November 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:1731-1: release-notes-openSUSE: Update to 13.1.7
by maintenance＠opensuse.org 19 Nov '13

19 Nov '13

openSUSE Recommended Update: release-notes-openSUSE: Update to 13.1.7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1731-1 Rating: low References: #847801 #849112 #850052 #850053 #850054 #850056 #850057 #850058 #850258 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: This update provides updated translations, new entries and updated entries: - bnc#850258: Update to 13.1.7 + Updated entries: * bnc#849112: Adobe Reader (acroread) and Other PDF Readers + New entries: * bnc#850052: Booting When in Secure Boot Mode * bnc#850058: AppArmor and Permission Settings * bnc#850057: Skype * bnc#850056: UEFI, GPT, and MS-DOS Partitions * bnc#850054: Duplicated Network Interfaces * bnc#850053: Garbage on the Screen During Installation with the Nouveau Driver * bnc#847801: Locate: Replacing findutils-locate by mlocate Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-877 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): release-notes-openSUSE-13.1.7-10.1 References: https://bugzilla.novell.com/847801 https://bugzilla.novell.com/849112 https://bugzilla.novell.com/850052 https://bugzilla.novell.com/850053 https://bugzilla.novell.com/850054 https://bugzilla.novell.com/850056 https://bugzilla.novell.com/850057 https://bugzilla.novell.com/850058 https://bugzilla.novell.com/850258

1 0

openSUSE-SU-2013:1730-1: moderate: update for mozilla-nss and mozilla-nspr
by opensuse-security＠opensuse.org 19 Nov '13

