April 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:0730-1: important: timezone: Update to 2013c
by maintenance＠opensuse.org 30 Apr '13

30 Apr '13

openSUSE Recommended Update: timezone: Update to 2013c ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0730-1 Rating: important References: Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issues with timezone: - Regular timezone update to 2013c Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-368 - openSUSE 12.1: zypper in -t patch openSUSE-2013-368 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): timezone-2013c-1.20.1 timezone-debuginfo-2013c-1.20.1 timezone-debugsource-2013c-1.20.1 - openSUSE 12.2 (noarch): timezone-java-2013c-1.20.1 - openSUSE 12.1 (i586 x86_64): timezone-2013c-1.22.1 timezone-debuginfo-2013c-1.22.1 timezone-debugsource-2013c-1.22.1 - openSUSE 12.1 (noarch): timezone-java-2013c-1.22.1 References:

1 0

openSUSE-SU-2013:0729-1: moderate: libxml2
by opensuse-security＠opensuse.org 30 Apr '13

30 Apr '13

openSUSE Security Update: libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0729-1 Rating: moderate References: #815665 Cross-References: CVE-2013-1969 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - fix for CVE-2013-1969 (bnc#815665) * libxml2-CVE-2013-1969.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-374 - openSUSE 12.1: zypper in -t patch openSUSE-2013-374 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libxml2-2-2.7.8+git20120223-8.18.1 libxml2-2-debuginfo-2.7.8+git20120223-8.18.1 libxml2-debugsource-2.7.8+git20120223-8.18.1 libxml2-devel-2.7.8+git20120223-8.18.1 libxml2-tools-2.7.8+git20120223-8.18.1 libxml2-tools-debuginfo-2.7.8+git20120223-8.18.1 python-libxml2-2.7.8+git20120223-8.18.1 python-libxml2-debuginfo-2.7.8+git20120223-8.18.1 python-libxml2-debugsource-2.7.8+git20120223-8.18.1 - openSUSE 12.2 (x86_64): libxml2-2-32bit-2.7.8+git20120223-8.18.1 libxml2-2-debuginfo-32bit-2.7.8+git20120223-8.18.1 libxml2-devel-32bit-2.7.8+git20120223-8.18.1 - openSUSE 12.2 (noarch): libxml2-doc-2.7.8+git20120223-8.18.1 - openSUSE 12.1 (i586 x86_64): libxml2-2.7.8+git20110708-3.24.1 libxml2-debuginfo-2.7.8+git20110708-3.24.1 libxml2-debugsource-2.7.8+git20110708-3.24.1 libxml2-devel-2.7.8+git20110708-3.24.1 - openSUSE 12.1 (x86_64): libxml2-32bit-2.7.8+git20110708-3.24.1 libxml2-debuginfo-32bit-2.7.8+git20110708-3.24.1 libxml2-devel-32bit-2.7.8+git20110708-3.24.1 - openSUSE 12.1 (noarch): libxml2-doc-2.7.8+git20110708-3.24.1 - openSUSE 12.1 (ia64): libxml2-debuginfo-x86-2.7.8+git20110708-3.24.1 libxml2-x86-2.7.8+git20110708-3.24.1 References: http://support.novell.com/security/cve/CVE-2013-1969.html https://bugzilla.novell.com/815665

1 0

openSUSE-RU-2013:0728-1: tftp: fixed incorrect default permission of /srv/tftpboot
by maintenance＠opensuse.org 30 Apr '13

30 Apr '13

openSUSE Recommended Update: tftp: fixed incorrect default permission of /srv/tftpboot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0728-1 Rating: low References: #813226 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with tftp: - bnc#813226: change ownership of /srv/tftpboot to tftp:tftp, otherwise tftp daemon can't write here Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-370 - openSUSE 12.1: zypper in -t patch openSUSE-2013-370 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): tftp-5.1-8.8.1 tftp-debuginfo-5.1-8.8.1 tftp-debugsource-5.1-8.8.1 - openSUSE 12.1 (i586 x86_64): tftp-5.1-5.8.1 tftp-debuginfo-5.1-5.8.1 tftp-debugsource-5.1-5.8.1 References: https://bugzilla.novell.com/813226

1 0

openSUSE-SU-2013:0726-1:
by opensuse-security＠opensuse.org 30 Apr '13

30 Apr '13

openSUSE Security Update: ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0726-1 Rating: low References: #814655 Cross-References: CVE-2013-1944 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: No description available. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-369 - openSUSE 12.1: zypper in -t patch openSUSE-2013-369 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): curl-7.25.0-2.4.1 curl-debuginfo-7.25.0-2.4.1 curl-debugsource-7.25.0-2.4.1 libcurl-devel-7.25.0-2.4.1 libcurl4-7.25.0-2.4.1 libcurl4-debuginfo-7.25.0-2.4.1 - openSUSE 12.2 (x86_64): libcurl4-32bit-7.25.0-2.4.1 libcurl4-debuginfo-32bit-7.25.0-2.4.1 - openSUSE 12.1 (i586 x86_64): curl-7.22.0-2.6.1 curl-debuginfo-7.22.0-2.6.1 libcurl-devel-7.22.0-2.6.1 libcurl4-7.22.0-2.6.1 - openSUSE 12.1 (x86_64): libcurl4-32bit-7.22.0-2.6.1 libcurl4-debuginfo-32bit-7.22.0-2.6.1 - openSUSE 12.1 (ia64): libcurl4-debuginfo-x86-7.22.0-2.6.1 libcurl4-x86-7.22.0-2.6.1 - openSUSE 12.1 (i586): libcurl4-debuginfo-7.22.0-2.6.1 References: http://support.novell.com/security/cve/CVE-2013-1944.html https://bugzilla.novell.com/814655

1 0

openSUSE-SU-2013:0715-1: moderate: update for icedtea-web
by opensuse-security＠opensuse.org 26 Apr '13

26 Apr '13

openSUSE Security Update: update for icedtea-web ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0715-1 Rating: moderate References: #815596 Cross-References: CVE-2013-1926 CVE-2013-1927 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: - update to 1.3.2 (bnc#815596) - Security Updates * CVE-2013-1927, RH884705: fixed gifar vulnerability * CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path. - Common * Added new option in itw-settings which allows users to set JVM arguments when plugin is initialized. - NetX * PR580: http://www.horaoficial.cl/ loads improperly - Plugin * PR1260: IcedTea-Web should not rely on GTK obsoletes icedtea-web-remove-gtk-dep.patch * PR1157: Applets can hang browser after fatal exception - Add icedtea-web-remove-gtk-dep.patch, build icedtea-web without GTK. Plugin now works in both gtk2 and gtk3 based browsers. - limit the provides/obsoletes to architectures, where -plugin package existed and don't pollute shiny new arm with an old garbage - handle the package renaming on arm properly Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-371 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): icedtea-web-1.3.2-1.13.1 icedtea-web-debuginfo-1.3.2-1.13.1 icedtea-web-debugsource-1.3.2-1.13.1 - openSUSE 12.2 (noarch): icedtea-web-javadoc-1.3.2-1.13.1 References: http://support.novell.com/security/cve/CVE-2013-1926.html http://support.novell.com/security/cve/CVE-2013-1927.html https://bugzilla.novell.com/815596

1 0

openSUSE-RU-2013:0708-1: Mesa: Make sure we do render between two hiz flushes
by maintenance＠opensuse.org 23 Apr '13

23 Apr '13

openSUSE Recommended Update: Mesa: Make sure we do render between two hiz flushes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0708-1 Rating: low References: #814947 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for Mesa: - bnc#814947, fdo#62141: Make sure we do render between two hiz flushes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-366 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): Mesa-9.0.2-34.6.1 Mesa-debuginfo-9.0.2-34.6.1 Mesa-debugsource-9.0.2-34.6.1 Mesa-devel-9.0.2-34.6.1 Mesa-libEGL-devel-9.0.2-34.6.1 Mesa-libEGL1-9.0.2-34.6.1 Mesa-libEGL1-debuginfo-9.0.2-34.6.1 Mesa-libGL-devel-9.0.2-34.6.1 Mesa-libGL1-9.0.2-34.6.1 Mesa-libGL1-debuginfo-9.0.2-34.6.1 Mesa-libGLESv1_CM-devel-9.0.2-34.6.1 Mesa-libGLESv1_CM1-9.0.2-34.6.1 Mesa-libGLESv1_CM1-debuginfo-9.0.2-34.6.1 Mesa-libGLESv2-2-9.0.2-34.6.1 Mesa-libGLESv2-2-debuginfo-9.0.2-34.6.1 Mesa-libGLESv2-devel-9.0.2-34.6.1 Mesa-libIndirectGL-devel-9.0.2-34.6.1 Mesa-libIndirectGL1-9.0.2-34.6.1 Mesa-libIndirectGL1-debuginfo-9.0.2-34.6.1 Mesa-libglapi-devel-9.0.2-34.6.1 Mesa-libglapi0-9.0.2-34.6.1 Mesa-libglapi0-debuginfo-9.0.2-34.6.1 libOSMesa-devel-9.0.2-34.6.1 libOSMesa9-9.0.2-34.6.1 libOSMesa9-debuginfo-9.0.2-34.6.1 libXvMC_nouveau-9.0.2-34.6.1 libXvMC_nouveau-debuginfo-9.0.2-34.6.1 libXvMC_r300-9.0.2-34.6.1 libXvMC_r300-debuginfo-9.0.2-34.6.1 libXvMC_r600-9.0.2-34.6.1 libXvMC_r600-debuginfo-9.0.2-34.6.1 libXvMC_softpipe-9.0.2-34.6.1 libXvMC_softpipe-debuginfo-9.0.2-34.6.1 libgbm-devel-0.0.0-34.6.1 libgbm1-0.0.0-34.6.1 libgbm1-debuginfo-0.0.0-34.6.1 libvdpau_nouveau-9.0.2-34.6.1 libvdpau_nouveau-debuginfo-9.0.2-34.6.1 libvdpau_r300-9.0.2-34.6.1 libvdpau_r300-debuginfo-9.0.2-34.6.1 libvdpau_r600-9.0.2-34.6.1 libvdpau_r600-debuginfo-9.0.2-34.6.1 libvdpau_softpipe-9.0.2-34.6.1 libvdpau_softpipe-debuginfo-9.0.2-34.6.1 libxatracker-devel-1.0.0-34.6.1 libxatracker1-1.0.0-34.6.1 libxatracker1-debuginfo-1.0.0-34.6.1 - openSUSE 12.3 (x86_64): Mesa-32bit-9.0.2-34.6.1 Mesa-debuginfo-32bit-9.0.2-34.6.1 Mesa-devel-32bit-9.0.2-34.6.1 Mesa-libEGL-devel-32bit-9.0.2-34.6.1 Mesa-libEGL1-32bit-9.0.2-34.6.1 Mesa-libEGL1-debuginfo-32bit-9.0.2-34.6.1 Mesa-libGL-devel-32bit-9.0.2-34.6.1 Mesa-libGL1-32bit-9.0.2-34.6.1 Mesa-libGL1-debuginfo-32bit-9.0.2-34.6.1 Mesa-libGLESv1_CM-devel-32bit-9.0.2-34.6.1 Mesa-libGLESv1_CM1-32bit-9.0.2-34.6.1 Mesa-libGLESv1_CM1-debuginfo-32bit-9.0.2-34.6.1 Mesa-libGLESv2-2-32bit-9.0.2-34.6.1 Mesa-libGLESv2-2-debuginfo-32bit-9.0.2-34.6.1 Mesa-libGLESv2-devel-32bit-9.0.2-34.6.1 Mesa-libIndirectGL-devel-32bit-9.0.2-34.6.1 Mesa-libIndirectGL1-32bit-9.0.2-34.6.1 Mesa-libIndirectGL1-debuginfo-32bit-9.0.2-34.6.1 Mesa-libglapi-devel-32bit-9.0.2-34.6.1 Mesa-libglapi0-32bit-9.0.2-34.6.1 Mesa-libglapi0-debuginfo-32bit-9.0.2-34.6.1 libOSMesa-devel-32bit-9.0.2-34.6.1 libOSMesa9-32bit-9.0.2-34.6.1 libOSMesa9-debuginfo-32bit-9.0.2-34.6.1 libXvMC_nouveau-32bit-9.0.2-34.6.1 libXvMC_nouveau-debuginfo-32bit-9.0.2-34.6.1 libXvMC_r300-32bit-9.0.2-34.6.1 libXvMC_r300-debuginfo-32bit-9.0.2-34.6.1 libXvMC_r600-32bit-9.0.2-34.6.1 libXvMC_r600-debuginfo-32bit-9.0.2-34.6.1 libXvMC_softpipe-32bit-9.0.2-34.6.1 libXvMC_softpipe-debuginfo-32bit-9.0.2-34.6.1 libgbm-devel-32bit-0.0.0-34.6.1 libgbm1-32bit-0.0.0-34.6.1 libgbm1-debuginfo-32bit-0.0.0-34.6.1 libvdpau_nouveau-32bit-9.0.2-34.6.1 libvdpau_nouveau-debuginfo-32bit-9.0.2-34.6.1 libvdpau_r300-32bit-9.0.2-34.6.1 libvdpau_r300-debuginfo-32bit-9.0.2-34.6.1 libvdpau_r600-32bit-9.0.2-34.6.1 libvdpau_r600-debuginfo-32bit-9.0.2-34.6.1 libvdpau_softpipe-32bit-9.0.2-34.6.1 libvdpau_softpipe-debuginfo-32bit-9.0.2-34.6.1 References: https://bugzilla.novell.com/814947

1 0

openSUSE-RU-2013:0705-1: moderate: pm-utils: lots of bugfixes
by maintenance＠opensuse.org 22 Apr '13

22 Apr '13

openSUSE Recommended Update: pm-utils: lots of bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0705-1 Rating: moderate References: #633491 #768867 #782891 #797966 #806632 #806635 #806641 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: pm-utils was updated to fix various bugs: -Changed licence to GPL 2.0 (without +) - bnc#768867 -Removed 99Zgrub-grub2.patch - fixed in git repo -be more verbose on modunload failures (inspired by bnc#633491) -correction for bnc#797966 intel-audio-powersave creates error entries in /var/log/pm-powersave.log when it finds supported hw looping over /sys/module/snd_* these errors are caused by simple typos. - Adopted to query network.service alias, that obsoletes the NETWORKMANAGER variable in /etc/sysconfig/network/config introduced in sysconfig-0.80. - bnc#782891 unified grub2 and grub2-efi making grub2-efi just an architecture of GRUB 2. Unify handling of both loaders to not depend on compatibility grub2-efi-* links. - Deleted 80acpi-fan, since it used /proc/acpi/fan/ and it was removed from kernel long ago. bnc#806635 - bnc#806632: rm pm/sleep.d/55NetworkManager, networkmanager now uses Upower and listens to dbus resume/suspend signals. - remove rc.cpufreq - bnc#806641 - Removed patches pm-utils-dont-fail-modunload-silently.diff and intel-audio-powersave_logoutput.diff - applied them in git repo. - Deleted 80acpi-fan, since it used /proc/acpi/fan/ and it was removed from kernel long ago. bnc#806635 - bnc#806632: rm pm/sleep.d/55NetworkManager, networkmanager now uses Upower and listens to dbus resume/suspend signals. - remove rc.cpufreq - bnc#806641 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-355 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): pm-utils-1.4.1-26.5.1 pm-utils-debuginfo-1.4.1-26.5.1 pm-utils-debugsource-1.4.1-26.5.1 pm-utils-ndiswrapper-1.4.1-26.5.1 References: https://bugzilla.novell.com/633491 https://bugzilla.novell.com/768867 https://bugzilla.novell.com/782891 https://bugzilla.novell.com/797966 https://bugzilla.novell.com/806632 https://bugzilla.novell.com/806635 https://bugzilla.novell.com/806641

1 0

openSUSE-RU-2013:0704-1: KDE: 4.10.2 version update
by maintenance＠opensuse.org 22 Apr '13

