May 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2011:0440-1 (low): xorg-x11-Xvnc: This update makes Xvnc working with non-US keyboard layouts
by maintenance＠opensuse.org 06 May '11

06 May '11

openSUSE Recommended Update: xorg-x11-Xvnc: This update makes Xvnc working with non-US keyboard layouts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0440-1 Rating: low References: #400520 #605015 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: Enable the use of all local keyboard layouts, independent of remotely set layout. Also improve support when switching the remote layout by enabling layouts that use AltGr for certain characters. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch xorg-x11-Xvnc-4447 - openSUSE 11.3: zypper in -t patch xorg-x11-Xvnc-4447 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): xorg-x11-Xvnc-7.6_1.9.3-15.20.1 - openSUSE 11.3 (i586 x86_64): xorg-x11-Xvnc-7.5_1.8.0-10.11.1 References: https://bugzilla.novell.com/400520 https://bugzilla.novell.com/605015

1 0

openSUSE-SU-2011:0437-1 (important): mozilla-xulrunner192: Update to 1.9.2.17 security release
by opensuse-security＠opensuse.org 06 May '11

06 May '11

openSUSE Security Update: mozilla-xulrunner192: Update to 1.9.2.17 security release ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0437-1 Rating: important References: #689281 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes 8 new package versions. Description: Mozilla XULRunner 1.9.2 was updated to the 1.9.2.17 security release. MFSA 2011-12: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Credits Mozilla developer Scoobidiver reported a memory safety issue which affected Firefox 4 and Firefox 3.6 (CVE-2011-0081) The web development team of Alcidion reported a crash that affected Firefox 4, Firefox 3.6 and Firefox 3.5. (CVE-2011-0069) Ian Beer reported a crash that affected Firefox 4, Firefox 3.6 and Firefox 3.5. (CVE-2011-0070) Mozilla developers Bob Clary, Henri Sivonen, Marco Bonardo, Mats Palmgren and Jesse Ruderman reported memory safety issues which affected Firefox 3.6 and Firefox 3.5. (CVE-2011-0080) Aki Helin reported memory safety issues which affected Firefox 3.6 and Firefox 3.5. (CVE-2011-0074 , CVE-2011-0075) Ian Beer reported memory safety issues which affected Firefox 3.6 and Firefox 3.5. (CVE-2011-0077 , CVE-2011-0078) Martin Barbella reported a memory safety issue which affected Firefox 3.6 and Firefox 3.5. (CVE-2011-0072) MFSA 2011-13 / CVE-2011-0065 / CVE-2011-0066 / CVE-2011-0073: Security researcher regenrecht reported several dangling pointer vulnerabilities via TippingPoint's Zero Day Initiative. MFSA 2011-14 / CVE-2011-0067: Security researcher Paul Stone reported that a Java applet could be used to mimic interaction with form autocomplete controls and steal entries from the form history. MFSA 2011-15 / CVE-2011-0076: David Remahl of Apple Product Security reported that the Java Embedding Plugin (JEP) shipped with the Mac OS X versions of Firefox could be exploited to obtain elevated access to resources on a user's system. MFSA 2011-16 / CVE-2011-0071: Security researcher Soroush Dalili reported that the resource: protocol could be exploited to allow directory traversal on Windows and the potential loading of resources from non-permitted locations. The impact would depend on whether interesting files existed in predictable locations in a useful format. For example, the existence or non-existence of particular images might indicate whether certain software was installed. MFSA 2011-18 / CVE-2011-1202: Chris Evans of the Chrome Security Team reported that the XSLT generate-id() function returned a string that revealed a specific valid address of an object on the memory heap. It is possible that in some cases this address would be valuable information that could be used by an attacker while exploiting a different memory corruption but, in order to make an exploit more reliable or work around mitigation features in the browser or operating system. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaFirefox-4457 MozillaThunderbird-4458 mozilla-js192-4460 seamonkey-4462 - openSUSE 11.3: zypper in -t patch MozillaFirefox-4459 MozillaThunderbird-4458 mozilla-xulrunner191-4456 seamonkey-4462 - openSUSE 11.2: zypper in -t patch MozillaFirefox-4459 MozillaThunderbird-4458 mozilla-xulrunner191-4456 seamonkey-4462 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.9.2.17,2.0.1,2.0.14,3.1.10 and 4.0.1]: MozillaFirefox-4.0.1-0.2.2 MozillaFirefox-branding-upstream-4.0.1-0.2.2 MozillaFirefox-devel-4.0.1-0.2.2 MozillaFirefox-translations-common-4.0.1-0.2.2 MozillaFirefox-translations-other-4.0.1-0.2.2 MozillaThunderbird-3.1.10-0.5.1 MozillaThunderbird-buildsymbols-3.1.10-0.5.1 