October 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2011:1169-1: important: krb5: fixed kdc remote denial of service ( CVE-2011-1528, CVE-2011-1529) and unauthorized file access (CVE-2011-1526)
by opensuse-security＠opensuse.org 24 Oct '11

24 Oct '11

openSUSE Security Update: krb5: fixed kdc remote denial of service ( CVE-2011-1528, CVE-2011-1529) and unauthorized file access (CVE-2011-1526) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1169-1 Rating: important References: #719393 Cross-References: CVE-2011-1526 CVE-2011-1528 CVE-2011-1529 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: The following issues have been fixed: - CVE-2011-1528: In releases krb5-1.8 and later, the KDC can crash due to an assertion failure. - CVE-2011-1529: In releases krb5-1.8 and later, the KDC can crash due to a null pointer dereference. Both bugs could be triggered by unauthenticated remote attackers. Additionally CVE-2011-1526 was fixed that allowed authenticated users to access files via krb5 ftpd they should not have access to. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch krb5-5303 - openSUSE 11.3: zypper in -t patch krb5-5303 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): krb5-1.8.3-16.19.1 krb5-appl-clients-1.0-7.10.1 krb5-appl-servers-1.0-7.10.1 krb5-client-1.8.3-16.19.1 krb5-devel-1.8.3-16.19.1 krb5-plugin-kdb-ldap-1.8.3-16.19.1 krb5-plugin-preauth-pkinit-1.8.3-16.19.1 krb5-server-1.8.3-16.19.1 - openSUSE 11.4 (x86_64): krb5-32bit-1.8.3-16.19.1 krb5-devel-32bit-1.8.3-16.19.1 - openSUSE 11.3 (i586 x86_64): krb5-1.8.1-5.11.1 krb5-appl-clients-1.0-4.3.1 krb5-appl-servers-1.0-4.3.1 krb5-client-1.8.1-5.11.1 krb5-devel-1.8.1-5.11.1 krb5-plugin-kdb-ldap-1.8.1-5.11.1 krb5-plugin-preauth-pkinit-1.8.1-5.11.1 krb5-server-1.8.1-5.11.1 - openSUSE 11.3 (x86_64): krb5-32bit-1.8.1-5.11.1 krb5-devel-32bit-1.8.1-5.11.1 References: http://support.novell.com/security/cve/CVE-2011-1526.html http://support.novell.com/security/cve/CVE-2011-1528.html http://support.novell.com/security/cve/CVE-2011-1529.html https://bugzilla.novell.com/719393

1 0

openSUSE-RU-2011:1168-1: enchant: Fix dictionary detection
by maintenance＠opensuse.org 24 Oct '11

24 Oct '11

openSUSE Recommended Update: enchant: Fix dictionary detection ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:1168-1 Rating: low References: #722693 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: - 722693: enchant cannot use hunspell because dictionaries are not found Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch enchant-5288 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): enchant-devel-1.6.0-8.9.1 enchant-tools-1.6.0-8.9.1 enchant-voikko-1.6.0-8.9.1 libenchant1-1.6.0-8.9.1 - openSUSE 11.4 (x86_64): enchant-voikko-32bit-1.6.0-8.9.1 enchant-zemberek-32bit-1.6.0-8.9.1 libenchant1-32bit-1.6.0-8.9.1 References: https://bugzilla.novell.com/722693

1 0

openSUSE-RU-2011:1166-1: xdelta : Fix support for large files
by maintenance＠opensuse.org 22 Oct '11

22 Oct '11

openSUSE Recommended Update: xdelta : Fix support for large files ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:1166-1 Rating: low References: #644388 #720382 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update provides multiple fixes for large file support Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch xdelta-5269 - openSUSE 11.3: zypper in -t patch xdelta-5269 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): xdelta-1.1.4-189.190.1 xdelta-devel-1.1.4-189.190.1 - openSUSE 11.3 (i586 x86_64): xdelta-1.1.4-186.3.1 xdelta-devel-1.1.4-186.3.1 References: https://bugzilla.novell.com/644388 https://bugzilla.novell.com/720382

1 0

openSUSE-SU-2011:1161-1: important: ldns (CVE-2011-3581)
by opensuse-security＠opensuse.org 20 Oct '11

20 Oct '11

openSUSE Security Update: ldns (CVE-2011-3581) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1161-1 Rating: important References: #720277 Cross-References: CVE-2011-3581 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: A boundary error in ldns_rr_new_frm_str_internal() could lead to a heap-based buffer overfow when processing RR records (CVE-2011-3581). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch ldns-5289 - openSUSE 11.3: zypper in -t patch ldns-5289 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libldns-devel-1.5.1-10.11.1 libldns1-1.5.1-10.11.1 - openSUSE 11.3 (i586 x86_64): libldns-devel-1.5.1-7.3.1 libldns1-1.5.1-7.3.1 References: http://support.novell.com/security/cve/CVE-2011-3581.html https://bugzilla.novell.com/720277

1 0

openSUSE-SU-2011:1155-1: important: quagga: fixing multiple vulnerabilities
by opensuse-security＠opensuse.org 18 Oct '11

