May 2010 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2010:0264-1 (low): ncpfs: Fixed several security issues
by opensuse-security＠opensuse.org 18 May '10

18 May '10

openSUSE Security Update: ncpfs: Fixed several security issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0264-1 Rating: low References: #550004 #583536 Cross-References: CVE-2010-0788 CVE-2010-0790 CVE-2010-0791 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update fixes three security issues in ncpfs: Fixed a information leakage on mount (CVE-2010-0790 / bnc#583536) Fixed a mtab locking problem (CVE-2010-0791 / bnc#583536) Fixed a race condition in ncpfs mounts (CVE-2010-0788 / bnc#550004) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch ncpfs-2395 - openSUSE 11.1: zypper in -t patch ncpfs-2395 - openSUSE 11.0: zypper in -t patch ncpfs-2395 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): ncpfs-2.2.6-158.5.1 - openSUSE 11.2 (i586 x86_64): ncpfs-devel-2.2.6-158.5.1 - openSUSE 11.2 (x86_64): ncpfs-32bit-2.2.6-158.5.1 - openSUSE 11.1 (i586 ppc src x86_64): ncpfs-2.2.6-147.34.1 - openSUSE 11.1 (i586 ppc x86_64): ncpfs-devel-2.2.6-147.34.1 - openSUSE 11.1 (x86_64): ncpfs-32bit-2.2.6-147.34.1 - openSUSE 11.1 (ppc): ncpfs-64bit-2.2.6-147.34.1 - openSUSE 11.0 (i586 ppc src x86_64): ncpfs-2.2.6-132.4 - openSUSE 11.0 (i586 ppc x86_64): ncpfs-devel-2.2.6-132.4 - openSUSE 11.0 (x86_64): ncpfs-32bit-2.2.6-132.4 - openSUSE 11.0 (ppc): ncpfs-64bit-2.2.6-132.4 References: http://support.novell.com/security/cve/CVE-2010-0788.html http://support.novell.com/security/cve/CVE-2010-0790.html http://support.novell.com/security/cve/CVE-2010-0791.html https://bugzilla.novell.com/550004 https://bugzilla.novell.com/583536

1 0

openSUSE-YU-2010:0259-1 (low): libzypp: Collective update for openSUSE 11.1.
by maintenance＠opensuse.org 17 May '10

17 May '10

openSUSE YOU Update: libzypp: Collective update for openSUSE 11.1. ______________________________________________________________________________ Announcement ID: openSUSE-YU-2010:0259-1 Rating: low References: #552265 #553712 #553895 #558813 #564239 #565050 #565525 #566291 #570623 #572634 #573897 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that has 11 YOU fixes can now be installed. It includes three new package versions. Description: The following bugs are fixed with this update: - support sha256 checksum for repomd and susetags - set repository:toolversion to 1.0 in common_write - disable update rule in noobsoletes case if installed package is to be kept [bnc#564239] - work around rpm bug when --prefix is used [bnc#565525] - add support for sparc architecture [bnc#566291] - Support optionally compressed product(s).xml in rpmmd metadata. - Turn off cookies when retrieving services repoindex.xml (bnc #573897) - Consider pending disable requests when removing service repositories. (bnc #572634) - Remember the enabled state of removed service repositories. This way we are able to restore service repositories correctly after a subscrition expired and gets renewed. (bnc #572634) - Evaluate SolvAttr::repositoryToolVersion to prevent loading outdated solv files. (bnc #570623) - Also parse <product> tag from .prod files <upgrade> section. - Fix chroot execution of update scripts. (bnc #558813) - Fix repository probing and building in presence of productdir. (bnc #553712) - Following https redirections requires the libcurl4 update providing CURLOPT_REDIR_PROTOCOLS to be installed. (bnc #553895) - Fix outdated python examples. - Show patch conflicts instead of requires to provide a hint about patch contents (bnc #565050) - Fix typo in man page. (bnc #552265) Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE YOU Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch updatestack_04_10-2279 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc src x86_64) [New Version: 1.0.14 and 5.30.24]: libzypp-5.30.24-0.1.1 zypper-1.0.14-0.1.2 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 0.13.13 and 5.30.24]: libsatsolver-devel-0.13.13-0.1.1 libzypp-devel-5.30.24-0.1.1 perl-satsolver-0.13.13-0.1.1 perl-zypp-0.4.8-2.1.51 python-satsolver-0.13.13-0.1.1 python-zypp-0.4.8-2.1.51 ruby-satsolver-0.13.13-0.1.1 ruby-zypp-0.4.8-2.1.51 satsolver-tools-0.13.13-0.1.1 - openSUSE 11.1 (src) [New Version: 0.13.13]: libsatsolver-0.13.13-0.1.1 libzypp-bindings-0.4.8-2.1.51 References: https://bugzilla.novell.com/552265 https://bugzilla.novell.com/553712 https://bugzilla.novell.com/553895 https://bugzilla.novell.com/558813 https://bugzilla.novell.com/564239 https://bugzilla.novell.com/565050 https://bugzilla.novell.com/565525 https://bugzilla.novell.com/566291 https://bugzilla.novell.com/570623 https://bugzilla.novell.com/572634 https://bugzilla.novell.com/573897

