March 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2011:0270-1 (low): kile: Fix math related icons being black
by maintenance＠opensuse.org 31 Mar '11

31 Mar '11

openSUSE Recommended Update: kile: Fix math related icons being black ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0270-1 Rating: low References: #676046 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes black icons in the toolbar of kile due to a packaging error (bnc#676046). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch kile-4244 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): kile-2.0.99beta5-6.11.1 - openSUSE 11.4 (noarch): kile-lang-2.0.99beta5-6.11.1 References: https://bugzilla.novell.com/676046

1 0

openSUSE-SU-2011:0268-1 (important): apparmor-parser: parser could generate policy using an unconfined fallback execute transition
by opensuse-security＠opensuse.org 31 Mar '11

31 Mar '11

openSUSE Security Update: apparmor-parser: parser could generate policy using an unconfined fallback execute transition ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0268-1 Rating: important References: #662928 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Fixed apparmor-parser: The parser could generate a policy using an unconfined fallback execute transition. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch apparmor-parser-3810 - openSUSE 11.2: zypper in -t patch apparmor-parser-3810 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): apparmor-parser-2.3.1-22.5.1 - openSUSE 11.2 (i586 x86_64): apparmor-parser-2.3.1-11.15.1 References: https://bugzilla.novell.com/662928

1 0

openSUSE-SU-2011:0265-1 (important): fuse security update
by opensuse-security＠opensuse.org 31 Mar '11

31 Mar '11

openSUSE Security Update: fuse security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0265-1 Rating: important References: #651598 #668820 Cross-References: CVE-2010-3879 CVE-2011-0541 CVE-2011-0543 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: Race conditions in fuse allowed unprivileged users to umount arbitrary mount points (CVE-2011-0541,CVE-2010-3879,CVE-2011-0543). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch fuse-4183 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): fuse-2.7.4-3.8.1 fuse-devel-2.7.4-3.8.1 fuse-devel-static-2.7.4-3.8.1 libblkid-devel-2.16-4.6.1 libblkid1-2.16-4.6.1 libfuse2-2.7.4-3.8.1 libuuid-devel-2.16-4.6.1 libuuid1-2.16-4.6.1 util-linux-2.16-4.6.1 uuidd-2.16-4.6.1 - openSUSE 11.2 (x86_64): libblkid-devel-32bit-2.16-4.6.1 libblkid1-32bit-2.16-4.6.1 libfuse2-32bit-2.7.4-3.8.1 libuuid-devel-32bit-2.16-4.6.1 libuuid1-32bit-2.16-4.6.1 - openSUSE 11.2 (noarch): util-linux-lang-2.16-4.6.1 References: http://support.novell.com/security/cve/CVE-2010-3879.html http://support.novell.com/security/cve/CVE-2011-0541.html http://support.novell.com/security/cve/CVE-2011-0543.html https://bugzilla.novell.com/651598 https://bugzilla.novell.com/668820

1 0

openSUSE-SU-2011:0264-1 (important): fuse security update
by opensuse-security＠opensuse.org 31 Mar '11

31 Mar '11

openSUSE Security Update: fuse security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0264-1 Rating: important References: #651598 #668820 #670585 Cross-References: CVE-2010-3879 CVE-2011-0541 CVE-2011-0543 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. It includes one version update. Description: Race conditions in fuse allowed unprivileged users to umount arbitrary mount points (CVE-2011-0541,CVE-2010-3879,CVE-2011-0543). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch fuse-4184 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.8.5]: fuse-2.8.5-2.7.1 fuse-devel-2.8.5-2.7.1 fuse-devel-static-2.8.5-2.7.1 libblkid-devel-2.17.2-6.3.1 libblkid1-2.17.2-6.3.1 libfuse2-2.8.5-2.7.1 libuuid-devel-2.17.2-6.3.1 libuuid1-2.17.2-6.3.1 util-linux-2.17.2-6.3.1 uuidd-2.17.2-6.3.1 - openSUSE 11.3 (x86_64) [New Version: 2.8.5]: libblkid-devel-32bit-2.17.2-6.3.1 libblkid1-32bit-2.17.2-6.3.1 libfuse2-32bit-2.8.5-2.7.1 libuuid-devel-32bit-2.17.2-6.3.1 libuuid1-32bit-2.17.2-6.3.1 - openSUSE 11.3 (noarch): util-linux-lang-2.17.2-6.3.1 References: http://support.novell.com/security/cve/CVE-2010-3879.html http://support.novell.com/security/cve/CVE-2011-0541.html http://support.novell.com/security/cve/CVE-2011-0543.html https://bugzilla.novell.com/651598 https://bugzilla.novell.com/668820 https://bugzilla.novell.com/670585

1 0

openSUSE-RU-2011:0260-1 (moderate): perl-MIME-tools: Version upgrade to 5.502
by maintenance＠opensuse.org 31 Mar '11

31 Mar '11

openSUSE Recommended Update: perl-MIME-tools: Version upgrade to 5.502 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0260-1 Rating: moderate References: #682286 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: openSUSE 11.4 contains the buggy version 5.500, which use is deprecated by the developers. This update provides the latest stable and recommended version. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch perl-MIME-tools-4230 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 5.502]: perl-MIME-tools-5.502-1.3.1 References: https://bugzilla.novell.com/682286

1 0

openSUSE-SU-2011:0255-1 (moderate): libxml2: fixing Xpath processing (CVE-2010-4494)
by opensuse-security＠opensuse.org 31 Mar '11

31 Mar '11

openSUSE Security Update: libxml2: fixing Xpath processing (CVE-2010-4494) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0255-1 Rating: moderate References: #661471 Cross-References: CVE-2010-4494 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: A bug in the Xpath processing inside libxml2 has been fixed. CVE-2010-4494 has been assigned to this issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libxml2-3758 - openSUSE 11.2: zypper in -t patch libxml2-3758 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libxml2-2.7.7-4.5.1 libxml2-devel-2.7.7-4.5.1 - openSUSE 11.3 (x86_64): libxml2-32bit-2.7.7-4.5.1 libxml2-devel-32bit-2.7.7-4.5.1 - openSUSE 11.3 (noarch): libxml2-doc-2.7.7-4.5.1 - openSUSE 11.2 (i586 x86_64): libxml2-2.7.3-2.5.1 libxml2-devel-2.7.3-2.5.1 libxml2-doc-2.7.3-2.5.1 - openSUSE 11.2 (x86_64): libxml2-32bit-2.7.3-2.5.1 libxml2-devel-32bit-2.7.3-2.5.1 References: http://support.novell.com/security/cve/CVE-2010-4494.html https://bugzilla.novell.com/661471

1 0

openSUSE-SU-2011:0254-1 (moderate): postgresql security update
by opensuse-security＠opensuse.org 31 Mar '11

31 Mar '11

openSUSE Security Update: postgresql security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0254-1 Rating: moderate References: #660478 Cross-References: CVE-2010-4014 CVE-2010-4015 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: A buffer overflow in the intarray module potentially allowed attackers to execute arbitrary code as the user running postgresql (CVE-2010-4015:CVSS v2 Base Score: 4.9). Additionally a possible log forging problem was fixed too. (CVE-2010-4014) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch postgresql-3971 - openSUSE 11.2: zypper in -t patch postgresql-3971 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 8.4.7]: postgresql-8.4.7-0.2.1 postgresql-contrib-8.4.7-0.2.1 postgresql-devel-8.4.7-0.2.1 postgresql-libs-8.4.7-0.2.1 postgresql-plperl-8.4.7-0.2.1 postgresql-plpython-8.4.7-0.2.1 postgresql-pltcl-8.4.7-0.2.1 postgresql-server-8.4.7-0.2.1 - openSUSE 11.3 (x86_64) [New Version: 8.4.7]: postgresql-libs-32bit-8.4.7-0.2.1 - openSUSE 11.3 (noarch) [New Version: 8.4.7]: postgresql-docs-8.4.7-0.2.1 - openSUSE 11.2 (i586 x86_64) [New Version: 8.4.7]: postgresql-8.4.7-0.2.1 postgresql-contrib-8.4.7-0.2.1 postgresql-devel-8.4.7-0.2.1 postgresql-docs-8.4.7-0.2.1 postgresql-libs-8.4.7-0.2.1 postgresql-plperl-8.4.7-0.2.1 postgresql-plpython-8.4.7-0.2.1 postgresql-pltcl-8.4.7-0.2.1 postgresql-server-8.4.7-0.2.1 - openSUSE 11.2 (x86_64) [New Version: 8.4.7]: postgresql-libs-32bit-8.4.7-0.2.1 References: http://support.novell.com/security/cve/CVE-2010-4014.html http://support.novell.com/security/cve/CVE-2010-4015.html https://bugzilla.novell.com/660478

1 0

openSUSE-RU-2011:0252-1 (moderate): gstreamer-0_10-plugins-good: Fix crashes during disconnects
by maintenance＠opensuse.org 31 Mar '11

31 Mar '11

openSUSE Recommended Update: gstreamer-0_10-plugins-good: Fix crashes during disconnects ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0252-1 Rating: moderate References: #673914 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Fixex Amarok (and possible other applications) crashes during disconnects or standbys while playing streams (bnc#673914) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gstreamer-0_10-plugin-hal-4214 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): gstreamer-0_10-plugin-hal-0.10.27-4.5.1 gstreamer-0_10-plugins-good-0.10.27-4.5.1 gstreamer-0_10-plugins-good-doc-0.10.27-4.5.1 gstreamer-0_10-plugins-good-extra-0.10.27-4.5.1 - openSUSE 11.4 (noarch): gstreamer-0_10-plugins-good-lang-0.10.27-4.5.1 References: https://bugzilla.novell.com/673914

1 0

openSUSE-RU-2011:0247-1 (moderate): virtualbox: This update fixes a missing permissions handling of VBoxNetDHCP
by maintenance＠opensuse.org 30 Mar '11

30 Mar '11

openSUSE Recommended Update: virtualbox: This update fixes a missing permissions handling of VBoxNetDHCP ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0247-1 Rating: moderate References: #679785 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a missing permissions handling of VBoxNetDHCP. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch python-virtualbox-4219 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): python-virtualbox-4.0.4-1.6.1 virtualbox-4.0.4-1.6.1 virtualbox-devel-4.0.4-1.6.1 virtualbox-guest-kmp-default-4.0.4_k2.6.37.1_1.2-1.6.1 virtualbox-guest-kmp-desktop-4.0.4_k2.6.37.1_1.2-1.6.1 virtualbox-guest-tools-4.0.4-1.6.1 virtualbox-guest-x11-4.0.4-1.6.1 virtualbox-host-kmp-default-4.0.4_k2.6.37.1_1.2-1.6.1 virtualbox-host-kmp-desktop-4.0.4_k2.6.37.1_1.2-1.6.1 virtualbox-qt-4.0.4-1.6.1 - openSUSE 11.4 (i586): virtualbox-guest-kmp-pae-4.0.4_k2.6.37.1_1.2-1.6.1 virtualbox-host-kmp-pae-4.0.4_k2.6.37.1_1.2-1.6.1 References: https://bugzilla.novell.com/679785

