June 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2013:0932-1: moderate: subversion: security and bugfix minor version update
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: subversion: security and bugfix minor version update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0932-1 Rating: moderate References: #710878 #796050 #813913 Cross-References: CVE-2013-1845 CVE-2013-1846 CVE-2013-1847 CVE-2013-1849 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Subversion received a minor version update to fix remote triggerable vulnerabilities in mod_dav_svn which may result in denial of service. - update to 1.6.21 [bnc#813913], addressing remotely triggerable + CVE-2013-1845: mod_dav_svn excessive memory usage from property changes + CVE-2013-1846: mod_dav_svn crashes on LOCK requests against activity URLs + CVE-2013-1847: mod_dav_svn crashes on LOCK requests against non-existant URLs + CVE-2013-1849: mod_dav_svn crashes on PROPFIND requests against activity URLs - further changes: + mod_dav_svn will omit some property values for activity urls + improve memory usage when committing properties in mod_dav_svn + fix mod_dav_svn runs pre-revprop-change twice + fixed: post-revprop-change errors cancel commit + improved logic in mod_dav_svn's implementation of lock. + fix a compatibility issue with g++ 4.7 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-76 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.6.21-47.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.6.21-47.1 libsvn_auth_kwallet-1-0-1.6.21-47.1 libsvn_auth_kwallet-1-0-debuginfo-1.6.21-47.1 subversion-1.6.21-47.1 subversion-debuginfo-1.6.21-47.1 subversion-debugsource-1.6.21-47.1 subversion-devel-1.6.21-47.1 subversion-perl-1.6.21-47.1 subversion-perl-debuginfo-1.6.21-47.1 subversion-python-1.6.21-47.1 subversion-python-debuginfo-1.6.21-47.1 subversion-ruby-1.6.21-47.1 subversion-ruby-debuginfo-1.6.21-47.1 subversion-server-1.6.21-47.1 subversion-server-debuginfo-1.6.21-47.1 subversion-tools-1.6.21-47.1 subversion-tools-debuginfo-1.6.21-47.1 References: http://support.novell.com/security/cve/CVE-2013-1845.html http://support.novell.com/security/cve/CVE-2013-1846.html http://support.novell.com/security/cve/CVE-2013-1847.html http://support.novell.com/security/cve/CVE-2013-1849.html https://bugzilla.novell.com/710878 https://bugzilla.novell.com/796050 https://bugzilla.novell.com/813913

1 0

openSUSE-RU-2013:0931-1: chocolate-doom: Search /usr/share/doom for IWADs as well
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: chocolate-doom: Search /usr/share/doom for IWADs as well ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0931-1 Rating: low References: #818102 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issue with chocolate-doom: - bnc#818102: Search /usr/share/doom for IWADs as well - Remove unnecessary INSTALL file Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-416 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): chocolate-doom-1.7.0-2.5.1 chocolate-doom-debuginfo-1.7.0-2.5.1 chocolate-doom-debugsource-1.7.0-2.5.1 References: https://bugzilla.novell.com/818102

1 0

openSUSE-RU-2013:0930-1: python3: remove spurious modification of python-3.3.0b1-localpath.patch
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: python3: remove spurious modification of python-3.3.0b1-localpath.patch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0930-1 Rating: low References: #809831 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with python3: - bnc#809831: remove spurious modification of python-3.3.0b1-localpath.patch. That would force installation into /usr/local. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-397 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libpython3_3m1_0-3.3.0-6.7.1 libpython3_3m1_0-debuginfo-3.3.0-6.7.1 python3-3.3.0-6.7.1 python3-base-3.3.0-6.7.1 python3-base-debuginfo-3.3.0-6.7.1 python3-base-debugsource-3.3.0-6.7.1 python3-curses-3.3.0-6.7.1 python3-curses-debuginfo-3.3.0-6.7.1 python3-dbm-3.3.0-6.7.1 python3-dbm-debuginfo-3.3.0-6.7.1 python3-debuginfo-3.3.0-6.7.1 python3-debugsource-3.3.0-6.7.1 python3-devel-3.3.0-6.7.1 python3-devel-debuginfo-3.3.0-6.7.1 python3-idle-3.3.0-6.7.1 python3-testsuite-3.3.0-6.7.1 python3-testsuite-debuginfo-3.3.0-6.7.1 python3-tk-3.3.0-6.7.1 python3-tk-debuginfo-3.3.0-6.7.1 python3-tools-3.3.0-6.7.1 - openSUSE 12.3 (x86_64): libpython3_3m1_0-32bit-3.3.0-6.7.1 libpython3_3m1_0-debuginfo-32bit-3.3.0-6.7.1 python3-32bit-3.3.0-6.7.1 python3-base-32bit-3.3.0-6.7.1 python3-base-debuginfo-32bit-3.3.0-6.7.1 python3-debuginfo-32bit-3.3.0-6.7.1 - openSUSE 12.3 (noarch): python3-doc-3.3.0-6.7.1 python3-doc-pdf-3.3.0-6.7.1 References: https://bugzilla.novell.com/809831

