February 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2013:0372-1: moderate: Opera: update to 12.02
by opensuse-security＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Security Update: Opera: update to 12.02 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0372-1 Rating: moderate References: #778087 Affected Products: openSUSE 12.2:NonFree ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Opera was updated to 12.02 *Fixed an issue where truncated dialogs may be used to trick users * full changelog available at: http://www.opera.com/docs/changelogs/unix/1202/ - fixes [bnc#778087] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2012-623 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2:NonFree (i586 x86_64): opera-12.02-1.4.1 opera-gtk-12.02-1.4.1 opera-kde4-12.02-1.4.1 References: https://bugzilla.novell.com/778087

1 0

openSUSE-RU-2013:0371-1: flash-player: test update
by maintenance＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Recommended Update: flash-player: test update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0371-1 Rating: low References: #799579 Affected Products: openSUSE 12.3:NonFree ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This is a test update for flash-player. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2013-51 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3:NonFree (i586 x86_64): flash-player-11.2.202.261-2.4.1 flash-player-gnome-11.2.202.261-2.4.1 flash-player-kde4-11.2.202.261-2.4.1 References: https://bugzilla.novell.com/799579

1 0

openSUSE-SU-2013:0370-1: critical: flash-player: Update to 11.2.202.243
by opensuse-security＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Security Update: flash-player: Update to 11.2.202.243 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0370-1 Rating: critical References: #784168 Cross-References: CVE-2012-5252 CVE-2012-5256 CVE-2012-5260 CVE-2012-5264 CVE-2012-5268 CVE-2012-5272 CVE-2012-5248 CVE-2012-5249 CVE-2012-5250 CVE-2012-5251 CVE-2012-5253 CVE-2012-5254 CVE-2012-5255 CVE-2012-5257 CVE-2012-5258 CVE-2012-5259 CVE-2012-5261 CVE-2012-5262 CVE-2012-5263 CVE-2012-5265 CVE-2012-5266 CVE-2012-5267 CVE-2012-5269 CVE-2012-5270 CVE-2012-5271 Affected Products: openSUSE 12.2:NonFree ______________________________________________________________________________ An update that fixes 25 vulnerabilities is now available. Description: Flash Player was updated to 11.2.202.243 * CVE-2012-5248, CVE-2012-5249, CVE-2012-5250, CVE-2012-5251, CVE-2012-5252, CVE-2012-5253, CVE-2012-5254, CVE-2012-5255, CVE-2012-5256, CVE-2012-5257, CVE-2012-5258, CVE-2012-5259, CVE-2012-5260, CVE-2012-5261, CVE-2012-5262, CVE-2012-5263, CVE-2012-5264, CVE-2012-5265, CVE-2012-5266, CVE-2012-5267, CVE-2012-5268, CVE-2012-5269, CVE-2012-5270, CVE-2012-5271, CVE-2012-5272 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2012-697 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2:NonFree (i586 x86_64): flash-player-11.2.202.243-1.6.1 flash-player-gnome-11.2.202.243-1.6.1 flash-player-kde4-11.2.202.243-1.6.1 References: http://support.novell.com/security/cve/ CVE-2012-5252.html http://support.novell.com/security/cve/ CVE-2012-5256.html http://support.novell.com/security/cve/ CVE-2012-5260.html http://support.novell.com/security/cve/ CVE-2012-5264.html http://support.novell.com/security/cve/ CVE-2012-5268.html http://support.novell.com/security/cve/ CVE-2012-5272.html http://support.novell.com/security/cve/CVE-2012-5248.html http://support.novell.com/security/cve/CVE-2012-5249.html http://support.novell.com/security/cve/CVE-2012-5250.html http://support.novell.com/security/cve/CVE-2012-5251.html http://support.novell.com/security/cve/CVE-2012-5253.html http://support.novell.com/security/cve/CVE-2012-5254.html http://support.novell.com/security/cve/CVE-2012-5255.html http://support.novell.com/security/cve/CVE-2012-5257.html http://support.novell.com/security/cve/CVE-2012-5258.html http://support.novell.com/security/cve/CVE-2012-5259.html http://support.novell.com/security/cve/CVE-2012-5261.html http://support.novell.com/security/cve/CVE-2012-5262.html http://support.novell.com/security/cve/CVE-2012-5263.html http://support.novell.com/security/cve/CVE-2012-5265.html http://support.novell.com/security/cve/CVE-2012-5266.html http://support.novell.com/security/cve/CVE-2012-5267.html http://support.novell.com/security/cve/CVE-2012-5269.html http://support.novell.com/security/cve/CVE-2012-5270.html http://support.novell.com/security/cve/CVE-2012-5271.html https://bugzilla.novell.com/784168

