768 CVE-2012-0769 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: flash-player 11.1.102.63 fixes two security issues: - memory corruption vulnerability in Matrix3D could lead to code executionn (CVE-2012-0768) - integer errors that could lead to information disclosure (CVE-2012-0769) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-151 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): flash-player-11.1.102.63-9.1 flash-player-gnome-11.1.102.63-9.1 flash-player-kde4-11.1.102.63-9.1 References: http://support.novell.com/security/cve/CVE-2012-0768.html http://support.novell.com/security/cve/CVE-2012-0769.html https://bugzilla.novell.com/750614

1 0

openSUSE-SU-2012:0347-1: Xen: Collective 2012/02 Update
by opensuse-security＠opensuse.org 09 Mar '12

09 Mar '12

openSUSE Security Update: Xen: Collective 2012/02 Update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0347-1 Rating: low References: #649209 #683580 #691256 #694863 #701686 #704160 #706106 #706574 #712051 #712823 #714183 #715655 #716695 #725169 #726332 #727515 #728681 #732782 #734826 #736824 #739585 #740165 Cross-References: CVE-2012-0029 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves one vulnerability and has 21 fixes is now available. Description: This collective update 2012/02 for Xen provides fixes for the following reports: Xen === - 649209: Fix Xen live migrations being slow - 683580: Fix hangs during boot up after the message "Enabled directed EOI with ioapic_ack_old on! - 691256: unable to open a connection to the XEN Hypervisor - 694863: Fix kexec fails in xen - 701686: kdump hangs on megaraid_sas driver - 704160: crm resource migrate fails with xen machines - 706106: Fix Inconsistent reporting of VM names during migration - 706574: xm console DomUName hang after "xm save/restore" of PVM on the latest Xen - 712051: Fix xen: IOMMU fault livelock - 712823: Xen guest does not start reliable when rebooted - 714183: Since last update Xen VM's don't start if the name contains dots (as in 'example.mydomain.com') - 715655: No support for performance counters for Westmere E7-8837 and SandyBridge i5-2500 - 716695: dom-us using tap devices will not start - 725169: xen-4.0.2_21511_03-0.5.3: bootup hangs - 726332: Xen changeset 21326 introduces considerable performance hit - 727515: Fragmented packets hang network boot of HVM guest - 732782: xm create hangs when maxmen value is enclosed in "quotes" - 734826: xm rename doesn't work anymore - 736824: Microcode patches for AMD's 15h processors panic the system - 739585: Xen block-attach fails after repeated attach/detach - 740165: Fix heap overflow in e1000 device emulation libvirt ======= - 728681: libvirtd litters syslog with "interfaceGetXMLDesc:355 : internal error" messages when using virt-manager virt-utils ========== - Add Support for creating images that can be run on Microsoft Hyper-V host (Fix vpc file format. Add support for fixed disks) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libvirt-5774 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libvirt-0.8.8-0.14.1 libvirt-client-0.8.8-0.14.1 libvirt-devel-0.8.8-0.14.1 libvirt-doc-0.8.8-0.14.1 libvirt-python-0.8.8-0.14.1 virt-utils-1.1.5-1.4.1 xen-4.0.3_01-0.2.1 xen-devel-4.0.3_01-0.2.1 xen-doc-html-4.0.3_01-0.2.1 xen-doc-pdf-4.0.3_01-0.2.1 xen-kmp-default-4.0.3_01_k2.6.37.6_0.11-0.2.1 xen-kmp-desktop-4.0.3_01_k2.6.37.6_0.11-0.2.1 xen-libs-4.0.3_01-0.2.1 xen-tools-4.0.3_01-0.2.1 xen-tools-domU-4.0.3_01-0.2.1 - openSUSE 11.4 (i586): xen-kmp-pae-4.0.3_01_k2.6.37.6_0.11-0.2.1 References: http://support.novell.com/security/cve/CVE-2012-0029.html https://bugzilla.novell.com/649209 https://bugzilla.novell.com/683580 https://bugzilla.novell.com/691256 https://bugzilla.novell.com/694863 https://bugzilla.novell.com/701686 https://bugzilla.novell.com/704160 https://bugzilla.novell.com/706106 https://bugzilla.novell.com/706574 https://bugzilla.novell.com/712051 https://bugzilla.novell.com/712823 https://bugzilla.novell.com/714183 https://bugzilla.novell.com/715655 https://bugzilla.novell.com/716695 https://bugzilla.novell.com/725169 https://bugzilla.novell.com/726332 https://bugzilla.novell.com/727515 https://bugzilla.novell.com/728681 https://bugzilla.novell.com/732782 https://bugzilla.novell.com/734826 https://bugzilla.novell.com/736824 https://bugzilla.novell.com/739585 https://bugzilla.novell.com/740165

