July 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2011:0854-1: moderate: libsndfile: fixing Integer overflow (CVE-2011-2696) and divide by zero (CVE-2009-4835)
by opensuse-security＠opensuse.org 29 Jul '11

29 Jul '11

openSUSE Security Update: libsndfile: fixing Integer overflow (CVE-2011-2696) and divide by zero (CVE-2009-4835) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0854-1 Rating: moderate References: #631379 #705681 Cross-References: CVE-2009-4835 CVE-2011-2696 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: An integer overflow in libsndfile while processing certain PAF files has been fixed. CVE-2011-2696 has been assigned to this issue. Additionally an divide by zero (CVE-2009-4835) has been fixed. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libsndfile-4901 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libsndfile-1.0.20-8.3.1 libsndfile-devel-1.0.20-8.3.1 - openSUSE 11.3 (x86_64): libsndfile-32bit-1.0.20-8.3.1 References: http://support.novell.com/security/cve/CVE-2009-4835.html http://support.novell.com/security/cve/CVE-2011-2696.html https://bugzilla.novell.com/631379 https://bugzilla.novell.com/705681

1 0

openSUSE-SU-2011:0852-1: important: freetype: Fixed several off-by-one / length checks missing
by opensuse-security＠opensuse.org 27 Jul '11

27 Jul '11

openSUSE Security Update: freetype: Fixed several off-by-one / length checks missing ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0852-1 Rating: important References: #704612 Cross-References: CVE-2011-0226 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This freetype2 update fixes sign extension problems and missing length checks. This issue was used in one of the last jailbreakme exploits for Apple iPhone/iPad products. (CVE-2011-0226) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch freetype2-4915 - openSUSE 11.3: zypper in -t patch freetype2-4915 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): freetype2-devel-2.4.4-7.8.1 libfreetype6-2.4.4-7.8.1 - openSUSE 11.4 (x86_64): freetype2-devel-32bit-2.4.4-7.8.1 libfreetype6-32bit-2.4.4-7.8.1 - openSUSE 11.3 (i586 x86_64): freetype2-devel-2.3.12-7.6.1 libfreetype6-2.3.12-7.6.1 - openSUSE 11.3 (x86_64): freetype2-devel-32bit-2.3.12-7.6.1 libfreetype6-32bit-2.3.12-7.6.1 References: http://support.novell.com/security/cve/CVE-2011-0226.html https://bugzilla.novell.com/704612

1 0

openSUSE-SU-2011:0848-1: moderate: opie
by opensuse-security＠opensuse.org 27 Jul '11

27 Jul '11

openSUSE Security Update: opie ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0848-1 Rating: moderate References: #698772 Cross-References: CVE-2011-2489 CVE-2011-2490 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: This update fixes off-by-one errors in opiesu (CVE-2011-2489) and missing setuid() return value checks in opielogin (CVE-2011-2490). This update also removes the setuid bit from opiesu program. If you rely on the setuid bit on opiesu, add the following line to /etc/permissions.local: /usr/bin/opiesu root:root 4755 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch opie-4812 - openSUSE 11.3: zypper in -t patch opie-4812 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2011.03.07.1608]: opie-2.4-711.714.1 permissions-2011.03.07.1608-1.5.1 - openSUSE 11.4 (x86_64): opie-32bit-2.4-711.714.1 - openSUSE 11.3 (i586 x86_64): opie-2.4-706.5.1 permissions-2010.04.23.1140-2.2.1 - openSUSE 11.3 (x86_64): opie-32bit-2.4-706.5.1 References: http://support.novell.com/security/cve/CVE-2011-2489.html http://support.novell.com/security/cve/CVE-2011-2490.html https://bugzilla.novell.com/698772

1 0

openSUSE-RU-2011:0846-1: cronie: run-parts missing in cronie-anacron
by maintenance＠opensuse.org 27 Jul '11

27 Jul '11

openSUSE Recommended Update: cronie: run-parts missing in cronie-anacron ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0846-1 Rating: low References: #689494 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: run-parts was used instead of run-crons in cronie-anacron. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch cron-4903 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.4.7]: cron-4.2-9.23.1 cronie-1.4.7-9.23.1 cronie-anacron-1.4.7-9.23.1 References: https://bugzilla.novell.com/689494

1 0

openSUSE-SU-2011:0845-1: important: compat-openssl097g
by opensuse-security＠opensuse.org 27 Jul '11

27 Jul '11

openSUSE Security Update: compat-openssl097g ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0845-1 Rating: important References: #707069 Cross-References: CVE-2008-5077 CVE-2009-0590 CVE-2009-0789 CVE-2009-3555 CVE-2010-4180 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update adds openssl patches since 2007 for: - CVE-2008-5077 - CVE-2009-0590 - CVE-2009-0789 - CVE-2009-3555 - CVE-2010-4180 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch compat-openssl097g-4909 - openSUSE 11.3: zypper in -t patch compat-openssl097g-4909 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): compat-openssl097g-0.9.7g-158.159.1 - openSUSE 11.4 (x86_64): compat-openssl097g-32bit-0.9.7g-158.159.1 - openSUSE 11.3 (i586 x86_64): compat-openssl097g-0.9.7g-155.3.1 - openSUSE 11.3 (x86_64): compat-openssl097g-32bit-0.9.7g-155.3.1 References: http://support.novell.com/security/cve/CVE-2008-5077.html http://support.novell.com/security/cve/CVE-2009-0590.html http://support.novell.com/security/cve/CVE-2009-0789.html http://support.novell.com/security/cve/CVE-2009-3555.html http://support.novell.com/security/cve/CVE-2010-4180.html https://bugzilla.novell.com/707069