19 Nov '13

openSUSE Security Update: update for mozilla-nss and mozilla-nspr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1730-1 Rating: moderate References: #850148 Cross-References: CVE-2013-5605 Affected Products: openSUSE 13.1 openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: the following security issues were fixed in mozilla-nss and mozilla nspr: - mozilla-nss: + update to 3.15.3 (bnc#850148) * CERT_VerifyCert returns SECSuccess (saying certificate is good) even for bad certificates, when the CERTVerifyLog log parameter is given (bmo#910438) * NSS advertises TLS 1.2 ciphersuites in a TLS 1.1 ClientHello (bmo#919677) * fix CVE-2013-5605 - mozilla-nspr: + update to version 4.10.2 relevant changes: * bmo#770534: possible pointer overflow in PL_ArenaAllocate() * bmo#888546: ptio.c:PR_ImportUDPSocket doesn't work Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-878 - openSUSE 12.3: zypper in -t patch openSUSE-2013-878 - openSUSE 12.2: zypper in -t patch openSUSE-2013-878 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libfreebl3-3.15.3-4.2 libfreebl3-debuginfo-3.15.3-4.2 libsoftokn3-3.15.3-4.2 libsoftokn3-debuginfo-3.15.3-4.2 mozilla-nspr-4.10.2-4.1 mozilla-nspr-debuginfo-4.10.2-4.1 mozilla-nspr-debugsource-4.10.2-4.1 mozilla-nspr-devel-4.10.2-4.1 mozilla-nss-3.15.3-4.2 mozilla-nss-certs-3.15.3-4.2 mozilla-nss-certs-debuginfo-3.15.3-4.2 mozilla-nss-debuginfo-3.15.3-4.2 mozilla-nss-debugsource-3.15.3-4.2 mozilla-nss-devel-3.15.3-4.2 mozilla-nss-sysinit-3.15.3-4.2 mozilla-nss-sysinit-debuginfo-3.15.3-4.2 mozilla-nss-tools-3.15.3-4.2 mozilla-nss-tools-debuginfo-3.15.3-4.2 - openSUSE 13.1 (x86_64): libfreebl3-32bit-3.15.3-4.2 libfreebl3-debuginfo-32bit-3.15.3-4.2 libsoftokn3-32bit-3.15.3-4.2 libsoftokn3-debuginfo-32bit-3.15.3-4.2 mozilla-nspr-32bit-4.10.2-4.1 mozilla-nspr-debuginfo-32bit-4.10.2-4.1 mozilla-nss-32bit-3.15.3-4.2 mozilla-nss-certs-32bit-3.15.3-4.2 mozilla-nss-certs-debuginfo-32bit-3.15.3-4.2 mozilla-nss-debuginfo-32bit-3.15.3-4.2 mozilla-nss-sysinit-32bit-3.15.3-4.2 mozilla-nss-sysinit-debuginfo-32bit-3.15.3-4.2 - openSUSE 12.3 (i586 x86_64): libfreebl3-3.15.3-1.20.2 libfreebl3-debuginfo-3.15.3-1.20.2 libsoftokn3-3.15.3-1.20.2 libsoftokn3-debuginfo-3.15.3-1.20.2 mozilla-nspr-4.10.2-1.22.1 mozilla-nspr-debuginfo-4.10.2-1.22.1 mozilla-nspr-debugsource-4.10.2-1.22.1 mozilla-nspr-devel-4.10.2-1.22.1 mozilla-nss-3.15.3-1.20.2 mozilla-nss-certs-3.15.3-1.20.2 mozilla-nss-certs-debuginfo-3.15.3-1.20.2 mozilla-nss-debuginfo-3.15.3-1.20.2 mozilla-nss-debugsource-3.15.3-1.20.2 mozilla-nss-devel-3.15.3-1.20.2 mozilla-nss-sysinit-3.15.3-1.20.2 mozilla-nss-sysinit-debuginfo-3.15.3-1.20.2 mozilla-nss-tools-3.15.3-1.20.2 mozilla-nss-tools-debuginfo-3.15.3-1.20.2 - openSUSE 12.3 (x86_64): libfreebl3-32bit-3.15.3-1.20.2 libfreebl3-debuginfo-32bit-3.15.3-1.20.2 libsoftokn3-32bit-3.15.3-1.20.2 libsoftokn3-debuginfo-32bit-3.15.3-1.20.2 mozilla-nspr-32bit-4.10.2-1.22.1 mozilla-nspr-debuginfo-32bit-4.10.2-1.22.1 mozilla-nss-32bit-3.15.3-1.20.2 mozilla-nss-certs-32bit-3.15.3-1.20.2 mozilla-nss-certs-debuginfo-32bit-3.15.3-1.20.2 mozilla-nss-debuginfo-32bit-3.15.3-1.20.2 mozilla-nss-sysinit-32bit-3.15.3-1.20.2 mozilla-nss-sysinit-debuginfo-32bit-3.15.3-1.20.2 - openSUSE 12.2 (i586 x86_64): libfreebl3-3.15.3-2.31.2 libfreebl3-debuginfo-3.15.3-2.31.2 libsoftokn3-3.15.3-2.31.2 libsoftokn3-debuginfo-3.15.3-2.31.2 mozilla-nspr-4.10.2-1.24.1 mozilla-nspr-debuginfo-4.10.2-1.24.1 mozilla-nspr-debugsource-4.10.2-1.24.1 mozilla-nspr-devel-4.10.2-1.24.1 mozilla-nss-3.15.3-2.31.2 mozilla-nss-certs-3.15.3-2.31.2 mozilla-nss-certs-debuginfo-3.15.3-2.31.2 mozilla-nss-debuginfo-3.15.3-2.31.2 mozilla-nss-debugsource-3.15.3-2.31.2 mozilla-nss-devel-3.15.3-2.31.2 mozilla-nss-sysinit-3.15.3-2.31.2 mozilla-nss-sysinit-debuginfo-3.15.3-2.31.2 mozilla-nss-tools-3.15.3-2.31.2 mozilla-nss-tools-debuginfo-3.15.3-2.31.2 - openSUSE 12.2 (x86_64): libfreebl3-32bit-3.15.3-2.31.2 libfreebl3-debuginfo-32bit-3.15.3-2.31.2 libsoftokn3-32bit-3.15.3-2.31.2 libsoftokn3-debuginfo-32bit-3.15.3-2.31.2 mozilla-nspr-32bit-4.10.2-1.24.1 mozilla-nspr-debuginfo-32bit-4.10.2-1.24.1 mozilla-nss-32bit-3.15.3-2.31.2 mozilla-nss-certs-32bit-3.15.3-2.31.2 mozilla-nss-certs-debuginfo-32bit-3.15.3-2.31.2 mozilla-nss-debuginfo-32bit-3.15.3-2.31.2 mozilla-nss-sysinit-32bit-3.15.3-2.31.2 mozilla-nss-sysinit-debuginfo-32bit-3.15.3-2.31.2 References: http://support.novell.com/security/cve/CVE-2013-5605.html https://bugzilla.novell.com/850148

