December 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:1936-1: gtk3: fix the scroll events from the external mouse
by maintenance＠opensuse.org 23 Dec '13

23 Dec '13

openSUSE Recommended Update: gtk3: fix the scroll events from the external mouse ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1936-1 Rating: low References: #854844 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with gtk3: - bnc#854844, bgo#699574: Fix the scroll events from the external mouse Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-1007 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): gtk3-debugsource-3.10.4-12.1 gtk3-devel-3.10.4-12.1 gtk3-devel-debuginfo-3.10.4-12.1 gtk3-immodule-amharic-3.10.4-12.1 gtk3-immodule-amharic-debuginfo-3.10.4-12.1 gtk3-immodule-inuktitut-3.10.4-12.1 gtk3-immodule-inuktitut-debuginfo-3.10.4-12.1 gtk3-immodule-multipress-3.10.4-12.1 gtk3-immodule-multipress-debuginfo-3.10.4-12.1 gtk3-immodule-thai-3.10.4-12.1 gtk3-immodule-thai-debuginfo-3.10.4-12.1 gtk3-immodule-vietnamese-3.10.4-12.1 gtk3-immodule-vietnamese-debuginfo-3.10.4-12.1 gtk3-immodule-xim-3.10.4-12.1 gtk3-immodule-xim-debuginfo-3.10.4-12.1 gtk3-immodules-tigrigna-3.10.4-12.1 gtk3-immodules-tigrigna-debuginfo-3.10.4-12.1 gtk3-tools-3.10.4-12.1 gtk3-tools-debuginfo-3.10.4-12.1 libgtk-3-0-3.10.4-12.1 libgtk-3-0-debuginfo-3.10.4-12.1 typelib-1_0-Gtk-3_0-3.10.4-12.1 - openSUSE 13.1 (x86_64): gtk3-devel-32bit-3.10.4-12.1 gtk3-devel-debuginfo-32bit-3.10.4-12.1 gtk3-immodule-amharic-32bit-3.10.4-12.1 gtk3-immodule-amharic-debuginfo-32bit-3.10.4-12.1 gtk3-immodule-inuktitut-32bit-3.10.4-12.1 gtk3-immodule-inuktitut-debuginfo-32bit-3.10.4-12.1 gtk3-immodule-multipress-32bit-3.10.4-12.1 gtk3-immodule-multipress-debuginfo-32bit-3.10.4-12.1 gtk3-immodule-thai-32bit-3.10.4-12.1 gtk3-immodule-thai-debuginfo-32bit-3.10.4-12.1 gtk3-immodule-vietnamese-32bit-3.10.4-12.1 gtk3-immodule-vietnamese-debuginfo-32bit-3.10.4-12.1 gtk3-immodule-xim-32bit-3.10.4-12.1 gtk3-immodule-xim-debuginfo-32bit-3.10.4-12.1 gtk3-immodules-tigrigna-32bit-3.10.4-12.1 gtk3-immodules-tigrigna-debuginfo-32bit-3.10.4-12.1 gtk3-tools-32bit-3.10.4-12.1 gtk3-tools-debuginfo-32bit-3.10.4-12.1 libgtk-3-0-32bit-3.10.4-12.1 libgtk-3-0-debuginfo-32bit-3.10.4-12.1 - openSUSE 13.1 (noarch): gtk3-branding-upstream-3.10.4-12.1 gtk3-data-3.10.4-12.1 gtk3-lang-3.10.4-12.1 References: https://bugzilla.novell.com/854844

1 0

openSUSE-RU-2013:1935-1: ca-certificates: Fixed typo in advice for CA Certificates install
by maintenance＠opensuse.org 23 Dec '13

23 Dec '13

openSUSE Recommended Update: ca-certificates: Fixed typo in advice for CA Certificates install ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1935-1 Rating: low References: #855711 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with ca-certificates: - bnc#855711: Fixed typo in advice for CA Certificates install Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-1019 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): ca-certificates-1_201312011643-4.1 References: https://bugzilla.novell.com/855711

1 0

openSUSE-RU-2013:1934-1: yast2-slp-server: Fix incorrect firewall service
by maintenance＠opensuse.org 23 Dec '13