1 0

openSUSE-SU-2010:0255-2 (low): php5 security update.
by opensuse-security＠opensuse.org 17 May '10

17 May '10

openSUSE Security Update: php5 security update. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0255-2 Rating: low References: #588975 Cross-References: CVE-2010-0397 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: Incomplete XML RPC requests could crash the php interpreter (CVE-2010-0397). PHP was updated to version 5.2.12 to fix the problem. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch apache2-mod_php5-2410 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc src x86_64) [New Version: 5.2.13]: php5-5.2.13-0.1.1 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 5.2.13]: apache2-mod_php5-5.2.13-0.1.1 php5-bcmath-5.2.13-0.1.1 php5-bz2-5.2.13-0.1.1 php5-calendar-5.2.13-0.1.1 php5-ctype-5.2.13-0.1.1 php5-curl-5.2.13-0.1.1 php5-dba-5.2.13-0.1.1 php5-dbase-5.2.13-0.1.1 php5-devel-5.2.13-0.1.1 php5-dom-5.2.13-0.1.1 php5-exif-5.2.13-0.1.1 php5-fastcgi-5.2.13-0.1.1 php5-ftp-5.2.13-0.1.1 php5-gd-5.2.13-0.1.1 php5-gettext-5.2.13-0.1.1 php5-gmp-5.2.13-0.1.1 php5-hash-5.2.13-0.1.1 php5-iconv-5.2.13-0.1.1 php5-imap-5.2.13-0.1.1 php5-json-5.2.13-0.1.1 php5-ldap-5.2.13-0.1.1 php5-mbstring-5.2.13-0.1.1 php5-mcrypt-5.2.13-0.1.1 php5-mysql-5.2.13-0.1.1 php5-ncurses-5.2.13-0.1.1 php5-odbc-5.2.13-0.1.1 php5-openssl-5.2.13-0.1.1 php5-pcntl-5.2.13-0.1.1 php5-pdo-5.2.13-0.1.1 php5-pear-5.2.13-0.1.1 php5-pgsql-5.2.13-0.1.1 php5-posix-5.2.13-0.1.1 php5-pspell-5.2.13-0.1.1 php5-readline-5.2.13-0.1.1 php5-shmop-5.2.13-0.1.1 php5-snmp-5.2.13-0.1.1 php5-soap-5.2.13-0.1.1 php5-sockets-5.2.13-0.1.1 php5-sqlite-5.2.13-0.1.1 php5-suhosin-5.2.13-0.1.1 php5-sysvmsg-5.2.13-0.1.1 php5-sysvsem-5.2.13-0.1.1 php5-sysvshm-5.2.13-0.1.1 php5-tidy-5.2.13-0.1.1 php5-tokenizer-5.2.13-0.1.1 php5-wddx-5.2.13-0.1.1 php5-xmlreader-5.2.13-0.1.1 php5-xmlrpc-5.2.13-0.1.1 php5-xmlwriter-5.2.13-0.1.1 php5-xsl-5.2.13-0.1.1 php5-zip-5.2.13-0.1.1 php5-zlib-5.2.13-0.1.1 References: http://support.novell.com/security/cve/CVE-2010-0397.html https://bugzilla.novell.com/588975