1 0

openSUSE-RU-2011:0844-1: gimp: Cellspacing in pyslice plugin is broken
by maintenance＠opensuse.org 27 Jul '11

27 Jul '11

openSUSE Recommended Update: gimp: Cellspacing in pyslice plugin is broken ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0844-1 Rating: low References: #698769 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The cellspacing in pyslice plugin is broken. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch gimp-4904 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): gimp-2.6.8-7.7.1 gimp-branding-upstream-2.6.8-7.7.1 gimp-devel-2.6.8-7.7.1 gimp-help-browser-2.6.8-7.7.1 gimp-module-hal-2.6.8-7.7.1 gimp-plugins-python-2.6.8-7.7.1 - openSUSE 11.3 (noarch): gimp-lang-2.6.8-7.7.1 References: https://bugzilla.novell.com/698769

1 0

openSUSE-SU-2011:0839-1: moderate: libxml2
by opensuse-security＠opensuse.org 26 Jul '11

26 Jul '11

openSUSE Security Update: libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0839-1 Rating: moderate References: #697372 Cross-References: CVE-2011-1944 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Specially crafted xml files could crash applications using libxml2 (CVE-2011-1944). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libxml2-4811 - openSUSE 11.3: zypper in -t patch libxml2-4811 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libxml2-2.7.8-16.17.1 libxml2-devel-2.7.8-16.17.1 - openSUSE 11.4 (x86_64): libxml2-32bit-2.7.8-16.17.1 libxml2-devel-32bit-2.7.8-16.17.1 - openSUSE 11.4 (noarch): libxml2-doc-2.7.8-16.17.1 - openSUSE 11.3 (i586 x86_64): libxml2-2.7.7-4.7.1 libxml2-devel-2.7.7-4.7.1 - openSUSE 11.3 (x86_64): libxml2-32bit-2.7.7-4.7.1 libxml2-devel-32bit-2.7.7-4.7.1 - openSUSE 11.3 (noarch): libxml2-doc-2.7.7-4.7.1 References: http://support.novell.com/security/cve/CVE-2011-1944.html https://bugzilla.novell.com/697372

1 0

openSUSE-SU-2011:0836-1: moderate: nagios
by opensuse-security＠opensuse.org 25 Jul '11

25 Jul '11

openSUSE Security Update: nagios ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0836-1 Rating: moderate References: #682966 #697895 Cross-References: CVE-2011-1523 CVE-2011-2179 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: statusmap.cgi and config.cgi were prone to cross-site scripting (XSS) vulnerabilities (CVE-2011-1523, CVE-2011-2179). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch nagios-4839 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): nagios-3.2.3-3.4.1 nagios-devel-3.2.3-3.4.1 nagios-www-3.2.3-3.4.1 References: http://support.novell.com/security/cve/CVE-2011-1523.html http://support.novell.com/security/cve/CVE-2011-2179.html https://bugzilla.novell.com/682966 https://bugzilla.novell.com/697895

1 0

openSUSE-SU-2011:0833-1: moderate: nagios
by opensuse-security＠opensuse.org 25 Jul '11

25 Jul '11

openSUSE Security Update: nagios ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0833-1 Rating: moderate References: #682966 Cross-References: CVE-2011-1523 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: statusmap.cgi was prone to a cross-site scripting (XSS) vulnerability (CVE-2011-1523). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch nagios-4838 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): nagios-3.2.1-4.3.1 nagios-devel-3.2.1-4.3.1 nagios-www-3.2.1-4.3.1 References: http://support.novell.com/security/cve/CVE-2011-1523.html https://bugzilla.novell.com/682966

1 0

openSUSE-SU-2011:0829-1: moderate: icedtea-web
by opensuse-security＠opensuse.org 25 Jul '11

25 Jul '11

openSUSE Security Update: icedtea-web ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0829-1 Rating: moderate References: #704309 Cross-References: CVE-2011-2513 CVE-2011-2514 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of icedtea/icedtea-web fixes two issues: - CVE-2011-2513: CVSS v2 Base Score: 4.3: An information leak allows unsigned Web Start applications to determine the path to the cache directory used to store downloaded class and jar files. - CVE-2011-2514: CVSS v2 Base Score: 5.1 An unsigned Web Start application could manipulate content of the security warning dialog message to show different file name in prompts. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch icedtea-web-4910 - openSUSE 11.3: zypper in -t patch icedtea-web-4910 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): icedtea-web-1.1-0.6.1 - openSUSE 11.4 (noarch): icedtea-web-javadoc-1.1-0.6.1 - openSUSE 11.3 (i586 x86_64): icedtea-web-1.1-0.6.1 - openSUSE 11.3 (noarch): icedtea-web-javadoc-1.1-0.6.1 References: http://support.novell.com/security/cve/CVE-2011-2513.html http://support.novell.com/security/cve/CVE-2011-2514.html https://bugzilla.novell.com/704309

1 0

openSUSE-RU-2011:0813-1: xv: It aborts if a given file name has more than 119 characters
by maintenance＠opensuse.org 19 Jul '11

19 Jul '11

openSUSE Recommended Update: xv: It aborts if a given file name has more than 119 characters ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0813-1 Rating: low References: #704230 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: - #704230: xv aborts if a given file name has more than 119 characters Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch xv-4872 - openSUSE 11.3: zypper in -t patch xv-4872 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): xv-3.10a-1276.1277.1 - openSUSE 11.3 (i586 x86_64): xv-3.10a-1279.1271.1 References: https://bugzilla.novell.com/704230

1 0

openSUSE-RU-2011:0812-1: moderate: apcupsd: "/etc/init.d/apcupsd powerdown" doesn't work due a path/test issue
by maintenance＠opensuse.org 19 Jul '11

