September 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2013:1463-1: moderate: update for python
by opensuse-security＠opensuse.org 18 Sep '13

18 Sep '13

openSUSE Security Update: update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1463-1 Rating: moderate References: #834601 Cross-References: CVE-2013-4238 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This python update includes a SSL certificates fix - handle NULL bytes in certain fields of SSL certificates (CVE-2013-4238, bnc#834601, CVE-2013-4238_py27.patch) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-136 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libpython2_7-1_0-2.7-8.48.1 libpython2_7-1_0-debuginfo-2.7-8.48.1 python-2.7-9.48.1 python-base-2.7-8.48.1 python-base-debuginfo-2.7-8.48.1 python-base-debugsource-2.7-8.48.1 python-curses-2.7-9.48.1 python-curses-debuginfo-2.7-9.48.1 python-debuginfo-2.7-9.48.1 python-debugsource-2.7-9.48.1 python-demo-2.7-9.48.1 python-devel-2.7-8.48.1 python-gdbm-2.7-9.48.1 python-gdbm-debuginfo-2.7-9.48.1 python-idle-2.7-9.48.1 python-tk-2.7-9.48.1 python-tk-debuginfo-2.7-9.48.1 python-xml-2.7-8.48.1 python-xml-debuginfo-2.7-8.48.1 - openSUSE 11.4 (x86_64): libpython2_7-1_0-32bit-2.7-8.48.1 libpython2_7-1_0-debuginfo-32bit-2.7-8.48.1 python-32bit-2.7-9.48.1 python-base-32bit-2.7-8.48.1 python-base-debuginfo-32bit-2.7-8.48.1 python-debuginfo-32bit-2.7-9.48.1 - openSUSE 11.4 (noarch): python-doc-2.7-8.48.1 python-doc-pdf-2.7-8.48.1 - openSUSE 11.4 (ia64): libpython2_7-1_0-debuginfo-x86-2.7-8.48.1 libpython2_7-1_0-x86-2.7-8.48.1 python-base-debuginfo-x86-2.7-8.48.1 python-base-x86-2.7-8.48.1 python-debuginfo-x86-2.7-9.48.1 python-x86-2.7-9.48.1 References: http://support.novell.com/security/cve/CVE-2013-4238.html https://bugzilla.novell.com/834601

1 0

openSUSE-SU-2013:1462-1: moderate: update for python3
by opensuse-security＠opensuse.org 18 Sep '13

18 Sep '13

openSUSE Security Update: update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1462-1 Rating: moderate References: #834601 Cross-References: CVE-2013-4238 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This python update includes a SSL certificates fix. - handle NULL bytes in certain fields of SSL certificates (CVE-2013-4238, bnc#834601, CVE-2013-4238-py32.patch) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-137 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): python3-2to3-3.1.3-9.1 python3-3.1.3-9.1 python3-curses-3.1.3-9.1 python3-curses-debuginfo-3.1.3-9.1 python3-dbm-3.1.3-9.1 python3-dbm-debuginfo-3.1.3-9.1 python3-debuginfo-3.1.3-9.1 python3-debugsource-3.1.3-9.1 python3-demo-3.1.3-9.1 python3-devel-3.1.3-9.1 python3-idle-3.1.3-9.1 python3-tk-3.1.3-9.1 python3-tk-debuginfo-3.1.3-9.1 python3-xml-3.1.3-9.1 python3-xml-debuginfo-3.1.3-9.1 - openSUSE 11.4 (x86_64): python3-32bit-3.1.3-9.1 python3-debuginfo-32bit-3.1.3-9.1 - openSUSE 11.4 (noarch): python3-doc-3.1-9.1 python3-doc-pdf-3.1-9.1 - openSUSE 11.4 (ia64): python3-debuginfo-x86-3.1.3-9.1 python3-x86-3.1.3-9.1 References: http://support.novell.com/security/cve/CVE-2013-4238.html https://bugzilla.novell.com/834601

1 0

openSUSE-RU-2013:1461-1: important: update sensors to newer version and add important patches
by maintenance＠opensuse.org 18 Sep '13

18 Sep '13

openSUSE Recommended Update: update sensors to newer version and add important patches ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1461-1 Rating: important References: #838619 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with sensors and updates to version 3.3.2: - bnc#838619: + sensors-detect: Avoid probing EDID addresses on graphics cards. + sensors-detect: Do not scan I2C adapters on graphics cards by default. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-135 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libsensors4-3.3.2-15.1 libsensors4-debuginfo-3.3.2-15.1 libsensors4-devel-3.3.2-15.1 sensord-3.3.2-15.1 sensord-debuginfo-3.3.2-15.1 sensors-3.3.2-15.1 sensors-debuginfo-3.3.2-15.1 sensors-debugsource-3.3.2-15.1 - openSUSE 11.4 (x86_64): libsensors4-32bit-3.3.2-15.1 libsensors4-debuginfo-32bit-3.3.2-15.1 - openSUSE 11.4 (ia64): libsensors4-debuginfo-x86-3.3.2-15.1 libsensors4-x86-3.3.2-15.1 References: https://bugzilla.novell.com/838619

