May 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2012:0631-1: suspend: Fixes an issue with serial consoles disallowing suspend
by maintenance＠opensuse.org 21 May '12

21 May '12

openSUSE Recommended Update: suspend: Fixes an issue with serial consoles disallowing suspend ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0631-1 Rating: low References: #472861 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for suspend: - 472861: Fixes an issue with serial consoles disallowing suspend Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-279 - openSUSE 11.4: zypper in -t patch openSUSE-2012-279 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): suspend-1.0-10.4.1 suspend-debuginfo-1.0-10.4.1 suspend-debugsource-1.0-10.4.1 - openSUSE 11.4 (i586 x86_64): suspend-0.80.20100129-10.1 suspend-debuginfo-0.80.20100129-10.1 suspend-debugsource-0.80.20100129-10.1 References: https://bugzilla.novell.com/472861

1 0

openSUSE-RU-2012:0630-1: xfwm4: update to 4.8.3
by maintenance＠opensuse.org 21 May '12

21 May '12

openSUSE Recommended Update: xfwm4: update to 4.8.3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0630-1 Rating: low References: #761550 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for xfwm4: - update to version 4.8.3 - do not exit the move/resize loop when just any key is pressed unless the operation is triggered via the keyboard - reverting from desktop view may not focus the top most window - recompute window's position/maximization state even if the overall size of the screen hasn't changed as the actual layout of the monitors may have changed nevertheless - check for both forward and backward cycling modifier to be released before exiting the cycle loop - fix a couple of memory leaks - fix some events being lost causing the tabwin window to remain sometimes after the key has been released - fix crash when workspace count is set to negative values - fix crash in signal handler - fix a bug with transients for group (including utility windows) being withdrawn as many times as parent windows where in the group, causing utility windows to disapear when switching workspaces - do not allow applications to change the win layer on dialogs to prevent dialogs to be unreachable in some Java based applications - do not enforce the size increment only if the size request comes from the application itself - dropped obsolete xfwm4-4.8.2-careful-layer-manipulation.patch, xfwm4-4.8.2-fix-disappearing-transient-windows.patch, and xfwm4-4.8.2-fix-resizing.patch - 761550: added xfwm4-fix-sticky-parentless-dialogs.patch (bxo#8263) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-280 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): xfwm4-4.8.3-10.9.1 xfwm4-debuginfo-4.8.3-10.9.1 xfwm4-debugsource-4.8.3-10.9.1 xfwm4-doc-4.8.3-10.9.1 - openSUSE 12.1 (noarch): xfwm4-branding-upstream-4.8.3-10.9.1 References: https://bugzilla.novell.com/761550

1 0

openSUSE-RU-2012:0629-1: postfix: use {name} instead of %{name} in postfix.spec
by maintenance＠opensuse.org 21 May '12

21 May '12

openSUSE Recommended Update: postfix: use {name} instead of %{name} in postfix.spec ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0629-1 Rating: low References: #753910 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for postfix: - 753910: use {name} instead of %{name} in postfix.spec Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-281 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): postfix-2.8.8-3.13.1 postfix-debuginfo-2.8.8-3.13.1 postfix-debugsource-2.8.8-3.13.1 postfix-devel-2.8.8-3.13.1 postfix-mysql-2.8.8-3.13.1 postfix-mysql-debuginfo-2.8.8-3.13.1 postfix-postgresql-2.8.8-3.13.1 postfix-postgresql-debuginfo-2.8.8-3.13.1 - openSUSE 12.1 (noarch): postfix-doc-2.8.8-3.13.1 References: https://bugzilla.novell.com/753910

1 0

openSUSE-RU-2012:0628-1: gvfs: Fix the wrong free space size of webdav
by maintenance＠opensuse.org 21 May '12

21 May '12

openSUSE Recommended Update: gvfs: Fix the wrong free space size of webdav ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0628-1 Rating: low References: #760606 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for gvfs: - 760606: Fix the free space calculation of the gvfs webdav backend Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-282 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): gvfs-1.10.1-2.4.1 gvfs-backend-afc-1.10.1-2.4.1 gvfs-backend-afc-debuginfo-1.10.1-2.4.1 gvfs-backends-1.10.1-2.4.1 gvfs-backends-debuginfo-1.10.1-2.4.1 gvfs-debuginfo-1.10.1-2.4.1 gvfs-debugsource-1.10.1-2.4.1 gvfs-devel-1.10.1-2.4.1 gvfs-fuse-1.10.1-2.4.1 gvfs-fuse-debuginfo-1.10.1-2.4.1 libgvfscommon0-1.10.1-2.4.1 libgvfscommon0-debuginfo-1.10.1-2.4.1 - openSUSE 12.1 (x86_64): gvfs-32bit-1.10.1-2.4.1 gvfs-debuginfo-32bit-1.10.1-2.4.1 libgvfscommon0-32bit-1.10.1-2.4.1 libgvfscommon0-debuginfo-32bit-1.10.1-2.4.1 - openSUSE 12.1 (noarch): gvfs-lang-1.10.1-2.4.1 - openSUSE 12.1 (ia64): gvfs-debuginfo-x86-1.10.1-2.4.1 gvfs-x86-1.10.1-2.4.1 libgvfscommon0-debuginfo-x86-1.10.1-2.4.1 libgvfscommon0-x86-1.10.1-2.4.1 References: https://bugzilla.novell.com/760606

1 0

openSUSE-SU-2012:0621-1: moderate: update for coreutils
by opensuse-security＠opensuse.org 15 May '12

15 May '12

openSUSE Security Update: update for coreutils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0621-1 Rating: moderate References: #697897 #741241 Cross-References: CVE-2005-4890 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: when running "su -c" to execute commands as different user the target user could inject command back into the calling user's terminal via the TIOCSTI ioctl. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-278 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): coreutils-8.14-3.4.1 coreutils-debuginfo-8.14-3.4.1 coreutils-debugsource-8.14-3.4.1 - openSUSE 12.1 (noarch): coreutils-lang-8.14-3.4.1 - openSUSE 12.1 (ia64): coreutils-debuginfo-x86-8.14-3.4.1 coreutils-x86-8.14-3.4.1 References: http://support.novell.com/security/cve/CVE-2005-4890.html https://bugzilla.novell.com/697897 https://bugzilla.novell.com/741241

1 0

openSUSE-SU-2012:0620-1: moderate: update for gnutls
by opensuse-security＠opensuse.org 15 May '12

15 May '12

openSUSE Security Update: update for gnutls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0620-1 Rating: moderate References: #752193 #753301 #754223 Cross-References: CVE-2012-1569 CVE-2012-1573 CVE-2012-1663 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: No description available. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-277 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): gnutls-3.0.3-5.8.1 gnutls-debuginfo-3.0.3-5.8.1 gnutls-debugsource-3.0.3-5.8.1 libgnutls-devel-3.0.3-5.8.1 libgnutls-extra-devel-3.0.3-5.8.1 libgnutls-extra28-3.0.3-5.8.1 libgnutls-extra28-debuginfo-3.0.3-5.8.1 libgnutls-openssl-devel-3.0.3-5.8.1 libgnutls-openssl27-3.0.3-5.8.1 libgnutls-openssl27-debuginfo-3.0.3-5.8.1 libgnutls28-3.0.3-5.8.1 libgnutls28-debuginfo-3.0.3-5.8.1 libgnutlsxx-devel-3.0.3-5.8.1 libgnutlsxx28-3.0.3-5.8.1 libgnutlsxx28-debuginfo-3.0.3-5.8.1 - openSUSE 12.1 (x86_64): libgnutls-devel-32bit-3.0.3-5.8.1 libgnutls28-32bit-3.0.3-5.8.1 libgnutls28-debuginfo-32bit-3.0.3-5.8.1 - openSUSE 12.1 (ia64): libgnutls28-debuginfo-x86-3.0.3-5.8.1 libgnutls28-x86-3.0.3-5.8.1 References: http://support.novell.com/security/cve/CVE-2012-1569.html http://support.novell.com/security/cve/CVE-2012-1573.html http://support.novell.com/security/cve/CVE-2012-1663.html https://bugzilla.novell.com/752193 https://bugzilla.novell.com/753301 https://bugzilla.novell.com/754223

