September 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:1501-1: mariadb: update to 5.5.33
by maintenance＠opensuse.org 30 Sep '13

30 Sep '13

openSUSE Recommended Update: mariadb: update to 5.5.33 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1501-1 Rating: low References: Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issue with mariadb: - updated to MariaDB 5.5.32 + see: * http://kb.askmonty.org/v/mariadb-5533-release-notes/ * http://kb.askmonty.org/v/mariadb-5533-changelog + TokuDB and jmalloc disabled as they are new features - fixed commenting out unsupported options - workaround to mark datadir version - do not relink libraries (fixes built issues for dependencies) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-726 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libmysqlclient-devel-5.5.33-1.16.1 libmysqlclient18-5.5.33-1.16.1 libmysqlclient18-debuginfo-5.5.33-1.16.1 libmysqlclient_r18-5.5.33-1.16.1 libmysqld-devel-5.5.33-1.16.1 libmysqld18-5.5.33-1.16.1 libmysqld18-debuginfo-5.5.33-1.16.1 mariadb-5.5.33-1.16.1 mariadb-bench-5.5.33-1.16.1 mariadb-bench-debuginfo-5.5.33-1.16.1 mariadb-client-5.5.33-1.16.1 mariadb-client-debuginfo-5.5.33-1.16.1 mariadb-debug-version-5.5.33-1.16.1 mariadb-debug-version-debuginfo-5.5.33-1.16.1 mariadb-debuginfo-5.5.33-1.16.1 mariadb-debugsource-5.5.33-1.16.1 mariadb-errormessages-5.5.33-1.16.1 mariadb-test-5.5.33-1.16.1 mariadb-test-debuginfo-5.5.33-1.16.1 mariadb-tools-5.5.33-1.16.1 mariadb-tools-debuginfo-5.5.33-1.16.1 - openSUSE 12.3 (x86_64): libmysqlclient18-32bit-5.5.33-1.16.1 libmysqlclient18-debuginfo-32bit-5.5.33-1.16.1 libmysqlclient_r18-32bit-5.5.33-1.16.1 References:

1 0

openSUSE-RU-2013:1500-1: mariadb: merge with current template for MySQL with no effects
by maintenance＠opensuse.org 30 Sep '13

30 Sep '13

openSUSE Recommended Update: mariadb: merge with current template for MySQL with no effects ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1500-1 Rating: low References: Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issues with mariadb: - merge with current template for MySQL with no effects Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-727 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libmariadbclient18-5.5.33-1.18.1 libmariadbclient18-debuginfo-5.5.33-1.18.1 libmariadbclient_r18-5.5.33-1.18.1 mariadb-5.5.33-1.18.1 mariadb-bench-5.5.33-1.18.1 mariadb-bench-debuginfo-5.5.33-1.18.1 mariadb-client-5.5.33-1.18.1 mariadb-client-debuginfo-5.5.33-1.18.1 mariadb-debug-version-5.5.33-1.18.1 mariadb-debug-version-debuginfo-5.5.33-1.18.1 mariadb-debuginfo-5.5.33-1.18.1 mariadb-debugsource-5.5.33-1.18.1 mariadb-errormessages-5.5.33-1.18.1 mariadb-test-5.5.33-1.18.1 mariadb-test-debuginfo-5.5.33-1.18.1 mariadb-tools-5.5.33-1.18.1 mariadb-tools-debuginfo-5.5.33-1.18.1 - openSUSE 12.2 (x86_64): libmariadbclient18-32bit-5.5.33-1.18.1 libmariadbclient18-debuginfo-32bit-5.5.33-1.18.1 libmariadbclient_r18-32bit-5.5.33-1.18.1 References:

1 0

openSUSE-SU-2013:1499-1: moderate: Mozilla updates September 2013
by opensuse-security＠opensuse.org 29 Sep '13

