February 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2013:0335-1: critical: acroread to 9.5.4
by opensuse-security＠opensuse.org 25 Feb '13

25 Feb '13

openSUSE Security Update: acroread to 9.5.4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0335-1 Rating: critical References: #803939 Cross-References: CVE-2013-0640 CVE-2013-0641 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: acroread was updated to 9.5.4 to fix remote code execution problems. (CVE-2013-0640, CVE-2013-0641) More information can be found on: http://www.adobe.com/support/security/bulletins/apsb13-07.ht ml Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-151 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): acroread-cmaps-9.4.1-3.17.1 acroread-fonts-ja-9.4.1-3.17.1 acroread-fonts-ko-9.4.1-3.17.1 acroread-fonts-zh_CN-9.4.1-3.17.1 acroread-fonts-zh_TW-9.4.1-3.17.1 - openSUSE 12.1 (i586): acroread-9.5.4-3.17.1 acroread-browser-plugin-9.5.4-3.17.1 References: http://support.novell.com/security/cve/CVE-2013-0640.html http://support.novell.com/security/cve/CVE-2013-0641.html https://bugzilla.novell.com/803939

1 0

openSUSE-RU-2013:0334-1: moderate: WindowMaker: fixed SUSE menu in WindowMaker
by maintenance＠opensuse.org 25 Feb '13

25 Feb '13

openSUSE Recommended Update: WindowMaker: fixed SUSE menu in WindowMaker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0334-1 Rating: moderate References: #780348 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for WindowMaker: - bnc#780348: - WMRootMenu: (SuSE, OPEN_MENU, "| xdg_menu --format WindowMaker --charset UTF-8") - More (un)maximize tweaks ("jumping window") Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-145 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): WindowMaker-0.95.3-2.4.1 WindowMaker-debuginfo-0.95.3-2.4.1 WindowMaker-debugsource-0.95.3-2.4.1 WindowMaker-devel-0.95.3-2.4.1 References: https://bugzilla.novell.com/780348

1 0

openSUSE-RU-2013:0333-1: evolution-data-server: Failure to mark messages as read
by maintenance＠opensuse.org 25 Feb '13

25 Feb '13

openSUSE Recommended Update: evolution-data-server: Failure to mark messages as read ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0333-1 Rating: low References: #787688 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update addresses an issue in evolution-data-server that caused it to sometimes not mark Gmail messages as read if the listen for server change notifications preference was set. (bnc#787688) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-148 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): evolution-data-server-3.4.4-1.4.1 evolution-data-server-debuginfo-3.4.4-1.4.1 evolution-data-server-debugsource-3.4.4-1.4.1 evolution-data-server-devel-3.4.4-1.4.1 evolution-data-server-doc-3.4.4-1.4.1 libcamel-1_2-33-3.4.4-1.4.1 libcamel-1_2-33-debuginfo-3.4.4-1.4.1 libebackend-1_2-2-3.4.4-1.4.1 libebackend-1_2-2-debuginfo-3.4.4-1.4.1 libebook-1_2-13-3.4.4-1.4.1 libebook-1_2-13-debuginfo-3.4.4-1.4.1 libecal-1_2-11-3.4.4-1.4.1 libecal-1_2-11-debuginfo-3.4.4-1.4.1 libedata-book-1_2-13-3.4.4-1.4.1 libedata-book-1_2-13-debuginfo-3.4.4-1.4.1 libedata-cal-1_2-15-3.4.4-1.4.1 libedata-cal-1_2-15-debuginfo-3.4.4-1.4.1 libedataserver-1_2-16-3.4.4-1.4.1 libedataserver-1_2-16-debuginfo-3.4.4-1.4.1 libedataserverui-3_0-1-3.4.4-1.4.1 libedataserverui-3_0-1-debuginfo-3.4.4-1.4.1 typelib-1_0-EBook-1_2-3.4.4-1.4.1 typelib-1_0-ECalendar-1_2-3.4.4-1.4.1 typelib-1_0-EDataServer-1_2-3.4.4-1.4.1 - openSUSE 12.2 (x86_64): libcamel-1_2-33-32bit-3.4.4-1.4.1 libcamel-1_2-33-debuginfo-32bit-3.4.4-1.4.1 libebackend-1_2-2-32bit-3.4.4-1.4.1 libebackend-1_2-2-debuginfo-32bit-3.4.4-1.4.1 libebook-1_2-13-32bit-3.4.4-1.4.1 libebook-1_2-13-debuginfo-32bit-3.4.4-1.4.1 libecal-1_2-11-32bit-3.4.4-1.4.1 libecal-1_2-11-debuginfo-32bit-3.4.4-1.4.1 libedata-book-1_2-13-32bit-3.4.4-1.4.1 libedata-book-1_2-13-debuginfo-32bit-3.4.4-1.4.1 libedata-cal-1_2-15-32bit-3.4.4-1.4.1 libedata-cal-1_2-15-debuginfo-32bit-3.4.4-1.4.1 libedataserver-1_2-16-32bit-3.4.4-1.4.1 libedataserver-1_2-16-debuginfo-32bit-3.4.4-1.4.1 libedataserverui-3_0-1-32bit-3.4.4-1.4.1 libedataserverui-3_0-1-debuginfo-32bit-3.4.4-1.4.1 - openSUSE 12.2 (noarch): evolution-data-server-lang-3.4.4-1.4.1 References: https://bugzilla.novell.com/787688

