May 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2012:0607-1: update for cifs-utils
by opensuse-security＠opensuse.org 10 May '12

10 May '12

openSUSE Security Update: update for cifs-utils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0607-1 Rating: low References: #754443 Cross-References: CVE-2012-1586 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: mount.cifs could leak information about existence of files normally not accessible to users Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-268 - openSUSE 11.4: zypper in -t patch openSUSE-2012-268 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): cifs-utils-4.9-7.7.1 cifs-utils-debuginfo-4.9-7.7.1 cifs-utils-debugsource-4.9-7.7.1 - openSUSE 11.4 (i586 x86_64): cifs-utils-4.9-1.9.1 cifs-utils-debuginfo-4.9-1.9.1 cifs-utils-debugsource-4.9-1.9.1 References: http://support.novell.com/security/cve/CVE-2012-1586.html https://bugzilla.novell.com/754443

1 0

openSUSE-RU-2012:0597-1: apparmor: update samba profiles
by maintenance＠opensuse.org 08 May '12

08 May '12

openSUSE Recommended Update: apparmor: update samba profiles ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0597-1 Rating: low References: #725967 #738041 #757545 #758426 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes the following issues for apparmor: - 757545: update samba profiles to have the same permissions as in openSUSE 12.1 (with some exceptions, see bnc#757545#c12) This also fixes bnc#725967, bnc#738041, bnc#738041 - add missing x bit for directories in /etc/apparmor/ and /etc/apparmor.d/ Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-266 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apache2-mod_apparmor-2.5.1.r1445-52.126.1 apache2-mod_apparmor-debuginfo-2.5.1.r1445-52.126.1 apparmor-debugsource-2.5.1.r1445-52.126.1 apparmor-parser-2.5.1.r1445-52.126.1 apparmor-parser-debuginfo-2.5.1.r1445-52.126.1 libapparmor-devel-2.5.1.r1445-52.126.1 libapparmor1-2.5.1.r1445-52.126.1 libapparmor1-debuginfo-2.5.1.r1445-52.126.1 pam_apparmor-2.5.1.r1445-52.126.1 pam_apparmor-debuginfo-2.5.1.r1445-52.126.1 perl-apparmor-2.5.1.r1445-52.126.1 perl-apparmor-debuginfo-2.5.1.r1445-52.126.1 tomcat_apparmor-2.5.1.r1445-52.126.1 tomcat_apparmor-debuginfo-2.5.1.r1445-52.126.1 - openSUSE 11.4 (x86_64): libapparmor1-32bit-2.5.1.r1445-52.126.1 libapparmor1-debuginfo-32bit-2.5.1.r1445-52.126.1 pam_apparmor-32bit-2.5.1.r1445-52.126.1 pam_apparmor-debuginfo-32bit-2.5.1.r1445-52.126.1 - openSUSE 11.4 (noarch): apparmor-docs-2.5.1.r1445-52.126.1 apparmor-parser-lang-2.5.1.r1445-52.126.1 apparmor-profiles-2.5.1.r1445-52.126.1 apparmor-utils-2.5.1.r1445-52.126.1 apparmor-utils-lang-2.5.1.r1445-52.126.1 - openSUSE 11.4 (ia64): libapparmor1-debuginfo-x86-2.5.1.r1445-52.126.1 libapparmor1-x86-2.5.1.r1445-52.126.1 pam_apparmor-debuginfo-x86-2.5.1.r1445-52.126.1 pam_apparmor-x86-2.5.1.r1445-52.126.1 References: https://bugzilla.novell.com/725967 https://bugzilla.novell.com/738041 https://bugzilla.novell.com/757545 https://bugzilla.novell.com/758426

1 0

openSUSE-RU-2012:0596-1: hyper-v: Include in 12.1 codebase
by maintenance＠opensuse.org 08 May '12

