June 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:1020-1: xf86-video-mga-update: Restrict kernel driver matching to g200 server chips
by maintenance＠opensuse.org 17 Jun '13

17 Jun '13

openSUSE Recommended Update: xf86-video-mga-update: Restrict kernel driver matching to g200 server chips ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1020-1 Rating: low References: #823658 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with xf86-video-mga-update: - bnc#823658: Restrict kernel driver matching to g200 server chips. Otherwise we might catch devices handled by matroxfb, not the mgag200 kms driver. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-496 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): xf86-video-mga-1.6.2-2.4.1 xf86-video-mga-debuginfo-1.6.2-2.4.1 xf86-video-mga-debugsource-1.6.2-2.4.1 References: https://bugzilla.novell.com/823658

1 0

openSUSE-RU-2013:1019-1: libcap: check return value of libusb_init
by maintenance＠opensuse.org 17 Jun '13

17 Jun '13

openSUSE Recommended Update: libcap: check return value of libusb_init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1019-1 Rating: low References: #822165 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with libcap: - bnc#822165: check return value of libusb_init Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-495 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libpcap-debugsource-1.3.0-2.4.1 libpcap-devel-1.3.0-2.4.1 libpcap1-1.3.0-2.4.1 libpcap1-debuginfo-1.3.0-2.4.1 - openSUSE 12.3 (x86_64): libpcap-devel-32bit-1.3.0-2.4.1 libpcap1-32bit-1.3.0-2.4.1 libpcap1-debuginfo-32bit-1.3.0-2.4.1 References: https://bugzilla.novell.com/822165

1 0

openSUSE-RU-2013:1018-1: release-notes-openSUSE: Additional entries and updated translations
by maintenance＠opensuse.org 17 Jun '13

17 Jun '13

openSUSE Recommended Update: release-notes-openSUSE: Additional entries and updated translations ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1018-1 Rating: low References: #819707 #823432 #823485 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update adds the following entries to release-notes-openSUSE: - bnc#823432: Non-existent Floppy Drive Enabled in BIOS Causes Hang - bnc#819707: systemd: Persistent Journal across Reboots - bnc#823485: Updated translations Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-497 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): release-notes-openSUSE-12.3.10-1.22.1 References: https://bugzilla.novell.com/819707 https://bugzilla.novell.com/823432 https://bugzilla.novell.com/823485

1 0

openSUSE-SU-2013:1016-1: moderate: update for nfs-utils
by opensuse-security＠opensuse.org 14 Jun '13

14 Jun '13

openSUSE Security Update: update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1016-1 Rating: moderate References: #809226 #813464 #817651 Cross-References: CVE-2013-1923 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update of nfs-utils includes several bug and security fixes. - gssd-reverse-dns-fix: Allow DNS lookups to be avoided when determining kerberos identity of server. The GSSD_OPTIONS sysconfig variable is added so that use of DNS can be enforced for sites that need it. (bnc#813464 CVE-2013-1923) - gssd-n.fix: linux-3.7 changed behaviour of gssd lookups so that "gssd -n" isn't sufficient to stop the use of "machine credentials". This patch add "-N" which stops the new use as well. Also add GSSD_OPTIONS to sysconfig so these flags can be set more easily. (bnc#817651) - mountd-fix-exporting-of-with-sec-setting.patch Fix bug when exporting root filesystem with gss security. (bnc#809226) - mountd-fix-error-check.patch: check for errors with exporting filesystems correctly (bnc#809226) - nfsserver.init: make sure warning about bind= being deprecated goes to terminal and not into /run/nfs/bind.mounts (bnc#809226) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-493 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): nfs-client-1.2.7-2.6.1 nfs-client-debuginfo-1.2.7-2.6.1 nfs-doc-1.2.7-2.6.1 nfs-kernel-server-1.2.7-2.6.1 nfs-kernel-server-debuginfo-1.2.7-2.6.1 nfs-utils-debugsource-1.2.7-2.6.1 References: http://support.novell.com/security/cve/CVE-2013-1923.html https://bugzilla.novell.com/809226 https://bugzilla.novell.com/813464 https://bugzilla.novell.com/817651

1 0

openSUSE-SU-2013:1015-1: moderate: version update for nginx
by opensuse-security＠opensuse.org 14 Jun '13

14 Jun '13

openSUSE Security Update: version update for nginx ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1015-1 Rating: moderate References: #821184 Cross-References: CVE-2013-2070 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This version update for nginx to 1.2.9 includes a security fix and several bugfixes and feature enhancements. (bnc#821184) *) Security: contents of worker process memory might be sent to a client if HTTP backend returned specially crafted response (CVE-2013-2070); the bug had appeared in 1.1.4. - changes with 1.2.8: *) Bugfix: new sessions were not always stored if the "ssl_session_cache shared" directive was used and there was no free space in shared memory. *) Bugfix: responses might hang if subrequests were used and a DNS error happened during subrequest processing. *) Bugfix: in the ngx_http_mp4_module. *) Bugfix: in backend usage accounting. - changes with nginx 1.2.7 *) Change: now if the "include" directive with mask is used on Unix systems, included files are sorted in alphabetical order. *) Change: the "add_header" directive adds headers to 201 responses. *) Feature: the "geo" directive now supports IPv6 addresses in CIDR notation. *) Feature: the "flush" and "gzip" parameters of the "access_log" directive. *) Feature: variables support in the "auth_basic" directive. *) Feature: the $pipe, $request_length, $time_iso8601, and $time_local variables can now be used not only in the "log_format" directive. *) Feature: IPv6 support in the ngx_http_geoip_module. *) Bugfix: nginx could not be built with the ngx_http_perl_module in some cases. *) Bugfix: a segmentation fault might occur in a worker process if the ngx_http_xslt_module was used. *) Bugfix: nginx could not be built on MacOSX in some cases. *) Bugfix: the "limit_rate" directive with high rates might result in truncated responses on 32-bit platforms. *) Bugfix: a segmentation fault might occur in a worker process if the "if" directive was used. *) Bugfix: a "100 Continue" response was issued with "413 Request Entity Too Large" responses. *) Bugfix: the "image_filter", "image_filter_jpeg_quality" and "image_filter_sharpen" directives might be inherited incorrectly. *) Bugfix: "crypt_r() failed" errors might appear if the "auth_basic" directive was used on Linux. *) Bugfix: in backup servers handling. *) Bugfix: proxied HEAD requests might return incorrect response if the "gzip" directive was used. *) Bugfix: a segmentation fault occurred on start or during reconfiguration if the "keepalive" directive was specified more than once in a single upstream block. *) Bugfix: in the "proxy_method" directive. *) Bugfix: a segmentation fault might occur in a worker process if resolver was used with the poll method. *) Bugfix: nginx might hog CPU during SSL handshake with a backend if the select, poll, or /dev/poll methods were used. *) Bugfix: the "[crit] SSL_write() failed (SSL:)" error. *) Bugfix: in the "fastcgi_keep_conn" directive. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-484 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): nginx-1.2.9-3.4.1 nginx-debuginfo-1.2.9-3.4.1 nginx-debugsource-1.2.9-3.4.1 References: http://support.novell.com/security/cve/CVE-2013-2070.html https://bugzilla.novell.com/821184

