August 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2012:1059-1: autofs: Collective update for AutoFS
by maintenance＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Recommended Update: autofs: Collective update for AutoFS ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1059-1 Rating: low References: #733479 #734924 #748588 #752044 #753693 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update resolves the following issues: * Do not mask the failure to unmount busy volumes (bnc#733479) * Fix umount recovery of busy direct mounts (bnc#734924) * Fix remount deadlock that can happen on a restart when there are nested direct mounts busy (bnc#733479) * Duplicate parent options for included maps (bnc#753693) * Fix segmentation fault in get_query_dn() (bnc#752044) * Fix segmentation fault in do_remount_indirect() when scandir() fails (bnc#748588). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-531 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): autofs-5.0.5-14.27.1 autofs-debuginfo-5.0.5-14.27.1 autofs-debugsource-5.0.5-14.27.1 References: https://bugzilla.novell.com/733479 https://bugzilla.novell.com/734924 https://bugzilla.novell.com/748588 https://bugzilla.novell.com/752044 https://bugzilla.novell.com/753693

1 0

openSUSE-SU-2012:1058-1: moderate: quota: fixed good_client in rquota_svc.c
by opensuse-security＠opensuse.org 29 Aug '12

29 Aug '12

openSUSE Security Update: quota: fixed good_client in rquota_svc.c ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1058-1 Rating: moderate References: #772570 Cross-References: CVE-2012-3417 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: quota was fixed to handle tcp wrappers in rquotad correctly. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-529 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): quota-3.17-20.1 quota-debuginfo-3.17-20.1 quota-debugsource-3.17-20.1 quota-nfs-3.17-20.1 quota-nfs-debuginfo-3.17-20.1 References: http://support.novell.com/security/cve/CVE-2012-3417.html https://bugzilla.novell.com/772570

1 0

openSUSE-RU-2012:1057-1: turpial: Fix start up problems
by maintenance＠opensuse.org 29 Aug '12

29 Aug '12

openSUSE Recommended Update: turpial: Fix start up problems ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1057-1 Rating: low References: #751192 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Turpial fails to launch under certain conditions, as not all Requirements are correctly defined. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-530 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): turpial-1.5.0-3.4.1 turpial-lang-1.5.0-3.4.1 References: https://bugzilla.novell.com/751192

1 0

openSUSE-RU-2012:1046-1: postfix: fix for ldap_aliases problem
by maintenance＠opensuse.org 27 Aug '12

27 Aug '12

openSUSE Recommended Update: postfix: fix for ldap_aliases problem ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1046-1 Rating: low References: #771303 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Postfix was adjusted to fix a ldap-aliases problem. * add 'version = 3' to ldap_aliases.cf Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-528 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): postfix-2.8.8-3.16.1 postfix-debuginfo-2.8.8-3.16.1 postfix-debugsource-2.8.8-3.16.1 postfix-devel-2.8.8-3.16.1 postfix-mysql-2.8.8-3.16.1 postfix-mysql-debuginfo-2.8.8-3.16.1 postfix-postgresql-2.8.8-3.16.1 postfix-postgresql-debuginfo-2.8.8-3.16.1 - openSUSE 12.1 (noarch): postfix-doc-2.8.8-3.16.1 References: https://bugzilla.novell.com/771303

1 0

openSUSE-RU-2012:1041-1: icinga: rcido2db failed when lock directory /var/run/icinga was missing
by maintenance＠opensuse.org 27 Aug '12

27 Aug '12

openSUSE Recommended Update: icinga: rcido2db failed when lock directory /var/run/icinga was missing ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1041-1 Rating: low References: #776186 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: icinga was updated to fix bnc#776186 - rcido2db failed when lock directory /var/run/icinga was missing Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-527 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): icinga-1.5.1-5.7.1 icinga-debuginfo-1.5.1-5.7.1 icinga-debugsource-1.5.1-5.7.1 icinga-devel-1.5.1-5.7.1 icinga-doc-1.5.1-5.7.1 icinga-idoutils-1.5.1-5.7.1 icinga-idoutils-debuginfo-1.5.1-5.7.1 icinga-idoutils-mysql-1.5.1-5.7.1 icinga-idoutils-oracle-1.5.1-5.7.1 icinga-idoutils-pgsql-1.5.1-5.7.1 icinga-plugins-eventhandlers-1.5.1-5.7.1 icinga-www-1.5.1-5.7.1 icinga-www-debuginfo-1.5.1-5.7.1 References: https://bugzilla.novell.com/776186

1 0

openSUSE-SU-2012:1036-1: pcp: Update to 3.6.5.
by opensuse-security＠opensuse.org 24 Aug '12