08 May '12

openSUSE Recommended Update: hyper-v: Include in 12.1 codebase ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0596-1 Rating: low References: #585651 #600212 #650748 #676890 #685189 #731198 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update contains the userland part of the Hyper-V virtualization components that we missed shipping with 12.1 originally. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-263 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): hyper-v-3-4.1 hyper-v-debuginfo-3-4.1 hyper-v-debugsource-3-4.1 References: https://bugzilla.novell.com/585651 https://bugzilla.novell.com/600212 https://bugzilla.novell.com/650748 https://bugzilla.novell.com/676890 https://bugzilla.novell.com/685189 https://bugzilla.novell.com/731198

1 0

openSUSE-RU-2012:0595-1: libmtp: disable mtp-probe
by maintenance＠opensuse.org 08 May '12

08 May '12

openSUSE Recommended Update: libmtp: disable mtp-probe ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0595-1 Rating: low References: #700243 #759344 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The previous libmtp did not disable mtp-probe fully, making udev print out "missing mtp-probe" messages. This update also disables the udev rule. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-264 - openSUSE 11.4: zypper in -t patch openSUSE-2012-264 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libmtp-debugsource-1.1.3-8.7.1 libmtp-devel-1.1.3-8.7.1 libmtp9-1.1.3-8.7.1 libmtp9-debuginfo-1.1.3-8.7.1 mtp-tools-1.1.3-8.7.1 mtp-tools-debuginfo-1.1.3-8.7.1 - openSUSE 11.4 (i586 x86_64): libmtp-debugsource-1.0.6-10.1 libmtp-devel-1.0.6-10.1 libmtp8-1.0.6-10.1 libmtp8-debuginfo-1.0.6-10.1 mtp-tools-1.0.6-10.1 mtp-tools-debuginfo-1.0.6-10.1 References: https://bugzilla.novell.com/700243 https://bugzilla.novell.com/759344

1 0

openSUSE-SU-2012:0594-1: critical: update for flash-player
by opensuse-security＠opensuse.org 08 May '12

08 May '12

openSUSE Security Update: update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0594-1 Rating: critical References: #758645 #760777 Cross-References: CVE-2012-0779 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: flash-player update to 11.2.202.235 fixes a potential remote code execution vulnerability Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-262 - openSUSE 11.4: zypper in -t patch openSUSE-2012-262 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): flash-player-11.2.202.235-21.1 flash-player-gnome-11.2.202.235-21.1 flash-player-kde4-11.2.202.235-21.1 - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.235-14.1 flash-player-gnome-11.2.202.235-14.1 flash-player-kde4-11.2.202.235-14.1 References: http://support.novell.com/security/cve/CVE-2012-0779.html https://bugzilla.novell.com/758645 https://bugzilla.novell.com/760777

1 0

openSUSE-SU-2012:0590-1: critical: update for php5
by opensuse-security＠opensuse.org 07 May '12

