June 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2011:0724-1: important: MozillaThunderbird: Update to Thunderbird 3.1.11
by opensuse-security＠opensuse.org 30 Jun '11

30 Jun '11

openSUSE Security Update: MozillaThunderbird: Update to Thunderbird 3.1.11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0724-1 Rating: important References: #701296 Cross-References: CVE-2011-0083 CVE-2011-0085 CVE-2011-2362 CVE-2011-2363 CVE-2011-2364 CVE-2011-2365 CVE-2011-2371 CVE-2011-2373 CVE-2011-2374 CVE-2011-2376 CVE-2011-2377 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. It includes 5 new package versions. Description: Mozilla Thunderbird was updated to the 3.1.11 release. It has new features, fixes lots of bugs, and also fixes the following security issues: * MFSA 2011-19/CVE-2011-2374 CVE-2011-2376 CVE-2011-2364 CVE-2011-2365 Miscellaneous memory safety hazards * MFSA 2011-20/CVE-2011-2373 (bmo#617247) Use-after-free vulnerability when viewing XUL document with script disabled * MFSA 2011-21/CVE-2011-2377 (bmo#638018, bmo#639303) Memory corruption due to multipart/x-mixed-replace images * MFSA 2011-22/CVE-2011-2371 (bmo#664009) Integer overflow and arbitrary code execution in Array.reduceRight() * MFSA 2011-23/CVE-2011-0083 CVE-2011-0085 CVE-2011-2363 Multiple dangling pointer vulnerabilities * MFSA 2011-24/CVE-2011-2362 (bmo#616264) Cookie isolation error Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaThunderbird-4800 firefox50-upgrade-4806 mozilla-js192-4771 - openSUSE 11.3: zypper in -t patch MozillaFirefox-4761 MozillaThunderbird-4800 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.9.2.18,3.1.11 and 5.0]: MozillaFirefox-5.0-0.2.1 MozillaFirefox-branding-openSUSE-5.0-2.3.1 MozillaFirefox-buildsymbols-5.0-0.2.1 MozillaFirefox-devel-5.0-0.2.1 MozillaFirefox-translations-common-5.0-0.2.1 MozillaFirefox-translations-other-5.0-0.2.1 MozillaThunderbird-3.1.11-0.7.1 MozillaThunderbird-buildsymbols-3.1.11-0.7.1 MozillaThunderbird-devel-3.1.11-0.7.1 MozillaThunderbird-translations-common-3.1.11-0.7.1 MozillaThunderbird-translations-other-3.1.11-0.7.1 enigmail-1.1.2-9.7.1 mozilla-js192-1.9.2.18-1.2.1 mozilla-xulrunner192-1.9.2.18-1.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.18-1.2.1 mozilla-xulrunner192-devel-1.9.2.18-1.2.1 mozilla-xulrunner192-gnome-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-common-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-other-1.9.2.18-1.2.1 - openSUSE 11.4 (x86_64) [New Version: 1.9.2.18]: mozilla-js192-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.18-1.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 1.1.2,1.9.2.18,3.1.11 and 3.6.18]: MozillaFirefox-3.6.18-0.2.1 MozillaFirefox-branding-upstream-3.6.18-0.2.1 MozillaFirefox-translations-common-3.6.18-0.2.1 MozillaFirefox-translations-other-3.6.18-0.2.1 MozillaThunderbird-3.1.11-0.11.1 MozillaThunderbird-devel-3.1.11-0.11.1 MozillaThunderbird-translations-common-3.1.11-0.11.1 MozillaThunderbird-translations-other-3.1.11-0.11.1 enigmail-1.1.2-9.11.1 mozilla-js192-1.9.2.18-1.2.1 mozilla-xulrunner192-1.9.2.18-1.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.18-1.2.1 mozilla-xulrunner192-devel-1.9.2.18-1.2.1 mozilla-xulrunner192-gnome-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-common-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-other-1.9.2.18-1.2.1 - openSUSE 11.3 (x86_64) [New Version: 1.9.2.18]: mozilla-js192-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.18-1.2.1 References: http://support.novell.com/security/cve/CVE-2011-0083.html http://support.novell.com/security/cve/CVE-2011-0085.html http://support.novell.com/security/cve/CVE-2011-2362.html http://support.novell.com/security/cve/CVE-2011-2363.html http://support.novell.com/security/cve/CVE-2011-2364.html http://support.novell.com/security/cve/CVE-2011-2365.html http://support.novell.com/security/cve/CVE-2011-2371.html http://support.novell.com/security/cve/CVE-2011-2373.html http://support.novell.com/security/cve/CVE-2011-2374.html http://support.novell.com/security/cve/CVE-2011-2376.html http://support.novell.com/security/cve/CVE-2011-2377.html https://bugzilla.novell.com/701296

