May 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2013:0746-1: moderate: krb5
by opensuse-security＠opensuse.org 03 May '13

03 May '13

openSUSE Security Update: krb5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0746-1 Rating: moderate References: #816413 Cross-References: CVE-2013-1416 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - fix prep_reprocess_req NULL pointer deref CVE-2013-1416 (bnc#816413) bug-816413-CVE-2013-1416-prep_reprocess_req-NULL-ptr-deref.d if Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-401 - openSUSE 12.1: zypper in -t patch openSUSE-2013-401 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): krb5-1.10.2-3.16.1 krb5-client-1.10.2-3.16.1 krb5-client-debuginfo-1.10.2-3.16.1 krb5-debuginfo-1.10.2-3.16.1 krb5-debugsource-1.10.2-3.16.1 krb5-devel-1.10.2-3.16.1 krb5-mini-1.10.2-3.16.1 krb5-mini-debuginfo-1.10.2-3.16.1 krb5-mini-debugsource-1.10.2-3.16.1 krb5-mini-devel-1.10.2-3.16.1 krb5-plugin-kdb-ldap-1.10.2-3.16.1 krb5-plugin-kdb-ldap-debuginfo-1.10.2-3.16.1 krb5-plugin-preauth-pkinit-1.10.2-3.16.1 krb5-plugin-preauth-pkinit-debuginfo-1.10.2-3.16.1 krb5-server-1.10.2-3.16.1 krb5-server-debuginfo-1.10.2-3.16.1 - openSUSE 12.2 (x86_64): krb5-32bit-1.10.2-3.16.1 krb5-debuginfo-32bit-1.10.2-3.16.1 krb5-devel-32bit-1.10.2-3.16.1 - openSUSE 12.2 (noarch): krb5-doc-1.10.2-3.16.2 - openSUSE 12.1 (i586 x86_64): krb5-1.9.1-24.20.1 krb5-client-1.9.1-24.20.1 krb5-client-debuginfo-1.9.1-24.20.1 krb5-debuginfo-1.9.1-24.20.1 krb5-debugsource-1.9.1-24.20.1 krb5-devel-1.9.1-24.20.1 krb5-plugin-kdb-ldap-1.9.1-24.20.1 krb5-plugin-kdb-ldap-debuginfo-1.9.1-24.20.1 krb5-plugin-preauth-pkinit-1.9.1-24.20.1 krb5-plugin-preauth-pkinit-debuginfo-1.9.1-24.20.1 krb5-server-1.9.1-24.20.1 krb5-server-debuginfo-1.9.1-24.20.1 - openSUSE 12.1 (x86_64): krb5-32bit-1.9.1-24.20.1 krb5-debuginfo-32bit-1.9.1-24.20.1 krb5-devel-32bit-1.9.1-24.20.1 - openSUSE 12.1 (ia64): krb5-debuginfo-x86-1.9.1-24.20.1 krb5-x86-1.9.1-24.20.1 References: http://support.novell.com/security/cve/CVE-2013-1416.html https://bugzilla.novell.com/816413

1 0

openSUSE-SU-2013:0745-1: moderate: update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 03 May '13

