February 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2011:0109-1 (critical): flash-player: Security update to 10.2.152.26 release
by opensuse-security＠opensuse.org 10 Feb '11

10 Feb '11

openSUSE Security Update: flash-player: Security update to 10.2.152.26 release ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0109-1 Rating: critical References: #670531 Cross-References: CVE-2011-0558 CVE-2011-0559 CVE-2011-0560 CVE-2011-0561 CVE-2011-0571 CVE-2011-0572 CVE-2011-0573 CVE-2011-0574 CVE-2011-0575 CVE-2011-0577 CVE-2011-0578 CVE-2011-0607 CVE-2011-0608 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. It includes one version update. Description: The Adobe Flash Player was updated to the 10.2.152.26 release, fixing lots of bugs and security issues. The update is rated critical by Adobe, although details have not been published. CVEs addressed: CVE-2011-0558, CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0575, CVE-2011-0577, CVE-2011-0578, CVE-2011-0607, CVE-2011-0608 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch flash-player-3925 - openSUSE 11.2: zypper in -t patch flash-player-3925 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586) [New Version: 10.2.152.26]: flash-player-10.2.152.26-0.2.1 - openSUSE 11.2 (i586) [New Version: 10.2.152.26]: flash-player-10.2.152.26-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-0558.html http://support.novell.com/security/cve/CVE-2011-0559.html http://support.novell.com/security/cve/CVE-2011-0560.html http://support.novell.com/security/cve/CVE-2011-0561.html http://support.novell.com/security/cve/CVE-2011-0571.html http://support.novell.com/security/cve/CVE-2011-0572.html http://support.novell.com/security/cve/CVE-2011-0573.html http://support.novell.com/security/cve/CVE-2011-0574.html http://support.novell.com/security/cve/CVE-2011-0575.html http://support.novell.com/security/cve/CVE-2011-0577.html http://support.novell.com/security/cve/CVE-2011-0578.html http://support.novell.com/security/cve/CVE-2011-0607.html http://support.novell.com/security/cve/CVE-2011-0608.html https://bugzilla.novell.com/670531

1 0

openSUSE-RU-2011:0108-1 (low): samba: Collective Fixes update
by maintenance＠opensuse.org 09 Feb '11

09 Feb '11

openSUSE Recommended Update: samba: Collective Fixes update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0108-1 Rating: low References: #602418 #606304 #625936 #637755 #640870 #654719 #656112 #661842 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This collective update for samba provides the following fixes: - Remove pcap_cache_loaded asserts from (re)load_printers. pcap_cache_loaded() returns false if the pcap cache contains no printer entries. correct call ordering is already enforced. (bso#7836); (bnc#625936). - Fix error paths in cups_async_callback(), an empty cups printer list should not be treated as an error; (bnc#661842). - Abide by printcap cache time, reload parent smbd pcap cache on expiry; (bso#7836); (bnc#625936). - Fix race in cups async printer services reload; (bso#7836); (bnc#625936). - Fix Dolphin SMB share IO with SMB signing enabled; (bso#7791); (bnc#656112). - Reduce unnecessary ldap round trips and eliminate invalid DN messages; (bnc#654719). - Fix smbd crash with CUPS printers and no [printers] share defined; (bso#7297); (bnc#637755). - Fix printing from 64-bit windows clients; (bso#6888); (bnc#640870). - Use cached ntlm password in libsmbclient. Prevent lockouts when kerberos tickets are lost; (bnc#602418); (bnc#606304). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch samba-3895 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): ldapsmb-1.34b-5.3.1 libldb-devel-3.5.4-5.3.1 libldb0-3.5.4-5.3.1 libnetapi-devel-3.5.4-5.3.1 libnetapi0-3.5.4-5.3.1 libsmbclient-devel-3.5.4-5.3.1 libsmbclient0-3.5.4-5.3.1 libsmbsharemodes-devel-3.5.4-5.3.1 libsmbsharemodes0-3.5.4-5.3.1 libtalloc-devel-3.5.4-5.3.1 libtalloc2-3.5.4-5.3.1 libtdb-devel-3.5.4-5.3.1 libtdb1-3.5.4-5.3.1 libtevent-devel-3.5.4-5.3.1 libtevent0-3.5.4-5.3.1 libwbclient-devel-3.5.4-5.3.1 libwbclient0-3.5.4-5.3.1 samba-3.5.4-5.3.1 samba-client-3.5.4-5.3.1 samba-devel-3.5.4-5.3.1 samba-krb-printing-3.5.4-5.3.1 samba-winbind-3.5.4-5.3.1 - openSUSE 11.3 (x86_64): libsmbclient0-32bit-3.5.4-5.3.1 libtdb1-32bit-3.5.4-5.3.1 libwbclient0-32bit-3.5.4-5.3.1 samba-32bit-3.5.4-5.3.1 samba-client-32bit-3.5.4-5.3.1 samba-winbind-32bit-3.5.4-5.3.1 - openSUSE 11.3 (noarch): samba-doc-3.5.4-5.3.1 References: https://bugzilla.novell.com/602418 https://bugzilla.novell.com/606304 https://bugzilla.novell.com/625936 https://bugzilla.novell.com/637755 https://bugzilla.novell.com/640870 https://bugzilla.novell.com/654719 https://bugzilla.novell.com/656112 https://bugzilla.novell.com/661842

