November 2010 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2010:0997-1 (moderate): clamav: Update to version 0.96.4
by maintenance＠opensuse.org 30 Nov '10

30 Nov '10

openSUSE Recommended Update: clamav: Update to version 0.96.4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0997-1 Rating: moderate References: #649631 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: clamav version update to 0.96.4 includes several bug fixes and engine improvements. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch clamav-3447 - openSUSE 11.2: zypper in -t patch clamav-3447 - openSUSE 11.1: zypper in -t patch clamav-3447 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 0.96.4]: clamav-0.96.4-0.2.1 - openSUSE 11.3 (noarch) [New Version: 0.96.4]: clamav-db-0.96.4-0.2.1 - openSUSE 11.2 (i586 x86_64) [New Version: 0.96.4]: clamav-0.96.4-0.2.1 clamav-db-0.96.4-0.2.1 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 0.96.4]: clamav-0.96.4-0.1.1 clamav-db-0.96.4-0.1.1 References: https://bugzilla.novell.com/649631

1 0

openSUSE-SU-2010:0992-1 (moderate): openslp security update
by opensuse-security＠opensuse.org 30 Nov '10

30 Nov '10

openSUSE Security Update: openslp security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0992-1 Rating: moderate References: #642571 Cross-References: CVE-2010-3609 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: the openslp daemon could run into an endless loop when receiving specially crafted packets (CVE-2010-3609). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch openslp-3310 - openSUSE 11.2: zypper in -t patch openslp-3310 - openSUSE 11.1: zypper in -t patch openslp-3310 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): openslp-1.2.0-180.1.1 openslp-devel-1.2.0-180.1.1 openslp-server-1.2.0-180.1.1 - openSUSE 11.3 (x86_64): openslp-32bit-1.2.0-180.1.1 - openSUSE 11.2 (i586 x86_64): openslp-1.2.0-174.3.1 openslp-devel-1.2.0-174.3.1 openslp-server-1.2.0-174.3.1 - openSUSE 11.2 (x86_64): openslp-32bit-1.2.0-174.3.1 - openSUSE 11.1 (i586 ppc x86_64): openslp-1.2.0-168.12.1 openslp-devel-1.2.0-168.12.1 openslp-server-1.2.0-168.12.1 - openSUSE 11.1 (x86_64): openslp-32bit-1.2.0-168.12.1 - openSUSE 11.1 (ppc): openslp-64bit-1.2.0-168.12.1 References: http://support.novell.com/security/cve/CVE-2010-3609.html https://bugzilla.novell.com/642571

1 0

openSUSE-RU-2010:0989-1 (moderate): xinetd: Improve IPv6 handling
by maintenance＠opensuse.org 29 Nov '10

29 Nov '10

openSUSE Recommended Update: xinetd: Improve IPv6 handling ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0989-1 Rating: moderate References: #457903 #598305 Affected Products: openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes xinetd failing to handle ident lookup when the service is bound to ipv6 and USERID is used. It also improves the start script of xinetd to ensure that it successfully started. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch xinetd-3027 - openSUSE 11.1: zypper in -t patch xinetd-3027 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): xinetd-2.3.14-143.3.1 - openSUSE 11.1 (i586 ppc x86_64): xinetd-2.3.14-129.36.1 References: https://bugzilla.novell.com/457903 https://bugzilla.novell.com/598305

1 0

openSUSE-SU-2010:0984-1 (moderate): quagga: security update
by opensuse-security＠opensuse.org 26 Nov '10

26 Nov '10

openSUSE Security Update: quagga: security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0984-1 Rating: moderate References: #634300 Cross-References: CVE-2010-2948 CVE-2010-2949 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: This update of quagga fixes two security issues: - CVE-2010-2948: CVSS v2 Base Score: 6.5 (MEDIUM) (AV:N/AC:L/Au:S/C:P/I:P/A:P) Stack-based buffer overflow while processing malformed Route-Refresh messages. - CVE-2010-2949: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P) Denial of service while processing malformed BGP update AS path messages Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch quagga-3508 - openSUSE 11.2: zypper in -t patch quagga-3508 - openSUSE 11.1: zypper in -t patch quagga-3508 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 0.99.17]: quagga-0.99.17-1.3.1 quagga-devel-0.99.17-1.3.1 - openSUSE 11.2 (i586 x86_64) [New Version: 0.99.17]: quagga-0.99.17-1.3.1 quagga-devel-0.99.17-1.3.1 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 0.99.17]: quagga-0.99.17-1.1.1 quagga-devel-0.99.17-1.1.1 References: http://support.novell.com/security/cve/CVE-2010-2948.html http://support.novell.com/security/cve/CVE-2010-2949.html https://bugzilla.novell.com/634300

1 0

openSUSE-SU-2010:0976-1 (important): poppler: Fixed multiple vulnerabilities
by opensuse-security＠opensuse.org 25 Nov '10

25 Nov '10

openSUSE Security Update: poppler: Fixed multiple vulnerabilities ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0976-1 Rating: important References: #642785 Cross-References: CVE-2010-3702 CVE-2010-3703 CVE-2010-3704 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. It includes one version update. Description: Specially crafted PDF files could crash poppler or potentially even cause execution of arbitrary code (CVE-2010-3702, CVE-2010-3703, CVE-2010-3704) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libpoppler-devel-3335 - openSUSE 11.2: zypper in -t patch libpoppler-devel-3336 - openSUSE 11.1: zypper in -t patch libpoppler-devel-3382 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libpoppler-devel-0.12.3-5.1.1 libpoppler-glib-devel-0.12.3-5.1.1 libpoppler-glib4-0.12.3-5.1.1 libpoppler5-0.12.3-5.1.1 poppler-tools-0.12.3-5.1.1 - openSUSE 11.3 (noarch): libpoppler-doc-0.12.3-5.1.1 - openSUSE 11.2 (i586 x86_64) [New Version: 0.12.3]: libpoppler-devel-0.12.3-1.2.1 libpoppler-doc-0.12.3-1.2.1 libpoppler-glib-devel-0.12.3-1.2.1 libpoppler-glib4-0.12.3-1.2.1 libpoppler-qt2-0.12.3-1.2.1 libpoppler-qt3-devel-0.12.3-1.2.1 libpoppler-qt4-3-0.12.3-1.2.1 libpoppler-qt4-devel-0.12.3-1.2.1 libpoppler5-0.12.3-1.2.1 poppler-tools-0.12.3-1.2.1 - openSUSE 11.1 (i586 ppc x86_64): libpoppler-devel-0.10.1-1.9.1 libpoppler-doc-0.10.1-1.9.1 libpoppler-glib-devel-0.10.1-1.9.1 libpoppler-glib4-0.10.1-1.9.1 libpoppler-qt2-0.10.1-1.9.1 libpoppler-qt3-devel-0.10.1-1.9.1 libpoppler-qt4-3-0.10.1-1.9.1 libpoppler-qt4-devel-0.10.1-1.9.1 libpoppler4-0.10.1-1.9.1 poppler-tools-0.10.1-1.9.1 References: http://support.novell.com/security/cve/CVE-2010-3702.html http://support.novell.com/security/cve/CVE-2010-3703.html http://support.novell.com/security/cve/CVE-2010-3704.html https://bugzilla.novell.com/642785

1 0

openSUSE-RU-2010:0973-1 (low): graphviz: It doesn't find libperl.so. Fixed by this update.
by maintenance＠opensuse.org 23 Nov '10

23 Nov '10

openSUSE Recommended Update: graphviz: It doesn't find libperl.so. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0973-1 Rating: low References: #612766 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Because of the way the perl extension was built it lacked the information of where to find the perl runtime library. This is fixed by this update Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch graphviz-3538 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): graphviz-2.20.2-45.6.1 graphviz-devel-2.20.2-45.6.1 graphviz-doc-2.20.2-8.6.1 graphviz-gd-2.20.2-8.6.1 graphviz-gnome-2.20.2-8.6.1 graphviz-guile-2.20.2-8.6.1 graphviz-java-2.20.2-8.6.1 graphviz-lua-2.20.2-8.6.1 graphviz-ocaml-2.20.2-8.6.1 graphviz-perl-2.20.2-8.6.1 graphviz-php-2.20.2-8.6.1 graphviz-python-2.20.2-8.6.1 graphviz-ruby-2.20.2-8.6.1 graphviz-sharp-2.20.2-8.6.1 graphviz-tcl-2.20.2-8.6.1 References: https://bugzilla.novell.com/612766

