August 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:1298-1: kernel-firmware: Update to git snapshot 2013/7/14
by maintenance＠opensuse.org 05 Aug '13

05 Aug '13

openSUSE Recommended Update: kernel-firmware: Update to git snapshot 2013/7/14 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1298-1 Rating: low References: #831798 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with kernel-firmware: - Updated to git snapshot 2013/7/14: + bnc#831798: Radeon ucode update: * radeon: add ucode for KABINI GPUs * radeon: add ucode for BONAIRE GPUs * radeon: add smc ucode for radeon GPUs + Add Intel Bluetooth firmware patch files + Add firmware files for Creative CA0132 HD-audio codec + Add firmware files for mtk mt7630/mt7650 chipsets + Add firmware for mwl8k 8764 chip + Add go7007 firmware. + Add symlinks for old go7007 firmware filenames + Fix formatting of LICENCE.ca0132 + Increment ap firmware API for mwl8k 8366 chip + Move sd8688*.bin images into mrvl/ tree + Revert "carl9170: Add checksum during installation, as preferred by the driver" + add Marvell PCIe8897-B0 WLAN firmware image + add Marvell SD8797-B0 firmware image + ar3k: add Bluetooth support for QCA98XX/QCA24XX + bnx2x: update fw to 7.8.17 + cx231xx/cx23885: Remove incorrect Conexant CX23885 firmware + iwlwifi: add firmware for 7260 / 3160 devices + netxen_nic: Add FTP location of phanfw.bin in WHENCE file + netxen_nic: Update QLogic phanfw.bin to version 4.0.590 + radeon: add ucode for OLAND GPUs + radeon: add ucode for SUN/HAINAN GPUs + radeon: add updated ucode for UVD + rp2: Initial commit of Comtrol RocketPort 2 microcode + rtl_nic: Add firmware rtl8168g-3 + rtl_nic: add firmware rtl8106e-2 + rtl_nic: add firmware rtl8411-2 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-631 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): kernel-firmware-20130714git-1.5.1 References: https://bugzilla.novell.com/831798

1 0

openSUSE-RU-2013:1297-1: perl-Net-HTTP: fix Net::HTTP chunk handling broken for non-blocking sockets
by maintenance＠opensuse.org 05 Aug '13

05 Aug '13

openSUSE Recommended Update: perl-Net-HTTP: fix Net::HTTP chunk handling broken for non-blocking sockets ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1297-1 Rating: low References: #828426 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with perl-Net-HTTP: - bnc#828426: fix Net::HTTP chunk handling broken for non-blocking sockets Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-630 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): perl-Net-HTTP-6.03-4.4.1 References: https://bugzilla.novell.com/828426

1 0

openSUSE-RU-2013:1296-1: logrotate: Call prerotate/postrotate script only for really rotated files in nosharedscripts mode
by maintenance＠opensuse.org 05 Aug '13

05 Aug '13

openSUSE Recommended Update: logrotate: Call prerotate/postrotate script only for really rotated files in nosharedscripts mode ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1296-1 Rating: low References: #831057 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with logrotate: - bnc#831057: Call prerotate/postrotate script only for really rotated files in nosharedscripts mode Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-629 - openSUSE 12.2: zypper in -t patch openSUSE-2013-629 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): logrotate-3.8.1-20.4.1 logrotate-debuginfo-3.8.1-20.4.1 logrotate-debugsource-3.8.1-20.4.1 - openSUSE 12.2 (i586 x86_64): logrotate-3.8.1-18.4.1 logrotate-debuginfo-3.8.1-18.4.1 logrotate-debugsource-3.8.1-18.4.1 References: https://bugzilla.novell.com/831057

1 0

openSUSE-SU-2013:1295-1: moderate: wireshark to 1.8.9
by opensuse-security＠opensuse.org 05 Aug '13

