February 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:0242-1: lxc: several bugfixes
by maintenance＠opensuse.org 05 Feb '13

05 Feb '13

openSUSE Recommended Update: lxc: several bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0242-1 Rating: low References: #773234 #776169 #786245 #786970 #789387 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This udpate fixes the following issues for lxc: - bnc#786245: fix openSUSE 12.1 container build - bnc#789387: use relative paths for container mount points, fixes lxc-clone dropping some lxc.mount entries - bnc#786970: Add Requires(post) dependency on aaa_base - bnc#776169: Add dhcpcd in default installation in openSUSE template - switch openSUSE template to 12.2 - install iputils in the default configuration - autoconfigure gateway if possible - detect if network is set to 0.0.0.0 and configure DHCP - bind mount /etc/resolv.conf in container - modify MAC address when cloning a container (git) - if destroying a running container, wait until it is stopped before destroying it. - Ensure lxc-createconfig uses opensuse template by default. - bnc#773234: Ensure lxc-createconfig correctly detect cidr - fix pivot root when / is mounted as shared (default on 12.3 and later) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-83 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): lxc-0.7.5-12.4.1 lxc-debuginfo-0.7.5-12.4.1 lxc-debugsource-0.7.5-12.4.1 lxc-devel-0.7.5-12.4.1 References: https://bugzilla.novell.com/773234 https://bugzilla.novell.com/776169 https://bugzilla.novell.com/786245 https://bugzilla.novell.com/786970 https://bugzilla.novell.com/789387

1 0

openSUSE-SU-2013:0241-1: moderate: v8: update to 3.16.4.0
by opensuse-security＠opensuse.org 05 Feb '13

05 Feb '13

openSUSE Security Update: v8: update to 3.16.4.0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0241-1 Rating: moderate References: #797599 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: The Javascript engine V8 was updated to 3.16.4.0 to fix lots of bugs and security issues. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-79 - openSUSE 12.1: zypper in -t patch openSUSE-2013-79 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libv8-3-3.16.4.0-1.12.1 libv8-3-debuginfo-3.16.4.0-1.12.1 v8-devel-3.16.4.0-1.12.1 v8-private-headers-devel-3.16.4.0-1.12.1 - openSUSE 12.1 (i586 x86_64): libv8-3-3.16.4.0-1.36.1 libv8-3-debuginfo-3.16.4.0-1.36.1 v8-devel-3.16.4.0-1.36.1 v8-private-headers-devel-3.16.4.0-1.36.1 References: https://bugzilla.novell.com/797599

1 0

openSUSE-SU-2013:0237-1: moderate: update for coreutils
by opensuse-security＠opensuse.org 04 Feb '13

04 Feb '13

openSUSE Security Update: update for coreutils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0237-1 Rating: moderate References: #796243 #798538 #798541 Cross-References: CVE-2013-0221 CVE-2013-0222 CVE-2013-0223 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: - Avoid segmentation fault in "join -i" with long line input (bnc#798541, VUL-1, CVE-2013-0223) - Avoid segmentation fault in "uniq" with long line input (bnc#796243, VUL-1, CVE-2013-0222) - Avoid segmentation fault in "sort -d" and "sort -M" with long line input (bnc#798538, VUL-1, CVE-2013-0221) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-16 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): coreutils-8.9-23.1 coreutils-debuginfo-8.9-23.1 coreutils-debugsource-8.9-23.1 - openSUSE 11.4 (noarch): coreutils-lang-8.9-23.1 - openSUSE 11.4 (ia64): coreutils-debuginfo-x86-8.9-23.1 coreutils-x86-8.9-23.1 References: http://support.novell.com/security/cve/CVE-2013-0221.html http://support.novell.com/security/cve/CVE-2013-0222.html http://support.novell.com/security/cve/CVE-2013-0223.html https://bugzilla.novell.com/796243 https://bugzilla.novell.com/798538 https://bugzilla.novell.com/798541

1 0

openSUSE-SU-2013:0236-1: moderate: update for chromium
by opensuse-security＠opensuse.org 04 Feb '13