1 0

openSUSE-SU-2013:0929-1: important: xulrunner to 17.0.6esr
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: xulrunner to 17.0.6esr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0929-1 Rating: important References: #819204 Cross-References: CVE-2013-0801 CVE-2013-1669 CVE-2013-1670 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: Mozilla xulrunner was updated to 17.0.6esr (bnc#819204) * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards * MFSA 2013-42/CVE-2013-1670 (bmo#853709) Privileged access for content level constructor * MFSA 2013-46/CVE-2013-1674 (bmo#860971) Use-after-free with video and onresize event * MFSA 2013-47/CVE-2013-1675 (bmo#866825) Uninitialized functions in DOMSVGZoomEvent * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/ CVE-2013-1679/CVE-2013-1680/CVE-2013-1681 Memory corruption found using Address Sanitizer Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-448 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): mozilla-js-17.0.6-1.12.1 mozilla-js-debuginfo-17.0.6-1.12.1 xulrunner-17.0.6-1.12.1 xulrunner-buildsymbols-17.0.6-1.12.1 xulrunner-debuginfo-17.0.6-1.12.1 xulrunner-debugsource-17.0.6-1.12.1 xulrunner-devel-17.0.6-1.12.1 xulrunner-devel-debuginfo-17.0.6-1.12.1 - openSUSE 12.3 (x86_64): mozilla-js-32bit-17.0.6-1.12.1 mozilla-js-debuginfo-32bit-17.0.6-1.12.1 xulrunner-32bit-17.0.6-1.12.1 xulrunner-debuginfo-32bit-17.0.6-1.12.1 References: http://support.novell.com/security/cve/CVE-2013-0801.html http://support.novell.com/security/cve/CVE-2013-1669.html http://support.novell.com/security/cve/CVE-2013-1670.html http://support.novell.com/security/cve/CVE-2013-1674.html http://support.novell.com/security/cve/CVE-2013-1675.html http://support.novell.com/security/cve/CVE-2013-1676.html http://support.novell.com/security/cve/CVE-2013-1677.html http://support.novell.com/security/cve/CVE-2013-1678.html http://support.novell.com/security/cve/CVE-2013-1679.html http://support.novell.com/security/cve/CVE-2013-1680.html http://support.novell.com/security/cve/CVE-2013-1681.html https://bugzilla.novell.com/819204

1 0

openSUSE-RU-2013:0928-1: libjpeg-turbo: Add libjpe62-turbo Package
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: libjpeg-turbo: Add libjpe62-turbo Package ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0928-1 Rating: low References: #807183 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with libjpeg-turbo: - bnc#807163: Add libjpeg62-turbo package to provide libjpeg.so.62, which is required by LSB specification. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-458 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libjpeg-turbo-1.2.1-19.4.1 libjpeg-turbo-debuginfo-1.2.1-19.4.1 libjpeg-turbo-debugsource-1.2.1-19.4.1 libjpeg8-8.0.2-19.4.1 libjpeg8-debuginfo-8.0.2-19.4.1 libjpeg8-devel-8.0.2-19.4.1 - openSUSE 12.3 (x86_64): libjpeg8-32bit-8.0.2-19.4.1 libjpeg8-debuginfo-32bit-8.0.2-19.4.1 libjpeg8-devel-32bit-8.0.2-19.4.1 References: https://bugzilla.novell.com/807183

1 0

openSUSE-SU-2013:0927-1: update kernel to 3.0
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

1 0

openSUSE-RU-2013:0926-1: python-veusz: Update to 1.17.1
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: python-veusz: Update to 1.17.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0926-1 Rating: low References: #814103 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issues for python-veusz: - bnc#814103: - version 1.17.1: + Allow coloured points for non-orthogonal plots (polar, ternary) + Remove unnecessary exception data + Bug fixes: * Fix Print dialog * Fix command-line "Print" command * Fix duplicate axes drawn in grid * Fix crash adding empty polar plot - version 1.17: + Add new broken axis widget with gaps in the numerical sequence + Grid lines are plotted always under (or over) the data + Shift+Scroll wheel scrolls left/right + Polar plots can have a "minimum" radius and log axes + Many more LaTeX symbols added + Add SAMP/VoTable support + New shifted-points xy line mode, which plots a stepped line with the points shifted to lie between the coordinates given + Points can be picked to console and/or clipboard + Allow reversed ternary plot + Bug fixes: * Fix unicode characters for \circ and \odot * Fix for data type of pickable points * Fix sort by group crash bug * Many crashes fixed * Fix width of key when using long titles/and or multiple columns * Fix bold and italic output in SVG output Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-358 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): python-veusz-1.17.1-4.4.1 python-veusz-debuginfo-1.17.1-4.4.1 python-veusz-debugsource-1.17.1-4.4.1 References: https://bugzilla.novell.com/814103

