December 2007 - openSUSE Security Announce

[security-announce] SUSE Linux Desktop 1.0 has reached End of Life
by Marcus Meissner 24 Dec '07

24 Dec '07

Hi, With the release of the python/pcre bugfix/security fix update we have now released the last maintenance update for SUSE Linux Desktop 1.0. SUSE Linux Desktop 1.0 is now at its End Of Life, support is discontinued, and no more updates will be published. So lets take a look back at its history... SUSE Linux Desktop 1.0 was released end of May 2003, making its lifetime 4.5 years. SLD 1.0 was the first true enterprise desktop SUSE published, previously existed just a lesser known add-on called SUSE Linux Office Desktop. Currently the following SUSE Linux Enterprise Desktop products exist and are in maintenance (regular / extended maintenance): - Novell Linux Desktop 9 (until July 30th 2009/2011) - SUSE Linux Enterprise Desktop 10 (until July 31st 2011/2013) Some interesting things: - SLEC had a 50% package difference against UL1 core (411 additional source rpms, vs around 800 for UL1). NLD9 has around 17% (271:1570), SLED 10 has 0%. - SLEC had a seperate kernel branch and stayed at 2.4.19 while SLES 8 went to 2.4.21. Some bad things security wise: - We were not able to update RealPlayer to RealPlayer 9 to fix security issues because version 9 does not work with the old glibc version. (glibc 2.3 vs 2.2.5) - We had to stop updating Acrobat Reader to version 7 for the same reason. - We were unable to continue upgrading Mozilla to after the Mozilla 1.7.x release due to mismatching gtk2 and xft library requirements. Some statistics regarding our online updates: Total: 380 (240 active) Security: 324 (200 active) Recommended: 41 ( 34 active) Optional: 15 ( 6 active) Top issues: 21 kernel 12 ImageMagick 12 cups 9 samba 8 gpg 7 openssh 7 mozilla (would have scored higher, see notes) 7 heimdal 6 rsync 6 libpng 6 java2 6 gaim 5 XFree86-server 5 openssl 5 OpenOffice_org 5 MPlayer 5 mc 4 XFree86-libs 4 qt3 4 libtiff 4 koffice-wordprocessing 4 kdelibs3 4 acroread (would have scored higher, see notes) ... others below 4 ... Ciao, Marcus Meissner -- Working, but not speaking, for the following german company: SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)

1 0

[security-announce] SUSE Security Announcement: flash-player (SUSE-SA:2007:069)
by Ludwig Nussel 21 Dec '07

21 Dec '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Announcement Package: flash-player Announcement ID: SUSE-SA:2007:069 Date: Fri, 21 Dec 2007 15:00:00 +0000 Affected Products: SUSE LINUX 10.1 openSUSE 10.2 openSUSE 10.3 Novell Linux Desktop 9 SUSE Linux Enterprise Desktop 10 SP1 Vulnerability Type: remote code execution Severity (1-10): 7 SUSE Default Package: yes Cross-References: http://www.adobe.com/support/security/bulletins/apsb07-20.html CVE-2007-4324, CVE-2007-4768, CVE-2007-5275 CVE-2007-6242, CVE-2007-6243, CVE-2007-6244 CVE-2007-6245, CVE-2007-6246 Content of This Advisory: 1) Security Vulnerability Resolved: flash-player update fixes potential code execution Problem Description 2) Solution or Work-Around 3) Special Instructions and Notes 4) Package Location and Checksums 5) Pending Vulnerabilities, Solutions, and Work-Arounds: - See SUSE Security Summary Report 6) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Problem Description and Brief Discussion A flash player update to version 9.0.115.0 fixes several security problems. In the worst case an attacker could potentially have flash-player execute arbitrary code via specially crafted flash content. 2) Solution or Work-Around There is no known workaround, please install the update packages. 3) Special Instructions and Notes Since Adobe doesn't support browsers other than Firefox and Mozilla, this update doesn't work with other browsers such as Konqueror. Updates for konqueror are already in the works and will hopefully be available after the christmas holidays in January. 4) Package Location and Checksums The preferred method for installing security updates is to use the YaST Online Update (YOU) tool. YOU detects which updates are required and automatically performs the necessary steps to verify and install them. Alternatively, download the update packages for your distribution manually and verify their integrity by the methods listed in Section 6 of this announcement. Then install the packages using the command rpm -Fhv <file.rpm> to apply the update, replacing <file.rpm> with the filename of the downloaded RPM package. x86 Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/flash-player… 458f40bd9a8e92f6e023e76abead4314 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/flash-player-9.0.115.0-0.1… d633f8e0bbd9c409430a966904774ecc SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/flash-player-9.0.115.0-0.2… c3dda649b3d756ed3e2bacf157488355 Sources: openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/flash-player-9.0.115.0-0.1.… 8800a58c48768989b74fed31be4f633c SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/flash-player-9.0.115.0-0.2.… 1774fb28b6c550af16f738c4daa20a4e openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/flash-player-… ac9d87e16de02daa91202e16cb6fffc3 Our maintenance customers are notified individually. The packages are offered for installation from the maintenance web: Novell Linux Desktop 9 http://support.novell.com/techcenter/psdb/abac03d3ea3f90145ddbc82fdd20aebd.… SUSE Linux Enterprise Desktop 10 SP1 http://support.novell.com/techcenter/psdb/abac03d3ea3f90145ddbc82fdd20aebd.… ______________________________________________________________________________ 5) Pending Vulnerabilities, Solutions, and Work-Arounds: - See SUSE Security Summary Report ______________________________________________________________________________ 6) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify <file> replacing <file> with the name of the file where you saved the announcement. The output for a valid signature looks like: gpg: Signature made <DATE> using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team <security(a)suse.de>" where <DATE> is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and the integrity of a package needs to be verified to ensure that it has not been tampered with. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or RPM package: 1) Using the internal gpg signatures of the rpm package 2) MD5 checksums as provided in this announcement 1) The internal rpm package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig <file.rpm> to verify the signature of the package, replacing <file.rpm> with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from build(a)suse.de with the key ID 9C800ACA. This key is automatically imported into the RPM database (on RPMv4-based distributions) and the gpg key ring of 'root' during installation. You can also find it on the first installation CD and at the end of this announcement. 2) If you need an alternative means of verification, use the md5sum command to verify the authenticity of the packages. Execute the command md5sum <filename.rpm> after you downloaded the file from a SUSE FTP server or its mirrors. Then compare the resulting md5sum with the one that is listed in the SUSE security announcement. Because the announcement containing the checksums is cryptographically signed (by security(a)suse.de) the checksums show proof of the authenticity of the package if the signature of the announcement is valid. Note that the md5 sums published in the SUSE Security Announcements are valid for the respective packages only. Newer versions of these packages cannot be verified. - SUSE runs two security mailing lists to which any interested party may subscribe: opensuse-security(a)opensuse.org - General Linux and SUSE security discussion. All SUSE security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security+subscribe(a)opensuse.org>. opensuse-security-announce(a)opensuse.org - SUSE's announce-only mailing list. Only SUSE's security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security-announce+subscribe(a)opensuse.org>. ===================================================================== SUSE's security contact is <security(a)suse.com> or <security(a)suse.de>. The <security(a)suse.de> public key is listed below. ===================================================================== ______________________________________________________________________________ The information in this advisory may be distributed or reproduced, provided that the advisory is not modified in any way. In particular, the clear text signature should show proof of the authenticity of the text. SUSE Linux Products GmbH provides no warranties of any kind whatsoever with respect to the information contained in this security advisory. Type Bits/KeyID Date User ID pub 2048R/3D25D3D9 1999-03-06 SuSE Security Team <security(a)suse.de> pub 1024D/9C800ACA 2000-10-19 SuSE Package Signing Key <build(a)suse.de> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.2 (GNU/Linux) mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh 1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+ cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7 tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63 Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+ x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0 Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2 saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o L0oixF12CohGBBARAgAGBQI7HmHDAAoJEJ5A4xAACqukTlQAoI4QzP9yjPohY7OU F7J3eKBTzp25AJ42BmtSd3pvm5ldmognWF3Trhp+GYkAlQMFEDe3O8IWkDf+zvyS FQEBAfkD/3GG5UgJj18UhYmh1gfjIlDcPAeqMwSytEHDENmHC+vlZQ/p0mT9tPiW tp34io54mwr+bLPN8l6B5GJNkbGvH6M+mO7R8Lj4nHL6pyAv3PQr83WyLHcaX7It Klj371/4yzKV6qpz43SGRK4MacLo2rNZ/dNej7lwPCtzCcFYwqkiiEYEEBECAAYF AjoaQqQACgkQx1KqMrDf94ArewCfWnTUDG5gNYkmHG4bYL8fQcizyA4An2eVo/n+ 3J2KRWSOhpAMsnMxtPbBmQGiBDnu9IERBACT8Y35+2vv4MGVKiLEMOl9GdST6MCk YS3yEKeueNWc+z/0Kvff4JctBsgs47tjmiI9sl0eHjm3gTR8rItXMN6sJEUHWzDP +Y0PFPboMvKx0FXl/A0dM+HFrruCgBlWt6FA+okRySQiliuI5phwqkXefl9AhkwR 8xocQSVCFxcwvwCglVcOQliHu8jwRQHxlRE0tkwQQI0D+wfQwKdvhDplxHJ5nf7U 8c/yE/vdvpN6lF0tmFrKXBUX+K7u4ifrZlQvj/81M4INjtXreqDiJtr99Rs6xa0S cZqITuZC4CWxJa9GynBED3+D2t1V/f8l0smsuYoFOF7Ib49IkTdbtwAThlZp8bEh ELBeGaPdNCcmfZ66rKUdG5sRA/9ovnc1krSQF2+sqB9/o7w5/q2qiyzwOSTnkjtB UVKn4zLUOf6aeBAoV6NMCC3Kj9aZHfA+ND0ehPaVGJgjaVNFhPi4x0e7BULdvgOo AqajLfvkURHAeSsxXIoEmyW/xC1sBbDkDUIBSx5oej73XCZgnj/inphRqGpsb+1n KFvF+rQoU3VTRSBQYWNrYWdlIFNpZ25pbmcgS2V5IDxidWlsZEBzdXNlLmRlPohi BBMRAgAiBQJA2AY+AhsDBQkObd+9BAsHAwIDFQIDAxYCAQIeAQIXgAAKCRCoTtro nIAKypCfAJ9RuZ6ZSV7QW4pTgTIxQ+ABPp0sIwCffG9bCNnrETPlgOn+dGEkAWeg KL+IRgQQEQIABgUCOnBeUgAKCRCeQOMQAAqrpNzOAKCL512FZvv4VZx94TpbA9lx yoAejACeOO1HIbActAevk5MUBhNeLZa/qM2JARUDBRA6cGBvd7LmAD0l09kBATWn B/9An5vfiUUE1VQnt+T/EYklES3tXXaJJp9pHMa4fzFa8jPVtv5UBHGee3XoUNDV wM2OgSEISZxbzdXGnqIlcT08TzBUD9i579uifklLsnr35SJDZ6ram51/CWOnnaVh UzneOA9gTPSr+/fT3WeVnwJiQCQ30kNLWVXWATMnsnT486eAOlT6UNBPYQLpUprF 5Yryk23pQUPAgJENDEqeU6iIO9Ot1ZPtB0lniw+/xCi13D360o1tZDYOp0hHHJN3 D3EN8C1yPqZd5CvvznYvB6bWBIpWcRgdn2DUVMmpU661jwqGlRz1F84JG/xe4jGu zgpJt9IXSzyohEJB6XG5+D0BuQINBDnu9JIQCACEkdBN6Mxf5WvqDWkcMRy6wnrd 9DYJ8UUTmIT2iQf07tRUKJJ9v0JXfx2Z4d08IQSMNRaq4VgSe+PdYgIy0fbj23Vi a5/gO7fJEpD2hd2f+pMnOWvH2rOOIbeYfuhzAc6BQjAKtmgR0ERUTafTM9Wb6F13 CNZZNZfDqnFDP6L12w3z3F7FFXkz07Rs3AIto1ZfYZd4sCSpMr/0S5nLrHbIvGLp 271hhQBeRmmoGEKO2JRelGgUJ2CUzOdtwDIKT0LbCpvaP8PVnYF5IFoYJIWRHqlE t5ucTXstZy7vYjL6vTP4l5xs+LIOkNmPhqmfsgLzVo0UaLt80hOwc4NvDCOLAAMG B/9g+9V3ORzw4LvO1pwRYJqfDKUq/EJ0rNMMD4N8RLpZRhKHKJUm9nNHLbksnlZw rbSTM5LpC/U6sheLP+l0bLVoq0lmsCcUSyh+mY6PxWirLIWCn/IAZAGnXb6Zd6Tt IJlGG6pqUN8QxGJYQnonl0uTJKHJENbI9sWHQdcTtBMc34gorHFCo1Bcvpnc1LFL rWn7mfoGx6INQjf3HGQpMXAWuSBQhzkazY6vaWFpa8bBJ+gKbBuySWzNm3rFtT5H RKMWpO+M9bHp4d+puY0L1YwN1OMatcMMpcWnZpiWiR83oi32+xtWUY2U7Ae38mMa g8zFbpeqPQUsDv9V7CAJ1dbriEwEGBECAAwFAkDYBnoFCQ5t3+gACgkQqE7a6JyA CspnpgCfRbYwxT3iq+9l/PgNTUNTZOlof2oAn25y0eGi0371jap9kOV6uq71sUuO =ypVs - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4-svn0 (GNU/Linux) iQEVAwUBR2vNb3ey5gA9JdPZAQKXqgf/RbS2QXw761dNLIP5rFP/nqi4CojtIWg/ bFHI/ynU4E9+GUmDHwn1xQAW8nhSAbAh+fyHWpqh6jDhcqy2r2OEDuTNVDCK4NX0 J4E47NG9RxaHdxVpaql+LhkoRn2Y2IyQg2clkAs6JRtKwFzg6jFOslhTFTnODdgI /vFqp462yLdrW9W4tuP5QRC9L1UsJfL3NeOukopptM1Owy0OW9RmwtCTnXM5pbRU 2y2scO7Byc/buQe70xvLiTOK28rnDKalMrduWUmKZMCnW5zrWFDYdDNWLEbki0rr LpilkE9vihEwYDTcZuVBq9Yl3Fwj3ia59gxbXjIKEkaNIR8cz8jvzA== =QQ5I -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE Security Announcement: samba (SUSE-SA:2007:068)
by Thomas Biege 12 Dec '07

12 Dec '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Announcement Package: samba Announcement ID: SUSE-SA:2007:068 Date: Wed, 12 Dec 2007 09:00:00 +0000 Affected Products: SUSE LINUX 10.0 SUSE LINUX 10.1 openSUSE 10.2 openSUSE 10.3 UnitedLinux 1.0 SuSE Linux Enterprise Server 8 SuSE Linux Openexchange Server 4 SuSE Linux Desktop 1.0 SuSE Linux Standard Server 8 SuSE Linux School Server SUSE LINUX Retail Solution 8 SUSE SLES 9 Novell Linux Desktop 9 Open Enterprise Server Novell Linux POS 9 SUSE Linux Enterprise Desktop 10 SP1 SLE SDK 10 SP1 SUSE Linux Enterprise Server 10 SP1 Vulnerability Type: remote code execution Severity (1-10): 7 SUSE Default Package: no Cross-References: CVE-2007-6015 Content of This Advisory: 1) Security Vulnerability Resolved: buffer overflow fixed in send_mailslot() Problem Description 2) Solution or Work-Around 3) Special Instructions and Notes 4) Package Location and Checksums 5) Pending Vulnerabilities, Solutions, and Work-Arounds: none 6) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Problem Description and Brief Discussion The Samba suite is an open-source implementatin of the SMB protocol. This update of samba fixes a buffer overflow in function send_mailslot() that allows remote attackers to overwrite the stack with 0 (via memset(3)) by sending specially crafted SAMLOGON packets. This bug can only be triggered if option "domain logon" is enabled. 2) Solution or Work-Around Please install the update. 3) Special Instructions and Notes restart the samba daemon 4) Package Location and Checksums The preferred method for installing security updates is to use the YaST Online Update (YOU) tool. YOU detects which updates are required and automatically performs the necessary steps to verify and install them. Alternatively, download the update packages for your distribution manually and verify their integrity by the methods listed in Section 6 of this announcement. Then install the packages using the command rpm -Fhv <file.rpm> to apply the update, replacing <file.rpm> with the filename of the downloaded RPM package. x86 Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/cifs-mount-3… 0e5535e4f9c58befed9342a7ab1189ab http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/ldapsmb-1.34… 2a0a8ce1d69d105590e054cc301085e6 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libmsrpc-3.0… 9354979f15b5abef17072f0203745ddf http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libmsrpc-dev… 74629f5f4b761042b30d9336c97e5b6f http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libsmbclient… dbcbee4977b3beeb2a46e5b56003604c http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libsmbclient… 7a6c5f65bb9aed832cec9221e41f76ef http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libsmbsharem… f04c0399479ecc681daa1330a187009b http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libsmbsharem… 92f8de627f39372775c46cc588000e31 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-3.0.26… 1ee63cc24bb7862c3f80a492883a6e82 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-client… b7dcfa6d0918bb8b872901d14360824e http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-devel-… 4a4c54c5e1bdc81d1072d547de7568bf http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-krb-pr… 84c34910588e03462d122272b12abd22 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-python… c0da4925b38c010df8ea8cfbe22b17b8 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-vscan-… 68cdda40cb0ccd5bd66bc6d0c6a967b9 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-winbin… 93cdaa0a3be9f28b1f72606cd7b13dfe openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/cifs-mount-3.0.23d-19.12.i… afaa4c73ed2b630be1851db84b9c125d ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/ldapsmb-1.34b-27.10.i586.r… 7666f91e8d67dc1f8bee49e4cb0901eb ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/libmsrpc-3.0.23d-19.12.i58… 1601f1584035d7cb330067365af4acb4 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/libmsrpc-devel-3.0.23d-19.… b36d408ad52e39846e24c92546ff0517 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/libsmbclient-3.0.23d-19.12… 3997a33f24a9f6c7fa02e5d4747f134f ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/libsmbclient-devel-3.0.23d… 6e3587e997434f4dab0c3cd531cbcc98 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-3.0.23d-19.12.i586.r… b6b9ad383af96ca2cd910785db95048d ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-client-3.0.23d-19.12… b0d9d68df8b89a51a831d3cfa742ce71 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-krb-printing-3.0.23d… 37f8f48ac1843b8e97a7c987d7079e64 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-pdb-3.0.23d-19.12.i5… 9b6c38491f7468a6a7615d436898fa5b ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-python-3.0.23d-19.12… e4ab347d68622fc88ddc67a93d626eaf ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-vscan-0.3.6b-98.10.i… ce4f8adcdbf52a0d5dd7f935e69639af ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-winbind-3.0.23d-19.1… e955a157680e5b6247c18bc5034c82d1 SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/cifs-mount-3.0.22-13.38.i5… 2f05943a1460501e9ca60a4bd549da08 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/ldapsmb-1.34a-18.34.i586.r… cd3711d293c3fe75869ec5988cc67573 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/libmsrpc-3.0.22-13.38.i586… 686c003b70948a3be1fd08abfa1f3dcc ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/libmsrpc-devel-3.0.22-13.3… d1bcf481db15df72b33a08c3d7c3e5d9 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/libsmbclient-3.0.22-13.38.… 6b57bda44d4f6ab9bb8f461d822f5788 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/libsmbclient-devel-3.0.22-… 7b273fe131866037e60772b159b1c5b0 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-3.0.22-13.38.i586.rpm 845322afd91dddf6ac2dc8e0fbc39945 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-client-3.0.22-13.38.… 1c55254ce8e2deeae55b091bb8e94f87 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-pdb-3.0.22-13.38.i58… 7e2a2c98c8aca6585fe596e2a54eb88d ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-python-3.0.22-13.38.… 250037bcd87bc1bc224777c8e851228f ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-vscan-0.3.6b-42.67.i… b30796df04b4a725e8d84f3f67c59db1 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-winbind-3.0.22-13.38… 34acf5453bb5af282aef0ecd1f7abdb3 SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/cifs-mount-3.0.20b-3.… aa3510d45fee741cbc686ea61c80ec54 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/ldapsmb-1.33-6.19.i58… 350c28feca2c5df9aa60126d7e1bb307 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/libsmbclient-3.0.20b-… e3db796664063204bc235d770050dc55 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/libsmbclient-devel-3.… 2755f1fb5543a12616e6e5d63bd02fd9 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-3.0.20b-3.19.i5… 6aff05575f28129adc6854e9bbb19d2b ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-client-3.0.20b-… 5b46e739f2710e67832bf349b7d701de ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-doc-3.0.20b-3.1… f13a8777d576b78696f5093cc7ee29ff ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-pdb-3.0.20b-3.1… d3eab9eace2d9f4f4da161aeb1ad7a16 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-python-3.0.20b-… 720af50848e8fda98933c816a7ad556e ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-vscan-0.3.6b-4.… 36ef7b26083b51ade9b0faf74c916834 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-winbind-3.0.20b… 51f4572af72d962929017527b7d5efdd Platform Independent: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/noarch/samba-doc-… 39467dee7de97fbfe021ad192ef3d572 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/noarch/samba-doc-3.0.23d-19.9.n… a1b924be38bc5da02cf397271403fb15 SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/samba-doc-3.0.22-20.52.n… 5926d68856a69a339b6f9932ccd8b1fd Power PC Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/cifs-mount-3.… 0cd62968d1c4aa6d9211c3439a117a68 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/ldapsmb-1.34b… a6f9195f03ab26487b52f60fd78698ed http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libmsrpc-3.0.… 6a185e53ce56877e6ce11553820eabe7 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libmsrpc-deve… 9a34657070463217e9e9df9687143d60 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libsmbclient-… c5f7822d14047a6bcc5f9be210ef6e7b http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libsmbclient-… a3b16e3141481d5f1790324f03833d61 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libsmbsharemo… c42d71369f0149e83c55ebb7181588a3 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libsmbsharemo… 56bfac393c26f8ed185cf288c0ec3284 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-3.0.26a… 07d93ee1ba0f8ba800dd225d4b9f952a http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-client-… 2b3b282ca2d9a71ac62ab4419345016b http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-devel-3… 1f01b5a13517cc5ccf12528c8b50d68a http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-krb-pri… 05a65ebf61b618b1c4c4db4ab5f8ca33 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-python-… f3be951b3cfdc871ff36e592d498e4b3 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-vscan-0… 74292b93b66f7b2bbefb5187adfed6e4 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-winbind… 4b281ee450b53b2982e5183e35b2f5c9 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/cifs-mount-3.0.23d-19.12.pp… f2444c5e913e2d84a6cded6c5c794ee6 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/ldapsmb-1.34b-27.10.ppc.rpm 78c64dc20ebb8a3a6a175f15d504d92c ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/libmsrpc-3.0.23d-19.12.ppc.… db9db8c1ecfc417ec2f2720d42940d70 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/libmsrpc-devel-3.0.23d-19.1… 58a63d9a08dcd9a13129fd1f880fa1b6 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/libsmbclient-3.0.23d-19.12.… d64260ddfa5bc6b5e3c9c3c2447c8f0f ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/libsmbclient-devel-3.0.23d-… 5c7c53ccd7b10d89165bcbed29aded9e ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-3.0.23d-19.12.ppc.rpm eed181f7254fed5b96356607c6d03389 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-client-3.0.23d-19.12.