June 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2012:0804-1: ca-certificates-mozilla update
by maintenance＠opensuse.org 29 Jun '12

29 Jun '12

openSUSE Recommended Update: ca-certificates-mozilla update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0804-1 Rating: low References: #760503 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This updates includes the latest SSL root certificates trusted by Mozilla as of 2012-04-25. - new: EC_ACC.pem - new: Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem - new: Security_Communication_RootCA2.pem - removed: TC_TrustCenter_Germany_Class_2_CA.pem - removed: TC_TrustCenter_Germany_Class_3_CA.pem - removed: Verisign_Class_1_Public_Primary_Certification_Authority.1.pe m - removed: Verisign_Class_2_Public_Primary_Certification_Authority.pem - removed: Verisign_Class_4_Public_Primary_Certification_Authority_G2.p em Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-345 - openSUSE 11.4: zypper in -t patch openSUSE-2012-345 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): ca-certificates-mozilla-1.76-3.4.1 - openSUSE 11.4 (noarch): ca-certificates-mozilla-1.76-6.1 References: https://bugzilla.novell.com/760503

1 0

openSUSE-SU-2012:0799-1: moderate: Kernel update
by opensuse-security＠opensuse.org 28 Jun '12

28 Jun '12

openSUSE Security Update: Kernel update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0799-1 Rating: moderate References: #466279 #651219 #653260 #655696 #676204 #681186 #681639 #683671 #689860 #703410 #707332 #711941 #713430 #714455 #717209 #717749 #721366 #726045 #726600 #729247 #730118 #731673 #732908 #737624 #738644 #740448 #740703 #740745 #744658 #745832 #746980 #747038 #747660 #748859 #749569 #750079 #750959 #756203 #756840 #757278 #758243 #758260 #758813 #759545 #760902 #765102 #765320 Cross-References: CVE-2009-4020 CVE-2010-3873 CVE-2010-4164 CVE-2010-4249 CVE-2011-1083 CVE-2011-1173 CVE-2011-2517 CVE-2011-2700 CVE-2011-2909 CVE-2011-2928 CVE-2011-3619 CVE-2011-3638 CVE-2011-4077 CVE-2011-4086 CVE-2011-4330 CVE-2012-0038 CVE-2012-0044 CVE-2012-0207 CVE-2012-1090 CVE-2012-1097 CVE-2012-1146 CVE-2012-2119 CVE-2012-2123 CVE-2012-2136 CVE-2012-2663 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves 25 vulnerabilities and has 22 fixes is now available. Description: This kernel update of the openSUSE 12.1 kernel fixes lots of bugs and security issues. Following issues were fixed: - tcp: drop SYN+FIN messages (bnc#765102). - net: sock: validate data_len before allocating skb in sock_alloc_send_pskb() (bnc#765320, CVE-2012-2136). - fcaps: clear the same personality flags as suid when fcaps are used (bnc#758260 CVE-2012-2123). - macvtap: zerocopy: validate vectors before building skb (bnc#758243 CVE-2012-2119). - hfsplus: Fix potential buffer overflows (bnc#760902 CVE-2009-4020). - xfrm: take net hdr len into account for esp payload size calculation (bnc#759545). - ext4: fix undefined behavior in ext4_fill_flex_info() (bnc#757278). - igb: fix rtnl race in PM resume path (bnc#748859). - ixgbe: add missing rtnl_lock in PM resume path (bnc#748859). - b43: allocate receive buffers big enough for max frame len + offset (bnc#717749). - xenbus: Reject replies with payload > XENSTORE_PAYLOAD_MAX. - xenbus_dev: add missing error checks to watch handling. - hwmon: (coretemp-xen) Fix TjMax detection for older CPUs. - hwmon: (coretemp-xen) Relax target temperature range check. - Refresh other Xen patches. - tlan: add cast needed for proper 64 bit operation (bnc#756840). - dl2k: Tighten ioctl permissions (bnc#758813). - [media] cx22702: Fix signal strength. - fs: cachefiles: Add support for large files in filesystem caching (bnc#747038). - bridge: correct IPv6 checksum after pull (bnc#738644). - bridge: fix a possible use after free (bnc#738644). - bridge: Pseudo-header required for the checksum of ICMPv6 (bnc#738644). - bridge: mcast snooping, fix length check of snooped MLDv1/2 (bnc#738644). - PCI/ACPI: Report ASPM support to BIOS if not disabled from command line (bnc#714455). - ipc/sem.c: fix race with concurrent semtimedop() timeouts and IPC_RMID (bnc#756203). - drm/i915/crt: Remove 0xa0 probe for VGA. - tty_audit: fix tty_audit_add_data live lock on audit disabled (bnc#721366). - drm/i915: suspend fbdev device around suspend/hibernate (bnc#732908). - dlm: Do not allocate a fd for peeloff (bnc#729247). - sctp: Export sctp_do_peeloff (bnc#729247). - i2c-algo-bit: Fix spurious SCL timeouts under heavy load. - patches.fixes/epoll-dont-limit-non-nested.patch: Don't limit non-nested epoll paths (bnc#676204). - Update patches.suse/sd_init.mark_majors_busy.patch (bnc#744658). - igb: Fix for Alt MAC Address feature on 82580 and later devices (bnc#746980). - mark busy sd majors as allocated (bug#744658). - regset: Return -EFAULT, not -EIO, on host-side memory fault (bnc# 750079 CVE-2012-1097). - regset: Prevent null pointer reference on readonly regsets (bnc#750079 CVE-2012-1097). - mm: memcg: Correct unregistring of events attached to the same eventfd (CVE-2012-1146 bnc#750959). - befs: Validate length of long symbolic links (CVE-2011-2928 bnc#713430). - si4713-i2c: avoid potential buffer overflow on si4713 (CVE-2011-2700 bnc#707332). - staging: comedi: fix infoleak to userspace (CVE-2011-2909 bnc#711941). - hfs: add sanity check for file name length (CVE-2011-4330 bnc#731673). - cifs: fix dentry refcount leak when opening a FIFO on lookup (CVE-2012-1090 bnc#749569). - drm: integer overflow in drm_mode_dirtyfb_ioctl() (CVE-2012-0044 bnc#740745). - xfs: fix acl count validation in xfs_acl_from_disk() (CVE-2012-0038 bnc#740703). - xfs: validate acl count (CVE-2012-0038 bnc#740703). - patches.fixes/xfs-fix-possible-memory-corruption-in-xfs_read link: Work around missing xfs_alert(). - xfs: Fix missing xfs_iunlock() on error recovery path in xfs_readlink() (CVE-2011-4077 bnc#726600). - xfs: Fix possible memory corruption in xfs_readlink (CVE-2011-4077 bnc#726600). - ext4: make ext4_split_extent() handle error correctly. - ext4: ext4_ext_convert_to_initialized bug found in extended FSX testing. - ext4: add ext4_split_extent_at() and ext4_split_extent(). - ext4: reimplement convert and split_unwritten (CVE-2011-3638 bnc#726045). - patches.fixes/epoll-limit-paths.patch: epoll: limit paths (bnc#676204 CVE-2011-1083). - patches.kabi/epoll-kabi-fix.patch: epoll: hide kabi change in struct file (bnc#676204 CVE-2011-1083). - NAT/FTP: Fix broken conntrack (bnc#681639 bnc#466279 bnc#747660). - igmp: Avoid zero delay when receiving odd mixture of IGMP queries (bnc#740448 CVE-2012-0207). - jbd2: clear BH_Delay & BH_Unwritten in journal_unmap_buffer (bnc#745832 CVE-2011-4086). - AppArmor: fix oops in apparmor_setprocattr (bnc#717209 CVE-2011-3619). - Refresh patches.suse/SoN-22-netvm.patch. Clean and *working* patches. - Refresh patches.suse/SoN-22-netvm.patch. (bnc#683671) Fix an rcu locking imbalance in the receive path triggered when using vlans. - Fix mangled patch (invalid date) Although accepted by `patch`, this is rejected by `git apply` - Fix mangled diff lines (leading space tab vs tab) Although accepted by `patch`, these are rejected by `git apply` - jbd/jbd2: validate sb->s_first in journal_get_superblock() (bnc#730118). - fsnotify: don't BUG in fsnotify_destroy_mark() (bnc#689860). - Fix patches.fixes/x25-Handle-undersized-fragmented-skbs.patch (CVE-2010-3873 bnc#651219). - Fix patches.fixes/x25-Prevent-skb-overreads-when-checking-call-u ser-da.patch (CVE-2010-3873 bnc#651219). - Fix patches.fixes/x25-Validate-incoming-call-user-data-lengths.p atch (CVE-2010-3873 bnc#651219). - Fix patches.fixes/x25-possible-skb-leak-on-bad-facilities.patch (CVE-2010-3873 bnc#651219 CVE-2010-4164 bnc#653260). - Update patches.fixes/econet-4-byte-infoleak-to-the-network.patch (bnc#681186 CVE-2011-1173). Fix reference. - hwmon: (w83627ehf) Properly report thermal diode sensors. - nl80211: fix overflow in ssid_len (bnc#703410 CVE-2011-2517). - nl80211: fix check for valid SSID size in scan operations (bnc#703410 CVE-2011-2517). - x25: Prevent skb overreads when checking call user data (CVE-2010-3873 bnc#737624). - x25: Handle undersized/fragmented skbs (CVE-2010-3873 bnc#737624). - x25: Validate incoming call user data lengths (CVE-2010-3873 bnc#737624). - x25: possible skb leak on bad facilities (CVE-2010-3873 bnc#737624). - net: Add a flow_cache_flush_deferred function (bnc#737624). - xfrm: avoid possible oopse in xfrm_alloc_dst (bnc#737624). - scm: lower SCM_MAX_FD (bnc#655696 CVE-2010-4249). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-342 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): kernel-debug-2.6.37.6-0.20.1 kernel-debug-base-2.6.37.6-0.20.1 kernel-debug-base-debuginfo-2.6.37.6-0.20.1 kernel-debug-debuginfo-2.6.37.6-0.20.1 kernel-debug-debugsource-2.6.37.6-0.20.1 kernel-debug-devel-2.6.37.6-0.20.1 kernel-debug-devel-debuginfo-2.6.37.6-0.20.1 kernel-default-2.6.37.6-0.20.1 kernel-default-base-2.6.37.6-0.20.1 kernel-default-base-debuginfo-2.6.37.6-0.20.1 kernel-default-debuginfo-2.6.37.6-0.20.1 kernel-default-debugsource-2.6.37.6-0.20.1 kernel-default-devel-2.6.37.6-0.20.1 kernel-default-devel-debuginfo-2.6.37.6-0.20.1 kernel-desktop-2.6.37.6-0.20.1 kernel-desktop-base-2.6.37.6-0.20.1 kernel-desktop-base-debuginfo-2.6.37.6-0.20.1 kernel-desktop-debuginfo-2.6.37.6-0.20.1 kernel-desktop-debugsource-2.6.37.6-0.20.1 kernel-desktop-devel-2.6.37.6-0.20.1 kernel-desktop-devel-debuginfo-2.6.37.6-0.20.1 kernel-ec2-2.6.37.6-0.20.1 kernel-ec2-base-2.6.37.6-0.20.1 kernel-ec2-base-debuginfo-2.6.37.6-0.20.1 kernel-ec2-debuginfo-2.6.37.6-0.20.1 kernel-ec2-debugsource-2.6.37.6-0.20.1 kernel-ec2-devel-2.6.37.6-0.20.1 kernel-ec2-devel-debuginfo-2.6.37.6-0.20.1 kernel-ec2-extra-2.6.37.6-0.20.1 kernel-ec2-extra-debuginfo-2.6.37.6-0.20.1 kernel-syms-2.6.37.6-0.20.1 kernel-trace-2.6.37.6-0.20.1 kernel-trace-base-2.6.37.6-0.20.1 kernel-trace-base-debuginfo-2.6.37.6-0.20.1 kernel-trace-debuginfo-2.6.37.6-0.20.1 kernel-trace-debugsource-2.6.37.6-0.20.1 kernel-trace-devel-2.6.37.6-0.20.1 kernel-trace-devel-debuginfo-2.6.37.6-0.20.1 kernel-vanilla-2.6.37.6-0.20.1 kernel-vanilla-base-2.6.37.6-0.20.1 kernel-vanilla-base-debuginfo-2.6.37.6-0.20.1 kernel-vanilla-debuginfo-2.6.37.6-0.20.1 kernel-vanilla-debugsource-2.6.37.6-0.20.1 kernel-vanilla-devel-2.6.37.6-0.20.1 kernel-vanilla-devel-debuginfo-2.6.37.6-0.20.1 kernel-xen-2.6.37.6-0.20.1 kernel-xen-base-2.6.37.6-0.20.1 kernel-xen-base-debuginfo-2.6.37.6-0.20.1 kernel-xen-debuginfo-2.6.37.6-0.20.1 kernel-xen-debugsource-2.6.37.6-0.20.1 kernel-xen-devel-2.6.37.6-0.20.1 kernel-xen-devel-debuginfo-2.6.37.6-0.20.1 preload-1.2-6.17.1 preload-debuginfo-1.2-6.17.1 preload-debugsource-1.2-6.17.1 preload-kmp-default-1.2_k2.6.37.6_0.20-6.17.1 preload-kmp-default-debuginfo-1.2_k2.6.37.6_0.20-6.17.1 preload-kmp-desktop-1.2_k2.6.37.6_0.20-6.17.1 preload-kmp-desktop-debuginfo-1.2_k2.6.37.6_0.20-6.17.1 - openSUSE 11.4 (noarch): kernel-devel-2.6.37.6-0.20.1 kernel-docs-2.6.37.6-0.20.2 kernel-source-2.6.37.6-0.20.1 kernel-source-vanilla-2.6.37.6-0.20.1 - openSUSE 11.4 (i586): kernel-pae-2.6.37.6-0.20.1 kernel-pae-base-2.6.37.6-0.20.1 kernel-pae-base-debuginfo-2.6.37.6-0.20.1 kernel-pae-debuginfo-2.6.37.6-0.20.1 kernel-pae-debugsource-2.6.37.6-0.20.1 kernel-pae-devel-2.6.37.6-0.20.1 kernel-pae-devel-debuginfo-2.6.37.6-0.20.1 kernel-vmi-2.6.37.6-0.20.1 kernel-vmi-base-2.6.37.6-0.20.1 kernel-vmi-base-debuginfo-2.6.37.6-0.20.1 kernel-vmi-debuginfo-2.6.37.6-0.20.1 kernel-vmi-debugsource-2.6.37.6-0.20.1 kernel-vmi-devel-2.6.37.6-0.20.1 kernel-vmi-devel-debuginfo-2.6.37.6-0.20.1 References: http://support.novell.com/security/cve/CVE-2009-4020.html http://support.novell.com/security/cve/CVE-2010-3873.html http://support.novell.com/security/cve/CVE-2010-4164.html http://support.novell.com/security/cve/CVE-2010-4249.html http://support.novell.com/security/cve/CVE-2011-1083.html http://support.novell.com/security/cve/CVE-2011-1173.html http://support.novell.com/security/cve/CVE-2011-2517.html http://support.novell.com/security/cve/CVE-2011-2700.html http://support.novell.com/security/cve/CVE-2011-2909.html http://support.novell.com/security/cve/CVE-2011-2928.html http://support.novell.com/security/cve/CVE-2011-3619.html http://support.novell.com/security/cve/CVE-2011-3638.html http://support.novell.com/security/cve/CVE-2011-4077.html http://support.novell.com/security/cve/CVE-2011-4086.html http://support.novell.com/security/cve/CVE-2011-4330.html http://support.novell.com/security/cve/CVE-2012-0038.html http://support.novell.com/security/cve/CVE-2012-0044.html http://support.novell.com/security/cve/CVE-2012-0207.html http://support.novell.com/security/cve/CVE-2012-1090.html http://support.novell.com/security/cve/CVE-2012-1097.html http://support.novell.com/security/cve/CVE-2012-1146.html http://support.novell.com/security/cve/CVE-2012-2119.html http://support.novell.com/security/cve/CVE-2012-2123.html http://support.novell.com/security/cve/CVE-2012-2136.html http://support.novell.com/security/cve/CVE-2012-2663.html https://bugzilla.novell.com/466279 https://bugzilla.novell.com/651219 https://bugzilla.novell.com/653260 https://bugzilla.novell.com/655696 https://bugzilla.novell.com/676204 https://bugzilla.novell.com/681186 https://bugzilla.novell.com/681639 https://bugzilla.novell.com/683671 https://bugzilla.novell.com/689860 https://bugzilla.novell.com/703410 https://bugzilla.novell.com/707332 https://bugzilla.novell.com/711941 https://bugzilla.novell.com/713430 https://bugzilla.novell.com/714455 https://bugzilla.novell.com/717209 https://bugzilla.novell.com/717749 https://bugzilla.novell.com/721366 https://bugzilla.novell.com/726045 https://bugzilla.novell.com/726600 https://bugzilla.novell.com/729247 https://bugzilla.novell.com/730118 https://bugzilla.novell.com/731673 https://bugzilla.novell.com/732908 https://bugzilla.novell.com/737624 https://bugzilla.novell.com/738644 https://bugzilla.novell.com/740448 https://bugzilla.novell.com/740703 https://bugzilla.novell.com/740745 https://bugzilla.novell.com/744658 https://bugzilla.novell.com/745832 https://bugzilla.novell.com/746980 https://bugzilla.novell.com/747038 https://bugzilla.novell.com/747660 https://bugzilla.novell.com/748859 https://bugzilla.novell.com/749569 https://bugzilla.novell.com/750079 https://bugzilla.novell.com/750959 https://bugzilla.novell.com/756203 https://bugzilla.novell.com/756840 https://bugzilla.novell.com/757278 https://bugzilla.novell.com/758243 https://bugzilla.novell.com/758260 https://bugzilla.novell.com/758813 https://bugzilla.novell.com/759545 https://bugzilla.novell.com/760902 https://bugzilla.novell.com/765102 https://bugzilla.novell.com/765320