1 0

openSUSE-SU-2013:0925-1: important: kernel: security and bugfix update
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: kernel: security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0925-1 Rating: important References: #578046 #651219 #714604 #722398 #730117 #736149 #738210 #744692 #754583 #754898 #758243 #761849 #762424 #763494 #767612 #768052 #773577 #776787 #777616 #777746 #779577 #780977 #786150 #786814 #786900 #787821 #788826 #789235 #789311 #789359 #790867 #792674 #792793 #793139 #793671 #794513 #794529 #794805 #795269 #795928 #795957 #795961 #796412 #796418 #796823 #797042 #797175 #798921 #799197 #799209 #799270 #799275 #799578 #799926 #800280 #800701 #801038 #801178 #801713 #801717 #801720 #801782 #802153 #802353 #802445 #802712 #803056 #803067 #803394 #803674 #803712 #804154 #804220 #804609 #805823 #806138 #806395 #806404 #806431 #806466 #806469 #806492 #806631 #806825 #806847 #806908 #806976 #806980 #807431 #807517 #807560 #807853 #808166 #808307 #808829 #808966 #808991 #809155 #809166 #809375 #809493 #809748 #812281 #812315 #813963 #816443 #819789 #89359 Cross-References: CVE-2010-3873 CVE-2011-4131 CVE-2011-4604 CVE-2011-4622 CVE-2012-1601 CVE-2012-2119 CVE-2012-2137 CVE-2012-4461 CVE-2012-5517 CVE-2013-0160 CVE-2013-0216 CVE-2013-0231 CVE-2013-0871 CVE-2013-0913 CVE-2013-1767 CVE-2013-1774 CVE-2013-1796 CVE-2013-1797 CVE-2013-1798 CVE-2013-1848 CVE-2013-2094 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves 21 vulnerabilities and has 87 fixes is now available. Description: The Linux kernel was updated to 3.0.74 to fix various bugs and security issues. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-90 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): iscsitarget-1.4.19-18.2 iscsitarget-debuginfo-1.4.19-18.2 iscsitarget-debugsource-1.4.19-18.2 iscsitarget-kmp-default-1.4.19_3.0.74_34-18.2 iscsitarget-kmp-default-debuginfo-1.4.19_3.0.74_34-18.2 iscsitarget-kmp-desktop-1.4.19_3.0.74_34-18.2 iscsitarget-kmp-desktop-debuginfo-1.4.19_3.0.74_34-18.2 iscsitarget-kmp-xen-1.4.19_3.0.74_34-18.2 iscsitarget-kmp-xen-debuginfo-1.4.19_3.0.74_34-18.2 kernel-debug-3.0.74-34.1 kernel-debug-base-3.0.74-34.1 kernel-debug-base-debuginfo-3.0.74-34.1 kernel-debug-debuginfo-3.0.74-34.1 kernel-debug-debugsource-3.0.74-34.1 kernel-debug-devel-3.0.74-34.1 kernel-debug-devel-debuginfo-3.0.74-34.1 kernel-debug-hmac-3.0.74-34.1 kernel-default-3.0.74-34.1 kernel-default-base-3.0.74-34.1 kernel-default-base-debuginfo-3.0.74-34.1 kernel-default-debuginfo-3.0.74-34.1 kernel-default-debugsource-3.0.74-34.1 kernel-default-devel-3.0.74-34.1 kernel-default-devel-debuginfo-3.0.74-34.1 kernel-default-hmac-3.0.74-34.1 kernel-desktop-3.0.74-34.1 kernel-desktop-base-3.0.74-34.1 kernel-desktop-base-debuginfo-3.0.74-34.1 kernel-desktop-debuginfo-3.0.74-34.1 kernel-desktop-debugsource-3.0.74-34.1 kernel-desktop-devel-3.0.74-34.1 kernel-desktop-devel-debuginfo-3.0.74-34.1 kernel-desktop-hmac-3.0.74-34.1 kernel-ec2-3.0.74-34.1 kernel-ec2-base-3.0.74-34.1 kernel-ec2-base-debuginfo-3.0.74-34.1 kernel-ec2-debuginfo-3.0.74-34.1 kernel-ec2-debugsource-3.0.74-34.1 kernel-ec2-devel-3.0.74-34.1 kernel-ec2-devel-debuginfo-3.0.74-34.1 kernel-ec2-extra-3.0.74-34.1 kernel-ec2-extra-debuginfo-3.0.74-34.1 kernel-ec2-hmac-3.0.74-34.1 kernel-source-3.0.74-34.1 kernel-source-vanilla-3.0.74-34.1 kernel-syms-3.0.74-34.1 kernel-trace-3.0.74-34.1 kernel-trace-base-3.0.74-34.1 kernel-trace-base-debuginfo-3.0.74-34.1 kernel-trace-debuginfo-3.0.74-34.1 kernel-trace-debugsource-3.0.74-34.1 kernel-trace-devel-3.0.74-34.1 kernel-trace-devel-debuginfo-3.0.74-34.1 