1 0

openSUSE-SU-2012:0619-1: moderate: update for mariadb
by opensuse-security＠opensuse.org 14 May '12

14 May '12

openSUSE Security Update: update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0619-1 Rating: moderate References: #675870 #734436 #742272 #758460 Cross-References: CVE-2011-2262 CVE-2012-0075 CVE-2012-0087 CVE-2012-0101 CVE-2012-0102 CVE-2012-0112 CVE-2012-0113 CVE-2012-0114 CVE-2012-0115 CVE-2012-0116 CVE-2012-0118 CVE-2012-0119 CVE-2012-0120 CVE-2012-0484 CVE-2012-0485 CVE-2012-0490 CVE-2012-0492 CVE-2012-0583 CVE-2012-1688 CVE-2012-1690 CVE-2012-1703 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: mariadb update to version 5.1.62 fixes several security issues and bugs. Please refer to the following upstream announcement for details: http://kb.askmonty.org/en/changelogs-mariadb-51-series Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-274 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libmariadbclient16-5.1.62-39.1 libmariadbclient16-debuginfo-5.1.62-39.1 libmariadbclient_r16-5.1.62-39.1 libmariadbclient_r16-debuginfo-5.1.62-39.1 mariadb-5.1.62-39.1 mariadb-bench-5.1.62-39.1 mariadb-bench-debuginfo-5.1.62-39.1 mariadb-client-5.1.62-39.1 mariadb-client-debuginfo-5.1.62-39.1 mariadb-debug-5.1.62-39.1 mariadb-debug-debuginfo-5.1.62-39.1 mariadb-debuginfo-5.1.62-39.1 mariadb-debugsource-5.1.62-39.1 mariadb-test-5.1.62-39.1 mariadb-test-debuginfo-5.1.62-39.1 mariadb-tools-5.1.62-39.1 mariadb-tools-debuginfo-5.1.62-39.1 References: http://support.novell.com/security/cve/CVE-2011-2262.html http://support.novell.com/security/cve/CVE-2012-0075.html http://support.novell.com/security/cve/CVE-2012-0087.html http://support.novell.com/security/cve/CVE-2012-0101.html http://support.novell.com/security/cve/CVE-2012-0102.html http://support.novell.com/security/cve/CVE-2012-0112.html http://support.novell.com/security/cve/CVE-2012-0113.html http://support.novell.com/security/cve/CVE-2012-0114.html http://support.novell.com/security/cve/CVE-2012-0115.html http://support.novell.com/security/cve/CVE-2012-0116.html http://support.novell.com/security/cve/CVE-2012-0118.html http://support.novell.com/security/cve/CVE-2012-0119.html http://support.novell.com/security/cve/CVE-2012-0120.html http://support.novell.com/security/cve/CVE-2012-0484.html http://support.novell.com/security/cve/CVE-2012-0485.html http://support.novell.com/security/cve/CVE-2012-0490.html http://support.novell.com/security/cve/CVE-2012-0492.html http://support.novell.com/security/cve/CVE-2012-0583.html http://support.novell.com/security/cve/CVE-2012-1688.html http://support.novell.com/security/cve/CVE-2012-1690.html http://support.novell.com/security/cve/CVE-2012-1703.html https://bugzilla.novell.com/675870 https://bugzilla.novell.com/734436 https://bugzilla.novell.com/742272 https://bugzilla.novell.com/758460

1 0

openSUSE-SU-2012:0618-1: moderate: update for mysql-community-server
by opensuse-security＠opensuse.org 14 May '12

14 May '12

openSUSE Security Update: update for mysql-community-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0618-1 Rating: moderate References: #675870 #734436 #742272 #758460 Cross-References: CVE-2011-2262 CVE-2012-0075 CVE-2012-0087 CVE-2012-0101 CVE-2012-0102 CVE-2012-0112 CVE-2012-0113 CVE-2012-0114 CVE-2012-0115 CVE-2012-0116 CVE-2012-0118 CVE-2012-0119 CVE-2012-0120 CVE-2012-0484 CVE-2012-0485 CVE-2012-0490 CVE-2012-0492 CVE-2012-0583 CVE-2012-1688 CVE-2012-1690 CVE-2012-1703 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: mysql update to version 5.1.62 fixes several security issues and bugs. Please refer to the following upstream announcements for details: - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-58.html - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-59.html - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-60.html - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-61.html - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-62.html Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-273 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libmysqlclient-devel-5.1.62-52.1 libmysqlclient16-5.1.62-52.1 libmysqlclient16-debuginfo-5.1.62-52.1 libmysqlclient_r16-5.1.62-52.1 libmysqlclient_r16-debuginfo-5.1.62-52.1 libmysqld-devel-5.1.62-52.1 libmysqld0-5.1.62-52.1 libmysqld0-debuginfo-5.1.62-52.1 mysql-community-server-5.1.62-52.1 mysql-community-server-bench-5.1.62-52.1 mysql-community-server-bench-debuginfo-5.1.62-52.1 mysql-community-server-client-5.1.62-52.1 mysql-community-server-client-debuginfo-5.1.62-52.1 mysql-community-server-debug-5.1.62-52.1 mysql-community-server-debug-debuginfo-5.1.62-52.1 mysql-community-server-debuginfo-5.1.62-52.1 mysql-community-server-debugsource-5.1.62-52.1 mysql-community-server-test-5.1.62-52.1 mysql-community-server-test-debuginfo-5.1.62-52.1 mysql-community-server-tools-5.1.62-52.1 mysql-community-server-tools-debuginfo-5.1.62-52.1 - openSUSE 11.4 (x86_64): libmysqlclient16-32bit-5.1.62-52.1 libmysqlclient16-debuginfo-32bit-5.1.62-52.1 libmysqlclient_r16-32bit-5.1.62-52.1 libmysqlclient_r16-debuginfo-32bit-5.1.62-52.1 - openSUSE 11.4 (ia64): libmysqlclient16-debuginfo-x86-5.1.62-52.1 libmysqlclient16-x86-5.1.62-52.1 libmysqlclient_r16-debuginfo-x86-5.1.62-52.1 libmysqlclient_r16-x86-5.1.62-52.1 References: http://support.novell.com/security/cve/CVE-2011-2262.html http://support.novell.com/security/cve/CVE-2012-0075.html http://support.novell.com/security/cve/CVE-2012-0087.html http://support.novell.com/security/cve/CVE-2012-0101.html http://support.novell.com/security/cve/CVE-2012-0102.html http://support.novell.com/security/cve/CVE-2012-0112.html http://support.novell.com/security/cve/CVE-2012-0113.html http://support.novell.com/security/cve/CVE-2012-0114.html http://support.novell.com/security/cve/CVE-2012-0115.html http://support.novell.com/security/cve/CVE-2012-0116.html http://support.novell.com/security/cve/CVE-2012-0118.html http://support.novell.com/security/cve/CVE-2012-0119.html http://support.novell.com/security/cve/CVE-2012-0120.html http://support.novell.com/security/cve/CVE-2012-0484.html http://support.novell.com/security/cve/CVE-2012-0485.html http://support.novell.com/security/cve/CVE-2012-0490.html http://support.novell.com/security/cve/CVE-2012-0492.html http://support.novell.com/security/cve/CVE-2012-0583.html http://support.novell.com/security/cve/CVE-2012-1688.html http://support.novell.com/security/cve/CVE-2012-1690.html http://support.novell.com/security/cve/CVE-2012-1703.html https://bugzilla.novell.com/675870 https://bugzilla.novell.com/734436 https://bugzilla.novell.com/742272 https://bugzilla.novell.com/758460

