October 2010 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2010:0710-1 (important): perl-Bootloader: The update fixes an enumeration bug in perl-Bootloader
by maintenance＠opensuse.org 11 Oct '10

11 Oct '10

openSUSE Recommended Update: perl-Bootloader: The update fixes an enumeration bug in perl-Bootloader ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0710-1 Rating: important References: #626132 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This bugs is fixed by using udev devices for device mapper now. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch perl-Bootloader-3218 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 0.5.12.1]: perl-Bootloader-0.5.12.1-0.1.1 References: https://bugzilla.novell.com/626132

1 0

openSUSE-SU-2010:0709-1 (moderate): krb5 security update
by opensuse-security＠opensuse.org 11 Oct '10

11 Oct '10

openSUSE Security Update: krb5 security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0709-1 Rating: moderate References: #640990 Cross-References: CVE-2010-1322 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: remote authenticated clients could crash the kdc (CVE-2010-1322). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch krb5-3259 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): krb5-1.8.1-5.1.1 krb5-client-1.8.1-5.1.1 krb5-devel-1.8.1-5.1.1 krb5-plugin-kdb-ldap-1.8.1-5.1.1 krb5-plugin-preauth-pkinit-1.8.1-5.1.1 krb5-server-1.8.1-5.1.1 - openSUSE 11.3 (x86_64): krb5-32bit-1.8.1-5.1.1 krb5-devel-32bit-1.8.1-5.1.1 References: http://support.novell.com/security/cve/CVE-2010-1322.html https://bugzilla.novell.com/640990

1 0

openSUSE-SU-2010:0706-1 (critical): acroread security update
by opensuse-security＠opensuse.org 08 Oct '10

08 Oct '10

openSUSE Security Update: acroread security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0706-1 Rating: critical References: #638466 Cross-References: CVE-2010-2883 CVE-2010-2884 CVE-2010-2887 CVE-2010-2889 CVE-2010-2890 CVE-2010-3619 CVE-2010-3620 CVE-2010-3621 CVE-2010-3622 CVE-2010-3623 CVE-2010-3624 CVE-2010-3625 CVE-2010-3626 CVE-2010-3627 CVE-2010-3628 CVE-2010-3629 CVE-2010-3630 CVE-2010-3631 CVE-2010-3632 CVE-2010-3656 CVE-2010-3657 CVE-2010-3658 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes 22 vulnerabilities is now available. It includes one version update. Description: Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code (CVE-2010-2883, CVE-2010-2884, CVE-2010-2887, CVE-2010-2889, CVE-2010-2890, CVE-2010-3619, CVE-2010-3620, CVE-2010-3621, CVE-2010-3622, CVE-2010-3623, CVE-2010-3624, CVE-2010-3625, CVE-2010-3626, CVE-2010-3627, CVE-2010-3628, CVE-2010-3629, CVE-2010-3630, CVE-2010-3631, CVE-2010-3632, CVE-2010-3656, CVE-2010-3657, CVE-2010-3658). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch acroread-3275 - openSUSE 11.2: zypper in -t patch acroread-3275 - openSUSE 11.1: zypper in -t patch acroread-3275 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586) [New Version: 9.4]: acroread-9.4-0.1.1 - openSUSE 11.2 (noarch) [New Version: 9.4]: acroread-cmaps-9.4-0.1.1 acroread-fonts-ja-9.4-0.1.1 acroread-fonts-ko-9.4-0.1.1 acroread-fonts-zh_CN-9.4-0.1.1 acroread-fonts-zh_TW-9.4-0.1.1 - openSUSE 11.2 (i586) [New Version: 9.4]: acroread-9.4-0.1.1 - openSUSE 11.1 (noarch) [New Version: 9.4]: acroread-cmaps-9.4-0.1.1 acroread-fonts-ja-9.4-0.1.1 acroread-fonts-ko-9.4-0.1.1 acroread-fonts-zh_CN-9.4-0.1.1 acroread-fonts-zh_TW-9.4-0.1.1 - openSUSE 11.1 (i586) [New Version: 9.4]: acroread-9.4-0.1.1 References: http://support.novell.com/security/cve/CVE-2010-2883.html http://support.novell.com/security/cve/CVE-2010-2884.html http://support.novell.com/security/cve/CVE-2010-2887.html http://support.novell.com/security/cve/CVE-2010-2889.html http://support.novell.com/security/cve/CVE-2010-2890.html http://support.novell.com/security/cve/CVE-2010-3619.html http://support.novell.com/security/cve/CVE-2010-3620.html http://support.novell.com/security/cve/CVE-2010-3621.html http://support.novell.com/security/cve/CVE-2010-3622.html http://support.novell.com/security/cve/CVE-2010-3623.html http://support.novell.com/security/cve/CVE-2010-3624.html http://support.novell.com/security/cve/CVE-2010-3625.html http://support.novell.com/security/cve/CVE-2010-3626.html http://support.novell.com/security/cve/CVE-2010-3627.html http://support.novell.com/security/cve/CVE-2010-3628.html http://support.novell.com/security/cve/CVE-2010-3629.html http://support.novell.com/security/cve/CVE-2010-3630.html http://support.novell.com/security/cve/CVE-2010-3631.html http://support.novell.com/security/cve/CVE-2010-3632.html http://support.novell.com/security/cve/CVE-2010-3656.html http://support.novell.com/security/cve/CVE-2010-3657.html http://support.novell.com/security/cve/CVE-2010-3658.html https://bugzilla.novell.com/638466

