November 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:1689-1: ibus-anthy: update to 1.5.4 to fix displaying passwords on display
by maintenance＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Recommended Update: ibus-anthy: update to 1.5.4 to fix displaying passwords on display ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1689-1 Rating: low References: #847718 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: ibus-anthy was updated to avoid displaying passwords on the GNOME lock screen during input: - update to 1.5.4 * Removed g_type_init() calls. * Fixed ibus-engine-anthy --xml without display * Fixed kana_voiced_consonant_no_rule for 'bo'. * Fixed dicts. * Updated symbol.t with Seiza. * Added Era dict. * Updated source files with the latest GPL 2.0. * Imported anthy zipcode.t into ibus-anthy. * Added to check the input purpose for gnome-shell password dialog. * Implemented ISO 14755 with Ctrl+Shift+u in LATIN mode. * Extracted prefix in ANTHY_ZIPCODE_FILE for sh test. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-851 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): ibus-anthy-1.5.4-2.4.1 ibus-anthy-debugsource-1.5.4-2.4.1 ibus-anthy-devel-1.5.4-2.4.1 ibus-anthy-devel-debuginfo-1.5.4-2.4.1 References: http://support.novell.com/security/cve/CVE-2013-4509.html https://bugzilla.novell.com/847718

1 0

openSUSE-RU-2013:1688-1: release-notes-openSUSE: Update to 13.1.6
by maintenance＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Recommended Update: release-notes-openSUSE: Update to 13.1.6 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1688-1 Rating: low References: #847802 #848969 #849112 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update resolves the 12.3 checkit markers (bnc#847802), updates the translations and adds the following new entries to the release-notes-openSUSE: - Upgrading with Zypper (dup) Requires /etc/fstab - Cleanup; Samba version 4.1. - bnc#849112: Adobe Reader (acroread) and Other PDF Readers - bnc#848969: KDE and Bluetooth Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-840 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): release-notes-openSUSE-13.1.6-6.4 References: https://bugzilla.novell.com/847802 https://bugzilla.novell.com/848969 https://bugzilla.novell.com/849112

1 0

openSUSE-RU-2013:1687-1: btrfsprogs: Testupdate
by maintenance＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Recommended Update: btrfsprogs: Testupdate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1687-1 Rating: low References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: we would like to confirm that the numer of btrfs installations on NET and DVD have the same ratio so we need a btrfsprogs in the update channel that is newer than the one in the repo. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-810 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): btrfsprogs-0.20-4.10.1 btrfsprogs-debuginfo-0.20-4.10.1 btrfsprogs-debugsource-0.20-4.10.1 libbtrfs-devel-0.20-4.10.1 libbtrfs0-0.20-4.10.1 libbtrfs0-debuginfo-0.20-4.10.1 References:

1 0

openSUSE-SU-2013:1686-1: ibus: avoid showing the password ont he GNOME lock screen
by opensuse-security＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Security Update: ibus: avoid showing the password ont he GNOME lock screen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1686-1 Rating: low References: #847718 Cross-References: CVE-2013-4509 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - This is an additional fix patch for ibus to avoid the wrong IBus.InputPurpose.PASSWORD advertisement, which leads to the password text appearance on GNOME3 lockscreen (bnc#847718) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-850 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): ibus-1.5.4-4.1 ibus-debuginfo-1.5.4-4.1 ibus-debugsource-1.5.4-4.1 ibus-devel-1.5.4-4.1 ibus-gtk-1.5.4-4.1 ibus-gtk-debuginfo-1.5.4-4.1 ibus-gtk3-1.5.4-4.1 ibus-gtk3-debuginfo-1.5.4-4.1 libibus-1_0-5-1.5.4-4.1 libibus-1_0-5-debuginfo-1.5.4-4.1 python-ibus-1.5.4-4.1 typelib-1_0-IBus-1_0-1.5.4-4.1 - openSUSE 13.1 (x86_64): ibus-gtk-32bit-1.5.4-4.1 ibus-gtk-debuginfo-32bit-1.5.4-4.1 ibus-gtk3-32bit-1.5.4-4.1 ibus-gtk3-debuginfo-32bit-1.5.4-4.1 libibus-1_0-5-32bit-1.5.4-4.1 libibus-1_0-5-debuginfo-32bit-1.5.4-4.1 - openSUSE 13.1 (noarch): ibus-branding-openSUSE-KDE-1.5.4-4.1 ibus-lang-1.5.4-4.1 References: http://support.novell.com/security/cve/CVE-2013-4509.html https://bugzilla.novell.com/847718

1 0

openSUSE-SU-2013:1685-1: moderate: update for python-django
by opensuse-security＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Security Update: update for python-django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1685-1 Rating: moderate References: #840518 Cross-References: CVE-2013-1443 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: python-django was updated to version 1.5.5: + Readdressed denial-of-service via password hashers (CVE-2013-1443) + Properly rotate CSRF token on login Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-852 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): python-django-1.5.5-2.4.1 References: http://support.novell.com/security/cve/CVE-2013-1443.html https://bugzilla.novell.com/840518

