April 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2012:0567-1: moderate: update for MozillaFirefox, MozillaThunderbird, seamonkey, xulrunner
by opensuse-security＠opensuse.org 27 Apr '12

27 Apr '12

openSUSE Security Update: update for MozillaFirefox, MozillaThunderbird, seamonkey, xulrunner ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0567-1 Rating: moderate References: #712224 #714931 #720264 #726758 #728520 #732898 #733002 #744275 #746616 #747328 #749440 #750044 #755060 #758408 Cross-References: CVE-2011-1187 CVE-2011-2985 CVE-2011-2986 CVE-2011-2987 CVE-2011-2988 CVE-2011-2989 CVE-2011-2991 CVE-2011-2992 CVE-2011-3005 CVE-2011-3062 CVE-2011-3232 CVE-2011-3651 CVE-2011-3652 CVE-2011-3654 CVE-2011-3655 CVE-2011-3658 CVE-2011-3660 CVE-2011-3661 CVE-2011-3663 CVE-2012-0445 CVE-2012-0446 CVE-2012-0447 CVE-2012-0451 CVE-2012-0452 CVE-2012-0459 CVE-2012-0460 CVE-2012-0467 CVE-2012-0468 CVE-2012-0469 CVE-2012-0470 CVE-2012-0471 CVE-2012-0472 CVE-2012-0473 CVE-2012-0474 CVE-2012-0475 CVE-2012-0477 CVE-2012-0478 CVE-2012-0479 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 38 vulnerabilities is now available. Description: Changes in xulrunner: - update to 12.0 (bnc#758408) * rebased patches * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468 Miscellaneous memory safety hazards * MFSA 2012-22/CVE-2012-0469 (bmo#738985) use-after-free in IDBKeyRange * MFSA 2012-23/CVE-2012-0470 (bmo#734288) Invalid frees causes heap corruption in gfxImageSurface * MFSA 2012-24/CVE-2012-0471 (bmo#715319) Potential XSS via multibyte content processing errors * MFSA 2012-25/CVE-2012-0472 (bmo#744480) Potential memory corruption during font rendering using cairo-dwrite * MFSA 2012-26/CVE-2012-0473 (bmo#743475) WebGL.drawElements may read illegal video memory due to FindMaxUshortElement error * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307) Page load short-circuit can lead to XSS * MFSA 2012-28/CVE-2012-0475 (bmo#694576) Ambiguous IPv6 in Origin headers may bypass webserver access restrictions * MFSA 2012-29/CVE-2012-0477 (bmo#718573) Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues * MFSA 2012-30/CVE-2012-0478 (bmo#727547) Crash with WebGL content using textImage2D * MFSA 2012-31/CVE-2011-3062 (bmo#739925) Off-by-one error in OpenType Sanitizer * MFSA 2012-32/CVE-2011-1187 (bmo#624621) HTTP Redirections and remote content can be read by javascript errors * MFSA 2012-33/CVE-2012-0479 (bmo#714631) Potential site identity spoofing when loading RSS and Atom feeds - added mozilla-libnotify.patch to allow fallback from libnotify to xul based events if no notification-daemon is running - gcc 4.7 fixes * mozilla-gcc47.patch * disabled crashreporter temporarily for Factory Changes in MozillaFirefox: - update to Firefox 12.0 (bnc#758408) * rebased patches * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468 Miscellaneous memory safety hazards * MFSA 2012-22/CVE-2012-0469 (bmo#738985) use-after-free in IDBKeyRange * MFSA 2012-23/CVE-2012-0470 (bmo#734288) Invalid frees causes heap corruption in gfxImageSurface * MFSA 2012-24/CVE-2012-0471 (bmo#715319) Potential XSS via multibyte content processing errors * MFSA 2012-25/CVE-2012-0472 (bmo#744480) Potential memory corruption during font rendering using cairo-dwrite * MFSA 2012-26/CVE-2012-0473 (bmo#743475) WebGL.drawElements may read illegal video memory due to FindMaxUshortElement error * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307) Page load short-circuit can lead to XSS * MFSA 2012-28/CVE-2012-0475 (bmo#694576) Ambiguous IPv6 in Origin headers may bypass webserver access restrictions * MFSA 2012-29/CVE-2012-0477 (bmo#718573) Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues * MFSA 2012-30/CVE-2012-0478 (bmo#727547) Crash with WebGL content using textImage2D * MFSA 2012-31/CVE-2011-3062 (bmo#739925) Off-by-one error in OpenType Sanitizer * MFSA 2012-32/CVE-2011-1187 (bmo#624621) HTTP Redirections and remote content can be read by javascript errors * MFSA 2012-33/CVE-2012-0479 (bmo#714631) Potential site identity spoofing when loading RSS and Atom feeds - added mozilla-libnotify.patch to allow fallback from libnotify to xul based events if no notification-daemon is running - gcc 4.7 fixes * mozilla-gcc47.patch * disabled crashreporter temporarily for Factory - recommend libcanberra0 for proper sound notifications Changes in MozillaThunderbird: - update to Thunderbird 12.0 (bnc#758408) * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468 Miscellaneous memory safety hazards * MFSA 2012-22/CVE-2012-0469 (bmo#738985) use-after-free in IDBKeyRange * MFSA 2012-23/CVE-2012-0470 (bmo#734288) Invalid frees causes heap corruption in gfxImageSurface * MFSA 2012-24/CVE-2012-0471 (bmo#715319) Potential XSS via multibyte content processing errors * MFSA 2012-25/CVE-2012-0472 (bmo#744480) Potential memory corruption during font rendering using cairo-dwrite * MFSA 2012-26/CVE-2012-0473 (bmo#743475) WebGL.drawElements may read illegal video memory due to FindMaxUshortElement error * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307) Page load short-circuit can lead to XSS * MFSA 2012-28/CVE-2012-0475 (bmo#694576) Ambiguous IPv6 in Origin headers may bypass webserver access restrictions * MFSA 2012-29/CVE-2012-0477 (bmo#718573) Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues * MFSA 2012-30/CVE-2012-0478 (bmo#727547) Crash with WebGL content using textImage2D * MFSA 2012-31/CVE-2011-3062 (bmo#739925) Off-by-one error in OpenType Sanitizer * MFSA 2012-32/CVE-2011-1187 (bmo#624621) HTTP Redirections and remote content can be read by javascript errors * MFSA 2012-33/CVE-2012-0479 (bmo#714631) Potential site identity spoofing when loading RSS and Atom feeds - update Enigmail to 1.4.1 - added mozilla-revert_621446.patch - added mozilla-libnotify.patch (bmo#737646) - added mailnew-showalert.patch (bmo#739146) - added mozilla-gcc47.patch and mailnews-literals.patch to fix compilation issues with recent gcc 4.7 - disabled crashreporter temporarily for Factory (gcc 4.7 issue) Changes in seamonkey: - update to Seamonkey 2.9 (bnc#758408) * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468 Miscellaneous memory safety hazards * MFSA 2012-22/CVE-2012-0469 (bmo#738985) use-after-free in IDBKeyRange * MFSA 2012-23/CVE-2012-0470 (bmo#734288) Invalid frees causes heap corruption in gfxImageSurface * MFSA 2012-24/CVE-2012-0471 (bmo#715319) Potential XSS via multibyte content processing errors * MFSA 2012-25/CVE-2012-0472 (bmo#744480) Potential memory corruption during font rendering using cairo-dwrite * MFSA 2012-26/CVE-2012-0473 (bmo#743475) WebGL.drawElements may read illegal video memory due to FindMaxUshortElement error * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307) Page load short-circuit can lead to XSS * MFSA 2012-28/CVE-2012-0475 (bmo#694576) Ambiguous IPv6 in Origin headers may bypass webserver access restrictions * MFSA 2012-29/CVE-2012-0477 (bmo#718573) Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues * MFSA 2012-30/CVE-2012-0478 (bmo#727547) Crash with WebGL content using textImage2D * MFSA 2012-31/CVE-2011-3062 (bmo#739925) Off-by-one error in OpenType Sanitizer * MFSA 2012-32/CVE-2011-1187 (bmo#624621) HTTP Redirections and remote content can be read by javascript errors * MFSA 2012-33/CVE-2012-0479 (bmo#714631) Potential site identity spoofing when loading RSS and Atom feeds - update to 2.9b4 - added mozilla-sle11.patch and add exceptions to be able to build for SLE11/11.1 - exclude broken gl locale from build - fixed build on 11.2-x86_64 by adding mozilla-revert_621446.patch - added mozilla-gcc47.patch and mailnews-literals.patch to fix compilation issues with recent gcc 4.7 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-254 - openSUSE 11.4: zypper in -t patch openSUSE-2012-254 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): MozillaFirefox-12.0-2.26.1 MozillaFirefox-branding-upstream-12.0-2.26.1 MozillaFirefox-buildsymbols-12.0-2.26.1 MozillaFirefox-debuginfo-12.0-2.26.1 MozillaFirefox-debugsource-12.0-2.26.1 MozillaFirefox-devel-12.0-2.26.1 MozillaFirefox-translations-common-12.0-2.26.1 MozillaFirefox-translations-other-12.0-2.26.1 MozillaThunderbird-12.0-33.20.1 MozillaThunderbird-buildsymbols-12.0-33.20.1 MozillaThunderbird-debuginfo-12.0-33.20.1 MozillaThunderbird-debugsource-12.0-33.20.1 MozillaThunderbird-devel-12.0-33.20.1 MozillaThunderbird-translations-common-12.0-33.20.1 MozillaThunderbird-translations-other-12.0-33.20.1 enigmail-1.4.1+12.0-33.20.1 enigmail-debuginfo-1.4.1+12.0-33.20.1 mozilla-js-12.0-2.26.1 mozilla-js-debuginfo-12.0-2.26.1 seamonkey-2.9-2.18.1 seamonkey-debuginfo-2.9-2.18.1 seamonkey-debugsource-2.9-2.18.1 seamonkey-dom-inspector-2.9-2.18.1 seamonkey-irc-2.9-2.18.1 seamonkey-translations-common-2.9-2.18.1 seamonkey-translations-other-2.9-2.18.1 seamonkey-venkman-2.9-2.18.1 xulrunner-12.0-2.26.1 xulrunner-buildsymbols-12.0-2.26.1 xulrunner-debuginfo-12.0-2.26.1 xulrunner-debugsource-12.0-2.26.1 xulrunner-devel-12.0-2.26.1 xulrunner-devel-debuginfo-12.0-2.26.1 - openSUSE 12.1 (x86_64): mozilla-js-32bit-12.0-2.26.1 mozilla-js-debuginfo-32bit-12.0-2.26.1 xulrunner-32bit-12.0-2.26.1 xulrunner-debuginfo-32bit-12.0-2.26.1 - openSUSE 12.1 (ia64): mozilla-js-debuginfo-x86-12.0-2.26.1 mozilla-js-x86-12.0-2.26.1 xulrunner-debuginfo-x86-12.0-2.26.1 xulrunner-x86-12.0-2.26.1 - openSUSE 11.4 (i586 x86_64): MozillaFirefox-12.0-18.1 MozillaFirefox-branding-upstream-12.0-18.1 MozillaFirefox-buildsymbols-12.0-18.1 MozillaFirefox-debuginfo-12.0-18.1 MozillaFirefox-debugsource-12.0-18.1 MozillaFirefox-devel-12.0-18.1 MozillaFirefox-translations-common-12.0-18.1 MozillaFirefox-translations-other-12.0-18.1 MozillaThunderbird-12.0-18.1 MozillaThunderbird-buildsymbols-12.0-18.1 MozillaThunderbird-debuginfo-12.0-18.1 MozillaThunderbird-debugsource-12.0-18.1 MozillaThunderbird-devel-12.0-18.1 MozillaThunderbird-translations-common-12.0-18.1 MozillaThunderbird-translations-other-12.0-18.1 enigmail-1.4.1+12.0-18.1 enigmail-debuginfo-1.4.1+12.0-18.1 seamonkey-2.9-18.1 seamonkey-debuginfo-2.9-18.1 seamonkey-debugsource-2.9-18.1 seamonkey-dom-inspector-2.9-18.1 seamonkey-irc-2.9-18.1 seamonkey-translations-common-2.9-18.1 seamonkey-translations-other-2.9-18.1 seamonkey-venkman-2.9-18.1 References: http://support.novell.com/security/cve/CVE-2011-1187.html http://support.novell.com/security/cve/CVE-2011-2985.html http://support.novell.com/security/cve/CVE-2011-2986.html http://support.novell.com/security/cve/CVE-2011-2987.html http://support.novell.com/security/cve/CVE-2011-2988.html http://support.novell.com/security/cve/CVE-2011-2989.html http://support.novell.com/security/cve/CVE-2011-2991.html http://support.novell.com/security/cve/CVE-2011-2992.html http://support.novell.com/security/cve/CVE-2011-3005.html http://support.novell.com/security/cve/CVE-2011-3062.html http://support.novell.com/security/cve/CVE-2011-3232.html http://support.novell.com/security/cve/CVE-2011-3651.html http://support.novell.com/security/cve/CVE-2011-3652.html http://support.novell.com/security/cve/CVE-2011-3654.html http://support.novell.com/security/cve/CVE-2011-3655.html http://support.novell.com/security/cve/CVE-2011-3658.html http://support.novell.com/security/cve/CVE-2011-3660.html http://support.novell.com/security/cve/CVE-2011-3661.html http://support.novell.com/security/cve/CVE-2011-3663.html http://support.novell.com/security/cve/CVE-2012-0445.html http://support.novell.com/security/cve/CVE-2012-0446.html http://support.novell.com/security/cve/CVE-2012-0447.html http://support.novell.com/security/cve/CVE-2012-0451.html http://support.novell.com/security/cve/CVE-2012-0452.html http://support.novell.com/security/cve/CVE-2012-0459.html http://support.novell.com/security/cve/CVE-2012-0460.html http://support.novell.com/security/cve/CVE-2012-0467.html http://support.novell.com/security/cve/CVE-2012-0468.html http://support.novell.com/security/cve/CVE-2012-0469.html http://support.novell.com/security/cve/CVE-2012-0470.html http://support.novell.com/security/cve/CVE-2012-0471.html http://support.novell.com/security/cve/CVE-2012-0472.html http://support.novell.com/security/cve/CVE-2012-0473.html http://support.novell.com/security/cve/CVE-2012-0474.html http://support.novell.com/security/cve/CVE-2012-0475.html http://support.novell.com/security/cve/CVE-2012-0477.html http://support.novell.com/security/cve/CVE-2012-0478.html http://support.novell.com/security/cve/CVE-2012-0479.html https://bugzilla.novell.com/712224 https://bugzilla.novell.com/714931 https://bugzilla.novell.com/720264 https://bugzilla.novell.com/726758 https://bugzilla.novell.com/728520 https://bugzilla.novell.com/732898 https://bugzilla.novell.com/733002 https://bugzilla.novell.com/744275 https://bugzilla.novell.com/746616 https://bugzilla.novell.com/747328 https://bugzilla.novell.com/749440 https://bugzilla.novell.com/750044 https://bugzilla.novell.com/755060 https://bugzilla.novell.com/758408

1 0

openSUSE-RU-2012:0561-2: flash-player: update to 11.2.202.233
by maintenance＠opensuse.org 26 Apr '12

26 Apr '12

openSUSE Recommended Update: flash-player: update to 11.2.202.233 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0561-2 Rating: low References: #757428 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for flash-player: - 757428: Update to 11.2.202.233 *This release addresses a printing issue that was found in the previous version of Flash Player Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-250 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.233-9.1 flash-player-gnome-11.2.202.233-9.1 flash-player-kde4-11.2.202.233-9.1 References: https://bugzilla.novell.com/757428

1 0

openSUSE-RU-2012:0563-1: syslog-ng: update to version 3.3.5
by maintenance＠opensuse.org 26 Apr '12

26 Apr '12

openSUSE Recommended Update: syslog-ng: update to version 3.3.5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0563-1 Rating: low References: #747871 #757680 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for syslog-ng: - 757680: update to syslog-ng 3.3.5 which fixes even more memleaks - 747871: Detect if we have to use the new /run/systemd/journal/syslog socket under newer systemd versions, instead of the default _PATH_LOG (/dev/log) socket. Avoids update problems and the need to adopt config before using init=... boot parameter Fixes for 3.3.1 - Fixed set() and subst() rewrite operations to work properly on the value() parameter specified in the configuration even if they are referenced at multiple spots in the configuration file. Earlier the 2nd and subsequent invocation of the rewrite rule changed $MESSAGE. - Fixed csv-parser() to work even if it is invoked at multiple spots in the configuration file. Earlier, the 2nd and subsequent references of the parser rule forgot the list of column names and the input template. - Fixed the processing of condition() parameter in rewrite rules, which was broken if it contained a filter() function call. - Fixed program() destination to properly kill the child process on reload and shutdown. - Fixed a potential division by zero error which could happen for large data rates due to a race in an unlocked region. - Fixed an assertion failure in mongodb destination that happened due to a race condition at high data rates. - Fixed an fd leak in the control socket code, that caused the control connection file descriptors to be leaked. - Fixed a crash problem in the tcp() destination, that occurred at or after a reload happens. - Fixed a segmentation fault on reload when using the same rewrite rule from multiple log paths. - Fixed a segmentation fault when processing a reload request in case an existing tcp() source is removed from the config and there are open connections. - Fixed a possible segmentation fault in the scalable queue implementation, which happens in case a destination is slower to process messages than syslog-ng would like to send them. - Fixed a possible file() destination issue that could cause syslog-ng to omit data or to write garbage to the log file in case the kernel reports that only a smaller portion of the actual write request could be accomplished. - Fixed an "internal error duplicate config element" error during reload due to an invalid bugfix applied for 3.3.1. Older beta versions of 3.3 were not affected. - Fixed a memory leak that causes macro based file destinations to leak their queue when destination files are closed due to time-reap(). - Fixed the handling of the condition() option for rewrite rules. - Fixed a race condition in value-pairs support, potentially causing heap corruption problems when $(format-json) is used in threaded mode. - Fixed a memory leak in value-pairs template function argument parsing, fixing a leak if $(format-json) is used. - Repeated definitions of source, destination, filter, rewrite, parser and block elements are not allowed by default anymore. These are reported as configuration errors unless @define allow-config-dups 1 is specified in the configuration file. - Fixed pdbtool error reporting in "pdbtool test" to make it easier to understand what went wrong. - Added an SQL connection health check in case an INSERT failed. This way syslog-ng handles SQL server timeouts better. - Fixed support for systemd socket activation. Previously such sockets were not set to non-blocking mode, causing syslog-ng to hang. - Fixed the filter() function in the filter expression to work also when used as a part of an AND or OR construct. - Allow the sql() destination to operate even without an indexes() option. That parameter was meant to be optional, but it wasn't. - Fixed compilation issues if no OpenSSL is present. - Fixed a minor memory leak in the usertty() driver that can increase memory usage on every reload. (The username() parameter wasn't properly freed on reload). - Fixed a minor memory leak in the sql() driver that can increase the memory usage on every reload (indexes() parameter wasn't properly freed on reload). + Changes for 3.3.1 - db-parser() automatically sets a tag named '.classifier.unknown' if the message doesn't match. - The use of actions in db-parser() for messages without a correllation context was inconsistently indexing messages. For actions in rules that had correllation @0 was the new message being generated, and @1 was the message that triggered the rule. Without correllation @0 was used for the triggering message, which is greatly inconsistent and unintuitive. This was fixed by changing the behaviour for rules without correllation, now both correllation and non-correllation rules use @0 for the new message, and @1 for the triggering message. This is an incompatible change in the db-parser() format. - The value of the $TAGS macro is added to pdbtool match output. - unix-dgram() and unix-stream() error logging on systemd failures became more detailed for easier troubleshooting. - fix systemd support for openSUSE > 12.1 - update to 3.3.4 - update to the latest 3.3-git - update to 3.3.3 - remove filter patch - fix afsql related warning - remove call to suse_update_config (very old work around) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-253 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): syslog-ng-3.3.5-7.9.1 syslog-ng-debuginfo-3.3.5-7.9.1 syslog-ng-debugsource-3.3.5-7.9.1 syslog-ng-json-3.3.5-7.9.1 syslog-ng-json-debuginfo-3.3.5-7.9.1 syslog-ng-sql-3.3.5-7.9.1 syslog-ng-sql-debuginfo-3.3.5-7.9.1 References: https://bugzilla.novell.com/747871 https://bugzilla.novell.com/757680