1 0

openSUSE-SU-2012:0617-1: moderate: update for mysql-cluster
by opensuse-security＠opensuse.org 14 May '12

14 May '12

openSUSE Security Update: update for mysql-cluster ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0617-1 Rating: moderate References: #675870 #734436 #742272 #758460 Cross-References: CVE-2009-5026 CVE-2012-0583 CVE-2012-1688 CVE-2012-1690 CVE-2012-1696 CVE-2012-1697 CVE-2012-1703 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: MySQL Cluster 7.1.21 fixes several security issues and bugs. Please refer to the following upstream announcement for details: http://dev.mysql.com/doc/refman/5.1/en/mysql-cluster-news-7- 1.html Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-276 - openSUSE 11.4: zypper in -t patch openSUSE-2012-276 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libmysqlclusterclient16-7.1.21-2.4.1 libmysqlclusterclient16-debuginfo-7.1.21-2.4.1 libmysqlclusterclient_r16-7.1.21-2.4.1 libmysqlclusterclient_r16-debuginfo-7.1.21-2.4.1 mysql-cluster-7.1.21-2.4.1 mysql-cluster-bench-7.1.21-2.4.1 mysql-cluster-bench-debuginfo-7.1.21-2.4.1 mysql-cluster-client-7.1.21-2.4.1 mysql-cluster-client-debuginfo-7.1.21-2.4.1 mysql-cluster-debug-7.1.21-2.4.1 mysql-cluster-debug-debuginfo-7.1.21-2.4.1 mysql-cluster-debuginfo-7.1.21-2.4.1 mysql-cluster-debugsource-7.1.21-2.4.1 mysql-cluster-ndb-extra-7.1.21-2.4.1 mysql-cluster-ndb-extra-debuginfo-7.1.21-2.4.1 mysql-cluster-ndb-management-7.1.21-2.4.1 mysql-cluster-ndb-management-debuginfo-7.1.21-2.4.1 mysql-cluster-ndb-storage-7.1.21-2.4.1 mysql-cluster-ndb-storage-debuginfo-7.1.21-2.4.1 mysql-cluster-ndb-tools-7.1.21-2.4.1 mysql-cluster-ndb-tools-debuginfo-7.1.21-2.4.1 mysql-cluster-test-7.1.21-2.4.1 mysql-cluster-test-debuginfo-7.1.21-2.4.1 mysql-cluster-tools-7.1.21-2.4.1 mysql-cluster-tools-debuginfo-7.1.21-2.4.1 - openSUSE 11.4 (i586 x86_64): libmysqlclusterclient16-7.1.21-52.1 libmysqlclusterclient16-debuginfo-7.1.21-52.1 libmysqlclusterclient_r16-7.1.21-52.1 libmysqlclusterclient_r16-debuginfo-7.1.21-52.1 mysql-cluster-7.1.21-52.1 mysql-cluster-bench-7.1.21-52.1 mysql-cluster-bench-debuginfo-7.1.21-52.1 mysql-cluster-client-7.1.21-52.1 mysql-cluster-client-debuginfo-7.1.21-52.1 mysql-cluster-debug-7.1.21-52.1 mysql-cluster-debug-debuginfo-7.1.21-52.1 mysql-cluster-debuginfo-7.1.21-52.1 mysql-cluster-debugsource-7.1.21-52.1 mysql-cluster-ndb-extra-7.1.21-52.1 mysql-cluster-ndb-extra-debuginfo-7.1.21-52.1 mysql-cluster-ndb-management-7.1.21-52.1 mysql-cluster-ndb-management-debuginfo-7.1.21-52.1 mysql-cluster-ndb-storage-7.1.21-52.1 mysql-cluster-ndb-storage-debuginfo-7.1.21-52.1 mysql-cluster-ndb-tools-7.1.21-52.1 mysql-cluster-ndb-tools-debuginfo-7.1.21-52.1 mysql-cluster-test-7.1.21-52.1 mysql-cluster-test-debuginfo-7.1.21-52.1 mysql-cluster-tools-7.1.21-52.1 mysql-cluster-tools-debuginfo-7.1.21-52.1 References: http://support.novell.com/security/cve/CVE-2009-5026.html http://support.novell.com/security/cve/CVE-2012-0583.html http://support.novell.com/security/cve/CVE-2012-1688.html http://support.novell.com/security/cve/CVE-2012-1690.html http://support.novell.com/security/cve/CVE-2012-1696.html http://support.novell.com/security/cve/CVE-2012-1697.html http://support.novell.com/security/cve/CVE-2012-1703.html https://bugzilla.novell.com/675870 https://bugzilla.novell.com/734436 https://bugzilla.novell.com/742272 https://bugzilla.novell.com/758460

1 0

openSUSE-SU-2012:0615-1: update for taglib
by opensuse-security＠opensuse.org 14 May '12

14 May '12

openSUSE Security Update: update for taglib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0615-1 Rating: low References: #760496 Cross-References: CVE-2012-2396 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Specially crafted MP4 files could crash taglib Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-275 - openSUSE 11.4: zypper in -t patch openSUSE-2012-275 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libtag-devel-1.7-8.7.1 libtag1-1.7-8.7.1 libtag1-debuginfo-1.7-8.7.1 libtag_c0-1.7-8.7.1 libtag_c0-debuginfo-1.7-8.7.1 taglib-1.7-8.7.1 taglib-debugsource-1.7-8.7.1 - openSUSE 12.1 (x86_64): libtag1-32bit-1.7-8.7.1 libtag1-debuginfo-32bit-1.7-8.7.1 libtag_c0-32bit-1.7-8.7.1 libtag_c0-debuginfo-32bit-1.7-8.7.1 - openSUSE 12.1 (ia64): libtag1-debuginfo-x86-1.7-8.7.1 libtag1-x86-1.7-8.7.1 libtag_c0-debuginfo-x86-1.7-8.7.1 libtag_c0-x86-1.7-8.7.1 - openSUSE 11.4 (i586 x86_64): taglib-1.6.2-10.1 taglib-debuginfo-1.6.2-10.1 taglib-debugsource-1.6.2-10.1 taglib-devel-1.6.2-10.1 - openSUSE 11.4 (x86_64): taglib-32bit-1.6.2-10.1 taglib-debuginfo-32bit-1.6.2-10.1 - openSUSE 11.4 (ia64): taglib-debuginfo-x86-1.6.2-10.1 taglib-x86-1.6.2-10.1 References: http://support.novell.com/security/cve/CVE-2012-2396.html https://bugzilla.novell.com/760496

1 0

openSUSE-RU-2012:0614-1: important: update for opera
by maintenance＠opensuse.org 14 May '12

14 May '12

openSUSE Recommended Update: update for opera ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0614-1 Rating: important References: #761633 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: opera update to 11.64 fixes a security vulnerability that could lead to code execution. full changelog available at: http://www.opera.com/docs/changelogs/unix/1164/ Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-271 - openSUSE 11.4: zypper in -t patch openSUSE-2012-271 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): opera-11.64-12.1 opera-gtk-11.64-12.1 opera-kde4-11.64-12.1 - openSUSE 11.4 (i586 x86_64): opera-11.64-19.1 opera-gtk-11.64-19.1 opera-kde4-11.64-19.1 References: https://bugzilla.novell.com/761633

