May 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2011:0480-1 (moderate): kdelibs4: fixing XSS vulnerability in KHTML error pages (CVE-2011-1168)
by opensuse-security＠opensuse.org 12 May '11

12 May '11

openSUSE Security Update: kdelibs4: fixing XSS vulnerability in KHTML error pages (CVE-2011-1168) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0480-1 Rating: moderate References: #686652 Cross-References: CVE-2011-1168 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: A XSS vulnerability in the way KHTML handles error pages has been fixed. CVE-2011-1168 has been assigned to this issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch kdelibs4-4406 - openSUSE 11.3: zypper in -t patch kdelibs4-4406 - openSUSE 11.2: zypper in -t patch kdelibs4-4406 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): kdelibs4-4.6.0-6.15.1 kdelibs4-branding-upstream-4.6.0-6.15.1 kdelibs4-core-4.6.0-6.15.1 kdelibs4-doc-4.6.0-6.15.1 libkde4-4.6.0-6.15.1 libkde4-devel-4.6.0-6.15.1 libkdecore4-4.6.0-6.15.1 libkdecore4-devel-4.6.0-6.15.1 libksuseinstall-devel-4.6.0-6.15.1 libksuseinstall1-4.6.0-6.15.1 - openSUSE 11.4 (x86_64): libkde4-32bit-4.6.0-6.15.1 libkdecore4-32bit-4.6.0-6.15.1 libksuseinstall1-32bit-4.6.0-6.15.1 - openSUSE 11.3 (i586 x86_64): kdelibs4-4.4.4-3.6.1 kdelibs4-branding-upstream-4.4.4-3.6.1 kdelibs4-core-4.4.4-3.6.1 kdelibs4-doc-4.4.4-3.6.1 libkde4-4.4.4-3.6.1 libkde4-devel-4.4.4-3.6.1 libkdecore4-4.4.4-3.6.1 libkdecore4-devel-4.4.4-3.6.1 libksuseinstall-devel-4.4.4-3.6.1 libksuseinstall1-4.4.4-3.6.1 - openSUSE 11.3 (x86_64): libkde4-32bit-4.4.4-3.6.1 libkdecore4-32bit-4.4.4-3.6.1 libksuseinstall1-32bit-4.4.4-3.6.1 - openSUSE 11.2 (i586 x86_64) [New Version: 4.3.5]: kdelibs4-4.3.5-0.5.1 kdelibs4-branding-upstream-4.3.5-0.5.1 kdelibs4-core-4.3.5-0.5.1 kdelibs4-doc-4.3.5-0.5.1 libkde4-4.3.5-0.5.1 libkde4-devel-4.3.5-0.5.1 libkdecore4-4.3.5-0.5.1 libkdecore4-devel-4.3.5-0.5.1 - openSUSE 11.2 (x86_64) [New Version: 4.3.5]: libkde4-32bit-4.3.5-0.5.1 libkdecore4-32bit-4.3.5-0.5.1 References: http://support.novell.com/security/cve/CVE-2011-1168.html https://bugzilla.novell.com/686652

1 0

openSUSE-SU-2011:0479-1 (moderate): perl security update
by opensuse-security＠opensuse.org 12 May '11

12 May '11

openSUSE Security Update: perl security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0479-1 Rating: moderate References: #657625 #676086 #678877 #684799 Cross-References: CVE-2010-4777 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update fixes a bug in perl that makes spamassassin crash and does not allow bypassing taint mode by using lc() or uc() anymore. - CVE-2010-4777: CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P) - CVE-2011-1487: CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N): Permissions, Privileges, and Access Control (CWE-264) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch perl-4498 - openSUSE 11.3: zypper in -t patch perl-4498 - openSUSE 11.2: zypper in -t patch perl-4498 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): perl-5.12.3-11.16.1 perl-base-5.12.3-11.16.1 - openSUSE 11.4 (x86_64): perl-32bit-5.12.3-11.16.1 perl-base-32bit-5.12.3-11.16.1 - openSUSE 11.4 (noarch): perl-doc-5.12.3-11.16.1 - openSUSE 11.3 (i586 x86_64): perl-5.12.1-2.5.1 perl-base-5.12.1-2.5.1 - openSUSE 11.3 (x86_64): perl-32bit-5.12.1-2.5.1 perl-base-32bit-5.12.1-2.5.1 - openSUSE 11.3 (noarch): perl-doc-5.12.1-2.5.1 - openSUSE 11.2 (i586 x86_64): perl-5.10.0-72.11.1 perl-base-5.10.0-72.11.1 perl-doc-5.10.0-72.11.1 - openSUSE 11.2 (x86_64): perl-32bit-5.10.0-72.11.1 perl-base-32bit-5.10.0-72.11.1 References: http://support.novell.com/security/cve/CVE-2010-4777.html https://bugzilla.novell.com/657625 https://bugzilla.novell.com/676086 https://bugzilla.novell.com/678877 https://bugzilla.novell.com/684799

