July 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2012:0877-1: spamassassin: Collective update
by maintenance＠opensuse.org 16 Jul '12

16 Jul '12

openSUSE Recommended Update: spamassassin: Collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0877-1 Rating: low References: #737637 #768581 #768582 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update fixes the following issues for spamassassin: - 768582: suse.cron-sa-update should allow to restart spamd after a successful run of sa-update - killproc can not stop spamd - 768581: Add systemd service files for spamd and spampd - 737637: Fixed IPv6 support in spamassassin Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-391 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): perl-Mail-SpamAssassin-3.3.2-21.4.1 perl-Mail-SpamAssassin-Plugin-iXhash-1.5.5-21.4.1 spamassassin-3.3.2-21.4.1 spamassassin-debuginfo-3.3.2-21.4.1 spamassassin-debugsource-3.3.2-21.4.1 References: https://bugzilla.novell.com/737637 https://bugzilla.novell.com/768581 https://bugzilla.novell.com/768582

1 0

openSUSE-RU-2012:0876-1: glibc: Fix tls initialization with dlopen
by maintenance＠opensuse.org 16 Jul '12

16 Jul '12

openSUSE Recommended Update: glibc: Fix tls initialization with dlopen ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0876-1 Rating: low References: #770060 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for glibc: - 770060: Fix tls initialization with dlopen Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-389 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 i686 x86_64): glibc-2.11.3-12.59.1 glibc-debuginfo-2.11.3-12.59.1 glibc-debugsource-2.11.3-12.59.1 glibc-devel-2.11.3-12.59.1 glibc-devel-debuginfo-2.11.3-12.59.1 glibc-html-2.11.3-12.59.1 glibc-i18ndata-2.11.3-12.59.1 glibc-info-2.11.3-12.59.1 glibc-locale-2.11.3-12.59.1 glibc-locale-debuginfo-2.11.3-12.59.1 glibc-obsolete-2.11.3-12.59.1 glibc-profile-2.11.3-12.59.1 nscd-2.11.3-12.59.1 nscd-debuginfo-2.11.3-12.59.1 - openSUSE 11.4 (i586 i686): glibc-obsolete-debuginfo-2.11.3-12.59.1 - openSUSE 11.4 (x86_64): glibc-32bit-2.11.3-12.59.1 glibc-debuginfo-32bit-2.11.3-12.59.1 glibc-devel-32bit-2.11.3-12.59.1 glibc-devel-debuginfo-32bit-2.11.3-12.59.1 glibc-locale-32bit-2.11.3-12.59.1 glibc-locale-debuginfo-32bit-2.11.3-12.59.1 glibc-profile-32bit-2.11.3-12.59.1 - openSUSE 11.4 (ia64): glibc-debuginfo-x86-2.11.3-12.59.1 glibc-devel-debuginfo-x86-2.11.3-12.59.1 glibc-locale-debuginfo-x86-2.11.3-12.59.1 glibc-locale-x86-2.11.3-12.59.1 glibc-profile-x86-2.11.3-12.59.1 glibc-x86-2.11.3-12.59.1 References: https://bugzilla.novell.com/770060

1 0

openSUSE-RU-2012:0868-1: moderate: empathy: Update to version 3.2.2
by maintenance＠opensuse.org 12 Jul '12

12 Jul '12

openSUSE Recommended Update: empathy: Update to version 3.2.2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0868-1 Rating: moderate References: #749149 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for empathy: - Update to version 3.2.2: + This stable release fixes a bunch of memory leaks in the log viewer and a packing issue in the accounts dialog [bnc#749149] + Status icon is miss aligned in infobar[bgo#663567] - Changes from version 3.2.1.2: + Cannot quit empathy [bgo#662504] + Fix for misaligned 16x16 app icon [bgo#662995] + new-call/new-convo dialogs should listen to capabilities changes [bgo#662727] Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-385 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): empathy-3.2.2-1.5.1 empathy-debuginfo-3.2.2-1.5.1 empathy-debugsource-3.2.2-1.5.1 nautilus-sendto-plugin-empathy-3.2.2-1.5.1 nautilus-sendto-plugin-empathy-debuginfo-3.2.2-1.5.1 telepathy-mission-control-plugin-goa-3.2.2-1.5.1 telepathy-mission-control-plugin-goa-debuginfo-3.2.2-1.5.1 - openSUSE 12.1 (noarch): empathy-lang-3.2.2-1.5.1 References: https://bugzilla.novell.com/749149

1 0

openSUSE-SU-2012:0866-1: moderate: update for pidgin (CVE-2012-2318)
by opensuse-security＠opensuse.org 11 Jul '12

11 Jul '12

openSUSE Security Update: update for pidgin (CVE-2012-2318) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0866-1 Rating: moderate References: #761155 Cross-References: CVE-2012-2318 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Changes in pidgin: - bnc#761155, CVE-2012-2318, remote crash via specially-crafted MSN notification message Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-384 - openSUSE 11.4: zypper in -t patch openSUSE-2012-384 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): finch-2.10.1-8.12.1 finch-debuginfo-2.10.1-8.12.1 finch-devel-2.10.1-8.12.1 libpurple-2.10.1-8.12.1 libpurple-debuginfo-2.10.1-8.12.1 libpurple-devel-2.10.1-8.12.1 libpurple-meanwhile-2.10.1-8.12.1 libpurple-meanwhile-debuginfo-2.10.1-8.12.1 libpurple-tcl-2.10.1-8.12.1 libpurple-tcl-debuginfo-2.10.1-8.12.1 pidgin-2.10.1-8.12.1 pidgin-debuginfo-2.10.1-8.12.1 pidgin-debugsource-2.10.1-8.12.1 pidgin-devel-2.10.1-8.12.1 pidgin-evolution-2.10.1-8.12.1 pidgin-evolution-debuginfo-2.10.1-8.12.1 - openSUSE 12.1 (noarch): libpurple-branding-upstream-2.10.1-8.12.1 libpurple-lang-2.10.1-8.12.1 - openSUSE 11.4 (i586 x86_64): finch-2.7.10-4.47.1 finch-debuginfo-2.7.10-4.47.1 finch-devel-2.7.10-4.47.1 libpurple-2.7.10-4.47.1 libpurple-debuginfo-2.7.10-4.47.1 libpurple-devel-2.7.10-4.47.1 libpurple-meanwhile-2.7.10-4.47.1 libpurple-meanwhile-debuginfo-2.7.10-4.47.1 libpurple-tcl-2.7.10-4.47.1 libpurple-tcl-debuginfo-2.7.10-4.47.1 pidgin-2.7.10-4.47.1 pidgin-debuginfo-2.7.10-4.47.1 pidgin-debugsource-2.7.10-4.47.1 pidgin-devel-2.7.10-4.47.1 pidgin-evolution-2.7.10-4.47.1 pidgin-evolution-debuginfo-2.7.10-4.47.1 - openSUSE 11.4 (noarch): libpurple-lang-2.7.10-4.47.1 References: http://support.novell.com/security/cve/CVE-2012-2318.html https://bugzilla.novell.com/761155

