June 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2013:1063-1: moderate: update for flash-player
by opensuse-security＠opensuse.org 21 Jun '13

21 Jun '13

openSUSE Security Update: update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1063-1 Rating: moderate References: #824512 Cross-References: CVE-2013-3343 Affected Products: openSUSE 12.3:NonFree openSUSE 12.2:NonFree ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This updates of Adobe Flash Player addresses current security problems. - Update to 11.2.202.291: (bnc#824512) * APSB13-16, CVE-2013-3343 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2013-523 - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2013-523 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3:NonFree (i586 x86_64): flash-player-11.2.202.291-2.28.1 flash-player-gnome-11.2.202.291-2.28.1 flash-player-kde4-11.2.202.291-2.28.1 - openSUSE 12.2:NonFree (i586 x86_64): flash-player-11.2.202.291-1.52.1 flash-player-gnome-11.2.202.291-1.52.1 flash-player-kde4-11.2.202.291-1.52.1 References: http://support.novell.com/security/cve/CVE-2013-3343.html https://bugzilla.novell.com/824512

1 0

openSUSE-RU-2013:1057-1: moderate: systemd: several fixes
by maintenance＠opensuse.org 20 Jun '13

20 Jun '13

openSUSE Recommended Update: systemd: several fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1057-1 Rating: moderate References: #808144 #808319 #809420 #820454 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes the following issues with systemd: - bnc#808144: allow removal of some specific symlinks created when enabling services - bnc#820454: fix potential memory corruption - bnc#809420: ensure /boot/sysctl.conf-<kernel_release> is handled - bnc#808319: update logind-nvidia-acl.diff to apply ACL to /dev/nvidia* Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-520 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libgudev-1_0-0-195-13.29.1 libgudev-1_0-0-debuginfo-195-13.29.1 libgudev-1_0-devel-195-13.29.1 libudev-devel-195-13.29.1 libudev-mini-devel-195-13.29.1 libudev-mini1-195-13.29.1 libudev-mini1-debuginfo-195-13.29.1 libudev1-195-13.29.1 libudev1-debuginfo-195-13.29.1 systemd-195-13.29.1 systemd-analyze-195-13.29.1 systemd-debuginfo-195-13.29.1 systemd-debugsource-195-13.29.1 systemd-devel-195-13.29.1 systemd-logger-195-13.29.1 systemd-mini-195-13.29.1 systemd-mini-analyze-195-13.29.1 systemd-mini-debuginfo-195-13.29.1 systemd-mini-debugsource-195-13.29.1 systemd-mini-devel-195-13.29.1 systemd-mini-sysvinit-195-13.29.1 systemd-sysvinit-195-13.29.1 typelib-1_0-GUdev-1_0-195-13.29.1 udev-195-13.29.1 udev-debuginfo-195-13.29.1 udev-mini-195-13.29.1 udev-mini-debuginfo-195-13.29.1 - openSUSE 12.3 (x86_64): libgudev-1_0-0-32bit-195-13.29.1 libgudev-1_0-0-debuginfo-32bit-195-13.29.1 libudev1-32bit-195-13.29.1 libudev1-debuginfo-32bit-195-13.29.1 systemd-32bit-195-13.29.1 systemd-debuginfo-32bit-195-13.29.1 References: https://bugzilla.novell.com/808144 https://bugzilla.novell.com/808319 https://bugzilla.novell.com/809420 https://bugzilla.novell.com/820454

1 0

openSUSE-RU-2013:1056-1: acpid: let init handle process stopping
by maintenance＠opensuse.org 20 Jun '13

20 Jun '13

openSUSE Recommended Update: acpid: let init handle process stopping ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1056-1 Rating: low References: #819914 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with acpid: - bnc#819914: Remove ExecStop from systemd service file and let init handle process stopping, otherwise the service may hang during shutdown Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-521 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): acpid-2.0.17-2.4.1 acpid-debuginfo-2.0.17-2.4.1 acpid-debugsource-2.0.17-2.4.1 References: https://bugzilla.novell.com/819914

1 0

openSUSE-RU-2013:1055-1: moderate: systemd: several fixes
by maintenance＠opensuse.org 20 Jun '13