23 Dec '13

openSUSE Recommended Update: yast2-slp-server: Fix incorrect firewall service ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1934-1 Rating: low References: #825505 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with yast2-slp-server: - bnc#825505: Fix incorrect firewall service Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-1008 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): yast2-slp-server-3.0.1-2.4.1 References: https://bugzilla.novell.com/825505

1 0

openSUSE-SU-2013:1933-1: moderate: update for chromium
by opensuse-security＠opensuse.org 23 Dec '13

23 Dec '13

openSUSE Security Update: update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1933-1 Rating: moderate References: #847971 #854472 #854473 Cross-References: CVE-2013-6634 CVE-2013-6635 CVE-2013-6636 CVE-2013-6637 CVE-2013-6638 CVE-2013-6639 CVE-2013-6640 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: - Update to Chromium 31.0.1650.63 Stable channel update: - Security fixes: * CVE-2013-6634: Session fixation in sync related to 302 redirects * CVE-2013-6635: Use-after-free in editing * CVE-2013-6636: Address bar spoofing related to modal dialogs * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives. * CVE-2013-6638: Buffer overflow in v8 * CVE-2013-6639: Out of bounds write in v8. * CVE-2013-6640: Out of bounds read in v8 * and 12 other security fixes. - Remove the build flags to build according to the Chrome ffmpeg branding and the proprietary codecs. (bnc#847971) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-1001 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): chromedriver-31.0.1650.63-1.58.1 chromedriver-debuginfo-31.0.1650.63-1.58.1 chromium-31.0.1650.63-1.58.1 chromium-debuginfo-31.0.1650.63-1.58.1 chromium-debugsource-31.0.1650.63-1.58.1 chromium-desktop-gnome-31.0.1650.63-1.58.1 chromium-desktop-kde-31.0.1650.63-1.58.1 chromium-ffmpegsumo-31.0.1650.63-1.58.1 chromium-ffmpegsumo-debuginfo-31.0.1650.63-1.58.1 chromium-suid-helper-31.0.1650.63-1.58.1 chromium-suid-helper-debuginfo-31.0.1650.63-1.58.1 References: http://support.novell.com/security/cve/CVE-2013-6634.html http://support.novell.com/security/cve/CVE-2013-6635.html http://support.novell.com/security/cve/CVE-2013-6636.html http://support.novell.com/security/cve/CVE-2013-6637.html http://support.novell.com/security/cve/CVE-2013-6638.html http://support.novell.com/security/cve/CVE-2013-6639.html http://support.novell.com/security/cve/CVE-2013-6640.html https://bugzilla.novell.com/847971 https://bugzilla.novell.com/854472 https://bugzilla.novell.com/854473

1 0

openSUSE-SU-2013:1932-1: moderate: update for openttd
by opensuse-security＠opensuse.org 23 Dec '13

23 Dec '13

openSUSE Security Update: update for openttd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1932-1 Rating: moderate References: #853041 Cross-References: CVE-2013-6411 Affected Products: openSUSE 13.1 openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes the following security issue with openttd: - add patch 60.patch: Aircraft crashing near the map's border due to a lack of airports could trigger a crash [CVE-2013-6411] [FS#5820] (bnc#853041) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-999 - openSUSE 12.3: zypper in -t patch openSUSE-2013-999 - openSUSE 12.2: zypper in -t patch openSUSE-2013-999 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): openttd-1.3.3-2.4.1 openttd-debuginfo-1.3.3-2.4.1 openttd-dedicated-1.3.3-2.4.1 openttd-dedicated-debuginfo-1.3.3-2.4.1 - openSUSE 13.1 (noarch): openttd-data-1.3.3-2.4.1 - openSUSE 12.3 (i586 x86_64): openttd-1.3.3-2.8.1 openttd-debuginfo-1.3.3-2.8.1 openttd-dedicated-1.3.3-2.8.1 openttd-dedicated-debuginfo-1.3.3-2.8.1 - openSUSE 12.3 (noarch): openttd-data-1.3.3-2.8.1 - openSUSE 12.2 (i586 x86_64): openttd-1.2.2-2.8.1 openttd-debuginfo-1.2.2-2.8.1 openttd-dedicated-1.2.2-2.8.1 openttd-dedicated-debuginfo-1.2.2-2.8.1 - openSUSE 12.2 (noarch): openttd-data-1.2.2-2.8.1 References: http://support.novell.com/security/cve/CVE-2013-6411.html https://bugzilla.novell.com/853041

