June 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:0887-1: yast2-firewall: Fixed checking for running firewall service
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: yast2-firewall: Fixed checking for running firewall service ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0887-1 Rating: low References: #812606 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with yast2-firewall: - bnc#812606: Fixed checking for running firewall service Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-361 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): yast2-firewall-2.21.2.1-5.4.1 References: https://bugzilla.novell.com/812606

1 0

openSUSE-RU-2013:0886-1: iproute2: Don't propogate mounts out of ip for netns to root context
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: iproute2: Don't propogate mounts out of ip for netns to root context ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0886-1 Rating: low References: #816215 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issue with iproute2: - bnc#816215: Don't propogate mounts out of ip for netns to root context (backported fix from 3.8) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-379 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): iproute2-3.7.0-2.5.1 iproute2-debuginfo-3.7.0-2.5.1 iproute2-debugsource-3.7.0-2.5.1 libnetlink-devel-3.7.0-2.5.1 - openSUSE 12.3 (noarch): iproute2-doc-3.7.0-2.5.1 References: https://bugzilla.novell.com/816215

1 0

openSUSE-SU-2013:0885-1: moderate: update for libvirt
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0885-1 Rating: moderate References: #810893 #820397 Cross-References: CVE-2013-1962 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update of libvirt fixes two problems: - fix leak after listing all volumes - CVE-2013-1962 ca697e90-CVE-2013-1962.patch bnc#820397 - Fix parsing of bond interface XML 5ba077dc-iface-bond.patch bnc#810893 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-463 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libvirt-1.0.2-1.6.1 libvirt-client-1.0.2-1.6.1 libvirt-client-debuginfo-1.0.2-1.6.1 libvirt-debuginfo-1.0.2-1.6.1 libvirt-debugsource-1.0.2-1.6.1 libvirt-devel-1.0.2-1.6.1 libvirt-doc-1.0.2-1.6.1 libvirt-lock-sanlock-1.0.2-1.6.1 libvirt-lock-sanlock-debuginfo-1.0.2-1.6.1 libvirt-python-1.0.2-1.6.1 libvirt-python-debuginfo-1.0.2-1.6.1 - openSUSE 12.3 (x86_64): libvirt-client-32bit-1.0.2-1.6.1 libvirt-client-debuginfo-32bit-1.0.2-1.6.1 libvirt-devel-32bit-1.0.2-1.6.1 References: http://support.novell.com/security/cve/CVE-2013-1962.html https://bugzilla.novell.com/810893 https://bugzilla.novell.com/820397

1 0

openSUSE-RU-2013:0884-1: poppler: fix displaying of some characters
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: poppler: fix displaying of some characters ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0884-1 Rating: low References: Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: Poppler was updated to fix displaying of some unicode characters. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-91 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libpoppler-cpp0-0.14.4-9.1 libpoppler-cpp0-debuginfo-0.14.4-9.1 libpoppler-devel-0.14.4-9.1 libpoppler-glib-devel-0.14.4-9.1 libpoppler-glib5-0.14.4-9.1 libpoppler-glib5-debuginfo-0.14.4-9.1 libpoppler7-0.14.4-9.1 libpoppler7-debuginfo-0.14.4-9.1 poppler-debugsource-0.14.4-9.1 poppler-tools-0.14.4-9.1 poppler-tools-debuginfo-0.14.4-9.1 - openSUSE 11.4 (noarch): libpoppler-doc-0.14.4-9.1 References:

1 0

openSUSE-SU-2013:0883-1: moderate: Update for clamav to version 0.97.8.
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: Update for clamav to version 0.97.8. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0883-1 Rating: moderate References: #816865 Cross-References: CVE-2013-2020 CVE-2013-2021 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: New clamav version 0.97.8 (bnc#816865): * CVE-2013-2020: Fix heap corruption * CVE-2013-2021: Fix overflow due to PDF key length computation. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-84 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): clamav-0.97.8-21.1 clamav-debuginfo-0.97.8-21.1 clamav-debugsource-0.97.8-21.1 - openSUSE 11.4 (noarch): clamav-db-0.97.8-21.1 References: http://support.novell.com/security/cve/CVE-2013-2020.html http://support.novell.com/security/cve/CVE-2013-2021.html https://bugzilla.novell.com/816865