1 0

openSUSE-RU-2011:0723-1: libopenraw: Nautilus crashes if folder contains Olympus raw (.orf) files
by maintenance＠opensuse.org 30 Jun '11

30 Jun '11

openSUSE Recommended Update: libopenraw: Nautilus crashes if folder contains Olympus raw (.orf) files ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0723-1 Rating: low References: #561232 #699678 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The following bugs are fixed by this update: - bnc#561232: Fix nautilus crash when browsing the folder contains Olympus raw (.orf) files - bnc#699678: Load and decompress Olympus raw files to generate thumbnails Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gdk-pixbuf-loader-libopenraw-4724 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): gdk-pixbuf-loader-libopenraw-0.0.8-11.12.1 libopenraw-devel-0.0.8-11.12.1 libopenraw1-0.0.8-11.12.1 - openSUSE 11.4 (x86_64): gdk-pixbuf-loader-libopenraw-32bit-0.0.8-11.12.1 libopenraw1-32bit-0.0.8-11.12.1 References: https://bugzilla.novell.com/561232 https://bugzilla.novell.com/699678

1 0

openSUSE-RU-2011:0722-1: yast2-network: linux-atm-lib doesn't exist anymore
by maintenance＠opensuse.org 30 Jun '11

30 Jun '11

openSUSE Recommended Update: yast2-network: linux-atm-lib doesn't exist anymore ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0722-1 Rating: low References: #655571 #668586 #675844 #694283 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. It includes one version update. Description: The DSL module wrongly required linux-atm-lib after the package had been renamed to libatm1.rpm (bnc#668586). WebYaST: also update /etc/hosts, for hostname -f (bnc#694283#c8). AutoYaST: networking/start_immediately was ignored (bnc#655571, bnc#675844). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch yast2-network-4773 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.20.12]: yast2-network-2.20.12-0.3.1 yast2-network-devel-doc-2.20.12-0.3.1 References: https://bugzilla.novell.com/655571 https://bugzilla.novell.com/668586 https://bugzilla.novell.com/675844 https://bugzilla.novell.com/694283

1 0

openSUSE-RU-2011:0721-1: moderate: xfig: Fails to load second eps file
by maintenance＠opensuse.org 30 Jun '11

30 Jun '11

openSUSE Recommended Update: xfig: Fails to load second eps file ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0721-1 Rating: moderate References: #696368 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: xfig fails to load the second eps file. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch xfig-4727 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): xfig-3.2.5b-14.15.1 References: https://bugzilla.novell.com/696368

1 0

openSUSE-RU-2011:0720-1: nut-classic: This update fixes a UPS control problem during hibernation
by maintenance＠opensuse.org 30 Jun '11

30 Jun '11

openSUSE Recommended Update: nut-classic: This update fixes a UPS control problem during hibernation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0720-1 Rating: low References: #660236 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: Command order in /usr/lib/pm-utils/sleep.d/99nut is wrong, which may let system off when power is back or cause nut failures after resume. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch nut-classic-4737 - openSUSE 11.3: zypper in -t patch nut-classic-4737 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): nut-classic-2.6.0-4.5.1 - openSUSE 11.3 (i586 x86_64): nut-classic-2.4.1-6.3.1 References: https://bugzilla.novell.com/660236

1 0

openSUSE-RU-2011:0714-1: libslab: Fix segfault starting yast2
by maintenance＠opensuse.org 30 Jun '11

30 Jun '11

openSUSE Recommended Update: libslab: Fix segfault starting yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0714-1 Rating: low References: #650196 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a yast2 segfault when starting yast2 in the locales cs_CZ, hu_HU and tr_TR (bnc#650196) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libslab-4675 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libslab-devel-2.30.0-12.3.1 libslab0-2.30.0-12.3.1 - openSUSE 11.4 (noarch): libslab-lang-2.30.0-12.3.1 References: https://bugzilla.novell.com/650196

1 0

openSUSE-RU-2011:0713-1: coreutils: 'cp -al' does not preserve timestamps of symlinks
by maintenance＠opensuse.org 29 Jun '11

29 Jun '11

openSUSE Recommended Update: coreutils: 'cp -al' does not preserve timestamps of symlinks ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0713-1 Rating: low References: #696389 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: cp -a --link would not create a hardlink to a symlink, instead copying the symlink and then not preserving its timestamp. Bug introduced in coreutils-8.0. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch coreutils-4777 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): coreutils-8.9-7.1 - openSUSE 11.4 (noarch): coreutils-lang-8.9-7.1 References: https://bugzilla.novell.com/696389

1 0

openSUSE-RU-2011:0709-1: lensfun: Crash in lensfun 0.2.5
by maintenance＠opensuse.org 28 Jun '11