1 0

openSUSE-RU-2011:0107-1 (low): glib2: Fixed file monitoring over NFS mounts
by maintenance＠opensuse.org 09 Feb '11

09 Feb '11

openSUSE Recommended Update: glib2: Fixed file monitoring over NFS mounts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0107-1 Rating: low References: #667260 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes GNOME file monitoring over NFS: - bnc#667260: No file monitoring over NFS mounts Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch glib2-3893 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): glib2-2.24.1-3.3.1 glib2-branding-upstream-2.24.1-3.3.1 glib2-devel-2.24.1-3.3.1 libgio-2_0-0-2.24.1-3.3.1 libgio-fam-2.24.1-3.3.1 libglib-2_0-0-2.24.1-3.3.1 libgmodule-2_0-0-2.24.1-3.3.1 libgobject-2_0-0-2.24.1-3.3.1 libgthread-2_0-0-2.24.1-3.3.1 - openSUSE 11.3 (x86_64): libgio-2_0-0-32bit-2.24.1-3.3.1 libglib-2_0-0-32bit-2.24.1-3.3.1 libgmodule-2_0-0-32bit-2.24.1-3.3.1 libgobject-2_0-0-32bit-2.24.1-3.3.1 libgthread-2_0-0-32bit-2.24.1-3.3.1 - openSUSE 11.3 (noarch): glib2-lang-2.24.1-3.3.1 References: https://bugzilla.novell.com/667260

1 0

openSUSE-SU-2011:0105-1 (important): exim: security update
by opensuse-security＠opensuse.org 08 Feb '11

08 Feb '11

openSUSE Security Update: exim: security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0105-1 Rating: important References: #668599 Cross-References: CVE-2011-0017 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Exim was updated to verify the return value of the setuid/setgid calls now. (CVE-2011-0017: CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C): Link Following (CWE-59)) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch exim-3922 - openSUSE 11.2: zypper in -t patch exim-3922 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): exim-4.71-4.5.1 eximon-4.71-4.5.1 eximstats-html-4.71-4.5.1 - openSUSE 11.2 (i586 x86_64): exim-4.69-72.8.1 eximon-4.69-72.8.1 eximstats-html-4.69-72.8.1 References: http://support.novell.com/security/cve/CVE-2011-0017.html https://bugzilla.novell.com/668599

1 0

openSUSE-SU-2011:0103-1 (important): Opera 11.01 fixes several critical security bugs
by opensuse-security＠opensuse.org 07 Feb '11