29 Sep '13

openSUSE Security Update: Mozilla updates September 2013 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1499-1 Rating: moderate References: #840485 #840551 Cross-References: CVE-2013-1718 CVE-2013-1719 CVE-2013-1720 CVE-2013-1721 CVE-2013-1722 CVE-2013-1723 CVE-2013-1724 CVE-2013-1725 CVE-2013-1728 CVE-2013-1730 CVE-2013-1732 CVE-2013-1735 CVE-2013-1736 CVE-2013-1737 CVE-2013-1738 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: Updates Firefox, Thunderbird and Seamonkey and fixes the following security issues: * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719 Miscellaneous memory safety hazards * MFSA 2013-77/CVE-2013-1720 (bmo#888820) Improper state in HTML5 Tree Builder with templates * MFSA 2013-78/CVE-2013-1721 (bmo#890277) Integer overflow in ANGLE library * MFSA 2013-79/CVE-2013-1722 (bmo#893308) Use-after-free in Animation Manager during stylesheet cloning * MFSA 2013-80/CVE-2013-1723 (bmo#891292) NativeKey continues handling key messages after widget is destroyed * MFSA 2013-81/CVE-2013-1724 (bmo#894137) Use-after-free with select element * MFSA 2013-82/CVE-2013-1725 (bmo#876762) Calling scope for new Javascript objects can lead to memory corruption * MFSA 2013-85/CVE-2013-1728 (bmo#883686) Uninitialized data in IonMonkey * MFSA 2013-88/CVE-2013-1730 (bmo#851353) Compartment mismatch re-attaching XBL-backed nodes * MFSA 2013-89/CVE-2013-1732 (bmo#883514) Buffer overflow with multi-column, lists, and floats * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301) Memory corruption involving scrolling * MFSA 2013-91/CVE-2013-1737 (bmo#907727) User-defined properties on DOM proxies get the wrong "this" object * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897) GC hazard with default compartments and frame chain restoration Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-141 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): MozillaFirefox-24.0-87.3 MozillaFirefox-branding-upstream-24.0-87.3 MozillaFirefox-buildsymbols-24.0-87.3 MozillaFirefox-debuginfo-24.0-87.3 MozillaFirefox-debugsource-24.0-87.3 MozillaFirefox-devel-24.0-87.3 MozillaFirefox-translations-common-24.0-87.3 MozillaFirefox-translations-other-24.0-87.3 MozillaThunderbird-24.0-73.3 MozillaThunderbird-buildsymbols-24.0-73.3 MozillaThunderbird-debuginfo-24.0-73.3 MozillaThunderbird-debugsource-24.0-73.3 MozillaThunderbird-devel-24.0-73.3 MozillaThunderbird-translations-common-24.0-73.3 MozillaThunderbird-translations-other-24.0-73.3 enigmail-1.5.2+24.0-73.3 seamonkey-2.21-77.3 seamonkey-debuginfo-2.21-77.3 seamonkey-debugsource-2.21-77.3 seamonkey-dom-inspector-2.21-77.3 seamonkey-irc-2.21-77.3 seamonkey-translations-common-2.21-77.3 seamonkey-translations-other-2.21-77.3 seamonkey-venkman-2.21-77.3 References: http://support.novell.com/security/cve/CVE-2013-1718.html http://support.novell.com/security/cve/CVE-2013-1719.html http://support.novell.com/security/cve/CVE-2013-1720.html http://support.novell.com/security/cve/CVE-2013-1721.html http://support.novell.com/security/cve/CVE-2013-1722.html http://support.novell.com/security/cve/CVE-2013-1723.html http://support.novell.com/security/cve/CVE-2013-1724.html http://support.novell.com/security/cve/CVE-2013-1725.html http://support.novell.com/security/cve/CVE-2013-1728.html http://support.novell.com/security/cve/CVE-2013-1730.html http://support.novell.com/security/cve/CVE-2013-1732.html http://support.novell.com/security/cve/CVE-2013-1735.html http://support.novell.com/security/cve/CVE-2013-1736.html http://support.novell.com/security/cve/CVE-2013-1737.html http://support.novell.com/security/cve/CVE-2013-1738.html https://bugzilla.novell.com/840485 https://bugzilla.novell.com/840551