1 0

openSUSE-SU-2011:0242-1 (important): logwatch: security update
by opensuse-security＠opensuse.org 30 Mar '11

30 Mar '11

openSUSE Security Update: logwatch: security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0242-1 Rating: important References: #674984 Cross-References: CVE-2011-1018 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The update of logwatch improves the input validation. Before it was possible by an attacker to use special characters in a log-file to execute arbitrary commands. (CVSS v2 Base Score: 8.5 (AV:N/AC:M/Au:S/C:C/I:C/A:C)) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch logwatch-4029 - openSUSE 11.2: zypper in -t patch logwatch-4029 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch): logwatch-7.3.6-73.5.1 - openSUSE 11.2 (noarch): logwatch-7.3.6-67.67.1 References: http://support.novell.com/security/cve/CVE-2011-1018.html https://bugzilla.novell.com/674984

1 0

openSUSE-SU-2011:0239-1 (critical): flash-player: Update to 10.2.153.1
by opensuse-security＠opensuse.org 29 Mar '11

29 Mar '11

openSUSE Security Update: flash-player: Update to 10.2.153.1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0239-1 Rating: critical References: #679672 #682902 Cross-References: CVE-2011-0609 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. It includes one version update. Description: The Adobe Standalone Flash Player was updated to the 10.2.153.1, fixing several bugs and one security issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch flash-player-4239 - openSUSE 11.3: zypper in -t patch flash-player-4239 - openSUSE 11.2: zypper in -t patch flash-player-4239 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586) [New Version: 10.2.153.1]: flash-player-10.2.153.1-0.4.1 - openSUSE 11.3 (i586) [New Version: 10.2.153.1]: flash-player-10.2.153.1-0.4.1 - openSUSE 11.2 (i586): flash-player-10.2.153.1-0.4.1 References: http://support.novell.com/security/cve/CVE-2011-0609.html https://bugzilla.novell.com/679672 https://bugzilla.novell.com/682902

1 0

openSUSE-SU-2011:0238-1 (moderate): subversion security update
by opensuse-security＠opensuse.org 28 Mar '11

28 Mar '11

openSUSE Security Update: subversion security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0238-1 Rating: moderate References: #676949 Cross-References: CVE-2011-0715 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: Remote attackers could crash an svn server by causing a NULL deref (CVE-2011-0715). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libsvn_auth_gnome_keyring-1-0-4226 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.6.16]: libsvn_auth_gnome_keyring-1-0-1.6.16-1.3.1 libsvn_auth_kwallet-1-0-1.6.16-1.3.1 subversion-1.6.16-1.3.1 subversion-devel-1.6.16-1.3.1 subversion-perl-1.6.16-1.3.1 subversion-python-1.6.16-1.3.1 subversion-ruby-1.6.16-1.3.1 subversion-server-1.6.16-1.3.1 subversion-tools-1.6.16-1.3.1 References: http://support.novell.com/security/cve/CVE-2011-0715.html https://bugzilla.novell.com/676949

1 0

openSUSE-RU-2011:0237-1 (low): zfs-fuse: fix potential corruption
by maintenance＠opensuse.org 28 Mar '11

28 Mar '11

openSUSE Recommended Update: zfs-fuse: fix potential corruption ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0237-1 Rating: low References: #679173 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Destructive inplace snapshot operations (including, but possibly not limited to rollback) can potentially lead to inconsistent page caching and thus corruption. This update contains a fix which avoids the issue by using drop_caches to clear the page cache. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch zfs-fuse-4206 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): zfs-fuse-0.6.9_git20110322-0.3.1 References: https://bugzilla.novell.com/679173

1 0

openSUSE-RU-2011:0236-1 (low): pstoedit: This update fixes a segfault of pstoedit
by maintenance＠opensuse.org 28 Mar '11

28 Mar '11

openSUSE Recommended Update: pstoedit: This update fixes a segfault of pstoedit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0236-1 Rating: low References: #555599 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a segfault of pstoedit Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch pstoedit-4205 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): pstoedit-3.50-2.5.1 pstoedit-devel-3.50-2.5.1 References: https://bugzilla.novell.com/555599

1 0

openSUSE-RU-2011:0235-1 (low): openvpn: openvpn doesn't work with kvpnc. Fixed by this update.
by maintenance＠opensuse.org 28 Mar '11

28 Mar '11

openSUSE Recommended Update: openvpn: openvpn doesn't work with kvpnc. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0235-1 Rating: low References: #679153 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: openvpn doesn't work with kvpnc, because kvpnc is unable to parse the openvpn version. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openvpn-4196 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): openvpn-2.1.4-11.16.1 openvpn-auth-pam-plugin-2.1.4-11.16.1 openvpn-down-root-plugin-2.1.4-11.16.1 References: https://bugzilla.novell.com/679153

1 0

openSUSE-RU-2011:0234-1 (low): bootsplash: Fixed background looking like a broken display
by maintenance＠opensuse.org 28 Mar '11

28 Mar '11

openSUSE Recommended Update: bootsplash: Fixed background looking like a broken display ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0234-1 Rating: low References: #669474 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following bug: - #669474: bootsplash background looks a broken display Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch bootsplash-4185 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): bootsplash-3.3-167.168.1 - openSUSE 11.4 (noarch): bootsplash-branding-openSUSE-3.1-64.66.1 bootsplash-branding-upstream-3.1-64.66.1 References: https://bugzilla.novell.com/669474

1 0

openSUSE-RU-2011:0233-1 (low): yast2-control-center: The search results in YAST Control Center are not displayed correctly. Fixed by this update.
by maintenance＠opensuse.org 28 Mar '11

28 Mar '11

openSUSE Recommended Update: yast2-control-center: The search results in YAST Control Center are not displayed correctly. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0233-1 Rating: low References: #613352 #650907 #661109 #679496 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. It includes one version update. Description: The search results in YAST Control Center are not displayed correctly. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch yast2-control-center-4200 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.20.2]: yast2-control-center-2.20.2-1.3.1 yast2-control-center-qt-2.20.2-1.3.1 References: https://bugzilla.novell.com/613352 https://bugzilla.novell.com/650907 https://bugzilla.novell.com/661109 https://bugzilla.novell.com/679496

1 0

openSUSE-RU-2011:0230-1 (moderate): btrfsprogs: Fix boot failure with btrfs root
by maintenance＠opensuse.org 28 Mar '11

28 Mar '11

openSUSE Recommended Update: btrfsprogs: Fix boot failure with btrfs root ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0230-1 Rating: moderate References: #665899 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This updates btrfsprogs to a new snapshot that provides * Add new util: 'btrfs' * multidevice support for check_mounted * check slash in deleting subvolumes * Add btrfsck option to select the super block copy in addition, a symlink to avoid a boot failure with btrfs root was added (bnc#665899) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch btrfsprogs-4186 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): btrfsprogs-0.19-17.18.1 References: https://bugzilla.novell.com/665899

1 0

openSUSE-SU-403 Forbidden-1 (critical): openssl: security update
by opensuse-security＠opensuse.org 25 Mar '11

25 Mar '11

openSUSE Security Update: openssl: security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-403 Forbidden-1 Rating: critical References: #670526 #680771 Cross-References: CVE-2011-0014 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. It includes four new package versions. Description: This update improves the ClientHello handshake message parsing function. Prior to this update is was possible that this function reads beyond the end of a message leading to invalid memory access and a crash. Under some circumstances it was possible that information from the OCSP extensions was disclosed. (CVE-2011-0014: CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:N/A:P)) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch mozilla-js192-4203 seamonkey-4204 - openSUSE 11.3: zypper in -t patch MozillaFirefox-4201 libopenssl-devel-3937 mozilla-xulrunner191-4202 seamonkey-4204 - openSUSE 11.2: zypper in -t patch MozillaFirefox-4201 libopenssl-devel-3937 mozilla-xulrunner191-4202 seamonkey-4204 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.9.2.16 and 2.0.13]: mozilla-js192-1.9.2.16-0.2.1 mozilla-xulrunner192-1.9.2.16-0.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.16-0.2.1 mozilla-xulrunner192-devel-1.9.2.16-0.2.1 mozilla-xulrunner192-gnome-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-common-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-other-1.9.2.16-0.2.1 seamonkey-2.0.13-0.2.1 seamonkey-dom-inspector-2.0.13-0.2.1 seamonkey-irc-2.0.13-0.2.1 seamonkey-translations-common-2.0.13-0.2.1 seamonkey-translations-other-2.0.13-0.2.1 seamonkey-venkman-2.0.13-0.2.1 - openSUSE 11.4 (x86_64) [New Version: 1.9.2.16]: mozilla-js192-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.16-0.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 1.9.1.18,1.9.2.16,2.0.13 and 3.6.16]: MozillaFirefox-3.6.16-0.2.1 MozillaFirefox-branding-upstream-3.6.16-0.2.1 MozillaFirefox-translations-common-3.6.16-0.2.1 MozillaFirefox-translations-other-3.6.16-0.2.1 libopenssl-devel-1.0.0-6.7.1 libopenssl0_9_8-0.9.8m-3.3.2 libopenssl1_0_0-1.0.0-6.7.1 mozilla-js192-1.9.2.16-0.2.1 mozilla-xulrunner191-1.9.1.18-0.2.1 mozilla-xulrunner191-devel-1.9.1.18-0.2.1 mozilla-xulrunner191-gnomevfs-1.9.1.18-0.2.1 mozilla-xulrunner191-translations-common-1.9.1.18-0.2.1 mozilla-xulrunner191-translations-other-1.9.1.18-0.2.1 mozilla-xulrunner192-1.9.2.16-0.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.16-0.2.1 mozilla-xulrunner192-devel-1.9.2.16-0.2.1 mozilla-xulrunner192-gnome-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-common-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-other-1.9.2.16-0.2.1 openssl-1.0.0-6.7.1 python-xpcom191-1.9.1.18-0.2.1 seamonkey-2.0.13-0.2.1 seamonkey-dom-inspector-2.0.13-0.2.1 seamonkey-irc-2.0.13-0.2.1 seamonkey-translations-common-2.0.13-0.2.1 seamonkey-translations-other-2.0.13-0.2.1 seamonkey-venkman-2.0.13-0.2.1 - openSUSE 11.3 (x86_64) [New Version: 1.9.1.18 and 1.9.2.16]: libopenssl0_9_8-32bit-0.9.8m-3.3.2 libopenssl1_0_0-32bit-1.0.0-6.7.1 mozilla-js192-32bit-1.9.2.16-0.2.1 mozilla-xulrunner191-32bit-1.9.1.18-0.2.1 mozilla-xulrunner191-gnomevfs-32bit-1.9.1.18-0.2.1 mozilla-xulrunner192-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.16-0.2.1 - openSUSE 11.3 (noarch): openssl-doc-1.0.0-6.7.1 - openSUSE 11.2 (i586 x86_64) [New Version: 1.9.1.18,1.9.2.16,2.0.13 and 3.6.16]: MozillaFirefox-3.6.16-0.2.1 MozillaFirefox-branding-upstream-3.6.16-0.2.1 MozillaFirefox-translations-common-3.6.16-0.2.1 MozillaFirefox-translations-other-3.6.16-0.2.1 libopenssl-devel-0.9.8k-3.14.1 libopenssl0_9_8-0.9.8k-3.14.1 mozilla-js192-1.9.2.16-0.2.1 mozilla-xulrunner191-1.9.1.18-0.2.1 mozilla-xulrunner191-devel-1.9.1.18-0.2.1 mozilla-xulrunner191-gnomevfs-1.9.1.18-0.2.1 mozilla-xulrunner191-translations-common-1.9.1.18-0.2.1 mozilla-xulrunner191-translations-other-1.9.1.18-0.2.1 mozilla-xulrunner192-1.9.2.16-0.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.16-0.2.1 mozilla-xulrunner192-devel-1.9.2.16-0.2.1 mozilla-xulrunner192-gnome-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-common-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-other-1.9.2.16-0.2.1 openssl-0.9.8k-3.14.1 openssl-doc-0.9.8k-3.14.1 python-xpcom191-1.9.1.18-0.2.1 seamonkey-2.0.13-0.2.1 seamonkey-dom-inspector-2.0.13-0.2.1 seamonkey-irc-2.0.13-0.2.1 seamonkey-venkman-2.0.13-0.2.1 - openSUSE 11.2 (x86_64) [New Version: 1.9.1.18 and 1.9.2.16]: libopenssl0_9_8-32bit-0.9.8k-3.14.1 mozilla-js192-32bit-1.9.2.16-0.2.1 mozilla-xulrunner191-32bit-1.9.1.18-0.2.1 mozilla-xulrunner191-gnomevfs-32bit-1.9.1.18-0.2.1 mozilla-xulrunner192-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.16-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-0014.html https://bugzilla.novell.com/670526 https://bugzilla.novell.com/680771

