September 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2012:1268-1: subversion: Update to version 1.6.19
by maintenance＠opensuse.org 28 Sep '12

28 Sep '12

openSUSE Recommended Update: subversion: Update to version 1.6.19 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1268-1 Rating: low References: #780848 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for subversion: - update to 1.6.19 (bnc#780848) - Client-side bugfixes: * handle missing svn:date reported by svnserve gracefully - Server-side bugfixes: * fix possible server hang if a hook script fails to start * fix write-through proxy commit regression introduced in 1.6.17 * partial sync drops properties when converting to adds - Developer-visible changes: * fix the testsuite to avoid FAILs on APR hash order Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-654 - openSUSE 11.4: zypper in -t patch openSUSE-2012-654 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.6.19-2.9.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.6.19-2.9.1 libsvn_auth_kwallet-1-0-1.6.19-2.9.1 libsvn_auth_kwallet-1-0-debuginfo-1.6.19-2.9.1 subversion-1.6.19-2.9.1 subversion-debuginfo-1.6.19-2.9.1 subversion-debugsource-1.6.19-2.9.1 subversion-devel-1.6.19-2.9.1 subversion-perl-1.6.19-2.9.1 subversion-perl-debuginfo-1.6.19-2.9.1 subversion-python-1.6.19-2.9.1 subversion-python-debuginfo-1.6.19-2.9.1 subversion-ruby-1.6.19-2.9.1 subversion-ruby-debuginfo-1.6.19-2.9.1 subversion-server-1.6.19-2.9.1 subversion-server-debuginfo-1.6.19-2.9.1 subversion-tools-1.6.19-2.9.1 subversion-tools-debuginfo-1.6.19-2.9.1 - openSUSE 11.4 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.6.19-1.43.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.6.19-1.43.1 libsvn_auth_kwallet-1-0-1.6.19-1.43.1 libsvn_auth_kwallet-1-0-debuginfo-1.6.19-1.43.1 subversion-1.6.19-1.43.1 subversion-debuginfo-1.6.19-1.43.1 subversion-debugsource-1.6.19-1.43.1 subversion-devel-1.6.19-1.43.1 subversion-perl-1.6.19-1.43.1 subversion-perl-debuginfo-1.6.19-1.43.1 subversion-python-1.6.19-1.43.1 subversion-python-debuginfo-1.6.19-1.43.1 subversion-ruby-1.6.19-1.43.1 subversion-ruby-debuginfo-1.6.19-1.43.1 subversion-server-1.6.19-1.43.1 subversion-server-debuginfo-1.6.19-1.43.1 subversion-tools-1.6.19-1.43.1 subversion-tools-debuginfo-1.6.19-1.43.1 References: https://bugzilla.novell.com/780848

1 0

openSUSE-RU-2012:1267-1: udev: create /dev/root symlink with dynamic rule for systemd
by maintenance＠opensuse.org 28 Sep '12

28 Sep '12

openSUSE Recommended Update: udev: create /dev/root symlink with dynamic rule for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1267-1 Rating: low References: #776882 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for udev: - bnc#776882: create /dev/root symlink with dynamic rule for systemd Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-651 - openSUSE 12.1: zypper in -t patch openSUSE-2012-651 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libgudev-1_0-0-182-4.17.1 libgudev-1_0-0-debuginfo-182-4.17.1 libgudev-1_0-devel-182-4.17.1 libudev-devel-182-4.17.1 libudev0-182-4.17.1 libudev0-debuginfo-182-4.17.1 typelib-1_0-GUdev-1_0-182-4.17.1 udev-182-4.17.1 udev-debuginfo-182-4.17.1 udev-debugsource-182-4.17.1 - openSUSE 12.2 (x86_64): libgudev-1_0-0-32bit-182-4.17.1 libgudev-1_0-0-debuginfo-32bit-182-4.17.1 libudev0-32bit-182-4.17.1 libudev0-debuginfo-32bit-182-4.17.1 - openSUSE 12.1 (i586 x86_64): libgudev-1_0-0-173-3.9.1 libgudev-1_0-0-debuginfo-173-3.9.1 libgudev-1_0-devel-173-3.9.1 libudev-devel-173-3.9.1 libudev0-173-3.9.1 libudev0-debuginfo-173-3.9.1 udev-173-3.9.1 udev-debuginfo-173-3.9.1 udev-debugsource-173-3.9.1 - openSUSE 12.1 (x86_64): libgudev-1_0-0-32bit-173-3.9.1 libgudev-1_0-0-debuginfo-32bit-173-3.9.1 libudev0-32bit-173-3.9.1 libudev0-debuginfo-32bit-173-3.9.1 - openSUSE 12.1 (ia64): libgudev-1_0-0-debuginfo-x86-173-3.9.1 libgudev-1_0-0-x86-173-3.9.1 libudev0-debuginfo-x86-173-3.9.1 libudev0-x86-173-3.9.1 References: https://bugzilla.novell.com/776882

