- openSUSE Updates

openSUSE-SU-2013:0939-1: moderate: acroread to 9.5.5
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: acroread to 9.5.5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0939-1 Rating: moderate References: #819918 Cross-References: CVE-2013-2549 CVE-2013-2550 CVE-2013-2718 CVE-2013-2719 CVE-2013-2720 CVE-2013-2721 CVE-2013-2722 CVE-2013-2723 CVE-2013-2724 CVE-2013-2725 CVE-2013-2726 CVE-2013-2727 CVE-2013-2729 CVE-2013-2730 CVE-2013-2731 CVE-2013-2732 CVE-2013-2733 CVE-2013-2734 CVE-2013-2735 CVE-2013-2736 CVE-2013-2737 CVE-2013-3337 CVE-2013-3338 CVE-2013-3339 CVE-2013-3340 CVE-2013-3341 CVE-2013-3342 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 27 vulnerabilities is now available. Description: Acroread was updated to 9.5.5 for bnc#819918(swampid#52449). More information can be found on: https://www.adobe.com/support/security/bulletins/apsb13-15.h tml (CVE-2013-2549, CVE-2013-2550, CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721,CVE-2013-2722, CVE-2013-2723, CVE-2013-2724, CVE-2013-2725, CVE-2013-2726, CVE-2013-2727, CVE-2013-2729, CVE-2013-2730, CVE-2013-2731, CVE-2013-2732, CVE-2013-2733, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-2737, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, CVE-2013-3341, CVE-2013-3342) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-82 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586): acroread-9.5.5-18.1 acroread-browser-plugin-9.5.5-18.1 References: http://support.novell.com/security/cve/CVE-2013-2549.html http://support.novell.com/security/cve/CVE-2013-2550.html http://support.novell.com/security/cve/CVE-2013-2718.html http://support.novell.com/security/cve/CVE-2013-2719.html http://support.novell.com/security/cve/CVE-2013-2720.html http://support.novell.com/security/cve/CVE-2013-2721.html http://support.novell.com/security/cve/CVE-2013-2722.html http://support.novell.com/security/cve/CVE-2013-2723.html http://support.novell.com/security/cve/CVE-2013-2724.html http://support.novell.com/security/cve/CVE-2013-2725.html http://support.novell.com/security/cve/CVE-2013-2726.html http://support.novell.com/security/cve/CVE-2013-2727.html http://support.novell.com/security/cve/CVE-2013-2729.html http://support.novell.com/security/cve/CVE-2013-2730.html http://support.novell.com/security/cve/CVE-2013-2731.html http://support.novell.com/security/cve/CVE-2013-2732.html http://support.novell.com/security/cve/CVE-2013-2733.html http://support.novell.com/security/cve/CVE-2013-2734.html http://support.novell.com/security/cve/CVE-2013-2735.html http://support.novell.com/security/cve/CVE-2013-2736.html http://support.novell.com/security/cve/CVE-2013-2737.html http://support.novell.com/security/cve/CVE-2013-3337.html http://support.novell.com/security/cve/CVE-2013-3338.html http://support.novell.com/security/cve/CVE-2013-3339.html http://support.novell.com/security/cve/CVE-2013-3340.html http://support.novell.com/security/cve/CVE-2013-3341.html http://support.novell.com/security/cve/CVE-2013-3342.html https://bugzilla.novell.com/819918