1 0

openSUSE-RU-2010:0972-1 (low): tar: It segfaults with using --listed-incremental. Fixed by this update.
by maintenance＠opensuse.org 23 Nov '10

23 Nov '10

openSUSE Recommended Update: tar: It segfaults with using --listed-incremental. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0972-1 Rating: low References: #650640 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: tar: listed incremental (--listed-incremental) backup of root directory triggers a segfault. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch tar-3542 - openSUSE 11.2: zypper in -t patch tar-3542 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): tar-1.23-2.3.1 tar-backup-scripts-1.23-2.3.1 - openSUSE 11.3 (noarch): tar-lang-1.23-2.3.1 - openSUSE 11.2 (i586 x86_64): tar-1.21-4.5.1 - openSUSE 11.2 (noarch): tar-lang-1.21-4.5.1 References: https://bugzilla.novell.com/650640

1 0

openSUSE-RU-2010:0971-1 (low): mjpegtools: This update fixes segmentation faults in libquicktime and mjpegtools with libjpeg8.
by maintenance＠opensuse.org 23 Nov '10

23 Nov '10

openSUSE Recommended Update: mjpegtools: This update fixes segmentation faults in libquicktime and mjpegtools with libjpeg8. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0971-1 Rating: low References: #647859 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes segmentation faults in libquicktime and mjpegtools with libjpeg8. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libquicktime-3537 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libquicktime-1.1.5-4.3.1 libquicktime-devel-1.1.5-4.3.1 mjpegtools-1.9.0-9.3.1 mjpegtools-devel-1.9.0-9.3.1 References: https://bugzilla.novell.com/647859

1 0

openSUSE-SU-2010:0969-1 (moderate): gdm security update
by opensuse-security＠opensuse.org 22 Nov '10

22 Nov '10

openSUSE Security Update: gdm security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0969-1 Rating: moderate References: #628607 #633655 Cross-References: CVE-2010-1172 Affected Products: openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. It includes one version update. Description: dbus-glib allowed local users to write properties that were exported read-only via dbus (CVE-2010-1172). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch gdm-3108 - openSUSE 11.1: zypper in -t patch gdm-3108 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64) [New Version: 2.28.2]: gdm-2.28.2-0.2.2 gdm-branding-upstream-2.28.2-0.2.2 - openSUSE 11.2 (noarch) [New Version: 2.28.2]: gdm-lang-2.28.2-0.2.2 - openSUSE 11.1 (i586 ppc x86_64): gdm-2.24.0-15.1.1 gdm-branding-upstream-2.24.0-15.1.1 gdm-lang-2.24.0-15.1.1 References: http://support.novell.com/security/cve/CVE-2010-1172.html https://bugzilla.novell.com/628607 https://bugzilla.novell.com/633655

1 0

openSUSE-SU-2010:0968-1 (moderate): gdm security update
by opensuse-security＠opensuse.org 22 Nov '10

22 Nov '10

openSUSE Security Update: gdm security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0968-1 Rating: moderate References: #628607 #633655 #637069 Cross-References: CVE-2010-1172 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: dbus-glib allowed local users to write properties that were exported read-only via dbus (CVE-2010-1172). Additionally a bug that prevented XDMCP connections was fixed. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch gdm-3118 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): gdm-2.30.2-6.1.1 gdm-branding-upstream-2.30.2-6.1.1 gnome-applets-gdm-2.30.2-6.1.1 - openSUSE 11.3 (noarch): gdm-lang-2.30.2-6.1.1 References: http://support.novell.com/security/cve/CVE-2010-1172.html https://bugzilla.novell.com/628607 https://bugzilla.novell.com/633655 https://bugzilla.novell.com/637069

1 0

openSUSE-SU-2010:0965-2 (important): openssl security update
by opensuse-security＠opensuse.org 22 Nov '10

22 Nov '10

openSUSE Security Update: openssl security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0965-2 Rating: important References: #651003 Cross-References: CVE-2010-3864 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Multithreaded OpenSSL servers using the TLS server extension are vulnerable to a buffer overrun attack (CVE-2010-3864). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libopenssl-devel-3562 - openSUSE 11.2: zypper in -t patch libopenssl-devel-3562 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libopenssl-devel-1.0.0-6.3.1 libopenssl0_9_8-0.9.8m-3.1.2 libopenssl1_0_0-1.0.0-6.3.1 openssl-1.0.0-6.3.1 - openSUSE 11.3 (x86_64): libopenssl0_9_8-32bit-0.9.8m-3.1.2 libopenssl1_0_0-32bit-1.0.0-6.3.1 - openSUSE 11.3 (noarch): openssl-doc-1.0.0-6.3.1 - openSUSE 11.2 (i586 x86_64): libopenssl-devel-0.9.8k-3.10.1 libopenssl0_9_8-0.9.8k-3.10.1 openssl-0.9.8k-3.10.1 openssl-doc-0.9.8k-3.10.1 - openSUSE 11.2 (x86_64): libopenssl0_9_8-32bit-0.9.8k-3.10.1 References: http://support.novell.com/security/cve/CVE-2010-3864.html https://bugzilla.novell.com/651003

1 0

openSUSE-SU-2010:0965-1 (important): openssl security update
by opensuse-security＠opensuse.org 19 Nov '10

19 Nov '10

openSUSE Security Update: openssl security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0965-1 Rating: important References: #651003 Cross-References: CVE-2010-3864 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Multithreaded OpenSSL servers using the TLS server extension are vulnerable to a buffer overrun attack. CVE-2010-3864 has been assigned to this issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch libopenssl-devel-3507 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc x86_64): libopenssl-devel-0.9.8h-28.18.1 libopenssl0_9_8-0.9.8h-28.18.1 openssl-0.9.8h-28.18.1 openssl-doc-0.9.8h-28.18.1 - openSUSE 11.1 (x86_64): libopenssl0_9_8-32bit-0.9.8h-28.18.1 - openSUSE 11.1 (ppc): libopenssl0_9_8-64bit-0.9.8h-28.18.1 References: http://support.novell.com/security/cve/CVE-2010-3864.html https://bugzilla.novell.com/651003

1 0

openSUSE-RU-2010:0964-1 (moderate): tomcat6: Fix upgrading of tomcat6
by maintenance＠opensuse.org 18 Nov '10

18 Nov '10

openSUSE Recommended Update: tomcat6: Fix upgrading of tomcat6 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0964-1 Rating: moderate References: #625415 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The previous fix for bnc#650130 changed directory /etc/tomcat6/Catalina into a symlink, which is not supported by rpm This update adds a workaround which enables proper upgrade. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch tomcat6-3530 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch): tomcat6-6.0.24-5.4.1 tomcat6-admin-webapps-6.0.24-5.4.1 tomcat6-docs-webapp-6.0.24-5.4.1 tomcat6-el-1_0-api-6.0.24-5.4.1 tomcat6-javadoc-6.0.24-5.4.1 tomcat6-jsp-2_1-api-6.0.24-5.4.1 tomcat6-lib-6.0.24-5.4.1 tomcat6-servlet-2_5-api-6.0.24-5.4.1 tomcat6-webapps-6.0.24-5.4.1 References: https://bugzilla.novell.com/625415

1 0

openSUSE-RU-2010:0963-1 (low): Botan: Fix build issues with monotone
by maintenance＠opensuse.org 18 Nov '10

18 Nov '10

openSUSE Recommended Update: Botan: Fix build issues with monotone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0963-1 Rating: low References: #548110 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes libbotan-devel to be compatible with what other projects expect (bnc#548110) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch Botan-3522 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): libbotan-1_6_4-1.6.4-4.1.1 libbotan-devel-1.6.4-4.1.1 References: https://bugzilla.novell.com/548110

1 0

openSUSE-RU-2010:0962-1 (low): aaa_base: Fix hanging boot with custom kernel
by maintenance＠opensuse.org 18 Nov '10

18 Nov '10

openSUSE Recommended Update: aaa_base: Fix hanging boot with custom kernel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0962-1 Rating: low References: #648408 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update adds an error message that booting was aborted if the kernel is missing devtmpfs support instead of just silently getting stuck. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch aaa_base-3501 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): aaa_base-11.3-8.5.1 References: https://bugzilla.novell.com/648408