1 0

openSUSE-SU-403 Forbidden-1 (critical): mozilla-xulrunner191 security update
by opensuse-security＠opensuse.org 25 Mar '11

25 Mar '11

openSUSE Security Update: mozilla-xulrunner191 security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-403 Forbidden-1 Rating: critical References: #680771 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes four new package versions. Description: Mozilla XULRunner 1.9.1 was updated to version 1.9.1.18 to fix the following security issue: MFSA 2011-11 Several invalid HTTPS certificates were placed on the certificate blacklist to prevent their misuse. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch mozilla-js192-4203 seamonkey-4204 - openSUSE 11.3: zypper in -t patch MozillaFirefox-4201 mozilla-xulrunner191-4202 seamonkey-4204 - openSUSE 11.2: zypper in -t patch MozillaFirefox-4201 mozilla-xulrunner191-4202 seamonkey-4204 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.9.2.16 and 2.0.13]: mozilla-js192-1.9.2.16-0.2.1 mozilla-xulrunner192-1.9.2.16-0.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.16-0.2.1 mozilla-xulrunner192-devel-1.9.2.16-0.2.1 mozilla-xulrunner192-gnome-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-common-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-other-1.9.2.16-0.2.1 seamonkey-2.0.13-0.2.1 seamonkey-dom-inspector-2.0.13-0.2.1 seamonkey-irc-2.0.13-0.2.1 seamonkey-translations-common-2.0.13-0.2.1 seamonkey-translations-other-2.0.13-0.2.1 seamonkey-venkman-2.0.13-0.2.1 - openSUSE 11.4 (x86_64) [New Version: 1.9.2.16]: mozilla-js192-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.16-0.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 1.9.1.18,1.9.2.16,2.0.13 and 3.6.16]: MozillaFirefox-3.6.16-0.2.1 MozillaFirefox-branding-upstream-3.6.16-0.2.1 MozillaFirefox-translations-common-3.6.16-0.2.1 MozillaFirefox-translations-other-3.6.16-0.2.1 mozilla-js192-1.9.2.16-0.2.1 mozilla-xulrunner191-1.9.1.18-0.2.1 mozilla-xulrunner191-devel-1.9.1.18-0.2.1 mozilla-xulrunner191-gnomevfs-1.9.1.18-0.2.1 mozilla-xulrunner191-translations-common-1.9.1.18-0.2.1 mozilla-xulrunner191-translations-other-1.9.1.18-0.2.1 mozilla-xulrunner192-1.9.2.16-0.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.16-0.2.1 mozilla-xulrunner192-devel-1.9.2.16-0.2.1 mozilla-xulrunner192-gnome-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-common-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-other-1.9.2.16-0.2.1 python-xpcom191-1.9.1.18-0.2.1 seamonkey-2.0.13-0.2.1 seamonkey-dom-inspector-2.0.13-0.2.1 seamonkey-irc-2.0.13-0.2.1 seamonkey-translations-common-2.0.13-0.2.1 seamonkey-translations-other-2.0.13-0.2.1 seamonkey-venkman-2.0.13-0.2.1 - openSUSE 11.3 (x86_64) [New Version: 1.9.1.18 and 1.9.2.16]: mozilla-js192-32bit-1.9.2.16-0.2.1 mozilla-xulrunner191-32bit-1.9.1.18-0.2.1 mozilla-xulrunner191-gnomevfs-32bit-1.9.1.18-0.2.1 mozilla-xulrunner192-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.16-0.2.1 - openSUSE 11.2 (i586 x86_64) [New Version: 1.9.1.18,1.9.2.16,2.0.13 and 3.6.16]: MozillaFirefox-3.6.16-0.2.1 MozillaFirefox-branding-upstream-3.6.16-0.2.1 MozillaFirefox-translations-common-3.6.16-0.2.1 MozillaFirefox-translations-other-3.6.16-0.2.1 mozilla-js192-1.9.2.16-0.2.1 mozilla-xulrunner191-1.9.1.18-0.2.1 mozilla-xulrunner191-devel-1.9.1.18-0.2.1 mozilla-xulrunner191-gnomevfs-1.9.1.18-0.2.1 mozilla-xulrunner191-translations-common-1.9.1.18-0.2.1 mozilla-xulrunner191-translations-other-1.9.1.18-0.2.1 mozilla-xulrunner192-1.9.2.16-0.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.16-0.2.1 mozilla-xulrunner192-devel-1.9.2.16-0.2.1 mozilla-xulrunner192-gnome-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-common-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-other-1.9.2.16-0.2.1 python-xpcom191-1.9.1.18-0.2.1 seamonkey-2.0.13-0.2.1 seamonkey-dom-inspector-2.0.13-0.2.1 seamonkey-irc-2.0.13-0.2.1 seamonkey-venkman-2.0.13-0.2.1 - openSUSE 11.2 (x86_64) [New Version: 1.9.1.18 and 1.9.2.16]: mozilla-js192-32bit-1.9.2.16-0.2.1 mozilla-xulrunner191-32bit-1.9.1.18-0.2.1 mozilla-xulrunner191-gnomevfs-32bit-1.9.1.18-0.2.1 mozilla-xulrunner192-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.16-0.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.16-0.2.1 References: https://bugzilla.novell.com/680771

1 0

openSUSE-RU-403 Forbidden-1 (critical): timezone: Update to 2011d
by maintenance＠opensuse.org 25 Mar '11

25 Mar '11

openSUSE Recommended Update: timezone: Update to 2011d ______________________________________________________________________________ Announcement ID: openSUSE-RU-403 Forbidden-1 Rating: critical References: #682451 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update provides latest timezone information, taken from Olson database 2011d: * Pacific/Apia: Move DST from April 3rd to April 2nd * Europe/Istanbul: Move DST from March 27th to 28th * America/Cuba: DST starts on March 20th * Samoa DST will occur a day earlier, on April 11th, 2011. * America/Cuba Daylight Saving Time will occur on March 20th, 2011. * Europe/Istanbul Daylight Saving Time will occur on March 28th, 2011,because of a nationwide exam scheduled to take place on Sunday, March 27. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch timezone-2011d-4222 - openSUSE 11.3: zypper in -t patch timezone-2011d-4222 - openSUSE 11.2: zypper in -t patch timezone-2011d-4222 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2011d]: timezone-2011d-0.2.1 - openSUSE 11.4 (noarch) [New Version: 2011d]: timezone-java-2011d-0.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 2011d]: timezone-2011d-0.2.1 - openSUSE 11.3 (noarch) [New Version: 2011d]: timezone-java-2011d-0.2.1 - openSUSE 11.2 (i586 x86_64) [New Version: 2011d]: timezone-2011d-0.2.1 - openSUSE 11.2 (noarch) [New Version: 2011d]: timezone-java-2011d-0.2.1 References: https://bugzilla.novell.com/682451