1 0

openSUSE-RU-2013:0938-1: freerdp: Upstream upgrade to bugfix release 1.0.2 and several fixes
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: freerdp: Upstream upgrade to bugfix release 1.0.2 and several fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0938-1 Rating: low References: #785437 #809412 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues with freerdp: - bnc#809412: Update to 1.0.2 + xfreerdp: * new parameter --from-stdin - prompts for unspecified arguments username, password, domain and host. * fix compability with x2go * fix keyboard state in remote app * documentation fixes * fixed crash when started with --authonly + libfreerdp-core: * several memory leaks and double frees were fixed * support for FastPath PDUs up to 32767 * register audio only if plugin is registered * load extensions after argument parsing + libfreerdp-utils: * fixed crash when HOME environment variable wasn't set + xfreerdp-server * deadlock fixed * accept TLSv1 and SSLv3 + smartcard * don't incorrectly set SCARD_STATE_IGNORE + libfreerdp-codec * performance improvement + libfreerdp-gdi * support for PatBlt DPa operation + plugin * ignore CHANNEL_FLAG_SUSPEND/CHANNEL_FLAG_RESUME to prevent possible crash + known problems: * If windows input language is set to german pressing the divde key (/) on the keypad results in minus (-) - bnc#785437: added freerdp-fix-pulse-no-device-name.patch in order to fix a segfault in case device name is not provided - fixed divide key (/) on keypad for 1.0x series Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-360 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): freerdp-1.0.2-11.4.1 freerdp-debuginfo-1.0.2-11.4.1 freerdp-debugsource-1.0.2-11.4.1 freerdp-devel-1.0.2-11.4.1 libfreerdp-1_0-1.0.2-11.4.1 libfreerdp-1_0-debuginfo-1.0.2-11.4.1 libfreerdp-1_0-plugins-1.0.2-11.4.1 libfreerdp-1_0-plugins-debuginfo-1.0.2-11.4.1 References: https://bugzilla.novell.com/785437 https://bugzilla.novell.com/809412

1 0

openSUSE-SU-2013:0937-1: moderate: update for xorg-x11-server
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0937-1 Rating: moderate References: #814653 Cross-References: CVE-2013-1940 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - U_xf86-fix-flush-input-to-work-with-Linux-evdev-device.patch * So when we VT switch back and attempt to flush the input devices, we don't succeed because evdev won't return part of an event, since we were only asking for 4 bytes, we'd only get -EINVAL back. This could later cause events to be flushed that we shouldn't have gotten. This is a fix for CVE-2013-1940. (bnc#814653) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-411 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): xorg-x11-server-7.6_1.13.2-1.5.1 xorg-x11-server-debuginfo-7.6_1.13.2-1.5.1 xorg-x11-server-debugsource-7.6_1.13.2-1.5.1 xorg-x11-server-extra-7.6_1.13.2-1.5.1 xorg-x11-server-extra-debuginfo-7.6_1.13.2-1.5.1 xorg-x11-server-sdk-7.6_1.13.2-1.5.1 References: http://support.novell.com/security/cve/CVE-2013-1940.html https://bugzilla.novell.com/814653

