February 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2013:0273-2: moderate: Opera to version 12.3
by opensuse-security＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Security Update: Opera to version 12.3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0273-2 Rating: moderate References: #801233 Affected Products: openSUSE 12.2:NonFree ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Opera 12.13 is a recommended upgrade offering security and stability enhancements. -fixed an issue where Opera gets internal communication errors on Facebook -fixed an issue where no webpages load on startup, if Opera is disconnected from the Internet -fixed an issue where images will not load after back navigation, when a site uses the HTML5 history API (deviantart.com) -improved protection against hijacking of the default search, including a one-time reset -fixed an issue where DOM events manipulation might be used to execute arbitrary code; -fixed an issue where use of SVG clipPaths could allow execution of arbitrary code; -fixed a low severity security issue; details will be disclosed at a later date -fixed an issue where CORS requests could omit the preflight request; Also check out http://www.opera.com/docs/changelogs/unix/1213 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2013-109 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2:NonFree (i586 x86_64): opera-12.13-1.12.1 opera-gtk-12.13-1.12.1 opera-kde4-12.13-1.12.1 References: https://bugzilla.novell.com/801233

1 0

openSUSE-RU-2013:0365-1: openmotif: Use MWMRCDIR instead of rcdir in spec file
by maintenance＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Recommended Update: openmotif: Use MWMRCDIR instead of rcdir in spec file ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0365-1 Rating: low References: #786848 Affected Products: openSUSE 12.2:NonFree ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for openmotif: - bnc#786848: Use MWMRCDIR instead of rcdir in spec file Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2012-759 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2:NonFree (i586 x86_64): openmotif-2.3.3-2.4.1 openmotif-debuginfo-2.3.3-2.4.1 openmotif-debugsource-2.3.3-2.4.1 openmotif-devel-2.3.3-2.4.1 openmotif-devel-debuginfo-2.3.3-2.4.1 openmotif-libs-2.3.3-2.4.1 openmotif-libs-debuginfo-2.3.3-2.4.1 - openSUSE 12.2:NonFree (x86_64): openmotif-devel-32bit-2.3.3-2.4.1 openmotif-devel-debuginfo-32bit-2.3.3-2.4.1 openmotif-libs-32bit-2.3.3-2.4.1 openmotif-libs-debuginfo-32bit-2.3.3-2.4.1 References: https://bugzilla.novell.com/786848

1 0

openSUSE-SU-2013:0359-2: critical: flash-player to 11.2.202.273
by opensuse-security＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Security Update: flash-player to 11.2.202.273 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0359-2 Rating: critical References: #806415 Cross-References: CVE-2013-0504 CVE-2013-0643 CVE-2013-0648 Affected Products: openSUSE 12.3:NonFree openSUSE 12.2:NonFree ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: Flash Player was updated to 11.2.202.273 to fix critical security issues: (bnc#806415) * APSB13-08, CVE-2013-0504, CVE-2013-0643, CVE-2013-0648 More information can be found on: https://www.adobe.com/support/security/bulletins/apsb13-08.h tml Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2013-162 - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2013-162 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3:NonFree (i586 x86_64): flash-player-11.2.202.273-2.8.1 flash-player-gnome-11.2.202.273-2.8.1 flash-player-kde4-11.2.202.273-2.8.1 - openSUSE 12.2:NonFree (i586 x86_64): flash-player-11.2.202.273-1.30.1 flash-player-gnome-11.2.202.273-1.30.1 flash-player-kde4-11.2.202.273-1.30.1 References: http://support.novell.com/security/cve/CVE-2013-0504.html http://support.novell.com/security/cve/CVE-2013-0643.html http://support.novell.com/security/cve/CVE-2013-0648.html https://bugzilla.novell.com/806415

1 0

openSUSE-SU-2013:0335-2: critical: acroread to 9.5.4
by opensuse-security＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Security Update: acroread to 9.5.4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0335-2 Rating: critical References: #803939 Cross-References: CVE-2013-0640 CVE-2013-0641 Affected Products: openSUSE 12.2:NonFree ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: acroread was updated to 9.5.4 to fix remote code execution problems. (CVE-2013-0640, CVE-2013-0641) More information can be found on: http://www.adobe.com/support/security/bulletins/apsb13-07.ht ml Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2013-151 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2:NonFree (noarch): acroread-cmaps-9.4.1-3.8.1 acroread-fonts-ja-9.4.1-3.8.1 acroread-fonts-ko-9.4.1-3.8.1 acroread-fonts-zh_CN-9.4.1-3.8.1 acroread-fonts-zh_TW-9.4.1-3.8.1 - openSUSE 12.2:NonFree (i586): acroread-9.5.4-3.8.1 acroread-browser-plugin-9.5.4-3.8.1 References: http://support.novell.com/security/cve/CVE-2013-0640.html http://support.novell.com/security/cve/CVE-2013-0641.html https://bugzilla.novell.com/803939