1 0

openSUSE-SU-2013:1496-1: moderate: update for xulrunner17
by opensuse-security＠opensuse.org 27 Sep '13

27 Sep '13

openSUSE Security Update: update for xulrunner17 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1496-1 Rating: moderate References: #840485 Cross-References: CVE-2013-1705 CVE-2013-1718 CVE-2013-1722 CVE-2013-1725 CVE-2013-1730 CVE-2013-1732 CVE-2013-1735 CVE-2013-1736 CVE-2013-1737 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This xulrunner17 version update to 17.0.9esr fixes the following security issues (bnc#840485): * MFSA 2013-65/CVE-2013-1705 (bmo#882865) Buffer underflow when generating CRMF requests * MFSA 2013-76/CVE-2013-1718 Miscellaneous memory safety hazards * MFSA 2013-79/CVE-2013-1722 (bmo#893308) Use-after-free in Animation Manager during stylesheet cloning * MFSA 2013-82/CVE-2013-1725 (bmo#876762) Calling scope for new Javascript objects can lead to memory corruption * MFSA 2013-88/CVE-2013-1730 (bmo#851353) Compartment mismatch re-attaching XBL-backed nodes * MFSA 2013-89/CVE-2013-1732 (bmo#883514) Buffer overflow with multi-column, lists, and floats * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301) Memory corruption involving scrolling * MFSA 2013-91/CVE-2013-1737 (bmo#907727) User-defined properties on DOM proxies get the wrong "this" object Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-717 - openSUSE 12.2: zypper in -t patch openSUSE-2013-717 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): mozilla-js-17.0.9-2.1 mozilla-js-debuginfo-17.0.9-2.1 xulrunner-17.0.9-2.1 xulrunner-buildsymbols-17.0.9-2.1 xulrunner-debuginfo-17.0.9-2.1 xulrunner-debugsource-17.0.9-2.1 xulrunner-devel-17.0.9-2.1 xulrunner-devel-debuginfo-17.0.9-2.1 - openSUSE 12.3 (x86_64): mozilla-js-32bit-17.0.9-2.1 mozilla-js-debuginfo-32bit-17.0.9-2.1 xulrunner-32bit-17.0.9-2.1 xulrunner-debuginfo-32bit-17.0.9-2.1 - openSUSE 12.2 (i586 x86_64): mozilla-js-17.0.9-2.1 mozilla-js-debuginfo-17.0.9-2.1 xulrunner-17.0.9-2.1 xulrunner-buildsymbols-17.0.9-2.1 xulrunner-debuginfo-17.0.9-2.1 xulrunner-debugsource-17.0.9-2.1 xulrunner-devel-17.0.9-2.1 xulrunner-devel-debuginfo-17.0.9-2.1 - openSUSE 12.2 (x86_64): mozilla-js-32bit-17.0.9-2.1 mozilla-js-debuginfo-32bit-17.0.9-2.1 xulrunner-32bit-17.0.9-2.1 xulrunner-debuginfo-32bit-17.0.9-2.1 References: http://support.novell.com/security/cve/CVE-2013-1705.html http://support.novell.com/security/cve/CVE-2013-1718.html http://support.novell.com/security/cve/CVE-2013-1722.html http://support.novell.com/security/cve/CVE-2013-1725.html http://support.novell.com/security/cve/CVE-2013-1730.html http://support.novell.com/security/cve/CVE-2013-1732.html http://support.novell.com/security/cve/CVE-2013-1735.html http://support.novell.com/security/cve/CVE-2013-1736.html http://support.novell.com/security/cve/CVE-2013-1737.html https://bugzilla.novell.com/840485

1 0

openSUSE-SU-2013:1495-1: moderate: update for MozillaThunderbird
by opensuse-security＠opensuse.org 27 Sep '13

