March 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2012:0359-1: moderate: shorewall: add /sbin/shorewall-init
by maintenance＠opensuse.org 13 Mar '12

13 Mar '12

openSUSE Recommended Update: shorewall: add /sbin/shorewall-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0359-1 Rating: moderate References: #749724 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for shorewall: - 749724: Add /sbin/shorewall-init Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-159 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): shorewall-4.4.24.1-2.3.1 shorewall-docs-4.4.24.1-2.3.1 shorewall-init-4.4.24.1-2.3.1 shorewall-lite-4.4.24.1-2.3.1 shorewall6-4.4.24.1-2.3.1 shorewall6-lite-4.4.24.1-2.3.1 References: https://bugzilla.novell.com/749724

1 0

openSUSE-RU-2012:0358-1: moderate: kdebase3: use updower instead of hal for hibernate and suspend
by maintenance＠opensuse.org 13 Mar '12

13 Mar '12

openSUSE Recommended Update: kdebase3: use updower instead of hal for hibernate and suspend ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0358-1 Rating: moderate References: #749028 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for kdebase3: - 749028: use upower instead of hal for hibernate and suspend - add a konq patch from KDE3 svn - remove qt3-devel-doc dependency - remove openmotif dependency - do not provide sysguardd for kde4 - build fileshareset with PIE option - add small patch from Slackware Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-156 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): fileshareset-2.0-24.5.1 fileshareset-debuginfo-2.0-24.5.1 kdebase3-3.5.10.1-24.5.1 kdebase3-apps-3.5.10.1-24.5.1 kdebase3-apps-debuginfo-3.5.10.1-24.5.1 kdebase3-debuginfo-3.5.10.1-24.5.1 kdebase3-debugsource-3.5.10.1-24.5.1 kdebase3-devel-3.5.10.1-24.5.1 kdebase3-extra-3.5.10.1-24.5.1 kdebase3-extra-debuginfo-3.5.10.1-24.5.1 kdebase3-kdm-3.5.10.1-24.5.1 kdebase3-kdm-debuginfo-3.5.10.1-24.5.1 kdebase3-ksysguardd-3.5.10.1-24.5.1 kdebase3-ksysguardd-debuginfo-3.5.10.1-24.5.1 kdebase3-nsplugin-3.5.10.1-24.5.1 kdebase3-nsplugin-debuginfo-3.5.10.1-24.5.1 kdebase3-runtime-3.5.10.1-24.5.1 kdebase3-runtime-debuginfo-3.5.10.1-24.5.1 kdebase3-samba-3.5.10.1-24.5.1 kdebase3-samba-debuginfo-3.5.10.1-24.5.1 kdebase3-session-3.5.10.1-24.5.1 kdebase3-workspace-3.5.10.1-24.5.1 kdebase3-workspace-debuginfo-3.5.10.1-24.5.1 misc-console-font-3.5.10.1-24.5.1 - openSUSE 12.1 (x86_64): kdebase3-32bit-3.5.10.1-24.5.1 kdebase3-debuginfo-32bit-3.5.10.1-24.5.1 kdebase3-runtime-32bit-3.5.10.1-24.5.1 kdebase3-runtime-debuginfo-32bit-3.5.10.1-24.5.1 References: https://bugzilla.novell.com/749028

1 0

openSUSE-RU-2012:0357-1: moderate: update for python-virtinst, virt-manager
by maintenance＠opensuse.org 13 Mar '12