1 0

openSUSE-RU-2010:0959-1 (important): taglib-sharp: update Url to Home Page
by maintenance＠opensuse.org 17 Nov '10

17 Nov '10

openSUSE Recommended Update: taglib-sharp: update Url to Home Page ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0959-1 Rating: important References: #648990 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update fixes an outdated link to the original project home page. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch taglib-sharp-3529 - openSUSE 11.2: zypper in -t patch taglib-sharp-3529 - openSUSE 11.1: zypper in -t patch taglib-sharp-3529 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch): taglib-sharp-2.0.3.7-2.1.1 taglib-sharp-devel-2.0.3.7-2.1.1 - openSUSE 11.2 (noarch): taglib-sharp-2.0.3.3-1.1.3.1 taglib-sharp-devel-2.0.3.3-1.1.3.1 - openSUSE 11.1 (noarch) [New Version: 2.0.3.2]: taglib-sharp-2.0.3.2-0.2.1 References: https://bugzilla.novell.com/648990

1 0

openSUSE-SU-2010:0957-1 (important): java-1_6_0-openjdk security update fixing various vulnerabilities
by opensuse-security＠opensuse.org 17 Nov '10

17 Nov '10

openSUSE Security Update: java-1_6_0-openjdk security update fixing various vulnerabilities ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0957-1 Rating: important References: #642531 Cross-References: CVE-2009-3555 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3551 CVE-2010-3553 CVE-2010-3554 CVE-2010-3557 CVE-2010-3561 CVE-2010-3562 CVE-2010-3564 CVE-2010-3565 CVE-2010-3566 CVE-2010-3567 CVE-2010-3568 CVE-2010-3569 CVE-2010-3573 CVE-2010-3574 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: Icedtea included in java-1_6_0-openjdk was updated to version 1.7.5/1.8.2/1.9.1 to fix several security issues: * S6914943, CVE-2009-3555: TLS: MITM attacks via session renegotiation * S6559775, CVE-2010-3568: OpenJDK Deserialization Race condition * S6891766, CVE-2010-3554: OpenJDK corba reflection vulnerabilities * S6925710, CVE-2010-3562: OpenJDK IndexColorModel double-free * S6938813, CVE-2010-3557: OpenJDK Swing mutable static * S6957564, CVE-2010-3548: OpenJDK DNS server IP address information leak * S6958060, CVE-2010-3564: OpenJDK kerberos vulnerability * S6963023, CVE-2010-3565: OpenJDK JPEG writeImage remote code execution * S6963489, CVE-2010-3566: OpenJDK ICC Profile remote code execution * S6966692, CVE-2010-3569: OpenJDK Serialization inconsistencies * S6622002, CVE-2010-3553: UIDefault.ProxyLazyValue has unsafe reflection usage * S6925672, CVE-2010-3561: Privileged ServerSocket.accept allows receiving connections from any host * S6952017, CVE-2010-3549: HttpURLConnection chunked encoding issue (Http request splitting) * S6952603, CVE-2010-3551: NetworkInterface reveals local network address to untrusted code * S6961084, CVE-2010-3541: limit setting of some request headers in HttpURLConnection * S6963285, CVE-2010-3567: Crash in ICU Opentype layout engine due to mismatch in character counts * S6980004, CVE-2010-3573: limit HTTP request cookie headers in HttpURLConnection * S6981426, CVE-2010-3574: limit use of TRACE method in HttpURLConnection Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch java-1_6_0-openjdk-3500 - openSUSE 11.2: zypper in -t patch java-1_6_0-openjdk-3500 - openSUSE 11.1: zypper in -t patch java-1_6_0-openjdk-3500 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b20.1.9.1-0.2.2 java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.1-0.2.2 java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.1-0.2.2 - openSUSE 11.3 (noarch): java-1_6_0-openjdk-demo-1.6.0.0_b20.1.9.1-0.2.2 java-1_6_0-openjdk-javadoc-1.6.0.0_b20.1.9.1-0.2.2 java-1_6_0-openjdk-src-1.6.0.0_b20.1.9.1-0.2.2 - openSUSE 11.2 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b20.1.9.1-0.2.2 java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.1-0.2.2 java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.1-0.2.2 - openSUSE 11.2 (noarch): java-1_6_0-openjdk-demo-1.6.0.0_b20.1.9.1-0.2.2 java-1_6_0-openjdk-javadoc-1.6.0.0_b20.1.9.1-0.2.2 java-1_6_0-openjdk-src-1.6.0.0_b20.1.9.1-0.2.2 - openSUSE 11.1 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b20.1.9.1-0.1.3 java-1_6_0-openjdk-demo-1.6.0.0_b20.1.9.1-0.1.3 java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.1-0.1.3 java-1_6_0-openjdk-javadoc-1.6.0.0_b20.1.9.1-0.1.3 java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.1-0.1.3 java-1_6_0-openjdk-src-1.6.0.0_b20.1.9.1-0.1.3 References: http://support.novell.com/security/cve/CVE-2009-3555.html http://support.novell.com/security/cve/CVE-2010-3541.html http://support.novell.com/security/cve/CVE-2010-3548.html http://support.novell.com/security/cve/CVE-2010-3549.html http://support.novell.com/security/cve/CVE-2010-3551.html http://support.novell.com/security/cve/CVE-2010-3553.html http://support.novell.com/security/cve/CVE-2010-3554.html http://support.novell.com/security/cve/CVE-2010-3557.html http://support.novell.com/security/cve/CVE-2010-3561.html http://support.novell.com/security/cve/CVE-2010-3562.html http://support.novell.com/security/cve/CVE-2010-3564.html http://support.novell.com/security/cve/CVE-2010-3565.html http://support.novell.com/security/cve/CVE-2010-3566.html http://support.novell.com/security/cve/CVE-2010-3567.html http://support.novell.com/security/cve/CVE-2010-3568.html http://support.novell.com/security/cve/CVE-2010-3569.html http://support.novell.com/security/cve/CVE-2010-3573.html http://support.novell.com/security/cve/CVE-2010-3574.html https://bugzilla.novell.com/642531

1 0

openSUSE-SU-2010:0952-1 (low): openssl security update
by opensuse-security＠opensuse.org 15 Nov '10

15 Nov '10

openSUSE Security Update: openssl security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0952-1 Rating: low References: #608666 #629905 Cross-References: CVE-2010-2939 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: Specially crafted responses from SSL servers could cause a double-free bug in openssl's client implementation. Malicious servers could exploit that to crash programs use openssl for the SSL connection (CVE-2010-2939). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch libopenssl-devel-3206 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc x86_64): libopenssl-devel-0.9.8h-28.16.1 libopenssl0_9_8-0.9.8h-28.16.1 openssl-0.9.8h-28.16.1 openssl-doc-0.9.8h-28.16.1 - openSUSE 11.1 (x86_64): libopenssl0_9_8-32bit-0.9.8h-28.16.1 - openSUSE 11.1 (ppc): libopenssl0_9_8-64bit-0.9.8h-28.16.1 References: http://support.novell.com/security/cve/CVE-2010-2939.html https://bugzilla.novell.com/608666 https://bugzilla.novell.com/629905

1 0

openSUSE-SU-2010:0951-1 (low): openssl security update
by opensuse-security＠opensuse.org 15 Nov '10

15 Nov '10

openSUSE Security Update: openssl security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0951-1 Rating: low References: #629905 Cross-References: CVE-2010-2939 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Specially crafted responses from SSL servers could cause a double-free bug in openssl's client implementation. Malicious servers could exploit that to crash programs use openssl for the SSL connection (CVE-2010-2939). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libopenssl-devel-3214 - openSUSE 11.2: zypper in -t patch libopenssl-devel-3214 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libopenssl-devel-1.0.0-6.1.1 libopenssl0_9_8-0.9.8m-3.1.1 libopenssl1_0_0-1.0.0-6.1.1 openssl-1.0.0-6.1.1 - openSUSE 11.3 (x86_64): libopenssl0_9_8-32bit-0.9.8m-3.1.1 libopenssl1_0_0-32bit-1.0.0-6.1.1 - openSUSE 11.3 (noarch): openssl-doc-1.0.0-6.1.1 - openSUSE 11.2 (i586 x86_64): libopenssl-devel-0.9.8k-3.8.1 libopenssl0_9_8-0.9.8k-3.8.1 openssl-0.9.8k-3.8.1 openssl-doc-0.9.8k-3.8.1 - openSUSE 11.2 (x86_64): libopenssl0_9_8-32bit-0.9.8k-3.8.1 References: http://support.novell.com/security/cve/CVE-2010-2939.html https://bugzilla.novell.com/629905