27 Sep '13

openSUSE Security Update: update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1495-1 Rating: moderate References: #840485 Cross-References: CVE-2013-1718 CVE-2013-1719 CVE-2013-1720 CVE-2013-1722 CVE-2013-1723 CVE-2013-1724 CVE-2013-1725 CVE-2013-1728 CVE-2013-1730 CVE-2013-1732 CVE-2013-1735 CVE-2013-1736 CVE-2013-1737 CVE-2013-1738 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This MozillaThunderbird update to version 24.0 fixes several security and non-security issues: - update to Thunderbird 24.0 (bnc#840485) * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719 Miscellaneous memory safety hazards * MFSA 2013-77/CVE-2013-1720 (bmo#888820) Improper state in HTML5 Tree Builder with templates * MFSA 2013-79/CVE-2013-1722 (bmo#893308) Use-after-free in Animation Manager during stylesheet cloning * MFSA 2013-80/CVE-2013-1723 (bmo#891292) NativeKey continues handling key messages after widget is destroyed * MFSA 2013-81/CVE-2013-1724 (bmo#894137) Use-after-free with select element * MFSA 2013-82/CVE-2013-1725 (bmo#876762) Calling scope for new Javascript objects can lead to memory corruption * MFSA 2013-85/CVE-2013-1728 (bmo#883686) Uninitialized data in IonMonkey * MFSA 2013-88/CVE-2013-1730 (bmo#851353) Compartment mismatch re-attaching XBL-backed nodes * MFSA 2013-89/CVE-2013-1732 (bmo#883514) Buffer overflow with multi-column, lists, and floats * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301) Memory corruption involving scrolling * MFSA 2013-91/CVE-2013-1737 (bmo#907727) User-defined properties on DOM proxies get the wrong "this" object * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897) GC hazard with default compartments and frame chain restoration - moved greek to common translation package - require NSPR 4.10 and NSS 3.15.1 - add GStreamer build requirements for Gecko - added enigmail-build.patch to fix TB packaging (bmo#886095) - removed obsolete patches: * enigmail-old-gcc.patch * mozilla-gcc43-enums.patch * mozilla-gcc43-template_hacks.patch * mozilla-gcc43-templates_instantiation.patch * ppc-xpcshell.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-719 - openSUSE 12.2: zypper in -t patch openSUSE-2013-719 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): MozillaThunderbird-24.0-61.25.2 MozillaThunderbird-buildsymbols-24.0-61.25.2 MozillaThunderbird-debuginfo-24.0-61.25.2 MozillaThunderbird-debugsource-24.0-61.25.2 MozillaThunderbird-devel-24.0-61.25.2 MozillaThunderbird-translations-common-24.0-61.25.2 MozillaThunderbird-translations-other-24.0-61.25.2 enigmail-1.5.2+24.0-61.25.2 enigmail-debuginfo-1.5.2+24.0-61.25.2 - openSUSE 12.2 (i586 x86_64): MozillaThunderbird-24.0-49.55.1 MozillaThunderbird-buildsymbols-24.0-49.55.1 MozillaThunderbird-debuginfo-24.0-49.55.1 MozillaThunderbird-debugsource-24.0-49.55.1 MozillaThunderbird-devel-24.0-49.55.1 MozillaThunderbird-translations-common-24.0-49.55.1 MozillaThunderbird-translations-other-24.0-49.55.1 enigmail-1.5.2+24.0-49.55.1 References: http://support.novell.com/security/cve/CVE-2013-1718.html http://support.novell.com/security/cve/CVE-2013-1719.html http://support.novell.com/security/cve/CVE-2013-1720.html http://support.novell.com/security/cve/CVE-2013-1722.html http://support.novell.com/security/cve/CVE-2013-1723.html http://support.novell.com/security/cve/CVE-2013-1724.html http://support.novell.com/security/cve/CVE-2013-1725.html http://support.novell.com/security/cve/CVE-2013-1728.html http://support.novell.com/security/cve/CVE-2013-1730.html http://support.novell.com/security/cve/CVE-2013-1732.html http://support.novell.com/security/cve/CVE-2013-1735.html http://support.novell.com/security/cve/CVE-2013-1736.html http://support.novell.com/security/cve/CVE-2013-1737.html http://support.novell.com/security/cve/CVE-2013-1738.html https://bugzilla.novell.com/840485