1 0

openSUSE-RU-2013:0332-1: krb5: Two bugfixes
by maintenance＠opensuse.org 25 Feb '13

25 Feb '13

openSUSE Recommended Update: krb5: Two bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0332-1 Rating: low References: #777474 #794784 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for krb5: - bnc#777474: Fix cross-realm traversal TGT requests - bnc#794784: Fix krb5-send-pr Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-147 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): krb5-1.9.1-24.12.1 krb5-client-1.9.1-24.12.1 krb5-client-debuginfo-1.9.1-24.12.1 krb5-debuginfo-1.9.1-24.12.1 krb5-debugsource-1.9.1-24.12.1 krb5-devel-1.9.1-24.12.1 krb5-plugin-kdb-ldap-1.9.1-24.12.1 krb5-plugin-kdb-ldap-debuginfo-1.9.1-24.12.1 krb5-plugin-preauth-pkinit-1.9.1-24.12.1 krb5-plugin-preauth-pkinit-debuginfo-1.9.1-24.12.1 krb5-server-1.9.1-24.12.1 krb5-server-debuginfo-1.9.1-24.12.1 - openSUSE 12.1 (x86_64): krb5-32bit-1.9.1-24.12.1 krb5-debuginfo-32bit-1.9.1-24.12.1 krb5-devel-32bit-1.9.1-24.12.1 - openSUSE 12.1 (ia64): krb5-debuginfo-x86-1.9.1-24.12.1 krb5-x86-1.9.1-24.12.1 References: https://bugzilla.novell.com/777474 https://bugzilla.novell.com/794784

1 0

openSUSE-RU-2013:0331-1: gnome-control-center: Several fixes
by maintenance＠opensuse.org 25 Feb '13

25 Feb '13

openSUSE Recommended Update: gnome-control-center: Several fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0331-1 Rating: low References: #779408 #779413 #779414 #796932 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes various issues with the password selection dialog in gnome-control-center: - bnc#796932: password hints are not implemented so do not allow setting one - bnc#779414: remove random password generation which has an unpackaged dependency - bnc#779408: temporarily remove "password to be set at next login" and "login without password" options - bnc#779413: ensure the new password is different from the old password and avoid a hang. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-149 - openSUSE 12.1: zypper in -t patch openSUSE-2013-149 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): gnome-control-center-3.4.2-3.15.1 gnome-control-center-debuginfo-3.4.2-3.15.1 gnome-control-center-debugsource-3.4.2-3.15.1 gnome-control-center-devel-3.4.2-3.15.1 gnome-control-center-user-faces-3.4.2-3.15.1 - openSUSE 12.2 (noarch): gnome-control-center-branding-upstream-3.4.2-3.15.1 gnome-control-center-lang-3.4.2-3.15.1 - openSUSE 12.1 (i586 x86_64): gnome-control-center-3.2.1-2.10.1 gnome-control-center-debuginfo-3.2.1-2.10.1 gnome-control-center-debugsource-3.2.1-2.10.1 gnome-control-center-devel-3.2.1-2.10.1 gnome-control-center-user-faces-3.2.1-2.10.1 libgnome-control-center1-3.2.1-2.10.1 libgnome-control-center1-debuginfo-3.2.1-2.10.1 - openSUSE 12.1 (noarch): gnome-control-center-branding-upstream-3.2.1-2.10.1 gnome-control-center-lang-3.2.1-2.10.1 References: https://bugzilla.novell.com/779408 https://bugzilla.novell.com/779413 https://bugzilla.novell.com/779414 https://bugzilla.novell.com/796932

