January 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2011:0057-1 (moderate): java-1_6_0-openjdk: security update for JNLPSecurityManager
by opensuse-security＠opensuse.org 19 Jan '11

19 Jan '11

openSUSE Security Update: java-1_6_0-openjdk: security update for JNLPSecurityManager ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0057-1 Rating: moderate References: #635365 #664298 Cross-References: CVE-2010-4351 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update of java-1_6_0-openjdk improves the return value handling of JNLPSecurityManager. Prior to this update the JNLPSecurityManager silently returns in some cases when a permission was denied. (CVE-2010-4351) Additionally the java path was fixed to make java work with firefox again. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch java-1_6_0-openjdk-3827 - openSUSE 11.2: zypper in -t patch java-1_6_0-openjdk-3827 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b20.1.9.4-1.2.1 java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.4-1.2.1 java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.4-1.2.1 - openSUSE 11.3 (noarch): java-1_6_0-openjdk-demo-1.6.0.0_b20.1.9.4-1.2.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b20.1.9.4-1.2.1 java-1_6_0-openjdk-src-1.6.0.0_b20.1.9.4-1.2.1 - openSUSE 11.2 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b20.1.9.4-1.2.1 java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.4-1.2.1 java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.4-1.2.1 - openSUSE 11.2 (noarch): java-1_6_0-openjdk-demo-1.6.0.0_b20.1.9.4-1.2.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b20.1.9.4-1.2.1 java-1_6_0-openjdk-src-1.6.0.0_b20.1.9.4-1.2.1 References: http://support.novell.com/security/cve/CVE-2010-4351.html https://bugzilla.novell.com/635365 https://bugzilla.novell.com/664298

1 0

openSUSE-YU-2011:0056-1 (important): Software Update Stack Update 2011/01
by maintenance＠opensuse.org 19 Jan '11

19 Jan '11

openSUSE YOU Update: Software Update Stack Update 2011/01 ______________________________________________________________________________ Announcement ID: openSUSE-YU-2011:0056-1 Rating: important References: #431854 #448736 #577118 #593617 #594850 #599154 #607572 #607583 #613304 #619196 #635596 #650822 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has 12 YOU fixes can now be installed. It includes three new package versions. Description: This is a collective update for the SUSE Software Update Stack, including fixes for the following reports: zypper: - 448736: Better error message for non-root search for outdated repo - 619196: Fix zypper's password dialog - 650822: Exit with error if zypper repo modification failed libsatsolver: - updateinfoxml: Correctly parse 'issued date' field. libzypp: - Implement support for patch category "feature" - 431854: Yast2 sw_single and zypper don't handle failed package downloads properly - commit doesn't report an error - 577118: Ignore an update in Software Updater - 593617: Always refresh a repository if last refresh has a date in the future - 594850: Packages From Added Iso Image Are Not Available - 607572: Edition with epoch 0 and without epoch are not treated as being equal. - 607583: Packages built via .drpms may get stored outside or in a wrong package cache. - 613304: libzypp fails to execute uuidgen - 635596: zypper in --download-only doesn't download Special Instructions and Notes: Please reboot the system after installing this update.This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE YOU Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch softwaremgmt-201101-3745 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64) [New Version: 0.14.18,1.3.11 and 6.34.0]: libsatsolver-demo-0.14.18-0.1.1 libsatsolver-devel-0.14.18-0.1.1 libzypp-6.34.0-0.1.1 libzypp-devel-6.34.0-0.1.1 perl-satsolver-0.14.18-0.1.1 python-satsolver-0.14.18-0.1.1 ruby-satsolver-0.14.18-0.1.1 satsolver-tools-0.14.18-0.1.1 zypper-1.3.11-0.1.1 References: https://bugzilla.novell.com/431854 https://bugzilla.novell.com/448736 https://bugzilla.novell.com/577118 https://bugzilla.novell.com/593617 https://bugzilla.novell.com/594850 https://bugzilla.novell.com/599154 https://bugzilla.novell.com/607572 https://bugzilla.novell.com/607583 https://bugzilla.novell.com/613304 https://bugzilla.novell.com/619196 https://bugzilla.novell.com/635596 https://bugzilla.novell.com/650822

1 0

openSUSE-SU-2011:0050-1 (moderate): sudo: security udpate
by opensuse-security＠opensuse.org 19 Jan '11

