September 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2012:1217-1: moderate: libwacom: Update to version 0.6
by maintenance＠opensuse.org 19 Sep '12

19 Sep '12

openSUSE Recommended Update: libwacom: Update to version 0.6 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1217-1 Rating: moderate References: #779779 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for libwacom: - bnc#779779: gnome-settings-daemon missed to mark 0.6 as requirement, even though functionality of it is needed; thus resulting in crashers if styli are used. Consdiring the low number of packages depending on libwacom2 (gnome-setting-daemon, gnome-control-center and wacom-tools), this should be safe (no relinking needed) - Update to version 0.6: + More metadata for: - NTrig tablet PC - ISDv4 0x93, 0x90, 0xED, 0xEF - Bamboo Pen, Fun, Craft, Touch + Support for debugging with uinput devices. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-621 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libwacom-data-0.6-2.4.1 libwacom-debugsource-0.6-2.4.1 libwacom-devel-0.6-2.4.1 libwacom-tools-0.6-2.4.1 libwacom-tools-debuginfo-0.6-2.4.1 libwacom2-0.6-2.4.1 libwacom2-debuginfo-0.6-2.4.1 - openSUSE 12.2 (x86_64): libwacom2-32bit-0.6-2.4.1 libwacom2-debuginfo-32bit-0.6-2.4.1 References: https://bugzilla.novell.com/779779

1 0

openSUSE-RU-2012:1216-1: pcmanx-gtk2: add BuildRequires: libtool to fix segmentation fault
by maintenance＠opensuse.org 19 Sep '12

19 Sep '12

openSUSE Recommended Update: pcmanx-gtk2: add BuildRequires: libtool to fix segmentation fault ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1216-1 Rating: low References: #779500 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for pcmanx-gtk2: - bnc#779500: add BuildRequires: libtool to fix a segmentation fault in openSUSE 12.2 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-622 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): pcmanx-gtk2-1.1-3.4.1 pcmanx-gtk2-debuginfo-1.1-3.4.1 pcmanx-gtk2-debugsource-1.1-3.4.1 References: https://bugzilla.novell.com/779500

1 0

openSUSE-SU-2012:1215-1: important: chromium: update to 21.0.1180.88
by opensuse-security＠opensuse.org 19 Sep '12

19 Sep '12

openSUSE Security Update: chromium: update to 21.0.1180.88 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1215-1 Rating: important References: #778005 Cross-References: CVE-2012-2865 CVE-2012-2866 CVE-2012-2867 CVE-2012-2868 CVE-2012-2869 CVE-2012-2870 CVE-2012-2871 CVE-2012-2872 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: Chromium was updated to 21.0.1180.88 to fix various bugs and security issues. Security fixes and rewards: Please see the Chromium security page<http://sites.google.com/a/chromium.org/dev/Home/chromiu m-security>for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix. - [$500] [121347<https://code.google.com/p/chromium/issues/detail?id= 121347>] Medium CVE-2012-2865: Out-of-bounds read in line breaking. Credit to miaubiz. - [$1000] [134897<https://code.google.com/p/chromium/issues/detail?id= 134897>] High CVE-2012-2866: Bad cast with run-ins. Credit to miaubiz. - [135485 <https://code.google.com/p/chromium/issues/detail?id=135485> ] Low CVE-2012-2867: Browser crash with SPDY. - [$500] [136881<https://code.google.com/p/chromium/issues/detail?id= 136881>] Medium CVE-2012-2868: Race condition with workers and XHR. Credit to miaubiz. - [137778 <https://code.google.com/p/chromium/issues/detail?id=137778> ] High CVE-2012-2869: Avoid stale buffer in URL loading. Credit to Fermin Serna of the Google Security Team. - [138672 <https://code.google.com/p/chromium/issues/detail?id=138672> ] [ 140368 <https://code.google.com/p/chromium/issues/detail?id=140368> ] LowCVE-2012-2870: Lower severity memory management issues in XPath. Credit to Nicolas Gregoire. - [$1000] [138673<https://code.google.com/p/chromium/issues/detail?id= 138673>] High CVE-2012-2871: Bad cast in XSL transforms. Credit to Nicolas Gregoire. - [$500] [142956<https://code.google.com/p/chromium/issues/detail?id= 142956>] Medium CVE-2012-2872: XSS in SSL interstitial. Credit to Emmanuel Bronshtein. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-619 - openSUSE 12.1: zypper in -t patch openSUSE-2012-619 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): chromedriver-23.0.1255.0-1.14.1 chromedriver-debuginfo-23.0.1255.0-1.14.1 chromium-23.0.1255.0-1.14.1 chromium-debuginfo-23.0.1255.0-1.14.1 chromium-debugsource-23.0.1255.0-1.14.1 chromium-desktop-gnome-23.0.1255.0-1.14.1 chromium-desktop-kde-23.0.1255.0-1.14.1 chromium-suid-helper-23.0.1255.0-1.14.1 chromium-suid-helper-debuginfo-23.0.1255.0-1.14.1 - openSUSE 12.1 (i586 x86_64): chromedriver-23.0.1255.0-1.34.1 chromedriver-debuginfo-23.0.1255.0-1.34.1 chromium-23.0.1255.0-1.34.1 chromium-debuginfo-23.0.1255.0-1.34.1 chromium-debugsource-23.0.1255.0-1.34.1 chromium-desktop-gnome-23.0.1255.0-1.34.1 chromium-desktop-kde-23.0.1255.0-1.34.1 chromium-suid-helper-23.0.1255.0-1.34.1 chromium-suid-helper-debuginfo-23.0.1255.0-1.34.1 References: http://support.novell.com/security/cve/CVE-2012-2865.html http://support.novell.com/security/cve/CVE-2012-2866.html http://support.novell.com/security/cve/CVE-2012-2867.html http://support.novell.com/security/cve/CVE-2012-2868.html http://support.novell.com/security/cve/CVE-2012-2869.html http://support.novell.com/security/cve/CVE-2012-2870.html http://support.novell.com/security/cve/CVE-2012-2871.html http://support.novell.com/security/cve/CVE-2012-2872.html https://bugzilla.novell.com/778005

