June 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:0938-1: freerdp: Upstream upgrade to bugfix release 1.0.2 and several fixes
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: freerdp: Upstream upgrade to bugfix release 1.0.2 and several fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0938-1 Rating: low References: #785437 #809412 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues with freerdp: - bnc#809412: Update to 1.0.2 + xfreerdp: * new parameter --from-stdin - prompts for unspecified arguments username, password, domain and host. * fix compability with x2go * fix keyboard state in remote app * documentation fixes * fixed crash when started with --authonly + libfreerdp-core: * several memory leaks and double frees were fixed * support for FastPath PDUs up to 32767 * register audio only if plugin is registered * load extensions after argument parsing + libfreerdp-utils: * fixed crash when HOME environment variable wasn't set + xfreerdp-server * deadlock fixed * accept TLSv1 and SSLv3 + smartcard * don't incorrectly set SCARD_STATE_IGNORE + libfreerdp-codec * performance improvement + libfreerdp-gdi * support for PatBlt DPa operation + plugin * ignore CHANNEL_FLAG_SUSPEND/CHANNEL_FLAG_RESUME to prevent possible crash + known problems: * If windows input language is set to german pressing the divde key (/) on the keypad results in minus (-) - bnc#785437: added freerdp-fix-pulse-no-device-name.patch in order to fix a segfault in case device name is not provided - fixed divide key (/) on keypad for 1.0x series Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-360 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): freerdp-1.0.2-11.4.1 freerdp-debuginfo-1.0.2-11.4.1 freerdp-debugsource-1.0.2-11.4.1 freerdp-devel-1.0.2-11.4.1 libfreerdp-1_0-1.0.2-11.4.1 libfreerdp-1_0-debuginfo-1.0.2-11.4.1 libfreerdp-1_0-plugins-1.0.2-11.4.1 libfreerdp-1_0-plugins-debuginfo-1.0.2-11.4.1 References: https://bugzilla.novell.com/785437 https://bugzilla.novell.com/809412

1 0

openSUSE-SU-2013:0937-1: moderate: update for xorg-x11-server
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0937-1 Rating: moderate References: #814653 Cross-References: CVE-2013-1940 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - U_xf86-fix-flush-input-to-work-with-Linux-evdev-device.patch * So when we VT switch back and attempt to flush the input devices, we don't succeed because evdev won't return part of an event, since we were only asking for 4 bytes, we'd only get -EINVAL back. This could later cause events to be flushed that we shouldn't have gotten. This is a fix for CVE-2013-1940. (bnc#814653) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-411 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): xorg-x11-server-7.6_1.13.2-1.5.1 xorg-x11-server-debuginfo-7.6_1.13.2-1.5.1 xorg-x11-server-debugsource-7.6_1.13.2-1.5.1 xorg-x11-server-extra-7.6_1.13.2-1.5.1 xorg-x11-server-extra-debuginfo-7.6_1.13.2-1.5.1 xorg-x11-server-sdk-7.6_1.13.2-1.5.1 References: http://support.novell.com/security/cve/CVE-2013-1940.html https://bugzilla.novell.com/814653

1 0

openSUSE-RU-2013:0936-1: important: kiwi: Update to v5.04.82
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: kiwi: Update to v5.04.82 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0936-1 Rating: important References: #804160 #808962 #812099 #813216 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes the following issues for kiwi: - this patch set includes fixes currently active in SUSE Studio Online - this patch set includes following fixes important for the buildservice to be able to build images * fixed spec file, the mysystems macro for openSUSE was broken because it uses VER=1220 on a 12.3 system * do not consider obsrun as a system group - Following a detailed description of fixes: + fixed spec file, the mysystems macro for openSUSE was broken because it uses VER=1220 on a 12.3 system + do not consider obsrun as a system group + netboot: fixed conflicting use of global variables. * The function updateNeeded set among others the variable sum2 which is used later in another context in suse-linuxrc. At that point it was expected that the variable is empty for the first round in a loop but that's not true if updateNeeded called before the loop sets the variable to some content. Thus updateNeeded should handle variables used locally in the function as real local variables * bnc#813216: fixed setupBootLoaderGrub to write the udev device name into /boot/grub/device.map instead of the unix kernel device name + fixed suseImportBuildKey to also work with keys present in /usr/lib/rpm/gnupg/keys/ + fixed typo nomodeseet -> nomodeset + fixed LVM resize of physical extents, pvresize works only with unix kernel device names and doesn't like udev links + fixed OEMRepartLVM, to pass correctly formated size value to createPartitionerInput, value requires a unit suffix + fixed split createTmpTree, return if lstat returns undef + Revert "- use ext4 filesystem for clic'ed live iso's" on SLES mkfs.ext4 in a loop creates a read-only filesystem. Reverted the clic container to be ext3 again + don't use opensuse:// urls in unit tests. that sucks inside the buildservice if the service redirector is broken + added aarch64 as supported arch to the KIWIXML ctor + make sure imx, dtb and elf files are moved correctly in the boot partition + fixed loading of network drivers in oemboot dump code + arm: make sure elf binaries (.elf) will be extracted + fixed spec file to build correctly for aarch64 + arm: added missing arch links in system/repo + arm: make sure device tree (.dtb) is extraced from the boot image + call syncGPT only if partedTableType is gpt + bnc#812099: make sure splash is deactivated for any dialogs displayed while inside the kiwi initrd + fixed checkmedia call if used in hybrid disk mode. In this mode a disk partition device was passed instead of the entire disk device + moved the check for the Amazon EC2 toolkit after the check for the credentials. If no or not enough credentials are provided the bundling is skipped and that's not an error. Thus it's ok to miss ec2-bundle-image at that point so the check needs to be done after successfully checking for the pre-conditions + fixed addBootEFILive function to work for 32bit ISO's * the boot path was hardcoded to boot/x86_64. With this patch the path to the bootloader files is searched + the getImageType function was renamed in master but not in this branch + added attribute syncMBR in the type element to activate the MBR synchronisation into the GPT for efi images + fixed calculation of inode number if no XML size is set in this case the variable contains the value 'auto' and this can't be used in numeric expressions + make sure zImage kernels for arm gets detected + fixed calculation of inode number in KIWIBoot constructor for vmx images which requested a specific size in the XML description it's required to calculate the inode count from the specified size and not from the size of the of the unpacked root tree. If the requested image size is much bigger than the unpacked root tree it might happen that we run out of inodes very soon in the later image + fixed copyBootCode and suseGFXBoot to be more generic with regards to the different u-boot img/bin files + add boot, repo and template image links for armv6,armv5el and aarch64 + don't use grub2 modules from host system if not found in initrd * instead enable/disable support according to stages (BIOS/EFI) * print better error message in case of missing required stages * allow plain BIOS, plain EFI and EFI+BIOS setup + fixed stage directory check for grub2 + make sure profile information is used in all kiwi modes + fixed call of undefined subroutine &KIWIGlobals::qxx + added support for hybrid EFI disk images based on gptsync. * if gptsync is installed an MBR is added to the GPT table * this allows to boot plain vmx images via legacy BIOS and EFI * this allows to boot oem disk via legacy BIOS and EFI. The repartition code of an EFI oem will overwrite the MBR placed by gptsync. Thus the kiwi initrd tries to re-add the information by calling syncGPT. The funtion requires the presence of gptsync and sfdisk inside the kiwi initrd. Both tools are not part of the kiwi initrd by default * this allows to boot oem install media via legacy BIOS and EFI oem install media are install ISOs and install sticks * please note placing an MBR into the GPT is outside of the EFI standard. It might happen that an EFI firmware refuse to boot a system which includes a MBR inside the GPT. Thus gptsync support should be seen as experimental + bnc#808962: the btrfsctl utility is deprecated and will be removed soon. There was one code path in kiwi which needs to be adapted to understand both btrfs and btrfsctl + added openSUSE 12.3 boot and JeOS templates for armv7 + use kpartx sync mode to make sure devices are created on return of the call Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-354 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): kiwi-5.04.82-1.8.1 kiwi-debugsource-5.04.82-1.8.1 kiwi-desc-isoboot-requires-5.04.82-1.8.1 kiwi-desc-netboot-requires-5.04.82-1.8.1 kiwi-desc-oemboot-requires-5.04.82-1.8.1 kiwi-desc-vmxboot-requires-5.04.82-1.8.1 kiwi-tools-5.04.82-1.8.1 kiwi-tools-debuginfo-5.04.82-1.8.1 - openSUSE 12.3 (noarch): kiwi-desc-isoboot-5.04.82-1.8.1 kiwi-desc-netboot-5.04.82-1.8.1 kiwi-desc-oemboot-5.04.82-1.8.1 kiwi-desc-vmxboot-5.04.82-1.8.1 kiwi-doc-5.04.82-1.8.1 kiwi-instsource-5.04.82-1.8.1 kiwi-media-requires-5.04.82-1.8.1 kiwi-pxeboot-5.04.82-1.8.1 kiwi-templates-5.04.82-1.8.1 References: https://bugzilla.novell.com/804160 https://bugzilla.novell.com/808962 https://bugzilla.novell.com/812099 https://bugzilla.novell.com/813216

