March 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2014:0465-1: qinternet: fix png icons
by maintenance＠opensuse.org 31 Mar '14

31 Mar '14

openSUSE Recommended Update: qinternet: fix png icons ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0465-1 Rating: low References: #852862 #864395 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issue with qinternet: - bnc#852862, bnc#864395: libpng16 introduced an format restriction for PNG files (IDAT: invalid distance too far back). This update fixes icons used by qinternet. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-261 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): qinternet-0.75_git200910271200-18.4.1 qinternet-debuginfo-0.75_git200910271200-18.4.1 qinternet-debugsource-0.75_git200910271200-18.4.1 References: https://bugzilla.novell.com/852862 https://bugzilla.novell.com/864395

1 0

openSUSE-RU-2014:0464-1: gnome-keyring: Add "gnome-classic" to the list of handled desktop session types
by maintenance＠opensuse.org 31 Mar '14

31 Mar '14

openSUSE Recommended Update: gnome-keyring: Add "gnome-classic" to the list of handled desktop session types ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0464-1 Rating: low References: #862775 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with gnome-keyring: - bnc#862775: Add "gnome-classic" to the list of handled desktop session types. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-262 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): gnome-keyring-3.10.1-6.1 gnome-keyring-debuginfo-3.10.1-6.1 gnome-keyring-debugsource-3.10.1-6.1 gnome-keyring-pam-3.10.1-6.1 gnome-keyring-pam-debuginfo-3.10.1-6.1 libgck-modules-gnome-keyring-3.10.1-6.1 libgck-modules-gnome-keyring-debuginfo-3.10.1-6.1 - openSUSE 13.1 (x86_64): gnome-keyring-32bit-3.10.1-6.1 gnome-keyring-debuginfo-32bit-3.10.1-6.1 gnome-keyring-pam-32bit-3.10.1-6.1 gnome-keyring-pam-debuginfo-32bit-3.10.1-6.1 - openSUSE 13.1 (noarch): gnome-keyring-lang-3.10.1-6.1 References: https://bugzilla.novell.com/862775

1 0

openSUSE-RU-2014:0463-1: icewm: Workaround to fix title bar and make windows moveable again
by maintenance＠opensuse.org 31 Mar '14

31 Mar '14

openSUSE Recommended Update: icewm: Workaround to fix title bar and make windows moveable again ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0463-1 Rating: low References: #856931 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with icewm: - bnc#856931: Workaround to fix title bar and make windows moveable again Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-264 - openSUSE 12.3: zypper in -t patch openSUSE-2014-264 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): icewm-1.3.7-26.4.1 icewm-debugsource-1.3.7-26.4.1 icewm-default-1.3.7-26.4.1 icewm-default-debuginfo-1.3.7-26.4.1 icewm-gnome-1.3.7-26.4.1 icewm-gnome-debuginfo-1.3.7-26.4.1 - openSUSE 12.3 (i586 x86_64): icewm-1.3.7-23.4.1 icewm-debugsource-1.3.7-23.4.1 icewm-default-1.3.7-23.4.1 icewm-default-debuginfo-1.3.7-23.4.1 icewm-gnome-1.3.7-23.4.1 icewm-gnome-debuginfo-1.3.7-23.4.1 References: https://bugzilla.novell.com/856931

1 0

openSUSE-RU-2014:0462-1: mlocate: fixed handling of prunepaths
by maintenance＠opensuse.org 31 Mar '14

31 Mar '14

openSUSE Recommended Update: mlocate: fixed handling of prunepaths ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0462-1 Rating: low References: #861955 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with mlocate: - bnc#861955: + Move the UPDATEDB_ variables parsing to cron service to have it working there as the upstream bash config is not exactly shell interpreted. * Sadly this way if user runs updatedb by hand it gets not properly populated, but at least the cron works with backcompat way. + Also respect the UPDATEDB_ when not running as root in the cron job. + Include findutils-locate variables in updatedb.conf if user still have them specified. * This ensures we can still load the variables user can specified in the /etc/sysconfig/locate namely UPDATEDB_PRUNEPATHS and UPDATEDB_PRUNEFS - Update comments in sysconfig.locate a bit to reflect reality. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-263 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): mlocate-0.26-4.9.1 mlocate-debuginfo-0.26-4.9.1 mlocate-debugsource-0.26-4.9.1 - openSUSE 13.1 (noarch): mlocate-lang-0.26-4.9.1 References: https://bugzilla.novell.com/861955