1 0

openSUSE-SU-2012:1214-1: moderate: otrs
by opensuse-security＠opensuse.org 19 Sep '12

19 Sep '12

openSUSE Security Update: otrs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1214-1 Rating: moderate References: #778655 Cross-References: CVE-2012-4600 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - fix a XSS vulnerability: bnc#778655 (CVE-2012-4600) - update to 2.4.14 (openSUSE 11.4) (fix for OSA-2012-02, http://otrs.org/advisory/) * Improved HTML security filter to detect tag nesting. - update to 3.0.16 (openSUSE 12.1) (fix for OSA-2012-02, http://otrs.org/advisory/) * Improved HTML security filter to detect tag nesting. * Bug#8611 - Ticket count is wrong in QueueView. - update to 3.1.10 (openSUSE 12.2) (fix for OSA-2012-02, http://otrs.org/advisory/) * Improved HTML security filter to detect tag nesting. * Bug#8611 - Ticket count is wrong in QueueView. * Bug#8698 - Layout.pm only looks at first entry from HTTP_ACCEPT_LANGUAGE to determine language. * Bug#8731 - LDAP group check returns wrong error. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-620 - openSUSE 12.1: zypper in -t patch openSUSE-2012-620 - openSUSE 11.4: zypper in -t patch openSUSE-2012-620 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (noarch): otrs-3.1.10-20.8.1 otrs-doc-3.1.10-20.8.1 otrs-itsm-3.1.6-20.8.1 - openSUSE 12.1 (noarch): otrs-3.0.16-15.8.1 otrs-doc-3.0.16-15.8.1 otrs-itsm-3.0.6-15.8.1 - openSUSE 11.4 (noarch): otrs-2.4.14-14.1 otrs-doc-2.4.14-14.1 otrs-itsm-2.1.5-14.1 References: http://support.novell.com/security/cve/CVE-2012-4600.html https://bugzilla.novell.com/778655

1 0

openSUSE-RU-2012:1207-1: kdepim3: add dependency on kdebase3-runtime
by maintenance＠opensuse.org 18 Sep '12

18 Sep '12

openSUSE Recommended Update: kdepim3: add dependency on kdebase3-runtime ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1207-1 Rating: low References: #779975 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for kdepim3: - bnc#779975: add dependency on kdebase3-runtime Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-618 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): kdepim3-3.5.10-20.5.1 kdepim3-debuginfo-3.5.10-20.5.1 kdepim3-debugsource-3.5.10-20.5.1 kdepim3-devel-3.5.10-20.5.1 kdepim3-devel-debuginfo-3.5.10-20.5.1 kdepim3-kpilot-3.5.10-20.5.1 kdepim3-kpilot-debuginfo-3.5.10-20.5.1 kdepim3-mobile-3.5.10-20.5.1 kdepim3-mobile-debuginfo-3.5.10-20.5.1 kdepim3-notes-3.5.10-20.5.1 kdepim3-notes-debuginfo-3.5.10-20.5.1 kdepim3-time-management-3.5.10-20.5.1 kdepim3-time-management-debuginfo-3.5.10-20.5.1 kitchensync-3.5.10-20.5.1 kitchensync-debuginfo-3.5.10-20.5.1 libkcal-3.5.10-20.5.1 libkcal-debuginfo-3.5.10-20.5.1 libkcal-devel-3.5.10-20.5.1 libkcal2-3.5.10-20.5.1 libkcal2-debuginfo-3.5.10-20.5.1 libkmime-devel-3.5.10-20.5.1 libkmime2-3.5.10-20.5.1 libkmime2-debuginfo-3.5.10-20.5.1 libktnef-devel-3.5.10-20.5.1 libktnef1-3.5.10-20.5.1 libktnef1-debuginfo-3.5.10-20.5.1 References: https://bugzilla.novell.com/779975