28 Jun '11

openSUSE Recommended Update: lensfun: Crash in lensfun 0.2.5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0709-1 Rating: low References: #699568 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: lensfun 0.2.5 was crashing on some hardware, when lens correction are being applied on photo taken with a lens in lensfun camera database (when using either ufraw, darktable or digikam). It could also crash when incorrect lens database was used. This update fixes this issue. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch lensfun-4759 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): lensfun-0.2.5-8.9.1 lensfun-devel-0.2.5-8.9.1 lensfun-doc-0.2.5-8.9.1 liblensfun0-0.2.5-8.9.1 References: https://bugzilla.novell.com/699568

1 0

openSUSE-SU-2011:0706-1: important: java-1_6_0-openjdk
by opensuse-security＠opensuse.org 28 Jun '11

28 Jun '11

openSUSE Security Update: java-1_6_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0706-1 Rating: important References: #596177 #698739 Cross-References: CVE-2011-0815 CVE-2011-0822 CVE-2011-0862 CVE-2011-0864 CVE-2011-0865 CVE-2011-0867 CVE-2011-0868 CVE-2011-0869 CVE-2011-0870 CVE-2011-0871 CVE-2011-0872 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: Icedtea as included in java-1_6_0-openjdk was updated to fix several security issues: * S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent disabled get still selected for read ops (win) * S6618658, CVE-2011-0865: Vulnerability in deserialization * S7012520, CVE-2011-0815: Heap overflow vulnerability in FileDialog.show() * S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D code * S7013969, CVE-2011-0867: NetworkInterface.toString can reveal bindings * S7013971, CVE-2011-0869: Vulnerability in SAAJ * S7016340, CVE-2011-0870: Vulnerability in SAAJ * S7016495, CVE-2011-0868: Crash in Java 2D transforming an image with scale close to zero * S7020198, CVE-2011-0871: ImageIcon creates Component with null acc * S7020373, CVE-2011-0864: JSR rewriting can overflow memory address size Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch icedtea-web-4788 - openSUSE 11.3: zypper in -t patch icedtea-web-4788 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): icedtea-web-1.1-0.2.1 java-1_6_0-openjdk-1.6.0.0_b22.1.10.2-4.3.1 java-1_6_0-openjdk-devel-1.6.0.0_b22.1.10.2-4.3.1 - openSUSE 11.4 (noarch): icedtea-web-javadoc-1.1-0.2.1 java-1_6_0-openjdk-demo-1.6.0.0_b22.1.10.2-4.3.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b22.1.10.2-4.3.1 java-1_6_0-openjdk-src-1.6.0.0_b22.1.10.2-4.3.1 - openSUSE 11.3 (i586 x86_64): icedtea-web-1.1-0.2.1 java-1_6_0-openjdk-1.6.0.0_b22.1.10.2-4.2.1 java-1_6_0-openjdk-devel-1.6.0.0_b22.1.10.2-4.2.1 - openSUSE 11.3 (noarch): icedtea-web-javadoc-1.1-0.2.1 java-1_6_0-openjdk-demo-1.6.0.0_b22.1.10.2-4.2.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b22.1.10.2-4.2.1 java-1_6_0-openjdk-src-1.6.0.0_b22.1.10.2-4.2.1 References: http://support.novell.com/security/cve/CVE-2011-0815.html http://support.novell.com/security/cve/CVE-2011-0822.html http://support.novell.com/security/cve/CVE-2011-0862.html http://support.novell.com/security/cve/CVE-2011-0864.html http://support.novell.com/security/cve/CVE-2011-0865.html http://support.novell.com/security/cve/CVE-2011-0867.html http://support.novell.com/security/cve/CVE-2011-0868.html http://support.novell.com/security/cve/CVE-2011-0869.html http://support.novell.com/security/cve/CVE-2011-0870.html http://support.novell.com/security/cve/CVE-2011-0871.html http://support.novell.com/security/cve/CVE-2011-0872.html https://bugzilla.novell.com/596177 https://bugzilla.novell.com/698739

1 0

openSUSE-SU-2011:0705-1: VUL-1: git-web xss
by opensuse-security＠opensuse.org 28 Jun '11

28 Jun '11

openSUSE Security Update: VUL-1: git-web xss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0705-1 Rating: low References: #698456 Cross-References: CVE-2011-2186 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Users with commit access to repos served by git-web could cause cross site scripting (XSS) issues with XML files (CVE-2011-2186). Due to a differently formatted /etc/mime.types openSUSE is not affected by default. This update nevertheless turns on git-web's XSS protection mechanism to avoid similar problems in the future. To turn XSS protection off again put the following line in /etc/gitweb.conf: $prevent_xss = 0; Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch git-web-4756 - openSUSE 11.3: zypper in -t patch git-web-4756 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): git-web-1.7.3.4-4.5.1 - openSUSE 11.3 (i586 x86_64): git-web-1.7.1-2.5.1 References: http://support.novell.com/security/cve/CVE-2011-2186.html https://bugzilla.novell.com/698456

