November 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2013:1679-1: moderate: update for varnish
by opensuse-security＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Security Update: update for varnish ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1679-1 Rating: moderate References: #848451 Cross-References: CVE-2013-4484 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes the following security issue with varnish: - bnc#848451, CVE-2013-4484: fixed denial of service flaw in certain GET requests when using certain configurations in Varnish Cache handling Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-864 - openSUSE 12.2: zypper in -t patch openSUSE-2013-864 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libvarnishapi1-3.0.3-2.10.1 libvarnishapi1-debuginfo-3.0.3-2.10.1 varnish-3.0.3-2.10.1 varnish-debuginfo-3.0.3-2.10.1 varnish-debugsource-3.0.3-2.10.1 varnish-devel-3.0.3-2.10.1 - openSUSE 12.2 (i586 x86_64): libvarnishapi1-3.0.2-2.6.1 libvarnishapi1-debuginfo-3.0.2-2.6.1 varnish-3.0.2-2.6.1 varnish-debuginfo-3.0.2-2.6.1 varnish-debugsource-3.0.2-2.6.1 varnish-devel-3.0.2-2.6.1 References: http://support.novell.com/security/cve/CVE-2013-4484.html https://bugzilla.novell.com/848451

1 0

openSUSE-SU-2013:1676-1: moderate: update for whois
by opensuse-security＠opensuse.org 14 Nov '13

