April 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2013:0659-1: moderate: update for rubygem-activerecord-3_2
by opensuse-security＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Security Update: update for rubygem-activerecord-3_2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0659-1 Rating: moderate References: #809932 Cross-References: CVE-2013-1854 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Changes in rubygem-activerecord-3_2: - add patch to fix security issue: - bug-809932_3-2-attribute_symbols.patch: fix CVE-2013-1854: rubygem-activerecord*: Symbol DoS vulnerability in Active Record (bnc#809932) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-326 - openSUSE 12.2: zypper in -t patch openSUSE-2013-326 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): rubygem-activerecord-3_2-3.2.12-1.4.1 rubygem-activerecord-3_2-doc-3.2.12-1.4.1 - openSUSE 12.2 (i586 x86_64): rubygem-activerecord-3_2-3.2.12-2.17.1 rubygem-activerecord-3_2-doc-3.2.12-2.17.1 References: http://support.novell.com/security/cve/CVE-2013-1854.html https://bugzilla.novell.com/809932

1 0

openSUSE-RU-2013:0658-1: important: yast2-mail: fixed hang after saving mail-server-configuration
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: yast2-mail: fixed hang after saving mail-server-configuration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0658-1 Rating: important References: #800788 Affected Products: openSUSE 12.3 openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with yast2-mail: - bnc#800788: ag_postfix_mastercf process hangs the system, after which it is killed by kernel, when saving mail server settings with Yast "Mail Server" module Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-330 - openSUSE 12.2: zypper in -t patch openSUSE-2013-330 - openSUSE 12.1: zypper in -t patch openSUSE-2013-330 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): yast2-mail-2.21.1-9.5.1 yast2-mail-plugins-2.21.1-9.5.1 - openSUSE 12.2 (noarch): yast2-mail-2.21.1-7.4.1 yast2-mail-plugins-2.21.1-7.4.1 - openSUSE 12.1 (noarch): yast2-mail-2.21.1-2.7.1 yast2-mail-plugins-2.21.1-2.7.1 References: https://bugzilla.novell.com/800788