22 Apr '13

openSUSE Recommended Update: KDE: 4.10.2 version update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0704-1 Rating: low References: #788867 #807301 #807946 #810894 #813519 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This is the maintenance update for 12.3 with regards to the KDE Packages. This update brings the KDE version to 4.10.2. The tracking bugs for this are bnc#810894 and bnc#813519. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-353 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): akonadi-4.10.2-1.4.4 akonadi-debuginfo-4.10.2-1.4.4 akregator-4.10.2-1.4.4 akregator-debuginfo-4.10.2-1.4.4 amor-4.10.2-1.4.3 amor-debuginfo-4.10.2-1.4.3 analitza-4.10.2-1.4.3 analitza-debuginfo-4.10.2-1.4.3 analitza-debugsource-4.10.2-1.4.3 analitza-devel-4.10.2-1.4.3 ark-4.10.2-1.4.3 ark-debuginfo-4.10.2-1.4.3 ark-debugsource-4.10.2-1.4.3 ark-devel-4.10.2-1.4.3 blinken-4.10.2-1.4.1 blinken-debuginfo-4.10.2-1.4.1 blinken-debugsource-4.10.2-1.4.1 blogilo-4.10.2-1.4.4 blogilo-debuginfo-4.10.2-1.4.4 bomber-4.10.2-1.4.1 bomber-debuginfo-4.10.2-1.4.1 bomber-debugsource-4.10.2-1.4.1 bovo-4.10.2-1.4.7 bovo-debuginfo-4.10.2-1.4.7 bovo-debugsource-4.10.2-1.4.7 cantor-4.10.2-1.4.4 cantor-debuginfo-4.10.2-1.4.4 cantor-debugsource-4.10.2-1.4.4 cantor-devel-4.10.2-1.4.4 cervisia-4.10.2-1.4.3 cervisia-debuginfo-4.10.2-1.4.3 dolphin-4.10.2-1.4.4 dolphin-debuginfo-4.10.2-1.4.4 dolphin-plugins-4.10.2-1.4.3 dolphin-plugins-debuginfo-4.10.2-1.4.3 dragonplayer-4.10.2-1.4.3 dragonplayer-debuginfo-4.10.2-1.4.3 dragonplayer-debugsource-4.10.2-1.4.3 filelight-4.10.2-1.4.3 filelight-debuginfo-4.10.2-1.4.3 filelight-debugsource-4.10.2-1.4.3 granatier-4.10.2-1.4.7 granatier-debuginfo-4.10.2-1.4.7 granatier-debugsource-4.10.2-1.4.7 gwenview-4.10.2-1.4.8 gwenview-debuginfo-4.10.2-1.4.8 gwenview-debugsource-4.10.2-1.4.8 jovie-4.10.2-1.4.7 jovie-debuginfo-4.10.2-1.4.7 jovie-debugsource-4.10.2-1.4.7 juk-4.10.2-1.4.3 juk-debuginfo-4.10.2-1.4.3 juk-debugsource-4.10.2-1.4.3 kaccessible-4.10.2-1.4.1 kaccessible-debuginfo-4.10.2-1.4.1 kaccessible-debugsource-4.10.2-1.4.1 kactivities4-4.10.2-1.5.3 kactivities4-debuginfo-4.10.2-1.5.3 kactivities4-debugsource-4.10.2-1.5.3 kaddressbook-4.10.2-1.4.4 kaddressbook-debuginfo-4.10.2-1.4.4 kajongg-4.10.2-1.4.15 kalarm-4.10.2-1.4.4 kalarm-debuginfo-4.10.2-1.4.4 kalgebra-4.10.2-1.4.4 kalgebra-debuginfo-4.10.2-1.4.4 kalgebra-debugsource-4.10.2-1.4.4 kalzium-4.10.2-1.4.7 kalzium-debuginfo-4.10.2-1.4.7 kalzium-debugsource-4.10.2-1.4.7 kalzium-devel-4.10.2-1.4.7 kamera-debugsource-4.10.2-1.4.3 kanagram-4.10.2-1.4.3 kanagram-debuginfo-4.10.2-1.4.3 kanagram-debugsource-4.10.2-1.4.3 kanagram-devel-4.10.2-1.4.3 kapman-4.10.2-1.4.7 kapman-debuginfo-4.10.2-1.4.7 kapman-debugsource-4.10.2-1.4.7 kate-4.10.2-1.5.10 kate-debuginfo-4.10.2-1.5.10 kate-debugsource-4.10.2-1.5.10 kate-devel-4.10.2-1.5.10 katomic-4.10.2-1.4.7 katomic-debuginfo-4.10.2-1.4.7 katomic-debugsource-4.10.2-1.4.7 kblackbox-4.10.2-1.4.7 kblackbox-debuginfo-4.10.2-1.4.7 kblackbox-debugsource-4.10.2-1.4.7 kblocks-4.10.2-1.4.7 kblocks-debuginfo-4.10.2-1.4.7 kblocks-debugsource-4.10.2-1.4.7 kbounce-4.10.2-1.4.7 kbounce-debuginfo-4.10.2-1.4.7 kbounce-debugsource-4.10.2-1.4.7 kbreakout-4.10.2-1.4.7 kbreakout-debuginfo-4.10.2-1.4.7 kbreakout-debugsource-4.10.2-1.4.7 kbruch-4.10.2-1.4.1 kbruch-debuginfo-4.10.2-1.4.1 kbruch-debugsource-4.10.2-1.4.1 kcachegrind-4.10.2-1.4.3 kcachegrind-debuginfo-4.10.2-1.4.3 kcalc-4.10.2-1.4.14 kcalc-debuginfo-4.10.2-1.4.14 kcalc-debugsource-4.10.2-1.4.14 kcharselect-4.10.2-1.4.1 kcharselect-debuginfo-4.10.2-1.4.1 kcharselect-debugsource-4.10.2-1.4.1 kcolorchooser-4.10.2-1.4.1 kcolorchooser-debuginfo-4.10.2-1.4.1 kcolorchooser-debugsource-4.10.2-1.4.1 kcron-4.10.2-1.4.11 kcron-debuginfo-4.10.2-1.4.11 kde-mplayer-thumbnailer-4.10.2-1.4.1 kde-mplayer-thumbnailer-debuginfo-4.10.2-1.4.1 kde-mplayer-thumbnailer-debugsource-4.10.2-1.4.1 kde4-filesystem-4.10.2-1.4.1 kde4-kapptemplate-4.10.2-1.4.3 kde4-kapptemplate-debuginfo-4.10.2-1.4.3 kde4-kgreeter-plugins-4.10.2-1.11.3 kde4-kgreeter-plugins-debuginfo-4.10.2-1.11.3 kde4-l10n-devel-4.10.2-1.4.3 kde4-l10n-devel-debuginfo-4.10.2-1.4.3 kde4-print-manager-4.10.2-1.4.2 kde4-print-manager-debuginfo-4.10.2-1.4.2 kde4-print-manager-debugsource-4.10.2-1.4.2 kdeadmin4-debugsource-4.10.2-1.4.11 kdeartwork4-debugsource-4.10.2-1.4.12 kdeartwork4-decorations-4.10.2-1.4.12 kdeartwork4-decorations-debuginfo-4.10.2-1.4.12 kdeartwork4-screensaver-4.10.2-1.4.12 kdeartwork4-screensaver-debuginfo-4.10.2-1.4.12 kdeartwork4-styles-4.10.2-1.4.12 kdeartwork4-styles-debuginfo-4.10.2-1.4.12 kdebase4-debugsource-4.10.2-1.4.4 kdebase4-libkonq-4.10.2-1.4.4 kdebase4-libkonq-debuginfo-4.10.2-1.4.4 kdebase4-nsplugin-4.10.2-1.4.4 kdebase4-nsplugin-debuginfo-4.10.2-1.4.4 kdebase4-openSUSE-12.3-10.15.6 kdebase4-openSUSE-debuginfo-12.3-10.15.6 kdebase4-openSUSE-debugsource-12.3-10.15.6 kdebase4-runtime-4.10.2-1.4.5 kdebase4-runtime-branding-openSUSE-12.3-10.15.6 kdebase4-runtime-branding-upstream-4.10.2-1.4.5 kdebase4-runtime-debuginfo-4.10.2-1.4.5 kdebase4-runtime-debugsource-4.10.2-1.4.5 kdebase4-runtime-devel-4.10.2-1.4.5 kdebase4-workspace-4.10.2-1.11.3 kdebase4-workspace-branding-openSUSE-12.3-10.15.6 kdebase4-workspace-branding-openSUSE-debuginfo-12.3-10.15.6 kdebase4-workspace-branding-upstream-4.10.2-1.11.3 kdebase4-workspace-debuginfo-4.10.2-1.11.3 kdebase4-workspace-debugsource-4.10.2-1.11.3 kdebase4-workspace-devel-4.10.2-1.11.3 kdebase4-workspace-devel-debuginfo-4.10.2-1.11.3 kdebase4-workspace-ksysguardd-4.10.2-1.11.3 kdebase4-workspace-ksysguardd-debuginfo-4.10.2-1.11.3 kdebase4-workspace-liboxygenstyle-4.10.2-1.11.3 kdebase4-workspace-liboxygenstyle-debuginfo-4.10.2-1.11.3 kdebase4-workspace-plasma-calendar-4.10.2-1.11.3 kdebase4-workspace-plasma-calendar-debuginfo-4.10.2-1.11.3 kdebindings-smokegen-4.10.2-1.4.1 kdebindings-smokegen-debuginfo-4.10.2-1.4.1 kdebindings-smokegen-debugsource-4.10.2-1.4.1 kdebindings-smokekde-debugsource-4.10.2-1.4.9 kdebindings-smokeqt-debugsource-4.10.2-1.4.2 kdegraphics-strigi-analyzer-4.10.2-1.4.1 kdegraphics-strigi-analyzer-debuginfo-4.10.2-1.4.1 kdegraphics-strigi-analyzer-debugsource-4.10.2-1.4.1 kdegraphics-thumbnailers-4.10.2-1.4.1 kdegraphics-thumbnailers-debuginfo-4.10.2-1.4.1 kdegraphics-thumbnailers-debugsource-4.10.2-1.4.1 kdelibs4-4.10.2-1.5.2 kdelibs4-branding-upstream-4.10.2-1.5.2 kdelibs4-core-4.10.2-1.5.2 kdelibs4-core-debuginfo-4.10.2-1.5.2 kdelibs4-debuginfo-4.10.2-1.5.2 kdelibs4-debugsource-4.10.2-1.5.2 kdelibs4-doc-4.10.2-1.5.2 kdelibs4-doc-debuginfo-4.10.2-1.5.2 kdenetwork4-debugsource-4.10.2-1.4.3 kdenetwork4-filesharing-4.10.2-1.4.3 kdenetwork4-filesharing-debuginfo-4.10.2-1.4.3 kdepasswd-4.10.2-1.4.4 kdepasswd-debuginfo-4.10.2-1.4.4 kdepim4-4.10.2-1.4.4 kdepim4-debuginfo-4.10.2-1.4.4 kdepim4-debugsource-4.10.2-1.4.4 kdepim4-runtime-4.10.2-1.4.1 kdepim4-runtime-debuginfo-4.10.2-1.4.1 kdepim4-runtime-debugsource-4.10.2-1.4.1 kdepimlibs4-4.10.2-1.5.4 kdepimlibs4-debuginfo-4.10.2-1.5.4 kdepimlibs4-debugsource-4.10.2-1.5.4 kdesdk4-debugsource-4.10.2-1.4.3 kdesdk4-scripts-4.10.2-1.4.3 kdesdk4-strigi-4.10.2-1.4.3 kdesdk4-strigi-debuginfo-4.10.2-1.4.3 kdetoys4-debugsource-4.10.2-1.4.3 kdewebdev4-debugsource-4.10.2-1.4.1 kdf-4.10.2-1.4.3 kdf-debuginfo-4.10.2-1.4.3 kdf-debugsource-4.10.2-1.4.3 kdialog-4.10.2-1.4.4 kdialog-debuginfo-4.10.2-1.4.4 kdiamond-4.10.2-1.4.4 kdiamond-debuginfo-4.10.2-1.4.4 kdiamond-debugsource-4.10.2-1.4.4 kdm-4.10.2-1.11.3 kdm-branding-upstream-4.10.2-1.11.3 kdm-debuginfo-4.10.2-1.11.3 kdnssd-4.10.2-1.4.3 kdnssd-debuginfo-4.10.2-1.4.3 keditbookmarks-4.10.2-1.4.4 keditbookmarks-debuginfo-4.10.2-1.4.4 kfilereplace-4.10.2-1.4.1 kfilereplace-debuginfo-4.10.2-1.4.1 kfind-4.10.2-1.4.4 kfind-debuginfo-4.10.2-1.4.4 kfloppy-4.10.2-1.4.3 kfloppy-debuginfo-4.10.2-1.4.3 kfloppy-debugsource-4.10.2-1.4.3 kfourinline-4.10.2-1.4.4 kfourinline-debuginfo-4.10.2-1.4.4 kfourinline-debugsource-4.10.2-1.4.4 kgamma-4.10.2-1.4.1 kgamma-debuginfo-4.10.2-1.4.1 kgamma-debugsource-4.10.2-1.4.1 kgeography-4.10.2-1.4.2 kgeography-debuginfo-4.10.2-1.4.2 kgeography-debugsource-4.10.2-1.4.2 kget-4.10.2-1.4.3 kget-debuginfo-4.10.2-1.4.3 kget-devel-4.10.2-1.4.3 kgoldrunner-4.10.2-1.4.4 kgoldrunner-debuginfo-4.10.2-1.4.4 kgoldrunner-debugsource-4.10.2-1.4.4 kgpg-4.10.2-1.4.3 kgpg-debuginfo-4.10.2-1.4.3 kgpg-debugsource-4.10.2-1.4.3 khangman-4.10.2-1.4.5 khangman-debuginfo-4.10.2-1.4.5 khangman-debugsource-4.10.2-1.4.5 khangman-devel-4.10.2-1.4.5 kig-4.10.2-1.4.1 kig-debuginfo-4.10.2-1.4.1 kig-debugsource-4.10.2-1.4.1 kigo-4.10.2-1.4.4 kigo-debuginfo-4.10.2-1.4.4 kigo-debugsource-4.10.2-1.4.4 killbots-4.10.2-1.4.4 killbots-debuginfo-4.10.2-1.4.4 killbots-debugsource-4.10.2-1.4.4 kimagemapeditor-4.10.2-1.4.1 kimagemapeditor-debuginfo-4.10.2-1.4.1 kio_audiocd-4.10.2-1.4.2 kio_audiocd-debuginfo-4.10.2-1.4.2 kio_audiocd-debugsource-4.10.2-1.4.2 kio_kamera-4.10.2-1.4.3 kio_kamera-debuginfo-4.10.2-1.4.3 kio_svn-4.10.2-1.4.3 kio_svn-debuginfo-4.10.2-1.4.3 kiriki-4.10.2-1.4.4 kiriki-debuginfo-4.10.2-1.4.4 kiriki-debugsource-4.10.2-1.4.4 kiten-4.10.2-1.4.1 kiten-debuginfo-4.10.2-1.4.1 kiten-debugsource-4.10.2-1.4.1 kiten-devel-4.10.2-1.4.1 kjots-4.10.2-1.4.4 kjots-debuginfo-4.10.2-1.4.4 kjumpingcube-4.10.2-1.4.4 kjumpingcube-debuginfo-4.10.2-1.4.4 kjumpingcube-debugsource-4.10.2-1.4.4 klettres-4.10.2-1.4.2 klettres-debuginfo-4.10.2-1.4.2 klettres-debugsource-4.10.2-1.4.2 klickety-4.10.2-1.4.4 klickety-debuginfo-4.10.2-1.4.4 klickety-debugsource-4.10.2-1.4.4 klines-4.10.2-1.4.4 klines-debuginfo-4.10.2-1.4.4 klines-debugsource-4.10.2-1.4.4 klinkstatus-4.10.2-1.4.1 klinkstatus-debuginfo-4.10.2-1.4.1 kmag-4.10.2-1.4.2 kmag-debuginfo-4.10.2-1.4.2 kmag-debugsource-4.10.2-1.4.2 kmahjongg-4.10.2-1.4.6 kmahjongg-debuginfo-4.10.2-1.4.6 kmahjongg-debugsource-4.10.2-1.4.6 kmail-4.10.2-1.4.4 kmail-debuginfo-4.10.2-1.4.4 kmines-4.10.2-1.4.4 kmines-debuginfo-4.10.2-1.4.4 kmines-debugsource-4.10.2-1.4.4 kmix-4.10.2-1.5.2 kmix-debuginfo-4.10.2-1.5.2 kmix-debugsource-4.10.2-1.5.2 kmousetool-4.10.2-1.4.2 kmousetool-debuginfo-4.10.2-1.4.2 kmousetool-debugsource-4.10.2-1.4.2 kmouth-4.10.2-1.4.2 kmouth-debuginfo-4.10.2-1.4.2 kmouth-debugsource-4.10.2-1.4.2 kmplot-4.10.2-1.4.2 kmplot-debuginfo-4.10.2-1.4.2 kmplot-debugsource-4.10.2-1.4.2 kmtrace-4.10.2-1.4.3 kmtrace-debuginfo-4.10.2-1.4.3 knavalbattle-4.10.2-1.4.4 knavalbattle-debuginfo-4.10.2-1.4.4 knavalbattle-debugsource-4.10.2-1.4.4 knetwalk-4.10.2-1.4.4 knetwalk-debuginfo-4.10.2-1.4.4 knetwalk-debugsource-4.10.2-1.4.4 knode-4.10.2-1.4.4 knode-debuginfo-4.10.2-1.4.4 knotes-4.10.2-1.4.4 knotes-debuginfo-4.10.2-1.4.4 kolf-4.10.2-1.4.4 kolf-debuginfo-4.10.2-1.4.4 kolf-debugsource-4.10.2-1.4.4 kollision-4.10.2-1.4.4 kollision-debuginfo-4.10.2-1.4.4 kollision-debugsource-4.10.2-1.4.4 kolourpaint-4.10.2-1.4.2 kolourpaint-debuginfo-4.10.2-1.4.2 kolourpaint-debugsource-4.10.2-1.4.2 kommander-runtime-4.10.2-1.4.1 kommander-runtime-debuginfo-4.10.2-1.4.1 kommander-runtime-devel-4.10.2-1.4.1 kompare-4.10.2-1.4.3 kompare-debuginfo-4.10.2-1.4.3 kompare-devel-4.10.2-1.4.3 konqueror-4.10.2-1.4.4 konqueror-debuginfo-4.10.2-1.4.4 konqueror-plugins-4.10.2-1.4.4 konqueror-plugins-debuginfo-4.10.2-1.4.4 konquest-4.10.2-1.4.4 konquest-debuginfo-4.10.2-1.4.4 konquest-debugsource-4.10.2-1.4.4 konsole-4.10.2-1.4.1 konsole-debuginfo-4.10.2-1.4.1 konsole-debugsource-4.10.2-1.4.1 kontact-4.10.2-1.4.4 kontact-debuginfo-4.10.2-1.4.4 kopete-4.10.2-1.4.3 kopete-debuginfo-4.10.2-1.4.3 kopete-devel-4.10.2-1.4.3 korganizer-4.10.2-1.4.4 korganizer-debuginfo-4.10.2-1.4.4 kpartloader-4.10.2-1.4.3 kpartloader-debuginfo-4.10.2-1.4.3 kpat-4.10.2-1.4.4 kpat-debuginfo-4.10.2-1.4.4 kpat-debugsource-4.10.2-1.4.4 kppp-4.10.2-1.4.3 kppp-debuginfo-4.10.2-1.4.3 krdc-4.10.2-1.4.3 krdc-debuginfo-4.10.2-1.4.3 krdc-devel-4.10.2-1.4.3 kremotecontrol-4.10.2-1.4.3 kremotecontrol-debuginfo-4.10.2-1.4.3 kremotecontrol-debugsource-4.10.2-1.4.3 kremotecontrol-devel-4.10.2-1.4.3 kreversi-4.10.2-1.4.4 kreversi-debuginfo-4.10.2-1.4.4 kreversi-debugsource-4.10.2-1.4.4 krfb-4.10.2-1.4.3 krfb-debuginfo-4.10.2-1.4.3 kross-interpreters-debugsource-4.10.2-1.4.1 kross-java-4.10.2-1.4.1 kross-java-debuginfo-4.10.2-1.4.1 kross-python-4.10.2-1.4.1 kross-python-debuginfo-4.10.2-1.4.1 kross-ruby-4.10.2-1.4.1 kross-ruby-debuginfo-4.10.2-1.4.1 kruler-4.10.2-1.4.1 kruler-debuginfo-4.10.2-1.4.1 kruler-debugsource-4.10.2-1.4.1 ksaneplugin-4.10.2-1.4.1 ksaneplugin-debuginfo-4.10.2-1.4.1 ksaneplugin-debugsource-4.10.2-1.4.1 kscd-4.10.2-1.4.1 kscd-debuginfo-4.10.2-1.4.1 kscd-debugsource-4.10.2-1.4.1 kshisen-4.10.2-1.4.6 kshisen-debuginfo-4.10.2-1.4.6 kshisen-debugsource-4.10.2-1.4.6 ksirk-4.10.2-1.4.4 ksirk-debuginfo-4.10.2-1.4.4 ksirk-debugsource-4.10.2-1.4.4 ksnakeduel-4.10.2-1.4.4 ksnakeduel-debuginfo-4.10.2-1.4.4 ksnakeduel-debugsource-4.10.2-1.4.4 ksnapshot-4.10.2-1.4.1 ksnapshot-debuginfo-4.10.2-1.4.1 ksnapshot-debugsource-4.10.2-1.4.1 kspaceduel-4.10.2-1.4.4 kspaceduel-debuginfo-4.10.2-1.4.4 kspaceduel-debugsource-4.10.2-1.4.4 ksquares-4.10.2-1.4.4 ksquares-debuginfo-4.10.2-1.4.4 ksquares-debugsource-4.10.2-1.4.4 kstars-4.10.2-1.4.2 kstars-debuginfo-4.10.2-1.4.2 kstars-debugsource-4.10.2-1.4.2 kstartperf-4.10.2-1.4.3 kstartperf-debuginfo-4.10.2-1.4.3 ksudoku-4.10.2-1.4.4 ksudoku-debuginfo-4.10.2-1.4.4 ksudoku-debugsource-4.10.2-1.4.4 ksystemlog-4.10.2-1.4.11 ksystemlog-debuginfo-4.10.2-1.4.11 kteatime-4.10.2-1.4.3 kteatime-debuginfo-4.10.2-1.4.3 ktimer-4.10.2-1.4.1 ktimer-debuginfo-4.10.2-1.4.1 ktimer-debugsource-4.10.2-1.4.1 ktimetracker-4.10.2-1.4.4 ktimetracker-debuginfo-4.10.2-1.4.4 ktnef-4.10.2-1.4.4 ktnef-debuginfo-4.10.2-1.4.4 ktouch-4.10.2-1.4.2 ktouch-debuginfo-4.10.2-1.4.2 ktouch-debugsource-4.10.2-1.4.2 ktuberling-4.10.2-1.4.4 ktuberling-debuginfo-4.10.2-1.4.4 ktuberling-debugsource-4.10.2-1.4.4 kturtle-4.10.2-1.4.2 kturtle-debuginfo-4.10.2-1.4.2 kturtle-debugsource-4.10.2-1.4.2 ktux-4.10.2-1.4.3 ktux-debuginfo-4.10.2-1.4.3 kubrick-4.10.2-1.4.4 kubrick-debuginfo-4.10.2-1.4.4 kubrick-debugsource-4.10.2-1.4.4 kuiviewer-4.10.2-1.4.3 kuiviewer-debuginfo-4.10.2-1.4.3 kuser-4.10.2-1.4.11 kuser-debuginfo-4.10.2-1.4.11 kwalletmanager-4.10.2-1.4.3 kwalletmanager-debuginfo-4.10.2-1.4.3 kwalletmanager-debugsource-4.10.2-1.4.3 kwikdisk-4.10.2-1.4.3 kwikdisk-debuginfo-4.10.2-1.4.3 kwin-4.10.2-1.11.3 kwin-debuginfo-4.10.2-1.11.3 kwordquiz-4.10.2-1.4.4 kwordquiz-debuginfo-4.10.2-1.4.4 kwordquiz-debugsource-4.10.2-1.4.4 kwrite-4.10.2-1.5.10 kwrite-debuginfo-4.10.2-1.5.10 kwrite-doc-4.10.2-1.5.10 libakonadi4-4.10.2-1.5.4 libakonadi4-debuginfo-4.10.2-1.5.4 libanalitza0-4.10.2-1.4.3 libanalitza0-debuginfo-4.10.2-1.4.3 libcantorlibs1-4.10.2-1.4.4 libcantorlibs1-debuginfo-4.10.2-1.4.4 libkactivities-devel-4.10.2-1.5.3 libkactivities6-4.10.2-1.5.3 libkactivities6-debuginfo-4.10.2-1.5.3 libkanagramengine4-4.10.2-1.4.3 libkanagramengine4-debuginfo-4.10.2-1.4.3 libkcddb4-4.10.2-1.4.1 libkcddb4-debuginfo-4.10.2-1.4.1 libkcddb4-debugsource-4.10.2-1.4.1 libkcddb4-devel-4.10.2-1.4.1 libkcompactdisc4-4.10.2-1.4.1 libkcompactdisc4-debuginfo-4.10.2-1.4.1 libkcompactdisc4-debugsource-4.10.2-1.4.1 libkcompactdisc4-devel-4.10.2-1.4.1 libkdcraw-debugsource-4.10.2-1.4.1 libkdcraw-devel-4.10.2-1.4.1 libkdcraw22-4.10.2-1.4.1 libkdcraw22-debuginfo-4.10.2-1.4.1 libkde4-4.10.2-1.5.2 libkde4-debuginfo-4.10.2-1.5.2 libkde4-devel-4.10.2-1.5.2 libkdecore4-4.10.2-1.5.2 libkdecore4-debuginfo-4.10.2-1.5.2 libkdecore4-devel-4.10.2-1.5.2 libkdecore4-devel-debuginfo-4.10.2-1.5.2 libkdeedu4-debugsource-4.10.2-1.4.2 libkdeedu4-devel-4.10.2-1.4.2 libkdegames-4.10.2-1.5.1 libkdegames-debugsource-4.10.2-1.5.1 libkdegames-devel-4.10.2-1.5.1 libkdegames6-4.10.2-1.5.1 libkdegames6-debuginfo-4.10.2-1.5.1 libkdepim4-4.10.2-1.4.4 libkdepim4-debuginfo-4.10.2-1.4.4 libkdepimlibs4-4.10.2-1.5.4 libkdepimlibs4-debuginfo-4.10.2-1.5.4 libkdepimlibs4-devel-4.10.2-1.5.4 libkeduvocdocument4-4.10.2-1.4.2 libkeduvocdocument4-debuginfo-4.10.2-1.4.2 libkerfuffle4-4.10.2-1.4.3 libkerfuffle4-debuginfo-4.10.2-1.4.3 libkexiv2-11-4.10.2-1.4.1 libkexiv2-11-debuginfo-4.10.2-1.4.1 libkexiv2-debugsource-4.10.2-1.4.1 libkexiv2-devel-4.10.2-1.4.1 libkhangmanengine4-4.10.2-1.4.5 libkhangmanengine4-debuginfo-4.10.2-1.4.5 libkipi-debugsource-4.10.2-1.4.1 libkipi-devel-4.10.2-1.4.1 libkipi10-4.10.2-1.4.1 libkipi10-debuginfo-4.10.2-1.4.1 libkmahjongg-4.10.2-1.4.1 libkmahjongg-debugsource-4.10.2-1.4.1 libkmahjongg-devel-4.10.2-1.4.1 libkmahjongglib4-4.10.2-1.4.1 libkmahjongglib4-debuginfo-4.10.2-1.4.1 libkonq-devel-4.10.2-1.4.4 libkonq5-4.10.2-1.4.4 libkonq5-debuginfo-4.10.2-1.4.4 libksane-debugsource-4.10.2-1.4.1 libksane-devel-4.10.2-1.4.1 libksane0-4.10.2-1.4.1 libksane0-debuginfo-4.10.2-1.4.1 libksuseinstall-devel-4.10.2-1.5.2 libksuseinstall1-4.10.2-1.5.2 libksuseinstall1-debuginfo-4.10.2-1.5.2 libktexteditor-4.10.2-1.5.10 libktexteditor-debuginfo-4.10.2-1.5.10 liblibkremotecontrol1-4.10.2-1.4.3 liblibkremotecontrol1-debuginfo-4.10.2-1.4.3 libmarblewidget15-4.10.2-1.4.2 libmarblewidget15-debuginfo-4.10.2-1.4.2 libnepomukwidgets-debugsource-4.10.2-1.4.1 libnepomukwidgets-devel-4.10.2-1.4.1 libnepomukwidgets4-4.10.2-1.4.1 libnepomukwidgets4-debuginfo-4.10.2-1.4.1 libqyoto2-4.10.2-1.4.2 libqyoto2-debuginfo-4.10.2-1.4.2 librocslib4-4.10.2-1.4.2 librocslib4-debuginfo-4.10.2-1.4.2 libsmokegen-devel-4.10.2-1.4.1 libsmokegen-devel-debuginfo-4.10.2-1.4.1 libsmokekde-devel-4.10.2-1.4.9 libsmokekde3-4.10.2-1.4.9 libsmokekde3-debuginfo-4.10.2-1.4.9 libsmokeqt-4.10.2-1.4.2 libsmokeqt-debuginfo-4.10.2-1.4.2 libsmokeqt-devel-4.10.2-1.4.2 lokalize-4.10.2-1.4.3 lokalize-debuginfo-4.10.2-1.4.3 lskat-4.10.2-1.4.2 lskat-debuginfo-4.10.2-1.4.2 lskat-debugsource-4.10.2-1.4.2 marble-4.10.2-1.4.2 marble-debuginfo-4.10.2-1.4.2 marble-debugsource-4.10.2-1.4.2 marble-devel-4.10.2-1.4.2 mobipocket-4.10.2-1.4.1 mobipocket-debuginfo-4.10.2-1.4.1 mobipocket-debugsource-4.10.2-1.4.1 mono-kde4-4.10.2-1.4.5 mono-kde4-debuginfo-4.10.2-1.4.5 mono-kde4-debugsource-4.10.2-1.4.5 mono-qt4-4.10.2-1.4.2 mono-qt4-debugsource-4.10.2-1.4.2 mono-qt4-devel-4.10.2-1.4.2 mono-qt4-devel-debuginfo-4.10.2-1.4.2 nepomuk-core-4.10.2-1.8.2 nepomuk-core-debuginfo-4.10.2-1.8.2 nepomuk-core-debugsource-4.10.2-1.8.2 nepomuk-core-devel-4.10.2-1.8.2 okteta-4.10.2-1.4.3 okteta-debuginfo-4.10.2-1.4.3 okteta-devel-4.10.2-1.4.3 okular-4.10.2-1.4.1 okular-debuginfo-4.10.2-1.4.1 okular-debugsource-4.10.2-1.4.1 okular-devel-4.10.2-1.4.1 pairs-4.10.2-1.4.1 pairs-debuginfo-4.10.2-1.4.1 pairs-debugsource-4.10.2-1.4.1 palapeli-4.10.2-1.4.2 palapeli-debuginfo-4.10.2-1.4.2 palapeli-debugsource-4.10.2-1.4.2 palapeli-devel-4.10.2-1.4.2 parley-4.10.2-1.4.3 parley-debuginfo-4.10.2-1.4.3 parley-debugsource-4.10.2-1.4.3 perl-kde4-4.10.2-1.4.1 perl-kde4-debuginfo-4.10.2-1.4.1 perl-kde4-debugsource-4.10.2-1.4.1 perl-qt4-4.10.2-1.4.1 perl-qt4-debuginfo-4.10.2-1.4.1 perl-qt4-debugsource-4.10.2-1.4.1 perl-qt4-devel-4.10.2-1.4.1 picmi-4.10.2-1.4.2 picmi-debuginfo-4.10.2-1.4.2 picmi-debugsource-4.10.2-1.4.2 plasma-addons-4.10.2-1.6.3 plasma-addons-akonadi-4.10.2-1.6.3 plasma-addons-akonadi-debuginfo-4.10.2-1.6.3 plasma-addons-debuginfo-4.10.2-1.6.3 plasma-addons-debugsource-4.10.2-1.6.3 plasma-addons-devel-4.10.2-1.6.3 plasma-addons-lancelot-4.10.2-1.6.3 plasma-addons-lancelot-debuginfo-4.10.2-1.6.3 plasma-addons-marble-4.10.2-1.6.3 plasma-addons-marble-debuginfo-4.10.2-1.6.3 plasma-theme-oxygen-4.10.2-1.4.5 plasmoid-folderview-4.10.2-1.4.4 plasmoid-folderview-debuginfo-4.10.2-1.4.4 python-kde4-4.10.2-1.5.3 python-kde4-akonadi-4.10.2-1.5.3 python-kde4-akonadi-debuginfo-4.10.2-1.5.3 python-kde4-debuginfo-4.10.2-1.5.3 python-kde4-debugsource-4.10.2-1.5.3 python-kde4-devel-4.10.2-1.5.3 python-kde4-khtml-4.10.2-1.5.3 python-kde4-khtml-debuginfo-4.10.2-1.5.3 python-kde4-knewstuff-4.10.2-1.5.3 python-kde4-knewstuff-debuginfo-4.10.2-1.5.3 python-kde4-nepomuk-4.10.2-1.5.3 python-kde4-nepomuk-debuginfo-4.10.2-1.5.3 python-kde4-phonon-4.10.2-1.5.3 python-kde4-phonon-debuginfo-4.10.2-1.5.3 python-kde4-plasma-4.10.2-1.5.3 python-kde4-plasma-debuginfo-4.10.2-1.5.3 python-kde4-soprano-4.10.2-1.5.3 python-kde4-soprano-debuginfo-4.10.2-1.5.3 python-kdebase4-4.10.2-1.11.3 python3-kde4-4.10.2-1.5.3 python3-kde4-akonadi-4.10.2-1.5.3 python3-kde4-akonadi-debuginfo-4.10.2-1.5.3 python3-kde4-debuginfo-4.10.2-1.5.3 python3-kde4-debugsource-4.10.2-1.5.3 python3-kde4-devel-4.10.2-1.5.3 python3-kde4-khtml-4.10.2-1.5.3 python3-kde4-khtml-debuginfo-4.10.2-1.5.3 python3-kde4-knewstuff-4.10.2-1.5.3 python3-kde4-knewstuff-debuginfo-4.10.2-1.5.3 python3-kde4-nepomuk-4.10.2-1.5.3 python3-kde4-nepomuk-debuginfo-4.10.2-1.5.3 python3-kde4-phonon-4.10.2-1.5.3 python3-kde4-phonon-debuginfo-4.10.2-1.5.3 python3-kde4-plasma-4.10.2-1.5.3 python3-kde4-plasma-debuginfo-4.10.2-1.5.3 python3-kde4-soprano-4.10.2-1.5.3 python3-kde4-soprano-debuginfo-4.10.2-1.5.3 rocs-4.10.2-1.4.2 rocs-debuginfo-4.10.2-1.4.2 rocs-debugsource-4.10.2-1.4.2 rocs-devel-4.10.2-1.4.2 ruby-kde4-4.10.2-1.4.5 ruby-kde4-debuginfo-4.10.2-1.4.5 ruby-kde4-debugsource-4.10.2-1.4.5 ruby-qt4-4.10.2-1.4.1 ruby-qt4-debuginfo-4.10.2-1.4.1 ruby-qt4-debugsource-4.10.2-1.4.1 ruby-qt4-devel-4.10.2-1.4.1 step-4.10.2-1.4.2 step-debuginfo-4.10.2-1.4.2 step-debugsource-4.10.2-1.4.2 superkaramba-4.10.2-1.4.1 superkaramba-debuginfo-4.10.2-1.4.1 superkaramba-debugsource-4.10.2-1.4.1 svgpart-4.10.2-1.4.1 svgpart-debuginfo-4.10.2-1.4.1 svgpart-debugsource-4.10.2-1.4.1 sweeper-4.10.2-1.4.1 sweeper-debuginfo-4.10.2-1.4.1 sweeper-debugsource-4.10.2-1.4.1 umbrello-4.10.2-1.4.3 umbrello-debuginfo-4.10.2-1.4.3 - openSUSE 12.3 (x86_64): kdebase4-workspace-liboxygenstyle-32bit-4.10.2-1.11.3 kdebase4-workspace-liboxygenstyle-debuginfo-32bit-4.10.2-1.11.3 libkde4-32bit-4.10.2-1.5.2 libkde4-debuginfo-32bit-4.10.2-1.5.2 libkdecore4-32bit-4.10.2-1.5.2 libkdecore4-debuginfo-32bit-4.10.2-1.5.2 libkonq5-32bit-4.10.2-1.4.4 libkonq5-debuginfo-32bit-4.10.2-1.4.4 libksuseinstall1-32bit-4.10.2-1.5.2 libksuseinstall1-debuginfo-32bit-4.10.2-1.5.2 - openSUSE 12.3 (noarch): branding-openSUSE-12.3-6.11.3 dynamic-wallpaper-branding-openSUSE-12.3-6.11.3 fonts-KanjiStrokeOrders-4.10.2-1.4.1 gfxboot-branding-openSUSE-12.3-6.11.3 gimp-branding-openSUSE-12.3-6.11.3 grub2-branding-openSUSE-12.3-6.11.3 kde4-l10n-ar-4.10.2-1.3 kde4-l10n-bg-4.10.2-1.3 kde4-l10n-bs-4.10.2-1.3 kde4-l10n-ca-4.10.2-1.3 kde4-l10n-ca(a)valencia-4.10.2-1.3 kde4-l10n-cs-4.10.2-1.3 kde4-l10n-da-4.10.2-1.3 kde4-l10n-da-data-4.10.2-1.3 kde4-l10n-da-doc-4.10.2-1.3 kde4-l10n-de-4.10.2-1.3 kde4-l10n-de-data-4.10.2-1.3 kde4-l10n-de-doc-4.10.2-1.3 kde4-l10n-el-4.10.2-1.3 kde4-l10n-en_GB-4.10.2-1.3 kde4-l10n-en_GB-data-4.10.2-1.3 kde4-l10n-en_GB-doc-4.10.2-1.3 kde4-l10n-es-4.10.2-1.3 kde4-l10n-es-data-4.10.2-1.3 kde4-l10n-es-doc-4.10.2-1.3 kde4-l10n-et-4.10.2-1.3 kde4-l10n-et-data-4.10.2-1.3 kde4-l10n-et-doc-4.10.2-1.3 kde4-l10n-eu-4.10.2-1.3 kde4-l10n-fa-4.10.2-1.3 kde4-l10n-fi-4.10.2-1.3 kde4-l10n-fr-4.10.2-1.3 kde4-l10n-fr-data-4.10.2-1.3 kde4-l10n-fr-doc-4.10.2-1.3 kde4-l10n-ga-4.10.2-1.3 kde4-l10n-gl-4.10.2-1.3 kde4-l10n-he-4.10.2-1.3 kde4-l10n-hi-4.10.2-1.3 kde4-l10n-hr-4.10.2-1.3 kde4-l10n-hu-4.10.2-1.3 kde4-l10n-ia-4.10.2-1.3 kde4-l10n-is-4.10.2-1.3 kde4-l10n-it-4.10.2-1.3 kde4-l10n-it-data-4.10.2-1.3 kde4-l10n-it-doc-4.10.2-1.3 kde4-l10n-ja-4.10.2-1.3 kde4-l10n-kk-4.10.2-1.3 kde4-l10n-km-4.10.2-1.3 kde4-l10n-ko-4.10.2-1.3 kde4-l10n-lt-4.10.2-1.3 kde4-l10n-lv-4.10.2-1.3 kde4-l10n-mr-4.10.2-1.3 kde4-l10n-nb-4.10.2-1.3 kde4-l10n-nds-4.10.2-1.3 kde4-l10n-nl-4.10.2-1.3 kde4-l10n-nl-data-4.10.2-1.3 kde4-l10n-nl-doc-4.10.2-1.3 kde4-l10n-nn-4.10.2-1.3 kde4-l10n-pa-4.10.2-1.3 kde4-l10n-pl-4.10.2-1.3 kde4-l10n-pl-data-4.10.2-1.3 kde4-l10n-pl-doc-4.10.2-1.3 kde4-l10n-pt-4.10.2-1.3 kde4-l10n-pt_BR-4.10.2-1.3 kde4-l10n-pt_BR-data-4.10.2-1.3 kde4-l10n-pt_BR-doc-4.10.2-1.3 kde4-l10n-ro-4.10.2-1.3 kde4-l10n-ru-4.10.2-1.3 kde4-l10n-ru-data-4.10.2-1.3 kde4-l10n-ru-doc-4.10.2-1.3 kde4-l10n-si-4.10.2-1.3 kde4-l10n-sk-4.10.2-1.3 kde4-l10n-sl-4.10.2-1.3 kde4-l10n-sr-4.10.2-1.3 kde4-l10n-sv-4.10.2-1.3 kde4-l10n-sv-data-4.10.2-1.3 kde4-l10n-sv-doc-4.10.2-1.3 kde4-l10n-tg-4.10.2-1.3 kde4-l10n-th-4.10.2-1.3 kde4-l10n-tr-4.10.2-1.3 kde4-l10n-ug-4.10.2-1.3 kde4-l10n-uk-4.10.2-1.3 kde4-l10n-uk-data-4.10.2-1.3 kde4-l10n-uk-doc-4.10.2-1.3 kde4-l10n-vi-4.10.2-1.3 kde4-l10n-wa-4.10.2-1.3 kde4-l10n-zh_CN-4.10.2-1.3 kde4-l10n-zh_TW-4.10.2-1.3 kdeartwork4-colorschemes-4.10.2-1.4.12 kdeartwork4-desktopthemes-4.10.2-1.4.12 kdeartwork4-emoticons-4.10.2-1.4.12 kdeartwork4-icons-4.10.2-1.4.12 kdeartwork4-icons-mono-4.10.2-1.4.12 kdeartwork4-sounds-4.10.2-1.4.12 kdeartwork4-wallpapers-4.10.2-1.4.12 kdeartwork4-wallpapers-large-4.10.2-1.4.12 kdeartwork4-wallpapers-weather-4.10.2-1.4.12 kdebase4-artwork-4.10.2-1.4.1 kdebase4-openSUSE-lang-12.3-10.15.6 kdebase4-session-4.10.2-1.4.1 kdebase4-wallpapers-4.10.2-1.5.1 kdegames4-carddecks-default-4.10.2-1.5.1 kdegames4-carddecks-other-4.10.2-1.5.1 kdelibs4-apidocs-4.10.2-1.5.2 kdelibs4-branding-openSUSE-12.3-6.11.3 kdm-branding-openSUSE-12.3-6.11.3 kprofilemethod-4.10.2-1.4.3 ksplash-qml-branding-openSUSE-12.3-6.11.3 ksplashx-branding-openSUSE-12.3-6.11.3 libkdeedu4-data-4.10.2-1.4.2 marble-data-4.10.2-1.4.2 marble-doc-4.10.2-1.4.2 oxygen-icon-theme-4.10.2-1.4.1 oxygen-icon-theme-large-4.10.2-1.4.1 oxygen-icon-theme-scalable-4.10.2-1.4.1 pairs-data-4.10.2-1.4.1 palapeli-data-4.10.2-1.4.2 plasma-theme-aya-4.10.2-1.4.12 plymouth-branding-openSUSE-12.3-6.11.3 susegreeter-branding-openSUSE-12.3-6.11.3 wallpaper-branding-openSUSE-12.3-6.11.3 xfce4-splash-branding-openSUSE-12.3-6.11.3 yast2-qt-branding-openSUSE-12.3-6.11.3 References: https://bugzilla.novell.com/788867 https://bugzilla.novell.com/807301 https://bugzilla.novell.com/807946 https://bugzilla.novell.com/810894 https://bugzilla.novell.com/813519

1 0

openSUSE-RU-2013:0695-1: moderate: iscsitarget: ensure configuration is not lost
by maintenance＠opensuse.org 17 Apr '13

17 Apr '13

openSUSE Recommended Update: iscsitarget: ensure configuration is not lost ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0695-1 Rating: moderate References: #811533 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: iscsitarget was updated with a new %post-install spec-file script to ensure user config-file changes not lost (bnc#811533) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-352 - openSUSE 12.2: zypper in -t patch openSUSE-2013-352 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): iscsitarget-1.4.20.3-8.4.1 iscsitarget-debuginfo-1.4.20.3-8.4.1 iscsitarget-debugsource-1.4.20.3-8.4.1 iscsitarget-kmp-default-1.4.20.3_k3.7.10_1.1-8.4.1 iscsitarget-kmp-default-debuginfo-1.4.20.3_k3.7.10_1.1-8.4.1 iscsitarget-kmp-desktop-1.4.20.3_k3.7.10_1.1-8.4.1 iscsitarget-kmp-desktop-debuginfo-1.4.20.3_k3.7.10_1.1-8.4.1 iscsitarget-kmp-xen-1.4.20.3_k3.7.10_1.1-8.4.1 iscsitarget-kmp-xen-debuginfo-1.4.20.3_k3.7.10_1.1-8.4.1 - openSUSE 12.3 (i586): iscsitarget-kmp-pae-1.4.20.3_k3.7.10_1.1-8.4.1 iscsitarget-kmp-pae-debuginfo-1.4.20.3_k3.7.10_1.1-8.4.1 - openSUSE 12.2 (i586 x86_64): iscsitarget-1.4.20.3-2.16.1 iscsitarget-debuginfo-1.4.20.3-2.16.1 iscsitarget-debugsource-1.4.20.3-2.16.1 iscsitarget-kmp-default-1.4.20.3_k3.4.33_2.24-2.16.1 iscsitarget-kmp-default-debuginfo-1.4.20.3_k3.4.33_2.24-2.16.1 iscsitarget-kmp-desktop-1.4.20.3_k3.4.33_2.24-2.16.1 iscsitarget-kmp-desktop-debuginfo-1.4.20.3_k3.4.33_2.24-2.16.1 iscsitarget-kmp-xen-1.4.20.3_k3.4.33_2.24-2.16.1 iscsitarget-kmp-xen-debuginfo-1.4.20.3_k3.4.33_2.24-2.16.1 - openSUSE 12.2 (i586): iscsitarget-kmp-pae-1.4.20.3_k3.4.33_2.24-2.16.1 iscsitarget-kmp-pae-debuginfo-1.4.20.3_k3.4.33_2.24-2.16.1 References: https://bugzilla.novell.com/811533

1 0

openSUSE-RU-2013:0694-1: moderate: alsa: fix segmentation fault when openal-soft is used
by maintenance＠opensuse.org 17 Apr '13

17 Apr '13

openSUSE Recommended Update: alsa: fix segmentation fault when openal-soft is used ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0694-1 Rating: moderate References: #814250 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: ALSA was updated to fix a segfault with openal-soft (bnc#814250). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-349 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): alsa-1.0.26-7.5.1 alsa-debugsource-1.0.26-7.5.1 alsa-devel-1.0.26-7.5.1 libasound2-1.0.26-7.5.1 libasound2-debuginfo-1.0.26-7.5.1 - openSUSE 12.3 (x86_64): alsa-devel-32bit-1.0.26-7.5.1 libasound2-32bit-1.0.26-7.5.1 libasound2-debuginfo-32bit-1.0.26-7.5.1 - openSUSE 12.3 (noarch): alsa-docs-1.0.26-7.5.1 References: https://bugzilla.novell.com/814250

1 0

openSUSE-RU-2013:0693-1: moderate: yast2-installation: do not restart second stage on upgrade.
by maintenance＠opensuse.org 17 Apr '13

17 Apr '13

openSUSE Recommended Update: yast2-installation: do not restart second stage on upgrade. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0693-1 Rating: moderate References: #812630 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: yast2-installation was updated to tell systemd not to restart Second Stage service on upgrade (bnc#812630). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-347 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): yast2-installation-2.23.14-1.8.6 yast2-installation-2.23.14-1.8.7 yast2-installation-devel-doc-2.23.14-1.8.6 yast2-installation-devel-doc-2.23.14-1.8.7 References: https://bugzilla.novell.com/812630

1 0

openSUSE-RU-2013:0692-1: NetworkManager-kde4: require NetworkManager-openconnect
by maintenance＠opensuse.org 17 Apr '13