1 0

openSUSE-RU-2012:0562-1: python-bugzilla: fixed connection to novell bugzilla
by maintenance＠opensuse.org 26 Apr '12

26 Apr '12

openSUSE Recommended Update: python-bugzilla: fixed connection to novell bugzilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0562-1 Rating: low References: #742243 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for python-bugzilla: - for 12.1 maint update, the previous set of changes happen to fix bnc#742243: - remove basic auth credentials from backtraces - Novell Bugzilla is the default when using bugzilla command line tool - update to openSUSE-1 tag from openSUSE's git branch * better handling of NovellBugzilla instances * using HTTP basic auth instead of IChain Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-251 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): python-bugzilla-0.6.2-2.4.1 References: https://bugzilla.novell.com/742243

1 0

openSUSE-RU-2012:0561-1: flash-player: update to 11.2.202.233
by maintenance＠opensuse.org 26 Apr '12

26 Apr '12

openSUSE Recommended Update: flash-player: update to 11.2.202.233 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0561-1 Rating: low References: #757428 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for flash-player: - 757428: Update to 11.2.202.233 *This release addresses a printing issue that was found in the previous version of Flash Player Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-250 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): flash-player-11.2.202.233-15.1 flash-player-gnome-11.2.202.233-15.1 flash-player-kde4-11.2.202.233-15.1 References: https://bugzilla.novell.com/757428

1 0

openSUSE-SU-2012:0559-1: moderate: update for t1lib
by opensuse-security＠opensuse.org 25 Apr '12

25 Apr '12

openSUSE Security Update: update for t1lib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0559-1 Rating: moderate References: #684802 #757961 Cross-References: CVE-2011-0433 CVE-2011-0764 CVE-2011-1552 CVE-2011-1553 CVE-2011-1554 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: Specially crafted type1 fonts could cause memory corruptions in t1lib Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-249 - openSUSE 11.4: zypper in -t patch openSUSE-2012-249 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): t1lib-5.1.2-15.7.1 t1lib-debuginfo-5.1.2-15.7.1 t1lib-debugsource-5.1.2-15.7.1 t1lib-devel-5.1.2-15.7.1 - openSUSE 11.4 (i586 x86_64): t1lib-5.1.2-16.1 t1lib-debuginfo-5.1.2-16.1 t1lib-debugsource-5.1.2-16.1 t1lib-devel-5.1.2-16.1 References: http://support.novell.com/security/cve/CVE-2011-0433.html http://support.novell.com/security/cve/CVE-2011-0764.html http://support.novell.com/security/cve/CVE-2011-1552.html http://support.novell.com/security/cve/CVE-2011-1553.html http://support.novell.com/security/cve/CVE-2011-1554.html https://bugzilla.novell.com/684802 https://bugzilla.novell.com/757961

1 0

openSUSE-SU-2012:0558-1: moderate: update for wireshark
by opensuse-security＠opensuse.org 25 Apr '12

25 Apr '12

openSUSE Security Update: update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0558-1 Rating: moderate References: #754474 #754476 #754477 Cross-References: CVE-2012-1593 CVE-2012-1595 CVE-2012-1596 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: Changes in wireshark: - update to 1.4.12 - fix bnc#754474, bnc#754476, bnc#754477(fixed upstream) - Security fixes: - wnpa-sec-2012-04 The ANSI A dissector could dereference a NULL pointer and crash. (Bug 6823) - wnpa-sec-2012-06 The pcap and pcap-ng file parsers could crash trying to read ERF data. (Bug 6804) - wnpa-sec-2012-07 The MP2T dissector could try to allocate too much memory and crash. (Bug 6804) - The Windows installers now include GnuTLS 1.12.18, which fixes several vulnerabilities. - Bug fixes: - Some PGM options are not parsed correctly. (Bug 5687) - dumpcap crashes when capturing from pipe to a pcap-ng file (e.g., when passing data from CACE Pilot to Wireshark). (Bug 5939) - No error for UDP/IPv6 packet with zero checksum. (Bug 6232) - packetBB dissector bug: More than 1000000 items in the tree -- possible infinite loop. (Bug 6687) - Ethernet traces in K12 text format sometimes give bogus "malformed frame" errors and other problems. (Bug 6735) - non-IPP packets to or from port 631 are dissected as IPP. (Bug 6765) - IAX2 dissector reads past end of packet for unknown IEs. (Bug 6815) - Pcap-NG files with SHB options longer than 100 bytes aren't recognized as pcap-NG files, and options longer than 100 bytes in other blocks aren't handled either. (Bug 6846) - Patch to fix DTLS decryption. (Bug 6847) - Expression... dialog is crash. (Bug 6891) - ISAKMP : VendorID CheckPoint : Malformed Packet. (Bug 6972) - Radiotap dissector lists a bogus "DBM TX Attenuation" bit. (Bug 7000) - MySQL dissector assertion. (Ask 8649) Updated Protocol Support HTTP, ISAKMP, MySQL, PacketBB, PGM, TCP, UDP New and Updated Capture File Support Endace ERF, Pcap-NG. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-248 - openSUSE 11.4: zypper in -t patch openSUSE-2012-248 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): wireshark-1.4.12-3.8.1 wireshark-debuginfo-1.4.12-3.8.1 wireshark-debugsource-1.4.12-3.8.1 wireshark-devel-1.4.12-3.8.1 - openSUSE 11.4 (i586 x86_64): wireshark-1.4.12-0.10.1 wireshark-debuginfo-1.4.12-0.10.1 wireshark-debugsource-1.4.12-0.10.1 wireshark-devel-1.4.12-0.10.1 References: http://support.novell.com/security/cve/CVE-2012-1593.html http://support.novell.com/security/cve/CVE-2012-1595.html http://support.novell.com/security/cve/CVE-2012-1596.html https://bugzilla.novell.com/754474 https://bugzilla.novell.com/754476 https://bugzilla.novell.com/754477

1 0

openSUSE-SU-2012:0557-1: moderate: update for cobbler
by opensuse-security＠opensuse.org 24 Apr '12

24 Apr '12

openSUSE Security Update: update for cobbler ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0557-1 Rating: moderate References: #757062 #757316 #757479 Cross-References: CVE-2011-4952 CVE-2011-4953 CVE-2011-4954 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: Specially crafted YAML could allow attackers to execute arbitrary code due to the use of yaml.load instead of yaml.safe_load. Cobbler-web was prone to Cross-Site-Request-Forgery (CSRF) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-247 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): cobbler-2.2.1-7.10.1 cobbler-web-2.2.1-7.10.1 koan-2.2.1-7.10.1 References: http://support.novell.com/security/cve/CVE-2011-4952.html http://support.novell.com/security/cve/CVE-2011-4953.html http://support.novell.com/security/cve/CVE-2011-4954.html https://bugzilla.novell.com/757062 https://bugzilla.novell.com/757316 https://bugzilla.novell.com/757479

1 0

openSUSE-SU-2012:0551-1: update for php5
by opensuse-security＠opensuse.org 23 Apr '12

23 Apr '12

openSUSE Security Update: update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0551-1 Rating: low References: #752030 Cross-References: CVE-2012-1172 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Scripts that accept multiple file uploads in a single request were potentially vulnerable to a directory traversal attack Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-244 - openSUSE 11.4: zypper in -t patch openSUSE-2012-244 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): apache2-mod_php5-5.3.8-4.12.2 apache2-mod_php5-debuginfo-5.3.8-4.12.2 php5-5.3.8-4.12.2 php5-bcmath-5.3.8-4.12.2 php5-bcmath-debuginfo-5.3.8-4.12.2 php5-bz2-5.3.8-4.12.2 php5-bz2-debuginfo-5.3.8-4.12.2 php5-calendar-5.3.8-4.12.2 php5-calendar-debuginfo-5.3.8-4.12.2 php5-ctype-5.3.8-4.12.2 php5-ctype-debuginfo-5.3.8-4.12.2 php5-curl-5.3.8-4.12.2 php5-curl-debuginfo-5.3.8-4.12.2 php5-dba-5.3.8-4.12.2 php5-dba-debuginfo-5.3.8-4.12.2 php5-debuginfo-5.3.8-4.12.2 php5-debugsource-5.3.8-4.12.2 php5-devel-5.3.8-4.12.2 php5-dom-5.3.8-4.12.2 php5-dom-debuginfo-5.3.8-4.12.2 php5-enchant-5.3.8-4.12.2 php5-enchant-debuginfo-5.3.8-4.12.2 php5-exif-5.3.8-4.12.2 php5-exif-debuginfo-5.3.8-4.12.2 php5-fastcgi-5.3.8-4.12.2 php5-fastcgi-debuginfo-5.3.8-4.12.2 php5-fileinfo-5.3.8-4.12.2 php5-fileinfo-debuginfo-5.3.8-4.12.2 php5-fpm-5.3.8-4.12.2 php5-fpm-debuginfo-5.3.8-4.12.2 php5-ftp-5.3.8-4.12.2 php5-ftp-debuginfo-5.3.8-4.12.2 php5-gd-5.3.8-4.12.2 php5-gd-debuginfo-5.3.8-4.12.2 php5-gettext-5.3.8-4.12.2 php5-gettext-debuginfo-5.3.8-4.12.2 php5-gmp-5.3.8-4.12.2 php5-gmp-debuginfo-5.3.8-4.12.2 php5-iconv-5.3.8-4.12.2 php5-iconv-debuginfo-5.3.8-4.12.2 php5-imap-5.3.8-4.12.2 php5-imap-debuginfo-5.3.8-4.12.2 php5-intl-5.3.8-4.12.2 php5-intl-debuginfo-5.3.8-4.12.2 php5-json-5.3.8-4.12.2 php5-json-debuginfo-5.3.8-4.12.2 php5-ldap-5.3.8-4.12.2 php5-ldap-debuginfo-5.3.8-4.12.2 php5-mbstring-5.3.8-4.12.2 php5-mbstring-debuginfo-5.3.8-4.12.2 php5-mcrypt-5.3.8-4.12.2 php5-mcrypt-debuginfo-5.3.8-4.12.2 php5-mssql-5.3.8-4.12.2 php5-mssql-debuginfo-5.3.8-4.12.2 php5-mysql-5.3.8-4.12.2 php5-mysql-debuginfo-5.3.8-4.12.2 php5-odbc-5.3.8-4.12.2 php5-odbc-debuginfo-5.3.8-4.12.2 php5-openssl-5.3.8-4.12.2 php5-openssl-debuginfo-5.3.8-4.12.2 php5-pcntl-5.3.8-4.12.2 php5-pcntl-debuginfo-5.3.8-4.12.2 php5-pdo-5.3.8-4.12.2 php5-pdo-debuginfo-5.3.8-4.12.2 php5-pgsql-5.3.8-4.12.2 php5-pgsql-debuginfo-5.3.8-4.12.2 php5-phar-5.3.8-4.12.2 php5-phar-debuginfo-5.3.8-4.12.2 php5-posix-5.3.8-4.12.2 php5-posix-debuginfo-5.3.8-4.12.2 php5-pspell-5.3.8-4.12.2 php5-pspell-debuginfo-5.3.8-4.12.2 php5-readline-5.3.8-4.12.2 php5-readline-debuginfo-5.3.8-4.12.2 php5-shmop-5.3.8-4.12.2 php5-shmop-debuginfo-5.3.8-4.12.2 php5-snmp-5.3.8-4.12.2 php5-snmp-debuginfo-5.3.8-4.12.2 php5-soap-5.3.8-4.12.2 php5-soap-debuginfo-5.3.8-4.12.2 php5-sockets-5.3.8-4.12.2 php5-sockets-debuginfo-5.3.8-4.12.2 php5-sqlite-5.3.8-4.12.2 php5-sqlite-debuginfo-5.3.8-4.12.2 php5-suhosin-5.3.8-4.12.2 php5-suhosin-debuginfo-5.3.8-4.12.2 php5-sysvmsg-5.3.8-4.12.2 php5-sysvmsg-debuginfo-5.3.8-4.12.2 php5-sysvsem-5.3.8-4.12.2 php5-sysvsem-debuginfo-5.3.8-4.12.2 php5-sysvshm-5.3.8-4.12.2 php5-sysvshm-debuginfo-5.3.8-4.12.2 php5-tidy-5.3.8-4.12.2 php5-tidy-debuginfo-5.3.8-4.12.2 php5-tokenizer-5.3.8-4.12.2 php5-tokenizer-debuginfo-5.3.8-4.12.2 php5-wddx-5.3.8-4.12.2 php5-wddx-debuginfo-5.3.8-4.12.2 php5-xmlreader-5.3.8-4.12.2 php5-xmlreader-debuginfo-5.3.8-4.12.2 php5-xmlrpc-5.3.8-4.12.2 php5-xmlrpc-debuginfo-5.3.8-4.12.2 php5-xmlwriter-5.3.8-4.12.2 php5-xmlwriter-debuginfo-5.3.8-4.12.2 php5-xsl-5.3.8-4.12.2 php5-xsl-debuginfo-5.3.8-4.12.2 php5-zip-5.3.8-4.12.2 php5-zip-debuginfo-5.3.8-4.12.2 php5-zlib-5.3.8-4.12.2 php5-zlib-debuginfo-5.3.8-4.12.2 - openSUSE 12.1 (noarch): php5-pear-5.3.8-4.12.2 - openSUSE 11.4 (i586 x86_64): apache2-mod_php5-5.3.5-5.329.1 apache2-mod_php5-debuginfo-5.3.5-5.329.1 php5-5.3.5-5.329.1 php5-bcmath-5.3.5-5.329.1 php5-bcmath-debuginfo-5.3.5-5.329.1 php5-bz2-5.3.5-5.329.1 php5-bz2-debuginfo-5.3.5-5.329.1 php5-calendar-5.3.5-5.329.1 php5-calendar-debuginfo-5.3.5-5.329.1 php5-ctype-5.3.5-5.329.1 php5-ctype-debuginfo-5.3.5-5.329.1 php5-curl-5.3.5-5.329.1 php5-curl-debuginfo-5.3.5-5.329.1 php5-dba-5.3.5-5.329.1 php5-dba-debuginfo-5.3.5-5.329.1 php5-debuginfo-5.3.5-5.329.1 php5-debugsource-5.3.5-5.329.1 php5-devel-5.3.5-5.329.1 php5-dom-5.3.5-5.329.1 php5-dom-debuginfo-5.3.5-5.329.1 php5-enchant-5.3.5-5.329.1 php5-enchant-debuginfo-5.3.5-5.329.1 php5-exif-5.3.5-5.329.1 php5-exif-debuginfo-5.3.5-5.329.1 php5-fastcgi-5.3.5-5.329.1 php5-fastcgi-debuginfo-5.3.5-5.329.1 php5-fileinfo-5.3.5-5.329.1 php5-fileinfo-debuginfo-5.3.5-5.329.1 php5-fpm-5.3.5-5.329.1 php5-fpm-debuginfo-5.3.5-5.329.1 php5-ftp-5.3.5-5.329.1 php5-ftp-debuginfo-5.3.5-5.329.1 php5-gd-5.3.5-5.329.1 php5-gd-debuginfo-5.3.5-5.329.1 php5-gettext-5.3.5-5.329.1 php5-gettext-debuginfo-5.3.5-5.329.1 php5-gmp-5.3.5-5.329.1 php5-gmp-debuginfo-5.3.5-5.329.1 php5-hash-5.3.5-5.329.1 php5-hash-debuginfo-5.3.5-5.329.1 php5-iconv-5.3.5-5.329.1 php5-iconv-debuginfo-5.3.5-5.329.1 php5-imap-5.3.5-5.329.1 php5-imap-debuginfo-5.3.5-5.329.1 php5-intl-5.3.5-5.329.1 php5-intl-debuginfo-5.3.5-5.329.1 php5-json-5.3.5-5.329.1 php5-json-debuginfo-5.3.5-5.329.1 php5-ldap-5.3.5-5.329.1 php5-ldap-debuginfo-5.3.5-5.329.1 php5-mbstring-5.3.5-5.329.1 php5-mbstring-debuginfo-5.3.5-5.329.1 php5-mcrypt-5.3.5-5.329.1 php5-mcrypt-debuginfo-5.3.5-5.329.1 php5-mysql-5.3.5-5.329.1 php5-mysql-debuginfo-5.3.5-5.329.1 php5-odbc-5.3.5-5.329.1 php5-odbc-debuginfo-5.3.5-5.329.1 php5-openssl-5.3.5-5.329.1 php5-openssl-debuginfo-5.3.5-5.329.1 php5-pcntl-5.3.5-5.329.1 php5-pcntl-debuginfo-5.3.5-5.329.1 php5-pdo-5.3.5-5.329.1 php5-pdo-debuginfo-5.3.5-5.329.1 php5-pgsql-5.3.5-5.329.1 php5-pgsql-debuginfo-5.3.5-5.329.1 php5-phar-5.3.5-5.329.1 php5-phar-debuginfo-5.3.5-5.329.1 php5-posix-5.3.5-5.329.1 php5-posix-debuginfo-5.3.5-5.329.1 php5-pspell-5.3.5-5.329.1 php5-pspell-debuginfo-5.3.5-5.329.1 php5-readline-5.3.5-5.329.1 php5-readline-debuginfo-5.3.5-5.329.1 php5-shmop-5.3.5-5.329.1 php5-shmop-debuginfo-5.3.5-5.329.1 php5-snmp-5.3.5-5.329.1 php5-snmp-debuginfo-5.3.5-5.329.1 php5-soap-5.3.5-5.329.1 php5-soap-debuginfo-5.3.5-5.329.1 php5-sockets-5.3.5-5.329.1 php5-sockets-debuginfo-5.3.5-5.329.1 php5-sqlite-5.3.5-5.329.1 php5-sqlite-debuginfo-5.3.5-5.329.1 php5-suhosin-5.3.5-5.329.1 php5-suhosin-debuginfo-5.3.5-5.329.1 php5-sysvmsg-5.3.5-5.329.1 php5-sysvmsg-debuginfo-5.3.5-5.329.1 php5-sysvsem-5.3.5-5.329.1 php5-sysvsem-debuginfo-5.3.5-5.329.1 php5-sysvshm-5.3.5-5.329.1 php5-sysvshm-debuginfo-5.3.5-5.329.1 php5-tidy-5.3.5-5.329.1 php5-tidy-debuginfo-5.3.5-5.329.1 php5-tokenizer-5.3.5-5.329.1 php5-tokenizer-debuginfo-5.3.5-5.329.1 php5-wddx-5.3.5-5.329.1 php5-wddx-debuginfo-5.3.5-5.329.1 php5-xmlreader-5.3.5-5.329.1 php5-xmlreader-debuginfo-5.3.5-5.329.1 php5-xmlrpc-5.3.5-5.329.1 php5-xmlrpc-debuginfo-5.3.5-5.329.1 php5-xmlwriter-5.3.5-5.329.1 php5-xmlwriter-debuginfo-5.3.5-5.329.1 php5-xsl-5.3.5-5.329.1 php5-xsl-debuginfo-5.3.5-5.329.1 php5-zip-5.3.5-5.329.1 php5-zip-debuginfo-5.3.5-5.329.1 php5-zlib-5.3.5-5.329.1 php5-zlib-debuginfo-5.3.5-5.329.1 - openSUSE 11.4 (noarch): php5-pear-5.3.5-5.329.1 References: http://support.novell.com/security/cve/CVE-2012-1172.html https://bugzilla.novell.com/752030

