June 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2013:0892-1: important: flash-player to 11.2.202.285
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: flash-player to 11.2.202.285 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0892-1 Rating: important References: #819916 Cross-References: CVE-2013-2728 CVE-2013-3324 CVE-2013-3325 CVE-2013-3326 CVE-2013-3327 CVE-2013-3328 CVE-2013-3329 CVE-2013-3330 CVE-2013-3331 CVE-2013-3332 CVE-2013-3333 CVE-2013-3334 CVE-2013-3335 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: flash-player was updated to security update to 11.2.202.285: * APSB13-14, CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, CVE-2013-3335 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-80 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.285-63.1 flash-player-gnome-11.2.202.285-63.1 flash-player-kde4-11.2.202.285-63.1 References: http://support.novell.com/security/cve/CVE-2013-2728.html http://support.novell.com/security/cve/CVE-2013-3324.html http://support.novell.com/security/cve/CVE-2013-3325.html http://support.novell.com/security/cve/CVE-2013-3326.html http://support.novell.com/security/cve/CVE-2013-3327.html http://support.novell.com/security/cve/CVE-2013-3328.html http://support.novell.com/security/cve/CVE-2013-3329.html http://support.novell.com/security/cve/CVE-2013-3330.html http://support.novell.com/security/cve/CVE-2013-3331.html http://support.novell.com/security/cve/CVE-2013-3332.html http://support.novell.com/security/cve/CVE-2013-3333.html http://support.novell.com/security/cve/CVE-2013-3334.html http://support.novell.com/security/cve/CVE-2013-3335.html https://bugzilla.novell.com/819916

1 0

openSUSE-RU-2013:0891-1: moderate: sssd: Collective update
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: sssd: Collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0891-1 Rating: moderate References: #818510 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with sssd: - Added sssd-no-ldb-check.diff so that SSSD continues to start even after an LDB update. (bnc#818510) - Update to new upstream release 1.9.5 * Includes a fix for CVE-2013-0287: A simple access provider flaw prevents intended ACL use when SSSD is configured as an Active Directory client. * Fixed spurious password expiration warning that was printed on login with the Kerberos back end. * A new option ldap_rfc2307_fallback_to_local_users was added. If this option is set to true, SSSD is be able to resolve local group members of LDAP groups. * Fixed an indexing bug that prevented the contents of autofs maps from being returned to the automounter deamon in case the map contained a large number of entries. * Several fixes for safer handling of Kerberos credential caches for cases where the ccache is set to be stored in a DIR: type. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-446 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libipa_hbac-devel-1.9.5-1.13.2 libipa_hbac0-1.9.5-1.13.2 libipa_hbac0-debuginfo-1.9.5-1.13.2 libsss_idmap-devel-1.9.5-1.13.2 libsss_idmap0-1.9.5-1.13.2 libsss_idmap0-debuginfo-1.9.5-1.13.2 libsss_sudo-1.9.5-1.13.2 libsss_sudo-debuginfo-1.9.5-1.13.2 python-ipa_hbac-1.9.5-1.13.2 python-ipa_hbac-debuginfo-1.9.5-1.13.2 python-sssd-config-1.9.5-1.13.2 python-sssd-config-debuginfo-1.9.5-1.13.2 sssd-1.9.5-1.13.2 sssd-debuginfo-1.9.5-1.13.2 sssd-debugsource-1.9.5-1.13.2 sssd-ipa-provider-1.9.5-1.13.2 sssd-ipa-provider-debuginfo-1.9.5-1.13.2 sssd-tools-1.9.5-1.13.2 sssd-tools-debuginfo-1.9.5-1.13.2 - openSUSE 12.3 (x86_64): sssd-32bit-1.9.5-1.13.2 sssd-debuginfo-32bit-1.9.5-1.13.2 References: https://bugzilla.novell.com/818510

1 0

openSUSE-RU-2013:0890-1: yast2-squid: Do not block squid configuration if SuSEfirewall can't be read
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: yast2-squid: Do not block squid configuration if SuSEfirewall can't be read ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0890-1 Rating: low References: #808722 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issue with yast2-squid: - bnc#808722: Do not block squid configuration if SuSEfirewall can't be read Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-380 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): yast2-squid-2.21.2.1-8.4.1 yast2-squid-debuginfo-2.21.2.1-8.4.1 yast2-squid-debugsource-2.21.2.1-8.4.1 References: https://bugzilla.novell.com/808722

1 0

openSUSE-SU-2013:0889-1: moderate: PackageKit: only allow patches for regular updates
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: PackageKit: only allow patches for regular updates ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0889-1 Rating: moderate References: #804983 Cross-References: CVE-2013-1764 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The PackageKit zypp backend was fixed to only allow patches to be updated. Otherwise a regular user could install new packages or even downgrade older packages to ones with security problems. (CVE-2013-1764) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-399 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): PackageKit-0.8.7-4.8.2 PackageKit-backend-zypp-0.8.7-4.8.2 PackageKit-backend-zypp-debuginfo-0.8.7-4.8.2 PackageKit-browser-plugin-0.8.7-4.8.2 PackageKit-browser-plugin-debuginfo-0.8.7-4.8.2 PackageKit-debuginfo-0.8.7-4.8.2 PackageKit-debugsource-0.8.7-4.8.2 PackageKit-devel-0.8.7-4.8.2 PackageKit-devel-debuginfo-0.8.7-4.8.2 PackageKit-gstreamer-plugin-0.8.7-4.8.2 PackageKit-gstreamer-plugin-debuginfo-0.8.7-4.8.2 PackageKit-gtk3-module-0.8.7-4.8.2 PackageKit-gtk3-module-debuginfo-0.8.7-4.8.2 libpackagekit-glib2-16-0.8.7-4.8.2 libpackagekit-glib2-16-debuginfo-0.8.7-4.8.2 libpackagekit-glib2-devel-0.8.7-4.8.2 typelib-1_0-PackageKitGlib-1_0-0.8.7-4.8.2 typelib-1_0-PackageKitPlugin-1_0-0.8.7-4.8.2 - openSUSE 12.3 (x86_64): libpackagekit-glib2-16-32bit-0.8.7-4.8.2 libpackagekit-glib2-16-debuginfo-32bit-0.8.7-4.8.2 libpackagekit-glib2-devel-32bit-0.8.7-4.8.2 - openSUSE 12.3 (noarch): PackageKit-branding-upstream-0.8.7-4.8.2 PackageKit-lang-0.8.7-4.8.2 References: http://support.novell.com/security/cve/CVE-2013-1764.html https://bugzilla.novell.com/804983