1 0

openSUSE-RU-2013:0882-1: important: libchewing: ambiguous data package name causes missing dependency
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: libchewing: ambiguous data package name causes missing dependency ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0882-1 Rating: important References: #808338 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issue with libchewing: - bnc#808338: + retrack updstream sources + remove ambiguous libchewing package + enable ncurses wide-char and thread-safe (w6) + enable python + new sub-packages: chewing-data, python-chewing Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-466 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): chewing-data-0.3.4.git20130424-2.4.1 libchewing-debugsource-0.3.4.git20130424-2.4.1 libchewing-devel-0.3.4.git20130424-2.4.1 libchewing3-0.3.4.git20130424-2.4.1 libchewing3-debuginfo-0.3.4.git20130424-2.4.1 python-chewing-0.3.4.git20130424-2.4.1 - openSUSE 12.3 (x86_64): libchewing3-32bit-0.3.4.git20130424-2.4.1 libchewing3-debuginfo-32bit-0.3.4.git20130424-2.4.1 References: https://bugzilla.novell.com/808338

1 0

openSUSE-SU-2013:0881-1: moderate: Update for clamav to version 0.97.8.
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: Update for clamav to version 0.97.8. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0881-1 Rating: moderate References: #816865 Cross-References: CVE-2013-2020 CVE-2013-2021 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: New clamav version 0.97.8 (bnc#816865): * CVE-2013-2020: Fix heap corruption * CVE-2013-2021: Fix overflow due to PDF key length computation. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-430 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): clamav-0.97.8-5.8.1 clamav-debuginfo-0.97.8-5.8.1 clamav-debugsource-0.97.8-5.8.1 References: http://support.novell.com/security/cve/CVE-2013-2020.html http://support.novell.com/security/cve/CVE-2013-2021.html https://bugzilla.novell.com/816865

1 0

openSUSE-SU-2013:0880-1: moderate: update for gpg2
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: update for gpg2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0880-1 Rating: moderate References: #780943 #798465 Cross-References: CVE-2012-6085 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update of gpg2 fixes two security issues: * fix for CVE-2012-6085 (bnc#798465) added gpg2-CVE-2012-6085.patch * fix for bnc#780943 added gpg2-set_umask_before_open_outfile.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-455 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): gpg2-2.0.19-5.4.1 gpg2-debuginfo-2.0.19-5.4.1 gpg2-debugsource-2.0.19-5.4.1 - openSUSE 12.3 (noarch): gpg2-lang-2.0.19-5.4.1 References: http://support.novell.com/security/cve/CVE-2012-6085.html https://bugzilla.novell.com/780943 https://bugzilla.novell.com/798465

1 0

openSUSE-SU-2013:0879-1: moderate: curl
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0879-1 Rating: moderate References: #814655 Cross-References: CVE-2013-1944 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-71 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): curl-7.21.2-29.1 curl-debuginfo-7.21.2-29.1 libcurl-devel-7.21.2-29.1 libcurl4-7.21.2-29.1 - openSUSE 11.4 (x86_64): libcurl4-32bit-7.21.2-29.1 libcurl4-debuginfo-32bit-7.21.2-29.1 - openSUSE 11.4 (ia64): libcurl4-debuginfo-x86-7.21.2-29.1 libcurl4-x86-7.21.2-29.1 - openSUSE 11.4 (i586): libcurl4-debuginfo-7.21.2-29.1 References: http://support.novell.com/security/cve/CVE-2013-1944.html https://bugzilla.novell.com/814655

1 0

openSUSE-SU-2013:0878-1: moderate: update for xorg-x11-server
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0878-1 Rating: moderate References: #814653 Cross-References: CVE-2013-1940 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: xorg-x11-server was updated fixing following security issue: In some cases, input events are sent to X servers not currently the VT owner,allowing a user to capture passwords. This is a fix for CVE-2013-1940. (bnc#814653) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-75 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): xorg-x11-Xvnc-7.6_1.9.3-15.36.1 xorg-x11-Xvnc-debuginfo-7.6_1.9.3-15.36.1 xorg-x11-server-7.6_1.9.3-15.36.1 xorg-x11-server-debuginfo-7.6_1.9.3-15.36.1 xorg-x11-server-debugsource-7.6_1.9.3-15.36.1 xorg-x11-server-extra-7.6_1.9.3-15.36.1 xorg-x11-server-extra-debuginfo-7.6_1.9.3-15.36.1 xorg-x11-server-sdk-7.6_1.9.3-15.36.1 References: http://support.novell.com/security/cve/CVE-2013-1940.html https://bugzilla.novell.com/814653