1 0

openSUSE-RU-2012:1266-1: tracker: Add libtracker-fts-ICU-complx-locale.patch
by maintenance＠opensuse.org 28 Sep '12

28 Sep '12

openSUSE Recommended Update: tracker: Add libtracker-fts-ICU-complx-locale.patch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1266-1 Rating: low References: #780614 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for tracker: - bnc#780614: Add libtracker-fts-ICU-complx-locale.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-653 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): gnome-panel-applet-tracker-0.14.2-1.4.2 gnome-panel-applet-tracker-debuginfo-0.14.2-1.4.2 libtracker-common-0_14-0-0.14.2-1.4.1 libtracker-common-0_14-0-debuginfo-0.14.2-1.4.1 libtracker-extract-0_14-0-0.14.2-1.4.1 libtracker-extract-0_14-0-debuginfo-0.14.2-1.4.1 libtracker-miner-0_14-0-0.14.2-1.4.1 libtracker-miner-0_14-0-debuginfo-0.14.2-1.4.1 libtracker-sparql-0_14-0-0.14.2-1.4.1 libtracker-sparql-0_14-0-debuginfo-0.14.2-1.4.1 nautilus-extension-tracker-tags-0.14.2-1.4.2 nautilus-extension-tracker-tags-debuginfo-0.14.2-1.4.2 tracker-0.14.2-1.4.1 tracker-debuginfo-0.14.2-1.4.1 tracker-debugsource-0.14.2-1.4.1 tracker-devel-0.14.2-1.4.1 tracker-extras-debugsource-0.14.2-1.4.2 tracker-gui-0.14.2-1.4.2 tracker-gui-debuginfo-0.14.2-1.4.2 tracker-miner-evolution-0.14.2-1.4.2 tracker-miner-evolution-debuginfo-0.14.2-1.4.2 tracker-miner-files-0.14.2-1.4.1 tracker-miner-files-debuginfo-0.14.2-1.4.1 tracker-miner-firefox-0.14.2-1.4.2 tracker-miner-flickr-0.14.2-1.4.2 tracker-miner-flickr-debuginfo-0.14.2-1.4.2 tracker-miner-rss-0.14.2-1.4.2 tracker-miner-rss-debuginfo-0.14.2-1.4.2 tracker-miner-thunderbird-0.14.2-1.4.2 typelib-1_0-Tracker-0_14-0.14.2-1.4.1 typelib-1_0-TrackerExtract-0_14-0.14.2-1.4.1 typelib-1_0-TrackerMiner-0_14-0.14.2-1.4.1 - openSUSE 12.2 (noarch): tracker-lang-0.14.2-1.4.1 References: https://bugzilla.novell.com/780614

1 0

openSUSE-RU-2012:1257-1: yast2-kerberos-client: correctly import SSSD status
by maintenance＠opensuse.org 26 Sep '12

26 Sep '12

openSUSE Recommended Update: yast2-kerberos-client: correctly import SSSD status ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1257-1 Rating: low References: #779010 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for yast2-kerberos-client: - bnc#779010: import SSSD status correctly Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-646 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (noarch): yast2-kerberos-client-2.22.3-2.4.1 References: https://bugzilla.novell.com/779010

1 0

openSUSE-RU-2012:1256-1: mumble: allow reading /etc/ssl/openssl.cnf in apparmor profile
by maintenance＠opensuse.org 26 Sep '12

