January 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2014:0112-1: backintime: fix crash of kde frontend
by maintenance＠opensuse.org 21 Jan '14

21 Jan '14

openSUSE Recommended Update: backintime: fix crash of kde frontend ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0112-1 Rating: low References: #846526 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with backintime: - bnc#846526: fix crash of kde frontend Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-70 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): backintime-1.0.28-4.4.16 backintime-doc-1.0.28-4.4.16 backintime-gnome-1.0.28-4.4.16 backintime-kde-1.0.28-4.4.16 backintime-lang-1.0.28-4.4.16 References: https://bugzilla.novell.com/846526

1 0

openSUSE-RU-2014:0111-1: zenity: Update to 3.10.2
by maintenance＠opensuse.org 21 Jan '14

21 Jan '14

openSUSE Recommended Update: zenity: Update to 3.10.2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0111-1 Rating: low References: #854638 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with zenity: - bnc#854638: Update to version 3.10.2 + bgo#702535: List box doesn't expand to fill window - Changes from version 3.10.1: + Updated translations. - Changes from version 3.9.91: + bgo#705335: Add a runtime check for X11 + bgo#653468: Fix the broken auto-close option in progress and list dialogs + bgo#698683: Double clicking an item or hitting enter after selecting an item returns it twice Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-68 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): zenity-3.10.2-2.4.1 zenity-debuginfo-3.10.2-2.4.1 zenity-debugsource-3.10.2-2.4.1 - openSUSE 13.1 (noarch): zenity-lang-3.10.2-2.4.1 References: https://bugzilla.novell.com/854638

1 0

openSUSE-RU-2014:0110-1: moderate: lxc: run inet_pton on the addr value without mask
by maintenance＠opensuse.org 21 Jan '14

21 Jan '14

openSUSE Recommended Update: lxc: run inet_pton on the addr value without mask ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0110-1 Rating: moderate References: #851760 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with lxc: - config_ipv6: run inet_pton on the addr value without mask (bnc#851760) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-66 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): lxc-0.9.0-3.5.1 lxc-debuginfo-0.9.0-3.5.1 lxc-debugsource-0.9.0-3.5.1 lxc-devel-0.9.0-3.5.1 References: https://bugzilla.novell.com/851760

1 0

openSUSE-RU-2014:0109-1: tomcat, jakarta-commons-dbcp: Added -src subpackage
by maintenance＠opensuse.org 21 Jan '14

21 Jan '14

openSUSE Recommended Update: tomcat, jakarta-commons-dbcp: Added -src subpackage ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0109-1 Rating: low References: #847505 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with tomcat and jakarta-commons-dbcp: - tomcat: + bnc#847505 * Add tomcat-dbcp.jar back into tomcat lib dir * Add missing commons-pool-tomcat5 symlink - jakarta-commons-dbcp: + bnc#847505 * Create -src subpackage in order to create tomcat-dbcp.jar without build cycles Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-65 - openSUSE 12.3: zypper in -t patch openSUSE-2014-65 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): jakarta-commons-dbcp-1.2.2-108.4.10 jakarta-commons-dbcp-javadoc-1.2.2-108.4.10 jakarta-commons-dbcp-src-1.2.2-105.4.1 jakarta-commons-dbcp-src-1.2.2-108.4.1 tomcat-7.0.42-4.4.6 tomcat-admin-webapps-7.0.42-4.4.6 tomcat-docs-webapp-7.0.42-4.4.6 tomcat-el-2_2-api-7.0.42-4.4.6 tomcat-javadoc-7.0.42-4.4.6 tomcat-jsp-2_2-api-7.0.42-4.4.6 tomcat-jsvc-7.0.42-4.4.6 tomcat-lib-7.0.42-4.4.6 tomcat-servlet-3_0-api-7.0.42-4.4.6 tomcat-webapps-7.0.42-4.4.6 - openSUSE 12.3 (noarch): jakarta-commons-dbcp-1.2.2-105.4.7 jakarta-commons-dbcp-javadoc-1.2.2-105.4.7 jakarta-commons-dbcp-src-1.2.2-105.4.1 tomcat-7.0.35-2.37.4 tomcat-admin-webapps-7.0.35-2.37.4 tomcat-docs-webapp-7.0.35-2.37.4 tomcat-el-2_2-api-7.0.35-2.37.4 tomcat-javadoc-7.0.35-2.37.4 tomcat-jsp-2_2-api-7.0.35-2.37.4 tomcat-jsvc-7.0.35-2.37.4 tomcat-lib-7.0.35-2.37.4 tomcat-servlet-3_0-api-7.0.35-2.37.4 tomcat-webapps-7.0.35-2.37.4 References: https://bugzilla.novell.com/847505

