August 2010 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2010:0474-1 (important): mrtg: The execution of mrtg ends in a parse error when perl 5.12 is used. Fixed by this update.
by maintenance＠opensuse.org 05 Aug '10

05 Aug '10

openSUSE Recommended Update: mrtg: The execution of mrtg ends in a parse error when perl 5.12 is used. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0474-1 Rating: important References: #625437 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The execution of mrtg ends in a parse error when perl 5.12 is used. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch mrtg-2831 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): mrtg-2.16.2-45.1.1 References: https://bugzilla.novell.com/625437

1 0

openSUSE-RU-2010:0473-1 (low): xemacs-packages: Xemacs fails to load customization files. Fixed by this update.
by maintenance＠opensuse.org 05 Aug '10

05 Aug '10

openSUSE Recommended Update: xemacs-packages: Xemacs fails to load customization files. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0473-1 Rating: low References: #590429 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Xemacs fails to load customization files. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch xemacs-packages-2857 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (noarch src): xemacs-packages-20090217-2.5.1 - openSUSE 11.2 (noarch): xemacs-packages-el-20090217-2.5.1 xemacs-packages-info-20090217-2.5.1 References: https://bugzilla.novell.com/590429

1 0

openSUSE-RU-2010:0472-1 (low): perl: This update fixes a crash caused by the use of constants.
by maintenance＠opensuse.org 05 Aug '10

05 Aug '10

openSUSE Recommended Update: perl: This update fixes a crash caused by the use of constants. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0472-1 Rating: low References: #621856 #624628 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: If a constant is defined with the 'use constant' pragma, perl may crash later on when the constant is used as function argument (like in a print statement). Also, a bug in the h2ph translator was fixed that led to spurious warnings about _h2ph_pre.ph if 'perl -w' was used. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch perl-2828 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): perl-5.12.1-2.1.1 - openSUSE 11.3 (i586 x86_64): perl-base-5.12.1-2.1.1 - openSUSE 11.3 (x86_64): perl-32bit-5.12.1-2.1.1 perl-base-32bit-5.12.1-2.1.1 - openSUSE 11.3 (noarch): perl-doc-5.12.1-2.1.1 References: https://bugzilla.novell.com/621856 https://bugzilla.novell.com/624628

1 0

openSUSE-RU-2010:0471-1 (moderate): bind: Fixed a bug in named chrooting
by maintenance＠opensuse.org 05 Aug '10

05 Aug '10

openSUSE Recommended Update: bind: Fixed a bug in named chrooting ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0471-1 Rating: moderate References: #625019 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The bind name server init script was updated to fix: - #625019: named refuse to start : init.d/named script is wrong to mount /proc bind Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch bind-2825 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): bind-9.7.1-2.1.1 - openSUSE 11.3 (i586 x86_64): bind-chrootenv-9.7.1-2.1.1 bind-devel-9.7.1-2.1.1 bind-libs-9.7.1-2.1.1 bind-utils-9.7.1-2.1.1 - openSUSE 11.3 (x86_64): bind-libs-32bit-9.7.1-2.1.1 - openSUSE 11.3 (noarch): bind-doc-9.7.1-2.1.1 References: https://bugzilla.novell.com/625019

1 0

openSUSE-RU-2010:0470-1 (low): usb_modeswitch: version upgrade to support more devices
by maintenance＠opensuse.org 05 Aug '10

05 Aug '10

openSUSE Recommended Update: usb_modeswitch: version upgrade to support more devices ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0470-1 Rating: low References: #622525 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: usb_modeswitch is upgraded to version 1.1.3 and usb_modeswitch-data to version 20100707 to improve the openSUSE hardware compatibility. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch usb_modeswitch-2814 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64) [New Version: 1.1.3]: usb_modeswitch-1.1.3-1.1.1 - openSUSE 11.3 (noarch) [New Version: 1.1.3]: usb_modeswitch-data-1.1.3-1.1.1 References: https://bugzilla.novell.com/622525

1 0

openSUSE-SU-2010:0460-1 (moderate (10+4+6)): squidGuard: Fixed buffer overflows
by opensuse-security＠opensuse.org 02 Aug '10

