May 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2012:0670-1: btrfsprogs: collective update
by maintenance＠opensuse.org 30 May '12

30 May '12

openSUSE Recommended Update: btrfsprogs: collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0670-1 Rating: low References: #730103 #744593 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for btrfsprogs: - add btrfs-debug-tree to initrd - adjust fs size to correct size (bnc#744593) - man page documentation updates - do not package obsolete utilities - mkfs: store correct size of device in superblock (bnc#730103) - updated restriper/balance commands to match kernel version - add btrfsck repair options for: - rebuild extent records - fix block group accounting - reset csums for rescue nodatasum mount - prune corrupt extent allocation tree blocks - device scanning fixes for dm and multipath - initrd support: move btrfs device scan after block device setup - documentation updates - add csize for file commpressed size - updated restore utility - patch license to follow spdx.org standard Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-307 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): btrfsprogs-0.19-43.10.1 btrfsprogs-debuginfo-0.19-43.10.1 btrfsprogs-debugsource-0.19-43.10.1 References: https://bugzilla.novell.com/730103 https://bugzilla.novell.com/744593

1 0

openSUSE-RU-2012:0669-1: jackEQ: updated to version 0.5.9
by maintenance＠opensuse.org 30 May '12

30 May '12

openSUSE Recommended Update: jackEQ: updated to version 0.5.9 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0669-1 Rating: low References: #762411 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for jackEQ: - 762411: updated to version 0.5.9 to make the program actually working * Added functionality to save/load state in file menu, quit/start. * Shiny new skin and theme * New mute buttons, click behavior improvements * Configuration file located in ~/jackeq/jackeq.conf folder * Fixed ladspa UniqueId bug for djEQ plugin to work with stereo version of djEQ - add the explicit requirement to ladspa-swh-plugins - add automake as buildrequire to avoid implicit dependency Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-306 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): jackEQ-0.5.9-305.4.1 jackEQ-debuginfo-0.5.9-305.4.1 jackEQ-debugsource-0.5.9-305.4.1 References: https://bugzilla.novell.com/762411

1 0

openSUSE-RU-2012:0668-1: kiwi: collective update
by maintenance＠opensuse.org 30 May '12

30 May '12

openSUSE Recommended Update: kiwi: collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0668-1 Rating: low References: #728885 #729251 #729315 #729636 #729857 #730763 #731457 #732247 #736491 #740033 #740073 #743159 #745548 #747898 #752259 #754344 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has 16 recommended fixes can now be installed. Description: This update fixes the following issues for kiwi: - 754344: fixed updateOtherDeviceFstab() to correctly create missing mount points inside the root file system - fixed compare of object addresses by using refaddr. This is more robust because objects can overload operators like '!=' - 752259: make sure kernelCheck() initializes list of kernels if empty - 743159: - follow up and improved fix for basePackBootIncludes to pack only items listed in the rpm package filelist but don't recursively look them up in the filesystem when tar'ing them up added staging/hv drivers to SLE11 boot image descriptions. - really fixed basePackBootIncludes to pack only files and don't break if packages includes symbolic links - 747898: - Beginning with SLE11-SP2 the drivers are part of the standard kernel and thus they should be preserved - a new function called suseStripModules() has been added. The function searches for update modules and removes the old version which might be provided by the standard kernel to prevent a load clash - make sure /etc/modprobe.d is preserved - 732247: fixed importFile function to export only prefixed version of the variable if there is a prefix and not both - 745548: fixed import of dhcp info file - 740073: - make sure xfs_growfs and xfs_check stay in the initrd - Properly support image builds for SLE with xfs and btrfs filesystem The initrd image descriptions previously did not include necessary drivers and packages - 740033: fixed rebuild of rpm database - 736491: fixed xen initrd inflate/deflate problem. Xen see the bootsplash at the end of the initrd as garbage and refuses to boot. With this patch we skip the bootsplash setup if it's xen - 731457: fixed udev database transfer. udev stores the database in /run and in /dev/.udev. kiwi did not take care for the information in /run which has a bad impact on systemd waiting for udev events which did not appear - 729315: - fixed parameter quoting of setupBootLoader() functions - apply quoting of .profile contents during build - fixed parameter quoting in setupBootLoader - 730763: fixed call of checkmedia - 729857: renamed image format vpc to vhd. vhd seems to be the well known name for Microsoft HyperV images - 729636: fixed creation of initial aligned partition table in KIWIBoot.pm. In SuSE studio the loop device which is normally the target for parted is relinked behind the scene to a virtio device. As result parted now sees a real disk geometry and that induced the bug in kiwi which is not visible if it operates on the file mapped loop device only. Looking at that partition code has turned out that the alignment is broken which in the end broke the repartition process in the first boot of an oem install image. The code is now fixed to work properly on any storage device - 729251: make sure partedSectorInit() comes up with an initial value for the start sector if the partition table is empty - 728885: fixed setLogFile path writable check - other fixes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-305 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): kiwi-4.98.35-1.4.1 kiwi-debugsource-4.98.35-1.4.1 kiwi-tools-4.98.35-1.4.1 kiwi-tools-debuginfo-4.98.35-1.4.1 - openSUSE 12.1 (noarch): kiwi-desc-isoboot-4.98.35-1.4.1 kiwi-desc-netboot-4.98.35-1.4.1 kiwi-desc-oemboot-4.98.35-1.4.1 kiwi-desc-vmxboot-4.98.35-1.4.1 kiwi-doc-4.98.35-1.4.1 kiwi-instsource-4.98.35-1.4.1 kiwi-media-requires-4.98.35-1.4.1 kiwi-pxeboot-4.98.35-1.4.1 kiwi-templates-4.98.35-1.4.1 References: https://bugzilla.novell.com/728885 https://bugzilla.novell.com/729251 https://bugzilla.novell.com/729315 https://bugzilla.novell.com/729636 https://bugzilla.novell.com/729857 https://bugzilla.novell.com/730763 https://bugzilla.novell.com/731457 https://bugzilla.novell.com/732247 https://bugzilla.novell.com/736491 https://bugzilla.novell.com/740033 https://bugzilla.novell.com/740073 https://bugzilla.novell.com/743159 https://bugzilla.novell.com/745548 https://bugzilla.novell.com/747898 https://bugzilla.novell.com/752259 https://bugzilla.novell.com/754344