1 0

openSUSE-RU-2014:0455-1: important: kiwi: Update to version 5.05.56
by maintenance＠opensuse.org 27 Mar '14

27 Mar '14

openSUSE Recommended Update: kiwi: Update to version 5.05.56 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0455-1 Rating: important References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issues with kiwi: - Fixed block size used to check for boot sector code in the MBR after legacy grub has finished the installation - added compatibility mode for EFI images on SLE11 + SLE11 supports EFI only via the elilo bootloader with one exception which is secure boot. In that mode the grub2 signed module is used and the functionality is hidden behind an elilo wrapper program so that all tools e.g yast doesn't have to really support grub2. In order to leave a SLES image in a supported state it was required to adapt to this layout in kiwi - Make sure image is filled with random data prior to the creation of a luksFormat on it - added type attribute <type ... luksOS="distribution"/> + This attribute allows to select a specific set of options passed to the cryptsetup call in order to create a consistent luks format supported by the capabilities of the selected distribution. With this commit luksOS="sle11" will be supported Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-260 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): kiwi-5.05.56-12.1 kiwi-debugsource-5.05.56-12.1 kiwi-desc-isoboot-requires-5.05.56-12.1 kiwi-desc-netboot-requires-5.05.56-12.1 kiwi-desc-oemboot-requires-5.05.56-12.1 kiwi-desc-vmxboot-requires-5.05.56-12.1 kiwi-tools-5.05.56-12.1 kiwi-tools-debuginfo-5.05.56-12.1 - openSUSE 13.1 (noarch): kiwi-desc-isoboot-5.05.56-12.1 kiwi-desc-netboot-5.05.56-12.1 kiwi-desc-oemboot-5.05.56-12.1 kiwi-desc-vmxboot-5.05.56-12.1 kiwi-doc-5.05.56-12.1 kiwi-instsource-5.05.56-12.1 kiwi-media-requires-5.05.56-12.1 kiwi-pxeboot-5.05.56-12.1 kiwi-templates-5.05.56-12.1 kiwi-test-5.05.56-12.1 References:

1 0

openSUSE-RU-2014:0454-1: python-virtinst: Fixed virt-install
by maintenance＠opensuse.org 27 Mar '14

27 Mar '14

openSUSE Recommended Update: python-virtinst: Fixed virt-install ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0454-1 Rating: low References: #868837 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue with python-virtinst: - bnc#868837: virt-install: Fixed TypeError 'NoneType' object has no attribute '__getitem__' Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-259 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): python-virtinst-0.600.4-5.6.1 References: https://bugzilla.novell.com/868837

1 0

openSUSE-SU-2014:0450-1: moderate: nginx: update to 1.4.7
by opensuse-security＠opensuse.org 26 Mar '14

26 Mar '14

openSUSE Security Update: nginx: update to 1.4.7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0450-1 Rating: moderate References: #869076 Cross-References: CVE-2014-0133 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: nginx was updated to 1.4.7 to fix bugs and security issues. Fixed security issues: * CVE-2014-0133: nginx:heap-based buffer overflow in SPDY implementation New upstream release 1.4.7 (bnc#869076) (CVE-2014-0133) *) Security: a heap memory buffer overflow might occur in a worker process while handling a specially crafted request by ngx_http_spdy_module, potentially resulting in arbitrary code execution (CVE-2014-0133). Thanks to Lucas Molas, researcher at Programa STIC, Fundación Dr. Manuel Sadosky, Buenos Aires, Argentina. *) Bugfix: in the "fastcgi_next_upstream" directive. Thanks to Lucas Molas. *) Bugfix: the "client_max_body_size" directive might not work when reading a request body using chunked transfer encoding; the bug had appeared in 1.3.9. Thanks to Lucas Molas. *) Bugfix: a segmentation fault might occur in a worker process when proxying WebSocket connections. *) Bugfix: the $ssl_session_id variable contained full session serialized instead of just a session id. Thanks to Ivan Ristić. *) Bugfix: client connections might be immediately closed if deferred accept was used; the bug had appeared in 1.3.15. *) Bugfix: alerts "zero size buf in output" might appear in logs while proxying; the bug had appeared in 1.3.9. *) Bugfix: a segmentation fault might occur in a worker process if the ngx_http_spdy_module was used. *) Bugfix: proxied WebSocket connections might hang right after handshake if the select, poll, or /dev/poll methods were used. *) Bugfix: a timeout might occur while reading client request body in an SSL connection using chunked transfer encoding. *) Bugfix: memory leak in nginx/Windows. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-258 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): nginx-1.4.7-3.9.1 nginx-debuginfo-1.4.7-3.9.1 nginx-debugsource-1.4.7-3.9.1 References: http://support.novell.com/security/cve/CVE-2014-0133.html https://bugzilla.novell.com/869076