1 0

openSUSE-RU-2013:0657-1: openttd: Update to the final stable release 1.3.0
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: openttd: Update to the final stable release 1.3.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0657-1 Rating: low References: #810959 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with openttd: - bnc#810959: Update to 1.3.0 (final stable release) - Fix: Station rebuilding could leave reserved tiles which caused crashes later on - Fix: When the count for a scrollbar was 0, the inter distance was subtracted too much causing a scrollbar with a negative size - Fix: Limit aircraft property 0D to 19, since the conversion result to km-ish/h needs to fit into a byte - Fix: Clicking the statusbar crashed, when news were pending but no news were shown yet - Fix: Make editbox character filters also apply to pasted content from clipboard - Fix: Catch exception anonymously, if the exception content is not of interest - Fix: Make sizes of the station preview list and direction selection identical in the station build window - Fix: When allocation of the sprite cache fails, try to allocate less memory and display an error message later on - Fix: Refactor Script Debug GUI to only set widget states in OnInvalidateData - Fix: Do not let gcc include files from the "standard C" include directories to avoid inclusion of header files at the top of the preprocessed nfo files, which cause NFOrenum/GRFcodec to make invalid assumptions about the NFO version - Fix: Minimise gaps feature caused removal to only happen at the signal build interval instead of the implicit interval of 1 - Fix: Green path signals would be shown when building them 'under' a train, and they would keep showing green until they were passed again - Feature: Searching of (missing) content via GrfCrawler - Change: Cleanup goals and cargo monitors of companies when they go bankrupt or are taken over - Change: Apply the same name sorting rules to content and NewGRF list as for the server list - Fix: [SDL] Crash after bootstrap download of 32bits base set due to referencing a deleted mutex - Fix: [SDL] Improve 8bpp hardware palette support. Instead of always requesting SDL_HWPALETTE, it is now only done for 8bp blitters in fullscreen mode - Fix: Set vehicle's service interval is percent flag appropriately on creation - Fix: When choosing a train in a depot to attach a newly purchased wagon to, do not consider trains currently moving in and out of the depot - Fix: [Script] Crash when passing too many parameters - Feature: [NewGRF] Station randomisation triggers - Feature: Settings type filter included in the advanced settings GUI - Change: Revert to opening the vehicle GUI again when cloning vehicles using the clone-button from the depot GUI - Fix: Additional zoom in levels could glitch by a few pixels due to incorrect rounding - Fix: Honour pause_on_newgame setting when running as a dedicated server - Fix: [NewGRF] Prevent access to tile-based variables when tile is invalid - Fix: Do not make overbuilding rivers with canals insanely expensive - Fix: Crash when an infinite loop occurred during loading of a script - Fix: company window was not updated when shares were enabled/disabled - Fix: Trams would get stuck on water - Fix: With YAPF the docking behaviour differed per direction; now favour docking in the direction you approached - Fix: Do not stop loading if there are reservations left - Fix: Reserve all capacity while unloading to avoid 'stealing' cargo, i.e. loading cargo onto a second vehicle when the first cannot be fully filled yet - Fix: If a platform is enlarged and there is a reservation, reserve the whole platform - Fix: Inconsistencies in the 'thanks to' lists - Fix: Set 'replace when old' flag when replacing an autoreplace - Fix: Deleting implicit orders was not able to deal with the various side-effects of DeleteOrder - Fix: Redraw autoreplace window properly in network games - Fix: Never put a space between cargo name and subtype - Fix: Do not allow order refit to be set for no-load orders - Fix: Make group names unique per company and vehicle type - Fix: Prevent more NewGRFs being selected than is possible to load - Fix: [GS] Do not try to pause or unpause crashed scripts - Fix: [Squirrel] Update line information before processing 'while' token of 'do'-'while' statement - Fix: Add a tooltip to the mapsize selection mentioning possible deviations - Fix: When an object built on a river is removed, restore the river - Fix: Upgrading bridges could steal road types - Fix: [GS] Allow GSs to pass negative integer string parameters - Fix: 'Train loads/unloads cargo' station animation triggers on individual platform - Fix: Cached station animation triggers were only set when removing parts of a station - Fix: The station build window did not update when the station spread changed - Fix: Do not unpause the game when closing the highscore window if it was already paused before the highscore screen was shown - Fix: Improvements and fixes for the base translation - Fix: Allow downgrade of road bridges in the scenario editor - Fix: Invalidate station selection window when station spread changes - Fix: Distribute GS compat_version.nut with OpenTTD - Fix: Pass proper UTF-16 strings instead of UCS-2 to ICU in order to preserve characters outside the BMP - Fix: A completely emptied vehicle could trigger an assert - Fix: Desync when NewGRF changes the stats related to acceleration (power, weight, tractive effort, etc) during service or 32 day triggers - Fix: Incorrect Romanian own name - Fix: Make invalid sprite references to mapgen sprites behave the same as invalid references between recolour and real sprites - Fix: Do not let UFOs and coal mines clear water - Fix: Do not let UFOs and coal mines destroy depots - Fix: Do not send aircraft to depots that are out of range of the next destination - Fix: Only consider vehicles available in the climate for purchase/depot cell size - Fix: Extend widget data member to 32 bits so that sprite IDs >= 2^16 can be used Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-322 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): openttd-1.3.0-2.4.1 openttd-debuginfo-1.3.0-2.4.1 openttd-dedicated-1.3.0-2.4.1 openttd-dedicated-debuginfo-1.3.0-2.4.1 - openSUSE 12.3 (noarch): openttd-data-1.3.0-2.4.1 References: https://bugzilla.novell.com/810959