1 0

openSUSE-SU-2011:0695-1: important: subversion: security udpate
by opensuse-security＠opensuse.org 24 Jun '11

24 Jun '11

openSUSE Security Update: subversion: security udpate ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0695-1 Rating: important References: #698205 Cross-References: CVE-2011-1752 CVE-2011-1783 CVE-2011-1921 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. It includes one version update. Description: Subversion was updated to version 1.6.17 to fix several security issues: - CVE-2011-1752: The mod_dav_svn Apache HTTPD server module can be crashed though when asked to deliver baselined WebDAV resources. - CVE-2011-1783: The mod_dav_svn Apache HTTPD server module can trigger a loop which consumes all available memory on the system. - CVE-2011-1921: The mod_dav_svn Apache HTTPD server module may leak to remote users the file contents of files configured to be unreadable by those users. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libsvn_auth_gnome_keyring-1-0-4688 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.6.17]: libsvn_auth_gnome_keyring-1-0-1.6.17-1.2.1 libsvn_auth_kwallet-1-0-1.6.17-1.2.1 subversion-1.6.17-1.2.1 subversion-devel-1.6.17-1.2.1 subversion-perl-1.6.17-1.2.1 subversion-python-1.6.17-1.2.1 subversion-ruby-1.6.17-1.2.1 subversion-server-1.6.17-1.2.1 subversion-tools-1.6.17-1.2.1 References: http://support.novell.com/security/cve/CVE-2011-1752.html http://support.novell.com/security/cve/CVE-2011-1783.html http://support.novell.com/security/cve/CVE-2011-1921.html https://bugzilla.novell.com/698205

1 0

openSUSE-SU-2011:0694-1: moderate: libgnomesu
by opensuse-security＠opensuse.org 24 Jun '11

24 Jun '11

openSUSE Security Update: libgnomesu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0694-1 Rating: moderate References: #695627 Cross-References: CVE-2011-1946 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The libgnomesu pam backend did not check the return value of the setuid() functions. Local users could exploit that to gain root privileges (CVE-2011-1946). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libgnomesu-4734 - openSUSE 11.3: zypper in -t patch libgnomesu-4734 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libgnomesu-1.0.0-329.334.1 libgnomesu-devel-1.0.0-329.334.1 libgnomesu0-1.0.0-329.334.1 - openSUSE 11.4 (noarch): libgnomesu-lang-1.0.0-329.334.1 - openSUSE 11.3 (i586 x86_64): libgnomesu-1.0.0-322.3.1 libgnomesu-devel-1.0.0-322.3.1 libgnomesu0-1.0.0-322.3.1 - openSUSE 11.3 (noarch): libgnomesu-lang-1.0.0-322.3.1 References: http://support.novell.com/security/cve/CVE-2011-1946.html https://bugzilla.novell.com/695627

1 0

openSUSE-SU-2011:0693-1: important: subversion security udpate
by opensuse-security＠opensuse.org 24 Jun '11

24 Jun '11

openSUSE Security Update: subversion security udpate ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0693-1 Rating: important References: #676949 #688968 #698205 Cross-References: CVE-2011-0715 CVE-2011-1752 CVE-2011-1783 CVE-2011-1921 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: - CVE-2011-1752: The mod_dav_svn Apache HTTPD server module can be crashed though when asked to deliver baselined WebDAV resources. - CVE-2011-1783: The mod_dav_svn Apache HTTPD server module can trigger a loop which consumes all available memory on the system. - CVE-2011-1921: The mod_dav_svn Apache HTTPD server module may leak to remote users the file contents of files configured to be unreadable by those users. - CVE-2011-0715: Remote attackers could crash an svn server by causing a NULL deref Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libsvn_auth_gnome_keyring-1-0-4689 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.6.9-4.7.1 libsvn_auth_kwallet-1-0-1.6.9-4.7.1 subversion-1.6.9-4.7.1 subversion-devel-1.6.9-4.7.1 subversion-perl-1.6.9-4.7.1 subversion-python-1.6.9-4.7.1 subversion-ruby-1.6.9-4.7.1 subversion-server-1.6.9-4.7.1 subversion-tools-1.6.9-4.7.1 References: http://support.novell.com/security/cve/CVE-2011-0715.html http://support.novell.com/security/cve/CVE-2011-1752.html http://support.novell.com/security/cve/CVE-2011-1783.html http://support.novell.com/security/cve/CVE-2011-1921.html https://bugzilla.novell.com/676949 https://bugzilla.novell.com/688968 https://bugzilla.novell.com/698205