1 0

openSUSE-SU-2013:1459-1: moderate: update for flash-player
by opensuse-security＠opensuse.org 17 Sep '13

17 Sep '13

openSUSE Security Update: update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1459-1 Rating: moderate References: #839897 Cross-References: CVE-2013-3361 CVE-2013-3362 CVE-2013-3363 CVE-2013-5324 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: These updates resolve memory corruption vulnerabilities that could lead to code execution (CVE-2013-3361, CVE-2013-3362, CVE-2013-3363, CVE-2013-5324). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-134 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.310-75.1 flash-player-gnome-11.2.202.310-75.1 flash-player-kde4-11.2.202.310-75.1 References: http://support.novell.com/security/cve/CVE-2013-3361.html http://support.novell.com/security/cve/CVE-2013-3362.html http://support.novell.com/security/cve/CVE-2013-3363.html http://support.novell.com/security/cve/CVE-2013-5324.html https://bugzilla.novell.com/839897

1 0

openSUSE-RU-2013:1458-1: transmageddon: Require python3-gobject and gtk 3.0
by maintenance＠opensuse.org 17 Sep '13

17 Sep '13

openSUSE Recommended Update: transmageddon: Require python3-gobject and gtk 3.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1458-1 Rating: low References: #830725 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with transmageddon: - bnc#830725: + require GTK 3.0 from the python code. We We know we can't use GTK2, as introspection support is not really given there. + Add python3-gobject requirement as transmageddon makes use of gobject-introspection, we need to pull in the python gi loader. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-707 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): transmageddon-0.25-2.4.1 transmageddon-lang-0.25-2.4.1 References: https://bugzilla.novell.com/830725

1 0

openSUSE-RU-2013:1457-1: NetworkManager: Fix possible shutdown-hang
by maintenance＠opensuse.org 17 Sep '13

17 Sep '13

openSUSE Recommended Update: NetworkManager: Fix possible shutdown-hang ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1457-1 Rating: low References: #789698 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with NetworkManager: - bnc#789698: + Always enable NetworkManager-dispatcher systemd service, even on update, since it is a dbus service and must be enabled. + Ensure nm-dispatcher is wrapped by a systemd service. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-706 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): NetworkManager-0.9.6.4-5.16.1 NetworkManager-debuginfo-0.9.6.4-5.16.1 NetworkManager-debugsource-0.9.6.4-5.16.1 NetworkManager-devel-0.9.6.4-5.16.1 libnm-glib-vpn1-0.9.6.4-5.16.1 libnm-glib-vpn1-debuginfo-0.9.6.4-5.16.1 libnm-glib4-0.9.6.4-5.16.1 libnm-glib4-debuginfo-0.9.6.4-5.16.1 libnm-util2-0.9.6.4-5.16.1 libnm-util2-debuginfo-0.9.6.4-5.16.1 typelib-1_0-NMClient-1_0-0.9.6.4-5.16.1 typelib-1_0-NetworkManager-1_0-0.9.6.4-5.16.1 - openSUSE 12.3 (x86_64): NetworkManager-devel-32bit-0.9.6.4-5.16.1 libnm-glib-vpn1-32bit-0.9.6.4-5.16.1 libnm-glib-vpn1-debuginfo-32bit-0.9.6.4-5.16.1 libnm-glib4-32bit-0.9.6.4-5.16.1 libnm-glib4-debuginfo-32bit-0.9.6.4-5.16.1 libnm-util2-32bit-0.9.6.4-5.16.1 libnm-util2-debuginfo-32bit-0.9.6.4-5.16.1 - openSUSE 12.3 (noarch): NetworkManager-lang-0.9.6.4-5.16.1 References: https://bugzilla.novell.com/789698

1 0

openSUSE-SU-2013:1456-1: important: update for flash-player
by opensuse-security＠opensuse.org 17 Sep '13

