September 2010 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2010:0608-1 (moderate): iscsitarget/tgt: multiple buffer overflows fixed
by opensuse-security＠opensuse.org 13 Sep '10

13 Sep '10

openSUSE Security Update: iscsitarget/tgt: multiple buffer overflows fixed ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0608-1 Rating: moderate References: #592928 #618574 Cross-References: CVE-2010-0743 CVE-2010-2221 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability: - CVE-2010-2221: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119) - CVE-2010-0743: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Format String Vulnerability (CWE-134) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch tgt-2874 - openSUSE 11.2: zypper in -t patch tgt-2874 - openSUSE 11.1: zypper in -t patch tgt-2874 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): tgt-0.9.0-7.1.1 - openSUSE 11.2 (i586 x86_64): tgt-0.9.0-3.2.1 - openSUSE 11.1 (i586 ppc x86_64): tgt-0.9.0-1.19.1 References: http://support.novell.com/security/cve/CVE-2010-0743.html http://support.novell.com/security/cve/CVE-2010-2221.html https://bugzilla.novell.com/592928 https://bugzilla.novell.com/618574

1 0

openSUSE-RU-2010:0606-1 (moderate): pam_mount: Avoid useless warning output
by maintenance＠opensuse.org 13 Sep '10

13 Sep '10

openSUSE Recommended Update: pam_mount: Avoid useless warning output ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0606-1 Rating: moderate References: #626127 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Do not warn about missing fskeyhash when no fskey is specified. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch pam_mount-3055 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): pam_mount-1.34-3.2.1 - openSUSE 11.3 (x86_64): pam_mount-32bit-1.34-3.2.1 References: https://bugzilla.novell.com/626127

1 0

openSUSE-SU-2010:0604-1 (moderate): iscsitarget/tgt: multiple buffer overflows fixed
by opensuse-security＠opensuse.org 13 Sep '10

13 Sep '10

openSUSE Security Update: iscsitarget/tgt: multiple buffer overflows fixed ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0604-1 Rating: moderate References: #618574 Cross-References: CVE-2010-2221 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability: - CVE-2010-2221: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119) - CVE-2010-0743: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Format String Vulnerability (CWE-134) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch iscsitarget-2877 - openSUSE 11.2: zypper in -t patch iscsitarget-2877 - openSUSE 11.1: zypper in -t patch iscsitarget-2877 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): iscsitarget-1.4.19-4.1.1 iscsitarget-kmp-default-1.4.19_k2.6.34.0_12-4.1.1 iscsitarget-kmp-desktop-1.4.19_k2.6.34.0_12-4.1.1 iscsitarget-kmp-xen-1.4.19_k2.6.34.0_12-4.1.1 - openSUSE 11.3 (i586): iscsitarget-kmp-pae-1.4.19_k2.6.34.0_12-4.1.1 - openSUSE 11.2 (i586 x86_64): iscsitarget-0.4.17-4.5.1 iscsitarget-kmp-debug-0.4.17_2.6.31.12_0.2-4.5.1 iscsitarget-kmp-default-0.4.17_2.6.31.12_0.2-4.5.1 iscsitarget-kmp-desktop-0.4.17_2.6.31.12_0.2-4.5.1 iscsitarget-kmp-xen-0.4.17_2.6.31.12_0.2-4.5.1 - openSUSE 11.2 (i586): iscsitarget-kmp-pae-0.4.17_2.6.31.12_0.2-4.5.1 - openSUSE 11.1 (i586 ppc x86_64): iscsitarget-0.4.15-89.12.1 iscsitarget-kmp-default-0.4.15_2.6.27.48_0.2-89.12.1 - openSUSE 11.1 (i586 x86_64): iscsitarget-kmp-debug-0.4.15_2.6.27.48_0.2-89.12.1 iscsitarget-kmp-trace-0.4.15_2.6.27.48_0.2-89.12.1 iscsitarget-kmp-xen-0.4.15_2.6.27.48_0.2-89.12.1 - openSUSE 11.1 (i586): iscsitarget-kmp-pae-0.4.15_2.6.27.48_0.2-89.12.1 References: http://support.novell.com/security/cve/CVE-2010-2221.html https://bugzilla.novell.com/618574

