November 2010 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2010:0997-1 (moderate): clamav: Update to version 0.96.4
by maintenance＠opensuse.org 30 Nov '10

30 Nov '10

openSUSE Recommended Update: clamav: Update to version 0.96.4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0997-1 Rating: moderate References: #649631 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: clamav version update to 0.96.4 includes several bug fixes and engine improvements. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch clamav-3447 - openSUSE 11.2: zypper in -t patch clamav-3447 - openSUSE 11.1: zypper in -t patch clamav-3447 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 0.96.4]: clamav-0.96.4-0.2.1 - openSUSE 11.3 (noarch) [New Version: 0.96.4]: clamav-db-0.96.4-0.2.1 - openSUSE 11.2 (i586 x86_64) [New Version: 0.96.4]: clamav-0.96.4-0.2.1 clamav-db-0.96.4-0.2.1 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 0.96.4]: clamav-0.96.4-0.1.1 clamav-db-0.96.4-0.1.1 References: https://bugzilla.novell.com/649631

1 0

openSUSE-SU-2010:0992-1 (moderate): openslp security update
by opensuse-security＠opensuse.org 30 Nov '10

30 Nov '10

openSUSE Security Update: openslp security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0992-1 Rating: moderate References: #642571 Cross-References: CVE-2010-3609 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: the openslp daemon could run into an endless loop when receiving specially crafted packets (CVE-2010-3609). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch openslp-3310 - openSUSE 11.2: zypper in -t patch openslp-3310 - openSUSE 11.1: zypper in -t patch openslp-3310 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): openslp-1.2.0-180.1.1 openslp-devel-1.2.0-180.1.1 openslp-server-1.2.0-180.1.1 - openSUSE 11.3 (x86_64): openslp-32bit-1.2.0-180.1.1 - openSUSE 11.2 (i586 x86_64): openslp-1.2.0-174.3.1 openslp-devel-1.2.0-174.3.1 openslp-server-1.2.0-174.3.1 - openSUSE 11.2 (x86_64): openslp-32bit-1.2.0-174.3.1 - openSUSE 11.1 (i586 ppc x86_64): openslp-1.2.0-168.12.1 openslp-devel-1.2.0-168.12.1 openslp-server-1.2.0-168.12.1 - openSUSE 11.1 (x86_64): openslp-32bit-1.2.0-168.12.1 - openSUSE 11.1 (ppc): openslp-64bit-1.2.0-168.12.1 References: http://support.novell.com/security/cve/CVE-2010-3609.html https://bugzilla.novell.com/642571

1 0

openSUSE-RU-2010:0989-1 (moderate): xinetd: Improve IPv6 handling
by maintenance＠opensuse.org 29 Nov '10

29 Nov '10

openSUSE Recommended Update: xinetd: Improve IPv6 handling ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0989-1 Rating: moderate References: #457903 #598305 Affected Products: openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes xinetd failing to handle ident lookup when the service is bound to ipv6 and USERID is used. It also improves the start script of xinetd to ensure that it successfully started. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch xinetd-3027 - openSUSE 11.1: zypper in -t patch xinetd-3027 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): xinetd-2.3.14-143.3.1 - openSUSE 11.1 (i586 ppc x86_64): xinetd-2.3.14-129.36.1 References: https://bugzilla.novell.com/457903 https://bugzilla.novell.com/598305

1 0

openSUSE-SU-2010:0984-1 (moderate): quagga: security update
by opensuse-security＠opensuse.org 26 Nov '10