18 Oct '11

openSUSE Security Update: quagga: fixing multiple vulnerabilities ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1155-1 Rating: important References: #718056 #718058 #718059 #718061 #718062 Cross-References: CVE-2011-3323 CVE-2011-3324 CVE-2011-3325 CVE-2011-3326 CVE-2011-3327 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. It includes one version update. Description: This update fixes the following security issues: - 718056: OSPF6D buffer overflow while decoding Link State Update with Inter Area Prefix Lsa (CVE-2011-3323) - 718058: OSPF6D DoS while decoding Database Description packet (CVE-2011-3324) - 718059: OSPFD DoS while decoding Hello packet (CVE-2011-3325) - 718061: OSPFD DoS while decoding Link State Update (CVE-2011-3326) - 718062: DoS while decoding EXTENDED_COMMUNITIES in Quagga's BGP (CVE-2011-3327) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch quagga-5276 - openSUSE 11.3: zypper in -t patch quagga-5276 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): quagga-0.99.17-4.11.1 quagga-devel-0.99.17-4.11.1 - openSUSE 11.3 (i586 x86_64) [New Version: 0.99.17]: quagga-0.99.17-1.11.1 quagga-devel-0.99.17-1.11.1 References: http://support.novell.com/security/cve/CVE-2011-3323.html http://support.novell.com/security/cve/CVE-2011-3324.html http://support.novell.com/security/cve/CVE-2011-3325.html http://support.novell.com/security/cve/CVE-2011-3326.html http://support.novell.com/security/cve/CVE-2011-3327.html https://bugzilla.novell.com/718056 https://bugzilla.novell.com/718058 https://bugzilla.novell.com/718059 https://bugzilla.novell.com/718061 https://bugzilla.novell.com/718062

1 0

openSUSE-SU-2011:1152-1: moderate: VUL-0: gimp: LZW heap corruption (CVE-2011-2896)
by opensuse-security＠opensuse.org 18 Oct '11

18 Oct '11

openSUSE Security Update: VUL-0: gimp: LZW heap corruption (CVE-2011-2896) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1152-1 Rating: moderate References: #711491 Cross-References: CVE-2011-2896 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: specially crafted gif files could cause an infinite loop or a heap-based buffer overflow in the gif decoder (CVE-2011-2896). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gimp-5151 - openSUSE 11.3: zypper in -t patch gimp-5151 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): gimp-2.6.11-13.18.1 gimp-branding-upstream-2.6.11-13.18.1 gimp-devel-2.6.11-13.18.1 gimp-help-browser-2.6.11-13.18.1 gimp-module-hal-2.6.11-13.18.1 gimp-plugins-python-2.6.11-13.18.1 libgimp-2_0-0-2.6.11-13.18.1 libgimpui-2_0-0-2.6.11-13.18.1 - openSUSE 11.4 (x86_64): libgimp-2_0-0-32bit-2.6.11-13.18.1 libgimpui-2_0-0-32bit-2.6.11-13.18.1 - openSUSE 11.4 (noarch): gimp-lang-2.6.11-13.18.1 - openSUSE 11.3 (i586 x86_64): gimp-2.6.8-7.9.1 gimp-branding-upstream-2.6.8-7.9.1 gimp-devel-2.6.8-7.9.1 gimp-help-browser-2.6.8-7.9.1 gimp-module-hal-2.6.8-7.9.1 gimp-plugins-python-2.6.8-7.9.1 - openSUSE 11.3 (noarch): gimp-lang-2.6.8-7.9.1 References: http://support.novell.com/security/cve/CVE-2011-2896.html https://bugzilla.novell.com/711491

1 0

openSUSE-SU-2011:1143-2: moderate: libreoffice to 3.4
by opensuse-security＠opensuse.org 17 Oct '11