1 0

openSUSE-SU-2010:0338-2 (important): aria2 security update
by opensuse-security＠opensuse.org 13 Sep '10

13 Sep '10

openSUSE Security Update: aria2 security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0338-2 Rating: important References: #605937 Cross-References: CVE-2010-1512 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Specially crafted metalink files could trick aria2 into store downloaded files outside of the intended directory (CVE-2010-1512). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch aria2-3063 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc x86_64): aria2-0.16.0-1.20.1 References: http://support.novell.com/security/cve/CVE-2010-1512.html https://bugzilla.novell.com/605937

1 0

openSUSE-RU-2010:0601-1 (moderate): samba: Collective bugfix update
by maintenance＠opensuse.org 13 Sep '10

13 Sep '10

openSUSE Recommended Update: samba: Collective bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0601-1 Rating: moderate References: #592198 #599873 #605935 #613459 #619787 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. It includes one version update. Description: - samba could run out of file descriptors when copying a large amount of files from Windows 7 (bso#6837, bnc#619787). - Interdomain trusts with Windows 2008R2 didn't work and winbind could potentially crash (bnc#613459, bnc#599873, bnc#592198, bso#6697). - clients could terminate their connection due to a NULL deref (CVE-2010-1635, bso#7229, bnc#605935). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch samba-3047 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64) [New Version: 3.4.3]: cifs-mount-3.4.3-3.5.3 ldapsmb-1.34b-3.5.3 libnetapi-devel-3.4.3-3.5.3 libnetapi0-3.4.3-3.5.3 libsmbclient-devel-3.4.3-3.5.3 libsmbclient0-3.4.3-3.5.3 libsmbsharemodes-devel-3.4.3-3.5.3 libsmbsharemodes0-3.4.3-3.5.3 libtalloc-devel-3.4.3-3.5.3 libtalloc1-3.4.3-3.5.3 libtdb-devel-3.4.3-3.5.3 libtdb1-3.4.3-3.5.3 libwbclient-devel-3.4.3-3.5.3 libwbclient0-3.4.3-3.5.3 samba-3.4.3-3.5.3 samba-client-3.4.3-3.5.3 samba-devel-3.4.3-3.5.3 samba-krb-printing-3.4.3-3.5.3 samba-winbind-3.4.3-3.5.3 - openSUSE 11.2 (x86_64) [New Version: 3.4.3]: libsmbclient0-32bit-3.4.3-3.5.3 libtalloc1-32bit-3.4.3-3.5.3 libtdb1-32bit-3.4.3-3.5.3 libwbclient0-32bit-3.4.3-3.5.3 samba-32bit-3.4.3-3.5.3 samba-client-32bit-3.4.3-3.5.3 samba-winbind-32bit-3.4.3-3.5.3 - openSUSE 11.2 (noarch) [New Version: 3.4.3]: samba-doc-3.4.3-3.5.1 References: http://support.novell.com/security/cve/CVE-2010-1635.html https://bugzilla.novell.com/592198 https://bugzilla.novell.com/599873 https://bugzilla.novell.com/605935 https://bugzilla.novell.com/613459 https://bugzilla.novell.com/619787

1 0

openSUSE-SU-2010:0599-1 (important): php5 security update.
by opensuse-security＠opensuse.org 10 Sep '10