05 Aug '13

openSUSE Security Update: wireshark to 1.8.9 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1295-1 Rating: moderate References: #831718 Cross-References: CVE-2013-4927 CVE-2013-4929 CVE-2013-4930 CVE-2013-4931 CVE-2013-4932 CVE-2013-4933 CVE-2013-4934 CVE-2013-4935 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: Wireshark was updated to 1.8.9 [bnc#831718] + vulnerabilities fixed: * The Bluetooth SDP dissector could go into a large loop CVE-2013-4927 wnpa-sec-2013-45 * The DIS dissector could go into a large loop CVE-2013-4929 wnpa-sec-2013-47 * The DVB-CI dissector could crash CVE-2013-4930 wnpa-sec-2013-48 * The GSM RR dissector (and possibly others) could go into a large loop CVE-2013-4931 wnpa-sec-2013-49 * The GSM A Common dissector could crash CVE-2013-4932 wnpa-sec-2013-50 * The Netmon file parser could crash CVE-2013-4933 CVE-2013-4934 wnpa-sec-2013-51 * The ASN.1 PER dissector could crash CVE-2013-4935 wnpa-sec-2013-52 + Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.8.9.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-626 - openSUSE 12.2: zypper in -t patch openSUSE-2013-626 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): wireshark-1.8.9-1.16.1 wireshark-debuginfo-1.8.9-1.16.1 wireshark-debugsource-1.8.9-1.16.1 wireshark-devel-1.8.9-1.16.1 - openSUSE 12.2 (i586 x86_64): wireshark-1.8.9-1.35.1 wireshark-debuginfo-1.8.9-1.35.1 wireshark-debugsource-1.8.9-1.35.1 wireshark-devel-1.8.9-1.35.1 References: http://support.novell.com/security/cve/CVE-2013-4927.html http://support.novell.com/security/cve/CVE-2013-4929.html http://support.novell.com/security/cve/CVE-2013-4930.html http://support.novell.com/security/cve/CVE-2013-4931.html http://support.novell.com/security/cve/CVE-2013-4932.html http://support.novell.com/security/cve/CVE-2013-4933.html http://support.novell.com/security/cve/CVE-2013-4934.html http://support.novell.com/security/cve/CVE-2013-4935.html https://bugzilla.novell.com/831718

1 0

openSUSE-SU-2013:1294-1: moderate: libgcrypt: update to 1.5.3
by opensuse-security＠opensuse.org 05 Aug '13

05 Aug '13

openSUSE Security Update: libgcrypt: update to 1.5.3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1294-1 Rating: moderate References: #810759 #831359 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: libgcrypt was updated to 1.5.3 [bnc#831359] to fix a security issue, bugs and get some new features: Security issue fixed: * Mitigate the Yarom/Falkner flush+reload side-channel attack on RSA secret keys. See <http://eprint.iacr.org/2013/448>. - contains changes from 1.5.2 * The upstream sources now contain the IDEA algorithm, dropping: idea.c.gz libgcrypt-1.5.0-idea.patch libgcrypt-1.5.0-idea_codecleanup.patch * Made the Padlock code work again (regression since 1.5.0). * Fixed alignment problems for Serpent. * Fixed two bugs in ECC computations. - add GPL3.0+ to License tag because of dumpsexp (bnc#810759) - contains changes from 1.5.1 * Allow empty passphrase with PBKDF2. * Do not abort on an invalid algorithm number in gcry_cipher_get_algo_keylen and gcry_cipher_get_algo_blklen. * Fixed some Valgrind warnings. * Fixed a problem with select and high fd numbers. * Improved the build system * Various minor bug fixes. * Interface changes relative to the 1.5.0 release: GCRYCTL_SET_ENFORCED_FIPS_FLAG NEW. GCRYPT_VERSION_NUMBER NEW. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-627 - openSUSE 12.2: zypper in -t patch openSUSE-2013-627 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libgcrypt-debugsource-1.5.3-12.4.1 libgcrypt-devel-1.5.3-12.4.1 libgcrypt-devel-debuginfo-1.5.3-12.4.1 libgcrypt11-1.5.3-12.4.1 libgcrypt11-debuginfo-1.5.3-12.4.1 - openSUSE 12.3 (x86_64): libgcrypt-devel-32bit-1.5.3-12.4.1 libgcrypt-devel-debuginfo-32bit-1.5.3-12.4.1 libgcrypt11-32bit-1.5.3-12.4.1 libgcrypt11-debuginfo-32bit-1.5.3-12.4.1 - openSUSE 12.2 (i586 x86_64): libgcrypt-debugsource-1.5.3-9.5.1 libgcrypt-devel-1.5.3-9.5.1 libgcrypt-devel-debuginfo-1.5.3-9.5.1 libgcrypt11-1.5.3-9.5.1 libgcrypt11-debuginfo-1.5.3-9.5.1 - openSUSE 12.2 (x86_64): libgcrypt-devel-32bit-1.5.3-9.5.1 libgcrypt-devel-debuginfo-32bit-1.5.3-9.5.1 libgcrypt11-32bit-1.5.3-9.5.1 libgcrypt11-debuginfo-32bit-1.5.3-9.5.1 References: https://bugzilla.novell.com/810759 https://bugzilla.novell.com/831359

