August 2010 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2010:0504-1 (low): hal: This update fixes a hald-probe-input crash
by maintenance＠opensuse.org 12 Aug '10

12 Aug '10

openSUSE Recommended Update: hal: This update fixes a hald-probe-input crash ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0504-1 Rating: low References: #577489 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Fixes segmentation fault in hald-probe-input. The cause was an error structure before initialization (bnc#577489). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch hal-2884 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): hal-0.5.14-9.1.1 - openSUSE 11.3 (i586 x86_64): hal-devel-0.5.14-9.1.1 - openSUSE 11.3 (x86_64): hal-32bit-0.5.14-9.1.1 hal-devel-32bit-0.5.14-9.1.1 References: https://bugzilla.novell.com/577489

1 0

openSUSE-SU-2010:0502-1 (critical): flash-player: Updated to security update version 10.1.82.76
by opensuse-security＠opensuse.org 12 Aug '10

12 Aug '10

openSUSE Security Update: flash-player: Updated to security update version 10.1.82.76 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0502-1 Rating: critical References: #630108 Cross-References: CVE-2010-0209 CVE-2010-2188 CVE-2010-2213 CVE-2010-2214 CVE-2010-2216 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. It includes one version update. Description: Flash Player was updated to version 10.1.82.76 fixing several critical security issues. CVE-2010-0209, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214, CVE2010-2215, CVE-2010-2216 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch flash-player-2895 - openSUSE 11.2: zypper in -t patch flash-player-2895 - openSUSE 11.1: zypper in -t patch flash-player-2895 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src) [New Version: 10.1.82.76]: flash-player-10.1.82.76-0.1.1 - openSUSE 11.2 (i586 src) [New Version: 10.1.82.76]: flash-player-10.1.82.76-0.1.1 - openSUSE 11.1 (i586 src) [New Version: 10.1.82.76]: flash-player-10.1.82.76-0.1.1 References: http://support.novell.com/security/cve/CVE-2010-0209.html http://support.novell.com/security/cve/CVE-2010-2188.html http://support.novell.com/security/cve/CVE-2010-2213.html http://support.novell.com/security/cve/CVE-2010-2214.html http://support.novell.com/security/cve/CVE-2010-2216.html https://bugzilla.novell.com/630108

1 0

openSUSE-SU-2010:0500-1 (low): pcsc-lite: fix for CVE-2009-4901 and CVE-2009-4902
by opensuse-security＠opensuse.org 12 Aug '10

12 Aug '10

openSUSE Security Update: pcsc-lite: fix for CVE-2009-4901 and CVE-2009-4902 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0500-1 Rating: low References: #629026 Cross-References: CVE-2009-4901 CVE-2009-4902 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of pcsc-liste fixes two vulnerabilities: - CVE-2009-4901: local denial of service (daemon crash) via crafted SCARD_SET_ATTRIB message data, a related issue to CVE-2010-0407. - CVE-2009-4902: a buffer overflow might allow local users to gain privileges via crafted SCARD_CONTROL message data, this vulnerability exists because of an incorrect fix for CVE-2010-0407. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libpcsclite1-2908 - openSUSE 11.2: zypper in -t patch libpcsclite1-2908 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): pcsc-lite-1.5.5-7.1.1 - openSUSE 11.3 (i586 x86_64): libpcsclite1-1.5.5-7.1.1 pcsc-lite-devel-1.5.5-7.1.1 - openSUSE 11.3 (x86_64): libpcsclite1-32bit-1.5.5-7.1.1 - openSUSE 11.2 (i586 src x86_64): pcsc-lite-1.5.5-2.2.1 - openSUSE 11.2 (i586 x86_64): libpcsclite1-1.5.5-2.2.1 pcsc-lite-devel-1.5.5-2.2.1 - openSUSE 11.2 (x86_64): libpcsclite1-32bit-1.5.5-2.2.1 References: http://support.novell.com/security/cve/CVE-2009-4901.html http://support.novell.com/security/cve/CVE-2009-4902.html https://bugzilla.novell.com/629026

1 0

openSUSE-RU-2010:0498-1 (low): yast2-add-on-creator: Yast Add-on Creator build broken addons when multiple addons at one time are created. Fixed by this update.
by maintenance＠opensuse.org 11 Aug '10

11 Aug '10

openSUSE Recommended Update: yast2-add-on-creator: Yast Add-on Creator build broken addons when multiple addons at one time are created. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0498-1 Rating: low References: #540627 #623036 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. It includes two new package versions. Description: Yast Add-on Creator build broken addons when multiple addons at one time are created. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch yast2-add-on-creator-2886 - openSUSE 11.2: zypper in -t patch yast2-add-on-creator-2886 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch src) [New Version: 2.19.2]: yast2-add-on-creator-2.19.2-1.1.1 - openSUSE 11.2 (noarch src) [New Version: 2.18.9]: yast2-add-on-creator-2.18.9-0.1.1 References: https://bugzilla.novell.com/540627 https://bugzilla.novell.com/623036

1 0

openSUSE-RU-2010:0497-1 (low): sysvinit: "startproc/checkproc/killproc" do not work with scripts. Fixed by this update.
by maintenance＠opensuse.org 10 Aug '10