17 Apr '13

openSUSE Recommended Update: NetworkManager-kde4: require NetworkManager-openconnect ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0692-1 Rating: low References: #814488 Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The KDE NetworkManager received a new requires on NetworkManager-openconnect to specify better what is needed for openconnect management. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-348 - openSUSE 12.2: zypper in -t patch openSUSE-2013-348 - openSUSE 12.1: zypper in -t patch openSUSE-2013-348 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): NetworkManager-kde4-debugsource-0.9.0.7-1.4.1 NetworkManager-kde4-devel-0.9.0.7-1.4.1 NetworkManager-kde4-libs-0.9.0.7-1.4.1 NetworkManager-kde4-libs-debuginfo-0.9.0.7-1.4.1 NetworkManager-novellvpn-kde4-0.9.0.7-1.4.1 NetworkManager-novellvpn-kde4-debuginfo-0.9.0.7-1.4.1 NetworkManager-openconnect-kde4-0.9.0.7-1.4.1 NetworkManager-openconnect-kde4-debuginfo-0.9.0.7-1.4.1 NetworkManager-openvpn-kde4-0.9.0.7-1.4.1 NetworkManager-openvpn-kde4-debuginfo-0.9.0.7-1.4.1 NetworkManager-pptp-kde4-0.9.0.7-1.4.1 NetworkManager-pptp-kde4-debuginfo-0.9.0.7-1.4.1 NetworkManager-strongswan-kde4-0.9.0.7-1.4.1 NetworkManager-strongswan-kde4-debuginfo-0.9.0.7-1.4.1 NetworkManager-vpnc-kde4-0.9.0.7-1.4.1 NetworkManager-vpnc-kde4-debuginfo-0.9.0.7-1.4.1 plasmoid-networkmanagement-0.9.0.7-1.4.1 plasmoid-networkmanagement-debuginfo-0.9.0.7-1.4.1 - openSUSE 12.3 (noarch): NetworkManager-kde4-libs-lang-0.9.0.7-1.4.1 - openSUSE 12.2 (i586 x86_64): NetworkManager-kde4-debugsource-0.9.0.2-2.4.1 NetworkManager-kde4-devel-0.9.0.2-2.4.1 NetworkManager-kde4-libs-0.9.0.2-2.4.1 NetworkManager-kde4-libs-debuginfo-0.9.0.2-2.4.1 NetworkManager-novellvpn-kde4-0.9.0.2-2.4.1 NetworkManager-novellvpn-kde4-debuginfo-0.9.0.2-2.4.1 NetworkManager-openconnect-kde4-0.9.0.2-2.4.1 NetworkManager-openconnect-kde4-debuginfo-0.9.0.2-2.4.1 NetworkManager-openvpn-kde4-0.9.0.2-2.4.1 NetworkManager-openvpn-kde4-debuginfo-0.9.0.2-2.4.1 NetworkManager-pptp-kde4-0.9.0.2-2.4.1 NetworkManager-pptp-kde4-debuginfo-0.9.0.2-2.4.1 NetworkManager-strongswan-kde4-0.9.0.2-2.4.1 NetworkManager-strongswan-kde4-debuginfo-0.9.0.2-2.4.1 NetworkManager-vpnc-kde4-0.9.0.2-2.4.1 NetworkManager-vpnc-kde4-debuginfo-0.9.0.2-2.4.1 plasmoid-networkmanagement-0.9.0.2-2.4.1 plasmoid-networkmanagement-debuginfo-0.9.0.2-2.4.1 - openSUSE 12.2 (noarch): NetworkManager-kde4-libs-lang-0.9.0.2-2.4.1 - openSUSE 12.1 (i586 x86_64): NetworkManager-kde4-debugsource-0.9.1+0.9.0-1.9.1 NetworkManager-kde4-devel-0.9.1+0.9.0-1.9.1 NetworkManager-kde4-libs-0.9.1+0.9.0-1.9.1 NetworkManager-kde4-libs-debuginfo-0.9.1+0.9.0-1.9.1 NetworkManager-novellvpn-kde4-0.9.1+0.9.0-1.9.1 NetworkManager-novellvpn-kde4-debuginfo-0.9.1+0.9.0-1.9.1 NetworkManager-openconnect-kde4-0.9.1+0.9.0-1.9.1 NetworkManager-openconnect-kde4-debuginfo-0.9.1+0.9.0-1.9.1 NetworkManager-openvpn-kde4-0.9.1+0.9.0-1.9.1 NetworkManager-openvpn-kde4-debuginfo-0.9.1+0.9.0-1.9.1 NetworkManager-pptp-kde4-0.9.1+0.9.0-1.9.1 NetworkManager-pptp-kde4-debuginfo-0.9.1+0.9.0-1.9.1 NetworkManager-strongswan-kde4-0.9.1+0.9.0-1.9.1 NetworkManager-strongswan-kde4-debuginfo-0.9.1+0.9.0-1.9.1 NetworkManager-vpnc-kde4-0.9.1+0.9.0-1.9.1 NetworkManager-vpnc-kde4-debuginfo-0.9.1+0.9.0-1.9.1 plasmoid-networkmanagement-0.9.1+0.9.0-1.9.1 plasmoid-networkmanagement-debuginfo-0.9.1+0.9.0-1.9.1 - openSUSE 12.1 (noarch): NetworkManager-kde4-libs-lang-0.9.1+0.9.0-1.9.1 References: https://bugzilla.novell.com/814488

1 0

openSUSE-RU-2013:0691-1: moderate: fcitx: add more locales in xim.d
by maintenance＠opensuse.org 17 Apr '13

17 Apr '13

openSUSE Recommended Update: fcitx: add more locales in xim.d ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0691-1 Rating: moderate References: #813518 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: fcitx was adjusted to add more locales into xim.d * some Taiwan users reported that after installation, they can't have input panel because we don't start it and export environments by default. (bnc#813518) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-351 - openSUSE 12.2: zypper in -t patch openSUSE-2013-351 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): fcitx-4.2.7-1.7.1 fcitx-debuginfo-4.2.7-1.7.1 fcitx-devel-4.2.7-1.7.1 fcitx-devel-debuginfo-4.2.7-1.7.1 fcitx-gtk2-4.2.7-1.7.1 fcitx-gtk3-4.2.7-1.7.1 fcitx-pinyin-4.2.7-1.7.1 fcitx-pinyin-tools-4.2.7-1.7.1 fcitx-pinyin-tools-debuginfo-4.2.7-1.7.1 fcitx-qt4-4.2.7-1.7.1 fcitx-qt4-debuginfo-4.2.7-1.7.1 fcitx-quwei-4.2.7-1.7.1 fcitx-table-4.2.7-1.7.1 fcitx-table-tools-4.2.7-1.7.1 fcitx-table-tools-debuginfo-4.2.7-1.7.1 libfcitx-4_2_7-4.2.7-1.7.1 typelib-1_0-Fcitx-1_0-4.2.7-1.7.1 - openSUSE 12.3 (x86_64): fcitx-gtk2-32bit-4.2.7-1.7.1 fcitx-gtk3-32bit-4.2.7-1.7.1 fcitx-qt4-32bit-4.2.7-1.7.1 fcitx-qt4-debuginfo-32bit-4.2.7-1.7.1 libfcitx-4_2_7-32bit-4.2.7-1.7.1 - openSUSE 12.3 (noarch): fcitx-branding-openSUSE-4.2.7-1.7.1 fcitx-skin-classic-4.2.7-1.7.1 fcitx-skin-dark-4.2.7-1.7.1 fcitx-table-cn-bingchan-4.2.7-1.7.1 fcitx-table-cn-cangjie-4.2.7-1.7.1 fcitx-table-cn-dianbao-4.2.7-1.7.1 fcitx-table-cn-erbi-4.2.7-1.7.1 fcitx-table-cn-wanfeng-4.2.7-1.7.1 fcitx-table-cn-wubi-4.2.7-1.7.1 fcitx-table-cn-wubi-pinyin-4.2.7-1.7.1 fcitx-table-cn-ziran-4.2.7-1.7.1 - openSUSE 12.2 (i586 x86_64): fcitx-4.2.4.2-2.9.1 fcitx-debuginfo-4.2.4.2-2.9.1 fcitx-devel-4.2.4.2-2.9.1 fcitx-gtk2-4.2.4.2-2.9.1 fcitx-gtk3-4.2.4.2-2.9.1 fcitx-pinyin-4.2.4.2-2.9.1 fcitx-pinyin-tools-4.2.4.2-2.9.1 fcitx-pinyin-tools-debuginfo-4.2.4.2-2.9.1 fcitx-qt4-4.2.4.2-2.9.1 fcitx-quwei-4.2.4.2-2.9.1 fcitx-table-4.2.4.2-2.9.1 fcitx-table-tools-4.2.4.2-2.9.1 fcitx-table-tools-debuginfo-4.2.4.2-2.9.1 libfcitx-4_2_4-4.2.4.2-2.9.1 - openSUSE 12.2 (x86_64): fcitx-gtk2-32bit-4.2.4.2-2.9.1 fcitx-gtk3-32bit-4.2.4.2-2.9.1 fcitx-qt4-32bit-4.2.4.2-2.9.1 libfcitx-4_2_4-32bit-4.2.4.2-2.9.1 - openSUSE 12.2 (noarch): fcitx-skin-classic-4.2.4.2-2.9.1 fcitx-skin-dark-4.2.4.2-2.9.1 fcitx-table-cn-bingchan-4.2.4.2-2.9.1 fcitx-table-cn-cangjie-4.2.4.2-2.9.1 fcitx-table-cn-dianbao-4.2.4.2-2.9.1 fcitx-table-cn-erbi-4.2.4.2-2.9.1 fcitx-table-cn-wanfeng-4.2.4.2-2.9.1 fcitx-table-cn-wubi-4.2.4.2-2.9.1 fcitx-table-cn-wubi-pinyin-4.2.4.2-2.9.1 fcitx-table-cn-ziran-4.2.4.2-2.9.1 References: https://bugzilla.novell.com/813518

1 0

openSUSE-RU-2013:0690-1: moderate: seahorse: bugfix update
by maintenance＠opensuse.org 17 Apr '13

17 Apr '13

openSUSE Recommended Update: seahorse: bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0690-1 Rating: moderate References: #814536 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: seahorse was updated to fix two bugs: - fix D-Bus application name claimed by seahorse (bgo#694053, bnc#814536). - fix command line parsing (bgo#686980). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-350 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): seahorse-3.6.3-2.5.1 seahorse-debuginfo-3.6.3-2.5.1 seahorse-debugsource-3.6.3-2.5.1 - openSUSE 12.3 (noarch): seahorse-lang-3.6.3-2.5.1 References: https://bugzilla.novell.com/814536

1 0

openSUSE-RU-2013:0688-1: moderate: xen: bugfix update
by maintenance＠opensuse.org 16 Apr '13

16 Apr '13

openSUSE Recommended Update: xen: bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0688-1 Rating: moderate References: #797014 #801910 #803712 #805579 #811764 #813156 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: XEN was updated to fix various bugs: - bnc#813156 - IndentationError in XendCheckpoint.py xend-domain-lock.patch - bnc#797014 - no way to control live migrations - bnc#803712 - after live migration rcu_sched_state detected stalls xen.migrate.tools-xend_move_assert_to_exception_block.patch xen.migrate.tools-libxc_print_stats_if_migration_is_aborted. patch xen.migrate.tools_set_number_of_dirty_pages_during_migration .patch xen.migrate.tools_notify_restore_to_hangup_during_migration_ --abort_if_busy.patch - bnc#811764 - XEN (hypervisor or kernel) has a problem with EFI variable services x86-EFI-set-variable-permit-attrs.patch - Upstream patches from Jan 26060-ACPI-ERST-table-size-checks.patch 26692-x86-fully-protect-MSI-X-table-from-PV-guest-accesses.p atch 26702-powernow-add-fixups-for-AMD-P-state-figures.patch 26704-x86-MCA-suppress-bank-clearing-for-certain-injected-ev ents.patch (bnc#805579) 26731-AMD-IOMMU-Process-softirqs-while-building-dom0-iommu-m appings.patch 26733-VT-d-Enumerate-IOMMUs-when-listing-capabilities.patch 26734-ACPI-ERST-Name-table-in-otherwise-opaque-error-message s.patch 26736-ACPI-APEI-Unlock-apei_iomaps_lock-on-error-path.patch 26737-ACPI-APEI-Add-apei_exec_run_optional.patch 26742-IOMMU-properly-check-whether-interrupt-remapping-is-en abled.patch 26743-VT-d-deal-with-5500-5520-X58-errata.patch (bnc#801910) 26744-AMD-IOMMU-allow-disabling-only-interrupt-remapping.pat ch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-346 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): xen-debugsource-4.2.1_12-1.8.1 xen-devel-4.2.1_12-1.8.1 xen-kmp-default-4.2.1_12_k3.7.10_1.1-1.8.1 xen-kmp-default-debuginfo-4.2.1_12_k3.7.10_1.1-1.8.1 xen-kmp-desktop-4.2.1_12_k3.7.10_1.1-1.8.1 xen-kmp-desktop-debuginfo-4.2.1_12_k3.7.10_1.1-1.8.1 xen-libs-4.2.1_12-1.8.1 xen-libs-debuginfo-4.2.1_12-1.8.1 xen-tools-domU-4.2.1_12-1.8.1 xen-tools-domU-debuginfo-4.2.1_12-1.8.1 - openSUSE 12.3 (x86_64): xen-4.2.1_12-1.8.1 xen-doc-html-4.2.1_12-1.8.1 xen-doc-pdf-4.2.1_12-1.8.1 xen-libs-32bit-4.2.1_12-1.8.1 xen-libs-debuginfo-32bit-4.2.1_12-1.8.1 xen-tools-4.2.1_12-1.8.1 xen-tools-debuginfo-4.2.1_12-1.8.1 - openSUSE 12.3 (i586): xen-kmp-pae-4.2.1_12_k3.7.10_1.1-1.8.1 xen-kmp-pae-debuginfo-4.2.1_12_k3.7.10_1.1-1.8.1 References: https://bugzilla.novell.com/797014 https://bugzilla.novell.com/801910 https://bugzilla.novell.com/803712 https://bugzilla.novell.com/805579 https://bugzilla.novell.com/811764 https://bugzilla.novell.com/813156

1 0

openSUSE-SU-2013:0687-1: moderate: subversion: security and bugfix minor version updates
by opensuse-security＠opensuse.org 16 Apr '13

16 Apr '13

openSUSE Security Update: subversion: security and bugfix minor version updates ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0687-1 Rating: moderate References: #813913 Cross-References: CVE-2013-1845 CVE-2013-1846 CVE-2013-1847 CVE-2013-1849 CVE-2013-1884 Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: Subversion received minor version updates to fix remote triggerable vulnerabilities in mod_dav_svn which may result in denial of service. On openSUSE 12.1: - update to 1.6.21 [bnc#813913], addressing remotely triggerable + CVE-2013-1845: mod_dav_svn excessive memory usage from property changes + CVE-2013-1846: mod_dav_svn crashes on LOCK requests against activity URLs + CVE-2013-1847: mod_dav_svn crashes on LOCK requests against non-existant URLs + CVE-2013-1849: mod_dav_svn crashes on PROPFIND requests against activity URLs - further changes: + mod_dav_svn will omit some property values for activity urls + improve memory usage when committing properties in mod_dav_svn + fix mod_dav_svn runs pre-revprop-change twice + fixed: post-revprop-change errors cancel commit + improved logic in mod_dav_svn's implementation of lock. + fix a compatibility issue with g++ 4.7 On openSUSE 12.2 and 12.3: - update to 1.7.9 [bnc#813913], addressing remotely triggerable vulnerabilities in mod_dav_svn which may result in denial of service: + CVE-2013-1845: mod_dav_svn excessive memory usage from property changes + CVE-2013-1846: mod_dav_svn crashes on LOCK requests against activity URLs + CVE-2013-1847: mod_dav_svn crashes on LOCK requests against non-existant URLs + CVE-2013-1849: mod_dav_svn crashes on PROPFIND requests against activity URLs + CVE-2013-1884: mod_dav_svn crashes on out of range limit in log REPORT - further changes: + Client-side bugfixes: * improved error messages about svn:date and svn:author props. * fix local_relpath assertion * fix memory leak in `svn log` over svn:// * fix incorrect authz failure when using neon http library * fix segfault when using kwallet + Server-side bugfixes: * svnserve will log the replayed rev not the low-water rev. * mod_dav_svn will omit some property values for activity urls * fix an assertion in mod_dav_svn when acting as a proxy on / * improve memory usage when committing properties in mod_dav_svn * fix svnrdump to load dump files with non-LF line endings * fix assertion when rep-cache is inaccessible * improved logic in mod_dav_svn's implementation of lock. * avoid executing unnecessary code in log with limit - Developer-visible changes: + General: * fix an assertion in dav_svn_get_repos_path() on Windows * fix get-deps.sh to correctly download zlib * doxygen docs will now ignore prefixes when producing the index * fix get-deps.sh on freebsd + Bindings: * javahl status api now respects the ignoreExternals boolean - refresh subversion-no-build-date.patch for upstream source changes Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-345 - openSUSE 12.2: zypper in -t patch openSUSE-2013-345 - openSUSE 12.1: zypper in -t patch openSUSE-2013-345 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.7.9-2.4.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.7.9-2.4.1 libsvn_auth_kwallet-1-0-1.7.9-2.4.1 libsvn_auth_kwallet-1-0-debuginfo-1.7.9-2.4.1 subversion-1.7.9-2.4.1 subversion-debuginfo-1.7.9-2.4.1 subversion-debugsource-1.7.9-2.4.1 subversion-devel-1.7.9-2.4.1 subversion-perl-1.7.9-2.4.1 subversion-perl-debuginfo-1.7.9-2.4.1 subversion-python-1.7.9-2.4.1 subversion-python-debuginfo-1.7.9-2.4.1 subversion-server-1.7.9-2.4.1 subversion-server-debuginfo-1.7.9-2.4.1 subversion-tools-1.7.9-2.4.1 subversion-tools-debuginfo-1.7.9-2.4.1 - openSUSE 12.3 (noarch): subversion-bash-completion-1.7.9-2.4.1 - openSUSE 12.2 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.7.9-4.12.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.7.9-4.12.1 libsvn_auth_kwallet-1-0-1.7.9-4.12.1 libsvn_auth_kwallet-1-0-debuginfo-1.7.9-4.12.1 subversion-1.7.9-4.12.1 subversion-debuginfo-1.7.9-4.12.1 subversion-debugsource-1.7.9-4.12.1 subversion-devel-1.7.9-4.12.1 subversion-perl-1.7.9-4.12.1 subversion-perl-debuginfo-1.7.9-4.12.1 subversion-python-1.7.9-4.12.1 subversion-python-debuginfo-1.7.9-4.12.1 subversion-server-1.7.9-4.12.1 subversion-server-debuginfo-1.7.9-4.12.1 subversion-tools-1.7.9-4.12.1 subversion-tools-debuginfo-1.7.9-4.12.1 - openSUSE 12.2 (noarch): subversion-bash-completion-1.7.9-4.12.1 - openSUSE 12.1 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.6.21-2.17.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.6.21-2.17.1 libsvn_auth_kwallet-1-0-1.6.21-2.17.1 libsvn_auth_kwallet-1-0-debuginfo-1.6.21-2.17.1 subversion-1.6.21-2.17.1 subversion-debuginfo-1.6.21-2.17.1 subversion-debugsource-1.6.21-2.17.1 subversion-devel-1.6.21-2.17.1 subversion-perl-1.6.21-2.17.1 subversion-perl-debuginfo-1.6.21-2.17.1 subversion-python-1.6.21-2.17.1 subversion-python-debuginfo-1.6.21-2.17.1 subversion-ruby-1.6.21-2.17.1 subversion-ruby-debuginfo-1.6.21-2.17.1 subversion-server-1.6.21-2.17.1 subversion-server-debuginfo-1.6.21-2.17.1 subversion-tools-1.6.21-2.17.1 subversion-tools-debuginfo-1.6.21-2.17.1 References: http://support.novell.com/security/cve/CVE-2013-1845.html http://support.novell.com/security/cve/CVE-2013-1846.html http://support.novell.com/security/cve/CVE-2013-1847.html http://support.novell.com/security/cve/CVE-2013-1849.html http://support.novell.com/security/cve/CVE-2013-1884.html https://bugzilla.novell.com/813913

1 0

openSUSE-SU-2013:0686-1: moderate: opera: security and bugfix update to 12.15
by opensuse-security＠opensuse.org 16 Apr '13

16 Apr '13

openSUSE Security Update: opera: security and bugfix update to 12.15 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0686-1 Rating: moderate References: #813495 Affected Products: openSUSE 12.3:NonFree openSUSE 12.2:NonFree openSUSE 12.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Opera 12.15 is a recommended upgrade offering security and stability enhancements. It provides: -fixed an issue where the search bar's default engine could be overridden by third-party apps; -fixed a moderately severe issue; -added safeguards against attacks on the RC4 encryption protocol; see our advisory. -fixed an issue where cookies could be set for a top-level domain; see our advisory. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2013-344 - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2013-344 - openSUSE 12.1: zypper in -t patch openSUSE-2013-344 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3:NonFree (i586 x86_64): opera-12.15-4.1 opera-gtk-12.15-4.1 opera-kde4-12.15-4.1 - openSUSE 12.2:NonFree (i586 x86_64): opera-12.15-1.22.1 opera-gtk-12.15-1.22.1 opera-kde4-12.15-1.22.1 - openSUSE 12.1 (i586 x86_64): opera-12.15-49.1 opera-gtk-12.15-49.1 opera-kde4-12.15-49.1 References: https://bugzilla.novell.com/813495

1 0

openSUSE-RU-2013:0685-1: findutils: make updatedb ignore btrfs snapshots
by maintenance＠opensuse.org 15 Apr '13

15 Apr '13

openSUSE Recommended Update: findutils: make updatedb ignore btrfs snapshots ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0685-1 Rating: low References: #780918 #813293 Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: Updatedb was supposed to ignore btrfs snapshots but due to misspelling it didn't. This update fixes the spelling and thus the btrfs snapshots are indeed ignored. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-343 - openSUSE 12.2: zypper in -t patch openSUSE-2013-343 - openSUSE 12.1: zypper in -t patch openSUSE-2013-343 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): findutils-4.5.10-10.4.1 findutils-debuginfo-4.5.10-10.4.1 findutils-debugsource-4.5.10-10.4.1 findutils-locate-4.5.10-10.4.1 findutils-locate-debuginfo-4.5.10-10.4.1 - openSUSE 12.3 (noarch): findutils-lang-4.5.10-10.4.1 - openSUSE 12.2 (i586 x86_64): findutils-4.5.10-5.12.1 findutils-debuginfo-4.5.10-5.12.1 findutils-debugsource-4.5.10-5.12.1 findutils-locate-4.5.10-5.12.1 findutils-locate-debuginfo-4.5.10-5.12.1 - openSUSE 12.2 (noarch): findutils-lang-4.5.10-5.12.1 - openSUSE 12.1 (i586 x86_64): findutils-4.4.2-17.4.1 findutils-debuginfo-4.4.2-17.4.1 findutils-debugsource-4.4.2-17.4.1 findutils-locate-4.4.2-17.4.1 findutils-locate-debuginfo-4.4.2-17.4.1 - openSUSE 12.1 (noarch): findutils-lang-4.4.2-17.4.1 References: https://bugzilla.novell.com/780918 https://bugzilla.novell.com/813293

1 0

openSUSE-RU-2013:0684-1: moderate: wqy-bitmap-fonts: fixed configuration files
by maintenance＠opensuse.org 15 Apr '13

15 Apr '13

openSUSE Recommended Update: wqy-bitmap-fonts: fixed configuration files ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0684-1 Rating: moderate References: #813988 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Some bugs in wqy-bitmap-fonts were fixed, where fontconfig language was incorrect. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-341 - openSUSE 12.2: zypper in -t patch openSUSE-2013-341 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): wqy-bitmap-fonts-0.9.9_0-8.4.1 - openSUSE 12.2 (noarch): wqy-bitmap-fonts-0.9.9_0-3.4.1 References: https://bugzilla.novell.com/813988

1 0

openSUSE-RU-2013:0683-1: moderate: gedit-plugins: embedded terminal not loaded in gedit
by maintenance＠opensuse.org 15 Apr '13

15 Apr '13

openSUSE Recommended Update: gedit-plugins: embedded terminal not loaded in gedit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0683-1 Rating: moderate References: #811434 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: gedit was updated to have the embedded terminal specify that it needs Vte 2.90. If it happens to load only Vte 0.0, we end up with Gtk2 and Gtk3 in memory (which the gobject introspection loader blocks). Fix bnc#811434. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-336 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): gedit-plugins-3.6.1-2.4.1 gedit-plugins-debuginfo-3.6.1-2.4.1 gedit-plugins-debugsource-3.6.1-2.4.1 - openSUSE 12.3 (noarch): gedit-plugins-lang-3.6.1-2.4.1 References: https://bugzilla.novell.com/811434

1 0

openSUSE-RU-2013:0682-1: icecream: update to version 1.0.0 to fix scheduler crash and nodes incompatibility
by maintenance＠opensuse.org 15 Apr '13

15 Apr '13

openSUSE Recommended Update: icecream: update to version 1.0.0 to fix scheduler crash and nodes incompatibility ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0682-1 Rating: low References: #813996 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following problems: * scheduler can crash on startup (bug #779564) * nodes running icecream from openSUSE 12.2 or 12.3 are incompatible with other icecream versions (depending on the scheduler version they cannot distribute build jobs to them, receive build jobs from them or both) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-342 - openSUSE 12.2: zypper in -t patch openSUSE-2013-342 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): icecream-1.0.0-12.4.1 icecream-clang-wrappers-1.0.0-12.4.1 icecream-debuginfo-1.0.0-12.4.1 icecream-debugsource-1.0.0-12.4.1 libicecream-devel-1.0.0-12.4.1 - openSUSE 12.2 (i586 x86_64): icecream-1.0.0-7.4.1 icecream-clang-wrappers-1.0.0-7.4.1 icecream-debuginfo-1.0.0-7.4.1 icecream-debugsource-1.0.0-7.4.1 libicecream-devel-1.0.0-7.4.1 References: https://bugzilla.novell.com/813996

1 0

openSUSE-RU-2013:0681-1: moderate: unico: fix crash in gtk-theming engine
by maintenance＠opensuse.org 15 Apr '13

15 Apr '13

openSUSE Recommended Update: unico: fix crash in gtk-theming engine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0681-1 Rating: moderate References: #813150 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: unico was updated to fix a crash on gtk-theming-engine (bnc#813150,lp#1000545) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-334 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): gtk3-engine-unico-1.0.2-4.4.1 gtk3-engine-unico-debuginfo-1.0.2-4.4.1 unico-debugsource-1.0.2-4.4.1 References: https://bugzilla.novell.com/813150

1 0

openSUSE-RU-2013:0680-1: moderate: open-vm-tools: 9.2.2 bugfix update
by maintenance＠opensuse.org 15 Apr '13

15 Apr '13

openSUSE Recommended Update: open-vm-tools: 9.2.2 bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0680-1 Rating: moderate References: #803157 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: open-vm-tools was updated to version 9.2.0: + Fixes for HGFS driver to compile on newer kernels (3.6). + vmsync driver is disabled on kernels 3.0+ as vmbackup plugin uses FIFREEZE/FITHAW standard ioctls. + Fixes for Copy/Paste (and C&P is temporarily disabled on Solaris due to C++ library issues). - Rebase open-vm-tools-kernel-3.6.patch: mostly fixed upstream. - No longer build vmblock.ko: it's been obsoleted in favor of vmblock-fuse. - Change vmtoolsd to use vmware-vmblock-fuse instead of vmblock.ko, using the new mount point /var/run/vmblock-fuse. - Add fuse Requires, as we now use vmblock-fuse. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-340 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libvmtools-devel-9.2.2-2.4.1 libvmtools0-9.2.2-2.4.1 libvmtools0-debuginfo-9.2.2-2.4.1 open-vm-tools-9.2.2-2.4.1 open-vm-tools-debuginfo-9.2.2-2.4.1 open-vm-tools-debugsource-9.2.2-2.4.1 open-vm-tools-gui-9.2.2-2.4.1 open-vm-tools-gui-debuginfo-9.2.2-2.4.1 vmware-guest-kmp-default-9.2.2_k3.7.10_1.1-2.4.1 vmware-guest-kmp-default-debuginfo-9.2.2_k3.7.10_1.1-2.4.1 vmware-guest-kmp-desktop-9.2.2_k3.7.10_1.1-2.4.1 vmware-guest-kmp-desktop-debuginfo-9.2.2_k3.7.10_1.1-2.4.1 - openSUSE 12.3 (i586): vmware-guest-kmp-pae-9.2.2_k3.7.10_1.1-2.4.1 vmware-guest-kmp-pae-debuginfo-9.2.2_k3.7.10_1.1-2.4.1 References: https://bugzilla.novell.com/803157

1 0

openSUSE-RU-2013:0679-1: moderate: rabbitmq-server: properly daemonize
by maintenance＠opensuse.org 15 Apr '13

15 Apr '13

openSUSE Recommended Update: rabbitmq-server: properly daemonize ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0679-1 Rating: moderate References: #807540 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: rabbitmq-server init script was updated to properly daemonize. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-338 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): erlang-rabbitmq-client-2.8.7-2.4.1 rabbitmq-server-2.8.7-2.4.1 rabbitmq-server-plugins-2.8.7-2.4.1 References: https://bugzilla.novell.com/807540

1 0

openSUSE-RU-2013:0678-1: moderate: gnome-sharp2: rebuilt to make giver work
by maintenance＠opensuse.org 15 Apr '13

15 Apr '13

openSUSE Recommended Update: gnome-sharp2: rebuilt to make giver work ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0678-1 Rating: moderate References: #812529 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: gnome-sharp2 was rebuilt without removing libgnomeui-2.so.0 references, to allow giver to work. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-339 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): art-sharp2-2.24.2-15.4.1 gconf-sharp-peditors2-2.24.2-15.4.1 gconf-sharp2-2.24.2-15.4.1 gnome-sharp2-2.24.2-15.4.1 gnome-sharp2-complete-2.24.2-15.4.1 gnome-sharp2-debuginfo-2.24.2-15.4.1 gnome-sharp2-debugsource-2.24.2-15.4.1 gnome-vfs-sharp2-2.24.2-15.4.1 References: https://bugzilla.novell.com/812529

1 0

openSUSE-RU-2013:0677-1: moderate: vsftpd: relax sandboxing to fix feature regressions
by maintenance＠opensuse.org 15 Apr '13

15 Apr '13

openSUSE Recommended Update: vsftpd: relax sandboxing to fix feature regressions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0677-1 Rating: moderate References: #786024 #812406 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: vsftpd confinement was too strict and adjusted to fix some lacking functionality: * drop CLONE_NEWPID from clone to enable audit system * unconditionally enable fcntl with F_SETFL * this enabled a sendto on /dev/log socket when syslog is enabled Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-337 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): vsftpd-3.0.2-4.5.1 vsftpd-debuginfo-3.0.2-4.5.1 vsftpd-debugsource-3.0.2-4.5.1 References: https://bugzilla.novell.com/786024 https://bugzilla.novell.com/812406

1 0

openSUSE-RU-2013:0676-1: moderate: R-base: fixed plots not draw with cairo
by maintenance＠opensuse.org 15 Apr '13

15 Apr '13

openSUSE Recommended Update: R-base: fixed plots not draw with cairo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0676-1 Rating: moderate References: #807426 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: R-Base was updated to fix that Plots were not drawn with buffered cairo. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-335 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): R-base-2.15.2-2.4.1 R-base-debuginfo-2.15.2-2.4.1 R-base-debugsource-2.15.2-2.4.1 R-base-devel-2.15.2-2.4.1 References: https://bugzilla.novell.com/807426

1 0

openSUSE-SU-2013:0675-1: important: flash-player update to 11.2.202.280
by opensuse-security＠opensuse.org 13 Apr '13

13 Apr '13

openSUSE Security Update: flash-player update to 11.2.202.280 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0675-1 Rating: important References: #814635 Cross-References: CVE-2013-1378 CVE-2013-1379 CVE-2013-1380 CVE-2013-2555 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.280: http://www.adobe.com/support/security/bulletins/apsb13-11.ht ml * APSB13-11, CVE-2013-1378, CVE-2013-1379, CVE-2013-1380, CVE-2013-2555 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-68 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.280-59.1 flash-player-gnome-11.2.202.280-59.1 flash-player-kde4-11.2.202.280-59.1 References: http://support.novell.com/security/cve/CVE-2013-1378.html http://support.novell.com/security/cve/CVE-2013-1379.html http://support.novell.com/security/cve/CVE-2013-1380.html http://support.novell.com/security/cve/CVE-2013-2555.html https://bugzilla.novell.com/814635

1 0

openSUSE-RU-2013:0673-1: Re-enable the WPA-EAP server certificate probe
by maintenance＠opensuse.org 12 Apr '13