1 0

openSUSE-SU-2013:1931-1: moderate: update for rubygem-activesupport-3_2
by opensuse-security＠opensuse.org 23 Dec '13

23 Dec '13

openSUSE Security Update: update for rubygem-activesupport-3_2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1931-1 Rating: moderate References: #846239 Cross-References: CVE-2013-4389 Affected Products: openSUSE 13.1 openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes the following security issues with rubygem-activesupport-3_2: - fix CVE-2013-4389: rubygem-actionmailer-3_1: possible DoS vulnerability in the log subscriber component (bnc#846239) File CVE-2013-4389.patch contains the fix. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-1003 - openSUSE 12.3: zypper in -t patch openSUSE-2013-1003 - openSUSE 12.2: zypper in -t patch openSUSE-2013-1003 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): rubygem-activesupport-3_2-3.2.13-3.4.1 rubygem-activesupport-3_2-doc-3.2.13-3.4.1 - openSUSE 12.3 (i586 x86_64): rubygem-activesupport-3_2-3.2.12-1.4.1 rubygem-activesupport-3_2-doc-3.2.12-1.4.1 - openSUSE 12.2 (i586 x86_64): rubygem-activesupport-3_2-3.2.12-2.17.1 rubygem-activesupport-3_2-doc-3.2.12-2.17.1 References: http://support.novell.com/security/cve/CVE-2013-4389.html https://bugzilla.novell.com/846239

1 0

openSUSE-SU-2013:1930-1: moderate: update for rubygem-i18n, rubygem-i18n-0_6
by opensuse-security＠opensuse.org 23 Dec '13

23 Dec '13

openSUSE Security Update: update for rubygem-i18n, rubygem-i18n-0_6 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1930-1 Rating: moderate References: #854166 Cross-References: CVE-2013-4492 Affected Products: openSUSE 13.1 openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes the following security issue with rubygem-i18n: - fix bnc#854166: CVE-2013-4492: rubygem-i18n: missing translation XSS. File CVE-2013-4492.patch.i18n.0.6.x contains the fix. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-1002 - openSUSE 12.3: zypper in -t patch openSUSE-2013-1002 - openSUSE 12.2: zypper in -t patch openSUSE-2013-1002 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): rubygem-i18n-0.6.4-2.4.1 rubygem-i18n-doc-0.6.4-2.4.1 rubygem-i18n-testsuite-0.6.4-2.4.1 - openSUSE 12.3 (i586 x86_64): rubygem-i18n-0.6.1-2.4.1 rubygem-i18n-doc-0.6.1-2.4.1 rubygem-i18n-testsuite-0.6.1-2.4.1 - openSUSE 12.2 (i586 x86_64): rubygem-i18n-0_6-0.6.0-2.4.1 rubygem-i18n-0_6-doc-0.6.0-2.4.1 rubygem-i18n-0_6-testsuite-0.6.0-2.4.1 References: http://support.novell.com/security/cve/CVE-2013-4492.html https://bugzilla.novell.com/854166

1 0

openSUSE-SU-2013:1929-1: moderate: update for quassel
by opensuse-security＠opensuse.org 23 Dec '13

23 Dec '13

openSUSE Security Update: update for quassel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1929-1 Rating: moderate References: #852847 Cross-References: CVE-2013-6404 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - Add fix-CVE-2013-6404.diff: Fix a vulnerability by which an authenticated malicious user using a custom client, could access the backlog of all users of a quassel core. This fixes CVE-2013-6404 (bnc#852847). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-998 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): quassel-base-0.9.1-8.2 quassel-client-0.9.1-8.2 quassel-client-debuginfo-0.9.1-8.2 quassel-core-0.9.1-8.2 quassel-core-debuginfo-0.9.1-8.2 quassel-debugsource-0.9.1-8.2 quassel-mono-0.9.1-8.2 quassel-mono-debuginfo-0.9.1-8.2 References: http://support.novell.com/security/cve/CVE-2013-6404.html https://bugzilla.novell.com/852847

