July 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:1171-1: moderate: fuse: bugfix update to 2.9.2
by maintenance＠opensuse.org 10 Jul '13

10 Jul '13

openSUSE Recommended Update: fuse: bugfix update to 2.9.2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1171-1 Rating: moderate References: #827314 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: fuse was updated to 2.9.2 : - Fix deadlock on "svn update" - Fix "fuse internal error: node NNN not found" - Fix crash on free() [bnc#827314] - Add support for fallocate() Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-568 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): fuse-2.9.2-7.4.1 fuse-debuginfo-2.9.2-7.4.1 fuse-debugsource-2.9.2-7.4.1 fuse-devel-2.9.2-7.4.1 fuse-devel-static-2.9.2-7.4.1 libfuse2-2.9.2-7.4.1 libfuse2-debuginfo-2.9.2-7.4.1 libulockmgr1-2.9.2-7.4.1 libulockmgr1-debuginfo-2.9.2-7.4.1 - openSUSE 12.3 (x86_64): libfuse2-32bit-2.9.2-7.4.1 libfuse2-debuginfo-32bit-2.9.2-7.4.1 References: https://bugzilla.novell.com/827314

1 0

openSUSE-RU-2013:1170-1: moderate: ocfs2-tools: bugfix update
by maintenance＠opensuse.org 10 Jul '13

10 Jul '13

openSUSE Recommended Update: ocfs2-tools: bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1170-1 Rating: moderate References: #822190 #827504 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: ocfs2-tools received several bugfixes: - restore-g_list_append.patch: Fix o2cb issues with node listings (bnc#822190) - bug-805764-ocfs2-controld.patch: Fix the race between udev making misc device node and ocfs2 opening that device. - bnc804707-reduce-RR-priority.patch: reduce ocfs2_controld priority to RR. - ocfs2console-libraries-include-aio.patch: Compile ocfs2console with aio (bnc#827504) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-571 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): ocfs2-tools-1.8.2-4.8.1 ocfs2-tools-debuginfo-1.8.2-4.8.1 ocfs2-tools-debugsource-1.8.2-4.8.1 ocfs2-tools-devel-1.8.2-4.8.1 ocfs2-tools-o2cb-1.8.2-4.8.1 ocfs2-tools-o2cb-debuginfo-1.8.2-4.8.1 ocfs2console-1.8.2-4.8.1 ocfs2console-debuginfo-1.8.2-4.8.1 References: https://bugzilla.novell.com/822190 https://bugzilla.novell.com/827504

1 0

openSUSE-RU-2013:1169-1: moderate: libyui-ncurses: bugfixes for YaST2 ncurses mode
by maintenance＠opensuse.org 10 Jul '13

10 Jul '13

openSUSE Recommended Update: libyui-ncurses: bugfixes for YaST2 ncurses mode ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1169-1 Rating: moderate References: #805407 #822962 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The ncurses UI was fixed to handle a authentication problem in iscsi-client (bnc#805407) Also show and handle multiple versions of packages correctly (bnc#822962) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-569 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libyui-ncurses-debugsource-2.43.3.1-1.5.1 libyui-ncurses-devel-2.43.3.1-1.5.1 libyui-ncurses-pkg-debugsource-2.43.4.1-1.5.1 libyui-ncurses-pkg-devel-2.43.4.1-1.5.1 libyui-ncurses-pkg4-2.43.4.1-1.5.1 libyui-ncurses-pkg4-debuginfo-2.43.4.1-1.5.1 libyui-ncurses4-2.43.3.1-1.5.1 libyui-ncurses4-debuginfo-2.43.3.1-1.5.1 - openSUSE 12.3 (noarch): libyui-ncurses-doc-2.43.3.1-1.5.1 libyui-ncurses-pkg-doc-2.43.4.1-1.5.1 References: https://bugzilla.novell.com/805407 https://bugzilla.novell.com/822962

1 0

openSUSE-SU-2013:1168-1: moderate: libkdcraw: security fix for potential crash
by opensuse-security＠opensuse.org 10 Jul '13

10 Jul '13

openSUSE Security Update: libkdcraw: security fix for potential crash ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1168-1 Rating: moderate References: #823113 Cross-References: CVE-2013-2126 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: libkdcraw was updated to fix a possible double-free() on error recovery on damaged full-color (Foveon, sRAW) files. (CVE-2013-2126) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-567 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libkdcraw-debugsource-4.8.5-2.8.1 libkdcraw-devel-4.8.5-2.8.1 libkdcraw20-4.8.5-2.8.1 libkdcraw20-debuginfo-4.8.5-2.8.1 References: http://support.novell.com/security/cve/CVE-2013-2126.html https://bugzilla.novell.com/823113

1 0

openSUSE-SU-2013:1160-1: moderate: update for nagios
by opensuse-security＠opensuse.org 08 Jul '13

08 Jul '13

openSUSE Security Update: update for nagios ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1160-1 Rating: moderate References: #827020 Cross-References: CVE-2013-2214 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This nagios update fixes a authorization problem inside host/service views. - added nagios-CVE-2013-2214.patch fixing unauthorized host/service views displayed in servicegroup view (bnc#827020) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-104 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): nagios-3.2.3-3.26.1 nagios-debuginfo-3.2.3-3.26.1 nagios-debugsource-3.2.3-3.26.1 nagios-devel-3.2.3-3.26.1 nagios-www-3.2.3-3.26.1 References: http://support.novell.com/security/cve/CVE-2013-2214.html https://bugzilla.novell.com/827020

1 0

openSUSE-RU-2013:1159-1: moderate: yast2-ldap-server: fixed initialization error
by maintenance＠opensuse.org 08 Jul '13