14 Nov '13

openSUSE Security Update: update for whois ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1676-1 Rating: moderate References: #848594 Cross-References: CVE-2011-2483 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - update to 5.0.26 [bnc#848594] * Added the .cf TLD server. * Updated the .bi TLD server. * Added a new ASN allocation. - includes changes from 5.0.25 * Added the .ax, .bn, .iq, .pw and .rw TLD servers. * Updated one or more translations. - includes updates changes 5.0.24: * Merged documentation fixes and the whois.conf(5) man page * Added a new ASN allocation. * Updated one or more translations. - includes changes from 5.0.23 * whois.nic.or.kr switched from EUC-KR to UTF-8. - includes changes from 5.0.22 * Fixed cross-compiling - includes changes from 5.0.21 * Fixed parsing of 6to4 addresses * Added the .xn--j1amh (.ÑƒÐºÑ€, Ukraine) TLD server. * Updated the .bi, .se and .vn TLD servers. * Removed whois.pandi.or.id from the list of servers which support the RIPE extensions, since it does not anymore and queries are broken. * Updated some disclaimer suppression strings. * Respect DEB_HOST_GNU_TYPE when selecting CC for cross-compiling. - includes changes form 5.0.20 * Updated the .by, .ng, .om, .sm, .tn, .ug and .vn TLD servers. * Added the .bw, .td, .xn--mgb9awbf (Ø¹Ù…Ø§Ù†., Oman), .xn--mgberp4a5d4ar (.Ø§Ù„Ø³Ø¹ÙˆØ¯ÙŠØ©, Saudi Arabia) and .xn--mgbx4cd0ab (ï»¢ï» ï»´ïº´ï»³ïº., Malaysia) TLD servers. * Removed the .kp, .mc, .rw and .xn--mgba3a4f16a (Ø§ÛŒØ±Ø§Ù†., Iran) TLD servers. - includes changes from 5.0.19 * Added the .post TLD server. * Updated the .co.za SLD servers. * Added the .alt.za, .net.za and .web.za SLD servers. * whois.ua changed (?) the encoding to utf-8. * Fixed the parsing of 6to4 addresses like whois 2002:xxxx::. - includes changes from 5.0.18 * Updated the .ae and .xn--mgbaam7a8h (.Ø§Ù…Ø§Ø±Ø§Øª, United Arabs Emirates) TLDs. * Updated the server charset table for .fr and .it. - includes changes from whois 5.0.17 * Updated the .bi, .fo, .gr and .gt TLD servers. * Removed support for recursion of .org queries, it has been a thick registry since 2005. - includes changes from 5.0.16 * Added the .xn--80ao21a (.ÒšÐÐ—, Kazakhstan) TLD server. * Updated the .ec and .ee TLD servers. * Removed the .xn--mgbc0a9azcg (.Ø§Ù„Ù…ØºØ±Ø¨, Morocco) and .xn--mgberp4a5d4ar (.Ø§Ù„Ø³Ø¹ÙˆØ¯ÙŠØ©, Saudi Arabia) TLD servers. * Added a new ASN allocation. * Updated one or more translations. - includes changes from 5.0.15 * Added the .xn--mgba3a4f16a (Ø§ÛŒØ±Ø§Ù†., Iran) TLD server. * Updated the .pe TLD server, this time for real. * Updated one or more translations. - includes changes from 5.0.14 * Added the .sx TLD server. * Updated the .pe TLD server. - includes changes from 5.0.13 * Updated the .hr TLD server. * Improved the package description * Updated the FSF address in licenses. - includes changes from 5.0.12 * Recursion disabled when the query string contains spaces, because probably the query format will not be compatible with the referral server (e.g. whois to rwhois or ARIN to RIPE). * Add the "+" flag by default to queries to whois.arin.net if the argument looks like an IP address. Also add the "a" and "n" flags. No thanks to ARIN for breaking every whois client. * Added the .cv, .lk, .mq, .sy, .so, .biz.ua, .co.ua, .pp.ua, .qa, .xn--3e0b707e (.í•œêµ, Korea), .xn--45brj9c (.à¦à¦¾à¦°à¦¤, India, Bengali), .xn--90a3ac (.Ð¡Ð Ð‘, Serbia), .xn--clchc0ea0b2g2a9gcd (.à®šà®¿à®™à¯à®•à®ªà¯à®ªà¯‚à®°à¯, Singapore, Tamil), .xn--fpcrj9c3d (.à°à°¾à°°à°¤à±, India, Telugu), .xn--fzc2c9e2c (.à¶½à¶‚à¶šà·, Sri Lanka, Sinhala), .xn--gecrj9c (.àªàª¾àª°àª¤, India, Gujarati), .xn--h2brj9c (.à¤à¤¾à¤°à¤¤, India, Hindi), .xn--lgbbat1ad8j (.Ø§Ù„Ø¬Ø²Ø§Ø¦Ø±, Algeria), .xn--mgbayh7gpa (.Ø§Ù„Ø§Ø±Ø¯Ù†, Jordan), .xn--mgbbh1a71e (.Ø¨Ú¾Ø§Ø±Øª, India, Urdu), .xn--mgbc0a9azcg (.Ø§Ù„Ù…ØºØ±Ø¨, Morocco), .xn--ogbpf8fl (.Ø³ÙˆØ±ÙŠØ©, Syria), .xn--s9brj9c (.à¨à¨¾à¨°à¨¤, India, Punjabi), .xn--xkc2al3hye2a (.à®‡à®²à®™à¯à®•à¯ˆ, Sri Lanka, Tamil), .xn--wgbl6a (.Ù‚Ø·Ø±, Qatar), .xn--xkc2dl3a5ee0h (.à®‡à®¨à¯à®¤à®¿à®¯à®¾, India, Tamil), .xn--yfro4i67o (.æ–°åŠ å¡, Singapore, Chinese) and .xxx TLD servers. (Closes: #642424), * Added the .priv.at pseudo-SLD server. * Updated the .co, .gf, .gp, .kr, .li, .rs, .ru, .su, .sv, .ua and .xn--p1ai TLD servers. (Closes: #590425, #634830, #627478) * Added a new ASN allocation. * Fixed a typo and -t syntax in whois(1). (Closes: #614973, #632588) * Made whois return an error in some cases, code contributed by David Souther. * Split HAVE_LINUX_CRYPT_GENSALT from HAVE_XCRYPT to support SuSE, which has it builtin in the libc. Added untested support for Solaris' crypt_gensalt(3). This and the following changes have been contributed by Ludwig Nussel of SuSE. * mkpasswd: stop rejecting non-ASCII characters. * mkpasswd: added support for the 2y algorithm, which fixes CVE-2011-2483. * mkpasswd: raised the number of rounds for 2a/2y from 4 to 5, which is the current default. * mkpasswd: removed support for 2 and {SHA}, which actually are not supported by FreeBSD and libxcrypt. - packaging changes * removed patches accepted upstream: whois-5.0.11-mkpasswd-support-Owl-patched-libcrypt.diff whois-5.0.11-mkpasswd-crypt_gensalt-might-change-the-prefix. diff whois-5.0.11-mkpasswd-support-8bit-characters.diff whois-5.0.11-mkpasswd-add-support-for-the-new-2y-blowfish-ta g-CVE-2011-2483.diff whois-5.0.11-mkpasswd-set-default-blowfish-rounds-to-5.diff whois-5.0.11-mkpasswd-remove-obsolete-settings.diff * removed patches no longer required: whois-5.0.11-mkpasswd-fix-compiler-warnings.diff * updated patches: whois-4.7.33-nb.patch to whois-5.0.25-nb.patch * verify source signatures - crypt_gensalt moved to separate library libowcrypt (fate#314945) - update to 5.0.26 [bnc#848594] * Added the .cf TLD server. * Updated the .bi TLD server. * Added a new ASN allocation. - includes changes from 5.0.25 * Added the .ax, .bn, .iq, .pw and .rw TLD servers. * Updated one or more translations. - includes updates changes 5.0.24: * Merged documentation fixes and the whois.conf(5) man page * Added a new ASN allocation. * Updated one or more translations. - includes changes from 5.0.23 * whois.nic.or.kr switched from EUC-KR to UTF-8. - includes changes from 5.0.22 * Fixed cross-compiling - includes changes from 5.0.21 * Fixed parsing of 6to4 addresses * Added the .xn--j1amh (.ÑƒÐºÑ€, Ukraine) TLD server. * Updated the .bi, .se and .vn TLD servers. * Removed whois.pandi.or.id from the list of servers which support the RIPE extensions, since it does not anymore and queries are broken. * Updated some disclaimer suppression strings. * Respect DEB_HOST_GNU_TYPE when selecting CC for cross-compiling. - includes changes form 5.0.20 * Updated the .by, .ng, .om, .sm, .tn, .ug and .vn TLD servers. * Added the .bw, .td, .xn--mgb9awbf (Ø¹Ù…Ø§Ù†., Oman), .xn--mgberp4a5d4ar (.Ø§Ù„Ø³Ø¹ÙˆØ¯ÙŠØ©, Saudi Arabia) and .xn--mgbx4cd0ab (ï»¢ï» ï»´ïº´ï»³ïº., Malaysia) TLD servers. * Removed the .kp, .mc, .rw and .xn--mgba3a4f16a (Ø§ÛŒØ±Ø§Ù†., Iran) TLD servers. - includes changes from 5.0.19 * Added the .post TLD server. * Updated the .co.za SLD servers. * Added the .alt.za, .net.za and .web.za SLD servers. * whois.ua changed (?) the encoding to utf-8. * Fixed the parsing of 6to4 addresses like whois 2002:xxxx::. - includes changes from 5.0.18 * Updated the .ae and .xn--mgbaam7a8h (.Ø§Ù…Ø§Ø±Ø§Øª, United Arabs Emirates) TLDs. * Updated the server charset table for .fr and .it. - includes changes from whois 5.0.17 * Updated the .bi, .fo, .gr and .gt TLD servers. * Removed support for recursion of .org queries, it has been a thick registry since 2005. - includes changes from 5.0.16 * Added the .xn--80ao21a (.ÒšÐÐ—, Kazakhstan) TLD server. * Updated the .ec and .ee TLD servers. * Removed the .xn--mgbc0a9azcg (.Ø§Ù„Ù…ØºØ±Ø¨, Morocco) and .xn--mgberp4a5d4ar (.Ø§Ù„Ø³Ø¹ÙˆØ¯ÙŠØ©, Saudi Arabia) TLD servers. * Added a new ASN allocation. * Updated one or more translations. - includes changes from 5.0.15 * Added the .xn--mgba3a4f16a (Ø§ÛŒØ±Ø§Ù†., Iran) TLD server. * Updated the .pe TLD server, this time for real. * Updated one or more translations. - includes changes from 5.0.14 * Added the .sx TLD server. * Updated the .pe TLD server. - includes changes from 5.0.13 * Updated the .hr TLD server. * Improved the package description * Updated the FSF address in licenses. - includes changes from 5.0.12 * Recursion disabled when the query string contains spaces, because probably the query format will not be compatible with the referral server (e.g. whois to rwhois or ARIN to RIPE). * Add the "+" flag by default to queries to whois.arin.net if the argument looks like an IP address. Also add the "a" and "n" flags. No thanks to ARIN for breaking every whois client. * Added the .cv, .lk, .mq, .sy, .so, .biz.ua, .co.ua, .pp.ua, .qa, .xn--3e0b707e (.í•œêµ, Korea), .xn--45brj9c (.à¦à¦¾à¦°à¦¤, India, Bengali), .xn--90a3ac (.Ð¡Ð Ð‘, Serbia), .xn--clchc0ea0b2g2a9gcd (.à®šà®¿à®™à¯à®•à®ªà¯à®ªà¯‚à®°à¯, Singapore, Tamil), .xn--fpcrj9c3d (.à°à°¾à°°à°¤à±, India, Telugu), .xn--fzc2c9e2c (.à¶½à¶‚à¶šà·, Sri Lanka, Sinhala), .xn--gecrj9c (.àªàª¾àª°àª¤, India, Gujarati), .xn--h2brj9c (.à¤à¤¾à¤°à¤¤, India, Hindi), .xn--lgbbat1ad8j (.Ø§Ù„Ø¬Ø²Ø§Ø¦Ø±, Algeria), .xn--mgbayh7gpa (.Ø§Ù„Ø§Ø±Ø¯Ù†, Jordan), .xn--mgbbh1a71e (.Ø¨Ú¾Ø§Ø±Øª, India, Urdu), .xn--mgbc0a9azcg (.Ø§Ù„Ù…ØºØ±Ø¨, Morocco), .xn--ogbpf8fl (.Ø³ÙˆØ±ÙŠØ©, Syria), .xn--s9brj9c (.à¨à¨¾à¨°à¨¤, India, Punjabi), .xn--xkc2al3hye2a (.à®‡à®²à®™à¯à®•à¯ˆ, Sri Lanka, Tamil), .xn--wgbl6a (.Ù‚Ø·Ø±, Qatar), .xn--xkc2dl3a5ee0h (.à®‡à®¨à¯à®¤à®¿à®¯à®¾, India, Tamil), .xn--yfro4i67o (.æ–°åŠ å¡, Singapore, Chinese) and .xxx TLD servers. (Closes: #642424), * Added the .priv.at pseudo-SLD server. * Updated the .co, .gf, .gp, .kr, .li, .rs, .ru, .su, .sv, .ua and .xn--p1ai TLD servers. (Closes: #590425, #634830, #627478) * Added a new ASN allocation. * Fixed a typo and -t syntax in whois(1). (Closes: #614973, #632588) * Made whois return an error in some cases, code contributed by David Souther. * Split HAVE_LINUX_CRYPT_GENSALT from HAVE_XCRYPT to support SuSE, which has it builtin in the libc. Added untested support for Solaris' crypt_gensalt(3). This and the following changes have been contributed by Ludwig Nussel of SuSE. * mkpasswd: stop rejecting non-ASCII characters. * mkpasswd: added support for the 2y algorithm, which fixes CVE-2011-2483. * mkpasswd: raised the number of rounds for 2a/2y from 4 to 5, which is the current default. * mkpasswd: removed support for 2 and {SHA}, which actually are not supported by FreeBSD and libxcrypt. - packaging changes * removed patches accepted upstream: whois-5.0.11-mkpasswd-support-Owl-patched-libcrypt.diff whois-5.0.11-mkpasswd-crypt_gensalt-might-change-the-prefix. diff whois-5.0.11-mkpasswd-support-8bit-characters.diff whois-5.0.11-mkpasswd-add-support-for-the-new-2y-blowfish-ta g-CVE-2011-2483.diff whois-5.0.11-mkpasswd-set-default-blowfish-rounds-to-5.diff whois-5.0.11-mkpasswd-remove-obsolete-settings.diff * removed patches no longer required: whois-5.0.11-mkpasswd-fix-compiler-warnings.diff * updated patches: whois-4.7.33-nb.patch to whois-5.0.25-nb.patch * verify source signatures - crypt_gensalt moved to separate library libowcrypt (fate#314945) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-161 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): whois-5.0.26-7.1 whois-debuginfo-5.0.26-7.1 whois-debugsource-5.0.26-7.1 References: http://support.novell.com/security/cve/CVE-2011-2483.html https://bugzilla.novell.com/848594

