March 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2011:0270-1 (low): kile: Fix math related icons being black
by maintenance＠opensuse.org 31 Mar '11

31 Mar '11

openSUSE Recommended Update: kile: Fix math related icons being black ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0270-1 Rating: low References: #676046 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes black icons in the toolbar of kile due to a packaging error (bnc#676046). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch kile-4244 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): kile-2.0.99beta5-6.11.1 - openSUSE 11.4 (noarch): kile-lang-2.0.99beta5-6.11.1 References: https://bugzilla.novell.com/676046

1 0

openSUSE-SU-2011:0268-1 (important): apparmor-parser: parser could generate policy using an unconfined fallback execute transition
by opensuse-security＠opensuse.org 31 Mar '11

31 Mar '11

openSUSE Security Update: apparmor-parser: parser could generate policy using an unconfined fallback execute transition ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0268-1 Rating: important References: #662928 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Fixed apparmor-parser: The parser could generate a policy using an unconfined fallback execute transition. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch apparmor-parser-3810 - openSUSE 11.2: zypper in -t patch apparmor-parser-3810 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): apparmor-parser-2.3.1-22.5.1 - openSUSE 11.2 (i586 x86_64): apparmor-parser-2.3.1-11.15.1 References: https://bugzilla.novell.com/662928

1 0

openSUSE-SU-2011:0265-1 (important): fuse security update
by opensuse-security＠opensuse.org 31 Mar '11

31 Mar '11

openSUSE Security Update: fuse security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0265-1 Rating: important References: #651598 #668820 Cross-References: CVE-2010-3879 CVE-2011-0541 CVE-2011-0543 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: Race conditions in fuse allowed unprivileged users to umount arbitrary mount points (CVE-2011-0541,CVE-2010-3879,CVE-2011-0543). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch fuse-4183 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): fuse-2.7.4-3.8.1 fuse-devel-2.7.4-3.8.1 fuse-devel-static-2.7.4-3.8.1 libblkid-devel-2.16-4.6.1 libblkid1-2.16-4.6.1 libfuse2-2.7.4-3.8.1 libuuid-devel-2.16-4.6.1 libuuid1-2.16-4.6.1 util-linux-2.16-4.6.1 uuidd-2.16-4.6.1 - openSUSE 11.2 (x86_64): libblkid-devel-32bit-2.16-4.6.1 libblkid1-32bit-2.16-4.6.1 libfuse2-32bit-2.7.4-3.8.1 libuuid-devel-32bit-2.16-4.6.1 libuuid1-32bit-2.16-4.6.1 - openSUSE 11.2 (noarch): util-linux-lang-2.16-4.6.1 References: http://support.novell.com/security/cve/CVE-2010-3879.html http://support.novell.com/security/cve/CVE-2011-0541.html http://support.novell.com/security/cve/CVE-2011-0543.html https://bugzilla.novell.com/651598 https://bugzilla.novell.com/668820

1 0

openSUSE-SU-2011:0264-1 (important): fuse security update
by opensuse-security＠opensuse.org 31 Mar '11

31 Mar '11

openSUSE Security Update: fuse security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0264-1 Rating: important References: #651598 #668820 #670585 Cross-References: CVE-2010-3879 CVE-2011-0541 CVE-2011-0543 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. It includes one version update. Description: Race conditions in fuse allowed unprivileged users to umount arbitrary mount points (CVE-2011-0541,CVE-2010-3879,CVE-2011-0543). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch fuse-4184 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.8.5]: fuse-2.8.5-2.7.1 fuse-devel-2.8.5-2.7.1 fuse-devel-static-2.8.5-2.7.1 libblkid-devel-2.17.2-6.3.1 libblkid1-2.17.2-6.3.1 libfuse2-2.8.5-2.7.1 libuuid-devel-2.17.2-6.3.1 libuuid1-2.17.2-6.3.1 util-linux-2.17.2-6.3.1 uuidd-2.17.2-6.3.1 - openSUSE 11.3 (x86_64) [New Version: 2.8.5]: libblkid-devel-32bit-2.17.2-6.3.1 libblkid1-32bit-2.17.2-6.3.1 libfuse2-32bit-2.8.5-2.7.1 libuuid-devel-32bit-2.17.2-6.3.1 libuuid1-32bit-2.17.2-6.3.1 - openSUSE 11.3 (noarch): util-linux-lang-2.17.2-6.3.1 References: http://support.novell.com/security/cve/CVE-2010-3879.html http://support.novell.com/security/cve/CVE-2011-0541.html http://support.novell.com/security/cve/CVE-2011-0543.html https://bugzilla.novell.com/651598 https://bugzilla.novell.com/668820 https://bugzilla.novell.com/670585