12 Apr '13

openSUSE Recommended Update: Re-enable the WPA-EAP server certificate probe ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0673-1 Rating: low References: #574266 #798793 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The patches to probe the WPA-EAP server certificate were disabled due to upstream changes. Rebase the patches to fix CVE-2006-7246. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-333 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): NetworkManager-0.9.6.4-5.6.1 NetworkManager-debuginfo-0.9.6.4-5.6.1 NetworkManager-debugsource-0.9.6.4-5.6.1 NetworkManager-devel-0.9.6.4-5.6.1 NetworkManager-gnome-0.9.6.4-2.5.1 NetworkManager-gnome-debuginfo-0.9.6.4-2.5.1 NetworkManager-gnome-debugsource-0.9.6.4-2.5.1 gnome-control-center-3.6.3-3.14.1 gnome-control-center-debuginfo-3.6.3-3.14.1 gnome-control-center-debugsource-3.6.3-3.14.1 gnome-control-center-devel-3.6.3-3.14.1 gnome-control-center-user-faces-3.6.3-3.14.1 libnm-glib-vpn1-0.9.6.4-5.6.1 libnm-glib-vpn1-debuginfo-0.9.6.4-5.6.1 libnm-glib4-0.9.6.4-5.6.1 libnm-glib4-debuginfo-0.9.6.4-5.6.1 libnm-gtk-devel-0.9.6.4-2.5.1 libnm-gtk0-0.9.6.4-2.5.1 libnm-gtk0-debuginfo-0.9.6.4-2.5.1 libnm-util2-0.9.6.4-5.6.1 libnm-util2-debuginfo-0.9.6.4-5.6.1 typelib-1_0-NMClient-1_0-0.9.6.4-5.6.1 typelib-1_0-NetworkManager-1_0-0.9.6.4-5.6.1 - openSUSE 12.3 (x86_64): NetworkManager-devel-32bit-0.9.6.4-5.6.1 libnm-glib-vpn1-32bit-0.9.6.4-5.6.1 libnm-glib-vpn1-debuginfo-32bit-0.9.6.4-5.6.1 libnm-glib4-32bit-0.9.6.4-5.6.1 libnm-glib4-debuginfo-32bit-0.9.6.4-5.6.1 libnm-util2-32bit-0.9.6.4-5.6.1 libnm-util2-debuginfo-32bit-0.9.6.4-5.6.1 - openSUSE 12.3 (noarch): NetworkManager-gnome-lang-0.9.6.4-2.5.1 NetworkManager-lang-0.9.6.4-5.6.1 gnome-control-center-branding-upstream-3.6.3-3.14.1 gnome-control-center-lang-3.6.3-3.14.1 References: https://bugzilla.novell.com/574266 https://bugzilla.novell.com/798793

1 0

openSUSE-SU-2013:0672-1: moderate: flash-player: update to 11.2.202.280
by opensuse-security＠opensuse.org 12 Apr '13

12 Apr '13

openSUSE Security Update: flash-player: update to 11.2.202.280 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0672-1 Rating: moderate References: #814635 Cross-References: CVE-2013-1378 CVE-2013-1379 CVE-2013-1380 CVE-2013-2555 Affected Products: openSUSE 12.3:NonFree openSUSE 12.2:NonFree openSUSE 12.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.280: (bnc#814635) http://www.adobe.com/support/security/bulletins/apsb13-11.ht ml * APSB13-11, CVE-2013-1378, CVE-2013-1379, CVE-2013-1380, CVE-2013-2555 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2013-331 - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2013-331 - openSUSE 12.1: zypper in -t patch openSUSE-2013-331 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3:NonFree (i586 x86_64): flash-player-11.2.202.280-2.16.1 flash-player-gnome-11.2.202.280-2.16.1 flash-player-kde4-11.2.202.280-2.16.1 - openSUSE 12.2:NonFree (i586 x86_64): flash-player-11.2.202.280-1.38.1 flash-player-gnome-11.2.202.280-1.38.1 flash-player-kde4-11.2.202.280-1.38.1 - openSUSE 12.1 (i586 x86_64): flash-player-11.2.202.280-62.1 flash-player-gnome-11.2.202.280-62.1 flash-player-kde4-11.2.202.280-62.1 References: http://support.novell.com/security/cve/CVE-2013-1378.html http://support.novell.com/security/cve/CVE-2013-1379.html http://support.novell.com/security/cve/CVE-2013-1380.html http://support.novell.com/security/cve/CVE-2013-2555.html https://bugzilla.novell.com/814635

1 0

openSUSE-SU-2013:0671-1: moderate: update for roundcubemail
by opensuse-security＠opensuse.org 12 Apr '13

12 Apr '13

openSUSE Security Update: update for roundcubemail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0671-1 Rating: moderate References: #812568 Cross-References: CVE-2013-1904 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - Update to version 0.8.6 (bnc#812568) * Fix security issue in save-pref command (CVE-2013-1904) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-332 - openSUSE 12.2: zypper in -t patch openSUSE-2013-332 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): roundcubemail-0.8.6-1.4.1 - openSUSE 12.2 (noarch): roundcubemail-0.8.6-3.12.1 References: http://support.novell.com/security/cve/CVE-2013-1904.html https://bugzilla.novell.com/812568

1 0

openSUSE-SU-2013:0668-1: moderate: update for rubygem-activesupport-2_3
by opensuse-security＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Security Update: update for rubygem-activesupport-2_3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0668-1 Rating: moderate References: #809932 Cross-References: CVE-2013-1854 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Changes in rubygem-activesupport-2_3: - add patch to fix security issue: - bug-809932_2-3-attribute_symbols.patch: fix CVE-2013-1854: rubygem-activerecord*: Symbol DoS vulnerability in Active Record (bnc#809932) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-65 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): rubygem-activesupport-2_3-2.3.17-32.1 rubygem-activesupport-2_3-doc-2.3.17-32.1 References: http://support.novell.com/security/cve/CVE-2013-1854.html https://bugzilla.novell.com/809932

1 0

openSUSE-SU-2013:0667-1: moderate: update for rubygem-activerecord-2_3
by opensuse-security＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Security Update: update for rubygem-activerecord-2_3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0667-1 Rating: moderate References: #809932 Cross-References: CVE-2013-1854 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Changes in rubygem-activerecord-2_3: - add patch to fix security issue: - bug-809932_2-3-attribute_symbols.patch: fix CVE-2013-1854: rubygem-activerecord*: Symbol DoS vulnerability in Active Record (bnc#809932) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-66 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): rubygem-activerecord-2_3-2.3.17-35.1 rubygem-activerecord-2_3-doc-2.3.17-35.1 rubygem-activerecord-2_3-testsuite-2.3.17-35.1 References: http://support.novell.com/security/cve/CVE-2013-1854.html https://bugzilla.novell.com/809932

1 0

openSUSE-SU-2013:0666-1: moderate: bind: update to 9.9.2-P2 security release
by opensuse-security＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Security Update: bind: update to 9.9.2-P2 security release ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0666-1 Rating: moderate References: #710430 #715881 #716745 #718441 #738156 #743758 #772946 #792926 #811876 Cross-References: CVE-2011-1907 CVE-2012-3868 CVE-2012-5688 CVE-2013-2266 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves four vulnerabilities and has 5 fixes is now available. Description: bind was updated to 9.9.2-P2, fixing a security issue in regular expression handling. [CVE-2013-2266] [RT #32688] https://kb.isc.org/article/AA-00871 (bnc#811876) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-67 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): bind-9.9.2P2-45.1 bind-chrootenv-9.9.2P2-45.1 bind-debuginfo-9.9.2P2-45.1 bind-debugsource-9.9.2P2-45.1 bind-devel-9.9.2P2-45.1 bind-libs-9.9.2P2-45.1 bind-libs-debuginfo-9.9.2P2-45.1 bind-lwresd-9.9.2P2-45.1 bind-lwresd-debuginfo-9.9.2P2-45.1 bind-utils-9.9.2P2-45.1 bind-utils-debuginfo-9.9.2P2-45.1 - openSUSE 11.4 (x86_64): bind-libs-32bit-9.9.2P2-45.1 bind-libs-debuginfo-32bit-9.9.2P2-45.1 - openSUSE 11.4 (noarch): bind-doc-9.9.2P2-45.1 - openSUSE 11.4 (ia64): bind-libs-debuginfo-x86-9.9.2P2-45.1 bind-libs-x86-9.9.2P2-45.1 References: http://support.novell.com/security/cve/CVE-2011-1907.html http://support.novell.com/security/cve/CVE-2012-3868.html http://support.novell.com/security/cve/CVE-2012-5688.html http://support.novell.com/security/cve/CVE-2013-2266.html https://bugzilla.novell.com/710430 https://bugzilla.novell.com/715881 https://bugzilla.novell.com/716745 https://bugzilla.novell.com/718441 https://bugzilla.novell.com/738156 https://bugzilla.novell.com/743758 https://bugzilla.novell.com/772946 https://bugzilla.novell.com/792926 https://bugzilla.novell.com/811876

1 0

openSUSE-RU-2013:0665-1: mozc: fix icons in fcitx
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: mozc: fix icons in fcitx ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0665-1 Rating: low References: #813016 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with mozc: - bnc#813016: fix icons in fcitx. This is important for UX among Japanese users Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-328 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): fcitx-mozc-1.6.1187.102-2.4.1 fcitx-mozc-debuginfo-1.6.1187.102-2.4.1 ibus-mozc-1.6.1187.102-2.4.1 ibus-mozc-candidate-window-1.6.1187.102-2.4.1 ibus-mozc-candidate-window-debuginfo-1.6.1187.102-2.4.1 ibus-mozc-debuginfo-1.6.1187.102-2.4.1 mozc-1.6.1187.102-2.4.1 mozc-debuginfo-1.6.1187.102-2.4.1 mozc-debugsource-1.6.1187.102-2.4.1 mozc-gui-tools-1.6.1187.102-2.4.1 mozc-gui-tools-debuginfo-1.6.1187.102-2.4.1 References: https://bugzilla.novell.com/813016

1 0

openSUSE-SU-2013:0664-1: moderate: update for rubygem-activesupport-2_3
by opensuse-security＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Security Update: update for rubygem-activesupport-2_3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0664-1 Rating: moderate References: #809932 Cross-References: CVE-2013-1854 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Changes in rubygem-activesupport-2_3: - add patch to fix security issue: - bug-809932_2-3-attribute_symbols.patch: fix CVE-2013-1854: rubygem-activerecord*: Symbol DoS vulnerability in Active Record (bnc#809932) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-327 - openSUSE 12.1: zypper in -t patch openSUSE-2013-327 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): rubygem-activesupport-2_3-2.3.17-3.17.1 rubygem-activesupport-2_3-doc-2.3.17-3.17.1 - openSUSE 12.1 (i586 x86_64): rubygem-activesupport-2_3-2.3.17-3.21.1 rubygem-activesupport-2_3-doc-2.3.17-3.21.1 References: http://support.novell.com/security/cve/CVE-2013-1854.html https://bugzilla.novell.com/809932

1 0

openSUSE-RU-2013:0663-1: moderate: grub2: Two fixes
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: grub2: Two fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0663-1 Rating: moderate References: #809038 #811608 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues with grub2: - bnc#811608: fixed potential failure of chainloading efi loader in secureboot enabled mode - bnc#809038: corretly set chainloaded image device handle in secure boot mode - fixed ppc-build Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-323 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): grub2-2.00-19.13.1 grub2-debuginfo-2.00-19.13.1 grub2-debugsource-2.00-19.13.1 grub2-efi-2.00-19.13.1 grub2-i386-pc-2.00-19.13.1 grub2-i386-pc-debuginfo-2.00-19.13.1 - openSUSE 12.3 (x86_64): grub2-x86_64-efi-2.00-19.13.1 grub2-x86_64-efi-debuginfo-2.00-19.13.1 - openSUSE 12.3 (i586): grub2-i386-efi-2.00-19.13.1 grub2-i386-efi-debuginfo-2.00-19.13.1 References: https://bugzilla.novell.com/809038 https://bugzilla.novell.com/811608

1 0

openSUSE-SU-2013:0662-1: moderate: update for rubygem-actionpack-2_3
by opensuse-security＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Security Update: update for rubygem-actionpack-2_3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0662-1 Rating: moderate References: #809935 #809940 Cross-References: CVE-2013-1855 CVE-2013-1857 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Changes in rubygem-actionpack-2_3: - add 2 patches to fix security issues: - bug-809935_2-3-css_sanitize.patch: CVE-2013-1855: rubygem-actionpack*: XSS vulnerability in sanitize_css in Action Pack (bnc#809935) - bug-809940_2-3-sanitize_protocol.patch: CVE-2013-1857: rubygem-actionpack*: XSS Vulnerability in the `sanitize` helper of Ruby on Rails (bnc#809940) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-324 - openSUSE 12.1: zypper in -t patch openSUSE-2013-324 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): rubygem-actionpack-2_3-2.3.17-2.21.1 rubygem-actionpack-2_3-doc-2.3.17-2.21.1 rubygem-actionpack-2_3-testsuite-2.3.17-2.21.1 - openSUSE 12.1 (i586 x86_64): rubygem-actionpack-2_3-2.3.17-3.24.1 rubygem-actionpack-2_3-doc-2.3.17-3.24.1 rubygem-actionpack-2_3-testsuite-2.3.17-3.24.1 References: http://support.novell.com/security/cve/CVE-2013-1855.html http://support.novell.com/security/cve/CVE-2013-1857.html https://bugzilla.novell.com/809935 https://bugzilla.novell.com/809940

1 0

openSUSE-SU-2013:0661-1: moderate: update for rubygem-actionpack-3_2
by opensuse-security＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Security Update: update for rubygem-actionpack-3_2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0661-1 Rating: moderate References: #809935 #809940 Cross-References: CVE-2013-1855 CVE-2013-1857 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Changes in rubygem-actionpack-3_2: - add 2 patches to fix security issues: - bug-809935_3-2-css_sanitize.patch: CVE-2013-1855: rubygem-actionpack*: XSS vulnerability in sanitize_css in Action Pack (bnc#809935) - bug-809940_3-2-sanitize_protocol.patch: CVE-2013-1857: rubygem-actionpack*: XSS Vulnerability in the `sanitize` helper of Ruby on Rails (bnc#809940) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-329 - openSUSE 12.2: zypper in -t patch openSUSE-2013-329 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): rubygem-actionpack-3_2-3.2.12-1.4.1 rubygem-actionpack-3_2-doc-3.2.12-1.4.1 - openSUSE 12.2 (i586 x86_64): rubygem-actionpack-3_2-3.2.12-3.17.1 rubygem-actionpack-3_2-doc-3.2.12-3.17.1 References: http://support.novell.com/security/cve/CVE-2013-1855.html http://support.novell.com/security/cve/CVE-2013-1857.html https://bugzilla.novell.com/809935 https://bugzilla.novell.com/809940

1 0

openSUSE-SU-2013:0660-1: moderate: update for rubygem-activerecord-2_3
by opensuse-security＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Security Update: update for rubygem-activerecord-2_3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0660-1 Rating: moderate References: #809932 Cross-References: CVE-2013-1854 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Changes in rubygem-activerecord-2_3: - add patch to fix security issue: - bug-809932_2-3-attribute_symbols.patch: fix CVE-2013-1854: rubygem-activerecord*: Symbol DoS vulnerability in Active Record (bnc#809932) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-325 - openSUSE 12.1: zypper in -t patch openSUSE-2013-325 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): rubygem-activerecord-2_3-2.3.17-2.17.1 rubygem-activerecord-2_3-doc-2.3.17-2.17.1 rubygem-activerecord-2_3-testsuite-2.3.17-2.17.1 - openSUSE 12.1 (i586 x86_64): rubygem-activerecord-2_3-2.3.17-3.20.1 rubygem-activerecord-2_3-doc-2.3.17-3.20.1 rubygem-activerecord-2_3-testsuite-2.3.17-3.20.1 References: http://support.novell.com/security/cve/CVE-2013-1854.html https://bugzilla.novell.com/809932

1 0

openSUSE-SU-2013:0659-1: moderate: update for rubygem-activerecord-3_2
by opensuse-security＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Security Update: update for rubygem-activerecord-3_2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0659-1 Rating: moderate References: #809932 Cross-References: CVE-2013-1854 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Changes in rubygem-activerecord-3_2: - add patch to fix security issue: - bug-809932_3-2-attribute_symbols.patch: fix CVE-2013-1854: rubygem-activerecord*: Symbol DoS vulnerability in Active Record (bnc#809932) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-326 - openSUSE 12.2: zypper in -t patch openSUSE-2013-326 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): rubygem-activerecord-3_2-3.2.12-1.4.1 rubygem-activerecord-3_2-doc-3.2.12-1.4.1 - openSUSE 12.2 (i586 x86_64): rubygem-activerecord-3_2-3.2.12-2.17.1 rubygem-activerecord-3_2-doc-3.2.12-2.17.1 References: http://support.novell.com/security/cve/CVE-2013-1854.html https://bugzilla.novell.com/809932

1 0

openSUSE-RU-2013:0658-1: important: yast2-mail: fixed hang after saving mail-server-configuration
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: yast2-mail: fixed hang after saving mail-server-configuration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0658-1 Rating: important References: #800788 Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with yast2-mail: - bnc#800788: ag_postfix_mastercf process hangs the system, after which it is killed by kernel, when saving mail server settings with Yast "Mail Server" module Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-330 - openSUSE 12.2: zypper in -t patch openSUSE-2013-330 - openSUSE 12.1: zypper in -t patch openSUSE-2013-330 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): yast2-mail-2.21.1-9.5.1 yast2-mail-plugins-2.21.1-9.5.1 - openSUSE 12.2 (noarch): yast2-mail-2.21.1-7.4.1 yast2-mail-plugins-2.21.1-7.4.1 - openSUSE 12.1 (noarch): yast2-mail-2.21.1-2.7.1 yast2-mail-plugins-2.21.1-2.7.1 References: https://bugzilla.novell.com/800788

1 0

openSUSE-RU-2013:0657-1: openttd: Update to the final stable release 1.3.0
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: openttd: Update to the final stable release 1.3.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0657-1 Rating: low References: #810959 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with openttd: - bnc#810959: Update to 1.3.0 (final stable release) - Fix: Station rebuilding could leave reserved tiles which caused crashes later on - Fix: When the count for a scrollbar was 0, the inter distance was subtracted too much causing a scrollbar with a negative size - Fix: Limit aircraft property 0D to 19, since the conversion result to km-ish/h needs to fit into a byte - Fix: Clicking the statusbar crashed, when news were pending but no news were shown yet - Fix: Make editbox character filters also apply to pasted content from clipboard - Fix: Catch exception anonymously, if the exception content is not of interest - Fix: Make sizes of the station preview list and direction selection identical in the station build window - Fix: When allocation of the sprite cache fails, try to allocate less memory and display an error message later on - Fix: Refactor Script Debug GUI to only set widget states in OnInvalidateData - Fix: Do not let gcc include files from the "standard C" include directories to avoid inclusion of header files at the top of the preprocessed nfo files, which cause NFOrenum/GRFcodec to make invalid assumptions about the NFO version - Fix: Minimise gaps feature caused removal to only happen at the signal build interval instead of the implicit interval of 1 - Fix: Green path signals would be shown when building them 'under' a train, and they would keep showing green until they were passed again - Feature: Searching of (missing) content via GrfCrawler - Change: Cleanup goals and cargo monitors of companies when they go bankrupt or are taken over - Change: Apply the same name sorting rules to content and NewGRF list as for the server list - Fix: [SDL] Crash after bootstrap download of 32bits base set due to referencing a deleted mutex - Fix: [SDL] Improve 8bpp hardware palette support. Instead of always requesting SDL_HWPALETTE, it is now only done for 8bp blitters in fullscreen mode - Fix: Set vehicle's service interval is percent flag appropriately on creation - Fix: When choosing a train in a depot to attach a newly purchased wagon to, do not consider trains currently moving in and out of the depot - Fix: [Script] Crash when passing too many parameters - Feature: [NewGRF] Station randomisation triggers - Feature: Settings type filter included in the advanced settings GUI - Change: Revert to opening the vehicle GUI again when cloning vehicles using the clone-button from the depot GUI - Fix: Additional zoom in levels could glitch by a few pixels due to incorrect rounding - Fix: Honour pause_on_newgame setting when running as a dedicated server - Fix: [NewGRF] Prevent access to tile-based variables when tile is invalid - Fix: Do not make overbuilding rivers with canals insanely expensive - Fix: Crash when an infinite loop occurred during loading of a script - Fix: company window was not updated when shares were enabled/disabled - Fix: Trams would get stuck on water - Fix: With YAPF the docking behaviour differed per direction; now favour docking in the direction you approached - Fix: Do not stop loading if there are reservations left - Fix: Reserve all capacity while unloading to avoid 'stealing' cargo, i.e. loading cargo onto a second vehicle when the first cannot be fully filled yet - Fix: If a platform is enlarged and there is a reservation, reserve the whole platform - Fix: Inconsistencies in the 'thanks to' lists - Fix: Set 'replace when old' flag when replacing an autoreplace - Fix: Deleting implicit orders was not able to deal with the various side-effects of DeleteOrder - Fix: Redraw autoreplace window properly in network games - Fix: Never put a space between cargo name and subtype - Fix: Do not allow order refit to be set for no-load orders - Fix: Make group names unique per company and vehicle type - Fix: Prevent more NewGRFs being selected than is possible to load - Fix: [GS] Do not try to pause or unpause crashed scripts - Fix: [Squirrel] Update line information before processing 'while' token of 'do'-'while' statement - Fix: Add a tooltip to the mapsize selection mentioning possible deviations - Fix: When an object built on a river is removed, restore the river - Fix: Upgrading bridges could steal road types - Fix: [GS] Allow GSs to pass negative integer string parameters - Fix: 'Train loads/unloads cargo' station animation triggers on individual platform - Fix: Cached station animation triggers were only set when removing parts of a station - Fix: The station build window did not update when the station spread changed - Fix: Do not unpause the game when closing the highscore window if it was already paused before the highscore screen was shown - Fix: Improvements and fixes for the base translation - Fix: Allow downgrade of road bridges in the scenario editor - Fix: Invalidate station selection window when station spread changes - Fix: Distribute GS compat_version.nut with OpenTTD - Fix: Pass proper UTF-16 strings instead of UCS-2 to ICU in order to preserve characters outside the BMP - Fix: A completely emptied vehicle could trigger an assert - Fix: Desync when NewGRF changes the stats related to acceleration (power, weight, tractive effort, etc) during service or 32 day triggers - Fix: Incorrect Romanian own name - Fix: Make invalid sprite references to mapgen sprites behave the same as invalid references between recolour and real sprites - Fix: Do not let UFOs and coal mines clear water - Fix: Do not let UFOs and coal mines destroy depots - Fix: Do not send aircraft to depots that are out of range of the next destination - Fix: Only consider vehicles available in the climate for purchase/depot cell size - Fix: Extend widget data member to 32 bits so that sprite IDs >= 2^16 can be used Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-322 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): openttd-1.3.0-2.4.1 openttd-debuginfo-1.3.0-2.4.1 openttd-dedicated-1.3.0-2.4.1 openttd-dedicated-debuginfo-1.3.0-2.4.1 - openSUSE 12.3 (noarch): openttd-data-1.3.0-2.4.1 References: https://bugzilla.novell.com/810959

1 0

openSUSE-RU-2013:0656-1: ibus: split off gnome bulk into separate subpackage
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: ibus: split off gnome bulk into separate subpackage ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0656-1 Rating: low References: #812298 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with ibus: - bnc#812298: - Put gnome-shell integration files into separate package because these (since openSUSE 12.3) pull in a lot of new unwanted packages on a GNOME-less system compared to 12.2. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-321 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): ibus-1.4.2-4.6.1 ibus-debuginfo-1.4.2-4.6.1 ibus-debugsource-1.4.2-4.6.1 ibus-devel-1.4.2-4.6.1 ibus-gtk-1.4.2-4.6.1 ibus-gtk-debuginfo-1.4.2-4.6.1 ibus-gtk3-1.4.2-4.6.1 ibus-gtk3-debuginfo-1.4.2-4.6.1 libibus-1_0-0-1.4.2-4.6.1 libibus-1_0-0-debuginfo-1.4.2-4.6.1 typelib-1_0-IBus-1_0-1.4.2-4.6.1 - openSUSE 12.3 (x86_64): ibus-gtk-32bit-1.4.2-4.6.1 ibus-gtk-debuginfo-32bit-1.4.2-4.6.1 ibus-gtk3-32bit-1.4.2-4.6.1 ibus-gtk3-debuginfo-32bit-1.4.2-4.6.1 libibus-1_0-0-32bit-1.4.2-4.6.1 libibus-1_0-0-debuginfo-32bit-1.4.2-4.6.1 - openSUSE 12.3 (noarch): ibus-gnome-shell-1.4.2-4.6.1 References: https://bugzilla.novell.com/812298

1 0

openSUSE-RU-2013:0655-1: resource-agents: update to v3.9.5 and several fixes
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: resource-agents: update to v3.9.5 and several fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0655-1 Rating: low References: #791690 #794479 #811930 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This udpate fixes the following issues with resource-agents: - ocf-shellfuncs: use $HA_VARLIB as default destination for trace files - VirtualDomain: allow for custom migrateport - IPaddr2: support nic:iflabel format in nic parameter - upstream cs: ddad46 (v3.9.5) - ocf-shellfuncs: RA tracing - IPaddr2: make sure that some ARP send program runs (bnc#811930) - pgsql: add check_wal_receiver parameter - pgsql: support starting as Hot Standby - nfsserver: improve rpc.statd support - nfsserver: add option -n for rpc.statd (bnc#794479) - nfsserver: make the retry time for sm-notify configurable - nfsserver: make sm-notify running in the foreground configurable - exportfs: handle world exportfs embelishment for '*' (bnc#791690) - jboss: set JAVA_OPTS correctly - pound: use correct default for control-binary - pound: No error when stopping pound and no pound is running - Squid: support systems using IPv6 - Xinetd: do not fail in stop if the daemon is not running - Xinetd: improve finding Xinetd process (thanks to Vadym Chepkov) - SendArp: add background parameter - SendArp: fix monitor - ocft: print the actual case names when testing - ocft: make only the updated test-case file - ocft: add "incremental" mode (ocft test -i) - include a copy of LGPL license file - upstream cs: e265f0 (3.9.5 rc1+) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-317 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): ldirectord-3.9.5-2.4.1 resource-agents-3.9.5-2.4.1 resource-agents-debuginfo-3.9.5-2.4.1 resource-agents-debugsource-3.9.5-2.4.1 References: https://bugzilla.novell.com/791690 https://bugzilla.novell.com/794479 https://bugzilla.novell.com/811930

1 0

openSUSE-RU-2013:0654-1: x3270: Added BuildRequires: bdftopcf to fix font compilation bug
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: x3270: Added BuildRequires: bdftopcf to fix font compilation bug ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0654-1 Rating: low References: #809972 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with x3270: - bnc#809972: Added BuildRequires: bdftopcf to fix font compilation bug Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-318 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): x3270-3.3.12-526.4.1 x3270-debuginfo-3.3.12-526.4.1 x3270-debugsource-3.3.12-526.4.1 References: https://bugzilla.novell.com/809972

1 0

openSUSE-RU-2013:0653-1: moderate: iptraf: Update to new git snapshot 1.1.3.1+git49
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: iptraf: Update to new git snapshot 1.1.3.1+git49 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0653-1 Rating: moderate References: #812080 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with iptraf: - Update to new git snapshot 1.1.3.1+git49 * remove TokenRing and ISDN support * 802.1ad and QinQ VLAN handling * restore functionality of iptraf -B (bnc#812080) - Depend on 3.1 headers (source uses ETH_P_QINQ1) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-320 - openSUSE 12.2: zypper in -t patch openSUSE-2013-320 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): iptraf-debugsource-1.1.3.1+git89-5.4.1 iptraf-ng-1.1.3.1+git89-5.4.1 iptraf-ng-debuginfo-1.1.3.1+git89-5.4.1 - openSUSE 12.2 (i586 x86_64): iptraf-debugsource-1.1.3.1+git89-2.4.1 iptraf-ng-1.1.3.1+git89-2.4.1 iptraf-ng-debuginfo-1.1.3.1+git89-2.4.1 References: https://bugzilla.novell.com/812080

1 0

openSUSE-RU-2013:0652-1: aaa_base: Several fixes
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: aaa_base: Several fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0652-1 Rating: low References: #809842 #811870 #812291 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update fixes the following issues with aaa_base: - bnc#811870: chkconfig: rh compatible check mode - bnc#809842: Mark file as exectuable - bnc#812291: check /lib/systemd for compatibility Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-316 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): aaa_base-12.3-14.8.1 aaa_base-debuginfo-12.3-14.8.1 aaa_base-debugsource-12.3-14.8.1 aaa_base-extras-12.3-14.8.1 aaa_base-malloccheck-12.3-14.8.1 References: https://bugzilla.novell.com/809842 https://bugzilla.novell.com/811870 https://bugzilla.novell.com/812291

1 0

openSUSE-RU-2013:0651-1: moderate: pango: fixed prerequirements for the biarch libraries
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: pango: fixed prerequirements for the biarch libraries ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0651-1 Rating: moderate References: #792646 #803529 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: pango was updated to fix a bug with biarch packages: - bnc#792646, bnc#803529#c1: Change requires pango-tools in baselibs.conf to prereq in order to: + Match the behavior of the native lib in the .spec file, where we use (Requires(post). + Ensure the right version of pango-tools is installed when the post script is being executed. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-319 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libpango-1_0-0-1.32.5-3.4.2 libpango-1_0-0-debuginfo-1.32.5-3.4.2 pango-debugsource-1.32.5-3.4.2 pango-devel-1.32.5-3.4.2 pango-module-thai-lang-1.32.5-3.4.2 pango-module-thai-lang-debuginfo-1.32.5-3.4.2 pango-tools-1.32.5-3.4.2 pango-tools-debuginfo-1.32.5-3.4.2 typelib-1_0-Pango-1_0-1.32.5-3.4.2 - openSUSE 12.3 (x86_64): libpango-1_0-0-32bit-1.32.5-3.4.2 libpango-1_0-0-debuginfo-32bit-1.32.5-3.4.2 pango-devel-32bit-1.32.5-3.4.2 pango-module-thai-lang-32bit-1.32.5-3.4.2 pango-module-thai-lang-debuginfo-32bit-1.32.5-3.4.2 pango-tools-32bit-1.32.5-3.4.2 pango-tools-debuginfo-32bit-1.32.5-3.4.2 References: https://bugzilla.novell.com/792646 https://bugzilla.novell.com/803529

1 0

openSUSE-RU-2013:0650-1: gst-fluendo-mp3: Update to version 18
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: gst-fluendo-mp3: Update to version 18 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0650-1 Rating: low References: #811745 Affected Products: openSUSE 12.3:NonFree ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for gst-fluendo-mp3: - Update to version 18 (except ppc module) (bnc#811745): + Introduce full support for GStreamer 1.0 - Add gstreamer-fluendo-mp3 sub package, with the GStreamer 1.0 plugins. - Update source from svn (as of March 24, 2013). - Replace gstreamer-0_10-devel BuildRequires with gstreamer-0_10-plugins-base-devel and gstreamer-plugins-base-devel, allowing to run gst-inspect-1.0 and gst-inspect-0.10, for both plugin versions. - Replace gstlibdir defines with gst_0_10_libdir and gst_1_0_libdir for the two gstreamer locations (0.10 and 1.0). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2013-315 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3:NonFree (i586 x86_64): gstreamer-0_10-fluendo-mp3-18-9.7.1 gstreamer-fluendo-mp3-18-9.7.1 References: https://bugzilla.novell.com/811745

1 0

openSUSE-RU-2013:0649-1: moderate: Fix Seamonkey media capability regression
by maintenance＠opensuse.org 09 Apr '13

09 Apr '13

openSUSE Recommended Update: Fix Seamonkey media capability regression ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0649-1 Rating: moderate References: #814101 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The Seamonkey 2.17 update broke support for playing media through GStreamer. This update fixes playback for certain media types if GStreamer support is available. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-64 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): seamonkey-2.17-65.1 seamonkey-debuginfo-2.17-65.1 seamonkey-debugsource-2.17-65.1 seamonkey-dom-inspector-2.17-65.1 seamonkey-irc-2.17-65.1 seamonkey-translations-common-2.17-65.1 seamonkey-translations-other-2.17-65.1 seamonkey-venkman-2.17-65.1 References: https://bugzilla.novell.com/814101

1 0

openSUSE-RU-2013:0646-1: gnome-shell-extensions: Fix scriptlets
by maintenance＠opensuse.org 09 Apr '13

