May 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2011:0465-1 (low): ModemManager spams dmesg
by maintenance＠opensuse.org 10 May '11

10 May '11

openSUSE Recommended Update: ModemManager spams dmesg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0465-1 Rating: low References: #674331 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: - 674331: ModemManager spams dmesg Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch ModemManager-4453 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): ModemManager-0.4-8.9.1 References: https://bugzilla.novell.com/674331

1 0

openSUSE-SU-2011:0464-1 (moderate): otrs: Fixed a XSS issues
by opensuse-security＠opensuse.org 10 May '11

10 May '11

openSUSE Security Update: otrs: Fixed a XSS issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0464-1 Rating: moderate References: #692384 Cross-References: CVE-2011-1518 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes two new package versions. Description: This updated fixes a cross site scripting (XSS) issue in otrs. (CVE-2011-1518) Upstream advisory: http://otrs.org/advisory/OSA-2011-01-en/ Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch otrs-4509 - openSUSE 11.3: zypper in -t patch otrs-4509 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): otrs-2.4.9-3.3.1 otrs-doc-2.4.9-3.3.1 otrs-itsm-2.1.1-1.3.1 - openSUSE 11.3 (noarch) [New Version: 2.1.1 and 2.4.9]: otrs-2.4.9-0.5.1 otrs-doc-2.4.9-0.5.1 otrs-itsm-2.1.1-0.5.1 References: http://support.novell.com/security/cve/CVE-2011-1518.html https://bugzilla.novell.com/692384

1 0

openSUSE-SU-2011:0456-1 (important): exim: Fixed improper format string handling in DKIM signatures
by opensuse-security＠opensuse.org 09 May '11

09 May '11

openSUSE Security Update: exim: Fixed improper format string handling in DKIM signatures ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0456-1 Rating: important References: #692227 Cross-References: CVE-2011-1764 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This exim security update fixes importer string handling in DKIM signatures. (CVE-2011-1764) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch exim-4507 - openSUSE 11.3: zypper in -t patch exim-4507 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): exim-4.74-6.7.1 eximon-4.74-6.7.1 eximstats-html-4.74-6.7.1 - openSUSE 11.3 (i586 x86_64): exim-4.71-4.7.1 eximon-4.71-4.7.1 eximstats-html-4.71-4.7.1 References: http://support.novell.com/security/cve/CVE-2011-1764.html https://bugzilla.novell.com/692227

1 0

openSUSE-RU-2011:0455-1 (low): java-1_6_0_sun: Update to Oracle Java 6 update 25
by maintenance＠opensuse.org 09 May '11

09 May '11

openSUSE Recommended Update: java-1_6_0_sun: Update to Oracle Java 6 update 25 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0455-1 Rating: low References: #691672 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: Oracle Java SE 6 update 25 has been released. This release brings: * New generation of Java HotSpot VM 20 with experimental tiered compilation in Server VM reduces a start time * Support for various software including Firefox 4, Chrome 10 and VirtualBox 4 * Improved BigDecimal performance up to 30% * Olson Data 2011b includes recent North Dakota changes This update does not provide any documented security enhancements. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch java-1_6_0-sun-4493 - openSUSE 11.3: zypper in -t patch java-1_6_0-sun-4493 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.6.0.u25]: java-1_6_0-sun-1.6.0.u25-0.3.1 java-1_6_0-sun-alsa-1.6.0.u25-0.3.1 java-1_6_0-sun-demo-1.6.0.u25-0.3.1 java-1_6_0-sun-devel-1.6.0.u25-0.3.1 java-1_6_0-sun-jdbc-1.6.0.u25-0.3.1 java-1_6_0-sun-plugin-1.6.0.u25-0.3.1 java-1_6_0-sun-src-1.6.0.u25-0.3.1 - openSUSE 11.3 (i586 x86_64) [New Version: 1.6.0.u25]: java-1_6_0-sun-1.6.0.u25-0.2.1 java-1_6_0-sun-alsa-1.6.0.u25-0.2.1 java-1_6_0-sun-devel-1.6.0.u25-0.2.1 java-1_6_0-sun-jdbc-1.6.0.u25-0.2.1 java-1_6_0-sun-plugin-1.6.0.u25-0.2.1 java-1_6_0-sun-src-1.6.0.u25-0.2.1 References: https://bugzilla.novell.com/691672

1 0

openSUSE-SU-2011:0452-1 (low): Cronie: does not drop all privileges before calling sendmail
by opensuse-security＠opensuse.org 06 May '11