1 0

openSUSE-RU-2013:0935-1: important: gnome-themes-standard, gtk2: Fixed regression with the last gnome-themes-standard update
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: gnome-themes-standard, gtk2: Fixed regression with the last gnome-themes-standard update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0935-1 Rating: important References: #815078 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with gnome-themes-standard and gtk2: gnome-themes-standard: - bnc#815078: Update to version 3.6.5 + Fix regression rendering LibreOffice/OpenOffice.org entry backgrounds. - Changes from version 3.6.4: + Fix missing PNG assets in the 3.6.3 tarball. - Changes frmo version 3.6.3: + GTK2 fixes: * Fix toolbar styling in Eclipse/SWT. * Fix completion tooltips styling in Eclipse/SWT. * Fix a bug rendering menus in Opera. * Fix missing shadow for frames with embedded labels. * Fix missing SELECTED states for check/radio assets. * Make it possible to override GtkEntry's background color. * Fix stray shadow for frames with GTK_SHADOW_NONE. * Workaround an OpenOffice.org scrollbar rendering bug. * Require GTK+ 2.24.15 and 3.6.2. gtk2: - bnc#815078: Update to version 2.24.18 (bnc#815078) + Bugs fixed: bgo#586367, bgo#674051, bgo#683072, bgo#683983, bgo#694711, bgo#695003, bgo#695278, bgo#695312, bgo#698563 - Changes from version 2.24.17: + GtkFileChooserButton fixes: * Don't emit file-set signal when the change is not the result of a user action * Don't ever use gtk_file_chooser_get_files * Ensure internal consistency when clearing a model + Bugs fixed: bgo#690247, bgo#692955, bgo#694742. - Changes from version 2.24.16: + Bugs fixed: bgo#694077, bgo#645065. - Changes from version 2.24.15: + Bugs fixed: bgo#626499, bgo#656565, bgo#664640, bgo#669808, bgo#674556, bgo#679883, bgo#683511, bgo#689810, bgo#689982, bgo#690788, bgo#692099, bgo#692554, bgo#692810. + Updated translations. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-436 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): gnome-themes-standard-debugsource-3.6.5-3.8.1 gtk2-debugsource-2.24.18-2.4.2 gtk2-devel-2.24.18-2.4.2 gtk2-devel-debuginfo-2.24.18-2.4.2 gtk2-engine-clearlooks-2.20.2-13.4.4 gtk2-engine-clearlooks-debuginfo-2.20.2-13.4.4 gtk2-engine-crux-2.20.2-13.4.4 gtk2-engine-crux-debuginfo-2.20.2-13.4.4 gtk2-engine-glide-2.20.2-13.4.4 gtk2-engine-glide-debuginfo-2.20.2-13.4.4 gtk2-engine-hcengine-2.20.2-13.4.4 gtk2-engine-hcengine-debuginfo-2.20.2-13.4.4 gtk2-engine-industrial-2.20.2-13.4.4 gtk2-engine-industrial-debuginfo-2.20.2-13.4.4 gtk2-engine-mist-2.20.2-13.4.4 gtk2-engine-mist-debuginfo-2.20.2-13.4.4 gtk2-engine-redmond95-2.20.2-13.4.4 gtk2-engine-redmond95-debuginfo-2.20.2-13.4.4 gtk2-engine-thinice-2.20.2-13.4.4 gtk2-engine-thinice-debuginfo-2.20.2-13.4.4 gtk2-engines-2.20.2-13.4.4 gtk2-engines-debugsource-2.20.2-13.4.4 gtk2-engines-devel-2.20.2-13.4.4 gtk2-immodule-amharic-2.24.18-2.4.2 gtk2-immodule-amharic-debuginfo-2.24.18-2.4.2 gtk2-immodule-inuktitut-2.24.18-2.4.2 gtk2-immodule-inuktitut-debuginfo-2.24.18-2.4.2 gtk2-immodule-multipress-2.24.18-2.4.2 gtk2-immodule-multipress-debuginfo-2.24.18-2.4.2 gtk2-immodule-thai-2.24.18-2.4.2 gtk2-immodule-thai-debuginfo-2.24.18-2.4.2 gtk2-immodule-vietnamese-2.24.18-2.4.2 gtk2-immodule-vietnamese-debuginfo-2.24.18-2.4.2 gtk2-immodule-xim-2.24.18-2.4.2 gtk2-immodule-xim-debuginfo-2.24.18-2.4.2 gtk2-immodules-tigrigna-2.24.18-2.4.2 gtk2-immodules-tigrigna-debuginfo-2.24.18-2.4.2 gtk2-theming-engine-adwaita-3.6.5-3.8.1 gtk2-theming-engine-adwaita-debuginfo-3.6.5-3.8.1 gtk2-tools-2.24.18-2.4.2 gtk2-tools-debuginfo-2.24.18-2.4.2 gtk3-theming-engine-adwaita-3.6.5-3.8.1 gtk3-theming-engine-adwaita-debuginfo-3.6.5-3.8.1 libgtk-2_0-0-2.24.18-2.4.2 libgtk-2_0-0-debuginfo-2.24.18-2.4.2 typelib-1_0-Gtk-2_0-2.24.18-2.4.2 - openSUSE 12.3 (x86_64): gtk2-devel-32bit-2.24.18-2.4.2 gtk2-devel-debuginfo-32bit-2.24.18-2.4.2 gtk2-engine-clearlooks-32bit-2.20.2-13.4.4 gtk2-engine-clearlooks-debuginfo-32bit-2.20.2-13.4.4 gtk2-engine-crux-32bit-2.20.2-13.4.4 gtk2-engine-crux-debuginfo-32bit-2.20.2-13.4.4 gtk2-engine-glide-32bit-2.20.2-13.4.4 gtk2-engine-glide-debuginfo-32bit-2.20.2-13.4.4 gtk2-engine-industrial-32bit-2.20.2-13.4.4 gtk2-engine-industrial-debuginfo-32bit-2.20.2-13.4.4 gtk2-engine-mist-32bit-2.20.2-13.4.4 gtk2-engine-mist-debuginfo-32bit-2.20.2-13.4.4 gtk2-engine-redmond95-32bit-2.20.2-13.4.4 gtk2-engine-redmond95-debuginfo-32bit-2.20.2-13.4.4 gtk2-engine-thinice-32bit-2.20.2-13.4.4 gtk2-engine-thinice-debuginfo-32bit-2.20.2-13.4.4 gtk2-immodule-amharic-32bit-2.24.18-2.4.2 gtk2-immodule-amharic-debuginfo-32bit-2.24.18-2.4.2 gtk2-immodule-inuktitut-32bit-2.24.18-2.4.2 gtk2-immodule-inuktitut-debuginfo-32bit-2.24.18-2.4.2 gtk2-immodule-multipress-32bit-2.24.18-2.4.2 gtk2-immodule-multipress-debuginfo-32bit-2.24.18-2.4.2 gtk2-immodule-thai-32bit-2.24.18-2.4.2 gtk2-immodule-thai-debuginfo-32bit-2.24.18-2.4.2 gtk2-immodule-vietnamese-32bit-2.24.18-2.4.2 gtk2-immodule-vietnamese-debuginfo-32bit-2.24.18-2.4.2 gtk2-immodule-xim-32bit-2.24.18-2.4.2 gtk2-immodule-xim-debuginfo-32bit-2.24.18-2.4.2 gtk2-immodules-tigrigna-32bit-2.24.18-2.4.2 gtk2-immodules-tigrigna-debuginfo-32bit-2.24.18-2.4.2 gtk2-theming-engine-adwaita-32bit-3.6.5-3.8.1 gtk2-theming-engine-adwaita-debuginfo-32bit-3.6.5-3.8.1 gtk2-tools-32bit-2.24.18-2.4.2 gtk2-tools-debuginfo-32bit-2.24.18-2.4.2 gtk3-theming-engine-adwaita-32bit-3.6.5-3.8.1 gtk3-theming-engine-adwaita-debuginfo-32bit-3.6.5-3.8.1 libgtk-2_0-0-32bit-2.24.18-2.4.2 libgtk-2_0-0-debuginfo-32bit-2.24.18-2.4.2 - openSUSE 12.3 (noarch): gnome-themes-accessibility-3.6.5-3.8.1 gnome-themes-standard-lang-3.6.5-3.8.1 gtk2-branding-SLED-12.2-4.4.1 gtk2-branding-openSUSE-12.2-4.4.1 gtk2-branding-upstream-2.24.18-2.4.2 gtk2-data-2.24.18-2.4.2 gtk2-lang-2.24.18-2.4.2 gtk2-metatheme-adwaita-3.6.5-3.8.1 gtk2-theme-clearlooks-2.20.2-13.4.4 gtk2-theme-crux-2.20.2-13.4.4 gtk2-theme-industrial-2.20.2-13.4.4 gtk2-theme-mist-2.20.2-13.4.4 gtk2-theme-redmond95-2.20.2-13.4.4 gtk2-theme-thinice-2.20.2-13.4.4 gtk3-metatheme-adwaita-3.6.5-3.8.1 metatheme-adwaita-common-3.6.5-3.8.1 References: https://bugzilla.novell.com/815078

1 0

openSUSE-SU-2013:0933-1: This submission supersedes the Samba packages currently available from
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: This submission supersedes the Samba packages currently available from ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0933-1 Rating: low References: #786350 #792294 #800782 #802031 #807334 #811975 #815994 Cross-References: CVE-2013-0454 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This submission supersedes the Samba packages currently available from http://download.openSUSE.org/pub/opensuse/update/12.*-test/ - Add support for PFC_FLAG_OBJECT_UUID when parsing packets; (bso#9382). - Fix "guest ok", "force user" and "force group" for guest users; (bso#9746). - Fix 'map untrusted to domain' with NTLMv2; (bso#9817). - Fix crash bug in Winbind; (bso#9854). - Fix panic in nt_printer_publish_ads; (bso#9830). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-435 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): ldapsmb-1.34b-59.5.1 libnetapi-devel-3.6.12-59.5.1 libnetapi0-3.6.12-59.5.1 libnetapi0-debuginfo-3.6.12-59.5.1 libsmbclient-devel-3.6.12-59.5.1 libsmbclient0-3.6.12-59.5.1 libsmbclient0-debuginfo-3.6.12-59.5.1 libsmbsharemodes-devel-3.6.12-59.5.1 libsmbsharemodes0-3.6.12-59.5.1 libsmbsharemodes0-debuginfo-3.6.12-59.5.1 libwbclient-devel-3.6.12-59.5.1 libwbclient0-3.6.12-59.5.1 libwbclient0-debuginfo-3.6.12-59.5.1 samba-3.6.12-59.5.1 samba-client-3.6.12-59.5.1 samba-client-debuginfo-3.6.12-59.5.1 samba-debuginfo-3.6.12-59.5.1 samba-debugsource-3.6.12-59.5.1 samba-devel-3.6.12-59.5.1 samba-krb-printing-3.6.12-59.5.1 samba-krb-printing-debuginfo-3.6.12-59.5.1 samba-winbind-3.6.12-59.5.1 samba-winbind-debuginfo-3.6.12-59.5.1 - openSUSE 12.3 (x86_64): libsmbclient0-32bit-3.6.12-59.5.1 libsmbclient0-debuginfo-32bit-3.6.12-59.5.1 libwbclient0-32bit-3.6.12-59.5.1 libwbclient0-debuginfo-32bit-3.6.12-59.5.1 samba-32bit-3.6.12-59.5.1 samba-client-32bit-3.6.12-59.5.1 samba-client-debuginfo-32bit-3.6.12-59.5.1 samba-debuginfo-32bit-3.6.12-59.5.1 samba-winbind-32bit-3.6.12-59.5.1 samba-winbind-debuginfo-32bit-3.6.12-59.5.1 - openSUSE 12.3 (noarch): samba-doc-3.6.12-59.5.1 References: http://support.novell.com/security/cve/CVE-2013-0454.html https://bugzilla.novell.com/786350 https://bugzilla.novell.com/792294 https://bugzilla.novell.com/800782 https://bugzilla.novell.com/802031 https://bugzilla.novell.com/807334 https://bugzilla.novell.com/811975 https://bugzilla.novell.com/815994