13 Mar '12

openSUSE Recommended Update: update for python-virtinst, virt-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0357-1 Rating: moderate References: #732617 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Changes in virt-manager: - 732617 - virt-manager does not start when python-virtinst is installed - Remove the virt-install sources from the virt-manager package. The virt-install applications are now found in python-virtinst. - Update to virt-manager 0.9.1 * Support for adding usb redirection devices (Marc-André Lureau) * Option to switch usb controller to support usb2.0 (Marc-André Lureau) * Option to specify machine type for non-x86 guests (Li Zhang) * Support for filesystem device type and write policy (Deepak C Shetty) * Many bug fixes! - Update to virtinst 0.600.1 * virt-install: --redir option for usb redirection (Marc-André Lureau) * virt-install: Advanced --controller support for usb2 (Marc-André Lureau) * Many bug fixes and minor improvments. Changes in python-virtinst: - Update to virtinst 0.600.1 * virt-install: --redir option for usb redirection (Marc-André Lureau) * virt-install: Advanced --controller support for usb2 (Marc-André Lureau) * Many bug fixes and minor improvments. - Include patches from the virtinst contained in the virt-manager package. - Update to upstream git version for various bug fixes virtinst: 15d4901a3c8b855838931976e023158b8cda1c37 - Compatibility update to virtinst 0.600.0 for virt-manager in os12.1 * virt-install: Various improvements to enable LXC/container guests: * New --filesystem option for <filesystem> devices * New --init option for container <init> path * New --container option (similar to --paravirt or --hvm) * virt-install: Make --location remotely (with latest libvirt) * virt-install: New --smartcard option for <smartcard> devices * (Marc-André Lureau) * virt-install: New --numatune option for building guest <numatune> XML * virt-install: option to set --disk error_policy= * virt-install: option to set --disk serial= Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-157 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): python-virtinst-0.600.1-4.3.1 virt-manager-0.9.1-5.6.1 References: https://bugzilla.novell.com/732617

1 0

openSUSE-SU-2012:0354-1: moderate: update for lightdm
by opensuse-security＠opensuse.org 12 Mar '12

12 Mar '12

openSUSE Security Update: update for lightdm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0354-1 Rating: moderate References: #745339 Cross-References: CVE-2012-1111 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - update to version 1.0.9 - stop file descriptors leaking into the session processes (bnc#745339, lp#927060, CVE-2012-1111) - fix compilation against gthread - change session directory once user permissions are set so it works on NFS filesystems that don't allow root to access files - fix object cleanup on exit - fix lightdm --debug not working on newer GLib - drop privileges when reading ~/.dmrc (CVE-2011-3153) - fix crash calling lightdm_get_layout - drop lightdm-CVE-2011-3153.patch which has been included upstream Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-154 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): liblightdm-gobject-1-0-1.0.9-8.1 liblightdm-gobject-1-0-debuginfo-1.0.9-8.1 liblightdm-qt-1-0-1.0.9-8.1 liblightdm-qt-1-0-debuginfo-1.0.9-8.1 lightdm-1.0.9-8.1 lightdm-debuginfo-1.0.9-8.1 lightdm-debugsource-1.0.9-8.1 lightdm-gobject-devel-1.0.9-8.1 lightdm-gtk-greeter-1.0.9-8.1 lightdm-gtk-greeter-debuginfo-1.0.9-8.1 lightdm-qt-devel-1.0.9-8.1 lightdm-qt-greeter-1.0.9-8.1 lightdm-qt-greeter-debuginfo-1.0.9-8.1 - openSUSE 12.1 (noarch): lightdm-gtk-greeter-branding-openSUSE-12.1-4.4.1 lightdm-gtk-greeter-branding-upstream-1.0.9-8.1 lightdm-lang-1.0.9-8.1 References: http://support.novell.com/security/cve/CVE-2012-1111.html https://bugzilla.novell.com/745339

1 0

openSUSE-RU-2012:0353-1: moderate: timezone: update to 2012b
by maintenance＠opensuse.org 12 Mar '12

12 Mar '12

openSUSE Recommended Update: timezone: update to 2012b ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0353-1 Rating: moderate References: #748550 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides 2012b which provides the following important changes: * Cuba has delayed start of DST by 3 weeks (now starts April 1 rather than March 11) * Chile 2011/2012 and 2012/2013 summer time date adjustments. * Falkland Islands onto permanent summer time (we're assuming for the foreseeable future, though 2012 is all we're fairly certain of.) * Armenia has abolished Summer Time. * Tokelau jumped the International Date Line back last December (just the same as their near neighbour, Samoa). * America/Creston is a new zone for a small area of British Columbia * There will be a leapsecod 2012-06-30 23:59:60 UTC. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-155 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): timezone-2012b-1.3.1 timezone-debuginfo-2012b-1.3.1 timezone-debugsource-2012b-1.3.1 - openSUSE 12.1 (noarch): timezone-java-2012b-1.3.1 References: https://bugzilla.novell.com/748550

1 0

openSUSE-SU-2012:0352-1: update for icecast
by opensuse-security＠opensuse.org 10 Mar '12