kernel-trace-hmac-3.0.74-34.1 kernel-vanilla-3.0.74-34.1 kernel-vanilla-base-3.0.74-34.1 kernel-vanilla-base-debuginfo-3.0.74-34.1 kernel-vanilla-debuginfo-3.0.74-34.1 kernel-vanilla-debugsource-3.0.74-34.1 kernel-vanilla-devel-3.0.74-34.1 kernel-vanilla-devel-debuginfo-3.0.74-34.1 kernel-vanilla-hmac-3.0.74-34.1 kernel-xen-3.0.74-34.1 kernel-xen-base-3.0.74-34.1 kernel-xen-base-debuginfo-3.0.74-34.1 kernel-xen-debuginfo-3.0.74-34.1 kernel-xen-debugsource-3.0.74-34.1 kernel-xen-devel-3.0.74-34.1 kernel-xen-devel-debuginfo-3.0.74-34.1 kernel-xen-hmac-3.0.74-34.1 libvmtools-devel-2012.8.8.1-41.1 libvmtools0-2012.8.8.1-41.1 libvmtools0-debuginfo-2012.8.8.1-41.1 ndiswrapper-1.57rc1-20.1 ndiswrapper-debuginfo-1.57rc1-20.1 ndiswrapper-debugsource-1.57rc1-20.1 ndiswrapper-kmp-default-1.57rc1_3.0.74_34-20.1 ndiswrapper-kmp-default-debuginfo-1.57rc1_3.0.74_34-20.1 ndiswrapper-kmp-desktop-1.57rc1_3.0.74_34-20.1 ndiswrapper-kmp-desktop-debuginfo-1.57rc1_3.0.74_34-20.1 omnibook-debugsource-20100406-13.1 omnibook-kmp-default-20100406_3.0.74_34-13.1 omnibook-kmp-default-debuginfo-20100406_3.0.74_34-13.1 omnibook-kmp-desktop-20100406_3.0.74_34-13.1 omnibook-kmp-desktop-debuginfo-20100406_3.0.74_34-13.1 omnibook-kmp-xen-20100406_3.0.74_34-13.1 omnibook-kmp-xen-debuginfo-20100406_3.0.74_34-13.1 open-vm-tools-2012.8.8.1-41.1 open-vm-tools-debuginfo-2012.8.8.1-41.1 open-vm-tools-debugsource-2012.8.8.1-41.1 open-vm-tools-gui-2012.8.8.1-41.1 open-vm-tools-gui-debuginfo-2012.8.8.1-41.1 pcfclock-0.44-250.1 pcfclock-debuginfo-0.44-250.1 pcfclock-debugsource-0.44-250.1 pcfclock-kmp-default-0.44_3.0.74_34-250.1 pcfclock-kmp-default-debuginfo-0.44_3.0.74_34-250.1 pcfclock-kmp-desktop-0.44_3.0.74_34-250.1 pcfclock-kmp-desktop-debuginfo-0.44_3.0.74_34-250.1 preload-1.2-6.29.1 preload-debuginfo-1.2-6.29.1 preload-debugsource-1.2-6.29.1 preload-kmp-default-1.2_3.0.74_34-6.29.1 preload-kmp-default-debuginfo-1.2_3.0.74_34-6.29.1 preload-kmp-desktop-1.2_3.0.74_34-6.29.1 preload-kmp-desktop-debuginfo-1.2_3.0.74_34-6.29.1 python-virtualbox-4.0.12-0.58.1 python-virtualbox-debuginfo-4.0.12-0.58.1 systemtap-1.4-1.11.1 systemtap-client-1.4-1.11.1 systemtap-client-debuginfo-1.4-1.11.1 systemtap-debuginfo-1.4-1.11.1 systemtap-debugsource-1.4-1.11.1 systemtap-runtime-1.4-1.11.1 systemtap-runtime-debuginfo-1.4-1.11.1 systemtap-sdt-devel-1.4-1.11.1 systemtap-server-1.4-1.11.1 systemtap-server-debuginfo-1.4-1.11.1 virtualbox-4.0.12-0.58.1 virtualbox-debuginfo-4.0.12-0.58.1 virtualbox-debugsource-4.0.12-0.58.1 virtualbox-devel-4.0.12-0.58.1 virtualbox-guest-kmp-default-4.0.12_3.0.74_34-0.58.1 virtualbox-guest-kmp-default-debuginfo-4.0.12_3.0.74_34-0.58.1 virtualbox-guest-kmp-desktop-4.0.12_3.0.74_34-0.58.1 virtualbox-guest-kmp-desktop-debuginfo-4.0.12_3.0.74_34-0.58.1 virtualbox-guest-tools-4.0.12-0.58.1 virtualbox-guest-tools-debuginfo-4.0.12-0.58.1 virtualbox-guest-x11-4.0.12-0.58.1 virtualbox-guest-x11-debuginfo-4.0.12-0.58.1 virtualbox-host-kmp-default-4.0.12_3.0.74_34-0.58.1 virtualbox-host-kmp-default-debuginfo-4.0.12_3.0.74_34-0.58.1 virtualbox-host-kmp-desktop-4.0.12_3.0.74_34-0.58.1 virtualbox-host-kmp-desktop-debuginfo-4.0.12_3.0.74_34-0.58.1 virtualbox-qt-4.0.12-0.58.1 virtualbox-qt-debuginfo-4.0.12-0.58.1 vmware-guest-kmp-default-2012.8.8.1_3.0.74_34-41.1 vmware-guest-kmp-default-debuginfo-2012.8.8.1_3.0.74_34-41.1 vmware-guest-kmp-desktop-2012.8.8.1_3.0.74_34-41.1 vmware-guest-kmp-desktop-debuginfo-2012.8.8.1_3.0.74_34-41.1 xen-4.0.3_05-57.1 xen-debugsource-4.0.3_05-57.1 xen-devel-4.0.3_05-57.1 xen-doc-html-4.0.3_05-57.1 xen-doc-pdf-4.0.3_05-57.1 xen-kmp-default-4.0.3_05_3.0.74_34-57.1 