June 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2013:0993-1: moderate: java-1_6_0-openjdk to Icedtea6-1.12.5
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: java-1_6_0-openjdk to Icedtea6-1.12.5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0993-1 Rating: moderate References: #817157 Cross-References: CVE-2013-0401 CVE-2013-1488 CVE-2013-1518 CVE-2013-1537 CVE-2013-1557 CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2415 CVE-2013-2417 CVE-2013-2419 CVE-2013-2420 CVE-2013-2421 CVE-2013-2422 CVE-2013-2424 CVE-2013-2426 CVE-2013-2429 CVE-2013-2430 CVE-2013-2431 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: java-1_6_0-openjdk was updated to 1.12.5 (bnc#817157) * Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization - S8001031, CVE-2013-2419: Better font processing - S8001040, CVE-2013-1537: Rework RMI model - S8001322: Refactor deserialization - S8001329, CVE-2013-1557: Augment RMI logging - S8003335: Better handling of Finalizer thread - S8003445: Adjust JAX-WS to focus on API - S8003543, CVE-2013-2415: Improve processing of MTOM attachments - S8004261: Improve input validation - S8004336, CVE-2013-2431: Better handling of method handle intrinsic frames - S8004986, CVE-2013-2383: Better handling of glyph table - S8004987, CVE-2013-2384: Improve font layout - S8004994, CVE-2013-1569: Improve checking of glyph table - S8005432: Update access to JAX-WS - S8005943: (process) Improved Runtime.exec - S8006309: More reliable control panel operation - S8006435, CVE-2013-2424: Improvements in JMX - S8006790: Improve checking for windows - S8006795: Improve font warning messages - S8007406: Improve accessibility of AccessBridge - S8007617, CVE-2013-2420: Better validation of images - S8007667, CVE-2013-2430: Better image reading - S8007918, CVE-2013-2429: Better image writing - S8009063, CVE-2013-2426: Improve reliability of ConcurrentHashMap - S8009305, CVE-2013-0401: Improve AWT data transfer - S8009699, CVE-2013-2421: Methodhandle lookup - S8009814, CVE-2013-1488: Better driver management - S8009857, CVE-2013-2422: Problem with plugin - RH952389: Temporary files created with insecure permissions * Backports - S7197906: BlockOffsetArray::power_to_cards_back() needs to handle > 32 bit shifts - S7036559: ConcurrentHashMap footprint and contention improvements - S5102804: Memory leak in Introspector.getBeanInfo(Class) for custom BeanInfo: Class param (with WeakCache from S6397609) - S6501644: sync LayoutEngine *code* structure to match ICU - S6886358: layout code update - S6963811: Deadlock-prone locking changes in Introspector - S7017324: Kerning crash in JDK 7 since ICU layout update - S7064279: Introspector.getBeanInfo() should release some resources in timely manner - S8004302: javax/xml/soap/Test7013971.java fails since jdk6u39b01 - S7133220: Additional patches to JAXP 1.4.5 update 1 for 7u4 (partial for S6657673) - S8009530: ICU Kern table support broken * Bug fixes - OJ3: Fix get_stack_bounds memory leak (alternate fix for S7197906) - PR1362: Fedora 19 / rawhide FTBFS SIGILL - PR1338: Remove dependence on libXp - PR1339: Simplify the rhino class rewriter to avoid use of concurrency - PR1336: Bootstrap failure on Fedora 17/18 - PR1319: Correct #ifdef to #if - PR1402: Support glibc < 2.17 with AArch64 patch - Give xalan/xerces access to their own internal packages. * New features - JAXP, JAXWS & JAF supplied as patches rather than drops to aid subsequent patching. - PR1380: Add AArch64 support to Zero - openjdk-7-src-b147-awt-crasher.patch (bnc#792951) - fix build for non-jit packages Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-74 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b27.1.12.5-37.1 java-1_6_0-openjdk-debuginfo-1.6.0.0_b27.1.12.5-37.1 java-1_6_0-openjdk-debugsource-1.6.0.0_b27.1.12.5-37.1 java-1_6_0-openjdk-demo-1.6.0.0_b27.1.12.5-37.1 java-1_6_0-openjdk-demo-debuginfo-1.6.0.0_b27.1.12.5-37.1 java-1_6_0-openjdk-devel-1.6.0.0_b27.1.12.5-37.1 java-1_6_0-openjdk-devel-debuginfo-1.6.0.0_b27.1.12.5-37.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b27.1.12.5-37.1 java-1_6_0-openjdk-src-1.6.0.0_b27.1.12.5-37.1 References: http://support.novell.com/security/cve/CVE-2013-0401.html http://support.novell.com/security/cve/CVE-2013-1488.html http://support.novell.com/security/cve/CVE-2013-1518.html http://support.novell.com/security/cve/CVE-2013-1537.html http://support.novell.com/security/cve/CVE-2013-1557.html http://support.novell.com/security/cve/CVE-2013-1569.html http://support.novell.com/security/cve/CVE-2013-2383.html http://support.novell.com/security/cve/CVE-2013-2384.html http://support.novell.com/security/cve/CVE-2013-2415.html http://support.novell.com/security/cve/CVE-2013-2417.html http://support.novell.com/security/cve/CVE-2013-2419.html http://support.novell.com/security/cve/CVE-2013-2420.html http://support.novell.com/security/cve/CVE-2013-2421.html http://support.novell.com/security/cve/CVE-2013-2422.html http://support.novell.com/security/cve/CVE-2013-2424.html http://support.novell.com/security/cve/CVE-2013-2426.html http://support.novell.com/security/cve/CVE-2013-2429.html http://support.novell.com/security/cve/CVE-2013-2430.html http://support.novell.com/security/cve/CVE-2013-2431.html https://bugzilla.novell.com/817157