… 026fba74fd7dceab4eab79eb8bef8d45 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-krb-printing-3.0.23d-… 36877bb2af6e0cc2acef236e242e5b52 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-pdb-3.0.23d-19.12.ppc… d28ad04339a82d79124ad9abedd2dcf6 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-python-3.0.23d-19.12.… f42c732902e8af6717129cc14a6a974f ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-vscan-0.3.6b-98.10.pp… 4ee6aa7c5a5dfb0fc0bf91c5ce170b18 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-winbind-3.0.23d-19.12… 98521632e3273836892abfc9a8850ec8 SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/cifs-mount-3.0.22-13.38.ppc… f0e56f33899d4868cd4ae6ac7d6eacab ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/ldapsmb-1.34a-18.34.ppc.rpm 481cabc078d52395d07a03afb9260a43 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/libmsrpc-3.0.22-13.38.ppc.r… f460869c64684d95096e1331586dacdb ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/libmsrpc-devel-3.0.22-13.38… acf03549cb101d7173c0412e12edad1d ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/libsmbclient-3.0.22-13.38.p… d53304f19b32f5b93a62e0efb69cb039 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/libsmbclient-devel-3.0.22-1… 205ac90f2737fd0d12bec7c21c718a49 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-3.0.22-13.38.ppc.rpm 88304fbd17ff4f68bff897f83a4eed71 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-client-3.0.22-13.38.p… e85c92e8e1069b727de46dc8dba21178 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-pdb-3.0.22-13.38.ppc.… 7310693b8985014d3c0e49be93108507 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-python-3.0.22-13.38.p… c54bf91f4bf84ee9087aa5f6631c849e ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-vscan-0.3.6b-42.67.pp… b0f48534514cbfbcccbcaef082c279ee ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-winbind-3.0.22-13.38.… 75c135d1bc2c0242ee467b1ff61da8e8 SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/cifs-mount-3.0.20b-3.1… 73b81b3856589b55b94fda3dc519f9ec ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/ldapsmb-1.33-6.19.ppc.… 69e4ba509db113d219bd6d6b4514d74f ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/libsmbclient-3.0.20b-3… 67be23ebf3c5690c69daa724c11ca546 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/libsmbclient-devel-3.0… 4ad9822904c9c1a730ea98ad94b6912c ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-3.0.20b-3.19.ppc… 132d85fe5bafdde591937e905ed1dfdf ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-client-3.0.20b-3… 28c59d931ef479e419382b1f1c1c10ca ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-doc-3.0.20b-3.19… 21b923582b3179d48eee80a6204a9f5d ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-pdb-3.0.20b-3.19… 68c41fccb41731ab0b82152c42503fb7 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-python-3.0.20b-3… 3317974bcf40ecd486874ed515dfbdaa ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-vscan-0.3.6b-4.1… bed5f00541dbf418ee2c266daa92c6a7 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-winbind-3.0.20b-… f378061ff72f1d7f2e2512d291575cb9 x86-64 Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/cifs-mount… af0f7a523a45b6db682fe22baa726478 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/ldapsmb-1.… c74da5b770b833e83c2de23763e19d9b http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libmsrpc-3… ba8a8c86b2abc2dd07638a14acf8a749 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libmsrpc-d… 8502b0e45b25df6153622a2ec680d2c6 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbclie… a2d40bf47101679f432acf277699ab1c http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbclie… e2261330c01aa2cd610c01c31a3e71b3 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbclie… 8ac32adf2af43277ad39df05885cf004 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbshar… 9c92b0ad6910b5a91801118fd53a3f14 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbshar… c6b097b4292fec495b59ba09354b12cf http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-3.0.… b55934f29d8a486d2abc3b2b4536e7d3 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-32bi… e67397a0cdcca4ffe33d458a078a71ab http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-clie… 216ec6be569f63742ecbf4a787e1824b http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-clie… 068f0ceb354a0f0741c1f1a743710dc0 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-deve… c138f629b99d53769e8f18581578991d http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-krb-… 3a001c4d1796128725e1ead04732ece1 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-pyth… d3cad141787e3e564d2bfd88823261e3 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-vsca… 3479f65df3061ec6fe2f4c5f5d3e4364 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-winb… b24df7dd9097e4c35385fa60d638aea2 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-winb… 08ca3c1773eccba6cebe600f0198bc57 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/cifs-mount-3.0.23d-19.12… 9081c59e9c88c537f7fecb4999070fa1 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/ldapsmb-1.34b-27.10.x86_… 5b5d5cc40f7b51b5473c2effec7a961d ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libmsrpc-3.0.23d-19.12.x… b5f5bbd929ccbfb4fdeef987f1a0a7f2 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libmsrpc-devel-3.0.23d-1… 3e0f3ac7cbcc182a66f99ce147812123 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libsmbclient-3.0.23d-19.… 64377e86d45de128b22af942cab575ea ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libsmbclient-32bit-3.0.2… 8e21116ddd67f748ba49b453e64f16af ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libsmbclient-devel-3.0.2… 36a4c1b65cfdd027a4726b85df6d7e75 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-3.0.23d-19.12.x86_… 6bd4864e67f9450d119029b8744289ad ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-32bit-3.0.23d-19.1… 514f048e68196dc85787ed84a209be48 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-client-3.0.23d-19.… cec9ba17ea0abb1962bcbc9b8791f72a ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-client-32bit-3.0.2… af7c9a1aed49df4020a7720f5f5721f0 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-krb-printing-3.0.2… 8d1faa3f69aeaaf9cc20d22c9dc369d9 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-pdb-3.0.23d-19.12.… 39e1bdfdcca7e49a911efb00f33717e7 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-python-3.0.23d-19.… e7ac921e2ed73fce7463b0dbb2b96461 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-vscan-0.3.6b-98.10… 106e3660b76b9499501a0e61b01059c8 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-winbind-3.0.23d-19… 43465347bf1d998eeb3e40c3b50995a6 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-winbind-32bit-3.0.… 44fa9cfafb953cdc2e183dc8d6937acb SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/cifs-mount-3.0.22-13.38.… f399c965065c9d15fa9eb6c25d75dfd0 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/ldapsmb-1.34a-18.34.x86_… 6ebe4219211e90da6771db9c5fa17e65 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libmsrpc-3.0.22-13.38.x8… d268f0edf1ec53bdfdcc9193dab34a1a ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libmsrpc-devel-3.0.22-13… a60678ede2d3c252b2dbc907585f9059 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libsmbclient-3.0.22-13.3… 5de55c73b1addb72fec37b90ee33b5ab ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libsmbclient-32bit-3.0.2… d5e9f4362f7b93a23a89509b5529fab7 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libsmbclient-devel-3.0.2… f0847fd830347f01686ff8ff10f01cfb ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-3.0.22-13.38.x86_6… b3b21034e364084d9a0437943b126007 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-32bit-3.0.22-13.38… c01154efe5c8703ba2eefb765ad92c8b ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-client-3.0.22-13.3… fe1c09a1bd074c5b5eafdffa6dbe8690 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-client-32bit-3.0.2… 754ec0cfbd5dc4f698c8d5d1ee6fac6b ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-pdb-3.0.22-13.38.x… c657a9008ec9c024efbb58938e922c73 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-python-3.0.22-13.3… 7b3a2dab4dcd936e9e9cc3165a9d5a9f ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-vscan-0.3.6b-42.67… e87a1a9191785d22210da556bd31da5f ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-winbind-3.0.22-13.… dff37b747c895070babb9638702a3750 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-winbind-32bit-3.0.… 827202c10aeeb251e2e40a0065abb0ab SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/cifs-mount-3.0.20b-… 2aad8134654b11f9fdfcb658ed8637a5 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/ldapsmb-1.33-6.19.x… 723e5b47831f247b8f5e37dca0a2bfdb ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/libsmbclient-3.0.20… 4a5a603903cb13158895e26baec491c5 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/libsmbclient-32bit-… 29814d08bf2348e753a19819df3beb14 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/libsmbclient-devel-… 4bb34360311fad4524d5167a025b145c ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-3.0.20b-3.19.… 99aaf715ae30f7774842f1eba35820f3 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-client-3.0.20… c2646918e6044d0052c36dab4ffd0e93 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-doc-3.0.20b-3… 93ffe07900ccd4c5d8e0cbacfc5e5403 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-pdb-3.0.20b-3… 5226a870eb989b475cc6a871cc024cf3 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-python-3.0.20… 73adc1b93d86c22df501076a9a41bb68 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-vscan-0.3.6b-… a0f2c6fbcb92acc477370ff5609e177c ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-winbind-3.0.2… 35e2801afd91d1fd4f1663c61aaa7fb4 Sources: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/samba-3.0.26a… 0c51e5e8c284b4a4d92e75c8e8eb8831 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/samba-doc-3.0… 482dcc2dfce7d00c253ace3465400e6e openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/samba-3.0.23d-19.12.src.rpm 6d6bcf35be28199114f4e43bba61f43b ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/samba-doc-3.0.23d-19.9.nosr… 4ed2b2447d2ef68f982e803270dc9b1b SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/samba-3.0.22-13.38.src.rpm 3319209b169a2f45f066ab8934148b88 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/samba-doc-3.0.22-20.52.nosr… bb2e30f3bbcd5181e0d6ad6b6868d225 SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/samba-3.0.20b-3.19.src… ae95f8c0dc92a4096ff84ab83c8753fd Our maintenance customers are notified individually. The packages are offered for installation from the maintenance web: UnitedLinux 1.0 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SuSE Linux Openexchange Server 4 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… Open Enterprise Server http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… Novell Linux POS 9 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… Novell Linux Desktop 9 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SuSE Linux Enterprise Server 8 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SuSE Linux Standard Server 8 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SuSE Linux School Server http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SUSE LINUX Retail Solution 8 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SuSE Linux Desktop 1.0 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SUSE Linux Enterprise Server 10 SP1 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SLE SDK 10 SP1 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SUSE Linux Enterprise Desktop 10 SP1 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SUSE SLES 9 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… ______________________________________________________________________________ 5) Pending Vulnerabilities, Solutions, and Work-Arounds: none ______________________________________________________________________________ 6) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify <file> replacing <file> with the name of the file where you saved the announcement. The output for a valid signature looks like: gpg: Signature made <DATE> using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team <security(a)suse.de>" where <DATE> is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and the integrity of a package needs to be verified to ensure that it has not been tampered with. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or RPM package: 1) Using the internal gpg signatures of the rpm package 2) MD5 checksums as provided in this announcement 1) The internal rpm package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig <file.rpm> to verify the signature of the package, replacing <file.rpm> with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from build(a)suse.de with the key ID 9C800ACA. This key is automatically imported into the RPM database (on RPMv4-based distributions) and the gpg key ring of 'root' during installation. You can also find it on the first installation CD and at the end of this announcement. 2) If you need an alternative means of verification, use the md5sum command to verify the authenticity of the packages. Execute the command md5sum <filename.rpm> after you downloaded the file from a SUSE FTP server or its mirrors. Then compare the resulting md5sum with the one that is listed in the SUSE security announcement. Because the announcement containing the checksums is cryptographically signed (by security(a)suse.de) the checksums show proof of the authenticity of the package if the signature of the announcement is valid. Note that the md5 sums published in the SUSE Security Announcements are valid for the respective packages only. Newer versions of these packages cannot be verified. - SUSE runs two security mailing lists to which any interested party may subscribe: opensuse-security(a)opensuse.org - General Linux and SUSE security discussion. All SUSE security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security+subscribe(a)opensuse.org>. opensuse-security-announce(a)opensuse.org - SUSE's announce-only mailing list. Only SUSE's security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security-announce+subscribe(a)opensuse.org>. ===================================================================== SUSE's security contact is <security(a)suse.com> or <security(a)suse.de>. The <security(a)suse.de> public key is listed below. ===================================================================== ______________________________________________________________________________ The information in this advisory may be distributed or reproduced, provided that the advisory is not modified in any way. In particular, the clear text signature should show proof of the authenticity of the text. SUSE Linux Products GmbH provides no warranties of any kind whatsoever with respect to the information contained in this security advisory. Type Bits/KeyID Date User ID pub 2048R/3D25D3D9 1999-03-06 SuSE Security Team <security(a)suse.de> pub 1024D/9C800ACA 2000-10-19 SuSE Package Signing Key <build(a)suse.de> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.2 (GNU/Linux) mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh 1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+ cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7 tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63 Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+ x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0 Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2 saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o L0oixF12CohGBBARAgAGBQI7HmHDAAoJEJ5A4xAACqukTlQAoI4QzP9yjPohY7OU F7J3eKBTzp25AJ42BmtSd3pvm5ldmognWF3Trhp+GYkAlQMFEDe3O8IWkDf+zvyS FQEBAfkD/3GG5UgJj18UhYmh1gfjIlDcPAeqMwSytEHDENmHC+vlZQ/p0mT9tPiW tp34io54mwr+bLPN8l6B5GJNkbGvH6M+mO7R8Lj4nHL6pyAv3PQr83WyLHcaX7It Klj371/4yzKV6qpz43SGRK4MacLo2rNZ/dNej7lwPCtzCcFYwqkiiEYEEBECAAYF AjoaQqQACgkQx1KqMrDf94ArewCfWnTUDG5gNYkmHG4bYL8fQcizyA4An2eVo/n+ 3J2KRWSOhpAMsnMxtPbBmQGiBDnu9IERBACT8Y35+2vv4MGVKiLEMOl9GdST6MCk YS3yEKeueNWc+z/0Kvff4JctBsgs47tjmiI9sl0eHjm3gTR8rItXMN6sJEUHWzDP +Y0PFPboMvKx0FXl/A0dM+HFrruCgBlWt6FA+okRySQiliuI5phwqkXefl9AhkwR 8xocQSVCFxcwvwCglVcOQliHu8jwRQHxlRE0tkwQQI0D+wfQwKdvhDplxHJ5nf7U 8c/yE/vdvpN6lF0tmFrKXBUX+K7u4ifrZlQvj/81M4INjtXreqDiJtr99Rs6xa0S cZqITuZC4CWxJa9GynBED3+D2t1V/f8l0smsuYoFOF7Ib49IkTdbtwAThlZp8bEh ELBeGaPdNCcmfZ66rKUdG5sRA/9ovnc1krSQF2+sqB9/o7w5/q2qiyzwOSTnkjtB UVKn4zLUOf6aeBAoV6NMCC3Kj9aZHfA+ND0ehPaVGJgjaVNFhPi4x0e7BULdvgOo AqajLfvkURHAeSsxXIoEmyW/xC1sBbDkDUIBSx5oej73XCZgnj/inphRqGpsb+1n KFvF+rQoU3VTRSBQYWNrYWdlIFNpZ25pbmcgS2V5IDxidWlsZEBzdXNlLmRlPohi BBMRAgAiBQJA2AY+AhsDBQkObd+9BAsHAwIDFQIDAxYCAQIeAQIXgAAKCRCoTtro nIAKypCfAJ9RuZ6ZSV7QW4pTgTIxQ+ABPp0sIwCffG9bCNnrETPlgOn+dGEkAWeg KL+IRgQQEQIABgUCOnBeUgAKCRCeQOMQAAqrpNzOAKCL512FZvv4VZx94TpbA9lx yoAejACeOO1HIbActAevk5MUBhNeLZa/qM2JARUDBRA6cGBvd7LmAD0l09kBATWn B/9An5vfiUUE1VQnt+T/EYklES3tXXaJJp9pHMa4fzFa8jPVtv5UBHGee3XoUNDV wM2OgSEISZxbzdXGnqIlcT08TzBUD9i579uifklLsnr35SJDZ6ram51/CWOnnaVh UzneOA9gTPSr+/fT3WeVnwJiQCQ30kNLWVXWATMnsnT486eAOlT6UNBPYQLpUprF 5Yryk23pQUPAgJENDEqeU6iIO9Ot1ZPtB0lniw+/xCi13D360o1tZDYOp0hHHJN3 D3EN8C1yPqZd5CvvznYvB6bWBIpWcRgdn2DUVMmpU661jwqGlRz1F84JG/xe4jGu zgpJt9IXSzyohEJB6XG5+D0BuQINBDnu9JIQCACEkdBN6Mxf5WvqDWkcMRy6wnrd 9DYJ8UUTmIT2iQf07tRUKJJ9v0JXfx2Z4d08IQSMNRaq4VgSe+PdYgIy0fbj23Vi a5/gO7fJEpD2hd2f+pMnOWvH2rOOIbeYfuhzAc6BQjAKtmgR0ERUTafTM9Wb6F13 CNZZNZfDqnFDP6L12w3z3F7FFXkz07Rs3AIto1ZfYZd4sCSpMr/0S5nLrHbIvGLp 271hhQBeRmmoGEKO2JRelGgUJ2CUzOdtwDIKT0LbCpvaP8PVnYF5IFoYJIWRHqlE t5ucTXstZy7vYjL6vTP4l5xs+LIOkNmPhqmfsgLzVo0UaLt80hOwc4NvDCOLAAMG B/9g+9V3ORzw4LvO1pwRYJqfDKUq/EJ0rNMMD4N8RLpZRhKHKJUm9nNHLbksnlZw rbSTM5LpC/U6sheLP+l0bLVoq0lmsCcUSyh+mY6PxWirLIWCn/IAZAGnXb6Zd6Tt IJlGG6pqUN8QxGJYQnonl0uTJKHJENbI9sWHQdcTtBMc34gorHFCo1Bcvpnc1LFL rWn7mfoGx6INQjf3HGQpMXAWuSBQhzkazY6vaWFpa8bBJ+gKbBuySWzNm3rFtT5H RKMWpO+M9bHp4d+puY0L1YwN1OMatcMMpcWnZpiWiR83oi32+xtWUY2U7Ae38mMa g8zFbpeqPQUsDv9V7CAJ1dbriEwEGBECAAwFAkDYBnoFCQ5t3+gACgkQqE7a6JyA CspnpgCfRbYwxT3iq+9l/PgNTUNTZOlof2oAn25y0eGi0371jap9kOV6uq71sUuO =ypVs - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iQEVAwUBR1+gi3ey5gA9JdPZAQKKAQf/QXi2ziQFAuIA34rMp+FNIen6YZ2drup3 hJzkzUInNQEFN6Ghnf/pcThTQnoc/QknxR8kOdNIInf0UgjqJOyGTqzJJxgKE0Ie +nlU1uEelS2UfeiIoa4vFRW8e1AeIcbKAjStA1fhAEfbm+DP4pxuJbZ2cvTVNoU8 7GeppMsPfHXk9tJM17rg16pdImWPLElAGA9183ir6Nuj31RsIzE7cmHpFKnSKLX4 jWv2B29hMmqejliuvH2sv+rlOgQOhwk1fS9QyZt+TVitLJhEAEag46Y1vHlb2qnK tGsMsUvj7i7JZCMfXEsB1cV6O3YFVcMSo1Bvdta4MdzFaHnuuif+GA== =NwjI -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE Security Announcement: OpenOffice_org (SUSE-SA:2007:067)
by Marcus Meissner 11 Dec '07

11 Dec '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Announcement Package: OpenOffice_org Announcement ID: SUSE-SA:2007:067 Date: Tue, 11 Dec 2007 12:00:00 +0000 Affected Products: SUSE LINUX 10.0 SUSE LINUX 10.1 openSUSE 10.2 openSUSE 10.3 SUSE Linux Enterprise Desktop 10 SP1 SLE SDK 10 SP1 Vulnerability Type: remote code execution Severity (1-10): 6 SUSE Default Package: yes Cross-References: CVE-2007-4575 Content of This Advisory: 1) Security Vulnerability Resolved: OpenOffice_org security problem Problem Description 2) Solution or Work-Around 3) Special Instructions and Notes 4) Package Location and Checksums 5) Pending Vulnerabilities, Solutions, and Work-Arounds: See SUSE Security Summary Report. 6) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Problem Description and Brief Discussion OpenOffice_org was updated to add restrictions to SQL statements of Java-based databases to avoid the execution of native Java code by creating procedures. (CVE-2007-4575) OpenOffice_org packages for SUSE Linux Enterprise Desktop 10 and openSUSE 10.3 were released last Thursday, packages for SUSE Linux 10.0, 10.1 and openSUSE 10.2 were released just today due to some build issues. 2) Solution or Work-Around There is no known workaround, please install the update packages. 3) Special Instructions and Notes Please close and restart all running instances of OpenOffice after the update. 4) Package Location and Checksums The preferred method for installing security updates is to use the YaST Online Update (YOU) tool. YOU detects which updates are required and automatically performs the necessary steps to verify and install them. Alternatively, download the update packages for your distribution manually and verify their integrity by the methods listed in Section 6 of this announcement. Then install the packages using the command rpm -Fhv <file.rpm> to apply the update, replacing <file.rpm> with the filename of the downloaded RPM package. x86 Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/OpenOffice_o… 5cefa43e2d6785724a97e962ee77a03e http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/OpenOffice_o… 269a52cf3e087dda21464092b13ffbb0 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/OpenOffice_o… acbb79b45ad968adf5cf3764942b70db http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/OpenOffice_o… fc2ab87f5e750b5bf4587bd264f34979 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/OpenOffice_o… 9d28ae4d511bd01ff14513c93aa4a65e http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/OpenOffice_o… 794f8079b26f29df7976f38923b5d51d http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/OpenOffice_o… a2c6c52d3f2fe90ca25ad9a3966434a5 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/OpenOffice_o… e46fd864fdae8fe220550531515509e7 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/OpenOffice_o… 081b124496d7de3f30ed911c5a1e157c http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/OpenOffice_o… d4c9bd300079d79b5a6d78e37dcdeaef http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/OpenOffice_o… de341c012caa105831afdef16b7dd75e http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/OpenOffice_o… 4f141374f9f24b55550b117e34045084 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/OpenOffice_o… f0b5a7fe4d23d0ccc6837a15d1b46a43 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/OpenOffice_o… 04b070bfea2d6ddbf3e358a395a7149f http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/OpenOffice_o… fada2fbf8fa70a07b786537a53dd2b17 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/OpenOffice_o… 46e8b54bd087ba163428b4b1eb61a938 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/OpenOffice_o… f286d6f1fe2d46ad68f24d9c52ff0830 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/OpenOffice_o… ac3921f3bb3ab401395b03c314006d3d openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-2.0.4-38.9.