MozillaThunderbird-devel-3.1.10-0.5.1 MozillaThunderbird-translations-common-3.1.10-0.5.1 MozillaThunderbird-translations-other-3.1.10-0.5.1 enigmail-1.1.2-9.5.1 mozilla-js192-1.9.2.17-0.2.2 mozilla-js20-2.0.1-0.2.2 mozilla-xulrunner192-1.9.2.17-0.2.2 mozilla-xulrunner192-buildsymbols-1.9.2.17-0.2.2 mozilla-xulrunner192-devel-1.9.2.17-0.2.2 mozilla-xulrunner192-gnome-1.9.2.17-0.2.2 mozilla-xulrunner192-translations-common-1.9.2.17-0.2.2 mozilla-xulrunner192-translations-other-1.9.2.17-0.2.2 mozilla-xulrunner20-2.0.1-0.2.2 mozilla-xulrunner20-buildsymbols-2.0.1-0.2.2 mozilla-xulrunner20-devel-2.0.1-0.2.2 mozilla-xulrunner20-gnome-2.0.1-0.2.2 mozilla-xulrunner20-translations-common-2.0.1-0.2.2 mozilla-xulrunner20-translations-other-2.0.1-0.2.2 seamonkey-2.0.14-0.2.1 seamonkey-dom-inspector-2.0.14-0.2.1 seamonkey-irc-2.0.14-0.2.1 seamonkey-translations-common-2.0.14-0.2.1 seamonkey-translations-other-2.0.14-0.2.1 seamonkey-venkman-2.0.14-0.2.1 - openSUSE 11.4 (x86_64) [New Version: 1.9.2.17 and 2.0.1]: mozilla-js192-32bit-1.9.2.17-0.2.2 mozilla-js20-32bit-2.0.1-0.2.2 mozilla-xulrunner192-32bit-1.9.2.17-0.2.2 mozilla-xulrunner192-gnome-32bit-1.9.2.17-0.2.2 mozilla-xulrunner192-translations-common-32bit-1.9.2.17-0.2.2 mozilla-xulrunner192-translations-other-32bit-1.9.2.17-0.2.2 mozilla-xulrunner20-32bit-2.0.1-0.2.2 mozilla-xulrunner20-gnome-32bit-2.0.1-0.2.2 mozilla-xulrunner20-translations-common-32bit-2.0.1-0.2.2 mozilla-xulrunner20-translations-other-32bit-2.0.1-0.2.2 - openSUSE 11.3 (i586 x86_64) [New Version: 1.1.2,1.9.1.19,1.9.2.17,2.0.14,3.1.10 and 3.6.17]: MozillaFirefox-3.6.17-0.2.1 MozillaFirefox-branding-upstream-3.6.17-0.2.1 MozillaFirefox-translations-common-3.6.17-0.2.1 MozillaFirefox-translations-other-3.6.17-0.2.1 MozillaThunderbird-3.1.10-0.9.1 MozillaThunderbird-devel-3.1.10-0.9.1 MozillaThunderbird-translations-common-3.1.10-0.9.1 MozillaThunderbird-translations-other-3.1.10-0.9.1 enigmail-1.1.2-9.9.1 mozilla-js192-1.9.2.17-0.2.1 mozilla-xulrunner191-1.9.1.19-0.2.1 mozilla-xulrunner191-devel-1.9.1.19-0.2.1 mozilla-xulrunner191-gnomevfs-1.9.1.19-0.2.1 mozilla-xulrunner191-translations-common-1.9.1.19-0.2.1 mozilla-xulrunner191-translations-other-1.9.1.19-0.2.1 mozilla-xulrunner192-1.9.2.17-0.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.17-0.2.1 mozilla-xulrunner192-devel-1.9.2.17-0.2.1 mozilla-xulrunner192-gnome-1.9.2.17-0.2.1 mozilla-xulrunner192-translations-common-1.9.2.17-0.2.1 mozilla-xulrunner192-translations-other-1.9.2.17-0.2.1 python-xpcom191-1.9.1.19-0.2.1 seamonkey-2.0.14-0.2.1 seamonkey-dom-inspector-2.0.14-0.2.1 seamonkey-irc-2.0.14-0.2.1 seamonkey-translations-common-2.0.14-0.2.1 seamonkey-translations-other-2.0.14-0.2.1 seamonkey-venkman-2.0.14-0.2.1 - openSUSE 11.3 (x86_64) [New Version: 1.9.1.19 and 1.9.2.17]: mozilla-js192-32bit-1.9.2.17-0.2.1 mozilla-xulrunner191-32bit-1.9.1.19-0.2.1 mozilla-xulrunner191-gnomevfs-32bit-1.9.1.19-0.2.1 mozilla-xulrunner192-32bit-1.9.2.17-0.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.17-0.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.17-0.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.17-0.2.1 - openSUSE 11.2 (i586 x86_64) [New Version: 1.1.2,1.9.1.19,1.9.2.17,2.0.14,3.1.10 and 3.6.17]: MozillaFirefox-3.6.17-0.2.1 MozillaFirefox-branding-upstream-3.6.17-0.2.1 MozillaFirefox-translations-common-3.6.17-0.2.1 MozillaFirefox-translations-other-3.6.17-0.2.1 MozillaThunderbird-3.1.10-0.9.1 MozillaThunderbird-devel-3.1.10-0.9.1 MozillaThunderbird-translations-common-3.1.10-0.9.1 MozillaThunderbird-translations-other-3.1.10-0.9.1 enigmail-1.1.2-9.9.1 mozilla-js192-1.9.2.17-0.2.1 mozilla-xulrunner191-1.9.1.19-0.2.1 mozilla-xulrunner191-devel-1.9.1.19-0.2.1 mozilla-xulrunner191-gnomevfs-1.9.1.19-0.2.1 mozilla-xulrunner191-translations-common-1.9.1.19-0.2.1 mozilla-xulrunner191-translations-other-1.9.1.19-0.2.1 mozilla-xulrunner192-1.9.2.17-0.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.17-0.2.1 mozilla-xulrunner192-devel-1.9.2.17-0.2.1 mozilla-xulrunner192-gnome-1.9.2.17-0.2.1 mozilla-xulrunner192-translations-common-1.9.2.17-0.2.1 mozilla-xulrunner192-translations-other-1.9.2.17-0.2.1 python-xpcom191-1.9.1.19-0.2.1 seamonkey-2.0.14-0.2.1 seamonkey-dom-inspector-2.0.14-0.2.1 seamonkey-irc-2.0.14-0.2.1 seamonkey-venkman-2.0.14-0.2.1 - openSUSE 11.2 (x86_64) [New Version: 1.9.1.19 and 1.9.2.17]: mozilla-js192-32bit-1.9.2.17-0.2.1 mozilla-xulrunner191-32bit-1.9.1.19-0.2.1 mozilla-xulrunner191-gnomevfs-32bit-1.9.1.19-0.2.1 mozilla-xulrunner192-32bit-1.9.2.17-0.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.17-0.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.17-0.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.17-0.2.1 References: https://bugzilla.novell.com/689281

