June 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2011:0695-1: important: subversion: security udpate
by opensuse-security＠opensuse.org 24 Jun '11

24 Jun '11

openSUSE Security Update: subversion: security udpate ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0695-1 Rating: important References: #698205 Cross-References: CVE-2011-1752 CVE-2011-1783 CVE-2011-1921 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. It includes one version update. Description: Subversion was updated to version 1.6.17 to fix several security issues: - CVE-2011-1752: The mod_dav_svn Apache HTTPD server module can be crashed though when asked to deliver baselined WebDAV resources. - CVE-2011-1783: The mod_dav_svn Apache HTTPD server module can trigger a loop which consumes all available memory on the system. - CVE-2011-1921: The mod_dav_svn Apache HTTPD server module may leak to remote users the file contents of files configured to be unreadable by those users. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libsvn_auth_gnome_keyring-1-0-4688 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.6.17]: libsvn_auth_gnome_keyring-1-0-1.6.17-1.2.1 libsvn_auth_kwallet-1-0-1.6.17-1.2.1 subversion-1.6.17-1.2.1 subversion-devel-1.6.17-1.2.1 subversion-perl-1.6.17-1.2.1 subversion-python-1.6.17-1.2.1 subversion-ruby-1.6.17-1.2.1 subversion-server-1.6.17-1.2.1 subversion-tools-1.6.17-1.2.1 References: http://support.novell.com/security/cve/CVE-2011-1752.html http://support.novell.com/security/cve/CVE-2011-1783.html http://support.novell.com/security/cve/CVE-2011-1921.html https://bugzilla.novell.com/698205

1 0

openSUSE-SU-2011:0694-1: moderate: libgnomesu
by opensuse-security＠opensuse.org 24 Jun '11

24 Jun '11

openSUSE Security Update: libgnomesu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0694-1 Rating: moderate References: #695627 Cross-References: CVE-2011-1946 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The libgnomesu pam backend did not check the return value of the setuid() functions. Local users could exploit that to gain root privileges (CVE-2011-1946). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libgnomesu-4734 - openSUSE 11.3: zypper in -t patch libgnomesu-4734 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libgnomesu-1.0.0-329.334.1 libgnomesu-devel-1.0.0-329.334.1 libgnomesu0-1.0.0-329.334.1 - openSUSE 11.4 (noarch): libgnomesu-lang-1.0.0-329.334.1 - openSUSE 11.3 (i586 x86_64): libgnomesu-1.0.0-322.3.1 libgnomesu-devel-1.0.0-322.3.1 libgnomesu0-1.0.0-322.3.1 - openSUSE 11.3 (noarch): libgnomesu-lang-1.0.0-322.3.1 References: http://support.novell.com/security/cve/CVE-2011-1946.html https://bugzilla.novell.com/695627

1 0

openSUSE-SU-2011:0693-1: important: subversion security udpate
by opensuse-security＠opensuse.org 24 Jun '11

24 Jun '11

openSUSE Security Update: subversion security udpate ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0693-1 Rating: important References: #676949 #688968 #698205 Cross-References: CVE-2011-0715 CVE-2011-1752 CVE-2011-1783 CVE-2011-1921 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: - CVE-2011-1752: The mod_dav_svn Apache HTTPD server module can be crashed though when asked to deliver baselined WebDAV resources. - CVE-2011-1783: The mod_dav_svn Apache HTTPD server module can trigger a loop which consumes all available memory on the system. - CVE-2011-1921: The mod_dav_svn Apache HTTPD server module may leak to remote users the file contents of files configured to be unreadable by those users. - CVE-2011-0715: Remote attackers could crash an svn server by causing a NULL deref Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libsvn_auth_gnome_keyring-1-0-4689 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.6.9-4.7.1 libsvn_auth_kwallet-1-0-1.6.9-4.7.1 subversion-1.6.9-4.7.1 subversion-devel-1.6.9-4.7.1 subversion-perl-1.6.9-4.7.1 subversion-python-1.6.9-4.7.1 subversion-ruby-1.6.9-4.7.1 subversion-server-1.6.9-4.7.1 subversion-tools-1.6.9-4.7.1 References: http://support.novell.com/security/cve/CVE-2011-0715.html http://support.novell.com/security/cve/CVE-2011-1752.html http://support.novell.com/security/cve/CVE-2011-1783.html http://support.novell.com/security/cve/CVE-2011-1921.html https://bugzilla.novell.com/676949 https://bugzilla.novell.com/688968 https://bugzilla.novell.com/698205