07 Feb '11

openSUSE Security Update: Opera 11.01 fixes several critical security bugs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0103-1 Rating: important References: #667639 Cross-References: CVE-2011-0681 CVE-2011-0682 CVE-2011-0683 CVE-2011-0684 CVE-2011-0685 CVE-2011-0686 CVE-2011-0687 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. It includes one version update. Description: Opera 11.01 fixes several critical security bugs: - CVE-2011-0681: CVSS v2 Base Score: 4.3 (MEDIUM) (AV:N/AC:M/Au:N/C:N/I:P/A:N): Other (CWE-Other) - CVE-2011-0682: CVSS v2 Base Score: 9.3 (HIGH) (AV:N/AC:M/Au:N/C:C/I:C/A:C): Buffer Errors (CWE-119) - CVE-2011-0683: CVSS v2 Base Score: 4.3 (MEDIUM) (AV:N/AC:M/Au:N/C:N/I:P/A:N): Other (CWE-Other) - CVE-2011-0684: CVSS v2 Base Score: 7.8 (HIGH) (AV:N/AC:L/Au:N/C:C/I:N/A:N): Input Validation (CWE-20) - CVE-2011-0685: CVSS v2 Base Score: 3.6 (LOW) (AV:L/AC:L/Au:N/C:P/I:P/A:N): Input Validation (CWE-20) - CVE-2011-0686: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Insufficient Information (CWE-noinfo) - CVE-2011-0687: CVSS v2 Base Score: 4.3 (MEDIUM) (AV:N/AC:M/Au:N/C:N/I:N/A:P): Input Validation (CWE-20) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch opera-3919 - openSUSE 11.2: zypper in -t patch opera-3919 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 11.01]: opera-11.01-1.2.1 opera-gtk-11.01-1.2.1 opera-kde4-11.01-1.2.1 - openSUSE 11.2 (i586 x86_64) [New Version: 11.01]: opera-11.01-1.2.1 opera-gtk-11.01-1.2.1 opera-kde4-11.01-1.2.1 References: http://support.novell.com/security/cve/CVE-2011-0681.html http://support.novell.com/security/cve/CVE-2011-0682.html http://support.novell.com/security/cve/CVE-2011-0683.html http://support.novell.com/security/cve/CVE-2011-0684.html http://support.novell.com/security/cve/CVE-2011-0685.html http://support.novell.com/security/cve/CVE-2011-0686.html http://support.novell.com/security/cve/CVE-2011-0687.html https://bugzilla.novell.com/667639

1 0

openSUSE-SU-2011:0102-1 (moderate): java-1_6_0-openjdk: security update
by opensuse-security＠opensuse.org 07 Feb '11

07 Feb '11

openSUSE Security Update: java-1_6_0-openjdk: security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0102-1 Rating: moderate References: #667313 Cross-References: CVE-2011-0025 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update improves the signature handling of jar-files. (CVE-2011-0025) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch java-1_6_0-openjdk-3918 - openSUSE 11.2: zypper in -t patch java-1_6_0-openjdk-3918 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b20.1.9.5-1.2.1 java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.5-1.2.1 java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.5-1.2.1 - openSUSE 11.3 (noarch): java-1_6_0-openjdk-demo-1.6.0.0_b20.1.9.5-1.2.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b20.1.9.5-1.2.1 java-1_6_0-openjdk-src-1.6.0.0_b20.1.9.5-1.2.1 - openSUSE 11.2 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b20.1.9.5-1.2.1 java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.5-1.2.1 java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.5-1.2.1 - openSUSE 11.2 (noarch): java-1_6_0-openjdk-demo-1.6.0.0_b20.1.9.5-1.2.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b20.1.9.5-1.2.1 java-1_6_0-openjdk-src-1.6.0.0_b20.1.9.5-1.2.1 References: http://support.novell.com/security/cve/CVE-2011-0025.html https://bugzilla.novell.com/667313