1 0

openSUSE-RU-2010:0950-1 (low): emacs-auctex: A not working preview of Latex equations in emacs using the auctex package is fixed by this update.
by maintenance＠opensuse.org 15 Nov '10

15 Nov '10

openSUSE Recommended Update: emacs-auctex: A not working preview of Latex equations in emacs using the auctex package is fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0950-1 Rating: low References: #623719 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Previewing Latex equations in emacs using the auctex package does not work. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch emacs-auctex-3498 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch): emacs-auctex-11.85-94.3.1 References: https://bugzilla.novell.com/623719

1 0

openSUSE-RU-2010:0949-1 (low): coreutils: The "-V" option of sort doesn't work. Fixed by this update.
by maintenance＠opensuse.org 15 Nov '10

15 Nov '10

openSUSE Recommended Update: coreutils: The "-V" option of sort doesn't work. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0949-1 Rating: low References: #616745 #626517 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The "-V" (treat as version numbers) option doesn't show any effect. This was caused by the i18n patch for coreutils not being updated for this new option. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch coreutils-3496 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): coreutils-7.1-11.1.1 - openSUSE 11.3 (noarch): coreutils-lang-7.1-11.1.1 References: https://bugzilla.novell.com/616745 https://bugzilla.novell.com/626517

1 0

openSUSE-RU-2010:0948-1 (moderate): pcmanfm: Upgrade to version 0.9.8
by maintenance＠opensuse.org 15 Nov '10

15 Nov '10

openSUSE Recommended Update: pcmanfm: Upgrade to version 0.9.8 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0948-1 Rating: moderate References: #647213 #648882 #651089 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: pcmanfm has been updated to version 0.9.8 together with its main library libfm (updated to version 0.1.14). Also a pcmanfm critical bug on x86_64 systems has been fixed. lxde-common-branding packages has been fixed to work with new pcmafm conf files. Special Instructions and Notes: Please log out and log in again after installing this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libfm-3495 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libfm-0.1.14_rc2-2.3.1 libfm-devel-0.1.14_rc2-2.3.1 libfm-gtk0-0.1.14_rc2-2.3.1 libfm0-0.1.14_rc2-2.3.1 pcmanfm-0.9.8_rc2-1.3.1 - openSUSE 11.3 (noarch): lxde-common-0.5.0-10.3.1 lxde-common-branding-openSUSE-11.3-10.3.1 lxde-common-branding-upstream-0.5.0-10.3.1 pcmanfm-lang-0.9.8_rc2-1.3.1 References: https://bugzilla.novell.com/647213 https://bugzilla.novell.com/648882 https://bugzilla.novell.com/651089

1 0

openSUSE-RU-2010:0947-1 (low): Empathy: Fixed connection issues to MSN
by maintenance＠opensuse.org 15 Nov '10

15 Nov '10

openSUSE Recommended Update: Empathy: Fixed connection issues to MSN ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0947-1 Rating: low References: #648876 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: A bug in papyon was fixed: - #648876: Empathy no longer connects to MSN Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch papyon-3486 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch): papyon-0.4.6-2.3.1 References: https://bugzilla.novell.com/648876

1 0

openSUSE-RU-2010:0946-1 (low): pinentry-qt4: It appears under other windows and is grabbing alt+tab. Fixed by this update.
by maintenance＠opensuse.org 15 Nov '10

15 Nov '10

openSUSE Recommended Update: pinentry-qt4: It appears under other windows and is grabbing alt+tab. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0946-1 Rating: low References: #648253 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Pinentry-qt4 password dialog is displayed under other windows and is grabbing alt+tab. It forces the user to use the mouse to switch windows. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch pinentry-qt4-3499 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): pinentry-qt4-0.8.0-8.3.1 References: https://bugzilla.novell.com/648253

1 0

openSUSE-RU-2010:0942-1 (moderate): syslog-ng: Collective fixes
by maintenance＠opensuse.org 12 Nov '10

12 Nov '10

openSUSE Recommended Update: syslog-ng: Collective fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0942-1 Rating: moderate References: #568150 #617111 #637646 Affected Products: openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: - 568150: Fix to block SIGHUP while the reload is in progress to "queue" HUP signals, so they're delivered and handled later. - 617111: Applied a patch to fix a 100% CPU usage when mark_freq() is changed to 0 during a SIGHUP (reload), that may also cause to fill up /var partition very quickly. - 637646: Applied a patch withe stricter parsing of the LinkSys timestamps to avoid misinterpretation of program names with 4 digits at the begin as timestamp year. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch syslog-ng-3200 - openSUSE 11.1: zypper in -t patch syslog-ng-3200 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): syslog-ng-2.0.9-29.3.1 - openSUSE 11.1 (i586 ppc x86_64): syslog-ng-2.0.9-27.5.1 References: https://bugzilla.novell.com/568150 https://bugzilla.novell.com/617111 https://bugzilla.novell.com/637646

1 0

openSUSE-RU-2010:0940-1 (moderate): syslog-ng: Fix hang on rcsyslog-ng reload
by maintenance＠opensuse.org 12 Nov '10

12 Nov '10

openSUSE Recommended Update: syslog-ng: Fix hang on rcsyslog-ng reload ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0940-1 Rating: moderate References: #617111 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: - #617111: Applied a patch to fix a 100% CPU usage when mark_freq() is changed to 0 during a SIGHUP (reload), that may also cause to fill up /var partition very quickly. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch syslog-ng-3195 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): syslog-ng-3.1.1-4.1.1 References: https://bugzilla.novell.com/617111

1 0

openSUSE-SU-2010:0937-1 (moderate): moodle: security update
by opensuse-security＠opensuse.org 12 Nov '10

12 Nov '10

openSUSE Security Update: moodle: security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0937-1 Rating: moderate References: #650155 Cross-References: CVE-2010-4207 CVE-2010-4208 CVE-2010-4209 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. It includes one version update. Description: This update of moodle fixes: - CVE-2010-4207: CVSS v2 Base Score: 4.3 (MEDIUM) (AV:N/AC:M/Au:N/C:N/I:P/A:N): Cross-Site Scripting (XSS) (CWE-79) Cross-site scripting vulnerability in the Flash component infrastructure in YUI allows remote attackers to inject arbitrary web script or HTML via charts/assets/charts.swf. - CVE-2010-4208: CVSS v2 Base Score: 4.3 (MEDIUM) (AV:N/AC:M/Au:N/C:N/I:P/A:N): Cross-Site Scripting (XSS) (CWE-79) Cross-site scripting vulnerability in the Flash component infrastructure in YUI allows remote attackers to inject arbitrary web script or HTML via uploader/assets/uploader.swf. - CVE-2010-4209: CVSS v2 Base Score: 4.3 (MEDIUM) (AV:N/AC:M/Au:N/C:N/I:P/A:N): Cross-Site Scripting (XSS) (CWE-79) Cross-site scripting vulnerability in the Flash component infrastructure in YUI allows remote attackers to inject arbitrary web script or HTML via swfstore/swfstore.swf. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch moodle-3506 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (noarch) [New Version: 1.9.10]: moodle-1.9.10-0.1.1 moodle-af-1.9.10-0.1.1 moodle-ar-1.9.10-0.1.1 moodle-be-1.9.10-0.1.1 moodle-bg-1.9.10-0.1.1 moodle-bs-1.9.10-0.1.1 moodle-ca-1.9.10-0.1.1 moodle-cs-1.9.10-0.1.1 moodle-da-1.9.10-0.1.1 moodle-de-1.9.10-0.1.1 moodle-de_du-1.9.10-0.1.1 moodle-el-1.9.10-0.1.1 moodle-es-1.9.10-0.1.1 moodle-et-1.9.10-0.1.1 moodle-eu-1.9.10-0.1.1 moodle-fa-1.9.10-0.1.1 moodle-fi-1.9.10-0.1.1 moodle-fr-1.9.10-0.1.1 moodle-ga-1.9.10-0.1.1 moodle-gl-1.9.10-0.1.1 moodle-he-1.9.10-0.1.1 moodle-hi-1.9.10-0.1.1 moodle-hr-1.9.10-0.1.1 moodle-hu-1.9.10-0.1.1 moodle-id-1.9.10-0.1.1 moodle-is-1.9.10-0.1.1 moodle-it-1.9.10-0.1.1 moodle-ja-1.9.10-0.1.1 moodle-ka-1.9.10-0.1.1 moodle-km-1.9.10-0.1.1 moodle-kn-1.9.10-0.1.1 moodle-ko-1.9.10-0.1.1 moodle-lt-1.9.10-0.1.1 moodle-lv-1.9.10-0.1.1 moodle-mi_tn-1.9.10-0.1.1 moodle-ms-1.9.10-0.1.1 moodle-nl-1.9.10-0.1.1 moodle-nn-1.9.10-0.1.1 moodle-no-1.9.10-0.1.1 moodle-pl-1.9.10-0.1.1 moodle-pt-1.9.10-0.1.1 moodle-ro-1.9.10-0.1.1 moodle-ru-1.9.10-0.1.1 moodle-sk-1.9.10-0.1.1 moodle-sl-1.9.10-0.1.1 moodle-so-1.9.10-0.1.1 moodle-sq-1.9.10-0.1.1 moodle-sr-1.9.10-0.1.1 moodle-sv-1.9.10-0.1.1 moodle-th-1.9.10-0.1.1 moodle-tl-1.9.10-0.1.1 moodle-tr-1.9.10-0.1.1 moodle-uk-1.9.10-0.1.1 moodle-vi-1.9.10-0.1.1 moodle-zh_cn-1.9.10-0.1.1 References: http://support.novell.com/security/cve/CVE-2010-4207.html http://support.novell.com/security/cve/CVE-2010-4208.html http://support.novell.com/security/cve/CVE-2010-4209.html https://bugzilla.novell.com/650155