1 0

openSUSE-RU-2013:0936-1: important: kiwi: Update to v5.04.82
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: kiwi: Update to v5.04.82 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0936-1 Rating: important References: #804160 #808962 #812099 #813216 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes the following issues for kiwi: - this patch set includes fixes currently active in SUSE Studio Online - this patch set includes following fixes important for the buildservice to be able to build images * fixed spec file, the mysystems macro for openSUSE was broken because it uses VER=1220 on a 12.3 system * do not consider obsrun as a system group - Following a detailed description of fixes: + fixed spec file, the mysystems macro for openSUSE was broken because it uses VER=1220 on a 12.3 system + do not consider obsrun as a system group + netboot: fixed conflicting use of global variables. * The function updateNeeded set among others the variable sum2 which is used later in another context in suse-linuxrc. At that point it was expected that the variable is empty for the first round in a loop but that's not true if updateNeeded called before the loop sets the variable to some content. Thus updateNeeded should handle variables used locally in the function as real local variables * bnc#813216: fixed setupBootLoaderGrub to write the udev device name into /boot/grub/device.map instead of the unix kernel device name + fixed suseImportBuildKey to also work with keys present in /usr/lib/rpm/gnupg/keys/ + fixed typo nomodeseet -> nomodeset + fixed LVM resize of physical extents, pvresize works only with unix kernel device names and doesn't like udev links + fixed OEMRepartLVM, to pass correctly formated size value to createPartitionerInput, value requires a unit suffix + fixed split createTmpTree, return if lstat returns undef + Revert "- use ext4 filesystem for clic'ed live iso's" on SLES mkfs.ext4 in a loop creates a read-only filesystem. Reverted the clic container to be ext3 again + don't use opensuse:// urls in unit tests. that sucks inside the buildservice if the service redirector is broken + added aarch64 as supported arch to the KIWIXML ctor + make sure imx, dtb and elf files are moved correctly in the boot partition + fixed loading of network drivers in oemboot dump code + arm: make sure elf binaries (.elf) will be extracted + fixed spec file to build correctly for aarch64 + arm: added missing arch links in system/repo + arm: make sure device tree (.dtb) is extraced from the boot image + call syncGPT only if partedTableType is gpt + bnc#812099: make sure splash is deactivated for any dialogs displayed while inside the kiwi initrd + fixed checkmedia call if used in hybrid disk mode. In this mode a disk partition device was passed instead of the entire disk device + moved the check for the Amazon EC2 toolkit after the check for the credentials. If no or not enough credentials are provided the bundling is skipped and that's not an error. Thus it's ok to miss ec2-bundle-image at that point so the check needs to be done after successfully checking for the pre-conditions + fixed addBootEFILive function to work for 32bit ISO's * the boot path was hardcoded to boot/x86_64. With this patch the path to the bootloader files is searched + the getImageType function was renamed in master but not in this branch + added attribute syncMBR in the type element to activate the MBR synchronisation into the GPT for efi images + fixed calculation of inode number if no XML size is set in this case the variable contains the value 'auto' and this can't be used in numeric expressions + make sure zImage kernels for arm gets detected + fixed calculation of inode number in KIWIBoot constructor for vmx images which requested a specific size in the XML description it's required to calculate the inode count from the specified size and not from the size of the of the unpacked root tree. If the requested image size is much bigger than the unpacked root tree it might happen that we run out of inodes very soon in the later image + fixed copyBootCode and suseGFXBoot to be more generic with regards to the different u-boot img/bin files + add boot, repo and template image links for armv6,armv5el and aarch64 + don't use grub2 modules from host system if not found in initrd * instead enable/disable support according to stages (BIOS/EFI) * print better error message in case of missing required stages * allow plain BIOS, plain EFI and EFI+BIOS setup + fixed stage directory check for grub2 + make sure profile information is used in all kiwi modes + fixed call of undefined subroutine &KIWIGlobals::qxx + added support for hybrid EFI disk images based on gptsync. * if gptsync is installed an MBR is added to the GPT table * this allows to boot plain vmx images via legacy BIOS and EFI * this allows to boot oem disk via legacy BIOS and EFI. The repartition code of an EFI oem will overwrite the MBR placed by gptsync. Thus the kiwi initrd tries to re-add the information by calling syncGPT. The funtion requires the presence of gptsync and sfdisk inside the kiwi initrd. Both tools are not part of the kiwi initrd by default * this allows to boot oem install media via legacy BIOS and EFI oem install media are install ISOs and install sticks * please note placing an MBR into the GPT is outside of the EFI standard. It might happen that an EFI firmware refuse to boot a system which includes a MBR inside the GPT. Thus gptsync support should be seen as experimental + bnc#808962: the btrfsctl utility is deprecated and will be removed soon. There was one code path in kiwi which needs to be adapted to understand both btrfs and btrfsctl + added openSUSE 12.3 boot and JeOS templates for armv7 + use kpartx sync mode to make sure devices are created on return of the call Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-354 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): kiwi-5.04.82-1.8.1 kiwi-debugsource-5.04.82-1.8.1 kiwi-desc-isoboot-requires-5.04.82-1.8.1 kiwi-desc-netboot-requires-5.04.82-1.8.1 kiwi-desc-oemboot-requires-5.04.82-1.8.1 kiwi-desc-vmxboot-requires-5.04.82-1.8.1 kiwi-tools-5.04.82-1.8.1 kiwi-tools-debuginfo-5.04.82-1.8.1 - openSUSE 12.3 (noarch): kiwi-desc-isoboot-5.04.82-1.8.1 kiwi-desc-netboot-5.04.82-1.8.1 kiwi-desc-oemboot-5.04.82-1.8.1 kiwi-desc-vmxboot-5.04.82-1.8.1 kiwi-doc-5.04.82-1.8.1 kiwi-instsource-5.04.82-1.8.1 kiwi-media-requires-5.04.82-1.8.1 kiwi-pxeboot-5.04.82-1.8.1 kiwi-templates-5.04.82-1.8.1 References: https://bugzilla.novell.com/804160 https://bugzilla.novell.com/808962 https://bugzilla.novell.com/812099 https://bugzilla.novell.com/813216