1 0

openSUSE-SU-2013:0932-1: moderate: subversion: security and bugfix minor version update
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: subversion: security and bugfix minor version update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0932-1 Rating: moderate References: #710878 #796050 #813913 Cross-References: CVE-2013-1845 CVE-2013-1846 CVE-2013-1847 CVE-2013-1849 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Subversion received a minor version update to fix remote triggerable vulnerabilities in mod_dav_svn which may result in denial of service. - update to 1.6.21 [bnc#813913], addressing remotely triggerable + CVE-2013-1845: mod_dav_svn excessive memory usage from property changes + CVE-2013-1846: mod_dav_svn crashes on LOCK requests against activity URLs + CVE-2013-1847: mod_dav_svn crashes on LOCK requests against non-existant URLs + CVE-2013-1849: mod_dav_svn crashes on PROPFIND requests against activity URLs - further changes: + mod_dav_svn will omit some property values for activity urls + improve memory usage when committing properties in mod_dav_svn + fix mod_dav_svn runs pre-revprop-change twice + fixed: post-revprop-change errors cancel commit + improved logic in mod_dav_svn's implementation of lock. + fix a compatibility issue with g++ 4.7 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-76 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.6.21-47.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.6.21-47.1 libsvn_auth_kwallet-1-0-1.6.21-47.1 libsvn_auth_kwallet-1-0-debuginfo-1.6.21-47.1 subversion-1.6.21-47.1 subversion-debuginfo-1.6.21-47.1 subversion-debugsource-1.6.21-47.1 subversion-devel-1.6.21-47.1 subversion-perl-1.6.21-47.1 subversion-perl-debuginfo-1.6.21-47.1 subversion-python-1.6.21-47.1 subversion-python-debuginfo-1.6.21-47.1 subversion-ruby-1.6.21-47.1 subversion-ruby-debuginfo-1.6.21-47.1 subversion-server-1.6.21-47.1 subversion-server-debuginfo-1.6.21-47.1 subversion-tools-1.6.21-47.1 subversion-tools-debuginfo-1.6.21-47.1 References: http://support.novell.com/security/cve/CVE-2013-1845.html http://support.novell.com/security/cve/CVE-2013-1846.html http://support.novell.com/security/cve/CVE-2013-1847.html http://support.novell.com/security/cve/CVE-2013-1849.html https://bugzilla.novell.com/710878 https://bugzilla.novell.com/796050 https://bugzilla.novell.com/813913

1 0

openSUSE-RU-2013:0931-1: chocolate-doom: Search /usr/share/doom for IWADs as well
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: chocolate-doom: Search /usr/share/doom for IWADs as well ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0931-1 Rating: low References: #818102 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issue with chocolate-doom: - bnc#818102: Search /usr/share/doom for IWADs as well - Remove unnecessary INSTALL file Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-416 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): chocolate-doom-1.7.0-2.5.1 chocolate-doom-debuginfo-1.7.0-2.5.1 chocolate-doom-debugsource-1.7.0-2.5.1 References: https://bugzilla.novell.com/818102

1 0

openSUSE-RU-2013:0930-1: python3: remove spurious modification of python-3.3.0b1-localpath.patch
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: python3: remove spurious modification of python-3.3.0b1-localpath.patch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0930-1 Rating: low References: #809831 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with python3: - bnc#809831: remove spurious modification of python-3.3.0b1-localpath.patch. That would force installation into /usr/local. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-397 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libpython3_3m1_0-3.3.0-6.7.1 libpython3_3m1_0-debuginfo-3.3.0-6.7.1 python3-3.3.0-6.7.1 python3-base-3.3.0-6.7.1 python3-base-debuginfo-3.3.0-6.7.1 python3-base-debugsource-3.3.0-6.7.1 python3-curses-3.3.0-6.7.1 python3-curses-debuginfo-3.3.0-6.7.1 python3-dbm-3.3.0-6.7.1 python3-dbm-debuginfo-3.3.0-6.7.1 python3-debuginfo-3.3.0-6.7.1 python3-debugsource-3.3.0-6.7.1 python3-devel-3.3.0-6.7.1 python3-devel-debuginfo-3.3.0-6.7.1 python3-idle-3.3.0-6.7.1 python3-testsuite-3.3.0-6.7.1 python3-testsuite-debuginfo-3.3.0-6.7.1 python3-tk-3.3.0-6.7.1 python3-tk-debuginfo-3.3.0-6.7.1 python3-tools-3.3.0-6.7.1 - openSUSE 12.3 (x86_64): libpython3_3m1_0-32bit-3.3.0-6.7.1 libpython3_3m1_0-debuginfo-32bit-3.3.0-6.7.1 python3-32bit-3.3.0-6.7.1 python3-base-32bit-3.3.0-6.7.1 python3-base-debuginfo-32bit-3.3.0-6.7.1 python3-debuginfo-32bit-3.3.0-6.7.1 - openSUSE 12.3 (noarch): python3-doc-3.3.0-6.7.1 python3-doc-pdf-3.3.0-6.7.1 References: https://bugzilla.novell.com/809831

1 0

openSUSE-SU-2013:0929-1: important: xulrunner to 17.0.6esr
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: xulrunner to 17.0.6esr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0929-1 Rating: important References: #819204 Cross-References: CVE-2013-0801 CVE-2013-1669 CVE-2013-1670 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: Mozilla xulrunner was updated to 17.0.6esr (bnc#819204) * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards * MFSA 2013-42/CVE-2013-1670 (bmo#853709) Privileged access for content level constructor * MFSA 2013-46/CVE-2013-1674 (bmo#860971) Use-after-free with video and onresize event * MFSA 2013-47/CVE-2013-1675 (bmo#866825) Uninitialized functions in DOMSVGZoomEvent * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/ CVE-2013-1679/CVE-2013-1680/CVE-2013-1681 Memory corruption found using Address Sanitizer Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-448 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): mozilla-js-17.0.6-1.12.1 mozilla-js-debuginfo-17.0.6-1.12.1 xulrunner-17.0.6-1.12.1 xulrunner-buildsymbols-17.0.6-1.12.1 xulrunner-debuginfo-17.0.6-1.12.1 xulrunner-debugsource-17.0.6-1.12.1 xulrunner-devel-17.0.6-1.12.1 xulrunner-devel-debuginfo-17.0.6-1.12.1 - openSUSE 12.3 (x86_64): mozilla-js-32bit-17.0.6-1.12.1 mozilla-js-debuginfo-32bit-17.0.6-1.12.1 xulrunner-32bit-17.0.6-1.12.1 xulrunner-debuginfo-32bit-17.0.6-1.12.1 References: http://support.novell.com/security/cve/CVE-2013-0801.html http://support.novell.com/security/cve/CVE-2013-1669.html http://support.novell.com/security/cve/CVE-2013-1670.html http://support.novell.com/security/cve/CVE-2013-1674.html http://support.novell.com/security/cve/CVE-2013-1675.html http://support.novell.com/security/cve/CVE-2013-1676.html http://support.novell.com/security/cve/CVE-2013-1677.html http://support.novell.com/security/cve/CVE-2013-1678.html http://support.novell.com/security/cve/CVE-2013-1679.html http://support.novell.com/security/cve/CVE-2013-1680.html http://support.novell.com/security/cve/CVE-2013-1681.html https://bugzilla.novell.com/819204

1 0

openSUSE-RU-2013:0928-1: libjpeg-turbo: Add libjpe62-turbo Package
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: libjpeg-turbo: Add libjpe62-turbo Package ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0928-1 Rating: low References: #807183 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with libjpeg-turbo: - bnc#807163: Add libjpeg62-turbo package to provide libjpeg.so.62, which is required by LSB specification. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-458 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libjpeg-turbo-1.2.1-19.4.1 libjpeg-turbo-debuginfo-1.2.1-19.4.1 libjpeg-turbo-debugsource-1.2.1-19.4.1 libjpeg8-8.0.2-19.4.1 libjpeg8-debuginfo-8.0.2-19.4.1 libjpeg8-devel-8.0.2-19.4.1 - openSUSE 12.3 (x86_64): libjpeg8-32bit-8.0.2-19.4.1 libjpeg8-debuginfo-32bit-8.0.2-19.4.1 libjpeg8-devel-32bit-8.0.2-19.4.1 References: https://bugzilla.novell.com/807183

1 0

openSUSE-SU-2013:0927-1: update kernel to 3.0
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