1 0

openSUSE-SU-2012:0550-1: moderate: update for csound
by opensuse-security＠opensuse.org 23 Apr '12

23 Apr '12

openSUSE Security Update: update for csound ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0550-1 Rating: moderate References: #757254 #757255 #757256 Cross-References: CVE-2012-2106 CVE-2012-2107 CVE-2012-2108 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: specially crafted files could cause buffer overflows in csound Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-246 - openSUSE 11.4: zypper in -t patch openSUSE-2012-246 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): csound-5.06.0-142.6.1 - openSUSE 11.4 (i586 x86_64): csound-5.06.0-139.144.1 References: http://support.novell.com/security/cve/CVE-2012-2106.html http://support.novell.com/security/cve/CVE-2012-2107.html http://support.novell.com/security/cve/CVE-2012-2108.html https://bugzilla.novell.com/757254 https://bugzilla.novell.com/757255 https://bugzilla.novell.com/757256

1 0

openSUSE-RU-2012:0549-1: moderate: update for expat
by maintenance＠opensuse.org 23 Apr '12

23 Apr '12

openSUSE Recommended Update: update for expat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0549-1 Rating: moderate References: #755377 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: the previous expat security update caused a regression with some programs Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-245 - openSUSE 11.4: zypper in -t patch openSUSE-2012-245 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): expat-2.0.1-109.7.1 expat-debuginfo-2.0.1-109.7.1 expat-debugsource-2.0.1-109.7.1 libexpat-devel-2.0.1-109.7.1 libexpat1-2.0.1-109.7.1 libexpat1-debuginfo-2.0.1-109.7.1 - openSUSE 12.1 (x86_64): expat-debuginfo-32bit-2.0.1-109.7.1 libexpat-devel-32bit-2.0.1-109.7.1 libexpat1-32bit-2.0.1-109.7.1 libexpat1-debuginfo-32bit-2.0.1-109.7.1 - openSUSE 12.1 (ia64): expat-debuginfo-x86-2.0.1-109.7.1 libexpat1-debuginfo-x86-2.0.1-109.7.1 libexpat1-x86-2.0.1-109.7.1 - openSUSE 11.4 (i586 x86_64): expat-2.0.1-102.108.1 expat-debuginfo-2.0.1-102.108.1 expat-debugsource-2.0.1-102.108.1 libexpat-devel-2.0.1-102.108.1 libexpat1-2.0.1-102.108.1 libexpat1-debuginfo-2.0.1-102.108.1 - openSUSE 11.4 (x86_64): expat-debuginfo-32bit-2.0.1-102.108.1 libexpat-devel-32bit-2.0.1-102.108.1 libexpat1-32bit-2.0.1-102.108.1 libexpat1-debuginfo-32bit-2.0.1-102.108.1 - openSUSE 11.4 (ia64): expat-debuginfo-x86-2.0.1-102.108.1 libexpat1-debuginfo-x86-2.0.1-102.108.1 libexpat1-x86-2.0.1-102.108.1 References: https://bugzilla.novell.com/755377

1 0

openSUSE-SU-2012:0548-1: Xen: Bugfix update
by opensuse-security＠opensuse.org 23 Apr '12

23 Apr '12

openSUSE Security Update: Xen: Bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0548-1 Rating: low References: #740165 #743414 #744014 #744771 #745005 #745221 #745367 #745880 #746702 #747331 #753165 Cross-References: CVE-2012-0029 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that solves one vulnerability and has 10 fixes is now available. Description: This is a XEN bugfix update fixing lots of bugs and one security issue. CVE-2012-0029: Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-243 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): python-virtinst-0.600.1-4.10.1 virt-manager-0.9.1-5.10.1 xen-debugsource-4.1.2_16-1.7.1 xen-devel-4.1.2_16-1.7.1 xen-kmp-default-4.1.2_16_k3.1.9_1.4-1.7.1 xen-kmp-default-debuginfo-4.1.2_16_k3.1.9_1.4-1.7.1 xen-kmp-desktop-4.1.2_16_k3.1.9_1.4-1.7.1 xen-kmp-desktop-debuginfo-4.1.2_16_k3.1.9_1.4-1.7.1 xen-libs-4.1.2_16-1.7.1 xen-libs-debuginfo-4.1.2_16-1.7.1 xen-tools-domU-4.1.2_16-1.7.1 xen-tools-domU-debuginfo-4.1.2_16-1.7.1 - openSUSE 12.1 (x86_64): xen-4.1.2_16-1.7.1 xen-doc-html-4.1.2_16-1.7.1 xen-doc-pdf-4.1.2_16-1.7.1 xen-libs-32bit-4.1.2_16-1.7.1 xen-libs-debuginfo-32bit-4.1.2_16-1.7.1 xen-tools-4.1.2_16-1.7.1 xen-tools-debuginfo-4.1.2_16-1.7.1 - openSUSE 12.1 (ia64): xen-libs-debuginfo-x86-4.1.2_16-1.7.1 xen-libs-x86-4.1.2_16-1.7.1 - openSUSE 12.1 (i586): xen-kmp-pae-4.1.2_16_k3.1.9_1.4-1.7.1 xen-kmp-pae-debuginfo-4.1.2_16_k3.1.9_1.4-1.7.1 References: http://support.novell.com/security/cve/CVE-2012-0029.html https://bugzilla.novell.com/740165 https://bugzilla.novell.com/743414 https://bugzilla.novell.com/744014 https://bugzilla.novell.com/744771 https://bugzilla.novell.com/745005 https://bugzilla.novell.com/745221 https://bugzilla.novell.com/745367 https://bugzilla.novell.com/745880 https://bugzilla.novell.com/746702 https://bugzilla.novell.com/747331 https://bugzilla.novell.com/753165

1 0

openSUSE-SU-2012:0547-1: moderate: update for openssl
by opensuse-security＠opensuse.org 23 Apr '12

23 Apr '12

openSUSE Security Update: update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0547-1 Rating: moderate References: #749735 #751977 Cross-References: CVE-2012-0884 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL was vulnerable to a Million Message Attack (MMA) adaptive chosen ciphertext attack (CVE-2012-0884). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-242 - openSUSE 11.4: zypper in -t patch openSUSE-2012-242 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libopenssl-devel-1.0.0e-34.12.1 libopenssl1_0_0-1.0.0e-34.12.1 libopenssl1_0_0-debuginfo-1.0.0e-34.12.1 openssl-1.0.0e-34.12.1 openssl-debuginfo-1.0.0e-34.12.1 openssl-debugsource-1.0.0e-34.12.1 - openSUSE 12.1 (x86_64): libopenssl-devel-32bit-1.0.0e-34.12.1 libopenssl1_0_0-32bit-1.0.0e-34.12.1 libopenssl1_0_0-debuginfo-32bit-1.0.0e-34.12.1 - openSUSE 12.1 (noarch): openssl-doc-1.0.0e-34.12.1 - openSUSE 12.1 (ia64): libopenssl1_0_0-debuginfo-x86-1.0.0e-34.12.1 libopenssl1_0_0-x86-1.0.0e-34.12.1 - openSUSE 11.4 (i586 x86_64): libopenssl-devel-1.0.0c-18.39.1 libopenssl1_0_0-1.0.0c-18.39.1 libopenssl1_0_0-debuginfo-1.0.0c-18.39.1 openssl-1.0.0c-18.39.1 openssl-debuginfo-1.0.0c-18.39.1 openssl-debugsource-1.0.0c-18.39.1 - openSUSE 11.4 (x86_64): libopenssl1_0_0-32bit-1.0.0c-18.39.1 libopenssl1_0_0-debuginfo-32bit-1.0.0c-18.39.1 - openSUSE 11.4 (noarch): openssl-doc-1.0.0c-18.39.1 - openSUSE 11.4 (ia64): libopenssl1_0_0-debuginfo-x86-1.0.0c-18.39.1 libopenssl1_0_0-x86-1.0.0c-18.39.1 References: http://support.novell.com/security/cve/CVE-2012-0884.html https://bugzilla.novell.com/749735 https://bugzilla.novell.com/751977

1 0

openSUSE-RU-2012:0546-1: libmtp: Update to 1.1.3 feature and bugfix version
by maintenance＠opensuse.org 23 Apr '12

23 Apr '12

openSUSE Recommended Update: libmtp: Update to 1.1.3 feature and bugfix version ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0546-1 Rating: low References: #739106 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for libmtp: - updated to 1.1.3 - Soname libmtp.so.9.0.3 - binary compatible. - Probably nailed the bugs in the Samsung Galaxy Tab S2 family of devices. Ignacio Martinez helped us fixing this! - Build fixes by Alessio Treglia and others. - A horde of new devices in the database. - 739106: disable mtp-probe as it causes some non-mtp devices to crash - Remove redundant tags/sections per specfile guideline suggestions - updated to 1.1.2 - device updates - ported to use libusb 1.0 - Autodetect "sony.net" devices - Remove redundant tags/sections (authors list, already in package as a file); put %description after %package - Parallel build with %_smp_mflags - add support for Galaxy Nexus - updated to 1.1.1 - device updates Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-237 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libmtp-debugsource-1.1.3-8.4.1 libmtp-devel-1.1.3-8.4.1 libmtp9-1.1.3-8.4.1 libmtp9-debuginfo-1.1.3-8.4.1 mtp-tools-1.1.3-8.4.1 mtp-tools-debuginfo-1.1.3-8.4.1 References: https://bugzilla.novell.com/739106

1 0

openSUSE-RU-2012:0545-1: libmtp: Fixed mtp-probe crashing devices and bugfixes
by maintenance＠opensuse.org 23 Apr '12

23 Apr '12

openSUSE Recommended Update: libmtp: Fixed mtp-probe crashing devices and bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0545-1 Rating: low References: #700243 #739071 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: libmtp was fixed to not call mtp-probe on new devices, which avoids crashing some specific devices like colormeters and similar. On openSUSE 12.1 libmtp was also upgraded to 1.1.3 to support lots of newer devices. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-238 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libmtp-debugsource-1.0.6-7.1 libmtp-devel-1.0.6-7.1 libmtp8-1.0.6-7.1 libmtp8-debuginfo-1.0.6-7.1 mtp-tools-1.0.6-7.1 mtp-tools-debuginfo-1.0.6-7.1 References: https://bugzilla.novell.com/700243 https://bugzilla.novell.com/739071

1 0

openSUSE-RU-2012:0544-1: gnome-session: Fix crash of gnome-session in combination with kdm
by maintenance＠opensuse.org 23 Apr '12

23 Apr '12

openSUSE Recommended Update: gnome-session: Fix crash of gnome-session in combination with kdm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0544-1 Rating: low References: Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issue for gnome-session: - Fix crash of gnome-session in combination with kdm: on Logout Cancel action is NONE, an empty msg (=NULL) is created for kdm, and the strlen(NULL) in the fwrite call crashes. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-241 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): gnome-session-3.2.1-2.6.1 gnome-session-core-3.2.1-2.6.1 gnome-session-core-debuginfo-3.2.1-2.6.1 gnome-session-debuginfo-3.2.1-2.6.1 gnome-session-debugsource-3.2.1-2.6.1 gnome-session-default-session-3.2.1-2.6.1 gnome-session-fallback-session-3.2.1-2.6.1 gnome2-look-and-feel-3.2.1-2.6.1 - openSUSE 12.1 (noarch): gnome-session-lang-3.2.1-2.6.1 References:

1 0

openSUSE-RU-2012:0543-1: - Fixed bnc#706314 by upgrading to 1.3.1.1
by maintenance＠opensuse.org 23 Apr '12

23 Apr '12

openSUSE Recommended Update: - Fixed bnc#706314 by upgrading to 1.3.1.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0543-1 Rating: low References: #706314 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: - Fixed bnc#706314 by upgrading to 1.3.1.1 - Added chmsee-1.3.1.1-fix-toolbar.patch to fix visual glitches with menu and toolbar Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-240 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): chmsee-1.3.1.1-8.1 chmsee-debuginfo-1.3.1.1-8.1 chmsee-debugsource-1.3.1.1-8.1 - openSUSE 11.4 (noarch): chmsee-lang-1.3.1.1-8.1 References: https://bugzilla.novell.com/706314

1 0

openSUSE-RU-2012:0542-1: release-notes-openSUSE: updated translation and new entries
by maintenance＠opensuse.org 23 Apr '12

23 Apr '12

openSUSE Recommended Update: release-notes-openSUSE: updated translation and new entries ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0542-1 Rating: low References: #732424 #750979 #752174 #754061 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes the following issues for release-notes-openSUSE: - 752174: Update to 12.1.12 - Update translations - New entries: - 732424: Removing 32bit-XEN Hypervisorupdate - 750979: Configuring postfix - 754061: Formatting large disk partitions on Windows 8 server Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-239 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): release-notes-openSUSE-12.1.12-1.13.1 References: https://bugzilla.novell.com/732424 https://bugzilla.novell.com/750979 https://bugzilla.novell.com/752174 https://bugzilla.novell.com/754061

1 0

openSUSE-RU-2012:0541-1: subversion: update to version 1.6.18
by maintenance＠opensuse.org 23 Apr '12

23 Apr '12

openSUSE Recommended Update: subversion: update to version 1.6.18 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0541-1 Rating: low References: #753940 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for subversion: - 753940: version 1.6.18 - User-visible changes: * reject invalid svn:mergeinfo at commit time over DAV (issue #3953) * fix reintegrate merge regression introduced in 1.6.13 (issue #3957) * make the stderr output of the post-commit hook XML-safe (r893478) * fix a rare source of FSFS corruption (r1240752) * plug a memory leak in the bdb backend (r1205726) * server-side performance fix for "log -g" (r1152282) * fix description of svndumpfilter's --targets option (r1151911) * fix datastream corruption during resumed transfer in ra_serf (r1154733) * fix a crash in ra_svn SASL authentication (r1166555, -678) * fix potential corruption on 32-bit FSFS with large files (r1230212) * make website links point to subversion.apache.org (r896893, -901, r915036) * fix non-fatal FSFS corruption bug with concurrent commits (issue #4129) - Developer-visible changes: * fix sqlite distfile retrieval in get-deps.sh (r1134734) * fix swig-py memory leak (r1235264, -296, -302, -736) * allow passing --with-jdk to gen-make.py on Windows (r966167) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-236 - openSUSE 11.4: zypper in -t patch openSUSE-2012-236 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.6.18-2.6.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.6.18-2.6.1 libsvn_auth_kwallet-1-0-1.6.18-2.6.1 libsvn_auth_kwallet-1-0-debuginfo-1.6.18-2.6.1 subversion-1.6.18-2.6.1 subversion-debuginfo-1.6.18-2.6.1 subversion-debugsource-1.6.18-2.6.1 subversion-devel-1.6.18-2.6.1 subversion-perl-1.6.18-2.6.1 subversion-perl-debuginfo-1.6.18-2.6.1 subversion-python-1.6.18-2.6.1 subversion-python-debuginfo-1.6.18-2.6.1 subversion-ruby-1.6.18-2.6.1 subversion-ruby-debuginfo-1.6.18-2.6.1 subversion-server-1.6.18-2.6.1 subversion-server-debuginfo-1.6.18-2.6.1 subversion-tools-1.6.18-2.6.1 subversion-tools-debuginfo-1.6.18-2.6.1 - openSUSE 11.4 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.6.18-1.40.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.6.18-1.40.1 libsvn_auth_kwallet-1-0-1.6.18-1.40.1 libsvn_auth_kwallet-1-0-debuginfo-1.6.18-1.40.1 subversion-1.6.18-1.40.1 subversion-debuginfo-1.6.18-1.40.1 subversion-debugsource-1.6.18-1.40.1 subversion-devel-1.6.18-1.40.1 subversion-perl-1.6.18-1.40.1 subversion-perl-debuginfo-1.6.18-1.40.1 subversion-python-1.6.18-1.40.1 subversion-python-debuginfo-1.6.18-1.40.1 subversion-ruby-1.6.18-1.40.1 subversion-ruby-debuginfo-1.6.18-1.40.1 subversion-server-1.6.18-1.40.1 subversion-server-debuginfo-1.6.18-1.40.1 subversion-tools-1.6.18-1.40.1 subversion-tools-debuginfo-1.6.18-1.40.1 References: https://bugzilla.novell.com/753940