26 Sep '12

openSUSE Recommended Update: mumble: allow reading /etc/ssl/openssl.cnf in apparmor profile ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1256-1 Rating: low References: #768692 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for mumble: - bnc#768692: allow reading /etc/ssl/openssl.cnf in apparmor profile Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-647 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): mumble-1.2.3-10.6.1 mumble-debuginfo-1.2.3-10.6.1 mumble-debugsource-1.2.3-10.6.1 mumble-server-1.2.3-10.6.1 mumble-server-debuginfo-1.2.3-10.6.1 - openSUSE 12.1 (x86_64): mumble-32bit-1.2.3-10.6.1 mumble-debuginfo-32bit-1.2.3-10.6.1 - openSUSE 12.1 (ia64): mumble-debuginfo-x86-1.2.3-10.6.1 mumble-x86-1.2.3-10.6.1 References: https://bugzilla.novell.com/768692

1 0

openSUSE-RU-2012:1255-1: yast2-country: Several bugfixes
by maintenance＠opensuse.org 26 Sep '12

26 Sep '12

openSUSE Recommended Update: yast2-country: Several bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1255-1 Rating: low References: #773491 #774918 #780206 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update fixes the following issues for yast2-country: - Makefiles adapted to changed structure - bnc#773491: try to restart systemd-timedated service to let it know that /etc/localtime has been updated - bnc#773491: use timezone data from /etc/localtime if available - bnc#774918: added "US International" keyboard layout, make it default for NL - consistent return value when /etc/adjtime does not exist Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-644 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): yast2-country-2.22.10-2.4.1 yast2-country-data-2.22.10-2.4.1 References: https://bugzilla.novell.com/773491 https://bugzilla.novell.com/774918 https://bugzilla.novell.com/780206

1 0

openSUSE-SU-2012:1254-1: moderate: dhcp
by opensuse-security＠opensuse.org 26 Sep '12

26 Sep '12

openSUSE Security Update: dhcp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1254-1 Rating: moderate References: #780167 Cross-References: CVE-2012-3955 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - Update to ISC dhcp-4.2.4-P2 release, providing a security fix for an issue with the use of lease times was found and fixed. Making certain changes to the end time of an IPv6 lease could cause the server to abort. Thanks to Glen Eustace of Massey University, New Zealand for finding this issue. ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-642 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): dhcp-4.2.4.P2-0.30.1 dhcp-client-4.2.4.P2-0.30.1 dhcp-client-debuginfo-4.2.4.P2-0.30.1 dhcp-debuginfo-4.2.4.P2-0.30.1 dhcp-debugsource-4.2.4.P2-0.30.1 dhcp-devel-4.2.4.P2-0.30.1 dhcp-doc-4.2.4.P2-0.30.1 dhcp-relay-4.2.4.P2-0.30.1 dhcp-relay-debuginfo-4.2.4.P2-0.30.1 dhcp-server-4.2.4.P2-0.30.1 dhcp-server-debuginfo-4.2.4.P2-0.30.1 References: http://support.novell.com/security/cve/CVE-2012-3955.html https://bugzilla.novell.com/780167

1 0

openSUSE-RU-2012:1253-1: bug-buddy: Fix gnome-version.xml path
by maintenance＠opensuse.org 26 Sep '12

26 Sep '12

openSUSE Recommended Update: bug-buddy: Fix gnome-version.xml path ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1253-1 Rating: low References: #77203 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for bug-buddy: - bnc#77203: Fix gnome-version.xml path Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-649 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): bug-buddy-2.32.0-8.4.1 bug-buddy-debuginfo-2.32.0-8.4.1 bug-buddy-debugsource-2.32.0-8.4.1 - openSUSE 12.1 (x86_64): bug-buddy-32bit-2.32.0-8.4.1 bug-buddy-debuginfo-32bit-2.32.0-8.4.1 - openSUSE 12.1 (noarch): bug-buddy-lang-2.32.0-8.4.1 - openSUSE 12.1 (ia64): bug-buddy-debuginfo-x86-2.32.0-8.4.1 bug-buddy-x86-2.32.0-8.4.1 References: https://bugzilla.novell.com/77203

1 0

openSUSE-SU-2012:1252-1: moderate: dhcp
by opensuse-security＠opensuse.org 26 Sep '12