1 0

openSUSE-RU-2014:0108-1: dbus-1(-x11): assure that /var/lib/dbus/machine-id and /etc/machine-id are the same
by maintenance＠opensuse.org 21 Jan '14

21 Jan '14

openSUSE Recommended Update: dbus-1(-x11): assure that /var/lib/dbus/machine-id and /etc/machine-id are the same ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0108-1 Rating: low References: #857377 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with dbus-1(-x11): - bnc#857377: Try hard to assure that /var/lib/dbus/machine-id and /etc/machine-id are the same - Make sure that dbus-1 requires libdbus-1-3 during %post (detected when built against DBus-less systemd 209 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-69 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): dbus-1-1.7.4-4.8.2 dbus-1-debuginfo-1.7.4-4.8.2 dbus-1-debugsource-1.7.4-4.8.1 dbus-1-devel-1.7.4-4.8.1 dbus-1-x11-1.7.4-4.8.2 dbus-1-x11-debuginfo-1.7.4-4.8.2 dbus-1-x11-debugsource-1.7.4-4.8.2 libdbus-1-3-1.7.4-4.8.1 libdbus-1-3-debuginfo-1.7.4-4.8.1 - openSUSE 13.1 (x86_64): dbus-1-debuginfo-32bit-1.7.4-4.8.2 dbus-1-devel-32bit-1.7.4-4.8.1 libdbus-1-3-32bit-1.7.4-4.8.1 libdbus-1-3-debuginfo-32bit-1.7.4-4.8.1 - openSUSE 13.1 (noarch): dbus-1-devel-doc-1.7.4-4.8.2 References: https://bugzilla.novell.com/857377

1 0

openSUSE-RU-2014:0107-1: gdk-pixbuf: Fix xpm icon in a desktop file never shrink itself
by maintenance＠opensuse.org 21 Jan '14