03 May '13

openSUSE Security Update: update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0745-1 Rating: moderate References: #816720 Cross-References: CVE-2013-0401 CVE-2013-1488 CVE-2013-1518 CVE-2013-1537 CVE-2013-1557 CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2415 CVE-2013-2417 CVE-2013-2419 CVE-2013-2420 CVE-2013-2421 CVE-2013-2422 CVE-2013-2423 CVE-2013-2424 CVE-2013-2426 CVE-2013-2429 CVE-2013-2430 CVE-2013-2431 CVE-2013-2436 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes 21 vulnerabilities is now available. Description: - apply aarch64 patches on openSUSE 12.3+, EM_AARCH64 is not defined in earlier releases - update to icedtea-2.3.9 (bnc#816720) * Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization - S8001031, CVE-2013-2419: Better font processing - S8001040, CVE-2013-1537: Rework RMI model - S8001322: Refactor deserialization - S8001329, CVE-2013-1557: Augment RMI logging - S8003335: Better handling of Finalizer thread - S8003445: Adjust JAX-WS to focus on API - S8003543, CVE-2013-2415: Improve processing of MTOM attachments - S8004261: Improve input validation - S8004336, CVE-2013-2431: Better handling of method handle intrinsic frames - S8004986, CVE-2013-2383: Better handling of glyph table - S8004987, CVE-2013-2384: Improve font layout - S8004994, CVE-2013-1569: Improve checking of glyph table - S8005432: Update access to JAX-WS - S8005943: (process) Improved Runtime.exec - S8006309: More reliable control panel operation - S8006435, CVE-2013-2424: Improvements in JMX - S8006790: Improve checking for windows - S8006795: Improve font warning messages - S8007406: Improve accessibility of AccessBridge - S8007617, CVE-2013-2420: Better validation of images - S8007667, CVE-2013-2430: Better image reading - S8007918, CVE-2013-2429: Better image writing - S8008140: Better method handle resolution - S8009049, CVE-2013-2436: Better method handle binding - S8009063, CVE-2013-2426: Improve reliability of ConcurrentHashMap - S8009305, CVE-2013-0401: Improve AWT data transfer - S8009677, CVE-2013-2423: Better setting of setters - S8009699, CVE-2013-2421: Methodhandle lookup - S8009814, CVE-2013-1488: Better driver management - S8009857, CVE-2013-2422: Problem with plugin * Backports - S7130662, RH928500: GTK file dialog crashes with a NPE * Bug fixes - PR1363: Fedora 19 / rawhide FTBFS SIGILL - PR1401: Fix Zero build on 2.3.8 - Fix offset problem in ICU LETableReference. - Change -Werror fix to preserve OpenJDK default. - PR1303: Correct #ifdef to #if - PR1404: Failure to bootstrap with ecj 4.2 - Added url as source. Please see http://en.opensuse.org/SourceUrls - icedtea-2.3.8-zero-patches.patch: remove patch not applicable to zero compatible hotspot - java-1.7.0-openjdk-fork.patch: Add support for architectures without fork syscall - java-1.7.0-openjdk-aarch64.patch: Add support for aarch64 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-402 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): java-1_7_0-openjdk-1.7.0.6-3.37.1 java-1_7_0-openjdk-debuginfo-1.7.0.6-3.37.1 java-1_7_0-openjdk-debugsource-1.7.0.6-3.37.1 java-1_7_0-openjdk-demo-1.7.0.6-3.37.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.6-3.37.1 java-1_7_0-openjdk-devel-1.7.0.6-3.37.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.6-3.37.1 java-1_7_0-openjdk-javadoc-1.7.0.6-3.37.1 java-1_7_0-openjdk-src-1.7.0.6-3.37.1 References: http://support.novell.com/security/cve/CVE-2013-0401.html http://support.novell.com/security/cve/CVE-2013-1488.html http://support.novell.com/security/cve/CVE-2013-1518.html http://support.novell.com/security/cve/CVE-2013-1537.html http://support.novell.com/security/cve/CVE-2013-1557.html http://support.novell.com/security/cve/CVE-2013-1569.html http://support.novell.com/security/cve/CVE-2013-2383.html http://support.novell.com/security/cve/CVE-2013-2384.html http://support.novell.com/security/cve/CVE-2013-2415.html http://support.novell.com/security/cve/CVE-2013-2417.html http://support.novell.com/security/cve/CVE-2013-2419.html http://support.novell.com/security/cve/CVE-2013-2420.html http://support.novell.com/security/cve/CVE-2013-2421.html http://support.novell.com/security/cve/CVE-2013-2422.html http://support.novell.com/security/cve/CVE-2013-2423.html http://support.novell.com/security/cve/CVE-2013-2424.html http://support.novell.com/security/cve/CVE-2013-2426.html http://support.novell.com/security/cve/CVE-2013-2429.html http://support.novell.com/security/cve/CVE-2013-2430.html http://support.novell.com/security/cve/CVE-2013-2431.html http://support.novell.com/security/cve/CVE-2013-2436.html https://bugzilla.novell.com/816720