1 0

openSUSE-RU-2013:0330-1: krb5: Fix krb5-send-pr
by maintenance＠opensuse.org 25 Feb '13

25 Feb '13

openSUSE Recommended Update: krb5: Fix krb5-send-pr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0330-1 Rating: low References: #794784 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for krb5: - bnc#794784: Fix krb5-send-pr Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-146 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): krb5-1.10.2-3.8.1 krb5-client-1.10.2-3.8.1 krb5-client-debuginfo-1.10.2-3.8.1 krb5-debuginfo-1.10.2-3.8.1 krb5-debugsource-1.10.2-3.8.1 krb5-devel-1.10.2-3.8.1 krb5-mini-1.10.2-3.8.1 krb5-mini-debuginfo-1.10.2-3.8.1 krb5-mini-debugsource-1.10.2-3.8.1 krb5-mini-devel-1.10.2-3.8.1 krb5-plugin-kdb-ldap-1.10.2-3.8.1 krb5-plugin-kdb-ldap-debuginfo-1.10.2-3.8.1 krb5-plugin-preauth-pkinit-1.10.2-3.8.1 krb5-plugin-preauth-pkinit-debuginfo-1.10.2-3.8.1 krb5-server-1.10.2-3.8.1 krb5-server-debuginfo-1.10.2-3.8.1 - openSUSE 12.2 (x86_64): krb5-32bit-1.10.2-3.8.1 krb5-debuginfo-32bit-1.10.2-3.8.1 krb5-devel-32bit-1.10.2-3.8.1 - openSUSE 12.2 (noarch): krb5-doc-1.10.2-3.8.2 References: https://bugzilla.novell.com/794784

1 0

openSUSE-SU-2013:0324-1: moderate: Mozilla Februarys
by opensuse-security＠opensuse.org 22 Feb '13

22 Feb '13

openSUSE Security Update: Mozilla Februarys ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0324-1 Rating: moderate References: Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Firefox was updated to version 19.0. Seamonkey was updated to version 2.16. Thunderbird was updated to version 17.0.3. * MFSA 2013-21/CVE-2013-0783/2013-0784 Miscellaneous memory safety hazards * MFSA 2013-22/CVE-2013-0772 (bmo#801366) Out-of-bounds read in image rendering * MFSA 2013-23/CVE-2013-0765 (bmo#830614) Wrapped WebIDL objects can be wrapped again * MFSA 2013-24/CVE-2013-0773 (bmo#809652) Web content bypass of COW and SOW security wrappers * MFSA 2013-25/CVE-2013-0774 (bmo#827193) Privacy leak in JavaScript Workers * MFSA 2013-26/CVE-2013-0775 (bmo#831095) Use-after-free in nsImageLoadingContent * MFSA 2013-27/CVE-2013-0776 (bmo#796475) Phishing on HTTPS connection through malicious proxy * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/ CVE-2013-0778/CVE-2013-0779/CVE-2013-0781 Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-29 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): MozillaFirefox-19.0-61.1 MozillaFirefox-branding-upstream-19.0-61.1 MozillaFirefox-buildsymbols-19.0-61.1 MozillaFirefox-debuginfo-19.0-61.1 MozillaFirefox-debugsource-19.0-61.1 MozillaFirefox-devel-19.0-61.1 MozillaFirefox-translations-common-19.0-61.1 MozillaFirefox-translations-other-19.0-61.1 MozillaThunderbird-17.0.3-49.1 MozillaThunderbird-buildsymbols-17.0.3-49.1 MozillaThunderbird-debuginfo-17.0.3-49.1 MozillaThunderbird-debugsource-17.0.3-49.1 MozillaThunderbird-devel-17.0.3-49.1 MozillaThunderbird-devel-debuginfo-17.0.3-49.1 MozillaThunderbird-translations-common-17.0.3-49.1 MozillaThunderbird-translations-other-17.0.3-49.1 enigmail-1.5.1+17.0.3-49.1 enigmail-debuginfo-1.5.1+17.0.3-49.1 seamonkey-2.16-53.1 seamonkey-debuginfo-2.16-53.1 seamonkey-debugsource-2.16-53.1 seamonkey-dom-inspector-2.16-53.1 seamonkey-irc-2.16-53.1 seamonkey-translations-common-2.16-53.1 seamonkey-translations-other-2.16-53.1 seamonkey-venkman-2.16-53.1 References:

1 0

openSUSE-SU-2013:0323-1: important: Mozilla: February 2013 update round (Firefox 19)
by opensuse-security＠opensuse.org 22 Feb '13

22 Feb '13

openSUSE Security Update: Mozilla: February 2013 update round (Firefox 19) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0323-1 Rating: important References: #796895 #804248 Cross-References: CVE-2013-0765 CVE-2013-0772 CVE-2013-0773 CVE-2013-0774 CVE-2013-0775 CVE-2013-0776 CVE-2013-0777 CVE-2013-0778 CVE-2013-0779 CVE-2013-0780 CVE-2013-0781 CVE-2013-0782 CVE-2013-0783 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: MozillaFirefox was updated to Firefox 19.0 (bnc#804248) MozillaThunderbird was updated to Thunderbird 17.0.3 (bnc#804248) seamonkey was updated to SeaMonkey 2.16 (bnc#804248) xulrunner was updated to 17.0.3esr (bnc#804248) chmsee was updated to version 2.0. Changes in MozillaFirefox 19.0: * MFSA 2013-21/CVE-2013-0783/2013-0784 Miscellaneous memory safety hazards * MFSA 2013-22/CVE-2013-0772 (bmo#801366) Out-of-bounds read in image rendering * MFSA 2013-23/CVE-2013-0765 (bmo#830614) Wrapped WebIDL objects can be wrapped again * MFSA 2013-24/CVE-2013-0773 (bmo#809652) Web content bypass of COW and SOW security wrappers * MFSA 2013-25/CVE-2013-0774 (bmo#827193) Privacy leak in JavaScript Workers * MFSA 2013-26/CVE-2013-0775 (bmo#831095) Use-after-free in nsImageLoadingContent * MFSA 2013-27/CVE-2013-0776 (bmo#796475) Phishing on HTTPS connection through malicious proxy * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/ CVE-2013-0778/CVE-2013-0779/CVE-2013-0781 Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer - removed obsolete patches * mozilla-webrtc.patch * mozilla-gstreamer-803287.patch - added patch to fix session restore window order (bmo#712763) - update to Firefox 18.0.2 * blocklist and CTP updates * fixes in JS engine - update to Firefox 18.0.1 * blocklist updates * backed out bmo#677092 (removed patch) * fixed problems involving HTTP proxy transactions - Fix WebRTC to build on powerpc Changes in MozillaThunderbird: - update to Thunderbird 17.0.3 (bnc#804248) * MFSA 2013-21/CVE-2013-0783 Miscellaneous memory safety hazards * MFSA 2013-24/CVE-2013-0773 (bmo#809652) Web content bypass of COW and SOW security wrappers * MFSA 2013-25/CVE-2013-0774 (bmo#827193) Privacy leak in JavaScript Workers * MFSA 2013-26/CVE-2013-0775 (bmo#831095) Use-after-free in nsImageLoadingContent * MFSA 2013-27/CVE-2013-0776 (bmo#796475) Phishing on HTTPS connection through malicious proxy * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782 Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer - update Enigmail to 1.5.1 * The release fixes the regressions found in the past few weeks Changes in seamonkey: - update to SeaMonkey 2.16 (bnc#804248) * MFSA 2013-21/CVE-2013-0783/2013-0784 Miscellaneous memory safety hazards * MFSA 2013-22/CVE-2013-0772 (bmo#801366) Out-of-bounds read in image rendering * MFSA 