November 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2011:1248-1: ipv6, rcnetwork returns before dad completed
by maintenance＠opensuse.org 15 Nov '11

15 Nov '11

openSUSE Recommended Update: ipv6, rcnetwork returns before dad completed ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:1248-1 Rating: low References: #697929 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for sysconfig: - 697929: Fixed to wait for the end of ipv6 duplicate address detection, that can cause failures of further services. Added LINK_READY_WAIT and IPV6_DAD_WAIT variables Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch sysconfig-5396 - openSUSE 11.3: zypper in -t patch sysconfig-5396 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): sysconfig-0.74.5-6.9.1 - openSUSE 11.3 (i586 x86_64): sysconfig-0.73.7-2.11.1 References: https://bugzilla.novell.com/697929

1 0

openSUSE-SU-2011:1247-1: moderate: radvd: security issues fixed
by opensuse-security＠opensuse.org 15 Nov '11

15 Nov '11

openSUSE Security Update: radvd: security issues fixed ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1247-1 Rating: moderate References: #721968 Cross-References: CVE-2011-3601 CVE-2011-3602 CVE-2011-3603 CVE-2011-3604 CVE-2011-3605 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update of radvd fixes the following security flaws: - arbitrary file overwrite flaw through unsanitized interface names (CVE-2011-3602), - missing return value checks in privsep_init() which could cause radvd to keep running with root privileges (CVE-2011-3603), - buffer overread flaws in the process_ra() function (CVE-2011-3604), - temporary denial of service flaw triggered with a flood of ND_ROUTER_SOLICIT (CVE-2011-3605) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch radvd-5316 - openSUSE 11.3: zypper in -t patch radvd-5316 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): radvd-1.3-9.10.1 - openSUSE 11.3 (i586 x86_64): radvd-1.3-6.3.1 References: http://support.novell.com/security/cve/CVE-2011-3601.html http://support.novell.com/security/cve/CVE-2011-3602.html http://support.novell.com/security/cve/CVE-2011-3603.html http://support.novell.com/security/cve/CVE-2011-3604.html http://support.novell.com/security/cve/CVE-2011-3605.html https://bugzilla.novell.com/721968

1 0

openSUSE-SU-2011:1243-1: critical: MozillaFirefox secuirty update
by opensuse-security＠opensuse.org 15 Nov '11

15 Nov '11

openSUSE Security Update: MozillaFirefox secuirty update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1243-1 Rating: critical References: #728520 Cross-References: CVE-2011-3648 CVE-2011-3650 CVE-2011-3651 CVE-2011-3652 CVE-2011-3654 CVE-2011-3655 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. It includes 5 new package versions. Description: MozillaFirefox was updated to version 8 (bnc#728520) to fix the following security issues: * MFSA 2011-47/CVE-2011-3648 (bmo#690225) Potential XSS against sites using Shift-JIS * MFSA 2011-48/CVE-2011-3651/CVE-2011-3652/CVE-2011-3654 Miscellaneous memory safety hazards * MFSA 2011-49/CVE-2011-3650 (bmo#674776) Memory corruption while profiling using Firebug * MFSA 2011-52/CVE-2011-3655 (bmo#672182) Code execution via NoWaiverWrapper - rebased patches Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaFirefox-5399 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.9.2.24,3.1.16,5.0 and 8.0]: MozillaFirefox-8.0-0.2.2 MozillaFirefox-branding-openSUSE-5.0-2.5.1 MozillaFirefox-branding-upstream-8.0-0.2.2 MozillaFirefox-buildsymbols-8.0-0.2.2 MozillaFirefox-devel-8.0-0.2.2 MozillaFirefox-translations-common-8.0-0.2.2 MozillaFirefox-translations-other-8.0-0.2.2 MozillaThunderbird-3.1.16-0.19.2 MozillaThunderbird-buildsymbols-3.1.16-0.19.2 MozillaThunderbird-devel-3.1.16-0.19.2 MozillaThunderbird-translations-common-3.1.16-0.19.2 MozillaThunderbird-translations-other-3.1.16-0.19.2 enigmail-1.1.2+3.1.16-0.19.2 mozilla-js192-1.9.2.24-0.2.2 mozilla-xulrunner192-1.9.2.24-0.2.2 mozilla-xulrunner192-buildsymbols-1.9.2.24-0.2.2 mozilla-xulrunner192-devel-1.9.2.24-0.2.2 mozilla-xulrunner192-gnome-1.9.2.24-0.2.2 mozilla-xulrunner192-translations-common-1.9.2.24-0.2.2 mozilla-xulrunner192-translations-other-1.9.2.24-0.2.2 - openSUSE 11.4 (x86_64) [New Version: 1.9.2.24]: mozilla-js192-32bit-1.9.2.24-0.2.2 mozilla-xulrunner192-32bit-1.9.2.24-0.2.2 mozilla-xulrunner192-gnome-32bit-1.9.2.24-0.2.2 mozilla-xulrunner192-translations-common-32bit-1.9.2.24-0.2.2 mozilla-xulrunner192-translations-other-32bit-1.9.2.24-0.2.2 References: http://support.novell.com/security/cve/CVE-2011-3648.html http://support.novell.com/security/cve/CVE-2011-3650.html http://support.novell.com/security/cve/CVE-2011-3651.html http://support.novell.com/security/cve/CVE-2011-3652.html http://support.novell.com/security/cve/CVE-2011-3654.html http://support.novell.com/security/cve/CVE-2011-3655.html https://bugzilla.novell.com/728520