1 0

openSUSE-SU-2012:0667-1: moderate: update for python
by opensuse-security＠opensuse.org 30 May '12

30 May '12

openSUSE Security Update: update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0667-1 Rating: moderate References: #747125 #751718 #754447 #754677 Cross-References: CVE-2011-3389 CVE-2011-4944 CVE-2012-0845 CVE-2012-1150 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: No description available. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-302 - openSUSE 11.4: zypper in -t patch openSUSE-2012-302 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libpython2_7-1_0-2.7.2-7.14.1 libpython2_7-1_0-debuginfo-2.7.2-7.14.1 libpython3_2mu1_0-3.2.1-5.6.2 libpython3_2mu1_0-debuginfo-3.2.1-5.6.2 python-base-2.7.2-7.14.1 python-base-debuginfo-2.7.2-7.14.1 python-base-debugsource-2.7.2-7.14.1 python-devel-2.7.2-7.14.1 python-xml-2.7.2-7.14.1 python-xml-debuginfo-2.7.2-7.14.1 python3-2to3-3.2.1-5.6.2 python3-base-3.2.1-5.6.2 python3-base-debuginfo-3.2.1-5.6.2 python3-base-debugsource-3.2.1-5.6.2 python3-devel-3.2.1-5.6.2 python3-devel-debuginfo-3.2.1-5.6.2 python3-idle-3.2.1-5.6.2 python3-tools-3.2.1-5.6.2 python3-xml-3.2.1-5.6.2 python3-xml-debuginfo-3.2.1-5.6.2 - openSUSE 12.1 (x86_64): libpython2_7-1_0-32bit-2.7.2-7.14.1 libpython2_7-1_0-debuginfo-32bit-2.7.2-7.14.1 libpython3_2mu1_0-32bit-3.2.1-5.6.2 libpython3_2mu1_0-debuginfo-32bit-3.2.1-5.6.2 python-base-32bit-2.7.2-7.14.1 python-base-debuginfo-32bit-2.7.2-7.14.1 - openSUSE 12.1 (noarch): python-doc-2.7-7.14.1 python-doc-pdf-2.7-7.14.1 python3-doc-3.2-5.6.1 python3-doc-pdf-3.2-5.6.1 - openSUSE 12.1 (ia64): libpython2_7-1_0-debuginfo-x86-2.7.2-7.14.1 libpython2_7-1_0-x86-2.7.2-7.14.1 libpython3_2mu1_0-debuginfo-x86-3.2.1-5.6.2 libpython3_2mu1_0-x86-3.2.1-5.6.2 python-base-debuginfo-x86-2.7.2-7.14.1 python-base-x86-2.7.2-7.14.1 - openSUSE 11.4 (i586 x86_64): python3-2to3-3.1.3-6.5 python3-3.1.3-6.5 python3-curses-3.1.3-6.5 python3-curses-debuginfo-3.1.3-6.5 python3-dbm-3.1.3-6.5 python3-dbm-debuginfo-3.1.3-6.5 python3-debuginfo-3.1.3-6.5 python3-debugsource-3.1.3-6.5 python3-demo-3.1.3-6.5 python3-devel-3.1.3-6.5 python3-idle-3.1.3-6.5 python3-tk-3.1.3-6.5 python3-tk-debuginfo-3.1.3-6.5 python3-xml-3.1.3-6.5 python3-xml-debuginfo-3.1.3-6.5 - openSUSE 11.4 (x86_64): python3-32bit-3.1.3-6.5 python3-debuginfo-32bit-3.1.3-6.5 - openSUSE 11.4 (noarch): python3-doc-3.1-6.1 python3-doc-pdf-3.1-6.1 - openSUSE 11.4 (ia64): python3-debuginfo-x86-3.1.3-6.5 python3-x86-3.1.3-6.5 References: http://support.novell.com/security/cve/CVE-2011-3389.html http://support.novell.com/security/cve/CVE-2011-4944.html http://support.novell.com/security/cve/CVE-2012-0845.html http://support.novell.com/security/cve/CVE-2012-1150.html https://bugzilla.novell.com/747125 https://bugzilla.novell.com/751718 https://bugzilla.novell.com/754447 https://bugzilla.novell.com/754677