1 0

openSUSE-RU-2012:0788-1: Documentation update
by maintenance＠opensuse.org 25 Jun '12

25 Jun '12

openSUSE Recommended Update: Documentation update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0788-1 Rating: low References: #703489 #706459 #706464 #706475 #706479 #708637 #758401 #763268 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update fixes the following issues for daps, suse-xsl-stylesheets and opensuse-manuals_ru: daps: - Version 1.0.2 (Bugfix Release): * Important: - in order to avoid confusion with short options for daps itself (such as -d for --docconfig and --draft), the subcommands only support long options now. The following short options for subcommands are no longer supported: -c (use --comments) -d (use --draft) -f (use --file) -m (use --meta) -n (use --name) -p (use --pretty) -r (use --remarks) -s (use --show) - the only short option that will remain is -h (help) * Bugfixes: - added proper help texts for subcommands - target warn-images did not work - target missinggraphics did not show all missing images - daps failed with a useless error message when $MAIN was not well-formed. The fix produces a useful error message now - --remarks option did not work with DocBook stylesheets - paths specified on the command line or the config file had to be absolute. The fix now allows to also specify relative paths for all configurable directories and files - COMMENTS_STR, DRAFT_STR and REMARK_STR were not correctly unset when one of these modes was not set on the command line but implied by another mode (e.g. --meta). The result was a wrong filename - target webhelp-dir-name was missing - draft.png was not shown in PDF/HTML draft builds when using the DocBook Stylesheets - Due to a variable name mismatch, the --name option did not work properly - target showvariable exited with an error if requested variable was empty - config options FOP_CONFIG and XEP_CONFIG were not used. The fix renames them to FOP_CONFIG_FILE and XEP_CONFIG_FILE - these variables are used in the wrapper scripts - FOP_WRAPPER and XEP_WRAPPER were not set correctly when DAPSROOT was set - disabled Permalink generation for PDFs (this is an HTML-only feature) - images were not cerrectly references for target jsp - the DEF file was not correctly packaged in target locdrop - fixed webhelp target. Wildcards do not work in classpath expression, resolved them with $(wildcard $(firstword()) - Warning message "DEF file is missing" was issued for targets that do not have a --def-file option - targets package-html and package-pdf failed with an error on desktop files generation - target remaininggraphics always returned an empty list - SVG to SVG conversions generated useless error messages * Stylesheets: - removed obsolete stuff for @role=productname, productnumber, or productnameref * Documentation: - Quick Start Guide: Finished - User Guide: Significant additions, but still work in progress - Updated README.upgrade_from_susedoc_4.x - Version 1.0: * Bugfix: - Use XEP/FOP wrapper scripts by default - Version 1.0 RC5: * Bugfix: - Setting stack size for FOP to 512k in wrapper script, otherwise builds on i586 fail during hyphenation - Version 1.0 RC4: * Bugfix: - Not all links were dereferenced with --static - Version 1.0 RC3: * Bugfixes: - Issuing hint on missing formatter scripts only when verbosity is >= 1 - spec-file: Fixed typo on suse-xsl-stylesheet 'recommends python-xml' needs to be a general requirement - fixed path to callouts and style images for FO * Lots of minor documentation fixes/enhancements - Version 1.0 RC2: * Bugfixes: - issue a hint rather than exiting when XEP/FOP_WRAPPER do not exist - daps_xslt/yelp/*.xsl was not installed by make install - Version 1.0 RC1: * Bugfixes: - fixed minor package building issues - inkscape always returns 0, even in case of an error. Added a workaround, so daps now exits when an image conversion with inkscape fails - --main option should work now - Fixed errors on setting the fallback stylesheets - comments and remarks did not show up in the docs when requested (again ;-(( ) - this is fixed now * much better error handling - daps will now exit when wrong paths or a non existing ROOTID are entered in the user config file or the DC file * significant enhancements to the Documentation (Reference and Quickstart) - Target for index generation had wrong ending (.idx instead of .ind) - Typo in Makefile caused wrong catalog entries - showvariable now only shows the result to make it better suited for script usage - Version 1.0beta2: * Bugfix: - Finally found the correct solution for adding/removing catalog entries in the spec file * Enhancement: webhelp suppport - Version 1.0beta1: * Rebuild large parts to make DAPS distribution-independent. - rewrote Makefile for automake/autoconf => configure; make; make install is now supported - thorough cross-distribution testing is still needed, basic tests have been run on RedHat, Debian and Ubuntu * removal of custom stylesheets - DAPS no longer uses the SUSE stylesheets as a default. It even no longer contains the SUSE stylesheets - they are now available as a separate package (suse-xsl-stylesheets in Documentation:Tools). - By default DAPS uses the generic DocBook stylesheets now - Custom stylesheets such as the SUSE stylesheets can be used by specifying up to four parameters on the command line/the config files: * Styleroot: - Directory containing the custom stylesheets. Must have the same directory structure as the original DocBook stylesheet root directory. Does _not_ need to contain stylesheets for all output formats. If stylesheets are not found, DAPS will automatically fall back to the DocBook stylesheets. - Variable: STYLEROOT - Parameter: --styleroot - Value: absolute path to directory * Fallback styleroot - Custom fallback styleroot. If DAPS cannot find styles for the given output format, it will automatically fall back to the DocBook stylesheets. This config option will add a custom fallback directory with higher priority. The DocBook stylesheets will remain as a last resort, however. - Variable: FALLBACK_STYLEROOT - Parameter: --fb_styleroot - Value: absolute path to directory * CSS files: - Specify CSS files for HTML and/or CSS. By default no CSS file will be used. - Variables: HTML_CSS, EPUB_CSS - Parameter: --css for html and epub targets (daps -d DC html--css CSS ) - Value: absolute path to file * rewrote FOP formatter handling - both supported formatters (FOP/XEP) are now controlled by the following variables: - *_WRAPPER (wrapper script, libexec/daps-fop, libexec/daps-xep by default) - *_CONFIG (xml config file, etc/daps/xep/xep-daps.xml and etc/daps/fop/fop-daps.xml by default. A specific fop-daps.xml