1 0

openSUSE-RU-2012:0346-1: dhcp: fixed dhcp-client lease parsing problems
by maintenance＠opensuse.org 09 Mar '12

09 Mar '12

openSUSE Recommended Update: dhcp: fixed dhcp-client lease parsing problems ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0346-1 Rating: low References: #739696 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update fixes the following issue for dhcp: - 739696: dhcp-client lease parsing problems Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch dhcp-5685 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 4.2.1]: dhcp-4.2.1-0.13.1 dhcp-client-4.2.1-0.13.1 dhcp-devel-4.2.1-0.13.1 dhcp-doc-4.2.1-0.13.1 dhcp-relay-4.2.1-0.13.1 dhcp-server-4.2.1-0.13.1 References: https://bugzilla.novell.com/739696

1 0

openSUSE-SU-2012:0345-1: moderate: usbmuxd: fixed a heap based buffer overflow
by opensuse-security＠opensuse.org 09 Mar '12

09 Mar '12

openSUSE Security Update: usbmuxd: fixed a heap based buffer overflow ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0345-1 Rating: moderate References: #742546 Cross-References: CVE-2012-0065 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: This update of usbmuxd fixes a heap-based buffer overflow which could be triggered via an overly long "SerialNumber" field (CVE-2012-0065). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch iproxy-5868 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.0.7]: iproxy-1.0.7-3.5.1 libusbmuxd-devel-1.0.7-3.5.1 libusbmuxd1-1.0.7-3.5.1 usbmuxd-1.0.7-3.5.1 References: http://support.novell.com/security/cve/CVE-2012-0065.html https://bugzilla.novell.com/742546

1 0

openSUSE-SU-2012:0344-1: gnutls: Fixed potential information leak in DTLS implementation
by opensuse-security＠opensuse.org 09 Mar '12

09 Mar '12

openSUSE Security Update: gnutls: Fixed potential information leak in DTLS implementation ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0344-1 Rating: low References: #739898 Cross-References: CVE-2012-0390 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of GnuTLS fixes a vulnerability in the DTLS implementation which could allow remote attackers to recover partial plaintext via a timing side-channel attack. (CVE-2012-0390). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gnutls-5827 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): gnutls-2.8.6-5.8.1 libgnutls-devel-2.8.6-5.8.1 libgnutls-extra-devel-2.8.6-5.8.1 libgnutls-extra26-2.8.6-5.8.1 libgnutls26-2.8.6-5.8.1 - openSUSE 11.4 (x86_64): libgnutls26-32bit-2.8.6-5.8.1 References: http://support.novell.com/security/cve/CVE-2012-0390.html https://bugzilla.novell.com/739898

1 0

openSUSE-SU-2012:0343-1: libxslt: fixed Out-of-bounds read when parsing certain patterns
by opensuse-security＠opensuse.org 09 Mar '12

09 Mar '12

openSUSE Security Update: libxslt: fixed Out-of-bounds read when parsing certain patterns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0343-1 Rating: low References: #746039 Cross-References: CVE-2011-3970 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: libxslt was prone to an out-of-bounds read flaw when parsing certain patterns (CVE-2011-3970). This could lead to a Denial of Service. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libxslt-5811 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libxslt-1.1.26-3.4.1 libxslt-devel-1.1.26-3.4.1 - openSUSE 11.4 (x86_64): libxslt-32bit-1.1.26-3.4.1 libxslt-devel-32bit-1.1.26-3.4.1 References: http://support.novell.com/security/cve/CVE-2011-3970.html https://bugzilla.novell.com/746039

1 0

openSUSE-SU-2012:0342-1: moderate: libxml2: fixed hash table collisions CPU usage DoS
by opensuse-security＠opensuse.org 09 Mar '12