1 0

openSUSE-SU-2014:0449-1: important: lighttpd to 1.4.35
by opensuse-security＠opensuse.org 26 Mar '14

26 Mar '14

openSUSE Security Update: lighttpd to 1.4.35 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0449-1 Rating: important References: #867350 Cross-References: CVE-2014-2323 CVE-2014-2324 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: lighttpd was updated to version 1.4.35, fixing bugs and security issues: CVE-2014-2323: SQL injection vulnerability in mod_mysql_vhost.c in lighttpd allowed remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname. CVE-2014-2323: Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd allowed remote attackers to read arbitrary files via a .. (dot dot) in the host name, related to request_check_hostname. More information can be found on the lighttpd advisory page: http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2 014_01.txt Other changes: * [network/ssl] fix build error if TLSEXT is disabled * [mod_fastcgi] fix use after free (only triggered if fastcgi debug is active) * [mod_rrdtool] fix invalid read (string not null terminated) * [mod_dirlisting] fix memory leak if pcre fails * [mod_fastcgi,mod_scgi] fix resource leaks on spawning backends * [mod_magnet] fix memory leak * add comments for switch fall throughs * remove logical dead code * [buffer] fix length check in buffer_is_equal_right_len * fix resource leaks in error cases on config parsing and other initializations * add force_assert() to enforce assertions as simple assert()s are disabled by -DNDEBUG (fixes #2546) * [mod_cml_lua] fix null pointer dereference * force assertion: setting FD_CLOEXEC must work (if available) * [network] check return value of lseek() * fix unchecked return values from stream_open/stat_cache_get_entry * [mod_webdav] fix logic error in handling file creation error * check length of unix domain socket filenames * fix SQL injection / host name validation (thx Jann Horn) for all the changes see /usr/share/doc/packages/lighttpd/NEWS Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-257 - openSUSE 12.3: zypper in -t patch openSUSE-2014-257 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): lighttpd-1.4.35-2.9.1 lighttpd-debuginfo-1.4.35-2.9.1 lighttpd-debugsource-1.4.35-2.9.1 lighttpd-mod_cml-1.4.35-2.9.1 lighttpd-mod_cml-debuginfo-1.4.35-2.9.1 lighttpd-mod_geoip-1.4.35-2.9.1 lighttpd-mod_geoip-debuginfo-1.4.35-2.9.1 lighttpd-mod_magnet-1.4.35-2.9.1 lighttpd-mod_magnet-debuginfo-1.4.35-2.9.1 lighttpd-mod_mysql_vhost-1.4.35-2.9.1 lighttpd-mod_mysql_vhost-debuginfo-1.4.35-2.9.1 lighttpd-mod_rrdtool-1.4.35-2.9.1 lighttpd-mod_rrdtool-debuginfo-1.4.35-2.9.1 lighttpd-mod_trigger_b4_dl-1.4.35-2.9.1 lighttpd-mod_trigger_b4_dl-debuginfo-1.4.35-2.9.1 lighttpd-mod_webdav-1.4.35-2.9.1 lighttpd-mod_webdav-debuginfo-1.4.35-2.9.1 - openSUSE 12.3 (i586 x86_64): lighttpd-1.4.35-6.9.1 lighttpd-debuginfo-1.4.35-6.9.1 lighttpd-debugsource-1.4.35-6.9.1 lighttpd-mod_cml-1.4.35-6.9.1 lighttpd-mod_cml-debuginfo-1.4.35-6.9.1 lighttpd-mod_geoip-1.4.35-6.9.1 lighttpd-mod_geoip-debuginfo-1.4.35-6.9.1 lighttpd-mod_magnet-1.4.35-6.9.1 lighttpd-mod_magnet-debuginfo-1.4.35-6.9.1 lighttpd-mod_mysql_vhost-1.4.35-6.9.1 lighttpd-mod_mysql_vhost-debuginfo-1.4.35-6.9.1 lighttpd-mod_rrdtool-1.4.35-6.9.1 lighttpd-mod_rrdtool-debuginfo-1.4.35-6.9.1 lighttpd-mod_trigger_b4_dl-1.4.35-6.9.1 lighttpd-mod_trigger_b4_dl-debuginfo-1.4.35-6.9.1 lighttpd-mod_webdav-1.4.35-6.9.1 lighttpd-mod_webdav-debuginfo-1.4.35-6.9.1 References: http://support.novell.com/security/cve/CVE-2014-2323.html http://support.novell.com/security/cve/CVE-2014-2324.html https://bugzilla.novell.com/867350

