August 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2012:0940-1: NetworkManager-gnome: nm-connection-editor cannot save configuration in single-edit mode
by maintenance＠opensuse.org 02 Aug '12

02 Aug '12

openSUSE Recommended Update: NetworkManager-gnome: nm-connection-editor cannot save configuration in single-edit mode ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0940-1 Rating: low References: #772587 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for NetworkManager-gnome: - bnc#772587: When nm-connection-editor was in single-edit mode, it closed the process before gaining the privilege to modify the system connection, so the modified configuration was never saved. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-488 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): NetworkManager-gnome-0.9.1.90-3.18.1 NetworkManager-gnome-debuginfo-0.9.1.90-3.18.1 NetworkManager-gnome-debugsource-0.9.1.90-3.18.1 libnm-gtk-devel-0.9.1.90-3.18.1 libnm-gtk0-0.9.1.90-3.18.1 libnm-gtk0-debuginfo-0.9.1.90-3.18.1 - openSUSE 12.1 (noarch): NetworkManager-gnome-lang-0.9.1.90-3.18.1 References: https://bugzilla.novell.com/772587

1 0

openSUSE-RU-2012:0939-1: gnucash: fixed loading help
by maintenance＠opensuse.org 02 Aug '12

02 Aug '12

openSUSE Recommended Update: gnucash: fixed loading help ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0939-1 Rating: low References: #771530 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for gnucash: - bnc#771530: gnucash uses a ghelp: uri to launch the help. Those are mangled up though by susehelp, which results in yelp only spitting an error. - Additionally, fix the gnucash-docs package itself: the german help (allthough being very incomplete) at least now loads. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-489 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): gnucash-docs-2.4.1.svn-4.4.1 susehelp-2009.10.06-11.4.1 susehelp_cz-2009.10.06-11.4.1 susehelp_de-2009.10.06-11.4.1 susehelp_en-2009.10.06-11.4.1 susehelp_es-2009.10.06-11.4.1 susehelp_fr-2009.10.06-11.4.1 susehelp_hu-2009.10.06-11.4.1 susehelp_it-2009.10.06-11.4.1 References: https://bugzilla.novell.com/771530

1 0

openSUSE-RU-2012:0938-1: glib2: Add glib2-g_hash_table_foreach_crash-fix.patch
by maintenance＠opensuse.org 02 Aug '12

02 Aug '12

openSUSE Recommended Update: glib2: Add glib2-g_hash_table_foreach_crash-fix.patch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0938-1 Rating: low References: #751127 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for glib2: - bnc#751127: Add glib2-g_hash_table_foreach_crash-fix.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-487 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): glib2-debugsource-2.30.1-2.4.1 glib2-devel-2.30.1-2.4.1 glib2-devel-debuginfo-2.30.1-2.4.1 glib2-devel-static-2.30.1-2.4.1 glib2-tools-2.30.1-2.4.1 glib2-tools-debuginfo-2.30.1-2.4.1 libgio-2_0-0-2.30.1-2.4.1 libgio-2_0-0-debuginfo-2.30.1-2.4.1 libgio-fam-2.30.1-2.4.1 libgio-fam-debuginfo-2.30.1-2.4.1 libglib-2_0-0-2.30.1-2.4.1 libglib-2_0-0-debuginfo-2.30.1-2.4.1 libgmodule-2_0-0-2.30.1-2.4.1 libgmodule-2_0-0-debuginfo-2.30.1-2.4.1 libgobject-2_0-0-2.30.1-2.4.1 libgobject-2_0-0-debuginfo-2.30.1-2.4.1 libgthread-2_0-0-2.30.1-2.4.1 libgthread-2_0-0-debuginfo-2.30.1-2.4.1 - openSUSE 12.1 (x86_64): glib2-devel-debuginfo-32bit-2.30.1-2.4.1 glib2-tools-32bit-2.30.1-2.4.1 glib2-tools-debuginfo-32bit-2.30.1-2.4.1 libgio-2_0-0-32bit-2.30.1-2.4.1 libgio-2_0-0-debuginfo-32bit-2.30.1-2.4.1 libgio-fam-32bit-2.30.1-2.4.1 libgio-fam-debuginfo-32bit-2.30.1-2.4.1 libglib-2_0-0-32bit-2.30.1-2.4.1 libglib-2_0-0-debuginfo-32bit-2.30.1-2.4.1 libgmodule-2_0-0-32bit-2.30.1-2.4.1 libgmodule-2_0-0-debuginfo-32bit-2.30.1-2.4.1 libgobject-2_0-0-32bit-2.30.1-2.4.1 libgobject-2_0-0-debuginfo-32bit-2.30.1-2.4.1 libgthread-2_0-0-32bit-2.30.1-2.4.1 libgthread-2_0-0-debuginfo-32bit-2.30.1-2.4.1 - openSUSE 12.1 (noarch): gio-branding-upstream-2.30.1-2.4.1 glib2-lang-2.30.1-2.4.1 - openSUSE 12.1 (ia64): glib2-devel-debuginfo-x86-2.30.1-2.4.1 glib2-tools-debuginfo-x86-2.30.1-2.4.1 glib2-tools-x86-2.30.1-2.4.1 libgio-2_0-0-debuginfo-x86-2.30.1-2.4.1 libgio-2_0-0-x86-2.30.1-2.4.1 libgio-fam-debuginfo-x86-2.30.1-2.4.1 libgio-fam-x86-2.30.1-2.4.1 libglib-2_0-0-debuginfo-x86-2.30.1-2.4.1 libglib-2_0-0-x86-2.30.1-2.4.1 libgmodule-2_0-0-debuginfo-x86-2.30.1-2.4.1 libgmodule-2_0-0-x86-2.30.1-2.4.1 libgobject-2_0-0-debuginfo-x86-2.30.1-2.4.1 libgobject-2_0-0-x86-2.30.1-2.4.1 libgthread-2_0-0-debuginfo-x86-2.30.1-2.4.1 libgthread-2_0-0-x86-2.30.1-2.4.1 References: https://bugzilla.novell.com/751127