1 0

openSUSE-RU-2013:0935-1: important: gnome-themes-standard, gtk2: Fixed regression with the last gnome-themes-standard update
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: gnome-themes-standard, gtk2: Fixed regression with the last gnome-themes-standard update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0935-1 Rating: important References: #815078 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with gnome-themes-standard and gtk2: gnome-themes-standard: - bnc#815078: Update to version 3.6.5 + Fix regression rendering LibreOffice/OpenOffice.org entry backgrounds. - Changes from version 3.6.4: + Fix missing PNG assets in the 3.6.3 tarball. - Changes frmo version 3.6.3: + GTK2 fixes: * Fix toolbar styling in Eclipse/SWT. * Fix completion tooltips styling in Eclipse/SWT. * Fix a bug rendering menus in Opera. * Fix missing shadow for frames with embedded labels. * Fix missing SELECTED states for check/radio assets. * Make it possible to override GtkEntry's background color. * Fix stray shadow for frames with GTK_SHADOW_NONE. * Workaround an OpenOffice.org scrollbar rendering bug. * Require GTK+ 2.24.15 and 3.6.2. gtk2: - bnc#815078: Update to version 2.24.18 (bnc#815078) + Bugs fixed: bgo#586367, bgo#674051, bgo#683072, bgo#683983, bgo#694711, bgo#695003, bgo#695278, bgo#695312, bgo#698563 - Changes from version 2.24.17: + GtkFileChooserButton fixes: * Don't emit file-set signal when the change is not the result of a user action * Don't ever use gtk_file_chooser_get_files * Ensure internal consistency when clearing a model + Bugs fixed: bgo#690247, bgo#692955, bgo#694742. - Changes from version 2.24.16: + Bugs fixed: bgo#694077, bgo#645065. - Changes from version 2.24.15: + Bugs fixed: bgo#626499, bgo#656565, bgo#664640, bgo#669808, bgo#674556, bgo#679883, bgo#683511, bgo#689810, bgo#689982, bgo#690788, bgo#692099, bgo#692554, bgo#692810. + Updated translations. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-436 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): gnome-themes-standard-debugsource-3.6.5-3.8.1 gtk2-debugsource-2.24.18-2.4.2 gtk2-devel-2.24.18-2.4.2 gtk2-devel-debuginfo-2.24.18-2.4.2 gtk2-engine-clearlooks-2.20.2-13.4.4 gtk2-engine-clearlooks-debuginfo-2.20.2-13.4.4 gtk2-engine-crux-2.20.2-13.4.4 gtk2-engine-crux-debuginfo-2.20.2-13.4.4 gtk2-engine-glide-2.20.2-13.4.4 gtk2-engine-glide-debuginfo-2.20.2-13.4.4 gtk2-engine-hcengine-2.20.2-13.4.4 gtk2-engine-hcengine-debuginfo-2.20.2-13.4.4 gtk2-engine-industrial-2.20.2-13.4.4 gtk2-engine-industrial-debuginfo-2.20.2-13.4.4 gtk2-engine-mist-2.20.2-13.4.4 gtk2-engine-mist-debuginfo-2.20.2-13.4.4 gtk2-engine-redmond95-2.20.2-13.4.4 gtk2-engine-redmond95-debuginfo-2.20.2-13.4.4 gtk2-engine-thinice-2.20.2-13.4.4 gtk2-engine-thinice-debuginfo-2.20.2-13.4.4 gtk2-engines-2.20.2-13.4.4 gtk2-engines-debugsource-2.20.2-13.4.4 gtk2-engines-devel-2.20.2-13.4.4 gtk2-immodule-amharic-2.24.18-2.4.2 gtk2-immodule-amharic-debuginfo-2.24.18-2.4.2 gtk2-immodule-inuktitut-2.24.18-2.4.2 gtk2-immodule-inuktitut-debuginfo-2.24.18-2.4.2 gtk2-immodule-multipress-2.24.18-2.4.2 