1 0

openSUSE-RU-2013:0742-1: moderate: zsh: Don't set globdots option, it might lead to unexpected problems
by maintenance＠opensuse.org 02 May '13

02 May '13

openSUSE Recommended Update: zsh: Don't set globdots option, it might lead to unexpected problems ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0742-1 Rating: moderate References: #815556 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with zsh: - bnc#815556: Don't set globdots option. The globdots option leads to '*' matching dotfiles, which could cause unexpected problems Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-381 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): zsh-4.3.17-2.4.1 zsh-debuginfo-4.3.17-2.4.1 zsh-debugsource-4.3.17-2.4.1 zsh-htmldoc-4.3.17-2.4.1 References: https://bugzilla.novell.com/815556

1 0

openSUSE-RU-2013:0741-1: gkrellm: build against libsensors
by maintenance＠opensuse.org 02 May '13

02 May '13

openSUSE Recommended Update: gkrellm: build against libsensors ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0741-1 Rating: low References: #803081 #803967 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issue with gkrellm: - bnc#803081, bnc#803967: really build against libsensors Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-387 - openSUSE 12.1: zypper in -t patch openSUSE-2013-387 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): gkrellm-2.3.5-12.6.1 gkrellm-debuginfo-2.3.5-12.6.1 gkrellm-devel-2.3.5-12.6.1 - openSUSE 12.2 (noarch): gkrellm-lang-2.3.5-12.6.1 - openSUSE 12.1 (i586 x86_64): gkrellm-2.3.5-7.6.1 gkrellm-debuginfo-2.3.5-7.6.1 gkrellm-devel-2.3.5-7.6.1 - openSUSE 12.1 (noarch): gkrellm-lang-2.3.5-7.6.1 References: https://bugzilla.novell.com/803081 https://bugzilla.novell.com/803967

1 0

openSUSE-RU-2013:0739-1: gnome-control-center: reallow changing timezone by default
by maintenance＠opensuse.org 02 May '13

02 May '13

openSUSE Recommended Update: gnome-control-center: reallow changing timezone by default ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0739-1 Rating: low References: #796055 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: gnome-control-center should not require the root password for changing timezone when system policy allows all users to do so, a regression caused by a previous update (bnc#796055) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-386 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): gnome-control-center-3.4.3.1-3.25.1 gnome-control-center-debuginfo-3.4.3.1-3.25.1 gnome-control-center-debugsource-3.4.3.1-3.25.1 gnome-control-center-devel-3.4.3.1-3.25.1 gnome-control-center-user-faces-3.4.3.1-3.25.1 gnome-settings-daemon-3.4.2-3.14.1 gnome-settings-daemon-debuginfo-3.4.2-3.14.1 gnome-settings-daemon-debugsource-3.4.2-3.14.1 gnome-settings-daemon-devel-3.4.2-3.14.1 - openSUSE 12.2 (noarch): gnome-control-center-branding-upstream-3.4.3.1-3.25.1 gnome-control-center-lang-3.4.3.1-3.25.1 gnome-settings-daemon-lang-3.4.2-3.14.1 References: https://bugzilla.novell.com/796055

1 0

openSUSE-RU-2013:0738-1: gnome-games: several fixes
by maintenance＠opensuse.org 02 May '13