1 0

openSUSE-RU-2012:0666-1: gnome-games: Fix glchess not playing with phalanx or gnuchess
by maintenance＠opensuse.org 30 May '12

30 May '12

openSUSE Recommended Update: gnome-games: Fix glchess not playing with phalanx or gnuchess ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0666-1 Rating: low References: #730052 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for gnome-games: - 730052: glchess can use phalanx and gnuchess as backend. None of the two backends are actually performing any move in glchess, renderig the game close to useless. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-304 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): glchess-3.2.1-2.4.1 glchess-debuginfo-3.2.1-2.4.1 glines-3.2.1-2.4.1 glines-debuginfo-3.2.1-2.4.1 gnect-3.2.1-2.4.1 gnect-debuginfo-3.2.1-2.4.1 gnibbles-3.2.1-2.4.1 gnibbles-debuginfo-3.2.1-2.4.1 gnobots2-3.2.1-2.4.1 gnobots2-debuginfo-3.2.1-2.4.1 gnome-games-3.2.1-2.4.1 gnome-games-debugsource-3.2.1-2.4.1 gnome-games-recommended-3.2.1-2.4.1 gnome-games-support-3.2.1-2.4.1 gnome-games-support-debuginfo-3.2.1-2.4.1 gnome-sudoku-3.2.1-2.4.1 gnomine-3.2.1-2.4.1 gnomine-debuginfo-3.2.1-2.4.1 gnotravex-3.2.1-2.4.1 gnotravex-debuginfo-3.2.1-2.4.1 gnotski-3.2.1-2.4.1 gnotski-debuginfo-3.2.1-2.4.1 gtali-3.2.1-2.4.1 gtali-debuginfo-3.2.1-2.4.1 iagno-3.2.1-2.4.1 iagno-debuginfo-3.2.1-2.4.1 lightsoff-3.2.1-2.4.1 mahjongg-3.2.1-2.4.1 mahjongg-debuginfo-3.2.1-2.4.1 quadrapassel-3.2.1-2.4.1 quadrapassel-debuginfo-3.2.1-2.4.1 swell-foop-3.2.1-2.4.1 - openSUSE 12.1 (noarch): glchess-lang-3.2.1-2.4.1 glines-lang-3.2.1-2.4.1 gnect-lang-3.2.1-2.4.1 gnibbles-lang-3.2.1-2.4.1 gnobots2-lang-3.2.1-2.4.1 gnome-games-support-lang-3.2.1-2.4.1 gnome-sudoku-lang-3.2.1-2.4.1 gnomine-lang-3.2.1-2.4.1 gnotravex-lang-3.2.1-2.4.1 gnotski-lang-3.2.1-2.4.1 gtali-lang-3.2.1-2.4.1 iagno-lang-3.2.1-2.4.1 lightsoff-lang-3.2.1-2.4.1 mahjongg-lang-3.2.1-2.4.1 quadrapassel-lang-3.2.1-2.4.1 swell-foop-lang-3.2.1-2.4.1 References: https://bugzilla.novell.com/730052

1 0

openSUSE-RU-2012:0665-1: man-pages: Describe race of direct IO and fork
by maintenance＠opensuse.org 30 May '12