1 0

openSUSE-RU-2013:0926-1: python-veusz: Update to 1.17.1
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: python-veusz: Update to 1.17.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0926-1 Rating: low References: #814103 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issues for python-veusz: - bnc#814103: - version 1.17.1: + Allow coloured points for non-orthogonal plots (polar, ternary) + Remove unnecessary exception data + Bug fixes: * Fix Print dialog * Fix command-line "Print" command * Fix duplicate axes drawn in grid * Fix crash adding empty polar plot - version 1.17: + Add new broken axis widget with gaps in the numerical sequence + Grid lines are plotted always under (or over) the data + Shift+Scroll wheel scrolls left/right + Polar plots can have a "minimum" radius and log axes + Many more LaTeX symbols added + Add SAMP/VoTable support + New shifted-points xy line mode, which plots a stepped line with the points shifted to lie between the coordinates given + Points can be picked to console and/or clipboard + Allow reversed ternary plot + Bug fixes: * Fix unicode characters for \circ and \odot * Fix for data type of pickable points * Fix sort by group crash bug * Many crashes fixed * Fix width of key when using long titles/and or multiple columns * Fix bold and italic output in SVG output Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-358 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): python-veusz-1.17.1-4.4.1 python-veusz-debuginfo-1.17.1-4.4.1 python-veusz-debugsource-1.17.1-4.4.1 References: https://bugzilla.novell.com/814103