gtk2-immodule-multipress-debuginfo-2.24.18-2.4.2 gtk2-immodule-thai-2.24.18-2.4.2 gtk2-immodule-thai-debuginfo-2.24.18-2.4.2 gtk2-immodule-vietnamese-2.24.18-2.4.2 gtk2-immodule-vietnamese-debuginfo-2.24.18-2.4.2 gtk2-immodule-xim-2.24.18-2.4.2 gtk2-immodule-xim-debuginfo-2.24.18-2.4.2 gtk2-immodules-tigrigna-2.24.18-2.4.2 gtk2-immodules-tigrigna-debuginfo-2.24.18-2.4.2 gtk2-theming-engine-adwaita-3.6.5-3.8.1 gtk2-theming-engine-adwaita-debuginfo-3.6.5-3.8.1 gtk2-tools-2.24.18-2.4.2 gtk2-tools-debuginfo-2.24.18-2.4.2 gtk3-theming-engine-adwaita-3.6.5-3.8.1 gtk3-theming-engine-adwaita-debuginfo-3.6.5-3.8.1 libgtk-2_0-0-2.24.18-2.4.2 libgtk-2_0-0-debuginfo-2.24.18-2.4.2 typelib-1_0-Gtk-2_0-2.24.18-2.4.2 - openSUSE 12.3 (x86_64): gtk2-devel-32bit-2.24.18-2.4.2 gtk2-devel-debuginfo-32bit-2.24.18-2.4.2 gtk2-engine-clearlooks-32bit-2.20.2-13.4.4 gtk2-engine-clearlooks-debuginfo-32bit-2.20.2-13.4.4 gtk2-engine-crux-32bit-2.20.2-13.4.4 gtk2-engine-crux-debuginfo-32bit-2.20.2-13.4.4 gtk2-engine-glide-32bit-2.20.2-13.4.4 gtk2-engine-glide-debuginfo-32bit-2.20.2-13.4.4 gtk2-engine-industrial-32bit-2.20.2-13.4.4 gtk2-engine-industrial-debuginfo-32bit-2.20.2-13.4.4 gtk2-engine-mist-32bit-2.20.2-13.4.4 gtk2-engine-mist-debuginfo-32bit-2.20.2-13.4.4 gtk2-engine-redmond95-32bit-2.20.2-13.4.4 gtk2-engine-redmond95-debuginfo-32bit-2.20.2-13.4.4 gtk2-engine-thinice-32bit-2.20.2-13.4.4 gtk2-engine-thinice-debuginfo-32bit-2.20.2-13.4.4 gtk2-immodule-amharic-32bit-2.24.18-2.4.2 gtk2-immodule-amharic-debuginfo-32bit-2.24.18-2.4.2 gtk2-immodule-inuktitut-32bit-2.24.18-2.4.2 gtk2-immodule-inuktitut-debuginfo-32bit-2.24.18-2.4.2 gtk2-immodule-multipress-32bit-2.24.18-2.4.2 gtk2-immodule-multipress-debuginfo-32bit-2.24.18-2.4.2 gtk2-immodule-thai-32bit-2.24.18-2.4.2 gtk2-immodule-thai-debuginfo-32bit-2.24.18-2.4.2 gtk2-immodule-vietnamese-32bit-2.24.18-2.4.2 gtk2-immodule-vietnamese-debuginfo-32bit-2.24.18-2.4.2 gtk2-immodule-xim-32bit-2.24.18-2.4.2 gtk2-immodule-xim-debuginfo-32bit-2.24.18-2.4.2 gtk2-immodules-tigrigna-32bit-2.24.18-2.4.2 gtk2-immodules-tigrigna-debuginfo-32bit-2.24.18-2.4.2 gtk2-theming-engine-adwaita-32bit-3.6.5-3.8.1 gtk2-theming-engine-adwaita-debuginfo-32bit-3.6.5-3.8.1 gtk2-tools-32bit-2.24.18-2.4.2 gtk2-tools-debuginfo-32bit-2.24.18-2.4.2 gtk3-theming-engine-adwaita-32bit-3.6.5-3.8.1 gtk3-theming-engine-adwaita-debuginfo-32bit-3.6.5-3.8.1 libgtk-2_0-0-32bit-2.24.18-2.4.2 libgtk-2_0-0-debuginfo-32bit-2.24.18-2.4.2 - openSUSE 12.3 (noarch): gnome-themes-accessibility-3.6.5-3.8.1 gnome-themes-standard-lang-3.6.5-3.8.1 gtk2-branding-SLED-12.2-4.4.1 gtk2-branding-openSUSE-12.2-4.4.1 gtk2-branding-upstream-2.24.18-2.4.2 gtk2-data-2.24.18-2.4.2 gtk2-lang-2.24.18-2.4.2 gtk2-metatheme-adwaita-3.6.5-3.8.1 gtk2-theme-clearlooks-2.20.2-13.4.4 gtk2-theme-crux-2.20.2-13.4.4 gtk2-theme-industrial-2.20.2-13.4.4 gtk2-theme-mist-2.20.2-13.4.4 gtk2-theme-redmond95-2.20.2-13.4.4 gtk2-theme-thinice-2.20.2-13.4.4 gtk3-metatheme-adwaita-3.6.5-3.8.1 metatheme-adwaita-common-3.6.5-3.8.1 References: https://bugzilla.novell.com/815078

