March 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:0476-1: libewf: Fix exfmount such that it works. ewfmount is one of several tools in ewftools sub-project.
by maintenance＠opensuse.org 18 Mar '13

18 Mar '13

openSUSE Recommended Update: libewf: Fix exfmount such that it works. ewfmount is one of several tools in ewftools sub-project. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0476-1 Rating: low References: #808550 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for libewf: - bnc#808550: Fix exfmount such that it works. ewfmount is one of several tools in ewftools sub-project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-210 - openSUSE 12.2: zypper in -t patch openSUSE-2013-210 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): ewftools-0.0.0+20120813-2.4.1 ewftools-debuginfo-0.0.0+20120813-2.4.1 libewf-debugsource-0.0.0+20120813-2.4.1 libewf-devel-0.0.0+20120813-2.4.1 libewf2-0.0.0+20120813-2.4.1 libewf2-debuginfo-0.0.0+20120813-2.4.1 - openSUSE 12.2 (i586 x86_64): ewftools-0.0.0+20100226-2.4.1 ewftools-debuginfo-0.0.0+20100226-2.4.1 libewf-debugsource-0.0.0+20100226-2.4.1 libewf-devel-0.0.0+20100226-2.4.1 libewf1-0.0.0+20100226-2.4.1 libewf1-debuginfo-0.0.0+20100226-2.4.1 References: https://bugzilla.novell.com/808550

1 0

openSUSE-SU-2013:0475-1: moderate: systemtap: security and bugfixes
by opensuse-security＠opensuse.org 18 Mar '13

18 Mar '13

openSUSE Security Update: systemtap: security and bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0475-1 Rating: moderate References: #748564 #796574 #800335 Cross-References: CVE-2012-0875 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This systemtap updated fixes a security issue and bugs: Security fix: Fix kernel panic when processing malformed DWARF unwind data (bnc#748564 CVE-2012-0875) Also bugs were fixed: - Change how systemtap looks for tracepoint header files (bnc#796574, new patch: systemtap-build-source-dir.patch) - Add libebl1 dependancy. Systemtap manually loads libebl backends and the manual Requires: was incorrectly removed in a previous revision (bnc#800335) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-213 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): systemtap-1.7-3.8.1 systemtap-debuginfo-1.7-3.8.1 systemtap-debugsource-1.7-3.8.1 systemtap-runtime-1.7-3.8.1 systemtap-runtime-debuginfo-1.7-3.8.1 systemtap-sdt-devel-1.7-3.8.1 systemtap-server-1.7-3.8.1 systemtap-server-debuginfo-1.7-3.8.1 - openSUSE 12.2 (noarch): systemtap-docs-1.7-3.8.1 References: http://support.novell.com/security/cve/CVE-2012-0875.html https://bugzilla.novell.com/748564 https://bugzilla.novell.com/796574 https://bugzilla.novell.com/800335

1 0

openSUSE-RU-2013:0474-1: yast2-security: Two bugfixes
by maintenance＠opensuse.org 18 Mar '13

18 Mar '13

openSUSE Recommended Update: yast2-security: Two bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0474-1 Rating: low References: #802006 #807099 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for yast2-security: - bnc#807099: remove broken LASTLOG_ENAB entry from /etc/login.defs - bnc#802006: drop obsolete GROUP_ENCRYPTION Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-211 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): yast2-security-2.23.5-1.4.1 References: https://bugzilla.novell.com/802006 https://bugzilla.novell.com/807099

1 0

openSUSE-RU-2013:0473-1: rpmrebuild: Update to 2.9.
by maintenance＠opensuse.org 18 Mar '13

18 Mar '13

openSUSE Recommended Update: rpmrebuild: Update to 2.9. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0473-1 Rating: low References: Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issues for rpmrebuild: - Update to 2.9. * Fix to work with rpm 4.10 - error: incorrect format: invalid field width. - Changes in 2.8. * Can handle SUGGESTS/ENHANCES rpm tag. * Add --cap-from-fs/cap-from-db options. - Changes in 2.7. * Patch from Andreas Kainz for package file checking. * Add new unset_tag plugin. * Fix -l / --list-plugin option. * Add support of posix capability. * Add new un_prelink plugin. * Add RPMREBUILD_OPTS environment variable. * Fix problem with different architecture (build 32bit on 64bits). * Fix bad arch on gpg-pubkey packages. - Use full URL as a source. - Verify GPG signature. - Package docs. - Mark man pages as doc. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-212 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): rpmrebuild-2.9-7.4.1 References:

1 0

openSUSE-SU-2013:0468-1: important: seamonkey: update to 2.16.1
by opensuse-security＠opensuse.org 15 Mar '13

15 Mar '13

openSUSE Security Update: seamonkey: update to 2.16.1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0468-1 Rating: important References: #808243 Cross-References: CVE-2013-0787 Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: seamonkey was updated to version 2.16.1 fixing a severe security issue. * MFSA 2013-29/CVE-2013-0787 (bmo#848644) Use-after-free in HTML Editor Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-208 - openSUSE 12.2: zypper in -t patch openSUSE-2013-208 - openSUSE 12.1: zypper in -t patch openSUSE-2013-208 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): seamonkey-2.16.1-1.4.1 seamonkey-debuginfo-2.16.1-1.4.1 seamonkey-debugsource-2.16.1-1.4.1 seamonkey-dom-inspector-2.16.1-1.4.1 seamonkey-irc-2.16.1-1.4.1 seamonkey-translations-common-2.16.1-1.4.1 seamonkey-translations-other-2.16.1-1.4.1 seamonkey-venkman-2.16.1-1.4.1 - openSUSE 12.2 (i586 x86_64): seamonkey-2.16.1-2.38.2 seamonkey-debuginfo-2.16.1-2.38.2 seamonkey-debugsource-2.16.1-2.38.2 seamonkey-dom-inspector-2.16.1-2.38.2 seamonkey-irc-2.16.1-2.38.2 seamonkey-translations-common-2.16.1-2.38.2 seamonkey-translations-other-2.16.1-2.38.2 seamonkey-venkman-2.16.1-2.38.2 - openSUSE 12.1 (i586 x86_64): seamonkey-2.16.1-2.57.1 seamonkey-debuginfo-2.16.1-2.57.1 seamonkey-debugsource-2.16.1-2.57.1 seamonkey-dom-inspector-2.16.1-2.57.1 seamonkey-irc-2.16.1-2.57.1 seamonkey-translations-common-2.16.1-2.57.1 seamonkey-translations-other-2.16.1-2.57.1 seamonkey-venkman-2.16.1-2.57.1 References: http://support.novell.com/security/cve/CVE-2013-0787.html https://bugzilla.novell.com/808243

1 0

openSUSE-SU-2013:0467-1: important: MozillaFirefox: Updated to 19.0.2
by opensuse-security＠opensuse.org 15 Mar '13

15 Mar '13

openSUSE Security Update: MozillaFirefox: Updated to 19.0.2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0467-1 Rating: important References: #808243 Cross-References: CVE-2013-0787 Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Mozilla Firefox was updated to 19.0.2 (bnc#808243) fixing: * MFSA 2013-29/CVE-2013-0787 (bmo#848644) Use-after-free in HTML Editor could be used for code execution * blocklist updates Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-206 - openSUSE 12.2: zypper in -t patch openSUSE-2013-206 - openSUSE 12.1: zypper in -t patch openSUSE-2013-206 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): MozillaFirefox-19.0.2-1.4.1 MozillaFirefox-branding-upstream-19.0.2-1.4.1 MozillaFirefox-buildsymbols-19.0.2-1.4.1 MozillaFirefox-debuginfo-19.0.2-1.4.1 MozillaFirefox-debugsource-19.0.2-1.4.1 MozillaFirefox-devel-19.0.2-1.4.1 MozillaFirefox-translations-common-19.0.2-1.4.1 MozillaFirefox-translations-other-19.0.2-1.4.1 - openSUSE 12.2 (i586 x86_64): MozillaFirefox-19.0.2-2.37.2 MozillaFirefox-branding-upstream-19.0.2-2.37.2 MozillaFirefox-buildsymbols-19.0.2-2.37.2 MozillaFirefox-debuginfo-19.0.2-2.37.2 MozillaFirefox-debugsource-19.0.2-2.37.2 MozillaFirefox-devel-19.0.2-2.37.2 MozillaFirefox-translations-common-19.0.2-2.37.2 MozillaFirefox-translations-other-19.0.2-2.37.2 - openSUSE 12.1 (i586 x86_64): MozillaFirefox-19.0.2-2.66.1 MozillaFirefox-branding-upstream-19.0.2-2.66.1 MozillaFirefox-buildsymbols-19.0.2-2.66.1 MozillaFirefox-debuginfo-19.0.2-2.66.1 MozillaFirefox-debugsource-19.0.2-2.66.1 MozillaFirefox-devel-19.0.2-2.66.1 MozillaFirefox-translations-common-19.0.2-2.66.1 MozillaFirefox-translations-other-19.0.2-2.66.1 References: http://support.novell.com/security/cve/CVE-2013-0787.html https://bugzilla.novell.com/808243