07 May '12

openSUSE Security Update: update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0590-1 Rating: critical References: #760536 Cross-References: CVE-2012-1823 CVE-2012-2311 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: when used in CGI mode remote attackers could inject command line arguments to php Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-261 - openSUSE 11.4: zypper in -t patch openSUSE-2012-261 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): apache2-mod_php5-5.3.8-4.15.2 apache2-mod_php5-debuginfo-5.3.8-4.15.2 php5-5.3.8-4.15.2 php5-bcmath-5.3.8-4.15.2 php5-bcmath-debuginfo-5.3.8-4.15.2 php5-bz2-5.3.8-4.15.2 php5-bz2-debuginfo-5.3.8-4.15.2 php5-calendar-5.3.8-4.15.2 php5-calendar-debuginfo-5.3.8-4.15.2 php5-ctype-5.3.8-4.15.2 php5-ctype-debuginfo-5.3.8-4.15.2 php5-curl-5.3.8-4.15.2 php5-curl-debuginfo-5.3.8-4.15.2 php5-dba-5.3.8-4.15.2 php5-dba-debuginfo-5.3.8-4.15.2 php5-debuginfo-5.3.8-4.15.2 php5-debugsource-5.3.8-4.15.2 php5-devel-5.3.8-4.15.2 php5-dom-5.3.8-4.15.2 php5-dom-debuginfo-5.3.8-4.15.2 php5-enchant-5.3.8-4.15.2 php5-enchant-debuginfo-5.3.8-4.15.2 php5-exif-5.3.8-4.15.2 php5-exif-debuginfo-5.3.8-4.15.2 php5-fastcgi-5.3.8-4.15.2 php5-fastcgi-debuginfo-5.3.8-4.15.2 php5-fileinfo-5.3.8-4.15.2 php5-fileinfo-debuginfo-5.3.8-4.15.2 php5-fpm-5.3.8-4.15.2 php5-fpm-debuginfo-5.3.8-4.15.2 php5-ftp-5.3.8-4.15.2 php5-ftp-debuginfo-5.3.8-4.15.2 php5-gd-5.3.8-4.15.2 php5-gd-debuginfo-5.3.8-4.15.2 php5-gettext-5.3.8-4.15.2 php5-gettext-debuginfo-5.3.8-4.15.2 php5-gmp-5.3.8-4.15.2 php5-gmp-debuginfo-5.3.8-4.15.2 php5-iconv-5.3.8-4.15.2 php5-iconv-debuginfo-5.3.8-4.15.2 php5-imap-5.3.8-4.15.2 php5-imap-debuginfo-5.3.8-4.15.2 php5-intl-5.3.8-4.15.2 php5-intl-debuginfo-5.3.8-4.15.2 php5-json-5.3.8-4.15.2 php5-json-debuginfo-5.3.8-4.15.2 php5-ldap-5.3.8-4.15.2 php5-ldap-debuginfo-5.3.8-4.15.2 php5-mbstring-5.3.8-4.15.2 php5-mbstring-debuginfo-5.3.8-4.15.2 php5-mcrypt-5.3.8-4.15.2 php5-mcrypt-debuginfo-5.3.8-4.15.2 php5-mssql-5.3.8-4.15.2 php5-mssql-debuginfo-5.3.8-4.15.2 php5-mysql-5.3.8-4.15.2 php5-mysql-debuginfo-5.3.8-4.15.2 php5-odbc-5.3.8-4.15.2 php5-odbc-debuginfo-5.3.8-4.15.2 php5-openssl-5.3.8-4.15.2 php5-openssl-debuginfo-5.3.8-4.15.2 php5-pcntl-5.3.8-4.15.2 php5-pcntl-debuginfo-5.3.8-4.15.2 php5-pdo-5.3.8-4.15.2 php5-pdo-debuginfo-5.3.8-4.15.2 php5-pgsql-5.3.8-4.15.2 php5-pgsql-debuginfo-5.3.8-4.15.2 php5-phar-5.3.8-4.15.2 php5-phar-debuginfo-5.3.8-4.15.2 php5-posix-5.3.8-4.15.2 php5-posix-debuginfo-5.3.8-4.15.2 php5-pspell-5.3.8-4.15.2 php5-pspell-debuginfo-5.3.8-4.15.2 php5-readline-5.3.8-4.15.2 php5-readline-debuginfo-5.3.8-4.15.2 php5-shmop-5.3.8-4.15.2 php5-shmop-debuginfo-5.3.8-4.15.2 php5-snmp-5.3.8-4.15.2 php5-snmp-debuginfo-5.3.8-4.15.2 php5-soap-5.3.8-4.15.2 php5-soap-debuginfo-5.3.8-4.15.2 php5-sockets-5.3.8-4.15.2 php5-sockets-debuginfo-5.3.8-4.15.2 php5-sqlite-5.3.8-4.15.2 php5-sqlite-debuginfo-5.3.8-4.15.2 php5-suhosin-5.3.8-4.15.2 php5-suhosin-debuginfo-5.3.8-4.15.2 php5-sysvmsg-5.3.8-4.15.2 php5-sysvmsg-debuginfo-5.3.8-4.15.2 php5-sysvsem-5.3.8-4.15.2 php5-sysvsem-debuginfo-5.3.8-4.15.2 php5-sysvshm-5.3.8-4.15.2 php5-sysvshm-debuginfo-5.3.8-4.15.2 php5-tidy-5.3.8-4.15.2 php5-tidy-debuginfo-5.3.8-4.15.2 php5-tokenizer-5.3.8-4.15.2 php5-tokenizer-debuginfo-5.3.8-4.15.2 php5-wddx-5.3.8-4.15.2 php5-wddx-debuginfo-5.3.8-4.15.2 php5-xmlreader-5.3.8-4.15.2 php5-xmlreader-debuginfo-5.3.8-4.15.2 php5-xmlrpc-5.3.8-4.15.2 php5-xmlrpc-debuginfo-5.3.8-4.15.2 php5-xmlwriter-5.3.8-4.15.2 php5-xmlwriter-debuginfo-5.3.8-4.15.2 