30 May '12

openSUSE Recommended Update: man-pages: Describe race of direct IO and fork ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0665-1 Rating: low References: #470005 #742607 #753103 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update fixes the following issue for man-pages: - 470005, 742607, 753103: open 2: Describe race of direct I/O and fork() Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-303 - openSUSE 11.4: zypper in -t patch openSUSE-2012-303 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): man-pages-3.35-2.4.1 - openSUSE 11.4 (noarch): man-pages-3.32-9.1 References: https://bugzilla.novell.com/470005 https://bugzilla.novell.com/742607 https://bugzilla.novell.com/753103

1 0

openSUSE-RU-2012:0664-1: systemd: Collective update
by maintenance＠opensuse.org 30 May '12

30 May '12

openSUSE Recommended Update: systemd: Collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0664-1 Rating: low References: #727771 #746594 #746595 #747931 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes the following issues for systemd: - 746594: Add fix-getty-isolate.patch: don't quit getty when changing runlevel - 746595: Add systemd-numlock-suse.patch: implement SUSE specific sysconfig numlock logic - 727771, 747931: Update new-lsb-headers.patch to handle entries written after description tag Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-301 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): systemd-37-3.14.1 systemd-debuginfo-37-3.14.1 systemd-debugsource-37-3.14.1 systemd-devel-37-3.14.1 systemd-gtk-37-3.14.1 systemd-gtk-debuginfo-37-3.14.1 systemd-gtk-debugsource-37-3.14.1 systemd-sysvinit-37-3.14.1 - openSUSE 12.1 (x86_64): systemd-32bit-37-3.14.1 systemd-debuginfo-32bit-37-3.14.1 - openSUSE 12.1 (ia64): systemd-debuginfo-x86-37-3.14.1 systemd-x86-37-3.14.1 References: https://bugzilla.novell.com/727771 https://bugzilla.novell.com/746594 https://bugzilla.novell.com/746595 https://bugzilla.novell.com/747931

1 0

openSUSE-RU-2012:0663-1: module-init-tools: Fixes an issue with SCSI jukeboxes taking up to 1h to initialize during boot
by maintenance＠opensuse.org 30 May '12

30 May '12

openSUSE Recommended Update: module-init-tools: Fixes an issue with SCSI jukeboxes taking up to 1h to initialize during boot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0663-1 Rating: low References: #760274 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for module-init-tools: - 760274: Fixes an issue with SCSI jukeboxes taking up to 1h to initialize during boot, causing udev timeouts Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-300 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): module-init-tools-3.13-4.4.1 module-init-tools-debuginfo-3.13-4.4.1 module-init-tools-debugsource-3.13-4.4.1 References: https://bugzilla.novell.com/760274

1 0

openSUSE-SU-2012:0660-1: update for mailman
by opensuse-security＠opensuse.org 29 May '12

29 May '12

openSUSE Security Update: update for mailman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0660-1 Rating: low References: #697638 #750259 #754623 Cross-References: CVE-2002-0389 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: local users could read mailman's mail archive Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-298 - openSUSE 11.4: zypper in -t patch openSUSE-2012-298 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): mailman-2.1.14-10.6.1 mailman-debuginfo-2.1.14-10.6.1 mailman-debugsource-2.1.14-10.6.1 - openSUSE 11.4 (i586 x86_64): mailman-2.1.14-4.12.1 mailman-debuginfo-2.1.14-4.12.1 mailman-debugsource-2.1.14-4.12.1 References: http://support.novell.com/security/cve/CVE-2002-0389.html https://bugzilla.novell.com/697638 https://bugzilla.novell.com/750259 https://bugzilla.novell.com/754623

1 0

openSUSE-SU-2012:0659-1: moderate: update for net-snmp
by opensuse-security＠opensuse.org 29 May '12