19 Jul '11

openSUSE Recommended Update: apcupsd: "/etc/init.d/apcupsd powerdown" doesn't work due a path/test issue ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0812-1 Rating: moderate References: #703592 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: - #703592: "/etc/init.d/apcupsd powerdown" doesn't work due a path/test issue Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch apcupsd-4879 - openSUSE 11.3: zypper in -t patch apcupsd-4879 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apcupsd-3.14.6-13.14.1 apcupsd-gui-3.14.6-13.14.1 - openSUSE 11.3 (i586 x86_64): apcupsd-3.14.6-9.3.1 apcupsd-gui-3.14.6-9.3.1 References: https://bugzilla.novell.com/703592

1 0

openSUSE-RU-2011:0811-1: quagga: Fix starting of zebra and ripd
by maintenance＠opensuse.org 19 Jul '11

19 Jul '11

openSUSE Recommended Update: quagga: Fix starting of zebra and ripd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0811-1 Rating: low References: #680499 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: zebro and ripd did not start due to an init script bug. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch quagga-4859 - openSUSE 11.3: zypper in -t patch quagga-4859 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): quagga-0.99.17-4.9.1 quagga-devel-0.99.17-4.9.1 - openSUSE 11.3 (i586 x86_64) [New Version: 0.99.17]: quagga-0.99.17-1.9.1 quagga-devel-0.99.17-1.9.1 References: https://bugzilla.novell.com/680499

1 0

openSUSE-RU-2011:0810-1: alsa: alsasound init script for separated /var partition
by maintenance＠opensuse.org 19 Jul '11

19 Jul '11

openSUSE Recommended Update: alsa: alsasound init script for separated /var partition ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0810-1 Rating: low References: #700781 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the alsasound init script in case /var is stored on a separated partition. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch alsa-4880 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): alsa-1.0.24.1-4.9.1 alsa-devel-1.0.24.1-4.9.1 libasound2-1.0.24.1-4.9.1 - openSUSE 11.4 (x86_64): libasound2-32bit-1.0.24.1-4.9.1 - openSUSE 11.4 (noarch): alsa-docs-1.0.24.1-4.9.1 References: https://bugzilla.novell.com/700781

1 0

openSUSE-RU-2011:0809-1: telnet: Crash if using "-b" option with incorrect argument
by maintenance＠opensuse.org 19 Jul '11

19 Jul '11

openSUSE Recommended Update: telnet: Crash if using "-b" option with incorrect argument ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0809-1 Rating: low References: #700229 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a telnet crashes or hang if using "-b" option with invalid value (bnc#700229). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch telnet-4881 - openSUSE 11.3: zypper in -t patch telnet-4881 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): telnet-1.2-150.153.1 telnet-server-1.2-150.153.1 - openSUSE 11.3 (i586 x86_64): telnet-1.2-147.5.1 telnet-server-1.2-147.5.1 References: https://bugzilla.novell.com/700229

1 0

openSUSE-RU-2011:0808-1: moderate: udisks: Fixed 'ntfs' support
by maintenance＠opensuse.org 19 Jul '11

19 Jul '11

openSUSE Recommended Update: udisks: Fixed 'ntfs' support ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0808-1 Rating: moderate References: #691077 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This patch fixes a "ntfs" support issue in udisks. - #691077: udisks: 'ntfs' needed in /etc/filesystems because it's not properly white-listed internally Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch udisks-4873 - openSUSE 11.3: zypper in -t patch udisks-4873 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): udisks-1.0.2-3.6.1 udisks-devel-1.0.2-3.6.1 - openSUSE 11.3 (i586 x86_64): udisks-1.0.1-2.5.1 udisks-devel-1.0.1-2.5.1 References: https://bugzilla.novell.com/691077

1 0

openSUSE-SU-2011:0803-1: important: kvm
by opensuse-security＠opensuse.org 19 Jul '11

19 Jul '11

openSUSE Security Update: kvm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0803-1 Rating: important References: #701161 #702823 Cross-References: CVE-2011-2212 CVE-2011-2512 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: A privileged guest user could cause a buffer overflow in the virtio subsystem of the host, therefore crashing the guest or potentially execute arbitrary code on the host (CVE-2011-2212, CVE-2011-2512). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch kvm-4863 - openSUSE 11.3: zypper in -t patch kvm-4863 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): kvm-0.14.0.0-1.10.1 - openSUSE 11.3 (i586 x86_64) [New Version: 0.12.5]: kvm-0.12.5-1.8.1 References: http://support.novell.com/security/cve/CVE-2011-2212.html http://support.novell.com/security/cve/CVE-2011-2512.html https://bugzilla.novell.com/701161 https://bugzilla.novell.com/702823

1 0

openSUSE-SU-2011:0800-1: moderate: cyrus-imapd
by opensuse-security＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Security Update: cyrus-imapd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0800-1 Rating: moderate References: #694247 Cross-References: CVE-2011-1926 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: cyrus-imapd recognized commands before switching to an encrypted channel via STARTTLS. Attackers could potentially exploit that to inject plain text commands (CVE-2011-1926). Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch cyrus-imapd-4736 - openSUSE 11.3: zypper in -t patch cyrus-imapd-4736 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): cyrus-imapd-2.3.16-16.17.1 cyrus-imapd-devel-2.3.16-16.17.1 perl-Cyrus-IMAP-2.3.16-16.17.1 perl-Cyrus-SIEVE-managesieve-2.3.16-16.17.1 - openSUSE 11.3 (i586 x86_64): cyrus-imapd-2.3.16-8.5.1 cyrus-imapd-devel-2.3.16-8.5.1 perl-Cyrus-IMAP-2.3.16-8.5.1 perl-Cyrus-SIEVE-managesieve-2.3.16-8.5.1 References: http://support.novell.com/security/cve/CVE-2011-1926.html https://bugzilla.novell.com/694247