1 0

openSUSE-SU-2012:0540-1: kernel: Update to fix various bugs and security issues
by opensuse-security＠opensuse.org 20 Apr '12

20 Apr '12

openSUSE Security Update: kernel: Update to fix various bugs and security issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0540-1 Rating: low References: #676204 #718918 #719416 #721739 #722350 #726600 #729247 #731387 #731590 #732908 #738397 #741128 #744658 #745832 #746695 #746980 #747404 #749569 #749651 #750079 #750106 #750959 #755812 Cross-References: CVE-2011-1083 CVE-2011-4077 CVE-2011-4086 CVE-2012-1090 CVE-2012-1097 CVE-2012-1146 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has 17 fixes is now available. Description: This kernel update fixes various bugs and security issues. For bugfixes, - a lot of BTRFS bugs were fixed - a performance issue with transparent huge pages was fixed which could have caused huge slowdowns when doing I/O over e.g. USB sticks. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-235 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): kernel-debug-3.1.10-1.9.1 kernel-debug-base-3.1.10-1.9.1 kernel-debug-base-debuginfo-3.1.10-1.9.1 kernel-debug-debuginfo-3.1.10-1.9.1 kernel-debug-debugsource-3.1.10-1.9.1 kernel-debug-devel-3.1.10-1.9.1 kernel-debug-devel-debuginfo-3.1.10-1.9.1 kernel-default-3.1.10-1.9.1 kernel-default-base-3.1.10-1.9.1 kernel-default-base-debuginfo-3.1.10-1.9.1 kernel-default-debuginfo-3.1.10-1.9.1 kernel-default-debugsource-3.1.10-1.9.1 kernel-default-devel-3.1.10-1.9.1 kernel-default-devel-debuginfo-3.1.10-1.9.1 kernel-desktop-3.1.10-1.9.1 kernel-desktop-base-3.1.10-1.9.1 kernel-desktop-base-debuginfo-3.1.10-1.9.1 kernel-desktop-debuginfo-3.1.10-1.9.1 kernel-desktop-debugsource-3.1.10-1.9.1 kernel-desktop-devel-3.1.10-1.9.1 kernel-desktop-devel-debuginfo-3.1.10-1.9.1 kernel-ec2-3.1.10-1.9.1 kernel-ec2-base-3.1.10-1.9.1 kernel-ec2-base-debuginfo-3.1.10-1.9.1 kernel-ec2-debuginfo-3.1.10-1.9.1 kernel-ec2-debugsource-3.1.10-1.9.1 kernel-ec2-devel-3.1.10-1.9.1 kernel-ec2-devel-debuginfo-3.1.10-1.9.1 kernel-ec2-extra-3.1.10-1.9.1 kernel-ec2-extra-debuginfo-3.1.10-1.9.1 kernel-syms-3.1.10-1.9.1 kernel-trace-3.1.10-1.9.1 kernel-trace-base-3.1.10-1.9.1 kernel-trace-base-debuginfo-3.1.10-1.9.1 kernel-trace-debuginfo-3.1.10-1.9.1 kernel-trace-debugsource-3.1.10-1.9.1 kernel-trace-devel-3.1.10-1.9.1 kernel-trace-devel-debuginfo-3.1.10-1.9.1 kernel-vanilla-3.1.10-1.9.1 kernel-vanilla-base-3.1.10-1.9.1 kernel-vanilla-base-debuginfo-3.1.10-1.9.1 kernel-vanilla-debuginfo-3.1.10-1.9.1 kernel-vanilla-debugsource-3.1.10-1.9.1 kernel-vanilla-devel-3.1.10-1.9.1 kernel-vanilla-devel-debuginfo-3.1.10-1.9.1 kernel-xen-3.1.10-1.9.1 kernel-xen-base-3.1.10-1.9.1 kernel-xen-base-debuginfo-3.1.10-1.9.1 kernel-xen-debuginfo-3.1.10-1.9.1 kernel-xen-debugsource-3.1.10-1.9.1 kernel-xen-devel-3.1.10-1.9.1 kernel-xen-devel-debuginfo-3.1.10-1.9.1 - openSUSE 12.1 (noarch): kernel-devel-3.1.10-1.9.1 kernel-docs-3.1.10-1.9.2 kernel-source-3.1.10-1.9.1 kernel-source-vanilla-3.1.10-1.9.1 - openSUSE 12.1 (i586): kernel-pae-3.1.10-1.9.1 kernel-pae-base-3.1.10-1.9.1 kernel-pae-base-debuginfo-3.1.10-1.9.1 kernel-pae-debuginfo-3.1.10-1.9.1 kernel-pae-debugsource-3.1.10-1.9.1 kernel-pae-devel-3.1.10-1.9.1 kernel-pae-devel-debuginfo-3.1.10-1.9.1 References: http://support.novell.com/security/cve/CVE-2011-1083.html http://support.novell.com/security/cve/CVE-2011-4077.html http://support.novell.com/security/cve/CVE-2011-4086.html http://support.novell.com/security/cve/CVE-2012-1090.html http://support.novell.com/security/cve/CVE-2012-1097.html http://support.novell.com/security/cve/CVE-2012-1146.html https://bugzilla.novell.com/676204 https://bugzilla.novell.com/718918 https://bugzilla.novell.com/719416 https://bugzilla.novell.com/721739 https://bugzilla.novell.com/722350 https://bugzilla.novell.com/726600 https://bugzilla.novell.com/729247 https://bugzilla.novell.com/731387 https://bugzilla.novell.com/731590 https://bugzilla.novell.com/732908 https://bugzilla.novell.com/738397 https://bugzilla.novell.com/741128 https://bugzilla.novell.com/744658 https://bugzilla.novell.com/745832 https://bugzilla.novell.com/746695 https://bugzilla.novell.com/746980 https://bugzilla.novell.com/747404 https://bugzilla.novell.com/749569 https://bugzilla.novell.com/749651 https://bugzilla.novell.com/750079 https://bugzilla.novell.com/750106 https://bugzilla.novell.com/750959 https://bugzilla.novell.com/755812

1 0

openSUSE-SU-2012:0539-1: moderate: update for tiff
by opensuse-security＠opensuse.org 20 Apr '12

20 Apr '12

openSUSE Security Update: update for tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0539-1 Rating: moderate References: #753362 Cross-References: CVE-2012-1173 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: specially crafted tiff files could cause a heap overflow in libtiff Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-234 - openSUSE 11.4: zypper in -t patch openSUSE-2012-234 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libtiff-devel-3.9.5-8.4.1 libtiff3-3.9.5-8.4.1 libtiff3-debuginfo-3.9.5-8.4.1 tiff-3.9.5-8.4.1 tiff-debuginfo-3.9.5-8.4.1 tiff-debugsource-3.9.5-8.4.1 - openSUSE 12.1 (x86_64): libtiff-devel-32bit-3.9.5-8.4.1 libtiff3-32bit-3.9.5-8.4.1 libtiff3-debuginfo-32bit-3.9.5-8.4.1 - openSUSE 12.1 (ia64): libtiff3-debuginfo-x86-3.9.5-8.4.1 libtiff3-x86-3.9.5-8.4.1 - openSUSE 11.4 (i586 x86_64): libtiff-devel-3.9.4-3.25.1 libtiff3-3.9.4-3.25.1 libtiff3-debuginfo-3.9.4-3.25.1 tiff-3.9.4-3.25.1 tiff-debuginfo-3.9.4-3.25.1 tiff-debugsource-3.9.4-3.25.1 - openSUSE 11.4 (x86_64): libtiff-devel-32bit-3.9.4-3.25.1 libtiff3-32bit-3.9.4-3.25.1 libtiff3-debuginfo-32bit-3.9.4-3.25.1 - openSUSE 11.4 (ia64): libtiff3-debuginfo-x86-3.9.4-3.25.1 libtiff3-x86-3.9.4-3.25.1 References: http://support.novell.com/security/cve/CVE-2012-1173.html https://bugzilla.novell.com/753362

1 0

openSUSE-RU-2012:0535-1: NetworkManager-kde4: Update to version 0.9.0
by maintenance＠opensuse.org 19 Apr '12

19 Apr '12

openSUSE Recommended Update: NetworkManager-kde4: Update to version 0.9.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0535-1 Rating: low References: Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This patch updates NetworkManager-kde4 to version 0.9.0 (this is actually newer than the git snapshot which had wrong versioning) bnc#755641 Fixes listed: * Fix "Last Used label resets to Never after a minute". * Use preferences-system-network as KCM icon. * Enable/Disable OK button when prompting user for secrets, and fix WEP key validator. * Use localized provider's name and plan in Mobile Connection Wizard. * Mark GSM password as NotRequired if it is empty. * Add warning messages to debug possible dangling pointer. * Fix wifi hidden network support. * Allow creating cdma connections when no cdma device is plugged. * Fix and workaround graphical artifacts caused by upgrading to KDE SC 4.8.0. * Use asynchronous DBus API in plasmoid and kded module Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-233 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): NetworkManager-kde4-debugsource-0.9.1+0.9.0-1.6.1 NetworkManager-kde4-devel-0.9.1+0.9.0-1.6.1 NetworkManager-kde4-libs-0.9.1+0.9.0-1.6.1 NetworkManager-kde4-libs-debuginfo-0.9.1+0.9.0-1.6.1 NetworkManager-novellvpn-kde4-0.9.1+0.9.0-1.6.1 NetworkManager-novellvpn-kde4-debuginfo-0.9.1+0.9.0-1.6.1 NetworkManager-openconnect-kde4-0.9.1+0.9.0-1.6.1 NetworkManager-openconnect-kde4-debuginfo-0.9.1+0.9.0-1.6.1 NetworkManager-openvpn-kde4-0.9.1+0.9.0-1.6.1 NetworkManager-openvpn-kde4-debuginfo-0.9.1+0.9.0-1.6.1 NetworkManager-pptp-kde4-0.9.1+0.9.0-1.6.1 NetworkManager-pptp-kde4-debuginfo-0.9.1+0.9.0-1.6.1 NetworkManager-strongswan-kde4-0.9.1+0.9.0-1.6.1 NetworkManager-strongswan-kde4-debuginfo-0.9.1+0.9.0-1.6.1 NetworkManager-vpnc-kde4-0.9.1+0.9.0-1.6.1 NetworkManager-vpnc-kde4-debuginfo-0.9.1+0.9.0-1.6.1 plasmoid-networkmanagement-0.9.1+0.9.0-1.6.1 plasmoid-networkmanagement-debuginfo-0.9.1+0.9.0-1.6.1 - openSUSE 12.1 (noarch): NetworkManager-kde4-libs-lang-0.9.1+0.9.0-1.6.1 References:

1 0

openSUSE-RU-2012:0534-1: udev: prevent segfault on slow clocks (bnc#738604)
by maintenance＠opensuse.org 19 Apr '12

19 Apr '12

openSUSE Recommended Update: udev: prevent segfault on slow clocks (bnc#738604) ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0534-1 Rating: low References: #738604 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udev update fixes: - Prevent segfault on slow clocks (bnc#738604) added: prevent-segfault-in-slow-clocks.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-231 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libgudev-1_0-0-173-3.6.1 libgudev-1_0-0-debuginfo-173-3.6.1 libgudev-1_0-devel-173-3.6.1 libudev-devel-173-3.6.1 libudev0-173-3.6.1 libudev0-debuginfo-173-3.6.1 udev-173-3.6.1 udev-debuginfo-173-3.6.1 udev-debugsource-173-3.6.1 - openSUSE 12.1 (x86_64): libgudev-1_0-0-32bit-173-3.6.1 libgudev-1_0-0-debuginfo-32bit-173-3.6.1 libudev0-32bit-173-3.6.1 libudev0-debuginfo-32bit-173-3.6.1 - openSUSE 12.1 (ia64): libgudev-1_0-0-debuginfo-x86-173-3.6.1 libgudev-1_0-0-x86-173-3.6.1 libudev0-debuginfo-x86-173-3.6.1 libudev0-x86-173-3.6.1 References: https://bugzilla.novell.com/738604

1 0

openSUSE-RU-2012:0533-1: evolution stack update from version 3.2.1 to 3.2.3
by maintenance＠opensuse.org 19 Apr '12

19 Apr '12

openSUSE Recommended Update: evolution stack update from version 3.2.1 to 3.2.3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0533-1 Rating: low References: #746973 #754094 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for the evolution stack: - evolution: - Update to version 3.2.3 (bnc#754094): - Bug fixed: bgo#561696, bgo#578245, bgo#638810, bgo#641154, bgo#657374, bgo#661043, bgo#662789, bgo#663615, bgo#664016, bgo#664018, bgo#664370, bgo#664654, bgo#665123, bgo#666341, bgo#666490. - Updated translations - Changes from version 3.2.2: - Bug fixed: bgo#659736, bgo#663748, bgo#662589, bgo#660782, bgo#662742, bgo#660738, bgo#616981, bgo#661409, bgo#661549, bgo#688711, bgo#576478, bgo#660721, bgo#661542, bgo#661434, bgo#660829, bgo#660861, bgo#660850, bgo#660782, bgo#659876, bgo#658066, bgo#660799, bgo#659486, bgo#659517, bgo#659726, bgo#659874. - Crash fixes for certificate handling - Drop evolution-text-colour.patch (merged upstream) - Add evolution-fix-crash-searching-all-accounts.patch: fix crash - when searching all accounts (bgo#663294). - Add xz to BuildRequires. - Add evolution-text-colour.patch: fix broken text colour highlighting (bgo#660738). - evolution-groupwise: - Add evolution-groupwise-fix-crash.patch: fix crash in groupwise plugin (bgo#667359) (bnc#754094). - Update to version 3.2.2: - bgo#651453: Missing groupwise features - bgo#651465: event gets shifted by 5:30 hrs - bgo#656273: Groupwise addressbook doesn't work -Add xz to BuildRequires. - evolution-data-server: -update to 3.2.3: - Bugs fixed: bgo#638810, bgo##652173, bgo#661743, bgo#662068, bgo#665253, bgo#666757. - Preload all built-in timezones in libical on calendar start. - Updated translations - Add xz as BuildRequires. -update to 3.2.2: - Bugs fixed: bgo#660972, bgo#662473, bgo#659736, bgo#655167, bgo#662524, bgo#662643, bgo#660870, bgo#660656, bgo#661549, bgo#661432, bgo#660829, bgo#660615, bgo#660533, bgo#620382, bgo#660246. - Updated translations. - evolution-ews: - Add back change-compiler-flag-dimstar.patch, it fixes the directory where .mo files get installed. - Update to version 3.2.3 (bnc#754094): - Bug fixes: bgo#664116, bgo#664637, bgo#665065, bgo#665229, - Changes from version 3.2.2: - Bug fixes: bgo#661972 - Drop base-version-changed.patch and change-compiler-flag-dimstar.patch. - Remove gnome-common from BuildRequires. - gtkhtml: - Update to version 4.2.3 (bnc#754094): - build fixes - Changes from version 4.2.2: - Fix crash in html_text_prepare_attrs (bgo#626922). - Updated translations. - Add xz to BuildRequires. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-230 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): evolution-3.2.3-2.5.1 evolution-data-server-3.2.3-2.5.1 evolution-data-server-debuginfo-3.2.3-2.5.1 evolution-data-server-debugsource-3.2.3-2.5.1 evolution-data-server-devel-3.2.3-2.5.1 evolution-data-server-doc-3.2.3-2.5.1 evolution-debuginfo-3.2.3-2.5.1 evolution-debugsource-3.2.3-2.5.1 evolution-devel-3.2.3-2.5.1 evolution-ews-3.2.3-2.4.1 evolution-ews-debuginfo-3.2.3-2.4.1 evolution-ews-debugsource-3.2.3-2.4.1 evolution-ews-devel-3.2.3-2.4.1 evolution-groupwise-3.2.3-2.4.3 evolution-groupwise-debuginfo-3.2.3-2.4.3 evolution-groupwise-debugsource-3.2.3-2.4.3 evolution-groupwise-devel-3.2.3-2.4.3 evolution-mono-plugins-3.2.3-2.5.1 evolution-mono-plugins-debuginfo-3.2.3-2.5.1 evolution-python-plugins-3.2.3-2.5.1 evolution-python-plugins-debuginfo-3.2.3-2.5.1 glade-catalog-evolution-3.2.3-2.5.1 glade-catalog-gtkhtml-4.2.3-2.4.1 glade-catalog-gtkhtml-debuginfo-4.2.3-2.4.1 gtkhtml-debugsource-4.2.3-2.4.1 gtkhtml-devel-4.2.3-2.4.1 gtkhtml-devel-debuginfo-4.2.3-2.4.1 libcamel-1_2-29-3.2.3-2.5.1 libcamel-1_2-29-debuginfo-3.2.3-2.5.1 libebackend-1_2-1-3.2.3-2.5.1 libebackend-1_2-1-debuginfo-3.2.3-2.5.1 libebook-1_2-12-3.2.3-2.5.1 libebook-1_2-12-debuginfo-3.2.3-2.5.1 libecal-1_2-10-3.2.3-2.5.1 libecal-1_2-10-debuginfo-3.2.3-2.5.1 libedata-book-1_2-11-3.2.3-2.5.1 libedata-book-1_2-11-debuginfo-3.2.3-2.5.1 libedata-cal-1_2-13-3.2.3-2.5.1 libedata-cal-1_2-13-debuginfo-3.2.3-2.5.1 libedataserver-1_2-15-3.2.3-2.5.1 libedataserver-1_2-15-debuginfo-3.2.3-2.5.1 libedataserverui-3_0-1-3.2.3-2.5.1 libedataserverui-3_0-1-debuginfo-3.2.3-2.5.1 libeews-1_2-0-3.2.3-2.4.1 libeews-1_2-0-debuginfo-3.2.3-2.4.1 libegroupwise-1_2-13-3.2.3-2.4.3 libegroupwise-1_2-13-debuginfo-3.2.3-2.4.3 libewsutils0-3.2.3-2.4.1 libewsutils0-debuginfo-3.2.3-2.4.1 libgtkhtml-4_0-0-4.2.3-2.4.1 libgtkhtml-4_0-0-debuginfo-4.2.3-2.4.1 libgtkhtml-editor-4_0-0-4.2.3-2.4.1 libgtkhtml-editor-4_0-0-debuginfo-4.2.3-2.4.1 liblzx0-3.2.3-2.4.1 liblzx0-debuginfo-3.2.3-2.4.1 - openSUSE 12.1 (x86_64): libcamel-1_2-29-32bit-3.2.3-2.5.1 libcamel-1_2-29-debuginfo-32bit-3.2.3-2.5.1 libebackend-1_2-1-32bit-3.2.3-2.5.1 libebackend-1_2-1-debuginfo-32bit-3.2.3-2.5.1 libebook-1_2-12-32bit-3.2.3-2.5.1 libebook-1_2-12-debuginfo-32bit-3.2.3-2.5.1 libecal-1_2-10-32bit-3.2.3-2.5.1 libecal-1_2-10-debuginfo-32bit-3.2.3-2.5.1 libedata-book-1_2-11-32bit-3.2.3-2.5.1 libedata-book-1_2-11-debuginfo-32bit-3.2.3-2.5.1 libedata-cal-1_2-13-32bit-3.2.3-2.5.1 libedata-cal-1_2-13-debuginfo-32bit-3.2.3-2.5.1 libedataserver-1_2-15-32bit-3.2.3-2.5.1 libedataserver-1_2-15-debuginfo-32bit-3.2.3-2.5.1 libedataserverui-3_0-1-32bit-3.2.3-2.5.1 libedataserverui-3_0-1-debuginfo-32bit-3.2.3-2.5.1 libgtkhtml-4_0-0-32bit-4.2.3-2.4.1 libgtkhtml-4_0-0-debuginfo-32bit-4.2.3-2.4.1 libgtkhtml-editor-4_0-0-32bit-4.2.3-2.4.1 libgtkhtml-editor-4_0-0-debuginfo-32bit-4.2.3-2.4.1 - openSUSE 12.1 (noarch): evolution-data-server-lang-3.2.3-2.5.1 evolution-ews-lang-3.2.3-2.4.1 evolution-lang-3.2.3-2.5.1 gtkhtml-4_0-lang-4.2.3-2.4.1 - openSUSE 12.1 (ia64): libcamel-1_2-29-debuginfo-x86-3.2.3-2.5.1 libcamel-1_2-29-x86-3.2.3-2.5.1 libebackend-1_2-1-debuginfo-x86-3.2.3-2.5.1 libebackend-1_2-1-x86-3.2.3-2.5.1 libebook-1_2-12-debuginfo-x86-3.2.3-2.5.1 libebook-1_2-12-x86-3.2.3-2.5.1 libecal-1_2-10-debuginfo-x86-3.2.3-2.5.1 libecal-1_2-10-x86-3.2.3-2.5.1 libedata-book-1_2-11-debuginfo-x86-3.2.3-2.5.1 libedata-book-1_2-11-x86-3.2.3-2.5.1 libedata-cal-1_2-13-debuginfo-x86-3.2.3-2.5.1 libedata-cal-1_2-13-x86-3.2.3-2.5.1 libedataserver-1_2-15-debuginfo-x86-3.2.3-2.5.1 libedataserver-1_2-15-x86-3.2.3-2.5.1 libedataserverui-3_0-1-debuginfo-x86-3.2.3-2.5.1 libedataserverui-3_0-1-x86-3.2.3-2.5.1 libgtkhtml-4_0-0-debuginfo-x86-4.2.3-2.4.1 libgtkhtml-4_0-0-x86-4.2.3-2.4.1 libgtkhtml-editor-4_0-0-debuginfo-x86-4.2.3-2.4.1 libgtkhtml-editor-4_0-0-x86-4.2.3-2.4.1 References: https://bugzilla.novell.com/746973 https://bugzilla.novell.com/754094