1 0

openSUSE-SU-2013:1014-1: moderate: update for libXfixes
by opensuse-security＠opensuse.org 14 Jun '13

14 Jun '13

openSUSE Security Update: update for libXfixes ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1014-1 Rating: moderate References: #815451 #821667 Cross-References: CVE-2013-1983 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update of libXfixes fixes an integer overflow issue: - U_0001-integer-overflow-in-XFixesGetCursorImage-CVE-2013-19. patch * integer overflow in XFixesGetCursorImage() [CVE-2013-1983] (bnc#821667, bnc#815451) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-488 - openSUSE 12.2: zypper in -t patch openSUSE-2013-488 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libXfixes-debugsource-5.0-5.4.1 libXfixes-devel-5.0-5.4.1 libXfixes3-5.0-5.4.1 libXfixes3-debuginfo-5.0-5.4.1 - openSUSE 12.3 (x86_64): libXfixes-devel-32bit-5.0-5.4.1 libXfixes3-32bit-5.0-5.4.1 libXfixes3-debuginfo-32bit-5.0-5.4.1 - openSUSE 12.2 (i586 x86_64): libXfixes-debugsource-5.0-2.4.1 libXfixes-devel-5.0-2.4.1 libXfixes3-5.0-2.4.1 libXfixes3-debuginfo-5.0-2.4.1 - openSUSE 12.2 (x86_64): libXfixes-devel-32bit-5.0-2.4.1 libXfixes3-32bit-5.0-2.4.1 libXfixes3-debuginfo-32bit-5.0-2.4.1 References: http://support.novell.com/security/cve/CVE-2013-1983.html https://bugzilla.novell.com/815451 https://bugzilla.novell.com/821667

1 0

openSUSE-SU-2013:1013-1: moderate: update for telepathy-gabble
by opensuse-security＠opensuse.org 14 Jun '13

14 Jun '13

openSUSE Security Update: update for telepathy-gabble ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1013-1 Rating: moderate References: #822586 Cross-References: CVE-2013-1431 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of telepathy-gabble fixes a TLS bypass problem. Changes in telepathy-gabble: - Add telepathy-gabble-cve-2013-1431.patch (bnc#822586). This makes it respect the TLS-required flag on legacy Jabber servers. Identified as CVE-2013-1431. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-492 - openSUSE 12.2: zypper in -t patch openSUSE-2013-492 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): telepathy-gabble-0.17.1-2.8.1 telepathy-gabble-debuginfo-0.17.1-2.8.1 telepathy-gabble-debugsource-0.17.1-2.8.1 telepathy-gabble-xmpp-console-0.17.1-2.8.1 telepathy-gabble-xmpp-console-debuginfo-0.17.1-2.8.1 - openSUSE 12.2 (i586 x86_64): telepathy-gabble-0.16.0-3.8.1 telepathy-gabble-debuginfo-0.16.0-3.8.1 telepathy-gabble-debugsource-0.16.0-3.8.1 telepathy-gabble-xmpp-console-0.16.0-3.8.1 telepathy-gabble-xmpp-console-debuginfo-0.16.0-3.8.1 References: http://support.novell.com/security/cve/CVE-2013-1431.html https://bugzilla.novell.com/822586

1 0

openSUSE-SU-2013:1012-1: moderate: update for nfs-utils
by opensuse-security＠opensuse.org 14 Jun '13

14 Jun '13

openSUSE Security Update: update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1012-1 Rating: moderate References: #809226 #813464 Cross-References: CVE-2013-1923 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update of nfs-utils fixed a DNS spoofing issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-485 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): nfs-client-1.2.6-2.16.1 nfs-client-debuginfo-1.2.6-2.16.1 nfs-doc-1.2.6-2.16.1 nfs-kernel-server-1.2.6-2.16.1 nfs-kernel-server-debuginfo-1.2.6-2.16.1 nfs-utils-debugsource-1.2.6-2.16.1 References: http://support.novell.com/security/cve/CVE-2013-1923.html https://bugzilla.novell.com/809226 https://bugzilla.novell.com/813464

1 0

openSUSE-SU-2013:1011-1: moderate: update for libXrender
by opensuse-security＠opensuse.org 14 Jun '13

14 Jun '13

openSUSE Security Update: update for libXrender ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1011-1 Rating: moderate References: #815451 #821669 Cross-References: CVE-2013-1987 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update of libXrender fixes several integer overflow issues. - U_0001-integer-overflow-in-XRenderQueryFilters-CVE-2013-198. patch, U_0002-integer-overflow-in-XRenderQueryFormats-CVE-2013-198. patch, U_0003-integer-overflow-in-XRenderQueryPictIndexValues-CVE-. patch * integer overflow in XRenderQueryFilters(), XRenderQueryFormats() and XRenderQueryPictIndexValues() [CVE-2013-1987] (bnc#821669, bnc#815451) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-489 - openSUSE 12.2: zypper in -t patch openSUSE-2013-489 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libXrender-debugsource-0.9.7-4.4.1 libXrender-devel-0.9.7-4.4.1 libXrender1-0.9.7-4.4.1 libXrender1-debuginfo-0.9.7-4.4.1 - openSUSE 12.3 (x86_64): libXrender-devel-32bit-0.9.7-4.4.1 libXrender1-32bit-0.9.7-4.4.1 libXrender1-debuginfo-32bit-0.9.7-4.4.1 - openSUSE 12.2 (i586 x86_64): libXrender-debugsource-0.9.7-2.4.1 libXrender-devel-0.9.7-2.4.1 libXrender1-0.9.7-2.4.1 libXrender1-debuginfo-0.9.7-2.4.1 - openSUSE 12.2 (x86_64): libXrender-devel-32bit-0.9.7-2.4.1 libXrender1-32bit-0.9.7-2.4.1 libXrender1-debuginfo-32bit-0.9.7-2.4.1 References: http://support.novell.com/security/cve/CVE-2013-1987.html https://bugzilla.novell.com/815451 https://bugzilla.novell.com/821669

1 0

openSUSE-SU-2013:1010-1: moderate: update for libXv
by opensuse-security＠opensuse.org 14 Jun '13

14 Jun '13

openSUSE Security Update: update for libXv ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1010-1 Rating: moderate References: #815451 #821671 Cross-References: CVE-2013-1989 CVE-2013-2066 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of libXrender fixes several buffer and integer overflow issues. - U_0001-integer-overflow-in-XvQueryPortAttributes-CVE-2013-1. patch, U_0002-integer-overflow-in-XvListImageFormats-CVE-2013-1989. patch, U_0003-integer-overflow-in-XvCreateImage-CVE-2013-1989-3-3.p atch * integer overflow in XvQueryPortAttributes(), XvListImageFormats(), XvCreateImage() [CVE-2013-1989] (bnc#821671, bnc#815451) - U_0001-buffer-overflow-in-XvQueryPortAttributes-CVE-2013-20. patch * buffer overflow in XvQueryPortAttributes() [CVE-2013-2066] (bnc#821671, bnc#815451) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-491 - openSUSE 12.2: zypper in -t patch openSUSE-2013-491 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libXv-debugsource-1.0.7-4.4.1 libXv-devel-1.0.7-4.4.1 libXv1-1.0.7-4.4.1 libXv1-debuginfo-1.0.7-4.4.1 - openSUSE 12.3 (x86_64): libXv-devel-32bit-1.0.7-4.4.1 libXv1-32bit-1.0.7-4.4.1 libXv1-debuginfo-32bit-1.0.7-4.4.1 - openSUSE 12.2 (i586 x86_64): libXv-debugsource-1.0.7-2.4.1 libXv-devel-1.0.7-2.4.1 libXv1-1.0.7-2.4.1 libXv1-debuginfo-1.0.7-2.4.1 - openSUSE 12.2 (x86_64): libXv-devel-32bit-1.0.7-2.4.1 libXv1-32bit-1.0.7-2.4.1 libXv1-debuginfo-32bit-1.0.7-2.4.1 References: http://support.novell.com/security/cve/CVE-2013-1989.html http://support.novell.com/security/cve/CVE-2013-2066.html https://bugzilla.novell.com/815451 https://bugzilla.novell.com/821671