… 088b0a4fe9befe47350f3291331743c6 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-af-2.0.4-38… 1f44e4d2f4c9409400b8281ffba74412 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-ar-2.0.4-38… ed8920195748329c6a6e411190d11cf1 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-be-BY-2.0.4… 710d159e75ad151db51897b021c58129 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-bg-2.0.4-38… 72c572a12e2e3a61ad42d4cb31d3f461 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-ca-2.0.4-38… f23b5ece3c64892524a67bc4fc5e9ebe ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-cs-2.0.4-38… c23b94daf39f34f36ec6fb8d1f69f4bf ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-cy-2.0.4-38… 613b4c7c66ebbf1489d7a15deba21e6b ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-da-2.0.4-38… b289cf91ba164c522e6e9ea769705aea ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-de-2.0.4-38… 2b4d81a577bdb29780764e37f1e26484 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-el-2.0.4-38… acb4ffcc379e9ae622df216f6a2b918d ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-en-GB-2.0.4… 8950b175781e30057eea9a44a63fbc64 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-es-2.0.4-38… 9bfc82fb3728c91203dd073d9e4cc17b ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-et-2.0.4-38… 0b38e044091f022e17b8a8660681afe4 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-fi-2.0.4-38… e7b93c9dc7f6c95505ba956e030671a8 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-fr-2.0.4-38… 864c668f54e155b457a4d7f87c1d8a3d ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-galleries-2… 1f8c7d35599f6ed65ebf22e5e146fbf6 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-gnome-2.0.4… c18ba920fcd68b16306566bb8f099f49 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-gu-IN-2.0.4… cdd5175d54a4f5b167ce3c765d765680 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-hi-IN-2.0.4… cc9769c1a4b0262f237e28995f39ef83 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-hr-2.0.4-38… fa20630960c8356db6e582298a7fa036 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-hu-2.0.4-38… 71bd77f404b0d37fbb0e8be91648783a ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-it-2.0.4-38… a79f2346c0a0c5b53f4e6170f2742028 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-ja-2.0.4-38… da0e0f2cb6a7f5570b9ad353cb187bce ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-kde-2.0.4-3… c32b5a99d5c06bfd247ed0984a05312e ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-km-2.0.4-38… b37ab1e3babb7f242043ce0de11cce39 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-ko-2.0.4-38… 4deb06eccfb55b34745348f4bee4c604 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-lt-2.0.4-38… cf964b450db8ecd0b8dafbce531cdf8a ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-mk-2.0.4-38… a2f067c3095bd6d9015b86a52b44e5ab ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-mono-2.0.4-… d0fa2ce2e8d2516ff217488d083fed19 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-nb-2.0.4-38… 9a73f5a2cc0f1c35b3fb8bd55e1f95ee ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-nl-2.0.4-38… a5847fa7c30863e53d5366a346a26182 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-nn-2.0.4-38… 7749ee86cba7564e0bb259ac37190369 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-officebean-… 5b7b9771264f98e9c4ef50c0027e0b03 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-pa-IN-2.0.4… 70064fbdd6a1a2b02364951d39a7aa65 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-pl-2.0.4-38… 2e9f048d4075b208faf41308c52deff8 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-pt-2.0.4-38… aa5385087a581cf5ad1998e06834e35d ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-pt-BR-2.0.4… 4d8086ee2ca97357c2ba77181d3737bf ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-ru-2.0.4-38… 4d953db94b69b92c808e42fc7dc44b37 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-rw-2.0.4-38… 5d8429db9997379b1f4dae91bb631365 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-sdk-2.0.4-3… 55997697dbbe18590ca2772279b7dc1e ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-sdk-doc-2.0… 041702d97de67ebe9fb5cf44429946d5 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-sk-2.0.4-38… 93993a702c52490502e4469f20b1b6ec ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-sl-2.0.4-38… 981d49c4c2709b44800a84d0555f6a3e ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-sr-CS-2.0.4… 6f811871f9d411e8c722906e02aa431f ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-st-2.0.4-38… e127dff3723abcc07e96bba5c4c9cbce ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-sv-2.0.4-38… 9fb2b61ad0391b89e5cddc39d6fb6eb5 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-tr-2.0.4-38… 308eccf86f97a1341f55e922f26b5596 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-ts-2.0.4-38… 08a9017964925e63552ee86cf1bb41d9 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-vi-2.0.4-38… 28c21e9f2654a97562c510aec37bbbf7 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-xh-2.0.4-38… 6171108fba518e468dd6736c3ecb974c ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-zh-CN-2.0.4… 754dc3061b35e2614b0e1a5e8628bdbd ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-zh-TW-2.0.4… 672c74de649db19160d8dc7ee50ed595 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/OpenOffice_org-zu-2.0.4-38… d0ee6d4fb4bc6c2f217bcf4039d30619 SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-2.0.4-38.7.… 8aa1dd95b7e472887af94e49dcba7faa ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-af-2.0.4-38… f18d98ae0544fabb783764ef60ade932 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-ar-2.0.4-38… ecff945139e547e49ff0fc549cf6e289 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-be-BY-2.0.4… 2a431dc05980602f2eb389b39479c597 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-bg-2.0.4-38… 6d2af7a4777fc5f17621a5f6e8a79249 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-ca-2.0.4-38… 84a7ef0774d727f4e7890319c58be4f1 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-cs-2.0.4-38… 27f6e555b5a21974ffc0e8125a7667c7 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-cy-2.0.4-38… 9f26064febc047713a4015af2e960fa7 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-da-2.0.4-38… f1cb9f473a516118fc9b1865c90b2d26 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-de-2.0.4-38… 1e02c7e23614b389226af8c454e97012 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-el-2.0.4-38… 98aaf0494ef30de6bfe67dea64914ff1 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-en-GB-2.0.4… eb50ad8d8da70c00cff190c9d351c741 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-es-2.0.4-38… ad04fd0ff7909199d980954e89987fed ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-et-2.0.4-38… 464adc254b5f9146f44962053a670c3f ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-fi-2.0.4-38… 6d32f21d9b344557eea8410db68b4e76 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-fr-2.0.4-38… 17fcdeb1d85bb0e3ca4e2b343d9e3733 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-galleries-2… 6f0c0a795d6da37328f381e5b65de5a3 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-gnome-2.0.4… 7554cc6548c808770eeb3d9fc9cd72ad ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-gu-IN-2.0.4… 7ae9690e83c6f1773b8609ad3576b78e ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-hi-IN-2.0.4… 7472f5d6262bde16f7913325d2d5c084 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-hr-2.0.4-38… a64fc39b100dea7414ac7e7996c58c44 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-hu-2.0.4-38… db68986dd277c06e2c93ae63376108b8 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-it-2.0.4-38… 8c9d17fc8818b3e36aad1eccd43f4f09 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-ja-2.0.4-38… b15ba377cd07960be5d205af96c5b5e4 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-kde-2.0.4-3… 7a079e570d574ed118b5690e30066477 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-km-2.0.4-38… e6de97d8b47b0488b8add4c16a280bcb ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-ko-2.0.4-38… c5cb890f3475e42469f669540212ae32 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-lt-2.0.4-38… f66db28df38848442558bd2f7ebadf26 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-mk-2.0.4-38… ebb06ef0c6c183d047291247aaf15461 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-mono-2.0.4-… e1597114c772ddb2fefee4bc89403486 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-nb-2.0.4-38… 73a214beef0ebe7a0a9d97fdc330e67d ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-nl-2.0.4-38… 1934da3bde6f8999ecdf289b99d4c54d ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-nn-2.0.4-38… e7218e945fc8cdb2540415dc21deeeda ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-officebean-… 27a14ea4146b36feb8cb8d47188c4191 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-pa-IN-2.0.4… 38a33421a04b05c00c1b0757067d7ffd ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-pl-2.0.4-38… 5c5c43ff5277a0ea6e947e0c0094405b ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-pt-2.0.4-38… 22c8fcbdbc6f637ad6e1e203558823b4 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-pt-BR-2.0.4… de77fe9d86c2563f44b629cbf255657c ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-ru-2.0.4-38… 6d3d9ebe5eaec65fc31803b14ba8da8b ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-rw-2.0.4-38… 2e90aff8d0f95e82f9cd9598dc5d1f98 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-sk-2.0.4-38… 389001b766004bae6fb0dfd148281672 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-sl-2.0.4-38… 30a1fbc49d0a8843253b15d27052aaa0 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-sr-CS-2.0.4… 32aa99c7aaa0500e485b79a81b461123 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-st-2.0.4-38… 2f0ed766c8a254af2344de1794a8fe82 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-sv-2.0.4-38… 22238457de76c38b19b6452679b69b71 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-tr-2.0.4-38… ba54db9490d627a569af180ebda57300 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-ts-2.0.4-38… cc4cad6deb1db4f08d1ee71a0eddd0dc ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-vi-2.0.4-38… 8ef9e57dfe2b599d3684dc8b35fb3b88 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-xh-2.0.4-38… 5b50a756c381ae913539b29f3615d3e3 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-zh-CN-2.0.4… 801c33375fc1a2cdc61898de88749b0b ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-zh-TW-2.0.4… e306b101f0d441a513514ff2e987ce5a ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/OpenOffice_org-zu-2.0.4-38… 9306752b47aeb8b573ae75cb99bb3509 SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-2.0.0-… 2e3c8e3a782c6c2844cbee6fb1def988 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-af-2.0… a6ae80f1d6daa1925428a6cbaf4c1f5c ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-ar-2.0… fb1fc2bf0ffc2adc936f470e67f61c32 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-be-BY-… 09c8b14a0d37969f7b1e161d47fca870 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-bg-2.0… 99061de80a3c4bebcb59170046b4ee7c ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-ca-2.0… 995b02c466b2575634814e057e68e710 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-cs-2.0… a55d8c0890f93fef5b16bf19f21eff6c ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-cy-2.0… 9fab0fc5ad69e6512a5da8433200c473 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-da-2.0… c9b28a425d1bdea5fbf1878d7cd7261a ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-de-2.0… 2392fdf202d885ac156f3cae8a9dee47 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-el-2.0… 52130e45333f7c91279f08aff3ba9b8d ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-en-GB-… 1affcaba2f57a4ad69f89a909a586cff ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-es-2.0… f0329bbe24d50ae316300ef89a56ba77 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-et-2.0… eb65264381e7b41154dea25d29f6d1d7 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-fi-2.0… 8f6f7edb8c8e703bdba5266cba547340 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-fr-2.0… 97d1f9f4e56649c9c18644923936b218 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-galler… 53674573be95580e7d130d06ecf631ce ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-gnome-… 84a81841d82ef1fcde992286069e0cb4 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-gu-IN-… c3259511449d9440186a1b94ecfc15d9 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-hr-2.0… dbe565f5036dd3ac85daccd9f449f334 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-hu-2.0… 0b05350e06ca73956da65ffaac039abf ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-hunspe… a9ae7b5a702acd6f6aa0c1b66c9ccd06 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-it-2.0… a47ca0f36d25064c234c0050b6b804da ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-ja-2.0… 93042cc434ed127a612aa8d8792a309d ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-kde-2.… fe5f0eb3682ec799632587ea1250306b ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-ko-2.0… 7c0d087f5530c85d2993dce30705116d ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-mono-2… 591f4096d4124c2b4a47c3bb41eac3ca ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-nb-2.0… af7e8a63da53f07082f1cc9853646327 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-nl-2.0… 5a6eee95cb05a10274afe8c635629116 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-nn-2.0… 1b2b61fe02586f55bd5c77b76241f643 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-office… 49023cc3cb7cbca73639570e060f2698 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-pa-IN-… b89b9b2be4606547faeb08aa80e38f79 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-pl-2.0… 7eb3c97181679db8d314bb473df09f47 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-pt-2.0… 06cbe3ac048ed901403c5a6d5aa18535 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-pt-BR-… 2e2eac0b115d19a61aefb53ae98d952f ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-ru-2.0… 0201df64e2b92fb862adefee12e5eebf ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-sk-2.0… 97989696bd615f40e6cc3c895e9f3eaa ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-sl-2.0… 487d07d8ed536736328117954f461fa6 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-sv-2.0… 8f2f373946513786ef2274cdda554ae4 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-tr-2.0… eeabe9e008a1149d161aa7b068ef541b ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-vi-2.0… 83bf9bf54c23c80bc8c5030249b8c35e ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-xh-2.0… 992b6d7a6f8629f6f067a756351b189b ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-zh-CN-… 86f0f5cc002f3af1d53d0919438d940d ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-zh-TW-… 52444b06893b618130f5b452a5c75016 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/OpenOffice_org-zu-2.0… 7bc08e6d7e393cb22f110d714bc65d2f Power PC Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/OpenOffice_or… 68ecc4eec17b19c2770a067c429ed1a8 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/OpenOffice_or… fc1dce415bf9026265a2e461465a1e9d http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/OpenOffice_or… 27d227ea9ae69c3a131550468eebb806 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/OpenOffice_or… 25f9e5c5b6df9505bc0b58d4d530478a http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/OpenOffice_or… e1649a02d4789576f49b3e7ecfa751d1 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/OpenOffice_or… 7aa5661a4573827dd3ad0455bf2b1bda http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/OpenOffice_or… b5ba9c09270a19f6e0652849573076e8 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/OpenOffice_or… 5902455254a5b5da96e242e3d36530a1 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/OpenOffice_or… a68b6bfc3833696daaa276f3124e5baf http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/OpenOffice_or… 00337f5748b1244653e1a39d9945f445 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/OpenOffice_or… 7826c8f582eb2837ad559f49c291890d http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/OpenOffice_or… 76e08219e371596d1ed89efb2f165750 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/OpenOffice_or… add6f8885208426e2bdca5f18da3fb2a http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/OpenOffice_or… 4ae157705448a3916ba8504a60a6d9c9 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/OpenOffice_or… 6b7174da1665a19f71f58e4878f39f95 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/OpenOffice_or… 3c50b972049e43a765ce43b0a6c2f2dc http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/OpenOffice_or… fa703a74922c1e335400118b6d52f6fd http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/OpenOffice_or… e0fbadb8ad31923fe5ff29df4c435b0b openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-2.0.4-38.10.… a4b2a098193e447e5987f0083b4c0787 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-af-2.0.4-38.… 6b515611e56c567af2070ee01337c350 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-ar-2.0.4-38.… ce8d0f4a42a45c2d7400a6b5936db89c ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-be-BY-2.0.4-… 1dd42ee81f066870ad0ad62410fe31d1 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-bg-2.0.4-38.… f104f7308873d5d2e46fd36bee2bbac5 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-ca-2.0.4-38.… 3198d91f2e5fb156e33df4401a65d401 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-cs-2.0.4-38.… f1c0bea7755df8f8f6590e17b24019b4 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-cy-2.0.4-38.… a8c775d0a5b85fa22fc18a2cc3052241 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-da-2.0.4-38.… 834a32d628d6934dd6c6d562217e9f39 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-de-2.0.4-38.… aff58b0385308af352a459fff375404f ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-el-2.0.4-38.… fe530b53db5affca97e32a40644752bb ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-en-GB-2.0.4-… 6c26f91ca08b02ef3c27ab863d17bd2a ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-es-2.0.4-38.… d30d41ad47f1f1bb4ad1b6c08ed5dfc1 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-et-2.0.4-38.… 3ca1f837d610effeb4bbc18695192bc4 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-fi-2.0.4-38.… 3f884ed1d1b0463abf4774319aebdde4 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-fr-2.0.4-38.… b57502d7786e0673e2927c3b1272965b ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-galleries-2.… a86e76f1ee7e4709d81594287dbfcd81 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-gnome-2.0.4-… 7b3ff9dadbdca998bfefd2a2601118a0 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-gu-IN-2.0.4-… 21e352c5592977c1c1763fa60d0b80b4 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-hi-IN-2.0.4-… 85b07432a43523a2a40fa0e9217c6446 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-hr-2.0.4-38.… e6fb7b929ee3ec9b93fe4b2f034d8e70 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-hu-2.0.4-38.… 9fd4004dba722057ac157e34f16ae465 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-it-2.0.4-38.… b30676ce0c096a33b2064519d88f4b7a ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-ja-2.0.4-38.… bc05c3f7fa097d541527c017526f1fd7 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-kde-2.0.4-38… bdf84ad0482765fd7220990df2dca29b ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-km-2.0.4-38.… 7881ce3da5ba07b06a07ec740eb9c0c1 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-ko-2.0.4-38.… 9d5dcc6b541d437b7769de3ce550810e ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-lt-2.0.4-38.… 40ee175d355e693dae891fcb4d3de08c ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-mk-2.0.4-38.… f393c31cb342e559c77d4032d6049473 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-mono-2.0.4-3… d7d1f8a1449fe3d6abbc8f6b60065336 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-nb-2.0.4-38.… b0e39e1e19ac88213ca2e41f5660392d ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-nl-2.0.4-38.… f76bd720292b6376786efd1b26644f33 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-nn-2.0.4-38.… eaf95a3572dce94f9c6fa8fd4ba5bb91 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-officebean-2… da873abf5c2fe77612b0fa09c71b0a10 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-pa-IN-2.0.4-… 234f840185b15ae2d576169701ccaa82 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-pl-2.0.4-38.… 9d95fec0c263b6987fcb76f61f5e099f ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-pt-2.0.4-38.… 1589121ea175c7e019aaa723463d1e21 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-pt-BR-2.0.4-… cfed17558ca721aaced8761a4f3e3785 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-ru-2.0.4-38.… 2df104e349f72498471c680623bb4fb9 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-rw-2.0.4-38.… 7609d87286d69d62ed76da67e9433cbe ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-sdk-2.0.4-38… 3b308d33c4f0a9a5007532b424d70fb1 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-sdk-doc-2.0.… 02505502e7972e053e50c010d7255639 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-sk-2.0.4-38.… 535f091349d84c8ea115f0f4ceaca1d0 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-sl-2.0.4-38.… 629457c907f36d473982b841e7d50dcc ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-sr-CS-2.0.4-… 2ef84f568fca80d88c86dbd9f324d4a7 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-st-2.0.4-38.… 2d1161f85254cd9798ce51a2b12d524b ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-sv-2.0.4-38.… a04e9f9bfc017b93253054ead350f6b9 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-tr-2.0.4-38.… 4c00bd7e2d4d63ec6e08ff1480c1ea4a ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-ts-2.0.4-38.… 20223292120c9dd46f8b75c609f66c6f ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-vi-2.0.4-38.… c6e5108f0c813421c2b064b458e76d3e ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-xh-2.0.4-38.… d0a3844c7b99d616dd380f5a00835cd0 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-zh-CN-2.0.4-… e4a81f9c663583c77db5954977d57a60 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-zh-TW-2.0.4-… 26f2e13f5cbbdcf5793e8f28a5425c4d ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/OpenOffice_org-zu-2.0.4-38.… 11da32a9e5f59311c98658ca80f7d3f5 SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-2.0.4-38.7.p… cbe2bd48ca99dfc4446c9c30be60f44d ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-af-2.0.4-38.… f98ff19ed5fe0a481db8f6f5339919f6 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-ar-2.0.4-38.… 64f14951c2bb632b215bd352b506a9ba ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-be-BY-2.0.4-… 9e5af2d2cba4a38674557765f56f9b55 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-bg-2.0.4-38.