02 Aug '10

openSUSE Security Update: squidGuard: Fixed buffer overflows ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0460-1 Rating: moderate (10+4+6) References: #550930 #625439 Cross-References: CVE-2009-3700 CVE-2009-3826 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Two buffer overflows in squidGard were fixed: CVE-2009-3700: Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service (application hang or loss of blocking functionality) via a long URL with many / (slash) characters, related to "emergency mode." CVE-2009-3826: Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL. Also a logrotate mistake was fixed. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch squidGuard-2852 - openSUSE 11.2: zypper in -t patch squidGuard-2852 - openSUSE 11.1: zypper in -t patch squidGuard-2852 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): squidGuard-1.4-7.1.1 - openSUSE 11.3 (i586 x86_64): squidGuard-doc-1.4-7.1.1 - openSUSE 11.2 (i586 src x86_64): squidGuard-1.4-2.3.1 - openSUSE 11.2 (i586 x86_64): squidGuard-doc-1.4-2.3.1 - openSUSE 11.1 (i586 ppc src x86_64): squidGuard-1.3-57.67.1 References: http://support.novell.com/security/cve/CVE-2009-3700.html http://support.novell.com/security/cve/CVE-2009-3826.html https://bugzilla.novell.com/550930 https://bugzilla.novell.com/625439

1 0

openSUSE-SU-2010:0459-1 (moderate (10+4+6)): kvirc: remote CTCP commands execution via specially-crafted CTCP parameter
by opensuse-security＠opensuse.org 02 Aug '10

02 Aug '10

openSUSE Security Update: kvirc: remote CTCP commands execution via specially-crafted CTCP parameter ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0459-1 Rating: moderate (10+4+6) References: #626942 Cross-References: CVE-2010-2785 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of kvirc does not further allow remote client to send arbitrary CTCP commands. (CVE-2010-2785) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch kvirc-2860 - openSUSE 11.2: zypper in -t patch kvirc-2860 - openSUSE 11.1: zypper in -t patch kvirc-2860 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): kvirc-3.4.2-10.1.1 - openSUSE 11.3 (i586 x86_64): kvirc-devel-3.4.2-10.1.1 - openSUSE 11.2 (i586 src x86_64): kvirc-3.4.2-4.7.1 - openSUSE 11.2 (i586 x86_64): kvirc-devel-3.4.2-4.7.1 - openSUSE 11.1 (i586 ppc src x86_64): kvirc-3.4.2-2.26.1 - openSUSE 11.1 (i586 ppc x86_64): kvirc-devel-3.4.2-2.26.1 References: http://support.novell.com/security/cve/CVE-2010-2785.html https://bugzilla.novell.com/626942

1 0

openSUSE-SU-2010:0458-1 (moderate): libwebkit security update
by opensuse-security＠opensuse.org 02 Aug '10