10 Aug '10

openSUSE Recommended Update: sysvinit: "startproc/checkproc/killproc" do not work with scripts. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0497-1 Rating: low References: #559534 #623766 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: "startproc/checkproc/killproc" do not work with scripts. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch sysvinit-2856 - openSUSE 11.2: zypper in -t patch sysvinit-2856 - openSUSE 11.1: zypper in -t patch sysvinit-2856 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): sysvinit-2.88-10.1.1 - openSUSE 11.3 (i586 x86_64): sysvinit-tools-2.88-10.1.1 - openSUSE 11.2 (i586 src x86_64): sysvinit-2.86-215.3.1 - openSUSE 11.1 (i586 ppc src x86_64): sysvinit-2.86-186.18.1 References: https://bugzilla.novell.com/559534 https://bugzilla.novell.com/623766

1 0

openSUSE-SU-2010:0496-1 (important): strongswan: fixing snprintf overflows
by opensuse-security＠opensuse.org 10 Aug '10

10 Aug '10

openSUSE Security Update: strongswan: fixing snprintf overflows ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0496-1 Rating: important References: #615915 Cross-References: CVE-2010-2628 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Remote unauthenticated attackers could cause a buffer overflow in strongswan's IKE deamon by using specially crafted certificates or identify information. Attackers could potentially exploit that to execute code (CVE-2010-2628). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch strongswan-2855 - openSUSE 11.2: zypper in -t patch strongswan-2855 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): strongswan-4.4.0-4.1.1 - openSUSE 11.3 (i586 x86_64): strongswan-doc-4.4.0-4.1.1 strongswan-ikev1-4.4.0-4.1.1 strongswan-ikev2-4.4.0-4.1.1 strongswan-ipsec-4.4.0-4.1.1 strongswan-libs0-4.4.0-4.1.1 strongswan-nm-4.4.0-4.1.1 - openSUSE 11.2 (i586 src x86_64): strongswan-4.3.4-4.4.1 - openSUSE 11.2 (i586 x86_64): strongswan-doc-4.3.4-4.4.1 References: http://support.novell.com/security/cve/CVE-2010-2628.html https://bugzilla.novell.com/615915

1 0

openSUSE-RU-2010:0489-1 (low): build: Distribution default is wrong. Fixed by this update.
by maintenance＠opensuse.org 09 Aug '10

09 Aug '10

openSUSE Recommended Update: build: Distribution default is wrong. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0489-1 Rating: low References: #618004 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update brings the build package to the 2010-07-28 version which includes many fixes and enhancements for building openSUSE packages, including: - export BUILD_DEBUG so rpmlint can check for it (bnc#618004) - support for Files provide - document --repo and --dis - update wiki links - fix bugs in repo handling - fix distribution autodetection code Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch build-2854 - openSUSE 11.2: zypper in -t patch build-2854 - openSUSE 11.1: zypper in -t patch build-2854 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch src) [New Version: 2010.07.28]: build-2010.07.28-1.1.1 - openSUSE 11.3 (noarch) [New Version: 2010.07.28]: build-mkbaselibs-2010.07.28-1.1.1 - openSUSE 11.2 (noarch src) [New Version: 2010.07.28]: build-2010.07.28-1.1.1 - openSUSE 11.1 (noarch src) [New Version: 2010.07.28]: build-2010.07.28-1.1.1 References: https://bugzilla.novell.com/618004

1 0

openSUSE-RU-2010:0488-1 (low): xpdf-poppler: This update fixes a crash in xpdf-poppler.
by maintenance＠opensuse.org 09 Aug '10

09 Aug '10

openSUSE Recommended Update: xpdf-poppler: This update fixes a crash in xpdf-poppler. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0488-1 Rating: low References: #617623 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes two crashes in XPutImage, "*image is NULL". Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch xpdf-poppler-2870 - openSUSE 11.2: zypper in -t patch xpdf-poppler-2870 - openSUSE 11.1: zypper in -t patch xpdf-2865 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): xpdf-poppler-3.02-11.1.1 - openSUSE 11.2 (i586 src x86_64): xpdf-poppler-3.02-4.6.1 - openSUSE 11.1 (i586 ppc src x86_64): xpdf-3.02-97.82.1 - openSUSE 11.1 (i586 ppc x86_64): xpdf-tools-3.02-97.82.1 References: https://bugzilla.novell.com/617623

1 0

openSUSE-RU-2010:0487-1 (low): beaver: Update from 0.4.0rc1 to the stable release 0.4.0
by maintenance＠opensuse.org 09 Aug '10

09 Aug '10

openSUSE Recommended Update: beaver: Update from 0.4.0rc1 to the stable release 0.4.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0487-1 Rating: low References: #623221 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Beaver has been updated to stable release 0.4.0 form previous 0.4.0 release candidate 1. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch beaver-2866 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): beaver-0.4.0-0.1.1 References: https://bugzilla.novell.com/623221

1 0

openSUSE-RU-2010:0486-1 (moderate): apparmor-utils: It is totally broken - can't find their perl module. Fixed by this update.
by maintenance＠opensuse.org 09 Aug '10

09 Aug '10

openSUSE Recommended Update: apparmor-utils: It is totally broken - can't find their perl module. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0486-1 Rating: moderate References: #619893 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Apparmor utils is totally broken - can't find their perl module. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch apparmor-utils-2873 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch src): apparmor-utils-2.3.1-19.1.1 References: https://bugzilla.novell.com/619893

1 0