1 0

openSUSE-SU-2013:1494-1:
by opensuse-security＠opensuse.org 27 Sep '13

27 Sep '13

openSUSE Security Update: ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1494-1 Rating: low References: #840510 Cross-References: CVE-2013-4351 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: No description available. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-716 - openSUSE 12.2: zypper in -t patch openSUSE-2013-716 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): gpg2-2.0.19-5.8.1 gpg2-debuginfo-2.0.19-5.8.1 gpg2-debugsource-2.0.19-5.8.1 - openSUSE 12.3 (noarch): gpg2-lang-2.0.19-5.8.1 - openSUSE 12.2 (i586 x86_64): gpg2-2.0.19-2.8.1 gpg2-debuginfo-2.0.19-2.8.1 gpg2-debugsource-2.0.19-2.8.1 - openSUSE 12.2 (noarch): gpg2-lang-2.0.19-2.8.1 References: http://support.novell.com/security/cve/CVE-2013-4351.html https://bugzilla.novell.com/840510

1 0

openSUSE-SU-2013:1493-1: moderate: update for MozillaFirefox
by opensuse-security＠opensuse.org 27 Sep '13

27 Sep '13

openSUSE Security Update: update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1493-1 Rating: moderate References: #840485 #840551 Cross-References: CVE-2013-1718 CVE-2013-1719 CVE-2013-1720 CVE-2013-1721 CVE-2013-1722 CVE-2013-1723 CVE-2013-1724 CVE-2013-1725 CVE-2013-1728 CVE-2013-1730 CVE-2013-1732 CVE-2013-1735 CVE-2013-1736 CVE-2013-1737 CVE-2013-1738 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: This MozillaFirefox update to version 24.0 fixes several security and non-security issues: - move greek to the translations-common package (bnc#840551) - update to Firefox 24.0 (bnc#840485) * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719 Miscellaneous memory safety hazards * MFSA 2013-77/CVE-2013-1720 (bmo#888820) Improper state in HTML5 Tree Builder with templates * MFSA 2013-78/CVE-2013-1721 (bmo#890277) Integer overflow in ANGLE library * MFSA 2013-79/CVE-2013-1722 (bmo#893308) Use-after-free in Animation Manager during stylesheet cloning * MFSA 2013-80/CVE-2013-1723 (bmo#891292) NativeKey continues handling key messages after widget is destroyed * MFSA 2013-81/CVE-2013-1724 (bmo#894137) Use-after-free with select element * MFSA 2013-82/CVE-2013-1725 (bmo#876762) Calling scope for new Javascript objects can lead to memory corruption * MFSA 2013-85/CVE-2013-1728 (bmo#883686) Uninitialized data in IonMonkey * MFSA 2013-88/CVE-2013-1730 (bmo#851353) Compartment mismatch re-attaching XBL-backed nodes * MFSA 2013-89/CVE-2013-1732 (bmo#883514) Buffer overflow with multi-column, lists, and floats * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301) Memory corruption involving scrolling * MFSA 2013-91/CVE-2013-1737 (bmo#907727) User-defined properties on DOM proxies get the wrong "this" object * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897) GC hazard with default compartments and frame chain restoration - enable gstreamer explicitely via pref (gecko.js) - require NSS 3.15.1 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-718 - openSUSE 12.2: zypper in -t patch openSUSE-2013-718 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): MozillaFirefox-24.0-1.33.1 MozillaFirefox-branding-upstream-24.0-1.33.1 MozillaFirefox-buildsymbols-24.0-1.33.1 MozillaFirefox-debuginfo-24.0-1.33.1 MozillaFirefox-debugsource-24.0-1.33.1 MozillaFirefox-devel-24.0-1.33.1 MozillaFirefox-translations-common-24.0-1.33.1 MozillaFirefox-translations-other-24.0-1.33.1 - openSUSE 12.2 (i586 x86_64): MozillaFirefox-24.0-2.59.1 MozillaFirefox-branding-upstream-24.0-2.59.1 MozillaFirefox-buildsymbols-24.0-2.59.1 MozillaFirefox-debuginfo-24.0-2.59.1 MozillaFirefox-debugsource-24.0-2.59.1 MozillaFirefox-devel-24.0-2.59.1 MozillaFirefox-translations-common-24.0-2.59.1 MozillaFirefox-translations-other-24.0-2.59.1 References: http://support.novell.com/security/cve/CVE-2013-1718.html http://support.novell.com/security/cve/CVE-2013-1719.html http://support.novell.com/security/cve/CVE-2013-1720.html http://support.novell.com/security/cve/CVE-2013-1721.html http://support.novell.com/security/cve/CVE-2013-1722.html http://support.novell.com/security/cve/CVE-2013-1723.html http://support.novell.com/security/cve/CVE-2013-1724.html http://support.novell.com/security/cve/CVE-2013-1725.html http://support.novell.com/security/cve/CVE-2013-1728.html http://support.novell.com/security/cve/CVE-2013-1730.html http://support.novell.com/security/cve/CVE-2013-1732.html http://support.novell.com/security/cve/CVE-2013-1735.html http://support.novell.com/security/cve/CVE-2013-1736.html http://support.novell.com/security/cve/CVE-2013-1737.html http://support.novell.com/security/cve/CVE-2013-1738.html https://bugzilla.novell.com/840485 https://bugzilla.novell.com/840551