xen-kmp-default-debuginfo-4.0.3_05_3.0.74_34-57.1 xen-kmp-desktop-4.0.3_05_3.0.74_34-57.1 xen-kmp-desktop-debuginfo-4.0.3_05_3.0.74_34-57.1 xen-libs-4.0.3_05-57.1 xen-libs-debuginfo-4.0.3_05-57.1 xen-tools-4.0.3_05-57.1 xen-tools-debuginfo-4.0.3_05-57.1 xen-tools-domU-4.0.3_05-57.1 xen-tools-domU-debuginfo-4.0.3_05-57.1 xtables-addons-1.37-0.22.1 xtables-addons-debuginfo-1.37-0.22.1 xtables-addons-debugsource-1.37-0.22.1 xtables-addons-kmp-default-1.37_3.0.74_34-0.22.1 xtables-addons-kmp-default-debuginfo-1.37_3.0.74_34-0.22.1 xtables-addons-kmp-desktop-1.37_3.0.74_34-0.22.1 xtables-addons-kmp-desktop-debuginfo-1.37_3.0.74_34-0.22.1 xtables-addons-kmp-xen-1.37_3.0.74_34-0.22.1 xtables-addons-kmp-xen-debuginfo-1.37_3.0.74_34-0.22.1 - openSUSE 11.4 (noarch): kernel-docs-3.0.74-34.2 - openSUSE 11.4 (i586): iscsitarget-kmp-pae-1.4.19_3.0.74_34-18.2 iscsitarget-kmp-pae-debuginfo-1.4.19_3.0.74_34-18.2 kernel-pae-3.0.74-34.1 kernel-pae-base-3.0.74-34.1 kernel-pae-base-debuginfo-3.0.74-34.1 kernel-pae-debuginfo-3.0.74-34.1 kernel-pae-debugsource-3.0.74-34.1 kernel-pae-devel-3.0.74-34.1 kernel-pae-devel-debuginfo-3.0.74-34.1 kernel-pae-hmac-3.0.74-34.1 kernel-vmi-3.0.74-34.1 kernel-vmi-base-3.0.74-34.1 kernel-vmi-base-debuginfo-3.0.74-34.1 kernel-vmi-debuginfo-3.0.74-34.1 kernel-vmi-debugsource-3.0.74-34.1 kernel-vmi-devel-3.0.74-34.1 kernel-vmi-devel-debuginfo-3.0.74-34.1 kernel-vmi-hmac-3.0.74-34.1 ndiswrapper-kmp-pae-1.57rc1_3.0.74_34-20.1 ndiswrapper-kmp-pae-debuginfo-1.57rc1_3.0.74_34-20.1 omnibook-kmp-pae-20100406_3.0.74_34-13.1 omnibook-kmp-pae-debuginfo-20100406_3.0.74_34-13.1 pcfclock-kmp-pae-0.44_3.0.74_34-250.1 pcfclock-kmp-pae-debuginfo-0.44_3.0.74_34-250.1 virtualbox-guest-kmp-pae-4.0.12_3.0.74_34-0.58.1 virtualbox-guest-kmp-pae-debuginfo-4.0.12_3.0.74_34-0.58.1 virtualbox-host-kmp-pae-4.0.12_3.0.74_34-0.58.1 virtualbox-host-kmp-pae-debuginfo-4.0.12_3.0.74_34-0.58.1 vmware-guest-kmp-pae-2012.8.8.1_3.0.74_34-41.1 vmware-guest-kmp-pae-debuginfo-2012.8.8.1_3.0.74_34-41.1 xen-kmp-pae-4.0.3_05_3.0.74_34-57.1 xen-kmp-pae-debuginfo-4.0.3_05_3.0.74_34-57.1 xtables-addons-kmp-pae-1.37_3.0.74_34-0.22.1 xtables-addons-kmp-pae-debuginfo-1.37_3.0.74_34-0.22.1 References: http://support.novell.com/security/cve/CVE-2010-3873.html http://support.novell.com/security/cve/CVE-2011-4131.html http://support.novell.com/security/cve/CVE-2011-4604.html http://support.novell.com/security/cve/CVE-2011-4622.html http://support.novell.com/security/cve/CVE-2012-1601.html http://support.novell.com/security/cve/CVE-2012-2119.html http://support.novell.com/security/cve/CVE-2012-2137.html http://support.novell.com/security/cve/CVE-2012-4461.html http://support.novell.com/security/cve/CVE-2012-5517.html http://support.novell.com/security/cve/CVE-2013-0160.html http://support.novell.com/security/cve/CVE-2013-0216.html http://support.novell.com/security/cve/CVE-2013-0231.html http://support.novell.com/security/cve/CVE-2013-0871.html http://support.novell.com/security/cve/CVE-2013-0913.html http://support.novell.com/security/cve/CVE-2013-1767.html http://support.novell.com/security/cve/CVE-2013-1774.html http://support.novell.com/security/cve/CVE-2013-1796.html http://support.novell.com/security/cve/CVE-2013-1797.html http://support.novell.com/security/cve/CVE-2013-1798.html http://support.novell.com/security/cve/CVE-2013-1848.html http://support.novell.com/security/cve/CVE-2013-2094.html https://bugzilla.novell.com/578046 https://bugzilla.novell.com/651219 https://bugzilla.novell.com/714604 https://bugzilla.novell.com/722398 https://bugzilla.novell.com/730117 