September 2010 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2010:0591-1 (important): sudo security update
by opensuse-security＠opensuse.org 08 Sep '10

08 Sep '10

openSUSE Security Update: sudo security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0591-1 Rating: important References: #635843 Cross-References: CVE-2010-2956 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: sudo's handling of the -g command line option allowed to also specify -u in some cases, therefore allowing users to actually run commands as root (CVE-2010-2956). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch sudo-3083 - openSUSE 11.2: zypper in -t patch sudo-3083 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): sudo-1.7.2p7-2.1.1 - openSUSE 11.2 (i586 x86_64): sudo-1.7.2-2.3.1 References: http://support.novell.com/security/cve/CVE-2010-2956.html https://bugzilla.novell.com/635843

1 0

openSUSE-RU-2010:0590-1 (low): system-config-printer: The configure button for the printer has no effect. Fixed by this update.
by maintenance＠opensuse.org 07 Sep '10

07 Sep '10

openSUSE Recommended Update: system-config-printer: The configure button for the printer has no effect. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0590-1 Rating: low References: #596445 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: - The configure button for the printer has no effect (bnc #596445) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch system-config-printer-2506 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc x86_64): system-config-printer-1.0.8-5.10.1 system-config-printer-lang-1.0.8-5.10.1 References: https://bugzilla.novell.com/596445

1 0

openSUSE-RU-2010:0587-1 (moderate): MozillaFirefox: Update from 3.5.11 to 3.6.8
by maintenance＠opensuse.org 07 Sep '10

07 Sep '10

openSUSE Recommended Update: MozillaFirefox: Update from 3.5.11 to 3.6.8 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0587-1 Rating: moderate References: #624697 Affected Products: openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes two new package versions. Description: This update brings the Mozilla Firefox browser from the stable branch version 3.5.x to the 3.6.8 version, as the 3.5 branch is soon to be discontinued. It brings lots of new features and enhancements, please see http://www.mozilla.org/ Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch firefox36upgrade-2937 - openSUSE 11.1: zypper in -t patch firefox36upgrade-2937 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64) [New Version: 3.6.8]: MozillaFirefox-3.6.8-1.1.1 MozillaFirefox-branding-openSUSE-3.5-8.10.1 MozillaFirefox-branding-upstream-3.6.8-1.1.1 MozillaFirefox-translations-common-3.6.8-1.1.1 MozillaFirefox-translations-other-3.6.8-1.1.1 beagle-0.3.9-9.11.1 beagle-devel-0.3.9-9.11.1 beagle-evolution-0.3.9-9.11.1 beagle-firefox-0.3.9-9.11.1 beagle-google-0.3.9-9.11.1 beagle-gui-0.3.9-9.11.1 beagle-thunderbird-0.3.9-9.11.1 mozilla-js192-1.9.2.8-1.1.1 mozilla-xulrunner192-1.9.2.8-1.1.1 mozilla-xulrunner192-buildsymbols-1.9.2.8-1.1.1 mozilla-xulrunner192-devel-1.9.2.8-1.1.1 mozilla-xulrunner192-gnome-1.9.2.8-1.1.1 mozilla-xulrunner192-translations-common-1.9.2.8-1.1.1 mozilla-xulrunner192-translations-other-1.9.2.8-1.1.1 - openSUSE 11.2 (x86_64): mozilla-js192-32bit-1.9.2.8-1.1.1 mozilla-xulrunner192-32bit-1.9.2.8-1.1.1 mozilla-xulrunner192-gnome-32bit-1.9.2.8-1.1.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.8-1.1.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.8-1.1.1 - openSUSE 11.2 (noarch): MozillaFirefox-theme-oxygen-1.4.90-3.3.1 beagle-lang-0.3.9-9.11.1 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 3.5 and 3.6.8]: MozillaFirefox-3.6.8-1.1.1 MozillaFirefox-branding-openSUSE-3.5-10.2.3 MozillaFirefox-branding-upstream-3.6.8-1.1.1 MozillaFirefox-translations-common-3.6.8-1.1.1 MozillaFirefox-translations-other-3.6.8-1.1.1 beagle-0.3.8-46.36.1 beagle-devel-0.3.8-46.36.1 beagle-epiphany-0.3.8-46.36.1 beagle-evolution-0.3.8-46.36.1 beagle-firefox-0.3.8-46.36.1 beagle-google-0.3.8-46.36.1 beagle-gui-0.3.8-46.36.1 beagle-lang-0.3.8-46.36.1 beagle-thunderbird-0.3.8-46.36.1 - openSUSE 11.1 (i586 x86_64): mozilla-js192-1.9.2.8-1.1.1 mozilla-xulrunner192-1.9.2.8-1.1.1 mozilla-xulrunner192-buildsymbols-1.9.2.8-1.1.1 mozilla-xulrunner192-devel-1.9.2.8-1.1.1 mozilla-xulrunner192-gnome-1.9.2.8-1.1.1 mozilla-xulrunner192-translations-common-1.9.2.8-1.1.1 mozilla-xulrunner192-translations-other-1.9.2.8-1.1.1 - openSUSE 11.1 (x86_64): mozilla-js192-32bit-1.9.2.8-1.1.1 mozilla-xulrunner192-32bit-1.9.2.8-1.1.1 mozilla-xulrunner192-gnome-32bit-1.9.2.8-1.1.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.8-1.1.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.8-1.1.1 References: https://bugzilla.novell.com/624697