26 Nov '10

openSUSE Security Update: quagga: security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0984-1 Rating: moderate References: #634300 Cross-References: CVE-2010-2948 CVE-2010-2949 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: This update of quagga fixes two security issues: - CVE-2010-2948: CVSS v2 Base Score: 6.5 (MEDIUM) (AV:N/AC:L/Au:S/C:P/I:P/A:P) Stack-based buffer overflow while processing malformed Route-Refresh messages. - CVE-2010-2949: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P) Denial of service while processing malformed BGP update AS path messages Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch quagga-3508 - openSUSE 11.2: zypper in -t patch quagga-3508 - openSUSE 11.1: zypper in -t patch quagga-3508 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 0.99.17]: quagga-0.99.17-1.3.1 quagga-devel-0.99.17-1.3.1 - openSUSE 11.2 (i586 x86_64) [New Version: 0.99.17]: quagga-0.99.17-1.3.1 quagga-devel-0.99.17-1.3.1 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 0.99.17]: quagga-0.99.17-1.1.1 quagga-devel-0.99.17-1.1.1 References: http://support.novell.com/security/cve/CVE-2010-2948.html http://support.novell.com/security/cve/CVE-2010-2949.html https://bugzilla.novell.com/634300

1 0

openSUSE-SU-2010:0976-1 (important): poppler: Fixed multiple vulnerabilities
by opensuse-security＠opensuse.org 25 Nov '10

25 Nov '10

openSUSE Security Update: poppler: Fixed multiple vulnerabilities ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0976-1 Rating: important References: #642785 Cross-References: CVE-2010-3702 CVE-2010-3703 CVE-2010-3704 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. It includes one version update. Description: Specially crafted PDF files could crash poppler or potentially even cause execution of arbitrary code (CVE-2010-3702, CVE-2010-3703, CVE-2010-3704) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libpoppler-devel-3335 - openSUSE 11.2: zypper in -t patch libpoppler-devel-3336 - openSUSE 11.1: zypper in -t patch libpoppler-devel-3382 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libpoppler-devel-0.12.3-5.1.1 libpoppler-glib-devel-0.12.3-5.1.1 libpoppler-glib4-0.12.3-5.1.1 libpoppler5-0.12.3-5.1.1 poppler-tools-0.12.3-5.1.1 - openSUSE 11.3 (noarch): libpoppler-doc-0.12.3-5.1.1 - openSUSE 11.2 (i586 x86_64) [New Version: 0.12.3]: libpoppler-devel-0.12.3-1.2.1 libpoppler-doc-0.12.3-1.2.1 libpoppler-glib-devel-0.12.3-1.2.1 libpoppler-glib4-0.12.3-1.2.1 libpoppler-qt2-0.12.3-1.2.1 libpoppler-qt3-devel-0.12.3-1.2.1 libpoppler-qt4-3-0.12.3-1.2.1 libpoppler-qt4-devel-0.12.3-1.2.1 libpoppler5-0.12.3-1.2.1 poppler-tools-0.12.3-1.2.1 - openSUSE 11.1 (i586 ppc x86_64): libpoppler-devel-0.10.1-1.9.1 libpoppler-doc-0.10.1-1.9.1 libpoppler-glib-devel-0.10.1-1.9.1 libpoppler-glib4-0.10.1-1.9.1 libpoppler-qt2-0.10.1-1.9.1 libpoppler-qt3-devel-0.10.1-1.9.1 libpoppler-qt4-3-0.10.1-1.9.1 libpoppler-qt4-devel-0.10.1-1.9.1 libpoppler4-0.10.1-1.9.1 poppler-tools-0.10.1-1.9.1 References: http://support.novell.com/security/cve/CVE-2010-3702.html http://support.novell.com/security/cve/CVE-2010-3703.html http://support.novell.com/security/cve/CVE-2010-3704.html https://bugzilla.novell.com/642785

1 0

openSUSE-RU-2010:0973-1 (low): graphviz: It doesn't find libperl.so. Fixed by this update.
by maintenance＠opensuse.org 23 Nov '10

23 Nov '10

openSUSE Recommended Update: graphviz: It doesn't find libperl.so. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0973-1 Rating: low References: #612766 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Because of the way the perl extension was built it lacked the information of where to find the perl runtime library. This is fixed by this update Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch graphviz-3538 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): graphviz-2.20.2-45.6.1 graphviz-devel-2.20.2-45.6.1 graphviz-doc-2.20.2-8.6.1 graphviz-gd-2.20.2-8.6.1 graphviz-gnome-2.20.2-8.6.1 graphviz-guile-2.20.2-8.6.1 graphviz-java-2.20.2-8.6.1 graphviz-lua-2.20.2-8.6.1 graphviz-ocaml-2.20.2-8.6.1 graphviz-perl-2.20.2-8.6.1 graphviz-php-2.20.2-8.6.1 graphviz-python-2.20.2-8.6.1 graphviz-ruby-2.20.2-8.6.1 graphviz-sharp-2.20.2-8.6.1 graphviz-tcl-2.20.2-8.6.1 References: https://bugzilla.novell.com/612766