1 0

openSUSE-SU-2011:0435-1 (important): vsftp security update
by opensuse-security＠opensuse.org 06 May '11

06 May '11

openSUSE Security Update: vsftp security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0435-1 Rating: important References: #676259 Cross-References: CVE-2011-0762 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Certain file patterns could cause vsftpd to consume excessive CPU resulting in denial of service (CVE-2011-0762). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch vsftpd-4116 - openSUSE 11.3: zypper in -t patch vsftpd-4115 - openSUSE 11.2: zypper in -t patch vsftpd-4115 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): vsftpd-2.3.2-3.3.1 - openSUSE 11.3 (i586 x86_64): vsftpd-2.2.2-3.3.1 - openSUSE 11.2 (i586 x86_64): vsftpd-2.0.7-5.6.1 References: http://support.novell.com/security/cve/CVE-2011-0762.html https://bugzilla.novell.com/676259

1 0

openSUSE-RU-2011:0431-1 (critical): timezone: Update to 2011g
by maintenance＠opensuse.org 04 May '11

04 May '11

openSUSE Recommended Update: timezone: Update to 2011g ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0431-1 Rating: critical References: #691414 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update provides 2011g which provides the following important changes: * Remove Daylight savings time observation for Egypt * Falkland islands on a trial basis do not observe DST anymore * Southamerica/Chile: Delay DST until May 7th * Southafrica/Morocco: Updates Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch timezone-2011g-4474 - openSUSE 11.3: zypper in -t patch timezone-2011g-4474 - openSUSE 11.2: zypper in -t patch timezone-2011g-4474 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2011g]: timezone-2011g-0.2.1 - openSUSE 11.4 (noarch) [New Version: 2011g]: timezone-java-2011g-0.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 2011g]: timezone-2011g-0.2.1 - openSUSE 11.3 (noarch) [New Version: 2011g]: timezone-java-2011g-0.2.1 - openSUSE 11.2 (i586 x86_64) [New Version: 2011g]: timezone-2011g-0.2.1 - openSUSE 11.2 (noarch) [New Version: 2011g]: timezone-java-2011g-0.2.1 References: https://bugzilla.novell.com/691414