17 Oct '11

openSUSE Security Update: libreoffice to 3.4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1143-2 Rating: moderate References: #647959 #650049 #651250 #652562 #653662 #663622 #665112 #675868 #675961 #676858 #678998 #680272 #681738 #683578 #684784 #693238 #693477 #694119 #694344 #695479 #696630 #702506 #704311 #704639 #704642 #705949 #706792 #707486 #707779 #708137 #708518 #710061 #710920 #711977 #712358 #715268 #715416 #715856 #715931 #717262 Cross-References: CVE-2011-2685 CVE-2011-2713 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves two vulnerabilities and has 38 fixes is now available. It includes two new package versions. Description: LibreOffice 3.4 includes new interesting features and fixes, see http://www.libreoffice.org/download/3-4-new-features-and-fix es/ The update fixes the following security issue: - 704311: libreoffice Lotus Word Pro filter multiple vulnerabilities (CVE-2011-2685) - 722075: LibreOffice: Out-of-bounds read in DOC sprm (CVE-2011-2713) This update also fixes the following non-security issues: - 647959: LibO has a regression problem to show emf charts properly. - 650049: pptx presentation has text in boxes and circles. Only text is displayed. - 651250: Video and Audio does not play in slide show mode of LibO Impress. - 652562: LibreOffice crashes on start on 11.4-MS3 NET/DVD install - 653662: libreoffice build calls mkbundle2 (deprecated) instead of mkbundle - 663622: Writer crash during document save - 665112: could not type or edit office document - 675868: eliminate wording of ooconvert existed in loconvert --help - 675961: Libreoffice Copy paste of formula in Writer tables does not work as expected - 676858: Document with full page graphic in header will not allow click-drag or right-click. - 678998: Libre Office 3.3.1 does not detect KDE3 - 680272: Deleting multiple sheets results in run-time error/crash - 681738: DDE link is lost when .xls file is opened/saved in Calc. - 683578: Large xlsx file takes extremely long to open with Libreoffice calc - 684784: Microsoft Office spreadsheet does not display anything - 693238: Column format in docx file is not displayed correctly. - 693477: Format of Word .doc file from HP is bad. - 694119: Using File-->Send-->Document as E-mail will crash Impress - 694344: 3rd level bulleted items are not displayed properly. - 695479: L3: RTF file is not displayed correctly by Writer. - 696630: DDE link from Calc to Excel needs Excel open to update link in Calc. - 702506: Writer crashes when opening docx files. - 704639: HTML document appearance changes when opened in open office vs LibreOffice - 704642: 16 digit numbers change in LibreOffice when opening a file created in MS Excel - 705949: Information missing from MS Word document when opened in LibreOffice (w:sdt) - 706792: PTF 3.3.1-21 introduced a crash when opening a pptx presentation. - 707486: Macro from excel fails on Selection.Copy when run in Calc. - 707779: Disappearing text - 708137: xls spreadsheet is extremely slow to open and check boxes are broken. - 708518: Bullet symbol is not rendered correctly in a specific slide. - 710061: ODP export to PDF produces broken images - 710920: RPM installation ending with redundant error. - 711977: File association for fod* files are missing. - 712358: Some extensions broken after upgrading. - 715268: Command libreoffice --help does not work when LibreOffice is already started - 715856: LibreOffice:Stable/libreoffice-converter: Bug - 715416: Impress crashes starting Slide show in the context of dual monitors extension mode. - 715931: failed to save an odp file. - 717262: libtool adds /usr/lib64 into rpath Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libreoffice-34-5253 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 3.4.2.6]: libreoffice-3.4.2.6-2.3.1 libreoffice-base-3.4.2.6-2.3.1 libreoffice-base-drivers-mysql-3.4.2.6-2.3.1 libreoffice-base-drivers-postgresql-3.4.2.6-2.3.1 libreoffice-base-extensions-3.4.2.6-2.3.1 libreoffice-calc-3.4.2.6-2.3.1 libreoffice-calc-extensions-3.4.2.6-2.3.1 libreoffice-draw-3.4.2.6-2.3.1 libreoffice-draw-extensions-3.4.2.6-2.3.1 libreoffice-filters-optional-3.4.2.6-2.3.1 libreoffice-gnome-3.4.2.6-2.3.1 libreoffice-icon-themes-prebuilt-3.4.2.6-2.3.1 libreoffice-impress-3.4.2.6-2.3.1 libreoffice-impress-extensions-3.4.2.6-2.3.1 libreoffice-kde4-3.4.2.6-2.3.1 libreoffice-l10n-prebuilt-3.4.2.6-2.3.1 libreoffice-mailmerge-3.4.2.6-2.3.1 libreoffice-math-3.4.2.6-2.3.1 libreoffice-officebean-3.4.2.6-2.3.1 libreoffice-pyuno-3.4.2.6-2.3.1 libreoffice-testtool-3.4.2.6-2.3.1 libreoffice-writer-3.4.2.6-2.3.1 libreoffice-writer-extensions-3.4.2.6-2.3.1 - openSUSE 11.4 (noarch) [New Version: 1.4 and 3.4.2.6]: libreoffice-branding-upstream-3.4.2.6-2.3.1 libreoffice-converter-3.3-1.4.1 libreoffice-help-cs-3.4.2.6-2.3.1 libreoffice-help-da-3.4.2.6-2.3.1 libreoffice-help-de-3.4.2.6-2.3.1 libreoffice-help-en-GB-3.4.2.6-2.3.1 libreoffice-help-en-US-3.4.2.6-2.3.1 libreoffice-help-en-ZA-3.4.2.6-2.3.1 libreoffice-help-es-3.4.2.6-2.3.1 