April 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2011:0312-1 (low): mailman security update
by opensuse-security＠opensuse.org 07 Apr '11

07 Apr '11

openSUSE Security Update: mailman security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0312-1 Rating: low References: #418589 #637295 #671745 Cross-References: CVE-2010-3089 CVE-2011-0707 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. It includes one version update. Description: mailman was updates to version 2.1.14 to fix several cross-site-scripting (XSS) vulnerabilities (CVE-2011-0707, CVE-2010-3089). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch mailman-4271 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.1.14]: mailman-2.1.14-6.2.1 References: http://support.novell.com/security/cve/CVE-2010-3089.html http://support.novell.com/security/cve/CVE-2011-0707.html https://bugzilla.novell.com/418589 https://bugzilla.novell.com/637295 https://bugzilla.novell.com/671745

1 0

openSUSE-SU-2011:0311-1 (important): libvirt security update
by opensuse-security＠opensuse.org 07 Apr '11

07 Apr '11

openSUSE Security Update: libvirt security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0311-1 Rating: important References: #678406 Cross-References: CVE-2011-1146 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: several API calls did not honor the read-only flag connections. Attackers could exploit that to modify the state of the system or potentially execute code (CVE-2011-1146). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libvirt-4164 - openSUSE 11.3: zypper in -t patch libvirt-4164 - openSUSE 11.2: zypper in -t patch libvirt-4164 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libvirt-0.8.8-0.6.1 libvirt-client-0.8.8-0.6.1 libvirt-devel-0.8.8-0.6.1 libvirt-doc-0.8.8-0.6.1 libvirt-python-0.8.8-0.6.1 - openSUSE 11.3 (i586 x86_64): libvirt-0.8.1-4.6.2 libvirt-client-0.8.1-4.6.2 libvirt-devel-0.8.1-4.6.2 libvirt-doc-0.8.1-4.6.2 libvirt-python-0.8.1-4.6.2 - openSUSE 11.2 (i586 x86_64): libvirt-0.7.2-1.1.5.1 libvirt-devel-0.7.2-1.1.5.1 libvirt-doc-0.7.2-1.1.5.1 libvirt-python-0.7.2-1.1.5.1 References: http://support.novell.com/security/cve/CVE-2011-1146.html https://bugzilla.novell.com/678406

1 0

openSUSE-SU-2011:0303-1 (important): telepathy-gabble: security update
by opensuse-security＠opensuse.org 06 Apr '11

06 Apr '11

openSUSE Security Update: telepathy-gabble: security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0303-1 Rating: important References: #673257 Cross-References: CVE-2011-1000 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: This update of telepathy-gabble is validating the origin of a google:jingleinfo update message now. Not validating the origin could be used to intercept calls. CVE-2011-1000: CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N): Input Validation (CWE-20) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch telepathy-gabble-4009 - openSUSE 11.2: zypper in -t patch telepathy-gabble-4009 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): telepathy-gabble-0.9.11-2.3.1 telepathy-gabble-doc-0.9.11-2.3.1 - openSUSE 11.2 (i586 x86_64) [New Version: 0.8.5]: telepathy-gabble-0.8.5-0.3.1 telepathy-gabble-doc-0.8.5-0.3.1 References: http://support.novell.com/security/cve/CVE-2011-1000.html https://bugzilla.novell.com/673257

1 0

openSUSE-SU-2011:0300-1 (moderate): dbus-1-glibsecurity update
by opensuse-security＠opensuse.org 06 Apr '11

06 Apr '11

openSUSE Security Update: dbus-1-glibsecurity update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0300-1 Rating: moderate References: #628607 Cross-References: CVE-2010-1172 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: dbus-glib allowed local users to write properties that were exported read-only via dbus (CVE-2010-1172). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch dbus-1-glib-4237 - openSUSE 11.2: zypper in -t patch dbus-1-glib-4237 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): dbus-1-glib-0.86-2.3.1 dbus-1-glib-devel-0.86-2.3.1 - openSUSE 11.3 (x86_64): dbus-1-glib-32bit-0.86-2.3.1 - openSUSE 11.3 (noarch): dbus-1-glib-doc-0.86-2.3.1 - openSUSE 11.2 (i586 x86_64): dbus-1-glib-0.80-3.4.1 dbus-1-glib-devel-0.80-3.4.1 dbus-1-glib-doc-0.80-3.4.1 - openSUSE 11.2 (x86_64): dbus-1-glib-32bit-0.80-3.4.1 References: http://support.novell.com/security/cve/CVE-2010-1172.html https://bugzilla.novell.com/628607