1 0

openSUSE-SU-2013:1675-1: moderate: update for wireshark
by opensuse-security＠opensuse.org 14 Nov '13

14 Nov '13

openSUSE Security Update: update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1675-1 Rating: moderate References: #848738 Cross-References: CVE-2013-6336 CVE-2013-6337 CVE-2013-6338 CVE-2013-6339 CVE-2013-6340 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: the following security issues were fixed in wireshark: * The IEEE 802.15.4 dissector could crash wnpa-sec-2013-61 CVE-2013-6336 * The NBAP dissector could crash wnpa-sec-2013-62 CVE-2013-6337 * The SIP dissector could crash wnpa-sec-2013-63 CVE-2013-6338 * The OpenWire dissector could go into a large loop wnpa-sec-2013-64 CVE-2013-6339 * The TCP dissector could crash wnpa-sec-2013-65 CVE-2013-6340 + Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.8.11.htm l Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-160 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): wireshark-1.8.11-61.1 wireshark-debuginfo-1.8.11-61.1 wireshark-debugsource-1.8.11-61.1 wireshark-devel-1.8.11-61.1 References: http://support.novell.com/security/cve/CVE-2013-6336.html http://support.novell.com/security/cve/CVE-2013-6337.html http://support.novell.com/security/cve/CVE-2013-6338.html http://support.novell.com/security/cve/CVE-2013-6339.html http://support.novell.com/security/cve/CVE-2013-6340.html https://bugzilla.novell.com/848738

1 0

openSUSE-SU-2013:1671-1: moderate: update for wireshark
by opensuse-security＠opensuse.org 14 Nov '13

14 Nov '13

openSUSE Security Update: update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1671-1 Rating: moderate References: #848738 Cross-References: CVE-2013-6336 CVE-2013-6337 CVE-2013-6338 CVE-2013-6339 CVE-2013-6340 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: the following security issues were fixed in wireshark: * The IEEE 802.15.4 dissector could crash wnpa-sec-2013-61 CVE-2013-6336 * The NBAP dissector could crash wnpa-sec-2013-62 CVE-2013-6337 * The SIP dissector could crash wnpa-sec-2013-63 CVE-2013-6338 * The OpenWire dissector could go into a large loop wnpa-sec-2013-64 CVE-2013-6339 * The TCP dissector could crash wnpa-sec-2013-65 CVE-2013-6340 + Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.8.11.htm l Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-848 - openSUSE 12.2: zypper in -t patch openSUSE-2013-848 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): wireshark-1.8.11-1.24.1 wireshark-debuginfo-1.8.11-1.24.1 wireshark-debugsource-1.8.11-1.24.1 wireshark-devel-1.8.11-1.24.1 - openSUSE 12.2 (i586 x86_64): wireshark-1.8.11-1.43.1 wireshark-debuginfo-1.8.11-1.43.1 wireshark-debugsource-1.8.11-1.43.1 wireshark-devel-1.8.11-1.43.1 References: http://support.novell.com/security/cve/CVE-2013-6336.html http://support.novell.com/security/cve/CVE-2013-6337.html http://support.novell.com/security/cve/CVE-2013-6338.html http://support.novell.com/security/cve/CVE-2013-6339.html http://support.novell.com/security/cve/CVE-2013-6340.html https://bugzilla.novell.com/848738

1 0

openSUSE-SU-2013:1670-1: moderate: update for whois
by opensuse-security＠opensuse.org 14 Nov '13