1 0

openSUSE-SU-2011:0688-1: important: opera
by opensuse-security＠opensuse.org 24 Jun '11

24 Jun '11

openSUSE Security Update: opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0688-1 Rating: important References: #694567 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes one version update. Description: opera 11.11 fixes a security vulnerability. Citing http://www.opera.com/support/kb/view/992/: Framesets allow web pages to hold other pages inside them. Certain frameset constructs are not handled correctly when the page is unloaded, causing a memory corruption. To inject code, additional techniques will have to be employed. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch opera-4588 - openSUSE 11.3: zypper in -t patch opera-4588 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 11.11]: opera-11.11-1.2.1 opera-gtk-11.11-1.2.1 opera-kde4-11.11-1.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 11.11]: opera-11.11-1.2.1 opera-gtk-11.11-1.2.1 opera-kde4-11.11-1.2.1 References: https://bugzilla.novell.com/694567

1 0

openSUSE-RU-2011:0665-1: libpcap fixes a wrong packets truncation
by maintenance＠opensuse.org 21 Jun '11

21 Jun '11

openSUSE Recommended Update: libpcap fixes a wrong packets truncation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0665-1 Rating: low References: #674278 #694779 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: tcpdump/libpcap does not use snaplen correctly and sometimes captures less bytes then requested. This update also fixes captures on bonding interfaces. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libpcap-4674 - openSUSE 11.3: zypper in -t patch libpcap-4674 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libpcap-devel-1.1.1-5.6.1 libpcap1-1.1.1-5.6.1 - openSUSE 11.4 (x86_64): libpcap1-32bit-1.1.1-5.6.1 - openSUSE 11.3 (i586 x86_64): libpcap-devel-1.1.1-2.3.1 libpcap1-1.1.1-2.3.1 - openSUSE 11.3 (x86_64): libpcap1-32bit-1.1.1-2.3.1 References: https://bugzilla.novell.com/674278 https://bugzilla.novell.com/694779

1 0

openSUSE-RU-2011:0664-1: openSUSE Release
by maintenance＠opensuse.org 21 Jun '11

21 Jun '11

openSUSE Recommended Update: openSUSE Release ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0664-1 Rating: low References: #694784 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: openSUSE Release Notes Update: - Bug 694784 - NFS shares not mounted at boot in openSUSE 11.4. - Translation update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch release-notes-openSUSE-4725 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch) [New Version: 11.4.5]: release-notes-openSUSE-11.4.5-0.2.1 References: https://bugzilla.novell.com/694784

1 0

openSUSE-RU-2011:0661-1: moderate: clamav to 0.97.1
by maintenance＠opensuse.org 20 Jun '11

20 Jun '11

openSUSE Recommended Update: clamav to 0.97.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0661-1 Rating: moderate References: #698999 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update provides ClamAV 0.97.1: * libclamav/mew.c: harden boundary check on e8/e9 fixup * libclamav/matcher-hash.c: in hm_sort don't swap an item with itself (bb#2818) * freshclam/manager.c: fix return code of Rfc2822DateTime() (bb#2809) * libclamav/pdf.c: better detection for encrypted PDFs (bb #2448) * libclamav/c++: add support for building with external LLVM 2.9, and drop external 2.8 support * clamd: log request ip address for instream scans #bb2592 * libclamav/c++/llvm/lib/Target/X86/X86InstrInfo.td: bb #2763 don't assert on AVX chips (Intel Core i5 and i7) * sigtool: properly normalize html files (bb#2764) * sigtool/sigtool.c: fix formatting of hash dbs (bb#2765) * freshclam: add mirror statistics mechanism * libclamav/pe_icons.c: don't sigbus on sparc (bb#2695) * libclamav/pe.c: reset corrupted status before bytecode hooks (bb#2544) * sigtool, freshclam: put .info on top of container to speed up loading * sigtool: fix --verify-cdiff * sigtool: allow arbitrary names for --build * clamdscan: fix file exclusion (bb#2579) * clamd: add new option ClamukoExcludeUID (bb#2260) * libclamav/elf.c: fix incorrect detection of Broken.Executable (bb#2580) * shared/output.c: fix empty lines in syslog (bb#2578) * clamd: update description of ReadTimeout (bb#2565) * clamd: add new config option BytecodeUnsigned (bb#2537); drop "None" from BytecodeSecurity * clamscan: add new switch --bytecode-unsigned and drop --bytecode-trust-all * sigtool/sigtool.c: improve handling of bytecode.info (bb#2292) * libclamav/others.c: make sure TLS key is initializer (bb #2588). * configure: check for enable_extended_FILE_stdio (bb #2542) * sigtool/sigtool.c: handle all signature formats with --(list|find)-sigs (bb#2534) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch clamav-4705 - openSUSE 11.3: zypper in -t patch clamav-4705 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.97.1]: clamav-0.97.1-1.3.1 - openSUSE 11.4 (noarch) [New Version: 0.97.1]: clamav-db-0.97.1-1.3.1 - openSUSE 11.3 (i586 x86_64) [New Version: 0.97.1]: clamav-0.97.1-1.2.1 - openSUSE 11.3 (noarch) [New Version: 0.97.1]: clamav-db-0.97.1-1.2.1 References: https://bugzilla.novell.com/698999