libreoffice-help-et-3.4.2.6-2.3.1 libreoffice-help-fr-3.4.2.6-2.3.1 libreoffice-help-gl-3.4.2.6-2.3.1 libreoffice-help-gu-IN-3.4.2.6-2.3.1 libreoffice-help-hi-IN-3.4.2.6-2.3.1 libreoffice-help-hu-3.4.2.6-2.3.1 libreoffice-help-it-3.4.2.6-2.3.1 libreoffice-help-ja-3.4.2.6-2.3.1 libreoffice-help-km-3.4.2.6-2.3.1 libreoffice-help-ko-3.4.2.6-2.3.1 libreoffice-help-nl-3.4.2.6-2.3.1 libreoffice-help-pl-3.4.2.6-2.3.1 libreoffice-help-pt-3.4.2.6-2.3.1 libreoffice-help-pt-BR-3.4.2.6-2.3.1 libreoffice-help-ru-3.4.2.6-2.3.1 libreoffice-help-sl-3.4.2.6-2.3.1 libreoffice-help-sv-3.4.2.6-2.3.1 libreoffice-help-zh-CN-3.4.2.6-2.3.1 libreoffice-help-zh-TW-3.4.2.6-2.3.1 libreoffice-icon-theme-crystal-3.4.2.6-1.3.1 libreoffice-icon-theme-galaxy-3.4.2.6-1.3.1 libreoffice-icon-theme-hicontrast-3.4.2.6-1.3.1 libreoffice-icon-theme-oxygen-3.4.2.6-1.3.1 libreoffice-icon-theme-tango-3.4.2.6-1.3.1 libreoffice-l10n-af-3.4.2.6-1.3.1 libreoffice-l10n-ar-3.4.2.6-1.3.1 libreoffice-l10n-be-BY-3.4.2.6-1.3.1 libreoffice-l10n-bg-3.4.2.6-1.3.1 libreoffice-l10n-br-3.4.2.6-1.3.1 libreoffice-l10n-ca-3.4.2.6-1.3.1 libreoffice-l10n-cs-3.4.2.6-1.3.1 libreoffice-l10n-cy-3.4.2.6-1.3.1 libreoffice-l10n-da-3.4.2.6-1.3.1 libreoffice-l10n-de-3.4.2.6-1.3.1 libreoffice-l10n-el-3.4.2.6-1.3.1 libreoffice-l10n-en-GB-3.4.2.6-1.3.1 libreoffice-l10n-en-ZA-3.4.2.6-1.3.1 libreoffice-l10n-es-3.4.2.6-1.3.1 libreoffice-l10n-et-3.4.2.6-1.3.1 libreoffice-l10n-fi-3.4.2.6-1.3.1 libreoffice-l10n-fr-3.4.2.6-1.3.1 libreoffice-l10n-ga-3.4.2.6-1.3.1 libreoffice-l10n-gl-3.4.2.6-1.3.1 libreoffice-l10n-gu-IN-3.4.2.6-1.3.1 libreoffice-l10n-he-3.4.2.6-1.3.1 libreoffice-l10n-hi-IN-3.4.2.6-1.3.1 libreoffice-l10n-hr-3.4.2.6-1.3.1 libreoffice-l10n-hu-3.4.2.6-1.3.1 libreoffice-l10n-it-3.4.2.6-1.3.1 libreoffice-l10n-ja-3.4.2.6-1.3.1 libreoffice-l10n-ka-3.4.2.6-1.3.1 libreoffice-l10n-km-3.4.2.6-1.3.1 libreoffice-l10n-ko-3.4.2.6-1.3.1 libreoffice-l10n-lt-3.4.2.6-1.3.1 libreoffice-l10n-mk-3.4.2.6-1.3.1 libreoffice-l10n-nb-3.4.2.6-1.3.1 libreoffice-l10n-nl-3.4.2.6-1.3.1 libreoffice-l10n-nn-3.4.2.6-1.3.1 libreoffice-l10n-nr-3.4.2.6-1.3.1 libreoffice-l10n-pa-IN-3.4.2.6-1.3.1 libreoffice-l10n-pl-3.4.2.6-1.3.1 libreoffice-l10n-pt-3.4.2.6-1.3.1 libreoffice-l10n-pt-BR-3.4.2.6-1.3.1 libreoffice-l10n-ru-3.4.2.6-1.3.1 libreoffice-l10n-rw-3.4.2.6-1.3.1 libreoffice-l10n-sh-3.4.2.6-1.3.1 libreoffice-l10n-sk-3.4.2.6-1.3.1 libreoffice-l10n-sl-3.4.2.6-1.3.1 libreoffice-l10n-sr-3.4.2.6-1.3.1 libreoffice-l10n-ss-3.4.2.6-1.3.1 libreoffice-l10n-st-3.4.2.6-1.3.1 libreoffice-l10n-sv-3.4.2.6-1.3.1 libreoffice-l10n-tg-3.4.2.6-1.3.1 libreoffice-l10n-th-3.4.2.6-1.3.1 libreoffice-l10n-tr-3.4.2.6-1.3.1 libreoffice-l10n-ts-3.4.2.6-1.3.1 libreoffice-l10n-uk-3.4.2.6-1.3.1 libreoffice-l10n-ve-3.4.2.6-1.3.1 libreoffice-l10n-vi-3.4.2.6-1.3.1 libreoffice-l10n-xh-3.4.2.6-1.3.1 libreoffice-l10n-zh-CN-3.4.2.6-1.3.1 libreoffice-l10n-zh-TW-3.4.2.6-1.3.1 libreoffice-l10n-zu-3.4.2.6-1.3.1 libreoffice-languagetool-1.4-2.2.1 libreoffice-languagetool-ca-1.4-2.2.1 libreoffice-languagetool-de-1.4-2.2.1 libreoffice-languagetool-en-1.4-2.2.1 libreoffice-languagetool-es-1.4-2.2.1 libreoffice-languagetool-fr-1.4-2.2.1 libreoffice-languagetool-gl-1.4-2.2.1 libreoffice-languagetool-it-1.4-2.2.1 libreoffice-languagetool-nl-1.4-2.2.1 libreoffice-languagetool-pl-1.4-2.2.1 libreoffice-languagetool-ro-1.4-2.2.1 libreoffice-languagetool-ru-1.4-2.2.1 libreoffice-languagetool-sk-1.4-2.2.1 libreoffice-languagetool-sv-1.4-2.2.1 libreoffice-openclipart-3.4-1.3.1 References: http://support.novell.com/security/cve/CVE-2011-2685.html http://support.novell.com/security/cve/CVE-2011-2713.html https://bugzilla.novell.com/647959 https://bugzilla.novell.com/650049 https://bugzilla.novell.com/651250 https://bugzilla.novell.com/652562 https://bugzilla.novell.com/653662 https://bugzilla.novell.com/663622 https://bugzilla.novell.com/665112 https://bugzilla.novell.com/675868 https://bugzilla.novell.com/675961 https://bugzilla.novell.com/676858 https://bugzilla.novell.com/678998 https://bugzilla.novell.com/680272 https://bugzilla.novell.com/681738 https://bugzilla.novell.com/683578 https://bugzilla.novell.com/684784 https://bugzilla.novell.com/693238 https://bugzilla.novell.com/693477 https://bugzilla.novell.com/694119 https://bugzilla.novell.com/694344 https://bugzilla.novell.com/695479 https://bugzilla.novell.com/696630 https://bugzilla.novell.com/702506 https://bugzilla.novell.com/704311 https://bugzilla.novell.com/704639 https://bugzilla.novell.com/704642 https://bugzilla.novell.com/705949 https://bugzilla.novell.com/706792 https://bugzilla.novell.com/707486 https://bugzilla.novell.com/707779 https://bugzilla.novell.com/708137 https://bugzilla.novell.com/708518 https://bugzilla.novell.com/710061 https://bugzilla.novell.com/710920 https://bugzilla.novell.com/711977 https://bugzilla.novell.com/712358 https://bugzilla.novell.com/715268 https://bugzilla.novell.com/715416 https://bugzilla.novell.com/715856 https://bugzilla.novell.com/715931 https://bugzilla.novell.com/717262