1 0

openSUSE-SU-2012:0865-1: important: update for opera
by opensuse-security＠opensuse.org 11 Jul '12

11 Jul '12

openSUSE Security Update: update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0865-1 Rating: important References: #767045 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: - update to 12.00 * full changelog available at: http://www.opera.com/docs/changelogs/unix/1120/ - fixes [bnc#767045] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-379 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): opera-12.00-16.1 opera-gtk-12.00-16.1 opera-kde4-12.00-16.1 References: https://bugzilla.novell.com/767045

1 0

openSUSE-SU-2012:0864-1: moderate: update for bind (CVE-2012-1033)
by opensuse-security＠opensuse.org 11 Jul '12

11 Jul '12

openSUSE Security Update: update for bind (CVE-2012-1033) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0864-1 Rating: moderate References: #746074 Cross-References: CVE-2012-1033 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Fixed domain name resolving flaw: CVE-2012-1033, bnc#746074 Non-security fixes: - added TLSA record type - added wire format lookup method to sdb - many many bugfixes (see CHANGES for details) - 9.8.3-P1 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-382 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 ia64 x86_64): bind-debugsource-9.8.3P1-4.14.1 - openSUSE 12.1 (i586 x86_64): bind-9.8.3P1-4.14.1 bind-chrootenv-9.8.3P1-4.14.1 bind-debuginfo-9.8.3P1-4.14.1 bind-devel-9.8.3P1-4.14.1 bind-libs-9.8.3P1-4.14.1 bind-libs-debuginfo-9.8.3P1-4.14.1 bind-lwresd-9.8.3P1-4.14.1 bind-lwresd-debuginfo-9.8.3P1-4.14.1 bind-utils-9.8.3P1-4.14.1 bind-utils-debuginfo-9.8.3P1-4.14.1 - openSUSE 12.1 (x86_64): bind-libs-32bit-9.8.3P1-4.14.1 bind-libs-debuginfo-32bit-9.8.3P1-4.14.1 - openSUSE 12.1 (noarch): bind-doc-9.8.3P1-4.14.1 - openSUSE 12.1 (ia64): bind-libs-debuginfo-x86-9.8.3P1-4.14.1 bind-libs-debuginfo-x86-debuginfo-9.8.3P1-4.14.1 bind-libs-x86-9.8.3P1-4.14.1 References: http://support.novell.com/security/cve/CVE-2012-1033.html https://bugzilla.novell.com/746074

1 0

openSUSE-SU-2012:0863-1: moderate: update for bind (CVE-2012-1033)
by opensuse-security＠opensuse.org 11 Jul '12

11 Jul '12

openSUSE Security Update: update for bind (CVE-2012-1033) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0863-1 Rating: moderate References: #746074 Cross-References: CVE-2012-1033 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Fixed domain name resolving flaw: CVE-2012-1033, bnc#746074 Non-security fixes: - more than 40 other bugs fixed (see CHANGES for details) - 9.7.6-P1 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-383 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 ia64 x86_64): bind-debugsource-9.7.6P1-0.31.1 - openSUSE 11.4 (i586 x86_64): bind-9.7.6P1-0.31.1 bind-chrootenv-9.7.6P1-0.31.1 bind-debuginfo-9.7.6P1-0.31.1 bind-devel-9.7.6P1-0.31.1 bind-libs-9.7.6P1-0.31.1 bind-libs-debuginfo-9.7.6P1-0.31.1 bind-lwresd-9.7.6P1-0.31.1 bind-lwresd-debuginfo-9.7.6P1-0.31.1 bind-utils-9.7.6P1-0.31.1 bind-utils-debuginfo-9.7.6P1-0.31.1 - openSUSE 11.4 (x86_64): bind-libs-32bit-9.7.6P1-0.31.1 bind-libs-debuginfo-32bit-9.7.6P1-0.31.1 - openSUSE 11.4 (noarch): bind-doc-9.7.6P1-0.31.1 - openSUSE 11.4 (ia64): bind-libs-debuginfo-x86-9.7.6P1-0.31.1 bind-libs-debuginfo-x86-debuginfo-9.7.6P1-0.31.1 bind-libs-x86-9.7.6P1-0.31.1 References: http://support.novell.com/security/cve/CVE-2012-1033.html https://bugzilla.novell.com/746074

1 0

openSUSE-SU-2012:0862-1: moderate: libgdata for SSL certificate checking
by opensuse-security＠opensuse.org 11 Jul '12

11 Jul '12

openSUSE Security Update: libgdata for SSL certificate checking ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0862-1 Rating: moderate References: #752088 Cross-References: CVE-2012-1177 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Changes in libgdata: - Add libgdata-validate-ssl-cert.patch: validate SSL certificates for all connections. Fix bnc#752088, CVE-2012-1177. - Add gnome-common BuildRequires and call gnome-autogen.sh: needed for above patch. - Pass --with-ca-certs=/etc/ssl/ca-bundle.pem to configure to let libgdata know about the location of our certificates. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-381 - openSUSE 11.4: zypper in -t patch openSUSE-2012-381 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 ia64 x86_64): libgdata-debugsource-0.10.1-2.4.1 - openSUSE 12.1 (i586 x86_64): libgdata-devel-0.10.1-2.4.1 libgdata13-0.10.1-2.4.1 libgdata13-debuginfo-0.10.1-2.4.1 - openSUSE 12.1 (x86_64): libgdata13-32bit-0.10.1-2.4.1 libgdata13-debuginfo-32bit-0.10.1-2.4.1 - openSUSE 12.1 (noarch): libgdata-lang-0.10.1-2.4.1 - openSUSE 12.1 (ia64): libgdata13-debuginfo-x86-0.10.1-2.4.1 libgdata13-debuginfo-x86-debuginfo-0.10.1-2.4.1 libgdata13-x86-0.10.1-2.4.1 - openSUSE 11.4 (i586 ia64 x86_64): libgdata-debugsource-0.6.6-5.1 - openSUSE 11.4 (i586 x86_64): libgdata-devel-0.6.6-5.1 libgdata7-0.6.6-5.1 libgdata7-debuginfo-0.6.6-5.1 - openSUSE 11.4 (x86_64): libgdata7-32bit-0.6.6-5.1 libgdata7-debuginfo-32bit-0.6.6-5.1 - openSUSE 11.4 (noarch): libgdata-lang-0.6.6-5.1 - openSUSE 11.4 (ia64): libgdata7-debuginfo-x86-0.6.6-5.1 libgdata7-debuginfo-x86-debuginfo-0.6.6-5.1 libgdata7-x86-0.6.6-5.1 References: http://support.novell.com/security/cve/CVE-2012-1177.html https://bugzilla.novell.com/752088

1 0

openSUSE-SU-2012:0861-1: moderate: python3: Fixed utf-16 decoder issue
by opensuse-security＠opensuse.org 11 Jul '12