1 0

openSUSE-RU-2013:0877-1: moderate: systemd: various bugfixes
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: systemd: various bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0877-1 Rating: moderate References: #746595 #789589 #801878 #808319 #809646 #809695 #809820 #812874 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: systemd received lots of bugfixes: - Set ACL on (binary driver) nvidia devices (bnc#808319), avoiding the need to have the local user in the 'video' group. - Improved readahead performance on spinning media with ext4. - Fixed vacuum logic in journal (bnc#789589). - Ensure LSB provides are correctly handled if also referenced as dependencies (bnc#809646). - Ensure udevd is started (and therefore static devices are created) before mounting (bnc#809820). - Update systemd-sysv-convert to search services files in new location (bnc#809695). - Do not turn off services if fsck fails (bnc#812874) - Wait for processes killed by SIGTERM before killing them with SIGKILL. - Update systemctl-options.patch to only apply SYSTEMCTL_OPTIONS to systemctl command (bnc#801878). - Fixed disabling CapsLock and enabling NumLock (bnc#746595) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-384 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libgudev-1_0-0-195-13.25.1 libgudev-1_0-0-debuginfo-195-13.25.1 libgudev-1_0-devel-195-13.25.1 libudev-devel-195-13.25.1 libudev-mini-devel-195-13.25.1 libudev-mini1-195-13.25.1 libudev-mini1-debuginfo-195-13.25.1 libudev1-195-13.25.1 libudev1-debuginfo-195-13.25.1 systemd-195-13.25.1 systemd-analyze-195-13.25.1 systemd-debuginfo-195-13.25.1 systemd-debugsource-195-13.25.1 systemd-devel-195-13.25.1 systemd-logger-195-13.25.1 systemd-mini-195-13.25.1 systemd-mini-analyze-195-13.25.1 systemd-mini-debuginfo-195-13.25.1 systemd-mini-debugsource-195-13.25.1 systemd-mini-devel-195-13.25.1 systemd-mini-sysvinit-195-13.25.1 systemd-sysvinit-195-13.25.1 typelib-1_0-GUdev-1_0-195-13.25.1 udev-195-13.25.1 udev-debuginfo-195-13.25.1 udev-mini-195-13.25.1 udev-mini-debuginfo-195-13.25.1 - openSUSE 12.3 (x86_64): libgudev-1_0-0-32bit-195-13.25.1 libgudev-1_0-0-debuginfo-32bit-195-13.25.1 libudev1-32bit-195-13.25.1 libudev1-debuginfo-32bit-195-13.25.1 systemd-32bit-195-13.25.1 systemd-debuginfo-32bit-195-13.25.1 References: https://bugzilla.novell.com/746595 https://bugzilla.novell.com/789589 https://bugzilla.novell.com/801878 https://bugzilla.novell.com/808319 https://bugzilla.novell.com/809646 https://bugzilla.novell.com/809695 https://bugzilla.novell.com/809820 https://bugzilla.novell.com/812874

1 0

openSUSE-SU-2013:0876-1: moderate: curl: fixed cookie tail matching problem
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: curl: fixed cookie tail matching problem ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0876-1 Rating: moderate References: #814655 Cross-References: CVE-2013-1944 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: libcurl was updated to fix a cookie tail matching flaw which could lead to attackers gaining cookie access depending on domain names. (CVE-2013-1944,bnc#814655) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-369 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): curl-7.28.1-4.13.1 curl-debuginfo-7.28.1-4.13.1 curl-debugsource-7.28.1-4.13.1 libcurl-devel-7.28.1-4.13.1 libcurl4-7.28.1-4.13.1 libcurl4-debuginfo-7.28.1-4.13.1 - openSUSE 12.3 (x86_64): libcurl4-32bit-7.28.1-4.13.1 libcurl4-debuginfo-32bit-7.28.1-4.13.1 References: http://support.novell.com/security/cve/CVE-2013-1944.html https://bugzilla.novell.com/814655