09 Apr '13

openSUSE Recommended Update: gnome-shell-extensions: Fix scriptlets ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0646-1 Rating: low References: #811203 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with gnome-shell-extensions: - bnc#811203: Fix scriptlets. Move the glib2 gsettings schema post/postun to the sub-package gnome-shell-extension-alternative-status-menu. The .gschema.xml lives in this subpackage as well. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-314 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): gnome-shell-extension-alternative-status-menu-3.6.2-3.4.1 gnome-shell-extensions-common-3.6.2-3.4.1 gnome-shell-extensions-common-lang-3.6.2-3.4.1 References: https://bugzilla.novell.com/811203

1 0

openSUSE-RU-2013:0643-1: moderate: guilt: added git 1.8 as supported version
by maintenance＠opensuse.org 08 Apr '13

08 Apr '13

openSUSE Recommended Update: guilt: added git 1.8 as supported version ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0643-1 Rating: moderate References: #810667 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with guilt: - bnc#810667: Added git 1.8 to the list of supported git-versions Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-313 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): guilt-0.34-18.4.1 References: https://bugzilla.novell.com/810667

1 0

openSUSE-RU-2013:0642-1: systemd: Several fixes
by maintenance＠opensuse.org 08 Apr '13

08 Apr '13

openSUSE Recommended Update: systemd: Several fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0642-1 Rating: low References: #746595 #809843 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues with systemd: - bnc#746595: Fixed disabling CapsLock and enabling NumLock - bnc#809843: + udev: re-implement network renaming + udev: re-add persistent network rules - rebase all patches, ensure that they apply properly. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-312 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libgudev-1_0-0-195-13.18.1 libgudev-1_0-0-debuginfo-195-13.18.1 libgudev-1_0-devel-195-13.18.1 libudev-devel-195-13.18.1 libudev-mini-devel-195-13.18.1 libudev-mini1-195-13.18.1 libudev-mini1-debuginfo-195-13.18.1 libudev1-195-13.18.1 libudev1-debuginfo-195-13.18.1 systemd-195-13.18.1 systemd-analyze-195-13.18.1 systemd-debuginfo-195-13.18.1 systemd-debugsource-195-13.18.1 systemd-devel-195-13.18.1 systemd-logger-195-13.18.1 systemd-mini-195-13.18.1 systemd-mini-analyze-195-13.18.1 systemd-mini-debuginfo-195-13.18.1 systemd-mini-debugsource-195-13.18.1 systemd-mini-devel-195-13.18.1 systemd-mini-sysvinit-195-13.18.1 systemd-sysvinit-195-13.18.1 typelib-1_0-GUdev-1_0-195-13.18.1 udev-195-13.18.1 udev-debuginfo-195-13.18.1 udev-mini-195-13.18.1 udev-mini-debuginfo-195-13.18.1 - openSUSE 12.3 (x86_64): libgudev-1_0-0-32bit-195-13.18.1 libgudev-1_0-0-debuginfo-32bit-195-13.18.1 libudev1-32bit-195-13.18.1 libudev1-debuginfo-32bit-195-13.18.1 systemd-32bit-195-13.18.1 systemd-debuginfo-32bit-195-13.18.1 References: https://bugzilla.novell.com/746595 https://bugzilla.novell.com/809843

1 0

openSUSE-SU-2013:0641-1: moderate: puppet: security fixes
by opensuse-security＠opensuse.org 08 Apr '13

08 Apr '13

openSUSE Security Update: puppet: security fixes ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0641-1 Rating: moderate References: #809839 Cross-References: CVE-2013-1640 CVE-2013-1652 CVE-2013-1653 CVE-2013-1654 CVE-2013-1655 CVE-2013-2274 CVE-2013-2275 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Various security issues were fixed in puppet. CVE-2013-1655 CVE-2013-2275 CVE-2013-1640 CVE-2013-1652 CVE-2013-1653 CVE-2013-1654 CVE-2013-1655 CVE-2013-2274 CVE-2013-2275 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-62 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): puppet-2.6.17-29.1 puppet-server-2.6.17-29.1 References: http://support.novell.com/security/cve/CVE-2013-1640.html http://support.novell.com/security/cve/CVE-2013-1652.html http://support.novell.com/security/cve/CVE-2013-1653.html http://support.novell.com/security/cve/CVE-2013-1654.html http://support.novell.com/security/cve/CVE-2013-1655.html http://support.novell.com/security/cve/CVE-2013-2274.html http://support.novell.com/security/cve/CVE-2013-2275.html https://bugzilla.novell.com/809839

1 0

openSUSE-SU-2013:0640-1: update for thttpd
by opensuse-security＠opensuse.org 08 Apr '13

08 Apr '13

openSUSE Security Update: update for thttpd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0640-1 Rating: low References: #783165 Cross-References: CVE-2012-5640 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: crypt() return value wasn't checked properly which could allow remote denial of service crashing the application. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-61 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): thttpd-2.25b-184.1 thttpd-debuginfo-2.25b-184.1 thttpd-debugsource-2.25b-184.1 References: http://support.novell.com/security/cve/CVE-2012-5640.html https://bugzilla.novell.com/783165

1 0

openSUSE-SU-2013:0639-1: moderate: opera: security and bugfix update to 12.15
by opensuse-security＠opensuse.org 08 Apr '13

08 Apr '13

openSUSE Security Update: opera: security and bugfix update to 12.15 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0639-1 Rating: moderate References: #813495 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Opera 12.15 is a recommended upgrade offering security and stability enhancements. It provides: -fixed an issue where the search bar's default engine could be overridden by third-party apps; -fixed a moderately severe issue; -added safeguards against attacks on the RC4 encryption protocol; -fixed an issue where cookies could be set for a top-level domain. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-63 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): opera-12.15-52.1 opera-gtk-12.15-52.1 opera-kde4-12.15-52.1 References: https://bugzilla.novell.com/813495

1 0

openSUSE-SU-2013:0638-1: moderate: jakarta-commons-httpclient3: enhance ssl certificate checks by subjectAltNames
by opensuse-security＠opensuse.org 08 Apr '13

08 Apr '13

openSUSE Security Update: jakarta-commons-httpclient3: enhance ssl certificate checks by subjectAltNames ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0638-1 Rating: moderate References: #803332 Cross-References: CVE-2012-5783 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: jakarta-commons-httpclient3 was updated to enhance the fix of bnc#803332 / CVE-2012-5783: - also add a check for subjectAltNames in certificates Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-60 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): jakarta-commons-httpclient3-3.0.1-313.1 jakarta-commons-httpclient3-demo-3.0.1-313.1 jakarta-commons-httpclient3-javadoc-3.0.1-313.1 jakarta-commons-httpclient3-manual-3.0.1-313.1 References: http://support.novell.com/security/cve/CVE-2012-5783.html https://bugzilla.novell.com/803332

1 0

openSUSE-SU-2013:0637-1: moderate: xen: security and bugfix update
by opensuse-security＠opensuse.org 08 Apr '13

08 Apr '13

openSUSE Security Update: xen: security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0637-1 Rating: moderate References: #793927 #794316 #797014 #797031 #797523 #798188 #799694 #800156 #800275 #802690 #805094 #806736 Cross-References: CVE-2012-5510 CVE-2012-5511 CVE-2012-5513 CVE-2012-5514 CVE-2012-5515 CVE-2012-5634 CVE-2012-6075 CVE-2013-0153 CVE-2013-0154 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that solves 9 vulnerabilities and has three fixes is now available. Description: XEN was updated to fix various bugs and security issues: Security issues fixed: - bnc#800275 - CVE-2013-0153: xen: interrupt remap entries shared and old ones not cleared on AMD IOMMUs - bnc#797523 - CVE-2012-6075: qemu / kvm-qemu: e1000 overflows under some conditions - bnc#797031 - Xen Security Advisory 37 (CVE-2013-0154) - Hypervisor crash due to incorrect ASSERT (debug build only) - bnc#794316 - CVE-2012-5634: xen: VT-d interrupt remapping source validation flaw (XSA-33) Bugs fixed: - Upstream patches from Jan 26536-xenoprof-div-by-0.patch 26578-AMD-IOMMU-replace-BUG_ON.patch 26656-x86-fix-null-pointer-dereference-in-intel_get_extended _msrs.patch 26659-AMD-IOMMU-erratum-746-workaround.patch 26660-x86-fix-CMCI-injection.patch 26672-vmx-fix-handling-of-NMI-VMEXIT.patch 26673-Avoid-stale-pointer-when-moving-domain-to-another-cpup ool.patch 26676-fix-compat-memory-exchange-op-splitting.patch 26677-x86-make-certain-memory-sub-ops-return-valid-values.pa tch 26678-SEDF-avoid-gathering-vCPU-s-on-pCPU0.patch 26679-x86-defer-processing-events-on-the-NMI-exit-path.patch 26683-credit1-Use-atomic-bit-operations-for-the-flags-struct ure.patch 26692-x86-MSI-fully-protect-MSI-X-table.patch - bnc#805094 - xen hot plug attach/detach fails modified blktap-pv-cdrom.patch - bnc#802690 - domain locking can prevent a live migration from completing modified xend-domain-lock.patch - bnc#797014 - no way to control live migrations 26547-tools-xc_fix_logic_error_in_stdiostream_progress.patch 26548-tools-xc_handle_tty_output_differently_in_stdiostream_ progress.patch 26549-tools-xc_turn_XCFLAGS__into_shifts.patch 26550-tools-xc_restore_logging_in_xc_save.patch 26551-tools-xc_log_pid_in_xc_save-xc_restore_output.patch 26675-tools-xentoollog_update_tty_detection_in_stdiostream_p rogress.patch xen.migrate.tools-xc_print_messages_from_xc_save_with_xc_rep ort.patch xen.migrate.tools-xc_document_printf_calls_in_xc_restore.pat ch xen.migrate.tools-xc_rework_xc_save.cswitch_qemu_logdirty.pa tch xen.migrate.tools_set_migration_constraints_from_cmdline.pat ch xen.migrate.tools_add_xm_migrate_--log_progress_option.patch - remove old patches: xen.xc.progress.patch xen.xc_save.details.patch xen.migration.abort_if_busy.patch - bnc#806736: enabling xentrace crashes hypervisor 26686-xentrace_fix_off-by-one_in_calculate_tbuf_size.patch - Upstream patches from Jan 26287-sched-credit-pick-idle.patch 26501-VMX-simplify-CR0-update.patch 26502-VMX-disable-SMEP-when-not-paging.patch 26516-ACPI-parse-table-retval.patch (Replaces CVE-2013-0153-xsa36.patch) 26517-AMD-IOMMU-clear-irtes.patch (Replaces CVE-2013-0153-xsa36.patch) 26518-AMD-IOMMU-disable-if-SATA-combined-mode.patch (Replaces CVE-2013-0153-xsa36.patch) 26519-AMD-IOMMU-perdev-intremap-default.patch (Replaces CVE-2013-0153-xsa36.patch) 26526-pvdrv-no-devinit.patch 26531-AMD-IOMMU-IVHD-special-missing.patch (Replaces CVE-2013-0153-xsa36.patch) - bnc#798188 - Add $network to xend initscript dependencies - bnc#797014 - no way to control live migrations * fix logic error in stdiostream_progress xen.xc.progress.patch * restore logging in xc_save xen.xc_save.details.patch * add options to control migration tunables --max_iters, --max_factor, --abort_if_busy xen.migration.abort_if_busy.patch - bnc#799694 - Unable to dvd or cdrom-boot DomU after xen-tools update Fixed with update to Xen version 4.1.4 - bnc#800156 - L3: HP iLo Generate NMI function not working in XEN kernel 26440-x86-forward-SERR.patch - Upstream patches from Jan 26404-x86-forward-both-NMI-kinds.patch 26427-x86-AMD-enable-WC+.patch - bnc#793927 - Xen VMs with more than 2 disks randomly fail to start 25590-hotplug-locking.patch 25595-hotplug-locking.patch 26079-hotplug-locking.patch - Upstream patches from Jan 26332-x86-compat-show-guest-stack-mfn.patch 26333-x86-get_page_type-assert.patch (Replaces CVE-2013-0154-xsa37.patch) 26340-VT-d-intremap-verify-legacy-bridge.patch (Replaces CVE-2012-5634-xsa33.patch) 26370-libxc-x86-initial-mapping-fit.patch - Update to Xen 4.1.4 c/s 23432 - Update xenpaging.guest-memusage.patch add rule for xenmem to avoid spurious build failures - Upstream patches from Jan 26179-PCI-find-next-cap.patch 26183-x86-HPET-masking.patch 26188-x86-time-scale-asm.patch 26200-IOMMU-debug-verbose.patch 26203-x86-HAP-dirty-vram-leak.patch 26229-gnttab-version-switch.patch (Replaces CVE-2012-5510-xsa26.patch) 26230-x86-HVM-limit-batches.patch (Replaces CVE-2012-5511-xsa27.patch) 26231-memory-exchange-checks.patch (Replaces CVE-2012-5513-xsa29.patch) 26232-x86-mark-PoD-error-path.patch (Replaces CVE-2012-5514-xsa30.patch) 26233-memop-order-checks.patch (Replaces CVE-2012-5515-xsa31.patch) 26235-IOMMU-ATS-max-queue-depth.patch 26272-x86-EFI-makefile-cflags-filter.patch 26294-x86-AMD-Fam15-way-access-filter.patch CVE-2013-0154-xsa37.patch - Restore c/s 25751 in 23614-x86_64-EFI-boot.patch. Modify the EFI Makefile to do additional filtering. EFI-makefile-cflags-filter.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-311 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): xen-debugsource-4.1.4_02-5.21.1 xen-devel-4.1.4_02-5.21.1 xen-kmp-default-4.1.4_02_k3.4.33_2.24-5.21.1 xen-kmp-default-debuginfo-4.1.4_02_k3.4.33_2.24-5.21.1 xen-kmp-desktop-4.1.4_02_k3.4.33_2.24-5.21.1 xen-kmp-desktop-debuginfo-4.1.4_02_k3.4.33_2.24-5.21.1 xen-libs-4.1.4_02-5.21.1 xen-libs-debuginfo-4.1.4_02-5.21.1 xen-tools-domU-4.1.4_02-5.21.1 xen-tools-domU-debuginfo-4.1.4_02-5.21.1 - openSUSE 12.2 (x86_64): xen-4.1.4_02-5.21.1 xen-doc-html-4.1.4_02-5.21.1 xen-doc-pdf-4.1.4_02-5.21.1 xen-libs-32bit-4.1.4_02-5.21.1 xen-libs-debuginfo-32bit-4.1.4_02-5.21.1 xen-tools-4.1.4_02-5.21.1 xen-tools-debuginfo-4.1.4_02-5.21.1 - openSUSE 12.2 (i586): xen-kmp-pae-4.1.4_02_k3.4.33_2.24-5.21.1 xen-kmp-pae-debuginfo-4.1.4_02_k3.4.33_2.24-5.21.1 References: http://support.novell.com/security/cve/CVE-2012-5510.html http://support.novell.com/security/cve/CVE-2012-5511.html http://support.novell.com/security/cve/CVE-2012-5513.html http://support.novell.com/security/cve/CVE-2012-5514.html http://support.novell.com/security/cve/CVE-2012-5515.html http://support.novell.com/security/cve/CVE-2012-5634.html http://support.novell.com/security/cve/CVE-2012-6075.html http://support.novell.com/security/cve/CVE-2013-0153.html http://support.novell.com/security/cve/CVE-2013-0154.html https://bugzilla.novell.com/793927 https://bugzilla.novell.com/794316 https://bugzilla.novell.com/797014 https://bugzilla.novell.com/797031 https://bugzilla.novell.com/797523 https://bugzilla.novell.com/798188 https://bugzilla.novell.com/799694 https://bugzilla.novell.com/800156 https://bugzilla.novell.com/800275 https://bugzilla.novell.com/802690 https://bugzilla.novell.com/805094 https://bugzilla.novell.com/806736

1 0

openSUSE-SU-2013:0636-1: moderate: xen: security and bugfix update
by opensuse-security＠opensuse.org 08 Apr '13

08 Apr '13

openSUSE Security Update: xen: security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0636-1 Rating: moderate References: #793927 #794316 #797014 #797031 #797523 #798188 #799694 #800156 #800275 #802690 #805094 #806736 Cross-References: CVE-2012-5510 CVE-2012-5511 CVE-2012-5513 CVE-2012-5514 CVE-2012-5515 CVE-2012-5634 CVE-2012-6075 CVE-2013-0153 CVE-2013-0154 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that solves 9 vulnerabilities and has three fixes is now available. Description: XEN was updated to fix various bugs and security issues: Security issues fixed: - bnc#800275 - CVE-2013-0153: xen: interrupt remap entries shared and old ones not cleared on AMD IOMMUs - bnc#797523 - CVE-2012-6075: qemu / kvm-qemu: e1000 overflows under some conditions - bnc#797031 - Xen Security Advisory 37 (CVE-2013-0154) - Hypervisor crash due to incorrect ASSERT (debug build only) - bnc#794316 - CVE-2012-5634: xen: VT-d interrupt remapping source validation flaw (XSA-33) Bugs fixed: - Upstream patches from Jan 26536-xenoprof-div-by-0.patch 26578-AMD-IOMMU-replace-BUG_ON.patch 26656-x86-fix-null-pointer-dereference-in-intel_get_extended _msrs.patch 26659-AMD-IOMMU-erratum-746-workaround.patch 26660-x86-fix-CMCI-injection.patch 26672-vmx-fix-handling-of-NMI-VMEXIT.patch 26673-Avoid-stale-pointer-when-moving-domain-to-another-cpup ool.patch 26676-fix-compat-memory-exchange-op-splitting.patch 26677-x86-make-certain-memory-sub-ops-return-valid-values.pa tch 26678-SEDF-avoid-gathering-vCPU-s-on-pCPU0.patch 26679-x86-defer-processing-events-on-the-NMI-exit-path.patch 26683-credit1-Use-atomic-bit-operations-for-the-flags-struct ure.patch 26692-x86-MSI-fully-protect-MSI-X-table.patch - bnc#805094 - xen hot plug attach/detach fails modified blktap-pv-cdrom.patch - bnc#802690 - domain locking can prevent a live migration from completing modified xend-domain-lock.patch - bnc#797014 - no way to control live migrations 26547-tools-xc_fix_logic_error_in_stdiostream_progress.patch 26548-tools-xc_handle_tty_output_differently_in_stdiostream_ progress.patch 26549-tools-xc_turn_XCFLAGS__into_shifts.patch 26550-tools-xc_restore_logging_in_xc_save.patch 26551-tools-xc_log_pid_in_xc_save-xc_restore_output.patch 26675-tools-xentoollog_update_tty_detection_in_stdiostream_p rogress.patch xen.migrate.tools-xc_print_messages_from_xc_save_with_xc_rep ort.patch xen.migrate.tools-xc_document_printf_calls_in_xc_restore.pat ch xen.migrate.tools-xc_rework_xc_save.cswitch_qemu_logdirty.pa tch xen.migrate.tools_set_migration_constraints_from_cmdline.pat ch xen.migrate.tools_add_xm_migrate_--log_progress_option.patch - remove old patches: xen.xc.progress.patch xen.xc_save.details.patch xen.migration.abort_if_busy.patch - bnc#806736: enabling xentrace crashes hypervisor 26686-xentrace_fix_off-by-one_in_calculate_tbuf_size.patch - Upstream patches from Jan 26287-sched-credit-pick-idle.patch 26501-VMX-simplify-CR0-update.patch 26502-VMX-disable-SMEP-when-not-paging.patch 26516-ACPI-parse-table-retval.patch (Replaces CVE-2013-0153-xsa36.patch) 26517-AMD-IOMMU-clear-irtes.patch (Replaces CVE-2013-0153-xsa36.patch) 26518-AMD-IOMMU-disable-if-SATA-combined-mode.patch (Replaces CVE-2013-0153-xsa36.patch) 26519-AMD-IOMMU-perdev-intremap-default.patch (Replaces CVE-2013-0153-xsa36.patch) 26526-pvdrv-no-devinit.patch 26531-AMD-IOMMU-IVHD-special-missing.patch (Replaces CVE-2013-0153-xsa36.patch) - bnc#798188 - Add $network to xend initscript dependencies - bnc#797014 - no way to control live migrations * fix logic error in stdiostream_progress xen.xc.progress.patch * restore logging in xc_save xen.xc_save.details.patch * add options to control migration tunables --max_iters, --max_factor, --abort_if_busy xen.migration.abort_if_busy.patch - bnc#799694 - Unable to dvd or cdrom-boot DomU after xen-tools update Fixed with update to Xen version 4.1.4 - bnc#800156 - L3: HP iLo Generate NMI function not working in XEN kernel 26440-x86-forward-SERR.patch - Upstream patches from Jan 26404-x86-forward-both-NMI-kinds.patch 26427-x86-AMD-enable-WC+.patch - bnc#793927 - Xen VMs with more than 2 disks randomly fail to start 25590-hotplug-locking.patch 25595-hotplug-locking.patch 26079-hotplug-locking.patch - Upstream patches from Jan 26332-x86-compat-show-guest-stack-mfn.patch 26333-x86-get_page_type-assert.patch (Replaces CVE-2013-0154-xsa37.patch) 26340-VT-d-intremap-verify-legacy-bridge.patch (Replaces CVE-2012-5634-xsa33.patch) 26370-libxc-x86-initial-mapping-fit.patch - Update to Xen 4.1.4 c/s 23432 - Update xenpaging.guest-memusage.patch add rule for xenmem to avoid spurious build failures - Upstream patches from Jan 26179-PCI-find-next-cap.patch 26183-x86-HPET-masking.patch 26188-x86-time-scale-asm.patch 26200-IOMMU-debug-verbose.patch 26203-x86-HAP-dirty-vram-leak.patch 26229-gnttab-version-switch.patch (Replaces CVE-2012-5510-xsa26.patch) 26230-x86-HVM-limit-batches.patch (Replaces CVE-2012-5511-xsa27.patch) 26231-memory-exchange-checks.patch (Replaces CVE-2012-5513-xsa29.patch) 26232-x86-mark-PoD-error-path.patch (Replaces CVE-2012-5514-xsa30.patch) 26233-memop-order-checks.patch (Replaces CVE-2012-5515-xsa31.patch) 26235-IOMMU-ATS-max-queue-depth.patch 26272-x86-EFI-makefile-cflags-filter.patch 26294-x86-AMD-Fam15-way-access-filter.patch CVE-2013-0154-xsa37.patch - Restore c/s 25751 in 23614-x86_64-EFI-boot.patch. Modify the EFI Makefile to do additional filtering. EFI-makefile-cflags-filter.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-310 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): xen-debugsource-4.1.4_02-1.29.1 xen-devel-4.1.4_02-1.29.1 xen-kmp-default-4.1.4_02_k3.1.10_1.19-1.29.1 xen-kmp-default-debuginfo-4.1.4_02_k3.1.10_1.19-1.29.1 xen-kmp-desktop-4.1.4_02_k3.1.10_1.19-1.29.1 xen-kmp-desktop-debuginfo-4.1.4_02_k3.1.10_1.19-1.29.1 xen-libs-4.1.4_02-1.29.1 xen-libs-debuginfo-4.1.4_02-1.29.1 xen-tools-domU-4.1.4_02-1.29.1 xen-tools-domU-debuginfo-4.1.4_02-1.29.1 - openSUSE 12.1 (x86_64): xen-4.1.4_02-1.29.1 xen-doc-html-4.1.4_02-1.29.1 xen-doc-pdf-4.1.4_02-1.29.1 xen-libs-32bit-4.1.4_02-1.29.1 xen-libs-debuginfo-32bit-4.1.4_02-1.29.1 xen-tools-4.1.4_02-1.29.1 xen-tools-debuginfo-4.1.4_02-1.29.1 - openSUSE 12.1 (ia64): xen-libs-debuginfo-x86-4.1.4_02-1.29.1 xen-libs-x86-4.1.4_02-1.29.1 - openSUSE 12.1 (i586): xen-kmp-pae-4.1.4_02_k3.1.10_1.19-1.29.1 xen-kmp-pae-debuginfo-4.1.4_02_k3.1.10_1.19-1.29.1 References: http://support.novell.com/security/cve/CVE-2012-5510.html http://support.novell.com/security/cve/CVE-2012-5511.html http://support.novell.com/security/cve/CVE-2012-5513.html http://support.novell.com/security/cve/CVE-2012-5514.html http://support.novell.com/security/cve/CVE-2012-5515.html http://support.novell.com/security/cve/CVE-2012-5634.html http://support.novell.com/security/cve/CVE-2012-6075.html http://support.novell.com/security/cve/CVE-2013-0153.html http://support.novell.com/security/cve/CVE-2013-0154.html https://bugzilla.novell.com/793927 https://bugzilla.novell.com/794316 https://bugzilla.novell.com/797014 https://bugzilla.novell.com/797031 https://bugzilla.novell.com/797523 https://bugzilla.novell.com/798188 https://bugzilla.novell.com/799694 https://bugzilla.novell.com/800156 https://bugzilla.novell.com/800275 https://bugzilla.novell.com/802690 https://bugzilla.novell.com/805094 https://bugzilla.novell.com/806736

1 0

openSUSE-SU-2013:0635-1: important: postgresql: security and bugfix update to 9.0.13
by opensuse-security＠opensuse.org 08 Apr '13

08 Apr '13

openSUSE Security Update: postgresql: security and bugfix update to 9.0.13 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0635-1 Rating: important References: #812525 Cross-References: CVE-2013-1899 CVE-2013-1900 CVE-2013-1901 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: Postgresql was updated to version 9.0.13 (bnc#812525): * CVE-2013-1899: Fix insecure parsing of server command-line switches. A connection request containing a database name that begins with "-" could be crafted to damage or destroy files within the server's data directory, even if the request is eventually rejected. * CVE-2013-1900: Reset OpenSSL randomness state in each postmaster child process. This avoids a scenario wherein random numbers generated by "contrib/pgcrypto" functions might be relatively easy for another database user to guess. The risk is only significant when the postmaster is configured with ssl = on but most connections don't use SSL encryption. * CVE-2013-1901: Make REPLICATION privilege checks test current user not authenticated user. An unprivileged database user could exploit this mistake to call pg_start_backup() or pg_stop_backup(), thus possibly interfering with creation of routine backups. * See the release notes for the rest of the changes: http://www.postgresql.org/docs/9.0/static/release-9-0-13.htm l /usr/share/doc/packages/postgresql91/HISTORY Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-59 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libecpg6-9.0.13-31.1 libecpg6-debuginfo-9.0.13-31.1 libpq5-9.0.13-31.1 libpq5-debuginfo-9.0.13-31.1 postgresql-9.0.13-31.1 postgresql-contrib-9.0.13-31.1 postgresql-contrib-debuginfo-9.0.13-31.1 postgresql-debuginfo-9.0.13-31.1 postgresql-debugsource-9.0.13-31.1 postgresql-devel-9.0.13-31.1 postgresql-devel-debuginfo-9.0.13-31.1 postgresql-libs-debugsource-9.0.13-31.1 postgresql-plperl-9.0.13-31.1 postgresql-plperl-debuginfo-9.0.13-31.1 postgresql-plpython-9.0.13-31.1 postgresql-plpython-debuginfo-9.0.13-31.1 postgresql-pltcl-9.0.13-31.1 postgresql-pltcl-debuginfo-9.0.13-31.1 postgresql-server-9.0.13-31.1 postgresql-server-debuginfo-9.0.13-31.1 - openSUSE 11.4 (x86_64): libpq5-32bit-9.0.13-31.1 libpq5-debuginfo-32bit-9.0.13-31.1 - openSUSE 11.4 (noarch): postgresql-docs-9.0.13-31.1 - openSUSE 11.4 (ia64): libpq5-debuginfo-x86-9.0.13-31.1 libpq5-x86-9.0.13-31.1 References: http://support.novell.com/security/cve/CVE-2013-1899.html http://support.novell.com/security/cve/CVE-2013-1900.html http://support.novell.com/security/cve/CVE-2013-1901.html https://bugzilla.novell.com/812525

1 0

openSUSE-SU-2013:0632-1: moderate: apache2: security and bugfixes
by opensuse-security＠opensuse.org 05 Apr '13

05 Apr '13

openSUSE Security Update: apache2: security and bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0632-1 Rating: moderate References: #777260 #798733 #806458 #807152 Cross-References: CVE-2012-2687 CVE-2012-3499 CVE-2012-4558 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: apache2 was updated to fix: - fix for cross site scripting vulnerability in mod_balancer. This is CVE-2012-4558 [bnc#807152] - fixes for low profile cross site scripting vulnerabilities, known as CVE-2012-3499 [bnc#806458] - Escape filename for the case that uploads are allowed with untrusted user's control over filenames and mod_negotiation enabled on the same directory. CVE-2012-2687 [bnc#777260] And also these bugs: - httpd-2.2.x-bnc798733-SNI_ignorecase.diff: ignore case when checking against SNI server names. [bnc#798733] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-57 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apache2-2.2.17-4.68.1 apache2-debuginfo-2.2.17-4.68.1 apache2-debugsource-2.2.17-4.68.1 apache2-devel-2.2.17-4.68.1 apache2-event-2.2.17-4.68.1 apache2-event-debuginfo-2.2.17-4.68.1 apache2-example-certificates-2.2.17-4.68.1 apache2-example-pages-2.2.17-4.68.1 apache2-itk-2.2.17-4.68.1 apache2-itk-debuginfo-2.2.17-4.68.1 apache2-prefork-2.2.17-4.68.1 apache2-prefork-debuginfo-2.2.17-4.68.1 apache2-utils-2.2.17-4.68.1 apache2-utils-debuginfo-2.2.17-4.68.1 apache2-worker-2.2.17-4.68.1 apache2-worker-debuginfo-2.2.17-4.68.1 - openSUSE 11.4 (noarch): apache2-doc-2.2.17-4.68.1 References: http://support.novell.com/security/cve/CVE-2012-2687.html http://support.novell.com/security/cve/CVE-2012-3499.html http://support.novell.com/security/cve/CVE-2012-4558.html https://bugzilla.novell.com/777260 https://bugzilla.novell.com/798733 https://bugzilla.novell.com/806458 https://bugzilla.novell.com/807152

1 0

openSUSE-SU-2013:0631-1: important: Mozilla Firefox and others: Update to 20.0/17.0.5 releases
by opensuse-security＠opensuse.org 05 Apr '13