1 0

openSUSE-RU-2010:0700-1 (low): opensuse-manuals_de: Update of the German Translation of the openSUSE Documentation
by maintenance＠opensuse.org 05 Oct '10

05 Oct '10

openSUSE Recommended Update: opensuse-manuals_de: Update of the German Translation of the openSUSE Documentation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0700-1 Rating: low References: #639823 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This is the final update of the German translation of the openSUSE documentation. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch opensuse-gnomequick_de-pdf-3236 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch) [New Version: 11.3]: opensuse-gnomequick_de-pdf-11.3-1.1.1 opensuse-installquick_de-pdf-11.3-1.1.1 opensuse-kdequick_de-pdf-11.3-1.1.1 opensuse-manuals_de-11.3-1.1.1 opensuse-reference_de-pdf-11.3-1.1.1 opensuse-startup_de-pdf-11.3-1.1.1 References: https://bugzilla.novell.com/639823

1 0

openSUSE-RU-2010:0699-1 (low): opensuse-manuals_en: General openSUSE documentation update
by maintenance＠opensuse.org 05 Oct '10

05 Oct '10

openSUSE Recommended Update: opensuse-manuals_en: General openSUSE documentation update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0699-1 Rating: low References: #626368 #639823 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This is the next general openSUSE Documentation Update. Especially, the Security Guide is now up-to-date. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch opensuse-apparmor-quick_en-pdf-3219 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch): opensuse-apparmor-quick_en-pdf-11.3-6.1.1 opensuse-apps_en-pdf-11.3-6.1.1 opensuse-gnomequick_en-pdf-11.3-6.1.1 opensuse-gnomeuser_en-pdf-11.3-6.1.1 opensuse-installquick_en-pdf-11.3-6.1.1 opensuse-kdequick_en-pdf-11.3-6.1.1 opensuse-kdeuser_en-pdf-11.3-6.1.1 opensuse-manuals_en-11.3-6.1.1 opensuse-reference_en-pdf-11.3-6.1.1 opensuse-security_en-pdf-11.3-6.1.1 opensuse-startup_en-pdf-11.3-6.1.1 References: https://bugzilla.novell.com/626368 https://bugzilla.novell.com/639823

1 0

openSUSE-RU-2010:0698-1 (low): kst: Update to final 2.0.0
by maintenance＠opensuse.org 05 Oct '10

05 Oct '10

openSUSE Recommended Update: kst: Update to final 2.0.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0698-1 Rating: low References: #548228 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This updates to the final 2.0.0 release with various fixes and packaging improvements. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch kst-3201 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.0.0.0]: kst-2.0.0.0-0.1.1 kst-devel-2.0.0.0-0.1.1 References: https://bugzilla.novell.com/548228

1 0

openSUSE-RU-2010:0694-1 (moderate): yast2-ncurses-pkg: This update fixes a problem with showing patterns and sorting of the them.
by maintenance＠opensuse.org 05 Oct '10