1 0

openSUSE-SU-2013:0875-1: moderate: seamonkey: 2.17 update
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: seamonkey: 2.17 update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0875-1 Rating: moderate References: #813026 #814101 Cross-References: CVE-2013-0788 CVE-2013-0789 CVE-2013-0792 CVE-2013-0793 CVE-2013-0794 CVE-2013-0795 CVE-2013-0796 CVE-2013-0800 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: Seamonkey was updated to the 2.17 release, fixing bugs and security issues: - update to SeaMonkey 2.17 (bnc#813026) * requires NSPR 4.9.5 and NSS 3.14.3 * mozilla-webrtc-ppc.patch included upstream * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789 Miscellaneous memory safety hazards * MFSA 2013-31/CVE-2013-0800 (bmo#825721) Out-of-bounds write in Cairo library * MFSA 2013-35/CVE-2013-0796 (bmo#827106) WebGL crash with Mesa graphics driver on Linux * MFSA 2013-36/CVE-2013-0795 (bmo#825697) Bypass of SOW protections allows cloning of protected nodes * MFSA 2013-37/CVE-2013-0794 (bmo#626775) Bypass of tab-modal dialog origin disclosure * MFSA 2013-38/CVE-2013-0793 (bmo#803870) Cross-site scripting (XSS) using timed history navigations * MFSA 2013-39/CVE-2013-0792 (bmo#722831) Memory corruption while rendering grayscale PNG images - use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch) - revert to use GStreamer 0.10 on 12.3 (bnc#814101) (remove mozilla-gstreamer-1.patch) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-400 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): seamonkey-2.17-1.8.4 seamonkey-debuginfo-2.17-1.8.4 seamonkey-debugsource-2.17-1.8.4 seamonkey-dom-inspector-2.17-1.8.4 seamonkey-irc-2.17-1.8.4 seamonkey-translations-common-2.17-1.8.4 seamonkey-translations-other-2.17-1.8.4 seamonkey-venkman-2.17-1.8.4 References: http://support.novell.com/security/cve/CVE-2013-0788.html http://support.novell.com/security/cve/CVE-2013-0789.html http://support.novell.com/security/cve/CVE-2013-0792.html http://support.novell.com/security/cve/CVE-2013-0793.html http://support.novell.com/security/cve/CVE-2013-0794.html http://support.novell.com/security/cve/CVE-2013-0795.html http://support.novell.com/security/cve/CVE-2013-0796.html http://support.novell.com/security/cve/CVE-2013-0800.html https://bugzilla.novell.com/813026 https://bugzilla.novell.com/814101

1 0

openSUSE-RU-2013:0874-1: collectl to fix memory information collection
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: collectl to fix memory information collection ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0874-1 Rating: low References: #812989 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update resolves an issue where collectl does not collect memory information -- all counters are 0. (bnc#812989) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-478 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): collectl-3.4.3-12.18.1 References: https://bugzilla.novell.com/812989

1 0

openSUSE-SU-2013:0873-1: moderate: update for strongswan
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0873-1 Rating: moderate References: #815236 Cross-References: CVE-2013-2944 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - Applied upstream patch for security vulnerability discovered by Kevin Wojtysiak in ECDSA signature verification of the strongswan openssl plugin (bnc#815236, CVE-2013-2944) [0003-Check-return-value-of-ECDSA_Verify-correctly.patch] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-412 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): strongswan-5.0.1-4.4.1 strongswan-debugsource-5.0.1-4.4.1 strongswan-ipsec-5.0.1-4.4.1 strongswan-ipsec-debuginfo-5.0.1-4.4.1 strongswan-libs0-5.0.1-4.4.1 strongswan-libs0-debuginfo-5.0.1-4.4.1 strongswan-mysql-5.0.1-4.4.1 strongswan-mysql-debuginfo-5.0.1-4.4.1 strongswan-nm-5.0.1-4.4.1 strongswan-nm-debuginfo-5.0.1-4.4.1 strongswan-sqlite-5.0.1-4.4.1 strongswan-sqlite-debuginfo-5.0.1-4.4.1 - openSUSE 12.3 (noarch): strongswan-doc-5.0.1-4.4.1 References: http://support.novell.com/security/cve/CVE-2013-2944.html https://bugzilla.novell.com/815236