2013-23/CVE-2013-0765 (bmo#830614) Wrapped WebIDL objects can be wrapped again * MFSA 2013-24/CVE-2013-0773 (bmo#809652) Web content bypass of COW and SOW security wrappers * MFSA 2013-25/CVE-2013-0774 (bmo#827193) Privacy leak in JavaScript Workers * MFSA 2013-26/CVE-2013-0775 (bmo#831095) Use-after-free in nsImageLoadingContent * MFSA 2013-27/CVE-2013-0776 (bmo#796475) Phishing on HTTPS connection through malicious proxy * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/ CVE-2013-0778/CVE-2013-0779/CVE-2013-0781 Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer - removed obsolete patches * mozilla-webrtc.patch * mozilla-gstreamer-803287.patch - update to SeaMonkey 2.15.2 * Applications could not be removed from the "Application details" dialog under Preferences, Helper Applications (bmo#826771). * View / Message Body As could show menu items out of context (bmo#831348) - update to SeaMonkey 2.15.1 * backed out bmo#677092 (removed patch) * fixed problems involving HTTP proxy transactions - backed out restartless language packs as it broke multi-locale setup (bmo#677092, bmo#818468) Changes in xulrunner: - update to 17.0.3esr (bnc#804248) * MFSA 2013-21/CVE-2013-0783 Miscellaneous memory safety hazards * MFSA 2013-24/CVE-2013-0773 (bmo#809652) Web content bypass of COW and SOW security wrappers * MFSA 2013-25/CVE-2013-0774 (bmo#827193) Privacy leak in JavaScript Workers * MFSA 2013-26/CVE-2013-0775 (bmo#831095) Use-after-free in nsImageLoadingContent * MFSA 2013-27/CVE-2013-0776 (bmo#796475) Phishing on HTTPS connection through malicious proxy * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782 Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-141 - openSUSE 12.1: zypper in -t patch openSUSE-2013-141 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): MozillaFirefox-19.0-2.33.1 MozillaFirefox-branding-upstream-19.0-2.33.1 MozillaFirefox-buildsymbols-19.0-2.33.1 MozillaFirefox-debuginfo-19.0-2.33.1 MozillaFirefox-debugsource-19.0-2.33.1 MozillaFirefox-devel-19.0-2.33.1 MozillaFirefox-translations-common-19.0-2.33.1 MozillaFirefox-translations-other-19.0-2.33.1 MozillaThunderbird-17.0.3-49.31.1 MozillaThunderbird-buildsymbols-17.0.3-49.31.1 MozillaThunderbird-debuginfo-17.0.3-49.31.1 MozillaThunderbird-debugsource-17.0.3-49.31.1 MozillaThunderbird-devel-17.0.3-49.31.1 MozillaThunderbird-devel-debuginfo-17.0.3-49.31.1 MozillaThunderbird-translations-common-17.0.3-49.31.1 MozillaThunderbird-translations-other-17.0.3-49.31.1 chmsee-2.0-2.14.3 chmsee-debuginfo-2.0-2.14.3 chmsee-debugsource-2.0-2.14.3 enigmail-1.5.1+17.0.3-49.31.1 enigmail-debuginfo-1.5.1+17.0.3-49.31.1 mozilla-js-17.0.3-2.30.1 mozilla-js-debuginfo-17.0.3-2.30.1 seamonkey-2.16-2.34.2 seamonkey-debuginfo-2.16-2.34.2 seamonkey-debugsource-2.16-2.34.2 seamonkey-dom-inspector-2.16-2.34.2 seamonkey-irc-2.16-2.34.2 seamonkey-translations-common-2.16-2.34.2 seamonkey-translations-other-2.16-2.34.2 