is installed for RedHat and SUSE by default) - *_OPTIONS (Command line options) * renaming of parameters and variables - In order to make parameters and variables "self-speaking" the following has been renamed: - File ENV-file to DC-file (doc config file) - Variable BASE_DIR to DOC_DIR (doc dir) => Terminology! - Variable DTDROOT to DAPSROOT (daps installation directory) - Variable FOP_TYPE to FORMATTER - command line switch --fop to --formatter - command line switch -e/--envfile has been renamed to -d/--docconfig (-e/--envfile will still be supported) * global parameter --base_dir no longer supported - Instead of specifying --base_dir with daps, you now need to specify a full path (either relative or absolute) to the DC-file. However, the "magic" that automatically tries to determine the path to a DC-file when you do not specify a path or not even a DC file, still applies. Therefore you only need to specify a valid path to the DC-file in cases where you would have used --base_dir with previous DAPS versions. * --main parameter / MAIN - Instead of calling daps with -d/--docconfig you can also directly specify a MAIN with --main=PATH. You need to specify a valid relative or absolute path. If you just specify a file name, ./xml/$MAIN is automatically assumed. * packaging The former DAPS version has been split into two packages: - daps - suse-xsl-stylesheets (SUSE stylesheets, NovDOC DTD, SUSE aspell wordlist) * other DAPS changes since 0.9.2 in brief: - stylesheet images have been moved to fit the directory structure used in the original stylesheets - new variable STYLEDEVEL which can be used when developing stylesheets. STYLEDEVEL _always_ takes precedence over STYLEROOT and can be set in $USER_CONFIG - Rewrote handling of profiling variables PROFARCH, PROFCONDITION, PROFVENDOR, PROFOS - all 4 are now fully supported (formerly only PROFOS and PROFARCH were fully supported) - created catalog entry to resolve stylesheets in daps_xslt - daps init has been moved to a separate script bin/daps-init - each SUSE stylesheet file now contains a short overview of purpose and parameters - lots of stylesheet bugfixes - license: GPL 2.0 or 3.0 at your choice - fixed target man for man-page generation; man pages are not gzip'ed by default (unless you specify --nogzip); manpage subdirectories (man1, man2,...) are no longer created by default, but can rather be enabled via the --subdirs switch - new parameter --check for target epub checks build with epubcheck - added very basic DocBook5 support (with xslt 1.0 stylesheets only) still a lot to do on this front - Default HTML format is now XHTML 1.0 (instead of HTML 4.01). Use --html4 to generate HTML 4.01 - auto generate SUSE HTML4 stylesheets from XHTML stylesheets - binaries that are only called from withion make have been moved to libexec/ suse-xsl-stylesheets: - Initial update for this package - Adjusted rnc/rng generation in order to allow a custom novdocx.rng that defines start tags allowed - Version 1.9.6.1: - Added new SUSE logo from Scott Corfield - Version 1.9.6: - fo: Fixed xref to external target; use article title instead of book title - fo: Make formal titles float, but don't indent screen (or other objects) Removed test for xep.extensions and moved float=none and clear=both attributes to fo/mode-object.title.markup.xsl (only needed for XEP) - Version 1.9.5: - removes suse aspell wordlist - package is norach again - Version 1.9.4: - Replace Obsolete PI Mechanism for product names and numbers Preliminary, need to test it - Added setinfo in set for Novdoc DTD - Version 1.9.3: - Improve Space Between Formal Titles and Verbatim Text - SUSE Branding: Quick Start Layout (I) - SUSE Branding: Quick Start Layout (II) - SUSE Branding: Stylesheets produce invalid HTML 4.01 Transitional - bnc#703489: Problems with Tables (reported upstream) - bnc#706459: Distance Between Page Number and Left/Right Footer - bnc#706464: Space Between Figure/Procedure XYZ and Title - bnc#706475: Some Issues with Callouts - bnc#706479: Line Break in ulink Elements - bnc#708637: susedoc/daps stylesheets produce invalid HTML 4.01 Transitional (Moved to Ticket#68) - Version 1.9.2: - fixed SGML catalog entry generation when updating the package - fixed path to admon graphics in fo stylesheets - added svg admonition graphics for fo builds - Fixed empty fo:table-cell with fo:block to make FOP happy - Added missing booktitlepage.color.logo parameter to fo stylesheets - Renamed obsolete dtdroot to styleroot in fo stylesheets - fixed broken callout generation for XEP and FOP * Added more flexibilty to flyer layout: headline url can now be set per suse-quickstart pi with attribute url - fixed %postun routine, so catalog entries only get removed on a real package installation - Improved webhelp - Fixed Toc in PDF - Installing aspell wordlist to libdir makes this package architecture-specific - Fixed installation procedure for aspell wordlist - aspell wordlist is now installed in teh correct place - fixed path to fo draft image in fo stylesheets - aspell-en-huge only seems to be available on x86-64, making it a recommendation - Moved suse-aspell wordlist from daps to this package - Moved images/admon/* and images/navig/* to images/ in order to restore compatability to the original DocBook stylesheets - Use absolute images paths in .fo files - Added Catalog entries for the URI to /etc/xml/suse-catalog.xml - Created general URI for SUSE XSLT Stylesheets - More path fixes - Fixed import paths for flyer and pocket - Created fo subdirectories for flyer and pocket - Includes must _not_ point to daps-xslt - Added missing profiling stylesheet - First stable version - Stylesheet files were not packed - Initial version of a seperate SUSE stylesheets package opensuse-manuals_ru: - 758401: Manuals translate update for 12.1 - fix license to be in spdx format - Update help_admin.xml Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-341 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): daps-1.0.2-5.9 opensuse-kvm_ru-pdf-12.1.8762-3.6.1 opensuse-manuals_ru-12.1.8762-3.6.1 opensuse-reference_ru-pdf-12.1.8762-3.6.1 opensuse-security_ru-pdf-12.1.8762-3.6.1 opensuse-startup_ru-pdf-12.1.8762-3.6.1 opensuse-tuning_ru-pdf-12.1.8762-3.6.1 suse-xsl-stylesheets-1.9.6.2-2.3 References: https://bugzilla.novell.com/703489 https://bugzilla.novell.com/706459 https://bugzilla.novell.com/706464 https://bugzilla.novell.com/706475 https://bugzilla.novell.com/706479 https://bugzilla.novell.com/708637 https://bugzilla.novell.com/758401 https://bugzilla.novell.com/763268

1 0

openSUSE-SU-2012:0787-1: moderate: python-httplib2 should use the system-wide CA
by opensuse-security＠opensuse.org 25 Jun '12