24 Aug '12

openSUSE Security Update: pcp: Update to 3.6.5. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1036-1 Rating: low References: #775009 #775010 #775011 #775013 Cross-References: CVE-2012-3418 CVE-2012-3419 CVE-2012-3420 CVE-2012-3421 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Update to pcp-3.6.5. + Fixes for security advisory CVE-2012-3418; (bnc#775009). + Workaround for security advisory CVE-2012-3419; (bnc#775010). + Fixes for security advisory CVE-2012-3420; (bnc#775011). + Fixes for security advisory CVE-2012-3421; (bnc#775013). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-525 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libpcp-devel-3.6.5-5.4.1 libpcp-devel-debuginfo-3.6.5-5.4.1 libpcp3-3.6.5-5.4.1 libpcp3-debuginfo-3.6.5-5.4.1 pcp-3.6.5-5.4.1 pcp-debuginfo-3.6.5-5.4.1 pcp-debugsource-3.6.5-5.4.1 pcp-import-iostat2pcp-3.6.5-5.4.1 pcp-import-mrtg2pcp-3.6.5-5.4.1 pcp-import-sar2pcp-3.6.5-5.4.1 pcp-import-sheet2pcp-3.6.5-5.4.1 perl-PCP-LogImport-3.6.5-5.4.1 perl-PCP-LogImport-debuginfo-3.6.5-5.4.1 perl-PCP-LogSummary-3.6.5-5.4.1 perl-PCP-MMV-3.6.5-5.4.1 perl-PCP-MMV-debuginfo-3.6.5-5.4.1 perl-PCP-PMDA-3.6.5-5.4.1 perl-PCP-PMDA-debuginfo-3.6.5-5.4.1 References: http://support.novell.com/security/cve/CVE-2012-3418.html http://support.novell.com/security/cve/CVE-2012-3419.html http://support.novell.com/security/cve/CVE-2012-3420.html http://support.novell.com/security/cve/CVE-2012-3421.html https://bugzilla.novell.com/775009 https://bugzilla.novell.com/775010 https://bugzilla.novell.com/775011 https://bugzilla.novell.com/775013

1 0

openSUSE-SU-2012:1035-1: moderate: wireshark: update to 1.4.15
by opensuse-security＠opensuse.org 24 Aug '12

24 Aug '12

openSUSE Security Update: wireshark: update to 1.4.15 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1035-1 Rating: moderate References: #776083 Cross-References: CVE-2012-4285 CVE-2012-4288 CVE-2012-4289 CVE-2012-4290 CVE-2012-4291 CVE-2012-4292 CVE-2012-4293 CVE-2012-4296 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: wireshark was updated to 1.4.15 * The DCP ETSI dissector could trigger a zero division. (wnpa-sec-2012-13 CVE-2012-4285) * The XTP dissector could go into an infinite loop. (wnpa-sec-2012-15 CVE-2012-4288) * The AFP dissector could go into a large loop. (wnpa-sec-2012-17 CVE-2012-4289) * The RTPS2 dissector could overflow a buffer. (wnpa-sec-2012-18 CVE-2012-4296) * The CIP dissector could exhaust system memory. (wnpa-sec-2012-20 CVE-2012-4291) * The STUN dissector could crash. (wnpa-sec-2012-21 CVE-2012-4292) * The EtherCAT Mailbox dissector could abort. (wnpa-sec-2012-22 CVE-2012-4293) * The CTDB dissector could go into a large loop. (wnpa-sec-2012-23 CVE-2012-4290) Further bug fixes and updated protocol support as listed in: http://www.wireshark.org/docs/relnotes/wireshark-1.4.15.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-526 - openSUSE 11.4: zypper in -t patch openSUSE-2012-526 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): wireshark-1.4.15-3.20.1 wireshark-debuginfo-1.4.15-3.20.1 wireshark-debugsource-1.4.15-3.20.1 wireshark-devel-1.4.15-3.20.1 - openSUSE 11.4 (i586 x86_64): wireshark-1.4.15-0.22.1 wireshark-debuginfo-1.4.15-0.22.1 wireshark-debugsource-1.4.15-0.22.1 wireshark-devel-1.4.15-0.22.1 References: http://support.novell.com/security/cve/CVE-2012-4285.html http://support.novell.com/security/cve/CVE-2012-4288.html http://support.novell.com/security/cve/CVE-2012-4289.html http://support.novell.com/security/cve/CVE-2012-4290.html http://support.novell.com/security/cve/CVE-2012-4291.html http://support.novell.com/security/cve/CVE-2012-4292.html http://support.novell.com/security/cve/CVE-2012-4293.html http://support.novell.com/security/cve/CVE-2012-4296.html https://bugzilla.novell.com/776083

1 0

openSUSE-RU-2012:1018-1: java-1_6_0-openjdk: fixed the permissions of gnome-java-bridge.jar
by maintenance＠opensuse.org 22 Aug '12