1 0

openSUSE-SU-2013:1009-1: moderate: update for libXext
by opensuse-security＠opensuse.org 14 Jun '13

14 Jun '13

openSUSE Security Update: update for libXext ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1009-1 Rating: moderate References: #815451 #821665 Cross-References: CVE-2013-1982 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update of libXext fixes several integer overflow issues: - U_0001-integer-overflow-in-XcupGetReservedColormapEntries-C. patch, U_0002-integer-overflow-in-XcupStoreColors-CVE-2013-1982-2-. patch, U_0003-several-integer-overflows-in-XdbeGetVisualInfo-CVE-2. patch, U_0004-integer-overflow-in-XeviGetVisualInfo-CVE-2013-1982-. patch, U_0005-integer-overflow-in-XShapeGetRectangles-CVE-2013-198. patch, U_0006-integer-overflow-in-XSyncListSystemCounters-CVE-2013. patch, * integer overflow(s) in XcupGetReservedColormapEntries(), XcupStoreColors(), XdbeGetVisualInfo(), XeviGetVisualInfo(), XShapeGetRectangles(), XSyncListSystemCounters() [CVE-2013-1982] (bnc#821665, bnc#815451) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-487 - openSUSE 12.2: zypper in -t patch openSUSE-2013-487 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libXext-debugsource-1.3.1-4.4.1 libXext-devel-1.3.1-4.4.1 libXext6-1.3.1-4.4.1 libXext6-debuginfo-1.3.1-4.4.1 - openSUSE 12.3 (x86_64): libXext-devel-32bit-1.3.1-4.4.1 libXext6-32bit-1.3.1-4.4.1 libXext6-debuginfo-32bit-1.3.1-4.4.1 - openSUSE 12.2 (i586 x86_64): libXext-debugsource-1.3.1-2.4.1 libXext-devel-1.3.1-2.4.1 libXext6-1.3.1-2.4.1 libXext6-debuginfo-1.3.1-2.4.1 - openSUSE 12.2 (x86_64): libXext-devel-32bit-1.3.1-2.4.1 libXext6-32bit-1.3.1-2.4.1 libXext6-debuginfo-32bit-1.3.1-2.4.1 References: http://support.novell.com/security/cve/CVE-2013-1982.html https://bugzilla.novell.com/815451 https://bugzilla.novell.com/821665

1 0

openSUSE-SU-2013:1008-1: moderate: update for libXt
by opensuse-security＠opensuse.org 14 Jun '13

14 Jun '13

openSUSE Security Update: update for libXt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1008-1 Rating: moderate References: #815451 #821670 Cross-References: CVE-2013-2002 CVE-2013-2005 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of libXt fixes several security issues. - U_0001-unvalidated-length-in-_XtResourceConfigurationEH-CVE. patch * unvalidated length in _XtResourceConfigurationEH [CVE-2013-2002] (bnc#821670, bnc#815451) - U_0001-Unchecked-return-values-of-XGetWindowProperty-CVE-20. patch * Unchecked return values of XGetWindowProperty [CVE-2013-2005] (bnc#821670, bnc#815451) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-490 - openSUSE 12.2: zypper in -t patch openSUSE-2013-490 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libXt-debugsource-1.1.3-4.4.1 libXt-devel-1.1.3-4.4.1 libXt6-1.1.3-4.4.1 libXt6-debuginfo-1.1.3-4.4.1 - openSUSE 12.3 (x86_64): libXt-devel-32bit-1.1.3-4.4.1 libXt6-32bit-1.1.3-4.4.1 libXt6-debuginfo-32bit-1.1.3-4.4.1 - openSUSE 12.2 (i586 x86_64): libXt-debugsource-1.1.3-2.4.1 libXt-devel-1.1.3-2.4.1 libXt6-1.1.3-2.4.1 libXt6-debuginfo-1.1.3-2.4.1 - openSUSE 12.2 (x86_64): libXt-devel-32bit-1.1.3-2.4.1 libXt6-32bit-1.1.3-2.4.1 libXt6-debuginfo-32bit-1.1.3-2.4.1 References: http://support.novell.com/security/cve/CVE-2013-2002.html http://support.novell.com/security/cve/CVE-2013-2005.html https://bugzilla.novell.com/815451 https://bugzilla.novell.com/821670

1 0

openSUSE-SU-2013:1007-1: moderate: update for libxcb
by opensuse-security＠opensuse.org 14 Jun '13

