September 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2012:1238-1: xfce4-panel-plugin-weather: Update to version 0.8.2
by maintenance＠opensuse.org 25 Sep '12

25 Sep '12

openSUSE Recommended Update: xfce4-panel-plugin-weather: Update to version 0.8.2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1238-1 Rating: low References: #735590 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for xfce4-panel-plugin-weather - update to version 0.8.2 (bnc#735590) - Migrate to libxfce4ui. - Better handling of vertical and deskbar modes. - Fix adjusting label text size to panel size. - Fix scrollbox scroll direction in vertical mode. - Major rewrite: Migrate to yr.no API instead of weather.com. The plugin now uses data from the Norwegian Meteorological Institute, which is a bit different and forced a redesign of the summary window and more logic for computing the values. This rewrite means the hassle with the expiring license keys is finally gone, and the plugin shouldn't stop working suddenly, as API changes are announced quite some time before they become active. Forecasts for up to 10 days are provided, depending on the location. The location is defined by latitude and longitude, the actual name is only used for presentation. - Switch to the new GeoIP service at geoip.xfce.org, the old one has stopped working correctly quite some time ago. - Automatically set system of measurement depending on the GeoIP country code. - Fix wrong location search results - Enlarge the search dialog. It's now capable of showing 10 or more results instead of only 2 or 3. - Nice error message in summary window when no location was set or when there's no data available. - Make left click toggle the forecast window. - Optimized update intervals (downloading data and presentation). This should also fix update issues after suspend/resume. - Add move label up/down buttons to config dialog. - Add shortcuts to the widgets in the config dialog. - Add shortcuts for accessing the notebook pages in the forecast window. - Fix compilation warnings, possible null pointer errors, memory leaks, hardcoded values, make more strings translatable. - show more information in panel plugin tooltip - tooltip for location name in config dialog now shows latitude and longitude, or clearer instructions what to do - fetch sunrise/sunset times via met.no webservice; this way we get moon phase, moonrise and moonset for free - better handling of sanitizing location name - correct texts in search dialog - set text color on alternate cells in forecast table - bump minimum requirements to Xfce 4.6 - build the plugin as a module - fix many smaller bugs like uninitialized, unused variables etc - reformat and cleanup source code, improve code quality - translation updates - lots of translations updates - update liquid icon set to be complete - improve sleet icons - improve rain icons for darker panels - correct symbol descriptions and add comments with explanations - correct and improve liquid icons - updated README with documentation from Xfce Goodies homepage - add debugging code and instructions on how to debug in README - add section about theming and icon sets in README - remove code for now unsupported GTK/GLIB versions - bump minimum requirements to match Xfce-4.8 (yes, they were needed before) and drop some legacy code - fix ugly GDK_WINDOW assertion when opening the summary window - clear scrollbox labels before updating conditions - correct "Astrological data" to "Astronomical data" - variable name fix for Solaris - fix crash in summary window when something weird happens - some more code refactoring, clean up and minor fixes - updated description - add dependency on exo-tools since exo-open is used - specfile cleanup - correct dependencies - split off -lang subpackage Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-634 - openSUSE 12.1: zypper in -t patch openSUSE-2012-634 - openSUSE 11.4: zypper in -t patch openSUSE-2012-634 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): xfce4-panel-plugin-weather-0.8.2-10.4.1 xfce4-panel-plugin-weather-debuginfo-0.8.2-10.4.1 xfce4-panel-plugin-weather-debugsource-0.8.2-10.4.1 - openSUSE 12.2 (noarch): xfce4-panel-plugin-weather-lang-0.8.2-10.4.1 - openSUSE 12.1 (i586 x86_64): xfce4-panel-plugin-weather-0.8.2-5.4.1 xfce4-panel-plugin-weather-debuginfo-0.8.2-5.4.1 xfce4-panel-plugin-weather-debugsource-0.8.2-5.4.1 - openSUSE 12.1 (noarch): xfce4-panel-plugin-weather-lang-0.8.2-5.4.1 - openSUSE 11.4 (i586 x86_64): xfce4-panel-plugin-battery-1.0.0-2.134.1 xfce4-panel-plugin-battery-debuginfo-1.0.0-2.134.1 xfce4-panel-plugin-cddrive-0.0.1-19.134.1 xfce4-panel-plugin-cddrive-debuginfo-0.0.1-19.134.1 xfce4-panel-plugin-cellmodem-0.0.5-24.134.1 xfce4-panel-plugin-cellmodem-debuginfo-0.0.5-24.134.1 xfce4-panel-plugin-clipman-1.1.3-18.134.1 xfce4-panel-plugin-clipman-debuginfo-1.1.3-18.134.1 xfce4-panel-plugin-clipman-doc-1.1.3-4.134.1 xfce4-panel-plugin-cpufreq-1.0.0-3.134.1 xfce4-panel-plugin-cpufreq-debuginfo-1.0.0-3.134.1 xfce4-panel-plugin-cpugraph-1.0.1-6.134.1 xfce4-panel-plugin-cpugraph-debuginfo-1.0.1-6.134.1 xfce4-panel-plugin-datetime-0.6.1-18.134.1 xfce4-panel-plugin-datetime-debuginfo-0.6.1-18.134.1 xfce4-panel-plugin-diskperf-2.3.0-3.134.1 xfce4-panel-plugin-diskperf-debuginfo-2.3.0-3.134.1 xfce4-panel-plugin-eyes-4.4.1-2.134.1 xfce4-panel-plugin-eyes-debuginfo-4.4.1-2.134.1 xfce4-panel-plugin-fsguard-1.0.0-4.134.1 xfce4-panel-plugin-fsguard-debuginfo-1.0.0-4.134.1 xfce4-panel-plugin-genmon-3.2-24.134.1 xfce4-panel-plugin-genmon-debuginfo-3.2-24.134.1 xfce4-panel-plugin-mailwatch-1.1.0-6.134.1 xfce4-panel-plugin-mailwatch-debuginfo-1.1.0-6.134.1 xfce4-panel-plugin-mount-0.5.5-18.134.1 xfce4-panel-plugin-mount-debuginfo-0.5.5-18.134.1 xfce4-panel-plugin-mpc-0.3.6-3.134.1 xfce4-panel-plugin-mpc-debuginfo-0.3.6-3.134.1 xfce4-panel-plugin-netload-1.0.0-4.134.1 xfce4-panel-plugin-netload-debuginfo-1.0.0-4.134.1 xfce4-panel-plugin-notes-1.7.7-6.134.1 xfce4-panel-plugin-notes-debuginfo-1.7.7-6.134.1 xfce4-panel-plugin-places-1.2.0-17.134.1 xfce4-panel-plugin-places-debuginfo-1.2.0-17.134.1 xfce4-panel-plugin-quicklauncher-1.9.4-24.134.1 xfce4-panel-plugin-quicklauncher-debuginfo-1.9.4-24.134.1 xfce4-panel-plugin-radio-0.4.4-6.134.1 xfce4-panel-plugin-radio-debuginfo-0.4.4-6.134.1 xfce4-panel-plugin-sensors-1.0.0-4.134.1 xfce4-panel-plugin-sensors-debuginfo-1.0.0-4.134.1 xfce4-panel-plugin-sensors-devel-1.0.0-4.134.1 xfce4-panel-plugin-smartbookmark-0.4.2-24.134.1 xfce4-panel-plugin-smartbookmark-debuginfo-0.4.2-24.134.1 xfce4-panel-plugin-systemload-1.0.0-4.134.1 xfce4-panel-plugin-systemload-debuginfo-1.0.0-4.134.1 xfce4-panel-plugin-timeout-1.0.0-4.134.1 xfce4-panel-plugin-timeout-debuginfo-1.0.0-4.134.1 xfce4-panel-plugin-timer-0.6.1-18.134.1 xfce4-panel-plugin-timer-debuginfo-0.6.1-18.134.1 xfce4-panel-plugin-verve-1.0.0-4.134.1 xfce4-panel-plugin-verve-debuginfo-1.0.0-4.134.1 xfce4-panel-plugin-wavelan-0.5.6-6.134.1 xfce4-panel-plugin-wavelan-debuginfo-0.5.6-6.134.1 xfce4-panel-plugin-weather-0.8.2-3.134.1 xfce4-panel-plugin-weather-debuginfo-0.8.2-3.134.1 xfce4-panel-plugin-xfapplet-0.1.0-24.134.1 xfce4-panel-plugin-xfapplet-debuginfo-0.1.0-24.134.1 xfce4-panel-plugin-xkb-0.5.4.2-0.134.1 xfce4-panel-plugin-xkb-debuginfo-0.5.4.2-0.134.1 xfce4-panel-plugin-xmms-0.5.3-3.134.1 xfce4-panel-plugin-xmms-debuginfo-0.5.3-3.134.1 xfce4-panel-plugins-debugsource-4.8.0-3.134.1 References: https://bugzilla.novell.com/735590

