January 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2014:0056-1: moderate: percona-toolkit: 2.2.6 version update
by maintenance＠opensuse.org 14 Jan '14

14 Jan '14

openSUSE Recommended Update: percona-toolkit: 2.2.6 version update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0056-1 Rating: moderate References: #856861 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Percona Toolkit was updated to 2.2.6 [bnc#856861] This is a strongly recommended bugfix release fixing potential data loss. Highlighted fixes: * pt-table-sync deletes child table rows In the worst case, pt-table-sync could delete all rows in child tables. Now pt-table-sync has option --[no]check-child-tables which is on by default. In cases were this can be triggered, pt-table-sync prints a warning and skips the table. * pt-duplicate-key-checker misses exact duplicate unique indexes * pt-online-schema-change gets stuck looking for its own _new table * pt-mysql-summary schema dump prompt can't be disabled pt-mysql-summary no longer prompts to dump and summarize schemas. To do this, you must specify --databases or, a new option, --all-databases. Potentially backwards-incompatible change. Added options: * Added pt-query-digest support for Percona Server slow log rate limiting * Added pt-agent --ping * Added pt-mysql-summary --all-databases * Added pt-stalk --sleep-collect * Added pt-table-sync --[no]check-child-tables Further changes: * PTDEBUG prints some info to STDOUT * pt-agent requires restart after changing MySQL options * pt-agent --install on PXC is not documented * pt-agent --install doesn’t check for previous install * pt-agent --install suggest MySQL user isn’t quoted * pt-agent --install error about slave is confusing * pt-agent --uninstall fails if agent is running * pt-agent docs don’t list privs required for its MySQL user * pt-deadlock-logger docs use pt-fk-error-logger * pt-duplicate-key-checker error when EXPLAIN key_len=0 * pt-query-digest stats prints to STDOUT instead of STDERR * pt-stak error parsing df with NFS Also contains changes from 2.2.5: * Query_time histogram has been added to the pt-query-digest JSON output, not the actual chart but the values necessary to render the chart later, so the values for each bucket. * As of pt-table-checksum 2.2.5, skipped chunks cause a non-zero exit status. An exit status of zero or 32 is equivalent to a zero exit status with skipped chunks in previous versions of the tool. * New --no-drop-triggers option has been implemented for pt-online-schema-change in case users want to rename the tables manually, when the load is low. * New --new-table-name option has been added to pt-online-schema-change which can be used to specify the temporary table name. Bugs Fixed in 2.2.5: * pt-archiver would delete the data even with the --dry-run option. * pt-query-digest didn’t distill LOAD DATA correctly. * pt-query-digest didn’t distill INSERT/REPLACE without INTO correctly. * pt-agent docs were referencing wrong web address. * pt-table-checksum --recursion-method=cluster option would crash if no nodes were found. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-28 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): percona-toolkit-2.2.6-2.4.1 References: https://bugzilla.novell.com/856861

1 0

openSUSE-RU-2014:0055-1: moderate: mutter: Fixed fullscreen flash player problems
by maintenance＠opensuse.org 14 Jan '14

14 Jan '14

openSUSE Recommended Update: mutter: Fixed fullscreen flash player problems ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0055-1 Rating: moderate References: #847909 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: mutter was updated to fix issue with maximizing to fullscreen some flash videos (bnc#847909). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-29 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libmutter0-3.10.2-20.1 libmutter0-debuginfo-3.10.2-20.1 mutter-3.10.2-20.1 mutter-data-3.10.2-20.1 mutter-debuginfo-3.10.2-20.1 mutter-debugsource-3.10.2-20.1 mutter-devel-3.10.2-20.1 typelib-1_0-Meta-3_0-3.10.2-20.1 - openSUSE 13.1 (noarch): mutter-lang-3.10.2-20.1 References: https://bugzilla.novell.com/847909

1 0

openSUSE-RU-2014:0054-1: moderate: arpwatch: create per-interface systemd activation units
by maintenance＠opensuse.org 14 Jan '14

14 Jan '14

openSUSE Recommended Update: arpwatch: create per-interface systemd activation units ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0054-1 Rating: moderate References: #853384 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: arpwatch systemd activation snippets now take a "arpwatch@INTERFACE" syntax. (bnc#853384). This moves the ARPWATCH_INTERFACE meaning from the /etc/sysconfig/arpwatch configuration file to explicit activation via systemd. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-35 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): arpwatch-2.1a15-153.4.1 arpwatch-debuginfo-2.1a15-153.4.1 arpwatch-debugsource-2.1a15-153.4.1 arpwatch-ethercodes-build-2.1a15-153.4.1 References: https://bugzilla.novell.com/853384

1 0

openSUSE-RU-2014:0053-1: moderate: multipath-tools: fixed compatibility links
by maintenance＠opensuse.org 14 Jan '14