1 0

openSUSE-SU-2014:0448-1: important: MozillaFirefox: Update to version 28.0
by opensuse-security＠opensuse.org 26 Mar '14

26 Mar '14

openSUSE Security Update: MozillaFirefox: Update to version 28.0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0448-1 Rating: important References: #865539 #868603 Cross-References: CVE-2014-1493 CVE-2014-1494 CVE-2014-1497 CVE-2014-1498 CVE-2014-1499 CVE-2014-1500 CVE-2014-1502 CVE-2014-1504 CVE-2014-1505 CVE-2014-1508 CVE-2014-1509 CVE-2014-1510 CVE-2014-1511 CVE-2014-1512 CVE-2014-1513 CVE-2014-1514 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes 16 vulnerabilities is now available. Description: Mozilla Firefox was updated to version 28.0, receiving enhancements, bug and security fixes. Mozilla NSPR was updated to 4.10.4 receiving enhancements, bug and security fixes. Mozilla NSS was updated to 3.15.5 receiving enhancements, bug and security fixes. Changes in MozillaFirefox: - update to Firefox 28.0 (bnc#868603) * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494 Miscellaneous memory safety hazards * MFSA 2014-17/CVE-2014-1497 (bmo#966311) Out of bounds read during WAV file decoding * MFSA 2014-18/CVE-2014-1498 (bmo#935618) crypto.generateCRMFRequest does not validate type of key * MFSA 2014-19/CVE-2014-1499 (bmo#961512) Spoofing attack on WebRTC permission prompt * MFSA 2014-20/CVE-2014-1500 (bmo#956524) onbeforeunload and Javascript navigation DOS * MFSA 2014-22/CVE-2014-1502 (bmo#972622) WebGL content injection from one domain to rendering in another * MFSA 2014-23/CVE-2014-1504 (bmo#911547) Content Security Policy for data: documents not preserved by session restore * MFSA 2014-26/CVE-2014-1508 (bmo#963198) Information disclosure through polygon rendering in MathML * MFSA 2014-27/CVE-2014-1509 (bmo#966021) Memory corruption in Cairo during PDF font rendering * MFSA 2014-28/CVE-2014-1505 (bmo#941887) SVG filters information disclosure through feDisplacementMap * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909) Privilege escalation using WebIDL-implemented APIs * MFSA 2014-30/CVE-2014-1512 (bmo#982957) Use-after-free in TypeObject * MFSA 2014-31/CVE-2014-1513 (bmo#982974) Out-of-bounds read/write through neutering ArrayBuffer objects * MFSA 2014-32/CVE-2014-1514 (bmo#983344) Out-of-bounds write through TypedArrayObject after neutering - requires NSPR 4.10.3 and NSS 3.15.5 - new build dependency (and recommends): * libpulse * JS math correctness issue (bmo#941381) Changes in mozilla-nspr: - update to version 4.10.4 * bmo#767759: Add support for new x32 abi * bmo#844784: Thread data race in PR_EnterMonitor * bmo#939786: data race nsprpub/pr/src/pthreads/ptthread.c:137 _pt_root * bmo#958796: Users of _beginthreadex that set a custom stack size may not be getting the behavior they want * bmo#963033: AArch64 support update for NSPR * bmo#969061: Incorrect end-of-list test when iterating over a PRCList in prcountr.c and prtrace.c * bmo#971152: IPv6 detection on linux depends on availability of /proc/net/if_inet6 - update to version 4.10.3 * bmo#749849: ensure we'll free the thread-specific data key. * bmo#941461: don't compile android with unaligned memory access. * bmo#932398: Add PR_SyncMemMap, a portable version of msync/FlushViewOfFile. * bmo#952621: Fix a thread-unsafe access to lock->owner in PR_Lock. * bmo#957458: Fix several bugs in the lock rank checking code. * bmo#936320: Use an alternative test for IPv6 support on Linux to avoid opening a socket. Changes in mozilla-nss: - update to 3.15.5 * required for Firefox 28 * export FREEBL_LOWHASH to get the correct default headers (bnc#865539) New functionality * Added support for the TLS application layer protocol negotiation (ALPN) extension. Two SSL socket options, SSL_ENABLE_NPN and SSL_ENABLE_ALPN, can be used to control whether NPN or ALPN (or both) should be used for application layer protocol negotiation. * Added the TLS padding extension. The extension type value is 35655, which may change when an official extension type value is assigned by IANA. NSS automatically adds the padding extension to ClientHello when necessary. * Added a new macro CERT_LIST_TAIL, defined in certt.h, for getting the tail of a CERTCertList. Notable Changes * bmo#950129: Improve the OCSP fetching policy when verifying OCSP responses * bmo#949060: Validate the iov input argument (an array of PRIOVec structures) of ssl_WriteV (called via PR_Writev). Applications should still take care when converting struct iov to PRIOVec because the iov_len members of the two structures have different types (size_t vs. int). size_t is unsigned and may be larger than int. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-256 - openSUSE 12.3: zypper in -t patch openSUSE-2014-256 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): MozillaFirefox-28.0-17.1 MozillaFirefox-branding-upstream-28.0-17.1 MozillaFirefox-buildsymbols-28.0-17.1 MozillaFirefox-debuginfo-28.0-17.1 MozillaFirefox-debugsource-28.0-17.1 MozillaFirefox-devel-28.0-17.1 MozillaFirefox-translations-common-28.0-17.1 MozillaFirefox-translations-other-28.0-17.1 libfreebl3-3.15.5-16.1 libfreebl3-debuginfo-3.15.5-16.1 libsoftokn3-3.15.5-16.1 libsoftokn3-debuginfo-3.15.5-16.1 mozilla-nspr-4.10.4-8.1 mozilla-nspr-debuginfo-4.10.4-8.1 mozilla-nspr-debugsource-4.10.4-8.1 mozilla-nspr-devel-4.10.4-8.1 mozilla-nss-3.15.5-16.1 mozilla-nss-certs-3.15.5-16.1 mozilla-nss-certs-debuginfo-3.15.5-16.1 mozilla-nss-debuginfo-3.15.5-16.1 mozilla-nss-debugsource-3.15.5-16.1 mozilla-nss-devel-3.15.5-16.1 mozilla-nss-sysinit-3.15.5-16.1 mozilla-nss-sysinit-debuginfo-3.15.5-16.1 mozilla-nss-tools-3.15.5-16.1 mozilla-nss-tools-debuginfo-3.15.5-16.1 - openSUSE 13.1 (x86_64): libfreebl3-32bit-3.15.5-16.1 libfreebl3-debuginfo-32bit-3.15.5-16.1 libsoftokn3-32bit-3.15.5-16.1 libsoftokn3-debuginfo-32bit-3.15.5-16.1 mozilla-nspr-32bit-4.10.4-8.1 mozilla-nspr-debuginfo-32bit-4.10.4-8.1 mozilla-nss-32bit-3.15.5-16.1 mozilla-nss-certs-32bit-3.15.5-16.1 mozilla-nss-certs-debuginfo-32bit-3.15.5-16.1 mozilla-nss-debuginfo-32bit-3.15.5-16.1 mozilla-nss-sysinit-32bit-3.15.5-16.1 mozilla-nss-sysinit-debuginfo-32bit-3.15.5-16.1 - openSUSE 12.3 (i586 x86_64): MozillaFirefox-28.0-1.56.1 MozillaFirefox-branding-upstream-28.0-1.56.1 MozillaFirefox-buildsymbols-28.0-1.56.1 MozillaFirefox-debuginfo-28.0-1.56.1 MozillaFirefox-debugsource-28.0-1.56.1 MozillaFirefox-devel-28.0-1.56.1 MozillaFirefox-translations-common-28.0-1.56.1 MozillaFirefox-translations-other-28.0-1.56.1 libfreebl3-3.15.5-1.32.1 libfreebl3-debuginfo-3.15.5-1.32.1 libsoftokn3-3.15.5-1.32.1 libsoftokn3-debuginfo-3.15.5-1.32.1 mozilla-nspr-4.10.4-1.26.1 mozilla-nspr-debuginfo-4.10.4-1.26.1 mozilla-nspr-debugsource-4.10.4-1.26.1 mozilla-nspr-devel-4.10.4-1.26.1 mozilla-nss-3.15.5-1.32.1 mozilla-nss-certs-3.15.5-1.32.1 mozilla-nss-certs-debuginfo-3.15.5-1.32.1 mozilla-nss-debuginfo-3.15.5-1.32.1 mozilla-nss-debugsource-3.15.5-1.32.1 mozilla-nss-devel-3.15.5-1.32.1 mozilla-nss-sysinit-3.15.5-1.32.1 mozilla-nss-sysinit-debuginfo-3.15.5-1.32.1 mozilla-nss-tools-3.15.5-1.32.1 mozilla-nss-tools-debuginfo-3.15.5-1.32.1 - openSUSE 12.3 (x86_64): libfreebl3-32bit-3.15.5-1.32.1 libfreebl3-debuginfo-32bit-3.15.5-1.32.1 libsoftokn3-32bit-3.15.5-1.32.1 libsoftokn3-debuginfo-32bit-3.15.5-1.32.1 mozilla-nspr-32bit-4.10.4-1.26.1 mozilla-nspr-debuginfo-32bit-4.10.4-1.26.1 mozilla-nss-32bit-3.15.5-1.32.1 mozilla-nss-certs-32bit-3.15.5-1.32.1 mozilla-nss-certs-debuginfo-32bit-3.15.5-1.32.1 mozilla-nss-debuginfo-32bit-3.15.5-1.32.1 mozilla-nss-sysinit-32bit-3.15.5-1.32.1 mozilla-nss-sysinit-debuginfo-32bit-3.15.5-1.32.1 References: http://support.novell.com/security/cve/CVE-2014-1493.html http://support.novell.com/security/cve/CVE-2014-1494.html http://support.novell.com/security/cve/CVE-2014-1497.html http://support.novell.com/security/cve/CVE-2014-1498.html http://support.novell.com/security/cve/CVE-2014-1499.html http://support.novell.com/security/cve/CVE-2014-1500.html http://support.novell.com/security/cve/CVE-2014-1502.html http://support.novell.com/security/cve/CVE-2014-1504.html http://support.novell.com/security/cve/CVE-2014-1505.html http://support.novell.com/security/cve/CVE-2014-1508.html http://support.novell.com/security/cve/CVE-2014-1509.html http://support.novell.com/security/cve/CVE-2014-1510.html http://support.novell.com/security/cve/CVE-2014-1511.html http://support.novell.com/security/cve/CVE-2014-1512.html http://support.novell.com/security/cve/CVE-2014-1513.html http://support.novell.com/security/cve/CVE-2014-1514.html https://bugzilla.novell.com/865539 https://bugzilla.novell.com/868603