1 0

openSUSE-RU-2013:0872-1: squid: Update to 3.2.11 and fixes some issues with systemd
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: squid: Update to 3.2.11 and fixes some issues with systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0872-1 Rating: low References: #802635 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the follwoing issues with squid: - Packaging : fixed systemd squid.service + Fix bnc#802635 (creating cache struture fail on first call) + Removed commented patch lines + Rework on squid.service ExecStartPre line remove dependency on unfunctionnal wrapper squid_cache_build.sh. New revision for squid.service (using only sed) handle multiple cache_dir line. Added sed as require + Fixed Type=forking and remove the use off -N (non daemon flag) + Fixed missing pid file + Structural : add all -k to end of Exec/Stop line + Ulimit : Added LimitNOFile=4096 ( same value as in /etc/sysconfig) but there's no way to decode dynamically /etc/sysconfig + Remove syslog.target ( no need anymore : advise from fcrozat ) - Changes for squid 3.2.11 and 3.2.10 release (29 April 2013) + Fix enter_suid/leave_suid build errors in ip/Intercept.cc + GNU Hurd: define MAP_NORESERVE as no-op when missing + Bug #3833: Option '-k' is not present in squidclient man page + Bug #3817: Memory leak in SSL cert validate for alt_name peer certs + Bug #3822: Locate LDAP and SASL headers in /usr/local/include for BSD support + Bug #3825: basic_ncsa_auth segfaulting with glibc-2.17 + Bug #3774: -k reconfigure drops rock + Bug #3565: Resuming postponed accept kills Squid + HTTP/1.1: partial support for no-cache and private controls with parameters + ssl_crtd: helpers dying during startup on ARM + Updated copyright for icons/SN.png squid-3.2-11813.patch + Revert r11810 - tools.h does not exist in 3.2 squid-3.2-11812.patch - Changes to squid-3.2.9 (12 Mar 2013): + Regression fix: Accept-Language header parse + Bug 3673: Silence 'Failed to select source' messages + Fix authentication headers sent on peer digest requests + Fix build error on Solaris, OpenIndiana, Omnios - Changes to squid-3.2.8 (02 Mar 2013): + Bug 3767: tcp_outgoing_tos/mark ACLs do not obey acl_uses_indirect_client + Bug 3763: diskd Error: no filename in shm buffer + Bug 3752: objects that cannot be cached in memory are not cached on disk + Bug 3753: Removes the domain from the cache_peer server pconn key + Bug 3749: IDENT lookup using wrong ports to identify the user + Bug 3723: tcp_outgoing_tos/mark broken for CONNECT requests + Bug 3686: cache_dir max-size default fails + Bug 3515: crash in FtpStateData::ftpTimeout + Bug 3329: Quieten orphan Comm::Connection messages + Make squid -z for cache_dir rock preserve the rock DB + Fixed several server connect problems * ... and some build issues on Solaris, OpenIndiana, MacOS X * ... and some documentation and debugs polishing Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-423 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): squid-3.2.11-3.4.1 squid-debuginfo-3.2.11-3.4.1 squid-debugsource-3.2.11-3.4.1 References: https://bugzilla.novell.com/802635

1 0

openSUSE-RU-2013:0870-1: collectl to fix memory information collection
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: collectl to fix memory information collection ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0870-1 Rating: low References: #812989 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update resolves an issue where collectl does not collect memory information -- all counters are 0. (bnc#812989) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-478 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (noarch): collectl-3.4.3-10.8.1 References: https://bugzilla.novell.com/812989

1 0

openSUSE-SU-2013:0865-1: moderate: Mesa: security and bugfix update
by opensuse-security＠opensuse.org 06 Jun '13