20 Jun '13

openSUSE Recommended Update: systemd: several fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1055-1 Rating: moderate References: #793411 #796171 #804575 #808144 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes the following issues with systemd: - bnc#808144: allow removal of some specific symlinks created when enabling services - bnc#804575: handle rbind mount correctly - bnc#793411: + update parse-multiline-env-file.patch to correctly handle commented line + correctly parse multiline environment files - bnc#796171: ensure some mounts points are not umounted before initscripts Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-519 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): systemd-44-10.15.1 systemd-analyze-44-10.15.1 systemd-debuginfo-44-10.15.1 systemd-debugsource-44-10.15.1 systemd-devel-44-10.15.1 systemd-gtk-44-10.15.1 systemd-gtk-debuginfo-44-10.15.1 systemd-gtk-debugsource-44-10.15.1 systemd-sysvinit-44-10.15.1 - openSUSE 12.2 (x86_64): systemd-32bit-44-10.15.1 systemd-debuginfo-32bit-44-10.15.1 References: https://bugzilla.novell.com/793411 https://bugzilla.novell.com/796171 https://bugzilla.novell.com/804575 https://bugzilla.novell.com/808144

1 0

openSUSE-RU-2013:1054-1: important: nfs-utils: avoid unmount filesystems after update
by maintenance＠opensuse.org 20 Jun '13

20 Jun '13

openSUSE Recommended Update: nfs-utils: avoid unmount filesystems after update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1054-1 Rating: important References: #825150 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with nfs-utils: - bnc#825150: Guard against blank lines in /run/nfs/bind.mounts causing all filesystems from being unmounted. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-518 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): nfs-client-1.2.7-2.10.1 nfs-client-debuginfo-1.2.7-2.10.1 nfs-doc-1.2.7-2.10.1 nfs-kernel-server-1.2.7-2.10.1 nfs-kernel-server-debuginfo-1.2.7-2.10.1 nfs-utils-debugsource-1.2.7-2.10.1 References: https://bugzilla.novell.com/825150

1 0

openSUSE-RU-2013:1050-1: sudo: fixed man-page
by maintenance＠opensuse.org 19 Jun '13

19 Jun '13

openSUSE Recommended Update: sudo: fixed man-page ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1050-1 Rating: low References: #823292 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with the man-page of sudo: - bnc#823292: fix the default flag settings in manual to reflect changes caused by sudo-sudoers.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-517 - openSUSE 12.2: zypper in -t patch openSUSE-2013-517 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): sudo-1.8.6p3-3.9.1 sudo-debuginfo-1.8.6p3-3.9.1 sudo-debugsource-1.8.6p3-3.9.1 sudo-devel-1.8.6p3-3.9.1 - openSUSE 12.2 (i586 x86_64): sudo-1.8.5p2-2.8.1 sudo-debuginfo-1.8.5p2-2.8.1 sudo-debugsource-1.8.5p2-2.8.1 sudo-devel-1.8.5p2-2.8.1 References: https://bugzilla.novell.com/823292

1 0

openSUSE-SU-2013:1049-1: moderate: update for autotrace
by opensuse-security＠opensuse.org 19 Jun '13

19 Jun '13

openSUSE Security Update: update for autotrace ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1049-1 Rating: moderate References: #815382 Cross-References: CVE-2013-1953 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of autotrace fixes a buffer overflow issue. - Fix stack-based buffer overflow in bmp parser (CVE-2013-1953.patch, bnc#815382, CVE-2013-1953). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-96 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): autotrace-0.31.1-629.1 autotrace-debuginfo-0.31.1-629.1 autotrace-debugsource-0.31.1-629.1 autotrace-devel-0.31.1-629.1 References: http://support.novell.com/security/cve/CVE-2013-1953.html https://bugzilla.novell.com/815382

1 0

openSUSE-SU-2013:1048-1: moderate: This update of nfs-utils fixed a DNS spoofing issue.
by opensuse-security＠opensuse.org 19 Jun '13