19 Jan '11

openSUSE Security Update: sudo: security udpate ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0050-1 Rating: moderate References: #594738 #663881 Cross-References: CVE-2010-1163 CVE-2010-1646 CVE-2011-0010 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update of sudo fixes: - CVE-2011-0010: Does ask for the user password for GID changes now. - CVE-2010-1646: CVSS v2 Base Score: 6.6 (CWE-264): The secure environment option can handle multiple occurrence of PATH now. - CVE-2010-1163: CVSS v2 Base Score: 6.9 (CWE-20): Improved command matching. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch sudo-3811 - openSUSE 11.2: zypper in -t patch sudo-3811 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): sudo-1.7.2p7-2.3.1 - openSUSE 11.2 (i586 x86_64): sudo-1.7.2-2.5.1 References: http://support.novell.com/security/cve/CVE-2010-1163.html http://support.novell.com/security/cve/CVE-2010-1646.html http://support.novell.com/security/cve/CVE-2011-0010.html https://bugzilla.novell.com/594738 https://bugzilla.novell.com/663881

1 0

openSUSE-SU-2011:0049-1 (important): opensc security update
by opensuse-security＠opensuse.org 19 Jan '11

19 Jan '11

openSUSE Security Update: opensc security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0049-1 Rating: important References: #660109 Cross-References: CVE-2010-4523 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Specially crafted smart cards could cause a buffer overflow in opensc (CVE-2010-4523). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libopensc2-3737 - openSUSE 11.2: zypper in -t patch libopensc2-3737 - openSUSE 11.1: zypper in -t patch libopensc2-3737 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libopensc2-0.11.13-2.3.1 opensc-0.11.13-2.3.1 opensc-devel-0.11.13-2.3.1 - openSUSE 11.3 (x86_64): libopensc2-32bit-0.11.13-2.3.1 opensc-32bit-0.11.13-2.3.1 - openSUSE 11.2 (i586 x86_64): libopensc2-0.11.9-2.3.1 opensc-0.11.9-2.3.1 opensc-devel-0.11.9-2.3.1 - openSUSE 11.2 (x86_64): libopensc2-32bit-0.11.9-2.3.1 opensc-32bit-0.11.9-2.3.1 - openSUSE 11.1 (i586 ppc x86_64): libopensc2-0.11.6-5.3.1 opensc-0.11.6-5.3.1 opensc-devel-0.11.6-5.3.1 - openSUSE 11.1 (x86_64): libopensc2-32bit-0.11.6-5.3.1 opensc-32bit-0.11.6-5.3.1 - openSUSE 11.1 (ppc): libopensc2-64bit-0.11.6-5.3.1 opensc-64bit-0.11.6-5.3.1 References: http://support.novell.com/security/cve/CVE-2010-4523.html https://bugzilla.novell.com/660109

1 0

openSUSE-SU-2011:0048-1 (important): SLE11 SP1
by opensuse-security＠opensuse.org 19 Jan '11