1 0

openSUSE-RU-2013:0656-1: ibus: split off gnome bulk into separate subpackage
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: ibus: split off gnome bulk into separate subpackage ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0656-1 Rating: low References: #812298 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with ibus: - bnc#812298: - Put gnome-shell integration files into separate package because these (since openSUSE 12.3) pull in a lot of new unwanted packages on a GNOME-less system compared to 12.2. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-321 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): ibus-1.4.2-4.6.1 ibus-debuginfo-1.4.2-4.6.1 ibus-debugsource-1.4.2-4.6.1 ibus-devel-1.4.2-4.6.1 ibus-gtk-1.4.2-4.6.1 ibus-gtk-debuginfo-1.4.2-4.6.1 ibus-gtk3-1.4.2-4.6.1 ibus-gtk3-debuginfo-1.4.2-4.6.1 libibus-1_0-0-1.4.2-4.6.1 libibus-1_0-0-debuginfo-1.4.2-4.6.1 typelib-1_0-IBus-1_0-1.4.2-4.6.1 - openSUSE 12.3 (x86_64): ibus-gtk-32bit-1.4.2-4.6.1 ibus-gtk-debuginfo-32bit-1.4.2-4.6.1 ibus-gtk3-32bit-1.4.2-4.6.1 ibus-gtk3-debuginfo-32bit-1.4.2-4.6.1 libibus-1_0-0-32bit-1.4.2-4.6.1 libibus-1_0-0-debuginfo-32bit-1.4.2-4.6.1 - openSUSE 12.3 (noarch): ibus-gnome-shell-1.4.2-4.6.1 References: https://bugzilla.novell.com/812298

1 0

openSUSE-RU-2013:0655-1: resource-agents: update to v3.9.5 and several fixes
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: resource-agents: update to v3.9.5 and several fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0655-1 Rating: low References: #791690 #794479 #811930 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This udpate fixes the following issues with resource-agents: - ocf-shellfuncs: use $HA_VARLIB as default destination for trace files - VirtualDomain: allow for custom migrateport - IPaddr2: support nic:iflabel format in nic parameter - upstream cs: ddad46 (v3.9.5) - ocf-shellfuncs: RA tracing - IPaddr2: make sure that some ARP send program runs (bnc#811930) - pgsql: add check_wal_receiver parameter - pgsql: support starting as Hot Standby - nfsserver: improve rpc.statd support - nfsserver: add option -n for rpc.statd (bnc#794479) - nfsserver: make the retry time for sm-notify configurable - nfsserver: make sm-notify running in the foreground configurable - exportfs: handle world exportfs embelishment for '*' (bnc#791690) - jboss: set JAVA_OPTS correctly - pound: use correct default for control-binary - pound: No error when stopping pound and no pound is running - Squid: support systems using IPv6 - Xinetd: do not fail in stop if the daemon is not running - Xinetd: improve finding Xinetd process (thanks to Vadym Chepkov) - SendArp: add background parameter - SendArp: fix monitor - ocft: print the actual case names when testing - ocft: make only the updated test-case file - ocft: add "incremental" mode (ocft test -i) - include a copy of LGPL license file - upstream cs: e265f0 (3.9.5 rc1+) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-317 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): ldirectord-3.9.5-2.4.1 resource-agents-3.9.5-2.4.1 resource-agents-debuginfo-3.9.5-2.4.1 resource-agents-debugsource-3.9.5-2.4.1 References: https://bugzilla.novell.com/791690 https://bugzilla.novell.com/794479 https://bugzilla.novell.com/811930

1 0

openSUSE-RU-2013:0654-1: x3270: Added BuildRequires: bdftopcf to fix font compilation bug
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: x3270: Added BuildRequires: bdftopcf to fix font compilation bug ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0654-1 Rating: low References: #809972 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with x3270: - bnc#809972: Added BuildRequires: bdftopcf to fix font compilation bug Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-318 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): x3270-3.3.12-526.4.1 x3270-debuginfo-3.3.12-526.4.1 x3270-debugsource-3.3.12-526.4.1 References: https://bugzilla.novell.com/809972

1 0

openSUSE-RU-2013:0653-1: moderate: iptraf: Update to new git snapshot 1.1.3.1+git49
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: iptraf: Update to new git snapshot 1.1.3.1+git49 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0653-1 Rating: moderate References: #812080 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with iptraf: - Update to new git snapshot 1.1.3.1+git49 * remove TokenRing and ISDN support * 802.1ad and QinQ VLAN handling * restore functionality of iptraf -B (bnc#812080) - Depend on 3.1 headers (source uses ETH_P_QINQ1) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-320 - openSUSE 12.2: zypper in -t patch openSUSE-2013-320 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): iptraf-debugsource-1.1.3.1+git89-5.4.1 iptraf-ng-1.1.3.1+git89-5.4.1 iptraf-ng-debuginfo-1.1.3.1+git89-5.4.1 - openSUSE 12.2 (i586 x86_64): iptraf-debugsource-1.1.3.1+git89-2.4.1 iptraf-ng-1.1.3.1+git89-2.4.1 iptraf-ng-debuginfo-1.1.3.1+git89-2.4.1 References: https://bugzilla.novell.com/812080