06 Jun '13

openSUSE Security Update: Mesa: security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0865-1 Rating: moderate References: #814947 #815451 #821855 Cross-References: CVE-2013-1993 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This Mesa update fixes the following security bug: CVE-2013-1993: Integer overflows in XF86DRIOpenConnection and XF86DRIGetClientDriverName were fixed that could lead to client crashes when using a malicious X server. This update fixes the following issue for Mesa on openSUSE 12.3: - bnc#814947, fdo#62141: Make sure we do render between two hiz flushes Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-366 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): Mesa-8.0.4-20.23.1 Mesa-debuginfo-8.0.4-20.23.1 Mesa-debugsource-8.0.4-20.23.1 Mesa-devel-8.0.4-20.23.1 Mesa-libEGL-devel-8.0.4-20.23.1 Mesa-libEGL1-8.0.4-20.23.1 Mesa-libEGL1-debuginfo-8.0.4-20.23.1 Mesa-libGL-devel-8.0.4-20.23.1 Mesa-libGL1-8.0.4-20.23.1 Mesa-libGL1-debuginfo-8.0.4-20.23.1 Mesa-libGLESv1_CM-devel-8.0.4-20.23.1 Mesa-libGLESv1_CM1-8.0.4-20.23.1 Mesa-libGLESv1_CM1-debuginfo-8.0.4-20.23.1 Mesa-libGLESv2-2-8.0.4-20.23.1 Mesa-libGLESv2-2-debuginfo-8.0.4-20.23.1 Mesa-libGLESv2-devel-8.0.4-20.23.1 Mesa-libGLU-devel-8.0.4-20.23.1 Mesa-libGLU1-8.0.4-20.23.1 Mesa-libGLU1-debuginfo-8.0.4-20.23.1 Mesa-libIndirectGL1-8.0.4-20.23.1 Mesa-libIndirectGL1-debuginfo-8.0.4-20.23.1 Mesa-libglapi0-8.0.4-20.23.1 Mesa-libglapi0-debuginfo-8.0.4-20.23.1 libOSMesa8-8.0.4-20.23.1 libOSMesa8-debuginfo-8.0.4-20.23.1 libXvMC_nouveau-8.0.4-20.23.1 libXvMC_nouveau-debuginfo-8.0.4-20.23.1 libXvMC_r300-8.0.4-20.23.1 libXvMC_r300-debuginfo-8.0.4-20.23.1 libXvMC_r600-8.0.4-20.23.1 libXvMC_r600-debuginfo-8.0.4-20.23.1 libXvMC_softpipe-8.0.4-20.23.1 libXvMC_softpipe-debuginfo-8.0.4-20.23.1 libgbm-devel-0.0.0-20.23.1 libgbm1-0.0.0-20.23.1 libgbm1-debuginfo-0.0.0-20.23.1 libvdpau_nouveau-8.0.4-20.23.1 libvdpau_nouveau-debuginfo-8.0.4-20.23.1 libvdpau_r300-8.0.4-20.23.1 libvdpau_r300-debuginfo-8.0.4-20.23.1 libvdpau_r600-8.0.4-20.23.1 libvdpau_r600-debuginfo-8.0.4-20.23.1 libvdpau_softpipe-8.0.4-20.23.1 libvdpau_softpipe-debuginfo-8.0.4-20.23.1 libxatracker-devel-1.0.0-20.23.1 libxatracker1-1.0.0-20.23.1 libxatracker1-debuginfo-1.0.0-20.23.1 - openSUSE 12.2 (x86_64): Mesa-32bit-8.0.4-20.23.1 Mesa-debuginfo-32bit-8.0.4-20.23.1 Mesa-devel-32bit-8.0.4-20.23.1 Mesa-libEGL-devel-32bit-8.0.4-20.23.1 Mesa-libEGL1-32bit-8.0.4-20.23.1 Mesa-libEGL1-debuginfo-32bit-8.0.4-20.23.1 Mesa-libGL-devel-32bit-8.0.4-20.23.1 Mesa-libGL1-32bit-8.0.4-20.23.1 Mesa-libGL1-debuginfo-32bit-8.0.4-20.23.1 Mesa-libGLESv1_CM-devel-32bit-8.0.4-20.23.1 Mesa-libGLESv1_CM1-32bit-8.0.4-20.23.1 Mesa-libGLESv1_CM1-debuginfo-32bit-8.0.4-20.23.1 Mesa-libGLESv2-2-32bit-8.0.4-20.23.1 Mesa-libGLESv2-2-debuginfo-32bit-8.0.4-20.23.1 Mesa-libGLESv2-devel-32bit-8.0.4-20.23.1 Mesa-libGLU-devel-32bit-8.0.4-20.23.1 Mesa-libGLU1-32bit-8.0.4-20.23.1 Mesa-libGLU1-debuginfo-32bit-8.0.4-20.23.1 Mesa-libIndirectGL1-32bit-8.0.4-20.23.1 Mesa-libIndirectGL1-debuginfo-32bit-8.0.4-20.23.1 Mesa-libglapi0-32bit-8.0.4-20.23.1 Mesa-libglapi0-debuginfo-32bit-8.0.4-20.23.1 libOSMesa8-32bit-8.0.4-20.23.1 libOSMesa8-debuginfo-32bit-8.0.4-20.23.1 libXvMC_nouveau-32bit-8.0.4-20.23.1 libXvMC_nouveau-debuginfo-32bit-8.0.4-20.23.1 libXvMC_r300-32bit-8.0.4-20.23.1 libXvMC_r300-debuginfo-32bit-8.0.4-20.23.1 libXvMC_r600-32bit-8.0.4-20.23.1 libXvMC_r600-debuginfo-32bit-8.0.4-20.23.1 libXvMC_softpipe-32bit-8.0.4-20.23.1 libXvMC_softpipe-debuginfo-32bit-8.0.4-20.23.1 libgbm-devel-32bit-0.0.0-20.23.1 libgbm1-32bit-0.0.0-20.23.1 libgbm1-debuginfo-32bit-0.0.0-20.23.1 libvdpau_nouveau-32bit-8.0.4-20.23.1 libvdpau_nouveau-debuginfo-32bit-8.0.4-20.23.1 libvdpau_r300-32bit-8.0.4-20.23.1 libvdpau_r300-debuginfo-32bit-8.0.4-20.23.1 libvdpau_r600-32bit-8.0.4-20.23.1 libvdpau_r600-debuginfo-32bit-8.0.4-20.23.1 libvdpau_softpipe-32bit-8.0.4-20.23.1 libvdpau_softpipe-debuginfo-32bit-8.0.4-20.23.1 References: http://support.novell.com/security/cve/CVE-2013-1993.html https://bugzilla.novell.com/814947 https://bugzilla.novell.com/815451 https://bugzilla.novell.com/821855