php5-xsl-5.3.8-4.15.2 php5-xsl-debuginfo-5.3.8-4.15.2 php5-zip-5.3.8-4.15.2 php5-zip-debuginfo-5.3.8-4.15.2 php5-zlib-5.3.8-4.15.2 php5-zlib-debuginfo-5.3.8-4.15.2 - openSUSE 12.1 (noarch): php5-pear-5.3.8-4.15.2 - openSUSE 11.4 (i586 x86_64): apache2-mod_php5-5.3.5-332.1 apache2-mod_php5-debuginfo-5.3.5-332.1 php5-5.3.5-332.1 php5-bcmath-5.3.5-332.1 php5-bcmath-debuginfo-5.3.5-332.1 php5-bz2-5.3.5-332.1 php5-bz2-debuginfo-5.3.5-332.1 php5-calendar-5.3.5-332.1 php5-calendar-debuginfo-5.3.5-332.1 php5-ctype-5.3.5-332.1 php5-ctype-debuginfo-5.3.5-332.1 php5-curl-5.3.5-332.1 php5-curl-debuginfo-5.3.5-332.1 php5-dba-5.3.5-332.1 php5-dba-debuginfo-5.3.5-332.1 php5-debuginfo-5.3.5-332.1 php5-debugsource-5.3.5-332.1 php5-devel-5.3.5-332.1 php5-dom-5.3.5-332.1 php5-dom-debuginfo-5.3.5-332.1 php5-enchant-5.3.5-332.1 php5-enchant-debuginfo-5.3.5-332.1 php5-exif-5.3.5-332.1 php5-exif-debuginfo-5.3.5-332.1 php5-fastcgi-5.3.5-332.1 php5-fastcgi-debuginfo-5.3.5-332.1 php5-fileinfo-5.3.5-332.1 php5-fileinfo-debuginfo-5.3.5-332.1 php5-fpm-5.3.5-332.1 php5-fpm-debuginfo-5.3.5-332.1 php5-ftp-5.3.5-332.1 php5-ftp-debuginfo-5.3.5-332.1 php5-gd-5.3.5-332.1 php5-gd-debuginfo-5.3.5-332.1 php5-gettext-5.3.5-332.1 php5-gettext-debuginfo-5.3.5-332.1 php5-gmp-5.3.5-332.1 php5-gmp-debuginfo-5.3.5-332.1 php5-hash-5.3.5-332.1 php5-hash-debuginfo-5.3.5-332.1 php5-iconv-5.3.5-332.1 php5-iconv-debuginfo-5.3.5-332.1 php5-imap-5.3.5-332.1 php5-imap-debuginfo-5.3.5-332.1 php5-intl-5.3.5-332.1 php5-intl-debuginfo-5.3.5-332.1 php5-json-5.3.5-332.1 php5-json-debuginfo-5.3.5-332.1 php5-ldap-5.3.5-332.1 php5-ldap-debuginfo-5.3.5-332.1 php5-mbstring-5.3.5-332.1 php5-mbstring-debuginfo-5.3.5-332.1 php5-mcrypt-5.3.5-332.1 php5-mcrypt-debuginfo-5.3.5-332.1 php5-mysql-5.3.5-332.1 php5-mysql-debuginfo-5.3.5-332.1 php5-odbc-5.3.5-332.1 php5-odbc-debuginfo-5.3.5-332.1 php5-openssl-5.3.5-332.1 php5-openssl-debuginfo-5.3.5-332.1 php5-pcntl-5.3.5-332.1 php5-pcntl-debuginfo-5.3.5-332.1 php5-pdo-5.3.5-332.1 php5-pdo-debuginfo-5.3.5-332.1 php5-pgsql-5.3.5-332.1 php5-pgsql-debuginfo-5.3.5-332.1 php5-phar-5.3.5-332.1 php5-phar-debuginfo-5.3.5-332.1 php5-posix-5.3.5-332.1 php5-posix-debuginfo-5.3.5-332.1 php5-pspell-5.3.5-332.1 php5-pspell-debuginfo-5.3.5-332.1 php5-readline-5.3.5-332.1 php5-readline-debuginfo-5.3.5-332.1 php5-shmop-5.3.5-332.1 php5-shmop-debuginfo-5.3.5-332.1 php5-snmp-5.3.5-332.1 php5-snmp-debuginfo-5.3.5-332.1 php5-soap-5.3.5-332.1 php5-soap-debuginfo-5.3.5-332.1 php5-sockets-5.3.5-332.1 php5-sockets-debuginfo-5.3.5-332.1 php5-sqlite-5.3.5-332.1 php5-sqlite-debuginfo-5.3.5-332.1 php5-suhosin-5.3.5-332.1 php5-suhosin-debuginfo-5.3.5-332.1 php5-sysvmsg-5.3.5-332.1 php5-sysvmsg-debuginfo-5.3.5-332.1 php5-sysvsem-5.3.5-332.1 php5-sysvsem-debuginfo-5.3.5-332.1 php5-sysvshm-5.3.5-332.1 php5-sysvshm-debuginfo-5.3.5-332.1 php5-tidy-5.3.5-332.1 php5-tidy-debuginfo-5.3.5-332.1 php5-tokenizer-5.3.5-332.1 php5-tokenizer-debuginfo-5.3.5-332.1 php5-wddx-5.3.5-332.1 php5-wddx-debuginfo-5.3.5-332.1 php5-xmlreader-5.3.5-332.1 php5-xmlreader-debuginfo-5.3.5-332.1 php5-xmlrpc-5.3.5-332.1 php5-xmlrpc-debuginfo-5.3.5-332.1 php5-xmlwriter-5.3.5-332.1 php5-xmlwriter-debuginfo-5.3.5-332.1 php5-xsl-5.3.5-332.1 php5-xsl-debuginfo-5.3.5-332.1 php5-zip-5.3.5-332.1 php5-zip-debuginfo-5.3.5-332.1 php5-zlib-5.3.5-332.1 php5-zlib-debuginfo-5.3.5-332.1 - openSUSE 11.4 (noarch): php5-pear-5.3.5-332.1 References: http://support.novell.com/security/cve/CVE-2012-1823.html http://support.novell.com/security/cve/CVE-2012-2311.html https://bugzilla.novell.com/760536

