July 2010 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2010:0365-1 (moderate): moodle security update
by opensuse-security＠opensuse.org 12 Jul '10

12 Jul '10

openSUSE Security Update: moodle security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0365-1 Rating: moderate References: #616186 Cross-References: CVE-2010-2228 CVE-2010-2229 CVE-2010-2230 CVE-2010-2231 Affected Products: openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. It includes one version update. Description: Moodle was prone to several Cross-Site Scripting (XSS) vulnerabilities (CVE-2010-2228, CVE-2010-2229, CVE-2010-2230, CVE-2010-2231). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch moodle-2691 - openSUSE 11.0: zypper in -t patch moodle-2691 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (noarch src) [New Version: 1.9.9]: moodle-1.9.9-0.1.1 - openSUSE 11.1 (noarch) [New Version: 1.9.9]: moodle-af-1.9.9-0.1.1 moodle-ar-1.9.9-0.1.1 moodle-be-1.9.9-0.1.1 moodle-bg-1.9.9-0.1.1 moodle-bs-1.9.9-0.1.1 moodle-ca-1.9.9-0.1.1 moodle-cs-1.9.9-0.1.1 moodle-da-1.9.9-0.1.1 moodle-de-1.9.9-0.1.1 moodle-de_du-1.9.9-0.1.1 moodle-el-1.9.9-0.1.1 moodle-es-1.9.9-0.1.1 moodle-et-1.9.9-0.1.1 moodle-eu-1.9.9-0.1.1 moodle-fa-1.9.9-0.1.1 moodle-fi-1.9.9-0.1.1 moodle-fr-1.9.9-0.1.1 moodle-ga-1.9.9-0.1.1 moodle-gl-1.9.9-0.1.1 moodle-he-1.9.9-0.1.1 moodle-hi-1.9.9-0.1.1 moodle-hr-1.9.9-0.1.1 moodle-hu-1.9.9-0.1.1 moodle-id-1.9.9-0.1.1 moodle-is-1.9.9-0.1.1 moodle-it-1.9.9-0.1.1 moodle-ja-1.9.9-0.1.1 moodle-ka-1.9.9-0.1.1 moodle-km-1.9.9-0.1.1 moodle-kn-1.9.9-0.1.1 moodle-ko-1.9.9-0.1.1 moodle-lt-1.9.9-0.1.1 moodle-lv-1.9.9-0.1.1 moodle-mi_tn-1.9.9-0.1.1 moodle-ms-1.9.9-0.1.1 moodle-nl-1.9.9-0.1.1 moodle-nn-1.9.9-0.1.1 moodle-no-1.9.9-0.1.1 moodle-pl-1.9.9-0.1.1 moodle-pt-1.9.9-0.1.1 moodle-ro-1.9.9-0.1.1 moodle-ru-1.9.9-0.1.1 moodle-sk-1.9.9-0.1.1 moodle-sl-1.9.9-0.1.1 moodle-so-1.9.9-0.1.1 moodle-sq-1.9.9-0.1.1 moodle-sr-1.9.9-0.1.1 moodle-sv-1.9.9-0.1.1 moodle-th-1.9.9-0.1.1 moodle-tl-1.9.9-0.1.1 moodle-tr-1.9.9-0.1.1 moodle-uk-1.9.9-0.1.1 moodle-vi-1.9.9-0.1.1 moodle-zh_cn-1.9.9-0.1.1 - openSUSE 11.0 (noarch src) [New Version: 1.9.9]: moodle-1.9.9-0.1 - openSUSE 11.0 (noarch) [New Version: 1.9.9]: moodle-af-1.9.9-0.1 moodle-ar-1.9.9-0.1 moodle-be-1.9.9-0.1 moodle-bg-1.9.9-0.1 moodle-bs-1.9.9-0.1 moodle-ca-1.9.9-0.1 moodle-cs-1.9.9-0.1 moodle-da-1.9.9-0.1 moodle-de-1.9.9-0.1 moodle-de_du-1.9.9-0.1 moodle-el-1.9.9-0.1 moodle-es-1.9.9-0.1 moodle-et-1.9.9-0.1 moodle-eu-1.9.9-0.1 moodle-fa-1.9.9-0.1 moodle-fi-1.9.9-0.1 moodle-fr-1.9.9-0.1 moodle-ga-1.9.9-0.1 moodle-gl-1.9.9-0.1 moodle-he-1.9.9-0.1 moodle-hi-1.9.9-0.1 moodle-hr-1.9.9-0.1 moodle-hu-1.9.9-0.1 moodle-id-1.9.9-0.1 moodle-is-1.9.9-0.1 moodle-it-1.9.9-0.1 moodle-ja-1.9.9-0.1 moodle-ka-1.9.9-0.1 moodle-km-1.9.9-0.1 moodle-kn-1.9.9-0.1 moodle-ko-1.9.9-0.1 moodle-lt-1.9.9-0.1 moodle-lv-1.9.9-0.1 moodle-mi_tn-1.9.9-0.1 moodle-ms-1.9.9-0.1 moodle-nl-1.9.9-0.1 moodle-nn-1.9.9-0.1 moodle-no-1.9.9-0.1 moodle-pl-1.9.9-0.1 moodle-pt-1.9.9-0.1 moodle-ro-1.9.9-0.1 moodle-ru-1.9.9-0.1 moodle-sk-1.9.9-0.1 moodle-sl-1.9.9-0.1 moodle-so-1.9.9-0.1 moodle-sq-1.9.9-0.1 moodle-sr-1.9.9-0.1 moodle-sv-1.9.9-0.1 moodle-th-1.9.9-0.1 moodle-tl-1.9.9-0.1 moodle-tr-1.9.9-0.1 moodle-uk-1.9.9-0.1 moodle-vi-1.9.9-0.1 moodle-zh_cn-1.9.9-0.1 References: http://support.novell.com/security/cve/CVE-2010-2228.html http://support.novell.com/security/cve/CVE-2010-2229.html http://support.novell.com/security/cve/CVE-2010-2230.html http://support.novell.com/security/cve/CVE-2010-2231.html https://bugzilla.novell.com/616186