1 0

openSUSE-SU-2010:0936-1 (moderate): monotone security update
by opensuse-security＠opensuse.org 12 Nov '10

12 Nov '10

openSUSE Security Update: monotone security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0936-1 Rating: moderate References: #649515 Cross-References: CVE-2010-4098 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: remote attackers could crash a monotone server via an empty argument to the 'mtn' command (CVE-2010-4098). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch monotone-3505 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 0.48.1]: monotone-0.48.1-1.3.1 References: http://support.novell.com/security/cve/CVE-2010-4098.html https://bugzilla.novell.com/649515

1 0

openSUSE-RU-2010:0935-1 (moderate): mkinitrd: Collective update
by maintenance＠opensuse.org 11 Nov '10

11 Nov '10

openSUSE Recommended Update: mkinitrd: Collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0935-1 Rating: moderate References: #551967 #598063 #623776 #631464 #634053 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: Collective update for mkinitrd with these fixes: - Spaces and double quotes in the kernel command line are supported by initrd. - Minor device numbers greater than 255 are supported. - and some other minor issues Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch mkinitrd-3408 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc x86_64): mkinitrd-2.4-34.6.1 References: https://bugzilla.novell.com/551967 https://bugzilla.novell.com/598063 https://bugzilla.novell.com/623776 https://bugzilla.novell.com/631464 https://bugzilla.novell.com/634053

1 0

openSUSE-SU-2010:0933-1 (critical): SLE11 SP1
by opensuse-security＠opensuse.org 11 Nov '10

11 Nov '10

openSUSE Security Update: SLE11 SP1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0933-1 Rating: critical References: #564324 #573330 #603738 #609196 #612729 #623307 #624850 #629901 #629908 #638860 #639261 #640278 #643249 #644219 #644350 #644373 #646045 #647392 #647497 #647775 #648308 #649231 #649257 #649820 #650109 #650111 #650113 #650116 #650128 Affected Products: SLE 11 SERVER Unsupported Extras ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update of the SUSE Linux Enterprise Server 11 SP1 kernel brings the kernel to 2.6.32.24 and fixes some critical security bugs and other non-security bugs. Following security bugs were fixed: CVE-2010-3865: A iovec integer overflow in RDS sockets was fixed which could lead to local attackers gaining kernel privileges. CVE-2010-3904: A local privilege escalation in RDS sockets allowed local attackers to gain privileges. Please note that the net/rds socket protocol module only lives in the -extra kernel package, which is not installed by default on the SUSE Linux Enterprise Server 11. CVE-2010-2963: A problem in the compat ioctl handling in video4linux allowed local attackers with a video device plugged in to gain privileges on x86_64 systems. Special Instructions and Notes: Please reboot the system after installing this update. Package List: - SLE 11 SERVER Unsupported Extras (i586 ia64 ppc64 s390x x86_64): kernel-default-extra-2.6.32.24-0.2.1 - SLE 11 SERVER Unsupported Extras (i586 x86_64): kernel-xen-extra-2.6.32.24-0.2.1 - SLE 11 SERVER Unsupported Extras (ppc64): kernel-ppc64-extra-2.6.32.24-0.2.1 - SLE 11 SERVER Unsupported Extras (i586): kernel-pae-extra-2.6.32.24-0.2.1 References: https://bugzilla.novell.com/564324 https://bugzilla.novell.com/573330 https://bugzilla.novell.com/603738 https://bugzilla.novell.com/609196 https://bugzilla.novell.com/612729 https://bugzilla.novell.com/623307 https://bugzilla.novell.com/624850 https://bugzilla.novell.com/629901 https://bugzilla.novell.com/629908 https://bugzilla.novell.com/638860 https://bugzilla.novell.com/639261 https://bugzilla.novell.com/640278 https://bugzilla.novell.com/643249 https://bugzilla.novell.com/644219 https://bugzilla.novell.com/644350 https://bugzilla.novell.com/644373 https://bugzilla.novell.com/646045 https://bugzilla.novell.com/647392 https://bugzilla.novell.com/647497 https://bugzilla.novell.com/647775 https://bugzilla.novell.com/648308 https://bugzilla.novell.com/649231 https://bugzilla.novell.com/649257 https://bugzilla.novell.com/649820 https://bugzilla.novell.com/650109 https://bugzilla.novell.com/650111 https://bugzilla.novell.com/650113 https://bugzilla.novell.com/650116 https://bugzilla.novell.com/650128

1 0

openSUSE-RU-test-2010:36753-1 (low): find-utils: This update prevents updatedb to run on unknown file system types.
by maintenance＠opensuse.org 09 Nov '10

09 Nov '10

openSUSE Recommended Update: find-utils: This update prevents updatedb to run on unknown file system types. ______________________________________________________________________________ Announcement ID: openSUSE-RU-test-2010:36753-1 Rating: low References: #591460 #601894 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: Find used /etc/mtab to determine the file system type and thus wrongly classified autofs entries as unknown as these are only listed in /proc/mtab in newer kernels. As updatedb didn't ignore unknown file system types it tried to run find on automounted directories. This update makes find to use /proc/mtab and updatedb to ignore directories with unknown file system type. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch findutils-3448 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): findutils-4.4.0-46.3.1 findutils-locate-4.4.0-46.3.1 References: https://bugzilla.novell.com/591460 https://bugzilla.novell.com/601894

1 0

openSUSE-RU-test-2010:36755-1 (low): boost: zypper dup leaves old packages around. Fixed by this update.
by maintenance＠opensuse.org 09 Nov '10

09 Nov '10

openSUSE Recommended Update: boost: zypper dup leaves old packages around. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-test-2010:36755-1 Rating: low References: #544958 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The boost-license1_39_0 package didn't obsolete older versions which resulted in them not being deleted by the update. Fixed by this update now. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch boost-3409 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): boost-devel-1.39.0-4.3.1 boost-doc-1.39.0-4.3.1 boost-license1_39_0-1.39.0-4.3.1 libboost_date_time1_39_0-1.39.0-4.3.1 libboost_filesystem1_39_0-1.39.0-4.3.1 libboost_graph1_39_0-1.39.0-4.3.1 libboost_iostreams1_39_0-1.39.0-4.3.1 libboost_math1_39_0-1.39.0-4.3.1 libboost_mpi1_39_0-1.39.0-4.3.1 libboost_program_options1_39_0-1.39.0-4.3.1 libboost_python1_39_0-1.39.0-4.3.1 libboost_regex1_39_0-1.39.0-4.3.1 libboost_serialization1_39_0-1.39.0-4.3.1 libboost_signals1_39_0-1.39.0-4.3.1 libboost_system1_39_0-1.39.0-4.3.1 libboost_test1_39_0-1.39.0-4.3.1 libboost_thread1_39_0-1.39.0-4.3.1 libboost_wave1_39_0-1.39.0-4.3.1 References: https://bugzilla.novell.com/544958

