June 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:1079-1: liferea: update to 1.8.14
by maintenance＠opensuse.org 26 Jun '13

26 Jun '13

openSUSE Recommended Update: liferea: update to 1.8.14 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1079-1 Rating: low References: #823576 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with liferea: - bnc#823576: Update to version * sf#1069: broken rendering in tt-rss feeds + with combined 1.8.13 fixes: * Fixes missing item list update when browsing item URLs in Liferea * Fixes format string issues in several translations. * Added Hebrew translation of reference manual page * Added MimeType to .desktop file * sf#1040: In feed entries, spaces are replaced with "+" * sf#1051: Issues in RTL GUI of Liferea * sf#1038, sf#1074: Updates ttrss feeds over and over * Updated the default feedlists * Added Vietnamese translation * Updated translations Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-530 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): liferea-1.8.14-2.7.1 liferea-debuginfo-1.8.14-2.7.1 liferea-debugsource-1.8.14-2.7.1 - openSUSE 12.3 (noarch): liferea-lang-1.8.14-2.7.1 References: https://bugzilla.novell.com/823576

1 0

openSUSE-RU-2013:1078-1: moderate: perl-X500-DN: don't set $Parse::RecDescent::skip to 'undef'
by maintenance＠opensuse.org 26 Jun '13

26 Jun '13

openSUSE Recommended Update: perl-X500-DN: don't set $Parse::RecDescent::skip to 'undef' ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1078-1 Rating: moderate References: #799660 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with perl-X500-DN: - bnc#799660: don't set $Parse::RecDescent::skip to 'undef' (e.g. this makes yast2-ldap-server configurable again) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-532 - openSUSE 12.2: zypper in -t patch openSUSE-2013-532 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): perl-X500-DN-0.29-100.4.1 - openSUSE 12.2 (i586 x86_64): perl-X500-DN-0.29-98.4.1 References: https://bugzilla.novell.com/799660

1 0

openSUSE-RU-2013:1077-1: libxml2: fix a leak in lzma code
by maintenance＠opensuse.org 26 Jun '13

26 Jun '13

openSUSE Recommended Update: libxml2: fix a leak in lzma code ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1077-1 Rating: low References: #823792 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with libxml2: - bnc#823792: fix a leak in lzma code Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-534 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libxml2-2-2.7.8+git20120223-8.26.1 libxml2-2-debuginfo-2.7.8+git20120223-8.26.1 libxml2-debugsource-2.7.8+git20120223-8.26.1 libxml2-devel-2.7.8+git20120223-8.26.1 libxml2-tools-2.7.8+git20120223-8.26.1 libxml2-tools-debuginfo-2.7.8+git20120223-8.26.1 python-libxml2-2.7.8+git20120223-8.26.1 python-libxml2-debuginfo-2.7.8+git20120223-8.26.1 python-libxml2-debugsource-2.7.8+git20120223-8.26.1 - openSUSE 12.2 (x86_64): libxml2-2-32bit-2.7.8+git20120223-8.26.1 libxml2-2-debuginfo-32bit-2.7.8+git20120223-8.26.1 libxml2-devel-32bit-2.7.8+git20120223-8.26.1 - openSUSE 12.2 (noarch): libxml2-doc-2.7.8+git20120223-8.26.1 References: https://bugzilla.novell.com/823792

1 0

openSUSE-SU-2013:1072-1: moderate: update for openconnect
by opensuse-security＠opensuse.org 24 Jun '13