1 0

openSUSE-RU-2012:1237-1: inkscape: Apply invert transform to all image tags
by maintenance＠opensuse.org 25 Sep '12

25 Sep '12

openSUSE Recommended Update: inkscape: Apply invert transform to all image tags ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1237-1 Rating: low References: #779560 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for inkscape: - bnc#779560, lp#840625: Add inkscape-apply-invert-transform.patch: Apply invert transform to all image tags Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-632 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): inkscape-0.48.3.1-5.5.1 inkscape-debuginfo-0.48.3.1-5.5.1 inkscape-debugsource-0.48.3.1-5.5.1 inkscape-extensions-dia-0.48.3.1-5.5.1 inkscape-extensions-extra-0.48.3.1-5.5.1 inkscape-extensions-fig-0.48.3.1-5.5.1 inkscape-extensions-gimp-0.48.3.1-5.5.1 inkscape-extensions-skencil-0.48.3.1-5.5.1 - openSUSE 12.2 (noarch): inkscape-lang-0.48.3.1-5.5.1 References: https://bugzilla.novell.com/779560

1 0

openSUSE-RU-2012:1236-1: xdg-utils: Fix generic su
by maintenance＠opensuse.org 25 Sep '12

25 Sep '12

openSUSE Recommended Update: xdg-utils: Fix generic su ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1236-1 Rating: low References: #776202 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for xdg-utils: - bnc#776202: Fix generic su (bnc#776202) note: the XSU variable is never used in the xdg-su script and we dont have any xsu in 12.2 anyway so it uses xterm+su Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-635 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (noarch): xdg-utils-20120310-1.4.1 References: https://bugzilla.novell.com/776202

1 0

openSUSE-RU-2012:1235-1: virt-manager, python-virtinst: Update to bug fix release 0.9.4
by maintenance＠opensuse.org 25 Sep '12

25 Sep '12

openSUSE Recommended Update: virt-manager, python-virtinst: Update to bug fix release 0.9.4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1235-1 Rating: low References: #772744 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This updates virt-manager and python-virtinst to to bug fix release 0.9.4 and one additional bug fix: - virt-manager 0.9.4: 0.9.4 is a bugfix release for 0.9.2, fixing VNC keyboard focus issues. 0.9.2 changelog: * Convert to gtkbuilder: UI can now be editted with modern glade tool * virt-manager no longer runs on RHEL5, but can manage a remote RHEL5 host * Option to configure spapr net and disk devices for pseries * Many bug fixes and improvements - bnc#772744: vm-install requires root, while original virt-manager vm creation code works fine as user. This patch makes virt-install available for local installs via a pop-down menu. - python-virtinst 0.600.3 0.600.3 is a bugfix release, fixing virt-install --cpuset=auto, and cloning to an existing managed block device. 0.600.2 changelog: * virt-install: New --memballoon option (Eiichi Tsukata) * virt-install: Improved qemu/kvm pseries support (Li Zhang, Qing Lin) * virt-install: Support setting BIOS path using -boot loader=PATH * Various bug fixes and improvements Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-630 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): python-virtinst-0.600.3-1.6.1 virt-manager-0.9.4-1.6.1 References: https://bugzilla.novell.com/772744