1 0

openSUSE-SU-2013:0466-1: important: xulrunner to 17.0.4esr
by opensuse-security＠opensuse.org 15 Mar '13

15 Mar '13

openSUSE Security Update: xulrunner to 17.0.4esr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0466-1 Rating: important References: #808243 Cross-References: CVE-2013-0787 Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: xulrunner was updated to 17.0.4esr (bnc#808243) to fix a important security issue: * MFSA 2013-29/CVE-2013-0787 (bmo#848644) Use-after-free in HTML Editor Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-209 - openSUSE 12.2: zypper in -t patch openSUSE-2013-209 - openSUSE 12.1: zypper in -t patch openSUSE-2013-209 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): mozilla-js-17.0.4-1.4.2 mozilla-js-debuginfo-17.0.4-1.4.2 xulrunner-17.0.4-1.4.2 xulrunner-buildsymbols-17.0.4-1.4.2 xulrunner-debuginfo-17.0.4-1.4.2 xulrunner-debugsource-17.0.4-1.4.2 xulrunner-devel-17.0.4-1.4.2 xulrunner-devel-debuginfo-17.0.4-1.4.2 - openSUSE 12.3 (x86_64): mozilla-js-32bit-17.0.4-1.4.2 mozilla-js-debuginfo-32bit-17.0.4-1.4.2 xulrunner-32bit-17.0.4-1.4.2 xulrunner-debuginfo-32bit-17.0.4-1.4.2 - openSUSE 12.2 (i586 x86_64): mozilla-js-17.0.4-2.34.1 mozilla-js-debuginfo-17.0.4-2.34.1 xulrunner-17.0.4-2.34.1 xulrunner-buildsymbols-17.0.4-2.34.1 xulrunner-debuginfo-17.0.4-2.34.1 xulrunner-debugsource-17.0.4-2.34.1 xulrunner-devel-17.0.4-2.34.1 xulrunner-devel-debuginfo-17.0.4-2.34.1 - openSUSE 12.2 (x86_64): mozilla-js-32bit-17.0.4-2.34.1 mozilla-js-debuginfo-32bit-17.0.4-2.34.1 xulrunner-32bit-17.0.4-2.34.1 xulrunner-debuginfo-32bit-17.0.4-2.34.1 - openSUSE 12.1 (i586 x86_64): mozilla-js-17.0.4-2.61.1 mozilla-js-debuginfo-17.0.4-2.61.1 xulrunner-17.0.4-2.61.1 xulrunner-buildsymbols-17.0.4-2.61.1 xulrunner-debuginfo-17.0.4-2.61.1 xulrunner-debugsource-17.0.4-2.61.1 xulrunner-devel-17.0.4-2.61.1 xulrunner-devel-debuginfo-17.0.4-2.61.1 - openSUSE 12.1 (x86_64): mozilla-js-32bit-17.0.4-2.61.1 mozilla-js-debuginfo-32bit-17.0.4-2.61.1 xulrunner-32bit-17.0.4-2.61.1 xulrunner-debuginfo-32bit-17.0.4-2.61.1 - openSUSE 12.1 (ia64): mozilla-js-debuginfo-x86-17.0.4-2.61.1 mozilla-js-x86-17.0.4-2.61.1 xulrunner-debuginfo-x86-17.0.4-2.61.1 xulrunner-x86-17.0.4-2.61.1 References: http://support.novell.com/security/cve/CVE-2013-0787.html https://bugzilla.novell.com/808243

1 0

openSUSE-SU-2013:0465-1: important: MozillaThunderbird: 17.0.4 release
by opensuse-security＠opensuse.org 15 Mar '13