25 Jun '12

openSUSE Security Update: python-httplib2 should use the system-wide CA ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0787-1 Rating: moderate References: #761162 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: python-httplib2 used to ship it's own copy of Mozilla NSS certificates, but should use the system-wide ones instead. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-340 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): python-httplib2-0.7.1-3.4.1 References: https://bugzilla.novell.com/761162

1 0

openSUSE-RU-2012:0786-1: iscsitarget: Fix init file so it uses correct PIDFILE
by maintenance＠opensuse.org 25 Jun '12

25 Jun '12

openSUSE Recommended Update: iscsitarget: Fix init file so it uses correct PIDFILE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0786-1 Rating: low References: #743562 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for iscsitarget: - 743562: Fix init file so it uses correct PIDFILE Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-336 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): iscsitarget-1.4.20.3-9.6.1 iscsitarget-debuginfo-1.4.20.3-9.6.1 iscsitarget-debugsource-1.4.20.3-9.6.1 iscsitarget-kmp-default-1.4.20.3_k3.1.10_1.9-9.6.1 iscsitarget-kmp-default-debuginfo-1.4.20.3_k3.1.10_1.9-9.6.1 iscsitarget-kmp-desktop-1.4.20.3_k3.1.10_1.9-9.6.1 iscsitarget-kmp-desktop-debuginfo-1.4.20.3_k3.1.10_1.9-9.6.1 iscsitarget-kmp-xen-1.4.20.3_k3.1.10_1.9-9.6.1 iscsitarget-kmp-xen-debuginfo-1.4.20.3_k3.1.10_1.9-9.6.1 - openSUSE 12.1 (i586): iscsitarget-kmp-pae-1.4.20.3_k3.1.10_1.9-9.6.1 iscsitarget-kmp-pae-debuginfo-1.4.20.3_k3.1.10_1.9-9.6.1 References: https://bugzilla.novell.com/743562

1 0

openSUSE-RU-2012:0785-1: zsh: Fix ksh arrays regression
by maintenance＠opensuse.org 25 Jun '12

25 Jun '12

openSUSE Recommended Update: zsh: Fix ksh arrays regression ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0785-1 Rating: low References: #747676 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for zsh: - 747676: Fix ksh arrays regression Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-337 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): zsh-4.3.12-6.4.1 zsh-debuginfo-4.3.12-6.4.1 zsh-debugsource-4.3.12-6.4.1 zsh-htmldoc-4.3.12-6.4.1 References: https://bugzilla.novell.com/747676

1 0

openSUSE-RU-2012:0784-1: sysvinit: fix deadlock of blogd on shutdown
by maintenance＠opensuse.org 25 Jun '12

25 Jun '12

openSUSE Recommended Update: sysvinit: fix deadlock of blogd on shutdown ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0784-1 Rating: low References: #730193 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a deadlock in blogd that happens on shutdown (bnc#730193). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-338 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): sysvinit-2.88+-66.61.1 sysvinit-debuginfo-2.88+-66.61.1 sysvinit-debugsource-2.88+-66.61.1 sysvinit-init-2.88+-66.61.1 sysvinit-init-debuginfo-2.88+-66.61.1 sysvinit-tools-2.88+-66.61.1 sysvinit-tools-debuginfo-2.88+-66.61.1 References: https://bugzilla.novell.com/730193

1 0

openSUSE-RU-2012:0783-1: SuSEfirewall2: Allow IPv6 multicast control packets
by maintenance＠opensuse.org 25 Jun '12

25 Jun '12

openSUSE Recommended Update: SuSEfirewall2: Allow IPv6 multicast control packets ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0783-1 Rating: low References: #767392 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: SuSEfirewall2 was updated to: - Allow IPv6 Multicast Listener Discovery - fix icmpv6 handling FW_SERVICES_*_* Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-339 - openSUSE 11.4: zypper in -t patch openSUSE-2012-339 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): SuSEfirewall2-3.6.282-1.7.1 - openSUSE 11.4 (noarch): SuSEfirewall2-3.6.261-3.8.1 References: https://bugzilla.novell.com/767392

1 0

openSUSE-SU-2012:0781-1: moderate: Kernel update
by opensuse-security＠opensuse.org 22 Jun '12