1 0

openSUSE-SU-2011:1242-1: critical: MozillaFirefox
by opensuse-security＠opensuse.org 15 Nov '11

15 Nov '11

openSUSE Security Update: MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1242-1 Rating: critical References: #728520 Cross-References: CVE-2011-3647 CVE-2011-3648 CVE-2011-3650 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. It includes four new package versions. Description: MozillaFirefox has been updated to version 3.6.24 to fix the following security issues: * MFSA 2011-46/CVE-2011-3647 (bmo#680880) loadSubScript unwraps XPCNativeWrapper scope parameter * MFSA 2011-47/CVE-2011-3648 (bmo#690225) Potential XSS against sites using Shift-JIS * MFSA 2011-49/CVE-2011-3650 (bmo#674776) Memory corruption while profiling using Firebug Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch MozillaFirefox-5408 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 1.9.2.24,3.1.16 and 3.6.24]: MozillaFirefox-3.6.24-0.2.1 MozillaFirefox-branding-openSUSE-3.5-17.3.1 MozillaFirefox-branding-upstream-3.6.24-0.2.1 MozillaFirefox-translations-common-3.6.24-0.2.1 MozillaFirefox-translations-other-3.6.24-0.2.1 MozillaThunderbird-3.1.16-0.23.1 MozillaThunderbird-devel-3.1.16-0.23.1 MozillaThunderbird-translations-common-3.1.16-0.23.1 MozillaThunderbird-translations-other-3.1.16-0.23.1 enigmail-1.1.2+3.1.16-0.23.1 mozilla-js192-1.9.2.24-0.2.1 mozilla-xulrunner192-1.9.2.24-0.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.24-0.2.1 mozilla-xulrunner192-devel-1.9.2.24-0.2.1 mozilla-xulrunner192-gnome-1.9.2.24-0.2.1 mozilla-xulrunner192-translations-common-1.9.2.24-0.2.1 mozilla-xulrunner192-translations-other-1.9.2.24-0.2.1 - openSUSE 11.3 (x86_64) [New Version: 1.9.2.24]: mozilla-js192-32bit-1.9.2.24-0.2.1 mozilla-xulrunner192-32bit-1.9.2.24-0.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.24-0.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.24-0.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.24-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-3647.html http://support.novell.com/security/cve/CVE-2011-3648.html http://support.novell.com/security/cve/CVE-2011-3650.html https://bugzilla.novell.com/728520

1 0

openSUSE-SU-2011:1241-1: mozilla-nss
by opensuse-security＠opensuse.org 15 Nov '11

15 Nov '11

openSUSE Security Update: mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1241-1 Rating: low References: #726096 #728520 Cross-References: CVE-2011-3640 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. It includes one version update. Description: This mozilla update fixes the following security issues: - explicitely distrust DigiCert Sdn. Bhd (bnc#728520, bmo#698753) - make sure NSS_NoDB_Init does not try to use wrong certificate databases (CVE-2011-3640, bnc#726096, bmo#641052) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libfreebl3-5398 - openSUSE 11.3: zypper in -t patch libfreebl3-5398 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 3.12.11]: libfreebl3-3.12.11-1.7.1 libsoftokn3-3.12.11-1.7.1 mozilla-nss-3.12.11-1.7.1 mozilla-nss-certs-3.12.11-1.7.1 mozilla-nss-devel-3.12.11-1.7.1 mozilla-nss-sysinit-3.12.11-1.7.1 mozilla-nss-tools-3.12.11-1.7.1 - openSUSE 11.4 (x86_64) [New Version: 3.12.11]: libfreebl3-32bit-3.12.11-1.7.1 libsoftokn3-32bit-3.12.11-1.7.1 mozilla-nss-32bit-3.12.11-1.7.1 mozilla-nss-certs-32bit-3.12.11-1.7.1 mozilla-nss-sysinit-32bit-3.12.11-1.7.1 - openSUSE 11.3 (i586 x86_64) [New Version: 3.12.11]: libfreebl3-3.12.11-1.7.1 libsoftokn3-3.12.11-1.7.1 mozilla-nss-3.12.11-1.7.1 mozilla-nss-certs-3.12.11-1.7.1 mozilla-nss-devel-3.12.11-1.7.1 mozilla-nss-sysinit-3.12.11-1.7.1 mozilla-nss-tools-3.12.11-1.7.1 - openSUSE 11.3 (x86_64) [New Version: 3.12.11]: libfreebl3-32bit-3.12.11-1.7.1 libsoftokn3-32bit-3.12.11-1.7.1 mozilla-nss-32bit-3.12.11-1.7.1 mozilla-nss-certs-32bit-3.12.11-1.7.1 mozilla-nss-sysinit-32bit-3.12.11-1.7.1 References: http://support.novell.com/security/cve/CVE-2011-3640.html https://bugzilla.novell.com/726096 https://bugzilla.novell.com/728520