1 0

openSUSE-RU-2011:0427-1 (low): release-notes-openSUSE: Collective update
by maintenance＠opensuse.org 03 May '11

03 May '11

openSUSE Recommended Update: release-notes-openSUSE: Collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0427-1 Rating: low References: #632737 #678743 #683822 #684104 #686397 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. It includes one version update. Description: This release note updates contains fixes for the following bugs: * New entries: Intel SSD Drives Causing System Hangs (bnc#678743), * Removing the Xorg setUID Bit (bnc#632737) * Default download mode needs More Space (bnc#684104) * minimum server software selection pattern is broken (bnc#686397) * Update translations > 50% (da es fi fr gl hu it ja km lt nb nl pt_BR ru); remove less translated languages Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch release-notes-openSUSE-4450 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch) [New Version: 11.4.4]: release-notes-openSUSE-11.4.4-0.3.1 References: https://bugzilla.novell.com/632737 https://bugzilla.novell.com/678743 https://bugzilla.novell.com/683822 https://bugzilla.novell.com/684104 https://bugzilla.novell.com/686397

1 0

openSUSE-RU-2011:0426-1 (low): LibreOffice: It is unable to write under KDE4 and the grammar checker is not working correctly. Fixed by this update.
by maintenance＠opensuse.org 03 May '11

03 May '11

openSUSE Recommended Update: LibreOffice: It is unable to write under KDE4 and the grammar checker is not working correctly. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0426-1 Rating: low References: #665112 #677354 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update is necessary if you want to write with input methods in LibreOffice and KDE4 (bnc#665112). It also fixes the installation of the LibreOffice LanguageTool extension to work on both 32-bit and 64-bit systems (bnc#677354). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libreoffice-languagetool-4436 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libreoffice-libs-gui-3.3.1.2-1.4.1 libreoffice-libs-gui-devel-3.3.1.2-1.4.1 libreoffice-libs-gui-l10n-prebuilt-3.3.1.2-1.4.1 - openSUSE 11.4 (noarch): libreoffice-languagetool-1.2-6.7.2 libreoffice-languagetool-ca-1.2-6.7.2 libreoffice-languagetool-de-1.2-6.7.2 libreoffice-languagetool-en-1.2-6.7.2 libreoffice-languagetool-es-1.2-6.7.2 libreoffice-languagetool-fr-1.2-6.7.2 libreoffice-languagetool-gl-1.2-6.7.2 libreoffice-languagetool-it-1.2-6.7.2 libreoffice-languagetool-nl-1.2-6.7.2 libreoffice-languagetool-pl-1.2-6.7.2 libreoffice-languagetool-ro-1.2-6.7.2 libreoffice-languagetool-ru-1.2-6.7.2 libreoffice-languagetool-sk-1.2-6.7.2 libreoffice-languagetool-sv-1.2-6.7.2 References: https://bugzilla.novell.com/665112 https://bugzilla.novell.com/677354

1 0

openSUSE-SU-2011:0424-1 (low): mailman security update to fix XSS vulnerabilities
by opensuse-security＠opensuse.org 03 May '11

03 May '11

openSUSE Security Update: mailman security update to fix XSS vulnerabilities ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0424-1 Rating: low References: #621104 #637295 #671745 Cross-References: CVE-2010-3089 CVE-2010-3090 CVE-2011-0707 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. It includes one version update. Description: mailman was updated to version 2.1.14 to fix several cross-site-scripting (XSS) vulnerabilities (CVE-2011-0707, CVE-2010-3089, CVE-2010-3090). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch mailman-4430 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64) [New Version: 2.1.14]: mailman-2.1.14-9.2.1 References: http://support.novell.com/security/cve/CVE-2010-3089.html http://support.novell.com/security/cve/CVE-2010-3090.html http://support.novell.com/security/cve/CVE-2011-0707.html https://bugzilla.novell.com/621104 https://bugzilla.novell.com/637295 https://bugzilla.novell.com/671745

1 0