22 Jun '12

openSUSE Security Update: Kernel update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0781-1 Rating: moderate References: #700174 #716996 #731720 #732006 #735362 #736268 #745929 #747038 #747404 #748463 #748859 #752460 #754186 #756840 #757783 #757789 #758243 #758260 #758813 #759545 #759554 #760077 #760279 #760860 #760902 #761681 #762991 #762992 #765102 #765320 Cross-References: CVE-2009-4020 CVE-2011-3347 CVE-2012-2119 CVE-2012-2123 CVE-2012-2136 CVE-2012-2373 CVE-2012-2663 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has 23 fixes is now available. Description: This kernel update of the openSUSE 12.1 kernel brings various bug and security fixes. Following issues were fixed: - tcp: drop SYN+FIN messages (bnc#765102, CVE-2012-2663). - net: sock: validate data_len before allocating skb in sock_alloc_send_pskb() (bnc#765320, CVE-2012-2136). - thp: avoid atomic64_read in pmd_read_atomic for 32bit PAE (bnc#762991). - be2net: non-member vlan pkts not received in promiscous mode (bnc#732006 CVE-2011-3347). - fcaps: clear the same personality flags as suid when fcaps are used (bnc#758260 CVE-2012-2123). - macvtap: zerocopy: validate vectors before building skb (bnc#758243 CVE-2012-2119). - macvtap: zerocopy: set SKBTX_DEV_ZEROCOPY only when skb is built successfully (bnc#758243 CVE-2012-2119). - macvtap: zerocopy: put page when fail to get all requested user pages (bnc#758243 CVE-2012-2119). - macvtap: zerocopy: fix offset calculation when building skb (bnc#758243 CVE-2012-2119). - Avoid reading past buffer when calling GETACL (bnc#762992). - Avoid beyond bounds copy while caching ACL (bnc#762992). - Fix length of buffer copied in __nfs4_get_acl_uncached (bnc#762992). - hfsplus: Fix potential buffer overflows (bnc#760902 CVE-2009-4020). - usb/net: rndis: merge command codes. only net/hyperv part - usb/net: rndis: remove ambigous status codes. only net/hyperv part - usb/net: rndis: break out <linux/rndis.h> defines. only net/hyperv part - net/hyperv: Add flow control based on hi/low watermark. - hv: fix return type of hv_post_message(). - Drivers: hv: util: Properly handle version negotiations. - Drivers: hv: Get rid of an unnecessary check in vmbus_prep_negotiate_resp(). - HID: hyperv: Set the hid drvdata correctly. - HID: hid-hyperv: Do not use hid_parse_report() directly. - [SCSI] storvsc: Properly handle errors from the host (bnc#747404). - Delete patches.suse/suse-hv-storvsc-ignore-ata_16.patch. - patches.suse/suse-hv-pata_piix-ignore-disks.patch replace our version of this patch with upstream variant: ata_piix: defer disks to the Hyper-V drivers by default libata: add a host flag to ignore detected ATA devices. - mm: pmd_read_atomic: fix 32bit PAE pmd walk vs pmd_populate SMP race condition (bnc#762991 CVE-2012-2373). - xfrm: take net hdr len into account for esp payload size calculation (bnc#759545). - net/hyperv: Adding cancellation to ensure rndis filter is closed. - xfs: Fix oops on IO error during xlog_recover_process_iunlinks() (bnc#761681). - thp: reduce khugepaged freezing latency (bnc#760860). - igb: fix rtnl race in PM resume path (bnc#748859). - ixgbe: add missing rtnl_lock in PM resume path (bnc#748859). - cdc_ether: Ignore bogus union descriptor for RNDIS devices (bnc#735362). Taking the fix from net-next - Fix kABI breakage due to including proc_fs.h in kernel/fork.c modversion changed because of changes in struct proc_dir_entry (became defined) Refresh patches.fixes/procfs-namespace-pid_ns-fix-leakage-on-fork-fa ilure. - Disabled MMC_TEST (bnc#760077). - Input: ALPS - add semi-MT support for v3 protocol (bnc#716996). - Input: ALPS - add support for protocol versions 3 and 4 (bnc#716996). - Input: ALPS - remove assumptions about packet size (bnc#716996). - Input: ALPS - add protocol version field in alps_model_info (bnc#716996). - Input: ALPS - move protocol information to Documentation (bnc#716996). - sysctl/defaults: kernel.hung_task_timeout -> kernel.hung_task_timeout_secs (bnc#700174) - btrfs: partial revert of truncation improvements (FATE#306586 bnc#748463 bnc#760279). - libata: skip old error history when counting probe trials. - procfs, namespace, pid_ns: fix leakage upon fork() failure (bnc#757783). - cdc-wdm: fix race leading leading to memory corruption (bnc#759554). This patch fixes a race whereby a pointer to a buffer would be overwritten while the buffer was in use leading to a double free and a memory leak. This causes crashes. This bug was introduced in 2.6.34 - netfront: delay gARP until backend switches to Connected. - xenbus: Reject replies with payload > XENSTORE_PAYLOAD_MAX. - xenbus: check availability of XS_RESET_WATCHES command. - xenbus_dev: add missing error checks to watch handling. - drivers/xen/: use strlcpy() instead of strncpy(). - blkfront: properly fail packet requests (bnc#745929). - Linux 3.1.10. - Update Xen config files. - Refresh other Xen patches. - tlan: add cast needed for proper 64 bit operation (bnc#756840). - dl2k: Tighten ioctl permissions (bnc#758813). - mqueue: fix a vfsmount longterm reference leak (bnc#757783). - cciss: Add IRQF_SHARED back in for the non-MSI(X) interrupt handler (bnc#757789). - procfs: fix a vfsmount longterm reference leak (bnc#757783). - uwb: fix error handling (bnc#731720). This fixes a kernel error on unplugging an uwb dongle - uwb: fix use of del_timer_sync() in interrupt (bnc#731720). This fixes a kernel warning on plugging in an uwb dongle - acer-wmi: Detect communication hot key number. - acer-wmi: replaced the hard coded bitmap by the communication devices bitmap from SMBIOS. - acer-wmi: add ACER_WMID_v2 interface flag to represent new notebooks. - acer-wmi: No wifi rfkill on Sony machines. - acer-wmi: No wifi rfkill on Lenovo machines. - [media] cx22702: Fix signal strength. - fs: cachefiles: Add support for large files in filesystem caching (bnc#747038). - Drivers: scsi: storvsc: Account for in-transit packets in the RESET path. - CPU hotplug, cpusets, suspend: Don't touch cpusets during suspend/resume (bnc#752460). - net: fix a potential rcu_read_lock() imbalance in rt6_fill_node() (bnc#754186, bnc#736268). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-335 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): kernel-debug-3.1.10-1.13.1 kernel-debug-base-3.1.10-1.13.1 kernel-debug-base-debuginfo-3.1.10-1.13.1 kernel-debug-debuginfo-3.1.10-1.13.1 kernel-debug-debugsource-3.1.10-1.13.1 kernel-debug-devel-3.1.10-1.13.1 kernel-debug-devel-debuginfo-3.1.10-1.13.1 kernel-default-3.1.10-1.13.1 kernel-default-base-3.1.10-1.13.1 kernel-default-base-debuginfo-3.1.10-1.13.1 kernel-default-debuginfo-3.1.10-1.13.1 kernel-default-debugsource-3.1.10-1.13.1 kernel-default-devel-3.1.10-1.13.1 kernel-default-devel-debuginfo-3.1.10-1.13.1 kernel-desktop-3.1.10-1.13.1 kernel-desktop-base-3.1.10-1.13.1 kernel-desktop-base-debuginfo-3.1.10-1.13.1 kernel-desktop-debuginfo-3.1.10-1.13.1 kernel-desktop-debugsource-3.1.10-1.13.1 kernel-desktop-devel-3.1.10-1.13.1 kernel-desktop-devel-debuginfo-3.1.10-1.13.1 kernel-ec2-3.1.10-1.13.1 kernel-ec2-base-3.1.10-1.13.1 kernel-ec2-base-debuginfo-3.1.10-1.13.1 kernel-ec2-debuginfo-3.1.10-1.13.1 kernel-ec2-debugsource-3.1.10-1.13.1 kernel-ec2-devel-3.1.10-1.13.1 kernel-ec2-devel-debuginfo-3.1.10-1.13.1 kernel-ec2-extra-3.1.10-1.13.1 kernel-ec2-extra-debuginfo-3.1.10-1.13.1 kernel-syms-3.1.10-1.13.1 kernel-trace-3.1.10-1.13.1 kernel-trace-base-3.1.10-1.13.1 kernel-trace-base-debuginfo-3.1.10-1.13.1 kernel-trace-debuginfo-3.1.10-1.13.1 kernel-trace-debugsource-3.1.10-1.13.1 kernel-trace-devel-3.1.10-1.13.1 kernel-trace-devel-debuginfo-3.1.10-1.13.1 kernel-vanilla-3.1.10-1.13.1 kernel-vanilla-base-3.1.10-1.13.1 kernel-vanilla-base-debuginfo-3.1.10-1.13.1 kernel-vanilla-debuginfo-3.1.10-1.13.1 kernel-vanilla-debugsource-3.1.10-1.13.1 kernel-vanilla-devel-3.1.10-1.13.1 kernel-vanilla-devel-debuginfo-3.1.10-1.13.1 kernel-xen-3.1.10-1.13.1 kernel-xen-base-3.1.10-1.13.1 kernel-xen-base-debuginfo-3.1.10-1.13.1 kernel-xen-debuginfo-3.1.10-1.13.1 kernel-xen-debugsource-3.1.10-1.13.1 kernel-xen-devel-3.1.10-1.13.1 kernel-xen-devel-debuginfo-3.1.10-1.13.1 - openSUSE 12.1 (noarch): kernel-devel-3.1.10-1.13.1 kernel-docs-3.1.10-1.13.2 kernel-source-3.1.10-1.13.1 kernel-source-vanilla-3.1.10-1.13.1 - openSUSE 12.1 (i586): kernel-pae-3.1.10-1.13.1 kernel-pae-base-3.1.10-1.13.1 kernel-pae-base-debuginfo-3.1.10-1.13.1 kernel-pae-debuginfo-3.1.10-1.13.1 kernel-pae-debugsource-3.1.10-1.13.1 kernel-pae-devel-3.1.10-1.13.1 kernel-pae-devel-debuginfo-3.1.10-1.13.1 References: http://support.novell.com/security/cve/CVE-2009-4020.html http://support.novell.com/security/cve/CVE-2011-3347.html http://support.novell.com/security/cve/CVE-2012-2119.html http://support.novell.com/security/cve/CVE-2012-2123.html http://support.novell.com/security/cve/CVE-2012-2136.html http://support.novell.com/security/cve/CVE-2012-2373.html http://support.novell.com/security/cve/CVE-2012-2663.html https://bugzilla.novell.com/700174 https://bugzilla.novell.com/716996 https://bugzilla.novell.com/731720 https://bugzilla.novell.com/732006 https://bugzilla.novell.com/735362 https://bugzilla.novell.com/736268 https://bugzilla.novell.com/745929 https://bugzilla.novell.com/747038 https://bugzilla.novell.com/747404 https://bugzilla.novell.com/748463 https://bugzilla.novell.com/748859 https://bugzilla.novell.com/752460 https://bugzilla.novell.com/754186 https://bugzilla.novell.com/756840 https://bugzilla.novell.com/757783 https://bugzilla.novell.com/757789 https://bugzilla.novell.com/758243 https://bugzilla.novell.com/758260 https://bugzilla.novell.com/758813 https://bugzilla.novell.com/759545 https://bugzilla.novell.com/759554 https://bugzilla.novell.com/760077 https://bugzilla.novell.com/760279 https://bugzilla.novell.com/760860 https://bugzilla.novell.com/760902 https://bugzilla.novell.com/761681 https://bugzilla.novell.com/762991 https://bugzilla.novell.com/762992 https://bugzilla.novell.com/765102 https://bugzilla.novell.com/765320

