April 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2011:0397-1 (low): pam_ssh: This update fixes a double-free
by maintenance＠opensuse.org 27 Apr '11

27 Apr '11

openSUSE Recommended Update: pam_ssh: This update fixes a double-free ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0397-1 Rating: low References: #688120 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a double-free in pam_ssh. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch pam_ssh-4422 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): pam_ssh-1.97-11.12.1 - openSUSE 11.4 (x86_64): pam_ssh-32bit-1.97-11.12.1 References: https://bugzilla.novell.com/688120

1 0

openSUSE-RU-2011:0396-1 (moderate): xorg-x11-driver-video: Fixed various 3D issues with Intel graphics drivers.
by maintenance＠opensuse.org 27 Apr '11

27 Apr '11

openSUSE Recommended Update: xorg-x11-driver-video: Fixed various 3D issues with Intel graphics drivers. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0396-1 Rating: moderate References: #666704 #680921 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: - #666704: intel: KDE effects make text editing worse (was: emacs cursor does not work right with desktop effects enabled) Enabling compositing on intel graphics chips causes problems for emacs and other various programs because window damage is not correctly restored. This results in a missing cursor for emacs and apparent random greeking of text in other applications - bnc #680921: fixes partial screen distortion on Sandybridge visible in KDE (bfo#35808) Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch xorg-x11-driver-video-4408 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): xorg-x11-driver-video-7.6-53.56.1 - openSUSE 11.4 (x86_64): xorg-x11-driver-video-32bit-7.6-53.56.1 References: https://bugzilla.novell.com/666704 https://bugzilla.novell.com/680921

1 0

openSUSE-RU-2011:0395-1 (low): mutt: This update prevents mutt to break with mbox files > 2 GB
by maintenance＠opensuse.org 27 Apr '11

27 Apr '11

openSUSE Recommended Update: mutt: This update prevents mutt to break with mbox files > 2 GB ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0395-1 Rating: low References: #676388 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a crash that occurs when the mbox file is bigger than 2GB on a 32bit architecture. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch mutt-4421 - openSUSE 11.3: zypper in -t patch mutt-4421 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): mutt-1.5.21-14.15.1 - openSUSE 11.3 (i586 x86_64): mutt-1.5.20-13.3.1 References: https://bugzilla.novell.com/676388

1 0

openSUSE-RU-2011:0393-1 (low): yast2-ldap-client: This updates fixes the sssd support
by maintenance＠opensuse.org 27 Apr '11

27 Apr '11

openSUSE Recommended Update: yast2-ldap-client: This updates fixes the sssd support ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0393-1 Rating: low References: #680184 #680848 #681818 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. It includes one version update. Description: The following bugs are fixed by this update: #680184: yast2 ldap does not save sssd settings #680848: command line support for sssd #681818: ldap entries not removed from nsswitch when sssd turned on Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch yast2-ldap-client-4424 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch) [New Version: 2.20.14.1]: yast2-ldap-client-2.20.14.1-0.3.1 References: https://bugzilla.novell.com/680184 https://bugzilla.novell.com/680848 https://bugzilla.novell.com/681818

1 0

openSUSE-RU-2011:0392-1 (low): yast2-kerberos-server: A TLS error occurs if LDAP based Kerberos is used. Fixed by this update.
by maintenance＠opensuse.org 27 Apr '11

27 Apr '11

openSUSE Recommended Update: yast2-kerberos-server: A TLS error occurs if LDAP based Kerberos is used. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0392-1 Rating: low References: #551146 #619549 #684475 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update fix the following issue: * LDAP based Kerberos Server configuration fails with TLS error * Use input field widget for date and time if specialized widgets do not exist. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch yast2-kerberos-server-4398 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): yast2-kerberos-server-2.20.0-0.3.1 References: https://bugzilla.novell.com/551146 https://bugzilla.novell.com/619549 https://bugzilla.novell.com/684475

1 0

openSUSE-SU-2011:0389-1 (moderate): postfix security update
by opensuse-security＠opensuse.org 21 Apr '11