1 0

openSUSE-RU-2012:0532-1: net-snmp: Update to fix various bugs
by maintenance＠opensuse.org 19 Apr '12

19 Apr '12

openSUSE Recommended Update: net-snmp: Update to fix various bugs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0532-1 Rating: low References: #670789 #707636 #715199 #750704 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update of net-snmp fixes the following bugs: - fix agent crash when reloading a subagent (AgentX) during a query (bnc#670789) - update copyright notice of AGENT.txt allowing us to redistribute the file in our package (from Dave Shield) (bnc#750704) - avoid an unnecessary stop/start cycle in the agent after log rotation (bnc#707636) - add OCFS2 to the list of known file systems (bnc#715199) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-232 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libsnmp30-5.7.1-3.5.1 libsnmp30-debuginfo-5.7.1-3.5.1 net-snmp-5.7.1-3.5.1 net-snmp-debuginfo-5.7.1-3.5.1 net-snmp-debugsource-5.7.1-3.5.1 net-snmp-devel-5.7.1-3.5.1 perl-SNMP-5.7.1-3.5.1 perl-SNMP-debuginfo-5.7.1-3.5.1 snmp-mibs-5.7.1-3.5.1 - openSUSE 12.1 (x86_64): libsnmp30-32bit-5.7.1-3.5.1 libsnmp30-debuginfo-32bit-5.7.1-3.5.1 net-snmp-devel-32bit-5.7.1-3.5.1 - openSUSE 12.1 (ia64): libsnmp30-debuginfo-x86-5.7.1-3.5.1 libsnmp30-x86-5.7.1-3.5.1 References: https://bugzilla.novell.com/670789 https://bugzilla.novell.com/707636 https://bugzilla.novell.com/715199 https://bugzilla.novell.com/750704

1 0

openSUSE-RU-2012:0523-1: important: pm-utils: additional fix for bnc#751887
by maintenance＠opensuse.org 18 Apr '12

18 Apr '12

openSUSE Recommended Update: pm-utils: additional fix for bnc#751887 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0523-1 Rating: important References: Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issue for pm-utils: - Fixed 06autofs, which got stuck waiting for stdin and made suspend impossible Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-229 - openSUSE 11.4: zypper in -t patch openSUSE-2012-229 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): pm-utils-1.4.1-12.20.1 pm-utils-debuginfo-1.4.1-12.20.1 pm-utils-debugsource-1.4.1-12.20.1 pm-utils-ndiswrapper-1.4.1-12.20.1 - openSUSE 11.4 (i586 x86_64): pm-utils-1.4.1-5.27.1 pm-utils-debuginfo-1.4.1-5.27.1 pm-utils-debugsource-1.4.1-5.27.1 pm-utils-ndiswrapper-1.4.1-5.27.1 References:

1 0

openSUSE-RU-2012:0520-1: moderate: update for MozillaThunderbird
by maintenance＠opensuse.org 18 Apr '12

18 Apr '12

openSUSE Recommended Update: update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0520-1 Rating: moderate References: #755060 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: - update to Thunderbird 11.0.1 (bnc#755060) * Fixing an issue where filters can get messed up (bmo#735940) * Fixes a hang when switching IMAP folders, or doing other imap functions (bmo#733731) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-227 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): MozillaThunderbird-11.0.1-33.17.3 MozillaThunderbird-buildsymbols-11.0.1-33.17.3 MozillaThunderbird-debuginfo-11.0.1-33.17.3 MozillaThunderbird-debugsource-11.0.1-33.17.3 MozillaThunderbird-devel-11.0.1-33.17.3 MozillaThunderbird-translations-common-11.0.1-33.17.3 MozillaThunderbird-translations-other-11.0.1-33.17.3 enigmail-1.4.0+11.0.1-33.17.3 enigmail-debuginfo-1.4.0+11.0.1-33.17.3 References: https://bugzilla.novell.com/755060

1 0

openSUSE-RU-2012:0519-1: - fix miscalculation in sfdisk on ix86 (bnc#754789)
by maintenance＠opensuse.org 18 Apr '12

18 Apr '12

openSUSE Recommended Update: - fix miscalculation in sfdisk on ix86 (bnc#754789) ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0519-1 Rating: low References: #754789 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: - fix miscalculation in sfdisk on ix86 (bnc#754789) - add sfdisk-fix-calculation-due-to-type-mismatch.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-228 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libblkid-devel-2.20.1-1.11.1 libblkid1-2.20.1-1.11.1 libblkid1-debuginfo-2.20.1-1.11.1 libmount-devel-2.20.1-1.11.1 libmount1-2.20.1-1.11.1 libmount1-debuginfo-2.20.1-1.11.1 libuuid-devel-2.20.1-1.11.1 libuuid1-2.20.1-1.11.1 libuuid1-debuginfo-2.20.1-1.11.1 util-linux-2.20.1-1.11.1 util-linux-debuginfo-2.20.1-1.11.1 util-linux-debugsource-2.20.1-1.11.1 uuidd-2.20.1-1.11.1 uuidd-debuginfo-2.20.1-1.11.1 - openSUSE 12.1 (x86_64): libblkid-devel-32bit-2.20.1-1.11.1 libblkid1-32bit-2.20.1-1.11.1 libblkid1-debuginfo-32bit-2.20.1-1.11.1 libmount-devel-32bit-2.20.1-1.11.1 libmount1-32bit-2.20.1-1.11.1 libmount1-debuginfo-32bit-2.20.1-1.11.1 libuuid-devel-32bit-2.20.1-1.11.1 libuuid1-32bit-2.20.1-1.11.1 libuuid1-debuginfo-32bit-2.20.1-1.11.1 - openSUSE 12.1 (noarch): util-linux-lang-2.20.1-1.11.1 - openSUSE 12.1 (ia64): libblkid1-debuginfo-x86-2.20.1-1.11.1 libblkid1-x86-2.20.1-1.11.1 libmount1-debuginfo-x86-2.20.1-1.11.1 libmount1-x86-2.20.1-1.11.1 libuuid1-debuginfo-x86-2.20.1-1.11.1 libuuid1-x86-2.20.1-1.11.1 References: https://bugzilla.novell.com/754789

1 0

openSUSE-SU-2012:0512-1: important: update for acroread
by opensuse-security＠opensuse.org 16 Apr '12

16 Apr '12

openSUSE Security Update: update for acroread ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0512-1 Rating: important References: #756574 Cross-References: CVE-2012-0774 CVE-2012-0775 CVE-2012-0777 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: Acroread update to version 9.5.1 to fix several security issues Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-226 - openSUSE 11.4: zypper in -t patch openSUSE-2012-226 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): acroread-cmaps-9.4.1-3.10.1 acroread-fonts-ja-9.4.1-3.10.1 acroread-fonts-ko-9.4.1-3.10.1 acroread-fonts-zh_CN-9.4.1-3.10.1 acroread-fonts-zh_TW-9.4.1-3.10.1 - openSUSE 12.1 (i586): acroread-9.5.1-3.10.1 - openSUSE 11.4 (i586): acroread-9.5.1-0.7.1 References: http://support.novell.com/security/cve/CVE-2012-0774.html http://support.novell.com/security/cve/CVE-2012-0775.html http://support.novell.com/security/cve/CVE-2012-0777.html https://bugzilla.novell.com/756574

1 0

openSUSE-RU-2012:0511-1: python-wxWidgets: update to version 2.8.12
by maintenance＠opensuse.org 16 Apr '12

16 Apr '12

openSUSE Recommended Update: python-wxWidgets: update to version 2.8.12 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0511-1 Rating: low References: #740950 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for python-wxWidgets: - 740950: requires wxWidgets package of the same release. Upgrade to python-wxWidgets-2.8.12.1 compatible with wxWidgets-2.8.12. - Update to version 2.8.12.1: * Compatible with wxWidgets-2.8.12 (bnc#740950). * Added ToolTipString property to wx.Window. * Bug and typo fixes. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-225 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): python-wxWidgets-2.8.12.1-10.4.1 python-wxWidgets-debuginfo-2.8.12.1-10.4.1 python-wxWidgets-debugsource-2.8.12.1-10.4.1 python-wxWidgets-devel-2.8.12.1-10.4.1 python-wxWidgets-lang-2.8.12.1-10.4.1 References: https://bugzilla.novell.com/740950

1 0

openSUSE-SU-2012:0508-1: critical: update for samba
by opensuse-security＠opensuse.org 16 Apr '12

16 Apr '12

openSUSE Security Update: update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0508-1 Rating: critical References: #752797 Cross-References: CVE-2012-1182 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Samba upgrade to version 3.6.3 fixes the following security issue: - PIDL based autogenerated code allows overwriting beyond of allocated array. Remove attackers could exploit that to execute arbitrary code as root (CVE-2012-1182, bso#8815, bnc#752797) Please see /usr/share/doc/packages/samba/WHATSNEW.txt from the samba-doc package or the package change log (rpm -q --changelog samba) for more details of the version update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-224 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): ldapsmb-1.34b-112.1 libldb-devel-1.0.2-112.1 libldb1-1.0.2-112.1 libldb1-debuginfo-1.0.2-112.1 libnetapi-devel-3.6.3-112.1 libnetapi0-3.6.3-112.1 libnetapi0-debuginfo-3.6.3-112.1 libsmbclient-devel-3.6.3-112.1 libsmbclient0-3.6.3-112.1 libsmbclient0-debuginfo-3.6.3-112.1 libsmbsharemodes-devel-3.6.3-112.1 libsmbsharemodes0-3.6.3-112.1 libsmbsharemodes0-debuginfo-3.6.3-112.1 libtalloc-devel-2.0.5-112.1 libtalloc2-2.0.5-112.1 libtalloc2-debuginfo-2.0.5-112.1 libtdb-devel-1.2.9-112.1 libtdb1-1.2.9-112.1 libtdb1-debuginfo-1.2.9-112.1 libtevent-devel-0.9.11-112.1 libtevent0-0.9.11-112.1 libtevent0-debuginfo-0.9.11-112.1 libwbclient-devel-3.6.3-112.1 libwbclient0-3.6.3-112.1 libwbclient0-debuginfo-3.6.3-112.1 samba-3.6.3-112.1 samba-client-3.6.3-112.1 samba-client-debuginfo-3.6.3-112.1 samba-debuginfo-3.6.3-112.1 samba-debugsource-3.6.3-112.1 samba-devel-3.6.3-112.1 samba-krb-printing-3.6.3-112.1 samba-krb-printing-debuginfo-3.6.3-112.1 samba-winbind-3.6.3-112.1 samba-winbind-debuginfo-3.6.3-112.1 - openSUSE 11.4 (x86_64): libldb1-32bit-1.0.2-112.1 libldb1-debuginfo-32bit-1.0.2-112.1 libsmbclient0-32bit-3.6.3-112.1 libsmbclient0-debuginfo-32bit-3.6.3-112.1 libtalloc2-32bit-2.0.5-112.1 libtalloc2-debuginfo-32bit-2.0.5-112.1 libtdb1-32bit-1.2.9-112.1 libtdb1-debuginfo-32bit-1.2.9-112.1 libtevent0-32bit-0.9.11-112.1 libtevent0-debuginfo-32bit-0.9.11-112.1 libwbclient0-32bit-3.6.3-112.1 libwbclient0-debuginfo-32bit-3.6.3-112.1 samba-32bit-3.6.3-112.1 samba-client-32bit-3.6.3-112.1 samba-client-debuginfo-32bit-3.6.3-112.1 samba-debuginfo-32bit-3.6.3-112.1 samba-winbind-32bit-3.6.3-112.1 samba-winbind-debuginfo-32bit-3.6.3-112.1 - openSUSE 11.4 (noarch): samba-doc-3.6.3-112.1 - openSUSE 11.4 (ia64): libldb1-debuginfo-x86-1.0.2-112.1 libldb1-x86-1.0.2-112.1 libsmbclient0-debuginfo-x86-3.6.3-112.1 libsmbclient0-x86-3.6.3-112.1 libtalloc2-debuginfo-x86-2.0.5-112.1 libtalloc2-x86-2.0.5-112.1 libtdb1-debuginfo-x86-1.2.9-112.1 libtdb1-x86-1.2.9-112.1 libtevent0-debuginfo-x86-0.9.11-112.1 libtevent0-x86-0.9.11-112.1 libwbclient0-debuginfo-x86-3.6.3-112.1 libwbclient0-x86-3.6.3-112.1 samba-client-debuginfo-x86-3.6.3-112.1 samba-client-x86-3.6.3-112.1 samba-debuginfo-x86-3.6.3-112.1 samba-winbind-debuginfo-x86-3.6.3-112.1 samba-winbind-x86-3.6.3-112.1 samba-x86-3.6.3-112.1 References: http://support.novell.com/security/cve/CVE-2012-1182.html https://bugzilla.novell.com/752797

1 0

openSUSE-SU-2012:0507-1: critical: update for samba
by opensuse-security＠opensuse.org 16 Apr '12