1 0

openSUSE-SU-2013:1492-1: moderate: update for python-django
by opensuse-security＠opensuse.org 27 Sep '13

27 Sep '13

openSUSE Security Update: update for python-django ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1492-1 Rating: moderate References: #840832 Cross-References: CVE-2013-1443 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This python-django update fixes several security issues. - Update to version 1.4.8 (bnc#840832, CVE-2013-1443): + Fixed denial-of-service via large passwords - Changes from version 1.4.7: + Fixed directory traversal with ssi template tag - Changes from version 1.4.6: + Fixed Cross-site scripting (XSS) in admin interface + Fixed Possible XSS via is_safe_url Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-721 - openSUSE 12.2: zypper in -t patch openSUSE-2013-721 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): python-django-1.4.8-2.8.1 - openSUSE 12.2 (noarch): python-django-1.4.8-2.8.1 References: http://support.novell.com/security/cve/CVE-2013-1443.html https://bugzilla.novell.com/840832

1 0

openSUSE-SU-2013:1491-1: moderate: update for seamonkey
by opensuse-security＠opensuse.org 27 Sep '13

27 Sep '13

openSUSE Security Update: update for seamonkey ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1491-1 Rating: moderate References: #840485 Cross-References: CVE-2013-1718 CVE-2013-1719 CVE-2013-1720 CVE-2013-1721 CVE-2013-1722 CVE-2013-1723 CVE-2013-1724 CVE-2013-1725 CVE-2013-1728 CVE-2013-1730 CVE-2013-1732 CVE-2013-1735 CVE-2013-1736 CVE-2013-1737 CVE-2013-1738 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: This seamonkey update to version 2.21 fixes several security and non-security issues: - update to SeaMonkey 2.21 (bnc#840485) * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719 Miscellaneous memory safety hazards * MFSA 2013-77/CVE-2013-1720 (bmo#888820) Improper state in HTML5 Tree Builder with templates * MFSA 2013-78/CVE-2013-1721 (bmo#890277) Integer overflow in ANGLE library * MFSA 2013-79/CVE-2013-1722 (bmo#893308) Use-after-free in Animation Manager during stylesheet cloning * MFSA 2013-80/CVE-2013-1723 (bmo#891292) NativeKey continues handling key messages after widget is destroyed * MFSA 2013-81/CVE-2013-1724 (bmo#894137) Use-after-free with select element * MFSA 2013-82/CVE-2013-1725 (bmo#876762) Calling scope for new Javascript objects can lead to memory corruption * MFSA 2013-85/CVE-2013-1728 (bmo#883686) Uninitialized data in IonMonkey * MFSA 2013-88/CVE-2013-1730 (bmo#851353) Compartment mismatch re-attaching XBL-backed nodes * MFSA 2013-89/CVE-2013-1732 (bmo#883514) Buffer overflow with multi-column, lists, and floats * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301) Memory corruption involving scrolling * MFSA 2013-91/CVE-2013-1737 (bmo#907727) User-defined properties on DOM proxies get the wrong "this" object * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897) GC hazard with default compartments