1 0

openSUSE-SU-2012:0589-1: moderate: update for rpm, rpm-python
by opensuse-security＠opensuse.org 07 May '12

07 May '12

openSUSE Security Update: update for rpm, rpm-python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0589-1 Rating: moderate References: #654217 #754281 #754284 #754285 Cross-References: CVE-2012-0060: CVE-2012-0061: CVE-2012-0815: Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: specially crafted signature headers could crash rpm Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-260 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): rpm-4.8.0-28.41.1 rpm-debuginfo-4.8.0-28.41.1 rpm-debugsource-4.8.0-28.41.1 rpm-devel-4.8.0-28.41.1 - openSUSE 11.4 (x86_64): rpm-32bit-4.8.0-28.41.1 rpm-debuginfo-32bit-4.8.0-28.41.1 - openSUSE 11.4 (ia64): rpm-debuginfo-x86-4.8.0-28.41.1 rpm-x86-4.8.0-28.41.1 References: http://support.novell.com/security/cve/CVE-2012-0060:.html http://support.novell.com/security/cve/CVE-2012-0061:.html http://support.novell.com/security/cve/CVE-2012-0815:.html https://bugzilla.novell.com/654217 https://bugzilla.novell.com/754281 https://bugzilla.novell.com/754284 https://bugzilla.novell.com/754285

