May 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2011:0517-1: important: opera security update
by opensuse-security＠opensuse.org 20 May '11

20 May '11

openSUSE Security Update: opera security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0517-1 Rating: important References: #694567 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes one version update. Description: opera 11.11 fixes a security vulnerability. Citing http://www.opera.com/support/kb/view/992/: Framesets allow web pages to hold other pages inside them. Certain frameset constructs are not handled correctly when the page is unloaded, causing a memory corruption. To inject code, additional techniques will have to be employed. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch opera-4588 - openSUSE 11.3: zypper in -t patch opera-4588 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 11.11]: opera-11.11-1.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 11.11]: opera-11.11-1.2.1 opera-gtk-11.11-1.2.1 opera-kde4-11.11-1.2.1 References: https://bugzilla.novell.com/694567

1 0

openSUSE-RU-2011:0514-1: xorg-x11-driver-video: Intel [946GZ/GL] GPU needs to be driven as a 965 GPU, not as a i915 GPU
by maintenance＠opensuse.org 19 May '11

19 May '11

openSUSE Recommended Update: xorg-x11-driver-video: Intel [946GZ/GL] GPU needs to be driven as a 965 GPU, not as a i915 GPU ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0514-1 Rating: low References: #690428 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Intel [946GZ/GL] GPU has been driven as 915 GPU, whereas it belongs to the 965 GPU family. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch xorg-x11-driver-video-4549 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): xorg-x11-driver-video-7.6-53.58.1 - openSUSE 11.4 (x86_64): xorg-x11-driver-video-32bit-7.6-53.58.1 References: https://bugzilla.novell.com/690428

1 0

openSUSE-RU-2011:0513-1: xorg-x11-server: This update fixes a radeon/radeonhd [R3xx-R5xx] screen distortion
by maintenance＠opensuse.org 19 May '11

19 May '11

openSUSE Recommended Update: xorg-x11-server: This update fixes a radeon/radeonhd [R3xx-R5xx] screen distortion ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0513-1 Rating: low References: #678264 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes two new package versions. Description: This update fixes a xserver crash with radeon/radeonhd UMS and screen distortion on R3xx-R5xx radeon graphics cards. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch Mesa-4546 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 7.10.2]: Mesa-7.10.2-7.3.1 Mesa-devel-7.10.2-7.3.1 Mesa-nouveau3d-7.10.2-7.3.1 xorg-x11-Xvnc-7.6_1.9.3-15.22.2 xorg-x11-server-7.6_1.9.3-15.22.2 xorg-x11-server-extra-7.6_1.9.3-15.22.2 xorg-x11-server-sdk-7.6_1.9.3-15.22.2 - openSUSE 11.4 (x86_64) [New Version: 7.10.2]: Mesa-32bit-7.10.2-7.3.1 Mesa-devel-32bit-7.10.2-7.3.1 Mesa-nouveau3d-32bit-7.10.2-7.3.1 References: https://bugzilla.novell.com/678264

1 0

openSUSE-SU-2011:0510-1: moderate: kvm security update
by opensuse-security＠opensuse.org 19 May '11

19 May '11

openSUSE Security Update: kvm security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0510-1 Rating: moderate References: #689895 #690781 Cross-References: CVE-2011-1750 CVE-2011-1751 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: By causing a hot-unplug of the pci-isa bridge from within guests the qemu process could access already freed memory. A privileged user inside the guest could exploit that to crash the guest instance or potentially execute arbitrary code on the host (CVE-2011-1751). The virtio-blk driver did not properly validate read and write request. A privileged user inside the guest could exploit that to cause a heap corruption and crash the guest instance or potentially execute arbitrary code on the host (CVE-2011-1750). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch kvm-4582 - openSUSE 11.3: zypper in -t patch kvm-4582 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): kvm-0.14.0.0-1.6.1 - openSUSE 11.3 (i586 x86_64) [New Version: 0.12.5]: kvm-0.12.5-1.4.1 References: http://support.novell.com/security/cve/CVE-2011-1750.html http://support.novell.com/security/cve/CVE-2011-1751.html https://bugzilla.novell.com/689895 https://bugzilla.novell.com/690781

1 0

openSUSE-RU-2011:0506-1cpufrequtils: Providing an additional cpufrequtils-devel package
by maintenance＠opensuse.org 17 May '11