1 0

openSUSE-SU-2010:0257-1 (low): libpng: fixed denial of service while decompressing a highly compressed huge ancillary chunk (CVE-2010-0205)
by opensuse-security＠opensuse.org 17 May '10

17 May '10

openSUSE Security Update: libpng: fixed denial of service while decompressing a highly compressed huge ancillary chunk (CVE-2010-0205) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0257-1 Rating: low References: #580484 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Denial of service while decompressing a highly compressed huge ancillary chunk has been fixed in libpng. CVE-2010-0205 has been assigned. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch libpng-devel-2159 - openSUSE 11.1: zypper in -t patch libpng-devel-2159 - openSUSE 11.0: zypper in -t patch libpng-devel-2159 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): libpng12-0-1.2.39-2.3.1 - openSUSE 11.2 (i586 x86_64): libpng-devel-1.2.39-2.3.1 libpng3-1.2.39-2.3.1 - openSUSE 11.2 (x86_64): libpng-devel-32bit-1.2.39-2.3.1 libpng12-0-32bit-1.2.39-2.3.1 - openSUSE 11.1 (i586 ppc src x86_64): libpng12-0-1.2.31-4.39.1 - openSUSE 11.1 (i586 ppc x86_64): libpng-devel-1.2.31-4.39.1 libpng3-1.2.31-4.39.1 - openSUSE 11.1 (x86_64): libpng-devel-32bit-1.2.31-4.39.1 libpng12-0-32bit-1.2.31-4.39.1 - openSUSE 11.1 (ppc): libpng-devel-64bit-1.2.31-4.39.1 libpng12-0-64bit-1.2.31-4.39.1 - openSUSE 11.0 (i586 ppc src x86_64): libpng12-0-1.2.26-14.12 - openSUSE 11.0 (i586 ppc x86_64): libpng-devel-1.2.26-14.12 libpng3-1.2.26-14.12 - openSUSE 11.0 (x86_64): libpng-devel-32bit-1.2.26-14.12 libpng12-0-32bit-1.2.26-14.12 - openSUSE 11.0 (ppc): libpng-devel-64bit-1.2.26-14.12 libpng12-0-64bit-1.2.26-14.12 References: https://bugzilla.novell.com/580484

1 0

openSUSE-SU-2010:0255-1 (low): php5 security update
by opensuse-security＠opensuse.org 17 May '10

17 May '10

openSUSE Security Update: php5 security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0255-1 Rating: low References: #588975 Cross-References: CVE-2010-0397 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: Incomplete XML RPC requests could crash the php interpreter (CVE-2010-0397). PHP was updated to version 5.3.2 to fix the problem. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch apache2-mod_php5-2409 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64) [New Version: 5.3.2]: php5-5.3.2-1.1.1 - openSUSE 11.2 (i586 x86_64) [New Version: 5.3.2]: apache2-mod_php5-5.3.2-1.1.1 php5-bcmath-5.3.2-1.1.1 php5-bz2-5.3.2-1.1.1 php5-calendar-5.3.2-1.1.1 php5-ctype-5.3.2-1.1.1 php5-curl-5.3.2-1.1.1 php5-dba-5.3.2-1.1.1 php5-devel-5.3.2-1.1.1 php5-dom-5.3.2-1.1.1 php5-enchant-5.3.2-1.1.1 php5-exif-5.3.2-1.1.1 php5-fastcgi-5.3.2-1.1.1 php5-fileinfo-5.3.2-1.1.1 php5-ftp-5.3.2-1.1.1 php5-gd-5.3.2-1.1.1 php5-gettext-5.3.2-1.1.1 php5-gmp-5.3.2-1.1.1 php5-hash-5.3.2-1.1.1 php5-iconv-5.3.2-1.1.1 php5-imap-5.3.2-1.1.1 php5-intl-5.3.2-1.1.1 php5-json-5.3.2-1.1.1 php5-ldap-5.3.2-1.1.1 php5-mbstring-5.3.2-1.1.1 php5-mcrypt-5.3.2-1.1.1 php5-mysql-5.3.2-1.1.1 php5-odbc-5.3.2-1.1.1 php5-openssl-5.3.2-1.1.1 php5-pcntl-5.3.2-1.1.1 php5-pdo-5.3.2-1.1.1 php5-pgsql-5.3.2-1.1.1 php5-phar-5.3.2-1.1.1 php5-posix-5.3.2-1.1.1 php5-pspell-5.3.2-1.1.1 php5-readline-5.3.2-1.1.1 php5-shmop-5.3.2-1.1.1 php5-snmp-5.3.2-1.1.1 php5-soap-5.3.2-1.1.1 php5-sockets-5.3.2-1.1.1 php5-sqlite-5.3.2-1.1.1 php5-suhosin-5.3.2-1.1.1 php5-sysvmsg-5.3.2-1.1.1 php5-sysvsem-5.3.2-1.1.1 php5-sysvshm-5.3.2-1.1.1 php5-tidy-5.3.2-1.1.1 php5-tokenizer-5.3.2-1.1.1 php5-wddx-5.3.2-1.1.1 php5-xmlreader-5.3.2-1.1.1 php5-xmlrpc-5.3.2-1.1.1 php5-xmlwriter-5.3.2-1.1.1 php5-xsl-5.3.2-1.1.1 php5-zip-5.3.2-1.1.1 php5-zlib-5.3.2-1.1.1 - openSUSE 11.2 (noarch) [New Version: 5.3.2]: php5-pear-5.3.2-1.1.1 References: http://support.novell.com/security/cve/CVE-2010-0397.html https://bugzilla.novell.com/588975