14 Nov '13

openSUSE Security Update: update for whois ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1670-1 Rating: moderate References: #848594 Cross-References: CVE-2011-2483 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - update to 5.0.26 [bnc#848594] * Added the .cf TLD server. * Updated the .bi TLD server. * Added a new ASN allocation. - includes changes from 5.0.25 * Added the .ax, .bn, .iq, .pw and .rw TLD servers. * Updated one or more translations. - includes updates changes 5.0.24: * Merged documentation fixes and the whois.conf(5) man page * Added a new ASN allocation. * Updated one or more translations. - includes changes from 5.0.23 * whois.nic.or.kr switched from EUC-KR to UTF-8. - includes changes from 5.0.22 * Fixed cross-compiling - includes changes from 5.0.21 * Fixed parsing of 6to4 addresses * Added the .xn--j1amh (.укр, Ukraine) TLD server. * Updated the .bi, .se and .vn TLD servers. * Removed whois.pandi.or.id from the list of servers which support the RIPE extensions, since it does not anymore and queries are broken. * Updated some disclaimer suppression strings. * Respect DEB_HOST_GNU_TYPE when selecting CC for cross-compiling. - includes changes form 5.0.20 * Updated the .by, .ng, .om, .sm, .tn, .ug and .vn TLD servers. * Added the .bw, .td, .xn--mgb9awbf (عمان., Oman), .xn--mgberp4a5d4ar (.السعودية, Saudi Arabia) and .xn--mgbx4cd0ab (ﻢﻠﻴﺴﻳﺍ., Malaysia) TLD servers. * Removed the .kp, .mc, .rw and .xn--mgba3a4f16a (ایران., Iran) TLD servers. - includes changes from 5.0.19 * Added the .post TLD server. * Updated the .co.za SLD servers. * Added the .alt.za, .net.za and .web.za SLD servers. * whois.ua changed (?) the encoding to utf-8. * Fixed the parsing of 6to4 addresses like whois 2002:xxxx::. - includes changes from 5.0.18 * Updated the .ae and .xn--mgbaam7a8h (.امارات, United Arabs Emirates) TLDs. * Updated the server charset table for .fr and .it. - includes changes from whois 5.0.17 * Updated the .bi, .fo, .gr and .gt TLD servers. * Removed support for recursion of .org queries, it has been a thick registry since 2005. - includes changes from 5.0.16 * Added the .xn--80ao21a (.ҚАЗ, Kazakhstan) TLD server. * Updated the .ec and .ee TLD servers. * Removed the .xn--mgbc0a9azcg (.المغرب, Morocco) and .xn--mgberp4a5d4ar (.السعودية, Saudi Arabia) TLD servers. * Added a new ASN allocation. * Updated one or more translations. - includes changes from 5.0.15 * Added the .xn--mgba3a4f16a (ایران., Iran) TLD server. * Updated the .pe TLD server, this time for real. * Updated one or more translations. - includes changes from 5.0.14 * Added the .sx TLD server. * Updated the .pe TLD server. - includes changes from 5.0.13 * Updated the .hr TLD server. * Improved the package description * Updated the FSF address in licenses. - includes changes from 5.0.12 * Recursion disabled when the query string contains spaces, because probably the query format will not be compatible with the referral server (e.g. whois to rwhois or ARIN to RIPE). * Add the "+" flag by default to queries to whois.arin.net if the argument looks like an IP address. Also add the "a" and "n" flags. No thanks to ARIN for breaking every whois client. * Added the .cv, .lk, .mq, .sy, .so, .biz.ua, .co.ua, .pp.ua, .qa, .xn--3e0b707e (.한국, Korea), .xn--45brj9c (.ভারত, India, Bengali), .xn--90a3ac (.СРБ, Serbia), .xn--clchc0ea0b2g2a9gcd (.சிங்கப்பூர், Singapore, Tamil), .xn--fpcrj9c3d (.భారత్, India, Telugu), .xn--fzc2c9e2c (.ලංකා, Sri Lanka, Sinhala), .xn--gecrj9c (.ભારત, India, Gujarati), .xn--h2brj9c (.भारत, India, Hindi), .xn--lgbbat1ad8j (.الجزائر, Algeria), .xn--mgbayh7gpa (.الاردن, Jordan), .xn--mgbbh1a71e (.بھارت, India, Urdu), .xn--mgbc0a9azcg (.المغرب, Morocco), .xn--ogbpf8fl (.سورية, Syria), .xn--s9brj9c (.ਭਾਰਤ, India, Punjabi), .xn--xkc2al3hye2a (.இலங்கை, Sri Lanka, Tamil), .xn--wgbl6a (.قطر, Qatar), .xn--xkc2dl3a5ee0h (.இந்தியா, India, Tamil), .xn--yfro4i67o (.新加坡, Singapore, Chinese) and .xxx TLD servers. (Closes: #642424), * Added the .priv.at pseudo-SLD server. * Updated the .co, .gf, .gp, .kr, .li, .rs, .ru, .su, .sv, .ua and .xn--p1ai TLD servers. (Closes: #590425, #634830, #627478) * Added a new ASN allocation. * Fixed a typo and -t syntax in whois(1). (Closes: #614973, #632588) * Made whois return an error in some cases, code contributed by David Souther. * Split HAVE_LINUX_CRYPT_GENSALT from HAVE_XCRYPT to support SuSE, which has it builtin in the libc. Added untested support for Solaris' crypt_gensalt(3). This and the following changes have been contributed by Ludwig Nussel of SuSE. * mkpasswd: stop rejecting non-ASCII characters. * mkpasswd: added support for the 2y algorithm, which fixes CVE-2011-2483. * mkpasswd: raised the number of rounds for 2a/2y from 4 to 5, which is the current default. * mkpasswd: removed support for 2 and {SHA}, which actually are not supported by FreeBSD and libxcrypt. - packaging changes * removed patches accepted upstream: whois-5.0.11-mkpasswd-support-Owl-patched-libcrypt.diff whois-5.0.11-mkpasswd-crypt_gensalt-might-change-the-prefix. diff whois-5.0.11-mkpasswd-support-8bit-characters.diff whois-5.0.11-mkpasswd-add-support-for-the-new-2y-blowfish-ta g-CVE-2011-2483.diff whois-5.0.11-mkpasswd-set-default-blowfish-rounds-to-5.diff whois-5.0.11-mkpasswd-remove-obsolete-settings.diff * removed patches no longer required: whois-5.0.11-mkpasswd-fix-compiler-warnings.diff * updated patches: whois-4.7.33-nb.patch to whois-5.0.25-nb.patch * verify source signatures - crypt_gensalt moved to separate library libowcrypt (fate#314945) - update to 5.0.26 [bnc#848594] * Added the .cf TLD server. * Updated the .bi TLD server. * Added a new ASN allocation. - includes changes from 5.0.25 * Added the .ax, .bn, .iq, .pw and .rw TLD servers. * Updated one or more translations. - includes updates changes 5.0.24: * Merged documentation fixes and the whois.conf(5) man page * Added a new ASN allocation. * Updated one or more translations. - includes changes from 5.0.23 * whois.nic.or.kr switched from EUC-KR to UTF-8. - includes changes from 5.0.22 * Fixed cross-compiling - includes changes from 5.0.21 * Fixed parsing of 6to4 addresses * Added the .xn--j1amh (.укр, Ukraine) TLD server. * Updated the .bi, .se and .vn TLD servers. * Removed whois.pandi.or.id from the list of servers which support the RIPE extensions, since it does not anymore and queries are broken. * Updated some disclaimer suppression strings. * Respect DEB_HOST_GNU_TYPE when selecting CC for cross-compiling. - includes changes form 5.0.20 * Updated the .by, .ng, .om, .sm, .tn, .ug and .vn TLD servers. * Added the .bw, .td, .xn--mgb9awbf (عمان., Oman), .xn--mgberp4a5d4ar (.السعودية, Saudi Arabia) and .xn--mgbx4cd0ab (ﻢﻠﻴﺴﻳﺍ., Malaysia) TLD servers. * Removed the .kp, .mc, .rw and .xn--mgba3a4f16a (ایران., Iran) TLD servers. - includes changes from 5.0.19 * Added the .post TLD server. * Updated the .co.za SLD servers. * Added the .alt.za, .net.za and .web.za SLD servers. * whois.ua changed (?) the encoding to utf-8. * Fixed the parsing of 6to4 addresses like whois 2002:xxxx::. - includes changes from 5.0.18 * Updated the .ae and .xn--mgbaam7a8h (.امارات, United Arabs Emirates) TLDs. * Updated the server charset table for .fr and .it. - includes changes from whois 5.0.17 * Updated the .bi, .fo, .gr and .gt TLD servers. * Removed support for recursion of .org queries, it has been a thick registry since 2005. - includes changes from 5.0.16 * Added the .xn--80ao21a (.ҚАЗ, Kazakhstan) TLD server. * Updated the .ec and .ee TLD servers. * Removed the .xn--mgbc0a9azcg (.المغرب, Morocco) and .xn--mgberp4a5d4ar (.السعودية, Saudi Arabia) TLD servers. * Added a new ASN allocation. * Updated one or more translations. - includes changes from 5.0.15 * Added the .xn--mgba3a4f16a (ایران., Iran) TLD server. * Updated the .pe TLD server, this time for real. * Updated one or more translations. - includes changes from 5.0.14 * Added the .sx TLD server. * Updated the .pe TLD server. - includes changes from 5.0.13 * Updated the .hr TLD server. * Improved the package description * Updated the FSF address in licenses. - includes changes from 5.0.12 * Recursion disabled when the query string contains spaces, because probably the query format will not be compatible with the referral server (e.g. whois to rwhois or ARIN to RIPE). * Add the "+" flag by default to queries to whois.arin.net if the argument looks like an IP address. Also add the "a" and "n" flags. No thanks to ARIN for breaking every whois client. * Added the .cv, .lk, .mq, .sy, .so, .biz.ua, .co.ua, .pp.ua, .qa, .xn--3e0b707e (.한국, Korea), .xn--45brj9c (.ভারত, India, Bengali), .xn--90a3ac (.СРБ, Serbia), .xn--clchc0ea0b2g2a9gcd (.சிங்கப்பூர், Singapore, Tamil), .xn--fpcrj9c3d (.భారత్, India, Telugu), .xn--fzc2c9e2c (.ලංකා, Sri Lanka, Sinhala), .xn--gecrj9c (.ભારત, India, Gujarati), .xn--h2brj9c (.भारत, India, Hindi), .xn--lgbbat1ad8j (.الجزائر, Algeria), .xn--mgbayh7gpa (.الاردن, Jordan), .xn--mgbbh1a71e (.بھارت, India, Urdu), .xn--mgbc0a9azcg (.المغرب, Morocco), .xn--ogbpf8fl (.سورية, Syria), .xn--s9brj9c (.ਭਾਰਤ, India, Punjabi), .xn--xkc2al3hye2a (.இலங்கை, Sri Lanka, Tamil), .xn--wgbl6a (.قطر, Qatar), .xn--xkc2dl3a5ee0h (.இந்தியா, India, Tamil), .xn--yfro4i67o (.新加坡, Singapore, Chinese) and .xxx TLD servers. (Closes: #642424), * Added the .priv.at pseudo-SLD server. * Updated the .co, .gf, .gp, .kr, .li, .rs, .ru, .su, .sv, .ua and .xn--p1ai TLD servers. (Closes: #590425, #634830, #627478) * Added a new ASN allocation. * Fixed a typo and -t syntax in whois(1). (Closes: #614973, #632588) * Made whois return an error in some cases, code contributed by David Souther. * Split HAVE_LINUX_CRYPT_GENSALT from HAVE_XCRYPT to support SuSE, which has it builtin in the libc. Added untested support for Solaris' crypt_gensalt(3). This and the following changes have been contributed by Ludwig Nussel of SuSE. * mkpasswd: stop rejecting non-ASCII characters. * mkpasswd: added support for the 2y algorithm, which fixes CVE-2011-2483. * mkpasswd: raised the number of rounds for 2a/2y from 4 to 5, which is the current default. * mkpasswd: removed support for 2 and {SHA}, which actually are not supported by FreeBSD and libxcrypt. - packaging changes * removed patches accepted upstream: whois-5.0.11-mkpasswd-support-Owl-patched-libcrypt.diff whois-5.0.11-mkpasswd-crypt_gensalt-might-change-the-prefix. diff whois-5.0.11-mkpasswd-support-8bit-characters.diff whois-5.0.11-mkpasswd-add-support-for-the-new-2y-blowfish-ta g-CVE-2011-2483.diff whois-5.0.11-mkpasswd-set-default-blowfish-rounds-to-5.diff whois-5.0.11-mkpasswd-remove-obsolete-settings.diff * removed patches no longer required: whois-5.0.11-mkpasswd-fix-compiler-warnings.diff * updated patches: whois-4.7.33-nb.patch to whois-5.0.25-nb.patch * verify source signatures - crypt_gensalt moved to separate library libowcrypt (fate#314945) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-849 - openSUSE 12.2: zypper in -t patch openSUSE-2013-849 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): whois-5.0.26-12.4.1 whois-debuginfo-5.0.26-12.4.1 whois-debugsource-5.0.26-12.4.1 - openSUSE 12.2 (i586 x86_64): whois-5.0.26-10.4.1 whois-debuginfo-5.0.26-10.4.1 whois-debugsource-5.0.26-10.4.1 References: http://support.novell.com/security/cve/CVE-2011-2483.html https://bugzilla.novell.com/848594

