May 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2011:0500-1aaa_base: Collective update for aaa_base fixing several problems
by maintenance＠opensuse.org 17 May '11

17 May '11

openSUSE Recommended Update: aaa_base: Collective update for aaa_base fixing several problems ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0500-1 Rating: low References: #671292 #681687 #691883 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update contains fixes for the following bugs: - #671292: init scripts complains about missing bootsplash binary, when bootsplash isn't installed - #681687: incorrect tab completion for variables (bash) - #691883: bash completion for 'cd ~/DIR' fails to provide trailing '/' Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch aaa_base-4528 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): aaa_base-11.4-54.66.1 aaa_base-extras-11.4-54.66.1 References: https://bugzilla.novell.com/671292 https://bugzilla.novell.com/681687 https://bugzilla.novell.com/691883

1 0

openSUSE-RU-2011:0499-1 moderate: scim-bridge: It is not usable in firefox. Fixed by this update
by maintenance＠opensuse.org 17 May '11

17 May '11

openSUSE Recommended Update: scim-bridge: It is not usable in firefox. Fixed by this update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0499-1 Rating: moderate References: #680430 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: scim-bridge is not usable in firefox. Fixed by this update Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch scim-bridge-4559 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): scim-bridge-0.4.15-125.126.1 scim-bridge-gtk-0.4.15-125.126.1 scim-bridge-qt-0.4.15-125.126.1 - openSUSE 11.4 (x86_64): scim-bridge-gtk-32bit-0.4.15-125.126.1 scim-bridge-qt-32bit-0.4.15-125.126.1 References: https://bugzilla.novell.com/680430

1 0

openSUSE-RU-2011:0498-1yelp: It is not longer working after the last firefox update. Fixed by this update.
by maintenance＠opensuse.org 17 May '11

17 May '11

openSUSE Recommended Update: yelp: It is not longer working after the last firefox update. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0498-1 Rating: low References: #692429 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: yelp is not longer working after the last firefox update. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch yelp-4533 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): yelp-2.30.2-9.14.1 - openSUSE 11.4 (noarch): yelp-lang-2.30.2-9.14.1 References: https://bugzilla.novell.com/692429

1 0

openSUSE-RU-2011:0497-1 moderate: apparmor-profiles: Fixed ntpd profile
by maintenance＠opensuse.org 17 May '11

17 May '11

openSUSE Recommended Update: apparmor-profiles: Fixed ntpd profile ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0497-1 Rating: moderate References: #657054 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the ntpd profile to include sys_nice capability. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch apparmor-profiles-4355 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch): apparmor-profiles-2.3-57.5.1 References: https://bugzilla.novell.com/657054

1 0

openSUSE-RU-2011:0472-2 (moderate): apparmor-utils: Fix parsing of learning (null-XX) profiles
by maintenance＠opensuse.org 16 May '11

16 May '11

openSUSE Recommended Update: apparmor-utils: Fix parsing of learning (null-XX) profiles ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0472-2 Rating: moderate References: #546618 #668311 #685833 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This updated fixes the parsing of learning (null-XX) profiles with genprof and logprof (bnc#546618 bnc#668311 bnc#685833) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch apparmor-utils-4356 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch): apparmor-utils-2.3.1-19.3.1 References: https://bugzilla.novell.com/546618 https://bugzilla.novell.com/668311 https://bugzilla.novell.com/685833

1 0

openSUSE-SU-2011:0492-1 (critical): flash-player: Security update to 10.3
by opensuse-security＠opensuse.org 13 May '11

13 May '11

openSUSE Security Update: flash-player: Security update to 10.3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0492-1 Rating: critical References: #693573 Cross-References: CVE-2011-0589 CVE-2011-0618 CVE-2011-0619 CVE-2011-0620 CVE-2011-0621 CVE-2011-0622 CVE-2011-0623 CVE-2011-0624 CVE-2011-0625 CVE-2011-0626 CVE-2011-0627 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. It includes one version update. Description: Flash Player has been updated to version 10.3, fixing bugs and security issues. More information can be found on: http://www.adobe.com/support/security/bulletins/apsb11-12.ht ml Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch flash-player-4551 - openSUSE 11.3: zypper in -t patch flash-player-4551 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586) [New Version: 10.3.181.14]: flash-player-10.3.181.14-0.2.1 - openSUSE 11.3 (i586) [New Version: 10.3.181.14]: flash-player-10.3.181.14-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-0589.html http://support.novell.com/security/cve/CVE-2011-0618.html http://support.novell.com/security/cve/CVE-2011-0619.html http://support.novell.com/security/cve/CVE-2011-0620.html http://support.novell.com/security/cve/CVE-2011-0621.html http://support.novell.com/security/cve/CVE-2011-0622.html http://support.novell.com/security/cve/CVE-2011-0623.html http://support.novell.com/security/cve/CVE-2011-0624.html http://support.novell.com/security/cve/CVE-2011-0625.html http://support.novell.com/security/cve/CVE-2011-0626.html http://support.novell.com/security/cve/CVE-2011-0627.html https://bugzilla.novell.com/693573