1 0

openSUSE-SU-2011:0098-1 (important): dhcp: fixing DoS via DHCPv6 decline messages (CVE-2011-0413)
by opensuse-security＠opensuse.org 04 Feb '11

04 Feb '11

openSUSE Security Update: dhcp: fixing DoS via DHCPv6 decline messages (CVE-2011-0413) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0098-1 Rating: important References: #667655 Cross-References: CVE-2011-0413 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: A Denial of Service vulnerability while processing DHCPv6 decline messages hass been fixed. CVE-2011-0413 has been assigned to this issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch dhcp-3913 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 4.1.2.ESV.1]: dhcp-4.1.2.ESV.1-0.2.1 dhcp-client-4.1.2.ESV.1-0.2.1 dhcp-devel-4.1.2.ESV.1-0.2.1 dhcp-doc-4.1.2.ESV.1-0.2.1 dhcp-relay-4.1.2.ESV.1-0.2.1 dhcp-server-4.1.2.ESV.1-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-0413.html https://bugzilla.novell.com/667655

1 0

openSUSE-SU-2011:0082-2 (important): tomcat6: fixing a XSS vulnerability (CVE-2010-4172)
by opensuse-security＠opensuse.org 03 Feb '11

03 Feb '11

openSUSE Security Update: tomcat6: fixing a XSS vulnerability (CVE-2010-4172) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0082-2 Rating: important References: #655440 Cross-References: CVE-2010-4172 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes a cross-site scripting vulnerability that affects the session list screen. This can be used to steal session cookies because tomcat 6 does not use the httpOnly flag for its cookies. (CVE-2010-4172) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch tomcat6-3907 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (noarch): tomcat6-6.0.20-24.31.1 tomcat6-admin-webapps-6.0.20-24.31.1 tomcat6-docs-webapp-6.0.20-24.31.1 tomcat6-javadoc-6.0.20-24.31.1 tomcat6-jsp-2_1-api-6.0.20-24.31.1 tomcat6-lib-6.0.20-24.31.1 tomcat6-servlet-2_5-api-6.0.20-24.31.1 tomcat6-webapps-6.0.20-24.31.1 References: http://support.novell.com/security/cve/CVE-2010-4172.html https://bugzilla.novell.com/655440

1 0

openSUSE-SU-2011:0092-1 (moderate): Fixing integer and buffer overflow in pcsc-ccid and pcsc-lite (CVE-2010-4530,CVE-2010-4531).
by opensuse-security＠opensuse.org 01 Feb '11

01 Feb '11

openSUSE Security Update: Fixing integer and buffer overflow in pcsc-ccid and pcsc-lite (CVE-2010-4530,CVE-2010-4531). ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0092-1 Rating: moderate References: #661000 Cross-References: CVE-2010-4530 CVE-2010-4531 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: An integer overflow in pcsc-ccid and a buffer overflow in pcsc-lite while handling smart card responses have been fixed. CVE-2010-4530 and CVE-2010-4531 have been assigned to these issues. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libpcsclite1-3770 - openSUSE 11.2: zypper in -t patch libpcsclite1-3770 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libpcsclite1-1.5.5-7.3.1 pcsc-ccid-1.3.11-6.3.1 pcsc-lite-1.5.5-7.3.1 pcsc-lite-devel-1.5.5-7.3.1 - openSUSE 11.3 (x86_64): libpcsclite1-32bit-1.5.5-7.3.1 - openSUSE 11.2 (i586 x86_64): libpcsclite1-1.5.5-2.4.1 pcsc-ccid-1.3.11-2.3.1 pcsc-lite-1.5.5-2.4.1 pcsc-lite-devel-1.5.5-2.4.1 - openSUSE 11.2 (x86_64): libpcsclite1-32bit-1.5.5-2.4.1 References: http://support.novell.com/security/cve/CVE-2010-4530.html http://support.novell.com/security/cve/CVE-2010-4531.html https://bugzilla.novell.com/661000

1 0