14 Jun '13

openSUSE Security Update: update for libxcb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1007-1 Rating: moderate References: #815451 #821584 Cross-References: CVE-2013-2064 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update of libxcb fixes a integer overflow issue: - U_0001-integer-overflow-in-read_packet-CVE-2013-2064.patch * fixes integer overflow in read_packet() [CVE-2013-2064] (bnc#821584, bnc#815451) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-486 - openSUSE 12.2: zypper in -t patch openSUSE-2013-486 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libxcb-composite0-1.9-2.4.1 libxcb-composite0-debuginfo-1.9-2.4.1 libxcb-damage0-1.9-2.4.1 libxcb-damage0-debuginfo-1.9-2.4.1 libxcb-debugsource-1.9-2.4.1 libxcb-devel-1.9-2.4.1 libxcb-dpms0-1.9-2.4.1 libxcb-dpms0-debuginfo-1.9-2.4.1 libxcb-dri2-0-1.9-2.4.1 libxcb-dri2-0-debuginfo-1.9-2.4.1 libxcb-glx0-1.9-2.4.1 libxcb-glx0-debuginfo-1.9-2.4.1 libxcb-randr0-1.9-2.4.1 libxcb-randr0-debuginfo-1.9-2.4.1 libxcb-record0-1.9-2.4.1 libxcb-record0-debuginfo-1.9-2.4.1 libxcb-render0-1.9-2.4.1 libxcb-render0-debuginfo-1.9-2.4.1 libxcb-res0-1.9-2.4.1 libxcb-res0-debuginfo-1.9-2.4.1 libxcb-screensaver0-1.9-2.4.1 libxcb-screensaver0-debuginfo-1.9-2.4.1 libxcb-shape0-1.9-2.4.1 libxcb-shape0-debuginfo-1.9-2.4.1 libxcb-shm0-1.9-2.4.1 libxcb-shm0-debuginfo-1.9-2.4.1 libxcb-sync0-1.9-2.4.1 libxcb-sync0-debuginfo-1.9-2.4.1 libxcb-xevie0-1.9-2.4.1 libxcb-xevie0-debuginfo-1.9-2.4.1 libxcb-xf86dri0-1.9-2.4.1 libxcb-xf86dri0-debuginfo-1.9-2.4.1 libxcb-xfixes0-1.9-2.4.1 libxcb-xfixes0-debuginfo-1.9-2.4.1 libxcb-xinerama0-1.9-2.4.1 libxcb-xinerama0-debuginfo-1.9-2.4.1 libxcb-xprint0-1.9-2.4.1 libxcb-xprint0-debuginfo-1.9-2.4.1 libxcb-xtest0-1.9-2.4.1 libxcb-xtest0-debuginfo-1.9-2.4.1 libxcb-xv0-1.9-2.4.1 libxcb-xv0-debuginfo-1.9-2.4.1 libxcb-xvmc0-1.9-2.4.1 libxcb-xvmc0-debuginfo-1.9-2.4.1 libxcb1-1.9-2.4.1 libxcb1-debuginfo-1.9-2.4.1 - openSUSE 12.3 (x86_64): libxcb-composite0-32bit-1.9-2.4.1 libxcb-composite0-debuginfo-32bit-1.9-2.4.1 libxcb-damage0-32bit-1.9-2.4.1 libxcb-damage0-debuginfo-32bit-1.9-2.4.1 libxcb-devel-32bit-1.9-2.4.1 libxcb-dpms0-32bit-1.9-2.4.1 libxcb-dpms0-debuginfo-32bit-1.9-2.4.1 libxcb-dri2-0-32bit-1.9-2.4.1 libxcb-dri2-0-debuginfo-32bit-1.9-2.4.1 libxcb-glx0-32bit-1.9-2.4.1 libxcb-glx0-debuginfo-32bit-1.9-2.4.1 libxcb-randr0-32bit-1.9-2.4.1 libxcb-randr0-debuginfo-32bit-1.9-2.4.1 libxcb-record0-32bit-1.9-2.4.1 libxcb-record0-debuginfo-32bit-1.9-2.4.1 libxcb-render0-32bit-1.9-2.4.1 libxcb-render0-debuginfo-32bit-1.9-2.4.1 libxcb-res0-32bit-1.9-2.4.1 libxcb-res0-debuginfo-32bit-1.9-2.4.1 libxcb-screensaver0-32bit-1.9-2.4.1 libxcb-screensaver0-debuginfo-32bit-1.9-2.4.1 libxcb-shape0-32bit-1.9-2.4.1 libxcb-shape0-debuginfo-32bit-1.9-2.4.1 libxcb-shm0-32bit-1.9-2.4.1 libxcb-shm0-debuginfo-32bit-1.9-2.4.1 libxcb-sync0-32bit-1.9-2.4.1 libxcb-sync0-debuginfo-32bit-1.9-2.4.1 libxcb-xevie0-32bit-1.9-2.4.1 libxcb-xevie0-debuginfo-32bit-1.9-2.4.1 libxcb-xf86dri0-32bit-1.9-2.4.1 libxcb-xf86dri0-debuginfo-32bit-1.9-2.4.1 libxcb-xfixes0-32bit-1.9-2.4.1 libxcb-xfixes0-debuginfo-32bit-1.9-2.4.1 libxcb-xinerama0-32bit-1.9-2.4.1 libxcb-xinerama0-debuginfo-32bit-1.9-2.4.1 libxcb-xprint0-32bit-1.9-2.4.1 libxcb-xprint0-debuginfo-32bit-1.9-2.4.1 libxcb-xtest0-32bit-1.9-2.4.1 libxcb-xtest0-debuginfo-32bit-1.9-2.4.1 libxcb-xv0-32bit-1.9-2.4.1 libxcb-xv0-debuginfo-32bit-1.9-2.4.1 libxcb-xvmc0-32bit-1.9-2.4.1 libxcb-xvmc0-debuginfo-32bit-1.9-2.4.1 libxcb1-32bit-1.9-2.4.1 libxcb1-debuginfo-32bit-1.9-2.4.1 - openSUSE 12.2 (i586 x86_64): libxcb-composite0-1.8.1-2.8.1 libxcb-composite0-debuginfo-1.8.1-2.8.1 libxcb-damage0-1.8.1-2.8.1 libxcb-damage0-debuginfo-1.8.1-2.8.1 libxcb-debugsource-1.8.1-2.8.1 libxcb-devel-1.8.1-2.8.1 libxcb-dpms0-1.8.1-2.8.1 libxcb-dpms0-debuginfo-1.8.1-2.8.1 libxcb-dri2-0-1.8.1-2.8.1 libxcb-dri2-0-debuginfo-1.8.1-2.8.1 libxcb-glx0-1.8.1-2.8.1 libxcb-glx0-debuginfo-1.8.1-2.8.1 libxcb-randr0-1.8.1-2.8.1 libxcb-randr0-debuginfo-1.8.1-2.8.1 libxcb-record0-1.8.1-2.8.1 libxcb-record0-debuginfo-1.8.1-2.8.1 libxcb-render0-1.8.1-2.8.1 libxcb-render0-debuginfo-1.8.1-2.8.1 libxcb-res0-1.8.1-2.8.1 libxcb-res0-debuginfo-1.8.1-2.8.1 libxcb-screensaver0-1.8.1-2.8.1 libxcb-screensaver0-debuginfo-1.8.1-2.8.1 libxcb-shape0-1.8.1-2.8.1 libxcb-shape0-debuginfo-1.8.1-2.8.1 libxcb-shm0-1.8.1-2.8.1 libxcb-shm0-debuginfo-1.8.1-2.8.1 libxcb-sync0-1.8.1-2.8.1 libxcb-sync0-debuginfo-1.8.1-2.8.1 libxcb-xevie0-1.8.1-2.8.1 libxcb-xevie0-debuginfo-1.8.1-2.8.1 libxcb-xf86dri0-1.8.1-2.8.1 libxcb-xf86dri0-debuginfo-1.8.1-2.8.1 libxcb-xfixes0-1.8.1-2.8.1 libxcb-xfixes0-debuginfo-1.8.1-2.8.1 libxcb-xinerama0-1.8.1-2.8.1 libxcb-xinerama0-debuginfo-1.8.1-2.8.1 libxcb-xprint0-1.8.1-2.8.1 libxcb-xprint0-debuginfo-1.8.1-2.8.1 libxcb-xtest0-1.8.1-2.8.1 libxcb-xtest0-debuginfo-1.8.1-2.8.1 libxcb-xv0-1.8.1-2.8.1 libxcb-xv0-debuginfo-1.8.1-2.8.1 libxcb-xvmc0-1.8.1-2.8.1 libxcb-xvmc0-debuginfo-1.8.1-2.8.1 libxcb1-1.8.1-2.8.1 libxcb1-debuginfo-1.8.1-2.8.1 - openSUSE 12.2 (x86_64): libxcb-composite0-32bit-1.8.1-2.8.1 libxcb-composite0-debuginfo-32bit-1.8.1-2.8.1 libxcb-damage0-32bit-1.8.1-2.8.1 libxcb-damage0-debuginfo-32bit-1.8.1-2.8.1 libxcb-devel-32bit-1.8.1-2.8.1 libxcb-dpms0-32bit-1.8.1-2.8.1 libxcb-dpms0-debuginfo-32bit-1.8.1-2.8.1 libxcb-dri2-0-32bit-1.8.1-2.8.1 libxcb-dri2-0-debuginfo-32bit-1.8.1-2.8.1 libxcb-glx0-32bit-1.8.1-2.8.1 libxcb-glx0-debuginfo-32bit-1.8.1-2.8.1 libxcb-randr0-32bit-1.8.1-2.8.1 libxcb-randr0-debuginfo-32bit-1.8.1-2.8.1 libxcb-record0-32bit-1.8.1-2.8.1 libxcb-record0-debuginfo-32bit-1.8.1-2.8.1 libxcb-render0-32bit-1.8.1-2.8.1 libxcb-render0-debuginfo-32bit-1.8.1-2.8.1 libxcb-res0-32bit-1.8.1-2.8.1 libxcb-res0-debuginfo-32bit-1.8.1-2.8.1 libxcb-screensaver0-32bit-1.8.1-2.8.1 libxcb-screensaver0-debuginfo-32bit-1.8.1-2.8.1 libxcb-shape0-32bit-1.8.1-2.8.1 libxcb-shape0-debuginfo-32bit-1.8.1-2.8.1 libxcb-shm0-32bit-1.8.1-2.8.1 libxcb-shm0-debuginfo-32bit-1.8.1-2.8.1 libxcb-sync0-32bit-1.8.1-2.8.1 libxcb-sync0-debuginfo-32bit-1.8.1-2.8.1 libxcb-xevie0-32bit-1.8.1-2.8.1 libxcb-xevie0-debuginfo-32bit-1.8.1-2.8.1 libxcb-xf86dri0-32bit-1.8.1-2.8.1 libxcb-xf86dri0-debuginfo-32bit-1.8.1-2.8.1 libxcb-xfixes0-32bit-1.8.1-2.8.1 libxcb-xfixes0-debuginfo-32bit-1.8.1-2.8.1 libxcb-xinerama0-32bit-1.8.1-2.8.1 libxcb-xinerama0-debuginfo-32bit-1.8.1-2.8.1 libxcb-xprint0-32bit-1.8.1-2.8.1 libxcb-xprint0-debuginfo-32bit-1.8.1-2.8.1 libxcb-xtest0-32bit-1.8.1-2.8.1 libxcb-xtest0-debuginfo-32bit-1.8.1-2.8.1 libxcb-xv0-32bit-1.8.1-2.8.1 libxcb-xv0-debuginfo-32bit-1.8.1-2.8.1 libxcb-xvmc0-32bit-1.8.1-2.8.1 libxcb-xvmc0-debuginfo-32bit-1.8.1-2.8.1 libxcb1-32bit-1.8.1-2.8.1 libxcb1-debuginfo-32bit-1.8.1-2.8.1 References: http://support.novell.com/security/cve/CVE-2013-2064.html https://bugzilla.novell.com/815451 https://bugzilla.novell.com/821584