10 Sep '10

openSUSE Security Update: php5 security update. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0599-1 Rating: important References: #588975 #604315 #604652 #604654 #604656 #605097 #605100 #609763 #609766 #609768 #609769 #612555 #612556 #616232 #619483 #619486 #619487 #619489 #633932 #633934 #636923 Cross-References: CVE-2010-0397 CVE-2010-1860 CVE-2010-1862 CVE-2010-1864 CVE-2010-1866 CVE-2010-1914 CVE-2010-1915 CVE-2010-1917 CVE-2010-2093 CVE-2010-2094 CVE-2010-2097 CVE-2010-2100 CVE-2010-2101 CVE-2010-2190 CVE-2010-2191 CVE-2010-2225 CVE-2010-2531 CVE-2010-2950 CVE-2010-3062 CVE-2010-3063 CVE-2010-3064 CVE-2010-3065 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes 22 vulnerabilities is now available. It includes one version update. Description: PHP was updated to version 5.3.3 to fix serveral security issues. (CVE-2010-0397, CVE-2010-1860, CVE-2010-1862, CVE-2010-1864, CVE-2010-1866, CVE-2010-1914, CVE-2010-1915, CVE-2010-1917, CVE-2010-2093, CVE-2010-2094, CVE-2010-2097, CVE-2010-2100, CVE-2010-2101, CVE-2010-2190, CVE-2010-2191, CVE-2010-2225, CVE-2010-2531, CVE-2010-2950, CVE-2010-3062, CVE-2010-3063, CVE-2010-3064, CVE-2010-3065) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch apache2-mod_php5-2929 - openSUSE 11.2: zypper in -t patch apache2-mod_php5-2929 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 5.3.3]: apache2-mod_php5-5.3.3-0.1.2 php5-5.3.3-0.1.2 php5-bcmath-5.3.3-0.1.2 php5-bz2-5.3.3-0.1.2 php5-calendar-5.3.3-0.1.2 php5-ctype-5.3.3-0.1.2 php5-curl-5.3.3-0.1.2 php5-dba-5.3.3-0.1.2 php5-devel-5.3.3-0.1.2 php5-dom-5.3.3-0.1.2 php5-enchant-5.3.3-0.1.2 php5-exif-5.3.3-0.1.2 php5-fastcgi-5.3.3-0.1.2 php5-fileinfo-5.3.3-0.1.2 php5-ftp-5.3.3-0.1.2 php5-gd-5.3.3-0.1.2 php5-gettext-5.3.3-0.1.2 php5-gmp-5.3.3-0.1.2 php5-hash-5.3.3-0.1.2 php5-iconv-5.3.3-0.1.2 php5-imap-5.3.3-0.1.2 php5-intl-5.3.3-0.1.2 php5-json-5.3.3-0.1.2 php5-ldap-5.3.3-0.1.2 php5-mbstring-5.3.3-0.1.2 php5-mcrypt-5.3.3-0.1.2 php5-mysql-5.3.3-0.1.2 php5-odbc-5.3.3-0.1.2 php5-openssl-5.3.3-0.1.2 php5-pcntl-5.3.3-0.1.2 php5-pdo-5.3.3-0.1.2 php5-pgsql-5.3.3-0.1.2 php5-phar-5.3.3-0.1.2 php5-posix-5.3.3-0.1.2 php5-pspell-5.3.3-0.1.2 php5-readline-5.3.3-0.1.2 php5-shmop-5.3.3-0.1.2 php5-snmp-5.3.3-0.1.2 php5-soap-5.3.3-0.1.2 php5-sockets-5.3.3-0.1.2 php5-sqlite-5.3.3-0.1.2 php5-suhosin-5.3.3-0.1.2 php5-sysvmsg-5.3.3-0.1.2 php5-sysvsem-5.3.3-0.1.2 php5-sysvshm-5.3.3-0.1.2 php5-tidy-5.3.3-0.1.2 php5-tokenizer-5.3.3-0.1.2 php5-wddx-5.3.3-0.1.2 php5-xmlreader-5.3.3-0.1.2 php5-xmlrpc-5.3.3-0.1.2 php5-xmlwriter-5.3.3-0.1.2 php5-xsl-5.3.3-0.1.2 php5-zip-5.3.3-0.1.2 php5-zlib-5.3.3-0.1.2 - openSUSE 11.3 (noarch) [New Version: 5.3.3]: php5-pear-5.3.3-0.1.2 - openSUSE 11.2 (i586 x86_64) [New Version: 5.3.3]: apache2-mod_php5-5.3.3-0.1.1 php5-5.3.3-0.1.1 php5-bcmath-5.3.3-0.1.1 php5-bz2-5.3.3-0.1.1 php5-calendar-5.3.3-0.1.1 php5-ctype-5.3.3-0.1.1 php5-curl-5.3.3-0.1.1 php5-dba-5.3.3-0.1.1 php5-devel-5.3.3-0.1.1 php5-dom-5.3.3-0.1.1 php5-enchant-5.3.3-0.1.1 php5-exif-5.3.3-0.1.1 php5-fastcgi-5.3.3-0.1.1 