1 0

openSUSE-RU-2011:0260-1 (moderate): perl-MIME-tools: Version upgrade to 5.502
by maintenance＠opensuse.org 31 Mar '11

31 Mar '11

openSUSE Recommended Update: perl-MIME-tools: Version upgrade to 5.502 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0260-1 Rating: moderate References: #682286 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: openSUSE 11.4 contains the buggy version 5.500, which use is deprecated by the developers. This update provides the latest stable and recommended version. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch perl-MIME-tools-4230 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 5.502]: perl-MIME-tools-5.502-1.3.1 References: https://bugzilla.novell.com/682286

1 0

openSUSE-SU-2011:0255-1 (moderate): libxml2: fixing Xpath processing (CVE-2010-4494)
by opensuse-security＠opensuse.org 31 Mar '11

31 Mar '11

openSUSE Security Update: libxml2: fixing Xpath processing (CVE-2010-4494) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0255-1 Rating: moderate References: #661471 Cross-References: CVE-2010-4494 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: A bug in the Xpath processing inside libxml2 has been fixed. CVE-2010-4494 has been assigned to this issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libxml2-3758 - openSUSE 11.2: zypper in -t patch libxml2-3758 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libxml2-2.7.7-4.5.1 libxml2-devel-2.7.7-4.5.1 - openSUSE 11.3 (x86_64): libxml2-32bit-2.7.7-4.5.1 libxml2-devel-32bit-2.7.7-4.5.1 - openSUSE 11.3 (noarch): libxml2-doc-2.7.7-4.5.1 - openSUSE 11.2 (i586 x86_64): libxml2-2.7.3-2.5.1 libxml2-devel-2.7.3-2.5.1 libxml2-doc-2.7.3-2.5.1 - openSUSE 11.2 (x86_64): libxml2-32bit-2.7.3-2.5.1 libxml2-devel-32bit-2.7.3-2.5.1 References: http://support.novell.com/security/cve/CVE-2010-4494.html https://bugzilla.novell.com/661471

1 0

openSUSE-SU-2011:0254-1 (moderate): postgresql security update
by opensuse-security＠opensuse.org 31 Mar '11

31 Mar '11

openSUSE Security Update: postgresql security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0254-1 Rating: moderate References: #660478 Cross-References: CVE-2010-4014 CVE-2010-4015 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: A buffer overflow in the intarray module potentially allowed attackers to execute arbitrary code as the user running postgresql (CVE-2010-4015:CVSS v2 Base Score: 4.9). Additionally a possible log forging problem was fixed too. (CVE-2010-4014) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch postgresql-3971 - openSUSE 11.2: zypper in -t patch postgresql-3971 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 8.4.7]: postgresql-8.4.7-0.2.1 postgresql-contrib-8.4.7-0.2.1 postgresql-devel-8.4.7-0.2.1 postgresql-libs-8.4.7-0.2.1 postgresql-plperl-8.4.7-0.2.1 postgresql-plpython-8.4.7-0.2.1 postgresql-pltcl-8.4.7-0.2.1 postgresql-server-8.4.7-0.2.1 - openSUSE 11.3 (x86_64) [New Version: 8.4.7]: postgresql-libs-32bit-8.4.7-0.2.1 - openSUSE 11.3 (noarch) [New Version: 8.4.7]: postgresql-docs-8.4.7-0.2.1 - openSUSE 11.2 (i586 x86_64) [New Version: 8.4.7]: postgresql-8.4.7-0.2.1 postgresql-contrib-8.4.7-0.2.1 postgresql-devel-8.4.7-0.2.1 postgresql-docs-8.4.7-0.2.1 postgresql-libs-8.4.7-0.2.1 postgresql-plperl-8.4.7-0.2.1 postgresql-plpython-8.4.7-0.2.1 postgresql-pltcl-8.4.7-0.2.1 postgresql-server-8.4.7-0.2.1 - openSUSE 11.2 (x86_64) [New Version: 8.4.7]: postgresql-libs-32bit-8.4.7-0.2.1 References: http://support.novell.com/security/cve/CVE-2010-4014.html http://support.novell.com/security/cve/CVE-2010-4015.html https://bugzilla.novell.com/660478