1 0

openSUSE-SU-2010:0251-1 (low): texlive security update
by opensuse-security＠opensuse.org 14 May '10

14 May '10

openSUSE Security Update: texlive security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0251-1 Rating: low References: #587794 Cross-References: CVE-2010-0739 CVE-2010-0827 CVE-2010-0829 CVE-2010-1440 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Specially crafted dvi files could cause buffer overflows in dvips and dvipng (CVE-2010-0827, CVE-2010-0829, CVE-2010-0739, CVE-2010-1440). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch texlive-2392 - openSUSE 11.1: zypper in -t patch texlive-2392 - openSUSE 11.0: zypper in -t patch texlive-2392 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): texlive-bin-2008-13.18.1 - openSUSE 11.2 (noarch src): texlive-2008-13.18.1 - openSUSE 11.2 (noarch): texlive-arab-2008-13.18.1 texlive-cjk-2008-13.18.1 texlive-context-2008-13.18.1 texlive-devel-2008-13.18.1 texlive-doc-2008-13.18.1 texlive-dvilj-2008-13.18.1 texlive-jadetex-2008-13.18.1 texlive-latex-2008-13.18.1 texlive-latex-doc-2008-13.18.1 texlive-metapost-2008-13.18.1 texlive-musictex-2008-13.18.1 texlive-nfs-2008-13.18.1 texlive-omega-2008-13.18.1 texlive-ppower4-2008-13.18.1 texlive-tex4ht-2008-13.18.1 texlive-tools-2008-13.18.1 texlive-xetex-2008-13.18.1 texlive-xmltex-2008-13.18.1 - openSUSE 11.1 (i586 ppc x86_64): texlive-bin-2007-219.7.1 - openSUSE 11.1 (noarch src): texlive-2007-219.7.1 - openSUSE 11.1 (noarch): texlive-arab-2007-219.7.1 texlive-cjk-2007-219.7.1 texlive-context-2007-219.7.1 texlive-devel-2007-219.7.1 texlive-doc-2007-219.7.1 texlive-dvilj-2007-219.7.1 texlive-jadetex-2007-219.7.1 texlive-latex-2007-219.7.1 texlive-latex-doc-2007-219.7.1 texlive-metapost-2007-219.7.1 texlive-musictex-2007-219.7.1 texlive-nfs-2007-219.7.1 texlive-omega-2007-219.7.1 texlive-ppower4-2007-219.7.1 texlive-tex4ht-2007-219.7.1 texlive-tools-2007-219.7.1 texlive-xetex-2007-219.7.1 texlive-xmltex-2007-219.7.1 - openSUSE 11.0 (i586 ppc x86_64): texlive-bin-2007-176.4 - openSUSE 11.0 (noarch src): texlive-2007-177.4 - openSUSE 11.0 (noarch): texlive-arab-2007-177.4 texlive-cjk-2007-177.4 texlive-context-2007-177.4 texlive-devel-2007-177.4 texlive-doc-2007-177.4 texlive-dvilj-2007-177.4 texlive-jadetex-2007-177.4 texlive-latex-2007-177.4 texlive-latex-doc-2007-177.4 texlive-metapost-2007-177.4 texlive-musictex-2007-177.4 texlive-nfs-2007-177.4 texlive-omega-2007-177.4 texlive-ppower4-2007-177.4 texlive-tex4ht-2007-177.4 texlive-tools-2007-177.4 texlive-xetex-2007-177.4 texlive-xmltex-2007-177.4 References: http://support.novell.com/security/cve/CVE-2010-0739.html http://support.novell.com/security/cve/CVE-2010-0827.html http://support.novell.com/security/cve/CVE-2010-0829.html http://support.novell.com/security/cve/CVE-2010-1440.html https://bugzilla.novell.com/587794