1 0

openSUSE-RU-2013:0992-1: moderate: python-sip: update to 4.14.6:
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: python-sip: update to 4.14.6: ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0992-1 Rating: moderate References: #812130 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This bugfix-release for python-sip includes versions 4.14.4, 4.14.5 and 4.14.6. There is no detailed changelog available. python-sip 4.14.4 includes an potential incompatibility in the use of the %VirtualErrorHandler directive. python-sip 4.14.5 is a minor bugfix release, specifically for QGIS Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-388 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): python-qt4-4.9.6-3.2.2 python-qt4-debuginfo-4.9.6-3.2.2 python-qt4-debugsource-4.9.6-3.2.2 python-qt4-devel-4.9.6-3.2.2 python-qt4-utils-4.9.6-3.2.2 python-qt4-utils-debuginfo-4.9.6-3.2.2 python-sip-4.14.6-1.4.1 python-sip-bin-4.14.6-1.4.1 python-sip-bin-debuginfo-4.14.6-1.4.1 python-sip-debuginfo-4.14.6-1.4.1 python-sip-debugsource-4.14.6-1.4.1 python-sip-devel-4.14.6-1.4.1 python3-qt4-4.9.6-3.2.1 python3-qt4-debuginfo-4.9.6-3.2.1 python3-qt4-debugsource-4.9.6-3.2.1 python3-qt4-devel-4.9.6-3.2.1 python3-sip-4.14.6-1.4.1 python3-sip-debuginfo-4.14.6-1.4.1 python3-sip-debugsource-4.14.6-1.4.1 python3-sip-devel-4.14.6-1.4.1 References: https://bugzilla.novell.com/812130

1 0

openSUSE-RU-2013:0991-1: moderate: python-pyzmq: Update to version 13.0.0
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: python-pyzmq: Update to version 13.0.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0991-1 Rating: moderate References: #811890 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issues with python-pyzmq: - Fix bnc#811890 + Changes suggests to recommends zeromq since there is no way to install suggets currently + Update to version 13.0.0: * PyPy support * The Threadsafe ZMQStream experiment in 2.2.0.1 was deemed inappropriate and not useful, and has been removed. * The zmq.web experiment has been removed, to be developed as a standalone project + Add python3 requires and buildrequires. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-390 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): python-pyzmq-13.0.0-7.4.1 python-pyzmq-debuginfo-13.0.0-7.4.1 python-pyzmq-debugsource-13.0.0-7.4.1 python-pyzmq-devel-13.0.0-7.4.1 python3-pyzmq-13.0.0-7.4.1 python3-pyzmq-debuginfo-13.0.0-7.4.1 python3-pyzmq-debugsource-13.0.0-7.4.1 python3-pyzmq-devel-13.0.0-7.4.1 References: https://bugzilla.novell.com/811890