10 Mar '12

openSUSE Security Update: update for icecast ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0352-1 Rating: low References: #737255 Cross-References: CVE-2011-4612 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Icecast didn't strip newlines from log entries, therefore allowing uses to forge log entries. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-153 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): icecast-2.3.2-65.3.1 icecast-debuginfo-2.3.2-65.3.1 icecast-debugsource-2.3.2-65.3.1 References: http://support.novell.com/security/cve/CVE-2011-4612.html https://bugzilla.novell.com/737255

1 0

openSUSE-RU-2012:0351-1: moderate: pm-utils: fix script 50rcnetwork error and update savestate/restorestate functions
by maintenance＠opensuse.org 10 Mar '12

10 Mar '12

openSUSE Recommended Update: pm-utils: fix script 50rcnetwork error and update savestate/restorestate functions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0351-1 Rating: moderate References: #749031 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for pm-utils: - 749031: fix script 50rcnetwork error and update savestate/restorestate functions - Format pm-utils-1.4.1-vtXX-upower-battery-AC-adapter.patch to standard, use pushd/popd in spec. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-152 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): pm-utils-1.4.1-12.6.1 pm-utils-debuginfo-1.4.1-12.6.1 pm-utils-debugsource-1.4.1-12.6.1 pm-utils-ndiswrapper-1.4.1-12.6.1 References: https://bugzilla.novell.com/749031

1 0

openSUSE-RU-2012:0350-1: moderate: update for kadu
by maintenance＠opensuse.org 10 Mar '12

10 Mar '12

openSUSE Recommended Update: update for kadu ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0350-1 Rating: moderate References: #749036 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Specially crafted messages could inject Javascript code Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-150 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): kadu-0.10.1-2.5.1 kadu-anonymous_check-0.10.1-2.5.1 kadu-anonymous_check-debuginfo-0.10.1-2.5.1 kadu-debuginfo-0.10.1-2.5.1 kadu-debugsource-0.10.1-2.5.1 kadu-devel-0.10.1-2.5.1 kadu-globalhotkeys-0.10.1-2.5.1 kadu-globalhotkeys-debuginfo-0.10.1-2.5.1 kadu-import_history-0.10.1-2.5.1 kadu-import_history-debuginfo-0.10.1-2.5.1 kadu-lednotify-0.10.1-2.5.1 kadu-lednotify-debuginfo-0.10.1-2.5.1 kadu-messagessplitter-0.10.1-2.5.1 kadu-messagessplitter-debuginfo-0.10.1-2.5.1 kadu-mimetex-0.10.1-2.5.1 kadu-mimetex-debuginfo-0.10.1-2.5.1 kadu-networkping-0.10.1-2.5.1 kadu-networkping-debuginfo-0.10.1-2.5.1 kadu-nextinfo-0.10.1-2.5.1 kadu-nextinfo-debuginfo-0.10.1-2.5.1 kadu-panelkadu-0.10.1-2.5.1 kadu-panelkadu-debuginfo-0.10.1-2.5.1 kadu-senthistory-0.10.1-2.5.1 kadu-senthistory-debuginfo-0.10.1-2.5.1 kadu-sound-bns-0.10.1-2.5.1 kadu-sound-drums-0.10.1-2.5.1 kadu-sound-florkus-0.10.1-2.5.1 kadu-sound-michalsrodek-0.10.1-2.5.1 kadu-sound-percussion-0.10.1-2.5.1 kadu-sound-ultr-0.10.1-2.5.1 References: http://support.novell.com/security/cve/CVE-2012-1410.html https://bugzilla.novell.com/749036

1 0

openSUSE-SU-2012:0349-1: moderate: update for flash-player
by opensuse-security＠opensuse.org 10 Mar '12

10 Mar '12

openSUSE Security Update: update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0349-1 Rating: moderate References: #750614 Cross-References: CVE-2012-0768 CVE-2012-0769 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: flash-player 11.1.102.63 fixes two security issues: - memory corruption vulnerability in Matrix3D could lead to code executionn (CVE-2012-0768) - integer errors that could lead to information disclosure (CVE-2012-0769) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-151 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): flash-player-11.1.102.63-9.1 flash-player-gnome-11.1.102.63-9.1 flash-player-kde4-11.1.102.63-9.1 References: http://support.novell.com/security/cve/CVE-2012-0768.html http://support.novell.com/security/cve/CVE-2012-0769.html https://bugzilla.novell.com/750614