1 0

openSUSE-SU-2011:1144-1: moderate: openssl
by opensuse-security＠opensuse.org 17 Oct '11

17 Oct '11

openSUSE Security Update: openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1144-1 Rating: moderate References: #716143 #716144 Cross-References: CVE-2011-3207 CVE-2011-3210 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: OpenSSL's internal certificate verification routines could incorrectly accept a CRL whose nextUpdate field is in the past (CVE-2011-3207). Server code for ECDH could crash if it received a specially crafted handshake message (CVE-2011-3210). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libopenssl-devel-5178 - openSUSE 11.3: zypper in -t patch libopenssl-devel-5178 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libopenssl-devel-1.0.0c-18.21.1 libopenssl0_9_8-0.9.8m-6.7.1 libopenssl1_0_0-1.0.0c-18.21.1 openssl-1.0.0c-18.21.1 - openSUSE 11.4 (x86_64): libopenssl0_9_8-32bit-0.9.8m-6.7.1 libopenssl1_0_0-32bit-1.0.0c-18.21.1 - openSUSE 11.4 (noarch): openssl-doc-1.0.0c-18.21.1 - openSUSE 11.3 (i586 x86_64): libopenssl-devel-1.0.0-6.11.1 libopenssl0_9_8-0.9.8m-3.9.1 libopenssl1_0_0-1.0.0-6.11.1 openssl-1.0.0-6.11.1 - openSUSE 11.3 (x86_64): libopenssl0_9_8-32bit-0.9.8m-3.9.1 libopenssl1_0_0-32bit-1.0.0-6.11.1 - openSUSE 11.3 (noarch): openssl-doc-1.0.0-6.11.1 References: http://support.novell.com/security/cve/CVE-2011-3207.html http://support.novell.com/security/cve/CVE-2011-3210.html https://bugzilla.novell.com/716143 https://bugzilla.novell.com/716144

1 0

openSUSE-SU-2011:1143-1: moderate: libreoffice: Update to 3.4
by opensuse-security＠opensuse.org 17 Oct '11