1 0

openSUSE-RU-2011:0660-1: translation-update: Collective.
by maintenance＠opensuse.org 20 Jun '11

20 Jun '11

openSUSE Recommended Update: translation-update: Collective. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0660-1 Rating: low References: #410339 #685180 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. It includes one version update. Description: Collective translation update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch translation-update-4703 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch) [New Version: 11.4]: translation-update-11.4-0.4.1 translation-update-cs-11.4-0.4.1 translation-update-da-11.4-0.4.1 translation-update-de-11.4-0.4.1 translation-update-es-11.4-0.4.1 translation-update-fi-11.4-0.4.1 translation-update-fr-11.4-0.4.1 translation-update-gl-11.4-0.4.1 translation-update-hr-11.4-0.4.1 translation-update-hu-11.4-0.4.1 translation-update-it-11.4-0.4.1 translation-update-ja-11.4-0.4.1 translation-update-ka-11.4-0.4.1 translation-update-km-11.4-0.4.1 translation-update-ko-11.4-0.4.1 translation-update-nb-11.4-0.4.1 translation-update-nl-11.4-0.4.1 translation-update-pa-11.4-0.4.1 translation-update-pl-11.4-0.4.1 translation-update-pt-11.4-0.4.1 translation-update-pt_BR-11.4-0.4.1 translation-update-ro-11.4-0.4.1 translation-update-ru-11.4-0.4.1 translation-update-sk-11.4-0.4.1 translation-update-uk-11.4-0.4.1 translation-update-wa-11.4-0.4.1 References: https://bugzilla.novell.com/410339 https://bugzilla.novell.com/685180

1 0

openSUSE-SU-2011:0655-1: unixODBC
by opensuse-security＠opensuse.org 20 Jun '11

20 Jun '11

openSUSE Security Update: unixODBC ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0655-1 Rating: low References: #678796 Cross-References: CVE-2011-1145 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Specially crafted reply of a malicious server could overflow a buffer in unixODBC (CVE-2011-1145). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch unixODBC-4713 - openSUSE 11.3: zypper in -t patch unixODBC-4713 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): unixODBC-2.2.12-207.208.1 unixODBC-devel-2.2.12-207.208.1 - openSUSE 11.4 (x86_64): unixODBC-32bit-2.2.12-207.208.1 unixODBC-devel-32bit-2.2.12-207.208.1 - openSUSE 11.3 (i586 x86_64): unixODBC-2.2.12-204.3.1 unixODBC-devel-2.2.12-204.3.1 - openSUSE 11.3 (x86_64): unixODBC-32bit-2.2.12-204.3.1 unixODBC-devel-32bit-2.2.12-204.3.1 References: http://support.novell.com/security/cve/CVE-2011-1145.html https://bugzilla.novell.com/678796

1 0

openSUSE-RU-2011:0646-1: desktop-translations: Adding additional translations
by maintenance＠opensuse.org 16 Jun '11

16 Jun '11

openSUSE Recommended Update: desktop-translations: Adding additional translations ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0646-1 Rating: low References: #687311 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update adds the "nn" translations Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch desktop-translations-4701 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): desktop-translations-11.4-8.17.1 References: https://bugzilla.novell.com/687311

1 0

openSUSE-SU-2011:0645-1: moderate: php5
by opensuse-security＠opensuse.org 16 Jun '11