1 0

openSUSE-RU-2012:0937-1: kernel-firmware: update for iwl2000/iwl2030
by maintenance＠opensuse.org 02 Aug '12

02 Aug '12

openSUSE Recommended Update: kernel-firmware: update for iwl2000/iwl2030 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0937-1 Rating: low References: Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update of kernel firmware contains updates for the Intel Wireless chipsets iwl2000/iwl2030. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-475 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): kernel-firmware-20111025git-1.13.1 References:

1 0

openSUSE-SU-2012:0935-1: important: seamonkey: Update to Seamonkey 2.11
by opensuse-security＠opensuse.org 01 Aug '12

01 Aug '12

openSUSE Security Update: seamonkey: Update to Seamonkey 2.11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0935-1 Rating: important References: #771583 Cross-References: CVE-2012-1948 CVE-2012-1949 CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 CVE-2012-1955 CVE-2012-1957 CVE-2012-1958 CVE-2012-1959 CVE-2012-1960 CVE-2012-1961 CVE-2012-1962 CVE-2012-1963 CVE-2012-1967 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: Seamonkey was updated to version 2.11 (bnc#771583) * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948 Miscellaneous memory safety hazards * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1 952 Gecko memory corruption * MFSA 2012-45/CVE-2012-1955 (bmo#757376) Spoofing issue with location * MFSA 2012-47/CVE-2012-1957 (bmo#750096) Improper filtering of javascript in HTML feed-view * MFSA 2012-48/CVE-2012-1958 (bmo#750820) use-after-free in nsGlobalWindow::PageHidden * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559) Same-compartment Security Wrappers can be bypassed * MFSA 2012-50/CVE-2012-1960 (bmo#761014) Out of bounds read in QCMS * MFSA 2012-51/CVE-2012-1961 (bmo#761655) X-Frame-Options header ignored when duplicated * MFSA 2012-52/CVE-2012-1962 (bmo#764296) JSDependentString::undepend string conversion results in memory corruption * MFSA 2012-53/CVE-2012-1963 (bmo#767778) Content Security Policy 1.0 implementation errors cause data leakage * MFSA 2012-56/CVE-2012-1967 (bmo#758344) Code execution through javascript: URLs * relicensed to MPL-2.0 - updated/removed patches - requires NSS 3.13.5 - update to Seamonkey 2.10.1 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-473 - openSUSE 11.4: zypper in -t patch openSUSE-2012-473 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): seamonkey-2.11-2.24.2 seamonkey-debuginfo-2.11-2.24.2 seamonkey-debugsource-2.11-2.24.2 seamonkey-dom-inspector-2.11-2.24.2 seamonkey-irc-2.11-2.24.2 seamonkey-translations-common-2.11-2.24.2 seamonkey-translations-other-2.11-2.24.2 seamonkey-venkman-2.11-2.24.2 - openSUSE 11.4 (i586 x86_64): seamonkey-2.11-24.3 seamonkey-debuginfo-2.11-24.3 seamonkey-debugsource-2.11-24.3 seamonkey-dom-inspector-2.11-24.3 seamonkey-irc-2.11-24.3 seamonkey-translations-common-2.11-24.3 seamonkey-translations-other-2.11-24.3 seamonkey-venkman-2.11-24.3 References: http://support.novell.com/security/cve/CVE-2012-1948.html http://support.novell.com/security/cve/CVE-2012-1949.html http://support.novell.com/security/cve/CVE-2012-1951.html http://support.novell.com/security/cve/CVE-2012-1952.html http://support.novell.com/security/cve/CVE-2012-1953.html http://support.novell.com/security/cve/CVE-2012-1954.html http://support.novell.com/security/cve/CVE-2012-1955.html http://support.novell.com/security/cve/CVE-2012-1957.html http://support.novell.com/security/cve/CVE-2012-1958.html http://support.novell.com/security/cve/CVE-2012-1959.html http://support.novell.com/security/cve/CVE-2012-1960.html http://support.novell.com/security/cve/CVE-2012-1961.html http://support.novell.com/security/cve/CVE-2012-1962.html http://support.novell.com/security/cve/CVE-2012-1963.html http://support.novell.com/security/cve/CVE-2012-1967.html https://bugzilla.novell.com/771583