1 0

openSUSE-RU-2013:0863-1: aaa_base: Do not override /etc/adjtime on installation if HWCLOCK is already gone
by maintenance＠opensuse.org 05 Jun '13

05 Jun '13

openSUSE Recommended Update: aaa_base: Do not override /etc/adjtime on installation if HWCLOCK is already gone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0863-1 Rating: low References: #791485 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issue with aaa_base: - bnc#791485: Do not override /etc/adjtime on installation if HWCLOCK is already gone Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-470 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): aaa_base-12.2-2.18.1 aaa_base-debuginfo-12.2-2.18.1 aaa_base-debugsource-12.2-2.18.1 aaa_base-extras-12.2-2.18.1 aaa_base-malloccheck-12.2-2.18.1 References: https://bugzilla.novell.com/791485

1 0

openSUSE-RU-2013:0862-1: kdelibs4: Various fixes from upstream, one of which is a security issue
by maintenance＠opensuse.org 05 Jun '13

05 Jun '13

openSUSE Recommended Update: kdelibs4: Various fixes from upstream, one of which is a security issue ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0862-1 Rating: low References: Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This udpate fixes the following issues with kdelibs4: - Added patches from upstream: * kde#294445: Fix KDirLister's rootItem not being updated when renaming the directory. The root item kept having the old URL. * kde#319428: security fix, for not showing error messages in HTTP URL's Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-464 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): kdelibs4-4.8.5-2.28.2 kdelibs4-branding-upstream-4.8.5-2.28.2 kdelibs4-core-4.8.5-2.28.2 kdelibs4-core-debuginfo-4.8.5-2.28.2 kdelibs4-debuginfo-4.8.5-2.28.2 kdelibs4-debugsource-4.8.5-2.28.2 kdelibs4-doc-4.8.5-2.28.2 kdelibs4-doc-debuginfo-4.8.5-2.28.2 libkde4-4.8.5-2.28.2 libkde4-debuginfo-4.8.5-2.28.2 libkde4-devel-4.8.5-2.28.2 libkdecore4-4.8.5-2.28.2 libkdecore4-debuginfo-4.8.5-2.28.2 libkdecore4-devel-4.8.5-2.28.2 libkdecore4-devel-debuginfo-4.8.5-2.28.2 libksuseinstall-devel-4.8.5-2.28.2 libksuseinstall1-4.8.5-2.28.2 libksuseinstall1-debuginfo-4.8.5-2.28.2 - openSUSE 12.2 (x86_64): libkde4-32bit-4.8.5-2.28.2 libkde4-debuginfo-32bit-4.8.5-2.28.2 libkdecore4-32bit-4.8.5-2.28.2 libkdecore4-debuginfo-32bit-4.8.5-2.28.2 libksuseinstall1-32bit-4.8.5-2.28.2 libksuseinstall1-debuginfo-32bit-4.8.5-2.28.2 - openSUSE 12.2 (noarch): kdelibs4-apidocs-4.8.5-2.28.1 References:

1 0

openSUSE-RU-2013:0861-1: mysql-connector-cpp: Adjusted to make LibreOffice updates easier.
by maintenance＠opensuse.org 05 Jun '13

05 Jun '13

openSUSE Recommended Update: mysql-connector-cpp: Adjusted to make LibreOffice updates easier. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0861-1 Rating: low References: Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issue with mysql-connector-cpp: - merge with mysql-connector-c++ - fixed broken build - Adjusted to make LibreOffice updates easier. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-465 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libmysqlcppconn-devel-1.1.0-5.6.1 libmysqlcppconn5-1.1.0-5.6.1 libmysqlcppconn5-debuginfo-1.1.0-5.6.1 mysql-connector-cpp-debugsource-1.1.0-5.6.1 References:

1 0

openSUSE-RU-2013:0860-1: important: yast2-mail: fixed hang after ag_postfix_mastercf is killed
by maintenance＠opensuse.org 05 Jun '13

05 Jun '13

openSUSE Recommended Update: yast2-mail: fixed hang after ag_postfix_mastercf is killed ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0860-1 Rating: important References: #800788 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issue with yast2-mail: - bnc#800788: fixed hang of the system after the ag_postfix_mastercf process is killed by kernel, when saving mail server settings with Yast "Mail Server" module - Mark permissions files as %config - The ldap tables was not proper. All functions for forwarding and delivery must be placed in alias_maps and not in virtual_alias_map. Forwarding or delivering actions in virtual_alias_map may cause mail loops. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-468 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (noarch): yast2-mail-2.21.2-7.8.1 yast2-mail-plugins-2.21.2-7.8.1 References: https://bugzilla.novell.com/800788