1 0

openSUSE-SU-2013:0925-1: important: kernel: security and bugfix update
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: kernel: security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0925-1 Rating: important References: #578046 #651219 #714604 #722398 #730117 #736149 #738210 #744692 #754583 #754898 #758243 #761849 #762424 #763494 #767612 #768052 #773577 #776787 #777616 #777746 #779577 #780977 #786150 #786814 #786900 #787821 #788826 #789235 #789311 #789359 #790867 #792674 #792793 #793139 #793671 #794513 #794529 #794805 #795269 #795928 #795957 #795961 #796412 #796418 #796823 #797042 #797175 #798921 #799197 #799209 #799270 #799275 #799578 #799926 #800280 #800701 #801038 #801178 #801713 #801717 #801720 #801782 #802153 #802353 #802445 #802712 #803056 #803067 #803394 #803674 #803712 #804154 #804220 #804609 #805823 #806138 #806395 #806404 #806431 #806466 #806469 #806492 #806631 #806825 #806847 #806908 #806976 #806980 #807431 #807517 #807560 #807853 #808166 #808307 #808829 #808966 #808991 #809155 #809166 #809375 #809493 #809748 #812281 #812315 #813963 #816443 #819789 #89359 Cross-References: CVE-2010-3873 CVE-2011-4131 CVE-2011-4604 CVE-2011-4622 CVE-2012-1601 CVE-2012-2119 CVE-2012-2137 CVE-2012-4461 CVE-2012-5517 CVE-2013-0160 CVE-2013-0216 CVE-2013-0231 CVE-2013-0871 CVE-2013-0913 CVE-2013-1767 CVE-2013-1774 CVE-2013-1796 CVE-2013-1797 CVE-2013-1798 CVE-2013-1848 CVE-2013-2094 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves 21 vulnerabilities and has 87 fixes is now available. Description: The Linux kernel was updated to 3.0.74 to fix various bugs and security issues. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-90 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): iscsitarget-1.4.19-18.2 iscsitarget-debuginfo-1.4.19-18.2 iscsitarget-debugsource-1.4.19-18.2 iscsitarget-kmp-default-1.4.19_3.0.74_34-18.2 iscsitarget-kmp-default-debuginfo-1.4.19_3.0.74_34-18.2 iscsitarget-kmp-desktop-1.4.19_3.0.74_34-18.2 iscsitarget-kmp-desktop-debuginfo-1.4.19_3.0.74_34-18.2 iscsitarget-kmp-xen-1.4.19_3.0.74_34-18.2 iscsitarget-kmp-xen-debuginfo-1.4.19_3.0.74_34-18.2 kernel-debug-3.0.74-34.1 kernel-debug-base-3.0.74-34.1 kernel-debug-base-debuginfo-3.0.74-34.1 kernel-debug-debuginfo-3.0.74-34.1 kernel-debug-debugsource-3.0.74-34.1 kernel-debug-devel-3.0.74-34.1 kernel-debug-devel-debuginfo-3.0.74-34.1 kernel-debug-hmac-3.0.74-34.1 kernel-default-3.0.74-34.1 kernel-default-base-3.0.74-34.1 kernel-default-base-debuginfo-3.0.74-34.1 kernel-default-debuginfo-3.0.74-34.1 kernel-default-debugsource-3.0.74-34.1 kernel-default-devel-3.0.74-34.1 kernel-default-devel-debuginfo-3.0.74-34.1 kernel-default-hmac-3.0.74-34.1 kernel-desktop-3.0.74-34.1 kernel-desktop-base-3.0.74-34.1 kernel-desktop-base-debuginfo-3.0.74-34.1 kernel-desktop-debuginfo-3.0.74-34.1 kernel-desktop-debugsource-3.0.74-34.1 kernel-desktop-devel-3.0.74-34.1 kernel-desktop-devel-debuginfo-3.0.74-34.1 kernel-desktop-hmac-3.0.74-34.1 kernel-ec2-3.0.74-34.1 kernel-ec2-base-3.0.74-34.1 kernel-ec2-base-debuginfo-3.0.74-34.1 kernel-ec2-debuginfo-3.0.74-34.1 kernel-ec2-debugsource-3.0.74-34.1 kernel-ec2-devel-3.0.74-34.1 kernel-ec2-devel-debuginfo-3.0.74-34.1 kernel-ec2-extra-3.0.74-34.1 kernel-ec2-extra-debuginfo-3.0.74-34.1 kernel-ec2-hmac-3.0.74-34.1 kernel-source-3.0.74-34.1 kernel-source-vanilla-3.0.74-34.1 kernel-syms-3.0.74-34.1 kernel-trace-3.0.74-34.1 kernel-trace-base-3.0.74-34.1 kernel-trace-base-debuginfo-3.0.74-34.1 kernel-trace-debuginfo-3.0.74-34.1 kernel-trace-debugsource-3.0.74-34.1 kernel-trace-devel-3.0.74-34.1 kernel-trace-devel-debuginfo-3.0.74-34.1 kernel-trace-hmac-3.0.74-34.1 kernel-vanilla-3.0.74-34.1 kernel-vanilla-base-3.0.74-34.1 kernel-vanilla-base-debuginfo-3.0.74-34.1 kernel-vanilla-debuginfo-3.0.74-34.1 kernel-vanilla-debugsource-3.0.74-34.1 kernel-vanilla-devel-3.0.74-34.1 kernel-vanilla-devel-debuginfo-3.0.74-34.1 kernel-vanilla-hmac-3.0.74-34.1 kernel-xen-3.0.74-34.1 kernel-xen-base-3.0.74-34.1 kernel-xen-base-debuginfo-3.0.74-34.1 kernel-xen-debuginfo-3.0.74-34.1 kernel-xen-debugsource-3.0.74-34.1 kernel-xen-devel-3.0.74-34.1 kernel-xen-devel-debuginfo-3.0.74-34.1 kernel-xen-hmac-3.0.74-34.1 libvmtools-devel-2012.8.8.1-41.1 libvmtools0-2012.8.8.1-41.1 libvmtools0-debuginfo-2012.8.8.1-41.1 ndiswrapper-1.57rc1-20.1 ndiswrapper-debuginfo-1.57rc1-20.1 ndiswrapper-debugsource-1.57rc1-20.1 ndiswrapper-kmp-default-1.57rc1_3.0.74_34-20.1 ndiswrapper-kmp-default-debuginfo-1.57rc1_3.0.74_34-20.1 ndiswrapper-kmp-desktop-1.57rc1_3.0.74_34-20.1 ndiswrapper-kmp-desktop-debuginfo-1.57rc1_3.0.74_34-20.1 omnibook-debugsource-20100406-13.1 omnibook-kmp-default-20100406_3.0.74_34-13.1 omnibook-kmp-default-debuginfo-20100406_3.0.74_34-13.1 omnibook-kmp-desktop-20100406_3.0.74_34-13.1 omnibook-kmp-desktop-debuginfo-20100406_3.0.74_34-13.1 omnibook-kmp-xen-20100406_3.0.74_34-13.1 omnibook-kmp-xen-debuginfo-20100406_3.0.74_34-13.1 open-vm-tools-2012.8.8.1-41.1 open-vm-tools-debuginfo-2012.8.8.1-41.1 open-vm-tools-debugsource-2012.8.8.1-41.1 open-vm-tools-gui-2012.8.8.1-41.1 open-vm-tools-gui-debuginfo-2012.8.8.1-41.1 pcfclock-0.44-250.1 pcfclock-debuginfo-0.44-250.1 pcfclock-debugsource-0.44-250.1 pcfclock-kmp-default-0.44_3.0.74_34-250.1 pcfclock-kmp-default-debuginfo-0.44_3.0.74_34-250.1 pcfclock-kmp-desktop-0.44_3.0.74_34-250.1 pcfclock-kmp-desktop-debuginfo-0.44_3.0.74_34-250.1 preload-1.2-6.29.1 preload-debuginfo-1.2-6.29.1 preload-debugsource-1.2-6.29.1 preload-kmp-default-1.2_3.0.74_34-6.29.1 preload-kmp-default-debuginfo-1.2_3.0.74_34-6.29.1 preload-kmp-desktop-1.2_3.0.74_34-6.29.1 preload-kmp-desktop-debuginfo-1.2_3.0.74_34-6.29.1 python-virtualbox-4.0.12-0.58.1 python-virtualbox-debuginfo-4.0.12-0.58.1 systemtap-1.4-1.11.1 systemtap-client-1.4-1.11.1 systemtap-client-debuginfo-1.4-1.11.1 systemtap-debuginfo-1.4-1.11.1 systemtap-debugsource-1.4-1.11.1 systemtap-runtime-1.4-1.11.1 systemtap-runtime-debuginfo-1.4-1.11.1 systemtap-sdt-devel-1.4-1.11.1 systemtap-server-1.4-1.11.1 systemtap-server-debuginfo-1.4-1.11.1 virtualbox-4.0.12-0.58.1 virtualbox-debuginfo-4.0.12-0.58.1 virtualbox-debugsource-4.0.12-0.58.1 virtualbox-devel-4.0.12-0.58.1 virtualbox-guest-kmp-default-4.0.12_3.0.74_34-0.58.1 virtualbox-guest-kmp-default-debuginfo-4.0.12_3.0.74_34-0.58.1 virtualbox-guest-kmp-desktop-4.0.12_3.0.74_34-0.58.1 virtualbox-guest-kmp-desktop-debuginfo-4.0.12_3.0.74_34-0.58.1 virtualbox-guest-tools-4.0.12-0.58.1 virtualbox-guest-tools-debuginfo-4.0.12-0.58.1 virtualbox-guest-x11-4.0.12-0.58.1 virtualbox-guest-x11-debuginfo-4.0.12-0.58.1 virtualbox-host-kmp-default-4.0.12_3.0.74_34-0.58.1 virtualbox-host-kmp-default-debuginfo-4.0.12_3.0.74_34-0.58.1 virtualbox-host-kmp-desktop-4.0.12_3.0.74_34-0.58.1 virtualbox-host-kmp-desktop-debuginfo-4.0.12_3.0.74_34-0.58.1 virtualbox-qt-4.0.12-0.58.1 virtualbox-qt-debuginfo-4.0.12-0.58.1 vmware-guest-kmp-default-2012.8.8.1_3.0.74_34-41.1 vmware-guest-kmp-default-debuginfo-2012.8.8.1_3.0.74_34-41.1 vmware-guest-kmp-desktop-2012.8.8.1_3.0.74_34-41.1 vmware-guest-kmp-desktop-debuginfo-2012.8.8.1_3.0.74_34-41.1 xen-4.0.3_05-57.1 xen-debugsource-4.0.3_05-57.1 xen-devel-4.0.3_05-57.1 xen-doc-html-4.0.3_05-57.1 xen-doc-pdf-4.0.3_05-57.1 xen-kmp-default-4.0.3_05_3.0.74_34-57.1 xen-kmp-default-debuginfo-4.0.3_05_3.0.74_34-57.1 xen-kmp-desktop-4.0.3_05_3.0.74_34-57.1 xen-kmp-desktop-debuginfo-4.0.3_05_3.0.74_34-57.1 xen-libs-4.0.3_05-57.1 xen-libs-debuginfo-4.0.3_05-57.1 xen-tools-4.0.3_05-57.1 xen-tools-debuginfo-4.0.3_05-57.1 xen-tools-domU-4.0.3_05-57.1 xen-tools-domU-debuginfo-4.0.3_05-57.1 xtables-addons-1.37-0.22.1 xtables-addons-debuginfo-1.37-0.22.1 xtables-addons-debugsource-1.37-0.22.1 xtables-addons-kmp-default-1.37_3.0.74_34-0.22.1 xtables-addons-kmp-default-debuginfo-1.37_3.0.74_34-0.22.1 xtables-addons-kmp-desktop-1.37_3.0.74_34-0.22.1 xtables-addons-kmp-desktop-debuginfo-1.37_3.0.74_34-0.22.1 xtables-addons-kmp-xen-1.37_3.0.74_34-0.22.1 xtables-addons-kmp-xen-debuginfo-1.37_3.0.74_34-0.22.1 - openSUSE 11.4 (noarch): kernel-docs-3.0.74-34.2 - openSUSE 11.4 (i586): iscsitarget-kmp-pae-1.4.19_3.0.74_34-18.2 iscsitarget-kmp-pae-debuginfo-1.4.19_3.0.74_34-18.2 kernel-pae-3.0.74-34.1 kernel-pae-base-3.0.74-34.1 kernel-pae-base-debuginfo-3.0.74-34.1 kernel-pae-debuginfo-3.0.74-34.1 kernel-pae-debugsource-3.0.74-34.1 kernel-pae-devel-3.0.74-34.1 kernel-pae-devel-debuginfo-3.0.74-34.1 kernel-pae-hmac-3.0.74-34.1 kernel-vmi-3.0.74-34.1 kernel-vmi-base-3.0.74-34.1 kernel-vmi-base-debuginfo-3.0.74-34.1 kernel-vmi-debuginfo-3.0.74-34.1 kernel-vmi-debugsource-3.0.74-34.1 kernel-vmi-devel-3.0.74-34.1 kernel-vmi-devel-debuginfo-3.0.74-34.1 kernel-vmi-hmac-3.0.74-34.1 ndiswrapper-kmp-pae-1.57rc1_3.0.74_34-20.1 ndiswrapper-kmp-pae-debuginfo-1.57rc1_3.0.74_34-20.1 omnibook-kmp-pae-20100406_3.0.74_34-13.1 omnibook-kmp-pae-debuginfo-20100406_3.0.74_34-13.1 pcfclock-kmp-pae-0.44_3.0.74_34-250.1 pcfclock-kmp-pae-debuginfo-0.44_3.0.74_34-250.1 virtualbox-guest-kmp-pae-4.0.12_3.0.74_34-0.58.1 virtualbox-guest-kmp-pae-debuginfo-4.0.12_3.0.74_34-0.58.1 virtualbox-host-kmp-pae-4.0.12_3.0.74_34-0.58.1 virtualbox-host-kmp-pae-debuginfo-4.0.12_3.0.74_34-0.58.1 vmware-guest-kmp-pae-2012.8.8.1_3.0.74_34-41.1 vmware-guest-kmp-pae-debuginfo-2012.8.8.1_3.0.74_34-41.1 xen-kmp-pae-4.0.3_05_3.0.74_34-57.1 xen-kmp-pae-debuginfo-4.0.3_05_3.0.74_34-57.1 xtables-addons-kmp-pae-1.37_3.0.74_34-0.22.1 xtables-addons-kmp-pae-debuginfo-1.37_3.0.74_34-0.22.1 References: http://support.novell.com/security/cve/CVE-2010-3873.html http://support.novell.com/security/cve/CVE-2011-4131.html http://support.novell.com/security/cve/CVE-2011-4604.html http://support.novell.com/security/cve/CVE-2011-4622.html http://support.novell.com/security/cve/CVE-2012-1601.html http://support.novell.com/security/cve/CVE-2012-2119.html http://support.novell.com/security/cve/CVE-2012-2137.html http://support.novell.com/security/cve/CVE-2012-4461.html http://support.novell.com/security/cve/CVE-2012-5517.html http://support.novell.com/security/cve/CVE-2013-0160.html http://support.novell.com/security/cve/CVE-2013-0216.html http://support.novell.com/security/cve/CVE-2013-0231.html http://support.novell.com/security/cve/CVE-2013-0871.html http://support.novell.com/security/cve/CVE-2013-0913.html http://support.novell.com/security/cve/CVE-2013-1767.html http://support.novell.com/security/cve/CVE-2013-1774.html http://support.novell.com/security/cve/CVE-2013-1796.html http://support.novell.com/security/cve/CVE-2013-1797.html http://support.novell.com/security/cve/CVE-2013-1798.html http://support.novell.com/security/cve/CVE-2013-1848.html http://support.novell.com/security/cve/CVE-2013-2094.html https://bugzilla.novell.com/578046 https://bugzilla.novell.com/651219 https://bugzilla.novell.com/714604 https://bugzilla.novell.com/722398 https://bugzilla.novell.com/730117 https://bugzilla.novell.com/736149 https://bugzilla.novell.com/738210 https://bugzilla.novell.com/744692 https://bugzilla.novell.com/754583 https://bugzilla.novell.com/754898 https://bugzilla.novell.com/758243 https://bugzilla.novell.com/761849 https://bugzilla.novell.com/762424 https://bugzilla.novell.com/763494 https://bugzilla.novell.com/767612 https://bugzilla.novell.com/768052 https://bugzilla.novell.com/773577 https://bugzilla.novell.com/776787 https://bugzilla.novell.com/777616 https://bugzilla.novell.com/777746 https://bugzilla.novell.com/779577 https://bugzilla.novell.com/780977 https://bugzilla.novell.com/786150 https://bugzilla.novell.com/786814 https://bugzilla.novell.com/786900 https://bugzilla.novell.com/787821 https://bugzilla.novell.com/788826 https://bugzilla.novell.com/789235 https://bugzilla.novell.com/789311 https://bugzilla.novell.com/789359 https://bugzilla.novell.com/790867 https://bugzilla.novell.com/792674 https://bugzilla.novell.com/792793 https://bugzilla.novell.com/793139 https://bugzilla.novell.com/793671 https://bugzilla.novell.com/794513 https://bugzilla.novell.com/794529 https://bugzilla.novell.com/794805 https://bugzilla.novell.com/795269 https://bugzilla.novell.com/795928 https://bugzilla.novell.com/795957 https://bugzilla.novell.com/795961 https://bugzilla.novell.com/796412 https://bugzilla.novell.com/796418 https://bugzilla.novell.com/796823 https://bugzilla.novell.com/797042 https://bugzilla.novell.com/797175 https://bugzilla.novell.com/798921 https://bugzilla.novell.com/799197 https://bugzilla.novell.com/799209 https://bugzilla.novell.com/799270 https://bugzilla.novell.com/799275 https://bugzilla.novell.com/799578 https://bugzilla.novell.com/799926 https://bugzilla.novell.com/800280 https://bugzilla.novell.com/800701 https://bugzilla.novell.com/801038 https://bugzilla.novell.com/801178 https://bugzilla.novell.com/801713 https://bugzilla.novell.com/801717 https://bugzilla.novell.com/801720 https://bugzilla.novell.com/801782 https://bugzilla.novell.com/802153 https://bugzilla.novell.com/802353 https://bugzilla.novell.com/802445 https://bugzilla.novell.com/802712 https://bugzilla.novell.com/803056 https://bugzilla.novell.com/803067 https://bugzilla.novell.com/803394 https://bugzilla.novell.com/803674 https://bugzilla.novell.com/803712 https://bugzilla.novell.com/804154 https://bugzilla.novell.com/804220 https://bugzilla.novell.com/804609 https://bugzilla.novell.com/805823 https://bugzilla.novell.com/806138 https://bugzilla.novell.com/806395 https://bugzilla.novell.com/806404 https://bugzilla.novell.com/806431 https://bugzilla.novell.com/806466 https://bugzilla.novell.com/806469 https://bugzilla.novell.com/806492 https://bugzilla.novell.com/806631 https://bugzilla.novell.com/806825 https://bugzilla.novell.com/806847 https://bugzilla.novell.com/806908 https://bugzilla.novell.com/806976 https://bugzilla.novell.com/806980 https://bugzilla.novell.com/807431 https://bugzilla.novell.com/807517 https://bugzilla.novell.com/807560 https://bugzilla.novell.com/807853 https://bugzilla.novell.com/808166 https://bugzilla.novell.com/808307 https://bugzilla.novell.com/808829 https://bugzilla.novell.com/808966 https://bugzilla.novell.com/808991 https://bugzilla.novell.com/809155 https://bugzilla.novell.com/809166 https://bugzilla.novell.com/809375 https://bugzilla.novell.com/809493 https://bugzilla.novell.com/809748 https://bugzilla.novell.com/812281 https://bugzilla.novell.com/812315 https://bugzilla.novell.com/813963 https://bugzilla.novell.com/816443 https://bugzilla.novell.com/819789 https://bugzilla.novell.com/89359

