September 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2013:1415-1: sg3_utils: Update sg_inq to support Windows Server 2012R2
by maintenance＠opensuse.org 09 Sep '13

09 Sep '13

openSUSE Recommended Update: sg3_utils: Update sg_inq to support Windows Server 2012R2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1415-1 Rating: low References: #541849 #805059 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues with sg3_utils: - bnc#541849: Fixup tab character in inquiry - bnc#805059: + Add --export option to sg_inq to improve support for Hyper-V VMs hosted on Windows Server 2012R2 + Fixup T10 Vendor designator display Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-683 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): sg3_utils-1.33-5.4.1 sg3_utils-debuginfo-1.33-5.4.1 sg3_utils-debugsource-1.33-5.4.1 sg3_utils-devel-1.33-5.4.1 References: https://bugzilla.novell.com/541849 https://bugzilla.novell.com/805059

1 0

openSUSE-RU-2013:1414-1: kaffeine: ksuseinstall does not respect "don't ask again"
by maintenance＠opensuse.org 09 Sep '13

09 Sep '13

openSUSE Recommended Update: kaffeine: ksuseinstall does not respect "don't ask again" ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1414-1 Rating: low References: #671578 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with kaffeine: - bnc#671578: ksuseinstall does not respect "don't ask again" Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-680 - openSUSE 12.2: zypper in -t patch openSUSE-2013-680 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): kaffeine-1.2.2-22.5.1 kaffeine-debuginfo-1.2.2-22.5.1 kaffeine-debugsource-1.2.2-22.5.1 - openSUSE 12.2 (i586 x86_64): kaffeine-1.2.2-20.5.1 kaffeine-debuginfo-1.2.2-20.5.1 kaffeine-debugsource-1.2.2-20.5.1 References: https://bugzilla.novell.com/671578

1 0

openSUSE-RU-2013:1413-1: puppet: changed /var/lock/subsys to /var/lock from lockfile path as subsys does not exist
by maintenance＠opensuse.org 09 Sep '13

09 Sep '13

openSUSE Recommended Update: puppet: changed /var/lock/subsys to /var/lock from lockfile path as subsys does not exist ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1413-1 Rating: low References: #714649 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with puppet: - Fixed bnc#714649, removed "subsys" from lockfile path, as "/var/lock/subsys" does not exist. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-682 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): puppet-2.7.6-4.8.1 puppet-server-2.7.6-4.8.1 References: https://bugzilla.novell.com/714649

1 0

openSUSE-SU-2013:1412-1: moderate: mariadb
by opensuse-security＠opensuse.org 08 Sep '13

08 Sep '13

openSUSE Security Update: mariadb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1412-1 Rating: moderate References: #768832 Cross-References: CVE-2012-5611 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This version upgrade of mariadb fixed the following issues: - making mysqldump work with MySQL 5.0 (bnc#768832) - fix possible buffer overflow that can cause a server crash or arbitrary code execution (a variant of CVE-2012-5611) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-131 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libmariadbclient16-5.1.67-46.1 libmariadbclient16-debuginfo-5.1.67-46.1 libmariadbclient_r16-5.1.67-46.1 libmariadbclient_r16-debuginfo-5.1.67-46.1 mariadb-5.1.67-46.1 mariadb-bench-5.1.67-46.1 mariadb-bench-debuginfo-5.1.67-46.1 mariadb-client-5.1.67-46.1 mariadb-client-debuginfo-5.1.67-46.1 mariadb-debug-5.1.67-46.1 mariadb-debug-debuginfo-5.1.67-46.1 mariadb-debuginfo-5.1.67-46.1 mariadb-debugsource-5.1.67-46.1 mariadb-test-5.1.67-46.1 mariadb-test-debuginfo-5.1.67-46.1 mariadb-tools-5.1.67-46.1 mariadb-tools-debuginfo-5.1.67-46.1 References: http://support.novell.com/security/cve/CVE-2012-5611.html https://bugzilla.novell.com/768832

1 0

openSUSE-SU-2013:1411-1: moderate: tomcat
by opensuse-security＠opensuse.org 08 Sep '13