1 0

openSUSE-SU-2013:0933-1: This submission supersedes the Samba packages currently available from
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: This submission supersedes the Samba packages currently available from ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0933-1 Rating: low References: #786350 #792294 #800782 #802031 #807334 #811975 #815994 Cross-References: CVE-2013-0454 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This submission supersedes the Samba packages currently available from http://download.openSUSE.org/pub/opensuse/update/12.*-test/ - Add support for PFC_FLAG_OBJECT_UUID when parsing packets; (bso#9382). - Fix "guest ok", "force user" and "force group" for guest users; (bso#9746). - Fix 'map untrusted to domain' with NTLMv2; (bso#9817). - Fix crash bug in Winbind; (bso#9854). - Fix panic in nt_printer_publish_ads; (bso#9830). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-435 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): ldapsmb-1.34b-59.5.1 libnetapi-devel-3.6.12-59.5.1 libnetapi0-3.6.12-59.5.1 libnetapi0-debuginfo-3.6.12-59.5.1 libsmbclient-devel-3.6.12-59.5.1 libsmbclient0-3.6.12-59.5.1 libsmbclient0-debuginfo-3.6.12-59.5.1 libsmbsharemodes-devel-3.6.12-59.5.1 libsmbsharemodes0-3.6.12-59.5.1 libsmbsharemodes0-debuginfo-3.6.12-59.5.1 libwbclient-devel-3.6.12-59.5.1 libwbclient0-3.6.12-59.5.1 libwbclient0-debuginfo-3.6.12-59.5.1 samba-3.6.12-59.5.1 samba-client-3.6.12-59.5.1 samba-client-debuginfo-3.6.12-59.5.1 samba-debuginfo-3.6.12-59.5.1 samba-debugsource-3.6.12-59.5.1 samba-devel-3.6.12-59.5.1 samba-krb-printing-3.6.12-59.5.1 samba-krb-printing-debuginfo-3.6.12-59.5.1 samba-winbind-3.6.12-59.5.1 samba-winbind-debuginfo-3.6.12-59.5.1 - openSUSE 12.3 (x86_64): libsmbclient0-32bit-3.6.12-59.5.1 libsmbclient0-debuginfo-32bit-3.6.12-59.5.1 libwbclient0-32bit-3.6.12-59.5.1 libwbclient0-debuginfo-32bit-3.6.12-59.5.1 samba-32bit-3.6.12-59.5.1 samba-client-32bit-3.6.12-59.5.1 samba-client-debuginfo-32bit-3.6.12-59.5.1 samba-debuginfo-32bit-3.6.12-59.5.1 samba-winbind-32bit-3.6.12-59.5.1 samba-winbind-debuginfo-32bit-3.6.12-59.5.1 - openSUSE 12.3 (noarch): samba-doc-3.6.12-59.5.1 References: http://support.novell.com/security/cve/CVE-2013-0454.html https://bugzilla.novell.com/786350 https://bugzilla.novell.com/792294 https://bugzilla.novell.com/800782 https://bugzilla.novell.com/802031 https://bugzilla.novell.com/807334 https://bugzilla.novell.com/811975 https://bugzilla.novell.com/815994