08 Jul '13

openSUSE Recommended Update: yast2-ldap-server: fixed initialization error ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1159-1 Rating: moderate References: #533243 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: YaST LDAP Server was fixed to not allow disabling the ldapi listener, to avoid initialization erros. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-566 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): yast2-ldap-server-2.22.2-4.4.1 yast2-ldap-server-debuginfo-2.22.2-4.4.1 yast2-ldap-server-debugsource-2.22.2-4.4.1 References: https://bugzilla.novell.com/533243

1 0

openSUSE-SU-2013:1158-1: moderate: update for nagios
by opensuse-security＠opensuse.org 08 Jul '13

08 Jul '13

openSUSE Security Update: update for nagios ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1158-1 Rating: moderate References: #827020 Cross-References: CVE-2013-2214 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This nagios update fixes a authorization problem inside host/service views. - added nagios-CVE-2013-2214.patch fixing unauthorized host/service views displayed in servicegroup view (bnc#827020) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-563 - openSUSE 12.2: zypper in -t patch openSUSE-2013-563 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): nagios-3.5.0-2.10.1 nagios-debuginfo-3.5.0-2.10.1 nagios-debugsource-3.5.0-2.10.1 nagios-devel-3.5.0-2.10.1 nagios-www-3.5.0-2.10.1 nagios-www-dch-3.5.0-2.10.1 nagios-www-debuginfo-3.5.0-2.10.1 - openSUSE 12.2 (i586 x86_64): nagios-3.5.0-2.19.1 nagios-debuginfo-3.5.0-2.19.1 nagios-debugsource-3.5.0-2.19.1 nagios-devel-3.5.0-2.19.1 nagios-www-3.5.0-2.19.1 nagios-www-dch-3.5.0-2.19.1 nagios-www-debuginfo-3.5.0-2.19.1 References: http://support.novell.com/security/cve/CVE-2013-2214.html https://bugzilla.novell.com/827020

1 0

openSUSE-RU-2013:1157-1: Delete dangling symlink /usr/bin/seaudit
by maintenance＠opensuse.org 08 Jul '13

08 Jul '13

openSUSE Recommended Update: Delete dangling symlink /usr/bin/seaudit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1157-1 Rating: low References: #812285 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: No description available. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-565 - openSUSE 12.2: zypper in -t patch openSUSE-2013-565 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): python-setools-3.3.7-3.4.1 python-setools-debuginfo-3.3.7-3.4.1 setools-console-3.3.7-3.4.1 setools-console-debuginfo-3.3.7-3.4.1 setools-debugsource-3.3.7-3.4.1 setools-devel-3.3.7-3.4.1 setools-gui-3.3.7-3.4.1 setools-gui-debuginfo-3.3.7-3.4.1 setools-java-3.3.7-3.4.1 setools-java-debuginfo-3.3.7-3.4.1 setools-libs-3.3.7-3.4.1 setools-libs-debuginfo-3.3.7-3.4.1 setools-tcl-3.3.7-3.4.1 setools-tcl-debuginfo-3.3.7-3.4.1 - openSUSE 12.2 (i586 x86_64): python-setools-3.3.6-16.5.1 python-setools-debuginfo-3.3.6-16.5.1 setools-console-3.3.6-16.5.1 setools-console-debuginfo-3.3.6-16.5.1 setools-debugsource-3.3.6-16.5.1 setools-devel-3.3.6-16.5.1 setools-gui-3.3.6-16.5.1 setools-gui-debuginfo-3.3.6-16.5.1 setools-java-3.3.6-16.5.1 setools-java-debuginfo-3.3.6-16.5.1 setools-libs-3.3.6-16.5.1 setools-libs-debuginfo-3.3.6-16.5.1 setools-tcl-3.3.6-16.5.1 setools-tcl-debuginfo-3.3.6-16.5.1 References: https://bugzilla.novell.com/812285

1 0

openSUSE-RU-2013:1156-1: moderate: expat: fixed visibility of XML exports
by maintenance＠opensuse.org 08 Jul '13

08 Jul '13

openSUSE Recommended Update: expat: fixed visibility of XML exports ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1156-1 Rating: moderate References: #798644 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: expat was fixed in regards to XML symbol visibility to fix crashes in font-config. - according to upstream changelog: - Improved ability to build without the configure-generated expat_config.h header. This is useful for applications which embed Expat rather than linking in the library. because I am not exactly sure about implication of this, rather use -DXML_HAVE_VISIBILITY in CFLAG_VISIBILITY in expat-visibility.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-564 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): expat-2.1.0-2.4.1 expat-debuginfo-2.1.0-2.4.1 expat-debugsource-2.1.0-2.4.1 libexpat-devel-2.1.0-2.4.1 libexpat1-2.1.0-2.4.1 libexpat1-debuginfo-2.1.0-2.4.1 - openSUSE 12.2 (x86_64): expat-debuginfo-32bit-2.1.0-2.4.1 libexpat-devel-32bit-2.1.0-2.4.1 libexpat1-32bit-2.1.0-2.4.1 libexpat1-debuginfo-32bit-2.1.0-2.4.1 References: https://bugzilla.novell.com/798644

1 0

openSUSE-SU-2013:1155-1: moderate: update for python-bugzilla
by opensuse-security＠opensuse.org 06 Jul '13

06 Jul '13

openSUSE Security Update: update for python-bugzilla ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1155-1 Rating: moderate References: #825876 Cross-References: CVE-2013-2191 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This python-bugzilla update fixes a SSL verification issue. - CVE-2013-2191 (bnc#825876) - validate SSL certificates and hostnames Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-103 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): python-bugzilla-0.6.2-13.1 References: http://support.novell.com/security/cve/CVE-2013-2191.html https://bugzilla.novell.com/825876

1 0