php5-fileinfo-5.3.3-0.1.1 php5-ftp-5.3.3-0.1.1 php5-gd-5.3.3-0.1.1 php5-gettext-5.3.3-0.1.1 php5-gmp-5.3.3-0.1.1 php5-hash-5.3.3-0.1.1 php5-iconv-5.3.3-0.1.1 php5-imap-5.3.3-0.1.1 php5-intl-5.3.3-0.1.1 php5-json-5.3.3-0.1.1 php5-ldap-5.3.3-0.1.1 php5-mbstring-5.3.3-0.1.1 php5-mcrypt-5.3.3-0.1.1 php5-mysql-5.3.3-0.1.1 php5-odbc-5.3.3-0.1.1 php5-openssl-5.3.3-0.1.1 php5-pcntl-5.3.3-0.1.1 php5-pdo-5.3.3-0.1.1 php5-pgsql-5.3.3-0.1.1 php5-phar-5.3.3-0.1.1 php5-posix-5.3.3-0.1.1 php5-pspell-5.3.3-0.1.1 php5-readline-5.3.3-0.1.1 php5-shmop-5.3.3-0.1.1 php5-snmp-5.3.3-0.1.1 php5-soap-5.3.3-0.1.1 php5-sockets-5.3.3-0.1.1 php5-sqlite-5.3.3-0.1.1 php5-suhosin-5.3.3-0.1.1 php5-sysvmsg-5.3.3-0.1.1 php5-sysvsem-5.3.3-0.1.1 php5-sysvshm-5.3.3-0.1.1 php5-tidy-5.3.3-0.1.1 php5-tokenizer-5.3.3-0.1.1 php5-wddx-5.3.3-0.1.1 php5-xmlreader-5.3.3-0.1.1 php5-xmlrpc-5.3.3-0.1.1 php5-xmlwriter-5.3.3-0.1.1 php5-xsl-5.3.3-0.1.1 php5-zip-5.3.3-0.1.1 php5-zlib-5.3.3-0.1.1 - openSUSE 11.2 (noarch) [New Version: 5.3.3]: php5-pear-5.3.3-0.1.1 References: http://support.novell.com/security/cve/CVE-2010-0397.html http://support.novell.com/security/cve/CVE-2010-1860.html http://support.novell.com/security/cve/CVE-2010-1862.html http://support.novell.com/security/cve/CVE-2010-1864.html http://support.novell.com/security/cve/CVE-2010-1866.html http://support.novell.com/security/cve/CVE-2010-1914.html http://support.novell.com/security/cve/CVE-2010-1915.html http://support.novell.com/security/cve/CVE-2010-1917.html http://support.novell.com/security/cve/CVE-2010-2093.html http://support.novell.com/security/cve/CVE-2010-2094.html http://support.novell.com/security/cve/CVE-2010-2097.html http://support.novell.com/security/cve/CVE-2010-2100.html http://support.novell.com/security/cve/CVE-2010-2101.html http://support.novell.com/security/cve/CVE-2010-2190.html http://support.novell.com/security/cve/CVE-2010-2191.html http://support.novell.com/security/cve/CVE-2010-2225.html http://support.novell.com/security/cve/CVE-2010-2531.html http://support.novell.com/security/cve/CVE-2010-2950.html http://support.novell.com/security/cve/CVE-2010-3062.html http://support.novell.com/security/cve/CVE-2010-3063.html http://support.novell.com/security/cve/CVE-2010-3064.html http://support.novell.com/security/cve/CVE-2010-3065.html https://bugzilla.novell.com/588975 https://bugzilla.novell.com/604315 https://bugzilla.novell.com/604652 https://bugzilla.novell.com/604654 https://bugzilla.novell.com/604656 https://bugzilla.novell.com/605097 https://bugzilla.novell.com/605100 https://bugzilla.novell.com/609763 https://bugzilla.novell.com/609766 https://bugzilla.novell.com/609768 https://bugzilla.novell.com/609769 https://bugzilla.novell.com/612555 https://bugzilla.novell.com/612556 https://bugzilla.novell.com/616232 https://bugzilla.novell.com/619483 https://bugzilla.novell.com/619486 https://bugzilla.novell.com/619487 https://bugzilla.novell.com/619489 https://bugzilla.novell.com/633932 https://bugzilla.novell.com/633934 https://bugzilla.novell.com/636923