1 0

openSUSE-SU-2012:1234-1: moderate: dhcp
by opensuse-security＠opensuse.org 25 Sep '12

25 Sep '12

openSUSE Security Update: dhcp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1234-1 Rating: moderate References: #780167 Cross-References: CVE-2012-3955 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - Update to ISC dhcp-4.2.4-P2 release, providing a security fix for an issue with the use of lease times was found and fixed. Making certain changes to the end time of an IPv6 lease could cause the server to abort. Thanks to Glen Eustace of Massey University, New Zealand for finding this issue. ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-629 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): dhcp-4.2.4.P2-0.1.4.1 dhcp-client-4.2.4.P2-0.1.4.1 dhcp-client-debuginfo-4.2.4.P2-0.1.4.1 dhcp-debuginfo-4.2.4.P2-0.1.4.1 dhcp-debugsource-4.2.4.P2-0.1.4.1 dhcp-devel-4.2.4.P2-0.1.4.1 dhcp-doc-4.2.4.P2-0.1.4.1 dhcp-relay-4.2.4.P2-0.1.4.1 dhcp-relay-debuginfo-4.2.4.P2-0.1.4.1 dhcp-server-4.2.4.P2-0.1.4.1 dhcp-server-debuginfo-4.2.4.P2-0.1.4.1 References: http://support.novell.com/security/cve/CVE-2012-3955.html https://bugzilla.novell.com/780167

1 0

openSUSE-RU-2012:1228-1: moderate: Firefox: Update to 15.0.1
by maintenance＠opensuse.org 24 Sep '12

24 Sep '12

openSUSE Recommended Update: Firefox: Update to 15.0.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1228-1 Rating: moderate References: #779936 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Mozilla Firefox was updated to 15.0.1 (bnc#779936) * Sites visited while in Private Browsing mode could be found through manual browser cache inspection (bmo#787743) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-626 - openSUSE 12.1: zypper in -t patch openSUSE-2012-626 - openSUSE 11.4: zypper in -t patch openSUSE-2012-626 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): MozillaFirefox-15.0.1-2.11.1 MozillaFirefox-branding-upstream-15.0.1-2.11.1 MozillaFirefox-buildsymbols-15.0.1-2.11.1 MozillaFirefox-debuginfo-15.0.1-2.11.1 MozillaFirefox-debugsource-15.0.1-2.11.1 MozillaFirefox-devel-15.0.1-2.11.1 MozillaFirefox-translations-common-15.0.1-2.11.1 MozillaFirefox-translations-other-15.0.1-2.11.1 seamonkey-2.12.1-2.12.1 seamonkey-debuginfo-2.12.1-2.12.1 seamonkey-debugsource-2.12.1-2.12.1 seamonkey-dom-inspector-2.12.1-2.12.1 seamonkey-irc-2.12.1-2.12.1 seamonkey-translations-common-2.12.1-2.12.1 seamonkey-translations-other-2.12.1-2.12.1 seamonkey-venkman-2.12.1-2.12.1 - openSUSE 12.1 (i586 x86_64): MozillaFirefox-15.0.1-2.40.1 MozillaFirefox-branding-upstream-15.0.1-2.40.1 MozillaFirefox-buildsymbols-15.0.1-2.40.1 MozillaFirefox-debuginfo-15.0.1-2.40.1 MozillaFirefox-debugsource-15.0.1-2.40.1 MozillaFirefox-devel-15.0.1-2.40.1 MozillaFirefox-translations-common-15.0.1-2.40.1 MozillaFirefox-translations-other-15.0.1-2.40.1 seamonkey-2.12.1-2.31.1 seamonkey-debuginfo-2.12.1-2.31.1 seamonkey-debugsource-2.12.1-2.31.1 seamonkey-dom-inspector-2.12.1-2.31.1 seamonkey-irc-2.12.1-2.31.1 seamonkey-translations-common-2.12.1-2.31.1 seamonkey-translations-other-2.12.1-2.31.1 seamonkey-venkman-2.12.1-2.31.1 - openSUSE 11.4 (i586 x86_64): MozillaFirefox-15.0.1-35.1 MozillaFirefox-branding-upstream-15.0.1-35.1 MozillaFirefox-buildsymbols-15.0.1-35.1 MozillaFirefox-debuginfo-15.0.1-35.1 MozillaFirefox-debugsource-15.0.1-35.1 MozillaFirefox-devel-15.0.1-35.1 MozillaFirefox-translations-common-15.0.1-35.1 MozillaFirefox-translations-other-15.0.1-35.1 seamonkey-2.12.1-31.1 seamonkey-debuginfo-2.12.1-31.1 seamonkey-debugsource-2.12.1-31.1 seamonkey-dom-inspector-2.12.1-31.1 seamonkey-irc-2.12.1-31.1 seamonkey-translations-common-2.12.1-31.1 seamonkey-translations-other-2.12.1-31.1 seamonkey-venkman-2.12.1-31.1 References: https://bugzilla.novell.com/779936

