January 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2013:0011-1: important: mariadb to 5.5.28a
by opensuse-security＠opensuse.org 07 Jan '13

07 Jan '13

openSUSE Security Update: mariadb to 5.5.28a ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0011-1 Rating: important References: #779476 #792444 Cross-References: CVE-2012-4414 CVE-2012-5611 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: MariaDB was updated to 5.5.28a, fixing bugs and security issues: * Release notes: http://kb.askmonty.org/v/mariadb-5528a-release-notes http://kb.askmonty.org/v/mariadb-5528-release-notes http://kb.askmonty.org/v/mariadb-5527-release-notes * Changelog: http://kb.askmonty.org/v/mariadb-5528a-changelog http://kb.askmonty.org/v/mariadb-5528-changelog http://kb.askmonty.org/v/mariadb-5527-changelog Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-6 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libmariadbclient18-5.5.28a-1.4.1 libmariadbclient18-debuginfo-5.5.28a-1.4.1 libmariadbclient_r18-5.5.28a-1.4.1 mariadb-5.5.28a-1.4.1 mariadb-bench-5.5.28a-1.4.1 mariadb-bench-debuginfo-5.5.28a-1.4.1 mariadb-client-5.5.28a-1.4.1 mariadb-client-debuginfo-5.5.28a-1.4.1 mariadb-debug-version-5.5.28a-1.4.1 mariadb-debug-version-debuginfo-5.5.28a-1.4.1 mariadb-debuginfo-5.5.28a-1.4.1 mariadb-debugsource-5.5.28a-1.4.1 mariadb-errormessages-5.5.28a-1.4.1 mariadb-test-5.5.28a-1.4.1 mariadb-test-debuginfo-5.5.28a-1.4.1 mariadb-tools-5.5.28a-1.4.1 mariadb-tools-debuginfo-5.5.28a-1.4.1 - openSUSE 12.2 (x86_64): libmariadbclient18-32bit-5.5.28a-1.4.1 libmariadbclient18-debuginfo-32bit-5.5.28a-1.4.1 libmariadbclient_r18-32bit-5.5.28a-1.4.1 References: http://support.novell.com/security/cve/CVE-2012-4414.html http://support.novell.com/security/cve/CVE-2012-5611.html https://bugzilla.novell.com/779476 https://bugzilla.novell.com/792444

1 0

openSUSE-RU-2013:0005-1: su-wrapper: handle unset TERM environment
by maintenance＠opensuse.org 02 Jan '13

02 Jan '13

openSUSE Recommended Update: su-wrapper: handle unset TERM environment ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0005-1 Rating: low References: #795063 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: su-wrapper was fixed to avoid crashes when the TERM variable was not set. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-2 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): su-wrapper-1.2.0-489.4.1 su-wrapper-debuginfo-1.2.0-489.4.1 su-wrapper-debugsource-1.2.0-489.4.1 References: https://bugzilla.novell.com/795063

1 0

openSUSE-RU-2013:0004-1: moderate: poppler: Avoid division by zero when using origpagesizes option
by maintenance＠opensuse.org 02 Jan '13

02 Jan '13

openSUSE Recommended Update: poppler: Avoid division by zero when using origpagesizes option ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0004-1 Rating: moderate References: #795582 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for poppler: - bnc#795582: Avoid division by zero when using origpagesizes option Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libpoppler-cpp0-0.20.0-2.9.1 libpoppler-cpp0-debuginfo-0.20.0-2.9.1 libpoppler-devel-0.20.0-2.9.1 libpoppler-glib-devel-0.20.0-2.9.1 libpoppler-glib8-0.20.0-2.9.1 libpoppler-glib8-debuginfo-0.20.0-2.9.1 libpoppler-qt4-4-0.20.0-2.9.1 libpoppler-qt4-4-debuginfo-0.20.0-2.9.1 libpoppler-qt4-devel-0.20.0-2.9.1 libpoppler25-0.20.0-2.9.1 libpoppler25-debuginfo-0.20.0-2.9.1 poppler-debugsource-0.20.0-2.9.1 poppler-qt-debugsource-0.20.0-2.9.1 poppler-tools-0.20.0-2.9.1 poppler-tools-debuginfo-0.20.0-2.9.1 typelib-1_0-Poppler-0_18-0.20.0-2.9.1 References: https://bugzilla.novell.com/795582

1 0

openSUSE-RU-2013:0003-1: subversion: update to 1.7.8
by maintenance＠opensuse.org 02 Jan '13

02 Jan '13

openSUSE Recommended Update: subversion: update to 1.7.8 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0003-1 Rating: low References: #794676 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: subversion was updated to 1.7.8 [bnc#794676], fixing bugs: + Client- and server-side bugfixes: * Fix typos in pt_BR, es and zh_TW translations + Client-side bugfixes: * add missing attributes to "svn log -v --xml" output * fix svn patch ignoring hunks after no trailing newline * fix hang with ra_serf during error processing * ignore file externals with mergeinfo when merging * fix SEGV with "svnmucc cp rev arg" during argv processing * fix conflict handling on symlinks + Server-side bugfixes: * properly detect threading availability * fix "svnadmin load --bypass-prop-validation" * fix parsing of [groupsfoo] sections in authz file * add Vary: header to GET responses to improve cacheability * fix fs_fs to cleanup after failed rep transmission * fix mod_dav_svn to complain about revisions > HEAD + Developer-visible changes: * fix incorrect status returned by 1.6 API * fix compilation with g++ 4.7 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-3 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.7.8-4.8.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.7.8-4.8.1 libsvn_auth_kwallet-1-0-1.7.8-4.8.1 libsvn_auth_kwallet-1-0-debuginfo-1.7.8-4.8.1 subversion-1.7.8-4.8.1 subversion-debuginfo-1.7.8-4.8.1 subversion-debugsource-1.7.8-4.8.1 subversion-devel-1.7.8-4.8.1 subversion-perl-1.7.8-4.8.1 subversion-perl-debuginfo-1.7.8-4.8.1 subversion-python-1.7.8-4.8.1 subversion-python-debuginfo-1.7.8-4.8.1 subversion-server-1.7.8-4.8.1 subversion-server-debuginfo-1.7.8-4.8.1 subversion-tools-1.7.8-4.8.1 subversion-tools-debuginfo-1.7.8-4.8.1 - openSUSE 12.2 (noarch): subversion-bash-completion-1.7.8-4.8.1 References: https://bugzilla.novell.com/794676

1 0