1 0

openSUSE-RU-2013:0924-1: ModemManager: Fixed hang and crash
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: ModemManager: Fixed hang and crash ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0924-1 Rating: low References: #811398 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with ModemManager: - bnc#811398: If a port finishes probing from the first plugin, and then starts being probed by a second plugin, and then a different port finishes probing and creates a Modem object for that device, always let the Modem object's plugin grab the port and ignore any other plugin. Only one plugin may control modem ports. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-389 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): ModemManager-0.6.0.0-3.8.1 ModemManager-debuginfo-0.6.0.0-3.8.1 ModemManager-debugsource-0.6.0.0-3.8.1 ModemManager-devel-0.6.0.0-3.8.1 References: https://bugzilla.novell.com/811398

1 0

openSUSE-SU-2013:0923-1: moderate: kernel: security and bugfix update
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: kernel: security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0923-1 Rating: moderate References: #800686 #802812 #806966 #806980 #806990 #807850 #808829 #809155 #809330 #809748 #811417 #812113 Cross-References: CVE-2013-0913 CVE-2013-1796 CVE-2013-1797 CVE-2013-1798 CVE-2013-1848 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has 7 fixes is now available. Description: The openSUSE 12.3 kernel was updated to fix various security issues and bugs: - config.conf: Disable armv7hl/u8500 until it builds again - patches.fixes/ocfs2-Fix-oops-in-ocfs2_fast_symlink_readpage: ocfs2: Fix oops in ocfs2_fast_symlink_readpage() code path - drm/nouveau: Fix typo in init_idx_addr_latched() (bnc#800686). - rtl28xxu: Add USB ID for MaxMedia HU394-T (bnc#812113). - rtl28xxu: Add USB IDs for Compro VideoMate U620F (bnc#812113). - Support Digivox Mini HD (rtl2832) (bnc#812113). - rtl28xxu: correct some device names (bnc#812113). - rtl28xxu: add Gigabyte U7300 DVB-T Dongle (bnc#812113). - rtl28xxu: [1b80:d3a8] ASUS My Cinema-U3100Mini Plus V2 (bnc#812113). - rtl28xxu: add NOXON DAB/DAB+ USB dongle rev 2 (bnc#812113). - drm: correctly restore mappings if drm_open fails (bnc#807850). - Drivers: hv: vmbus: Fix a bug in hv_need_to_signal() (bnc#811417). - svcrpc: fix rpc server shutdown races (bnc#802812). - Update patches to what was accepted upstream. - Refresh patches.arch/kvm-convert-msr_kvm_system_time-to-use-gfn_to_h va_cache_init.patch. - Refresh patches.arch/kvm-fix-for-buffer-overflow-in-handling-of-msr_ kvm_system_time.patch. - KVM: Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache_init (bnc#806980 CVE-2013-1797). - KVM: Fix bounds checking in ioapic indirect register read (bnc#806980 CVE-2013-1798). - KVM: Fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (bnc#806980 CVE-2013-1796). - kabi/severities: Allow kvm abi changes - kvm modules are self consistent - loopdev: fix a deadlock (bnc#809748). - block: use i_size_write() in bd_set_size() (bnc#809748). - drm/i915: bounds check execbuffer relocation count (bnc#808829,CVE-2013-0913). - TTY: do not reset master's packet mode (bnc#809330). - Update patches.fixes/ext3-Fix-format-string-issues.patch (bnc#809155 CVE-2013-1848). - ext3: Fix format string issues (bnc#809155). - Drivers: hv: balloon: Do not request completion notification (fate#314663). - e1000e: fix runtime power management transitions (bnc#806966). - e1000e: fix pci-device enable-counter balance (bnc#806966). - e1000e: fix accessing to suspended device (bnc#806966). - gpio-ich: Fix ichx_gpio_check_available() return what callers expect. - gpio/ich: Add missing spinlock init. - Refresh patches.suse/SUSE-bootsplash-mgadrmfb-workaround. Add the same w/a for ast and cirrus KMS, too (bnc#806990). - Fix broken VT1 output with mgadrmfb (bnc#806990). - PCI/PM: Clear state_saved during suspend (bnc#806966). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-398 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): kernel-default-3.7.10-1.4.1 kernel-default-base-3.7.10-1.4.1 kernel-default-devel-3.7.10-1.4.1 kernel-syms-3.7.10-1.4.1 - openSUSE 12.3 (i686 x86_64): kernel-debug-3.7.10-1.4.1 kernel-debug-base-3.7.10-1.4.1 kernel-debug-devel-3.7.10-1.4.1 kernel-desktop-3.7.10-1.4.1 kernel-desktop-base-3.7.10-1.4.1 kernel-desktop-devel-3.7.10-1.4.1 kernel-ec2-3.7.10-1.4.1 kernel-ec2-base-3.7.10-1.4.1 kernel-ec2-base-debuginfo-3.7.10-1.4.1 kernel-ec2-debuginfo-3.7.10-1.4.1 kernel-ec2-debugsource-3.7.10-1.4.1 kernel-ec2-devel-3.7.10-1.4.1 kernel-ec2-devel-debuginfo-3.7.10-1.4.1 kernel-trace-3.7.10-1.4.1 kernel-trace-base-3.7.10-1.4.1 kernel-trace-devel-3.7.10-1.4.1 kernel-vanilla-3.7.10-1.4.1 kernel-vanilla-devel-3.7.10-1.4.1 kernel-xen-3.7.10-1.4.1 kernel-xen-base-3.7.10-1.4.1 kernel-xen-devel-3.7.10-1.4.1 - openSUSE 12.3 (noarch): kernel-devel-3.7.10-1.4.1 kernel-docs-3.7.10-1.4.3 kernel-source-3.7.10-1.4.1 kernel-source-vanilla-3.7.10-1.4.1 - openSUSE 12.3 (i686): kernel-debug-base-debuginfo-3.7.10-1.4.1 kernel-debug-debuginfo-3.7.10-1.4.1 kernel-debug-debugsource-3.7.10-1.4.1 kernel-debug-devel-debuginfo-3.7.10-1.4.1 kernel-desktop-base-debuginfo-3.7.10-1.4.1 kernel-desktop-debuginfo-3.7.10-1.4.1 kernel-desktop-debugsource-3.7.10-1.4.1 kernel-desktop-devel-debuginfo-3.7.10-1.4.1 kernel-pae-3.7.10-1.4.1 kernel-pae-base-3.7.10-1.4.1 kernel-pae-base-debuginfo-3.7.10-1.4.1 kernel-pae-debuginfo-3.7.10-1.4.1 kernel-pae-debugsource-3.7.10-1.4.1 kernel-pae-devel-3.7.10-1.4.1 kernel-pae-devel-debuginfo-3.7.10-1.4.1 kernel-trace-base-debuginfo-3.7.10-1.4.1 kernel-trace-debuginfo-3.7.10-1.4.1 kernel-trace-debugsource-3.7.10-1.4.1 kernel-trace-devel-debuginfo-3.7.10-1.4.1 kernel-vanilla-debuginfo-3.7.10-1.4.1 kernel-vanilla-debugsource-3.7.10-1.4.1 kernel-vanilla-devel-debuginfo-3.7.10-1.4.1 kernel-xen-base-debuginfo-3.7.10-1.4.1 kernel-xen-debuginfo-3.7.10-1.4.1 kernel-xen-debugsource-3.7.10-1.4.1 kernel-xen-devel-debuginfo-3.7.10-1.4.1 - openSUSE 12.3 (i586): kernel-default-base-debuginfo-3.7.10-1.4.1 kernel-default-debuginfo-3.7.10-1.4.1 kernel-default-debugsource-3.7.10-1.4.1 kernel-default-devel-debuginfo-3.7.10-1.4.1 References: http://support.novell.com/security/cve/CVE-2013-0913.html http://support.novell.com/security/cve/CVE-2013-1796.html http://support.novell.com/security/cve/CVE-2013-1797.html http://support.novell.com/security/cve/CVE-2013-1798.html http://support.novell.com/security/cve/CVE-2013-1848.html https://bugzilla.novell.com/800686 https://bugzilla.novell.com/802812 https://bugzilla.novell.com/806966 https://bugzilla.novell.com/806980 https://bugzilla.novell.com/806990 https://bugzilla.novell.com/807850 https://bugzilla.novell.com/808829 https://bugzilla.novell.com/809155 https://bugzilla.novell.com/809330 https://bugzilla.novell.com/809748 https://bugzilla.novell.com/811417 https://bugzilla.novell.com/812113