1 0

openSUSE-SU-2011:0799-1: moderate: mysql-cluster
by opensuse-security＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Security Update: mysql-cluster ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0799-1 Rating: moderate References: #676974 Cross-References: CVE-2010-3833 CVE-2010-3834 CVE-2010-3835 CVE-2010-3836 CVE-2010-3837 CVE-2010-3838 CVE-2010-3839 CVE-2010-3840 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update fixes the following security issue: - 676974: mysql-cluster: security issues fixed in MySQL 5.1.51 Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libmysqlclusterclient16-4837 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libmysqlclusterclient16-7.1.14-0.3.1 libmysqlclusterclient_r16-7.1.14-0.3.1 mysql-cluster-7.1.14-0.3.1 mysql-cluster-bench-7.1.14-0.3.1 mysql-cluster-client-7.1.14-0.3.1 mysql-cluster-debug-7.1.14-0.3.1 mysql-cluster-ndb-extra-7.1.14-0.3.1 mysql-cluster-ndb-management-7.1.14-0.3.1 mysql-cluster-ndb-storage-7.1.14-0.3.1 mysql-cluster-ndb-tools-7.1.14-0.3.1 mysql-cluster-test-7.1.14-0.3.1 mysql-cluster-tools-7.1.14-0.3.1 References: http://support.novell.com/security/cve/CVE-2010-3833.html http://support.novell.com/security/cve/CVE-2010-3834.html http://support.novell.com/security/cve/CVE-2010-3835.html http://support.novell.com/security/cve/CVE-2010-3836.html http://support.novell.com/security/cve/CVE-2010-3837.html http://support.novell.com/security/cve/CVE-2010-3838.html http://support.novell.com/security/cve/CVE-2010-3839.html http://support.novell.com/security/cve/CVE-2010-3840.html https://bugzilla.novell.com/676974

1 0

openSUSE-RU-2011:0798-1: mlterm: Key combinations with Ctrl, Shift or Alt doesn't work with numlock switched on
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: mlterm: Key combinations with Ctrl, Shift or Alt doesn't work with numlock switched on ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0798-1 Rating: low References: #702512 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: - #702512: Key combinations with Ctrl, Shift or Alt doesn't work with numlock switched on Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch mlterm-4819 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): mlterm-3.0.1-14.15.1 mlterm-m17n-3.0.1-14.15.1 mlterm-scim-3.0.1-14.15.1 mlterm-uim-3.0.1-14.15.1 References: https://bugzilla.novell.com/702512

1 0

openSUSE-RU-2011:0795-1: important: mdadm: Partitions of raid arrays not handled correctly.
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: mdadm: Partitions of raid arrays not handled correctly. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0795-1 Rating: important References: #684291 #699667 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The following bugs are fixed by this update: - #684291: Partitions of raid arrays are not handled correctly. - #699667: Incorrect error message on big-endian machines. Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch mdadm-4757 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): mdadm-3.1.4-13.19.1 References: https://bugzilla.novell.com/684291 https://bugzilla.novell.com/699667

1 0

openSUSE-SU-2011:0790-1: moderate: opera: update to 11.50
by opensuse-security＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Security Update: opera: update to 11.50 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0790-1 Rating: moderate References: #703668 Cross-References: CVE-2011-1337 CVE-2011-2609 CVE-2011-2610 CVE-2011-2611 CVE-2011-2612 CVE-2011-2613 CVE-2011-2614 CVE-2011-2615 CVE-2011-2616 CVE-2011-2617 CVE-2011-2618 CVE-2011-2619 CVE-2011-2620 CVE-2011-2621 CVE-2011-2622 CVE-2011-2623 CVE-2011-2624 CVE-2011-2625 CVE-2011-2626 CVE-2011-2627 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 20 vulnerabilities is now available. It includes one version update. Description: opera 11.50 has been released, fixing numerous vulnerabilities. The full changelog is available at http://www.opera.com/docs/changelogs/unix/1150/ Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch opera-4853 - openSUSE 11.3: zypper in -t patch opera-4860 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 11.50]: opera-11.50-0.3.1 opera-gtk-11.50-0.3.1 opera-kde4-11.50-0.3.1 - openSUSE 11.3 (i586 x86_64) [New Version: 11.50]: opera-11.50-0.2.1 opera-gtk-11.50-0.2.1 opera-kde4-11.50-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-1337.html http://support.novell.com/security/cve/CVE-2011-2609.html http://support.novell.com/security/cve/CVE-2011-2610.html http://support.novell.com/security/cve/CVE-2011-2611.html http://support.novell.com/security/cve/CVE-2011-2612.html http://support.novell.com/security/cve/CVE-2011-2613.html http://support.novell.com/security/cve/CVE-2011-2614.html http://support.novell.com/security/cve/CVE-2011-2615.html http://support.novell.com/security/cve/CVE-2011-2616.html http://support.novell.com/security/cve/CVE-2011-2617.html http://support.novell.com/security/cve/CVE-2011-2618.html http://support.novell.com/security/cve/CVE-2011-2619.html http://support.novell.com/security/cve/CVE-2011-2620.html http://support.novell.com/security/cve/CVE-2011-2621.html http://support.novell.com/security/cve/CVE-2011-2622.html http://support.novell.com/security/cve/CVE-2011-2623.html http://support.novell.com/security/cve/CVE-2011-2624.html http://support.novell.com/security/cve/CVE-2011-2625.html http://support.novell.com/security/cve/CVE-2011-2626.html http://support.novell.com/security/cve/CVE-2011-2627.html https://bugzilla.novell.com/703668