1 0

openSUSE-SU-2012:0760-1: important: MozillaFirefox, MozillaThunderbird, mozilla-nss, seamonkey, xulrunner: June
by opensuse-security＠opensuse.org 19 Jun '12

19 Jun '12

openSUSE Security Update: MozillaFirefox, MozillaThunderbird, mozilla-nss, seamonkey, xulrunner: June ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0760-1 Rating: important References: #765204 Cross-References: CVE-2011-3101 CVE-2012-0441 CVE-2012-1937 CVE-2012-1938 CVE-2012-1940 CVE-2012-1941 CVE-2012-1944 CVE-2012-1945 CVE-2012-1946 CVE-2012-1947 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: Changes in MozillaFirefox: - update to Firefox 13.0 (bnc#765204) * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101 Miscellaneous memory safety hazards * MFSA 2012-36/CVE-2012-1944 (bmo#751422) Content Security Policy inline-script bypass * MFSA 2012-37/CVE-2012-1945 (bmo#670514) Information disclosure though Windows file shares and shortcut files * MFSA 2012-38/CVE-2012-1946 (bmo#750109) Use-after-free while replacing/inserting a node in a document * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941 Buffer overflow and use-after-free issues found using Address Sanitizer - require NSS 3.13.4 * MFSA 2012-39/CVE-2012-0441 (bmo#715073) - fix sound notifications when filename/path contains a whitespace (bmo#749739) - fix build on arm - reenabled crashreporter for Factory/12.2 (fix in mozilla-gcc47.patch) Changes in MozillaThunderbird: - update to Thunderbird 13.0 (bnc#765204) * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101 Miscellaneous memory safety hazards * MFSA 2012-36/CVE-2012-1944 (bmo#751422) Content Security Policy inline-script bypass * MFSA 2012-37/CVE-2012-1945 (bmo#670514) Information disclosure though Windows file shares and shortcut files * MFSA 2012-38/CVE-2012-1946 (bmo#750109) Use-after-free while replacing/inserting a node in a document * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941 Buffer overflow and use-after-free issues found using Address Sanitizer - require NSS 3.13.4 * MFSA 2012-39/CVE-2012-0441 (bmo#715073) - fix build with system NSPR (mozilla-system-nspr.patch) - add dependentlibs.list for improved XRE startup - update enigmail to 1.4.2 - reenabled crashreporter for Factory/12.2 (fix in mozilla-gcc47.patch) - update to Thunderbird 12.0.1 * fix regressions - POP3 filters (bmo#748090) - Message Body not loaded when using "Fetch Headers Only" (bmo#748865) - Received messages contain parts of other messages with movemail account (bmo#748726) - New mail notification issue (bmo#748997) - crash in nsMsgDatabase::MatchDbName (bmo#748432) - fixed build with gcc 4.7 Changes in seamonkey: - update to Seamonkey 2.10 (bnc#765204) * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101 Miscellaneous memory safety hazards * MFSA 2012-36/CVE-2012-1944 (bmo#751422) Content Security Policy inline-script bypass * MFSA 2012-37/CVE-2012-1945 (bmo#670514) Information disclosure though Windows file shares and shortcut files * MFSA 2012-38/CVE-2012-1946 (bmo#750109) Use-after-free while replacing/inserting a node in a document * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941 Buffer overflow and use-after-free issues found using Address Sanitizer - requires NSS 3.13.4 * MFSA 2012-39/CVE-2012-0441 (bmo#715073) - update to Seamonkey 2.9.1 * fix regressions - POP3 filters (bmo#748090) - Message Body not loaded when using "Fetch Headers Only" (bmo#748865) - Received messages contain parts of other messages with movemail account (bmo#748726) - New mail notification issue (bmo#748997) - crash in nsMsgDatabase::MatchDbName (bmo#748432) - fixed build with gcc 4.7 Changes in mozilla-nss: - update to 3.13.5 RTM - update to 3.13.4 RTM * fixed some bugs * fixed cert verification regression in PKIX mode (bmo#737802) introduced in 3.13.2 Changes in xulrunner: - update to 13.0 (bnc#765204) * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101 Miscellaneous memory safety hazards * MFSA 2012-36/CVE-2012-1944 (bmo#751422) Content Security Policy inline-script bypass * MFSA 2012-37/CVE-2012-1945 (bmo#670514) Information disclosure though Windows file shares and shortcut files * MFSA 2012-38/CVE-2012-1946 (bmo#750109) Use-after-free while replacing/inserting a node in a document * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941 Buffer overflow and use-after-free issues found using Address Sanitizer - require NSS 3.13.4 * MFSA 2012-39/CVE-2012-0441 (bmo#715073) - reenabled crashreporter for Factory/12.2 (fixed in mozilla-gcc47.patch) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-333 - openSUSE 11.4: zypper in -t patch openSUSE-2012-333 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 ia64 x86_64): mozilla-nss-debugsource-3.13.5-9.16.1 xulrunner-debugsource-13.0-2.29.2 - openSUSE 12.1 (i586 x86_64): MozillaFirefox-13.0-2.30.1 MozillaFirefox-branding-upstream-13.0-2.30.1 MozillaFirefox-buildsymbols-13.0-2.30.1 MozillaFirefox-debuginfo-13.0-2.30.1 MozillaFirefox-debugsource-13.0-2.30.1 MozillaFirefox-devel-13.0-2.30.1 MozillaFirefox-translations-common-13.0-2.30.1 MozillaFirefox-translations-other-13.0-2.30.1 MozillaThunderbird-13.0-33.23.2 MozillaThunderbird-buildsymbols-13.0-33.23.2 MozillaThunderbird-debuginfo-13.0-33.23.2 MozillaThunderbird-debugsource-13.0-33.23.2 MozillaThunderbird-devel-13.0-33.23.2 MozillaThunderbird-translations-common-13.0-33.23.2 MozillaThunderbird-translations-other-13.0-33.23.2 chmsee-1.99.08-2.18.3 chmsee-debuginfo-1.99.08-2.18.3 chmsee-debugsource-1.99.08-2.18.3 