1 0

openSUSE-RU-test-2010:36744-1 (low): fuse: If the username contains a comma, mounting with sshfs fails. Fixed by this update.
by maintenance＠opensuse.org 09 Nov '10

09 Nov '10

openSUSE Recommended Update: fuse: If the username contains a comma, mounting with sshfs fails. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-test-2010:36744-1 Rating: low References: #641480 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: Fix a regression in fuse version 2.8 that caused sshfs to fail when the user name contains a comma, such as in the case of sourceforge.net logins. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch fuse-3449 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.8.5]: fuse-2.8.5-2.3.1 fuse-devel-2.8.5-2.3.1 fuse-devel-static-2.8.5-2.3.1 libfuse2-2.8.5-2.3.1 - openSUSE 11.3 (x86_64) [New Version: 2.8.5]: libfuse2-32bit-2.8.5-2.3.1 References: https://bugzilla.novell.com/641480

1 0

openSUSE-RU-test-2010:36758-1 (low): netbeans: Subversion throws an exception. Fixed by this update.
by maintenance＠opensuse.org 09 Nov '10

09 Nov '10

openSUSE Recommended Update: netbeans: Subversion throws an exception. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-test-2010:36758-1 Rating: low References: #643779 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Netbeans 6.8 is not compatible with ini4j 0.5.1 distributed with openSUSE 11.3 and it broke the svn support. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch netbeans-3452 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch): netbeans-6.8-2.3.2 netbeans-apisupport-6.8-2.3.2 netbeans-ide-6.8-2.3.2 netbeans-java-6.8-2.3.2 References: https://bugzilla.novell.com/643779

1 0

openSUSE-SU-test-2010:36899-1 (moderate): Fixing a crash in ISC DHCP via dhcpv6 packets (CVE-2010-3611) and a crash in dhcrelay.
by opensuse-security＠opensuse.org 09 Nov '10

09 Nov '10

openSUSE Security Update: Fixing a crash in ISC DHCP via dhcpv6 packets (CVE-2010-3611) and a crash in dhcrelay. ______________________________________________________________________________ Announcement ID: openSUSE-SU-test-2010:36899-1 Rating: moderate References: #650902 Cross-References: CVE-2010-3611 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: ISC DHCP can be crashed with a single dhcpv6 packet. CVE-2010-3611 has been assigned to this issue. Additionally a dhcrelay crash when receiving packets on interfaces without assigned IPv4 address has been fixed as well as an infinite loop in dhcpd. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch dhcp-3484 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): dhcp-4.1.1.P1-4.3.1 dhcp-client-4.1.1.P1-4.3.1 dhcp-devel-4.1.1.P1-4.3.1 dhcp-doc-4.1.1.P1-4.3.1 dhcp-relay-4.1.1.P1-4.3.1 dhcp-server-4.1.1.P1-4.3.1 References: http://support.novell.com/security/cve/CVE-2010-3611.html https://bugzilla.novell.com/650902

1 0

openSUSE-SU-test-2010:36965-1 (critical): flash-player: Updated to v10.1.102.64 security release
by opensuse-security＠opensuse.org 05 Nov '10

05 Nov '10

openSUSE Security Update: flash-player: Updated to v10.1.102.64 security release ______________________________________________________________________________ Announcement ID: openSUSE-SU-test-2010:36965-1 Rating: critical References: #650145 Cross-References: CVE-2010-3636 CVE-2010-3637 CVE-2010-3638 CVE-2010-3639 CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3643 CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647 CVE-2010-3648 CVE-2010-3649 CVE-2010-3650 CVE-2010-3651 CVE-2010-3652 CVE-2010-3654 CVE-2010-3976 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. It includes one version update. Description: Adobe Flash Player was updated to version 10.1.102.64 to fix a critical security issue. CVE-2010-3636 CVE-2010-3637 CVE-2010-3638 CVE-2010-3639 CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3643 CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647 CVE-2010-3648 CVE-2010-3649 CVE-2010-3650 CVE-2010-3651 CVE-2010-3652 CVE-2010-3654 CVE-2010-3976 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch flash-player-3474 - openSUSE 11.2: zypper in -t patch flash-player-3474 - openSUSE 11.1: zypper in -t patch flash-player-3474 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586) [New Version: 10.1.102.64]: flash-player-10.1.102.64-0.2.1 - openSUSE 11.2 (i586) [New Version: 10.1.102.64]: flash-player-10.1.102.64-0.2.1 - openSUSE 11.1 (i586) [New Version: 10.1.102.64]: flash-player-10.1.102.64-0.1.1 References: http://support.novell.com/security/cve/CVE-2010-3636.html http://support.novell.com/security/cve/CVE-2010-3637.html http://support.novell.com/security/cve/CVE-2010-3638.html http://support.novell.com/security/cve/CVE-2010-3639.html http://support.novell.com/security/cve/CVE-2010-3640.html http://support.novell.com/security/cve/CVE-2010-3641.html http://support.novell.com/security/cve/CVE-2010-3642.html http://support.novell.com/security/cve/CVE-2010-3643.html http://support.novell.com/security/cve/CVE-2010-3644.html http://support.novell.com/security/cve/CVE-2010-3645.html http://support.novell.com/security/cve/CVE-2010-3646.html http://support.novell.com/security/cve/CVE-2010-3647.html http://support.novell.com/security/cve/CVE-2010-3648.html http://support.novell.com/security/cve/CVE-2010-3649.html http://support.novell.com/security/cve/CVE-2010-3650.html http://support.novell.com/security/cve/CVE-2010-3651.html http://support.novell.com/security/cve/CVE-2010-3652.html http://support.novell.com/security/cve/CVE-2010-3654.html http://support.novell.com/security/cve/CVE-2010-3976.html https://bugzilla.novell.com/650145

1 0

openSUSE-SU-2010:0895-2 (critical): Linux Kernel: Security/Bugfix update to fix local privilege escalations
by opensuse-security＠opensuse.org 03 Nov '10