1 0

openSUSE-RU-2011:0478-1 (low): gstreamer-0_10-plugins-good: Fix v4lw webcam support
by maintenance＠opensuse.org 12 May '11

12 May '11

openSUSE Recommended Update: gstreamer-0_10-plugins-good: Fix v4lw webcam support ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0478-1 Rating: low References: #674287 #684781 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. It includes one version update. Description: - 674287: Gstreamer fails to use v4l2 webcam - 684781: Patch gst-plugins-good to prevent crashes on low-end machines Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gstreamer-0_10-plugin-hal-4496 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.10.28]: gstreamer-0_10-plugin-hal-0.10.28-1.2.1 gstreamer-0_10-plugins-good-0.10.28-1.2.1 gstreamer-0_10-plugins-good-doc-0.10.28-1.2.1 gstreamer-0_10-plugins-good-extra-0.10.28-1.2.1 - openSUSE 11.4 (noarch) [New Version: 0.10.28]: gstreamer-0_10-plugins-good-lang-0.10.28-1.2.1 References: https://bugzilla.novell.com/674287 https://bugzilla.novell.com/684781

1 0

openSUSE-SU-2011:0476-1 (critical): postfix: Security update to fix remote code execution
by opensuse-security＠opensuse.org 11 May '11

11 May '11

openSUSE Security Update: postfix: Security update to fix remote code execution ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0476-1 Rating: critical References: #689021 Cross-References: CVE-2011-1720 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Remote attackers could potentially exploit a memory corruption issue in postfix' SASL implementation to execute arbitrary code (CVE-2011-1720). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch postfix-4524 - openSUSE 11.3: zypper in -t patch postfix-4524 - openSUSE 11.2: zypper in -t patch postfix-4524 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): postfix-2.7.2-13.16.1 postfix-devel-2.7.2-13.16.1 postfix-mysql-2.7.2-13.16.1 postfix-postgresql-2.7.2-13.16.1 - openSUSE 11.4 (noarch): postfix-doc-2.7.2-13.16.1 - openSUSE 11.3 (i586 x86_64): postfix-2.7.1-2.6.1 postfix-devel-2.7.1-2.6.1 postfix-mysql-2.7.1-2.6.1 postfix-postgresql-2.7.1-2.6.1 - openSUSE 11.3 (noarch): postfix-doc-2.7.1-2.6.1 - openSUSE 11.2 (i586 x86_64): postfix-2.6.1-2.10.1 postfix-devel-2.6.1-2.10.1 postfix-doc-2.6.1-2.10.1 postfix-mysql-2.6.1-2.10.1 postfix-postgresql-2.6.1-2.10.1 References: http://support.novell.com/security/cve/CVE-2011-1720.html https://bugzilla.novell.com/689021

1 0

openSUSE-RU-2011:0472-1 (moderate): apparmor-utils: Fix parsing of learning (null-XX) profiles
by maintenance＠opensuse.org 11 May '11

11 May '11

openSUSE Recommended Update: apparmor-utils: Fix parsing of learning (null-XX) profiles ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0472-1 Rating: moderate References: #546618 #668311 #685833 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This updated fixes the parsing of learning (null-XX) profiles with genprof and logprof (bnc#546618 bnc#668311 bnc#685833) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch apparmor-utils-4347 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (noarch): apparmor-utils-2.3.1-12.5.1 References: https://bugzilla.novell.com/546618 https://bugzilla.novell.com/668311 https://bugzilla.novell.com/685833