1 0

openSUSE-SU-2013:0922-1: moderate: tiff
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0922-1 Rating: moderate References: #817573 #818117 Cross-References: CVE-2013-1960 CVE-2013-1961 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: libtiff security update: * CVE-2013-1961.patch [bnc#818117] * CVE-2013-1960.patch [bnc#817573] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-81 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libtiff-devel-3.9.4-38.1 libtiff3-3.9.4-38.1 libtiff3-debuginfo-3.9.4-38.1 tiff-3.9.4-38.1 tiff-debuginfo-3.9.4-38.1 tiff-debugsource-3.9.4-38.1 - openSUSE 11.4 (x86_64): libtiff-devel-32bit-3.9.4-38.1 libtiff3-32bit-3.9.4-38.1 libtiff3-debuginfo-32bit-3.9.4-38.1 - openSUSE 11.4 (ia64): libtiff3-debuginfo-x86-3.9.4-38.1 libtiff3-x86-3.9.4-38.1 References: http://support.novell.com/security/cve/CVE-2013-1960.html http://support.novell.com/security/cve/CVE-2013-1961.html https://bugzilla.novell.com/817573 https://bugzilla.novell.com/818117

1 0

openSUSE-RU-2013:0921-1: important: timezone: Update to 2013c
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: timezone: Update to 2013c ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0921-1 Rating: important References: Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issues with timezone: - Regular timezone update to 2013c Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-368 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): timezone-2013c-2.13.1 timezone-debuginfo-2013c-2.13.1 timezone-debugsource-2013c-2.13.1 - openSUSE 12.3 (noarch): timezone-java-2013c-2.13.1 References:

1 0

openSUSE-RU-2013:0920-1: important: daps: Version update to DAPS 1.1.6 containing important fixes
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: daps: Version update to DAPS 1.1.6 containing important fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0920-1 Rating: important References: #818744 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with daps: - Bugfix: Typo in Varaiable name - Removed one unnecessary make info output which may produce irritating messages - bnc#818744: Version 1.1.6 (Bugfix release) + General: * reducing code by adding MAIN to the list of DOCFILES, by generating the list of ENTITY files globally and by using HTML_DIR for HTML. HTML-SINGLE and JSP + EPUB: * fixed critical error: a single tmp dir was used to generate different EPUB books * EPUB zip file is now generated from a file list extracted from OEBPS/content.opf. This ensures that only files referenced in the content.opf are packaged * Added fix for bug in DocBook stylesheets which generates an empty date entry in content.opf which causes a validation error * Improved CSS handling: - if no CSS file is specified on the command line or in the DC-file, the _first_ one found in STYLEDIR/epub/ is automatically used - --css now requires a parameter - if you do not want any CSS file to be used, specify "none": --css=none - EPUBs now validate with epubcheck 3.0 + HTML: * if using the DocBook standard layout for resources - STYLEDIR/images - STYLEDIR/FOO.css it is no longer manfdatory to specify a CSS file on the command line or in the DC-file. DAPS will automatically use the _first_ *.css file in STYLEDIR/ if none is specified * if using a static dir for resources - STYLEDIR/static |-css |-js |-images you can now specify an alternative css file with --css or an alternative static dir with --statdir * this makes it possible to switch between stylsheets using the two different resource directory approaches without having to modify a DC-file * the --css parameter now requires an argument. If you want to use no stylesheet at all, specify --css=none NOTE: This update requires to run the first HTML, HTML-Single and JSP build after the update with the --clean switch in order to create a clean result directory. * if both variants (STYLEDIR/images and STYLEDIR/static exist, the static directory is automatically used + LOCDROP: * DC-files are delivered with a locdrop if --def-file is specified * NO_TRANS_FILES was not correctly computed * entity files were missing in packages + PACKAGE-SRC: * entity files were missing in packages + ONLINE-DOCS: * generating a uniquely named graphics tarball for each book (when export-dir is set) instead of one that gets overwritten with each build Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-424 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): daps-1.1.6-1.9.1 References: https://bugzilla.novell.com/818744

1 0

openSUSE-RU-2013:0919-1: sensors: Several fixes
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: sensors: Several fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0919-1 Rating: low References: #810344 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with sensors: - bnc#810344: + pwmconfig: Raise the detection threshold to 3/4 + pwmconfig: Drop a stray comment. + pwmconfig: Properly deal with multiple fan control + fancontrol: Fix handling of absolute paths in config + Add fancontrol.service Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-469 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libsensors4-3.3.3-2.5.1 libsensors4-debuginfo-3.3.3-2.5.1 libsensors4-devel-3.3.3-2.5.1 sensord-3.3.3-2.5.1 sensord-debuginfo-3.3.3-2.5.1 sensors-3.3.3-2.5.1 sensors-debuginfo-3.3.3-2.5.1 sensors-debugsource-3.3.3-2.5.1 - openSUSE 12.3 (x86_64): libsensors4-32bit-3.3.3-2.5.1 libsensors4-debuginfo-32bit-3.3.3-2.5.1 References: https://bugzilla.novell.com/810344

1 0

openSUSE-RU-2013:0918-1: phonon: Fixes loading of plugins
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: phonon: Fixes loading of plugins ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0918-1 Rating: low References: Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issue with phonon: - Fixes loading of plugins outside of KDE sessions although the plugins are installed in the KDE directory Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-445 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libphonon4-4.6.0-7.4.1 libphonon4-debuginfo-4.6.0-7.4.1 phonon-debugsource-4.6.0-7.4.1 phonon-devel-4.6.0-7.4.1 phonon-devel-debuginfo-4.6.0-7.4.1 - openSUSE 12.3 (x86_64): libphonon4-32bit-4.6.0-7.4.1 libphonon4-debuginfo-32bit-4.6.0-7.4.1 References:

1 0

openSUSE-RU-2013:0917-1: cryptconfig: create loop devices on demand
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: cryptconfig: create loop devices on demand ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0917-1 Rating: low References: #816641 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: cryptconfig expected /dev/loop* to be present to create its loopback mounted images. As with openSUSE 12.3 this is no longer the case by default, the code was enhanced to use the current loop device allocation mechanisms. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-394 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): cryptconfig-0.3-87.4.1 cryptconfig-debuginfo-0.3-87.4.1 cryptconfig-debugsource-0.3-87.4.1 - openSUSE 12.3 (x86_64): cryptconfig-32bit-0.3-87.4.1 cryptconfig-debuginfo-32bit-0.3-87.4.1 References: https://bugzilla.novell.com/816641

1 0

openSUSE-SU-2013:0916-1: samba
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0916-1 Rating: low References: #786350 #800782 #802031 #807334 #815994 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: - Add support for PFC_FLAG_OBJECT_UUID when parsing packets; (bso#9382). - Fix "guest ok", "force user" and "force group" for guest users; (bso#9746). - Fix 'map untrusted to domain' with NTLMv2;(bso#9817). - Fix crash bug in Winbind; (bso#9854). - Fix panic in nt_printer_publish_ads; (bso#9830). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-87 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): ldapsmb-1.34b-122.1 libldb-devel-1.0.2-122.1 libldb1-1.0.2-122.1 libldb1-debuginfo-1.0.2-122.1 libnetapi-devel-3.6.3-122.1 libnetapi0-3.6.3-122.1 libnetapi0-debuginfo-3.6.3-122.1 libsmbclient-devel-3.6.3-122.1 libsmbclient0-3.6.3-122.1 libsmbclient0-debuginfo-3.6.3-122.1 libsmbsharemodes-devel-3.6.3-122.1 libsmbsharemodes0-3.6.3-122.1 libsmbsharemodes0-debuginfo-3.6.3-122.1 libtalloc-devel-2.0.5-122.1 libtalloc2-2.0.5-122.1 libtalloc2-debuginfo-2.0.5-122.1 libtdb-devel-1.2.9-122.1 libtdb1-1.2.9-122.1 libtdb1-debuginfo-1.2.9-122.1 libtevent-devel-0.9.11-122.1 libtevent0-0.9.11-122.1 libtevent0-debuginfo-0.9.11-122.1 libwbclient-devel-3.6.3-122.1 libwbclient0-3.6.3-122.1 libwbclient0-debuginfo-3.6.3-122.1 samba-3.6.3-122.1 samba-client-3.6.3-122.1 samba-client-debuginfo-3.6.3-122.1 samba-debuginfo-3.6.3-122.1 samba-debugsource-3.6.3-122.1 samba-devel-3.6.3-122.1 samba-krb-printing-3.6.3-122.1 samba-krb-printing-debuginfo-3.6.3-122.1 samba-winbind-3.6.3-122.1 samba-winbind-debuginfo-3.6.3-122.1 - openSUSE 11.4 (x86_64): libldb1-32bit-1.0.2-122.1 libldb1-debuginfo-32bit-1.0.2-122.1 libsmbclient0-32bit-3.6.3-122.1 libsmbclient0-debuginfo-32bit-3.6.3-122.1 libtalloc2-32bit-2.0.5-122.1 libtalloc2-debuginfo-32bit-2.0.5-122.1 libtdb1-32bit-1.2.9-122.1 libtdb1-debuginfo-32bit-1.2.9-122.1 libtevent0-32bit-0.9.11-122.1 libtevent0-debuginfo-32bit-0.9.11-122.1 libwbclient0-32bit-3.6.3-122.1 libwbclient0-debuginfo-32bit-3.6.3-122.1 samba-32bit-3.6.3-122.1 samba-client-32bit-3.6.3-122.1 samba-client-debuginfo-32bit-3.6.3-122.1 samba-debuginfo-32bit-3.6.3-122.1 samba-winbind-32bit-3.6.3-122.1 samba-winbind-debuginfo-32bit-3.6.3-122.1 - openSUSE 11.4 (noarch): samba-doc-3.6.3-122.1 - openSUSE 11.4 (ia64): libldb1-debuginfo-x86-1.0.2-122.1 libldb1-x86-1.0.2-122.1 libsmbclient0-debuginfo-x86-3.6.3-122.1 libsmbclient0-x86-3.6.3-122.1 libtalloc2-debuginfo-x86-2.0.5-122.1 libtalloc2-x86-2.0.5-122.1 libtdb1-debuginfo-x86-1.2.9-122.1 libtdb1-x86-1.2.9-122.1 libtevent0-debuginfo-x86-0.9.11-122.1 libtevent0-x86-0.9.11-122.1 libwbclient0-debuginfo-x86-3.6.3-122.1 libwbclient0-x86-3.6.3-122.1 samba-client-debuginfo-x86-3.6.3-122.1 samba-client-x86-3.6.3-122.1 samba-debuginfo-x86-3.6.3-122.1 samba-winbind-debuginfo-x86-3.6.3-122.1 samba-winbind-x86-3.6.3-122.1 samba-x86-3.6.3-122.1 References: https://bugzilla.novell.com/786350 https://bugzilla.novell.com/800782 https://bugzilla.novell.com/802031 https://bugzilla.novell.com/807334 https://bugzilla.novell.com/815994