1 0

openSUSE-RU-2010:0598-1 (important): SUN Java update
by maintenance＠opensuse.org 10 Sep '10

10 Sep '10

openSUSE Recommended Update: SUN Java update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0598-1 Rating: important References: #624569 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: Oracle has released JRE 6 Update 21 in order to numerous defects. Please refer to Oracle's site for more information: http://java.sun.com/javase/6/webnotes/6u21.html Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch java-1_6_0-sun-2796 - openSUSE 11.2: zypper in -t patch java-1_6_0-sun-2796 - openSUSE 11.1: zypper in -t patch java-1_6_0-sun-2796 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 1.6.0.u21]: java-1_6_0-sun-1.6.0.u21-0.1.1 java-1_6_0-sun-alsa-1.6.0.u21-0.1.1 java-1_6_0-sun-devel-1.6.0.u21-0.1.1 java-1_6_0-sun-jdbc-1.6.0.u21-0.1.1 java-1_6_0-sun-plugin-1.6.0.u21-0.1.1 java-1_6_0-sun-src-1.6.0.u21-0.1.1 - openSUSE 11.2 (i586 x86_64) [New Version: 1.6.0.u21]: java-1_6_0-sun-1.6.0.u21-0.1.1 java-1_6_0-sun-alsa-1.6.0.u21-0.1.1 java-1_6_0-sun-demo-1.6.0.u21-0.1.1 java-1_6_0-sun-devel-1.6.0.u21-0.1.1 java-1_6_0-sun-jdbc-1.6.0.u21-0.1.1 java-1_6_0-sun-plugin-1.6.0.u21-0.1.1 java-1_6_0-sun-src-1.6.0.u21-0.1.1 - openSUSE 11.1 (i586 x86_64) [New Version: 1.6.0.u21]: java-1_6_0-sun-1.6.0.u21-0.1.1 java-1_6_0-sun-alsa-1.6.0.u21-0.1.1 java-1_6_0-sun-devel-1.6.0.u21-0.1.1 java-1_6_0-sun-jdbc-1.6.0.u21-0.1.1 java-1_6_0-sun-plugin-1.6.0.u21-0.1.1 java-1_6_0-sun-src-1.6.0.u21-0.1.1 References: https://bugzilla.novell.com/624569

1 0

openSUSE-RU-2010:0595-1 (low): ndiswrapper,wacom,lirc: Kernel modules needed to be rebuilt after the kernel update update
by maintenance＠opensuse.org 09 Sep '10