1 0

openSUSE-SU-2013:1729-1: moderate: chromium: 30.0.1599.101 version
by opensuse-security＠opensuse.org 19 Nov '13

19 Nov '13

openSUSE Security Update: chromium: 30.0.1599.101 version ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1729-1 Rating: moderate References: #849715 Cross-References: CVE-2013-2925 CVE-2013-2926 CVE-2013-2927 CVE-2013-2928 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Chromium was updated to 30.0.1599.114: Stable Channel update: fix build for 32bit systems - Update to Chromium 30.0.1599.101 - Security Fixes: + CVE-2013-2925: Use after free in XHR + CVE-2013-2926: Use after free in editing + CVE-2013-2927: Use after free in forms. + CVE-2013-2928: Various fixes from internal audits, fuzzing and other initiatives. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-876 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): chromedriver-30.0.1599.114-1.50.1 chromedriver-debuginfo-30.0.1599.114-1.50.1 chromium-30.0.1599.114-1.50.1 chromium-debuginfo-30.0.1599.114-1.50.1 chromium-debugsource-30.0.1599.114-1.50.1 chromium-desktop-gnome-30.0.1599.114-1.50.1 chromium-desktop-kde-30.0.1599.114-1.50.1 chromium-ffmpegsumo-30.0.1599.114-1.50.1 chromium-ffmpegsumo-debuginfo-30.0.1599.114-1.50.1 chromium-suid-helper-30.0.1599.114-1.50.1 chromium-suid-helper-debuginfo-30.0.1599.114-1.50.1 References: http://support.novell.com/security/cve/CVE-2013-2925.html http://support.novell.com/security/cve/CVE-2013-2926.html http://support.novell.com/security/cve/CVE-2013-2927.html http://support.novell.com/security/cve/CVE-2013-2928.html https://bugzilla.novell.com/849715

1 0

openSUSE-RU-2013:1727-1: mlterm: fix missing biwidth characters as default with X11 core fonts
by maintenance＠opensuse.org 18 Nov '13

18 Nov '13

openSUSE Recommended Update: mlterm: fix missing biwidth characters as default with X11 core fonts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1727-1 Rating: low References: #849342 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with mlterm: - bnc#849342: + Fix missing biwidth characeters as default with X11 core fonts + Update font and aafont config files to use FreeMono and IPAGothic in etc.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-867 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): mlterm-3.2.2-2.4.1 mlterm-debuginfo-3.2.2-2.4.1 mlterm-debugsource-3.2.2-2.4.1 mlterm-m17n-3.2.2-2.4.1 mlterm-m17n-debuginfo-3.2.2-2.4.1 mlterm-scim-3.2.2-2.4.1 mlterm-scim-debuginfo-3.2.2-2.4.1 mlterm-uim-3.2.2-2.4.1 mlterm-uim-debuginfo-3.2.2-2.4.1 References: https://bugzilla.novell.com/849342