1 0

openSUSE-SU-2010:0359-1 (critical): acroread: Update to security fix release 9.3.3
by opensuse-security＠opensuse.org 08 Jul '10

08 Jul '10

openSUSE Security Update: acroread: Update to security fix release 9.3.3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0359-1 Rating: critical References: #612064 Cross-References: CVE-2010-1240 CVE-2010-1285 CVE-2010-1295 CVE-2010-1297 CVE-2010-2168 CVE-2010-2201 CVE-2010-2202 CVE-2010-2203 CVE-2010-2204 CVE-2010-2205 CVE-2010-2206 CVE-2010-2207 CVE-2010-2208 CVE-2010-2209 CVE-2010-2210 CVE-2010-2211 CVE-2010-2212 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. It includes one version update. Description: Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code (CVE-2010-1297, CVE-2010-1240, CVE-2010-1285, CVE-2010-1295, CVE-2010-2168, CVE-2010-2201, CVE-2010-2202, CVE-2010-2203, CVE-2010-2204, CVE-2010-2205, CVE-2010-2206, CVE-2010-2207, CVE-2010-2208, CVE-2010-2209, CVE-2010-2210, CVE-2010-2211, CVE-2010-2212). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch acroread-2664 - openSUSE 11.1: zypper in -t patch acroread-2664 - openSUSE 11.0: zypper in -t patch acroread-2664 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (noarch) [New Version: 9.3.3]: acroread-cmaps-9.3.3-2.1.1 acroread-fonts-ja-9.3.3-2.1.1 acroread-fonts-ko-9.3.3-2.1.1 acroread-fonts-zh_CN-9.3.3-2.1.1 acroread-fonts-zh_TW-9.3.3-2.1.1 - openSUSE 11.2 (i586) [New Version: 9.3.3]: acroread-9.3.3-2.1.1 - openSUSE 11.1 (noarch) [New Version: 9.3.3]: acroread-cmaps-9.3.3-2.1.1 acroread-fonts-ja-9.3.3-2.1.1 acroread-fonts-ko-9.3.3-2.1.1 acroread-fonts-zh_CN-9.3.3-2.1.1 acroread-fonts-zh_TW-9.3.3-2.1.1 - openSUSE 11.1 (i586) [New Version: 9.3.3]: acroread-9.3.3-2.1.1 - openSUSE 11.0 (noarch) [New Version: 9.3.3]: acroread-cmaps-9.3.3-2.1 acroread-fonts-ja-9.3.3-2.1 acroread-fonts-ko-9.3.3-2.1 acroread-fonts-zh_CN-9.3.3-2.1 acroread-fonts-zh_TW-9.3.3-2.1 - openSUSE 11.0 (i586) [New Version: 9.3.3]: acroread-9.3.3-2.1 References: http://support.novell.com/security/cve/CVE-2010-1240.html http://support.novell.com/security/cve/CVE-2010-1285.html http://support.novell.com/security/cve/CVE-2010-1295.html http://support.novell.com/security/cve/CVE-2010-1297.html http://support.novell.com/security/cve/CVE-2010-2168.html http://support.novell.com/security/cve/CVE-2010-2201.html http://support.novell.com/security/cve/CVE-2010-2202.html http://support.novell.com/security/cve/CVE-2010-2203.html http://support.novell.com/security/cve/CVE-2010-2204.html http://support.novell.com/security/cve/CVE-2010-2205.html http://support.novell.com/security/cve/CVE-2010-2206.html http://support.novell.com/security/cve/CVE-2010-2207.html http://support.novell.com/security/cve/CVE-2010-2208.html http://support.novell.com/security/cve/CVE-2010-2209.html http://support.novell.com/security/cve/CVE-2010-2210.html http://support.novell.com/security/cve/CVE-2010-2211.html http://support.novell.com/security/cve/CVE-2010-2212.html https://bugzilla.novell.com/612064

1 0

openSUSE-SU-2010:0358-2 (important): MozillaFirefox: Security update to version 3.5.10
by opensuse-security＠opensuse.org 08 Jul '10