09 Sep '10

openSUSE Recommended Update: ndiswrapper,wacom,lirc: Kernel modules needed to be rebuilt after the kernel update update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0595-1 Rating: low References: #637880 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The ndiswrapper, wacom and lirc kernel modules needed to be rebuilt after kernel update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch liblirc_client0-3092 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): liblirc_client0-0.8.6_0.8.7pre1-0.1.1 lirc-0.8.6_0.8.7pre1-0.1.1 lirc-devel-0.8.6_0.8.7pre1-0.1.1 lirc-kmp-default-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1 lirc-kmp-desktop-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1 lirc-kmp-xen-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1 lirc-remotes-0.8.6_0.8.7pre1-0.1.1 ndiswrapper-1.55-8.1.1 ndiswrapper-kmp-default-1.55_k2.6.34.4_0.1-8.1.1 ndiswrapper-kmp-desktop-1.55_k2.6.34.4_0.1-8.1.1 wacom-kmp-default-0.8.1_k2.6.34.4_0.1-11.1.1 wacom-kmp-desktop-0.8.1_k2.6.34.4_0.1-11.1.1 - openSUSE 11.3 (x86_64): liblirc_client0-32bit-0.8.6_0.8.7pre1-0.1.1 - openSUSE 11.3 (i586): lirc-kmp-pae-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1 ndiswrapper-kmp-pae-1.55_k2.6.34.4_0.1-8.1.1 wacom-kmp-pae-0.8.1_k2.6.34.4_0.1-11.1.1 References: https://bugzilla.novell.com/637880

1 0

openSUSE-SU-2010:0594-1 (important): libpng security update
by opensuse-security＠opensuse.org 09 Sep '10

09 Sep '10

openSUSE Security Update: libpng security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0594-1 Rating: important References: #617866 Cross-References: CVE-2010-1205 CVE-2010-2249 Affected Products: openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Specially crafted png files could cause crashes or even execution of arbitrary code in applications using libpng to process such files (CVE-2010-1205, CVE-2010-2249). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch libpng-devel-3065 - openSUSE 11.1: zypper in -t patch libpng-devel-3065 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): libpng-devel-1.2.39-2.4.1 libpng12-0-1.2.39-2.4.1 libpng3-1.2.39-2.4.1 - openSUSE 11.2 (x86_64): libpng-devel-32bit-1.2.39-2.4.1 libpng12-0-32bit-1.2.39-2.4.1 - openSUSE 11.1 (i586 ppc x86_64): libpng-devel-1.2.31-4.40.1 libpng12-0-1.2.31-4.40.1 libpng3-1.2.31-4.40.1 - openSUSE 11.1 (x86_64): libpng-devel-32bit-1.2.31-4.40.1 libpng12-0-32bit-1.2.31-4.40.1 - openSUSE 11.1 (ppc): libpng-devel-64bit-1.2.31-4.40.1 libpng12-0-64bit-1.2.31-4.40.1 References: http://support.novell.com/security/cve/CVE-2010-1205.html http://support.novell.com/security/cve/CVE-2010-2249.html https://bugzilla.novell.com/617866

1 0

openSUSE-SU-2010:0592-1 (moderate): Linux Kernel: Security/Bugfix update to 2.6.34.4
by opensuse-security＠opensuse.org 08 Sep '10