1 0

openSUSE-SU-2012:0588-1: moderate: update for rpm, rpm-python
by opensuse-security＠opensuse.org 07 May '12

07 May '12

openSUSE Security Update: update for rpm, rpm-python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0588-1 Rating: moderate References: #714724 #728682 #741543 #754281 #754284 #754285 #756087 Cross-References: CVE-2012-0060: CVE-2012-0061: CVE-2012-0815: Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has four fixes is now available. Description: specially crafted signature headers could crash rpm Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-259 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): rpm-4.9.1.2-4.1 rpm-debuginfo-4.9.1.2-4.1 rpm-debugsource-4.9.1.2-4.1 rpm-devel-4.9.1.2-4.1 rpm-python-4.9.1.2-4.1 rpm-python-debuginfo-4.9.1.2-4.1 rpm-python-debugsource-4.9.1.2-4.1 - openSUSE 12.1 (x86_64): rpm-32bit-4.9.1.2-4.1 rpm-debuginfo-32bit-4.9.1.2-4.1 - openSUSE 12.1 (ia64): rpm-debuginfo-x86-4.9.1.2-4.1 rpm-x86-4.9.1.2-4.1 References: http://support.novell.com/security/cve/CVE-2012-0060:.html http://support.novell.com/security/cve/CVE-2012-0061:.html http://support.novell.com/security/cve/CVE-2012-0815:.html https://bugzilla.novell.com/714724 https://bugzilla.novell.com/728682 https://bugzilla.novell.com/741543 https://bugzilla.novell.com/754281 https://bugzilla.novell.com/754284 https://bugzilla.novell.com/754285 https://bugzilla.novell.com/756087

1 0

openSUSE-SU-2012:0583-1: important: update for samba
by opensuse-security＠opensuse.org 04 May '12