29 May '12

openSUSE Security Update: update for net-snmp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0659-1 Rating: moderate References: #759352 Cross-References: CVE-2012-2141 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: SNMP GET request involving on a non-existent extension table entry could crash snmpd Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-299 - openSUSE 11.4: zypper in -t patch openSUSE-2012-299 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libsnmp30-5.7.1-3.8.1 libsnmp30-debuginfo-5.7.1-3.8.1 net-snmp-5.7.1-3.8.1 net-snmp-debuginfo-5.7.1-3.8.1 net-snmp-debugsource-5.7.1-3.8.1 net-snmp-devel-5.7.1-3.8.1 perl-SNMP-5.7.1-3.8.1 perl-SNMP-debuginfo-5.7.1-3.8.1 snmp-mibs-5.7.1-3.8.1 - openSUSE 12.1 (x86_64): libsnmp30-32bit-5.7.1-3.8.1 libsnmp30-debuginfo-32bit-5.7.1-3.8.1 net-snmp-devel-32bit-5.7.1-3.8.1 - openSUSE 12.1 (ia64): libsnmp30-debuginfo-x86-5.7.1-3.8.1 libsnmp30-x86-5.7.1-3.8.1 - openSUSE 11.4 (i586 x86_64): libsnmp25-5.6.1-4.32.1 libsnmp25-debuginfo-5.6.1-4.32.1 net-snmp-5.6.1-4.32.1 net-snmp-debuginfo-5.6.1-4.32.1 net-snmp-debugsource-5.6.1-4.32.1 net-snmp-devel-5.6.1-4.32.1 perl-SNMP-5.6.1-4.32.1 perl-SNMP-debuginfo-5.6.1-4.32.1 snmp-mibs-5.6.1-4.32.1 - openSUSE 11.4 (x86_64): libsnmp25-32bit-5.6.1-4.32.1 libsnmp25-debuginfo-32bit-5.6.1-4.32.1 - openSUSE 11.4 (ia64): libsnmp25-debuginfo-x86-5.6.1-4.32.1 libsnmp25-x86-5.6.1-4.32.1 References: http://support.novell.com/security/cve/CVE-2012-2141.html https://bugzilla.novell.com/759352

1 0

openSUSE-SU-2012:0657-1: moderate: update for wireshark
by opensuse-security＠opensuse.org 29 May '12

29 May '12

openSUSE Security Update: update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0657-1 Rating: moderate References: #763634 Cross-References: CVE-2012-2392 CVE-2012-2393 CVE-2012-2394 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update is a maintenance release of Wireshark. It fixes some vulererabilities when dissecting certain protocols. As packages for these protocols may be received over the network, an attacker may trigger infinite or large loops or crashes of the dissector. Wireshark release notes and advisories: - http://www.wireshark.org/docs/relnotes/wireshark-1.4.13.html - http://www.wireshark.org/security/wnpa-sec-2012-08.html * CVE-2012-2392 - http://www.wireshark.org/security/wnpa-sec-2012-09.html * CVE-2012-2393 - http://www.wireshark.org/security/wnpa-sec-2012-10.html * CVE-2012-2394 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-297 - openSUSE 11.4: zypper in -t patch openSUSE-2012-297 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): wireshark-1.4.13-3.12.1 wireshark-debuginfo-1.4.13-3.12.1 wireshark-debugsource-1.4.13-3.12.1 wireshark-devel-1.4.13-3.12.1 - openSUSE 11.4 (i586 x86_64): wireshark-1.4.13-0.14.1 wireshark-debuginfo-1.4.13-0.14.1 wireshark-debugsource-1.4.13-0.14.1 wireshark-devel-1.4.13-0.14.1 References: http://support.novell.com/security/cve/CVE-2012-2392.html http://support.novell.com/security/cve/CVE-2012-2393.html http://support.novell.com/security/cve/CVE-2012-2394.html https://bugzilla.novell.com/763634

1 0

openSUSE-SU-2012:0656-1: important: update for chromium, v8
by opensuse-security＠opensuse.org 29 May '12

