January 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:0142-1: grub2: fix enumeration of extended partitions with non-standard EBR
by maintenance＠opensuse.org 23 Jan '13

23 Jan '13

openSUSE Recommended Update: grub2: fix enumeration of extended partitions with non-standard EBR ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0142-1 Rating: low References: #779534 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for grub2: - bnc#779534: fix enumeration of extended partitions with non-standard EBR (bnc#779534) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-18 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): grub2-2.00-1.23.1 grub2-debuginfo-2.00-1.23.1 grub2-debugsource-2.00-1.23.1 grub2-efi-2.00-1.23.1 grub2-efi-debuginfo-2.00-1.23.1 References: https://bugzilla.novell.com/779534

1 0

openSUSE-RU-2013:0141-1: osc-service-source_validator: exit if tmpdir creation fails
by maintenance＠opensuse.org 23 Jan '13

23 Jan '13

openSUSE Recommended Update: osc-service-source_validator: exit if tmpdir creation fails ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0141-1 Rating: low References: #796918 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for osc-service-source_validator: - bnc#796918: exit if tmpdir creation fails Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-13 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (noarch): obs-service-source_validator-0.2-4.4.1 References: https://bugzilla.novell.com/796918

1 0

openSUSE-SU-2013:0140-1: moderate: update for nagios
by opensuse-security＠opensuse.org 23 Jan '13

23 Jan '13

openSUSE Security Update: update for nagios ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0140-1 Rating: moderate References: #797237 Cross-References: CVE-2012-6096 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - avoid stack based buffer overflow in web interface (history): added nagios-history_buffer_overflow.patch - (bnc#797237) fixes CVE-2012-6096 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-41 - openSUSE 12.1: zypper in -t patch openSUSE-2013-41 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): nagios-3.4.1-2.4.1 nagios-debuginfo-3.4.1-2.4.1 nagios-debugsource-3.4.1-2.4.1 nagios-devel-3.4.1-2.4.1 nagios-www-3.4.1-2.4.1 nagios-www-debuginfo-3.4.1-2.4.1 - openSUSE 12.1 (i586 x86_64): nagios-3.3.1-9.5.1 nagios-debuginfo-3.3.1-9.5.1 nagios-debugsource-3.3.1-9.5.1 nagios-devel-3.3.1-9.5.1 nagios-www-3.3.1-9.5.1 nagios-www-debuginfo-3.3.1-9.5.1 References: http://support.novell.com/security/cve/CVE-2012-6096.html https://bugzilla.novell.com/797237

1 0

openSUSE-SU-2013:0139-1: critical: update for flash-player
by opensuse-security＠opensuse.org 23 Jan '13

23 Jan '13

openSUSE Security Update: update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0139-1 Rating: critical References: #794062 Cross-References: CVE-2012-5676 CVE-2012-5677 CVE-2012-5678 Affected Products: openSUSE 11.4/standard/i586/patchinfo.31 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This version upgrade of flash-player fixed multiple unspecified code execution vulnerabilities. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4/standard/i586/patchinfo.31: zypper in -t patch 2012-20 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4/standard/i586/patchinfo.31 (i586 x86_64): flash-player-11.2.202.258-35.1 flash-player-gnome-11.2.202.258-35.1 flash-player-kde4-11.2.202.258-35.1 References: http://support.novell.com/security/cve/CVE-2012-5676.html http://support.novell.com/security/cve/CVE-2012-5677.html http://support.novell.com/security/cve/CVE-2012-5678.html https://bugzilla.novell.com/794062

1 0

openSUSE-SU-2013:0138-1: moderate: update for acroread
by opensuse-security＠opensuse.org 23 Jan '13