https://bugzilla.novell.com/736149 https://bugzilla.novell.com/738210 https://bugzilla.novell.com/744692 https://bugzilla.novell.com/754583 https://bugzilla.novell.com/754898 https://bugzilla.novell.com/758243 https://bugzilla.novell.com/761849 https://bugzilla.novell.com/762424 https://bugzilla.novell.com/763494 https://bugzilla.novell.com/767612 https://bugzilla.novell.com/768052 https://bugzilla.novell.com/773577 https://bugzilla.novell.com/776787 https://bugzilla.novell.com/777616 https://bugzilla.novell.com/777746 https://bugzilla.novell.com/779577 https://bugzilla.novell.com/780977 https://bugzilla.novell.com/786150 https://bugzilla.novell.com/786814 https://bugzilla.novell.com/786900 https://bugzilla.novell.com/787821 https://bugzilla.novell.com/788826 https://bugzilla.novell.com/789235 https://bugzilla.novell.com/789311 https://bugzilla.novell.com/789359 https://bugzilla.novell.com/790867 https://bugzilla.novell.com/792674 https://bugzilla.novell.com/792793 https://bugzilla.novell.com/793139 https://bugzilla.novell.com/793671 https://bugzilla.novell.com/794513 https://bugzilla.novell.com/794529 https://bugzilla.novell.com/794805 https://bugzilla.novell.com/795269 https://bugzilla.novell.com/795928 https://bugzilla.novell.com/795957 https://bugzilla.novell.com/795961 https://bugzilla.novell.com/796412 https://bugzilla.novell.com/796418 https://bugzilla.novell.com/796823 https://bugzilla.novell.com/797042 https://bugzilla.novell.com/797175 https://bugzilla.novell.com/798921 https://bugzilla.novell.com/799197 https://bugzilla.novell.com/799209 https://bugzilla.novell.com/799270 https://bugzilla.novell.com/799275 https://bugzilla.novell.com/799578 https://bugzilla.novell.com/799926 https://bugzilla.novell.com/800280 https://bugzilla.novell.com/800701 https://bugzilla.novell.com/801038 https://bugzilla.novell.com/801178 https://bugzilla.novell.com/801713 https://bugzilla.novell.com/801717 https://bugzilla.novell.com/801720 https://bugzilla.novell.com/801782 https://bugzilla.novell.com/802153 https://bugzilla.novell.com/802353 https://bugzilla.novell.com/802445 https://bugzilla.novell.com/802712 https://bugzilla.novell.com/803056 https://bugzilla.novell.com/803067 https://bugzilla.novell.com/803394 https://bugzilla.novell.com/803674 https://bugzilla.novell.com/803712 https://bugzilla.novell.com/804154 https://bugzilla.novell.com/804220 https://bugzilla.novell.com/804609 https://bugzilla.novell.com/805823 https://bugzilla.novell.com/806138 https://bugzilla.novell.com/806395 https://bugzilla.novell.com/806404 https://bugzilla.novell.com/806431 https://bugzilla.novell.com/806466 https://bugzilla.novell.com/806469 https://bugzilla.novell.com/806492 https://bugzilla.novell.com/806631 https://bugzilla.novell.com/806825 https://bugzilla.novell.com/806847 https://bugzilla.novell.com/806908 https://bugzilla.novell.com/806976 https://bugzilla.novell.com/806980 https://bugzilla.novell.com/807431 https://bugzilla.novell.com/807517 https://bugzilla.novell.com/807560 https://bugzilla.novell.com/807853 https://bugzilla.novell.com/808166 https://bugzilla.novell.com/808307 https://bugzilla.novell.com/808829 https://bugzilla.novell.com/808966 https://bugzilla.novell.com/808991 https://bugzilla.novell.com/809155 https://bugzilla.novell.com/809166 https://bugzilla.novell.com/809375 https://bugzilla.novell.com/809493 https://bugzilla.novell.com/809748 https://bugzilla.novell.com/812281 https://bugzilla.novell.com/812315 https://bugzilla.novell.com/813963 https://bugzilla.novell.com/816443 https://bugzilla.novell.com/819789 https://bugzilla.novell.com/89359