1 0

openSUSE-SU-2012:0613-1: moderate: update for chromium, v8
by opensuse-security＠opensuse.org 14 May '12

14 May '12

openSUSE Security Update: update for chromium, v8 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0613-1 Rating: moderate References: #759381 #760264 Cross-References: CVE-2011-3078 CVE-2011-3079 CVE-2011-3080 CVE-2011-3081 CVE-2012-1521 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: Chromium version 20.0.1128 fixes several security issues: - CVE-2011-3078: Use after free in floats handling. - CVE-2012-1521: Use after free in xml parser. - CVE-2011-3079: IPC validation failure. - CVE-2011-3080: Race condition in sandbox IPC - CVE-2011-3081: Use after free in floats handling. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-272 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): chromium-20.0.1128.0-1.20.1 chromium-debuginfo-20.0.1128.0-1.20.1 chromium-debugsource-20.0.1128.0-1.20.1 chromium-desktop-gnome-20.0.1128.0-1.20.1 chromium-desktop-kde-20.0.1128.0-1.20.1 chromium-suid-helper-20.0.1128.0-1.20.1 chromium-suid-helper-debuginfo-20.0.1128.0-1.20.1 libv8-3-3.10.8.1-1.24.1 libv8-3-debuginfo-3.10.8.1-1.24.1 v8-debugsource-3.10.8.1-1.24.1 v8-devel-3.10.8.1-1.24.1 v8-private-headers-devel-3.10.8.1-1.24.1 References: http://support.novell.com/security/cve/CVE-2011-3078.html http://support.novell.com/security/cve/CVE-2011-3079.html http://support.novell.com/security/cve/CVE-2011-3080.html http://support.novell.com/security/cve/CVE-2011-3081.html http://support.novell.com/security/cve/CVE-2012-1521.html https://bugzilla.novell.com/759381 https://bugzilla.novell.com/760264

1 0

openSUSE-SU-2012:0610-1: important: opera to 11.62
by opensuse-security＠opensuse.org 11 May '12

11 May '12

openSUSE Security Update: opera to 11.62 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0610-1 Rating: important References: #754687 Cross-References: CVE-2012-1924 CVE-2012-1925 CVE-2012-1926 CVE-2012-1927 CVE-2012-1928 CVE-2012-1929 CVE-2012-1930 CVE-2012-1931 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: The Opera web browser was updated to 11.62 fixing various bugs and security issues. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-270 - openSUSE 11.4: zypper in -t patch openSUSE-2012-270 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): opera-11.62-9.1 opera-gtk-11.62-9.1 opera-kde4-11.62-9.1 - openSUSE 11.4 (i586 x86_64): opera-11.62-16.1 opera-gtk-11.62-16.1 opera-kde4-11.62-16.1 References: http://support.novell.com/security/cve/CVE-2012-1924.html http://support.novell.com/security/cve/CVE-2012-1925.html http://support.novell.com/security/cve/CVE-2012-1926.html http://support.novell.com/security/cve/CVE-2012-1927.html http://support.novell.com/security/cve/CVE-2012-1928.html http://support.novell.com/security/cve/CVE-2012-1929.html http://support.novell.com/security/cve/CVE-2012-1930.html http://support.novell.com/security/cve/CVE-2012-1931.html https://bugzilla.novell.com/754687

1 0

openSUSE-SU-2012:0609-1: moderate: update for epiphany, libsoup
by opensuse-security＠opensuse.org 10 May '12

10 May '12

openSUSE Security Update: update for epiphany, libsoup ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0609-1 Rating: moderate References: #758431 Cross-References: CVE-2012-2132 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: libsoup considered all ssl connections as trusted even if no CA certificates were configured. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-267 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): epiphany-2.30.6-14.1 epiphany-branding-upstream-2.30.6-14.1 epiphany-debuginfo-2.30.6-14.1 epiphany-debugsource-2.30.6-14.1 epiphany-devel-2.30.6-14.1 libsoup-2_4-1-2.32.2-3.12.1 libsoup-2_4-1-debuginfo-2.32.2-3.12.1 libsoup-debugsource-2.32.2-3.12.1 libsoup-devel-2.32.2-3.12.1 midori-0.3.0-7.13.1 midori-debuginfo-0.3.0-7.13.1 midori-debugsource-0.3.0-7.13.1 midori-devel-0.3.0-7.13.1 - openSUSE 11.4 (x86_64): libsoup-2_4-1-32bit-2.32.2-3.12.1 libsoup-2_4-1-debuginfo-32bit-2.32.2-3.12.1 libsoup-devel-32bit-2.32.2-3.12.1 - openSUSE 11.4 (noarch): epiphany-lang-2.30.6-14.1 midori-lang-0.3.0-7.13.1 - openSUSE 11.4 (ia64): libsoup-2_4-1-debuginfo-x86-2.32.2-3.12.1 libsoup-2_4-1-x86-2.32.2-3.12.1 References: http://support.novell.com/security/cve/CVE-2012-2132.html https://bugzilla.novell.com/758431

1 0

openSUSE-SU-2012:0608-1: moderate: update for puppet
by opensuse-security＠opensuse.org 10 May '12

10 May '12

openSUSE Security Update: update for puppet ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0608-1 Rating: moderate References: #755869 #755870 #755871 #755872 Cross-References: CVE-2012-1986 CVE-2012-1987 CVE-2012-1988 CVE-2012-1989 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: puppet was prone to several security issues Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-269 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): puppet-2.7.6-1.7.1 puppet-server-2.7.6-1.7.1 References: http://support.novell.com/security/cve/CVE-2012-1986.html http://support.novell.com/security/cve/CVE-2012-1987.html http://support.novell.com/security/cve/CVE-2012-1988.html http://support.novell.com/security/cve/CVE-2012-1989.html https://bugzilla.novell.com/755869 https://bugzilla.novell.com/755870 https://bugzilla.novell.com/755871 https://bugzilla.novell.com/755872

1 0

openSUSE-SU-2012:0607-1: update for cifs-utils
by opensuse-security＠opensuse.org 10 May '12

10 May '12

openSUSE Security Update: update for cifs-utils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0607-1 Rating: low References: #754443 Cross-References: CVE-2012-1586 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: mount.cifs could leak information about existence of files normally not accessible to users Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-268 - openSUSE 11.4: zypper in -t patch openSUSE-2012-268 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): cifs-utils-4.9-7.7.1 cifs-utils-debuginfo-4.9-7.7.1 cifs-utils-debugsource-4.9-7.7.1 - openSUSE 11.4 (i586 x86_64): cifs-utils-4.9-1.9.1 cifs-utils-debuginfo-4.9-1.9.1 cifs-utils-debugsource-4.9-1.9.1 References: http://support.novell.com/security/cve/CVE-2012-1586.html https://bugzilla.novell.com/754443

1 0

openSUSE-RU-2012:0597-1: apparmor: update samba profiles
by maintenance＠opensuse.org 08 May '12