1 0

openSUSE-SU-2013:0990-1: moderate: acroread to 9.5.5
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: acroread to 9.5.5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0990-1 Rating: moderate References: #819918 Cross-References: CVE-2013-2549 CVE-2013-2550 CVE-2013-2718 CVE-2013-2719 CVE-2013-2720 CVE-2013-2721 CVE-2013-2722 CVE-2013-2723 CVE-2013-2724 CVE-2013-2725 CVE-2013-2726 CVE-2013-2727 CVE-2013-2729 CVE-2013-2730 CVE-2013-2731 CVE-2013-2732 CVE-2013-2733 CVE-2013-2734 CVE-2013-2735 CVE-2013-2736 CVE-2013-2737 CVE-2013-3337 CVE-2013-3338 CVE-2013-3339 CVE-2013-3340 CVE-2013-3341 CVE-2013-3342 Affected Products: openSUSE 12.3:NonFree openSUSE 12.2:NonFree ______________________________________________________________________________ An update that fixes 27 vulnerabilities is now available. Description: Acroread was updated to 9.5.5 for bnc#819918(swampid#52449). More information can be found on: https://www.adobe.com/support/security/bulletins/apsb13-15.h tml (CVE-2013-2549, CVE-2013-2550, CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2724, CVE-2013-2725, CVE-2013-2726, CVE-2013-2727, CVE-2013-2729, CVE-2013-2730, CVE-2013-2731, CVE-2013-2732, CVE-2013-2733, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-2737, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, CVE-2013-3341, CVE-2013-3342) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2013-437 - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2013-437 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3:NonFree (noarch): acroread-cmaps-9.4.1-4.1 acroread-fonts-ja-9.4.1-4.1 acroread-fonts-ko-9.4.1-4.1 acroread-fonts-zh_CN-9.4.1-4.1 acroread-fonts-zh_TW-9.4.1-4.1 - openSUSE 12.3:NonFree (i586): acroread-9.5.5-4.1 acroread-browser-plugin-9.5.5-4.1 - openSUSE 12.2:NonFree (noarch): acroread-cmaps-9.4.1-3.12.1 acroread-fonts-ja-9.4.1-3.12.1 acroread-fonts-ko-9.4.1-3.12.1 acroread-fonts-zh_CN-9.4.1-3.12.1 acroread-fonts-zh_TW-9.4.1-3.12.1 - openSUSE 12.2:NonFree (i586): acroread-9.5.5-3.12.1 acroread-browser-plugin-9.5.5-3.12.1 References: http://support.novell.com/security/cve/CVE-2013-2549.html http://support.novell.com/security/cve/CVE-2013-2550.html http://support.novell.com/security/cve/CVE-2013-2718.html http://support.novell.com/security/cve/CVE-2013-2719.html http://support.novell.com/security/cve/CVE-2013-2720.html http://support.novell.com/security/cve/CVE-2013-2721.html http://support.novell.com/security/cve/CVE-2013-2722.html http://support.novell.com/security/cve/CVE-2013-2723.html http://support.novell.com/security/cve/CVE-2013-2724.html http://support.novell.com/security/cve/CVE-2013-2725.html http://support.novell.com/security/cve/CVE-2013-2726.html http://support.novell.com/security/cve/CVE-2013-2727.html http://support.novell.com/security/cve/CVE-2013-2729.html http://support.novell.com/security/cve/CVE-2013-2730.html http://support.novell.com/security/cve/CVE-2013-2731.html http://support.novell.com/security/cve/CVE-2013-2732.html http://support.novell.com/security/cve/CVE-2013-2733.html http://support.novell.com/security/cve/CVE-2013-2734.html http://support.novell.com/security/cve/CVE-2013-2735.html http://support.novell.com/security/cve/CVE-2013-2736.html http://support.novell.com/security/cve/CVE-2013-2737.html http://support.novell.com/security/cve/CVE-2013-3337.html http://support.novell.com/security/cve/CVE-2013-3338.html http://support.novell.com/security/cve/CVE-2013-3339.html http://support.novell.com/security/cve/CVE-2013-3340.html http://support.novell.com/security/cve/CVE-2013-3341.html http://support.novell.com/security/cve/CVE-2013-3342.html https://bugzilla.novell.com/819918

1 0

openSUSE-RU-2013:0989-1: cvsps: Downgrade to 2.1.
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: cvsps: Downgrade to 2.1. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0989-1 Rating: low References: #809800 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update downgrades cvsps 3.8 to 2.1 after 3.x doesn't work with git cvsimport. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-433 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): cvsps-2005.2.1-2.9.1 cvsps-debuginfo-2005.2.1-2.9.1 cvsps-debugsource-2005.2.1-2.9.1 References: https://bugzilla.novell.com/809800