1 0

openSUSE-RU-2012:1201-1: bug-buddy: Fix gnome-version.xml path
by maintenance＠opensuse.org 18 Sep '12

18 Sep '12

openSUSE Recommended Update: bug-buddy: Fix gnome-version.xml path ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1201-1 Rating: low References: #777203 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for bug-buddy: - bnc#777203: Add bug-buddy-2.32-gnome-version.xml.patch: fix gnome-version.xml path Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-617 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): bug-buddy-2.32.0-11.4.1 bug-buddy-debuginfo-2.32.0-11.4.1 bug-buddy-debugsource-2.32.0-11.4.1 - openSUSE 12.2 (x86_64): bug-buddy-32bit-2.32.0-11.4.1 bug-buddy-debuginfo-32bit-2.32.0-11.4.1 - openSUSE 12.2 (noarch): bug-buddy-lang-2.32.0-11.4.1 References: https://bugzilla.novell.com/777203

1 0

openSUSE-SU-2012:1200-1: important: freeradius: fix stack overflow in TLS handling
by opensuse-security＠opensuse.org 18 Sep '12

18 Sep '12

openSUSE Security Update: freeradius: fix stack overflow in TLS handling ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1200-1 Rating: important References: #677335 #777834 Cross-References: CVE-2012-3547 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update of freeradius fixes a stack overflow in TLS handling, which can be exploited by remote attackers able to access Radius to execute code. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-616 - openSUSE 12.1: zypper in -t patch openSUSE-2012-616 - openSUSE 11.4: zypper in -t patch openSUSE-2012-616 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): freeradius-server-2.1.12-4.4.1 freeradius-server-debuginfo-2.1.12-4.4.1 freeradius-server-debugsource-2.1.12-4.4.1 freeradius-server-devel-2.1.12-4.4.1 freeradius-server-dialupadmin-2.1.12-4.4.1 freeradius-server-doc-2.1.12-4.4.1 freeradius-server-libs-2.1.12-4.4.1 freeradius-server-libs-debuginfo-2.1.12-4.4.1 freeradius-server-utils-2.1.12-4.4.1 freeradius-server-utils-debuginfo-2.1.12-4.4.1 - openSUSE 12.1 (i586 x86_64): freeradius-server-2.1.12-4.1 freeradius-server-debuginfo-2.1.12-4.1 freeradius-server-debugsource-2.1.12-4.1 freeradius-server-devel-2.1.12-4.1 freeradius-server-dialupadmin-2.1.12-4.1 freeradius-server-doc-2.1.12-4.1 freeradius-server-libs-2.1.12-4.1 freeradius-server-libs-debuginfo-2.1.12-4.1 freeradius-server-utils-2.1.12-4.1 freeradius-server-utils-debuginfo-2.1.12-4.1 - openSUSE 11.4 (i586 x86_64): freeradius-server-2.1.10-8.1 freeradius-server-debuginfo-2.1.10-8.1 freeradius-server-debugsource-2.1.10-8.1 freeradius-server-devel-2.1.10-8.1 freeradius-server-dialupadmin-2.1.10-8.1 freeradius-server-doc-2.1.10-8.1 freeradius-server-libs-2.1.10-8.1 freeradius-server-libs-debuginfo-2.1.10-8.1 freeradius-server-utils-2.1.10-8.1 freeradius-server-utils-debuginfo-2.1.10-8.1 References: http://support.novell.com/security/cve/CVE-2012-3547.html https://bugzilla.novell.com/677335 https://bugzilla.novell.com/777834

1 0

openSUSE-SU-2012:1192-1: critical: bind: fixed a remote denial of service attack (abort)
by opensuse-security＠opensuse.org 17 Sep '12