08 May '12

openSUSE Recommended Update: apparmor: update samba profiles ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0597-1 Rating: low References: #725967 #738041 #757545 #758426 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes the following issues for apparmor: - 757545: update samba profiles to have the same permissions as in openSUSE 12.1 (with some exceptions, see bnc#757545#c12) This also fixes bnc#725967, bnc#738041, bnc#738041 - add missing x bit for directories in /etc/apparmor/ and /etc/apparmor.d/ Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-266 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apache2-mod_apparmor-2.5.1.r1445-52.126.1 apache2-mod_apparmor-debuginfo-2.5.1.r1445-52.126.1 apparmor-debugsource-2.5.1.r1445-52.126.1 apparmor-parser-2.5.1.r1445-52.126.1 apparmor-parser-debuginfo-2.5.1.r1445-52.126.1 libapparmor-devel-2.5.1.r1445-52.126.1 libapparmor1-2.5.1.r1445-52.126.1 libapparmor1-debuginfo-2.5.1.r1445-52.126.1 pam_apparmor-2.5.1.r1445-52.126.1 pam_apparmor-debuginfo-2.5.1.r1445-52.126.1 perl-apparmor-2.5.1.r1445-52.126.1 perl-apparmor-debuginfo-2.5.1.r1445-52.126.1 tomcat_apparmor-2.5.1.r1445-52.126.1 tomcat_apparmor-debuginfo-2.5.1.r1445-52.126.1 - openSUSE 11.4 (x86_64): libapparmor1-32bit-2.5.1.r1445-52.126.1 libapparmor1-debuginfo-32bit-2.5.1.r1445-52.126.1 pam_apparmor-32bit-2.5.1.r1445-52.126.1 pam_apparmor-debuginfo-32bit-2.5.1.r1445-52.126.1 - openSUSE 11.4 (noarch): apparmor-docs-2.5.1.r1445-52.126.1 apparmor-parser-lang-2.5.1.r1445-52.126.1 apparmor-profiles-2.5.1.r1445-52.126.1 apparmor-utils-2.5.1.r1445-52.126.1 apparmor-utils-lang-2.5.1.r1445-52.126.1 - openSUSE 11.4 (ia64): libapparmor1-debuginfo-x86-2.5.1.r1445-52.126.1 libapparmor1-x86-2.5.1.r1445-52.126.1 pam_apparmor-debuginfo-x86-2.5.1.r1445-52.126.1 pam_apparmor-x86-2.5.1.r1445-52.126.1 References: https://bugzilla.novell.com/725967 https://bugzilla.novell.com/738041 https://bugzilla.novell.com/757545 https://bugzilla.novell.com/758426

1 0

openSUSE-RU-2012:0596-1: hyper-v: Include in 12.1 codebase
by maintenance＠opensuse.org 08 May '12

08 May '12

openSUSE Recommended Update: hyper-v: Include in 12.1 codebase ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0596-1 Rating: low References: #585651 #600212 #650748 #676890 #685189 #731198 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update contains the userland part of the Hyper-V virtualization components that we missed shipping with 12.1 originally. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-263 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): hyper-v-3-4.1 hyper-v-debuginfo-3-4.1 hyper-v-debugsource-3-4.1 References: https://bugzilla.novell.com/585651 https://bugzilla.novell.com/600212 https://bugzilla.novell.com/650748 https://bugzilla.novell.com/676890 https://bugzilla.novell.com/685189 https://bugzilla.novell.com/731198

1 0

openSUSE-RU-2012:0595-1: libmtp: disable mtp-probe
by maintenance＠opensuse.org 08 May '12

08 May '12

openSUSE Recommended Update: libmtp: disable mtp-probe ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0595-1 Rating: low References: #700243 #759344 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The previous libmtp did not disable mtp-probe fully, making udev print out "missing mtp-probe" messages. This update also disables the udev rule. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-264 - openSUSE 11.4: zypper in -t patch openSUSE-2012-264 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libmtp-debugsource-1.1.3-8.7.1 libmtp-devel-1.1.3-8.7.1 libmtp9-1.1.3-8.7.1 libmtp9-debuginfo-1.1.3-8.7.1 mtp-tools-1.1.3-8.7.1 mtp-tools-debuginfo-1.1.3-8.7.1 - openSUSE 11.4 (i586 x86_64): libmtp-debugsource-1.0.6-10.1 libmtp-devel-1.0.6-10.1 libmtp8-1.0.6-10.1 libmtp8-debuginfo-1.0.6-10.1 mtp-tools-1.0.6-10.1 mtp-tools-debuginfo-1.0.6-10.1 References: https://bugzilla.novell.com/700243 https://bugzilla.novell.com/759344

1 0

openSUSE-SU-2012:0594-1: critical: update for flash-player
by opensuse-security＠opensuse.org 08 May '12

08 May '12

openSUSE Security Update: update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0594-1 Rating: critical References: #758645 #760777 Cross-References: CVE-2012-0779 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: flash-player update to 11.2.202.235 fixes a potential remote code execution vulnerability Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-262 - openSUSE 11.4: zypper in -t patch openSUSE-2012-262 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): flash-player-11.2.202.235-21.1 flash-player-gnome-11.2.202.235-21.1 flash-player-kde4-11.2.202.235-21.1 - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.235-14.1 flash-player-gnome-11.2.202.235-14.1 flash-player-kde4-11.2.202.235-14.1 References: http://support.novell.com/security/cve/CVE-2012-0779.html https://bugzilla.novell.com/758645 https://bugzilla.novell.com/760777

1 0

openSUSE-SU-2012:0590-1: critical: update for php5
by opensuse-security＠opensuse.org 07 May '12