29 May '12

openSUSE Security Update: update for chromium, v8 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0656-1 Rating: important References: #762481 Cross-References: CVE-2011-3083 CVE-2011-3084 CVE-2011-3085 CVE-2011-3086 CVE-2011-3087 CVE-2011-3088 CVE-2011-3089 CVE-2011-3090 CVE-2011-3091 CVE-2011-3092 CVE-2011-3093 CVE-2011-3094 CVE-2011-3095 CVE-2011-3096 CVE-2011-3098 CVE-2011-3100 CVE-2011-3101 CVE-2011-3102 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: Chromium update to 21.0.1145 * Fixed several issues around audio not playing with videos * Crash Fixes * Improvements to trackpad on Cr-48 * Security Fixes (bnc#762481) - CVE-2011-3083: Browser crash with video + FTP - CVE-2011-3084: Load links from internal pages in their own process. - CVE-2011-3085: UI corruption with long autofilled values - CVE-2011-3086: Use-after-free with style element. - CVE-2011-3087: Incorrect window navigation - CVE-2011-3088: Out-of-bounds read in hairline drawing - CVE-2011-3089: Use-after-free in table handling. - CVE-2011-3090: Race condition with workers. - CVE-2011-3091: Use-after-free with indexed DB - CVE-2011-3092: Invalid write in v8 regex - CVE-2011-3093: Out-of-bounds read in glyph handling - CVE-2011-3094: Out-of-bounds read in Tibetan handling - CVE-2011-3095: Out-of-bounds write in OGG container. - CVE-2011-3096: Use-after-free in GTK omnibox handling. - CVE-2011-3098: Bad search path for Windows Media Player plug-in - CVE-2011-3100: Out-of-bounds read drawing dash paths. - CVE-2011-3101: Work around Linux Nvidia driver bug - CVE-2011-3102: Off-by-one out-of-bounds write in libxml. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-295 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): chromium-21.0.1145.0-1.23.1 chromium-debuginfo-21.0.1145.0-1.23.1 chromium-debugsource-21.0.1145.0-1.23.1 chromium-desktop-gnome-21.0.1145.0-1.23.1 chromium-desktop-kde-21.0.1145.0-1.23.1 chromium-suid-helper-21.0.1145.0-1.23.1 chromium-suid-helper-debuginfo-21.0.1145.0-1.23.1 libv8-3-3.11.3.0-1.27.1 libv8-3-debuginfo-3.11.3.0-1.27.1 v8-debugsource-3.11.3.0-1.27.1 v8-devel-3.11.3.0-1.27.1 v8-private-headers-devel-3.11.3.0-1.27.1 References: http://support.novell.com/security/cve/CVE-2011-3083.html http://support.novell.com/security/cve/CVE-2011-3084.html http://support.novell.com/security/cve/CVE-2011-3085.html http://support.novell.com/security/cve/CVE-2011-3086.html http://support.novell.com/security/cve/CVE-2011-3087.html http://support.novell.com/security/cve/CVE-2011-3088.html http://support.novell.com/security/cve/CVE-2011-3089.html http://support.novell.com/security/cve/CVE-2011-3090.html http://support.novell.com/security/cve/CVE-2011-3091.html http://support.novell.com/security/cve/CVE-2011-3092.html http://support.novell.com/security/cve/CVE-2011-3093.html http://support.novell.com/security/cve/CVE-2011-3094.html http://support.novell.com/security/cve/CVE-2011-3095.html http://support.novell.com/security/cve/CVE-2011-3096.html http://support.novell.com/security/cve/CVE-2011-3098.html http://support.novell.com/security/cve/CVE-2011-3100.html http://support.novell.com/security/cve/CVE-2011-3101.html http://support.novell.com/security/cve/CVE-2011-3102.html https://bugzilla.novell.com/762481

1 0

openSUSE-SU-2012:0655-1: important: update for cobbler
by opensuse-security＠opensuse.org 29 May '12

29 May '12

openSUSE Security Update: update for cobbler ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0655-1 Rating: important References: #763610 Cross-References: CVE-2012-2395 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The xmlrpc interface of cobbler was prone to command injectoin Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-296 - openSUSE 11.4: zypper in -t patch openSUSE-2012-296 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): cobbler-2.2.1-7.13.1 cobbler-web-2.2.1-7.13.1 koan-2.2.1-7.13.1 - openSUSE 11.4 (i586 x86_64): cobbler-2.2.1-45.1 cobbler-web-2.2.1-45.1 koan-2.2.1-45.1 References: http://support.novell.com/security/cve/CVE-2012-2395.html https://bugzilla.novell.com/763610

1 0

openSUSE-SU-2012:0654-1: moderate: update for jakarta-poi
by opensuse-security＠opensuse.org 29 May '12

29 May '12

openSUSE Security Update: update for jakarta-poi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0654-1 Rating: moderate References: #750164 Cross-References: CVE-2012-0213 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Specially crafted CDF/CFBF files could trigger an out of memory condition Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-292 - openSUSE 11.4: zypper in -t patch openSUSE-2012-292 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): jakarta-poi-2.5.1-12.4.1 jakarta-poi-javadoc-2.5.1-12.4.1 jakarta-poi-manual-2.5.1-12.4.1 - openSUSE 11.4 (noarch): jakarta-poi-2.5.1-12.1 jakarta-poi-javadoc-2.5.1-12.1 jakarta-poi-manual-2.5.1-12.1 References: http://support.novell.com/security/cve/CVE-2012-0213.html https://bugzilla.novell.com/750164

1 0

openSUSE-SU-2012:0653-1: moderate: update for python-django
by opensuse-security＠opensuse.org 29 May '12