19 Jan '11

openSUSE Security Update: SLE11 SP1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0048-1 Rating: important References: #595215 #602838 #615630 #628180 #636672 #637542 #638258 #639803 #640878 #641105 #641811 #642043 #642313 #642314 #642486 #643173 #643477 #645659 #646226 #646542 #646702 #646908 #647567 #648112 #648701 #649187 #649548 #650067 #650185 #650487 #650748 #651066 #651218 #651596 #652024 #652293 #652563 #652603 #652842 #652939 #652940 #652945 #653148 #653258 #653260 #653266 #653800 #653930 #654150 #654530 #654581 #654701 #654837 #654967 #655027 #655278 #656471 #657324 #657350 #657412 #657415 #657976 #658464 #658829 #659144 Cross-References: CVE-2010-3437 CVE-2010-3861 CVE-2010-3874 CVE-2010-3881 CVE-2010-4072 CVE-2010-4073 CVE-2010-4082 CVE-2010-4083 CVE-2010-4157 CVE-2010-4158 CVE-2010-4160 CVE-2010-4162 CVE-2010-4163 CVE-2010-4164 CVE-2010-4165 CVE-2010-4169 CVE-2010-4175 CVE-2010-4258 Affected Products: SLE 11 SERVER Unsupported Extras ______________________________________________________________________________ An update that solves 18 vulnerabilities and has 47 fixes is now available. Description: The SUSE Linux Enterprise 11 Service Pack 1 kernel was updated to 2.6.32.27 and fixes various bugs and security issues. Following security issues were fixed: CVE-2010-4258: A local attacker could use a Oops (kernel crash) caused by other flaws to write a 0 byte to a attacker controlled address in the kernel. This could lead to privilege escalation together with other issues. CVE-2010-4160: A overflow in sendto() and recvfrom() routines was fixed that could be used by local attackers to potentially crash the kernel using some socket families like L2TP. CVE-2010-4157: A 32bit vs 64bit integer mismatch in gdth_ioctl_alloc could lead to memory corruption in the GDTH driver. CVE-2010-4165: The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel did not properly restrict TCP_MAXSEG (aka MSS) values, which allowed local users to cause a denial of service (OOPS) via a setsockopt call that specifies a small value, leading to a divide-by-zero error or incorrect use of a signed integer. CVE-2010-4164: A remote (or local) attacker communicating over X.25 could cause a kernel panic by attempting to negotiate malformed facilities. CVE-2010-4175: A local attacker could cause memory overruns in the RDS protocol stack, potentially crashing the kernel. So far it is considered not to be exploitable. CVE-2010-4169: Use-after-free vulnerability in mm/mprotect.c in the Linux kernel allwed local users to cause a denial of service via vectors involving an mprotect system call. CVE-2010-3874: A minor heap overflow in the CAN network module was fixed. Due to nature of the memory allocator it is likely not exploitable. CVE-2010-4158: A memory information leak in berkely packet filter rules allowed local attackers to read uninitialized memory of the kernel stack. CVE-2010-4162: A local denial of service in the blockdevice layer was fixed. CVE-2010-4163: By submitting certain I/O requests with 0 length, a local user could have caused a kernel panic. CVE-2010-3861: The ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel did not initialize a certain block of heap memory, which allowed local users to obtain potentially sensitive information via an ETHTOOL_GRXCLSRLALL ethtool command with a large info.rule_cnt value. CVE-2010-3881: arch/x86/kvm/x86.c in the Linux kernel did not initialize certain structure members, which allowed local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device. CVE-2010-3437: A range checking overflow in pktcdvd ioctl was fixed. CVE-2010-4082: The viafb_ioctl_get_viafb_info function in drivers/video/via/ioctl.c in the Linux kernel did not properly initialize a certain structure member, which allowed local users to obtain potentially sensitive information from kernel stack memory via a VIAFB_GET_INFO ioctl call. CVE-2010-4073: The ipc subsystem in the Linux kernel did not initialize certain structures, which allowed local users to obtain potentially sensitive information from kernel stack memory via vectors related to the (1) compat_sys_semctl, (2) compat_sys_msgctl, and (3) compat_sys_shmctl functions in ipc/compat.c; and the (4) compat_sys_mq_open and (5) compat_sys_mq_getsetattr functions in ipc/compat_mq.c. CVE-2010-4072: The