1 0

openSUSE-RU-2013:0369-1: xawtv: patch to read config as it can contain keyboard events for vdr
by maintenance＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Recommended Update: xawtv: patch to read config as it can contain keyboard events for vdr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0369-1 Rating: low References: #735032 Affected Products: openSUSE 12.2:NonFree ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for xawtv: - bnc#735032: patch to read config as it can contain keyboard events for vdr Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2012-652 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2:NonFree (i586 x86_64): alevtd-3.102-2.4.1 alevtd-debuginfo-3.102-2.4.1 motv-3.102-2.4.1 motv-debuginfo-3.102-2.4.1 pia-3.102-2.4.1 pia-debuginfo-3.102-2.4.1 tv-common-3.102-2.4.1 tv-common-debuginfo-3.102-2.4.1 v4l-conf-3.102-2.4.1 v4l-conf-debuginfo-3.102-2.4.1 v4l-tools-3.102-2.4.1 v4l-tools-debuginfo-3.102-2.4.1 xawtv-3.102-2.4.1 xawtv-debuginfo-3.102-2.4.1 xawtv-debugsource-3.102-2.4.1 References: https://bugzilla.novell.com/735032

1 0

openSUSE-SU-2013:0368-1: critical: update for flash-player
by opensuse-security＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Security Update: update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0368-1 Rating: critical References: #794062 Cross-References: CVE-2012-5676 CVE-2012-5677 CVE-2012-5678 Affected Products: openSUSE 12.2:NonFree ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This version upgrade of flash-player fixed multiple unspecified code execution vulnerabiliies. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2012-849 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2:NonFree (i586 x86_64): flash-player-11.2.202.258-1.14.1 flash-player-gnome-11.2.202.258-1.14.1 flash-player-kde4-11.2.202.258-1.14.1 References: http://support.novell.com/security/cve/CVE-2012-5676.html http://support.novell.com/security/cve/CVE-2012-5677.html http://support.novell.com/security/cve/CVE-2012-5678.html https://bugzilla.novell.com/794062

1 0

openSUSE-SU-2013:0289-2: moderate: Opera update to 12.14 version
by opensuse-security＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Security Update: Opera update to 12.14 version ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0289-2 Rating: moderate References: #801233 Cross-References: CVE-2013-1618 Affected Products: openSUSE 12.2:NonFree ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Opera was updated to 12.14 version fixing stability issues. This update also consists updates for Opera 12.13 which is a recommended upgrade offering security and stability enhancements. -fixed an issue where Opera gets internal communication errors on Facebook -fixed an issue where no webpages load on startup, if Opera is disconnected from the Internet -fixed an issue where images will not load after back navigation, when a site uses the HTML5 history API (deviantart.com) -improved protection against hijacking of the default search, including a one-time reset -fixed an issue where DOM events manipulation might be used to execute arbitrary code; -fixed an issue where use of SVG clipPaths could allow execution of arbitrary code; -CVE-2013-1618: Fixed a TLS information leak. -fixed an issue where CORS requests could omit the preflight request; Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2013-113 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2:NonFree (i586 x86_64): opera-12.14-1.12.1 opera-gtk-12.14-1.12.1 opera-kde4-12.14-1.12.1 References: http://support.novell.com/security/cve/CVE-2013-1618.html https://bugzilla.novell.com/801233

1 0

openSUSE-SU-2013:0279-2: critical: flash-player to 11.2.202.262
by opensuse-security＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Security Update: flash-player to 11.2.202.262 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0279-2 Rating: critical References: #802809 Cross-References: CVE-2013-0633 CVE-2013-0634 Affected Products: openSUSE 12.2:NonFree ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.262 to fix various security issues and bugs. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2013-111 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2:NonFree (i586 x86_64): flash-player-11.2.202.262-1.22.1 flash-player-gnome-11.2.202.262-1.22.1 flash-player-kde4-11.2.202.262-1.22.1 References: http://support.novell.com/security/cve/CVE-2013-0633.html http://support.novell.com/security/cve/CVE-2013-0634.html https://bugzilla.novell.com/802809