04 Feb '13

openSUSE Security Update: update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0236-1 Rating: moderate References: #795860 #798326 Cross-References: CVE-2012-5145 CVE-2012-5146 CVE-2012-5147 CVE-2012-5148 CVE-2012-5149 CVE-2012-5150 CVE-2012-5152 CVE-2012-5153 CVE-2012-5154 CVE-2013-0830 CVE-2013-0831 CVE-2013-0832 CVE-2013-0833 CVE-2013-0834 CVE-2013-0835 CVE-2013-0836 CVE-2013-0837 CVE-2013-0838 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: - Update to 26.0.1383 * Security fixes (bnc#798326) - CVE-2012-5145: Use-after-free in SVG layout - CVE-2012-5146: Same origin policy bypass with malformed URL - CVE-2012-5147: Use-after-free in DOM handling - CVE-2012-5148: Missing filename sanitization in hyphenation support - CVE-2012-5149: Integer overflow in audio IPC handling - CVE-2012-5150: Use-after-free when seeking video - CVE-2012-5152: Out-of-bounds read when seeking video - CVE-2012-5153: Out-of-bounds stack access in v8. - CVE-2012-5154: Integer overflow in shared memory allocation - CVE-2013-0830: Missing NUL termination in IPC. - CVE-2013-0831: Possible path traversal from extension process - CVE-2013-0832: Use-after-free with printing. - CVE-2013-0833: Out-of-bounds read with printing. - CVE-2013-0834: Out-of-bounds read with glyph handling - CVE-2013-0835: Browser crash with geolocation - CVE-2013-0836: Crash in v8 garbage collection. - CVE-2013-0837: Crash in extension tab handling. - CVE-2013-0838: Tighten permissions on shared memory segments * Set up Google API keys, see http://www.chromium.org/developers/how-tos/api-keys . # Note: these are for openSUSE Chromium builds ONLY!! (Setup was done based on indication from Pawel Hajdan) - Change the default setting for password-store to basic. (bnc#795860) - Fixes from Update to 25.0.1352 * Fixed garbled header and footer text in print preview. * Fixed broken profile with system-wide installation and * Fixed stability crashes like 158747, 159437, 149139, 160914, - Add a configuration file (/etc/default/chromium) where we can indicate flags for the chromium-browser. * {gtk} Fixed <input> selection renders white text on white * Fixed translate infobar button to show selected language. - Update to 25.0.1329 * No further indications in the ChangeLog - Update to 25.0.1319 * No further indications in the Changelog - Update to 24.0.1308 * Updated V8 - 3.14.5.0 * Bookmarks are now searched by their title while typing into the omnibox with matching bookmarks being shown in the autocomplete suggestions pop-down list. Matching is done by prefix. * Fixed chromium issues 155871, 154173, 155133. * No further indications in the ChangeLog. - Update to 24.0.1283 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-72 - openSUSE 12.1: zypper in -t patch openSUSE-2013-72 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): chromedriver-26.0.1383.0-1.31.1 chromedriver-debuginfo-26.0.1383.0-1.31.1 chromium-26.0.1383.0-1.31.1 chromium-debuginfo-26.0.1383.0-1.31.1 chromium-debugsource-26.0.1383.0-1.31.1 chromium-desktop-gnome-26.0.1383.0-1.31.1 chromium-desktop-kde-26.0.1383.0-1.31.1 chromium-ffmpegsumo-26.0.1383.0-1.31.1 chromium-ffmpegsumo-debuginfo-26.0.1383.0-1.31.1 chromium-suid-helper-26.0.1383.0-1.31.1 chromium-suid-helper-debuginfo-26.0.1383.0-1.31.1 - openSUSE 12.1 (i586 x86_64): chromedriver-26.0.1383.0-1.51.1 chromedriver-debuginfo-26.0.1383.0-1.51.1 chromium-26.0.1383.0-1.51.1 chromium-debuginfo-26.0.1383.0-1.51.1 chromium-debugsource-26.0.1383.0-1.51.1 chromium-desktop-gnome-26.0.1383.0-1.51.1 chromium-desktop-kde-26.0.1383.0-1.51.1 chromium-ffmpegsumo-26.0.1383.0-1.51.1 chromium-ffmpegsumo-debuginfo-26.0.1383.0-1.51.1 chromium-suid-helper-26.0.1383.0-1.51.1 chromium-suid-helper-debuginfo-26.0.1383.0-1.51.1 References: http://support.novell.com/security/cve/CVE-2012-5145.html http://support.novell.com/security/cve/CVE-2012-5146.html http://support.novell.com/security/cve/CVE-2012-5147.html http://support.novell.com/security/cve/CVE-2012-5148.html http://support.novell.com/security/cve/CVE-2012-5149.html http://support.novell.com/security/cve/CVE-2012-5150.html http://support.novell.com/security/cve/CVE-2012-5152.html http://support.novell.com/security/cve/CVE-2012-5153.html http://support.novell.com/security/cve/CVE-2012-5154.html http://support.novell.com/security/cve/CVE-2013-0830.html http://support.novell.com/security/cve/CVE-2013-0831.html http://support.novell.com/security/cve/CVE-2013-0832.html http://support.novell.com/security/cve/CVE-2013-0833.html http://support.novell.com/security/cve/CVE-2013-0834.html http://support.novell.com/security/cve/CVE-2013-0835.html http://support.novell.com/security/cve/CVE-2013-0836.html http://support.novell.com/security/cve/CVE-2013-0837.html http://support.novell.com/security/cve/CVE-2013-0838.html https://bugzilla.novell.com/795860 https://bugzilla.novell.com/798326