1 0

openSUSE-RU-2011:0223-1 (moderate): xen
by maintenance＠opensuse.org 24 Mar '11

24 Mar '11

openSUSE Recommended Update: xen ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0223-1 Rating: moderate References: #613584 #613957 #625333 #631680 #633573 #641419 #651822 #654543 #654591 #655438 #656369 #657272 #657349 #658163 #658569 #658704 #659070 #659431 #659466 #659665 #659872 #661298 #661829 #661931 #665446 #665541 #665767 #668621 #677557 #677856 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has 30 recommended fixes can now be installed. It includes one version update. Description: Collective update for XEN Xen - 668600: libvirt massive filedescriptor leak after latest XEN update (same as 661931) - 658569: SLES 11 SP1 dom0 iptables gives lots of physdev messages - 633573: System fail to boot after running several warm reboot tests - 658704: SLES11 SP1 Xen boot panic in x2apic mode - 641419: L3: Xen: qemu-dm reports "xc_map_foreign_batch: mmap failed: - 661931: Fix fd leak in xenstore library (same as 668600) - 656369: g5plus: sles11sp1 xen crash with 8 socket x2apic preenabled - 658163: maintenance release - Nehalem system cannot boot into xen with maintenance release installed - 658704: SLES11 SP1 Xen boot panic in x2apic mode - 661298: maintenance release candidate - Windows VMs reboot too fast, triggering failsafe - 659070: Fail to input '|' in en-us keyboard - 659466: XEN drbd block device type not working on SLES 11 SP1 - 654543: PV guest won't unplug the IDE disk created by qemu-dm - 651822: make sure we only apply the snapshot once, and the changes made after snapshot-apply hit the disk. - 613584: If available, use kpartx '-f' option in domUloader - 659872: xend: Do no release domain lock on checkpoint operation. virt-manager - 657272: virt-manager creates default 'dir' storage pool in /var/lib/libvirt/images on xen host libvirt - 659665: DomU hangs if vcpus>1 and pci passthrough active - 659431: Failed to start KVM VM vm-install - 661829: vm-install ignores inst source, description and other in vm-settings xml file - 657349: Info file for linuxrc is not picked up by Xen - 613957: Fedora 13 PV DomU can't be installed - 665767: L3:kvm vminstall generates bad xml - 665446: Attempt to start installation of new KVM virt - 665541: vm-install fails tu create a virtual machine (kvm) - 677856: Fix failure due to missing /var/run/vm-install directory - 677557: Fix install openSUSE 11.4 as a guest on XEN - 631680: Fix KVM install of openSUSE 11.3 on KVM failing on first reboot - 668621: Fix creation of a new VM in virt-manager Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch xen-201103-4122 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 0.4.29]: libvirt-0.8.1-4.4.7 libvirt-client-0.8.1-4.4.7 libvirt-devel-0.8.1-4.4.7 libvirt-doc-0.8.1-4.4.7 libvirt-python-0.8.1-4.4.7 virt-manager-0.8.4-5.3.1 vm-install-0.4.29-0.2.1 xen-4.0.1_21326_06-0.3.1 xen-devel-4.0.1_21326_06-0.3.1 xen-doc-html-4.0.1_21326_06-0.3.1 xen-doc-pdf-4.0.1_21326_06-0.3.1 xen-kmp-default-4.0.1_21326_06_k2.6.34.7_0.7-0.3.1 xen-kmp-desktop-4.0.1_21326_06_k2.6.34.7_0.7-0.3.1 xen-libs-4.0.1_21326_06-0.3.1 xen-tools-4.0.1_21326_06-0.3.1 xen-tools-domU-4.0.1_21326_06-0.3.1 - openSUSE 11.3 (i586): xen-kmp-pae-4.0.1_21326_06_k2.6.34.7_0.7-0.3.1 References: https://bugzilla.novell.com/613584 https://bugzilla.novell.com/613957 https://bugzilla.novell.com/625333 https://bugzilla.novell.com/631680 https://bugzilla.novell.com/633573 https://bugzilla.novell.com/641419 https://bugzilla.novell.com/651822 https://bugzilla.novell.com/654543 https://bugzilla.novell.com/654591 https://bugzilla.novell.com/655438 https://bugzilla.novell.com/656369 https://bugzilla.novell.com/657272 https://bugzilla.novell.com/657349 https://bugzilla.novell.com/658163 https://bugzilla.novell.com/658569 https://bugzilla.novell.com/658704 https://bugzilla.novell.com/659070 https://bugzilla.novell.com/659431 https://bugzilla.novell.com/659466 https://bugzilla.novell.com/659665 https://bugzilla.novell.com/659872 https://bugzilla.novell.com/661298 https://bugzilla.novell.com/661829 https://bugzilla.novell.com/661931 https://bugzilla.novell.com/665446 https://bugzilla.novell.com/665541 https://bugzilla.novell.com/665767 https://bugzilla.novell.com/668621 https://bugzilla.novell.com/677557 https://bugzilla.novell.com/677856

1 0

openSUSE-SU-2011:0221-1 (important): pango security update
by opensuse-security＠opensuse.org 24 Mar '11

24 Mar '11

openSUSE Security Update: pango security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0221-1 Rating: important References: #666101 #672502 Cross-References: CVE-2011-0020 CVE-2011-0064 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: Specially crafted font files could cause a heap corruption in applications linked against pango (CVE-2011-0064, CVE-2011-0020). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libpango-1_0-0-4076 - openSUSE 11.2: zypper in -t patch libpango-1_0-0-4076 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): pango-1.28.0-3.3.1 pango-devel-1.28.0-3.3.1 pango-module-thai-lang-1.28.0-3.3.1 - openSUSE 11.3 (x86_64): pango-32bit-1.28.0-3.3.1 - openSUSE 11.2 (i586 x86_64) [New Version: 1.26.2]: pango-1.26.2-1.3.1 pango-devel-1.26.2-1.3.1 pango-module-thai-lang-1.26.2-1.3.1 - openSUSE 11.2 (x86_64) [New Version: 1.26.2]: pango-32bit-1.26.2-1.3.1 References: http://support.novell.com/security/cve/CVE-2011-0020.html http://support.novell.com/security/cve/CVE-2011-0064.html https://bugzilla.novell.com/666101 https://bugzilla.novell.com/672502

1 0

openSUSE-RU-2011:0220-1 (low): mingett: This update fixes a logically faulty printing.
by maintenance＠opensuse.org 23 Mar '11

23 Mar '11

openSUSE Recommended Update: mingett: This update fixes a logically faulty printing. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0220-1 Rating: low References: #679287 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: mingetty prints "Hint:". This is logically faulty. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch mingetty-4165 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): mingetty-1.0.8s-6.3.1 References: https://bugzilla.novell.com/679287

1 0

openSUSE-RU-2011:0217-1 (low): MozillaFirefox: Update to Firefox 4 final release
by maintenance＠opensuse.org 23 Mar '11

23 Mar '11

openSUSE Recommended Update: MozillaFirefox: Update to Firefox 4 final release ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0217-1 Rating: low References: #681237 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes two new package versions. Description: Mozilla Firefox is updated to the final 4.0 release by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaFirefox-4195 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.0.0 and 4.0.0]: MozillaFirefox-4.0.0-0.3.1 MozillaFirefox-branding-upstream-4.0.0-0.3.1 MozillaFirefox-devel-4.0.0-0.3.1 MozillaFirefox-translations-common-4.0.0-0.3.1 MozillaFirefox-translations-other-4.0.0-0.3.1 mozilla-js20-2.0.0-0.3.1 mozilla-xulrunner20-2.0.0-0.3.1 mozilla-xulrunner20-buildsymbols-2.0.0-0.3.1 mozilla-xulrunner20-devel-2.0.0-0.3.1 mozilla-xulrunner20-gnome-2.0.0-0.3.1 mozilla-xulrunner20-translations-common-2.0.0-0.3.1 mozilla-xulrunner20-translations-other-2.0.0-0.3.1 - openSUSE 11.4 (x86_64) [New Version: 2.0.0]: mozilla-js20-32bit-2.0.0-0.3.1 mozilla-xulrunner20-32bit-2.0.0-0.3.1 mozilla-xulrunner20-gnome-32bit-2.0.0-0.3.1 mozilla-xulrunner20-translations-common-32bit-2.0.0-0.3.1 mozilla-xulrunner20-translations-other-32bit-2.0.0-0.3.1 References: https://bugzilla.novell.com/681237

1 0

openSUSE-SU-2011:0215-1 (critical): flash-player: Update to 10.2.153.1
by opensuse-security＠opensuse.org 23 Mar '11

23 Mar '11

openSUSE Security Update: flash-player: Update to 10.2.153.1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0215-1 Rating: critical References: #679672 Cross-References: CVE-2011-0609 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: The Adobe Flash Player was updated to the 10.2.153.1, fixing several bugs and one security issue. This vulnerability (CVE-2011-0609) could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being exploited in the wild in targeted attacks via a Flash (.swf) file embedded in a Microsoft Excel (.xls) file delivered as an email attachment. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch flash-player-4187 - openSUSE 11.3: zypper in -t patch flash-player-4187 - openSUSE 11.2: zypper in -t patch flash-player-4187 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586) [New Version: 10.2.153.1]: flash-player-10.2.153.1-0.2.1 - openSUSE 11.3 (i586) [New Version: 10.2.153.1]: flash-player-10.2.153.1-0.2.1 - openSUSE 11.2 (i586) [New Version: 10.2.153.1]: flash-player-10.2.153.1-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-0609.html https://bugzilla.novell.com/679672

1 0

openSUSE-RU-2011:0213-1 (low): permissions: This update sets a setuid bit on VBoxNetDHCP
by maintenance＠opensuse.org 22 Mar '11

22 Mar '11

openSUSE Recommended Update: permissions: This update sets a setuid bit on VBoxNetDHCP ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0213-1 Rating: low References: #669055 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update sets a setuid bit on VBoxNetDHCP in level 'easy'. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch permissions-4166 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2011.03.07.1608]: permissions-2011.03.07.1608-1.3.1 References: https://bugzilla.novell.com/669055

1 0

openSUSE-RU-2011:0212-1 (low): evolution-data-server: This update provides a solution for non-RFC conform working NNTP servers.
by maintenance＠opensuse.org 22 Mar '11

22 Mar '11

openSUSE Recommended Update: evolution-data-server: This update provides a solution for non-RFC conform working NNTP servers. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0212-1 Rating: low References: #678934 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides a solution for non-RFC conform working NNTP servers. After the update, evolution will check the servers capabilities before using OVER command so the connection is no longer reset by the remote server. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch evolution-data-server-4159 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): evolution-data-server-2.32.1-4.3.1 evolution-data-server-devel-2.32.1-4.3.1 evolution-data-server-doc-2.32.1-4.3.1 libcamel-1_2-19-2.32.1-4.3.1 libebackend-1_2-0-2.32.1-4.3.1 libebook-1_2-10-2.32.1-4.3.1 libecal-1_2-8-2.32.1-4.3.1 libedata-book-1_2-8-2.32.1-4.3.1 libedata-cal-1_2-10-2.32.1-4.3.1 libedataserver-1_2-14-2.32.1-4.3.1 libedataserverui-1_2-11-2.32.1-4.3.1 libegroupwise-1_2-13-2.32.1-4.3.1 - openSUSE 11.4 (x86_64): libcamel-1_2-19-32bit-2.32.1-4.3.1 libebackend-1_2-0-32bit-2.32.1-4.3.1 libebook-1_2-10-32bit-2.32.1-4.3.1 libecal-1_2-8-32bit-2.32.1-4.3.1 libedata-book-1_2-8-32bit-2.32.1-4.3.1 libedata-cal-1_2-10-32bit-2.32.1-4.3.1 libedataserver-1_2-14-32bit-2.32.1-4.3.1 libedataserverui-1_2-11-32bit-2.32.1-4.3.1 libegroupwise-1_2-13-32bit-2.32.1-4.3.1 - openSUSE 11.4 (noarch): evolution-data-server-lang-2.32.1-4.3.1 References: https://bugzilla.novell.com/678934