02 Aug '10

openSUSE Security Update: libwebkit security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0458-1 Rating: moderate References: #622994 Cross-References: CVE-2010-1386 CVE-2010-1392 CVE-2010-1405 CVE-2010-1407 CVE-2010-1416 CVE-2010-1417 CVE-2010-1418 CVE-2010-1421 CVE-2010-1422 CVE-2010-1501 CVE-2010-1664 CVE-2010-1665 CVE-2010-1758 CVE-2010-1759 CVE-2010-1760 CVE-2010-1761 CVE-2010-1762 CVE-2010-1767 CVE-2010-1770 CVE-2010-1771 CVE-2010-1772 CVE-2010-1773 CVE-2010-1774 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes 24 vulnerabilities is now available. It includes one version update. Description: The libwebkit browser engine version 1.2.3 fixes several security relevant bugs (CVE-2010-1386, CVE-2010-1392, CVE-2010-1405, CVE-2010-1407, CVE-2010-1416, CVE-2010-1417, CVE-2010-1665, CVE-2010-1418, CVE-2010-1421, CVE-2010-1422, CVE-2010-1501, CVE-2010-1767, CVE-2010-1664, CVE-2010-1758, CVE-2010-1759, CVE-2010-1760, CVE-2010-1761, CVE-2010-1762, CVE-2010-1770, CVE-2010-1771, CVE-2010-1772, CVE-2010-1773, CVE-2010-1774) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libwebkit-2806 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 1.2.3]: libwebkit-1_0-2-1.2.3-0.1.1 libwebkit-devel-1.2.3-0.1.1 webkit-jsc-1.2.3-0.1.1 - openSUSE 11.3 (x86_64) [New Version: 1.2.3]: libwebkit-1_0-2-32bit-1.2.3-0.1.1 - openSUSE 11.3 (noarch) [New Version: 1.2.3]: libwebkit-lang-1.2.3-0.1.1 - openSUSE 11.3 (src) [New Version: 1.2.3]: libwebkit-1.2.3-0.1.1 References: http://support.novell.com/security/cve/.html http://support.novell.com/security/cve/CVE-2010-1386.html http://support.novell.com/security/cve/CVE-2010-1392.html http://support.novell.com/security/cve/CVE-2010-1405.html http://support.novell.com/security/cve/CVE-2010-1407.html http://support.novell.com/security/cve/CVE-2010-1416.html http://support.novell.com/security/cve/CVE-2010-1417.html http://support.novell.com/security/cve/CVE-2010-1418.html http://support.novell.com/security/cve/CVE-2010-1421.html http://support.novell.com/security/cve/CVE-2010-1422.html http://support.novell.com/security/cve/CVE-2010-1501.html http://support.novell.com/security/cve/CVE-2010-1664.html http://support.novell.com/security/cve/CVE-2010-1665.html http://support.novell.com/security/cve/CVE-2010-1758.html http://support.novell.com/security/cve/CVE-2010-1759.html http://support.novell.com/security/cve/CVE-2010-1760.html http://support.novell.com/security/cve/CVE-2010-1761.html http://support.novell.com/security/cve/CVE-2010-1762.html http://support.novell.com/security/cve/CVE-2010-1767.html http://support.novell.com/security/cve/CVE-2010-1770.html http://support.novell.com/security/cve/CVE-2010-1771.html http://support.novell.com/security/cve/CVE-2010-1772.html http://support.novell.com/security/cve/CVE-2010-1773.html http://support.novell.com/security/cve/CVE-2010-1774.html https://bugzilla.novell.com/622994

1 0

openSUSE-RU-2010:0456-1 (low): mkinitrd: Collective update for mkinitrd
by maintenance＠opensuse.org 02 Aug '10

02 Aug '10

openSUSE Recommended Update: mkinitrd: Collective update for mkinitrd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0456-1 Rating: low References: #595071 #596086 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The following bugs are fixed by this update: - call update-bootloader if not available - setup-prepare: fix feature check Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch mkinitrd-2305 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc src x86_64): mkinitrd-2.4-34.5.1 References: https://bugzilla.novell.com/595071 https://bugzilla.novell.com/596086

1 0

openSUSE-RU-2010:0455-1 (low): NetworkManager: Several bugs are fixed by this update.
by maintenance＠opensuse.org 02 Aug '10

02 Aug '10

openSUSE Recommended Update: NetworkManager: Several bugs are fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0455-1 Rating: low References: #472112 #479885 #520095 #522742 #556083 Affected Products: openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. It includes one version update. Description: - VPN doesn't work. Clear secrets before setting the connection state to FAILED (bnc#472112). - Update the resolv.conf only once (bnc#479885). - Check origin of NETLINK messages (bnc#520095). - Make iptables path configurable (bnc#522742). - Fix the system settings daemon to keep the hostname configuration up to date. Don't return the default hostname if a plugin is capable of handling hostname (bnc #556083). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch NetworkManager-2347 - openSUSE 11.1: zypper in -t patch NetworkManager-2347 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): NetworkManager-0.7.1_git20090811-4.3.1 - openSUSE 11.2 (i586 x86_64): NetworkManager-devel-0.7.1_git20090811-4.3.1 NetworkManager-doc-0.7.1_git20090811-4.3.1 NetworkManager-glib-0.7.1_git20090811-4.3.1 - openSUSE 11.1 (i586 ppc src x86_64) [New Version: 0.7.0.r4359]: NetworkManager-0.7.0.r4359-15.3.1 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 0.7.0.r4359]: NetworkManager-devel-0.7.0.r4359-15.3.1 NetworkManager-doc-0.7.0.r4359-15.3.1 NetworkManager-glib-0.7.0.r4359-15.3.1 References: https://bugzilla.novell.com/472112 https://bugzilla.novell.com/479885 https://bugzilla.novell.com/520095 https://bugzilla.novell.com/522742 https://bugzilla.novell.com/556083

1 0