1 0

openSUSE-SU-2011:0688-1: important: opera
by opensuse-security＠opensuse.org 24 Jun '11

24 Jun '11

openSUSE Security Update: opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0688-1 Rating: important References: #694567 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes one version update. Description: opera 11.11 fixes a security vulnerability. Citing http://www.opera.com/support/kb/view/992/: Framesets allow web pages to hold other pages inside them. Certain frameset constructs are not handled correctly when the page is unloaded, causing a memory corruption. To inject code, additional techniques will have to be employed. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch opera-4588 - openSUSE 11.3: zypper in -t patch opera-4588 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 11.11]: opera-11.11-1.2.1 opera-gtk-11.11-1.2.1 opera-kde4-11.11-1.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 11.11]: opera-11.11-1.2.1 opera-gtk-11.11-1.2.1 opera-kde4-11.11-1.2.1 References: https://bugzilla.novell.com/694567

1 0

openSUSE-RU-2011:0665-1: libpcap fixes a wrong packets truncation
by maintenance＠opensuse.org 21 Jun '11

21 Jun '11

openSUSE Recommended Update: libpcap fixes a wrong packets truncation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0665-1 Rating: low References: #674278 #694779 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: tcpdump/libpcap does not use snaplen correctly and sometimes captures less bytes then requested. This update also fixes captures on bonding interfaces. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libpcap-4674 - openSUSE 11.3: zypper in -t patch libpcap-4674 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libpcap-devel-1.1.1-5.6.1 libpcap1-1.1.1-5.6.1 - openSUSE 11.4 (x86_64): libpcap1-32bit-1.1.1-5.6.1 - openSUSE 11.3 (i586 x86_64): libpcap-devel-1.1.1-2.3.1 libpcap1-1.1.1-2.3.1 - openSUSE 11.3 (x86_64): libpcap1-32bit-1.1.1-2.3.1 References: https://bugzilla.novell.com/674278 https://bugzilla.novell.com/694779

1 0

openSUSE-RU-2011:0664-1: openSUSE Release
by maintenance＠opensuse.org 21 Jun '11

21 Jun '11

openSUSE Recommended Update: openSUSE Release ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0664-1 Rating: low References: #694784 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: openSUSE Release Notes Update: - Bug 694784 - NFS shares not mounted at boot in openSUSE 11.4. - Translation update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch release-notes-openSUSE-4725 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch) [New Version: 11.4.5]: release-notes-openSUSE-11.4.5-0.2.1 References: https://bugzilla.novell.com/694784

1 0

openSUSE-RU-2011:0661-1: moderate: clamav to 0.97.1
by maintenance＠opensuse.org 20 Jun '11

20 Jun '11

openSUSE Recommended Update: clamav to 0.97.1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0661-1 Rating: moderate References: #698999 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update provides ClamAV 0.97.1: * libclamav/mew.c: harden boundary check on e8/e9 fixup * libclamav/matcher-hash.c: in hm_sort don't swap an item with itself (bb#2818) * freshclam/manager.c: fix return code of Rfc2822DateTime() (bb#2809) * libclamav/pdf.c: better detection for encrypted PDFs (bb #2448) * libclamav/c++: add support for building with external LLVM 2.9, and drop external 2.8 support * clamd: log request ip address for instream scans #bb2592 * libclamav/c++/llvm/lib/Target/X86/X86InstrInfo.td: bb #2763 don't assert on AVX chips (Intel Core i5 and i7) * sigtool: properly normalize html files (bb#2764) * sigtool/sigtool.c: fix formatting of hash dbs (bb#2765) * freshclam: add mirror statistics mechanism * libclamav/pe_icons.c: don't sigbus on sparc (bb#2695) * libclamav/pe.c: reset corrupted status before bytecode hooks (bb#2544) * sigtool, freshclam: put .info on top of container to speed up loading * sigtool: fix --verify-cdiff * sigtool: allow arbitrary names for --build * clamdscan: fix file exclusion (bb#2579) * clamd: add new option ClamukoExcludeUID (bb#2260) * libclamav/elf.c: fix incorrect detection of Broken.Executable (bb#2580) * shared/output.c: fix empty lines in syslog (bb#2578) * clamd: update description of ReadTimeout (bb#2565) * clamd: add new config option BytecodeUnsigned (bb#2537); drop "None" from BytecodeSecurity * clamscan: add new switch --bytecode-unsigned and drop --bytecode-trust-all * sigtool/sigtool.c: improve handling of bytecode.info (bb#2292) * libclamav/others.c: make sure TLS key is initializer (bb #2588). * configure: check for enable_extended_FILE_stdio (bb #2542) * sigtool/sigtool.c: handle all signature formats with --(list|find)-sigs (bb#2534) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch clamav-4705 - openSUSE 11.3: zypper in -t patch clamav-4705 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.97.1]: clamav-0.97.1-1.3.1 - openSUSE 11.4 (noarch) [New Version: 0.97.1]: clamav-db-0.97.1-1.3.1 - openSUSE 11.3 (i586 x86_64) [New Version: 0.97.1]: clamav-0.97.1-1.2.1 - openSUSE 11.3 (noarch) [New Version: 0.97.1]: clamav-db-0.97.1-1.2.1 References: https://bugzilla.novell.com/698999