29 May '12

openSUSE Security Update: update for python-django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0653-1 Rating: moderate References: #718045 Cross-References: CVE-2011-4136 CVE-2011-4137 CVE-2011-4138 CVE-2011-4139 CVE-2011-4140 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: python-django update version to 1.2.7 fixes several security issues including denial of service, CSRF and information leaks: https://www.djangoproject.com/weblog/2011/sep/10/127/ Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-294 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): python-django-1.2.7-6.1 References: http://support.novell.com/security/cve/CVE-2011-4136.html http://support.novell.com/security/cve/CVE-2011-4137.html http://support.novell.com/security/cve/CVE-2011-4138.html http://support.novell.com/security/cve/CVE-2011-4139.html http://support.novell.com/security/cve/CVE-2011-4140.html https://bugzilla.novell.com/718045

1 0

openSUSE-SU-2012:0652-1: moderate: update for sudo
by opensuse-security＠opensuse.org 29 May '12

29 May '12

openSUSE Security Update: update for sudo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0652-1 Rating: moderate References: #762327 Cross-References: CVE-2012-2337 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: sudo did not always honor the Host_List setting in /etc/sudoers properly Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-293 - openSUSE 11.4: zypper in -t patch openSUSE-2012-293 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): sudo-1.8.2-2.8.1 sudo-debuginfo-1.8.2-2.8.1 sudo-debugsource-1.8.2-2.8.1 sudo-devel-1.8.2-2.8.1 - openSUSE 11.4 (i586 x86_64): sudo-1.7.6p2-0.13.1 sudo-debuginfo-1.7.6p2-0.13.1 sudo-debugsource-1.7.6p2-0.13.1 References: http://support.novell.com/security/cve/CVE-2012-2337.html https://bugzilla.novell.com/762327

1 0

openSUSE-RU-2012:0651-1: ntp: don't use --bind on /var/lib/ntp/proc
by maintenance＠opensuse.org 29 May '12

29 May '12

openSUSE Recommended Update: ntp: don't use --bind on /var/lib/ntp/proc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0651-1 Rating: low References: #656509 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for ntp: -656509: don't use --bind on /var/lib/ntp/proc Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-291 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): ntp-4.2.6p3-6.21.1 ntp-debuginfo-4.2.6p3-6.21.1 ntp-debugsource-4.2.6p3-6.21.1 ntp-doc-4.2.6p3-6.21.1 References: https://bugzilla.novell.com/656509

1 0

openSUSE-RU-2012:0650-1: upower: Adjust the cap on the energy rate
by maintenance＠opensuse.org 29 May '12

29 May '12

openSUSE Recommended Update: upower: Adjust the cap on the energy rate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0650-1 Rating: low References: #753327 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for upower: - 753327: Ignore the abnormal energy rate to evaluate the remaining battery time properly Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-290 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libupower-glib-devel-0.9.14-2.4.1 libupower-glib1-0.9.14-2.4.1 libupower-glib1-debuginfo-0.9.14-2.4.1 upower-0.9.14-2.4.1 upower-debuginfo-0.9.14-2.4.1 upower-debugsource-0.9.14-2.4.1 - openSUSE 12.1 (noarch): upower-lang-0.9.14-2.4.1 References: https://bugzilla.novell.com/753327

1 0

openSUSE-RU-2012:0649-1: important: sysconfig: Collective update
by maintenance＠opensuse.org 29 May '12

29 May '12

openSUSE Recommended Update: sysconfig: Collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0649-1 Rating: important References: #724775 #763533 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for sysconfig: - 763533: Fixed ifrenew-dhcp to use built-in dhcpcd --renew - 724775: added tests to the 77-network.rules file if the /sbin/ifup and /etc/sysconfig/network/scripts/ifup-sysctl exit Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-289 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): sysconfig-0.75.4-2.10.1 sysconfig-debuginfo-0.75.4-2.10.1 sysconfig-debugsource-0.75.4-2.10.1 References: https://bugzilla.novell.com/724775 https://bugzilla.novell.com/763533

1 0

openSUSE-SU-2012:0639-1: moderate: update for cobbler
by opensuse-security＠opensuse.org 25 May '12

25 May '12

openSUSE Security Update: update for cobbler ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0639-1 Rating: moderate References: #757062 #757316 Cross-References: CVE-2011-4952 CVE-2011-4953 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Specially crafted YAML could allow attackers to execute arbitrary code due to the use of yaml.load instead of yaml.safe_load. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-287 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): cobbler-2.2.1-40.1 cobbler-web-2.2.1-40.1 koan-2.2.1-40.1 References: http://support.novell.com/security/cve/CVE-2011-4952.html http://support.novell.com/security/cve/CVE-2011-4953.html https://bugzilla.novell.com/757062 https://bugzilla.novell.com/757316

1 0

openSUSE-RU-2012:0636-1: yast2-iscsi-client: fix parsing of iscsiadm
by maintenance＠opensuse.org 21 May '12