05 Apr '13

openSUSE Security Update: Mozilla Firefox and others: Update to 20.0/17.0.5 releases ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0631-1 Rating: important References: #813026 Cross-References: CVE-2013-0788 CVE-2013-0789 CVE-2013-0792 CVE-2013-0793 CVE-2013-0794 CVE-2013-0795 CVE-2013-0796 CVE-2013-0800 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: The Mozilla suite received security and bugfix updates: Firefox was updated to version 20.0. Thunderbird was updated to version 17.0.5. Seamonkey was updated to version 2.17 mozilla-nss was updated to version 3.14.3. mozilla-nspr was updated to version 4.9.6. mozilla-nspr was updated to version 4.9.6: * aarch64 support * added PL_SizeOfArenaPoolExcludingPool function (bmo#807883) * Auto detect android api version for x86 (bmo#782214) * Initialize Windows CRITICAL_SECTIONs without debug info and with nonzero spin count (bmo#812085) Previous update to version 4.9.5 * bmo#634793: define NSPR's exact-width integer types PRInt{N} and PRUint{N} types to match the <stdint.h> exact-width integer types int{N}_t and uint{N}_t. * bmo#782815: passing 'int *' to parameter of type 'unsigned int *' in setsockopt(). * bmo#822932: Port bmo#802527 (NDK r8b support for x86) to NSPR. * bmo#824742: NSPR shouldn't require librt on Android. * bmo#831793: data race on lib->refCount in PR_UnloadLibrary. mozilla-nss was updated to version 3.14.3: * disable tests with expired certificates * add SEC_PKCS7VerifyDetachedSignatureAtTime using patch from mozilla tree to fulfill Firefox 21 requirements * No new major functionality is introduced in this release. This release is a patch release to address CVE-2013-1620 (bmo#822365) * "certutil -a" was not correctly producing ASCII output as requested. (bmo#840714) * NSS 3.14.2 broke compilation with older versions of sqlite that lacked the SQLITE_FCNTL_TEMPFILENAME file control. NSS 3.14.3 now properly compiles when used with older versions of sqlite (bmo#837799) - remove system-sqlite.patch * add aarch64 support * added system-sqlite.patch (bmo#837799) * do not depend on latest sqlite just for a #define * enable system sqlite usage again * update to 3.14.2 * required for Firefox >= 20 * removed obsolete nssckbi update patch * MFSA 2013-40/CVE-2013-0791 (bmo#629816) Out-of-bounds array read in CERT_DecodeCertPackage * disable system sqlite usage since we depend on 3.7.15 which is not provided in any openSUSE distribution * add nss-sqlitename.patch to avoid any name clash Changes in MozillaFirefox: - update to Firefox 20.0 (bnc#813026) * requires NSPR 4.9.5 and NSS 3.14.3 * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789 Miscellaneous memory safety hazards * MFSA 2013-31/CVE-2013-0800 (bmo#825721) Out-of-bounds write in Cairo library * MFSA 2013-35/CVE-2013-0796 (bmo#827106) WebGL crash with Mesa graphics driver on Linux * MFSA 2013-36/CVE-2013-0795 (bmo#825697) Bypass of SOW protections allows cloning of protected nodes * MFSA 2013-37/CVE-2013-0794 (bmo#626775) Bypass of tab-modal dialog origin disclosure * MFSA 2013-38/CVE-2013-0793 (bmo#803870) Cross-site scripting (XSS) using timed history navigations * MFSA 2013-39/CVE-2013-0792 (bmo#722831) Memory corruption while rendering grayscale PNG images - use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch) - build fixes for armv7hl: * disable debug build as armv7hl does not have enough memory * disable webrtc on armv7hl as it is non-compiling Changes in MozillaThunderbird: - update to Thunderbird 17.0.5 (bnc#813026) * requires NSPR 4.9.5 and NSS 3.14.3 * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789 Miscellaneous memory safety hazards * MFSA 2013-31/CVE-2013-0800 (bmo#825721) Out-of-bounds write in Cairo library * MFSA 2013-35/CVE-2013-0796 (bmo#827106) WebGL crash with Mesa graphics driver on Linux * MFSA 2013-36/CVE-2013-0795 (bmo#825697) Bypass of SOW protections allows cloning of protected nodes * MFSA 2013-38/CVE-2013-0793 (bmo#803870) Cross-site scripting (XSS) using timed history navigations Changes in seamonkey: - update to SeaMonkey 2.17 (bnc#813026) * requires NSPR 4.9.5 and NSS 3.14.3 * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789 Miscellaneous memory safety hazards * MFSA 2013-31/CVE-2013-0800 (bmo#825721) Out-of-bounds write in Cairo library * MFSA 2013-35/CVE-2013-0796 (bmo#827106) WebGL crash with Mesa graphics driver on Linux * MFSA 2013-36/CVE-2013-0795 (bmo#825697) Bypass of SOW protections allows cloning of protected nodes * MFSA 2013-37/CVE-2013-0794 (bmo#626775) Bypass of tab-modal dialog origin disclosure * MFSA 2013-38/CVE-2013-0793 (bmo#803870) Cross-site scripting (XSS) using timed history navigations * MFSA 2013-39/CVE-2013-0792 (bmo#722831) Memory corruption while rendering grayscale PNG images - use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-58 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): MozillaFirefox-20.0-69.1 MozillaFirefox-branding-upstream-20.0-69.1 MozillaFirefox-buildsymbols-20.0-69.1 MozillaFirefox-debuginfo-20.0-69.1 MozillaFirefox-debugsource-20.0-69.1 MozillaFirefox-devel-20.0-69.1 MozillaFirefox-translations-common-20.0-69.1 MozillaFirefox-translations-other-20.0-69.1 MozillaThunderbird-17.0.5-57.1 MozillaThunderbird-buildsymbols-17.0.5-57.1 MozillaThunderbird-debuginfo-17.0.5-57.1 MozillaThunderbird-debugsource-17.0.5-57.1 MozillaThunderbird-devel-17.0.5-57.1 MozillaThunderbird-devel-debuginfo-17.0.5-57.1 MozillaThunderbird-translations-common-17.0.5-57.1 MozillaThunderbird-translations-other-17.0.5-57.1 enigmail-1.5.1+17.0.5-57.1 enigmail-debuginfo-1.5.1+17.0.5-57.1 libfreebl3-3.14.3-58.1 libfreebl3-debuginfo-3.14.3-58.1 libsoftokn3-3.14.3-58.1 libsoftokn3-debuginfo-3.14.3-58.1 mozilla-nspr-4.9.6-24.1 mozilla-nspr-debuginfo-4.9.6-24.1 mozilla-nspr-debugsource-4.9.6-24.1 mozilla-nspr-devel-4.9.6-24.1 mozilla-nss-3.14.3-58.1 mozilla-nss-certs-3.14.3-58.1 mozilla-nss-certs-debuginfo-3.14.3-58.1 mozilla-nss-debuginfo-3.14.3-58.1 mozilla-nss-debugsource-3.14.3-58.1 mozilla-nss-devel-3.14.3-58.1 mozilla-nss-sysinit-3.14.3-58.1 mozilla-nss-sysinit-debuginfo-3.14.3-58.1 mozilla-nss-tools-3.14.3-58.1 mozilla-nss-tools-debuginfo-3.14.3-58.1 seamonkey-2.17-61.1 seamonkey-debuginfo-2.17-61.1 seamonkey-debugsource-2.17-61.1 seamonkey-dom-inspector-2.17-61.1 seamonkey-irc-2.17-61.1 seamonkey-translations-common-2.17-61.1 seamonkey-translations-other-2.17-61.1 seamonkey-venkman-2.17-61.1 - openSUSE 11.4 (x86_64): libfreebl3-32bit-3.14.3-58.1 libfreebl3-debuginfo-32bit-3.14.3-58.1 libsoftokn3-32bit-3.14.3-58.1 libsoftokn3-debuginfo-32bit-3.14.3-58.1 mozilla-nspr-32bit-4.9.6-24.1 mozilla-nspr-debuginfo-32bit-4.9.6-24.1 mozilla-nss-32bit-3.14.3-58.1 mozilla-nss-certs-32bit-3.14.3-58.1 mozilla-nss-certs-debuginfo-32bit-3.14.3-58.1 mozilla-nss-debuginfo-32bit-3.14.3-58.1 mozilla-nss-sysinit-32bit-3.14.3-58.1 mozilla-nss-sysinit-debuginfo-32bit-3.14.3-58.1 - openSUSE 11.4 (ia64): libfreebl3-debuginfo-x86-3.14.3-58.1 libfreebl3-x86-3.14.3-58.1 libsoftokn3-debuginfo-x86-3.14.3-58.1 libsoftokn3-x86-3.14.3-58.1 mozilla-nspr-debuginfo-x86-4.9.6-24.1 mozilla-nspr-x86-4.9.6-24.1 mozilla-nss-certs-debuginfo-x86-3.14.3-58.1 mozilla-nss-certs-x86-3.14.3-58.1 mozilla-nss-debuginfo-x86-3.14.3-58.1 mozilla-nss-sysinit-debuginfo-x86-3.14.3-58.1 mozilla-nss-sysinit-x86-3.14.3-58.1 mozilla-nss-x86-3.14.3-58.1 References: http://support.novell.com/security/cve/CVE-2013-0788.html http://support.novell.com/security/cve/CVE-2013-0789.html http://support.novell.com/security/cve/CVE-2013-0792.html http://support.novell.com/security/cve/CVE-2013-0793.html http://support.novell.com/security/cve/CVE-2013-0794.html http://support.novell.com/security/cve/CVE-2013-0795.html http://support.novell.com/security/cve/CVE-2013-0796.html http://support.novell.com/security/cve/CVE-2013-0800.html https://bugzilla.novell.com/813026

1 0

openSUSE-SU-2013:0630-1: important: Mozilla Firefox and others: Update to Firefox 20.0 release
by opensuse-security＠opensuse.org 05 Apr '13

05 Apr '13

openSUSE Security Update: Mozilla Firefox and others: Update to Firefox 20.0 release ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0630-1 Rating: important References: #813026 Cross-References: CVE-2013-0788 CVE-2013-0789 CVE-2013-0791 CVE-2013-0792 CVE-2013-0793 CVE-2013-0794 CVE-2013-0795 CVE-2013-0796 CVE-2013-0800 CVE-2013-1620 Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: The Mozilla suite received security and bugfix updates: Mozilla Firefox was updated to version 20.0. Mozilla Thunderbird was updated to version 17.0.5. Mozilla Seamonkey was updated to version 17.0.5. Mozilla XULRunner was updated to version 17.0.5. mozilla-nss was updated to version 3.14.3. mozilla-nspr was updated to version 4.9.6. mozilla-nspr was updated to version 4.9.6: * aarch64 support * added PL_SizeOfArenaPoolExcludingPool function (bmo#807883) * Auto detect android api version for x86 (bmo#782214) * Initialize Windows CRITICAL_SECTIONs without debug info and with nonzero spin count (bmo#812085) Previous update to version 4.9.5 * bmo#634793: define NSPR's exact-width integer types PRInt{N} and PRUint{N} types to match the <stdint.h> exact-width integer types int{N}_t and uint{N}_t. * bmo#782815: passing 'int *' to parameter of type 'unsigned int *' in setsockopt(). * bmo#822932: Port bmo#802527 (NDK r8b support for x86) to NSPR. * bmo#824742: NSPR shouldn't require librt on Android. * bmo#831793: data race on lib->refCount in PR_UnloadLibrary. mozilla-nss was updated to version 3.14.3: * disable tests with expired certificates * add SEC_PKCS7VerifyDetachedSignatureAtTime using patch from mozilla tree to fulfill Firefox 21 requirements * No new major functionality is introduced in this release. This release is a patch release to address CVE-2013-1620 (bmo#822365) * "certutil -a" was not correctly producing ASCII output as requested. (bmo#840714) * NSS 3.14.2 broke compilation with older versions of sqlite that lacked the SQLITE_FCNTL_TEMPFILENAME file control. NSS 3.14.3 now properly compiles when used with older versions of sqlite (bmo#837799) - remove system-sqlite.patch * add arm aarch64 support * added system-sqlite.patch (bmo#837799) * do not depend on latest sqlite just for a #define * enable system sqlite usage again * update to 3.14.2 * required for Firefox >= 20 * removed obsolete nssckbi update patch * MFSA 2013-40/CVE-2013-0791 (bmo#629816) Out-of-bounds array read in CERT_DecodeCertPackage * disable system sqlite usage since we depend on 3.7.15 which is not provided in any openSUSE distribution * add nss-sqlitename.patch to avoid any name clash Changes in MozillaFirefox: - update to Firefox 20.0 (bnc#813026) * requires NSPR 4.9.5 and NSS 3.14.3 * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789 Miscellaneous memory safety hazards * MFSA 2013-31/CVE-2013-0800 (bmo#825721) Out-of-bounds write in Cairo library * MFSA 2013-35/CVE-2013-0796 (bmo#827106) WebGL crash with Mesa graphics driver on Linux * MFSA 2013-36/CVE-2013-0795 (bmo#825697) Bypass of SOW protections allows cloning of protected nodes * MFSA 2013-37/CVE-2013-0794 (bmo#626775) Bypass of tab-modal dialog origin disclosure * MFSA 2013-38/CVE-2013-0793 (bmo#803870) Cross-site scripting (XSS) using timed history navigations * MFSA 2013-39/CVE-2013-0792 (bmo#722831) Memory corruption while rendering grayscale PNG images - use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch) - build fixes for armv7hl: * disable debug build as armv7hl does not have enough memory * disable webrtc on armv7hl as it is non-compiling Changes in MozillaThunderbird: - update to Thunderbird 17.0.5 (bnc#813026) * requires NSPR 4.9.5 and NSS 3.14.3 * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789 Miscellaneous memory safety hazards * MFSA 2013-31/CVE-2013-0800 (bmo#825721) Out-of-bounds write in Cairo library * MFSA 2013-35/CVE-2013-0796 (bmo#827106) WebGL crash with Mesa graphics driver on Linux * MFSA 2013-36/CVE-2013-0795 (bmo#825697) Bypass of SOW protections allows cloning of protected nodes * MFSA 2013-38/CVE-2013-0793 (bmo#803870) Cross-site scripting (XSS) using timed history navigations Changes in seamonkey: - update to SeaMonkey 2.17 (bnc#813026) * requires NSPR 4.9.5 and NSS 3.14.3 * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789 Miscellaneous memory safety hazards * MFSA 2013-31/CVE-2013-0800 (bmo#825721) Out-of-bounds write in Cairo library * MFSA 2013-35/CVE-2013-0796 (bmo#827106) WebGL crash with Mesa graphics driver on Linux * MFSA 2013-36/CVE-2013-0795 (bmo#825697) Bypass of SOW protections allows cloning of protected nodes * MFSA 2013-37/CVE-2013-0794 (bmo#626775) Bypass of tab-modal dialog origin disclosure * MFSA 2013-38/CVE-2013-0793 (bmo#803870) Cross-site scripting (XSS) using timed history navigations * MFSA 2013-39/CVE-2013-0792 (bmo#722831) Memory corruption while rendering grayscale PNG images - use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch) Changes in xulrunner: - update to 17.0.5esr (bnc#813026) * requires NSPR 4.9.5 and NSS 3.14.3 * MFSA 2013-30/CVE-2013-0788 Miscellaneous memory safety hazards * MFSA 2013-31/CVE-2013-0800 (bmo#825721) Out-of-bounds write in Cairo library * MFSA 2013-35/CVE-2013-0796 (bmo#827106) WebGL crash with Mesa graphics driver on Linux * MFSA 2013-36/CVE-2013-0795 (bmo#825697) Bypass of SOW protections allows cloning of protected nodes * MFSA 2013-37/CVE-2013-0794 (bmo#626775) Bypass of tab-modal dialog origin disclosure * MFSA 2013-38/CVE-2013-0793 (bmo#803870) Cross-site scripting (XSS) using timed history navigations Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-309 - openSUSE 12.2: zypper in -t patch openSUSE-2013-309 - openSUSE 12.1: zypper in -t patch openSUSE-2013-309 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): MozillaFirefox-20.0-1.8.3 MozillaFirefox-branding-upstream-20.0-1.8.3 MozillaFirefox-buildsymbols-20.0-1.8.3 MozillaFirefox-debuginfo-20.0-1.8.3 MozillaFirefox-debugsource-20.0-1.8.3 MozillaFirefox-devel-20.0-1.8.3 MozillaFirefox-translations-common-20.0-1.8.3 MozillaFirefox-translations-other-20.0-1.8.3 MozillaThunderbird-17.0.5-61.9.4 MozillaThunderbird-buildsymbols-17.0.5-61.9.4 MozillaThunderbird-debuginfo-17.0.5-61.9.4 MozillaThunderbird-debugsource-17.0.5-61.9.4 MozillaThunderbird-devel-17.0.5-61.9.4 MozillaThunderbird-devel-debuginfo-17.0.5-61.9.4 MozillaThunderbird-translations-common-17.0.5-61.9.4 MozillaThunderbird-translations-other-17.0.5-61.9.4 enigmail-1.5.1+17.0.5-61.9.4 enigmail-debuginfo-1.5.1+17.0.5-61.9.4 libfreebl3-3.14.3-1.8.1 libfreebl3-debuginfo-3.14.3-1.8.1 libsoftokn3-3.14.3-1.8.1 libsoftokn3-debuginfo-3.14.3-1.8.1 mozilla-js-17.0.5-1.8.3 mozilla-js-debuginfo-17.0.5-1.8.3 mozilla-nspr-4.9.6-1.4.1 mozilla-nspr-debuginfo-4.9.6-1.4.1 mozilla-nspr-debugsource-4.9.6-1.4.1 mozilla-nspr-devel-4.9.6-1.4.1 mozilla-nss-3.14.3-1.8.1 mozilla-nss-certs-3.14.3-1.8.1 mozilla-nss-certs-debuginfo-3.14.3-1.8.1 mozilla-nss-debuginfo-3.14.3-1.8.1 mozilla-nss-debugsource-3.14.3-1.8.1 mozilla-nss-devel-3.14.3-1.8.1 mozilla-nss-sysinit-3.14.3-1.8.1 mozilla-nss-sysinit-debuginfo-3.14.3-1.8.1 mozilla-nss-tools-3.14.3-1.8.1 mozilla-nss-tools-debuginfo-3.14.3-1.8.1 xulrunner-17.0.5-1.8.3 xulrunner-buildsymbols-17.0.5-1.8.3 xulrunner-debuginfo-17.0.5-1.8.3 xulrunner-debugsource-17.0.5-1.8.3 xulrunner-devel-17.0.5-1.8.3 xulrunner-devel-debuginfo-17.0.5-1.8.3 - openSUSE 12.3 (x86_64): libfreebl3-32bit-3.14.3-1.8.1 libfreebl3-debuginfo-32bit-3.14.3-1.8.1 libsoftokn3-32bit-3.14.3-1.8.1 libsoftokn3-debuginfo-32bit-3.14.3-1.8.1 mozilla-js-32bit-17.0.5-1.8.3 mozilla-js-debuginfo-32bit-17.0.5-1.8.3 mozilla-nspr-32bit-4.9.6-1.4.1 mozilla-nspr-debuginfo-32bit-4.9.6-1.4.1 mozilla-nss-32bit-3.14.3-1.8.1 mozilla-nss-certs-32bit-3.14.3-1.8.1 mozilla-nss-certs-debuginfo-32bit-3.14.3-1.8.1 mozilla-nss-debuginfo-32bit-3.14.3-1.8.1 mozilla-nss-sysinit-32bit-3.14.3-1.8.1 mozilla-nss-sysinit-debuginfo-32bit-3.14.3-1.8.1 xulrunner-32bit-17.0.5-1.8.3 xulrunner-debuginfo-32bit-17.0.5-1.8.3 - openSUSE 12.2 (i586 x86_64): MozillaFirefox-20.0-2.41.3 MozillaFirefox-branding-upstream-20.0-2.41.3 MozillaFirefox-buildsymbols-20.0-2.41.3 MozillaFirefox-debuginfo-20.0-2.41.3 MozillaFirefox-debugsource-20.0-2.41.3 MozillaFirefox-devel-20.0-2.41.3 MozillaFirefox-translations-common-20.0-2.41.3 MozillaFirefox-translations-other-20.0-2.41.3 MozillaThunderbird-17.0.5-49.39.3 MozillaThunderbird-buildsymbols-17.0.5-49.39.3 MozillaThunderbird-debuginfo-17.0.5-49.39.3 MozillaThunderbird-debugsource-17.0.5-49.39.3 MozillaThunderbird-devel-17.0.5-49.39.3 MozillaThunderbird-devel-debuginfo-17.0.5-49.39.3 MozillaThunderbird-translations-common-17.0.5-49.39.3 MozillaThunderbird-translations-other-17.0.5-49.39.3 enigmail-1.5.1+17.0.5-49.39.3 enigmail-debuginfo-1.5.1+17.0.5-49.39.3 libfreebl3-3.14.3-2.19.2 libfreebl3-debuginfo-3.14.3-2.19.2 libsoftokn3-3.14.3-2.19.2 libsoftokn3-debuginfo-3.14.3-2.19.2 mozilla-js-17.0.5-2.38.2 mozilla-js-debuginfo-17.0.5-2.38.2 mozilla-nspr-4.9.6-1.12.1 mozilla-nspr-debuginfo-4.9.6-1.12.1 mozilla-nspr-debugsource-4.9.6-1.12.1 mozilla-nspr-devel-4.9.6-1.12.1 mozilla-nss-3.14.3-2.19.2 mozilla-nss-certs-3.14.3-2.19.2 mozilla-nss-certs-debuginfo-3.14.3-2.19.2 mozilla-nss-debuginfo-3.14.3-2.19.2 mozilla-nss-debugsource-3.14.3-2.19.2 mozilla-nss-devel-3.14.3-2.19.2 mozilla-nss-sysinit-3.14.3-2.19.2 mozilla-nss-sysinit-debuginfo-3.14.3-2.19.2 mozilla-nss-tools-3.14.3-2.19.2 mozilla-nss-tools-debuginfo-3.14.3-2.19.2 xulrunner-17.0.5-2.38.2 xulrunner-buildsymbols-17.0.5-2.38.2 xulrunner-debuginfo-17.0.5-2.38.2 xulrunner-debugsource-17.0.5-2.38.2 xulrunner-devel-17.0.5-2.38.2 xulrunner-devel-debuginfo-17.0.5-2.38.2 - openSUSE 12.2 (x86_64): libfreebl3-32bit-3.14.3-2.19.2 libfreebl3-debuginfo-32bit-3.14.3-2.19.2 libsoftokn3-32bit-3.14.3-2.19.2 libsoftokn3-debuginfo-32bit-3.14.3-2.19.2 mozilla-js-32bit-17.0.5-2.38.2 mozilla-js-debuginfo-32bit-17.0.5-2.38.2 mozilla-nspr-32bit-4.9.6-1.12.1 mozilla-nspr-debuginfo-32bit-4.9.6-1.12.1 mozilla-nss-32bit-3.14.3-2.19.2 mozilla-nss-certs-32bit-3.14.3-2.19.2 mozilla-nss-certs-debuginfo-32bit-3.14.3-2.19.2 mozilla-nss-debuginfo-32bit-3.14.3-2.19.2 mozilla-nss-sysinit-32bit-3.14.3-2.19.2 mozilla-nss-sysinit-debuginfo-32bit-3.14.3-2.19.2 xulrunner-32bit-17.0.5-2.38.2 xulrunner-debuginfo-32bit-17.0.5-2.38.2 - openSUSE 12.1 (i586 x86_64): MozillaFirefox-20.0-2.70.3 MozillaFirefox-branding-upstream-20.0-2.70.3 MozillaFirefox-buildsymbols-20.0-2.70.3 MozillaFirefox-debuginfo-20.0-2.70.3 MozillaFirefox-debugsource-20.0-2.70.3 MozillaFirefox-devel-20.0-2.70.3 MozillaFirefox-translations-common-20.0-2.70.3 MozillaFirefox-translations-other-20.0-2.70.3 MozillaThunderbird-17.0.5-33.59.3 MozillaThunderbird-buildsymbols-17.0.5-33.59.3 MozillaThunderbird-debuginfo-17.0.5-33.59.3 MozillaThunderbird-debugsource-17.0.5-33.59.3 MozillaThunderbird-devel-17.0.5-33.59.3 MozillaThunderbird-devel-debuginfo-17.0.5-33.59.3 MozillaThunderbird-translations-common-17.0.5-33.59.3 MozillaThunderbird-translations-other-17.0.5-33.59.3 enigmail-1.5.1+17.0.5-33.59.3 enigmail-debuginfo-1.5.1+17.0.5-33.59.3 libfreebl3-3.14.3-9.29.2 libfreebl3-debuginfo-3.14.3-9.29.2 libsoftokn3-3.14.3-9.29.2 libsoftokn3-debuginfo-3.14.3-9.29.2 mozilla-js-17.0.5-2.65.2 mozilla-js-debuginfo-17.0.5-2.65.2 mozilla-nspr-4.9.6-3.15.1 mozilla-nspr-debuginfo-4.9.6-3.15.1 mozilla-nspr-debugsource-4.9.6-3.15.1 mozilla-nspr-devel-4.9.6-3.15.1 mozilla-nss-3.14.3-9.29.2 mozilla-nss-certs-3.14.3-9.29.2 mozilla-nss-certs-debuginfo-3.14.3-9.29.2 mozilla-nss-debuginfo-3.14.3-9.29.2 mozilla-nss-debugsource-3.14.3-9.29.2 mozilla-nss-devel-3.14.3-9.29.2 mozilla-nss-sysinit-3.14.3-9.29.2 mozilla-nss-sysinit-debuginfo-3.14.3-9.29.2 mozilla-nss-tools-3.14.3-9.29.2 mozilla-nss-tools-debuginfo-3.14.3-9.29.2 seamonkey-2.17-2.61.2 seamonkey-debuginfo-2.17-2.61.2 seamonkey-debugsource-2.17-2.61.2 seamonkey-dom-inspector-2.17-2.61.2 seamonkey-irc-2.17-2.61.2 seamonkey-translations-common-2.17-2.61.2 seamonkey-translations-other-2.17-2.61.2 seamonkey-venkman-2.17-2.61.2 xulrunner-17.0.5-2.65.2 xulrunner-buildsymbols-17.0.5-2.65.2 xulrunner-debuginfo-17.0.5-2.65.2 xulrunner-debugsource-17.0.5-2.65.2 xulrunner-devel-17.0.5-2.65.2 xulrunner-devel-debuginfo-17.0.5-2.65.2 - openSUSE 12.1 (x86_64): libfreebl3-32bit-3.14.3-9.29.2 libfreebl3-debuginfo-32bit-3.14.3-9.29.2 libsoftokn3-32bit-3.14.3-9.29.2 libsoftokn3-debuginfo-32bit-3.14.3-9.29.2 mozilla-js-32bit-17.0.5-2.65.2 mozilla-js-debuginfo-32bit-17.0.5-2.65.2 mozilla-nspr-32bit-4.9.6-3.15.1 mozilla-nspr-debuginfo-32bit-4.9.6-3.15.1 mozilla-nss-32bit-3.14.3-9.29.2 mozilla-nss-certs-32bit-3.14.3-9.29.2 mozilla-nss-certs-debuginfo-32bit-3.14.3-9.29.2 mozilla-nss-debuginfo-32bit-3.14.3-9.29.2 mozilla-nss-sysinit-32bit-3.14.3-9.29.2 mozilla-nss-sysinit-debuginfo-32bit-3.14.3-9.29.2 xulrunner-32bit-17.0.5-2.65.2 xulrunner-debuginfo-32bit-17.0.5-2.65.2 - openSUSE 12.1 (ia64): libfreebl3-debuginfo-x86-3.14.3-9.29.2 libfreebl3-x86-3.14.3-9.29.2 libsoftokn3-debuginfo-x86-3.14.3-9.29.2 libsoftokn3-x86-3.14.3-9.29.2 mozilla-js-debuginfo-x86-17.0.5-2.65.2 mozilla-js-x86-17.0.5-2.65.2 mozilla-nspr-debuginfo-x86-4.9.6-3.15.1 mozilla-nspr-x86-4.9.6-3.15.1 mozilla-nss-certs-debuginfo-x86-3.14.3-9.29.2 mozilla-nss-certs-x86-3.14.3-9.29.2 mozilla-nss-debuginfo-x86-3.14.3-9.29.2 mozilla-nss-sysinit-debuginfo-x86-3.14.3-9.29.2 mozilla-nss-sysinit-x86-3.14.3-9.29.2 mozilla-nss-x86-3.14.3-9.29.2 xulrunner-debuginfo-x86-17.0.5-2.65.2 xulrunner-x86-17.0.5-2.65.2 References: http://support.novell.com/security/cve/CVE-2013-0788.html http://support.novell.com/security/cve/CVE-2013-0789.html http://support.novell.com/security/cve/CVE-2013-0791.html http://support.novell.com/security/cve/CVE-2013-0792.html http://support.novell.com/security/cve/CVE-2013-0793.html http://support.novell.com/security/cve/CVE-2013-0794.html http://support.novell.com/security/cve/CVE-2013-0795.html http://support.novell.com/security/cve/CVE-2013-0796.html http://support.novell.com/security/cve/CVE-2013-0800.html http://support.novell.com/security/cve/CVE-2013-1620.html https://bugzilla.novell.com/813026

1 0

openSUSE-SU-2013:0629-1: moderate: apache2: security and bugfixes
by opensuse-security＠opensuse.org 05 Apr '13

05 Apr '13

openSUSE Security Update: apache2: security and bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0629-1 Rating: moderate References: #777260 #798733 #806458 #807152 Cross-References: CVE-2012-2687 CVE-2012-3499 CVE-2012-4558 Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: apache2 was updated to fix: - fix for cross site scripting vulnerability in mod_balancer. This is CVE-2012-4558 [bnc#807152] - fixes for low profile cross site scripting vulnerabilities, known as CVE-2012-3499 [bnc#806458] - Escape filename for the case that uploads are allowed with untrusted user's control over filenames and mod_negotiation enabled on the same directory. CVE-2012-2687 [bnc#777260] And also these bugs: - httpd-2.2.x-bnc798733-SNI_ignorecase.diff: ignore case when checking against SNI server names. [bnc#798733] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-308 - openSUSE 12.2: zypper in -t patch openSUSE-2013-308 - openSUSE 12.1: zypper in -t patch openSUSE-2013-308 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): apache2-2.2.22-10.4.1 apache2-debuginfo-2.2.22-10.4.1 apache2-debugsource-2.2.22-10.4.1 apache2-devel-2.2.22-10.4.1 apache2-event-2.2.22-10.4.1 apache2-event-debuginfo-2.2.22-10.4.1 apache2-example-pages-2.2.22-10.4.1 apache2-itk-2.2.22-10.4.1 apache2-itk-debuginfo-2.2.22-10.4.1 apache2-prefork-2.2.22-10.4.1 apache2-prefork-debuginfo-2.2.22-10.4.1 apache2-utils-2.2.22-10.4.1 apache2-utils-debuginfo-2.2.22-10.4.1 apache2-worker-2.2.22-10.4.1 apache2-worker-debuginfo-2.2.22-10.4.1 - openSUSE 12.3 (noarch): apache2-doc-2.2.22-10.4.1 - openSUSE 12.2 (i586 x86_64): apache2-2.2.22-4.14.1 apache2-debuginfo-2.2.22-4.14.1 apache2-debugsource-2.2.22-4.14.1 apache2-devel-2.2.22-4.14.1 apache2-event-2.2.22-4.14.1 apache2-event-debuginfo-2.2.22-4.14.1 apache2-example-pages-2.2.22-4.14.1 apache2-itk-2.2.22-4.14.1 apache2-itk-debuginfo-2.2.22-4.14.1 apache2-prefork-2.2.22-4.14.1 apache2-prefork-debuginfo-2.2.22-4.14.1 apache2-utils-2.2.22-4.14.1 apache2-utils-debuginfo-2.2.22-4.14.1 apache2-worker-2.2.22-4.14.1 apache2-worker-debuginfo-2.2.22-4.14.1 - openSUSE 12.2 (noarch): apache2-doc-2.2.22-4.14.1 - openSUSE 12.1 (i586 x86_64): apache2-2.2.21-3.13.1 apache2-debuginfo-2.2.21-3.13.1 apache2-debugsource-2.2.21-3.13.1 apache2-devel-2.2.21-3.13.1 apache2-event-2.2.21-3.13.1 apache2-event-debuginfo-2.2.21-3.13.1 apache2-example-pages-2.2.21-3.13.1 apache2-itk-2.2.21-3.13.1 apache2-itk-debuginfo-2.2.21-3.13.1 apache2-prefork-2.2.21-3.13.1 apache2-prefork-debuginfo-2.2.21-3.13.1 apache2-utils-2.2.21-3.13.1 apache2-utils-debuginfo-2.2.21-3.13.1 apache2-worker-2.2.21-3.13.1 apache2-worker-debuginfo-2.2.21-3.13.1 - openSUSE 12.1 (noarch): apache2-doc-2.2.21-3.13.1 References: http://support.novell.com/security/cve/CVE-2012-2687.html http://support.novell.com/security/cve/CVE-2012-3499.html http://support.novell.com/security/cve/CVE-2012-4558.html https://bugzilla.novell.com/777260 https://bugzilla.novell.com/798733 https://bugzilla.novell.com/806458 https://bugzilla.novell.com/807152

1 0

openSUSE-SU-2013:0628-1: important: postgresql92: Various security fixes. Update to 9.2.4.
by opensuse-security＠opensuse.org 05 Apr '13