1 0

openSUSE-SU-2013:1291-1: moderate: kdebase4-workspace: security fixes for denial of service problems
by opensuse-security＠opensuse.org 02 Aug '13

02 Aug '13

openSUSE Security Update: kdebase4-workspace: security fixes for denial of service problems ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1291-1 Rating: moderate References: #817932 #829857 Cross-References: CVE-2013-4132 CVE-2013-4133 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: kdebase4-workspace received fixes for: - KDM: a potential crash in crypt() was fixed (bnc#829857, CVE-2013-4132) - Fixes plasma systemtray memory leak with legacy icons (kde#314919, bnc#817932, bnc#829857, CVE-2013-4133) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-625 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): kde4-kgreeter-plugins-4.8.5-2.18.1 kde4-kgreeter-plugins-debuginfo-4.8.5-2.18.1 kdebase4-workspace-4.8.5-2.18.1 kdebase4-workspace-branding-upstream-4.8.5-2.18.1 kdebase4-workspace-debuginfo-4.8.5-2.18.1 kdebase4-workspace-debugsource-4.8.5-2.18.1 kdebase4-workspace-devel-4.8.5-2.18.1 kdebase4-workspace-devel-debuginfo-4.8.5-2.18.1 kdebase4-workspace-ksysguardd-4.8.5-2.18.1 kdebase4-workspace-ksysguardd-debuginfo-4.8.5-2.18.1 kdebase4-workspace-liboxygenstyle-4.8.5-2.18.1 kdebase4-workspace-liboxygenstyle-debuginfo-4.8.5-2.18.1 kdebase4-workspace-plasma-calendar-4.8.5-2.18.1 kdebase4-workspace-plasma-calendar-debuginfo-4.8.5-2.18.1 kdebase4-workspace-plasma-engine-akonadi-4.8.5-2.18.1 kdebase4-workspace-plasma-engine-akonadi-debuginfo-4.8.5-2.18.1 kdm-4.8.5-2.18.1 kdm-branding-upstream-4.8.5-2.18.1 kdm-debuginfo-4.8.5-2.18.1 kwin-4.8.5-2.18.1 kwin-debuginfo-4.8.5-2.18.1 python-kdebase4-4.8.5-2.18.1 - openSUSE 12.2 (x86_64): kdebase4-workspace-liboxygenstyle-32bit-4.8.5-2.18.1 kdebase4-workspace-liboxygenstyle-debuginfo-32bit-4.8.5-2.18.1 References: http://support.novell.com/security/cve/CVE-2013-4132.html http://support.novell.com/security/cve/CVE-2013-4133.html https://bugzilla.novell.com/817932 https://bugzilla.novell.com/829857

1 0

openSUSE-SU-2013:1288-1: moderate: java-1_7_0-openjdk to IcedTea 2.4.1
by opensuse-security＠opensuse.org 01 Aug '13