17 Sep '12

openSUSE Security Update: bind: fixed a remote denial of service attack (abort) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1192-1 Rating: critical References: #780157 Cross-References: CVE-2012-4244 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: A remote denial of service attack was fixed in the BIND DNS nameserver, which could be caused by attackers providing a specifically prepared zone file for recursive transfer. (CVE-2012-4244) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-615 - openSUSE 12.1: zypper in -t patch openSUSE-2012-615 - openSUSE 11.4: zypper in -t patch openSUSE-2012-615 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): bind-9.9.1P3-1.4.1 bind-chrootenv-9.9.1P3-1.4.1 bind-debuginfo-9.9.1P3-1.4.1 bind-debugsource-9.9.1P3-1.4.1 bind-devel-9.9.1P3-1.4.1 bind-libs-9.9.1P3-1.4.1 bind-libs-debuginfo-9.9.1P3-1.4.1 bind-lwresd-9.9.1P3-1.4.1 bind-lwresd-debuginfo-9.9.1P3-1.4.1 bind-utils-9.9.1P3-1.4.1 bind-utils-debuginfo-9.9.1P3-1.4.1 - openSUSE 12.2 (x86_64): bind-libs-32bit-9.9.1P3-1.4.1 bind-libs-debuginfo-32bit-9.9.1P3-1.4.1 - openSUSE 12.2 (noarch): bind-doc-9.9.1P3-1.4.1 - openSUSE 12.1 (i586 x86_64): bind-9.8.3P3-4.20.1 bind-chrootenv-9.8.3P3-4.20.1 bind-debuginfo-9.8.3P3-4.20.1 bind-debugsource-9.8.3P3-4.20.1 bind-devel-9.8.3P3-4.20.1 bind-libs-9.8.3P3-4.20.1 bind-libs-debuginfo-9.8.3P3-4.20.1 bind-lwresd-9.8.3P3-4.20.1 bind-lwresd-debuginfo-9.8.3P3-4.20.1 bind-utils-9.8.3P3-4.20.1 bind-utils-debuginfo-9.8.3P3-4.20.1 - openSUSE 12.1 (x86_64): bind-libs-32bit-9.8.3P3-4.20.1 bind-libs-debuginfo-32bit-9.8.3P3-4.20.1 - openSUSE 12.1 (noarch): bind-doc-9.8.3P3-4.20.1 - openSUSE 12.1 (ia64): bind-libs-debuginfo-x86-9.8.3P3-4.20.1 bind-libs-x86-9.8.3P3-4.20.1 - openSUSE 11.4 (i586 x86_64): bind-9.7.6P3-0.37.1 bind-chrootenv-9.7.6P3-0.37.1 bind-debuginfo-9.7.6P3-0.37.1 bind-debugsource-9.7.6P3-0.37.1 bind-devel-9.7.6P3-0.37.1 bind-libs-9.7.6P3-0.37.1 bind-libs-debuginfo-9.7.6P3-0.37.1 bind-lwresd-9.7.6P3-0.37.1 bind-lwresd-debuginfo-9.7.6P3-0.37.1 bind-utils-9.7.6P3-0.37.1 bind-utils-debuginfo-9.7.6P3-0.37.1 - openSUSE 11.4 (x86_64): bind-libs-32bit-9.7.6P3-0.37.1 bind-libs-debuginfo-32bit-9.7.6P3-0.37.1 - openSUSE 11.4 (noarch): bind-doc-9.7.6P3-0.37.1 - openSUSE 11.4 (ia64): bind-libs-debuginfo-x86-9.7.6P3-0.37.1 bind-libs-x86-9.7.6P3-0.37.1 References: http://support.novell.com/security/cve/CVE-2012-4244.html https://bugzilla.novell.com/780157

1 0

openSUSE-RU-2012:1191-1: moderate: epiphany-extensions: Pass --with-extensions to configure
by maintenance＠opensuse.org 17 Sep '12

17 Sep '12

openSUSE Recommended Update: epiphany-extensions: Pass --with-extensions to configure ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1191-1 Rating: moderate References: #772553 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for epiphany-extensions: - bnc#772553, bgo#680481: Pass --with-extensions to configure. The extensions enabled are the default ones (as built without parameter) minus gestures. The gestures plugin is broken after epiphany moved away from regular menus. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-610 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): epiphany-extensions-3.4.0-2.4.1 epiphany-extensions-debuginfo-3.4.0-2.4.1 epiphany-extensions-debugsource-3.4.0-2.4.1 - openSUSE 12.2 (noarch): epiphany-extensions-lang-3.4.0-2.4.1 References: https://bugzilla.novell.com/772553

1 0

openSUSE-RU-2012:1190-1: jackEQ: Use correct default directores for LDAPSPA_PATH on x86_64
by maintenance＠opensuse.org 17 Sep '12

17 Sep '12

openSUSE Recommended Update: jackEQ: Use correct default directores for LDAPSPA_PATH on x86_64 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1190-1 Rating: low References: Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issue for jackEQ: - add patch to use the correct default directories for LADSPA_PATH on x86_64 on openSUSE (i.e. /usr/local/lib64/ladspa and /usr/lib64/ladpsa instead of /usr/local/lib/ladspa and /usr/lib/ladspa as on 32bit) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-605 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): jackEQ-0.5.9-2.4.1 jackEQ-debuginfo-0.5.9-2.4.1 jackEQ-debugsource-0.5.9-2.4.1 References:

1 0