09 Mar '12

openSUSE Security Update: libxml2: fixed hash table collisions CPU usage DoS ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0342-1 Rating: moderate References: #748561 Cross-References: CVE-2012-0841 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of libxml2 fixes the hash table collision flaw which could be exploited by attackers to cause a Denial of Service (CVE-2012-0841). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libxml2-5873 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libxml2-2.7.8-16.23.1 libxml2-devel-2.7.8-16.23.1 - openSUSE 11.4 (x86_64): libxml2-32bit-2.7.8-16.23.1 libxml2-devel-32bit-2.7.8-16.23.1 - openSUSE 11.4 (noarch): libxml2-doc-2.7.8-16.23.1 References: http://support.novell.com/security/cve/CVE-2012-0841.html https://bugzilla.novell.com/748561

1 0

openSUSE-RU-2012:0339-1: important: timezone: update to 2012b
by maintenance＠opensuse.org 09 Mar '12

09 Mar '12

openSUSE Recommended Update: timezone: update to 2012b ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0339-1 Rating: important References: #748550 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update provides 2012b which provides the following important changes: * Cuba has delayed start of DST by 3 weeks (now starts April 1 rather than March 11 * Chile 2011/2012 and 2012/2013 summer time date adjustments. * Falkland Islands onto permanent summer time (we're assuming for the foreseeable future, though 2012 is all we're fairly certain of.) * Armenia has abolished Summer Time. * Tokelau jumped the International Date Line back last December (just the same as their near neighbour, Samoa). * America/Creston is a new zone for a small area of British Columbia * There will be a leapsecod 2012-06-30 23:59:60 UTC. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch timezone-2012b-5920 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2012b]: timezone-2012b-0.2.1 - openSUSE 11.4 (noarch) [New Version: 2012b]: timezone-java-2012b-0.2.1 References: https://bugzilla.novell.com/748550

1 0

openSUSE-RU-2012:0336-1: pm-utils: fix script 50rcnetwork error and update savestate/restorestate functions
by maintenance＠opensuse.org 08 Mar '12

08 Mar '12

openSUSE Recommended Update: pm-utils: fix script 50rcnetwork error and update savestate/restorestate functions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0336-1 Rating: low References: #670074 #749031 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issue for pm-utils: - 749031: fix script 50rcnetwork error and update savestate/restorestate functions - 670074: add pm-utils-1.4.1-vtXX-upower-battery-AC-adapter.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch pm-utils-5908 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): pm-utils-1.4.1-5.13.1 pm-utils-ndiswrapper-1.4.1-5.13.1 References: https://bugzilla.novell.com/670074 https://bugzilla.novell.com/749031

1 0

openSUSE-SU-2012:0333-1: icecast
by opensuse-security＠opensuse.org 08 Mar '12

08 Mar '12

openSUSE Security Update: icecast ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0333-1 Rating: low References: #737255 Cross-References: CVE-2011-4612 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Icecast didn't strip newlines from log entries, therefore allowing uses to forge log entries (CVE-2011-4612). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch icecast-5932 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): icecast-2.3.2-60.61.1 References: http://support.novell.com/security/cve/CVE-2011-4612.html https://bugzilla.novell.com/737255

1 0

openSUSE-SU-2012:0331-1: important: flash-player
by opensuse-security＠opensuse.org 07 Mar '12

07 Mar '12

openSUSE Security Update: flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0331-1 Rating: important References: #750614 Cross-References: CVE-2012-0768 CVE-2012-0769 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: flash-player 11.1.102.63 fixes two security issues: - memory corruption vulnerability in Matrix3D could lead to code executionn (CVE-2012-0768) - integer errors that could lead to information disclosure (CVE-2012-0769) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch flash-player-5927 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 11.1.102.63]: flash-player-11.1.102.63-0.2.1 References: http://support.novell.com/security/cve/CVE-2012-0768.html http://support.novell.com/security/cve/CVE-2012-0769.html https://bugzilla.novell.com/750614

1 0

openSUSE-SU-2012:0330-1: moderate: gnash
by opensuse-security＠opensuse.org 07 Mar '12

07 Mar '12

openSUSE Security Update: gnash ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0330-1 Rating: moderate References: #732324 Cross-References: CVE-2011-4328 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: gnash used predictable and world readable temporary file names to store HTTP cookies (CVE-2011-4328). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gnash-5931 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): gnash-0.8.8-6.7.1 gnash-devel-0.8.8-6.7.1 References: http://support.novell.com/security/cve/CVE-2011-4328.html https://bugzilla.novell.com/732324

1 0