1 0

openSUSE-SU-2011:0788-1: important: bind: fixing remote Denial of Service (CVE-2011-2464)
by opensuse-security＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Security Update: bind: fixing remote Denial of Service (CVE-2011-2464) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0788-1 Rating: important References: #703907 Cross-References: CVE-2011-2464 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: A remote Denial of Service vulnerability has been fixed in bind. Specially crafted packets could cause bind servers (recursive as well as authoritative) to exit. CVE-2011-2464 has been assigned to this issue. Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch bind-4843 - openSUSE 11.3: zypper in -t patch bind-4843 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 9.7.3P3]: bind-9.7.3P3-0.2.1 bind-chrootenv-9.7.3P3-0.2.1 bind-devel-9.7.3P3-0.2.1 bind-libs-9.7.3P3-0.2.1 bind-utils-9.7.3P3-0.2.1 - openSUSE 11.4 (x86_64) [New Version: 9.7.3P3]: bind-libs-32bit-9.7.3P3-0.2.1 - openSUSE 11.4 (noarch) [New Version: 9.7.3P3]: bind-doc-9.7.3P3-0.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 9.7.3P3]: bind-9.7.3P3-0.2.1 bind-chrootenv-9.7.3P3-0.2.1 bind-devel-9.7.3P3-0.2.1 bind-libs-9.7.3P3-0.2.1 bind-utils-9.7.3P3-0.2.1 - openSUSE 11.3 (x86_64) [New Version: 9.7.3P3]: bind-libs-32bit-9.7.3P3-0.2.1 - openSUSE 11.3 (noarch) [New Version: 9.7.3P3]: bind-doc-9.7.3P3-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-2464.html https://bugzilla.novell.com/703907

1 0

openSUSE-RU-2011:0782-1: flash-player: Update to 10.3.181.34
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: flash-player: Update to 10.3.181.34 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0782-1 Rating: low References: #703618 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: Adobe Flash Player 10.3.181.34 addresses compatibility issues with some content using cross-domain policy files. Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch flash-player-4834 - openSUSE 11.3: zypper in -t patch flash-player-4834 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586) [New Version: 10.3.181.34]: flash-player-10.3.181.34-1.2.1 - openSUSE 11.3 (i586) [New Version: 10.3.181.34]: flash-player-10.3.181.34-1.2.1 References: https://bugzilla.novell.com/703618

1 0

openSUSE-RU-2011:0778-1: gnome-packagekit: Update confirmation window will not fit on the screen.
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: gnome-packagekit: Update confirmation window will not fit on the screen. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0778-1 Rating: low References: #699181 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update. - Pack the package lists in the dependency dialog into tabs to fit any size of the screen. (bnc#699181) Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gnome-packagekit-4854 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): gnome-packagekit-2.32.0-7.8.1 gnome-packagekit-extras-2.32.0-7.8.1 - openSUSE 11.4 (noarch): gnome-packagekit-lang-2.32.0-7.8.1 References: https://bugzilla.novell.com/699181

1 0

openSUSE-RU-2011:0777-1: apparmor: Various fixes to profiles and userspace programs
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: apparmor: Various fixes to profiles and userspace programs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0777-1 Rating: low References: #666450 #678749 #679182 #681267 #682909 #682912 #685674 #696553 #701821 #702427 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: The apparmor userspace code and profiles is updated to fix various issues: - Fixed building of pam_apparmor to properly link libpam (bnc#696553). - Fixed building of apache2-mod_apparmor to properly link (bnc#701821). - Added perl-File-Tail dependency for aa-eventd (bnc#666450). - Add raw network access to traceroute profile (bnc#685674). - Updated dovecot profile (bnc#681267). - Changed apparmor-docs and apparmor-profiles back to noarch (bnc#682909 bnc#682912). - Add config files to samba profiles (bnc#666450 bnc#679182). - Added /etc/ethers and /var/run/dnsmasq-forwarders to usr.sbin.dnsmasq (bnc#678749) Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch apache2-mod_apparmor-4816 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apache2-mod_apparmor-2.5.1.r1445-52.59.1 apparmor-parser-2.5.1.r1445-52.59.1 libapparmor-devel-2.5.1.r1445-52.59.1 libapparmor1-2.5.1.r1445-52.59.1 pam_apparmor-2.5.1.r1445-52.59.1 perl-apparmor-2.5.1.r1445-52.59.1 tomcat_apparmor-2.5.1.r1445-52.59.1 - openSUSE 11.4 (x86_64): libapparmor1-32bit-2.5.1.r1445-52.59.1 pam_apparmor-32bit-2.5.1.r1445-52.59.1 - openSUSE 11.4 (noarch): apparmor-docs-2.5.1.r1445-52.59.1 apparmor-profiles-2.5.1.r1445-52.59.1 apparmor-utils-2.5.1.r1445-52.59.1 References: https://bugzilla.novell.com/666450 https://bugzilla.novell.com/678749 https://bugzilla.novell.com/679182 https://bugzilla.novell.com/681267 https://bugzilla.novell.com/682909 https://bugzilla.novell.com/682912 https://bugzilla.novell.com/685674 https://bugzilla.novell.com/696553 https://bugzilla.novell.com/701821 https://bugzilla.novell.com/702427