06 May '11

openSUSE Security Update: Cronie: does not drop all privileges before calling sendmail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0452-1 Rating: low References: #690166 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes one version update. Description: Cronie does not drop all privileges before calling sendmail. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch cron-4495 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.4.7]: cron-4.2-9.3.1 cronie-1.4.7-1.3.1 cronie-anacron-1.4.7-1.3.1 References: https://bugzilla.novell.com/690166

1 0

openSUSE-SU-2011:0449-1 (low): libzip security update
by opensuse-security＠opensuse.org 06 May '11

06 May '11

openSUSE Security Update: libzip security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0449-1 Rating: low References: #681193 Cross-References: CVE-2011-0421 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: empty zip archives could crash programs using libzip (CVE-2011-0421). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libzip-devel-4188 - openSUSE 11.3: zypper in -t patch libzip-devel-4188 - openSUSE 11.2: zypper in -t patch libzip-devel-4188 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libzip-devel-0.9-30.31.1 libzip-util-0.9-30.31.1 libzip1-0.9-30.31.1 - openSUSE 11.3 (i586 x86_64): libzip-devel-0.9-27.3.1 libzip-util-0.9-27.3.1 libzip1-0.9-27.3.1 - openSUSE 11.2 (i586 x86_64): libzip-devel-0.9-23.4.1 libzip-util-0.9-23.4.1 libzip1-0.9-23.4.1 References: http://support.novell.com/security/cve/CVE-2011-0421.html https://bugzilla.novell.com/681193

1 0

openSUSE-RU-2011:0447-1 (important): python-feedparser: This update fixes an issue introduced by the last security update for this package.
by maintenance＠opensuse.org 06 May '11

06 May '11

openSUSE Recommended Update: python-feedparser: This update fixes an issue introduced by the last security update for this package. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0447-1 Rating: important References: #688878 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a crash in python-feedparser when it is parsing some feeds. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch python-feedparser-4444 - openSUSE 11.3: zypper in -t patch python-feedparser-4444 - openSUSE 11.2: zypper in -t patch python-feedparser-4444 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): python-feedparser-4.1-9.12.1 - openSUSE 11.3 (noarch): python-feedparser-4.1-6.5.1 - openSUSE 11.2 (noarch): python-feedparser-4.1-2.5.1 References: https://bugzilla.novell.com/688878

1 0

openSUSE-RU-2011:0445-1 (moderate): varnish: This update fixes several packaging problems
by maintenance＠opensuse.org 06 May '11

06 May '11

openSUSE Recommended Update: varnish: This update fixes several packaging problems ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0445-1 Rating: moderate References: #678811 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update contains fixes for the following problems: - Fix security-problematic ownership of /etc/varnish files (bnc#678811) - Run spec-beautifier over it - Replace default shipped vcl.conf by a working one - Run as varnish user - Start varnishlog together with varnishd - Properly use PID files in init script - Create and package /var/log/varnish Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libvarnish1-4446 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libvarnish1-2.1.3-3.4.1 varnish-2.1.3-3.4.1 varnish-devel-2.1.3-3.4.1 References: https://bugzilla.novell.com/678811

1 0

openSUSE-RU-2011:0442-1 (low): doxygen: This update fixes a segfault when building documentation
by maintenance＠opensuse.org 06 May '11

06 May '11

openSUSE Recommended Update: doxygen: This update fixes a segfault when building documentation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0442-1 Rating: low References: #650330 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Doxygen-1.6.3-3.2 segfaults when building blender documentation. The pure virtual method parent() was changed to method returning 0. Therefore the result should be checked before dereferencing. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch doxygen-4449 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): doxygen-1.6.3-4.5.1 References: https://bugzilla.novell.com/650330

1 0

openSUSE-SU-2011:0441-1 (moderate): VUL-0: rsync heap corruption
by opensuse-security＠opensuse.org 06 May '11

06 May '11

openSUSE Security Update: VUL-0: rsync heap corruption ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0441-1 Rating: moderate References: #684387 Cross-References: CVE-2011-1097 Affected Products: openSUSE 11.4 openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Specially crafted requests could cause a memory corruption on the receiving side of an rsync transfer (client side or server that allows to push) (CVE-2011-1097). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch rsync-4292 - openSUSE 11.3: zypper in -t patch rsync-4292 - openSUSE 11.2: zypper in -t patch rsync-4292 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): rsync-3.0.7-8.9.1 - openSUSE 11.3 (i586 x86_64): rsync-3.0.7-4.3.1 - openSUSE 11.2 (i586 x86_64): rsync-3.0.6-3.5.1 References: http://support.novell.com/security/cve/CVE-2011-1097.html https://bugzilla.novell.com/684387

1 0