… 4d409e898e82b10a0a719c2366e05955 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-ca-2.0.4-38.… c0078315576a7991229e32332384c353 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-cs-2.0.4-38.… b3a7c0c777b54bddd2bf4f9d4bd3e497 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-cy-2.0.4-38.… a0821bff9f58815d966a31f91755dacd ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-da-2.0.4-38.… 795b4475a905f30b52a3ff75ca91585e ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-de-2.0.4-38.… cdd433ce96fb5f2309d9dff893347fbb ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-el-2.0.4-38.… 5b2136e94f858716c1b9c086edbdd3b2 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-en-GB-2.0.4-… 7f0be54d9636d089078d26dc46bf6bce ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-es-2.0.4-38.… 3499ccfef84dd2b14a2876c31a1be995 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-et-2.0.4-38.… 8def3f0497f51bf9513e63c69efccdf3 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-fi-2.0.4-38.… 2583fbf7cb8b7e540dfa2f505dad1f5e ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-fr-2.0.4-38.… d055221198c8b43142b7eee0318ee036 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-galleries-2.… 2d3b96f013430e41c24ca1cb958bb097 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-gnome-2.0.4-… f0549f7d2b116e212a8f3e4164a04af4 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-gu-IN-2.0.4-… 0e84a4b2fdc4dcb687aaddbdf96f9a06 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-hi-IN-2.0.4-… 65e9d48c1cac8531264004814fa95437 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-hr-2.0.4-38.… b701a7e1578f04512ad5a684930a8862 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-hu-2.0.4-38.… bc3a9a2dfbbf9cad74d9c7a0a13ea719 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-it-2.0.4-38.… 559eaf8e8a7e2d3f5e5b637d47cd686c ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-ja-2.0.4-38.… 8a7668dd83d4f692245c4fb636e8d2bc ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-kde-2.0.4-38… 434263697e8d87cfcfbdb8cef4ae68b1 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-km-2.0.4-38.… c67313b7b0fefcc3851c2cfdb8f1c336 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-ko-2.0.4-38.… 69b0499868c66237660e6f7379058e16 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-lt-2.0.4-38.… e63323cafa1479645f2077114b4c78df ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-mk-2.0.4-38.… ee7a9f65dc3d546b351c7620eb03470a ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-mono-2.0.4-3… e764203ef0af1db0168e4425068430e3 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-nb-2.0.4-38.… a0a263dee694cb37b160efb0e3e76cef ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-nl-2.0.4-38.… 2fb00eb81b2eeb3d509656c840b09983 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-nn-2.0.4-38.… 728cbd0400cf9bbe96453ab9bde7dfce ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-officebean-2… 81bddb08678fa6aa505bd4729253f2e8 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-pa-IN-2.0.4-… 8dd3a2531ee02c8fe1a380d2acc9d1a8 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-pl-2.0.4-38.… fdbc8420e2e73f91a228e087b30666e9 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-pt-2.0.4-38.… 93406c737f92d65e08330494fe9c5770 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-pt-BR-2.0.4-… 7cfb221df15768335cf69995483d3387 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-ru-2.0.4-38.… 7541c2c07ae88e377285cf5d17ad55aa ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-rw-2.0.4-38.… 67a581a65c7b59b7f33fff160b2ce2ea ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-sk-2.0.4-38.… 7214c6ea282da50ef3dc38bcdae16ec1 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-sl-2.0.4-38.… fd62ab68ce98f434b9f75da9bf47b540 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-sr-CS-2.0.4-… a7fd76abfa824efec7b1caf5a7ad20d5 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-st-2.0.4-38.… 32888ab497c02f6ec5caf2552f8aea41 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-sv-2.0.4-38.… 38eb5750d646cc66a92b933dec96dc57 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-tr-2.0.4-38.… f5122f1d95eedf949ce8948cd283e334 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-ts-2.0.4-38.… 0f2ad502554cb4f2de5c66ed55b16107 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-vi-2.0.4-38.… 55e936c8bcb34eb4b182c652b261e7d0 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-xh-2.0.4-38.… acbfab4e64453f8cf672473f3137b10c ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-zh-CN-2.0.4-… 075c7134868ed8807fadfb08fabf3a98 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-zh-TW-2.0.4-… 4fba115a9d012e1bfe509bc621aa7841 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/OpenOffice_org-zu-2.0.4-38.… 0010f9052df36e257b20f7bbf8186267 SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-2.0.0-1… 58bb08ba8e68ddbd0e101e66dbb98a6e ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-af-2.0.… 445e2d515a2e42ada48220c9c07629fa ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-ar-2.0.… 48ce37da2ff6656ccefa2c5b7411bb15 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-be-BY-2… b878a90166174f1fc79341adbe59c8b1 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-bg-2.0.… dda24c0b6a8804b2549cae1052ac8075 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-ca-2.0.… 8c40d0f8917723c7551fbaa7c64caa68 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-cs-2.0.… 160febfe78564d33107187b7eedc3d08 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-cy-2.0.… 32b4929a213ac8f9d43966f18ae307a8 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-da-2.0.… 68515768625b7f486a4dcce143e9224a ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-de-2.0.… dc50780817930ab036a440d34b8f05c2 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-el-2.0.… 5b02abc6dde21af5698637092658166a ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-en-GB-2… 5d2d522076f1e20fed9bf1197f33d5ca ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-es-2.0.… 9d4c54c724e4af3cb2b2f771049f5d8e ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-et-2.0.… 58def928bbf9d7ac08e5de93eb8c8c8f ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-fi-2.0.… c65f71e570e895a0eb56a83f41ef0847 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-fr-2.0.… 71f57e4f720d60e3b55ffb6065c144a2 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-galleri… 642d66e5920e34085de6795a7290dd4d ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-gnome-2… d52e949f2fcb1fceaa5d53d0d3bf9b47 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-gu-IN-2… 479a847a207b8436670f497ace846b31 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-hr-2.0.… 8e515a7face5d4c24797dc1113452303 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-hu-2.0.… 679c26c8d3ffb65a86fbad7d394c5ac2 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-hunspel… 7e07226bfbb1385276b2b99bacbb14d5 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-it-2.0.… b95fbc9b1311cda876f04dfcb46b93f0 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-ja-2.0.… ad4d6934e93da71fe581a2978954861b ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-kde-2.0… e7c55595cdff654525755c1369df053a ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-ko-2.0.… 787f8d91d8d57f3a1aa1bb5c87a7ac8e ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-mono-2.… 5766e60787a648f9c50525c087d01760 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-nb-2.0.… b4918f3ee64ed8d0d8d0faf6f04f3058 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-nl-2.0.… 76097ba65a1d186a726c31c14b75513e ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-nn-2.0.… 0fcac5b13d05421722ab6cf05e81d266 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-officeb… 6abf39f00435244d7977df765de6b293 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-pa-IN-2… f0c608079611957cd2b6cb67af4d685f ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-pl-2.0.… 74dda0b9ac70cd83e33fc6b919907238 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-pt-2.0.… 636f789f0a4c157d9028c13f4478a4f2 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-pt-BR-2… e37fd651a7c219fab438dcac8127d28d ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-ru-2.0.… 2a0f21e2bdfde1e9e0971f9109fffe9c ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-sk-2.0.… cded19344eaf3c48fa961dfa38c0f848 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-sl-2.0.… 641309a805c7f7e0042ab63ddbab99f3 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-sv-2.0.… 2743d59ca403f023339127f53ecf7636 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-tr-2.0.… 853dfaf9535a1743562e465526d52666 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-vi-2.0.… 9f5f78e04d555cf45b9fddd36ace814f ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-xh-2.0.… 080063837a022e62fc7c2bc14f8fb7b9 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-zh-CN-2… 259da0160bd61caf45f21f99908f7202 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-zh-TW-2… 114589a69431f3ca3f91fd9732034c78 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/OpenOffice_org-zu-2.0.… c95de46fcfb486ece3189d3c4d3bf733 x86-64 Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/OpenOffice… 58995a01c251cf1eb7c3dc455e227fac http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/OpenOffice… fa02a973b76a789dfb3d29f1eb64ebe1 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/OpenOffice… 4149f71f3d252a77fdc145eb901dd302 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/OpenOffice… 2f25e361bf5cde7eb371ad8c2b841126 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/OpenOffice… d2f4627d4ea5afda6be5c0cd56700edc http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/OpenOffice… c8dd09f7b06ecbc0bd80403c10021702 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/OpenOffice… 67a72fcbfa1e354e2e94e73d142b2b98 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/OpenOffice… 270743160a508c907d7a66dd60db4e00 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/OpenOffice… ee545cd03fc38e7f7b741f7eed68d165 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/OpenOffice… 93ee95f7030aaf5427feb9540df1cb83 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/OpenOffice… c30c0690f57702a31459a5015096b175 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/OpenOffice… 0ab5b861598db3dcc79c897060d456d4 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/OpenOffice… 5aad1fd498d4278060805ac1687d686f http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/OpenOffice… fccecaa34a930261ffa2cb02b36a4442 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/OpenOffice… 2382380246e6ee2824a908fd03b302e9 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/OpenOffice… 4ea18da49e7c673dea2686bd052e149e http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/OpenOffice… 1211887512cbe422a68015e8eacd5305 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/OpenOffice… c9d69af4b9c82827e00600a65b3229c2 Sources: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/OpenOffice_or… 454e80d93bd569bc84f39e486e5cc495 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/OpenOffice_org-2.0.4-38.10.… 37b6bc1cd3d9db6daabe580a8949efdb ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/OpenOffice_org-2.0.4-38.9.s… b27a6c14e5798be25466dcf8567f8089 SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/OpenOffice_org-2.0.4-38.7.s… b9eadb574a7e87a249eb64cd102d3b4f SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/OpenOffice_org-2.0.0-1… c49aa080a01afdd3394ba9a13a435c27 Our maintenance customers are notified individually. The packages are offered for installation from the maintenance web: SLE SDK 10 SP1 http://support.novell.com/techcenter/psdb/ea59323715fc8b8e5580481132470d3c.… SUSE Linux Enterprise Desktop 10 SP1 http://support.novell.com/techcenter/psdb/ea59323715fc8b8e5580481132470d3c.… ______________________________________________________________________________ 5) Pending Vulnerabilities, Solutions, and Work-Arounds: See SUSE Security Summary Report. ______________________________________________________________________________ 6) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify <file> replacing <file> with the name of the file where you saved the announcement. The output for a valid signature looks like: gpg: Signature made <DATE> using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team <security(a)suse.de>" where <DATE> is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and the integrity of a package needs to be verified to ensure that it has not been tampered with. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or RPM package: 1) Using the internal gpg signatures of the rpm package 2) MD5 checksums as provided in this announcement 1) The internal rpm package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig <file.rpm> to verify the signature of the package, replacing <file.rpm> with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from build(a)suse.de with the key ID 9C800ACA. This key is automatically imported into the RPM database (on RPMv4-based distributions) and the gpg key ring of 'root' during installation. You can also find it on the first installation CD and at the end of this announcement. 2) If you need an alternative means of verification, use the md5sum command to verify the authenticity of the packages. Execute the command md5sum <filename.rpm> after you downloaded the file from a SUSE FTP server or its mirrors. Then compare the resulting md5sum with the one that is listed in the SUSE security announcement. Because the announcement containing the checksums is cryptographically signed (by security(a)suse.de) the checksums show proof of the authenticity of the package if the signature of the announcement is valid. Note that the md5 sums published in the SUSE Security Announcements are valid for the respective packages only. Newer versions of these packages cannot be verified. - SUSE runs two security mailing lists to which any interested party may subscribe: opensuse-security(a)opensuse.org - General Linux and SUSE security discussion. All SUSE security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security+subscribe(a)opensuse.org>. opensuse-security-announce(a)opensuse.org - SUSE's announce-only mailing list. Only SUSE's security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security-announce+subscribe(a)opensuse.org>. ===================================================================== SUSE's security contact is <security(a)suse.com> or <security(a)suse.de>. The <security(a)suse.de> public key is listed below. ===================================================================== ______________________________________________________________________________ The information in this advisory may be distributed or reproduced, provided that the advisory is not modified in any way. In particular, the clear text signature should show proof of the authenticity of the text. SUSE Linux Products GmbH provides no warranties of any kind whatsoever with respect to the information contained in this security advisory. Type Bits/KeyID Date User ID pub 2048R/3D25D3D9 1999-03-06 SuSE Security Team <security(a)suse.de> pub 1024D/9C800ACA 2000-10-19 SuSE Package Signing Key <build(a)suse.de> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.2 (GNU/Linux) mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh 1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+ cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7 tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63 Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+ x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0 Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2 saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o L0oixF12CohGBBARAgAGBQI7HmHDAAoJEJ5A4xAACqukTlQAoI4QzP9yjPohY7OU F7J3eKBTzp25AJ42BmtSd3pvm5ldmognWF3Trhp+GYkAlQMFEDe3O8IWkDf+zvyS FQEBAfkD/3GG5UgJj18UhYmh1gfjIlDcPAeqMwSytEHDENmHC+vlZQ/p0mT9tPiW tp34io54mwr+bLPN8l6B5GJNkbGvH6M+mO7R8Lj4nHL6pyAv3PQr83WyLHcaX7It Klj371/4yzKV6qpz43SGRK4MacLo2rNZ/dNej7lwPCtzCcFYwqkiiEYEEBECAAYF AjoaQqQACgkQx1KqMrDf94ArewCfWnTUDG5gNYkmHG4bYL8fQcizyA4An2eVo/n+ 3J2KRWSOhpAMsnMxtPbBmQGiBDnu9IERBACT8Y35+2vv4MGVKiLEMOl9GdST6MCk YS3yEKeueNWc+z/0Kvff4JctBsgs47tjmiI9sl0eHjm3gTR8rItXMN6sJEUHWzDP +Y0PFPboMvKx0FXl/A0dM+HFrruCgBlWt6FA+okRySQiliuI5phwqkXefl9AhkwR 8xocQSVCFxcwvwCglVcOQliHu8jwRQHxlRE0tkwQQI0D+wfQwKdvhDplxHJ5nf7U 8c/yE/vdvpN6lF0tmFrKXBUX+K7u4ifrZlQvj/81M4INjtXreqDiJtr99Rs6xa0S cZqITuZC4CWxJa9GynBED3+D2t1V/f8l0smsuYoFOF7Ib49IkTdbtwAThlZp8bEh ELBeGaPdNCcmfZ66rKUdG5sRA/9ovnc1krSQF2+sqB9/o7w5/q2qiyzwOSTnkjtB UVKn4zLUOf6aeBAoV6NMCC3Kj9aZHfA+ND0ehPaVGJgjaVNFhPi4x0e7BULdvgOo AqajLfvkURHAeSsxXIoEmyW/xC1sBbDkDUIBSx5oej73XCZgnj/inphRqGpsb+1n KFvF+rQoU3VTRSBQYWNrYWdlIFNpZ25pbmcgS2V5IDxidWlsZEBzdXNlLmRlPohi BBMRAgAiBQJA2AY+AhsDBQkObd+9BAsHAwIDFQIDAxYCAQIeAQIXgAAKCRCoTtro nIAKypCfAJ9RuZ6ZSV7QW4pTgTIxQ+ABPp0sIwCffG9bCNnrETPlgOn+dGEkAWeg KL+IRgQQEQIABgUCOnBeUgAKCRCeQOMQAAqrpNzOAKCL512FZvv4VZx94TpbA9lx yoAejACeOO1HIbActAevk5MUBhNeLZa/qM2JARUDBRA6cGBvd7LmAD0l09kBATWn B/9An5vfiUUE1VQnt+T/EYklES3tXXaJJp9pHMa4fzFa8jPVtv5UBHGee3XoUNDV wM2OgSEISZxbzdXGnqIlcT08TzBUD9i579uifklLsnr35SJDZ6ram51/CWOnnaVh UzneOA9gTPSr+/fT3WeVnwJiQCQ30kNLWVXWATMnsnT486eAOlT6UNBPYQLpUprF 5Yryk23pQUPAgJENDEqeU6iIO9Ot1ZPtB0lniw+/xCi13D360o1tZDYOp0hHHJN3 D3EN8C1yPqZd5CvvznYvB6bWBIpWcRgdn2DUVMmpU661jwqGlRz1F84JG/xe4jGu zgpJt9IXSzyohEJB6XG5+D0BuQINBDnu9JIQCACEkdBN6Mxf5WvqDWkcMRy6wnrd 9DYJ8UUTmIT2iQf07tRUKJJ9v0JXfx2Z4d08IQSMNRaq4VgSe+PdYgIy0fbj23Vi a5/gO7fJEpD2hd2f+pMnOWvH2rOOIbeYfuhzAc6BQjAKtmgR0ERUTafTM9Wb6F13 CNZZNZfDqnFDP6L12w3z3F7FFXkz07Rs3AIto1ZfYZd4sCSpMr/0S5nLrHbIvGLp 271hhQBeRmmoGEKO2JRelGgUJ2CUzOdtwDIKT0LbCpvaP8PVnYF5IFoYJIWRHqlE t5ucTXstZy7vYjL6vTP4l5xs+LIOkNmPhqmfsgLzVo0UaLt80hOwc4NvDCOLAAMG B/9g+9V3ORzw4LvO1pwRYJqfDKUq/EJ0rNMMD4N8RLpZRhKHKJUm9nNHLbksnlZw rbSTM5LpC/U6sheLP+l0bLVoq0lmsCcUSyh+mY6PxWirLIWCn/IAZAGnXb6Zd6Tt IJlGG6pqUN8QxGJYQnonl0uTJKHJENbI9sWHQdcTtBMc34gorHFCo1Bcvpnc1LFL rWn7mfoGx6INQjf3HGQpMXAWuSBQhzkazY6vaWFpa8bBJ+gKbBuySWzNm3rFtT5H RKMWpO+M9bHp4d+puY0L1YwN1OMatcMMpcWnZpiWiR83oi32+xtWUY2U7Ae38mMa g8zFbpeqPQUsDv9V7CAJ1dbriEwEGBECAAwFAkDYBnoFCQ5t3+gACgkQqE7a6JyA CspnpgCfRbYwxT3iq+9l/PgNTUNTZOlof2oAn25y0eGi0371jap9kOV6uq71sUuO =ypVs - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4-svn0 (GNU/Linux) iQEVAwUBR16I83ey5gA9JdPZAQICEAf6AyFIXjLPSY1q0yWqsi6E1WVuGbNwH+ys qOYvE18oo5AB/VksjZJhGiaA+ExLGbkwoAv2PKTdJ+j5ECh9XxjvIfyAlIREl88w uVZu9HhUN9pomeUVaWTswytVJULJpYyk5GtNgl8d+KSf8qpuuzsr/7y6xWxTCfrH soxSdpRx1iAEBOHiH8kJKkArYXmHVXPcqun0FJBU3pq6EZrA8gn+GTO4wfI1eITF Y564EpDYSvl+khmIeZ40/zTgRvq80IJb+KZeAtLXe4kQL0VzEDkDZH1LpMCC9yJN S81FX2fT3egtTHBUsKYOi0rj4gvQ+PLQZzDciYkUcoPi7X7MnVyiHg== =kxmc -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE Security Announcement: Mozilla Firefox 2.0.0.10 (SUSE-SA:2007:066)
by Marcus Meissner 05 Dec '07

05 Dec '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Announcement Package: MozillaFirefox Announcement ID: SUSE-SA:2007:066 Date: Wed, 05 Dec 2007 15:00:00 +0000 Affected Products: SUSE LINUX 10.0 SUSE LINUX 10.1 openSUSE 10.2 openSUSE 10.3 SUSE Linux Enterprise Desktop 10 SP1 SUSE Linux Enterprise Server 10 SP1 Vulnerability Type: remote code execution Severity (1-10): 8 SUSE Default Package: yes Cross-References: CVE-2007-5947, CVE-2007-5959, CVE-2007-5960 MFSA 2007-37, MFSA 2007-38, MFSA 2007-39 Content of This Advisory: 1) Security Vulnerability Resolved: Mozilla Firefox security problems Problem Description 2) Solution or Work-Around 3) Special Instructions and Notes 4) Package Location and Checksums 5) Pending Vulnerabilities, Solutions, and Work-Arounds: See SUSE Security Summary Report. 6) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Problem Description and Brief Discussion The Mozilla Firefox packages were brought to security update version 2.0.0.10 for SUSE Linux Enterprise 10, SUSE Linux 10.0, 10.1 and openSUSE 10.2 and 10.3. These packages include the Canvas regression fix also fixed in 2.0.0.11, so we are effectively at 2.0.0.11 with our packages. Mozilla Firefox for Novell Linux Desktop 9 is still being prepared, same for Mozilla Thunderbird 2.0.0.9 and Mozilla and Seamonkey Suite packages. The update was released on 29th of November. Following security problems were fixed: MFSA 2007-37 / CVE-2007-5947: The jar protocol handler in Mozilla Firefox retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a jar: URI. MFSA 2007-38 / CVE-2007-5959: The Firefox 2.0.0.10 update contains fixes for three bugs that improve the stability of the product. These crashes showed some evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code. MFSA 2007-39 / CVE-2007-5960: Gregory Fleischer demonstrated that it was possible to generate a fake HTTP Referer header by exploiting a timing condition when setting the window.location property. This could be used to conduct a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header as protection against such attacks. 2) Solution or Work-Around There is no known workaround, please install the update packages. 3) Special Instructions and Notes Please close and restart all running instances of Firefox after the update. 4) Package Location and Checksums The preferred method for installing security updates is to use the YaST Online Update (YOU) tool. YOU detects which updates are required and automatically performs the necessary steps to verify and install them. Alternatively, download the update packages for your distribution manually and verify their integrity by the methods listed in Section 6 of this announcement. Then install the packages using the command rpm -Fhv <file.rpm> to apply the update, replacing <file.rpm> with the filename of the downloaded RPM package. x86 Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/MozillaFiref… d0f7fd357a6de8c6a590b42dda9c7702 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/MozillaFiref… 1aaf5db8a1297805e8e9e176b238ef8c openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/MozillaFirefox-2.0.0.10-0.… 1f2516d822f8ca87b3f3f25c145e4a38 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/MozillaFirefox-translation… 574823f229420156208b5f45bff5ca6d SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/MozillaFirefox-2.0.0.10-0.… cf1b3c80ffdfd1f3e4f340e0d9a8c07f ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/MozillaFirefox-translation… fd13fa44b75a2e6317103f265d77f702 SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/MozillaFirefox-2.0.0.