April 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2012:0480-1: update for postgresql
by opensuse-security＠opensuse.org 11 Apr '12

11 Apr '12

openSUSE Security Update: update for postgresql ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0480-1 Rating: low References: #701489 #749299 #749301 #749303 Cross-References: CVE-2011-2483 CVE-2012-0866 CVE-2012-0867 CVE-2012-0868 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: - Security and bugfix release 9.1.3: * Require execute permission on the trigger function for "CREATE TRIGGER" (CVE-2012-0866, bnc#749299). * Remove arbitrary limitation on length of common name in SSL certificates (CVE-2012-0867, bnc#749301). * Convert newlines to spaces in names written in pg_dump comments (CVE-2012-0868, bnc#749303). See the release notes for the rest of the changes: http://www.postgresql.org/docs/9.1/static/release-9-1-3.html /usr/share/doc/packages/postgresql/HISTORY Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-214 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libecpg6-9.1.3-3.7.2 libecpg6-debuginfo-9.1.3-3.7.2 libpq5-9.1.3-3.7.2 libpq5-debuginfo-9.1.3-3.7.2 postgresql-9.1.3-3.7.1 postgresql-contrib-9.1.3-3.7.1 postgresql-contrib-debuginfo-9.1.3-3.7.1 postgresql-debuginfo-9.1.3-3.7.1 postgresql-debugsource-9.1.3-3.7.1 postgresql-devel-9.1.3-3.7.2 postgresql-devel-debuginfo-9.1.3-3.7.2 postgresql-libs-debugsource-9.1.3-3.7.2 postgresql-plperl-9.1.3-3.7.1 postgresql-plperl-debuginfo-9.1.3-3.7.1 postgresql-plpython-9.1.3-3.7.1 postgresql-plpython-debuginfo-9.1.3-3.7.1 postgresql-pltcl-9.1.3-3.7.1 postgresql-pltcl-debuginfo-9.1.3-3.7.1 postgresql-server-9.1.3-3.7.1 postgresql-server-debuginfo-9.1.3-3.7.1 - openSUSE 12.1 (x86_64): libpq5-32bit-9.1.3-3.7.2 libpq5-debuginfo-32bit-9.1.3-3.7.2 postgresql-devel-32bit-9.1.3-3.7.2 postgresql-devel-debuginfo-32bit-9.1.3-3.7.2 - openSUSE 12.1 (noarch): postgresql-docs-9.1.3-3.7.1 - openSUSE 12.1 (ia64): libpq5-debuginfo-x86-9.1.3-3.7.2 libpq5-x86-9.1.3-3.7.2 postgresql-devel-debuginfo-x86-9.1.3-3.7.2 References: http://support.novell.com/security/cve/CVE-2011-2483.html http://support.novell.com/security/cve/CVE-2012-0866.html http://support.novell.com/security/cve/CVE-2012-0867.html http://support.novell.com/security/cve/CVE-2012-0868.html https://bugzilla.novell.com/701489 https://bugzilla.novell.com/749299 https://bugzilla.novell.com/749301 https://bugzilla.novell.com/749303

1 0

openSUSE-RU-2012:0477-1: perl-Any-Moose: added missing requires
by maintenance＠opensuse.org 10 Apr '12

10 Apr '12

openSUSE Recommended Update: perl-Any-Moose: added missing requires ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0477-1 Rating: low References: #752049 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for per-Any-Moose: - 752049: added missing requires perl(Moose) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-212 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): perl-Any-Moose-0.17-2.4.1 References: https://bugzilla.novell.com/752049

1 0

openSUSE-RU-2012:0476-1: openSUSE-release: Fix /etc/os-release
by maintenance＠opensuse.org 10 Apr '12