16 Apr '12

openSUSE Security Update: update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0507-1 Rating: critical References: #741854 #746825 #747934 #751454 #752797 Cross-References: CVE-2012-0870 CVE-2012-1182 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: - Add the ldapsmb sources as else patches against them have no chance to apply. - Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe- cution as the "root" user; PIDL based autogenerated code allows overwriting beyond of allocated array; CVE-2012-1182; (bso#8815); (bnc#752797). - s3-winbindd: Only use SamLogonEx when we can get unencrypted session keys; (bso#8599). - Correctly handle DENY ACEs when privileges apply; (bso#8797). - s3:smb2_server: fix a logic error, we should sign non guest sessions; (bso8749). - Allow vfs_aio_pthread to build as a static module; (bso#8723). - s3:dbwrap_ctdb: return the number of records in db_ctdb_traverse() for persistent dbs; (#bso8527). - s3: segfault in dom_sid_compare(bso#8567). - Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER; (bso#8768). - s3-winbindd: Close netlogon connection if the status returned by the NetrSamLogonEx call is timeout in the pam_auth_crap path; (bso#8771). - s3-winbindd: set the can_do_validation6 also for trusted domain; (bso#8599). - Fix problem when calculating the share security mask, take priviliges into account for the connecting user; (bso#8784). - Fix crash in dcerpc_lsa_lookup_sids_noalloc() with over 1000 groups; (bso#8807); (bnc#751454). - Remove obsoleted Authors lines from spec file for post-11.2 systems. - Make ldapsmb build with Fedora 15 and 16; (bso#8783). - BuildRequire libuuid-devel for post-11.0 and other systems. - Define missing python macros for non SUSE systems. - PreReq to fillup_prereq and insserv_prereq only on SUSE systems. - Always use cifstab instead of smbfstab on non SUSE systems. - Ensure AndX offsets are increasing strictly monotonically in pre-3.4 versions; CVE-2012-0870; (bnc#747934). - Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY; (bso#8760); (bnc#741854). - s3-printing: fix crash in printer_list_set_printer(); (bso#8762); (bnc#746825). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-223 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): ldapsmb-1.34b-34.11.1 libldb-devel-1.0.2-34.11.1 libldb1-1.0.2-34.11.1 libldb1-debuginfo-1.0.2-34.11.1 libnetapi-devel-3.6.3-34.11.1 libnetapi0-3.6.3-34.11.1 libnetapi0-debuginfo-3.6.3-34.11.1 libsmbclient-devel-3.6.3-34.11.1 libsmbclient0-3.6.3-34.11.1 libsmbclient0-debuginfo-3.6.3-34.11.1 libsmbsharemodes-devel-3.6.3-34.11.1 libsmbsharemodes0-3.6.3-34.11.1 libsmbsharemodes0-debuginfo-3.6.3-34.11.1 libtalloc-devel-2.0.5-34.11.1 libtalloc2-2.0.5-34.11.1 libtalloc2-debuginfo-2.0.5-34.11.1 libtdb-devel-1.2.9-34.11.1 libtdb1-1.2.9-34.11.1 libtdb1-debuginfo-1.2.9-34.11.1 libtevent-devel-0.9.11-34.11.1 libtevent0-0.9.11-34.11.1 libtevent0-debuginfo-0.9.11-34.11.1 libwbclient-devel-3.6.3-34.11.1 libwbclient0-3.6.3-34.11.1 libwbclient0-debuginfo-3.6.3-34.11.1 samba-3.6.3-34.11.1 samba-client-3.6.3-34.11.1 samba-client-debuginfo-3.6.3-34.11.1 samba-debuginfo-3.6.3-34.11.1 samba-debugsource-3.6.3-34.11.1 samba-devel-3.6.3-34.11.1 samba-krb-printing-3.6.3-34.11.1 samba-krb-printing-debuginfo-3.6.3-34.11.1 samba-winbind-3.6.3-34.11.1 samba-winbind-debuginfo-3.6.3-34.11.1 - openSUSE 12.1 (x86_64): libldb1-32bit-1.0.2-34.11.1 libldb1-debuginfo-32bit-1.0.2-34.11.1 libsmbclient0-32bit-3.6.3-34.11.1 libsmbclient0-debuginfo-32bit-3.6.3-34.11.1 libtalloc2-32bit-2.0.5-34.11.1 libtalloc2-debuginfo-32bit-2.0.5-34.11.1 libtdb1-32bit-1.2.9-34.11.1 libtdb1-debuginfo-32bit-1.2.9-34.11.1 libtevent0-32bit-0.9.11-34.11.1 libtevent0-debuginfo-32bit-0.9.11-34.11.1 libwbclient0-32bit-3.6.3-34.11.1 libwbclient0-debuginfo-32bit-3.6.3-34.11.1 samba-32bit-3.6.3-34.11.1 samba-client-32bit-3.6.3-34.11.1 samba-client-debuginfo-32bit-3.6.3-34.11.1 samba-debuginfo-32bit-3.6.3-34.11.1 samba-winbind-32bit-3.6.3-34.11.1 samba-winbind-debuginfo-32bit-3.6.3-34.11.1 - openSUSE 12.1 (noarch): samba-doc-3.6.3-34.11.1 - openSUSE 12.1 (ia64): libldb1-debuginfo-x86-1.0.2-34.11.1 libldb1-x86-1.0.2-34.11.1 libsmbclient0-debuginfo-x86-3.6.3-34.11.1 libsmbclient0-x86-3.6.3-34.11.1 libtalloc2-debuginfo-x86-2.0.5-34.11.1 libtalloc2-x86-2.0.5-34.11.1 libtdb1-debuginfo-x86-1.2.9-34.11.1 libtdb1-x86-1.2.9-34.11.1 libtevent0-debuginfo-x86-0.9.11-34.11.1 libtevent0-x86-0.9.11-34.11.1 libwbclient0-debuginfo-x86-3.6.3-34.11.1 libwbclient0-x86-3.6.3-34.11.1 samba-client-debuginfo-x86-3.6.3-34.11.1 samba-client-x86-3.6.3-34.11.1 samba-debuginfo-x86-3.6.3-34.11.1 samba-winbind-debuginfo-x86-3.6.3-34.11.1 samba-winbind-x86-3.6.3-34.11.1 samba-x86-3.6.3-34.11.1 References: http://support.novell.com/security/cve/CVE-2012-0870.html http://support.novell.com/security/cve/CVE-2012-1182.html https://bugzilla.novell.com/741854 https://bugzilla.novell.com/746825 https://bugzilla.novell.com/747934 https://bugzilla.novell.com/751454 https://bugzilla.novell.com/752797

1 0

openSUSE-SU-2012:0494-1: moderate: update for phpMyAdmin
by opensuse-security＠opensuse.org 12 Apr '12

12 Apr '12

openSUSE Security Update: update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0494-1 Rating: moderate References: #755211 Cross-References: CVE-2012-1902 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - update to 3.4.10.2 - [security] Fixed local path disclosure vulnerability, see PMASA-2012-2 http://www.phpmyadmin.net/home_page/security/PMASA-2012-2.ph p Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-216 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): phpMyAdmin-3.4.10.2-1.24.1 References: http://support.novell.com/security/cve/CVE-2012-1902.html https://bugzilla.novell.com/755211

1 0

openSUSE-SU-2012:0493-1: update to 5.0.4, fix for bnc#754694 (CVE-2012-1600)
by opensuse-security＠opensuse.org 12 Apr '12

12 Apr '12

openSUSE Security Update: update to 5.0.4, fix for bnc#754694 (CVE-2012-1600) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0493-1 Rating: low References: #721976 #754694 Cross-References: CVE-2008-5587 CVE-2011-3598 CVE-2012-1600 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: update to 5.0.4, fix for bnc#754694 (CVE-2012-1600) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-219 - openSUSE 11.4: zypper in -t patch openSUSE-2012-219 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): phpPgAdmin-5.0.4-4.1 - openSUSE 11.4 (noarch): phpPgAdmin-5.0.4-66.1 References: http://support.novell.com/security/cve/CVE-2008-5587.html http://support.novell.com/security/cve/CVE-2011-3598.html http://support.novell.com/security/cve/CVE-2012-1600.html https://bugzilla.novell.com/721976 https://bugzilla.novell.com/754694

1 0

openSUSE-SU-2012:0492-1: moderate: chromium for Chromium and V8 to 18.0.1025.142
by opensuse-security＠opensuse.org 12 Apr '12

12 Apr '12

openSUSE Security Update: chromium for Chromium and V8 to 18.0.1025.142 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0492-1 Rating: moderate References: Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Security update for Chromium and V8 to 18.0.1025.142. Following bugs are listed in the Chrome changelog: - [$500] [109574<https://code.google.com/p/chromium/issues/detail?id= 109574>] Medium CVE-2011-3058: Bad interaction possibly leading to XSS in EUC-JP. Credit to Masato Kinugawa. - [$500] [112317<https://code.google.com/p/chromium/issues/detail?id= 112317>] Medium CVE-2011-3059: Out-of-bounds read in SVG text handling. Credit to Arthur Gerkis. - [$500] [114056<https://code.google.com/p/chromium/issues/detail?id= 114056>] Medium CVE-2011-3060: Out-of-bounds read in text fragment handling. Credit to miaubiz. - [116398 <https://code.google.com/p/chromium/issues/detail?id=116398> ] Medium CVE-2011-3061: SPDY proxy certificate checking error. Credit to Leonidas Kontothanassis of Google. - [116524 <https://code.google.com/p/chromium/issues/detail?id=116524> ] High CVE-2011-3062: Off-by-one in OpenType Sanitizer. Credit to Mateusz Jurczyk of the Google Security Team. - [117417 <https://code.google.com/p/chromium/issues/detail?id=117417> ] Low CVE-2011-3063: Validate navigation requests from the renderer more carefully. Credit to kuzzcc, Sergey Glazunov, PinkiePie and scarybeasts (Google Chrome Security Team). - [$1000] [117471<https://code.google.com/p/chromium/issues/detail?id= 117471>] High CVE-2011-3064: Use-after-free in SVG clipping. Credit to Atte Kettunen of OUSPG. - [$1000] [117588<https://code.google.com/p/chromium/issues/detail?id= 117588>] High CVE-2011-3065: Memory corruption in Skia. Credit to Omair. - [$500] [117794<https://code.google.com/p/chromium/issues/detail?id= 117794>] Medium CVE-2011-3057: Invalid read in v8. Credit to Christian Holler. The bugs [112317<https://code.google.com/p/chromium/issues/detail?id= 112317>], [114056 <https://code.google.com/p/chromium/issues/detail?id=114056> ] and [ 117471 <https://code.google.com/p/chromium/issues/detail?id=117471> ] were detected using AddressSanitizer<http://code.google.com/p/address-sanitizer/ wiki/AddressSanitizer> . We'd also like to thank miaubiz, Chamal de Silva, Atte Kettunen of OUSPG, Aki Helin of OUSPG and Arthur Gerkis for working with us during the development cycle and preventing security regressions from ever reaching the stable channel. $8000 of additional rewards were issued for this awesomeness Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-215 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): chromium-20.0.1094.0-1.17.2 chromium-debuginfo-20.0.1094.0-1.17.2 chromium-debugsource-20.0.1094.0-1.17.2 chromium-desktop-gnome-20.0.1094.0-1.17.2 chromium-desktop-kde-20.0.1094.0-1.17.2 chromium-suid-helper-20.0.1094.0-1.17.2 chromium-suid-helper-debuginfo-20.0.1094.0-1.17.2 libv8-3-3.10.0.5-1.21.1 libv8-3-debuginfo-3.10.0.5-1.21.1 v8-debugsource-3.10.0.5-1.21.1 v8-devel-3.10.0.5-1.21.1 v8-private-headers-devel-3.10.0.5-1.21.1 References:

1 0

openSUSE-SU-2012:0491-1: moderate: update for libpng
by opensuse-security＠opensuse.org 12 Apr '12

12 Apr '12

openSUSE Security Update: update for libpng ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0491-1 Rating: moderate References: #754745 Cross-References: CVE-2011-3048 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: specially crafted png files could cause a memory corruption in libpng's png_set_text_2() Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-217 - openSUSE 11.4: zypper in -t patch openSUSE-2012-217 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libpng12-0-1.2.49-9.9.1 libpng12-0-debuginfo-1.2.49-9.9.1 libpng12-compat-devel-1.2.49-9.9.1 libpng12-debugsource-1.2.49-9.9.1 libpng12-devel-1.2.49-9.9.1 libpng14-14-1.4.11-3.9.1 libpng14-14-debuginfo-1.4.11-3.9.1 libpng14-compat-devel-1.4.11-3.9.1 libpng14-debugsource-1.4.11-3.9.1 libpng14-devel-1.4.11-3.9.1 - openSUSE 12.1 (x86_64): libpng12-0-32bit-1.2.49-9.9.1 libpng12-0-debuginfo-32bit-1.2.49-9.9.1 libpng12-compat-devel-32bit-1.2.49-9.9.1 libpng12-devel-32bit-1.2.49-9.9.1 libpng14-14-32bit-1.4.11-3.9.1 libpng14-14-debuginfo-32bit-1.4.11-3.9.1 libpng14-compat-devel-32bit-1.4.11-3.9.1 libpng14-devel-32bit-1.4.11-3.9.1 - openSUSE 12.1 (ia64): libpng12-0-debuginfo-x86-1.2.49-9.9.1 libpng12-0-x86-1.2.49-9.9.1 libpng14-14-debuginfo-x86-1.4.11-3.9.1 libpng14-14-x86-1.4.11-3.9.1 - openSUSE 11.4 (i586 x86_64): libpng12-0-1.2.49-16.1 libpng12-0-debuginfo-1.2.49-16.1 libpng12-compat-devel-1.2.49-16.1 libpng12-debugsource-1.2.49-16.1 libpng12-devel-1.2.49-16.1 libpng14-14-1.4.4-20.1 libpng14-14-debuginfo-1.4.4-20.1 libpng14-compat-devel-1.4.4-20.1 libpng14-debugsource-1.4.4-20.1 libpng14-devel-1.4.4-20.1 - openSUSE 11.4 (x86_64): libpng12-0-32bit-1.2.49-16.1 libpng12-0-debuginfo-32bit-1.2.49-16.1 libpng12-compat-devel-32bit-1.2.49-16.1 libpng12-devel-32bit-1.2.49-16.1 libpng14-14-32bit-1.4.4-20.1 libpng14-14-debuginfo-32bit-1.4.4-20.1 libpng14-compat-devel-32bit-1.4.4-20.1 libpng14-devel-32bit-1.4.4-20.1 - openSUSE 11.4 (ia64): libpng12-0-debuginfo-x86-1.2.49-16.1 libpng12-0-x86-1.2.49-16.1 libpng14-14-debuginfo-x86-1.4.4-20.1 libpng14-14-x86-1.4.4-20.1 References: http://support.novell.com/security/cve/CVE-2011-3048.html https://bugzilla.novell.com/754745

1 0

openSUSE-SU-2012:0490-1: moderate: update for taglib
by opensuse-security＠opensuse.org 12 Apr '12

12 Apr '12

openSUSE Security Update: update for taglib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0490-1 Rating: moderate References: #750689 #750690 #750691 #750693 Cross-References: CVE-2012-1107 CVE-2012-1108 CVE-2012-1584 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: Specially crafted ogg files could crash taglib Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-218 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libtag-devel-1.7-8.4.1 libtag1-1.7-8.4.1 libtag1-debuginfo-1.7-8.4.1 libtag_c0-1.7-8.4.1 libtag_c0-debuginfo-1.7-8.4.1 taglib-1.7-8.4.1 taglib-debugsource-1.7-8.4.1 - openSUSE 12.1 (x86_64): libtag1-32bit-1.7-8.4.1 libtag1-debuginfo-32bit-1.7-8.4.1 libtag_c0-32bit-1.7-8.4.1 libtag_c0-debuginfo-32bit-1.7-8.4.1 - openSUSE 12.1 (ia64): libtag1-debuginfo-x86-1.7-8.4.1 libtag1-x86-1.7-8.4.1 libtag_c0-debuginfo-x86-1.7-8.4.1 libtag_c0-x86-1.7-8.4.1 References: http://support.novell.com/security/cve/CVE-2012-1107.html http://support.novell.com/security/cve/CVE-2012-1108.html http://support.novell.com/security/cve/CVE-2012-1584.html https://bugzilla.novell.com/750689 https://bugzilla.novell.com/750690 https://bugzilla.novell.com/750691 https://bugzilla.novell.com/750693

1 0

openSUSE-SU-2012:0489-1: important: freetype2 update
by opensuse-security＠opensuse.org 12 Apr '12

12 Apr '12

openSUSE Security Update: freetype2 update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0489-1 Rating: important References: Cross-References: CVE-2012-1126 CVE-2012-1127 CVE-2012-1128 CVE-2012-1129 CVE-2012-1130 CVE-2012-1131 CVE-2012-1132 CVE-2012-1133 CVE-2012-1134 CVE-2012-1135 CVE-2012-1136 CVE-2012-1137 CVE-2012-1138 CVE-2012-1139 CVE-2012-1140 CVE-2012-1141 CVE-2012-1142 CVE-2012-1143 CVE-2012-1144 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: Specially crafted font files could cause buffer overflows in freetype Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-220 - openSUSE 11.4: zypper in -t patch openSUSE-2012-220 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): freetype2-debugsource-2.4.7-6.1 freetype2-devel-2.4.7-6.1 libfreetype6-2.4.7-6.1 libfreetype6-debuginfo-2.4.7-6.1 - openSUSE 12.1 (x86_64): freetype2-devel-32bit-2.4.7-6.1 libfreetype6-32bit-2.4.7-6.1 libfreetype6-debuginfo-32bit-2.4.7-6.1 - openSUSE 12.1 (ia64): libfreetype6-debuginfo-x86-2.4.7-6.1 libfreetype6-x86-2.4.7-6.1 - openSUSE 11.4 (i586 x86_64): freetype2-debugsource-2.4.4-7.24.1 freetype2-devel-2.4.4-7.24.1 libfreetype6-2.4.4-7.24.1 libfreetype6-debuginfo-2.4.4-7.24.1 - openSUSE 11.4 (x86_64): freetype2-devel-32bit-2.4.4-7.24.1 libfreetype6-32bit-2.4.4-7.24.1 libfreetype6-debuginfo-32bit-2.4.4-7.24.1 - openSUSE 11.4 (ia64): libfreetype6-debuginfo-x86-2.4.4-7.24.1 libfreetype6-x86-2.4.4-7.24.1 References: http://support.novell.com/security/cve/CVE-2012-1126.html http://support.novell.com/security/cve/CVE-2012-1127.html http://support.novell.com/security/cve/CVE-2012-1128.html http://support.novell.com/security/cve/CVE-2012-1129.html http://support.novell.com/security/cve/CVE-2012-1130.html http://support.novell.com/security/cve/CVE-2012-1131.html http://support.novell.com/security/cve/CVE-2012-1132.html http://support.novell.com/security/cve/CVE-2012-1133.html http://support.novell.com/security/cve/CVE-2012-1134.html http://support.novell.com/security/cve/CVE-2012-1135.html http://support.novell.com/security/cve/CVE-2012-1136.html http://support.novell.com/security/cve/CVE-2012-1137.html http://support.novell.com/security/cve/CVE-2012-1138.html http://support.novell.com/security/cve/CVE-2012-1139.html http://support.novell.com/security/cve/CVE-2012-1140.html http://support.novell.com/security/cve/CVE-2012-1141.html http://support.novell.com/security/cve/CVE-2012-1142.html http://support.novell.com/security/cve/CVE-2012-1143.html http://support.novell.com/security/cve/CVE-2012-1144.html