15 Mar '13

openSUSE Security Update: MozillaThunderbird: 17.0.4 release ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0465-1 Rating: important References: #808243 Cross-References: CVE-2013-0787 Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: MozillaThunderbird was updated to 17.0.4 (bnc#808243) * MFSA 2013-29/CVE-2013-0787 (bmo#848644) Use-after-free in HTML Editor Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-207 - openSUSE 12.2: zypper in -t patch openSUSE-2013-207 - openSUSE 12.1: zypper in -t patch openSUSE-2013-207 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): MozillaThunderbird-17.0.4-61.5.1 MozillaThunderbird-buildsymbols-17.0.4-61.5.1 MozillaThunderbird-debuginfo-17.0.4-61.5.1 MozillaThunderbird-debugsource-17.0.4-61.5.1 MozillaThunderbird-devel-17.0.4-61.5.1 MozillaThunderbird-devel-debuginfo-17.0.4-61.5.1 MozillaThunderbird-translations-common-17.0.4-61.5.1 MozillaThunderbird-translations-other-17.0.4-61.5.1 enigmail-1.5.1+17.0.4-61.5.1 enigmail-debuginfo-1.5.1+17.0.4-61.5.1 - openSUSE 12.2 (i586 x86_64): MozillaThunderbird-17.0.4-49.35.1 MozillaThunderbird-buildsymbols-17.0.4-49.35.1 MozillaThunderbird-debuginfo-17.0.4-49.35.1 MozillaThunderbird-debugsource-17.0.4-49.35.1 MozillaThunderbird-devel-17.0.4-49.35.1 MozillaThunderbird-devel-debuginfo-17.0.4-49.35.1 MozillaThunderbird-translations-common-17.0.4-49.35.1 MozillaThunderbird-translations-other-17.0.4-49.35.1 enigmail-1.5.1+17.0.4-49.35.1 enigmail-debuginfo-1.5.1+17.0.4-49.35.1 - openSUSE 12.1 (i586 x86_64): MozillaThunderbird-17.0.4-33.55.1 MozillaThunderbird-buildsymbols-17.0.4-33.55.1 MozillaThunderbird-debuginfo-17.0.4-33.55.1 MozillaThunderbird-debugsource-17.0.4-33.55.1 MozillaThunderbird-devel-17.0.4-33.55.1 MozillaThunderbird-devel-debuginfo-17.0.4-33.55.1 MozillaThunderbird-translations-common-17.0.4-33.55.1 MozillaThunderbird-translations-other-17.0.4-33.55.1 enigmail-1.5.1+17.0.4-33.55.1 enigmail-debuginfo-1.5.1+17.0.4-33.55.1 References: http://support.novell.com/security/cve/CVE-2013-0787.html https://bugzilla.novell.com/808243

1 0

openSUSE-SU-2013:0464-1: critical: flash-player: update to version 11.2.202.275
by opensuse-security＠opensuse.org 14 Mar '13

14 Mar '13

openSUSE Security Update: flash-player: update to version 11.2.202.275 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0464-1 Rating: critical References: #808973 Cross-References: CVE-2013-0646 CVE-2013-0650 CVE-2013-1371 CVE-2013-1375 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.275: (bnc#808973) * APSB13-09, CVE-2013-0646, CVE-2013-0650, CVE-2013-1371, CVE-2013-1375 More information can be found on: http://www.adobe.com/support/security/bulletins/apsb13-09.ht ml Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-41 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.275-55.1 flash-player-gnome-11.2.202.275-55.1 flash-player-kde4-11.2.202.275-55.1 References: http://support.novell.com/security/cve/CVE-2013-0646.html http://support.novell.com/security/cve/CVE-2013-0650.html http://support.novell.com/security/cve/CVE-2013-1371.html http://support.novell.com/security/cve/CVE-2013-1375.html https://bugzilla.novell.com/808973

1 0

openSUSE-RU-2013:0463-1: important: timezone: regular timezone updates to 2013a
by maintenance＠opensuse.org 14 Mar '13

14 Mar '13

openSUSE Recommended Update: timezone: regular timezone updates to 2013a ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0463-1 Rating: important References: Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update provides the latest timezone information for your system. The changes in detail are: * Chile is changing its DST rules * Estimate Morocco 2013-2038 transitions for Ramadan * New alias Europe/Busingen for Europe/Zurich * New zones Asia/Khandyga, Asia/Ust-Nera * Libya moving to CET, but with DST. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-40 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): timezone-2013a-14.1 timezone-debuginfo-2013a-14.1 timezone-debugsource-2013a-14.1 - openSUSE 11.4 (noarch): timezone-java-2013a-14.1 References:

1 0