10 Apr '12

openSUSE Recommended Update: openSUSE-release: Fix /etc/os-release ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0476-1 Rating: low References: #746931 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for openSUSE-release: - 746931: Fix /etc/os-release Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-211 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): openSUSE-release-12.1-2.1 openSUSE-release-dvd-12.1-2.1 openSUSE-release-dvd-biarch-12.1-2.1 openSUSE-release-dvd-promo-12.1-2.1 openSUSE-release-ftp-12.1-2.1 openSUSE-release-livecd-gnome-12.1-2.1 openSUSE-release-livecd-kde-12.1-2.1 openSUSE-release-livecd-x11-12.1-2.1 openSUSE-release-livetree-gnome-12.1-2.1 openSUSE-release-livetree-kde-12.1-2.1 openSUSE-release-mini-12.1-2.1 openSUSE-release-usb-gnome-12.1-2.1 openSUSE-release-usb-kde-12.1-2.1 openSUSE-release-usb-x11-12.1-2.1 References: https://bugzilla.novell.com/746931

1 0

openSUSE-RU-2012:0475-1: iproute2: Distribute COPYING file
by maintenance＠opensuse.org 10 Apr '12

10 Apr '12

openSUSE Recommended Update: iproute2: Distribute COPYING file ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0475-1 Rating: low References: #745225 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for iproute2: - 745225: Distribute COPYING file Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-213 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): iproute2-2.6.39-3.5.1 iproute2-debuginfo-2.6.39-3.5.1 iproute2-debugsource-2.6.39-3.5.1 libnetlink-devel-2.6.39-3.5.1 - openSUSE 12.1 (noarch): iproute2-doc-2.6.39-3.5.1 References: https://bugzilla.novell.com/745225

1 0

openSUSE-SU-2012:0474-1: update for openssl
by opensuse-security＠opensuse.org 10 Apr '12

10 Apr '12

openSUSE Security Update: update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0474-1 Rating: low References: #749210 #749213 #751946 Cross-References: CVE-2012-1165 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: Changes in openssl: - S/MIME verification may erroneously fail - Free headers after use in error message - Symmetric crypto errors in PKCS7_decrypt Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-210 - openSUSE 11.4: zypper in -t patch openSUSE-2012-210 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libopenssl-devel-1.0.0e-34.9.1 libopenssl1_0_0-1.0.0e-34.9.1 libopenssl1_0_0-debuginfo-1.0.0e-34.9.1 openssl-1.0.0e-34.9.1 openssl-debuginfo-1.0.0e-34.9.1 openssl-debugsource-1.0.0e-34.9.1 - openSUSE 12.1 (x86_64): libopenssl-devel-32bit-1.0.0e-34.9.1 libopenssl1_0_0-32bit-1.0.0e-34.9.1 libopenssl1_0_0-debuginfo-32bit-1.0.0e-34.9.1 - openSUSE 12.1 (noarch): openssl-doc-1.0.0e-34.9.1 - openSUSE 12.1 (ia64): libopenssl1_0_0-debuginfo-x86-1.0.0e-34.9.1 libopenssl1_0_0-x86-1.0.0e-34.9.1 - openSUSE 11.4 (i586 x86_64): libopenssl-devel-1.0.0c-18.36.1 libopenssl1_0_0-1.0.0c-18.36.1 libopenssl1_0_0-debuginfo-1.0.0c-18.36.1 openssl-1.0.0c-18.36.1 openssl-debuginfo-1.0.0c-18.36.1 openssl-debugsource-1.0.0c-18.36.1 - openSUSE 11.4 (x86_64): libopenssl1_0_0-32bit-1.0.0c-18.36.1 libopenssl1_0_0-debuginfo-32bit-1.0.0c-18.36.1 - openSUSE 11.4 (noarch): openssl-doc-1.0.0c-18.36.1 - openSUSE 11.4 (ia64): libopenssl1_0_0-debuginfo-x86-1.0.0c-18.36.1 libopenssl1_0_0-x86-1.0.0c-18.36.1 References: http://support.novell.com/security/cve/CVE-2012-1165.html https://bugzilla.novell.com/749210 https://bugzilla.novell.com/749213 https://bugzilla.novell.com/751946