21 May '12

openSUSE Recommended Update: yast2-iscsi-client: fix parsing of iscsiadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0636-1 Rating: low References: #725182 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for yast2-iscsi-client: - 725182: fix parsing of iscsiadm output in IscsiClientLib.ycp Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-285 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): yast2-iscsi-client-2.21.10-1.4.1 References: https://bugzilla.novell.com/725182

1 0

openSUSE-RU-2012:0635-1: bzflag: Fixed crash at startup
by maintenance＠opensuse.org 21 May '12

21 May '12

openSUSE Recommended Update: bzflag: Fixed crash at startup ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0635-1 Rating: low References: #760406 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for bzflag: - 760406: Fixed crash at startup Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-284 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): bzflag-2.4.0-4.4.1 bzflag-debuginfo-2.4.0-4.4.1 bzflag-debugsource-2.4.0-4.4.1 References: https://bugzilla.novell.com/760406

1 0

openSUSE-RU-2012:0634-1: resource-agents: use most specific matching route
by maintenance＠opensuse.org 21 May '12

21 May '12

openSUSE Recommended Update: resource-agents: use most specific matching route ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0634-1 Rating: low References: #758024 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for resource-agents: - 758024: use most specific matching route Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-286 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): ldirectord-3.9.2-2.4.1 resource-agents-3.9.2-2.4.1 resource-agents-debuginfo-3.9.2-2.4.1 resource-agents-debugsource-3.9.2-2.4.1 References: https://bugzilla.novell.com/758024

1 0

openSUSE-RU-2012:0633-1: midori: fixed crash in the bookmarks dialog when adding a new bookmark
by maintenance＠opensuse.org 21 May '12

21 May '12

openSUSE Recommended Update: midori: fixed crash in the bookmarks dialog when adding a new bookmark ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0633-1 Rating: low References: #758430 #758431 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issue for midori: - 758430: fixed a crash in the bookmarks dialog when adding a new bookmark - 758431: removed the explicit setting of the CA certificate bundle file so that the system default is used without a bogus warning and added a dependency on ca-certificates Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-283 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): midori-0.4.1-2.4.2 midori-debuginfo-0.4.1-2.4.2 midori-debugsource-0.4.1-2.4.2 midori-devel-0.4.1-2.4.2 - openSUSE 12.1 (noarch): midori-lang-0.4.1-2.4.2 References: https://bugzilla.novell.com/758430 https://bugzilla.novell.com/758431

1 0

openSUSE-RU-2012:0632-1: wine: Update to Wine 1.4 stable release
by maintenance＠opensuse.org 21 May '12

21 May '12

openSUSE Recommended Update: wine: Update to Wine 1.4 stable release ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0632-1 Rating: low References: #697035 #723402 #751716 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: Wine was updated to its 1.4 final release (bnc#751716) This release represents 20 months of development effort and over 16,000 individual changes. The main highlights are the new DIB graphics engine, a redesigned audio stack, and full support for bidirectional text and character shaping. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-265 - openSUSE 11.4: zypper in -t patch openSUSE-2012-265 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): wine-1.4-2.12.1 wine-32bit-1.4-2.12.1 wine-debuginfo-1.4-2.12.1 wine-debuginfo-32bit-1.4-2.12.1 wine-debugsource-1.4-2.12.1 wine-devel-1.4-2.12.1 wine-devel-32bit-1.4-2.12.1 wine-devel-debuginfo-1.4-2.12.1 wine-devel-debuginfo-32bit-1.4-2.12.1 - openSUSE 12.1 (noarch): wine-gecko-1.4-2.4.1 - openSUSE 12.1 (ia64): wine-debuginfo-x86-1.4-2.12.1 wine-devel-debuginfo-x86-1.4-2.12.1 wine-x86-1.4-2.12.1 - openSUSE 11.4 (i586 x86_64): wine-1.4-12.1 wine-32bit-1.4-12.1 wine-debuginfo-1.4-12.1 wine-debuginfo-32bit-1.4-12.1 wine-debugsource-1.4-12.1 wine-devel-1.4-12.1 wine-devel-32bit-1.4-12.1 wine-devel-debuginfo-1.4-12.1 wine-devel-debuginfo-32bit-1.4-12.1 - openSUSE 11.4 (noarch): wine-gecko-1.4-10.1 - openSUSE 11.4 (ia64): wine-debuginfo-x86-1.4-12.1 wine-devel-debuginfo-x86-1.4-12.1 wine-x86-1.4-12.1 References: https://bugzilla.novell.com/697035 https://bugzilla.novell.com/723402 https://bugzilla.novell.com/751716

1 0