… 6f5985e8b52cd2fd82f935eb1bdcef75 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/MozillaFirefox-transl… 5713f8749a674285d4de104729466231 Power PC Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/MozillaFirefo… d94b360b96f78415486e590ba2ebc56f http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/MozillaFirefo… e22b1e054000aa0d53c41fe6ac39372a openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/MozillaFirefox-2.0.0.10-0.1… 530f6740fee6d2fb643afa4b9f0c49ef ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/MozillaFirefox-translations… 6db2f0cb850b212cec62de5ad94d0069 SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/MozillaFirefox-2.0.0.10-0.2… ed1d282e433ce48f63ed14e836c18d52 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/MozillaFirefox-translations… 740adaa059e9898be2e0a1a2bea8bfd0 SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/MozillaFirefox-2.0.0.1… 0c7fc24e3f284c4f2f4fbe4da05500bc ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/MozillaFirefox-transla… 58404d548715285c5899e36a7ce28b6c x86-64 Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/MozillaFir… 084e0ea783cb2b1069de863276b65b67 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/MozillaFir… ab398376912b59c1b29326771336b4d7 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/MozillaFirefox-2.0.0.10-… 173749354f0641198f0c6100ae190564 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/MozillaFirefox-translati… c7d56938e6ebc0bbaac89965eedcf475 Sources: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/MozillaFirefo… beb5c6009fc75627e1305e05aafdd808 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/MozillaFirefox-2.0.0.10-0.1… 1fa1299403a46b21f0fe505405250fc7 SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/MozillaFirefox-2.0.0.10-0.2… 5c8cb8c56778911746b6851de11446fe SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/MozillaFirefox-2.0.0.1… 4f10c8fdacab3bc3e05dec6100be2d6b Our maintenance customers are notified individually. The packages are offered for installation from the maintenance web: SUSE Linux Enterprise Server 10 SP1 http://support.novell.com/techcenter/psdb/a1909a9a9f705e973cf0feed1743484e.… SUSE Linux Enterprise Desktop 10 SP1 http://support.novell.com/techcenter/psdb/a1909a9a9f705e973cf0feed1743484e.… ______________________________________________________________________________ 5) Pending Vulnerabilities, Solutions, and Work-Arounds: See SUSE Security Summary Report. ______________________________________________________________________________ 6) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify <file> replacing <file> with the name of the file where you saved the announcement. The output for a valid signature looks like: gpg: Signature made <DATE> using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team <security(a)suse.de>" where <DATE> is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and the integrity of a package needs to be verified to ensure that it has not been tampered with. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or RPM package: 1) Using the internal gpg signatures of the rpm package 2) MD5 checksums as provided in this announcement 1) The internal rpm package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig <file.rpm> to verify the signature of the package, replacing <file.rpm> with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from build(a)suse.de with the key ID 9C800ACA. This key is automatically imported into the RPM database (on RPMv4-based distributions) and the gpg key ring of 'root' during installation. You can also find it on the first installation CD and at the end of this announcement. 2) If you need an alternative means of verification, use the md5sum command to verify the authenticity of the packages. Execute the command md5sum <filename.rpm> after you downloaded the file from a SUSE FTP server or its mirrors. Then compare the resulting md5sum with the one that is listed in the SUSE security announcement. Because the announcement containing the checksums is cryptographically signed (by security(a)suse.de) the checksums show proof of the authenticity of the package if the signature of the announcement is valid. Note that the md5 sums published in the SUSE Security Announcements are valid for the respective packages only. Newer versions of these packages cannot be verified. - SUSE runs two security mailing lists to which any interested party may subscribe: opensuse-security(a)opensuse.org - General Linux and SUSE security discussion. All SUSE security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security+subscribe(a)opensuse.org>. opensuse-security-announce(a)opensuse.org - SUSE's announce-only mailing list. Only SUSE's security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security-announce+subscribe(a)opensuse.org>. ===================================================================== SUSE's security contact is <security(a)suse.com> or <security(a)suse.de>. The <security(a)suse.de> public key is listed below. ===================================================================== ______________________________________________________________________________ The information in this advisory may be distributed or reproduced, provided that the advisory is not modified in any way. In particular, the clear text signature should show proof of the authenticity of the text. SUSE Linux Products GmbH provides no warranties of any kind whatsoever with respect to the information contained in this security advisory. Type Bits/KeyID Date User ID pub 2048R/3D25D3D9 1999-03-06 SuSE Security Team <security(a)suse.de> pub 1024D/9C800ACA 2000-10-19 SuSE Package Signing Key <build(a)suse.de> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.2 (GNU/Linux) mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh 1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+ cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7 tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63 Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+ x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0 Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2 saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o L0oixF12CohGBBARAgAGBQI7HmHDAAoJEJ5A4xAACqukTlQAoI4QzP9yjPohY7OU F7J3eKBTzp25AJ42BmtSd3pvm5ldmognWF3Trhp+GYkAlQMFEDe3O8IWkDf+zvyS FQEBAfkD/3GG5UgJj18UhYmh1gfjIlDcPAeqMwSytEHDENmHC+vlZQ/p0mT9tPiW tp34io54mwr+bLPN8l6B5GJNkbGvH6M+mO7R8Lj4nHL6pyAv3PQr83WyLHcaX7It Klj371/4yzKV6qpz43SGRK4MacLo2rNZ/dNej7lwPCtzCcFYwqkiiEYEEBECAAYF AjoaQqQACgkQx1KqMrDf94ArewCfWnTUDG5gNYkmHG4bYL8fQcizyA4An2eVo/n+ 3J2KRWSOhpAMsnMxtPbBmQGiBDnu9IERBACT8Y35+2vv4MGVKiLEMOl9GdST6MCk YS3yEKeueNWc+z/0Kvff4JctBsgs47tjmiI9sl0eHjm3gTR8rItXMN6sJEUHWzDP +Y0PFPboMvKx0FXl/A0dM+HFrruCgBlWt6FA+okRySQiliuI5phwqkXefl9AhkwR 8xocQSVCFxcwvwCglVcOQliHu8jwRQHxlRE0tkwQQI0D+wfQwKdvhDplxHJ5nf7U 8c/yE/vdvpN6lF0tmFrKXBUX+K7u4ifrZlQvj/81M4INjtXreqDiJtr99Rs6xa0S cZqITuZC4CWxJa9GynBED3+D2t1V/f8l0smsuYoFOF7Ib49IkTdbtwAThlZp8bEh ELBeGaPdNCcmfZ66rKUdG5sRA/9ovnc1krSQF2+sqB9/o7w5/q2qiyzwOSTnkjtB UVKn4zLUOf6aeBAoV6NMCC3Kj9aZHfA+ND0ehPaVGJgjaVNFhPi4x0e7BULdvgOo AqajLfvkURHAeSsxXIoEmyW/xC1sBbDkDUIBSx5oej73XCZgnj/inphRqGpsb+1n KFvF+rQoU3VTRSBQYWNrYWdlIFNpZ25pbmcgS2V5IDxidWlsZEBzdXNlLmRlPohi BBMRAgAiBQJA2AY+AhsDBQkObd+9BAsHAwIDFQIDAxYCAQIeAQIXgAAKCRCoTtro nIAKypCfAJ9RuZ6ZSV7QW4pTgTIxQ+ABPp0sIwCffG9bCNnrETPlgOn+dGEkAWeg KL+IRgQQEQIABgUCOnBeUgAKCRCeQOMQAAqrpNzOAKCL512FZvv4VZx94TpbA9lx yoAejACeOO1HIbActAevk5MUBhNeLZa/qM2JARUDBRA6cGBvd7LmAD0l09kBATWn B/9An5vfiUUE1VQnt+T/EYklES3tXXaJJp9pHMa4fzFa8jPVtv5UBHGee3XoUNDV wM2OgSEISZxbzdXGnqIlcT08TzBUD9i579uifklLsnr35SJDZ6ram51/CWOnnaVh UzneOA9gTPSr+/fT3WeVnwJiQCQ30kNLWVXWATMnsnT486eAOlT6UNBPYQLpUprF 5Yryk23pQUPAgJENDEqeU6iIO9Ot1ZPtB0lniw+/xCi13D360o1tZDYOp0hHHJN3 D3EN8C1yPqZd5CvvznYvB6bWBIpWcRgdn2DUVMmpU661jwqGlRz1F84JG/xe4jGu zgpJt9IXSzyohEJB6XG5+D0BuQINBDnu9JIQCACEkdBN6Mxf5WvqDWkcMRy6wnrd 9DYJ8UUTmIT2iQf07tRUKJJ9v0JXfx2Z4d08IQSMNRaq4VgSe+PdYgIy0fbj23Vi a5/gO7fJEpD2hd2f+pMnOWvH2rOOIbeYfuhzAc6BQjAKtmgR0ERUTafTM9Wb6F13 CNZZNZfDqnFDP6L12w3z3F7FFXkz07Rs3AIto1ZfYZd4sCSpMr/0S5nLrHbIvGLp 271hhQBeRmmoGEKO2JRelGgUJ2CUzOdtwDIKT0LbCpvaP8PVnYF5IFoYJIWRHqlE t5ucTXstZy7vYjL6vTP4l5xs+LIOkNmPhqmfsgLzVo0UaLt80hOwc4NvDCOLAAMG B/9g+9V3ORzw4LvO1pwRYJqfDKUq/EJ0rNMMD4N8RLpZRhKHKJUm9nNHLbksnlZw rbSTM5LpC/U6sheLP+l0bLVoq0lmsCcUSyh+mY6PxWirLIWCn/IAZAGnXb6Zd6Tt IJlGG6pqUN8QxGJYQnonl0uTJKHJENbI9sWHQdcTtBMc34gorHFCo1Bcvpnc1LFL rWn7mfoGx6INQjf3HGQpMXAWuSBQhzkazY6vaWFpa8bBJ+gKbBuySWzNm3rFtT5H RKMWpO+M9bHp4d+puY0L1YwN1OMatcMMpcWnZpiWiR83oi32+xtWUY2U7Ae38mMa g8zFbpeqPQUsDv9V7CAJ1dbriEwEGBECAAwFAkDYBnoFCQ5t3+gACgkQqE7a6JyA CspnpgCfRbYwxT3iq+9l/PgNTUNTZOlof2oAn25y0eGi0371jap9kOV6uq71sUuO =ypVs - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4-svn0 (GNU/Linux) iQEVAwUBR1bNXXey5gA9JdPZAQI5IQgAlYjtANtEq/3gkSFSgDJMyE9J50820A5U KtuhYRuTKd8PW6BIeqSU4fXse5aadcDdCm1Q5IHpGSgicb6KcZFMwFcrPy3R4M5W 79Q9+eLWWk8u1ZdDuZ75yXx1KS+3fqiI+AdP+Cxmr101N4oqKYN9mbZGf9g4pnvL 8xXoNb4I7AzkZaa46Z/7lgAHTsagZL5L0HEXEJ/4y64rmRL9vKrquZQ8bHd3AbWS u/7MsH4lsmTyCk0Cjv2LuBY4A1ff1Na3rH9BIMxJ1GOUTiloeHd4r8tIhVtr/TRb in9cxDp6P7D14eBNpx+GcgEhuR1+wtujuPceCmzRA5tnvz4bvgGMzg== =K2yZ -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE Security Announcement: samba (SUSE-SA:2007:065)
by Thomas Biege 05 Dec '07

05 Dec '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Announcement Package: samba Announcement ID: SUSE-SA:2007:065 Date: Wed, 05 Dec 2007 16:00:00 +0000 Affected Products: SUSE LINUX 10.0 SUSE LINUX 10.1 openSUSE 10.2 openSUSE 10.3 UnitedLinux 1.0 SuSE Linux Enterprise Server 8 SuSE Linux Openexchange Server 4 SuSE Linux Desktop 1.0 SuSE Linux Standard Server 8 SuSE Linux School Server SUSE LINUX Retail Solution 8 SUSE SLES 9 Novell Linux Desktop 9 Open Enterprise Server Novell Linux POS 9 SUSE Linux Enterprise Desktop 10 SP1 SLE SDK 10 SP1 SUSE Linux Enterprise Server 10 SP1 Vulnerability Type: remote code execution Severity (1-10): 7 SUSE Default Package: no Cross-References: CVE-2007-5398 CVE-2007-4572 Content of This Advisory: 1) Security Vulnerability Resolved: fixed two buffer overflows Problem Description 2) Solution or Work-Around 3) Special Instructions and Notes 4) Package Location and Checksums 5) Pending Vulnerabilities, Solutions, and Work-Arounds: none 6) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Problem Description and Brief Discussion The samba-suite is an open-source implementation of the SMB protocol. CVE-2007-5398: Secunia Research has reported a bug in function reply_netbios_packet() that allowed remote attackers to execute arbitrary code by sending specially crafted WINS "Name Registration" requests followed by a WINS "Name Query" request packet. The exploitable code in samba can only be reached if the option "wins support" was enabled. CVE-2007-4572: Another bug reported by Secunia Research affected the processing of GETDC mailslot request in nmbd. This error can also be exploited remotely to execute arbitrary code, but only if samba was configured as Primary or Backup Domain Controller. 2) Solution or Work-Around Please install the provided samba update packages. 3) Special Instructions and Notes Please restart the samba daemons. 4) Package Location and Checksums The preferred method for installing security updates is to use the YaST Online Update (YOU) tool. YOU detects which updates are required and automatically performs the necessary steps to verify and install them. Alternatively, download the update packages for your distribution manually and verify their integrity by the methods listed in Section 6 of this announcement. Then install the packages using the command rpm -Fhv <file.rpm> to apply the update, replacing <file.rpm> with the filename of the downloaded RPM package. x86 Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/cifs-mount-3… 14fe2bb97903a1184420edb1c8cd91ab http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/ldapsmb-1.34… 5076f9efd5b4b375abc56a0c805fb975 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libmsrpc-3.0… 270f3d20ac547a4f02eb7e1cbb2ee8b1 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libmsrpc-dev… 729cadd5041edc7f03f21c784c6b85bb http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libsmbclient… a2566202716e9d8cd7bcd6928ded4ce0 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libsmbclient… bc36927bb01e46e9b2deb1b2d1fcf745 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libsmbsharem… 59a261a3b0c25bf08f2700436a70f3e3 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libsmbsharem… 548acc17d4a80b83ac55c3b627955bf8 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-3.0.26… 94b668592e808f28293ea1ea3a62d3f0 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-client… 30fe5f450ce9516bcbc5852ceea60f02 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-devel-… 077b7741322895a40740954043db6929 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-krb-pr… 1afd7fa4037a05a692e819c6f2c07363 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-python… 8d381a7574f565321f0643f2c282ea5e http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-vscan-… f402850bba03c85e96b740b2f0ac1454 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-winbin… 7644257c79de02f67eb7bfe54ac57f33 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/cifs-mount-3.0.23d-19.10.i… 8ccde4dd789f893ba1362da7e819a840 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/ldapsmb-1.34b-27.8.i586.rpm 966284924eddb1d99ee5fe8a469fe915 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/libmsrpc-3.0.23d-19.10.i58… 139822c22fea9ae1f0141f799bf091ea ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/libmsrpc-devel-3.0.23d-19.… fe77521e9ee88bf2604eff585d061d05 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/libsmbclient-3.0.23d-19.10… 33a11dc959526883613d9923bc4e13fc ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/libsmbclient-devel-3.0.23d… 1f865efafe1fab44172340195e66c3af ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-3.0.23d-19.10.i586.r… 6b1bbca71a0643ccec19929cb52031bb ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-client-3.0.23d-19.10… 89e9f6e9c0993470e70f411ea3801f4f ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-krb-printing-3.0.23d… d99011b9f749140cf80b1fabfb6a54a0 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-pdb-3.0.23d-19.10.i5… ca93991e649e1e2272715779f9716f52 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-python-3.0.23d-19.10… 671bf08a3f7b62e93da1ced4bef31742 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-vscan-0.3.6b-98.8.i5… a0966a86569a13402dd4438b62a0bf10 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-winbind-3.0.23d-19.1… 17a7134d8cef65a361566ea4304fefe4 SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/cifs-mount-3.0.22-13.36.i5… f13dd16a6abe3d5c960f75982fe1eedf ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/ldapsmb-1.34a-18.32.i586.r… 3ab30876f7cf45ae3bef0fd83a3bfd2d ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/libmsrpc-3.0.22-13.36.i586… bc467864f082a15ac315fb1254b6df3a ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/libmsrpc-devel-3.0.22-13.3… 2feb2176c4c56259cb69697a59294fda ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/libsmbclient-3.0.22-13.36.… 0336590ca50764840b63926ef586ff80 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/libsmbclient-devel-3.0.22-… 038564f0986003f5759335e856d76f0b ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-3.0.22-13.36.i586.rpm 8b3b1cf5ffe433d03effc8b93cf4adb1 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-client-3.0.22-13.36.… 7973ecd4259e5711e517a11706de59c5 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-pdb-3.0.22-13.36.i58… 38e3f5e6d9fe21e28e7f3b7e231bc973 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-python-3.0.22-13.36.… 124e5ad410dbe369332f776fa9899b18 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-vscan-0.3.6b-42.63.i… 0fdb009bb860cd97403630323e110f14 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-winbind-3.0.22-13.36… d2c9133fa8be2dfc1f79c0476c64be12 SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/cifs-mount-3.0.20b-3.… 2921e713f4da35351148c4b937728981 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/ldapsmb-1.33-6.17.i58… a15703aeb6c91c5a386c352bb6a52496 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/libsmbclient-3.0.20b-… 5fedfe5cfa80a9cb9eb50114a6668d7d ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/libsmbclient-devel-3.… 9b39b90a4b854480dc65ac09d50b8f5a ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-3.0.20b-3.17.i5… e6d2644adea97106855950eaf6a3aa51 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-client-3.0.20b-… 2fda9ea9ef15e217ab7274fa70459d92 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-doc-3.0.20b-3.1… c4f5426c218a994630a76f0d32cd9e3e ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-pdb-3.0.20b-3.1… 04d1b78cf732a8e38daadb5f521c0fbc ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-python-3.0.20b-… 343b2aaa31d327a4355524cc59cf2c12 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-vscan-0.3.6b-4.… 9d9cbe74afe66c2d94da56f51078c674 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-winbind-3.0.20b… f119e26c0aa57edc31bed023973df92e Platform Independent: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/noarch/samba-doc-… 6846ff9d376e6a33fd0ee0cff6dd86a1 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/noarch/samba-doc-3.0.23d-19.7.n… 2dfce780a4211c537ae21a92d307a3b5 SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/samba-doc-3.0.22-20.50.n… 9c13398cd8be995cb7823bc749e419f7 Power PC Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/cifs-mount-3.… cd4db7e449aa2e16faa79ea555569535 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/ldapsmb-1.34b… 681fde00928cce85a082b92136417e7e http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libmsrpc-3.0.… ee20f10891611560bee4a4efc4dce597 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libmsrpc-deve… f396f340c24effdc9c769a05dab6ea1a http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libsmbclient-… 737df32d26bb1e19633b4b15e235e402 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libsmbclient-… dd81a1c74872d03b8774e7728c9fe7ad http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libsmbsharemo… e8811a907ad371207209a34c843de11c http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libsmbsharemo… 4d702a5cde9822ad5aca32fa408f70c1 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-3.0.26a… c17d1ce838b1a5edc27151967c9c172d http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-client-… 91938d2a1a08a4e5baabf8b11eafc204 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-devel-3… a1e9015a9b11099af46988ac6d36f7bc http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-krb-pri… 281d6999da5cf849bb2f0d4a000ef526 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-python-… 5b18a5c5f8acf53d3e0704975b3f1daf http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-vscan-0… 0ad0bd954f75ad44b018e427c1d03a16 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-winbind… fb83f45f7744ab4e8ef11d6c3e09a419 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/cifs-mount-3.0.23d-19.10.pp… 04f63548d575cd8d7982962069d14915 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/ldapsmb-1.34b-27.8.ppc.rpm 5a44e13be59b31c3b7aaebeea1746c34 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/libmsrpc-3.0.23d-19.10.ppc.… f5200b9cb55bc6767ea8ba44fec0a7ee ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/libmsrpc-devel-3.0.23d-19.1… fa0fa3bc47fa629d888684fa227ff71a ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/libsmbclient-3.0.23d-19.10.… c74f98dd6a181f3c7fe5c8bc2f7dec79 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/libsmbclient-devel-3.0.23d-… fc45c4a50432cde21c08440c4b45b22a ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-3.0.23d-19.10.ppc.rpm 20fc3dfeaabb2b52d76e8d993ded89db ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-client-3.0.23d-19.10.… 8257c799f755c1e5a4384c9e9c20d235 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-krb-printing-3.0.23d-… b799e145e3aedbeb5a6e75775861cbe4 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-pdb-3.0.23d-19.10.ppc… 1ea46758cf6ecb184fa8b1907dfdca74 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-python-3.0.23d-19.10.… 3bd22f16534a31e9104a3c088d8aee80 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-vscan-0.3.6b-98.8.ppc… 1f78074b3a7b77f432388c05ddc3d14e ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-winbind-3.0.23d-19.10… c17e608b1b9482d27edb234043e17d3d SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/cifs-mount-3.0.22-13.36.ppc… 7bc15580657e490d7fc463b409153c41 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/ldapsmb-1.34a-18.32.ppc.rpm 0aac5cf5cf83b1f75faa0de6a42f3d9c ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/libmsrpc-3.0.22-13.36.ppc.r… 49c54ca562b28e2e004bdf9f63f4200a ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/libmsrpc-devel-3.0.22-13.36… 8501c3db58735d980adcdcc20f04c254 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/libsmbclient-3.0.22-13.36.p… a9be46f3a9255fc4064bba1cd56fc2c1 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/libsmbclient-devel-3.0.22-1… 815654df8fcfc6d6c36b489d977dcb43 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-3.0.22-13.36.ppc.rpm abbb54105d90fb535d30cbc186e5660d ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-client-3.0.22-13.36.p… 1f53014fcd14b7f16aa3cabb27d36dce ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-pdb-3.0.22-13.36.ppc.… 0074d970fec25817a99ccc8d7c80a124 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-python-3.0.22-13.36.p… 29eb937b609e6f5e421f3cc90cc2bc19 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-vscan-0.3.6b-42.63.pp… fa80b835a0a26032df5752de81cc0299 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-winbind-3.0.22-13.36.… fb6850e265d104b11f491eb57d061cd1 SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/cifs-mount-3.0.20b-3.1… d8d7f212df361caa4865cee733fc9dec ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/ldapsmb-1.33-6.17.ppc.… caf36453cd29a27ff1402d2a0b8e2273 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/libsmbclient-3.0.20b-3… e7fb337f1360d8fc8afc6d552e734062 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/libsmbclient-devel-3.0… 8eb2585161daff25ade8584897a4a9dc ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-3.0.20b-3.17.ppc… e056c2e9516d6835783734a854f33f5b ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-client-3.0.20b-3… a3e7d280318dc4284813bcc61f619d30 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-doc-3.0.20b-3.17… f2d60bda261a466558af3bc2aa9ac96e ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-pdb-3.0.20b-3.17… 1ccc2adbbbf0adab5972f132f384a243 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-python-3.0.20b-3… 239c68b7f241056dd69470e2cedcd44d ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-vscan-0.3.6b-4.1… 9074a6835b98944586b3108a4e277e3b ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-winbind-3.0.20b-… 0edd15eccfa3382011945c379e951285 x86-64 Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/cifs-mount… 0250de54adf2e2e49e9808052bf3fde1 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/ldapsmb-1.