1 0

openSUSE-RU-2013:0924-1: ModemManager: Fixed hang and crash
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: ModemManager: Fixed hang and crash ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0924-1 Rating: low References: #811398 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with ModemManager: - bnc#811398: If a port finishes probing from the first plugin, and then starts being probed by a second plugin, and then a different port finishes probing and creates a Modem object for that device, always let the Modem object's plugin grab the port and ignore any other plugin. Only one plugin may control modem ports. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-389 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): ModemManager-0.6.0.0-3.8.1 ModemManager-debuginfo-0.6.0.0-3.8.1 ModemManager-debugsource-0.6.0.0-3.8.1 ModemManager-devel-0.6.0.0-3.8.1 References: https://bugzilla.novell.com/811398

1 0

openSUSE-SU-2013:0923-1: moderate: kernel: security and bugfix update
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: kernel: security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0923-1 Rating: moderate References: #800686 #802812 #806966 #806980 #806990 #807850 #808829 #809155 #809330 #809748 #811417 #812113 Cross-References: CVE-2013-0913 CVE-2013-1796 CVE-2013-1797 CVE-2013-1798 CVE-2013-1848 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has 7 fixes is now available. Description: The openSUSE 12.3 kernel was updated to fix various security issues and bugs: - config.conf: Disable armv7hl/u8500 until it builds again - patches.fixes/ocfs2-Fix-oops-in-ocfs2_fast_symlink_readpage: ocfs2: Fix oops in ocfs2_fast_symlink_readpage() code path - drm/nouveau: Fix typo in init_idx_addr_latched() (bnc#800686). - rtl28xxu: Add USB ID for MaxMedia HU394-T (bnc#812113). - rtl28xxu: Add USB IDs for Compro VideoMate U620F (bnc#812113). - Support Digivox Mini HD (rtl2832) (bnc#812113). - rtl28xxu: correct some device names (bnc#812113). - rtl28xxu: add Gigabyte U7300 DVB-T Dongle (bnc#812113). - rtl28xxu: [1b80:d3a8] ASUS My Cinema-U3100Mini Plus V2 (bnc#812113). - rtl28xxu: add NOXON DAB/DAB+ USB dongle rev 2 (bnc#812113). - drm: correctly restore mappings if drm_open fails (bnc#807850). - Drivers: hv: vmbus: Fix a bug in hv_need_to_signal() (bnc#811417). - svcrpc: fix rpc server shutdown races (bnc#802812). - Update patches to what was accepted upstream. - Refresh patches.arch/kvm-convert-msr_kvm_system_time-to-use-gfn_to_h va_cache_init.patch. - Refresh patches.arch/kvm-fix-for-buffer-overflow-in-handling-of-msr_ kvm_system_time.patch. - KVM: Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache_init (bnc#806980 CVE-2013-1797). - KVM: Fix bounds checking in ioapic indirect register read (bnc#806980 CVE-2013-1798). - KVM: Fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (bnc#806980 CVE-2013-1796). - kabi/severities: Allow kvm abi changes - kvm modules are self consistent - loopdev: fix a deadlock (bnc#809748). - block: use i_size_write() in bd_set_size() (bnc#809748). - drm/i915: bounds check execbuffer relocation count (bnc#808829,CVE-2013-0913). - TTY: do not reset master's packet mode (bnc#809330). - Update patches.fixes/ext3-Fix-format-string-issues.patch (bnc#809155 CVE-2013-1848). - ext3: Fix format string issues (bnc#809155). - Drivers: hv: balloon: Do not request completion notification (fate#314663). - e1000e: fix runtime power management transitions (bnc#806966). - e1000e: fix pci-device enable-counter balance (bnc#806966). - e1000e: fix accessing to suspended device (bnc#806966). - gpio-ich: Fix ichx_gpio_check_available() return what callers expect. - gpio/ich: Add missing spinlock init. - Refresh patches.suse/SUSE-bootsplash-mgadrmfb-workaround. Add the same w/a for ast and cirrus KMS, too (bnc#806990). - Fix broken VT1 output with mgadrmfb (bnc#806990). - PCI/PM: Clear state_saved during suspend (bnc#806966). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-398 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): kernel-default-3.7.10-1.4.1 kernel-default-base-3.7.10-1.4.1 kernel-default-devel-3.7.10-1.4.1 kernel-syms-3.7.10-1.4.1 - openSUSE 12.3 (i686 x86_64): kernel-debug-3.7.10-1.4.1 kernel-debug-base-3.7.10-1.4.1 kernel-debug-devel-3.7.10-1.4.1 kernel-desktop-3.7.10-1.4.1 kernel-desktop-base-3.7.10-1.4.1 kernel-desktop-devel-3.7.10-1.4.1 kernel-ec2-3.7.10-1.4.1 kernel-ec2-base-3.7.10-1.4.1 kernel-ec2-base-debuginfo-3.7.10-1.4.1 kernel-ec2-debuginfo-3.7.10-1.4.1 kernel-ec2-debugsource-3.7.10-1.4.1 kernel-ec2-devel-3.7.10-1.4.1 kernel-ec2-devel-debuginfo-3.7.10-1.4.1 kernel-trace-3.7.10-1.4.1 kernel-trace-base-3.7.10-1.4.1 kernel-trace-devel-3.7.10-1.4.1 kernel-vanilla-3.7.10-1.4.1 kernel-vanilla-devel-3.7.10-1.4.1 kernel-xen-3.7.10-1.4.1 kernel-xen-base-3.7.10-1.4.1 kernel-xen-devel-3.7.10-1.4.1 - openSUSE 12.3 (noarch): kernel-devel-3.7.10-1.4.1 kernel-docs-3.7.10-1.4.3 kernel-source-3.7.10-1.4.1 kernel-source-vanilla-3.7.10-1.4.1 - openSUSE 12.3 (i686): kernel-debug-base-debuginfo-3.7.10-1.4.1 kernel-debug-debuginfo-3.7.10-1.4.1 kernel-debug-debugsource-3.7.10-1.4.1 kernel-debug-devel-debuginfo-3.7.10-1.4.1 kernel-desktop-base-debuginfo-3.7.10-1.4.1 kernel-desktop-debuginfo-3.7.10-1.4.1 kernel-desktop-debugsource-3.7.10-1.4.1 kernel-desktop-devel-debuginfo-3.7.10-1.4.1 kernel-pae-3.7.10-1.4.1 kernel-pae-base-3.7.10-1.4.1 kernel-pae-base-debuginfo-3.7.10-1.4.1 kernel-pae-debuginfo-3.7.10-1.4.1 kernel-pae-debugsource-3.7.10-1.4.1 kernel-pae-devel-3.7.10-1.4.1 kernel-pae-devel-debuginfo-3.7.10-1.4.1 kernel-trace-base-debuginfo-3.7.10-1.4.1 kernel-trace-debuginfo-3.7.10-1.4.1 kernel-trace-debugsource-3.7.10-1.4.1 kernel-trace-devel-debuginfo-3.7.10-1.4.1 kernel-vanilla-debuginfo-3.7.10-1.4.1 kernel-vanilla-debugsource-3.7.10-1.4.1 kernel-vanilla-devel-debuginfo-3.7.10-1.4.1 kernel-xen-base-debuginfo-3.7.10-1.4.1 kernel-xen-debuginfo-3.7.10-1.4.1 kernel-xen-debugsource-3.7.10-1.4.1 kernel-xen-devel-debuginfo-3.7.10-1.4.1 - openSUSE 12.3 (i586): kernel-default-base-debuginfo-3.7.10-1.4.1 kernel-default-debuginfo-3.7.10-1.4.1 kernel-default-debugsource-3.7.10-1.4.1 kernel-default-devel-debuginfo-3.7.10-1.4.1 References: http://support.novell.com/security/cve/CVE-2013-0913.html http://support.novell.com/security/cve/CVE-2013-1796.html http://support.novell.com/security/cve/CVE-2013-1797.html http://support.novell.com/security/cve/CVE-2013-1798.html http://support.novell.com/security/cve/CVE-2013-1848.html https://bugzilla.novell.com/800686 https://bugzilla.novell.com/802812 https://bugzilla.novell.com/806966 https://bugzilla.novell.com/806980 https://bugzilla.novell.com/806990 https://bugzilla.novell.com/807850 https://bugzilla.novell.com/808829 https://bugzilla.novell.com/809155 https://bugzilla.novell.com/809330 https://bugzilla.novell.com/809748 https://bugzilla.novell.com/811417 https://bugzilla.novell.com/812113

1 0