23 Jan '13

openSUSE Security Update: update for acroread ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0138-1 Rating: moderate References: #757393 #768492 #797529 Cross-References: CVE-2012-1530 CVE-2013-0601 CVE-2013-0602 CVE-2013-0603 CVE-2013-0604 CVE-2013-0605 CVE-2013-0606 CVE-2013-0607 CVE-2013-0608 CVE-2013-0609 CVE-2013-0610 CVE-2013-0611 CVE-2013-0612 CVE-2013-0613 CVE-2013-0614 CVE-2013-0615 CVE-2013-0616 CVE-2013-0617 CVE-2013-0618 CVE-2013-0619 CVE-2013-0620 CVE-2013-0621 CVE-2013-0622 CVE-2013-0623 CVE-2013-0624 CVE-2013-0626 CVE-2013-0627 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes 27 vulnerabilities is now available. Description: - Update to 9.5.3 (bnc#797529) to fix: CVE-2012-1530, CVE-2013-0601, CVE-2013-0602, CVE-2013-0603, CVE-2013-0604, CVE-2013-0605, CVE-2013-0606, CVE-2013-0607, CVE-2013-0608, CVE-2013-0609, CVE-2013-0610, CVE-2013-0611, CVE-2013-0612, CVE-2013-0613, CVE-2013-0614, CVE-2013-0615, CVE-2013-0616, CVE-2013-0617, CVE-2013-0618, CVE-2013-0619, CVE-2013-0620, CVE-2013-0621, CVE-2013-0622, CVE-2013-0623, CVE-2013-0624, CVE-2013-0626, CVE-2013-0627 - move the browser plugin to a subpackage(bnc#768492, bnc#757393). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-38 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): acroread-cmaps-9.4.1-3.13.1 acroread-fonts-ja-9.4.1-3.13.1 acroread-fonts-ko-9.4.1-3.13.1 acroread-fonts-zh_CN-9.4.1-3.13.1 acroread-fonts-zh_TW-9.4.1-3.13.1 - openSUSE 12.1 (i586): acroread-9.5.3-3.13.1 acroread-browser-plugin-9.5.3-3.13.1 References: http://support.novell.com/security/cve/CVE-2012-1530.html http://support.novell.com/security/cve/CVE-2013-0601.html http://support.novell.com/security/cve/CVE-2013-0602.html http://support.novell.com/security/cve/CVE-2013-0603.html http://support.novell.com/security/cve/CVE-2013-0604.html http://support.novell.com/security/cve/CVE-2013-0605.html http://support.novell.com/security/cve/CVE-2013-0606.html http://support.novell.com/security/cve/CVE-2013-0607.html http://support.novell.com/security/cve/CVE-2013-0608.html http://support.novell.com/security/cve/CVE-2013-0609.html http://support.novell.com/security/cve/CVE-2013-0610.html http://support.novell.com/security/cve/CVE-2013-0611.html http://support.novell.com/security/cve/CVE-2013-0612.html http://support.novell.com/security/cve/CVE-2013-0613.html http://support.novell.com/security/cve/CVE-2013-0614.html http://support.novell.com/security/cve/CVE-2013-0615.html http://support.novell.com/security/cve/CVE-2013-0616.html http://support.novell.com/security/cve/CVE-2013-0617.html http://support.novell.com/security/cve/CVE-2013-0618.html http://support.novell.com/security/cve/CVE-2013-0619.html http://support.novell.com/security/cve/CVE-2013-0620.html http://support.novell.com/security/cve/CVE-2013-0621.html http://support.novell.com/security/cve/CVE-2013-0622.html http://support.novell.com/security/cve/CVE-2013-0623.html http://support.novell.com/security/cve/CVE-2013-0624.html http://support.novell.com/security/cve/CVE-2013-0626.html http://support.novell.com/security/cve/CVE-2013-0627.html https://bugzilla.novell.com/757393 https://bugzilla.novell.com/768492 https://bugzilla.novell.com/797529

1 0

openSUSE-SU-2013:0137-1: moderate: update for freeradius-server
by opensuse-security＠opensuse.org 23 Jan '13

23 Jan '13

openSUSE Security Update: update for freeradius-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0137-1 Rating: moderate References: #797292 #797313 Cross-References: CVE-2011-4966 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: - fix for CVE-2011-4966 (bnc#797313) (freeradius-server-CVE-2011-4966.patch) - fixed a bug in the logrotate script (bnc#797292) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-37 - openSUSE 12.1: zypper in -t patch openSUSE-2013-37 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): freeradius-server-2.1.12-4.12.2 freeradius-server-debuginfo-2.1.12-4.12.2 freeradius-server-debugsource-2.1.12-4.12.2 freeradius-server-devel-2.1.12-4.12.2 freeradius-server-dialupadmin-2.1.12-4.12.2 freeradius-server-doc-2.1.12-4.12.2 freeradius-server-libs-2.1.12-4.12.2 freeradius-server-libs-debuginfo-2.1.12-4.12.2 freeradius-server-utils-2.1.12-4.12.2 freeradius-server-utils-debuginfo-2.1.12-4.12.2 - openSUSE 12.1 (i586 x86_64): freeradius-server-2.1.12-12.1 freeradius-server-debuginfo-2.1.12-12.1 freeradius-server-debugsource-2.1.12-12.1 freeradius-server-devel-2.1.12-12.1 freeradius-server-dialupadmin-2.1.12-12.1 freeradius-server-doc-2.1.12-12.1 freeradius-server-libs-2.1.12-12.1 freeradius-server-libs-debuginfo-2.1.12-12.1 freeradius-server-utils-2.1.12-12.1 freeradius-server-utils-debuginfo-2.1.12-12.1 References: http://support.novell.com/security/cve/CVE-2011-4966.html https://bugzilla.novell.com/797292 https://bugzilla.novell.com/797313