1 0

openSUSE-SU-2010:0247-1 (moderate): python: denial of service by proessing malformed XML ("Expat vulnerability")
by opensuse-security＠opensuse.org 14 May '10

14 May '10

openSUSE Security Update: python: denial of service by proessing malformed XML ("Expat vulnerability") ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0247-1 Rating: moderate References: #581765 Cross-References: CVE-2009-2625 CVE-2009-3560 CVE-2009-3720 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update of python has a copy of libxmlrpc that is vulnerable to denial of service bugs that can occur while processing malformed XML input. CVE-2009-2625: CVSS v2 Base Score: 5.0 (moderate) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Permissions, Privileges, and Access Control (CWE-264) CVE-2009-3720: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Insufficient Information (CWE-noinfo) CVE-2009-3560: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch libpython2_6-1_0-2213 - openSUSE 11.1: zypper in -t patch libpython2_6-1_0-2213 - openSUSE 11.0: zypper in -t patch libpython2_6-1_0-2213 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): python-2.6.2-6.4.1 python-base-2.6.2-6.4.1 - openSUSE 11.2 (i586 x86_64): libpython2_6-1_0-2.6.2-6.4.1 python-curses-2.6.2-6.4.1 python-demo-2.6.2-6.4.1 python-devel-2.6.2-6.4.1 python-gdbm-2.6.2-6.4.1 python-idle-2.6.2-6.4.1 python-tk-2.6.2-6.4.1 python-xml-2.6.2-6.4.1 - openSUSE 11.2 (x86_64): libpython2_6-1_0-32bit-2.6.2-6.4.1 python-32bit-2.6.2-6.4.1 python-base-32bit-2.6.2-6.4.1 - openSUSE 11.1 (i586 ppc src x86_64): python-2.6.0-2.23.1 python-base-2.6.0-2.22.23.1 - openSUSE 11.1 (i586 ppc x86_64): libpython2_6-1_0-2.6.0-2.22.23.1 python-curses-2.6.0-2.23.1 python-demo-2.6.0-2.23.1 python-devel-2.6.0-2.22.23.1 python-gdbm-2.6.0-2.23.1 python-idle-2.6.0-2.23.1 python-tk-2.6.0-2.23.1 python-xml-2.6.0-2.22.23.1 - openSUSE 11.1 (x86_64): libpython2_6-1_0-32bit-2.6.0-2.22.23.1 python-32bit-2.6.0-2.23.1 python-base-32bit-2.6.0-2.22.23.1 - openSUSE 11.1 (ppc): libpython2_6-1_0-64bit-2.6.0-2.22.23.1 python-64bit-2.6.0-2.23.1 python-base-64bit-2.6.0-2.22.23.1 - openSUSE 11.0 (i586 ppc src x86_64): python-2.5.2-26.6 - openSUSE 11.0 (i586 ppc x86_64): python-curses-2.5.2-26.6 python-demo-2.5.2-26.6 python-devel-2.5.2-26.6 python-gdbm-2.5.2-26.6 python-idle-2.5.2-26.6 python-tk-2.5.2-26.6 python-xml-2.5.2-26.6 - openSUSE 11.0 (x86_64): python-32bit-2.5.2-26.6 - openSUSE 11.0 (ppc): python-64bit-2.5.2-26.6 References: http://support.novell.com/security/cve/CVE-2009-2625.html http://support.novell.com/security/cve/CVE-2009-3560.html http://support.novell.com/security/cve/CVE-2009-3720.html https://bugzilla.novell.com/581765

