March 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-403 Forbidden-1 (critical): timezone: Update to 2011d
by maintenance＠opensuse.org 25 Mar '11

25 Mar '11

openSUSE Recommended Update: timezone: Update to 2011d ______________________________________________________________________________ Announcement ID: openSUSE-RU-403 Forbidden-1 Rating: critical References: #682451 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update provides latest timezone information, taken from Olson database 2011d: * Pacific/Apia: Move DST from April 3rd to April 2nd * Europe/Istanbul: Move DST from March 27th to 28th * America/Cuba: DST starts on March 20th * Samoa DST will occur a day earlier, on April 11th, 2011. * America/Cuba Daylight Saving Time will occur on March 20th, 2011. * Europe/Istanbul Daylight Saving Time will occur on March 28th, 2011,because of a nationwide exam scheduled to take place on Sunday, March 27. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch timezone-2011d-4222 - openSUSE 11.3: zypper in -t patch timezone-2011d-4222 - openSUSE 11.2: zypper in -t patch timezone-2011d-4222 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2011d]: timezone-2011d-0.2.1 - openSUSE 11.4 (noarch) [New Version: 2011d]: timezone-java-2011d-0.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 2011d]: timezone-2011d-0.2.1 - openSUSE 11.3 (noarch) [New Version: 2011d]: timezone-java-2011d-0.2.1 - openSUSE 11.2 (i586 x86_64) [New Version: 2011d]: timezone-2011d-0.2.1 - openSUSE 11.2 (noarch) [New Version: 2011d]: timezone-java-2011d-0.2.1 References: https://bugzilla.novell.com/682451