1 0

openSUSE-RU-2013:0136-1: xf86-input-evdev: handle axis swap, calibration and inversion for touch events
by maintenance＠opensuse.org 23 Jan '13

23 Jan '13

openSUSE Recommended Update: xf86-input-evdev: handle axis swap, calibration and inversion for touch events ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0136-1 Rating: low References: #785508 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for xf86-input-evdev: - bnc#785508: Handle axis swap, calibration and inversion for touch events Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-36 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): xf86-input-evdev-2.7.3-2.12.1 xf86-input-evdev-debuginfo-2.7.3-2.12.1 xf86-input-evdev-debugsource-2.7.3-2.12.1 xf86-input-evdev-devel-2.7.3-2.12.1 References: https://bugzilla.novell.com/785508

1 0

openSUSE-SU-2013:0135-1: important: mysql-community-server: updated to 5.1.67
by opensuse-security＠opensuse.org 23 Jan '13

23 Jan '13

openSUSE Security Update: mysql-community-server: updated to 5.1.67 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0135-1 Rating: important References: #779476 #792444 Cross-References: CVE-2012-4414 CVE-2012-5611 Affected Products: openSUSE 11.4/standard/i586/patchinfo.36 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: mysql community server was updated to 5.1.67, fixing bugs and security issues. See http://dev.mysql.com/doc/refman/5.1/en/news-5-1-67.html http://dev.mysql.com/doc/refman/5.1/en/news-5-1-66.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4/standard/i586/patchinfo.36: zypper in -t patch 2013-1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4/standard/i586/patchinfo.36 (i586 x86_64): libmysqlclient-devel-5.1.67-58.1 libmysqlclient16-5.1.67-58.1 libmysqlclient16-debuginfo-5.1.67-58.1 libmysqlclient_r16-5.1.67-58.1 libmysqlclient_r16-debuginfo-5.1.67-58.1 libmysqld-devel-5.1.67-58.1 libmysqld0-5.1.67-58.1 libmysqld0-debuginfo-5.1.67-58.1 mysql-community-server-5.1.67-58.1 mysql-community-server-bench-5.1.67-58.1 mysql-community-server-bench-debuginfo-5.1.67-58.1 mysql-community-server-client-5.1.67-58.1 mysql-community-server-client-debuginfo-5.1.67-58.1 mysql-community-server-debug-5.1.67-58.1 mysql-community-server-debug-debuginfo-5.1.67-58.1 mysql-community-server-debuginfo-5.1.67-58.1 mysql-community-server-debugsource-5.1.67-58.1 mysql-community-server-test-5.1.67-58.1 mysql-community-server-test-debuginfo-5.1.67-58.1 mysql-community-server-tools-5.1.67-58.1 mysql-community-server-tools-debuginfo-5.1.67-58.1 - openSUSE 11.4/standard/i586/patchinfo.36 (x86_64): libmysqlclient16-32bit-5.1.67-58.1 libmysqlclient16-debuginfo-32bit-5.1.67-58.1 libmysqlclient_r16-32bit-5.1.67-58.1 libmysqlclient_r16-debuginfo-32bit-5.1.67-58.1 - openSUSE 11.4/standard/i586/patchinfo.36 (ia64): libmysqlclient16-debuginfo-x86-5.1.67-58.1 libmysqlclient16-x86-5.1.67-58.1 libmysqlclient_r16-debuginfo-x86-5.1.67-58.1 libmysqlclient_r16-x86-5.1.67-58.1 References: http://support.novell.com/security/cve/CVE-2012-4414.html http://support.novell.com/security/cve/CVE-2012-5611.html https://bugzilla.novell.com/779476 https://bugzilla.novell.com/792444

1 0

openSUSE-SU-2013:0134-1: important: Update to 11.2.202.251
by opensuse-security＠opensuse.org 23 Jan '13