1 0

openSUSE-RU-2010:0972-1 (low): tar: It segfaults with using --listed-incremental. Fixed by this update.
by maintenance＠opensuse.org 23 Nov '10

23 Nov '10

openSUSE Recommended Update: tar: It segfaults with using --listed-incremental. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0972-1 Rating: low References: #650640 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: tar: listed incremental (--listed-incremental) backup of root directory triggers a segfault. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch tar-3542 - openSUSE 11.2: zypper in -t patch tar-3542 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): tar-1.23-2.3.1 tar-backup-scripts-1.23-2.3.1 - openSUSE 11.3 (noarch): tar-lang-1.23-2.3.1 - openSUSE 11.2 (i586 x86_64): tar-1.21-4.5.1 - openSUSE 11.2 (noarch): tar-lang-1.21-4.5.1 References: https://bugzilla.novell.com/650640

1 0

openSUSE-RU-2010:0971-1 (low): mjpegtools: This update fixes segmentation faults in libquicktime and mjpegtools with libjpeg8.
by maintenance＠opensuse.org 23 Nov '10

23 Nov '10

openSUSE Recommended Update: mjpegtools: This update fixes segmentation faults in libquicktime and mjpegtools with libjpeg8. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0971-1 Rating: low References: #647859 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes segmentation faults in libquicktime and mjpegtools with libjpeg8. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libquicktime-3537 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libquicktime-1.1.5-4.3.1 libquicktime-devel-1.1.5-4.3.1 mjpegtools-1.9.0-9.3.1 mjpegtools-devel-1.9.0-9.3.1 References: https://bugzilla.novell.com/647859

1 0

openSUSE-SU-2010:0969-1 (moderate): gdm security update
by opensuse-security＠opensuse.org 22 Nov '10

22 Nov '10

openSUSE Security Update: gdm security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0969-1 Rating: moderate References: #628607 #633655 Cross-References: CVE-2010-1172 Affected Products: openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. It includes one version update. Description: dbus-glib allowed local users to write properties that were exported read-only via dbus (CVE-2010-1172). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch gdm-3108 - openSUSE 11.1: zypper in -t patch gdm-3108 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64) [New Version: 2.28.2]: gdm-2.28.2-0.2.2 gdm-branding-upstream-2.28.2-0.2.2 - openSUSE 11.2 (noarch) [New Version: 2.28.2]: gdm-lang-2.28.2-0.2.2 - openSUSE 11.1 (i586 ppc x86_64): gdm-2.24.0-15.1.1 gdm-branding-upstream-2.24.0-15.1.1 gdm-lang-2.24.0-15.1.1 References: http://support.novell.com/security/cve/CVE-2010-1172.html https://bugzilla.novell.com/628607 https://bugzilla.novell.com/633655

1 0

openSUSE-SU-2010:0968-1 (moderate): gdm security update
by opensuse-security＠opensuse.org 22 Nov '10

22 Nov '10

openSUSE Security Update: gdm security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0968-1 Rating: moderate References: #628607 #633655 #637069 Cross-References: CVE-2010-1172 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: dbus-glib allowed local users to write properties that were exported read-only via dbus (CVE-2010-1172). Additionally a bug that prevented XDMCP connections was fixed. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch gdm-3118 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): gdm-2.30.2-6.1.1 gdm-branding-upstream-2.30.2-6.1.1 gnome-applets-gdm-2.30.2-6.1.1 - openSUSE 11.3 (noarch): gdm-lang-2.30.2-6.1.1 References: http://support.novell.com/security/cve/CVE-2010-1172.html https://bugzilla.novell.com/628607 https://bugzilla.novell.com/633655 https://bugzilla.novell.com/637069

1 0