1 0

openSUSE-RU-2012:1227-1: vm-install: Several bug fixes
by maintenance＠opensuse.org 24 Sep '12

24 Sep '12

openSUSE Recommended Update: vm-install: Several bug fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1227-1 Rating: low References: #762963 #768340 #776300 #779280 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes the following issues for vm-install: - bnc#779280: vm-install doesn't honour / correctly document disk options via --disk - Change documentation link to suse.com - Add for support Open Enterprise Server 11 - Add support for Windows 8 and Windows Server 2012 - Add support for Ubuntu 12 (Precise Pangolin) - bnc#776300: vm-install does not pass --extra-args in --upgrade mode - Add a screen resolution option for newer Suse PV VMs - Updated language files - Add support for selecting a host device for PCI/USB passthrough at VM install time (see reference bnc#768340). - Add support for defaults file for setting customization variables - vmdisks: xm block_attach can return before the hotplugging is actually complete causing later failure in bootsector check. - bnc#762963: ReaR: Unable to recover a paravirtualized XEN guest vminstall-rear-support.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-628 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): vm-install-0.6.10-3.4.1 References: https://bugzilla.novell.com/762963 https://bugzilla.novell.com/768340 https://bugzilla.novell.com/776300 https://bugzilla.novell.com/779280

1 0

openSUSE-RU-2012:1226-1: vm-install: Several bug fixes
by maintenance＠opensuse.org 24 Sep '12