14 Jan '14

openSUSE Recommended Update: multipath-tools: fixed compatibility links ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0053-1 Rating: moderate References: #810840 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The multipath-tools were updated to add compability links for older installations (bnc#810840) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-34 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): kpartx-0.4.9-11.4.1 kpartx-debuginfo-0.4.9-11.4.1 multipath-tools-0.4.9-11.4.1 multipath-tools-debuginfo-0.4.9-11.4.1 multipath-tools-debugsource-0.4.9-11.4.1 multipath-tools-devel-0.4.9-11.4.1 References: https://bugzilla.novell.com/810840

1 0

openSUSE-RU-2014:0052-1: moderate: grub2: allow symlinks in grub-mount
by maintenance＠opensuse.org 14 Jan '14

14 Jan '14

openSUSE Recommended Update: grub2: allow symlinks in grub-mount ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0052-1 Rating: moderate References: #803072 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: grub2 was fixed to allow handling of symbolic links in grub-mount (bnc#803072) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-30 - openSUSE 12.3: zypper in -t patch openSUSE-2014-30 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): grub2-2.00-39.8.1 grub2-debuginfo-2.00-39.8.1 grub2-debugsource-2.00-39.8.1 grub2-i386-pc-2.00-39.8.1 grub2-i386-pc-debuginfo-2.00-39.8.1 - openSUSE 13.1 (x86_64): grub2-x86_64-efi-2.00-39.8.1 grub2-x86_64-efi-debuginfo-2.00-39.8.1 - openSUSE 13.1 (i586): grub2-i386-efi-2.00-39.8.1 grub2-i386-efi-debuginfo-2.00-39.8.1 - openSUSE 12.3 (i586 x86_64): grub2-2.00-19.31.1 grub2-debuginfo-2.00-19.31.1 grub2-debugsource-2.00-19.31.1 grub2-efi-2.00-19.31.1 grub2-i386-pc-2.00-19.31.1 grub2-i386-pc-debuginfo-2.00-19.31.1 - openSUSE 12.3 (x86_64): grub2-x86_64-efi-2.00-19.31.1 grub2-x86_64-efi-debuginfo-2.00-19.31.1 - openSUSE 12.3 (i586): grub2-i386-efi-2.00-19.31.1 grub2-i386-efi-debuginfo-2.00-19.31.1 References: https://bugzilla.novell.com/803072

1 0

openSUSE-SU-2014:0049-1: moderate: update for openssl
by opensuse-security＠opensuse.org 12 Jan '14

12 Jan '14

openSUSE Security Update: update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0049-1 Rating: moderate References: #857203 Cross-References: CVE-2013-6450 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of openssl to version 1.0.0l fixes the following security issue: * crash in DTLS renegotiation after packet loss Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-6 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libopenssl-devel-1.0.0l-18.49.1 libopenssl1_0_0-1.0.0l-18.49.1 libopenssl1_0_0-debuginfo-1.0.0l-18.49.1 openssl-1.0.0l-18.49.1 openssl-debuginfo-1.0.0l-18.49.1 openssl-debugsource-1.0.0l-18.49.1 - openSUSE 11.4 (x86_64): libopenssl1_0_0-32bit-1.0.0l-18.49.1 libopenssl1_0_0-debuginfo-32bit-1.0.0l-18.49.1 - openSUSE 11.4 (noarch): openssl-doc-1.0.0l-18.49.1 - openSUSE 11.4 (ia64): libopenssl1_0_0-debuginfo-x86-1.0.0l-18.49.1 libopenssl1_0_0-x86-1.0.0l-18.49.1 References: http://support.novell.com/security/cve/CVE-2013-6450.html https://bugzilla.novell.com/857203

1 0

openSUSE-SU-2014:0048-1: moderate: update for openssl
by opensuse-security＠opensuse.org 11 Jan '14