08 Jul '10

openSUSE Security Update: MozillaFirefox: Security update to version 3.5.10 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0358-2 Rating: important References: #603356 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes two new package versions. Description: Mozilla Firefox was updated to version 3.5.10, fixing various bugs and security issues. MFSA 2010-33 / CVE-2008-5913: Security researcher Amit Klein reported that it was possible to reverse engineer the value used to seed Math.random(). Since the pseudo-random number generator was only seeded once per browsing session, this seed value could be used as a unique token to identify and track users across different web sites. MFSA 2010-32 / CVE-2010-1197: Security researcher Ilja van Sprundel of IOActive reported that the Content-Disposition: attachment HTTP header was ignored when Content-Type: multipart was also present. This issue could potentially lead to XSS problems in sites that allow users to upload arbitrary files and specify a Content-Type but rely on Content-Disposition: attachment to prevent the content from being displayed inline. MFSA 2010-31 / CVE-2010-1125: Google security researcher Michal Zalewski reported that focus() could be used to change a user's cursor focus while they are typing, potentially directing their keyboard input to an unintended location. This behaviour was also present across origins when content from one domain was embedded within another via an iframe. A malicious web page could use this behaviour to steal keystrokes from a victim while they were typing sensitive information such as a password. MFSA 2010-30 / CVE-2010-1199: Security researcher Martin Barbella reported via TippingPoint's Zero Day Initiative that an XSLT node sorting routine contained an integer overflow vulnerability. In cases where one of the nodes to be sorted contained a very large text value, the integer used to allocate a memory buffer to store its value would overflow, resulting in too small a buffer being created. An attacker could use this vulnerability to write data past the end of the buffer, causing the browser to crash and potentially running arbitrary code on a victim's computer. MFSA 2010-29 / CVE-2010-1196: Security researcher Nils of MWR InfoSecurity reported that the routine for setting the text value for certain types of DOM nodes contained an integer overflow vulnerability. When a very long string was passed to this routine, the integer value used in creating a new memory buffer to hold the string would overflow, resulting in too small a buffer being allocated. An attacker could use this vulnerability to write data past the end of the buffer, causing a crash and potentially running arbitrary code on a victim's computer. MFSA 2010-28 / CVE-2010-1198: Microsoft Vulnerability Research reported that two plugin instances could interact in a way in which one plugin gets a reference to an object owned by a second plugin and continues to hold that reference after the second plugin is unloaded and its object is destroyed. In these cases, the first plugin would contain a pointer to freed memory which, if accessed, could be used by an attacker to execute arbitrary code on a victim's computer. MFSA 2010-27 / CVE-2010-0183: Security researcher wushi of team509 reported that the frame construction process for certain types of menus could result in a menu containing a pointer to a previously freed menu item. During the cycle collection process, this freed item