1 0

openSUSE-SU-2013:0364-1: moderate: update for flash-player
by opensuse-security＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Security Update: update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0364-1 Rating: moderate References: #797442 Cross-References: CVE-2013-0630 Affected Products: openSUSE 12.2:NonFree ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - Update to 11.2.202.261: (bnc#797442) * CVE-2013-0630 More details can be found on https://www.adobe.com/support/security/bulletins/apsb13-01.h tml Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2013-16 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2:NonFree (i586 x86_64): flash-player-11.2.202.261-1.18.1 flash-player-gnome-11.2.202.261-1.18.1 flash-player-kde4-11.2.202.261-1.18.1 References: http://support.novell.com/security/cve/CVE-2013-0630.html https://bugzilla.novell.com/797442

1 0

openSUSE-SU-2013:0363-1: moderate: update for acroread
by opensuse-security＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Security Update: update for acroread ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0363-1 Rating: moderate References: #757393 #768492 #797529 Cross-References: CVE-2012-1530 CVE-2013-0601 CVE-2013-0602 CVE-2013-0603 CVE-2013-0604 CVE-2013-0605 CVE-2013-0606 CVE-2013-0607 CVE-2013-0608 CVE-2013-0609 CVE-2013-0610 CVE-2013-0611 CVE-2013-0612 CVE-2013-0613 CVE-2013-0614 CVE-2013-0615 CVE-2013-0616 CVE-2013-0617 CVE-2013-0618 CVE-2013-0619 CVE-2013-0620 CVE-2013-0621 CVE-2013-0622 CVE-2013-0623 CVE-2013-0624 CVE-2013-0626 CVE-2013-0627 Affected Products: openSUSE 12.2:NonFree ______________________________________________________________________________ An update that fixes 27 vulnerabilities is now available. Description: - Update to 9.5.3 (bnc#797529) to fix: CVE-2012-1530, CVE-2013-0601, CVE-2013-0602, CVE-2013-0603, CVE-2013-0604, CVE-2013-0605, CVE-2013-0606, CVE-2013-0607, CVE-2013-0608, CVE-2013-0609, CVE-2013-0610, CVE-2013-0611, CVE-2013-0612, CVE-2013-0613, CVE-2013-0614, CVE-2013-0615, CVE-2013-0616, CVE-2013-0617, CVE-2013-0618, CVE-2013-0619, CVE-2013-0620, CVE-2013-0621, CVE-2013-0622, CVE-2013-0623, CVE-2013-0624, CVE-2013-0626, CVE-2013-0627 - move the browser plugin to a subpackage(bnc#768492, bnc#757393). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2013-39 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2:NonFree (noarch): acroread-cmaps-9.4.1-3.4.1 acroread-fonts-ja-9.4.1-3.4.1 acroread-fonts-ko-9.4.1-3.4.1 acroread-fonts-zh_CN-9.4.1-3.4.1 acroread-fonts-zh_TW-9.4.1-3.4.1 - openSUSE 12.2:NonFree (i586): acroread-9.5.3-3.4.1 acroread-browser-plugin-9.5.3-3.4.1 References: http://support.novell.com/security/cve/CVE-2012-1530.html http://support.novell.com/security/cve/CVE-2013-0601.html http://support.novell.com/security/cve/CVE-2013-0602.html http://support.novell.com/security/cve/CVE-2013-0603.html http://support.novell.com/security/cve/CVE-2013-0604.html http://support.novell.com/security/cve/CVE-2013-0605.html http://support.novell.com/security/cve/CVE-2013-0606.html http://support.novell.com/security/cve/CVE-2013-0607.html http://support.novell.com/security/cve/CVE-2013-0608.html http://support.novell.com/security/cve/CVE-2013-0609.html http://support.novell.com/security/cve/CVE-2013-0610.html http://support.novell.com/security/cve/CVE-2013-0611.html http://support.novell.com/security/cve/CVE-2013-0612.html http://support.novell.com/security/cve/CVE-2013-0613.html http://support.novell.com/security/cve/CVE-2013-0614.html http://support.novell.com/security/cve/CVE-2013-0615.html http://support.novell.com/security/cve/CVE-2013-0616.html http://support.novell.com/security/cve/CVE-2013-0617.html http://support.novell.com/security/cve/CVE-2013-0618.html http://support.novell.com/security/cve/CVE-2013-0619.html http://support.novell.com/security/cve/CVE-2013-0620.html http://support.novell.com/security/cve/CVE-2013-0621.html http://support.novell.com/security/cve/CVE-2013-0622.html http://support.novell.com/security/cve/CVE-2013-0623.html http://support.novell.com/security/cve/CVE-2013-0624.html http://support.novell.com/security/cve/CVE-2013-0626.html http://support.novell.com/security/cve/CVE-2013-0627.html https://bugzilla.novell.com/757393 https://bugzilla.novell.com/768492 https://bugzilla.novell.com/797529