1 0

openSUSE-RU-2011:0223-1 (moderate): xen
by maintenance＠opensuse.org 24 Mar '11

24 Mar '11

openSUSE Recommended Update: xen ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0223-1 Rating: moderate References: #613584 #613957 #625333 #631680 #633573 #641419 #651822 #654543 #654591 #655438 #656369 #657272 #657349 #658163 #658569 #658704 #659070 #659431 #659466 #659665 #659872 #661298 #661829 #661931 #665446 #665541 #665767 #668621 #677557 #677856 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has 30 recommended fixes can now be installed. It includes one version update. Description: Collective update for XEN Xen - 668600: libvirt massive filedescriptor leak after latest XEN update (same as 661931) - 658569: SLES 11 SP1 dom0 iptables gives lots of physdev messages - 633573: System fail to boot after running several warm reboot tests - 658704: SLES11 SP1 Xen boot panic in x2apic mode - 641419: L3: Xen: qemu-dm reports "xc_map_foreign_batch: mmap failed: - 661931: Fix fd leak in xenstore library (same as 668600) - 656369: g5plus: sles11sp1 xen crash with 8 socket x2apic preenabled - 658163: maintenance release - Nehalem system cannot boot into xen with maintenance release installed - 658704: SLES11 SP1 Xen boot panic in x2apic mode - 661298: maintenance release candidate - Windows VMs reboot too fast, triggering failsafe - 659070: Fail to input '|' in en-us keyboard - 659466: XEN drbd block device type not working on SLES 11 SP1 - 654543: PV guest won't unplug the IDE disk created by qemu-dm - 651822: make sure we only apply the snapshot once, and the changes made after snapshot-apply hit the disk. - 613584: If available, use kpartx '-f' option in domUloader - 659872: xend: Do no release domain lock on checkpoint operation. virt-manager - 657272: virt-manager creates default 'dir' storage pool in /var/lib/libvirt/images on xen host libvirt - 659665: DomU hangs if vcpus>1 and pci passthrough active - 659431: Failed to start KVM VM vm-install - 661829: vm-install ignores inst source, description and other in vm-settings xml file - 657349: Info file for linuxrc is not picked up by Xen - 613957: Fedora 13 PV DomU can't be installed - 665767: L3:kvm vminstall generates bad xml - 665446: Attempt to start installation of new KVM virt - 665541: vm-install fails tu create a virtual machine (kvm) - 677856: Fix failure due to missing /var/run/vm-install directory - 677557: Fix install openSUSE 11.4 as a guest on XEN - 631680: Fix KVM install of openSUSE 11.3 on KVM failing on first reboot - 668621: Fix creation of a new VM in virt-manager Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch xen-201103-4122 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 0.4.29]: libvirt-0.8.1-4.4.7 libvirt-client-0.8.1-4.4.7 libvirt-devel-0.8.1-4.4.7 libvirt-doc-0.8.1-4.4.7 libvirt-python-0.8.1-4.4.7 virt-manager-0.8.4-5.3.1 vm-install-0.4.29-0.2.1 xen-4.0.1_21326_06-0.3.1 xen-devel-4.0.1_21326_06-0.3.1 xen-doc-html-4.0.1_21326_06-0.3.1 xen-doc-pdf-4.0.1_21326_06-0.3.1 xen-kmp-default-4.0.1_21326_06_k2.6.34.7_0.7-0.3.1 xen-kmp-desktop-4.0.1_21326_06_k2.6.34.7_0.7-0.3.1 xen-libs-4.0.1_21326_06-0.3.1 xen-tools-4.0.1_21326_06-0.3.1 xen-tools-domU-4.0.1_21326_06-0.3.1 - openSUSE 11.3 (i586): xen-kmp-pae-4.0.1_21326_06_k2.6.34.7_0.7-0.3.1 References: https://bugzilla.novell.com/613584 https://bugzilla.novell.com/613957 https://bugzilla.novell.com/625333 https://bugzilla.novell.com/631680 https://bugzilla.novell.com/633573 https://bugzilla.novell.com/641419 https://bugzilla.novell.com/651822 https://bugzilla.novell.com/654543 https://bugzilla.novell.com/654591 https://bugzilla.novell.com/655438 https://bugzilla.novell.com/656369 https://bugzilla.novell.com/657272 https://bugzilla.novell.com/657349 https://bugzilla.novell.com/658163 https://bugzilla.novell.com/658569 https://bugzilla.novell.com/658704 https://bugzilla.novell.com/659070 https://bugzilla.novell.com/659431 https://bugzilla.novell.com/659466 https://bugzilla.novell.com/659665 https://bugzilla.novell.com/659872 https://bugzilla.novell.com/661298 https://bugzilla.novell.com/661829 https://bugzilla.novell.com/661931 https://bugzilla.novell.com/665446 https://bugzilla.novell.com/665541 https://bugzilla.novell.com/665767 https://bugzilla.novell.com/668621 https://bugzilla.novell.com/677557 https://bugzilla.novell.com/677856

1 0

openSUSE-SU-2011:0221-1 (important): pango security update
by opensuse-security＠opensuse.org 24 Mar '11

24 Mar '11

openSUSE Security Update: pango security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0221-1 Rating: important References: #666101 #672502 Cross-References: CVE-2011-0020 CVE-2011-0064 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: Specially crafted font files could cause a heap corruption in applications linked against pango (CVE-2011-0064, CVE-2011-0020). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libpango-1_0-0-4076 - openSUSE 11.2: zypper in -t patch libpango-1_0-0-4076 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): pango-1.28.0-3.3.1 pango-devel-1.28.0-3.3.1 pango-module-thai-lang-1.28.0-3.3.1 - openSUSE 11.3 (x86_64): pango-32bit-1.28.0-3.3.1 - openSUSE 11.2 (i586 x86_64) [New Version: 1.26.2]: pango-1.26.2-1.3.1 pango-devel-1.26.2-1.3.1 pango-module-thai-lang-1.26.2-1.3.1 - openSUSE 11.2 (x86_64) [New Version: 1.26.2]: pango-32bit-1.26.2-1.3.1 References: http://support.novell.com/security/cve/CVE-2011-0020.html http://support.novell.com/security/cve/CVE-2011-0064.html https://bugzilla.novell.com/666101 https://bugzilla.novell.com/672502