02 May '13

openSUSE Recommended Update: gnome-games: several fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0738-1 Rating: low References: #815331 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: gnome-games was updated to a crash with glines and several issues with glchess (bnc#815331): - glines: fix segfault in 32-bit version (on openSUSE 12.2) - glchess: fix being able to castle when square being moved over is threatened by a pawn - glchess: fix AI hang when Phalanx attempts to promote - glchess: only allow pawns to move en passant - glchess: when moving en passant, remove captured pawn from the board - glchess: do not allow castling if the rook has been taken - glchess: fix "human" board orientation when playing as Black Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-376 - openSUSE 12.1: zypper in -t patch openSUSE-2013-376 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): glchess-3.4.2-3.6.1 glchess-debuginfo-3.4.2-3.6.1 glines-3.4.2-3.6.1 glines-debuginfo-3.4.2-3.6.1 gnect-3.4.2-3.6.1 gnect-debuginfo-3.4.2-3.6.1 gnibbles-3.4.2-3.6.1 gnibbles-debuginfo-3.4.2-3.6.1 gnobots2-3.4.2-3.6.1 gnobots2-debuginfo-3.4.2-3.6.1 gnome-games-3.4.2-3.6.1 gnome-games-debugsource-3.4.2-3.6.1 gnome-games-recommended-3.4.2-3.6.1 gnome-games-support-3.4.2-3.6.1 gnome-games-support-debuginfo-3.4.2-3.6.1 gnome-sudoku-3.4.2-3.6.1 gnomine-3.4.2-3.6.1 gnomine-debuginfo-3.4.2-3.6.1 gnotravex-3.4.2-3.6.1 gnotravex-debuginfo-3.4.2-3.6.1 gnotski-3.4.2-3.6.1 gnotski-debuginfo-3.4.2-3.6.1 gtali-3.4.2-3.6.1 gtali-debuginfo-3.4.2-3.6.1 iagno-3.4.2-3.6.1 iagno-debuginfo-3.4.2-3.6.1 lightsoff-3.4.2-3.6.1 lightsoff-debuginfo-3.4.2-3.6.1 mahjongg-3.4.2-3.6.1 mahjongg-debuginfo-3.4.2-3.6.1 quadrapassel-3.4.2-3.6.1 quadrapassel-debuginfo-3.4.2-3.6.1 swell-foop-3.4.2-3.6.1 swell-foop-debuginfo-3.4.2-3.6.1 - openSUSE 12.2 (noarch): glchess-lang-3.4.2-3.6.1 glines-lang-3.4.2-3.6.1 gnect-lang-3.4.2-3.6.1 gnibbles-lang-3.4.2-3.6.1 gnobots2-lang-3.4.2-3.6.1 gnome-games-support-lang-3.4.2-3.6.1 gnome-sudoku-lang-3.4.2-3.6.1 gnomine-lang-3.4.2-3.6.1 gnotravex-lang-3.4.2-3.6.1 gnotski-lang-3.4.2-3.6.1 gtali-lang-3.4.2-3.6.1 iagno-lang-3.4.2-3.6.1 lightsoff-lang-3.4.2-3.6.1 mahjongg-lang-3.4.2-3.6.1 quadrapassel-lang-3.4.2-3.6.1 swell-foop-lang-3.4.2-3.6.1 - openSUSE 12.1 (i586 x86_64): glchess-3.2.1-2.9.1 glchess-debuginfo-3.2.1-2.9.1 glines-3.2.1-2.9.1 glines-debuginfo-3.2.1-2.9.1 gnect-3.2.1-2.9.1 gnect-debuginfo-3.2.1-2.9.1 gnibbles-3.2.1-2.9.1 gnibbles-debuginfo-3.2.1-2.9.1 gnobots2-3.2.1-2.9.1 gnobots2-debuginfo-3.2.1-2.9.1 gnome-games-3.2.1-2.9.1 gnome-games-debugsource-3.2.1-2.9.1 gnome-games-recommended-3.2.1-2.9.1 gnome-games-support-3.2.1-2.9.1 gnome-games-support-debuginfo-3.2.1-2.9.1 gnome-sudoku-3.2.1-2.9.1 gnomine-3.2.1-2.9.1 gnomine-debuginfo-3.2.1-2.9.1 gnotravex-3.2.1-2.9.1 gnotravex-debuginfo-3.2.1-2.9.1 gnotski-3.2.1-2.9.1 gnotski-debuginfo-3.2.1-2.9.1 gtali-3.2.1-2.9.1 gtali-debuginfo-3.2.1-2.9.1 iagno-3.2.1-2.9.1 iagno-debuginfo-3.2.1-2.9.1 lightsoff-3.2.1-2.9.1 mahjongg-3.2.1-2.9.1 mahjongg-debuginfo-3.2.1-2.9.1 quadrapassel-3.2.1-2.9.1 quadrapassel-debuginfo-3.2.1-2.9.1 swell-foop-3.2.1-2.9.1 - openSUSE 12.1 (noarch): glchess-lang-3.2.1-2.9.1 glines-lang-3.2.1-2.9.1 gnect-lang-3.2.1-2.9.1 gnibbles-lang-3.2.1-2.9.1 gnobots2-lang-3.2.1-2.9.1 gnome-games-support-lang-3.2.1-2.9.1 gnome-sudoku-lang-3.2.1-2.9.1 gnomine-lang-3.2.1-2.9.1 gnotravex-lang-3.2.1-2.9.1 gnotski-lang-3.2.1-2.9.1 gtali-lang-3.2.1-2.9.1 iagno-lang-3.2.1-2.9.1 lightsoff-lang-3.2.1-2.9.1 mahjongg-lang-3.2.1-2.9.1 quadrapassel-lang-3.2.1-2.9.1 swell-foop-lang-3.2.1-2.9.1 References: https://bugzilla.novell.com/815331