11 Jul '12

openSUSE Security Update: python3: Fixed utf-16 decoder issue ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0861-1 Rating: moderate References: #758993 Cross-References: CVE-2012-2135 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: python3 was fixed for: - Fix bnc#758993 - CVE-2012-2135: python3 utf-16 decoder unicode_decode_call_errorhandler aligned_end is not updated Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-380 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 ia64 x86_64): python3-base-debugsource-3.2.1-5.9.1 python3-debugsource-3.2.1-5.9.1 - openSUSE 12.1 (i586 x86_64): libpython3_2mu1_0-3.2.1-5.9.1 libpython3_2mu1_0-debuginfo-3.2.1-5.9.1 python3-2to3-3.2.1-5.9.1 python3-3.2.1-5.9.1 python3-base-3.2.1-5.9.1 python3-base-debuginfo-3.2.1-5.9.1 python3-curses-3.2.1-5.9.1 python3-curses-debuginfo-3.2.1-5.9.1 python3-dbm-3.2.1-5.9.1 python3-dbm-debuginfo-3.2.1-5.9.1 python3-debuginfo-3.2.1-5.9.1 python3-devel-3.2.1-5.9.1 python3-devel-debuginfo-3.2.1-5.9.1 python3-idle-3.2.1-5.9.1 python3-tk-3.2.1-5.9.1 python3-tk-debuginfo-3.2.1-5.9.1 python3-tools-3.2.1-5.9.1 python3-xml-3.2.1-5.9.1 python3-xml-debuginfo-3.2.1-5.9.1 - openSUSE 12.1 (x86_64): libpython3_2mu1_0-32bit-3.2.1-5.9.1 libpython3_2mu1_0-debuginfo-32bit-3.2.1-5.9.1 python3-32bit-3.2.1-5.9.1 python3-debuginfo-32bit-3.2.1-5.9.1 - openSUSE 12.1 (noarch): python3-doc-3.2-5.9.1 python3-doc-pdf-3.2-5.9.1 - openSUSE 12.1 (ia64): libpython3_2mu1_0-debuginfo-x86-3.2.1-5.9.1 libpython3_2mu1_0-debuginfo-x86-debuginfo-3.2.1-5.9.1 libpython3_2mu1_0-x86-3.2.1-5.9.1 python3-debuginfo-x86-3.2.1-5.9.1 python3-debuginfo-x86-debuginfo-3.2.1-5.9.1 python3-x86-3.2.1-5.9.1 References: http://support.novell.com/security/cve/CVE-2012-2135.html https://bugzilla.novell.com/758993

1 0

openSUSE-SU-2012:0860-1: important: mysql (CVE-2012-2122)
by opensuse-security＠opensuse.org 11 Jul '12

11 Jul '12

openSUSE Security Update: mysql (CVE-2012-2122) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0860-1 Rating: important References: #765092 Cross-References: CVE-2012-2122 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Fixing CVE-2012-2122: authentication bypass due to incorrect type casting Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-378 - openSUSE 11.4: zypper in -t patch openSUSE-2012-378 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libmysqlclusterclient16-7.1.22-2.7.1 libmysqlclusterclient16-debuginfo-7.1.22-2.7.1 libmysqlclusterclient_r16-7.1.22-2.7.1 libmysqlclusterclient_r16-debuginfo-7.1.22-2.7.1 mysql-cluster-7.1.22-2.7.1 mysql-cluster-bench-7.1.22-2.7.1 mysql-cluster-bench-debuginfo-7.1.22-2.7.1 mysql-cluster-client-7.1.22-2.7.1 mysql-cluster-client-debuginfo-7.1.22-2.7.1 mysql-cluster-debug-7.1.22-2.7.1 mysql-cluster-debug-debuginfo-7.1.22-2.7.1 mysql-cluster-debuginfo-7.1.22-2.7.1 mysql-cluster-debugsource-7.1.22-2.7.1 mysql-cluster-ndb-extra-7.1.22-2.7.1 mysql-cluster-ndb-extra-debuginfo-7.1.22-2.7.1 mysql-cluster-ndb-management-7.1.22-2.7.1 mysql-cluster-ndb-management-debuginfo-7.1.22-2.7.1 mysql-cluster-ndb-storage-7.1.22-2.7.1 mysql-cluster-ndb-storage-debuginfo-7.1.22-2.7.1 mysql-cluster-ndb-tools-7.1.22-2.7.1 mysql-cluster-ndb-tools-debuginfo-7.1.22-2.7.1 mysql-cluster-test-7.1.22-2.7.1 mysql-cluster-test-debuginfo-7.1.22-2.7.1 mysql-cluster-tools-7.1.22-2.7.1 mysql-cluster-tools-debuginfo-7.1.22-2.7.1 - openSUSE 11.4 (i586 x86_64): libmysqlclusterclient16-7.1.22-55.1 libmysqlclusterclient16-debuginfo-7.1.22-55.1 libmysqlclusterclient_r16-7.1.22-55.1 libmysqlclusterclient_r16-debuginfo-7.1.22-55.1 mysql-cluster-7.1.22-55.1 mysql-cluster-bench-7.1.22-55.1 mysql-cluster-bench-debuginfo-7.1.22-55.1 mysql-cluster-client-7.1.22-55.1 mysql-cluster-client-debuginfo-7.1.22-55.1 mysql-cluster-debug-7.1.22-55.1 mysql-cluster-debug-debuginfo-7.1.22-55.1 mysql-cluster-debuginfo-7.1.22-55.1 mysql-cluster-debugsource-7.1.22-55.1 mysql-cluster-ndb-extra-7.1.22-55.1 mysql-cluster-ndb-extra-debuginfo-7.1.22-55.1 mysql-cluster-ndb-management-7.1.22-55.1 mysql-cluster-ndb-management-debuginfo-7.1.22-55.1 mysql-cluster-ndb-storage-7.1.22-55.1 mysql-cluster-ndb-storage-debuginfo-7.1.22-55.1 mysql-cluster-ndb-tools-7.1.22-55.1 mysql-cluster-ndb-tools-debuginfo-7.1.22-55.1 mysql-cluster-test-7.1.22-55.1 mysql-cluster-test-debuginfo-7.1.22-55.1 mysql-cluster-tools-7.1.22-55.1 mysql-cluster-tools-debuginfo-7.1.22-55.1 References: http://support.novell.com/security/cve/CVE-2012-2122.html https://bugzilla.novell.com/765092

1 0

openSUSE-RU-2012:0854-1: moderate: This update to 1.4.1 provides bug fixes, crash fixes and creates proper missing menu items.
by maintenance＠opensuse.org 09 Jul '12

09 Jul '12

openSUSE Recommended Update: This update to 1.4.1 provides bug fixes, crash fixes and creates proper missing menu items. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0854-1 Rating: moderate References: #677233 #681788 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update to scribus 1.4.1 has stability fixes, removes content with incorrect licensing. This update also adds new palettes and updated documentation and translations for many languages. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-376 - openSUSE 11.4: zypper in -t patch openSUSE-2012-376 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): scribus-1.4.1-1.4.1 scribus-debuginfo-1.4.1-1.4.1 scribus-debugsource-1.4.1-1.4.1 scribus-devel-1.4.1-1.4.1 - openSUSE 11.4 (i586 x86_64): scribus-1.4.1-5.1 scribus-debuginfo-1.4.1-5.1 scribus-debugsource-1.4.1-5.1 scribus-devel-1.4.1-5.1 References: https://bugzilla.novell.com/677233 https://bugzilla.novell.com/681788