1 0

openSUSE-SU-2013:0932-1: moderate: subversion: security and bugfix minor version update
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: subversion: security and bugfix minor version update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0932-1 Rating: moderate References: #710878 #796050 #813913 Cross-References: CVE-2013-1845 CVE-2013-1846 CVE-2013-1847 CVE-2013-1849 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Subversion received a minor version update to fix remote triggerable vulnerabilities in mod_dav_svn which may result in denial of service. - update to 1.6.21 [bnc#813913], addressing remotely triggerable + CVE-2013-1845: mod_dav_svn excessive memory usage from property changes + CVE-2013-1846: mod_dav_svn crashes on LOCK requests against activity URLs + CVE-2013-1847: mod_dav_svn crashes on LOCK requests against non-existant URLs + CVE-2013-1849: mod_dav_svn crashes on PROPFIND requests against activity URLs - further changes: + mod_dav_svn will omit some property values for activity urls + improve memory usage when committing properties in mod_dav_svn + fix mod_dav_svn runs pre-revprop-change twice + fixed: post-revprop-change errors cancel commit + improved logic in mod_dav_svn's implementation of lock. + fix a compatibility issue with g++ 4.7 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-76 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.6.21-47.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.6.21-47.1 libsvn_auth_kwallet-1-0-1.6.21-47.1 libsvn_auth_kwallet-1-0-debuginfo-1.6.21-47.1 subversion-1.6.21-47.1 subversion-debuginfo-1.6.21-47.1 subversion-debugsource-1.6.21-47.1 subversion-devel-1.6.21-47.1 subversion-perl-1.6.21-47.1 subversion-perl-debuginfo-1.6.21-47.1 subversion-python-1.6.21-47.1 subversion-python-debuginfo-1.6.21-47.1 subversion-ruby-1.6.21-47.1 subversion-ruby-debuginfo-1.6.21-47.1 subversion-server-1.6.21-47.1 subversion-server-debuginfo-1.6.21-47.1 subversion-tools-1.6.21-47.1 subversion-tools-debuginfo-1.6.21-47.1 References: http://support.novell.com/security/cve/CVE-2013-1845.html http://support.novell.com/security/cve/CVE-2013-1846.html http://support.novell.com/security/cve/CVE-2013-1847.html http://support.novell.com/security/cve/CVE-2013-1849.html https://bugzilla.novell.com/710878 https://bugzilla.novell.com/796050 https://bugzilla.novell.com/813913

1 0

openSUSE-RU-2013:0931-1: chocolate-doom: Search /usr/share/doom for IWADs as well
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: chocolate-doom: Search /usr/share/doom for IWADs as well ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0931-1 Rating: low References: #818102 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This udpate fixes the following issue with chocolate-doom: - bnc#818102: Search /usr/share/doom for IWADs as well - Remove unnecessary INSTALL file Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-416 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): chocolate-doom-1.7.0-2.5.1 chocolate-doom-debuginfo-1.7.0-2.5.1 chocolate-doom-debugsource-1.7.0-2.5.1 References: https://bugzilla.novell.com/818102