1 0

openSUSE-RU-2011:0220-1 (low): mingett: This update fixes a logically faulty printing.
by maintenance＠opensuse.org 23 Mar '11

23 Mar '11

openSUSE Recommended Update: mingett: This update fixes a logically faulty printing. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0220-1 Rating: low References: #679287 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: mingetty prints "Hint:". This is logically faulty. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch mingetty-4165 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): mingetty-1.0.8s-6.3.1 References: https://bugzilla.novell.com/679287

1 0

openSUSE-RU-2011:0217-1 (low): MozillaFirefox: Update to Firefox 4 final release
by maintenance＠opensuse.org 23 Mar '11

23 Mar '11

openSUSE Recommended Update: MozillaFirefox: Update to Firefox 4 final release ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0217-1 Rating: low References: #681237 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes two new package versions. Description: Mozilla Firefox is updated to the final 4.0 release by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaFirefox-4195 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.0.0 and 4.0.0]: MozillaFirefox-4.0.0-0.3.1 MozillaFirefox-branding-upstream-4.0.0-0.3.1 MozillaFirefox-devel-4.0.0-0.3.1 MozillaFirefox-translations-common-4.0.0-0.3.1 MozillaFirefox-translations-other-4.0.0-0.3.1 mozilla-js20-2.0.0-0.3.1 mozilla-xulrunner20-2.0.0-0.3.1 mozilla-xulrunner20-buildsymbols-2.0.0-0.3.1 mozilla-xulrunner20-devel-2.0.0-0.3.1 mozilla-xulrunner20-gnome-2.0.0-0.3.1 mozilla-xulrunner20-translations-common-2.0.0-0.3.1 mozilla-xulrunner20-translations-other-2.0.0-0.3.1 - openSUSE 11.4 (x86_64) [New Version: 2.0.0]: mozilla-js20-32bit-2.0.0-0.3.1 mozilla-xulrunner20-32bit-2.0.0-0.3.1 mozilla-xulrunner20-gnome-32bit-2.0.0-0.3.1 mozilla-xulrunner20-translations-common-32bit-2.0.0-0.3.1 mozilla-xulrunner20-translations-other-32bit-2.0.0-0.3.1 References: https://bugzilla.novell.com/681237

1 0

openSUSE-SU-2011:0215-1 (critical): flash-player: Update to 10.2.153.1
by opensuse-security＠opensuse.org 23 Mar '11

23 Mar '11

openSUSE Security Update: flash-player: Update to 10.2.153.1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0215-1 Rating: critical References: #679672 Cross-References: CVE-2011-0609 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: The Adobe Flash Player was updated to the 10.2.153.1, fixing several bugs and one security issue. This vulnerability (CVE-2011-0609) could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being exploited in the wild in targeted attacks via a Flash (.swf) file embedded in a Microsoft Excel (.xls) file delivered as an email attachment. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch flash-player-4187 - openSUSE 11.3: zypper in -t patch flash-player-4187 - openSUSE 11.2: zypper in -t patch flash-player-4187 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586) [New Version: 10.2.153.1]: flash-player-10.2.153.1-0.2.1 - openSUSE 11.3 (i586) [New Version: 10.2.153.1]: flash-player-10.2.153.1-0.2.1 - openSUSE 11.2 (i586) [New Version: 10.2.153.1]: flash-player-10.2.153.1-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-0609.html https://bugzilla.novell.com/679672

1 0

openSUSE-RU-2011:0213-1 (low): permissions: This update sets a setuid bit on VBoxNetDHCP
by maintenance＠opensuse.org 22 Mar '11

22 Mar '11

openSUSE Recommended Update: permissions: This update sets a setuid bit on VBoxNetDHCP ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0213-1 Rating: low References: #669055 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update sets a setuid bit on VBoxNetDHCP in level 'easy'. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch permissions-4166 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2011.03.07.1608]: permissions-2011.03.07.1608-1.3.1 References: https://bugzilla.novell.com/669055

