April 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:0682-1: icecream: update to version 1.0.0 to fix scheduler crash and nodes incompatibility
by maintenance＠opensuse.org 15 Apr '13

15 Apr '13

openSUSE Recommended Update: icecream: update to version 1.0.0 to fix scheduler crash and nodes incompatibility ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0682-1 Rating: low References: #813996 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following problems: * scheduler can crash on startup (bug #779564) * nodes running icecream from openSUSE 12.2 or 12.3 are incompatible with other icecream versions (depending on the scheduler version they cannot distribute build jobs to them, receive build jobs from them or both) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-342 - openSUSE 12.2: zypper in -t patch openSUSE-2013-342 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): icecream-1.0.0-12.4.1 icecream-clang-wrappers-1.0.0-12.4.1 icecream-debuginfo-1.0.0-12.4.1 icecream-debugsource-1.0.0-12.4.1 libicecream-devel-1.0.0-12.4.1 - openSUSE 12.2 (i586 x86_64): icecream-1.0.0-7.4.1 icecream-clang-wrappers-1.0.0-7.4.1 icecream-debuginfo-1.0.0-7.4.1 icecream-debugsource-1.0.0-7.4.1 libicecream-devel-1.0.0-7.4.1 References: https://bugzilla.novell.com/813996

1 0

openSUSE-RU-2013:0681-1: moderate: unico: fix crash in gtk-theming engine
by maintenance＠opensuse.org 15 Apr '13

15 Apr '13

openSUSE Recommended Update: unico: fix crash in gtk-theming engine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0681-1 Rating: moderate References: #813150 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: unico was updated to fix a crash on gtk-theming-engine (bnc#813150,lp#1000545) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-334 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): gtk3-engine-unico-1.0.2-4.4.1 gtk3-engine-unico-debuginfo-1.0.2-4.4.1 unico-debugsource-1.0.2-4.4.1 References: https://bugzilla.novell.com/813150

1 0

openSUSE-RU-2013:0680-1: moderate: open-vm-tools: 9.2.2 bugfix update
by maintenance＠opensuse.org 15 Apr '13

15 Apr '13

openSUSE Recommended Update: open-vm-tools: 9.2.2 bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0680-1 Rating: moderate References: #803157 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: open-vm-tools was updated to version 9.2.0: + Fixes for HGFS driver to compile on newer kernels (3.6). + vmsync driver is disabled on kernels 3.0+ as vmbackup plugin uses FIFREEZE/FITHAW standard ioctls. + Fixes for Copy/Paste (and C&P is temporarily disabled on Solaris due to C++ library issues). - Rebase open-vm-tools-kernel-3.6.patch: mostly fixed upstream. - No longer build vmblock.ko: it's been obsoleted in favor of vmblock-fuse. - Change vmtoolsd to use vmware-vmblock-fuse instead of vmblock.ko, using the new mount point /var/run/vmblock-fuse. - Add fuse Requires, as we now use vmblock-fuse. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-340 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libvmtools-devel-9.2.2-2.4.1 libvmtools0-9.2.2-2.4.1 libvmtools0-debuginfo-9.2.2-2.4.1 open-vm-tools-9.2.2-2.4.1 open-vm-tools-debuginfo-9.2.2-2.4.1 open-vm-tools-debugsource-9.2.2-2.4.1 open-vm-tools-gui-9.2.2-2.4.1 open-vm-tools-gui-debuginfo-9.2.2-2.4.1 vmware-guest-kmp-default-9.2.2_k3.7.10_1.1-2.4.1 vmware-guest-kmp-default-debuginfo-9.2.2_k3.7.10_1.1-2.4.1 vmware-guest-kmp-desktop-9.2.2_k3.7.10_1.1-2.4.1 vmware-guest-kmp-desktop-debuginfo-9.2.2_k3.7.10_1.1-2.4.1 - openSUSE 12.3 (i586): vmware-guest-kmp-pae-9.2.2_k3.7.10_1.1-2.4.1 vmware-guest-kmp-pae-debuginfo-9.2.2_k3.7.10_1.1-2.4.1 References: https://bugzilla.novell.com/803157

1 0

openSUSE-RU-2013:0679-1: moderate: rabbitmq-server: properly daemonize
by maintenance＠opensuse.org 15 Apr '13