17 Oct '11

openSUSE Security Update: libreoffice: Update to 3.4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1143-1 Rating: moderate References: #647959 #650049 #651250 #652562 #653662 #663622 #665112 #675868 #675961 #676858 #678998 #680272 #681738 #683578 #684784 #693238 #693477 #694119 #694344 #695479 #696630 #702506 #704311 #704639 #704642 #705949 #706792 #707486 #707779 #708137 #708518 #710061 #710920 #711977 #712358 #715268 #715416 #715856 #715931 #717262 Cross-References: CVE-2011-2685 CVE-2011-2713 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has 38 fixes is now available. It includes three new package versions. Description: LibreOffice 3.4 includes new interesting features and fixes, see http://www.libreoffice.org/download/3-4-new-features-and-fix es/ The update fixes the following security issue: - 704311: libreoffice Lotus Word Pro filter multiple vulnerabilities (CVE-2011-2685) - 722075: LibreOffice: Out-of-bounds read in DOC sprm (CVE-2011-2713) This update also fixes the following non-security issues: - 647959: LibO has a regression problem to show emf charts properly. - 650049: pptx presentation has text in boxes and circles. Only text is displayed. - 651250: Video and Audio does not play in slide show mode of LibO Impress. - 652562: LibreOffice crashes on start on 11.4-MS3 NET/DVD install - 653662: libreoffice build calls mkbundle2 (deprecated) instead of mkbundle - 663622: Writer crash during document save - 665112: could not type or edit office document - 675868: eliminate wording of ooconvert existed in loconvert --help - 675961: Libreoffice Copy paste of formula in Writer tables does not work as expected - 676858: Document with full page graphic in header will not allow click-drag or right-click. - 678998: Libre Office 3.3.1 does not detect KDE3 - 680272: Deleting multiple sheets results in run-time error/crash - 681738: DDE link is lost when .xls file is opened/saved in Calc. - 683578: Large xlsx file takes extremely long to open with Libreoffice calc - 684784: Microsoft Office spreadsheet does not display anything - 693238: Column format in docx file is not displayed correctly. - 693477: Format of Word .doc file from HP is bad. - 694119: Using File-->Send-->Document as E-mail will crash Impress - 694344: 3rd level bulleted items are not displayed properly. - 695479: L3: RTF file is not displayed correctly by Writer. - 696630: DDE link from Calc to Excel needs Excel open to update link in Calc. - 702506: Writer crashes when opening docx files. - 704639: HTML document appearance changes when opened in open office vs LibreOffice - 704642: 16 digit numbers change in LibreOffice when opening a file created in MS Excel - 705949: Information missing from MS Word document when opened in LibreOffice (w:sdt) - 706792: PTF 3.3.1-21 introduced a crash when opening a pptx presentation. - 707486: Macro from excel fails on Selection.Copy when run in Calc. - 707779: Disappearing text - 708137: xls spreadsheet is extremely slow to open and check boxes are broken. - 708518: Bullet symbol is not rendered correctly in a specific slide. - 710061: ODP export to PDF produces broken images - 710920: RPM installation ending with redundant error. - 711977: File association for fod* files are missing. - 712358: Some extensions broken after upgrading. - 715268: Command libreoffice --help does not work when LibreOffice is already started - 715856: LibreOffice:Stable/libreoffice-converter: Bug - 715416: Impress crashes starting Slide show in the context of dual monitors extension mode. - 715931: failed to save an odp file. - 717262: libtool adds /usr/lib64 into rpath Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libreoffice-34-5252 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 3.4.2.6]: libreoffice-3.4.2.6-2.2.1 libreoffice-base-3.4.2.6-2.2.1 libreoffice-base-drivers-mysql-3.4.2.6-2.2.1 libreoffice-base-drivers-postgresql-3.4.2.6-2.2.1 libreoffice-base-extensions-3.4.2.6-2.2.1 libreoffice-calc-3.4.2.6-2.2.1 libreoffice-calc-extensions-3.4.2.6-2.2.1 libreoffice-draw-3.4.2.6-2.2.1 libreoffice-draw-extensions-3.4.2.6-2.2.1 libreoffice-filters-optional-3.4.2.6-2.2.1 libreoffice-gnome-3.4.2.6-2.2.1 libreoffice-icon-themes-prebuilt-3.4.2.6-2.2.1 libreoffice-impress-3.4.2.6-2.2.1 libreoffice-impress-extensions-3.4.2.6-2.2.1 libreoffice-kde-3.4.2.6-2.2.1 libreoffice-kde4-3.4.2.6-2.2.1 libreoffice-l10n-prebuilt-3.4.2.6-2.2.1 libreoffice-mailmerge-3.4.2.6-2.2.1 libreoffice-math-3.4.2.6-2.2.1 libreoffice-mono-3.4.2.6-2.2.1 libreoffice-officebean-3.4.2.6-2.2.1 libreoffice-pyuno-3.4.2.6-2.2.1 libreoffice-testtool-3.4.2.6-2.2.1 libreoffice-writer-3.4.2.6-2.2.1 libreoffice-writer-extensions-3.4.2.6-2.2.1 - openSUSE 11.3 (noarch) [New Version: 1.4,3.4 and 3.4.2.6]: libreoffice-branding-upstream-3.4.2.6-2.2.1 libreoffice-converter-3.3-2.4.1 libreoffice-help-cs-3.4.2.6-2.2.1 libreoffice-help-da-3.4.2.6-2.2.1 libreoffice-help-de-3.4.2.6-2.2.1 libreoffice-help-en-GB-3.4.2.6-2.2.1 libreoffice-help-en-US-3.4.2.6-2.2.1 libreoffice-help-en-ZA-3.4.2.6-2.2.1 