05 Apr '13

openSUSE Security Update: postgresql92: Various security fixes. Update to 9.2.4. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0628-1 Rating: important References: #812525 Cross-References: CVE-2013-1899 CVE-2013-1900 CVE-2013-1901 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: postgresql was updated to version 9.2.4 (bnc#812525): * CVE-2013-1899: Fix insecure parsing of server command-line switches. A connection request containing a database name that begins with "-" could be crafted to damage or destroy files within the server's data directory, even if the request is eventually rejected. * CVE-2013-1900: Reset OpenSSL randomness state in each postmaster child process. This avoids a scenario wherein random numbers generated by "contrib/pgcrypto" functions might be relatively easy for another database user to guess. The risk is only significant when the postmaster is configured with ssl = on but most connections don't use SSL encryption. * CVE-2013-1901: Make REPLICATION privilege checks test current user not authenticated user. An unprivileged database user could exploit this mistake to call pg_start_backup() or pg_stop_backup(), thus possibly interfering with creation of routine backups. * See the release notes for the rest of the changes: http://www.postgresql.org/docs/9.2/static/release-9-2-4.html /usr/share/doc/packages/postgresql92/HISTORY Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-306 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): postgresql92-9.2.4-1.4.1 postgresql92-contrib-9.2.4-1.4.1 postgresql92-contrib-debuginfo-9.2.4-1.4.1 postgresql92-debuginfo-9.2.4-1.4.1 postgresql92-debugsource-9.2.4-1.4.1 postgresql92-plperl-9.2.4-1.4.1 postgresql92-plperl-debuginfo-9.2.4-1.4.1 postgresql92-plpython-9.2.4-1.4.1 postgresql92-plpython-debuginfo-9.2.4-1.4.1 postgresql92-pltcl-9.2.4-1.4.1 postgresql92-pltcl-debuginfo-9.2.4-1.4.1 postgresql92-server-9.2.4-1.4.1 postgresql92-server-debuginfo-9.2.4-1.4.1 - openSUSE 12.3 (noarch): postgresql92-docs-9.2.4-1.4.1 References: http://support.novell.com/security/cve/CVE-2013-1899.html http://support.novell.com/security/cve/CVE-2013-1900.html http://support.novell.com/security/cve/CVE-2013-1901.html https://bugzilla.novell.com/812525

1 0

openSUSE-SU-2013:0627-1: important: postgresql91 to version 9.1.9.
by opensuse-security＠opensuse.org 05 Apr '13

05 Apr '13

openSUSE Security Update: postgresql91 to version 9.1.9. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0627-1 Rating: important References: #812525 Cross-References: CVE-2013-1899 CVE-2013-1900 CVE-2013-1901 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: postgresql was updated to version 9.1.9 (bnc#812525): * CVE-2013-1899: Fix insecure parsing of server command-line switches. A connection request containing a database name that begins with "-" could be crafted to damage or destroy files within the server's data directory, even if the request is eventually rejected. * CVE-2013-1900: Reset OpenSSL randomness state in each postmaster child process. This avoids a scenario wherein random numbers generated by "contrib/pgcrypto" functions might be relatively easy for another database user to guess. The risk is only significant when the postmaster is configured with ssl = on but most connections don't use SSL encryption. * CVE-2013-1901: Make REPLICATION privilege checks test current user not authenticated user. An unprivileged database user could exploit this mistake to call pg_start_backup() or pg_stop_backup(), thus possibly interfering with creation of routine backups. * See the release notes for the rest of the changes: http://www.postgresql.org/docs/9.1/static/release-9-1-9.html /usr/share/doc/packages/postgresql91/HISTORY Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-307 - openSUSE 12.1: zypper in -t patch openSUSE-2013-307 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libecpg6-9.1.9-20.1 libecpg6-debuginfo-9.1.9-20.1 libpq5-9.1.9-20.1 libpq5-debuginfo-9.1.9-20.1 postgresql91-9.1.9-20.1 postgresql91-contrib-9.1.9-20.1 postgresql91-contrib-debuginfo-9.1.9-20.1 postgresql91-debuginfo-9.1.9-20.1 postgresql91-debugsource-9.1.9-20.1 postgresql91-devel-9.1.9-20.1 postgresql91-devel-debuginfo-9.1.9-20.1 postgresql91-libs-debugsource-9.1.9-20.1 postgresql91-plperl-9.1.9-20.1 postgresql91-plperl-debuginfo-9.1.9-20.1 postgresql91-plpython-9.1.9-20.1 postgresql91-plpython-debuginfo-9.1.9-20.1 postgresql91-pltcl-9.1.9-20.1 postgresql91-pltcl-debuginfo-9.1.9-20.1 postgresql91-server-9.1.9-20.1 postgresql91-server-debuginfo-9.1.9-20.1 - openSUSE 12.2 (x86_64): libecpg6-32bit-9.1.9-20.1 libecpg6-debuginfo-32bit-9.1.9-20.1 libpq5-32bit-9.1.9-20.1 libpq5-debuginfo-32bit-9.1.9-20.1 postgresql91-devel-32bit-9.1.9-20.1 postgresql91-devel-debuginfo-32bit-9.1.9-20.1 - openSUSE 12.2 (noarch): postgresql91-docs-9.1.9-20.1 - openSUSE 12.1 (i586 x86_64): libecpg6-9.1.9-25.1 libecpg6-debuginfo-9.1.9-25.1 libpq5-9.1.9-25.1 libpq5-debuginfo-9.1.9-25.1 postgresql91-9.1.9-25.1 postgresql91-contrib-9.1.9-25.1 postgresql91-contrib-debuginfo-9.1.9-25.1 postgresql91-debuginfo-9.1.9-25.1 postgresql91-debugsource-9.1.9-25.1 postgresql91-devel-9.1.9-25.1 postgresql91-devel-debuginfo-9.1.9-25.1 postgresql91-libs-debugsource-9.1.9-25.1 postgresql91-plperl-9.1.9-25.1 postgresql91-plperl-debuginfo-9.1.9-25.1 postgresql91-plpython-9.1.9-25.1 postgresql91-plpython-debuginfo-9.1.9-25.1 postgresql91-pltcl-9.1.9-25.1 postgresql91-pltcl-debuginfo-9.1.9-25.1 postgresql91-server-9.1.9-25.1 postgresql91-server-debuginfo-9.1.9-25.1 - openSUSE 12.1 (x86_64): libecpg6-32bit-9.1.9-25.1 libecpg6-debuginfo-32bit-9.1.9-25.1 libpq5-32bit-9.1.9-25.1 libpq5-debuginfo-32bit-9.1.9-25.1 postgresql91-devel-32bit-9.1.9-25.1 postgresql91-devel-debuginfo-32bit-9.1.9-25.1 - openSUSE 12.1 (noarch): postgresql91-docs-9.1.9-25.1 - openSUSE 12.1 (ia64): libecpg6-debuginfo-x86-9.1.9-25.1 libecpg6-x86-9.1.9-25.1 libpq5-debuginfo-x86-9.1.9-25.1 libpq5-x86-9.1.9-25.1 postgresql91-devel-debuginfo-x86-9.1.9-25.1 References: http://support.novell.com/security/cve/CVE-2013-1899.html http://support.novell.com/security/cve/CVE-2013-1900.html http://support.novell.com/security/cve/CVE-2013-1901.html https://bugzilla.novell.com/812525

1 0

openSUSE-SU-2013:0625-1: moderate: dhcp: fixed remote denial of service attack
by opensuse-security＠opensuse.org 04 Apr '13

04 Apr '13

openSUSE Security Update: dhcp: fixed remote denial of service attack ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0625-1 Rating: moderate References: #783002 #784640 #788787 #791280 #791289 #794578 #811934 Cross-References: CVE-2013-2266 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: The ISC dhcp server was updated to fix a denial of service attack via regular expressions: - Removed regex.h check from configure in bind sources (bnc#811934,CVE-2013-2266). Make the bind export library build output visible. Also fixed: - Added dhcp6-server service template for SuSEfirewall2 (bnc#783002) - Applied a patch to ignore SIGPIPE instead to die in socket code before the errno==EPIPE checks are reached (bnc#794578, upstream report [ISC-Bugs #32222]) - Applied several obvious memleak and segfault fixes from 4.2.5rc1 and a correction of code to calculate timing values in dhcpv6 client to compare rebind value to infinity instead of renew(bnc#794578). - Fixed discovery of interfaces, which have only addresses with a label assigned (linux 2.0 "alias interfaces" compatibility) by switching to use the getifaddrs() as on BSD (bnc#791289, reported upstream as [ISC-Bugs #31992]). - Fixed parse buffer handling code to not avoid truncation of config > ~8k from bigger ldap objects. Fixed to free the ldap config buffer passed to the config parser and append new config, while the parser is in saved state (bnc#788787). - Fixed subclass name-ref and data quoting/escaping (bnc#788787). - Fixed memory leaks on ldap_read_config errors (bnc#788787). - Fixed dhclient-script to discard MTU lower-equal 576 rather than lower-than (bnc#791280). - dhcp-ldap: fixed a memleak while subnet range processing, fixed to reset bufix variable in ldap_read_function to 0 and to set buflen to the complete length (do not discard last character, usually \n). This caused a parsing error at further run of the function, e.g. while processing the second dhcpService container that the dhcpServer objectmay refer to (bnc#784640). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-56 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): dhcp-4.2.4.P2-0.34.1 dhcp-client-4.2.4.P2-0.34.1 dhcp-client-debuginfo-4.2.4.P2-0.34.1 dhcp-debuginfo-4.2.4.P2-0.34.1 dhcp-debugsource-4.2.4.P2-0.34.1 dhcp-devel-4.2.4.P2-0.34.1 dhcp-doc-4.2.4.P2-0.34.1 dhcp-relay-4.2.4.P2-0.34.1 dhcp-relay-debuginfo-4.2.4.P2-0.34.1 dhcp-server-4.2.4.P2-0.34.1 dhcp-server-debuginfo-4.2.4.P2-0.34.1 References: http://support.novell.com/security/cve/CVE-2013-2266.html https://bugzilla.novell.com/783002 https://bugzilla.novell.com/784640 https://bugzilla.novell.com/788787 https://bugzilla.novell.com/791280 https://bugzilla.novell.com/791289 https://bugzilla.novell.com/794578 https://bugzilla.novell.com/811934

1 0

openSUSE-SU-2013:0624-1: important: NRPE metacharacter filtering omission
by opensuse-security＠opensuse.org 04 Apr '13

04 Apr '13

openSUSE Security Update: NRPE metacharacter filtering omission ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0624-1 Rating: important References: #807241 Cross-References: CVE-2013-1362 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: NRPE (the Nagios Remote Plug-In Executor) allows the passing of $() to plugins/scripts which, if run under bash, will execute that shell command under a subprocess and pass the output as a parameter to the called script. Using this, it is possible to get called scripts, such as check_http, to execute arbitrary commands under the uid that NRPE/nagios is running as (typically, 'nagios'). With this update NRPE will deny remote requests containing a bash command substitution. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-55 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): nagios-nrpe-2.12-25.2 nagios-nrpe-debuginfo-2.12-25.2 nagios-nrpe-debugsource-2.12-25.2 nagios-nrpe-doc-2.12-25.2 nagios-plugins-nrpe-2.12-25.2 nagios-plugins-nrpe-debuginfo-2.12-25.2 References: http://support.novell.com/security/cve/CVE-2013-1362.html https://bugzilla.novell.com/807241

1 0

openSUSE-SU-2013:0623-1: moderate: jakarta-commons-httpclient3: enhance ssl certificate checks by subjectAltNames
by opensuse-security＠opensuse.org 04 Apr '13

04 Apr '13

openSUSE Security Update: jakarta-commons-httpclient3: enhance ssl certificate checks by subjectAltNames ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0623-1 Rating: moderate References: #803332 Cross-References: CVE-2012-5783 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: jakarta-commons-httpclient3 was updated to enhance the fix of bnc#803332 / CVE-2012-5783: - also add a check for subjectAltNames in certificates Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-305 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): jakarta-commons-httpclient3-3.0.1-313.10.1 jakarta-commons-httpclient3-demo-3.0.1-313.10.1 jakarta-commons-httpclient3-javadoc-3.0.1-313.10.1 jakarta-commons-httpclient3-manual-3.0.1-313.10.1 References: http://support.novell.com/security/cve/CVE-2012-5783.html https://bugzilla.novell.com/803332

1 0

openSUSE-SU-2013:0622-1: moderate: jakarta-commons-httpclient: enhance SSL checks also for subjectAltNames
by opensuse-security＠opensuse.org 04 Apr '13

04 Apr '13

openSUSE Security Update: jakarta-commons-httpclient: enhance SSL checks also for subjectAltNames ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0622-1 Rating: moderate References: #803332 Cross-References: CVE-2012-5783 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: jakarta-commons-httpclient was updated to enhance the fix of bnc#803332 / CVE-2012-5783 * also check for subjectAltNames in the certificate. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-304 - openSUSE 12.2: zypper in -t patch openSUSE-2013-304 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): jakarta-commons-httpclient-3.1-4.5.1 jakarta-commons-httpclient-demo-3.1-4.5.1 jakarta-commons-httpclient-javadoc-3.1-4.5.1 jakarta-commons-httpclient-manual-3.1-4.5.1 - openSUSE 12.2 (noarch): jakarta-commons-httpclient-3.1-2.10.1 jakarta-commons-httpclient-demo-3.1-2.10.1 jakarta-commons-httpclient-javadoc-3.1-2.10.1 jakarta-commons-httpclient-manual-3.1-2.10.1 References: http://support.novell.com/security/cve/CVE-2012-5783.html https://bugzilla.novell.com/803332

1 0

openSUSE-SU-2013:0621-1: important: NRPE metacharacter filtering omission
by opensuse-security＠opensuse.org 04 Apr '13

04 Apr '13

openSUSE Security Update: NRPE metacharacter filtering omission ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0621-1 Rating: important References: #807241 Cross-References: CVE-2013-1362 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: NRPE (the Nagios Remote Plug-In Executor) allows the passing of $() to plugins/scripts which, if run under bash, will execute that shell command under a subprocess and pass the output as a parameter to the called script. Using this, it is possible to get called scripts, such as check_http, to execute arbitrary commands under the uid that NRPE/nagios is running as (typically, 'nagios'). With this update NRPE will deny remote requests containing a bash command substitution. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-301 - openSUSE 12.1: zypper in -t patch openSUSE-2013-301 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): nagios-nrpe-2.12-30.9.1 nagios-nrpe-debuginfo-2.12-30.9.1 nagios-nrpe-debugsource-2.12-30.9.1 nagios-nrpe-doc-2.12-30.9.1 nagios-plugins-nrpe-2.12-30.9.1 nagios-plugins-nrpe-debuginfo-2.12-30.9.1 - openSUSE 12.1 (i586 x86_64): nagios-nrpe-2.12-27.7.1 nagios-nrpe-debuginfo-2.12-27.7.1 nagios-nrpe-debugsource-2.12-27.7.1 nagios-nrpe-doc-2.12-27.7.1 nagios-plugins-nrpe-2.12-27.7.1 nagios-plugins-nrpe-debuginfo-2.12-27.7.1 References: http://support.novell.com/security/cve/CVE-2013-1362.html https://bugzilla.novell.com/807241

1 0

openSUSE-SU-2013:0620-1: moderate: dhcp: fixed denial of service via regular expressions
by opensuse-security＠opensuse.org 04 Apr '13

04 Apr '13

openSUSE Security Update: dhcp: fixed denial of service via regular expressions ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0620-1 Rating: moderate References: #783002 #811934 Cross-References: CVE-2013-2266 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: ISC DHCP was updated to ISC dhcp-4.2.5-P1 release, which contains updated bind-9.8.4-P2 sources with removed regex.h check in configure (bnc#811934, CVE-2013-2266). Also: Changed spec make the bind export library build output visible. Added dhcp6-server service template for SuSEfirewall2 (bnc#783002) Update config.guess/sub for aarch64 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-302 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): dhcp-4.2.5.P1-0.2.4.1 dhcp-client-4.2.5.P1-0.2.4.1 dhcp-client-debuginfo-4.2.5.P1-0.2.4.1 dhcp-debuginfo-4.2.5.P1-0.2.4.1 dhcp-debugsource-4.2.5.P1-0.2.4.1 dhcp-devel-4.2.5.P1-0.2.4.1 dhcp-doc-4.2.5.P1-0.2.4.1 dhcp-relay-4.2.5.P1-0.2.4.1 dhcp-relay-debuginfo-4.2.5.P1-0.2.4.1 dhcp-server-4.2.5.P1-0.2.4.1 dhcp-server-debuginfo-4.2.5.P1-0.2.4.1 References: http://support.novell.com/security/cve/CVE-2013-2266.html https://bugzilla.novell.com/783002 https://bugzilla.novell.com/811934

1 0

openSUSE-SU-2013:0619-1: moderate: dhcp: fixed remote denial of service attack
by opensuse-security＠opensuse.org 04 Apr '13

04 Apr '13

openSUSE Security Update: dhcp: fixed remote denial of service attack ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0619-1 Rating: moderate References: #783002 #811934 Cross-References: CVE-2013-2266 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: The ISC dhcp server was updated to fix a denial of service attack via regular expressions: - Removed regex.h check from configure in bind sources (bnc#811934, CVE-2013-2266). Make the bind export library build output visible. [dhcp-4.2.4-P2-no-bind-regex-check.CVE-2013-2266.diff] Also fixed: - Added dhcp6-server service template for SuSEfirewall2 (bnc#783002) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-303 - openSUSE 12.1: zypper in -t patch openSUSE-2013-303 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): dhcp-4.2.4.P2-0.1.12.1 dhcp-client-4.2.4.P2-0.1.12.1 dhcp-client-debuginfo-4.2.4.P2-0.1.12.1 dhcp-debuginfo-4.2.4.P2-0.1.12.1 dhcp-debugsource-4.2.4.P2-0.1.12.1 dhcp-devel-4.2.4.P2-0.1.12.1 dhcp-doc-4.2.4.P2-0.1.12.1 dhcp-relay-4.2.4.P2-0.1.12.1 dhcp-relay-debuginfo-4.2.4.P2-0.1.12.1 dhcp-server-4.2.4.P2-0.1.12.1 dhcp-server-debuginfo-4.2.4.P2-0.1.12.1 - openSUSE 12.1 (i586 x86_64): dhcp-4.2.4.P2-0.6.21.1 dhcp-client-4.2.4.P2-0.6.21.1 dhcp-client-debuginfo-4.2.4.P2-0.6.21.1 dhcp-debuginfo-4.2.4.P2-0.6.21.1 dhcp-debugsource-4.2.4.P2-0.6.21.1 dhcp-devel-4.2.4.P2-0.6.21.1 dhcp-doc-4.2.4.P2-0.6.21.1 dhcp-relay-4.2.4.P2-0.6.21.1 dhcp-relay-debuginfo-4.2.4.P2-0.6.21.1 dhcp-server-4.2.4.P2-0.6.21.1 dhcp-server-debuginfo-4.2.4.P2-0.6.21.1 References: http://support.novell.com/security/cve/CVE-2013-2266.html https://bugzilla.novell.com/783002 https://bugzilla.novell.com/811934

1 0

openSUSE-SU-2013:0614-1: ruby: update to fix XML security problems
by opensuse-security＠opensuse.org 03 Apr '13

03 Apr '13

openSUSE Security Update: ruby: update to fix XML security problems ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0614-1 Rating: low References: #808137 Cross-References: CVE-2013-1821 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Ruby was updated to fix a XML entity expansion denial of service attack (CVE-2013-1821) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-54 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): ruby-1.8.7.p357-0.32.1 ruby-debuginfo-1.8.7.p357-0.32.1 ruby-debugsource-1.8.7.p357-0.32.1 ruby-devel-1.8.7.p357-0.32.1 ruby-examples-1.8.7.p357-0.32.1 ruby-test-suite-1.8.7.p357-0.32.1 ruby-tk-1.8.7.p357-0.32.1 ruby-tk-debuginfo-1.8.7.p357-0.32.1 - openSUSE 11.4 (noarch): ruby-doc-html-1.8.7.p357-0.32.1 ruby-doc-ri-1.8.7.p357-0.32.1 References: http://support.novell.com/security/cve/CVE-2013-1821.html https://bugzilla.novell.com/808137

1 0

openSUSE-SU-2013:0605-1: moderate: bind: update to 9.8.4-P2
by opensuse-security＠opensuse.org 03 Apr '13

03 Apr '13

openSUSE Security Update: bind: update to 9.8.4-P2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0605-1 Rating: moderate References: #811876 Cross-References: CVE-2012-1667 CVE-2012-3817 CVE-2012-3868 CVE-2012-4244 CVE-2012-5166 CVE-2012-5688 CVE-2013-2266 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: bind was updated to 9.8.4-P2 to fix security problems and bugs. Security Fixes Removed the check for regex.h in configure in order to disable regex syntax checking, as it exposes BIND to a critical flaw in libregex on some platforms. [CVE-2013-2266] [RT #32688] https://kb.isc.org/article/AA-00871 (bnc#811876) Prevents named from aborting with a require assertion failure on servers with DNS64 enabled. These crashes might occur as a result of specific queries that are received. (Note that this fix is a subset of a series of updates that will be included in full in BIND 9.8.5 and 9.9.3 as change #3388, RT #30996). [CVE-2012-5688] [RT #30792] A deliberately constructed combination of records could cause named to hang while populating the additional section of a response. [CVE-2012-5166] [RT #31090] Prevents a named assert (crash) when queried for a record whose RDATA exceeds 65535 bytes [CVE-2012-4244] [RT #30416] Prevents a named assert (crash) when validating caused by using "Bad cache" data before it has been initialized. [CVE-2012-3817] [RT #30025] A condition has been corrected where improper handling of zero-length RDATA could cause undesirable behavior, including termination of the named process. [CVE-2012-1667] [RT #29644] New Features Elliptic Curve Digital Signature Algorithm keys and signatures in DNSSEC are now supported per RFC 6605. [RT #21918] Feature Changes Improves OpenSSL error logging [RT #29932] nslookup now returns a nonzero exit code when it is unable to get an answer. [RT #29492] Bug Fixes Uses binary mode to open raw files on Windows. [RT #30944] Static-stub zones now accept "forward" and "fowarders" options (often needed for subdomains of the zone referenced to override global forwarding options). These options are already available with traditional stub zones and their omission from zones of type "static-stub" was an inadvertent oversight. [RT #30482] Limits the TTL of signed RRsets in cache when their RRSIGs are approaching expiry. This prevents the persistence in cache of invalid RRSIGs in order to assist recovery from a situation where zone re-signing doesn't occur in a timely manner. With this change, named will attempt to obtain new RRSIGs from the authoritative server once the original ones have expired, and even if the TTL of the old records would in other circumstances cause them to be kept in cache for longer. [RT #26429] Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg() which are employed on Itanium systems to speed up lock management by making use of atomic operations. Without the syntax correction it is possible that concurrent access to the same structures could accidentally occur with unpredictable results. [RT #25181] The configure script now supports and detects libxml2-2.8.x correctly [RT #30440] The host command should no longer assert on some architectures and builds while handling the time values used with the -w (wait forever) option. [RT #18723] Invalid zero settings for max-retry-time, min-retry-time, max-refresh-time, min-refresh-time will now be detected during parsing of named.conf and an error emitted instead of triggering an assertion failure on startup. [RT #27730] Removes spurious newlines from log messages in zone.c [RT #30675] When built with readline support (i.e. on a system with readline installed) nsupdate no longer terminates unexpectedly in interactive mode. [RT #29550] All named tasks that perform task-exclusive operations now share the same single task. Prior to this change, there was the possibility of a race condition between rndc operations and other functions such as re-sizing the adb hash table. If the race condition was encountered, named would in most cases terminate unexpectedly with an assert. [RT #29872] Ensures that servers are expired from the ADB cache when the timeout limit is reached so that their learned attributes can be refreshed. Prior to this change, servers that were frequently queried might never have their entries removed and reinitialized. This is of particular importance to DNSSEC-validating recursive servers that might erroneously set "no-edns" for an authoritative server following a period of intermittent connectivity. [RT #29856] Adds additional resilience to a previous security change (3218) by preventing RRSIG data from being added to cache when a pseudo-record matching the covering type and proving non-existence exists at a higher trust level. The earlier change prevented this inconsistent data from being retrieved from cache in response to client queries - with this additional change, the RRSIG records are no longer inserted into cache at all. [RT #26809] dnssec-settime will now issue a warning when the writing of a new private key file would cause a change in the permissions of the existing file. [RT #27724] Fixes the defect introduced by change #3314 that was causing failures when saving stub zones to disk (resulting in excessive CPU usage in some cases). [RT #29952] It is now possible to using multiple control keys again - this functionality was inadvertently broken by change #3924 (RT #28265) which addressed a memory leak. [RT #29694] Setting resolver-query-timeout too low could cause named problems recovering after a loss of connectivity. [RT #29623] Reduces the potential build-up of stale RRsets in cache on a busy recursive nameserver by re-using cached DS and RRSIG rrsets when possible [RT #29446] Corrects a failure to authenticate non-existence of resource records in some circumstances when RPZ has been configured. Also: - adds an optional "recursive-only yes|no" to the response-policy statement - adds an optional "max-policy-ttl" to the response-policy statement to limit the false data that "recursive-only no" can introduce into resolvers' caches - introduces a predefined encoding of PASSTHRU policy by adding "rpz-passthru" to be used as the target of CNAME policy records (the old encoding is still accepted.) - adds a RPZ performance test to bin/tests/system/rpz when queryperf is available. [RT #26172] Upper-case/lower-case handling of RRSIG signer-names is now handled consistently: RRSIG records are generated with the signer-name in lower case. They are accepted with any case, but if they fail to validate, we try again in lower case. [RT #27451] - Update the IPv4 address of the D root name server. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-296 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): bind-9.8.4P2-4.32.1 bind-chrootenv-9.8.4P2-4.32.1 bind-debuginfo-9.8.4P2-4.32.1 bind-debugsource-9.8.4P2-4.32.1 bind-devel-9.8.4P2-4.32.1 bind-libs-9.8.4P2-4.32.1 bind-libs-debuginfo-9.8.4P2-4.32.1 bind-lwresd-9.8.4P2-4.32.1 bind-lwresd-debuginfo-9.8.4P2-4.32.1 bind-utils-9.8.4P2-4.32.1 bind-utils-debuginfo-9.8.4P2-4.32.1 - openSUSE 12.1 (x86_64): bind-libs-32bit-9.8.4P2-4.32.1 bind-libs-debuginfo-32bit-9.8.4P2-4.32.1 - openSUSE 12.1 (noarch): bind-doc-9.8.4P2-4.32.1 - openSUSE 12.1 (ia64): bind-libs-debuginfo-x86-9.8.4P2-4.32.1 bind-libs-x86-9.8.4P2-4.32.1 References: http://support.novell.com/security/cve/CVE-2012-1667.html http://support.novell.com/security/cve/CVE-2012-3817.html http://support.novell.com/security/cve/CVE-2012-3868.html http://support.novell.com/security/cve/CVE-2012-4244.html http://support.novell.com/security/cve/CVE-2012-5166.html http://support.novell.com/security/cve/CVE-2012-5688.html http://support.novell.com/security/cve/CVE-2013-2266.html https://bugzilla.novell.com/811876

1 0

openSUSE-SU-2013:0603-1: moderate: ruby: update to fix XML and JSON security problems
by opensuse-security＠opensuse.org 03 Apr '13

03 Apr '13

openSUSE Security Update: ruby: update to fix XML and JSON security problems ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0603-1 Rating: moderate References: #803342 #808137 Cross-References: CVE-2013-0269 CVE-2013-1821 Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Ruby 1.8 was updated to fix a XML entity expansion denial of service attack (CVE-2013-1821) Ruby 1.9 was updated to 1.9.3 p392, fixing the same security issues and also: - update json intree to 1.5.5: Denial of Service and Unsafe Object Creation Vulnerability in JSON CVE-2013-0269 - limit entity expansion text limit to 10kB CVE-2013-1821 - get rid of a SEGV when calling rb_iter_break() from some extention libraries. - some warning suppressed and smaller fixes Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-298 - openSUSE 12.2: zypper in -t patch openSUSE-2013-298 - openSUSE 12.1: zypper in -t patch openSUSE-2013-298 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): ruby-1.9.3-15.2.1 ruby-devel-1.9.3-15.2.1 ruby19-1.9.3.p392-1.5.2 ruby19-debuginfo-1.9.3.p392-1.5.2 ruby19-debugsource-1.9.3.p392-1.5.2 ruby19-devel-1.9.3.p392-1.5.2 ruby19-devel-extra-1.9.3.p392-1.5.2 ruby19-tk-1.9.3.p392-1.5.2 ruby19-tk-debuginfo-1.9.3.p392-1.5.2 - openSUSE 12.3 (noarch): ruby19-doc-ri-1.9.3.p392-1.5.2 - openSUSE 12.2 (i586 x86_64): ruby-1.9.3-2.4.1 ruby-common-1.9.3-2.4.1 ruby-devel-1.9.3-2.4.1 ruby19-1.9.3.p392-3.22.1 ruby19-debuginfo-1.9.3.p392-3.22.1 ruby19-debugsource-1.9.3.p392-3.22.1 ruby19-devel-1.9.3.p392-3.22.1 ruby19-devel-extra-1.9.3.p392-3.22.1 ruby19-tk-1.9.3.p392-3.22.1 ruby19-tk-debuginfo-1.9.3.p392-3.22.1 - openSUSE 12.2 (noarch): ruby19-doc-ri-1.9.3.p392-3.22.1 - openSUSE 12.1 (i586 x86_64): ruby-1.8.7.p357-2.10.1 ruby-debuginfo-1.8.7.p357-2.10.1 ruby-debugsource-1.8.7.p357-2.10.1 ruby-devel-1.8.7.p357-2.10.1 ruby-examples-1.8.7.p357-2.10.1 ruby-test-suite-1.8.7.p357-2.10.1 ruby-tk-1.8.7.p357-2.10.1 ruby-tk-debuginfo-1.8.7.p357-2.10.1 - openSUSE 12.1 (noarch): ruby-doc-html-1.8.7.p357-2.10.1 ruby-doc-ri-1.8.7.p357-2.10.1 References: http://support.novell.com/security/cve/CVE-2013-0269.html http://support.novell.com/security/cve/CVE-2013-1821.html https://bugzilla.novell.com/803342 https://bugzilla.novell.com/808137

1 0

openSUSE-RU-2013:0602-1: moderate: patch: Only warn when trying to modify read-only files
by maintenance＠opensuse.org 03 Apr '13

03 Apr '13

openSUSE Recommended Update: patch: Only warn when trying to modify read-only files ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0602-1 Rating: moderate References: #794658 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issues for patch: - bnc#794658: Only warn when trying to modify read-only files instead of failing. This restores compatibility with older versions of GNU patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-300 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): patch-2.6.1.136-2.4.1 patch-debuginfo-2.6.1.136-2.4.1 patch-debugsource-2.6.1.136-2.4.1 References: https://bugzilla.novell.com/794658

1 0

openSUSE-RU-2013:0600-1: moderate: patch: Two fixes
by maintenance＠opensuse.org 03 Apr '13

03 Apr '13

openSUSE Recommended Update: patch: Two fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0600-1 Rating: moderate References: #755136 #794658 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues for patch: - bnc#794658: Only warn when trying to modify read-only files, instead of failing. This restores compatibility with older versions of GNU patch. - bnc#755136: Revert broken upstream commit Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-299 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): patch-2.6.1.116-4.4.1 patch-debuginfo-2.6.1.116-4.4.1 patch-debugsource-2.6.1.116-4.4.1 References: https://bugzilla.novell.com/755136 https://bugzilla.novell.com/794658

1 0

openSUSE-RU-2013:0598-2: netcontrol: Update to version 0.2.8 with several bugfixes
by maintenance＠opensuse.org 03 Apr '13

03 Apr '13

openSUSE Recommended Update: netcontrol: Update to version 0.2.8 with several bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0598-2 Rating: low References: #798348 #810381 #811002 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update fixes the following issues with netcontrol: - version 0.2.8 + Added ChangeLog.git to dist archive and to devel package docs. + bnc#811002: * Fixed ncf_close to not close logger as ncf_init did not open any. This caused SEGV's in libvirt, that redirects the global logger to itself and is using multiple ncf instances. * Fixed pthreads detection and source enablement in configure, added an explicit configure --enable-pthreads option to spec file to cause a failure on detection problems. + bnc#810381: Fixed SEGV at parsing not existing BRIDGE_PATHCOSTS and memory leaks in in loop check, xml parsing and on backup file creation failure while routes file rewrite. - version 0.2.7 + Fixed a bridge variable initialization in try_bridge + bnc#798348: Use --enable-network-service on openSUSE >= 12.3 + Check the network.service alias link instead of NETWORKMANAGER variable in /etc/sysconfig/network/config, when requested by the --enable-network-service configure option. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-293 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libnetcontrol-devel-0.2.8-0.6.8.1 libnetcontrol0-0.2.8-0.6.8.1 libnetcontrol0-debuginfo-0.2.8-0.6.8.1 netcontrol-debugsource-0.2.8-0.6.8.1 - openSUSE 12.2 (x86_64): libnetcontrol0-32bit-0.2.8-0.6.8.1 libnetcontrol0-debuginfo-32bit-0.2.8-0.6.8.1 References: https://bugzilla.novell.com/798348 https://bugzilla.novell.com/810381 https://bugzilla.novell.com/811002

1 0

openSUSE-RU-2013:0598-1: netcontrol: Update to version 0.2.8 with several bugfixes
by maintenance＠opensuse.org 03 Apr '13