21 Apr '11

openSUSE Security Update: postfix security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0389-1 Rating: moderate References: #677792 Cross-References: CVE-2011-0411 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: postfix did not clear the receive buffer after the STARTTLS command. A man-in-the middle could therefore inject commands in the unencrypted stream that get interpreted in the encrypted phase after STARTTLS (CVE-2011-0411). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch postfix-4251 - openSUSE 11.3: zypper in -t patch postfix-4251 - openSUSE 11.2: zypper in -t patch postfix-4251 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): postfix-2.7.2-13.14.1 postfix-devel-2.7.2-13.14.1 postfix-mysql-2.7.2-13.14.1 postfix-postgresql-2.7.2-13.14.1 - openSUSE 11.4 (noarch): postfix-doc-2.7.2-13.14.1 - openSUSE 11.3 (i586 x86_64): postfix-2.7.1-2.4.1 postfix-devel-2.7.1-2.4.1 postfix-mysql-2.7.1-2.4.1 postfix-postgresql-2.7.1-2.4.1 - openSUSE 11.3 (noarch): postfix-doc-2.7.1-2.4.1 - openSUSE 11.2 (i586 x86_64): postfix-2.6.1-2.8.1 postfix-devel-2.6.1-2.8.1 postfix-doc-2.6.1-2.8.1 postfix-mysql-2.6.1-2.8.1 postfix-postgresql-2.6.1-2.8.1 References: http://support.novell.com/security/cve/CVE-2011-0411.html https://bugzilla.novell.com/677792

1 0

openSUSE-SU-2011:0385-1 (important): dhcpcd security update
by opensuse-security＠opensuse.org 21 Apr '11

21 Apr '11

openSUSE Security Update: dhcpcd security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0385-1 Rating: important References: #675052 #687850 Cross-References: CVE-2011-0996 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update fixes the following security issue: A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server (CVE-2011-0996). Note this update is actually just a re-release of the previous one. The security fix made dhcpcd crash if the DHCP server sent a SIP option that was not decodable. This update also allows spaces in the domain name option again as some DHCP servers abuse the option as DNS search list. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch dhcpcd-4412 - openSUSE 11.3: zypper in -t patch dhcpcd-4411 - openSUSE 11.2: zypper in -t patch dhcpcd-4410 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): dhcpcd-3.2.3-66.69.1 - openSUSE 11.3 (i586 x86_64): dhcpcd-3.2.3-61.66.1 - openSUSE 11.2 (i586 x86_64): dhcpcd-3.2.3-47.66.1 References: http://support.novell.com/security/cve/CVE-2011-0996.html https://bugzilla.novell.com/675052 https://bugzilla.novell.com/687850

1 0

openSUSE-SU-2011:0373-1 (critical): flash-player security update
by opensuse-security＠opensuse.org 18 Apr '11

18 Apr '11

openSUSE Security Update: flash-player security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0373-1 Rating: critical References: #686818 Cross-References: CVE-2011-0611 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: Specially crafted Flash files could be exploited to execute arbitrary code (CVE-2011-0611). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch flash-player-4399 - openSUSE 11.3: zypper in -t patch flash-player-4399 - openSUSE 11.2: zypper in -t patch flash-player-4399 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586) [New Version: 10.2.159.1]: flash-player-10.2.159.1-0.2.1 - openSUSE 11.3 (i586) [New Version: 10.2.159.1]: flash-player-10.2.159.1-0.2.1 - openSUSE 11.2 (i586) [New Version: 10.2.159.1]: flash-player-10.2.159.1-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-0611.html https://bugzilla.novell.com/686818

1 0

openSUSE-RU-2011:0370-1 (low): alsa: This update fixes an incorrect path
by maintenance＠opensuse.org 18 Apr '11

18 Apr '11

openSUSE Recommended Update: alsa: This update fixes an incorrect path ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0370-1 Rating: low References: #682222 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a typo in the previous update; the correct path is /var/lib/alsa/asound.state Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch alsa-4323 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): alsa-1.0.24.1-4.7.1 alsa-devel-1.0.24.1-4.7.1 libasound2-1.0.24.1-4.7.1 - openSUSE 11.4 (x86_64): libasound2-32bit-1.0.24.1-4.7.1 - openSUSE 11.4 (noarch): alsa-docs-1.0.24.1-4.7.1 References: https://bugzilla.novell.com/682222

1 0

openSUSE-RU-2011:0368-1 (low): imagewriter: The version on openSUSE 11.4 still requires HAL which was replaced by udisks. Fixed by this update
by maintenance＠opensuse.org 18 Apr '11

18 Apr '11

openSUSE Recommended Update: imagewriter: The version on openSUSE 11.4 still requires HAL which was replaced by udisks. Fixed by this update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0368-1 Rating: low References: #679099 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Imagewriter still requires HAL. This update removes the dependency on HAL for openSUSE 11.4 and later builds and uses udisks instead. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch imagewriter-4325 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): imagewriter-1.9-2.3.1 References: https://bugzilla.novell.com/679099

1 0