1 0

openSUSE-RU-2012:0853-1: libvirt: deadlock at shutdown
by maintenance＠opensuse.org 09 Jul '12

09 Jul '12

openSUSE Recommended Update: libvirt: deadlock at shutdown ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0853-1 Rating: low References: #745890 #747172 #753313 #760500 #761314 #767797 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update fixes the following issues for libvirt: - 753313: make PCI multifunction support more manual - fix ref count of virNetServer object - 767797: Fix libvirtd deadlock on shutdown - Fix 'make uninstall' error - 760500: Check for erros when parsing bridge interface XML - 761314: Improve error reporting when parsing domainXML character devices - Add support for qemu's 'unsafe' cache mode - 747172: Upstream PCI passthrough fixes for qemu/kvm - 745890: Fix libvirtd apparmor profile to work with libxenlight toolstack Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-374 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libvirt-0.9.6-3.6.2 libvirt-client-0.9.6-3.6.2 libvirt-client-debuginfo-0.9.6-3.6.2 libvirt-debuginfo-0.9.6-3.6.2 libvirt-debugsource-0.9.6-3.6.2 libvirt-devel-0.9.6-3.6.2 libvirt-doc-0.9.6-3.6.2 libvirt-python-0.9.6-3.6.2 libvirt-python-debuginfo-0.9.6-3.6.2 - openSUSE 12.1 (x86_64): libvirt-client-32bit-0.9.6-3.6.2 libvirt-client-debuginfo-32bit-0.9.6-3.6.2 libvirt-devel-32bit-0.9.6-3.6.2 - openSUSE 12.1 (ia64): libvirt-client-debuginfo-x86-0.9.6-3.6.2 libvirt-client-x86-0.9.6-3.6.2 References: https://bugzilla.novell.com/745890 https://bugzilla.novell.com/747172 https://bugzilla.novell.com/753313 https://bugzilla.novell.com/760500 https://bugzilla.novell.com/761314 https://bugzilla.novell.com/767797

1 0

openSUSE-RU-2012:0851-1: netcontrol: Collective update
by maintenance＠opensuse.org 09 Jul '12

09 Jul '12

openSUSE Recommended Update: netcontrol: Collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0851-1 Rating: low References: #708398 #735187 #754001 #760500 #763388 #765040 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update fixes the following issues for netcontrol: - version 0.2.6 - Merged spec file changes from openSUSE:Factory - Fixed libnl-devel build requires to build on 12.1 - Updated FSF address in copyright/license statements - version 0.2.5 - Fixed several bugs reported in bnc#760500, bnc#763388, bnc#765040, bnc#754001: - Fetch ip addresses and routes in system refresh via netlink, adds libnl-1 dependency to libnetcontrol. - Do not use -o rc for ifup or it fails when startmode is set to manual. - Always call ifstatus in ncf_if_status and not check interface operstate to better match ifstatus results - Check type while creating topology tree as well, not only if the interface specific data exists. - Do not report error in ncf_if_xml_state when interface does not exists any more [has been stopped/removed]. - Improved error handling, report several errors once - Expose a lot of error details to the caller - Fixed to parse and configure complete interface trees and fixed a senseless type check that caused SEGV. - Fetch mac address from system when not in the config - Fixed arp ip target bonding option handling and expose errors while trying to add not unique slave interface. - Refresh config handle earlier in ncf_define, fixed a double free in regression test it does. - Automatically start port/slave/base interfeces when stating a bridge/bond/vlan. - remove call to suse_update_config (very old work around) - Lowered bad_reference (bridge config references an unknown interface) log level to warning (bnc#735187). - version 0.2.4 - Fixed writing of bonding slaves into ifcfg file - Fixed a memory leak while netcf xml generation error - Generate complete interface chanins, do not generate type attribute in vlan interface reference xml node (bnc#708398). - license update: LGPL-2.1+ SPDX syntax. See http://www.spdx.org/licenses Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-373 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 ia64 x86_64): netcontrol-debugsource-0.2.6-3.4.1 - openSUSE 12.1 (i586 x86_64): libnetcontrol-devel-0.2.6-3.4.1 libnetcontrol0-0.2.6-3.4.1 libnetcontrol0-debuginfo-0.2.6-3.4.1 - openSUSE 12.1 (x86_64): libnetcontrol0-32bit-0.2.6-3.4.1 libnetcontrol0-debuginfo-32bit-0.2.6-3.4.1 - openSUSE 12.1 (ia64): libnetcontrol0-debuginfo-x86-0.2.6-3.4.1 libnetcontrol0-debuginfo-x86-debuginfo-0.2.6-3.4.1 libnetcontrol0-x86-0.2.6-3.4.1 References: https://bugzilla.novell.com/708398 https://bugzilla.novell.com/735187 https://bugzilla.novell.com/754001 https://bugzilla.novell.com/760500 https://bugzilla.novell.com/763388 https://bugzilla.novell.com/765040

1 0

openSUSE-RU-2012:0850-1: xdg-utils, perl-X11-Protocol: collective update
by maintenance＠opensuse.org 09 Jul '12

09 Jul '12

openSUSE Recommended Update: xdg-utils, perl-X11-Protocol: collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0850-1 Rating: low References: #559110 #746894 #749612 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update fixes the following issues for xdg-utils: - 749612: use gvfs-open if available in place of gnome-open - 559110: Fix xdg-screensaver issues with Gnome 3 - add xdg-terminal This update fixes the following issue for perl-X11-Protocol: - 746894: Fix issue with XAUTHLOCALHOSTNAME='localhost' This is needed in plus for the fix of xdg-utils, to fix bnc#559110 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-372 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): perl-X11-Protocol-0.56-3.4.1 - openSUSE 12.1 (noarch): xdg-utils-1.0.2-98.4.1 References: https://bugzilla.novell.com/559110 https://bugzilla.novell.com/746894 https://bugzilla.novell.com/749612

1 0

openSUSE-SU-2012:0845-1: moderate: accountsservice: Fixed directory traversal in usericons
by opensuse-security＠opensuse.org 06 Jul '12

06 Jul '12

openSUSE Security Update: accountsservice: Fixed directory traversal in usericons ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0845-1 Rating: moderate References: #768807 Cross-References: CVE-2012-2737 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of accountservice fixed a flaw in user_change_icon_file_authorized_cb() that could be exploited by local attackers to read arbitrary files. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-370 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): accountsservice-0.6.15-2.4.1 accountsservice-debuginfo-0.6.15-2.4.1 accountsservice-debugsource-0.6.15-2.4.1 accountsservice-devel-0.6.15-2.4.1 libaccountsservice0-0.6.15-2.4.1 libaccountsservice0-debuginfo-0.6.15-2.4.1 - openSUSE 12.1 (noarch): accountsservice-lang-0.6.15-2.4.1 References: http://support.novell.com/security/cve/CVE-2012-2737.html https://bugzilla.novell.com/768807

1 0

openSUSE-SU-2012:0835-1: moderate: update for puppet
by opensuse-security＠opensuse.org 04 Jul '12

