March 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:0542-1: make: Fixed an issue whereby intermediaries are not considered for remake
by maintenance＠opensuse.org 26 Mar '13

26 Mar '13

openSUSE Recommended Update: make: Fixed an issue whereby intermediaries are not considered for remake ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0542-1 Rating: low References: #810657 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for make: - bnc#810657: Fixed an issue whereby intermediaries are not considered for remake Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-257 - openSUSE 12.1: zypper in -t patch openSUSE-2013-257 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): make-3.82-151.5.1 make-debuginfo-3.82-151.5.1 make-debugsource-3.82-151.5.1 - openSUSE 12.1 (i586 x86_64): make-3.82-147.5.1 make-debuginfo-3.82-147.5.1 make-debugsource-3.82-147.5.1 References: https://bugzilla.novell.com/810657

1 0

openSUSE-RU-2013:0541-1: totem: Fixed issue with totem for KDE-users
by maintenance＠opensuse.org 26 Mar '13

26 Mar '13

openSUSE Recommended Update: totem: Fixed issue with totem for KDE-users ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0541-1 Rating: low References: #809854 #810376 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issue for totem: - bnc#809854, bnc#810376: Added gstreamer-plugins-bad as requirement. This is needed for the scaletempo plugin Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-256 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): nautilus-totem-3.6.3-2.5.1 nautilus-totem-debuginfo-3.6.3-2.5.1 totem-3.6.3-2.5.1 totem-browser-plugin-3.6.3-2.5.1 totem-browser-plugin-debuginfo-3.6.3-2.5.1 totem-browser-plugin-gmp-3.6.3-2.5.1 totem-browser-plugin-gmp-debuginfo-3.6.3-2.5.1 totem-browser-plugin-vegas-3.6.3-2.5.1 totem-browser-plugin-vegas-debuginfo-3.6.3-2.5.1 totem-debuginfo-3.6.3-2.5.1 totem-debugsource-3.6.3-2.5.1 totem-devel-3.6.3-2.5.1 totem-plugin-zeitgeist-3.6.3-2.5.1 totem-plugin-zeitgeist-debuginfo-3.6.3-2.5.1 totem-plugins-3.6.3-2.5.1 totem-plugins-debuginfo-3.6.3-2.5.1 - openSUSE 12.3 (noarch): totem-lang-3.6.3-2.5.1 References: https://bugzilla.novell.com/809854 https://bugzilla.novell.com/810376

1 0

openSUSE-SU-2013:0540-1: moderate: pigz: fixed unpacking permissions
by opensuse-security＠opensuse.org 26 Mar '13

26 Mar '13

openSUSE Security Update: pigz: fixed unpacking permissions ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0540-1 Rating: moderate References: #803933 Cross-References: CVE-2013-0296 Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: pigz incorrectly used world writeable permissions during unpacking (CVE-2013-0296). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-258 - openSUSE 12.2: zypper in -t patch openSUSE-2013-258 - openSUSE 12.1: zypper in -t patch openSUSE-2013-258 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): pigz-2.2.5-2.4.1 pigz-debuginfo-2.2.5-2.4.1 pigz-debugsource-2.2.5-2.4.1 - openSUSE 12.2 (i586 x86_64): pigz-2.1.6-9.4.1 pigz-debuginfo-2.1.6-9.4.1 pigz-debugsource-2.1.6-9.4.1 - openSUSE 12.1 (i586 x86_64): pigz-2.1.6-5.4.1 pigz-debuginfo-2.1.6-5.4.1 pigz-debugsource-2.1.6-5.4.1 References: http://support.novell.com/security/cve/CVE-2013-0296.html https://bugzilla.novell.com/803933

1 0

openSUSE-RU-2013:0539-1: moderate: release-notes-openSUSE: Update to 12.3.7
by maintenance＠opensuse.org 26 Mar '13