… 34cdf9014e403e9f27dd5ed703d1fef4 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libmsrpc-3… a8fae2da33edad69e10328ac63484f0a http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libmsrpc-d… 781c82df3171f48f85c3b3d0cc682dee http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbclie… aec9cdee7c7092547576ab63efa54bba http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbclie… 6638bb3dc260636d8e7feedd215d5ae8 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbclie… 5bd7d582930c1ef779c0963358f1a2c3 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbshar… ce2142b13a69d61ffdf73edac3f27211 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbshar… 59938a005792947cb71489d0670e9c69 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-3.0.… fa1e1004d27fb371955e6418d2552a05 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-32bi… cb6fdbf7f83c7eab24b8d40cd5c19d31 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-clie… 13feb6dc1cc9fbedbc08cd874234c8a0 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-clie… 8da1a6ba404580186c19cc5ab8f7319a http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-deve… 49bb1f30af2224b30e5b0e427d046ed5 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-krb-… 10f587e53369ea87b972fbd24df00015 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-pyth… f9072b255947e482455544e64cb6eeda http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-vsca… 798c6004e42cc5deb79ac3fc159e68fd http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-winb… 818b94de1ea8c8cc7bb1bef7225dff10 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-winb… fcdde97dd2332dbbcac5bfe437ddf605 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/cifs-mount-3.0.23d-19.10… 75c9dd1cbd9a4aaae9fa0b5e066ebc6c ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/ldapsmb-1.34b-27.8.x86_6… 33225047fd763d6d6a21185e2cdb9787 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libmsrpc-3.0.23d-19.10.x… 3456307ba1bf5960fc31cfb5e78ec73b ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libmsrpc-devel-3.0.23d-1… e09bbc56323bc22a094ee4449be363ef ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libsmbclient-3.0.23d-19.… f845b7165577251649e14bc7ca760518 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libsmbclient-32bit-3.0.2… 895e9e3837ea5da9ef4c74eb155d50e5 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libsmbclient-devel-3.0.2… ead13aa6956de22826a391b575f7e5ad ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-3.0.23d-19.10.x86_… 6bb77019fc3ca84b3004d69a4210c219 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-32bit-3.0.23d-19.1… d41110c83caf90883d68253a03f56cb9 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-client-3.0.23d-19.… a27ca2d2a37691403d77e98fabdf6eae ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-client-32bit-3.0.2… 27b16c5a86d629126c092fa16f2b4dbc ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-krb-printing-3.0.2… ce42563a00b1bcc96e8081c94d907125 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-pdb-3.0.23d-19.10.… bc63ec7af7550f0a32e40eab5da3bafc ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-python-3.0.23d-19.… 8f54b8d4ba6471b972103add0f2cfa20 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-vscan-0.3.6b-98.8.… 176c2eab8b43e7bf11657a79a3731c9b ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-winbind-3.0.23d-19… 5877c0603f92d5e20444efec794f353b ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-winbind-32bit-3.0.… 96430ab5cf73ca69b197a6472302e85a SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/cifs-mount-3.0.22-13.36.… 61f05d68428c52f0d57716d6d62709e8 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/ldapsmb-1.34a-18.32.x86_… 0803b872488e152fae33f5bf1275b9b1 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libmsrpc-3.0.22-13.36.x8… cd10ab26a88cda6662c0d1713f4a4e3d ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libmsrpc-devel-3.0.22-13… 13495741022e073b3c472bfe1a9c7c6d ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libsmbclient-3.0.22-13.3… dd085255e5fd7be2c828986a9f13cf19 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libsmbclient-32bit-3.0.2… 3c62d4438255d17614141779738e5658 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libsmbclient-devel-3.0.2… 86ec9fd15372f8a7ee22032fab26ebcb ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-3.0.22-13.36.x86_6… 4922fb3414d40b886277b2d0d49dc3a6 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-32bit-3.0.22-13.36… 173c364b3d412e93091e232b61bd9357 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-client-3.0.22-13.3… 3a46b6ca7b50724f8a6ee7a459942737 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-client-32bit-3.0.2… 4d48fda160f9273b429fc330b1fa660c ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-pdb-3.0.22-13.36.x… 3a0ff7f2ca260c75d48dcb64bf5b9738 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-python-3.0.22-13.3… e3a150973083a86aab1aa69892c48d61 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-vscan-0.3.6b-42.63… aff6c7c9065e95f8759e2f37dfb29bd1 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-winbind-3.0.22-13.… 0d25dddefc48bf4884ffa8a6f71adbce ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-winbind-32bit-3.0.… 7a9b0a8e151a345abe93d7e159dfc3c7 SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/cifs-mount-3.0.20b-… 235c616cc45e73bf7ba8ae355586a9e0 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/ldapsmb-1.33-6.17.x… 6ff2cc6b8e9fab4a2ae4e3f8b71f6355 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/libsmbclient-3.0.20… 8a93258c7cd76c74dc52108a33debb42 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/libsmbclient-32bit-… 5d1cec6db7ab0117fffe7298a3b93674 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/libsmbclient-devel-… cd77633f2483244045b04ff537d86b1e ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-3.0.20b-3.17.… ee57327f97331acca368b29dbf373539 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-client-3.0.20… 9606a2ff36bedebbb58f3ca5d4942c6d ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-doc-3.0.20b-3… 9933661bee10627949a0f4265de66460 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-pdb-3.0.20b-3… 04badcfe4a39ab6d7ef8e8f732483a9f ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-python-3.0.20… 5fb14175c631ab41136d54bb8ef5ac2c ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-vscan-0.3.6b-… c91cc42dd45e8c0830f734fff805e099 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-winbind-3.0.2… 88ae6b69f90a6c36124f197ad67a6e6e Sources: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/samba-3.0.26a… 377b122f8a797b73fa289a6863e0f6c9 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/samba-doc-3.0… 9459f613ca8a1feeb1bb76cdc843c8f5 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/samba-3.0.23d-19.10.src.rpm 02d13237b7a9fd3bf3bd3fd6d8b25fac ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/samba-doc-3.0.23d-19.7.nosr… 617364e094a2044cc011d44221dad060 SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/samba-3.0.22-13.36.src.rpm e809cb2ec420d242aaab06df79ed1a28 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/samba-doc-3.0.22-20.50.nosr… 89ae8b67d0e65efdb451ab408a5c36c2 SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/samba-3.0.20b-3.17.src… a159ce0e9ac9e5700ffd08f5e9287a67 Our maintenance customers are notified individually. The packages are offered for installation from the maintenance web: Open Enterprise Server http://support.novell.com/techcenter/psdb/a8a615405c62005f443b3e34d922d381.… Novell Linux POS 9 http://support.novell.com/techcenter/psdb/a8a615405c62005f443b3e34d922d381.… Novell Linux Desktop 9 http://support.novell.com/techcenter/psdb/a8a615405c62005f443b3e34d922d381.… SUSE SLES 9 http://support.novell.com/techcenter/psdb/a8a615405c62005f443b3e34d922d381.… UnitedLinux 1.0 http://support.novell.com/techcenter/psdb/4aacd60f39d38eea0965ae4a284e6214.… SuSE Linux Openexchange Server 4 http://support.novell.com/techcenter/psdb/4aacd60f39d38eea0965ae4a284e6214.… SuSE Linux Enterprise Server 8 http://support.novell.com/techcenter/psdb/4aacd60f39d38eea0965ae4a284e6214.… SuSE Linux Standard Server 8 http://support.novell.com/techcenter/psdb/4aacd60f39d38eea0965ae4a284e6214.… SuSE Linux School Server http://support.novell.com/techcenter/psdb/4aacd60f39d38eea0965ae4a284e6214.… SUSE LINUX Retail Solution 8 http://support.novell.com/techcenter/psdb/4aacd60f39d38eea0965ae4a284e6214.… SuSE Linux Desktop 1.0 http://support.novell.com/techcenter/psdb/4aacd60f39d38eea0965ae4a284e6214.… SUSE Linux Enterprise Server 10 SP1 http://support.novell.com/techcenter/psdb/fbb935b5e53729bf34003933950a015a.… SLE SDK 10 SP1 http://support.novell.com/techcenter/psdb/fbb935b5e53729bf34003933950a015a.… SUSE Linux Enterprise Desktop 10 SP1 http://support.novell.com/techcenter/psdb/fbb935b5e53729bf34003933950a015a.… ______________________________________________________________________________ 5) Pending Vulnerabilities, Solutions, and Work-Arounds: Please consult the weekly summary report. ______________________________________________________________________________ 6) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify <file> replacing <file> with the name of the file where you saved the announcement. The output for a valid signature looks like: gpg: Signature made <DATE> using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team <security(a)suse.de>" where <DATE> is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and the integrity of a package needs to be verified to ensure that it has not been tampered with. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or RPM package: 1) Using the internal gpg signatures of the rpm package 2) MD5 checksums as provided in this announcement 1) The internal rpm package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig <file.rpm> to verify the signature of the package, replacing <file.rpm> with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from build(a)suse.de with the key ID 9C800ACA. This key is automatically imported into the RPM database (on RPMv4-based distributions) and the gpg key ring of 'root' during installation. You can also find it on the first installation CD and at the end of this announcement. 2) If you need an alternative means of verification, use the md5sum command to verify the authenticity of the packages. Execute the command md5sum <filename.rpm> after you downloaded the file from a SUSE FTP server or its mirrors. Then compare the resulting md5sum with the one that is listed in the SUSE security announcement. Because the announcement containing the checksums is cryptographically signed (by security(a)suse.de) the checksums show proof of the authenticity of the package if the signature of the announcement is valid. Note that the md5 sums published in the SUSE Security Announcements are valid for the respective packages only. Newer versions of these packages cannot be verified. - SUSE runs two security mailing lists to which any interested party may subscribe: opensuse-security(a)opensuse.org - General Linux and SUSE security discussion. All SUSE security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security+subscribe(a)opensuse.org>. opensuse-security-announce(a)opensuse.org - SUSE's announce-only mailing list. Only SUSE's security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security-announce+subscribe(a)opensuse.org>. ===================================================================== SUSE's security contact is <security(a)suse.com> or <security(a)suse.de>. The <security(a)suse.de> public key is listed below. ===================================================================== ______________________________________________________________________________ The information in this advisory may be distributed or reproduced, provided that the advisory is not modified in any way. In particular, the clear text signature should show proof of the authenticity of the text. SUSE Linux Products GmbH provides no warranties of any kind whatsoever with respect to the information contained in this security advisory. Type Bits/KeyID Date User ID pub 2048R/3D25D3D9 1999-03-06 SuSE Security Team <security(a)suse.de> pub 1024D/9C800ACA 2000-10-19 SuSE Package Signing Key <build(a)suse.de> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.2 (GNU/Linux) mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh 1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+ cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7 tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63 Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+ x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0 Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2 saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o L0oixF12CohGBBARAgAGBQI7HmHDAAoJEJ5A4xAACqukTlQAoI4QzP9yjPohY7OU F7J3eKBTzp25AJ42BmtSd3pvm5ldmognWF3Trhp+GYkAlQMFEDe3O8IWkDf+zvyS FQEBAfkD/3GG5UgJj18UhYmh1gfjIlDcPAeqMwSytEHDENmHC+vlZQ/p0mT9tPiW tp34io54mwr+bLPN8l6B5GJNkbGvH6M+mO7R8Lj4nHL6pyAv3PQr83WyLHcaX7It Klj371/4yzKV6qpz43SGRK4MacLo2rNZ/dNej7lwPCtzCcFYwqkiiEYEEBECAAYF AjoaQqQACgkQx1KqMrDf94ArewCfWnTUDG5gNYkmHG4bYL8fQcizyA4An2eVo/n+ 3J2KRWSOhpAMsnMxtPbBmQGiBDnu9IERBACT8Y35+2vv4MGVKiLEMOl9GdST6MCk YS3yEKeueNWc+z/0Kvff4JctBsgs47tjmiI9sl0eHjm3gTR8rItXMN6sJEUHWzDP +Y0PFPboMvKx0FXl/A0dM+HFrruCgBlWt6FA+okRySQiliuI5phwqkXefl9AhkwR 8xocQSVCFxcwvwCglVcOQliHu8jwRQHxlRE0tkwQQI0D+wfQwKdvhDplxHJ5nf7U 8c/yE/vdvpN6lF0tmFrKXBUX+K7u4ifrZlQvj/81M4INjtXreqDiJtr99Rs6xa0S cZqITuZC4CWxJa9GynBED3+D2t1V/f8l0smsuYoFOF7Ib49IkTdbtwAThlZp8bEh ELBeGaPdNCcmfZ66rKUdG5sRA/9ovnc1krSQF2+sqB9/o7w5/q2qiyzwOSTnkjtB UVKn4zLUOf6aeBAoV6NMCC3Kj9aZHfA+ND0ehPaVGJgjaVNFhPi4x0e7BULdvgOo AqajLfvkURHAeSsxXIoEmyW/xC1sBbDkDUIBSx5oej73XCZgnj/inphRqGpsb+1n KFvF+rQoU3VTRSBQYWNrYWdlIFNpZ25pbmcgS2V5IDxidWlsZEBzdXNlLmRlPohi BBMRAgAiBQJA2AY+AhsDBQkObd+9BAsHAwIDFQIDAxYCAQIeAQIXgAAKCRCoTtro nIAKypCfAJ9RuZ6ZSV7QW4pTgTIxQ+ABPp0sIwCffG9bCNnrETPlgOn+dGEkAWeg KL+IRgQQEQIABgUCOnBeUgAKCRCeQOMQAAqrpNzOAKCL512FZvv4VZx94TpbA9lx yoAejACeOO1HIbActAevk5MUBhNeLZa/qM2JARUDBRA6cGBvd7LmAD0l09kBATWn B/9An5vfiUUE1VQnt+T/EYklES3tXXaJJp9pHMa4fzFa8jPVtv5UBHGee3XoUNDV wM2OgSEISZxbzdXGnqIlcT08TzBUD9i579uifklLsnr35SJDZ6ram51/CWOnnaVh UzneOA9gTPSr+/fT3WeVnwJiQCQ30kNLWVXWATMnsnT486eAOlT6UNBPYQLpUprF 5Yryk23pQUPAgJENDEqeU6iIO9Ot1ZPtB0lniw+/xCi13D360o1tZDYOp0hHHJN3 D3EN8C1yPqZd5CvvznYvB6bWBIpWcRgdn2DUVMmpU661jwqGlRz1F84JG/xe4jGu zgpJt9IXSzyohEJB6XG5+D0BuQINBDnu9JIQCACEkdBN6Mxf5WvqDWkcMRy6wnrd 9DYJ8UUTmIT2iQf07tRUKJJ9v0JXfx2Z4d08IQSMNRaq4VgSe+PdYgIy0fbj23Vi a5/gO7fJEpD2hd2f+pMnOWvH2rOOIbeYfuhzAc6BQjAKtmgR0ERUTafTM9Wb6F13 CNZZNZfDqnFDP6L12w3z3F7FFXkz07Rs3AIto1ZfYZd4sCSpMr/0S5nLrHbIvGLp 271hhQBeRmmoGEKO2JRelGgUJ2CUzOdtwDIKT0LbCpvaP8PVnYF5IFoYJIWRHqlE t5ucTXstZy7vYjL6vTP4l5xs+LIOkNmPhqmfsgLzVo0UaLt80hOwc4NvDCOLAAMG B/9g+9V3ORzw4LvO1pwRYJqfDKUq/EJ0rNMMD4N8RLpZRhKHKJUm9nNHLbksnlZw rbSTM5LpC/U6sheLP+l0bLVoq0lmsCcUSyh+mY6PxWirLIWCn/IAZAGnXb6Zd6Tt IJlGG6pqUN8QxGJYQnonl0uTJKHJENbI9sWHQdcTtBMc34gorHFCo1Bcvpnc1LFL rWn7mfoGx6INQjf3HGQpMXAWuSBQhzkazY6vaWFpa8bBJ+gKbBuySWzNm3rFtT5H RKMWpO+M9bHp4d+puY0L1YwN1OMatcMMpcWnZpiWiR83oi32+xtWUY2U7Ae38mMa g8zFbpeqPQUsDv9V7CAJ1dbriEwEGBECAAwFAkDYBnoFCQ5t3+gACgkQqE7a6JyA CspnpgCfRbYwxT3iq+9l/PgNTUNTZOlof2oAn25y0eGi0371jap9kOV6uq71sUuO =ypVs - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iQEVAwUBR1a2r3ey5gA9JdPZAQI5sAgAhOGYRIfJNevhvw3rCXfldbG5lsU9dlV/ 7BN6rEPWicYKKL21wUPrls6x0Vl4kvexguszbZA9AGmNecN5cY/6ZLFTEwg9R51z ZTGWyaxvPSxFbd1kz/sk6e/icgwGYZS+uRkK+Iqb3tTzCz2lOiHrGUNLDuNWUdjr oQ+oZmaPXgPZEPGwB5qxy7lr3fqT2MyI1CcEighmO6aVoPKW5sQzR03NebaEXKHH Tk1IXOYSW2tlxeak1nfoNwb3Q3L/qOz7Fdq7GDay4Ptyo2JQ3Z+dL6kf8Jfy02jP Lh6u6EuZvvO4lWYa2cWonHlXEzgdSA+MIpyKgUZBDBygcQQZWPjRJQ== =cY7F -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE Security Summary Report SUSE-SR:2007:025
by Marcus Meissner 05 Dec '07

05 Dec '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Summary Report Announcement ID: SUSE-SR:2007:025 Date: Wed, 05 Dec 2007 12:00:00 +0000 Cross-References: CVE-2007-1659, CVE-2007-1660, CVE-2007-5198 CVE-2007-5269, CVE-2007-5380, CVE-2007-5497 CVE-2007-5623, CVE-2007-5846, CVE-2007-6109 CVE-2007-6110, CVE-2007-6130 Content of this advisory: 1) Solved Security Vulnerabilities: - net-snmp denial of service problems - htdig XSS attacks - e2fsprogs overflows in libext2fs - nagios-plugins security problems - libpng denial of service problem - emacs overflow in command line - rubygem-actionpack session access - gnump3d restriction bypass - glib2 affected by PCRE problems 2) Pending Vulnerabilities, Solutions, and Work-Arounds: - None listed this week. 3) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Solved Security Vulnerabilities To avoid flooding mailing lists with SUSE Security Announcements for minor issues, SUSE Security releases weekly summary reports for the low profile vulnerability fixes. The SUSE Security Summary Reports do not list md5 sums or download URLs like the SUSE Security Announcements that are released for more severe vulnerabilities. Fixed packages for the following incidents are already available on our FTP server and via the YaST Online Update. - net-snmp denial of service problems Net-snmp was updated to fix the following bugs: - default and configurable maximum number of varbinds returnable to a GETBULK request (CVE-2007-5846) - crash when smux peers were configured with empty passwords - the UCD-SNMP-MIB::memCached.0 SNMP object was missing - the snmptrap command from the net-snmp package sends traps per default on the wrong port. - htdig XSS attacks A flaw in the htsearch Program could be exploited by attackers to conduct cross site scripting (XSS) attacks. (CVE-2007-6110) - e2fsprogs overflows in libext2fs e2fsprogs has been updated to fix several integer overflows in memory allocating code. Programs that use libext2fs are therefore vulnerable to memory corruptions that can lead to arbitrary code execution while loading a specially crafted image. (CVE-2007-5497) Updates have been provided for all SUSE Linux based products. - nagios-plugins security problems Two security problems in Nagios plugins were fixed for all SUSE Linux based distributions: - fixed possible buffer overflow during HTTP Location header parsing in check_http (CVE-2007-5198) - fixed possible buffer overflow during snmpget parsing in check_snmp (CVE-2007-5623) - libpng denial of service problem A security problem in libpng was fixed where specially crafted PNG files could crash applications attempting to open such a file (CVE-2007-5269). Updated packages have been releases for all distributions. - emacs overflow in command line A buffer overflow was fixed in emacs that can be triggered over the command-line (CVE-2007-6109). Updates have been released for all distributions containing emacs. - rubygem-actionpack session access A security problem in the Ruby on Rails package rubygem-actionpack was fixed, where malicious users could specify their session-ID in the URL and so could gain access to an authenticated session that way (CVE-2007-5380). The package was fixed in openSUSE 10.3 and SUSE Linux Enterprise 10. - gnump3d restriction bypass A restriction bypass in plugins of the gnump3d package was fixed. (CVE-2007-6130) Updated packages have been provided for SUSE Linux 10.1, openSUSE 10.2 and 10.3. - glib2 affected by PCRE problems glib2 on openSUSE 10.3 included a copy of the PCRE library. This copy has been disabled and glib2 is now linking against the system PCRE, which has those problems fixed. (CVE-2007-1659, CVE-2007-1660) ______________________________________________________________________________ 2) Pending Vulnerabilities, Solutions, and Work-Arounds None listed this week. ______________________________________________________________________________ 3) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify <file> replacing <file> with the name of the file containing the announcement. The output for a valid signature looks like: gpg: Signature made <DATE> using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team <security(a)suse.de>" where <DATE> is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and integrity of a package needs to be verified to ensure that it has not been tampered with. The internal RPM package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig <file.rpm> to verify the signature of the package, replacing <file.rpm> with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from build(a)suse.de with the key ID 9C800ACA. This key is automatically imported into the RPM database (on RPMv4-based distributions) and the gpg key ring of 'root' during installation. You can also find it on the first installation CD and included at the end of this announcement. - SUSE runs two security mailing lists to which any interested party may subscribe: opensuse-security(a)opensuse.org - General Linux and SUSE security discussion. All SUSE security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security+subscribe(a)opensuse.org>. opensuse-security-announce(a)opensuse.org - SUSE's announce-only mailing list. Only SUSE's security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security-announce+subscribe(a)opensuse.org>. ===================================================================== SUSE's security contact is <security(a)suse.com> or <security(a)suse.de>. The <security(a)suse.de> public key is listed below. ===================================================================== ______________________________________________________________________________ The information in this advisory may be distributed or reproduced, provided that the advisory is not modified in any way. In particular, the clear text signature should show proof of the authenticity of the text. SUSE Linux Products GmbH provides no warranties of any kind whatsoever with respect to the information contained in this security advisory. Type Bits/KeyID Date User ID pub 2048R/3D25D3D9 1999-03-06 SuSE Security Team <security(a)suse.de> pub 1024D/9C800ACA 2000-10-19 SuSE Package Signing Key <build(a)suse.de> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.2 (GNU/Linux) mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh 1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+ cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7 tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63 Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+ x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0 Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2 saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o L0oixF12CohGBBARAgAGBQI7HmHDAAoJEJ5A4xAACqukTlQAoI4QzP9yjPohY7OU F7J3eKBTzp25AJ42BmtSd3pvm5ldmognWF3Trhp+GYkAlQMFEDe3O8IWkDf+zvyS FQEBAfkD/3GG5UgJj18UhYmh1gfjIlDcPAeqMwSytEHDENmHC+vlZQ/p0mT9tPiW tp34io54mwr+bLPN8l6B5GJNkbGvH6M+mO7R8Lj4nHL6pyAv3PQr83WyLHcaX7It Klj371/4yzKV6qpz43SGRK4MacLo2rNZ/dNej7lwPCtzCcFYwqkiiEYEEBECAAYF AjoaQqQACgkQx1KqMrDf94ArewCfWnTUDG5gNYkmHG4bYL8fQcizyA4An2eVo/n+ 3J2KRWSOhpAMsnMxtPbBmQGiBDnu9IERBACT8Y35+2vv4MGVKiLEMOl9GdST6MCk YS3yEKeueNWc+z/0Kvff4JctBsgs47tjmiI9sl0eHjm3gTR8rItXMN6sJEUHWzDP +Y0PFPboMvKx0FXl/A0dM+HFrruCgBlWt6FA+okRySQiliuI5phwqkXefl9AhkwR 8xocQSVCFxcwvwCglVcOQliHu8jwRQHxlRE0tkwQQI0D+wfQwKdvhDplxHJ5nf7U 8c/yE/vdvpN6lF0tmFrKXBUX+K7u4ifrZlQvj/81M4INjtXreqDiJtr99Rs6xa0S cZqITuZC4CWxJa9GynBED3+D2t1V/f8l0smsuYoFOF7Ib49IkTdbtwAThlZp8bEh ELBeGaPdNCcmfZ66rKUdG5sRA/9ovnc1krSQF2+sqB9/o7w5/q2qiyzwOSTnkjtB UVKn4zLUOf6aeBAoV6NMCC3Kj9aZHfA+ND0ehPaVGJgjaVNFhPi4x0e7BULdvgOo AqajLfvkURHAeSsxXIoEmyW/xC1sBbDkDUIBSx5oej73XCZgnj/inphRqGpsb+1n KFvF+rQoU3VTRSBQYWNrYWdlIFNpZ25pbmcgS2V5IDxidWlsZEBzdXNlLmRlPohi BBMRAgAiBQJA2AY+AhsDBQkObd+9BAsHAwIDFQIDAxYCAQIeAQIXgAAKCRCoTtro nIAKypCfAJ9RuZ6ZSV7QW4pTgTIxQ+ABPp0sIwCffG9bCNnrETPlgOn+dGEkAWeg KL+IRgQQEQIABgUCOnBeUgAKCRCeQOMQAAqrpNzOAKCL512FZvv4VZx94TpbA9lx yoAejACeOO1HIbActAevk5MUBhNeLZa/qM2JARUDBRA6cGBvd7LmAD0l09kBATWn B/9An5vfiUUE1VQnt+T/EYklES3tXXaJJp9pHMa4fzFa8jPVtv5UBHGee3XoUNDV wM2OgSEISZxbzdXGnqIlcT08TzBUD9i579uifklLsnr35SJDZ6ram51/CWOnnaVh UzneOA9gTPSr+/fT3WeVnwJiQCQ30kNLWVXWATMnsnT486eAOlT6UNBPYQLpUprF 5Yryk23pQUPAgJENDEqeU6iIO9Ot1ZPtB0lniw+/xCi13D360o1tZDYOp0hHHJN3 D3EN8C1yPqZd5CvvznYvB6bWBIpWcRgdn2DUVMmpU661jwqGlRz1F84JG/xe4jGu zgpJt9IXSzyohEJB6XG5+D0BuQINBDnu9JIQCACEkdBN6Mxf5WvqDWkcMRy6wnrd 9DYJ8UUTmIT2iQf07tRUKJJ9v0JXfx2Z4d08IQSMNRaq4VgSe+PdYgIy0fbj23Vi a5/gO7fJEpD2hd2f+pMnOWvH2rOOIbeYfuhzAc6BQjAKtmgR0ERUTafTM9Wb6F13 CNZZNZfDqnFDP6L12w3z3F7FFXkz07Rs3AIto1ZfYZd4sCSpMr/0S5nLrHbIvGLp 271hhQBeRmmoGEKO2JRelGgUJ2CUzOdtwDIKT0LbCpvaP8PVnYF5IFoYJIWRHqlE t5ucTXstZy7vYjL6vTP4l5xs+LIOkNmPhqmfsgLzVo0UaLt80hOwc4NvDCOLAAMG B/9g+9V3ORzw4LvO1pwRYJqfDKUq/EJ0rNMMD4N8RLpZRhKHKJUm9nNHLbksnlZw rbSTM5LpC/U6sheLP+l0bLVoq0lmsCcUSyh+mY6PxWirLIWCn/IAZAGnXb6Zd6Tt IJlGG6pqUN8QxGJYQnonl0uTJKHJENbI9sWHQdcTtBMc34gorHFCo1Bcvpnc1LFL rWn7mfoGx6INQjf3HGQpMXAWuSBQhzkazY6vaWFpa8bBJ+gKbBuySWzNm3rFtT5H RKMWpO+M9bHp4d+puY0L1YwN1OMatcMMpcWnZpiWiR83oi32+xtWUY2U7Ae38mMa g8zFbpeqPQUsDv9V7CAJ1dbriEwEGBECAAwFAkDYBnoFCQ5t3+gACgkQqE7a6JyA CspnpgCfRbYwxT3iq+9l/PgNTUNTZOlof2oAn25y0eGi0371jap9kOV6uq71sUuO =ypVs - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4-svn0 (GNU/Linux) iQEVAwUBR1a0DHey5gA9JdPZAQLrJgf/WCw4/kC6MV1CcRhqvnNNXbB+GKjbL7Xa Yca7Dl761Ep7CGnhBve/rmFXSWniXskmXexLxPPnGbG2I2YA7+sKlBI1nOoUQ8yt nF09V18rNmRdK28hywBfINbyUyUf7/DSmu3CvCnfb3EQeSiWAQZGDrG5VSx+2AmN /X6Y3bs1B9/B0Ea6vKPBaaOdfGTQw3exRmrew0bK/AOi2av286mNa0nY/b/0WLT7 MQS3yIujIYCBMy0+BkInHpydsqSeUr5KqEu8mawpdOXMuVcORzOiOjmeoLS8TSed vpUKX6AAEnu4q/CRSDLHJvbLHClDV74FKfP0tYHkyM7VSP8cWqCbGQ== =GaN3 -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE Security Announcement: Linux kernel (SUSE-SA:2007:064)
