February 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2012:0290-1: pm-utils: fixed Sleep/Resume for NetworkManager
by maintenance＠opensuse.org 20 Feb '12

20 Feb '12

openSUSE Recommended Update: pm-utils: fixed Sleep/Resume for NetworkManager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0290-1 Rating: low References: #735837 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for pm-utils: - 735837: Sleep/Resume for NetworkManager is broken Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch pm-utils-5806 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): pm-utils-1.4.1-5.11.1 pm-utils-ndiswrapper-1.4.1-5.11.1 References: https://bugzilla.novell.com/735837

1 0

openSUSE-RU-2012:0289-1: moderate: grub: Remove MAP_GROWSDOWN flag when allocating scratch mem for the grub shell
by maintenance＠opensuse.org 20 Feb '12

20 Feb '12

openSUSE Recommended Update: grub: Remove MAP_GROWSDOWN flag when allocating scratch mem for the grub shell ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0289-1 Rating: moderate References: #640391 #717836 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issue for grub: - 640391, 717836: Remove MAP_GROWSDOWN flag when allocating scratch mem for the grub shell Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch grub-5822 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): grub-0.97-175.176.1 References: https://bugzilla.novell.com/640391 https://bugzilla.novell.com/717836

1 0

openSUSE-SU-2012:0287-1: important: No summary available - BOX
by opensuse-security＠opensuse.org 20 Feb '12

20 Feb '12

openSUSE Security Update: No summary available - BOX ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0287-1 Rating: important References: #742804 Cross-References: CVE-2012-0791 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This version upgrade of horde3-dimp to 4.3.11 fixes several issues (including security related flaws, CVE-2012-0791) and adds new features. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch horde3-dimp-5829 horde3-imp-5830 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): horde3-dimp-1.1.8-0.3.1 horde3-imp-4.3.11-0.3.1 References: http://support.novell.com/security/cve/CVE-2012-0791.html https://bugzilla.novell.com/742804

1 0

openSUSE-SU-2012:0286-1: important: No summary available - BOX
by opensuse-security＠opensuse.org 20 Feb '12

20 Feb '12

openSUSE Security Update: No summary available - BOX ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0286-1 Rating: important References: #742804 Cross-References: CVE-2012-0909 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This version upgrade of horde3 to 3.3.13 fixes several issues (including a security related flaw, CVE-2012-0909) and adds new features. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch horde3-5831 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): horde3-3.3.13-0.3.2 References: http://support.novell.com/security/cve/CVE-2012-0909.html https://bugzilla.novell.com/742804

1 0

openSUSE-SU-2012:0267-1: No summary available - BOX
by opensuse-security＠opensuse.org 17 Feb '12

17 Feb '12

openSUSE Security Update: No summary available - BOX ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0267-1 Rating: low References: #740165 Cross-References: CVE-2012-0029 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: A heap-based buffer overflow in the legacy mode of the e1000 driver device emulation was fixed (CVE-2012-0029). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch qemu-5767 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): qemu-0.14.0_rc1-1.6.1 References: http://support.novell.com/security/cve/CVE-2012-0029.html https://bugzilla.novell.com/740165

1 0

openSUSE-SU-2012:0266-1: moderate: VUL-0: recent openssl update introduced DTLS DoS
by opensuse-security＠opensuse.org 17 Feb '12

17 Feb '12

openSUSE Security Update: VUL-0: recent openssl update introduced DTLS DoS ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0266-1 Rating: moderate References: #742821 Cross-References: CVE-2012-0050 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of OpenSSL fixes a Denial of Services issue (CVE-2012-0050). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libopenssl-devel-5761 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libopenssl-devel-1.0.0c-18.25.1 libopenssl1_0_0-1.0.0c-18.25.1 openssl-1.0.0c-18.25.1 - openSUSE 11.4 (x86_64): libopenssl1_0_0-32bit-1.0.0c-18.25.1 - openSUSE 11.4 (noarch): openssl-doc-1.0.0c-18.25.1 References: http://support.novell.com/security/cve/CVE-2012-0050.html https://bugzilla.novell.com/742821

1 0

openSUSE-SU-2012:0265-1: critical: flash-player to 11.1.102.62
by opensuse-security＠opensuse.org 17 Feb '12

17 Feb '12

openSUSE Security Update: flash-player to 11.1.102.62 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0265-1 Rating: critical References: #747297 Cross-References: CVE-2012-0751 CVE-2012-0752 CVE-2012-0753 CVE-2012-0754 CVE-2012-0755 CVE-2012-0756 CVE-2012-0767 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. It includes one version update. Description: flash-player was updated to the security update to 11.1.102.62. It fixes lots of security issues, some already exploited in the wild. Details can be found on: https://www.adobe.com/support/security/bulletins/apsb12-03.h tml These vulnerabilities could cause a crash and potentially allow an attacker to take control of the affected system. This update also resolves a universal cross-site scripting vulnerability that could be used to take actions on a user's behalf on any website or webmail provider, if the user visits a malicious website. There are reports that this vulnerability (CVE-2012-0767) is being exploited in the wild in active targeted attacks designed to trick the user into clicking on a malicious link delivered in an email message (Internet Explorer on Windows only). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch flash-player-5812 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 11.1.102.62]: flash-player-11.1.102.62-0.7.1 References: http://support.novell.com/security/cve/CVE-2012-0751.html http://support.novell.com/security/cve/CVE-2012-0752.html http://support.novell.com/security/cve/CVE-2012-0753.html http://support.novell.com/security/cve/CVE-2012-0754.html http://support.novell.com/security/cve/CVE-2012-0755.html http://support.novell.com/security/cve/CVE-2012-0756.html http://support.novell.com/security/cve/CVE-2012-0767.html https://bugzilla.novell.com/747297