26 Mar '13

openSUSE Recommended Update: release-notes-openSUSE: Update to 12.3.7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0539-1 Rating: moderate References: #809163 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for release-notes-openSUSE: - Enable 'ar' again (but for HTML only) - New entries: The proprietary NVIDIA driver requires users to have access to /dev/nvidia* devices (bnc#809163) - Updated translations Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-255 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): release-notes-openSUSE-12.3.7-1.10.1 References: https://bugzilla.novell.com/809163

1 0

openSUSE-RU-2013:0538-1: libstorage: Update to version 2.23.10
by maintenance＠opensuse.org 26 Mar '13

26 Mar '13

openSUSE Recommended Update: libstorage: Update to version 2.23.10 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0538-1 Rating: low References: #808020 #808487 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for libstorage: - version 2.23.10 - bnc#808020: fix LVM encryption when btrfs fs is present - improve handling of udev by-id links for dm devices - bnc#808487: fix detect of encrypted volumes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-254 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libstorage-debugsource-2.23.10-1.4.1 libstorage-devel-2.23.10-1.4.1 libstorage-python-2.23.10-1.4.1 libstorage-python-debuginfo-2.23.10-1.4.1 libstorage-ruby-2.23.10-1.4.1 libstorage-ruby-debuginfo-2.23.10-1.4.1 libstorage-testsuite-2.23.10-1.4.1 libstorage-testsuite-debuginfo-2.23.10-1.4.1 libstorage4-2.23.10-1.4.1 libstorage4-debuginfo-2.23.10-1.4.1 yast2-storage-2.23.9-1.4.1 yast2-storage-debuginfo-2.23.9-1.4.1 yast2-storage-debugsource-2.23.9-1.4.1 yast2-storage-devel-2.23.9-1.4.1 References: https://bugzilla.novell.com/808020 https://bugzilla.novell.com/808487

1 0

openSUSE-RU-2013:0537-1: yast2-install: fix network in 2nd stage
by maintenance＠opensuse.org 26 Mar '13

26 Mar '13

openSUSE Recommended Update: yast2-install: fix network in 2nd stage ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0537-1 Rating: low References: #806454 #808039 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for yast2-install: - bnc#808039: NetworkManager is enabled and active after second stage - bnc#806454: deactivate RAID before going back to "Disk Activation" during installation Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-253 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): yast2-installation-2.23.13-1.4.3 yast2-installation-devel-doc-2.23.13-1.4.3 References: https://bugzilla.novell.com/806454 https://bugzilla.novell.com/808039

1 0

openSUSE-SU-2013:0536-1: moderate: GraphicsMagick: fixed integer overflows
by opensuse-security＠opensuse.org 26 Mar '13