seamonkey-venkman-2.16-2.34.2 xulrunner-17.0.3-2.30.1 xulrunner-buildsymbols-17.0.3-2.30.1 xulrunner-debuginfo-17.0.3-2.30.1 xulrunner-debugsource-17.0.3-2.30.1 xulrunner-devel-17.0.3-2.30.1 xulrunner-devel-debuginfo-17.0.3-2.30.1 - openSUSE 12.2 (x86_64): mozilla-js-32bit-17.0.3-2.30.1 mozilla-js-debuginfo-32bit-17.0.3-2.30.1 xulrunner-32bit-17.0.3-2.30.1 xulrunner-debuginfo-32bit-17.0.3-2.30.1 - openSUSE 12.1 (i586 x86_64): MozillaFirefox-19.0-2.62.1 MozillaFirefox-branding-upstream-19.0-2.62.1 MozillaFirefox-buildsymbols-19.0-2.62.1 MozillaFirefox-debuginfo-19.0-2.62.1 MozillaFirefox-debugsource-19.0-2.62.1 MozillaFirefox-devel-19.0-2.62.1 MozillaFirefox-translations-common-19.0-2.62.1 MozillaFirefox-translations-other-19.0-2.62.1 MozillaThunderbird-17.0.3-33.51.1 MozillaThunderbird-buildsymbols-17.0.3-33.51.1 MozillaThunderbird-debuginfo-17.0.3-33.51.1 MozillaThunderbird-debugsource-17.0.3-33.51.1 MozillaThunderbird-devel-17.0.3-33.51.1 MozillaThunderbird-devel-debuginfo-17.0.3-33.51.1 MozillaThunderbird-translations-common-17.0.3-33.51.1 MozillaThunderbird-translations-other-17.0.3-33.51.1 chmsee-2.0-2.32.3 chmsee-debuginfo-2.0-2.32.3 chmsee-debugsource-2.0-2.32.3 enigmail-1.5.1+17.0.3-33.51.1 enigmail-debuginfo-1.5.1+17.0.3-33.51.1 mozilla-js-17.0.3-2.57.1 mozilla-js-debuginfo-17.0.3-2.57.1 seamonkey-2.16-2.53.1 seamonkey-debuginfo-2.16-2.53.1 seamonkey-debugsource-2.16-2.53.1 seamonkey-dom-inspector-2.16-2.53.1 seamonkey-irc-2.16-2.53.1 seamonkey-translations-common-2.16-2.53.1 seamonkey-translations-other-2.16-2.53.1 seamonkey-venkman-2.16-2.53.1 xulrunner-17.0.3-2.57.1 xulrunner-buildsymbols-17.0.3-2.57.1 xulrunner-debuginfo-17.0.3-2.57.1 xulrunner-debugsource-17.0.3-2.57.1 xulrunner-devel-17.0.3-2.57.1 xulrunner-devel-debuginfo-17.0.3-2.57.1 - openSUSE 12.1 (x86_64): mozilla-js-32bit-17.0.3-2.57.1 mozilla-js-debuginfo-32bit-17.0.3-2.57.1 xulrunner-32bit-17.0.3-2.57.1 xulrunner-debuginfo-32bit-17.0.3-2.57.1 - openSUSE 12.1 (ia64): mozilla-js-debuginfo-x86-17.0.3-2.57.1 mozilla-js-x86-17.0.3-2.57.1 xulrunner-debuginfo-x86-17.0.3-2.57.1 xulrunner-x86-17.0.3-2.57.1 References: http://support.novell.com/security/cve/CVE-2013-0765.html http://support.novell.com/security/cve/CVE-2013-0772.html http://support.novell.com/security/cve/CVE-2013-0773.html http://support.novell.com/security/cve/CVE-2013-0774.html http://support.novell.com/security/cve/CVE-2013-0775.html http://support.novell.com/security/cve/CVE-2013-0776.html http://support.novell.com/security/cve/CVE-2013-0777.html http://support.novell.com/security/cve/CVE-2013-0778.html http://support.novell.com/security/cve/CVE-2013-0779.html http://support.novell.com/security/cve/CVE-2013-0780.html http://support.novell.com/security/cve/CVE-2013-0781.html http://support.novell.com/security/cve/CVE-2013-0782.html http://support.novell.com/security/cve/CVE-2013-0783.html https://bugzilla.novell.com/796895 https://bugzilla.novell.com/804248