1 0

openSUSE-RU-2013:0235-1: moderate: ntp: remove --utc --noadjfile from hwclock call to respect current system configuration
by maintenance＠opensuse.org 04 Feb '13

04 Feb '13

openSUSE Recommended Update: ntp: remove --utc --noadjfile from hwclock call to respect current system configuration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0235-1 Rating: moderate References: #791106 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for ntp: - bnc#791106: remove --utc --noadjfile from hwclock call to respect current system configuration Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-77 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): ntp-4.2.6p5-3.14.1 ntp-debuginfo-4.2.6p5-3.14.1 ntp-debugsource-4.2.6p5-3.14.1 ntp-doc-4.2.6p5-3.14.1 References: https://bugzilla.novell.com/791106

1 0

openSUSE-RU-2013:0234-1: AppArmor: update to 2.8.1 and several bugfixes
by maintenance＠opensuse.org 04 Feb '13

04 Feb '13

openSUSE Recommended Update: AppArmor: update to 2.8.1 and several bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0234-1 Rating: low References: #781564 #798183 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for AppArmor: - 2.8.1 (bugfix release): + add various missing parts to profiles and abstractions + fix a possible x conflict with hats or child profiles in apparmor_parser + fix and speedup stdin handling in aa-decode + various other bugfixes + add pkgconfig support to libapparmor + see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_1 for more details - Additionally the following fixes were done: + bnc#798183: update abstractions/mysql with correct paths and add MariaDB paths + fix directory flags for /etc/apparmor.d to be in sync between -parser and -profiles subpackage + bnc#781564: remove %stop_on_removal for no longer existing aaeventd Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-76 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): apache2-mod_apparmor-2.8.1-2.7.1 apache2-mod_apparmor-debuginfo-2.8.1-2.7.1 apparmor-debugsource-2.8.1-2.7.1 apparmor-parser-2.8.1-2.7.1 apparmor-parser-debuginfo-2.8.1-2.7.1 libapparmor-devel-2.8.1-2.7.1 libapparmor1-2.8.1-2.7.1 libapparmor1-debuginfo-2.8.1-2.7.1 pam_apparmor-2.8.1-2.7.1 perl-apparmor-2.8.1-2.7.1 perl-apparmor-debuginfo-2.8.1-2.7.1 - openSUSE 12.2 (x86_64): libapparmor1-32bit-2.8.1-2.7.1 libapparmor1-debuginfo-32bit-2.8.1-2.7.1 pam_apparmor-32bit-2.8.1-2.7.1 - openSUSE 12.2 (noarch): apparmor-docs-2.8.1-2.7.1 apparmor-parser-lang-2.8.1-2.7.1 apparmor-profiles-2.8.1-2.7.1 apparmor-utils-2.8.1-2.7.1 apparmor-utils-lang-2.8.1-2.7.1 References: https://bugzilla.novell.com/781564 https://bugzilla.novell.com/798183