1 0

openSUSE-RU-2011:0299-1 (low): cairo: This update solves a rendering issue with proprietary nvidia drivers
by maintenance＠opensuse.org 06 Apr '11

06 Apr '11

openSUSE Recommended Update: cairo: This update solves a rendering issue with proprietary nvidia drivers ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0299-1 Rating: low References: #679039 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The oxygen-gtk theme displayed a white rectangle when used with the nvidia proprietary driver. The issue is fixed by this update Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch cairo-4249 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): cairo-devel-1.10.2-6.11.1 cairo-tools-1.10.2-6.11.1 libcairo-gobject2-1.10.2-6.11.1 libcairo-script-interpreter2-1.10.2-6.11.1 libcairo2-1.10.2-6.11.1 - openSUSE 11.4 (x86_64): libcairo-gobject2-32bit-1.10.2-6.11.1 libcairo-script-interpreter2-32bit-1.10.2-6.11.1 libcairo2-32bit-1.10.2-6.11.1 References: https://bugzilla.novell.com/679039

1 0

openSUSE-RU-2011:0297-1 (moderate): build: This update adds the missing config for 11.4
by maintenance＠opensuse.org 06 Apr '11

06 Apr '11

openSUSE Recommended Update: build: This update adds the missing config for 11.4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0297-1 Rating: moderate References: #676489 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The configuration file for openSUSE 11.4 was missing from the package "build. This update adds the missing config file. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch build-4248 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): build-2011.01.20-1.4.1 build-mkbaselibs-2011.01.20-1.4.1 build-mkdrpms-2011.01.20-1.4.1 References: https://bugzilla.novell.com/676489

1 0

openSUSE-SU-2011:0298-1 (critical): xorg-x11 security update
by opensuse-security＠opensuse.org 06 Apr '11

06 Apr '11

openSUSE Security Update: xorg-x11 security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0298-1 Rating: critical References: #674733 Cross-References: CVE-2011-0465 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Remote attackers could execute arbitrary commands as root by assigning specially crafted hostnames to X11 clients via XDMCP (CVE-2011-0465). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch xorg-x11-4306 - openSUSE 11.3: zypper in -t patch xorg-x11-4306 - openSUSE 11.2: zypper in -t patch xorg-x11-4306 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): xorg-x11-7.6-43.44.1 xorg-x11-xauth-7.6-43.44.1 - openSUSE 11.3 (i586 x86_64): xorg-x11-7.5-12.3.1 xorg-x11-xauth-7.5-12.3.1 - openSUSE 11.2 (i586 x86_64): xorg-x11-7.4-35.5.1 xorg-x11-xauth-7.4-35.5.1 References: http://support.novell.com/security/cve/CVE-2011-0465.html https://bugzilla.novell.com/674733

1 0

openSUSE-RU-2011:0296-1 (low): the openSUSE translations.
by maintenance＠opensuse.org 06 Apr '11