1 0

openSUSE-SU-2013:1726-1: important: openssh: security fix for remote code execution with AES-GCM
by opensuse-security＠opensuse.org 18 Nov '13

18 Nov '13

openSUSE Security Update: openssh: security fix for remote code execution with AES-GCM ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1726-1 Rating: important References: #849536 Cross-References: CVE-2013-4548 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: openssh was updated to fix a memory corruption when AES-GCM is used which could lead to remote code execution after successful authentication. (CVE-2013-4548) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-875 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): openssh-6.2p2-3.4.1 openssh-askpass-gnome-6.2p2-3.4.1 openssh-askpass-gnome-debuginfo-6.2p2-3.4.1 openssh-debuginfo-6.2p2-3.4.1 openssh-debugsource-6.2p2-3.4.1 References: http://support.novell.com/security/cve/CVE-2013-4548.html https://bugzilla.novell.com/849536

1 0

openSUSE-RU-2013:1725-1: subversion: update to 1.8.4
by maintenance＠opensuse.org 18 Nov '13

18 Nov '13

openSUSE Recommended Update: subversion: update to 1.8.4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1725-1 Rating: low References: #847103 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with subversion: - bnc#847103: update to 1.8.4 + Client- and server-side bugfixes: * fix assertion on urls of the form 'file://./' * translation updates for Swedish + Client-side bugfixes: * revert: fix problems reverting moves * update: fix assertion when file external access is denied * merge: reduce network connections for automatic merge * merge: fix path corruption during reintegration * mergeinfo: fix crash * ra_serf: verify the result of xml parsing * ra_serf: improve error messages during commit * ra_local: fix error with repository in Windows drive root * fix crash on windows when piped command is interrupted * fix assertion when upgrading old working copies + Server-side bugfixes: * hotcopy: cleanup unpacked revprops with '--incremental' * fix OOM on concurrent requests at threaded server start * fsfs: improve error message when unsupported fsfs format found * fix memory problem in 3rd party FS module loader + Developer-visible changes - Bindings: * javahl: canonicalize path for streaFileContent method - packaging changes: + update keyring Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-874 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.8.4-2.4.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.8.4-2.4.1 libsvn_auth_kwallet-1-0-1.8.4-2.4.1 libsvn_auth_kwallet-1-0-debuginfo-1.8.4-2.4.1 subversion-1.8.4-2.4.1 subversion-debuginfo-1.8.4-2.4.1 subversion-debugsource-1.8.4-2.4.1 subversion-devel-1.8.4-2.4.1 subversion-perl-1.8.4-2.4.1 subversion-perl-debuginfo-1.8.4-2.4.1 subversion-python-1.8.4-2.4.1 subversion-python-debuginfo-1.8.4-2.4.1 subversion-ruby-1.8.4-2.4.1 subversion-ruby-debuginfo-1.8.4-2.4.1 subversion-server-1.8.4-2.4.1 subversion-server-debuginfo-1.8.4-2.4.1 subversion-tools-1.8.4-2.4.1 subversion-tools-debuginfo-1.8.4-2.4.1 - openSUSE 13.1 (noarch): subversion-bash-completion-1.8.4-2.4.1 References: https://bugzilla.novell.com/847103

1 0

openSUSE-RU-2013:1724-1: kdebase4-workspace: fixes annoying plasma crash when notifications would get shown
by maintenance＠opensuse.org 18 Nov '13