1 0

openSUSE-SU-2013:1006-1: moderate: update for subversion
by opensuse-security＠opensuse.org 14 Jun '13

14 Jun '13

openSUSE Security Update: update for subversion ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1006-1 Rating: moderate References: #821505 Cross-References: CVE-2013-1968 CVE-2013-2088 CVE-2013-2112 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update of subversion includes several bug and security fixes. - update to 1.7.10 [bnc#821505] CVE-2013-1968 CVE-2013-2088 CVE-2013-2112 - Client-side bugfixes: * fix 'svn revert' "no such table: revert_list" spurious error * fix 'svn diff' doesn't show some locally added files * fix changelist filtering when --changelist values aren't UTF8 * fix 'svn diff --git' shows wrong copyfrom * fix 'svn diff -x-w' shows wrong changes * fix 'svn blame' sometimes shows every line as modified * fix regression in 'svn status -u' output for externals * fix file permissions change on commit of file with keywords * improve some fatal error messages * fix externals not removed when working copy is made shallow - Server-side bugfixes: * fix repository corruption due to newline in filename * fix svnserve exiting when a client connection is aborted * fix svnserve memory use after clear * fix repository corruption on power/disk failure on Windows - Developer visible changes: * make get-deps.sh compatible with Solaris /bin/sh * fix infinite recursion bug in get-deps.sh * fix uninitialised output parameter of svn_fs_commit_txn() - Bindings: * fix JavaHL thread-safety bug Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-494 - openSUSE 12.2: zypper in -t patch openSUSE-2013-494 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.7.10-2.8.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.7.10-2.8.1 libsvn_auth_kwallet-1-0-1.7.10-2.8.1 libsvn_auth_kwallet-1-0-debuginfo-1.7.10-2.8.1 subversion-1.7.10-2.8.1 subversion-debuginfo-1.7.10-2.8.1 subversion-debugsource-1.7.10-2.8.1 subversion-devel-1.7.10-2.8.1 subversion-perl-1.7.10-2.8.1 subversion-perl-debuginfo-1.7.10-2.8.1 subversion-python-1.7.10-2.8.1 subversion-python-debuginfo-1.7.10-2.8.1 subversion-server-1.7.10-2.8.1 subversion-server-debuginfo-1.7.10-2.8.1 subversion-tools-1.7.10-2.8.1 subversion-tools-debuginfo-1.7.10-2.8.1 - openSUSE 12.3 (noarch): subversion-bash-completion-1.7.10-2.8.1 - openSUSE 12.2 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.7.10-4.16.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.7.10-4.16.1 libsvn_auth_kwallet-1-0-1.7.10-4.16.1 libsvn_auth_kwallet-1-0-debuginfo-1.7.10-4.16.1 subversion-1.7.10-4.16.1 subversion-debuginfo-1.7.10-4.16.1 subversion-debugsource-1.7.10-4.16.1 subversion-devel-1.7.10-4.16.1 subversion-perl-1.7.10-4.16.1 subversion-perl-debuginfo-1.7.10-4.16.1 subversion-python-1.7.10-4.16.1 subversion-python-debuginfo-1.7.10-4.16.1 subversion-server-1.7.10-4.16.1 subversion-server-debuginfo-1.7.10-4.16.1 subversion-tools-1.7.10-4.16.1 subversion-tools-debuginfo-1.7.10-4.16.1 - openSUSE 12.2 (noarch): subversion-bash-completion-1.7.10-4.16.1 References: http://support.novell.com/security/cve/CVE-2013-1968.html http://support.novell.com/security/cve/CVE-2013-2088.html http://support.novell.com/security/cve/CVE-2013-2112.html https://bugzilla.novell.com/821505

1 0

openSUSE-SU-2013:1005-1: critical: kernel
by opensuse-security＠opensuse.org 13 Jun '13