19 Jun '13

openSUSE Security Update: This update of nfs-utils fixed a DNS spoofing issue. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1048-1 Rating: moderate References: #813464 Cross-References: CVE-2013-1923 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: bnc#813464: VUL-0: CVE-2013-1923: nfs-utils: rpc-gssd is vulnerable to DNS spoofing cve#CVE-2013-1923: Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-95 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): nfs-client-1.2.3-11.30.1 nfs-client-debuginfo-1.2.3-11.30.1 nfs-doc-1.2.3-11.30.1 nfs-kernel-server-1.2.3-11.30.1 References: http://support.novell.com/security/cve/CVE-2013-1923.html https://bugzilla.novell.com/813464

1 0

openSUSE-SU-2013:1047-1: moderate: update for libX11
by opensuse-security＠opensuse.org 19 Jun '13

19 Jun '13

openSUSE Security Update: update for libX11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1047-1 Rating: moderate References: #815451 #821664 Cross-References: CVE-2013-1981 CVE-2013-1997 CVE-2013-2004 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update of libX11 fixes several security issues. - U_0001-integer-overflow-in-_XQueryFont-on-32-bit-platforms-. patch, U_0002-integer-overflow-in-_XF86BigfontQueryFont-CVE-2013-1. patch, U_0003-integer-overflow-in-XListFontsWithInfo-CVE-2013-1981. patch, U_0004-integer-overflow-in-XGetMotionEvents-CVE-2013-1981-4. patch, U_0005-integer-overflow-in-XListHosts-CVE-2013-1981-5-13.pat ch, U_0006-Integer-overflows-in-stringSectionSize-cause-buffer-. patch, U_0007-integer-overflow-in-ReadInFile-in-Xrm.c-CVE-2013-198. patch, U_0008-integer-truncation-in-_XimParseStringFile-CVE-2013-1. patch, U_0009-integer-overflows-in-TransFileName-CVE-2013-1981-9-1. patch, U_0010-integer-overflow-in-XGetWindowProperty-CVE-2013-1981. patch, U_0011-integer-overflow-in-XGetImage-CVE-2013-1981-11-13.pat ch, U_0012-integer-overflow-in-XGetPointerMapping-XGetKeyboardM. patch, U_0013-integer-overflow-in-XGetModifierMapping-CVE-2013-198. patch * integer overflow in various functions, integer truncation in _XimParseStringFile() [CVE-2013-1981] (bnc#821664, bnc#815451) - U_0001-unvalidated-lengths-in-XAllocColorCells-CVE-2013-199. patch, U_0002-unvalidated-index-in-_XkbReadGetDeviceInfoReply-CVE-. patch, U_0003-unvalidated-indexes-in-_XkbReadGeomShapes-CVE-2013-1. patch, U_0004-unvalidated-indexes-in-_XkbReadGetGeometryReply-CVE-. patch, U_0005-unvalidated-index-in-_XkbReadKeySyms-CVE-2013-1997-5. patch, U_0006-unvalidated-index-in-_XkbReadKeyActions-CVE-2013-199. patch, U_0007-unvalidated-index-in-_XkbReadKeyBehaviors-CVE-2013-1. patch, U_0008-unvalidated-index-in-_XkbReadModifierMap-CVE-2013-19. patch, U_0009-unvalidated-index-in-_XkbReadExplicitComponents-CVE-. patch, U_0010-unvalidated-index-in-_XkbReadVirtualModMap-CVE-2013-. patch, U_0011-unvalidated-index-length-in-_XkbReadGetNamesReply-CV. patch, U_0012-unvalidated-length-in-_XimXGetReadData-CVE-2013-1997. patch, U_0013-Avoid-overflows-in-XListFonts-CVE-2013-1997-13-15.pat ch, U_0014-Avoid-overflows-in-XGetFontPath-CVE-2013-1997-14-15.p atch, U_0015-Avoid-overflows-in-XListExtensions-CVE-2013-1997-15-. patch * unvalidated index/length in various functions; Avoid overflows in XListFonts(), XGetFontPath(), XListExtensions() [CVE-2013-1997] (bnc##821664, bnc#815451) - U_0001-Unbounded-recursion-in-GetDatabase-when-parsing-incl. patch, U_0002-Unbounded-recursion-in-_XimParseStringFile-when-pars. patch * Unbounded recursion in GetDatabase(), _XimParseStringFile when parsing include files [CVE-2013-2004] (bnc##821664, bnc#815451) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-516 - openSUSE 12.2: zypper in -t patch openSUSE-2013-516 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libX11-6-1.5.0-4.7.1 libX11-6-debuginfo-1.5.0-4.7.1 libX11-debugsource-1.5.0-4.7.1 libX11-devel-1.5.0-4.7.1 libX11-xcb1-1.5.0-4.7.1 libX11-xcb1-debuginfo-1.5.0-4.7.1 - openSUSE 12.3 (x86_64): libX11-6-32bit-1.5.0-4.7.1 libX11-6-debuginfo-32bit-1.5.0-4.7.1 libX11-devel-32bit-1.5.0-4.7.1 libX11-xcb1-32bit-1.5.0-4.7.1 libX11-xcb1-debuginfo-32bit-1.5.0-4.7.1 - openSUSE 12.3 (noarch): libX11-data-1.5.0-4.7.1 - openSUSE 12.2 (i586 x86_64): libX11-6-1.5.0-2.7.1 libX11-6-debuginfo-1.5.0-2.7.1 libX11-debugsource-1.5.0-2.7.1 libX11-devel-1.5.0-2.7.1 libX11-xcb1-1.5.0-2.7.1 libX11-xcb1-debuginfo-1.5.0-2.7.1 - openSUSE 12.2 (x86_64): libX11-6-32bit-1.5.0-2.7.1 libX11-6-debuginfo-32bit-1.5.0-2.7.1 libX11-devel-32bit-1.5.0-2.7.1 libX11-xcb1-32bit-1.5.0-2.7.1 libX11-xcb1-debuginfo-32bit-1.5.0-2.7.1 - openSUSE 12.2 (noarch): libX11-data-1.5.0-2.7.1 References: http://support.novell.com/security/cve/CVE-2013-1981.html http://support.novell.com/security/cve/CVE-2013-1997.html http://support.novell.com/security/cve/CVE-2013-2004.html https://bugzilla.novell.com/815451 https://bugzilla.novell.com/821664