1 0

openSUSE-SU-2011:0484-1 (moderate): python security update
by opensuse-security＠opensuse.org 12 May '11

12 May '11

openSUSE Security Update: python security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0484-1 Rating: moderate References: #682554 Cross-References: CVE-2011-1521 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of python fixes a possible denial of service bug or information leakage vulnerability while using user-crafted ftp:// or file:// URLs with urllib(2). CVE-2011-1521: CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libpython2_6-1_0-4508 - openSUSE 11.3: zypper in -t patch libpython2_6-1_0-4508 - openSUSE 11.2: zypper in -t patch libpython2_6-1_0-4508 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libpython2_7-1_0-2.7-8.10.2 python-2.7-9.10.2 python-base-2.7-8.10.2 python-curses-2.7-9.10.2 python-demo-2.7-9.10.2 python-devel-2.7-8.10.2 python-gdbm-2.7-9.10.2 python-idle-2.7-9.10.2 python-tk-2.7-9.10.2 python-xml-2.7-8.10.2 - openSUSE 11.4 (x86_64): libpython2_7-1_0-32bit-2.7-8.10.2 python-32bit-2.7-9.10.2 python-base-32bit-2.7-8.10.2 - openSUSE 11.3 (i586 x86_64): libpython2_6-1_0-2.6.5-3.5.2 python-2.6.5-3.5.1 python-base-2.6.5-3.5.2 python-curses-2.6.5-3.5.1 python-demo-2.6.5-3.5.1 python-devel-2.6.5-3.5.2 python-gdbm-2.6.5-3.5.1 python-idle-2.6.5-3.5.1 python-tk-2.6.5-3.5.1 python-xml-2.6.5-3.5.2 - openSUSE 11.3 (x86_64): libpython2_6-1_0-32bit-2.6.5-3.5.2 python-32bit-2.6.5-3.5.1 python-base-32bit-2.6.5-3.5.2 - openSUSE 11.2 (i586 x86_64): libpython2_6-1_0-2.6.2-6.9.2 python-2.6.2-6.9.1 python-base-2.6.2-6.9.2 python-curses-2.6.2-6.9.1 python-demo-2.6.2-6.9.1 python-devel-2.6.2-6.9.2 python-gdbm-2.6.2-6.9.1 python-idle-2.6.2-6.9.1 python-tk-2.6.2-6.9.1 python-xml-2.6.2-6.9.2 - openSUSE 11.2 (x86_64): libpython2_6-1_0-32bit-2.6.2-6.9.2 python-32bit-2.6.2-6.9.1 python-base-32bit-2.6.2-6.9.2 References: http://support.novell.com/security/cve/CVE-2011-1521.html https://bugzilla.novell.com/682554

1 0

openSUSE-SU-2011:0483-1 (moderate): New pure-ftpd version fix STARTTLS issues (CVE-2011-1575).
by opensuse-security＠opensuse.org 12 May '11

12 May '11

openSUSE Security Update: New pure-ftpd version fix STARTTLS issues (CVE-2011-1575). ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0483-1 Rating: moderate References: #686590 Cross-References: CVE-2011-1575 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Pure-ftpd is vulnerable to the STARTTLS command injection issue similar to CVE-2011-0411 of postfix. CVE-2011-1575 has been assigned to this issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch pure-ftpd-4353 - openSUSE 11.3: zypper in -t patch pure-ftpd-4353 - openSUSE 11.2: zypper in -t patch pure-ftpd-4353 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): pure-ftpd-1.0.29-8.9.1 - openSUSE 11.3 (i586 x86_64): pure-ftpd-1.0.29-2.3.1 - openSUSE 11.2 (i586 x86_64): pure-ftpd-1.0.22-3.4.1 References: http://support.novell.com/security/cve/CVE-2011-1575.html https://bugzilla.novell.com/686590

1 0

openSUSE-SU-2011:0482-1 (moderate): webkit: security update
by opensuse-security＠opensuse.org 12 May '11