03 Nov '10

openSUSE Security Update: Linux Kernel: Security/Bugfix update to fix local privilege escalations ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0895-2 Rating: critical References: #472432 #524981 #536699 #576344 #577967 #598293 #601283 #603411 #607123 #608994 #609506 #610362 #613273 #615143 #616080 #619470 #620443 #624850 #627386 #627447 #628604 #631801 #632309 #632568 #633543 #633585 #633593 #634991 #635413 #635425 #636112 #636461 #636850 #637436 #638277 #638324 #639481 #639482 #639709 #640660 #640721 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes one version update. Description: This security update of the SUSE Linux Enterprise 11 GA kernel updates the kernel to 2.6.27.54 and fixes various security issues and other bugs. Following security issues were fixed: CVE-2010-3310: Multiple integer signedness errors in net/rose/af_rose.c in the Linux kernel allowed local users to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a rose_getname function call, related to the rose_bind and rose_connect functions. CVE-2010-2955: A kernel information leak via the WEXT ioctl was fixed. CVE-2010-3080: A double free in an alsa error path was fixed, which could lead to kernel crashes. CVE-2010-3078: Fixed a kernel information leak in the xfs filesystem. CVE-2010-3296: Fixed a kernel information leak in the cxgb3 driver. CVE-2010-3297: Fixed a kernel information leak in the net/eql driver. CVE-2010-2954: The irda_bind function in net/irda/af_irda.c in the Linux kernel did not properly handle failure of the irda_open_tsap function, which allowed local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via multiple unsuccessful calls to bind on an AF_IRDA (aka PF_IRDA) socket. CVE-2010-2946: The 'os2' xattr namespace on the jfs filesystem could be used to bypass xattr namespace rules. CVE-2010-2942: Fixed a kernel information leak in the net scheduler code. CVE-2010-3015: Integer overflow in the ext4_ext_get_blocks function in fs/ext4/extents.c in the Linux kernel allowed local users to cause a denial of service (BUG and system crash) via a write operation on the last block of a large file, followed by a sync operation. CVE-2010-2803: The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel allowed local users to obtain potentially sensitive information from kernel memory by requesting a large memory-allocation amount. CVE-2010-2798: The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel used an incorrect size value in calculations associated with sentinel directory entries, which allowed local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact by renaming a file in a GFS2 filesystem, related to the gfs2_rename function in fs/gfs2/ops_inode.c. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch kernel-3357 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc x86_64) [New Version: 2.6.27.54]: kernel-default-2.6.27.54-0.1.1 kernel-default-base-2.6.27.54-0.1.1 kernel-default-extra-2.6.27.54-0.1.1 kernel-source-2.6.27.54-0.1.1 kernel-syms-2.6.27.54-0.1.1 kernel-vanilla-2.6.27.54-0.1.1 - openSUSE 11.1 (i586 x86_64) [New Version: 2.6.27.54]: kernel-debug-2.6.27.54-0.1.1 kernel-debug-base-2.6.27.54-0.1.1 kernel-debug-extra-2.6.27.54-0.1.1 kernel-trace-2.6.27.54-0.1.1 kernel-trace-base-2.6.27.54-0.1.1 kernel-trace-extra-2.6.27.54-0.1.1 kernel-xen-2.6.27.54-0.1.1 kernel-xen-base-2.6.27.54-0.1.1 kernel-xen-extra-2.6.27.54-0.1.1 - openSUSE 11.1 (noarch): kernel-docs-2.6.3-3.13.122 - openSUSE 11.1 (i586) [New Version: 2.6.27.54]: kernel-pae-2.6.27.54-0.1.1 kernel-pae-base-2.6.27.54-0.1.1 kernel-pae-extra-2.6.27.54-0.1.1 - openSUSE 11.1 (ppc) [New Version: 2.6.27.54]: kernel-kdump-2.6.27.54-0.1.1 kernel-ppc64-2.6.27.54-0.1.1 kernel-ppc64-base-2.6.27.54-0.1.1 kernel-ppc64-extra-2.6.27.54-0.1.1 kernel-ps3-2.6.27.54-0.1.1 References: https://bugzilla.novell.com/472432 https://bugzilla.novell.com/524981 https://bugzilla.novell.com/536699 https://bugzilla.novell.com/576344 https://bugzilla.novell.com/577967 https://bugzilla.novell.com/598293 https://bugzilla.novell.com/601283 https://bugzilla.novell.com/603411 https://bugzilla.novell.com/607123 https://bugzilla.novell.com/608994 https://bugzilla.novell.com/609506 https://bugzilla.novell.com/610362 https://bugzilla.novell.com/613273 https://bugzilla.novell.com/615143 https://bugzilla.novell.com/616080 https://bugzilla.novell.com/619470 https://bugzilla.novell.com/620443 https://bugzilla.novell.com/624850 https://bugzilla.novell.com/627386 https://bugzilla.novell.com/627447 https://bugzilla.novell.com/628604 https://bugzilla.novell.com/631801 https://bugzilla.novell.com/632309 https://bugzilla.novell.com/632568 https://bugzilla.novell.com/633543 https://bugzilla.novell.com/633585 https://bugzilla.novell.com/633593 https://bugzilla.novell.com/634991 https://bugzilla.novell.com/635413 https://bugzilla.novell.com/635425 https://bugzilla.novell.com/636112 https://bugzilla.novell.com/636461 https://bugzilla.novell.com/636850 https://bugzilla.novell.com/637436 https://bugzilla.novell.com/638277 https://bugzilla.novell.com/638324 https://bugzilla.novell.com/639481 https://bugzilla.novell.com/639482 https://bugzilla.novell.com/639709 https://bugzilla.novell.com/640660 https://bugzilla.novell.com/640721

1 0

openSUSE-SU-test-2010:36579-1 (critical): Linux Kernel Module Packages update
by opensuse-security＠opensuse.org 03 Nov '10