copy_shmid_to_user function in ipc/shm.c in the Linux kernel did not initialize a certain structure, which allowed local users to obtain potentially sensitive information from kernel stack memory via vectors related to the shmctl system call and the "old shm interface." CVE-2010-4083: The copy_semid_to_user function in ipc/sem.c in the Linux kernel did not initialize a certain structure, which allowed local users to obtain potentially sensitive information from kernel stack memory via a (1) IPC_INFO, (2) SEM_INFO, (3) IPC_STAT, or (4) SEM_STAT command in a semctl system call. Special Instructions and Notes: Please reboot the system after installing this update. Package List: - SLE 11 SERVER Unsupported Extras (i586 ia64 ppc64 s390x x86_64): kernel-default-extra-2.6.32.27-0.2.2 - SLE 11 SERVER Unsupported Extras (i586 x86_64): kernel-xen-extra-2.6.32.27-0.2.2 - SLE 11 SERVER Unsupported Extras (ppc64): kernel-ppc64-extra-2.6.32.27-0.2.2 - SLE 11 SERVER Unsupported Extras (i586): kernel-pae-extra-2.6.32.27-0.2.2 References: http://support.novell.com/security/cve/CVE-2010-3437.html http://support.novell.com/security/cve/CVE-2010-3861.html http://support.novell.com/security/cve/CVE-2010-3874.html http://support.novell.com/security/cve/CVE-2010-3881.html http://support.novell.com/security/cve/CVE-2010-4072.html http://support.novell.com/security/cve/CVE-2010-4073.html http://support.novell.com/security/cve/CVE-2010-4082.html http://support.novell.com/security/cve/CVE-2010-4083.html http://support.novell.com/security/cve/CVE-2010-4157.html http://support.novell.com/security/cve/CVE-2010-4158.html http://support.novell.com/security/cve/CVE-2010-4160.html http://support.novell.com/security/cve/CVE-2010-4162.html http://support.novell.com/security/cve/CVE-2010-4163.html http://support.novell.com/security/cve/CVE-2010-4164.html http://support.novell.com/security/cve/CVE-2010-4165.html http://support.novell.com/security/cve/CVE-2010-4169.html http://support.novell.com/security/cve/CVE-2010-4175.html http://support.novell.com/security/cve/CVE-2010-4258.html https://bugzilla.novell.com/595215 https://bugzilla.novell.com/602838 https://bugzilla.novell.com/615630 https://bugzilla.novell.com/628180 https://bugzilla.novell.com/636672 https://bugzilla.novell.com/637542 https://bugzilla.novell.com/638258 https://bugzilla.novell.com/639803 https://bugzilla.novell.com/640878 https://bugzilla.novell.com/641105 https://bugzilla.novell.com/641811 https://bugzilla.novell.com/642043 https://bugzilla.novell.com/642313 https://bugzilla.novell.com/642314 https://bugzilla.novell.com/642486 https://bugzilla.novell.com/643173 https://bugzilla.novell.com/643477 https://bugzilla.novell.com/645659 https://bugzilla.novell.com/646226 https://bugzilla.novell.com/646542 https://bugzilla.novell.com/646702 https://bugzilla.novell.com/646908 https://bugzilla.novell.com/647567 https://bugzilla.novell.com/648112 https://bugzilla.novell.com/648701 https://bugzilla.novell.com/649187 https://bugzilla.novell.com/649548 https://bugzilla.novell.com/650067 https://bugzilla.novell.com/650185 https://bugzilla.novell.com/650487 https://bugzilla.novell.com/650748 https://bugzilla.novell.com/651066 https://bugzilla.novell.com/651218 https://bugzilla.novell.com/651596 https://bugzilla.novell.com/652024 https://bugzilla.novell.com/652293 https://bugzilla.novell.com/652563 https://bugzilla.novell.com/652603 https://bugzilla.novell.com/652842 https://bugzilla.novell.com/652939 https://bugzilla.novell.com/652940 https://bugzilla.novell.com/652945 https://bugzilla.novell.com/653148 https://bugzilla.novell.com/653258 https://bugzilla.novell.com/653260 https://bugzilla.novell.com/653266 https://bugzilla.novell.com/653800 https://bugzilla.novell.com/653930 https://bugzilla.novell.com/654150 https://bugzilla.novell.com/654530 https://bugzilla.novell.com/654581 https://bugzilla.novell.com/654701 https://bugzilla.novell.com/654837 https://bugzilla.novell.com/654967 https://bugzilla.novell.com/655027 https://bugzilla.novell.com/655278 https://bugzilla.novell.com/656471 https://bugzilla.novell.com/657324 https://bugzilla.novell.com/657350 https://bugzilla.novell.com/657412 https://bugzilla.novell.com/657415 https://bugzilla.novell.com/657976 https://bugzilla.novell.com/658464 https://bugzilla.novell.com/658829 https://bugzilla.novell.com/659144