libreoffice-help-es-3.4.2.6-2.2.1 libreoffice-help-et-3.4.2.6-2.2.1 libreoffice-help-fr-3.4.2.6-2.2.1 libreoffice-help-gl-3.4.2.6-2.2.1 libreoffice-help-gu-IN-3.4.2.6-2.2.1 libreoffice-help-hi-IN-3.4.2.6-2.2.1 libreoffice-help-hu-3.4.2.6-2.2.1 libreoffice-help-it-3.4.2.6-2.2.1 libreoffice-help-ja-3.4.2.6-2.2.1 libreoffice-help-km-3.4.2.6-2.2.1 libreoffice-help-ko-3.4.2.6-2.2.1 libreoffice-help-nl-3.4.2.6-2.2.1 libreoffice-help-pl-3.4.2.6-2.2.1 libreoffice-help-pt-3.4.2.6-2.2.1 libreoffice-help-pt-BR-3.4.2.6-2.2.1 libreoffice-help-ru-3.4.2.6-2.2.1 libreoffice-help-sl-3.4.2.6-2.2.1 libreoffice-help-sv-3.4.2.6-2.2.1 libreoffice-help-zh-CN-3.4.2.6-2.2.1 libreoffice-help-zh-TW-3.4.2.6-2.2.1 libreoffice-icon-theme-crystal-3.4.2.6-1.2.1 libreoffice-icon-theme-galaxy-3.4.2.6-1.2.1 libreoffice-icon-theme-hicontrast-3.4.2.6-1.2.1 libreoffice-icon-theme-oxygen-3.4.2.6-1.2.1 libreoffice-icon-theme-tango-3.4.2.6-1.2.1 libreoffice-l10n-af-3.4.2.6-1.2.1 libreoffice-l10n-ar-3.4.2.6-1.2.1 libreoffice-l10n-be-BY-3.4.2.6-1.2.1 libreoffice-l10n-bg-3.4.2.6-1.2.1 libreoffice-l10n-br-3.4.2.6-1.2.1 libreoffice-l10n-ca-3.4.2.6-1.2.1 libreoffice-l10n-cs-3.4.2.6-1.2.1 libreoffice-l10n-cy-3.4.2.6-1.2.1 libreoffice-l10n-da-3.4.2.6-1.2.1 libreoffice-l10n-de-3.4.2.6-1.2.1 libreoffice-l10n-el-3.4.2.6-1.2.1 libreoffice-l10n-en-GB-3.4.2.6-1.2.1 libreoffice-l10n-en-ZA-3.4.2.6-1.2.1 libreoffice-l10n-es-3.4.2.6-1.2.1 libreoffice-l10n-et-3.4.2.6-1.2.1 libreoffice-l10n-fi-3.4.2.6-1.2.1 libreoffice-l10n-fr-3.4.2.6-1.2.1 libreoffice-l10n-ga-3.4.2.6-1.2.1 libreoffice-l10n-gl-3.4.2.6-1.2.1 libreoffice-l10n-gu-IN-3.4.2.6-1.2.1 libreoffice-l10n-he-3.4.2.6-1.2.1 libreoffice-l10n-hi-IN-3.4.2.6-1.2.1 libreoffice-l10n-hr-3.4.2.6-1.2.1 libreoffice-l10n-hu-3.4.2.6-1.2.1 libreoffice-l10n-it-3.4.2.6-1.2.1 libreoffice-l10n-ja-3.4.2.6-1.2.1 libreoffice-l10n-ka-3.4.2.6-1.2.1 libreoffice-l10n-km-3.4.2.6-1.2.1 libreoffice-l10n-ko-3.4.2.6-1.2.1 libreoffice-l10n-lt-3.4.2.6-1.2.1 libreoffice-l10n-mk-3.4.2.6-1.2.1 libreoffice-l10n-nb-3.4.2.6-1.2.1 libreoffice-l10n-nl-3.4.2.6-1.2.1 libreoffice-l10n-nn-3.4.2.6-1.2.1 libreoffice-l10n-nr-3.4.2.6-1.2.1 libreoffice-l10n-pa-IN-3.4.2.6-1.2.1 libreoffice-l10n-pl-3.4.2.6-1.2.1 libreoffice-l10n-pt-3.4.2.6-1.2.1 libreoffice-l10n-pt-BR-3.4.2.6-1.2.1 libreoffice-l10n-ru-3.4.2.6-1.2.1 libreoffice-l10n-rw-3.4.2.6-1.2.1 libreoffice-l10n-sh-3.4.2.6-1.2.1 libreoffice-l10n-sk-3.4.2.6-1.2.1 libreoffice-l10n-sl-3.4.2.6-1.2.1 libreoffice-l10n-sr-3.4.2.6-1.2.1 libreoffice-l10n-ss-3.4.2.6-1.2.1 libreoffice-l10n-st-3.4.2.6-1.2.1 libreoffice-l10n-sv-3.4.2.6-1.2.1 libreoffice-l10n-tg-3.4.2.6-1.2.1 libreoffice-l10n-th-3.4.2.6-1.2.1 libreoffice-l10n-tr-3.4.2.6-1.2.1 libreoffice-l10n-ts-3.4.2.6-1.2.1 libreoffice-l10n-uk-3.4.2.6-1.2.1 libreoffice-l10n-ve-3.4.2.6-1.2.1 libreoffice-l10n-vi-3.4.2.6-1.2.1 libreoffice-l10n-xh-3.4.2.6-1.2.1 libreoffice-l10n-zh-CN-3.4.2.6-1.2.1 libreoffice-l10n-zh-TW-3.4.2.6-1.2.1 libreoffice-l10n-zu-3.4.2.6-1.2.1 libreoffice-languagetool-1.4-2.2.1 libreoffice-languagetool-ca-1.4-2.2.1 libreoffice-languagetool-de-1.4-2.2.1 libreoffice-languagetool-en-1.4-2.2.1 libreoffice-languagetool-es-1.4-2.2.1 libreoffice-languagetool-fr-1.4-2.2.1 libreoffice-languagetool-gl-1.4-2.2.1 libreoffice-languagetool-it-1.4-2.2.1 libreoffice-languagetool-nl-1.4-2.2.1 libreoffice-languagetool-pl-1.4-2.2.1 libreoffice-languagetool-ro-1.4-2.2.1 libreoffice-languagetool-ru-1.4-2.2.1 libreoffice-languagetool-sk-1.4-2.2.1 libreoffice-languagetool-sv-1.4-2.2.1 libreoffice-openclipart-3.4-1.2.1 References: http://support.novell.com/security/cve/CVE-2011-2685.html http://support.novell.com/security/cve/CVE-2011-2713.html https://bugzilla.novell.com/647959 https://bugzilla.novell.com/650049 https://bugzilla.novell.com/651250 https://bugzilla.novell.com/652562 https://bugzilla.novell.com/653662 https://bugzilla.novell.com/663622 https://bugzilla.novell.com/665112 https://bugzilla.novell.com/675868 https://bugzilla.novell.com/675961 https://bugzilla.novell.com/676858 https://bugzilla.novell.com/678998 https://bugzilla.novell.com/680272 https://bugzilla.novell.com/681738 https://bugzilla.novell.com/683578 https://bugzilla.novell.com/684784 https://bugzilla.novell.com/693238 https://bugzilla.novell.com/693477 https://bugzilla.novell.com/694119 https://bugzilla.novell.com/694344 https://bugzilla.novell.com/695479 https://bugzilla.novell.com/696630 https://bugzilla.novell.com/702506 https://bugzilla.novell.com/704311 https://bugzilla.novell.com/704639 https://bugzilla.novell.com/704642 https://bugzilla.novell.com/705949 https://bugzilla.novell.com/706792 https://bugzilla.novell.com/707486 https://bugzilla.novell.com/707779 https://bugzilla.novell.com/708137 https://bugzilla.novell.com/708518 https://bugzilla.novell.com/710061 https://bugzilla.novell.com/710920 https://bugzilla.novell.com/711977 https://bugzilla.novell.com/712358 https://bugzilla.novell.com/715268 https://bugzilla.novell.com/715416 https://bugzilla.novell.com/715856 https://bugzilla.novell.com/715931 https://bugzilla.novell.com/717262