12 May '11

openSUSE Security Update: webkit: security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0482-1 Rating: moderate References: #617401 Cross-References: CVE-2010-2441 CVE-2010-2901 CVE-2010-4042 CVE-2010-4492 CVE-2010-4493 CVE-2010-4578 CVE-2011-0482 CVE-2011-0778 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. It includes one version update. Description: This version upgrade of webkit to 1.2.7 fixes the following bugs: - CVE-2010-2441: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N): Permissions, Privileges, and Access Control (CWE-264) - CVE-2010-2901: CVSS v2 Base Score: 3.7 (AV:L/AC:H/Au:N/C:P/I:P/A:P): Buffer Errors (CWE-119) - CVE-2010-4042: CVSS v2 Base Score: 3.7 (AV:L/AC:H/Au:N/C:P/I:P/A:P): Input Validation (CWE-20) - CVE-2010-4492: CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P): Resource Management Errors (CWE-399) - CVE-2010-4493: CVSS v2 Base Score: 3.7 (AV:L/AC:H/Au:N/C:P/I:P/A:P): Resource Management Errors (CWE-399) - CVE-2010-4578: CVSS v2 Base Score: 3.7 (AV:L/AC:H/Au:N/C:P/I:P/A:P): Input Validation (CWE-20) - CVE-2011-0482: CVSS v2 Base Score: 3.7 (AV:L/AC:H/Au:N/C:P/I:P/A:P): Numeric Errors (CWE-189) - CVE-2011-0778: CVSS v2 Base Score: 3.7 (AV:L/AC:H/Au:N/C:P/I:P/A:P): Permissions, Privileges, and Access Control (CWE-264) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libwebkit-4112 - openSUSE 11.2: zypper in -t patch libwebkit-4112 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 1.2.7]: libwebkit-1_0-2-1.2.7-0.2.1 libwebkit-devel-1.2.7-0.2.1 webkit-jsc-1.2.7-0.2.1 - openSUSE 11.3 (x86_64) [New Version: 1.2.7]: libwebkit-1_0-2-32bit-1.2.7-0.2.1 - openSUSE 11.3 (noarch) [New Version: 1.2.7]: libwebkit-lang-1.2.7-0.2.1 - openSUSE 11.2 (i586 x86_64) [New Version: 1.2.7]: libwebkit-1_0-2-1.2.7-0.3.1 libwebkit-devel-1.2.7-0.3.1 webkit-jsc-1.2.7-0.3.1 - openSUSE 11.2 (noarch) [New Version: 1.2.7]: libwebkit-lang-1.2.7-0.3.1 References: http://support.novell.com/security/cve/CVE-2010-2441.html http://support.novell.com/security/cve/CVE-2010-2901.html http://support.novell.com/security/cve/CVE-2010-4042.html http://support.novell.com/security/cve/CVE-2010-4492.html http://support.novell.com/security/cve/CVE-2010-4493.html http://support.novell.com/security/cve/CVE-2010-4578.html http://support.novell.com/security/cve/CVE-2011-0482.html http://support.novell.com/security/cve/CVE-2011-0778.html https://bugzilla.novell.com/617401

1 0

openSUSE-SU-2011:0481-1 (moderate): vino: fixed libvncservers CVE-2011-0904 and CVE-2011-0905
by opensuse-security＠opensuse.org 12 May '11

12 May '11

openSUSE Security Update: vino: fixed libvncservers CVE-2011-0904 and CVE-2011-0905 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0481-1 Rating: moderate References: #691207 Cross-References: CVE-2011-0904 CVE-2011-0905 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: Two out of bounds memory access vulnerabilities in vinos' libvncserver have been fixed. CVE-2011-0904 and CVE-2011-0905 have been assigned. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch vino-4522 - openSUSE 11.3: zypper in -t patch vino-4522 - openSUSE 11.2: zypper in -t patch vino-4522 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): vino-2.32.1-6.7.1 - openSUSE 11.4 (noarch): vino-lang-2.32.1-6.7.1 - openSUSE 11.3 (i586 x86_64): vino-2.28.2-2.3.1 - openSUSE 11.3 (noarch): vino-lang-2.28.2-2.3.1 - openSUSE 11.2 (i586 x86_64) [New Version: 2.28.1]: vino-2.28.1-2.3.1 - openSUSE 11.2 (noarch) [New Version: 2.28.1]: vino-lang-2.28.1-2.3.1 References: http://support.novell.com/security/cve/CVE-2011-0904.html http://support.novell.com/security/cve/CVE-2011-0905.html https://bugzilla.novell.com/691207

1 0