05 Oct '10

openSUSE Recommended Update: yast2-ncurses-pkg: This update fixes a problem with showing patterns and sorting of the them. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0694-1 Rating: moderate References: #624996 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: General problem with showing patterns: Patterns may be available or not. There was a problem with sorting the categories. The category containing the pattern with the highest priority should be the first in the list. The bug in the ncurses package selector: if there was more than one category with the same order (priority) only one was stored in an internal set, so sometimes SLMS patterns were shown, sometimes not. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch yast2-ncurses-pkg-2969 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.19.4]: yast2-ncurses-pkg-2.19.4-1.1.1 References: https://bugzilla.novell.com/624996

1 0

openSUSE-SU-2010:0691-1 (important): okular security update
by opensuse-security＠opensuse.org 01 Oct '10

01 Oct '10

openSUSE Security Update: okular security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0691-1 Rating: important References: #634743 Cross-References: CVE-2010-2575 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: This update fixes a heap-based overflow in okular. The RLE decompression in the TranscribePalmImageToJPEG() function can be exploited to execute arbitrary code with user privileges by providing a crafted PDF file. (CVE-2010-2575). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch gwenview-3080 - openSUSE 11.2: zypper in -t patch gwenview-3080 - openSUSE 11.1: zypper in -t patch gwenview-3080 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): gwenview-4.4.4-2.1.1 kcolorchooser-4.4.4-2.1.1 kdegraphics4-4.4.4-2.1.1 kgamma-4.4.4-2.1.1 kio_kamera-4.4.4-2.1.1 kolourpaint-4.4.4-2.1.1 kruler-4.4.4-2.1.1 ksnapshot-4.4.4-2.1.1 libkdcraw-devel-4.4.4-2.1.1 libkdcraw8-4.4.4-2.1.1 libkexiv2-8-4.4.4-2.1.1 libkexiv2-devel-4.4.4-2.1.1 libkipi-devel-4.4.4-2.1.1 libkipi7-4.4.4-2.1.1 libksane-devel-4.4.4-2.1.1 libksane0-4.4.4-2.1.1 okular-4.4.4-2.1.1 okular-devel-4.4.4-2.1.1 - openSUSE 11.2 (i586 x86_64) [New Version: 4.3.5]: gwenview-4.3.5-0.3.1 kcolorchooser-4.3.5-0.3.1 kdegraphics4-4.3.5-0.3.1 kgamma-4.3.5-0.3.1 kio_kamera-4.3.5-0.3.1 kolourpaint-4.3.5-0.3.1 kruler-4.3.5-0.3.1 ksnapshot-4.3.5-0.3.1 libkdcraw-devel-4.3.5-0.3.1 libkdcraw7-4.3.5-0.3.1 libkexiv2-7-4.3.5-0.3.1 libkexiv2-devel-4.3.5-0.3.1 libkipi-devel-4.3.5-0.3.1 libkipi6-4.3.5-0.3.1 libksane-devel-4.3.5-0.3.1 libksane0-4.3.5-0.3.1 okular-4.3.5-0.3.1 okular-devel-4.3.5-0.3.1 - openSUSE 11.1 (i586 ppc x86_64): gwenview-1.4.2-116.50.1 gwenview-lang-1.4.2-116.50.1 kde4-gwenview-4.1.3-4.8.2 kde4-kcolorchooser-4.1.3-4.8.2 kde4-kgamma-4.1.3-4.8.2 kde4-kio_kamera-4.1.3-4.8.2 kde4-kolourpaint-4.1.3-4.8.2 kde4-kruler-4.1.3-4.8.2 kde4-ksnapshot-4.1.3-4.8.2 kde4-okular-4.1.3-4.8.2 kde4-okular-devel-4.1.3-4.8.2 kdegraphics4-4.1.3-4.8.2 libkdcraw7-4.1.3-4.8.2 libkdcraw7-devel-4.1.3-4.8.2 libkexiv2-7-4.1.3-4.8.2 libkexiv2-7-devel-4.1.3-4.8.2 libkipi-devel-0.1.6-1.64.1 libkipi5-4.1.3-4.8.2 libkipi5-devel-4.1.3-4.8.2 libksane0-4.1.3-4.8.2 References: http://support.novell.com/security/cve/CVE-2010-2575.html https://bugzilla.novell.com/634743

1 0