21 Jan '14

openSUSE Recommended Update: gdk-pixbuf: Fix xpm icon in a desktop file never shrink itself ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0107-1 Rating: low References: #848506 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with gdk-pixbuf: - bnc#848506, bgo#686514: xpm icon in a desktop file never shirnk itself Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-67 - openSUSE 12.3: zypper in -t patch openSUSE-2014-67 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): gdk-pixbuf-debugsource-2.30.1-20.1 gdk-pixbuf-devel-2.30.1-20.1 gdk-pixbuf-devel-debuginfo-2.30.1-20.1 gdk-pixbuf-query-loaders-2.30.1-20.1 gdk-pixbuf-query-loaders-debuginfo-2.30.1-20.1 libgdk_pixbuf-2_0-0-2.30.1-20.1 libgdk_pixbuf-2_0-0-debuginfo-2.30.1-20.1 typelib-1_0-GdkPixbuf-2_0-2.30.1-20.1 - openSUSE 13.1 (x86_64): gdk-pixbuf-devel-32bit-2.30.1-20.1 gdk-pixbuf-devel-debuginfo-32bit-2.30.1-20.1 gdk-pixbuf-query-loaders-32bit-2.30.1-20.1 gdk-pixbuf-query-loaders-debuginfo-32bit-2.30.1-20.1 libgdk_pixbuf-2_0-0-32bit-2.30.1-20.1 libgdk_pixbuf-2_0-0-debuginfo-32bit-2.30.1-20.1 - openSUSE 13.1 (noarch): gdk-pixbuf-lang-2.30.1-20.1 - openSUSE 12.3 (i586 x86_64): gdk-pixbuf-debugsource-2.26.5-3.4.1 gdk-pixbuf-devel-2.26.5-3.4.1 gdk-pixbuf-devel-debuginfo-2.26.5-3.4.1 gdk-pixbuf-query-loaders-2.26.5-3.4.1 gdk-pixbuf-query-loaders-debuginfo-2.26.5-3.4.1 libgdk_pixbuf-2_0-0-2.26.5-3.4.1 libgdk_pixbuf-2_0-0-debuginfo-2.26.5-3.4.1 typelib-1_0-GdkPixbuf-2_0-2.26.5-3.4.1 - openSUSE 12.3 (x86_64): gdk-pixbuf-devel-32bit-2.26.5-3.4.1 gdk-pixbuf-devel-debuginfo-32bit-2.26.5-3.4.1 gdk-pixbuf-query-loaders-32bit-2.26.5-3.4.1 gdk-pixbuf-query-loaders-debuginfo-32bit-2.26.5-3.4.1 libgdk_pixbuf-2_0-0-32bit-2.26.5-3.4.1 libgdk_pixbuf-2_0-0-debuginfo-32bit-2.26.5-3.4.1 - openSUSE 12.3 (noarch): gdk-pixbuf-lang-2.26.5-3.4.1 References: https://bugzilla.novell.com/848506

1 0

openSUSE-SU-2014:0100-1: moderate: update for libpng16
by opensuse-security＠opensuse.org 20 Jan '14

20 Jan '14

openSUSE Security Update: update for libpng16 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0100-1 Rating: moderate References: #856522 Cross-References: CVE-2013-6954 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes the following security issue with libpng: - unhandled zero-length PLTE chunk or NULL palette. (bnc#856522, CVE-2013-6954) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-59 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libpng16-16-1.6.6-8.1 libpng16-16-debuginfo-1.6.6-8.1 libpng16-compat-devel-1.6.6-8.1 libpng16-debugsource-1.6.6-8.1 libpng16-devel-1.6.6-8.1 libpng16-tools-1.6.6-8.1 libpng16-tools-debuginfo-1.6.6-8.1 - openSUSE 13.1 (x86_64): libpng16-16-32bit-1.6.6-8.1 libpng16-16-debuginfo-32bit-1.6.6-8.1 libpng16-compat-devel-32bit-1.6.6-8.1 libpng16-devel-32bit-1.6.6-8.1 References: http://support.novell.com/security/cve/CVE-2013-6954.html https://bugzilla.novell.com/856522

1 0

openSUSE-SU-2014:0099-1: moderate: update for openssl
by opensuse-security＠opensuse.org 20 Jan '14

20 Jan '14

openSUSE Security Update: update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0099-1 Rating: moderate References: #857640 Cross-References: CVE-2013-4353 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - Fixed bnc#857640, openssl: TLS record tampering issue can lead to OpenSSL crash Add file: CVE-2013-4353.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-60 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libopenssl-devel-1.0.1e-11.14.1 libopenssl1_0_0-1.0.1e-11.14.1 libopenssl1_0_0-debuginfo-1.0.1e-11.14.1 openssl-1.0.1e-11.14.1 openssl-debuginfo-1.0.1e-11.14.1 openssl-debugsource-1.0.1e-11.14.1 - openSUSE 13.1 (x86_64): libopenssl-devel-32bit-1.0.1e-11.14.1 libopenssl1_0_0-32bit-1.0.1e-11.14.1 libopenssl1_0_0-debuginfo-32bit-1.0.1e-11.14.1 - openSUSE 13.1 (noarch): openssl-doc-1.0.1e-11.14.1 References: http://support.novell.com/security/cve/CVE-2013-4353.html https://bugzilla.novell.com/857640