26 Mar '13

openSUSE Security Update: GraphicsMagick: fixed integer overflows ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0536-1 Rating: moderate References: #773612 Cross-References: CVE-2012-3438 Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: GraphicsMagick was updated to fix integer overflows in the _png_malloc functions (CVE-2012-3438). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-252 - openSUSE 12.2: zypper in -t patch openSUSE-2013-252 - openSUSE 12.1: zypper in -t patch openSUSE-2013-252 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): GraphicsMagick-1.3.17-2.4.1 GraphicsMagick-debuginfo-1.3.17-2.4.1 GraphicsMagick-debugsource-1.3.17-2.4.1 GraphicsMagick-devel-1.3.17-2.4.1 libGraphicsMagick++-devel-1.3.17-2.4.1 libGraphicsMagick++3-1.3.17-2.4.1 libGraphicsMagick++3-debuginfo-1.3.17-2.4.1 libGraphicsMagick3-1.3.17-2.4.1 libGraphicsMagick3-debuginfo-1.3.17-2.4.1 libGraphicsMagickWand2-1.3.17-2.4.1 libGraphicsMagickWand2-debuginfo-1.3.17-2.4.1 perl-GraphicsMagick-1.3.17-2.4.1 perl-GraphicsMagick-debuginfo-1.3.17-2.4.1 - openSUSE 12.2 (i586 x86_64): GraphicsMagick-1.3.15-14.8.1 GraphicsMagick-debuginfo-1.3.15-14.8.1 GraphicsMagick-debugsource-1.3.15-14.8.1 GraphicsMagick-devel-1.3.15-14.8.1 libGraphicsMagick++-devel-1.3.15-14.8.1 libGraphicsMagick++3-1.3.15-14.8.1 libGraphicsMagick++3-debuginfo-1.3.15-14.8.1 libGraphicsMagick3-1.3.15-14.8.1 libGraphicsMagick3-debuginfo-1.3.15-14.8.1 libGraphicsMagickWand2-1.3.15-14.8.1 libGraphicsMagickWand2-debuginfo-1.3.15-14.8.1 perl-GraphicsMagick-1.3.15-14.8.1 perl-GraphicsMagick-debuginfo-1.3.15-14.8.1 - openSUSE 12.1 (i586 x86_64): GraphicsMagick-1.3.12-14.4.1 GraphicsMagick-debuginfo-1.3.12-14.4.1 GraphicsMagick-debugsource-1.3.12-14.4.1 GraphicsMagick-devel-1.3.12-14.4.1 libGraphicsMagick++-devel-1.3.12-14.4.1 libGraphicsMagick++3-1.3.12-14.4.1 libGraphicsMagick++3-debuginfo-1.3.12-14.4.1 libGraphicsMagick3-1.3.12-14.4.1 libGraphicsMagick3-debuginfo-1.3.12-14.4.1 libGraphicsMagickWand2-1.3.12-14.4.1 libGraphicsMagickWand2-debuginfo-1.3.12-14.4.1 perl-GraphicsMagick-1.3.12-14.4.1 perl-GraphicsMagick-debuginfo-1.3.12-14.4.1 References: http://support.novell.com/security/cve/CVE-2012-3438.html https://bugzilla.novell.com/773612

1 0

openSUSE-SU-2013:0535-1: moderate: ImageMagick: integer overflow fixes
by opensuse-security＠opensuse.org 26 Mar '13