1 0

openSUSE-RU-2010:0586-1 (low): yast2-country: Fix Clock at boot when using local time
by maintenance＠opensuse.org 07 Sep '10

07 Sep '10

openSUSE Recommended Update: yast2-country: Fix Clock at boot when using local time ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0586-1 Rating: low References: #627116 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: When HW clock is set to local time, clock is wrong on boot after change in YaST. mkinitrd call is needed (bnc #627116) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch yast2-country-3061 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.19.19]: yast2-country-2.19.19-0.1.1 yast2-country-data-2.19.19-0.1.1 References: https://bugzilla.novell.com/627116

1 0

openSUSE-RU-2010:0585-1 (low): yast2-core: Fix slow startup in some AppArmor setups
by maintenance＠opensuse.org 07 Sep '10

07 Sep '10

openSUSE Recommended Update: yast2-core: Fix slow startup in some AppArmor setups ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0585-1 Rating: low References: #629882 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: YaST read YCP include files 1 byte at a time. If its AppArmor profile is enabled, auditd logs it all, taking several minutes for a module to start (bnc#629882). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch yast2-core-3059 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.19.3]: yast2-core-2.19.3-1.1.1 yast2-core-devel-2.19.3-1.1.1 References: https://bugzilla.novell.com/629882

1 0

openSUSE-RU-2010:0584-1 (low): sysconfig: This update contains fixes for wireless networking with ifup + WPA/WPA2 and detection of disabled ipv6 in the dhcp script
by maintenance＠opensuse.org 07 Sep '10

07 Sep '10

openSUSE Recommended Update: sysconfig: This update contains fixes for wireless networking with ifup + WPA/WPA2 and detection of disabled ipv6 in the dhcp script ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0584-1 Rating: low References: #616765 #623340 #623676 #624182 #625403 #631283 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: The following bugs are fixed by this update: - #625403: Fixed wireless hardware to wext/nl80211 WPA driver mapping and changed to use -Dnl80211,wext by default for untested drivers to let the wpa_supplicant fallback to wext when nl80211 is not available and avoid failures with non-mac80211 based hardware drivers. Adjusted info message about untested drivers and enabled untested driver handling also in case wpa_supplicant is not required but the user prefers to use it. Fixes also bugs #623340,#623676,#624182,#631283. - #616765: Fixed check whether ipv6 is enabled or not in /sbin/ifup-dhcp to avoid dhcpv6 client start in case the interface is configured to start both, dhcpv4 and dhcpv6 clients. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch sysconfig-2987 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): sysconfig-0.73.7-2.1.1 References: https://bugzilla.novell.com/616765 https://bugzilla.novell.com/623340 https://bugzilla.novell.com/623676 https://bugzilla.novell.com/624182 https://bugzilla.novell.com/625403 https://bugzilla.novell.com/631283