1 0

openSUSE-SU-2013:0295-2: critical: flash-player: update to 11.2.202.270
by opensuse-security＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Security Update: flash-player: update to 11.2.202.270 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0295-2 Rating: critical References: #803485 Cross-References: CVE-2013-0637 CVE-2013-0638 CVE-2013-0639 CVE-2013-0642 CVE-2013-0644 CVE-2013-0645 CVE-2013-0647 CVE-2013-0649 CVE-2013-1365 CVE-2013-1366 CVE-2013-1367 CVE-2013-1368 CVE-2013-1369 CVE-2013-1370 CVE-2013-1372 CVE-2013-1373 CVE-2013-1374 Affected Products: openSUSE 12.2:NonFree ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.270: (bnc#803485) * APSB13-05, CVE-2013-1372, CVE-2013-0645, CVE-2013-1373, CVE-2013-1369, CVE-2013-1370, CVE-2013-1366, CVE-2013-0649, CVE-2013-1365, CVE-2013-1374, CVE-2013-1368, CVE-2013-0642, CVE-2013-0644, CVE-2013-0647, CVE-2013-1367, CVE-2013-0639, CVE-2013-0638, CVE-2013-0637 More information can be found on: http://www.adobe.com/support/security/bulletins/apsb13-05.ht ml Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2013-119 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2:NonFree (i586 x86_64): flash-player-11.2.202.270-1.26.1 flash-player-gnome-11.2.202.270-1.26.1 flash-player-kde4-11.2.202.270-1.26.1 References: http://support.novell.com/security/cve/CVE-2013-0637.html http://support.novell.com/security/cve/CVE-2013-0638.html http://support.novell.com/security/cve/CVE-2013-0639.html http://support.novell.com/security/cve/CVE-2013-0642.html http://support.novell.com/security/cve/CVE-2013-0644.html http://support.novell.com/security/cve/CVE-2013-0645.html http://support.novell.com/security/cve/CVE-2013-0647.html http://support.novell.com/security/cve/CVE-2013-0649.html http://support.novell.com/security/cve/CVE-2013-1365.html http://support.novell.com/security/cve/CVE-2013-1366.html http://support.novell.com/security/cve/CVE-2013-1367.html http://support.novell.com/security/cve/CVE-2013-1368.html http://support.novell.com/security/cve/CVE-2013-1369.html http://support.novell.com/security/cve/CVE-2013-1370.html http://support.novell.com/security/cve/CVE-2013-1372.html http://support.novell.com/security/cve/CVE-2013-1373.html http://support.novell.com/security/cve/CVE-2013-1374.html https://bugzilla.novell.com/803485

1 0

openSUSE-SU-2013:0367-1: important: flash-player: Update to 11.2.202.251
by opensuse-security＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Security Update: flash-player: Update to 11.2.202.251 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0367-1 Rating: important References: #788450 Cross-References: CVE-2012-5274 CVE-2012-5275 CVE-2012-5276 CVE-2012-5277 CVE-2012-5278 CVE-2012-5279 CVE-2012-5280 Affected Products: openSUSE 12.2:NonFree ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Flash Player was updated to 11.2.202.251 (bnc#788450), fixing severe security issues: * CVE-2012-5274, CVE-2012-5275, CVE-2012-5276, CVE-2012-5277, CVE-2012-5278, CVE-2012-5279, CVE-2012-5280 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2012-776 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2:NonFree (i586 x86_64): flash-player-11.2.202.251-1.10.1 flash-player-gnome-11.2.202.251-1.10.1 flash-player-kde4-11.2.202.251-1.10.1 References: http://support.novell.com/security/cve/CVE-2012-5274.html http://support.novell.com/security/cve/CVE-2012-5275.html http://support.novell.com/security/cve/CVE-2012-5276.html http://support.novell.com/security/cve/CVE-2012-5277.html http://support.novell.com/security/cve/CVE-2012-5278.html http://support.novell.com/security/cve/CVE-2012-5279.html http://support.novell.com/security/cve/CVE-2012-5280.html https://bugzilla.novell.com/788450

1 0

openSUSE-RU-2013:0366-1: polkit-default-privs: set logind inhibit policies to upstream defaults
by maintenance＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Recommended Update: polkit-default-privs: set logind inhibit policies to upstream defaults ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0366-1 Rating: low References: #804376 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for polkit-default-privs: - add /etc/polkit-1/rules.d/50-default-privs.rules as ghost so it gets associated with the package - bnc#804376: require ibmozjs185-1_0 as polkit won't apply the policy without it - set logind inhibit policies to upstream defaults - more elaborate --check-override option - add some debugging capabilities in generated code Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-163 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): polkit-default-privs-12.3-6.11.1 References: https://bugzilla.novell.com/804376

1 0