1 0

openSUSE-SU-2013:1046-1: moderate: update for libXp
by opensuse-security＠opensuse.org 19 Jun '13

19 Jun '13

openSUSE Security Update: update for libXp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1046-1 Rating: moderate References: #815451 #821668 Cross-References: CVE-2013-2062 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update of libXp fixes several integer overflow issues: - U_0001-integer-overflow-in-XpGetAttributes-XpGetOneAttribut. patch, U_0002-integer-overflows-in-XpGetPrinterList-CVE-2013-2062-. patch, U_0003-integer-overflows-in-XpQueryScreens-CVE-2013-2062-3-. patch * integer overflow(s) in XpGetAttributes/XpGetOneAttribute, XpGetPrinterList() and XpQueryScreens() [CVE-2013-2062] (bnc#821668, bnc#815451) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-514 - openSUSE 12.2: zypper in -t patch openSUSE-2013-514 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libXp-debugsource-1.0.1-4.6.1 libXp-devel-1.0.1-4.6.1 libXp6-1.0.1-4.6.1 libXp6-debuginfo-1.0.1-4.6.1 - openSUSE 12.3 (x86_64): libXp-devel-32bit-1.0.1-4.6.1 libXp6-32bit-1.0.1-4.6.1 libXp6-debuginfo-32bit-1.0.1-4.6.1 - openSUSE 12.2 (i586 x86_64): libXp-debugsource-1.0.1-2.7.1 libXp-devel-1.0.1-2.7.1 libXp6-1.0.1-2.7.1 libXp6-debuginfo-1.0.1-2.7.1 - openSUSE 12.2 (x86_64): libXp-devel-32bit-1.0.1-2.7.1 libXp6-32bit-1.0.1-2.7.1 libXp6-debuginfo-32bit-1.0.1-2.7.1 References: http://support.novell.com/security/cve/CVE-2013-2062.html https://bugzilla.novell.com/815451 https://bugzilla.novell.com/821668

1 0