08 Sep '13

openSUSE Security Update: tomcat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1411-1 Rating: moderate References: #768772 #822177 #831117 #831119 Cross-References: CVE-2012-3544 CVE-2013-1976 CVE-2013-2067 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: Tomcat was updated to fix security issues and bug: CVE-2013-1976: Avoid a potential symlink race during startup of the tomcat server, where a local attacker that gaine access to the tomcat chroot could escalate privileges to root. CVE-2013-2067: java/org/apache/catalina/authenticator/FormAuthenticator.jav a in the form authentication feature in Apache Tomcat did not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack. CVE-2012-3544: Tomcat were affected by a chunked transfer encoding extension size denial of service vulnerability. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-129 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): tomcat6-6.0.32-42.1 tomcat6-admin-webapps-6.0.32-42.1 tomcat6-docs-webapp-6.0.32-42.1 tomcat6-el-1_0-api-6.0.32-42.1 tomcat6-javadoc-6.0.32-42.1 tomcat6-jsp-2_1-api-6.0.32-42.1 tomcat6-lib-6.0.32-42.1 tomcat6-servlet-2_5-api-6.0.32-42.1 tomcat6-webapps-6.0.32-42.1 References: http://support.novell.com/security/cve/CVE-2012-3544.html http://support.novell.com/security/cve/CVE-2013-1976.html http://support.novell.com/security/cve/CVE-2013-2067.html https://bugzilla.novell.com/768772 https://bugzilla.novell.com/822177 https://bugzilla.novell.com/831117 https://bugzilla.novell.com/831119

1 0

openSUSE-SU-2013:1410-1: moderate: update for mysql-community-server
by opensuse-security＠opensuse.org 08 Sep '13

08 Sep '13

openSUSE Security Update: update for mysql-community-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1410-1 Rating: moderate References: #768832 #830086 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This version fixes following issue: - making mysqldump work with MySQL 5.0 (bnc#768832) - include security fixesJuly 2013 Oracle Patch day for mysql-5.1.71 (bnc#830086) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-130 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libmysqlclient-devel-5.1.71-62.1 libmysqlclient16-5.1.71-62.1 libmysqlclient16-debuginfo-5.1.71-62.1 libmysqlclient_r16-5.1.71-62.1 libmysqlclient_r16-debuginfo-5.1.71-62.1 libmysqld-devel-5.1.71-62.1 libmysqld0-5.1.71-62.1 libmysqld0-debuginfo-5.1.71-62.1 mysql-community-server-5.1.71-62.1 mysql-community-server-bench-5.1.71-62.1 mysql-community-server-bench-debuginfo-5.1.71-62.1 mysql-community-server-client-5.1.71-62.1 mysql-community-server-client-debuginfo-5.1.71-62.1 mysql-community-server-debug-5.1.71-62.1 mysql-community-server-debug-debuginfo-5.1.71-62.1 mysql-community-server-debuginfo-5.1.71-62.1 mysql-community-server-debugsource-5.1.71-62.1 mysql-community-server-test-5.1.71-62.1 mysql-community-server-test-debuginfo-5.1.71-62.1 mysql-community-server-tools-5.1.71-62.1 mysql-community-server-tools-debuginfo-5.1.71-62.1 - openSUSE 11.4 (x86_64): libmysqlclient16-32bit-5.1.71-62.1 libmysqlclient16-debuginfo-32bit-5.1.71-62.1 libmysqlclient_r16-32bit-5.1.71-62.1 libmysqlclient_r16-debuginfo-32bit-5.1.71-62.1 - openSUSE 11.4 (ia64): libmysqlclient16-debuginfo-x86-5.1.71-62.1 libmysqlclient16-x86-5.1.71-62.1 libmysqlclient_r16-debuginfo-x86-5.1.71-62.1 libmysqlclient_r16-x86-5.1.71-62.1 References: https://bugzilla.novell.com/768832 https://bugzilla.novell.com/830086

1 0

openSUSE-SU-2013:1404-1: moderate: xen: security and bugfix update to 4.2.2
by opensuse-security＠opensuse.org 04 Sep '13