17 May '11

openSUSE Recommended Update: cpufrequtils: Providing an additional cpufrequtils-devel package ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0506-1 Rating: low References: #691586 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update adds an additional devel package to provide development header and libraries. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch cpufrequtils-4529 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): cpufrequtils-008-6.7.1 cpufrequtils-bench-008-6.7.1 cpufrequtils-devel-008-6.7.1 - openSUSE 11.4 (x86_64): cpufrequtils-32bit-008-6.7.1 References: https://bugzilla.novell.com/691586

1 0

openSUSE-RU-2011:0505-1hylafax: This update fixes a startup failure with the message "No support for old protocol"
by maintenance＠opensuse.org 17 May '11

17 May '11

openSUSE Recommended Update: hylafax: This update fixes a startup failure with the message "No support for old protocol" ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0505-1 Rating: low References: #632586 #686487 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: Hylafax failed to start with the message " No support for old protocol" because the init script passed a parameter that wasn't supported anymore. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch hylafax-4531 - openSUSE 11.3: zypper in -t patch hylafax-4531 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): hylafax-6.0.4-7.8.3 hylafax-client-6.0.4-7.8.3 - openSUSE 11.3 (i586 x86_64): hylafax-6.0.4-4.3.2 hylafax-client-6.0.4-4.3.2 References: https://bugzilla.novell.com/632586 https://bugzilla.novell.com/686487

1 0

openSUSE-RU-2011:0504-1krb5-appl: Fix telnetd terminate
by maintenance＠opensuse.org 17 May '11

17 May '11

openSUSE Recommended Update: krb5-appl: Fix telnetd terminate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0504-1 Rating: low References: #688281 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Kerberos telnetd terminate with "All terminal ports in use." This update fixes this issue. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch krb5-appl-4500 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): krb5-appl-clients-1.0-7.8.1 krb5-appl-servers-1.0-7.8.1 References: https://bugzilla.novell.com/688281

1 0

openSUSE-RU-2011:0503-1subversion: This updates fixes the check for a valid group
by maintenance＠opensuse.org 17 May '11

17 May '11

openSUSE Recommended Update: subversion: This updates fixes the check for a valid group ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0503-1 Rating: low References: #688968 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: The following bug is fixed by this update: - #688968: /etc/init.d/svnserve erroneously uses id(1) to check SVNSERVE_GROUPID=users Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libsvn_auth_gnome_keyring-1-0-4532 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.6.16]: libsvn_auth_gnome_keyring-1-0-1.6.16-1.5.1 libsvn_auth_kwallet-1-0-1.6.16-1.5.1 subversion-1.6.16-1.5.1 subversion-devel-1.6.16-1.5.1 subversion-perl-1.6.16-1.5.1 subversion-python-1.6.16-1.5.1 subversion-ruby-1.6.16-1.5.1 subversion-server-1.6.16-1.5.1 subversion-tools-1.6.16-1.5.1 References: https://bugzilla.novell.com/688968

1 0

openSUSE-RU-2011:0502-1ghostscript-library: This update fixes wrong colors for embedded images
by maintenance＠opensuse.org 17 May '11

17 May '11

openSUSE Recommended Update: ghostscript-library: This update fixes wrong colors for embedded images ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0502-1 Rating: low References: #681071 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Some printer drivers use the cups device in Ghostscript. This device results wrong (usually somehow inverted) colors in particular for embedded images in PDFs depending on which color space is used. For example it fails for the CMY color space but works for the RGB and CMYK color spaces. The openSUSE bug is bnc#681071 and the matching Ghostscript upstream bug is http://bugs.ghostscript.com/show_bug.cgi?id=691760 Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch ghostscript-devel-4535 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): ghostscript-devel-9.00-4.10.1 ghostscript-ijs-devel-9.00-4.10.1 ghostscript-library-9.00-4.10.1 ghostscript-x11-9.00-4.10.1 libgimpprint-4.2.7-334.10.1 libgimpprint-devel-4.2.7-334.10.1 - openSUSE 11.4 (noarch): ghostscript-fonts-other-9.00-4.10.1 ghostscript-fonts-rus-9.00-4.10.1 ghostscript-fonts-std-9.00-4.10.1 References: https://bugzilla.novell.com/681071

1 0

openSUSE-RU-2011:0501-1culmus: This update fixes missing TTF fonts
by maintenance＠opensuse.org 17 May '11

17 May '11

openSUSE Recommended Update: culmus: This update fixes missing TTF fonts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0501-1 Rating: low References: #691278 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update adds the missing TTF fonts from the culmus package. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch culmus-4530 - openSUSE 11.3: zypper in -t patch culmus-4530 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): culmus-0.120-4.5.1 - openSUSE 11.3 (noarch): culmus-0.104-4.3.1 References: https://bugzilla.novell.com/691278

1 0