1 0

openSUSE-RU-2014:0098-1: important: privoxy: Fixed unsuccessful start with systemd
by maintenance＠opensuse.org 20 Jan '14

20 Jan '14

openSUSE Recommended Update: privoxy: Fixed unsuccessful start with systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0098-1 Rating: important References: #849923 #852941 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issue with privoxy: - Fixed unsuccessful start of privoxy with systemd: - bnc#849923: Privoxy isn't chrooted properly, added option --chroot to privoxy.service - bnc#852941: Added ExecStartPre commands to privoxy.service to fix DNS resolution due to missing population of chroot env Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-64 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): privoxy-3.0.21-2.4.1 privoxy-debuginfo-3.0.21-2.4.1 privoxy-debugsource-3.0.21-2.4.1 privoxy-doc-3.0.21-2.4.1 References: https://bugzilla.novell.com/849923 https://bugzilla.novell.com/852941

1 0

openSUSE-SU-2014:0097-1: moderate: update for icinga
by opensuse-security＠opensuse.org 20 Jan '14

20 Jan '14

openSUSE Security Update: update for icinga ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0097-1 Rating: moderate References: #834828 #851619 #856837 Cross-References: CVE-2013-7108 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: - imported upstream version 1.10.2 - includes fix for possible denial of service in CGI executables: CVE-2013-7108 (bnc#856837) * core: Add an Icinga syntax plugin for Vim #4150 - LE/MF * core: Document dropped options log_external_commands_user and event_profiling_enabled #4957 - BA * core: type in spec file on ido2db startup #5000 - MF * core: Build fails: xdata/xodtemplate.c requires stdint.h #5021 - SH * classic ui: fix status output in JSON format not including short and long plugin output properly #5217 - RB * classic ui: fix possible buffer overflows #5250 - RB * classic ui: fix Off-by-one memory access in process_cgivars() #5251 - RB * idoutils: idoutils oracle compile error #5059 - TD * idoutils: Oracle update script 1.10.0 failes while trying to drop nonexisting index #5256 - RB - imported upstream version 1.10.1 * core: add line number information to config verification error messages #4967 - GB * core/idoutils: revert check_source attribute due to mod_gearman manipulating in-memory checkresult list #4958 - MF ** classic ui/idoutils schema: functionality is kept only for Icinga 2 support * classic ui: fix context help on mouseover in cmd.cgi (Marc-Christian Petersen) #4971 - MF * classic ui: correction of colspan value in status.cgi (Bernd Arnold) #4961 - MF * idoutils: fix pgsql update script #4953 - AW/MF * idoutils: fix logentry_type being integer, not unsigned long (thx David Mikulksi) #4953 - MF - fixed file permission of icingastats - bnc#851619 - switch to all unhandled problems per default in index.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2014-58 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): icinga-1.10.2-2.4.1 icinga-debuginfo-1.10.2-2.4.1 icinga-debugsource-1.10.2-2.4.1 icinga-devel-1.10.2-2.4.1 icinga-doc-1.10.2-2.4.1 icinga-idoutils-1.10.2-2.4.1 icinga-idoutils-debuginfo-1.10.2-2.4.1 icinga-idoutils-mysql-1.10.2-2.4.1 icinga-idoutils-oracle-1.10.2-2.4.1 icinga-idoutils-pgsql-1.10.2-2.4.1 icinga-plugins-downtimes-1.10.2-2.4.1 icinga-plugins-eventhandlers-1.10.2-2.4.1 icinga-www-1.10.2-2.4.1 icinga-www-debuginfo-1.10.2-2.4.1 monitoring-tools-1.10.2-2.4.1 monitoring-tools-debuginfo-1.10.2-2.4.1 - openSUSE 12.3 (noarch): nagios-rpm-macros-0.08-2.8.1 References: http://support.novell.com/security/cve/CVE-2013-7108.html https://bugzilla.novell.com/834828 https://bugzilla.novell.com/851619 https://bugzilla.novell.com/856837

1 0