1 0

openSUSE-SU-2011:1142-1: moderate: wireshark 1.6.2 fixing multiple issues
by opensuse-security＠opensuse.org 17 Oct '11

17 Oct '11

openSUSE Security Update: wireshark 1.6.2 fixing multiple issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1142-1 Rating: moderate References: #697516 #706728 #718032 Cross-References: CVE-2011-1957 CVE-2011-1958 CVE-2011-1959 CVE-2011-2174 CVE-2011-2175 CVE-2011-2597 CVE-2011-2698 CVE-2011-3266 CVE-2011-3360 CVE-2011-3483 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. It includes one version update. Description: This update of wireshark fixes the following vulnerabilities: - CVE-2011-3266: Wireshark IKE dissector vulnerability - CVE-2011-3360: Wireshark Lua script execution vulnerability - CVE-2011-3483: Wireshark buffer exception handling vulnerability - CVE-2011-2597: Lucent/Ascend file parser susceptible to infinite loop - CVE-2011-2698: ANSI MAP dissector susceptible to infinite loop - CVE-2011-1957: Large/infinite loop in the DICOM dissector - CVE-2011-1959: A corrupted snoop file could crash Wireshark - CVE-2011-2174: Malformed compressed capture data could crash Wireshark - CVE-2011-2175: A corrupted Visual Networks file could crash Wireshark - CVE-2011-1958: dereferene a NULL pointer if we had a corrupted Diameter dictionary Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch wireshark-5278 - openSUSE 11.3: zypper in -t patch wireshark-5278 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.4.4]: wireshark-1.4.4-0.7.1 wireshark-devel-1.4.4-0.7.1 - openSUSE 11.3 (i586 x86_64) [New Version: 1.4.4]: wireshark-1.4.4-0.6.1 wireshark-devel-1.4.4-0.6.1 References: http://support.novell.com/security/cve/CVE-2011-1957.html http://support.novell.com/security/cve/CVE-2011-1958.html http://support.novell.com/security/cve/CVE-2011-1959.html http://support.novell.com/security/cve/CVE-2011-2174.html http://support.novell.com/security/cve/CVE-2011-2175.html http://support.novell.com/security/cve/CVE-2011-2597.html http://support.novell.com/security/cve/CVE-2011-2698.html http://support.novell.com/security/cve/CVE-2011-3266.html http://support.novell.com/security/cve/CVE-2011-3360.html http://support.novell.com/security/cve/CVE-2011-3483.html https://bugzilla.novell.com/697516 https://bugzilla.novell.com/706728 https://bugzilla.novell.com/718032

1 0