1 0

openSUSE-SU-2011:0774-1: moderate: mysql-cluster
by opensuse-security＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Security Update: mysql-cluster ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0774-1 Rating: moderate References: #635645 #676974 Cross-References: CVE-2010-3833 CVE-2010-3834 CVE-2010-3835 CVE-2010-3836 CVE-2010-3837 CVE-2010-3838 CVE-2010-3839 CVE-2010-3840 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. It includes one version update. Description: This update fixes the following security issue: - 676974: mysql-cluster: security issues fixed in MySQL 5.1.51 This update also fixes the following non-security issue: - 635645: mysql init script fails to start when SELinux is enabled Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libmysqlclusterclient16-4844 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 7.0.25]: libmysqlclusterclient16-7.0.25-0.3.1 libmysqlclusterclient_r16-7.0.25-0.3.1 mysql-cluster-7.0.25-0.3.1 mysql-cluster-bench-7.0.25-0.3.1 mysql-cluster-client-7.0.25-0.3.1 mysql-cluster-debug-7.0.25-0.3.1 mysql-cluster-ndb-extra-7.0.25-0.3.1 mysql-cluster-ndb-management-7.0.25-0.3.1 mysql-cluster-ndb-storage-7.0.25-0.3.1 mysql-cluster-ndb-tools-7.0.25-0.3.1 mysql-cluster-test-7.0.25-0.3.1 mysql-cluster-tools-7.0.25-0.3.1 References: http://support.novell.com/security/cve/CVE-2010-3833.html http://support.novell.com/security/cve/CVE-2010-3834.html http://support.novell.com/security/cve/CVE-2010-3835.html http://support.novell.com/security/cve/CVE-2010-3836.html http://support.novell.com/security/cve/CVE-2010-3837.html http://support.novell.com/security/cve/CVE-2010-3838.html http://support.novell.com/security/cve/CVE-2010-3839.html http://support.novell.com/security/cve/CVE-2010-3840.html https://bugzilla.novell.com/635645 https://bugzilla.novell.com/676974

1 0

openSUSE-RU-2011:0765-1: sysvinit: NFS-Server is not starting.
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: sysvinit: NFS-Server is not starting. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0765-1 Rating: low References: #687547 #700342 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The following bug is fixed by this update: - #700342: NFS-Server is not started at boot time. It is also not possible to start it manually. Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch sysvinit-4842 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): sysvinit-2.88-37.47.1 sysvinit-tools-2.88-37.47.1 References: https://bugzilla.novell.com/687547 https://bugzilla.novell.com/700342

1 0

openSUSE-SU-2011:0762-1: critical: mariadb: Fixed missing innodb support after last update
by opensuse-security＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Security Update: mariadb: Fixed missing innodb support after last update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0762-1 Rating: critical References: #704811 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes one version update. Description: The last security version upgrade of MariaDB (a MySQL fork) removed innodb support, breaking old databases. This update fixes this problem. - #704811: mariadb "security update" breaks database Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libmariadbclient16-4864 - openSUSE 11.3: zypper in -t patch libmariadbclient16-4869 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libmariadbclient16-5.1.55-0.5.1 libmariadbclient_r16-5.1.55-0.5.1 mariadb-5.1.55-0.5.1 mariadb-bench-5.1.55-0.5.1 mariadb-client-5.1.55-0.5.1 mariadb-debug-5.1.55-0.5.1 mariadb-test-5.1.55-0.5.1 mariadb-tools-5.1.55-0.5.1 - openSUSE 11.3 (i586 x86_64) [New Version: 5.1.55]: libmariadbclient16-5.1.55-0.5.1 libmariadbclient_r16-5.1.55-0.5.1 mariadb-5.1.55-0.5.1 mariadb-bench-5.1.55-0.5.1 mariadb-client-5.1.55-0.5.1 mariadb-debug-5.1.55-0.5.1 mariadb-test-5.1.55-0.5.1 mariadb-tools-5.1.55-0.5.1 References: https://bugzilla.novell.com/704811

1 0

openSUSE-RU-2011:0760-1: MozillaFirefox: Version upgrade to 5.0
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: MozillaFirefox: Version upgrade to 5.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0760-1 Rating: low References: #703401 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: The Firefox 5.0 update for openSUSE 11.4 was missing the branding-upstream package, making seamless upgrade harder: bnc#703401: Can't upgrade to Firefox 5.0 Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch firefox50-upgrade-4833 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 5.0]: MozillaFirefox-5.0-0.4.1 MozillaFirefox-branding-openSUSE-5.0-2.3.1 MozillaFirefox-branding-upstream-5.0-0.4.1 MozillaFirefox-buildsymbols-5.0-0.4.1 MozillaFirefox-devel-5.0-0.4.1 MozillaFirefox-translations-common-5.0-0.4.1 MozillaFirefox-translations-other-5.0-0.4.1 References: https://bugzilla.novell.com/703401

1 0

openSUSE-RU-2011:0757-1: gnome-panel: No appointments on clock applet
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: gnome-panel: No appointments on clock applet ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0757-1 Rating: low References: #648940 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Evolution appointments are not shown in the clock applet (bgo633566 also bnc648940). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gnome-panel-4835 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): gnome-panel-2.32.1-7.12.1 gnome-panel-bonobo-support-2.32.1-7.12.1 gnome-panel-devel-2.32.1-7.12.1 gnome-panel-doc-2.32.1-7.12.1 gnome-panel-extras-2.32.1-7.12.1 libpanel-applet-2-0-2.32.1-7.12.1 libpanel-applet-3-0-2.32.1-7.12.1 - openSUSE 11.4 (x86_64): libpanel-applet-2-0-32bit-2.32.1-7.12.1 libpanel-applet-3-0-32bit-2.32.1-7.12.1 - openSUSE 11.4 (noarch): gnome-panel-lang-2.32.1-7.12.1 References: https://bugzilla.novell.com/648940

1 0

openSUSE-RU-2011:0756-1: net-snmp: Add JFS and XFS to the list of known file systems
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: net-snmp: Add JFS and XFS to the list of known file systems ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0756-1 Rating: low References: #687327 #702640 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: Update for the net-snmp package to fix the following bug(s): - net-snmp ignores XFS and JFS partitions (bnc#687327, bnc#702640) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libsnmp25-4840 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libsnmp25-5.6.1-4.5.1 net-snmp-5.6.1-4.5.1 net-snmp-devel-5.6.1-4.5.1 perl-SNMP-5.6.1-4.5.1 snmp-mibs-5.6.1-4.5.1 - openSUSE 11.4 (x86_64): libsnmp25-32bit-5.6.1-4.5.1 References: https://bugzilla.novell.com/687327 https://bugzilla.novell.com/702640