04 Jul '12

openSUSE Security Update: update for puppet ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0835-1 Rating: moderate References: #747657 #755869 #755870 #755871 #755872 Cross-References: CVE-2012-1053 CVE-2012-1054 CVE-2012-1986 CVE-2012-1987 CVE-2012-1988 CVE-2012-1989 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: - Fixed bnc#747657: CVE-2012-1053, CVE-2012-1054: improper privilege dropping and file handling flaws This was done by updating to the new version in stable branch. The stable branch receives only security fixes and this update does not provide any new features. - Fixed bnc#755869 CVE-2012-1988: Filebucket arbitrary code execution - Fixed bnc#755872 CVE-2012-1986: Arbitrary File Read - Fixed bnc#755870 CVE-2012-1987: Denial of Service - Fixed bnc#755871 CVE-2012-1989: Arbitrary File Write Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-369 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): puppet-2.6.16-4.23.1 puppet-server-2.6.16-4.23.1 References: http://support.novell.com/security/cve/CVE-2012-1053.html http://support.novell.com/security/cve/CVE-2012-1054.html http://support.novell.com/security/cve/CVE-2012-1986.html http://support.novell.com/security/cve/CVE-2012-1987.html http://support.novell.com/security/cve/CVE-2012-1988.html http://support.novell.com/security/cve/CVE-2012-1989.html https://bugzilla.novell.com/747657 https://bugzilla.novell.com/755869 https://bugzilla.novell.com/755870 https://bugzilla.novell.com/755871 https://bugzilla.novell.com/755872

1 0

openSUSE-SU-2012:0834-1: krb5: fix kadmind denial of service via null pointer dereference (CVE-2012-1013)
by opensuse-security＠opensuse.org 04 Jul '12

04 Jul '12

openSUSE Security Update: krb5: fix kadmind denial of service via null pointer dereference (CVE-2012-1013) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0834-1 Rating: low References: #765485 Cross-References: CVE-2012-1013 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Fixing CVE-2012-1013 (krb5 kadmind denial of service via null pointer dereference) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-360 - openSUSE 11.4: zypper in -t patch openSUSE-2012-360 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 ia64 x86_64): krb5-debugsource-1.9.1-24.6.1 - openSUSE 12.1 (i586 x86_64): krb5-1.9.1-24.6.1 krb5-client-1.9.1-24.6.1 krb5-client-debuginfo-1.9.1-24.6.1 krb5-debuginfo-1.9.1-24.6.1 krb5-devel-1.9.1-24.6.1 krb5-plugin-kdb-ldap-1.9.1-24.6.1 krb5-plugin-kdb-ldap-debuginfo-1.9.1-24.6.1 krb5-plugin-preauth-pkinit-1.9.1-24.6.1 krb5-plugin-preauth-pkinit-debuginfo-1.9.1-24.6.1 krb5-server-1.9.1-24.6.1 krb5-server-debuginfo-1.9.1-24.6.1 - openSUSE 12.1 (x86_64): krb5-32bit-1.9.1-24.6.1 krb5-debuginfo-32bit-1.9.1-24.6.1 krb5-devel-32bit-1.9.1-24.6.1 - openSUSE 12.1 (ia64): krb5-debuginfo-x86-1.9.1-24.6.1 krb5-debuginfo-x86-debuginfo-1.9.1-24.6.1 krb5-x86-1.9.1-24.6.1 - openSUSE 11.4 (i586 ia64 x86_64): krb5-debugsource-1.8.3-16.49.1 - openSUSE 11.4 (i586 x86_64): krb5-1.8.3-16.49.1 krb5-client-1.8.3-16.49.1 krb5-client-debuginfo-1.8.3-16.49.1 krb5-debuginfo-1.8.3-16.49.1 krb5-devel-1.8.3-16.49.1 krb5-plugin-kdb-ldap-1.8.3-16.49.1 krb5-plugin-kdb-ldap-debuginfo-1.8.3-16.49.1 krb5-plugin-preauth-pkinit-1.8.3-16.49.1 krb5-plugin-preauth-pkinit-debuginfo-1.8.3-16.49.1 krb5-server-1.8.3-16.49.1 krb5-server-debuginfo-1.8.3-16.49.1 - openSUSE 11.4 (x86_64): krb5-32bit-1.8.3-16.49.1 krb5-debuginfo-32bit-1.8.3-16.49.1 krb5-devel-32bit-1.8.3-16.49.1 - openSUSE 11.4 (ia64): krb5-debuginfo-x86-1.8.3-16.49.1 krb5-debuginfo-x86-debuginfo-1.8.3-16.49.1 krb5-x86-1.8.3-16.49.1 References: http://support.novell.com/security/cve/CVE-2012-1013.html https://bugzilla.novell.com/765485

1 0

openSUSE-SU-2012:0833-1: important: ClamAV: 0.97.5 update
by opensuse-security＠opensuse.org 04 Jul '12

04 Jul '12

openSUSE Security Update: ClamAV: 0.97.5 update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0833-1 Rating: important References: #767574 Cross-References: CVE-2012-1457 CVE-2012-1458 CVE-2012-1459 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update addresses possible evasion cases in some archive formats and stability issues in portions of the bytecode engine. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-362 - openSUSE 11.4: zypper in -t patch openSUSE-2012-362 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): clamav-0.97.5-4.1 clamav-debuginfo-0.97.5-4.1 clamav-debugsource-0.97.5-4.1 - openSUSE 12.1 (noarch): clamav-db-0.97.5-4.1 - openSUSE 11.4 (i586 x86_64): clamav-0.97.5-10.1 clamav-debuginfo-0.97.5-10.1 clamav-debugsource-0.97.5-10.1 - openSUSE 11.4 (noarch): clamav-db-0.97.5-10.1 References: http://support.novell.com/security/cve/CVE-2012-1457.html http://support.novell.com/security/cve/CVE-2012-1458.html http://support.novell.com/security/cve/CVE-2012-1459.html https://bugzilla.novell.com/767574

1 0

openSUSE-SU-2012:0832-1: moderate: update for kvm
by opensuse-security＠opensuse.org 04 Jul '12

04 Jul '12

openSUSE Security Update: update for kvm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0832-1 Rating: moderate References: #764526 Cross-References: CVE-2012-2652 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - fix vulnerability to temporary file symlink attacks in snapshot file mode. (bnc#764526) (CVE-2012-2652) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-364 - openSUSE 11.4: zypper in -t patch openSUSE-2012-364 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): kvm-0.15.1-1.10.1 kvm-debuginfo-0.15.1-1.10.1 kvm-debugsource-0.15.1-1.10.1 - openSUSE 11.4 (i586 x86_64): kvm-0.14.0.0-1.20.1 kvm-debuginfo-0.14.0.0-1.20.1 kvm-debugsource-0.14.0.0-1.20.1 References: http://support.novell.com/security/cve/CVE-2012-2652.html https://bugzilla.novell.com/764526

1 0

openSUSE-SU-2012:0831-1: moderate: update for viewvc
by opensuse-security＠opensuse.org 04 Jul '12