1 0

openSUSE-RU-2011:0660-1: translation-update: Collective.
by maintenance＠opensuse.org 20 Jun '11

20 Jun '11

openSUSE Recommended Update: translation-update: Collective. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0660-1 Rating: low References: #410339 #685180 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. It includes one version update. Description: Collective translation update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch translation-update-4703 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch) [New Version: 11.4]: translation-update-11.4-0.4.1 translation-update-cs-11.4-0.4.1 translation-update-da-11.4-0.4.1 translation-update-de-11.4-0.4.1 translation-update-es-11.4-0.4.1 translation-update-fi-11.4-0.4.1 translation-update-fr-11.4-0.4.1 translation-update-gl-11.4-0.4.1 translation-update-hr-11.4-0.4.1 translation-update-hu-11.4-0.4.1 translation-update-it-11.4-0.4.1 translation-update-ja-11.4-0.4.1 translation-update-ka-11.4-0.4.1 translation-update-km-11.4-0.4.1 translation-update-ko-11.4-0.4.1 translation-update-nb-11.4-0.4.1 translation-update-nl-11.4-0.4.1 translation-update-pa-11.4-0.4.1 translation-update-pl-11.4-0.4.1 translation-update-pt-11.4-0.4.1 translation-update-pt_BR-11.4-0.4.1 translation-update-ro-11.4-0.4.1 translation-update-ru-11.4-0.4.1 translation-update-sk-11.4-0.4.1 translation-update-uk-11.4-0.4.1 translation-update-wa-11.4-0.4.1 References: https://bugzilla.novell.com/410339 https://bugzilla.novell.com/685180

1 0

openSUSE-SU-2011:0655-1: unixODBC
by opensuse-security＠opensuse.org 20 Jun '11

20 Jun '11

openSUSE Security Update: unixODBC ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0655-1 Rating: low References: #678796 Cross-References: CVE-2011-1145 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Specially crafted reply of a malicious server could overflow a buffer in unixODBC (CVE-2011-1145). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch unixODBC-4713 - openSUSE 11.3: zypper in -t patch unixODBC-4713 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): unixODBC-2.2.12-207.208.1 unixODBC-devel-2.2.12-207.208.1 - openSUSE 11.4 (x86_64): unixODBC-32bit-2.2.12-207.208.1 unixODBC-devel-32bit-2.2.12-207.208.1 - openSUSE 11.3 (i586 x86_64): unixODBC-2.2.12-204.3.1 unixODBC-devel-2.2.12-204.3.1 - openSUSE 11.3 (x86_64): unixODBC-32bit-2.2.12-204.3.1 unixODBC-devel-32bit-2.2.12-204.3.1 References: http://support.novell.com/security/cve/CVE-2011-1145.html https://bugzilla.novell.com/678796

1 0

openSUSE-RU-2011:0646-1: desktop-translations: Adding additional translations
by maintenance＠opensuse.org 16 Jun '11

16 Jun '11

openSUSE Recommended Update: desktop-translations: Adding additional translations ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0646-1 Rating: low References: #687311 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update adds the "nn" translations Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch desktop-translations-4701 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): desktop-translations-11.4-8.17.1 References: https://bugzilla.novell.com/687311

1 0