1 0

openSUSE-SU-2012:0934-1: moderate: libpng14 (CVE-2012-3425)
by opensuse-security＠opensuse.org 01 Aug '12

01 Aug '12

openSUSE Security Update: libpng14 (CVE-2012-3425) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0934-1 Rating: moderate References: #772760 Cross-References: CVE-2012-3425 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - fixed CVE-2012-3425 [bnc#772760] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-474 - openSUSE 11.4: zypper in -t patch openSUSE-2012-474 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libpng14-14-1.4.11-3.12.1 libpng14-14-debuginfo-1.4.11-3.12.1 libpng14-compat-devel-1.4.11-3.12.1 libpng14-debugsource-1.4.11-3.12.1 libpng14-devel-1.4.11-3.12.1 - openSUSE 12.1 (x86_64): libpng14-14-32bit-1.4.11-3.12.1 libpng14-14-debuginfo-32bit-1.4.11-3.12.1 libpng14-compat-devel-32bit-1.4.11-3.12.1 libpng14-devel-32bit-1.4.11-3.12.1 - openSUSE 12.1 (ia64): libpng14-14-debuginfo-x86-1.4.11-3.12.1 libpng14-14-x86-1.4.11-3.12.1 - openSUSE 11.4 (i586 x86_64): libpng14-14-1.4.4-23.1 libpng14-14-debuginfo-1.4.4-23.1 libpng14-compat-devel-1.4.4-23.1 libpng14-debugsource-1.4.4-23.1 libpng14-devel-1.4.4-23.1 - openSUSE 11.4 (x86_64): libpng14-14-32bit-1.4.4-23.1 libpng14-14-debuginfo-32bit-1.4.4-23.1 libpng14-compat-devel-32bit-1.4.4-23.1 libpng14-devel-32bit-1.4.4-23.1 - openSUSE 11.4 (ia64): libpng14-14-debuginfo-x86-1.4.4-23.1 libpng14-14-x86-1.4.4-23.1 References: http://support.novell.com/security/cve/CVE-2012-3425.html https://bugzilla.novell.com/772760

1 0

openSUSE-SU-2012:0933-1: gnome-terminal: Fixed denial of service with escape sequences
by opensuse-security＠opensuse.org 01 Aug '12

01 Aug '12

openSUSE Security Update: gnome-terminal: Fixed denial of service with escape sequences ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0933-1 Rating: low References: #772761 Cross-References: CVE-2012-2738 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Add vte-CVE-2012-2738.patch: fix potential DoS through malicious escape sequences. Fix bnc#772761, CVE-2012-2738. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-472 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): glade3-catalog-vte-0.28.2-4.4.1 libvte9-0.28.2-4.4.1 libvte9-debuginfo-0.28.2-4.4.1 python-vte-0.28.2-4.4.1 python-vte-debuginfo-0.28.2-4.4.1 vte2-debugsource-0.28.2-4.4.1 vte2-devel-0.28.2-4.4.1 vte2-tools-0.28.2-4.4.1 vte2-tools-debuginfo-0.28.2-4.4.1 - openSUSE 12.1 (noarch): vte2-lang-0.28.2-4.4.1 References: http://support.novell.com/security/cve/CVE-2012-2738.html https://bugzilla.novell.com/772761

1 0

openSUSE-SU-2012:0932-1: moderate: libjpeg-turbo (CVE-2012-2806)
by opensuse-security＠opensuse.org 01 Aug '12