1 0

openSUSE-RU-2011:0212-1 (low): evolution-data-server: This update provides a solution for non-RFC conform working NNTP servers.
by maintenance＠opensuse.org 22 Mar '11

22 Mar '11

openSUSE Recommended Update: evolution-data-server: This update provides a solution for non-RFC conform working NNTP servers. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0212-1 Rating: low References: #678934 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides a solution for non-RFC conform working NNTP servers. After the update, evolution will check the servers capabilities before using OVER command so the connection is no longer reset by the remote server. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch evolution-data-server-4159 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): evolution-data-server-2.32.1-4.3.1 evolution-data-server-devel-2.32.1-4.3.1 evolution-data-server-doc-2.32.1-4.3.1 libcamel-1_2-19-2.32.1-4.3.1 libebackend-1_2-0-2.32.1-4.3.1 libebook-1_2-10-2.32.1-4.3.1 libecal-1_2-8-2.32.1-4.3.1 libedata-book-1_2-8-2.32.1-4.3.1 libedata-cal-1_2-10-2.32.1-4.3.1 libedataserver-1_2-14-2.32.1-4.3.1 libedataserverui-1_2-11-2.32.1-4.3.1 libegroupwise-1_2-13-2.32.1-4.3.1 - openSUSE 11.4 (x86_64): libcamel-1_2-19-32bit-2.32.1-4.3.1 libebackend-1_2-0-32bit-2.32.1-4.3.1 libebook-1_2-10-32bit-2.32.1-4.3.1 libecal-1_2-8-32bit-2.32.1-4.3.1 libedata-book-1_2-8-32bit-2.32.1-4.3.1 libedata-cal-1_2-10-32bit-2.32.1-4.3.1 libedataserver-1_2-14-32bit-2.32.1-4.3.1 libedataserverui-1_2-11-32bit-2.32.1-4.3.1 libegroupwise-1_2-13-32bit-2.32.1-4.3.1 - openSUSE 11.4 (noarch): evolution-data-server-lang-2.32.1-4.3.1 References: https://bugzilla.novell.com/678934

1 0

openSUSE-RU-2011:0211-1 (low): dosfstools: This update fixes a buffer overflow in fsck.vfat
by maintenance＠opensuse.org 22 Mar '11

22 Mar '11

openSUSE Recommended Update: dosfstools: This update fixes a buffer overflow in fsck.vfat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0211-1 Rating: low References: #677236 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following bug: A buffer overflow can happen when creating an entry of vfat filesystem trough alloc_rootdir_entry(). This function is used when fsck.vfat -f is called. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch dosfstools-4158 - openSUSE 11.3: zypper in -t patch dosfstools-4158 - openSUSE 11.2: zypper in -t patch dosfstools-4158 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): dosfstools-3.0.10-12.3.1 - openSUSE 11.3 (i586 x86_64): dosfstools-3.0.9-4.3.1 - openSUSE 11.2 (i586 x86_64): dosfstools-2.11-146.4.1 References: https://bugzilla.novell.com/677236

1 0

openSUSE-RU-2011:0210-1 (low): sysvinit: bugfixes regarding pam_ssh and systemd
by maintenance＠opensuse.org 22 Mar '11

22 Mar '11

openSUSE Recommended Update: sysvinit: bugfixes regarding pam_ssh and systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0210-1 Rating: low References: #664941 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The sysvinit helper binaries were updated to fix two bugs: - #664941: pam_ssh does not add the key to ssh-agent - #672450: sysvinit+systemd: too many repeated messages on ttyS0 console Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch sysvinit-4152 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): sysvinit-2.88-37.43.1 sysvinit-tools-2.88-37.43.1 References: https://bugzilla.novell.com/664941

1 0