1 0

openSUSE-SU-2013:0319-1: moderate: postgresql: security and bugfix update to 9.0.12
by opensuse-security＠opensuse.org 21 Feb '13

21 Feb '13

openSUSE Security Update: postgresql: security and bugfix update to 9.0.12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0319-1 Rating: moderate References: #803057 Cross-References: CVE-2013-0255 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Fixed bugs: *Prevent execution of enum_recv from SQL (CVE-2013-0255); *Update minimum recovery point when truncating a relation file *Fix SQL grammar to allow subscripting or field selection from a sub-SELECT result *Protect against race conditions when scanning pg_tablespace *Prevent DROP OWNED from trying to drop whole databases or tablespaces *Fix error in vacuum_freeze_table_age implementation *Prevent misbehavior when a RowExpr or XmlExpr is parse-analyzed twice *Improve defenses against integer overflow in hashtable sizing calculations *Reject out-of-range dates in to_date() *Fix possible crash in psql's \? command when not connected to a database *Fix one-byte buffer overrun in libpq's PQprintTuples *Make ecpglib use translated messages properly *Properly install ecpg_compat and pgtypes libraries on MSVC *Rearrange configure's tests for supplied functions so it is not fooled by bogus exports from libedit/libreadline * Add new timezone abbreviation FET Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-28 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libecpg6-9.0.12-27.1 libecpg6-debuginfo-9.0.12-27.1 libpq5-9.0.12-27.1 libpq5-debuginfo-9.0.12-27.1 postgresql-9.0.12-27.1 postgresql-contrib-9.0.12-27.1 postgresql-contrib-debuginfo-9.0.12-27.1 postgresql-debuginfo-9.0.12-27.1 postgresql-debugsource-9.0.12-27.1 postgresql-devel-9.0.12-27.1 postgresql-devel-debuginfo-9.0.12-27.1 postgresql-libs-debugsource-9.0.12-27.1 postgresql-plperl-9.0.12-27.1 postgresql-plperl-debuginfo-9.0.12-27.1 postgresql-plpython-9.0.12-27.1 postgresql-plpython-debuginfo-9.0.12-27.1 postgresql-pltcl-9.0.12-27.1 postgresql-pltcl-debuginfo-9.0.12-27.1 postgresql-server-9.0.12-27.1 postgresql-server-debuginfo-9.0.12-27.1 - openSUSE 11.4 (x86_64): libpq5-32bit-9.0.12-27.1 libpq5-debuginfo-32bit-9.0.12-27.1 - openSUSE 11.4 (noarch): postgresql-docs-9.0.12-27.1 - openSUSE 11.4 (ia64): libpq5-debuginfo-x86-9.0.12-27.1 libpq5-x86-9.0.12-27.1 References: http://support.novell.com/security/cve/CVE-2013-0255.html https://bugzilla.novell.com/803057

1 0

openSUSE-SU-2013:0318-1: moderate: postgresql91: update to 9.1.8
by opensuse-security＠opensuse.org 21 Feb '13