1 0

openSUSE-RU-2011:0252-1 (moderate): gstreamer-0_10-plugins-good: Fix crashes during disconnects
by maintenance＠opensuse.org 31 Mar '11

31 Mar '11

openSUSE Recommended Update: gstreamer-0_10-plugins-good: Fix crashes during disconnects ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0252-1 Rating: moderate References: #673914 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Fixex Amarok (and possible other applications) crashes during disconnects or standbys while playing streams (bnc#673914) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gstreamer-0_10-plugin-hal-4214 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): gstreamer-0_10-plugin-hal-0.10.27-4.5.1 gstreamer-0_10-plugins-good-0.10.27-4.5.1 gstreamer-0_10-plugins-good-doc-0.10.27-4.5.1 gstreamer-0_10-plugins-good-extra-0.10.27-4.5.1 - openSUSE 11.4 (noarch): gstreamer-0_10-plugins-good-lang-0.10.27-4.5.1 References: https://bugzilla.novell.com/673914

1 0

openSUSE-RU-2011:0247-1 (moderate): virtualbox: This update fixes a missing permissions handling of VBoxNetDHCP
by maintenance＠opensuse.org 30 Mar '11

30 Mar '11

openSUSE Recommended Update: virtualbox: This update fixes a missing permissions handling of VBoxNetDHCP ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0247-1 Rating: moderate References: #679785 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a missing permissions handling of VBoxNetDHCP. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch python-virtualbox-4219 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): python-virtualbox-4.0.4-1.6.1 virtualbox-4.0.4-1.6.1 virtualbox-devel-4.0.4-1.6.1 virtualbox-guest-kmp-default-4.0.4_k2.6.37.1_1.2-1.6.1 virtualbox-guest-kmp-desktop-4.0.4_k2.6.37.1_1.2-1.6.1 virtualbox-guest-tools-4.0.4-1.6.1 virtualbox-guest-x11-4.0.4-1.6.1 virtualbox-host-kmp-default-4.0.4_k2.6.37.1_1.2-1.6.1 virtualbox-host-kmp-desktop-4.0.4_k2.6.37.1_1.2-1.6.1 virtualbox-qt-4.0.4-1.6.1 - openSUSE 11.4 (i586): virtualbox-guest-kmp-pae-4.0.4_k2.6.37.1_1.2-1.6.1 virtualbox-host-kmp-pae-4.0.4_k2.6.37.1_1.2-1.6.1 References: https://bugzilla.novell.com/679785

1 0

openSUSE-SU-2011:0242-1 (important): logwatch: security update
by opensuse-security＠opensuse.org 30 Mar '11

30 Mar '11

openSUSE Security Update: logwatch: security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0242-1 Rating: important References: #674984 Cross-References: CVE-2011-1018 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The update of logwatch improves the input validation. Before it was possible by an attacker to use special characters in a log-file to execute arbitrary commands. (CVSS v2 Base Score: 8.5 (AV:N/AC:M/Au:S/C:C/I:C/A:C)) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch logwatch-4029 - openSUSE 11.2: zypper in -t patch logwatch-4029 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch): logwatch-7.3.6-73.5.1 - openSUSE 11.2 (noarch): logwatch-7.3.6-67.67.1 References: http://support.novell.com/security/cve/CVE-2011-1018.html https://bugzilla.novell.com/674984

1 0