26 Mar '13

openSUSE Security Update: ImageMagick: integer overflow fixes ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0535-1 Rating: moderate References: #773612 Cross-References: CVE-2012-3437 Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: ImageMagick received fixes for a overflow in *png_malloc functions. (CVE-2012-3437) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-251 - openSUSE 12.2: zypper in -t patch openSUSE-2013-251 - openSUSE 12.1: zypper in -t patch openSUSE-2013-251 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): ImageMagick-6.7.8.8-4.5.1 ImageMagick-debuginfo-6.7.8.8-4.5.1 ImageMagick-debugsource-6.7.8.8-4.5.1 ImageMagick-devel-6.7.8.8-4.5.1 ImageMagick-extra-6.7.8.8-4.5.1 ImageMagick-extra-debuginfo-6.7.8.8-4.5.1 libMagick++-devel-6.7.8.8-4.5.1 libMagick++5-6.7.8.8-4.5.1 libMagick++5-debuginfo-6.7.8.8-4.5.1 libMagickCore5-6.7.8.8-4.5.1 libMagickCore5-debuginfo-6.7.8.8-4.5.1 libMagickWand5-6.7.8.8-4.5.1 libMagickWand5-debuginfo-6.7.8.8-4.5.1 perl-PerlMagick-6.7.8.8-4.5.1 perl-PerlMagick-debuginfo-6.7.8.8-4.5.1 - openSUSE 12.3 (x86_64): ImageMagick-devel-32bit-6.7.8.8-4.5.1 libMagickCore5-32bit-6.7.8.8-4.5.1 libMagickCore5-debuginfo-32bit-6.7.8.8-4.5.1 libMagickWand5-32bit-6.7.8.8-4.5.1 libMagickWand5-debuginfo-32bit-6.7.8.8-4.5.1 - openSUSE 12.3 (noarch): ImageMagick-doc-6.7.8.8-4.5.1 - openSUSE 12.2 (i586 x86_64): ImageMagick-6.7.6.9-2.4.1 ImageMagick-debuginfo-6.7.6.9-2.4.1 ImageMagick-debugsource-6.7.6.9-2.4.1 ImageMagick-devel-6.7.6.9-2.4.1 ImageMagick-extra-6.7.6.9-2.4.1 ImageMagick-extra-debuginfo-6.7.6.9-2.4.1 libMagick++-devel-6.7.6.9-2.4.1 libMagick++5-6.7.6.9-2.4.1 libMagick++5-debuginfo-6.7.6.9-2.4.1 libMagickCore5-6.7.6.9-2.4.1 libMagickCore5-debuginfo-6.7.6.9-2.4.1 libMagickWand5-6.7.6.9-2.4.1 libMagickWand5-debuginfo-6.7.6.9-2.4.1 perl-PerlMagick-6.7.6.9-2.4.1 perl-PerlMagick-debuginfo-6.7.6.9-2.4.1 - openSUSE 12.2 (x86_64): ImageMagick-devel-32bit-6.7.6.9-2.4.1 libMagickCore5-32bit-6.7.6.9-2.4.1 libMagickCore5-debuginfo-32bit-6.7.6.9-2.4.1 libMagickWand5-32bit-6.7.6.9-2.4.1 libMagickWand5-debuginfo-32bit-6.7.6.9-2.4.1 - openSUSE 12.2 (noarch): ImageMagick-doc-6.7.6.9-2.4.1 - openSUSE 12.1 (i586 x86_64): ImageMagick-6.7.2.7-5.8.1 ImageMagick-debuginfo-6.7.2.7-5.8.1 ImageMagick-debugsource-6.7.2.7-5.8.1 ImageMagick-devel-6.7.2.7-5.8.1 ImageMagick-extra-6.7.2.7-5.8.1 ImageMagick-extra-debuginfo-6.7.2.7-5.8.1 libMagick++-devel-6.7.2.7-5.8.1 libMagick++5-6.7.2.7-5.8.1 libMagick++5-debuginfo-6.7.2.7-5.8.1 libMagickCore5-6.7.2.7-5.8.1 libMagickCore5-debuginfo-6.7.2.7-5.8.1 libMagickWand5-6.7.2.7-5.8.1 libMagickWand5-debuginfo-6.7.2.7-5.8.1 perl-PerlMagick-6.7.2.7-5.8.1 perl-PerlMagick-debuginfo-6.7.2.7-5.8.1 - openSUSE 12.1 (x86_64): ImageMagick-devel-32bit-6.7.2.7-5.8.1 libMagickCore5-32bit-6.7.2.7-5.8.1 libMagickCore5-debuginfo-32bit-6.7.2.7-5.8.1 libMagickWand5-32bit-6.7.2.7-5.8.1 libMagickWand5-debuginfo-32bit-6.7.2.7-5.8.1 - openSUSE 12.1 (noarch): ImageMagick-doc-6.7.2.7-5.8.1 - openSUSE 12.1 (ia64): libMagickCore5-debuginfo-x86-6.7.2.7-5.8.1 libMagickCore5-x86-6.7.2.7-5.8.1 libMagickWand5-debuginfo-x86-6.7.2.7-5.8.1 libMagickWand5-x86-6.7.2.7-5.8.1 References: http://support.novell.com/security/cve/CVE-2012-3437.html https://bugzilla.novell.com/773612

1 0

openSUSE-RU-2013:0534-1: nagios: Update to 3.5.0 and additional fixes
by maintenance＠opensuse.org 25 Mar '13