13 Jun '13

openSUSE Security Update: kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1005-1 Rating: critical References: #790920 #821560 #822722 Cross-References: CVE-2013-2850 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: The openSUSE 12.1 kernel was updated to fix a critical security issue and also some reiserfs bugs. CVE-2013-2850: Incorrect strncpy usage in the network listening part of the iscsi target driver could have been used by remote attackers to crash the kernel or execute code. This required the iscsi target running on the machine and the attacker able to make a network connection to it (aka not filtered by firewalls). Bugs: - reiserfs: fix spurious multiple-fill in reiserfs_readdir_dentry (bnc#822722). - reiserfs: fix problems with chowning setuid file w/ xattrs (bnc#790920). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-483 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): kernel-debug-3.1.10-1.29.1 kernel-debug-base-3.1.10-1.29.1 kernel-debug-base-debuginfo-3.1.10-1.29.1 kernel-debug-debuginfo-3.1.10-1.29.1 kernel-debug-debugsource-3.1.10-1.29.1 kernel-debug-devel-3.1.10-1.29.1 kernel-debug-devel-debuginfo-3.1.10-1.29.1 kernel-default-3.1.10-1.29.1 kernel-default-base-3.1.10-1.29.1 kernel-default-base-debuginfo-3.1.10-1.29.1 kernel-default-debuginfo-3.1.10-1.29.1 kernel-default-debugsource-3.1.10-1.29.1 kernel-default-devel-3.1.10-1.29.1 kernel-default-devel-debuginfo-3.1.10-1.29.1 kernel-desktop-3.1.10-1.29.1 kernel-desktop-base-3.1.10-1.29.1 kernel-desktop-base-debuginfo-3.1.10-1.29.1 kernel-desktop-debuginfo-3.1.10-1.29.1 kernel-desktop-debugsource-3.1.10-1.29.1 kernel-desktop-devel-3.1.10-1.29.1 kernel-desktop-devel-debuginfo-3.1.10-1.29.1 kernel-ec2-3.1.10-1.29.1 kernel-ec2-base-3.1.10-1.29.1 kernel-ec2-base-debuginfo-3.1.10-1.29.1 kernel-ec2-debuginfo-3.1.10-1.29.1 kernel-ec2-debugsource-3.1.10-1.29.1 kernel-ec2-devel-3.1.10-1.29.1 kernel-ec2-devel-debuginfo-3.1.10-1.29.1 kernel-ec2-extra-3.1.10-1.29.1 kernel-ec2-extra-debuginfo-3.1.10-1.29.1 kernel-syms-3.1.10-1.29.1 kernel-trace-3.1.10-1.29.1 kernel-trace-base-3.1.10-1.29.1 kernel-trace-base-debuginfo-3.1.10-1.29.1 kernel-trace-debuginfo-3.1.10-1.29.1 kernel-trace-debugsource-3.1.10-1.29.1 kernel-trace-devel-3.1.10-1.29.1 kernel-trace-devel-debuginfo-3.1.10-1.29.1 kernel-vanilla-3.1.10-1.29.1 kernel-vanilla-base-3.1.10-1.29.1 kernel-vanilla-base-debuginfo-3.1.10-1.29.1 kernel-vanilla-debuginfo-3.1.10-1.29.1 kernel-vanilla-debugsource-3.1.10-1.29.1 kernel-vanilla-devel-3.1.10-1.29.1 kernel-vanilla-devel-debuginfo-3.1.10-1.29.1 kernel-xen-3.1.10-1.29.1 kernel-xen-base-3.1.10-1.29.1 kernel-xen-base-debuginfo-3.1.10-1.29.1 kernel-xen-debuginfo-3.1.10-1.29.1 kernel-xen-debugsource-3.1.10-1.29.1 kernel-xen-devel-3.1.10-1.29.1 kernel-xen-devel-debuginfo-3.1.10-1.29.1 - openSUSE 12.1 (noarch): kernel-devel-3.1.10-1.29.1 kernel-docs-3.1.10-1.29.2 kernel-source-3.1.10-1.29.1 kernel-source-vanilla-3.1.10-1.29.1 - openSUSE 12.1 (i586): kernel-pae-3.1.10-1.29.1 kernel-pae-base-3.1.10-1.29.1 kernel-pae-base-debuginfo-3.1.10-1.29.1 kernel-pae-debuginfo-3.1.10-1.29.1 kernel-pae-debugsource-3.1.10-1.29.1 kernel-pae-devel-3.1.10-1.29.1 kernel-pae-devel-debuginfo-3.1.10-1.29.1 References: http://support.novell.com/security/cve/CVE-2013-2850.html https://bugzilla.novell.com/790920 https://bugzilla.novell.com/821560 https://bugzilla.novell.com/822722

1 0

openSUSE-RU-2013:0999-1: moderate: xtables-geoip: update db files to 2013.05
by maintenance＠opensuse.org 11 Jun '13

11 Jun '13

openSUSE Recommended Update: xtables-geoip: update db files to 2013.05 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0999-1 Rating: moderate References: Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This updates the db-files of xtables-geoip to the current version 2013.05 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-480 - openSUSE 12.2: zypper in -t patch openSUSE-2013-480 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): xtables-geoip-2013.05-2.4.1 - openSUSE 12.2 (noarch): xtables-geoip-2013.05-2.8.1 References:

1 0

openSUSE-RU-2013:0998-1: xulrunner: Fix build on powerpc
by maintenance＠opensuse.org 11 Jun '13

11 Jun '13

openSUSE Recommended Update: xulrunner: Fix build on powerpc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0998-1 Rating: low References: Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issue with xulrunner: - Fix build on powerpc (ppc-xpcshell.patch) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-481 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): mozilla-js-17.0.6-1.16.1 mozilla-js-debuginfo-17.0.6-1.16.1 xulrunner-17.0.6-1.16.1 xulrunner-buildsymbols-17.0.6-1.16.1 xulrunner-debuginfo-17.0.6-1.16.1 xulrunner-debugsource-17.0.6-1.16.1 xulrunner-devel-17.0.6-1.16.1 xulrunner-devel-debuginfo-17.0.6-1.16.1 - openSUSE 12.3 (x86_64): mozilla-js-32bit-17.0.6-1.16.1 mozilla-js-debuginfo-32bit-17.0.6-1.16.1 xulrunner-32bit-17.0.6-1.16.1 xulrunner-debuginfo-32bit-17.0.6-1.16.1 References:

1 0

openSUSE-RU-2013:0997-1: important: cifs-utils: Several fixes
by maintenance＠opensuse.org 11 Jun '13

11 Jun '13

openSUSE Recommended Update: cifs-utils: Several fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0997-1 Rating: important References: #697218 #804822 #821889 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This udpate fixes the following issues with cifs-utils: - Added url as source. - bnc#804822, bnc#821889: Add cifstab named configuration file to post-12.2 systems - bnc#804822: Remove superfluous restart or stop of the cifs service - bnc#697218: Really use of the existing cifs init script - Move the cifs init script nfs dependencies from Required to Should. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-479 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): cifs-utils-5.9-3.4.1 cifs-utils-debuginfo-5.9-3.4.1 cifs-utils-debugsource-5.9-3.4.1 cifs-utils-devel-5.9-3.4.1 References: https://bugzilla.novell.com/697218 https://bugzilla.novell.com/804822 https://bugzilla.novell.com/821889

1 0

openSUSE-RU-2013:0995-1: important: timezone: Update to 2013c
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: timezone: Update to 2013c ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0995-1 Rating: important References: Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issues with timezone: - Regular timezone update to 2013c Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-69 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): timezone-2013c-18.1 timezone-debuginfo-2013c-18.1 timezone-debugsource-2013c-18.1 - openSUSE 11.4 (noarch): timezone-java-2013c-18.1 References:

1 0

openSUSE-RU-2013:0994-1: moderate: brasero: fix issue with adding mp3 files to audio CD projects
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: brasero: fix issue with adding mp3 files to audio CD projects ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0994-1 Rating: moderate References: #815728 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issue with brasero: - bnc#815728, bgo#687886: Fixed issue with brasero not adding mp3 files to audio CD projects Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-393 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): brasero-3.6.1-2.4.1 brasero-debuginfo-3.6.1-2.4.1 brasero-debugsource-3.6.1-2.4.1 brasero-devel-3.6.1-2.4.1 brasero-nautilus-3.6.1-2.4.1 brasero-nautilus-debuginfo-3.6.1-2.4.1 libbrasero-burn3-1-3.6.1-2.4.1 libbrasero-burn3-1-debuginfo-3.6.1-2.4.1 libbrasero-media3-1-3.6.1-2.4.1 libbrasero-media3-1-debuginfo-3.6.1-2.4.1 libbrasero-utils3-1-3.6.1-2.4.1 libbrasero-utils3-1-debuginfo-3.6.1-2.4.1 typelib-1_0-BraseroBurn-3_2_0-3.6.1-2.4.1 typelib-1_0-BraseroMedia-3_2_0-3.6.1-2.4.1 - openSUSE 12.3 (noarch): brasero-lang-3.6.1-2.4.1 References: https://bugzilla.novell.com/815728

1 0

openSUSE-SU-2013:0993-1: moderate: java-1_6_0-openjdk to Icedtea6-1.12.5
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: java-1_6_0-openjdk to Icedtea6-1.12.5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0993-1 Rating: moderate References: #817157 Cross-References: CVE-2013-0401 CVE-2013-1488 CVE-2013-1518 CVE-2013-1537 CVE-2013-1557 CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2415 CVE-2013-2417 CVE-2013-2419 CVE-2013-2420 CVE-2013-2421 CVE-2013-2422 CVE-2013-2424 CVE-2013-2426 CVE-2013-2429 CVE-2013-2430 CVE-2013-2431 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: java-1_6_0-openjdk was updated to 1.12.5 (bnc#817157) * Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization - S8001031, CVE-2013-2419: Better font processing - S8001040, CVE-2013-1537: Rework RMI model - S8001322: Refactor deserialization - S8001329, CVE-2013-1557: Augment RMI logging - S8003335: Better handling of Finalizer thread - S8003445: Adjust JAX-WS to focus on API - S8003543, CVE-2013-2415: Improve processing of MTOM attachments - S8004261: Improve input validation - S8004336, CVE-2013-2431: Better handling of method handle intrinsic frames - S8004986, CVE-2013-2383: Better handling of glyph table - S8004987, CVE-2013-2384: Improve font layout - S8004994, CVE-2013-1569: Improve checking of glyph table - S8005432: Update access to JAX-WS - S8005943: (process) Improved Runtime.exec - S8006309: More reliable control panel operation - S8006435, CVE-2013-2424: Improvements in JMX - S8006790: Improve checking for windows - S8006795: Improve font warning messages - S8007406: Improve accessibility of AccessBridge - S8007617, CVE-2013-2420: Better validation of images - S8007667, CVE-2013-2430: Better image reading - S8007918, CVE-2013-2429: Better image writing - S8009063, CVE-2013-2426: Improve reliability of ConcurrentHashMap - S8009305, CVE-2013-0401: Improve AWT data transfer - S8009699, CVE-2013-2421: Methodhandle lookup - S8009814, CVE-2013-1488: Better driver management - S8009857, CVE-2013-2422: Problem with plugin - RH952389: Temporary files created with insecure permissions * Backports - S7197906: BlockOffsetArray::power_to_cards_back() needs to handle > 32 bit shifts - S7036559: ConcurrentHashMap footprint and contention improvements - S5102804: Memory leak in Introspector.getBeanInfo(Class) for custom BeanInfo: Class param (with WeakCache from S6397609) - S6501644: sync LayoutEngine *code* structure to match ICU - S6886358: layout code update - S6963811: Deadlock-prone locking changes in Introspector - S7017324: Kerning crash in JDK 7 since ICU layout update - S7064279: Introspector.getBeanInfo() should release some resources in timely manner - S8004302: javax/xml/soap/Test7013971.java fails since jdk6u39b01 - S7133220: Additional patches to JAXP 1.4.5 update 1 for 7u4 (partial for S6657673) - S8009530: ICU Kern table support broken * Bug fixes - OJ3: Fix get_stack_bounds memory leak (alternate fix for S7197906) - PR1362: Fedora 19 / rawhide FTBFS SIGILL - PR1338: Remove dependence on libXp - PR1339: Simplify the rhino class rewriter to avoid use of concurrency - PR1336: Bootstrap failure on Fedora 17/18 - PR1319: Correct #ifdef to #if - PR1402: Support glibc < 2.17 with AArch64 patch - Give xalan/xerces access to their own internal packages. * New features - JAXP, JAXWS & JAF supplied as patches rather than drops to aid subsequent patching. - PR1380: Add AArch64 support to Zero - openjdk-7-src-b147-awt-crasher.patch (bnc#792951) - fix build for non-jit packages Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-74 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b27.1.12.5-37.1 java-1_6_0-openjdk-debuginfo-1.6.0.0_b27.1.12.5-37.1 java-1_6_0-openjdk-debugsource-1.6.0.0_b27.1.12.5-37.1 java-1_6_0-openjdk-demo-1.6.0.0_b27.1.12.5-37.1 java-1_6_0-openjdk-demo-debuginfo-1.6.0.0_b27.1.12.5-37.1 java-1_6_0-openjdk-devel-1.6.0.0_b27.1.12.5-37.1 java-1_6_0-openjdk-devel-debuginfo-1.6.0.0_b27.1.12.5-37.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b27.1.12.5-37.1 java-1_6_0-openjdk-src-1.6.0.0_b27.1.12.5-37.1 References: http://support.novell.com/security/cve/CVE-2013-0401.html http://support.novell.com/security/cve/CVE-2013-1488.html http://support.novell.com/security/cve/CVE-2013-1518.html http://support.novell.com/security/cve/CVE-2013-1537.html http://support.novell.com/security/cve/CVE-2013-1557.html http://support.novell.com/security/cve/CVE-2013-1569.html http://support.novell.com/security/cve/CVE-2013-2383.html http://support.novell.com/security/cve/CVE-2013-2384.html http://support.novell.com/security/cve/CVE-2013-2415.html http://support.novell.com/security/cve/CVE-2013-2417.html http://support.novell.com/security/cve/CVE-2013-2419.html http://support.novell.com/security/cve/CVE-2013-2420.html http://support.novell.com/security/cve/CVE-2013-2421.html http://support.novell.com/security/cve/CVE-2013-2422.html http://support.novell.com/security/cve/CVE-2013-2424.html http://support.novell.com/security/cve/CVE-2013-2426.html http://support.novell.com/security/cve/CVE-2013-2429.html http://support.novell.com/security/cve/CVE-2013-2430.html http://support.novell.com/security/cve/CVE-2013-2431.html https://bugzilla.novell.com/817157