01 Aug '12

openSUSE Security Update: libjpeg-turbo (CVE-2012-2806) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0932-1 Rating: moderate References: #771791 Cross-References: CVE-2012-2806 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - fixed heap overflow [bnc#771791] * CVE-2012-2806.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-469 - openSUSE 11.4: zypper in -t patch openSUSE-2012-469 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libjpeg-turbo-1.1.1-10.4.1 libjpeg-turbo-debuginfo-1.1.1-10.4.1 libjpeg-turbo-debugsource-1.1.1-10.4.1 libjpeg62-62.0.0-10.4.1 libjpeg62-debuginfo-62.0.0-10.4.1 libjpeg62-devel-62.0.0-10.4.1 - openSUSE 12.1 (x86_64): libjpeg62-32bit-62.0.0-10.4.1 libjpeg62-debuginfo-32bit-62.0.0-10.4.1 libjpeg62-devel-32bit-62.0.0-10.4.1 - openSUSE 12.1 (ia64): libjpeg62-debuginfo-x86-62.0.0-10.4.1 libjpeg62-x86-62.0.0-10.4.1 - openSUSE 11.4 (i586 x86_64): libjpeg-turbo-1.0.1-6.1 libjpeg-turbo-debuginfo-1.0.1-6.1 libjpeg-turbo-debugsource-1.0.1-6.1 libjpeg62-62.0.0-6.1 libjpeg62-debuginfo-62.0.0-6.1 libjpeg62-devel-62.0.0-6.1 - openSUSE 11.4 (x86_64): libjpeg62-32bit-62.0.0-6.1 libjpeg62-debuginfo-32bit-62.0.0-6.1 libjpeg62-devel-32bit-62.0.0-6.1 - openSUSE 11.4 (ia64): libjpeg62-debuginfo-x86-62.0.0-6.1 libjpeg62-x86-62.0.0-6.1 References: http://support.novell.com/security/cve/CVE-2012-2806.html https://bugzilla.novell.com/771791

1 0

openSUSE-SU-2012:0931-1: vte/gnome-terminal
by opensuse-security＠opensuse.org 01 Aug '12

01 Aug '12

openSUSE Security Update: vte/gnome-terminal ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0931-1 Rating: low References: #699214 #772761 Cross-References: CVE-2011-2198 CVE-2012-2738 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: - Add vte-CVE-2011-2198.patch: fix memory exhaustion through malicious escape sequences. Fix bnc#699214, CVE-2011-2198 (openSUSE 11.4 only). - Add vte-CVE-2012-2738.patch: fix potential DoS through malicious escape sequences. Fix bnc#772761, CVE-2012-2738. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-471 - openSUSE 11.4: zypper in -t patch openSUSE-2012-471 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): glade-catalog-vte-0.30.1-2.4.1 gnome-pty-helper-0.30.1-2.4.1 gnome-pty-helper-debuginfo-0.30.1-2.4.1 libvte2_90-9-0.30.1-2.4.1 libvte2_90-9-debuginfo-0.30.1-2.4.1 vte-debugsource-0.30.1-2.4.1 vte-devel-0.30.1-2.4.1 vte-tools-0.30.1-2.4.1 vte-tools-debuginfo-0.30.1-2.4.1 - openSUSE 12.1 (noarch): vte-lang-0.30.1-2.4.1 - openSUSE 11.4 (i586 x86_64): glade3-catalog-vte-0.26.2-5.1 libvte9-0.26.2-5.1 libvte9-debuginfo-0.26.2-5.1 python-vte-0.26.2-5.1 python-vte-debuginfo-0.26.2-5.1 vte-debugsource-0.26.2-5.1 vte-devel-0.26.2-5.1 vte-tools-0.26.2-5.1 vte-tools-debuginfo-0.26.2-5.1 - openSUSE 11.4 (noarch): vte-lang-0.26.2-5.1 References: http://support.novell.com/security/cve/CVE-2011-2198.html http://support.novell.com/security/cve/CVE-2012-2738.html https://bugzilla.novell.com/699214 https://bugzilla.novell.com/772761

1 0

openSUSE-SU-2012:0930-1: moderate: wireshark (CVE-2012-4048, CVE-2012-4049)
by opensuse-security＠opensuse.org 01 Aug '12

01 Aug '12

openSUSE Security Update: wireshark (CVE-2012-4048, CVE-2012-4049) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0930-1 Rating: moderate References: #772738 Cross-References: CVE-2012-4048 CVE-2012-4049 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: - This version update fixes the following security issues (bnc#772738): * The PPP dissector could crash (wnpa-sec-2012-11 CVE-2012-4048) * The NFS dissector could use excessive amounts of CPU (wnpa-sec-2012-12 CVE-2012-4049) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-470 - openSUSE 11.4: zypper in -t patch openSUSE-2012-470 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): wireshark-1.4.14-3.17.1 wireshark-debuginfo-1.4.14-3.17.1 wireshark-debugsource-1.4.14-3.17.1 wireshark-devel-1.4.14-3.17.1 - openSUSE 11.4 (i586 x86_64): wireshark-1.4.14-0.19.1 wireshark-debuginfo-1.4.14-0.19.1 wireshark-debugsource-1.4.14-0.19.1 wireshark-devel-1.4.14-0.19.1 References: http://support.novell.com/security/cve/CVE-2012-4048.html http://support.novell.com/security/cve/CVE-2012-4049.html https://bugzilla.novell.com/772738

1 0