1 0

openSUSE-RU-2011:0211-1 (low): dosfstools: This update fixes a buffer overflow in fsck.vfat
by maintenance＠opensuse.org 22 Mar '11

22 Mar '11

openSUSE Recommended Update: dosfstools: This update fixes a buffer overflow in fsck.vfat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0211-1 Rating: low References: #677236 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following bug: A buffer overflow can happen when creating an entry of vfat filesystem trough alloc_rootdir_entry(). This function is used when fsck.vfat -f is called. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch dosfstools-4158 - openSUSE 11.3: zypper in -t patch dosfstools-4158 - openSUSE 11.2: zypper in -t patch dosfstools-4158 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): dosfstools-3.0.10-12.3.1 - openSUSE 11.3 (i586 x86_64): dosfstools-3.0.9-4.3.1 - openSUSE 11.2 (i586 x86_64): dosfstools-2.11-146.4.1 References: https://bugzilla.novell.com/677236

1 0

openSUSE-RU-2011:0210-1 (low): sysvinit: bugfixes regarding pam_ssh and systemd
by maintenance＠opensuse.org 22 Mar '11

22 Mar '11

openSUSE Recommended Update: sysvinit: bugfixes regarding pam_ssh and systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0210-1 Rating: low References: #664941 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The sysvinit helper binaries were updated to fix two bugs: - #664941: pam_ssh does not add the key to ssh-agent - #672450: sysvinit+systemd: too many repeated messages on ttyS0 console Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch sysvinit-4152 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): sysvinit-2.88-37.43.1 sysvinit-tools-2.88-37.43.1 References: https://bugzilla.novell.com/664941

1 0

openSUSE-SU-2011:0208-1 (important): clamav security update
by opensuse-security＠opensuse.org 22 Mar '11

22 Mar '11

openSUSE Security Update: clamav security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0208-1 Rating: important References: #673753 Cross-References: CVE-2011-1003 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: Specially crafted VBA data in Microsoft Office documents could crash clamav or potentially even cause execution of arbitrary code. clamav was updated to version 0.97 to fix the issue (CVE-2011-1003). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch clamav-4154 - openSUSE 11.2: zypper in -t patch clamav-4154 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 0.97]: clamav-0.97-5.2.2 - openSUSE 11.3 (noarch) [New Version: 0.97]: clamav-db-0.97-5.2.2 - openSUSE 11.2 (i586 x86_64) [New Version: 0.97]: clamav-0.97-5.2.2 clamav-db-0.97-5.2.2 References: http://support.novell.com/security/cve/CVE-2011-1003.html https://bugzilla.novell.com/673753

1 0

openSUSE-SU-2011:0207-1 (moderate): aaa_base security update
by opensuse-security＠opensuse.org 22 Mar '11

22 Mar '11

openSUSE Security Update: aaa_base security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0207-1 Rating: moderate References: #678827 Cross-References: CVE-2011-0468 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: shell meta characters in file names could cause interactive shells to execute arbitrary commands when performing tab expansion (CVE-2011-0468). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch aaa_base-4171 - openSUSE 11.3: zypper in -t patch aaa_base-4171 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): aaa_base-11.4-54.62.1 aaa_base-extras-11.4-54.62.1 - openSUSE 11.3 (i586 x86_64): aaa_base-11.3-8.9.1 References: http://support.novell.com/security/cve/CVE-2011-0468.html https://bugzilla.novell.com/678827

1 0

openSUSE-RU-2011:0204-1 (low): Fixed post scriptlets in M17N gtk2 immodule packages
by maintenance＠opensuse.org 21 Mar '11

21 Mar '11

openSUSE Recommended Update: Fixed post scriptlets in M17N gtk2 immodule packages ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0204-1 Rating: low References: #678080 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This patch fixes the rpm post scriptlets in packages providing gtk2 IM modules to create the gtk2 immodule cache properly after installation / uninstallation. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch immgtk2fixes-4151 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): ibus-1.3.8-4.3.1 ibus-devel-1.3.8-4.3.1 ibus-gtk-1.3.8-4.3.1 imhangul-0.9.14-12.3.1 libibus2-1.3.8-4.3.1 scim-1.4.7-180.3.1 scim-bridge-0.4.15-125.3.1 scim-bridge-gtk-0.4.15-125.3.1 scim-bridge-qt-0.4.15-125.3.1 scim-devel-1.4.7-180.3.1 tamil-gtk2im-2.2-286.3.1 uim-1.5.6-13.3.2 uim-devel-1.5.6-13.3.2 uim-gtk2-1.5.6-13.3.2 uim-qt-1.5.6-13.3.2 uim-qt4-1.5.6-13.3.2 - openSUSE 11.4 (x86_64): imhangul-32bit-0.9.14-12.3.1 scim-32bit-1.4.7-180.3.1 scim-bridge-gtk-32bit-0.4.15-125.3.1 scim-bridge-qt-32bit-0.4.15-125.3.1 tamil-gtk2im-32bit-2.2-286.3.1 uim-32bit-1.5.6-13.3.2 uim-gtk2-32bit-1.5.6-13.3.2 uim-qt-32bit-1.5.6-13.3.2 References: https://bugzilla.novell.com/678080

1 0

openSUSE-SU-2011:0174-1 (moderate): build security update
by opensuse-security＠opensuse.org 15 Mar '11

15 Mar '11

openSUSE Security Update: build security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0174-1 Rating: moderate References: #665768 Cross-References: CVE-2010-4226 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: The build script uses cpio to extract untrusted rpm packages for bootstrapping virtual machines. cpio is not safe to use for this task, therefore the build script now uses bsdtar instead (CVE-2010-4226). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch build-4028 - openSUSE 11.2: zypper in -t patch build-4028 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch) [New Version: 2010.07.28]: build-2010.07.28-1.3.1 build-mkbaselibs-2010.07.28-1.3.1 - openSUSE 11.2 (noarch) [New Version: 2010.07.28]: build-2010.07.28-1.3.1 References: http://support.novell.com/security/cve/CVE-2010-4226.html https://bugzilla.novell.com/665768

1 0

openSUSE-SU-2011:0171-1 (moderate): aaa_base security update
by opensuse-security＠opensuse.org 14 Mar '11

14 Mar '11

openSUSE Security Update: aaa_base security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0171-1 Rating: moderate References: #665479 Cross-References: CVE-2011-0461 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The boot.localfs init script wrote a file to /dev/shm during shut-down. Since local users may create symlinks there a malicious user could cause corruption of arbitrary files (CVE-2011-0461). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch aaa_base-3906 - openSUSE 11.2: zypper in -t patch aaa_base-3906 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): aaa_base-11.3-8.7.1 - openSUSE 11.2 (i586 x86_64): aaa_base-11.2-43.48.1 References: http://support.novell.com/security/cve/CVE-2011-0461.html https://bugzilla.novell.com/665479

1 0

openSUSE-SU-2011:0169-1 (critical): MozillaFirefox: Security update to 3.6.15
by opensuse-security＠opensuse.org 11 Mar '11

