April 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2011:0291-1 (moderate): strongswan: IKEv2 daemon charon may kill itself and be restarted by IPSEC starter. Fixed by this update.
by maintenance＠opensuse.org 04 Apr '11

04 Apr '11

openSUSE Recommended Update: strongswan: IKEv2 daemon charon may kill itself and be restarted by IPSEC starter. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0291-1 Rating: moderate References: #679170 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update applies a patch correcting the memory handling in virtual IP DHCP transaction offer that causes the IKEv2 daemon charon to kill itself because of a SEGV in a thread and triggered a restart by IPSEC starter. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch strongswan-4235 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): strongswan-4.5.0-6.7.1 strongswan-doc-4.5.0-6.7.1 strongswan-ikev1-4.5.0-6.7.1 strongswan-ikev2-4.5.0-6.7.1 strongswan-ipsec-4.5.0-6.7.1 strongswan-libs0-4.5.0-6.7.1 strongswan-mysql-4.5.0-6.7.1 strongswan-nm-4.5.0-6.7.1 strongswan-sqlite-4.5.0-6.7.1 References: https://bugzilla.novell.com/679170

1 0

openSUSE-RU-2011:0290-1 (low): compcache: This update fixes the init script for compcache
by maintenance＠opensuse.org 04 Apr '11

04 Apr '11

openSUSE Recommended Update: compcache: This update fixes the init script for compcache ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0290-1 Rating: low References: #681048 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the init script of compcache package to run with the default empty $COMPCACHE_SIZE_KB value. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch compcache-4233 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): compcache-0.6.2-4.5.2 References: https://bugzilla.novell.com/681048

1 0

openSUSE-RU-2011:0289-1 (moderate): qt-creator: Update to final 2.1.0
by maintenance＠opensuse.org 04 Apr '11

04 Apr '11

openSUSE Recommended Update: qt-creator: Update to final 2.1.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0289-1 Rating: moderate References: #680420 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update provides the final version of qt-creator 2.1.0 with various urgent bug fixes. For the complete release announcement, please refer to this changelog: http://labs.qt.nokia.com/2011/03/01/qt-creator-2-1-0-release d/ Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch qt-creator-4245 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.1.0]: qt-creator-2.1.0-1.3.1 References: https://bugzilla.novell.com/680420

1 0

openSUSE-SU-2011:0274-2 (critical): quagga: remote denial of service
by opensuse-security＠opensuse.org 04 Apr '11

04 Apr '11

openSUSE Security Update: quagga: remote denial of service ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0274-2 Rating: critical References: #654270 Cross-References: CVE-2010-1674 CVE-2010-1675 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This security update of quagga fixes: - CVE-2010-1674: Direct BGP peers can send malformed extended communities which lead to a NULL pointer dereference. - CVE-2010-1675: A malformed AS_PATHLIMIT path attribute will cause a session reset in Quagga. This malformed package is forwarded by other routers and can be used to take "all" Quagga routers off the Internet with one single announcement. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch quagga-4283 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): quagga-0.99.17-4.5.1 quagga-devel-0.99.17-4.5.1 References: http://support.novell.com/security/cve/CVE-2010-1674.html http://support.novell.com/security/cve/CVE-2010-1675.html https://bugzilla.novell.com/654270

1 0

openSUSE-RU-2011:0288-1 (low): alsa: This update provides a few fixes for ALSA
by maintenance＠opensuse.org 04 Apr '11

04 Apr '11

openSUSE Recommended Update: alsa: This update provides a few fixes for ALSA ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0288-1 Rating: low References: #678389 #682222 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update provides a few fixes for ALSA: - Fix alsasound init script to set up the sound system properly even when the module isn't loaded beforehand - Fix the path of asound.state for openSUSE-11.4; now it's /var/lib/asound.state - Backport the recent updates/fixes for hdspmixer in alsa-tools to fix segfaults Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch alsa-4242 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): alsa-1.0.24.1-4.5.1 alsa-devel-1.0.24.1-4.5.1 alsa-tools-1.0.24.1-4.5.1 alsa-tools-devel-1.0.24.1-4.5.1 alsa-tools-gui-1.0.24.1-4.5.1 libasound2-1.0.24.1-4.5.1 - openSUSE 11.4 (x86_64): libasound2-32bit-1.0.24.1-4.5.1 - openSUSE 11.4 (noarch): alsa-docs-1.0.24.1-4.5.1 References: https://bugzilla.novell.com/678389 https://bugzilla.novell.com/682222

1 0

openSUSE-RU-2011:0287-1 (low): espeak: This updates fixes problems with the initial volume of espeak
by maintenance＠opensuse.org 04 Apr '11

04 Apr '11

openSUSE Recommended Update: espeak: This updates fixes problems with the initial volume of espeak ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0287-1 Rating: low References: #679975 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the bug, that espeak resets the volume to full forcibly when used with PulseAudio. It happens with StarDict or other speech program using espeak as a backend. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch espeak-4238 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): espeak-1.43.03-5.6.1 espeak-devel-1.43.03-5.6.1 References: https://bugzilla.novell.com/679975