04 Jul '12

openSUSE Security Update: update for viewvc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0831-1 Rating: moderate References: #768680 Cross-References: CVE-2012-3356 CVE-2012-3357 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: - update to 1.1.15 (bnc#768680): * security fix: complete authz support for remote SVN views (CVE-2012-3356) * security fix: log msg leak in SVN revision view with unreadable copy source (CVE-2012-3357) Additionally the following non-security issues have been addressed: * fix several instances of incorrect information in remote SVN views * increase performance of some revision metadata lookups in remote SVN views * fix RSS feed regression introduced in 1.1.14 * fix annotation of svn files with non-URI-safe paths * handle file:/// Subversion rootpaths as local roots * fix bug caused by trying to case-normalize anon usernames * speed up log handling by reusing tokenization results * add support for custom review log markup rules * fix svndbadmin failure on deleted paths under Subversion 1.7 * fix annotation of files in svn roots with non-URI-safe paths * fix stray annotation warning in markup display of images * more gracefully handle attempts to display binary content * fix path display in patch and certain diff views * fix broken cvsdb glob searching * allow svn revision specifiers to have leading r's * allow environmental override of configuration location * fix exception HTML-escaping non-string data under WSGI * add links to root logs from roots view * use Pygments lexer-guessing functionality - add supplements for apache2/subversion-server Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-363 - openSUSE 11.4: zypper in -t patch openSUSE-2012-363 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): viewvc-1.1.15-4.4.1 - openSUSE 11.4 (noarch): viewvc-1.1.15-6.1 References: http://support.novell.com/security/cve/CVE-2012-3356.html http://support.novell.com/security/cve/CVE-2012-3357.html https://bugzilla.novell.com/768680

1 0

openSUSE-SU-2012:0830-1: moderate: python-crypto: Fixed insecure ElGamal key generation
by opensuse-security＠opensuse.org 04 Jul '12

04 Jul '12

openSUSE Security Update: python-crypto: Fixed insecure ElGamal key generation ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0830-1 Rating: moderate References: #764127 Cross-References: CVE-2012-2417 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - fixes bnc#764127 CVE-2012-2417 insecure ElGamal key generation Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-367 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): python-crypto-2.3-6.1 - openSUSE 11.4 (i586): python-crypto-debuginfo-2.3-6.1 References: http://support.novell.com/security/cve/CVE-2012-2417.html https://bugzilla.novell.com/764127

1 0

openSUSE-SU-2012:0829-1: moderate: update for tiff
by opensuse-security＠opensuse.org 04 Jul '12

04 Jul '12

openSUSE Security Update: update for tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0829-1 Rating: moderate References: #767852 #767854 Cross-References: CVE-2012-2088 CVE-2012-2113 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: - fixing multiple integer overflows: * CVE-2012-2113 [bnc#767852] * CVE-2012-2088 [bnc#767854] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-361 - openSUSE 11.4: zypper in -t patch openSUSE-2012-361 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 ia64 x86_64): tiff-debugsource-3.9.5-8.7.1 - openSUSE 12.1 (i586 x86_64): libtiff-devel-3.9.5-8.7.1 libtiff3-3.9.5-8.7.1 libtiff3-debuginfo-3.9.5-8.7.1 tiff-3.9.5-8.7.1 tiff-debuginfo-3.9.5-8.7.1 - openSUSE 12.1 (x86_64): libtiff-devel-32bit-3.9.5-8.7.1 libtiff3-32bit-3.9.5-8.7.1 libtiff3-debuginfo-32bit-3.9.5-8.7.1 - openSUSE 12.1 (ia64): libtiff3-debuginfo-x86-3.9.5-8.7.1 libtiff3-debuginfo-x86-debuginfo-3.9.5-8.7.1 libtiff3-x86-3.9.5-8.7.1 - openSUSE 11.4 (i586 ia64 x86_64): tiff-debugsource-3.9.4-28.1 - openSUSE 11.4 (i586 x86_64): libtiff-devel-3.9.4-28.1 libtiff3-3.9.4-28.1 libtiff3-debuginfo-3.9.4-28.1 tiff-3.9.4-28.1 tiff-debuginfo-3.9.4-28.1 - openSUSE 11.4 (x86_64): libtiff-devel-32bit-3.9.4-28.1 libtiff3-32bit-3.9.4-28.1 libtiff3-debuginfo-32bit-3.9.4-28.1 - openSUSE 11.4 (ia64): libtiff3-debuginfo-x86-3.9.4-28.1 libtiff3-debuginfo-x86-debuginfo-3.9.4-28.1 libtiff3-x86-3.9.4-28.1 References: http://support.novell.com/security/cve/CVE-2012-2088.html http://support.novell.com/security/cve/CVE-2012-2113.html https://bugzilla.novell.com/767852 https://bugzilla.novell.com/767854

1 0

openSUSE-SU-2012:0828-1: critical: java-1_6_0-openjdk: critical
by opensuse-security＠opensuse.org 04 Jul '12

04 Jul '12

openSUSE Security Update: java-1_6_0-openjdk: critical ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0828-1 Rating: critical References: #766802 Cross-References: CVE-2012-1711 CVE-2012-1713 CVE-2012-1716 CVE-2012-1717 CVE-2012-1718 CVE-2012-1719 CVE-2012-1723 CVE-2012-1724 CVE-2012-1725 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This version upgrade of java-1_6_0-openjdk fixes multiple security flaws: - S7079902, CVE-2012-1711: Refine CORBA data models - S7143606, CVE-2012-1717: File.createTempFile should be improved for temporary files created by the platform. - S7143614, CVE-2012-1716: SynthLookAndFeel stability improvement - S7143617, CVE-2012-1713: Improve fontmanager layout lookup operations - S7143851, CVE-2012-1719: Improve IIOP stub and tie generation in RMIC - S7143872, CVE-2012-1718: Improve certificate extension processing - S7152811, CVE-2012-1723: Issues in client compiler - S7157609, CVE-2012-1724: Issues with loop - S7160757, CVE-2012-1725: Problem with hotspot runtime_classfile Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-368 - openSUSE 11.4: zypper in -t patch openSUSE-2012-368 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b24.1.11.3-6.2 java-1_6_0-openjdk-debuginfo-1.6.0.0_b24.1.11.3-6.2 java-1_6_0-openjdk-debugsource-1.6.0.0_b24.1.11.3-6.2 java-1_6_0-openjdk-demo-1.6.0.0_b24.1.11.3-6.2 java-1_6_0-openjdk-demo-debuginfo-1.6.0.0_b24.1.11.3-6.2 java-1_6_0-openjdk-devel-1.6.0.0_b24.1.11.3-6.2 java-1_6_0-openjdk-devel-debuginfo-1.6.0.0_b24.1.11.3-6.2 java-1_6_0-openjdk-javadoc-1.6.0.0_b24.1.11.3-6.2 java-1_6_0-openjdk-src-1.6.0.0_b24.1.11.3-6.2 - openSUSE 11.4 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b24.1.11.3-0.11.2 java-1_6_0-openjdk-debuginfo-1.6.0.0_b24.1.11.3-0.11.2 java-1_6_0-openjdk-debugsource-1.6.0.0_b24.1.11.3-0.11.2 java-1_6_0-openjdk-demo-1.6.0.0_b24.1.11.3-0.11.2 java-1_6_0-openjdk-demo-debuginfo-1.6.0.0_b24.1.11.3-0.11.2 java-1_6_0-openjdk-devel-1.6.0.0_b24.1.11.3-0.11.2 java-1_6_0-openjdk-devel-debuginfo-1.6.0.0_b24.1.11.3-0.11.2 java-1_6_0-openjdk-javadoc-1.6.0.0_b24.1.11.3-0.11.2 java-1_6_0-openjdk-src-1.6.0.0_b24.1.11.3-0.11.2 References: http://support.novell.com/security/cve/CVE-2012-1711.html http://support.novell.com/security/cve/CVE-2012-1713.html http://support.novell.com/security/cve/CVE-2012-1716.html http://support.novell.com/security/cve/CVE-2012-1717.html http://support.novell.com/security/cve/CVE-2012-1718.html http://support.novell.com/security/cve/CVE-2012-1719.html http://support.novell.com/security/cve/CVE-2012-1723.html http://support.novell.com/security/cve/CVE-2012-1724.html http://support.novell.com/security/cve/CVE-2012-1725.html https://bugzilla.novell.com/766802