11 Mar '11

openSUSE Security Update: MozillaFirefox: Security update to 3.6.15 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0169-1 Rating: critical References: #667155 Cross-References: CVE-2010-1585 CVE-2011-0051 CVE-2011-0053 CVE-2011-0054 CVE-2011-0055 CVE-2011-0056 CVE-2011-0057 CVE-2011-0058 CVE-2011-0059 CVE-2011-0061 CVE-2011-0062 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. It includes 6 new package versions. Description: MozillaFirefox was updated to version 3.6.15, fixing various security issues. Following security issues were fixed: MFSA 2011-01: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. References Jesse Ruderman, Igor Bukanov, Olli Pettay, Gary Kwong, Jeff Walden, Henry Sivonen, Martijn Wargers, David Baron and Marcia Knous reported memory safety problems that affected Firefox 3.6 and Firefox 3.5. (CVE-2011-0053) Igor Bukanov and Gary Kwong reported memory safety problems that affected Firefox 3.6 only. (CVE-2011-0062) MFSA 2011-02 / CVE-2011-0051: Security researcher Zach Hoffman reported that a recursive call to eval() wrapped in a try/catch statement places the browser into a inconsistent state. Any dialog box opened in this state is displayed without text and with non-functioning buttons. Closing the window causes the dialog to evaluate to true. An attacker could use this issue to force a user into accepting any dialog, such as one granting elevated privileges to the page presenting the dialog. MFSA 2011-03 / CVE-2011-0055: Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that a method used by JSON.stringify contained a use-after-free error in which a currently in-use pointer was freed and subsequently dereferenced. This could lead to arbitrary code execution if an attacker was able to store malicious code in the freed section of memory. Mozilla developer Igor Bukanov also independently discovered and reported this issue two weeks after the initial report was received. MFSA 2011-04 / CVE-2011-0054: Security researcher Christian Holler reported that the JavaScript engine's internal memory mapping of non-local JS variables contained a buffer overflow which could potentially be used by an attacker to run arbitrary code on a victim's computer. MFSA 2011-05 / CVE-2011-0056: Security researcher Christian Holler reported that the JavaScript engine's internal mapping of string values contained an error in cases where the number of values being stored was above 64K. In such cases an offset pointer was manually moved forwards and backwards to access the larger address space. If an exception was thrown between the time that the offset pointer was moved forward and the time it was reset, then the exception object would be read from an invalid memory address, potentially executing attacker-controlled memory. MFSA 2011-06 / CVE-2011-0057: Daniel Kozlowski reported that a JavaScript Worker could be used to keep a reference to an object that could be freed during garbage collection. Subsequent calls through this deleted reference could cause attacker-controlled memory to be executed on a victim's computer. MFSA 2011-07 / CVE-2011-0058: Alex Miller reported that when very long strings were constructed and inserted into an HTML document, the browser would incorrectly construct the layout objects used to display the text. Under such conditions an incorrect length would be calculated for a text run resulting in too small of a memory buffer being allocated to store the text. This issue could be used by an attacker to write data past the end of the buffer and execute malicious code on a victim's computer. This issue affects only Mozilla browsers on Windows. MFSA 2011-08 / CVE-2010-1585: Mozilla security developer Roberto Suggi Liverani reported that ParanoidFragmentSink, a class used to sanitize potentially unsafe HTML for display, allows javascript: URLs and other inline JavaScript when the embedding document is a chrome document. While there are no unsafe uses of this class in any released products, extension code could have potentially used it in an unsafe manner. MFSA 2011-09 / CVE-2011-0061: Security researcher Jordi Chancel reported that a JPEG image could be constructed that would be decoded incorrectly, causing data to be written past the end of a buffer created to store the image. An attacker could potentially craft such an image that would cause malicious code to be stored in memory and then later executed on a victim's computer. MFSA 2011-10 / CVE-2011-0059: Adobe security researcher Peleus Uhley reported that when plugin-initiated requests receive a 307 redirect response, the plugin is not notified and the request is forwarded to the new location. This is true even for cross-site redirects, so any custom headers that were added as part of the initial request would be forwarded intact across origins. This poses a CSRF risk for web applications that rely on custom headers only being present in requests from their own origin. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch MozillaFirefox-4111 MozillaThunderbird-4070 mozilla-xulrunner191-4073 seamonkey-4074 - openSUSE 11.2: zypper in -t patch MozillaFirefox-4111 MozillaThunderbird-4070 mozilla-xulrunner191-4073 seamonkey-4074 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 1.1.2,1.9.1.17,1.9.2.15,2.0.12,3.1.8 and 3.6.15]: MozillaFirefox-3.6.15-0.2.1 MozillaFirefox-branding-upstream-3.6.15-0.2.1 MozillaFirefox-translations-common-3.6.15-0.2.1 MozillaFirefox-translations-other-3.6.15-0.2.1 MozillaThunderbird-3.1.8-0.7.1 MozillaThunderbird-devel-3.1.8-0.7.1 MozillaThunderbird-translations-common-3.1.8-0.7.1 MozillaThunderbird-translations-other-3.1.8-0.7.1 enigmail-1.1.2-9.7.1 mozilla-js192-1.9.2.15-0.2.1 mozilla-xulrunner191-1.9.1.17-0.2.1 mozilla-xulrunner191-devel-1.9.1.17-0.2.1 mozilla-xulrunner191-gnomevfs-1.9.1.17-0.2.1 mozilla-xulrunner191-translations-common-1.9.1.17-0.2.1 mozilla-xulrunner191-translations-other-1.9.1.17-0.2.1 mozilla-xulrunner192-1.9.2.15-0.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.15-0.2.1 mozilla-xulrunner192-devel-1.9.2.15-0.2.1 mozilla-xulrunner192-gnome-1.9.2.15-0.2.1 mozilla-xulrunner192-translations-common-1.9.2.15-0.2.1 mozilla-xulrunner192-translations-other-1.9.2.15-0.2.1 python-xpcom191-1.9.1.17-0.2.1 seamonkey-2.0.12-0.2.1 seamonkey-dom-inspector-2.0.12-0.2.1 seamonkey-irc-2.0.12-0.2.1 seamonkey-translations-common-2.0.12-0.2.1 seamonkey-translations-other-2.0.12-0.2.1 seamonkey-venkman-2.0.12-0.2.1 - openSUSE 11.3 (x86_64) [New Version: 1.9.1.17 and 1.9.2.15]: mozilla-js192-32bit-1.9.2.15-0.2.1 mozilla-xulrunner191-32bit-1.9.1.17-0.2.1 mozilla-xulrunner191-gnomevfs-32bit-1.9.1.17-0.2.1 mozilla-xulrunner192-32bit-1.9.2.15-0.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.15-0.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.15-0.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.15-0.2.1 - openSUSE 11.2 (i586 x86_64) [New Version: 1.1.2,1.9.1.17,1.9.2.15,2.0.12,3.1.8 and 3.6.15]: MozillaFirefox-3.6.15-0.2.2 MozillaFirefox-branding-upstream-3.6.15-0.2.2 MozillaFirefox-translations-common-3.6.15-0.2.2 MozillaFirefox-translations-other-3.6.15-0.2.2 MozillaThunderbird-3.1.8-0.7.1 MozillaThunderbird-devel-3.1.8-0.7.1 MozillaThunderbird-translations-common-3.1.8-0.7.1 MozillaThunderbird-translations-other-3.1.8-0.7.1 enigmail-1.1.2-9.7.1 mozilla-js192-1.9.2.15-0.2.2 mozilla-xulrunner191-1.9.1.17-0.2.1 mozilla-xulrunner191-devel-1.9.1.17-0.2.1 mozilla-xulrunner191-gnomevfs-1.9.1.17-0.2.1 mozilla-xulrunner191-translations-common-1.9.1.17-0.2.1 mozilla-xulrunner191-translations-other-1.9.1.17-0.2.1 mozilla-xulrunner192-1.9.2.15-0.2.2 mozilla-xulrunner192-buildsymbols-1.9.2.15-0.2.2 mozilla-xulrunner192-devel-1.9.2.15-0.2.2 mozilla-xulrunner192-gnome-1.9.2.15-0.2.2 mozilla-xulrunner192-translations-common-1.9.2.15-0.2.2 mozilla-xulrunner192-translations-other-1.9.2.15-0.2.2 python-xpcom191-1.9.1.17-0.2.1 seamonkey-2.0.12-0.2.1 seamonkey-dom-inspector-2.0.12-0.2.1 seamonkey-irc-2.0.12-0.2.1 seamonkey-venkman-2.0.12-0.2.1 - openSUSE 11.2 (x86_64) [New Version: 1.9.1.17 and 1.9.2.15]: mozilla-js192-32bit-1.9.2.15-0.2.2 mozilla-xulrunner191-32bit-1.9.1.17-0.2.1 mozilla-xulrunner191-gnomevfs-32bit-1.9.1.17-0.2.1 mozilla-xulrunner192-32bit-1.9.2.15-0.2.2 mozilla-xulrunner192-gnome-32bit-1.9.2.15-0.2.2 mozilla-xulrunner192-translations-common-32bit-1.9.2.15-0.2.2 mozilla-xulrunner192-translations-other-32bit-1.9.2.15-0.2.2 References: http://support.novell.com/security/cve/CVE-2010-1585.html http://support.novell.com/security/cve/CVE-2011-0051.html http://support.novell.com/security/cve/CVE-2011-0053.html http://support.novell.com/security/cve/CVE-2011-0054.html http://support.novell.com/security/cve/CVE-2011-0055.html http://support.novell.com/security/cve/CVE-2011-0056.html http://support.novell.com/security/cve/CVE-2011-0057.html http://support.novell.com/security/cve/CVE-2011-0058.html http://support.novell.com/security/cve/CVE-2011-0059.html http://support.novell.com/security/cve/CVE-2011-0061.html http://support.novell.com/security/cve/CVE-2011-0062.html https://bugzilla.novell.com/667155

1 0

openSUSE-SU-2011:0162-1 (moderate): gimp: security update
by opensuse-security＠opensuse.org 10 Mar '11

10 Mar '11

openSUSE Security Update: gimp: security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0162-1 Rating: moderate References: #662043 Cross-References: CVE-2010-4540 CVE-2010-4541 CVE-2010-4542 CVE-2010-4543 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. It includes one version update. Description: Four buffer overflows have been fixed in gimp and its plugins. CVE-2010-4540-CVE-2010-4543 have been assigned to these issues. - CVE-2010-4540: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119) - CVE-2010-4541: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119) - CVE-2010-4542: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119) - CVE-2010-4543: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch gimp-3967 - openSUSE 11.2: zypper in -t patch gimp-3967 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): gimp-2.6.8-7.3.1 gimp-branding-upstream-2.6.8-7.3.1 gimp-devel-2.6.8-7.3.1 gimp-help-browser-2.6.8-7.3.1 gimp-module-hal-2.6.8-7.3.1 gimp-plugins-python-2.6.8-7.3.1 - openSUSE 11.3 (noarch): gimp-lang-2.6.8-7.3.1 - openSUSE 11.2 (i586 x86_64) [New Version: 2.6.8]: gimp-2.6.8-1.3.1 gimp-branding-upstream-2.6.8-1.3.1 gimp-devel-2.6.8-1.3.1 gimp-help-browser-2.6.8-1.3.1 gimp-plugins-python-2.6.8-1.3.1 - openSUSE 11.2 (noarch) [New Version: 2.6.8]: gimp-lang-2.6.8-1.3.1 References: http://support.novell.com/security/cve/CVE-2010-4540.html http://support.novell.com/security/cve/CVE-2010-4541.html http://support.novell.com/security/cve/CVE-2010-4542.html http://support.novell.com/security/cve/CVE-2010-4543.html https://bugzilla.novell.com/662043

1 0

openSUSE-SU-2011:0159-1 (important): SLE11 SP1
by opensuse-security＠opensuse.org 08 Mar '11