1 0

openSUSE-RU-2013:0988-1: lxc: Ensure umask is called before creating device nodes
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: lxc: Ensure umask is called before creating device nodes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0988-1 Rating: low References: #816456 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with lxc: - bnc#816456: Ensure umask is called before creating device nodes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-459 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): lxc-0.8.0-3.13.1 lxc-debuginfo-0.8.0-3.13.1 lxc-debugsource-0.8.0-3.13.1 lxc-devel-0.8.0-3.13.1 References: https://bugzilla.novell.com/816456

1 0

openSUSE-RU-2013:0987-1: autoyast2: Several bugfixes
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: autoyast2: Several bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0987-1 Rating: low References: #565557 #803577 #811688 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update fixes the following issues for autoyast: - bnc#811688: prevent execution of init-scripts before they are fetched - bnc#565557: recognize mounted device also when by-id names are used in /proc/mounts - bnc#803577: prevent kill of autoyast-initscripts.service by systemd Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-362 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): autoyast2-2.23.6-1.4.1 autoyast2-installation-2.23.6-1.4.1 References: https://bugzilla.novell.com/565557 https://bugzilla.novell.com/803577 https://bugzilla.novell.com/811688

1 0

openSUSE-RU-2013:0986-1: moderate: yast2-country, yast2-installation: fixed issue with encoding if nothing is configured
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: yast2-country, yast2-installation: fixed issue with encoding if nothing is configured ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0986-1 Rating: moderate References: #815265 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with yast2-country and yast2-installation: - yast2-country: + bnc#815265: do not use non-UTF encoding fallback when nothing is configured - yast2-installation: + bnc#815265: if RC_LANG is not set, use en_US as default in startup-scripts Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-442 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): yast2-country-2.23.2-1.4.1 yast2-country-data-2.23.2-1.4.1 - openSUSE 12.3 (noarch): yast2-installation-2.23.15-1.12.2 yast2-installation-devel-doc-2.23.15-1.12.2 References: https://bugzilla.novell.com/815265

1 0

openSUSE-SU-2013:0985-1: moderate: update for strongswan
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0985-1 Rating: moderate References: #815236 Cross-References: CVE-2013-2944 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Applied upstream patch for security vulnerability discovered by Kevin Wojtysiak in ECDSA signature verification of the strongswan openssl plugin. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-77 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): strongswan-4.5.0-6.52.1 strongswan-debugsource-4.5.0-6.52.1 strongswan-doc-4.5.0-6.52.1 strongswan-ikev1-4.5.0-6.52.1 strongswan-ikev1-debuginfo-4.5.0-6.52.1 strongswan-ikev2-4.5.0-6.52.1 strongswan-ikev2-debuginfo-4.5.0-6.52.1 strongswan-ipsec-4.5.0-6.52.1 strongswan-ipsec-debuginfo-4.5.0-6.52.1 strongswan-libs0-4.5.0-6.52.1 strongswan-libs0-debuginfo-4.5.0-6.52.1 strongswan-mysql-4.5.0-6.52.1 strongswan-mysql-debuginfo-4.5.0-6.52.1 strongswan-nm-4.5.0-6.52.1 strongswan-nm-debuginfo-4.5.0-6.52.1 strongswan-sqlite-4.5.0-6.52.1 strongswan-sqlite-debuginfo-4.5.0-6.52.1 References: http://support.novell.com/security/cve/CVE-2013-2944.html https://bugzilla.novell.com/815236

1 0

openSUSE-RU-2013:0984-1: mysql-workbench: Fix paramiko version check
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: mysql-workbench: Fix paramiko version check ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0984-1 Rating: low References: #809460 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with mysql-workbench: - bnc#809460: Fix paramiko version check Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-392 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (x86_64): mysql-workbench-5.2.44-2.4.1 mysql-workbench-debuginfo-5.2.44-2.4.1 mysql-workbench-debugsource-5.2.44-2.4.1 - openSUSE 12.3 (i586): mysql-workbench-5.2.44-2.4.2 mysql-workbench-debuginfo-5.2.44-2.4.2 mysql-workbench-debugsource-5.2.44-2.4.2 References: https://bugzilla.novell.com/809460

1 0