1 0

openSUSE-SU-2012:0827-1: moderate: opera: Version 12.00
by opensuse-security＠opensuse.org 04 Jul '12

04 Jul '12

openSUSE Security Update: opera: Version 12.00 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0827-1 Rating: moderate References: #767045 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: - update to 12.00 * full changelog available at: http://www.opera.com/docs/changelogs/unix/1120/ - fixes [bnc#767045] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-366 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): opera-12.00-22.1 opera-gtk-12.00-22.1 opera-kde4-12.00-22.1 References: https://bugzilla.novell.com/767045

1 0

openSUSE-SU-2012:0826-1: moderate: php5
by opensuse-security＠opensuse.org 04 Jul '12

04 Jul '12

openSUSE Security Update: php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0826-1 Rating: moderate References: #766798 Cross-References: CVE-2012-2143 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - security update: * Fix BSD crypt 8bit character mishandling (CVE-2012-2143) [bnc#766798] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-365 - openSUSE 11.4: zypper in -t patch openSUSE-2012-365 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): apache2-mod_php5-5.3.8-4.24.1 apache2-mod_php5-debuginfo-5.3.8-4.24.1 php5-5.3.8-4.24.1 php5-bcmath-5.3.8-4.24.1 php5-bcmath-debuginfo-5.3.8-4.24.1 php5-bz2-5.3.8-4.24.1 php5-bz2-debuginfo-5.3.8-4.24.1 php5-calendar-5.3.8-4.24.1 php5-calendar-debuginfo-5.3.8-4.24.1 php5-ctype-5.3.8-4.24.1 php5-ctype-debuginfo-5.3.8-4.24.1 php5-curl-5.3.8-4.24.1 php5-curl-debuginfo-5.3.8-4.24.1 php5-dba-5.3.8-4.24.1 php5-dba-debuginfo-5.3.8-4.24.1 php5-debuginfo-5.3.8-4.24.1 php5-debugsource-5.3.8-4.24.1 php5-devel-5.3.8-4.24.1 php5-dom-5.3.8-4.24.1 php5-dom-debuginfo-5.3.8-4.24.1 php5-enchant-5.3.8-4.24.1 php5-enchant-debuginfo-5.3.8-4.24.1 php5-exif-5.3.8-4.24.1 php5-exif-debuginfo-5.3.8-4.24.1 php5-fastcgi-5.3.8-4.24.1 php5-fastcgi-debuginfo-5.3.8-4.24.1 php5-fileinfo-5.3.8-4.24.1 php5-fileinfo-debuginfo-5.3.8-4.24.1 php5-fpm-5.3.8-4.24.1 php5-fpm-debuginfo-5.3.8-4.24.1 php5-ftp-5.3.8-4.24.1 php5-ftp-debuginfo-5.3.8-4.24.1 php5-gd-5.3.8-4.24.1 php5-gd-debuginfo-5.3.8-4.24.1 php5-gettext-5.3.8-4.24.1 php5-gettext-debuginfo-5.3.8-4.24.1 php5-gmp-5.3.8-4.24.1 php5-gmp-debuginfo-5.3.8-4.24.1 php5-iconv-5.3.8-4.24.1 php5-iconv-debuginfo-5.3.8-4.24.1 php5-imap-5.3.8-4.24.1 php5-imap-debuginfo-5.3.8-4.24.1 php5-intl-5.3.8-4.24.1 php5-intl-debuginfo-5.3.8-4.24.1 php5-json-5.3.8-4.24.1 php5-json-debuginfo-5.3.8-4.24.1 php5-ldap-5.3.8-4.24.1 php5-ldap-debuginfo-5.3.8-4.24.1 php5-mbstring-5.3.8-4.24.1 php5-mbstring-debuginfo-5.3.8-4.24.1 php5-mcrypt-5.3.8-4.24.1 php5-mcrypt-debuginfo-5.3.8-4.24.1 php5-mssql-5.3.8-4.24.1 php5-mssql-debuginfo-5.3.8-4.24.1 php5-mysql-5.3.8-4.24.1 php5-mysql-debuginfo-5.3.8-4.24.1 php5-odbc-5.3.8-4.24.1 php5-odbc-debuginfo-5.3.8-4.24.1 php5-openssl-5.3.8-4.24.1 php5-openssl-debuginfo-5.3.8-4.24.1 php5-pcntl-5.3.8-4.24.1 php5-pcntl-debuginfo-5.3.8-4.24.1 php5-pdo-5.3.8-4.24.1 php5-pdo-debuginfo-5.3.8-4.24.1 php5-pgsql-5.3.8-4.24.1 php5-pgsql-debuginfo-5.3.8-4.24.1 php5-phar-5.3.8-4.24.1 php5-phar-debuginfo-5.3.8-4.24.1 php5-posix-5.3.8-4.24.1 php5-posix-debuginfo-5.3.8-4.24.1 php5-pspell-5.3.8-4.24.1 php5-pspell-debuginfo-5.3.8-4.24.1 php5-readline-5.3.8-4.24.1 php5-readline-debuginfo-5.3.8-4.24.1 php5-shmop-5.3.8-4.24.1 php5-shmop-debuginfo-5.3.8-4.24.1 php5-snmp-5.3.8-4.24.1 php5-snmp-debuginfo-5.3.8-4.24.1 php5-soap-5.3.8-4.24.1 php5-soap-debuginfo-5.3.8-4.24.1 php5-sockets-5.3.8-4.24.1 php5-sockets-debuginfo-5.3.8-4.24.1 php5-sqlite-5.3.8-4.24.1 php5-sqlite-debuginfo-5.3.8-4.24.1 php5-suhosin-5.3.8-4.24.1 php5-suhosin-debuginfo-5.3.8-4.24.1 php5-sysvmsg-5.3.8-4.24.1 php5-sysvmsg-debuginfo-5.3.8-4.24.1 php5-sysvsem-5.3.8-4.24.1 php5-sysvsem-debuginfo-5.3.8-4.24.1 php5-sysvshm-5.3.8-4.24.1 