1 0

openSUSE-SU-2012:0488-1: update for file
by opensuse-security＠opensuse.org 12 Apr '12

12 Apr '12

openSUSE Security Update: update for file ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0488-1 Rating: low References: #753303 Cross-References: CVE-2012-1571 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: specially crafted CDF files could crash the "file" program Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-221 - openSUSE 11.4: zypper in -t patch openSUSE-2012-221 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): file-5.08-7.4.1 file-debuginfo-5.08-7.4.1 file-debugsource-5.08-7.4.1 file-devel-5.08-7.4.1 python-magic-5.08-7.4.1 - openSUSE 12.1 (x86_64): file-32bit-5.08-7.4.1 file-debuginfo-32bit-5.08-7.4.1 - openSUSE 11.4 (i586 x86_64): file-5.04-13.1 file-debuginfo-5.04-13.1 file-debugsource-5.04-13.1 file-devel-5.04-13.1 python-magic-5.04-13.1 python-magic-debuginfo-5.04-13.1 python-magic-debugsource-5.04-13.1 - openSUSE 11.4 (x86_64): file-32bit-5.04-13.1 file-debuginfo-32bit-5.04-13.1 References: http://support.novell.com/security/cve/CVE-2012-1571.html https://bugzilla.novell.com/753303

1 0

openSUSE-SU-2012:0487-1: update for python-pam
by opensuse-security＠opensuse.org 12 Apr '12

12 Apr '12

openSUSE Security Update: update for python-pam ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0487-1 Rating: low References: #751005 Cross-References: CVE-2012-1502 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: python-pam was prone to a double-free issue Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-222 - openSUSE 11.4: zypper in -t patch openSUSE-2012-222 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): python-pam-0.5.0-79.12.1 python-pam-debuginfo-0.5.0-79.12.1 python-pam-debugsource-0.5.0-79.12.1 - openSUSE 11.4 (i586 x86_64): python-pam-0.5.0-79.1 python-pam-debuginfo-0.5.0-79.1 python-pam-debugsource-0.5.0-79.1 References: http://support.novell.com/security/cve/CVE-2012-1502.html https://bugzilla.novell.com/751005

1 0

openSUSE-SU-2012:0480-1: update for postgresql
by opensuse-security＠opensuse.org 11 Apr '12

11 Apr '12

openSUSE Security Update: update for postgresql ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0480-1 Rating: low References: #701489 #749299 #749301 #749303 Cross-References: CVE-2011-2483 CVE-2012-0866 CVE-2012-0867 CVE-2012-0868 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: - Security and bugfix release 9.1.3: * Require execute permission on the trigger function for "CREATE TRIGGER" (CVE-2012-0866, bnc#749299). * Remove arbitrary limitation on length of common name in SSL certificates (CVE-2012-0867, bnc#749301). * Convert newlines to spaces in names written in pg_dump comments (CVE-2012-0868, bnc#749303). See the release notes for the rest of the changes: http://www.postgresql.org/docs/9.1/static/release-9-1-3.html /usr/share/doc/packages/postgresql/HISTORY Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-214 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libecpg6-9.1.3-3.7.2 libecpg6-debuginfo-9.1.3-3.7.2 libpq5-9.1.3-3.7.2 libpq5-debuginfo-9.1.3-3.7.2 postgresql-9.1.3-3.7.1 postgresql-contrib-9.1.3-3.7.1 postgresql-contrib-debuginfo-9.1.3-3.7.1 postgresql-debuginfo-9.1.3-3.7.1 postgresql-debugsource-9.1.3-3.7.1 postgresql-devel-9.1.3-3.7.2 postgresql-devel-debuginfo-9.1.3-3.7.2 postgresql-libs-debugsource-9.1.3-3.7.2 postgresql-plperl-9.1.3-3.7.1 postgresql-plperl-debuginfo-9.1.3-3.7.1 postgresql-plpython-9.1.3-3.7.1 postgresql-plpython-debuginfo-9.1.3-3.7.1 postgresql-pltcl-9.1.3-3.7.1 postgresql-pltcl-debuginfo-9.1.3-3.7.1 postgresql-server-9.1.3-3.7.1 postgresql-server-debuginfo-9.1.3-3.7.1 - openSUSE 12.1 (x86_64): libpq5-32bit-9.1.3-3.7.2 libpq5-debuginfo-32bit-9.1.3-3.7.2 postgresql-devel-32bit-9.1.3-3.7.2 postgresql-devel-debuginfo-32bit-9.1.3-3.7.2 - openSUSE 12.1 (noarch): postgresql-docs-9.1.3-3.7.1 - openSUSE 12.1 (ia64): libpq5-debuginfo-x86-9.1.3-3.7.2 libpq5-x86-9.1.3-3.7.2 postgresql-devel-debuginfo-x86-9.1.3-3.7.2 References: http://support.novell.com/security/cve/CVE-2011-2483.html http://support.novell.com/security/cve/CVE-2012-0866.html http://support.novell.com/security/cve/CVE-2012-0867.html http://support.novell.com/security/cve/CVE-2012-0868.html https://bugzilla.novell.com/701489 https://bugzilla.novell.com/749299 https://bugzilla.novell.com/749301 https://bugzilla.novell.com/749303

1 0

openSUSE-RU-2012:0477-1: perl-Any-Moose: added missing requires
by maintenance＠opensuse.org 10 Apr '12

10 Apr '12

openSUSE Recommended Update: perl-Any-Moose: added missing requires ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0477-1 Rating: low References: #752049 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for per-Any-Moose: - 752049: added missing requires perl(Moose) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-212 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): perl-Any-Moose-0.17-2.4.1 References: https://bugzilla.novell.com/752049

1 0

openSUSE-RU-2012:0476-1: openSUSE-release: Fix /etc/os-release
by maintenance＠opensuse.org 10 Apr '12

10 Apr '12

openSUSE Recommended Update: openSUSE-release: Fix /etc/os-release ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0476-1 Rating: low References: #746931 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for openSUSE-release: - 746931: Fix /etc/os-release Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-211 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): openSUSE-release-12.1-2.1 openSUSE-release-dvd-12.1-2.1 openSUSE-release-dvd-biarch-12.1-2.1 openSUSE-release-dvd-promo-12.1-2.1 openSUSE-release-ftp-12.1-2.1 openSUSE-release-livecd-gnome-12.1-2.1 openSUSE-release-livecd-kde-12.1-2.1 openSUSE-release-livecd-x11-12.1-2.1 openSUSE-release-livetree-gnome-12.1-2.1 openSUSE-release-livetree-kde-12.1-2.1 openSUSE-release-mini-12.1-2.1 openSUSE-release-usb-gnome-12.1-2.1 openSUSE-release-usb-kde-12.1-2.1 openSUSE-release-usb-x11-12.1-2.1 References: https://bugzilla.novell.com/746931

1 0

openSUSE-RU-2012:0475-1: iproute2: Distribute COPYING file
by maintenance＠opensuse.org 10 Apr '12

10 Apr '12

openSUSE Recommended Update: iproute2: Distribute COPYING file ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0475-1 Rating: low References: #745225 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for iproute2: - 745225: Distribute COPYING file Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-213 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): iproute2-2.6.39-3.5.1 iproute2-debuginfo-2.6.39-3.5.1 iproute2-debugsource-2.6.39-3.5.1 libnetlink-devel-2.6.39-3.5.1 - openSUSE 12.1 (noarch): iproute2-doc-2.6.39-3.5.1 References: https://bugzilla.novell.com/745225

1 0

openSUSE-SU-2012:0474-1: update for openssl
by opensuse-security＠opensuse.org 10 Apr '12

10 Apr '12

openSUSE Security Update: update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0474-1 Rating: low References: #749210 #749213 #751946 Cross-References: CVE-2012-1165 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: Changes in openssl: - S/MIME verification may erroneously fail - Free headers after use in error message - Symmetric crypto errors in PKCS7_decrypt Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-210 - openSUSE 11.4: zypper in -t patch openSUSE-2012-210 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libopenssl-devel-1.0.0e-34.9.1 libopenssl1_0_0-1.0.0e-34.9.1 libopenssl1_0_0-debuginfo-1.0.0e-34.9.1 openssl-1.0.0e-34.9.1 openssl-debuginfo-1.0.0e-34.9.1 openssl-debugsource-1.0.0e-34.9.1 - openSUSE 12.1 (x86_64): libopenssl-devel-32bit-1.0.0e-34.9.1 libopenssl1_0_0-32bit-1.0.0e-34.9.1 libopenssl1_0_0-debuginfo-32bit-1.0.0e-34.9.1 - openSUSE 12.1 (noarch): openssl-doc-1.0.0e-34.9.1 - openSUSE 12.1 (ia64): libopenssl1_0_0-debuginfo-x86-1.0.0e-34.9.1 libopenssl1_0_0-x86-1.0.0e-34.9.1 - openSUSE 11.4 (i586 x86_64): libopenssl-devel-1.0.0c-18.36.1 libopenssl1_0_0-1.0.0c-18.36.1 libopenssl1_0_0-debuginfo-1.0.0c-18.36.1 openssl-1.0.0c-18.36.1 openssl-debuginfo-1.0.0c-18.36.1 openssl-debugsource-1.0.0c-18.36.1 - openSUSE 11.4 (x86_64): libopenssl1_0_0-32bit-1.0.0c-18.36.1 libopenssl1_0_0-debuginfo-32bit-1.0.0c-18.36.1 - openSUSE 11.4 (noarch): openssl-doc-1.0.0c-18.36.1 - openSUSE 11.4 (ia64): libopenssl1_0_0-debuginfo-x86-1.0.0c-18.36.1 libopenssl1_0_0-x86-1.0.0c-18.36.1 References: http://support.novell.com/security/cve/CVE-2012-1165.html https://bugzilla.novell.com/749210 https://bugzilla.novell.com/749213 https://bugzilla.novell.com/751946

1 0

openSUSE-SU-2012:0469-1: moderate: update for nginx-1.0
by opensuse-security＠opensuse.org 05 Apr '12

05 Apr '12

openSUSE Security Update: update for nginx-1.0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0469-1 Rating: moderate References: #752482 Cross-References: CVE-2012-1180 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: specially crafted http responses from upstream server could leak already freed memory Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-209 - openSUSE 11.4: zypper in -t patch openSUSE-2012-209 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): nginx-1.0-1.0.10-3.4.1 nginx-1.0-debuginfo-1.0.10-3.4.1 nginx-1.0-debugsource-1.0.10-3.4.1 - openSUSE 11.4 (i586 x86_64): nginx-0.8-0.8.53-4.14.1 nginx-0.8-debuginfo-0.8.53-4.14.1 nginx-0.8-debugsource-0.8.53-4.14.1 References: http://support.novell.com/security/cve/CVE-2012-1180.html https://bugzilla.novell.com/752482

1 0

openSUSE-RU-2012:0467-1: important: pm-utils: Fix hibernation failures after security patches being applied
by maintenance＠opensuse.org 04 Apr '12

04 Apr '12

openSUSE Recommended Update: pm-utils: Fix hibernation failures after security patches being applied ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0467-1 Rating: important References: #751621 #751811 #751887 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: Fixed bnc#751887 - Hibernation failure after security patches applied; Fixed bnc#751621 - /usr/lib/pm-utils/sleep.d/06autofs unconditionally (re)starts autofs Fixed bnc#751811 - pm-suspend generates defective /var/log/pm-suspend.log file Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-208 - openSUSE 11.4: zypper in -t patch openSUSE-2012-208 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): pm-utils-1.4.1-12.17.1 pm-utils-debuginfo-1.4.1-12.17.1 pm-utils-debugsource-1.4.1-12.17.1 pm-utils-ndiswrapper-1.4.1-12.17.1 - openSUSE 11.4 (i586 x86_64): pm-utils-1.4.1-5.24.1 pm-utils-debuginfo-1.4.1-5.24.1 pm-utils-debugsource-1.4.1-5.24.1 pm-utils-ndiswrapper-1.4.1-5.24.1 References: https://bugzilla.novell.com/751621 https://bugzilla.novell.com/751811 https://bugzilla.novell.com/751887

1 0

openSUSE-SU-2012:0466-1: important: update for chromium, v8
by opensuse-security＠opensuse.org 04 Apr '12

04 Apr '12

openSUSE Security Update: update for chromium, v8 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0466-1 Rating: important References: #754456 Cross-References: CVE-2011-3045 CVE-2011-3049 CVE-2011-3050 CVE-2011-3051 CVE-2011-3052 CVE-2011-3053 CVE-2011-3054 CVE-2011-3055 CVE-2011-3056 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: - Update to 19.0.1079 Security Fixes (bnc#754456): * High CVE-2011-3050: Use-after-free with first-letter handling * High CVE-2011-3045: libpng integer issue from upstream * High CVE-2011-3051: Use-after-free in CSS cross-fade handling * High CVE-2011-3052: Memory corruption in WebGL canvas handling * High CVE-2011-3053: Use-after-free in block splitting * Low CVE-2011-3054: Apply additional isolations to webui privileges * Low CVE-2011-3055: Prompt in the browser native UI for unpacked extension installation * High CVE-2011-3056: Cross-origin violation with “magic iframe”. * Low CVE-2011-3049: Extension web request API can interfere with system requests Other Fixes: * The short-cut key for caps lock (Shift + Search) is disabled when an accessibility screen reader is enabled * Fixes an issue with files not being displayed in File Manager when some file names contain UTF-8 characters (generally accented characters) * Fixed dialog boxes in settings. (Issue: 118031) * Fixed flash videos turning white on mac when running with --disable-composited-core-animation-plugins (Issue: 117916) * Change to look for correctly sized favicon when multiple images are provided. (Issue: 118275) * Fixed issues - 116044, 117470, 117068, 117668, 118620 - Update to 19.0.1077 - Update to 19.0.1074 - Build Chromium on openSUSE > 12.1 with the gold linker - Fix build issues with GCC 4.7 - Update to 19.0.1071 * Several fixes and improvements in the new Settings, Extensions, and Help pages. * Fixed the flashing when switched between composited and non-composited mode. [Issue: 116603] * Fixed stability issues 116913, 117217, 117347, 117081 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-207 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): chromium-19.0.1079.0-1.14.1 chromium-debuginfo-19.0.1079.0-1.14.1 chromium-debugsource-19.0.1079.0-1.14.1 chromium-desktop-gnome-19.0.1079.0-1.14.1 chromium-desktop-kde-19.0.1079.0-1.14.1 chromium-suid-helper-19.0.1079.0-1.14.1 chromium-suid-helper-debuginfo-19.0.1079.0-1.14.1 libv8-3-3.9.24.1-1.18.1 libv8-3-debuginfo-3.9.24.1-1.18.1 v8-debugsource-3.9.24.1-1.18.1 v8-devel-3.9.24.1-1.18.1 v8-private-headers-devel-3.9.24.1-1.18.1 References: http://support.novell.com/security/cve/CVE-2011-3045.html http://support.novell.com/security/cve/CVE-2011-3049.html http://support.novell.com/security/cve/CVE-2011-3050.html http://support.novell.com/security/cve/CVE-2011-3051.html http://support.novell.com/security/cve/CVE-2011-3052.html http://support.novell.com/security/cve/CVE-2011-3053.html http://support.novell.com/security/cve/CVE-2011-3054.html http://support.novell.com/security/cve/CVE-2011-3055.html http://support.novell.com/security/cve/CVE-2011-3056.html https://bugzilla.novell.com/754456

1 0

openSUSE-RU-2012:0463-1: hdjmod: fixed USB hotplugging
by maintenance＠opensuse.org 03 Apr '12

03 Apr '12

openSUSE Recommended Update: hdjmod: fixed USB hotplugging ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0463-1 Rating: low References: #746358 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for hdjmod: - 746358: fixed USB hotplugging As reported the module was also loaded for devices of other vendors Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-202 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): hdjmod-debugsource-1.28-5.4.1 hdjmod-kmp-default-1.28_k3.1.9_1.4-5.4.1 hdjmod-kmp-default-debuginfo-1.28_k3.1.9_1.4-5.4.1 hdjmod-kmp-desktop-1.28_k3.1.9_1.4-5.4.1 hdjmod-kmp-desktop-debuginfo-1.28_k3.1.9_1.4-5.4.1 hdjmod-kmp-xen-1.28_k3.1.9_1.4-5.4.1 hdjmod-kmp-xen-debuginfo-1.28_k3.1.9_1.4-5.4.1 - openSUSE 12.1 (i586): hdjmod-kmp-pae-1.28_k3.1.9_1.4-5.4.1 hdjmod-kmp-pae-debuginfo-1.28_k3.1.9_1.4-5.4.1 References: https://bugzilla.novell.com/746358

1 0

openSUSE-RU-2012:0462-1: moderate: update for cifs-utils
by maintenance＠opensuse.org 03 Apr '12

03 Apr '12

openSUSE Recommended Update: update for cifs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0462-1 Rating: moderate References: #747906 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: - mount.cifs: Properly update mtab during remount; (bnc#747906). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-205 - openSUSE 11.4: zypper in -t patch openSUSE-2012-205 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): cifs-utils-4.9-7.4.1 cifs-utils-debuginfo-4.9-7.4.1 cifs-utils-debugsource-4.9-7.4.1 - openSUSE 11.4 (i586 x86_64): cifs-utils-4.9-1.5.1 cifs-utils-debuginfo-4.9-1.5.1 cifs-utils-debugsource-4.9-1.5.1 References: https://bugzilla.novell.com/747906

1 0

openSUSE-RU-2012:0461-1: llvm, Mesa: fixed problems with Radeon/Nouveau gallium drivers
by maintenance＠opensuse.org 03 Apr '12