21 Feb '13

openSUSE Security Update: postgresql91: update to 9.1.8 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0318-1 Rating: moderate References: #802679 Cross-References: CVE-2013-0255 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: PostgreSQL was updated to version 9.1.8 (bnc#802679): * Prevent execution of enum_recv from SQL (CVE-2013-0255). * Fix multiple problems in detection of when a consistent database state has been reached during WAL replay * Update minimum recovery point when truncating a relation file * Fix recycling of WAL segments after changing recovery target timeline * Fix missing cancellations in hot standby mode * See the release notes for the rest of the changes: http://www.postgresql.org/docs/9.1/static/release-9-1-8.html /usr/share/doc/packages/postgresql/HISTORY - Remove postgresql91-full.spec.in and use postgresql91.spec as the master for generating postgresql91-libs.spec. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-139 - openSUSE 12.1: zypper in -t patch openSUSE-2013-139 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libecpg6-9.1.8-16.1 libecpg6-debuginfo-9.1.8-16.1 libpq5-9.1.8-16.1 libpq5-debuginfo-9.1.8-16.1 postgresql91-9.1.8-16.1 postgresql91-contrib-9.1.8-16.1 postgresql91-contrib-debuginfo-9.1.8-16.1 postgresql91-debuginfo-9.1.8-16.1 postgresql91-debugsource-9.1.8-16.1 postgresql91-devel-9.1.8-16.1 postgresql91-devel-debuginfo-9.1.8-16.1 postgresql91-libs-debugsource-9.1.8-16.1 postgresql91-plperl-9.1.8-16.1 postgresql91-plperl-debuginfo-9.1.8-16.1 postgresql91-plpython-9.1.8-16.1 postgresql91-plpython-debuginfo-9.1.8-16.1 postgresql91-pltcl-9.1.8-16.1 postgresql91-pltcl-debuginfo-9.1.8-16.1 postgresql91-server-9.1.8-16.1 postgresql91-server-debuginfo-9.1.8-16.1 - openSUSE 12.2 (x86_64): libecpg6-32bit-9.1.8-16.1 libecpg6-debuginfo-32bit-9.1.8-16.1 libpq5-32bit-9.1.8-16.1 libpq5-debuginfo-32bit-9.1.8-16.1 postgresql91-devel-32bit-9.1.8-16.1 postgresql91-devel-debuginfo-32bit-9.1.8-16.1 - openSUSE 12.2 (noarch): postgresql91-docs-9.1.8-16.1 - openSUSE 12.1 (i586 x86_64): libecpg6-9.1.8-21.1 libecpg6-debuginfo-9.1.8-21.1 libpq5-9.1.8-21.1 libpq5-debuginfo-9.1.8-21.1 postgresql91-9.1.8-21.1 postgresql91-contrib-9.1.8-21.1 postgresql91-contrib-debuginfo-9.1.8-21.1 postgresql91-debuginfo-9.1.8-21.1 postgresql91-debugsource-9.1.8-21.1 postgresql91-devel-9.1.8-21.1 postgresql91-devel-debuginfo-9.1.8-21.1 postgresql91-libs-debugsource-9.1.8-21.1 postgresql91-plperl-9.1.8-21.1 postgresql91-plperl-debuginfo-9.1.8-21.1 postgresql91-plpython-9.1.8-21.1 postgresql91-plpython-debuginfo-9.1.8-21.1 postgresql91-pltcl-9.1.8-21.1 postgresql91-pltcl-debuginfo-9.1.8-21.1 postgresql91-server-9.1.8-21.1 postgresql91-server-debuginfo-9.1.8-21.1 - openSUSE 12.1 (x86_64): libecpg6-32bit-9.1.8-21.1 libecpg6-debuginfo-32bit-9.1.8-21.1 libpq5-32bit-9.1.8-21.1 libpq5-debuginfo-32bit-9.1.8-21.1 postgresql91-devel-32bit-9.1.8-21.1 postgresql91-devel-debuginfo-32bit-9.1.8-21.1 - openSUSE 12.1 (noarch): postgresql91-docs-9.1.8-21.1 - openSUSE 12.1 (ia64): libecpg6-debuginfo-x86-9.1.8-21.1 libecpg6-x86-9.1.8-21.1 libpq5-debuginfo-x86-9.1.8-21.1 libpq5-x86-9.1.8-21.1 postgresql91-devel-debuginfo-x86-9.1.8-21.1 References: http://support.novell.com/security/cve/CVE-2013-0255.html https://bugzilla.novell.com/802679

1 0