could be accessed, resulting in the execution of a section of code potentially controlled by an attacker. MFSA 2010-26 / CVE-2010-1200 / CVE-2010-1201 / CVE-2010-1202 / CVE-2010-1203: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. MFSA 2010-25 / CVE-2010-1121: A memory corruption flaw leading to code execution was reported by security researcher Nils of MWR InfoSecurity during the 2010 Pwn2Own contest sponsored by TippingPoint's Zero Day Initiative. By moving DOM nodes between documents Nils found a case where the moved node incorrectly retained its old scope. If garbage collection could be triggered at the right time then Firefox would later use this freed object. The contest winning exploit only affects Firefox 3.6 and not earlier versions. Updated (June 22, 2010): Firefox 3.5, SeaMonkey 2.0, and Thunderbird 3.0 based on earlier versions of the browser engine were patched just in case there is an alternate way of triggering the underlying flaw. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch MozillaFirefox-2595 - openSUSE 11.1: zypper in -t patch MozillaFirefox-2595 - openSUSE 11.0: zypper in -t patch MozillaFirefox-2595 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64) [New Version: 1.9.1.10 and 3.5.10]: MozillaFirefox-3.5.10-0.1.1 mozilla-xulrunner191-1.9.1.10-0.1.1 - openSUSE 11.2 (i586 x86_64) [New Version: 1.9.1.10 and 3.5.10]: MozillaFirefox-branding-upstream-3.5.10-0.1.1 MozillaFirefox-translations-common-3.5.10-0.1.1 MozillaFirefox-translations-other-3.5.10-0.1.1 mozilla-xulrunner191-devel-1.9.1.10-0.1.1 mozilla-xulrunner191-gnomevfs-1.9.1.10-0.1.1 mozilla-xulrunner191-translations-common-1.9.1.10-0.1.1 mozilla-xulrunner191-translations-other-1.9.1.10-0.1.1 python-xpcom191-1.9.1.10-0.1.1 - openSUSE 11.2 (x86_64) [New Version: 1.9.1.10]: mozilla-xulrunner191-32bit-1.9.1.10-0.1.1 mozilla-xulrunner191-gnomevfs-32bit-1.9.1.10-0.1.1 - openSUSE 11.1 (i586 ppc src x86_64) [New Version: 1.9.1.10 and 3.5.10]: MozillaFirefox-3.5.10-0.1.2 mozilla-xulrunner191-1.9.1.10-0.1.2 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 1.9.1.10 and 3.5.10]: MozillaFirefox-branding-upstream-3.5.10-0.1.2 MozillaFirefox-translations-common-3.5.10-0.1.2 MozillaFirefox-translations-other-3.5.10-0.1.2 mozilla-xulrunner191-devel-1.9.1.10-0.1.2 mozilla-xulrunner191-gnomevfs-1.9.1.10-0.1.2 mozilla-xulrunner191-translations-common-1.9.1.10-0.1.2 mozilla-xulrunner191-translations-other-1.9.1.10-0.1.2 python-xpcom191-1.9.1.10-0.1.2 - openSUSE 11.1 (x86_64) [New Version: 1.9.1.10]: mozilla-xulrunner191-32bit-1.9.1.10-0.1.2 mozilla-xulrunner191-gnomevfs-32bit-1.9.1.10-0.1.2 - openSUSE 11.0 (i586 ppc src x86_64) [New Version: 1.9.1.10 and 3.5.10]: MozillaFirefox-3.5.10-0.1 mozilla-xulrunner191-1.9.1.10-0.1 - openSUSE 11.0 (i586 ppc x86_64) [New Version: 1.9.1.10 and 3.5.10]: MozillaFirefox-branding-upstream-3.5.10-0.1 MozillaFirefox-translations-common-3.5.10-0.1 MozillaFirefox-translations-other-3.5.10-0.1 mozilla-xulrunner191-devel-1.9.1.10-0.1 mozilla-xulrunner191-gnomevfs-1.9.1.10-0.1 mozilla-xulrunner191-translations-common-1.9.1.10-0.1 mozilla-xulrunner191-translations-other-1.9.1.10-0.1 python-xpcom191-1.9.1.10-0.1 - openSUSE 11.0 (x86_64) [New Version: 1.9.1.10]: mozilla-xulrunner191-32bit-1.9.1.10-0.1 mozilla-xulrunner191-gnomevfs-32bit-1.9.1.10-0.1 - openSUSE 11.0 (ppc) [New Version: 1.9.1.10]: mozilla-xulrunner191-64bit-1.9.1.10-0.1 mozilla-xulrunner191-gnomevfs-64bit-1.9.1.10-0.1 References: https://bugzilla.novell.com/603356