08 Sep '10

openSUSE Security Update: Linux Kernel: Security/Bugfix update to 2.6.34.4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0592-1 Rating: moderate References: #529535 #584720 #586643 #594362 #599671 #608300 #610362 #610828 #615656 #617530 #617912 #618678 #619021 #619416 #619440 #619727 #621598 #623005 #623472 #624118 #624587 #624606 #624814 #625339 #627212 #627310 #627386 #627447 #629908 #631066 #631185 #631319 Cross-References: CVE-2010-2524 CVE-2010-2537 CVE-2010-2538 CVE-2010-2798 CVE-2010-3110 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has 27 fixes is now available. It includes one version update. Description: This update of the openSUSE 11.3 kernel brings the kernel to version 2.6.34.4 and contains a lot of bug and security fixes CVE-2010-3110: Missing bounds checks in several ioctls of the Novell Client novfs /proc interface allowed unprivileged local users to crash the kernel or even execute code in kernel context. CVE-2010-2524: a malicious local user could fill the cache used by CIFS do perform dns lookups with chosen data, therefore tricking the kernel into mounting a wrong CIFS server. CVE-2010-2798: a local user could trigger a NULL derefence on a gfs2 file system CVE-2010-2537: a local user could overwrite append-only files on a btrfs file system CVE-2010-2538: a local user could read kernel memory of a btrfs file system Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch Kernel-3038 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.6.34.4]: kernel-debug-2.6.34.4-0.1.1 kernel-debug-base-2.6.34.4-0.1.1 kernel-debug-devel-2.6.34.4-0.1.1 kernel-default-2.6.34.4-0.1.1 kernel-default-base-2.6.34.4-0.1.1 kernel-default-devel-2.6.34.4-0.1.1 kernel-desktop-2.6.34.4-0.1.1 kernel-desktop-base-2.6.34.4-0.1.1 kernel-desktop-devel-2.6.34.4-0.1.1 kernel-ec2-devel-2.6.34.4-0.1.1 kernel-syms-2.6.34.4-0.1.1 kernel-trace-2.6.34.4-0.1.1 kernel-trace-base-2.6.34.4-0.1.1 kernel-trace-devel-2.6.34.4-0.1.1 kernel-vanilla-2.6.34.4-0.1.1 kernel-vanilla-base-2.6.34.4-0.1.1 kernel-vanilla-devel-2.6.34.4-0.1.1 kernel-xen-2.6.34.4-0.1.1 kernel-xen-base-2.6.34.4-0.1.1 kernel-xen-devel-2.6.34.4-0.1.1 preload-kmp-default-1.1_k2.6.34.4_0.1-19.1.1 preload-kmp-desktop-1.1_k2.6.34.4_0.1-19.1.1 - openSUSE 11.3 (noarch) [New Version: 2.6.34.4]: kernel-devel-2.6.34.4-0.1.1 kernel-source-2.6.34.4-0.1.1 kernel-source-vanilla-2.6.34.4-0.1.1 - openSUSE 11.3 (i586) [New Version: 2.6.34.4]: kernel-pae-2.6.34.4-0.1.1 kernel-pae-base-2.6.34.4-0.1.1 kernel-pae-devel-2.6.34.4-0.1.1 kernel-vmi-devel-2.6.34.4-0.1.1 References: http://support.novell.com/security/cve/CVE-2010-2524.html http://support.novell.com/security/cve/CVE-2010-2537.html http://support.novell.com/security/cve/CVE-2010-2538.html http://support.novell.com/security/cve/CVE-2010-2798.html http://support.novell.com/security/cve/CVE-2010-3110.html https://bugzilla.novell.com/529535 https://bugzilla.novell.com/584720 https://bugzilla.novell.com/586643 https://bugzilla.novell.com/594362 https://bugzilla.novell.com/599671 https://bugzilla.novell.com/608300 https://bugzilla.novell.com/610362 https://bugzilla.novell.com/610828 https://bugzilla.novell.com/615656 https://bugzilla.novell.com/617530 https://bugzilla.novell.com/617912 https://bugzilla.novell.com/618678 https://bugzilla.novell.com/619021 https://bugzilla.novell.com/619416 https://bugzilla.novell.com/619440 https://bugzilla.novell.com/619727 https://bugzilla.novell.com/621598 https://bugzilla.novell.com/623005 https://bugzilla.novell.com/623472 https://bugzilla.novell.com/624118 https://bugzilla.novell.com/624587 https://bugzilla.novell.com/624606 https://bugzilla.novell.com/624814 https://bugzilla.novell.com/625339 https://bugzilla.novell.com/627212 https://bugzilla.novell.com/627310 https://bugzilla.novell.com/627386 https://bugzilla.novell.com/627447 https://bugzilla.novell.com/629908 https://bugzilla.novell.com/631066 https://bugzilla.novell.com/631185 https://bugzilla.novell.com/631319

1 0