04 Sep '13

openSUSE Security Update: xen: security and bugfix update to 4.2.2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1404-1 Rating: moderate References: #797285 #797523 #801663 #802221 #808085 #808269 #809662 #813673 #813675 #814059 #814709 #816159 #816163 #817068 #817210 #817799 #817904 #818183 #819416 #820917 #820919 #820920 #823011 #823608 #824676 #826882 Cross-References: CVE-2012-6075 CVE-2013-0151 CVE-2013-1432 CVE-2013-1917 CVE-2013-1918 CVE-2013-1919 CVE-2013-1922 CVE-2013-1952 CVE-2013-2007 CVE-2013-2072 CVE-2013-2076 CVE-2013-2077 CVE-2013-2078 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves 13 vulnerabilities and has 13 fixes is now available. Description: XEN was updated to 4.2.2, fixing lots of bugs and several security issues. Various upstream patches were also merged into this version by our developers. Detailed buglist: - bnc#824676 - Failed to setup devices for vm instance when start multiple vms simultaneously - bnc#817799 - sles9sp4 guest fails to start after upgrading to sles11 sp3 - bnc#826882 - xen: CVE-2013-1432: XSA-58: Page reference counting error due to XSA-45/CVE-2013-1918 fixes - Add upstream patch to fix devid assignment in libxl 27184-libxl-devid-fix.patch - bnc#823608 - xen: XSA-57: libxl allows guest write access to sensitive console related xenstore keys 27178-libxl-Restrict-permissions-on-PV-console-device-xensto re-nodes.patch - bnc#823011 - xen: XSA-55: Multiple vulnerabilities in libelf PV kernel handling - bnc#808269 - Fully Virtualized Windows VM install is failed on Ivy Bridge platforms with Xen kernel - bnc#801663 - performance of mirror lvm unsuitable for production block-dmmd - bnc#817904 - [SLES11SP3 BCS Bug] Crashkernel fails to boot after panic on XEN kernel SP3 Beta 4 and RC1 - Upstream AMD Erratum patch from Jan - bnc#813675 - - xen: CVE-2013-1919: XSA-46: Several access permission issues with IRQs for unprivileged guests - bnc#820917 - CVE-2013-2076: xen: Information leak on XSAVE/XRSTOR capable AMD CPUs (XSA-52) - bnc#820919 - CVE-2013-2077: xen: Hypervisor crash due to missing exception recovery on XRSTOR (XSA-53) - bnc#820920 - CVE-2013-2078: xen: Hypervisor crash due to missing exception recovery on XSETBV (XSA-54) - bnc#808085 - aacraid driver panics mapping INT A when booting kernel-xen - bnc#817210 - openSUSE 12.3 Domain 0 doesn't boot with i915 graphics controller under Xen with VT-d enabled - bnc#819416 - xen: CVE-2013-2072: XSA-56: Buffer overflow in xencontrol Python bindings affecting xend - bnc#818183 - xen: CVE-2013-2007: XSA-51: qga set umask 0077 when daemonizing - add lndir to BuildRequires - remove xen.migrate.tools_notify_restore_to_hangup_during_migration_ --abort_if_busy.patch It changed migration protocol and upstream wants a different solution - bnc#802221 - fix xenpaging readd xenpaging.qemu.flush-cache.patch - bnc#808269 - Fully Virtualized Windows VM install is failed on Ivy Bridge platforms with Xen kernel - Additional fix for bnc#816159 CVE-2013-1918-xsa45-followup.patch - bnc#817068 - Xen guest with >1 sr-iov vf won't start - Update to Xen 4.2.2 c/s 26064 The following recent security patches are included in the tarball CVE-2013-0151-xsa34.patch (bnc#797285) CVE-2012-6075-xsa41.patch (bnc#797523) CVE-2013-1917-xsa44.patch (bnc#813673) CVE-2013-1919-xsa46.patch (bnc#813675) - bnc#816159 - xen: CVE-2013-1918: XSA-45: Several long latency operations are not preemptible - bnc#816163 - xen: CVE-2013-1952: XSA-49: VT-d interrupt remapping source validation flaw for bridges - bnc#809662 - can't use pv-grub to start domU (pygrub does work) xen.spec - bnc#814709 - Unable to create XEN virtual machines in SLED 11 SP2 on Kyoto - bnc#813673 - CVE-2013-1917: xen: Xen PV DoS vulnerability with SYSENTER - bnc#813675 - CVE-2013-1919: xen: Several access permission issues with IRQs for unprivileged guests - bnc#814059 - xen: qemu-nbd format-guessing due to missing format specification Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-677 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): xen-debugsource-4.2.2_06-1.16.1 xen-devel-4.2.2_06-1.16.1 xen-kmp-default-4.2.2_06_k3.7.10_1.16-1.16.1 xen-kmp-default-debuginfo-4.2.2_06_k3.7.10_1.16-1.16.1 xen-kmp-desktop-4.2.2_06_k3.7.10_1.16-1.16.1 xen-kmp-desktop-debuginfo-4.2.2_06_k3.7.10_1.16-1.16.1 xen-libs-4.2.2_06-1.16.1 xen-libs-debuginfo-4.2.2_06-1.16.1 xen-tools-domU-4.2.2_06-1.16.1 xen-tools-domU-debuginfo-4.2.2_06-1.16.1 - openSUSE 12.3 (x86_64): xen-4.2.2_06-1.16.1 xen-doc-html-4.2.2_06-1.16.1 xen-doc-pdf-4.2.2_06-1.16.1 xen-libs-32bit-4.2.2_06-1.16.1 xen-libs-debuginfo-32bit-4.2.2_06-1.16.1 xen-tools-4.2.2_06-1.16.1 xen-tools-debuginfo-4.2.2_06-1.16.1 - openSUSE 12.3 (i586): xen-kmp-pae-4.2.2_06_k3.7.10_1.16-1.16.1 xen-kmp-pae-debuginfo-4.2.2_06_k3.7.10_1.16-1.16.1 References: http://support.novell.com/security/cve/CVE-2012-6075.html http://support.novell.com/security/cve/CVE-2013-0151.html http://support.novell.com/security/cve/CVE-2013-1432.html http://support.novell.com/security/cve/CVE-2013-1917.html http://support.novell.com/security/cve/CVE-2013-1918.html http://support.novell.com/security/cve/CVE-2013-1919.html http://support.novell.com/security/cve/CVE-2013-1922.html http://support.novell.com/security/cve/CVE-2013-1952.html http://support.novell.com/security/cve/CVE-2013-2007.html http://support.novell.com/security/cve/CVE-2013-2072.html http://support.novell.com/security/cve/CVE-2013-2076.html http://support.novell.com/security/cve/CVE-2013-2077.html http://support.novell.com/security/cve/CVE-2013-2078.html https://bugzilla.novell.com/797285 https://bugzilla.novell.com/797523 https://bugzilla.novell.com/801663 https://bugzilla.novell.com/802221 https://bugzilla.novell.com/808085 https://bugzilla.novell.com/808269 https://bugzilla.novell.com/809662 https://bugzilla.novell.com/813673 https://bugzilla.novell.com/813675 https://bugzilla.novell.com/814059 https://bugzilla.novell.com/814709 https://bugzilla.novell.com/816159 https://bugzilla.novell.com/816163 https://bugzilla.novell.com/817068 https://bugzilla.novell.com/817210 https://bugzilla.novell.com/817799 https://bugzilla.novell.com/817904 https://bugzilla.novell.com/818183 https://bugzilla.novell.com/819416 https://bugzilla.novell.com/820917 https://bugzilla.novell.com/820919 https://bugzilla.novell.com/820920 https://bugzilla.novell.com/823011 https://bugzilla.novell.com/823608 https://bugzilla.novell.com/824676 https://bugzilla.novell.com/826882