18 Nov '13

openSUSE Recommended Update: kdebase4-workspace: fixes annoying plasma crash when notifications would get shown ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1724-1 Rating: low References: #808656 #812536 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issue with kdebase4-workspace: - kde#311871, bnc#812536, bnc#808656: fixes annoying plasma crash when notifications would get shown Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-871 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): kde4-kgreeter-plugins-4.11.2-7.4 kde4-kgreeter-plugins-debuginfo-4.11.2-7.4 kdebase4-workspace-4.11.2-7.4 kdebase4-workspace-branding-upstream-4.11.2-7.4 kdebase4-workspace-debuginfo-4.11.2-7.4 kdebase4-workspace-debugsource-4.11.2-7.4 kdebase4-workspace-devel-4.11.2-7.4 kdebase4-workspace-devel-debuginfo-4.11.2-7.4 kdebase4-workspace-ksysguardd-4.11.2-7.4 kdebase4-workspace-ksysguardd-debuginfo-4.11.2-7.4 kdebase4-workspace-liboxygenstyle-4.11.2-7.4 kdebase4-workspace-liboxygenstyle-debuginfo-4.11.2-7.4 kdebase4-workspace-plasma-calendar-4.11.2-7.4 kdebase4-workspace-plasma-calendar-debuginfo-4.11.2-7.4 kdm-4.11.2-7.4 kdm-branding-upstream-4.11.2-7.4 kdm-debuginfo-4.11.2-7.4 krandr-4.11.2-7.4 krandr-debuginfo-4.11.2-7.4 kwin-4.11.2-7.4 kwin-debuginfo-4.11.2-7.4 python-kdebase4-4.11.2-7.4 - openSUSE 13.1 (x86_64): kdebase4-workspace-liboxygenstyle-32bit-4.11.2-7.4 kdebase4-workspace-liboxygenstyle-debuginfo-32bit-4.11.2-7.4 References: https://bugzilla.novell.com/808656 https://bugzilla.novell.com/812536

1 0

openSUSE-RU-2013:1723-1: codelite: Change previous cmake parameter to -DCMAKE_SKIP_RPATH=ON.
by maintenance＠opensuse.org 18 Nov '13

18 Nov '13

openSUSE Recommended Update: codelite: Change previous cmake parameter to -DCMAKE_SKIP_RPATH=ON. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1723-1 Rating: low References: #848791 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with codelite: - bnc#848791: Change previous cmake parameter to -DCMAKE_SKIP_RPATH=ON. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-866 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): codelite-5.2-3.4.1 codelite-debuginfo-5.2-3.4.1 codelite-debugsource-5.2-3.4.1 References: https://bugzilla.novell.com/848791

1 0

openSUSE-RU-2013:1722-1: quassel: Fix quasselcore.service
by maintenance＠opensuse.org 18 Nov '13

18 Nov '13

openSUSE Recommended Update: quassel: Fix quasselcore.service ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1722-1 Rating: low References: #849850 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with quassel: - bnc#849850: Fix quasselcore.service, EnvironmentFile belongs into [Service] section and use ${FOO} rather than $FOO for proper expansion (bnc#849850) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-869 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): quassel-base-0.9.1-4.1 quassel-client-0.9.1-4.1 quassel-client-debuginfo-0.9.1-4.1 quassel-core-0.9.1-4.1 quassel-core-debuginfo-0.9.1-4.1 quassel-debugsource-0.9.1-4.1 quassel-mono-0.9.1-4.1 quassel-mono-debuginfo-0.9.1-4.1 References: https://bugzilla.novell.com/849850

1 0

openSUSE-RU-2013:1721-1: smb4k: Update to version 1.0.9:
by maintenance＠opensuse.org 18 Nov '13

18 Nov '13

openSUSE Recommended Update: smb4k: Update to version 1.0.9: ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1721-1 Rating: low References: #847839 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with smb4k: - Update to version 1.0.9: * bnc#847839: With non-English languages the change introduced in version 1.0.8 might not work correctly, because e.g. umlauts are not recognized and the shell output is truncated. Setting the language to "en_US.UTF-8" fixes this problem. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-870 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): smb4k-1.0.9-4.2 smb4k-debuginfo-1.0.9-4.2 smb4k-debugsource-1.0.9-4.2 smb4k-doc-1.0.9-4.2 - openSUSE 13.1 (noarch): smb4k-lang-1.0.9-4.2 References: https://bugzilla.novell.com/847839

1 0