24 Sep '12

openSUSE Recommended Update: vm-install: Several bug fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1226-1 Rating: low References: #754906 #757346 #760023 #760557 #761142 #762963 #776300 #779280 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update fixes the following issues for vm-install: - bnc#779280: vm-install doesn't honour / correctly document disk options via --disk - Change documentation link to suse.com - Add for support Open Enterprise Server 11 - Add support for Windows 8 and Windows Server 2012 - Add support for Ubuntu 12 (Precise Pangolin) - Version 0.5.12 - bnc#776300: vm-install does not pass --extra-args in --upgrade mode - vmdisks: xm block_attach can return before the hotplugging is actually complete causing later failure in bootsector check. - bnc#762963: ReaR: Unable to recover a paravirtualized XEN guest - bnc#754906: virt-manager is not allowing to upgrade oes11 to oes11sp1 machine - bnc#761142: vm-install fails to create its new VM: bogus "Not enough space on device" message - bnc#760557: Error: Two of the virtual disks have conflicting virtual names or physical devices - bnc#760023 - Can't upgrade an OES 2 (64-bit) XEN Guest Server to OES 11 - bnc#757346 - XEN guest OS installation (SLES 11 SP2 guest) fails on SLED 11 SP2 - KVM: Add 'unsafe' and 'directsync' as options to cache_mode. During installation set the target disk to 'unsafe' for better performance. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-627 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): vm-install-0.5.13-3.8.1 References: https://bugzilla.novell.com/754906 https://bugzilla.novell.com/757346 https://bugzilla.novell.com/760023 https://bugzilla.novell.com/760557 https://bugzilla.novell.com/761142 https://bugzilla.novell.com/762963 https://bugzilla.novell.com/776300 https://bugzilla.novell.com/779280

1 0

openSUSE-RU-2012:1219-1: alacarte: Fix some generic usage issues of alacarte
by maintenance＠opensuse.org 19 Sep '12

19 Sep '12

openSUSE Recommended Update: alacarte: Fix some generic usage issues of alacarte ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1219-1 Rating: low References: #779062 #779098 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for alacarte: - bnc#779098: Use XDG_MENU_PREFIX when referencing applications.menu - bnc#779062: Do not show a help button or act on F1 key, because there is no help in alacarte at this moment Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-625 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): alacarte-0.13.4-2.4.1 - openSUSE 12.2 (noarch): alacarte-lang-0.13.4-2.4.1 References: https://bugzilla.novell.com/779062 https://bugzilla.novell.com/779098

1 0

openSUSE-SU-2012:1218-1: moderate: rubygem-actionpack-2_3, rubygem-activesupport-2_3
by opensuse-security＠opensuse.org 19 Sep '12

19 Sep '12

openSUSE Security Update: rubygem-actionpack-2_3, rubygem-activesupport-2_3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1218-1 Rating: moderate References: #775649 #775653 Cross-References: CVE-2012-3464 CVE-2012-3465 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: - added 3-0-escape_html-activesupport.patch: (bnc#775653) Also encode single quote (CVE-2012-3464) - added 3-0-strip_tags.patch: (bnc#775649) Do not mark strip_tags result as html_safe CVE-2012-3465 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-624 - openSUSE 12.1: zypper in -t patch openSUSE-2012-624 - openSUSE 11.4: zypper in -t patch openSUSE-2012-624 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): rubygem-actionpack-2_3-2.3.14-2.8.2 rubygem-actionpack-2_3-doc-2.3.14-2.8.2 rubygem-actionpack-2_3-testsuite-2.3.14-2.8.2 rubygem-activesupport-2_3-2.3.14-3.4.1 rubygem-activesupport-2_3-doc-2.3.14-3.4.1 - openSUSE 12.1 (i586 x86_64): rubygem-actionpack-2_3-2.3.14-3.11.2 rubygem-actionpack-2_3-doc-2.3.14-3.11.2 rubygem-actionpack-2_3-testsuite-2.3.14-3.11.2 rubygem-activesupport-2_3-2.3.14-3.8.1 rubygem-activesupport-2_3-doc-2.3.14-3.8.1 - openSUSE 11.4 (i586 x86_64): rubygem-actionpack-2_3-2.3.14-0.19.2 rubygem-actionpack-2_3-doc-2.3.14-0.19.2 rubygem-actionpack-2_3-testsuite-2.3.14-0.19.2 rubygem-activesupport-2_3-2.3.14-0.12.1 rubygem-activesupport-2_3-doc-2.3.14-0.12.1 References: http://support.novell.com/security/cve/CVE-2012-3464.html http://support.novell.com/security/cve/CVE-2012-3465.html https://bugzilla.novell.com/775649 https://bugzilla.novell.com/775653

1 0