22 Aug '12

openSUSE Recommended Update: java-1_6_0-openjdk: fixed the permissions of gnome-java-bridge.jar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1018-1 Rating: low References: #765270 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the permissions of gnome-java-bridge.jar, which was only readable for root. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-524 - openSUSE 11.4: zypper in -t patch openSUSE-2012-524 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b24.1.11.3-9.1 java-1_6_0-openjdk-debuginfo-1.6.0.0_b24.1.11.3-9.1 java-1_6_0-openjdk-debugsource-1.6.0.0_b24.1.11.3-9.1 java-1_6_0-openjdk-demo-1.6.0.0_b24.1.11.3-9.1 java-1_6_0-openjdk-demo-debuginfo-1.6.0.0_b24.1.11.3-9.1 java-1_6_0-openjdk-devel-1.6.0.0_b24.1.11.3-9.1 java-1_6_0-openjdk-devel-debuginfo-1.6.0.0_b24.1.11.3-9.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b24.1.11.3-9.1 java-1_6_0-openjdk-src-1.6.0.0_b24.1.11.3-9.1 - openSUSE 11.4 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b24.1.11.3-0.14.1 java-1_6_0-openjdk-debuginfo-1.6.0.0_b24.1.11.3-0.14.1 java-1_6_0-openjdk-debugsource-1.6.0.0_b24.1.11.3-0.14.1 java-1_6_0-openjdk-demo-1.6.0.0_b24.1.11.3-0.14.1 java-1_6_0-openjdk-demo-debuginfo-1.6.0.0_b24.1.11.3-0.14.1 java-1_6_0-openjdk-devel-1.6.0.0_b24.1.11.3-0.14.1 java-1_6_0-openjdk-devel-debuginfo-1.6.0.0_b24.1.11.3-0.14.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b24.1.11.3-0.14.1 java-1_6_0-openjdk-src-1.6.0.0_b24.1.11.3-0.14.1 References: https://bugzilla.novell.com/765270

1 0

openSUSE-RU-2012:1017-1: bnc#642296, lvremove sometimes fails.
by maintenance＠opensuse.org 22 Aug '12

22 Aug '12

openSUSE Recommended Update: bnc#642296, lvremove sometimes fails. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1017-1 Rating: low References: Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: bnc#642296, lvremove sometimes fails. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-523 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): lvm2-2.02.84-19.8.1 lvm2-debuginfo-2.02.84-19.8.1 lvm2-debugsource-2.02.84-19.8.1 References:

1 0

openSUSE-SU-2012:1006-1: moderate: update for dhcp
by opensuse-security＠opensuse.org 20 Aug '12

20 Aug '12

openSUSE Security Update: update for dhcp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1006-1 Rating: moderate References: #721829 #739696 #762108 #767661 #770236 #772924 Cross-References: CVE-2012-3570 CVE-2012-3571 CVE-2012-3954 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that solves three vulnerabilities and has three fixes is now available. Description: This update of dhcp fixed multiple security vulnerabilities (memory leak, Denial of Service). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-522 - openSUSE 11.4: zypper in -t patch openSUSE-2012-522 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): dhcp-4.2.4.P1-0.6.10.1 dhcp-client-4.2.4.P1-0.6.10.1 dhcp-client-debuginfo-4.2.4.P1-0.6.10.1 dhcp-debuginfo-4.2.4.P1-0.6.10.1 dhcp-debugsource-4.2.4.P1-0.6.10.1 dhcp-devel-4.2.4.P1-0.6.10.1 dhcp-doc-4.2.4.P1-0.6.10.1 dhcp-relay-4.2.4.P1-0.6.10.1 dhcp-relay-debuginfo-4.2.4.P1-0.6.10.1 dhcp-server-4.2.4.P1-0.6.10.1 dhcp-server-debuginfo-4.2.4.P1-0.6.10.1 - openSUSE 11.4 (i586 x86_64): dhcp-4.2.4.P1-0.27.1 dhcp-client-4.2.4.P1-0.27.1 dhcp-client-debuginfo-4.2.4.P1-0.27.1 dhcp-debuginfo-4.2.4.P1-0.27.1 dhcp-debugsource-4.2.4.P1-0.27.1 dhcp-devel-4.2.4.P1-0.27.1 dhcp-doc-4.2.4.P1-0.27.1 dhcp-relay-4.2.4.P1-0.27.1 dhcp-relay-debuginfo-4.2.4.P1-0.27.1 dhcp-server-4.2.4.P1-0.27.1 dhcp-server-debuginfo-4.2.4.P1-0.27.1 References: http://support.novell.com/security/cve/CVE-2012-3570.html http://support.novell.com/security/cve/CVE-2012-3571.html http://support.novell.com/security/cve/CVE-2012-3954.html https://bugzilla.novell.com/721829 https://bugzilla.novell.com/739696 https://bugzilla.novell.com/762108 https://bugzilla.novell.com/767661 https://bugzilla.novell.com/770236 https://bugzilla.novell.com/772924

1 0