1 0

openSUSE-SU-2013:1664-1: moderate: update for apache2-mod_fcgid
by opensuse-security＠opensuse.org 13 Nov '13

13 Nov '13

openSUSE Security Update: update for apache2-mod_fcgid ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1664-1 Rating: moderate References: #844935 Cross-References: CVE-2013-4365 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: security issue fixed in apache2-mod_fcgid: loop counter handled incorrectly, leading to SEGV and "Premature end of script headers" errors. [bnc#844935] CVE-2013-4365 This patch will be obsoleted by the next version update (to 2.3.9 or higher). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-846 - openSUSE 12.2: zypper in -t patch openSUSE-2013-846 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): apache2-mod_fcgid-2.3.6-11.8.1 apache2-mod_fcgid-debuginfo-2.3.6-11.8.1 apache2-mod_fcgid-debugsource-2.3.6-11.8.1 - openSUSE 12.2 (i586 x86_64): apache2-mod_fcgid-2.3.6-9.8.1 apache2-mod_fcgid-debuginfo-2.3.6-9.8.1 apache2-mod_fcgid-debugsource-2.3.6-9.8.1 References: http://support.novell.com/security/cve/CVE-2013-4365.html https://bugzilla.novell.com/844935

1 0

openSUSE-SU-2013:1663-1: moderate: update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 13 Nov '13