1 0

openSUSE-SU-2012:0347-1: Xen: Collective 2012/02 Update
by opensuse-security＠opensuse.org 09 Mar '12

09 Mar '12

openSUSE Security Update: Xen: Collective 2012/02 Update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0347-1 Rating: low References: #649209 #683580 #691256 #694863 #701686 #704160 #706106 #706574 #712051 #712823 #714183 #715655 #716695 #725169 #726332 #727515 #728681 #732782 #734826 #736824 #739585 #740165 Cross-References: CVE-2012-0029 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves one vulnerability and has 21 fixes is now available. Description: This collective update 2012/02 for Xen provides fixes for the following reports: Xen === - 649209: Fix Xen live migrations being slow - 683580: Fix hangs during boot up after the message "Enabled directed EOI with ioapic_ack_old on! - 691256: unable to open a connection to the XEN Hypervisor - 694863: Fix kexec fails in xen - 701686: kdump hangs on megaraid_sas driver - 704160: crm resource migrate fails with xen machines - 706106: Fix Inconsistent reporting of VM names during migration - 706574: xm console DomUName hang after "xm save/restore" of PVM on the latest Xen - 712051: Fix xen: IOMMU fault livelock - 712823: Xen guest does not start reliable when rebooted - 714183: Since last update Xen VM's don't start if the name contains dots (as in 'example.mydomain.com') - 715655: No support for performance counters for Westmere E7-8837 and SandyBridge i5-2500 - 716695: dom-us using tap devices will not start - 725169: xen-4.0.2_21511_03-0.5.3: bootup hangs - 726332: Xen changeset 21326 introduces considerable performance hit - 727515: Fragmented packets hang network boot of HVM guest - 732782: xm create hangs when maxmen value is enclosed in "quotes" - 734826: xm rename doesn't work anymore - 736824: Microcode patches for AMD's 15h processors panic the system - 739585: Xen block-attach fails after repeated attach/detach - 740165: Fix heap overflow in e1000 device emulation libvirt ======= - 728681: libvirtd litters syslog with "interfaceGetXMLDesc:355 : internal error" messages when using virt-manager virt-utils ========== - Add Support for creating images that can be run on Microsoft Hyper-V host (Fix vpc file format. Add support for fixed disks) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libvirt-5774 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libvirt-0.8.8-0.14.1 libvirt-client-0.8.8-0.14.1 libvirt-devel-0.8.8-0.14.1 libvirt-doc-0.8.8-0.14.1 libvirt-python-0.8.8-0.14.1 virt-utils-1.1.5-1.4.1 xen-4.0.3_01-0.2.1 xen-devel-4.0.3_01-0.2.1 xen-doc-html-4.0.3_01-0.2.1 xen-doc-pdf-4.0.3_01-0.2.1 xen-kmp-default-4.0.3_01_k2.6.37.6_0.11-0.2.1 xen-kmp-desktop-4.0.3_01_k2.6.37.6_0.11-0.2.1 xen-libs-4.0.3_01-0.2.1 xen-tools-4.0.3_01-0.2.1 xen-tools-domU-4.0.3_01-0.2.1 - openSUSE 11.4 (i586): xen-kmp-pae-4.0.3_01_k2.6.37.6_0.11-0.2.1 References: http://support.novell.com/security/cve/CVE-2012-0029.html https://bugzilla.novell.com/649209 https://bugzilla.novell.com/683580 https://bugzilla.novell.com/691256 https://bugzilla.novell.com/694863 https://bugzilla.novell.com/701686 https://bugzilla.novell.com/704160 https://bugzilla.novell.com/706106 https://bugzilla.novell.com/706574 https://bugzilla.novell.com/712051 https://bugzilla.novell.com/712823 https://bugzilla.novell.com/714183 https://bugzilla.novell.com/715655 https://bugzilla.novell.com/716695 https://bugzilla.novell.com/725169 https://bugzilla.novell.com/726332 https://bugzilla.novell.com/727515 https://bugzilla.novell.com/728681 https://bugzilla.novell.com/732782 https://bugzilla.novell.com/734826 https://bugzilla.novell.com/736824 https://bugzilla.novell.com/739585 https://bugzilla.novell.com/740165

1 0