16 Jun '11

openSUSE Security Update: php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0645-1 Rating: moderate References: #677782 #679278 #681194 #681195 #681197 #681210 #681214 #681291 #695689 Cross-References: CVE-2011-0421 CVE-2011-1092 CVE-2011-1148 CVE-2011-1464 CVE-2011-1467 CVE-2011-1468 CVE-2011-1469 CVE-2011-1470 CVE-2011-1471 CVE-2011-1938 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. It includes one version update. Description: This php5 update fixes: - CVE-2011-0421: CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:N/A:P): Input Validation (CWE-20) - CVE-2011-1092: CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P): Numeric Errors (CWE-189) - CVE-2011-1148: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P): Resource Management Errors (CWE-399) - CVE-2011-1464: CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119) - CVE-2011-1467: CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P) - CVE-2011-1468: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P): Resource Management Errors (CWE-399) - CVE-2011-1469: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P) - CVE-2011-1470: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P): Input Validation (CWE-20) - CVE-2011-1471: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P): Numeric Errors (CWE-189) - CVE-2011-1938: CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:N/A:P) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch apache2-mod_php5-4647 - openSUSE 11.3: zypper in -t patch apache2-mod_php5-4647 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apache2-mod_php5-5.3.5-5.14.1 php5-5.3.5-5.14.1 php5-bcmath-5.3.5-5.14.1 php5-bz2-5.3.5-5.14.1 php5-calendar-5.3.5-5.14.1 php5-ctype-5.3.5-5.14.1 php5-curl-5.3.5-5.14.1 php5-dba-5.3.5-5.14.1 php5-devel-5.3.5-5.14.1 php5-dom-5.3.5-5.14.1 php5-enchant-5.3.5-5.14.1 php5-exif-5.3.5-5.14.1 php5-fastcgi-5.3.5-5.14.1 php5-fileinfo-5.3.5-5.14.1 php5-fpm-5.3.5-5.14.1 php5-ftp-5.3.5-5.14.1 php5-gd-5.3.5-5.14.1 php5-gettext-5.3.5-5.14.1 php5-gmp-5.3.5-5.14.1 php5-hash-5.3.5-5.14.1 php5-iconv-5.3.5-5.14.1 php5-imap-5.3.5-5.14.1 php5-intl-5.3.5-5.14.1 php5-json-5.3.5-5.14.1 php5-ldap-5.3.5-5.14.1 php5-mbstring-5.3.5-5.14.1 php5-mcrypt-5.3.5-5.14.1 php5-mysql-5.3.5-5.14.1 php5-odbc-5.3.5-5.14.1 php5-openssl-5.3.5-5.14.1 php5-pcntl-5.3.5-5.14.1 php5-pdo-5.3.5-5.14.1 php5-pgsql-5.3.5-5.14.1 php5-phar-5.3.5-5.14.1 php5-posix-5.3.5-5.14.1 php5-pspell-5.3.5-5.14.1 php5-readline-5.3.5-5.14.1 php5-shmop-5.3.5-5.14.1 php5-snmp-5.3.5-5.14.1 php5-soap-5.3.5-5.14.1 php5-sockets-5.3.5-5.14.1 php5-sqlite-5.3.5-5.14.1 php5-suhosin-5.3.5-5.14.1 php5-sysvmsg-5.3.5-5.14.1 php5-sysvsem-5.3.5-5.14.1 php5-sysvshm-5.3.5-5.14.1 php5-tidy-5.3.5-5.14.1 php5-tokenizer-5.3.5-5.14.1 php5-wddx-5.3.5-5.14.1 php5-xmlreader-5.3.5-5.14.1 php5-xmlrpc-5.3.5-5.14.1 php5-xmlwriter-5.3.5-5.14.1 php5-xsl-5.3.5-5.14.1 php5-zip-5.3.5-5.14.1 php5-zlib-5.3.5-5.14.1 - openSUSE 11.4 (noarch): php5-pear-5.3.5-5.14.1 - openSUSE 11.3 (i586 x86_64) [New Version: 5.3.3]: apache2-mod_php5-5.3.3-0.19.1 php5-5.3.3-0.19.1 php5-bcmath-5.3.3-0.19.1 php5-bz2-5.3.3-0.19.1 php5-calendar-5.3.3-0.19.1 php5-ctype-5.3.3-0.19.1 php5-curl-5.3.3-0.19.1 php5-dba-5.3.3-0.19.1 php5-devel-5.3.3-0.19.1 php5-dom-5.3.3-0.19.1 php5-enchant-5.3.3-0.19.1 php5-exif-5.3.3-0.19.1 php5-fastcgi-5.3.3-0.19.1 php5-fileinfo-5.3.3-0.19.1 php5-ftp-5.3.3-0.19.1 php5-gd-5.3.3-0.19.1 php5-gettext-5.3.3-0.19.1 php5-gmp-5.3.3-0.19.1 php5-hash-5.3.3-0.19.1 php5-iconv-5.3.3-0.19.1 php5-imap-5.3.3-0.19.1 php5-intl-5.3.3-0.19.1 php5-json-5.3.3-0.19.1 php5-ldap-5.3.3-0.19.1 php5-mbstring-5.3.3-0.19.1 php5-mcrypt-5.3.3-0.19.1 php5-mysql-5.3.3-0.19.1 php5-odbc-5.3.3-0.19.1 php5-openssl-5.3.3-0.19.1 php5-pcntl-5.3.3-0.19.1 php5-pdo-5.3.3-0.19.1 php5-pgsql-5.3.3-0.19.1 php5-phar-5.3.3-0.19.1 php5-posix-5.3.3-0.19.1 php5-pspell-5.3.3-0.19.1 php5-readline-5.3.3-0.19.1 php5-shmop-5.3.3-0.19.1 php5-snmp-5.3.3-0.19.1 php5-soap-5.3.3-0.19.1 php5-sockets-5.3.3-0.19.1 php5-sqlite-5.3.3-0.19.1 php5-suhosin-5.3.3-0.19.1 php5-sysvmsg-5.3.3-0.19.1 php5-sysvsem-5.3.3-0.19.1 php5-sysvshm-5.3.3-0.19.1 php5-tidy-5.3.3-0.19.1 php5-tokenizer-5.3.3-0.19.1 php5-wddx-5.3.3-0.19.1 php5-xmlreader-5.3.3-0.19.1 php5-xmlrpc-5.3.3-0.19.1 php5-xmlwriter-5.3.3-0.19.1 php5-xsl-5.3.3-0.19.1 php5-zip-5.3.3-0.19.1 php5-zlib-5.3.3-0.19.1 - openSUSE 11.3 (noarch) [New Version: 5.3.3]: php5-pear-5.3.3-0.19.1 References: http://support.novell.com/security/cve/CVE-2011-0421.html http://support.novell.com/security/cve/CVE-2011-1092.html http://support.novell.com/security/cve/CVE-2011-1148.html http://support.novell.com/security/cve/CVE-2011-1464.html http://support.novell.com/security/cve/CVE-2011-1467.html http://support.novell.com/security/cve/CVE-2011-1468.html http://support.novell.com/security/cve/CVE-2011-1469.html http://support.novell.com/security/cve/CVE-2011-1470.html http://support.novell.com/security/cve/CVE-2011-1471.html http://support.novell.com/security/cve/CVE-2011-1938.html https://bugzilla.novell.com/677782 https://bugzilla.novell.com/679278 https://bugzilla.novell.com/681194 https://bugzilla.novell.com/681195 https://bugzilla.novell.com/681197 https://bugzilla.novell.com/681210 https://bugzilla.novell.com/681214 https://bugzilla.novell.com/681291 https://bugzilla.novell.com/695689