13 Nov '13

openSUSE Security Update: update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1663-1 Rating: moderate References: #846999 Cross-References: CVE-2013-3829 CVE-2013-4002 CVE-2013-5772 CVE-2013-5774 CVE-2013-5778 CVE-2013-5780 CVE-2013-5782 CVE-2013-5783 CVE-2013-5784 CVE-2013-5790 CVE-2013-5797 CVE-2013-5800 CVE-2013-5802 CVE-2013-5803 CVE-2013-5804 CVE-2013-5805 CVE-2013-5806 CVE-2013-5809 CVE-2013-5814 CVE-2013-5817 CVE-2013-5820 CVE-2013-5823 CVE-2013-5825 CVE-2013-5829 CVE-2013-5830 CVE-2013-5840 CVE-2013-5842 CVE-2013-5849 CVE-2013-5850 CVE-2013-5851 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes 30 vulnerabilities is now available. Description: Update to icedtea 2.4.3 (bnc#846999) synchronized OpenJDK 7 support with the upstream u45 b31 fixes the following issues: - S8006900, CVE-2013-3829: Add new date/time capability - S8008589: Better MBean permission validation - S8011071, CVE-2013-5780: Better crypto provider handling - S8011081, CVE-2013-5772: Improve jhat - S8011157, CVE-2013-5814: Improve CORBA portablility - S8012071, CVE-2013-5790: Better Building of Beans - S8012147: Improve tool support - S8012277: CVE-2013-5849: Improve AWT DataFlavor - S8012425, CVE-2013-5802: Transform TransformerFactory - S8013503, CVE-2013-5851: Improve stream factories - S8013506: Better Pack200 data handling - S8013510, CVE-2013-5809: Augment image writing code - S8013514: Improve stability of cmap class - S8013739, CVE-2013-5817: Better LDAP resource management - S8013744, CVE-2013-5783: Better tabling for AWT - S8014085: Better serialization support in JMX classes - S8014093, CVE-2013-5782: Improve parsing of images - S8014098: Better profile validation - S8014102, CVE-2013-5778: Improve image conversion - S8014341, CVE-2013-5803: Better service from Kerberos servers - S8014349, CVE-2013-5840: (cl) Class.getDeclaredClass problematic in some class loader configurations - S8014530, CVE-2013-5825: Better digital signature processing - S8014534: Better profiling support - S8014987, CVE-2013-5842: Augment serialization handling - S8015614: Update build settings - S8015731: Subject java.security.auth.subject to improvements - S8015743, CVE-2013-5774: Address internet addresses - S8016256: Make finalization final - S8016653, CVE-2013-5804: javadoc should ignore ignoreable characters in names - S8016675, CVE-2013-5797: Make Javadoc pages more robust - S8017196, CVE-2013-5850: Ensure Proxies are handled appropriately - S8017287, CVE-2013-5829: Better resource disposal - S8017291, CVE-2013-5830: Cast Proxies Aside - S8017298, CVE-2013-4002: Better XML support - S8017300, CVE-2013-5784: Improve Interface Implementation - S8017505, CVE-2013-5820: Better Client Service - S8019292: Better Attribute Value Exceptions - S8019617: Better view of objects - S8020293: JVM crash - S8021275, CVE-2013-5805: Better screening for ScreenMenu - S8021282, CVE-2013-5806: Better recycling of object instances - S8021286: Improve MacOS resourcing - S8021290, CVE-2013-5823: Better signature validation - S8022931, CVE-2013-5800: Enhance Kerberos exceptions - S8022940: Enhance CORBA translations - S8023683: Enhance class file parsing * Backports - S6614237: missing codepage Cp290 at java runtime - S8005932: Java 7 on mac os x only provides text clipboard formats - S8014046: (process) Runtime.exec(String) fails if command contains spaces [win] - S8015144: Performance regression in ICU OpenType Layout library - S8015965: (process) Typo in name of property to allow ambiguous commands - S8015978: Incorrect transformation of XPath expression "string(-0)" - S8016357: Update hotspot diagnostic class - S8019584: javax/management/remote/mandatory/loading/MissingClassTest.j ava failed in nightly against jdk7u45: java.io.InvalidObjectException: Invalid notification: null - S8019969: nioNetworkChannelInet6/SetOptionGetOptionTestInet6 test case crashes - S8020032: 7u fastdebug doesn't generate fastdebuginfo file - S8020085: Linux ARM build failure for 7u45 - S8020088: Increment minor version of HSx for 7u45 and initialize the build number - S8020551: increment hsx build to b03 for 7u45-b03 - S8020943: Memory leak when GCNotifier uses create_from_platform_dependent_str() - S8021287: Improve MacOS resourcing - S8021355: REGRESSION: Five closed/java/awt/SplashScreen tests fail since 7u45 b01 on Linux, Solaris - S8021360: object not exported" on start of JMXConnectorServer for RMI-IIOP protocol with security manager - S8021366: java_util/Properties/PropertiesWithOtherEncodings fails during 7u45 nightly testing - S8021577: JCK test api/javax_management/jmx_serial/modelmbean/ModelMBeanNotific ationInfo/serial/index.html#Input has failed since jdk 7u45 b01 - S8021899: Re-adjust fix of # 8020498 in 7u45 after mergeing 7u40 - S8021901: Increment hsx build to b05 for 7u45-b05 - S8021933: Add extra check for fix # JDK-8014530 - S8021969: The index_AccessAllowed jnlp can not load successfully with exception thrown in the log. - S8022066: Evaluation of method reference to signature polymorphic method crashes VM - S8022086: Fixing licence of newly added files - S8022254: Remove incorrect jdk7u45-b05 tag from jdk7u-cpu forest - S8022661: InetAddress.writeObject() performs flush() on object output stream - S8022682: Supporting XOM - S8022808: Kitchensink hangs on macos - S8022856: 7u45 l10n resource file translation update - S8023323: Increment hsx build to b06 for 7u45-b08 - S8023457: Event based tracing framework needs a mutex for thread groups - S8023478: Test fails with HS crash in GCNotifier. - S8023741: Increment hsx 24.45 build to b07 for 7u45-b09 - S8023771: when USER_RELEASE_SUFFIX is set in order to add a string to java -version, build number in the bundles names should not be changed to b00 - S8023888: Increment hsx 24.45 build to b08 for 7u45-b10 - S8023964: java/io/IOException/LastErrorString.java should be @ignore-d - S8024369: Increment build # of hs24.0 to b57 for 7u40-b61 psu - S8024668: api/java_nio/charset/Charset/index.html#Methods JCK-runtime test fails with 7u45 b11 - S8024697: Fix for 8020983 causes Xcheck:jni warnings - S8024863: X11: Support GNOME Shell as mutter - S8024883: (se) SelectableChannel.register throws NPE if fd >= 64k (lnx) - S8025128: File.createTempFile fails if prefix is absolute path - S8025170: jdk7u51 7u-1-prebuild is failing since 9/19 * Bug fixes - PR1400: Menu of maximized AWT window not working in Mate - Update to icedtea 2.4.2 * System LCMS 2 support again enabled by default, requiring 2.5 or above. * OpenJDK - S7122222: GC log is limited to 2G for 32-bit - S7162400: Intermittent java.io.IOException: Bad file number during HotSpotVirtualMachine.executeCommand - S7165807: Non optimized initialization of NSS crypto library leads to scalability issues - S7199324: IPv6: JMXConnectorServer.getConnectionIDs() return IDs contradicting to address grammar - S8001345: VM crashes with assert(n->outcnt() != 0 || C->top() == n || n->is_Proj()) failed: No dead instructions after post-alloc - S8001424: G1: Rename certain G1-specific flags - S8001425: G1: Change the default values for certain G1 specific flags - S8004859: Graphics.getClipBounds/getClip return difference nonequivalent bounds, depending from transform - S8005019: JTable passes row index instead of length when inserts selection interval - S8005194: [parfait] #353 sun/awt/image/jpeg/imageioJPEG.c Memory leak of pointer 'scale' allocated with calloc() - S8006941: [macosx] Deadlock in drag and drop - S8007898: Incorrect optimization of Memory Barriers in Matcher::post_store_load_barrier() - S8009168: accessibility.properties syntax issue - S8009985: [parfait] Uninitialised variable at jdk/src/solaris/native/com/sun/management/UnixOperatingSyste m_md.c - S8011064: Some tests have failed with SIGSEGV on arm-hflt on build b82 - S8011569: ARM -- avoid native stack walking - S8011760: assert(delta != 0) failed: dup pointer in MemBaseline::malloc_sort_by_addr - S8012144: multiple SIGSEGVs fails on staxf - S8012156: tools/javac/file/zip/T6865530.java fails for win32/64 - S8012241: NMT huge memory footprint, it usually leads to OOME - S8012366: Fix for 8007815 breaks down when only building OpenJDK (without deploy and install forests) - S8013546: compiler/8011901/Test8011901.java fails with CompilationError: Compilation failed - S8013719: Increment build # of hs23.21 to b02 - S8013791: G1: G1CollectorPolicy::initialize_flags() may set min_alignment > max_alignment - S8014264: The applet pathguy_TimeDead throws java.lang.NullPointerException in java console once click drop-down check box. - S8014312: Fork hs23.25 hsx from hs23.21 for jdk7u25 and reinitialize build number - S8014805: NPE is thrown during certpath validation if certificate does not have AuthorityKeyIdentifier extension - S8014850: Third Party License Readme updates for 7u40 - S8014925: Disable sun.reflect.Reflection.getCallerClass(int) with a temporary switch to re-enable it - S8015237: Parallelize string table scanning during strong root processing - S8015411: Bump the hsx build number for 7u21-b50 for customer - S8015441: runThese crashed with assert(opcode == Op_ConP || opcode == Op_ThreadLocal || opcode == Op_CastX2P ..) failed: sanity - S8015576: CMS: svc agent throws java.lang.RuntimeException: No type named "FreeList" in database - S8015668: overload resolution: performance regression in JDK 7 - S8015884: runThese