1 0

openSUSE-SU-2010:0358-1 (important): MozillaThunderbird: Update to 3.0.5
by opensuse-security＠opensuse.org 07 Jul '10

07 Jul '10

openSUSE Security Update: MozillaThunderbird: Update to 3.0.5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0358-1 Rating: important References: #603356 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes two new package versions. Description: Mozilla Thunderbird was updated to version 3.0.5, fixing lots of security issues. Mozilla has so far not communicated what vulnerabilities were fixed, the list will appear on: http://www.mozilla.org/security/known-vulnerabilities/thunde rbird30.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch MozillaThunderbird-2580 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64) [New Version: 3.0.5]: MozillaThunderbird-3.0.5-1.1.1 - openSUSE 11.2 (i586 x86_64) [New Version: 1.0.1 and 3.0.5]: MozillaThunderbird-devel-3.0.5-1.1.1 MozillaThunderbird-translations-common-3.0.5-1.1.1 MozillaThunderbird-translations-other-3.0.5-1.1.1 enigmail-1.0.1-1.1.1 References: https://bugzilla.novell.com/603356

1 0

openSUSE-RU-2010:0357-1 (low): python: This update fixes problems caused by using "osc build"
by maintenance＠opensuse.org 06 Jul '10

06 Jul '10

openSUSE Recommended Update: python: This update fixes problems caused by using "osc build" ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0357-1 Rating: low References: #612305 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Some calls in python's subprocess module were not properly guarded against interruptions, resulting in exceptions when using "osc build". This update adds the necessary guards. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch libpython2_6-1_0-2565 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): python-2.6.2-6.5.1 python-base-2.6.2-6.5.1 - openSUSE 11.2 (i586 x86_64): libpython2_6-1_0-2.6.2-6.5.1 python-curses-2.6.2-6.5.1 python-demo-2.6.2-6.5.1 python-devel-2.6.2-6.5.1 python-gdbm-2.6.2-6.5.1 python-idle-2.6.2-6.5.1 python-tk-2.6.2-6.5.1 python-xml-2.6.2-6.5.1 - openSUSE 11.2 (x86_64): libpython2_6-1_0-32bit-2.6.2-6.5.1 python-32bit-2.6.2-6.5.1 python-base-32bit-2.6.2-6.5.1 References: https://bugzilla.novell.com/612305