1 0

openSUSE-SU-2013:1928-1: moderate: update for rubygem-actionmailer-3_2
by opensuse-security＠opensuse.org 23 Dec '13

23 Dec '13

openSUSE Security Update: update for rubygem-actionmailer-3_2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1928-1 Rating: moderate References: #846239 Cross-References: CVE-2013-4389 Affected Products: openSUSE 13.1 openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes the following security issue with rubygem-actionmailer-3_2: - fix CVE-2013-4389: rubygem-actionmailer-3_1: possible DoS vulnerability in the log subscriber component (bnc#846239) File CVE-2013-4389.patch contains the fix. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2013-1004 - openSUSE 12.3: zypper in -t patch openSUSE-2013-1004 - openSUSE 12.2: zypper in -t patch openSUSE-2013-1004 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): rubygem-actionmailer-3_2-3.2.13-2.4.1 rubygem-actionmailer-3_2-doc-3.2.13-2.4.1 - openSUSE 12.3 (i586 x86_64): rubygem-actionmailer-3_2-3.2.12-1.4.1 rubygem-actionmailer-3_2-doc-3.2.12-1.4.1 - openSUSE 12.2 (i586 x86_64): rubygem-actionmailer-3_2-3.2.12-2.17.1 rubygem-actionmailer-3_2-doc-3.2.12-2.17.1 References: http://support.novell.com/security/cve/CVE-2013-4389.html https://bugzilla.novell.com/846239

1 0

openSUSE-SU-2013:1927-1: moderate: update for chromium
by opensuse-security＠opensuse.org 23 Dec '13

23 Dec '13

openSUSE Security Update: update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1927-1 Rating: moderate References: #847971 #854472 #854473 Cross-References: CVE-2013-6634 CVE-2013-6635 CVE-2013-6636 CVE-2013-6637 CVE-2013-6638 CVE-2013-6639 CVE-2013-6640 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: - Update to Chromium 31.0.1650.63 Stable channel update: - Security fixes: * CVE-2013-6634: Session fixation in sync related to 302 redirects * CVE-2013-6635: Use-after-free in editing * CVE-2013-6636: Address bar spoofing related to modal dialogs * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives. * CVE-2013-6638: Buffer overflow in v8 * CVE-2013-6639: Out of bounds write in v8. * CVE-2013-6640: Out of bounds read in v8 * and 12 other security fixes. - Remove the build flags to build according to the Chrome ffmpeg branding and the proprietary codecs. (bnc#847971) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-1000 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): chromedriver-31.0.1650.63-1.21.1 chromedriver-debuginfo-31.0.1650.63-1.21.1 chromium-31.0.1650.63-1.21.1 chromium-debuginfo-31.0.1650.63-1.21.1 chromium-debugsource-31.0.1650.63-1.21.1 chromium-desktop-gnome-31.0.1650.63-1.21.1 chromium-desktop-kde-31.0.1650.63-1.21.1 chromium-ffmpegsumo-31.0.1650.63-1.21.1 chromium-ffmpegsumo-debuginfo-31.0.1650.63-1.21.1 chromium-suid-helper-31.0.1650.63-1.21.1 chromium-suid-helper-debuginfo-31.0.1650.63-1.21.1 References: http://support.novell.com/security/cve/CVE-2013-6634.html http://support.novell.com/security/cve/CVE-2013-6635.html http://support.novell.com/security/cve/CVE-2013-6636.html http://support.novell.com/security/cve/CVE-2013-6637.html http://support.novell.com/security/cve/CVE-2013-6638.html http://support.novell.com/security/cve/CVE-2013-6639.html http://support.novell.com/security/cve/CVE-2013-6640.html https://bugzilla.novell.com/847971 https://bugzilla.novell.com/854472 https://bugzilla.novell.com/854473

1 0