11 Jan '14

openSUSE Security Update: update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0048-1 Rating: moderate References: #856687 #857203 Cross-References: CVE-2013-6449 CVE-2013-6450 Affected Products: openSUSE 13.1 openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of openssl fixes several security issues. - Fixed bnc#857203, openssl: crash in DTLS renegotiation after packet loss Add file: CVE-2013-6450.patch - Fixed bnc#856687, openssl: crash when using TLS 1.2 Add file: CVE-2013-6449.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-27 - openSUSE 12.3: zypper in -t patch openSUSE-2014-27 - openSUSE 12.2: zypper in -t patch openSUSE-2014-27 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libopenssl-devel-1.0.1e-11.9.1 libopenssl1_0_0-1.0.1e-11.9.1 libopenssl1_0_0-debuginfo-1.0.1e-11.9.1 openssl-1.0.1e-11.9.1 openssl-debuginfo-1.0.1e-11.9.1 openssl-debugsource-1.0.1e-11.9.1 - openSUSE 13.1 (x86_64): libopenssl-devel-32bit-1.0.1e-11.9.1 libopenssl1_0_0-32bit-1.0.1e-11.9.1 libopenssl1_0_0-debuginfo-32bit-1.0.1e-11.9.1 - openSUSE 13.1 (noarch): openssl-doc-1.0.1e-11.9.1 - openSUSE 12.3 (i586 x86_64): libopenssl-devel-1.0.1e-1.21.1 libopenssl1_0_0-1.0.1e-1.21.1 libopenssl1_0_0-debuginfo-1.0.1e-1.21.1 openssl-1.0.1e-1.21.1 openssl-debuginfo-1.0.1e-1.21.1 openssl-debugsource-1.0.1e-1.21.1 - openSUSE 12.3 (x86_64): libopenssl-devel-32bit-1.0.1e-1.21.1 libopenssl1_0_0-32bit-1.0.1e-1.21.1 libopenssl1_0_0-debuginfo-32bit-1.0.1e-1.21.1 - openSUSE 12.3 (noarch): openssl-doc-1.0.1e-1.21.1 - openSUSE 12.2 (i586 x86_64): libopenssl-devel-1.0.1e-2.20.1 libopenssl1_0_0-1.0.1e-2.20.1 libopenssl1_0_0-debuginfo-1.0.1e-2.20.1 openssl-1.0.1e-2.20.1 openssl-debuginfo-1.0.1e-2.20.1 openssl-debugsource-1.0.1e-2.20.1 - openSUSE 12.2 (x86_64): libopenssl-devel-32bit-1.0.1e-2.20.1 libopenssl1_0_0-32bit-1.0.1e-2.20.1 libopenssl1_0_0-debuginfo-32bit-1.0.1e-2.20.1 - openSUSE 12.2 (noarch): openssl-doc-1.0.1e-2.20.1 References: http://support.novell.com/security/cve/CVE-2013-6449.html http://support.novell.com/security/cve/CVE-2013-6450.html https://bugzilla.novell.com/856687 https://bugzilla.novell.com/857203

1 0

openSUSE-RU-2014:0045-1: moderate: libgphoto2: fixed matching of PTP devices
by maintenance＠opensuse.org 10 Jan '14

10 Jan '14

openSUSE Recommended Update: libgphoto2: fixed matching of PTP devices ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0045-1 Rating: moderate References: #852551 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Not explicitly listed PTP cameras were not given the right permissions, as the new hardware database used device class matching instead of interface class matching. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-26 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libgphoto2-6-2.5.2.1-2.10.1 libgphoto2-6-debuginfo-2.5.2.1-2.10.1 libgphoto2-debugsource-2.5.2.1-2.10.1 libgphoto2-devel-2.5.2.1-2.10.1 - openSUSE 13.1 (x86_64): libgphoto2-6-32bit-2.5.2.1-2.10.1 libgphoto2-6-debuginfo-32bit-2.5.2.1-2.10.1 - openSUSE 13.1 (noarch): libgphoto2-6-lang-2.5.2.1-2.10.1 References: https://bugzilla.novell.com/852551

1 0

openSUSE-RU-2014:0040-1: important: acroread: not supported anymore
by maintenance＠opensuse.org 08 Jan '14

08 Jan '14

openSUSE Recommended Update: acroread: not supported anymore ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0040-1 Rating: important References: #843835 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Adobe discontinued the Adobe Reader 9 for Linux in June 2013 and has not fixed and will not fix any further security issues in it. As there is no new version, it is officially out of support. After the SUSE Security Team also Evergreen team strongly recommends to not use it anymore. Installing this update will deinstall the plugin package to avoid automatic exploitation via PDF embedded in webpages or emails. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-4 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586): acroread-9.5.5-22.1 References: https://bugzilla.novell.com/843835

1 0

openSUSE-SU-2014:0039-1: moderate: nagios: fixed a denial of service in CGI executables
by opensuse-security＠opensuse.org 08 Jan '14

08 Jan '14

openSUSE Security Update: nagios: fixed a denial of service in CGI executables ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0039-1 Rating: moderate References: #856837 Cross-References: CVE-2013-7108 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: nagios was updated to fix a possible denial of service in CGI executables. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-5 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): nagios-3.2.3-3.30.1 nagios-debuginfo-3.2.3-3.30.1 nagios-debugsource-3.2.3-3.30.1 nagios-devel-3.2.3-3.30.1 nagios-www-3.2.3-3.30.1 References: http://support.novell.com/security/cve/CVE-2013-7108.html https://bugzilla.novell.com/856837

1 0