1 0

openSUSE-SU-2011:0045-1 (moderate): Fixing evince DVI font parser vulnerabilities (CVE-2010-2640 - CVE-2010-2643).
by opensuse-security＠opensuse.org 19 Jan '11

19 Jan '11

openSUSE Security Update: Fixing evince DVI font parser vulnerabilities (CVE-2010-2640 - CVE-2010-2643). ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0045-1 Rating: moderate References: #660555 Cross-References: CVE-2010-2640 CVE-2010-2641 CVE-2010-2642 CVE-2010-2643 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. It includes one version update. Description: Multiple font parser vulnerabilities in the DVI backend of evince have been fixed. CVE-2010-2640 - CVE-2010-2643 have been assigned to these issues. Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch evince-3774 - openSUSE 11.2: zypper in -t patch evince-3774 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): evince-2.30.1-3.3.1 evince-devel-2.30.1-3.3.1 nautilus-evince-2.30.1-3.3.1 - openSUSE 11.3 (noarch): evince-lang-2.30.1-3.3.1 - openSUSE 11.2 (i586 x86_64) [New Version: 2.28.2]: evince-2.28.2-0.3.1 evince-devel-2.28.2-0.3.1 - openSUSE 11.2 (noarch) [New Version: 2.28.2]: evince-lang-2.28.2-0.3.1 References: http://support.novell.com/security/cve/CVE-2010-2640.html http://support.novell.com/security/cve/CVE-2010-2641.html http://support.novell.com/security/cve/CVE-2010-2642.html http://support.novell.com/security/cve/CVE-2010-2643.html https://bugzilla.novell.com/660555

1 0

openSUSE-RU-2011:0043-1 (moderate): NetworkManager-kde4: Fix handling of BSSID
by maintenance＠opensuse.org 19 Jan '11

19 Jan '11

openSUSE Recommended Update: NetworkManager-kde4: Fix handling of BSSID ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0043-1 Rating: moderate References: #653514 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update adds fixes to handle BSSID settings correctly (bko238046,bnc#653514,bnc#653515). Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch NetworkManager-kde4-3798 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): NetworkManager-kde4-0.9.svn1057339-5.3.1 NetworkManager-kde4-libs-0.9.svn1057339-5.3.1 NetworkManager-novellvpn-kde4-0.9.svn1057339-5.3.1 NetworkManager-openvpn-kde4-0.9.svn1057339-5.3.1 NetworkManager-pptp-kde4-0.9.svn1057339-5.3.1 NetworkManager-vpnc-kde4-0.9.svn1057339-5.3.1 plasmoid-networkmanagement-0.9.svn1057339-5.3.1 - openSUSE 11.3 (noarch): NetworkManager-kde4-lang-0.9.svn1057339-5.3.1 References: https://bugzilla.novell.com/653514

1 0

openSUSE-RU-2011:0032-1 (low): tar: This update fixes an endless loop if unpacking symbolic links with -k.
by maintenance＠opensuse.org 13 Jan '11

13 Jan '11

openSUSE Recommended Update: tar: This update fixes an endless loop if unpacking symbolic links with -k. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0032-1 Rating: low References: #662408 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: When using "tar -k" to unpack a tarball which contains symbolic links to a directory, where the symbolic link already exists, tar gets into an endless loop and has to be killed. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch tar-3790 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): tar-1.23-2.5.1 tar-backup-scripts-1.23-2.5.1 - openSUSE 11.3 (noarch): tar-lang-1.23-2.5.1 References: https://bugzilla.novell.com/662408

1 0

openSUSE-RU-2011:0031-1 (moderate): sysconfig: Collective update fixing several bugs.
by maintenance＠opensuse.org 13 Jan '11

13 Jan '11

openSUSE Recommended Update: sysconfig: Collective update fixing several bugs. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0031-1 Rating: moderate References: #630434 #660774 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This collective update provides corrections for the following sysconfig issues: #630434: Fix for udevmountd to allow mounting of multipath devices. With this and the corresponding multipath-tools patch, iscsi mounting works as advertised, both multipathed and non-multipathed. #660774: Fixed ifup-bonding to fail and remove bond when there are no active slaves at the end and not on first enslave failure. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch sysconfig-3803 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): sysconfig-0.73.7-2.5.1 References: https://bugzilla.novell.com/630434 https://bugzilla.novell.com/660774

1 0

openSUSE-RU-2011:0027-1 (moderate): Xen: Collective Update 2011/01
by maintenance＠opensuse.org 12 Jan '11