1 0

openSUSE-RU-2013:0888-1: make: fix parallel building
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: make: fix parallel building ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0888-1 Rating: low References: #810657 #818721 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issue for make: - bnc#810657: Fixed an issue whereby intermediaries are not considered for remake Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-83 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): make-3.82-143.1 make-debuginfo-3.82-143.1 make-debugsource-3.82-143.1 References: https://bugzilla.novell.com/810657 https://bugzilla.novell.com/818721

1 0

openSUSE-RU-2013:0887-1: yast2-firewall: Fixed checking for running firewall service
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: yast2-firewall: Fixed checking for running firewall service ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0887-1 Rating: low References: #812606 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with yast2-firewall: - bnc#812606: Fixed checking for running firewall service Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-361 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): yast2-firewall-2.21.2.1-5.4.1 References: https://bugzilla.novell.com/812606

1 0

openSUSE-RU-2013:0886-1: iproute2: Don't propogate mounts out of ip for netns to root context
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: iproute2: Don't propogate mounts out of ip for netns to root context ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0886-1 Rating: low References: #816215 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issue with iproute2: - bnc#816215: Don't propogate mounts out of ip for netns to root context (backported fix from 3.8) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-379 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): iproute2-3.7.0-2.5.1 iproute2-debuginfo-3.7.0-2.5.1 iproute2-debugsource-3.7.0-2.5.1 libnetlink-devel-3.7.0-2.5.1 - openSUSE 12.3 (noarch): iproute2-doc-3.7.0-2.5.1 References: https://bugzilla.novell.com/816215

1 0

openSUSE-SU-2013:0885-1: moderate: update for libvirt
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0885-1 Rating: moderate References: #810893 #820397 Cross-References: CVE-2013-1962 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update of libvirt fixes two problems: - fix leak after listing all volumes - CVE-2013-1962 ca697e90-CVE-2013-1962.patch bnc#820397 - Fix parsing of bond interface XML 5ba077dc-iface-bond.patch bnc#810893 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-463 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libvirt-1.0.2-1.6.1 libvirt-client-1.0.2-1.6.1 libvirt-client-debuginfo-1.0.2-1.6.1 libvirt-debuginfo-1.0.2-1.6.1 libvirt-debugsource-1.0.2-1.6.1 libvirt-devel-1.0.2-1.6.1 libvirt-doc-1.0.2-1.6.1 libvirt-lock-sanlock-1.0.2-1.6.1 libvirt-lock-sanlock-debuginfo-1.0.2-1.6.1 libvirt-python-1.0.2-1.6.1 libvirt-python-debuginfo-1.0.2-1.6.1 - openSUSE 12.3 (x86_64): libvirt-client-32bit-1.0.2-1.6.1 libvirt-client-debuginfo-32bit-1.0.2-1.6.1 libvirt-devel-32bit-1.0.2-1.6.1 References: http://support.novell.com/security/cve/CVE-2013-1962.html https://bugzilla.novell.com/810893 https://bugzilla.novell.com/820397

1 0

openSUSE-RU-2013:0884-1: poppler: fix displaying of some characters
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: poppler: fix displaying of some characters ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0884-1 Rating: low References: Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: Poppler was updated to fix displaying of some unicode characters. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-91 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libpoppler-cpp0-0.14.4-9.1 libpoppler-cpp0-debuginfo-0.14.4-9.1 libpoppler-devel-0.14.4-9.1 libpoppler-glib-devel-0.14.4-9.1 libpoppler-glib5-0.14.4-9.1 libpoppler-glib5-debuginfo-0.14.4-9.1 libpoppler7-0.14.4-9.1 libpoppler7-debuginfo-0.14.4-9.1 poppler-debugsource-0.14.4-9.1 poppler-tools-0.14.4-9.1 poppler-tools-debuginfo-0.14.4-9.1 - openSUSE 11.4 (noarch): libpoppler-doc-0.14.4-9.1 References:

1 0

openSUSE-SU-2013:0883-1: moderate: Update for clamav to version 0.97.8.
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: Update for clamav to version 0.97.8. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0883-1 Rating: moderate References: #816865 Cross-References: CVE-2013-2020 CVE-2013-2021 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: New clamav version 0.97.8 (bnc#816865): * CVE-2013-2020: Fix heap corruption * CVE-2013-2021: Fix overflow due to PDF key length computation. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-84 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): clamav-0.97.8-21.1 clamav-debuginfo-0.97.8-21.1 clamav-debugsource-0.97.8-21.1 - openSUSE 11.4 (noarch): clamav-db-0.97.8-21.1 References: http://support.novell.com/security/cve/CVE-2013-2020.html http://support.novell.com/security/cve/CVE-2013-2021.html https://bugzilla.novell.com/816865

1 0