07 May '12

openSUSE Security Update: update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0590-1 Rating: critical References: #760536 Cross-References: CVE-2012-1823 CVE-2012-2311 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: when used in CGI mode remote attackers could inject command line arguments to php Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-261 - openSUSE 11.4: zypper in -t patch openSUSE-2012-261 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): apache2-mod_php5-5.3.8-4.15.2 apache2-mod_php5-debuginfo-5.3.8-4.15.2 php5-5.3.8-4.15.2 php5-bcmath-5.3.8-4.15.2 php5-bcmath-debuginfo-5.3.8-4.15.2 php5-bz2-5.3.8-4.15.2 php5-bz2-debuginfo-5.3.8-4.15.2 php5-calendar-5.3.8-4.15.2 php5-calendar-debuginfo-5.3.8-4.15.2 php5-ctype-5.3.8-4.15.2 php5-ctype-debuginfo-5.3.8-4.15.2 php5-curl-5.3.8-4.15.2 php5-curl-debuginfo-5.3.8-4.15.2 php5-dba-5.3.8-4.15.2 php5-dba-debuginfo-5.3.8-4.15.2 php5-debuginfo-5.3.8-4.15.2 php5-debugsource-5.3.8-4.15.2 php5-devel-5.3.8-4.15.2 php5-dom-5.3.8-4.15.2 php5-dom-debuginfo-5.3.8-4.15.2 php5-enchant-5.3.8-4.15.2 php5-enchant-debuginfo-5.3.8-4.15.2 php5-exif-5.3.8-4.15.2 php5-exif-debuginfo-5.3.8-4.15.2 php5-fastcgi-5.3.8-4.15.2 php5-fastcgi-debuginfo-5.3.8-4.15.2 php5-fileinfo-5.3.8-4.15.2 php5-fileinfo-debuginfo-5.3.8-4.15.2 php5-fpm-5.3.8-4.15.2 php5-fpm-debuginfo-5.3.8-4.15.2 php5-ftp-5.3.8-4.15.2 php5-ftp-debuginfo-5.3.8-4.15.2 php5-gd-5.3.8-4.15.2 php5-gd-debuginfo-5.3.8-4.15.2 php5-gettext-5.3.8-4.15.2 php5-gettext-debuginfo-5.3.8-4.15.2 php5-gmp-5.3.8-4.15.2 php5-gmp-debuginfo-5.3.8-4.15.2 php5-iconv-5.3.8-4.15.2 php5-iconv-debuginfo-5.3.8-4.15.2 php5-imap-5.3.8-4.15.2 php5-imap-debuginfo-5.3.8-4.15.2 php5-intl-5.3.8-4.15.2 php5-intl-debuginfo-5.3.8-4.15.2 php5-json-5.3.8-4.15.2 php5-json-debuginfo-5.3.8-4.15.2 php5-ldap-5.3.8-4.15.2 php5-ldap-debuginfo-5.3.8-4.15.2 php5-mbstring-5.3.8-4.15.2 php5-mbstring-debuginfo-5.3.8-4.15.2 php5-mcrypt-5.3.8-4.15.2 php5-mcrypt-debuginfo-5.3.8-4.15.2 php5-mssql-5.3.8-4.15.2 php5-mssql-debuginfo-5.3.8-4.15.2 php5-mysql-5.3.8-4.15.2 php5-mysql-debuginfo-5.3.8-4.15.2 php5-odbc-5.3.8-4.15.2 php5-odbc-debuginfo-5.3.8-4.15.2 php5-openssl-5.3.8-4.15.2 php5-openssl-debuginfo-5.3.8-4.15.2 php5-pcntl-5.3.8-4.15.2 php5-pcntl-debuginfo-5.3.8-4.15.2 php5-pdo-5.3.8-4.15.2 php5-pdo-debuginfo-5.3.8-4.15.2 php5-pgsql-5.3.8-4.15.2 php5-pgsql-debuginfo-5.3.8-4.15.2 php5-phar-5.3.8-4.15.2 php5-phar-debuginfo-5.3.8-4.15.2 php5-posix-5.3.8-4.15.2 php5-posix-debuginfo-5.3.8-4.15.2 php5-pspell-5.3.8-4.15.2 php5-pspell-debuginfo-5.3.8-4.15.2 php5-readline-5.3.8-4.15.2 php5-readline-debuginfo-5.3.8-4.15.2 php5-shmop-5.3.8-4.15.2 php5-shmop-debuginfo-5.3.8-4.15.2 php5-snmp-5.3.8-4.15.2 php5-snmp-debuginfo-5.3.8-4.15.2 php5-soap-5.3.8-4.15.2 php5-soap-debuginfo-5.3.8-4.15.2 php5-sockets-5.3.8-4.15.2 php5-sockets-debuginfo-5.3.8-4.15.2 php5-sqlite-5.3.8-4.15.2 php5-sqlite-debuginfo-5.3.8-4.15.2 php5-suhosin-5.3.8-4.15.2 php5-suhosin-debuginfo-5.3.8-4.15.2 php5-sysvmsg-5.3.8-4.15.2 php5-sysvmsg-debuginfo-5.3.8-4.15.2 php5-sysvsem-5.3.8-4.15.2 php5-sysvsem-debuginfo-5.3.8-4.15.2 php5-sysvshm-5.3.8-4.15.2 php5-sysvshm-debuginfo-5.3.8-4.15.2 php5-tidy-5.3.8-4.15.2 php5-tidy-debuginfo-5.3.8-4.15.2 php5-tokenizer-5.3.8-4.15.2 php5-tokenizer-debuginfo-5.3.8-4.15.2 php5-wddx-5.3.8-4.15.2 php5-wddx-debuginfo-5.3.8-4.15.2 php5-xmlreader-5.3.8-4.15.2 php5-xmlreader-debuginfo-5.3.8-4.15.2 php5-xmlrpc-5.3.8-4.15.2 php5-xmlrpc-debuginfo-5.3.8-4.15.2 php5-xmlwriter-5.3.8-4.15.2 php5-xmlwriter-debuginfo-5.3.8-4.15.2 php5-xsl-5.3.8-4.15.2 php5-xsl-debuginfo-5.3.8-4.15.2 php5-zip-5.3.8-4.15.2 php5-zip-debuginfo-5.3.8-4.15.2 php5-zlib-5.3.8-4.15.2 php5-zlib-debuginfo-5.3.8-4.15.2 - openSUSE 12.1 (noarch): php5-pear-5.3.8-4.15.2 - openSUSE 11.4 (i586 x86_64): apache2-mod_php5-5.3.5-332.1 apache2-mod_php5-debuginfo-5.3.5-332.1 php5-5.3.5-332.1 php5-bcmath-5.3.5-332.1 php5-bcmath-debuginfo-5.3.5-332.1 php5-bz2-5.3.5-332.1 php5-bz2-debuginfo-5.3.5-332.1 php5-calendar-5.3.5-332.1 php5-calendar-debuginfo-5.3.5-332.1 php5-ctype-5.3.5-332.1 php5-ctype-debuginfo-5.3.5-332.1 php5-curl-5.3.5-332.1 php5-curl-debuginfo-5.3.5-332.1 php5-dba-5.3.5-332.1 php5-dba-debuginfo-5.3.5-332.1 php5-debuginfo-5.3.5-332.1 php5-debugsource-5.3.5-332.1 php5-devel-5.3.5-332.1 php5-dom-5.3.5-332.1 php5-dom-debuginfo-5.3.5-332.1 php5-enchant-5.3.5-332.1 php5-enchant-debuginfo-5.3.5-332.1 php5-exif-5.3.5-332.1 php5-exif-debuginfo-5.3.5-332.1 php5-fastcgi-5.3.5-332.1 php5-fastcgi-debuginfo-5.3.5-332.1 php5-fileinfo-5.3.5-332.1 php5-fileinfo-debuginfo-5.3.5-332.1 php5-fpm-5.3.5-332.1 php5-fpm-debuginfo-5.3.5-332.1 php5-ftp-5.3.5-332.1 php5-ftp-debuginfo-5.3.5-332.1 php5-gd-5.3.5-332.1 php5-gd-debuginfo-5.3.5-332.1 php5-gettext-5.3.5-332.1 php5-gettext-debuginfo-5.3.5-332.1 php5-gmp-5.3.5-332.1 php5-gmp-debuginfo-5.3.5-332.1 php5-hash-5.3.5-332.1 php5-hash-debuginfo-5.3.5-332.1 php5-iconv-5.3.5-332.1 php5-iconv-debuginfo-5.3.5-332.1 php5-imap-5.3.5-332.1 php5-imap-debuginfo-5.3.5-332.1 php5-intl-5.3.5-332.1 php5-intl-debuginfo-5.3.5-332.1 php5-json-5.3.5-332.1 php5-json-debuginfo-5.3.5-332.1 php5-ldap-5.3.5-332.1 php5-ldap-debuginfo-5.3.5-332.1 php5-mbstring-5.3.5-332.1 php5-mbstring-debuginfo-5.3.5-332.1 php5-mcrypt-5.3.5-332.1 php5-mcrypt-debuginfo-5.3.5-332.1 php5-mysql-5.3.5-332.1 php5-mysql-debuginfo-5.3.5-332.1 php5-odbc-5.3.5-332.1 php5-odbc-debuginfo-5.3.5-332.1 php5-openssl-5.3.5-332.1 php5-openssl-debuginfo-5.3.5-332.1 php5-pcntl-5.3.5-332.1 php5-pcntl-debuginfo-5.3.5-332.1 php5-pdo-5.3.5-332.1 php5-pdo-debuginfo-5.3.5-332.1 php5-pgsql-5.3.5-332.1 php5-pgsql-debuginfo-5.3.5-332.1 php5-phar-5.3.5-332.1 php5-phar-debuginfo-5.3.5-332.1 php5-posix-5.3.5-332.1 php5-posix-debuginfo-5.3.5-332.1 php5-pspell-5.3.5-332.1 php5-pspell-debuginfo-5.3.5-332.1 php5-readline-5.3.5-332.1 php5-readline-debuginfo-5.3.5-332.1 php5-shmop-5.3.5-332.1 php5-shmop-debuginfo-5.3.5-332.1 php5-snmp-5.3.5-332.1 php5-snmp-debuginfo-5.3.5-332.1 php5-soap-5.3.5-332.1 php5-soap-debuginfo-5.3.5-332.1 php5-sockets-5.3.5-332.1 php5-sockets-debuginfo-5.3.5-332.1 php5-sqlite-5.3.5-332.1 php5-sqlite-debuginfo-5.3.5-332.1 php5-suhosin-5.3.5-332.1 php5-suhosin-debuginfo-5.3.5-332.1 php5-sysvmsg-5.3.5-332.1 php5-sysvmsg-debuginfo-5.3.5-332.1 php5-sysvsem-5.3.5-332.1 php5-sysvsem-debuginfo-5.3.5-332.1 php5-sysvshm-5.3.5-332.1 php5-sysvshm-debuginfo-5.3.5-332.1 php5-tidy-5.3.5-332.1 php5-tidy-debuginfo-5.3.5-332.1 php5-tokenizer-5.3.5-332.1 php5-tokenizer-debuginfo-5.3.5-332.1 php5-wddx-5.3.5-332.1 php5-wddx-debuginfo-5.3.5-332.1 php5-xmlreader-5.3.5-332.1 php5-xmlreader-debuginfo-5.3.5-332.1 php5-xmlrpc-5.3.5-332.1 php5-xmlrpc-debuginfo-5.3.5-332.1 php5-xmlwriter-5.3.5-332.1 php5-xmlwriter-debuginfo-5.3.5-332.1 php5-xsl-5.3.5-332.1 php5-xsl-debuginfo-5.3.5-332.1 php5-zip-5.3.5-332.1 php5-zip-debuginfo-5.3.5-332.1 php5-zlib-5.3.5-332.1 php5-zlib-debuginfo-5.3.5-332.1 - openSUSE 11.4 (noarch): php5-pear-5.3.5-332.1 References: http://support.novell.com/security/cve/CVE-2012-1823.html http://support.novell.com/security/cve/CVE-2012-2311.html https://bugzilla.novell.com/760536