1 0

openSUSE-SU-2010:0354-1 (important): KVIrc: format string and directory traversal vulnerability
by opensuse-security＠opensuse.org 05 Jul '10

05 Jul '10

openSUSE Security Update: KVIrc: format string and directory traversal vulnerability ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0354-1 Rating: important References: #613163 Cross-References: CVE-2010-2451 CVE-2010-2452 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of KVirc fixes a remotely exploitable format string and directory traversal vulnerability (CVE-2010-2451, CVE-2010-2452). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch kvirc-2642 - openSUSE 11.1: zypper in -t patch kvirc-2642 - openSUSE 11.0: zypper in -t patch kvirc-2642 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): kvirc-3.4.2-4.6.1 - openSUSE 11.2 (i586 x86_64): kvirc-devel-3.4.2-4.6.1 - openSUSE 11.1 (i586 ppc src x86_64): kvirc-3.4.2-2.25.1 - openSUSE 11.1 (i586 ppc x86_64): kvirc-devel-3.4.2-2.25.1 - openSUSE 11.0 (i586 ppc src x86_64): kvirc-3.2.6-186.2 - openSUSE 11.0 (i586 ppc x86_64): kvirc-devel-3.2.6-186.2 References: http://support.novell.com/security/cve/CVE-2010-2451.html http://support.novell.com/security/cve/CVE-2010-2452.html https://bugzilla.novell.com/613163

1 0

openSUSE-SU-2010:0351-1 (moderate): libvorbis: memory corruption while parsing ogg files
by opensuse-security＠opensuse.org 02 Jul '10

02 Jul '10

openSUSE Security Update: libvorbis: memory corruption while parsing ogg files ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0351-1 Rating: moderate References: #608192 Cross-References: CVE-2009-2663 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of libvorbis fixes a memory corruption while parsing OGG files. This bug was exploitable by remote attackers to cause an application crash and could probably be exploited to execute arbitrary code. CVE-2009-2663: CVSS v2 Base Score: 6.8 (important) (AV:N/AC:M/Au:N/C:P/I:P/A:P): Resource Management Errors (CWE-399) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch libvorbis-2492 - openSUSE 11.1: zypper in -t patch libvorbis-2492 - openSUSE 11.0: zypper in -t patch libvorbis-2492 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): libvorbis-1.2.0-83.3.1 - openSUSE 11.2 (i586 x86_64): libvorbis-devel-1.2.0-83.3.1 libvorbis-doc-1.2.0-83.3.1 - openSUSE 11.2 (x86_64): libvorbis-32bit-1.2.0-83.3.1 - openSUSE 11.1 (i586 ppc src x86_64): libvorbis-1.2.0-78.17.1 - openSUSE 11.1 (i586 ppc x86_64): libvorbis-devel-1.2.0-78.17.1 libvorbis-doc-1.2.0-78.17.1 - openSUSE 11.1 (x86_64): libvorbis-32bit-1.2.0-78.17.1 - openSUSE 11.1 (ppc): libvorbis-64bit-1.2.0-78.17.1 - openSUSE 11.0 (i586 ppc src x86_64): libvorbis-1.2.0-53.3 - openSUSE 11.0 (i586 ppc x86_64): libvorbis-devel-1.2.0-53.3 libvorbis-doc-1.2.0-53.3 - openSUSE 11.0 (x86_64): libvorbis-32bit-1.2.0-53.3 - openSUSE 11.0 (ppc): libvorbis-64bit-1.2.0-53.3 References: http://support.novell.com/security/cve/CVE-2009-2663.html https://bugzilla.novell.com/608192

1 0