php5-sysvshm-debuginfo-5.3.8-4.24.1 php5-tidy-5.3.8-4.24.1 php5-tidy-debuginfo-5.3.8-4.24.1 php5-tokenizer-5.3.8-4.24.1 php5-tokenizer-debuginfo-5.3.8-4.24.1 php5-wddx-5.3.8-4.24.1 php5-wddx-debuginfo-5.3.8-4.24.1 php5-xmlreader-5.3.8-4.24.1 php5-xmlreader-debuginfo-5.3.8-4.24.1 php5-xmlrpc-5.3.8-4.24.1 php5-xmlrpc-debuginfo-5.3.8-4.24.1 php5-xmlwriter-5.3.8-4.24.1 php5-xmlwriter-debuginfo-5.3.8-4.24.1 php5-xsl-5.3.8-4.24.1 php5-xsl-debuginfo-5.3.8-4.24.1 php5-zip-5.3.8-4.24.1 php5-zip-debuginfo-5.3.8-4.24.1 php5-zlib-5.3.8-4.24.1 php5-zlib-debuginfo-5.3.8-4.24.1 - openSUSE 12.1 (noarch): php5-pear-5.3.8-4.24.1 - openSUSE 11.4 (i586 x86_64): apache2-mod_php5-5.3.5-341.1 apache2-mod_php5-debuginfo-5.3.5-341.1 php5-5.3.5-341.1 php5-bcmath-5.3.5-341.1 php5-bcmath-debuginfo-5.3.5-341.1 php5-bz2-5.3.5-341.1 php5-bz2-debuginfo-5.3.5-341.1 php5-calendar-5.3.5-341.1 php5-calendar-debuginfo-5.3.5-341.1 php5-ctype-5.3.5-341.1 php5-ctype-debuginfo-5.3.5-341.1 php5-curl-5.3.5-341.1 php5-curl-debuginfo-5.3.5-341.1 php5-dba-5.3.5-341.1 php5-dba-debuginfo-5.3.5-341.1 php5-debuginfo-5.3.5-341.1 php5-debugsource-5.3.5-341.1 php5-devel-5.3.5-341.1 php5-dom-5.3.5-341.1 php5-dom-debuginfo-5.3.5-341.1 php5-enchant-5.3.5-341.1 php5-enchant-debuginfo-5.3.5-341.1 php5-exif-5.3.5-341.1 php5-exif-debuginfo-5.3.5-341.1 php5-fastcgi-5.3.5-341.1 php5-fastcgi-debuginfo-5.3.5-341.1 php5-fileinfo-5.3.5-341.1 php5-fileinfo-debuginfo-5.3.5-341.1 php5-fpm-5.3.5-341.1 php5-fpm-debuginfo-5.3.5-341.1 php5-ftp-5.3.5-341.1 php5-ftp-debuginfo-5.3.5-341.1 php5-gd-5.3.5-341.1 php5-gd-debuginfo-5.3.5-341.1 php5-gettext-5.3.5-341.1 php5-gettext-debuginfo-5.3.5-341.1 php5-gmp-5.3.5-341.1 php5-gmp-debuginfo-5.3.5-341.1 php5-hash-5.3.5-341.1 php5-hash-debuginfo-5.3.5-341.1 php5-iconv-5.3.5-341.1 php5-iconv-debuginfo-5.3.5-341.1 php5-imap-5.3.5-341.1 php5-imap-debuginfo-5.3.5-341.1 php5-intl-5.3.5-341.1 php5-intl-debuginfo-5.3.5-341.1 php5-json-5.3.5-341.1 php5-json-debuginfo-5.3.5-341.1 php5-ldap-5.3.5-341.1 php5-ldap-debuginfo-5.3.5-341.1 php5-mbstring-5.3.5-341.1 php5-mbstring-debuginfo-5.3.5-341.1 php5-mcrypt-5.3.5-341.1 php5-mcrypt-debuginfo-5.3.5-341.1 php5-mysql-5.3.5-341.1 php5-mysql-debuginfo-5.3.5-341.1 php5-odbc-5.3.5-341.1 php5-odbc-debuginfo-5.3.5-341.1 php5-openssl-5.3.5-341.1 php5-openssl-debuginfo-5.3.5-341.1 php5-pcntl-5.3.5-341.1 php5-pcntl-debuginfo-5.3.5-341.1 php5-pdo-5.3.5-341.1 php5-pdo-debuginfo-5.3.5-341.1 php5-pgsql-5.3.5-341.1 php5-pgsql-debuginfo-5.3.5-341.1 php5-phar-5.3.5-341.1 php5-phar-debuginfo-5.3.5-341.1 php5-posix-5.3.5-341.1 php5-posix-debuginfo-5.3.5-341.1 php5-pspell-5.3.5-341.1 php5-pspell-debuginfo-5.3.5-341.1 php5-readline-5.3.5-341.1 php5-readline-debuginfo-5.3.5-341.1 php5-shmop-5.3.5-341.1 php5-shmop-debuginfo-5.3.5-341.1 php5-snmp-5.3.5-341.1 php5-snmp-debuginfo-5.3.5-341.1 php5-soap-5.3.5-341.1 php5-soap-debuginfo-5.3.5-341.1 php5-sockets-5.3.5-341.1 php5-sockets-debuginfo-5.3.5-341.1 php5-sqlite-5.3.5-341.1 php5-sqlite-debuginfo-5.3.5-341.1 php5-suhosin-5.3.5-341.1 php5-suhosin-debuginfo-5.3.5-341.1 php5-sysvmsg-5.3.5-341.1 php5-sysvmsg-debuginfo-5.3.5-341.1 php5-sysvsem-5.3.5-341.1 php5-sysvsem-debuginfo-5.3.5-341.1 php5-sysvshm-5.3.5-341.1 php5-sysvshm-debuginfo-5.3.5-341.1 php5-tidy-5.3.5-341.1 php5-tidy-debuginfo-5.3.5-341.1 php5-tokenizer-5.3.5-341.1 php5-tokenizer-debuginfo-5.3.5-341.1 php5-wddx-5.3.5-341.1 php5-wddx-debuginfo-5.3.5-341.1 php5-xmlreader-5.3.5-341.1 php5-xmlreader-debuginfo-5.3.5-341.1 php5-xmlrpc-5.3.5-341.1 php5-xmlrpc-debuginfo-5.3.5-341.1 php5-xmlwriter-5.3.5-341.1 php5-xmlwriter-debuginfo-5.3.5-341.1 php5-xsl-5.3.5-341.1 php5-xsl-debuginfo-5.3.5-341.1 php5-zip-5.3.5-341.1 php5-zip-debuginfo-5.3.5-341.1 php5-zlib-5.3.5-341.1 php5-zlib-debuginfo-5.3.5-341.1 - openSUSE 11.4 (noarch): php5-pear-5.3.5-341.1 References: http://support.novell.com/security/cve/CVE-2012-2143.html https://bugzilla.novell.com/766798

1 0