1 0

openSUSE-SU-2011:1240-1: critical: VUL-0: flash-player: sec. update to version 11.1.102.55
by opensuse-security＠opensuse.org 15 Nov '11

15 Nov '11

openSUSE Security Update: VUL-0: flash-player: sec. update to version 11.1.102.55 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1240-1 Rating: critical References: #729797 Cross-References: CVE-2011-2445 CVE-2011-2450 CVE-2011-2451 CVE-2011-2452 CVE-2011-2453 CVE-2011-2454 CVE-2011-2455 CVE-2011-2456 CVE-2011-2457 CVE-2011-2458 CVE-2011-2459 CVE-2011-2460 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. It includes two new package versions. Description: flash-player update to version 11.1.102.55 to fix the following critical security issues: CVE-2011-2445, CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2458, CVE-2011-2459, CVE-2011-2460 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch flash-player-5420 - openSUSE 11.3: zypper in -t patch flash-player-5420 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 11.1.102.55]: flash-player-11.1.102.55-0.4.1 - openSUSE 11.3 (i586) [New Version: 10.3.183.10]: flash-player-10.3.183.10-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-2445.html http://support.novell.com/security/cve/CVE-2011-2450.html http://support.novell.com/security/cve/CVE-2011-2451.html http://support.novell.com/security/cve/CVE-2011-2452.html http://support.novell.com/security/cve/CVE-2011-2453.html http://support.novell.com/security/cve/CVE-2011-2454.html http://support.novell.com/security/cve/CVE-2011-2455.html http://support.novell.com/security/cve/CVE-2011-2456.html http://support.novell.com/security/cve/CVE-2011-2457.html http://support.novell.com/security/cve/CVE-2011-2458.html http://support.novell.com/security/cve/CVE-2011-2459.html http://support.novell.com/security/cve/CVE-2011-2460.html https://bugzilla.novell.com/729797

1 0

openSUSE-SU-2011:1238-1: critical: acroread
by opensuse-security＠opensuse.org 14 Nov '11

14 Nov '11

openSUSE Security Update: acroread ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1238-1 Rating: critical References: #717724 Cross-References: CVE-2011-1353 CVE-2011-2431 CVE-2011-2432 CVE-2011-2433 CVE-2011-2434 CVE-2011-2435 CVE-2011-2436 CVE-2011-2437 CVE-2011-2438 CVE-2011-2439 CVE-2011-2440 CVE-2011-2441 CVE-2011-2442 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. It includes one version update. Description: acrobat reader was updated to version 9.4.6 to fix several security issues (CVE-2011-1353, CVE-2011-2431, CVE-2011-2432, CVE-2011-2433, CVE-2011-2434, CVE-2011-2435, CVE-2011-2436, CVE-2011-2437, CVE-2011-2438, CVE-2011-2439, CVE-2011-2440, CVE-2011-2441, CVE-2011-2442) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch acroread-5411 - openSUSE 11.3: zypper in -t patch acroread-5411 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586) [New Version: 9.4.6]: acroread-9.4.6-0.5.1 - openSUSE 11.3 (i586) [New Version: 9.4.6]: acroread-9.4.6-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-1353.html http://support.novell.com/security/cve/CVE-2011-2431.html http://support.novell.com/security/cve/CVE-2011-2432.html http://support.novell.com/security/cve/CVE-2011-2433.html http://support.novell.com/security/cve/CVE-2011-2434.html http://support.novell.com/security/cve/CVE-2011-2435.html http://support.novell.com/security/cve/CVE-2011-2436.html http://support.novell.com/security/cve/CVE-2011-2437.html http://support.novell.com/security/cve/CVE-2011-2438.html http://support.novell.com/security/cve/CVE-2011-2439.html http://support.novell.com/security/cve/CVE-2011-2440.html http://support.novell.com/security/cve/CVE-2011-2441.html http://support.novell.com/security/cve/CVE-2011-2442.html https://bugzilla.novell.com/717724