1 0

openSUSE-SU-2012:0469-1: moderate: update for nginx-1.0
by opensuse-security＠opensuse.org 05 Apr '12

05 Apr '12

openSUSE Security Update: update for nginx-1.0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0469-1 Rating: moderate References: #752482 Cross-References: CVE-2012-1180 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: specially crafted http responses from upstream server could leak already freed memory Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-209 - openSUSE 11.4: zypper in -t patch openSUSE-2012-209 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): nginx-1.0-1.0.10-3.4.1 nginx-1.0-debuginfo-1.0.10-3.4.1 nginx-1.0-debugsource-1.0.10-3.4.1 - openSUSE 11.4 (i586 x86_64): nginx-0.8-0.8.53-4.14.1 nginx-0.8-debuginfo-0.8.53-4.14.1 nginx-0.8-debugsource-0.8.53-4.14.1 References: http://support.novell.com/security/cve/CVE-2012-1180.html https://bugzilla.novell.com/752482

1 0

openSUSE-RU-2012:0467-1: important: pm-utils: Fix hibernation failures after security patches being applied
by maintenance＠opensuse.org 04 Apr '12

04 Apr '12

openSUSE Recommended Update: pm-utils: Fix hibernation failures after security patches being applied ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0467-1 Rating: important References: #751621 #751811 #751887 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: Fixed bnc#751887 - Hibernation failure after security patches applied; Fixed bnc#751621 - /usr/lib/pm-utils/sleep.d/06autofs unconditionally (re)starts autofs Fixed bnc#751811 - pm-suspend generates defective /var/log/pm-suspend.log file Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-208 - openSUSE 11.4: zypper in -t patch openSUSE-2012-208 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): pm-utils-1.4.1-12.17.1 pm-utils-debuginfo-1.4.1-12.17.1 pm-utils-debugsource-1.4.1-12.17.1 pm-utils-ndiswrapper-1.4.1-12.17.1 - openSUSE 11.4 (i586 x86_64): pm-utils-1.4.1-5.24.1 pm-utils-debuginfo-1.4.1-5.24.1 pm-utils-debugsource-1.4.1-5.24.1 pm-utils-ndiswrapper-1.4.1-5.24.1 References: https://bugzilla.novell.com/751621 https://bugzilla.novell.com/751811 https://bugzilla.novell.com/751887

1 0

openSUSE-SU-2012:0466-1: important: update for chromium, v8
by opensuse-security＠opensuse.org 04 Apr '12