24 Jun '13

openSUSE Security Update: update for openconnect ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1072-1 Rating: moderate References: #767616 Cross-References: CVE-2012-3291 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This openconnect update to version 3.20 includes several security and bug fixes. - fix bnc#767616 - fix for CVE-2012-3291 - make vpnc mandatory during build, following upstream changes - package documentation in a -doc package - Update to version 3.20 * Cope with non-keepalive HTTP response on authentication success. * Fix progress callback with incorrect cbdata which caused KDE crash. - Update to version 3.19 * Enable native TPM support when built with GnuTLS. * Enable PKCS#11 token support when built with GnuTLS. * Eliminate all SSL library exposure through libopenconnect. * Parse split DNS information, provide $CISCO_SPLIT_DNS environment variable to vpnc-script. * Attempt to provide new-style MTU information to server (on Linux only, unless specified on command line). * Allow building against GnuTLS, including DTLS support. * Add --with-pkgconfigdir= option to configure for FreeBSD's benefit (fd#48743). - Update to version 3.18 * Fix autohate breakage with --disable-nls... hopefully. * Fix buffer overflow in banner handling. - Update to version 3.17 * Work around time() brokenness on Solaris. * Fix interface plumbing on Solaris 10. * Provide asprintf() function for (unpatched) Solaris 10. * Make vpnc-script mandatory, like it is for vpnc * Don't set Legacy IP address on tun device; let vpnc-script do it. * Detect OpenSSL even without pkg-config. * Stop building static library by default. * Invoke vpnc-script with "pre-init" reason to load tun module if necessary. - Update to version 3.16 * Fix build failure on Debian/kFreeBSD and Hurd. * Fix memory leak of deflated packets. * Fix memory leak of zlib state on CSTP reconnect. * Eliminate memcpy() calls on packets from DTLS and tunnel device. * Use I_LINK instead of I_PLINK on Solaris to plumb interface for Legacy IP. * Plumb interface for IPv6 on Solaris, instead of expecting vpnc-script to do it. * Refer to vpnc-script and help web pages in openconnect output. * Fix potential crash when processing libproxy results. * Be more conservative in detecting libproxy without pkg-config. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-529 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): openconnect-3.20-2.4.1 openconnect-debuginfo-3.20-2.4.1 openconnect-debugsource-3.20-2.4.1 openconnect-devel-3.20-2.4.1 openconnect-doc-3.20-2.4.1 - openSUSE 12.2 (noarch): openconnect-lang-3.20-2.4.1 References: http://support.novell.com/security/cve/CVE-2012-3291.html https://bugzilla.novell.com/767616

1 0

openSUSE-RU-2013:1071-1: important: mdadm: Two fixes
by maintenance＠opensuse.org 24 Jun '13

24 Jun '13

openSUSE Recommended Update: mdadm: Two fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1071-1 Rating: important References: #793954 #821366 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues with mdadm: - bnc#793954: + avoid some races during array assembled- particularly at boot + make sure systemd-udev-trigger runs before boot.md to avoid races - bnc#821366: mdmon@.service - allow mdmon to be started by systemd, so systemd doesn't kill it Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-528 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): mdadm-3.2.6-3.4.1 mdadm-debuginfo-3.2.6-3.4.1 mdadm-debugsource-3.2.6-3.4.1 References: https://bugzilla.novell.com/793954 https://bugzilla.novell.com/821366

1 0

openSUSE-RU-2013:1070-1: xorg-x11-Xvnc: Build with GLX extension
by maintenance＠opensuse.org 24 Jun '13

24 Jun '13

openSUSE Recommended Update: xorg-x11-Xvnc: Build with GLX extension ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1070-1 Rating: low References: #823625 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with xorg-x11-Xvnc: - bnc#823625: Build with GLX extension. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-527 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): xorg-x11-Xvnc-7.6_1.0.1-3.4.4 xorg-x11-Xvnc-debuginfo-7.6_1.0.1-3.4.4 xorg-x11-Xvnc-debugsource-7.6_1.0.1-3.4.4 References: https://bugzilla.novell.com/823625

1 0

openSUSE-RU-2013:1069-1: dosfstools: fix dosfslabel crash
by maintenance＠opensuse.org 24 Jun '13