1 0

openSUSE-SU-2012:0262-1: moderate: No summary available - BOX
by opensuse-security＠opensuse.org 16 Feb '12

16 Feb '12

openSUSE Security Update: No summary available - BOX ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0262-1 Rating: moderate References: #739121 Cross-References: CVE-2011-4461 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: jetty5 was prone to a remotely exploitable Denial of Service flaw via hash collisions (CVE-2011-4461). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch jetty5-5813 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): jetty5-5.1.14-11.12.1 jetty5-demo-5.1.14-11.12.1 jetty5-javadoc-5.1.14-11.12.1 jetty5-manual-5.1.14-11.12.1 References: http://support.novell.com/security/cve/CVE-2011-4461.html https://bugzilla.novell.com/739121

1 0

openSUSE-RU-2012:0259-1: xfce4-panel-plugins: Fix display of alarm in certain locales
by maintenance＠opensuse.org 15 Feb '12

15 Feb '12

openSUSE Recommended Update: xfce4-panel-plugins: Fix display of alarm in certain locales ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0259-1 Rating: low References: #742788 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: * make the add/edit dialog transient for the main configuration window and to make the notification dialog modal * use a dynamically allocated string to hold timer data in order to prevent truncation in some locales (bnc#742788) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch xfce4-panel-plugin-battery-5786 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.5.4.2]: xfce4-panel-plugin-battery-1.0.0-2.5.1 xfce4-panel-plugin-cddrive-0.0.1-19.5.1 xfce4-panel-plugin-cellmodem-0.0.5-24.5.1 xfce4-panel-plugin-clipman-1.1.3-18.5.1 xfce4-panel-plugin-clipman-doc-1.1.3-4.5.1 xfce4-panel-plugin-cpufreq-1.0.0-3.5.1 xfce4-panel-plugin-cpugraph-1.0.1-6.5.1 xfce4-panel-plugin-datetime-0.6.1-18.5.1 xfce4-panel-plugin-diskperf-2.3.0-3.5.1 xfce4-panel-plugin-eyes-4.4.1-2.5.1 xfce4-panel-plugin-fsguard-1.0.0-4.5.1 xfce4-panel-plugin-genmon-3.2-24.5.1 xfce4-panel-plugin-mailwatch-1.1.0-6.5.1 xfce4-panel-plugin-mount-0.5.5-18.5.1 xfce4-panel-plugin-mpc-0.3.6-3.5.1 xfce4-panel-plugin-netload-1.0.0-4.5.1 xfce4-panel-plugin-notes-1.7.7-6.5.1 xfce4-panel-plugin-places-1.2.0-17.5.1 xfce4-panel-plugin-quicklauncher-1.9.4-24.5.1 xfce4-panel-plugin-radio-0.4.4-6.5.1 xfce4-panel-plugin-sensors-1.0.0-4.5.1 xfce4-panel-plugin-sensors-devel-1.0.0-4.5.1 xfce4-panel-plugin-smartbookmark-0.4.2-24.5.1 xfce4-panel-plugin-systemload-1.0.0-4.5.1 xfce4-panel-plugin-timeout-1.0.0-4.5.1 xfce4-panel-plugin-timer-0.6.1-18.5.1 xfce4-panel-plugin-verve-1.0.0-4.5.1 xfce4-panel-plugin-wavelan-0.5.6-6.5.1 xfce4-panel-plugin-weather-0.7.4-3.5.1 xfce4-panel-plugin-xfapplet-0.1.0-24.5.1 xfce4-panel-plugin-xkb-0.5.4.2-0.5.1 xfce4-panel-plugin-xmms-0.5.3-3.5.1 References: https://bugzilla.novell.com/742788

1 0

openSUSE-SU-2012:0258-1: critical: MozillaFirefox to 10.0.1
by opensuse-security＠opensuse.org 14 Feb '12

14 Feb '12

openSUSE Security Update: MozillaFirefox to 10.0.1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0258-1 Rating: critical References: #746616 Cross-References: CVE-2012-0452 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes two new package versions. Description: MozillaFirefox was updated to 10.0.1 to fix critical bugs and security issue. Following security issue was fixed: CVE-2012-0452: Mozilla developers Andrew McCreight and Olli Pettay found that ReadPrototypeBindings will leave a XBL binding in a hash table even when the function fails. If this occurs, when the cycle collector reads this hash table and attempts to do a virtual method on this binding a crash will occur. This crash may be potentially exploitable. Firefox 9 and earlier are not affected by this vulnerability. https://www.mozilla.org/security/announce/2012/mfsa2012-10.h tml Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaFirefox-5799 seamonkey-5804 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 10.0.1 and 2.7.1]: MozillaFirefox-10.0.1-0.2.1 MozillaFirefox-branding-upstream-10.0.1-0.2.1 MozillaFirefox-buildsymbols-10.0.1-0.2.1 MozillaFirefox-devel-10.0.1-0.2.1 MozillaFirefox-translations-common-10.0.1-0.2.1 MozillaFirefox-translations-other-10.0.1-0.2.1 seamonkey-2.7.1-0.2.1 seamonkey-dom-inspector-2.7.1-0.2.1 seamonkey-irc-2.7.1-0.2.1 seamonkey-translations-common-2.7.1-0.2.1 seamonkey-translations-other-2.7.1-0.2.1 seamonkey-venkman-2.7.1-0.2.1 References: http://support.novell.com/security/cve/CVE-2012-0452.html https://bugzilla.novell.com/746616

1 0