1 0

openSUSE-RU-2013:0992-1: moderate: python-sip: update to 4.14.6:
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: python-sip: update to 4.14.6: ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0992-1 Rating: moderate References: #812130 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This bugfix-release for python-sip includes versions 4.14.4, 4.14.5 and 4.14.6. There is no detailed changelog available. python-sip 4.14.4 includes an potential incompatibility in the use of the %VirtualErrorHandler directive. python-sip 4.14.5 is a minor bugfix release, specifically for QGIS Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-388 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): python-qt4-4.9.6-3.2.2 python-qt4-debuginfo-4.9.6-3.2.2 python-qt4-debugsource-4.9.6-3.2.2 python-qt4-devel-4.9.6-3.2.2 python-qt4-utils-4.9.6-3.2.2 python-qt4-utils-debuginfo-4.9.6-3.2.2 python-sip-4.14.6-1.4.1 python-sip-bin-4.14.6-1.4.1 python-sip-bin-debuginfo-4.14.6-1.4.1 python-sip-debuginfo-4.14.6-1.4.1 python-sip-debugsource-4.14.6-1.4.1 python-sip-devel-4.14.6-1.4.1 python3-qt4-4.9.6-3.2.1 python3-qt4-debuginfo-4.9.6-3.2.1 python3-qt4-debugsource-4.9.6-3.2.1 python3-qt4-devel-4.9.6-3.2.1 python3-sip-4.14.6-1.4.1 python3-sip-debuginfo-4.14.6-1.4.1 python3-sip-debugsource-4.14.6-1.4.1 python3-sip-devel-4.14.6-1.4.1 References: https://bugzilla.novell.com/812130

1 0

openSUSE-RU-2013:0991-1: moderate: python-pyzmq: Update to version 13.0.0
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: python-pyzmq: Update to version 13.0.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0991-1 Rating: moderate References: #811890 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issues with python-pyzmq: - Fix bnc#811890 + Changes suggests to recommends zeromq since there is no way to install suggets currently + Update to version 13.0.0: * PyPy support * The Threadsafe ZMQStream experiment in 2.2.0.1 was deemed inappropriate and not useful, and has been removed. * The zmq.web experiment has been removed, to be developed as a standalone project + Add python3 requires and buildrequires. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-390 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): python-pyzmq-13.0.0-7.4.1 python-pyzmq-debuginfo-13.0.0-7.4.1 python-pyzmq-debugsource-13.0.0-7.4.1 python-pyzmq-devel-13.0.0-7.4.1 python3-pyzmq-13.0.0-7.4.1 python3-pyzmq-debuginfo-13.0.0-7.4.1 python3-pyzmq-debugsource-13.0.0-7.4.1 python3-pyzmq-devel-13.0.0-7.4.1 References: https://bugzilla.novell.com/811890

1 0

openSUSE-SU-2013:0990-1: moderate: acroread to 9.5.5
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: acroread to 9.5.5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0990-1 Rating: moderate References: #819918 Cross-References: CVE-2013-2549 CVE-2013-2550 CVE-2013-2718 CVE-2013-2719 CVE-2013-2720 CVE-2013-2721 CVE-2013-2722 CVE-2013-2723 CVE-2013-2724 CVE-2013-2725 CVE-2013-2726 CVE-2013-2727 CVE-2013-2729 CVE-2013-2730 CVE-2013-2731 CVE-2013-2732 CVE-2013-2733 CVE-2013-2734 CVE-2013-2735 CVE-2013-2736 CVE-2013-2737 CVE-2013-3337 CVE-2013-3338 CVE-2013-3339 CVE-2013-3340 CVE-2013-3341 CVE-2013-3342 Affected Products: openSUSE 12.3:NonFree openSUSE 12.2:NonFree ______________________________________________________________________________ An update that fixes 27 vulnerabilities is now available. Description: Acroread was updated to 9.5.5 for bnc#819918(swampid#52449). More information can be found on: https://www.adobe.com/support/security/bulletins/apsb13-15.h tml (CVE-2013-2549, CVE-2013-2550, CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2724, CVE-2013-2725, CVE-2013-2726, CVE-2013-2727, CVE-2013-2729, CVE-2013-2730, CVE-2013-2731, CVE-2013-2732, CVE-2013-2733, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-2737, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, CVE-2013-3341, CVE-2013-3342) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2013-437 - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2013-437 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3:NonFree (noarch): acroread-cmaps-9.4.1-4.1 acroread-fonts-ja-9.4.1-4.1 acroread-fonts-ko-9.4.1-4.1 acroread-fonts-zh_CN-9.4.1-4.1 acroread-fonts-zh_TW-9.4.1-4.1 - openSUSE 12.3:NonFree (i586): acroread-9.5.5-4.1 acroread-browser-plugin-9.5.5-4.1 - openSUSE 12.2:NonFree (noarch): acroread-cmaps-9.4.1-3.12.1 acroread-fonts-ja-9.4.1-3.12.1 acroread-fonts-ko-9.4.1-3.12.1 acroread-fonts-zh_CN-9.4.1-3.12.1 acroread-fonts-zh_TW-9.4.1-3.12.1 - openSUSE 12.2:NonFree (i586): acroread-9.5.5-3.12.1 acroread-browser-plugin-9.5.5-3.12.1 References: http://support.novell.com/security/cve/CVE-2013-2549.html http://support.novell.com/security/cve/CVE-2013-2550.html http://support.novell.com/security/cve/CVE-2013-2718.html http://support.novell.com/security/cve/CVE-2013-2719.html http://support.novell.com/security/cve/CVE-2013-2720.html http://support.novell.com/security/cve/CVE-2013-2721.html http://support.novell.com/security/cve/CVE-2013-2722.html http://support.novell.com/security/cve/CVE-2013-2723.html http://support.novell.com/security/cve/CVE-2013-2724.html http://support.novell.com/security/cve/CVE-2013-2725.html http://support.novell.com/security/cve/CVE-2013-2726.html http://support.novell.com/security/cve/CVE-2013-2727.html http://support.novell.com/security/cve/CVE-2013-2729.html http://support.novell.com/security/cve/CVE-2013-2730.html http://support.novell.com/security/cve/CVE-2013-2731.html http://support.novell.com/security/cve/CVE-2013-2732.html http://support.novell.com/security/cve/CVE-2013-2733.html http://support.novell.com/security/cve/CVE-2013-2734.html http://support.novell.com/security/cve/CVE-2013-2735.html http://support.novell.com/security/cve/CVE-2013-2736.html http://support.novell.com/security/cve/CVE-2013-2737.html http://support.novell.com/security/cve/CVE-2013-3337.html http://support.novell.com/security/cve/CVE-2013-3338.html http://support.novell.com/security/cve/CVE-2013-3339.html http://support.novell.com/security/cve/CVE-2013-3340.html http://support.novell.com/security/cve/CVE-2013-3341.html http://support.novell.com/security/cve/CVE-2013-3342.html https://bugzilla.novell.com/819918

1 0

openSUSE-RU-2013:0989-1: cvsps: Downgrade to 2.1.
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: cvsps: Downgrade to 2.1. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0989-1 Rating: low References: #809800 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update downgrades cvsps 3.8 to 2.1 after 3.x doesn't work with git cvsimport. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-433 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): cvsps-2005.2.1-2.9.1 cvsps-debuginfo-2005.2.1-2.9.1 cvsps-debugsource-2005.2.1-2.9.1 References: https://bugzilla.novell.com/809800

1 0