15 Apr '13

openSUSE Recommended Update: rabbitmq-server: properly daemonize ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0679-1 Rating: moderate References: #807540 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: rabbitmq-server init script was updated to properly daemonize. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-338 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): erlang-rabbitmq-client-2.8.7-2.4.1 rabbitmq-server-2.8.7-2.4.1 rabbitmq-server-plugins-2.8.7-2.4.1 References: https://bugzilla.novell.com/807540

1 0

openSUSE-RU-2013:0678-1: moderate: gnome-sharp2: rebuilt to make giver work
by maintenance＠opensuse.org 15 Apr '13

15 Apr '13

openSUSE Recommended Update: gnome-sharp2: rebuilt to make giver work ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0678-1 Rating: moderate References: #812529 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: gnome-sharp2 was rebuilt without removing libgnomeui-2.so.0 references, to allow giver to work. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-339 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): art-sharp2-2.24.2-15.4.1 gconf-sharp-peditors2-2.24.2-15.4.1 gconf-sharp2-2.24.2-15.4.1 gnome-sharp2-2.24.2-15.4.1 gnome-sharp2-complete-2.24.2-15.4.1 gnome-sharp2-debuginfo-2.24.2-15.4.1 gnome-sharp2-debugsource-2.24.2-15.4.1 gnome-vfs-sharp2-2.24.2-15.4.1 References: https://bugzilla.novell.com/812529

1 0

openSUSE-RU-2013:0677-1: moderate: vsftpd: relax sandboxing to fix feature regressions
by maintenance＠opensuse.org 15 Apr '13

15 Apr '13

openSUSE Recommended Update: vsftpd: relax sandboxing to fix feature regressions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0677-1 Rating: moderate References: #786024 #812406 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: vsftpd confinement was too strict and adjusted to fix some lacking functionality: * drop CLONE_NEWPID from clone to enable audit system * unconditionally enable fcntl with F_SETFL * this enabled a sendto on /dev/log socket when syslog is enabled Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-337 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): vsftpd-3.0.2-4.5.1 vsftpd-debuginfo-3.0.2-4.5.1 vsftpd-debugsource-3.0.2-4.5.1 References: https://bugzilla.novell.com/786024 https://bugzilla.novell.com/812406

1 0

openSUSE-RU-2013:0676-1: moderate: R-base: fixed plots not draw with cairo
by maintenance＠opensuse.org 15 Apr '13

15 Apr '13

openSUSE Recommended Update: R-base: fixed plots not draw with cairo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0676-1 Rating: moderate References: #807426 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: R-Base was updated to fix that Plots were not drawn with buffered cairo. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-335 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): R-base-2.15.2-2.4.1 R-base-debuginfo-2.15.2-2.4.1 R-base-debugsource-2.15.2-2.4.1 R-base-devel-2.15.2-2.4.1 References: https://bugzilla.novell.com/807426

1 0

openSUSE-SU-2013:0675-1: important: flash-player update to 11.2.202.280
by opensuse-security＠opensuse.org 13 Apr '13

13 Apr '13

openSUSE Security Update: flash-player update to 11.2.202.280 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0675-1 Rating: important References: #814635 Cross-References: CVE-2013-1378 CVE-2013-1379 CVE-2013-1380 CVE-2013-2555 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.280: http://www.adobe.com/support/security/bulletins/apsb13-11.ht ml * APSB13-11, CVE-2013-1378, CVE-2013-1379, CVE-2013-1380, CVE-2013-2555 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-68 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.280-59.1 flash-player-gnome-11.2.202.280-59.1 flash-player-kde4-11.2.202.280-59.1 References: http://support.novell.com/security/cve/CVE-2013-1378.html http://support.novell.com/security/cve/CVE-2013-1379.html http://support.novell.com/security/cve/CVE-2013-1380.html http://support.novell.com/security/cve/CVE-2013-2555.html https://bugzilla.novell.com/814635

1 0

openSUSE-RU-2013:0673-1: Re-enable the WPA-EAP server certificate probe
by maintenance＠opensuse.org 12 Apr '13