1 0

openSUSE-RU-2013:0652-1: aaa_base: Several fixes
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: aaa_base: Several fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0652-1 Rating: low References: #809842 #811870 #812291 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update fixes the following issues with aaa_base: - bnc#811870: chkconfig: rh compatible check mode - bnc#809842: Mark file as exectuable - bnc#812291: check /lib/systemd for compatibility Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-316 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): aaa_base-12.3-14.8.1 aaa_base-debuginfo-12.3-14.8.1 aaa_base-debugsource-12.3-14.8.1 aaa_base-extras-12.3-14.8.1 aaa_base-malloccheck-12.3-14.8.1 References: https://bugzilla.novell.com/809842 https://bugzilla.novell.com/811870 https://bugzilla.novell.com/812291

1 0

openSUSE-RU-2013:0651-1: moderate: pango: fixed prerequirements for the biarch libraries
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: pango: fixed prerequirements for the biarch libraries ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0651-1 Rating: moderate References: #792646 #803529 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: pango was updated to fix a bug with biarch packages: - bnc#792646, bnc#803529#c1: Change requires pango-tools in baselibs.conf to prereq in order to: + Match the behavior of the native lib in the .spec file, where we use (Requires(post). + Ensure the right version of pango-tools is installed when the post script is being executed. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-319 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libpango-1_0-0-1.32.5-3.4.2 libpango-1_0-0-debuginfo-1.32.5-3.4.2 pango-debugsource-1.32.5-3.4.2 pango-devel-1.32.5-3.4.2 pango-module-thai-lang-1.32.5-3.4.2 pango-module-thai-lang-debuginfo-1.32.5-3.4.2 pango-tools-1.32.5-3.4.2 pango-tools-debuginfo-1.32.5-3.4.2 typelib-1_0-Pango-1_0-1.32.5-3.4.2 - openSUSE 12.3 (x86_64): libpango-1_0-0-32bit-1.32.5-3.4.2 libpango-1_0-0-debuginfo-32bit-1.32.5-3.4.2 pango-devel-32bit-1.32.5-3.4.2 pango-module-thai-lang-32bit-1.32.5-3.4.2 pango-module-thai-lang-debuginfo-32bit-1.32.5-3.4.2 pango-tools-32bit-1.32.5-3.4.2 pango-tools-debuginfo-32bit-1.32.5-3.4.2 References: https://bugzilla.novell.com/792646 https://bugzilla.novell.com/803529

1 0

openSUSE-RU-2013:0650-1: gst-fluendo-mp3: Update to version 18
by maintenance＠opensuse.org 10 Apr '13

10 Apr '13

openSUSE Recommended Update: gst-fluendo-mp3: Update to version 18 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0650-1 Rating: low References: #811745 Affected Products: openSUSE 12.3:NonFree ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for gst-fluendo-mp3: - Update to version 18 (except ppc module) (bnc#811745): + Introduce full support for GStreamer 1.0 - Add gstreamer-fluendo-mp3 sub package, with the GStreamer 1.0 plugins. - Update source from svn (as of March 24, 2013). - Replace gstreamer-0_10-devel BuildRequires with gstreamer-0_10-plugins-base-devel and gstreamer-plugins-base-devel, allowing to run gst-inspect-1.0 and gst-inspect-0.10, for both plugin versions. - Replace gstlibdir defines with gst_0_10_libdir and gst_1_0_libdir for the two gstreamer locations (0.10 and 1.0). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2013-315 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3:NonFree (i586 x86_64): gstreamer-0_10-fluendo-mp3-18-9.7.1 gstreamer-fluendo-mp3-18-9.7.1 References: https://bugzilla.novell.com/811745

1 0