1 0

openSUSE-SU-2012:0589-1: moderate: update for rpm, rpm-python
by opensuse-security＠opensuse.org 07 May '12

07 May '12

openSUSE Security Update: update for rpm, rpm-python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0589-1 Rating: moderate References: #654217 #754281 #754284 #754285 Cross-References: CVE-2012-0060: CVE-2012-0061: CVE-2012-0815: Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: specially crafted signature headers could crash rpm Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-260 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): rpm-4.8.0-28.41.1 rpm-debuginfo-4.8.0-28.41.1 rpm-debugsource-4.8.0-28.41.1 rpm-devel-4.8.0-28.41.1 - openSUSE 11.4 (x86_64): rpm-32bit-4.8.0-28.41.1 rpm-debuginfo-32bit-4.8.0-28.41.1 - openSUSE 11.4 (ia64): rpm-debuginfo-x86-4.8.0-28.41.1 rpm-x86-4.8.0-28.41.1 References: http://support.novell.com/security/cve/CVE-2012-0060:.html http://support.novell.com/security/cve/CVE-2012-0061:.html http://support.novell.com/security/cve/CVE-2012-0815:.html https://bugzilla.novell.com/654217 https://bugzilla.novell.com/754281 https://bugzilla.novell.com/754284 https://bugzilla.novell.com/754285

1 0

openSUSE-SU-2012:0588-1: moderate: update for rpm, rpm-python
by opensuse-security＠opensuse.org 07 May '12

07 May '12

openSUSE Security Update: update for rpm, rpm-python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0588-1 Rating: moderate References: #714724 #728682 #741543 #754281 #754284 #754285 #756087 Cross-References: CVE-2012-0060: CVE-2012-0061: CVE-2012-0815: Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has four fixes is now available. Description: specially crafted signature headers could crash rpm Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-259 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): rpm-4.9.1.2-4.1 rpm-debuginfo-4.9.1.2-4.1 rpm-debugsource-4.9.1.2-4.1 rpm-devel-4.9.1.2-4.1 rpm-python-4.9.1.2-4.1 rpm-python-debuginfo-4.9.1.2-4.1 rpm-python-debugsource-4.9.1.2-4.1 - openSUSE 12.1 (x86_64): rpm-32bit-4.9.1.2-4.1 rpm-debuginfo-32bit-4.9.1.2-4.1 - openSUSE 12.1 (ia64): rpm-debuginfo-x86-4.9.1.2-4.1 rpm-x86-4.9.1.2-4.1 References: http://support.novell.com/security/cve/CVE-2012-0060:.html http://support.novell.com/security/cve/CVE-2012-0061:.html http://support.novell.com/security/cve/CVE-2012-0815:.html https://bugzilla.novell.com/714724 https://bugzilla.novell.com/728682 https://bugzilla.novell.com/741543 https://bugzilla.novell.com/754281 https://bugzilla.novell.com/754284 https://bugzilla.novell.com/754285 https://bugzilla.novell.com/756087

1 0

openSUSE-SU-2012:0583-1: important: update for samba
by opensuse-security＠opensuse.org 04 May '12