01 Aug '13

openSUSE Security Update: java-1_7_0-openjdk to IcedTea 2.4.1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1288-1 Rating: moderate References: #781690 #828665 Cross-References: CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2449 CVE-2013-2450 CVE-2013-2451 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2458 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes 30 vulnerabilities is now available. Description: java-1_7_0-openjdk was updated to icedtea-2.4.1 (bnc#828665) * Security fixes - S6741606, CVE-2013-2407: Integrate Apache Santuario - S7158805, CVE-2013-2445: Better rewriting of nested subroutine calls - S7170730, CVE-2013-2451: Improve Windows network stack support. - S8000638, CVE-2013-2450: Improve deserialization - S8000642, CVE-2013-2446: Better handling of objects for transportation - S8001032: Restrict object access - S8001033, CVE-2013-2452: Refactor network address handling in virtual machine identifiers - S8001034, CVE-2013-1500: Memory management improvements - S8001038, CVE-2013-2444: Resourcefully handle resources - S8001043: Clarify definition restrictions - S8001308: Update display of applet windows - S8001309: Better handling of annotation interfaces - S8001318, CVE-2013-2447: Socket.getLocalAddress not consistent with InetAddress.getLocalHost - S8001330, CVE-2013-2443: Improve on checking order (non-Zero builds only) - S8003703, CVE-2013-2412: Update RMI connection dialog box - S8004288, CVE-2013-2449: (fs) Files.probeContentType problems - S8004584: Augment applet contextualization - S8005007: Better glyph processing - S8006328, CVE-2013-2448: Improve robustness of sound classes - S8006611: Improve scripting - S8007467: Improve robustness of JMX internal APIs - S8007471: Improve MBean notifications - S8007812, CVE-2013-2455: (reflect) Class.getEnclosingMethod problematic for some classes - S8007925: Improve cmsStageAllocLabV2ToV4curves - S8007926: Improve cmsPipelineDup - S8007927: Improve cmsAllocProfileSequenceDescription - S8007929: Improve CurvesAlloc - S8008120, CVE-2013-2457: Improve JMX class checking - S8008124, CVE-2013-2453: Better compliance testing - S8008128: Better API coherence for JMX - S8008132, CVE-2013-2456: Better serialization support - S8008585: Better JMX data handling - S8008593: Better URLClassLoader resource management - S8008603: Improve provision of JMX providers - S8008607: Better input checking in JMX - S8008611: Better handling of annotations in JMX - S8008615: Improve robustness of JMX internal APIs - S8008623: Better handling of MBeanServers - S8008744, CVE-2013-2407: Rework part of fix for JDK-6741606 - S8008982: Adjust JMX for underlying interface changes - S8009004: Better implementation of RMI connections - S8009008: Better manage management-api - S8009013: Better handling of T2K glyphs - S8009034: Improve resulting notifications in JMX - S8009038: Improve JMX notification support - S8009057, CVE-2013-2448: Improve MIDI event handling - S8009067: Improve storing keys in KeyStore - S8009071, CVE-2013-2459: Improve shape handling - S8009235: Improve handling of TSA data - S8009424, CVE-2013-2458: Adapt Nashorn to JSR-292 implementation change - S8009554, CVE-2013-2454: Improve SerialJavaObject.getFields - S8009654: Improve stability of cmsnamed - S8010209, CVE-2013-2460: Better provision of factories - S8011243, CVE-2013-2470: Improve ImagingLib - S8011248, CVE-2013-2471: Better Component Rasters - S8011253, CVE-2013-2472: Better Short Component Rasters - S8011257, CVE-2013-2473: Better Byte Component Rasters - S8012375, CVE-2013-1571: Improve Javadoc framing - S8012421: Better positioning of PairPositioning - S8012438, CVE-2013-2463: Better image validation - S8012597, CVE-2013-2465: Better image channel verification - S8012601, CVE-2013-2469: Better validation of image layouts - S8014281, CVE-2013-2461: Better checking of XML signature - S8015997: Additional improvement in Javadoc framing * OpenJDK - list to long, please consult NEWS file - java-1.7.0-openjdk-zero-arch.patch: fix detection of zero arch - ignore rhino dependencies during a build to prevent a build cycle - update to icedtea-2.4.0 (based on oracle jdk7u40) * OpenJDK (see NEWS for full listing) - PR1209, S7170638: Use DTRACE_PROBE[N] in JNI Set and SetStatic Field. - PR1206, S7201205: Add Makefile configuration option to build with unlimited crypto in OpenJDK * Backports - PR1197, S8003120, RH868136: ResourceManager.getApplicationResources() does not close InputStreams - S8014618, RH962568: Need to strip leading zeros in TlsPremasterSecret of DHKeyAgreement * Bug fixes - PR1212: IcedTea7 fails to build because Resources.getText() is no longer available for code to use - Add NSS (commented out) to other platforms. - Allow multiple PKCS11 library initialisation to be a non-critical error. - Complete switch from local zlib patch to upstream version. - Include defs.make in buildtree.make so ZERO_BUILD is recognised and JVM_VARIANT_ZERO set. - Provide support for using PKCS11 provider with NSS - Remove file apparently removed as part of upstreaming of Zero. - Revert 7060849 - Set UNLIMITED_CRYPTO=true to ensure we use the unlimited policy. - PR473: Set handleStartupErrors to ignoreMultipleInitialisation in nss.cfg - PR716: IcedTea7 should bootstrap with IcedTea6 - Expand java.security.cert.