by Marcus Meissner 04 Dec '07

04 Dec '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Announcement Package: kernel Announcement ID: SUSE-SA:2007:064 Date: Tue, 04 Dec 2007 11:00:00 +0000 Affected Products: SUSE LINUX 10.1 SUSE Linux Enterprise Desktop 10 SP1 SUSE Linux Enterprise 10 SP1 DEBUGINFO SLE SDK 10 SP1 SUSE Linux Enterprise Server 10 SP1 Vulnerability Type: remote denial of service Severity (1-10): 9 SUSE Default Package: yes Cross-References: CVE-2007-3104, CVE-2007-3740, CVE-2007-3843 CVE-2007-4308, CVE-2007-4573, CVE-2007-4997 CVE-2007-5904, CVE-2007-6063 Content of This Advisory: 1) Security Vulnerability Resolved: Kernel bugfix and security update Problem Description 2) Solution or Work-Around 3) Special Instructions and Notes 4) Package Location and Checksums 5) Pending Vulnerabilities, Solutions, and Work-Arounds: See SUSE Security Summary Report. 6) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Problem Description and Brief Discussion This kernel update fixes the following security problems: - CVE-2007-3104: The sysfs_readdir function in the Linux kernel 2.6 allows local users to cause a denial of service (kernel OOPS) by dereferencing a null pointer to an inode in a dentry. - CVE-2007-4997: A 2 byte buffer underflow in the ieee80211 stack was fixed, which might be used by attackers in the local WLAN reach to crash the machine. - CVE-2007-3740: The CIFS filesystem, when Unix extension support is enabled, did not honor the umask of a process, which allowed local users to gain privileges. - CVE-2007-4573: It was possible for local user to become root by exploiting a bug in the IA32 system call emulation. This problem affects the x86_64 platform only, on all distributions. This problem was fixed for regular kernels, but had not been fixed for the XEN kernels. This update fixes the problem also for the XEN kernels. - CVE-2007-4308: The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid did not check permissions for ioctls, which might have allowed local users to cause a denial of service or gain privileges. - CVE-2007-3843: The Linux kernel checked the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request. - CVE-2007-5904: Multiple buffer overflows in CIFS VFS in the Linux kernel allowed remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function. This requires the attacker to mis-present / replace a CIFS server the client machine is connected to. Also the exploitability of this problem is not known. - CVE-2007-6063: Buffer overflow in the isdn_net_setcfg function in isdn_net.c in the Linux kernel allowed local users to have an unknown impact via a crafted argument to the isdn_ioctl function. and the following non security bugs: - patches.drivers/pci-delete-ACPI-hook-from-pci_set_power_state.patch: Delete ACPI hook from pci_set_power_state() [#162320] Still execute the code on Lenovo ThinkPads (or USB ports do not work anymore after suspend [#329232] - patches.drivers/alsa-post-sp1-hda-probe-blacklist: [ALSA] hda-intel - Add probe_mask blacklist [#172330] - patches.drivers/alsa-post-sp1-hda-robust-probe: [ALSA] hda-intel - Improve HD-audio codec probing robustness [#172330] - patches.arch/i386-hpet-lost-interrupts-fix.patch: Backport i386 hpet lost interrupts code [#257035] - patches.fixes/megaraid_mbox-dell-cerc-support: Dell CERC support for megaraid_mbox [#267134] - patches.fixes/nfsv4-MAXNAME-fix.diff: knfsd: query filesystem for NFSv4 getattr of FATTR4_MAXNAME [#271803] - patches.drivers/ide-amd74xx-add-ignore_enablebits-parameter: amd74xx: add ignore_enable_bits module parameter [#272786] - patches.fixes/legacy-pty-count-kernel-parm.patch: Add a kernel boot parameter to overwrite the legacy PTY count. The default value of 64 is insufficient occasionally [#277846] - patches.fixes/lockd-grant-shutdown: Stop GRANT callback from crashing if NFS server has been stopped. [#292478] - Kernel update to 2.6.16.54 [#298719] including (among others): + lots of md fixes + fix of sparc bugs + fix of TCP handling of SACK in bidirectional flows + fix of MCA bus matching + fix of PPC issues: * Fix osize too small errors when decoding mppe. * Fix output buffer size in ppp_decompress_frame(). - patches.fixes/assign-task_struct.exit_code-before-taskstats_exit.patch: Assign task_struct.exit_code before taskstats_exit() [#307504] - patches.fixes/bonding_no_addrconf_for_bond_slaves: bonding / ipv6: no addrconf for slaves separately from master. [#310254] - patches.fixes/bonding_support_carrier_state_for_master: bonding: support carrier state for master [#310254] - patches.fixes/fix-sys-devices-system-node-node0-meminfo-from-having-anonpages-wrapped.patch: fix /sys/devices/system/node/node0/meminfo from having anonpages wrapped [#310744] - patches.fixes/nfs-remove-bogus-cache-change-attribute-check.diff fix bogus cache change to make data available immediately, on direct write [#325877] - patches.fixes/tcp-send-ACKs-each-2nd-received-segment.patch: Send ACKs each 2nd received segment. This fixes a problem where the tcp cubic congestion algorithm was too slow in converging [#327848] - patches.drivers/libata-fix-spindown: libata: fix disk spindown on shutdown [#330722] - patches.fixes/scsi-reset-resid: busy status on tape write results in incorrect residual [#330926] - patches.fixes/condense-output-of-show_free_areas.patch: Condense output of show_free_areas() [#331251] - patches.arch/powernowk8_family_freq_from_fiddid.patch: To find the frequency given the fid and did is family dependend. [#332722] - patches.fixes/tcp-saner-thash_entries-default.patch: Limit the size of the TCP established hash to 512k entries by default [#333273] - patches.drivers/alsa-emu10k1-spdif-mem-fix: [ALSA] emu10k1 - Fix memory corruption [#333314] - patches.drivers/alsa-post-sp1-hda-stac-error-fix: [ALSA] Fix error probing with STAC codecs [#333320] - patches.fixes/qla2xxx-avoid-duplicate-pci_disable_device: Fixup patch to not refer to stale pointer [#333542] - large backport of dm-crypt fixes: [#333905] + patches.fixes/dm-disable_barriers.diff: dm: disable barriers. + patches.fixes/dm-crypt-restructure_for_workqueue_change.diff + patches.fixes/dm-crypt-restructure_write_processing.diff + patches.fixes/dm-crypt-move_io_to_workqueue.diff + patches.fixes/dm-crypt-use_private_biosets.diff + patches.fixes/dm-crypt-fix_call_to_clone_init.diff + patches.fixes/dm-crypt-fix_avoid_cloned_bio_ref_after_free.diff + patches.fixes/dm-crypt-fix_remove_first_clone.diff + patches.fixes/dm-crypt-use_smaller_bvecs_in_clones.diff + patches.fixes/dm-crypt-fix_panic_on_large_request.diff - patches.fixes/initramfs-fix-cpio-hardlink-check.patch: initramfs: fix CPIO hardlink check [#334612] - patches.drivers/lpfc-8.1.10.12-update: driver update to fix severe issues in lpfc 8.1.10.9 driver [#334630] [#342044] - patches.fixes/nfs-direct-io-fix-1: NFS: Fix error handling in nfs_direct_write_result() [#336200] - patches.fixes/nfs-direct-io-fix-2: NFS: Fix a refcount leakage in O_DIRECT [#336200] - add patches.drivers/ibmvscsi-migration-login.patch prohibit IO during adapter login process [#337980] - patches.arch/acpi_thinkpad_brightness_fix.patch: Take care of latest Lenovo ThinkPad brightness control [#338274] [#343660] - patches.fixes/ramdisk-2.6.23-corruption_fix.diff: rd: fix data corruption on memory pressure [#338643] - patches.fixes/fc_transport-remove-targets-on-host-remove: memory use after free error in mptfc [#338730] - patches.fixes/ipmi-ipmi_msghandler.c-fix-a-memory-leak.patch: IPMI: ipmi_msghandler.c: fix a memory leak [#339413] - add patches.arch/ppc-pseries-rtas_ibm_suspend_me.patch fix multiple bugs in rtas_ibm_suspend_me code [#339927] - patches.fixes/nfsacl-retval.diff: knfsd: fix spurious EINVAL errors on first access of new filesystem [#340873] - patches.fixes/avm-fix-capilib-locking: [ISDN] Fix random hard freeze with AVM cards. [#341894] - patches.fixes/ipv6_rh_processing_fix: [IPV6]: Restore semantics of Routing Header processing [#343100] - The following set of XEN fixes has been applied: [#343612] + patches.xen/14280-net-fake-carrier-flag.patch: netfront: Better fix for netfront_tx_slot_available(). + patches.xen/14893-copy-more-skbs.patch: netback: Copy skbuffs that are presented to the start_xmit() function. + patches.xen/157-netfront-skb-deref.patch: net front: Avoid deref'ing skb after it is potentially freed. + patches.xen/263-xfs-unmap.patch: xfs: eagerly remove vmap mappings to avoid upsetting Xen. + patches.xen/xen-i386-set-fixmap: i386/PAE: avoid temporarily inconsistent pte-s. + patches.xen/xen-isa-dma: Suppress all use of ISA DMA on Xen. + patches.xen/xen-x86-panic-smp, + patches.xen/xen-netback-alloc, + patches.xen/xen-split-pt-lock, + patches.xen/137-netfront-copy-release.patch, + patches.xen/141-driver-autoload.patch, + patches.xen/xen-balloon-max-target, + patches.xen/xen-balloon-min, + patches.xen/xen-i386-highpte, + patches.xen/xen-intel-agp, + patches.xen/xen-multicall-check, + patches.xen/xen-x86-dcr-fallback, + patches.xen/xen-x86-pXX_val, + patches.xen/xen-x86-performance: Adjust. - patches.arch/acpi_backport_video.c.patch: Backport video driver from 2.6.23-rc9 [#343660] - patches.arch/acpi_find_bcl_support.patch: Store brightness/video functionality of ACPI provided by BIOS [#343660] Fixes for ia64: - patches.fixes/fix-the-graphic-corruption-issue-on-ia64-machines.patch: Fix the graphic corruption issue on IA64 machines [#241041] Fixes for S/390: - IBM Patchcluster 18 [#333421,#340129,#341000] - Problem-ID: 39323 - qeth: discard inbound packets with unknown header id - Problem-ID: 39542 - cio: Incorrect check for activity in cmf - Problem-ID: 38321 - kernel: Reboot of large z/VM guests takes a lot of time - Problem-ID: 40293 - kernel: pfault disabled - Problem-ID: 40296 - cio: change device sense procedure to work with PAV aliases - Problem-ID: 39981 - zfcp: Remove SCSI devices when removing complete adapter - Problem-ID: 40331 - zfcp: Deadlock when adding invalid LUN - Problem-ID: 40333 - zfcp: Reduce flood on hba trace - Fix kprobe on 'bc' instruction [#301563] For further description of the named Problem-IDs, please look to http://www-128.ibm.com/developerworks/linux/linux390/october2005_recommende… 2) Solution or Work-Around There is no known workaround, please install the update packages. 3) Special Instructions and Notes Please reboot the machine after the update. 4) Package Location and Checksums The preferred method for installing security updates is to use the YaST Online Update (YOU) tool. YOU detects which updates are required and automatically performs the necessary steps to verify and install them. Alternatively, download the update packages for your distribution manually and verify their integrity by the methods listed in Section 6 of this announcement. Then install the packages using the command rpm -Fhv <file.rpm> to apply the update, replacing <file.rpm> with the filename of the downloaded RPM package. x86 Platform: SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/kernel-bigsmp-2.6.16.54-0.… 6f15faaef5af308b725787c1d88f112a ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/kernel-debug-2.6.16.54-0.2… 9525009234aab6813f6f854a66b1d332 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/kernel-default-2.6.16.54-0… dd2efcc904dd0d3a29230b4254df5099 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/kernel-kdump-2.6.16.54-0.2… 98ce0faa78895190bf9e64a7e42f8102 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/kernel-smp-2.6.16.54-0.2.3… 6bd7536a4eac2167d0f84c1a7649b75c ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/kernel-source-2.6.16.54-0.… 1b90fdb176e5c70a9fecc566640fa431 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/kernel-syms-2.6.16.54-0.2.… f010441a631a2d7641e02c9fc7391623 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/kernel-um-2.6.16.54-0.2.3.… 7c4de26d65a353d98ede656a215c1465 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/kernel-xen-2.6.16.54-0.2.3… a68f1dd46146a368b595bbfa9e8974c3 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/kernel-xenpae-2.6.16.54-0.… 2dfcf234bcf43c80f7732a027f63474e Power PC Platform: SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/kernel-default-2.6.16.54-0.… 9dc8abfa4939e987cee59dcee1ad7eef ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/kernel-iseries64-2.6.16.54-… 94fecb76b7d1844555d2ad59b5cb11f7 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/kernel-kdump-2.6.16.54-0.2.… 29407fb5ea13920c576124fbfc7058f3 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/kernel-ppc64-2.6.16.54-0.2.… 6c2c816b200c862b5a0accf3606c0ecb ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/kernel-source-2.6.16.54-0.2… 6f3cbc3b1301b4a20fe9d31278eb2673 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/kernel-syms-2.6.16.54-0.2.3… 76da58e98bbb5c82d829228555ea9b30 x86-64 Platform: SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/kernel-debug-2.6.16.54-0… 79016901a4789fb33b576702366e4261 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/kernel-default-2.6.16.54… b4e1255f219f538b5216c0d2c48bc284 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/kernel-kdump-2.6.16.54-0… eca119a9f05615554a71b95ffd9ac19e ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/kernel-smp-2.6.16.54-0.2… 7039c9fa22a45ea85a5f8593c5e83240 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/kernel-source-2.6.16.54-… 6053ae084b5fd1aa8afc36f236a1c4ac ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/kernel-syms-2.6.16.54-0.… 05f59e6811aa70b503b480992d16b803 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/kernel-xen-2.6.16.54-0.2… 55055698c360d9141b19a78d16b2ce92 Sources: SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/kernel-bigsmp-2.6.16.54-0.2… 7d2b729a49e5f07751ab278e1e7f0e37 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/kernel-debug-2.6.16.54-0.2.… 3424b94d005cddc22edaaf2b3cfffb45 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/kernel-default-2.6.16.54-0.… 2bfe7bd219c63724e1b7291fce3f20bd ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/kernel-iseries64-2.6.16.54-… 2ee076e515f72cfc068f0190302555b5 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/kernel-kdump-2.6.16.54-0.2.… 715be91891a3f1d8a2db1f8175cd42a0 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/kernel-ppc64-2.6.16.54-0.2.… 0429200453d01761390ab1b5518e1fc7 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/kernel-smp-2.6.16.54-0.2.3.… 2566454d832c10cfdd84c5da3e9cddac ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/kernel-source-2.6.16.54-0.2… 8b654ab7024914969215714520e05e4f ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/kernel-syms-2.6.16.54-0.2.3… cd9922e7e404d210b1f03ef48a37a5af ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/kernel-um-2.6.16.54-0.2.3.n… ddf9fdd3f8e12eceef84ee6de4340f14 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/kernel-xen-2.6.16.54-0.2.3.… 1d7a7057876ce2550579bf424aa39bff ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/kernel-xenpae-2.6.16.54-0.2… ae4ef7118f0b59ad169e3871fdfe3c54 Our maintenance customers are notified individually. The packages are offered for installation from the maintenance web: SUSE Linux Enterprise Desktop 10 SP1 for AMD64 and Intel EM64T http://support.novell.com/techcenter/psdb/cedebf2070cadf7ee6c941a4d0e6eba0.… SUSE Linux Enterprise 10 SP1 DEBUGINFO for IBM zSeries 64bit http://support.novell.com/techcenter/psdb/eb9711b9868acd247e9ed0be3bb86142.… SUSE Linux Enterprise 10 SP1 DEBUGINFO for IBM POWER http://support.novell.com/techcenter/psdb/37043bf4ccbd3272d8b7e37b6b76768b.… SUSE Linux Enterprise 10 SP1 DEBUGINFO for IPF http://support.novell.com/techcenter/psdb/381410915cb05a9468010a8d5853c966.… SUSE Linux Enterprise Server 10 SP1 http://support.novell.com/techcenter/psdb/cedebf2070cadf7ee6c941a4d0e6eba0.… http://support.novell.com/techcenter/psdb/eb9711b9868acd247e9ed0be3bb86142.… http://support.novell.com/techcenter/psdb/37043bf4ccbd3272d8b7e37b6b76768b.… http://support.novell.com/techcenter/psdb/381410915cb05a9468010a8d5853c966.… http://support.novell.com/techcenter/psdb/9bd2fb953279a9c0f9e9b139ba46d357.… SLE SDK 10 SP1 http://support.novell.com/techcenter/psdb/cedebf2070cadf7ee6c941a4d0e6eba0.… http://support.novell.com/techcenter/psdb/37043bf4ccbd3272d8b7e37b6b76768b.… http://support.novell.com/techcenter/psdb/381410915cb05a9468010a8d5853c966.… http://support.novell.com/techcenter/psdb/9bd2fb953279a9c0f9e9b139ba46d357.… SUSE Linux Enterprise 10 SP1 DEBUGINFO http://support.novell.com/techcenter/psdb/cedebf2070cadf7ee6c941a4d0e6eba0.… http://support.novell.com/techcenter/psdb/37043bf4ccbd3272d8b7e37b6b76768b.… http://support.novell.com/techcenter/psdb/381410915cb05a9468010a8d5853c966.… http://support.novell.com/techcenter/psdb/9bd2fb953279a9c0f9e9b139ba46d357.… SUSE Linux Enterprise Desktop 10 SP1 http://support.novell.com/techcenter/psdb/cedebf2070cadf7ee6c941a4d0e6eba0.… http://support.novell.com/techcenter/psdb/9bd2fb953279a9c0f9e9b139ba46d357.… SUSE Linux Enterprise Desktop 10 SP1 for x86 http://support.novell.com/techcenter/psdb/9bd2fb953279a9c0f9e9b139ba46d357.… ______________________________________________________________________________ 5) Pending Vulnerabilities, Solutions, and Work-Arounds: See SUSE Security Summary Report. ______________________________________________________________________________ 6) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify <file> replacing <file> with the name of the file where you saved the announcement. The output for a valid signature looks like: gpg: Signature made <DATE> using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team <security(a)suse.de>" where <DATE> is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and the integrity of a package needs to be verified to ensure that it has not been tampered with. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or RPM package: 1) Using the internal gpg signatures of the rpm package 2) MD5 checksums as provided in this announcement 1) The internal rpm package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig <file.rpm> to verify the signature of the package, replacing <file.rpm> with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from build(a)suse.de with the key ID 9C800ACA. This key is automatically imported into the RPM database (on RPMv4-based distributions) and the gpg key ring of 'root' during installation. You can also find it on the first installation CD and at the end of this announcement. 