03 Apr '12

openSUSE Recommended Update: llvm, Mesa: fixed problems with Radeon/Nouveau gallium drivers ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0461-1 Rating: low References: #728737 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for llvm and Mesa: Mesa: - 728737: Radeon/Nouveau gallium drivers: X crashes at startup due to use of SSE2 on non-SSE2 capable machines llvm: - 728737: Target i586-linux for 32bit builds - Add upstream fix for llvm PR11642 - Don't run gcc for ada files, just fail instead. - Add clang-glibc2.14.patch to support glibc 2.14 headers - Install profiling support Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-203 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): Mesa-7.11-11.4.2 Mesa-debuginfo-7.11-11.4.2 Mesa-debugsource-7.11-11.4.2 Mesa-devel-7.11-11.4.2 llvm-3.0-1.8.1 llvm-clang-3.0-1.8.1 llvm-clang-debuginfo-3.0-1.8.1 llvm-clang-devel-3.0-1.8.1 llvm-clang-devel-debuginfo-3.0-1.8.1 llvm-devel-3.0-1.8.1 llvm-doc-3.0-1.8.1 llvm-vim-plugins-3.0-1.8.1 - openSUSE 12.1 (x86_64): Mesa-32bit-7.11-11.4.2 Mesa-debuginfo-32bit-7.11-11.4.2 Mesa-devel-32bit-7.11-11.4.2 - openSUSE 12.1 (ia64): Mesa-debuginfo-x86-7.11-11.4.2 Mesa-x86-7.11-11.4.2 References: https://bugzilla.novell.com/728737

1 0

openSUSE-RU-2012:0460-1: hwinfo: update vmbus device detection
by maintenance＠opensuse.org 03 Apr '12

03 Apr '12

openSUSE Recommended Update: hwinfo: update vmbus device detection ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0460-1 Rating: low References: #716708 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for hwinfo: - 716708: update vmbus device detection - Use new and correct sysfs driver names: - hv_storvsc instead of storvsc - hv_netvsc instead of netvsc Remove blkvsc, the driver was merged into hv_storvsc Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-206 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): hwinfo-19.0-2.6.1 hwinfo-debuginfo-19.0-2.6.1 hwinfo-debugsource-19.0-2.6.1 hwinfo-devel-19.0-2.6.1 hwinfo-devel-debuginfo-19.0-2.6.1 References: https://bugzilla.novell.com/716708

1 0

openSUSE-RU-2012:0459-1: PgTcl: Update to version 1.7 to fix a crash with Tcl 8.5
by maintenance＠opensuse.org 03 Apr '12

03 Apr '12

openSUSE Recommended Update: PgTcl: Update to version 1.7 to fix a crash with Tcl 8.5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0459-1 Rating: low References: #739978 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for PgTcl: - 739978: Update to version 1.7 to fix a crash with Tcl 8.5 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-204 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): PgTcl-1.7-191.4.1 PgTcl-debuginfo-1.7-191.4.1 PgTcl-debugsource-1.7-191.4.1 References: https://bugzilla.novell.com/739978

1 0

openSUSE-RU-2012:0455-1: moderate: sensors: collective update
by maintenance＠opensuse.org 02 Apr '12

02 Apr '12

openSUSE Recommended Update: sensors: collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0455-1 Rating: moderate References: #751177 #751180 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for sensors: - Fix loading of the cpuid module. - Properly handle Super-I/O chips without logical device. - 751180: Change sysfs detection to survive upcoming kernel changes - 751177: Fix memory leaks revealed by valgrind (bnc#751177). - Fix power interval output. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-195 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libsensors4-3.3.1-3.3.1 libsensors4-debuginfo-3.3.1-3.3.1 libsensors4-devel-3.3.1-3.3.1 sensord-3.3.1-3.3.1 sensord-debuginfo-3.3.1-3.3.1 sensors-3.3.1-3.3.1 sensors-debuginfo-3.3.1-3.3.1 sensors-debugsource-3.3.1-3.3.1 - openSUSE 12.1 (x86_64): libsensors4-32bit-3.3.1-3.3.1 libsensors4-debuginfo-32bit-3.3.1-3.3.1 - openSUSE 12.1 (ia64): libsensors4-debuginfo-x86-3.3.1-3.3.1 libsensors4-x86-3.3.1-3.3.1 References: https://bugzilla.novell.com/751177 https://bugzilla.novell.com/751180

1 0

openSUSE-RU-2012:0454-1: bash: fix bash completion with $PWD
by maintenance＠opensuse.org 02 Apr '12

02 Apr '12

openSUSE Recommended Update: bash: fix bash completion with $PWD ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0454-1 Rating: low References: #725657 #732934 #738501 #752422 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for bash and aaa_base fixes several bash completion issues (i.e. the expansion of environment variables when pressing TAB, like $PWD). - fix chkconfig for systemd (bnc#732934) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-201 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): aaa_base-12.1-534.113.1 aaa_base-debuginfo-12.1-534.113.1 aaa_base-debugsource-12.1-534.113.1 aaa_base-extras-12.1-534.113.1 bash-4.2-1.11.1 bash-debuginfo-4.2-1.11.1 bash-debugsource-4.2-1.11.1 bash-devel-4.2-1.11.1 bash-loadables-4.2-1.11.1 bash-loadables-debuginfo-4.2-1.11.1 libreadline6-6.2-1.11.1 libreadline6-debuginfo-6.2-1.11.1 readline-devel-6.2-1.11.1 - openSUSE 12.1 (x86_64): bash-debuginfo-32bit-4.2-1.11.1 libreadline6-32bit-6.2-1.11.1 libreadline6-debuginfo-32bit-6.2-1.11.1 readline-devel-32bit-6.2-1.11.1 - openSUSE 12.1 (noarch): bash-doc-4.2-1.11.1 bash-lang-4.2-1.11.1 readline-doc-6.2-1.11.1 References: https://bugzilla.novell.com/725657 https://bugzilla.novell.com/732934 https://bugzilla.novell.com/738501 https://bugzilla.novell.com/752422

1 0

openSUSE-RU-2012:0453-1: moderate: tracker: avoid GC-related crashes in Firefox/Thunderbird, caused by tracker extensions
by maintenance＠opensuse.org 02 Apr '12

02 Apr '12

openSUSE Recommended Update: tracker: avoid GC-related crashes in Firefox/Thunderbird, caused by tracker extensions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0453-1 Rating: moderate References: #745977 #746647 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for tracker: - 745977, 746647: Add tracker-ff-tb-fixes.patch: fixes from git, to avoid GC-related crashes in Firefox/Thunderbird, caused by tracker extensions Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-193 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): gnome-panel-applet-tracker-0.12.5-3.6.1 gnome-panel-applet-tracker-debuginfo-0.12.5-3.6.1 libtracker-extract-0_12-0-0.12.5-3.6.1 libtracker-extract-0_12-0-debuginfo-0.12.5-3.6.1 libtracker-miner-0_12-0-0.12.5-3.6.1 libtracker-miner-0_12-0-debuginfo-0.12.5-3.6.1 libtracker-sparql-0_12-0-0.12.5-3.6.1 libtracker-sparql-0_12-0-debuginfo-0.12.5-3.6.1 nautilus-extension-tracker-tags-0.12.5-3.6.1 nautilus-extension-tracker-tags-debuginfo-0.12.5-3.6.1 tracker-0.12.5-3.6.1 tracker-debuginfo-0.12.5-3.6.1 tracker-debugsource-0.12.5-3.6.1 tracker-devel-0.12.5-3.6.1 tracker-extras-debugsource-0.12.5-3.6.1 tracker-gui-0.12.5-3.6.1 tracker-gui-debuginfo-0.12.5-3.6.1 tracker-miner-evolution-0.12.5-3.6.1 tracker-miner-evolution-debuginfo-0.12.5-3.6.1 tracker-miner-files-0.12.5-3.6.1 tracker-miner-files-debuginfo-0.12.5-3.6.1 tracker-miner-firefox-0.12.5-3.6.1 tracker-miner-flickr-0.12.5-3.6.1 tracker-miner-flickr-debuginfo-0.12.5-3.6.1 tracker-miner-rss-0.12.5-3.6.1 tracker-miner-rss-debuginfo-0.12.5-3.6.1 tracker-miner-thunderbird-0.12.5-3.6.1 - openSUSE 12.1 (noarch): tracker-lang-0.12.5-3.6.1 References: https://bugzilla.novell.com/745977 https://bugzilla.novell.com/746647

1 0

openSUSE-RU-2012:0452-1: smugbatch: Fix buffer overflow during login
by maintenance＠opensuse.org 02 Apr '12

02 Apr '12

openSUSE Recommended Update: smugbatch: Fix buffer overflow during login ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0452-1 Rating: low References: #753945 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for smugbatch: - 753945: Fix buffer overflow during login Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-199 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): smugbatch-006-2.4.1 smugbatch-debuginfo-006-2.4.1 smugbatch-debugsource-006-2.4.1 References: https://bugzilla.novell.com/753945

1 0

openSUSE-RU-2012:0451-1: moderate: mc: keep english version of help and hints in the main package
by maintenance＠opensuse.org 02 Apr '12

02 Apr '12

openSUSE Recommended Update: mc: keep english version of help and hints in the main package ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0451-1 Rating: moderate References: #681060 #715658 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for mc: - 681060, 715658: keep english version of help and hints in the main package Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-194 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): mc-4.7.5.1-6.2 mc-debuginfo-4.7.5.1-6.2 mc-debugsource-4.7.5.1-6.2 - openSUSE 11.4 (noarch): mc-lang-4.7.5.1-6.2 References: https://bugzilla.novell.com/681060 https://bugzilla.novell.com/715658

1 0

openSUSE-RU-2012:0450-1: w3m: Interactive help was broken by an outdated patch
by maintenance＠opensuse.org 02 Apr '12

02 Apr '12

openSUSE Recommended Update: w3m: Interactive help was broken by an outdated patch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0450-1 Rating: low References: #747560 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following isssue for w3m: - 747560: Interactive help was broken by an outdated patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-197 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): w3m-0.5.3-139.4.2 w3m-debuginfo-0.5.3-139.4.2 w3m-debugsource-0.5.3-139.4.2 w3m-inline-image-0.5.3-139.4.2 w3m-inline-image-debuginfo-0.5.3-139.4.2 References: https://bugzilla.novell.com/747560

1 0

openSUSE-RU-2012:0449-1: gnome-shell: Fix the growing AP list
by maintenance＠opensuse.org 02 Apr '12

02 Apr '12

openSUSE Recommended Update: gnome-shell: Fix the growing AP list ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0449-1 Rating: low References: #752385 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This patch keeps the number of APs in the list in 5 and pack the rest in a drop down menu, so the network drop down box wouldn't grow over time. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-198 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): gnome-shell-3.2.2.1-2.11.1 gnome-shell-browser-plugin-3.2.2.1-2.11.1 gnome-shell-browser-plugin-debuginfo-3.2.2.1-2.11.1 gnome-shell-debuginfo-3.2.2.1-2.11.1 gnome-shell-debugsource-3.2.2.1-2.11.1 - openSUSE 12.1 (noarch): gnome-shell-lang-3.2.2.1-2.11.1 References: https://bugzilla.novell.com/752385

1 0

openSUSE-RU-2012:0448-1: python-virtinst: Fix needed for 'zypper patch' to work correctly
by maintenance＠opensuse.org 02 Apr '12

02 Apr '12

openSUSE Recommended Update: python-virtinst: Fix needed for 'zypper patch' to work correctly ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0448-1 Rating: low References: #752138 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for python-virtinst: - 752138: python-virtinst causes virt-manager uninstall Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-191 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): python-virtinst-0.600.1-4.6.1 References: https://bugzilla.novell.com/752138

1 0

openSUSE-RU-2012:0447-1: freeradius-server: fixed running with perl module
by maintenance＠opensuse.org 02 Apr '12

02 Apr '12

openSUSE Recommended Update: freeradius-server: fixed running with perl module ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0447-1 Rating: low References: #752873 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for freeradius-server: - 752873: fixed running with perl module Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-200 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): freeradius-server-2.1.10-5.1 freeradius-server-debuginfo-2.1.10-5.1 freeradius-server-debugsource-2.1.10-5.1 freeradius-server-devel-2.1.10-5.1 freeradius-server-dialupadmin-2.1.10-5.1 freeradius-server-doc-2.1.10-5.1 freeradius-server-libs-2.1.10-5.1 freeradius-server-libs-debuginfo-2.1.10-5.1 freeradius-server-utils-2.1.10-5.1 freeradius-server-utils-debuginfo-2.1.10-5.1 References: https://bugzilla.novell.com/752873

1 0

openSUSE-RU-2012:0446-1: moderate: poppler: fix wrong page order in some PDF files
by maintenance＠opensuse.org 02 Apr '12

02 Apr '12

openSUSE Recommended Update: poppler: fix wrong page order in some PDF files ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0446-1 Rating: moderate References: #748257 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for poppler: - 748257: fix wrong page order in some PDF files (fdo#46459). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-192 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libpoppler-cpp0-0.18.0-2.3.2 libpoppler-cpp0-debuginfo-0.18.0-2.3.2 libpoppler-devel-0.18.0-2.3.2 libpoppler-glib-devel-0.18.0-2.3.2 libpoppler-glib8-0.18.0-2.3.2 libpoppler-glib8-debuginfo-0.18.0-2.3.2 libpoppler-qt4-3-0.18.0-2.3.1 libpoppler-qt4-3-debuginfo-0.18.0-2.3.1 libpoppler-qt4-devel-0.18.0-2.3.1 libpoppler18-0.18.0-2.3.2 libpoppler18-debuginfo-0.18.0-2.3.2 poppler-debugsource-0.18.0-2.3.2 poppler-qt-debugsource-0.18.0-2.3.1 poppler-tools-0.18.0-2.3.2 poppler-tools-debuginfo-0.18.0-2.3.2 References: https://bugzilla.novell.com/748257

1 0

openSUSE-RU-2012:0445-1: dosemu: Update to 1.4.0.1 SVN
by maintenance＠opensuse.org 02 Apr '12

02 Apr '12

openSUSE Recommended Update: dosemu: Update to 1.4.0.1 SVN ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0445-1 Rating: low References: #742752 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: dosemu was updated to the current SVN 1.4 branch state to allow running DOS programs with the mmap_min_addr security protection enabled. If the mmap_min_addr protection is set, dosemu will fall back transparently to vm86 emulation. bnc#742752 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-196 - openSUSE 11.4: zypper in -t patch openSUSE-2012-196 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): dosemu-1.4.0.1.r2065-75.7.2 dosemu-debuginfo-1.4.0.1.r2065-75.7.2 dosemu-debugsource-1.4.0.1.r2065-75.7.2 - openSUSE 11.4 (i586 x86_64): dosemu-1.4.0.1.r2065-77.2 dosemu-debuginfo-1.4.0.1.r2065-77.2 dosemu-debugsource-1.4.0.1.r2065-77.2 References: https://bugzilla.novell.com/742752

1 0

openSUSE-RU-2012:0444-1: drbd: Update to version 8.3.9 to match kernel module
by maintenance＠opensuse.org 02 Apr '12

02 Apr '12

openSUSE Recommended Update: drbd: Update to version 8.3.9 to match kernel module ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0444-1 Rating: low References: #680338 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This updates the drdb userland tools to match the kernel module version. Besides, the version update fixes the following issues: * Fix for possible deadlock on IO error during resync * Fixed a race condition between adding and removing network configuration. Lead to a BUG_ON() when triggered. * Fixed spurious full syncs that could happen after an empty resync and concurrent connection loss. * Fixed spurious full syncs that happened when connection got lost while one node was in WFSyncUUID state (Bugz 318) * Fixed a race in the meta-data update code path, that could lead to forgotten updates to the meta-data. That in fact could lead to unexpected behavior at the next connect * Fixed potential deadlock on detach * Fixed potential data divergence after multiple failures * Implicitly create unconfigured devices which are referenced in sync-after dependencies. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-189 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): drbd-8.3.9-7.1 drbd-debuginfo-8.3.9-7.1 drbd-debugsource-8.3.9-7.1 References: https://bugzilla.novell.com/680338

1 0

openSUSE-RU-2012:0443-1: - fix usb device handling regression in xerox_mfp (bnc#745245)
by maintenance＠opensuse.org 02 Apr '12

02 Apr '12

openSUSE Recommended Update: - fix usb device handling regression in xerox_mfp (bnc#745245) ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0443-1 Rating: low References: #745245 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: - fix usb device handling regression in xerox_mfp (bnc#745245) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-190 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): sane-backends-1.0.22-15.4.1 sane-backends-autoconfig-1.0.22-15.4.1 sane-backends-debuginfo-1.0.22-15.4.1 sane-backends-debugsource-1.0.22-15.4.1 sane-backends-devel-1.0.22-15.4.1 - openSUSE 12.1 (x86_64): sane-backends-32bit-1.0.22-15.4.1 sane-backends-debuginfo-32bit-1.0.22-15.4.1 - openSUSE 12.1 (ia64): sane-backends-debuginfo-x86-1.0.22-15.4.1 sane-backends-x86-1.0.22-15.4.1 References: https://bugzilla.novell.com/745245

1 0

openSUSE-RU-2012:0442-1: important: syslogd: fix warning on lograte directory ownership
by maintenance＠opensuse.org 02 Apr '12

02 Apr '12

openSUSE Recommended Update: syslogd: fix warning on lograte directory ownership ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0442-1 Rating: important References: #678434 #750263 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: Adding 'su' option to syslogd lograte configuration to fix the following error message: "/var/log/news" has insecure permissions. It must be owned and be writable by root only to avoid security issues. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-188 - openSUSE 11.4: zypper in -t patch openSUSE-2012-188 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): klogd-1.4.1-750.755.1 klogd-debuginfo-1.4.1-750.755.1 syslogd-1.4.1-750.755.1 syslogd-debuginfo-1.4.1-750.755.1 syslogd-debugsource-1.4.1-750.755.1 - openSUSE 12.1 (noarch): syslog-service-1.4.1-750.755.1 - openSUSE 11.4 (i586 x86_64): klogd-1.4.1-735.1 klogd-debuginfo-1.4.1-735.1 syslogd-1.4.1-735.1 syslogd-debuginfo-1.4.1-735.1 syslogd-debugsource-1.4.1-735.1 References: https://bugzilla.novell.com/678434 https://bugzilla.novell.com/750263

1 0