04 May '12

openSUSE Security Update: update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0583-1 Rating: important References: #757576 Cross-References: CVE-2012-2111 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - docs-xml: fix default name resolve order; (bso#7564). - s3-aio-fork: Fix a segfault in vfs_aio_fork; (bso#8836). - docs: remove whitespace in example samba.ldif; (bso#8789). - s3-smbd: move print_backend_init() behind init_system_info(); (bso#8845). - s3-docs: Prepend '/' to filename argument; (bso#8826). - Restrict self granting privileges where security=ads for Samba post-3.3.16; CVE-2012-2111; (bnc#757576). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-258 - openSUSE 11.4: zypper in -t patch openSUSE-2012-258 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): ldapsmb-1.34b-34.12.1 libldb-devel-1.0.2-34.12.1 libldb1-1.0.2-34.12.1 libldb1-debuginfo-1.0.2-34.12.1 libnetapi-devel-3.6.3-34.12.1 libnetapi0-3.6.3-34.12.1 libnetapi0-debuginfo-3.6.3-34.12.1 libsmbclient-devel-3.6.3-34.12.1 libsmbclient0-3.6.3-34.12.1 libsmbclient0-debuginfo-3.6.3-34.12.1 libsmbsharemodes-devel-3.6.3-34.12.1 libsmbsharemodes0-3.6.3-34.12.1 libsmbsharemodes0-debuginfo-3.6.3-34.12.1 libtalloc-devel-2.0.5-34.12.1 libtalloc2-2.0.5-34.12.1 libtalloc2-debuginfo-2.0.5-34.12.1 libtdb-devel-1.2.9-34.12.1 libtdb1-1.2.9-34.12.1 libtdb1-debuginfo-1.2.9-34.12.1 libtevent-devel-0.9.11-34.12.1 libtevent0-0.9.11-34.12.1 libtevent0-debuginfo-0.9.11-34.12.1 libwbclient-devel-3.6.3-34.12.1 libwbclient0-3.6.3-34.12.1 libwbclient0-debuginfo-3.6.3-34.12.1 samba-3.6.3-34.12.1 samba-client-3.6.3-34.12.1 samba-client-debuginfo-3.6.3-34.12.1 samba-debuginfo-3.6.3-34.12.1 samba-debugsource-3.6.3-34.12.1 samba-devel-3.6.3-34.12.1 samba-krb-printing-3.6.3-34.12.1 samba-krb-printing-debuginfo-3.6.3-34.12.1 samba-winbind-3.6.3-34.12.1 samba-winbind-debuginfo-3.6.3-34.12.1 - openSUSE 12.1 (x86_64): libldb1-32bit-1.0.2-34.12.1 libldb1-debuginfo-32bit-1.0.2-34.12.1 libsmbclient0-32bit-3.6.3-34.12.1 libsmbclient0-debuginfo-32bit-3.6.3-34.12.1 libtalloc2-32bit-2.0.5-34.12.1 libtalloc2-debuginfo-32bit-2.0.5-34.12.1 libtdb1-32bit-1.2.9-34.12.1 libtdb1-debuginfo-32bit-1.2.9-34.12.1 libtevent0-32bit-0.9.11-34.12.1 libtevent0-debuginfo-32bit-0.9.11-34.12.1 libwbclient0-32bit-3.6.3-34.12.1 libwbclient0-debuginfo-32bit-3.6.3-34.12.1 samba-32bit-3.6.3-34.12.1 samba-client-32bit-3.6.3-34.12.1 samba-client-debuginfo-32bit-3.6.3-34.12.1 samba-debuginfo-32bit-3.6.3-34.12.1 samba-winbind-32bit-3.6.3-34.12.1 samba-winbind-debuginfo-32bit-3.6.3-34.12.1 - openSUSE 12.1 (noarch): samba-doc-3.6.3-34.12.1 - openSUSE 12.1 (ia64): libldb1-debuginfo-x86-1.0.2-34.12.1 libldb1-x86-1.0.2-34.12.1 libsmbclient0-debuginfo-x86-3.6.3-34.12.1 libsmbclient0-x86-3.6.3-34.12.1 libtalloc2-debuginfo-x86-2.0.5-34.12.1 libtalloc2-x86-2.0.5-34.12.1 libtdb1-debuginfo-x86-1.2.9-34.12.1 libtdb1-x86-1.2.9-34.12.1 libtevent0-debuginfo-x86-0.9.11-34.12.1 libtevent0-x86-0.9.11-34.12.1 libwbclient0-debuginfo-x86-3.6.3-34.12.1 libwbclient0-x86-3.6.3-34.12.1 samba-client-debuginfo-x86-3.6.3-34.12.1 samba-client-x86-3.6.3-34.12.1 samba-debuginfo-x86-3.6.3-34.12.1 samba-winbind-debuginfo-x86-3.6.3-34.12.1 samba-winbind-x86-3.6.3-34.12.1 samba-x86-3.6.3-34.12.1 - openSUSE 11.4 (i586 x86_64): ldapsmb-1.34b-115.1 libldb-devel-1.0.2-115.1 libldb1-1.0.2-115.1 libldb1-debuginfo-1.0.2-115.1 libnetapi-devel-3.6.3-115.1 libnetapi0-3.6.3-115.1 libnetapi0-debuginfo-3.6.3-115.1 libsmbclient-devel-3.6.3-115.1 libsmbclient0-3.6.3-115.1 libsmbclient0-debuginfo-3.6.3-115.1 libsmbsharemodes-devel-3.6.3-115.1 libsmbsharemodes0-3.6.3-115.1 libsmbsharemodes0-debuginfo-3.6.3-115.1 libtalloc-devel-2.0.5-115.1 libtalloc2-2.0.5-115.1 libtalloc2-debuginfo-2.0.5-115.1 libtdb-devel-1.2.9-115.1 libtdb1-1.2.9-115.1 libtdb1-debuginfo-1.2.9-115.1 libtevent-devel-0.9.11-115.1 libtevent0-0.9.11-115.1 libtevent0-debuginfo-0.9.11-115.1 libwbclient-devel-3.6.3-115.1 libwbclient0-3.6.3-115.1 libwbclient0-debuginfo-3.6.3-115.1 samba-3.6.3-115.1 samba-client-3.6.3-115.1 samba-client-debuginfo-3.6.3-115.1 samba-debuginfo-3.6.3-115.1 samba-debugsource-3.6.3-115.1 samba-devel-3.6.3-115.1 samba-krb-printing-3.6.3-115.1 samba-krb-printing-debuginfo-3.6.3-115.1 samba-winbind-3.6.3-115.1 samba-winbind-debuginfo-3.6.3-115.1 - openSUSE 11.4 (x86_64): libldb1-32bit-1.0.2-115.1 libldb1-debuginfo-32bit-1.0.2-115.1 libsmbclient0-32bit-3.6.3-115.1 libsmbclient0-debuginfo-32bit-3.6.3-115.1 libtalloc2-32bit-2.0.5-115.1 libtalloc2-debuginfo-32bit-2.0.5-115.1 libtdb1-32bit-1.2.9-115.1 libtdb1-debuginfo-32bit-1.2.9-115.1 libtevent0-32bit-0.9.11-115.1 libtevent0-debuginfo-32bit-0.9.11-115.1 libwbclient0-32bit-3.6.3-115.1 libwbclient0-debuginfo-32bit-3.6.3-115.1 samba-32bit-3.6.3-115.1 samba-client-32bit-3.6.3-115.1 samba-client-debuginfo-32bit-3.6.3-115.1 samba-debuginfo-32bit-3.6.3-115.1 samba-winbind-32bit-3.6.3-115.1 samba-winbind-debuginfo-32bit-3.6.3-115.1 - openSUSE 11.4 (noarch): samba-doc-3.6.3-115.1 - openSUSE 11.4 (ia64): libldb1-debuginfo-x86-1.0.2-115.1 libldb1-x86-1.0.2-115.1 libsmbclient0-debuginfo-x86-3.6.3-115.1 libsmbclient0-x86-3.6.3-115.1 libtalloc2-debuginfo-x86-2.0.5-115.1 libtalloc2-x86-2.0.5-115.1 libtdb1-debuginfo-x86-1.2.9-115.1 libtdb1-x86-1.2.9-115.1 libtevent0-debuginfo-x86-0.9.11-115.1 libtevent0-x86-0.9.11-115.1 libwbclient0-debuginfo-x86-3.6.3-115.1 libwbclient0-x86-3.6.3-115.1 samba-client-debuginfo-x86-3.6.3-115.1 samba-client-x86-3.6.3-115.1 samba-debuginfo-x86-3.6.3-115.1 samba-winbind-debuginfo-x86-3.6.3-115.1 samba-winbind-x86-3.6.3-115.1 samba-x86-3.6.3-115.1 References: http://support.novell.com/security/cve/CVE-2012-2111.html https://bugzilla.novell.com/757576