1 0

openSUSE-RU-2013:1684-1: libQtWebKit4: Fix build on ppc and ppc64
by maintenance＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Recommended Update: libQtWebKit4: Fix build on ppc and ppc64 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1684-1 Rating: low References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the build on ppc and ppc64 for libQtWebKit4 on openSUSE 13.1 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-829 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libQtWebKit-devel-4.8.5+2.3.3-2.6.1 libQtWebKit4-4.8.5+2.3.3-2.6.1 libQtWebKit4-debuginfo-4.8.5+2.3.3-2.6.1 libQtWebKit4-debugsource-4.8.5+2.3.3-2.6.1 - openSUSE 13.1 (x86_64): libQtWebKit4-32bit-4.8.5+2.3.3-2.6.1 libQtWebKit4-debuginfo-32bit-4.8.5+2.3.3-2.6.1 References:

1 0

openSUSE-SU-2013:1683-1: moderate: update for varnish
by opensuse-security＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Security Update: update for varnish ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1683-1 Rating: moderate References: #839358 #848451 Cross-References: CVE-2013-4484 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update fixes the following security issue with varnish: - bnc#848451, CVE-2013-4484: fixed denial of service flaw in certain GET requests when using certain configurations in Varnish Cache handling - bnc#839358: Deactivate libpcre JIT Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-865 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libvarnishapi1-3.0.3-4.5.1 libvarnishapi1-debuginfo-3.0.3-4.5.1 varnish-3.0.3-4.5.1 varnish-debuginfo-3.0.3-4.5.1 varnish-debugsource-3.0.3-4.5.1 varnish-devel-3.0.3-4.5.1 References: http://support.novell.com/security/cve/CVE-2013-4484.html https://bugzilla.novell.com/839358 https://bugzilla.novell.com/848451

1 0

openSUSE-RU-2013:1682-1: phonon and backends: Update to final (4).7.0
by maintenance＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Recommended Update: phonon and backends: Update to final (4).7.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1682-1 Rating: low References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issues with phonon and backends: - phonon: + Update to official 4.7.0 release * Minor documentation fixes since last update + Update to 4.7.0~git20131104 * Buildsystem fixes since previous snapshot - phonon-backend-gstreamer-0_10: + Update to official 4.7.0 release * No source changes since last update + Update to 4.7.0~git20131104 * Buildsystem fixes since previous snapshot - phonon-backend-vlc: + Update to official 0.7.0 release * No source changes since last update + Update to 0.7.0~git20131104 * Buildsystem fixes since previous snapshot Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-855 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libphonon4-4.7.0-4.1 libphonon4-debuginfo-4.7.0-4.1 phonon-backend-gstreamer-0_10-4.7.0-2.4.1 phonon-backend-gstreamer-0_10-debuginfo-4.7.0-2.4.1 phonon-backend-gstreamer-0_10-debugsource-4.7.0-2.4.1 phonon-backend-vlc-0.7.0-5.1 phonon-backend-vlc-debuginfo-0.7.0-5.1 phonon-backend-vlc-debugsource-0.7.0-5.1 phonon-debugsource-4.7.0-4.1 phonon-devel-4.7.0-4.1 phonon-devel-debuginfo-4.7.0-4.1 - openSUSE 13.1 (x86_64): libphonon4-32bit-4.7.0-4.1 libphonon4-debuginfo-32bit-4.7.0-4.1 References:

1 0

openSUSE-RU-2013:1681-1: yast2-nis-client: add/remove unix-nis PAM module option if needed
by maintenance＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Recommended Update: yast2-nis-client: add/remove unix-nis PAM module option if needed ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1681-1 Rating: low References: #848963 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with yast2-nis-client: - bnc#848963: add/remove unix-nis PAM module option if needed Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-859 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): yast2-nis-client-3.0.1-2.4.3 yast2-nis-client-debuginfo-3.0.1-2.4.3 yast2-nis-client-debugsource-3.0.1-2.4.3 yast2-nis-client-devel-doc-3.0.1-2.4.3 References: https://bugzilla.novell.com/848963

1 0

openSUSE-RU-2013:1680-1: sysconfig: Two fixes
by maintenance＠opensuse.org 15 Nov '13

15 Nov '13

openSUSE Recommended Update: sysconfig: Two fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1680-1 Rating: low References: #845792 #846031 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues with sysconfig: - bnc#846031: Skip also systemd redirection for ifdown -o ifplugd (bnc#846031). - bnc#845792: Fixed to check restorecon existence before calling it as selinux is not installed by default Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-857 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): sysconfig-0.81.5-6.1 sysconfig-debugsource-0.81.5-6.1 sysconfig-netconfig-0.81.5-6.1 sysconfig-network-0.81.5-6.1 sysconfig-network-debuginfo-0.81.5-6.1 udevmountd-0.81.5-6.1 udevmountd-debuginfo-0.81.5-6.1 References: https://bugzilla.novell.com/845792 https://bugzilla.novell.com/846031

1 0