1 0

openSUSE-SU-2011:0281-1 (moderate): kdelibs4 security update
by opensuse-security＠opensuse.org 01 Apr '11

01 Apr '11

openSUSE Security Update: kdelibs4 security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0281-1 Rating: moderate References: #669222 Cross-References: CVE-2011-1094 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: KSSL did not properly verify the host name of a certificate if the certificate was issued for an IP address (CVE-2011-1094). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch kdelibs4-4225 - openSUSE 11.3: zypper in -t patch kdelibs4-4225 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): kdelibs4-4.6.0-6.13.1 kdelibs4-branding-upstream-4.6.0-6.13.1 kdelibs4-core-4.6.0-6.13.1 kdelibs4-doc-4.6.0-6.13.1 libkde4-4.6.0-6.13.1 libkde4-devel-4.6.0-6.13.1 libkdecore4-4.6.0-6.13.1 libkdecore4-devel-4.6.0-6.13.1 libksuseinstall-devel-4.6.0-6.13.1 libksuseinstall1-4.6.0-6.13.1 - openSUSE 11.4 (x86_64): libkde4-32bit-4.6.0-6.13.1 libkdecore4-32bit-4.6.0-6.13.1 libksuseinstall1-32bit-4.6.0-6.13.1 - openSUSE 11.3 (i586 x86_64): kdelibs4-4.4.4-3.4.1 kdelibs4-branding-upstream-4.4.4-3.4.1 kdelibs4-core-4.4.4-3.4.1 kdelibs4-doc-4.4.4-3.4.1 libkde4-4.4.4-3.4.1 libkde4-devel-4.4.4-3.4.1 libkdecore4-4.4.4-3.4.1 libkdecore4-devel-4.4.4-3.4.1 libksuseinstall-devel-4.4.4-3.4.1 libksuseinstall1-4.4.4-3.4.1 - openSUSE 11.3 (x86_64): libkde4-32bit-4.4.4-3.4.1 libkdecore4-32bit-4.4.4-3.4.1 libksuseinstall1-32bit-4.4.4-3.4.1 References: http://support.novell.com/security/cve/CVE-2011-1094.html https://bugzilla.novell.com/669222

1 0

openSUSE-SU-2011:0280-1 (moderate): kdelibs4 security update
by opensuse-security＠opensuse.org 01 Apr '11

01 Apr '11

openSUSE Security Update: kdelibs4 security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0280-1 Rating: moderate References: #622304 #669222 Cross-References: CVE-2011-1094 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. It includes one version update. Description: KSSL did not properly verify the host name of a certificate if the certificate was issued for an IP address (CVE-2011-1094). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch kdelibs4-4216 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64) [New Version: 4.3.5]: kdelibs4-4.3.5-0.3.1 kdelibs4-branding-upstream-4.3.5-0.3.1 kdelibs4-core-4.3.5-0.3.1 kdelibs4-doc-4.3.5-0.3.1 libkde4-4.3.5-0.3.1 libkde4-devel-4.3.5-0.3.1 libkdecore4-4.3.5-0.3.1 libkdecore4-devel-4.3.5-0.3.1 - openSUSE 11.2 (x86_64) [New Version: 4.3.5]: libkde4-32bit-4.3.5-0.3.1 libkdecore4-32bit-4.3.5-0.3.1 References: http://support.novell.com/security/cve/CVE-2011-1094.html https://bugzilla.novell.com/622304 https://bugzilla.novell.com/669222

1 0

openSUSE-SU-2011:0279-1 (important): evince: security update
by opensuse-security＠opensuse.org 01 Apr '11

01 Apr '11

openSUSE Security Update: evince: security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0279-1 Rating: important References: #671064 Cross-References: CVE-2011-0433 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: This update of evince fixes a buffer overflow in linetoken(). (CVE-2011-0433) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch evince-4002 - openSUSE 11.2: zypper in -t patch evince-4002 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): evince-2.30.1-3.7.1 evince-devel-2.30.1-3.7.1 nautilus-evince-2.30.1-3.7.1 - openSUSE 11.3 (noarch): evince-lang-2.30.1-3.7.1 - openSUSE 11.2 (i586 x86_64) [New Version: 2.28.2]: evince-2.28.2-0.7.1 evince-devel-2.28.2-0.7.1 - openSUSE 11.2 (noarch) [New Version: 2.28.2]: evince-lang-2.28.2-0.7.1 References: http://support.novell.com/security/cve/CVE-2011-0433.html https://bugzilla.novell.com/671064

1 0

openSUSE-SU-2011:0278-1 (low): otrs security update
by opensuse-security＠opensuse.org 01 Apr '11

01 Apr '11

openSUSE Security Update: otrs security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0278-1 Rating: low References: #679292 Cross-References: CVE-2011-0456 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Insufficient quoting of shell meta characters in otrs' webscript.pl could allow remote attackers to execute aribtrary commands (CVE-2011-0456). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch otrs-4278 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): otrs-2.2.6-46.5.1 References: http://support.novell.com/security/cve/CVE-2011-0456.html https://bugzilla.novell.com/679292

1 0