26 Sep '12

openSUSE Security Update: dhcp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1252-1 Rating: moderate References: #780167 Cross-References: CVE-2012-3955 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - Update to ISC dhcp-4.2.4-P2 release, providing a security fix for an issue with the use of lease times was found and fixed. Making certain changes to the end time of an IPv6 lease could cause the server to abort. Thanks to Glen Eustace of Massey University, New Zealand for finding this issue. ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-643 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): dhcp-4.2.4.P2-0.6.13.1 dhcp-client-4.2.4.P2-0.6.13.1 dhcp-client-debuginfo-4.2.4.P2-0.6.13.1 dhcp-debuginfo-4.2.4.P2-0.6.13.1 dhcp-debugsource-4.2.4.P2-0.6.13.1 dhcp-devel-4.2.4.P2-0.6.13.1 dhcp-doc-4.2.4.P2-0.6.13.1 dhcp-relay-4.2.4.P2-0.6.13.1 dhcp-relay-debuginfo-4.2.4.P2-0.6.13.1 dhcp-server-4.2.4.P2-0.6.13.1 dhcp-server-debuginfo-4.2.4.P2-0.6.13.1 References: http://support.novell.com/security/cve/CVE-2012-3955.html https://bugzilla.novell.com/780167

1 0

openSUSE-SU-2012:1251-1: moderate: postgresql, postgresql-libs
by opensuse-security＠opensuse.org 26 Sep '12

26 Sep '12

openSUSE Security Update: postgresql, postgresql-libs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1251-1 Rating: moderate References: #765069 #766797 #776523 #776524 Cross-References: CVE-2012-2143 CVE-2012-2655 CVE-2012-3488 CVE-2012-3489 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: - Security and bugfix release 9.1.5: * Ignore SECURITY DEFINER and SET attributes for a procedural language's call handler (CVE-2012-2655) bnc#765069 * Fix incorrect password transformation in "contrib/pgcrypto"'s DES crypt() function (CVE-2012-2143) bnc#766799 * Prevent access to external files/URLs via "contrib/xml2"'s xslt_process() (CVE-2012-3488) bnc#776523 * Prevent access to external files/URLs via XML entity references (CVE-2012-3489) bnc#776524 * See the release notes for the rest of the changes: http://www.postgresql.org/docs/9.1/static/release.html /usr/share/doc/packages/postgresql/HISTORY Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-650 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libecpg6-9.1.5-3.10.1 libecpg6-debuginfo-9.1.5-3.10.1 libpq5-9.1.5-3.10.1 libpq5-debuginfo-9.1.5-3.10.1 postgresql-9.1.5-3.10.1 postgresql-contrib-9.1.5-3.10.1 postgresql-contrib-debuginfo-9.1.5-3.10.1 postgresql-debuginfo-9.1.5-3.10.1 postgresql-debugsource-9.1.5-3.10.1 postgresql-devel-9.1.5-3.10.1 postgresql-devel-debuginfo-9.1.5-3.10.1 postgresql-libs-debugsource-9.1.5-3.10.1 postgresql-plperl-9.1.5-3.10.1 postgresql-plperl-debuginfo-9.1.5-3.10.1 postgresql-plpython-9.1.5-3.10.1 postgresql-plpython-debuginfo-9.1.5-3.10.1 postgresql-pltcl-9.1.5-3.10.1 postgresql-pltcl-debuginfo-9.1.5-3.10.1 postgresql-server-9.1.5-3.10.1 postgresql-server-debuginfo-9.1.5-3.10.1 - openSUSE 12.1 (x86_64): libpq5-32bit-9.1.5-3.10.1 libpq5-debuginfo-32bit-9.1.5-3.10.1 postgresql-devel-32bit-9.1.5-3.10.1 postgresql-devel-debuginfo-32bit-9.1.5-3.10.1 - openSUSE 12.1 (noarch): postgresql-docs-9.1.5-3.10.1 - openSUSE 12.1 (ia64): libpq5-debuginfo-x86-9.1.5-3.10.1 libpq5-x86-9.1.5-3.10.1 postgresql-devel-debuginfo-x86-9.1.5-3.10.1 References: http://support.novell.com/security/cve/CVE-2012-2143.html http://support.novell.com/security/cve/CVE-2012-2655.html http://support.novell.com/security/cve/CVE-2012-3488.html http://support.novell.com/security/cve/CVE-2012-3489.html https://bugzilla.novell.com/765069 https://bugzilla.novell.com/766797 https://bugzilla.novell.com/776523 https://bugzilla.novell.com/776524

1 0