crashed with SIGSEGV, hs_err has an error instead of stacktrace - S8016074: NMT: assertion failed: assert(thread->thread_state() == from) failed: coming from wrong thread state - S8016102: Increment build # of hs23.25 to b02 for 7u25-b31 psu - S8016131: nsk/sysdict/vm/stress/chain tests crash the VM in 'entry_frame_is_first()' - S8016133: Regression: diff. behavior with user-defined SAXParser - S8016157: During CTW: C2: assert(!def_outside->member(r)) failed: Use of external LRG overlaps the same LRG defined in this block - S8016331: Minor issues in event tracing metadata - S8016648: FEATURE_SECURE_PROCESSING set to true or false causes SAXParseException to be thrown - S8016734: Remove extra code due to duplicated push - S8016737: After clicking on "Print UNCOLLATED" button, the print out come in order 'Page 1', 'Page 2', 'Page 1' - S8016740: assert in GC_locker from PSOldGen::expand with -XX:+PrintGCDetails and Verbose - S8016767: Provide man pages generated from DARB for OpenJDK - S8017070: G1: assert(_card_counts[card_num] <= G1ConcRSHotCardLimit) failed - S8017159: Unexclude sun/tools/JMAP/Basic.sh test - S8017173: XMLCipher with RSA_OAEP Key Transport algorithm can't be instantiated - S8017174: NPE when using Logger.getAnonymousLogger or LogManager.getLogManager().getLogger - S8017189: [macosx] AWT program menu disabled on Mac - S8017252: new hotspot build - hs24-b51 - S8017478: Kitchensink crashed with SIGSEGV in BaselineReporter::diff_callsites - S8017483: G1 tests fail with native OOME on Solaris x86 after HeapBaseMinAddress has been increased - S8017510: Add a regression test for 8005956 - S8017566: Backout 8000450 - Cannot access to com.sun.corba.se.impl.orb.ORBImpl - S8017588: SA: jstack -l throws UnalignedAddressException while attaching to core file for java that was started with CMS GC - S8019155: Update makefiles with correct jfr packages - S8019201: Regression: java.awt.image.ConvolveOp throws java.awt.image.ImagingOpException - S8019236: [macosx] Add javadoc to the handleWindowFocusEvent in CEmbeddedFrame - S8019265: [macosx] apple.laf.useScreenMenuBar regression comparing with jdk6 - S8019298: new hotspot build - hs24-b52 - S8019381: HashMap.isEmpty is non-final, potential issues for get/remove - S8019541: 7u40 l10n resource file translation update - S8019587: [macosx] Possibility to set the same frame for the different screens - S8019625: Test compiler/8005956/PolynomialRoot.java timeouts on Solaris SPARCs - S8019628: [macosx] closed/java/awt/Modal/BlockedMouseInputTest/BlockedMouseInpu tTest.html failed since 7u40b30 on MacOS - S8019826: Test com/sun/management/HotSpotDiagnosticMXBean/SetVMOption.java fails with NPE - S8019933: new hotspot build - hs24-b53 - S8019979: Replace CheckPackageAccess test with better one from closed repo - S8020038: [macosx] Incorrect usage of invokeLater() and likes in callbacks called via JNI from AppKit thread - S8020054: (tz) Support tzdata2013d - S8020155: PSR:PERF G1 not collecting old regions when humongous allocations interfer - S8020215: Different execution plan when using JIT vs interpreter - S8020228: Restore the translated version of logging_xx.properties - S8020298: [macosx] Incorrect merge in the lwawt code - S8020319: Update Japanese man pages for 7u40 - S8020371: [macosx] applets with Drag and Drop fail with IllegalArgumentException - S8020381: new hotspot build - hs24-b54 - S8020425: Product options incorrectly removed in minor version - S8020430: NullPointerException in xml sqe nightly result on 2013-07-12 - S8020433: Crash when using -XX:+RestoreMXCSROnJNICalls - S8020498: Crash when both libnet.so and libmawt.so are loaded - S8020525: Increment build # of hs23.25 to b03 for 7u25-b34 psu - S8020547: Event based tracing needs a UNICODE string type - S8020625: [TESTBUG] java/util/HashMap/OverrideIsEmpty.java doesn't compile for jdk7u - S8020701: Avoid crashes in WatcherThread - S8020796: new hotspot build - hs24-b55 - S8020811: [macosx] Merge fault 7u25-7u40: Missed focus fix JDK-8012330 - S8020940: Valid OCSP responses are rejected for backdated enquiries - S8020983: OutOfMemoryError caused by non garbage collected JPEGImageWriter Instances - S8021008: Provide java and jcmd man pages for Mac (OpenJDK) - S8021148: Regression in SAXParserImpl in 7u40 b34 (NPE) - S8021353: Event based tracing is missing thread exit - S8021381: JavaFX scene included in Swing JDialog not starting from Web Start - S8021565: new hotspot build - hs24-b56 - S8021771: warning stat64 is deprecated - when building on OSX 10.7.5 - S8021946: Disabling sun.reflect.Reflection.getCallerCaller(int) by default breaks several frameworks and libraries - S8022548: SPECJVM2008 has errors introduced in 7u40-b34 - S8023751: Need to backout 8020943, was pushed to hs24 without approval - S8024914: Swapped usage of idx_t and bm_word_t types in bitMap.inline.hpp * New features - RH991170: java does not use correct kerberos credential cache - PR1536: Allow use of system Kerberos to obtain cache location - PR1551: Add build support for Zero AArch64 - PR1552: Add -D_LITTLE_ENDIAN for ARM architectures. - PR1553: Add Debian AArch64 support - PR1554: Fix build on Mac OS X * Bug fixes - RH661505: JPEGs with sRGB IEC61966-2.1 color profiles have wrong colors - RH995488: Java thinks that the default timezone is Busingen instead of Zurich - Cleanup file resources properly in TimeZone_md. - PR1410: Icedtea 2.3.9 fails to build using icedtea 1.12.4 - G477456: emerge fails on pax system: java attempts RWX map, paxctl -m missing - G478484: patches/boot/ecj-diamond.patch FAILED - Fix Zero following changes to entry_frame_call_wrapper in 8016131 - Set ZERO_BUILD in flags.make so it is set on rebuilds - Cast should use same type as GCDrainStackTargetSize (uintx). - Add casts to fix build on S390 * JamVM - JSR292: Invoke Dynamic - sun.misc.Unsafe: additional methods get/putAddress: allows JamVM with OpenJDK 7/8 to run recent versions of JEdit. - FreeClassData: adjust method count for Miranda methods * Patches changes (mostly sync with Fedora) * removed java-1.7.0-openjdk-arm-fixes.patch, fixed upstream * removed java-1.7.0-openjdk-fork.patch, fixed upstream * renamed java-1.7.0-openjdk-bitmap.patch to zero-s8024914.patch * renamed java-1.7.0-openjdk-size_t.patch to zero-size_t.patch * added PStack-808293.patch * added RH661505-toBeReverted.patch * added abrt_friendly_hs_log_jdk7.patch * added gstackbounds.patch * added java-1.7.0-openjdk-freetype-check-fix.patch * added pulse-soundproperties.patch * added rhino.patch * added zero-entry_frame_call_wrapper.patch * added zero-gcdrainstacktargetsize.patch * added zero-zero_build.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-847 - openSUSE 12.2: zypper in -t patch openSUSE-2013-847 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): java-1_7_0-openjdk-1.7.0.6-8.24.2 java-1_7_0-openjdk-debuginfo-1.7.0.6-8.24.2 java-1_7_0-openjdk-debugsource-1.7.0.6-8.24.2 java-1_7_0-openjdk-demo-1.7.0.6-8.24.2 java-1_7_0-openjdk-demo-debuginfo-1.7.0.6-8.24.2 java-1_7_0-openjdk-devel-1.7.0.6-8.24.2 java-1_7_0-openjdk-devel-debuginfo-1.7.0.6-8.24.2 java-1_7_0-openjdk-javadoc-1.7.0.6-8.24.2 java-1_7_0-openjdk-src-1.7.0.6-8.24.2 - openSUSE 12.2 (i586 x86_64): java-1_7_0-openjdk-1.7.0.6-3.48.2 java-1_7_0-openjdk-debuginfo-1.7.0.6-3.48.2 java-1_7_0-openjdk-debugsource-1.7.0.6-3.48.2 java-1_7_0-openjdk-demo-1.7.0.6-3.48.2 java-1_7_0-openjdk-demo-debuginfo-1.7.0.6-3.48.2 java-1_7_0-openjdk-devel-1.7.0.6-3.48.2 java-1_7_0-openjdk-devel-debuginfo-1.7.0.6-3.48.2 java-1_7_0-openjdk-javadoc-1.7.0.6-3.48.2 java-1_7_0-openjdk-src-1.7.0.6-3.48.2 References: http://support.novell.com/security/cve/CVE-2013-3829.html http://support.novell.com/security/cve/CVE-2013-4002.html http://support.novell.com/security/cve/CVE-2013-5772.html http://support.novell.com/security/cve/CVE-2013-5774.html http://support.novell.com/security/cve/CVE-2013-5778.html http://support.novell.com/security/cve/CVE-2013-5780.html http://support.novell.com/security/cve/CVE-2013-5782.html http://support.novell.com/security/cve/CVE-2013-5783.html http://support.novell.com/security/cve/CVE-2013-5784.html http://support.novell.com/security/cve/CVE-2013-5790.html http://support.novell.com/security/cve/CVE-2013-5797.html http://support.novell.com/security/cve/CVE-2013-5800.html http://support.novell.com/security/cve/CVE-2013-5802.html http://support.novell.com/security/cve/CVE-2013-5803.html http://support.novell.com/security/cve/CVE-2013-5804.html http://support.novell.com/security/cve/CVE-2013-5805.html http://support.novell.com/security/cve/CVE-2013-5806.html http://support.novell.com/security/cve/CVE-2013-5809.html http://support.novell.com/security/cve/CVE-2013-5814.html http://support.novell.com/security/cve/CVE-2013-5817.html http://support.novell.com/security/cve/CVE-2013-5820.html http://support.novell.com/security/cve/CVE-2013-5823.html http://support.novell.com/security/cve/CVE-2013-5825.html http://support.novell.com/security/cve/CVE-2013-5829.html http://support.novell.com/security/cve/CVE-2013-5830.html http://support.novell.com/security/cve/CVE-2013-5840.html http://support.novell.com/security/cve/CVE-2013-5842.html http://support.novell.com/security/cve/CVE-2013-5849.html http://support.novell.com/security/cve/CVE-2013-5850.html http://support.novell.com/security/cve/CVE-2013-5851.html https://bugzilla.novell.com/846999

