January 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2011:0026-1 (low): yast2: Fix for YaST2 module list from command line invocation
by maintenance＠opensuse.org 12 Jan '11

12 Jan '11

openSUSE Recommended Update: yast2: Fix for YaST2 module list from command line invocation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0026-1 Rating: low References: #621848 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This patch fixes bash completion in invoking yast, in particular listing of YaST modules, which missed some modules Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch yast2-3786 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.19.14]: yast2-2.19.14-0.3.1 yast2-devel-doc-2.19.14-0.3.1 References: https://bugzilla.novell.com/621848

1 0

openSUSE-SU-2011:0024-1 (important): Fixing various bugs in webkit.
by opensuse-security＠opensuse.org 12 Jan '11

12 Jan '11

1 0

openSUSE-SU-2011:0010-2 (important): wireshark security update
by opensuse-security＠opensuse.org 12 Jan '11

12 Jan '11

openSUSE Security Update: wireshark security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0010-2 Rating: important References: #603251 #613487 #630599 #643078 #655448 Cross-References: CVE-2010-1455 CVE-2010-2283 CVE-2010-2284 CVE-2010-2285 CVE-2010-2286 CVE-2010-2287 CVE-2010-2992 CVE-2010-2993 CVE-2010-2994 CVE-2010-2995 CVE-2010-3445 CVE-2010-4300 CVE-2010-4301 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. It includes one version update. Description: Wireshark version 1.4.2 fixes several security issues that allowed attackers to crash wireshark or potentially even execute arbitrary code (CVE-2010-1455, CVE-2010-2283, CVE-2010-2284, CVE-2010-2285, CVE-2010-2286, CVE-2010-2287, CVE-2010-2992, CVE-2010-2993, CVE-2010-2994, CVE-2010-2995, CVE-2010-3445, CVE-2010-4300, CVE-2010-4301) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch wireshark-3738 - openSUSE 11.2: zypper in -t patch wireshark-3738 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 1.4.2]: wireshark-1.4.2-1.1.2 wireshark-devel-1.4.2-1.1.2 - openSUSE 11.2 (i586 x86_64) [New Version: 1.4.2]: wireshark-1.4.2-1.1.1 wireshark-devel-1.4.2-1.1.1 References: http://support.novell.com/security/cve/CVE-2010-1455.html http://support.novell.com/security/cve/CVE-2010-2283.html http://support.novell.com/security/cve/CVE-2010-2284.html http://support.novell.com/security/cve/CVE-2010-2285.html http://support.novell.com/security/cve/CVE-2010-2286.html http://support.novell.com/security/cve/CVE-2010-2287.html http://support.novell.com/security/cve/CVE-2010-2992.html http://support.novell.com/security/cve/CVE-2010-2993.html http://support.novell.com/security/cve/CVE-2010-2994.html http://support.novell.com/security/cve/CVE-2010-2995.html http://support.novell.com/security/cve/CVE-2010-3445.html http://support.novell.com/security/cve/CVE-2010-4300.html http://support.novell.com/security/cve/CVE-2010-4301.html https://bugzilla.novell.com/603251 https://bugzilla.novell.com/613487 https://bugzilla.novell.com/630599 https://bugzilla.novell.com/643078 https://bugzilla.novell.com/655448

1 0

openSUSE-RU-2011:0022-1 (moderate): java-1_6_0-sun: Update to Java SE 6 Update 23
by maintenance＠opensuse.org 12 Jan '11