06 Apr '11

openSUSE Recommended Update: the openSUSE translations. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0296-1 Rating: low References: #671870 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: Collective update for the openSUSE translations. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch translation-update-4298 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch) [New Version: 11.4]: desktop-translations-11.4-8.15.1 translation-update-11.4-0.2.1 translation-update-cs-11.4-0.2.1 translation-update-da-11.4-0.2.1 translation-update-de-11.4-0.2.1 translation-update-es-11.4-0.2.1 translation-update-fi-11.4-0.2.1 translation-update-fr-11.4-0.2.1 translation-update-gl-11.4-0.2.1 translation-update-hr-11.4-0.2.1 translation-update-hu-11.4-0.2.1 translation-update-it-11.4-0.2.1 translation-update-ja-11.4-0.2.1 translation-update-ka-11.4-0.2.1 translation-update-km-11.4-0.2.1 translation-update-ko-11.4-0.2.1 translation-update-nb-11.4-0.2.1 translation-update-nl-11.4-0.2.1 translation-update-pa-11.4-0.2.1 translation-update-pl-11.4-0.2.1 translation-update-pt-11.4-0.2.1 translation-update-pt_BR-11.4-0.2.1 translation-update-ro-11.4-0.2.1 translation-update-ru-11.4-0.2.1 translation-update-sk-11.4-0.2.1 translation-update-uk-11.4-0.2.1 translation-update-wa-11.4-0.2.1 yast2-trans-2.19.0-31.36.1 yast2-trans-af-2.19.0-31.36.1 yast2-trans-ar-2.19.0-31.36.1 yast2-trans-ast-2.19.0-31.36.1 yast2-trans-bg-2.19.0-31.36.1 yast2-trans-bn-2.19.0-31.36.1 yast2-trans-bs-2.19.0-31.36.1 yast2-trans-ca-2.19.0-31.36.1 yast2-trans-cs-2.19.0-31.36.1 yast2-trans-cy-2.19.0-31.36.1 yast2-trans-da-2.19.0-31.36.1 yast2-trans-de-2.19.0-31.36.1 yast2-trans-el-2.19.0-31.36.1 yast2-trans-en_GB-2.19.0-31.36.1 yast2-trans-en_US-2.19.0-31.36.1 yast2-trans-es-2.19.0-31.36.1 yast2-trans-et-2.19.0-31.36.1 yast2-trans-fa-2.19.0-31.36.1 yast2-trans-fi-2.19.0-31.36.1 yast2-trans-fr-2.19.0-31.36.1 yast2-trans-gl-2.19.0-31.36.1 yast2-trans-gu-2.19.0-31.36.1 yast2-trans-hi-2.19.0-31.36.1 yast2-trans-hr-2.19.0-31.36.1 yast2-trans-hu-2.19.0-31.36.1 yast2-trans-id-2.19.0-31.36.1 yast2-trans-it-2.19.0-31.36.1 yast2-trans-ja-2.19.0-31.36.1 yast2-trans-jv-2.19.0-31.36.1 yast2-trans-ka-2.19.0-31.36.1 yast2-trans-km-2.19.0-31.36.1 yast2-trans-kn-2.19.0-31.36.1 yast2-trans-ko-2.19.0-31.36.1 yast2-trans-ku-2.19.0-31.36.1 yast2-trans-lo-2.19.0-31.36.1 yast2-trans-lt-2.19.0-31.36.1 yast2-trans-mk-2.19.0-31.36.1 yast2-trans-mr-2.19.0-31.36.1 yast2-trans-nb-2.19.0-31.36.1 yast2-trans-nds-2.19.0-31.36.1 yast2-trans-nl-2.19.0-31.36.1 yast2-trans-pa-2.19.0-31.36.1 yast2-trans-pl-2.19.0-31.36.1 yast2-trans-pt-2.19.0-31.36.1 yast2-trans-pt_BR-2.19.0-31.36.1 yast2-trans-ro-2.19.0-31.36.1 yast2-trans-ru-2.19.0-31.36.1 yast2-trans-si-2.19.0-31.36.1 yast2-trans-sk-2.19.0-31.36.1 yast2-trans-sl-2.19.0-31.36.1 yast2-trans-sr-2.19.0-31.36.1 yast2-trans-sv-2.19.0-31.36.1 yast2-trans-sw-2.19.0-31.36.1 yast2-trans-ta-2.19.0-31.36.1 yast2-trans-tg-2.19.0-31.36.1 yast2-trans-th-2.19.0-31.36.1 yast2-trans-tr-2.19.0-31.36.1 yast2-trans-uk-2.19.0-31.36.1 yast2-trans-vi-2.19.0-31.36.1 yast2-trans-wa-2.19.0-31.36.1 yast2-trans-xh-2.19.0-31.36.1 yast2-trans-zh_CN-2.19.0-31.36.1 yast2-trans-zh_TW-2.19.0-31.36.1 yast2-trans-zu-2.19.0-31.36.1 References: https://bugzilla.novell.com/671870

1 0

openSUSE-RU-2011:0293-1 (low): gtg: Make Hamster plugin work
by maintenance＠opensuse.org 04 Apr '11

04 Apr '11

openSUSE Recommended Update: gtg: Make Hamster plugin work ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0293-1 Rating: low References: #683748 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the Getting thins done (GTG) Hamster plugin (bnc#683748). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gtg-4276 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): gtg-0.2.4-5.6.1 gtg-lang-0.2.4-5.6.1 References: https://bugzilla.novell.com/683748

1 0

openSUSE-RU-2011:0292-1 (important): tar: Version upgrade to 1.26
by maintenance＠opensuse.org 04 Apr '11

04 Apr '11

openSUSE Recommended Update: tar: Version upgrade to 1.26 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0292-1 Rating: important References: #682678 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: tar-1.25 has a serious bug with --one-file-system and --listed-incremental options, which makes amanda backup system unusable. This is fixed by this version upgrade to 1.26. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch tar-4240 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.26]: tar-1.26-1.3.1 tar-backup-scripts-1.26-1.3.1 - openSUSE 11.4 (noarch) [New Version: 1.26]: tar-lang-1.26-1.3.1 References: https://bugzilla.novell.com/682678

1 0