openSUSE Recommended Update: graphviz: 'tred' from package graphviz is broken. Fixed by this update.
______________________________________________________________________________
Announcement ID: openSUSE-RU-2010:0318-1
Rating: low
References: #590743 #609404
Affected Products:
openSUSE 11.2
______________________________________________________________________________
An update that has two recommended fixes can now be
installed.
Description:
'tred' of the package graphviz in 11.2 is broken and
produces no sensible output. This update fixes it and also
a minor issue in gvpr.
Patch Instructions:
To install this openSUSE Recommended Update use YaST online_update.
Alternatively you can run the command listed for your product:
- openSUSE 11.2:
zypper in -t patch graphviz-2512
To bring your system up-to-date, use "zypper patch".
Package List:
- openSUSE 11.2 (i586 src x86_64):
graphviz-2.20.2-45.4.1
- openSUSE 11.2 (i586 x86_64):
graphviz-devel-2.20.2-45.4.1
References:
https://bugzilla.novell.com/590743https://bugzilla.novell.com/609404
openSUSE Security Update: puppet security update
______________________________________________________________________________
Announcement ID: openSUSE-SU-2010:0306-1
Rating: low
References: #585402
Cross-References: CVE-2010-0156
Affected Products:
openSUSE 11.2
openSUSE 11.1
______________________________________________________________________________
An update that fixes one vulnerability is now available.
Description:
pupped created temporary files with fixed names. Local
attacks could exploit that to install symlinks that
overwrite files of the victim (CVE-2010-0156).
Patch Instructions:
To install this openSUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- openSUSE 11.2:
zypper in -t patch puppet-2101
- openSUSE 11.1:
zypper in -t patch puppet-2101
To bring your system up-to-date, use "zypper patch".
Package List:
- openSUSE 11.2 (i586 src x86_64):
puppet-0.24.8-2.2.1
- openSUSE 11.2 (i586 x86_64):
puppet-server-0.24.8-2.2.1
- openSUSE 11.1 (i586 ppc src x86_64):
puppet-0.24.5-1.32.1
- openSUSE 11.1 (i586 ppc x86_64):
puppet-server-0.24.5-1.32.1
References:
http://support.novell.com/security/cve/CVE-2010-0156.htmlhttps://bugzilla.novell.com/585402