12 Jan '11

openSUSE Recommended Update: java-1_6_0-sun: Update to Java SE 6 Update 23 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0022-1 Rating: moderate References: #662459 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: Java SE 6u23 contains enhancements for your Java applications: * Improved performance and stability * Enhanced support for right-to-left languages * Java SE 6u23 contains Olson time zone data version 2010l. For more information, refer to Timezone Data Versions in the JRE Software . ## Java Hotspot VM 19.0 Java SE 6u23 includes version 19.0 of the Java HotSpot Virtual Machine with improvements to overall performance and reliability. ## Java VisualVM 1.3.1 Java VisualVM based on VisualVM 1.3.1 is included in Java SE 6u23. This release introduces the following features and enhancements: ## Menu Item Corrections for Right-to-Left Languages Several bugs in the non-default alignment and text orientation for the menu items in Swing have been fixed, as this is particularly important for right-to-left languages such as Arabic. Another issue corrected is the position of the icon and the text. For the non-default positions the text used to overlap the icon in a menu item, this is no longer the case. All platform Look and Feel configurations will now handle menu items in right-to-left language situations. These fixes have been tested through their inclusion in the JDK 7 development release, but this is the first time they have been available via JDK 6. ## Additional Languages Support in Linux Systems Added support for SuSE Linux Enterprise Server 10 and 11 on Chinese (Simplified), Chinese (Traditional), Japanese, and Korean locales. ## Bug Fixes Java SE 6u23 does not contain any additional fixes for security vulnerabilities to its previous release, Java SE 6u22. Users who have Java SE 6u22 have the latest security fixes and do not need to upgrade to this release to be current on security fixes. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch java-1_6_0-sun-3784 - openSUSE 11.2: zypper in -t patch java-1_6_0-sun-3784 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 1.6.0.u23]: java-1_6_0-sun-1.6.0.u23-0.2.1 java-1_6_0-sun-alsa-1.6.0.u23-0.2.1 java-1_6_0-sun-devel-1.6.0.u23-0.2.1 java-1_6_0-sun-jdbc-1.6.0.u23-0.2.1 java-1_6_0-sun-plugin-1.6.0.u23-0.2.1 java-1_6_0-sun-src-1.6.0.u23-0.2.1 - openSUSE 11.2 (i586 x86_64) [New Version: 1.6.0.u23]: java-1_6_0-sun-1.6.0.u23-0.2.1 java-1_6_0-sun-alsa-1.6.0.u23-0.2.1 java-1_6_0-sun-demo-1.6.0.u23-0.2.1 java-1_6_0-sun-devel-1.6.0.u23-0.2.1 java-1_6_0-sun-jdbc-1.6.0.u23-0.2.1 java-1_6_0-sun-plugin-1.6.0.u23-0.2.1 java-1_6_0-sun-src-1.6.0.u23-0.2.1 References: https://bugzilla.novell.com/662459

1 0

openSUSE-SU-2011:0021-1 (moderate): Fixed NULL pointer dereference in pidgin (CVE-2010-4528).
by opensuse-security＠opensuse.org 10 Jan '11

10 Jan '11

openSUSE Security Update: Fixed NULL pointer dereference in pidgin (CVE-2010-4528). ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0021-1 Rating: moderate References: #661497 Cross-References: CVE-2010-4528 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: A NULL pointer dereference DoS has been fixed in pidgin. CVE-2010-4528 has been assigned to this issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch finch-3783 - openSUSE 11.2: zypper in -t patch finch-3783 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.7.9]: finch-2.7.9-1.2.1 finch-devel-2.7.9-1.2.1 libpurple-2.7.9-1.2.1 libpurple-devel-2.7.9-1.2.1 libpurple-meanwhile-2.7.9-1.2.1 libpurple-mono-2.7.9-1.2.1 libpurple-tcl-2.7.9-1.2.1 pidgin-2.7.9-1.2.1 pidgin-devel-2.7.9-1.2.1 pidgin-otr-3.2.0-146.1.2 - openSUSE 11.3 (noarch) [New Version: 2.7.9]: libpurple-lang-2.7.9-1.2.1 - openSUSE 11.2 (i586 x86_64) [New Version: 2.7.9]: finch-2.7.9-1.2.2 finch-devel-2.7.9-1.2.2 libpurple-2.7.9-1.2.2 libpurple-devel-2.7.9-1.2.2 libpurple-meanwhile-2.7.9-1.2.2 libpurple-mono-2.7.9-1.2.2 libpurple-tcl-2.7.9-1.2.2 pidgin-2.7.9-1.2.2 pidgin-devel-2.7.9-1.2.2 pidgin-otr-3.2.0-142.4.5 - openSUSE 11.2 (noarch) [New Version: 2.7.9]: libpurple-lang-2.7.9-1.2.2 References: http://support.novell.com/security/cve/CVE-2010-4528.html https://bugzilla.novell.com/661497

1 0

openSUSE-SU-2011:0020-1 (important): perl-CGI-Simple: Fixed a header injection problem (CVE-2010-2761).
by opensuse-security＠opensuse.org 10 Jan '11

10 Jan '11

openSUSE Security Update: perl-CGI-Simple: Fixed a header injection problem (CVE-2010-2761). ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0020-1 Rating: important References: #657731 Cross-References: CVE-2010-2761 CVE-2010-3172 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: A HTTP header injection attack was fixed in perl-CGI-Simple. CVE-2010-2761 has been assigned to this issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch perl-CGI-Simple-3785 - openSUSE 11.2: zypper in -t patch perl-CGI-Simple-3785 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): perl-CGI-Simple-1.112-7.3.1 - openSUSE 11.2 (i586 x86_64): perl-CGI-Simple-1.112-2.3.1 References: http://support.novell.com/security/cve/CVE-2010-2761.html http://support.novell.com/security/cve/CVE-2010-3172.html https://bugzilla.novell.com/657731