1 0

openSUSE-RU-2011:0750-1: open-iscsi: Booting with iSCSI root device fails
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: open-iscsi: Booting with iSCSI root device fails ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0750-1 Rating: low References: #656119 #683249 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The following bug is fixed by this update: On restarting iscsid after mounting the root over iSCSI device, it tried to use CHAP authentication even when not auth was required. This was caused by treating "(null)", returned by sysfs for null strings, as a valid password. This terminated the iSCSI connection, thereby rendering the system unusable. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch open-iscsi-4855 - openSUSE 11.3: zypper in -t patch open-iscsi-4855 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): open-iscsi-2.0.870-37.38.1 - openSUSE 11.3 (i586 x86_64): open-iscsi-2.0.870-33.3.1 References: https://bugzilla.novell.com/656119 https://bugzilla.novell.com/683249

1 0

openSUSE-SU-2011:0749-1: moderate: nfs-utils
by opensuse-security＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Security Update: nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0749-1 Rating: moderate References: #689799 #693189 #701702 Cross-References: CVE-2011-1749 CVE-2011-2500 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update fixes the following security issues: When using wildcards in /etc/exports an attacker could gain unauthorized access to an nfs exported filesystem by creating a DNS record that resolves to the attacker's IP as well as to a trusted IP (CVE-2011-2500). mount.nfs could corrupt /etc/mtab (CVE-2011-1749). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch nfs-client-4831 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): nfs-client-1.2.3-11.16.1 nfs-doc-1.2.3-11.16.1 nfs-kernel-server-1.2.3-11.16.1 References: http://support.novell.com/security/cve/CVE-2011-1749.html http://support.novell.com/security/cve/CVE-2011-2500.html https://bugzilla.novell.com/689799 https://bugzilla.novell.com/693189 https://bugzilla.novell.com/701702

1 0

openSUSE-RU-2011:0748-1: open-iscsi: Booting with iSCSI root device fails
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: open-iscsi: Booting with iSCSI root device fails ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0748-1 Rating: low References: #656119 #683249 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The following bug is fixed by this update: On restarting iscsid after mounting the root over iSCSI device, it tried to use CHAP authentication even when not auth was required. This was caused by treating "(null)", returned by sysfs for null strings, as a valid password. This terminated the iSCSI connection, thereby rendering the system unusable. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch open-iscsi-4855 - openSUSE 11.3: zypper in -t patch open-iscsi-4855 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): open-iscsi-2.0.870-37.38.1 - openSUSE 11.3 (i586 x86_64): open-iscsi-2.0.870-33.3.1 References: https://bugzilla.novell.com/656119 https://bugzilla.novell.com/683249

1 0

openSUSE-SU-2011:0747-1: moderate: nfs-utils
by opensuse-security＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Security Update: nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0747-1 Rating: moderate References: #689799 #693189 #701702 Cross-References: CVE-2011-1749 CVE-2011-2500 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update fixes the following security issues: When using wildcards in /etc/exports an attacker could gain unauthorized access to an nfs exported filesystem by creating a DNS record that resolves to the attacker's IP as well as to a trusted IP (CVE-2011-2500). mount.nfs could corrupt /etc/mtab (CVE-2011-1749). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch nfs-client-4831 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): nfs-client-1.2.3-11.16.1 nfs-doc-1.2.3-11.16.1 nfs-kernel-server-1.2.3-11.16.1 References: http://support.novell.com/security/cve/CVE-2011-1749.html http://support.novell.com/security/cve/CVE-2011-2500.html https://bugzilla.novell.com/689799 https://bugzilla.novell.com/693189 https://bugzilla.novell.com/701702

1 0

openSUSE-SU-2011:0743-1: moderate: MariaDB
by opensuse-security＠opensuse.org 06 Jul '11

06 Jul '11

openSUSE Security Update: MariaDB ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0743-1 Rating: moderate References: #676973 Cross-References: CVE-2010-3833 CVE-2010-3834 CVE-2010-3835 CVE-2010-3836 CVE-2010-3837 CVE-2010-3838 CVE-2010-3839 CVE-2010-3840 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. It includes one version update. Description: MariaDB was updated to version 5.1.55 to fix numerous bugs and security issues. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libmariadbclient16-4830 - openSUSE 11.3: zypper in -t patch libmariadbclient16-4830 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libmariadbclient16-5.1.55-0.3.1 libmariadbclient_r16-5.1.55-0.3.1 mariadb-5.1.55-0.3.1 mariadb-bench-5.1.55-0.3.1 mariadb-client-5.1.55-0.3.1 mariadb-debug-5.1.55-0.3.1 mariadb-test-5.1.55-0.3.1 mariadb-tools-5.1.55-0.3.1 - openSUSE 11.3 (i586 x86_64) [New Version: 5.1.55]: libmariadbclient16-5.1.55-0.3.1 libmariadbclient_r16-5.1.55-0.3.1 mariadb-5.1.55-0.3.1 mariadb-bench-5.1.55-0.3.1 mariadb-client-5.1.55-0.3.1 mariadb-debug-5.1.55-0.3.1 mariadb-test-5.1.55-0.3.1 mariadb-tools-5.1.55-0.3.1 References: http://support.novell.com/security/cve/CVE-2010-3833.html http://support.novell.com/security/cve/CVE-2010-3834.html http://support.novell.com/security/cve/CVE-2010-3835.html http://support.novell.com/security/cve/CVE-2010-3836.html http://support.novell.com/security/cve/CVE-2010-3837.html http://support.novell.com/security/cve/CVE-2010-3838.html http://support.novell.com/security/cve/CVE-2010-3839.html http://support.novell.com/security/cve/CVE-2010-3840.html https://bugzilla.novell.com/676973