1 0

openSUSE-SU-2010:0583-1 (moderate): xorg-x11-server: Fixed memory corruption in XRender
by opensuse-security＠opensuse.org 07 Sep '10

07 Sep '10

openSUSE Security Update: xorg-x11-server: Fixed memory corruption in XRender ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0583-1 Rating: moderate References: #597232 Cross-References: CVE-2010-1166 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes a memory corruption in the X Render extension in the X server. CVE-2010-1166: The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch xorg-x11-Xvnc-2875 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): xorg-x11-Xvnc-7.4-61.64.1 xorg-x11-server-7.4-61.64.1 xorg-x11-server-extra-7.4-61.64.1 xorg-x11-server-sdk-7.4-61.64.1 References: http://support.novell.com/security/cve/CVE-2010-1166.html https://bugzilla.novell.com/597232

1 0

openSUSE-RU-2010:0580-1 (moderate): fdisk: Can't create partitions starting beyond 1TB. Fixed by this update.
by maintenance＠opensuse.org 03 Sep '10

03 Sep '10

openSUSE Recommended Update: fdisk: Can't create partitions starting beyond 1TB. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0580-1 Rating: moderate References: #590512 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Can't create partitions starting beyond 1TB. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch util-linux-2493 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc x86_64): util-linux-2.14.1-10.4.1 util-linux-lang-2.14.1-10.4.1 References: https://bugzilla.novell.com/590512

1 0

openSUSE-SU-2010:0573-1 (critical): acroread security update
by opensuse-security＠opensuse.org 01 Sep '10

01 Sep '10

openSUSE Security Update: acroread security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0573-1 Rating: critical References: #629134 Cross-References: CVE-2010-0209 CVE-2010-1240 CVE-2010-2188 CVE-2010-2213 CVE-2010-2214 CVE-2010-2215 CVE-2010-2216 CVE-2010-2862 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. It includes one version update. Description: Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code (CVE-2010-1240, CVE-2010-2862). This update also incorporate the Adobe Flash Player update APSB10-16 for the bundled flash player parts (CVE-2010-0209, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214, CVE-2010-2215, CVE-2010-2216). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch acroread-3036 - openSUSE 11.2: zypper in -t patch acroread-3036 - openSUSE 11.1: zypper in -t patch acroread-3036 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586) [New Version: 9.3.4]: acroread-9.3.4-0.2.1 - openSUSE 11.2 (noarch) [New Version: 9.3.4]: acroread-cmaps-9.3.4-0.3.1 acroread-fonts-ja-9.3.4-0.3.1 acroread-fonts-ko-9.3.4-0.3.1 acroread-fonts-zh_CN-9.3.4-0.3.1 acroread-fonts-zh_TW-9.3.4-0.3.1 - openSUSE 11.2 (i586) [New Version: 9.3.4]: acroread-9.3.4-0.3.1 - openSUSE 11.1 (noarch) [New Version: 9.3.4]: acroread-cmaps-9.3.4-0.3.1 acroread-fonts-ja-9.3.4-0.3.1 acroread-fonts-ko-9.3.4-0.3.1 acroread-fonts-zh_CN-9.3.4-0.3.1 acroread-fonts-zh_TW-9.3.4-0.3.1 - openSUSE 11.1 (i586) [New Version: 9.3.4]: acroread-9.3.4-0.3.1 References: http://support.novell.com/security/cve/CVE-2010-0209.html http://support.novell.com/security/cve/CVE-2010-1240.html http://support.novell.com/security/cve/CVE-2010-2188.html http://support.novell.com/security/cve/CVE-2010-2213.html http://support.novell.com/security/cve/CVE-2010-2214.html http://support.novell.com/security/cve/CVE-2010-2215.html http://support.novell.com/security/cve/CVE-2010-2216.html http://support.novell.com/security/cve/CVE-2010-2862.html https://bugzilla.novell.com/629134

1 0