03 Apr '13

openSUSE Recommended Update: netcontrol: Update to version 0.2.8 with several bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0598-1 Rating: low References: #798348 #810381 #811002 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update fixes the following issues with netcontrol: - version 0.2.8 + Added ChangeLog.git to dist archive and to devel package docs. + bnc#811002: * Fixed ncf_close to not close logger as ncf_init did not open any. This caused SEGV's in libvirt, that redirects the global logger to itself and is using multiple ncf instances. * Fixed pthreads detection and source enablement in configure, added an explicit configure --enable-pthreads option to spec file to cause a failure on detection problems. + bnc#810381: Fixed SEGV at parsing not existing BRIDGE_PATHCOSTS and memory leaks in in loop check, xml parsing and on backup file creation failure while routes file rewrite. - version 0.2.7 + Fixed a bridge variable initialization in try_bridge + bnc#798348: Use --enable-network-service on openSUSE >= 12.3 + Check the network.service alias link instead of NETWORKMANAGER variable in /etc/sysconfig/network/config, when requested by the --enable-network-service configure option. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-293 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libnetcontrol-devel-0.2.8-0.3.7.1 libnetcontrol0-0.2.8-0.3.7.1 libnetcontrol0-debuginfo-0.2.8-0.3.7.1 netcontrol-debugsource-0.2.8-0.3.7.1 - openSUSE 12.1 (x86_64): libnetcontrol0-32bit-0.2.8-0.3.7.1 libnetcontrol0-debuginfo-32bit-0.2.8-0.3.7.1 - openSUSE 12.1 (ia64): libnetcontrol0-debuginfo-x86-0.2.8-0.3.7.1 libnetcontrol0-x86-0.2.8-0.3.7.1 References: https://bugzilla.novell.com/798348 https://bugzilla.novell.com/810381 https://bugzilla.novell.com/811002

1 0

openSUSE-RU-2013:0597-1: netcontro: Update to version 0.2.8 and several bugfixes
by maintenance＠opensuse.org 03 Apr '13

03 Apr '13

openSUSE Recommended Update: netcontro: Update to version 0.2.8 and several bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0597-1 Rating: low References: #810381 #811002 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This udpate fixes the following issues with netcontrol: - version 0.2.8 + bnc#811002: * Fixed ncf_close to not close logger as ncf_init did not open any. This caused SEGV's in libvirt, that redirects the global logger to itself and is using multiple ncf instances. * Fixed pthreads detection and source enablement in configure, added an explicit configure --enable-pthreads option to spec file to cause a failure on detection problems. + bnc#810381: Fixed SEGV at parsing not existing BRIDGE_PATHCOSTS and memory leaks in in loop check, xml parsing and on backup file creation failure while routes file rewrite. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-294 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libnetcontrol-devel-0.2.8-0.1.4.1 libnetcontrol0-0.2.8-0.1.4.1 libnetcontrol0-debuginfo-0.2.8-0.1.4.1 netcontrol-debugsource-0.2.8-0.1.4.1 - openSUSE 12.3 (x86_64): libnetcontrol0-32bit-0.2.8-0.1.4.1 libnetcontrol0-debuginfo-32bit-0.2.8-0.1.4.1 References: https://bugzilla.novell.com/810381 https://bugzilla.novell.com/811002

1 0

openSUSE-SU-2013:0593-1: moderate: libxslt: fixed denial of service problems
by opensuse-security＠opensuse.org 02 Apr '13

02 Apr '13

openSUSE Security Update: libxslt: fixed denial of service problems ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0593-1 Rating: moderate References: #811686 Cross-References: CVE-2012-6139 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Two denial of service problems (crashes with NULL pointer derference) were fixed in libxslt, which could potentially be used by remote attackers to crash libxslt using programs. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-53 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libxslt-1.1.26-3.17.1 libxslt-debuginfo-1.1.26-3.17.1 libxslt-debugsource-1.1.26-3.17.1 libxslt-devel-1.1.26-3.17.1 - openSUSE 11.4 (x86_64): libxslt-32bit-1.1.26-3.17.1 libxslt-debuginfo-32bit-1.1.26-3.17.1 libxslt-devel-32bit-1.1.26-3.17.1 - openSUSE 11.4 (ia64): libxslt-debuginfo-x86-1.1.26-3.17.1 libxslt-x86-1.1.26-3.17.1 References: http://support.novell.com/security/cve/CVE-2012-6139.html https://bugzilla.novell.com/811686

1 0

openSUSE-RU-2013:0592-1: hgview: add mising build dependency
by maintenance＠opensuse.org 02 Apr '13

02 Apr '13

openSUSE Recommended Update: hgview: add mising build dependency ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0592-1 Rating: low References: #811791 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with hgview: - bnc#811791: add mising build dependency which caused the qt4 frontend not to be built correctly Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-284 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): hgview-1.7.0-2.4.1 hgview-qt4-1.7.0-2.4.1 References: https://bugzilla.novell.com/811791

1 0

openSUSE-RU-2013:0591-1: mirror: use Time:Local instead of timelocal.pl
by maintenance＠opensuse.org 02 Apr '13

02 Apr '13

openSUSE Recommended Update: mirror: use Time:Local instead of timelocal.pl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0591-1 Rating: low References: #811955 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for mirror: - bnc#811955: timelocal.pl was long obsolete and was removed in recent perl, it was substituted with simple call to Time::Local Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-287 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): mirror-2.9-902.4.1 References: https://bugzilla.novell.com/811955

1 0

openSUSE-RU-2013:0590-1: pesign, pesign-obs-integration: Calculate the digest of the padded data section to be consistent with the hash of the signed file
by maintenance＠opensuse.org 02 Apr '13

02 Apr '13

openSUSE Recommended Update: pesign, pesign-obs-integration: Calculate the digest of the padded data section to be consistent with the hash of the signed file ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0590-1 Rating: low References: #808594 #811325 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issue with pesign and pesign-obs-integration: - bnc#808594, bnc#811325: Calculate the digest of the padded data section to be consistent with the hash of the signed file Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-292 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): pesign-0.99-3.10.2 pesign-debuginfo-0.99-3.10.2 pesign-debugsource-0.99-3.10.2 pesign-obs-integration-9.0-0.1.18.1 - openSUSE 12.3 (x86_64): shim-0.2-3.10.2 References: https://bugzilla.novell.com/808594 https://bugzilla.novell.com/811325

1 0

openSUSE-RU-2013:0589-1: moderate: xen: bugfix update
by maintenance＠opensuse.org 02 Apr '13

02 Apr '13

openSUSE Recommended Update: xen: bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0589-1 Rating: moderate References: #797014 #802690 #805094 #806736 #809203 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: XEN was updated to fix various bugs: - Load blktap module in xencommons init script. blktap2 doesn't support qcow2, so blktap is needed to support domains with 'tap:qcow2' disk configurations. modified tmp-initscript-modprobe.patch - bnc#809203 - xen.efi isn't signed with SUSE Secure Boot key xen.spec - Fix adding managed PCI device to an inactive domain modified xen-managed-pci-device.patch - bnc#805094 - xen hot plug attach/detach fails modified blktap-pv-cdrom.patch - bnc# 802690 - domain locking can prevent a live migration from completing modified xend-domain-lock.patch - bnc#797014 - no way to control live migrations 26675-tools-xentoollog_update_tty_detection_in_stdiostream_p rogress.patch xen.migrate.tools-xc_print_messages_from_xc_save_with_xc_rep ort.patch xen.migrate.tools-xc_document_printf_calls_in_xc_restore.pat ch xen.migrate.tools-xc_rework_xc_save.cswitch_qemu_logdirty.pa tch xen.migrate.tools_set_migration_constraints_from_cmdline.pat ch xen.migrate.tools_add_xm_migrate_--log_progress_option.patch - Upstream patches from Jan 26585-x86-mm-Take-the-p2m-lock-even-in-shadow-mode.patch 26595-x86-nhvm-properly-clean-up-after-failure-to-set-up-all -vCPU-s.patch 26601-honor-ACPI-v4-FADT-flags.patch 26656-x86-fix-null-pointer-dereference-in-intel_get_extended _msrs.patch 26659-AMD-IOMMU-erratum-746-workaround.patch 26660-x86-fix-CMCI-injection.patch 26672-vmx-fix-handling-of-NMI-VMEXIT.patch 26673-Avoid-stale-pointer-when-moving-domain-to-another-cpup ool.patch 26676-fix-compat-memory-exchange-op-splitting.patch 26677-x86-make-certain-memory-sub-ops-return-valid-values.pa tch 26678-SEDF-avoid-gathering-vCPU-s-on-pCPU0.patch 26679-x86-defer-processing-events-on-the-NMI-exit-path.patch 26683-credit1-Use-atomic-bit-operations-for-the-flags-struct ure.patch 26689-fix-domain-unlocking-in-some-xsm-error-paths.patch - fate#313584: pass bios information to XEN HVM guest xend-hvm-firmware-passthrough.patch - bnc#806736: enabling xentrace crashes hypervisor 26686-xentrace_fix_off-by-one_in_calculate_tbuf_size.patch - update xenalyze to revision 149 Make eip_list output more useful Use correct length when copying record into buffer decode PV_HYPERCALL_SUBCALL events decode PV_HYPERCALL_V2 records Analyze populate-on-demand reclamation patterns Handle 64-bit MMIO Also strip write bit when processing a generic event Make the warnigns in hvm_generic_postprocess more informative Don't warn about switching paging levels unless verbosity>=6 Process NPFs as generic for summary purposes Add HVM_EVENT_VLAPIC Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-290 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): xen-debugsource-4.2.1_10-1.4.1 xen-devel-4.2.1_10-1.4.1 xen-kmp-default-4.2.1_10_k3.7.10_1.1-1.4.1 xen-kmp-default-debuginfo-4.2.1_10_k3.7.10_1.1-1.4.1 xen-kmp-desktop-4.2.1_10_k3.7.10_1.1-1.4.1 xen-kmp-desktop-debuginfo-4.2.1_10_k3.7.10_1.1-1.4.1 xen-libs-4.2.1_10-1.4.1 xen-libs-debuginfo-4.2.1_10-1.4.1 xen-tools-domU-4.2.1_10-1.4.1 xen-tools-domU-debuginfo-4.2.1_10-1.4.1 - openSUSE 12.3 (x86_64): xen-4.2.1_10-1.4.1 xen-doc-html-4.2.1_10-1.4.1 xen-doc-pdf-4.2.1_10-1.4.1 xen-libs-32bit-4.2.1_10-1.4.1 xen-libs-debuginfo-32bit-4.2.1_10-1.4.1 xen-tools-4.2.1_10-1.4.1 xen-tools-debuginfo-4.2.1_10-1.4.1 - openSUSE 12.3 (i586): xen-kmp-pae-4.2.1_10_k3.7.10_1.1-1.4.1 xen-kmp-pae-debuginfo-4.2.1_10_k3.7.10_1.1-1.4.1 References: https://bugzilla.novell.com/797014 https://bugzilla.novell.com/802690 https://bugzilla.novell.com/805094 https://bugzilla.novell.com/806736 https://bugzilla.novell.com/809203

1 0

openSUSE-RU-2013:0588-1: deepin-music-player starts again
by maintenance＠opensuse.org 02 Apr '13

02 Apr '13

openSUSE Recommended Update: deepin-music-player starts again ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0588-1 Rating: low References: #808258 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for deepin-music-player: - bnc#808258: fixed an issue which prevents deepin-music-player to start Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-285 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): deepin-music-player-1.0.1git20120911-3.5.1 deepin-music-player-lang-1.0.1git20120911-3.5.1 References: https://bugzilla.novell.com/808258

1 0

openSUSE-RU-2013:0587-1: gnome-control-center: remove unused 'Other' section
by maintenance＠opensuse.org 02 Apr '13

02 Apr '13

openSUSE Recommended Update: gnome-control-center: remove unused 'Other' section ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0587-1 Rating: low References: #810335 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for gnome-control-center: - bnc#810335: remove the unused 'Other' section from gnome-control-center Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-286 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): gnome-control-center-3.6.3-3.10.1 gnome-control-center-debuginfo-3.6.3-3.10.1 gnome-control-center-debugsource-3.6.3-3.10.1 gnome-control-center-devel-3.6.3-3.10.1 gnome-control-center-user-faces-3.6.3-3.10.1 - openSUSE 12.3 (noarch): gnome-control-center-branding-openSUSE-12.2-4.7.1 gnome-control-center-branding-upstream-3.6.3-3.10.1 gnome-control-center-lang-3.6.3-3.10.1 References: https://bugzilla.novell.com/810335

1 0

openSUSE-RU-2013:0586-1: libnet: correctly detect the presence of PF_PACKET
by maintenance＠opensuse.org 02 Apr '13

02 Apr '13

openSUSE Recommended Update: libnet: correctly detect the presence of PF_PACKET ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0586-1 Rating: low References: #810138 Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with libnet: - bnc#810138: correctly detect the presence of PF_PACKET Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-291 - openSUSE 12.2: zypper in -t patch openSUSE-2013-291 - openSUSE 12.1: zypper in -t patch openSUSE-2013-291 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libnet-debugsource-1.1.5-18.4.1 libnet-devel-1.1.5-18.4.1 libnet-doc-1.1.5-18.4.1 libnet1-1.1.5-18.4.1 libnet1-debuginfo-1.1.5-18.4.1 - openSUSE 12.2 (i586 x86_64): libnet-debugsource-1.1.5-16.4.1 libnet-devel-1.1.5-16.4.1 libnet-doc-1.1.5-16.4.1 libnet1-1.1.5-16.4.1 libnet1-debuginfo-1.1.5-16.4.1 - openSUSE 12.1 (i586 x86_64): libnet-debugsource-1.1.5-12.4.1 libnet-devel-1.1.5-12.4.1 libnet-doc-1.1.5-12.4.1 libnet1-1.1.5-12.4.1 libnet1-debuginfo-1.1.5-12.4.1 References: https://bugzilla.novell.com/810138

1 0

openSUSE-SU-2013:0585-1: moderate: libxslt: fixed denial of service problems
by opensuse-security＠opensuse.org 02 Apr '13

02 Apr '13

openSUSE Security Update: libxslt: fixed denial of service problems ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0585-1 Rating: moderate References: #811686 Cross-References: CVE-2012-6139 Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Two denial of service problems (crashes with NULL pointer derference) were fixed in libxslt, which could potentially be used by remote attackers to crash libxslt using programs. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-289 - openSUSE 12.2: zypper in -t patch openSUSE-2013-289 - openSUSE 12.1: zypper in -t patch openSUSE-2013-289 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libxslt-debugsource-1.1.28-3.4.1 libxslt-devel-1.1.28-3.4.1 libxslt-python-1.1.28-3.4.1 libxslt-python-debuginfo-1.1.28-3.4.1 libxslt-python-debugsource-1.1.28-3.4.1 libxslt-tools-1.1.28-3.4.1 libxslt-tools-debuginfo-1.1.28-3.4.1 libxslt1-1.1.28-3.4.1 libxslt1-debuginfo-1.1.28-3.4.1 - openSUSE 12.3 (x86_64): libxslt-devel-32bit-1.1.28-3.4.1 libxslt1-32bit-1.1.28-3.4.1 libxslt1-debuginfo-32bit-1.1.28-3.4.1 - openSUSE 12.2 (i586 x86_64): libxslt-debugsource-1.1.26-22.6.1 libxslt-devel-1.1.26-22.6.1 libxslt-python-1.1.26-22.6.1 libxslt-python-debuginfo-1.1.26-22.6.1 libxslt-python-debugsource-1.1.26-22.6.1 libxslt-tools-1.1.26-22.6.1 libxslt-tools-debuginfo-1.1.26-22.6.1 libxslt1-1.1.26-22.6.1 libxslt1-debuginfo-1.1.26-22.6.1 - openSUSE 12.2 (x86_64): libxslt-devel-32bit-1.1.26-22.6.1 libxslt1-32bit-1.1.26-22.6.1 libxslt1-debuginfo-32bit-1.1.26-22.6.1 - openSUSE 12.1 (i586 x86_64): libxslt-debugsource-1.1.26-15.11.1 libxslt-devel-1.1.26-15.11.1 libxslt-python-1.1.26-15.11.1 libxslt-python-debuginfo-1.1.26-15.11.1 libxslt-python-debugsource-1.1.26-15.11.1 libxslt1-1.1.26-15.11.1 libxslt1-debuginfo-1.1.26-15.11.1 - openSUSE 12.1 (x86_64): libxslt-devel-32bit-1.1.26-15.11.1 libxslt1-32bit-1.1.26-15.11.1 libxslt1-debuginfo-32bit-1.1.26-15.11.1 - openSUSE 12.1 (ia64): libxslt1-debuginfo-x86-1.1.26-15.11.1 libxslt1-x86-1.1.26-15.11.1 References: http://support.novell.com/security/cve/CVE-2012-6139.html https://bugzilla.novell.com/811686

1 0

openSUSE-RU-2013:0584-1: usbmuxd: add systemd unit file
by maintenance＠opensuse.org 02 Apr '13

02 Apr '13

openSUSE Recommended Update: usbmuxd: add systemd unit file ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0584-1 Rating: low References: #811801 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with usbmuxd: - bnc#811801: Add systemd unit file for usbmuxd and activate it from the udev rules file Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-288 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): iproxy-1.0.8-5.5.1 iproxy-debuginfo-1.0.8-5.5.1 libusbmuxd-devel-1.0.8-5.5.1 libusbmuxd2-1.0.8-5.5.1 libusbmuxd2-debuginfo-1.0.8-5.5.1 usbmuxd-1.0.8-5.5.1 usbmuxd-debuginfo-1.0.8-5.5.1 usbmuxd-debugsource-1.0.8-5.5.1 - openSUSE 12.3 (x86_64): libusbmuxd2-32bit-1.0.8-5.5.1 libusbmuxd2-debuginfo-32bit-1.0.8-5.5.1 usbmuxd-debuginfo-32bit-1.0.8-5.5.1 References: https://bugzilla.novell.com/811801

1 0

openSUSE-RU-2013:0583-1: important: python-lxml: Updated to 3.1.0
by maintenance＠opensuse.org 02 Apr '13

02 Apr '13

openSUSE Recommended Update: python-lxml: Updated to 3.1.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0583-1 Rating: important References: #798292 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for python-lxml: - Updated to 3.1.0 to fix bnc#798292. The previous version is not usable with python3 + fixes since 2.3.4: + 3.1.0 (2013-02-10): + Features added: + lxml.html.clean allows overriding the set of attributes that it considers 'safe'. + Bugs fixed + copy.copy(el.attrib) raised an exception. It now returns a copy of the attributes as a plain Python dict. + When used with namespace prefixes, the el.find*() methods always used the first namespace mapping that was provided for each path expression instead of using the one that was actually passed in for the current run. + Fix undefined C symbol in Python runtimes compiled without threading support. + 3.1beta1 (2012-12-21): + Features added + New build-time option --with-unicode-strings for Python 2 that makes the API always return Unicode strings for names and text instead of byte strings for plain ASCII content. + New incremental XML file writing API etree.xmlfile(). + E factory in lxml.objectify is callable to simplify the creation of tags with non-identifier names without having to resort to getattr(). + Bugs fixed + When starting from a non-namespaced element in lxml.objectify, searching for a child without explicitly specifying a namespace incorrectly found namespaced elements with the requested local name, instead of restricting the search to non-namespaced children. + Deprecation warnings were fixed for Python 3.x. + lxml.html.fromstring() failed to accept bytes input in Py3. + Static build of libxml2 2.9.0 failed due to missing file. + Other changes + The externally useless class _ObjectifyElementMakerCaller was removed from the module API of lxml.objectify. + lxml.builder is faster for adding text to elements with many children. + 3.0.2 (2012-12-14): + Features added + Bugs fixed + Fix crash during interpreter shutdown by switching to Cython 0.17.3 for building. + 3.0.1 (2012-10-14): + Bugs fixed + Element proxies could disappear during garbage collection in PyPy without proper cleanup. + Failure to work with libxml2 2.6.x. + static MacOS-X build failed in Py3. + 3.0 (2012-10-08): + Bugs fixed + End-of-file handling was incorrect in iterparse() when reading from a low-level C file stream and failed in libxml2 2.9.0 due to its improved consistency checks. + Other changes + The build no longer uses Cython by default unless the generated C files are missing. To use Cython, pass the option "--with-cython". To ignore the fatal build error when Cython is required but not available (e.g. to run special setup.py commands that do not actually run a build), pass "--without-cython". + 3.0beta1 (2012-09-26): + Features added + Python level access to (optional) libxml2 memory debugging features to simplify debugging of memory leaks etc. + Bugs fixed + Fix a memory leak in XPath by switching to Cython 0.17.1. + Some tests were adapted to work with PyPy. + Other changes + The code was adapted to work with the upcoming libxml2 2.9.0 release. + 3.0alpha2 (2012-08-23): + Features added + The .iter() method of elements now accepts tag arguments like "{*}name" to search for elements with a given local name in any namespace. With this addition, all combinations of wildcards now work as expected: "{ns}name", "{}name", "{*}name", "{ns}*", "{}*" and "{*}*". Note that "name" is equivalent to "{}name", but "*" is "{*}*". The same change applies to the .getiterator(), .itersiblings(), .iterancestors(), .iterdescendants(), .iterchildren() and .itertext() methods;the strip_attributes(), strip_elements() and strip_tags() functions as well as the iterparse() class. + C14N allows specifying the inclusive prefixes to be promoted to top-level during exclusive serialisation. + Bugs fixed + Passing long Unicode strings into the feed() parser interface failed to read the entire string. + 3.0alpha1 (2012-07-31): + Features added + Initial support for building in PyPy (through cpyext). + DTD objects gained an API that allows read access to their declarations. + xpathgrep.py gained support for parsing line-by-line (e.g. from grep output) and for surrounding the output with a new root tag. + E-factory in lxml.builder accepts subtypes of known data types (such as string subtypes) when building elements around them. + Tree iteration and iterparse() with a selective tag argument supports passing a set of tags. Tree nodes will be returned by the iterators if they match any of the tags. + Bugs fixed + The .find*() methods in lxml.objectify no longer use XPath internally, which makes them faster in many cases (especially when short circuiting after a single or couple of elements) and fixes some behavioural differences compared to lxml.etree. Note that this means that they no longer support arbitrary XPath expressions but only the subset that the ElementPath language supports. The previous implementation was also redundant with the normal XPath support, which can be used as a replacement. + el.find('*') could accidentally return a comment or processing instruction that happened to be in the wrong spot. (Same for the other .find*() methods.) + The error logging is less intrusive and avoids a global setup where possible. + Fixed undefined names in html5lib parser. + xpathgrep.py did not work in Python 3. + Element.attrib.update() did not accept an attrib of another Element as parameter. + For subtypes of ElementBase that make the .text or .tail properties immutable (as in objectify, for example), inserting text when creating Elements through the E-Factory feature of the class constructor would fail with an exception, stating that the text cannot be modified. + Other changes + The code base was overhauled to properly use 'const' where the API of libxml2 and libxslt requests it. This also has an impact on the public C-API of lxml itself, as defined in etreepublic.pxd, as well as the provided declarations in the lxml/includes/ directory. Code that uses these declarations may have to be adapted. On the plus side, this fixes several C compiler warnings, also for user code, thus making it easier to spot real problems again. + The functionality of "lxml.cssselect" was moved into a separate PyPI package called "cssselect". To continue using it, you must install that package separately. The "lxml.cssselect" module is still available and provides the same interface, provided the "cssselect" package can be imported at runtime. + Element attributes passed in as an attrib dict or as keyword arguments are now sorted by (namespaced) name before being created to make their order predictable for serialisation and iteration. Note that adding or deleting attributes afterwards does not take that order into account, i.e. setting a new attribute appends it after the existing ones. + Several classes that are for internal use only were removed from the lxml.etree module dict: _InputDocument, _ResolverRegistry, _ResolverContext, _BaseContext, _ExsltRegExp, _IterparseContext, _TempStore, _ExceptionContext, __ContentOnlyElement, _AttribIterator, _NamespaceRegistry, _ClassNamespaceRegistry, _FunctionNamespaceRegistry, _XPathFunctionNamespaceRegistry, _ParserDictionaryContext, _FileReaderContext, _ParserContext, _PythonSaxParserTarget, _TargetParserContext, _ReadOnlyProxy, _ReadOnlyPIProxy, _ReadOnlyEntityProxy, _ReadOnlyElementProxy, _OpaqueNodeWrapper, _OpaqueDocumentWrapper, _ModifyContentOnlyProxy, _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy, _AppendOnlyElementProxy, _SaxParserContext, _FilelikeWriter, _ParserSchemaValidationContext, _XPathContext, _XSLTResolverContext, _XSLTContext, _XSLTQuotedStringParam + Several internal classes can no longer be inherited from: _InputDocument, _ResolverRegistry, _ExsltRegExp, _ElementUnicodeResult, _IterparseContext, _TempStore, _AttribIterator, _ClassNamespaceRegistry, _XPathFunctionNamespaceRegistry, _ParserDictionaryContext, _FileReaderContext, _PythonSaxParserTarget, _TargetParserContext, _ReadOnlyPIProxy, _ReadOnlyEntityProxy, _OpaqueDocumentWrapper, _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy, _AppendOnlyElementProxy, _FilelikeWriter, _ParserSchemaValidationContext, _XPathContext, _XSLTResolverContext, _XSLTContext, _XSLTQuotedStringParam, _XSLTResultTree, _XSLTProcessingInstruction + 2.3.6 (2012-09-28): + Bugs fixed + Passing long Unicode strings into the feed() parser interface failed to read the entire string. + 2.3.5 (2012-07-31): + Bugs fixed + Crash when merging text nodes in element.remove(). + Crash in sax/target parser when reporting empty doctype. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-276 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): python3-lxml-3.1.0-6.4.1 python3-lxml-debuginfo-3.1.0-6.4.1 python3-lxml-debugsource-3.1.0-6.4.1 - openSUSE 12.3 (noarch): python3-lxml-doc-3.1.0-6.4.1 References: https://bugzilla.novell.com/798292

1 0

openSUSE-RU-2013:0582-1: docbook5-xsl-stylesheets: Fixed bnc#809609 and updated to version 1.78.1
by maintenance＠opensuse.org 02 Apr '13

02 Apr '13

openSUSE Recommended Update: docbook5-xsl-stylesheets: Fixed bnc#809609 and updated to version 1.78.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0582-1 Rating: low References: #809609 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for docbook5-xsl-stylesheets: - bnc#809609: fixed error in specfile that generated catalog entries pointing to the DocBook4 stylesheets - Updated to version 1.78.1 + see http://snapshots.docbook.org/xsl/RELEASE-NOTES.html#V1.78.1 for details Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-277 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): docbook5-xsl-stylesheets-1.78.1-2.5.1 References: https://bugzilla.novell.com/809609

1 0

openSUSE-RU-2013:0581-1: - Fixed bnc#811376
by maintenance＠opensuse.org 02 Apr '13

02 Apr '13

openSUSE Recommended Update: - Fixed bnc#811376 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0581-1 Rating: low References: Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: - Fixed bnc#811376 Version 1.9.19: Fixed inconsistency in Novdoc DTD: added missing @role attribute in appendix, glossary, index, part, preface, refentry Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-279 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): suse-xsl-stylesheets-1.9.19-1.5.1 References:

1 0

openSUSE-RU-2013:0580-1: daps: Update to version 1.1.5
by maintenance＠opensuse.org 02 Apr '13

02 Apr '13

openSUSE Recommended Update: daps: Update to version 1.1.5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0580-1 Rating: low References: #811376 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with daps: - fix for EPUB validation bug (EPUB Mime-Type file ended with a newline which caused a validation error) - Version 1.1.5 (Bugfix release)(bnc#811376) * fixed errors in EPUB generation (wrong paths in content.opf) EPUBs should now be viewable in all ePUB viewers * fixed two errors in target locdrop: no proper image tarball was generated and the notrans-tarball had a wrong path * added a missing conditional requirement (on $IMG_DIRECTORIES) for image building * fixed errors when building dist-{html,htmlsingle,jsp} Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-280 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): daps-1.1.5-1.5.2 References: https://bugzilla.novell.com/811376

1 0

openSUSE-RU-2013:0579-1: important: sysconfig: Two bugfixes
by maintenance＠opensuse.org 02 Apr '13

02 Apr '13

openSUSE Recommended Update: sysconfig: Two bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0579-1 Rating: important References: #808718 #810354 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issue with sysconfig: - bnc#808718: Fixed to wait for dhcp/ipv6 under systemd again. + Fixed regression caused by bnc#785240, bnc#780644 fixes to not discard the dhcp/ipv6 dupplicate address detection in progress error codes under systemd completely, but wait until dhcp/ipv6 dad finished or the WAIT_FOR_INTERFACES timeout is reached and then discard in the status returned to systemd. It caused failures of other services trying to bind tentative IPv6 addresses, e.g. in mixed dhcp4 / static IPv6 setups. - bnc#810354: Fixed ifup to always join the systemd network.service cgroup. + When ifup were started manually/directly and not inside of the systemd network.service start run, or partial restart like "rcnetwork restart eth0" were used, systemd were not considering e.g. the dhcp clients started this way as part of the network.service. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-271 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): sysconfig-0.75.4-2.24.1 sysconfig-debuginfo-0.75.4-2.24.1 sysconfig-debugsource-0.75.4-2.24.1 References: https://bugzilla.novell.com/808718 https://bugzilla.novell.com/810354

1 0

openSUSE-RU-2013:0578-1: python-managesieve: Add --port option to sieveshell for overriding the default port
by maintenance＠opensuse.org 02 Apr '13

02 Apr '13

openSUSE Recommended Update: python-managesieve: Add --port option to sieveshell for overriding the default port ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0578-1 Rating: low References: #811230 Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for python-managesieve: - bnc#811230: Add --port option to sieveshell for overriding the default port, previously it was hardcoded to port 2000 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-269 - openSUSE 12.2: zypper in -t patch openSUSE-2013-269 - openSUSE 12.1: zypper in -t patch openSUSE-2013-269 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): python-managesieve-0.4.2-11.4.1 - openSUSE 12.2 (noarch): python-managesieve-0.4.2-9.4.1 - openSUSE 12.1 (noarch): python-managesieve-0.4.2-6.4.1 References: https://bugzilla.novell.com/811230

1 0

openSUSE-RU-2013:0577-1: important: krb5: fix path to executables in service files
by maintenance＠opensuse.org 02 Apr '13

02 Apr '13

openSUSE Recommended Update: krb5: fix path to executables in service files ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0577-1 Rating: important References: #810926 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for krb5: - bnc#810926: fix path to executables in service files Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-282 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): krb5-1.10.2-10.9.1 krb5-client-1.10.2-10.9.1 krb5-client-debuginfo-1.10.2-10.9.1 krb5-debuginfo-1.10.2-10.9.1 krb5-debugsource-1.10.2-10.9.1 krb5-devel-1.10.2-10.9.1 krb5-mini-1.10.2-10.9.1 krb5-mini-debuginfo-1.10.2-10.9.1 krb5-mini-debugsource-1.10.2-10.9.1 krb5-mini-devel-1.10.2-10.9.1 krb5-plugin-kdb-ldap-1.10.2-10.9.1 krb5-plugin-kdb-ldap-debuginfo-1.10.2-10.9.1 krb5-plugin-preauth-pkinit-1.10.2-10.9.1 krb5-plugin-preauth-pkinit-debuginfo-1.10.2-10.9.1 krb5-server-1.10.2-10.9.1 krb5-server-debuginfo-1.10.2-10.9.1 - openSUSE 12.3 (x86_64): krb5-32bit-1.10.2-10.9.1 krb5-debuginfo-32bit-1.10.2-10.9.1 krb5-devel-32bit-1.10.2-10.9.1 - openSUSE 12.3 (noarch): krb5-doc-1.10.2-10.9.2 References: https://bugzilla.novell.com/810926

1 0

openSUSE-RU-2013:0576-1: zsh: Fix custom completion support
by maintenance＠opensuse.org 02 Apr '13

02 Apr '13

openSUSE Recommended Update: zsh: Fix custom completion support ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0576-1 Rating: low References: #811356 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with zsh: - bnc#811536: Fix custom completion support via /etc/zsh_completion.d - remove unneeded completions when building for openSUSE Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-275 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): zsh-5.0.2-2.5.1 zsh-debuginfo-5.0.2-2.5.1 zsh-debugsource-5.0.2-2.5.1 zsh-htmldoc-5.0.2-2.5.1 References: https://bugzilla.novell.com/811356

1 0