1 0

openSUSE-RU-2012:0579-1: lxc: collective update
by maintenance＠opensuse.org 02 May '12

02 May '12

openSUSE Recommended Update: lxc: collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0579-1 Rating: low References: #720845 #723946 #723950 #739315 #750470 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update fixes the following issues for lxc: - create /etc/hostname as symlink to /etc/HOSTNAME - fix inadequate space in lxc.mount config (lxc-clone fix) - disable network in container if not configured - configure network scripts properly - Add lxc-snapshot-btrfs-lvm.patch: backport snapshot support, using btrfs or lvm2. - Add lxc-opensuse-tmpfs.patch: ensure container shutting down is correctly detected by LXC. - 723950: Add lxc-createconfig script to easy LXC configuration - 750470: Accurately detect whether a system supports clone_children - Drop lxc-file_caps.patch, it is SLES specific, since openSUSE is now shipping with file capabilities enabled - 739315: Update lxc-opensuse-12.1.patch to correctly generate containers on x86 - 720845: fix detection of kernel 3.x and file capabilities - 723946: Fix example path in manpages Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-255 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): lxc-0.7.5-4.5.1 lxc-debuginfo-0.7.5-4.5.1 lxc-debugsource-0.7.5-4.5.1 lxc-devel-0.7.5-4.5.1 References: https://bugzilla.novell.com/720845 https://bugzilla.novell.com/723946 https://bugzilla.novell.com/723950 https://bugzilla.novell.com/739315 https://bugzilla.novell.com/750470

1 0