17 Sep '13

openSUSE Security Update: update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1456-1 Rating: important References: #839897 Cross-References: CVE-2013-3361 CVE-2013-3362 CVE-2013-3363 CVE-2013-5324 Affected Products: openSUSE 12.3:NonFree openSUSE 12.2:NonFree ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Adobe flash-player has been updated to version 11.2.202.310 (ABSP13-21) which fixes bugs and security issues. (bnc#839897) These updates resolve memory corruption vulnerabilities that could lead to code execution. (CVE-2013-3361, CVE-2013-3362, CVE-2013-3363, CVE-2013-5324) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2013-705 - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2013-705 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3:NonFree (i586 x86_64): flash-player-11.2.202.310-2.36.1 flash-player-gnome-11.2.202.310-2.36.1 flash-player-kde4-11.2.202.310-2.36.1 - openSUSE 12.2:NonFree (i586 x86_64): flash-player-11.2.202.310-1.60.1 flash-player-gnome-11.2.202.310-1.60.1 flash-player-kde4-11.2.202.310-1.60.1 References: http://support.novell.com/security/cve/CVE-2013-3361.html http://support.novell.com/security/cve/CVE-2013-3362.html http://support.novell.com/security/cve/CVE-2013-3363.html http://support.novell.com/security/cve/CVE-2013-5324.html https://bugzilla.novell.com/839897

1 0

openSUSE-RU-2013:1454-1: important: sensors: Backported two important fixes
by maintenance＠opensuse.org 16 Sep '13

16 Sep '13

openSUSE Recommended Update: sensors: Backported two important fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1454-1 Rating: important References: #838619 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with sensors: - bnc#838619: + sensors-detect: Avoid probing EDID addresses on graphics cards. + sensors-detect: Do not scan I2C adapters on graphics cards by default. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-704 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libsensors4-3.3.2-2.4.1 libsensors4-debuginfo-3.3.2-2.4.1 libsensors4-devel-3.3.2-2.4.1 sensord-3.3.2-2.4.1 sensord-debuginfo-3.3.2-2.4.1 sensors-3.3.2-2.4.1 sensors-debuginfo-3.3.2-2.4.1 sensors-debugsource-3.3.2-2.4.1 - openSUSE 12.2 (x86_64): libsensors4-32bit-3.3.2-2.4.1 libsensors4-debuginfo-32bit-3.3.2-2.4.1 References: https://bugzilla.novell.com/838619

1 0

openSUSE-RU-2013:1453-1: moderate: gnome-packagekit: fix hanging after executing the update and consuming CPU resources
by maintenance＠opensuse.org 16 Sep '13

16 Sep '13

openSUSE Recommended Update: gnome-packagekit: fix hanging after executing the update and consuming CPU resources ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1453-1 Rating: moderate References: #813176 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with gnome-packagekit: - bnc#813176: Fix gnome-packagekit hanging for a long time after executing the update and consuming CPU resources Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-703 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (x86_64): gnome-packagekit-3.6.1-3.6.1 gnome-packagekit-debuginfo-3.6.1-3.6.1 gnome-packagekit-debugsource-3.6.1-3.6.1 gnome-packagekit-extras-3.6.1-3.6.1 gnome-packagekit-extras-debuginfo-3.6.1-3.6.1 - openSUSE 12.3 (noarch): gnome-packagekit-lang-3.6.1-3.6.2 - openSUSE 12.3 (i586): gnome-packagekit-3.6.1-3.6.2 gnome-packagekit-debuginfo-3.6.1-3.6.2 gnome-packagekit-debugsource-3.6.1-3.6.2 gnome-packagekit-extras-3.6.1-3.6.2 gnome-packagekit-extras-debuginfo-3.6.1-3.6.2 References: https://bugzilla.novell.com/813176

1 0

openSUSE-RU-2013:1452-1: moderate: kvm: Update to v1.3.1 and one additional fix
by maintenance＠opensuse.org 16 Sep '13

16 Sep '13

openSUSE Recommended Update: kvm: Update to v1.3.1 and one additional fix ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1452-1 Rating: moderate References: #815201 #838823 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues with kvm: - Update to qemu-kvm stable release v1.3.1. Fixes include: + Fix semaphores fallback code + Fix off-by-1 error in RAM migration code + migration: Fix madvise breakage if host and guest have different page sizes + vfio-pci: Don't use kvm_irqchip_in_kernel + pixman: fix vnc tight png/jpeg support + qxl: save qemu_create_displaysurface_from result + bnc#838823: qxl+vnc: register a vm state change handler for dummy spice_server + e1000: Discard oversized packets based on SBP|LPE + migration: fix migration_bitmap leak + buffered_file: do not send more than s->bytes_xfer bytes per tick + vfio-pci: Make host MSI-X enable track guest + pci-assign: Enable MSIX on device to match guest + vfio-pci: Loosen sanity checks to allow future features + raw-posix: fix bdrv_aio_ioctl + aio: Fix return value of aio_poll() + qxl: Fix SPICE_RING_PROD_ITEM(), SPICE_RING_CONS_ITEM() sanity check - bnc#815201: Use correct value when closing buffered file. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-702 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): kvm-1.3.1-3.6.2 kvm-debuginfo-1.3.1-3.6.2 kvm-debugsource-1.3.1-3.6.2 References: https://bugzilla.novell.com/815201 https://bugzilla.novell.com/838823

1 0