1 0

openSUSE-RU-2010:0244-1 (low): fail2ban: A communication error caused by python version incompatibility is fixed with this update.
by maintenance＠opensuse.org 11 May '10

11 May '10

openSUSE Recommended Update: fail2ban: A communication error caused by python version incompatibility is fixed with this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0244-1 Rating: low References: #537239 #600076 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. It includes one version update. Description: This update of fail2ban fixes the following bugs: - socket file preventing startup if fail2ban crashed earlier (bnc#537239) - fail2ban.server: ERROR Unexpected communication error (bnc#600076) - adds a new "ban"-command Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch fail2ban-2394 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64) [New Version: 0.8.4]: fail2ban-0.8.4-1.1.1 References: https://bugzilla.novell.com/537239 https://bugzilla.novell.com/600076

1 0

openSUSE-RU-2010:0232-1 (low): open-vm-tools: The file "/etc/modprobe.d/vmnics" is missing in open-vm-tools. It is added by this update.
by maintenance＠opensuse.org 06 May '10

06 May '10

openSUSE Recommended Update: open-vm-tools: The file "/etc/modprobe.d/vmnics" is missing in open-vm-tools. It is added by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0232-1 Rating: low References: #590329 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The file "/etc/modprobe.d/vmnics" is missing in open-vm-tools. It is added by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch libvmtools-devel-2382 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): open-vm-tools-2009.07.22-2.5.2 - openSUSE 11.2 (i586 x86_64): libvmtools-devel-2009.07.22-2.5.2 libvmtools0-2009.07.22-2.5.2 open-vm-tools-gui-2009.07.22-2.5.2 vmware-guest-kmp-debug-2009.07.22_2.6.31.12_0.2-2.5.2 vmware-guest-kmp-default-2009.07.22_2.6.31.12_0.2-2.5.2 vmware-guest-kmp-desktop-2009.07.22_2.6.31.12_0.2-2.5.2 - openSUSE 11.2 (i586): vmware-guest-kmp-pae-2009.07.22_2.6.31.12_0.2-2.5.2 References: https://bugzilla.novell.com/590329

1 0

openSUSE-RU-2010:0231-1 (critical): suse-build-key: extend key lifetimes.
by maintenance＠opensuse.org 06 May '10

06 May '10

openSUSE Recommended Update: suse-build-key: extend key lifetimes. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0231-1 Rating: critical References: #600157 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update extends life time of our default included keys for 4 more years. Updated keys: - 307E3D54 build(a)suse.de "SuSE Package Signing Key" (2014-05-03) - 9C800ACA build(a)suse.de "SuSE Package Signing Key" (2014-05-03) - B37B98A9 support(a)suse.com "SUSE PTF Signing Key" (2014-05-03) - 7E2E3B05 novell-provo-build(a)novell.com "Novell Provo Build" (2014-05-06) Added keys: - 1D061A62 support(a)novell.com "build(a)novell.com (Novell Linux Products)" (2014-05-06) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch openSUSE-build-key-2398 suse-build-key-2399 - openSUSE 11.1: zypper in -t patch openSUSE-build-key-2398 suse-build-key-2399 - openSUSE 11.0: zypper in -t patch suse-build-key-2399 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (noarch src): openSUSE-build-key-1.0-4.6.1 suse-build-key-1.0-909.6.1 - openSUSE 11.1 (noarch src): openSUSE-build-key-1.0-3.19.1 suse-build-key-1.0-907.33.1 - openSUSE 11.0 (noarch src): suse-build-key-1.0-855.2 References: https://bugzilla.novell.com/600157

1 0