23 Jan '13

openSUSE Security Update: Update to 11.2.202.251 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0134-1 Rating: important References: Cross-References: CVE-2012-5274 CVE-2012-5275 CVE-2012-5276 CVE-2012-5277 CVE-2012-5278 CVE-2012-5279 CVE-2012-5280 Affected Products: openSUSE 11.4/standard/i586/patchinfo.8 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Update to 11.2.202.251: These updates address vulnerabilities that could cause a crash and potentially allow an attacker to take control of the affected system Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4/standard/i586/patchinfo.8: zypper in -t patch 2012-2 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4/standard/i586/patchinfo.8 (i586 x86_64): flash-player-11.2.202.251-31.1 flash-player-gnome-11.2.202.251-31.1 flash-player-kde4-11.2.202.251-31.1 References: http://support.novell.com/security/cve/CVE-2012-5274.html http://support.novell.com/security/cve/CVE-2012-5275.html http://support.novell.com/security/cve/CVE-2012-5276.html http://support.novell.com/security/cve/CVE-2012-5277.html http://support.novell.com/security/cve/CVE-2012-5278.html http://support.novell.com/security/cve/CVE-2012-5279.html http://support.novell.com/security/cve/CVE-2012-5280.html

1 0

openSUSE-SU-2013:0133-1: important: xen to fix various denial of service issues
by opensuse-security＠opensuse.org 23 Jan '13

23 Jan '13

openSUSE Security Update: xen to fix various denial of service issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0133-1 Rating: important References: #789940 #789944 #789945 #789948 #789950 #789951 Cross-References: CVE-2012-5510 CVE-2012-5511 CVE-2012-5512 CVE-2012-5513 CVE-2012-5514 CVE-2012-5515 Affected Products: openSUSE 11.4/standard/i586/patchinfo.32 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: XEN was updated to fix various denial of service issues. - bnc#789945 - CVE-2012-5510: xen: Grant table version switch list corruption vulnerability (XSA-26) - bnc#789944 - CVE-2012-5511: xen: Several HVM operations do not validate the range of their inputs (XSA-27) - bnc#789940 - CVE-2012-5512: xen: HVMOP_get_mem_access crash / HVMOP_set_mem_access information leak (XSA-28) - bnc#789951 - CVE-2012-5513: xen: XENMEM_exchange may overwrite hypervisor memory (XSA-29) - bnc#789948 - CVE-2012-5514: xen: Missing unlock in guest_physmap_mark_populate_on_demand() (XSA-30) - bnc#789950 - CVE-2012-5515: xen: Several memory hypercall operations allow invalid extent order values (XSA-31) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4/standard/i586/patchinfo.32: zypper in -t patch 2012-25 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4/standard/i586/patchinfo.32 (i586 x86_64): xen-4.0.3_05-49.1 xen-debugsource-4.0.3_05-49.1 xen-devel-4.0.3_05-49.1 xen-doc-html-4.0.3_05-49.1 xen-doc-pdf-4.0.3_05-49.1 xen-kmp-default-4.0.3_05_k2.6.37.6_24-49.1 xen-kmp-default-debuginfo-4.0.3_05_k2.6.37.6_24-49.1 xen-kmp-desktop-4.0.3_05_k2.6.37.6_24-49.1 xen-kmp-desktop-debuginfo-4.0.3_05_k2.6.37.6_24-49.1 xen-libs-4.0.3_05-49.1 xen-libs-debuginfo-4.0.3_05-49.1 xen-tools-4.0.3_05-49.1 xen-tools-debuginfo-4.0.3_05-49.1 xen-tools-domU-4.0.3_05-49.1 xen-tools-domU-debuginfo-4.0.3_05-49.1 - openSUSE 11.4/standard/i586/patchinfo.32 (i586): xen-kmp-pae-4.0.3_05_k2.6.37.6_24-49.1 xen-kmp-pae-debuginfo-4.0.3_05_k2.6.37.6_24-49.1 References: http://support.novell.com/security/cve/CVE-2012-5510.html http://support.novell.com/security/cve/CVE-2012-5511.html http://support.novell.com/security/cve/CVE-2012-5512.html http://support.novell.com/security/cve/CVE-2012-5513.html http://support.novell.com/security/cve/CVE-2012-5514.html http://support.novell.com/security/cve/CVE-2012-5515.html https://bugzilla.novell.com/789940 https://bugzilla.novell.com/789944 https://bugzilla.novell.com/789945 https://bugzilla.novell.com/789948 https://bugzilla.novell.com/789950 https://bugzilla.novell.com/789951

1 0