1 0

openSUSE-RU-2013:1403-1: moderate: OpenLP: update to 2.0.2
by maintenance＠opensuse.org 04 Sep '13

04 Sep '13

openSUSE Recommended Update: OpenLP: update to 2.0.2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1403-1 Rating: moderate References: #837706 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: OpenLP was updated to version 2.0.2 (bnc#837706): * Upstream bugfix/stabilization release * Improvements/Bugfixes for UI, Song Importers and more Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-676 - openSUSE 12.2: zypper in -t patch openSUSE-2013-676 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): OpenLP-2.0.2-2.4.1 - openSUSE 12.2 (noarch): OpenLP-2.0.2-1.23.1 References: https://bugzilla.novell.com/837706

1 0

openSUSE-RU-2013:1401-1: libQtWebKit4: Rebuild with debuginfo
by maintenance＠opensuse.org 03 Sep '13

03 Sep '13

openSUSE Recommended Update: libQtWebKit4: Rebuild with debuginfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1401-1 Rating: low References: #835317 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with libQtWebKit4: - bnc#835317: Rebuild libQtWebKit4 with debuginfo Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-675 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libQtWebKit-devel-4.8.4+2.2.0-3.5.1 libQtWebKit4-4.8.4+2.2.0-3.5.1 libQtWebKit4-debuginfo-4.8.4+2.2.0-3.5.1 libQtWebKit4-debugsource-4.8.4+2.2.0-3.5.1 - openSUSE 12.3 (x86_64): libQtWebKit4-32bit-4.8.4+2.2.0-3.5.1 libQtWebKit4-debuginfo-32bit-4.8.4+2.2.0-3.5.1 References: https://bugzilla.novell.com/835317

1 0

openSUSE-RU-2013:1400-1: moderate: udev: correctly load processor modules
by maintenance＠opensuse.org 02 Sep '13

02 Sep '13

openSUSE Recommended Update: udev: correctly load processor modules ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:1400-1 Rating: moderate References: #836569 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: udev was updated to call internal kmod in all cases, to allow processor specific drivers to load. (bnc#836569). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-670 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libgudev-1_0-0-182-4.37.1 libgudev-1_0-0-debuginfo-182-4.37.1 libgudev-1_0-devel-182-4.37.1 libudev-devel-182-4.37.1 libudev0-182-4.37.1 libudev0-debuginfo-182-4.37.1 typelib-1_0-GUdev-1_0-182-4.37.1 udev-182-4.37.1 udev-debuginfo-182-4.37.1 udev-debugsource-182-4.37.1 - openSUSE 12.2 (x86_64): libgudev-1_0-0-32bit-182-4.37.1 libgudev-1_0-0-debuginfo-32bit-182-4.37.1 libudev0-32bit-182-4.37.1 libudev0-debuginfo-32bit-182-4.37.1 References: https://bugzilla.novell.com/836569

1 0