* imports to avoid conflict when building with OpenJDK 6. - Fix indentation on Makefile block not executed when STRIP_POLICY=no_strip is set - Fix invalid XSL stylesheets and DTD introduced as part of JEP 167. - Include defs.make in buildtree.make so ZERO_BUILD is recognised and JVM_VARIANT_ZERO set. - Make sure libffi cflags and libs are used. - PR1378: Add AArch64 support to Zero - PR1170: Ensure unlimited crypto policy is in place. - RH513605, PR1280: Updating/Installing OpenJDK should recreate the shared class-data archive - PR1358: Make XRender mandatory - PR1360: Check for /usr/lib64 JVMs and generic JPackage alternative - PR1435, D657854: OpenJDK 7 returns incorrect TrueType font metrics - PR728: GTKLookAndFeel does not honor gtk-alternative-button-order * JamVM - JSR 335: (lambda expressions) initial hack - JEP 171: Implement fence methods in sun.misc.Unsafe - Fix invokesuper check in invokespecial opcode - Fix non-direct interpreter invokespecial super-class check - When GC'ing a native method don't try to free code - Do not free unprepared Miranda method code data - Set anonymous class protection domain - JVM_IsVMGeneratedMethodIx stub - Dummy implementation of sun.misc.Perf natives - separate vm for zero is no longer needed - drop java-1.7.0-openjdk-aarch64.patch (upstream: PR1378) - fix bnc#781690c#11 - setup JAVA_HOME in posttrans, so certificates will be created by this JVM - fix the postrans conditions (add missing prefiX) - relax build requires, so every java-devel >= 1.7.0 can match Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-622 - openSUSE 12.2: zypper in -t patch openSUSE-2013-622 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): java-1_7_0-openjdk-1.7.0.6-8.18.1 java-1_7_0-openjdk-debuginfo-1.7.0.6-8.18.1 java-1_7_0-openjdk-debugsource-1.7.0.6-8.18.1 java-1_7_0-openjdk-demo-1.7.0.6-8.18.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.6-8.18.1 java-1_7_0-openjdk-devel-1.7.0.6-8.18.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.6-8.18.1 java-1_7_0-openjdk-javadoc-1.7.0.6-8.18.1 java-1_7_0-openjdk-src-1.7.0.6-8.18.1 - openSUSE 12.2 (i586 x86_64): java-1_7_0-openjdk-1.7.0.6-3.41.1 java-1_7_0-openjdk-debuginfo-1.7.0.6-3.41.1 java-1_7_0-openjdk-debugsource-1.7.0.6-3.41.1 java-1_7_0-openjdk-demo-1.7.0.6-3.41.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.6-3.41.1 java-1_7_0-openjdk-devel-1.7.0.6-3.41.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.6-3.41.1 java-1_7_0-openjdk-javadoc-1.7.0.6-3.41.1 java-1_7_0-openjdk-src-1.7.0.6-3.41.1 References: http://support.novell.com/security/cve/CVE-2013-1500.html http://support.novell.com/security/cve/CVE-2013-1571.html http://support.novell.com/security/cve/CVE-2013-2407.html http://support.novell.com/security/cve/CVE-2013-2412.html http://support.novell.com/security/cve/CVE-2013-2443.html http://support.novell.com/security/cve/CVE-2013-2444.html http://support.novell.com/security/cve/CVE-2013-2445.html http://support.novell.com/security/cve/CVE-2013-2446.html http://support.novell.com/security/cve/CVE-2013-2447.html http://support.novell.com/security/cve/CVE-2013-2448.html http://support.novell.com/security/cve/CVE-2013-2449.html http://support.novell.com/security/cve/CVE-2013-2450.html http://support.novell.com/security/cve/CVE-2013-2451.html http://support.novell.com/security/cve/CVE-2013-2452.html http://support.novell.com/security/cve/CVE-2013-2453.html http://support.novell.com/security/cve/CVE-2013-2454.html http://support.novell.com/security/cve/CVE-2013-2455.html http://support.novell.com/security/cve/CVE-2013-2456.html http://support.novell.com/security/cve/CVE-2013-2457.html http://support.novell.com/security/cve/CVE-2013-2458.html http://support.novell.com/security/cve/CVE-2013-2459.html http://support.novell.com/security/cve/CVE-2013-2460.html http://support.novell.com/security/cve/CVE-2013-2461.html http://support.novell.com/security/cve/CVE-2013-2463.html http://support.novell.com/security/cve/CVE-2013-2465.html http://support.novell.com/security/cve/CVE-2013-2469.html http://support.novell.com/security/cve/CVE-2013-2470.html http://support.novell.com/security/cve/CVE-2013-2471.html http://support.novell.com/security/cve/CVE-2013-2472.html http://support.novell.com/security/cve/CVE-2013-2473.html https://bugzilla.novell.com/781690 https://bugzilla.novell.com/828665