08 Mar '11

openSUSE Security Update: SLE11 SP1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0159-1 Rating: important References: #466279 #552250 #564423 #602969 #620929 #622868 #623393 #625965 #629170 #630970 #632317 #633026 #636435 #638258 #640850 #642309 #643266 #643513 #648647 #648701 #648916 #649473 #650067 #650366 #650748 #651152 #652391 #655220 #655278 #655964 #657248 #657763 #658037 #658254 #658337 #658353 #658461 #658551 #658720 #659101 #659394 #659419 #660546 #661605 #661945 #662031 #662192 #662202 #662212 #662335 #662340 #662360 #662673 #662722 #662800 #662931 #662945 #663537 #663582 #663706 #664149 #664463 #665480 #665499 #665524 #665663 #666012 #666893 #668545 #668633 #668929 #670129 #670577 #670864 #671256 #671274 #671483 #672292 #672492 #672499 #672524 #674735 Cross-References: CVE-2010-2943 CVE-2010-3699 CVE-2010-3705 CVE-2010-3858 CVE-2010-3875 CVE-2010-3876 CVE-2010-3877 CVE-2010-4075 CVE-2010-4076 CVE-2010-4077 CVE-2010-4163 CVE-2010-4243 CVE-2010-4342 CVE-2010-4346 CVE-2010-4526 CVE-2010-4527 CVE-2010-4529 CVE-2010-4650 CVE-2010-4668 CVE-2011-0006 CVE-2011-0710 CVE-2011-0711 CVE-2011-0712 Affected Products: SLE 11 SERVER Unsupported Extras ______________________________________________________________________________ An update that solves 23 vulnerabilities and has 59 fixes is now available. Description: The SUSE Linux Enterprise 11 Service Pack 1 kernel was updated to 2.6.32.29 and fixes various bugs and security issues. CVE-2010-3875: The ax25_getname function in net/ax25/af_ax25.c in the Linux kernel did not initialize a certain structure, which allowed local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure. CVE-2010-3876: net/packet/af_packet.c in the Linux kernel did not properly initialize certain structure members, which allowed local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_RAW capability to read copies of the applicable structures. CVE-2010-3877: The get_name function in net/tipc/socket.c in the Linux kernel did not initialize a certain structure, which allowed local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure. CVE-2010-3705: The sctp_auth_asoc_get_hmac function in net/sctp/auth.c in the Linux kernel did not properly validate the hmac_ids array of an SCTP peer, which allowed remote attackers to cause a denial of service (memory corruption and panic) via a crafted value in the last element of this array. CVE-2011-0711: A stack memory information leak in the xfs FSGEOMETRY_V1 ioctl was fixed. CVE-2011-0712: Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel might have allowed attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to (1) the snd_usb_caiaq_audio_init function in sound/usb/caiaq/audio.c and (2) the snd_usb_caiaq_midi_init function in sound/usb/caiaq/midi.c. CVE-2011-0710: The task_show_regs function in arch/s390/kernel/traps.c in the Linux kernel on the s390 platform allowed local users to obtain the values of the registers of an arbitrary process by reading a status file under /proc/. CVE-2010-2943: The xfs implementation in the Linux kernel did not look up inode allocation btrees before reading inode buffers, which allowed remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle. CVE-2010-4075: The uart_get_count function in drivers/serial/serial_core.c in the Linux kernel did not properly initialize a certain structure member, which allowed local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call. CVE-2010-4076: The rs_ioctl function in drivers/char/amiserial.c in the Linux kernel did not properly initialize a certain structure member, which allowed local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call. CVE-2010-4077: The ntty_ioctl_tiocgicount function in drivers/char/nozomi.c in the Linux kernel did not properly initialize a certain structure member, which allowed local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call. CVE-2010-4243: fs/exec.c in the Linux kernel did not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and (2) environment, which allows local users to cause a denial of service (memory consumption) via a crafted exec system call, aka an OOM dodging issue, a related issue to CVE-2010-3858. CVE-2010-4668: The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel allowed local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device, related to an unaligned map. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4163. CVE-2010-4529: Integer underflow in the irda_getsockopt function in net/irda/af_irda.c in the Linux kernel on platforms other than x86 allowed local users to obtain potentially sensitive information from kernel heap memory via an IRLMP_ENUMDEVICES getsockopt call. CVE-2010-4342: The aun_incoming function in net/econet/af_econet.c in the Linux kernel, when Econet is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending an Acorn Universal Networking (AUN) packet over UDP. CVE-2010-3699: The backend driver in Xen 3.x allowed guest OS users to cause a denial of service via a kernel thread leak, which prevented the device and guest OS from being shut down or create a zombie domain, causing a hang in zenwatch, or preventing unspecified xm commands from working properly, related to (1) netback, (2) blkback, or (3) blktap. CVE-2010-4346: The install_special_mapping function in mm/mmap.c in the Linux kernel did not make an expected security_file_mmap function call, which allows local users to bypass intended mmap_min_addr restrictions and possibly conduct NULL pointer dereference attacks via a crafted assembly-language application. CVE-2010-4650: Fixed a verify_ioctl overflow in "cuse" in the fuse filesystem. The code should only be called by root users though. CVE-2010-4526: Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in the Linux kernel allowed remote attackers to cause a denial of service (panic) via an ICMP unreachable message to a socket that is already locked by a user, which causes the socket to be freed and triggers list corruption, related to the sctp_wait_for_connect function. CVE-2010-4527: The load_mixer_volumes function in sound/oss/soundcard.c in the OSS sound subsystem in the Linux kernel incorrectly expected that a certain name field ends with a '0' character, which allowed local users to conduct buffer overflow attacks and gain privileges, or possibly obtain sensitive information from kernel memory, via a SOUND_MIXER_SETLEVELS ioctl call. CVE-2011-0006: Fixed a LSM bug in IMA (Integrity Measuring Architecture). IMA is not enabled in SUSE kernels, so we were not affected. Special Instructions and Notes: Please reboot the system after installing this update. Package List: - SLE 11 SERVER Unsupported Extras (i586 ia64 ppc64 s390x x86_64): kernel-default-extra-2.6.32.29-0.3.1 - SLE 11 SERVER Unsupported Extras (i586 x86_64): kernel-xen-extra-2.6.32.29-0.3.1 - SLE 11 SERVER Unsupported Extras (ppc64): kernel-ppc64-extra-2.6.32.29-0.3.1 - SLE 11 SERVER Unsupported Extras (i586): kernel-pae-extra-2.6.32.29-0.3.1 References: http://support.novell.com/security/cve/CVE-2010-2943.html http://support.novell.com/security/cve/CVE-2010-3699.html http://support.novell.com/security/cve/CVE-2010-3705.html http://support.novell.com/security/cve/CVE-2010-3858.html http://support.novell.com/security/cve/CVE-2010-3875.html http://support.novell.com/security/cve/CVE-2010-3876.html http://support.novell.com/security/cve/CVE-2010-3877.html http://support.novell.com/security/cve/CVE-2010-4075.html http://support.novell.com/security/cve/CVE-2010-4076.html http://support.novell.com/security/cve/CVE-2010-4077.html http://support.novell.com/security/cve/CVE-2010-4163.html http://support.novell.com/security/cve/CVE-2010-4243.html http://support.novell.com/security/cve/CVE-2010-4342.html http://support.novell.com/security/cve/CVE-2010-4346.html http://support.novell.com/security/cve/CVE-2010-4526.html http://support.novell.com/security/cve/CVE-2010-4527.html http://support.novell.com/security/cve/CVE-2010-4529.html http://support.novell.com/security/cve/CVE-2010-4650.html http://support.novell.com/security/cve/CVE-2010-4668.html http://support.novell.com/security/cve/CVE-2011-0006.html http://support.novell.com/security/cve/CVE-2011-0710.html http://support.novell.com/security/cve/CVE-2011-0711.html http://support.novell.com/security/cve/CVE-2011-0712.html https://bugzilla.novell.com/466279 https://bugzilla.novell.com/552250 https://bugzilla.novell.com/564423 https://bugzilla.novell.com/602969 https://bugzilla.novell.com/620929 https://bugzilla.novell.com/622868 https://bugzilla.novell.com/623393 https://bugzilla.novell.com/625965 https://bugzilla.novell.com/629170 https://bugzilla.novell.com/630970 https://bugzilla.novell.com/632317 https://bugzilla.novell.com/633026 https://bugzilla.novell.com/636435 https://bugzilla.novell.com/638258 https://bugzilla.novell.com/640850 https://bugzilla.novell.com/642309 https://bugzilla.novell.com/643266 https://bugzilla.novell.com/643513 https://bugzilla.novell.com/648647 https://bugzilla.novell.com/648701 https://bugzilla.novell.com/648916 https://bugzilla.novell.com/649473 https://bugzilla.novell.com/650067 https://bugzilla.novell.com/650366 https://bugzilla.novell.com/650748 https://bugzilla.novell.com/651152 https://bugzilla.novell.com/652391 https://bugzilla.novell.com/655220 https://bugzilla.novell.com/655278 https://bugzilla.novell.com/655964 https://bugzilla.novell.com/657248 https://bugzilla.novell.com/657763 https://bugzilla.novell.com/658037 https://bugzilla.novell.com/658254 https://bugzilla.novell.com/658337 https://bugzilla.novell.com/658353 https://bugzilla.novell.com/658461 https://bugzilla.novell.com/658551 https://bugzilla.novell.com/658720 https://bugzilla.novell.com/659101 https://bugzilla.novell.com/659394 https://bugzilla.novell.com/659419 https://bugzilla.novell.com/660546 https://bugzilla.novell.com/661605 https://bugzilla.novell.com/661945 https://bugzilla.novell.com/662031 https://bugzilla.novell.com/662192 https://bugzilla.novell.com/662202 https://bugzilla.novell.com/662212 https://bugzilla.novell.com/662335 https://bugzilla.novell.com/662340 https://bugzilla.novell.com/662360 https://bugzilla.novell.com/662673 https://bugzilla.novell.com/662722 https://bugzilla.novell.com/662800 https://bugzilla.novell.com/662931 https://bugzilla.novell.com/662945 https://bugzilla.novell.com/663537 https://bugzilla.novell.com/663582 https://bugzilla.novell.com/663706 https://bugzilla.novell.com/664149 https://bugzilla.novell.com/664463 https://bugzilla.novell.com/665480 https://bugzilla.novell.com/665499 https://bugzilla.novell.com/665524 https://bugzilla.novell.com/665663 https://bugzilla.novell.com/666012 https://bugzilla.novell.com/666893 https://bugzilla.novell.com/668545 https://bugzilla.novell.com/668633 https://bugzilla.novell.com/668929 https://bugzilla.novell.com/670129 https://bugzilla.novell.com/670577 https://bugzilla.novell.com/670864 https://bugzilla.novell.com/671256 https://bugzilla.novell.com/671274 https://bugzilla.novell.com/671483 https://bugzilla.novell.com/672292 https://bugzilla.novell.com/672492 https://bugzilla.novell.com/672499 https://bugzilla.novell.com/672524 https://bugzilla.novell.com/674735

1 0

openSUSE-SU-2011:0156-1 (critical): acroread security update
by opensuse-security＠opensuse.org 05 Mar '11

