November 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:1699-1: update-test-trival: Testupdate to refresh openSUSE:13.1:Update
by maintenance＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Recommended Update: update-test-trival: Testupdate to refresh openSUSE:13.1:Update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1699-1 Rating: low References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This is a testupdate to refresh the openSUSE:13.1:Update repository Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-691 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): update-test-affects-package-manager-0-32.1 update-test-feature-0-32.1 update-test-interactive-0-32.1 update-test-optional-0-32.1 update-test-reboot-needed-0-32.1 update-test-relogin-suggested-0-32.1 update-test-security-0-32.1 update-test-trival-0-32.1 References:

1 0

openSUSE-RU-2013:1698-1: flash-player: testupdate to refresh openSUSE:13.1:NonFree:Update
by maintenance＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Recommended Update: flash-player: testupdate to refresh openSUSE:13.1:NonFree:Update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1698-1 Rating: low References: Affected Products: openSUSE 13.1:NonFree ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This is a testupdate for flash-player to refresh the openSUSE:13.1:NonFree:Update repository Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1:NonFree: zypper in -t patch openSUSE-2013-689 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1:NonFree (i586 x86_64): flash-player-11.2.202.297-10.1 flash-player-gnome-11.2.202.297-10.1 flash-player-kde4-11.2.202.297-10.1 References:

1 0

openSUSE-RU-2013:1697-1: mlocate: run updatedb as nobody
by maintenance＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Recommended Update: mlocate: run updatedb as nobody ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1697-1 Rating: low References: #847801 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with mlocate: - bnc#847801: Run updatedb as nobody and do not use the locate group at all Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-833 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): mlocate-0.26-4.5.1 mlocate-debuginfo-0.26-4.5.1 mlocate-debugsource-0.26-4.5.1 - openSUSE 13.1 (noarch): mlocate-lang-0.26-4.5.1 References: https://bugzilla.novell.com/847801

1 0

openSUSE-SU-2013:1696-1: moderate: update for dropbear
by opensuse-security＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Security Update: update for dropbear ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1696-1 Rating: moderate References: #845306 Cross-References: CVE-2013-4421 CVE-2013-4434 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: dropbear was updated to version 2013.60 to fix following bugs: * Fix "make install" so that it doesn't always install to /bin and /sbin * Fix "make install MULTI=1", installing manpages failed * Fix "make install" when scp is included since it has no manpage * Make --disable-bundled-libtom work - used as bug fix release for bnc#845306 - VUL-0: CVE-2013-4421 and CVE-2013-4434 - provided links for download sources - employed gpg-offline - verify sources - imported upstream version 2013.59 * Fix crash from -J command Thanks to Lluís Batlle i Rossell and Arnaud Mouiche for patches * Avoid reading too much from /proc/net/rt_cache since that causes system slowness. * Improve EOF handling for half-closed connections Thanks to Catalin Patulea * Send a banner message to report PAM error messages intended for the user Patch from Martin Donnelly * Limit the size of decompressed payloads, avoids memory exhaustion denial of service Thanks to Logan Lamb for reporting and investigating it * Avoid disclosing existence of valid users through inconsistent delays Thanks to Logan Lamb for reporting * Update config.guess and config.sub for newer architectures * Avoid segfault in server for locked accounts * "make install" now installs manpages dropbearkey.8 has been renamed to dropbearkey.1 manpage added for dropbearconvert * Get rid of one second delay when running non-interactive commands Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-839 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): dropbear-2013.60-2.4.1 dropbear-debuginfo-2013.60-2.4.1 dropbear-debugsource-2013.60-2.4.1 References: http://support.novell.com/security/cve/CVE-2013-4421.html http://support.novell.com/security/cve/CVE-2013-4434.html https://bugzilla.novell.com/845306