12 Apr '13

openSUSE Recommended Update: Re-enable the WPA-EAP server certificate probe ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0673-1 Rating: low References: #574266 #798793 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The patches to probe the WPA-EAP server certificate were disabled due to upstream changes. Rebase the patches to fix CVE-2006-7246. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-333 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): NetworkManager-0.9.6.4-5.6.1 NetworkManager-debuginfo-0.9.6.4-5.6.1 NetworkManager-debugsource-0.9.6.4-5.6.1 NetworkManager-devel-0.9.6.4-5.6.1 NetworkManager-gnome-0.9.6.4-2.5.1 NetworkManager-gnome-debuginfo-0.9.6.4-2.5.1 NetworkManager-gnome-debugsource-0.9.6.4-2.5.1 gnome-control-center-3.6.3-3.14.1 gnome-control-center-debuginfo-3.6.3-3.14.1 gnome-control-center-debugsource-3.6.3-3.14.1 gnome-control-center-devel-3.6.3-3.14.1 gnome-control-center-user-faces-3.6.3-3.14.1 libnm-glib-vpn1-0.9.6.4-5.6.1 libnm-glib-vpn1-debuginfo-0.9.6.4-5.6.1 libnm-glib4-0.9.6.4-5.6.1 libnm-glib4-debuginfo-0.9.6.4-5.6.1 libnm-gtk-devel-0.9.6.4-2.5.1 libnm-gtk0-0.9.6.4-2.5.1 libnm-gtk0-debuginfo-0.9.6.4-2.5.1 libnm-util2-0.9.6.4-5.6.1 libnm-util2-debuginfo-0.9.6.4-5.6.1 typelib-1_0-NMClient-1_0-0.9.6.4-5.6.1 typelib-1_0-NetworkManager-1_0-0.9.6.4-5.6.1 - openSUSE 12.3 (x86_64): NetworkManager-devel-32bit-0.9.6.4-5.6.1 libnm-glib-vpn1-32bit-0.9.6.4-5.6.1 libnm-glib-vpn1-debuginfo-32bit-0.9.6.4-5.6.1 libnm-glib4-32bit-0.9.6.4-5.6.1 libnm-glib4-debuginfo-32bit-0.9.6.4-5.6.1 libnm-util2-32bit-0.9.6.4-5.6.1 libnm-util2-debuginfo-32bit-0.9.6.4-5.6.1 - openSUSE 12.3 (noarch): NetworkManager-gnome-lang-0.9.6.4-2.5.1 NetworkManager-lang-0.9.6.4-5.6.1 gnome-control-center-branding-upstream-3.6.3-3.14.1 gnome-control-center-lang-3.6.3-3.14.1 References: https://bugzilla.novell.com/574266 https://bugzilla.novell.com/798793

1 0

openSUSE-SU-2013:0672-1: moderate: flash-player: update to 11.2.202.280
by opensuse-security＠opensuse.org 12 Apr '13

12 Apr '13

openSUSE Security Update: flash-player: update to 11.2.202.280 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0672-1 Rating: moderate References: #814635 Cross-References: CVE-2013-1378 CVE-2013-1379 CVE-2013-1380 CVE-2013-2555 Affected Products: openSUSE 12.3:NonFree openSUSE 12.2:NonFree openSUSE 12.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.280: (bnc#814635) http://www.adobe.com/support/security/bulletins/apsb13-11.ht ml * APSB13-11, CVE-2013-1378, CVE-2013-1379, CVE-2013-1380, CVE-2013-2555 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2013-331 - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2013-331 - openSUSE 12.1: zypper in -t patch openSUSE-2013-331 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3:NonFree (i586 x86_64): flash-player-11.2.202.280-2.16.1 flash-player-gnome-11.2.202.280-2.16.1 flash-player-kde4-11.2.202.280-2.16.1 - openSUSE 12.2:NonFree (i586 x86_64): flash-player-11.2.202.280-1.38.1 flash-player-gnome-11.2.202.280-1.38.1 flash-player-kde4-11.2.202.280-1.38.1 - openSUSE 12.1 (i586 x86_64): flash-player-11.2.202.280-62.1 flash-player-gnome-11.2.202.280-62.1 flash-player-kde4-11.2.202.280-62.1 References: http://support.novell.com/security/cve/CVE-2013-1378.html http://support.novell.com/security/cve/CVE-2013-1379.html http://support.novell.com/security/cve/CVE-2013-1380.html http://support.novell.com/security/cve/CVE-2013-2555.html https://bugzilla.novell.com/814635

1 0