and frame chain restoration - requires NSS 3.15.1 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-720 - openSUSE 12.2: zypper in -t patch openSUSE-2013-720 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): seamonkey-2.21-1.21.2 seamonkey-debuginfo-2.21-1.21.2 seamonkey-debugsource-2.21-1.21.2 seamonkey-dom-inspector-2.21-1.21.2 seamonkey-irc-2.21-1.21.2 seamonkey-translations-common-2.21-1.21.2 seamonkey-translations-other-2.21-1.21.2 seamonkey-venkman-2.21-1.21.2 - openSUSE 12.2 (i586 x86_64): seamonkey-2.21-2.50.1 seamonkey-debuginfo-2.21-2.50.1 seamonkey-debugsource-2.21-2.50.1 seamonkey-dom-inspector-2.21-2.50.1 seamonkey-irc-2.21-2.50.1 seamonkey-translations-common-2.21-2.50.1 seamonkey-translations-other-2.21-2.50.1 seamonkey-venkman-2.21-2.50.1 References: http://support.novell.com/security/cve/CVE-2013-1718.html http://support.novell.com/security/cve/CVE-2013-1719.html http://support.novell.com/security/cve/CVE-2013-1720.html http://support.novell.com/security/cve/CVE-2013-1721.html http://support.novell.com/security/cve/CVE-2013-1722.html http://support.novell.com/security/cve/CVE-2013-1723.html http://support.novell.com/security/cve/CVE-2013-1724.html http://support.novell.com/security/cve/CVE-2013-1725.html http://support.novell.com/security/cve/CVE-2013-1728.html http://support.novell.com/security/cve/CVE-2013-1730.html http://support.novell.com/security/cve/CVE-2013-1732.html http://support.novell.com/security/cve/CVE-2013-1735.html http://support.novell.com/security/cve/CVE-2013-1736.html http://support.novell.com/security/cve/CVE-2013-1737.html http://support.novell.com/security/cve/CVE-2013-1738.html https://bugzilla.novell.com/840485

1 0

openSUSE-SU-2013:1485-1: moderate: update for subversion
by opensuse-security＠opensuse.org 24 Sep '13

24 Sep '13

openSUSE Security Update: update for subversion ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1485-1 Rating: moderate References: #836245 Cross-References: CVE-2013-4277 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This subversion update includes a security fix: -svnserve: fix creation of pid files CVE-2013-4277 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-140 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.6.23-55.2 libsvn_auth_gnome_keyring-1-0-debuginfo-1.6.23-55.2 libsvn_auth_kwallet-1-0-1.6.23-55.2 libsvn_auth_kwallet-1-0-debuginfo-1.6.23-55.2 subversion-1.6.23-55.2 subversion-debuginfo-1.6.23-55.2 subversion-debugsource-1.6.23-55.2 subversion-devel-1.6.23-55.2 subversion-perl-1.6.23-55.2 subversion-perl-debuginfo-1.6.23-55.2 subversion-python-1.6.23-55.2 subversion-python-debuginfo-1.6.23-55.2 subversion-ruby-1.6.23-55.2 subversion-ruby-debuginfo-1.6.23-55.2 subversion-server-1.6.23-55.2 subversion-server-debuginfo-1.6.23-55.2 subversion-tools-1.6.23-55.2 subversion-tools-debuginfo-1.6.23-55.2 References: http://support.novell.com/security/cve/CVE-2013-4277.html https://bugzilla.novell.com/836245

1 0