1 0

openSUSE-SU-2013:0233-1: moderate: update for coreutils
by opensuse-security＠opensuse.org 04 Feb '13

04 Feb '13

openSUSE Security Update: update for coreutils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0233-1 Rating: moderate References: #796243 #798538 #798541 Cross-References: CVE-2013-0221 CVE-2013-0222 CVE-2013-0223 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: - Avoid segmentation fault in "join -i" with long line input (bnc#798541, VUL-1, CVE-2013-0223) - Avoid segmentation fault in "uniq" with long line input (bnc#796243, VUL-1, CVE-2013-0222) - Avoid segmentation fault in "sort -d" and "sort -M" with long line input (bnc#798538, VUL-1, CVE-2013-0221) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-74 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): coreutils-8.16-5.12.1 coreutils-debuginfo-8.16-5.12.1 coreutils-debugsource-8.16-5.12.1 - openSUSE 12.2 (noarch): coreutils-lang-8.16-5.12.1 References: http://support.novell.com/security/cve/CVE-2013-0221.html http://support.novell.com/security/cve/CVE-2013-0222.html http://support.novell.com/security/cve/CVE-2013-0223.html https://bugzilla.novell.com/796243 https://bugzilla.novell.com/798538 https://bugzilla.novell.com/798541

1 0

openSUSE-SU-2013:0232-1: moderate: update for coreutils
by opensuse-security＠opensuse.org 04 Feb '13

04 Feb '13

openSUSE Security Update: update for coreutils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0232-1 Rating: moderate References: #796243 #798538 #798541 Cross-References: CVE-2013-0221 CVE-2013-0222 CVE-2013-0223 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: - Avoid segmentation fault in "join -i" with long line input (bnc#798541, VUL-1, CVE-2013-0223) - Avoid segmentation fault in "uniq" with long line input (bnc#796243, VUL-1, CVE-2013-0222) - Avoid segmentation fault in "sort -d" and "sort -M" with long line input (bnc#798538, VUL-1, CVE-2013-0221) - don't leak a file descriptor for each non-seekable input Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-75 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): coreutils-8.14-3.19.1 coreutils-debuginfo-8.14-3.19.1 coreutils-debugsource-8.14-3.19.1 - openSUSE 12.1 (noarch): coreutils-lang-8.14-3.19.1 - openSUSE 12.1 (ia64): coreutils-debuginfo-x86-8.14-3.19.1 coreutils-x86-8.14-3.19.1 References: http://support.novell.com/security/cve/CVE-2013-0221.html http://support.novell.com/security/cve/CVE-2013-0222.html http://support.novell.com/security/cve/CVE-2013-0223.html https://bugzilla.novell.com/796243 https://bugzilla.novell.com/798538 https://bugzilla.novell.com/798541

1 0

openSUSE-SU-2013:0231-1: moderate: update for virtualbox
by opensuse-security＠opensuse.org 04 Feb '13