05 Mar '11

openSUSE Security Update: acroread security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0156-1 Rating: critical References: #669550 Cross-References: CVE-2010-4091 CVE-2011-0558 CVE-2011-0559 CVE-2011-0560 CVE-2011-0561 CVE-2011-0562 CVE-2011-0563 CVE-2011-0565 CVE-2011-0566 CVE-2011-0567 CVE-2011-0570 CVE-2011-0571 CVE-2011-0572 CVE-2011-0573 CVE-2011-0574 CVE-2011-0575 CVE-2011-0577 CVE-2011-0578 CVE-2011-0585 CVE-2011-0586 CVE-2011-0587 CVE-2011-0588 CVE-2011-0589 CVE-2011-0590 CVE-2011-0591 CVE-2011-0592 CVE-2011-0593 CVE-2011-0594 CVE-2011-0595 CVE-2011-0596 CVE-2011-0598 CVE-2011-0599 CVE-2011-0600 CVE-2011-0602 CVE-2011-0603 CVE-2011-0604 CVE-2011-0606 CVE-2011-0607 CVE-2011-0608 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes 39 vulnerabilities is now available. It includes one version update. Description: Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. acroread was updated to version 9.4.2 to address the issues. (CVE-2010-4091, CVE-2011-0562, CVE-2011-0563, CVE-2011-0565, CVE-2011-0566, CVE-2011-0567, CVE-2011-0570, CVE-2011-0585, CVE-2011-0586, CVE-2011-0587, CVE-2011-0588, CVE-2011-0589, CVE-2011-0590, CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, CVE-2011-0594, CVE-2011-0595, CVE-2011-0596, CVE-2011-0598, CVE-2011-0599, CVE-2011-0600, CVE-2011-0602, CVE-2011-0603, CVE-2011-0604, CVE-2011-0606, CVE-2011-0558, CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0575, CVE-2011-0577, CVE-2011-0578, CVE-2011-0607, CVE-2011-0608) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch acroread-4078 - openSUSE 11.2: zypper in -t patch acroread-4078 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586) [New Version: 9.4.2]: acroread-9.4.2-0.2.1 - openSUSE 11.2 (noarch) [New Version: 9.4.2]: acroread-cmaps-9.4.2-0.2.1 acroread-fonts-ja-9.4.2-0.2.1 acroread-fonts-ko-9.4.2-0.2.1 acroread-fonts-zh_CN-9.4.2-0.2.1 acroread-fonts-zh_TW-9.4.2-0.2.1 - openSUSE 11.2 (i586) [New Version: 9.4.2]: acroread-9.4.2-0.2.1 References: http://support.novell.com/security/cve/CVE-2010-4091.html http://support.novell.com/security/cve/CVE-2011-0558.html http://support.novell.com/security/cve/CVE-2011-0559.html http://support.novell.com/security/cve/CVE-2011-0560.html http://support.novell.com/security/cve/CVE-2011-0561.html http://support.novell.com/security/cve/CVE-2011-0562.html http://support.novell.com/security/cve/CVE-2011-0563.html http://support.novell.com/security/cve/CVE-2011-0565.html http://support.novell.com/security/cve/CVE-2011-0566.html http://support.novell.com/security/cve/CVE-2011-0567.html http://support.novell.com/security/cve/CVE-2011-0570.html http://support.novell.com/security/cve/CVE-2011-0571.html http://support.novell.com/security/cve/CVE-2011-0572.html http://support.novell.com/security/cve/CVE-2011-0573.html http://support.novell.com/security/cve/CVE-2011-0574.html http://support.novell.com/security/cve/CVE-2011-0575.html http://support.novell.com/security/cve/CVE-2011-0577.html http://support.novell.com/security/cve/CVE-2011-0578.html http://support.novell.com/security/cve/CVE-2011-0585.html http://support.novell.com/security/cve/CVE-2011-0586.html http://support.novell.com/security/cve/CVE-2011-0587.html http://support.novell.com/security/cve/CVE-2011-0588.html http://support.novell.com/security/cve/CVE-2011-0589.html http://support.novell.com/security/cve/CVE-2011-0590.html http://support.novell.com/security/cve/CVE-2011-0591.html http://support.novell.com/security/cve/CVE-2011-0592.html http://support.novell.com/security/cve/CVE-2011-0593.html http://support.novell.com/security/cve/CVE-2011-0594.html http://support.novell.com/security/cve/CVE-2011-0595.html http://support.novell.com/security/cve/CVE-2011-0596.html http://support.novell.com/security/cve/CVE-2011-0598.html http://support.novell.com/security/cve/CVE-2011-0599.html http://support.novell.com/security/cve/CVE-2011-0600.html http://support.novell.com/security/cve/CVE-2011-0602.html http://support.novell.com/security/cve/CVE-2011-0603.html http://support.novell.com/security/cve/CVE-2011-0604.html http://support.novell.com/security/cve/CVE-2011-0606.html http://support.novell.com/security/cve/CVE-2011-0607.html http://support.novell.com/security/cve/CVE-2011-0608.html https://bugzilla.novell.com/669550

1 0

openSUSE-SU-2011:0155-1 (moderate): java-1_6_0-openjdk: security update
by opensuse-security＠opensuse.org 05 Mar '11

05 Mar '11

openSUSE Security Update: java-1_6_0-openjdk: security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0155-1 Rating: moderate References: #671714 Cross-References: CVE-2010-4448 CVE-2010-4450 CVE-2010-4465 CVE-2010-4469 CVE-2010-4470 CVE-2010-4471 CVE-2010-4472 CVE-2011-0706 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: Multiple vulnerabilities were fixed in java-1_6_0-openjdk: - CVE-2010-4448: CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N): DNS cache poisoning by untrusted applets - CVE-2010-4450: CVSS v2 Base Score: 3.7 (AV:L/AC:H/Au:N/C:P/I:P/A:P): Launcher incorrect processing of empty library path entries - CVE-2010-4465: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P): Swing timer-based security manager bypass - CVE-2010-4469: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P): Hotspot backward jsr heap corruption - CVE-2010-4470: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P): JAXP untrusted component state manipulation - CVE-2010-4471: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N): Java2D font-related system property leak - CVE-2010-4472: CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:P/I:N/A:N): Untrusted code allowed to replace DSIG/C14N implementation - CVE-2011-0706: CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P): Permissions, Privileges, and Access Control (CWE-264) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch java-1_6_0-openjdk-4038 - openSUSE 11.2: zypper in -t patch java-1_6_0-openjdk-4038 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b20.1.9.7-1.2.1 java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.7-1.2.1 java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.7-1.2.1 - openSUSE 11.3 (noarch): java-1_6_0-openjdk-demo-1.6.0.0_b20.1.9.7-1.2.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b20.1.9.7-1.2.1 java-1_6_0-openjdk-src-1.6.0.0_b20.1.9.7-1.2.1 - openSUSE 11.2 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b20.1.9.7-1.2.2 java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.7-1.2.2 java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.7-1.2.2 - openSUSE 11.2 (noarch): java-1_6_0-openjdk-demo-1.6.0.0_b20.1.9.7-1.2.2 java-1_6_0-openjdk-javadoc-1.6.0.0_b20.1.9.7-1.2.2 java-1_6_0-openjdk-src-1.6.0.0_b20.1.9.7-1.2.2 References: http://support.novell.com/security/cve/CVE-2010-4448.html http://support.novell.com/security/cve/CVE-2010-4450.html http://support.novell.com/security/cve/CVE-2010-4465.html http://support.novell.com/security/cve/CVE-2010-4469.html http://support.novell.com/security/cve/CVE-2010-4470.html http://support.novell.com/security/cve/CVE-2010-4471.html http://support.novell.com/security/cve/CVE-2010-4472.html http://support.novell.com/security/cve/CVE-2011-0706.html https://bugzilla.novell.com/671714

1 0

openSUSE-SU-2011:0149-1 (important): avahi: security update
by opensuse-security＠opensuse.org 02 Mar '11

02 Mar '11

openSUSE Security Update: avahi: security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0149-1 Rating: important References: #671797 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update fixes a remote denial of service in the avahi daemon that can be triggered remotely via a null UDP packet. CVE-2011-1002: CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P): Resource Management Errors (CWE-399) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch avahi-4025 - openSUSE 11.2: zypper in -t patch avahi-4025 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): avahi-0.6.25-15.3.1 avahi-compat-howl-devel-0.6.25-15.3.1 avahi-compat-mDNSResponder-devel-0.6.25-15.3.1 avahi-utils-0.6.25-15.3.1 libavahi-client3-0.6.25-15.3.1 libavahi-common3-0.6.25-15.3.1 libavahi-core6-0.6.25-15.3.1 libavahi-devel-0.6.25-15.3.1 libdns_sd-0.6.25-15.3.1 libhowl0-0.6.25-15.3.1 python-avahi-0.6.25-15.3.1 - openSUSE 11.3 (x86_64): libavahi-client3-32bit-0.6.25-15.3.1 libavahi-common3-32bit-0.6.25-15.3.1 libdns_sd-32bit-0.6.25-15.3.1 - openSUSE 11.3 (noarch): avahi-lang-0.6.25-15.3.1 - openSUSE 11.2 (i586 x86_64): avahi-0.6.25-4.7.1 avahi-compat-howl-devel-0.6.25-4.7.1 avahi-compat-mDNSResponder-devel-0.6.25-4.7.1 avahi-utils-0.6.25-4.7.1 libavahi-client3-0.6.25-4.7.1 libavahi-common3-0.6.25-4.7.1 libavahi-core6-0.6.25-4.7.1 libavahi-devel-0.6.25-4.7.1 libdns_sd-0.6.25-4.7.1 libhowl0-0.6.25-4.7.1 python-avahi-0.6.25-4.7.1 - openSUSE 11.2 (x86_64): libavahi-client3-32bit-0.6.25-4.7.1 libavahi-common3-32bit-0.6.25-4.7.1 libdns_sd-32bit-0.6.25-4.7.1 - openSUSE 11.2 (noarch): avahi-lang-0.6.25-4.7.1 References: https://bugzilla.novell.com/671797

1 0

openSUSE-SU-2011:0146-1 (important): tomcat6: security update
by opensuse-security＠opensuse.org 02 Mar '11

02 Mar '11

openSUSE Security Update: tomcat6: security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0146-1 Rating: important References: #669897 #669929 #669930 Cross-References: CVE-2010-3718 CVE-2011-0013 CVE-2011-0534 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This tomcat6 update fixes: - CVE-2010-3718: CVSS v2 Base Score: 4.0 (AV:N/AC:H/Au:N/C:P/I:P/A:N): Design Error (CWE-DesignError) - CVE-2011-0013: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N): XSS (CWE-79) - CVE-2011-0534: CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P): Resource Management Errors (CWE-399) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch tomcat6-3945 - openSUSE 11.2: zypper in -t patch tomcat6-3945 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch): tomcat6-6.0.24-5.10.1 tomcat6-admin-webapps-6.0.24-5.10.1 tomcat6-docs-webapp-6.0.24-5.10.1 tomcat6-el-1_0-api-6.0.24-5.10.1 tomcat6-javadoc-6.0.24-5.10.1 tomcat6-jsp-2_1-api-6.0.24-5.10.1 tomcat6-lib-6.0.24-5.10.1 tomcat6-servlet-2_5-api-6.0.24-5.10.1 tomcat6-webapps-6.0.24-5.10.1 - openSUSE 11.2 (noarch): tomcat6-6.0.20-24.33.1 tomcat6-admin-webapps-6.0.20-24.33.1 tomcat6-docs-webapp-6.0.20-24.33.1 tomcat6-javadoc-6.0.20-24.33.1 tomcat6-jsp-2_1-api-6.0.20-24.33.1 tomcat6-lib-6.0.20-24.33.1 tomcat6-servlet-2_5-api-6.0.20-24.33.1 tomcat6-webapps-6.0.20-24.33.1 References: http://support.novell.com/security/cve/CVE-2010-3718.html http://support.novell.com/security/cve/CVE-2011-0013.html http://support.novell.com/security/cve/CVE-2011-0534.html https://bugzilla.novell.com/669897 https://bugzilla.novell.com/669929 https://bugzilla.novell.com/669930

1 0