1 0

openSUSE-RU-2013:1695-1: google-api-python-client: update to version 1.2
by maintenance＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Recommended Update: google-api-python-client: update to version 1.2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1695-1 Rating: low References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issues with google-api-python-client: - update to version 1.2 + The use of the gflags library is now deprecated, and is no longer a dependency. If you are still using the oauth2client.tools.run() function then include gflags as a dependency of your application or switch to oauth2client.tools.run_flow. + Samples have been updated to use the new apiclient.sample_tools, and no longer use gflags. + Added support for the experimental Object Change Notification, as found in the Cloud Storage API. + The oauth2client App Engine decorators are now threadsafe. + Use the following redirects feature of httplib2 where it returns the ultimate URL after a series of redirects to avoid multiple hops for every resumable media upload request. + Updated AdSense Management API samples to V1.3 + Add option to automatically retry requests. + Ability to list registered keys in multistore_file. + User-agent must contain (gzip). + The 'method' parameter for httplib2 is not positional. This would cause spurious warnings in the logging. + Making OAuth2Decorator more extensible. Fixes Issue 256. + Update AdExchange Buyer API examples to version v1.2. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-836 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): google-api-python-client-1.2-2.4.1 References:

1 0

openSUSE-RU-2013:1694-1: testupdate for the 13.1 update stack
by maintenance＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Recommended Update: testupdate for the 13.1 update stack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1694-1 Rating: low References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This is a testupdate for the 13.1 update stack, a trivial recommended update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-482 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): update-test-trival-0-23.1 References:

1 0

openSUSE-RU-2013:1693-1: rsyslog: update to 7.4.6
by maintenance＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Recommended Update: rsyslog: update to 7.4.6 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1693-1 Rating: low References: #848574 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with rsyslog: - bnc#848574: update to 7.4.6 [v7.4-stable] Fixes various segfault, memory leak and buffer overrun fixes and a selection of application bugs + bugfix: potential abort during HUP + bugfix: imtcp flowControl parameter incorrectly defaulted to "off" + now requires libestr 0.1.9 for number handling in RainerScript + bugfix: memory leak in strlen() RainerScript function + bugfix: buffer overrun if re_extract function was called for submatch 50 + bugfix: memleak in re_extract() function + bugfix: potential abort in RainerScript optimizer + bugfix: memory leak in omhiredis + bugfix: segfault if variable was assigned to non-container subtree - also contains changes from 7.4.5 + mmanon: removed the check for specific "terminator characters" + omelasticsearch: add failed.httprequests stats counter + bugfix: invalid property filter was not properly disabled in ruleset + bugfix: segfault if re_extract() function was used and no match found + bugfix: potential misadressing on startup if property-filter was used + bugfix: omelasticsearch: correct failed.http stats counter + bugfix: omelasticsearch: did not correctly initialize stats counters + bugfix: omelasticsearch: failed.es counter was only maintained in bulk mode + bugfix: mmanon did not detect all IP addresses in rewrite mode + bugfix: mmanon sometimes used invalid replacement char in simple mode + bugfix: memory leak in mmnormalize + bugfix: array-based ==/!= comparisions lead to invalid results + bugfix: omprog blocked signals to executed programs + bugfix: doc: imuxsock legacy param $SystemLogSocketParseTrusted was misspelled + bugfix: imfile "facility" input parameter improperly handled + bugfix: small memory leak in imfile when $ResetConfigVariables was used + bugfix: segfault on startup if TLS was used but no CA cert set + bugfix: segfault on startup if TCP TLS was used but no cert or key set + bugfix: some more build problems with newer json-c versions + bugfix: build system: libgcrypt.h needed even if libgrcypt was disabled - fix build on ppc Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-854 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): rsyslog-7.4.6-2.4.1 rsyslog-debuginfo-7.4.6-2.4.1 rsyslog-debugsource-7.4.6-2.4.1 rsyslog-diag-tools-7.4.6-2.4.1 rsyslog-diag-tools-debuginfo-7.4.6-2.4.1 rsyslog-doc-7.4.6-2.4.1 rsyslog-module-dbi-7.4.6-2.4.1 rsyslog-module-dbi-debuginfo-7.4.6-2.4.1 rsyslog-module-elasticsearch-7.4.6-2.4.1 rsyslog-module-elasticsearch-debuginfo-7.4.6-2.4.1 rsyslog-module-gcrypt-7.4.6-2.4.1 rsyslog-module-gcrypt-debuginfo-7.4.6-2.4.1 rsyslog-module-gssapi-7.4.6-2.4.1 rsyslog-module-gssapi-debuginfo-7.4.6-2.4.1 rsyslog-module-gtls-7.4.6-2.4.1 rsyslog-module-gtls-debuginfo-7.4.6-2.4.1 rsyslog-module-guardtime-7.4.6-2.4.1 rsyslog-module-guardtime-debuginfo-7.4.6-2.4.1 rsyslog-module-mmnormalize-7.4.6-2.4.1 rsyslog-module-mmnormalize-debuginfo-7.4.6-2.4.1 rsyslog-module-mysql-7.4.6-2.4.1 rsyslog-module-mysql-debuginfo-7.4.6-2.4.1 rsyslog-module-pgsql-7.4.6-2.4.1 rsyslog-module-pgsql-debuginfo-7.4.6-2.4.1 rsyslog-module-relp-7.4.6-2.4.1 rsyslog-module-relp-debuginfo-7.4.6-2.4.1 rsyslog-module-snmp-7.4.6-2.4.1 rsyslog-module-snmp-debuginfo-7.4.6-2.4.1 rsyslog-module-udpspoof-7.4.6-2.4.1 rsyslog-module-udpspoof-debuginfo-7.4.6-2.4.1 References: https://bugzilla.novell.com/848574