1 0

openSUSE-SU-2013:1286-1: moderate: subversion: update to 1.7.11
by opensuse-security＠opensuse.org 01 Aug '13

01 Aug '13

openSUSE Security Update: subversion: update to 1.7.11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1286-1 Rating: moderate References: #830031 Cross-References: CVE-2013-4131 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Subversion was updated to 1.7.11 [bnc#830031] to fix bugs and security issues. * translation updates for Simplified Chinese * mod_dav_svn: fix incorrect path canonicalization (CVE-2013-4131) * javahl bindings: fix bug in error constructing code Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-621 - openSUSE 12.2: zypper in -t patch openSUSE-2013-621 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.7.11-2.12.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.7.11-2.12.1 libsvn_auth_kwallet-1-0-1.7.11-2.12.1 libsvn_auth_kwallet-1-0-debuginfo-1.7.11-2.12.1 subversion-1.7.11-2.12.1 subversion-debuginfo-1.7.11-2.12.1 subversion-debugsource-1.7.11-2.12.1 subversion-devel-1.7.11-2.12.1 subversion-perl-1.7.11-2.12.1 subversion-perl-debuginfo-1.7.11-2.12.1 subversion-python-1.7.11-2.12.1 subversion-python-debuginfo-1.7.11-2.12.1 subversion-server-1.7.11-2.12.1 subversion-server-debuginfo-1.7.11-2.12.1 subversion-tools-1.7.11-2.12.1 subversion-tools-debuginfo-1.7.11-2.12.1 - openSUSE 12.3 (noarch): subversion-bash-completion-1.7.11-2.12.1 - openSUSE 12.2 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.7.11-4.20.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.7.11-4.20.1 libsvn_auth_kwallet-1-0-1.7.11-4.20.1 libsvn_auth_kwallet-1-0-debuginfo-1.7.11-4.20.1 subversion-1.7.11-4.20.1 subversion-debuginfo-1.7.11-4.20.1 subversion-debugsource-1.7.11-4.20.1 subversion-devel-1.7.11-4.20.1 subversion-perl-1.7.11-4.20.1 subversion-perl-debuginfo-1.7.11-4.20.1 subversion-python-1.7.11-4.20.1 subversion-python-debuginfo-1.7.11-4.20.1 subversion-server-1.7.11-4.20.1 subversion-server-debuginfo-1.7.11-4.20.1 subversion-tools-1.7.11-4.20.1 subversion-tools-debuginfo-1.7.11-4.20.1 - openSUSE 12.2 (noarch): subversion-bash-completion-1.7.11-4.20.1 References: http://support.novell.com/security/cve/CVE-2013-4131.html https://bugzilla.novell.com/830031

1 0