1 0

openSUSE-RU-2013:0737-1: freerdp: Upstream upgrade to bugfix release 1.0.2 and several fixes
by maintenance＠opensuse.org 02 May '13

02 May '13

openSUSE Recommended Update: freerdp: Upstream upgrade to bugfix release 1.0.2 and several fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0737-1 Rating: low References: #785437 #793611 #809412 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update fixes the following issues for freerdp: - bnc#809412: Update to 1.0.2 + xfreerdp: * new parameter --from-stdin - prompts for unspecified arguments username, password, domain and host. * fix compability with x2go * fix keyboard state in remote app * documentation fixes * fixed crash when started with --authonly + libfreerdp-core: * several memory leaks and double frees were fixed * support for FastPath PDUs up to 32767 * register audio only if plugin is registered * load extensions after argument parsing + libfreerdp-utils: * fixed crash when HOME environment variable wasn't set + xfreerdp-server * deadlock fixed * accept TLSv1 and SSLv3 + smartcard * don't incorrectly set SCARD_STATE_IGNORE + libfreerdp-codec * performance improvement + libfreerdp-gdi + support for PatBlt DPa operation + plugin * ignore CHANNEL_FLAG_SUSPEND/CHANNEL_FLAG_RESUME to prevent possible crash + known problems: * If windows input language is set to german pressing the divde key (/) on the keypad results in minus (-) - only enable SSE2 on x86* - disable SSE2 for ARM and powerpc - bnc#793611: build with WITH_SSE2=ON as freerdp now uses runtime detection - bnc#785437: fixed a segfault in case device name is not provided - fixed divide key (/) on keypad for 1.0x series Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-359 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): freerdp-1.0.2-4.8.1 freerdp-debuginfo-1.0.2-4.8.1 freerdp-debugsource-1.0.2-4.8.1 freerdp-devel-1.0.2-4.8.1 libfreerdp-1_0-1.0.2-4.8.1 libfreerdp-1_0-debuginfo-1.0.2-4.8.1 libfreerdp-1_0-plugins-1.0.2-4.8.1 libfreerdp-1_0-plugins-debuginfo-1.0.2-4.8.1 References: https://bugzilla.novell.com/785437 https://bugzilla.novell.com/793611 https://bugzilla.novell.com/809412

1 0

openSUSE-RU-2013:0736-1: moderate: Softwarestack update 04/13
by maintenance＠opensuse.org 02 May '13