1 0

openSUSE-RU-2013:0930-1: python3: remove spurious modification of python-3.3.0b1-localpath.patch
by maintenance＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Recommended Update: python3: remove spurious modification of python-3.3.0b1-localpath.patch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0930-1 Rating: low References: #809831 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with python3: - bnc#809831: remove spurious modification of python-3.3.0b1-localpath.patch. That would force installation into /usr/local. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-397 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): libpython3_3m1_0-3.3.0-6.7.1 libpython3_3m1_0-debuginfo-3.3.0-6.7.1 python3-3.3.0-6.7.1 python3-base-3.3.0-6.7.1 python3-base-debuginfo-3.3.0-6.7.1 python3-base-debugsource-3.3.0-6.7.1 python3-curses-3.3.0-6.7.1 python3-curses-debuginfo-3.3.0-6.7.1 python3-dbm-3.3.0-6.7.1 python3-dbm-debuginfo-3.3.0-6.7.1 python3-debuginfo-3.3.0-6.7.1 python3-debugsource-3.3.0-6.7.1 python3-devel-3.3.0-6.7.1 python3-devel-debuginfo-3.3.0-6.7.1 python3-idle-3.3.0-6.7.1 python3-testsuite-3.3.0-6.7.1 python3-testsuite-debuginfo-3.3.0-6.7.1 python3-tk-3.3.0-6.7.1 python3-tk-debuginfo-3.3.0-6.7.1 python3-tools-3.3.0-6.7.1 - openSUSE 12.3 (x86_64): libpython3_3m1_0-32bit-3.3.0-6.7.1 libpython3_3m1_0-debuginfo-32bit-3.3.0-6.7.1 python3-32bit-3.3.0-6.7.1 python3-base-32bit-3.3.0-6.7.1 python3-base-debuginfo-32bit-3.3.0-6.7.1 python3-debuginfo-32bit-3.3.0-6.7.1 - openSUSE 12.3 (noarch): python3-doc-3.3.0-6.7.1 python3-doc-pdf-3.3.0-6.7.1 References: https://bugzilla.novell.com/809831

1 0

openSUSE-SU-2013:0929-1: important: xulrunner to 17.0.6esr
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: xulrunner to 17.0.6esr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0929-1 Rating: important References: #819204 Cross-References: CVE-2013-0801 CVE-2013-1669 CVE-2013-1670 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: Mozilla xulrunner was updated to 17.0.6esr (bnc#819204) * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards * MFSA 2013-42/CVE-2013-1670 (bmo#853709) Privileged access for content level constructor * MFSA 2013-46/CVE-2013-1674 (bmo#860971) Use-after-free with video and onresize event * MFSA 2013-47/CVE-2013-1675 (bmo#866825) Uninitialized functions in DOMSVGZoomEvent * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/ CVE-2013-1679/CVE-2013-1680/CVE-2013-1681 Memory corruption found using Address Sanitizer Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-448 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): mozilla-js-17.0.6-1.12.1 mozilla-js-debuginfo-17.0.6-1.12.1 xulrunner-17.0.6-1.12.1 xulrunner-buildsymbols-17.0.6-1.12.1 xulrunner-debuginfo-17.0.6-1.12.1 xulrunner-debugsource-17.0.6-1.12.1 xulrunner-devel-17.0.6-1.12.1 xulrunner-devel-debuginfo-17.0.6-1.12.1 - openSUSE 12.3 (x86_64): mozilla-js-32bit-17.0.6-1.12.1 mozilla-js-debuginfo-32bit-17.0.6-1.12.1 xulrunner-32bit-17.0.6-1.12.1 xulrunner-debuginfo-32bit-17.0.6-1.12.1 References: http://support.novell.com/security/cve/CVE-2013-0801.html http://support.novell.com/security/cve/CVE-2013-1669.html http://support.novell.com/security/cve/CVE-2013-1670.html http://support.novell.com/security/cve/CVE-2013-1674.html http://support.novell.com/security/cve/CVE-2013-1675.html http://support.novell.com/security/cve/CVE-2013-1676.html http://support.novell.com/security/cve/CVE-2013-1677.html http://support.novell.com/security/cve/CVE-2013-1678.html http://support.novell.com/security/cve/CVE-2013-1679.html http://support.novell.com/security/cve/CVE-2013-1680.html http://support.novell.com/security/cve/CVE-2013-1681.html https://bugzilla.novell.com/819204

1 0