03 Nov '10

openSUSE Security Update: Linux Kernel Module Packages update ______________________________________________________________________________ Announcement ID: openSUSE-SU-test-2010:36579-1 Rating: critical References: #649878 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update contains kernel module packages for the current openSUSE 11.1 kernel update. It contains all kernel module packages. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch kmps-3415 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc x86_64): acx-kmp-default-20080210_2.6.27.54_0.1-2.2.21 aufs-kmp-default-cvs20081020_2.6.27.54_0.1-1.32.34 drbd-kmp-default-8.2.7_2.6.27.54_0.1-1.19.113 hci_usb-kmp-default-0.1_2.6.27.54_0.1-2.47.33 iscsitarget-kmp-default-0.4.15_2.6.27.54_0.1-89.12.7 lirc-kmp-default-0.8.4_2.6.27.54_0.1-0.1.33 ofed-kmp-default-1.4_2.6.27.54_0.1-21.16.21 oracleasm-kmp-default-2.0.5_2.6.27.54_0.1-2.36.33 pcfclock-kmp-default-0.44_2.6.27.54_0.1-227.56.33 quickcam-kmp-default-0.6.6_2.6.27.54_0.1-9.1.33 - openSUSE 11.1 (i586 x86_64): acx-kmp-debug-20080210_2.6.27.54_0.1-2.2.21 acx-kmp-trace-20080210_2.6.27.54_0.1-2.2.21 acx-kmp-xen-20080210_2.6.27.54_0.1-2.2.21 appleir-kmp-debug-1.1_2.6.27.54_0.1-114.65.30 appleir-kmp-default-1.1_2.6.27.54_0.1-114.65.30 appleir-kmp-trace-1.1_2.6.27.54_0.1-114.65.30 appleir-kmp-xen-1.1_2.6.27.54_0.1-114.65.30 aufs-kmp-debug-cvs20081020_2.6.27.54_0.1-1.32.34 aufs-kmp-trace-cvs20081020_2.6.27.54_0.1-1.32.34 aufs-kmp-xen-cvs20081020_2.6.27.54_0.1-1.32.34 brocade-bfa-kmp-debug-1.1.0.2_2.6.27.54_0.1-1.8.20 brocade-bfa-kmp-default-1.1.0.2_2.6.27.54_0.1-1.8.20 brocade-bfa-kmp-trace-1.1.0.2_2.6.27.54_0.1-1.8.20 brocade-bfa-kmp-xen-1.1.0.2_2.6.27.54_0.1-1.8.20 dazuko-kmp-debug-2.3.6_2.6.27.54_0.1-1.49.30 dazuko-kmp-default-2.3.6_2.6.27.54_0.1-1.49.30 dazuko-kmp-trace-2.3.6_2.6.27.54_0.1-1.49.30 dazuko-kmp-xen-2.3.6_2.6.27.54_0.1-1.49.30 drbd-kmp-debug-8.2.7_2.6.27.54_0.1-1.19.113 drbd-kmp-trace-8.2.7_2.6.27.54_0.1-1.19.113 drbd-kmp-xen-8.2.7_2.6.27.54_0.1-1.19.113 hci_usb-kmp-trace-0.1_2.6.27.54_0.1-2.47.33 hci_usb-kmp-xen-0.1_2.6.27.54_0.1-2.47.33 intel-iamt-heci-kmp-debug-3.1.0.31_2.6.27.54_0.1-2.40.30 intel-iamt-heci-kmp-default-3.1.0.31_2.6.27.54_0.1-2.40.30 intel-iamt-heci-kmp-trace-3.1.0.31_2.6.27.54_0.1-2.40.30 intel-iamt-heci-kmp-xen-3.1.0.31_2.6.27.54_0.1-2.40.30 iscsitarget-kmp-debug-0.4.15_2.6.27.54_0.1-89.12.7 iscsitarget-kmp-trace-0.4.15_2.6.27.54_0.1-89.12.7 iscsitarget-kmp-xen-0.4.15_2.6.27.54_0.1-89.12.7 kqemu-kmp-debug-1.4.0pre1_2.6.27.54_0.1-2.1.30 kqemu-kmp-default-1.4.0pre1_2.6.27.54_0.1-2.1.30 kqemu-kmp-trace-1.4.0pre1_2.6.27.54_0.1-2.1.30 kqemu-kmp-xen-1.4.0pre1_2.6.27.54_0.1-2.1.30 kvm-kmp-default-78.2.6.30.1_2.6.27.54_0.1-0.1.16 kvm-kmp-trace-78.2.6.30.1_2.6.27.54_0.1-0.1.16 lirc-kmp-trace-0.8.4_2.6.27.54_0.1-0.1.33 lirc-kmp-xen-0.8.4_2.6.27.54_0.1-0.1.33 ndiswrapper-kmp-default-1.53_2.6.27.54_0.1-12.38.20 ndiswrapper-kmp-trace-1.53_2.6.27.54_0.1-12.38.20 ndiswrapper-kmp-xen-1.53_2.6.27.54_0.1-12.38.20 ofed-kmp-debug-1.4_2.6.27.54_0.1-21.16.21 ofed-kmp-trace-1.4_2.6.27.54_0.1-21.16.21 omnibook-kmp-debug-20080627_2.6.27.54_0.1-1.1.30 omnibook-kmp-default-20080627_2.6.27.54_0.1-1.1.30 omnibook-kmp-trace-20080627_2.6.27.54_0.1-1.1.30 omnibook-kmp-xen-20080627_2.6.27.54_0.1-1.1.30 oracleasm-kmp-debug-2.0.5_2.6.27.54_0.1-2.36.33 oracleasm-kmp-trace-2.0.5_2.6.27.54_0.1-2.36.33 oracleasm-kmp-xen-2.0.5_2.6.27.54_0.1-2.36.33 pcfclock-kmp-debug-0.44_2.6.27.54_0.1-227.56.33 pcfclock-kmp-trace-0.44_2.6.27.54_0.1-227.56.33 virtualbox-ose-kmp-debug-2.0.6_2.6.27.54_0.1-2.9.45 virtualbox-ose-kmp-default-2.0.6_2.6.27.54_0.1-2.9.45 virtualbox-ose-kmp-trace-2.0.6_2.6.27.54_0.1-2.9.45 vmware-kmp-debug-2008.09.03_2.6.27.54_0.1-5.50.94 vmware-kmp-default-2008.09.03_2.6.27.54_0.1-5.50.94 vmware-kmp-trace-2008.09.03_2.6.27.54_0.1-5.50.94 wacom-kmp-debug-0.8.1_2.6.27.54_0.1-6.1.30 wacom-kmp-default-0.8.1_2.6.27.54_0.1-6.1.30 wacom-kmp-trace-0.8.1_2.6.27.54_0.1-6.1.30 wacom-kmp-xen-0.8.1_2.6.27.54_0.1-6.1.30 - openSUSE 11.1 (x86_64): hci_usb-kmp-debug-0.1_2.6.27.54_0.1-2.47.33 - openSUSE 11.1 (i586): acx-kmp-pae-20080210_2.6.27.54_0.1-2.2.21 appleir-kmp-pae-1.1_2.6.27.54_0.1-114.65.30 aufs-kmp-pae-cvs20081020_2.6.27.54_0.1-1.32.34 brocade-bfa-kmp-pae-1.1.0.2_2.6.27.54_0.1-1.8.20 dazuko-kmp-pae-2.3.6_2.6.27.54_0.1-1.49.30 drbd-kmp-pae-8.2.7_2.6.27.54_0.1-1.19.113 hci_usb-kmp-pae-0.1_2.6.27.54_0.1-2.47.33 intel-iamt-heci-kmp-pae-3.1.0.31_2.6.27.54_0.1-2.40.30 iscsitarget-kmp-pae-0.4.15_2.6.27.54_0.1-89.12.7 kqemu-kmp-pae-1.4.0pre1_2.6.27.54_0.1-2.1.30 kvm-kmp-pae-78.2.6.30.1_2.6.27.54_0.1-0.1.16 lirc-kmp-pae-0.8.4_2.6.27.54_0.1-0.1.33 ndiswrapper-kmp-pae-1.53_2.6.27.54_0.1-12.38.20 ofed-kmp-pae-1.4_2.6.27.54_0.1-21.16.21 omnibook-kmp-pae-20080627_2.6.27.54_0.1-1.1.30 oracleasm-kmp-pae-2.0.5_2.6.27.54_0.1-2.36.33 pcfclock-kmp-pae-0.44_2.6.27.54_0.1-227.56.33 quickcam-kmp-pae-0.6.6_2.6.27.54_0.1-9.1.33 virtualbox-ose-kmp-pae-2.0.6_2.6.27.54_0.1-2.9.45 vmware-kmp-pae-2008.09.03_2.6.27.54_0.1-5.50.94 wacom-kmp-pae-0.8.1_2.6.27.54_0.1-6.1.30 - openSUSE 11.1 (ppc): acx-kmp-ppc64-20080210_2.6.27.54_0.1-2.2.21 aufs-kmp-ppc64-cvs20081020_2.6.27.54_0.1-1.32.34 drbd-kmp-ppc64-8.2.7_2.6.27.54_0.1-1.19.113 hci_usb-kmp-ppc64-0.1_2.6.27.54_0.1-2.47.33 iscsitarget-kmp-ppc64-0.4.15_2.6.27.54_0.1-89.12.7 itrace-kmp-ppc64-0.9_2.6.27.54_0.1-172.1.80 lirc-kmp-ppc64-0.8.4_2.6.27.54_0.1-0.1.33 ofed-kmp-kdump-1.4_2.6.27.54_0.1-21.16.21 ofed-kmp-ppc64-1.4_2.6.27.54_0.1-21.16.21 oracleasm-kmp-ppc64-2.0.5_2.6.27.54_0.1-2.36.33 pcfclock-kmp-ppc64-0.44_2.6.27.54_0.1-227.56.33 quickcam-kmp-ppc64-0.6.6_2.6.27.54_0.1-9.1.33 References: https://bugzilla.novell.com/649878

1 0

openSUSE-RU-test-2010:35357-1 (low): libjpeg6: Update to support third party software without problems
by maintenance＠opensuse.org 02 Nov '10

02 Nov '10

openSUSE Recommended Update: libjpeg6: Update to support third party software without problems ______________________________________________________________________________ Announcement ID: openSUSE-RU-test-2010:35357-1 Rating: low References: #624583 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Update to support third party software without problems. Replaces older libjpeg6 versions, also for users which did an upgrade from 11.2 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libjpeg6-3325 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libjpeg6-6.2.0-4.1.1 - openSUSE 11.3 (x86_64): libjpeg6-32bit-6.2.0-4.1.1 References: https://bugzilla.novell.com/624583

1 0

openSUSE-SU-2010:0925-1 (critical): seamonkey: Security update to 2.0.10
by opensuse-security＠opensuse.org 02 Nov '10

02 Nov '10

openSUSE Security Update: seamonkey: Security update to 2.0.10 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0925-1 Rating: critical References: #649492 Affected Products: ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Package List: References: https://bugzilla.novell.com/649492

1 0

openSUSE-SU-2010:0924-1 (critical): mozilla-xulrunner191: Update to version 1.9.1.15
by opensuse-security＠opensuse.org 02 Nov '10

02 Nov '10

openSUSE Security Update: mozilla-xulrunner191: Update to version 1.9.1.15 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0924-1 Rating: critical References: #645315 #649492 Cross-References: CVE-2010-3170 CVE-2010-3174 CVE-2010-3175 CVE-2010-3176 CVE-2010-3177 CVE-2010-3178 CVE-2010-3179 CVE-2010-3180 CVE-2010-3182 CVE-2010-3183 CVE-2010-3765 Affected Products: ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: Package List: References: http://support.novell.com/security/cve/CVE-2010-3170.html http://support.novell.com/security/cve/CVE-2010-3174.html http://support.novell.com/security/cve/CVE-2010-3175.html http://support.novell.com/security/cve/CVE-2010-3176.html http://support.novell.com/security/cve/CVE-2010-3177.html http://support.novell.com/security/cve/CVE-2010-3178.html http://support.novell.com/security/cve/CVE-2010-3179.html http://support.novell.com/security/cve/CVE-2010-3180.html http://support.novell.com/security/cve/CVE-2010-3182.html http://support.novell.com/security/cve/CVE-2010-3183.html http://support.novell.com/security/cve/CVE-2010-3765.html https://bugzilla.novell.com/645315 https://bugzilla.novell.com/649492

1 0