1 0

openSUSE-RU-2011:0742-1: critical: icedtea-web: Fix undefined symbol warning in icedtea-web
by maintenance＠opensuse.org 06 Jul '11

06 Jul '11

openSUSE Recommended Update: icedtea-web: Fix undefined symbol warning in icedtea-web ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0742-1 Rating: critical References: #702825 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Fix symbol clash with moonlight (bnc#702825) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch icedtea-web-4832 - openSUSE 11.3: zypper in -t patch icedtea-web-4832 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): icedtea-web-1.1-0.4.2 - openSUSE 11.4 (noarch): icedtea-web-javadoc-1.1-0.4.2 - openSUSE 11.3 (i586 x86_64): icedtea-web-1.1-0.4.2 - openSUSE 11.3 (noarch): icedtea-web-javadoc-1.1-0.4.2 References: https://bugzilla.novell.com/702825

1 0

openSUSE-RU-2011:0739-1: moderate: pure-ftpd: It fails with pam authentication
by maintenance＠opensuse.org 05 Jul '11

05 Jul '11

openSUSE Recommended Update: pure-ftpd: It fails with pam authentication ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0739-1 Rating: moderate References: #700611 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update adds the missing CAP_AUDIT_WRITE capability needed for the successful pam authentication on openSUSE. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch pure-ftpd-4803 - openSUSE 11.3: zypper in -t patch pure-ftpd-4803 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): pure-ftpd-1.0.29-8.11.1 - openSUSE 11.3 (i586 x86_64): pure-ftpd-1.0.29-2.5.1 References: https://bugzilla.novell.com/700611

1 0

openSUSE-RU-2011:0738-1: xtables-addon: Update to 1.37 to fix ipset working with current kernel
by maintenance＠opensuse.org 04 Jul '11

04 Jul '11

openSUSE Recommended Update: xtables-addon: Update to 1.37 to fix ipset working with current kernel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0738-1 Rating: low References: #690922 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: xtables-addon was updated to release 1.37, making it work with the 11.4 included kernel. - update to new upstream release 1.37 * xt_SYSRQ: make IPv6 trigger work again * xt_SYSRQ: improve security: include host address in digest * xt_TARPIT: fix a kernel oops in --reset mode - update to new upstream release 1.36 * update to ipset 6.7 * xt_TARPIT has gained the "honeypot" and "reset" modes - Update to new upstream release 1.35 * update to ipset 6.3 * ipset-genl: handle EAGAIN return value emitted from autoloader * ipset-genl: resolve nfgenmsg remains and fix spurious protocol abort - Update to new upstream release 1.34 * xt_pknock: avoid crash when hash TFM could not be allocated * xt_pknock: avoid inversion of rule lookup that led to warnings * xt_DNETMAP: add missing module alias * xt_DNETMAP: support for kernels below 2.6.34 - Add kmp preamble file and to fix specifically: - #690922: ipset error Cannot open session to kernel Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch xtables-addons-4784 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): xtables-addons-1.37-0.3.1 xtables-addons-kmp-default-1.37_k2.6.37.6_0.5-0.3.1 xtables-addons-kmp-desktop-1.37_k2.6.37.6_0.5-0.3.1 xtables-addons-kmp-xen-1.37_k2.6.37.6_0.5-0.3.1 - openSUSE 11.4 (i586): xtables-addons-kmp-pae-1.37_k2.6.37.6_0.5-0.3.1 References: https://bugzilla.novell.com/690922

1 0

openSUSE-RU-2011:0736-1: moderate: sysconfig: various fixes
by maintenance＠opensuse.org 01 Jul '11

01 Jul '11

openSUSE Recommended Update: sysconfig: various fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0736-1 Rating: moderate References: #648830 #670871 #698478 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This collective update for sysconfig provides the following fixes: - Added WIRELESS_AUTH_MODE='no-encryption' option handling to ifup-wireless, because YaST sets it (bnc#648830). - Fixed get_depending_ifaces to not return bonding slaves by default as it is not required to stop the slaves before the bonding master goes down and in fact it may cause a system hang, when the slaves are infiniband child interfaces, that are deleted while ifdown (bnc#698478). - Fixed to use 600 mode in spec attr for ifcfg-lo to avoid that rpm -V report it as modified because of the chmod added to the post-install script in bnc#670871. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch sysconfig-4827 - openSUSE 11.3: zypper in -t patch sysconfig-4827 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): sysconfig-0.74.5-6.7.1 - openSUSE 11.3 (i586 x86_64): sysconfig-0.73.7-2.9.1 References: https://bugzilla.novell.com/648830 https://bugzilla.novell.com/670871 https://bugzilla.novell.com/698478

1 0

openSUSE-SU-2011:0734-1: moderate: tftp
by opensuse-security＠opensuse.org 01 Jul '11

01 Jul '11

openSUSE Security Update: tftp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0734-1 Rating: moderate References: #699714 Cross-References: CVE-2011-2199 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Malicious clients could overflow a buffer in tftpd by specifying a large value for the utimeout option (CVE-2011-2199). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch tftp-4783 - openSUSE 11.3: zypper in -t patch tftp-4783 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): tftp-5.0-113.114.1 - openSUSE 11.3 (i586 x86_64): tftp-0.48-108.3.1 References: http://support.novell.com/security/cve/CVE-2011-2199.html https://bugzilla.novell.com/699714

1 0