02 May '13

openSUSE Recommended Update: Softwarestack update 04/13 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0736-1 Rating: moderate References: #772965 #773467 #779740 #793809 #804219 #806568 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update fixes the following issues for the softwarestack: - zypper: * bnc#779740: Fix 'zypper lu' also listing products * bnc#793809: Fix -x printing edition values for arch-old * bnc#804219: Allow re-install with different arch upon explicit request * bnc#806568: fix zypper disregarding zypp.conf cache path settings * translation-updates - libzypp: * bnc#772965: Implement $ZYPP_LOCK_TIMEOUT: number of seconds to wait for a zypplock becoming available * Fix unnecessary creation of temporary Resolavbles * Relax evaluation of patch category tags (case insensitive) * bnc#773467: Fixed typo * Erase any old repo instance from pool when (re)loading from cache * translation-updates Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-364 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libqdialogsolver1-1.3.0-14.8.2 libqdialogsolver1-debuginfo-1.3.0-14.8.2 libqdialogsolver1-debugsource-1.3.0-14.8.2 libqdialogsolver1-devel-1.3.0-14.8.2 libsolv-debugsource-0.1.1-4.9.1 libsolv-demo-0.1.1-4.9.1 libsolv-demo-debuginfo-0.1.1-4.9.1 libsolv-devel-0.1.1-4.9.1 libsolv-devel-debuginfo-0.1.1-4.9.1 libsolv-tools-0.1.1-4.9.1 libsolv-tools-debuginfo-0.1.1-4.9.1 libzypp-11.9.0-2.12.2 libzypp-bindings-debugsource-0.5.13-2.4.1 libzypp-debuginfo-11.9.0-2.12.2 libzypp-debugsource-11.9.0-2.12.2 libzypp-devel-11.9.0-2.12.2 libzypp-testsuite-tools-4.2.11-14.12.1 perl-solv-0.1.1-4.9.1 perl-solv-debuginfo-0.1.1-4.9.1 perl-zypp-0.5.13-2.4.1 perl-zypp-debuginfo-0.5.13-2.4.1 python-solv-0.1.1-4.9.1 python-solv-debuginfo-0.1.1-4.9.1 python-zypp-0.5.13-2.4.1 python-zypp-debuginfo-0.5.13-2.4.1 ruby-solv-0.1.1-4.9.1 ruby-solv-debuginfo-0.1.1-4.9.1 ruby-zypp-0.5.13-2.4.1 ruby-zypp-debuginfo-0.5.13-2.4.1 zypp-plugin-python-0.3-5.5.1 zypper-1.7.12-1.13.1 zypper-debuginfo-1.7.12-1.13.1 zypper-debugsource-1.7.12-1.13.1 - openSUSE 12.2 (noarch): libzypp-testsuite-tools-data-4.2.11-14.12.1 zypper-aptitude-1.7.12-1.13.1 zypper-log-1.7.12-1.13.1 References: https://bugzilla.novell.com/772965 https://bugzilla.novell.com/773467 https://bugzilla.novell.com/779740 https://bugzilla.novell.com/793809 https://bugzilla.novell.com/804219 https://bugzilla.novell.com/806568

1 0

openSUSE-SU-2013:0735-1: moderate: update for icedtea-web
by opensuse-security＠opensuse.org 02 May '13

02 May '13

openSUSE Security Update: update for icedtea-web ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0735-1 Rating: moderate References: #815596 Cross-References: CVE-2013-1926 CVE-2013-1927 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: - update to 1.3.2 (bnc#815596) - Security Updates * CVE-2013-1927, RH884705: fixed gifar vulnerability * CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path. - Common * Added new option in itw-settings which allows users to set JVM arguments when plugin is initialized. - NetX * PR580: http://www.horaoficial.cl/ loads improperly - Plugin * PR1260: IcedTea-Web should not rely on GTK obsoletes icedtea-web-remove-gtk-dep.patch * PR1157: Applets can hang browser after fatal exception Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-372 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): icedtea-web-1.3.2-22.1 icedtea-web-debuginfo-1.3.2-22.1 icedtea-web-debugsource-1.3.2-22.1 - openSUSE 12.1 (noarch): icedtea-web-javadoc-1.3.2-22.1 References: http://support.novell.com/security/cve/CVE-2013-1926.html http://support.novell.com/security/cve/CVE-2013-1927.html https://bugzilla.novell.com/815596

1 0

openSUSE-RU-2013:0734-1: gnuchess: update to version 6.0.2
by maintenance＠opensuse.org 02 May '13

02 May '13

openSUSE Recommended Update: gnuchess: update to version 6.0.2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0734-1 Rating: low References: #786745 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with gnuchess: - update to 6.0.2 + New option --addbook to compile a book. + Maximum file name length of EPD files extended to 127 characters. + Book file allowed to be read only unless the BookLearn option is set (bnc#786745) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-356 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): gnuchess-6.0.2-2.4.1 gnuchess-debuginfo-6.0.2-2.4.1 gnuchess-debugsource-6.0.2-2.4.1 References: https://bugzilla.novell.com/786745

1 0