04 Feb '13

openSUSE Security Update: update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0231-1 Rating: moderate References: #798776 Cross-References: CVE-2013-0420 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - added CVE-2013-0420.diff to fix CVE-2013-0420 (bnc#798776) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-73 - openSUSE 12.1: zypper in -t patch openSUSE-2013-73 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): python-virtualbox-4.1.22-1.10.1 python-virtualbox-debuginfo-4.1.22-1.10.1 virtualbox-4.1.22-1.10.1 virtualbox-debuginfo-4.1.22-1.10.1 virtualbox-debugsource-4.1.22-1.10.1 virtualbox-devel-4.1.22-1.10.1 virtualbox-guest-kmp-default-4.1.22_k3.4.11_2.16-1.10.1 virtualbox-guest-kmp-default-debuginfo-4.1.22_k3.4.11_2.16-1.10.1 virtualbox-guest-kmp-desktop-4.1.22_k3.4.11_2.16-1.10.1 virtualbox-guest-kmp-desktop-debuginfo-4.1.22_k3.4.11_2.16-1.10.1 virtualbox-guest-tools-4.1.22-1.10.1 virtualbox-guest-tools-debuginfo-4.1.22-1.10.1 virtualbox-guest-x11-4.1.22-1.10.1 virtualbox-guest-x11-debuginfo-4.1.22-1.10.1 virtualbox-host-kmp-default-4.1.22_k3.4.11_2.16-1.10.1 virtualbox-host-kmp-default-debuginfo-4.1.22_k3.4.11_2.16-1.10.1 virtualbox-host-kmp-desktop-4.1.22_k3.4.11_2.16-1.10.1 virtualbox-host-kmp-desktop-debuginfo-4.1.22_k3.4.11_2.16-1.10.1 virtualbox-qt-4.1.22-1.10.1 virtualbox-qt-debuginfo-4.1.22-1.10.1 virtualbox-websrv-4.1.22-1.10.1 virtualbox-websrv-debuginfo-4.1.22-1.10.1 - openSUSE 12.2 (i586): virtualbox-guest-kmp-pae-4.1.22_k3.4.11_2.16-1.10.1 virtualbox-guest-kmp-pae-debuginfo-4.1.22_k3.4.11_2.16-1.10.1 virtualbox-host-kmp-pae-4.1.22_k3.4.11_2.16-1.10.1 virtualbox-host-kmp-pae-debuginfo-4.1.22_k3.4.11_2.16-1.10.1 - openSUSE 12.1 (i586 x86_64): python-virtualbox-4.1.22-3.9.1 python-virtualbox-debuginfo-4.1.22-3.9.1 virtualbox-4.1.22-3.9.1 virtualbox-debuginfo-4.1.22-3.9.1 virtualbox-debugsource-4.1.22-3.9.1 virtualbox-devel-4.1.22-3.9.1 virtualbox-guest-kmp-default-4.1.22_k3.1.10_1.16-3.9.1 virtualbox-guest-kmp-default-debuginfo-4.1.22_k3.1.10_1.16-3.9.1 virtualbox-guest-kmp-desktop-4.1.22_k3.1.10_1.16-3.9.1 virtualbox-guest-kmp-desktop-debuginfo-4.1.22_k3.1.10_1.16-3.9.1 virtualbox-guest-tools-4.1.22-3.9.1 virtualbox-guest-tools-debuginfo-4.1.22-3.9.1 virtualbox-guest-x11-4.1.22-3.9.1 virtualbox-guest-x11-debuginfo-4.1.22-3.9.1 virtualbox-host-kmp-default-4.1.22_k3.1.10_1.16-3.9.1 virtualbox-host-kmp-default-debuginfo-4.1.22_k3.1.10_1.16-3.9.1 virtualbox-host-kmp-desktop-4.1.22_k3.1.10_1.16-3.9.1 virtualbox-host-kmp-desktop-debuginfo-4.1.22_k3.1.10_1.16-3.9.1 virtualbox-qt-4.1.22-3.9.1 virtualbox-qt-debuginfo-4.1.22-3.9.1 - openSUSE 12.1 (i586): virtualbox-guest-kmp-pae-4.1.22_k3.1.10_1.16-3.9.1 virtualbox-guest-kmp-pae-debuginfo-4.1.22_k3.1.10_1.16-3.9.1 virtualbox-host-kmp-pae-4.1.22_k3.1.10_1.16-3.9.1 virtualbox-host-kmp-pae-debuginfo-4.1.22_k3.1.10_1.16-3.9.1 References: http://support.novell.com/security/cve/CVE-2013-0420.html https://bugzilla.novell.com/798776

1 0