1 0

openSUSE-RU-2011:0470-1 (low): Various printing failures with CUPS default RIPCache size of 8m
by maintenance＠opensuse.org 10 May '11

10 May '11

openSUSE Recommended Update: Various printing failures with CUPS default RIPCache size of 8m ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0470-1 Rating: low References: #628233 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The CUPS upstream default "RIPCache 8m" is too small for nowadays higher resolution printing and can cause various kind of printout failures (see CUPS STR 3535 at http://www.cups.org/str.php?L3535 and the openSUSE Bugzilla bug 628233 and http://en.opensuse.org/Portal:Printing). Such issues are avoided with a default "RIPCache 128m" setting. If needed a higher value can be explicitly specified in /etc/cups/cupsd.conf via a line like "RIPCache 256m" (sometimes up to "RIPCache 1024m" is needed - provided there is at least 2GB main memory in the computer). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch cups-4455 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): cups-1.4.6-7.8.1 cups-client-1.4.6-7.8.1 cups-ddk-1.4.6-7.8.1 cups-devel-1.4.6-7.8.1 cups-libs-1.4.6-7.8.1 - openSUSE 11.4 (x86_64): cups-libs-32bit-1.4.6-7.8.1 References: https://bugzilla.novell.com/628233

1 0

openSUSE-RU-2011:0469-1 (low): gnome-control-center: Fix incorrect icon
by maintenance＠opensuse.org 10 May '11

10 May '11

openSUSE Recommended Update: gnome-control-center: Fix incorrect icon ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0469-1 Rating: low References: #674537 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The "back" arrow for the slideshow item in the appearance applet was incorrectly replaced by a "forward" arrow. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gnome-control-center-4489 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): gnome-control-center-2.32.1-7.12.1 gnome-control-center-devel-2.32.1-7.12.1 libgnome-window-settings-devel-2.32.1-7.12.1 libgnome-window-settings1-2.32.1-7.12.1 - openSUSE 11.4 (noarch): gnome-control-center-lang-2.32.1-7.12.1 References: https://bugzilla.novell.com/674537

1 0

openSUSE-RU-2011:0468-1 (critical): aaa_base: Fixed a system does not boot issue.
by maintenance＠opensuse.org 10 May '11

10 May '11

openSUSE Recommended Update: aaa_base: Fixed a system does not boot issue. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0468-1 Rating: critical References: #642289 #674192 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: - #642289: System does not boot correctly with sysvinit-tools-2.88-15.1.x86_64.rpm or newer (blogd issue) - #674192: Avoid waiting on bind mounts in boot.localfs - Be aware in refresh_initrd that modules used in initrd may use options in the /etc/modprobe.d/ files Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch aaa_base-4464 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): aaa_base-11.4-54.64.1 aaa_base-extras-11.4-54.64.1 References: https://bugzilla.novell.com/642289 https://bugzilla.novell.com/674192

1 0

openSUSE-RU-2011:0467-1 (low): NetworkManager: Fixed filling up /var/log/ with useless errors
by maintenance＠opensuse.org 10 May '11

10 May '11

openSUSE Recommended Update: NetworkManager: Fixed filling up /var/log/ with useless errors ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0467-1 Rating: low References: #681072 #687001 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes 2 NetworkManager problems: - #687001: NetworkManager 0.8.2 fills up /var/log/warn with user_proxy_init() errors - #681072: NetworkManager floods /var/log/messages with useless messages Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch NetworkManager-4454 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): NetworkManager-0.8.2-15.22.1 NetworkManager-devel-0.8.2-15.22.1 NetworkManager-doc-0.8.2-15.22.1 NetworkManager-glib-0.8.2-15.22.1 - openSUSE 11.4 (noarch): NetworkManager-lang-0.8.2-15.22.1 References: https://bugzilla.novell.com/681072 https://bugzilla.novell.com/687001

1 0

openSUSE-RU-2011:0466-1 (low): perl-GDGraph: This update fixes a missing dependency
by maintenance＠opensuse.org 10 May '11

10 May '11

openSUSE Recommended Update: perl-GDGraph: This update fixes a missing dependency ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0466-1 Rating: low References: #676080 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: A missing dependency is fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch perl-GDGraph-4479 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): perl-GDGraph-1.44-186.187.1 References: https://bugzilla.novell.com/676080

1 0