1 0

openSUSE-RU-2011:1236-1: moderate: sysstat stops creating reports at 6pm
by maintenance＠opensuse.org 11 Nov '11

11 Nov '11

openSUSE Recommended Update: sysstat stops creating reports at 6pm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:1236-1 Rating: moderate References: #720609 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for sysstat: - 668385: daily sysstat statistics in /var/log/sa/sar* do not contain entries after 6pm. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch sysstat-5353 - openSUSE 11.3: zypper in -t patch sysstat-5353 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): sysstat-9.0.6.1-14.15.1 sysstat-isag-9.0.6.1-14.15.1 - openSUSE 11.3 (i586 x86_64): sysstat-9.0.4-7.3.1 sysstat-isag-9.0.4-7.3.1 References: https://bugzilla.novell.com/720609

1 0

openSUSE-RU-2011:1228-1: flash-player: Update to 11.0.1.152
by maintenance＠opensuse.org 09 Nov '11

09 Nov '11

openSUSE Recommended Update: flash-player: Update to 11.0.1.152 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:1228-1 Rating: low References: #722151 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update provides Flash Player 11.0.1.152, which includes new features as well as enhancements and bug fixes related to security, stability, performance and device compatibility. Please read http://kb2.adobe.com/cps/919/cpsid_91932.html for details. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch flash-player-5229 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 11.0.1.152]: flash-player-11.0.1.152-0.2.1 References: https://bugzilla.novell.com/722151

1 0

openSUSE-RU-2011:1226-1: moderate: Xen: Collective October/2011 Update
by maintenance＠opensuse.org 09 Nov '11

09 Nov '11

openSUSE Recommended Update: Xen: Collective October/2011 Update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:1226-1 Rating: moderate References: #683580 #691256 #694863 #701686 #704160 #706106 #706436 #706574 #712051 #712823 #715655 #716695 #722794 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has 13 recommended fixes can now be installed. It includes one version update. Description: Collective Update for Xen Xen: - 712823 - Xen guest does not start reliable when rebooted - 694863 - kexec fails in xen - 691256 - remove /etc/init.d/xencommons, its unused - 716695 - domUs using tap devices will not start - 683580 - Xen Hypervisor occasionally hangs forever during boot up after the message "Enabled directed EOI with ioapic_ack_old on! - 701686 - kdump hangs on megaraid_sas driver - 712051 - IOMMU fault livelock - 715655 - No support for performance counters for Westmere E7-8837 and SandyBridge i5-2500 - 706106 - Inconsistent reporting of VM names during migration - 704160 - crm resource migrate fails with xen machines - 706574 - xm console DomUName hang after "xm save/restore" of PVM on the latest Xen Libvirt: - 706436 - KVM crash dump speed limited by libvirt vm-install: - 722794 - Support for RHEL 6 is missing from vm-install Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch xen-201110-5261 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 0.4.32]: libvirt-0.8.1-4.12.1 libvirt-client-0.8.1-4.12.1 libvirt-devel-0.8.1-4.12.1 libvirt-doc-0.8.1-4.12.1 libvirt-python-0.8.1-4.12.1 vm-install-0.4.32-0.4.1 xen-4.0.2_21511_03-0.5.1 xen-devel-4.0.2_21511_03-0.5.1 xen-doc-html-4.0.2_21511_03-0.5.1 xen-doc-pdf-4.0.2_21511_03-0.5.1 xen-kmp-default-4.0.2_21511_03_k2.6.34.10_0.2-0.5.1 xen-kmp-desktop-4.0.2_21511_03_k2.6.34.10_0.2-0.5.1 xen-libs-4.0.2_21511_03-0.5.1 xen-tools-4.0.2_21511_03-0.5.1 xen-tools-domU-4.0.2_21511_03-0.5.1 - openSUSE 11.3 (i586): xen-kmp-pae-4.0.2_21511_03_k2.6.34.10_0.2-0.5.1 References: https://bugzilla.novell.com/683580 https://bugzilla.novell.com/691256 https://bugzilla.novell.com/694863 https://bugzilla.novell.com/701686 https://bugzilla.novell.com/704160 https://bugzilla.novell.com/706106 https://bugzilla.novell.com/706436 https://bugzilla.novell.com/706574 https://bugzilla.novell.com/712051 https://bugzilla.novell.com/712823 https://bugzilla.novell.com/715655 https://bugzilla.novell.com/716695 https://bugzilla.novell.com/722794

1 0