2) If you need an alternative means of verification, use the md5sum command to verify the authenticity of the packages. Execute the command md5sum <filename.rpm> after you downloaded the file from a SUSE FTP server or its mirrors. Then compare the resulting md5sum with the one that is listed in the SUSE security announcement. Because the announcement containing the checksums is cryptographically signed (by security(a)suse.de) the checksums show proof of the authenticity of the package if the signature of the announcement is valid. Note that the md5 sums published in the SUSE Security Announcements are valid for the respective packages only. Newer versions of these packages cannot be verified. - SUSE runs two security mailing lists to which any interested party may subscribe: opensuse-security(a)opensuse.org - General Linux and SUSE security discussion. All SUSE security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security+subscribe(a)opensuse.org>. opensuse-security-announce(a)opensuse.org - SUSE's announce-only mailing list. Only SUSE's security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security-announce+subscribe(a)opensuse.org>. ===================================================================== SUSE's security contact is <security(a)suse.com> or <security(a)suse.de>. The <security(a)suse.de> public key is listed below. ===================================================================== ______________________________________________________________________________ The information in this advisory may be distributed or reproduced, provided that the advisory is not modified in any way. In particular, the clear text signature should show proof of the authenticity of the text. SUSE Linux Products GmbH provides no warranties of any kind whatsoever with respect to the information contained in this security advisory. Type Bits/KeyID Date User ID pub 2048R/3D25D3D9 1999-03-06 SuSE Security Team <security(a)suse.de> pub 1024D/9C800ACA 2000-10-19 SuSE Package Signing Key <build(a)suse.de> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.2 (GNU/Linux) mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh 1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+ cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7 tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63 Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+ x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0 Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2 saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o L0oixF12CohGBBARAgAGBQI7HmHDAAoJEJ5A4xAACqukTlQAoI4QzP9yjPohY7OU F7J3eKBTzp25AJ42BmtSd3pvm5ldmognWF3Trhp+GYkAlQMFEDe3O8IWkDf+zvyS FQEBAfkD/3GG5UgJj18UhYmh1gfjIlDcPAeqMwSytEHDENmHC+vlZQ/p0mT9tPiW tp34io54mwr+bLPN8l6B5GJNkbGvH6M+mO7R8Lj4nHL6pyAv3PQr83WyLHcaX7It Klj371/4yzKV6qpz43SGRK4MacLo2rNZ/dNej7lwPCtzCcFYwqkiiEYEEBECAAYF AjoaQqQACgkQx1KqMrDf94ArewCfWnTUDG5gNYkmHG4bYL8fQcizyA4An2eVo/n+ 3J2KRWSOhpAMsnMxtPbBmQGiBDnu9IERBACT8Y35+2vv4MGVKiLEMOl9GdST6MCk YS3yEKeueNWc+z/0Kvff4JctBsgs47tjmiI9sl0eHjm3gTR8rItXMN6sJEUHWzDP +Y0PFPboMvKx0FXl/A0dM+HFrruCgBlWt6FA+okRySQiliuI5phwqkXefl9AhkwR 8xocQSVCFxcwvwCglVcOQliHu8jwRQHxlRE0tkwQQI0D+wfQwKdvhDplxHJ5nf7U 8c/yE/vdvpN6lF0tmFrKXBUX+K7u4ifrZlQvj/81M4INjtXreqDiJtr99Rs6xa0S cZqITuZC4CWxJa9GynBED3+D2t1V/f8l0smsuYoFOF7Ib49IkTdbtwAThlZp8bEh ELBeGaPdNCcmfZ66rKUdG5sRA/9ovnc1krSQF2+sqB9/o7w5/q2qiyzwOSTnkjtB UVKn4zLUOf6aeBAoV6NMCC3Kj9aZHfA+ND0ehPaVGJgjaVNFhPi4x0e7BULdvgOo AqajLfvkURHAeSsxXIoEmyW/xC1sBbDkDUIBSx5oej73XCZgnj/inphRqGpsb+1n KFvF+rQoU3VTRSBQYWNrYWdlIFNpZ25pbmcgS2V5IDxidWlsZEBzdXNlLmRlPohi BBMRAgAiBQJA2AY+AhsDBQkObd+9BAsHAwIDFQIDAxYCAQIeAQIXgAAKCRCoTtro nIAKypCfAJ9RuZ6ZSV7QW4pTgTIxQ+ABPp0sIwCffG9bCNnrETPlgOn+dGEkAWeg KL+IRgQQEQIABgUCOnBeUgAKCRCeQOMQAAqrpNzOAKCL512FZvv4VZx94TpbA9lx yoAejACeOO1HIbActAevk5MUBhNeLZa/qM2JARUDBRA6cGBvd7LmAD0l09kBATWn B/9An5vfiUUE1VQnt+T/EYklES3tXXaJJp9pHMa4fzFa8jPVtv5UBHGee3XoUNDV wM2OgSEISZxbzdXGnqIlcT08TzBUD9i579uifklLsnr35SJDZ6ram51/CWOnnaVh UzneOA9gTPSr+/fT3WeVnwJiQCQ30kNLWVXWATMnsnT486eAOlT6UNBPYQLpUprF 5Yryk23pQUPAgJENDEqeU6iIO9Ot1ZPtB0lniw+/xCi13D360o1tZDYOp0hHHJN3 D3EN8C1yPqZd5CvvznYvB6bWBIpWcRgdn2DUVMmpU661jwqGlRz1F84JG/xe4jGu zgpJt9IXSzyohEJB6XG5+D0BuQINBDnu9JIQCACEkdBN6Mxf5WvqDWkcMRy6wnrd 9DYJ8UUTmIT2iQf07tRUKJJ9v0JXfx2Z4d08IQSMNRaq4VgSe+PdYgIy0fbj23Vi a5/gO7fJEpD2hd2f+pMnOWvH2rOOIbeYfuhzAc6BQjAKtmgR0ERUTafTM9Wb6F13 CNZZNZfDqnFDP6L12w3z3F7FFXkz07Rs3AIto1ZfYZd4sCSpMr/0S5nLrHbIvGLp 271hhQBeRmmoGEKO2JRelGgUJ2CUzOdtwDIKT0LbCpvaP8PVnYF5IFoYJIWRHqlE t5ucTXstZy7vYjL6vTP4l5xs+LIOkNmPhqmfsgLzVo0UaLt80hOwc4NvDCOLAAMG B/9g+9V3ORzw4LvO1pwRYJqfDKUq/EJ0rNMMD4N8RLpZRhKHKJUm9nNHLbksnlZw rbSTM5LpC/U6sheLP+l0bLVoq0lmsCcUSyh+mY6PxWirLIWCn/IAZAGnXb6Zd6Tt IJlGG6pqUN8QxGJYQnonl0uTJKHJENbI9sWHQdcTtBMc34gorHFCo1Bcvpnc1LFL rWn7mfoGx6INQjf3HGQpMXAWuSBQhzkazY6vaWFpa8bBJ+gKbBuySWzNm3rFtT5H RKMWpO+M9bHp4d+puY0L1YwN1OMatcMMpcWnZpiWiR83oi32+xtWUY2U7Ae38mMa g8zFbpeqPQUsDv9V7CAJ1dbriEwEGBECAAwFAkDYBnoFCQ5t3+gACgkQqE7a6JyA CspnpgCfRbYwxT3iq+9l/PgNTUNTZOlof2oAn25y0eGi0371jap9kOV6uq71sUuO =ypVs - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4-svn0 (GNU/Linux) iQEVAwUBR1UyoXey5gA9JdPZAQIJEQf/U7R0nPLBTk9oLx88nyrCKMbvFB1EvBLx d7hnMItmy6R/7NK/7Go2x9xkyo15oiVglYTc5xtC0pgdWta5XKFw1MwfaRAgesji JY/a8r8kX00rPpZ1PMwLBBF04RIDdodpmiz9/mJNHTbOn8OXozlyNalRHfrj/X60 WBijH/sUJaRYNuYxw5+lEN5QJu4JKK5hRtnTr/y9nRyksAOuiVzEfIeYD0nD/JF8 IP0A0OWWkAM8p5EwfHNqENf1dn9vraz3yA0i1xPc9GX5KVuFCk4gKAYt31NedeSJ hrAcjwRsPDgAT1z9Dl2d+74M48H74S4ddJVqqlvAVgHtn/WmC0XBzg== =ETLj -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE Security Announcement: Linux kernel (SUSE-SA:2007:063)
by Marcus Meissner 03 Dec '07

03 Dec '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Announcement Package: kernel Announcement ID: SUSE-SA:2007:063 Date: Mon, 03 Dec 2007 15:00:00 +0000 Affected Products: openSUSE 10.3 Vulnerability Type: remote denial of service Severity (1-10): 9 SUSE Default Package: yes Cross-References: CVE-2007-5500, CVE-2007-5501, CVE-2007-5904 Content of This Advisory: 1) Security Vulnerability Resolved: Kernel security update Problem Description 2) Solution or Work-Around 3) Special Instructions and Notes 4) Package Location and Checksums 5) Pending Vulnerabilities, Solutions, and Work-Arounds: See SUSE Security Summary Report. 6) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Problem Description and Brief Discussion The openSUSE 10.3 kernel was updated to fix various problems, both security and non-security bugs. It fixes the following security problems: - CVE-2007-5501: The tcp_sacktag_write_queue function in net/ipv4/tcp_input.c allows remote attackers to cause a denial of service (crash) via crafted TCP ACK responses that trigger a NULL pointer dereference. Please note that this problem only affects only Linux Kernels starting with 2.6.21, so only the openSUSE 10.3 code base is affected. - CVE-2007-5500: A buggy condition in the ptrace attach logic can be used by local attackers to hang the machine. - CVE-2007-5904: Multiple buffer overflows in CIFS VFS allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function. This requires the attacker to set up a malicious Samba/CIFS server and getting the client to connect to it, so is very likely restricted to the site network. Also the exploitability of this problem not known. and the following non security bugs: - Kernel update to 2.6.22.13 (includes the fixes for CVE-2007-5500 and CVE-2007-5501 described above) - patches.fixes/input-add-ms-vm-to-noloop.patch: add i8042.noloop quirk for Microsoft Virtual Machine [#297546] - patches.fixes/mac80211_fix_scan.diff: Make per-SSID scanning work [#299598] [#327684] This should enhance the hidden ESSID scanning problems with the newer mac80211 wireless drivers. This also required a release of all the mac80211 KMP packages. - patches.drivers/kobil_sct_backport.patch: Fix segfault for Kobil USB Plus card readers [#327664] - patches.arch/acpi_thermal_passive_blacklist.patch: Avoid critical temp shutdowns on specific ThinkPad T4x(p) and R40 [#333043] - patches.fixes/microtek_hal.diff: Make the microtek driver work with HAL [#339743] - patches.fixes/pci-fix-unterminated-pci_device_id-lists: fix unterminated pci_device_id lists [#340527] - patches.fixes/nfsacl-retval.diff: knfsd: fix spurious EINVAL errors on first access of new filesystem [#340873] 2) Solution or Work-Around There is no known workaround, please install the update packages. 3) Special Instructions and Notes Please reboot the machine after installing the update. 4) Package Location and Checksums The preferred method for installing security updates is to use the YaST Online Update (YOU) tool. YOU detects which updates are required and automatically performs the necessary steps to verify and install them. Alternatively, download the update packages for your distribution manually and verify their integrity by the methods listed in Section 6 of this announcement. Then install the packages using the command rpm -Fhv <file.rpm> to apply the update, replacing <file.rpm> with the filename of the downloaded RPM package. x86 Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/adm8211-kmp-… 3ab7a98b281a998645d77bcb33daf80a http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/adm8211-kmp-… 0462df04fae87908501a7ef4cc54b59e http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/adm8211-kmp-… 15110c37f53fa39740c25f3c00487770 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/adm8211-kmp-… b9c644be2f8139b0af614cb0b73be8fa http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/adm8211-kmp-… 80204730d7865ae82b7c3998869864f4 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/iwlwifi-kmp-… 2e9a95e102cf2bc1d39529b05630a6b8 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/iwlwifi-kmp-… ce5ee7b260b81ca49baa0332bd0cc433 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/iwlwifi-kmp-… cbdcae2038b096b4f347a273ff2e5723 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/iwlwifi-kmp-… 7ff74aee18c62ecc03d2182d580e353a http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/iwlwifi-kmp-… 9c6401d090738a042fadd617d2fa41ce http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/kernel-bigsm… cbe91187f64bcbd11dc4bfac43fd1e93 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/kernel-debug… e0428f6b111e08cd813586b39479996f http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/kernel-defau… 716c315401f9c78b80baa2caaa74e65b http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/kernel-rt-2.… 349c88f31e7726116b7920de29bb7f78 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/kernel-rt_de… 9f72a06d7b921d6054e60fd37ffd1796 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/kernel-sourc… fd49de9096d3c50b69791b450c5a982b http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/kernel-syms-… 7da5a0b07aefcc89e6257470cde98c04 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/kernel-xen-2… 734c6dc5b6ce2270af4c69dd8a669fc2 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/kernel-xenpa… d834e54a8dd75c3c8ef50005da90bba1 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/p54-kmp-bigs… 6cd9bb10fe211c9266ede9eaaea1e577 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/p54-kmp-debu… d33557b30b1a28c49f78033f77fda03f http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/p54-kmp-defa… ed4ca2f913536f44e3d0c95d05a21794 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/p54-kmp-xen-… e32dd3aba58789e2ec6ad7abaa5b7146 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/p54-kmp-xenp… 1de1c35cb9d06244044c493f652190b1 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/rt2x00-kmp-b… f8eb9e7f66967127b49fd50176d90a5e http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/rt2x00-kmp-d… fe5e8dc188f0e64e6f88e8c2a2c6bf2b http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/rt2x00-kmp-d… 234e626502e7c5cfb9fdb2b0a9aa0d0b http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/rt2x00-kmp-x… 9540a46543ae48567203fe8c5bda79ae http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/rt2x00-kmp-x… ee2e4c67dfde18f24fa22aa5d146ec03 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/rtl8187-kmp-… 4c32e54cb85ab7dc886c80f153d3f65c http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/rtl8187-kmp-… e72c76b67f1e48e931fd7137f51d704e http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/rtl8187-kmp-… 88b46b2b2d09488a9dba87ff51adff8d http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/rtl8187-kmp-… f7261d442e93d78747742c67a550426c http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/rtl8187-kmp-… 4b14d44047e77e8a92d93ffd38f67e93 Power PC Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/adm8211-kmp-d… ebae11f208380454f92ca5369fad9c7e http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/adm8211-kmp-p… 3b9f3bb36123fdb92d6bd14df28db860 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/kernel-defaul… fe594f96c55925ee36191073265dacf7 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/kernel-kdump-… f2d12594ae53384754f8680e9575ac4a http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/kernel-ppc64-… 0a7c48f616391e7659da338d4e063f04 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/kernel-source… 098c8043f8b654a7e96502b7a1caaf35 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/kernel-syms-2… 39e123896339231f53672b6a68de8115 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/p54-kmp-defau… 66fa7b5242a2279960594bf5c4b14620 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/rt2x00-kmp-de… 9ab9bcab6168439b780f119cee4793a7 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/rtl8187-kmp-d… 1d5f1ddbb38cbedec8e7f51ce1aaa67c x86-64 Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/adm8211-km… b930dbe8d1881e91ac0829c56f42490c http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/adm8211-km… 4c6083f96af5a7a42ea74959e341a8c4 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/adm8211-km… 8bec74437adf6e3efe43bf8437bda62e http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/iwlwifi-km… 2d294c4c4fb84ac71aa56e7c173a53e1 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/iwlwifi-km… 59655b4432509818f07e920ce1c86744 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/iwlwifi-km… 778960dcc34e2174192aa6801e3606b7 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/kernel-deb… 9e79bc3f161be0c16161d84593e8efbc http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/kernel-def… 6ad7604fc48c04492dfaf05b69e29b55 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/kernel-rt-… d5299849cb4a065be3156573c2782b37 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/kernel-rt_… 7e0c4ddf1755e7346da4f702252dd3c3 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/kernel-sou… 4662dbc030cd60bcc6e0913fce1af37b http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/kernel-sym… ddbc758722571d472e3316ee2e530f97 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/kernel-xen… 7a21b82dcb2d28528ad3523294c397d0 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/p54-kmp-de… 2f3ee780fbb3360f5dccdc7339fdc5b9 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/p54-kmp-de… 9ec7329cb0a343524b138dc605fd7262 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/p54-kmp-xe… 0524a0ec9e9ca92ceb8494b4dc5b3653 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/rt2x00-kmp… e63e92233e23919f8841cbeac6fa8370 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/rt2x00-kmp… 49166737e0024e546798984f9da5755b http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/rt2x00-kmp… 53765ab72120017bd5ced65057532586 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/rtl8187-km… 34d328230979c76b68b45129fde5ebc6 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/rtl8187-km… f0cc80badb2e14394e73c7ad5e2bd86c http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/rtl8187-km… 936b2a4eb4cb741f84c3bfd75c21c7a0 Sources: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-bigsmp… 4aa1de108c972f869ab116a77818bc17 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-debug-… 4f6f58667b5427885925b6c8efa5f6d8 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-defaul… 378333100fe800771364701a13a63d8c http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-kdump-… f491f146befcbf94a054857df1d862d7 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-ppc64-… 9f03c45a0f257ab01efbe5d1beaccbdf http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-rt-2.6… 754a66292111a22b3148ef18694dcf18 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-rt_deb… 6599fbcf9154ccfed8db447cad53a6fb http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-source… 2c6766ba9ea71825e65062c969a0a224 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-syms-2… 0ae7dfeb739f903bdd2b21da66616c85 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-xen-2.… ee12fd57f5c2797ef25e6e2c0292cf42 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-xenpae… d9c34dbf4c23d90ab062e82153862677 ______________________________________________________________________________ 5) Pending Vulnerabilities, Solutions, and Work-Arounds: See SUSE Security Summary Report. ______________________________________________________________________________ 6) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify <file> replacing <file> with the name of the file where you saved the announcement. The output for a valid signature looks like: gpg: Signature made <DATE> using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team <security(a)suse.de>" where <DATE> is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and the integrity of a package needs to be verified to ensure that it has not been tampered with. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or RPM package: 1) Using the internal gpg signatures of the rpm package 2) MD5 checksums as provided in this announcement 1) The internal rpm package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig <file.rpm> to verify the signature of the package, replacing <file.rpm> with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from build(a)suse.de with the key ID 9C800ACA. This key is automatically imported into the RPM database (on RPMv4-based distributions) and the gpg key ring of 'root' during installation. You can also find it on the first installation CD and at the end of this announcement. 2) If you need an alternative means of verification, use the md5sum command to verify the authenticity of the packages. Execute the command md5sum <filename.rpm> after you downloaded the file from a SUSE FTP server or its mirrors. Then compare the resulting md5sum with the one that is listed in the SUSE security announcement. Because the announcement containing the checksums is cryptographically signed (by security(a)suse.de) the checksums show proof of the authenticity of the package if the signature of the announcement is valid. Note that the md5 sums published in the SUSE Security Announcements are valid for the respective packages only. Newer versions of these packages cannot be verified. - SUSE runs two security mailing lists to which any interested party may subscribe: opensuse-security(a)opensuse.org - General Linux and SUSE security discussion. All SUSE security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security+subscribe(a)opensuse.org>. opensuse-security-announce(a)opensuse.org - SUSE's announce-only mailing list. Only SUSE's security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security-announce+subscribe(a)opensuse.org>. ===================================================================== SUSE's security contact is <security(a)suse.com> or <security(a)suse.de>. The <security(a)suse.de> public key is listed below. ===================================================================== ______________________________________________________________________________ The information in this advisory may be distributed or reproduced, provided that the advisory is not modified in any way. In particular, the clear text signature should show proof of the authenticity of the text. SUSE Linux Products GmbH provides no warranties of any kind whatsoever with respect to the information contained in this security advisory. Type Bits/KeyID Date User ID pub 2048R/3D25D3D9 1999-03-06 SuSE Security Team <security(a)suse.de> pub 1024D/9C800ACA 2000-10-19 SuSE Package Signing Key <build(a)suse.de> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.2 (GNU/Linux) mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh 1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+ cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7 tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63 Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+ x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0 Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2 saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o L0oixF12CohGBBARAgAGBQI7HmHDAAoJEJ5A4xAACqukTlQAoI4QzP9yjPohY7OU F7J3eKBTzp25AJ42BmtSd3pvm5ldmognWF3Trhp+GYkAlQMFEDe3O8IWkDf+zvyS FQEBAfkD/3GG5UgJj18UhYmh1gfjIlDcPAeqMwSytEHDENmHC+vlZQ/p0mT9tPiW tp34io54mwr+bLPN8l6B5GJNkbGvH6M+mO7R8Lj4nHL6pyAv3PQr83WyLHcaX7It Klj371/4yzKV6qpz43SGRK4MacLo2rNZ/dNej7lwPCtzCcFYwqkiiEYEEBECAAYF AjoaQqQACgkQx1KqMrDf94ArewCfWnTUDG5gNYkmHG4bYL8fQcizyA4An2eVo/n+ 3J2KRWSOhpAMsnMxtPbBmQGiBDnu9IERBACT8Y35+2vv4MGVKiLEMOl9GdST6MCk YS3yEKeueNWc+z/0Kvff4JctBsgs47tjmiI9sl0eHjm3gTR8rItXMN6sJEUHWzDP +Y0PFPboMvKx0FXl/A0dM+HFrruCgBlWt6FA+okRySQiliuI5phwqkXefl9AhkwR 8xocQSVCFxcwvwCglVcOQliHu8jwRQHxlRE0tkwQQI0D+wfQwKdvhDplxHJ5nf7U 8c/yE/vdvpN6lF0tmFrKXBUX+K7u4ifrZlQvj/81M4INjtXreqDiJtr99Rs6xa0S cZqITuZC4CWxJa9GynBED3+D2t1V/f8l0smsuYoFOF7Ib49IkTdbtwAThlZp8bEh ELBeGaPdNCcmfZ66rKUdG5sRA/9ovnc1krSQF2+sqB9/o7w5/q2qiyzwOSTnkjtB UVKn4zLUOf6aeBAoV6NMCC3Kj9aZHfA+ND0ehPaVGJgjaVNFhPi4x0e7BULdvgOo AqajLfvkURHAeSsxXIoEmyW/xC1sBbDkDUIBSx5oej73XCZgnj/inphRqGpsb+1n KFvF+rQoU3VTRSBQYWNrYWdlIFNpZ25pbmcgS2V5IDxidWlsZEBzdXNlLmRlPohi BBMRAgAiBQJA2AY+AhsDBQkObd+9BAsHAwIDFQIDAxYCAQIeAQIXgAAKCRCoTtro nIAKypCfAJ9RuZ6ZSV7QW4pTgTIxQ+ABPp0sIwCffG9bCNnrETPlgOn+dGEkAWeg KL+IRgQQEQIABgUCOnBeUgAKCRCeQOMQAAqrpNzOAKCL512FZvv4VZx94TpbA9lx yoAejACeOO1HIbActAevk5MUBhNeLZa/qM2JARUDBRA6cGBvd7LmAD0l09kBATWn B/9An5vfiUUE1VQnt+T/EYklES3tXXaJJp9pHMa4fzFa8jPVtv5UBHGee3XoUNDV wM2OgSEISZxbzdXGnqIlcT08TzBUD9i579uifklLsnr35SJDZ6ram51/CWOnnaVh UzneOA9gTPSr+/fT3WeVnwJiQCQ30kNLWVXWATMnsnT486eAOlT6UNBPYQLpUprF 5Yryk23pQUPAgJENDEqeU6iIO9Ot1ZPtB0lniw+/xCi13D360o1tZDYOp0hHHJN3 D3EN8C1yPqZd5CvvznYvB6bWBIpWcRgdn2DUVMmpU661jwqGlRz1F84JG/xe4jGu zgpJt9IXSzyohEJB6XG5+D0BuQINBDnu9JIQCACEkdBN6Mxf5WvqDWkcMRy6wnrd 9DYJ8UUTmIT2iQf07tRUKJJ9v0JXfx2Z4d08IQSMNRaq4VgSe+PdYgIy0fbj23Vi a5/gO7fJEpD2hd2f+pMnOWvH2rOOIbeYfuhzAc6BQjAKtmgR0ERUTafTM9Wb6F13 CNZZNZfDqnFDP6L12w3z3F7FFXkz07Rs3AIto1ZfYZd4sCSpMr/0S5nLrHbIvGLp 271hhQBeRmmoGEKO2JRelGgUJ2CUzOdtwDIKT0LbCpvaP8PVnYF5IFoYJIWRHqlE t5ucTXstZy7vYjL6vTP4l5xs+LIOkNmPhqmfsgLzVo0UaLt80hOwc4NvDCOLAAMG B/9g+9V3ORzw4LvO1pwRYJqfDKUq/EJ0rNMMD4N8RLpZRhKHKJUm9nNHLbksnlZw rbSTM5LpC/U6sheLP+l0bLVoq0lmsCcUSyh+mY6PxWirLIWCn/IAZAGnXb6Zd6Tt IJlGG6pqUN8QxGJYQnonl0uTJKHJENbI9sWHQdcTtBMc34gorHFCo1Bcvpnc1LFL rWn7mfoGx6INQjf3HGQpMXAWuSBQhzkazY6vaWFpa8bBJ+gKbBuySWzNm3rFtT5H RKMWpO+M9bHp4d+puY0L1YwN1OMatcMMpcWnZpiWiR83oi32+xtWUY2U7Ae38mMa g8zFbpeqPQUsDv9V7CAJ1dbriEwEGBECAAwFAkDYBnoFCQ5t3+gACgkQqE7a6JyA CspnpgCfRbYwxT3iq+9l/PgNTUNTZOlof2oAn25y0eGi0371jap9kOV6uq71sUuO =ypVs - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4-svn0 (GNU/Linux) iQEVAwUBR1QpFXey5gA9JdPZAQJDmQf+KVujeLrgPQbz07HJK6JqHpFzF7XwiXUZ t+i3CeyaW88afhMqybRxwO9iDISdKQ1wzB/+890V3mrZIHhrygtRla2FjCEB/R9l 11yzrJyUG0LE/KTuD6Y37rHOtFe5T5ofsrbWwyJkgL/0gibCTLSmA3yfzSrpQ2wr evT6KrxOYzQd1bKGf18zzS6h7wEI7h3f+5sYBjPLMkbOQG5OWawxKOucARtJhhGK 7ActMSeEfnpT8nO3JwrWDXvZ2tPRE+5WyKIZIH0LqgW/12cLv0+Sj7BZ9XJS2toe fU4pQ2eAAr4i+tOweU/xVArtCWiiV8NzYDybzh5ouBZ/s4TSU2bJ4g== =mdDk -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0