1 0

openSUSE-OU-2013:0854-1: ibus:unified monochrome systray icon in KDE
by maintenance＠opensuse.org 03 Jun '13

03 Jun '13

openSUSE Optional Update: ibus:unified monochrome systray icon in KDE ______________________________________________________________________________ Announcement ID: openSUSE-OU-2013:0854-1 Rating: low References: #820218 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update fixes the following issue with ibus: - bnc#820218: ibus qt tray icon is not in keeping with KDE monochrome icon look. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-462 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): ibus-1.4.1-3.5.1 ibus-debuginfo-1.4.1-3.5.1 ibus-debugsource-1.4.1-3.5.1 ibus-devel-1.4.1-3.5.1 ibus-gtk-1.4.1-3.5.1 ibus-gtk-debuginfo-1.4.1-3.5.1 ibus-gtk3-1.4.1-3.5.1 ibus-gtk3-debuginfo-1.4.1-3.5.1 libibus-1_0-0-1.4.1-3.5.1 libibus-1_0-0-debuginfo-1.4.1-3.5.1 typelib-1_0-IBus-1_0-1.4.1-3.5.1 - openSUSE 12.2 (x86_64): ibus-gtk-32bit-1.4.1-3.5.1 ibus-gtk-debuginfo-32bit-1.4.1-3.5.1 ibus-gtk3-32bit-1.4.1-3.5.1 ibus-gtk3-debuginfo-32bit-1.4.1-3.5.1 libibus-1_0-0-32bit-1.4.1-3.5.1 libibus-1_0-0-debuginfo-32bit-1.4.1-3.5.1 - openSUSE 12.2 (noarch): ibus-branding-openSUSE-KDE-1.4.1-3.5.1 References: https://bugzilla.novell.com/820218

1 0

openSUSE-RU-2013:0853-1: ocfs2-tools, libdlm: Replace NAME= with SYMLINK+= in udev rules
by maintenance＠opensuse.org 03 Jun '13

03 Jun '13

openSUSE Recommended Update: ocfs2-tools, libdlm: Replace NAME= with SYMLINK+= in udev rules ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0853-1 Rating: low References: #779718 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with ocfs2-tools and libdlm: - bnc#779718: Replace NAME= with SYMLINK+= in udev rules Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-461 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libdlm-3.00.01-22.6.1 libdlm-debuginfo-3.00.01-22.6.1 libdlm-debugsource-3.00.01-22.6.1 libdlm-devel-3.00.01-22.6.1 libdlm3-3.00.01-22.6.1 libdlm3-debuginfo-3.00.01-22.6.1 ocfs2-tools-1.8.0-9.4.1 ocfs2-tools-debuginfo-1.8.0-9.4.1 ocfs2-tools-debugsource-1.8.0-9.4.1 ocfs2-tools-devel-1.8.0-9.4.1 ocfs2-tools-o2cb-1.8.0-9.4.1 ocfs2-tools-o2cb-debuginfo-1.8.0-9.4.1 ocfs2console-1.8.0-9.4.1 ocfs2console-debuginfo-1.8.0-9.4.1 References: https://bugzilla.novell.com/779718

1 0

openSUSE-RU-2013:0852-1: taglib: fixed handling of id3 tags with non-ascii characters
by maintenance＠opensuse.org 03 Jun '13

03 Jun '13

openSUSE Recommended Update: taglib: fixed handling of id3 tags with non-ascii characters ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0852-1 Rating: low References: #780658 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with taglib: - bnc#780658: Fixed handling of id3 tags with non-ascii characters Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-457 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libtag-devel-1.7.2-2.8.1 libtag1-1.7.2-2.8.1 libtag1-debuginfo-1.7.2-2.8.1 libtag_c0-1.7.2-2.8.1 libtag_c0-debuginfo-1.7.2-2.8.1 taglib-1.7.2-2.8.1 taglib-debugsource-1.7.2-2.8.1 - openSUSE 12.2 (x86_64): libtag1-32bit-1.7.2-2.8.1 libtag1-debuginfo-32bit-1.7.2-2.8.1 libtag_c0-32bit-1.7.2-2.8.1 libtag_c0-debuginfo-32bit-1.7.2-2.8.1 References: https://bugzilla.novell.com/780658

1 0