1 0

openSUSE-RU-2013:1692-1: colord: Apparmor profile correction
by maintenance＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Recommended Update: colord: Apparmor profile correction ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1692-1 Rating: low References: #846301 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with colord: - bnc#846301: Fixed apparmor profile Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-834 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): colord-1.1.2-5.2 colord-debuginfo-1.1.2-5.2 colord-debugsource-1.1.2-5.2 libcolord-devel-1.1.2-5.2 libcolord2-1.1.2-5.2 libcolord2-debuginfo-1.1.2-5.2 libcolorhug2-1.1.2-5.2 libcolorhug2-debuginfo-1.1.2-5.2 typelib-1_0-ColorHug-1_0-1.1.2-5.2 typelib-1_0-Colord-1_0-1.1.2-5.2 - openSUSE 13.1 (x86_64): libcolord2-32bit-1.1.2-5.2 libcolord2-debuginfo-32bit-1.1.2-5.2 - openSUSE 13.1 (noarch): colord-lang-1.1.2-5.2 References: https://bugzilla.novell.com/846301

1 0

openSUSE-RU-2013:1691-1: opensuse-startup_de: Update for openSUSE 13.1
by maintenance＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Recommended Update: opensuse-startup_de: Update for openSUSE 13.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1691-1 Rating: low References: #849172 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update introduces the german translations of opensuse-startup_de for openSUSE 13.1 (bnc#849172) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-842 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): opensuse-startup_de-11.3-2.1 opensuse-startup_de-pdf-11.3-2.1 References: https://bugzilla.novell.com/849172

1 0

openSUSE-RU-2013:1690-1: Test-update for 13.1:Update
by maintenance＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Recommended Update: Test-update for 13.1:Update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1690-1 Rating: low References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This is a test-update for 13.1:Update Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-580 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): update-test-affects-package-manager-0-27.1 update-test-feature-0-27.1 update-test-interactive-0-27.1 update-test-optional-0-27.1 update-test-reboot-needed-0-27.1 update-test-relogin-suggested-0-27.1 update-test-security-0-27.1 update-test-trival-0-27.1 References:

1 0