1 0

openSUSE-RU-2013:1658-1: pm-utils: Console loglevel (in kernel.printk) was set too high after resuming from sleep or hibernation.
by maintenance＠opensuse.org 12 Nov '13

12 Nov '13

openSUSE Recommended Update: pm-utils: Console loglevel (in kernel.printk) was set too high after resuming from sleep or hibernation. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1658-1 Rating: low References: #807726 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with pm-utils: - bnc#807726: Console loglevel (in kernel.printk) was set too high after resuming from sleep or hibernation. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-838 - openSUSE 12.2: zypper in -t patch openSUSE-2013-838 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): pm-utils-1.4.1-26.21.1 pm-utils-debuginfo-1.4.1-26.21.1 pm-utils-debugsource-1.4.1-26.21.1 pm-utils-ndiswrapper-1.4.1-26.21.1 - openSUSE 12.2 (i586 x86_64): pm-utils-1.4.1-18.28.1 pm-utils-debuginfo-1.4.1-18.28.1 pm-utils-debugsource-1.4.1-18.28.1 pm-utils-ndiswrapper-1.4.1-18.28.1 References: https://bugzilla.novell.com/807726

1 0

openSUSE-RU-2013:1657-1: tightvnc: Fix post installation script.
by maintenance＠opensuse.org 12 Nov '13

12 Nov '13

openSUSE Recommended Update: tightvnc: Fix post installation script. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1657-1 Rating: low References: #833869 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with tightvnc: - bnc#833869: Fix post installation script. Rather old script that is adding "-noreset" was incorrectly adding it to both vnc and vnchttp services. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-837 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): tightvnc-1.3.10-10.8.1 tightvnc-debuginfo-1.3.10-10.8.1 tightvnc-debugsource-1.3.10-10.8.1 References: https://bugzilla.novell.com/833869

1 0

openSUSE-RU-2013:1653-1: moderate: Softwarestack update 11/13
by maintenance＠opensuse.org 11 Nov '13

11 Nov '13

openSUSE Recommended Update: Softwarestack update 11/13 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1653-1 Rating: moderate References: #575096 #834376 #844373 #845619 #846565 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update fixes the following issues with the software stack: zypper: - bnc#844373: + Fix detection of multiversion packages in transaction summary + Improve prompt with more options hidden behind '?' - bnc#845619: Fix message typo - bnc#575096: Fix 'zypper --root sh' creating the zypp lockfile outside the chroot - Update translations libzypp: - bnc#846565: Always properly initialize pool storage - Add Package isCached and cachedLocation methods - Fix string hexdecoding - Update translations libsolv: - bnc#834376: Fix pattern obsoleting real packages Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-827 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libsolv-debugsource-0.3.2-2.14.1 libsolv-demo-0.3.2-2.14.1 libsolv-demo-debuginfo-0.3.2-2.14.1 libsolv-devel-0.3.2-2.14.1 libsolv-devel-debuginfo-0.3.2-2.14.1 libsolv-tools-0.3.2-2.14.1 libsolv-tools-debuginfo-0.3.2-2.14.1 libzypp-12.16.1-1.21.2 libzypp-debuginfo-12.16.1-1.21.2 libzypp-debugsource-12.16.1-1.21.2 libzypp-devel-12.16.1-1.21.2 perl-solv-0.3.2-2.14.1 perl-solv-debuginfo-0.3.2-2.14.1 python-solv-0.3.2-2.14.1 python-solv-debuginfo-0.3.2-2.14.1 ruby-solv-0.3.2-2.14.1 ruby-solv-debuginfo-0.3.2-2.14.1 zypper-1.8.18-1.14.2 zypper-debuginfo-1.8.18-1.14.2 zypper-debugsource-1.8.18-1.14.2 - openSUSE 12.3 (noarch): zypper-aptitude-1.8.18-1.14.2 zypper-log-1.8.18-1.14.2 References: https://bugzilla.novell.com/575096 https://bugzilla.novell.com/834376 https://bugzilla.novell.com/844373 https://bugzilla.novell.com/845619 https://bugzilla.novell.com/846565

1 0