1 0

openSUSE-RU-2011:0644-1: gxditview
by maintenance＠opensuse.org 16 Jun '11

16 Jun '11

openSUSE Recommended Update: gxditview ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0644-1 Rating: low References: #668254 #682913 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues: * 668254: "xditview does not show the tilde character" * 682913: "groff: device X100 is missing" Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch groff-devx-4718 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): gxditview-1.20.1-4.4.1 References: https://bugzilla.novell.com/668254 https://bugzilla.novell.com/682913

1 0

openSUSE-SU-2011:0643-1: moderate: libvirt
by opensuse-security＠opensuse.org 16 Jun '11

16 Jun '11

openSUSE Security Update: libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0643-1 Rating: moderate References: #697904 Cross-References: CVE-2011-2178 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: A regression re-introduced automatic disk probing again which potentially allowed to uses to access arbitrary files (CVE-2011-2178). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libvirt-4712 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libvirt-0.8.8-0.10.1 libvirt-client-0.8.8-0.10.1 libvirt-devel-0.8.8-0.10.1 libvirt-doc-0.8.8-0.10.1 libvirt-python-0.8.8-0.10.1 References: http://support.novell.com/security/cve/CVE-2011-2178.html https://bugzilla.novell.com/697904

1 0

openSUSE-SU-2011:0642-1: groff
by opensuse-security＠opensuse.org 16 Jun '11

16 Jun '11

openSUSE Security Update: groff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0642-1 Rating: low References: #683857 #698290 Cross-References: CVE-2009-5044 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: groff created temporary files in an insecure way. Local attackers could potentially exploit that to overwrite files of other users. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch groff-4709 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): groff-1.20.1-3.4.1 groff-doc-1.20.1-3.4.1 References: http://support.novell.com/security/cve/CVE-2009-5044.html https://bugzilla.novell.com/683857 https://bugzilla.novell.com/698290

1 0

openSUSE-SU-2011:0639-1: moderate: ConsoleKit
by opensuse-security＠opensuse.org 15 Jun '11

15 Jun '11

openSUSE Security Update: ConsoleKit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0639-1 Rating: moderate References: #686150 Cross-References: CVE-2010-4664 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Remote users logged in via e.g. ssh could open a consolekit session that is considered local and therefore gain additional privileges, e.g. via policykit (CVE-2010-4664). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch ConsoleKit-4687 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): ConsoleKit-0.4.1-7.3.1 ConsoleKit-devel-0.4.1-7.3.1 ConsoleKit-x11-0.4.1-7.3.1 - openSUSE 11.3 (x86_64): ConsoleKit-32bit-0.4.1-7.3.1 References: http://support.novell.com/security/cve/CVE-2010-4664.html https://bugzilla.novell.com/686150

1 0