1 0

openSUSE-RU-2014:0443-1: postgresql-plr: Update to bugfix-release 8.0.15
by maintenance＠opensuse.org 25 Mar '14

25 Mar '14

openSUSE Recommended Update: postgresql-plr: Update to bugfix-release 8.0.15 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0443-1 Rating: low References: Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issues with postgresql-plr: - Update to upstream 8.0.15 bugfix + Update for PostgreSQL 9.3 compatibility + Ensure certain errors in R code do not crash postgres + Unbreak compilation with older versions of postgres not having rangetypes + Allow use of OUT parameters - Upgrade to 8.3.0.14 + Remove hack to take signal back from R interpreter + Set R_SignalHandlers = 0, the proper way to prevent R from taking signals in the first place + As of pg9.2 the syntax "LANGUAGE 'C'" no longer works. Use "LANGUAGE C" instead. + The MacPorts installation has the header filed distributed across two different directories, so there is no single "rincludedir" to query from pkg-config. Instead, do it the proper way and ask pkg-config for the cflags, which should work for all installation variants. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2014-250 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): postgresql-plr-8.3.0.15-2.4.1 postgresql-plr-debuginfo-8.3.0.15-2.4.1 postgresql-plr-debugsource-8.3.0.15-2.4.1 postgresql-plr-doc-8.3.0.15-2.4.1 References:

1 0