1 0

openSUSE-SU-2013:0362-1: critical: flash-player to 11.2.202.238
by opensuse-security＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Security Update: flash-player to 11.2.202.238 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0362-1 Rating: critical References: #775986 Cross-References: CVE-2012-1535 Affected Products: openSUSE 12.2:NonFree ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Adobe Flash Player was updated to 11.2.202.238 fixing various bugs and security issues. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2012-519 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2:NonFree (i586 x86_64): flash-player-11.2.202.238-2.3.1 flash-player-gnome-11.2.202.238-2.3.1 flash-player-kde4-11.2.202.238-2.3.1 References: http://support.novell.com/security/cve/CVE-2012-1535.html https://bugzilla.novell.com/775986

1 0

openSUSE-SU-2013:0361-1: moderate: opera - security and bugfix update
by opensuse-security＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Security Update: opera - security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0361-1 Rating: moderate References: #795061 Affected Products: openSUSE 12.2:NonFree ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: - Update to 12.12 * Fixes and Stability Enhancements - New option 'Delete settings and data for all extensions' option (off by default) in the Delete Private Data dialog - Corrected an issue where using the 'Delete Private Data' dialog could delete extension and settings data - Redesigned the 'Delete Private Data' dialog to be more usable with small screens - Fixed an issue where quitting Opera while in fullscreen mode could cripple the interface on the next start-up - Fixed an issue where malformed GIF images could allow execution of arbitrary code - Fixed an issue where repeated attempts to access a target site could trigger address field spoofing - Fixed an issue where private data could be disclosed to other computer users, or be modified by them * full changelog available at: http://www.opera.com/docs/changelogs/unix/1212 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2012-885 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2:NonFree (i586 x86_64): opera-12.12-1.8.1 opera-gtk-12.12-1.8.1 opera-kde4-12.12-1.8.1 References: https://bugzilla.novell.com/795061

1 0

openSUSE-SU-2013:0360-1: critical: flash-player to 11.2.202.273
by opensuse-security＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Security Update: flash-player to 11.2.202.273 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0360-1 Rating: critical References: #806415 Cross-References: CVE-2013-0504 CVE-2013-0643 CVE-2013-0648 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: Flash Player was updated to 11.2.202.273 to fix critical security issues: (bnc#806415) * APSB13-08, CVE-2013-0504, CVE-2013-0643, CVE-2013-0648 More information can be found on: https://www.adobe.com/support/security/bulletins/apsb13-08.h tml Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-32 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.273-51.1 flash-player-gnome-11.2.202.273-51.1 flash-player-kde4-11.2.202.273-51.1 References: http://support.novell.com/security/cve/CVE-2013-0504.html http://support.novell.com/security/cve/CVE-2013-0643.html http://support.novell.com/security/cve/CVE-2013-0648.html https://bugzilla.novell.com/806415

1 0

openSUSE-SU-2013:0359-1: critical: flash-player to 11.2.202.273
by opensuse-security＠opensuse.org 28 Feb '13

28 Feb '13

openSUSE Security Update: flash-player to 11.2.202.273 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0359-1 Rating: critical References: #806415 Cross-References: CVE-2013-0504 CVE-2013-0643 CVE-2013-0648 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: Flash Player was updated to 11.2.202.273 to fix critical security issues: (bnc#806415) * APSB13-08, CVE-2013-0504, CVE-2013-0643, CVE-2013-0648 More information can be found on: https://www.adobe.com/support/security/bulletins/apsb13-08.h tml Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-162 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): flash-player-11.2.202.273-54.1 flash-player-gnome-11.2.202.273-54.1 flash-player-kde4-11.2.202.273-54.1 References: http://support.novell.com/security/cve/CVE-2013-0504.html http://support.novell.com/security/cve/CVE-2013-0643.html http://support.novell.com/security/cve/CVE-2013-0648.html https://bugzilla.novell.com/806415

1 0