25 Mar '13

openSUSE Recommended Update: nagios: Update to 3.5.0 and additional fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0534-1 Rating: low References: #721346 #809180 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for nagios: - bnc#809180: - adapt static html pages to reflect the current version - update to 3.5.0: + The "configuration" page of the webui doesn't use entity encoding when displaying the "command expansion" item + Nagios Core 3.4.4 seg fault (core dump) on restart after removing config for running service + Updated CGI utility functions to support UTF-8 characters + Fixed bug where selecting Command Expansion from Configuration CGI page would display commands instead + status.cgi crashes with segfault when there are german ulauts (äöüß) in the hostname or the servicename + Scheduled Downtime Notifications Resent On Nagios Restart/reload (Eric Stanley - provide 'monitoring_daemon' in the init script to allow other init scripts to depend on it - update to 3.4.4: + Fixed bug #408: service checks get duplicated on reload + Added NULL pointer checks to CGI code + Fixed buffer overflow vulnerability in CGI code - refreshed patches - added new subpackage nagios-www-dch (don't call home): + add plain html pages to allow users to disable PHP and loading of external references + re-added documentation (no external link any more) - use new rpm macros for basic user-/groupadd commands: %%nagios_user_group_add, %%nagios_command_user_group_add - update to 3.4.3: + Applied fix for pagination and sorting on status.cgi + Fixed issue where deleting a downtime could cause Nagios to crash + Corrected logic so that end times for flexible downtimes are calculated from the downtime start rather than the current time in the case where Nagios is restarted + Fixed issue introduced by fix for bug #124 where flexible downtimes are not taken into account on Nagios restart. + If a service reports no performance data, the perfdata log file has no line indicating the test. + Fixed link for unhandled unreachable host problems on tactical overview page + Fixed bug #345 with wild card searches not paging properly on status.cgi + Fixed bug #343 on status.cgi where Service Group Summary can potentially show wrong totals + Fixed memory leaks on SIGHUP - refreshed patches - just require php not php5 to allow a switch to php53 - do not compress logfiles per default to allow searching via webinterface - init script now uses daemonchk.cgi to check for status (if present) - Use usermod instead of groupmod when suse_version > 1220 due to pwdutils/shadow switch. - Fix useradd invocation: -o is useless without -u and newer versions of pwdutils/shadowutils fail on this now. - add virtual provides 'monitoring_daemon' and 'monitoring_webfrontend' to allow 3rd party packages to run also with compatible solutions like icinga - remove checks.c-declare-temp_buffer.patch again as this is fixed with the latest version - added manpages for {new,}mini_epn and convertcfg - update to 3.4.1 + Double quotes in check_command definition break functionality - run config check first before restart (init script) - ignore subsys-unsupported rpmlint check as the init script just removes it - update to 3.4.0 + Use execv() to execute active check commands + Added service_check_timeout_state configuration variable + Permanently remove sleep on run_event == FALSE in main loop + Reduce notification load by moving notification viability check into notification list creation + Added code to apply allow_empty_hostgroup_assignment flag to host and service dependencies + Users can now see hostgroups and servicegroups that contain at least one host or service they are authorized for, instead of having to be authorized for them all + RSS feed boxes fallback if an error occurs + RSS feeds no longer block main page load + FIXES * Fix $NOTIFICATIONRECIPIENTS$ macro to contain all contacts assigned to host|service, not only notified contacts * Scheduled Downtime Notifications Resent On Nagios Restart/reload * NOTIFICATIONTYPE MACRO never became CUSTOM * Plugged minor memory leaks in notification logic - fix p1.pl + remove "^M" - bnc#721346: skip fdupes call and ignore that we might save 4k on the disk - fix file permissions in docudir - use nagios-rpm-macros Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-250 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): nagios-3.5.0-9.16.1 nagios-debuginfo-3.5.0-9.16.1 nagios-debugsource-3.5.0-9.16.1 nagios-devel-3.5.0-9.16.1 nagios-www-3.5.0-9.16.1 nagios-www-dch-3.5.0-9.16.1 nagios-www-debuginfo-3.5.0-9.16.1 - openSUSE 12.1 (noarch): nagios-rpm-macros-0.06-6.1 References: https://bugzilla.novell.com/721346 https://bugzilla.novell.com/809180

1 0

openSUSE-RU-2013:0533-1: moderate: yast2: Don't use Info function to check enable state
by maintenance＠opensuse.org 25 Mar '13

25 Mar '13

openSUSE Recommended Update: yast2: Don't use Info function to check enable state ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0533-1 Rating: moderate References: #807507 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for yast2: - bnc#807507: Check service state correctly Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-243 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): yast2-2.23.23-1.4.1 yast2-devel-doc-2.23.23-1.4.1 References: https://bugzilla.novell.com/807507

1 0