04 May '12

openSUSE Security Update: update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0583-1 Rating: important References: #757576 Cross-References: CVE-2012-2111 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - docs-xml: fix default name resolve order; (bso#7564). - s3-aio-fork: Fix a segfault in vfs_aio_fork; (bso#8836). - docs: remove whitespace in example samba.ldif; (bso#8789). - s3-smbd: move print_backend_init() behind init_system_info(); (bso#8845). - s3-docs: Prepend '/' to filename argument; (bso#8826). - Restrict self granting privileges where security=ads for Samba post-3.3.16; CVE-2012-2111; (bnc#757576). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-258 - openSUSE 11.4: zypper in -t patch openSUSE-2012-258 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): ldapsmb-1.34b-34.12.1 libldb-devel-1.0.2-34.12.1 libldb1-1.0.2-34.12.1 libldb1-debuginfo-1.0.2-34.12.1 libnetapi-devel-3.6.3-34.12.1 libnetapi0-3.6.3-34.12.1 libnetapi0-debuginfo-3.6.3-34.12.1 libsmbclient-devel-3.6.3-34.12.1 libsmbclient0-3.6.3-34.12.1 libsmbclient0-debuginfo-3.6.3-34.12.1 libsmbsharemodes-devel-3.6.3-34.12.1 libsmbsharemodes0-3.6.3-34.12.1 libsmbsharemodes0-debuginfo-3.6.3-34.12.1 libtalloc-devel-2.0.5-34.12.1 libtalloc2-2.0.5-34.12.1 libtalloc2-debuginfo-2.0.5-34.12.1 libtdb-devel-1.2.9-34.12.1 libtdb1-1.2.9-34.12.1 libtdb1-debuginfo-1.2.9-34.12.1 libtevent-devel-0.9.11-34.12.1 libtevent0-0.9.11-34.12.1 libtevent0-debuginfo-0.9.11-34.12.1 libwbclient-devel-3.6.3-34.12.1 libwbclient0-3.6.3-34.12.1 libwbclient0-debuginfo-3.6.3-34.12.1 samba-3.6.3-34.12.1 samba-client-3.6.3-34.12.1 samba-client-debuginfo-3.6.3-34.12.1 samba-debuginfo-3.6.3-34.12.1 samba-debugsource-3.6.3-34.12.1 samba-devel-3.6.3-34.12.1 samba-krb-printing-3.6.3-34.12.1 samba-krb-printing-debuginfo-3.6.3-34.12.1 samba-winbind-3.6.3-34.12.1 samba-winbind-debuginfo-3.6.3-34.12.1 - openSUSE 12.1 (x86_64): libldb1-32bit-1.0.2-34.12.1 libldb1-debuginfo-32bit-1.0.2-34.12.1 libsmbclient0-32bit-3.6.3-34.12.1 libsmbclient0-debuginfo-32bit-3.6.3-34.12.1 libtalloc2-32bit-2.0.5-34.12.1 libtalloc2-debuginfo-32bit-2.0.5-34.12.1 libtdb1-32bit-1.2.9-34.12.1 libtdb1-debuginfo-32bit-1.2.9-34.12.1 libtevent0-32bit-0.9.11-34.12.1 libtevent0-debuginfo-32bit-0.9.11-34.12.1 libwbclient0-32bit-3.6.3-34.12.1 libwbclient0-debuginfo-32bit-3.6.3-34.12.1 samba-32bit-3.6.3-34.12.1 samba-client-32bit-3.6.3-34.12.1 samba-client-debuginfo-32bit-3.6.3-34.12.1 samba-debuginfo-32bit-3.6.3-34.12.1 samba-winbind-32bit-3.6.3-34.12.1 samba-winbind-debuginfo-32bit-3.6.3-34.12.1 - openSUSE 12.1 (noarch): samba-doc-3.6.3-34.12.1 - openSUSE 12.1 (ia64): libldb1-debuginfo-x86-1.0.2-34.12.1 libldb1-x86-1.0.2-34.12.1 libsmbclient0-debuginfo-x86-3.6.3-34.12.1 libsmbclient0-x86-3.6.3-34.12.1 libtalloc2-debuginfo-x86-2.0.5-34.12.1 libtalloc2-x86-2.0.5-34.12.1 libtdb1-debuginfo-x86-1.2.9-34.12.1 libtdb1-x86-1.2.9-34.12.1 libtevent0-debuginfo-x86-0.9.11-34.12.1 libtevent0-x86-0.9.11-34.12.1 libwbclient0-debuginfo-x86-3.6.3-34.12.1 libwbclient0-x86-3.6.3-34.12.1 samba-client-debuginfo-x86-3.6.3-34.12.1 samba-client-x86-3.6.3-34.12.1 samba-debuginfo-x86-3.6.3-34.12.1 samba-winbind-debuginfo-x86-3.6.3-34.12.1 samba-winbind-x86-3.6.3-34.12.1 samba-x86-3.6.3-34.12.1 - openSUSE 11.4 (i586 x86_64): ldapsmb-1.34b-115.1 libldb-devel-1.0.2-115.1 libldb1-1.0.2-115.1 libldb1-debuginfo-1.0.2-115.1 libnetapi-devel-3.6.3-115.1 libnetapi0-3.6.3-115.1 libnetapi0-debuginfo-3.6.3-115.1 libsmbclient-devel-3.6.3-115.1 libsmbclient0-3.6.3-115.1 libsmbclient0-debuginfo-3.6.3-115.1 libsmbsharemodes-devel-3.6.3-115.1 libsmbsharemodes0-3.6.3-115.1 libsmbsharemodes0-debuginfo-3.6.3-115.1 libtalloc-devel-2.0.5-115.1 libtalloc2-2.0.5-115.1 libtalloc2-debuginfo-2.0.5-115.1 libtdb-devel-1.2.9-115.1 libtdb1-1.2.9-115.1 libtdb1-debuginfo-1.2.9-115.1 libtevent-devel-0.9.11-115.1 libtevent0-0.9.11-115.1 libtevent0-debuginfo-0.9.11-115.1 libwbclient-devel-3.6.3-115.1 libwbclient0-3.6.3-115.1 libwbclient0-debuginfo-3.6.3-115.1 samba-3.6.3-115.1 samba-client-3.6.3-115.1 samba-client-debuginfo-3.6.3-115.1 samba-debuginfo-3.6.3-115.1 samba-debugsource-3.6.3-115.1 samba-devel-3.6.3-115.1 samba-krb-printing-3.6.3-115.1 samba-krb-printing-debuginfo-3.6.3-115.1 samba-winbind-3.6.3-115.1 samba-winbind-debuginfo-3.6.3-115.1 - openSUSE 11.4 (x86_64): libldb1-32bit-1.0.2-115.1 libldb1-debuginfo-32bit-1.0.2-115.1 libsmbclient0-32bit-3.6.3-115.1 libsmbclient0-debuginfo-32bit-3.6.3-115.1 libtalloc2-32bit-2.0.5-115.1 libtalloc2-debuginfo-32bit-2.0.5-115.1 libtdb1-32bit-1.2.9-115.1 libtdb1-debuginfo-32bit-1.2.9-115.1 libtevent0-32bit-0.9.11-115.1 libtevent0-debuginfo-32bit-0.9.11-115.1 libwbclient0-32bit-3.6.3-115.1 libwbclient0-debuginfo-32bit-3.6.3-115.1 samba-32bit-3.6.3-115.1 samba-client-32bit-3.6.3-115.1 samba-client-debuginfo-32bit-3.6.3-115.1 samba-debuginfo-32bit-3.6.3-115.1 samba-winbind-32bit-3.6.3-115.1 samba-winbind-debuginfo-32bit-3.6.3-115.1 - openSUSE 11.4 (noarch): samba-doc-3.6.3-115.1 - openSUSE 11.4 (ia64): libldb1-debuginfo-x86-1.0.2-115.1 libldb1-x86-1.0.2-115.1 libsmbclient0-debuginfo-x86-3.6.3-115.1 libsmbclient0-x86-3.6.3-115.1 libtalloc2-debuginfo-x86-2.0.5-115.1 libtalloc2-x86-2.0.5-115.1 libtdb1-debuginfo-x86-1.2.9-115.1 libtdb1-x86-1.2.9-115.1 libtevent0-debuginfo-x86-0.9.11-115.1 libtevent0-x86-0.9.11-115.1 libwbclient0-debuginfo-x86-3.6.3-115.1 libwbclient0-x86-3.6.3-115.1 samba-client-debuginfo-x86-3.6.3-115.1 samba-client-x86-3.6.3-115.1 samba-debuginfo-x86-3.6.3-115.1 samba-winbind-debuginfo-x86-3.6.3-115.1 samba-winbind-x86-3.6.3-115.1 samba-x86-3.6.3-115.1 References: http://support.novell.com/security/cve/CVE-2012-2111.html https://bugzilla.novell.com/757576

1 0

openSUSE-RU-2012:0579-1: lxc: collective update
by maintenance＠opensuse.org 02 May '12

02 May '12

openSUSE Recommended Update: lxc: collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0579-1 Rating: low References: #720845 #723946 #723950 #739315 #750470 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update fixes the following issues for lxc: - create /etc/hostname as symlink to /etc/HOSTNAME - fix inadequate space in lxc.mount config (lxc-clone fix) - disable network in container if not configured - configure network scripts properly - Add lxc-snapshot-btrfs-lvm.patch: backport snapshot support, using btrfs or lvm2. - Add lxc-opensuse-tmpfs.patch: ensure container shutting down is correctly detected by LXC. - 723950: Add lxc-createconfig script to easy LXC configuration - 750470: Accurately detect whether a system supports clone_children - Drop lxc-file_caps.patch, it is SLES specific, since openSUSE is now shipping with file capabilities enabled - 739315: Update lxc-opensuse-12.1.patch to correctly generate containers on x86 - 720845: fix detection of kernel 3.x and file capabilities - 723946: Fix example path in manpages Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-255 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): lxc-0.7.5-4.5.1 lxc-debuginfo-0.7.5-4.5.1 lxc-debugsource-0.7.5-4.5.1 lxc-devel-0.7.5-4.5.1 References: https://bugzilla.novell.com/720845 https://bugzilla.novell.com/723946 https://bugzilla.novell.com/723950 https://bugzilla.novell.com/739315 https://bugzilla.novell.com/750470

1 0