04 Apr '12

openSUSE Security Update: update for chromium, v8 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0466-1 Rating: important References: #754456 Cross-References: CVE-2011-3045 CVE-2011-3049 CVE-2011-3050 CVE-2011-3051 CVE-2011-3052 CVE-2011-3053 CVE-2011-3054 CVE-2011-3055 CVE-2011-3056 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: - Update to 19.0.1079 Security Fixes (bnc#754456): * High CVE-2011-3050: Use-after-free with first-letter handling * High CVE-2011-3045: libpng integer issue from upstream * High CVE-2011-3051: Use-after-free in CSS cross-fade handling * High CVE-2011-3052: Memory corruption in WebGL canvas handling * High CVE-2011-3053: Use-after-free in block splitting * Low CVE-2011-3054: Apply additional isolations to webui privileges * Low CVE-2011-3055: Prompt in the browser native UI for unpacked extension installation * High CVE-2011-3056: Cross-origin violation with “magic iframe”. * Low CVE-2011-3049: Extension web request API can interfere with system requests Other Fixes: * The short-cut key for caps lock (Shift + Search) is disabled when an accessibility screen reader is enabled * Fixes an issue with files not being displayed in File Manager when some file names contain UTF-8 characters (generally accented characters) * Fixed dialog boxes in settings. (Issue: 118031) * Fixed flash videos turning white on mac when running with --disable-composited-core-animation-plugins (Issue: 117916) * Change to look for correctly sized favicon when multiple images are provided. (Issue: 118275) * Fixed issues - 116044, 117470, 117068, 117668, 118620 - Update to 19.0.1077 - Update to 19.0.1074 - Build Chromium on openSUSE > 12.1 with the gold linker - Fix build issues with GCC 4.7 - Update to 19.0.1071 * Several fixes and improvements in the new Settings, Extensions, and Help pages. * Fixed the flashing when switched between composited and non-composited mode. [Issue: 116603] * Fixed stability issues 116913, 117217, 117347, 117081 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-207 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): chromium-19.0.1079.0-1.14.1 chromium-debuginfo-19.0.1079.0-1.14.1 chromium-debugsource-19.0.1079.0-1.14.1 chromium-desktop-gnome-19.0.1079.0-1.14.1 chromium-desktop-kde-19.0.1079.0-1.14.1 chromium-suid-helper-19.0.1079.0-1.14.1 chromium-suid-helper-debuginfo-19.0.1079.0-1.14.1 libv8-3-3.9.24.1-1.18.1 libv8-3-debuginfo-3.9.24.1-1.18.1 v8-debugsource-3.9.24.1-1.18.1 v8-devel-3.9.24.1-1.18.1 v8-private-headers-devel-3.9.24.1-1.18.1 References: http://support.novell.com/security/cve/CVE-2011-3045.html http://support.novell.com/security/cve/CVE-2011-3049.html http://support.novell.com/security/cve/CVE-2011-3050.html http://support.novell.com/security/cve/CVE-2011-3051.html http://support.novell.com/security/cve/CVE-2011-3052.html http://support.novell.com/security/cve/CVE-2011-3053.html http://support.novell.com/security/cve/CVE-2011-3054.html http://support.novell.com/security/cve/CVE-2011-3055.html http://support.novell.com/security/cve/CVE-2011-3056.html https://bugzilla.novell.com/754456

1 0

openSUSE-RU-2012:0463-1: hdjmod: fixed USB hotplugging
by maintenance＠opensuse.org 03 Apr '12

03 Apr '12

openSUSE Recommended Update: hdjmod: fixed USB hotplugging ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0463-1 Rating: low References: #746358 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for hdjmod: - 746358: fixed USB hotplugging As reported the module was also loaded for devices of other vendors Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-202 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): hdjmod-debugsource-1.28-5.4.1 hdjmod-kmp-default-1.28_k3.1.9_1.4-5.4.1 hdjmod-kmp-default-debuginfo-1.28_k3.1.9_1.4-5.4.1 hdjmod-kmp-desktop-1.28_k3.1.9_1.4-5.4.1 hdjmod-kmp-desktop-debuginfo-1.28_k3.1.9_1.4-5.4.1 hdjmod-kmp-xen-1.28_k3.1.9_1.4-5.4.1 hdjmod-kmp-xen-debuginfo-1.28_k3.1.9_1.4-5.4.1 - openSUSE 12.1 (i586): hdjmod-kmp-pae-1.28_k3.1.9_1.4-5.4.1 hdjmod-kmp-pae-debuginfo-1.28_k3.1.9_1.4-5.4.1 References: https://bugzilla.novell.com/746358

1 0

openSUSE-RU-2012:0462-1: moderate: update for cifs-utils
by maintenance＠opensuse.org 03 Apr '12

03 Apr '12

openSUSE Recommended Update: update for cifs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0462-1 Rating: moderate References: #747906 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: - mount.cifs: Properly update mtab during remount; (bnc#747906). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-205 - openSUSE 11.4: zypper in -t patch openSUSE-2012-205 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): cifs-utils-4.9-7.4.1 cifs-utils-debuginfo-4.9-7.4.1 cifs-utils-debugsource-4.9-7.4.1 - openSUSE 11.4 (i586 x86_64): cifs-utils-4.9-1.5.1 cifs-utils-debuginfo-4.9-1.5.1 cifs-utils-debugsource-4.9-1.5.1 References: https://bugzilla.novell.com/747906

1 0