enigmail-1.4.2+13.0-33.23.2 enigmail-debuginfo-1.4.2+13.0-33.23.2 libfreebl3-3.13.5-9.16.1 libfreebl3-debuginfo-3.13.5-9.16.1 libsoftokn3-3.13.5-9.16.1 libsoftokn3-debuginfo-3.13.5-9.16.1 mozilla-js-13.0-2.29.2 mozilla-js-debuginfo-13.0-2.29.2 mozilla-nss-3.13.5-9.16.1 mozilla-nss-certs-3.13.5-9.16.1 mozilla-nss-certs-debuginfo-3.13.5-9.16.1 mozilla-nss-debuginfo-3.13.5-9.16.1 mozilla-nss-devel-3.13.5-9.16.1 mozilla-nss-sysinit-3.13.5-9.16.1 mozilla-nss-sysinit-debuginfo-3.13.5-9.16.1 mozilla-nss-tools-3.13.5-9.16.1 mozilla-nss-tools-debuginfo-3.13.5-9.16.1 seamonkey-2.10-2.21.2 seamonkey-debuginfo-2.10-2.21.2 seamonkey-debugsource-2.10-2.21.2 seamonkey-dom-inspector-2.10-2.21.2 seamonkey-irc-2.10-2.21.2 seamonkey-translations-common-2.10-2.21.2 seamonkey-translations-other-2.10-2.21.2 seamonkey-venkman-2.10-2.21.2 xulrunner-13.0-2.29.2 xulrunner-buildsymbols-13.0-2.29.2 xulrunner-debuginfo-13.0-2.29.2 xulrunner-devel-13.0-2.29.2 xulrunner-devel-debuginfo-13.0-2.29.2 - openSUSE 12.1 (x86_64): libfreebl3-32bit-3.13.5-9.16.1 libfreebl3-debuginfo-32bit-3.13.5-9.16.1 libsoftokn3-32bit-3.13.5-9.16.1 libsoftokn3-debuginfo-32bit-3.13.5-9.16.1 mozilla-js-32bit-13.0-2.29.2 mozilla-js-debuginfo-32bit-13.0-2.29.2 mozilla-nss-32bit-3.13.5-9.16.1 mozilla-nss-certs-32bit-3.13.5-9.16.1 mozilla-nss-certs-debuginfo-32bit-3.13.5-9.16.1 mozilla-nss-debuginfo-32bit-3.13.5-9.16.1 mozilla-nss-sysinit-32bit-3.13.5-9.16.1 mozilla-nss-sysinit-debuginfo-32bit-3.13.5-9.16.1 xulrunner-32bit-13.0-2.29.2 xulrunner-debuginfo-32bit-13.0-2.29.2 - openSUSE 12.1 (ia64): libfreebl3-debuginfo-x86-3.13.5-9.16.1 libfreebl3-debuginfo-x86-debuginfo-3.13.5-9.16.1 libfreebl3-x86-3.13.5-9.16.1 libsoftokn3-debuginfo-x86-3.13.5-9.16.1 libsoftokn3-debuginfo-x86-debuginfo-3.13.5-9.16.1 libsoftokn3-x86-3.13.5-9.16.1 mozilla-js-debuginfo-x86-13.0-2.29.2 mozilla-js-debuginfo-x86-debuginfo-13.0-2.29.2 mozilla-js-x86-13.0-2.29.2 mozilla-nss-certs-debuginfo-x86-3.13.5-9.16.1 mozilla-nss-certs-debuginfo-x86-debuginfo-3.13.5-9.16.1 mozilla-nss-certs-x86-3.13.5-9.16.1 mozilla-nss-debuginfo-x86-3.13.5-9.16.1 mozilla-nss-debuginfo-x86-debuginfo-3.13.5-9.16.1 mozilla-nss-sysinit-debuginfo-x86-3.13.5-9.16.1 mozilla-nss-sysinit-debuginfo-x86-debuginfo-3.13.5-9.16.1 mozilla-nss-sysinit-x86-3.13.5-9.16.1 mozilla-nss-x86-3.13.5-9.16.1 xulrunner-debuginfo-x86-13.0-2.29.2 xulrunner-debuginfo-x86-debuginfo-13.0-2.29.2 xulrunner-x86-13.0-2.29.2 - openSUSE 11.4 (i586 ia64 x86_64): mozilla-nss-debugsource-3.13.5-44.1 - openSUSE 11.4 (i586 x86_64): MozillaFirefox-13.0-25.2 MozillaFirefox-branding-upstream-13.0-25.2 MozillaFirefox-buildsymbols-13.0-25.2 MozillaFirefox-debuginfo-13.0-25.2 MozillaFirefox-debugsource-13.0-25.2 MozillaFirefox-devel-13.0-25.2 MozillaFirefox-translations-common-13.0-25.2 MozillaFirefox-translations-other-13.0-25.2 MozillaThunderbird-13.0-21.2 MozillaThunderbird-buildsymbols-13.0-21.2 MozillaThunderbird-debuginfo-13.0-21.2 MozillaThunderbird-debugsource-13.0-21.2 MozillaThunderbird-devel-13.0-21.2 MozillaThunderbird-translations-common-13.0-21.2 MozillaThunderbird-translations-other-13.0-21.2 enigmail-1.4.2+13.0-21.2 enigmail-debuginfo-1.4.2+13.0-21.2 libfreebl3-3.13.5-44.1 libfreebl3-debuginfo-3.13.5-44.1 libsoftokn3-3.13.5-44.1 libsoftokn3-debuginfo-3.13.5-44.1 mozilla-nss-3.13.5-44.1 mozilla-nss-certs-3.13.5-44.1 mozilla-nss-certs-debuginfo-3.13.5-44.1 mozilla-nss-debuginfo-3.13.5-44.1 mozilla-nss-devel-3.13.5-44.1 mozilla-nss-sysinit-3.13.5-44.1 mozilla-nss-sysinit-debuginfo-3.13.5-44.1 mozilla-nss-tools-3.13.5-44.1 mozilla-nss-tools-debuginfo-3.13.5-44.1 seamonkey-2.10-21.2 seamonkey-debuginfo-2.10-21.2 seamonkey-debugsource-2.10-21.2 seamonkey-dom-inspector-2.10-21.2 seamonkey-irc-2.10-21.2 seamonkey-translations-common-2.10-21.2 seamonkey-translations-other-2.10-21.2 seamonkey-venkman-2.10-21.2 - openSUSE 11.4 (x86_64): libfreebl3-32bit-3.13.5-44.1 libfreebl3-debuginfo-32bit-3.13.5-44.1 libsoftokn3-32bit-3.13.5-44.1 libsoftokn3-debuginfo-32bit-3.13.5-44.1 mozilla-nss-32bit-3.13.5-44.1 mozilla-nss-certs-32bit-3.13.5-44.1 mozilla-nss-certs-debuginfo-32bit-3.13.5-44.1 mozilla-nss-debuginfo-32bit-3.13.5-44.1 mozilla-nss-sysinit-32bit-3.13.5-44.1 mozilla-nss-sysinit-debuginfo-32bit-3.13.5-44.1 - openSUSE 11.4 (ia64): libfreebl3-debuginfo-x86-3.13.5-44.1 libfreebl3-debuginfo-x86-debuginfo-3.13.5-44.1 libfreebl3-x86-3.13.5-44.1 libsoftokn3-debuginfo-x86-3.13.5-44.1 libsoftokn3-debuginfo-x86-debuginfo-3.13.5-44.1 libsoftokn3-x86-3.13.5-44.1 mozilla-nss-certs-debuginfo-x86-3.13.5-44.1 mozilla-nss-certs-debuginfo-x86-debuginfo-3.13.5-44.1 mozilla-nss-certs-x86-3.13.5-44.1 mozilla-nss-debuginfo-x86-3.13.5-44.1 mozilla-nss-debuginfo-x86-debuginfo-3.13.5-44.1 mozilla-nss-sysinit-debuginfo-x86-3.13.5-44.1 mozilla-nss-sysinit-debuginfo-x86-debuginfo-3.13.5-44.1 mozilla-nss-sysinit-x86-3.13.5-44.1 mozilla-nss-x86-3.13.5-44.1 References: http://support.novell.com/security/cve/CVE-2011-3101.html http://support.novell.com/security/cve/CVE-2012-0441.html http://support.novell.com/security/cve/CVE-2012-1937.html http://support.novell.com/security/cve/CVE-2012-1938.html http://support.novell.com/security/cve/CVE-2012-1940.html http://support.novell.com/security/cve/CVE-2012-1941.html http://support.novell.com/security/cve/CVE-2012-1944.html http://support.novell.com/security/cve/CVE-2012-1945.html http://support.novell.com/security/cve/CVE-2012-1946.html http://support.novell.com/security/cve/CVE-2012-1947.html https://bugzilla.novell.com/765204

1 0