12 Jan '11

openSUSE Recommended Update: Xen: Collective Update 2011/01 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0027-1 Rating: moderate References: #497149 #552115 #583568 #603371 #615206 #618087 #628701 #628719 #628729 #629022 #635380 #636231 #638465 #639546 #640370 #640773 #640874 #641144 #641859 #642078 #643477 #647681 #649277 #649864 #650871 #652935 #656245 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has 27 recommended fixes can now be installed. It includes one version update. Description: Collective Xen Update, fixing the following reports: Xen Hypervisor and Tools - 628729 - [xm command]xm list performance is not good - 652935 - Corrupted display when booting xen kernel - 649864 - automatic numa cpu placement of xen conflicts with cpupools - 641144 - FV Xen VM running windows or linux cannot write to virtual floppy drive - 552115 - Remove target discovery in block-iscsi - 649277 - Fix pci passthru in xend interface used by libvirt - 642078 - xm snapshot-create causes qemu-dm to SEGV - 647681 - L3: Passthrough of certain PCI device broken after SLES 11 to SP1 upgrade - 650871 - Regression in Xen PCI Passthrough - 497149 - SLES11 64bit Xen - SLES11 64bit HVM guest has corrupt text console - 640370 - VM graphic console in VNC is corrupted - 583568 - Xen kernel is not booting - 615206 - Xen kernel fails to boot with IO-APIC problem - 640773 - Xen kernel crashing right after grub - 643477 - issues with PCI hotplug/hotunplug to Xen driver domain - 618087 - VNC view won't stay connected to fully virtualized Linux Xen VMs - 639546 - Dom-U deleted after introduction of the parameter "change_home_server False" in the VM configuration - 641859 - block-dmmd script does not handle the configuration when only MD is used - 640773 - Xen kernel crashing right after grub - 628719 - improve check_device_status to handle HA cases - 636231 - XEN: Unable to disconnect/remove CDROM drive from VM - 638465 - hypervisor panic in memory handling - 635380 - Fix pygrub Grub2 support - 628701 - Improve performance when activate/deactivate dmmd devices - 628701 - Fix qemu-dm handling of dmmd devices - 651822 - Fix xm snapshot-xxx scripts lead to an chkdsk - 656245 - Fix application or kernel in any pv domain able to crash Xen - 658163 - Fix boot on Nehalem systems - 659085 - Fix reboot for unknown reason (disable regression causing patch) - 659070 - Revert keyboard fixes Virtual Machine Installer (vm-install) - 640874 - vm-install not creating guest with proper qcow2 disk image format - 629022 - [vm-install]max nics when create VM (Allow up to 8 nics instead of 3.) - 603371 - In KVM SVVP HAL timer tests (HCT) are failing (Disable hpet for windows guests on KVM.) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch xen-201101-3779 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 0.4.27]: vm-install-0.4.27-2.1.2 xen-4.0.1_21326_02-0.5.1 xen-devel-4.0.1_21326_02-0.5.1 xen-doc-html-4.0.1_21326_02-0.5.1 xen-doc-pdf-4.0.1_21326_02-0.5.1 xen-kmp-default-4.0.1_21326_02_k2.6.34.7_0.7-0.5.1 xen-kmp-desktop-4.0.1_21326_02_k2.6.34.7_0.7-0.5.1 xen-libs-4.0.1_21326_02-0.5.1 xen-tools-4.0.1_21326_02-0.5.1 xen-tools-domU-4.0.1_21326_02-0.5.1 - openSUSE 11.3 (i586): xen-kmp-pae-4.0.1_21326_02_k2.6.34.7_0.7-0.5.1 References: https://bugzilla.novell.com/497149 https://bugzilla.novell.com/552115 https://bugzilla.novell.com/583568 https://bugzilla.novell.com/603371 https://bugzilla.novell.com/615206 https://bugzilla.novell.com/618087 https://bugzilla.novell.com/628701 https://bugzilla.novell.com/628719 https://bugzilla.novell.com/628729 https://bugzilla.novell.com/629022 https://bugzilla.novell.com/635380 https://bugzilla.novell.com/636231 https://bugzilla.novell.com/638465 https://bugzilla.novell.com/639546 https://bugzilla.novell.com/640370 https://bugzilla.novell.com/640773 https://bugzilla.novell.com/640874 https://bugzilla.novell.com/641144 https://bugzilla.novell.com/641859 https://bugzilla.novell.com/642078 https://bugzilla.novell.com/643477 https://bugzilla.novell.com/647681 https://bugzilla.novell.com/649277 https://bugzilla.novell.com/649864 https://bugzilla.novell.com/650871 https://bugzilla.novell.com/652935 https://bugzilla.novell.com/656245

1 0