24 Jun '13

openSUSE Recommended Update: dosfstools: fix dosfslabel crash ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1069-1 Rating: low References: #824025 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes fixes the following issue with dosfstools: - bnc#824025: dosfslabel was crashing when allocating new rootdir entry. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-525 - openSUSE 12.2: zypper in -t patch openSUSE-2013-525 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): dosfstools-3.0.10-26.4.1 dosfstools-debuginfo-3.0.10-26.4.1 dosfstools-debugsource-3.0.10-26.4.1 - openSUSE 12.2 (i586 x86_64): dosfstools-3.0.10-22.4.1 dosfstools-debuginfo-3.0.10-22.4.1 dosfstools-debugsource-3.0.10-22.4.1 References: https://bugzilla.novell.com/824025

1 0

openSUSE-RU-2013:1068-1: moderate: logwatch: understand newer rsyslog-timestamps
by maintenance＠opensuse.org 24 Jun '13

24 Jun '13

openSUSE Recommended Update: logwatch: understand newer rsyslog-timestamps ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1068-1 Rating: moderate References: #818842 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issue with logwatch: - bnc#818842: Parse rsyslog-timestamps Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-526 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): logwatch-7.4.0-8.5.1 References: https://bugzilla.novell.com/818842

1 0

openSUSE-SU-2013:1065-1: moderate: update for phpMyAdmin
by opensuse-security＠opensuse.org 21 Jun '13

21 Jun '13

openSUSE Security Update: update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1065-1 Rating: moderate References: #814678 #824301 #824302 Cross-References: CVE-2013-1937 CVE-2013-3238 CVE-2013-3239 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update of phpMyAdmin fixes several security issues. - update to 3.5.8.1 (2013-04-24) * [security] Remote code execution (preg_replace), reported by Janek Vind (see PMASA-2013-2) * [security] Locally Saved SQL Dump File Multiple File Extension Remote Code Execution, reported by Janek Vind (see PMASA-2013-3) - fix for bnc#824301 * PMASA-2013-2 (CVE-2013-3238) - fix for bnc#824302 * PMASA-2013-3 (CVE-2013-3239) - update to 3.5.8 (2013-04-08) * sf#3828 MariaDB reported as MySQL * sf#3854 Incorrect header for Safari 6.0 * sf#3705 Attempt to open trigger for edit gives NULL * Use HTML5 DOCTYPE * [security] Self-XSS on GIS visualisation page, reported by Janek Vind see PMASA-2013-1 * sf#3800 Incorrect keyhandler behaviour #2 - fix for bnc#814678 * PMASA-2013-1 (CVE-2013-1937) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-524 - openSUSE 12.2: zypper in -t patch openSUSE-2013-524 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): phpMyAdmin-3.5.8.1-1.4.1 - openSUSE 12.2 (noarch): phpMyAdmin-3.5.8.1-1.12.1 References: http://support.novell.com/security/cve/CVE-2013-1937.html http://support.novell.com/security/cve/CVE-2013-3238.html http://support.novell.com/security/cve/CVE-2013-3239.html https://bugzilla.novell.com/814678 https://bugzilla.novell.com/824301 https://bugzilla.novell.com/824302

1 0

openSUSE-SU-2013:1064-1: moderate: update for python-pymongo, python3-pymongo
by opensuse-security＠opensuse.org 21 Jun '13

21 Jun '13

openSUSE Security Update: update for python-pymongo, python3-pymongo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1064-1 Rating: moderate References: #822798 Cross-References: CVE-2013-2132 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of pymongo fixes a null pointer issue. - Add Fix-null-pointer-when-decoding-invalid-DBRef.patch * Fixed user-triggerable NULL pointer dereference due to utter plebbery (CVE-2013-2132, bnc#822798) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-522 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): python-pymongo-2.4.1-2.4.1 python-pymongo-debuginfo-2.4.1-2.4.1 python-pymongo-debugsource-2.4.1-2.4.1 python3-pymongo-2.4.1-2.4.1 python3-pymongo-debuginfo-2.4.1-2.4.1 python3-pymongo-debugsource-2.4.1-2.4.1 References: http://support.novell.com/security/cve/CVE-2013-2132.html https://bugzilla.novell.com/822798

1 0