1 0

openSUSE-SU-2013:0915-1: moderate: update for telepathy-idle
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: update for telepathy-idle ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0915-1 Rating: moderate References: #817120 Cross-References: CVE-2007-6746 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Changes in telepathy-idle: - Add telepathy-idle-require-tls-validation.patch (bnc#817120, CVE-2007-6746). This fixes flaws in the SSL certificate validation. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-427 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): telepathy-idle-0.1.14-2.4.1 telepathy-idle-debuginfo-0.1.14-2.4.1 telepathy-idle-debugsource-0.1.14-2.4.1 References: http://support.novell.com/security/cve/CVE-2007-6746.html https://bugzilla.novell.com/817120

1 0

openSUSE-RU-2013:0914-1: kdiff3: Fixed saving merged files
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: kdiff3: Fixed saving merged files ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0914-1 Rating: low References: Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issue with kdiff3: - Fix saving merged files using patch from https://bugs.archlinux.org/task/31813 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-420 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): kdiff3-0.9.97-2.5.1 kdiff3-debuginfo-0.9.97-2.5.1 kdiff3-debugsource-0.9.97-2.5.1 - openSUSE 12.3 (noarch): kdiff3-lang-0.9.97-2.5.1 References:

1 0

openSUSE-RU-2013:0913-1: moderate: evolution: update to version 3.6.4
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: evolution: update to version 3.6.4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0913-1 Rating: moderate References: #808067 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Evolution, evolution-data-server, and evolution-ews has been updated to version 3.6.4. gtkhtml is updated to version 4.6.5. The tracker-bug of this update is bnc#808067. evolution: - Update to version 3.6.4 + Add some missing mnemonic to widgets. + EAttachment: Use Subject as fallback filename for message attachments + Bugs fixed: * bgo#645476: Avoid scroll to cursor on folder change in message list * bgo#674236: Extra ref in e_action_combo_box_set_action() * bgo#693250: Signature HTML problem using angle-brackets * bgo#693254: Mail reply uses wrong "From:" account * bgo#693420: Crash when adding contact list as attendee * bgo#693625: [itip-formatter] Save button insensitive for multiple events * bgo#694159: Malformed content-type header causes infinite recursion * bgo#694170: Accepted invitation not removed from inbox though "Delete after action" enabled * bgo#694363: CALDAV navigation through Calendars or Tasklist is wrong * bgo#694460: 'Email' section toggle button in contact editor has incorrect name * bgo#694647: Crash in flush Outbox after Forward filter - New upstream stable patches: + evolution-dconf-settings-restore.patch -- Dir separator removal breaks DConf settings restore + evolution-message-leak.patch -- Do not leak each sent message evolution-data-server: - Update to version 3.6.4 + EGdbusTemplates: Address crash on operation cancel + [CalDAV] Try to search for event when not in local cache + ebook: avoid repeatedly creating GSettings in e_book_client_is self + source_write/remove_sync: Fail gracefully when given a scratch source. + Do not use SSL_V2_COMPATIBLE_HELLO by default + Local Delivery not updated on start and missing Receiving Options page + e_source_registry_server_load_directory: Monitor failure is non-fatal. + Speed-up auto-completion results showing + Bugs fixed: * bgo#675287: Spool file account doesn't show messages * bgo#694223: The "message-location" filter of vfolders never matches on IMAP+ folders * bgo#694734: Relative URI in Location on PUT confuses WebDAV - New patches from upstream stable branch: + bgo#695308: e-d-s-broken-signature-broken-migration.patch: Migration of broken signature breaks whole migration + bgo#690553: e-d-s-jabber-typo.patch: Correct names for im_jabber_work variables + bgo#696757: e-d-s-big-leak.patch: Do not use dynamic keys in g_object_set_data() evolution-ews: - Update to version 3.6.4 + Bugs fixed: * bgo#668489: Hide other than mail folders from mailer * bgo#692688: [abrt] Crash in strip_html_tags() * bgo#692705: Disable reminders for subscribed calendars of other users * bgo#693306: Folder types not set when any standard folder is missing + Be more forgiving with the invitation response status pairing - Add upstream patches from stable branch: + ews_gal_needs_update-error-handling.patch + bgo#699241: ews-gal-decompression-fails.patch: decompression fails. gtkhtml: - Update to version 4.6.5 + bgo#691362: gtkhtml/htmltext.c: Return correct enum type `PangoDirection` in `get_pango_base_direction` + bgo#699757: Crash in gtkhtml_spell_checker_get_suggestions() Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-471 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): evolution-3.6.4-1.7.1 evolution-data-server-3.6.4-1.11.1 evolution-data-server-debuginfo-3.6.4-1.11.1 evolution-data-server-debugsource-3.6.4-1.11.1 evolution-data-server-devel-3.6.4-1.11.1 evolution-data-server-doc-3.6.4-1.11.1 evolution-debuginfo-3.6.4-1.7.1 evolution-debugsource-3.6.4-1.7.1 evolution-devel-3.6.4-1.7.1 evolution-ews-3.6.4-1.6.1 evolution-ews-debuginfo-3.6.4-1.6.1 evolution-ews-debugsource-3.6.4-1.6.1 evolution-ews-devel-3.6.4-1.6.1 glade-catalog-evolution-3.6.4-1.7.1 glade-catalog-evolution-debuginfo-3.6.4-1.7.1 glade-catalog-gtkhtml-4.6.5-1.6.1 glade-catalog-gtkhtml-debuginfo-4.6.5-1.6.1 gtkhtml-debugsource-4.6.5-1.6.1 gtkhtml-devel-4.6.5-1.6.1 gtkhtml-devel-debuginfo-4.6.5-1.6.1 libcamel-1_2-40-3.6.4-1.11.1 libcamel-1_2-40-debuginfo-3.6.4-1.11.1 libebackend-1_2-5-3.6.4-1.11.1 libebackend-1_2-5-debuginfo-3.6.4-1.11.1 libebook-1_2-14-3.6.4-1.11.1 libebook-1_2-14-debuginfo-3.6.4-1.11.1 libecal-1_2-15-3.6.4-1.11.1 libecal-1_2-15-debuginfo-3.6.4-1.11.1 libedata-book-1_2-15-3.6.4-1.11.1 libedata-book-1_2-15-debuginfo-3.6.4-1.11.1 libedata-cal-1_2-18-3.6.4-1.11.1 libedata-cal-1_2-18-debuginfo-3.6.4-1.11.1 libedataserver-1_2-17-3.6.4-1.11.1 libedataserver-1_2-17-debuginfo-3.6.4-1.11.1 libedataserverui-3_0-4-3.6.4-1.11.1 libedataserverui-3_0-4-debuginfo-3.6.4-1.11.1 libeews-1_2-0-3.6.4-1.6.1 libeews-1_2-0-debuginfo-3.6.4-1.6.1 libewsutils0-3.6.4-1.6.1 libewsutils0-debuginfo-3.6.4-1.6.1 libgtkhtml-4_0-0-4.6.5-1.6.1 libgtkhtml-4_0-0-debuginfo-4.6.5-1.6.1 libgtkhtml-editor-4_0-0-4.6.5-1.6.1 libgtkhtml-editor-4_0-0-debuginfo-4.6.5-1.6.1 liblzx0-3.6.4-1.6.1 liblzx0-debuginfo-3.6.4-1.6.1 typelib-1_0-EBook-1_2-3.6.4-1.11.1 typelib-1_0-ECalendar-1_2-3.6.4-1.11.1 typelib-1_0-EDataServer-1_2-3.6.4-1.11.1 - openSUSE 12.3 (x86_64): libcamel-1_2-40-32bit-3.6.4-1.11.1 libcamel-1_2-40-debuginfo-32bit-3.6.4-1.11.1 libebackend-1_2-5-32bit-3.6.4-1.11.1 libebackend-1_2-5-debuginfo-32bit-3.6.4-1.11.1 libebook-1_2-14-32bit-3.6.4-1.11.1 libebook-1_2-14-debuginfo-32bit-3.6.4-1.11.1 libecal-1_2-15-32bit-3.6.4-1.11.1 libecal-1_2-15-debuginfo-32bit-3.6.4-1.11.1 libedata-book-1_2-15-32bit-3.6.4-1.11.1 libedata-book-1_2-15-debuginfo-32bit-3.6.4-1.11.1 libedata-cal-1_2-18-32bit-3.6.4-1.11.1 libedata-cal-1_2-18-debuginfo-32bit-3.6.4-1.11.1 libedataserver-1_2-17-32bit-3.6.4-1.11.1 libedataserver-1_2-17-debuginfo-32bit-3.6.4-1.11.1 libedataserverui-3_0-4-32bit-3.6.4-1.11.1 libedataserverui-3_0-4-debuginfo-32bit-3.6.4-1.11.1 libgtkhtml-4_0-0-32bit-4.6.5-1.6.1 libgtkhtml-4_0-0-debuginfo-32bit-4.6.5-1.6.1 libgtkhtml-editor-4_0-0-32bit-4.6.5-1.6.1 libgtkhtml-editor-4_0-0-debuginfo-32bit-4.6.5-1.6.1 - openSUSE 12.3 (noarch): evolution-data-server-lang-3.6.4-1.11.1 evolution-ews-lang-3.6.4-1.6.1 evolution-lang-3.6.4-1.7.1 gtkhtml-4_0-lang-4.6.5-1.6.1 References: https://bugzilla.novell.com/808067

1 0