1 0

openSUSE-RU-2011:0018-1 (low): pam_apparmor: support for enabling/disabling
by maintenance＠opensuse.org 10 Jan '11

10 Jan '11

openSUSE Recommended Update: pam_apparmor: support for enabling/disabling ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0018-1 Rating: low References: #623246 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Added support for enabling/disabling the module automatically during installation/removal (bnc#623246) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch pam_apparmor-3756 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): pam_apparmor-2.3-58.3.1 - openSUSE 11.3 (x86_64): pam_apparmor-32bit-2.3-58.3.1 References: https://bugzilla.novell.com/623246

1 0

openSUSE-SU-2011:0017-1 (low): ed: Fixed security update regression
by opensuse-security＠opensuse.org 07 Jan '11

07 Jan '11

openSUSE Security Update: ed: Fixed security update regression ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0017-1 Rating: low References: #661417 Affected Products: openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: The previous ed security update fixing commandline overflow issues caused ed without any arguments to crash. This is fixed by this update. - #661417: updated /bin/ed - segmentation violation Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch ed-3777 - openSUSE 11.1: zypper in -t patch ed-3777 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): ed-0.2-1003.5.1 - openSUSE 11.1 (i586 ppc x86_64): ed-0.2-1001.15.1 References: https://bugzilla.novell.com/661417

1 0

openSUSE-SU-2011:0014-1 (low): openssl security update
by opensuse-security＠opensuse.org 05 Jan '11

05 Jan '11

openSUSE Security Update: openssl security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0014-1 Rating: low References: #657663 Cross-References: CVE-2010-4180 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Malicious clients could downgrade a connection to a low strength cipher suite on session resumption if the server offers such ciphers (CVE-2010-4180). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libopenssl-devel-3660 - openSUSE 11.2: zypper in -t patch libopenssl-devel-3660 - openSUSE 11.1: zypper in -t patch libopenssl-devel-3660 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libopenssl-devel-1.0.0-6.5.1 libopenssl0_9_8-0.9.8m-3.3.1 libopenssl1_0_0-1.0.0-6.5.1 openssl-1.0.0-6.5.1 - openSUSE 11.3 (x86_64): libopenssl0_9_8-32bit-0.9.8m-3.3.1 libopenssl1_0_0-32bit-1.0.0-6.5.1 - openSUSE 11.3 (noarch): openssl-doc-1.0.0-6.5.1 - openSUSE 11.2 (i586 x86_64): libopenssl-devel-0.9.8k-3.12.1 libopenssl0_9_8-0.9.8k-3.12.1 openssl-0.9.8k-3.12.1 openssl-doc-0.9.8k-3.12.1 - openSUSE 11.2 (x86_64): libopenssl0_9_8-32bit-0.9.8k-3.12.1 - openSUSE 11.1 (i586 ppc x86_64): libopenssl-devel-0.9.8h-28.20.1 libopenssl0_9_8-0.9.8h-28.20.1 openssl-0.9.8h-28.20.1 openssl-doc-0.9.8h-28.20.1 - openSUSE 11.1 (x86_64): libopenssl0_9_8-32bit-0.9.8h-28.20.1 - openSUSE 11.1 (ppc): libopenssl0_9_8-64bit-0.9.8h-28.20.1 References: http://support.novell.com/security/cve/CVE-2010-4180.html https://bugzilla.novell.com/657663

1 0

openSUSE-SU-2011:0011-1 (moderate): libsmi security update
by opensuse-security＠opensuse.org 03 Jan '11

03 Jan '11

openSUSE Security Update: libsmi security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0011-1 Rating: moderate References: #649867 Cross-References: CVE-2010-2891 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes a buffer overflow the smiGetNode() function in libsmi. It allowed context-dependent attackers to execute arbitrary code via an Object Identifier. CVE-2010-2891: CVSS v2 Base Score: 7.5 (HIGH) (AV:N/AC:L/Au:N/C:P/I:P/A:P): Buffer Errors (CWE-119) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libsmi-3520 - openSUSE 11.2: zypper in -t patch libsmi-3520 - openSUSE 11.1: zypper in -t patch libsmi-3520 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libsmi-0.4.5-131.3.1 libsmi-devel-0.4.5-131.3.1 - openSUSE 11.2 (i586 x86_64): libsmi-0.4.5-127.3.1 libsmi-devel-0.4.5-127.3.1 - openSUSE 11.1 (i586 ppc x86_64): libsmi-0.4.5-1.91.2 libsmi-devel-0.4.5-1.91.2 References: http://support.novell.com/security/cve/CVE-2010-2891.html https://bugzilla.novell.com/649867

1 0